@pawells/nestjs-shared 1.0.0-dev.4c8c698

package/build/common/factories/module-factory.js

@@ -0,0 +1,253 @@
+/**
+ * Module factory utilities for common NestJS module patterns
+ *
+ * Provides standardized factory functions for creating modules with consistent
+ * structure, providers, exports, and configuration patterns.
+ */
+import { Logger } from '@nestjs/common';
+import { APP_FILTER, APP_INTERCEPTOR, APP_PIPE, APP_GUARD } from '@nestjs/core';
+/**
+ * Creates a global module with standardized configuration
+ *
+ * @param config - Module configuration
+ * @returns DynamicModule
+ *
+ * @example
+ * ```typescript
+ * @Module({})
+ * export class ConfigModule extends createGlobalModule({
+ *   name: 'ConfigModule',
+ *   providers: [ConfigService],
+ *   exports: [ConfigService],
+ * }) {}
+ * ```
+ */
+export function CreateGlobalModule(config) {
+    const { name, providers = [], exports = [], imports = [], isGlobal = true } = config;
+    const moduleConfig = {
+        providers: [
+            ...providers,
+            {
+                provide: Logger,
+                useValue: new Logger(name),
+            },
+        ],
+        exports: [
+            ...exports,
+            Logger,
+        ],
+        imports,
+    };
+    if (isGlobal) {
+        moduleConfig.providers.push({
+            provide: 'MODULE_TYPE',
+            useValue: 'global',
+        });
+    }
+    return {
+        module: class {
+        },
+        ...moduleConfig,
+        global: isGlobal,
+    };
+}
+/**
+ * Creates a feature module with standardized configuration
+ *
+ * @param config - Module configuration
+ * @returns DynamicModule
+ *
+ * @example
+ * ```typescript
+ * @Module({})
+ * export class UserModule extends createFeatureModule({
+ *   name: 'UserModule',
+ *   controllers: [UserController],
+ *   providers: [UserService],
+ *   exports: [UserService],
+ * }) {}
+ * ```
+ */
+export function CreateFeatureModule(config) {
+    const { name, providers = [], exports = [], controllers = [], imports = [] } = config;
+    return {
+        module: class {
+        },
+        controllers,
+        providers: [
+            ...providers,
+            {
+                provide: Logger,
+                useValue: new Logger(name),
+            },
+        ],
+        exports: [
+            ...exports,
+            Logger,
+        ],
+        imports,
+    };
+}
+/**
+ * Creates a service module with standardized configuration
+ *
+ * @param config - Module configuration
+ * @returns DynamicModule
+ *
+ * @example
+ * ```typescript
+ * @Module({})
+ * export class DatabaseModule extends createServiceModule({
+ *   name: 'DatabaseModule',
+ *   providers: [DatabaseService, DatabaseConnection],
+ *   exports: [DatabaseService],
+ * }) {}
+ * ```
+ */
+export function CreateServiceModule(config) {
+    const { name, providers = [], exports = [], imports = [] } = config;
+    return {
+        module: class {
+        },
+        providers: [
+            ...providers,
+            {
+                provide: Logger,
+                useValue: new Logger(name),
+            },
+        ],
+        exports: [
+            ...exports,
+            Logger,
+        ],
+        imports,
+    };
+}
+/**
+ * Creates an application module with global filters, interceptors, pipes, and guards
+ *
+ * @param config - Module configuration
+ * @returns DynamicModule
+ *
+ * @example
+ * ```typescript
+ * @Module({})
+ * export class AppModule extends createApplicationModule({
+ *   name: 'AppModule',
+ *   imports: [UserModule, AuthModule],
+ *   filters: [HttpExceptionFilter],
+ *   interceptors: [LoggingInterceptor],
+ *   pipes: [ValidationPipe],
+ *   guards: [AuthGuard],
+ * }) {}
+ * ```
+ */
+export function CreateApplicationModule(config) {
+    const { name, filters = [], interceptors = [], pipes = [], guards = [], imports = [] } = config;
+    const providers = [
+        {
+            provide: Logger,
+            useValue: new Logger(name),
+        },
+    ];
+    // Add global filters
+    filters.forEach((filter) => {
+        providers.push({
+            provide: APP_FILTER,
+            useClass: filter,
+        });
+    });
+    // Add global interceptors
+    interceptors.forEach((interceptor) => {
+        providers.push({
+            provide: APP_INTERCEPTOR,
+            useClass: interceptor,
+        });
+    });
+    // Add global pipes
+    pipes.forEach((pipe) => {
+        providers.push({
+            provide: APP_PIPE,
+            useClass: pipe,
+        });
+    });
+    // Add global guards
+    guards.forEach((guard) => {
+        providers.push({
+            provide: APP_GUARD,
+            useClass: guard,
+        });
+    });
+    return {
+        module: class {
+        },
+        providers,
+        exports: [Logger],
+        imports,
+    };
+}
+/**
+ * Creates a module with conditional providers based on configuration
+ *
+ * @param config - Base module configuration
+ * @param conditions - Array of conditional provider configurations
+ * @returns DynamicModule
+ *
+ * @example
+ * ```typescript
+ * @Module({})
+ * export class CacheModule extends createConditionalModule(
+ *   { name: 'CacheModule', imports: [ConfigModule] },
+ *   [
+ *     {
+ *       condition: (config) => config.get('CACHE_ENABLED'),
+ *       providers: [RedisService],
+ *       exports: [RedisService],
+ *     },
+ *   ]
+ * ) {}
+ * ```
+ */
+export function CreateConditionalModule(baseConfig, conditions) {
+    const { name = 'ConditionalModule', providers = [], exports = [], imports = [] } = baseConfig;
+    const conditionalProviders = [];
+    const conditionalExports = [];
+    const conditionalImports = [];
+    conditions.forEach(({ condition, providers: condProviders = [], exports: condExports = [], imports: condImports = [], config }) => {
+        if (condition(config)) {
+            conditionalProviders.push(...condProviders);
+            conditionalExports.push(...condExports);
+            conditionalImports.push(...condImports);
+        }
+    });
+    return {
+        module: class {
+        },
+        providers: [
+            ...providers,
+            ...conditionalProviders,
+            {
+                provide: Logger,
+                useValue: new Logger(name),
+            },
+        ],
+        exports: [
+            ...exports,
+            ...conditionalExports,
+            Logger,
+        ],
+        imports: [
+            ...imports,
+            ...conditionalImports,
+        ],
+    };
+}
+/**
+ * Backwards compatibility aliases - exported functions use PascalCase per project conventions
+ */
+export const createApplicationModule = CreateApplicationModule;
+export const createConditionalModule = CreateConditionalModule;
+export const createFeatureModule = CreateFeatureModule;
+export const createGlobalModule = CreateGlobalModule;
+export const createServiceModule = CreateServiceModule;
+//# sourceMappingURL=module-factory.js.map

package/build/common/factories/module-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-factory.js","sourceRoot":"","sources":["../../../src/common/factories/module-factory.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAiB,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAkEhF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAA0B;IAC5D,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,QAAQ,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IAErF,MAAM,YAAY,GAAQ;QACzB,SAAS,EAAE;YACV,GAAG,SAAS;YACZ;gBACC,OAAO,EAAE,MAAM;gBACf,QAAQ,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC;aAC1B;SACD;QACD,OAAO,EAAE;YACR,GAAG,OAAO;YACV,MAAM;SACN;QACD,OAAO;KACP,CAAC;IAEF,IAAI,QAAQ,EAAE,CAAC;QACd,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC;YAC3B,OAAO,EAAE,aAAa;YACtB,QAAQ,EAAE,QAAQ;SAClB,CAAC,CAAC;IACJ,CAAC;IAED,OAAO;QACN,MAAM,EAAE;SAAQ;QAChB,GAAG,YAAY;QACf,MAAM,EAAE,QAAQ;KAChB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA2B;IAC9D,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,WAAW,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC;IAEtF,OAAO;QACN,MAAM,EAAE;SAAQ;QAChB,WAAW;QACX,SAAS,EAAE;YACV,GAAG,SAAS;YACZ;gBACC,OAAO,EAAE,MAAM;gBACf,QAAQ,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC;aAC1B;SACD;QACD,OAAO,EAAE;YACR,GAAG,OAAO;YACV,MAAM;SACN;QACD,OAAO;KACP,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA2B;IAC9D,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC;IAEpE,OAAO;QACN,MAAM,EAAE;SAAQ;QAChB,SAAS,EAAE;YACV,GAAG,SAAS;YACZ;gBACC,OAAO,EAAE,MAAM;gBACf,QAAQ,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC;aAC1B;SACD;QACD,OAAO,EAAE;YACR,GAAG,OAAO;YACV,MAAM;SACN;QACD,OAAO;KACP,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAA+B;IACtE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,EAAE,EAAE,YAAY,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC;IAEhG,MAAM,SAAS,GAAU;QACxB;YACC,OAAO,EAAE,MAAM;YACf,QAAQ,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC;SAC1B;KACD,CAAC;IAEF,qBAAqB;IACrB,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QAC1B,SAAS,CAAC,IAAI,CAAC;YACd,OAAO,EAAE,UAAU;YACnB,QAAQ,EAAE,MAAM;SAChB,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,0BAA0B;IAC1B,YAAY,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE;QACpC,SAAS,CAAC,IAAI,CAAC;YACd,OAAO,EAAE,eAAe;YACxB,QAAQ,EAAE,WAAW;SACrB,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,mBAAmB;IACnB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACtB,SAAS,CAAC,IAAI,CAAC;YACd,OAAO,EAAE,QAAQ;YACjB,QAAQ,EAAE,IAAI;SACd,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,oBAAoB;IACpB,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACxB,SAAS,CAAC,IAAI,CAAC;YACd,OAAO,EAAE,SAAS;YAClB,QAAQ,EAAE,KAAK;SACf,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACN,MAAM,EAAE;SAAQ;QAChB,SAAS;QACT,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO;KACP,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,uBAAuB,CACtC,UAAmF,EACnF,UAOE;IAEF,MAAM,EAAE,IAAI,GAAG,mBAAmB,EAAE,SAAS,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,UAAU,CAAC;IAE9F,MAAM,oBAAoB,GAAU,EAAE,CAAC;IACvC,MAAM,kBAAkB,GAAU,EAAE,CAAC;IACrC,MAAM,kBAAkB,GAAU,EAAE,CAAC;IAErC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACjI,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,oBAAoB,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;YAC5C,kBAAkB,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;YACxC,kBAAkB,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;QACzC,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,OAAO;QACN,MAAM,EAAE;SAAQ;QAChB,SAAS,EAAE;YACV,GAAG,SAAS;YACZ,GAAG,oBAAoB;YACvB;gBACC,OAAO,EAAE,MAAM;gBACf,QAAQ,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC;aAC1B;SACD;QACD,OAAO,EAAE;YACR,GAAG,OAAO;YACV,GAAG,kBAAkB;YACrB,MAAM;SACN;QACD,OAAO,EAAE;YACR,GAAG,OAAO;YACV,GAAG,kBAAkB;SACrB;KACD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;AAC/D,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;AAC/D,MAAM,CAAC,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AACvD,MAAM,CAAC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AACrD,MAAM,CAAC,MAAM,mBAAmB,GAAG,mBAAmB,CAAC"}

package/build/common/factories/rate-limit-config.factory.d.ts

@@ -0,0 +1,79 @@
+/**
+ * Rate Limit Config Factory
+ *
+ * Provides a generic factory function for creating consistent rate limit configurations
+ * across all services. Includes sensible defaults for authentication and API endpoints
+ * with support for service-specific customization via deep merging.
+ *
+ * Default limits:
+ * - auth.login: 5 requests per 60 seconds
+ * - auth.register: 3 requests per 60 seconds
+ * - auth.refreshToken: 10 requests per 60 seconds
+ * - api.default: 100 requests per 60 seconds
+ * - api.search: 30 requests per 60 seconds
+ */
+/**
+ * Describes the rate limit for a single endpoint or operation
+ *
+ * @property ttl Time-to-live in milliseconds (sliding window for rate limit)
+ * @property limit Maximum number of requests allowed within the TTL
+ */
+export interface RateLimitDescriptor {
+    /** Time-to-live in milliseconds */
+    ttl: number;
+    /** Maximum number of requests allowed within TTL */
+    limit: number;
+}
+/**
+ * Complete rate limit configuration with auth, API, and custom domain limits
+ *
+ * @property auth Authentication endpoint rate limits (login, register, refresh token)
+ * @property api API endpoint rate limits (default, search)
+ * @property custom Index signature for service-specific custom rate limits
+ */
+export interface RateLimitConfig {
+    /** Authentication endpoint limits */
+    auth: {
+        login?: RateLimitDescriptor;
+        register?: RateLimitDescriptor;
+        refreshToken?: RateLimitDescriptor;
+    };
+    /** API endpoint limits */
+    api: {
+        default?: RateLimitDescriptor;
+        search?: RateLimitDescriptor;
+    };
+    /** Custom service-specific limits */
+    [key: string]: any;
+}
+/**
+ * Creates a rate limit configuration with optional overrides
+ *
+ * Creates a new rate limit configuration by deep merging the provided overrides
+ * with sensible defaults. This ensures that all default limits are preserved
+ * unless explicitly overridden.
+ *
+ * @param overrides Optional partial configuration to override defaults
+ * @returns Complete rate limit configuration with overrides applied
+ *
+ * @example
+ * ```typescript
+ * import { CreateRateLimitConfig } from '@pawells/nestjs-shared';
+ *
+ * // Use all defaults
+ * const config = CreateRateLimitConfig();
+ *
+ * // Override specific limits
+ * const customConfig = CreateRateLimitConfig({
+ *   auth: {
+ *     login: { ttl: 30000, limit: 3 },
+ *   },
+ *   api: {},
+ *   custom: {
+ *     upload: { ttl: 300000, limit: 5 },
+ *   },
+ * });
+ * ```
+ */
+export declare function CreateRateLimitConfig(overrides?: Partial<RateLimitConfig>): RateLimitConfig;
+//# sourceMappingURL=rate-limit-config.factory.d.ts.map

package/build/common/factories/rate-limit-config.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-config.factory.d.ts","sourceRoot":"","sources":["../../../src/common/factories/rate-limit-config.factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IACnC,mCAAmC;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;CACd;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC/B,qCAAqC;IACrC,IAAI,EAAE;QACL,KAAK,CAAC,EAAE,mBAAmB,CAAC;QAC5B,QAAQ,CAAC,EAAE,mBAAmB,CAAC;QAC/B,YAAY,CAAC,EAAE,mBAAmB,CAAC;KACnC,CAAC;IACF,0BAA0B;IAC1B,GAAG,EAAE;QACJ,OAAO,CAAC,EAAE,mBAAmB,CAAC;QAC9B,MAAM,CAAC,EAAE,mBAAmB,CAAC;KAC7B,CAAC;IACF,qCAAqC;IACrC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACnB;AA6ED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,CAE3F"}

package/build/common/factories/rate-limit-config.factory.js

@@ -0,0 +1,115 @@
+/**
+ * Rate Limit Config Factory
+ *
+ * Provides a generic factory function for creating consistent rate limit configurations
+ * across all services. Includes sensible defaults for authentication and API endpoints
+ * with support for service-specific customization via deep merging.
+ *
+ * Default limits:
+ * - auth.login: 5 requests per 60 seconds
+ * - auth.register: 3 requests per 60 seconds
+ * - auth.refreshToken: 10 requests per 60 seconds
+ * - api.default: 100 requests per 60 seconds
+ * - api.search: 30 requests per 60 seconds
+ */
+/**
+ * Default rate limit configuration
+ *
+ * Provides sensible defaults for all standard auth and API endpoints.
+ * TTL values are in milliseconds, limit values are request counts.
+ */
+const DEFAULT_CONFIG = {
+    auth: {
+        login: {
+            ttl: 60000, // 60 seconds
+            limit: 5, // 5 requests per 60 seconds
+        },
+        register: {
+            ttl: 60000, // 60 seconds
+            limit: 3, // 3 requests per 60 seconds
+        },
+        refreshToken: {
+            ttl: 60000, // 60 seconds
+            limit: 10, // 10 requests per 60 seconds
+        },
+    },
+    api: {
+        default: {
+            ttl: 60000, // 60 seconds
+            limit: 100, // 100 requests per 60 seconds
+        },
+        search: {
+            ttl: 60000, // 60 seconds
+            limit: 30, // 30 requests per 60 seconds
+        },
+    },
+};
+/**
+ * Deep merges a partial config with defaults, preserving unspecified defaults
+ *
+ * @param target The default configuration
+ * @param source The override configuration (partial)
+ * @returns Merged configuration with overrides applied
+ *
+ * @internal
+ */
+function DeepMerge(target, source) {
+    if (!source) {
+        return target;
+    }
+    const result = { ...target };
+    for (const key in source) {
+        if (Object.prototype.hasOwnProperty.call(source, key)) {
+            const sourceValue = source[key];
+            const targetValue = target[key];
+            // If source is an object (but not array or null), merge recursively
+            if (sourceValue &&
+                typeof sourceValue === 'object' &&
+                !Array.isArray(sourceValue) &&
+                sourceValue !== null &&
+                targetValue &&
+                typeof targetValue === 'object' &&
+                !Array.isArray(targetValue)) {
+                result[key] = DeepMerge(targetValue, sourceValue);
+            }
+            else {
+                // Otherwise, use source value (overwrite)
+                result[key] = sourceValue;
+            }
+        }
+    }
+    return result;
+}
+/**
+ * Creates a rate limit configuration with optional overrides
+ *
+ * Creates a new rate limit configuration by deep merging the provided overrides
+ * with sensible defaults. This ensures that all default limits are preserved
+ * unless explicitly overridden.
+ *
+ * @param overrides Optional partial configuration to override defaults
+ * @returns Complete rate limit configuration with overrides applied
+ *
+ * @example
+ * ```typescript
+ * import { CreateRateLimitConfig } from '@pawells/nestjs-shared';
+ *
+ * // Use all defaults
+ * const config = CreateRateLimitConfig();
+ *
+ * // Override specific limits
+ * const customConfig = CreateRateLimitConfig({
+ *   auth: {
+ *     login: { ttl: 30000, limit: 3 },
+ *   },
+ *   api: {},
+ *   custom: {
+ *     upload: { ttl: 300000, limit: 5 },
+ *   },
+ * });
+ * ```
+ */
+export function CreateRateLimitConfig(overrides) {
+    return DeepMerge(DEFAULT_CONFIG, overrides);
+}
+//# sourceMappingURL=rate-limit-config.factory.js.map

package/build/common/factories/rate-limit-config.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-config.factory.js","sourceRoot":"","sources":["../../../src/common/factories/rate-limit-config.factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAsCH;;;;;GAKG;AACH,MAAM,cAAc,GAAoB;IACvC,IAAI,EAAE;QACL,KAAK,EAAE;YACN,GAAG,EAAE,KAAK,EAAE,aAAa;YACzB,KAAK,EAAE,CAAC,EAAE,4BAA4B;SACtC;QACD,QAAQ,EAAE;YACT,GAAG,EAAE,KAAK,EAAE,aAAa;YACzB,KAAK,EAAE,CAAC,EAAE,4BAA4B;SACtC;QACD,YAAY,EAAE;YACb,GAAG,EAAE,KAAK,EAAE,aAAa;YACzB,KAAK,EAAE,EAAE,EAAE,6BAA6B;SACxC;KACD;IACD,GAAG,EAAE;QACJ,OAAO,EAAE;YACR,GAAG,EAAE,KAAK,EAAE,aAAa;YACzB,KAAK,EAAE,GAAG,EAAE,8BAA8B;SAC1C;QACD,MAAM,EAAE;YACP,GAAG,EAAE,KAAK,EAAE,aAAa;YACzB,KAAK,EAAE,EAAE,EAAE,6BAA6B;SACxC;KACD;CACD,CAAC;AAEF;;;;;;;;GAQG;AACH,SAAS,SAAS,CAAC,MAAW,EAAE,MAAW;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,MAAM,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAE7B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;YACvD,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAEhC,oEAAoE;YACpE,IACC,WAAW;gBACX,OAAO,WAAW,KAAK,QAAQ;gBAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;gBAC3B,WAAW,KAAK,IAAI;gBACpB,WAAW;gBACX,OAAO,WAAW,KAAK,QAAQ;gBAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAC1B,CAAC;gBACF,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACP,0CAA0C;gBAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC;YAC3B,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAoC;IACzE,OAAO,SAAS,CAAC,cAAc,EAAE,SAAS,CAAoB,CAAC;AAChE,CAAC"}

package/build/common/factories/security-bootstrap.factory.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Security Bootstrap Factory
+ *
+ * Provides a comprehensive factory function for applying security middleware and
+ * configurations to a NestJS application. This includes compression, MongoDB injection
+ * prevention, XSS protection, Helmet.js security headers, CORS, and global validation pipes.
+ *
+ * All security features are enabled by default and can be selectively disabled via options.
+ */
+import { INestApplication, Logger } from '@nestjs/common';
+export interface SecurityBootstrapOptions {
+    /** List of allowed CORS origins. In development, localhost and Apollo Studio are always included. */
+    corsOrigins?: string[];
+    /** Environment mode (development or production). Defaults to NODE_ENV or 'development'. */
+    environment?: string;
+    /** Enable/disable compression middleware (default: true) */
+    compressionEnabled?: boolean;
+    /** Enable/disable XSS protection (default: true) */
+    xssEnabled?: boolean;
+    /** Enable/disable Helmet.js security headers (default: true) */
+    helmetEnabled?: boolean;
+    /** Enable/disable MongoDB injection prevention (default: true) */
+    mongoDbInjectionPreventionEnabled?: boolean;
+    /** Enable/disable CORS (default: true) */
+    corsEnabled?: boolean;
+    /** Custom CORS allowed headers (default: Content-Type, Authorization, etc.) */
+    corsAllowedHeaders?: string[];
+    /** CSP Connect-Src directives for allowed API origins. Merged with default 'self' (default: empty array). Use for configuring allowed API endpoints in production. */
+    cspConnectSrc?: string[];
+    /** CSP Image-Src directives for allowed image origins. Merged with default 'self' and 'data:' (default: empty array). Use for configuring allowed image CDNs in production. */
+    cspImgSrc?: string[];
+    /** CSP Style-Src directives for allowed style origins. Merged with default 'self' (default: empty array). Use for configuring allowed style CDNs like Google Fonts in production. */
+    cspStyleSrc?: string[];
+    /** CSP Font-Src directives for allowed font origins. Merged with default 'self' (default: empty array). Use for configuring allowed font CDNs like Google Fonts in production. */
+    cspFontSrc?: string[];
+    /** Maximum request body size limit (default: '10mb'). Express format: '10mb', '100kb', etc. */
+    maxBodySize?: string;
+    /** Logger instance for middleware application logging (optional) */
+    logger?: Logger;
+}
+/**
+ * Applies comprehensive security middleware and configurations to a NestJS application
+ *
+ * Configured middleware stack (in order):
+ * 0. Body Size Limits - Enforces maximum request body size
+ * 1. Compression - Reduces response size for APIs larger than 1KB
+ * 2. MongoDB Injection Prevention - Sanitizes request body and params
+ * 3. XSS Protection - Sanitizes user input to prevent XSS attacks
+ * 4. Helmet.js - Sets security-related HTTP headers (CSP, HSTS, X-Frame-Options, etc)
+ * 5. Global Validation Pipe - Validates and transforms incoming data
+ * 6. CORS - Enables cross-origin resource sharing with configurable origins
+ *
+ * @param app The NestJS application instance
+ * @param options Configuration options for security bootstrap
+ *
+ * @example
+ * ```typescript
+ * import { NestFactory } from '@nestjs/core';
+ * import { ApplySecurityMiddleware } from '@pawells/nestjs-shared';
+ * import { AppModule } from './app.module';
+ *
+ * async function bootstrap() {
+ *   const app = await NestFactory.create(AppModule);
+ *
+ *   ApplySecurityMiddleware(app, {
+ *     corsOrigins: ['https://example.com'],
+ *     environment: 'production',
+ *   });
+ *
+ *   await app.listen(3000);
+ * }
+ *
+ * bootstrap();
+ * ```
+ */
+export declare function ApplySecurityMiddleware(app: INestApplication, options?: SecurityBootstrapOptions): void;
+//# sourceMappingURL=security-bootstrap.factory.d.ts.map

package/build/common/factories/security-bootstrap.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-bootstrap.factory.d.ts","sourceRoot":"","sources":["../../../src/common/factories/security-bootstrap.factory.ts"],"names":[],"mappings":"AACA;;;;;;;;GAQG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAkB,MAAM,gBAAgB,CAAC;AAM1E,MAAM,WAAW,wBAAwB;IACxC,qGAAqG;IACrG,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,2FAA2F;IAC3F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,oDAAoD;IACpD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,gEAAgE;IAChE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,kEAAkE;IAClE,iCAAiC,CAAC,EAAE,OAAO,CAAC;IAC5C,0CAA0C;IAC1C,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,+EAA+E;IAC/E,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,sKAAsK;IACtK,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,+KAA+K;IAC/K,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,qLAAqL;IACrL,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,kLAAkL;IAClL,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,+FAA+F;IAC/F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAgB,uBAAuB,CACtC,GAAG,EAAE,gBAAgB,EACrB,OAAO,GAAE,wBAA6B,GACpC,IAAI,CA+MN"}