@aventara/nest 1.0.0-rc.4 → 1.0.0-rc.9

package/CHANGELOG.md

@@ -1,5 +1,63 @@
 # @aventara/nest
 
+## 1.0.0-rc.9
+
+### Patch Changes
+
+- 8c40b81: `@aventara/nest` declares a NestJS project's layout in its manifest (`"aventara": { "host": … }`).
+  `aventara new` and `aventara init`, which now also scaffold Next.js apps, and `aventara-build` read a NestJS project's
+  paths from it, so the three always agree. A NestJS project is scaffolded exactly as before.
+- 205a379: `AventaraModule` hosts a Framework built with `access` (an access provider, from `@aventara/core`): each protocol
+  request's `ctx.$state` is seeded by the provider's `state`, called with `{ headers, request }`, the platform
+  request's headers as `Headers` and Express's `req` or Fastify's `request`. It works the same through `config`
+  (`forRoot({ config: { ...config, access } })`) and `framework`. The module's own `state` option beside `access` is
+  refused while Nest builds the application, and is a type error on a `config` that states `access`.
+- Updated dependencies [205a379]
+- Updated dependencies [a0bb05e]
+- Updated dependencies [86ab319]
+- Updated dependencies [fdf52e6]
+  - @aventara/core@1.0.0-rc.9
+  - @aventara/mcp@1.0.0-rc.9
+
+## 1.0.0-rc.8
+
+1.0.0-rc.5, rc.6 and rc.7 were tagged but never published; 1.0.0-rc.8 contains everything listed under them and the changes below.
+
+### Patch Changes
+
+- Updated dependencies [1c8e4ee]
+  - @aventara/core@1.0.0-rc.8
+  - @aventara/mcp@1.0.0-rc.8
+
+## 1.0.0-rc.7
+
+1.0.0-rc.5 and 1.0.0-rc.6 were tagged but never published; 1.0.0-rc.7 contains everything listed under them and the changes below.
+
+### Patch Changes
+
+- Updated dependencies [f917c1c]
+  - @aventara/core@1.0.0-rc.7
+  - @aventara/mcp@1.0.0-rc.7
+
+## 1.0.0-rc.6
+
+1.0.0-rc.5 was tagged but never published. 1.0.0-rc.6 contains everything listed under 1.0.0-rc.5 and the fix below.
+
+### Patch Changes
+
+- Updated dependencies [1cf72e0]
+  - @aventara/core@1.0.0-rc.6
+  - @aventara/mcp@1.0.0-rc.6
+
+## 1.0.0-rc.5
+
+### Patch Changes
+
+- Updated dependencies [4795ff1]
+- Updated dependencies [9e178ca]
+  - @aventara/core@1.0.0-rc.5
+  - @aventara/mcp@1.0.0-rc.5
+
 ## 1.0.0-rc.4
 
 ### Patch Changes

package/README.md

@@ -203,6 +203,11 @@ const signedIn: AvGuard = (ctx) => ctx.$state.user !== undefined;
   runs before it (`app.use` middleware, an earlier `onRequest` hook) has run.
 - Use `app.use(...)` for the middleware that finds the user (a Passport `authenticate` call, a session or JWT check).
   Nest guards never run on protocol routes, and `MiddlewareConsumer` middleware does not on Express (the table above).
+- A Framework built with `access` (an access provider, see `@aventara/core`) seeds the state itself: the module calls
+  the provider's `state` with `{ headers, request }`, the platform request's headers and the request. Pass no `state`
+  beside it; the module refuses the pair while Nest builds the application, and as a type error on a `config` that
+  states `access`. It works the same through `config` and `framework`:
+  `AventaraModule.forRoot({ config: { ...config, access } })`.
 - Throw `new AvError("A4001", "…")` from `state` to refuse the request (`403`); any other throw is `500 A3000`, with the
   error in your `diagnostics` sink.
 - A plan sent to `/_transactions` gets one state for all its steps and transaction stages. A ctx call a stage makes
@@ -240,7 +245,7 @@ It is an optional peer dependency: an application without `mcp` does not need it
 package refuses to start, naming it and the command, with the version filled in:
 
 ```text
-AventaraModule: the configuration has `mcp`, and the package that serves it, @aventara/mcp, is not installed. Install it at @aventara/core's exact version (npm install --save-exact @aventara/mcp@1.0.0-rc.4), or remove `mcp` from the configuration.
+AventaraModule: the configuration has `mcp`, and the package that serves it, @aventara/mcp, is not installed. Install it at @aventara/core's exact version (npm install --save-exact @aventara/mcp@1.0.0-rc.9), or remove `mcp` from the configuration.
 ```
  As for the protocol's routes, the module only mounts: the endpoint's body is read
 raw, the request's URL comes from the platform's `protocol` and `host` (set `trust proxy` on Express or `trustProxy` on

package/dist/access-state.translator.d.ts

@@ -0,0 +1,7 @@
+import type { AvFramework } from "@aventara/core";
+import type { HostState } from "./protocol-host.factory.js";
+/**
+ * The state seed of `framework`'s access provider, over a platform request;
+ * `undefined` for a Framework built without `access`.
+ */
+export declare function accessStateSeed(framework: AvFramework): HostState | undefined;

package/dist/access-state.translator.js

@@ -0,0 +1,20 @@
+import { accessStateOf } from "@aventara/core/internal";
+function headersOf(request) {
+    const headers = new Headers();
+    const given = request?.headers;
+    for (const [name, value] of Object.entries(given ?? {})) {
+        if (value === undefined || name.startsWith(":")) {
+            continue;
+        }
+        for (const one of typeof value === "string" ? [value] : value) {
+            headers.append(name, one);
+        }
+    }
+    return headers;
+}
+export function accessStateSeed(framework) {
+    const state = accessStateOf(framework);
+    return state === undefined
+        ? undefined
+        : (request) => state({ headers: headersOf(request), request });
+}

package/dist/aventara.module.d.ts

@@ -5,7 +5,8 @@ import { type PendingProtocolHost } from "./protocol-host.factory.js";
  * How the application's Framework enters Nest: your own instance
  * (`{ framework }`, from `createFramework`) or a configuration the module
  * passes to `createFramework` itself (`{ config }`). Pass exactly one. Either
- * arm may add `state`, which seeds each protocol request's `ctx.$state`.
+ * arm may add `state`, which seeds each protocol request's `ctx.$state`,
+ * unless the Framework is built with `access`, whose `state` seeds it.
  */
 export type AventaraModuleOptions<M extends AvAdapterModel = AvAdapterModel, Cfg = AvConfigAny> = ({
     readonly framework: AvFramework;
@@ -13,17 +14,26 @@ export type AventaraModuleOptions<M extends AvAdapterModel = AvAdapterModel, Cfg
 } | {
     readonly config: Cfg & AvConfigExact<M, Cfg> & AvConfig<M, Cfg>;
     readonly framework?: never;
-}) & {
+}) & StateBesideAccess<Cfg> & {
     /**
      * Seeds a protocol request's `ctx.$state`, once per request, with the
      * platform's own request: Express's `req`, or Fastify's `request` (its Node
      * request is `request.raw`). What middleware already set there, such as
      * Passport's `req.user`, flows into every stage of the request. A throw is
      * answered like any developer failure: a thrown `AvError` as its own
-     * outcome, anything else `500 A3000`. Omitted, the state is `{}`.
+     * outcome, anything else `500 A3000`. Omitted, the state is `{}`, or what
+     * the Framework's `access` provider seeds; not together with `access`.
      */
     state?(request: unknown): AvState | Promise<AvState>;
 };
+/** `state` refused beside a configuration that states `access`, by the sentence that says why. */
+type StateBesideAccess<Cfg> = [Cfg] extends [never] ? unknown : Cfg extends {
+    readonly access: object;
+} ? {
+    readonly state?: readonly [
+        "Error: `access` seeds each request's state; remove `state`"
+    ];
+} : unknown;
 /**
  * `forRootAsync`'s options: the Nest idiom when what builds the Framework
  * (a Prisma client, a configuration service) is itself a provider. The
@@ -62,3 +72,4 @@ export declare class AventaraModule implements NestModule, OnModuleInit {
     static forRootAsync<M extends AvAdapterModel, const Cfg = AvConfigAny>(options: AventaraModuleAsyncOptions<M, Cfg>): DynamicModule;
     private static mount;
 }
+export {};

package/dist/aventara.module.js

@@ -1,6 +1,7 @@
 import { createFramework, } from "@aventara/core";
 import { Inject, Module, } from "@nestjs/common";
 import { HttpAdapterHost } from "@nestjs/core";
+import { accessStateSeed } from "./access-state.translator.js";
 import { AVENTARA_FRAMEWORK } from "./framework.token.js";
 import { checkedOptions, recordMount } from "./host-bootstrap.validator.js";
 import { withInternalFailureLog } from "./internal-failure.logger.js";
@@ -66,7 +67,7 @@ export class AventaraModule {
                 {
                     provide: PROTOCOL_HOST,
                     inject: [HttpAdapterHost, AVENTARA_FRAMEWORK, OPTIONS, MCP_BINDING],
-                    useFactory: (application, framework, options, mcp) => createPendingProtocolHost(application, framework, options.state?.bind(options), mcp ?? undefined),
+                    useFactory: (application, framework, options, mcp) => createPendingProtocolHost(application, framework, options.state?.bind(options) ?? accessStateSeed(framework), mcp ?? undefined),
                 },
             ],
             exports: [AVENTARA_FRAMEWORK],

package/dist/host-bootstrap.validator.js

@@ -1,7 +1,9 @@
+import { accessStateOf } from "@aventara/core/internal";
 const NEITHER_ARM = "AventaraModule: the options carry neither `framework` nor `config`; pass exactly one.";
 const BOTH_ARMS = "AventaraModule: the options carry both `framework` and `config`; pass exactly one.";
 const NOT_A_FRAMEWORK = "AventaraModule: `framework` is not an Aventara Framework (it has no string `api` and no `contracts.client`); pass what `createFramework` resolved to.";
 const STATE_NOT_A_FUNCTION = "AventaraModule: `state` is not a function; pass `(request) => ({ … })`, called once per protocol request.";
+const STATE_BESIDE_ACCESS = "AventaraModule: the Framework is built with `access`, whose `state` seeds each request's state; remove the module's `state` option.";
 const MOUNTED_TWICE = "AventaraModule is mounted twice in one application; import AventaraModule.forRoot or forRootAsync once.";
 export function checkedOptions(options) {
     const record = typeof options === "object" && options !== null
@@ -22,6 +24,13 @@ export function checkedOptions(options) {
     if (state !== undefined && typeof state !== "function") {
         throw new Error(STATE_NOT_A_FUNCTION);
     }
+    if (state !== undefined &&
+        (hasFramework
+            ? accessStateOf(record.framework) !== undefined
+            : record.config?.access !==
+                undefined)) {
+        throw new Error(STATE_BESIDE_ACCESS);
+    }
     return record;
 }
 function isFramework(value) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aventara/nest",
-  "version": "1.0.0-rc.4",
+  "version": "1.0.0-rc.9",
   "license": "SEE LICENSE IN LICENSE",
   "description": "NestJS host integration for Aventara.",
   "type": "module",
@@ -22,10 +22,10 @@
     "CHANGELOG.md"
   ],
   "dependencies": {
-    "@aventara/core": "1.0.0-rc.4"
+    "@aventara/core": "1.0.0-rc.9"
   },
   "peerDependencies": {
-    "@aventara/mcp": "1.0.0-rc.4",
+    "@aventara/mcp": "1.0.0-rc.9",
     "@nestjs/common": "^12.0.0",
     "@nestjs/core": "^12.0.0"
   },
@@ -34,13 +34,25 @@
       "optional": true
     }
   },
+  "aventara": {
+    "host": {
+      "alias": "nest",
+      "label": "NestJS",
+      "framework": "@nestjs/core",
+      "layout": {
+        "config": "src/aventara.config",
+        "adapter": "src/aventara.adapter",
+        "generated": "src/generated/aventara"
+      }
+    }
+  },
   "publishConfig": {
     "access": "public"
   },
   "devDependencies": {
-    "@aventara/mcp": "1.0.0-rc.4",
-    "@aventara/prisma7-adapter": "1.0.0-rc.4",
-    "@aventara/testing": "1.0.0-rc.4",
+    "@aventara/mcp": "1.0.0-rc.9",
+    "@aventara/prisma7-adapter": "1.0.0-rc.9",
+    "@aventara/testing": "1.0.0-rc.9",
     "@modelcontextprotocol/sdk": "1.30.1",
     "@nestjs/common": "^12.1.2",
     "@nestjs/core": "^12.1.2",