@neohm/nestend 4.1.1 → 5.0.0

package/dist/common/types/remote.request.options.d.ts

@@ -6,5 +6,11 @@ export interface RemoteRequestOptions {
     contentType?: ApiContentTypeEnum;
     body?: Record<string, unknown> | string;
     headers?: Record<string, string>;
+    timeoutMs?: number;
+    followRedirects?: boolean;
+    maxResponseBytes?: number;
+    allowHttp?: boolean;
+    allowedHosts?: string[];
+    blockPrivateNetworks?: boolean;
 }
 //# sourceMappingURL=remote.request.options.d.ts.map

package/dist/common/types/remote.request.options.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote.request.options.d.ts","sourceRoot":"","sources":["../../../src/common/types/remote.request.options.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAEpE,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,kBAAkB,CAAC;IAChC,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC"}
+{"version":3,"file":"remote.request.options.d.ts","sourceRoot":"","sources":["../../../src/common/types/remote.request.options.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAEpE,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,kBAAkB,CAAC;IAChC,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEjC,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAKxB,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC"}

package/dist/common/types/security.headers.types.d.ts

@@ -0,0 +1,6 @@
+export interface SecurityHeadersOptions {
+    hsts?: boolean;
+    hstsMaxAgeSeconds?: number;
+    relaxedCspPaths?: string[];
+}
+//# sourceMappingURL=security.headers.types.d.ts.map

package/dist/common/types/security.headers.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.headers.types.d.ts","sourceRoot":"","sources":["../../../src/common/types/security.headers.types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,sBAAsB;IAErC,IAAI,CAAC,EAAE,OAAO,CAAC;IAEf,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B"}

package/dist/common/types/security.headers.types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=security.headers.types.js.map

package/dist/common/types/security.headers.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.headers.types.js","sourceRoot":"","sources":["../../../src/common/types/security.headers.types.ts"],"names":[],"mappings":""}

package/dist/common/validators/schedule.validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schedule.validator.d.ts","sourceRoot":"","sources":["../../../src/common/validators/schedule.validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAQvE,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE,iBAAiB,IACzC,QAAQ,MAAM,EAAE,cAAc,MAAM,KAAG,IAAI,CAkB7D;AAGD,wBAAgB,UAAU,CAAC,OAAO,CAAC,EAAE,iBAAiB,IACnC,QAAQ,MAAM,EAAE,cAAc,MAAM,KAAG,IAAI,CAsB7D"}
+{"version":3,"file":"schedule.validator.d.ts","sourceRoot":"","sources":["../../../src/common/validators/schedule.validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAKvE,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE,iBAAiB,IACzC,QAAQ,MAAM,EAAE,cAAc,MAAM,KAAG,IAAI,CAqB7D;AAGD,wBAAgB,UAAU,CAAC,OAAO,CAAC,EAAE,iBAAiB,IACnC,QAAQ,MAAM,EAAE,cAAc,MAAM,KAAG,IAAI,CAsB7D"}

package/dist/common/validators/schedule.validator.js

@@ -4,6 +4,7 @@ exports.IsCronExpression = IsCronExpression;
 exports.IsTimezone = IsTimezone;
 const class_validator_1 = require("class-validator");
 const cron_schedule_resolver_1 = require("../libraries/cron.schedule.resolver");
+const schedule_utility_1 = require("../../global/utilities/schedule.utility");
 function IsCronExpression(options) {
     return function (target, propertyName) {
         (0, class_validator_1.registerDecorator)({
@@ -13,10 +14,11 @@ function IsCronExpression(options) {
             options,
             validator: {
                 validate(value) {
-                    return (typeof value === 'string' && cron_schedule_resolver_1.CronScheduleResolver.isValid(value));
+                    return (typeof value === 'string' &&
+                        cron_schedule_resolver_1.CronScheduleResolver.isSchedulable(value));
                 },
                 defaultMessage() {
-                    return `${propertyName} must be a valid cron expression`;
+                    return `${propertyName} must be a valid cron expression firing at most once every ${schedule_utility_1.ScheduleUtility.minIntervalMs() / 1000} seconds`;
                 },
             },
         });

package/dist/common/validators/schedule.validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"schedule.validator.js","sourceRoot":"","sources":["../../../src/common/validators/schedule.validator.ts"],"names":[],"mappings":";;AAQA,4CAmBC;AAGD,gCAuBC;AArDD,qDAAuE;AACvE,gFAA2E;AAO3E,SAAgB,gBAAgB,CAAC,OAA2B;IAC1D,OAAO,UAAU,MAAc,EAAE,YAAoB;QACnD,IAAA,mCAAiB,EAAC;YAChB,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM,CAAC,WAAW;YAC1B,YAAY;YACZ,OAAO;YACP,SAAS,EAAE;gBACT,QAAQ,CAAC,KAAc;oBACrB,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ,IAAI,6CAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,CACjE,CAAC;gBACJ,CAAC;gBACD,cAAc;oBACZ,OAAO,GAAG,YAAY,kCAAkC,CAAC;gBAC3D,CAAC;aACF;SACF,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAGD,SAAgB,UAAU,CAAC,OAA2B;IACpD,OAAO,UAAU,MAAc,EAAE,YAAoB;QACnD,IAAA,mCAAiB,EAAC;YAChB,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,MAAM,CAAC,WAAW;YAC1B,YAAY;YACZ,OAAO;YACP,SAAS,EAAE;gBACT,QAAQ,CAAC,KAAc;oBACrB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK;wBAAE,OAAO,KAAK,CAAC;oBACtD,IAAI,CAAC;wBACH,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;wBACxD,OAAO,IAAI,CAAC;oBACd,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,KAAK,CAAC;oBACf,CAAC;gBACH,CAAC;gBACD,cAAc;oBACZ,OAAO,GAAG,YAAY,qCAAqC,CAAC;gBAC9D,CAAC;aACF;SACF,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"schedule.validator.js","sourceRoot":"","sources":["../../../src/common/validators/schedule.validator.ts"],"names":[],"mappings":";;AAKA,4CAsBC;AAGD,gCAuBC;AArDD,qDAAuE;AACvE,gFAA2E;AAC3E,8EAA0E;AAG1E,SAAgB,gBAAgB,CAAC,OAA2B;IAC1D,OAAO,UAAU,MAAc,EAAE,YAAoB;QACnD,IAAA,mCAAiB,EAAC;YAChB,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM,CAAC,WAAW;YAC1B,YAAY;YACZ,OAAO;YACP,SAAS,EAAE;gBACT,QAAQ,CAAC,KAAc;oBACrB,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;wBACzB,6CAAoB,CAAC,aAAa,CAAC,KAAK,CAAC,CAC1C,CAAC;gBACJ,CAAC;gBACD,cAAc;oBACZ,OAAO,GAAG,YAAY,8DACpB,kCAAe,CAAC,aAAa,EAAE,GAAG,IACpC,UAAU,CAAC;gBACb,CAAC;aACF;SACF,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAGD,SAAgB,UAAU,CAAC,OAA2B;IACpD,OAAO,UAAU,MAAc,EAAE,YAAoB;QACnD,IAAA,mCAAiB,EAAC;YAChB,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,MAAM,CAAC,WAAW;YAC1B,YAAY;YACZ,OAAO;YACP,SAAS,EAAE;gBACT,QAAQ,CAAC,KAAc;oBACrB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK;wBAAE,OAAO,KAAK,CAAC;oBACtD,IAAI,CAAC;wBACH,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;wBACxD,OAAO,IAAI,CAAC;oBACd,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,KAAK,CAAC;oBACf,CAAC;gBACH,CAAC;gBACD,cAAc;oBACZ,OAAO,GAAG,YAAY,qCAAqC,CAAC;gBAC9D,CAAC;aACF;SACF,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/constants/job.constants.d.ts

@@ -2,6 +2,7 @@ export declare const baseJobConstants: {
     readonly setScheduledEventJob: "set.scheduled.event.job";
     readonly dispatchScheduledEventJob: "dispatch.scheduled.event.job";
     readonly systemScheduledTaskJob: "system.scheduled.task.job";
+    readonly purgeFailedJobsJob: "purge.failed.jobs.job";
     readonly tenantOnboardedJob: "tenant.onboarded.job";
     readonly tenantUserOnboardedJob: "tenant.user.onboarded.job";
     readonly tenantUserInvitedJob: "tenant.user.invited.job";

package/dist/constants/job.constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"job.constants.d.ts","sourceRoot":"","sources":["../../src/constants/job.constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gBAAgB;;;;;;;;CAQnB,CAAC"}
+{"version":3,"file":"job.constants.d.ts","sourceRoot":"","sources":["../../src/constants/job.constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gBAAgB;;;;;;;;;CASnB,CAAC"}

package/dist/constants/job.constants.js

@@ -5,6 +5,7 @@ exports.baseJobConstants = {
     setScheduledEventJob: 'set.scheduled.event.job',
     dispatchScheduledEventJob: 'dispatch.scheduled.event.job',
     systemScheduledTaskJob: 'system.scheduled.task.job',
+    purgeFailedJobsJob: 'purge.failed.jobs.job',
     tenantOnboardedJob: 'tenant.onboarded.job',
     tenantUserOnboardedJob: 'tenant.user.onboarded.job',
     tenantUserInvitedJob: 'tenant.user.invited.job',

package/dist/constants/job.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"job.constants.js","sourceRoot":"","sources":["../../src/constants/job.constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,gBAAgB,GAAG;IAC9B,oBAAoB,EAAE,yBAAyB;IAC/C,yBAAyB,EAAE,8BAA8B;IACzD,sBAAsB,EAAE,2BAA2B;IACnD,kBAAkB,EAAE,sBAAsB;IAC1C,sBAAsB,EAAE,2BAA2B;IACnD,oBAAoB,EAAE,yBAAyB;IAC/C,uBAAuB,EAAE,4BAA4B;CAC7C,CAAC"}
+{"version":3,"file":"job.constants.js","sourceRoot":"","sources":["../../src/constants/job.constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,gBAAgB,GAAG;IAC9B,oBAAoB,EAAE,yBAAyB;IAC/C,yBAAyB,EAAE,8BAA8B;IACzD,sBAAsB,EAAE,2BAA2B;IACnD,kBAAkB,EAAE,uBAAuB;IAC3C,kBAAkB,EAAE,sBAAsB;IAC1C,sBAAsB,EAAE,2BAA2B;IACnD,oBAAoB,EAAE,yBAAyB;IAC/C,uBAAuB,EAAE,4BAA4B;CAC7C,CAAC"}

package/dist/constants/job.maps.d.ts

@@ -1,9 +1,11 @@
 import { DispatchScheduledEventJob } from '../common/jobs/dispatch.scheduled.event.job';
 import { SetScheduledEventJob } from '../common/jobs/set.scheduled.event.job';
 import { SystemScheduledTaskJob } from '../common/jobs/system.scheduled.task.job';
+import { PurgeFailedJobsJob } from '../common/jobs/purge.failed.jobs.job';
 export declare const baseJobMaps: {
     readonly "set.scheduled.event.job": typeof SetScheduledEventJob;
     readonly "dispatch.scheduled.event.job": typeof DispatchScheduledEventJob;
     readonly "system.scheduled.task.job": typeof SystemScheduledTaskJob;
+    readonly "purge.failed.jobs.job": typeof PurgeFailedJobsJob;
 };
 //# sourceMappingURL=job.maps.d.ts.map

package/dist/constants/job.maps.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"job.maps.d.ts","sourceRoot":"","sources":["../../src/constants/job.maps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAMlF,eAAO,MAAM,WAAW;;;;CAId,CAAC"}
+{"version":3,"file":"job.maps.d.ts","sourceRoot":"","sources":["../../src/constants/job.maps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAM1E,eAAO,MAAM,WAAW;;;;;CAKd,CAAC"}

package/dist/constants/job.maps.js

@@ -4,10 +4,12 @@ exports.baseJobMaps = void 0;
 const dispatch_scheduled_event_job_1 = require("../common/jobs/dispatch.scheduled.event.job");
 const set_scheduled_event_job_1 = require("../common/jobs/set.scheduled.event.job");
 const system_scheduled_task_job_1 = require("../common/jobs/system.scheduled.task.job");
+const purge_failed_jobs_job_1 = require("../common/jobs/purge.failed.jobs.job");
 const job_constants_1 = require("./job.constants");
 exports.baseJobMaps = {
     [job_constants_1.baseJobConstants.setScheduledEventJob]: set_scheduled_event_job_1.SetScheduledEventJob,
     [job_constants_1.baseJobConstants.dispatchScheduledEventJob]: dispatch_scheduled_event_job_1.DispatchScheduledEventJob,
     [job_constants_1.baseJobConstants.systemScheduledTaskJob]: system_scheduled_task_job_1.SystemScheduledTaskJob,
+    [job_constants_1.baseJobConstants.purgeFailedJobsJob]: purge_failed_jobs_job_1.PurgeFailedJobsJob,
 };
 //# sourceMappingURL=job.maps.js.map

package/dist/constants/job.maps.js.map

@@ -1 +1 @@
-{"version":3,"file":"job.maps.js","sourceRoot":"","sources":["../../src/constants/job.maps.ts"],"names":[],"mappings":";;;AAAA,8FAAwF;AACxF,oFAA8E;AAC9E,wFAAkF;AAClF,mDAAmD;AAKtC,QAAA,WAAW,GAAG;IACzB,CAAC,gCAAgB,CAAC,oBAAoB,CAAC,EAAE,8CAAoB;IAC7D,CAAC,gCAAgB,CAAC,yBAAyB,CAAC,EAAE,wDAAyB;IACvE,CAAC,gCAAgB,CAAC,sBAAsB,CAAC,EAAE,kDAAsB;CACzD,CAAC"}
+{"version":3,"file":"job.maps.js","sourceRoot":"","sources":["../../src/constants/job.maps.ts"],"names":[],"mappings":";;;AAAA,8FAAwF;AACxF,oFAA8E;AAC9E,wFAAkF;AAClF,gFAA0E;AAC1E,mDAAmD;AAKtC,QAAA,WAAW,GAAG;IACzB,CAAC,gCAAgB,CAAC,oBAAoB,CAAC,EAAE,8CAAoB;IAC7D,CAAC,gCAAgB,CAAC,yBAAyB,CAAC,EAAE,wDAAyB;IACvE,CAAC,gCAAgB,CAAC,sBAAsB,CAAC,EAAE,kDAAsB;IACjE,CAAC,gCAAgB,CAAC,kBAAkB,CAAC,EAAE,0CAAkB;CACjD,CAAC"}

package/dist/constants/schedule.maps.d.ts

@@ -2,5 +2,6 @@ import { ScheduleKind } from '../common/enums/schedule.enum';
 import { ScheduleResolver, ScheduleSpec } from '../common/types/schedule.types';
 export declare const baseScheduleResolverMaps: Record<ScheduleKind, ScheduleResolver>;
 export declare function resolveScheduleSlot(spec: ScheduleSpec, after: Date, timezone: string): Date | null;
+export declare function assertScheduleSpec(spec: ScheduleSpec, timezone: string): void;
 export declare function seedScheduleCursor(spec: ScheduleSpec, startFrom: Date, timezone: string, now?: Date): Date | null;
 //# sourceMappingURL=schedule.maps.d.ts.map

package/dist/constants/schedule.maps.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schedule.maps.d.ts","sourceRoot":"","sources":["../../src/constants/schedule.maps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAI7D,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAQhF,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAKzE,CAAC;AAGJ,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,YAAY,EAClB,KAAK,EAAE,IAAI,EACX,QAAQ,EAAE,MAAM,GACf,IAAI,GAAG,IAAI,CAOb;AAkBD,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,YAAY,EAClB,SAAS,EAAE,IAAI,EACf,QAAQ,EAAE,MAAM,EAChB,GAAG,GAAE,IAAiB,GACrB,IAAI,GAAG,IAAI,CASb"}
+{"version":3,"file":"schedule.maps.d.ts","sourceRoot":"","sources":["../../src/constants/schedule.maps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAI7D,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAShF,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAKzE,CAAC;AAGJ,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,YAAY,EAClB,KAAK,EAAE,IAAI,EACX,QAAQ,EAAE,MAAM,GACf,IAAI,GAAG,IAAI,CAOb;AAMD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAe7E;AAkBD,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,YAAY,EAClB,SAAS,EAAE,IAAI,EACf,QAAQ,EAAE,MAAM,EAChB,GAAG,GAAE,IAAiB,GACrB,IAAI,GAAG,IAAI,CASb"}

package/dist/constants/schedule.maps.js

@@ -2,12 +2,14 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.baseScheduleResolverMaps = void 0;
 exports.resolveScheduleSlot = resolveScheduleSlot;
+exports.assertScheduleSpec = assertScheduleSpec;
 exports.seedScheduleCursor = seedScheduleCursor;
 const schedule_enum_1 = require("../common/enums/schedule.enum");
 const cron_schedule_resolver_1 = require("../common/libraries/cron.schedule.resolver");
 const interval_schedule_resolver_1 = require("../common/libraries/interval.schedule.resolver");
 const once_schedule_resolver_1 = require("../common/libraries/once.schedule.resolver");
 const operation_exception_1 = require("../global/exceptions/operation.exception");
+const schedule_utility_1 = require("../global/utilities/schedule.utility");
 exports.baseScheduleResolverMaps = {
     [schedule_enum_1.ScheduleKind.INTERVAL]: new interval_schedule_resolver_1.IntervalScheduleResolver(),
     [schedule_enum_1.ScheduleKind.CRON]: new cron_schedule_resolver_1.CronScheduleResolver(),
@@ -19,6 +21,17 @@ function resolveScheduleSlot(spec, after, timezone) {
         throw new operation_exception_1.OperationException(`No schedule resolver registered for kind "${spec?.kind}".`);
     return resolver.next(spec, after, timezone);
 }
+function assertScheduleSpec(spec, timezone) {
+    const resolver = exports.baseScheduleResolverMaps[spec?.kind];
+    if (!resolver)
+        throw new operation_exception_1.OperationException(`Unsupported schedule kind "${spec?.kind}".`);
+    if (spec.kind === schedule_enum_1.ScheduleKind.CRON) {
+        if (!cron_schedule_resolver_1.CronScheduleResolver.isSchedulable(spec.expression, timezone))
+            throw new operation_exception_1.OperationException(`Cron expression must be valid and fire at most once every ${schedule_utility_1.ScheduleUtility.minIntervalMs() / 1000} seconds.`);
+        return;
+    }
+    resolver.next(spec, new Date(), timezone);
+}
 function seedScheduleCursor(spec, startFrom, timezone, now = new Date()) {
     if (spec?.kind === schedule_enum_1.ScheduleKind.ONCE)
         return startFrom;

package/dist/constants/schedule.maps.js.map

@@ -1 +1 @@
-{"version":3,"file":"schedule.maps.js","sourceRoot":"","sources":["../../src/constants/schedule.maps.ts"],"names":[],"mappings":";;;AAoBA,kDAWC;AAkBD,gDAcC;AA/DD,iEAA6D;AAC7D,uFAAkF;AAClF,+FAA0F;AAC1F,uFAAkF;AAElF,kFAA8E;AAOjE,QAAA,wBAAwB,GACnC;IACE,CAAC,4BAAY,CAAC,QAAQ,CAAC,EAAE,IAAI,qDAAwB,EAAE;IACvD,CAAC,4BAAY,CAAC,IAAI,CAAC,EAAE,IAAI,6CAAoB,EAAE;IAC/C,CAAC,4BAAY,CAAC,IAAI,CAAC,EAAE,IAAI,6CAAoB,EAAE;CAChD,CAAC;AAGJ,SAAgB,mBAAmB,CACjC,IAAkB,EAClB,KAAW,EACX,QAAgB;IAEhB,MAAM,QAAQ,GAAG,gCAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ;QACX,MAAM,IAAI,wCAAkB,CAC1B,6CAA6C,IAAI,EAAE,IAAI,IAAI,CAC5D,CAAC;IACJ,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAkBD,SAAgB,kBAAkB,CAChC,IAAkB,EAClB,SAAe,EACf,QAAgB,EAChB,MAAY,IAAI,IAAI,EAAE;IAEtB,IAAI,IAAI,EAAE,IAAI,KAAK,4BAAY,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAEvD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;IACrE,IAAI,IAAI,EAAE,IAAI,KAAK,4BAAY,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC;IAIxD,OAAO,mBAAmB,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC7E,CAAC"}
+{"version":3,"file":"schedule.maps.js","sourceRoot":"","sources":["../../src/constants/schedule.maps.ts"],"names":[],"mappings":";;;AAqBA,kDAWC;AAMD,gDAeC;AAkBD,gDAcC;AArFD,iEAA6D;AAC7D,uFAAkF;AAClF,+FAA0F;AAC1F,uFAAkF;AAElF,kFAA8E;AAC9E,2EAAuE;AAO1D,QAAA,wBAAwB,GACnC;IACE,CAAC,4BAAY,CAAC,QAAQ,CAAC,EAAE,IAAI,qDAAwB,EAAE;IACvD,CAAC,4BAAY,CAAC,IAAI,CAAC,EAAE,IAAI,6CAAoB,EAAE;IAC/C,CAAC,4BAAY,CAAC,IAAI,CAAC,EAAE,IAAI,6CAAoB,EAAE;CAChD,CAAC;AAGJ,SAAgB,mBAAmB,CACjC,IAAkB,EAClB,KAAW,EACX,QAAgB;IAEhB,MAAM,QAAQ,GAAG,gCAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ;QACX,MAAM,IAAI,wCAAkB,CAC1B,6CAA6C,IAAI,EAAE,IAAI,IAAI,CAC5D,CAAC;IACJ,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAMD,SAAgB,kBAAkB,CAAC,IAAkB,EAAE,QAAgB;IACrE,MAAM,QAAQ,GAAG,gCAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ;QACX,MAAM,IAAI,wCAAkB,CAAC,8BAA8B,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,IAAI,KAAK,4BAAY,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,6CAAoB,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC;YAChE,MAAM,IAAI,wCAAkB,CAC1B,6DACE,kCAAe,CAAC,aAAa,EAAE,GAAG,IACpC,WAAW,CACZ,CAAC;QACJ,OAAO;IACT,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAkBD,SAAgB,kBAAkB,CAChC,IAAkB,EAClB,SAAe,EACf,QAAgB,EAChB,MAAY,IAAI,IAAI,EAAE;IAEtB,IAAI,IAAI,EAAE,IAAI,KAAK,4BAAY,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAEvD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;IACrE,IAAI,IAAI,EAAE,IAAI,KAAK,4BAAY,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC;IAIxD,OAAO,mBAAmB,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC7E,CAAC"}

package/dist/database/config/data.source.config.d.ts

@@ -1,3 +1,7 @@
 import { DataSourceOptions } from 'typeorm';
+export declare function databaseSslOptions(): false | {
+    rejectUnauthorized: boolean;
+    ca?: string;
+};
 export declare function createDataSourceOptions(entities: any[], migrations: any[]): DataSourceOptions;
 //# sourceMappingURL=data.source.config.d.ts.map

package/dist/database/config/data.source.config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"data.source.config.d.ts","sourceRoot":"","sources":["../../../src/database/config/data.source.config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AA+B5C,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,GAAG,EAAE,EACf,UAAU,EAAE,GAAG,EAAE,GAChB,iBAAiB,CAsBnB"}
+{"version":3,"file":"data.source.config.d.ts","sourceRoot":"","sources":["../../../src/database/config/data.source.config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAW5C,wBAAgB,kBAAkB,IAC9B,KAAK,GACL;IAAE,kBAAkB,EAAE,OAAO,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,CAS/C;AAqCD,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,GAAG,EAAE,EACf,UAAU,EAAE,GAAG,EAAE,GAChB,iBAAiB,CA8BnB"}

package/dist/database/config/data.source.config.js

@@ -1,32 +1,51 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.databaseSslOptions = databaseSslOptions;
 exports.createDataSourceOptions = createDataSourceOptions;
+const fs_1 = require("fs");
+const environment_util_1 = require("../../global/utilities/environment.util");
 const snake_naming_strategy_1 = require("./snake.naming.strategy");
+const DEFAULT_STATEMENT_TIMEOUT_MS = 30000;
+function databaseSslOptions() {
+    if (!(0, environment_util_1.envBool)(process.env.DB_SSL))
+        return false;
+    const ca = process.env.DB_SSL_CA?.trim();
+    return {
+        rejectUnauthorized: process.env.DB_SSL_REJECT_UNAUTHORIZED !== 'false',
+        ...(ca
+            ? { ca: ca.includes('-----BEGIN') ? ca : (0, fs_1.readFileSync)(ca, 'utf8') }
+            : {}),
+    };
+}
 function primaryCredentials() {
     return {
         host: process.env.DB_HOST,
-        port: parseInt(process.env.DB_PORT, 10),
+        port: (0, environment_util_1.envInt)(process.env.DB_PORT, 5432, { min: 1, max: 65535 }),
         username: process.env.DB_USERNAME,
         password: process.env.DB_PASSWORD,
         database: process.env.DB_NAME,
+        ssl: databaseSslOptions(),
     };
 }
 function replicaCredentials() {
+    const ssl = databaseSslOptions();
     return (process.env.DB_READ_HOST ?? '')
         .split(',')
         .map((host) => host.trim())
         .filter(Boolean)
         .map((host) => ({
         host,
-        port: parseInt(process.env.DB_READ_PORT || process.env.DB_PORT, 10),
+        port: (0, environment_util_1.envInt)(process.env.DB_READ_PORT || process.env.DB_PORT, 5432, { min: 1, max: 65535 }),
         username: process.env.DB_READ_USERNAME || process.env.DB_USERNAME,
         password: process.env.DB_READ_PASSWORD || process.env.DB_PASSWORD,
         database: process.env.DB_READ_NAME || process.env.DB_NAME,
+        ssl,
     }));
 }
 function createDataSourceOptions(entities, migrations) {
     const primary = primaryCredentials();
     const replicas = replicaCredentials();
+    const statementTimeout = (0, environment_util_1.envInt)(process.env.DB_STATEMENT_TIMEOUT_MS, DEFAULT_STATEMENT_TIMEOUT_MS);
     return {
         type: 'postgres',
         ...(replicas.length
@@ -38,6 +57,9 @@ function createDataSourceOptions(entities, migrations) {
                 },
             }
             : primary),
+        ...(statementTimeout > 0
+            ? { extra: { statement_timeout: statementTimeout } }
+            : {}),
         entities,
         migrations,
         synchronize: false,

package/dist/database/config/data.source.config.js.map

@@ -1 +1 @@
-{"version":3,"file":"data.source.config.js","sourceRoot":"","sources":["../../../src/database/config/data.source.config.ts"],"names":[],"mappings":";;AA+BA,0DAyBC;AAvDD,mEAA8D;AAE9D,SAAS,kBAAkB;IACzB,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO;QACzB,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QACvC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW;QACjC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW;QACjC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO;KAC9B,CAAC;AACJ,CAAC;AAMD,SAAS,kBAAkB;IACzB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;SACpC,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACd,IAAI;QACJ,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QACnE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;QACjE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;QACjE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO;KAC1D,CAAC,CAAC,CAAC;AACR,CAAC;AAED,SAAgB,uBAAuB,CACrC,QAAe,EACf,UAAiB;IAEjB,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,OAAO;QACL,IAAI,EAAE,UAAU;QAIhB,GAAG,CAAC,QAAQ,CAAC,MAAM;YACjB,CAAC,CAAC;gBACE,WAAW,EAAE;oBACX,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,QAAiB;iBAC/B;aACF;YACH,CAAC,CAAC,OAAO,CAAC;QACZ,QAAQ;QACR,UAAU;QACV,WAAW,EAAE,KAAK;QAClB,cAAc,EAAE,IAAI,2CAAmB,EAAE;KAC1C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"data.source.config.js","sourceRoot":"","sources":["../../../src/database/config/data.source.config.ts"],"names":[],"mappings":";;AAYA,gDAWC;AAqCD,0DAiCC;AA7FD,2BAAkC;AAElC,8EAA0E;AAC1E,mEAA8D;AAG9D,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAM3C,SAAgB,kBAAkB;IAGhC,IAAI,CAAC,IAAA,0BAAO,EAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IACzC,OAAO;QACL,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,OAAO;QACtE,GAAG,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAA,iBAAY,EAAC,EAAE,EAAE,MAAM,CAAC,EAAE;YACnE,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO;QACzB,IAAI,EAAE,IAAA,yBAAM,EAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QAC/D,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW;QACjC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW;QACjC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO;QAC7B,GAAG,EAAE,kBAAkB,EAAE;KAC1B,CAAC;AACJ,CAAC;AAMD,SAAS,kBAAkB;IACzB,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;SACpC,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACd,IAAI;QACJ,IAAI,EAAE,IAAA,yBAAM,EACV,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,EAC/C,IAAI,EACJ,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CACvB;QACD,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;QACjE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;QACjE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO;QACzD,GAAG;KACJ,CAAC,CAAC,CAAC;AACR,CAAC;AAED,SAAgB,uBAAuB,CACrC,QAAe,EACf,UAAiB;IAEjB,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,MAAM,gBAAgB,GAAG,IAAA,yBAAM,EAC7B,OAAO,CAAC,GAAG,CAAC,uBAAuB,EACnC,4BAA4B,CAC7B,CAAC;IACF,OAAO;QACL,IAAI,EAAE,UAAU;QAIhB,GAAG,CAAC,QAAQ,CAAC,MAAM;YACjB,CAAC,CAAC;gBACE,WAAW,EAAE;oBACX,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,QAAiB;iBAC/B;aACF;YACH,CAAC,CAAC,OAAO,CAAC;QAEZ,GAAG,CAAC,gBAAgB,GAAG,CAAC;YACtB,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;QACP,QAAQ;QACR,UAAU;QACV,WAAW,EAAE,KAAK;QAClB,cAAc,EAAE,IAAI,2CAAmB,EAAE;KAC1C,CAAC;AACJ,CAAC"}

package/dist/document/controllers/document.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"document.controller.d.ts","sourceRoot":"","sources":["../../../src/document/controllers/document.controller.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAEhE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAWzD,qBAGa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,WAAW;gBADX,eAAe,EAAE,eAAe,EAChC,WAAW,EAAE,WAAW;IAwBrC,MAAM,CACO,KAAK,EAAE,cAAc,EAAE,EAChC,GAAG,EAAE,iBAAiB,GAC7B,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAkB5B,GAAG,CAAS,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;CAKhE"}
+{"version":3,"file":"document.controller.d.ts","sourceRoot":"","sources":["../../../src/document/controllers/document.controller.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAE/D,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAEhE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAG1E,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAOzD,qBAIa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,WAAW;gBADX,eAAe,EAAE,eAAe,EAChC,WAAW,EAAE,WAAW;IAyBrC,MAAM,CACO,KAAK,EAAE,cAAc,EAAE,EAChC,GAAG,EAAE,iBAAiB,GAC7B,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAyB5B,GAAG,CAAS,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;CAKhE"}

package/dist/document/controllers/document.controller.js

@@ -14,13 +14,16 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DocumentController = void 0;
 const common_1 = require("@nestjs/common");
-const platform_express_1 = require("@nestjs/platform-express");
 const swagger_1 = require("@nestjs/swagger");
 const auth_service_1 = require("../../auth/services/auth.service");
+const strict_validation_pipe_1 = require("../../common/pipes/strict.validation.pipe");
 const set_document_dto_1 = require("../dtos/set.document.dto");
 const upload_document_dto_1 = require("../dtos/upload.document.dto");
 const document_default_enum_1 = require("../enums/document.default.enum");
 const document_service_1 = require("../services/document.service");
+const document_authenticated_guard_1 = require("../guards/document.authenticated.guard");
+const document_upload_interceptor_1 = require("../interceptors/document.upload.interceptor");
+const document_config_1 = require("../utilities/document.config");
 let DocumentController = class DocumentController {
     constructor(documentService, authService) {
         this.documentService = documentService;
@@ -29,14 +32,18 @@ let DocumentController = class DocumentController {
     async upload(files, dto) {
         await this.authService.validateRole();
         this.documentService.assertUploadable(files);
-        return this.documentService.uploadDocuments(files, {
+        const uploads = await this.documentService.uploadMany(files, {
             pathPrefix: await this.documentService.resolvePathPrefix(dto.path_identifier),
-            isPublic: true,
+            isPublic: document_config_1.DocumentConfig.get().httpUploadsPublic,
+            pendingLink: true,
         });
+        for (const upload of uploads)
+            upload.url = await this.documentService.getDocumentLink(upload);
+        return uploads;
     }
     async set(dto) {
         await this.authService.validateRole();
-        return this.documentService.setDocument(dto);
+        return this.documentService.setDocument(dto, { authorizeSource: true });
     }
 };
 exports.DocumentController = DocumentController;
@@ -45,7 +52,7 @@ __decorate([
     (0, swagger_1.ApiConsumes)('multipart/form-data'),
     (0, swagger_1.ApiOperation)({
         summary: 'Upload one or more files to the active storage driver.',
-        description: 'Send the files under the `files` field. The destination folder is not a caller-supplied path: `path_identifier` names a `document.path.*` system property, and its value is the key prefix. Every file is recorded in sys_document_uploads and those rows are the response. Attaching an upload to one of your own records is a separate step (`POST /api/documents/set`), so nothing is written to sys_documents here.',
+        description: 'Send the files under the `files` field. `path_identifier` names a `document.path.*` system property whose value is the key prefix. Only allowlisted types are accepted (checked from the file content). Uploads are private: `url` in the response is a short-lived link. Attach an upload with `POST /api/documents/set`; unattached uploads are removed after a day.',
     }),
     (0, swagger_1.ApiBody)({
         schema: {
@@ -60,7 +67,8 @@ __decorate([
             },
         },
     }),
-    (0, common_1.UseInterceptors)((0, platform_express_1.FilesInterceptor)(document_default_enum_1.DocumentConstant.UPLOAD_FIELD_NAME)),
+    (0, common_1.UseGuards)(document_authenticated_guard_1.DocumentAuthenticatedGuard),
+    (0, common_1.UseInterceptors)(document_upload_interceptor_1.DocumentUploadInterceptor),
     __param(0, (0, common_1.UploadedFiles)()),
     __param(1, (0, common_1.Body)()),
     __metadata("design:type", Function),
@@ -70,9 +78,10 @@ __decorate([
 __decorate([
     (0, common_1.Post)('set'),
     (0, swagger_1.ApiOperation)({
-        summary: 'Attach an upload to one of your own records.',
-        description: 'Writes the sys_documents row linking `upload_id` to `source_type` / `source_id`. Attaching the same upload to the same record twice returns the existing link rather than duplicating it.',
+        summary: 'Attach one of your uploads to a record.',
+        description: 'Links `upload_id` (which you must have uploaded) to `source_type` / `source_id`. The app must register a DocumentSourceAuthorizer (`DocumentModule.register({ authorizeSource })`); without one every request is refused. Attaching the same upload to the same record twice returns the existing link.',
     }),
+    (0, common_1.UseGuards)(document_authenticated_guard_1.DocumentAuthenticatedGuard),
     __param(0, (0, common_1.Body)()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [set_document_dto_1.SetDocumentDto]),
@@ -82,6 +91,7 @@ exports.DocumentController = DocumentController = __decorate([
     (0, swagger_1.ApiTags)('Documents'),
     (0, swagger_1.ApiBearerAuth)(),
     (0, common_1.Controller)('api/documents'),
+    (0, common_1.UsePipes)(strict_validation_pipe_1.StrictValidationPipe),
     __metadata("design:paramtypes", [document_service_1.DocumentService,
         auth_service_1.AuthService])
 ], DocumentController);

package/dist/document/controllers/document.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"document.controller.js","sourceRoot":"","sources":["../../../src/document/controllers/document.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAMwB;AACxB,+DAA4D;AAC5D,6CAMyB;AACzB,mEAA+D;AAC/D,+DAA0D;AAC1D,qEAAgE;AAChE,0EAAkE;AAClE,mEAA+D;AAiBxD,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC7B,YACmB,eAAgC,EAChC,WAAwB;QADxB,oBAAe,GAAf,eAAe,CAAiB;QAChC,gBAAW,GAAX,WAAW,CAAa;IACxC,CAAC;IAuBE,AAAN,KAAK,CAAC,MAAM,CACO,KAAuB,EAChC,GAAsB;QAE9B,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;QACtC,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAE7C,OAAO,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,KAAK,EAAE;YACjD,UAAU,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,CACtD,GAAG,CAAC,eAAe,CACpB;YACD,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IAQK,AAAN,KAAK,CAAC,GAAG,CAAS,GAAmB;QACnC,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;QAEtC,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC;CACF,CAAA;AArDY,gDAAkB;AA2BvB;IArBL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,qBAAW,EAAC,qBAAqB,CAAC;IAClC,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wDAAwD;QACjE,WAAW,EACT,yZAAyZ;KAC5Z,CAAC;IACD,IAAA,iBAAO,EAAC;QACP,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,CAAC,wCAAgB,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;YACjE,UAAU,EAAE;gBACV,CAAC,wCAAgB,CAAC,iBAAiB,CAAC,EAAE;oBACpC,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;iBAC5C;gBACD,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE;aACxD;SACF;KACF,CAAC;IACD,IAAA,wBAAe,EAAC,IAAA,mCAAgB,EAAC,wCAAgB,CAAC,iBAAiB,CAAC,CAAC;IAEnE,WAAA,IAAA,sBAAa,GAAE,CAAA;IACf,WAAA,IAAA,aAAI,GAAE,CAAA;;4CAAM,uCAAiB;;gDAW/B;AAQK;IANL,IAAA,aAAI,EAAC,KAAK,CAAC;IACX,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8CAA8C;QACvD,WAAW,EACT,2LAA2L;KAC9L,CAAC;IACS,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,iCAAc;;6CAIpC;6BApDU,kBAAkB;IAH9B,IAAA,iBAAO,EAAC,WAAW,CAAC;IACpB,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,eAAe,CAAC;qCAGU,kCAAe;QACnB,0BAAW;GAHhC,kBAAkB,CAqD9B"}
+{"version":3,"file":"document.controller.js","sourceRoot":"","sources":["../../../src/document/controllers/document.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAQwB;AACxB,6CAMyB;AACzB,mEAA+D;AAC/D,sFAAiF;AACjF,+DAA0D;AAC1D,qEAAgE;AAChE,0EAAkE;AAClE,mEAA+D;AAG/D,yFAAoF;AACpF,6FAAwF;AAExF,kEAA8D;AAUvD,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC7B,YACmB,eAAgC,EAChC,WAAwB;QADxB,oBAAe,GAAf,eAAe,CAAiB;QAChC,gBAAW,GAAX,WAAW,CAAa;IACxC,CAAC;IAwBE,AAAN,KAAK,CAAC,MAAM,CACO,KAAuB,EAChC,GAAsB;QAE9B,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;QACtC,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,KAAK,EAAE;YAC3D,UAAU,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,CACtD,GAAG,CAAC,eAAe,CACpB;YACD,QAAQ,EAAE,gCAAc,CAAC,GAAG,EAAE,CAAC,iBAAiB;YAChD,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAGH,KAAK,MAAM,MAAM,IAAI,OAAO;YAC1B,MAAM,CAAC,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAClE,OAAO,OAAO,CAAC;IACjB,CAAC;IASK,AAAN,KAAK,CAAC,GAAG,CAAS,GAAmB;QACnC,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;QAEtC,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;CACF,CAAA;AA7DY,gDAAkB;AA4BvB;IAtBL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,qBAAW,EAAC,qBAAqB,CAAC;IAClC,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wDAAwD;QACjE,WAAW,EACT,wWAAwW;KAC3W,CAAC;IACD,IAAA,iBAAO,EAAC;QACP,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,CAAC,wCAAgB,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;YACjE,UAAU,EAAE;gBACV,CAAC,wCAAgB,CAAC,iBAAiB,CAAC,EAAE;oBACpC,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;iBAC5C;gBACD,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE;aACxD;SACF;KACF,CAAC;IACD,IAAA,kBAAS,EAAC,yDAA0B,CAAC;IACrC,IAAA,wBAAe,EAAC,uDAAyB,CAAC;IAExC,WAAA,IAAA,sBAAa,GAAE,CAAA;IACf,WAAA,IAAA,aAAI,GAAE,CAAA;;4CAAM,uCAAiB;;gDAiB/B;AASK;IAPL,IAAA,aAAI,EAAC,KAAK,CAAC;IACX,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,yCAAyC;QAClD,WAAW,EACT,ySAAyS;KAC5S,CAAC;IACD,IAAA,kBAAS,EAAC,yDAA0B,CAAC;IAC3B,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,iCAAc;;6CAIpC;6BA5DU,kBAAkB;IAJ9B,IAAA,iBAAO,EAAC,WAAW,CAAC;IACpB,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,eAAe,CAAC;IAC3B,IAAA,iBAAQ,EAAC,6CAAoB,CAAC;qCAGO,kCAAe;QACnB,0BAAW;GAHhC,kBAAkB,CA6D9B"}

package/dist/document/document.module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"document.module.d.ts","sourceRoot":"","sources":["../../src/document/document.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAoB,MAAM,gBAAgB,CAAC;AASjE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACpE,YAAY,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAsGpE,qBAMa,cAAc;IACzB,MAAM,CAAC,QAAQ,CAAC,OAAO,GAAE,qBAA0B,GAAG,aAAa;CAepE"}
+{"version":3,"file":"document.module.d.ts","sourceRoot":"","sources":["../../src/document/document.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAoB,MAAM,gBAAgB,CAAC;AAWjE,OAAO,KAAK,EACV,qBAAqB,EAEtB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAsIpE,qBAMa,cAAc;IACzB,MAAM,CAAC,QAAQ,CAAC,OAAO,GAAE,qBAA0B,GAAG,aAAa;CAkBpE"}

package/dist/document/document.module.js

@@ -16,15 +16,40 @@ const queue_service_1 = require("../common/services/queue.service");
 const system_property_service_1 = require("../common/services/system.property.service");
 const system_property_module_1 = require("../common/system.property.module");
 const es6_classes_1 = require("./es6.classes");
+const remote_request_service_1 = require("../common/services/remote.request.service");
+const document_tokens_1 = require("./document.tokens");
 const [DocumentService, MinioBucketDocumentService, S3BucketDocumentService, PdfService, PdfTemplateService,] = es6_classes_1.es6Classes.services;
 const [DocumentSubscriber, DocumentUploadSubscriber] = es6_classes_1.es6Classes.subscribers;
 const [CleanOrphanDocumentsJob] = es6_classes_1.es6Classes.jobs;
+function sourceAuthorizerProvider(options) {
+    if (options.sourceAuthorizer)
+        return {
+            provide: document_tokens_1.DOCUMENT_SOURCE_AUTHORIZER,
+            useClass: options.sourceAuthorizer,
+        };
+    const authorize = options.authorizeSource;
+    return {
+        provide: document_tokens_1.DOCUMENT_SOURCE_AUTHORIZER,
+        useValue: authorize
+            ? { canAttach: authorize }
+            : null,
+    };
+}
 function createDocumentProviders(options = {}) {
     return [
+        sourceAuthorizerProvider(options),
         S3BucketDocumentService,
         MinioBucketDocumentService,
         PdfService,
-        PdfTemplateService,
+        {
+            provide: PdfTemplateService,
+            useFactory: (systemPropertyService, remoteRequestService, dataSource) => new PdfTemplateService(systemPropertyService, remoteRequestService, dataSource),
+            inject: [
+                system_property_service_1.SystemPropertyService,
+                remote_request_service_1.RemoteRequestService,
+                (0, typeorm_1.getDataSourceToken)(options.dataSourceName),
+            ],
+        },
         {
             provide: DocumentSubscriber,
             useFactory: (dataSource) => new DocumentSubscriber(dataSource),
@@ -46,12 +71,13 @@ function createDocumentProviders(options = {}) {
         },
         {
             provide: DocumentService,
-            useFactory: (s3Service, minioService, systemPropertyService, dataSource) => new DocumentService(s3Service, minioService, systemPropertyService, dataSource),
+            useFactory: (s3Service, minioService, systemPropertyService, dataSource, sourceAuthorizer) => new DocumentService(s3Service, minioService, systemPropertyService, dataSource, sourceAuthorizer),
             inject: [
                 S3BucketDocumentService,
                 MinioBucketDocumentService,
                 system_property_service_1.SystemPropertyService,
                 (0, typeorm_1.getDataSourceToken)(options.dataSourceName),
+                document_tokens_1.DOCUMENT_SOURCE_AUTHORIZER,
             ],
         },
     ];
@@ -69,9 +95,12 @@ let DocumentModule = DocumentModule_1 = class DocumentModule {
         return {
             module: DocumentModule_1,
             imports: [
-                auth_module_1.AuthModule.register(options),
-                system_property_module_1.SystemPropertyModule.register(options),
+                auth_module_1.AuthModule.register({ dataSourceName: options.dataSourceName }),
+                system_property_module_1.SystemPropertyModule.register({
+                    dataSourceName: options.dataSourceName,
+                }),
                 queue_module_1.QueueModule,
+                ...(options.imports ?? []),
             ],
             controllers: [...es6_classes_1.es6Classes.controllers],
             providers: createDocumentProviders(options),

package/dist/document/document.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"document.module.js","sourceRoot":"","sources":["../../src/document/document.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAiE;AACjE,6CAAqD;AAErD,qDAAiD;AACjD,yDAAqD;AACrD,oEAAgE;AAChE,wFAAmF;AACnF,6EAAwE;AACxE,+CAA2C;AAI3C,MAAM,CACJ,eAAe,EACf,0BAA0B,EAC1B,uBAAuB,EACvB,UAAU,EACV,kBAAkB,EACnB,GAAG,wBAAU,CAAC,QAAQ,CAAC;AACxB,MAAM,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,GAAG,wBAAU,CAAC,WAAW,CAAC;AAC9E,MAAM,CAAC,uBAAuB,CAAC,GAAG,wBAAU,CAAC,IAAI,CAAC;AAElD,SAAS,uBAAuB,CAC9B,UAAiC,EAAE;IAEnC,OAAO;QACL,uBAAuB;QACvB,0BAA0B;QAG1B,UAAU;QAIV,kBAAkB;QAKlB;YACE,OAAO,EAAE,kBAAkB;YAC3B,UAAU,EAAE,CAAC,UAAsB,EAAE,EAAE,CACrC,IAAI,kBAAkB,CAAC,UAAU,CAAC;YACpC,MAAM,EAAE,CAAC,IAAA,4BAAkB,EAAC,OAAO,CAAC,cAAc,CAAC,CAAC;SACrD;QACD;YACE,OAAO,EAAE,wBAAwB;YACjC,UAAU,EAAE,CAAC,UAAsB,EAAE,EAAE,CACrC,IAAI,wBAAwB,CAAC,UAAU,CAAC;YAC1C,MAAM,EAAE,CAAC,IAAA,4BAAkB,EAAC,OAAO,CAAC,cAAc,CAAC,CAAC;SACrD;QACD;YACE,OAAO,EAAE,uBAAuB;YAChC,UAAU,EAAE,CACV,YAA0B,EAC1B,eAAqD,EACrD,UAAsB,EACtB,EAAE,CACF,IAAI,uBAAuB,CAAC,YAAY,EAAE,eAAe,EAAE,UAAU,CAAC;YACxE,MAAM,EAAE;gBACN,4BAAY;gBACZ,eAAe;gBACf,IAAA,4BAAkB,EAAC,OAAO,CAAC,cAAc,CAAC;aAC3C;SACF;QACD;YACE,OAAO,EAAE,eAAe;YACxB,UAAU,EAAE,CACV,SAAuD,EACvD,YAA6D,EAC7D,qBAA4C,EAC5C,UAAsB,EACtB,EAAE,CACF,IAAI,eAAe,CACjB,SAAS,EACT,YAAY,EACZ,qBAAqB,EACrB,UAAU,CACX;YACH,MAAM,EAAE;gBACN,uBAAuB;gBACvB,0BAA0B;gBAC1B,+CAAqB;gBACrB,IAAA,4BAAkB,EAAC,OAAO,CAAC,cAAc,CAAC;aAC3C;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,eAAe,GAAG;IACtB,eAAe;IACf,uBAAuB;IACvB,uBAAuB;IACvB,0BAA0B;IAC1B,UAAU;IACV,kBAAkB;CACnB,CAAC;AAsBK,IAAM,cAAc,sBAApB,MAAM,cAAc;IACzB,MAAM,CAAC,QAAQ,CAAC,UAAiC,EAAE;QACjD,OAAO;YACL,MAAM,EAAE,gBAAc;YACtB,OAAO,EAAE;gBACP,wBAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC5B,6CAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAGtC,0BAAW;aACZ;YACD,WAAW,EAAE,CAAC,GAAG,wBAAU,CAAC,WAAW,CAAC;YACxC,SAAS,EAAE,uBAAuB,CAAC,OAAO,CAAC;YAC3C,OAAO,EAAE,eAAe;SACzB,CAAC;IACJ,CAAC;CACF,CAAA;AAhBY,wCAAc;yBAAd,cAAc;IAN1B,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,wBAAU,EAAE,6CAAoB,EAAE,0BAAW,CAAC;QACxD,WAAW,EAAE,CAAC,GAAG,wBAAU,CAAC,WAAW,CAAC;QACxC,SAAS,EAAE,uBAAuB,EAAE;QACpC,OAAO,EAAE,eAAe;KACzB,CAAC;GACW,cAAc,CAgB1B"}
+{"version":3,"file":"document.module.js","sourceRoot":"","sources":["../../src/document/document.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAiE;AACjE,6CAAqD;AAErD,qDAAiD;AACjD,yDAAqD;AACrD,oEAAgE;AAChE,wFAAmF;AACnF,6EAAwE;AACxE,+CAA2C;AAC3C,sFAAiF;AACjF,uDAA+D;AAO/D,MAAM,CACJ,eAAe,EACf,0BAA0B,EAC1B,uBAAuB,EACvB,UAAU,EACV,kBAAkB,EACnB,GAAG,wBAAU,CAAC,QAAQ,CAAC;AACxB,MAAM,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,GAAG,wBAAU,CAAC,WAAW,CAAC;AAC9E,MAAM,CAAC,uBAAuB,CAAC,GAAG,wBAAU,CAAC,IAAI,CAAC;AAElD,SAAS,wBAAwB,CAAC,OAA8B;IAC9D,IAAI,OAAO,CAAC,gBAAgB;QAC1B,OAAO;YACL,OAAO,EAAE,4CAA0B;YACnC,QAAQ,EAAE,OAAO,CAAC,gBAAgB;SACnC,CAAC;IACJ,MAAM,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC;IAC1C,OAAO;QACL,OAAO,EAAE,4CAA0B;QACnC,QAAQ,EAAE,SAAS;YACjB,CAAC,CAAE,EAAE,SAAS,EAAE,SAAS,EAAsC;YAC/D,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,UAAiC,EAAE;IAEnC,OAAO;QACL,wBAAwB,CAAC,OAAO,CAAC;QACjC,uBAAuB;QACvB,0BAA0B;QAG1B,UAAU;QACV;YACE,OAAO,EAAE,kBAAkB;YAC3B,UAAU,EAAE,CACV,qBAA4C,EAC5C,oBAA0C,EAC1C,UAAsB,EACtB,EAAE,CACF,IAAI,kBAAkB,CACpB,qBAAqB,EACrB,oBAAoB,EACpB,UAAU,CACX;YACH,MAAM,EAAE;gBACN,+CAAqB;gBACrB,6CAAoB;gBACpB,IAAA,4BAAkB,EAAC,OAAO,CAAC,cAAc,CAAC;aAC3C;SACF;QAKD;YACE,OAAO,EAAE,kBAAkB;YAC3B,UAAU,EAAE,CAAC,UAAsB,EAAE,EAAE,CACrC,IAAI,kBAAkB,CAAC,UAAU,CAAC;YACpC,MAAM,EAAE,CAAC,IAAA,4BAAkB,EAAC,OAAO,CAAC,cAAc,CAAC,CAAC;SACrD;QACD;YACE,OAAO,EAAE,wBAAwB;YACjC,UAAU,EAAE,CAAC,UAAsB,EAAE,EAAE,CACrC,IAAI,wBAAwB,CAAC,UAAU,CAAC;YAC1C,MAAM,EAAE,CAAC,IAAA,4BAAkB,EAAC,OAAO,CAAC,cAAc,CAAC,CAAC;SACrD;QACD;YACE,OAAO,EAAE,uBAAuB;YAChC,UAAU,EAAE,CACV,YAA0B,EAC1B,eAAqD,EACrD,UAAsB,EACtB,EAAE,CACF,IAAI,uBAAuB,CAAC,YAAY,EAAE,eAAe,EAAE,UAAU,CAAC;YACxE,MAAM,EAAE;gBACN,4BAAY;gBACZ,eAAe;gBACf,IAAA,4BAAkB,EAAC,OAAO,CAAC,cAAc,CAAC;aAC3C;SACF;QACD;YACE,OAAO,EAAE,eAAe;YACxB,UAAU,EAAE,CACV,SAAuD,EACvD,YAA6D,EAC7D,qBAA4C,EAC5C,UAAsB,EACtB,gBAAiD,EACjD,EAAE,CACF,IAAI,eAAe,CACjB,SAAS,EACT,YAAY,EACZ,qBAAqB,EACrB,UAAU,EACV,gBAAgB,CACjB;YACH,MAAM,EAAE;gBACN,uBAAuB;gBACvB,0BAA0B;gBAC1B,+CAAqB;gBACrB,IAAA,4BAAkB,EAAC,OAAO,CAAC,cAAc,CAAC;gBAC1C,4CAA0B;aAC3B;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,eAAe,GAAG;IACtB,eAAe;IACf,uBAAuB;IACvB,uBAAuB;IACvB,0BAA0B;IAC1B,UAAU;IACV,kBAAkB;CACnB,CAAC;AAqBK,IAAM,cAAc,sBAApB,MAAM,cAAc;IACzB,MAAM,CAAC,QAAQ,CAAC,UAAiC,EAAE;QACjD,OAAO;YACL,MAAM,EAAE,gBAAc;YACtB,OAAO,EAAE;gBACP,wBAAU,CAAC,QAAQ,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;gBAC/D,6CAAoB,CAAC,QAAQ,CAAC;oBAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;iBACvC,CAAC;gBAGF,0BAAW;gBACX,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;aAC3B;YACD,WAAW,EAAE,CAAC,GAAG,wBAAU,CAAC,WAAW,CAAC;YACxC,SAAS,EAAE,uBAAuB,CAAC,OAAO,CAAC;YAC3C,OAAO,EAAE,eAAe;SACzB,CAAC;IACJ,CAAC;CACF,CAAA;AAnBY,wCAAc;yBAAd,cAAc;IAN1B,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,wBAAU,EAAE,6CAAoB,EAAE,0BAAW,CAAC;QACxD,WAAW,EAAE,CAAC,GAAG,wBAAU,CAAC,WAAW,CAAC;QACxC,SAAS,EAAE,uBAAuB,EAAE;QACpC,OAAO,EAAE,eAAe;KACzB,CAAC;GACW,cAAc,CAmB1B"}

package/dist/document/document.tokens.d.ts

@@ -0,0 +1,2 @@
+export declare const DOCUMENT_SOURCE_AUTHORIZER: unique symbol;
+//# sourceMappingURL=document.tokens.d.ts.map

package/dist/document/document.tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.tokens.d.ts","sourceRoot":"","sources":["../../src/document/document.tokens.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,0BAA0B,eAAuC,CAAC"}

package/dist/document/document.tokens.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DOCUMENT_SOURCE_AUTHORIZER = void 0;
+exports.DOCUMENT_SOURCE_AUTHORIZER = Symbol('DOCUMENT_SOURCE_AUTHORIZER');
+//# sourceMappingURL=document.tokens.js.map

package/dist/document/document.tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.tokens.js","sourceRoot":"","sources":["../../src/document/document.tokens.ts"],"names":[],"mappings":";;;AACa,QAAA,0BAA0B,GAAG,MAAM,CAAC,4BAA4B,CAAC,CAAC"}

package/dist/document/dtos/pdf.document.options.dto.d.ts

@@ -8,10 +8,16 @@ export declare class PdfDocumentSourceDto {
     source_type: string;
     source_id: string;
 }
+export declare class PdfDocumentOwnerDto {
+    userId?: string;
+    tenantId?: string | null;
+}
 export declare class PdfDocumentOptionsDto {
     identifier: string;
     metadata: PdfDocumentMetadataDto;
     source: PdfDocumentSourceDto;
     data: Record<string, unknown>;
+    rawKeys?: string[];
+    owner?: PdfDocumentOwnerDto;
 }
 //# sourceMappingURL=pdf.document.options.dto.d.ts.map

package/dist/document/dtos/pdf.document.options.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pdf.document.options.dto.d.ts","sourceRoot":"","sources":["../../../src/document/dtos/pdf.document.options.dto.ts"],"names":[],"mappings":"AACA,qBAAa,sBAAsB;IAEjC,QAAQ,EAAE,MAAM,CAAC;IAEjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAGD,qBAAa,oBAAoB;IAE/B,WAAW,EAAE,MAAM,CAAC;IAEpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAOD,qBAAa,qBAAqB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,sBAAsB,CAAC;IACjC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B"}
+{"version":3,"file":"pdf.document.options.dto.d.ts","sourceRoot":"","sources":["../../../src/document/dtos/pdf.document.options.dto.ts"],"names":[],"mappings":"AACA,qBAAa,sBAAsB;IAEjC,QAAQ,EAAE,MAAM,CAAC;IAEjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAGD,qBAAa,oBAAoB;IAE/B,WAAW,EAAE,MAAM,CAAC;IAEpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,qBAAa,mBAAmB;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAMD,qBAAa,qBAAqB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,sBAAsB,CAAC;IACjC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE9B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,mBAAmB,CAAC;CAC7B"}

package/dist/document/dtos/pdf.document.options.dto.js

@@ -1,12 +1,15 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PdfDocumentOptionsDto = exports.PdfDocumentSourceDto = exports.PdfDocumentMetadataDto = void 0;
+exports.PdfDocumentOptionsDto = exports.PdfDocumentOwnerDto = exports.PdfDocumentSourceDto = exports.PdfDocumentMetadataDto = void 0;
 class PdfDocumentMetadataDto {
 }
 exports.PdfDocumentMetadataDto = PdfDocumentMetadataDto;
 class PdfDocumentSourceDto {
 }
 exports.PdfDocumentSourceDto = PdfDocumentSourceDto;
+class PdfDocumentOwnerDto {
+}
+exports.PdfDocumentOwnerDto = PdfDocumentOwnerDto;
 class PdfDocumentOptionsDto {
 }
 exports.PdfDocumentOptionsDto = PdfDocumentOptionsDto;

package/dist/document/dtos/pdf.document.options.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"pdf.document.options.dto.js","sourceRoot":"","sources":["../../../src/document/dtos/pdf.document.options.dto.ts"],"names":[],"mappings":";;;AACA,MAAa,sBAAsB;CASlC;AATD,wDASC;AAGD,MAAa,oBAAoB;CAKhC;AALD,oDAKC;AAOD,MAAa,qBAAqB;CAKjC;AALD,sDAKC"}
+{"version":3,"file":"pdf.document.options.dto.js","sourceRoot":"","sources":["../../../src/document/dtos/pdf.document.options.dto.ts"],"names":[],"mappings":";;;AACA,MAAa,sBAAsB;CASlC;AATD,wDASC;AAGD,MAAa,oBAAoB;CAKhC;AALD,oDAKC;AAGD,MAAa,mBAAmB;CAG/B;AAHD,kDAGC;AAMD,MAAa,qBAAqB;CAQjC;AARD,sDAQC"}

package/dist/document/entities/document.entity.d.ts

@@ -6,6 +6,7 @@ export declare class DocumentEntity extends CommonEntity {
     source_id: string;
     system_generated: boolean;
     attributes: Record<string, any>;
+    tenant_id: string;
     upload: DocumentUploadEntity;
 }
 //# sourceMappingURL=document.entity.d.ts.map

package/dist/document/entities/document.entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"document.entity.d.ts","sourceRoot":"","sources":["../../../src/document/entities/document.entity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAGhE,qBACa,cAAe,SAAQ,YAAY;IAE9C,SAAS,EAAE,MAAM,CAAC;IAGlB,WAAW,EAAE,MAAM,CAAC;IAGpB,SAAS,EAAE,MAAM,CAAC;IAGlB,gBAAgB,EAAE,OAAO,CAAC;IAG1B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAKhC,MAAM,EAAE,oBAAoB,CAAC;CAC9B"}
+{"version":3,"file":"document.entity.d.ts","sourceRoot":"","sources":["../../../src/document/entities/document.entity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAGhE,qBACa,cAAe,SAAQ,YAAY;IAE9C,SAAS,EAAE,MAAM,CAAC;IAGlB,WAAW,EAAE,MAAM,CAAC;IAGpB,SAAS,EAAE,MAAM,CAAC;IAGlB,gBAAgB,EAAE,OAAO,CAAC;IAG1B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAIhC,SAAS,EAAE,MAAM,CAAC;IAKlB,MAAM,EAAE,oBAAoB,CAAC;CAC9B"}

package/dist/document/entities/document.entity.js

@@ -36,6 +36,10 @@ __decorate([
     (0, typeorm_1.Column)({ type: 'jsonb' }),
     __metadata("design:type", Object)
 ], DocumentEntity.prototype, "attributes", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'uuid', nullable: true }),
+    __metadata("design:type", String)
+], DocumentEntity.prototype, "tenant_id", void 0);
 __decorate([
     (0, typeorm_1.ManyToOne)(() => document_upload_entity_1.DocumentUploadEntity, { onDelete: 'CASCADE' }),
     (0, typeorm_1.JoinColumn)({ name: 'upload_id' }),

package/dist/document/entities/document.entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"document.entity.js","sourceRoot":"","sources":["../../../src/document/entities/document.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAAgE;AAChE,uEAAmE;AACnE,qEAAgE;AAIzD,IAAM,cAAc,GAApB,MAAM,cAAe,SAAQ,4BAAY;CAoB/C,CAAA;AApBY,wCAAc;AAEzB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;iDACP;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;mDACR;AAGpB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;iDACP;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;;wDAClB;AAG1B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;;kDACM;AAKhC;IAFC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,6CAAoB,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC9D,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;8BAC1B,6CAAoB;8CAAC;yBAnBlB,cAAc;IAD1B,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;GACrB,cAAc,CAoB1B"}
+{"version":3,"file":"document.entity.js","sourceRoot":"","sources":["../../../src/document/entities/document.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAAgE;AAChE,uEAAmE;AACnE,qEAAgE;AAIzD,IAAM,cAAc,GAApB,MAAM,cAAe,SAAQ,4BAAY;CAwB/C,CAAA;AAxBY,wCAAc;AAEzB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;iDACP;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;mDACR;AAGpB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;iDACP;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;;wDAClB;AAG1B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;;kDACM;AAIhC;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;iDACvB;AAKlB;IAFC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,6CAAoB,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC9D,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;8BAC1B,6CAAoB;8CAAC;yBAvBlB,cAAc;IAD1B,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;GACrB,cAAc,CAwB1B"}

package/dist/document/entities/document.upload.entity.d.ts

@@ -9,5 +9,7 @@ export declare class DocumentUploadEntity extends CommonEntity {
     url: string;
     is_public: boolean;
     attributes: Record<string, any>;
+    pending_link: boolean;
+    tenant_id: string;
 }
 //# sourceMappingURL=document.upload.entity.d.ts.map