@bymax-one/nest-core 1.2.0 → 1.2.1

package/CHANGELOG.md

@@ -11,6 +11,22 @@ heading here.
 
 ## [Unreleased]
 
+## [1.2.1] - 2026-08-08
+
+A patch: the envelope fix below changes a response status for a class of client errors, without
+touching the module's API or any option.
+
+### Fixed
+
+- **An error carrying a 4xx status it marked exposable keeps that status, instead of collapsing to 500.** Express's body pipeline throws `http-errors` instances before any handler runs — a payload
+  past the limit is `PayloadTooLargeError` (413), malformed JSON is a `SyntaxError` (400), an
+  unsupported media type is 415. None is a Nest `HttpException`, so each reached the generic
+  500 collapse: a client that sent too large a body, or malformed JSON, was told the server failed,
+  and a monitor counted a 5xx for a request that never entered the application. The filter now reads
+  the `expose: true` flag and the numeric status these carry and honours it — restricted to the 4xx
+  range, because a self-reported 5xx is still a server failure whose account of itself must not
+  surface, so it stays a generic 500.
+
 ## [1.2.0] - 2026-08-08
 
 Both entries change what a caller receives, which is why this is a minor rather than a patch: an
@@ -301,5 +317,6 @@ have regressed from. They are kept because the reasoning is worth having.
 [1.0.1]: https://github.com/bymaxone/nest-core/compare/v1.0.0...v1.0.1
 [1.0.0]: https://github.com/bymaxone/nest-core/releases/tag/v1.0.0
 [1.1.1]: https://github.com/bymaxone/nest-core/compare/v1.1.0...v1.1.1
+[1.2.1]: https://github.com/bymaxone/nest-core/compare/v1.2.0...v1.2.1
 [1.2.0]: https://github.com/bymaxone/nest-core/compare/v1.1.1...v1.2.0
-[Unreleased]: https://github.com/bymaxone/nest-core/compare/v1.2.0...HEAD
+[Unreleased]: https://github.com/bymaxone/nest-core/compare/v1.2.1...HEAD

package/dist/index.cjs

@@ -310,6 +310,23 @@ function extractExplicitDetails(carrier) {
   const details = carrier.details;
   return typeof details === "object" && details !== null ? details : void 0;
 }
+var CLIENT_ERROR_MIN2 = 400;
+var CLIENT_ERROR_MAX2 = 500;
+function resolveExposedClientError(exception) {
+  if (typeof exception !== "object" || exception === null) {
+    return void 0;
+  }
+  const candidate = exception;
+  if (candidate.expose !== true) {
+    return void 0;
+  }
+  const status = Number.isInteger(candidate.status) ? candidate.status : candidate.statusCode;
+  if (typeof status !== "number" || !Number.isInteger(status) || status < CLIENT_ERROR_MIN2 || status >= CLIENT_ERROR_MAX2) {
+    return void 0;
+  }
+  const message = exception instanceof Error ? exception.message : "";
+  return { status, message: message === "" ? INTERNAL_ERROR_MESSAGE : message };
+}
 function isValidationResponse(response) {
   return typeof response === "object" && response !== null && "message" in response && Array.isArray(response.message);
 }
@@ -424,6 +441,15 @@ exports.BymaxExceptionFilter = class BymaxExceptionFilter {
     if (exception instanceof common.HttpException) {
       return this.mapHttpException(exception, context);
     }
+    const exposed = resolveExposedClientError(exception);
+    if (exposed !== void 0) {
+      return this.toEnvelope(
+        exposed.status,
+        codeForStatus(exposed.status),
+        exposed.message,
+        context
+      );
+    }
     try {
       this.onUnexpectedError(exception, context);
     } catch {

package/dist/index.mjs

@@ -308,6 +308,23 @@ function extractExplicitDetails(carrier) {
   const details = carrier.details;
   return typeof details === "object" && details !== null ? details : void 0;
 }
+var CLIENT_ERROR_MIN2 = 400;
+var CLIENT_ERROR_MAX2 = 500;
+function resolveExposedClientError(exception) {
+  if (typeof exception !== "object" || exception === null) {
+    return void 0;
+  }
+  const candidate = exception;
+  if (candidate.expose !== true) {
+    return void 0;
+  }
+  const status = Number.isInteger(candidate.status) ? candidate.status : candidate.statusCode;
+  if (typeof status !== "number" || !Number.isInteger(status) || status < CLIENT_ERROR_MIN2 || status >= CLIENT_ERROR_MAX2) {
+    return void 0;
+  }
+  const message = exception instanceof Error ? exception.message : "";
+  return { status, message: message === "" ? INTERNAL_ERROR_MESSAGE : message };
+}
 function isValidationResponse(response) {
   return typeof response === "object" && response !== null && "message" in response && Array.isArray(response.message);
 }
@@ -422,6 +439,15 @@ var BymaxExceptionFilter = class {
     if (exception instanceof HttpException) {
       return this.mapHttpException(exception, context);
     }
+    const exposed = resolveExposedClientError(exception);
+    if (exposed !== void 0) {
+      return this.toEnvelope(
+        exposed.status,
+        codeForStatus(exposed.status),
+        exposed.message,
+        context
+      );
+    }
     try {
       this.onUnexpectedError(exception, context);
     } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bymax-one/nest-core",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "description": "Zero-dependency NestJS 11 application foundation kit: error-envelope exception filter, request-timing interceptor, pagination helpers, health endpoints with indicator discovery, an optional Prometheus metrics endpoint with a contribution contract, OpenAPI documents in development, and OpenTelemetry trace correlation.",
   "author": "Bymax One <support@bymax.one>",
   "license": "MIT",