@mbc-cqrs-serverless/core 1.3.3 → 1.3.4

package/dist/decorators/constants.js

@@ -1,9 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ROLE_METADATA = exports.DATA_SYNC_HANDLER_METADATA = exports.EVENT_FACTORY_METADATA = exports.EVENT_HANDLER_METADATA = exports.EVENT_METADATA = void 0;
+exports.GROUP_ROLE_RESOLVER_METADATA = exports.NOTIFICATION_TRANSPORT_METADATA = exports.ROLE_METADATA = exports.DATA_SYNC_HANDLER_METADATA = exports.EVENT_FACTORY_METADATA = exports.EVENT_HANDLER_METADATA = exports.EVENT_METADATA = void 0;
 exports.EVENT_METADATA = '__event__';
 exports.EVENT_HANDLER_METADATA = '__eventHandler__';
 exports.EVENT_FACTORY_METADATA = '__eventFactory__';
 exports.DATA_SYNC_HANDLER_METADATA = '__dataSyncHandler__';
 exports.ROLE_METADATA = '__allowedRoles__';
+exports.NOTIFICATION_TRANSPORT_METADATA = '__notificationTransport__';
+exports.GROUP_ROLE_RESOLVER_METADATA = '__groupRoleResolver__';
 //# sourceMappingURL=constants.js.map

package/dist/decorators/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/decorators/constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,cAAc,GAAG,WAAW,CAAA;AAC5B,QAAA,sBAAsB,GAAG,kBAAkB,CAAA;AAC3C,QAAA,sBAAsB,GAAG,kBAAkB,CAAA;AAC3C,QAAA,0BAA0B,GAAG,qBAAqB,CAAA;AAClD,QAAA,aAAa,GAAG,kBAAkB,CAAA"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/decorators/constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,cAAc,GAAG,WAAW,CAAA;AAC5B,QAAA,sBAAsB,GAAG,kBAAkB,CAAA;AAC3C,QAAA,sBAAsB,GAAG,kBAAkB,CAAA;AAC3C,QAAA,0BAA0B,GAAG,qBAAqB,CAAA;AAClD,QAAA,aAAa,GAAG,kBAAkB,CAAA;AAClC,QAAA,+BAA+B,GAAG,2BAA2B,CAAA;AAC7D,QAAA,4BAA4B,GAAG,uBAAuB,CAAA"}

package/dist/decorators/data-sync-handler.decorator.d.ts

@@ -1,2 +1,21 @@
 import 'reflect-metadata';
+/**
+ * Marks a class as a DataSyncHandler for the specified command table.
+ *
+ * @param commandTableName - The raw table name as passed to `CommandModule.register({ tableName })`.
+ *   Do NOT use the fully-qualified table name (e.g. "dev-my-table-command").
+ *   Pass the same raw value as in the `register()` call (e.g. "my-table").
+ *   A wrong name silently prevents handler discovery with no error or warning.
+ *
+ * Recommended usage: prefer `CommandModule.register({ dataSyncHandlers: [MyHandler] })` as the
+ * primary registration path. Use this decorator only when auto-discovery across modules is needed.
+ * Mixing both paths for the same handler class causes duplicate registration (guarded by
+ * CommandService which logs a warning and deduplicates).
+ *
+ * **Minification warning:** The async (Step Functions) execution path identifies handlers by
+ * `constructor.name` at runtime. If you bundle with esbuild, webpack + terser, or any minifier,
+ * you MUST enable class-name preservation (e.g. `keepNames: true` in esbuild,
+ * `keep_classnames: true` in terser). Without it, class names are mangled and the `SYNC_DATA`
+ * state cannot locate handlers, causing `SyncDataHandler empty!` errors for every command.
+ */
 export declare const DataSyncHandler: (commandTableName: string) => ClassDecorator;

package/dist/decorators/data-sync-handler.decorator.js

@@ -3,6 +3,25 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.DataSyncHandler = void 0;
 require("reflect-metadata");
 const constants_1 = require("./constants");
+/**
+ * Marks a class as a DataSyncHandler for the specified command table.
+ *
+ * @param commandTableName - The raw table name as passed to `CommandModule.register({ tableName })`.
+ *   Do NOT use the fully-qualified table name (e.g. "dev-my-table-command").
+ *   Pass the same raw value as in the `register()` call (e.g. "my-table").
+ *   A wrong name silently prevents handler discovery with no error or warning.
+ *
+ * Recommended usage: prefer `CommandModule.register({ dataSyncHandlers: [MyHandler] })` as the
+ * primary registration path. Use this decorator only when auto-discovery across modules is needed.
+ * Mixing both paths for the same handler class causes duplicate registration (guarded by
+ * CommandService which logs a warning and deduplicates).
+ *
+ * **Minification warning:** The async (Step Functions) execution path identifies handlers by
+ * `constructor.name` at runtime. If you bundle with esbuild, webpack + terser, or any minifier,
+ * you MUST enable class-name preservation (e.g. `keepNames: true` in esbuild,
+ * `keep_classnames: true` in terser). Without it, class names are mangled and the `SYNC_DATA`
+ * state cannot locate handlers, causing `SyncDataHandler empty!` errors for every command.
+ */
 const DataSyncHandler = (commandTableName) => {
     return (target) => {
         Reflect.defineMetadata(constants_1.DATA_SYNC_HANDLER_METADATA, commandTableName, target);

package/dist/decorators/data-sync-handler.decorator.js.map

@@ -1 +1 @@
-{"version":3,"file":"data-sync-handler.decorator.js","sourceRoot":"","sources":["../../src/decorators/data-sync-handler.decorator.ts"],"names":[],"mappings":";;;AAAA,4BAAyB;AAEzB,2CAAwD;AAEjD,MAAM,eAAe,GAAG,CAAC,gBAAwB,EAAkB,EAAE;IAC1E,OAAO,CAAC,MAAc,EAAE,EAAE;QACxB,OAAO,CAAC,cAAc,CAAC,sCAA0B,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAA;IAC9E,CAAC,CAAA;AACH,CAAC,CAAA;AAJY,QAAA,eAAe,mBAI3B"}
+{"version":3,"file":"data-sync-handler.decorator.js","sourceRoot":"","sources":["../../src/decorators/data-sync-handler.decorator.ts"],"names":[],"mappings":";;;AAAA,4BAAyB;AAEzB,2CAAwD;AAExD;;;;;;;;;;;;;;;;;;GAkBG;AACI,MAAM,eAAe,GAAG,CAAC,gBAAwB,EAAkB,EAAE;IAC1E,OAAO,CAAC,MAAc,EAAE,EAAE;QACxB,OAAO,CAAC,cAAc,CAAC,sCAA0B,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAA;IAC9E,CAAC,CAAA;AACH,CAAC,CAAA;AAJY,QAAA,eAAe,mBAI3B"}

package/dist/decorators/group-role-resolver.decorator.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Marks a class as the application's `IGroupRoleResolver` (exactly one per app).
+ * Discovered at bootstrap and registered in `GroupRoleResolverRegistry`.
+ *
+ * Applies `@Injectable()` with default (singleton) scope. Do **not** add `@Injectable()`
+ * on the same class — a second decorator can override scope (e.g. `REQUEST`) and break
+ * bootstrap, which resolves one instance at application startup.
+ */
+export declare function GroupRoleResolver(): ClassDecorator;

package/dist/decorators/group-role-resolver.decorator.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GroupRoleResolver = GroupRoleResolver;
+const common_1 = require("@nestjs/common");
+const constants_1 = require("./constants");
+/**
+ * Marks a class as the application's `IGroupRoleResolver` (exactly one per app).
+ * Discovered at bootstrap and registered in `GroupRoleResolverRegistry`.
+ *
+ * Applies `@Injectable()` with default (singleton) scope. Do **not** add `@Injectable()`
+ * on the same class — a second decorator can override scope (e.g. `REQUEST`) and break
+ * bootstrap, which resolves one instance at application startup.
+ */
+function GroupRoleResolver() {
+    return (0, common_1.applyDecorators)((0, common_1.SetMetadata)(constants_1.GROUP_ROLE_RESOLVER_METADATA, true), (0, common_1.Injectable)());
+}
+//# sourceMappingURL=group-role-resolver.decorator.js.map

package/dist/decorators/group-role-resolver.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-role-resolver.decorator.js","sourceRoot":"","sources":["../../src/decorators/group-role-resolver.decorator.ts"],"names":[],"mappings":";;AAYA,8CAKC;AAjBD,2CAAyE;AAEzE,2CAA0D;AAE1D;;;;;;;GAOG;AACH,SAAgB,iBAAiB;IAC/B,OAAO,IAAA,wBAAe,EACpB,IAAA,oBAAW,EAAC,wCAA4B,EAAE,IAAI,CAAC,EAC/C,IAAA,mBAAU,GAAE,CACK,CAAA;AACrB,CAAC"}

package/dist/decorators/index.d.ts

@@ -4,5 +4,7 @@ export * from './context.decorator';
 export * from './data-sync-handler.decorator';
 export * from './event-factory.decorator';
 export * from './event-handler.decorator';
+export * from './group-role-resolver.decorator';
+export * from './notification-transport.decorator';
 export * from './roles.decorator';
 export * from './swagger-response.decorator';

package/dist/decorators/index.js

@@ -20,6 +20,8 @@ __exportStar(require("./context.decorator"), exports);
 __exportStar(require("./data-sync-handler.decorator"), exports);
 __exportStar(require("./event-factory.decorator"), exports);
 __exportStar(require("./event-handler.decorator"), exports);
+__exportStar(require("./group-role-resolver.decorator"), exports);
+__exportStar(require("./notification-transport.decorator"), exports);
 __exportStar(require("./roles.decorator"), exports);
 __exportStar(require("./swagger-response.decorator"), exports);
 //# sourceMappingURL=index.js.map

package/dist/decorators/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/decorators/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAAgC;AAChC,8CAA2B;AAC3B,sDAAmC;AACnC,gEAA6C;AAC7C,4DAAyC;AACzC,4DAAyC;AACzC,oDAAiC;AACjC,+DAA4C"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/decorators/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAAgC;AAChC,8CAA2B;AAC3B,sDAAmC;AACnC,gEAA6C;AAC7C,4DAAyC;AACzC,4DAAyC;AACzC,kEAA+C;AAC/C,qEAAkD;AAClD,oDAAiC;AACjC,+DAA4C"}

package/dist/decorators/notification-transport.decorator.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Decorator to register a class as a Notification Transport.
+ * Automatically marks the class as an @Injectable() provider.
+ * @param name The unique identifier for this transport (e.g., 'pusher', 'appsync-event')
+ */
+export declare function NotificationTransport(name: string): ClassDecorator;

package/dist/decorators/notification-transport.decorator.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotificationTransport = NotificationTransport;
+const common_1 = require("@nestjs/common");
+const constants_1 = require("./constants");
+/**
+ * Decorator to register a class as a Notification Transport.
+ * Automatically marks the class as an @Injectable() provider.
+ * @param name The unique identifier for this transport (e.g., 'pusher', 'appsync-event')
+ */
+function NotificationTransport(name) {
+    return (0, common_1.applyDecorators)((0, common_1.SetMetadata)(constants_1.NOTIFICATION_TRANSPORT_METADATA, name), (0, common_1.Injectable)());
+}
+//# sourceMappingURL=notification-transport.decorator.js.map

package/dist/decorators/notification-transport.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-transport.decorator.js","sourceRoot":"","sources":["../../src/decorators/notification-transport.decorator.ts"],"names":[],"mappings":";;AASA,sDAKC;AAdD,2CAAyE;AAEzE,2CAA6D;AAE7D;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,IAAY;IAChD,OAAO,IAAA,wBAAe,EACpB,IAAA,oBAAW,EAAC,2CAA+B,EAAE,IAAI,CAAC,EAClD,IAAA,mBAAU,GAAE,CACK,CAAA;AACrB,CAAC"}

package/dist/env.validation.d.ts

@@ -1,4 +1,5 @@
 import { ClassConstructor } from 'class-transformer';
+export { BUILTIN_NOTIFICATION_TRANSPORT_ENV, parseNotificationTransports, validateBuiltinNotificationTransportEnv, } from './notification-env.validation';
 export declare enum Environment {
     Local = "local",
     Development = "dev",
@@ -22,7 +23,25 @@ export declare class EnvironmentVariables {
     SFN_COMMAND_ARN: string;
     SNS_ENDPOINT: string;
     SNS_REGION: string;
+    /**
+     * Comma-separated list of active notification transport names.
+     * Supported built-in values: 'appsync-graphql' | 'appsync-event'
+     * Defaults to 'appsync-graphql' when not set.
+     *
+     * Examples:
+     *   NOTIFICATION_TRANSPORTS=appsync-graphql
+     *   NOTIFICATION_TRANSPORTS=appsync-event
+     *   NOTIFICATION_TRANSPORTS=appsync-graphql,appsync-event
+     */
+    NOTIFICATION_TRANSPORTS: string;
     APPSYNC_ENDPOINT: string;
+    APPSYNC_EVENTS_ENDPOINT: string;
+    /**
+     * Channel namespace name — must match the pre-created namespace in the
+     * AppSync Event API (segment 1 of every channel path).
+     * Defaults to 'default'.
+     */
+    APPSYNC_EVENTS_NAMESPACE: string;
     SES_ENDPOINT: string;
     SES_REGION: string;
     SES_FROM_EMAIL: string;

package/dist/env.validation.js

@@ -9,10 +9,15 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.EnvironmentVariables = exports.Environment = void 0;
+exports.EnvironmentVariables = exports.Environment = exports.validateBuiltinNotificationTransportEnv = exports.parseNotificationTransports = exports.BUILTIN_NOTIFICATION_TRANSPORT_ENV = void 0;
 exports.getValidateConfig = getValidateConfig;
 const class_transformer_1 = require("class-transformer");
 const class_validator_1 = require("class-validator");
+const notification_env_validation_1 = require("./notification-env.validation");
+var notification_env_validation_2 = require("./notification-env.validation");
+Object.defineProperty(exports, "BUILTIN_NOTIFICATION_TRANSPORT_ENV", { enumerable: true, get: function () { return notification_env_validation_2.BUILTIN_NOTIFICATION_TRANSPORT_ENV; } });
+Object.defineProperty(exports, "parseNotificationTransports", { enumerable: true, get: function () { return notification_env_validation_2.parseNotificationTransports; } });
+Object.defineProperty(exports, "validateBuiltinNotificationTransportEnv", { enumerable: true, get: function () { return notification_env_validation_2.validateBuiltinNotificationTransportEnv; } });
 var Environment;
 (function (Environment) {
     Environment["Local"] = "local";
@@ -96,11 +101,26 @@ __decorate([
     (0, class_validator_1.IsOptional)(),
     __metadata("design:type", String)
 ], EnvironmentVariables.prototype, "SNS_REGION", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", String)
+], EnvironmentVariables.prototype, "NOTIFICATION_TRANSPORTS", void 0);
 __decorate([
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsOptional)(),
     __metadata("design:type", String)
 ], EnvironmentVariables.prototype, "APPSYNC_ENDPOINT", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", String)
+], EnvironmentVariables.prototype, "APPSYNC_EVENTS_ENDPOINT", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", String)
+], EnvironmentVariables.prototype, "APPSYNC_EVENTS_NAMESPACE", void 0);
 __decorate([
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsOptional)(),
@@ -136,6 +156,7 @@ function getValidateConfig(cls) {
         if (errors.length > 0) {
             throw new Error(errors.toString());
         }
+        (0, notification_env_validation_1.validateBuiltinNotificationTransportEnv)(validatedConfig);
         return validatedConfig;
     };
 }

package/dist/env.validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"env.validation.js","sourceRoot":"","sources":["../src/env.validation.ts"],"names":[],"mappings":";;;;;;;;;;;;AAyFA,8CAoBC;AA7GD,yDAAqE;AACrE,qDAQwB;AAExB,IAAY,WAKX;AALD,WAAY,WAAW;IACrB,8BAAe,CAAA;IACf,kCAAmB,CAAA;IACnB,kCAAmB,CAAA;IACnB,8BAAe,CAAA;AACjB,CAAC,EALW,WAAW,2BAAX,WAAW,QAKtB;AAED,MAAa,oBAAoB;CAqEhC;AArED,oDAqEC;AAnEC;IADC,IAAA,wBAAM,EAAC,WAAW,CAAC;;sDACC;AAErB;IADC,IAAA,0BAAQ,GAAE;;sDACK;AAIhB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;sDACG;AAGhB;IADC,IAAA,2BAAS,GAAE;;mEACkB;AAG9B;IADC,IAAA,0BAAQ,GAAE;;uDACM;AAIjB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;+DACY;AAGzB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;6DACY;AAEvB;IADC,IAAA,4BAAU,GAAE;;kEACe;AAG5B;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;yDACM;AAGnB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;uDACI;AAEjB;IADC,IAAA,0BAAQ,GAAE;;4DACW;AAItB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;0DACO;AAGpB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;wDACK;AAElB;IADC,IAAA,0BAAQ,GAAE;;6DACY;AAIvB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;0DACO;AAGpB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;wDACK;AAIlB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;8DACW;AAIxB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;0DACO;AAGpB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;wDACK;AAElB;IADC,IAAA,0BAAQ,GAAE;;4DACW;AAItB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;qEACkB;AAI/B;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;qEACkB;AAGjC,SAAgB,iBAAiB,CAC/B,GAAyB;IAEzB,OAAO,SAAS,QAAQ,CAAC,MAA+B;QACtD,MAAM,eAAe,GAAG,IAAA,mCAAe,EACrC,GAAG,IAAI,oBAAoB,EAC3B,MAAM,EACN;YACE,wBAAwB,EAAE,IAAI;SAC/B,CACF,CAAA;QACD,MAAM,MAAM,GAAG,IAAA,8BAAY,EAAC,eAAe,EAAE;YAC3C,qBAAqB,EAAE,KAAK;SAC7B,CAAC,CAAA;QAEF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;QACpC,CAAC;QACD,OAAO,eAAe,CAAA;IACxB,CAAC,CAAA;AACH,CAAC"}
+{"version":3,"file":"env.validation.js","sourceRoot":"","sources":["../src/env.validation.ts"],"names":[],"mappings":";;;;;;;;;;;;AAgIA,8CAyBC;AAzJD,yDAAqE;AACrE,qDAQwB;AAExB,+EAAuF;AAEvF,6EAIsC;AAHpC,iJAAA,kCAAkC,OAAA;AAClC,0IAAA,2BAA2B,OAAA;AAC3B,sJAAA,uCAAuC,OAAA;AAGzC,IAAY,WAKX;AALD,WAAY,WAAW;IACrB,8BAAe,CAAA;IACf,kCAAmB,CAAA;IACnB,kCAAmB,CAAA;IACnB,8BAAe,CAAA;AACjB,CAAC,EALW,WAAW,2BAAX,WAAW,QAKtB;AAED,MAAa,oBAAoB;CAoGhC;AApGD,oDAoGC;AAlGC;IADC,IAAA,wBAAM,EAAC,WAAW,CAAC;;sDACC;AAErB;IADC,IAAA,0BAAQ,GAAE;;sDACK;AAIhB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;sDACG;AAGhB;IADC,IAAA,2BAAS,GAAE;;mEACkB;AAG9B;IADC,IAAA,0BAAQ,GAAE;;uDACM;AAIjB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;+DACY;AAGzB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;6DACY;AAEvB;IADC,IAAA,4BAAU,GAAE;;kEACe;AAG5B;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;yDACM;AAGnB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;uDACI;AAEjB;IADC,IAAA,0BAAQ,GAAE;;4DACW;AAItB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;0DACO;AAGpB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;wDACK;AAElB;IADC,IAAA,0BAAQ,GAAE;;6DACY;AAIvB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;0DACO;AAGpB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;wDACK;AAclB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;qEACkB;AAK/B;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;8DACW;AAKxB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;qEACkB;AAS/B;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;sEACmB;AAMhC;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;0DACO;AAGpB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;wDACK;AAElB;IADC,IAAA,0BAAQ,GAAE;;4DACW;AAItB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;qEACkB;AAI/B;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;qEACkB;AAGjC,SAAgB,iBAAiB,CAC/B,GAAyB;IAEzB,OAAO,SAAS,QAAQ,CAAC,MAA+B;QACtD,MAAM,eAAe,GAAG,IAAA,mCAAe,EACrC,GAAG,IAAI,oBAAoB,EAC3B,MAAM,EACN;YACE,wBAAwB,EAAE,IAAI;SAC/B,CACF,CAAA;QACD,MAAM,MAAM,GAAG,IAAA,8BAAY,EAAC,eAAe,EAAE;YAC3C,qBAAqB,EAAE,KAAK;SAC7B,CAAC,CAAA;QAEF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;QACpC,CAAC;QAED,IAAA,qEAAuC,EACrC,eAAqD,CACtD,CAAA;QAED,OAAO,eAAe,CAAA;IACxB,CAAC,CAAA;AACH,CAAC"}

package/dist/guard/roles.guard.d.ts

@@ -1,10 +1,12 @@
 import { CanActivate, ExecutionContext, Logger } from '@nestjs/common';
 import { Reflector } from '@nestjs/core';
+import { GroupRoleResolverRegistry } from '../auth/group-role-resolver.registry';
 import { UserContext } from '../context';
 export declare class RolesGuard implements CanActivate {
     protected reflector: Reflector;
+    protected registry?: GroupRoleResolverRegistry;
     protected readonly logger: Logger;
-    constructor(reflector: Reflector);
+    constructor(reflector: Reflector, registry?: GroupRoleResolverRegistry);
     canActivate(context: ExecutionContext): Promise<boolean>;
     /**
      * Verify tenant access.
@@ -59,6 +61,14 @@ export declare class RolesGuard implements CanActivate {
      * This is a helper method that can be used by subclasses.
      */
     protected getAuthorizerClaims(context: ExecutionContext): import("../context").JwtClaims;
+    protected hasAnyRole(requiredRoles: string[], userRoles: string[]): boolean;
+    protected resolveGroupRoles(context: ExecutionContext, groupIds: string[]): Promise<string[]>;
     protected verifyRole(context: ExecutionContext): Promise<boolean>;
+    /**
+     * Returns the primary direct role string from JWT context.
+     *
+     * @deprecated Not invoked by `verifyRole`. For custom authorization, override
+     * `verifyRole`, `resolveGroupRoles`, or `canOverrideTenant` instead.
+     */
     protected getUserRole(context: ExecutionContext): Promise<string>;
 }

package/dist/guard/roles.guard.js

@@ -8,17 +8,22 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
 var RolesGuard_1;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RolesGuard = void 0;
 const common_1 = require("@nestjs/common");
 const core_1 = require("@nestjs/core");
+const group_role_resolver_registry_1 = require("../auth/group-role-resolver.registry");
 const constants_1 = require("../constants");
 const context_1 = require("../context");
 const decorators_1 = require("../decorators");
 let RolesGuard = RolesGuard_1 = class RolesGuard {
-    constructor(reflector) {
+    constructor(reflector, registry) {
         this.reflector = reflector;
+        this.registry = registry;
         this.logger = new common_1.Logger(RolesGuard_1.name);
     }
     async canActivate(context) {
@@ -113,22 +118,51 @@ let RolesGuard = RolesGuard_1 = class RolesGuard {
         const invokeContext = (0, context_1.extractInvokeContext)(context);
         return (0, context_1.getAuthorizerClaims)(invokeContext);
     }
+    hasAnyRole(requiredRoles, userRoles) {
+        return requiredRoles.some((role) => userRoles.includes(role));
+    }
+    async resolveGroupRoles(context, groupIds) {
+        const resolver = this.registry?.get();
+        if (!resolver || !groupIds.length) {
+            return [];
+        }
+        const userContext = (0, context_1.getUserContext)(context);
+        const claims = this.getAuthorizerClaims(context);
+        try {
+            return await resolver.resolveRoles({
+                tenantCode: userContext.tenantCode,
+                groupIds,
+                claims,
+            });
+        }
+        catch (err) {
+            this.logger.error('GroupRoleResolver.resolveRoles failed', err);
+            throw err;
+        }
+    }
     async verifyRole(context) {
         const requiredRoles = this.reflector.getAllAndOverride(decorators_1.ROLE_METADATA, [context.getHandler(), context.getClass()]);
         if (!requiredRoles || !requiredRoles.length) {
             // all user can access
             return true;
         }
-        const userRole = await this.getUserRole(context);
-        if (!userRole) {
-            return false;
+        const userContext = (0, context_1.getUserContext)(context);
+        const { tenantRoles, tenantGroupIds } = userContext;
+        if (tenantRoles.includes(constants_1.ROLE_SYSTEM_ADMIN)) {
+            return true;
         }
-        if (userRole === constants_1.ROLE_SYSTEM_ADMIN) {
+        if (this.hasAnyRole(requiredRoles, tenantRoles)) {
             return true;
         }
-        return requiredRoles.includes(userRole);
+        const groupRoles = await this.resolveGroupRoles(context, tenantGroupIds);
+        return this.hasAnyRole(requiredRoles, groupRoles);
     }
-    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    /**
+     * Returns the primary direct role string from JWT context.
+     *
+     * @deprecated Not invoked by `verifyRole`. For custom authorization, override
+     * `verifyRole`, `resolveGroupRoles`, or `canOverrideTenant` instead.
+     */
     async getUserRole(context) {
         const userContext = (0, context_1.getUserContext)(context);
         return userContext.tenantRole;
@@ -137,6 +171,8 @@ let RolesGuard = RolesGuard_1 = class RolesGuard {
 exports.RolesGuard = RolesGuard;
 exports.RolesGuard = RolesGuard = RolesGuard_1 = __decorate([
     (0, common_1.Injectable)(),
-    __metadata("design:paramtypes", [core_1.Reflector])
+    __param(1, (0, common_1.Optional)()),
+    __metadata("design:paramtypes", [core_1.Reflector,
+        group_role_resolver_registry_1.GroupRoleResolverRegistry])
 ], RolesGuard);
 //# sourceMappingURL=roles.guard.js.map

package/dist/guard/roles.guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"roles.guard.js","sourceRoot":"","sources":["../../src/guard/roles.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAKuB;AACvB,uCAAwC;AAExC,4CAIqB;AACrB,wCAKmB;AACnB,8CAA6C;AAGtC,IAAM,UAAU,kBAAhB,MAAM,UAAU;IAGrB,YAAsB,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;QAFvB,WAAM,GAAG,IAAI,eAAM,CAAC,YAAU,CAAC,IAAI,CAAC,CAAA;IAEV,CAAC;IAE9C,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,eAAe;QACf,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;QACtD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,KAAK,CAAA;QACd,CAAC;QAED,yBAAyB;QACzB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QAClD,OAAO,WAAW,CAAA;IACpB,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,YAAY,CAAC,OAAyB;QACpD,MAAM,WAAW,GAAG,IAAA,wBAAc,EAAC,OAAO,CAAC,CAAA;QAE3C,0BAA0B;QAC1B,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAA;QACd,CAAC;QAED,+EAA+E;QAC/E,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;QACrD,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;OAGG;IACO,gBAAgB,CACxB,OAAyB,EACzB,WAAwB;QAExB,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;QAChD,6DAA6D;QAC7D,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,UAAU,CAAA;IAC7D,CAAC;IAED;;;;;;;OAOG;IACO,iBAAiB,CACzB,OAAyB,EACzB,WAAwB;QAExB,gCAAgC;QAChC,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;YACjE,OAAO,IAAI,CAAA;QACb,CAAC;QAED,sCAAsC;QACtC,OAAO,IAAI,CAAC,mBAAmB,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,CAAA;IACpE,CAAC;IAED;;;;;;;;;;;;OAYG;IACO,oBAAoB;QAC5B,OAAO,uCAA2B,CAAA;IACpC,CAAC;IAED;;;;;;;;;;;;OAYG;IACO,mBAAmB;QAC3B,OAAO,sCAA0B,CAAA;IACnC,CAAC;IAED;;;OAGG;IACO,mBAAmB,CAAC,OAAyB;QACrD,MAAM,aAAa,GAAG,IAAA,8BAAoB,EAAC,OAAO,CAAC,CAAA;QACnD,OAAO,IAAA,6BAAmB,EAAC,aAAa,CAAC,CAAA;IAC3C,CAAC;IAES,KAAK,CAAC,UAAU,CAAC,OAAyB;QAClD,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CACpD,0BAAa,EACb,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAA;QACD,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;YAC5C,sBAAsB;YACtB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;QAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,KAAK,CAAA;QACd,CAAC;QACD,IAAI,QAAQ,KAAK,6BAAiB,EAAE,CAAC;YACnC,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACzC,CAAC;IAED,6DAA6D;IACnD,KAAK,CAAC,WAAW,CAAC,OAAyB;QACnD,MAAM,WAAW,GAAG,IAAA,wBAAc,EAAC,OAAO,CAAC,CAAA;QAE3C,OAAO,WAAW,CAAC,UAAU,CAAA;IAC/B,CAAC;CACF,CAAA;AA9IY,gCAAU;qBAAV,UAAU;IADtB,IAAA,mBAAU,GAAE;qCAIsB,gBAAS;GAH/B,UAAU,CA8ItB"}
+{"version":3,"file":"roles.guard.js","sourceRoot":"","sources":["../../src/guard/roles.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAMuB;AACvB,uCAAwC;AAExC,uFAAgF;AAChF,4CAIqB;AACrB,wCAKmB;AACnB,8CAA6C;AAGtC,IAAM,UAAU,kBAAhB,MAAM,UAAU;IAGrB,YACY,SAAoB,EAClB,QAA8C;QADhD,cAAS,GAAT,SAAS,CAAW;QACR,aAAQ,GAAR,QAAQ,CAA4B;QAJzC,WAAM,GAAG,IAAI,eAAM,CAAC,YAAU,CAAC,IAAI,CAAC,CAAA;IAKpD,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,eAAe;QACf,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;QACtD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,KAAK,CAAA;QACd,CAAC;QAED,yBAAyB;QACzB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QAClD,OAAO,WAAW,CAAA;IACpB,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,YAAY,CAAC,OAAyB;QACpD,MAAM,WAAW,GAAG,IAAA,wBAAc,EAAC,OAAO,CAAC,CAAA;QAE3C,0BAA0B;QAC1B,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAA;QACd,CAAC;QAED,+EAA+E;QAC/E,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;QACrD,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;OAGG;IACO,gBAAgB,CACxB,OAAyB,EACzB,WAAwB;QAExB,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;QAChD,6DAA6D;QAC7D,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,UAAU,CAAA;IAC7D,CAAC;IAED;;;;;;;OAOG;IACO,iBAAiB,CACzB,OAAyB,EACzB,WAAwB;QAExB,gCAAgC;QAChC,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;YACjE,OAAO,IAAI,CAAA;QACb,CAAC;QAED,sCAAsC;QACtC,OAAO,IAAI,CAAC,mBAAmB,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,CAAA;IACpE,CAAC;IAED;;;;;;;;;;;;OAYG;IACO,oBAAoB;QAC5B,OAAO,uCAA2B,CAAA;IACpC,CAAC;IAED;;;;;;;;;;;;OAYG;IACO,mBAAmB;QAC3B,OAAO,sCAA0B,CAAA;IACnC,CAAC;IAED;;;OAGG;IACO,mBAAmB,CAAC,OAAyB;QACrD,MAAM,aAAa,GAAG,IAAA,8BAAoB,EAAC,OAAO,CAAC,CAAA;QACnD,OAAO,IAAA,6BAAmB,EAAC,aAAa,CAAC,CAAA;IAC3C,CAAC;IAES,UAAU,CAAC,aAAuB,EAAE,SAAmB;QAC/D,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;IAC/D,CAAC;IAES,KAAK,CAAC,iBAAiB,CAC/B,OAAyB,EACzB,QAAkB;QAElB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAA;QACrC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAClC,OAAO,EAAE,CAAA;QACX,CAAC;QAED,MAAM,WAAW,GAAG,IAAA,wBAAc,EAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;QAEhD,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,YAAY,CAAC;gBACjC,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,QAAQ;gBACR,MAAM;aACP,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAA;YAC/D,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAES,KAAK,CAAC,UAAU,CAAC,OAAyB;QAClD,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CACpD,0BAAa,EACb,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAA;QACD,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;YAC5C,sBAAsB;YACtB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,MAAM,WAAW,GAAG,IAAA,wBAAc,EAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,WAAW,CAAA;QAEnD,IAAI,WAAW,CAAC,QAAQ,CAAC,6BAAiB,CAAC,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC;YAChD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;QACxE,OAAO,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,UAAU,CAAC,CAAA;IACnD,CAAC;IAED;;;;;OAKG;IACO,KAAK,CAAC,WAAW,CAAC,OAAyB;QACnD,MAAM,WAAW,GAAG,IAAA,wBAAc,EAAC,OAAO,CAAC,CAAA;QAE3C,OAAO,WAAW,CAAC,UAAU,CAAA;IAC/B,CAAC;CACF,CAAA;AArLY,gCAAU;qBAAV,UAAU;IADtB,IAAA,mBAAU,GAAE;IAMR,WAAA,IAAA,iBAAQ,GAAE,CAAA;qCADU,gBAAS;QACG,wDAAyB;GALjD,UAAU,CAqLtB"}

package/dist/helpers/serializer.d.ts

@@ -6,10 +6,9 @@ export interface SerializerOptions {
 /**
  * Converts internal DynamoDB structure to external flat structure
  * @param item Internal item (CommandEntity or DataEntity)
- * @param options Serialization options
  * @returns Flattened external structure
  */
-export declare function serializeToExternal<T extends CommandEntity | DataEntity>(item: T | null | undefined, options?: SerializerOptions): Record<string, any> | null;
+export declare function serializeToExternal<T extends CommandEntity | DataEntity>(item: T | null | undefined): Record<string, any> | null;
 /**
  * Converts external flat structure to internal DynamoDB structure
  * @param data External flat structure

package/dist/helpers/serializer.js

@@ -5,10 +5,9 @@ exports.deserializeToInternal = deserializeToInternal;
 /**
  * Converts internal DynamoDB structure to external flat structure
  * @param item Internal item (CommandEntity or DataEntity)
- * @param options Serialization options
  * @returns Flattened external structure
  */
-function serializeToExternal(item, options = {}) {
+function serializeToExternal(item) {
     if (!item)
         return null;
     const result = {
@@ -17,7 +16,7 @@ function serializeToExternal(item, options = {}) {
         name: item.name,
     };
     // Copy first level properties
-    Object.keys(item).forEach(key => {
+    Object.keys(item).forEach((key) => {
         if (key !== 'attributes' && typeof item[key] !== 'undefined') {
             result[key] = item[key];
         }
@@ -46,15 +45,43 @@ function deserializeToInternal(data, EntityClass) {
     entity.pk = pk;
     entity.sk = sk || data.code;
     entity.name = data.name;
-    // Copy entity-specific fields first
-    ['version', 'tenantCode', 'type', 'isDeleted', 'status', 'createdAt', 'updatedAt', 'createdBy', 'updatedBy', 'createdIp', 'updatedIp'].forEach(key => {
+    [
+        'version',
+        'tenantCode',
+        'type',
+        'isDeleted',
+        'status',
+        'createdAt',
+        'updatedAt',
+        'createdBy',
+        'updatedBy',
+        'createdIp',
+        'updatedIp',
+    ].forEach((key) => {
         if (key in data) {
             entity[key] = data[key];
         }
     });
     // Separate remaining fields into attributes
-    Object.keys(data).forEach(key => {
-        if (!['id', 'code', 'pk', 'sk', 'name', 'version', 'tenantCode', 'type', 'isDeleted', 'status', 'createdAt', 'updatedAt', 'createdBy', 'updatedBy', 'createdIp', 'updatedIp'].includes(key)) {
+    Object.keys(data).forEach((key) => {
+        if (![
+            'id',
+            'code',
+            'pk',
+            'sk',
+            'name',
+            'version',
+            'tenantCode',
+            'type',
+            'isDeleted',
+            'status',
+            'createdAt',
+            'updatedAt',
+            'createdBy',
+            'updatedBy',
+            'createdIp',
+            'updatedIp',
+        ].includes(key)) {
             if (key in entity) {
                 entity[key] = data[key];
             }

package/dist/helpers/serializer.js.map

@@ -1 +1 @@
-{"version":3,"file":"serializer.js","sourceRoot":"","sources":["../../src/helpers/serializer.ts"],"names":[],"mappings":";;AAaA,kDA2BC;AAQD,sDAmCC;AA5ED;;;;;GAKG;AACH,SAAgB,mBAAmB,CACjC,IAA0B,EAC1B,UAA6B,EAAE;IAE/B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,MAAM,MAAM,GAAwB;QAClC,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,EAAE;QAC3B,IAAI,EAAE,IAAI,CAAC,EAAE;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC;IAEF,8BAA8B;IAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;QAC9B,IAAI,GAAG,KAAK,YAAY,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,WAAW,EAAE,CAAC;YAC7D,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,oBAAoB;IACpB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YACvD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CACnC,IAA4C,EAC5C,WAAwB;IAExB,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;IACjC,MAAM,UAAU,GAAwB,EAAE,CAAC;IAE3C,uBAAuB;IACvB,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC;IAC5B,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IAExB,oCAAoC;IACpC,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;QACnJ,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,4CAA4C;IAC5C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;QAC9B,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5L,IAAI,GAAG,IAAI,MAAM,EAAE,CAAC;gBAClB,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"serializer.js","sourceRoot":"","sources":["../../src/helpers/serializer.ts"],"names":[],"mappings":";;AAYA,kDA0BC;AAQD,sDAkEC;AAzGD;;;;GAIG;AACH,SAAgB,mBAAmB,CACjC,IAA0B;IAE1B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAEtB,MAAM,MAAM,GAAwB;QAClC,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,EAAE;QAC3B,IAAI,EAAE,IAAI,CAAC,EAAE;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAA;IAED,8BAA8B;IAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAChC,IAAI,GAAG,KAAK,YAAY,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,WAAW,EAAE,CAAC;YAC7D,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;QACzB,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,oBAAoB;IACpB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YACvD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QACrB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CACnC,IAA4C,EAC5C,WAAwB;IAExB,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAEtB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC3C,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAA;IAChC,MAAM,UAAU,GAAwB,EAAE,CAAA;IAE1C,uBAAuB;IACvB,MAAM,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,IAAI,CAAA;IAC3B,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAGtB;IAAA;QACC,SAAS;QACT,YAAY;QACZ,MAAM;QACN,WAAW;QACX,QAAQ;QACR,WAAW;QACX,WAAW;QACX,WAAW;QACX,WAAW;QACX,WAAW;QACX,WAAW;KACZ,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAChB,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;QACzB,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,4CAA4C;IAC5C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAChC,IACE,CAAC;YACC,IAAI;YACJ,MAAM;YACN,IAAI;YACJ,IAAI;YACJ,MAAM;YACN,SAAS;YACT,YAAY;YACZ,MAAM;YACN,WAAW;YACX,QAAQ;YACR,WAAW;YACX,WAAW;YACX,WAAW;YACX,WAAW;YACX,WAAW;YACX,WAAW;SACZ,CAAC,QAAQ,CAAC,GAAG,CAAC,EACf,CAAC;YACD,IAAI,GAAG,IAAI,MAAM,EAAE,CAAC;gBAClB,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;YACzB,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;YAC7B,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,UAAU,GAAG,UAAU,CAAA;IAC9B,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 export * from './app.module';
+export * from './auth';
 export * from './bootstrap';
 export * from './command-events';
 export * from './commands';

package/dist/index.js

@@ -15,6 +15,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./app.module"), exports);
+__exportStar(require("./auth"), exports);
 __exportStar(require("./bootstrap"), exports);
 __exportStar(require("./command-events"), exports);
 __exportStar(require("./commands"), exports);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA4B;AAC5B,8CAA2B;AAC3B,mDAAgC;AAChC,6CAA0B;AAC1B,8CAA2B;AAC3B,4CAAyB;AACzB,+CAA4B;AAC5B,+CAA4B;AAC5B,mDAAgC;AAChC,2CAAwB;AACxB,+CAA4B;AAC5B,4CAAyB;AACzB,0CAAuB;AACvB,4CAAyB;AACzB,+CAA4B;AAC5B,kDAA+B;AAC/B,yCAAsB;AACtB,0CAAuB;AACvB,6CAA0B;AAC1B,8CAA2B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA4B;AAC5B,yCAAsB;AACtB,8CAA2B;AAC3B,mDAAgC;AAChC,6CAA0B;AAC1B,8CAA2B;AAC3B,4CAAyB;AACzB,+CAA4B;AAC5B,+CAA4B;AAC5B,mDAAgC;AAChC,2CAAwB;AACxB,+CAA4B;AAC5B,4CAAyB;AACzB,0CAAuB;AACvB,4CAAyB;AACzB,+CAA4B;AAC5B,kDAA+B;AAC/B,yCAAsB;AACtB,0CAAuB;AACvB,6CAA0B;AAC1B,8CAA2B"}

package/dist/interfaces/command-module-options.interface.d.ts

@@ -15,7 +15,17 @@ export interface CommandModuleOptions {
     tableName: string;
     /** If true, skips errors from previous command versions */
     skipError?: boolean;
-    /** Custom handlers for syncing command data to read models */
+    /**
+     * Custom handlers for syncing command data to read models.
+     *
+     * **Recommended (primary) registration path.**
+     * Classes listed here are automatically added as providers and resolved
+     * by the NestJS DI container. This path is explicit about module ownership
+     * and is fully covered by the duplicate-detection guard in CommandService.
+     *
+     * Avoid combining this with `@DataSyncHandler` decorator on the same class —
+     * that causes duplicate registration (detected and warned at startup).
+     */
     dataSyncHandlers?: Type<IDataSyncHandler>[];
     /** If true, disables the default data sync handler */
     disableDefaultHandler?: boolean;

package/dist/notification-env.validation.d.ts

@@ -0,0 +1,8 @@
+/** Built-in transports and their required endpoint environment variables. */
+export declare const BUILTIN_NOTIFICATION_TRANSPORT_ENV: Record<string, string>;
+/**
+ * Parses NOTIFICATION_TRANSPORTS the same way as NotificationEventHandler.
+ * Defaults to appsync-graphql when unset or empty.
+ */
+export declare function parseNotificationTransports(raw: string | undefined): string[];
+export declare function validateBuiltinNotificationTransportEnv(config: Record<string, unknown>): void;

package/dist/notification-env.validation.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BUILTIN_NOTIFICATION_TRANSPORT_ENV = void 0;
+exports.parseNotificationTransports = parseNotificationTransports;
+exports.validateBuiltinNotificationTransportEnv = validateBuiltinNotificationTransportEnv;
+const enums_1 = require("./notifications/enums");
+/** Built-in transports and their required endpoint environment variables. */
+exports.BUILTIN_NOTIFICATION_TRANSPORT_ENV = {
+    [enums_1.NotificationTransports.APPSYNC_GRAPHQL]: 'APPSYNC_ENDPOINT',
+    [enums_1.NotificationTransports.APPSYNC_EVENT]: 'APPSYNC_EVENTS_ENDPOINT',
+};
+/**
+ * Parses NOTIFICATION_TRANSPORTS the same way as NotificationEventHandler.
+ * Defaults to appsync-graphql when unset or empty.
+ */
+function parseNotificationTransports(raw) {
+    const names = (raw ?? '')
+        .split(',')
+        .map((s) => s.trim())
+        .filter(Boolean);
+    return names.length > 0 ? names : [enums_1.NotificationTransports.APPSYNC_GRAPHQL];
+}
+function validateBuiltinNotificationTransportEnv(config) {
+    const active = parseNotificationTransports(config.NOTIFICATION_TRANSPORTS);
+    for (const name of active) {
+        const envKey = exports.BUILTIN_NOTIFICATION_TRANSPORT_ENV[name];
+        if (!envKey) {
+            continue;
+        }
+        const value = config[envKey];
+        if (typeof value !== 'string' || !value.trim()) {
+            throw new Error(`Notification transport "${name}" is enabled (NOTIFICATION_TRANSPORTS) but ${envKey} is not set.`);
+        }
+    }
+}
+//# sourceMappingURL=notification-env.validation.js.map

package/dist/notification-env.validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-env.validation.js","sourceRoot":"","sources":["../src/notification-env.validation.ts"],"names":[],"mappings":";;;AAYA,kEAMC;AAED,0FAoBC;AAxCD,iDAA8D;AAE9D,6EAA6E;AAChE,QAAA,kCAAkC,GAA2B;IACxE,CAAC,8BAAsB,CAAC,eAAe,CAAC,EAAE,kBAAkB;IAC5D,CAAC,8BAAsB,CAAC,aAAa,CAAC,EAAE,yBAAyB;CAClE,CAAA;AAED;;;GAGG;AACH,SAAgB,2BAA2B,CAAC,GAAuB;IACjE,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;SACtB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAA;IAClB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,8BAAsB,CAAC,eAAe,CAAC,CAAA;AAC5E,CAAC;AAED,SAAgB,uCAAuC,CACrD,MAA+B;IAE/B,MAAM,MAAM,GAAG,2BAA2B,CACxC,MAAM,CAAC,uBAA6C,CACrD,CAAA;IAED,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,0CAAkC,CAAC,IAAI,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAQ;QACV,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,8CAA8C,MAAM,cAAc,CAClG,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC"}