@nestjs/common 12.0.0-alpha.4 → 12.0.0-alpha.6

package/Readme.md

@@ -59,11 +59,11 @@ Nest is an MIT-licensed open source project. It can grow thanks to the sponsors
 
 <table style="text-align:center;">
 <tr>
-<td><a href="https://trilon.io" target="_blank"><img src="https://nestjs.com/img/trilon.svg" width="200" valign="middle" /></a></td>
-<td><a href="https://microsoft.com/" target="_blank"><img src="https://nestjs.com/img/logos/microsoft-logo.png" width="180" valign="middle" /></a></td>
-<td><a href="https://mojam.co" target="_blank"><img src="https://nestjs.com/img/logos/mojam-logo.png" width="80" valign="middle" /></a></td>
+<td><a href="https://trilon.io" target="_blank"><img src="https://nestjs.com/img/github/trilon-logo.svg" width="200" valign="middle" /></a></td>
+<td><a href="https://microsoft.com/" target="_blank"><img src="https://nestjs.com/img/github/microsoft-logo.png" width="180" valign="middle" /></a></td>
+<td><a href="https://mojam.co" target="_blank"><img src="https://images.opencollective.com/mojamco/981e9de/logo/256.png?height=256" width="80" valign="middle" /></a></td>
 <td><a href="https://valor-software.com/" target="_blank"><img src="https://docs.nestjs.com/assets/sponsors/valor-software.png" width="170" valign="middle" /></a></td>
-<td><a href="https://serpapi.com/" target="_blank"><img src="https://nestjs.com/img/logos/serpapi-logo.png" width="150" valign="middle" /></a></td>
+<td><a href="https://serpapi.com/" target="_blank"><img src="https://nestjs.com/img/github/serpapi-logo.png" width="150" valign="middle" /></a></td>
 </tr>
 </table>
 
@@ -71,15 +71,15 @@ Nest is an MIT-licensed open source project. It can grow thanks to the sponsors
 
 <table style="text-align:center;">
 <tr>
-<td><a href="https://www.redhat.com" target="_blank"><img src="https://nestjs.com/img/logos/red-hat-logo.svg" width="200" valign="middle" /></a></td>
-<td><a href="https://github.com/Sanofi-IADC" target="_blank"><img src="https://docs.nestjs.com/assets/sponsors/sanofi.png" width="180" valign="middle" /></a></td>
-<td><a href="https://nx.dev" target="_blank"><img src="https://nestjs.com/img/logos/nx-logo.png" height="45" valign="middle" /></a></td>
-<td><a href="https://intrinsic.ventures/" target="_blank"><img src="https://nestjs.com/img/logos/intrinisic-logo.png" width="210" valign="middle" /></a></td>
-<td><a href="https://jetbrains.com/" target="_blank"><img src="https://nestjs.com/img/logos/jetbrains-logo.svg" width="90" valign="middle" /></a></td>
+<td><a href="https://www.redhat.com" target="_blank"><img src="https://nestjs.com/img/github/red-hat-logo.svg" width="150" valign="middle" /></a></td>
+<td><a href="https://github.com/Sanofi-IADC" target="_blank"><img src="https://docs.nestjs.com/assets/sponsors/sanofi.png" width="120" valign="middle" /></a></td>
+<td><a href="https://nx.dev" target="_blank"><img src="https://nestjs.com/img/github/nx-logo.png" height="45" valign="middle" /></a></td>
+<td><a href="https://intrinsic.ventures/" target="_blank"><img src="https://nestjs.com/img/github/intrinisic-logo.png" width="150" valign="middle" /></a></td>
+<td><a href="https://jetbrains.com/" target="_blank"><img src="https://nestjs.com/img/github/jetbrains-logo.svg" width="70" valign="middle" /></a></td>
 </tr>
 <tr>
-<td><a href="https://snyk.co/nestjs" target="_blank"><img src="https://nestjs.com/img/logos/snyk-logo-black.png" width="185" valign="middle" /></a></td>
-<td><a href="https://www.movavi.com/imovie-for-windows.html" target="_blank"><img src="https://nestjs.com/img/logos/movavi-logo.svg" width="105" valign="middle" /></a></td>
+<td><a href="https://snyk.co/nestjs" target="_blank"><img src="https://nestjs.com/img/github/snyk-logo-black.png" width="125" valign="middle" /></a></td>
+<td align="center"><a href="https://www.movavi.com/imovie-for-windows.html" target="_blank"><img src="https://images.opencollective.com/movavi/1fb15e5/avatar/256.png?height=256" width="60" valign="middle" /></a></td>
 </tr>
 </table>
 
@@ -87,15 +87,15 @@ Nest is an MIT-licensed open source project. It can grow thanks to the sponsors
 
 <table style="text-align:center;">
 <tr>
-<td><a href="https://www.mercedes-benz.com/" target="_blank"><img src="https://nestjs.com/img/logos/mercedes-logo.png" width="100" valign="middle" /></a></td>
-<td><a href="https://www.dinii.jp/" target="_blank"><img src="https://nestjs.com/img/logos/dinii-logo.png" width="65" valign="middle" /></a></td>
-<td><a href="https://handsontable.com/docs/react-data-grid/?utm_source=NestJS_GH&utm_medium=sponsorship&utm_campaign=library_sponsorship_2024" target="_blank"><img src="https://nestjs.com/img/logos/handsontable-dark-logo.svg#2" width="150" valign="middle" /></a></td>
-<td align="center" valign="middle"><a href="https://www.itflashcards.com/" target="_blank"><img src="https://nestjs.com/img/logos/it_flashcards-logo.png" width="170" valign="middle" /></a></td>
-<td align="center" valign="middle"><a href="https://arcjet.com/?ref=nestjs" target="_blank"><img src="https://nestjs.com/img/logos/arcjet-logo.svg" width="170" valign="middle" /></a></td>
-<td align="center" valign="middle"><a href="https://crawljobs.com" target="_blank"><img src="https://nestjs.com/img/logos/crawljobs-logo.svg" width="130" valign="middle" /></a></td>
+<td><a href="https://www.mercedes-benz.com/" target="_blank"><img src="https://nestjs.com/img/github/mercedes-logo.png" width="100" valign="middle" /></a></td>
+<td><a href="https://handsontable.com/docs/react-data-grid/?utm_source=NestJS_GH&utm_medium=sponsorship&utm_campaign=library_sponsorship_2024" target="_blank"><img src="https://nestjs.com/img/github/handsontable-dark-logo.svg#2" width="150" valign="middle" /></a></td>
+<td align="center" valign="middle"><a href="https://www.itflashcards.com/" target="_blank"><img src="https://nestjs.com/img/github/it_flashcards-logo.png" width="170" valign="middle" /></a></td>
+<td align="center" valign="middle"><a href="https://arcjet.com/?ref=nestjs" target="_blank"><img src="https://nestjs.com/img/github/arcjet-logo.svg" width="170" valign="middle" /></a></td>
+<td align="center" valign="middle"><a href="https://pandektes.com" target="_blank"><img src="https://nestjs.com/img/github/pandektes-logo.png" width="65" valign="middle" /></a></td>
 </tr><tr>
-<td align="center" valign="middle"><a href="https://pandektes.com" target="_blank"><img src="https://nestjs.com/img/logos/pandektes-logo.png" width="65" valign="middle" /></a></td>
-<td align="center" valign="middle"><a href="https://www.fintechcrafts.com/" target="_blank"><img src="https://nestjs.com/img/logos/fintechcrafts-logo.svg" width="65" valign="middle" /></a></td>
+<td align="center" valign="middle"><a href="https://www.fintechcrafts.com/" target="_blank"><img src="https://opencollective-production.s3.us-west-1.amazonaws.com/account-avatar/935813df-48a9-4b41-b923-7d70b5621c6b/2026-05-06%2010%2021%2033.png" width="65" valign="middle" /></a></td>
+<td align="center" valign="middle"><a href="https://talordata.com/?campaignid=Ya5Xpw2gmhyee6Tg&utm_source=nestjs&utm_term=nestjs" target="_blank"><img src="https://images.opencollective.com/elowen/9ccac7f/avatar/512.png" width="65" valign="middle" /></a></td>
+<td align="center" valign="middle"><a href="https://memory2.co/" target="_blank"><img src="https://images.opencollective.com/memory-squared/bbe37f5/avatar/256.png?height=50" width="65" valign="middle" /></a></td>
 </tr>
 </table>
 
@@ -103,32 +103,12 @@ Nest is an MIT-licensed open source project. It can grow thanks to the sponsors
 
 <table>
 <tr>
-<td align="center" valign="middle"><a href="https://www.swingdev.io" target="_blank"><img src="https://nestjs.com/img/logos/swingdev-logo.svg#1" width="110" valign="middle" /></a></td>
-<td align="center" valign="middle"><a href="https://www.novologic.com/" target="_blank"><img src="https://nestjs.com/img/logos/novologic.png" width="110" valign="middle" /></a></td>
-<td align="center" valign="middle"><a href="https://mantro.net/" target="_blank"><img src="https://nestjs.com/img/logos/mantro-logo.svg" width="95" valign="middle" /></a></td>
-<td align="center" valign="middle"><a href="https://triplebyte.com/" target="_blank"><img src="https://nestjs.com/img/logos/triplebyte.png" width="107" valign="middle" /></a></td>
-<td align="center" valign="middle"><a href="https://nearpod.com/" target="_blank"><img src="https://nestjs.com/img/logos/nearpod-logo.svg" width="100" valign="middle" /></a></td>
-<td align="center" valign="middle"><a href="https://genuinebee.com/" target="_blank"><img src="https://nestjs.com/img/logos/genuinebee.svg" width="97" valign="middle" /></a></td>
-</tr>
-<tr>
-<td align="center" valign="middle"><a href="https://vpn-review.com/vpn-for-torrenting" target="_blank"><img src="https://nestjs.com/img/logos/vpn-review-logo.png" width="85" valign="middle" /></a></td>
-<td align="center" valign="middle"><a href="https://lambda-it.ch/" target="_blank"><img src="https://nestjs.com/img/logos/lambda-it-logo.svg" width="115" valign="middle" /></a></td>
-<td align="center" valign="middle"><a href="https://rocketech.it/cases/?utm_source=google&utm_medium=badge&utm_campaign=nestjs" target="_blank"><img src="https://nestjs.com/img/logos/rocketech-logo.svg" width="110" valign="middle" /></a></td>
-<td align="center" valign="middle"><a href="https://www.anonymistic.com/" target="_blank"><img src="https://nestjs.com/img/logos/anonymistic-logo.png" width="125" valign="middle" /></a></td>
-<td align="center" valign="middle"><a href="https://www.naologic.com/" target="_blank"><img src="https://nestjs.com/img/logos/naologic-logo.svg" width="125" valign="middle" /></a></td>
-<td align="center" valign="middle"><a href="https://triplecore.io" target="_blank"><img src="https://nestjs.com/img/logos/triplecore-logo.svg" width="50" valign="middle" /></a></td>
-</tr>
-<tr>
-<td align="center" valign="middle"><a href="https://polygon-software.ch/" target="_blank"><img src="https://nestjs.com/img/logos/polygon-logo.svg" width="120" valign="middle" /></a></td>
-<td align="center" valign="middle"><a href="https://boringowl.io/" target="_blank"><img src="https://nestjs.com/img/logos/boringowl-logo.svg" width="120" valign="middle" /></a></td>
-<td align="center" valign="middle"><a href="https://nordbot.app/" target="_blank"><img src="https://nestjs.com/img/logos/nordbot-logo.png" width="120" valign="middle" /></a></td>
-<td align="center" valign="middle"><a href="https://doppio.sh/" target="_blank"><img src="https://nestjs.com/img/logos/dopiosh-logo.png" width="50" valign="middle" /></a></td>
-<td align="center" valign="middle"><a href="https://www.hingehealth.com/" target="_blank"><img src="https://nestjs.com/img/logos/hinge-health-logo.svg" width="100" valign="middle" /></a></td>
-<td align="center" valign="middle"><a href="https://www.tripoffice.com/" target="_blank"><img src="https://nestjs.com/img/logos/tripoffice-logo.png" width="140" valign="middle" /></a></td>
-</tr>
-<tr>
-<td align="center" valign="middle"><a href="https://solcellsforetag.se/" target="_blank"><img src="https://nestjs.com/img/logos/solcellsforetag-logo.svg" width="140" valign="middle" /></a></td>
-<td align="center" valign="middle"><a href="https://www.route4me.com/" target="_blank"><img src="https://nestjs.com/img/logos/route4me-logo.svg" width="100" valign="middle" /></a></td>
+<td align="center" valign="middle"><a href="https://mantro.net/" target="_blank"><img src="https://nestjs.com/img/github/mantro-logo.svg" width="95" valign="middle" /></a></td>
+<td align="center" valign="middle"><a href="https://triplebyte.com/" target="_blank"><img src="https://nestjs.com/img/github/triplebyte-logo.png" width="107" valign="middle" /></a></td>
+<td align="center" valign="middle"><a href="https://nearpod.com/" target="_blank"><img src="https://nestjs.com/img/github/nearpod-logo.svg" width="100" valign="middle" /></a></td>
+<td align="center" valign="middle"><a href="https://www.naologic.com/" target="_blank"><img src="https://nestjs.com/img/github/naologic-logo.svg" width="125" valign="middle" /></a></td>
+<td align="center" valign="middle"><a href="https://triplecore.io" target="_blank"><img src="https://nestjs.com/img/github/triplecore-logo.svg" width="50" valign="middle" /></a>
+<td align="center" valign="middle"><a href="https://www.hingehealth.com/" target="_blank"><img src="https://nestjs.com/img/github/hinge-health-logo.svg" width="100" valign="middle" /></a></td>
 </tr>
 </table>
 

package/decorators/http/create-route-param-metadata.decorator.js

@@ -2,6 +2,7 @@ import { uid } from 'uid';
 import { ROUTE_ARGS_METADATA } from '../../constants.js';
 import { assignCustomParameterMetadata } from '../../utils/assign-custom-metadata.util.js';
 import { isFunction, isNil } from '../../utils/shared.utils.js';
+import { isParameterDecoratorOptions } from '../../utils/parameter-decorator-options.util.js';
 /**
  * Defines route param decorator
  *
@@ -20,18 +21,11 @@ export function createParamDecorator(factory, enhancers = []) {
                 pipe.prototype &&
                 isFunction(pipe.prototype.transform)) ||
                 isFunction(pipe.transform));
-        const isParameterDecoratorOptions = (value) => value &&
-            typeof value === 'object' &&
-            !isPipe(value) &&
-            ('schema' in value || 'pipes' in value);
         const hasParamData = isNil(data) || !isPipe(data);
         const paramData = hasParamData ? data : undefined;
         const paramPipes = hasParamData ? pipes : [data, ...pipes];
-        // Check if data itself is an options object (when used as the first and only argument)
-        const isDataOptions = hasParamData &&
-            !isNil(data) &&
-            paramPipes.length === 0 &&
-            isParameterDecoratorOptions(data);
+        // Check if data itself is an options object (when used as the first argument)
+        const isDataOptions = hasParamData && !isNil(data) && isParameterDecoratorOptions(data);
         // Check if the last pipe argument is actually an options object
         const lastPipeArg = paramPipes.length > 0 ? paramPipes[paramPipes.length - 1] : undefined;
         const isLastPipeOptions = !isDataOptions && isParameterDecoratorOptions(lastPipeArg);
@@ -42,7 +36,8 @@ export function createParamDecorator(factory, enhancers = []) {
             const opts = data;
             finalData = undefined;
             finalSchema = opts.schema;
-            finalPipes = (opts.pipes ?? []);
+            // Merge positional pipes passed after the options object
+            finalPipes = [...(opts.pipes ?? []), ...paramPipes];
         }
         else if (isLastPipeOptions) {
             const opts = lastPipeArg;

package/decorators/http/index.d.ts

@@ -6,3 +6,4 @@ export * from './render.decorator.js';
 export * from './header.decorator.js';
 export * from './redirect.decorator.js';
 export * from './sse.decorator.js';
+export * from './sse-signal.decorator.js';

package/decorators/http/index.js

@@ -6,3 +6,4 @@ export * from './render.decorator.js';
 export * from './header.decorator.js';
 export * from './redirect.decorator.js';
 export * from './sse.decorator.js';
+export * from './sse-signal.decorator.js';

package/decorators/http/request-mapping.decorator.d.ts

@@ -76,6 +76,17 @@ export declare const All: (path?: string | string[]) => MethodDecorator;
  * @publicApi
  */
 export declare const Search: (path?: string | string[]) => MethodDecorator;
+/**
+ * Route handler (method) Decorator. Routes HTTP QUERY requests to the specified path.
+ *
+ * **Note**: this is named `QueryMethod` (rather than `Query`) to avoid a name clash
+ * with the `@Query()` parameter decorator used to extract query-string params.
+ *
+ * @see [Routing](https://docs.nestjs.com/controllers#routing)
+ *
+ * @publicApi
+ */
+export declare const QueryMethod: (path?: string | string[]) => MethodDecorator;
 /**
  * Route handler (method) Decorator. Routes Webdav PROPFIND requests to the specified path.
  *

package/decorators/http/request-mapping.decorator.js

@@ -92,6 +92,17 @@ export const All = createMappingDecorator(RequestMethod.ALL);
  * @publicApi
  */
 export const Search = createMappingDecorator(RequestMethod.SEARCH);
+/**
+ * Route handler (method) Decorator. Routes HTTP QUERY requests to the specified path.
+ *
+ * **Note**: this is named `QueryMethod` (rather than `Query`) to avoid a name clash
+ * with the `@Query()` parameter decorator used to extract query-string params.
+ *
+ * @see [Routing](https://docs.nestjs.com/controllers#routing)
+ *
+ * @publicApi
+ */
+export const QueryMethod = createMappingDecorator(RequestMethod.QUERY);
 /**
  * Route handler (method) Decorator. Routes Webdav PROPFIND requests to the specified path.
  *

package/decorators/http/route-params.decorator.d.ts

@@ -34,9 +34,9 @@ export interface RouteParamMetadata {
     index: number;
     data?: ParamData;
 }
-export declare function assignMetadata<TParamtype = any, TArgs = any>(args: TArgs, paramtype: TParamtype, index: number, options: {
+export declare function assignMetadata<TParamtype = any, TArgs = any>(args: TArgs, paramtype: TParamtype, index: number, options?: ({
     data?: ParamData;
-} & ParameterDecoratorOptions): TArgs & {
+} & ParameterDecoratorOptions) | ParamData, ...legacyPipes: (Type<PipeTransform> | PipeTransform)[]): TArgs & {
     [x: string]: {
         schema?: StandardSchemaV1<unknown, unknown> | undefined;
         index: number;
@@ -591,5 +591,31 @@ export declare function HostParam(): ParameterDecorator;
  * @publicApi
  */
 export declare function HostParam(property: string): ParameterDecorator;
+/**
+ * Route handler parameter decorator. Extracts the `Request`
+ * object from the underlying platform and populates the decorated
+ * parameter with the value of `Request`.
+ *
+ * Alias for @Request().
+ *
+ * Example: `logout(@Req() req)`
+ *
+ * @see [Request object](https://docs.nestjs.com/controllers#request-object)
+ *
+ * @publicApi
+ */
 export declare const Req: () => ParameterDecorator;
+/**
+ * Route handler parameter decorator. Extracts the `Response`
+ * object from the underlying platform and populates the decorated
+ * parameter with the value of `Response`.
+ *
+ * Alias for @Response().
+ *
+ * Example: `logout(@Res() res)`
+ *
+ * @see [Response object](https://docs.nestjs.com/controllers#response-object)
+ *
+ * @publicApi
+ */
 export declare const Res: (options?: ResponseDecoratorOptions) => ParameterDecorator;

package/decorators/http/route-params.decorator.js

@@ -1,14 +1,29 @@
 import { RESPONSE_PASSTHROUGH_METADATA, ROUTE_ARGS_METADATA, } from '../../constants.js';
 import { RouteParamtypes } from '../../enums/route-paramtypes.enum.js';
 import { isNil, isString } from '../../utils/shared.utils.js';
-export function assignMetadata(args, paramtype, index, options) {
+import { isParameterDecoratorOptions } from '../../utils/parameter-decorator-options.util.js';
+export function assignMetadata(args, paramtype, index, options, ...legacyPipes) {
+    // Callers built against the pre-v12 signature
+    // `assignMetadata(args, paramtype, index, data?, ...pipes)` pass the raw
+    // `data` value (and pipes positionally); detect that shape and normalize it
+    // instead of silently misreading `data` as the options object.
+    const isOptionsObject = options !== null &&
+        typeof options === 'object' &&
+        (isParameterDecoratorOptions(options) || 'data' in options) &&
+        !('transform' in options) &&
+        legacyPipes.length === 0;
+    const normalizedOptions = isOptionsObject
+        ? options
+        : { data: options, pipes: legacyPipes };
     return {
         ...args,
         [`${paramtype}:${index}`]: {
             index,
-            data: options.data,
-            pipes: options.pipes ?? [],
-            ...(options.schema !== undefined && { schema: options.schema }),
+            data: normalizedOptions.data,
+            pipes: normalizedOptions.pipes ?? [],
+            ...(normalizedOptions.schema !== undefined && {
+                schema: normalizedOptions.schema,
+            }),
         },
     };
 }
@@ -166,21 +181,16 @@ export const Headers = createRouteParamDecorator(RouteParamtypes.HEADERS);
  * @publicApi
  */
 export function Query(property, optionsOrPipe, ...pipes) {
-    const isPropertyOptions = property &&
-        typeof property === 'object' &&
-        !('transform' in property) &&
-        ('schema' in property || 'pipes' in property);
+    const isPropertyOptions = isParameterDecoratorOptions(property);
     if (isPropertyOptions) {
         return createPipesRouteParamDecorator(RouteParamtypes.QUERY)({
             pipes: property.pipes,
             schema: property.schema,
         });
     }
-    const isOptions = optionsOrPipe &&
-        typeof optionsOrPipe === 'object' &&
-        ('schema' in optionsOrPipe || 'pipes' in optionsOrPipe);
+    const isOptions = isParameterDecoratorOptions(optionsOrPipe);
     const actualPipes = isOptions
-        ? optionsOrPipe.pipes
+        ? [...(optionsOrPipe.pipes ?? []), ...pipes]
         : [optionsOrPipe, ...pipes].filter(Boolean);
     return createPipesRouteParamDecorator(RouteParamtypes.QUERY)({
         data: property,
@@ -210,21 +220,16 @@ export function Query(property, optionsOrPipe, ...pipes) {
  * @publicApi
  */
 export function Body(property, optionsOrPipe, ...pipes) {
-    const isPropertyOptions = property &&
-        typeof property === 'object' &&
-        !('transform' in property) &&
-        ('schema' in property || 'pipes' in property);
+    const isPropertyOptions = isParameterDecoratorOptions(property);
     if (isPropertyOptions) {
         return createPipesRouteParamDecorator(RouteParamtypes.BODY)({
             pipes: property.pipes,
             schema: property.schema,
         });
     }
-    const isOptions = optionsOrPipe &&
-        typeof optionsOrPipe === 'object' &&
-        ('schema' in optionsOrPipe || 'pipes' in optionsOrPipe);
+    const isOptions = isParameterDecoratorOptions(optionsOrPipe);
     const actualPipes = isOptions
-        ? optionsOrPipe.pipes
+        ? [...(optionsOrPipe.pipes ?? []), ...pipes]
         : [optionsOrPipe, ...pipes].filter(Boolean);
     return createPipesRouteParamDecorator(RouteParamtypes.BODY)({
         data: property,
@@ -253,11 +258,9 @@ export function Body(property, optionsOrPipe, ...pipes) {
  * @publicApi
  */
 export function RawBody(optionsOrPipe, ...pipes) {
-    const isOptions = optionsOrPipe &&
-        typeof optionsOrPipe === 'object' &&
-        ('schema' in optionsOrPipe || 'pipes' in optionsOrPipe);
+    const isOptions = isParameterDecoratorOptions(optionsOrPipe);
     const actualPipes = isOptions
-        ? optionsOrPipe.pipes
+        ? [...(optionsOrPipe.pipes ?? []), ...pipes]
         : [optionsOrPipe, ...pipes].filter(Boolean);
     return createPipesRouteParamDecorator(RouteParamtypes.RAW_BODY)({
         pipes: actualPipes,
@@ -290,21 +293,16 @@ export function RawBody(optionsOrPipe, ...pipes) {
  * @publicApi
  */
 export function Param(property, optionsOrPipe, ...pipes) {
-    const isPropertyOptions = property &&
-        typeof property === 'object' &&
-        !('transform' in property) &&
-        ('schema' in property || 'pipes' in property);
+    const isPropertyOptions = isParameterDecoratorOptions(property);
     if (isPropertyOptions) {
         return createPipesRouteParamDecorator(RouteParamtypes.PARAM)({
             pipes: property.pipes,
             schema: property.schema,
         });
     }
-    const isOptions = optionsOrPipe &&
-        typeof optionsOrPipe === 'object' &&
-        ('schema' in optionsOrPipe || 'pipes' in optionsOrPipe);
+    const isOptions = isParameterDecoratorOptions(optionsOrPipe);
     const actualPipes = isOptions
-        ? optionsOrPipe.pipes
+        ? [...(optionsOrPipe.pipes ?? []), ...pipes]
         : [optionsOrPipe, ...pipes].filter(Boolean);
     return createPipesRouteParamDecorator(RouteParamtypes.PARAM)({
         data: property,
@@ -336,5 +334,31 @@ export function Param(property, optionsOrPipe, ...pipes) {
 export function HostParam(property) {
     return createRouteParamDecorator(RouteParamtypes.HOST)(property);
 }
+/**
+ * Route handler parameter decorator. Extracts the `Request`
+ * object from the underlying platform and populates the decorated
+ * parameter with the value of `Request`.
+ *
+ * Alias for @Request().
+ *
+ * Example: `logout(@Req() req)`
+ *
+ * @see [Request object](https://docs.nestjs.com/controllers#request-object)
+ *
+ * @publicApi
+ */
 export const Req = Request;
+/**
+ * Route handler parameter decorator. Extracts the `Response`
+ * object from the underlying platform and populates the decorated
+ * parameter with the value of `Response`.
+ *
+ * Alias for @Response().
+ *
+ * Example: `logout(@Res() res)`
+ *
+ * @see [Response object](https://docs.nestjs.com/controllers#response-object)
+ *
+ * @publicApi
+ */
 export const Res = Response;

package/decorators/http/sse-signal.decorator.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Symbol used to carry the per-request SSE `AbortController` on the request object.
+ *
+ * The controller is attached by the framework before the route handler runs and is
+ * aborted when the client disconnects. Its signal is exposed to route handlers
+ * through the `@SseSignal()` parameter decorator.
+ *
+ * @publicApi
+ */
+export declare const SSE_ABORT_CONTROLLER: unique symbol;
+/**
+ * Route handler parameter decorator that injects the `AbortSignal` associated
+ * with a Server-Sent-Events (SSE) request.
+ *
+ * The signal represents the lifetime of the SSE response: it is aborted once the
+ * stream terminates, whether because the client disconnected, the `Observable`
+ * completed, or it errored. Tying setup-phase resources to the signal therefore
+ * releases them exactly once on every exit path, including resources allocated
+ * before the returned `Observable` exists — which would otherwise leak, since the
+ * producer is never subscribed once the client has disconnected.
+ *
+ * Because the signal also aborts on normal completion, `signal.aborted` is only
+ * meaningful as a "did the client go away?" check *during setup*, before the
+ * `Observable` is returned; at that point the stream cannot have completed yet.
+ * Cleanup wired to the `abort` event should be idempotent, as it may run
+ * alongside the `Observable`'s own teardown.
+ *
+ * @example
+ * ```ts
+ * @Sse('stream')
+ * async stream(@SseSignal() signal: AbortSignal): Promise<Observable<MessageEvent>> {
+ *   const session = await createSession();
+ *   if (signal.aborted) {
+ *     await session.close();
+ *     return EMPTY;
+ *   }
+ *   return new Observable(subscriber => {
+ *     const stream = startGeneration(session);
+ *     signal.addEventListener('abort', () => stream.stop(), { once: true });
+ *     return () => stream.stop();
+ *   });
+ * }
+ * ```
+ *
+ * @publicApi
+ */
+export declare const SseSignal: () => ParameterDecorator;

package/decorators/http/sse-signal.decorator.js

@@ -0,0 +1,52 @@
+import { createParamDecorator } from './create-route-param-metadata.decorator.js';
+/**
+ * Symbol used to carry the per-request SSE `AbortController` on the request object.
+ *
+ * The controller is attached by the framework before the route handler runs and is
+ * aborted when the client disconnects. Its signal is exposed to route handlers
+ * through the `@SseSignal()` parameter decorator.
+ *
+ * @publicApi
+ */
+export const SSE_ABORT_CONTROLLER = Symbol('SSE_ABORT_CONTROLLER');
+/**
+ * Route handler parameter decorator that injects the `AbortSignal` associated
+ * with a Server-Sent-Events (SSE) request.
+ *
+ * The signal represents the lifetime of the SSE response: it is aborted once the
+ * stream terminates, whether because the client disconnected, the `Observable`
+ * completed, or it errored. Tying setup-phase resources to the signal therefore
+ * releases them exactly once on every exit path, including resources allocated
+ * before the returned `Observable` exists — which would otherwise leak, since the
+ * producer is never subscribed once the client has disconnected.
+ *
+ * Because the signal also aborts on normal completion, `signal.aborted` is only
+ * meaningful as a "did the client go away?" check *during setup*, before the
+ * `Observable` is returned; at that point the stream cannot have completed yet.
+ * Cleanup wired to the `abort` event should be idempotent, as it may run
+ * alongside the `Observable`'s own teardown.
+ *
+ * @example
+ * ```ts
+ * @Sse('stream')
+ * async stream(@SseSignal() signal: AbortSignal): Promise<Observable<MessageEvent>> {
+ *   const session = await createSession();
+ *   if (signal.aborted) {
+ *     await session.close();
+ *     return EMPTY;
+ *   }
+ *   return new Observable(subscriber => {
+ *     const stream = startGeneration(session);
+ *     signal.addEventListener('abort', () => stream.stop(), { once: true });
+ *     return () => stream.stop();
+ *   });
+ * }
+ * ```
+ *
+ * @publicApi
+ */
+export const SseSignal = createParamDecorator((_data, ctx) => {
+    const request = ctx.switchToHttp().getRequest();
+    const controller = request?.[SSE_ABORT_CONTROLLER];
+    return controller?.signal;
+});

package/enums/request-method.enum.d.ts

@@ -14,5 +14,6 @@ export declare enum RequestMethod {
     COPY = 12,
     MOVE = 13,
     LOCK = 14,
-    UNLOCK = 15
+    UNLOCK = 15,
+    QUERY = 16
 }

package/enums/request-method.enum.js

@@ -16,4 +16,5 @@ export var RequestMethod;
     RequestMethod[RequestMethod["MOVE"] = 13] = "MOVE";
     RequestMethod[RequestMethod["LOCK"] = 14] = "LOCK";
     RequestMethod[RequestMethod["UNLOCK"] = 15] = "UNLOCK";
+    RequestMethod[RequestMethod["QUERY"] = 16] = "QUERY";
 })(RequestMethod || (RequestMethod = {}));

package/exceptions/misdirected.exception.d.ts

@@ -20,7 +20,7 @@ export declare class MisdirectedException extends HttpException {
      *
      * By default, the JSON response body contains two properties:
      * - `statusCode`: this will be the value 421.
-     * - `message`: the string `'Bad Gateway'` by default; override this by supplying
+     * - `message`: the string `'Misdirected'` by default; override this by supplying
      * a string in the `objectOrError` parameter.
      *
      * If the parameter `objectOrError` is a string, the response body will contain an

package/exceptions/misdirected.exception.js

@@ -21,7 +21,7 @@ export class MisdirectedException extends HttpException {
      *
      * By default, the JSON response body contains two properties:
      * - `statusCode`: this will be the value 421.
-     * - `message`: the string `'Bad Gateway'` by default; override this by supplying
+     * - `message`: the string `'Misdirected'` by default; override this by supplying
      * a string in the `objectOrError` parameter.
      *
      * If the parameter `objectOrError` is a string, the response body will contain an

package/exceptions/not-acceptable.exception.d.ts

@@ -20,8 +20,8 @@ export declare class NotAcceptableException extends HttpException {
      *
      * By default, the JSON response body contains two properties:
      * - `statusCode`: this will be the value 406.
-     * - `error`: the string `'Not Acceptable'` by default; override this by supplying
-     * a string in the `error` parameter.
+     * - `message`: the string `'Not Acceptable'` by default; override this by supplying
+     * a string in the `objectOrError` parameter.
      *
      * If the parameter `objectOrError` is a string, the response body will contain an
      * additional property, `error`, with a short description of the HTTP error. To override the

package/exceptions/not-acceptable.exception.js

@@ -21,8 +21,8 @@ export class NotAcceptableException extends HttpException {
      *
      * By default, the JSON response body contains two properties:
      * - `statusCode`: this will be the value 406.
-     * - `error`: the string `'Not Acceptable'` by default; override this by supplying
-     * a string in the `error` parameter.
+     * - `message`: the string `'Not Acceptable'` by default; override this by supplying
+     * a string in the `objectOrError` parameter.
      *
      * If the parameter `objectOrError` is a string, the response body will contain an
      * additional property, `error`, with a short description of the HTTP error. To override the

package/index.d.ts

@@ -3,7 +3,7 @@ export * from './decorators/index.js';
 export * from './enums/index.js';
 export * from './exceptions/index.js';
 export * from './file-stream/index.js';
-export { Abstract, ArgumentMetadata, ArgumentsHost, BeforeApplicationShutdown, CallHandler, CanActivate, ClassProvider, ContextType, DynamicModule, ExceptionFilter, ExecutionContext, ExistingProvider, FactoryProvider, ForwardReference, HttpServer, HttpExceptionBody, HttpExceptionBodyMessage, HttpRedirectResponse, INestApplication, INestApplicationContext, INestMicroservice, InjectionToken, IntrospectionResult, MessageEvent, MiddlewareConsumer, ModuleMetadata, NestApplicationOptions, NestHybridApplicationOptions, NestInterceptor, NestMiddleware, PreRequestHook, NestModule, OnApplicationBootstrap, OnApplicationShutdown, OnModuleDestroy, OnModuleInit, OptionalFactoryDependency, Paramtype, PipeTransform, Provider, RawBodyRequest, RpcExceptionFilter, Scope, ScopeOptions, Type, ValidationError, ValueProvider, VersioningOptions, VERSION_NEUTRAL, WebSocketAdapter, WsExceptionFilter, WsMessageHandler, } from './interfaces/index.js';
+export { Abstract, ArgumentMetadata, ArgumentsHost, BeforeApplicationShutdown, CallHandler, CanActivate, ClassProvider, ContextType, DynamicModule, ExceptionFilter, ExecutionContext, ExistingProvider, FactoryProvider, ForwardReference, HttpServer, HttpExceptionBody, HttpExceptionBodyMessage, HttpRedirectResponse, INestApplication, INestApplicationContext, INestMicroservice, ITransportServer, InjectionToken, IntrospectionResult, MessageEvent, MiddlewareConsumer, ModuleMetadata, NestApplicationOptions, NestHybridApplicationOptions, NestInterceptor, NestMiddleware, PreRequestHook, NestModule, OnApplicationBootstrap, OnApplicationShutdown, OnModuleDestroy, OnModuleInit, OptionalFactoryDependency, Paramtype, PipeTransform, Provider, RawBodyRequest, RouteConflictPolicy, RouteConflictPolicyLevel, RouteResolutionStrategy, RpcExceptionFilter, Scope, ScopeOptions, Type, ValidationError, ValueProvider, VersioningOptions, VERSION_NEUTRAL, WebSocketAdapter, WsExceptionFilter, WsMessageHandler, } from './interfaces/index.js';
 export * from './module-utils/index.js';
 export * from './pipes/index.js';
 export * from './serializer/index.js';

package/interfaces/http/http-server.interface.d.ts

@@ -39,6 +39,8 @@ export interface HttpServer<TRequest = any, TResponse = any, ServerInstance = an
     options(path: string, handler: RequestHandler<TRequest, TResponse>): any;
     search?(handler: RequestHandler<TRequest, TResponse>): any;
     search?(path: string, handler: RequestHandler<TRequest, TResponse>): any;
+    query?(handler: RequestHandler<TRequest, TResponse>): any;
+    query?(path: string, handler: RequestHandler<TRequest, TResponse>): any;
     listen(port: number | string, callback?: () => void): any;
     listen(port: number | string, hostname: string, callback?: () => void): any;
     reply(response: any, body: any, statusCode?: number): any;
@@ -68,4 +70,5 @@ export interface HttpServer<TRequest = any, TResponse = any, ServerInstance = an
     init?(): Promise<void>;
     applyVersionFilter(handler: Function, version: VersionValue, versioningOptions: VersioningOptions): (req: TRequest, res: TResponse, next: () => void) => Function;
     normalizePath?(path: string): string;
+    isRouteOrderSensitive?(): boolean;
 }

package/interfaces/http/message-event.interface.d.ts

@@ -1,6 +1,7 @@
 export interface MessageEvent {
-    data: string | object;
+    data?: string | object;
     id?: string;
     type?: string;
     retry?: number;
+    comment?: string;
 }

package/interfaces/index.d.ts

@@ -18,12 +18,14 @@ export * from './http/index.js';
 export * from './injectable.interface.js';
 export * from './microservices/nest-hybrid-application-options.interface.js';
 export * from './microservices/pre-request-hook.interface.js';
+export * from './microservices/transport-server.interface.js';
 export * from './middleware/index.js';
 export * from './modules/index.js';
 export * from './nest-application-context.interface.js';
 export * from './nest-application-options.interface.js';
 export * from './nest-application.interface.js';
 export * from './nest-microservice.interface.js';
+export * from './router-options.interface.js';
 export * from './scope-options.interface.js';
 export * from './shutdown-hooks-options.interface.js';
 export * from './type.interface.js';

package/interfaces/index.js

@@ -18,12 +18,14 @@ export * from './http/index.js';
 export * from './injectable.interface.js';
 export * from './microservices/nest-hybrid-application-options.interface.js';
 export * from './microservices/pre-request-hook.interface.js';
+export * from './microservices/transport-server.interface.js';
 export * from './middleware/index.js';
 export * from './modules/index.js';
 export * from './nest-application-context.interface.js';
 export * from './nest-application-options.interface.js';
 export * from './nest-application.interface.js';
 export * from './nest-microservice.interface.js';
+export * from './router-options.interface.js';
 export * from './scope-options.interface.js';
 export * from './shutdown-hooks-options.interface.js';
 export * from './type.interface.js';

package/interfaces/microservices/transport-server.interface.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Interface describing the shape of a transport server.
+ * Used as the return type of `getTransportServer()` to provide
+ * autocomplete without creating circular dependencies.
+ *
+ * @publicApi
+ */
+export interface ITransportServer {
+    /**
+     * Starts the transport server.
+     * @param callback Function to be called upon initialization
+     */
+    listen(callback: (...optionalParams: unknown[]) => any): any;
+    /**
+     * Closes the transport server (stops listening on port/connection).
+     */
+    close(): any;
+}

package/interfaces/microservices/transport-server.interface.js

@@ -0,0 +1 @@
+export {};

package/interfaces/nest-application-options.interface.d.ts

@@ -1,6 +1,7 @@
 import { CorsOptions, CorsOptionsDelegate } from './external/cors-options.interface.js';
 import { HttpsOptions } from './external/https-options.interface.js';
 import { NestApplicationContextOptions } from './nest-application-context-options.interface.js';
+import { RouteConflictPolicy, RouteResolutionStrategy } from './router-options.interface.js';
 /**
  * @publicApi
  */
@@ -32,4 +33,18 @@ export interface NestApplicationOptions extends NestApplicationContextOptions {
      * @default false
      */
     return503OnClosing?: boolean;
+    /**
+     * Per-kind policy for overlapping HTTP routes detected at bootstrap.
+     * Distinguishes `duplicate` (identical method+path+host+version) from
+     * `shadow` (patterns that can match the same request, e.g. `/users/me`
+     * vs `/users/:id`). Each kind defaults to `'off'`.
+     */
+    routeConflictPolicy?: RouteConflictPolicy;
+    /**
+     * Order in which HTTP routes are registered on the underlying adapter.
+     * `'specificity'` registers literal segments before parametric and
+     * wildcard ones on order-sensitive adapters (such as Express). Defaults
+     * to `'declaration'`.
+     */
+    routeResolutionStrategy?: RouteResolutionStrategy;
 }

package/interfaces/nest-microservice.interface.d.ts

@@ -3,6 +3,7 @@ import { ExceptionFilter } from './exceptions/exception-filter.interface.js';
 import { CanActivate } from './features/can-activate.interface.js';
 import { NestInterceptor } from './features/nest-interceptor.interface.js';
 import { PipeTransform } from './features/pipe-transform.interface.js';
+import { ITransportServer } from './microservices/transport-server.interface.js';
 import { PreRequestHook } from './microservices/pre-request-hook.interface.js';
 import { INestApplicationContext } from './nest-application-context.interface.js';
 import { WebSocketAdapter } from './websockets/web-socket-adapter.interface.js';
@@ -81,4 +82,10 @@ export interface INestMicroservice extends INestApplicationContext {
      * or a group of servers if there are more than one.
      */
     unwrap<T>(): T;
+    /**
+     * Returns the underlying transport server instance.
+     * Use this to close only the transport (port/connection) without
+     * triggering the full application shutdown lifecycle.
+     */
+    getTransportServer(): ITransportServer;
 }

package/interfaces/router-options.interface.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Severity level applied to a single kind of route conflict detected at
+ * bootstrap.
+ *
+ * @publicApi
+ */
+export type RouteConflictPolicyLevel = 'off' | 'warn' | 'error';
+/**
+ * Per-kind policy for overlapping routes detected at bootstrap.
+ * `duplicate` covers identical (method, path, host, version) registrations.
+ * `shadow` covers patterns that can match the same request (for example
+ * `/users/me` vs `/users/:id`). Each kind defaults to `'off'`.
+ *
+ * @publicApi
+ */
+export interface RouteConflictPolicy {
+    duplicate?: RouteConflictPolicyLevel;
+    shadow?: RouteConflictPolicyLevel;
+}
+/**
+ * Order in which routes are registered on the underlying HTTP adapter.
+ * `'specificity'` registers literal segments before parametric and
+ * wildcard ones on order-sensitive adapters (such as Express). Defaults
+ * to `'declaration'`.
+ *
+ * @publicApi
+ */
+export type RouteResolutionStrategy = 'declaration' | 'specificity';

package/interfaces/router-options.interface.js

@@ -0,0 +1 @@
+export {};

package/internal.d.ts

@@ -8,6 +8,7 @@
 export * from './constants.js';
 export { RouteParamtypes } from './enums/route-paramtypes.enum.js';
 export * from './utils/shared.utils.js';
+export * from './utils/parameter-decorator-options.util.js';
 export * from './utils/load-package.util.js';
 export * from './utils/cli-colors.util.js';
 export * from './utils/random-string-generator.util.js';

package/internal.js

@@ -11,6 +11,7 @@ export * from './constants.js';
 export { RouteParamtypes } from './enums/route-paramtypes.enum.js';
 // Utils
 export * from './utils/shared.utils.js';
+export * from './utils/parameter-decorator-options.util.js';
 export * from './utils/load-package.util.js';
 export * from './utils/cli-colors.util.js';
 export * from './utils/random-string-generator.util.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nestjs/common",
-  "version": "12.0.0-alpha.4",
+  "version": "12.0.0-alpha.6",
   "description": "Nest - modern, fast, powerful node.js web framework (@common)",
   "author": "Kamil Mysliwiec",
   "homepage": "https://nestjs.com",
@@ -26,7 +26,8 @@
     "./*": "./*.js"
   },
   "dependencies": {
-    "file-type": "21.3.4",
+    "@standard-schema/spec": "1.1.0",
+    "file-type": "22.0.2",
     "iterare": "1.2.1",
     "load-esm": "1.0.3",
     "tslib": "2.8.1",
@@ -46,5 +47,5 @@
       "optional": true
     }
   },
-  "gitHead": "415e4d33707e74998d8456be7bd305cedb6508e3"
+  "gitHead": "4c38a5ab100f1d2a0d50602998968a25509525c7"
 }

package/pipes/file/file-type.validator.d.ts

@@ -45,6 +45,13 @@ export type FileTypeValidatorOptions = {
      * @default false
      */
     fallbackToMimetype?: boolean;
+    /**
+     * If `true`, replaces the client-provided mimetype with the mimetype
+     * detected from the file content using magic number validation.
+     *
+     * @default false
+     */
+    overrideMimeType?: boolean;
 };
 /**
  * Defines the built-in FileTypeValidator. It validates incoming files by examining
@@ -58,5 +65,6 @@ export type FileTypeValidatorOptions = {
 export declare class FileTypeValidator extends FileValidator<FileTypeValidatorOptions, IFile> {
     buildErrorMessage(file?: IFile): string;
     isValid(file?: IFile): Promise<boolean>;
+    private matchesFileType;
 }
 export {};

package/pipes/file/file-type.validator.js

@@ -53,13 +53,13 @@ export class FileTypeValidator extends FileValidator {
         const isFileValid = !!file && 'mimetype' in file;
         // Skip magic number validation if set
         if (this.validationOptions.skipMagicNumbersValidation) {
-            return (isFileValid && !!file.mimetype.match(this.validationOptions.fileType));
+            return isFileValid && this.matchesFileType(file.mimetype);
         }
         if (!isFileValid)
             return false;
         if (!file.buffer) {
             if (this.validationOptions.fallbackToMimetype) {
-                return !!file.mimetype.match(this.validationOptions.fileType);
+                return this.matchesFileType(file.mimetype);
             }
             return false;
         }
@@ -67,8 +67,11 @@ export class FileTypeValidator extends FileValidator {
             const { fileTypeFromBuffer } = await import('file-type');
             const fileType = await fileTypeFromBuffer(file.buffer);
             if (fileType) {
+                if (this.validationOptions.overrideMimeType) {
+                    file.mimetype = fileType.mime;
+                }
                 // Match detected mime type against allowed type
-                return !!fileType.mime.match(this.validationOptions.fileType);
+                return this.matchesFileType(fileType.mime);
             }
             /**
              * Fallback logic: If file-type cannot detect magic number (e.g. file too small),
@@ -76,7 +79,7 @@ export class FileTypeValidator extends FileValidator {
              * This is useful for plain text, CSVs, or files without recognizable signatures.
              */
             if (this.validationOptions.fallbackToMimetype) {
-                return !!file.mimetype.match(this.validationOptions.fileType);
+                return this.matchesFileType(file.mimetype);
             }
             return false;
         }
@@ -92,9 +95,18 @@ export class FileTypeValidator extends FileValidator {
             }
             // Fallback to mimetype if enabled
             if (this.validationOptions.fallbackToMimetype) {
-                return !!file.mimetype.match(this.validationOptions.fileType);
+                return this.matchesFileType(file.mimetype);
             }
             return false;
         }
     }
+    matchesFileType(mimetype) {
+        const { fileType } = this.validationOptions;
+        // A string is coerced into a RegExp by `String#match`, so MIME types holding
+        // regex metacharacters (the `+` in `image/svg+xml`) never match themselves.
+        if (typeof fileType === 'string' && mimetype === fileType) {
+            return true;
+        }
+        return !!mimetype.match(fileType);
+    }
 }

package/pipes/parse-array.pipe.d.ts

@@ -4,7 +4,7 @@ import { ValidationPipe, ValidationPipeOptions } from './validation.pipe.js';
 /**
  * @publicApi
  */
-export interface ParseArrayOptions extends Omit<ValidationPipeOptions, 'transform' | 'validateCustomDecorators' | 'exceptionFactory'> {
+export interface ParseArrayPipeOptions extends Omit<ValidationPipeOptions, 'transform' | 'validateCustomDecorators' | 'exceptionFactory'> {
     /**
      * Type for items to be converted into
      */
@@ -27,6 +27,8 @@ export interface ParseArrayOptions extends Omit<ValidationPipeOptions, 'transfor
      */
     exceptionFactory?: (error: any) => any;
 }
+/** @deprecated Use `ParseArrayPipeOptions` instead. */
+export type ParseArrayOptions = ParseArrayPipeOptions;
 /**
  * Defines the built-in ParseArray Pipe
  *
@@ -35,10 +37,10 @@ export interface ParseArrayOptions extends Omit<ValidationPipeOptions, 'transfor
  * @publicApi
  */
 export declare class ParseArrayPipe implements PipeTransform {
-    protected readonly options: ParseArrayOptions;
+    protected readonly options: ParseArrayPipeOptions;
     protected readonly validationPipe: ValidationPipe;
     protected exceptionFactory: (error: string) => any;
-    constructor(options?: ParseArrayOptions);
+    constructor(options?: ParseArrayPipeOptions);
     /**
      * Method that accesses and performs optional transformation on argument for
      * in-flight requests.

package/pipes/parse-date.pipe.d.ts

@@ -1,5 +1,8 @@
 import { PipeTransform } from '../interfaces/features/pipe-transform.interface.js';
 import { ErrorHttpStatusCode } from '../utils/http-error-by-code.util.js';
+/**
+ * @publicApi
+ */
 export interface ParseDatePipeOptions {
     /**
      * If true, the pipe will return null or undefined if the value is not provided
@@ -22,6 +25,9 @@ export interface ParseDatePipeOptions {
      */
     exceptionFactory?: (error: string) => any;
 }
+/**
+ * @publicApi
+ */
 export declare class ParseDatePipe implements PipeTransform {
     private readonly options;
     protected exceptionFactory: (error: string) => any;

package/pipes/parse-date.pipe.js

@@ -3,6 +3,9 @@ import { Injectable } from '../decorators/core/injectable.decorator.js';
 import { HttpStatus } from '../enums/http-status.enum.js';
 import { HttpErrorByCode, } from '../utils/http-error-by-code.util.js';
 import { isNil, isNumber, isString } from '../utils/shared.utils.js';
+/**
+ * @publicApi
+ */
 let ParseDatePipe = class ParseDatePipe {
     options;
     exceptionFactory;

package/pipes/parse-enum.pipe.js

@@ -43,7 +43,13 @@ let ParseEnumPipe = class ParseEnumPipe {
         return value;
     }
     isEnum(value) {
-        const enumValues = Object.keys(this.enumType).map(item => this.enumType[item]);
+        const enumValues = Object.keys(this.enumType)
+            .filter(key => {
+            const enumValue = this.enumType[key];
+            return !(typeof enumValue === 'string' &&
+                typeof this.enumType[enumValue] === 'number');
+        })
+            .map(key => this.enumType[key]);
         return enumValues.includes(value);
     }
 };

package/pipes/parse-float.pipe.js

@@ -42,9 +42,20 @@ let ParseFloatPipe = class ParseFloatPipe {
      * @returns `true` if `value` is a valid float number
      */
     isNumeric(value) {
-        return (['string', 'number'].includes(typeof value) &&
-            !isNaN(parseFloat(String(value))) &&
-            isFinite(value));
+        if (typeof value === 'number')
+            return Number.isFinite(value);
+        if (typeof value !== 'string' || value === '' || value !== value.trim()) {
+            return false;
+        }
+        if (value.startsWith('0x') ||
+            value.startsWith('0X') ||
+            value.startsWith('0b') ||
+            value.startsWith('0B') ||
+            value.startsWith('0o') ||
+            value.startsWith('0O')) {
+            return false;
+        }
+        return Number.isFinite(Number(value));
     }
 };
 ParseFloatPipe = __decorate([

package/pipes/standard-schema-validation.pipe.d.ts

@@ -53,6 +53,11 @@ export declare class StandardSchemaValidationPipe implements PipeTransform {
     protected validateOptions: Record<string, unknown> | undefined;
     protected exceptionFactory: (issues: readonly StandardSchemaV1.Issue[]) => any;
     constructor(options?: StandardSchemaValidationPipeOptions | undefined);
+    /**
+     * Formats Standard Schema validation issues into a flat list of error messages.
+     * When an issue includes a path, the path is prefixed to the message.
+     */
+    protected formatIssueMessages(issues: readonly StandardSchemaV1.Issue[]): string[];
     /**
      * Method that validates the incoming value against the standard schema
      * provided in the parameter metadata.

package/pipes/standard-schema-validation.pipe.js

@@ -34,10 +34,22 @@ let StandardSchemaValidationPipe = class StandardSchemaValidationPipe {
         this.exceptionFactory =
             exceptionFactory ||
                 (issues => {
-                    const messages = issues.map(issue => issue.message);
+                    const messages = this.formatIssueMessages(issues);
                     return new HttpErrorByCode[errorHttpStatusCode](messages);
                 });
     }
+    /**
+     * Formats Standard Schema validation issues into a flat list of error messages.
+     * When an issue includes a path, the path is prefixed to the message.
+     */
+    formatIssueMessages(issues) {
+        return issues.map(issue => {
+            if (issue.path?.length) {
+                return `${issue.path.map(String).join('.')}: ${issue.message}`;
+            }
+            return issue.message;
+        });
+    }
     /**
      * Method that validates the incoming value against the standard schema
      * provided in the parameter metadata.

package/pipes/validation.pipe.js

@@ -31,7 +31,7 @@ let ValidationPipe = class ValidationPipe {
     errorFormat;
     constructor(options) {
         options = options || {};
-        const { transform, disableErrorMessages, errorHttpStatusCode, expectedType, transformOptions, validateCustomDecorators, errorFormat, ...validatorOptions } = options;
+        const { transform, disableErrorMessages, errorHttpStatusCode, expectedType, transformOptions, exceptionFactory, validatorPackage, transformerPackage, validateCustomDecorators, errorFormat, ...validatorOptions } = options;
         // @see [https://github.com/nestjs/nest/issues/10683#issuecomment-1413690508](https://github.com/nestjs/nest/issues/10683#issuecomment-1413690508)
         this.validatorOptions = { forbidUnknownValues: false, ...validatorOptions };
         this.isTransformEnabled = !!transform;
@@ -41,10 +41,9 @@ let ValidationPipe = class ValidationPipe {
         this.errorHttpStatusCode = errorHttpStatusCode || HttpStatus.BAD_REQUEST;
         this.expectedType = expectedType;
         this.errorFormat = errorFormat || 'list';
-        this.exceptionFactory =
-            options.exceptionFactory || this.createExceptionFactory();
-        classValidator = this.loadValidator(options.validatorPackage);
-        classTransformer = this.loadTransformer(options.transformerPackage);
+        this.exceptionFactory = exceptionFactory || this.createExceptionFactory();
+        classValidator = this.loadValidator(validatorPackage);
+        classTransformer = this.loadTransformer(transformerPackage);
     }
     loadValidator(validatorPackage) {
         return (validatorPackage ??
@@ -119,8 +118,14 @@ let ValidationPipe = class ValidationPipe {
             }
             if (this.errorFormat === 'grouped') {
                 const errors = this.groupValidationErrors(validationErrors);
+                // Custom (object) bodies are returned verbatim by
+                // `HttpException.createBody`, so add the standard envelope fields
+                // explicitly to match the shape of the "list" format.
+                const { message: error, statusCode } = new HttpErrorByCode[this.errorHttpStatusCode]().getResponse();
                 return new HttpErrorByCode[this.errorHttpStatusCode]({
                     message: errors,
+                    error,
+                    statusCode,
                 });
             }
             const errors = this.flattenValidationErrors(validationErrors);

package/serializer/standard-schema-serializer.interceptor.js

@@ -1,5 +1,5 @@
 import { __decorate, __metadata, __param } from "tslib";
-import { map } from 'rxjs/operators';
+import { concatMap } from 'rxjs/operators';
 import { Inject, Injectable, Optional } from '../decorators/core/index.js';
 import { StreamableFile } from '../file-stream/index.js';
 import { isObject } from '../utils/shared.utils.js';
@@ -36,7 +36,7 @@ let StandardSchemaSerializerInterceptor = class StandardSchemaSerializerIntercep
         const validateOptions = contextOptions?.validateOptions ?? this.defaultOptions.validateOptions;
         return next
             .handle()
-            .pipe(map((res) => this.serialize(res, schema, validateOptions)));
+            .pipe(concatMap(async (res) => this.serialize(res, schema, validateOptions)));
     }
     /**
      * Serializes responses that are non-null objects nor streamable files.

package/services/console-logger.service.js

@@ -215,7 +215,13 @@ let ConsoleLogger = class ConsoleLogger {
         }
         if (options.params) {
             if (this.options.flattenParams) {
-                Object.assign(logObject, options.params);
+                // Framework fields win on key collisions: a param named "message" or
+                // "level" must not clobber the actual log message or severity.
+                for (const [key, value] of Object.entries(options.params)) {
+                    if (!(key in logObject)) {
+                        logObject[key] = value;
+                    }
+                }
             }
             else {
                 logObject.params = options.params;

package/utils/http-error-by-code.util.d.ts

@@ -1,4 +1,4 @@
 import { HttpStatus } from '../enums/index.js';
 import { Type } from '../interfaces/index.js';
-export type ErrorHttpStatusCode = HttpStatus.BAD_GATEWAY | HttpStatus.BAD_REQUEST | HttpStatus.CONFLICT | HttpStatus.FORBIDDEN | HttpStatus.GATEWAY_TIMEOUT | HttpStatus.GONE | HttpStatus.I_AM_A_TEAPOT | HttpStatus.INTERNAL_SERVER_ERROR | HttpStatus.METHOD_NOT_ALLOWED | HttpStatus.NOT_ACCEPTABLE | HttpStatus.NOT_FOUND | HttpStatus.NOT_IMPLEMENTED | HttpStatus.PAYLOAD_TOO_LARGE | HttpStatus.PRECONDITION_FAILED | HttpStatus.REQUEST_TIMEOUT | HttpStatus.SERVICE_UNAVAILABLE | HttpStatus.UNAUTHORIZED | HttpStatus.UNPROCESSABLE_ENTITY | HttpStatus.UNSUPPORTED_MEDIA_TYPE;
+export type ErrorHttpStatusCode = HttpStatus.BAD_GATEWAY | HttpStatus.BAD_REQUEST | HttpStatus.CONFLICT | HttpStatus.FORBIDDEN | HttpStatus.GATEWAY_TIMEOUT | HttpStatus.GONE | HttpStatus.HTTP_VERSION_NOT_SUPPORTED | HttpStatus.I_AM_A_TEAPOT | HttpStatus.INTERNAL_SERVER_ERROR | HttpStatus.METHOD_NOT_ALLOWED | HttpStatus.MISDIRECTED | HttpStatus.NOT_ACCEPTABLE | HttpStatus.NOT_FOUND | HttpStatus.NOT_IMPLEMENTED | HttpStatus.PAYLOAD_TOO_LARGE | HttpStatus.PRECONDITION_FAILED | HttpStatus.REQUEST_TIMEOUT | HttpStatus.SERVICE_UNAVAILABLE | HttpStatus.UNAUTHORIZED | HttpStatus.UNPROCESSABLE_ENTITY | HttpStatus.UNSUPPORTED_MEDIA_TYPE;
 export declare const HttpErrorByCode: Record<ErrorHttpStatusCode, Type<unknown>>;

package/utils/http-error-by-code.util.js

@@ -1,5 +1,5 @@
 import { HttpStatus } from '../enums/index.js';
-import { BadGatewayException, BadRequestException, ConflictException, ForbiddenException, GatewayTimeoutException, GoneException, ImATeapotException, InternalServerErrorException, MethodNotAllowedException, NotAcceptableException, NotFoundException, NotImplementedException, PayloadTooLargeException, PreconditionFailedException, RequestTimeoutException, ServiceUnavailableException, UnauthorizedException, UnprocessableEntityException, UnsupportedMediaTypeException, } from '../exceptions/index.js';
+import { BadGatewayException, BadRequestException, ConflictException, ForbiddenException, GatewayTimeoutException, GoneException, HttpVersionNotSupportedException, ImATeapotException, InternalServerErrorException, MethodNotAllowedException, MisdirectedException, NotAcceptableException, NotFoundException, NotImplementedException, PayloadTooLargeException, PreconditionFailedException, RequestTimeoutException, ServiceUnavailableException, UnauthorizedException, UnprocessableEntityException, UnsupportedMediaTypeException, } from '../exceptions/index.js';
 export const HttpErrorByCode = {
     [HttpStatus.BAD_GATEWAY]: BadGatewayException,
     [HttpStatus.BAD_REQUEST]: BadRequestException,
@@ -7,9 +7,11 @@ export const HttpErrorByCode = {
     [HttpStatus.FORBIDDEN]: ForbiddenException,
     [HttpStatus.GATEWAY_TIMEOUT]: GatewayTimeoutException,
     [HttpStatus.GONE]: GoneException,
+    [HttpStatus.HTTP_VERSION_NOT_SUPPORTED]: HttpVersionNotSupportedException,
     [HttpStatus.I_AM_A_TEAPOT]: ImATeapotException,
     [HttpStatus.INTERNAL_SERVER_ERROR]: InternalServerErrorException,
     [HttpStatus.METHOD_NOT_ALLOWED]: MethodNotAllowedException,
+    [HttpStatus.MISDIRECTED]: MisdirectedException,
     [HttpStatus.NOT_ACCEPTABLE]: NotAcceptableException,
     [HttpStatus.NOT_FOUND]: NotFoundException,
     [HttpStatus.NOT_IMPLEMENTED]: NotImplementedException,

package/utils/load-package.util.d.ts

@@ -18,7 +18,7 @@ export declare function loadPackageSync(packageName: string, context: string, lo
  * Ensure that `loadPackage()` has been `await`ed for the same package name
  * before calling this function (typically during `init()` or `compile()`).
  */
-export declare function loadPackageCached(packageName: string): any;
+export declare function loadPackageCached(packageName: string, context?: string): any;
 /**
  * Attempts to load and cache a package. Returns the loaded module on success
  * or `null` if the package is not installed.

package/utils/load-package.util.js

@@ -60,9 +60,15 @@ export function loadPackageSync(packageName, context, loaderFn) {
  * Ensure that `loadPackage()` has been `await`ed for the same package name
  * before calling this function (typically during `init()` or `compile()`).
  */
-export function loadPackageCached(packageName) {
+export function loadPackageCached(packageName, context) {
     const cached = packageCache.get(packageName);
     if (!cached) {
+        if (context) {
+            // The package was not preloaded (typically because it is not
+            // installed). Fall back to a synchronous load so the user gets the
+            // actionable "package is missing" message instead of an internal error.
+            return loadPackageSync(packageName, context);
+        }
         throw new Error(`Package "${packageName}" has not been loaded yet. ` +
             `Ensure loadPackage("${packageName}", ...) has been awaited before calling loadPackageCached.`);
     }

package/utils/parameter-decorator-options.util.d.ts

@@ -0,0 +1,13 @@
+import type { ParameterDecoratorOptions } from '../decorators/http/route-params.decorator.js';
+/**
+ * Determines whether a parameter-decorator argument is a
+ * `ParameterDecoratorOptions` object rather than a pipe (instance or class).
+ *
+ * Kept in one place so every decorator (`@Query`, `@Body`, `@Param`,
+ * `@RawBody`, `@Payload`, `@MessageBody`, custom decorators, ...) classifies
+ * arguments identically: a pipe instance that happens to expose a `schema` or
+ * `pipes` property must never be mistaken for an options object.
+ *
+ * @internal
+ */
+export declare function isParameterDecoratorOptions(value: unknown): value is ParameterDecoratorOptions;

package/utils/parameter-decorator-options.util.js

@@ -0,0 +1,22 @@
+import { isFunction } from './shared.utils.js';
+const isPipeLike = (value) => isFunction(value?.transform) ||
+    (isFunction(value) &&
+        value.prototype &&
+        isFunction(value.prototype.transform));
+/**
+ * Determines whether a parameter-decorator argument is a
+ * `ParameterDecoratorOptions` object rather than a pipe (instance or class).
+ *
+ * Kept in one place so every decorator (`@Query`, `@Body`, `@Param`,
+ * `@RawBody`, `@Payload`, `@MessageBody`, custom decorators, ...) classifies
+ * arguments identically: a pipe instance that happens to expose a `schema` or
+ * `pipes` property must never be mistaken for an options object.
+ *
+ * @internal
+ */
+export function isParameterDecoratorOptions(value) {
+    return (!!value &&
+        typeof value === 'object' &&
+        !isPipeLike(value) &&
+        ('schema' in value || 'pipes' in value));
+}