@lenne.tech/nest-server 11.43.3 → 12.1.0

package/src/core/common/helpers/process-diagnostics.helper.ts

@@ -62,7 +62,7 @@
 
 import { writeSync } from 'node:fs';
 
-import { redactSensitiveText } from './logging.helper';
+import { redactSensitiveText } from './logging.helper.js';
 
 /**
  * Hard cap for a single diagnostic line.

package/src/core/common/helpers/register-enum.helper.ts

@@ -1,6 +1,6 @@
 import { registerEnumType } from '@nestjs/graphql';
 
-import { enumNameRegistry } from '../decorators/unified-field.decorator';
+import { enumNameRegistry } from '../decorators/unified-field.decorator.js';
 
 /**
  * Tracks which enum objects have been registered for GraphQL via registerEnum/registerEnums.

package/src/core/common/helpers/scim.helper.ts

@@ -1,7 +1,7 @@
-import type { Comparator } from '../types/scim-comparator.type';
-import type { LogicalOperator } from '../types/scim-logical-operator.type';
+import type { Comparator } from '../types/scim-comparator.type.js';
+import type { LogicalOperator } from '../types/scim-logical-operator.type.js';
 
-import { ScimNode } from '../types/scim-node.type';
+import { ScimNode } from '../types/scim-node.type.js';
 
 export function scimToMongo(scim: string): any {
   if (!scim) {

package/src/core/common/helpers/service.helper.ts

@@ -1,17 +1,17 @@
-import bcrypt = require('bcrypt');
+import bcrypt from 'bcrypt';
 import { sha256 } from 'js-sha256';
-import _ = require('lodash');
-import { Types } from 'mongoose';
-
-import { RoleEnum } from '../enums/role.enum';
-import { accessDeniedException } from '../exceptions/access-denied.exception';
-import { PrepareInputOptions } from '../interfaces/prepare-input-options.interface';
-import { PrepareOutputOptions } from '../interfaces/prepare-output-options.interface';
-import { ResolveSelector } from '../interfaces/resolve-selector.interface';
-import { ServiceOptions } from '../interfaces/service-options.interface';
-import { ConfigService } from '../services/config.service';
-import { getStringIds } from './db.helper';
-import { clone, plainToInstanceClean, processDeep } from './input.helper';
+import _ from 'lodash';
+
+import { RoleEnum } from '../enums/role.enum.js';
+import { accessDeniedException } from '../exceptions/access-denied.exception.js';
+import { PrepareInputOptions } from '../interfaces/prepare-input-options.interface.js';
+import { PrepareOutputOptions } from '../interfaces/prepare-output-options.interface.js';
+import { ResolveSelector } from '../interfaces/resolve-selector.interface.js';
+import { ServiceOptions } from '../interfaces/service-options.interface.js';
+import { ConfigService } from '../services/config.service.js';
+import { getStringIds } from './db.helper.js';
+import { clone, plainToInstanceClean, processDeep } from './input.helper.js';
+import { isObjectIdLike } from './id.helper.js';
 
 // Secret field names for recursive removal in prepareOutput — allocated once, never change.
 // Only fields that are NEVER needed internally (hashed passwords, one-time tokens).
@@ -136,7 +136,7 @@ export async function prepareInput<T = any>(
     input = processDeep(
       input,
       (property) => {
-        if (property instanceof Types.ObjectId) {
+        if (isObjectIdLike(property)) {
           property = getStringIds(property);
         }
         return property;
@@ -272,7 +272,7 @@ export async function prepareOutput<T = { [key: string]: any; map: (...args: any
     output = processDeep(
       output,
       (property) => {
-        if (doObjectIds && property instanceof Types.ObjectId) {
+        if (doObjectIds && isObjectIdLike(property)) {
           return property.toHexString();
         }
         if (doSecrets && property && typeof property === 'object' && !Array.isArray(property)) {

package/src/core/common/helpers/swagger.helper.ts

@@ -4,30 +4,30 @@ import { ModulesContainer } from '@nestjs/core';
 import { SchedulerRegistry } from '@nestjs/schedule';
 import { DocumentBuilder, SwaggerModule } from '@nestjs/swagger';
 
-import { getMountedMcpOAuth } from '../../modules/ai/helpers/ai-mcp-oauth.registry';
-import { resolveApiTokenConfig } from '../../modules/api-token/core-api-token.helpers';
-import { API_TOKEN_SCOPES_KEY } from '../../modules/api-token/core-api-token.constants';
-import { CoreAuthController } from '../../modules/auth/core-auth.controller';
-import { isLegacyEndpointEnabled } from '../../modules/auth/helpers/legacy-endpoints.helper';
-import { resolveBetterAuthSessionCookieName } from '../../modules/better-auth/better-auth-cookie-prefix.helper';
+import { getMountedMcpOAuth } from '../../modules/ai/helpers/ai-mcp-oauth.registry.js';
+import { resolveApiTokenConfig } from '../../modules/api-token/core-api-token.helpers.js';
+import { API_TOKEN_SCOPES_KEY } from '../../modules/api-token/core-api-token.constants.js';
+import { CoreAuthController } from '../../modules/auth/core-auth.controller.js';
+import { isLegacyEndpointEnabled } from '../../modules/auth/helpers/legacy-endpoints.helper.js';
+import { resolveBetterAuthSessionCookieName } from '../../modules/better-auth/better-auth-cookie-prefix.helper.js';
 import {
   isBetterAuthOpenApiPath,
   isControllerHandledPath,
   isUnavailableOperation,
   switchedOffBetterAuthPaths,
-} from '../../modules/better-auth/core-better-auth-openapi.helper';
-import { CoreBetterAuthUserMapper } from '../../modules/better-auth/core-better-auth-user.mapper';
-import { CoreBetterAuthController } from '../../modules/better-auth/core-better-auth.controller';
-import { CoreBetterAuthService } from '../../modules/better-auth/core-better-auth.service';
-import { CoreHubActionsController } from '../../modules/hub/core-hub-actions.controller';
-import { CoreHubController } from '../../modules/hub/core-hub.controller';
-import { isHubEnabled, normalizeHubConfig } from '../../modules/hub/hub-config.helper';
-import { SKIP_TENANT_CHECK_KEY } from '../../modules/tenant/core-tenant.decorators';
-import { API_METHODS_KEY } from '../decorators/api-methods.decorator';
-import { mergeRolesMetadata } from '../../modules/tenant/core-tenant.helpers';
-import { RoleEnum } from '../enums/role.enum';
-import { ConfigService } from '../services/config.service';
-import { isCookiesEnabled } from './cookies.helper';
+} from '../../modules/better-auth/core-better-auth-openapi.helper.js';
+import { CoreBetterAuthUserMapper } from '../../modules/better-auth/core-better-auth-user.mapper.js';
+import { CoreBetterAuthController } from '../../modules/better-auth/core-better-auth.controller.js';
+import { CoreBetterAuthService } from '../../modules/better-auth/core-better-auth.service.js';
+import { CoreHubActionsController } from '../../modules/hub/core-hub-actions.controller.js';
+import { CoreHubController } from '../../modules/hub/core-hub.controller.js';
+import { isHubEnabled, normalizeHubConfig } from '../../modules/hub/hub-config.helper.js';
+import { SKIP_TENANT_CHECK_KEY } from '../../modules/tenant/core-tenant.decorators.js';
+import { API_METHODS_KEY } from '../decorators/api-methods.decorator.js';
+import { mergeRolesMetadata } from '../../modules/tenant/core-tenant.helpers.js';
+import { RoleEnum } from '../enums/role.enum.js';
+import { ConfigService } from '../services/config.service.js';
+import { isCookiesEnabled } from './cookies.helper.js';
 
 import type { INestApplication, Type } from '@nestjs/common';
 import type {
@@ -38,11 +38,14 @@ import type {
   ReferenceObject,
   TagObject,
 } from '@nestjs/swagger';
-import type { IMountedMcpOAuth } from '../../modules/ai/helpers/ai-mcp-oauth.registry';
-import type { IBetterAuthOpenApiDocument } from '../../modules/better-auth/core-better-auth-openapi.helper';
-import type { ResolvedHubConfig } from '../../modules/hub/interfaces/hub-config.interface';
-import type { IServerOptions } from '../interfaces/server-options.interface';
-import type { ISwaggerApiTokenViewOptions, ISwaggerSetupOptions } from '../interfaces/swagger-setup-options.interface';
+import type { IMountedMcpOAuth } from '../../modules/ai/helpers/ai-mcp-oauth.registry.js';
+import type { IBetterAuthOpenApiDocument } from '../../modules/better-auth/core-better-auth-openapi.helper.js';
+import type { ResolvedHubConfig } from '../../modules/hub/interfaces/hub-config.interface.js';
+import type { IServerOptions } from '../interfaces/server-options.interface.js';
+import type {
+  ISwaggerApiTokenViewOptions,
+  ISwaggerSetupOptions,
+} from '../interfaces/swagger-setup-options.interface.js';
 
 /**
  * Swagger setup that describes how a route is actually reached (since 11.42.7).
@@ -87,11 +90,21 @@ export const SWAGGER_API_TOKEN_SCOPES_EXTENSION = 'x-api-token-scopes';
 
 /**
  * Fields of an OpenAPI path item that are not operations. Every other key is an operation: they are read
- * from the path item rather than from a list of HTTP methods, because `@All()` makes @nestjs/swagger emit
- * a `search` operation too, which no OpenAPI version lists — a fixed list left it unenriched.
+ * from the path item rather than from a list of HTTP methods, so a method outside the usual set is
+ * enriched like any other.
  */
 const PATH_ITEM_FIELDS = new Set(['$ref', 'description', 'parameters', 'servers', 'summary']);
 
+/**
+ * OpenAPI 3.2's container for operations whose method is outside the fixed set, keyed by the method in
+ * upper case (`SEARCH`, `QUERY`). @nestjs/swagger 12 emits `@All()` as these methods too: into this
+ * container when the document is 3.2 (`configureBuilder` → `setOpenAPIVersion('3.2.0')`), and not at all
+ * in the default 3.0 document. Until 11.x it wrote a bare `search` key, which no OpenAPI version allows.
+ * The container is neither an operation nor a path-level field: its entries are operations in their own
+ * right, and every reader and writer here goes through {@link operationsOf} / {@link removeOperation}.
+ */
+const ADDITIONAL_OPERATIONS = 'additionalOperations';
+
 /** An operation with the vendor extension this helper writes */
 type EnrichedOperation = OperationObject & { [SWAGGER_API_TOKEN_SCOPES_EXTENSION]?: string[] };
 
@@ -290,7 +303,7 @@ export function buildSwaggerDocument(
 
   for (const [path, method] of switchedOff) {
     const item = document.paths[path] as Record<string, unknown>;
-    delete item[method];
+    removeOperation(item, method);
     if (!operationsOf(document.paths[path]).length) {
       delete document.paths[path];
     }
@@ -699,8 +712,8 @@ export function buildApiTokenSwaggerDocument(
 
   const paths: OpenAPIObject['paths'] = {};
   for (const [path, item] of Object.entries(view.paths)) {
-    const kept: Record<string, EnrichedOperation> = {};
-    for (const [method, operation] of operationsOf(item)) {
+    const kept: Record<string, unknown> = {};
+    for (const [method, operation, additional] of operationsOf(item)) {
       if (!operation[SWAGGER_API_TOKEN_SCOPES_EXTENSION]?.length) {
         continue;
       }
@@ -711,7 +724,7 @@ export function buildApiTokenSwaggerDocument(
             !isRef(parameter) || parameter.$ref !== `#/components/parameters/${SWAGGER_TENANT_HEADER_PARAMETER}`,
         );
       }
-      kept[method] = operation;
+      putOperation(kept, method, operation, additional);
     }
     if (Object.keys(kept).length) {
       paths[path] = { ...pathLevelFields(item), ...kept };
@@ -909,11 +922,57 @@ function isPathItemField(key: string): boolean {
   return PATH_ITEM_FIELDS.has(key) || key.startsWith('x-');
 }
 
-/** The operations of a path item, keyed by their lower-case HTTP method (`get`, ..., `search`). */
-function operationsOf(item: PathItemObject): [string, EnrichedOperation][] {
-  return Object.entries(item).filter(
-    ([key, value]) => !isPathItemField(key) && typeof value === 'object' && value !== null && !Array.isArray(value),
-  ) as [string, EnrichedOperation][];
+function isOperationValue(value: unknown): value is EnrichedOperation {
+  return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+
+/**
+ * The operations of a path item, keyed by their lower-case HTTP method (`get`, ..., `search`) — those
+ * in OpenAPI 3.2's `additionalOperations` included, marked by the third element.
+ */
+function operationsOf(item: PathItemObject): [string, EnrichedOperation, boolean][] {
+  const standard = Object.entries(item)
+    .filter(([key, value]) => !isPathItemField(key) && key !== ADDITIONAL_OPERATIONS && isOperationValue(value))
+    .map(([key, value]) => [key, value, false] as [string, EnrichedOperation, boolean]);
+  const additional = Object.entries((item as Record<string, unknown>)[ADDITIONAL_OPERATIONS] ?? {})
+    .filter(([, value]) => isOperationValue(value))
+    .map(([key, value]) => [key.toLowerCase(), value, true] as [string, EnrichedOperation, boolean]);
+  return [...standard, ...additional];
+}
+
+/** Store an operation where {@link operationsOf} found it: a method key, or `additionalOperations`. */
+function putOperation(
+  item: Record<string, unknown>,
+  method: string,
+  operation: EnrichedOperation,
+  additional: boolean,
+): void {
+  if (!additional) {
+    item[method] = operation;
+    return;
+  }
+  const container = (item[ADDITIONAL_OPERATIONS] ??= {}) as Record<string, unknown>;
+  container[method.toUpperCase()] = operation;
+}
+
+/** Remove an operation wherever it is stored, and an `additionalOperations` it leaves empty. */
+function removeOperation(item: Record<string, unknown>, method: string): void {
+  if (method !== ADDITIONAL_OPERATIONS && method in item) {
+    delete item[method];
+    return;
+  }
+  const container = item[ADDITIONAL_OPERATIONS] as Record<string, unknown> | undefined;
+  if (!container) {
+    return;
+  }
+  for (const key of Object.keys(container)) {
+    if (key.toLowerCase() === method) {
+      delete container[key];
+    }
+  }
+  if (!Object.keys(container).length) {
+    delete item[ADDITIONAL_OPERATIONS];
+  }
 }
 
 /** Fields of a path item that are not operations (summary, description, servers, shared parameters). */

package/src/core/common/inputs/combined-filter.input.ts

@@ -7,4 +7,4 @@
  * This file remains only so existing deep imports of `.../inputs/combined-filter.input` keep
  * resolving. Do NOT move the class back here.
  */
-export { CombinedFilterInput } from './filter.input';
+export { CombinedFilterInput } from './filter.input.js';

package/src/core/common/inputs/core-input.input.ts

@@ -1,5 +1,5 @@
-import { map } from '../helpers/model.helper';
-import { CoreModel } from '../models/core-model.model';
+import { map } from '../helpers/model.helper.js';
+import { CoreModel } from '../models/core-model.model.js';
 
 /**
  * Core Input

package/src/core/common/inputs/filter.input.ts

@@ -33,13 +33,13 @@
  */
 import { InputType } from '@nestjs/graphql';
 
-import { Restricted } from '../decorators/restricted.decorator';
-import { UnifiedField } from '../decorators/unified-field.decorator';
-import { LogicalOperatorEnum } from '../enums/logical-operator.enum';
-import { RoleEnum } from '../enums/role.enum';
-import { maps } from '../helpers/model.helper';
-import { CoreInput } from './core-input.input';
-import { SingleFilterInput } from './single-filter.input';
+import { Restricted } from '../decorators/restricted.decorator.js';
+import { UnifiedField } from '../decorators/unified-field.decorator.js';
+import { LogicalOperatorEnum } from '../enums/logical-operator.enum.js';
+import { RoleEnum } from '../enums/role.enum.js';
+import { maps } from '../helpers/model.helper.js';
+import { CoreInput } from './core-input.input.js';
+import { SingleFilterInput } from './single-filter.input.js';
 
 /**
  * Combination of multiple filters via logical operator.

package/src/core/common/inputs/single-filter.input.ts

@@ -1,11 +1,11 @@
 import { InputType } from '@nestjs/graphql';
 
-import { Restricted } from '../decorators/restricted.decorator';
-import { UnifiedField } from '../decorators/unified-field.decorator';
-import { ComparisonOperatorEnum } from '../enums/comparison-operator.enum';
-import { RoleEnum } from '../enums/role.enum';
-import { JSON } from '../scalars/json.scalar';
-import { CoreInput } from './core-input.input';
+import { Restricted } from '../decorators/restricted.decorator.js';
+import { UnifiedField } from '../decorators/unified-field.decorator.js';
+import { ComparisonOperatorEnum } from '../enums/comparison-operator.enum.js';
+import { RoleEnum } from '../enums/role.enum.js';
+import { JSON } from '../scalars/json.scalar.js';
+import { CoreInput } from './core-input.input.js';
 
 /**
  * Input for a configuration of a filter

package/src/core/common/inputs/sort.input.ts

@@ -1,10 +1,10 @@
 import { InputType } from '@nestjs/graphql';
 
-import { Restricted } from '../decorators/restricted.decorator';
-import { UnifiedField } from '../decorators/unified-field.decorator';
-import { RoleEnum } from '../enums/role.enum';
-import { SortOrderEnum } from '../enums/sort-order.emum';
-import { CoreInput } from './core-input.input';
+import { Restricted } from '../decorators/restricted.decorator.js';
+import { UnifiedField } from '../decorators/unified-field.decorator.js';
+import { RoleEnum } from '../enums/role.enum.js';
+import { SortOrderEnum } from '../enums/sort-order.emum.js';
+import { CoreInput } from './core-input.input.js';
 
 /**
  * Sorting the returned elements

package/src/core/common/interceptors/check-response.interceptor.ts

@@ -2,9 +2,9 @@ import { CallHandler, ExecutionContext, Injectable, NestInterceptor } from '@nes
 import { Observable } from 'rxjs';
 import { map } from 'rxjs/operators';
 
-import { checkRestricted } from '../decorators/restricted.decorator';
-import { getContextData } from '../helpers/context.helper';
-import { ConfigService } from '../services/config.service';
+import { checkRestricted } from '../decorators/restricted.decorator.js';
+import { getContextData } from '../helpers/context.helper.js';
+import { ConfigService } from '../services/config.service.js';
 
 /**
  * Interceptor to check the response data for current user

package/src/core/common/interceptors/check-security.interceptor.ts

@@ -2,11 +2,11 @@ import { CallHandler, ExecutionContext, Injectable, NestInterceptor } from '@nes
 import { Observable } from 'rxjs';
 import { map } from 'rxjs/operators';
 
-import { getContextData } from '../helpers/context.helper';
-import { hasRestrictionsCheckedMarker } from '../decorators/restrictions-checked.marker';
-import { getStringIds } from '../helpers/db.helper';
-import { processDeep } from '../helpers/input.helper';
-import { ConfigService } from '../services/config.service';
+import { getContextData } from '../helpers/context.helper.js';
+import { hasRestrictionsCheckedMarker } from '../decorators/restrictions-checked.marker.js';
+import { getStringIds } from '../helpers/db.helper.js';
+import { processDeep } from '../helpers/input.helper.js';
+import { ConfigService } from '../services/config.service.js';
 
 /**
  * Verification of all outgoing data via securityCheck

package/src/core/common/interceptors/response-model.interceptor.ts

@@ -2,11 +2,11 @@ import { CallHandler, ExecutionContext, Injectable, Logger, NestInterceptor } fr
 import { Observable } from 'rxjs';
 import { map } from 'rxjs/operators';
 
-import { resolveResponseModelClass } from '../helpers/interceptor.helper';
-import { CoreModel } from '../models/core-model.model';
-import { ConfigService } from '../services/config.service';
-import { ModelRegistry } from '../services/model-registry.service';
-import { hasRestrictionsCheckedMarker } from '../decorators/restrictions-checked.marker';
+import { resolveResponseModelClass } from '../helpers/interceptor.helper.js';
+import { CoreModel } from '../models/core-model.model.js';
+import { ConfigService } from '../services/config.service.js';
+import { ModelRegistry } from '../services/model-registry.service.js';
+import { hasRestrictionsCheckedMarker } from '../decorators/restrictions-checked.marker.js';
 
 /**
  * Interceptor that automatically converts plain objects and Mongoose documents

package/src/core/common/interceptors/translate-response.interceptor.ts

@@ -3,7 +3,7 @@ import { GqlContextType, GqlExecutionContext } from '@nestjs/graphql';
 import { Observable } from 'rxjs';
 import { map } from 'rxjs/operators';
 
-import { applyTranslationsRecursively } from '../helpers/service.helper';
+import { applyTranslationsRecursively } from '../helpers/service.helper.js';
 
 /**
  * Interceptor that automatically applies translations from _translations

package/src/core/common/interfaces/core-persistence-model.interface.ts

@@ -1,4 +1,4 @@
-import { CorePersistenceModel } from '../../..';
+import { CorePersistenceModel } from '../../../index.js';
 
 export interface ICorePersistenceModel<T extends CorePersistenceModel = any> {
   [key: string]: any;

package/src/core/common/interfaces/cron-job-config-with-time-zone.interface.ts

@@ -1,6 +1,6 @@
 import { CronJobParams, CronOnCompleteCommand } from 'cron';
 
-import { CronJobConfig } from './cron-job-config.interface';
+import { CronJobConfig } from './cron-job-config.interface.js';
 
 /**
  * Interface for cron job configuration

package/src/core/common/interfaces/cron-job-config-with-utc-offset.interface.ts

@@ -1,6 +1,6 @@
 import { CronJobParams, CronOnCompleteCommand } from 'cron';
 
-import { CronJobConfig } from './cron-job-config.interface';
+import { CronJobConfig } from './cron-job-config.interface.js';
 
 /**
  * Interface for cron job configuration

package/src/core/common/interfaces/scim-array-filter-node.interface.ts

@@ -1,4 +1,4 @@
-import { ScimNode } from '../types/scim-node.type';
+import { ScimNode } from '../types/scim-node.type.js';
 
 /** Represents a SCIM array filter node, e.g. emails[type eq "work"] */
 export interface ArrayFilterNode {

package/src/core/common/interfaces/scim-condition-node.interface.ts

@@ -1,4 +1,4 @@
-import { Comparator } from '../types/scim-comparator.type';
+import { Comparator } from '../types/scim-comparator.type.js';
 
 /** Represents a single SCIM condition such as userName eq "Joe" */
 export interface ConditionNode {

package/src/core/common/interfaces/scim-logical-node.interface.ts

@@ -1,5 +1,5 @@
-import { LogicalOperator } from '../types/scim-logical-operator.type';
-import { ScimNode } from '../types/scim-node.type';
+import { LogicalOperator } from '../types/scim-logical-operator.type.js';
+import { ScimNode } from '../types/scim-node.type.js';
 
 /** Represents a logical operator node (e.g., X and Y, A or B) */
 export interface LogicalNode {