@things-factory/shell 10.0.0-zeta.8 → 10.0.3

package/dist-server/typeorm/get-data-encryption-key.js

@@ -2,14 +2,24 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.dataEncryptionKey = void 0;
 const env_1 = require("@things-factory/env");
+/* shell 이 dev 편의를 위해 제공하는 기본 키. 프로덕션에서는 앱이 자기 config 로
+   반드시 override 하는 것이 정석/권장이다. */
+const DEFAULT_DATA_ENCRYPTION_KEY = 'V6g5oHJZb7KcYzIyL6cM95XvIDouon5b';
 var _DATA_ENCRYPTION_KEY = env_1.config.get('dataEncryptionKey');
 if (!_DATA_ENCRYPTION_KEY) {
     if (process.env.NODE_ENV == 'production') {
         throw new TypeError('dataEncryptionKey not configured.');
     }
     else {
-        _DATA_ENCRYPTION_KEY = 'V6g5oHJZb7KcYzIyL6cM95XvIDouon5b';
+        _DATA_ENCRYPTION_KEY = DEFAULT_DATA_ENCRYPTION_KEY;
     }
 }
+/* 프로덕션인데 앱이 override 하지 않아 레포에 공개된 기본 키가 그대로 쓰이는 경우:
+   암호화가 사실상 무의미하므로 강한 보안 경고를 남긴다(부팅·데이터는 건드리지 않음). */
+if (process.env.NODE_ENV == 'production' && _DATA_ENCRYPTION_KEY == DEFAULT_DATA_ENCRYPTION_KEY) {
+    env_1.logger.warn('[SECURITY] dataEncryptionKey is using the built-in default committed in the repository, ' +
+        'which provides NO real protection for encrypted data. ' +
+        'Override `dataEncryptionKey` in your application config for production.');
+}
 exports.dataEncryptionKey = _DATA_ENCRYPTION_KEY;
 //# sourceMappingURL=get-data-encryption-key.js.map

package/dist-server/typeorm/get-data-encryption-key.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-data-encryption-key.js","sourceRoot":"","sources":["../../server/typeorm/get-data-encryption-key.ts"],"names":[],"mappings":";;;AAAA,6CAA4C;AAE5C,IAAI,oBAAoB,GAAG,YAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;AAE1D,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,YAAY,EAAE,CAAC;QACzC,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAA;IAC1D,CAAC;SAAM,CAAC;QACN,oBAAoB,GAAG,kCAAkC,CAAA;IAC3D,CAAC;AACH,CAAC;AAEY,QAAA,iBAAiB,GAAG,oBAAoB,CAAA","sourcesContent":["import { config } from '@things-factory/env'\n\nvar _DATA_ENCRYPTION_KEY = config.get('dataEncryptionKey')\n\nif (!_DATA_ENCRYPTION_KEY) {\n  if (process.env.NODE_ENV == 'production') {\n    throw new TypeError('dataEncryptionKey not configured.')\n  } else {\n    _DATA_ENCRYPTION_KEY = 'V6g5oHJZb7KcYzIyL6cM95XvIDouon5b'\n  }\n}\n\nexport const dataEncryptionKey = _DATA_ENCRYPTION_KEY\n"]}
+{"version":3,"file":"get-data-encryption-key.js","sourceRoot":"","sources":["../../server/typeorm/get-data-encryption-key.ts"],"names":[],"mappings":";;;AAAA,6CAAoD;AAEpD;iCACiC;AACjC,MAAM,2BAA2B,GAAG,kCAAkC,CAAA;AAEtE,IAAI,oBAAoB,GAAG,YAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;AAE1D,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,YAAY,EAAE,CAAC;QACzC,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAA;IAC1D,CAAC;SAAM,CAAC;QACN,oBAAoB,GAAG,2BAA2B,CAAA;IACpD,CAAC;AACH,CAAC;AAED;qDACqD;AACrD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,YAAY,IAAI,oBAAoB,IAAI,2BAA2B,EAAE,CAAC;IAChG,YAAM,CAAC,IAAI,CACT,0FAA0F;QACxF,wDAAwD;QACxD,yEAAyE,CAC5E,CAAA;AACH,CAAC;AAEY,QAAA,iBAAiB,GAAG,oBAAoB,CAAA","sourcesContent":["import { config, logger } from '@things-factory/env'\n\n/* shell 이 dev 편의를 위해 제공하는 기본 키. 프로덕션에서는 앱이 자기 config 로\n   반드시 override 하는 것이 정석/권장이다. */\nconst DEFAULT_DATA_ENCRYPTION_KEY = 'V6g5oHJZb7KcYzIyL6cM95XvIDouon5b'\n\nvar _DATA_ENCRYPTION_KEY = config.get('dataEncryptionKey')\n\nif (!_DATA_ENCRYPTION_KEY) {\n  if (process.env.NODE_ENV == 'production') {\n    throw new TypeError('dataEncryptionKey not configured.')\n  } else {\n    _DATA_ENCRYPTION_KEY = DEFAULT_DATA_ENCRYPTION_KEY\n  }\n}\n\n/* 프로덕션인데 앱이 override 하지 않아 레포에 공개된 기본 키가 그대로 쓰이는 경우:\n   암호화가 사실상 무의미하므로 강한 보안 경고를 남긴다(부팅·데이터는 건드리지 않음). */\nif (process.env.NODE_ENV == 'production' && _DATA_ENCRYPTION_KEY == DEFAULT_DATA_ENCRYPTION_KEY) {\n  logger.warn(\n    '[SECURITY] dataEncryptionKey is using the built-in default committed in the repository, ' +\n      'which provides NO real protection for encrypted data. ' +\n      'Override `dataEncryptionKey` in your application config for production.'\n  )\n}\n\nexport const dataEncryptionKey = _DATA_ENCRYPTION_KEY\n"]}

package/dist-server/utils/apply-domain-filter.d.ts

@@ -0,0 +1,17 @@
+import { WhereExpressionBuilder } from 'typeorm';
+import { InheritedValueType } from '../service/common-types/list-param.js';
+/**
+ * 멀티테넌트 도메인 상속 필터를 쿼리에 적용한다.
+ *
+ * `getQueryBuilderFromListParams` 와 (deprecated) `buildQuery` 양쪽에 동일하게 중복돼 있던
+ * 도메인 필터 로직의 단일 소스. 도메인 필터는 테넌트 격리(보안)에 직결되므로 한 곳에서만 정의한다.
+ *
+ * @param qb        조건을 추가할 대상(WhereExpressionBuilder / SelectQueryBuilder)
+ * @param alias     엔티티 alias
+ * @param domain    현재 도메인 (id, parentId)
+ * @param inherited 상속 방식: None(자기 도메인) / Include(자기+부모) / Only(부모만)
+ */
+export declare function applyDomainInheritanceFilter(qb: WhereExpressionBuilder, alias: string, domain: {
+    id: string;
+    parentId?: string | null;
+}, inherited?: InheritedValueType): void;

package/dist-server/utils/apply-domain-filter.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyDomainInheritanceFilter = applyDomainInheritanceFilter;
+const list_param_js_1 = require("../service/common-types/list-param.js");
+/**
+ * 멀티테넌트 도메인 상속 필터를 쿼리에 적용한다.
+ *
+ * `getQueryBuilderFromListParams` 와 (deprecated) `buildQuery` 양쪽에 동일하게 중복돼 있던
+ * 도메인 필터 로직의 단일 소스. 도메인 필터는 테넌트 격리(보안)에 직결되므로 한 곳에서만 정의한다.
+ *
+ * @param qb        조건을 추가할 대상(WhereExpressionBuilder / SelectQueryBuilder)
+ * @param alias     엔티티 alias
+ * @param domain    현재 도메인 (id, parentId)
+ * @param inherited 상속 방식: None(자기 도메인) / Include(자기+부모) / Only(부모만)
+ */
+function applyDomainInheritanceFilter(qb, alias, domain, inherited = list_param_js_1.InheritedValueType.None) {
+    if (!inherited || inherited === list_param_js_1.InheritedValueType.None) {
+        qb.andWhere(`${alias}.domain = :domain`, { domain: domain.id });
+    }
+    else if (inherited === list_param_js_1.InheritedValueType.Include) {
+        qb.andWhere(`${alias}.domain IN (:...domains)`, { domains: [domain.id, domain.parentId].filter(Boolean) });
+    }
+    else if (inherited === list_param_js_1.InheritedValueType.Only) {
+        qb.andWhere(`${alias}.domain = :domain`, { domain: domain.parentId || 'Impossible' });
+    }
+    else {
+        qb.andWhere(`${alias}.domain = :domain`, { domain: 'Impossible' });
+    }
+}
+//# sourceMappingURL=apply-domain-filter.js.map

package/dist-server/utils/apply-domain-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-domain-filter.js","sourceRoot":"","sources":["../../server/utils/apply-domain-filter.ts"],"names":[],"mappings":";;AAeA,oEAeC;AA5BD,yEAA0E;AAE1E;;;;;;;;;;GAUG;AACH,SAAgB,4BAA4B,CAC1C,EAA0B,EAC1B,KAAa,EACb,MAAgD,EAChD,YAAgC,kCAAkB,CAAC,IAAI;IAEvD,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,kCAAkB,CAAC,IAAI,EAAE,CAAC;QACxD,EAAE,CAAC,QAAQ,CAAC,GAAG,KAAK,mBAAmB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;IACjE,CAAC;SAAM,IAAI,SAAS,KAAK,kCAAkB,CAAC,OAAO,EAAE,CAAC;QACpD,EAAE,CAAC,QAAQ,CAAC,GAAG,KAAK,0BAA0B,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC5G,CAAC;SAAM,IAAI,SAAS,KAAK,kCAAkB,CAAC,IAAI,EAAE,CAAC;QACjD,EAAE,CAAC,QAAQ,CAAC,GAAG,KAAK,mBAAmB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,IAAI,YAAY,EAAE,CAAC,CAAA;IACvF,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,QAAQ,CAAC,GAAG,KAAK,mBAAmB,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAA;IACpE,CAAC;AACH,CAAC","sourcesContent":["import { WhereExpressionBuilder } from 'typeorm'\n\nimport { InheritedValueType } from '../service/common-types/list-param.js'\n\n/**\n * 멀티테넌트 도메인 상속 필터를 쿼리에 적용한다.\n *\n * `getQueryBuilderFromListParams` 와 (deprecated) `buildQuery` 양쪽에 동일하게 중복돼 있던\n * 도메인 필터 로직의 단일 소스. 도메인 필터는 테넌트 격리(보안)에 직결되므로 한 곳에서만 정의한다.\n *\n * @param qb        조건을 추가할 대상(WhereExpressionBuilder / SelectQueryBuilder)\n * @param alias     엔티티 alias\n * @param domain    현재 도메인 (id, parentId)\n * @param inherited 상속 방식: None(자기 도메인) / Include(자기+부모) / Only(부모만)\n */\nexport function applyDomainInheritanceFilter(\n  qb: WhereExpressionBuilder,\n  alias: string,\n  domain: { id: string; parentId?: string | null },\n  inherited: InheritedValueType = InheritedValueType.None\n): void {\n  if (!inherited || inherited === InheritedValueType.None) {\n    qb.andWhere(`${alias}.domain = :domain`, { domain: domain.id })\n  } else if (inherited === InheritedValueType.Include) {\n    qb.andWhere(`${alias}.domain IN (:...domains)`, { domains: [domain.id, domain.parentId].filter(Boolean) })\n  } else if (inherited === InheritedValueType.Only) {\n    qb.andWhere(`${alias}.domain = :domain`, { domain: domain.parentId || 'Impossible' })\n  } else {\n    qb.andWhere(`${alias}.domain = :domain`, { domain: 'Impossible' })\n  }\n}\n"]}

package/dist-server/utils/condition-builder.js

@@ -95,33 +95,41 @@ const buildCondition = function (alias, fieldName, operator, value, relation, se
             return {
                 clause: `${alias}.${fieldName} IS NOT NULL`
             };
+        /* boolean 비교는 파라미터 바인딩으로 (IS TRUE/FALSE 는 MSSQL/Oracle 미지원 → 이식성 확보) */
         case 'is_false':
             return {
-                clause: `${alias}.${fieldName} IS FALSE`
+                clause: `${alias}.${fieldName} = :args${seq}`,
+                parameters: { [`args${seq}`]: false }
             };
         case 'is_true':
             return {
-                clause: `${alias}.${fieldName} IS TRUE`
+                clause: `${alias}.${fieldName} = :args${seq}`,
+                parameters: { [`args${seq}`]: true }
             };
         case 'is_not_false':
+            /* NOT FALSE = true 또는 NULL */
             return {
-                clause: `${alias}.${fieldName} IS NOT FALSE`
+                clause: `(${alias}.${fieldName} IS NULL OR ${alias}.${fieldName} = :args${seq})`,
+                parameters: { [`args${seq}`]: true }
             };
         case 'is_not_true':
+            /* NOT TRUE = false 또는 NULL */
             return {
-                clause: `${alias}.${fieldName} IS NOT TRUE`
+                clause: `(${alias}.${fieldName} IS NULL OR ${alias}.${fieldName} = :args${seq})`,
+                parameters: { [`args${seq}`]: false }
             };
         case 'is_present':
             return {
-                clause: `${alias}.${fieldName} IS PRESENT`
+                clause: `${alias}.${fieldName} IS NOT NULL`
             };
         case 'is_blank':
             return {
-                clause: `${alias}.${fieldName} IS BLANK`
+                clause: `${alias}.${fieldName} IS NULL`
             };
         case 'is_empty_num_id':
             return {
-                clause: `${alias}.${fieldName} IS EMPTY NUMERIC ID`
+                clause: `(${alias}.${fieldName} IS NULL OR ${alias}.${fieldName} = :args${seq})`,
+                parameters: { [`args${seq}`]: 0 }
             };
         case 'between':
             return {

package/dist-server/utils/condition-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"condition-builder.js","sourceRoot":"","sources":["../../server/utils/condition-builder.ts"],"names":[],"mappings":";;;;AAAA,4DAAsB;AAEtB;;;;;;;;;;GAUG;AACI,MAAM,cAAc,GAAG,UAAU,KAAa,EAAE,SAAiB,EAAE,QAAgB,EAAE,KAAU,EAAE,QAA0B,EAAE,GAAW;IAC7I,GAAG,EAAE,CAAA;IAEL,SAAS,GAAG,gBAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IAClC,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IAEvD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,IAAI;YACP,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,WAAW,GAAG,EAAE;gBAC7C,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE;aACtC,CAAA;QAEH,KAAK,MAAM;YACT,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,cAAc,GAAG,EAAE;gBAChD,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE;aAC3C,CAAA;QAEH,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,OAAO;gBACL,MAAM,EAAE,SAAS,KAAK,IAAI,SAAS,eAAe,GAAG,EAAE;gBACvD,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE;aACjE,CAAA;QAEH,KAAK,OAAO;YACV,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,kBAAkB,GAAG,EAAE;gBACpD,KAAK,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE;aACtC,CAAA;QAEH,KAAK,SAAS;YACZ,OAAO;gBACL,MAAM,EAAE,SAAS,KAAK,IAAI,SAAS,mBAAmB,GAAG,EAAE;gBAC3D,KAAK,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE;aAC5D,CAAA;QAEH,KAAK,IAAI;YACP,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,WAAW,GAAG,EAAE;gBAC7C,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE;aACtC,CAAA;QAEH,KAAK,IAAI;YACP,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,WAAW,GAAG,EAAE;gBAC7C,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE;aACtC,CAAA;QAEH,KAAK,KAAK;YACR,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,YAAY,GAAG,EAAE;gBAC9C,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE;aACtC,CAAA;QAEH,KAAK,KAAK;YACR,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,YAAY,GAAG,EAAE;gBAC9C,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE;aACtC,CAAA;QAEH,KAAK,OAAO;YACV,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,YAAY,GAAG,EAAE;gBAC9C,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE;aACtC,CAAA;QAEH,KAAK,IAAI;YACP,OAAO;gBACL,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS,mBAAmB,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,SAAS,gBAAgB,GAAG,GAAG;gBACtG,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE;aACvC,CAAA;QAEH,KAAK,OAAO;YACV,OAAO;gBACL,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS,uBAAuB,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,SAAS,oBAAoB,GAAG,GAAG;gBAC9G,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE;aACvC,CAAA;QAEH,KAAK,iBAAiB;YACpB,OAAO;gBACL,MAAM,EAAE,QAAQ;oBACd,CAAC,CAAC,IAAI,SAAS,kBAAkB,SAAS,wBAAwB,GAAG,GAAG;oBACxE,CAAC,CAAC,GAAG,KAAK,IAAI,SAAS,eAAe,KAAK,IAAI,SAAS,oBAAoB,GAAG,IAAI;gBACrF,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE;aACvC,CAAA;QAEH,KAAK,SAAS;YACZ,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,UAAU;aACxC,CAAA;QACH,KAAK,aAAa;YAChB,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,cAAc;aAC5C,CAAA;QACH,KAAK,UAAU;YACb,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,WAAW;aACzC,CAAA;QACH,KAAK,SAAS;YACZ,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,UAAU;aACxC,CAAA;QACH,KAAK,cAAc;YACjB,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,eAAe;aAC7C,CAAA;QACH,KAAK,aAAa;YAChB,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,cAAc;aAC5C,CAAA;QACH,KAAK,YAAY;YACf,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,aAAa;aAC3C,CAAA;QACH,KAAK,UAAU;YACb,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,WAAW;aACzC,CAAA;QACH,KAAK,iBAAiB;YACpB,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,sBAAsB;aACpD,CAAA;QAEH,KAAK,SAAS;YACZ,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,kBAAkB,GAAG,eAAe,GAAG,IAAI;gBACxE,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE;aACzE,CAAA;IACL,CAAC;AACH,CAAC,CAAA;AAnIY,QAAA,cAAc,kBAmI1B","sourcesContent":["import _ from 'lodash'\n\n/**\n * Generates and returns a condition clause based on the provided parameters.\n *\n * @param alias {string} Alias or table name of the entity.\n * @param fieldName {string} Field or column name.\n * @param operator {string} Comparison operator.\n * @param value {any} Value or an array of values to compare.\n * @param relation {boolean | string} Indicates if it's a related field or the name of the relation (optional).\n * @param seq {number} Integer representing the order of condition generation (internal use).\n * @returns {Object} An object containing the generated condition clause and parameters.\n */\nexport const buildCondition = function (alias: string, fieldName: string, operator: string, value: any, relation: boolean | string, seq: number) {\n  seq++\n\n  fieldName = _.snakeCase(fieldName)\n  const values = value instanceof Array ? value : [value]\n\n  switch (operator) {\n    case 'eq':\n      return {\n        clause: `${alias}.${fieldName} = :args${seq}`,\n        parameters: { [`args${seq}`]: value }\n      }\n\n    case 'like':\n      return {\n        clause: `${alias}.${fieldName} LIKE :args${seq}`,\n        parameters: { [`args${seq}`]: `${value}` }\n      }\n\n    case 'search':\n    case 'i_like':\n      return {\n        clause: `LOWER(${alias}.${fieldName}) LIKE :args${seq}`,\n        parameters: { [`args${seq}`]: `${String(value).toLowerCase()}` }\n      }\n\n    case 'nlike':\n      return {\n        clause: `${alias}.${fieldName} NOT LIKE :args${seq}`,\n        value: { [`args${seq}`]: `${value}` }\n      }\n\n    case 'i_nlike':\n      return {\n        clause: `LOWER(${alias}.${fieldName}) NOT LIKE :args${seq}`,\n        value: { [`args${seq}`]: `${String(value).toLowerCase()}` }\n      }\n\n    case 'lt':\n      return {\n        clause: `${alias}.${fieldName} < :args${seq}`,\n        parameters: { [`args${seq}`]: value }\n      }\n\n    case 'gt':\n      return {\n        clause: `${alias}.${fieldName} > :args${seq}`,\n        parameters: { [`args${seq}`]: value }\n      }\n\n    case 'lte':\n      return {\n        clause: `${alias}.${fieldName} <= :args${seq}`,\n        parameters: { [`args${seq}`]: value }\n      }\n\n    case 'gte':\n      return {\n        clause: `${alias}.${fieldName} >= :args${seq}`,\n        parameters: { [`args${seq}`]: value }\n      }\n\n    case 'noteq':\n      return {\n        clause: `${alias}.${fieldName} != :args${seq}`,\n        parameters: { [`args${seq}`]: value }\n      }\n\n    case 'in':\n      return {\n        clause: relation ? `${fieldName}.id IN (:...args${seq})` : `${alias}.${fieldName} IN (:...args${seq})`,\n        parameters: { [`args${seq}`]: values }\n      }\n\n    case 'notin':\n      return {\n        clause: relation ? `${fieldName}.id NOT IN (:...args${seq})` : `${alias}.${fieldName} NOT IN (:...args${seq})`,\n        parameters: { [`args${seq}`]: values }\n      }\n\n    case 'notin_with_null':\n      return {\n        clause: relation\n          ? `(${fieldName}.id IS NULL OR ${fieldName}.id  NOT IN (:...args${seq})`\n          : `${alias}.${fieldName} IS NULL OR ${alias}.${fieldName} NOT IN (:...args${seq}))`,\n        parameters: { [`args${seq}`]: values }\n      }\n\n    case 'is_null':\n      return {\n        clause: `${alias}.${fieldName} IS NULL`\n      }\n    case 'is_not_null':\n      return {\n        clause: `${alias}.${fieldName} IS NOT NULL`\n      }\n    case 'is_false':\n      return {\n        clause: `${alias}.${fieldName} IS FALSE`\n      }\n    case 'is_true':\n      return {\n        clause: `${alias}.${fieldName} IS TRUE`\n      }\n    case 'is_not_false':\n      return {\n        clause: `${alias}.${fieldName} IS NOT FALSE`\n      }\n    case 'is_not_true':\n      return {\n        clause: `${alias}.${fieldName} IS NOT TRUE`\n      }\n    case 'is_present':\n      return {\n        clause: `${alias}.${fieldName} IS PRESENT`\n      }\n    case 'is_blank':\n      return {\n        clause: `${alias}.${fieldName} IS BLANK`\n      }\n    case 'is_empty_num_id':\n      return {\n        clause: `${alias}.${fieldName} IS EMPTY NUMERIC ID`\n      }\n\n    case 'between':\n      return {\n        clause: `${alias}.${fieldName} BETWEEN  :args${seq}_1 AND :args${seq}_2`,\n        parameters: { [`args${seq}_1`]: values[0], [`args${seq}_2`]: values[1] }\n      }\n  }\n}\n"]}
+{"version":3,"file":"condition-builder.js","sourceRoot":"","sources":["../../server/utils/condition-builder.ts"],"names":[],"mappings":";;;;AAAA,4DAAsB;AAEtB;;;;;;;;;;GAUG;AACI,MAAM,cAAc,GAAG,UAAU,KAAa,EAAE,SAAiB,EAAE,QAAgB,EAAE,KAAU,EAAE,QAA0B,EAAE,GAAW;IAC7I,GAAG,EAAE,CAAA;IAEL,SAAS,GAAG,gBAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IAClC,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IAEvD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,IAAI;YACP,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,WAAW,GAAG,EAAE;gBAC7C,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE;aACtC,CAAA;QAEH,KAAK,MAAM;YACT,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,cAAc,GAAG,EAAE;gBAChD,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE;aAC3C,CAAA;QAEH,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,OAAO;gBACL,MAAM,EAAE,SAAS,KAAK,IAAI,SAAS,eAAe,GAAG,EAAE;gBACvD,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE;aACjE,CAAA;QAEH,KAAK,OAAO;YACV,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,kBAAkB,GAAG,EAAE;gBACpD,KAAK,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE;aACtC,CAAA;QAEH,KAAK,SAAS;YACZ,OAAO;gBACL,MAAM,EAAE,SAAS,KAAK,IAAI,SAAS,mBAAmB,GAAG,EAAE;gBAC3D,KAAK,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE;aAC5D,CAAA;QAEH,KAAK,IAAI;YACP,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,WAAW,GAAG,EAAE;gBAC7C,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE;aACtC,CAAA;QAEH,KAAK,IAAI;YACP,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,WAAW,GAAG,EAAE;gBAC7C,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE;aACtC,CAAA;QAEH,KAAK,KAAK;YACR,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,YAAY,GAAG,EAAE;gBAC9C,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE;aACtC,CAAA;QAEH,KAAK,KAAK;YACR,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,YAAY,GAAG,EAAE;gBAC9C,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE;aACtC,CAAA;QAEH,KAAK,OAAO;YACV,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,YAAY,GAAG,EAAE;gBAC9C,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE;aACtC,CAAA;QAEH,KAAK,IAAI;YACP,OAAO;gBACL,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS,mBAAmB,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,SAAS,gBAAgB,GAAG,GAAG;gBACtG,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE;aACvC,CAAA;QAEH,KAAK,OAAO;YACV,OAAO;gBACL,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS,uBAAuB,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,SAAS,oBAAoB,GAAG,GAAG;gBAC9G,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE;aACvC,CAAA;QAEH,KAAK,iBAAiB;YACpB,OAAO;gBACL,MAAM,EAAE,QAAQ;oBACd,CAAC,CAAC,IAAI,SAAS,kBAAkB,SAAS,wBAAwB,GAAG,GAAG;oBACxE,CAAC,CAAC,GAAG,KAAK,IAAI,SAAS,eAAe,KAAK,IAAI,SAAS,oBAAoB,GAAG,IAAI;gBACrF,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE;aACvC,CAAA;QAEH,KAAK,SAAS;YACZ,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,UAAU;aACxC,CAAA;QACH,KAAK,aAAa;YAChB,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,cAAc;aAC5C,CAAA;QACH,wEAAwE;QACxE,KAAK,UAAU;YACb,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,WAAW,GAAG,EAAE;gBAC7C,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE;aACtC,CAAA;QACH,KAAK,SAAS;YACZ,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,WAAW,GAAG,EAAE;gBAC7C,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE;aACrC,CAAA;QACH,KAAK,cAAc;YACjB,8BAA8B;YAC9B,OAAO;gBACL,MAAM,EAAE,IAAI,KAAK,IAAI,SAAS,eAAe,KAAK,IAAI,SAAS,WAAW,GAAG,GAAG;gBAChF,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE;aACrC,CAAA;QACH,KAAK,aAAa;YAChB,8BAA8B;YAC9B,OAAO;gBACL,MAAM,EAAE,IAAI,KAAK,IAAI,SAAS,eAAe,KAAK,IAAI,SAAS,WAAW,GAAG,GAAG;gBAChF,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE;aACtC,CAAA;QACH,KAAK,YAAY;YACf,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,cAAc;aAC5C,CAAA;QACH,KAAK,UAAU;YACb,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,UAAU;aACxC,CAAA;QACH,KAAK,iBAAiB;YACpB,OAAO;gBACL,MAAM,EAAE,IAAI,KAAK,IAAI,SAAS,eAAe,KAAK,IAAI,SAAS,WAAW,GAAG,GAAG;gBAChF,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE;aAClC,CAAA;QAEH,KAAK,SAAS;YACZ,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,kBAAkB,GAAG,eAAe,GAAG,IAAI;gBACxE,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE;aACzE,CAAA;IACL,CAAC;AACH,CAAC,CAAA;AA3IY,QAAA,cAAc,kBA2I1B","sourcesContent":["import _ from 'lodash'\n\n/**\n * Generates and returns a condition clause based on the provided parameters.\n *\n * @param alias {string} Alias or table name of the entity.\n * @param fieldName {string} Field or column name.\n * @param operator {string} Comparison operator.\n * @param value {any} Value or an array of values to compare.\n * @param relation {boolean | string} Indicates if it's a related field or the name of the relation (optional).\n * @param seq {number} Integer representing the order of condition generation (internal use).\n * @returns {Object} An object containing the generated condition clause and parameters.\n */\nexport const buildCondition = function (alias: string, fieldName: string, operator: string, value: any, relation: boolean | string, seq: number) {\n  seq++\n\n  fieldName = _.snakeCase(fieldName)\n  const values = value instanceof Array ? value : [value]\n\n  switch (operator) {\n    case 'eq':\n      return {\n        clause: `${alias}.${fieldName} = :args${seq}`,\n        parameters: { [`args${seq}`]: value }\n      }\n\n    case 'like':\n      return {\n        clause: `${alias}.${fieldName} LIKE :args${seq}`,\n        parameters: { [`args${seq}`]: `${value}` }\n      }\n\n    case 'search':\n    case 'i_like':\n      return {\n        clause: `LOWER(${alias}.${fieldName}) LIKE :args${seq}`,\n        parameters: { [`args${seq}`]: `${String(value).toLowerCase()}` }\n      }\n\n    case 'nlike':\n      return {\n        clause: `${alias}.${fieldName} NOT LIKE :args${seq}`,\n        value: { [`args${seq}`]: `${value}` }\n      }\n\n    case 'i_nlike':\n      return {\n        clause: `LOWER(${alias}.${fieldName}) NOT LIKE :args${seq}`,\n        value: { [`args${seq}`]: `${String(value).toLowerCase()}` }\n      }\n\n    case 'lt':\n      return {\n        clause: `${alias}.${fieldName} < :args${seq}`,\n        parameters: { [`args${seq}`]: value }\n      }\n\n    case 'gt':\n      return {\n        clause: `${alias}.${fieldName} > :args${seq}`,\n        parameters: { [`args${seq}`]: value }\n      }\n\n    case 'lte':\n      return {\n        clause: `${alias}.${fieldName} <= :args${seq}`,\n        parameters: { [`args${seq}`]: value }\n      }\n\n    case 'gte':\n      return {\n        clause: `${alias}.${fieldName} >= :args${seq}`,\n        parameters: { [`args${seq}`]: value }\n      }\n\n    case 'noteq':\n      return {\n        clause: `${alias}.${fieldName} != :args${seq}`,\n        parameters: { [`args${seq}`]: value }\n      }\n\n    case 'in':\n      return {\n        clause: relation ? `${fieldName}.id IN (:...args${seq})` : `${alias}.${fieldName} IN (:...args${seq})`,\n        parameters: { [`args${seq}`]: values }\n      }\n\n    case 'notin':\n      return {\n        clause: relation ? `${fieldName}.id NOT IN (:...args${seq})` : `${alias}.${fieldName} NOT IN (:...args${seq})`,\n        parameters: { [`args${seq}`]: values }\n      }\n\n    case 'notin_with_null':\n      return {\n        clause: relation\n          ? `(${fieldName}.id IS NULL OR ${fieldName}.id  NOT IN (:...args${seq})`\n          : `${alias}.${fieldName} IS NULL OR ${alias}.${fieldName} NOT IN (:...args${seq}))`,\n        parameters: { [`args${seq}`]: values }\n      }\n\n    case 'is_null':\n      return {\n        clause: `${alias}.${fieldName} IS NULL`\n      }\n    case 'is_not_null':\n      return {\n        clause: `${alias}.${fieldName} IS NOT NULL`\n      }\n    /* boolean 비교는 파라미터 바인딩으로 (IS TRUE/FALSE 는 MSSQL/Oracle 미지원 → 이식성 확보) */\n    case 'is_false':\n      return {\n        clause: `${alias}.${fieldName} = :args${seq}`,\n        parameters: { [`args${seq}`]: false }\n      }\n    case 'is_true':\n      return {\n        clause: `${alias}.${fieldName} = :args${seq}`,\n        parameters: { [`args${seq}`]: true }\n      }\n    case 'is_not_false':\n      /* NOT FALSE = true 또는 NULL */\n      return {\n        clause: `(${alias}.${fieldName} IS NULL OR ${alias}.${fieldName} = :args${seq})`,\n        parameters: { [`args${seq}`]: true }\n      }\n    case 'is_not_true':\n      /* NOT TRUE = false 또는 NULL */\n      return {\n        clause: `(${alias}.${fieldName} IS NULL OR ${alias}.${fieldName} = :args${seq})`,\n        parameters: { [`args${seq}`]: false }\n      }\n    case 'is_present':\n      return {\n        clause: `${alias}.${fieldName} IS NOT NULL`\n      }\n    case 'is_blank':\n      return {\n        clause: `${alias}.${fieldName} IS NULL`\n      }\n    case 'is_empty_num_id':\n      return {\n        clause: `(${alias}.${fieldName} IS NULL OR ${alias}.${fieldName} = :args${seq})`,\n        parameters: { [`args${seq}`]: 0 }\n      }\n\n    case 'between':\n      return {\n        clause: `${alias}.${fieldName} BETWEEN  :args${seq}_1 AND :args${seq}_2`,\n        parameters: { [`args${seq}_1`]: values[0], [`args${seq}_2`]: values[1] }\n      }\n  }\n}\n"]}

package/dist-server/utils/get-query-builder-from-list-params.d.ts

@@ -2,16 +2,45 @@ import { Repository, SelectQueryBuilder } from 'typeorm';
 import { ListParam } from '../service/common-types/list-param.js';
 import { Domain } from '../service/domain/domain.js';
 /**
- * Creates a TypeORM SelectQueryBuilder based on the provided parameters.
+ * `search` 연산자의 매칭 방식.
+ * - contains(기본): `%v%` — 어디든 포함(유연하나 인덱스 미활용).
+ * - startsWith: `v%` — 접두 일치(인덱스 활용 가능 → 대용량에서 빠름).
+ * - exact: `v` — 정확 일치(대소문자 무시).
+ */
+export type SearchMode = 'contains' | 'startsWith' | 'exact';
+/**
+ * Builds a TypeORM SelectQueryBuilder from a generic ListParam (filters, search, sortings,
+ * pagination) plus optional multi-tenant domain scoping. Returns the builder so callers can
+ * further chain joins/select/where before executing (e.g. getMany / getManyAndCount).
+ *
+ * Supported filter operators (`Filter.operator`):
+ *   eq, noteq, like, nlike, i_like, i_nlike, search, lt, gt, lte, gte,
+ *   in, notin, notin_with_null, between,
+ *   is_null, is_not_null, is_true, is_false, is_not_true, is_not_false,
+ *   is_present, is_blank, is_empty_num_id.
+ *   An unknown operator throws a clear, actionable error.
+ *
+ * Behavior notes:
+ * - `search` uses case-insensitive substring match (`LOWER(col) LIKE %v%`) and requires the column
+ *   to be listed in `searchables`.
+ * - `like`/`i_like` filters are IGNORED (with a console.warn) unless the column is in `searchables`,
+ *   to avoid unindexed full-table scans.
+ * - Boolean operators are emitted as parameter-bound comparisons (portable across all supported DBs).
+ * - Domain scoping is applied only when `domain` is provided, honoring `params.inherited`
+ *   (None = own domain, Include = own + parent, Only = parent).
+ * - Pagination uses skip/take; with joins this triggers TypeORM's two-query strategy for correctness.
+ * - Unknown filter columns / operators / relations throw a clear, actionable error (fail-fast).
  *
- * @param options - An object containing the query building options.
- * @param options.repository - The TypeORM repository for database operations.
- * @param options.params - The ListParam object containing filters, sortings, and pagination.
- * @param [options.domain] - Optional domain object for applying domain-specific filters.
- * @param [options.alias] - The alias to be used in the SQL queries.
- * @param [options.searchables] - List of columns that are searchable.
- * @param [options.filtersMap] - Mapping of filter names to their corresponding columns or relation columns.
- * @returns {SelectQueryBuilder<Type>} - The constructed SelectQueryBuilder instance.
+ * @param options.repository  TypeORM repository (or a tx-scoped repository) to build from.
+ * @param options.params      ListParam: `{ filters, sortings, pagination, inherited }`.
+ * @param [options.domain]    Optional current domain `{ id, parentId }` for tenant scoping.
+ * @param [options.alias]     Optional entity alias (defaults to the entity name).
+ * @param [options.searchables] Columns eligible for `search`/`like` filtering.
+ * @param [options.filtersMap] Maps a filter/sort name to a column or relation column, e.g.
+ *   `{ ownerName: { columnName: 'name', relationColumn: 'owner' } }`.
+ * @param [options.searchMode] `search` matching mode: 'contains'(default) / 'startsWith' / 'exact'.
+ *   'startsWith' emits `v%` (prefix) which can use an index on large tables.
+ * @returns {SelectQueryBuilder<Type>} The constructed SelectQueryBuilder (not yet executed).
  */
 export declare function getQueryBuilderFromListParams<Type>(options: {
     repository: Repository<Type>;
@@ -25,4 +54,5 @@ export declare function getQueryBuilderFromListParams<Type>(options: {
             relationColumn?: string;
         };
     };
+    searchMode?: SearchMode;
 }): SelectQueryBuilder<Type>;

package/dist-server/utils/get-query-builder-from-list-params.js

@@ -3,20 +3,43 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.getQueryBuilderFromListParams = getQueryBuilderFromListParams;
 const typeorm_1 = require("typeorm");
 const list_param_js_1 = require("../service/common-types/list-param.js");
+const apply_domain_filter_js_1 = require("./apply-domain-filter.js");
 /**
- * Creates a TypeORM SelectQueryBuilder based on the provided parameters.
+ * Builds a TypeORM SelectQueryBuilder from a generic ListParam (filters, search, sortings,
+ * pagination) plus optional multi-tenant domain scoping. Returns the builder so callers can
+ * further chain joins/select/where before executing (e.g. getMany / getManyAndCount).
  *
- * @param options - An object containing the query building options.
- * @param options.repository - The TypeORM repository for database operations.
- * @param options.params - The ListParam object containing filters, sortings, and pagination.
- * @param [options.domain] - Optional domain object for applying domain-specific filters.
- * @param [options.alias] - The alias to be used in the SQL queries.
- * @param [options.searchables] - List of columns that are searchable.
- * @param [options.filtersMap] - Mapping of filter names to their corresponding columns or relation columns.
- * @returns {SelectQueryBuilder<Type>} - The constructed SelectQueryBuilder instance.
+ * Supported filter operators (`Filter.operator`):
+ *   eq, noteq, like, nlike, i_like, i_nlike, search, lt, gt, lte, gte,
+ *   in, notin, notin_with_null, between,
+ *   is_null, is_not_null, is_true, is_false, is_not_true, is_not_false,
+ *   is_present, is_blank, is_empty_num_id.
+ *   An unknown operator throws a clear, actionable error.
+ *
+ * Behavior notes:
+ * - `search` uses case-insensitive substring match (`LOWER(col) LIKE %v%`) and requires the column
+ *   to be listed in `searchables`.
+ * - `like`/`i_like` filters are IGNORED (with a console.warn) unless the column is in `searchables`,
+ *   to avoid unindexed full-table scans.
+ * - Boolean operators are emitted as parameter-bound comparisons (portable across all supported DBs).
+ * - Domain scoping is applied only when `domain` is provided, honoring `params.inherited`
+ *   (None = own domain, Include = own + parent, Only = parent).
+ * - Pagination uses skip/take; with joins this triggers TypeORM's two-query strategy for correctness.
+ * - Unknown filter columns / operators / relations throw a clear, actionable error (fail-fast).
+ *
+ * @param options.repository  TypeORM repository (or a tx-scoped repository) to build from.
+ * @param options.params      ListParam: `{ filters, sortings, pagination, inherited }`.
+ * @param [options.domain]    Optional current domain `{ id, parentId }` for tenant scoping.
+ * @param [options.alias]     Optional entity alias (defaults to the entity name).
+ * @param [options.searchables] Columns eligible for `search`/`like` filtering.
+ * @param [options.filtersMap] Maps a filter/sort name to a column or relation column, e.g.
+ *   `{ ownerName: { columnName: 'name', relationColumn: 'owner' } }`.
+ * @param [options.searchMode] `search` matching mode: 'contains'(default) / 'startsWith' / 'exact'.
+ *   'startsWith' emits `v%` (prefix) which can use an index on large tables.
+ * @returns {SelectQueryBuilder<Type>} The constructed SelectQueryBuilder (not yet executed).
  */
 function getQueryBuilderFromListParams(options) {
-    const { repository, params, domain, alias, searchables, filtersMap = {} } = options;
+    const { repository, params, domain, alias, searchables, filtersMap = {}, searchMode = 'contains' } = options;
     const { inherited = list_param_js_1.InheritedValueType.None } = params || {};
     const selectQueryBuilder = repository.createQueryBuilder(alias);
     const entityAlias = selectQueryBuilder.alias;
@@ -49,33 +72,20 @@ function getQueryBuilderFromListParams(options) {
     // Apply column filters
     if (columnFilters.length > 0) {
         columnFilters.forEach(filter => {
-            addCondition(metadata, selectQueryBuilder, selectQueryBuilder, filter, filtersMap, true);
+            addCondition(metadata, selectQueryBuilder, selectQueryBuilder, filter, filtersMap, true, searchMode);
         });
     }
     // Apply search filters
     if (searchFilters.length > 0) {
         selectQueryBuilder.andWhere(new typeorm_1.Brackets(qb => {
             searchFilters.forEach(filter => {
-                addCondition(metadata, selectQueryBuilder, qb, filter, filtersMap, false);
+                addCondition(metadata, selectQueryBuilder, qb, filter, filtersMap, false, searchMode);
             });
         }));
     }
     // Apply domain filters
     if (domain) {
-        if (!inherited || inherited === list_param_js_1.InheritedValueType.None) {
-            selectQueryBuilder.andWhere(`${entityAlias}.domain = :domain`, { domain: domain.id });
-        }
-        else if (inherited === list_param_js_1.InheritedValueType.Include) {
-            selectQueryBuilder.andWhere(`${entityAlias}.domain IN (:...domains)`, {
-                domains: [domain.id, domain.parentId].filter(Boolean)
-            });
-        }
-        else if (inherited === list_param_js_1.InheritedValueType.Only) {
-            selectQueryBuilder.andWhere(`${entityAlias}.domain = :domain`, { domain: domain.parentId || 'Impossible' });
-        }
-        else {
-            selectQueryBuilder.andWhere(`${entityAlias}.domain = :domain`, { domain: 'Impossible' });
-        }
+        (0, apply_domain_filter_js_1.applyDomainInheritanceFilter)(selectQueryBuilder, entityAlias, domain, inherited);
     }
     // Apply pagination
     addPagination(selectQueryBuilder, pagination);
@@ -112,7 +122,7 @@ function addPagination(selectQueryBuilder, pagination) {
  * @param filtersMap - A mapping of filter names to column names and relation column names.
  * @param andCondition - A flag indicating whether to use "AND" or "OR" for combining conditions.
  */
-function addCondition(metadata, selectQueryBuilder, whereExpressionBuilder, filter, filtersMap = {}, andCondition) {
+function addCondition(metadata, selectQueryBuilder, whereExpressionBuilder, filter, filtersMap = {}, andCondition, searchMode = 'contains') {
     const { name, operator, value } = filter;
     var entityAlias = selectQueryBuilder.alias;
     var { relationColumn, columnName } = filtersMap[name] || {};
@@ -166,9 +176,12 @@ function addCondition(metadata, selectQueryBuilder, whereExpressionBuilder, filt
                 columnMeta = relationIdMeta.relation.joinColumns[0];
             }
             else {
-                columnName
-                    ? console.warn(`columnName "${columnName}" in filtersMap for "${name}" is not a column`)
-                    : console.warn(`name "${name}" is not a column`);
+                /* 미지의 컬럼: 이전엔 warn 후 흘러가 columnMeta.databaseName 에서 불투명 TypeError 로 크래시했다.
+                   원인을 바로 알 수 있도록 명확·실행가능한 오류를 던진다(fail-fast). */
+                const target = columnName || name;
+                const available = metadata.columns.map(column => column.propertyName).join(', ');
+                throw new Error(`[getQueryBuilderFromListParams] unknown filter column "${target}" on entity "${metadata.name}". ` +
+                    `Add a filtersMap entry for "${name}", or use one of: ${available}`);
             }
         }
         else {
@@ -191,7 +204,7 @@ function addCondition(metadata, selectQueryBuilder, whereExpressionBuilder, filt
     const alias = relationColumnMeta ? `${name}-filter` : entityAlias;
     /* relation columne인 경우 name을 alias로 사용한다. */
     const field = `${alias}.${dbNameForColumn}`;
-    var { clause, parameters } = getClauseAndParameters(field, name, operator, value);
+    var { clause, parameters } = getClauseAndParameters(field, name, operator, value, searchMode);
     if (relationColumnMeta) {
         const { propertyName } = relationColumnMeta;
         const property = `${entityAlias}.${propertyName}`;
@@ -272,7 +285,9 @@ function applyJoins(selectQueryBuilder, entityAlias, relationColumn, metadata, j
     for (const column of columns) {
         const relation = currentMetadata.relations.find(rel => rel.propertyName === column);
         if (!relation) {
-            throw new Error(`Relation not found for column: ${column}`);
+            const available = currentMetadata.relations.map(rel => rel.propertyName).join(', ');
+            throw new Error(`[getQueryBuilderFromListParams] relation "${column}" not found on entity "${currentMetadata.name}"` +
+                ` (relationColumn "${relationColumn}"). Available relations: ${available}`);
         }
         const nextAlias = `${currentAlias}_${relation.inverseEntityMetadata.tableName}_for_${columnName}`;
         if (!selectQueryBuilder.expressionMap.aliases.some(alias => alias.name === nextAlias)) {
@@ -286,6 +301,18 @@ function applyJoins(selectQueryBuilder, entityAlias, relationColumn, metadata, j
     }
     return currentAlias;
 }
+/** search 값에 searchMode 에 맞는 와일드카드를 씌운다. */
+function wrapSearch(value, mode) {
+    switch (mode) {
+        case 'startsWith':
+            return `${value}%`;
+        case 'exact':
+            return value;
+        case 'contains':
+        default:
+            return `%${value}%`;
+    }
+}
 /**
  * Generates the SQL clause and parameters based on the provided filter.
  *
@@ -295,7 +322,7 @@ function applyJoins(selectQueryBuilder, entityAlias, relationColumn, metadata, j
  * @param value - The value to filter with.
  * @returns An object containing the SQL clause and the parameters.
  */
-function getClauseAndParameters(field, name, operator, value) {
+function getClauseAndParameters(field, name, operator, value, searchMode = 'contains') {
     const values = value instanceof Array ? value : [value];
     let clause = '';
     let parameters = {};
@@ -309,6 +336,10 @@ function getClauseAndParameters(field, name, operator, value) {
             parameters = { [name]: `%${value}%` };
             break;
         case 'search':
+            /* searchMode 로 매칭 방식 선택(기본 contains). startsWith 는 접두 인덱스 활용 가능. */
+            clause = `LOWER(${field}) LIKE :${name}`;
+            parameters = { [name]: wrapSearch(String(value).toLowerCase(), searchMode) };
+            break;
         case 'i_like':
             clause = `LOWER(${field}) LIKE :${name}`;
             parameters = { [name]: `%${String(value).toLowerCase()}%` };
@@ -359,31 +390,43 @@ function getClauseAndParameters(field, name, operator, value) {
         case 'is_not_null':
             clause = `${field} IS NOT NULL`;
             break;
+        /* boolean 비교는 파라미터 바인딩으로 (IS TRUE/FALSE 는 MSSQL/Oracle 미지원 → 이식성 확보) */
         case 'is_false':
-            clause = `${field} IS FALSE`;
+            clause = `${field} = :${name}`;
+            parameters = { [name]: false };
             break;
         case 'is_true':
-            clause = `${field} IS TRUE`;
+            clause = `${field} = :${name}`;
+            parameters = { [name]: true };
             break;
         case 'is_not_false':
-            clause = `${field} IS NOT FALSE`;
+            /* NOT FALSE = true 또는 NULL */
+            clause = `(${field} IS NULL OR ${field} = :${name})`;
+            parameters = { [name]: true };
             break;
         case 'is_not_true':
-            clause = `${field} IS NOT TRUE`;
+            /* NOT TRUE = false 또는 NULL */
+            clause = `(${field} IS NULL OR ${field} = :${name})`;
+            parameters = { [name]: false };
             break;
         case 'is_present':
-            clause = `${field} IS PRESENT`;
+            clause = `${field} IS NOT NULL`;
             break;
         case 'is_blank':
-            clause = `${field} IS BLANK`;
+            clause = `${field} IS NULL`;
             break;
         case 'is_empty_num_id':
-            clause = `${field} IS EMPTY NUMERIC ID`;
+            clause = `(${field} IS NULL OR ${field} = :${name})`;
+            parameters = { [name]: 0 };
             break;
         case 'between':
             clause = `${field} BETWEEN  :${name}_1 AND :${name}_2`;
             parameters = { [`${name}_1`]: values[0], [`${name}_2`]: values[1] };
             break;
+        default:
+            /* 지원하지 않는 연산자: 이전엔 clause='' 로 andWhere('') 가 되어 malformed/무음이었다.
+               명확한 오류로 원인을 알린다(fail-fast). */
+            throw new Error(`[getQueryBuilderFromListParams] unsupported filter operator "${operator}" for field "${field}".`);
     }
     return { clause, parameters };
 }