@dudousxd/nestjs-media-dashboard 0.6.0 → 0.7.0

package/dist/server/index.cjs

@@ -80,6 +80,28 @@ function resolveConsoleAuth(options) {
 }
 __name(resolveConsoleAuth, "resolveConsoleAuth");
 
+// src/server/guards.ts
+var import_reflect_metadata = require("reflect-metadata");
+var GUARDS_METADATA = "__guards__";
+function isGuardClass(guard) {
+  return typeof guard === "function";
+}
+__name(isGuardClass, "isGuardClass");
+function baseGuards(controller) {
+  return Reflect.getOwnMetadata(GUARDS_METADATA, controller) ?? [];
+}
+__name(baseGuards, "baseGuards");
+function stampGuards(guards, entries) {
+  if (guards === void 0 || guards.length === 0) return;
+  for (const [controller, base] of entries) {
+    Reflect.defineMetadata(GUARDS_METADATA, [
+      ...base,
+      ...guards
+    ], controller);
+  }
+}
+__name(stampGuards, "stampGuards");
+
 // src/server/media-console-api.module.ts
 var import_common6 = require("@nestjs/common");
 
@@ -488,10 +510,15 @@ var MediaConsoleService = class {
       limit: options.limit ?? DEFAULT_PAGE_LIMIT
     });
     return {
+      // Drop phantom folders whose name is empty — a CommonPrefix of only slashes (`/`, `//`),
+      // produced by a stray key with a leading slash. The S3 driver normalizes such a prefix back to
+      // the root, so listing INTO one returns the root again (the phantom included) — a self-reference
+      // that infinite-loops the folder tree. Filtering it out removes the trap; those leading-slash
+      // keys are unreachable from the console anyway (the driver strips the leading slash).
       folders: result.folders.map((prefix) => ({
         name: lastSegment(prefix),
         prefix
-      })),
+      })).filter((folder) => folder.name !== ""),
       // Drop the zero-byte "folder marker" (a key ending in `/`, whose name is empty after the
       // prefix) that `createFolder` writes — it's the folder itself, not a file inside it.
       files: result.files.filter((entry) => entry.name !== "").map((entry) => ({
@@ -1387,11 +1414,23 @@ function _ts_decorate6(decorators, target, key, desc) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate6, "_ts_decorate");
+var READ_BASE_GUARDS = baseGuards(MediaConsoleReadController);
+var ACTIONS_BASE_GUARDS = baseGuards(MediaConsoleActionsController);
 var MediaConsoleApiModule = class _MediaConsoleApiModule {
   static {
     __name(this, "MediaConsoleApiModule");
   }
   static register(options) {
+    stampGuards(options.guards, [
+      [
+        MediaConsoleReadController,
+        READ_BASE_GUARDS
+      ],
+      [
+        MediaConsoleActionsController,
+        ACTIONS_BASE_GUARDS
+      ]
+    ]);
     return {
       module: _MediaConsoleApiModule,
       imports: options.imports ?? [],
@@ -1413,7 +1452,11 @@ var MediaConsoleApiModule = class _MediaConsoleApiModule {
           provide: MEDIA_CONSOLE_COOKIE_PATH,
           useValue: options.cookiePath
         },
-        options.authProvider
+        options.authProvider,
+        // Class guards need a DI provider so Nest can instantiate them in THIS module's context
+        // (where `imports` above resolves their dependencies). An already-instantiated guard needs
+        // none — it's used as-is.
+        ...(options.guards ?? []).filter(isGuardClass)
       ],
       exports: [
         MediaConsoleService
@@ -1547,7 +1590,7 @@ var MediaDashboardModule = class _MediaDashboardModule {
     return _MediaDashboardModule.build(options, apiBasePath, {
       provide: MEDIA_CONSOLE_AUTH,
       useValue: resolveConsoleAuth(options.auth)
-    });
+    }, options.imports);
   }
   static forRootAsync(options) {
     const apiBasePath = normalize(options.apiBasePath ?? `${normalize(options.basePath ?? "/media")}/api`);
@@ -1562,14 +1605,24 @@ var MediaDashboardModule = class _MediaDashboardModule {
   static build(options, apiBasePath, authProvider, imports) {
     const basePath = normalize(options.basePath ?? "/media");
     const actions = options.actions === true;
+    stampGuards(options.guards, [
+      [
+        MediaDashboardUiController,
+        []
+      ]
+    ]);
     return {
       module: _MediaDashboardModule,
       imports: [
+        ...imports ?? [],
         MediaConsoleApiModule.register({
           actions,
           cookiePath: apiBasePath,
           authProvider,
-          imports
+          imports,
+          ...options.guards ? {
+            guards: options.guards
+          } : {}
         }),
         import_core.RouterModule.register([
           {
@@ -1593,7 +1646,10 @@ var MediaDashboardModule = class _MediaDashboardModule {
         {
           provide: MEDIA_DASHBOARD_API_PATH,
           useValue: apiBasePath
-        }
+        },
+        // MediaDashboardUiController is hosted HERE, so its guards DI-instantiate from this
+        // module — class guards need a provider; an already-instantiated guard needs none.
+        ...(options.guards ?? []).filter(isGuardClass)
       ],
       // Re-export the API module so its MediaConsoleService reaches importers if they want it.
       exports: [