@camcima/nestjs-rfc9457 0.0.2 → 0.2.0

package/README.md

@@ -7,17 +7,36 @@
 <br>
 
 [![CI](https://github.com/camcima/nestjs-rfc9457/actions/workflows/ci.yml/badge.svg)](https://github.com/camcima/nestjs-rfc9457/actions/workflows/ci.yml)
+[![CodeQL](https://github.com/camcima/nestjs-rfc9457/actions/workflows/codeql.yml/badge.svg)](https://github.com/camcima/nestjs-rfc9457/actions/workflows/codeql.yml)
 [![codecov](https://codecov.io/gh/camcima/nestjs-rfc9457/graph/badge.svg)](https://codecov.io/gh/camcima/nestjs-rfc9457)
 [![npm version](https://img.shields.io/npm/v/@camcima/nestjs-rfc9457)](https://www.npmjs.com/package/@camcima/nestjs-rfc9457)
-[![npm downloads](https://img.shields.io/npm/dm/@camcima/nestjs-rfc9457.svg)](https://www.npmjs.com/package/@camcima/nestjs-rfc9457)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![TypeScript](https://img.shields.io/badge/TypeScript-5-blue.svg)](https://www.typescriptlang.org/)
+[![TypeScript](https://img.shields.io/badge/TypeScript-6-blue.svg)](https://www.typescriptlang.org/)
 [![Node.js](https://img.shields.io/badge/Node.js-18%20%7C%2020%20%7C%2022-green.svg)](https://nodejs.org/)
 
 </div>
 
 NestJS library for [RFC 9457](https://www.rfc-editor.org/rfc/rfc9457) Problem Details HTTP error responses.
 
+## Table of Contents
+
+- [What is RFC 9457?](#what-is-rfc-9457)
+- [Features](#features)
+- [Installation](#installation)
+- [Quick Start](#quick-start)
+- [Configuration](#configuration)
+- [Async Configuration](#async-configuration)
+- [Custom Exception Types](#custom-exception-types)
+- [Validation Integration](#validation-integration)
+- [Swagger / OpenAPI Integration](#swagger--openapi-integration)
+- [Advanced Usage](#advanced-usage)
+- [API Reference](#api-reference)
+- [Example Responses](#example-responses)
+- [Examples](#examples)
+- [Security](#security)
+- [Contributing](#contributing)
+- [License](#license)
+
 ## What is RFC 9457?
 
 [RFC 9457](https://www.rfc-editor.org/rfc/rfc9457) (July 2023) defines a standard JSON format for HTTP API error responses, using the `application/problem+json` media type. It supersedes RFC 7807 and gives APIs a consistent, machine-readable way to communicate errors.
@@ -59,8 +78,9 @@ Extension members (arbitrary key-value pairs) are allowed for problem-type-speci
 - Optional catch-all mode for non-`HttpException` throwables (produces 500 Problem Details)
 - Custom `exceptionMapper` callback for full control over any exception
 - `ProblemDetailsFactory` is injectable — use it directly in GraphQL, microservices, or custom filters
+- Optional `@nestjs/swagger` integration: `ProblemDetailDto` and `ValidationProblemDetailDto` for OpenAPI documentation, plus a `applyProblemDetailResponses()` helper that auto-applies `@ApiResponse` decorators to all controllers under `application/problem+json`
 - Works with both Express and Fastify adapters
-- Zero runtime dependencies; `class-validator` is an optional peer dependency
+- Zero runtime dependencies; `class-validator` and `@nestjs/swagger` are optional peer dependencies
 
 ---
 
@@ -80,12 +100,13 @@ pnpm add @camcima/nestjs-rfc9457
 
 ### Peer dependencies
 
-| Package            | Version                | Required                             |
-| ------------------ | ---------------------- | ------------------------------------ |
-| `@nestjs/common`   | `^10.0.0 \|\| ^11.0.0` | Yes                                  |
-| `@nestjs/core`     | `^10.0.0 \|\| ^11.0.0` | Yes                                  |
-| `reflect-metadata` | `^0.1.13 \|\| ^0.2.0`  | Yes                                  |
-| `class-validator`  | `^0.14.0`              | No (optional, for Tier 2 validation) |
+| Package            | Version                           | Required                               |
+| ------------------ | --------------------------------- | -------------------------------------- |
+| `@nestjs/common`   | `^10.0.0 \|\| ^11.0.0`            | Yes                                    |
+| `@nestjs/core`     | `^10.0.0 \|\| ^11.0.0`            | Yes                                    |
+| `reflect-metadata` | `^0.1.13 \|\| ^0.2.0`             | Yes                                    |
+| `class-validator`  | `^0.14.0`                         | No (optional, for Tier 2 validation)   |
+| `@nestjs/swagger`  | `^7.0.0 \|\| ^8.0.0 \|\| ^11.0.0` | No (optional, for OpenAPI integration) |
 
 ---
 
@@ -522,6 +543,156 @@ Nested validation errors are preserved as `children` arrays matching the `class-
 
 ---
 
+## Swagger / OpenAPI Integration
+
+The library ships optional Swagger support under a separate import path so it does not require `@nestjs/swagger` as a mandatory dependency. Install `@nestjs/swagger` as usual if you have not already:
+
+```bash
+npm install @nestjs/swagger
+```
+
+All Swagger-related exports are imported from the `/swagger` subpath:
+
+```typescript
+import {
+  ProblemDetailDto,
+  ValidationProblemDetailDto,
+  ValidationErrorDto,
+  applyProblemDetailResponses,
+} from '@camcima/nestjs-rfc9457/swagger';
+```
+
+### Auto-applying error schemas to all controllers
+
+The `applyProblemDetailResponses()` helper uses NestJS's `DiscoveryService` to programmatically attach `@ApiResponse` decorators to every controller in your application. Responses are documented under `application/problem+json` as required by RFC 9457.
+
+**Step 1** — Import `DiscoveryModule` in your app module:
+
+```typescript
+import { Module } from '@nestjs/common';
+import { DiscoveryModule } from '@nestjs/core';
+import { Rfc9457Module } from '@camcima/nestjs-rfc9457';
+
+@Module({
+  imports: [DiscoveryModule, Rfc9457Module.forRoot()],
+})
+export class AppModule {}
+```
+
+**Step 2** — Call the helper inside the lazy document factory passed to `SwaggerModule.setup()`:
+
+```typescript
+import { DocumentBuilder, SwaggerModule } from '@nestjs/swagger';
+import { applyProblemDetailResponses } from '@camcima/nestjs-rfc9457/swagger';
+
+const config = new DocumentBuilder().setTitle('My API').build();
+
+SwaggerModule.setup('/api', app, () => {
+  applyProblemDetailResponses(app);
+  return SwaggerModule.createDocument(app, config);
+});
+```
+
+By default, this documents `400` and `500` responses on every route using `ProblemDetailDto`. The generated OpenAPI spec will show `application/problem+json` as the response media type with the correct schema.
+
+### Options
+
+`applyProblemDetailResponses` accepts an optional second argument:
+
+```typescript
+interface ApplyProblemDetailResponsesOptions {
+  /** HTTP status codes to document. Default: [400, 500]. */
+  statuses?: number[];
+
+  /**
+   * Statuses that use ValidationProblemDetailDto (with the errors array)
+   * instead of the base ProblemDetailDto. Default: [].
+   */
+  validationStatuses?: number[];
+}
+```
+
+#### Documenting additional statuses
+
+```typescript
+applyProblemDetailResponses(app, {
+  statuses: [400, 401, 403, 404, 500],
+});
+```
+
+#### Documenting Tier 2 structured validation errors
+
+If you use `Rfc9457ValidationException` (Tier 2) for validation, you can tell the helper to use `ValidationProblemDetailDto` for specific statuses. This DTO includes the `errors` array of structured `ValidationErrorDto` objects:
+
+```typescript
+applyProblemDetailResponses(app, {
+  statuses: [400, 500],
+  validationStatuses: [400],
+});
+```
+
+This documents 400 responses with the `ValidationProblemDetailDto` schema (which includes `errors: ValidationErrorDto[]`) and 500 responses with the base `ProblemDetailDto`.
+
+### Using DTOs manually for per-route documentation
+
+For finer control, use the DTO classes directly with `@ApiResponse()` on individual routes:
+
+```typescript
+import { ApiResponse } from '@nestjs/swagger';
+import { ProblemDetailDto, ValidationProblemDetailDto } from '@camcima/nestjs-rfc9457/swagger';
+
+@Get(':id')
+@ApiResponse({
+  status: 404,
+  description: 'Not Found',
+  content: {
+    'application/problem+json': {
+      schema: { $ref: '#/components/schemas/ProblemDetailDto' },
+    },
+  },
+})
+findOne(@Param('id') id: string) {
+  // ...
+}
+```
+
+Or more concisely using the `type` shorthand (documents as `application/json` instead of `application/problem+json`):
+
+```typescript
+@ApiResponse({ status: 404, type: ProblemDetailDto })
+```
+
+### Extending DTOs for custom extension members
+
+If your API returns extension members (additional fields beyond the five standard RFC 9457 members), extend `ProblemDetailDto` to document them:
+
+```typescript
+import { ApiProperty } from '@nestjs/swagger';
+import { ProblemDetailDto } from '@camcima/nestjs-rfc9457/swagger';
+
+export class InsufficientFundsProblemDto extends ProblemDetailDto {
+  @ApiProperty({ example: 50 })
+  balance!: number;
+
+  @ApiProperty({ example: 100 })
+  required!: number;
+}
+```
+
+### Available DTOs
+
+| DTO                          | Description                                                                          |
+| ---------------------------- | ------------------------------------------------------------------------------------ |
+| `ProblemDetailDto`           | The five standard RFC 9457 fields (`type`, `title`, `status`, `detail`, `instance`)  |
+| `ValidationProblemDetailDto` | Extends `ProblemDetailDto` with `errors: ValidationErrorDto[]` for Tier 2 validation |
+| `ValidationErrorDto`         | Structured validation error (`property`, `constraints?`, `children?`)                |
+
+### Design note
+
+The auto-apply helper uses `ProblemDetailDto` for all statuses by default. This is intentional: a single HTTP status (e.g. 400) can produce different response shapes at runtime — a plain problem detail for non-validation errors, `errors: string[]` for Tier 1 validation, or `errors: ValidationErrorDto[]` for Tier 2 validation. The base DTO is the common denominator that is always correct. Use `validationStatuses` to opt in to the more specific schema when your application uses Tier 2 validation exclusively.
+
+---
+
 ## Advanced Usage
 
 ### Using `ProblemDetailsFactory` directly
@@ -606,6 +777,16 @@ export class MySpecialExceptionFilter extends BaseExceptionFilter {
 | `RFC9457_MODULE_OPTIONS`                      | Symbol           | DI token for the module options                                             |
 | `PROBLEM_CONTENT_TYPE`                        | Constant         | `'application/problem+json'`                                                |
 
+**Swagger subpath** (`@camcima/nestjs-rfc9457/swagger`):
+
+| Export                               | Kind      | Description                                                                           |
+| ------------------------------------ | --------- | ------------------------------------------------------------------------------------- |
+| `ProblemDetailDto`                   | Class     | Swagger DTO for the five standard RFC 9457 fields                                     |
+| `ValidationProblemDetailDto`         | Class     | Extends `ProblemDetailDto` with `errors: ValidationErrorDto[]`                        |
+| `ValidationErrorDto`                 | Class     | Swagger DTO for a structured validation error (`property`, `constraints`, `children`) |
+| `applyProblemDetailResponses`        | Function  | Auto-applies `@ApiResponse` decorators to all controllers via `DiscoveryService`      |
+| `ApplyProblemDetailResponsesOptions` | Interface | Options for `applyProblemDetailResponses`                                             |
+
 ---
 
 ## Example Responses
@@ -719,6 +900,47 @@ Internal error messages are never included in the response to avoid leaking sens
 
 ---
 
+## Examples
+
+See the [nestjs-rfc9457-examples](https://github.com/camcima/nestjs-rfc9457-examples) repository for complete working NestJS applications demonstrating all features, including runnable demo scripts.
+
+---
+
+## Security
+
+### CI
+
+| Tool            | Purpose                                                  | Trigger                   |
+| --------------- | -------------------------------------------------------- | ------------------------- |
+| **CodeQL**      | Static analysis for security vulnerabilities             | Push, PR, weekly schedule |
+| **OSV-Scanner** | Dependency vulnerability scanning (production deps only) | Push, PR                  |
+| **Dependabot**  | Automated dependency and GitHub Actions updates          | Weekly PRs                |
+| **Codecov**     | Test coverage tracking                                   | Push, PR                  |
+
+### Local (via Lefthook)
+
+| Hook         | Tool                                             | Purpose                      |
+| ------------ | ------------------------------------------------ | ---------------------------- |
+| `pre-commit` | ESLint + Prettier                                | Code quality on staged files |
+| `pre-push`   | [Gitleaks](https://github.com/gitleaks/gitleaks) | Secret scanning before push  |
+
+Gitleaks must be [installed locally](https://github.com/gitleaks/gitleaks#installing). The pre-push hook will skip if Gitleaks is not available.
+
+### Manual local checks
+
+```bash
+# Dependency audit (production only)
+npm run audit:deps
+
+# Secret scanning
+npm run audit:secrets
+
+# Full npm audit (all dependencies)
+npm audit
+```
+
+---
+
 ## Contributing
 
 Contributions are welcome. Please open an issue before submitting a pull request for significant changes.

package/dist/swagger/apply-problem-detail-responses.d.ts

@@ -0,0 +1,6 @@
+import { INestApplication } from '@nestjs/common';
+export interface ApplyProblemDetailResponsesOptions {
+    statuses?: number[];
+    validationStatuses?: number[];
+}
+export declare function applyProblemDetailResponses(app: INestApplication, options?: ApplyProblemDetailResponsesOptions): void;

package/dist/swagger/apply-problem-detail-responses.js

@@ -0,0 +1,66 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyProblemDetailResponses = applyProblemDetailResponses;
+const core_1 = require("@nestjs/core");
+const swagger_1 = require("@nestjs/swagger");
+const http = __importStar(require("http"));
+const problem_detail_dto_1 = require("./problem-detail.dto");
+function applyProblemDetailResponses(app, options) {
+    const discoveryService = app.get(core_1.DiscoveryService);
+    const controllers = discoveryService.getControllers();
+    const statuses = options?.statuses ?? [400, 500];
+    const validationStatuses = new Set(options?.validationStatuses ?? []);
+    for (const controller of controllers) {
+        if (!controller.metatype)
+            continue;
+        (0, swagger_1.ApiExtraModels)(problem_detail_dto_1.ProblemDetailDto, problem_detail_dto_1.ValidationProblemDetailDto)(controller.metatype);
+        for (const status of statuses) {
+            const dtoClass = validationStatuses.has(status)
+                ? problem_detail_dto_1.ValidationProblemDetailDto
+                : problem_detail_dto_1.ProblemDetailDto;
+            (0, swagger_1.ApiResponse)({
+                status,
+                description: http.STATUS_CODES[status],
+                content: {
+                    'application/problem+json': {
+                        schema: { $ref: (0, swagger_1.getSchemaPath)(dtoClass) },
+                    },
+                },
+            })(controller.metatype);
+        }
+    }
+}
+//# sourceMappingURL=apply-problem-detail-responses.js.map

package/dist/swagger/apply-problem-detail-responses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-problem-detail-responses.js","sourceRoot":"","sources":["../../src/swagger/apply-problem-detail-responses.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2CA,kEA8BC;AAxED,uCAAgD;AAChD,6CAA6E;AAC7E,2CAA6B;AAC7B,6DAAoF;AAuCpF,SAAgB,2BAA2B,CACzC,GAAqB,EACrB,OAA4C;IAE5C,MAAM,gBAAgB,GAAG,GAAG,CAAC,GAAG,CAAC,uBAAgB,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,gBAAgB,CAAC,cAAc,EAAE,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,kBAAkB,IAAI,EAAE,CAAC,CAAC;IAEtE,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,QAAQ;YAAE,SAAS;QAEnC,IAAA,wBAAc,EAAC,qCAAgB,EAAE,+CAA0B,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAElF,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC7C,CAAC,CAAC,+CAA0B;gBAC5B,CAAC,CAAC,qCAAgB,CAAC;YAErB,IAAA,qBAAW,EAAC;gBACV,MAAM;gBACN,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;gBACtC,OAAO,EAAE;oBACP,0BAA0B,EAAE;wBAC1B,MAAM,EAAE,EAAE,IAAI,EAAE,IAAA,uBAAa,EAAC,QAAQ,CAAC,EAAE;qBAC1C;iBACF;aACF,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/swagger/index.d.ts

@@ -0,0 +1,2 @@
+export { ProblemDetailDto, ValidationErrorDto, ValidationProblemDetailDto, } from './problem-detail.dto';
+export { applyProblemDetailResponses, ApplyProblemDetailResponsesOptions, } from './apply-problem-detail-responses';

package/dist/swagger/index.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyProblemDetailResponses = exports.ValidationProblemDetailDto = exports.ValidationErrorDto = exports.ProblemDetailDto = void 0;
+var problem_detail_dto_1 = require("./problem-detail.dto");
+Object.defineProperty(exports, "ProblemDetailDto", { enumerable: true, get: function () { return problem_detail_dto_1.ProblemDetailDto; } });
+Object.defineProperty(exports, "ValidationErrorDto", { enumerable: true, get: function () { return problem_detail_dto_1.ValidationErrorDto; } });
+Object.defineProperty(exports, "ValidationProblemDetailDto", { enumerable: true, get: function () { return problem_detail_dto_1.ValidationProblemDetailDto; } });
+var apply_problem_detail_responses_1 = require("./apply-problem-detail-responses");
+Object.defineProperty(exports, "applyProblemDetailResponses", { enumerable: true, get: function () { return apply_problem_detail_responses_1.applyProblemDetailResponses; } });
+//# sourceMappingURL=index.js.map

package/dist/swagger/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/swagger/index.ts"],"names":[],"mappings":";;;AAAA,2DAI8B;AAH5B,sHAAA,gBAAgB,OAAA;AAChB,wHAAA,kBAAkB,OAAA;AAClB,gIAAA,0BAA0B,OAAA;AAE5B,mFAG0C;AAFxC,6IAAA,2BAA2B,OAAA"}

package/dist/swagger/problem-detail.dto.d.ts

@@ -0,0 +1,15 @@
+export declare class ProblemDetailDto {
+    type?: string;
+    title?: string;
+    status: number;
+    detail?: string;
+    instance?: string;
+}
+export declare class ValidationErrorDto {
+    property: string;
+    constraints?: Record<string, string>;
+    children?: ValidationErrorDto[];
+}
+export declare class ValidationProblemDetailDto extends ProblemDetailDto {
+    errors: ValidationErrorDto[];
+}

package/dist/swagger/problem-detail.dto.js

@@ -0,0 +1,87 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ValidationProblemDetailDto = exports.ValidationErrorDto = exports.ProblemDetailDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+class ProblemDetailDto {
+}
+exports.ProblemDetailDto = ProblemDetailDto;
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'A URI reference that identifies the problem type.',
+        example: 'about:blank',
+    }),
+    __metadata("design:type", String)
+], ProblemDetailDto.prototype, "type", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'A short, human-readable summary of the problem type.',
+        example: 'Not Found',
+    }),
+    __metadata("design:type", String)
+], ProblemDetailDto.prototype, "title", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'The HTTP status code generated by the origin server.',
+        example: 404,
+    }),
+    __metadata("design:type", Number)
+], ProblemDetailDto.prototype, "status", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'A human-readable explanation specific to this occurrence.',
+        example: 'The requested resource was not found.',
+    }),
+    __metadata("design:type", String)
+], ProblemDetailDto.prototype, "detail", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'A URI reference that identifies the specific occurrence.',
+    }),
+    __metadata("design:type", String)
+], ProblemDetailDto.prototype, "instance", void 0);
+class ValidationErrorDto {
+}
+exports.ValidationErrorDto = ValidationErrorDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'The property that failed validation.',
+        example: 'email',
+    }),
+    __metadata("design:type", String)
+], ValidationErrorDto.prototype, "property", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Constraint name → error message map.',
+        example: { isEmail: 'email must be an email' },
+        type: 'object',
+        additionalProperties: { type: 'string' },
+    }),
+    __metadata("design:type", Object)
+], ValidationErrorDto.prototype, "constraints", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Nested validation errors for child properties.',
+        type: () => [ValidationErrorDto],
+    }),
+    __metadata("design:type", Array)
+], ValidationErrorDto.prototype, "children", void 0);
+class ValidationProblemDetailDto extends ProblemDetailDto {
+}
+exports.ValidationProblemDetailDto = ValidationProblemDetailDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Structured validation errors.',
+        type: [ValidationErrorDto],
+    }),
+    __metadata("design:type", Array)
+], ValidationProblemDetailDto.prototype, "errors", void 0);
+//# sourceMappingURL=problem-detail.dto.js.map

package/dist/swagger/problem-detail.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"problem-detail.dto.js","sourceRoot":"","sources":["../../src/swagger/problem-detail.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AASnE,MAAa,gBAAgB;CA6B5B;AA7BD,4CA6BC;AAxBC;IAJC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,mDAAmD;QAChE,OAAO,EAAE,aAAa;KACvB,CAAC;;8CACY;AAMd;IAJC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,sDAAsD;QACnE,OAAO,EAAE,WAAW;KACrB,CAAC;;+CACa;AAMf;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,sDAAsD;QACnE,OAAO,EAAE,GAAG;KACb,CAAC;;gDACc;AAMhB;IAJC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,2DAA2D;QACxE,OAAO,EAAE,uCAAuC;KACjD,CAAC;;gDACc;AAKhB;IAHC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,0DAA0D;KACxE,CAAC;;kDACgB;AAOpB,MAAa,kBAAkB;CAoB9B;AApBD,gDAoBC;AAfC;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE,OAAO;KACjB,CAAC;;oDACgB;AAQlB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE;QAC9C,IAAI,EAAE,QAAQ;QACd,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KACzC,CAAC;;uDACmC;AAMrC;IAJC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,gDAAgD;QAC7D,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,kBAAkB,CAAC;KACjC,CAAC;;oDAC8B;AAclC,MAAa,0BAA2B,SAAQ,gBAAgB;CAM/D;AAND,gEAMC;AADC;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,+BAA+B;QAC5C,IAAI,EAAE,CAAC,kBAAkB,CAAC;KAC3B,CAAC;;0DAC4B"}

package/package.json

@@ -1,11 +1,21 @@
 {
   "name": "@camcima/nestjs-rfc9457",
-  "version": "0.0.2",
+  "version": "0.2.0",
   "description": "NestJS library for RFC 9457 Problem Details responses",
   "author": "Carlos Cima",
   "license": "MIT",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./swagger": {
+      "types": "./dist/swagger/index.d.ts",
+      "default": "./dist/swagger/index.js"
+    }
+  },
   "files": [
     "dist"
   ],
@@ -22,29 +32,37 @@
     "test:e2e": "jest --testPathPattern=test/e2e",
     "test:cov": "jest --coverage",
     "prepublishOnly": "npm run build",
-    "release": "release-it"
+    "release": "release-it",
+    "audit:deps": "npm audit --omit=dev",
+    "audit:secrets": "gitleaks git --no-banner --redact -v"
   },
   "peerDependencies": {
     "@nestjs/common": "^10.0.0 || ^11.0.0",
     "@nestjs/core": "^10.0.0 || ^11.0.0",
     "class-validator": "^0.14.0",
-    "reflect-metadata": "^0.1.13 || ^0.2.0"
+    "reflect-metadata": "^0.1.13 || ^0.2.0",
+    "@nestjs/swagger": "^7.0.0 || ^8.0.0 || ^11.0.0"
   },
   "peerDependenciesMeta": {
     "class-validator": {
       "optional": true
+    },
+    "@nestjs/swagger": {
+      "optional": true
     }
   },
   "devDependencies": {
-    "@commitlint/cli": "^19.0.0",
-    "@commitlint/config-conventional": "^19.0.0",
-    "@nestjs/common": "^10.0.0",
-    "@nestjs/core": "^10.0.0",
-    "@nestjs/platform-express": "^10.0.0",
-    "@nestjs/platform-fastify": "^10.0.0",
-    "@nestjs/testing": "^10.0.0",
-    "@types/jest": "^29.0.0",
-    "@types/supertest": "^6.0.0",
+    "@commitlint/cli": "^20.5.0",
+    "@commitlint/config-conventional": "^20.5.0",
+    "@nestjs/common": "^11.1.18",
+    "@nestjs/core": "^11.1.18",
+    "@nestjs/swagger": "^11.1.18",
+    "@nestjs/platform-express": "^11.1.18",
+    "@nestjs/platform-fastify": "^11.1.18",
+    "@nestjs/testing": "^11.1.18",
+    "@types/jest": "^30.0.0",
+    "@types/node": "^22.19.17",
+    "@types/supertest": "^7.2.0",
     "@typescript-eslint/eslint-plugin": "^7.0.0",
     "@typescript-eslint/parser": "^7.0.0",
     "class-transformer": "^0.5.0",
@@ -53,7 +71,7 @@
     "eslint-config-prettier": "^9.0.0",
     "eslint-plugin-prettier": "^5.0.0",
     "fastify": "^4.0.0",
-    "jest": "^29.0.0",
+    "jest": "^30.3.0",
     "lefthook": "^1.0.0",
     "prettier": "^3.0.0",
     "reflect-metadata": "^0.2.0",
@@ -62,7 +80,7 @@
     "supertest": "^7.0.0",
     "ts-jest": "^29.0.0",
     "ts-node": "^10.9.2",
-    "typescript": "^5.0.0"
+    "typescript": "^6.0.2"
   },
   "repository": {
     "type": "git",