@nest-util/nest-crud 1.0.6 → 1.0.9

package/README.md

@@ -7,7 +7,7 @@ This library was generated with [Nx](https://nx.dev).
 We recommend using **pnpm** as your package manager.
 
 ```bash
-pnpm add @nest-util/nest-crud@^1.0.2 @nest-util/nest-auth@^1.0.2 typeorm@^1.1.0 @nestjs/typeorm @nestjs/swagger @nestjs/jwt @nestjs/passport class-validator class-transformer bcrypt
+pnpm add @nest-util/nest-crud@^1.0.7 @nest-util/nest-auth@^1.1.0 typeorm@^1.1.0 @nestjs/typeorm @nestjs/swagger @nestjs/jwt @nestjs/passport class-validator class-transformer bcrypt
 ```
 
 ## Features

package/dist/index.d.ts

@@ -18,4 +18,5 @@ export * from './lib/helpers/exception-filter.helper';
 export * from './lib/helpers/cursor-pagination.helper';
 export * from './lib/entities/audit-log.entity';
 export * from './lib/services/audit-log.service';
+export * from './lib/events';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,kCAAkC,CAAC;AACjD,cAAc,wCAAwC,CAAC;AACvD,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6CAA6C,CAAC;AAC5D,cAAc,sCAAsC,CAAC;AACrD,cAAc,yCAAyC,CAAC;AACxD,cAAc,0CAA0C,CAAC;AACzD,cAAc,iCAAiC,CAAC;AAChD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,kCAAkC,CAAC;AACjD,cAAc,sCAAsC,CAAC;AACrD,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,wCAAwC,CAAC;AACvD,cAAc,iCAAiC,CAAC;AAChD,cAAc,kCAAkC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,kCAAkC,CAAC;AACjD,cAAc,wCAAwC,CAAC;AACvD,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6CAA6C,CAAC;AAC5D,cAAc,sCAAsC,CAAC;AACrD,cAAc,yCAAyC,CAAC;AACxD,cAAc,0CAA0C,CAAC;AACzD,cAAc,iCAAiC,CAAC;AAChD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,kCAAkC,CAAC;AACjD,cAAc,sCAAsC,CAAC;AACrD,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,wCAAwC,CAAC;AACvD,cAAc,iCAAiC,CAAC;AAChD,cAAc,kCAAkC,CAAC;AACjD,cAAc,cAAc,CAAC"}

package/dist/index.js

@@ -21,3 +21,4 @@ tslib_1.__exportStar(require("./lib/helpers/exception-filter.helper"), exports);
 tslib_1.__exportStar(require("./lib/helpers/cursor-pagination.helper"), exports);
 tslib_1.__exportStar(require("./lib/entities/audit-log.entity"), exports);
 tslib_1.__exportStar(require("./lib/services/audit-log.service"), exports);
+tslib_1.__exportStar(require("./lib/events"), exports);

package/dist/lib/controllers/nest-crud.controller.d.ts

@@ -3,6 +3,7 @@ import { CrudEndpoint, CrudInterface } from '../interfaces/crud.interface';
 import { PaginationDto } from '../dtos/pagination.dto';
 import { FilterDto } from '../dtos/filter.dto';
 import { ListAuditLogsDto } from '../dtos/list-audit-logs.dto';
+import type { OwnershipUser } from '../interfaces/find-mine.interface';
 export declare const AUTH_PERMISSIONS_METADATA_KEY = "auth:permissions";
 export type CrudEndpointPermissions = string | readonly string[];
 export type CrudPermissionsMap = Partial<Record<CrudEndpoint, CrudEndpointPermissions>>;
@@ -16,10 +17,10 @@ export interface IBaseController<CD, UD, RD> {
         data: RD[];
         meta?: unknown;
     } | RD[]>;
-    findOne(id: number): Promise<RD>;
+    findOne(id: number, user?: OwnershipUser): Promise<RD>;
     create(dto: CD): Promise<RD>;
-    update(id: number, dto: UD): Promise<RD>;
-    remove(id: number): Promise<boolean>;
+    update(id: number, dto: UD, user?: OwnershipUser): Promise<RD>;
+    remove(id: number, user?: OwnershipUser): Promise<boolean>;
     findAuditLogs?(query: ListAuditLogsDto): Promise<unknown>;
 }
 export declare function CreateNestedCrudController<CD, UD, RD>(createDto: Type<CD>, updateDto: Type<UD>, responseDto: Type<RD>, options?: CrudControllerFactoryOptions): Type<IBaseController<CD, UD, RD>>;

package/dist/lib/controllers/nest-crud.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nest-crud.controller.d.ts","sourceRoot":"","sources":["../../../src/lib/controllers/nest-crud.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAUL,IAAI,EACL,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAG/D,eAAO,MAAM,6BAA6B,qBAAqB,CAAC;AAEhE,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;AAEjE,MAAM,MAAM,kBAAkB,GAAG,OAAO,CACtC,MAAM,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAC9C,CAAC;AAEF,MAAM,WAAW,4BAA4B;IAC3C,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;IACzC,OAAO,EAAE,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnC,OAAO,CACL,KAAK,EAAE,aAAa,GAAG,SAAS,GAC/B,OAAO,CAAC;QAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IACzC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,aAAa,CAAC,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3D;AAyDD,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EACnD,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,EACnB,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,EACnB,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,EACrB,OAAO,CAAC,EAAE,4BAA4B,GACrC,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CA8HnC"}
+{"version":3,"file":"nest-crud.controller.d.ts","sourceRoot":"","sources":["../../../src/lib/controllers/nest-crud.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAUL,IAAI,EACL,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAEvE,eAAO,MAAM,6BAA6B,qBAAqB,CAAC;AAEhE,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;AAEjE,MAAM,MAAM,kBAAkB,GAAG,OAAO,CACtC,MAAM,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAC9C,CAAC;AAEF,MAAM,WAAW,4BAA4B;IAC3C,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;IACzC,OAAO,EAAE,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnC,OAAO,CACL,KAAK,EAAE,aAAa,GAAG,SAAS,GAC/B,OAAO,CAAC;QAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IACvD,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/D,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,aAAa,CAAC,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3D;AAyDD,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EACnD,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,EACnB,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,EACnB,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,EACrB,OAAO,CAAC,EAAE,4BAA4B,GACrC,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAwInC"}

package/dist/lib/controllers/nest-crud.controller.js

@@ -72,13 +72,13 @@ function CreateNestedCrudController(createDto, updateDto, responseDto, options)
             this.ensureEndpointEnabled('create');
             return this.service.create(dto);
         }
-        update(id, dto) {
+        update(id, dto, user) {
             this.ensureEndpointEnabled('update');
-            return this.service.update(id, dto);
+            return this.service.update(id, dto, user);
         }
-        remove(id) {
+        remove(id, user) {
             this.ensureEndpointEnabled('remove');
-            return this.service.remove(id);
+            return this.service.remove(id, user);
         }
         findAuditLogs(query) {
             this.ensureEndpointEnabled('findAuditLogs');
@@ -87,9 +87,9 @@ function CreateNestedCrudController(createDto, updateDto, responseDto, options)
             }
             return this.service.findAuditLogs(query);
         }
-        findOne(id) {
+        findOne(id, user) {
             this.ensureEndpointEnabled('findOne');
-            return this.service.findOne(id);
+            return this.service.findOne(id, user);
         }
     }
     tslib_1.__decorate([
@@ -160,8 +160,9 @@ function CreateNestedCrudController(createDto, updateDto, responseDto, options)
         (0, swagger_1.ApiResponse)({ type: responseDto }),
         tslib_1.__param(0, (0, common_1.Param)('id', common_1.ParseIntPipe)),
         tslib_1.__param(1, (0, common_1.Body)()),
+        tslib_1.__param(2, (0, nest_auth_1.CurrentUser)()),
         tslib_1.__metadata("design:type", Function),
-        tslib_1.__metadata("design:paramtypes", [Number, Object]),
+        tslib_1.__metadata("design:paramtypes", [Number, Object, Object]),
         tslib_1.__metadata("design:returntype", void 0)
     ], BaseController.prototype, "update", null);
     tslib_1.__decorate([
@@ -169,8 +170,9 @@ function CreateNestedCrudController(createDto, updateDto, responseDto, options)
         (0, response_message_decorator_1.Message)('deleted'),
         (0, audit_log_decorator_1.Audit)({ action: 'DELETE' }),
         tslib_1.__param(0, (0, common_1.Param)('id', common_1.ParseIntPipe)),
+        tslib_1.__param(1, (0, nest_auth_1.CurrentUser)()),
         tslib_1.__metadata("design:type", Function),
-        tslib_1.__metadata("design:paramtypes", [Number]),
+        tslib_1.__metadata("design:paramtypes", [Number, Object]),
         tslib_1.__metadata("design:returntype", void 0)
     ], BaseController.prototype, "remove", null);
     tslib_1.__decorate([
@@ -186,8 +188,9 @@ function CreateNestedCrudController(createDto, updateDto, responseDto, options)
         (0, response_message_decorator_1.Message)('fetched'),
         (0, swagger_1.ApiResponse)({ type: responseDto }),
         tslib_1.__param(0, (0, common_1.Param)('id', common_1.ParseIntPipe)),
+        tslib_1.__param(1, (0, nest_auth_1.CurrentUser)()),
         tslib_1.__metadata("design:type", Function),
-        tslib_1.__metadata("design:paramtypes", [Number]),
+        tslib_1.__metadata("design:paramtypes", [Number, Object]),
         tslib_1.__metadata("design:returntype", void 0)
     ], BaseController.prototype, "findOne", null);
     applyPermissionMetadata(BaseController, options?.permissions);

package/dist/lib/events/audit-event.interface.d.ts

@@ -0,0 +1,32 @@
+export interface AuditEvent {
+    /** Dot-separated event name, e.g. 'auth.user.login.success' */
+    action: string;
+    /** Entity type: 'user', 'role', 'post', etc. */
+    entity: string;
+    /** ID of the affected entity (optional for list/search events) */
+    entityId?: string | number;
+    /** ID of the user performing the action */
+    userId?: string | number;
+    /** Client IP address */
+    ip?: string;
+    /** User-Agent header */
+    userAgent?: string;
+    /** Multi-tenant ID */
+    tenantId?: string;
+    /** Event timestamp */
+    timestamp: Date;
+    /** Arbitrary event-specific data */
+    metadata?: Record<string, unknown>;
+}
+export interface AuditEventHandler {
+    handle(event: AuditEvent): void | Promise<void>;
+}
+export interface AuditEventModuleOptions {
+    /** Handlers to dispatch events to */
+    handlers: AuditEventHandler[];
+    /** Glob patterns to include (default: ['*']) */
+    include?: string[];
+    /** Glob patterns to exclude (default: []) */
+    exclude?: string[];
+}
+//# sourceMappingURL=audit-event.interface.d.ts.map

package/dist/lib/events/audit-event.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-event.interface.d.ts","sourceRoot":"","sources":["../../../src/lib/events/audit-event.interface.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,wBAAwB;IACxB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,wBAAwB;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sBAAsB;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sBAAsB;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,uBAAuB;IACtC,qCAAqC;IACrC,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB"}

package/dist/lib/events/audit-event.interface.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/lib/events/audit-event.listener.d.ts

@@ -0,0 +1,8 @@
+import type { AuditEvent, AuditEventHandler, AuditEventModuleOptions } from './audit-event.interface';
+export declare class AuditEventListener {
+    private handlers;
+    private options;
+    configure(handlers: AuditEventHandler[], options: AuditEventModuleOptions): void;
+    handleEvent(event: AuditEvent): Promise<void>;
+}
+//# sourceMappingURL=audit-event.listener.d.ts.map

package/dist/lib/events/audit-event.listener.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-event.listener.d.ts","sourceRoot":"","sources":["../../../src/lib/events/audit-event.listener.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAgCtG,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAA2B;IAC3C,OAAO,CAAC,OAAO,CAA6C;IAE5D,SAAS,CAAC,QAAQ,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,uBAAuB,GAAG,IAAI;IAK1E,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAiBpD"}

package/dist/lib/events/audit-event.listener.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditEventListener = void 0;
+const RE_SPECIAL = /[.+?^${}()|[\]\\]/g;
+function matchesGlob(pattern, value) {
+    let regexStr = '^';
+    for (let i = 0; i < pattern.length; i++) {
+        const ch = pattern[i];
+        if (ch === '*') {
+            if (i + 1 < pattern.length && pattern[i + 1] === '*') {
+                regexStr += '.*';
+                i++;
+            }
+            else {
+                regexStr += '[^.]*';
+            }
+        }
+        else {
+            regexStr += ch.replace(RE_SPECIAL, '\\$&');
+        }
+    }
+    regexStr += '$';
+    return new RegExp(regexStr).test(value);
+}
+function shouldDispatch(event, options) {
+    const { include = ['*'], exclude = [] } = options;
+    const action = event.action;
+    const included = include.some((pattern) => matchesGlob(pattern, action));
+    if (!included)
+        return false;
+    const excluded = exclude.some((pattern) => matchesGlob(pattern, action));
+    return !excluded;
+}
+class AuditEventListener {
+    constructor() {
+        this.handlers = [];
+        this.options = { handlers: [] };
+    }
+    configure(handlers, options) {
+        this.handlers = handlers;
+        this.options = options;
+    }
+    async handleEvent(event) {
+        const auditEvent = event;
+        if (!shouldDispatch(auditEvent, this.options))
+            return;
+        const results = this.handlers.map(async (handler) => {
+            try {
+                await handler.handle(auditEvent);
+            }
+            catch (err) {
+                console.error(`[AuditEvent] Handler ${handler.constructor.name} failed for "${auditEvent.action}":`, err);
+            }
+        });
+        await Promise.allSettled(results);
+    }
+}
+exports.AuditEventListener = AuditEventListener;

package/dist/lib/events/audit-event.module.d.ts

@@ -0,0 +1,6 @@
+import { DynamicModule } from '@nestjs/common';
+import type { AuditEventModuleOptions } from './audit-event.interface';
+export declare class AuditEventModule {
+    static forRoot(options: AuditEventModuleOptions): DynamicModule;
+}
+//# sourceMappingURL=audit-event.module.d.ts.map

package/dist/lib/events/audit-event.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-event.module.d.ts","sourceRoot":"","sources":["../../../src/lib/events/audit-event.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAkB,MAAM,gBAAgB,CAAC;AAE/D,OAAO,KAAK,EAAc,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAMnF,qBAEa,gBAAgB;IAC3B,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,uBAAuB,GAAG,aAAa;CA8BhE"}

package/dist/lib/events/audit-event.module.js

@@ -0,0 +1,44 @@
+"use strict";
+var AuditEventModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditEventModule = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const event_emitter_1 = require("@nestjs/event-emitter");
+const audit_event_listener_1 = require("./audit-event.listener");
+const AUDIT_EVENT_OPTIONS = 'AUDIT_EVENT_OPTIONS';
+const AUDIT_EVENT_HANDLERS = 'AUDIT_EVENT_HANDLERS';
+let AuditEventModule = AuditEventModule_1 = class AuditEventModule {
+    static forRoot(options) {
+        const listenerProvider = {
+            provide: audit_event_listener_1.AuditEventListener,
+            useFactory: (eventEmitter) => {
+                const listener = new audit_event_listener_1.AuditEventListener();
+                listener.configure(options.handlers, options);
+                eventEmitter.onAny(async (...args) => {
+                    const event = args[1];
+                    if (event?.action) {
+                        await listener.handleEvent(event);
+                    }
+                });
+                return listener;
+            },
+            inject: [event_emitter_1.EventEmitter2],
+        };
+        return {
+            module: AuditEventModule_1,
+            imports: [event_emitter_1.EventEmitterModule.forRoot()],
+            providers: [
+                listenerProvider,
+                { provide: AUDIT_EVENT_OPTIONS, useValue: options },
+                { provide: AUDIT_EVENT_HANDLERS, useValue: options.handlers },
+            ],
+            exports: [event_emitter_1.EventEmitterModule],
+        };
+    }
+};
+exports.AuditEventModule = AuditEventModule;
+exports.AuditEventModule = AuditEventModule = AuditEventModule_1 = tslib_1.__decorate([
+    (0, common_1.Global)(),
+    (0, common_1.Module)({})
+], AuditEventModule);

package/dist/lib/events/handlers/console.handler.d.ts

@@ -0,0 +1,5 @@
+import { AuditEvent, AuditEventHandler } from '../audit-event.interface';
+export declare class ConsoleHandler implements AuditEventHandler {
+    handle(event: AuditEvent): void;
+}
+//# sourceMappingURL=console.handler.d.ts.map

package/dist/lib/events/handlers/console.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"console.handler.d.ts","sourceRoot":"","sources":["../../../../src/lib/events/handlers/console.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAwCzE,qBAAa,cAAe,YAAW,iBAAiB;IACtD,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;CAGhC"}

package/dist/lib/events/handlers/console.handler.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConsoleHandler = void 0;
+const common_1 = require("@nestjs/common");
+const COLORS = {
+    reset: '\x1b[0m',
+    dim: '\x1b[2m',
+    red: '\x1b[31m',
+    green: '\x1b[32m',
+    yellow: '\x1b[33m',
+    blue: '\x1b[34m',
+    cyan: '\x1b[36m',
+    gray: '\x1b[90m',
+};
+function colorize(text, color) {
+    return `${color}${text}${COLORS.reset}`;
+}
+function formatEvent(event) {
+    const ts = event.timestamp.toISOString();
+    const isSuccess = event.action.endsWith('.success') || (!event.action.includes('.failed') && !event.action.includes('.error') && !event.action.includes('.denied') && !event.action.includes('.conflict') && !event.action.includes('.locked') && !event.action.includes('.disabled'));
+    const statusColor = isSuccess ? COLORS.green : COLORS.red;
+    const parts = [
+        colorize(ts, COLORS.dim),
+        colorize(event.action, statusColor),
+        colorize(`entity=${event.entity}`, COLORS.cyan),
+    ];
+    if (event.entityId != null) {
+        parts.push(colorize(`id=${event.entityId}`, COLORS.blue));
+    }
+    if (event.userId != null) {
+        parts.push(colorize(`userId=${event.userId}`, COLORS.yellow));
+    }
+    if (event.ip) {
+        parts.push(colorize(`ip=${event.ip}`, COLORS.gray));
+    }
+    return parts.join(' ');
+}
+class ConsoleHandler {
+    handle(event) {
+        common_1.Logger.log(formatEvent(event));
+    }
+}
+exports.ConsoleHandler = ConsoleHandler;

package/dist/lib/events/index.d.ts

@@ -0,0 +1,5 @@
+export * from './audit-event.interface';
+export * from './audit-event.module';
+export * from './audit-event.listener';
+export * from './handlers/console.handler';
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/events/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/events/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC"}

package/dist/lib/events/index.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./audit-event.interface"), exports);
+tslib_1.__exportStar(require("./audit-event.module"), exports);
+tslib_1.__exportStar(require("./audit-event.listener"), exports);
+tslib_1.__exportStar(require("./handlers/console.handler"), exports);

package/dist/lib/interceptors/audit-log.interceptor.d.ts

@@ -1,12 +1,15 @@
 import { NestInterceptor, ExecutionContext, CallHandler } from '@nestjs/common';
 import { Reflector } from '@nestjs/core';
 import { Observable } from 'rxjs';
+import { EventEmitter2 } from '@nestjs/event-emitter';
 import { AuditService } from '../services/audit-log.service';
 export declare class AuditInterceptor implements NestInterceptor {
     private readonly auditService;
     private readonly reflector;
-    constructor(auditService: AuditService, reflector: Reflector);
+    private readonly eventEmitter?;
+    constructor(auditService: AuditService, reflector: Reflector, eventEmitter?: EventEmitter2 | undefined);
     intercept(context: ExecutionContext, next: CallHandler<unknown>): Observable<unknown>;
+    private emitEvent;
     private resolveEntityName;
 }
 //# sourceMappingURL=audit-log.interceptor.d.ts.map

package/dist/lib/interceptors/audit-log.interceptor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-log.interceptor.d.ts","sourceRoot":"","sources":["../../../src/lib/interceptors/audit-log.interceptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,EACf,gBAAgB,EAChB,WAAW,EACZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,UAAU,EAAO,MAAM,MAAM,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAS7D,qBACa,gBAAiB,YAAW,eAAe;IAEpD,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS;gBADT,YAAY,EAAE,YAAY,EAC1B,SAAS,EAAE,SAAS;IAGvC,SAAS,CACP,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,GACzB,UAAU,CAAC,OAAO,CAAC;IAyCtB,OAAO,CAAC,iBAAiB;CAwB1B"}
+{"version":3,"file":"audit-log.interceptor.d.ts","sourceRoot":"","sources":["../../../src/lib/interceptors/audit-log.interceptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,EACf,gBAAgB,EAChB,WAAW,EAEZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,UAAU,EAA+B,MAAM,MAAM,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAU7D,qBACa,gBAAiB,YAAW,eAAe;IAEpD,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS;IACd,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAFzB,YAAY,EAAE,YAAY,EAC1B,SAAS,EAAE,SAAS,EACR,YAAY,CAAC,EAAE,aAAa,YAAA;IAG3D,SAAS,CACP,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,GACzB,UAAU,CAAC,OAAO,CAAC;IAkFtB,OAAO,CAAC,SAAS;IAKjB,OAAO,CAAC,iBAAiB;CAwB1B"}

package/dist/lib/interceptors/audit-log.interceptor.js

@@ -5,14 +5,16 @@ const tslib_1 = require("tslib");
 const common_1 = require("@nestjs/common");
 const core_1 = require("@nestjs/core");
 const rxjs_1 = require("rxjs");
+const event_emitter_1 = require("@nestjs/event-emitter");
 const audit_log_service_1 = require("../services/audit-log.service");
 const audit_log_decorator_1 = require("../decorators/audit-log.decorator");
 const CONTROLLER_ENTITY_NAME_KEY = 'entityName';
 const ENTITY_ENTITY_NAME_KEY = 'custom:entityName';
 let AuditInterceptor = class AuditInterceptor {
-    constructor(auditService, reflector) {
+    constructor(auditService, reflector, eventEmitter) {
         this.auditService = auditService;
         this.reflector = reflector;
+        this.eventEmitter = eventEmitter;
     }
     intercept(context, next) {
         const handler = context.getHandler();
@@ -24,14 +26,23 @@ let AuditInterceptor = class AuditInterceptor {
         const userId = request.user?.id;
         const ip = request.ip;
         const userAgent = request.headers?.['user-agent'];
+        const entityIdFromParams = request.params?.id;
         let entityName = auditOptions.entity;
         if (!entityName) {
             entityName = this.resolveEntityName(context);
         }
+        const basePayload = {
+            entity: entityName,
+            userId,
+            ip,
+            userAgent,
+        };
         return next.handle().pipe((0, rxjs_1.tap)(async (result) => {
+            const entityId = result?.id ?? entityIdFromParams;
             await this.auditService.log({
                 action: auditOptions.action,
                 entity: entityName,
+                entityId,
                 userId,
                 ip,
                 userAgent,
@@ -42,8 +53,39 @@ let AuditInterceptor = class AuditInterceptor {
                     response: result,
                 },
             });
+            this.emitEvent({
+                ...basePayload,
+                action: `crud.${entityName.toLowerCase()}.${auditOptions.action.toLowerCase()}.success`,
+                entityId,
+                timestamp: new Date(),
+                metadata: {
+                    body: request.body,
+                    params: request.params,
+                    query: request.query,
+                },
+            });
+        }), (0, rxjs_1.catchError)((error) => {
+            const entityId = entityIdFromParams;
+            this.emitEvent({
+                ...basePayload,
+                action: `crud.${entityName.toLowerCase()}.${auditOptions.action.toLowerCase()}.error`,
+                entityId,
+                timestamp: new Date(),
+                metadata: {
+                    body: request.body,
+                    params: request.params,
+                    query: request.query,
+                    error: { message: error.message, statusCode: error.status },
+                },
+            });
+            return (0, rxjs_1.throwError)(() => error);
         }));
     }
+    emitEvent(event) {
+        if (!this.eventEmitter)
+            return;
+        this.eventEmitter.emit(event.action, event);
+    }
     resolveEntityName(context) {
         const controllerClass = context.getClass();
         const controllerMeta = Reflect.getMetadata(CONTROLLER_ENTITY_NAME_KEY, controllerClass);
@@ -67,6 +109,8 @@ let AuditInterceptor = class AuditInterceptor {
 exports.AuditInterceptor = AuditInterceptor;
 exports.AuditInterceptor = AuditInterceptor = tslib_1.__decorate([
     (0, common_1.Injectable)(),
+    tslib_1.__param(2, (0, common_1.Optional)()),
     tslib_1.__metadata("design:paramtypes", [audit_log_service_1.AuditService,
-        core_1.Reflector])
+        core_1.Reflector,
+        event_emitter_1.EventEmitter2])
 ], AuditInterceptor);

package/dist/lib/interfaces/crud.interface.d.ts

@@ -1,6 +1,7 @@
 import { FilterDto } from '../dtos/filter.dto';
 import { PaginationDto } from '../dtos/pagination.dto';
 import { CursorPaginationDto } from '../dtos/cursor-pagination.dto';
+import { OwnershipUser } from './find-mine.interface';
 export type CrudEndpoint = 'findAll' | 'findOne' | 'create' | 'update' | 'remove' | 'findAuditLogs' | 'findMine';
 export interface AuditLogQuery {
     user_id?: string;
@@ -25,10 +26,10 @@ export interface CrudInterface<CreateDto, UpdateDto, ResponseDto> {
         meta?: unknown;
     }>;
     findAllWithCursor?(query: CursorPaginationDto & FilterDto): Promise<CursorPaginationResult<ResponseDto>>;
-    findOne(id: number): Promise<ResponseDto>;
+    findOne(id: number, user?: OwnershipUser): Promise<ResponseDto>;
     create(dto: CreateDto): Promise<ResponseDto>;
-    update(id: number, dto: UpdateDto): Promise<ResponseDto>;
-    remove(id: number): Promise<boolean>;
+    update(id: number, dto: UpdateDto, user?: OwnershipUser): Promise<ResponseDto>;
+    remove(id: number, user?: OwnershipUser): Promise<boolean>;
     findAuditLogs?(query: AuditLogQuery): Promise<unknown>;
     findMine?(userId: string | number, query: PaginationDto & FilterDto): Promise<{
         data: ResponseDto[];

package/dist/lib/interfaces/crud.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crud.interface.d.ts","sourceRoot":"","sources":["../../../src/lib/interfaces/crud.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAEpE,MAAM,MAAM,YAAY,GACpB,SAAS,GACT,SAAS,GACT,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,eAAe,GACf,UAAU,CAAC;AAEf,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB,CAAC,CAAC;IACvC,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW;IAC9D,iBAAiB,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAE5C,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,GAAG,OAAO,CAAC;QACjD,IAAI,EAAE,WAAW,EAAE,CAAC;QACpB,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,CAAC,CAAC;IAEH,iBAAiB,CAAC,CAChB,KAAK,EAAE,mBAAmB,GAAG,SAAS,GACrC,OAAO,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,CAAC;IAEhD,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAE1C,MAAM,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAE7C,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAEzD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAErC,aAAa,CAAC,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEvD,QAAQ,CAAC,CACP,MAAM,EAAE,MAAM,GAAG,MAAM,EACvB,KAAK,EAAE,aAAa,GAAG,SAAS,GAC/B,OAAO,CAAC;QAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACrD"}
+{"version":3,"file":"crud.interface.d.ts","sourceRoot":"","sources":["../../../src/lib/interfaces/crud.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,MAAM,MAAM,YAAY,GACpB,SAAS,GACT,SAAS,GACT,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,eAAe,GACf,UAAU,CAAC;AAEf,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB,CAAC,CAAC;IACvC,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW;IAC9D,iBAAiB,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAE5C,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,GAAG,OAAO,CAAC;QACjD,IAAI,EAAE,WAAW,EAAE,CAAC;QACpB,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,CAAC,CAAC;IAEH,iBAAiB,CAAC,CAChB,KAAK,EAAE,mBAAmB,GAAG,SAAS,GACrC,OAAO,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,CAAC;IAEhD,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAEhE,MAAM,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAE7C,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAE/E,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE3D,aAAa,CAAC,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEvD,QAAQ,CAAC,CACP,MAAM,EAAE,MAAM,GAAG,MAAM,EACvB,KAAK,EAAE,aAAa,GAAG,SAAS,GAC/B,OAAO,CAAC;QAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACrD"}

package/dist/lib/interfaces/find-mine.interface.d.ts

@@ -1,6 +1,32 @@
 import { ObjectLiteral, SelectQueryBuilder } from 'typeorm';
+/**
+ * Minimal structural view of the authenticated user passed to ownership
+ * enforcement. Compatible with `AuthUser` from `@nest-util/nest-auth`.
+ */
+export interface OwnershipUser {
+    id?: string | number;
+    permissions?: readonly string[];
+    [key: string]: unknown;
+}
 export interface FindMineConfig<TEntity extends ObjectLiteral> {
     userOwnershipField?: keyof TEntity;
     findMineQuery?: (qb: SelectQueryBuilder<TEntity>, userId: string | number) => void;
+    /**
+     * When true (and an ownership field/query is configured), the generic
+     * `findOne`, `update`, and `remove` operations are scoped to records owned
+     * by the passed-in user. Non-owned records resolve to 404; missing user
+     * resolves to 403. Defaults to false - existing behavior is preserved.
+     */
+    enforceOwnership?: boolean;
+    /**
+     * Permission strings that grant full access and bypass ownership checks.
+     * Example: ['admin.access'].
+     */
+    ownershipBypassPermissions?: readonly string[];
+    /**
+     * Custom predicate that grants full access and bypasses ownership checks.
+     * Takes precedence alongside ownershipBypassPermissions.
+     */
+    ownershipBypass?: (user: OwnershipUser) => boolean;
 }
 //# sourceMappingURL=find-mine.interface.d.ts.map

package/dist/lib/interfaces/find-mine.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"find-mine.interface.d.ts","sourceRoot":"","sources":["../../../src/lib/interfaces/find-mine.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAE5D,MAAM,WAAW,cAAc,CAAC,OAAO,SAAS,aAAa;IAC3D,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC;IACnC,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC;CACpF"}
+{"version":3,"file":"find-mine.interface.d.ts","sourceRoot":"","sources":["../../../src/lib/interfaces/find-mine.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAE5D;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,cAAc,CAAC,OAAO,SAAS,aAAa;IAC3D,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC;IACnC,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC;IAEnF;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAE3B;;;OAGG;IACH,0BAA0B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAE/C;;;OAGG;IACH,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC;CACpD"}

package/dist/lib/services/nest-crud.service.d.ts

@@ -7,7 +7,7 @@ import { FilterDto } from '../dtos/filter.dto';
 import { CrudEndpoint, CrudInterface, CursorPaginationResult } from '../interfaces/crud.interface';
 import { CursorStrategy } from '../interfaces/cursor-strategy.interface';
 import { CrudHooks, TransactionConfig } from '../interfaces/hooks.interface';
-import { FindMineConfig } from '../interfaces/find-mine.interface';
+import { FindMineConfig, OwnershipUser } from '../interfaces/find-mine.interface';
 export interface CrudServiceOptions<Entity extends ObjectLiteral, ResponseDto> extends FindMineConfig<Entity> {
     repository: Repository<Entity>;
     allowedFilters?: readonly (keyof Entity)[];
@@ -45,11 +45,20 @@ export declare class NestCrudService<Entity extends ObjectLiteral, CreateDto = P
     protected readonly transactionConfig: TransactionConfig;
     protected readonly userOwnershipField?: keyof Entity;
     protected readonly findMineQuery?: (qb: SelectQueryBuilder<Entity>, userId: string | number) => void;
+    protected readonly enforceOwnership: boolean;
+    protected readonly ownershipBypassPermissions: readonly string[];
+    protected readonly ownershipBypass?: (user: OwnershipUser) => boolean;
     constructor(options: CrudServiceOptions<Entity, ResponseDto>);
     private resolveRelations;
     private executeInTransaction;
     private executeHook;
     private buildRelationsObject;
+    private applyIncludeJoins;
+    private isOwnershipConfigured;
+    private canBypassOwnership;
+    private enforceOwnershipFor;
+    private applyOwnershipCondition;
+    private findOwnedEntity;
     findAll(query: PaginationDto & FilterDto): Promise<{
         data: ResponseDto[];
         meta: {
@@ -66,10 +75,10 @@ export declare class NestCrudService<Entity extends ObjectLiteral, CreateDto = P
         meta?: unknown;
     }>;
     findAllWithCursor(query: CursorPaginationDto & FilterDto): Promise<CursorPaginationResult<ResponseDto>>;
-    findOne(id: number): Promise<ResponseDto>;
+    findOne(id: number, user?: OwnershipUser): Promise<ResponseDto>;
     create(payload: CreateDto): Promise<ResponseDto>;
-    update(id: number, payload: UpdateDto): Promise<ResponseDto>;
-    remove(id: number): Promise<boolean>;
+    update(id: number, payload: UpdateDto, user?: OwnershipUser): Promise<ResponseDto>;
+    remove(id: number, user?: OwnershipUser): Promise<boolean>;
     findAuditLogs(query: {
         user_id?: string;
         start_date?: string;

package/dist/lib/services/nest-crud.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nest-crud.service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/nest-crud.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsD,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EAAe,aAAa,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAkB,SAAS,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAQnE,MAAM,WAAW,kBAAkB,CAAC,MAAM,SAAS,aAAa,EAAE,WAAW,CAC3E,SAAQ,cAAc,CAAC,MAAM,CAAC;IAC9B,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/B,cAAc,CAAC,EAAE,SAAS,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC;IAC3C,iBAAiB,CAAC,EAAE,SAAS,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC;IAC9C,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE;QACV,QAAQ,EAAE,MAAM,MAAM,CAAC;QACvB,IAAI,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QAChC,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,EAAE,CAAC;IACJ,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,KAAK,WAAW,GAAG,WAAW,EAAE,CAAC;IAC3E,cAAc,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,cAAc,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,iBAAiB,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAC5C,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,KAAK,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED,qBACa,eAAe,CAC1B,MAAM,SAAS,aAAa,EAC5B,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,EAC3B,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,EAC3B,WAAW,GAAG,MAAM,CACpB,YAAW,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC;IAE3D,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5C,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,SAAS,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC;IAC7D,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC;IAChE,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE;QAC5B,QAAQ,EAAE,MAAM,MAAM,CAAC;QACvB,IAAI,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QAChC,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,EAAE,CAAC;IACJ,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CACjC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,KACtB,WAAW,GAAG,WAAW,EAAE,CAAC;IACjC,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,QAAQ,CAAC,iBAAiB,EAAE,SAAS,YAAY,EAAE,CAAC;IACpD,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IAClD,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACtD,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IACxD,SAAS,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,MAAM,CAAC;IACrD,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC;gBAEzF,OAAO,EAAE,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC;YAkB9C,gBAAgB;YA+BhB,oBAAoB;YAoBpB,WAAW;IAezB,OAAO,CAAC,oBAAoB;IAoBtB,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS;;;;;;;;;;;IA0CxC,QAAQ,CACZ,MAAM,EAAE,MAAM,GAAG,MAAM,EACvB,KAAK,EAAE,aAAa,GAAG,SAAS,GAC/B,OAAO,CAAC;QAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAoD7C,iBAAiB,CACrB,KAAK,EAAE,mBAAmB,GAAG,SAAS,GACrC,OAAO,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;IA4EzC,OAAO,CAAC,EAAE,EAAE,MAAM;IAyBlB,MAAM,CAAC,OAAO,EAAE,SAAS;IAmBzB,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS;IA0BrC,MAAM,CAAC,EAAE,EAAE,MAAM;IAmBjB,aAAa,CAAC,KAAK,EAAE;QACzB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB;;;;;;;;;CA4CF"}
+{"version":3,"file":"nest-crud.service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/nest-crud.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0E,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC9G,OAAO,EAAe,aAAa,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAkB,SAAS,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAQlF,MAAM,WAAW,kBAAkB,CAAC,MAAM,SAAS,aAAa,EAAE,WAAW,CAC3E,SAAQ,cAAc,CAAC,MAAM,CAAC;IAC9B,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/B,cAAc,CAAC,EAAE,SAAS,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC;IAC3C,iBAAiB,CAAC,EAAE,SAAS,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC;IAC9C,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE;QACV,QAAQ,EAAE,MAAM,MAAM,CAAC;QACvB,IAAI,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QAChC,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,EAAE,CAAC;IACJ,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,KAAK,WAAW,GAAG,WAAW,EAAE,CAAC;IAC3E,cAAc,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,cAAc,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,iBAAiB,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAC5C,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,KAAK,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED,qBACa,eAAe,CAC1B,MAAM,SAAS,aAAa,EAC5B,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,EAC3B,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,EAC3B,WAAW,GAAG,MAAM,CACpB,YAAW,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC;IAE3D,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5C,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,SAAS,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC;IAC7D,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC;IAChE,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE;QAC5B,QAAQ,EAAE,MAAM,MAAM,CAAC;QACvB,IAAI,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QAChC,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,EAAE,CAAC;IACJ,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CACjC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,KACtB,WAAW,GAAG,WAAW,EAAE,CAAC;IACjC,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,QAAQ,CAAC,iBAAiB,EAAE,SAAS,YAAY,EAAE,CAAC;IACpD,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IAClD,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACtD,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IACxD,SAAS,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,MAAM,CAAC;IACrD,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC;IACrG,SAAS,CAAC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAC7C,SAAS,CAAC,QAAQ,CAAC,0BAA0B,EAAE,SAAS,MAAM,EAAE,CAAC;IACjE,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC;gBAE1D,OAAO,EAAE,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC;YAqB9C,gBAAgB;YA+BhB,oBAAoB;YAoBpB,WAAW;IAezB,OAAO,CAAC,oBAAoB;IAoB5B,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,kBAAkB;IAmB1B,OAAO,CAAC,mBAAmB;IAQ3B,OAAO,CAAC,uBAAuB;YAWjB,eAAe;IAqBvB,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS;;;;;;;;;;;IA8BxC,QAAQ,CACZ,MAAM,EAAE,MAAM,GAAG,MAAM,EACvB,KAAK,EAAE,aAAa,GAAG,SAAS,GAC/B,OAAO,CAAC;QAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAoC7C,iBAAiB,CACrB,KAAK,EAAE,mBAAmB,GAAG,SAAS,GACrC,OAAO,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAgEzC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa;IA+BxC,MAAM,CAAC,OAAO,EAAE,SAAS;IAmBzB,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,aAAa;IAgC3D,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa;IAyBvC,aAAa,CAAC,KAAK,EAAE;QACzB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB;;;;;;;;;CA4CF"}

package/dist/lib/services/nest-crud.service.js

@@ -24,6 +24,9 @@ let NestCrudService = class NestCrudService {
         this.transactionConfig = options.transactionConfig ?? {};
         this.userOwnershipField = options.userOwnershipField;
         this.findMineQuery = options.findMineQuery;
+        this.enforceOwnership = options.enforceOwnership ?? false;
+        this.ownershipBypassPermissions = options.ownershipBypassPermissions ?? [];
+        this.ownershipBypass = options.ownershipBypass;
     }
     async resolveRelations(payload) {
         if (!this.relations.length)
@@ -92,22 +95,67 @@ let NestCrudService = class NestCrudService {
         }
         return result;
     }
+    applyIncludeJoins(qb) {
+        if (this.include.length === 0)
+            return;
+        this.include.forEach((relation) => {
+            const parts = relation.split('.');
+            if (parts.length === 1) {
+                qb.leftJoinAndSelect(`e.${parts[0]}`, parts[0]);
+            }
+            else {
+                const parentAlias = parts.slice(0, -1).join('_');
+                const field = parts[parts.length - 1];
+                const alias = parts.join('_');
+                qb.leftJoinAndSelect(`${parentAlias}.${field}`, alias);
+            }
+        });
+    }
+    isOwnershipConfigured() {
+        return Boolean(this.userOwnershipField || this.findMineQuery);
+    }
+    canBypassOwnership(user) {
+        if (!user)
+            return false;
+        if (this.ownershipBypass && this.ownershipBypass(user)) {
+            return true;
+        }
+        if (this.ownershipBypassPermissions.length > 0) {
+            const userPermissions = Array.isArray(user.permissions)
+                ? user.permissions
+                : [];
+            return this.ownershipBypassPermissions.some((permission) => userPermissions.includes(permission));
+        }
+        return false;
+    }
+    enforceOwnershipFor(user) {
+        return Boolean(this.enforceOwnership &&
+            this.isOwnershipConfigured() &&
+            !this.canBypassOwnership(user));
+    }
+    applyOwnershipCondition(qb, userId) {
+        if (this.findMineQuery) {
+            this.findMineQuery(qb, userId);
+        }
+        else if (this.userOwnershipField) {
+            qb.where(`e.${String(this.userOwnershipField)} = :userId`, { userId });
+        }
+    }
+    async findOwnedEntity(id, user) {
+        const userId = user?.id;
+        if (userId === undefined || userId === null) {
+            throw new common_1.ForbiddenException('Authentication required to access this resource');
+        }
+        const qb = this.repo.createQueryBuilder('e');
+        this.applyOwnershipCondition(qb, userId);
+        qb.andWhere('e.id = :id', { id });
+        this.applyIncludeJoins(qb);
+        const rows = await qb.getMany();
+        return rows[0] ?? null;
+    }
     async findAll(query) {
         const qb = this.repo.createQueryBuilder('e');
-        if (this.include.length > 0) {
-            this.include.forEach((relation) => {
-                const parts = relation.split('.');
-                if (parts.length === 1) {
-                    qb.leftJoinAndSelect(`e.${parts[0]}`, parts[0]);
-                }
-                else {
-                    const parentAlias = parts.slice(0, -1).join('_');
-                    const field = parts[parts.length - 1];
-                    const alias = parts.join('_');
-                    qb.leftJoinAndSelect(`${parentAlias}.${field}`, alias);
-                }
-            });
-        }
+        this.applyIncludeJoins(qb);
         (0, filter_helper_1.applyFilters)(qb, query.filter, this.allowedFilters);
         const paginationMeta = (0, pagination_helper_1.applyPagination)(qb, query);
         if (query.orderBy) {
@@ -130,26 +178,8 @@ let NestCrudService = class NestCrudService {
             throw new common_1.BadRequestException('findMine not configured');
         }
         const qb = this.repo.createQueryBuilder('e');
-        if (this.findMineQuery) {
-            this.findMineQuery(qb, userId);
-        }
-        else if (this.userOwnershipField) {
-            qb.where(`e.${String(this.userOwnershipField)} = :userId`, { userId });
-        }
-        if (this.include.length > 0) {
-            this.include.forEach((relation) => {
-                const parts = relation.split('.');
-                if (parts.length === 1) {
-                    qb.leftJoinAndSelect(`e.${parts[0]}`, parts[0]);
-                }
-                else {
-                    const parentAlias = parts.slice(0, -1).join('_');
-                    const field = parts[parts.length - 1];
-                    const alias = parts.join('_');
-                    qb.leftJoinAndSelect(`${parentAlias}.${field}`, alias);
-                }
-            });
-        }
+        this.applyOwnershipCondition(qb, userId);
+        this.applyIncludeJoins(qb);
         (0, filter_helper_1.applyFilters)(qb, query.filter, this.allowedFilters);
         const paginationMeta = (0, pagination_helper_1.applyPagination)(qb, query);
         if (query.orderBy) {
@@ -173,20 +203,7 @@ let NestCrudService = class NestCrudService {
         const orderDirection = 'DESC';
         const qb = this.repo.createQueryBuilder('e');
         // Join relations
-        if (this.include.length > 0) {
-            this.include.forEach((relation) => {
-                const parts = relation.split('.');
-                if (parts.length === 1) {
-                    qb.leftJoinAndSelect(`e.${parts[0]}`, parts[0]);
-                }
-                else {
-                    const parentAlias = parts.slice(0, -1).join('_');
-                    const field = parts[parts.length - 1];
-                    const alias = parts.join('_');
-                    qb.leftJoinAndSelect(`${parentAlias}.${field}`, alias);
-                }
-            });
-        }
+        this.applyIncludeJoins(qb);
         // Apply filters
         (0, filter_helper_1.applyFilters)(qb, query.filter, this.allowedFilters);
         // Apply cursor filter
@@ -232,15 +249,21 @@ let NestCrudService = class NestCrudService {
             },
         };
     }
-    async findOne(id) {
+    async findOne(id, user) {
         await this.executeHook(this.hooks.beforeFindOne, { id });
-        const relationsObj = this.include.length > 0
-            ? this.buildRelationsObject(this.include)
-            : undefined;
-        const entity = await this.repo.findOne({
-            where: { id },
-            relations: relationsObj,
-        });
+        let entity;
+        if (this.enforceOwnershipFor(user)) {
+            entity = await this.findOwnedEntity(id, user);
+        }
+        else {
+            const relationsObj = this.include.length > 0
+                ? this.buildRelationsObject(this.include)
+                : undefined;
+            entity = await this.repo.findOne({
+                where: { id },
+                relations: relationsObj,
+            });
+        }
         if (!entity) {
             throw new common_1.NotFoundException('Resource not found');
         }
@@ -261,10 +284,16 @@ let NestCrudService = class NestCrudService {
         await this.executeHook(this.hooks.afterCreate, { entity, payload: payloadSnapshot });
         return result;
     }
-    async update(id, payload) {
-        const existing = await this.repo.findOneBy({
-            id,
-        });
+    async update(id, payload, user) {
+        let existing;
+        if (this.enforceOwnershipFor(user)) {
+            existing = await this.findOwnedEntity(id, user);
+        }
+        else {
+            existing = await this.repo.findOneBy({
+                id,
+            });
+        }
         if (!existing) {
             throw new common_1.NotFoundException('Resource not found');
         }
@@ -273,14 +302,20 @@ let NestCrudService = class NestCrudService {
         const resolved = await this.resolveRelations(payload);
         this.repo.merge(existing, resolved);
         await this.repo.save(existing);
-        const result = await this.findOne(id);
+        const result = await this.findOne(id, user);
         await this.executeHook(this.hooks.afterUpdate, { entity: result, payload: payloadSnapshot, id });
         return result;
     }
-    async remove(id) {
-        const existing = await this.repo.findOneBy({
-            id,
-        });
+    async remove(id, user) {
+        let existing;
+        if (this.enforceOwnershipFor(user)) {
+            existing = await this.findOwnedEntity(id, user);
+        }
+        else {
+            existing = await this.repo.findOneBy({
+                id,
+            });
+        }
         if (!existing) {
             throw new common_1.NotFoundException('Resource not found');
         }

package/dist/lib/testing/crud-controller.test-suites.js

@@ -71,7 +71,7 @@ function crudControllerTests(config) {
             const expectedResult = { id: 1, name: 'Test' };
             service.findOne.mockResolvedValue(expectedResult);
             const result = await controller.findOne(1);
-            expect(service.findOne).toHaveBeenCalledWith(1);
+            expect(service.findOne).toHaveBeenCalledWith(1, undefined);
             expect(result).toEqual(expectedResult);
         });
     });
@@ -91,7 +91,7 @@ function crudControllerTests(config) {
             const expectedResult = { id: 1 };
             service.update.mockResolvedValue(expectedResult);
             const result = await controller.update(1, dto);
-            expect(service.update).toHaveBeenCalledWith(1, dto);
+            expect(service.update).toHaveBeenCalledWith(1, dto, undefined);
             expect(result).toEqual(expectedResult);
         });
     });
@@ -99,7 +99,7 @@ function crudControllerTests(config) {
         it('should call service.remove', async () => {
             service.remove.mockResolvedValue(true);
             const result = await controller.remove(1);
-            expect(service.remove).toHaveBeenCalledWith(1);
+            expect(service.remove).toHaveBeenCalledWith(1, undefined);
             expect(result).toBe(true);
         });
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nest-util/nest-crud",
-  "version": "1.0.6",
+  "version": "1.0.9",
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -34,6 +34,7 @@
     "@nest-util/nest-auth": "workspace:*",
     "@nestjs/common": "^11.0.0",
     "@nestjs/core": "^11.0.0",
+    "@nestjs/event-emitter": "^3.0.0",
     "@nestjs/swagger": "^11.2.6",
     "@nestjs/typeorm": "^11.0.1",
     "class-transformer": "^0.5.1",
@@ -45,6 +46,9 @@
   "peerDependenciesMeta": {
     "@nest-util/nest-auth": {
       "optional": true
+    },
+    "@nestjs/event-emitter": {
+      "optional": true
     }
   }
 }