@lenne.tech/nest-server 12.1.0 → 12.2.0

package/dist/server/modules/error-code/error-codes.d.ts

@@ -60,6 +60,7 @@ export declare const ErrorCode: {
     REQUEST_BODY_TOO_LARGE: string;
     RESOURCE_NOT_FOUND: string;
     RESOURCE_ALREADY_EXISTS: string;
+    VERSION_CONFLICT: string;
     FILE_NOT_FOUND: string;
     FILE_UPLOAD_FAILED: string;
     FILE_TYPE_NOT_ALLOWED: string;
@@ -78,6 +79,11 @@ export declare const ErrorCode: {
     AI_RATE_LIMITED: string;
     AI_PROVIDER_ERROR: string;
     AI_CONNECTION_INVALID_URL: string;
+    SYNC_RESYNC_REQUIRED: string;
+    SYNC_MODEL_NOT_FOUND: string;
+    SYNC_INVALID_REQUEST: string;
+    SYNC_ORIGIN_REFUSED: string;
+    SYNC_STORE_UNAVAILABLE: string;
     DEMO_ERROR: string;
     FEATURE_NOT_AVAILABLE: string;
 };

package/dist/server/modules/sync-note/inputs/sync-note-create.input.d.ts

@@ -0,0 +1,4 @@
+import { SyncNoteInput } from './sync-note.input.js';
+export declare class SyncNoteCreateInput extends SyncNoteInput {
+    title: string;
+}

package/dist/server/modules/sync-note/inputs/sync-note-create.input.js

@@ -0,0 +1,27 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { InputType } from '@nestjs/graphql';
+import { Restricted } from '../../../../core/common/decorators/restricted.decorator.js';
+import { UnifiedField } from '../../../../core/common/decorators/unified-field.decorator.js';
+import { RoleEnum } from '../../../../core/common/enums/role.enum.js';
+import { SyncNoteInput } from './sync-note.input.js';
+let SyncNoteCreateInput = class SyncNoteCreateInput extends SyncNoteInput {
+    title = undefined;
+};
+__decorate([
+    UnifiedField({ description: 'Title of the note', roles: RoleEnum.S_EVERYONE }),
+    __metadata("design:type", String)
+], SyncNoteCreateInput.prototype, "title", void 0);
+SyncNoteCreateInput = __decorate([
+    InputType({ description: 'Input to create a synchronized note' }),
+    Restricted(RoleEnum.ADMIN)
+], SyncNoteCreateInput);
+export { SyncNoteCreateInput };
+//# sourceMappingURL=sync-note-create.input.js.map

package/dist/server/modules/sync-note/inputs/sync-note-create.input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-note-create.input.js","sourceRoot":"","sources":["../../../../../src/server/modules/sync-note/inputs/sync-note-create.input.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,UAAU,EAAE,MAAM,4DAA4D,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,+DAA+D,CAAC;AAC7F,OAAO,EAAE,QAAQ,EAAE,MAAM,4CAA4C,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAK9C,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,aAAa;IAE3C,KAAK,GAAW,SAAS,CAAC;CACpC,CAAA;AADU;IADR,YAAY,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;;kDAC5C;AAFxB,mBAAmB;IAF/B,SAAS,CAAC,EAAE,WAAW,EAAE,qCAAqC,EAAE,CAAC;IACjE,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;GACd,mBAAmB,CAG/B"}

package/dist/server/modules/sync-note/inputs/sync-note.input.d.ts

@@ -0,0 +1,6 @@
+import { CoreInput } from '../../../../core/common/inputs/core-input.input.js';
+export declare class SyncNoteInput extends CoreInput {
+    body?: string;
+    priority?: number;
+    title?: string;
+}

package/dist/server/modules/sync-note/inputs/sync-note.input.js

@@ -0,0 +1,37 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { InputType } from '@nestjs/graphql';
+import { Restricted } from '../../../../core/common/decorators/restricted.decorator.js';
+import { UnifiedField } from '../../../../core/common/decorators/unified-field.decorator.js';
+import { RoleEnum } from '../../../../core/common/enums/role.enum.js';
+import { CoreInput } from '../../../../core/common/inputs/core-input.input.js';
+let SyncNoteInput = class SyncNoteInput extends CoreInput {
+    body = undefined;
+    priority = undefined;
+    title = undefined;
+};
+__decorate([
+    UnifiedField({ description: 'Text of the note', isOptional: true, roles: RoleEnum.S_EVERYONE }),
+    __metadata("design:type", String)
+], SyncNoteInput.prototype, "body", void 0);
+__decorate([
+    UnifiedField({ description: 'Priority of the note', isOptional: true, roles: RoleEnum.S_EVERYONE }),
+    __metadata("design:type", Number)
+], SyncNoteInput.prototype, "priority", void 0);
+__decorate([
+    UnifiedField({ description: 'Title of the note', isOptional: true, roles: RoleEnum.S_EVERYONE }),
+    __metadata("design:type", String)
+], SyncNoteInput.prototype, "title", void 0);
+SyncNoteInput = __decorate([
+    InputType({ description: 'Input to change a synchronized note' }),
+    Restricted(RoleEnum.ADMIN)
+], SyncNoteInput);
+export { SyncNoteInput };
+//# sourceMappingURL=sync-note.input.js.map

package/dist/server/modules/sync-note/inputs/sync-note.input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-note.input.js","sourceRoot":"","sources":["../../../../../src/server/modules/sync-note/inputs/sync-note.input.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,UAAU,EAAE,MAAM,4DAA4D,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,+DAA+D,CAAC;AAC7F,OAAO,EAAE,QAAQ,EAAE,MAAM,4CAA4C,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,oDAAoD,CAAC;AAQxE,IAAM,aAAa,GAAnB,MAAM,aAAc,SAAQ,SAAS;IAE1C,IAAI,GAAY,SAAS,CAAC;IAG1B,QAAQ,GAAY,SAAS,CAAC;IAG9B,KAAK,GAAY,SAAS,CAAC;CAC5B,CAAA;AAPC;IADC,YAAY,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;;2CACtE;AAG1B;IADC,YAAY,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;;+CACtE;AAG9B;IADC,YAAY,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;;4CACtE;AARhB,aAAa;IAFzB,SAAS,CAAC,EAAE,WAAW,EAAE,qCAAqC,EAAE,CAAC;IACjE,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;GACd,aAAa,CASzB"}

package/dist/server/modules/sync-note/sync-note.model.d.ts

@@ -0,0 +1,10 @@
+import type { Types } from 'mongoose';
+import { CorePersistenceModel } from '../../../core/common/models/core-persistence.model.js';
+export declare class SyncNote extends CorePersistenceModel {
+    body?: string;
+    createdBy?: string | Types.ObjectId;
+    priority?: number;
+    title?: string;
+    securityCheck(user: any, force?: boolean): this;
+}
+export declare const SyncNoteSchema: any;

package/dist/server/modules/sync-note/sync-note.model.js

@@ -0,0 +1,73 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { ObjectType } from '@nestjs/graphql';
+import { Restricted } from '../../../core/common/decorators/restricted.decorator.js';
+import { UnifiedField } from '../../../core/common/decorators/unified-field.decorator.js';
+import { RoleEnum } from '../../../core/common/enums/role.enum.js';
+import { equalIds } from '../../../core/common/helpers/id.helper.js';
+import { CorePersistenceModel } from '../../../core/common/models/core-persistence.model.js';
+import { objectIdType, Schema as MongooseSchema, SchemaFactory, } from '../../../core/common/persistence/mongo/mongoose-compat.js';
+import { PersistedModel } from '../../../core/common/persistence/persisted-model.decorator.js';
+import { SyncField } from '../../../core/modules/sync/core-sync.decorators.js';
+let SyncNote = class SyncNote extends CorePersistenceModel {
+    body = undefined;
+    createdBy = undefined;
+    priority = undefined;
+    title = undefined;
+    securityCheck(user, force) {
+        if (force || user?.hasRole?.([RoleEnum.ADMIN]) || (user?.id && equalIds(this.createdBy, user))) {
+            return this;
+        }
+        return undefined;
+    }
+};
+__decorate([
+    UnifiedField({ description: 'Text of the note', isOptional: true, mongoose: true, roles: RoleEnum.S_EVERYONE }),
+    __metadata("design:type", String)
+], SyncNote.prototype, "body", void 0);
+__decorate([
+    UnifiedField({
+        description: 'ID of the user who created the note',
+        isOptional: true,
+        mongoose: { type: objectIdType() },
+        roles: RoleEnum.S_EVERYONE,
+        swaggerApiOptions: { type: String },
+        type: () => String,
+    }),
+    __metadata("design:type", Object)
+], SyncNote.prototype, "createdBy", void 0);
+__decorate([
+    SyncField('reject'),
+    UnifiedField({ description: 'Priority of the note', isOptional: true, mongoose: true, roles: RoleEnum.S_EVERYONE }),
+    __metadata("design:type", Number)
+], SyncNote.prototype, "priority", void 0);
+__decorate([
+    UnifiedField({ description: 'Title of the note', isOptional: true, mongoose: true, roles: RoleEnum.S_EVERYONE }),
+    __metadata("design:type", String)
+], SyncNote.prototype, "title", void 0);
+SyncNote = __decorate([
+    PersistedModel({
+        sync: {
+            roles: {
+                create: [RoleEnum.S_USER],
+                delete: [RoleEnum.ADMIN, RoleEnum.S_CREATOR],
+                pull: [RoleEnum.S_USER],
+                update: [RoleEnum.ADMIN, RoleEnum.S_CREATOR],
+            },
+            strategy: 'merge',
+        },
+    }),
+    MongooseSchema({ timestamps: true }),
+    ObjectType({ description: 'Note synchronized to offline clients' }),
+    Restricted(RoleEnum.ADMIN)
+], SyncNote);
+export { SyncNote };
+export const SyncNoteSchema = SchemaFactory.createForClass(SyncNote);
+//# sourceMappingURL=sync-note.model.js.map

package/dist/server/modules/sync-note/sync-note.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-note.model.js","sourceRoot":"","sources":["../../../../src/server/modules/sync-note/sync-note.model.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG7C,OAAO,EAAE,UAAU,EAAE,MAAM,yDAAyD,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,4DAA4D,CAAC;AAC1F,OAAO,EAAE,QAAQ,EAAE,MAAM,yCAAyC,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,2CAA2C,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uDAAuD,CAAC;AAC7F,OAAO,EACL,YAAY,EACZ,MAAM,IAAI,cAAc,EACxB,aAAa,GACd,MAAM,2DAA2D,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,+DAA+D,CAAC;AAC/F,OAAO,EAAE,SAAS,EAAE,MAAM,oDAAoD,CAAC;AA8BxE,IAAM,QAAQ,GAAd,MAAM,QAAS,SAAQ,oBAAoB;IAEhD,IAAI,GAAY,SAAS,CAAC;IAW1B,SAAS,GAA6B,SAAS,CAAC;IAKhD,QAAQ,GAAY,SAAS,CAAC;IAG9B,KAAK,GAAY,SAAS,CAAC;IAGlB,aAAa,CAAC,IAAS,EAAE,KAAe;QAC/C,IAAI,KAAK,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAC/F,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF,CAAA;AA5BC;IADC,YAAY,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;;sCACtF;AAW1B;IARC,YAAY,CAAC;QACZ,WAAW,EAAE,qCAAqC;QAClD,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE;QAClC,KAAK,EAAE,QAAQ,CAAC,UAAU;QAC1B,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACnC,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM;KACnB,CAAC;;2CAC8C;AAKhD;IAFC,SAAS,CAAC,QAAQ,CAAC;IACnB,YAAY,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;;0CACtF;AAG9B;IADC,YAAY,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;;uCACtF;AArBhB,QAAQ;IAdpB,cAAc,CAAC;QACd,IAAI,EAAE;YACJ,KAAK,EAAE;gBACL,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACzB,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC;gBAC5C,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACvB,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC;aAC7C;YACD,QAAQ,EAAE,OAAO;SAClB;KACF,CAAC;IACD,cAAc,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACpC,UAAU,CAAC,EAAE,WAAW,EAAE,sCAAsC,EAAE,CAAC;IACnE,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;GACd,QAAQ,CA8BpB;;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC"}

package/dist/server/modules/sync-note/sync-note.module.d.ts

@@ -0,0 +1,2 @@
+export declare class SyncNoteModule {
+}

package/dist/server/modules/sync-note/sync-note.module.js

@@ -0,0 +1,21 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { Module } from '@nestjs/common';
+import { CorePersistenceModule } from '../../../core/common/persistence/core-persistence.module.js';
+import { SyncNote, SyncNoteSchema } from './sync-note.model.js';
+import { SyncNoteService } from './sync-note.service.js';
+let SyncNoteModule = class SyncNoteModule {
+};
+SyncNoteModule = __decorate([
+    Module({
+        exports: [SyncNoteService],
+        imports: [CorePersistenceModule.forFeature([{ model: SyncNote, name: SyncNote.name, schema: SyncNoteSchema }])],
+        providers: [SyncNoteService],
+    })
+], SyncNoteModule);
+export { SyncNoteModule };
+//# sourceMappingURL=sync-note.module.js.map

package/dist/server/modules/sync-note/sync-note.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-note.module.js","sourceRoot":"","sources":["../../../../src/server/modules/sync-note/sync-note.module.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAExC,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAWlD,IAAM,cAAc,GAApB,MAAM,cAAc;CAAG,CAAA;AAAjB,cAAc;IAL1B,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,eAAe,CAAC;QAC1B,OAAO,EAAE,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;QAC/G,SAAS,EAAE,CAAC,eAAe,CAAC;KAC7B,CAAC;GACW,cAAc,CAAG"}

package/dist/server/modules/sync-note/sync-note.service.d.ts

@@ -0,0 +1,10 @@
+import type { DataStore } from '../../../core/common/persistence/data-store.interface.js';
+import { ConfigService } from '../../../core/common/services/config.service.js';
+import { CrudService } from '../../../core/common/services/crud.service.js';
+import { SyncNoteCreateInput } from './inputs/sync-note-create.input.js';
+import { SyncNoteInput } from './inputs/sync-note.input.js';
+import { SyncNote } from './sync-note.model.js';
+export declare class SyncNoteService extends CrudService<SyncNote, SyncNoteCreateInput, SyncNoteInput> {
+    protected readonly configService: ConfigService;
+    constructor(configService: ConfigService, store: DataStore<SyncNote>);
+}

package/dist/server/modules/sync-note/sync-note.service.js

@@ -0,0 +1,35 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Injectable } from '@nestjs/common';
+import { InjectStore } from '../../../core/common/persistence/inject-store.decorator.js';
+import { ConfigService } from '../../../core/common/services/config.service.js';
+import { CrudService } from '../../../core/common/services/crud.service.js';
+import { SyncService } from '../../../core/modules/sync/core-sync.decorators.js';
+import { SyncNoteCreateInput } from './inputs/sync-note-create.input.js';
+import { SyncNoteInput } from './inputs/sync-note.input.js';
+import { SyncNote } from './sync-note.model.js';
+let SyncNoteService = class SyncNoteService extends CrudService {
+    configService;
+    constructor(configService, store) {
+        super({ configService, dataStore: store, mainModelConstructor: SyncNote });
+        this.configService = configService;
+    }
+};
+SyncNoteService = __decorate([
+    SyncService({ createInput: SyncNoteCreateInput, model: SyncNote, updateInput: SyncNoteInput }),
+    Injectable(),
+    __param(1, InjectStore(SyncNote)),
+    __metadata("design:paramtypes", [ConfigService, Object])
+], SyncNoteService);
+export { SyncNoteService };
+//# sourceMappingURL=sync-note.service.js.map

package/dist/server/modules/sync-note/sync-note.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-note.service.js","sourceRoot":"","sources":["../../../../src/server/modules/sync-note/sync-note.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAG5C,OAAO,EAAE,WAAW,EAAE,MAAM,4DAA4D,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,iDAAiD,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,MAAM,oDAAoD,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAQzC,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,WAAyD;IAE9D;IAD9B,YAC8B,aAA4B,EACjC,KAA0B;QAEjD,KAAK,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC,CAAC;QAH/C,kBAAa,GAAb,aAAa,CAAe;IAI1D,CAAC;CACF,CAAA;AAPY,eAAe;IAF3B,WAAW,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;IAC9F,UAAU,EAAE;IAIR,WAAA,WAAW,CAAC,QAAQ,CAAC,CAAA;qCADqB,aAAa;GAF/C,eAAe,CAO3B"}

package/docs/REQUEST-LIFECYCLE.md

@@ -41,7 +41,7 @@ The `CoreModule` is a dynamic module that bootstraps the entire framework:
 | **Security Pipeline** | 4 global interceptors, global validation pipe, middleware stack |
 | **Mongoose Plugins** | Auto-registration of ID, password, audit, and role guard plugins |
 | **GraphQL Subscriptions** | WebSocket support with JWT/session authentication (cluster-wide when `redis` is configured — see the Subscriptions row under GraphQL Features) |
-| **Central Redis (optional)** | `CoreRedisService` — globally provided **and exported** by `CoreModule`, always present but **inert unless `redis` is configured** ("presence implies enabled"). Injected with `@Optional()`; every consumer keeps a process-local fallback. One service serves all features: shared client (`getClient()`), one cached subscriber (`getSubscriber()` — a subscribing client cannot run commands), dedicated connections (`createClient(label)`); all tracked and quit on shutdown. Keys are namespaced by the framework per key via `key(...)`, **not** through ioredis's own `keyPrefix` (that would collide with BullMQ's prefix). Requires the OPTIONAL peer `ioredis` — configured but missing **fails the boot**. Switches on: exact cross-replica rate limits, cron deduplication, `CoreRedisPubSub` as `PUB_SUB`, tenant-cache invalidation broadcast, Hub collector mirroring, MCP session registry |
+| **Central Redis (optional)** | `CoreRedisService` — globally provided **and exported** by `CoreModule`, always present but **inert unless `redis` is configured** ("presence implies enabled"). Injected with `@Optional()`; every consumer keeps a process-local fallback. One service serves all features: shared client (`getClient()`), one cached subscriber (`getSubscriber()` — a subscribing client cannot run commands), dedicated connections (`createClient(label)`); all tracked and quit on shutdown. Keys are namespaced by the framework per key via `key(...)`, **not** through ioredis's own `keyPrefix` (that would collide with BullMQ's prefix). Requires the OPTIONAL peer `ioredis` — configured but missing **fails the boot**. Switches on: exact cross-replica rate limits, cron deduplication, `CoreRedisPubSub` as `PUB_SUB`, tenant-cache invalidation broadcast, Better-Auth user-cache (roles/verification) invalidation broadcast, Hub collector mirroring, MCP session registry |
 | **Central S3 (optional)** | `CoreS3Service` — globally provided **and exported** by `CoreModule`, inert unless `s3` is configured *and* names a `bucket` (a bucket-less block is ignored with a warning). Backs `file.storage: 's3'` and TUS staging (`tus.s3Staging`). Requires the OPTIONAL peers `@aws-sdk/client-s3` (+ `@aws-sdk/s3-request-presigner` for `presignedDownloads`) — configured but missing **fails the boot**. `@aws-sdk/lib-storage` (optional) uploads streams of unknown length in parts; without it they are buffered in memory, with one boot warning |
 | **Configuration System** | `config.env.ts` with ENV variables, `NEST_SERVER_CONFIG` JSON, `NSC__*` prefixes |
 | **Cookie Handling** | Enabled by default (`cookies: true`), configurable via `ICookiesConfig` with `exposeTokenInBody` option |
@@ -114,7 +114,7 @@ JWT-based authentication for existing projects:
 | **Tenant Isolation** | Header-based multi-tenant isolation with membership validation (opt-in) |
 | **Tenant Guard** | `CoreTenantGuard` validates tenant membership — and, with `multiTenancy.isTenantActive` (11.42.0), that the tenant is not deactivated; system roles (`S_EVERYONE`, `S_USER`, `S_VERIFIED`) are checked as OR alternatives before real roles; hierarchy roles (`@Roles(DefaultHR.MEMBER)`), `@SkipTenantCheck()`, BetterAuth auto-skip (`betterAuth.skipTenantCheck`). It runs AFTER the role guard (4 → 4b below); where registration order puts it first — `CoreModule` registers it ahead of a project's `AuthModule`, so with legacy JWTs nobody is identified yet — it lets the application's role guard (`ROLE_GUARD` token) identify the caller first |
 | **Tenant Plugin Safety Net** | Mongoose tenant plugin throws `ForbiddenException` when tenant-schema is accessed without valid tenant context. Its post hooks (`find`, `findOne`, `findOneAnd*`) additionally check every RETURNED row (`assertRowsInTenantScope()`): a row of a tenant outside the caller's scope withholds the whole result with 403. The decisions live in `common/persistence/policies/tenant.policy.ts`, which every data store shares |
-| **Data Store** | `DataStore<T>` (`common/persistence/`) is the database-neutral port below the CrudService pipeline; every `ModuleService` has one (`this.dataStore`, derived from `mainDbModel`, or passed as `dataStore`). On MongoDB it runs through Mongoose model methods, so every plugin fires. On PostgreSQL (`SqlDataStore`, phase 1) the same pipeline runs on plain records: before every statement the store applies the policies the plugins call (tenant filter and stamping, safety net, audit, password, role guard, system roles), the statement runs in its own transaction with the request's tenant scope so FORCED row-level security binds it (a query without a scope fails with 42501 → 403), and every returned row passes the tenant row check. References populate with one batched `id $in` read through the target model's store. Mongoose-only APIs (`aggregate`, `getModel`, native collection/connection) refuse on a SQL-stored model, and so does the Mongoose model itself (every data method of a model routed to SQL throws a named error). Since phase 2 the core's own models — users, tenant memberships, API tokens — are registered this way and their services run on the routed store; the port gained `updateOne` / `deleteOne` (atomic first match), `updateMany`, `deleteMany` and `updateById(…, { timestamps: false })`. Since phase 3 Better-Auth follows the user model: with the users on a SQL source it runs its own Kysely adapter on that source's application pool, one `users` row per user, and the framework's reads of Better-Auth's data (session lookup by token in the middleware, token service, JWKS, passkey challenge mappings, e-mail-verified hook, user mapper, system setup, migration status, the MCP OAuth subject's roles) go through `BetterAuthSqlStore` — see `.claude/rules/better-auth.md` §11. Since phase 4 the AI module (eleven models, MCP OAuth clients, codes and refresh tokens) and the S3 / filesystem file metadata (`fileMetadataCollection()`, used by the file service, the TUS hand-off and the Hub) follow their routed store too; the port gained `sum()` and `find(…, { exclude })`, and an expiry sweep removes expired rows of TTL models and expired Better-Auth sessions on SQL, where no TTL index does. `CorePersistenceModule.forFeature()` + `@InjectStore()` register and inject the store; the `database` configuration routes each model to its source. Since phase 5 (12.1.0) MongoDB's libraries are optional peers: the core reaches them through `common/persistence/mongo/` (decorators that record the declaration and apply `@nestjs/mongoose`'s where installed, tokens, ObjectIds, GridFS), `CoreModule` connects MongoDB only when a source uses it, `forFeature()` provides the model tokens itself (a stand-in that refuses data access where no MongoDB is connected), and `database: false` runs without any database; the port gained `find(…, { sample })`, and the SQL update compiler skips a field given as `undefined` as Mongoose does |
+| **Data Store** | `DataStore<T>` (`common/persistence/`) is the database-neutral port below the CrudService pipeline; every `ModuleService` has one (`this.dataStore`, derived from `mainDbModel`, or passed as `dataStore`). On MongoDB it runs through Mongoose model methods, so every plugin fires. On PostgreSQL (`SqlDataStore`, phase 1) the same pipeline runs on plain records: before every statement the store applies the policies the plugins call (tenant filter and stamping, safety net, audit, password, role guard, system roles), the statement runs in its own transaction with the request's tenant scope so FORCED row-level security binds it (a query without a scope fails with 42501 → 403), and every returned row passes the tenant row check. References populate with one batched `id $in` read through the target model's store. Mongoose-only APIs (`aggregate`, `getModel`, native collection/connection) refuse on a SQL-stored model, and so does the Mongoose model itself (every data method of a model routed to SQL throws a named error). Since phase 2 the core's own models — users, tenant memberships, API tokens — are registered this way and their services run on the routed store; the port gained `updateOne` / `deleteOne` (atomic first match), `updateMany`, `deleteMany` and `updateById(…, { timestamps: false })`. Since phase 3 Better-Auth follows the user model: with the users on a SQL source (PostgreSQL; MySQL / MariaDB since 12.1.1) it runs its own Kysely adapter on that source's application pool, one `users` row per user, and the framework's reads of Better-Auth's data (session lookup by token in the middleware, token service, JWKS, passkey challenge mappings, e-mail-verified hook, user mapper, system setup, migration status, the MCP OAuth subject's roles) go through `BetterAuthSqlStore` — see `.claude/rules/better-auth.md` §11. Since phase 4 the AI module (eleven models, MCP OAuth clients, codes and refresh tokens) and the S3 / filesystem file metadata (`fileMetadataCollection()`, used by the file service, the TUS hand-off and the Hub) follow their routed store too; the port gained `sum()` and `find(…, { exclude })`, and an expiry sweep removes expired rows of TTL models and expired Better-Auth sessions on SQL, where no TTL index does. `CorePersistenceModule.forFeature()` + `@InjectStore()` register and inject the store; the `database` configuration routes each model to its source. Since phase 5 (12.1.0) MongoDB's libraries are optional peers: the core reaches them through `common/persistence/mongo/` (decorators that record the declaration and apply `@nestjs/mongoose`'s where installed, tokens, ObjectIds, GridFS), `CoreModule` connects MongoDB only when a source uses it, `forFeature()` provides the model tokens itself (a stand-in that refuses data access where no MongoDB is connected), and `database: false` runs without any database; the port gained `find(…, { sample })`, and the SQL update compiler skips a field given as `undefined` as Mongoose does |
 | **API Tokens** | `apiTokens` config (opt-in): USER tokens act as their user without global roles; TENANT tokens (multi-tenancy only) act with the lowest tenant role in their own tenant. `CoreApiTokenMiddleware` authenticates `Authorization: Bearer` / `x-api-key`; every guard denies a token unless the route declares `@ApiTokenScopes()`. Signed short-lived assertions for embedded pages. See `src/core/modules/api-token/README.md` |
 
 ### Data & CRUD
@@ -131,6 +131,7 @@ JWT-based authentication for existing projects:
 | **Bulk Operations** | Batch create/update/delete |
 | **Force Mode** | `force: true` bypasses all security checks |
 | **Raw Mode** | `raw: true` skips prepareInput/prepareOutput |
+| **Synchronized models** | `@PersistedModel({ sync })` (offline sync, 12.x): the store writes `version`, `deletedAt` and the change position on every write path (on MongoDB through `mongo/sync-schema.plugin.ts`, applied to these schemas only); `CrudService.delete()` and every port delete leave a tombstone, reads leave tombstones out unless `includeTombstones`, and `ServiceOptions.expectedVersion` makes `update()` / `delete()` one conditional statement (409 `VersionConflictError` on another version). Unique indexes apply to live records only. With the `sync` configuration (12.2.0) the sync module serves `GET/POST /sync/{model}` for models whose CrudService carries `@SyncService()`: `@Roles(S_USER)` on the route, the model's `sync.roles` passed as `serviceOptions.roles` on every CrudService call, every pulled record through `securityCheck()`, a header-less request scoped to the caller's memberships, the 410 resync body written by the controller itself (`src/core/modules/sync/README.md`). Change hints (`GET /sync/hints`, SSE, and the GraphQL subscription `syncHint`) carry `{ model, at }` only, sent from the CrudService's create / update / delete of such a model and delivered to a subscriber only with the model's pull roles and access to the tenant of the change; the SSE stream registers with the WebSocket re-check registry and ends on every invalidation or re-check, so the client reconnects with its current rights. An hourly purge removes tombstones past `sync.retention.tombstonesDays` after moving the retention horizon past them. What a client must delete on logout is in the module's `SECURITY.md`. See `.claude/rules/persistence.md` → "Synchronized models" |
 
 ### Models & Inputs
 

package/docs/choosing-a-database.md

@@ -2,8 +2,8 @@
 
 Since 12.1.0 a `@lenne.tech/nest-server` project stores its data in **MongoDB** (the default), in **PostgreSQL**, in
 **MySQL 8.4 / MariaDB 11.8**, or in several of them, model by model. The framework's own modules (users, tenants, API
-tokens, AI, file metadata, locks, migrations) run on each, behind one `CrudService` and one security pipeline;
-Better-Auth runs on MongoDB and PostgreSQL. This document is the decision
+tokens, AI, file metadata, locks, migrations) run on each, behind one `CrudService` and one security pipeline, and so
+does Better-Auth (on MySQL / MariaDB since 12.1.1). This document is the decision
 procedure — for a developer starting a project and for an AI agent asked to set one up. Configuration details are in
 `.claude/rules/configurable-features.md` (row "Data Sources"); the code rules in `.claude/rules/persistence.md`.
 
@@ -31,8 +31,11 @@ Work through the steps in order; the first one that decides, decides.
      own reaches every tenant's rows unless it filters by `tenantId` itself. The boot says so once per source. A
      trigger-based write guard was measured and not built: it cost up to half of MariaDB's write throughput and left
      the native read open.
-   - **Better-Auth does not run there yet:** keep the user model (`users`) on PostgreSQL or MongoDB
-     (`database.models`), or sign in through the legacy endpoints only. The boot refuses the combination.
+   - **Better-Auth's tables are created by Better-Auth** (12.1.1+), in the database's default collation — so the
+     framework switches that default to `utf8mb4_bin` and back while Better-Auth creates a table, and its tables
+     compare byte-wise like the framework's. That switch locks every table of the database, so it runs only on a boot
+     that creates one, and waits at most five seconds behind an open transaction before the boot fails. This needs the owner connection (`database.ownerUrl`), as every
+     schema change does; Better-Auth's own column types apply there (`timestamp(3)`, `varchar(36)` ids).
    - **An indexed text field holds at most 255 characters** (a longer value is refused with 400); every other text is
      unbounded. Indexing an existing text field later is a type change, i.e. a reviewed migration.
    - **Schema changes are not transactional:** MySQL commits every DDL statement on its own, so a failed change leaves