@acorex-platform/framework-server 0.0.18 → 0.0.20

package/core/src/lib/entity-storage/entity-storage.controller.js

@@ -2,133 +2,147 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.EntityStorageController = void 0;
 const tslib_1 = require("tslib");
-const abstract_1 = require("@acorex-platform/framework-server/jql/abstract");
 const common_1 = require("@nestjs/common");
 const entity_storage_middleware_service_1 = require("./entity-storage-middleware.service");
 const core_1 = require("@acorex-platform/framework-shared/core");
 const entity_route_util_1 = require("./utils/entity-route.util");
+const runtime_request_context_util_1 = require("../runtime/runtime-request-context.util");
 //#region ---- Entity storage REST controller ----
 let EntityStorageController = class EntityStorageController {
     constructor(storage) {
         this.storage = storage;
     }
-    async query(area, module, entity, skip, take, orderBy, filterJson, quickSearch, bypassVisibility, bypassOwnership) {
-        const entityName = (0, entity_route_util_1.routeToEntityName)(area, module, entity);
-        let request;
-        try {
-            request = (0, entity_route_util_1.buildQueryRequest)({
-                skip,
-                take,
-                orderBy,
-                filter: filterJson,
-                quickSearch,
-                bypassVisibility,
-                bypassOwnership,
-            });
-        }
-        catch (error) {
-            if (error instanceof entity_route_util_1.InvalidEntityFilterError) {
-                throw new common_1.BadRequestException(error.message);
+    async query(req, area, module, entity, skip, take, orderBy, filterJson, quickSearch) {
+        return (0, runtime_request_context_util_1.runInRuntimeRequestContext)(req, () => {
+            const entityName = (0, entity_route_util_1.routeToEntityName)(area, module, entity);
+            let request;
+            try {
+                // Scope / visibility bypass query params are intentionally not accepted from HTTP clients.
+                request = (0, entity_route_util_1.buildQueryRequest)({
+                    skip,
+                    take,
+                    orderBy,
+                    filter: filterJson,
+                    quickSearch,
+                });
             }
-            throw error;
-        }
-        // buildQueryRequest uses jql AXPQueryRequest (optional skip/take); shared helper uses required fields.
-        return this.storage.query(entityName, (0, core_1.resolveQuickSearchQueryRequest)(request));
+            catch (error) {
+                if (error instanceof entity_route_util_1.InvalidEntityFilterError) {
+                    throw new common_1.BadRequestException(error.message);
+                }
+                throw error;
+            }
+            return this.storage.query(entityName, (0, core_1.resolveQuickSearchQueryRequest)(request));
+        });
     }
-    async aggregate(area, module, entity, body) {
-        const entityName = (0, entity_route_util_1.routeToEntityName)(area, module, entity);
-        if (!body?.measures?.length) {
-            throw new common_1.BadRequestException('Aggregate request must include at least one measure.');
-        }
-        return this.storage.aggregate(entityName, body);
+    async aggregate(req, area, module, entity, body) {
+        return (0, runtime_request_context_util_1.runInRuntimeRequestContext)(req, () => {
+            const entityName = (0, entity_route_util_1.routeToEntityName)(area, module, entity);
+            if (!body?.measures?.length) {
+                throw new common_1.BadRequestException('Aggregate request must include at least one measure.');
+            }
+            return this.storage.aggregate(entityName, body);
+        });
     }
-    async getOne(area, module, entity, id) {
-        const entityName = (0, entity_route_util_1.routeToEntityName)(area, module, entity);
-        return this.storage.getOne(entityName, id);
+    async getOne(req, area, module, entity, id) {
+        return (0, runtime_request_context_util_1.runInRuntimeRequestContext)(req, () => {
+            const entityName = (0, entity_route_util_1.routeToEntityName)(area, module, entity);
+            return this.storage.getOne(entityName, id);
+        });
     }
-    async insertOne(area, module, entity, body) {
-        const entityName = (0, entity_route_util_1.routeToEntityName)(area, module, entity);
-        const id = await this.storage.insertOne(entityName, body);
-        return { id };
+    async insertOne(req, area, module, entity, body) {
+        return (0, runtime_request_context_util_1.runInRuntimeRequestContext)(req, async () => {
+            const entityName = (0, entity_route_util_1.routeToEntityName)(area, module, entity);
+            const id = await this.storage.insertOne(entityName, body);
+            return { id };
+        });
     }
-    async updateOne(area, module, entity, id, body) {
-        const entityName = (0, entity_route_util_1.routeToEntityName)(area, module, entity);
-        return this.storage.updateOne(entityName, id, body);
+    async updateOne(req, area, module, entity, id, body) {
+        return (0, runtime_request_context_util_1.runInRuntimeRequestContext)(req, () => {
+            const entityName = (0, entity_route_util_1.routeToEntityName)(area, module, entity);
+            return this.storage.updateOne(entityName, id, body);
+        });
     }
-    async deleteOne(area, module, entity, id) {
-        const entityName = (0, entity_route_util_1.routeToEntityName)(area, module, entity);
-        await this.storage.deleteOne(entityName, id);
+    async deleteOne(req, area, module, entity, id) {
+        return (0, runtime_request_context_util_1.runInRuntimeRequestContext)(req, () => {
+            const entityName = (0, entity_route_util_1.routeToEntityName)(area, module, entity);
+            return this.storage.deleteOne(entityName, id);
+        });
     }
 };
 exports.EntityStorageController = EntityStorageController;
 tslib_1.__decorate([
     (0, common_1.Get)(),
-    tslib_1.__param(0, (0, common_1.Param)('area')),
-    tslib_1.__param(1, (0, common_1.Param)('module')),
-    tslib_1.__param(2, (0, common_1.Param)('entity')),
-    tslib_1.__param(3, (0, common_1.Query)('Skip')),
-    tslib_1.__param(4, (0, common_1.Query)('Take')),
-    tslib_1.__param(5, (0, common_1.Query)('$orderby')),
-    tslib_1.__param(6, (0, common_1.Query)('filter')),
-    tslib_1.__param(7, (0, common_1.Query)('quickSearch')),
-    tslib_1.__param(8, (0, common_1.Query)(abstract_1.VISIBILITY_FILTER_BYPASS)),
-    tslib_1.__param(9, (0, common_1.Query)(abstract_1.OWNERSHIP_FILTER_BYPASS)),
+    tslib_1.__param(0, (0, common_1.Req)()),
+    tslib_1.__param(1, (0, common_1.Param)('area')),
+    tslib_1.__param(2, (0, common_1.Param)('module')),
+    tslib_1.__param(3, (0, common_1.Param)('entity')),
+    tslib_1.__param(4, (0, common_1.Query)('Skip')),
+    tslib_1.__param(5, (0, common_1.Query)('Take')),
+    tslib_1.__param(6, (0, common_1.Query)('$orderby')),
+    tslib_1.__param(7, (0, common_1.Query)('filter')),
+    tslib_1.__param(8, (0, common_1.Query)('quickSearch')),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, String, String, String, String, String, String, String, String]),
+    tslib_1.__metadata("design:paramtypes", [Object, String, String, String, String, String, String, String, String]),
     tslib_1.__metadata("design:returntype", Promise)
 ], EntityStorageController.prototype, "query", null);
 tslib_1.__decorate([
     (0, common_1.Post)('_aggregate'),
     (0, common_1.HttpCode)(common_1.HttpStatus.OK),
-    tslib_1.__param(0, (0, common_1.Param)('area')),
-    tslib_1.__param(1, (0, common_1.Param)('module')),
-    tslib_1.__param(2, (0, common_1.Param)('entity')),
-    tslib_1.__param(3, (0, common_1.Body)()),
+    tslib_1.__param(0, (0, common_1.Req)()),
+    tslib_1.__param(1, (0, common_1.Param)('area')),
+    tslib_1.__param(2, (0, common_1.Param)('module')),
+    tslib_1.__param(3, (0, common_1.Param)('entity')),
+    tslib_1.__param(4, (0, common_1.Body)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, String, Object]),
+    tslib_1.__metadata("design:paramtypes", [Object, String, String, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], EntityStorageController.prototype, "aggregate", null);
 tslib_1.__decorate([
     (0, common_1.Get)(':id'),
-    tslib_1.__param(0, (0, common_1.Param)('area')),
-    tslib_1.__param(1, (0, common_1.Param)('module')),
-    tslib_1.__param(2, (0, common_1.Param)('entity')),
-    tslib_1.__param(3, (0, common_1.Param)('id')),
+    tslib_1.__param(0, (0, common_1.Req)()),
+    tslib_1.__param(1, (0, common_1.Param)('area')),
+    tslib_1.__param(2, (0, common_1.Param)('module')),
+    tslib_1.__param(3, (0, common_1.Param)('entity')),
+    tslib_1.__param(4, (0, common_1.Param)('id')),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, String, String]),
+    tslib_1.__metadata("design:paramtypes", [Object, String, String, String, String]),
     tslib_1.__metadata("design:returntype", Promise)
 ], EntityStorageController.prototype, "getOne", null);
 tslib_1.__decorate([
     (0, common_1.Post)(),
     (0, common_1.HttpCode)(common_1.HttpStatus.CREATED),
-    tslib_1.__param(0, (0, common_1.Param)('area')),
-    tslib_1.__param(1, (0, common_1.Param)('module')),
-    tslib_1.__param(2, (0, common_1.Param)('entity')),
-    tslib_1.__param(3, (0, common_1.Body)()),
+    tslib_1.__param(0, (0, common_1.Req)()),
+    tslib_1.__param(1, (0, common_1.Param)('area')),
+    tslib_1.__param(2, (0, common_1.Param)('module')),
+    tslib_1.__param(3, (0, common_1.Param)('entity')),
+    tslib_1.__param(4, (0, common_1.Body)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, String, Object]),
+    tslib_1.__metadata("design:paramtypes", [Object, String, String, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], EntityStorageController.prototype, "insertOne", null);
 tslib_1.__decorate([
     (0, common_1.Put)(':id'),
-    tslib_1.__param(0, (0, common_1.Param)('area')),
-    tslib_1.__param(1, (0, common_1.Param)('module')),
-    tslib_1.__param(2, (0, common_1.Param)('entity')),
-    tslib_1.__param(3, (0, common_1.Param)('id')),
-    tslib_1.__param(4, (0, common_1.Body)()),
+    tslib_1.__param(0, (0, common_1.Req)()),
+    tslib_1.__param(1, (0, common_1.Param)('area')),
+    tslib_1.__param(2, (0, common_1.Param)('module')),
+    tslib_1.__param(3, (0, common_1.Param)('entity')),
+    tslib_1.__param(4, (0, common_1.Param)('id')),
+    tslib_1.__param(5, (0, common_1.Body)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, String, String, Object]),
+    tslib_1.__metadata("design:paramtypes", [Object, String, String, String, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], EntityStorageController.prototype, "updateOne", null);
 tslib_1.__decorate([
     (0, common_1.Delete)(':id'),
     (0, common_1.HttpCode)(common_1.HttpStatus.NO_CONTENT),
-    tslib_1.__param(0, (0, common_1.Param)('area')),
-    tslib_1.__param(1, (0, common_1.Param)('module')),
-    tslib_1.__param(2, (0, common_1.Param)('entity')),
-    tslib_1.__param(3, (0, common_1.Param)('id')),
+    tslib_1.__param(0, (0, common_1.Req)()),
+    tslib_1.__param(1, (0, common_1.Param)('area')),
+    tslib_1.__param(2, (0, common_1.Param)('module')),
+    tslib_1.__param(3, (0, common_1.Param)('entity')),
+    tslib_1.__param(4, (0, common_1.Param)('id')),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, String, String]),
+    tslib_1.__metadata("design:paramtypes", [Object, String, String, String, String]),
     tslib_1.__metadata("design:returntype", Promise)
 ], EntityStorageController.prototype, "deleteOne", null);
 exports.EntityStorageController = EntityStorageController = tslib_1.__decorate([

package/core/src/lib/entity-storage/entity-storage.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"entity-storage.controller.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/core/src/lib/entity-storage/entity-storage.controller.ts"],"names":[],"mappings":";;;;AACA,6EAGwD;AACxD,2CAYwB;AACxB,2FAAqF;AACrF,iEAGgD;AAChD,iEAImC;AAEnC,kDAAkD;AAG3C,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAClC,YAA6B,OAAuC;QAAvC,YAAO,GAAP,OAAO,CAAgC;IAAG,CAAC;IAGlE,AAAN,KAAK,CAAC,KAAK,CACM,IAAY,EACV,MAAc,EACd,MAAc,EAChB,IAAa,EACb,IAAa,EACT,OAAgB,EAClB,UAAmB,EACd,WAAoB,EACT,gBAAyB,EAC1B,eAAwB;QAExD,MAAM,UAAU,GAAG,IAAA,qCAAiB,EAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,IAAA,qCAAiB,EAAC;gBAC1B,IAAI;gBACJ,IAAI;gBACJ,OAAO;gBACP,MAAM,EAAE,UAAU;gBAClB,WAAW;gBACX,gBAAgB;gBAChB,eAAe;aAChB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,4CAAwB,EAAE,CAAC;gBAC9C,MAAM,IAAI,4BAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,uGAAuG;QACvG,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CACvB,UAAU,EACV,IAAA,qCAA8B,EAAC,OAA6B,CAAC,CAC9D,CAAC;IACJ,CAAC;IAIK,AAAN,KAAK,CAAC,SAAS,CACE,IAAY,EACV,MAAc,EACd,MAAc,EACvB,IAA+B;QAEvC,MAAM,UAAU,GAAG,IAAA,qCAAiB,EAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;YAC5B,MAAM,IAAI,4BAAmB,CAAC,sDAAsD,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CACK,IAAY,EACV,MAAc,EACd,MAAc,EAClB,EAAU;QAEvB,MAAM,UAAU,GAAG,IAAA,qCAAiB,EAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;IAIK,AAAN,KAAK,CAAC,SAAS,CACE,IAAY,EACV,MAAc,EACd,MAAc,EACvB,IAAa;QAErB,MAAM,UAAU,GAAG,IAAA,qCAAiB,EAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC1D,OAAO,EAAE,EAAE,EAAE,CAAC;IAChB,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CACE,IAAY,EACV,MAAc,EACd,MAAc,EAClB,EAAU,EACf,IAA6B;QAErC,MAAM,UAAU,GAAG,IAAA,qCAAiB,EAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IAIK,AAAN,KAAK,CAAC,SAAS,CACE,IAAY,EACV,MAAc,EACd,MAAc,EAClB,EAAU;QAEvB,MAAM,UAAU,GAAG,IAAA,qCAAiB,EAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC/C,CAAC;CACF,CAAA;AAvGY,0DAAuB;AAI5B;IADL,IAAA,YAAG,GAAE;IAEH,mBAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IACb,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IACb,mBAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IACb,mBAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;IACjB,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,aAAa,CAAC,CAAA;IACpB,mBAAA,IAAA,cAAK,EAAC,mCAAwB,CAAC,CAAA;IAC/B,mBAAA,IAAA,cAAK,EAAC,kCAAuB,CAAC,CAAA;;;;oDAyBhC;AAIK;IAFL,IAAA,aAAI,EAAC,YAAY,CAAC;IAClB,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IAErB,mBAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IACb,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,aAAI,GAAE,CAAA;;;;wDAOR;AAGK;IADL,IAAA,YAAG,EAAC,KAAK,CAAC;IAER,mBAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IACb,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;;;;qDAIb;AAIK;IAFL,IAAA,aAAI,GAAE;IACN,IAAA,iBAAQ,EAAC,mBAAU,CAAC,OAAO,CAAC;IAE1B,mBAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IACb,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,aAAI,GAAE,CAAA;;;;wDAKR;AAGK;IADL,IAAA,YAAG,EAAC,KAAK,CAAC;IAER,mBAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IACb,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IACX,mBAAA,IAAA,aAAI,GAAE,CAAA;;;;wDAIR;AAIK;IAFL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,iBAAQ,EAAC,mBAAU,CAAC,UAAU,CAAC;IAE7B,mBAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IACb,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;;;;wDAIb;kCAtGU,uBAAuB;IADnC,IAAA,mBAAU,EAAC,iCAAiC,CAAC;6CAEN,kEAA8B;GADzD,uBAAuB,CAuGnC;AAED,YAAY"}
+{"version":3,"file":"entity-storage.controller.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/core/src/lib/entity-storage/entity-storage.controller.ts"],"names":[],"mappings":";;;;AACA,2CAawB;AAExB,2FAAqF;AACrF,iEAGgD;AAChD,iEAImC;AACnC,0FAAqF;AAErF,kDAAkD;AAG3C,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAClC,YAA6B,OAAuC;QAAvC,YAAO,GAAP,OAAO,CAAgC;IAAG,CAAC;IAGlE,AAAN,KAAK,CAAC,KAAK,CACF,GAAY,EACJ,IAAY,EACV,MAAc,EACd,MAAc,EAChB,IAAa,EACb,IAAa,EACT,OAAgB,EAClB,UAAmB,EACd,WAAoB;QAE1C,OAAO,IAAA,yDAA0B,EAAC,GAAG,EAAE,GAAG,EAAE;YAC1C,MAAM,UAAU,GAAG,IAAA,qCAAiB,EAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC3D,IAAI,OAAO,CAAC;YACZ,IAAI,CAAC;gBACH,2FAA2F;gBAC3F,OAAO,GAAG,IAAA,qCAAiB,EAAC;oBAC1B,IAAI;oBACJ,IAAI;oBACJ,OAAO;oBACP,MAAM,EAAE,UAAU;oBAClB,WAAW;iBACZ,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,4CAAwB,EAAE,CAAC;oBAC9C,MAAM,IAAI,4BAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC/C,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CACvB,UAAU,EACV,IAAA,qCAA8B,EAAC,OAAwC,CAAmB,CAC3F,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAIK,AAAN,KAAK,CAAC,SAAS,CACN,GAAY,EACJ,IAAY,EACV,MAAc,EACd,MAAc,EACvB,IAA+B;QAEvC,OAAO,IAAA,yDAA0B,EAAC,GAAG,EAAE,GAAG,EAAE;YAC1C,MAAM,UAAU,GAAG,IAAA,qCAAiB,EAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC3D,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;gBAC5B,MAAM,IAAI,4BAAmB,CAAC,sDAAsD,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CACH,GAAY,EACJ,IAAY,EACV,MAAc,EACd,MAAc,EAClB,EAAU;QAEvB,OAAO,IAAA,yDAA0B,EAAC,GAAG,EAAE,GAAG,EAAE;YAC1C,MAAM,UAAU,GAAG,IAAA,qCAAiB,EAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;IAIK,AAAN,KAAK,CAAC,SAAS,CACN,GAAY,EACJ,IAAY,EACV,MAAc,EACd,MAAc,EACvB,IAAa;QAErB,OAAO,IAAA,yDAA0B,EAAC,GAAG,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,UAAU,GAAG,IAAA,qCAAiB,EAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC1D,OAAO,EAAE,EAAE,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CACN,GAAY,EACJ,IAAY,EACV,MAAc,EACd,MAAc,EAClB,EAAU,EACf,IAA6B;QAErC,OAAO,IAAA,yDAA0B,EAAC,GAAG,EAAE,GAAG,EAAE;YAC1C,MAAM,UAAU,GAAG,IAAA,qCAAiB,EAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC;IAIK,AAAN,KAAK,CAAC,SAAS,CACN,GAAY,EACJ,IAAY,EACV,MAAc,EACd,MAAc,EAClB,EAAU;QAEvB,OAAO,IAAA,yDAA0B,EAAC,GAAG,EAAE,GAAG,EAAE;YAC1C,MAAM,UAAU,GAAG,IAAA,qCAAiB,EAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AArHY,0DAAuB;AAI5B;IADL,IAAA,YAAG,GAAE;IAEH,mBAAA,IAAA,YAAG,GAAE,CAAA;IACL,mBAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IACb,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IACb,mBAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IACb,mBAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;IACjB,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,aAAa,CAAC,CAAA;;;;oDAyBtB;AAIK;IAFL,IAAA,aAAI,EAAC,YAAY,CAAC;IAClB,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IAErB,mBAAA,IAAA,YAAG,GAAE,CAAA;IACL,mBAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IACb,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,aAAI,GAAE,CAAA;;;;wDASR;AAGK;IADL,IAAA,YAAG,EAAC,KAAK,CAAC;IAER,mBAAA,IAAA,YAAG,GAAE,CAAA;IACL,mBAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IACb,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;;;;qDAMb;AAIK;IAFL,IAAA,aAAI,GAAE;IACN,IAAA,iBAAQ,EAAC,mBAAU,CAAC,OAAO,CAAC;IAE1B,mBAAA,IAAA,YAAG,GAAE,CAAA;IACL,mBAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IACb,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,aAAI,GAAE,CAAA;;;;wDAOR;AAGK;IADL,IAAA,YAAG,EAAC,KAAK,CAAC;IAER,mBAAA,IAAA,YAAG,GAAE,CAAA;IACL,mBAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IACb,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IACX,mBAAA,IAAA,aAAI,GAAE,CAAA;;;;wDAMR;AAIK;IAFL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,iBAAQ,EAAC,mBAAU,CAAC,UAAU,CAAC;IAE7B,mBAAA,IAAA,YAAG,GAAE,CAAA;IACL,mBAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IACb,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;;;;wDAMb;kCApHU,uBAAuB;IADnC,IAAA,mBAAU,EAAC,iCAAiC,CAAC;6CAEN,kEAA8B;GADzD,uBAAuB,CAqHnC;AAED,YAAY"}

package/core/src/lib/entity-storage/entity-storage.module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity-storage.module.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/core/src/lib/entity-storage/entity-storage.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,kBAAkB,EAAU,UAAU,EAAiB,MAAM,gBAAgB,CAAC;AAgB/F;;;GAGG;AACH,qBAqCa,mBAAoB,YAAW,UAAU;IACpD,SAAS,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI;CAG9C"}
+{"version":3,"file":"entity-storage.module.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/core/src/lib/entity-storage/entity-storage.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,kBAAkB,EAElB,UAAU,EAGX,MAAM,gBAAgB,CAAC;AAiBxB;;;GAGG;AACH,qBAsCa,mBAAoB,YAAW,UAAU;IACpD,SAAS,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI;CAO9C"}

package/core/src/lib/entity-storage/entity-storage.module.js

@@ -14,6 +14,7 @@ const category_hierarchy_filter_middleware_1 = require("./middlewares/category-h
 const entity_mutation_event_emitter_service_1 = require("./entity-mutation-events/entity-mutation-event-emitter.service");
 const entity_mutation_event_middleware_1 = require("./entity-mutation-events/entity-mutation-event.middleware");
 const entity_mutation_event_middleware_bootstrap_1 = require("./entity-mutation-events/entity-mutation-event.middleware.bootstrap");
+const context_definition_module_1 = require("../context-definition/context-definition.module");
 const expression_evaluator_module_1 = require("../expression-evaluator/expression-evaluator.module");
 //#region ---- Entity storage module ----
 /**
@@ -22,7 +23,11 @@ const expression_evaluator_module_1 = require("../expression-evaluator/expressio
  */
 let EntityStorageModule = class EntityStorageModule {
     configure(consumer) {
-        consumer.apply(entity_storage_request_context_middleware_1.EntityStorageRequestContextMiddleware).forRoutes('*');
+        // Nest 11 / path-to-regexp v8: use `*splat` (same as SecurityModule / observability).
+        // Plain `*` does not match routes, so ALS never binds and visibility sees no session.
+        consumer
+            .apply(entity_storage_request_context_middleware_1.EntityStorageRequestContextMiddleware)
+            .forRoutes({ path: '*splat', method: common_1.RequestMethod.ALL });
     }
 };
 exports.EntityStorageModule = EntityStorageModule;
@@ -35,6 +40,7 @@ exports.EntityStorageModule = EntityStorageModule = tslib_1.__decorate([
                 delimiter: '.',
             }),
             expression_evaluator_module_1.ExpressionEvaluatorModule,
+            context_definition_module_1.AXPContextDefinitionModule,
         ],
         controllers: [entity_storage_controller_1.EntityStorageController],
         providers: [

package/core/src/lib/entity-storage/entity-storage.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"entity-storage.module.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/core/src/lib/entity-storage/entity-storage.module.ts"],"names":[],"mappings":";;;;AAAA,2CAA+F;AAC/F,yDAA2D;AAC3D,2EAAsE;AACtE,2FAAqF;AACrF,mEAAoE;AACpE,uHAAgH;AAChH,iFAA4E;AAC5E,+FAAyF;AACzF,6GAAuG;AACvG,0HAA4G;AAC5G,gHAA0G;AAC1G,oIAA6H;AAC7H,qGAAgG;AAEhG,yCAAyC;AAEzC;;;GAGG;AAsCI,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC9B,SAAS,CAAC,QAA4B;QACpC,QAAQ,CAAC,KAAK,CAAC,iFAAqC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACvE,CAAC;CACF,CAAA;AAJY,kDAAmB;8BAAnB,mBAAmB;IArC/B,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,kCAAkB,CAAC,OAAO,CAAC;gBACzB,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,GAAG;aACf,CAAC;YACF,uDAAyB;SAC1B;QACD,WAAW,EAAE,CAAC,mDAAuB,CAAC;QACtC,SAAS,EAAE;YACT,kEAA8B;YAC9B,sEAAgC;YAChC,iFAAqC;YACrC,6CAAoB;YACpB,wEAAiC;YACjC,kEAA0B;YAC1B,gEAA6B;YAC7B,mFAAsC;YACtC;gBACE,OAAO,EAAE,iDAAyB;gBAClC,WAAW,EAAE,wEAAiC;gBAC9C,KAAK,EAAE,IAAI;aACA;YACb;gBACE,OAAO,EAAE,iDAAyB;gBAClC,WAAW,EAAE,6CAAoB;gBACjC,KAAK,EAAE,IAAI;aACA;YACb;gBACE,OAAO,EAAE,iDAAyB;gBAClC,WAAW,EAAE,gEAA6B;gBAC1C,KAAK,EAAE,IAAI;aACA;SACd;QACD,OAAO,EAAE,CAAC,kEAA8B,EAAE,iDAAyB,EAAE,kEAA0B,CAAC;KACjG,CAAC;GACW,mBAAmB,CAI/B;AAED,YAAY"}
+{"version":3,"file":"entity-storage.module.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/core/src/lib/entity-storage/entity-storage.module.ts"],"names":[],"mappings":";;;;AAAA,2CAOwB;AACxB,yDAA2D;AAC3D,2EAAsE;AACtE,2FAAqF;AACrF,mEAAoE;AACpE,uHAAgH;AAChH,iFAA4E;AAC5E,+FAAyF;AACzF,6GAAuG;AACvG,0HAA4G;AAC5G,gHAA0G;AAC1G,oIAA6H;AAC7H,+FAA6F;AAC7F,qGAAgG;AAEhG,yCAAyC;AAEzC;;;GAGG;AAuCI,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC9B,SAAS,CAAC,QAA4B;QACpC,sFAAsF;QACtF,sFAAsF;QACtF,QAAQ;aACL,KAAK,CAAC,iFAAqC,CAAC;aAC5C,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,sBAAa,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9D,CAAC;CACF,CAAA;AARY,kDAAmB;8BAAnB,mBAAmB;IAtC/B,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,kCAAkB,CAAC,OAAO,CAAC;gBACzB,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,GAAG;aACf,CAAC;YACF,uDAAyB;YACzB,sDAA0B;SAC3B;QACD,WAAW,EAAE,CAAC,mDAAuB,CAAC;QACtC,SAAS,EAAE;YACT,kEAA8B;YAC9B,sEAAgC;YAChC,iFAAqC;YACrC,6CAAoB;YACpB,wEAAiC;YACjC,kEAA0B;YAC1B,gEAA6B;YAC7B,mFAAsC;YACtC;gBACE,OAAO,EAAE,iDAAyB;gBAClC,WAAW,EAAE,wEAAiC;gBAC9C,KAAK,EAAE,IAAI;aACA;YACb;gBACE,OAAO,EAAE,iDAAyB;gBAClC,WAAW,EAAE,6CAAoB;gBACjC,KAAK,EAAE,IAAI;aACA;YACb;gBACE,OAAO,EAAE,iDAAyB;gBAClC,WAAW,EAAE,gEAA6B;gBAC1C,KAAK,EAAE,IAAI;aACA;SACd;QACD,OAAO,EAAE,CAAC,kEAA8B,EAAE,iDAAyB,EAAE,kEAA0B,CAAC;KACjG,CAAC;GACW,mBAAmB,CAQ/B;AAED,YAAY"}

package/core/src/lib/entity-storage/middlewares/entity-storage-request-context.middleware.d.ts

@@ -1,8 +1,8 @@
 import { NestMiddleware } from '@nestjs/common';
 import type { NextFunction, Request, Response } from 'express';
 /**
- * Binds the current HTTP request to Nest's DI context so request-scoped
- * entity storage middleware (e.g. folder storage) resolves with session data.
+ * Binds the current HTTP request to ALS so entity-storage middleware can read
+ * session data for the whole request (not only during synchronous `next()`).
  */
 export declare class EntityStorageRequestContextMiddleware implements NestMiddleware {
     use(req: Request, _res: Response, next: NextFunction): void;

package/core/src/lib/entity-storage/middlewares/entity-storage-request-context.middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity-storage-request-context.middleware.d.ts","sourceRoot":"","sources":["../../../../../../../../../libs/framework/server/core/src/lib/entity-storage/middlewares/entity-storage-request-context.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAK/D;;;GAGG;AACH,qBACa,qCAAsC,YAAW,cAAc;IAC1E,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI;CAG5D"}
+{"version":3,"file":"entity-storage-request-context.middleware.d.ts","sourceRoot":"","sources":["../../../../../../../../../libs/framework/server/core/src/lib/entity-storage/middlewares/entity-storage-request-context.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAK/D;;;GAGG;AACH,qBACa,qCAAsC,YAAW,cAAc;IAC1E,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI;CAI5D"}

package/core/src/lib/entity-storage/middlewares/entity-storage-request-context.middleware.js

@@ -6,12 +6,13 @@ const common_1 = require("@nestjs/common");
 const entity_storage_request_context_1 = require("../entity-storage-request-context");
 //#region ---- HTTP request context for scoped entity middleware ----
 /**
- * Binds the current HTTP request to Nest's DI context so request-scoped
- * entity storage middleware (e.g. folder storage) resolves with session data.
+ * Binds the current HTTP request to ALS so entity-storage middleware can read
+ * session data for the whole request (not only during synchronous `next()`).
  */
 let EntityStorageRequestContextMiddleware = class EntityStorageRequestContextMiddleware {
     use(req, _res, next) {
-        (0, entity_storage_request_context_1.runWithEntityStorageRequestContext)(req, () => next());
+        (0, entity_storage_request_context_1.enterEntityStorageRequestContext)(req);
+        next();
     }
 };
 exports.EntityStorageRequestContextMiddleware = EntityStorageRequestContextMiddleware;

package/core/src/lib/entity-storage/middlewares/entity-storage-request-context.middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"entity-storage-request-context.middleware.js","sourceRoot":"","sources":["../../../../../../../../../libs/framework/server/core/src/lib/entity-storage/middlewares/entity-storage-request-context.middleware.ts"],"names":[],"mappings":";;;;AAAA,2CAA4D;AAE5D,sFAAuF;AAEvF,qEAAqE;AAErE;;;GAGG;AAEI,IAAM,qCAAqC,GAA3C,MAAM,qCAAqC;IAChD,GAAG,CAAC,GAAY,EAAE,IAAc,EAAE,IAAkB;QAClD,IAAA,mEAAkC,EAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;CACF,CAAA;AAJY,sFAAqC;gDAArC,qCAAqC;IADjD,IAAA,mBAAU,GAAE;GACA,qCAAqC,CAIjD;AAED,YAAY"}
+{"version":3,"file":"entity-storage-request-context.middleware.js","sourceRoot":"","sources":["../../../../../../../../../libs/framework/server/core/src/lib/entity-storage/middlewares/entity-storage-request-context.middleware.ts"],"names":[],"mappings":";;;;AAAA,2CAA4D;AAE5D,sFAAqF;AAErF,qEAAqE;AAErE;;;GAGG;AAEI,IAAM,qCAAqC,GAA3C,MAAM,qCAAqC;IAChD,GAAG,CAAC,GAAY,EAAE,IAAc,EAAE,IAAkB;QAClD,IAAA,iEAAgC,EAAC,GAAG,CAAC,CAAC;QACtC,IAAI,EAAE,CAAC;IACT,CAAC;CACF,CAAA;AALY,sFAAqC;gDAArC,qCAAqC;IADjD,IAAA,mBAAU,GAAE;GACA,qCAAqC,CAKjD;AAED,YAAY"}

package/core/src/lib/entity-storage/utils/entity-route.util.d.ts

@@ -19,7 +19,5 @@ export declare function buildQueryRequest(params: {
     orderBy?: string;
     filter?: string;
     quickSearch?: string;
-    bypassVisibility?: string;
-    bypassOwnership?: string;
 }): AXPQueryRequest;
 //# sourceMappingURL=entity-route.util.d.ts.map

package/core/src/lib/entity-storage/utils/entity-route.util.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity-route.util.d.ts","sourceRoot":"","sources":["../../../../../../../../../libs/framework/server/core/src/lib/entity-storage/utils/entity-route.util.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,YAAY,EAGb,MAAM,gDAAgD,CAAC;AAMxD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAM1D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAWtF;AAMD,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,OAAO,SAAiD;CAIrE;AAED,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE,GAAG,SAAS,CAU9E;AAED,2FAA2F;AAC3F,wBAAgB,qBAAqB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAUlE;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,eAAe,CAgClB"}
+{"version":3,"file":"entity-route.util.d.ts","sourceRoot":"","sources":["../../../../../../../../../libs/framework/server/core/src/lib/entity-storage/utils/entity-route.util.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,YAAY,EACb,MAAM,gDAAgD,CAAC;AAMxD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAM1D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAWtF;AAMD,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,OAAO,SAAiD;CAIrE;AAED,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE,GAAG,SAAS,CAU9E;AAED,2FAA2F;AAC3F,wBAAgB,qBAAqB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAUlE;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,eAAe,CAuBlB"}

package/core/src/lib/entity-storage/utils/entity-route.util.js

@@ -6,7 +6,6 @@ exports.routeToEntityName = routeToEntityName;
 exports.parseOrderByParam = parseOrderByParam;
 exports.parseFilterQueryParam = parseFilterQueryParam;
 exports.buildQueryRequest = buildQueryRequest;
-const abstract_1 = require("@acorex-platform/framework-server/jql/abstract");
 //#region ---- Route ↔ entity name ----
 const DEFAULT_AREA = 'global';
 /**
@@ -76,19 +75,10 @@ function buildQueryRequest(params) {
     if (filter !== undefined) {
         request.filter = filter;
     }
-    const requestParams = {};
-    if (params.bypassVisibility === 'true') {
-        requestParams[abstract_1.VISIBILITY_FILTER_BYPASS] = 'true';
-    }
-    if (params.bypassOwnership === 'true') {
-        requestParams[abstract_1.OWNERSHIP_FILTER_BYPASS] = 'true';
-    }
+    // Client-facing bypass flags are not accepted on the HTTP entity route.
     const quickSearch = params.quickSearch?.trim();
     if (quickSearch) {
-        requestParams['quickSearch'] = quickSearch;
-    }
-    if (Object.keys(requestParams).length) {
-        request.params = requestParams;
+        request.params = { quickSearch };
     }
     return request;
 }

package/core/src/lib/entity-storage/utils/entity-route.util.js.map

@@ -1 +1 @@
-{"version":3,"file":"entity-route.util.js","sourceRoot":"","sources":["../../../../../../../../../libs/framework/server/core/src/lib/entity-storage/utils/entity-route.util.ts"],"names":[],"mappings":";;;AAcA,oDAMC;AAKD,8CAWC;AAaD,8CAUC;AAGD,sDAUC;AAED,8CAwCC;AAlHD,6EAKwD;AAExD,uCAAuC;AAEvC,MAAM,YAAY,GAAG,QAAQ,CAAC;AAE9B;;GAEG;AACH,SAAgB,oBAAoB,CAAC,KAAa;IAChD,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC3D,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB,CAAC,IAAY,EAAE,MAAc,EAAE,MAAc;IAC5E,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG,IAAI,EAAE,WAAW,EAAE,IAAI,YAAY,CAAC;IAE3D,IAAI,cAAc,KAAK,YAAY,EAAE,CAAC;QACpC,OAAO,GAAG,YAAY,IAAI,YAAY,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,UAAU,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;IACxD,OAAO,GAAG,UAAU,IAAI,YAAY,IAAI,YAAY,EAAE,CAAC;AACzD,CAAC;AAED,YAAY;AAEZ,wCAAwC;AAExC,MAAa,wBAAyB,SAAQ,KAAK;IACjD,YAAY,OAAO,GAAG,8CAA8C;QAClE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AALD,4DAKC;AAED,SAAgB,iBAAiB,CAAC,OAAgB;IAChD,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACrC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QACxE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2FAA2F;AAC3F,SAAgB,qBAAqB,CAAC,UAAmB;IACvD,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAY,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,wBAAwB,EAAE,CAAC;IACvC,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB,CAAC,MAQjC;IACC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEpD,MAAM,OAAO,GAAoB;QAC/B,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI;KACL,CAAC;IAEF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;IAC1B,CAAC;IAED,MAAM,aAAa,GAA4B,EAAE,CAAC;IAClD,IAAI,MAAM,CAAC,gBAAgB,KAAK,MAAM,EAAE,CAAC;QACvC,aAAa,CAAC,mCAAwB,CAAC,GAAG,MAAM,CAAC;IACnD,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,KAAK,MAAM,EAAE,CAAC;QACtC,aAAa,CAAC,kCAAuB,CAAC,GAAG,MAAM,CAAC;IAClD,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,WAAW,EAAE,CAAC;QAChB,aAAa,CAAC,aAAa,CAAC,GAAG,WAAW,CAAC;IAC7C,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE,CAAC;QACtC,OAAO,CAAC,MAAM,GAAG,aAAa,CAAC;IACjC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,YAAY"}
+{"version":3,"file":"entity-route.util.js","sourceRoot":"","sources":["../../../../../../../../../libs/framework/server/core/src/lib/entity-storage/utils/entity-route.util.ts"],"names":[],"mappings":";;;AAYA,oDAMC;AAKD,8CAWC;AAaD,8CAUC;AAGD,sDAUC;AAED,8CA6BC;AAhGD,uCAAuC;AAEvC,MAAM,YAAY,GAAG,QAAQ,CAAC;AAE9B;;GAEG;AACH,SAAgB,oBAAoB,CAAC,KAAa;IAChD,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC3D,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB,CAAC,IAAY,EAAE,MAAc,EAAE,MAAc;IAC5E,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG,IAAI,EAAE,WAAW,EAAE,IAAI,YAAY,CAAC;IAE3D,IAAI,cAAc,KAAK,YAAY,EAAE,CAAC;QACpC,OAAO,GAAG,YAAY,IAAI,YAAY,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,UAAU,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;IACxD,OAAO,GAAG,UAAU,IAAI,YAAY,IAAI,YAAY,EAAE,CAAC;AACzD,CAAC;AAED,YAAY;AAEZ,wCAAwC;AAExC,MAAa,wBAAyB,SAAQ,KAAK;IACjD,YAAY,OAAO,GAAG,8CAA8C;QAClE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AALD,4DAKC;AAED,SAAgB,iBAAiB,CAAC,OAAgB;IAChD,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACrC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QACxE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2FAA2F;AAC3F,SAAgB,qBAAqB,CAAC,UAAmB;IACvD,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAY,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,wBAAwB,EAAE,CAAC;IACvC,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB,CAAC,MAMjC;IACC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEpD,MAAM,OAAO,GAAoB;QAC/B,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI;KACL,CAAC;IAEF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;IAC1B,CAAC;IAED,wEAAwE;IACxE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,GAAG,EAAE,WAAW,EAAE,CAAC;IACnC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,YAAY"}

package/core/src/lib/errors/index.d.ts

@@ -0,0 +1,2 @@
+export * from './map-unknown-to-command-failure.util';
+//# sourceMappingURL=index.d.ts.map

package/core/src/lib/errors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/core/src/lib/errors/index.ts"],"names":[],"mappings":"AAAA,cAAc,uCAAuC,CAAC"}

package/core/src/lib/errors/index.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./map-unknown-to-command-failure.util"), exports);
+//# sourceMappingURL=index.js.map

package/core/src/lib/errors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/core/src/lib/errors/index.ts"],"names":[],"mappings":";;;AAAA,gFAAsD"}

package/core/src/lib/errors/map-unknown-to-command-failure.util.d.ts

@@ -0,0 +1,6 @@
+import { type AXPErrorBody, type AXPRuntimeCommandResult } from '@acorex-platform/framework-shared/core';
+/** Map any thrown value to a structured error body (Nest + middleware aware). */
+export declare function mapUnknownErrorToAXPErrorBody(error: unknown): AXPErrorBody;
+/** Soft-fail command result that preserves `code` / `details`. */
+export declare function mapUnknownErrorToCommandFailure(error: unknown): AXPRuntimeCommandResult;
+//# sourceMappingURL=map-unknown-to-command-failure.util.d.ts.map

package/core/src/lib/errors/map-unknown-to-command-failure.util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"map-unknown-to-command-failure.util.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/core/src/lib/errors/map-unknown-to-command-failure.util.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,uBAAuB,EAC7B,MAAM,wCAAwC,CAAC;AAqFhD,iFAAiF;AACjF,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAQ1E;AAED,kEAAkE;AAClE,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CAEvF"}

package/core/src/lib/errors/map-unknown-to-command-failure.util.js

@@ -0,0 +1,87 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mapUnknownErrorToAXPErrorBody = mapUnknownErrorToAXPErrorBody;
+exports.mapUnknownErrorToCommandFailure = mapUnknownErrorToCommandFailure;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@acorex-platform/framework-shared/core");
+const middleware_abort_error_1 = require("../entity-storage/errors/middleware-abort.error");
+//#region ---- Helpers ----
+function readRecord(value) {
+    if (value == null || typeof value !== 'object' || Array.isArray(value)) {
+        return null;
+    }
+    return value;
+}
+function mapHttpExceptionToBody(exception) {
+    const status = exception.getStatus();
+    const response = exception.getResponse();
+    if (typeof response === 'string') {
+        return {
+            code: status === 413 ? core_1.AXP_PLATFORM_ERROR_CODES.PAYLOAD_TOO_LARGE : undefined,
+            message: response,
+            status,
+        };
+    }
+    const record = readRecord(response);
+    if (!record) {
+        return { message: exception.message, status };
+    }
+    const nestedError = readRecord(record['error']);
+    const code = (typeof record['code'] === 'string' && record['code']) ||
+        (typeof record['error'] === 'string' && record['error']) ||
+        (typeof nestedError?.['code'] === 'string' && nestedError['code']) ||
+        (status === 413 ? core_1.AXP_PLATFORM_ERROR_CODES.PAYLOAD_TOO_LARGE : undefined);
+    const message = (typeof record['message'] === 'string' && record['message']) ||
+        (typeof nestedError?.['message'] === 'string' && nestedError['message']) ||
+        exception.message;
+    const details = nestedError?.['details'] ?? record['details'] ?? collectTopLevelAuthDetails(record);
+    return {
+        code,
+        message,
+        status,
+        details,
+    };
+}
+/** Preserve auth challenge fields when Nest puts them on the exception body root. */
+function collectTopLevelAuthDetails(record) {
+    const keys = [
+        'failures',
+        'remainingAttempts',
+        'requiresCaptcha',
+        'locked',
+        'lockedUntil',
+    ];
+    const details = {};
+    for (const key of keys) {
+        if (key in record) {
+            details[key] = record[key];
+        }
+    }
+    return Object.keys(details).length > 0 ? details : undefined;
+}
+function mapMiddlewareAbortToBody(error) {
+    return {
+        code: error.options.code,
+        message: error.message,
+        status: error.options.status,
+        details: error.options.details,
+    };
+}
+//#endregion
+//#region ---- Public API ----
+/** Map any thrown value to a structured error body (Nest + middleware aware). */
+function mapUnknownErrorToAXPErrorBody(error) {
+    if ((0, middleware_abort_error_1.isMiddlewareAbortError)(error)) {
+        return mapMiddlewareAbortToBody(error);
+    }
+    if (error instanceof common_1.HttpException) {
+        return mapHttpExceptionToBody(error);
+    }
+    return (0, core_1.mapUnknownToAXPErrorBody)(error);
+}
+/** Soft-fail command result that preserves `code` / `details`. */
+function mapUnknownErrorToCommandFailure(error) {
+    return (0, core_1.toAXPRuntimeCommandFailure)(mapUnknownErrorToAXPErrorBody(error));
+}
+//#endregion
+//# sourceMappingURL=map-unknown-to-command-failure.util.js.map

package/core/src/lib/errors/map-unknown-to-command-failure.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"map-unknown-to-command-failure.util.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/core/src/lib/errors/map-unknown-to-command-failure.util.ts"],"names":[],"mappings":";;AA6FA,sEAQC;AAGD,0EAEC;AA1GD,2CAA+C;AAC/C,iEAMgD;AAChD,4FAGyD;AAEzD,2BAA2B;AAE3B,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,sBAAsB,CAAC,SAAwB;IACtD,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IAEzC,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,+BAAwB,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;YAC7E,OAAO,EAAE,QAAQ;YACjB,MAAM;SACP,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAChD,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,MAAM,IAAI,GACR,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;QACxD,CAAC,OAAO,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;QAClE,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,+BAAwB,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAE5E,MAAM,OAAO,GACX,CAAC,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5D,CAAC,OAAO,WAAW,EAAE,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;QACxE,SAAS,CAAC,OAAO,CAAC;IAEpB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAEpG,OAAO;QACL,IAAI;QACJ,OAAO;QACP,MAAM;QACN,OAAO;KACR,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,SAAS,0BAA0B,CAAC,MAA+B;IACjE,MAAM,IAAI,GAAG;QACX,UAAU;QACV,mBAAmB;QACnB,iBAAiB;QACjB,QAAQ;QACR,aAAa;KACL,CAAC;IACX,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,IAAI,MAAM,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,SAAS,wBAAwB,CAAC,KAA2B;IAC3D,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO;KAC/B,CAAC;AACJ,CAAC;AAED,YAAY;AAEZ,8BAA8B;AAE9B,iFAAiF;AACjF,SAAgB,6BAA6B,CAAC,KAAc;IAC1D,IAAI,IAAA,+CAAsB,EAAC,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,KAAK,YAAY,sBAAa,EAAE,CAAC;QACnC,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,IAAA,+BAAwB,EAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,kEAAkE;AAClE,SAAgB,+BAA+B,CAAC,KAAc;IAC5D,OAAO,IAAA,iCAA0B,EAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,YAAY"}

package/core/src/lib/filters/http-exception.filter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-exception.filter.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/core/src/lib/filters/http-exception.filter.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EAEb,eAAe,EAOhB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAEL,KAAK,SAAS,EACf,MAAM,0DAA0D,CAAC;AA6ClE;;;GAGG;AACH,qBAEa,mBAAoB,YAAW,eAAe;IAGb,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAFpE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwC;gBAEV,MAAM,CAAC,EAAE,SAAS,YAAA;IAE/E,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI;CA6DrD"}
+{"version":3,"file":"http-exception.filter.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/core/src/lib/filters/http-exception.filter.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EAEb,eAAe,EAOhB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAEL,KAAK,SAAS,EACf,MAAM,0DAA0D,CAAC;AA6ClE;;;GAGG;AACH,qBAEa,mBAAoB,YAAW,eAAe;IAGb,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAFpE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwC;gBAEV,MAAM,CAAC,EAAE,SAAS,YAAA;IAE/E,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI;CAkGrD"}

package/core/src/lib/filters/http-exception.filter.js

@@ -5,6 +5,7 @@ exports.HttpExceptionFilter = void 0;
 const tslib_1 = require("tslib");
 const common_1 = require("@nestjs/common");
 const shared_utils_1 = require("@nestjs/common/utils/shared.utils");
+const core_1 = require("@acorex-platform/framework-shared/core");
 const abstract_1 = require("@acorex-platform/framework-server/observability/abstract");
 const providers_1 = require("@acorex-platform/framework-server/observability/providers");
 //#region ---- HTTP exception filter ----
@@ -57,6 +58,22 @@ let HttpExceptionFilter = HttpExceptionFilter_1 = class HttpExceptionFilter {
             const payload = (0, shared_utils_1.isObject)(body)
                 ? { ...body }
                 : { statusCode: status, message: body };
+            // Lift nested middleware `{ success:false, error:{ code, message } }` to top-level code/message.
+            if ((0, shared_utils_1.isObject)(payload) && (0, shared_utils_1.isObject)(payload.error)) {
+                const nested = payload.error;
+                if (payload.code == null && typeof nested['code'] === 'string') {
+                    Object.assign(payload, { code: nested['code'] });
+                }
+                if (payload.message == null && typeof nested['message'] === 'string') {
+                    Object.assign(payload, { message: nested['message'] });
+                }
+                if (payload.details == null && nested['details'] !== undefined) {
+                    Object.assign(payload, { details: nested['details'] });
+                }
+            }
+            if (status === common_1.HttpStatus.PAYLOAD_TOO_LARGE && payload.code == null) {
+                Object.assign(payload, { code: core_1.AXP_PLATFORM_ERROR_CODES.PAYLOAD_TOO_LARGE });
+            }
             if (shouldExposeErrorDetails() && exception.stack) {
                 Object.assign(payload, { stack: exception.stack.split('\n') });
             }
@@ -68,10 +85,25 @@ let HttpExceptionFilter = HttpExceptionFilter_1 = class HttpExceptionFilter {
         }
         const expose = shouldExposeErrorDetails();
         if (exception instanceof Error) {
-            (0, providers_1.logHttpException)(this.logger, this.fallbackLogger, exception, request, response, common_1.HttpStatus.INTERNAL_SERVER_ERROR);
+            const isPayloadTooLarge = exception.name === 'PayloadTooLargeError' ||
+                /request entity too large/i.test(exception.message);
+            const status = isPayloadTooLarge
+                ? common_1.HttpStatus.PAYLOAD_TOO_LARGE
+                : common_1.HttpStatus.INTERNAL_SERVER_ERROR;
+            (0, providers_1.logHttpException)(this.logger, this.fallbackLogger, exception, request, response, status);
+            if (isPayloadTooLarge) {
+                response.status(status).json({
+                    statusCode: status,
+                    code: core_1.AXP_PLATFORM_ERROR_CODES.PAYLOAD_TOO_LARGE,
+                    message: 'The uploaded file is too large for this request.',
+                    error: 'Payload Too Large',
+                    ...(expose && exception.stack ? { stack: exception.stack.split('\n') } : {}),
+                });
+                return;
+            }
             const cause = getErrorCause(exception);
-            response.status(common_1.HttpStatus.INTERNAL_SERVER_ERROR).json({
-                statusCode: common_1.HttpStatus.INTERNAL_SERVER_ERROR,
+            response.status(status).json({
+                statusCode: status,
                 message: expose ? exception.message : 'Internal Server Error',
                 error: expose ? exception.name : 'Internal Server Error',
                 ...(expose && exception.stack ? { stack: exception.stack.split('\n') } : {}),