@solidxai/core 0.1.8-beta.1 → 0.1.8-beta.11

package/dist/subscribers/audit.subscriber.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.subscriber.js","sourceRoot":"","sources":["../../src/subscribers/audit.subscriber.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAA2D;AAC3D,4DAAuD;AACvD,8DAA2D;AAG3D,iFAA6E;AAC7E,4FAAiF;AAG1E,IAAM,eAAe,uBAArB,MAAM,eAAe;IAGxB,YACqB,gBAAqD,EACrD,aAA4B,EAC5B,qBAA4C;QAF5C,qBAAgB,GAAhB,gBAAgB,CAAqC;QACrD,kBAAa,GAAb,aAAa,CAAe;QAC5B,0BAAqB,GAArB,qBAAqB,CAAuB;QALhD,WAAM,GAAG,IAAI,eAAM,CAAC,iBAAe,CAAC,IAAI,CAAC,CAAC;QAcnD,WAAM,GAAG,IAAI,OAAO,EAA4B,CAAC;IARrD,CAAC;IAEL,gBAAgB,CAAC,UAAsB;QACnC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAKO,OAAO,CAAC,KAA2B,EAAE,OAA0B;QACnE,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7B,CAAC;IAEO,gBAAgB,CAAC,QAAwB;QAC7C,OAAO,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAA,0BAAU,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,CAAC;IAEO,YAAY;QAChB,OAAO,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,EAAE,GAAG,IAAI,IAAI,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAuB;QACrC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO;QACnD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;YAChB,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;YAC9B,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI;YAClC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,KAAK,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;YAC3B,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE;SAC9B,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAuB;QACrC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO;QACnD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;YAChB,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;YAC9B,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI;YAClC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,KAAK,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;YAG3B,MAAM,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI;YACpC,kBAAkB,EAAE,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;YACzE,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE;SAC9B,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAuB;QACrC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO;QACnD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;YAChB,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;YAC9B,QAAQ,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,IAAI,IAAI;YAC1C,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,MAAM,EAAE,KAAK,CAAC,cAAc;YAC5B,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE;SAC9B,CAAC,CAAC;IACP,CAAC;IAGD,KAAK,CAAC,sBAAsB,CAAC,KAA2B;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAItC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACpC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAC5F,CAAC;QAEF,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YAC1B,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,qCAAqC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAC9E,MAAM,CAAC,MAAM,CAChB,CAAC;YACN,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IAED,wBAAwB,CAAC,KAA2B;QAEhD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;CACJ,CAAA;AAjGY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,EAAC,EAAC,KAAK,EAAE,cAAK,CAAC,SAAS,EAAC,CAAC;qCAKM,4CAAgB;QACnB,8BAAa;QACL,+CAAqB;GANxD,eAAe,CAiG3B","sourcesContent":["import { Injectable, Logger, Scope } from '@nestjs/common';\nimport { lowerFirst } from 'src/helpers/string.helper';\nimport { SolidRegistry } from 'src/helpers/solid-registry';\nimport { DataSource, EntityMetadata, EntitySubscriberInterface, InsertEvent, RemoveEvent, UpdateEvent } from 'typeorm';\nimport { AuditQueuePayload } from 'src/jobs/rabbitmq/chatter-queue-publisher.service';\nimport { RequestContextService } from 'src/services/request-context.service';\nimport { PublisherFactory } from 'src/services/queues/publisher-factory.service';\n\n@Injectable({scope: Scope.TRANSIENT})\nexport class AuditSubscriber implements EntitySubscriberInterface {\n    private readonly logger = new Logger(AuditSubscriber.name);\n    private dataSource: DataSource;\n    constructor(\n        private readonly publisherFactory: PublisherFactory<AuditQueuePayload>,\n        private readonly solidRegistry: SolidRegistry,\n        private readonly requestContextService: RequestContextService,\n    ) { }\n\n    bindToDataSource(dataSource: DataSource) {\n        this.dataSource = dataSource;\n        this.dataSource.subscribers.push(this);\n    }\n\n    // Per-transaction buffer (auto-GC when queryRunner is gone)\n    private perTxn = new WeakMap<any, AuditQueuePayload[]>();\n\n    private enqueue(event: { queryRunner: any }, payload: AuditQueuePayload) {\n        const qr = event.queryRunner;\n        const arr = this.perTxn.get(qr) ?? [];\n        arr.push(payload);\n        this.perTxn.set(qr, arr);\n    }\n\n    private shouldTrackAudit(metadata: EntityMetadata): boolean {\n        return this.solidRegistry.isAuditableModel(lowerFirst(metadata.name));\n    }\n\n    private activeUserId(): number | null {\n        return this.requestContextService.getActiveUser()?.sub ?? null;\n    }\n\n    async afterInsert(event: InsertEvent<any>) {\n        if (!this.shouldTrackAudit(event.metadata)) return;\n        this.enqueue(event, {\n            eventType: 'insert',\n            modelName: event.metadata.name,\n            entityId: event.entity?.id ?? null,\n            occurredAt: new Date().toISOString(),\n            after: event.entity ?? null,\n            userId: this.activeUserId(),\n        });\n    }\n\n    async afterUpdate(event: UpdateEvent<any>) {\n        if (!this.shouldTrackAudit(event.metadata)) return;\n        this.enqueue(event, {\n            eventType: 'update',\n            modelName: event.metadata.name,\n            entityId: event.entity?.id ?? null,\n            occurredAt: new Date().toISOString(),\n            after: event.entity ?? null,\n            // databaseEntity is only populated when the entity was fetched first (save() path).\n            // QueryBuilder update() leaves this undefined; postAuditMessageOnUpdate guards for it.\n            before: event.databaseEntity ?? null,\n            updatedColumnNames: (event.updatedColumns ?? []).map(c => c.propertyName),\n            userId: this.activeUserId(),\n        });\n    }\n\n    async afterRemove(event: RemoveEvent<any>) {\n        if (!this.shouldTrackAudit(event.metadata)) return;\n        this.enqueue(event, {\n            eventType: 'delete',\n            modelName: event.metadata.name,\n            entityId: event.databaseEntity?.id ?? null,\n            occurredAt: new Date().toISOString(),\n            before: event.databaseEntity,\n            userId: this.activeUserId(),\n        });\n    }\n\n    // --------- transaction lifecycle ----------\n    async afterTransactionCommit(event: { queryRunner: any }) {\n        const batch = this.perTxn.get(event.queryRunner) ?? [];\n        this.perTxn.delete(event.queryRunner);\n\n        // Now outside the DB transaction — safe to publish to the queue.\n        // allSettled: publish in parallel; a single failure does not block the rest.\n        const results = await Promise.allSettled(\n            batch.map(payload => this.publisherFactory.publish({ payload }, 'ChatterQueuePublisher'))\n        );\n\n        results.forEach((result, i) => {\n            if (result.status === 'rejected') {\n                this.logger.error(\n                    `Failed to publish audit event for ${batch[i].modelName}#${batch[i].entityId}`,\n                    result.reason,\n                );\n            }\n        });\n    }\n\n    afterTransactionRollback(event: { queryRunner: any }) {\n        // Drop buffered payloads; the write never happened.\n        this.perTxn.delete(event.queryRunner);\n    }\n}\n"]}
+{"version":3,"file":"audit.subscriber.js","sourceRoot":"","sources":["../../src/subscribers/audit.subscriber.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAA2D;AAC3D,4DAAuD;AACvD,8DAA2D;AAG3D,iFAA6E;AAC7E,4FAAiF;AAG1E,IAAM,eAAe,uBAArB,MAAM,eAAe;IAGxB,YACqB,gBAAqD,EACrD,aAA4B,EAC5B,qBAA4C;QAF5C,qBAAgB,GAAhB,gBAAgB,CAAqC;QACrD,kBAAa,GAAb,aAAa,CAAe;QAC5B,0BAAqB,GAArB,qBAAqB,CAAuB;QALhD,WAAM,GAAG,IAAI,eAAM,CAAC,iBAAe,CAAC,IAAI,CAAC,CAAC;QAcnD,WAAM,GAAG,IAAI,OAAO,EAA4B,CAAC;IARrD,CAAC;IAEL,gBAAgB,CAAC,UAAsB;QACnC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAKO,OAAO,CAAC,KAA2B,EAAE,OAA0B;QACnE,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7B,CAAC;IAEO,gBAAgB,CAAC,QAAwB;QAC7C,OAAO,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAA,0BAAU,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,CAAC;IAEO,YAAY;QAChB,OAAO,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,EAAE,GAAG,IAAI,IAAI,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAuB;QACrC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO;QACnD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;YAChB,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;YAC9B,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI;YAClC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,KAAK,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;YAC3B,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE;SAC9B,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAuB;QACrC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO;QACnD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;YAChB,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;YAC9B,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI;YAClC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,KAAK,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;YAG3B,MAAM,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI;YACpC,kBAAkB,EAAE,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;YACzE,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE;SAC9B,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAuB;QACrC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO;QACnD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;YAChB,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;YAC9B,QAAQ,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,IAAI,IAAI;YAC1C,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,MAAM,EAAE,KAAK,CAAC,cAAc;YAC5B,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE;SAC9B,CAAC,CAAC;IACP,CAAC;IAGD,KAAK,CAAC,sBAAsB,CAAC,KAA2B;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAItC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACpC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAC5F,CAAC;QAEF,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YAC1B,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,qCAAqC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAC9E,MAAM,CAAC,MAAM,CAChB,CAAC;YACN,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IAED,wBAAwB,CAAC,KAA2B;QAEhD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;CACJ,CAAA;AAjGY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,EAAC,EAAC,KAAK,EAAE,cAAK,CAAC,SAAS,EAAC,CAAC;qCAKM,4CAAgB;QACnB,8BAAa;QACL,+CAAqB;GANxD,eAAe,CAiG3B","sourcesContent":["import { Injectable, Logger, Scope } from '@nestjs/common';\nimport { lowerFirst } from 'src/helpers/string.helper';\nimport { SolidRegistry } from 'src/helpers/solid-registry';\nimport { DataSource, EntityMetadata, EntitySubscriberInterface, InsertEvent, RemoveEvent, UpdateEvent } from 'typeorm';\nimport { AuditQueuePayload } from 'src/interfaces';\nimport { RequestContextService } from 'src/services/request-context.service';\nimport { PublisherFactory } from 'src/services/queues/publisher-factory.service';\n\n@Injectable({scope: Scope.TRANSIENT})\nexport class AuditSubscriber implements EntitySubscriberInterface {\n    private readonly logger = new Logger(AuditSubscriber.name);\n    private dataSource: DataSource;\n    constructor(\n        private readonly publisherFactory: PublisherFactory<AuditQueuePayload>,\n        private readonly solidRegistry: SolidRegistry,\n        private readonly requestContextService: RequestContextService,\n    ) { }\n\n    bindToDataSource(dataSource: DataSource) {\n        this.dataSource = dataSource;\n        this.dataSource.subscribers.push(this);\n    }\n\n    // Per-transaction buffer (auto-GC when queryRunner is gone)\n    private perTxn = new WeakMap<any, AuditQueuePayload[]>();\n\n    private enqueue(event: { queryRunner: any }, payload: AuditQueuePayload) {\n        const qr = event.queryRunner;\n        const arr = this.perTxn.get(qr) ?? [];\n        arr.push(payload);\n        this.perTxn.set(qr, arr);\n    }\n\n    private shouldTrackAudit(metadata: EntityMetadata): boolean {\n        return this.solidRegistry.isAuditableModel(lowerFirst(metadata.name));\n    }\n\n    private activeUserId(): number | null {\n        return this.requestContextService.getActiveUser()?.sub ?? null;\n    }\n\n    async afterInsert(event: InsertEvent<any>) {\n        if (!this.shouldTrackAudit(event.metadata)) return;\n        this.enqueue(event, {\n            eventType: 'insert',\n            modelName: event.metadata.name,\n            entityId: event.entity?.id ?? null,\n            occurredAt: new Date().toISOString(),\n            after: event.entity ?? null,\n            userId: this.activeUserId(),\n        });\n    }\n\n    async afterUpdate(event: UpdateEvent<any>) {\n        if (!this.shouldTrackAudit(event.metadata)) return;\n        this.enqueue(event, {\n            eventType: 'update',\n            modelName: event.metadata.name,\n            entityId: event.entity?.id ?? null,\n            occurredAt: new Date().toISOString(),\n            after: event.entity ?? null,\n            // databaseEntity is only populated when the entity was fetched first (save() path).\n            // QueryBuilder update() leaves this undefined; postAuditMessageOnUpdate guards for it.\n            before: event.databaseEntity ?? null,\n            updatedColumnNames: (event.updatedColumns ?? []).map(c => c.propertyName),\n            userId: this.activeUserId(),\n        });\n    }\n\n    async afterRemove(event: RemoveEvent<any>) {\n        if (!this.shouldTrackAudit(event.metadata)) return;\n        this.enqueue(event, {\n            eventType: 'delete',\n            modelName: event.metadata.name,\n            entityId: event.databaseEntity?.id ?? null,\n            occurredAt: new Date().toISOString(),\n            before: event.databaseEntity,\n            userId: this.activeUserId(),\n        });\n    }\n\n    // --------- transaction lifecycle ----------\n    async afterTransactionCommit(event: { queryRunner: any }) {\n        const batch = this.perTxn.get(event.queryRunner) ?? [];\n        this.perTxn.delete(event.queryRunner);\n\n        // Now outside the DB transaction — safe to publish to the queue.\n        // allSettled: publish in parallel; a single failure does not block the rest.\n        const results = await Promise.allSettled(\n            batch.map(payload => this.publisherFactory.publish({ payload }, 'ChatterQueuePublisher'))\n        );\n\n        results.forEach((result, i) => {\n            if (result.status === 'rejected') {\n                this.logger.error(\n                    `Failed to publish audit event for ${batch[i].modelName}#${batch[i].entityId}`,\n                    result.reason,\n                );\n            }\n        });\n    }\n\n    afterTransactionRollback(event: { queryRunner: any }) {\n        // Drop buffered payloads; the write never happened.\n        this.perTxn.delete(event.queryRunner);\n    }\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solidxai/core",
-  "version": "0.1.8-beta.1",
+  "version": "0.1.8-beta.11",
   "description": "This module is a NestJS module containing all the required core providers required by a Solid application",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/controllers/authentication.controller.ts

@@ -1,15 +1,20 @@
-import { Body, Controller, Get, HttpCode, HttpStatus, Logger, Post, Res } from '@nestjs/common';
+import { Body, Controller, Get, HttpCode, HttpStatus, Logger, Param, ParseIntPipe, Patch, Post, Res, Headers } from '@nestjs/common';
 import { ApiBearerAuth, ApiTags } from '@nestjs/swagger';
 import { Response } from 'express';
 import { ActiveUser } from "../decorators/active-user.decorator";
 import { Public } from '../decorators/public.decorator';
 import { ChangePasswordDto } from "../dtos/change-password.dto";
 import { ConfirmForgotPasswordDto } from '../dtos/confirm-forgot-password.dto';
+import { CreateApiKeyDto } from '../dtos/create-api-key.dto';
+import { UpdateApiKeyDto } from '../dtos/update-api-key.dto';
 import { InitiateForgotPasswordDto } from '../dtos/initiate-forgot-password.dto';
 import { RefreshTokenDto } from '../dtos/refresh-token.dto';
+import { SsoExchangeDto } from '../dtos/sso-exchange.dto';
 import { SignInDto } from '../dtos/sign-in.dto';
+import { RegisterPrivateDto } from '../dtos/register-private.dto';
 import { SignUpDto } from '../dtos/sign-up.dto';
 import { ActiveUserData } from "../interfaces/active-user-data.interface";
+import { ApiKeyService } from '../services/api-key.service';
 import { AuthenticationService } from '../services/authentication.service';
 
 
@@ -21,7 +26,10 @@ import { AuthenticationService } from '../services/authentication.service';
 export class AuthenticationController {
     private readonly logger = new Logger(AuthenticationController.name);
 
-    constructor(private readonly authService: AuthenticationService) { }
+    constructor(
+        private readonly authService: AuthenticationService,
+        private readonly apiKeyService: ApiKeyService,
+    ) { }
 
     @Public()
     // @SkipThrottle({ login: false, short: true, burst: true, sustained: true }) //Enable the login throttle only
@@ -32,7 +40,7 @@ export class AuthenticationController {
 
     @ApiBearerAuth("jwt")
     @Post('register-private')
-    signUpPrivate(@Body() signUpDto: SignUpDto, @ActiveUser() activeUser: ActiveUserData) {
+    signUpPrivate(@Body() signUpDto: RegisterPrivateDto, @ActiveUser() activeUser: ActiveUserData) {
         return this.authService.signUp(signUpDto, activeUser);
     }
 
@@ -102,4 +110,52 @@ export class AuthenticationController {
     async logout(@Body('refreshToken') refreshToken: string) {
         return this.authService.logout(refreshToken);
     }
+
+    @ApiBearerAuth("jwt")
+    @Post('api-keys')
+    @HttpCode(HttpStatus.CREATED)
+    generateApiKey(
+        @Body() dto: CreateApiKeyDto,
+        @ActiveUser() activeUser: ActiveUserData,
+    ) {
+        return this.apiKeyService.generate(activeUser.sub, dto);
+    }
+
+    @ApiBearerAuth("jwt")
+    @Post('api-keys/users/:userId')
+    @HttpCode(HttpStatus.CREATED)
+    generateApiKeyForUser(
+        @Param('userId', ParseIntPipe) userId: number,
+        @Body() dto: CreateApiKeyDto,
+    ) {
+        return this.apiKeyService.generate(userId, dto);
+    }
+
+    @ApiBearerAuth("jwt")
+    @Patch('api-keys/:id')
+    @HttpCode(HttpStatus.OK)
+    updateApiKey(
+        @Param('id', ParseIntPipe) id: number,
+        @Body() dto: UpdateApiKeyDto,
+        @ActiveUser() activeUser: ActiveUserData,
+    ) {
+        return this.apiKeyService.updateKey(id, activeUser.sub, dto);
+    }
+
+    @Post('sso/code')
+    @HttpCode(HttpStatus.OK)
+    generateSsoCode(
+        @ActiveUser() activeUser: ActiveUserData,   
+        @Headers('authorization') authorization: string,
+    ) {
+        const rawAccessToken = authorization?.replace(/^Bearer\s+/i, '');
+        return this.authService.generateSsoCode(activeUser, rawAccessToken);
+    }
+
+    @Public()
+    @Post('sso/exchange')
+    @HttpCode(HttpStatus.OK)
+    exchangeSsoCode(@Body() ssoExchangeDto: SsoExchangeDto) {
+        return this.authService.exchangeSsoCode(ssoExchangeDto.code);
+    }
 }

package/src/dtos/create-api-key.dto.ts

@@ -0,0 +1,14 @@
+import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';
+import { IsDateString, IsNotEmpty, IsOptional, IsString } from 'class-validator';
+
+export class CreateApiKeyDto {
+    @ApiProperty({ example: 'Production Server' })
+    @IsString()
+    @IsNotEmpty()
+    name: string;
+
+    @ApiPropertyOptional({ example: '2027-01-01T00:00:00.000Z' })
+    @IsDateString()
+    @IsOptional()
+    expiresAt?: string;
+}

package/src/dtos/post-chatter-message.dto.ts

@@ -16,4 +16,8 @@ export class PostChatterMessageDto {
     @IsString()
     @IsOptional()
     messageSubType?: string;
+
+    @IsString()
+    @IsOptional()
+    modelUserKey?: string;
 }

package/src/dtos/register-private.dto.ts

@@ -1,17 +1,8 @@
-import { IsEmail, IsNotEmpty, IsOptional, MinLength } from 'class-validator';
-
-export class RegisterPrivateDto {
-    @IsNotEmpty()
-    username: string;
-
-    @IsEmail()
-    @IsNotEmpty()
-    email: string;
-
-    @IsOptional()
-    mobile?: string;
+import { IsBoolean, IsOptional } from 'class-validator';
+import { SignUpDto } from './sign-up.dto';
 
+export class RegisterPrivateDto extends SignUpDto {
+    @IsBoolean()
     @IsOptional()
-    @MinLength(10)
-    password?: string;
+    isAllowedToGenerateApiKeys?: boolean;
 }

package/src/dtos/sso-exchange.dto.ts

@@ -0,0 +1,7 @@
+import { IsNotEmpty, IsString } from 'class-validator';
+
+export class SsoExchangeDto {
+    @IsNotEmpty()
+    @IsString()
+    code: string;
+}

package/src/dtos/update-api-key.dto.ts

@@ -0,0 +1,9 @@
+import { ApiProperty } from '@nestjs/swagger';
+import { IsBoolean, IsNotEmpty } from 'class-validator';
+
+export class UpdateApiKeyDto {
+    @ApiProperty({ example: true })
+    @IsBoolean()
+    @IsNotEmpty()
+    isActive: boolean;
+}

package/src/entities/agent-event.entity.ts

@@ -1,88 +1,54 @@
-import { Column, Entity, Index, PrimaryGeneratedColumn } from 'typeorm';
-import { Expose, Exclude } from 'class-transformer';
+import { Column, Entity, Index } from 'typeorm';
+import { CommonEntity } from 'src/entities/common.entity';
+import { getColumnType } from 'src/helpers/typeorm-db-helper';
 
-@Exclude()
-@Entity({ name: 'ss_agent_events', synchronize: false })
-export class AgentEvent {
-  @Expose()
-  @PrimaryGeneratedColumn({ type: 'integer' })
-  id: number;
-
-  @Expose()
+@Entity({ name: 'ss_agent_events' })
+export class AgentEvent extends CommonEntity {
   @Index()
-  @Column({ type: 'varchar', length: 36, name: 'session_id' })
+  @Column({ })
   sessionId: string;
 
-  @Expose()
-  @Column({ type: 'integer', name: 'turn_number' })
+  @Column({ })
   turnNumber: number;
 
-  @Expose()
-  @Column({ type: 'integer', nullable: true, name: 'step_number' })
+  @Column({ nullable: true })
   stepNumber: number;
 
-  @Expose()
   @Index()
-  @Column({ type: 'varchar', length: 64, name: 'event_type' })
+  @Column({ })
   eventType: string;
 
-  @Expose()
-  @Column({ type: 'text', nullable: true, name: 'event_data' })
-  eventData: string;
+  @Column({ type: "simple-json", nullable: true, ...getColumnType('simpleJsonLargeText') })
+  eventData: any;
 
-  @Expose()
-  @Column({ type: 'text', nullable: true, name: 'content' })
+  @Column({ nullable: true, ...getColumnType('longText') })
   content: string;
 
-  @Expose()
   @Index()
-  @Column({ type: 'varchar', length: 128, nullable: true, name: 'tool_name' })
+  @Column({ nullable: true })
   toolName: string;
 
-  @Expose()
-  @Column({ type: 'text', nullable: true, name: 'tool_arguments' })
+  @Column({ type: "simple-json", nullable: true, ...getColumnType('simpleJsonLargeText') })
   toolArguments: string;
 
-  @Expose()
-  @Column({ type: 'text', nullable: true, name: 'tool_output' })
+  @Column({ nullable: true, ...getColumnType('longText') })
   toolOutput: string;
 
-  @Expose()
-  @Column({ type: 'integer', nullable: true, name: 'tool_returncode' })
+  @Column({ nullable: true })
   toolReturncode: number;
 
-  @Expose()
-  @Column({ type: 'double precision', nullable: true, name: 'duration_ms' })
+  @Column({ nullable: true, ...getColumnType('decimal') })
   durationMs: number;
 
-  @Expose()
-  @Column({ type: 'double precision', nullable: true, name: 'cost' })
+  @Column({ nullable: true, ...getColumnType('decimal') })
   cost: number;
 
-  @Expose()
-  @Column({ type: 'integer', nullable: true, name: 'input_tokens' })
+  @Column({ nullable: true })
   inputTokens: number;
 
-  @Expose()
-  @Column({ type: 'integer', nullable: true, name: 'output_tokens' })
+  @Column({ nullable: true })
   outputTokens: number;
 
-  @Expose()
-  @Column({ type: 'varchar', length: 255, nullable: true, name: 'model_used' })
+  @Column({ nullable: true })
   modelUsed: string;
-
-  @Expose()
-  @Column({ type: 'timestamp without time zone', name: 'created_at' })
-  createdAt: Date;
-
-  // The following properties satisfy CRUDService<T extends CommonEntity> structural typing
-  // They are not mapped to DB columns (synchronize: false ensures no schema changes)
-  updatedAt: Date;
-  deletedAt: Date;
-  deletedTracker: string;
-  publishedAt: Date;
-  localeName: string;
-  defaultEntityLocaleId: number;
-  createdBy: number;
-  updatedBy: number;
 }

package/src/entities/agent-session.entity.ts

@@ -1,71 +1,39 @@
-import { Column, Entity, Index, PrimaryGeneratedColumn } from 'typeorm';
-import { Expose, Exclude } from 'class-transformer';
+import { Column, Entity, Index } from 'typeorm';
+import { CommonEntity } from 'src/entities/common.entity';
+import { getColumnType } from 'src/helpers/typeorm-db-helper';
 
-@Exclude()
-@Entity({ name: 'ss_agent_sessions', synchronize: false })
-export class AgentSession {
-  @Expose()
-  @PrimaryGeneratedColumn({ type: 'integer' })
-  id: number;
-
-  @Expose()
+@Entity({ name: 'ss_agent_sessions' })
+export class AgentSession extends CommonEntity {
   @Index({ unique: true })
-  @Column({ type: 'varchar', length: 36, name: 'session_id' })
+  @Column({ })
   sessionId: string;
 
-  @Expose()
   @Index()
-  @Column({ type: 'integer', nullable: true, name: 'user_id' })
+  @Column({ nullable: true })
   userId: number;
 
-  @Expose()
-  @Column({ type: 'text', nullable: true, name: 'project_root' })
+  @Column({ nullable: true, ...getColumnType('longText') })
   projectRoot: string;
 
-  @Expose()
-  @Column({ type: 'varchar', length: 255, name: 'model_name' })
+  @Column({ })
   modelName: string;
 
-  @Expose()
   @Index()
-  @Column({ type: 'varchar', length: 32, name: 'status' })
+  @Column({ })
   status: string;
 
-  @Expose()
-  @Column({ type: 'double precision', name: 'total_cost', default: 0 })
+  @Column({ default: 0, ...getColumnType('decimal') })
   totalCost: number;
 
-  @Expose()
-  @Column({ type: 'integer', name: 'total_steps', default: 0 })
+  @Column({ default: 0 })
   totalSteps: number;
 
-  @Expose()
-  @Column({ type: 'integer', name: 'total_input_tokens', default: 0 })
+  @Column({ default: 0 })
   totalInputTokens: number;
 
-  @Expose()
-  @Column({ type: 'integer', name: 'total_output_tokens', default: 0 })
+  @Column({ default: 0 })
   totalOutputTokens: number;
 
-  @Expose()
-  @Column({ type: 'text', nullable: true, name: 'summary' })
+  @Column({ nullable: true, ...getColumnType('longText') })
   summary: string;
-
-  @Expose()
-  @Column({ type: 'timestamp without time zone', name: 'created_at' })
-  createdAt: Date;
-
-  @Expose()
-  @Column({ type: 'timestamp without time zone', name: 'updated_at' })
-  updatedAt: Date;
-
-  // The following properties satisfy CRUDService<T extends CommonEntity> structural typing
-  // They are not mapped to DB columns (synchronize: false ensures no schema changes)
-  deletedAt: Date;
-  deletedTracker: string;
-  publishedAt: Date;
-  localeName: string;
-  defaultEntityLocaleId: number;
-  createdBy: number;
-  updatedBy: number;
 }

package/src/entities/field-metadata.entity.ts

@@ -119,7 +119,7 @@ export class FieldMetadata extends CommonEntity {
     @Column({ name: 'selection_static_values', nullable: true, type: 'simple-array' })
     selectionStaticValues: string[];
 
-    @Column({ name: 'selection_value_type', nullable: true })
+    @Column({ name: 'selection_value_type', nullable: true, default: 'string' })
     selectionValueType: string = 'string';
 
     // @Column({ name: "computed", default: false })

package/src/entities/legacy-common.entity.ts

@@ -11,30 +11,30 @@ export abstract class LegacyCommonEntity {
     // @Generated("increment")
     // id: number
 
-    @CreateDateColumn({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_created_at`, transformer: LocalDateTimeTransformer })
-    createdAt: Date;
+    @CreateDateColumn({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_created_at`, transformer: LocalDateTimeTransformer, nullable: true })
+    createdAt: Date | null;
 
-    @UpdateDateColumn({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_updated_at`, transformer: LocalDateTimeTransformer })
-    updatedAt: Date;
+    @UpdateDateColumn({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_updated_at`, transformer: LocalDateTimeTransformer, nullable: true })
+    updatedAt: Date | null;
 
-    @DeleteDateColumn({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_deleted_at`, transformer: LocalDateTimeTransformer })
+    @DeleteDateColumn({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_deleted_at`, transformer: LocalDateTimeTransformer, nullable: true })
     @Index()
-    deletedAt: Date;
+    deletedAt: Date | null;
 
-    @Column({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_deleted_tracker`, default: "not-deleted" })
-    deletedTracker: string;
+    @Column({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_deleted_tracker`, default: "not-deleted", nullable: true })
+    deletedTracker: string | null;
 
     @Expose()
     @Column({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_published_at`, default: null, nullable: true, transformer: LocalDateTimeTransformer })
-    publishedAt: Date;
+    publishedAt: Date | null;
 
     @Expose()
-    @Column({ type: "varchar", name: `${LEGACY_TABLE_FIELDS_PREFIX}_locale_name`, default: null })
-    localeName: string;
+    @Column({ type: "varchar", name: `${LEGACY_TABLE_FIELDS_PREFIX}_locale_name`, default: null, nullable: true })
+    localeName: string | null;
 
     @Expose()
-    @Column({ type: "int", name: `${LEGACY_TABLE_FIELDS_PREFIX}_default_entity_locale_id`, default: null })
-    defaultEntityLocaleId: number;
+    @Column({ type: "int", name: `${LEGACY_TABLE_FIELDS_PREFIX}_default_entity_locale_id`, default: null, nullable: true })
+    defaultEntityLocaleId: number | null;
 
     // @Expose()
     // @Type( () => require('./user.entity').User?.default ?? require('./user.entity').User )
@@ -50,9 +50,9 @@ export abstract class LegacyCommonEntity {
 
     @Expose()
     @Column({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_created_by_id`, nullable: true })
-    createdBy: number;
+    createdBy: number | null;
 
     @Expose()
     @Column({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_updated_by_id`, nullable: true })
-    updatedBy: number;
+    updatedBy: number | null;
 }

package/src/entities/setting.entity.ts

@@ -19,6 +19,9 @@ export class Setting extends CommonEntity {
     @Column({ name: "level", type: "varchar", nullable: true })
     level: string;
 
+    @Column({ name: "encrypted", type: "boolean", default: false })
+    encrypted: boolean;
+
     @Index()
     @ManyToOne(() => User, { nullable: true })
     @JoinColumn()

package/src/entities/sms-template.entity.ts

@@ -1,14 +1,15 @@
 import { CommonEntity } from 'src/entities/common.entity';
 import { Column, Entity, Index } from 'typeorm';
+import { getColumnType } from 'src/helpers/typeorm-db-helper';
 
 @Entity("ss_sms_template")
 export class SmsTemplate extends CommonEntity {
     @Index({ unique: true })
-    @Column({ name: "name", type: "varchar"})
+    @Column({ name: "name", type: "varchar" })
     name: string;
     @Column({ name: "display_name", type: "varchar" })
     displayName: string;
-    @Column({ name: "body", type: "varchar", nullable: true })
+    @Column({ name: "body", ...getColumnType('longText'), nullable: true })
     body: string;
     @Column({ type: "varchar", nullable: true })
     smsProviderTemplateId: string;

package/src/entities/user-api-key.entity.ts

@@ -0,0 +1,37 @@
+import { Exclude, Expose } from "class-transformer";
+import { CommonEntity } from "src/entities/common.entity";
+import { Column, Entity, Index, ManyToOne } from "typeorm";
+import { User } from "./user.entity";
+
+@Entity("ss_user_api_key")
+@Exclude()
+export class UserApiKey extends CommonEntity {
+
+    @Expose()
+    @Column()
+    name: string;
+
+    // SHA-256 hash of the raw key — never exposed, same treatment as User.password
+    @Index({ unique: true })
+    @Column()
+    hashedKey: string;
+
+    @Expose()
+    @Column()
+    maskedKey: string;
+
+    @Expose()
+    @Column({ default: true })
+    isActive: boolean;
+
+    @Expose()
+    @Column({ nullable: true })
+    expiresAt: Date;
+
+    @Expose()
+    @Column({ nullable: true })
+    lastUsedAt: Date;
+
+    @ManyToOne(() => User, user => user.apiKeys)
+    user: User;
+}

package/src/entities/user.entity.ts

@@ -2,6 +2,7 @@ import { CommonEntity } from "src/entities/common.entity"
 import { Entity, Column, Index, JoinTable, ManyToMany, OneToMany, TableInheritance } from "typeorm";
 import { RoleMetadata } from 'src/entities/role-metadata.entity';
 import { UserViewMetadata } from 'src/entities/user-view-metadata.entity'
+import { UserApiKey } from 'src/entities/user-api-key.entity'
 import { Exclude, Expose } from "class-transformer";
 
 @Entity("ss_user")
@@ -151,4 +152,11 @@ export class User extends CommonEntity {
     @Expose()
     _media: any;
 
+    @Column({ default: false })
+    @Expose()
+    isAllowedToGenerateApiKeys: boolean = false;
+
+    @OneToMany(() => UserApiKey, key => key.user)
+    apiKeys: UserApiKey[];
+
 }

package/src/enums/auth-type.enum.ts

@@ -1,4 +1,5 @@
 export enum AuthType {
     Bearer,
+    ApiKey,
     None,
 }

package/src/guards/api-key.guard.ts

@@ -0,0 +1,32 @@
+import { CanActivate, ExecutionContext, Injectable, UnauthorizedException } from '@nestjs/common';
+import { Request } from 'express';
+import { REQUEST_USER_KEY } from 'src/constants';
+import { ApiKeyService } from 'src/services/api-key.service';
+import { ClsService } from 'nestjs-cls';
+
+@Injectable()
+export class ApiKeyGuard implements CanActivate {
+    constructor(
+        private readonly apiKeyService: ApiKeyService,
+        private readonly cls: ClsService,
+    ) {}
+
+    async canActivate(context: ExecutionContext): Promise<boolean> {
+        const request = context.switchToHttp().getRequest<Request>();
+        const rawKey = this.extractKeyFromHeader(request);
+
+        if (!rawKey) {
+            throw new UnauthorizedException();
+        }
+
+        const activeUser = await this.apiKeyService.validate(rawKey);
+        request[REQUEST_USER_KEY] = activeUser;
+        this.cls.set(REQUEST_USER_KEY, activeUser);
+
+        return true;
+    }
+
+    private extractKeyFromHeader(request: Request): string | undefined {
+        return request.headers['solidx-api-key'] as string | undefined;
+    }
+}

package/src/guards/authentication.guard.ts

@@ -8,23 +8,26 @@ import { Reflector } from '@nestjs/core';
 import { AUTH_TYPE_KEY } from '../decorators/auth.decorator';
 import { AuthType } from '../enums/auth-type.enum';
 import { AccessTokenGuard } from './access-token.guard';
+import { ApiKeyGuard } from './api-key.guard';
 import { IS_PUBLIC_KEY } from '../decorators/public.decorator';
 import { PermissionMetadataService } from '../services/permission-metadata.service';
 import { ClsService } from 'nestjs-cls';
 
 @Injectable()
 export class AuthenticationGuard implements CanActivate {
-  private static readonly defaultAuthType = AuthType.Bearer;
+  private static readonly defaultAuthTypes = [AuthType.Bearer, AuthType.ApiKey];
   private readonly authTypeGuardMap: Record<
     AuthType,
     CanActivate | CanActivate[]> = {
       [AuthType.Bearer]: this.accessTokenGuard,
+      [AuthType.ApiKey]: this.apiKeyGuard,
       [AuthType.None]: { canActivate: () => true },
     };
 
   constructor(
     private readonly reflector: Reflector,
     private readonly accessTokenGuard: AccessTokenGuard,
+    private readonly apiKeyGuard: ApiKeyGuard,
     private readonly permissionService: PermissionMetadataService,
     private readonly cls: ClsService,
   ) { }
@@ -49,7 +52,7 @@ export class AuthenticationGuard implements CanActivate {
       return true;
     }
 
-    // TODO: Check if this permission viz. contextPermission is listed in the Public role. 
+    // TODO: Check if this permission viz. contextPermission is listed in the Public role.
     const contextPermission = `${context.getClass().name}.${context.getHandler().name}`;
 
     const permissionExistsInRole = await this.permissionService.permissionExistsInRole('Public', contextPermission)
@@ -61,7 +64,7 @@ export class AuthenticationGuard implements CanActivate {
     const authTypes = this.reflector.getAllAndOverride<AuthType[]>(
       AUTH_TYPE_KEY,
       [context.getHandler(), context.getClass()],
-    ) ?? [AuthenticationGuard.defaultAuthType];
+    ) ?? AuthenticationGuard.defaultAuthTypes;
     const guards = authTypes.map((type) => this.authTypeGuardMap[type]).flat();
     let error = new UnauthorizedException();