@solidxai/core 0.1.10-beta.27 → 0.1.10-beta.28

package/MICROSOFT_ACTIVE_DIRECTORY_OAUTH_FLOW.md

@@ -0,0 +1,616 @@
+# Microsoft Active Directory OAuth Flow
+
+This document explains how Microsoft Active Directory, also called Azure AD or Microsoft Entra ID, OAuth login works in Solid Core and Solid Core UI.
+
+## Important Short Answer
+
+On button click, frontend does not call the backend with `axios` or `fetch`.
+
+Frontend only builds this URL:
+
+```ts
+const backendApiUrl = (
+  env("NEXT_PUBLIC_BACKEND_API_URL") || env("API_URL")
+).replace(/\/+$/, "");
+
+const getOAuthConnectUrl = (provider: string) =>
+  `${backendApiUrl}/api/iam/${provider}/connect`;
+```
+
+For Microsoft Active Directory, this becomes:
+
+```text
+http://localhost:3000/api/iam/microsoft-active-directory/connect
+```
+
+Then frontend does:
+
+```ts
+router.push(getOAuthConnectUrl("microsoft-active-directory"));
+```
+
+So frontend creates a URL and navigates the browser to that URL. Browser navigation itself makes the `GET /connect` request.
+
+This is correct for OAuth because OAuth needs full browser redirects:
+
+```text
+Frontend page
+-> Backend /connect
+-> Microsoft login page
+-> Backend /connect/callback
+-> Frontend callback page
+-> Backend /authenticate
+```
+
+## Why It Is Not A Normal API Call
+
+Normal login with username/password can use an API call:
+
+```text
+frontend axios/fetch -> backend -> response JSON
+```
+
+OAuth login cannot work like that for the first step because the user must leave our app and open Microsoft login in the browser.
+
+So the first step is navigation:
+
+```text
+browser location changes to backend /connect
+```
+
+After Microsoft login completes, the final token exchange uses an API call:
+
+```text
+frontend -> backend /authenticate?accessCode=...
+```
+
+## Files Involved
+
+Backend files:
+
+```text
+src/controllers/microsoft-active-directory-authentication.controller.ts
+src/passport-strategies/microsoft-active-directory-oauth.strategy.ts
+src/helpers/microsoft-active-directory-oauth.helper.ts
+src/services/user.service.ts
+src/services/authentication.service.ts
+src/services/settings/default-settings-provider.service.ts
+```
+
+Frontend files:
+
+```text
+src/components/common/SocialMediaLogin.tsx
+src/routes/pages/auth/InitiateMicrosoftActiveDirectoryOauthPage.tsx
+src/components/auth/MicrosoftActiveDirectoryAuthChecking.tsx
+src/adapters/auth/signInWithOAuthAccessCode.ts
+src/routes/solidRoutes.tsx
+```
+
+## Backend Endpoints
+
+### 1. Start Microsoft Active Directory OAuth
+
+```http
+GET /api/iam/microsoft-active-directory/connect
+```
+
+Controller method:
+
+```ts
+@Public()
+@UseGuards(MicrosoftActiveDirectoryOauthGuard)
+@Get("connect")
+async connect() {
+  await this.validateConfiguration();
+}
+```
+
+This endpoint starts OAuth. The guard runs before the method body.
+
+The guard:
+
+```ts
+export class MicrosoftActiveDirectoryOauthGuard
+  extends AuthGuard("microsoft-active-directory") {}
+```
+
+This tells Passport to use the strategy named:
+
+```text
+microsoft-active-directory
+```
+
+### 2. Microsoft Callback
+
+```http
+GET /api/iam/microsoft-active-directory/connect/callback
+```
+
+Controller method:
+
+```ts
+@Public()
+@Get("connect/callback")
+@UseGuards(MicrosoftActiveDirectoryOauthGuard)
+async microsoftActiveDirectoryAuthCallback(@Req() req, @Res() res) {
+  const config = await this.validateConfiguration();
+  const user = req.user;
+
+  return res.redirect(
+    this.buildFrontendRedirectUrl(config.redirectURL, user["accessCode"]),
+  );
+}
+```
+
+Microsoft redirects to this endpoint after successful login.
+
+This route also uses `MicrosoftActiveDirectoryOauthGuard`, but now Microsoft sends a `code` in the URL. Passport uses that code to get an access token and profile from Microsoft.
+
+### 3. Authenticate With accessCode
+
+```http
+GET /api/iam/microsoft-active-directory/authenticate?accessCode=<accessCode>
+```
+
+Controller method:
+
+```ts
+@Public()
+@Get("authenticate")
+async microsoftActiveDirectoryAuth(@Query("accessCode") accessCode: string) {
+  await this.validateConfiguration();
+  return this.authService.signInUsingMicrosoftActiveDirectory(accessCode);
+}
+```
+
+Frontend calls this after it receives `accessCode` from the callback redirect.
+
+This returns application JWT tokens.
+
+## Complete Request Flow
+
+### Step 1: User Clicks Button
+
+Frontend file:
+
+```text
+src/components/common/SocialMediaLogin.tsx
+```
+
+Click handler:
+
+```ts
+onClick={() => router.push(getOAuthConnectUrl("microsoft-active-directory"))}
+```
+
+This creates:
+
+```text
+http://localhost:3000/api/iam/microsoft-active-directory/connect
+```
+
+Then browser opens that URL.
+
+Note: yahan frontend direct API call nahi kar raha. Sirf URL bana kar browser ko us URL par bhej raha hai.
+
+### Step 2: Backend /connect Runs Guard
+
+Backend route:
+
+```http
+GET /api/iam/microsoft-active-directory/connect
+```
+
+Before `connect()` runs, Nest runs:
+
+```ts
+MicrosoftActiveDirectoryOauthGuard
+```
+
+Guard calls Passport strategy:
+
+```ts
+AuthGuard("microsoft-active-directory")
+```
+
+Strategy config:
+
+```ts
+super({
+  clientID,
+  clientSecret,
+  callbackURL,
+  tenant,
+  scope: MICROSOFT_ACTIVE_DIRECTORY_OAUTH_SCOPES,
+  addUPNAsEmail: true,
+});
+```
+
+Passport redirects the browser to Microsoft login page.
+
+### Step 3: Microsoft Login Page Opens
+
+Browser leaves our app and opens Microsoft login.
+
+Microsoft receives values like:
+
+```text
+client_id
+redirect_uri
+scope
+tenant
+response_type=code
+```
+
+The `redirect_uri` comes from:
+
+```env
+IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_CALLBACK_URL
+```
+
+Example:
+
+```env
+IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_CALLBACK_URL=http://localhost:3000/api/iam/microsoft-active-directory/connect/callback
+```
+
+This exact URL must be registered in Azure App Registration.
+
+### Step 4: Microsoft Redirects Back To Backend
+
+After successful Microsoft login, Microsoft redirects browser to:
+
+```text
+http://localhost:3000/api/iam/microsoft-active-directory/connect/callback?code=...
+```
+
+This is the callback route.
+
+### Step 5: Guard Runs Again On Callback
+
+The callback route also has:
+
+```ts
+@UseGuards(MicrosoftActiveDirectoryOauthGuard)
+```
+
+Now the guard sees Microsoft `code`.
+
+Passport exchanges that `code` with Microsoft and gets:
+
+```text
+access token
+profile
+```
+
+Then Passport calls the strategy `validate()` method.
+
+### Step 6: Strategy validate() Creates accessCode
+
+Backend file:
+
+```text
+src/passport-strategies/microsoft-active-directory-oauth.strategy.ts
+```
+
+Method:
+
+```ts
+async validate(_accessToken, _refreshToken, profile, done) {
+  const loginAccessCode = uuid();
+
+  const user = {
+    provider: "microsoftActiveDirectory",
+    providerId,
+    email,
+    name,
+    picture,
+    accessCode: loginAccessCode,
+  };
+
+  await this.userService.resolveUserOnOauthMicrosoftActiveDirectory({
+    ...user,
+    accessToken: _accessToken,
+    refreshToken: null,
+  });
+
+  done(null, user);
+}
+```
+
+This method creates a temporary `accessCode`. This is not the JWT. It is only a one-time code used by frontend to complete login.
+
+### Step 7: User Is Created Or Updated
+
+Backend file:
+
+```text
+src/services/user.service.ts
+```
+
+Method:
+
+```ts
+resolveUserOnOauthMicrosoftActiveDirectory()
+```
+
+It checks user by email:
+
+```text
+if user does not exist:
+  create user
+  save Microsoft Active Directory id/token/profile picture
+  save accessCode
+  initialize default role
+
+if user exists:
+  update Microsoft Active Directory id/token/profile picture
+  update accessCode
+```
+
+Important fields saved:
+
+```text
+accessCode
+microsoftActiveDirectoryId
+microsoftActiveDirectoryAccessToken
+microsoftActiveDirectoryProfilePicture
+lastLoginProvider
+```
+
+### Step 8: Backend Redirects To Frontend
+
+After strategy validation, callback controller gets `req.user`.
+
+Then it redirects to frontend:
+
+```ts
+this.buildFrontendRedirectUrl(config.redirectURL, user["accessCode"])
+```
+
+`config.redirectURL` comes from:
+
+```env
+IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_REDIRECT_URL
+```
+
+Example:
+
+```env
+IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_REDIRECT_URL=http://localhost:3001/auth/initiate-microsoft-active-directory-oauth
+```
+
+Final redirect URL becomes:
+
+```text
+http://localhost:3001/auth/initiate-microsoft-active-directory-oauth?accessCode=<uuid>
+```
+
+This URL is frontend, not backend.
+
+### Step 9: Frontend Reads accessCode
+
+Frontend route:
+
+```text
+/auth/initiate-microsoft-active-directory-oauth
+```
+
+Frontend file:
+
+```text
+src/routes/pages/auth/InitiateMicrosoftActiveDirectoryOauthPage.tsx
+```
+
+It renders:
+
+```ts
+<MicrosoftActiveDirectoryAuthChecking />
+```
+
+That component reads:
+
+```ts
+const accessCode = searchParams.get("accessCode");
+```
+
+### Step 10: Frontend Calls Backend /authenticate
+
+Frontend file:
+
+```text
+src/adapters/auth/signInWithOAuthAccessCode.ts
+```
+
+It calls:
+
+```ts
+solidGet(
+  `${apiUrl}/api/iam/${provider}/authenticate?accessCode=${encodeURIComponent(accessCode)}`
+)
+```
+
+For Microsoft Active Directory:
+
+```text
+GET /api/iam/microsoft-active-directory/authenticate?accessCode=<uuid>
+```
+
+This is the real frontend API call.
+
+### Step 11: Backend Validates accessCode And Returns JWT
+
+Backend file:
+
+```text
+src/services/authentication.service.ts
+```
+
+Method:
+
+```ts
+signInUsingMicrosoftActiveDirectory(accessCode)
+```
+
+It does:
+
+```text
+1. Find user by accessCode
+2. Check account is not blocked
+3. Validate saved Microsoft access token using Microsoft Graph /me
+4. Verify Microsoft profile id/email matches the saved user
+5. Generate application JWT accessToken and refreshToken
+6. Return user and tokens
+```
+
+After frontend receives tokens, it stores session the same way as existing OAuth login.
+
+## callbackURL vs redirectURL
+
+These two are different and both are required.
+
+### callbackURL
+
+Used by Microsoft to come back to backend:
+
+```env
+IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_CALLBACK_URL=http://localhost:3000/api/iam/microsoft-active-directory/connect/callback
+```
+
+This must be registered in Azure App Registration.
+
+### redirectURL
+
+Used by backend to send the user back to frontend:
+
+```env
+IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_REDIRECT_URL=http://localhost:3001/auth/initiate-microsoft-active-directory-oauth
+```
+
+This does not go in Azure redirect URI list unless your Azure app directly redirects to frontend, which this backend flow does not do.
+
+## Required Environment Variables
+
+Backend:
+
+```env
+IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_CLIENT_ID=<azure-client-id>
+IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_CLIENT_SECRET=<azure-client-secret>
+IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_TENANT_ID=<tenant-id-or-common>
+IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_CALLBACK_URL=http://localhost:3000/api/iam/microsoft-active-directory/connect/callback
+IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_REDIRECT_URL=http://localhost:3001/auth/initiate-microsoft-active-directory-oauth
+```
+
+Frontend:
+
+```env
+VITE_BACKEND_API_URL=http://localhost:3000
+VITE_API_URL=http://localhost:3000
+VITE_BASE_URL=http://localhost:3001
+```
+
+## Azure App Registration Setup
+
+In Azure Portal:
+
+```text
+Microsoft Entra ID
+-> App registrations
+-> Your app
+-> Authentication
+-> Add platform
+-> Web
+-> Redirect URIs
+```
+
+Add exactly:
+
+```text
+http://localhost:3000/api/iam/microsoft-active-directory/connect/callback
+```
+
+The value must exactly match `IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_CALLBACK_URL`.
+
+Exact means same:
+
+```text
+protocol: http vs https
+host: localhost
+port: 3000
+path: /api/iam/microsoft-active-directory/connect/callback
+trailing slash: no extra slash
+```
+
+## Common Mistakes
+
+### redirect_uri is not valid
+
+Reason:
+
+```text
+IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_CALLBACK_URL does not match Azure redirect URI.
+```
+
+Fix:
+
+```text
+Register the exact callback URL in Azure.
+```
+
+### Using frontend URL as callbackURL
+
+Wrong:
+
+```env
+IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_CALLBACK_URL=http://localhost:3001/auth/initiate-microsoft-active-directory-oauth
+```
+
+Correct:
+
+```env
+IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_CALLBACK_URL=http://localhost:3000/api/iam/microsoft-active-directory/connect/callback
+```
+
+### Using backend API URL as redirectURL
+
+Wrong:
+
+```env
+IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_REDIRECT_URL=http://localhost:3000/api/auth/initiate-microsoft-active-directory-oauth
+```
+
+Correct:
+
+```env
+IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_REDIRECT_URL=http://localhost:3001/auth/initiate-microsoft-active-directory-oauth
+```
+
+### Empty client id crashes strategy
+
+Wrong:
+
+```env
+IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_CLIENT_ID=
+```
+
+If OAuth is not configured, leave it absent or let the strategy use dummy startup values. If OAuth should work, set the real Azure client id.
+
+## Final Flow Summary
+
+```text
+1. User clicks Microsoft Active Directory button
+2. Frontend builds backend /connect URL
+3. Frontend navigates browser to backend /connect
+4. Backend Passport guard redirects browser to Microsoft
+5. User logs in on Microsoft
+6. Microsoft redirects browser to backend /connect/callback with code
+7. Backend exchanges code for Microsoft token/profile
+8. Backend creates/updates user and stores temporary accessCode
+9. Backend redirects browser to frontend redirectURL with accessCode
+10. Frontend reads accessCode
+11. Frontend calls backend /authenticate?accessCode=...
+12. Backend verifies user/token and returns application JWT
+13. Frontend stores JWT session
+```
+

package/dist/constants/error-messages.d.ts

@@ -25,6 +25,7 @@ export declare const ERROR_MESSAGES: {
     ACCESS_DENIED: string;
     INVALID_USER_PROFILE: string;
     GOOGLE_OAUTH_PROFILE_FETCH_FAILED: string;
+    MICROSOFT_ACTIVE_DIRECTORY_OAUTH_PROFILE_FETCH_FAILED: string;
     LOGOUT_FAILED: string;
     INVALID_CREDENTIALS: string;
     LOGIN_FAILED: string;

package/dist/constants/error-messages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error-messages.d.ts","sourceRoot":"","sources":["../../src/constants/error-messages.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAwCE,MAAM,EAAE;2CACM,MAAM;+BAClB,MAAM;uCACE,MAAM;;;;;;;;;;;;;;;;6BAgChB,MAAM;;;;0BAOT,MAAM,GAAG,MAAM;mCACN,MAAM;;;;;;mCASN,MAAM,GAAG,MAAM;qCACb,MAAM;yDACc,MAAM;qCAC1B,MAAM;;mCAIR,MAAM;8BACX,MAAM,GAAG,MAAM;gCAGb,MAAM,GAAG,MAAM;;;kCAKb,MAAM,GAAG,MAAM;qCACZ,MAAM;8CAGG,MAAM,GAAG,MAAM;;yCAIpB,MAAM;;;;;yBAYtC,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;CAElD,CAAC"}
+{"version":3,"file":"error-messages.d.ts","sourceRoot":"","sources":["../../src/constants/error-messages.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAyCE,MAAM,EAAE;2CACM,MAAM;+BAClB,MAAM;uCACE,MAAM;;;;;;;;;;;;;;;;6BAgChB,MAAM;;;;0BAOT,MAAM,GAAG,MAAM;mCACN,MAAM;;;;;;mCASN,MAAM,GAAG,MAAM;qCACb,MAAM;yDACc,MAAM;qCAC1B,MAAM;;mCAIR,MAAM;8BACX,MAAM,GAAG,MAAM;gCAGb,MAAM,GAAG,MAAM;;;kCAKb,MAAM,GAAG,MAAM;qCACZ,MAAM;8CAGG,MAAM,GAAG,MAAM;;yCAIpB,MAAM;;;;;yBAYtC,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;CAElD,CAAC"}

package/dist/constants/error-messages.js

@@ -28,6 +28,7 @@ exports.ERROR_MESSAGES = {
     ACCESS_DENIED: 'Access denied',
     INVALID_USER_PROFILE: 'Invalid user profile',
     GOOGLE_OAUTH_PROFILE_FETCH_FAILED: 'Failed to fetch user profile from Google OAuth service',
+    MICROSOFT_ACTIVE_DIRECTORY_OAUTH_PROFILE_FETCH_FAILED: 'Failed to fetch user profile from Microsoft Active Directory OAuth service',
     LOGOUT_FAILED: 'Logout failed due to an unexpected error.',
     INVALID_CREDENTIALS: 'Invalid credentials',
     LOGIN_FAILED: 'Login Failed',

package/dist/constants/error-messages.js.map

@@ -1 +1 @@
-{"version":3,"file":"error-messages.js","sourceRoot":"","sources":["../../src/constants/error-messages.ts"],"names":[],"mappings":";;;AAEa,QAAA,cAAc,GAAG;IAE1B,cAAc,EAAE,sBAAsB;IACtC,eAAe,EAAE,gCAAgC;IACjD,aAAa,EAAE,mBAAmB;IAClC,eAAe,EAAE,sEAAsE;IACvF,kBAAkB,EAAE,0BAA0B;IAC9C,4BAA4B,EAAE,oCAAoC;IAClE,2BAA2B,EAAE,yCAAyC;IACtE,kCAAkC,EAAE,2CAA2C;IAC/E,6BAA6B,EAAE,iEAAiE;IAChG,6BAA6B,EAAE,gDAAgD;IAC/E,8BAA8B,EAAE,kDAAkD;IAClF,mBAAmB,EAAE,sCAAsC;IAC3D,0BAA0B,EAAE,6CAA6C;IACzE,WAAW,EAAE,cAAc;IAC3B,WAAW,EAAE,kBAAkB;IAC/B,yBAAyB,EAAE,+CAA+C;IAC1E,kBAAkB,EAAE,8DAA8D;IAClF,gBAAgB,EAAE,yBAAyB;IAC3C,iBAAiB,EAAE,+BAA+B;IAClD,0BAA0B,EAAE,uCAAuC;IACnE,eAAe,EAAE,0BAA0B;IAC3C,0BAA0B,EAAE,4BAA4B;IACxD,qBAAqB,EAAE,uBAAuB;IAC9C,aAAa,EAAE,eAAe;IAC9B,oBAAoB,EAAE,sBAAsB;IAC5C,iCAAiC,EAAE,wDAAwD;IAC3F,aAAa,EAAE,2CAA2C;IAE1D,mBAAmB,EAAE,qBAAqB;IAC1C,YAAY,EAAE,cAAc;IAC5B,sBAAsB,EAAE,+CAA+C;IACvE,oBAAoB,EAAE,uBAAuB;IAC7C,sBAAsB,EAAE,iCAAiC;IAGzD,uBAAuB,EAAE,yCAAyC;IAClE,mBAAmB,EAAE,2CAA2C;IAChE,eAAe,EAAE,4CAA4C;IAC7D,eAAe,EAAE,CAAC,KAAe,EAAE,EAAE,CAAC,uCAAuC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;IAC/F,0BAA0B,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,uBAAuB,QAAQ,cAAc;IAC/F,cAAc,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,SAAS,QAAQ,cAAc;IACrE,oBAAoB,EAAE,CAAC,UAAkB,EAAE,EAAE,CAAC,eAAe,UAAU,mBAAmB;IAG1F,eAAe,EAAE,uDAAuD;IACxE,eAAe,EAAE,gDAAgD;IAGjE,cAAc,EAAE,iEAAiE;IACjF,sBAAsB,EAAE,iEAAiE;IAGzF,SAAS,EAAE,WAAW;IAItB,eAAe,EAAE,sEAAsE;IAGvF,sBAAsB,EAAE,4BAA4B;IACpD,sBAAsB,EAAE,8BAA8B;IAGtD,2BAA2B,EAAE,8CAA8C;IAC3E,4BAA4B,EAAE,iDAAiD;IAC/E,+BAA+B,EAAE,wJAAwJ;IACzL,6BAA6B,EAAE,yCAAyC;IACxE,gBAAgB,EAAE,4BAA4B;IAI9C,2BAA2B,EAAE,2DAA2D;IACxF,kBAAkB,EAAE,2EAA2E;IAC/F,cAAc,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,WAAW,MAAM,SAAS;IAI9D,0BAA0B,EAAE,+CAA+C;IAC3E,iDAAiD,EAAE,wDAAwD;IAC3G,2DAA2D,EAAE,kEAAkE;IAC/H,eAAe,EAAE,CAAC,EAAmB,EAAE,EAAE,CAAC,qBAAqB,EAAE,SAAS;IAC1E,kBAAkB,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,uDAAuD,QAAQ,yBAAyB;IAClI,iBAAiB,EAAE,gDAAgD;IACnE,kBAAkB,EAAE,gDAAgD;IAEpE,cAAc,EAAE,gBAAgB;IAChC,eAAe,EAAE,oBAAoB;IACrC,yBAAyB,EAAE,+DAA+D;IAG1F,wBAAwB,EAAE,CAAC,EAAmB,EAAE,EAAE,CAAC,0BAA0B,EAAE,aAAa;IAC5F,uBAAuB,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,qBAAqB,KAAK,aAAa;IACnF,uCAAuC,EAAE,CAAC,SAAiB,EAAE,EAAE,CAAC,kEAAkE,SAAS,EAAE;IAC7I,eAAe,EAAE,CAAC,YAAqB,EAAE,EAAE,CAAC,QAAQ,YAAY,CAAC,CAAC,CAAC,wBAAwB,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,aAAa;IAC5H,kCAAkC,EAAE,yDAAyD;IAG7F,gBAAgB,EAAE,CAAC,UAAkB,EAAE,EAAE,CAAC,oBAAoB,UAAU,aAAa;IACrF,mBAAmB,EAAE,CAAC,EAAmB,EAAE,EAAE,CAAC,kBAAkB,EAAE,aAAa;IAG/E,gBAAgB,EAAE,CAAC,MAAwB,EAAE,EAAE,CAAC,SAAS,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa;IAChG,oBAAoB,EAAE,6CAA6C;IACnE,kBAAkB,EAAE,2CAA2C;IAG/D,uBAAuB,EAAE,CAAC,EAAmB,EAAE,EAAE,CAAC,wDAAwD,EAAE,GAAG;IAC/G,yBAAyB,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,iCAAiC,GAAG,EAAE;IAGlF,mCAAmC,EAAE,CAAC,EAAmB,EAAE,EAAE,CAAC,gCAAgC,EAAE,aAAa;IAC7G,gCAAgC,EAAE,kCAAkC;IAGpE,wBAAwB,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,6BAA6B,QAAQ,EAAE;IAGvF,gCAAgC,EAAE,gEAAgE;IAClG,+BAA+B,EAAE,iFAAiF;IAClH,6BAA6B,EAAE,uCAAuC;IAEtE,4CAA4C,EAAE,wBAAwB;IAEtE,mBAAmB,EAAE;QACrB,UAAU,EAAE,CAAC,KAAc,EAAE,EAAE,CAC7B,wCAAwC,KAAK,IAAI,OAAO,WAAW;KACtB;CAElD,CAAC","sourcesContent":["// backend/common/constants/error-messages.ts\n\nexport const ERROR_MESSAGES = {\n    //authentication errors\n    USER_NOT_FOUND: 'User does not exist.',\n    USER_NOT_ACTIVE: 'User profile is not activated.',\n    USER_INACTIVE: 'User is inactive.',\n    ACCOUNT_BLOCKED: 'Your account has been blocked due to multiple failed login attempts.',\n    PASSWORD_INCORRECT: 'Password does not match.',\n    PUBLIC_REGISTRATION_DISABLED: 'Public registrations are disabled.',\n    UNIQUE_CONSTRAINT_VIOLATION: 'A unique constraint violation occurred.',\n    PASSWORDLESS_REGISTRATION_DISABLED: 'Passwordless registration is not enabled.',\n    REGISTRATION_REQUIRES_CONTACT: 'Either mobile or email is required for initiating registration.',\n    EMAIL_REQUIRED_FOR_VALIDATION: 'Email is required for email validation source.',\n    MOBILE_REQUIRED_FOR_VALIDATION: 'Mobile is required for mobile validation source.',\n    USER_ALREADY_EXISTS: 'User already exists. Please sign in.',\n    VALIDATION_SOURCE_REQUIRED: 'At least one validation source is required.',\n    INVALID_OTP: 'Invalid OTP.',\n    OTP_EXPIRED: 'OTP has expired.',\n    INVALID_VERIFICATION_TYPE: 'Invalid type. Must be either email or mobile.',\n    NON_LOCAL_PROVIDER: 'User seems to have used a passwordless mode to authenticate.',\n    USER_ID_MISMATCH: \"User ID's do not match.\",\n    USERNAME_MISMATCH: \"User username's do not match.\",\n    INCORRECT_CURRENT_PASSWORD: 'Incorrect current password specified.',\n    PASSWORD_REUSED: 'Try a different password',\n    INVALID_VERIFICATION_TOKEN: 'Invalid verification token',\n    INVALID_REFRESH_TOKEN: 'Invalid refresh token',\n    ACCESS_DENIED: 'Access denied',\n    INVALID_USER_PROFILE: 'Invalid user profile',\n    GOOGLE_OAUTH_PROFILE_FETCH_FAILED: 'Failed to fetch user profile from Google OAuth service',\n    LOGOUT_FAILED: 'Logout failed due to an unexpected error.',\n\n    INVALID_CREDENTIALS: 'Invalid credentials',\n    LOGIN_FAILED: 'Login Failed',\n    OLD_PASSWORD_INCORRECT: 'You have specified an incorrect old password.',\n    INVALID_NEW_PASSWORD: 'Invalid new password.',\n    PASSWORDS_DO_NOT_MATCH: 'New passwords are not matching.',\n\n    // user management errors\n    DELETE_SELF_NOT_ALLOWED: 'Deleting logged-in user is not allowed.',\n    DELETE_IDS_REQUIRED: 'At least one ID is required for deletion.',\n    USER_MISSING_ID: 'User must exist before initializing roles.',\n    ROLES_NOT_FOUND: (roles: string[]) => `The following roles were not found: ${roles.join(', ')}`,\n    USER_NOT_FOUND_BY_USERNAME: (username: string) => `User with username '${username}' not found.`,\n    ROLE_NOT_FOUND: (roleName: string) => `Role '${roleName}' not found.`,\n    PERMISSION_NOT_EXIST: (permission: string) => `Permission '${permission}' does not exist.`,\n\n    // session errors\n    SESSION_INVALID: 'Your session is no longer valid. Please log in again.',\n    SESSION_EXPIRED: 'Your session has expired. Please log in again.',\n\n    // filter errors\n    GROUP_BY_LIMIT: 'buildFilterQuery: Only 1 Group by field is supported currently.',\n    INVALID_GROUP_BY_COUNT: 'Exactly one groupBy field is required to count grouped records.',\n\n    // general errors\n    FORBIDDEN: 'Forbidden',\n\n\n    // database errors\n    DUPLICATE_ENTRY: 'Duplicate entry. A record with similar unique fields already exists.',\n\n    // validation errors\n    ID_REQUIRED_FOR_UPDATE: 'Id is required for update.',\n    ID_REQUIRED_FOR_DELETE: 'Id is required for deletion.',\n\n    // CRUD service errors\n    RELATION_TYPE_NOT_SUPPORTED: 'Relation type not supported in CRUD service.',\n    NO_SOFT_DELETED_RECORD_FOUND: 'No soft-deleted record found with the given ID.',\n    CONFLICTING_RECORD_ON_UNARCHIVE: 'Another record is conflicting with the record you are attempting to Un-Archive, either delete or change the other record so as to avoid this conflict.',\n    NO_SOFT_DELETED_RECORDS_FOUND: 'No matching soft-deleted records found.',\n    EMPTY_PATH_PARTS: 'Path parts cannot be empty',\n\n\n    // CSV/Excel service errors\n    MISSING_HEADERS_OR_FUNCTION: 'Either headers or data records function must be provided.',\n    INVALID_CHUNK_SIZE: 'Chunk size must be greater than 0 when data records function is provided.',\n    INVALID_FORMAT: (format: string) => `Invalid ${format} format`,\n\n\n    //field errors\n    INVALID_INVERSE_FIELD_TYPE: 'Only relation fields can have inverse fields.',\n    MODEL_AND_MODULE_REQUIRED_TO_UPDATE_INVERSE_FIELD: 'Model and module are required to update inverse field.',\n    MODEL_NAME_AND_MODULE_NAME_REQUIRED_TO_CREATE_INVERSE_FIELD: 'Model name and module name are required to create inverse field.',\n    FIELD_NOT_FOUND: (id: number | string) => `No field with id #${id} exists`,\n    PROVIDER_NOT_FOUND: (provider: string) => `Field incorrectly configured. No provider with name ${provider} registered in backend.`,\n    FILE_WRITE_FAILED: 'File creation failed, rolling back transaction',\n    FILE_DELETE_FAILED: 'File deletion failed, rolling back transaction',\n    // file service errors\n    FILE_NOT_FOUND: 'File not found',\n    FILE_COPY_ERROR: 'Error copying file',\n    S3_CLIENT_NOT_INITIALIZED: 'S3 Client not initialized. Please check the S3 configuration.',\n\n    // model errors\n    MODEL_METADATA_NOT_FOUND: (id: string | number) => `Model metadata with ID ${id} not found.`,\n    MODEL_SERVICE_NOT_FOUND: (model: string) => `Model service for ${model} not found.`,\n    RELATION_CO_MODEL_NOT_DEFINED_FOR_FIELD: (fieldName: string) => `Relation coModelSingularName is not defined for relation field ${fieldName}`,\n    MODEL_NOT_FOUND: (singularName?: string) => `Model${singularName ? ` with singular name \"${singularName}\"` : ''} not found.`,\n    MODEL_REQUIRED_FOR_CODE_GENERATION: 'Model ID or Model Name is required for generating code.',\n\n    //module errors\n    MODULE_NOT_FOUND: (moduleName: string) => `Module with name ${moduleName} not found.`,\n    MODULE_ID_NOT_FOUND: (id: string | number) => `Module with ID ${id} not found.`,\n\n    //entity errors\n    ENTITY_NOT_FOUND: (entity?: string | number) => `Entity${entity ? ' ' + entity : ''} not found.`,\n    ENTITY_NAME_REQUIRED: 'Entity name is required to find the entity.',\n    ENTITY_ID_REQUIRED: 'Entity ID is required to find the entity.',\n\n    // import errors\n    NO_ERROR_LOG_FOR_IMPORT: (id: string | number) => `No error log entries found for import transaction ID ${id}.`,\n    FILE_READ_FAILED_FROM_URL: (url: string) => `Failed to read file from URL: ${url}`,\n\n    // media storage provider errors\n    MEDIA_STORAGE_PROVIDER_ID_NOT_FOUND: (id: number | string) => `Media Storage Provider with #${id} not found.`,\n    MEDIA_STORAGE_PROVIDER_NOT_FOUND: 'Media Storage Provider not found',\n\n    // SQL errors\n    UNSUPPORTED_SQL_OPERATOR: (operator: string) => `Unsupported SQL operator: ${operator}`,\n\n    // AI interaction errors\n    PYTHON_EXECUTABLE_NOT_CONFIGURED: 'SolidX AI MCP python executable or client path not configured.',\n    UNABLE_TO_RESOLVE_SOLID_COMMAND: 'Unable to resolve a solid_ command that was used to come up with this response.',\n    UNABLE_TO_RESOLVE_MCP_HANDLER: 'Unable to resolve a mcp tool handler.',\n\n    DEFAULT_REGEX_PATTERN_NOT_MATCHING_ERROR_MSG: 'Invalid regex pattern.',\n\n    PERMISSION_MESSAGES: {\n    insertMany: (model?: string) =>\n      `You do not have permission to import ${model ?? 'these'} records.`,\n    } as Record<string, (model?: string) => string>,\n\n};"]}
+{"version":3,"file":"error-messages.js","sourceRoot":"","sources":["../../src/constants/error-messages.ts"],"names":[],"mappings":";;;AAEa,QAAA,cAAc,GAAG;IAE1B,cAAc,EAAE,sBAAsB;IACtC,eAAe,EAAE,gCAAgC;IACjD,aAAa,EAAE,mBAAmB;IAClC,eAAe,EAAE,sEAAsE;IACvF,kBAAkB,EAAE,0BAA0B;IAC9C,4BAA4B,EAAE,oCAAoC;IAClE,2BAA2B,EAAE,yCAAyC;IACtE,kCAAkC,EAAE,2CAA2C;IAC/E,6BAA6B,EAAE,iEAAiE;IAChG,6BAA6B,EAAE,gDAAgD;IAC/E,8BAA8B,EAAE,kDAAkD;IAClF,mBAAmB,EAAE,sCAAsC;IAC3D,0BAA0B,EAAE,6CAA6C;IACzE,WAAW,EAAE,cAAc;IAC3B,WAAW,EAAE,kBAAkB;IAC/B,yBAAyB,EAAE,+CAA+C;IAC1E,kBAAkB,EAAE,8DAA8D;IAClF,gBAAgB,EAAE,yBAAyB;IAC3C,iBAAiB,EAAE,+BAA+B;IAClD,0BAA0B,EAAE,uCAAuC;IACnE,eAAe,EAAE,0BAA0B;IAC3C,0BAA0B,EAAE,4BAA4B;IACxD,qBAAqB,EAAE,uBAAuB;IAC9C,aAAa,EAAE,eAAe;IAC9B,oBAAoB,EAAE,sBAAsB;IAC5C,iCAAiC,EAAE,wDAAwD;IAC3F,qDAAqD,EAAE,4EAA4E;IACnI,aAAa,EAAE,2CAA2C;IAE1D,mBAAmB,EAAE,qBAAqB;IAC1C,YAAY,EAAE,cAAc;IAC5B,sBAAsB,EAAE,+CAA+C;IACvE,oBAAoB,EAAE,uBAAuB;IAC7C,sBAAsB,EAAE,iCAAiC;IAGzD,uBAAuB,EAAE,yCAAyC;IAClE,mBAAmB,EAAE,2CAA2C;IAChE,eAAe,EAAE,4CAA4C;IAC7D,eAAe,EAAE,CAAC,KAAe,EAAE,EAAE,CAAC,uCAAuC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;IAC/F,0BAA0B,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,uBAAuB,QAAQ,cAAc;IAC/F,cAAc,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,SAAS,QAAQ,cAAc;IACrE,oBAAoB,EAAE,CAAC,UAAkB,EAAE,EAAE,CAAC,eAAe,UAAU,mBAAmB;IAG1F,eAAe,EAAE,uDAAuD;IACxE,eAAe,EAAE,gDAAgD;IAGjE,cAAc,EAAE,iEAAiE;IACjF,sBAAsB,EAAE,iEAAiE;IAGzF,SAAS,EAAE,WAAW;IAItB,eAAe,EAAE,sEAAsE;IAGvF,sBAAsB,EAAE,4BAA4B;IACpD,sBAAsB,EAAE,8BAA8B;IAGtD,2BAA2B,EAAE,8CAA8C;IAC3E,4BAA4B,EAAE,iDAAiD;IAC/E,+BAA+B,EAAE,wJAAwJ;IACzL,6BAA6B,EAAE,yCAAyC;IACxE,gBAAgB,EAAE,4BAA4B;IAI9C,2BAA2B,EAAE,2DAA2D;IACxF,kBAAkB,EAAE,2EAA2E;IAC/F,cAAc,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,WAAW,MAAM,SAAS;IAI9D,0BAA0B,EAAE,+CAA+C;IAC3E,iDAAiD,EAAE,wDAAwD;IAC3G,2DAA2D,EAAE,kEAAkE;IAC/H,eAAe,EAAE,CAAC,EAAmB,EAAE,EAAE,CAAC,qBAAqB,EAAE,SAAS;IAC1E,kBAAkB,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,uDAAuD,QAAQ,yBAAyB;IAClI,iBAAiB,EAAE,gDAAgD;IACnE,kBAAkB,EAAE,gDAAgD;IAEpE,cAAc,EAAE,gBAAgB;IAChC,eAAe,EAAE,oBAAoB;IACrC,yBAAyB,EAAE,+DAA+D;IAG1F,wBAAwB,EAAE,CAAC,EAAmB,EAAE,EAAE,CAAC,0BAA0B,EAAE,aAAa;IAC5F,uBAAuB,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,qBAAqB,KAAK,aAAa;IACnF,uCAAuC,EAAE,CAAC,SAAiB,EAAE,EAAE,CAAC,kEAAkE,SAAS,EAAE;IAC7I,eAAe,EAAE,CAAC,YAAqB,EAAE,EAAE,CAAC,QAAQ,YAAY,CAAC,CAAC,CAAC,wBAAwB,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,aAAa;IAC5H,kCAAkC,EAAE,yDAAyD;IAG7F,gBAAgB,EAAE,CAAC,UAAkB,EAAE,EAAE,CAAC,oBAAoB,UAAU,aAAa;IACrF,mBAAmB,EAAE,CAAC,EAAmB,EAAE,EAAE,CAAC,kBAAkB,EAAE,aAAa;IAG/E,gBAAgB,EAAE,CAAC,MAAwB,EAAE,EAAE,CAAC,SAAS,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa;IAChG,oBAAoB,EAAE,6CAA6C;IACnE,kBAAkB,EAAE,2CAA2C;IAG/D,uBAAuB,EAAE,CAAC,EAAmB,EAAE,EAAE,CAAC,wDAAwD,EAAE,GAAG;IAC/G,yBAAyB,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,iCAAiC,GAAG,EAAE;IAGlF,mCAAmC,EAAE,CAAC,EAAmB,EAAE,EAAE,CAAC,gCAAgC,EAAE,aAAa;IAC7G,gCAAgC,EAAE,kCAAkC;IAGpE,wBAAwB,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,6BAA6B,QAAQ,EAAE;IAGvF,gCAAgC,EAAE,gEAAgE;IAClG,+BAA+B,EAAE,iFAAiF;IAClH,6BAA6B,EAAE,uCAAuC;IAEtE,4CAA4C,EAAE,wBAAwB;IAEtE,mBAAmB,EAAE;QACrB,UAAU,EAAE,CAAC,KAAc,EAAE,EAAE,CAC7B,wCAAwC,KAAK,IAAI,OAAO,WAAW;KACtB;CAElD,CAAC","sourcesContent":["// backend/common/constants/error-messages.ts\n\nexport const ERROR_MESSAGES = {\n    //authentication errors\n    USER_NOT_FOUND: 'User does not exist.',\n    USER_NOT_ACTIVE: 'User profile is not activated.',\n    USER_INACTIVE: 'User is inactive.',\n    ACCOUNT_BLOCKED: 'Your account has been blocked due to multiple failed login attempts.',\n    PASSWORD_INCORRECT: 'Password does not match.',\n    PUBLIC_REGISTRATION_DISABLED: 'Public registrations are disabled.',\n    UNIQUE_CONSTRAINT_VIOLATION: 'A unique constraint violation occurred.',\n    PASSWORDLESS_REGISTRATION_DISABLED: 'Passwordless registration is not enabled.',\n    REGISTRATION_REQUIRES_CONTACT: 'Either mobile or email is required for initiating registration.',\n    EMAIL_REQUIRED_FOR_VALIDATION: 'Email is required for email validation source.',\n    MOBILE_REQUIRED_FOR_VALIDATION: 'Mobile is required for mobile validation source.',\n    USER_ALREADY_EXISTS: 'User already exists. Please sign in.',\n    VALIDATION_SOURCE_REQUIRED: 'At least one validation source is required.',\n    INVALID_OTP: 'Invalid OTP.',\n    OTP_EXPIRED: 'OTP has expired.',\n    INVALID_VERIFICATION_TYPE: 'Invalid type. Must be either email or mobile.',\n    NON_LOCAL_PROVIDER: 'User seems to have used a passwordless mode to authenticate.',\n    USER_ID_MISMATCH: \"User ID's do not match.\",\n    USERNAME_MISMATCH: \"User username's do not match.\",\n    INCORRECT_CURRENT_PASSWORD: 'Incorrect current password specified.',\n    PASSWORD_REUSED: 'Try a different password',\n    INVALID_VERIFICATION_TOKEN: 'Invalid verification token',\n    INVALID_REFRESH_TOKEN: 'Invalid refresh token',\n    ACCESS_DENIED: 'Access denied',\n    INVALID_USER_PROFILE: 'Invalid user profile',\n    GOOGLE_OAUTH_PROFILE_FETCH_FAILED: 'Failed to fetch user profile from Google OAuth service',\n    MICROSOFT_ACTIVE_DIRECTORY_OAUTH_PROFILE_FETCH_FAILED: 'Failed to fetch user profile from Microsoft Active Directory OAuth service',\n    LOGOUT_FAILED: 'Logout failed due to an unexpected error.',\n\n    INVALID_CREDENTIALS: 'Invalid credentials',\n    LOGIN_FAILED: 'Login Failed',\n    OLD_PASSWORD_INCORRECT: 'You have specified an incorrect old password.',\n    INVALID_NEW_PASSWORD: 'Invalid new password.',\n    PASSWORDS_DO_NOT_MATCH: 'New passwords are not matching.',\n\n    // user management errors\n    DELETE_SELF_NOT_ALLOWED: 'Deleting logged-in user is not allowed.',\n    DELETE_IDS_REQUIRED: 'At least one ID is required for deletion.',\n    USER_MISSING_ID: 'User must exist before initializing roles.',\n    ROLES_NOT_FOUND: (roles: string[]) => `The following roles were not found: ${roles.join(', ')}`,\n    USER_NOT_FOUND_BY_USERNAME: (username: string) => `User with username '${username}' not found.`,\n    ROLE_NOT_FOUND: (roleName: string) => `Role '${roleName}' not found.`,\n    PERMISSION_NOT_EXIST: (permission: string) => `Permission '${permission}' does not exist.`,\n\n    // session errors\n    SESSION_INVALID: 'Your session is no longer valid. Please log in again.',\n    SESSION_EXPIRED: 'Your session has expired. Please log in again.',\n\n    // filter errors\n    GROUP_BY_LIMIT: 'buildFilterQuery: Only 1 Group by field is supported currently.',\n    INVALID_GROUP_BY_COUNT: 'Exactly one groupBy field is required to count grouped records.',\n\n    // general errors\n    FORBIDDEN: 'Forbidden',\n\n\n    // database errors\n    DUPLICATE_ENTRY: 'Duplicate entry. A record with similar unique fields already exists.',\n\n    // validation errors\n    ID_REQUIRED_FOR_UPDATE: 'Id is required for update.',\n    ID_REQUIRED_FOR_DELETE: 'Id is required for deletion.',\n\n    // CRUD service errors\n    RELATION_TYPE_NOT_SUPPORTED: 'Relation type not supported in CRUD service.',\n    NO_SOFT_DELETED_RECORD_FOUND: 'No soft-deleted record found with the given ID.',\n    CONFLICTING_RECORD_ON_UNARCHIVE: 'Another record is conflicting with the record you are attempting to Un-Archive, either delete or change the other record so as to avoid this conflict.',\n    NO_SOFT_DELETED_RECORDS_FOUND: 'No matching soft-deleted records found.',\n    EMPTY_PATH_PARTS: 'Path parts cannot be empty',\n\n\n    // CSV/Excel service errors\n    MISSING_HEADERS_OR_FUNCTION: 'Either headers or data records function must be provided.',\n    INVALID_CHUNK_SIZE: 'Chunk size must be greater than 0 when data records function is provided.',\n    INVALID_FORMAT: (format: string) => `Invalid ${format} format`,\n\n\n    //field errors\n    INVALID_INVERSE_FIELD_TYPE: 'Only relation fields can have inverse fields.',\n    MODEL_AND_MODULE_REQUIRED_TO_UPDATE_INVERSE_FIELD: 'Model and module are required to update inverse field.',\n    MODEL_NAME_AND_MODULE_NAME_REQUIRED_TO_CREATE_INVERSE_FIELD: 'Model name and module name are required to create inverse field.',\n    FIELD_NOT_FOUND: (id: number | string) => `No field with id #${id} exists`,\n    PROVIDER_NOT_FOUND: (provider: string) => `Field incorrectly configured. No provider with name ${provider} registered in backend.`,\n    FILE_WRITE_FAILED: 'File creation failed, rolling back transaction',\n    FILE_DELETE_FAILED: 'File deletion failed, rolling back transaction',\n    // file service errors\n    FILE_NOT_FOUND: 'File not found',\n    FILE_COPY_ERROR: 'Error copying file',\n    S3_CLIENT_NOT_INITIALIZED: 'S3 Client not initialized. Please check the S3 configuration.',\n\n    // model errors\n    MODEL_METADATA_NOT_FOUND: (id: string | number) => `Model metadata with ID ${id} not found.`,\n    MODEL_SERVICE_NOT_FOUND: (model: string) => `Model service for ${model} not found.`,\n    RELATION_CO_MODEL_NOT_DEFINED_FOR_FIELD: (fieldName: string) => `Relation coModelSingularName is not defined for relation field ${fieldName}`,\n    MODEL_NOT_FOUND: (singularName?: string) => `Model${singularName ? ` with singular name \"${singularName}\"` : ''} not found.`,\n    MODEL_REQUIRED_FOR_CODE_GENERATION: 'Model ID or Model Name is required for generating code.',\n\n    //module errors\n    MODULE_NOT_FOUND: (moduleName: string) => `Module with name ${moduleName} not found.`,\n    MODULE_ID_NOT_FOUND: (id: string | number) => `Module with ID ${id} not found.`,\n\n    //entity errors\n    ENTITY_NOT_FOUND: (entity?: string | number) => `Entity${entity ? ' ' + entity : ''} not found.`,\n    ENTITY_NAME_REQUIRED: 'Entity name is required to find the entity.',\n    ENTITY_ID_REQUIRED: 'Entity ID is required to find the entity.',\n\n    // import errors\n    NO_ERROR_LOG_FOR_IMPORT: (id: string | number) => `No error log entries found for import transaction ID ${id}.`,\n    FILE_READ_FAILED_FROM_URL: (url: string) => `Failed to read file from URL: ${url}`,\n\n    // media storage provider errors\n    MEDIA_STORAGE_PROVIDER_ID_NOT_FOUND: (id: number | string) => `Media Storage Provider with #${id} not found.`,\n    MEDIA_STORAGE_PROVIDER_NOT_FOUND: 'Media Storage Provider not found',\n\n    // SQL errors\n    UNSUPPORTED_SQL_OPERATOR: (operator: string) => `Unsupported SQL operator: ${operator}`,\n\n    // AI interaction errors\n    PYTHON_EXECUTABLE_NOT_CONFIGURED: 'SolidX AI MCP python executable or client path not configured.',\n    UNABLE_TO_RESOLVE_SOLID_COMMAND: 'Unable to resolve a solid_ command that was used to come up with this response.',\n    UNABLE_TO_RESOLVE_MCP_HANDLER: 'Unable to resolve a mcp tool handler.',\n\n    DEFAULT_REGEX_PATTERN_NOT_MATCHING_ERROR_MSG: 'Invalid regex pattern.',\n\n    PERMISSION_MESSAGES: {\n    insertMany: (model?: string) =>\n      `You do not have permission to import ${model ?? 'these'} records.`,\n    } as Record<string, (model?: string) => string>,\n\n};\n"]}