@elsikora/nestjs-crud-automator 3.0.2-dev.1 → 4.0.0-dev.2

package/dist/esm/class/api/controller/generated/get-many-contract.class.js

@@ -0,0 +1,248 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { ApiControllerGeneratedScopeWhereContract } from './scope-where-contract.class.js';
+import { ApiControllerGeneratedSecuritySnapshot } from './security-snapshot.class.js';
+import { AuthorizationScopeMergeWhere } from '../../../../utility/authorization/scope-merge-where.utility.js';
+import { ErrorException } from '../../../../utility/error/exception.utility.js';
+import { ObjectFindPropertyDescriptor } from '../../../../utility/object-find-property-descriptor.utility.js';
+import { InstanceChecker, EqualOperator, FindOperator } from 'typeorm';
+
+/**
+ * Preserves pagination-critical GET_MANY options owned by a generated cursor route.
+ * Direct service calls retain the ordinary subscriber contract.
+ */
+class ApiControllerGeneratedGetManyContract {
+    static STORAGE = new AsyncLocalStorage();
+    static createSnapshot(properties) {
+        const snapshot = {
+            order: properties.order,
+            take: properties.take,
+        };
+        for (const key of ["join", "lock", "withDeleted"]) {
+            this.copyDataProperty(properties, snapshot, key);
+        }
+        return ApiControllerGeneratedSecuritySnapshot.detach(snapshot);
+    }
+    static hasActiveSession() {
+        return this.STORAGE.getStore() !== undefined;
+    }
+    static protect(properties, snapshot) {
+        const session = this.STORAGE.getStore();
+        const protectedProperties = Object.create(Object.getPrototypeOf(properties));
+        for (const key of Reflect.ownKeys(properties)) {
+            if (key === "cache" || key === "join" || key === "lock" || key === "order" || key === "select" || key === "skip" || key === "take" || key === "withDeleted") {
+                continue;
+            }
+            const descriptor = Object.getOwnPropertyDescriptor(properties, key);
+            if (descriptor) {
+                Object.defineProperty(protectedProperties, key, descriptor);
+            }
+        }
+        for (const key of ["select", "skip"]) {
+            Object.defineProperty(protectedProperties, key, {
+                // eslint-disable-next-line @elsikora/typescript/naming-convention
+                configurable: true,
+                // eslint-disable-next-line @elsikora/typescript/naming-convention
+                enumerable: true,
+                value: undefined,
+                // eslint-disable-next-line @elsikora/typescript/naming-convention
+                writable: true,
+            });
+        }
+        this.defineValue(protectedProperties, "cache", false);
+        for (const key of ["order", "take"]) {
+            const descriptor = Object.getOwnPropertyDescriptor(snapshot, key);
+            if (descriptor) {
+                Object.defineProperty(protectedProperties, key, descriptor);
+            }
+        }
+        if (session) {
+            for (const key of ["join", "lock"]) {
+                this.defineValue(protectedProperties, key);
+            }
+            this.copyDataProperty(properties, protectedProperties, "withDeleted");
+            this.defineValue(protectedProperties, "where", this.resolveScopedWindowWhere(session));
+        }
+        else {
+            for (const key of ["join", "lock", "withDeleted"]) {
+                const descriptor = Object.getOwnPropertyDescriptor(snapshot, key);
+                if (descriptor) {
+                    Object.defineProperty(protectedProperties, key, descriptor);
+                }
+            }
+        }
+        return protectedProperties;
+    }
+    static async resolveBefore(properties, callback) {
+        const session = this.STORAGE.getStore();
+        if (!session) {
+            return (await callback(properties)) ?? properties;
+        }
+        if (session.state.isPrepared) {
+            return this.applyCandidateProperties(properties, session.state.candidateProperties);
+        }
+        session.state.isPrepared = true;
+        const beforeProperties = ApiControllerGeneratedSecuritySnapshot.detach(session.baseProperties);
+        const subscriberProperties = ApiControllerGeneratedSecuritySnapshot.detach((await callback(beforeProperties)) ?? beforeProperties);
+        this.assertSupportedCandidateProperties(subscriberProperties);
+        session.state.candidateProperties = this.createCandidateProperties(subscriberProperties);
+        this.assertStableCandidateWhere(session.state.candidateProperties.where);
+        session.state.isCandidateWhereScoped = ApiControllerGeneratedScopeWhereContract.contains(session.state.candidateProperties.where, session.baseProperties.where);
+        return this.applyCandidateProperties(subscriberProperties, session.state.candidateProperties);
+    }
+    static run(baseProperties, callback) {
+        this.assertStableCandidateWhere(baseProperties.where);
+        return this.STORAGE.run({
+            baseProperties: ApiControllerGeneratedSecuritySnapshot.detach(baseProperties),
+            state: { isPrepared: false },
+        }, callback);
+    }
+    static runWindow(windowWhere, callback) {
+        const session = this.STORAGE.getStore();
+        if (!session) {
+            return callback();
+        }
+        return this.STORAGE.run({
+            ...session,
+            windowWhere: ApiControllerGeneratedSecuritySnapshot.detach(windowWhere),
+        }, callback);
+    }
+    static applyCandidateProperties(properties, candidateProperties) {
+        const result = ApiControllerGeneratedSecuritySnapshot.detach(properties);
+        if (candidateProperties) {
+            for (const key of ["where", "withDeleted"]) {
+                const descriptor = Object.getOwnPropertyDescriptor(candidateProperties, key);
+                if (descriptor) {
+                    Object.defineProperty(result, key, ApiControllerGeneratedSecuritySnapshot.detach(descriptor));
+                }
+            }
+        }
+        return result;
+    }
+    static assertCanonicalFindOperator(value, isEqualOperator) {
+        const expectedKeys = ["@instanceof", "_getSql", "_multipleParameters", "_objectLiteralParameters", "_type", "_useParameter", "_value"];
+        const actualKeys = Reflect.ownKeys(value);
+        if (actualKeys.length !== expectedKeys.length || actualKeys.some((key) => typeof key !== "string" || !expectedKeys.includes(key))) {
+            throw ErrorException("CURSOR GET_LIST candidate WHERE contains a non-canonical TypeORM operator");
+        }
+        for (const key of expectedKeys) {
+            const descriptor = Object.getOwnPropertyDescriptor(value, key);
+            if (!descriptor || !("value" in descriptor) || !descriptor.configurable || !descriptor.enumerable || !descriptor.writable) {
+                throw ErrorException("CURSOR GET_LIST candidate WHERE contains a non-canonical TypeORM operator");
+            }
+        }
+        const expectedMarker = Symbol.for(isEqualOperator ? "EqualOperator" : "FindOperator");
+        const marker = Object.getOwnPropertyDescriptor(value, "@instanceof")?.value;
+        const type = Object.getOwnPropertyDescriptor(value, "_type")?.value;
+        const getSql = Object.getOwnPropertyDescriptor(value, "_getSql")?.value;
+        const objectLiteralParameters = Object.getOwnPropertyDescriptor(value, "_objectLiteralParameters")?.value;
+        if (marker !== expectedMarker || typeof type !== "string") {
+            throw ErrorException("CURSOR GET_LIST candidate WHERE contains a non-canonical TypeORM operator");
+        }
+        if (type === "raw") {
+            throw ErrorException("CURSOR GET_LIST candidate WHERE cannot contain raw SQL operators");
+        }
+        if (getSql !== undefined || objectLiteralParameters !== undefined) {
+            throw ErrorException("CURSOR GET_LIST candidate WHERE contains a non-canonical TypeORM operator");
+        }
+    }
+    static assertStableCandidateWhere(value, visited = new WeakSet()) {
+        if (typeof value === "function") {
+            throw ErrorException("CURSOR GET_LIST candidate WHERE cannot contain function-backed values");
+        }
+        if (!value || typeof value !== "object" || visited.has(value) || value instanceof ArrayBuffer || value instanceof Date || value instanceof RegExp) {
+            return;
+        }
+        if (ArrayBuffer.isView(value)) {
+            if (typeof SharedArrayBuffer !== "undefined" && value.buffer instanceof SharedArrayBuffer) {
+                throw ErrorException("CURSOR GET_LIST candidate WHERE cannot contain shared-memory values");
+            }
+            return;
+        }
+        visited.add(value);
+        const prototype = Object.getPrototypeOf(value);
+        const isFindOperator = InstanceChecker.isFindOperator(value);
+        if (isFindOperator) {
+            if (prototype !== EqualOperator.prototype && prototype !== FindOperator.prototype) {
+                throw ErrorException("CURSOR GET_LIST candidate WHERE contains an unsupported executable value");
+            }
+            this.assertCanonicalFindOperator(value, prototype === EqualOperator.prototype);
+        }
+        else if (!Array.isArray(value) && prototype !== null && prototype !== Object.prototype) {
+            throw ErrorException("CURSOR GET_LIST candidate WHERE contains an unsupported executable value");
+        }
+        for (const key of Reflect.ownKeys(value)) {
+            if (Array.isArray(value) && key === "length") {
+                continue;
+            }
+            const descriptor = Object.getOwnPropertyDescriptor(value, key);
+            if (!descriptor || !("value" in descriptor)) {
+                throw ErrorException("CURSOR GET_LIST candidate WHERE must contain data properties only");
+            }
+            this.assertStableCandidateWhere(descriptor.value, visited);
+        }
+    }
+    static assertSupportedCandidateProperties(properties) {
+        for (const key of ["join", "lock"]) {
+            const descriptor = ObjectFindPropertyDescriptor(properties, key);
+            if (descriptor && (!this.isDataProperty(descriptor) || descriptor.value !== undefined)) {
+                throw ErrorException(`CURSOR GET_LIST function subscriber cannot set ${key}`);
+            }
+        }
+        const withDeletedDescriptor = ObjectFindPropertyDescriptor(properties, "withDeleted");
+        if (withDeletedDescriptor && (!this.isDataProperty(withDeletedDescriptor) || (withDeletedDescriptor.value !== undefined && typeof withDeletedDescriptor.value !== "boolean"))) {
+            throw ErrorException("CURSOR GET_LIST function subscriber withDeleted must be a boolean data property");
+        }
+    }
+    static copyDataProperty(source, target, key) {
+        const descriptor = ObjectFindPropertyDescriptor(source, key);
+        if (!descriptor) {
+            this.defineValue(target, key);
+            return;
+        }
+        if (!this.isDataProperty(descriptor)) {
+            throw ErrorException(`Generated GET_MANY option ${String(key)} must be a data property`);
+        }
+        Object.defineProperty(target, key, ApiControllerGeneratedSecuritySnapshot.detach(descriptor));
+    }
+    static createCandidateProperties(properties) {
+        const candidateProperties = {};
+        for (const key of ["where", "withDeleted"]) {
+            this.copyDataProperty(properties, candidateProperties, key);
+        }
+        return ApiControllerGeneratedSecuritySnapshot.detach(candidateProperties);
+    }
+    static defineValue(target, key, value) {
+        Object.defineProperty(target, key, {
+            // eslint-disable-next-line @elsikora/typescript/naming-convention
+            configurable: true,
+            // eslint-disable-next-line @elsikora/typescript/naming-convention
+            enumerable: true,
+            value,
+            // eslint-disable-next-line @elsikora/typescript/naming-convention
+            writable: true,
+        });
+    }
+    static isDataProperty(descriptor) {
+        return "value" in descriptor;
+    }
+    static readWhere(properties) {
+        const descriptor = ObjectFindPropertyDescriptor(properties, "where");
+        if (!descriptor) {
+            return undefined;
+        }
+        if (!this.isDataProperty(descriptor)) {
+            throw ErrorException("Generated GET_MANY option where must be a data property");
+        }
+        const value = descriptor.value;
+        return value;
+    }
+    static resolveScopedWindowWhere(session) {
+        const baseWhere = this.readWhere(session.baseProperties);
+        const candidateWhere = session.state.candidateProperties ? this.readWhere(session.state.candidateProperties) : undefined;
+        const candidateScope = session.state.isCandidateWhereScoped ? candidateWhere : AuthorizationScopeMergeWhere(candidateWhere, baseWhere);
+        return AuthorizationScopeMergeWhere(ApiControllerGeneratedSecuritySnapshot.detach(candidateScope), ApiControllerGeneratedSecuritySnapshot.detach(session.windowWhere));
+    }
+}
+
+export { ApiControllerGeneratedGetManyContract };
+//# sourceMappingURL=get-many-contract.class.js.map

package/dist/esm/class/api/controller/generated/get-many-contract.class.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-many-contract.class.js","sources":["../../../../../../../src/class/api/controller/generated/get-many-contract.class.ts"],"sourcesContent":[null],"names":["NodeAsyncLocalStorage"],"mappings":";;;;;;;;AAeA;;;AAGG;MACU,qCAAqC,CAAA;AACzC,IAAA,OAAgB,OAAO,GAA6D,IAAIA,iBAAqB,EAAyC;IAEvJ,OAAO,cAAc,CAA2B,UAA4C,EAAA;AAClG,QAAA,MAAM,QAAQ,GAAqC;YAClD,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,IAAI,EAAE,UAAU,CAAC,IAAI;SACrB;QAED,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAU,EAAE;YAC3D,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC;QACjD;AAEA,QAAA,OAAO,sCAAsC,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC/D;AAEO,IAAA,OAAO,gBAAgB,GAAA;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,SAAS;IAC7C;AAEO,IAAA,OAAO,OAAO,CAA2B,UAA4C,EAAE,QAA0C,EAAA;QACvI,MAAM,OAAO,GAAsD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;AAC1F,QAAA,MAAM,mBAAmB,GAAqC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAkB,CAAqC;QAEnK,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;AAC9C,YAAA,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,aAAa,EAAE;gBAC5J;YACD;YAEA,MAAM,UAAU,GAAmC,MAAM,CAAC,wBAAwB,CAAC,UAAU,EAAE,GAAG,CAAC;YAEnG,IAAI,UAAU,EAAE;gBACf,MAAM,CAAC,cAAc,CAAC,mBAAmB,EAAE,GAAG,EAAE,UAAU,CAAC;YAC5D;QACD;QAEA,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAU,EAAE;AAC9C,YAAA,MAAM,CAAC,cAAc,CAAC,mBAAmB,EAAE,GAAG,EAAE;;AAE/C,gBAAA,YAAY,EAAE,IAAI;;AAElB,gBAAA,UAAU,EAAE,IAAI;AAChB,gBAAA,KAAK,EAAE,SAAS;;AAEhB,gBAAA,QAAQ,EAAE,IAAI;AACd,aAAA,CAAC;QACH;QAEA,IAAI,CAAC,WAAW,CAAC,mBAAmB,EAAE,OAAO,EAAE,KAAK,CAAC;QAErD,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAU,EAAE;YAC7C,MAAM,UAAU,GAAmC,MAAM,CAAC,wBAAwB,CAAC,QAAQ,EAAE,GAAG,CAAC;YAEjG,IAAI,UAAU,EAAE;gBACf,MAAM,CAAC,cAAc,CAAC,mBAAmB,EAAE,GAAG,EAAE,UAAU,CAAC;YAC5D;QACD;QAEA,IAAI,OAAO,EAAE;YACZ,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,CAAU,EAAE;AAC5C,gBAAA,IAAI,CAAC,WAAW,CAAC,mBAAmB,EAAE,GAAG,CAAC;YAC3C;YAEA,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,mBAAmB,EAAE,aAAa,CAAC;AACrE,YAAA,IAAI,CAAC,WAAW,CAAC,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,wBAAwB,CAAI,OAAO,CAAC,CAAC;QAC1F;aAAO;YACN,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAU,EAAE;gBAC3D,MAAM,UAAU,GAAmC,MAAM,CAAC,wBAAwB,CAAC,QAAQ,EAAE,GAAG,CAAC;gBAEjG,IAAI,UAAU,EAAE;oBACf,MAAM,CAAC,cAAc,CAAC,mBAAmB,EAAE,GAAG,EAAE,UAAU,CAAC;gBAC5D;YACD;QACD;AAEA,QAAA,OAAO,mBAAmB;IAC3B;AAEO,IAAA,aAAa,aAAa,CAA2B,UAA4C,EAAE,QAAiH,EAAA;QAC1N,MAAM,OAAO,GAAsD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;QAE1F,IAAI,CAAC,OAAO,EAAE;YACb,OAAO,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,KAAK,UAAU;QAClD;AAEA,QAAA,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE;AAC7B,YAAA,OAAO,IAAI,CAAC,wBAAwB,CAAI,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC;QACvF;AAEA,QAAA,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI;QAC/B,MAAM,gBAAgB,GAAqC,sCAAsC,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;AAChI,QAAA,MAAM,oBAAoB,GAAqC,sCAAsC,CAAC,MAAM,CAAC,CAAC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,KAAK,gBAAgB,CAAC;AAEpK,QAAA,IAAI,CAAC,kCAAkC,CAAC,oBAAoB,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC,yBAAyB,CAAC,oBAAoB,CAAkD;QACzI,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC;QACxE,OAAO,CAAC,KAAK,CAAC,sBAAsB,GAAG,wCAAwC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC;AAE/J,QAAA,OAAO,IAAI,CAAC,wBAAwB,CAAI,oBAAoB,EAAE,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACjG;AAEO,IAAA,OAAO,GAAG,CAA8B,cAAgD,EAAE,QAA0B,EAAA;AAC1H,QAAA,IAAI,CAAC,0BAA0B,CAAC,cAAc,CAAC,KAAK,CAAC;AAErD,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CACtB;AACC,YAAA,cAAc,EAAE,sCAAsC,CAAC,MAAM,CAAC,cAAc,CAAkD;AAC9H,YAAA,KAAK,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE;SAC5B,EACD,QAAQ,CACR;IACF;AAEO,IAAA,OAAO,SAAS,CAA8B,WAAsD,EAAE,QAA0B,EAAA;QACtI,MAAM,OAAO,GAAsD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;QAE1F,IAAI,CAAC,OAAO,EAAE;YACb,OAAO,QAAQ,EAAE;QAClB;AAEA,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CACtB;AACC,YAAA,GAAG,OAAO;AACV,YAAA,WAAW,EAAE,sCAAsC,CAAC,MAAM,CAAC,WAAW,CAAC;SACvE,EACD,QAAQ,CACR;IACF;AAEQ,IAAA,OAAO,wBAAwB,CAA2B,UAA4C,EAAE,mBAAsD,EAAA;QACrK,MAAM,MAAM,GAAqC,sCAAsC,CAAC,MAAM,CAAC,UAAU,CAAC;QAE1G,IAAI,mBAAmB,EAAE;YACxB,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAU,EAAE;gBACpD,MAAM,UAAU,GAAmC,MAAM,CAAC,wBAAwB,CAAC,mBAAmB,EAAE,GAAG,CAAC;gBAE5G,IAAI,UAAU,EAAE;AACf,oBAAA,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,sCAAsC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC9F;YACD;QACD;AAEA,QAAA,OAAO,MAAM;IACd;AAEQ,IAAA,OAAO,2BAA2B,CAAC,KAAa,EAAE,eAAwB,EAAA;AACjF,QAAA,MAAM,YAAY,GAA0B,CAAC,aAAa,EAAE,SAAS,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,CAAC;QAC7J,MAAM,UAAU,GAAuB,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;AAE7D,QAAA,IAAI,UAAU,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,GAAgB,KAAc,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE;AACxJ,YAAA,MAAM,cAAc,CAAC,2EAA2E,CAAC;QAClG;AAEA,QAAA,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE;YAC/B,MAAM,UAAU,GAAmC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC;YAE9F,IAAI,CAAC,UAAU,IAAI,EAAE,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;AAC1H,gBAAA,MAAM,cAAc,CAAC,2EAA2E,CAAC;YAClG;QACD;AAEA,QAAA,MAAM,cAAc,GAAW,MAAM,CAAC,GAAG,CAAC,eAAe,GAAG,eAAe,GAAG,cAAc,CAAC;AAC7F,QAAA,MAAM,MAAM,GAAY,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,KAAK;AACpF,QAAA,MAAM,IAAI,GAAY,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,KAAK;AAC5E,QAAA,MAAM,MAAM,GAAY,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,KAAK;AAChF,QAAA,MAAM,uBAAuB,GAAY,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,0BAA0B,CAAC,EAAE,KAAK;QAElH,IAAI,MAAM,KAAK,cAAc,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;AAC1D,YAAA,MAAM,cAAc,CAAC,2EAA2E,CAAC;QAClG;AAEA,QAAA,IAAI,IAAI,KAAK,KAAK,EAAE;AACnB,YAAA,MAAM,cAAc,CAAC,kEAAkE,CAAC;QACzF;QAEA,IAAI,MAAM,KAAK,SAAS,IAAI,uBAAuB,KAAK,SAAS,EAAE;AAClE,YAAA,MAAM,cAAc,CAAC,2EAA2E,CAAC;QAClG;IACD;IAEQ,OAAO,0BAA0B,CAAC,KAAc,EAAE,OAAA,GAA2B,IAAI,OAAO,EAAU,EAAA;AACzG,QAAA,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE;AAChC,YAAA,MAAM,cAAc,CAAC,uEAAuE,CAAC;QAC9F;QAEA,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,WAAW,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,YAAY,MAAM,EAAE;YAClJ;QACD;AAEA,QAAA,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;YAC9B,IAAI,OAAO,iBAAiB,KAAK,WAAW,IAAI,KAAK,CAAC,MAAM,YAAY,iBAAiB,EAAE;AAC1F,gBAAA,MAAM,cAAc,CAAC,qEAAqE,CAAC;YAC5F;YAEA;QACD;AAEA,QAAA,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QAClB,MAAM,SAAS,GAAkB,MAAM,CAAC,cAAc,CAAC,KAAK,CAAkB;QAC9E,MAAM,cAAc,GAAY,eAAe,CAAC,cAAc,CAAC,KAAK,CAAC;QAErE,IAAI,cAAc,EAAE;AACnB,YAAA,IAAI,SAAS,KAAK,aAAa,CAAC,SAAS,IAAI,SAAS,KAAK,YAAY,CAAC,SAAS,EAAE;AAClF,gBAAA,MAAM,cAAc,CAAC,0EAA0E,CAAC;YACjG;YAEA,IAAI,CAAC,2BAA2B,CAAC,KAAK,EAAE,SAAS,KAAK,aAAa,CAAC,SAAS,CAAC;QAC/E;AAAO,aAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,EAAE;AACzF,YAAA,MAAM,cAAc,CAAC,0EAA0E,CAAC;QACjG;QAEA,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;YACzC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,QAAQ,EAAE;gBAC7C;YACD;YAEA,MAAM,UAAU,GAAmC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC;YAE9F,IAAI,CAAC,UAAU,IAAI,EAAE,OAAO,IAAI,UAAU,CAAC,EAAE;AAC5C,gBAAA,MAAM,cAAc,CAAC,mEAAmE,CAAC;YAC1F;YAEA,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC;QAC3D;IACD;IAEQ,OAAO,kCAAkC,CAA2B,UAA4C,EAAA;QACvH,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,CAAU,EAAE;YAC5C,MAAM,UAAU,GAAmC,4BAA4B,CAAC,UAAU,EAAE,GAAG,CAAC;AAEhG,YAAA,IAAI,UAAU,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,EAAE;AACvF,gBAAA,MAAM,cAAc,CAAC,CAAA,+CAAA,EAAkD,GAAG,CAAA,CAAE,CAAC;YAC9E;QACD;QAEA,MAAM,qBAAqB,GAAmC,4BAA4B,CAAC,UAAU,EAAE,aAAa,CAAC;QAErH,IAAI,qBAAqB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC,KAAK,qBAAqB,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,qBAAqB,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,EAAE;AAC9K,YAAA,MAAM,cAAc,CAAC,iFAAiF,CAAC;QACxG;IACD;AAEQ,IAAA,OAAO,gBAAgB,CAAC,MAAc,EAAE,MAAc,EAAE,GAAgB,EAAA;QAC/E,MAAM,UAAU,GAAmC,4BAA4B,CAAC,MAAM,EAAE,GAAG,CAAC;QAE5F,IAAI,CAAC,UAAU,EAAE;AAChB,YAAA,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC;YAE7B;QACD;QAEA,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE;YACrC,MAAM,cAAc,CAAC,CAAA,0BAAA,EAA6B,MAAM,CAAC,GAAG,CAAC,CAAA,wBAAA,CAA0B,CAAC;QACzF;AAEA,QAAA,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,sCAAsC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC9F;IAEQ,OAAO,yBAAyB,CAA2B,UAA4C,EAAA;QAC9G,MAAM,mBAAmB,GAAqC,EAAE;QAEhE,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAU,EAAE;YACpD,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,mBAAmB,EAAE,GAAG,CAAC;QAC5D;AAEA,QAAA,OAAO,sCAAsC,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAC1E;AAEQ,IAAA,OAAO,WAAW,CAAC,MAAc,EAAE,GAAgB,EAAE,KAAe,EAAA;AAC3E,QAAA,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE;;AAElC,YAAA,YAAY,EAAE,IAAI;;AAElB,YAAA,UAAU,EAAE,IAAI;YAChB,KAAK;;AAEL,YAAA,QAAQ,EAAE,IAAI;AACd,SAAA,CAAC;IACH;IAEQ,OAAO,cAAc,CAAC,UAA8B,EAAA;QAC3D,OAAO,OAAO,IAAI,UAAU;IAC7B;IAEQ,OAAO,SAAS,CAAC,UAAyD,EAAA;QACjF,MAAM,UAAU,GAAmC,4BAA4B,CAAC,UAAU,EAAE,OAAO,CAAC;QAEpG,IAAI,CAAC,UAAU,EAAE;AAChB,YAAA,OAAO,SAAS;QACjB;QAEA,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE;AACrC,YAAA,MAAM,cAAc,CAAC,yDAAyD,CAAC;QAChF;AAEA,QAAA,MAAM,KAAK,GAAY,UAAU,CAAC,KAAK;AAEvC,QAAA,OAAO,KAA+D;IACvE;IAEQ,OAAO,wBAAwB,CAA2B,OAA8C,EAAA;QAC/G,MAAM,SAAS,GAA2D,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC;QAChH,MAAM,cAAc,GAA2D,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,SAAS;QAChL,MAAM,cAAc,GAA2D,OAAO,CAAC,KAAK,CAAC,sBAAsB,GAAG,cAAc,GAAG,4BAA4B,CAAC,cAAc,EAAE,SAAS,CAAC;AAE9L,QAAA,OAAO,4BAA4B,CAAC,sCAAsC,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,sCAAsC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACvK;;;;;"}

package/dist/esm/class/api/controller/generated/index.d.ts

@@ -0,0 +1,3 @@
+export { ApiControllerGeneratedGetManyContract } from './get-many-contract.class';
+export { ApiControllerGeneratedReadScopeStorage } from './read-scope-storage.class';
+export { ApiControllerGeneratedSecuritySnapshot } from './security-snapshot.class';

package/dist/esm/class/api/controller/generated/read-scope-storage.class.d.ts

@@ -0,0 +1,19 @@
+import { IApiBaseEntity } from '../../../../interface/api-base-entity.interface';
+import { TApiAuthorizationScopeWhere } from '../../../../type/class/api/authorization/scope-where.type';
+import { TApiControllerGeneratedScopeFunctionType } from '../../../../type/class/api/controller/generated/scope-function-type.type';
+import { EApiFunctionType } from '../../../../enum/decorator/api';
+/**
+ * Carries the final generated-route read predicate to exactly one decorated service call.
+ * This is intentionally internal: direct service calls retain their ordinary subscriber contract.
+ */
+export declare class ApiControllerGeneratedReadScopeStorage {
+    private static readonly STORAGE;
+    static claim<E extends IApiBaseEntity>(functionType: TApiControllerGeneratedScopeFunctionType, input: object): TApiAuthorizationScopeWhere<E> | undefined;
+    static isWriteHydration(functionType: EApiFunctionType, input: object): boolean;
+    static protect<E extends IApiBaseEntity, T extends {
+        where?: TApiAuthorizationScopeWhere<E>;
+    }>(properties: T, mandatoryWhere: TApiAuthorizationScopeWhere<E>): T;
+    static run<E extends IApiBaseEntity, R>(functionType: TApiControllerGeneratedScopeFunctionType, input: object, where: TApiAuthorizationScopeWhere<E>, callback: () => Promise<R>): Promise<R>;
+    static runWriteHydration<E extends IApiBaseEntity, R>(input: object, where: TApiAuthorizationScopeWhere<E>, callback: () => Promise<R>): Promise<R>;
+    private static runWithEntry;
+}

package/dist/esm/class/api/controller/generated/read-scope-storage.class.js

@@ -0,0 +1,118 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { ApiControllerGeneratedScopeWhereContract } from './scope-where-contract.class.js';
+import { ApiControllerGeneratedSecuritySnapshot } from './security-snapshot.class.js';
+import '../../../../enum/decorator/api/action.enum.js';
+import '../../../../enum/decorator/api/authentication-type.enum.js';
+import '../../../../enum/decorator/api/controller/get-list/query/filter/missing-behavior.enum.js';
+import '../../../../enum/decorator/api/controller/get-list/query/pagination-mode.enum.js';
+import '../../../../enum/decorator/api/controller/get-list/query/unlisted-fields.enum.js';
+import '../../../../enum/decorator/api/controller/relation-reference-shape.enum.js';
+import '../../../../enum/decorator/api/controller/request/target.enum.js';
+import '../../../../enum/decorator/api/controller/request/transformer-type.enum.js';
+import '../../../../enum/decorator/api/controller/response-target.enum.js';
+import '../../../../enum/decorator/api/dto-type.enum.js';
+import '../../../../enum/decorator/api/function/context-storage-kind.enum.js';
+import '../../../../enum/decorator/api/function/subscriber-transaction-expectation.enum.js';
+import '../../../../enum/decorator/api/function/transaction/event-status.enum.js';
+import '../../../../enum/decorator/api/function/transaction/failure-stage.enum.js';
+import '../../../../enum/decorator/api/function/transaction/mode.enum.js';
+import '../../../../enum/decorator/api/function/transaction/outcome.enum.js';
+import '../../../../enum/decorator/api/function/transaction/owner-kind.enum.js';
+import '../../../../enum/decorator/api/function/transaction/trace-type.enum.js';
+import { EApiFunctionType } from '../../../../enum/decorator/api/function/type.enum.js';
+import '../../../../enum/decorator/api/on-type.enum.js';
+import '../../../../enum/decorator/api/property/data-type.enum.js';
+import '../../../../enum/decorator/api/property/date/identifier.enum.js';
+import '../../../../enum/decorator/api/property/date/type.enum.js';
+import '../../../../enum/decorator/api/property/desribe-type.enum.js';
+import '../../../../enum/decorator/api/property/number-type.enum.js';
+import '../../../../enum/decorator/api/property/string-type.enum.js';
+import '../../../../enum/decorator/api/route/subscriber-authorization-expectation.enum.js';
+import '../../../../enum/decorator/api/route/type.enum.js';
+import { AuthorizationScopeMergeWhere } from '../../../../utility/authorization/scope-merge-where.utility.js';
+import { ErrorException } from '../../../../utility/error/exception.utility.js';
+
+/**
+ * Carries the final generated-route read predicate to exactly one decorated service call.
+ * This is intentionally internal: direct service calls retain their ordinary subscriber contract.
+ */
+class ApiControllerGeneratedReadScopeStorage {
+    static STORAGE = new AsyncLocalStorage();
+    static claim(functionType, input) {
+        const entry = this.STORAGE.getStore();
+        if (entry?.functionType !== functionType || entry.input !== input) {
+            return undefined;
+        }
+        if (entry.isClaimed) {
+            throw ErrorException("Generated mandatory scope must be claimed exactly once");
+        }
+        entry.isClaimed = true;
+        return entry.where;
+    }
+    static isWriteHydration(functionType, input) {
+        const entry = this.STORAGE.getStore();
+        return Boolean(entry?.isWriteHydration && entry.functionType === functionType && entry.input === input && entry.isClaimed);
+    }
+    static protect(properties, mandatoryWhere) {
+        const whereDescriptor = Object.getOwnPropertyDescriptor(properties, "where");
+        if (whereDescriptor && (!whereDescriptor.enumerable || !("value" in whereDescriptor))) {
+            throw ErrorException("Generated read function subscriber WHERE must be an enumerable data property");
+        }
+        const protectedProperties = Object.create(Object.getPrototypeOf(properties));
+        for (const key of Reflect.ownKeys(properties)) {
+            if (key === "cache" || key === "where") {
+                continue;
+            }
+            const descriptor = Object.getOwnPropertyDescriptor(properties, key);
+            if (descriptor) {
+                Object.defineProperty(protectedProperties, key, descriptor);
+            }
+        }
+        Object.defineProperty(protectedProperties, "cache", {
+            // eslint-disable-next-line @elsikora/typescript/naming-convention
+            configurable: true,
+            // eslint-disable-next-line @elsikora/typescript/naming-convention
+            enumerable: true,
+            // eslint-disable-next-line @elsikora/typescript/naming-convention
+            value: false,
+            // eslint-disable-next-line @elsikora/typescript/naming-convention
+            writable: true,
+        });
+        Object.defineProperty(protectedProperties, "where", {
+            // eslint-disable-next-line @elsikora/typescript/naming-convention
+            configurable: true,
+            // eslint-disable-next-line @elsikora/typescript/naming-convention
+            enumerable: true,
+            value: ApiControllerGeneratedScopeWhereContract.merge(whereDescriptor && "value" in whereDescriptor ? whereDescriptor.value : undefined, mandatoryWhere),
+            // eslint-disable-next-line @elsikora/typescript/naming-convention
+            writable: true,
+        });
+        return protectedProperties;
+    }
+    static run(functionType, input, where, callback) {
+        return this.runWithEntry(functionType, input, where, callback, false);
+    }
+    static runWriteHydration(input, where, callback) {
+        return this.runWithEntry(EApiFunctionType.GET, input, where, callback, true);
+    }
+    static runWithEntry(functionType, input, where, callback, isWriteHydration) {
+        const normalizedWhere = AuthorizationScopeMergeWhere(undefined, ApiControllerGeneratedSecuritySnapshot.detach(where));
+        const entry = {
+            functionType,
+            input,
+            isClaimed: false,
+            isWriteHydration,
+            where: normalizedWhere,
+        };
+        return this.STORAGE.run(entry, async () => {
+            const result = await callback();
+            if (!entry.isClaimed) {
+                throw ErrorException("Generated service function did not claim its mandatory scope");
+            }
+            return result;
+        });
+    }
+}
+
+export { ApiControllerGeneratedReadScopeStorage };
+//# sourceMappingURL=read-scope-storage.class.js.map

package/dist/esm/class/api/controller/generated/read-scope-storage.class.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-scope-storage.class.js","sources":["../../../../../../../src/class/api/controller/generated/read-scope-storage.class.ts"],"sourcesContent":[null],"names":["NodeAsyncLocalStorage"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAeA;;;AAGG;MACU,sCAAsC,CAAA;AAC1C,IAAA,OAAgB,OAAO,GAA6D,IAAIA,iBAAqB,EAAyC;AAEvJ,IAAA,OAAO,KAAK,CAA2B,YAAsD,EAAE,KAAa,EAAA;QAClH,MAAM,KAAK,GAAsD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;AAExF,QAAA,IAAI,KAAK,EAAE,YAAY,KAAK,YAAY,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE;AAClE,YAAA,OAAO,SAAS;QACjB;AAEA,QAAA,IAAI,KAAK,CAAC,SAAS,EAAE;AACpB,YAAA,MAAM,cAAc,CAAC,wDAAwD,CAAC;QAC/E;AAEA,QAAA,KAAK,CAAC,SAAS,GAAG,IAAI;QAEtB,OAAO,KAAK,CAAC,KAAK;IACnB;AAEO,IAAA,OAAO,gBAAgB,CAAC,YAA8B,EAAE,KAAa,EAAA;QAC3E,MAAM,KAAK,GAAsD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;QAExF,OAAO,OAAO,CAAC,KAAK,EAAE,gBAAgB,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,CAAC,SAAS,CAAC;IAC3H;AAEO,IAAA,OAAO,OAAO,CAAiF,UAAa,EAAE,cAA8C,EAAA;QAClK,MAAM,eAAe,GAAmC,MAAM,CAAC,wBAAwB,CAAC,UAAU,EAAE,OAAO,CAAC;AAE5G,QAAA,IAAI,eAAe,KAAK,CAAC,eAAe,CAAC,UAAU,IAAI,EAAE,OAAO,IAAI,eAAe,CAAC,CAAC,EAAE;AACtF,YAAA,MAAM,cAAc,CAAC,8EAA8E,CAAC;QACrG;AAEA,QAAA,MAAM,mBAAmB,GAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAkB,CAAM;QAErG,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;YAC9C,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,OAAO,EAAE;gBACvC;YACD;YAEA,MAAM,UAAU,GAAmC,MAAM,CAAC,wBAAwB,CAAC,UAAU,EAAE,GAAG,CAAC;YAEnG,IAAI,UAAU,EAAE;gBACf,MAAM,CAAC,cAAc,CAAC,mBAAmB,EAAE,GAAG,EAAE,UAAU,CAAC;YAC5D;QACD;AAEA,QAAA,MAAM,CAAC,cAAc,CAAC,mBAAmB,EAAE,OAAO,EAAE;;AAEnD,YAAA,YAAY,EAAE,IAAI;;AAElB,YAAA,UAAU,EAAE,IAAI;;AAEhB,YAAA,KAAK,EAAE,KAAK;;AAEZ,YAAA,QAAQ,EAAE,IAAI;AACd,SAAA,CAAC;AAEF,QAAA,MAAM,CAAC,cAAc,CAAC,mBAAmB,EAAE,OAAO,EAAE;;AAEnD,YAAA,YAAY,EAAE,IAAI;;AAElB,YAAA,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,wCAAwC,CAAC,KAAK,CAAC,eAAe,IAAI,OAAO,IAAI,eAAe,GAAI,eAAe,CAAC,KAAwC,GAAG,SAAS,EAAE,cAAc,CAAC;;AAE5L,YAAA,QAAQ,EAAE,IAAI;AACd,SAAA,CAAC;AAEF,QAAA,OAAO,mBAAmB;IAC3B;IAEO,OAAO,GAAG,CAA8B,YAAsD,EAAE,KAAa,EAAE,KAAqC,EAAE,QAA0B,EAAA;AACtL,QAAA,OAAO,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC;IACtE;AAEO,IAAA,OAAO,iBAAiB,CAA8B,KAAa,EAAE,KAAqC,EAAE,QAA0B,EAAA;AAC5I,QAAA,OAAO,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC;IAC7E;IAEQ,OAAO,YAAY,CAA8B,YAAsD,EAAE,KAAa,EAAE,KAAqC,EAAE,QAA0B,EAAE,gBAAyB,EAAA;AAC3N,QAAA,MAAM,eAAe,GAAmC,4BAA4B,CAAC,SAAS,EAAE,sCAAsC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAErJ,QAAA,MAAM,KAAK,GAA0C;YACpD,YAAY;YACZ,KAAK;AACL,YAAA,SAAS,EAAE,KAAK;YAChB,gBAAgB;AAChB,YAAA,KAAK,EAAE,eAAe;SACtB;QAED,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,YAAuB;AACrD,YAAA,MAAM,MAAM,GAAM,MAAM,QAAQ,EAAE;AAElC,YAAA,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;AACrB,gBAAA,MAAM,cAAc,CAAC,8DAA8D,CAAC;YACrF;AAEA,YAAA,OAAO,MAAM;AACd,QAAA,CAAC,CAAC;IACH;;;;;"}

package/dist/esm/class/api/controller/generated/relation-cache-contract.class.d.ts

@@ -0,0 +1,11 @@
+import { IApiBaseEntity } from '../../../../interface/api-base-entity.interface';
+import { FindManyOptions, FindOneOptions, Repository } from 'typeorm';
+/**
+ * Rejects the TypeORM relation-loader cache combination that cannot inherit a
+ * generated mandatory read's `cache: false` root-query guarantee.
+ */
+export declare class ApiControllerGeneratedRelationCacheContract {
+    static assertSafe<E extends IApiBaseEntity>(repository: Repository<E>, properties: FindManyOptions<E> | FindOneOptions<E>): void;
+    private static hasRequestedRelations;
+    private static readDataProperty;
+}

package/dist/esm/class/api/controller/generated/relation-cache-contract.class.js

@@ -0,0 +1,68 @@
+import { ErrorException } from '../../../../utility/error/exception.utility.js';
+import { ObjectFindPropertyDescriptor } from '../../../../utility/object-find-property-descriptor.utility.js';
+
+/**
+ * Rejects the TypeORM relation-loader cache combination that cannot inherit a
+ * generated mandatory read's `cache: false` root-query guarantee.
+ */
+class ApiControllerGeneratedRelationCacheContract {
+    static assertSafe(repository, properties) {
+        if (!this.hasRequestedRelations(properties)) {
+            return;
+        }
+        const dataSourceOptions = repository.manager.connection.options;
+        const requestedRelationLoadStrategy = this.readDataProperty(properties, "relationLoadStrategy");
+        const defaultRelationLoadStrategy = this.readDataProperty(dataSourceOptions, "relationLoadStrategy");
+        for (const strategy of [requestedRelationLoadStrategy, defaultRelationLoadStrategy]) {
+            if (strategy && strategy !== "join" && strategy !== "query") {
+                throw ErrorException("Generated mandatory read relationLoadStrategy must be join or query");
+            }
+        }
+        // TypeORM inherits the data-source strategy for every falsy per-query value.
+        // eslint-disable-next-line @elsikora/typescript/prefer-nullish-coalescing
+        const relationLoadStrategy = requestedRelationLoadStrategy || defaultRelationLoadStrategy;
+        if (relationLoadStrategy !== "query") {
+            return;
+        }
+        const cache = this.readDataProperty(dataSourceOptions, "cache");
+        if (cache && typeof cache === "object" && Boolean(this.readDataProperty(cache, "alwaysEnabled"))) {
+            throw ErrorException('Generated mandatory reads cannot load relations with relationLoadStrategy "query" while TypeORM query cache is always enabled');
+        }
+    }
+    static hasRequestedRelations(properties) {
+        const descriptor = ObjectFindPropertyDescriptor(properties, "relations");
+        if (!descriptor) {
+            return false;
+        }
+        if (!("value" in descriptor)) {
+            return true;
+        }
+        const relationsValue = descriptor.value;
+        if (Array.isArray(relationsValue)) {
+            return relationsValue.length > 0;
+        }
+        if (!relationsValue || typeof relationsValue !== "object") {
+            return false;
+        }
+        for (const key of Reflect.ownKeys(relationsValue)) {
+            const relationDescriptor = Object.getOwnPropertyDescriptor(relationsValue, key);
+            if (!relationDescriptor || !("value" in relationDescriptor) || relationDescriptor.value === true || typeof relationDescriptor.value === "string" || (relationDescriptor.value !== null && typeof relationDescriptor.value === "object")) {
+                return true;
+            }
+        }
+        return false;
+    }
+    static readDataProperty(source, key) {
+        const descriptor = ObjectFindPropertyDescriptor(source, key);
+        if (!descriptor) {
+            return undefined;
+        }
+        if (!("value" in descriptor)) {
+            throw ErrorException(`Generated mandatory read option ${String(key)} must be a data property`);
+        }
+        return descriptor.value;
+    }
+}
+
+export { ApiControllerGeneratedRelationCacheContract };
+//# sourceMappingURL=relation-cache-contract.class.js.map

package/dist/esm/class/api/controller/generated/relation-cache-contract.class.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relation-cache-contract.class.js","sources":["../../../../../../../src/class/api/controller/generated/relation-cache-contract.class.ts"],"sourcesContent":[null],"names":[],"mappings":";;;AAMA;;;AAGG;MACU,2CAA2C,CAAA;AAChD,IAAA,OAAO,UAAU,CAA2B,UAAyB,EAAE,UAAkD,EAAA;QAC/H,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,EAAE;YAC5C;QACD;QAEA,MAAM,iBAAiB,GAAW,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO;QACvE,MAAM,6BAA6B,GAAY,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,sBAAsB,CAAC;QACxG,MAAM,2BAA2B,GAAY,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;QAE7G,KAAK,MAAM,QAAQ,IAAI,CAAC,6BAA6B,EAAE,2BAA2B,CAAC,EAAE;YACpF,IAAI,QAAQ,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,OAAO,EAAE;AAC5D,gBAAA,MAAM,cAAc,CAAC,qEAAqE,CAAC;YAC5F;QACD;;;AAIA,QAAA,MAAM,oBAAoB,GAAY,6BAA6B,IAAI,2BAA2B;AAElG,QAAA,IAAI,oBAAoB,KAAK,OAAO,EAAE;YACrC;QACD;QAEA,MAAM,KAAK,GAAY,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,OAAO,CAAC;AAExE,QAAA,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,EAAE;AACjG,YAAA,MAAM,cAAc,CAAC,+HAA+H,CAAC;QACtJ;IACD;IAEQ,OAAO,qBAAqB,CAAC,UAAkB,EAAA;QACtD,MAAM,UAAU,GAAmC,4BAA4B,CAAC,UAAU,EAAE,WAAW,CAAC;QAExG,IAAI,CAAC,UAAU,EAAE;AAChB,YAAA,OAAO,KAAK;QACb;AAEA,QAAA,IAAI,EAAE,OAAO,IAAI,UAAU,CAAC,EAAE;AAC7B,YAAA,OAAO,IAAI;QACZ;AAEA,QAAA,MAAM,cAAc,GAAY,UAAU,CAAC,KAAK;AAEhD,QAAA,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE;AAClC,YAAA,OAAO,cAAc,CAAC,MAAM,GAAG,CAAC;QACjC;QAEA,IAAI,CAAC,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE;AAC1D,YAAA,OAAO,KAAK;QACb;QAEA,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE;YAClD,MAAM,kBAAkB,GAAmC,MAAM,CAAC,wBAAwB,CAAC,cAAc,EAAE,GAAG,CAAC;AAE/G,YAAA,IAAI,CAAC,kBAAkB,IAAI,EAAE,OAAO,IAAI,kBAAkB,CAAC,IAAI,kBAAkB,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,kBAAkB,CAAC,KAAK,KAAK,QAAQ,KAAK,kBAAkB,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,kBAAkB,CAAC,KAAK,KAAK,QAAQ,CAAC,EAAE;AACxO,gBAAA,OAAO,IAAI;YACZ;QACD;AAEA,QAAA,OAAO,KAAK;IACb;AAEQ,IAAA,OAAO,gBAAgB,CAAC,MAAc,EAAE,GAAgB,EAAA;QAC/D,MAAM,UAAU,GAAmC,4BAA4B,CAAC,MAAM,EAAE,GAAG,CAAC;QAE5F,IAAI,CAAC,UAAU,EAAE;AAChB,YAAA,OAAO,SAAS;QACjB;AAEA,QAAA,IAAI,EAAE,OAAO,IAAI,UAAU,CAAC,EAAE;YAC7B,MAAM,cAAc,CAAC,CAAA,gCAAA,EAAmC,MAAM,CAAC,GAAG,CAAC,CAAA,wBAAA,CAA0B,CAAC;QAC/F;QAEA,OAAO,UAAU,CAAC,KAAK;IACxB;AACA;;;;"}

package/dist/esm/class/api/controller/generated/scope-where-contract.class.d.ts

@@ -0,0 +1,14 @@
+import { IApiBaseEntity } from '../../../../interface/api-base-entity.interface';
+import { TApiAuthorizationScopeWhere } from '../../../../type/class/api/authorization/scope-where.type';
+/**
+ * Merges subscriber WHERE criteria with a generated mandatory scope without
+ * repeatedly expanding an already-contained OR scope.
+ */
+export declare class ApiControllerGeneratedScopeWhereContract {
+    static contains<E extends IApiBaseEntity>(candidateWhere: TApiAuthorizationScopeWhere<E>, mandatoryWhere: TApiAuthorizationScopeWhere<E>): boolean;
+    static merge<E extends IApiBaseEntity>(candidateWhere: TApiAuthorizationScopeWhere<E>, mandatoryWhere: TApiAuthorizationScopeWhere<E>): TApiAuthorizationScopeWhere<E>;
+    private static branchContains;
+    private static getOwnEnumerableDataEntries;
+    private static isNestedWhere;
+    private static valueContains;
+}

package/dist/esm/class/api/controller/generated/scope-where-contract.class.js

@@ -0,0 +1,66 @@
+import { isDeepStrictEqual } from 'node:util';
+import { AuthorizationScopeMergeWhere } from '../../../../utility/authorization/scope-merge-where.utility.js';
+import { InstanceChecker } from 'typeorm';
+
+/**
+ * Merges subscriber WHERE criteria with a generated mandatory scope without
+ * repeatedly expanding an already-contained OR scope.
+ */
+class ApiControllerGeneratedScopeWhereContract {
+    static contains(candidateWhere, mandatoryWhere) {
+        if (!mandatoryWhere) {
+            return true;
+        }
+        if (!candidateWhere) {
+            return false;
+        }
+        const candidateBranches = Array.isArray(candidateWhere) ? candidateWhere : [candidateWhere];
+        const mandatoryBranches = Array.isArray(mandatoryWhere) ? mandatoryWhere : [mandatoryWhere];
+        return candidateBranches.length > 0 && mandatoryBranches.length > 0 && candidateBranches.every((candidateBranch) => mandatoryBranches.some((mandatoryBranch) => this.branchContains(candidateBranch, mandatoryBranch)));
+    }
+    static merge(candidateWhere, mandatoryWhere) {
+        const normalizedCandidate = AuthorizationScopeMergeWhere(undefined, candidateWhere);
+        return this.contains(normalizedCandidate, mandatoryWhere) ? normalizedCandidate : AuthorizationScopeMergeWhere(normalizedCandidate, mandatoryWhere);
+    }
+    static branchContains(candidate, mandatory) {
+        const candidateEntries = this.getOwnEnumerableDataEntries(candidate);
+        const mandatoryEntries = this.getOwnEnumerableDataEntries(mandatory);
+        if (!candidateEntries || !mandatoryEntries) {
+            return false;
+        }
+        const candidateValues = new Map(candidateEntries);
+        return mandatoryEntries.every(([key, mandatoryValue]) => candidateValues.has(key) && this.valueContains(candidateValues.get(key), mandatoryValue));
+    }
+    static getOwnEnumerableDataEntries(value) {
+        const entries = [];
+        for (const key of Reflect.ownKeys(value)) {
+            const descriptor = Object.getOwnPropertyDescriptor(value, key);
+            if (!descriptor?.enumerable || !("value" in descriptor)) {
+                return undefined;
+            }
+            entries.push([key, descriptor.value]);
+        }
+        return entries;
+    }
+    static isNestedWhere(value) {
+        return Boolean(value && typeof value === "object" && !Array.isArray(value) && !(value instanceof Date) && !ArrayBuffer.isView(value) && !InstanceChecker.isFindOperator(value));
+    }
+    static valueContains(candidate, mandatory) {
+        if (Array.isArray(candidate) || Array.isArray(mandatory)) {
+            if (!Array.isArray(candidate) || !Array.isArray(mandatory)) {
+                return false;
+            }
+            return candidate.every((candidateBranch) => this.isNestedWhere(candidateBranch) && mandatory.some((mandatoryBranch) => this.isNestedWhere(mandatoryBranch) && this.branchContains(candidateBranch, mandatoryBranch)));
+        }
+        if (this.isNestedWhere(candidate)) {
+            return this.isNestedWhere(mandatory) && this.branchContains(candidate, mandatory);
+        }
+        if (this.isNestedWhere(mandatory)) {
+            return false;
+        }
+        return isDeepStrictEqual(candidate, mandatory);
+    }
+}
+
+export { ApiControllerGeneratedScopeWhereContract };
+//# sourceMappingURL=scope-where-contract.class.js.map

package/dist/esm/class/api/controller/generated/scope-where-contract.class.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-where-contract.class.js","sources":["../../../../../../../src/class/api/controller/generated/scope-where-contract.class.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAQA;;;AAGG;MACU,wCAAwC,CAAA;AAC7C,IAAA,OAAO,QAAQ,CAA2B,cAA8C,EAAE,cAA8C,EAAA;QAC9I,IAAI,CAAC,cAAc,EAAE;AACpB,YAAA,OAAO,IAAI;QACZ;QAEA,IAAI,CAAC,cAAc,EAAE;AACpB,YAAA,OAAO,KAAK;QACb;AAEA,QAAA,MAAM,iBAAiB,GAAkB,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,cAAc,GAAG,CAAC,cAAc,CAAC;AAC1G,QAAA,MAAM,iBAAiB,GAAkB,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,cAAc,GAAG,CAAC,cAAc,CAAC;AAE1G,QAAA,OAAO,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAC,eAAuB,KAAc,iBAAiB,CAAC,IAAI,CAAC,CAAC,eAAuB,KAAc,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC;IAC1P;AAEO,IAAA,OAAO,KAAK,CAA2B,cAA8C,EAAE,cAA8C,EAAA;QAC3I,MAAM,mBAAmB,GAAmC,4BAA4B,CAAC,SAAS,EAAE,cAAc,CAAC;QAEnH,OAAO,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,cAAc,CAAC,GAAG,mBAAmB,GAAG,4BAA4B,CAAC,mBAAmB,EAAE,cAAc,CAAC;IACpJ;AAEQ,IAAA,OAAO,cAAc,CAAC,SAAiB,EAAE,SAAiB,EAAA;QACjE,MAAM,gBAAgB,GAA8C,IAAI,CAAC,2BAA2B,CAAC,SAAS,CAAC;QAC/G,MAAM,gBAAgB,GAA8C,IAAI,CAAC,2BAA2B,CAAC,SAAS,CAAC;AAE/G,QAAA,IAAI,CAAC,gBAAgB,IAAI,CAAC,gBAAgB,EAAE;AAC3C,YAAA,OAAO,KAAK;QACb;AAEA,QAAA,MAAM,eAAe,GAA8B,IAAI,GAAG,CAAuB,gBAAgB,CAAC;AAElG,QAAA,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,cAAc,CAAyB,KAAc,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,CAAC;IACpL;IAEQ,OAAO,2BAA2B,CAAC,KAAa,EAAA;QACvD,MAAM,OAAO,GAAkC,EAAE;QAEjD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;YACzC,MAAM,UAAU,GAAmC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC;AAE9F,YAAA,IAAI,CAAC,UAAU,EAAE,UAAU,IAAI,EAAE,OAAO,IAAI,UAAU,CAAC,EAAE;AACxD,gBAAA,OAAO,SAAS;YACjB;YAEA,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QACtC;AAEA,QAAA,OAAO,OAAO;IACf;IAEQ,OAAO,aAAa,CAAC,KAAc,EAAA;AAC1C,QAAA,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAChL;AAEQ,IAAA,OAAO,aAAa,CAAC,SAAkB,EAAE,SAAkB,EAAA;AAClE,QAAA,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;AACzD,YAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;AAC3D,gBAAA,OAAO,KAAK;YACb;AAEA,YAAA,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,eAAwB,KAAc,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,eAAwB,KAAc,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC;QAC1P;AAEA,QAAA,IAAI,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE;AAClC,YAAA,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC;QAClF;AAEA,QAAA,IAAI,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE;AAClC,YAAA,OAAO,KAAK;QACb;AAEA,QAAA,OAAO,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC;IAC/C;AACA;;;;"}

package/dist/esm/class/api/controller/generated/security-snapshot.class.d.ts

@@ -0,0 +1,14 @@
+import { IApiBaseEntity } from '../../../../interface/api-base-entity.interface';
+import { IApiAuthorizationDecision } from '../../../../interface/class/api/authorization';
+import { TApiAuthorizationScopeWhere } from '../../../../type/class/api/authorization/scope-where.type';
+/**
+ * Owns the generated-route authorization decision used after guard execution.
+ * Subscriber-facing decisions are detached views and can never mutate this snapshot.
+ */
+export declare class ApiControllerGeneratedSecuritySnapshot {
+    static create<E extends IApiBaseEntity, R>(decision: IApiAuthorizationDecision<E, R> | undefined): IApiAuthorizationDecision<E, R> | undefined;
+    static createMutableScopeWhere<E extends IApiBaseEntity, R>(snapshot: IApiAuthorizationDecision<E, R> | undefined): TApiAuthorizationScopeWhere<E>;
+    static createSubscriberView<E extends IApiBaseEntity, R>(snapshot: IApiAuthorizationDecision<E, R> | undefined, resource?: E): IApiAuthorizationDecision<E, R> | undefined;
+    static detach<T>(value: T): T;
+    static withResource<E extends IApiBaseEntity, R>(snapshot: IApiAuthorizationDecision<E, R> | undefined, resource: E | undefined): IApiAuthorizationDecision<E, R> | undefined;
+}