@elsikora/nestjs-crud-automator 3.0.2 → 4.0.0-dev.2

package/dist/cjs/class/api/controller/generated/relation-cache-contract.class.js

@@ -0,0 +1,70 @@
+'use strict';
+
+var exception_utility = require('../../../../utility/error/exception.utility.js');
+var objectFindPropertyDescriptor_utility = require('../../../../utility/object-find-property-descriptor.utility.js');
+
+/**
+ * Rejects the TypeORM relation-loader cache combination that cannot inherit a
+ * generated mandatory read's `cache: false` root-query guarantee.
+ */
+class ApiControllerGeneratedRelationCacheContract {
+    static assertSafe(repository, properties) {
+        if (!this.hasRequestedRelations(properties)) {
+            return;
+        }
+        const dataSourceOptions = repository.manager.connection.options;
+        const requestedRelationLoadStrategy = this.readDataProperty(properties, "relationLoadStrategy");
+        const defaultRelationLoadStrategy = this.readDataProperty(dataSourceOptions, "relationLoadStrategy");
+        for (const strategy of [requestedRelationLoadStrategy, defaultRelationLoadStrategy]) {
+            if (strategy && strategy !== "join" && strategy !== "query") {
+                throw exception_utility.ErrorException("Generated mandatory read relationLoadStrategy must be join or query");
+            }
+        }
+        // TypeORM inherits the data-source strategy for every falsy per-query value.
+        // eslint-disable-next-line @elsikora/typescript/prefer-nullish-coalescing
+        const relationLoadStrategy = requestedRelationLoadStrategy || defaultRelationLoadStrategy;
+        if (relationLoadStrategy !== "query") {
+            return;
+        }
+        const cache = this.readDataProperty(dataSourceOptions, "cache");
+        if (cache && typeof cache === "object" && Boolean(this.readDataProperty(cache, "alwaysEnabled"))) {
+            throw exception_utility.ErrorException('Generated mandatory reads cannot load relations with relationLoadStrategy "query" while TypeORM query cache is always enabled');
+        }
+    }
+    static hasRequestedRelations(properties) {
+        const descriptor = objectFindPropertyDescriptor_utility.ObjectFindPropertyDescriptor(properties, "relations");
+        if (!descriptor) {
+            return false;
+        }
+        if (!("value" in descriptor)) {
+            return true;
+        }
+        const relationsValue = descriptor.value;
+        if (Array.isArray(relationsValue)) {
+            return relationsValue.length > 0;
+        }
+        if (!relationsValue || typeof relationsValue !== "object") {
+            return false;
+        }
+        for (const key of Reflect.ownKeys(relationsValue)) {
+            const relationDescriptor = Object.getOwnPropertyDescriptor(relationsValue, key);
+            if (!relationDescriptor || !("value" in relationDescriptor) || relationDescriptor.value === true || typeof relationDescriptor.value === "string" || (relationDescriptor.value !== null && typeof relationDescriptor.value === "object")) {
+                return true;
+            }
+        }
+        return false;
+    }
+    static readDataProperty(source, key) {
+        const descriptor = objectFindPropertyDescriptor_utility.ObjectFindPropertyDescriptor(source, key);
+        if (!descriptor) {
+            return undefined;
+        }
+        if (!("value" in descriptor)) {
+            throw exception_utility.ErrorException(`Generated mandatory read option ${String(key)} must be a data property`);
+        }
+        return descriptor.value;
+    }
+}
+
+exports.ApiControllerGeneratedRelationCacheContract = ApiControllerGeneratedRelationCacheContract;
+//# sourceMappingURL=relation-cache-contract.class.js.map

package/dist/cjs/class/api/controller/generated/relation-cache-contract.class.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relation-cache-contract.class.js","sources":["../../../../../../../src/class/api/controller/generated/relation-cache-contract.class.ts"],"sourcesContent":[null],"names":["ErrorException","ObjectFindPropertyDescriptor"],"mappings":";;;;;AAMA;;;AAGG;MACU,2CAA2C,CAAA;AAChD,IAAA,OAAO,UAAU,CAA2B,UAAyB,EAAE,UAAkD,EAAA;QAC/H,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,EAAE;YAC5C;QACD;QAEA,MAAM,iBAAiB,GAAW,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO;QACvE,MAAM,6BAA6B,GAAY,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,sBAAsB,CAAC;QACxG,MAAM,2BAA2B,GAAY,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;QAE7G,KAAK,MAAM,QAAQ,IAAI,CAAC,6BAA6B,EAAE,2BAA2B,CAAC,EAAE;YACpF,IAAI,QAAQ,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,OAAO,EAAE;AAC5D,gBAAA,MAAMA,gCAAc,CAAC,qEAAqE,CAAC;YAC5F;QACD;;;AAIA,QAAA,MAAM,oBAAoB,GAAY,6BAA6B,IAAI,2BAA2B;AAElG,QAAA,IAAI,oBAAoB,KAAK,OAAO,EAAE;YACrC;QACD;QAEA,MAAM,KAAK,GAAY,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,OAAO,CAAC;AAExE,QAAA,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,EAAE;AACjG,YAAA,MAAMA,gCAAc,CAAC,+HAA+H,CAAC;QACtJ;IACD;IAEQ,OAAO,qBAAqB,CAAC,UAAkB,EAAA;QACtD,MAAM,UAAU,GAAmCC,iEAA4B,CAAC,UAAU,EAAE,WAAW,CAAC;QAExG,IAAI,CAAC,UAAU,EAAE;AAChB,YAAA,OAAO,KAAK;QACb;AAEA,QAAA,IAAI,EAAE,OAAO,IAAI,UAAU,CAAC,EAAE;AAC7B,YAAA,OAAO,IAAI;QACZ;AAEA,QAAA,MAAM,cAAc,GAAY,UAAU,CAAC,KAAK;AAEhD,QAAA,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE;AAClC,YAAA,OAAO,cAAc,CAAC,MAAM,GAAG,CAAC;QACjC;QAEA,IAAI,CAAC,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE;AAC1D,YAAA,OAAO,KAAK;QACb;QAEA,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE;YAClD,MAAM,kBAAkB,GAAmC,MAAM,CAAC,wBAAwB,CAAC,cAAc,EAAE,GAAG,CAAC;AAE/G,YAAA,IAAI,CAAC,kBAAkB,IAAI,EAAE,OAAO,IAAI,kBAAkB,CAAC,IAAI,kBAAkB,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,kBAAkB,CAAC,KAAK,KAAK,QAAQ,KAAK,kBAAkB,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,kBAAkB,CAAC,KAAK,KAAK,QAAQ,CAAC,EAAE;AACxO,gBAAA,OAAO,IAAI;YACZ;QACD;AAEA,QAAA,OAAO,KAAK;IACb;AAEQ,IAAA,OAAO,gBAAgB,CAAC,MAAc,EAAE,GAAgB,EAAA;QAC/D,MAAM,UAAU,GAAmCA,iEAA4B,CAAC,MAAM,EAAE,GAAG,CAAC;QAE5F,IAAI,CAAC,UAAU,EAAE;AAChB,YAAA,OAAO,SAAS;QACjB;AAEA,QAAA,IAAI,EAAE,OAAO,IAAI,UAAU,CAAC,EAAE;YAC7B,MAAMD,gCAAc,CAAC,CAAA,gCAAA,EAAmC,MAAM,CAAC,GAAG,CAAC,CAAA,wBAAA,CAA0B,CAAC;QAC/F;QAEA,OAAO,UAAU,CAAC,KAAK;IACxB;AACA;;;;"}

package/dist/cjs/class/api/controller/generated/scope-where-contract.class.d.ts

@@ -0,0 +1,14 @@
+import { IApiBaseEntity } from '../../../../interface/api-base-entity.interface';
+import { TApiAuthorizationScopeWhere } from '../../../../type/class/api/authorization/scope-where.type';
+/**
+ * Merges subscriber WHERE criteria with a generated mandatory scope without
+ * repeatedly expanding an already-contained OR scope.
+ */
+export declare class ApiControllerGeneratedScopeWhereContract {
+    static contains<E extends IApiBaseEntity>(candidateWhere: TApiAuthorizationScopeWhere<E>, mandatoryWhere: TApiAuthorizationScopeWhere<E>): boolean;
+    static merge<E extends IApiBaseEntity>(candidateWhere: TApiAuthorizationScopeWhere<E>, mandatoryWhere: TApiAuthorizationScopeWhere<E>): TApiAuthorizationScopeWhere<E>;
+    private static branchContains;
+    private static getOwnEnumerableDataEntries;
+    private static isNestedWhere;
+    private static valueContains;
+}

package/dist/cjs/class/api/controller/generated/scope-where-contract.class.js

@@ -0,0 +1,68 @@
+'use strict';
+
+var node_util = require('node:util');
+var scopeMergeWhere_utility = require('../../../../utility/authorization/scope-merge-where.utility.js');
+var typeorm = require('typeorm');
+
+/**
+ * Merges subscriber WHERE criteria with a generated mandatory scope without
+ * repeatedly expanding an already-contained OR scope.
+ */
+class ApiControllerGeneratedScopeWhereContract {
+    static contains(candidateWhere, mandatoryWhere) {
+        if (!mandatoryWhere) {
+            return true;
+        }
+        if (!candidateWhere) {
+            return false;
+        }
+        const candidateBranches = Array.isArray(candidateWhere) ? candidateWhere : [candidateWhere];
+        const mandatoryBranches = Array.isArray(mandatoryWhere) ? mandatoryWhere : [mandatoryWhere];
+        return candidateBranches.length > 0 && mandatoryBranches.length > 0 && candidateBranches.every((candidateBranch) => mandatoryBranches.some((mandatoryBranch) => this.branchContains(candidateBranch, mandatoryBranch)));
+    }
+    static merge(candidateWhere, mandatoryWhere) {
+        const normalizedCandidate = scopeMergeWhere_utility.AuthorizationScopeMergeWhere(undefined, candidateWhere);
+        return this.contains(normalizedCandidate, mandatoryWhere) ? normalizedCandidate : scopeMergeWhere_utility.AuthorizationScopeMergeWhere(normalizedCandidate, mandatoryWhere);
+    }
+    static branchContains(candidate, mandatory) {
+        const candidateEntries = this.getOwnEnumerableDataEntries(candidate);
+        const mandatoryEntries = this.getOwnEnumerableDataEntries(mandatory);
+        if (!candidateEntries || !mandatoryEntries) {
+            return false;
+        }
+        const candidateValues = new Map(candidateEntries);
+        return mandatoryEntries.every(([key, mandatoryValue]) => candidateValues.has(key) && this.valueContains(candidateValues.get(key), mandatoryValue));
+    }
+    static getOwnEnumerableDataEntries(value) {
+        const entries = [];
+        for (const key of Reflect.ownKeys(value)) {
+            const descriptor = Object.getOwnPropertyDescriptor(value, key);
+            if (!descriptor?.enumerable || !("value" in descriptor)) {
+                return undefined;
+            }
+            entries.push([key, descriptor.value]);
+        }
+        return entries;
+    }
+    static isNestedWhere(value) {
+        return Boolean(value && typeof value === "object" && !Array.isArray(value) && !(value instanceof Date) && !ArrayBuffer.isView(value) && !typeorm.InstanceChecker.isFindOperator(value));
+    }
+    static valueContains(candidate, mandatory) {
+        if (Array.isArray(candidate) || Array.isArray(mandatory)) {
+            if (!Array.isArray(candidate) || !Array.isArray(mandatory)) {
+                return false;
+            }
+            return candidate.every((candidateBranch) => this.isNestedWhere(candidateBranch) && mandatory.some((mandatoryBranch) => this.isNestedWhere(mandatoryBranch) && this.branchContains(candidateBranch, mandatoryBranch)));
+        }
+        if (this.isNestedWhere(candidate)) {
+            return this.isNestedWhere(mandatory) && this.branchContains(candidate, mandatory);
+        }
+        if (this.isNestedWhere(mandatory)) {
+            return false;
+        }
+        return node_util.isDeepStrictEqual(candidate, mandatory);
+    }
+}
+
+exports.ApiControllerGeneratedScopeWhereContract = ApiControllerGeneratedScopeWhereContract;
+//# sourceMappingURL=scope-where-contract.class.js.map

package/dist/cjs/class/api/controller/generated/scope-where-contract.class.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-where-contract.class.js","sources":["../../../../../../../src/class/api/controller/generated/scope-where-contract.class.ts"],"sourcesContent":[null],"names":["AuthorizationScopeMergeWhere","InstanceChecker","isDeepStrictEqual"],"mappings":";;;;;;AAQA;;;AAGG;MACU,wCAAwC,CAAA;AAC7C,IAAA,OAAO,QAAQ,CAA2B,cAA8C,EAAE,cAA8C,EAAA;QAC9I,IAAI,CAAC,cAAc,EAAE;AACpB,YAAA,OAAO,IAAI;QACZ;QAEA,IAAI,CAAC,cAAc,EAAE;AACpB,YAAA,OAAO,KAAK;QACb;AAEA,QAAA,MAAM,iBAAiB,GAAkB,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,cAAc,GAAG,CAAC,cAAc,CAAC;AAC1G,QAAA,MAAM,iBAAiB,GAAkB,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,cAAc,GAAG,CAAC,cAAc,CAAC;AAE1G,QAAA,OAAO,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAC,eAAuB,KAAc,iBAAiB,CAAC,IAAI,CAAC,CAAC,eAAuB,KAAc,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC;IAC1P;AAEO,IAAA,OAAO,KAAK,CAA2B,cAA8C,EAAE,cAA8C,EAAA;QAC3I,MAAM,mBAAmB,GAAmCA,oDAA4B,CAAC,SAAS,EAAE,cAAc,CAAC;QAEnH,OAAO,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,cAAc,CAAC,GAAG,mBAAmB,GAAGA,oDAA4B,CAAC,mBAAmB,EAAE,cAAc,CAAC;IACpJ;AAEQ,IAAA,OAAO,cAAc,CAAC,SAAiB,EAAE,SAAiB,EAAA;QACjE,MAAM,gBAAgB,GAA8C,IAAI,CAAC,2BAA2B,CAAC,SAAS,CAAC;QAC/G,MAAM,gBAAgB,GAA8C,IAAI,CAAC,2BAA2B,CAAC,SAAS,CAAC;AAE/G,QAAA,IAAI,CAAC,gBAAgB,IAAI,CAAC,gBAAgB,EAAE;AAC3C,YAAA,OAAO,KAAK;QACb;AAEA,QAAA,MAAM,eAAe,GAA8B,IAAI,GAAG,CAAuB,gBAAgB,CAAC;AAElG,QAAA,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,cAAc,CAAyB,KAAc,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,CAAC;IACpL;IAEQ,OAAO,2BAA2B,CAAC,KAAa,EAAA;QACvD,MAAM,OAAO,GAAkC,EAAE;QAEjD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;YACzC,MAAM,UAAU,GAAmC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC;AAE9F,YAAA,IAAI,CAAC,UAAU,EAAE,UAAU,IAAI,EAAE,OAAO,IAAI,UAAU,CAAC,EAAE;AACxD,gBAAA,OAAO,SAAS;YACjB;YAEA,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QACtC;AAEA,QAAA,OAAO,OAAO;IACf;IAEQ,OAAO,aAAa,CAAC,KAAc,EAAA;AAC1C,QAAA,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAACC,uBAAe,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAChL;AAEQ,IAAA,OAAO,aAAa,CAAC,SAAkB,EAAE,SAAkB,EAAA;AAClE,QAAA,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;AACzD,YAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;AAC3D,gBAAA,OAAO,KAAK;YACb;AAEA,YAAA,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,eAAwB,KAAc,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,eAAwB,KAAc,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC;QAC1P;AAEA,QAAA,IAAI,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE;AAClC,YAAA,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC;QAClF;AAEA,QAAA,IAAI,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE;AAClC,YAAA,OAAO,KAAK;QACb;AAEA,QAAA,OAAOC,2BAAiB,CAAC,SAAS,EAAE,SAAS,CAAC;IAC/C;AACA;;;;"}

package/dist/cjs/class/api/controller/generated/security-snapshot.class.d.ts

@@ -0,0 +1,14 @@
+import { IApiBaseEntity } from '../../../../interface/api-base-entity.interface';
+import { IApiAuthorizationDecision } from '../../../../interface/class/api/authorization';
+import { TApiAuthorizationScopeWhere } from '../../../../type/class/api/authorization/scope-where.type';
+/**
+ * Owns the generated-route authorization decision used after guard execution.
+ * Subscriber-facing decisions are detached views and can never mutate this snapshot.
+ */
+export declare class ApiControllerGeneratedSecuritySnapshot {
+    static create<E extends IApiBaseEntity, R>(decision: IApiAuthorizationDecision<E, R> | undefined): IApiAuthorizationDecision<E, R> | undefined;
+    static createMutableScopeWhere<E extends IApiBaseEntity, R>(snapshot: IApiAuthorizationDecision<E, R> | undefined): TApiAuthorizationScopeWhere<E>;
+    static createSubscriberView<E extends IApiBaseEntity, R>(snapshot: IApiAuthorizationDecision<E, R> | undefined, resource?: E): IApiAuthorizationDecision<E, R> | undefined;
+    static detach<T>(value: T): T;
+    static withResource<E extends IApiBaseEntity, R>(snapshot: IApiAuthorizationDecision<E, R> | undefined, resource: E | undefined): IApiAuthorizationDecision<E, R> | undefined;
+}

package/dist/cjs/class/api/controller/generated/security-snapshot.class.js

@@ -0,0 +1,165 @@
+'use strict';
+
+var node_buffer = require('node:buffer');
+
+/**
+ * Owns the generated-route authorization decision used after guard execution.
+ * Subscriber-facing decisions are detached views and can never mutate this snapshot.
+ */
+class ApiControllerGeneratedSecuritySnapshot {
+    static create(decision) {
+        return decision ? freezeValue(cloneValue(decision)) : undefined;
+    }
+    static createMutableScopeWhere(snapshot) {
+        return cloneValue(snapshot?.scope?.where);
+    }
+    static createSubscriberView(snapshot, resource) {
+        if (!snapshot) {
+            return undefined;
+        }
+        const view = cloneValue(snapshot);
+        if (resource !== undefined) {
+            view.resource = resource;
+        }
+        return view;
+    }
+    static detach(value) {
+        return cloneValue(value);
+    }
+    static withResource(snapshot, resource) {
+        if (!snapshot || resource === undefined) {
+            return snapshot;
+        }
+        return Object.freeze({
+            ...snapshot,
+            resource,
+        });
+    }
+}
+/**
+ * Clones a security graph through own descriptors so no mutable container aliases its source.
+ * Function values are intentionally retained as executable identities; their containers are detached.
+ * @template T - Value type.
+ * @param {T} value - Value to clone.
+ * @returns {T} Detached clone.
+ */
+function cloneValue(value) {
+    return cloneValueWithReferences(value, new WeakMap());
+}
+/**
+ * Clones one value while preserving cycles within the detached graph.
+ * @template T - Value type.
+ * @param {T} value - Current value.
+ * @param {WeakMap<object, object>} references - Source-to-clone references.
+ * @returns {T} Detached value.
+ */
+function cloneValueWithReferences(value, references) {
+    if (value === null || typeof value !== "object") {
+        return value;
+    }
+    const source = value;
+    const existing = references.get(source);
+    if (existing) {
+        return existing;
+    }
+    if (value instanceof Date) {
+        return new Date(value);
+    }
+    if (value instanceof RegExp) {
+        return new RegExp(value.source, value.flags);
+    }
+    if (node_buffer.Buffer.isBuffer(value)) {
+        return node_buffer.Buffer.from(value);
+    }
+    if (value instanceof ArrayBuffer || ArrayBuffer.isView(value)) {
+        return structuredClone(value);
+    }
+    if (value instanceof Map) {
+        const clone = new Map();
+        references.set(source, clone);
+        for (const [key, item] of value) {
+            clone.set(cloneValueWithReferences(key, references), cloneValueWithReferences(item, references));
+        }
+        return clone;
+    }
+    if (value instanceof Set) {
+        const clone = new Set();
+        references.set(source, clone);
+        for (const item of value) {
+            clone.add(cloneValueWithReferences(item, references));
+        }
+        return clone;
+    }
+    const clone = Array.isArray(value) ? [] : Object.create(Object.getPrototypeOf(value));
+    references.set(source, clone);
+    for (const key of Reflect.ownKeys(source)) {
+        if (Array.isArray(value) && key === "length") {
+            continue;
+        }
+        const descriptor = Object.getOwnPropertyDescriptor(source, key);
+        if (!descriptor) {
+            continue;
+        }
+        Object.defineProperty(clone, key, {
+            ...descriptor,
+            // Subscriber views must remain independently mutable even when cloned from a frozen canonical snapshot.
+            // eslint-disable-next-line @elsikora/typescript/naming-convention
+            configurable: true,
+            ...("value" in descriptor
+                ? {
+                    value: cloneValueWithReferences(descriptor.value, references),
+                    // eslint-disable-next-line @elsikora/typescript/naming-convention
+                    writable: true,
+                }
+                : {}),
+        });
+    }
+    return clone;
+}
+/**
+ * Recursively freezes detached security containers without mutating executable function identities.
+ * @template T - Value type.
+ * @param {T} value - Detached value.
+ * @returns {T} Deeply frozen value.
+ */
+function freezeValue(value) {
+    freezeValueWithReferences(value, new WeakSet());
+    return value;
+}
+/**
+ * Freezes one detached value while preserving cyclic graphs.
+ * @param {unknown} value - Current value.
+ * @param {WeakSet<object>} references - Already visited objects.
+ * @returns {void}
+ */
+function freezeValueWithReferences(value, references) {
+    if (!value || typeof value !== "object" || references.has(value)) {
+        return;
+    }
+    references.add(value);
+    if (value instanceof Map) {
+        for (const [key, item] of value) {
+            freezeValueWithReferences(key, references);
+            freezeValueWithReferences(item, references);
+        }
+    }
+    else if (value instanceof Set) {
+        for (const item of value) {
+            freezeValueWithReferences(item, references);
+        }
+    }
+    else {
+        for (const key of Reflect.ownKeys(value)) {
+            const descriptor = Object.getOwnPropertyDescriptor(value, key);
+            if (descriptor && "value" in descriptor) {
+                freezeValueWithReferences(descriptor.value, references);
+            }
+        }
+    }
+    if (!ArrayBuffer.isView(value)) {
+        Object.freeze(value);
+    }
+}
+
+exports.ApiControllerGeneratedSecuritySnapshot = ApiControllerGeneratedSecuritySnapshot;
+//# sourceMappingURL=security-snapshot.class.js.map

package/dist/cjs/class/api/controller/generated/security-snapshot.class.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-snapshot.class.js","sources":["../../../../../../../src/class/api/controller/generated/security-snapshot.class.ts"],"sourcesContent":[null],"names":["Buffer"],"mappings":";;;;AAMA;;;AAGG;MACU,sCAAsC,CAAA;IAC3C,OAAO,MAAM,CAA8B,QAAqD,EAAA;AACtG,QAAA,OAAO,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,GAAG,SAAS;IAChE;IAEO,OAAO,uBAAuB,CAA8B,QAAqD,EAAA;QACvH,OAAO,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;IAC1C;AAEO,IAAA,OAAO,oBAAoB,CAA8B,QAAqD,EAAE,QAAY,EAAA;QAClI,IAAI,CAAC,QAAQ,EAAE;AACd,YAAA,OAAO,SAAS;QACjB;AAEA,QAAA,MAAM,IAAI,GAAoC,UAAU,CAAC,QAAQ,CAAC;AAElE,QAAA,IAAI,QAAQ,KAAK,SAAS,EAAE;AAC3B,YAAA,IAAI,CAAC,QAAQ,GAAG,QAAQ;QACzB;AAEA,QAAA,OAAO,IAAI;IACZ;IAEO,OAAO,MAAM,CAAI,KAAQ,EAAA;AAC/B,QAAA,OAAO,UAAU,CAAC,KAAK,CAAC;IACzB;AAEO,IAAA,OAAO,YAAY,CAA8B,QAAqD,EAAE,QAAuB,EAAA;AACrI,QAAA,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,SAAS,EAAE;AACxC,YAAA,OAAO,QAAQ;QAChB;QAEA,OAAO,MAAM,CAAC,MAAM,CAAC;AACpB,YAAA,GAAG,QAAQ;YACX,QAAQ;AACR,SAAA,CAAC;IACH;AACA;AAED;;;;;;AAMG;AACH,SAAS,UAAU,CAAI,KAAQ,EAAA;IAC9B,OAAO,wBAAwB,CAAC,KAAK,EAAE,IAAI,OAAO,EAAkB,CAAC;AACtE;AAEA;;;;;;AAMG;AACH,SAAS,wBAAwB,CAAI,KAAQ,EAAE,UAAmC,EAAA;IACjF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;AAChD,QAAA,OAAO,KAAK;IACb;IAEA,MAAM,MAAM,GAAW,KAAK;IAC5B,MAAM,QAAQ,GAAuB,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;IAE3D,IAAI,QAAQ,EAAE;AACb,QAAA,OAAO,QAAa;IACrB;AAEA,IAAA,IAAI,KAAK,YAAY,IAAI,EAAE;AAC1B,QAAA,OAAO,IAAI,IAAI,CAAC,KAAK,CAAM;IAC5B;AAEA,IAAA,IAAI,KAAK,YAAY,MAAM,EAAE;QAC5B,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAM;IAClD;AAEA,IAAA,IAAIA,kBAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;AAC3B,QAAA,OAAOA,kBAAM,CAAC,IAAI,CAAC,KAAK,CAAM;IAC/B;IAEA,IAAI,KAAK,YAAY,WAAW,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;AAC9D,QAAA,OAAO,eAAe,CAAC,KAAK,CAAC;IAC9B;AAEA,IAAA,IAAI,KAAK,YAAY,GAAG,EAAE;AACzB,QAAA,MAAM,KAAK,GAA0B,IAAI,GAAG,EAAoB;AAEhE,QAAA,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC;QAE7B,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE;AAChC,YAAA,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,wBAAwB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACjG;AAEA,QAAA,OAAO,KAAU;IAClB;AAEA,IAAA,IAAI,KAAK,YAAY,GAAG,EAAE;AACzB,QAAA,MAAM,KAAK,GAAiB,IAAI,GAAG,EAAW;AAE9C,QAAA,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC;AAE7B,QAAA,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;YACzB,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACtD;AAEA,QAAA,OAAO,KAAU;IAClB;IAEA,MAAM,KAAK,GAAW,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAkB,CAAY;AAE1H,IAAA,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC;IAE7B,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;QAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,QAAQ,EAAE;YAC7C;QACD;QAEA,MAAM,UAAU,GAAmC,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC;QAE/F,IAAI,CAAC,UAAU,EAAE;YAChB;QACD;AAEA,QAAA,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE;AACjC,YAAA,GAAG,UAAU;;;AAGb,YAAA,YAAY,EAAE,IAAI;YAClB,IAAI,OAAO,IAAI;AACd,kBAAE;oBACA,KAAK,EAAE,wBAAwB,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC;;AAE7D,oBAAA,QAAQ,EAAE,IAAI;AACd;kBACA,EAAE,CAAC;AACN,SAAA,CAAC;IACH;AAEA,IAAA,OAAO,KAAU;AAClB;AAEA;;;;;AAKG;AACH,SAAS,WAAW,CAAI,KAAQ,EAAA;AAC/B,IAAA,yBAAyB,CAAC,KAAK,EAAE,IAAI,OAAO,EAAU,CAAC;AAEvD,IAAA,OAAO,KAAK;AACb;AAEA;;;;;AAKG;AACH,SAAS,yBAAyB,CAAC,KAAc,EAAE,UAA2B,EAAA;AAC7E,IAAA,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACjE;IACD;AAEA,IAAA,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;AAErB,IAAA,IAAI,KAAK,YAAY,GAAG,EAAE;QACzB,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE;AAChC,YAAA,yBAAyB,CAAC,GAAG,EAAE,UAAU,CAAC;AAC1C,YAAA,yBAAyB,CAAC,IAAI,EAAE,UAAU,CAAC;QAC5C;IACD;AAAO,SAAA,IAAI,KAAK,YAAY,GAAG,EAAE;AAChC,QAAA,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;AACzB,YAAA,yBAAyB,CAAC,IAAI,EAAE,UAAU,CAAC;QAC5C;IACD;SAAO;QACN,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;YACzC,MAAM,UAAU,GAAmC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC;AAE9F,YAAA,IAAI,UAAU,IAAI,OAAO,IAAI,UAAU,EAAE;AACxC,gBAAA,yBAAyB,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC;YACxD;QACD;IACD;IAEA,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;AAC/B,QAAA,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;IACrB;AACD;;;;"}

package/dist/cjs/class/api/controller/generated/write-hydration-contract.class.d.ts

@@ -0,0 +1,9 @@
+import { IApiBaseEntity } from '../../../../interface/api-base-entity.interface';
+/**
+ * Isolates generated mutation hydration from GET AFTER subscriber replacements and mutations.
+ */
+export declare class ApiControllerGeneratedWriteHydrationContract {
+    static assertUnchanged<E extends IApiBaseEntity>(rawItem: E, rawSnapshot: E, subscriberItem: E, subscriberSnapshot: E, subscriberResult: E | undefined, allowedRootAccessors: ReadonlySet<PropertyKey>): void;
+    static createSnapshot<E extends IApiBaseEntity>(item: E, allowedRootAccessors: ReadonlySet<PropertyKey>): E;
+    private static assertDataGraph;
+}

package/dist/cjs/class/api/controller/generated/write-hydration-contract.class.js

@@ -0,0 +1,69 @@
+'use strict';
+
+var node_util = require('node:util');
+var securitySnapshot_class = require('./security-snapshot.class.js');
+var exception_utility = require('../../../../utility/error/exception.utility.js');
+
+/**
+ * Isolates generated mutation hydration from GET AFTER subscriber replacements and mutations.
+ */
+class ApiControllerGeneratedWriteHydrationContract {
+    static assertUnchanged(rawItem, rawSnapshot, subscriberItem, subscriberSnapshot, subscriberResult, allowedRootAccessors) {
+        this.assertDataGraph(rawItem, allowedRootAccessors);
+        this.assertDataGraph(subscriberItem, allowedRootAccessors);
+        if ((subscriberResult !== undefined && subscriberResult !== subscriberItem) || !node_util.isDeepStrictEqual(rawItem, rawSnapshot) || !node_util.isDeepStrictEqual(subscriberItem, subscriberSnapshot)) {
+            throw exception_utility.ErrorException("Generated mutation GET subscriber changed the protected hydration entity");
+        }
+    }
+    static createSnapshot(item, allowedRootAccessors) {
+        this.assertDataGraph(item, allowedRootAccessors);
+        return securitySnapshot_class.ApiControllerGeneratedSecuritySnapshot.detach(item);
+    }
+    static assertDataGraph(value, allowedRootAccessors, visited = new WeakSet(), isRoot = true) {
+        if (typeof value === "function") {
+            throw exception_utility.ErrorException("Generated mutation hydration entity cannot contain function values");
+        }
+        if (!value || typeof value !== "object" || visited.has(value)) {
+            return;
+        }
+        visited.add(value);
+        if (value instanceof ArrayBuffer || ArrayBuffer.isView(value) || value instanceof Date || value instanceof RegExp) {
+            return;
+        }
+        if (value instanceof Promise || value instanceof WeakMap || value instanceof WeakSet) {
+            throw exception_utility.ErrorException("Generated mutation hydration entity contains an unsupported mutable value");
+        }
+        if (value instanceof Map) {
+            for (const [key, item] of value) {
+                this.assertDataGraph(key, allowedRootAccessors, visited, false);
+                this.assertDataGraph(item, allowedRootAccessors, visited, false);
+            }
+            return;
+        }
+        if (value instanceof Set) {
+            for (const item of value) {
+                this.assertDataGraph(item, allowedRootAccessors, visited, false);
+            }
+            return;
+        }
+        for (const key of Reflect.ownKeys(value)) {
+            if (Array.isArray(value) && key === "length") {
+                continue;
+            }
+            const descriptor = Object.getOwnPropertyDescriptor(value, key);
+            if (!descriptor) {
+                continue;
+            }
+            if (!("value" in descriptor)) {
+                if (isRoot && !descriptor.enumerable && allowedRootAccessors.has(key)) {
+                    continue;
+                }
+                throw exception_utility.ErrorException("Generated mutation hydration entity must contain data properties only");
+            }
+            this.assertDataGraph(descriptor.value, allowedRootAccessors, visited, false);
+        }
+    }
+}
+
+exports.ApiControllerGeneratedWriteHydrationContract = ApiControllerGeneratedWriteHydrationContract;
+//# sourceMappingURL=write-hydration-contract.class.js.map

package/dist/cjs/class/api/controller/generated/write-hydration-contract.class.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-hydration-contract.class.js","sources":["../../../../../../../src/class/api/controller/generated/write-hydration-contract.class.ts"],"sourcesContent":[null],"names":["isDeepStrictEqual","ErrorException","ApiControllerGeneratedSecuritySnapshot"],"mappings":";;;;;;AAOA;;AAEG;MACU,4CAA4C,CAAA;AACjD,IAAA,OAAO,eAAe,CAA2B,OAAU,EAAE,WAAc,EAAE,cAAiB,EAAE,kBAAqB,EAAE,gBAA+B,EAAE,oBAA8C,EAAA;AAC5M,QAAA,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,oBAAoB,CAAC;AACnD,QAAA,IAAI,CAAC,eAAe,CAAC,cAAc,EAAE,oBAAoB,CAAC;QAE1D,IAAI,CAAC,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,cAAc,KAAK,CAACA,2BAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAACA,2BAAiB,CAAC,cAAc,EAAE,kBAAkB,CAAC,EAAE;AAClL,YAAA,MAAMC,gCAAc,CAAC,0EAA0E,CAAC;QACjG;IACD;AAEO,IAAA,OAAO,cAAc,CAA2B,IAAO,EAAE,oBAA8C,EAAA;AAC7G,QAAA,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,oBAAoB,CAAC;AAEhD,QAAA,OAAOC,6DAAsC,CAAC,MAAM,CAAC,IAAI,CAAC;IAC3D;AAEQ,IAAA,OAAO,eAAe,CAAC,KAAc,EAAE,oBAA8C,EAAE,OAAA,GAA2B,IAAI,OAAO,EAAU,EAAE,SAAkB,IAAI,EAAA;AACtK,QAAA,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE;AAChC,YAAA,MAAMD,gCAAc,CAAC,oEAAoE,CAAC;QAC3F;AAEA,QAAA,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;YAC9D;QACD;AAEA,QAAA,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;AAElB,QAAA,IAAI,KAAK,YAAY,WAAW,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,YAAY,MAAM,EAAE;YAClH;QACD;AAEA,QAAA,IAAI,KAAK,YAAY,OAAO,IAAI,KAAK,YAAY,OAAO,IAAI,KAAK,YAAY,OAAO,EAAE;AACrF,YAAA,MAAMA,gCAAc,CAAC,2EAA2E,CAAC;QAClG;AAEA,QAAA,IAAI,KAAK,YAAY,GAAG,EAAE;YACzB,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE;gBAChC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,oBAAoB,EAAE,OAAO,EAAE,KAAK,CAAC;gBAC/D,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,KAAK,CAAC;YACjE;YAEA;QACD;AAEA,QAAA,IAAI,KAAK,YAAY,GAAG,EAAE;AACzB,YAAA,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;gBACzB,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,KAAK,CAAC;YACjE;YAEA;QACD;QAEA,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;YACzC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,QAAQ,EAAE;gBAC7C;YACD;YAEA,MAAM,UAAU,GAAmC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC;YAE9F,IAAI,CAAC,UAAU,EAAE;gBAChB;YACD;AAEA,YAAA,IAAI,EAAE,OAAO,IAAI,UAAU,CAAC,EAAE;AAC7B,gBAAA,IAAI,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;oBACtE;gBACD;AAEA,gBAAA,MAAMA,gCAAc,CAAC,uEAAuE,CAAC;YAC9F;AAEA,YAAA,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,KAAK,CAAC;QAC7E;IACD;AACA;;;;"}

package/dist/cjs/class/api/controller/get-list/cursor/data-source-contract.class.d.ts

@@ -0,0 +1,32 @@
+import { IApiBaseEntity } from '../../../../../interface/api-base-entity.interface';
+import { TApiControllerGetListQueryCompiledOrderField } from '../../../../../type/class/api/controller/get-list/compiled/order-field.type';
+import { TApiControllerGetListQueryCompiledPlan } from '../../../../../type/class/api/controller/get-list/compiled/plan.type';
+import { Repository } from 'typeorm';
+/**
+ * Proves that the active repository uses an exact database/storage/hydration
+ * contract for every protected cursor tuple field.
+ */
+export declare class ApiControllerGetListCursorDataSourceContract {
+    static assertSafe<E extends IApiBaseEntity>(repository: Repository<E>, plan?: TApiControllerGetListQueryCompiledPlan): void;
+    static createValueValidator<E extends IApiBaseEntity>(repository: Repository<E>, plan: TApiControllerGetListQueryCompiledPlan): (field: TApiControllerGetListQueryCompiledOrderField, value: unknown) => void;
+    private static assertActiveColumnMatches;
+    private static assertExactPostgresTextParser;
+    private static assertIntegerStorageValue;
+    private static assertPrimaryTieBreaker;
+    private static assertStorageSafe;
+    private static assertStorageValueSafe;
+    private static assertTokenCapacitySafe;
+    private static createPostgresParserProbe;
+    private static getDriverType;
+    private static getMaximumStorageJsonBytes;
+    private static getOrderFields;
+    private static getOrderFieldSequences;
+    private static getStorageContract;
+    private static hasAfterLoad;
+    private static hasCustomPostgresTypes;
+    private static isApplicable;
+    private static isConstructorAncestor;
+    private static isPostgresBinaryMode;
+    private static normalizeActiveStorageType;
+    private static normalizeDeclaredColumnType;
+}