@cravery/core 0.0.5 → 0.0.6

package/dist/lib/ai/cost.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cost.d.ts","sourceRoot":"","sources":["../../../src/lib/ai/cost.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,UAAU,SAAS;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,aAAa,CAAC;CACtB;AAED,UAAU,eAAgB,SAAQ,SAAS;IACzC,IAAI,EAAE,YAAY,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,UAAW,SAAQ,SAAS;IACpC,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,cAAe,SAAQ,SAAS;IACxC,IAAI,EAAE,WAAW,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,OAAO,GAAG,eAAe,GAAG,UAAU,GAAG,cAAc,CAAC;AAEpE,eAAO,MAAM,UAAU,GAAI,OAAO,OAAO,KAAG,MA6C3C,CAAC"}
+{"version":3,"file":"cost.d.ts","sourceRoot":"","sources":["../../../src/lib/ai/cost.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,UAAU,SAAS;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,aAAa,CAAC;CACtB;AAED,UAAU,eAAgB,SAAQ,SAAS;IACzC,IAAI,EAAE,YAAY,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,UAAW,SAAQ,SAAS;IACpC,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,cAAe,SAAQ,SAAS;IACxC,IAAI,EAAE,WAAW,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,OAAO,GAAG,eAAe,GAAG,UAAU,GAAG,cAAc,CAAC;AAEpE,eAAO,MAAM,UAAU,GAAI,OAAO,OAAO,KAAG,MAsD3C,CAAC"}

package/dist/lib/ai/cost.js

@@ -38,7 +38,16 @@ const logAIUsage = (usage) => {
     for (const [key, value] of Object.entries(metrics)) {
         updates[`${base}/models/${model.id}/${key}`] = database_1.ServerValue.increment(value);
     }
-    db.ref().update(updates).catch(console.error);
+    db.ref()
+        .update(updates)
+        .catch((error) => {
+        console.error("[AI Usage] Failed to log usage:", {
+            flowName,
+            model: model.id,
+            cost,
+            error: error instanceof Error ? error.message : String(error),
+        });
+    });
     return cost;
 };
 exports.logAIUsage = logAIUsage;

package/dist/lib/ai/cost.js.map

@@ -1 +1 @@
-{"version":3,"file":"cost.js","sourceRoot":"","sources":["../../../src/lib/ai/cost.ts"],"names":[],"mappings":";;;AAAA,sDAAmE;AA0B5D,MAAM,UAAU,GAAG,CAAC,KAAc,EAAU,EAAE;IACnD,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAElC,IAAI,IAAY,CAAC;IACjB,IAAI,OAA+B,CAAC;IAEpC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,YAAY;YACf,IAAI;gBACF,CAAC,KAAK,CAAC,WAAW,GAAG,OAAS,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK;oBAClD,CAAC,KAAK,CAAC,YAAY,GAAG,OAAS,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;YACvD,OAAO,GAAG;gBACR,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;aACjC,CAAC;YACF,MAAM;QACR,KAAK,OAAO;YACV,IAAI,GAAG,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;YAC5C,OAAO,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;YACvC,MAAM;QACR,KAAK,WAAW;YACd,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,IAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YACrD,OAAO,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;YACvC,MAAM;IACV,CAAC;IAED,MAAM,EAAE,GAAG,IAAA,sBAAW,GAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,iBAAiB,IAAI,EAAE,CAAC;IAErC,MAAM,OAAO,GAA4B;QACvC,CAAC,GAAG,IAAI,QAAQ,CAAC,EAAE,sBAAW,CAAC,SAAS,CAAC,IAAI,CAAC;QAC9C,CAAC,GAAG,IAAI,QAAQ,CAAC,EAAE,sBAAW,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3C,CAAC,GAAG,IAAI,UAAU,QAAQ,OAAO,CAAC,EAAE,sBAAW,CAAC,SAAS,CAAC,IAAI,CAAC;QAC/D,CAAC,GAAG,IAAI,UAAU,QAAQ,QAAQ,CAAC,EAAE,sBAAW,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7D,CAAC,GAAG,IAAI,WAAW,KAAK,CAAC,EAAE,OAAO,CAAC,EAAE,sBAAW,CAAC,SAAS,CAAC,IAAI,CAAC;KACjE,CAAC;IAEF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,IAAI,WAAW,KAAK,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,GAAG,sBAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC;IAED,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE9C,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AA7CW,QAAA,UAAU,cA6CrB"}
+{"version":3,"file":"cost.js","sourceRoot":"","sources":["../../../src/lib/ai/cost.ts"],"names":[],"mappings":";;;AAAA,sDAAmE;AA0B5D,MAAM,UAAU,GAAG,CAAC,KAAc,EAAU,EAAE;IACnD,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAElC,IAAI,IAAY,CAAC;IACjB,IAAI,OAA+B,CAAC;IAEpC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,YAAY;YACf,IAAI;gBACF,CAAC,KAAK,CAAC,WAAW,GAAG,OAAS,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK;oBAClD,CAAC,KAAK,CAAC,YAAY,GAAG,OAAS,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;YACvD,OAAO,GAAG;gBACR,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;aACjC,CAAC;YACF,MAAM;QACR,KAAK,OAAO;YACV,IAAI,GAAG,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;YAC5C,OAAO,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;YACvC,MAAM;QACR,KAAK,WAAW;YACd,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,IAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YACrD,OAAO,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;YACvC,MAAM;IACV,CAAC;IAED,MAAM,EAAE,GAAG,IAAA,sBAAW,GAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,iBAAiB,IAAI,EAAE,CAAC;IAErC,MAAM,OAAO,GAA4B;QACvC,CAAC,GAAG,IAAI,QAAQ,CAAC,EAAE,sBAAW,CAAC,SAAS,CAAC,IAAI,CAAC;QAC9C,CAAC,GAAG,IAAI,QAAQ,CAAC,EAAE,sBAAW,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3C,CAAC,GAAG,IAAI,UAAU,QAAQ,OAAO,CAAC,EAAE,sBAAW,CAAC,SAAS,CAAC,IAAI,CAAC;QAC/D,CAAC,GAAG,IAAI,UAAU,QAAQ,QAAQ,CAAC,EAAE,sBAAW,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7D,CAAC,GAAG,IAAI,WAAW,KAAK,CAAC,EAAE,OAAO,CAAC,EAAE,sBAAW,CAAC,SAAS,CAAC,IAAI,CAAC;KACjE,CAAC;IAEF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,IAAI,WAAW,KAAK,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,GAAG,sBAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC;IAED,EAAE,CAAC,GAAG,EAAE;SACL,MAAM,CAAC,OAAO,CAAC;SACf,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE;YAC/C,QAAQ;YACR,KAAK,EAAE,KAAK,CAAC,EAAE;YACf,IAAI;YACJ,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAtDW,QAAA,UAAU,cAsDrB"}

package/dist/lib/ai/embedding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"embedding.d.ts","sourceRoot":"","sources":["../../../src/lib/ai/embedding.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,iBAAiB,GAAU,MAAM,MAAM,EAAE,UAAU,MAAM,sBAerE,CAAC;AAEF,eAAO,MAAM,cAAc,GACzB,YAAY,MAAM,EAClB,OAAO,MAAM,EACb,MAAM,MAAM,EACZ,WAAW,MAAM,EACjB,cAAa,MAAoB,kBAYlC,CAAC;AAEF,eAAO,MAAM,gBAAgB,kCAS3B,CAAC"}
+{"version":3,"file":"embedding.d.ts","sourceRoot":"","sources":["../../../src/lib/ai/embedding.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,iBAAiB,GAAU,MAAM,MAAM,EAAE,UAAU,MAAM,sBAmBrE,CAAC;AAEF,eAAO,MAAM,cAAc,GACzB,YAAY,MAAM,EAClB,OAAO,MAAM,EACb,MAAM,MAAM,EACZ,WAAW,MAAM,EACjB,cAAa,MAAoB,kBAYlC,CAAC;AAEF,eAAO,MAAM,gBAAgB,kCAS3B,CAAC"}

package/dist/lib/ai/embedding.js

@@ -7,10 +7,15 @@ const firebase_2 = require("../firebase");
 const genkit_1 = require("./genkit");
 const cost_1 = require("./cost");
 const ai_1 = require("../../config/ai");
+const errors_1 = require("../errors");
 const generateEmbedding = async (text, flowName) => {
     var _a;
     if (text.length < 1 || text.length > 7500) {
-        throw new Error("Validation error: Text out of range");
+        throw new errors_1.ValidationError("Text must be between 1 and 7500 characters", {
+            length: text.length,
+            minLength: 1,
+            maxLength: 7500,
+        });
     }
     const response = await genkit_1.ai.embed({
         embedder: genkit_1.geminiEmbedding001,

package/dist/lib/ai/embedding.js.map

@@ -1 +1 @@
-{"version":3,"file":"embedding.js","sourceRoot":"","sources":["../../../src/lib/ai/embedding.ts"],"names":[],"mappings":";;;AAAA,wDAAsD;AACtD,kDAA+D;AAC/D,0CAAwC;AACxC,qCAAkD;AAClD,iCAAoC;AACpC,wCAA4C;AAErC,MAAM,iBAAiB,GAAG,KAAK,EAAE,IAAY,EAAE,QAAgB,EAAE,EAAE;;IACxE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,WAAE,CAAC,KAAK,CAAC;QAC9B,QAAQ,EAAE,2BAAkB;QAC5B,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IACH,IAAA,iBAAU,EAAC;QACT,IAAI,EAAE,WAAW;QACjB,QAAQ;QACR,KAAK,EAAE,cAAS,CAAC,kBAAkB;QACnC,UAAU,EAAE,IAAI,CAAC,MAAM;KACxB,CAAC,CAAC;IACH,OAAO,MAAA,QAAQ,CAAC,CAAC,CAAC,0CAAE,SAAS,CAAC;AAChC,CAAC,CAAC;AAfW,QAAA,iBAAiB,qBAe5B;AAEK,MAAM,cAAc,GAAG,KAAK,EACjC,UAAkB,EAClB,KAAa,EACb,IAAY,EACZ,QAAiB,EACjB,cAAsB,WAAW,EACjC,EAAE;IACF,MAAM,SAAS,GAAG,MAAM,IAAA,yBAAiB,EACvC,IAAI,EACJ,QAAQ,IAAI,GAAG,UAAU,YAAY,CACtC,CAAC;IACF,MAAM,oBAAS;SACZ,UAAU,CAAC,UAAU,CAAC;SACtB,GAAG,CAAC,KAAK,CAAC;SACV,MAAM,CAAC;QACN,CAAC,WAAW,CAAC,EAAE,sBAAU,CAAC,MAAM,CAAC,SAAS,CAAC;KAC5C,CAAC,CAAC;AACP,CAAC,CAAC;AAjBW,QAAA,cAAc,kBAiBzB;AAEW,QAAA,gBAAgB,GAAG,IAAA,mCAAwB,EAAC,WAAE,EAAE;IAC3D,IAAI,EAAE,kBAAkB;IACxB,SAAS,EAAT,oBAAS;IACT,UAAU,EAAE,SAAS;IACrB,YAAY,EAAE,aAAa;IAC3B,WAAW,EAAE,gBAAgB;IAC7B,QAAQ,EAAE,2BAAkB;IAC5B,eAAe,EAAE,QAAQ;IACzB,mBAAmB,EAAE,UAAU;CAChC,CAAC,CAAC"}
+{"version":3,"file":"embedding.js","sourceRoot":"","sources":["../../../src/lib/ai/embedding.ts"],"names":[],"mappings":";;;AAAA,wDAAsD;AACtD,kDAA+D;AAC/D,0CAAwC;AACxC,qCAAkD;AAClD,iCAAoC;AACpC,wCAA4C;AAC5C,sCAA4C;AAErC,MAAM,iBAAiB,GAAG,KAAK,EAAE,IAAY,EAAE,QAAgB,EAAE,EAAE;;IACxE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QAC1C,MAAM,IAAI,wBAAe,CAAC,4CAA4C,EAAE;YACtE,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,WAAE,CAAC,KAAK,CAAC;QAC9B,QAAQ,EAAE,2BAAkB;QAC5B,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IACH,IAAA,iBAAU,EAAC;QACT,IAAI,EAAE,WAAW;QACjB,QAAQ;QACR,KAAK,EAAE,cAAS,CAAC,kBAAkB;QACnC,UAAU,EAAE,IAAI,CAAC,MAAM;KACxB,CAAC,CAAC;IACH,OAAO,MAAA,QAAQ,CAAC,CAAC,CAAC,0CAAE,SAAS,CAAC;AAChC,CAAC,CAAC;AAnBW,QAAA,iBAAiB,qBAmB5B;AAEK,MAAM,cAAc,GAAG,KAAK,EACjC,UAAkB,EAClB,KAAa,EACb,IAAY,EACZ,QAAiB,EACjB,cAAsB,WAAW,EACjC,EAAE;IACF,MAAM,SAAS,GAAG,MAAM,IAAA,yBAAiB,EACvC,IAAI,EACJ,QAAQ,IAAI,GAAG,UAAU,YAAY,CACtC,CAAC;IACF,MAAM,oBAAS;SACZ,UAAU,CAAC,UAAU,CAAC;SACtB,GAAG,CAAC,KAAK,CAAC;SACV,MAAM,CAAC;QACN,CAAC,WAAW,CAAC,EAAE,sBAAU,CAAC,MAAM,CAAC,SAAS,CAAC;KAC5C,CAAC,CAAC;AACP,CAAC,CAAC;AAjBW,QAAA,cAAc,kBAiBzB;AAEW,QAAA,gBAAgB,GAAG,IAAA,mCAAwB,EAAC,WAAE,EAAE;IAC3D,IAAI,EAAE,kBAAkB;IACxB,SAAS,EAAT,oBAAS;IACT,UAAU,EAAE,SAAS;IACrB,YAAY,EAAE,aAAa;IAC3B,WAAW,EAAE,gBAAgB;IAC7B,QAAQ,EAAE,2BAAkB;IAC5B,eAAe,EAAE,QAAQ;IACzB,mBAAmB,EAAE,UAAU;CAChC,CAAC,CAAC"}

package/dist/lib/errors/index.d.ts

@@ -0,0 +1,31 @@
+export declare const APP_ERROR_CODE_VALUES: readonly ["BAD_REQUEST", "UNAUTHORIZED", "FORBIDDEN", "NOT_FOUND", "CONFLICT", "VALIDATION_ERROR", "INTERNAL_ERROR"];
+export type AppErrorCode = (typeof APP_ERROR_CODE_VALUES)[number];
+export declare class AppError extends Error {
+    readonly code: AppErrorCode;
+    readonly statusCode: number;
+    readonly context?: Record<string, unknown>;
+    constructor(code: AppErrorCode, message: string, statusCode?: number, context?: Record<string, unknown>);
+    toJSON(): {
+        name: string;
+        code: "BAD_REQUEST" | "UNAUTHORIZED" | "FORBIDDEN" | "NOT_FOUND" | "CONFLICT" | "VALIDATION_ERROR" | "INTERNAL_ERROR";
+        message: string;
+        statusCode: number;
+        context: Record<string, unknown> | undefined;
+    };
+}
+export declare class ValidationError extends AppError {
+    constructor(message: string, context?: Record<string, unknown>);
+}
+export declare class NotFoundError extends AppError {
+    constructor(message: string, context?: Record<string, unknown>);
+}
+export declare class UnauthorizedError extends AppError {
+    constructor(message: string, context?: Record<string, unknown>);
+}
+export declare class ForbiddenError extends AppError {
+    constructor(message: string, context?: Record<string, unknown>);
+}
+export declare class ConflictError extends AppError {
+    constructor(message: string, context?: Record<string, unknown>);
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/errors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/errors/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,qBAAqB,sHAQxB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,qBAAa,QAAS,SAAQ,KAAK;IACjC,SAAgB,IAAI,EAAE,YAAY,CAAC;IACnC,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAGhD,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,EACf,UAAU,GAAE,MAAY,EACxB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAanC,MAAM;;;;;;;CASP;AAED,qBAAa,eAAgB,SAAQ,QAAQ;gBAC/B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED,qBAAa,aAAc,SAAQ,QAAQ;gBAC7B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED,qBAAa,iBAAkB,SAAQ,QAAQ;gBACjC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED,qBAAa,cAAe,SAAQ,QAAQ;gBAC9B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED,qBAAa,aAAc,SAAQ,QAAQ;gBAC7B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D"}

package/dist/lib/errors/index.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConflictError = exports.ForbiddenError = exports.UnauthorizedError = exports.NotFoundError = exports.ValidationError = exports.AppError = exports.APP_ERROR_CODE_VALUES = void 0;
+exports.APP_ERROR_CODE_VALUES = [
+    "BAD_REQUEST",
+    "UNAUTHORIZED",
+    "FORBIDDEN",
+    "NOT_FOUND",
+    "CONFLICT",
+    "VALIDATION_ERROR",
+    "INTERNAL_ERROR",
+];
+class AppError extends Error {
+    constructor(code, message, statusCode = 500, context) {
+        super(message);
+        this.name = "AppError";
+        this.code = code;
+        this.statusCode = statusCode;
+        this.context = context;
+        if (Error.captureStackTrace) {
+            Error.captureStackTrace(this, AppError);
+        }
+    }
+    toJSON() {
+        return {
+            name: this.name,
+            code: this.code,
+            message: this.message,
+            statusCode: this.statusCode,
+            context: this.context,
+        };
+    }
+}
+exports.AppError = AppError;
+class ValidationError extends AppError {
+    constructor(message, context) {
+        super("VALIDATION_ERROR", message, 400, context);
+        this.name = "ValidationError";
+    }
+}
+exports.ValidationError = ValidationError;
+class NotFoundError extends AppError {
+    constructor(message, context) {
+        super("NOT_FOUND", message, 404, context);
+        this.name = "NotFoundError";
+    }
+}
+exports.NotFoundError = NotFoundError;
+class UnauthorizedError extends AppError {
+    constructor(message, context) {
+        super("UNAUTHORIZED", message, 401, context);
+        this.name = "UnauthorizedError";
+    }
+}
+exports.UnauthorizedError = UnauthorizedError;
+class ForbiddenError extends AppError {
+    constructor(message, context) {
+        super("FORBIDDEN", message, 403, context);
+        this.name = "ForbiddenError";
+    }
+}
+exports.ForbiddenError = ForbiddenError;
+class ConflictError extends AppError {
+    constructor(message, context) {
+        super("CONFLICT", message, 409, context);
+        this.name = "ConflictError";
+    }
+}
+exports.ConflictError = ConflictError;
+//# sourceMappingURL=index.js.map

package/dist/lib/errors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/errors/index.ts"],"names":[],"mappings":";;;AAAa,QAAA,qBAAqB,GAAG;IACnC,aAAa;IACb,cAAc;IACd,WAAW;IACX,WAAW;IACX,UAAU;IACV,kBAAkB;IAClB,gBAAgB;CACR,CAAC;AAIX,MAAa,QAAS,SAAQ,KAAK;IAKjC,YACE,IAAkB,EAClB,OAAe,EACf,aAAqB,GAAG,EACxB,OAAiC;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC;IACJ,CAAC;CACF;AA/BD,4BA+BC;AAED,MAAa,eAAgB,SAAQ,QAAQ;IAC3C,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,kBAAkB,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AALD,0CAKC;AAED,MAAa,aAAc,SAAQ,QAAQ;IACzC,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AALD,sCAKC;AAED,MAAa,iBAAkB,SAAQ,QAAQ;IAC7C,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,cAAc,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AALD,8CAKC;AAED,MAAa,cAAe,SAAQ,QAAQ;IAC1C,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AALD,wCAKC;AAED,MAAa,aAAc,SAAQ,QAAQ;IACzC,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AALD,sCAKC"}

package/dist/lib/index.d.ts

@@ -1,7 +1,9 @@
 export * from "./ai";
 export * from "./api";
+export * from "./errors";
 export * from "./firebase";
 export * from "./iam";
 export * from "./repository";
 export * from "./storage";
+export * from "./utils";
 //# sourceMappingURL=index.d.ts.map

package/dist/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/index.ts"],"names":[],"mappings":"AAAA,cAAc,MAAM,CAAC;AACrB,cAAc,OAAO,CAAC;AACtB,cAAc,YAAY,CAAC;AAC3B,cAAc,OAAO,CAAC;AACtB,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/index.ts"],"names":[],"mappings":"AAAA,cAAc,MAAM,CAAC;AACrB,cAAc,OAAO,CAAC;AACtB,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,OAAO,CAAC;AACtB,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC"}

package/dist/lib/index.js

@@ -16,8 +16,10 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./ai"), exports);
 __exportStar(require("./api"), exports);
+__exportStar(require("./errors"), exports);
 __exportStar(require("./firebase"), exports);
 __exportStar(require("./iam"), exports);
 __exportStar(require("./repository"), exports);
 __exportStar(require("./storage"), exports);
+__exportStar(require("./utils"), exports);
 //# sourceMappingURL=index.js.map

package/dist/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/lib/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uCAAqB;AACrB,wCAAsB;AACtB,6CAA2B;AAC3B,wCAAsB;AACtB,+CAA6B;AAC7B,4CAA0B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/lib/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uCAAqB;AACrB,wCAAsB;AACtB,2CAAyB;AACzB,6CAA2B;AAC3B,wCAAsB;AACtB,+CAA6B;AAC7B,4CAA0B;AAC1B,0CAAwB"}

package/dist/lib/repository/factory.d.ts

@@ -0,0 +1,9 @@
+import { UserRepository } from "./user.repository";
+import { ProfileRepository } from "./profile.repository";
+import { SettingsRepository } from "./settings.repository";
+export declare const repositories: {
+    user: () => UserRepository;
+    profile: () => ProfileRepository;
+    settings: () => SettingsRepository;
+};
+//# sourceMappingURL=factory.d.ts.map

package/dist/lib/repository/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../src/lib/repository/factory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAM3D,eAAO,MAAM,YAAY;;;;CAIxB,CAAC"}

package/dist/lib/repository/factory.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.repositories = void 0;
+const firebase_1 = require("../firebase");
+const user_repository_1 = require("./user.repository");
+const profile_repository_1 = require("./profile.repository");
+const settings_repository_1 = require("./settings.repository");
+let userRepo = null;
+let profileRepo = null;
+let settingsRepo = null;
+exports.repositories = {
+    user: () => (userRepo !== null && userRepo !== void 0 ? userRepo : (userRepo = new user_repository_1.UserRepository(firebase_1.firestore))),
+    profile: () => (profileRepo !== null && profileRepo !== void 0 ? profileRepo : (profileRepo = new profile_repository_1.ProfileRepository(firebase_1.firestore))),
+    settings: () => (settingsRepo !== null && settingsRepo !== void 0 ? settingsRepo : (settingsRepo = new settings_repository_1.SettingsRepository(firebase_1.firestore))),
+};
+//# sourceMappingURL=factory.js.map

package/dist/lib/repository/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../../src/lib/repository/factory.ts"],"names":[],"mappings":";;;AAAA,0CAAwC;AACxC,uDAAmD;AACnD,6DAAyD;AACzD,+DAA2D;AAE3D,IAAI,QAAQ,GAA0B,IAAI,CAAC;AAC3C,IAAI,WAAW,GAA6B,IAAI,CAAC;AACjD,IAAI,YAAY,GAA8B,IAAI,CAAC;AAEtC,QAAA,YAAY,GAAG;IAC1B,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,aAAR,QAAQ,cAAR,QAAQ,IAAR,QAAQ,GAAK,IAAI,gCAAc,CAAC,oBAAS,CAAC,EAAC;IACxD,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,WAAW,aAAX,WAAW,cAAX,WAAW,IAAX,WAAW,GAAK,IAAI,sCAAiB,CAAC,oBAAS,CAAC,EAAC;IACjE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,YAAY,aAAZ,YAAY,cAAZ,YAAY,IAAZ,YAAY,GAAK,IAAI,wCAAkB,CAAC,oBAAS,CAAC,EAAC;CACrE,CAAC"}

package/dist/lib/repository/index.d.ts

@@ -1,4 +1,5 @@
 export * from "./errors";
+export * from "./factory";
 export * from "./firestore.repository";
 export * from "./rtdb.repository";
 export * from "./user.repository";

package/dist/lib/repository/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/repository/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/repository/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}

package/dist/lib/repository/index.js

@@ -15,6 +15,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./errors"), exports);
+__exportStar(require("./factory"), exports);
 __exportStar(require("./firestore.repository"), exports);
 __exportStar(require("./rtdb.repository"), exports);
 __exportStar(require("./user.repository"), exports);

package/dist/lib/repository/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/repository/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,yDAAuC;AACvC,oDAAkC;AAClC,oDAAkC;AAClC,uDAAqC;AACrC,wDAAsC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/repository/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,4CAA0B;AAC1B,yDAAuC;AACvC,oDAAkC;AAClC,oDAAkC;AAClC,uDAAqC;AACrC,wDAAsC"}

package/dist/lib/storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/lib/storage.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd;AAED,eAAO,MAAM,oBAAoB,GAC/B,YAAY,MAAM,EAClB,MAAM,MAAM,EACZ,cAAa,MAAoB,KAChC,OAAO,CAAC,iBAAiB,CA8B3B,CAAC"}
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/lib/storage.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd;AAiBD,eAAO,MAAM,oBAAoB,GAC/B,YAAY,MAAM,EAClB,MAAM,MAAM,EACZ,cAAa,MAAoB,KAChC,OAAO,CAAC,iBAAiB,CAgC3B,CAAC"}

package/dist/lib/storage.js

@@ -2,7 +2,23 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.uploadImageToStorage = void 0;
 const storage_1 = require("firebase-admin/storage");
+const errors_1 = require("./errors");
+function validateStoragePath(path) {
+    if (!path || path.length === 0) {
+        throw new errors_1.ValidationError("Storage path cannot be empty");
+    }
+    if (path.includes("..")) {
+        throw new errors_1.ValidationError("Storage path cannot contain '..'", { path });
+    }
+    if (path.startsWith("/")) {
+        throw new errors_1.ValidationError("Storage path cannot start with '/'", { path });
+    }
+    if (path.includes("//")) {
+        throw new errors_1.ValidationError("Storage path cannot contain '//'", { path });
+    }
+}
 const uploadImageToStorage = async (base64Data, path, contentType = "image/png") => {
+    validateStoragePath(path);
     try {
         const bucket = (0, storage_1.getStorage)().bucket();
         const buffer = Buffer.from(base64Data, "base64");

package/dist/lib/storage.js.map

@@ -1 +1 @@
-{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/lib/storage.ts"],"names":[],"mappings":";;;AAAA,oDAAoD;AAO7C,MAAM,oBAAoB,GAAG,KAAK,EACvC,UAAkB,EAClB,IAAY,EACZ,cAAsB,WAAW,EACL,EAAE;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,oBAAU,GAAE,CAAC,MAAM,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE/B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACvC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YACtB,QAAQ,EAAE;gBACR,WAAW;gBACX,YAAY,EAAE,QAAQ;aACvB;YACD,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,kCAAkC,MAAM,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;QAE1E,OAAO;YACL,GAAG,EAAE,SAAS;YACd,IAAI;SACL,CAAC;IACJ,CAAC;IAAC,WAAM,CAAC;QACP,MAAM,WAAW,GAAG,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACrD,WAAW,CAAC,IAAI,GAAG,eAAe,CAAC;QACnC,MAAM,WAAW,CAAC;IACpB,CAAC;AACH,CAAC,CAAC;AAlCW,QAAA,oBAAoB,wBAkC/B"}
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/lib/storage.ts"],"names":[],"mappings":";;;AAAA,oDAAoD;AACpD,qCAA2C;AAO3C,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,wBAAe,CAAC,8BAA8B,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,wBAAe,CAAC,kCAAkC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,wBAAe,CAAC,oCAAoC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,wBAAe,CAAC,kCAAkC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAEM,MAAM,oBAAoB,GAAG,KAAK,EACvC,UAAkB,EAClB,IAAY,EACZ,cAAsB,WAAW,EACL,EAAE;IAC9B,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAE1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,oBAAU,GAAE,CAAC,MAAM,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE/B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACvC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YACtB,QAAQ,EAAE;gBACR,WAAW;gBACX,YAAY,EAAE,QAAQ;aACvB;YACD,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,kCAAkC,MAAM,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;QAE1E,OAAO;YACL,GAAG,EAAE,SAAS;YACd,IAAI;SACL,CAAC;IACJ,CAAC;IAAC,WAAM,CAAC;QACP,MAAM,WAAW,GAAG,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACrD,WAAW,CAAC,IAAI,GAAG,eAAe,CAAC;QACnC,MAAM,WAAW,CAAC;IACpB,CAAC;AACH,CAAC,CAAC;AApCW,QAAA,oBAAoB,wBAoC/B"}

package/dist/lib/utils/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./sanitize";
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC"}

package/dist/lib/utils/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./sanitize"), exports);
+//# sourceMappingURL=index.js.map

package/dist/lib/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/utils/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2B"}

package/dist/lib/utils/sanitize.d.ts

@@ -0,0 +1,20 @@
+import { z } from "zod";
+/**
+ * Removes HTML tags and script content from a string.
+ * Use for text fields that should not contain HTML (descriptions, bios, etc.)
+ */
+export declare function sanitizeText(text: string): string;
+/**
+ * Creates a Zod string schema that sanitizes HTML on transformation.
+ * Use in schemas where text input needs to be cleaned.
+ *
+ * @example
+ * const BioSchema = sanitizedString(z.string().max(280));
+ */
+export declare function sanitizedString<T extends z.ZodString>(schema: T): z.ZodPipe<T, z.ZodTransform<string, z.core.output<T>>>;
+/**
+ * Escapes HTML special characters to prevent XSS.
+ * Use when HTML needs to be displayed as text.
+ */
+export declare function escapeHtml(text: string): string;
+//# sourceMappingURL=sanitize.d.ts.map

package/dist/lib/utils/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../../src/lib/utils/sanitize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKjD;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,0DAE/D;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAS/C"}

package/dist/lib/utils/sanitize.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitizeText = sanitizeText;
+exports.sanitizedString = sanitizedString;
+exports.escapeHtml = escapeHtml;
+/**
+ * Removes HTML tags and script content from a string.
+ * Use for text fields that should not contain HTML (descriptions, bios, etc.)
+ */
+function sanitizeText(text) {
+    return text
+        .replace(/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/gi, "")
+        .replace(/<[^>]*>/g, "")
+        .trim();
+}
+/**
+ * Creates a Zod string schema that sanitizes HTML on transformation.
+ * Use in schemas where text input needs to be cleaned.
+ *
+ * @example
+ * const BioSchema = sanitizedString(z.string().max(280));
+ */
+function sanitizedString(schema) {
+    return schema.transform(sanitizeText);
+}
+/**
+ * Escapes HTML special characters to prevent XSS.
+ * Use when HTML needs to be displayed as text.
+ */
+function escapeHtml(text) {
+    const htmlEscapes = {
+        "&": "&amp;",
+        "<": "&lt;",
+        ">": "&gt;",
+        '"': "&quot;",
+        "'": "&#39;",
+    };
+    return text.replace(/[&<>"']/g, (char) => htmlEscapes[char]);
+}
+//# sourceMappingURL=sanitize.js.map

package/dist/lib/utils/sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../../src/lib/utils/sanitize.ts"],"names":[],"mappings":";;AAMA,oCAKC;AASD,0CAEC;AAMD,gCASC;AAnCD;;;GAGG;AACH,SAAgB,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI;SACR,OAAO,CAAC,qDAAqD,EAAE,EAAE,CAAC;SAClE,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,eAAe,CAAwB,MAAS;IAC9D,OAAO,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,SAAgB,UAAU,CAAC,IAAY;IACrC,MAAM,WAAW,GAA2B;QAC1C,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,QAAQ;QACb,GAAG,EAAE,OAAO;KACb,CAAC;IACF,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/D,CAAC"}

package/dist/types/index.d.ts

@@ -7,6 +7,7 @@ export * from "./nutrition";
 export * from "./profile";
 export * from "./recipe";
 export * from "./repository";
+export * from "./response";
 export * from "./settings";
 export * from "./subscription";
 export * from "./temperature";

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,MAAM,CAAC;AACrB,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,QAAQ,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,MAAM,CAAC;AACrB,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,QAAQ,CAAC"}

package/dist/types/index.js

@@ -23,6 +23,7 @@ __exportStar(require("./nutrition"), exports);
 __exportStar(require("./profile"), exports);
 __exportStar(require("./recipe"), exports);
 __exportStar(require("./repository"), exports);
+__exportStar(require("./response"), exports);
 __exportStar(require("./settings"), exports);
 __exportStar(require("./subscription"), exports);
 __exportStar(require("./temperature"), exports);

package/dist/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uCAAqB;AACrB,8CAA4B;AAC5B,+CAA6B;AAC7B,gDAA8B;AAC9B,+CAA6B;AAC7B,8CAA4B;AAC5B,4CAA0B;AAC1B,2CAAyB;AACzB,+CAA6B;AAC7B,6CAA2B;AAC3B,iDAA+B;AAC/B,gDAA8B;AAC9B,yCAAuB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uCAAqB;AACrB,8CAA4B;AAC5B,+CAA6B;AAC7B,gDAA8B;AAC9B,+CAA6B;AAC7B,8CAA4B;AAC5B,4CAA0B;AAC1B,2CAAyB;AACzB,+CAA6B;AAC7B,6CAA2B;AAC3B,6CAA2B;AAC3B,iDAA+B;AAC/B,gDAA8B;AAC9B,yCAAuB"}

package/dist/types/response.d.ts

@@ -0,0 +1,16 @@
+export type ApiSuccessResponse<T> = {
+    success: true;
+    data: T;
+};
+export type ApiErrorResponse = {
+    success: false;
+    error: {
+        code: string;
+        message: string;
+        details?: unknown;
+    };
+};
+export type ApiResponse<T> = ApiSuccessResponse<T> | ApiErrorResponse;
+export declare function success<T>(data: T): ApiSuccessResponse<T>;
+export declare function failure(code: string, message: string, details?: unknown): ApiErrorResponse;
+//# sourceMappingURL=response.d.ts.map

package/dist/types/response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response.d.ts","sourceRoot":"","sources":["../../src/types/response.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,CAAC,CAAC,IAAI;IAClC,OAAO,EAAE,IAAI,CAAC;IACd,IAAI,EAAE,CAAC,CAAC;CACT,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,KAAK,CAAC;IACf,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC;AAEtE,wBAAgB,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAEzD;AAED,wBAAgB,OAAO,CACrB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,OAAO,GAChB,gBAAgB,CAKlB"}

package/dist/types/response.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.success = success;
+exports.failure = failure;
+function success(data) {
+    return { success: true, data };
+}
+function failure(code, message, details) {
+    return {
+        success: false,
+        error: { code, message, details },
+    };
+}
+//# sourceMappingURL=response.js.map

package/dist/types/response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response.js","sourceRoot":"","sources":["../../src/types/response.ts"],"names":[],"mappings":";;AAgBA,0BAEC;AAED,0BASC;AAbD,SAAgB,OAAO,CAAI,IAAO;IAChC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,SAAgB,OAAO,CACrB,IAAY,EACZ,OAAe,EACf,OAAiB;IAEjB,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE;KAClC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cravery/core",
-  "version": "0.0.5",
+  "version": "0.0.6",
   "description": "Clean architecture foundation for Cravery",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/lib/ai/cost.ts

@@ -66,7 +66,16 @@ export const logAIUsage = (usage: AIUsage): number => {
     updates[`${base}/models/${model.id}/${key}`] = ServerValue.increment(value);
   }
 
-  db.ref().update(updates).catch(console.error);
+  db.ref()
+    .update(updates)
+    .catch((error) => {
+      console.error("[AI Usage] Failed to log usage:", {
+        flowName,
+        model: model.id,
+        cost,
+        error: error instanceof Error ? error.message : String(error),
+      });
+    });
 
   return cost;
 };

package/src/lib/ai/embedding.ts

@@ -4,10 +4,15 @@ import { firestore } from "../firebase";
 import { ai, geminiEmbedding001 } from "./genkit";
 import { logAIUsage } from "./cost";
 import { AI_MODELS } from "../../config/ai";
+import { ValidationError } from "../errors";
 
 export const generateEmbedding = async (text: string, flowName: string) => {
   if (text.length < 1 || text.length > 7500) {
-    throw new Error("Validation error: Text out of range");
+    throw new ValidationError("Text must be between 1 and 7500 characters", {
+      length: text.length,
+      minLength: 1,
+      maxLength: 7500,
+    });
   }
   const response = await ai.embed({
     embedder: geminiEmbedding001,

package/src/lib/errors/index.ts

@@ -0,0 +1,79 @@
+export const APP_ERROR_CODE_VALUES = [
+  "BAD_REQUEST",
+  "UNAUTHORIZED",
+  "FORBIDDEN",
+  "NOT_FOUND",
+  "CONFLICT",
+  "VALIDATION_ERROR",
+  "INTERNAL_ERROR",
+] as const;
+
+export type AppErrorCode = (typeof APP_ERROR_CODE_VALUES)[number];
+
+export class AppError extends Error {
+  public readonly code: AppErrorCode;
+  public readonly statusCode: number;
+  public readonly context?: Record<string, unknown>;
+
+  constructor(
+    code: AppErrorCode,
+    message: string,
+    statusCode: number = 500,
+    context?: Record<string, unknown>,
+  ) {
+    super(message);
+    this.name = "AppError";
+    this.code = code;
+    this.statusCode = statusCode;
+    this.context = context;
+
+    if (Error.captureStackTrace) {
+      Error.captureStackTrace(this, AppError);
+    }
+  }
+
+  toJSON() {
+    return {
+      name: this.name,
+      code: this.code,
+      message: this.message,
+      statusCode: this.statusCode,
+      context: this.context,
+    };
+  }
+}
+
+export class ValidationError extends AppError {
+  constructor(message: string, context?: Record<string, unknown>) {
+    super("VALIDATION_ERROR", message, 400, context);
+    this.name = "ValidationError";
+  }
+}
+
+export class NotFoundError extends AppError {
+  constructor(message: string, context?: Record<string, unknown>) {
+    super("NOT_FOUND", message, 404, context);
+    this.name = "NotFoundError";
+  }
+}
+
+export class UnauthorizedError extends AppError {
+  constructor(message: string, context?: Record<string, unknown>) {
+    super("UNAUTHORIZED", message, 401, context);
+    this.name = "UnauthorizedError";
+  }
+}
+
+export class ForbiddenError extends AppError {
+  constructor(message: string, context?: Record<string, unknown>) {
+    super("FORBIDDEN", message, 403, context);
+    this.name = "ForbiddenError";
+  }
+}
+
+export class ConflictError extends AppError {
+  constructor(message: string, context?: Record<string, unknown>) {
+    super("CONFLICT", message, 409, context);
+    this.name = "ConflictError";
+  }
+}

package/src/lib/index.ts

@@ -1,6 +1,8 @@
 export * from "./ai";
 export * from "./api";
+export * from "./errors";
 export * from "./firebase";
 export * from "./iam";
 export * from "./repository";
 export * from "./storage";
+export * from "./utils";

package/src/lib/repository/factory.ts

@@ -0,0 +1,14 @@
+import { firestore } from "../firebase";
+import { UserRepository } from "./user.repository";
+import { ProfileRepository } from "./profile.repository";
+import { SettingsRepository } from "./settings.repository";
+
+let userRepo: UserRepository | null = null;
+let profileRepo: ProfileRepository | null = null;
+let settingsRepo: SettingsRepository | null = null;
+
+export const repositories = {
+  user: () => (userRepo ??= new UserRepository(firestore)),
+  profile: () => (profileRepo ??= new ProfileRepository(firestore)),
+  settings: () => (settingsRepo ??= new SettingsRepository(firestore)),
+};

package/src/lib/repository/index.ts

@@ -1,4 +1,5 @@
 export * from "./errors";
+export * from "./factory";
 export * from "./firestore.repository";
 export * from "./rtdb.repository";
 export * from "./user.repository";

package/src/lib/storage.ts

@@ -1,15 +1,33 @@
 import { getStorage } from "firebase-admin/storage";
+import { ValidationError } from "./errors";
 
 export interface UploadImageResult {
   url: string;
   path: string;
 }
 
+function validateStoragePath(path: string): void {
+  if (!path || path.length === 0) {
+    throw new ValidationError("Storage path cannot be empty");
+  }
+  if (path.includes("..")) {
+    throw new ValidationError("Storage path cannot contain '..'", { path });
+  }
+  if (path.startsWith("/")) {
+    throw new ValidationError("Storage path cannot start with '/'", { path });
+  }
+  if (path.includes("//")) {
+    throw new ValidationError("Storage path cannot contain '//'", { path });
+  }
+}
+
 export const uploadImageToStorage = async (
   base64Data: string,
   path: string,
   contentType: string = "image/png",
 ): Promise<UploadImageResult> => {
+  validateStoragePath(path);
+
   try {
     const bucket = getStorage().bucket();
     const buffer = Buffer.from(base64Data, "base64");

package/src/lib/utils/index.ts

@@ -0,0 +1 @@
+export * from "./sanitize";

package/src/lib/utils/sanitize.ts

@@ -0,0 +1,38 @@
+import { z } from "zod";
+
+/**
+ * Removes HTML tags and script content from a string.
+ * Use for text fields that should not contain HTML (descriptions, bios, etc.)
+ */
+export function sanitizeText(text: string): string {
+  return text
+    .replace(/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/gi, "")
+    .replace(/<[^>]*>/g, "")
+    .trim();
+}
+
+/**
+ * Creates a Zod string schema that sanitizes HTML on transformation.
+ * Use in schemas where text input needs to be cleaned.
+ *
+ * @example
+ * const BioSchema = sanitizedString(z.string().max(280));
+ */
+export function sanitizedString<T extends z.ZodString>(schema: T) {
+  return schema.transform(sanitizeText);
+}
+
+/**
+ * Escapes HTML special characters to prevent XSS.
+ * Use when HTML needs to be displayed as text.
+ */
+export function escapeHtml(text: string): string {
+  const htmlEscapes: Record<string, string> = {
+    "&": "&amp;",
+    "<": "&lt;",
+    ">": "&gt;",
+    '"': "&quot;",
+    "'": "&#39;",
+  };
+  return text.replace(/[&<>"']/g, (char) => htmlEscapes[char]);
+}

package/src/types/index.ts

@@ -7,6 +7,7 @@ export * from "./nutrition";
 export * from "./profile";
 export * from "./recipe";
 export * from "./repository";
+export * from "./response";
 export * from "./settings";
 export * from "./subscription";
 export * from "./temperature";

package/src/types/response.ts

@@ -0,0 +1,30 @@
+export type ApiSuccessResponse<T> = {
+  success: true;
+  data: T;
+};
+
+export type ApiErrorResponse = {
+  success: false;
+  error: {
+    code: string;
+    message: string;
+    details?: unknown;
+  };
+};
+
+export type ApiResponse<T> = ApiSuccessResponse<T> | ApiErrorResponse;
+
+export function success<T>(data: T): ApiSuccessResponse<T> {
+  return { success: true, data };
+}
+
+export function failure(
+  code: string,
+  message: string,
+  details?: unknown,
+): ApiErrorResponse {
+  return {
+    success: false,
+    error: { code, message, details },
+  };
+}