@lenne.tech/nest-server 12.0.0 → 12.1.0

package/dist/core/common/persistence/policies/system-role.policy.js

@@ -0,0 +1,46 @@
+import { BadRequestException } from '@nestjs/common';
+import { looksLikeSystemRole, SYSTEM_ROLE_PREFIX } from '../../enums/role.enum.js';
+export function toRoleArray(value) {
+    return Array.isArray(value) ? value.filter((entry) => typeof entry === 'string') : [];
+}
+export function assertNoSystemRoles(roles, alreadyStored = []) {
+    if (!Array.isArray(roles)) {
+        return;
+    }
+    const introduced = roles.filter((role) => looksLikeSystemRole(role) && !alreadyStored.includes(role));
+    if (introduced.length) {
+        throw new BadRequestException(`System roles (${SYSTEM_ROLE_PREFIX}*) must never be stored in user.roles: ${introduced.join(', ')}`);
+    }
+}
+export function updateMayIntroduceSystemRoles(update) {
+    return collectRoleValues(update).some((role) => looksLikeSystemRole(role));
+}
+export function collectRoleValues(update) {
+    const values = [
+        ...toRoleArray(update.roles),
+        ...toRoleArray(update.$set?.roles),
+        ...toRoleArray(update.$setOnInsert?.roles),
+    ];
+    for (const operator of [update.$push?.roles, update.$addToSet?.roles]) {
+        if (operator === undefined || operator === null) {
+            continue;
+        }
+        values.push(...(Array.isArray(operator?.$each) ? operator.$each : [operator]));
+    }
+    return values;
+}
+export function assertUpdateHasNoSystemRoles(update, alreadyStored = []) {
+    if (!update) {
+        return;
+    }
+    assertNoSystemRoles(update.roles, alreadyStored);
+    assertNoSystemRoles(update.$set?.roles, alreadyStored);
+    assertNoSystemRoles(update.$setOnInsert?.roles, alreadyStored);
+    for (const operator of [update.$push?.roles, update.$addToSet?.roles]) {
+        if (operator === undefined || operator === null) {
+            continue;
+        }
+        assertNoSystemRoles(Array.isArray(operator?.$each) ? operator.$each : [operator], alreadyStored);
+    }
+}
+//# sourceMappingURL=system-role.policy.js.map

package/dist/core/common/persistence/policies/system-role.policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-role.policy.js","sourceRoot":"","sources":["../../../../../src/core/common/persistence/policies/system-role.policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAWnF,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACzG,CAAC;AAgBD,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,gBAA0B,EAAE;IAC9E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACtG,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,kBAAkB,0CAA0C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrG,CAAC;IACJ,CAAC;AACH,CAAC;AAGD,MAAM,UAAU,6BAA6B,CAAC,MAAW;IACvD,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;AAC7E,CAAC;AAGD,MAAM,UAAU,iBAAiB,CAAC,MAAW;IAC3C,MAAM,MAAM,GAAc;QACxB,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC;QAC5B,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC;QAClC,GAAG,WAAW,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC;KAC3C,CAAC;IAEF,KAAK,MAAM,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;QACtE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAChD,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAQD,MAAM,UAAU,4BAA4B,CAAC,MAAW,EAAE,gBAA0B,EAAE;IACpF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IAED,mBAAmB,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACjD,mBAAmB,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IACvD,mBAAmB,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IAG/D,KAAK,MAAM,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;QACtE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAChD,SAAS;QACX,CAAC;QACD,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC;IACnG,CAAC;AACH,CAAC"}

package/dist/core/common/persistence/policies/tenant.policy.d.ts

@@ -0,0 +1,19 @@
+export declare function assertOwnTenant(value: unknown, ownTenantId: string, isNew: boolean): void;
+export declare function isTenantPolicyBypassed(modelName?: string): boolean;
+export declare function resolveTenantFilter(modelName?: string): Record<string, any> | undefined;
+export type TenantScope = {
+    kind: 'none';
+} | {
+    kind: 'system';
+} | {
+    kind: 'tenant';
+    tenantId: string;
+} | {
+    kind: 'tenants';
+    tenantIds: readonly string[];
+};
+export declare function resolveTenantScope(): TenantScope;
+export declare function resolveSingleTenantId(modelName?: string): string | undefined;
+export declare function allowedTenantIds(modelName?: string): readonly string[] | undefined;
+export declare function assertRowsInTenantScope(modelName: string | undefined, rows: unknown): void;
+export declare function assertUnfilterableCountAllowed(modelName?: string): void;

package/dist/core/common/persistence/policies/tenant.policy.js

@@ -0,0 +1,120 @@
+import { ForbiddenException, Logger } from '@nestjs/common';
+import { ConfigService } from '../../services/config.service.js';
+import { RequestContext } from '../../services/request-context.service.js';
+const isolationDisabledWarned = new Set();
+function warnIsolationDisabled(modelName) {
+    if (isolationDisabledWarned.has(modelName)) {
+        return;
+    }
+    isolationDisabledWarned.add(modelName);
+    const membershipModel = ConfigService.configFastButReadOnly?.multiTenancy?.membershipModel ?? 'TenantMember';
+    if (modelName === membershipModel) {
+        return;
+    }
+    new Logger('mongooseTenantPlugin').warn(`Tenant isolation is DISABLED for "${modelName}": the schema declares a tenantId field, but ` +
+        `"${modelName}" is listed in multiTenancy.excludeSchemas — so no tenant filter is applied and ` +
+        `every query on it sees every tenant's rows. Remove it from excludeSchemas unless this ` +
+        `collection is genuinely global.`);
+}
+export function assertOwnTenant(value, ownTenantId, isNew) {
+    if (value === undefined || value === null || value === ownTenantId) {
+        return;
+    }
+    throw new ForbiddenException(isNew
+        ? `Cannot create a document in a foreign tenant (got "${String(value)}", own tenant is "${ownTenantId}")`
+        : `Cannot move a document to a foreign tenant (got "${String(value)}", own tenant is "${ownTenantId}")`);
+}
+export function isTenantPolicyBypassed(modelName) {
+    const mtConfig = ConfigService.configFastButReadOnly?.multiTenancy;
+    if (!mtConfig || mtConfig.enabled === false)
+        return true;
+    const context = RequestContext.get();
+    if (!context)
+        return true;
+    if (context.bypassTenantGuard)
+        return true;
+    if (modelName && mtConfig.excludeSchemas?.includes(modelName)) {
+        warnIsolationDisabled(modelName);
+        return true;
+    }
+    return false;
+}
+export function resolveTenantFilter(modelName) {
+    if (isTenantPolicyBypassed(modelName))
+        return undefined;
+    const context = RequestContext.get();
+    const tenantId = context?.tenantId;
+    if (tenantId)
+        return { tenantId };
+    const tenantIds = context?.tenantIds;
+    if (tenantIds)
+        return { tenantId: { $in: tenantIds } };
+    if (context?.isAdminBypass)
+        return {};
+    throw new ForbiddenException('Tenant context required: this data is tenant-scoped but no valid tenant context was provided');
+}
+export function resolveTenantScope() {
+    if (isTenantPolicyBypassed()) {
+        return { kind: 'system' };
+    }
+    const context = RequestContext.get();
+    if (context?.tenantId) {
+        return { kind: 'tenant', tenantId: context.tenantId };
+    }
+    if (context?.tenantIds) {
+        return { kind: 'tenants', tenantIds: context.tenantIds };
+    }
+    if (context?.isAdminBypass) {
+        return { kind: 'system' };
+    }
+    return { kind: 'none' };
+}
+export function resolveSingleTenantId(modelName) {
+    if (isTenantPolicyBypassed(modelName))
+        return undefined;
+    return RequestContext.get()?.tenantId || undefined;
+}
+export function allowedTenantIds(modelName) {
+    if (isTenantPolicyBypassed(modelName))
+        return undefined;
+    const context = RequestContext.get();
+    if (context?.tenantId)
+        return [context.tenantId];
+    if (context?.tenantIds)
+        return context.tenantIds;
+    if (context?.isAdminBypass)
+        return undefined;
+    return [];
+}
+export function assertRowsInTenantScope(modelName, rows) {
+    const allowed = allowedTenantIds(modelName);
+    if (!allowed) {
+        return;
+    }
+    for (const row of Array.isArray(rows) ? rows : [rows]) {
+        if (!row || typeof row !== 'object') {
+            continue;
+        }
+        const tenantId = row.tenantId;
+        if (tenantId === undefined) {
+            continue;
+        }
+        if (tenantId === null || !allowed.includes(String(tenantId))) {
+            new Logger('TenantIsolation').error(`A read of "${modelName ?? 'unknown model'}" returned a row of a tenant outside the caller's scope — ` +
+                'the read filter did not hold on this path; the result was withheld');
+            throw new ForbiddenException('Tenant isolation: the result contains data of another tenant');
+        }
+    }
+}
+export function assertUnfilterableCountAllowed(modelName) {
+    if (isTenantPolicyBypassed(modelName)) {
+        return;
+    }
+    const context = RequestContext.get();
+    if (context?.isAdminBypass && !context?.tenantId) {
+        return;
+    }
+    throw new ForbiddenException("estimatedDocumentCount() cannot be tenant-filtered and would expose other tenants' row counts — " +
+        'use countDocuments() instead');
+}
+//# sourceMappingURL=tenant.policy.js.map

package/dist/core/common/persistence/policies/tenant.policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.policy.js","sourceRoot":"","sources":["../../../../../src/core/common/persistence/policies/tenant.policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAE5D,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAY3E,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAU,CAAC;AAoBlD,SAAS,qBAAqB,CAAC,SAAiB;IAC9C,IAAI,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3C,OAAO;IACT,CAAC;IACD,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEvC,MAAM,eAAe,GAAG,aAAa,CAAC,qBAAqB,EAAE,YAAY,EAAE,eAAe,IAAI,cAAc,CAAC;IAC7G,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;QAClC,OAAO;IACT,CAAC;IAED,IAAI,MAAM,CAAC,sBAAsB,CAAC,CAAC,IAAI,CACrC,qCAAqC,SAAS,+CAA+C;QAC3F,IAAI,SAAS,kFAAkF;QAC/F,wFAAwF;QACxF,iCAAiC,CACpC,CAAC;AACJ,CAAC;AAaD,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,WAAmB,EAAE,KAAc;IACjF,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;QACnE,OAAO;IACT,CAAC;IACD,MAAM,IAAI,kBAAkB,CAC1B,KAAK;QACH,CAAC,CAAC,sDAAsD,MAAM,CAAC,KAAK,CAAC,qBAAqB,WAAW,IAAI;QACzG,CAAC,CAAC,oDAAoD,MAAM,CAAC,KAAK,CAAC,qBAAqB,WAAW,IAAI,CAC1G,CAAC;AACJ,CAAC;AASD,MAAM,UAAU,sBAAsB,CAAC,SAAkB;IACvD,MAAM,QAAQ,GAAG,aAAa,CAAC,qBAAqB,EAAE,YAAY,CAAC;IACnE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAEzD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,OAAO,CAAC,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,SAAS,IAAI,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9D,qBAAqB,CAAC,SAAS,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAeD,MAAM,UAAU,mBAAmB,CAAC,SAAkB;IACpD,IAAI,sBAAsB,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAExD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,CAAC;IAGrC,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,CAAC;IACnC,IAAI,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAGlC,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,CAAC;IACrC,IAAI,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC;IAGvD,IAAI,OAAO,EAAE,aAAa;QAAE,OAAO,EAAE,CAAC;IAItC,MAAM,IAAI,kBAAkB,CAC1B,8FAA8F,CAC/F,CAAC;AACJ,CAAC;AAkBD,MAAM,UAAU,kBAAkB;IAChC,IAAI,sBAAsB,EAAE,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,CAAC;IACrC,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,EAAE,aAAa,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC;AAMD,MAAM,UAAU,qBAAqB,CAAC,SAAkB;IACtD,IAAI,sBAAsB,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAExD,OAAO,cAAc,CAAC,GAAG,EAAE,EAAE,QAAQ,IAAI,SAAS,CAAC;AACrD,CAAC;AAOD,MAAM,UAAU,gBAAgB,CAAC,SAAkB;IACjD,IAAI,sBAAsB,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAExD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,CAAC;IACrC,IAAI,OAAO,EAAE,QAAQ;QAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,OAAO,EAAE,SAAS;QAAE,OAAO,OAAO,CAAC,SAAS,CAAC;IACjD,IAAI,OAAO,EAAE,aAAa;QAAE,OAAO,SAAS,CAAC;IAC7C,OAAO,EAAE,CAAC;AACZ,CAAC;AAaD,MAAM,UAAU,uBAAuB,CAAC,SAA6B,EAAE,IAAa;IAClF,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAI,GAA8B,CAAC,QAAQ,CAAC;QAC1D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC7D,IAAI,MAAM,CAAC,iBAAiB,CAAC,CAAC,KAAK,CACjC,cAAc,SAAS,IAAI,eAAe,4DAA4D;gBACpG,oEAAoE,CACvE,CAAC;YACF,MAAM,IAAI,kBAAkB,CAAC,8DAA8D,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;AACH,CAAC;AAQD,MAAM,UAAU,8BAA8B,CAAC,SAAkB;IAC/D,IAAI,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,CAAC;IACrC,IAAI,OAAO,EAAE,aAAa,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;QACjD,OAAO;IACT,CAAC;IACD,MAAM,IAAI,kBAAkB,CAC1B,kGAAkG;QAChG,8BAA8B,CACjC,CAAC;AACJ,CAAC"}

package/dist/core/common/persistence/routed-model.guard.d.ts

@@ -0,0 +1,4 @@
+import type { DataStore } from './data-store.interface.js';
+export declare function guardRoutedModel(model: unknown, store: DataStore<any>): void;
+export declare function isStandInModel(model: unknown): boolean;
+export declare function standInModel(modelName: string, schema: unknown): unknown;

package/dist/core/common/persistence/routed-model.guard.js

@@ -0,0 +1,73 @@
+import { UnsupportedCapabilityError } from './unsupported-capability.error.js';
+const MODEL_DATA_METHODS = [
+    '$where',
+    'aggregate',
+    'bulkSave',
+    'bulkWrite',
+    'countDocuments',
+    'create',
+    'deleteMany',
+    'deleteOne',
+    'distinct',
+    'estimatedDocumentCount',
+    'exists',
+    'find',
+    'findAndCount',
+    'findById',
+    'findByIdAndDelete',
+    'findByIdAndUpdate',
+    'findOne',
+    'findOneAndDelete',
+    'findOneAndReplace',
+    'findOneAndUpdate',
+    'insertMany',
+    'insertOne',
+    'replaceOne',
+    'updateMany',
+    'updateOne',
+    'watch',
+    'where',
+];
+const DOCUMENT_DATA_METHODS = ['$save', 'deleteOne', 'replaceOne', 'save', 'updateOne'];
+export function guardRoutedModel(model, store) {
+    if (!model || typeof model !== 'function') {
+        return;
+    }
+    const target = model;
+    const refuse = (method) => function refused() {
+        throw new UnsupportedCapabilityError(`${target.modelName}.${method}() reaches MongoDB, but ${target.modelName} is stored on ${store.driver} — ` +
+            'use the data store (this.dataStore in a CrudService, or @InjectStore()) instead');
+    };
+    for (const method of MODEL_DATA_METHODS) {
+        if (typeof target[method] === 'function') {
+            Object.defineProperty(target, method, { configurable: true, value: refuse(method), writable: true });
+        }
+    }
+    for (const method of DOCUMENT_DATA_METHODS) {
+        Object.defineProperty(target.prototype, method, { configurable: true, value: refuse(method), writable: true });
+    }
+}
+const STAND_IN_MODEL = Symbol('lt:stand-in-model');
+export function isStandInModel(model) {
+    return !!model && model[STAND_IN_MODEL] === true;
+}
+export function standInModel(modelName, schema) {
+    const standIn = function StandInModel() {
+        throw new UnsupportedCapabilityError(`new ${modelName}() is a Mongoose document, and no MongoDB is configured`);
+    };
+    Object.defineProperty(standIn, 'modelName', { value: modelName });
+    Object.defineProperty(standIn, STAND_IN_MODEL, { value: true });
+    Object.defineProperty(standIn, 'schema', { value: schema });
+    const refuse = (method) => function refused() {
+        throw new UnsupportedCapabilityError(`${modelName}.${method}() reaches MongoDB, and no MongoDB is configured — use the data store ` +
+            '(this.dataStore in a CrudService, or @InjectStore())');
+    };
+    for (const method of MODEL_DATA_METHODS) {
+        Object.defineProperty(standIn, method, { configurable: true, value: refuse(method), writable: true });
+    }
+    for (const method of DOCUMENT_DATA_METHODS) {
+        Object.defineProperty(standIn.prototype, method, { configurable: true, value: refuse(method), writable: true });
+    }
+    return standIn;
+}
+//# sourceMappingURL=routed-model.guard.js.map

package/dist/core/common/persistence/routed-model.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routed-model.guard.js","sourceRoot":"","sources":["../../../../src/core/common/persistence/routed-model.guard.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAM/E,MAAM,kBAAkB,GAAG;IACzB,QAAQ;IACR,WAAW;IACX,UAAU;IACV,WAAW;IACX,gBAAgB;IAChB,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,UAAU;IACV,wBAAwB;IACxB,QAAQ;IACR,MAAM;IACN,cAAc;IACd,UAAU;IACV,mBAAmB;IACnB,mBAAmB;IACnB,SAAS;IACT,kBAAkB;IAClB,mBAAmB;IACnB,kBAAkB;IAClB,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,WAAW;IACX,OAAO;IACP,OAAO;CACC,CAAC;AAGX,MAAM,qBAAqB,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,CAAU,CAAC;AAYjG,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,KAAqB;IACpE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,KAAsF,CAAC;IACtG,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,EAAE,CAChC,SAAS,OAAO;QACd,MAAM,IAAI,0BAA0B,CAClC,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,2BAA2B,MAAM,CAAC,SAAS,iBAAiB,KAAK,CAAC,MAAM,KAAK;YACxG,iFAAiF,CACpF,CAAC;IACJ,CAAC,CAAC;IACJ,KAAK,MAAM,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACxC,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;YACzC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,qBAAqB,EAAE,CAAC;QAC3C,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACjH,CAAC;AACH,CAAC;AAED,MAAM,cAAc,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAGnD,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,CAAC,CAAC,KAAK,IAAK,KAAiC,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC;AAChF,CAAC;AAQD,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,MAAe;IAC7D,MAAM,OAAO,GAAG,SAAS,YAAY;QACnC,MAAM,IAAI,0BAA0B,CAAC,OAAO,SAAS,yDAAyD,CAAC,CAAC;IAClH,CAA+D,CAAC;IAChE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAClE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,EAAE,CAChC,SAAS,OAAO;QACd,MAAM,IAAI,0BAA0B,CAClC,GAAG,SAAS,IAAI,MAAM,wEAAwE;YAC5F,sDAAsD,CACzD,CAAC;IACJ,CAAC,CAAC;IACJ,KAAK,MAAM,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACxC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,qBAAqB,EAAE,CAAC;QAC3C,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/core/common/persistence/sql/mysql/mysql-data-store.d.ts

@@ -0,0 +1,46 @@
+import { Logger } from '@nestjs/common';
+import type { DataStoreUpdate, FindOptions, PushOptions, StoreCapabilities, StoredRecord, UpdateOptions, Where } from '../../data-store.interface.js';
+import type { FieldDescriptor, ModelDescriptor } from '../../model-descriptor.interface.js';
+import { SqlDataStore, type SqlDataStoreOptions } from '../sql-data-store.js';
+import { SqlParams } from '../sql-naming.js';
+import type { MysqlExecutor } from './mysql-executor.js';
+import type { MysqlVariant } from './mysql-session.js';
+export declare const MYSQL_STORE_CAPABILITIES: Readonly<StoreCapabilities>;
+export declare const MYSQL_ERRORS: {
+    readonly checkFailed: Record<MysqlVariant, number>;
+    readonly dataTooLong: 1406;
+    readonly duplicateEntry: 1062;
+};
+export declare class MysqlDataStore<T = Record<string, any>> extends SqlDataStore<T> {
+    readonly capabilities: Readonly<StoreCapabilities>;
+    readonly driver: string;
+    protected readonly logger: Logger;
+    private readonly variant;
+    constructor(executor: MysqlExecutor, model: ModelDescriptor, options?: SqlDataStoreOptions);
+    count(where?: Where<T>): Promise<number>;
+    sum(field: string, where?: Where<T>): Promise<{
+        count: number;
+        sum: number;
+    }>;
+    distinct(field: string, where?: Where<T>): Promise<unknown[]>;
+    find(where?: Where<T>, options?: FindOptions): Promise<StoredRecord<T>[]>;
+    insert(record: Partial<T>): Promise<StoredRecord<T>>;
+    updateById(id: string, update: DataStoreUpdate<T>, options?: UpdateOptions): Promise<null | StoredRecord<T>>;
+    updateOne(where: Where<T>, update: DataStoreUpdate<T>): Promise<null | StoredRecord<T>>;
+    deleteById(id: string): Promise<null | StoredRecord<T>>;
+    deleteOne(where: Where<T>): Promise<null | StoredRecord<T>>;
+    pushToArray(id: string, field: string, items: readonly unknown[], options?: PushOptions): Promise<void>;
+    pullFromArray(id: string, field: string, condition: unknown): Promise<void>;
+    protected quote(name: string): string;
+    protected compileWhere(where: Where, params: SqlParams): string;
+    protected compileUpdate(update: DataStoreUpdate, params: SqlParams): string[];
+    protected orderBy(options: FindOptions, params: SqlParams): string;
+    protected itemOrder(sort: Record<string, -1 | 1> | number, params: SqlParams): string;
+    protected toColumn(field: FieldDescriptor, path: string, value: unknown, params: SqlParams): string;
+    protected fromColumn(field: FieldDescriptor, value: unknown): unknown;
+    protected mapError(error: unknown): unknown;
+    private transaction;
+    private readById;
+    private lockFirst;
+    private deleteFirst;
+}