@solidxai/core 0.1.13-beta.2 → 0.1.13-beta.21

package/dist/helpers/field-crud-managers/MediaFieldCrudManager.d.ts

@@ -9,6 +9,7 @@ export interface MediaFieldOptions {
     fieldName: string | undefined | null;
     mediaMaxSizeKb: number | undefined | null;
     mediaTypes: string[];
+    mediaAllowedExtensions?: string[] | null;
     isUpdate: boolean | undefined | null;
 }
 export declare class MediaFieldCrudManager implements FieldCrudManager {
@@ -17,6 +18,12 @@ export declare class MediaFieldCrudManager implements FieldCrudManager {
     private resolveMediaType;
     validate(dto: any, files: Array<Express.Multer.File>): ValidationError[];
     private applyValidations;
+    private validateDangerousFiles;
+    private validateCommon;
+    private validateRequired;
+    private validateSize;
+    private validateTypes;
+    private validateAllowedExtensions;
     private validateMediaSingle;
     private validateMediaMultiple;
     transformForCreate(dto: any): any;

package/dist/helpers/field-crud-managers/MediaFieldCrudManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MediaFieldCrudManager.d.ts","sourceRoot":"","sources":["../../../src/helpers/field-crud-managers/MediaFieldCrudManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGnE,oBAAY,cAAc;IACtB,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;CAClC;AAED,MAAM,WAAW,iBAAiB;IAC9B,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC;IACrC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC;IACrC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC;IAC1C,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC;CACxC;AA6DD,qBAAa,qBAAsB,YAAW,gBAAgB;IAE9C,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,iBAAiB;IAGvD,OAAO,CAAC,gBAAgB;IA4BxB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,EAAE;IAKxE,OAAO,CAAC,gBAAgB;IAWxB,OAAO,CAAC,mBAAmB;IAiD3B,OAAO,CAAC,qBAAqB;IAW7B,kBAAkB,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG;CAKpC"}
+{"version":3,"file":"MediaFieldCrudManager.d.ts","sourceRoot":"","sources":["../../../src/helpers/field-crud-managers/MediaFieldCrudManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGnE,oBAAY,cAAc;IACtB,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;CAClC;AAED,MAAM,WAAW,iBAAiB;IAC9B,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC;IACrC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC;IACrC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC;IAC1C,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,sBAAsB,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACzC,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC;CACxC;AA6DD,qBAAa,qBAAsB,YAAW,gBAAgB;IAE9C,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,iBAAiB;IAGvD,OAAO,CAAC,gBAAgB;IA+BxB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,EAAE;IAKxE,OAAO,CAAC,gBAAgB;IAexB,OAAO,CAAC,sBAAsB;IAY9B,OAAO,CAAC,cAAc;IAStB,OAAO,CAAC,gBAAgB;IAWxB,OAAO,CAAC,YAAY;IAiBpB,OAAO,CAAC,aAAa;IAsBrB,OAAO,CAAC,yBAAyB;IAmBjC,OAAO,CAAC,mBAAmB;IAW3B,OAAO,CAAC,qBAAqB;IAI7B,kBAAkB,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG;CAKpC"}

package/dist/helpers/field-crud-managers/MediaFieldCrudManager.js

@@ -56,44 +56,56 @@ class MediaFieldCrudManager {
     constructor(options) {
         this.options = options;
     }
-    resolveMediaType(mimetype, filename) {
-        const ext = (filename || '').split('.').pop()?.toLowerCase();
-        if (ext && media_file_types_1.DANGEROUS_EXTENSIONS.has(ext)) {
+    resolveMediaType(file) {
+        if ((0, media_file_types_1.isDangerousMediaFile)(file)) {
             return null;
         }
-        const mt = (mimetype || '').toLowerCase().trim();
-        if (mt === 'image/svg+xml' || mt === 'text/html' || mt === 'application/xhtml+xml') {
+        const ext = (0, media_file_types_1.getLowercaseFileExtension)((0, media_file_types_1.getUploadedFileName)(file));
+        const extType = ext ? media_file_types_1.EXT_TO_MEDIA_TYPE[ext] : undefined;
+        if (!extType) {
             return null;
         }
-        if (mt && MIME_TO_MEDIA_TYPE[mt]) {
-            return MIME_TO_MEDIA_TYPE[mt];
-        }
-        if (mt.startsWith('image/'))
-            return 'image';
-        if (mt.startsWith('audio/'))
-            return 'audio';
-        if (mt.startsWith('video/'))
-            return 'video';
-        if (ext && media_file_types_1.EXT_TO_MEDIA_TYPE[ext]) {
-            return media_file_types_1.EXT_TO_MEDIA_TYPE[ext];
+        const mt = (file.mimetype || '').toLowerCase().trim();
+        const mimeType = MIME_TO_MEDIA_TYPE[mt]
+            ?? (mt.startsWith('image/') ? 'image' : mt.startsWith('audio/') ? 'audio' : mt.startsWith('video/') ? 'video' : undefined);
+        if (mimeType && mimeType !== extType) {
+            return null;
         }
-        return null;
+        return extType;
     }
     validate(dto, files) {
         const fieldFiles = files.filter(file => file.fieldname === this.options.fieldName);
         return this.applyValidations(fieldFiles);
     }
     applyValidations(fieldFiles) {
+        const dangerousFileErrors = this.validateDangerousFiles(fieldFiles);
         switch (this.options.type) {
             case SolidMediaType.mediaSingle:
-                return this.validateMediaSingle(fieldFiles);
+                return [...dangerousFileErrors, ...this.validateMediaSingle(fieldFiles)];
             case SolidMediaType.mediaMultiple:
-                return this.validateMediaMultiple(fieldFiles);
+                return [...dangerousFileErrors, ...this.validateMediaMultiple(fieldFiles)];
             default:
-                return [];
+                return dangerousFileErrors;
         }
     }
-    validateMediaSingle(fieldFiles) {
+    validateDangerousFiles(fieldFiles) {
+        return fieldFiles
+            .filter(fieldFile => (0, media_file_types_1.isDangerousMediaFile)(fieldFile))
+            .map(fieldFile => ({
+            field: this.options.fieldName,
+            error: `${this.options.fieldName} file type not allowed. ` +
+                `${(0, media_file_types_1.getUploadedFileName)(fieldFile) || 'File'} is a potentially dangerous file type.`
+        }));
+    }
+    validateCommon(fieldFiles) {
+        return [
+            ...this.validateRequired(fieldFiles),
+            ...this.validateSize(fieldFiles),
+            ...this.validateTypes(fieldFiles),
+            ...this.validateAllowedExtensions(fieldFiles),
+        ];
+    }
+    validateRequired(fieldFiles) {
         const errors = [];
         if (!this.options.isUpdate && this.options.required && fieldFiles.length === 0) {
             errors.push({
@@ -101,12 +113,10 @@ class MediaFieldCrudManager {
                 error: `${this.options.fieldName} is required`
             });
         }
-        if (fieldFiles.length > 1) {
-            errors.push({
-                field: this.options.fieldName,
-                error: `${this.options.fieldName} must be a single file`
-            });
-        }
+        return errors;
+    }
+    validateSize(fieldFiles) {
+        const errors = [];
         if (this.options.mediaMaxSizeKb) {
             for (let i = 0; i < fieldFiles.length; i++) {
                 const fieldFile = fieldFiles[i];
@@ -119,11 +129,15 @@ class MediaFieldCrudManager {
                 }
             }
         }
+        return errors;
+    }
+    validateTypes(fieldFiles) {
+        const errors = [];
         if (this.options.mediaTypes && this.options.mediaTypes.length > 0) {
             const allowedFileTypes = this.options.mediaTypes;
             for (let i = 0; i < fieldFiles.length; i++) {
                 const fieldFile = fieldFiles[i];
-                const resolvedType = this.resolveMediaType(fieldFile.mimetype, fieldFile.originalname ?? fieldFile.filename ?? '');
+                const resolvedType = this.resolveMediaType(fieldFile);
                 if (!resolvedType || !allowedFileTypes.includes(resolvedType)) {
                     errors.push({
                         field: this.options.fieldName,
@@ -136,16 +150,36 @@ class MediaFieldCrudManager {
         }
         return errors;
     }
-    validateMediaMultiple(fieldFiles) {
-        const errors = [];
-        if (!this.options.isUpdate && this.options.required && fieldFiles.length === 0) {
+    validateAllowedExtensions(fieldFiles) {
+        const allowed = this.options.mediaAllowedExtensions;
+        if (!allowed || allowed.length === 0) {
+            return [];
+        }
+        const normalizedAllowed = new Set(allowed.map(ext => ext.toLowerCase().replace(/^\./, '')));
+        return fieldFiles
+            .filter(fieldFile => {
+            const ext = (0, media_file_types_1.getLowercaseFileExtension)((0, media_file_types_1.getUploadedFileName)(fieldFile));
+            return !ext || !normalizedAllowed.has(ext);
+        })
+            .map(fieldFile => ({
+            field: this.options.fieldName,
+            error: `${this.options.fieldName} file type not allowed. ` +
+                `Allowed extensions: ${[...normalizedAllowed].join(', ')}.`
+        }));
+    }
+    validateMediaSingle(fieldFiles) {
+        const errors = this.validateCommon(fieldFiles);
+        if (fieldFiles.length > 1) {
             errors.push({
                 field: this.options.fieldName,
-                error: `${this.options.fieldName} is required`
+                error: `${this.options.fieldName} must be a single file`
             });
         }
         return errors;
     }
+    validateMediaMultiple(fieldFiles) {
+        return this.validateCommon(fieldFiles);
+    }
     transformForCreate(dto) {
         return dto;
     }

package/dist/helpers/field-crud-managers/MediaFieldCrudManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"MediaFieldCrudManager.js","sourceRoot":"","sources":["../../../src/helpers/field-crud-managers/MediaFieldCrudManager.ts"],"names":[],"mappings":";;;AACA,uEAAwG;AAExG,IAAY,cAGX;AAHD,WAAY,cAAc;IACtB,6CAA2B,CAAA;IAC3B,iDAA+B,CAAA;AACnC,CAAC,EAHW,cAAc,8BAAd,cAAc,QAGzB;AAaD,MAAM,kBAAkB,GAA8B;IAElD,WAAW,EAAE,OAAO;IACpB,YAAY,EAAE,OAAO;IACrB,WAAW,EAAE,OAAO;IACpB,YAAY,EAAE,OAAO;IACrB,WAAW,EAAE,OAAO;IACpB,WAAW,EAAE,OAAO;IACpB,YAAY,EAAE,OAAO;IACrB,YAAY,EAAE,OAAO;IACrB,YAAY,EAAE,OAAO;IAGrB,YAAY,EAAE,OAAO;IACrB,WAAW,EAAE,OAAO;IACpB,WAAW,EAAE,OAAO;IACpB,aAAa,EAAE,OAAO;IACtB,YAAY,EAAE,OAAO;IACrB,WAAW,EAAE,OAAO;IACpB,WAAW,EAAE,OAAO;IACpB,WAAW,EAAE,OAAO;IACpB,aAAa,EAAE,OAAO;IACtB,YAAY,EAAE,OAAO;IAGrB,WAAW,EAAE,OAAO;IACpB,YAAY,EAAE,OAAO;IACrB,YAAY,EAAE,OAAO;IACrB,WAAW,EAAE,OAAO;IACpB,iBAAiB,EAAE,OAAO;IAC1B,iBAAiB,EAAE,OAAO;IAC1B,kBAAkB,EAAE,OAAO;IAC3B,YAAY,EAAE,OAAO;IACrB,aAAa,EAAE,OAAO;IAGtB,iBAAiB,EAAE,KAAK;IACxB,YAAY,EAAE,MAAM;IACpB,eAAe,EAAE,MAAM;IACvB,kBAAkB,EAAE,MAAM;IAC1B,UAAU,EAAE,MAAM;IAGlB,oBAAoB,EAAE,MAAM;IAC5B,yEAAyE,EAAE,MAAM;IACjF,0BAA0B,EAAE,MAAM;IAClC,mEAAmE,EAAE,MAAM;IAC3E,+BAA+B,EAAE,MAAM;IACvC,2EAA2E,EAAE,MAAM;IAGnF,iBAAiB,EAAE,MAAM;IACzB,8BAA8B,EAAE,MAAM;IACtC,8BAA8B,EAAE,MAAM;IACtC,6BAA6B,EAAE,MAAM;CACxC,CAAC;AAEF,MAAa,qBAAqB;IAE9B,YAA6B,OAA0B;QAA1B,YAAO,GAAP,OAAO,CAAmB;IACvD,CAAC;IAEO,gBAAgB,CAAC,QAAiB,EAAE,QAAiB;QACzD,MAAM,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC;QAC7D,IAAI,GAAG,IAAI,uCAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QACjD,IAAI,EAAE,KAAK,eAAe,IAAI,EAAE,KAAK,WAAW,IAAI,EAAE,KAAK,uBAAuB,EAAE,CAAC;YACjF,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,EAAE,IAAI,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/B,OAAO,kBAAkB,CAAC,EAAE,CAAC,CAAC;QAClC,CAAC;QAGD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,OAAO,CAAC;QAC5C,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,OAAO,CAAC;QAC5C,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,OAAO,CAAC;QAI5C,IAAI,GAAG,IAAI,oCAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,oCAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,QAAQ,CAAC,GAAQ,EAAE,KAAiC;QAChD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC;IAEO,gBAAgB,CAAC,UAAsC;QAC3D,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACxB,KAAK,cAAc,CAAC,WAAW;gBAC3B,OAAO,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;YAChD,KAAK,cAAc,CAAC,aAAa;gBAC7B,OAAO,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;YAClD;gBACI,OAAO,EAAE,CAAC;QAClB,CAAC;IACL,CAAC;IAEO,mBAAmB,CAAC,UAAsC;QAC9D,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7E,MAAM,CAAC,IAAI,CAAC;gBACR,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBAC7B,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,cAAc;aACjD,CAAC,CAAC;QACP,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC;gBACR,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBAC7B,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,wBAAwB;aAC3D,CAAC,CAAC;QACP,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;gBAChC,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;gBAC9D,IAAI,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;oBACrD,MAAM,CAAC,IAAI,CAAC;wBACR,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;wBAC7B,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,cAAc,oBAAoB,iCAAiC,IAAI,CAAC,OAAO,CAAC,cAAc,KAAK;qBACtI,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,UAAyB,CAAC;YAEhE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;gBAEhC,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,YAAY,IAAI,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;gBACnH,IAAI,CAAC,YAAY,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC5D,MAAM,CAAC,IAAI,CAAC;wBACR,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;wBAC7B,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,0BAA0B;4BACtD,YAAY,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;4BAC3C,sBAAsB,SAAS,CAAC,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,eAAe,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;qBACtG,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAEO,qBAAqB,CAAC,UAAsC;QAChE,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7E,MAAM,CAAC,IAAI,CAAC;gBACR,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBAC7B,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,cAAc;aACjD,CAAC,CAAC;QACP,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,kBAAkB,CAAC,GAAQ;QACvB,OAAO,GAAG,CAAC;IACf,CAAC;CAGJ;AAlHD,sDAkHC","sourcesContent":["import { FieldCrudManager, ValidationError } from \"src/interfaces\";\nimport { DANGEROUS_EXTENSIONS, EXT_TO_MEDIA_TYPE, MediaCategory } from \"src/constants/media-file-types\";\n\nexport enum SolidMediaType {\n    mediaSingle = 'mediaSingle',\n    mediaMultiple = 'mediaMultiple'\n}\n\nexport interface MediaFieldOptions {\n    type: SolidMediaType;\n    required: boolean | undefined | null;\n    fieldName: string | undefined | null;\n    mediaMaxSizeKb: number | undefined | null;\n    mediaTypes: string[];\n    isUpdate: boolean | undefined | null;\n}\n\ntype MediaType = MediaCategory;\n\nconst MIME_TO_MEDIA_TYPE: Record<string, MediaType> = {\n    // Images\n    'image/png': 'image',\n    'image/jpeg': 'image',\n    'image/jpg': 'image',\n    'image/webp': 'image',\n    'image/gif': 'image',\n    'image/bmp': 'image',\n    'image/tiff': 'image',\n    'image/heic': 'image',\n    'image/heif': 'image',\n\n    // Audio\n    'audio/mpeg': 'audio',      // mp3\n    'audio/mp3': 'audio',\n    'audio/wav': 'audio',\n    'audio/x-wav': 'audio',\n    'audio/webm': 'audio',\n    'audio/ogg': 'audio',\n    'audio/aac': 'audio',\n    'audio/mp4': 'audio',       // m4a often shows as audio/mp4\n    'audio/x-m4a': 'audio',\n    'audio/flac': 'audio',\n\n    // Video\n    'video/mp4': 'video',\n    'video/mpeg': 'video',\n    'video/webm': 'video',\n    'video/ogg': 'video',\n    'video/quicktime': 'video', // mov\n    'video/x-msvideo': 'video', // avi\n    'video/x-matroska': 'video',// mkv\n    'video/3gpp': 'video',\n    'video/3gpp2': 'video',\n\n    // Documents / files (treat as \"file\")\n    'application/pdf': 'pdf',\n    'text/plain': 'file',\n    'text/markdown': 'file',\n    'application/json': 'file',\n    'text/csv': 'file',\n\n    // Office\n    'application/msword': 'file', // doc\n    'application/vnd.openxmlformats-officedocument.wordprocessingml.document': 'file', // docx\n    'application/vnd.ms-excel': 'file', // xls\n    'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet': 'file', // xlsx\n    'application/vnd.ms-powerpoint': 'file', // ppt\n    'application/vnd.openxmlformats-officedocument.presentationml.presentation': 'file', // pptx,\n\n    // Archives (optional)\n    'application/zip': 'file',\n    'application/x-zip-compressed': 'file',\n    'application/x-rar-compressed': 'file',\n    'application/x-7z-compressed': 'file',\n};\n\nexport class MediaFieldCrudManager implements FieldCrudManager {\n\n    constructor(private readonly options: MediaFieldOptions) {\n    }\n\n    private resolveMediaType(mimetype?: string, filename?: string): MediaType | null {\n        const ext = (filename || '').split('.').pop()?.toLowerCase();\n        if (ext && DANGEROUS_EXTENSIONS.has(ext)) {\n            return null;\n        }\n\n        const mt = (mimetype || '').toLowerCase().trim();\n        if (mt === 'image/svg+xml' || mt === 'text/html' || mt === 'application/xhtml+xml') {\n            return null;\n        }\n        if (mt && MIME_TO_MEDIA_TYPE[mt]) {\n            return MIME_TO_MEDIA_TYPE[mt];\n        }\n\n        // Some libs may send \"image/*\" etc. Treat broad families safely.\n        if (mt.startsWith('image/')) return 'image';\n        if (mt.startsWith('audio/')) return 'audio';\n        if (mt.startsWith('video/')) return 'video';\n\n        // Fallback to extension if provided (also covers generic/unrecognized\n        // mimetypes such as application/octet-stream).\n        if (ext && EXT_TO_MEDIA_TYPE[ext]) {\n            return EXT_TO_MEDIA_TYPE[ext];\n        }\n\n        return null;\n    }\n\n    validate(dto: any, files: Array<Express.Multer.File>): ValidationError[] {\n        const fieldFiles = files.filter(file => file.fieldname === this.options.fieldName);\n        return this.applyValidations(fieldFiles);\n    }\n\n    private applyValidations(fieldFiles: Array<Express.Multer.File>): ValidationError[] {\n        switch (this.options.type) {\n            case SolidMediaType.mediaSingle:\n                return this.validateMediaSingle(fieldFiles);\n            case SolidMediaType.mediaMultiple:\n                return this.validateMediaMultiple(fieldFiles);\n            default:\n                return [];\n        }\n    }\n\n    private validateMediaSingle(fieldFiles: Array<Express.Multer.File>): ValidationError[] {\n        const errors: ValidationError[] = [];\n        if (!this.options.isUpdate && this.options.required && fieldFiles.length === 0) {\n            errors.push({\n                field: this.options.fieldName,\n                error: `${this.options.fieldName} is required`\n            });\n        }\n        if (fieldFiles.length > 1) {\n            errors.push({\n                field: this.options.fieldName,\n                error: `${this.options.fieldName} must be a single file`\n            });\n        }\n        // validate size\n        if (this.options.mediaMaxSizeKb) {\n            for (let i = 0; i < fieldFiles.length; i++) {\n                const fieldFile = fieldFiles[i];\n                const fieldFileSizeInBytes = Math.ceil(fieldFile.size / 1024);\n                if (fieldFileSizeInBytes > this.options.mediaMaxSizeKb) {\n                    errors.push({\n                        field: this.options.fieldName,\n                        error: `${this.options.fieldName} with size ${fieldFileSizeInBytes} KB exceeds max size limit of ${this.options.mediaMaxSizeKb} KB`\n                    });\n                }\n            }\n        }\n        // validate type\n        if (this.options.mediaTypes && this.options.mediaTypes.length > 0) {\n            const allowedFileTypes = this.options.mediaTypes as MediaType[];\n\n            for (let i = 0; i < fieldFiles.length; i++) {\n                const fieldFile = fieldFiles[i];\n\n                const resolvedType = this.resolveMediaType(fieldFile.mimetype, fieldFile.originalname ?? fieldFile.filename ?? '');\n                if (!resolvedType || !allowedFileTypes.includes(resolvedType)) {\n                    errors.push({\n                        field: this.options.fieldName,\n                        error: `${this.options.fieldName} file type not allowed. ` +\n                            `Allowed: ${allowedFileTypes.join(', ')}. ` +\n                            `Received mimetype: ${fieldFile.mimetype}${resolvedType ? ` (mapped to ${resolvedType})` : ''}`\n                    });\n                }\n            }\n        }\n\n        return errors;\n    }\n\n    private validateMediaMultiple(fieldFiles: Array<Express.Multer.File>): ValidationError[] {\n        const errors: ValidationError[] = [];\n        if (!this.options.isUpdate && this.options.required && fieldFiles.length === 0) {\n            errors.push({\n                field: this.options.fieldName,\n                error: `${this.options.fieldName} is required`\n            });\n        }\n        return errors;\n    }\n\n    transformForCreate(dto: any): any {\n        return dto;\n    }\n\n    // Validation to be applied\n}\n"]}
+{"version":3,"file":"MediaFieldCrudManager.js","sourceRoot":"","sources":["../../../src/helpers/field-crud-managers/MediaFieldCrudManager.ts"],"names":[],"mappings":";;;AACA,uEAAwJ;AAExJ,IAAY,cAGX;AAHD,WAAY,cAAc;IACtB,6CAA2B,CAAA;IAC3B,iDAA+B,CAAA;AACnC,CAAC,EAHW,cAAc,8BAAd,cAAc,QAGzB;AAcD,MAAM,kBAAkB,GAA8B;IAElD,WAAW,EAAE,OAAO;IACpB,YAAY,EAAE,OAAO;IACrB,WAAW,EAAE,OAAO;IACpB,YAAY,EAAE,OAAO;IACrB,WAAW,EAAE,OAAO;IACpB,WAAW,EAAE,OAAO;IACpB,YAAY,EAAE,OAAO;IACrB,YAAY,EAAE,OAAO;IACrB,YAAY,EAAE,OAAO;IAGrB,YAAY,EAAE,OAAO;IACrB,WAAW,EAAE,OAAO;IACpB,WAAW,EAAE,OAAO;IACpB,aAAa,EAAE,OAAO;IACtB,YAAY,EAAE,OAAO;IACrB,WAAW,EAAE,OAAO;IACpB,WAAW,EAAE,OAAO;IACpB,WAAW,EAAE,OAAO;IACpB,aAAa,EAAE,OAAO;IACtB,YAAY,EAAE,OAAO;IAGrB,WAAW,EAAE,OAAO;IACpB,YAAY,EAAE,OAAO;IACrB,YAAY,EAAE,OAAO;IACrB,WAAW,EAAE,OAAO;IACpB,iBAAiB,EAAE,OAAO;IAC1B,iBAAiB,EAAE,OAAO;IAC1B,kBAAkB,EAAE,OAAO;IAC3B,YAAY,EAAE,OAAO;IACrB,aAAa,EAAE,OAAO;IAGtB,iBAAiB,EAAE,KAAK;IACxB,YAAY,EAAE,MAAM;IACpB,eAAe,EAAE,MAAM;IACvB,kBAAkB,EAAE,MAAM;IAC1B,UAAU,EAAE,MAAM;IAGlB,oBAAoB,EAAE,MAAM;IAC5B,yEAAyE,EAAE,MAAM;IACjF,0BAA0B,EAAE,MAAM;IAClC,mEAAmE,EAAE,MAAM;IAC3E,+BAA+B,EAAE,MAAM;IACvC,2EAA2E,EAAE,MAAM;IAGnF,iBAAiB,EAAE,MAAM;IACzB,8BAA8B,EAAE,MAAM;IACtC,8BAA8B,EAAE,MAAM;IACtC,6BAA6B,EAAE,MAAM;CACxC,CAAC;AAEF,MAAa,qBAAqB;IAE9B,YAA6B,OAA0B;QAA1B,YAAO,GAAP,OAAO,CAAmB;IACvD,CAAC;IAEO,gBAAgB,CAAC,IAAyB;QAG9C,IAAI,IAAA,uCAAoB,EAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QAChB,CAAC;QAOD,MAAM,GAAG,GAAG,IAAA,4CAAyB,EAAC,IAAA,sCAAmB,EAAC,IAAI,CAAC,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,oCAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzD,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QAChB,CAAC;QAKD,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,EAAE,CAAC;eAChC,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/H,IAAI,QAAQ,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,QAAQ,CAAC,GAAQ,EAAE,KAAiC;QAChD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC;IAEO,gBAAgB,CAAC,UAAsC;QAG3D,MAAM,mBAAmB,GAAG,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;QAEpE,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACxB,KAAK,cAAc,CAAC,WAAW;gBAC3B,OAAO,CAAC,GAAG,mBAAmB,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC;YAC7E,KAAK,cAAc,CAAC,aAAa;gBAC7B,OAAO,CAAC,GAAG,mBAAmB,EAAE,GAAG,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC,CAAC;YAC/E;gBACI,OAAO,mBAAmB,CAAC;QACnC,CAAC;IACL,CAAC;IAEO,sBAAsB,CAAC,UAAsC;QACjE,OAAO,UAAU;aACZ,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAA,uCAAoB,EAAC,SAAS,CAAC,CAAC;aACpD,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YAC7B,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,0BAA0B;gBACtD,GAAG,IAAA,sCAAmB,EAAC,SAAS,CAAC,IAAI,MAAM,wCAAwC;SAC1F,CAAC,CAAC,CAAC;IACZ,CAAC;IAIO,cAAc,CAAC,UAAsC;QACzD,OAAO;YACH,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC;YACpC,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;YAChC,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;YACjC,GAAG,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC;SAChD,CAAC;IACN,CAAC;IAEO,gBAAgB,CAAC,UAAsC;QAC3D,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7E,MAAM,CAAC,IAAI,CAAC;gBACR,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBAC7B,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,cAAc;aACjD,CAAC,CAAC;QACP,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAEO,YAAY,CAAC,UAAsC;QACvD,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;gBAChC,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;gBAC9D,IAAI,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;oBACrD,MAAM,CAAC,IAAI,CAAC;wBACR,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;wBAC7B,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,cAAc,oBAAoB,iCAAiC,IAAI,CAAC,OAAO,CAAC,cAAc,KAAK;qBACtI,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAEO,aAAa,CAAC,UAAsC;QACxD,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,UAAyB,CAAC;YAEhE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;gBAEhC,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBACtD,IAAI,CAAC,YAAY,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC5D,MAAM,CAAC,IAAI,CAAC;wBACR,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;wBAC7B,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,0BAA0B;4BACtD,YAAY,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;4BAC3C,sBAAsB,SAAS,CAAC,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,eAAe,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;qBACtG,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAEO,yBAAyB,CAAC,UAAsC;QACpE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC;QACpD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5F,OAAO,UAAU;aACZ,MAAM,CAAC,SAAS,CAAC,EAAE;YAChB,MAAM,GAAG,GAAG,IAAA,4CAAyB,EAAC,IAAA,sCAAmB,EAAC,SAAS,CAAC,CAAC,CAAC;YACtE,OAAO,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/C,CAAC,CAAC;aACD,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YAC7B,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,0BAA0B;gBACtD,uBAAuB,CAAC,GAAG,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;SAClE,CAAC,CAAC,CAAC;IACZ,CAAC;IAEO,mBAAmB,CAAC,UAAsC;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC;gBACR,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBAC7B,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,wBAAwB;aAC3D,CAAC,CAAC;QACP,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAEO,qBAAqB,CAAC,UAAsC;QAChE,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,kBAAkB,CAAC,GAAQ;QACvB,OAAO,GAAG,CAAC;IACf,CAAC;CAGJ;AAtKD,sDAsKC","sourcesContent":["import { FieldCrudManager, ValidationError } from \"src/interfaces\";\nimport { EXT_TO_MEDIA_TYPE, getLowercaseFileExtension, getUploadedFileName, isDangerousMediaFile, MediaCategory } from \"src/constants/media-file-types\";\n\nexport enum SolidMediaType {\n    mediaSingle = 'mediaSingle',\n    mediaMultiple = 'mediaMultiple'\n}\n\nexport interface MediaFieldOptions {\n    type: SolidMediaType;\n    required: boolean | undefined | null;\n    fieldName: string | undefined | null;\n    mediaMaxSizeKb: number | undefined | null;\n    mediaTypes: string[];\n    mediaAllowedExtensions?: string[] | null;\n    isUpdate: boolean | undefined | null;\n}\n\ntype MediaType = MediaCategory;\n\nconst MIME_TO_MEDIA_TYPE: Record<string, MediaType> = {\n    // Images\n    'image/png': 'image',\n    'image/jpeg': 'image',\n    'image/jpg': 'image',\n    'image/webp': 'image',\n    'image/gif': 'image',\n    'image/bmp': 'image',\n    'image/tiff': 'image',\n    'image/heic': 'image',\n    'image/heif': 'image',\n\n    // Audio\n    'audio/mpeg': 'audio',      // mp3\n    'audio/mp3': 'audio',\n    'audio/wav': 'audio',\n    'audio/x-wav': 'audio',\n    'audio/webm': 'audio',\n    'audio/ogg': 'audio',\n    'audio/aac': 'audio',\n    'audio/mp4': 'audio',       // m4a often shows as audio/mp4\n    'audio/x-m4a': 'audio',\n    'audio/flac': 'audio',\n\n    // Video\n    'video/mp4': 'video',\n    'video/mpeg': 'video',\n    'video/webm': 'video',\n    'video/ogg': 'video',\n    'video/quicktime': 'video', // mov\n    'video/x-msvideo': 'video', // avi\n    'video/x-matroska': 'video',// mkv\n    'video/3gpp': 'video',\n    'video/3gpp2': 'video',\n\n    // Documents / files (treat as \"file\")\n    'application/pdf': 'pdf',\n    'text/plain': 'file',\n    'text/markdown': 'file',\n    'application/json': 'file',\n    'text/csv': 'file',\n\n    // Office\n    'application/msword': 'file', // doc\n    'application/vnd.openxmlformats-officedocument.wordprocessingml.document': 'file', // docx\n    'application/vnd.ms-excel': 'file', // xls\n    'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet': 'file', // xlsx\n    'application/vnd.ms-powerpoint': 'file', // ppt\n    'application/vnd.openxmlformats-officedocument.presentationml.presentation': 'file', // pptx,\n\n    // Archives (optional)\n    'application/zip': 'file',\n    'application/x-zip-compressed': 'file',\n    'application/x-rar-compressed': 'file',\n    'application/x-7z-compressed': 'file',\n};\n\nexport class MediaFieldCrudManager implements FieldCrudManager {\n\n    constructor(private readonly options: MediaFieldOptions) {\n    }\n\n    private resolveMediaType(file: Express.Multer.File): MediaType | null {\n        // Belt-and-braces: dangerous files are already rejected outright by\n        // validateDangerousFiles, but never let one resolve to a usable category.\n        if (isDangerousMediaFile(file)) {\n            return null;\n        }\n\n        // Extension is authoritative: a declared mimetype is fully attacker-controlled and\n        // proved insufficient on its own (a .msi uploaded as image/png previously resolved to\n        // 'image', since the mimetype match short-circuited before the extension was ever\n        // checked). The extension must independently resolve to a known-safe category before\n        // anything is accepted - not merely \"not on the denylist\".\n        const ext = getLowercaseFileExtension(getUploadedFileName(file));\n        const extType = ext ? EXT_TO_MEDIA_TYPE[ext] : undefined;\n        if (!extType) {\n            return null;\n        }\n\n        // The mimetype may only confirm or veto what the extension already established, never\n        // grant a category on its own. A mimetype that doesn't resolve to anything (e.g.\n        // application/octet-stream) has no opinion and is treated as agreeing.\n        const mt = (file.mimetype || '').toLowerCase().trim();\n        const mimeType = MIME_TO_MEDIA_TYPE[mt]\n            ?? (mt.startsWith('image/') ? 'image' : mt.startsWith('audio/') ? 'audio' : mt.startsWith('video/') ? 'video' : undefined);\n        if (mimeType && mimeType !== extType) {\n            return null;\n        }\n\n        return extType;\n    }\n\n    validate(dto: any, files: Array<Express.Multer.File>): ValidationError[] {\n        const fieldFiles = files.filter(file => file.fieldname === this.options.fieldName);\n        return this.applyValidations(fieldFiles);\n    }\n\n    private applyValidations(fieldFiles: Array<Express.Multer.File>): ValidationError[] {\n        // A dangerous upload is never acceptable, regardless of admin config, so this is the\n        // only check that sits outside validateCommon() and can't be skipped either way below.\n        const dangerousFileErrors = this.validateDangerousFiles(fieldFiles);\n\n        switch (this.options.type) {\n            case SolidMediaType.mediaSingle:\n                return [...dangerousFileErrors, ...this.validateMediaSingle(fieldFiles)];\n            case SolidMediaType.mediaMultiple:\n                return [...dangerousFileErrors, ...this.validateMediaMultiple(fieldFiles)];\n            default:\n                return dangerousFileErrors;\n        }\n    }\n\n    private validateDangerousFiles(fieldFiles: Array<Express.Multer.File>): ValidationError[] {\n        return fieldFiles\n            .filter(fieldFile => isDangerousMediaFile(fieldFile))\n            .map(fieldFile => ({\n                field: this.options.fieldName,\n                error: `${this.options.fieldName} file type not allowed. ` +\n                    `${getUploadedFileName(fieldFile) || 'File'} is a potentially dangerous file type.`\n            }));\n    }\n\n    // Every optional, admin-configured, per-field check - no-ops when its setting is unset -\n    // shared between mediaSingle and mediaMultiple so neither can drift out of sync with it.\n    private validateCommon(fieldFiles: Array<Express.Multer.File>): ValidationError[] {\n        return [\n            ...this.validateRequired(fieldFiles),\n            ...this.validateSize(fieldFiles),\n            ...this.validateTypes(fieldFiles),\n            ...this.validateAllowedExtensions(fieldFiles),\n        ];\n    }\n\n    private validateRequired(fieldFiles: Array<Express.Multer.File>): ValidationError[] {\n        const errors: ValidationError[] = [];\n        if (!this.options.isUpdate && this.options.required && fieldFiles.length === 0) {\n            errors.push({\n                field: this.options.fieldName,\n                error: `${this.options.fieldName} is required`\n            });\n        }\n        return errors;\n    }\n\n    private validateSize(fieldFiles: Array<Express.Multer.File>): ValidationError[] {\n        const errors: ValidationError[] = [];\n        if (this.options.mediaMaxSizeKb) {\n            for (let i = 0; i < fieldFiles.length; i++) {\n                const fieldFile = fieldFiles[i];\n                const fieldFileSizeInBytes = Math.ceil(fieldFile.size / 1024);\n                if (fieldFileSizeInBytes > this.options.mediaMaxSizeKb) {\n                    errors.push({\n                        field: this.options.fieldName,\n                        error: `${this.options.fieldName} with size ${fieldFileSizeInBytes} KB exceeds max size limit of ${this.options.mediaMaxSizeKb} KB`\n                    });\n                }\n            }\n        }\n        return errors;\n    }\n\n    private validateTypes(fieldFiles: Array<Express.Multer.File>): ValidationError[] {\n        const errors: ValidationError[] = [];\n        if (this.options.mediaTypes && this.options.mediaTypes.length > 0) {\n            const allowedFileTypes = this.options.mediaTypes as MediaType[];\n\n            for (let i = 0; i < fieldFiles.length; i++) {\n                const fieldFile = fieldFiles[i];\n\n                const resolvedType = this.resolveMediaType(fieldFile);\n                if (!resolvedType || !allowedFileTypes.includes(resolvedType)) {\n                    errors.push({\n                        field: this.options.fieldName,\n                        error: `${this.options.fieldName} file type not allowed. ` +\n                            `Allowed: ${allowedFileTypes.join(', ')}. ` +\n                            `Received mimetype: ${fieldFile.mimetype}${resolvedType ? ` (mapped to ${resolvedType})` : ''}`\n                    });\n                }\n            }\n        }\n        return errors;\n    }\n\n    private validateAllowedExtensions(fieldFiles: Array<Express.Multer.File>): ValidationError[] {\n        const allowed = this.options.mediaAllowedExtensions;\n        if (!allowed || allowed.length === 0) {\n            return [];\n        }\n\n        const normalizedAllowed = new Set(allowed.map(ext => ext.toLowerCase().replace(/^\\./, '')));\n        return fieldFiles\n            .filter(fieldFile => {\n                const ext = getLowercaseFileExtension(getUploadedFileName(fieldFile));\n                return !ext || !normalizedAllowed.has(ext);\n            })\n            .map(fieldFile => ({\n                field: this.options.fieldName,\n                error: `${this.options.fieldName} file type not allowed. ` +\n                    `Allowed extensions: ${[...normalizedAllowed].join(', ')}.`\n            }));\n    }\n\n    private validateMediaSingle(fieldFiles: Array<Express.Multer.File>): ValidationError[] {\n        const errors = this.validateCommon(fieldFiles);\n        if (fieldFiles.length > 1) {\n            errors.push({\n                field: this.options.fieldName,\n                error: `${this.options.fieldName} must be a single file`\n            });\n        }\n        return errors;\n    }\n\n    private validateMediaMultiple(fieldFiles: Array<Express.Multer.File>): ValidationError[] {\n        return this.validateCommon(fieldFiles);\n    }\n\n    transformForCreate(dto: any): any {\n        return dto;\n    }\n\n    // Validation to be applied\n}\n"]}

package/dist/helpers/file-download.helper.d.ts

@@ -0,0 +1,9 @@
+import type { Response } from "express";
+export interface FileDownloadHeaderOptions {
+    fileName: string;
+    mimeType: string;
+    disposition?: "inline" | "attachment";
+    crossOriginResourcePolicy?: boolean;
+}
+export declare function setFileDownloadHeaders(res: Response, options: FileDownloadHeaderOptions): void;
+//# sourceMappingURL=file-download.helper.d.ts.map

package/dist/helpers/file-download.helper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-download.helper.d.ts","sourceRoot":"","sources":["../../src/helpers/file-download.helper.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAExC,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IAEjB,WAAW,CAAC,EAAE,QAAQ,GAAG,YAAY,CAAC;IAEtC,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACrC;AAoBD,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,yBAAyB,GAAG,IAAI,CAe9F"}

package/dist/helpers/file-download.helper.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setFileDownloadHeaders = setFileDownloadHeaders;
+function buildContentDisposition(disposition, fileName) {
+    const name = (fileName || "file").replace(/[\r\n]/g, "");
+    const asciiFallback = name.replace(/[^\x20-\x7E]/g, "_").replace(/["\\]/g, "_") || "file";
+    return `${disposition}; filename="${asciiFallback}"; filename*=UTF-8''${encodeURIComponent(name)}`;
+}
+function setFileDownloadHeaders(res, options) {
+    const disposition = options.disposition ?? "attachment";
+    res.setHeader("Content-Disposition", buildContentDisposition(disposition, options.fileName));
+    res.setHeader("Content-Type", options.mimeType);
+    res.setHeader("Access-Control-Expose-Headers", "Content-Disposition, Content-Type");
+    res.setHeader("X-Content-Type-Options", "nosniff");
+    if (options.crossOriginResourcePolicy) {
+        res.setHeader("Cross-Origin-Resource-Policy", "cross-origin");
+    }
+}
+//# sourceMappingURL=file-download.helper.js.map

package/dist/helpers/file-download.helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-download.helper.js","sourceRoot":"","sources":["../../src/helpers/file-download.helper.ts"],"names":[],"mappings":";;AA6BA,wDAeC;AA1BD,SAAS,uBAAuB,CAAC,WAAoC,EAAE,QAAgB;IACrF,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC;IAE1F,OAAO,GAAG,WAAW,eAAe,aAAa,uBAAuB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AACrG,CAAC;AAMD,SAAgB,sBAAsB,CAAC,GAAa,EAAE,OAAkC;IACtF,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,YAAY,CAAC;IAExD,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7F,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChD,GAAG,CAAC,SAAS,CAAC,+BAA+B,EAAE,mCAAmC,CAAC,CAAC;IAKpF,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IAEnD,IAAI,OAAO,CAAC,yBAAyB,EAAE,CAAC;QACtC,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;IAChE,CAAC;AACH,CAAC","sourcesContent":["import type { Response } from \"express\";\n\nexport interface FileDownloadHeaderOptions {\n  fileName: string;\n  mimeType: string;\n  /** Defaults to 'attachment'; only pass 'inline' for types known safe to render. */\n  disposition?: \"inline\" | \"attachment\";\n  /** Opt in for assets loaded cross-origin by the UI (e.g. media served to :3000). */\n  crossOriginResourcePolicy?: boolean;\n}\n\n/**\n * Builds an RFC 6266 Content-Disposition value. The file name is attacker-controlled (it comes\n * from the uploaded originalFileName), so it can't be interpolated raw: a quote would close the\n * quoted-string early and let the rest of the name forge further header parameters. The ASCII\n * fallback is stripped to a safe subset and the real name is carried in the RFC 5987\n * `filename*` parameter, which is also what preserves non-ASCII names correctly.\n */\nfunction buildContentDisposition(disposition: \"inline\" | \"attachment\", fileName: string): string {\n  const name = (fileName || \"file\").replace(/[\\r\\n]/g, \"\");\n  const asciiFallback = name.replace(/[^\\x20-\\x7E]/g, \"_\").replace(/[\"\\\\]/g, \"_\") || \"file\";\n\n  return `${disposition}; filename=\"${asciiFallback}\"; filename*=UTF-8''${encodeURIComponent(name)}`;\n}\n\n/**\n * Single place that stamps the response headers for every streamed file download, so the\n * security headers can't be applied to one endpoint and forgotten on the next.\n */\nexport function setFileDownloadHeaders(res: Response, options: FileDownloadHeaderOptions): void {\n  const disposition = options.disposition ?? \"attachment\";\n\n  res.setHeader(\"Content-Disposition\", buildContentDisposition(disposition, options.fileName));\n  res.setHeader(\"Content-Type\", options.mimeType);\n  res.setHeader(\"Access-Control-Expose-Headers\", \"Content-Disposition, Content-Type\");\n\n  // Prevent the browser from ever content-sniffing a served file into something more\n  // dangerous than its declared Content-Type (e.g. rendering a mislabeled upload as HTML\n  // and executing embedded script).\n  res.setHeader(\"X-Content-Type-Options\", \"nosniff\");\n\n  if (options.crossOriginResourcePolicy) {\n    res.setHeader(\"Cross-Origin-Resource-Policy\", \"cross-origin\");\n  }\n}\n"]}

package/dist/helpers/model-metadata-helper.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model-metadata-helper.service.d.ts","sourceRoot":"","sources":["../../src/helpers/model-metadata-helper.service.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,qBACa,0BAA0B;IAI/B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAIzB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAPtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+C;gBAGjD,QAAQ,EAAE,aAAa,EAIvB,iBAAiB,EAAE,uBAAuB;IAI/D,uBAAuB,CAAC,eAAe,GAAE,eAAsC,GAAG,GAAG,EAAE;IAmBvF,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,8BAA8B;IAoEtC,OAAO,CAAC,4CAA4C;IA2B9C,kBAAkB,CAAC,SAAS,EAAE,GAAG;CAwB1C"}
+{"version":3,"file":"model-metadata-helper.service.d.ts","sourceRoot":"","sources":["../../src/helpers/model-metadata-helper.service.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,qBACa,0BAA0B;IAI/B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAIzB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAPtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+C;gBAGjD,QAAQ,EAAE,aAAa,EAIvB,iBAAiB,EAAE,uBAAuB;IAI/D,uBAAuB,CAAC,eAAe,GAAE,eAAsC,GAAG,GAAG,EAAE;IAmBvF,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,8BAA8B;IA8FtC,OAAO,CAAC,4CAA4C;IA+B9C,kBAAkB,CAAC,SAAS,EAAE,GAAG;CAwB1C"}

package/dist/helpers/model-metadata-helper.service.js

@@ -16,6 +16,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ModelMetadataHelperService = void 0;
 const common_1 = require("@nestjs/common");
 const lodash_1 = require("lodash");
+const draft_publish_fields_1 = require("../constants/draft-publish-fields");
 const legacy_common_entity_with_existing_id_entity_1 = require("../entities/legacy-common.entity-with-existing-id.entity");
 const legacy_table_type_enum_1 = require("../enums/legacy-table-type.enum");
 const model_metadata_repository_1 = require("../repository/model-metadata.repository");
@@ -87,6 +88,32 @@ let ModelMetadataHelperService = ModelMetadataHelperService_1 = class ModelMetad
                 isSystem: true,
                 enableAuditTracking: true
             },
+            {
+                name: "isPublished",
+                displayName: "Is Published",
+                type: "boolean",
+                isSystem: true,
+                enableAuditTracking: true
+            },
+            {
+                name: "isLatest",
+                displayName: "Is Latest",
+                type: "boolean",
+                isSystem: true,
+                enableAuditTracking: true
+            },
+            {
+                name: "initialEntityVersionId",
+                displayName: "Initial Entity Version Id",
+                type: "int",
+                isSystem: true,
+            },
+            {
+                name: "publishedTracker",
+                displayName: "Published Tracker",
+                type: "shortText",
+                isSystem: true,
+            },
             {
                 name: "localeName",
                 displayName: "Locale",
@@ -116,7 +143,9 @@ let ModelMetadataHelperService = ModelMetadataHelperService_1 = class ModelMetad
         ];
     }
     getSystemFieldsMetadataMappingForLegacyTable(withId = true) {
-        const systemFieldsMetadata = this.getSystemFieldsMetadataMapping();
+        const legacyExcludedFieldNames = draft_publish_fields_1.DRAFT_PUBLISH_VERSIONING_FIELD_NAMES;
+        const systemFieldsMetadata = this.getSystemFieldsMetadataMapping()
+            .filter(field => !legacyExcludedFieldNames.includes(field.name));
         if (!withId) {
             const index = systemFieldsMetadata.findIndex(field => field.name === 'id');
             if (index !== -1) {

package/dist/helpers/model-metadata-helper.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"model-metadata-helper.service.js","sourceRoot":"","sources":["../../src/helpers/model-metadata-helper.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAEA,2CAAwE;AACxE,mCAA2B;AAC3B,2HAAuG;AACvG,4EAAmE;AACnE,uFAAmF;AACnF,qDAAiD;AAG1C,IAAM,0BAA0B,kCAAhC,MAAM,0BAA0B;IAGnC,YACqB,QAAuB,EAIxC,iBAA2D;QAJ1C,aAAQ,GAAR,QAAQ,CAAe;QAIvB,sBAAiB,GAAjB,iBAAiB,CAAyB;QAP9C,WAAM,GAAG,IAAI,eAAM,CAAC,4BAA0B,CAAC,IAAI,CAAC,CAAC;IAStE,CAAC;IAED,uBAAuB,CAAC,kBAAmC,wCAAe,CAAC,IAAI;QAC3E,IAAI,oBAA2B,CAAC;QAChC,IAAI,eAAe,KAAK,wCAAe,CAAC,YAAY,EAAE,CAAC;YACnD,oBAAoB,GAAG,IAAI,CAAC,4CAA4C,CAAC,IAAI,CAAC,CAAC;QACnF,CAAC;aACI,IAAI,eAAe,KAAK,wCAAe,CAAC,WAAW,EAAE,CAAC;YACvD,oBAAoB,GAAG,IAAI,CAAC,4CAA4C,CAAC,KAAK,CAAC,CAAC;QACpF,CAAC;aACI,CAAC;YACF,oBAAoB,GAAG,IAAI,CAAC,8BAA8B,EAAE,CAAC;QACjE,CAAC;QAED,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;QAE7C,OAAO,oBAAoB,CAAC;IAChC,CAAC;IAIO,iBAAiB,CAAC,oBAAixB;QACvyB,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;QAC7D,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACpF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0DAA0D,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzG,CAAC;IACL,CAAC;IAEO,8BAA8B;QAClC,OAAO;YACH;gBACI,IAAI,EAAE,IAAI;gBACV,WAAW,EAAE,IAAI;gBACjB,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,IAAI;aACjB;YACD;gBACI,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,YAAY;gBACzB,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,IAAI;aACjB;YACD;gBACI,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,YAAY;gBACzB,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,IAAI;aACjB;YACD;gBACI,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,YAAY;gBACzB,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,IAAI;aACjB;YACD;gBACI,IAAI,EAAE,gBAAgB;gBACtB,WAAW,EAAE,iBAAiB;gBAC9B,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,IAAI;aACjB;YACD;gBACI,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,cAAc;gBAC3B,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,IAAI;gBACd,mBAAmB,EAAC,IAAI;aAC3B;YACD;gBACI,IAAI,EAAE,YAAY;gBAClB,WAAW,EAAE,QAAQ;gBACrB,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,IAAI;aACjB;YACD;gBACI,IAAI,EAAE,uBAAuB;gBAC7B,WAAW,EAAE,0BAA0B;gBACvC,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,IAAI;aACjB;YACD;gBACI,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,YAAY;gBACzB,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,IAAI;gBACd,UAAU,EAAE,eAAe;aAC9B;YACD;gBACI,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,YAAY;gBACzB,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,IAAI;gBACd,UAAU,EAAE,eAAe;aAC9B;SACJ,CAAC;IACN,CAAC;IAEO,4CAA4C,CAAC,SAAgB,IAAI;QACrE,MAAM,oBAAoB,GAAG,IAAI,CAAC,8BAA8B,EAAE,CAAC;QACnE,IAAI,CAAC,MAAM,EAAE,CAAC;YAEV,MAAM,KAAK,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAC3E,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,oBAAoB,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC1C,CAAC;QACL,CAAC;QASD,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;YACjC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC3D,KAAK,CAAC,YAAY,CAAC,GAAG,GAAG,yEAA0B,IAAI,UAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YACxF,CAAC;iBAAM,CAAC;gBACJ,KAAK,CAAC,YAAY,CAAC,GAAG,GAAG,yEAA0B,IAAI,UAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrF,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,oBAAoB,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,SAAc;QACnC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;YAC/C,KAAK,EAAE;gBACH,YAAY,EAAE,SAAS;aAC1B;YACD,SAAS,EAAE;gBACP,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE;oBACT,MAAM,EAAE,IAAI;iBACf;aACJ;SACJ,CAAC,CAAC;QACH,MAAM,MAAM,GAAU,EAAE,CAAC;QACzB,IAAI,KAAK,EAAE,CAAC;YAER,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YAG7B,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ,CAAA;AA/JY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,mBAAU,GAAE;IAQJ,WAAA,IAAA,eAAM,EAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,mDAAuB,CAAC,CAAC,CAAA;qCAHvB,8BAAa;QAIJ,mDAAuB;GARtD,0BAA0B,CA+JtC","sourcesContent":["// Return the system fields metadata for a model\n\nimport { forwardRef, Inject, Injectable, Logger } from \"@nestjs/common\";\nimport { _ } from \"lodash\";\nimport { LEGACY_TABLE_FIELDS_PREFIX } from \"src/entities/legacy-common.entity-with-existing-id.entity\";\nimport { LegacyTableType } from \"src/enums/legacy-table-type.enum\";\nimport { ModelMetadataRepository } from \"src/repository/model-metadata.repository\";\nimport { SolidRegistry } from \"./solid-registry\";\n\n@Injectable()\nexport class ModelMetadataHelperService {\n    private readonly logger = new Logger(ModelMetadataHelperService.name);\n\n    constructor(\n        private readonly registry: SolidRegistry,\n        // @InjectRepository(ModelMetadata)\n        // private readonly modelMetadataRepo: Repository<ModelMetadata>,\n        @Inject(forwardRef(() => ModelMetadataRepository))\n        private readonly modelMetadataRepo: ModelMetadataRepository,\n    ) {\n    }\n\n    getSystemFieldsMetadata(legacyTableType: LegacyTableType = LegacyTableType.NONE): any[] {\n        let systemFieldsMetadata: any[];\n        if (legacyTableType === LegacyTableType.GENERATED_ID) {\n            systemFieldsMetadata = this.getSystemFieldsMetadataMappingForLegacyTable(true);\n        }\n        else if (legacyTableType === LegacyTableType.EXISTING_ID) {\n            systemFieldsMetadata = this.getSystemFieldsMetadataMappingForLegacyTable(false);\n        }\n        else {\n            systemFieldsMetadata = this.getSystemFieldsMetadataMapping();\n        }\n\n        this.checkWithRegistry(systemFieldsMetadata);\n\n        return systemFieldsMetadata;\n    }\n\n    // TODO: Do an additional check and add a warning if the common entity keys and system field metadata keys don't match exactly\n    // Ideally this should be reflection based code\n    private checkWithRegistry(systemFieldsMetadata: ({ name: string; displayName: string; type: string; ormType: string; isSystem: boolean; relationType?: undefined; relationCoModelSingularName?: undefined; relationCreateInverse?: undefined; relationCascade?: undefined; relationModelModuleName?: undefined; } | { name: string; displayName: string; type: string; isSystem: boolean; ormType?: undefined; relationType?: undefined; relationCoModelSingularName?: undefined; relationCreateInverse?: undefined; relationCascade?: undefined; relationModelModuleName?: undefined; } | { name: string; displayName: string; type: string; ormType: string; isSystem: boolean; relationType: string; relationCoModelSingularName: string; relationCreateInverse: boolean; relationCascade: string; relationModelModuleName: string; })[]) {\n        const commonEntityKeys = this.registry.getCommonEntityKeys();\n        const systemFieldNames = systemFieldsMetadata.map(field => field.name);\n        const missingKeys = commonEntityKeys.filter(key => !systemFieldNames.includes(key));\n        if (missingKeys.length > 0) {\n            this.logger.warn(`Missing system fields metadata for common entity keys: ${missingKeys.join(', ')}`);\n        }\n    }\n\n    private getSystemFieldsMetadataMapping() {\n        return [\n            {\n                name: \"id\",\n                displayName: \"Id\",\n                type: \"int\",\n                isSystem: true,\n            },\n            {\n                name: \"createdAt\",\n                displayName: \"Created At\",\n                type: \"datetime\",\n                isSystem: true,\n            },\n            {\n                name: \"updatedAt\",\n                displayName: \"Updated At\",\n                type: \"datetime\",\n                isSystem: true,\n            },\n            {\n                name: \"deletedAt\",\n                displayName: \"Deleted At\",\n                type: \"datetime\",\n                isSystem: true,\n            },\n            {\n                name: \"deletedTracker\",\n                displayName: \"Deleted Tracker\",\n                type: \"shortText\",\n                isSystem: true,\n            },\n            {\n                name: \"publishedAt\",\n                displayName: \"Published At\",\n                type: \"datetime\",\n                isSystem: true,\n                enableAuditTracking:true\n            },\n            {\n                name: \"localeName\",\n                displayName: \"Locale\",\n                type: \"shortText\",\n                isSystem: true,\n            },\n            {\n                name: \"defaultEntityLocaleId\",\n                displayName: \"Default Entity Locale Id\",\n                type: \"int\",\n                isSystem: true,\n            },\n            {\n                name: \"createdBy\",\n                displayName: \"Created By\",\n                type: \"int\",\n                isSystem: true,\n                columnName: \"created_by_id\",\n            },\n            {\n                name: \"updatedBy\",\n                displayName: \"Updated By\",\n                type: \"int\",\n                isSystem: true,\n                columnName: \"updated_by_id\",\n            }\n        ];\n    }\n\n    private getSystemFieldsMetadataMappingForLegacyTable(withId: boolean=true) {\n        const systemFieldsMetadata = this.getSystemFieldsMetadataMapping();\n        if (!withId) {\n            // Remove the id field metadata\n            const index = systemFieldsMetadata.findIndex(field => field.name === 'id');\n            if (index !== -1) {\n                systemFieldsMetadata.splice(index, 1);\n            }\n        }\n\n        // For legacy table, system fields, remove the ormType atribute from the metadata\n        // systemFieldsMetadata.forEach(field => {\n        //     delete field.ormType;\n        // });\n\n        // Except for createdBy and updatedBy fields, for which we need to keep the columnName as created_by_id and updated_by_id respectively,\n        // we need to add a columnName attribute with legacy prefix concatenated with the kebab cased field name of the system field\n        systemFieldsMetadata.forEach(field => {\n            if (field.name === 'createdBy' || field.name === 'updatedBy') {\n                field['columnName'] = `${LEGACY_TABLE_FIELDS_PREFIX}_${_.snakeCase(field.name)}_id`;\n            } else {\n                field['columnName'] = `${LEGACY_TABLE_FIELDS_PREFIX}_${_.snakeCase(field.name)}`;\n            }\n        });\n        return systemFieldsMetadata;\n    }\n\n    async loadFieldHierarchy(modelName: any) {\n        const model = await this.modelMetadataRepo.findOne({\n            where: {\n                singularName: modelName,\n            },\n            relations: {\n                fields: true,\n                parentModel: {\n                    fields: true,\n                }\n            }\n        });\n        const fields: any[] = [];\n        if (model) {\n            // Add the fields of the current model\n            fields.push(...model.fields);\n\n            // Add the fields of the parent model\n            if (model.parentModel) {\n                fields.push(...model.parentModel.fields);\n            }\n        }\n        return fields;\n    }\n}"]}
+{"version":3,"file":"model-metadata-helper.service.js","sourceRoot":"","sources":["../../src/helpers/model-metadata-helper.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAEA,2CAAwE;AACxE,mCAA2B;AAC3B,4EAA0F;AAC1F,2HAAuG;AACvG,4EAAmE;AACnE,uFAAmF;AACnF,qDAAiD;AAG1C,IAAM,0BAA0B,kCAAhC,MAAM,0BAA0B;IAGnC,YACqB,QAAuB,EAIxC,iBAA2D;QAJ1C,aAAQ,GAAR,QAAQ,CAAe;QAIvB,sBAAiB,GAAjB,iBAAiB,CAAyB;QAP9C,WAAM,GAAG,IAAI,eAAM,CAAC,4BAA0B,CAAC,IAAI,CAAC,CAAC;IAStE,CAAC;IAED,uBAAuB,CAAC,kBAAmC,wCAAe,CAAC,IAAI;QAC3E,IAAI,oBAA2B,CAAC;QAChC,IAAI,eAAe,KAAK,wCAAe,CAAC,YAAY,EAAE,CAAC;YACnD,oBAAoB,GAAG,IAAI,CAAC,4CAA4C,CAAC,IAAI,CAAC,CAAC;QACnF,CAAC;aACI,IAAI,eAAe,KAAK,wCAAe,CAAC,WAAW,EAAE,CAAC;YACvD,oBAAoB,GAAG,IAAI,CAAC,4CAA4C,CAAC,KAAK,CAAC,CAAC;QACpF,CAAC;aACI,CAAC;YACF,oBAAoB,GAAG,IAAI,CAAC,8BAA8B,EAAE,CAAC;QACjE,CAAC;QAED,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;QAE7C,OAAO,oBAAoB,CAAC;IAChC,CAAC;IAIO,iBAAiB,CAAC,oBAAixB;QACvyB,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;QAC7D,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACpF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0DAA0D,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzG,CAAC;IACL,CAAC;IAEO,8BAA8B;QAClC,OAAO;YACH;gBACI,IAAI,EAAE,IAAI;gBACV,WAAW,EAAE,IAAI;gBACjB,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,IAAI;aACjB;YACD;gBACI,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,YAAY;gBACzB,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,IAAI;aACjB;YACD;gBACI,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,YAAY;gBACzB,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,IAAI;aACjB;YACD;gBACI,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,YAAY;gBACzB,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,IAAI;aACjB;YACD;gBACI,IAAI,EAAE,gBAAgB;gBACtB,WAAW,EAAE,iBAAiB;gBAC9B,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,IAAI;aACjB;YACD;gBACI,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,cAAc;gBAC3B,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,IAAI;gBACd,mBAAmB,EAAC,IAAI;aAC3B;YACD;gBACI,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,cAAc;gBAC3B,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,IAAI;gBACd,mBAAmB,EAAE,IAAI;aAC5B;YACD;gBACI,IAAI,EAAE,UAAU;gBAChB,WAAW,EAAE,WAAW;gBACxB,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,IAAI;gBACd,mBAAmB,EAAE,IAAI;aAC5B;YACD;gBACI,IAAI,EAAE,wBAAwB;gBAC9B,WAAW,EAAE,2BAA2B;gBACxC,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,IAAI;aACjB;YACD;gBACI,IAAI,EAAE,kBAAkB;gBACxB,WAAW,EAAE,mBAAmB;gBAChC,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,IAAI;aACjB;YACD;gBACI,IAAI,EAAE,YAAY;gBAClB,WAAW,EAAE,QAAQ;gBACrB,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,IAAI;aACjB;YACD;gBACI,IAAI,EAAE,uBAAuB;gBAC7B,WAAW,EAAE,0BAA0B;gBACvC,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,IAAI;aACjB;YACD;gBACI,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,YAAY;gBACzB,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,IAAI;gBACd,UAAU,EAAE,eAAe;aAC9B;YACD;gBACI,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,YAAY;gBACzB,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,IAAI;gBACd,UAAU,EAAE,eAAe;aAC9B;SACJ,CAAC;IACN,CAAC;IAEO,4CAA4C,CAAC,SAAgB,IAAI;QAGrE,MAAM,wBAAwB,GAAsB,2DAAoC,CAAC;QACzF,MAAM,oBAAoB,GAAG,IAAI,CAAC,8BAA8B,EAAE;aAC7D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,wBAAwB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,EAAE,CAAC;YAEV,MAAM,KAAK,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAC3E,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,oBAAoB,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC1C,CAAC;QACL,CAAC;QASD,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;YACjC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC3D,KAAK,CAAC,YAAY,CAAC,GAAG,GAAG,yEAA0B,IAAI,UAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YACxF,CAAC;iBAAM,CAAC;gBACJ,KAAK,CAAC,YAAY,CAAC,GAAG,GAAG,yEAA0B,IAAI,UAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrF,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,oBAAoB,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,SAAc;QACnC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;YAC/C,KAAK,EAAE;gBACH,YAAY,EAAE,SAAS;aAC1B;YACD,SAAS,EAAE;gBACP,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE;oBACT,MAAM,EAAE,IAAI;iBACf;aACJ;SACJ,CAAC,CAAC;QACH,MAAM,MAAM,GAAU,EAAE,CAAC;QACzB,IAAI,KAAK,EAAE,CAAC;YAER,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YAG7B,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ,CAAA;AA7LY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,mBAAU,GAAE;IAQJ,WAAA,IAAA,eAAM,EAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,mDAAuB,CAAC,CAAC,CAAA;qCAHvB,8BAAa;QAIJ,mDAAuB;GARtD,0BAA0B,CA6LtC","sourcesContent":["// Return the system fields metadata for a model\n\nimport { forwardRef, Inject, Injectable, Logger } from \"@nestjs/common\";\nimport { _ } from \"lodash\";\nimport { DRAFT_PUBLISH_VERSIONING_FIELD_NAMES } from \"src/constants/draft-publish-fields\";\nimport { LEGACY_TABLE_FIELDS_PREFIX } from \"src/entities/legacy-common.entity-with-existing-id.entity\";\nimport { LegacyTableType } from \"src/enums/legacy-table-type.enum\";\nimport { ModelMetadataRepository } from \"src/repository/model-metadata.repository\";\nimport { SolidRegistry } from \"./solid-registry\";\n\n@Injectable()\nexport class ModelMetadataHelperService {\n    private readonly logger = new Logger(ModelMetadataHelperService.name);\n\n    constructor(\n        private readonly registry: SolidRegistry,\n        // @InjectRepository(ModelMetadata)\n        // private readonly modelMetadataRepo: Repository<ModelMetadata>,\n        @Inject(forwardRef(() => ModelMetadataRepository))\n        private readonly modelMetadataRepo: ModelMetadataRepository,\n    ) {\n    }\n\n    getSystemFieldsMetadata(legacyTableType: LegacyTableType = LegacyTableType.NONE): any[] {\n        let systemFieldsMetadata: any[];\n        if (legacyTableType === LegacyTableType.GENERATED_ID) {\n            systemFieldsMetadata = this.getSystemFieldsMetadataMappingForLegacyTable(true);\n        }\n        else if (legacyTableType === LegacyTableType.EXISTING_ID) {\n            systemFieldsMetadata = this.getSystemFieldsMetadataMappingForLegacyTable(false);\n        }\n        else {\n            systemFieldsMetadata = this.getSystemFieldsMetadataMapping();\n        }\n\n        this.checkWithRegistry(systemFieldsMetadata);\n\n        return systemFieldsMetadata;\n    }\n\n    // TODO: Do an additional check and add a warning if the common entity keys and system field metadata keys don't match exactly\n    // Ideally this should be reflection based code\n    private checkWithRegistry(systemFieldsMetadata: ({ name: string; displayName: string; type: string; ormType: string; isSystem: boolean; relationType?: undefined; relationCoModelSingularName?: undefined; relationCreateInverse?: undefined; relationCascade?: undefined; relationModelModuleName?: undefined; } | { name: string; displayName: string; type: string; isSystem: boolean; ormType?: undefined; relationType?: undefined; relationCoModelSingularName?: undefined; relationCreateInverse?: undefined; relationCascade?: undefined; relationModelModuleName?: undefined; } | { name: string; displayName: string; type: string; ormType: string; isSystem: boolean; relationType: string; relationCoModelSingularName: string; relationCreateInverse: boolean; relationCascade: string; relationModelModuleName: string; })[]) {\n        const commonEntityKeys = this.registry.getCommonEntityKeys();\n        const systemFieldNames = systemFieldsMetadata.map(field => field.name);\n        const missingKeys = commonEntityKeys.filter(key => !systemFieldNames.includes(key));\n        if (missingKeys.length > 0) {\n            this.logger.warn(`Missing system fields metadata for common entity keys: ${missingKeys.join(', ')}`);\n        }\n    }\n\n    private getSystemFieldsMetadataMapping() {\n        return [\n            {\n                name: \"id\",\n                displayName: \"Id\",\n                type: \"int\",\n                isSystem: true,\n            },\n            {\n                name: \"createdAt\",\n                displayName: \"Created At\",\n                type: \"datetime\",\n                isSystem: true,\n            },\n            {\n                name: \"updatedAt\",\n                displayName: \"Updated At\",\n                type: \"datetime\",\n                isSystem: true,\n            },\n            {\n                name: \"deletedAt\",\n                displayName: \"Deleted At\",\n                type: \"datetime\",\n                isSystem: true,\n            },\n            {\n                name: \"deletedTracker\",\n                displayName: \"Deleted Tracker\",\n                type: \"shortText\",\n                isSystem: true,\n            },\n            {\n                name: \"publishedAt\",\n                displayName: \"Published At\",\n                type: \"datetime\",\n                isSystem: true,\n                enableAuditTracking:true\n            },\n            {\n                name: \"isPublished\",\n                displayName: \"Is Published\",\n                type: \"boolean\",\n                isSystem: true,\n                enableAuditTracking: true\n            },\n            {\n                name: \"isLatest\",\n                displayName: \"Is Latest\",\n                type: \"boolean\",\n                isSystem: true,\n                enableAuditTracking: true\n            },\n            {\n                name: \"initialEntityVersionId\",\n                displayName: \"Initial Entity Version Id\",\n                type: \"int\",\n                isSystem: true,\n            },\n            {\n                name: \"publishedTracker\",\n                displayName: \"Published Tracker\",\n                type: \"shortText\",\n                isSystem: true,\n            },\n            {\n                name: \"localeName\",\n                displayName: \"Locale\",\n                type: \"shortText\",\n                isSystem: true,\n            },\n            {\n                name: \"defaultEntityLocaleId\",\n                displayName: \"Default Entity Locale Id\",\n                type: \"int\",\n                isSystem: true,\n            },\n            {\n                name: \"createdBy\",\n                displayName: \"Created By\",\n                type: \"int\",\n                isSystem: true,\n                columnName: \"created_by_id\",\n            },\n            {\n                name: \"updatedBy\",\n                displayName: \"Updated By\",\n                type: \"int\",\n                isSystem: true,\n                columnName: \"updated_by_id\",\n            }\n        ];\n    }\n\n    private getSystemFieldsMetadataMappingForLegacyTable(withId: boolean=true) {\n        // Legacy tables don't have the draft/publish versioning columns, so exclude\n        // them from the legacy system fields metadata mapping.\n        const legacyExcludedFieldNames: readonly string[] = DRAFT_PUBLISH_VERSIONING_FIELD_NAMES;\n        const systemFieldsMetadata = this.getSystemFieldsMetadataMapping()\n            .filter(field => !legacyExcludedFieldNames.includes(field.name));\n        if (!withId) {\n            // Remove the id field metadata\n            const index = systemFieldsMetadata.findIndex(field => field.name === 'id');\n            if (index !== -1) {\n                systemFieldsMetadata.splice(index, 1);\n            }\n        }\n\n        // For legacy table, system fields, remove the ormType atribute from the metadata\n        // systemFieldsMetadata.forEach(field => {\n        //     delete field.ormType;\n        // });\n\n        // Except for createdBy and updatedBy fields, for which we need to keep the columnName as created_by_id and updated_by_id respectively,\n        // we need to add a columnName attribute with legacy prefix concatenated with the kebab cased field name of the system field\n        systemFieldsMetadata.forEach(field => {\n            if (field.name === 'createdBy' || field.name === 'updatedBy') {\n                field['columnName'] = `${LEGACY_TABLE_FIELDS_PREFIX}_${_.snakeCase(field.name)}_id`;\n            } else {\n                field['columnName'] = `${LEGACY_TABLE_FIELDS_PREFIX}_${_.snakeCase(field.name)}`;\n            }\n        });\n        return systemFieldsMetadata;\n    }\n\n    async loadFieldHierarchy(modelName: any) {\n        const model = await this.modelMetadataRepo.findOne({\n            where: {\n                singularName: modelName,\n            },\n            relations: {\n                fields: true,\n                parentModel: {\n                    fields: true,\n                }\n            }\n        });\n        const fields: any[] = [];\n        if (model) {\n            // Add the fields of the current model\n            fields.push(...model.fields);\n\n            // Add the fields of the parent model\n            if (model.parentModel) {\n                fields.push(...model.parentModel.fields);\n            }\n        }\n        return fields;\n    }\n}"]}

package/dist/helpers/security.helper.d.ts

@@ -1,5 +1,9 @@
 import { HelmetOptions } from "helmet";
-export declare function buildDefaultSecurityHeaderOptions(): Readonly<HelmetOptions>;
+export interface SolidSecurityOptions {
+    frameAncestors?: string[];
+}
+export declare const DEFAULT_FRAME_ANCESTORS: string[];
+export declare function buildDefaultSecurityHeaderOptions(options?: SolidSecurityOptions): Readonly<HelmetOptions>;
 type Source = "self" | "none" | string;
 type DirectiveConfig = "self" | "none" | Source[];
 export type PermissionsPolicyConfig = Record<string, DirectiveConfig>;

package/dist/helpers/security.helper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"security.helper.d.ts","sourceRoot":"","sources":["../../src/helpers/security.helper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAUvC,wBAAgB,iCAAiC,IAAI,QAAQ,CAAC,aAAa,CAAC,CAwC3E;AAID,KAAK,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AACvC,KAAK,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;AAClD,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAEtE,eAAO,MAAM,0BAA0B,EAAE,uBAaxC,CAAC;AAEF,wBAAgB,4BAA4B,CAC1C,SAAS,GAAE,OAAO,CAAC,uBAAuB,CAAM,GAC/C,MAAM,CAKR;AAeD,eAAO,MAAM,qBAAqB,iFAC8C,CAAC;AAEjF,wBAAgB,sBAAsB,KAElC,MAAM,OAAO,SAAS,EAAE,OAAO,EAC/B,MAAM,OAAO,SAAS,EAAE,QAAQ,EAChC,MAAM,OAAO,SAAS,EAAE,YAAY,UAKvC"}
+{"version":3,"file":"security.helper.d.ts","sourceRoot":"","sources":["../../src/helpers/security.helper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAGvC,MAAM,WAAW,oBAAoB;IAKnC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,eAAO,MAAM,uBAAuB,UAQnC,CAAC;AASF,wBAAgB,iCAAiC,CAC/C,OAAO,GAAE,oBAAyB,GACjC,QAAQ,CAAC,aAAa,CAAC,CA+CzB;AAID,KAAK,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AACvC,KAAK,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;AAClD,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAEtE,eAAO,MAAM,0BAA0B,EAAE,uBAaxC,CAAC;AAEF,wBAAgB,4BAA4B,CAC1C,SAAS,GAAE,OAAO,CAAC,uBAAuB,CAAM,GAC/C,MAAM,CAKR;AAeD,eAAO,MAAM,qBAAqB,iFAC8C,CAAC;AAEjF,wBAAgB,sBAAsB,KAElC,MAAM,OAAO,SAAS,EAAE,OAAO,EAC/B,MAAM,OAAO,SAAS,EAAE,QAAQ,EAChC,MAAM,OAAO,SAAS,EAAE,YAAY,UAKvC"}

package/dist/helpers/security.helper.js

@@ -1,21 +1,32 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEFAULT_CACHE_CONTROL = exports.DEFAULT_PERMISSIONS_POLICY = void 0;
+exports.DEFAULT_CACHE_CONTROL = exports.DEFAULT_PERMISSIONS_POLICY = exports.DEFAULT_FRAME_ANCESTORS = void 0;
 exports.buildDefaultSecurityHeaderOptions = buildDefaultSecurityHeaderOptions;
 exports.buildPermissionsPolicyHeader = buildPermissionsPolicyHeader;
 exports.setDefaultCacheControl = setDefaultCacheControl;
 const disallow_in_production_decorator_1 = require("../decorators/disallow-in-production.decorator");
-function buildDefaultSecurityHeaderOptions() {
+exports.DEFAULT_FRAME_ANCESTORS = [
+    "'self'",
+    "http://localhost:*",
+    "https://localhost:*",
+    "http://127.0.0.1:*",
+    "https://127.0.0.1:*",
+    "http://[::1]:*",
+    "https://[::1]:*",
+];
+function buildDefaultSecurityHeaderOptions(options = {}) {
     const isProd = process.env.ENV === disallow_in_production_decorator_1.Environment.Production;
+    const frameAncestors = options.frameAncestors ?? exports.DEFAULT_FRAME_ANCESTORS;
+    const allowsCrossOriginFrames = frameAncestors.some((source) => source !== "'self'" && source !== "'none'");
     return {
         contentSecurityPolicy: {
             useDefaults: true,
             directives: {
-                "frame-ancestors": ["'none'"],
+                "frame-ancestors": frameAncestors,
                 "style-src": ["'self'"],
             },
         },
-        frameguard: { action: "deny" },
+        frameguard: allowsCrossOriginFrames ? false : { action: "deny" },
         referrerPolicy: { policy: "strict-origin-when-cross-origin" },
         crossOriginEmbedderPolicy: false,
         crossOriginResourcePolicy: { policy: "same-site" },

package/dist/helpers/security.helper.js.map

@@ -1 +1 @@
-{"version":3,"file":"security.helper.js","sourceRoot":"","sources":["../../src/helpers/security.helper.ts"],"names":[],"mappings":";;;AAUA,8EAwCC;AAuBD,oEAOC;AAkBD,wDASC;AA1GD,qGAA8E;AAS9E,SAAgB,iCAAiC;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,8CAAW,CAAC,UAAU,CAAC;IAE1D,OAAO;QAEL,qBAAqB,EAAE;YACrB,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE;gBAQV,iBAAiB,EAAE,CAAC,QAAQ,CAAC;gBAC7B,WAAW,EAAE,CAAC,QAAQ,CAAC;aAOxB;SACF;QAID,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;QAG9B,cAAc,EAAE,EAAE,MAAM,EAAE,iCAAiC,EAAE;QAC7D,yBAAyB,EAAE,KAAK;QAChC,yBAAyB,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;QAGlD,IAAI,EAAE,MAAM;YACV,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;YAC9D,CAAC,CAAC,KAAK;KACV,CAAC;AACJ,CAAC;AAQY,QAAA,0BAA0B,GAA4B;IACjE,MAAM,EAAE,MAAM;IACd,UAAU,EAAE,MAAM;IAClB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,MAAM;IAClB,OAAO,EAAE,MAAM;IACf,aAAa,EAAE,MAAM;IACrB,QAAQ,EAAE,MAAM;IAChB,gBAAgB,EAAE,MAAM;IACxB,iBAAiB,EAAE,MAAM;IACzB,SAAS,EAAE,MAAM;IACjB,YAAY,EAAE,MAAM;IACpB,GAAG,EAAE,MAAM;CACZ,CAAC;AAEF,SAAgB,4BAA4B,CAC1C,YAA8C,EAAE;IAEhD,MAAM,MAAM,GAA4B,EAAE,GAAG,kCAA0B,EAAE,GAAG,SAAS,EAAE,CAAC;IACxF,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SAC1B,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;SAChE,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,CAAkB;IACxC,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxE,OAAO,IAAI,KAAK,GAAG,CAAC;AACtB,CAAC;AAQY,QAAA,qBAAqB,GAChC,8EAA8E,CAAC;AAEjF,SAAgB,sBAAsB;IACpC,OAAO,SAAS,sBAAsB,CACpC,IAA+B,EAC/B,IAAgC,EAChC,IAAoC;QAEpC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,6BAAqB,CAAC,CAAC;QACvD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { HelmetOptions } from \"helmet\";\nimport { Environment } from \"src/decorators/disallow-in-production.decorator\";\n\n/**\n * Default security headers for SolidX apps.\n * - HSTS only in prod over HTTPS\n * - CSP with frame-ancestors 'none' (prevents clickjacking)\n * - X-Frame-Options: DENY (legacy fallback)\n * - No X-XSS-Protection (deprecated)\n */\nexport function buildDefaultSecurityHeaderOptions(): Readonly<HelmetOptions> {\n  const isProd = process.env.ENV === Environment.Production;\n\n  return {\n    // Modern CSP. Add more directives as your app needs (script-src, connect-src, etc.)\n    contentSecurityPolicy: {\n      useDefaults: true,\n      directives: {\n        // sensible secure defaults\n        // \"default-src\": [\"'self'\"],\n        // \"base-uri\": [\"'self'\"],\n        // \"object-src\": [\"'none'\"],\n        // \"form-action\": [\"'self'\"],\n\n        // clickjacking defense (modern)\n        \"frame-ancestors\": [\"'none'\"],\n        \"style-src\": [\"'self'\"],\n        // add/adjust as needed for your app:\n        // \"script-src\": [\"'self'\"],              // add hashes/nonces/CSPRO if needed\n        // \"style-src\": [\"'self'\", \"'unsafe-inline'\"],\n        // \"img-src\": [\"'self'\", \"data:\"],\n        // \"connect-src\": [\"'self'\", \"https://api.example.com\"],\n        // \"frame-src\": [\"'none'\"],               // iframes you intentionally allow\n      },\n    },\n\n    \n    // Legacy clickjacking defense (kept for older UAs)\n    frameguard: { action: \"deny\" },\n\n    // Referrer/cross-origin policies\n    referrerPolicy: { policy: \"strict-origin-when-cross-origin\" },\n    crossOriginEmbedderPolicy: false,\n    crossOriginResourcePolicy: { policy: \"same-site\" },\n\n    // HSTS only when you’re on HTTPS in production\n    hsts: isProd\n      ? { maxAge: 31536000, includeSubDomains: true, preload: true }\n      : false,\n  };\n}\n\n/* ---------------- Permissions-Policy (formerly Feature-Policy) ---------------- */\n\ntype Source = \"self\" | \"none\" | string;\ntype DirectiveConfig = \"self\" | \"none\" | Source[];\nexport type PermissionsPolicyConfig = Record<string, DirectiveConfig>;\n\nexport const DEFAULT_PERMISSIONS_POLICY: PermissionsPolicyConfig = {\n  camera: \"none\",\n  microphone: \"none\",\n  geolocation: \"none\",\n  fullscreen: \"self\",\n  payment: \"none\",\n  accelerometer: \"none\",\n  autoplay: \"none\",\n  \"clipboard-read\": \"none\",\n  \"clipboard-write\": \"none\",\n  gyroscope: \"none\",\n  magnetometer: \"none\",\n  usb: \"none\",\n};\n\nexport function buildPermissionsPolicyHeader(\n  overrides: Partial<PermissionsPolicyConfig> = {}\n): string {\n  const merged: PermissionsPolicyConfig = { ...DEFAULT_PERMISSIONS_POLICY, ...overrides };\n  return Object.entries(merged)\n    .map(([feature, value]) => `${feature}=${serializeValue(value)}`)\n    .join(\", \");\n}\n\nfunction serializeValue(v: DirectiveConfig): string {\n  if (v === \"none\") return \"()\";\n  if (v === \"self\") return \"(self)\";\n  const parts = v.map((src) => (src === \"self\" ? \"self\" : src)).join(\" \");\n  return `(${parts})`;\n}\n\n/* ---------------- Cache-Control helpers ---------------- */\n\n/**\n * Default: no-store for HTML/API responses unless you have a reason to cache.\n * Attach as a global middleware or on selected routes.\n */\nexport const DEFAULT_CACHE_CONTROL =\n  \"no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0\";\n\nexport function setDefaultCacheControl() {\n  return function cacheControlMiddleware(\n    _req: import(\"express\").Request,\n    _res: import(\"express\").Response,\n    next: import(\"express\").NextFunction\n  ) {\n    _res.setHeader(\"Cache-Control\", DEFAULT_CACHE_CONTROL);\n    next();\n  };\n}\n\n/* ---------------- Example Express wiring ---------------- */\n// import express from \"express\";\n// const app = express();\n// app.use(helmet(buildDefaultSecurityHeaderOptions()));\n// app.use((req, res, next) => {\n//   res.setHeader(\"Permissions-Policy\", buildPermissionsPolicyHeader());\n//   next();\n// });\n// app.use(setDefaultCacheControl());"]}
+{"version":3,"file":"security.helper.js","sourceRoot":"","sources":["../../src/helpers/security.helper.ts"],"names":[],"mappings":";;;AA4BA,8EAiDC;AAuBD,oEAOC;AAkBD,wDASC;AArID,qGAA8E;AAUjE,QAAA,uBAAuB,GAAG;IACrC,QAAQ;IACR,oBAAoB;IACpB,qBAAqB;IACrB,oBAAoB;IACpB,qBAAqB;IACrB,gBAAgB;IAChB,iBAAiB;CAClB,CAAC;AASF,SAAgB,iCAAiC,CAC/C,UAAgC,EAAE;IAElC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,8CAAW,CAAC,UAAU,CAAC;IAC1D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,+BAAuB,CAAC;IACzE,MAAM,uBAAuB,GAAG,cAAc,CAAC,IAAI,CACjD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,CACvD,CAAC;IAEF,OAAO;QAEL,qBAAqB,EAAE;YACrB,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE;gBAQV,iBAAiB,EAAE,cAAc;gBACjC,WAAW,EAAE,CAAC,QAAQ,CAAC;aAOxB;SACF;QAOD,UAAU,EAAE,uBAAuB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE;QAGhE,cAAc,EAAE,EAAE,MAAM,EAAE,iCAAiC,EAAE;QAC7D,yBAAyB,EAAE,KAAK;QAChC,yBAAyB,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;QAGlD,IAAI,EAAE,MAAM;YACV,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;YAC9D,CAAC,CAAC,KAAK;KACV,CAAC;AACJ,CAAC;AAQY,QAAA,0BAA0B,GAA4B;IACjE,MAAM,EAAE,MAAM;IACd,UAAU,EAAE,MAAM;IAClB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,MAAM;IAClB,OAAO,EAAE,MAAM;IACf,aAAa,EAAE,MAAM;IACrB,QAAQ,EAAE,MAAM;IAChB,gBAAgB,EAAE,MAAM;IACxB,iBAAiB,EAAE,MAAM;IACzB,SAAS,EAAE,MAAM;IACjB,YAAY,EAAE,MAAM;IACpB,GAAG,EAAE,MAAM;CACZ,CAAC;AAEF,SAAgB,4BAA4B,CAC1C,YAA8C,EAAE;IAEhD,MAAM,MAAM,GAA4B,EAAE,GAAG,kCAA0B,EAAE,GAAG,SAAS,EAAE,CAAC;IACxF,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SAC1B,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;SAChE,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,CAAkB;IACxC,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxE,OAAO,IAAI,KAAK,GAAG,CAAC;AACtB,CAAC;AAQY,QAAA,qBAAqB,GAChC,8EAA8E,CAAC;AAEjF,SAAgB,sBAAsB;IACpC,OAAO,SAAS,sBAAsB,CACpC,IAA+B,EAC/B,IAAgC,EAChC,IAAoC;QAEpC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,6BAAqB,CAAC,CAAC;QACvD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { HelmetOptions } from \"helmet\";\nimport { Environment } from \"src/decorators/disallow-in-production.decorator\";\n\nexport interface SolidSecurityOptions {\n  /**\n   * Origins that may embed this application in an iframe.\n   * Defaults to the local HTTP/HTTPS loopback origins on any port.\n   */\n  frameAncestors?: string[];\n}\n\nexport const DEFAULT_FRAME_ANCESTORS = [\n  \"'self'\",\n  \"http://localhost:*\",\n  \"https://localhost:*\",\n  \"http://127.0.0.1:*\",\n  \"https://127.0.0.1:*\",\n  \"http://[::1]:*\",\n  \"https://[::1]:*\",\n];\n\n/**\n * Default security headers for SolidX apps.\n * - HSTS only in prod over HTTPS\n * - CSP with configurable frame-ancestors\n * - X-Frame-Options disabled when cross-origin frame ancestors are allowed\n * - No X-XSS-Protection (deprecated)\n */\nexport function buildDefaultSecurityHeaderOptions(\n  options: SolidSecurityOptions = {},\n): Readonly<HelmetOptions> {\n  const isProd = process.env.ENV === Environment.Production;\n  const frameAncestors = options.frameAncestors ?? DEFAULT_FRAME_ANCESTORS;\n  const allowsCrossOriginFrames = frameAncestors.some(\n    (source) => source !== \"'self'\" && source !== \"'none'\",\n  );\n\n  return {\n    // Modern CSP. Add more directives as your app needs (script-src, connect-src, etc.)\n    contentSecurityPolicy: {\n      useDefaults: true,\n      directives: {\n        // sensible secure defaults\n        // \"default-src\": [\"'self'\"],\n        // \"base-uri\": [\"'self'\"],\n        // \"object-src\": [\"'none'\"],\n        // \"form-action\": [\"'self'\"],\n\n        // clickjacking defense (modern)\n        \"frame-ancestors\": frameAncestors,\n        \"style-src\": [\"'self'\"],\n        // add/adjust as needed for your app:\n        // \"script-src\": [\"'self'\"],              // add hashes/nonces/CSPRO if needed\n        // \"style-src\": [\"'self'\", \"'unsafe-inline'\"],\n        // \"img-src\": [\"'self'\", \"data:\"],\n        // \"connect-src\": [\"'self'\", \"https://api.example.com\"],\n        // \"frame-src\": [\"'none'\"],               // iframes you intentionally allow\n      },\n    },\n\n    // Legacy clickjacking defense for configurations that do not allow\n    // cross-origin parents (kept for older UAs).\n    // X-Frame-Options cannot express an allowlist. It must be omitted when\n    // CSP allows a parent on another origin, otherwise older browsers may\n    // still block the iframe despite the CSP configuration.\n    frameguard: allowsCrossOriginFrames ? false : { action: \"deny\" },\n\n    // Referrer/cross-origin policies\n    referrerPolicy: { policy: \"strict-origin-when-cross-origin\" },\n    crossOriginEmbedderPolicy: false,\n    crossOriginResourcePolicy: { policy: \"same-site\" },\n\n    // HSTS only when you’re on HTTPS in production\n    hsts: isProd\n      ? { maxAge: 31536000, includeSubDomains: true, preload: true }\n      : false,\n  };\n}\n\n/* ---------------- Permissions-Policy (formerly Feature-Policy) ---------------- */\n\ntype Source = \"self\" | \"none\" | string;\ntype DirectiveConfig = \"self\" | \"none\" | Source[];\nexport type PermissionsPolicyConfig = Record<string, DirectiveConfig>;\n\nexport const DEFAULT_PERMISSIONS_POLICY: PermissionsPolicyConfig = {\n  camera: \"none\",\n  microphone: \"none\",\n  geolocation: \"none\",\n  fullscreen: \"self\",\n  payment: \"none\",\n  accelerometer: \"none\",\n  autoplay: \"none\",\n  \"clipboard-read\": \"none\",\n  \"clipboard-write\": \"none\",\n  gyroscope: \"none\",\n  magnetometer: \"none\",\n  usb: \"none\",\n};\n\nexport function buildPermissionsPolicyHeader(\n  overrides: Partial<PermissionsPolicyConfig> = {}\n): string {\n  const merged: PermissionsPolicyConfig = { ...DEFAULT_PERMISSIONS_POLICY, ...overrides };\n  return Object.entries(merged)\n    .map(([feature, value]) => `${feature}=${serializeValue(value)}`)\n    .join(\", \");\n}\n\nfunction serializeValue(v: DirectiveConfig): string {\n  if (v === \"none\") return \"()\";\n  if (v === \"self\") return \"(self)\";\n  const parts = v.map((src) => (src === \"self\" ? \"self\" : src)).join(\" \");\n  return `(${parts})`;\n}\n\n/* ---------------- Cache-Control helpers ---------------- */\n\n/**\n * Default: no-store for HTML/API responses unless you have a reason to cache.\n * Attach as a global middleware or on selected routes.\n */\nexport const DEFAULT_CACHE_CONTROL =\n  \"no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0\";\n\nexport function setDefaultCacheControl() {\n  return function cacheControlMiddleware(\n    _req: import(\"express\").Request,\n    _res: import(\"express\").Response,\n    next: import(\"express\").NextFunction\n  ) {\n    _res.setHeader(\"Cache-Control\", DEFAULT_CACHE_CONTROL);\n    next();\n  };\n}\n\n/* ---------------- Example Express wiring ---------------- */\n// import express from \"express\";\n// const app = express();\n// app.use(helmet(buildDefaultSecurityHeaderOptions()));\n// app.use((req, res, next) => {\n//   res.setHeader(\"Permissions-Policy\", buildPermissionsPolicyHeader());\n//   next();\n// });\n// app.use(setDefaultCacheControl());\n"]}

package/dist/helpers/solid-core-error-codes-provider.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"solid-core-error-codes-provider.service.d.ts","sourceRoot":"","sources":["../../src/helpers/solid-core-error-codes-provider.service.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAG1E,qBAEa,2BAA4B,YAAW,kBAAkB;IAClE,IAAI,IAAI,MAAM;IAId,KAAK,IAAI,aAAa,CAAC,SAAS,CAAC;IAwEjC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS;CAI/C"}
+{"version":3,"file":"solid-core-error-codes-provider.service.d.ts","sourceRoot":"","sources":["../../src/helpers/solid-core-error-codes-provider.service.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAG1E,qBAEa,2BAA4B,YAAW,kBAAkB;IAClE,IAAI,IAAI,MAAM;IAId,KAAK,IAAI,aAAa,CAAC,SAAS,CAAC;IA6HjC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS;CAI/C"}

package/dist/helpers/solid-core-error-codes-provider.service.js

@@ -34,6 +34,51 @@ let SolidCoreErrorCodesProvider = class SolidCoreErrorCodesProvider {
                     httpStatus: 401,
                 },
             },
+            {
+                code: 'solidx-mpin-locked',
+                priority: 120,
+                match: (txt) => txt.includes(error_messages_1.ERROR_MESSAGES.MPIN_LOCKED.toLowerCase()),
+                meta: {
+                    message: error_messages_1.ERROR_MESSAGES.MPIN_LOCKED,
+                    httpStatus: 401,
+                },
+            },
+            {
+                code: 'solidx-mpin-revoked',
+                priority: 120,
+                match: (txt) => txt.includes(error_messages_1.ERROR_MESSAGES.MPIN_REVOKED.toLowerCase()),
+                meta: {
+                    message: error_messages_1.ERROR_MESSAGES.MPIN_REVOKED,
+                    httpStatus: 401,
+                },
+            },
+            {
+                code: 'solidx-mpin-invalid',
+                priority: 120,
+                match: (txt) => txt.includes(error_messages_1.ERROR_MESSAGES.MPIN_INVALID.toLowerCase()),
+                meta: {
+                    message: error_messages_1.ERROR_MESSAGES.MPIN_INVALID,
+                    httpStatus: 401,
+                },
+            },
+            {
+                code: 'solidx-mpin-too-predictable',
+                priority: 120,
+                match: (txt) => txt.includes(error_messages_1.ERROR_MESSAGES.MPIN_TOO_PREDICTABLE.toLowerCase()),
+                meta: {
+                    message: error_messages_1.ERROR_MESSAGES.MPIN_TOO_PREDICTABLE,
+                    httpStatus: 400,
+                },
+            },
+            {
+                code: 'solidx-mpin-format-invalid',
+                priority: 120,
+                match: (txt) => txt.includes(error_messages_1.ERROR_MESSAGES.MPIN_FORMAT_INVALID.toLowerCase()),
+                meta: {
+                    message: error_messages_1.ERROR_MESSAGES.MPIN_FORMAT_INVALID,
+                    httpStatus: 400,
+                },
+            },
             {
                 code: 'solidx-mcp-server-unavailable',
                 priority: 100,

package/dist/helpers/solid-core-error-codes-provider.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"solid-core-error-codes-provider.service.js","sourceRoot":"","sources":["../../src/helpers/solid-core-error-codes-provider.service.ts"],"names":[],"mappings":";;;;;;;;;AACA,2CAA4C;AAC5C,gEAA8D;AAC9D,iGAAkF;AAM3E,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IACpC,IAAI;QACA,OAAO,4BAA4B,CAAC;IACxC,CAAC;IAED,KAAK;QACD,OAAO;YACH;gBACI,IAAI,EAAE,wBAAwB;gBAC9B,QAAQ,EAAE,GAAG;gBACb,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,+BAAc,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;gBAC1E,IAAI,EAAE;oBACF,OAAO,EAAE,+BAAc,CAAC,eAAe;oBACvC,UAAU,EAAE,GAAG;iBAClB;aACJ;YACD;gBACI,IAAI,EAAE,wBAAwB;gBAC9B,QAAQ,EAAE,GAAG;gBACb,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,+BAAc,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;gBAC1E,IAAI,EAAE;oBACF,OAAO,EAAE,+BAAc,CAAC,eAAe;oBACvC,UAAU,EAAE,GAAG;iBAClB;aACJ;YACD;gBACI,IAAI,EAAE,+BAA+B;gBACrC,QAAQ,EAAE,GAAG;gBACb,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,GAAG,CAAC,QAAQ,CAAC,gCAAgC,CAAC;oBAC9C,GAAG,CAAC,QAAQ,CAAC,mDAAmD,CAAC;gBACrE,IAAI,EAAE;oBACF,OAAO,EAAE,mEAAmE;oBAC5E,UAAU,EAAE,GAAG;iBAClB;aACJ;YACD;gBACI,IAAI,EAAE,2BAA2B;gBACjC,QAAQ,EAAE,EAAE;gBACZ,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,2BAA2B,CAAC;gBACnF,IAAI,EAAE;oBACF,OAAO,EAAE,+BAAc,CAAC,kBAAkB;oBAC1C,UAAU,EAAE,GAAG;iBAClB;aACJ;YACD;gBACI,IAAI,EAAE,yBAAyB;gBAC/B,QAAQ,EAAE,EAAE;gBACZ,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAClF,IAAI,EAAE;oBACF,OAAO,EAAE,qEAAqE;oBAC9E,UAAU,EAAE,GAAG;iBAClB;aACJ;YACD;gBACI,IAAI,EAAE,6BAA6B;gBACnC,QAAQ,EAAE,EAAE;gBACZ,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC;gBACpD,IAAI,EAAE;oBACF,OAAO,EACH,wEAAwE;oBAC5E,UAAU,EAAE,GAAG;iBAClB;aACJ;YACD;gBACI,IAAI,EAAE,sBAAsB;gBAC5B,QAAQ,EAAE,CAAC,CAAC;gBACZ,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI;gBACrB,IAAI,EAAE;oBACF,OAAO,EAAE,+BAA+B;oBACxC,UAAU,EAAE,GAAG;iBAClB;aACJ;SACJ,CAAC;IACN,CAAC;IAGD,OAAO,CAAC,IAAY;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACvD,OAAO,IAAI,EAAE,IAAI,CAAC;IACtB,CAAC;CACJ,CAAA;AAjFY,kEAA2B;sCAA3B,2BAA2B;IAFvC,IAAA,kDAAiB,GAAE;IACnB,IAAA,mBAAU,GAAE;GACA,2BAA2B,CAiFvC","sourcesContent":["// src/common/errors/providers/solidcore-error-code.provider.ts\nimport { Injectable } from '@nestjs/common';\nimport { ERROR_MESSAGES } from 'src/constants/error-messages';\nimport { ErrorCodeProvider } from 'src/decorators/error-codes-provider.decorator';\nimport { ErrorMeta, ErrorRule, IErrorCodeProvider } from 'src/interfaces';\n\n\n@ErrorCodeProvider()\n@Injectable()\nexport class SolidCoreErrorCodesProvider implements IErrorCodeProvider {\n    name(): string {\n        return 'SolidCoreErrorCodeProvider';\n    }\n\n    rules(): ReadonlyArray<ErrorRule> {\n        return [\n            {\n                code: 'solidx-session-invalid',\n                priority: 110,\n                match: (txt) => txt.includes(ERROR_MESSAGES.SESSION_INVALID.toLowerCase()),\n                meta: {\n                    message: ERROR_MESSAGES.SESSION_INVALID,\n                    httpStatus: 401,\n                },\n            },\n            {\n                code: 'solidx-session-expired',\n                priority: 110,\n                match: (txt) => txt.includes(ERROR_MESSAGES.SESSION_EXPIRED.toLowerCase()),\n                meta: {\n                    message: ERROR_MESSAGES.SESSION_EXPIRED,\n                    httpStatus: 401,\n                },\n            },\n            {\n                code: 'solidx-mcp-server-unavailable',\n                priority: 100,\n                match: (txt) =>\n                    txt.includes('all connection attempts failed') &&\n                    txt.includes('unhandled errors in a taskgroup (1 sub-exception)'),\n                meta: {\n                    message: 'SolidX MCP server is unreachable. Please verify the MCP endpoint.',\n                    httpStatus: 503,\n                },\n            },\n            {\n                code: 'solidx-resource-not-found',\n                priority: 95,\n                match: (txt) => txt.includes('enoent') && txt.includes('no such file or directory'),\n                meta: {\n                    message: ERROR_MESSAGES.RESOURCE_NOT_FOUND,\n                    httpStatus: 404,\n                },\n            },\n            {\n                code: 'solidx-db-duplicate-key',\n                priority: 90,\n                match: (txt) => txt.includes('unique constraint') || txt.includes('duplicate key'),\n                meta: {\n                    message: 'Duplicate key violation. A record with these values already exists.',\n                    httpStatus: 409,\n                },\n            },\n            {\n                code: 'solidx-db-foreign-key-error',\n                priority: 90,\n                match: (txt) => txt.includes('violates foreign key'),\n                meta: {\n                    message:\n                        'Foreign key constraint prevents this operation due to related records.',\n                    httpStatus: 409,\n                },\n            },\n            {\n                code: 'solidx-unknown-error',\n                priority: -1, // last resort\n                match: (_txt) => true, // fallback catch-all\n                meta: {\n                    message: 'An unexpected error occurred.',\n                    httpStatus: 500,\n                },\n            },\n        ];\n    }\n\n    // Optional explicit meta resolution (if you want)\n    resolve(code: string): ErrorMeta | undefined {\n        const rule = this.rules().find((r) => r.code === code);\n        return rule?.meta;\n    }\n}\n"]}
+{"version":3,"file":"solid-core-error-codes-provider.service.js","sourceRoot":"","sources":["../../src/helpers/solid-core-error-codes-provider.service.ts"],"names":[],"mappings":";;;;;;;;;AACA,2CAA4C;AAC5C,gEAA8D;AAC9D,iGAAkF;AAM3E,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IACpC,IAAI;QACA,OAAO,4BAA4B,CAAC;IACxC,CAAC;IAED,KAAK;QACD,OAAO;YACH;gBACI,IAAI,EAAE,wBAAwB;gBAC9B,QAAQ,EAAE,GAAG;gBACb,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,+BAAc,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;gBAC1E,IAAI,EAAE;oBACF,OAAO,EAAE,+BAAc,CAAC,eAAe;oBACvC,UAAU,EAAE,GAAG;iBAClB;aACJ;YACD;gBACI,IAAI,EAAE,wBAAwB;gBAC9B,QAAQ,EAAE,GAAG;gBACb,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,+BAAc,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;gBAC1E,IAAI,EAAE;oBACF,OAAO,EAAE,+BAAc,CAAC,eAAe;oBACvC,UAAU,EAAE,GAAG;iBAClB;aACJ;YAKD;gBACI,IAAI,EAAE,oBAAoB;gBAC1B,QAAQ,EAAE,GAAG;gBACb,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,+BAAc,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;gBACtE,IAAI,EAAE;oBACF,OAAO,EAAE,+BAAc,CAAC,WAAW;oBACnC,UAAU,EAAE,GAAG;iBAClB;aACJ;YACD;gBACI,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ,EAAE,GAAG;gBACb,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,+BAAc,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;gBACvE,IAAI,EAAE;oBACF,OAAO,EAAE,+BAAc,CAAC,YAAY;oBACpC,UAAU,EAAE,GAAG;iBAClB;aACJ;YACD;gBACI,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ,EAAE,GAAG;gBACb,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,+BAAc,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;gBACvE,IAAI,EAAE;oBACF,OAAO,EAAE,+BAAc,CAAC,YAAY;oBACpC,UAAU,EAAE,GAAG;iBAClB;aACJ;YAKD;gBACI,IAAI,EAAE,6BAA6B;gBACnC,QAAQ,EAAE,GAAG;gBACb,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,+BAAc,CAAC,oBAAoB,CAAC,WAAW,EAAE,CAAC;gBAC/E,IAAI,EAAE;oBACF,OAAO,EAAE,+BAAc,CAAC,oBAAoB;oBAC5C,UAAU,EAAE,GAAG;iBAClB;aACJ;YACD;gBACI,IAAI,EAAE,4BAA4B;gBAClC,QAAQ,EAAE,GAAG;gBACb,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,+BAAc,CAAC,mBAAmB,CAAC,WAAW,EAAE,CAAC;gBAC9E,IAAI,EAAE;oBACF,OAAO,EAAE,+BAAc,CAAC,mBAAmB;oBAC3C,UAAU,EAAE,GAAG;iBAClB;aACJ;YACD;gBACI,IAAI,EAAE,+BAA+B;gBACrC,QAAQ,EAAE,GAAG;gBACb,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,GAAG,CAAC,QAAQ,CAAC,gCAAgC,CAAC;oBAC9C,GAAG,CAAC,QAAQ,CAAC,mDAAmD,CAAC;gBACrE,IAAI,EAAE;oBACF,OAAO,EAAE,mEAAmE;oBAC5E,UAAU,EAAE,GAAG;iBAClB;aACJ;YACD;gBACI,IAAI,EAAE,2BAA2B;gBACjC,QAAQ,EAAE,EAAE;gBACZ,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,2BAA2B,CAAC;gBACnF,IAAI,EAAE;oBACF,OAAO,EAAE,+BAAc,CAAC,kBAAkB;oBAC1C,UAAU,EAAE,GAAG;iBAClB;aACJ;YACD;gBACI,IAAI,EAAE,yBAAyB;gBAC/B,QAAQ,EAAE,EAAE;gBACZ,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAClF,IAAI,EAAE;oBACF,OAAO,EAAE,qEAAqE;oBAC9E,UAAU,EAAE,GAAG;iBAClB;aACJ;YACD;gBACI,IAAI,EAAE,6BAA6B;gBACnC,QAAQ,EAAE,EAAE;gBACZ,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC;gBACpD,IAAI,EAAE;oBACF,OAAO,EACH,wEAAwE;oBAC5E,UAAU,EAAE,GAAG;iBAClB;aACJ;YACD;gBACI,IAAI,EAAE,sBAAsB;gBAC5B,QAAQ,EAAE,CAAC,CAAC;gBACZ,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI;gBACrB,IAAI,EAAE;oBACF,OAAO,EAAE,+BAA+B;oBACxC,UAAU,EAAE,GAAG;iBAClB;aACJ;SACJ,CAAC;IACN,CAAC;IAGD,OAAO,CAAC,IAAY;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACvD,OAAO,IAAI,EAAE,IAAI,CAAC;IACtB,CAAC;CACJ,CAAA;AAtIY,kEAA2B;sCAA3B,2BAA2B;IAFvC,IAAA,kDAAiB,GAAE;IACnB,IAAA,mBAAU,GAAE;GACA,2BAA2B,CAsIvC","sourcesContent":["// src/common/errors/providers/solidcore-error-code.provider.ts\nimport { Injectable } from '@nestjs/common';\nimport { ERROR_MESSAGES } from 'src/constants/error-messages';\nimport { ErrorCodeProvider } from 'src/decorators/error-codes-provider.decorator';\nimport { ErrorMeta, ErrorRule, IErrorCodeProvider } from 'src/interfaces';\n\n\n@ErrorCodeProvider()\n@Injectable()\nexport class SolidCoreErrorCodesProvider implements IErrorCodeProvider {\n    name(): string {\n        return 'SolidCoreErrorCodeProvider';\n    }\n\n    rules(): ReadonlyArray<ErrorRule> {\n        return [\n            {\n                code: 'solidx-session-invalid',\n                priority: 110,\n                match: (txt) => txt.includes(ERROR_MESSAGES.SESSION_INVALID.toLowerCase()),\n                meta: {\n                    message: ERROR_MESSAGES.SESSION_INVALID,\n                    httpStatus: 401,\n                },\n            },\n            {\n                code: 'solidx-session-expired',\n                priority: 110,\n                match: (txt) => txt.includes(ERROR_MESSAGES.SESSION_EXPIRED.toLowerCase()),\n                meta: {\n                    message: ERROR_MESSAGES.SESSION_EXPIRED,\n                    httpStatus: 401,\n                },\n            },\n            // MPIN rules sit above the generic session rules so that an MPIN\n            // failure is never reported as a session problem. The three codes\n            // drive three different client behaviours: retry, wait, and\n            // discard-the-handle.\n            {\n                code: 'solidx-mpin-locked',\n                priority: 120,\n                match: (txt) => txt.includes(ERROR_MESSAGES.MPIN_LOCKED.toLowerCase()),\n                meta: {\n                    message: ERROR_MESSAGES.MPIN_LOCKED,\n                    httpStatus: 401,\n                },\n            },\n            {\n                code: 'solidx-mpin-revoked',\n                priority: 120,\n                match: (txt) => txt.includes(ERROR_MESSAGES.MPIN_REVOKED.toLowerCase()),\n                meta: {\n                    message: ERROR_MESSAGES.MPIN_REVOKED,\n                    httpStatus: 401,\n                },\n            },\n            {\n                code: 'solidx-mpin-invalid',\n                priority: 120,\n                match: (txt) => txt.includes(ERROR_MESSAGES.MPIN_INVALID.toLowerCase()),\n                meta: {\n                    message: ERROR_MESSAGES.MPIN_INVALID,\n                    httpStatus: 401,\n                },\n            },\n            // Setup-time rejections. Distinct codes so the client can say\n            // \"choose a less predictable PIN\" rather than parsing a message.\n            // Safe to distinguish: both occur only on bearer-authenticated\n            // routes, so neither discloses anything.\n            {\n                code: 'solidx-mpin-too-predictable',\n                priority: 120,\n                match: (txt) => txt.includes(ERROR_MESSAGES.MPIN_TOO_PREDICTABLE.toLowerCase()),\n                meta: {\n                    message: ERROR_MESSAGES.MPIN_TOO_PREDICTABLE,\n                    httpStatus: 400,\n                },\n            },\n            {\n                code: 'solidx-mpin-format-invalid',\n                priority: 120,\n                match: (txt) => txt.includes(ERROR_MESSAGES.MPIN_FORMAT_INVALID.toLowerCase()),\n                meta: {\n                    message: ERROR_MESSAGES.MPIN_FORMAT_INVALID,\n                    httpStatus: 400,\n                },\n            },\n            {\n                code: 'solidx-mcp-server-unavailable',\n                priority: 100,\n                match: (txt) =>\n                    txt.includes('all connection attempts failed') &&\n                    txt.includes('unhandled errors in a taskgroup (1 sub-exception)'),\n                meta: {\n                    message: 'SolidX MCP server is unreachable. Please verify the MCP endpoint.',\n                    httpStatus: 503,\n                },\n            },\n            {\n                code: 'solidx-resource-not-found',\n                priority: 95,\n                match: (txt) => txt.includes('enoent') && txt.includes('no such file or directory'),\n                meta: {\n                    message: ERROR_MESSAGES.RESOURCE_NOT_FOUND,\n                    httpStatus: 404,\n                },\n            },\n            {\n                code: 'solidx-db-duplicate-key',\n                priority: 90,\n                match: (txt) => txt.includes('unique constraint') || txt.includes('duplicate key'),\n                meta: {\n                    message: 'Duplicate key violation. A record with these values already exists.',\n                    httpStatus: 409,\n                },\n            },\n            {\n                code: 'solidx-db-foreign-key-error',\n                priority: 90,\n                match: (txt) => txt.includes('violates foreign key'),\n                meta: {\n                    message:\n                        'Foreign key constraint prevents this operation due to related records.',\n                    httpStatus: 409,\n                },\n            },\n            {\n                code: 'solidx-unknown-error',\n                priority: -1, // last resort\n                match: (_txt) => true, // fallback catch-all\n                meta: {\n                    message: 'An unexpected error occurred.',\n                    httpStatus: 500,\n                },\n            },\n        ];\n    }\n\n    // Optional explicit meta resolution (if you want)\n    resolve(code: string): ErrorMeta | undefined {\n        const rule = this.rules().find((r) => r.code === code);\n        return rule?.meta;\n    }\n}\n"]}