@ts-typed/nestjs 0.0.1 → 0.1.1

package/CHANGELOG.md

@@ -4,6 +4,27 @@ All notable changes to `@ts-typed/nestjs` are documented in this file.
 
 The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/).
 
+## [0.1.1] - 2026-10-17
+
+### Fixed
+
+- `StrictTypeErrorFilter` kept returning HTTP 400 for a violation on a plain local variable (e.g. `const entity = await repo.findOneBy(...)` reading corrupted data back from a database) because the value flowed through an `initialize`/`set` operation, not `return`/`resolve`. A local variable is never the client-facing surface of a request — client input only ever reaches a protected contract through a `parameter` or a `property` (a DTO's own fields) — so a violation whose `contractKind` is `variable` now also maps to HTTP 500, regardless of its `operation`.
+
+### Changed
+
+- Depends on `@ts-typed/compiler@0.1.1`.
+
+## [0.1.0] - 2026-10-17
+
+### Fixed
+
+- `StrictTypeErrorFilter` returned HTTP 400 for every `StrictTypeError`, including one raised while validating a function or method's own return value (for example, a mapper reading a corrupted row out of the database) — a server-side failure, not a bad request. A violation whose `operation` is `return` or `resolve` now maps to HTTP 500; every other operation (`argument`, `set`, `initialize`, …) keeps the existing 400.
+- The package's `exports` map did not expose `./package.json`, breaking `require.resolve('@ts-typed/nestjs/package.json')` and similar version-probing patterns.
+
+### Changed
+
+- Depends on `@ts-typed/compiler@0.1.0`, whose changelog covers the coverage gaps (class methods/constructors, decorated fields, `Date`) that this package's own tests exercise against a real NestJS app.
+
 ## [0.0.1] - 2026-10-16
 
 Initial release.

package/dist/strict-type-error.filter.d.ts

@@ -2,13 +2,13 @@ import type { ArgumentsHost, ExceptionFilter } from '@nestjs/common';
 import { StrictTypeError } from '@ts-typed/compiler';
 /**
  * Translates a `StrictTypeError` thrown by instrumented code (a DTO/provider
- * field failing validation at a protected boundary) into a 400 Bad Request
- * HTTP response, using `StrictTypeError#toJSON()`'s already-safe payload (no
- * raw received value, no stack). Register it the same way as any other Nest
- * exception filter (`@UseFilters(StrictTypeErrorFilter)` or as a global
- * `APP_FILTER` provider); it does not replace Nest's own validation pipes or
- * instantiate DTOs — it only reacts to an error ts-typed's own instrumented
- * code already threw.
+ * field failing validation at a protected boundary) into an HTTP response,
+ * using `StrictTypeError#toJSON()`'s already-safe payload (no raw received
+ * value, no stack). Register it the same way as any other Nest exception
+ * filter (`@UseFilters(StrictTypeErrorFilter)` or as a global `APP_FILTER`
+ * provider); it does not replace Nest's own validation pipes or instantiate
+ * DTOs — it only reacts to an error ts-typed's own instrumented code already
+ * threw.
  */
 export declare class StrictTypeErrorFilter implements ExceptionFilter {
     catch(exception: StrictTypeError, host: ArgumentsHost): void;

package/dist/strict-type-error.filter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"strict-type-error.filter.d.ts","sourceRoot":"","sources":["../src/strict-type-error.filter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAErE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAOrD;;;;;;;;;GASG;AACH,qBACa,qBAAsB,YAAW,eAAe;IACpD,KAAK,CAAC,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI;CASpE"}
+{"version":3,"file":"strict-type-error.filter.d.ts","sourceRoot":"","sources":["../src/strict-type-error.filter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAErE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AA+BrD;;;;;;;;;GASG;AACH,qBACa,qBAAsB,YAAW,eAAe;IACpD,KAAK,CAAC,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI;CAapE"}

package/dist/strict-type-error.filter.js

@@ -9,24 +9,49 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.StrictTypeErrorFilter = void 0;
 const common_1 = require("@nestjs/common");
 const compiler_1 = require("@ts-typed/compiler");
+/**
+ * A `return`/`resolve` violation means the function or method's OWN body
+ * produced a value that fails its declared return type — e.g. a mapper
+ * reading a corrupted row out of the database. The client did nothing wrong
+ * at that boundary, so it is a server-side failure (500), not a bad request
+ * (400). Every other operation (`argument`, `set`, `initialize`, …) reflects
+ * a value that came from outside the function at that exact validation
+ * point — closer to client-controlled input — and keeps the 400 default.
+ */
+const SERVER_FAULT_OPERATIONS = new Set(['return', 'resolve']);
+/**
+ * A plain local variable (`const entity = await repo.findOneBy(...)`) is
+ * never the client-facing surface of a request: client input only ever
+ * reaches a protected contract through a `parameter` (`@Body()`/`@Param()`
+ * decorated arguments, which use the `argument` operation, never
+ * `variable`) or a `property` (a DTO's own fields). A violation whose
+ * `contractKind` is `variable` is therefore always a server-side data
+ * problem — typically corrupted data read back from a database — even
+ * though its `operation` is `initialize`/`set`, which otherwise means
+ * "value came from outside this function" and defaults to 400.
+ */
+const SERVER_FAULT_CONTRACT_KINDS = new Set(['variable']);
 /**
  * Translates a `StrictTypeError` thrown by instrumented code (a DTO/provider
- * field failing validation at a protected boundary) into a 400 Bad Request
- * HTTP response, using `StrictTypeError#toJSON()`'s already-safe payload (no
- * raw received value, no stack). Register it the same way as any other Nest
- * exception filter (`@UseFilters(StrictTypeErrorFilter)` or as a global
- * `APP_FILTER` provider); it does not replace Nest's own validation pipes or
- * instantiate DTOs — it only reacts to an error ts-typed's own instrumented
- * code already threw.
+ * field failing validation at a protected boundary) into an HTTP response,
+ * using `StrictTypeError#toJSON()`'s already-safe payload (no raw received
+ * value, no stack). Register it the same way as any other Nest exception
+ * filter (`@UseFilters(StrictTypeErrorFilter)` or as a global `APP_FILTER`
+ * provider); it does not replace Nest's own validation pipes or instantiate
+ * DTOs — it only reacts to an error ts-typed's own instrumented code already
+ * threw.
  */
 let StrictTypeErrorFilter = class StrictTypeErrorFilter {
     catch(exception, host) {
         const response = host.switchToHttp().getResponse();
+        const isServerFault = SERVER_FAULT_OPERATIONS.has(exception.operation) ||
+            SERVER_FAULT_CONTRACT_KINDS.has(exception.contractKind);
+        const status = isServerFault ? common_1.HttpStatus.INTERNAL_SERVER_ERROR : common_1.HttpStatus.BAD_REQUEST;
         const httpException = new common_1.HttpException({
-            statusCode: common_1.HttpStatus.BAD_REQUEST,
+            statusCode: status,
             message: exception.message,
             ...exception.toJSON(),
-        }, common_1.HttpStatus.BAD_REQUEST);
+        }, status);
         response.status(httpException.getStatus()).json(httpException.getResponse());
     }
 };

package/dist/strict-type-error.filter.js.map

@@ -1 +1 @@
-{"version":3,"file":"strict-type-error.filter.js","sourceRoot":"","sources":["../src/strict-type-error.filter.ts"],"names":[],"mappings":";;;;;;;;;AACA,2CAAkE;AAClE,iDAAqD;AAOrD;;;;;;;;;GASG;AAEI,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IACzB,KAAK,CAAC,SAA0B,EAAE,IAAmB;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,WAAW,EAAuB,CAAC;QACxE,MAAM,aAAa,GAAG,IAAI,sBAAa,CAAC;YACtC,UAAU,EAAE,mBAAU,CAAC,WAAW;YAClC,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,GAAG,SAAS,CAAC,MAAM,EAAE;SACtB,EAAE,mBAAU,CAAC,WAAW,CAAC,CAAC;QAC3B,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/E,CAAC;CACF,CAAA;AAVY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,cAAK,EAAC,0BAAe,CAAC;GACV,qBAAqB,CAUjC"}
+{"version":3,"file":"strict-type-error.filter.js","sourceRoot":"","sources":["../src/strict-type-error.filter.ts"],"names":[],"mappings":";;;;;;;;;AACA,2CAAkE;AAClE,iDAAqD;AAOrD;;;;;;;;GAQG;AACH,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAEpF;;;;;;;;;;GAUG;AACH,MAAM,2BAA2B,GAAwB,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AAE/E;;;;;;;;;GASG;AAEI,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IACzB,KAAK,CAAC,SAA0B,EAAE,IAAmB;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,WAAW,EAAuB,CAAC;QACxE,MAAM,aAAa,GACjB,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;YAChD,2BAA2B,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,mBAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC,mBAAU,CAAC,WAAW,CAAC;QACzF,MAAM,aAAa,GAAG,IAAI,sBAAa,CAAC;YACtC,UAAU,EAAE,MAAM;YAClB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,GAAG,SAAS,CAAC,MAAM,EAAE;SACtB,EAAE,MAAM,CAAC,CAAC;QACX,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/E,CAAC;CACF,CAAA;AAdY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,cAAK,EAAC,0BAAe,CAAC;GACV,qBAAqB,CAcjC"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@ts-typed/nestjs",
-    "version": "0.0.1",
+    "version": "0.1.1",
     "private": false,
     "publishConfig": {
         "access": "public"
@@ -17,7 +17,8 @@
             "types": "./dist/index.d.ts",
             "require": "./dist/index.js",
             "default": "./dist/index.js"
-        }
+        },
+        "./package.json": "./package.json"
     },
     "files": [
         "dist",
@@ -32,7 +33,7 @@
         "test": "npm run build && node --test --test-concurrency=1"
     },
     "dependencies": {
-        "@ts-typed/compiler": "0.0.1"
+        "@ts-typed/compiler": "0.1.1"
     },
     "peerDependencies": {
         "@nestjs/common": ">=10 <13",