@ts-typed/nestjs 0.1.0 → 0.1.2

package/CHANGELOG.md

@@ -4,6 +4,22 @@ All notable changes to `@ts-typed/nestjs` are documented in this file.
 
 The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/).
 
+## [0.1.2] - 2026-10-17
+
+### Changed
+
+- Depends on `@ts-typed/compiler@0.1.2`, which fixes a severe regression 0.1.1 introduced (a readonly field with `?`/`!` locked immediately, breaking class-transformer-built DTOs) and adds `static` field and `Map`/`Set` support. No code changes in this package itself; this bump keeps both packages pinned to compatible, non-duplicated versions of `StrictTypeError` (an exact-pinned transitive dependency on a different compiler version than the app's own direct dependency would create two separate `StrictTypeError` classes, breaking `instanceof` checks across the package boundary).
+
+## [0.1.1] - 2026-10-17
+
+### Fixed
+
+- `StrictTypeErrorFilter` kept returning HTTP 400 for a violation on a plain local variable (e.g. `const entity = await repo.findOneBy(...)` reading corrupted data back from a database) because the value flowed through an `initialize`/`set` operation, not `return`/`resolve`. A local variable is never the client-facing surface of a request — client input only ever reaches a protected contract through a `parameter` or a `property` (a DTO's own fields) — so a violation whose `contractKind` is `variable` now also maps to HTTP 500, regardless of its `operation`.
+
+### Changed
+
+- Depends on `@ts-typed/compiler@0.1.1`.
+
 ## [0.1.0] - 2026-10-17
 
 ### Fixed

package/dist/strict-type-error.filter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"strict-type-error.filter.d.ts","sourceRoot":"","sources":["../src/strict-type-error.filter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAErE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAkBrD;;;;;;;;;GASG;AACH,qBACa,qBAAsB,YAAW,eAAe;IACpD,KAAK,CAAC,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI;CAYpE"}
+{"version":3,"file":"strict-type-error.filter.d.ts","sourceRoot":"","sources":["../src/strict-type-error.filter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAErE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AA+BrD;;;;;;;;;GASG;AACH,qBACa,qBAAsB,YAAW,eAAe;IACpD,KAAK,CAAC,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI;CAapE"}

package/dist/strict-type-error.filter.js

@@ -19,6 +19,18 @@ const compiler_1 = require("@ts-typed/compiler");
  * point — closer to client-controlled input — and keeps the 400 default.
  */
 const SERVER_FAULT_OPERATIONS = new Set(['return', 'resolve']);
+/**
+ * A plain local variable (`const entity = await repo.findOneBy(...)`) is
+ * never the client-facing surface of a request: client input only ever
+ * reaches a protected contract through a `parameter` (`@Body()`/`@Param()`
+ * decorated arguments, which use the `argument` operation, never
+ * `variable`) or a `property` (a DTO's own fields). A violation whose
+ * `contractKind` is `variable` is therefore always a server-side data
+ * problem — typically corrupted data read back from a database — even
+ * though its `operation` is `initialize`/`set`, which otherwise means
+ * "value came from outside this function" and defaults to 400.
+ */
+const SERVER_FAULT_CONTRACT_KINDS = new Set(['variable']);
 /**
  * Translates a `StrictTypeError` thrown by instrumented code (a DTO/provider
  * field failing validation at a protected boundary) into an HTTP response,
@@ -32,9 +44,9 @@ const SERVER_FAULT_OPERATIONS = new Set(['return', 'resolve']);
 let StrictTypeErrorFilter = class StrictTypeErrorFilter {
     catch(exception, host) {
         const response = host.switchToHttp().getResponse();
-        const status = SERVER_FAULT_OPERATIONS.has(exception.operation)
-            ? common_1.HttpStatus.INTERNAL_SERVER_ERROR
-            : common_1.HttpStatus.BAD_REQUEST;
+        const isServerFault = SERVER_FAULT_OPERATIONS.has(exception.operation) ||
+            SERVER_FAULT_CONTRACT_KINDS.has(exception.contractKind);
+        const status = isServerFault ? common_1.HttpStatus.INTERNAL_SERVER_ERROR : common_1.HttpStatus.BAD_REQUEST;
         const httpException = new common_1.HttpException({
             statusCode: status,
             message: exception.message,

package/dist/strict-type-error.filter.js.map

@@ -1 +1 @@
-{"version":3,"file":"strict-type-error.filter.js","sourceRoot":"","sources":["../src/strict-type-error.filter.ts"],"names":[],"mappings":";;;;;;;;;AACA,2CAAkE;AAClE,iDAAqD;AAOrD;;;;;;;;GAQG;AACH,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAEpF;;;;;;;;;GASG;AAEI,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IACzB,KAAK,CAAC,SAA0B,EAAE,IAAmB;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,WAAW,EAAuB,CAAC;QACxE,MAAM,MAAM,GAAG,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;YAC7D,CAAC,CAAC,mBAAU,CAAC,qBAAqB;YAClC,CAAC,CAAC,mBAAU,CAAC,WAAW,CAAC;QAC3B,MAAM,aAAa,GAAG,IAAI,sBAAa,CAAC;YACtC,UAAU,EAAE,MAAM;YAClB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,GAAG,SAAS,CAAC,MAAM,EAAE;SACtB,EAAE,MAAM,CAAC,CAAC;QACX,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/E,CAAC;CACF,CAAA;AAbY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,cAAK,EAAC,0BAAe,CAAC;GACV,qBAAqB,CAajC"}
+{"version":3,"file":"strict-type-error.filter.js","sourceRoot":"","sources":["../src/strict-type-error.filter.ts"],"names":[],"mappings":";;;;;;;;;AACA,2CAAkE;AAClE,iDAAqD;AAOrD;;;;;;;;GAQG;AACH,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAEpF;;;;;;;;;;GAUG;AACH,MAAM,2BAA2B,GAAwB,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AAE/E;;;;;;;;;GASG;AAEI,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IACzB,KAAK,CAAC,SAA0B,EAAE,IAAmB;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,WAAW,EAAuB,CAAC;QACxE,MAAM,aAAa,GACjB,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;YAChD,2BAA2B,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,mBAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC,mBAAU,CAAC,WAAW,CAAC;QACzF,MAAM,aAAa,GAAG,IAAI,sBAAa,CAAC;YACtC,UAAU,EAAE,MAAM;YAClB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,GAAG,SAAS,CAAC,MAAM,EAAE;SACtB,EAAE,MAAM,CAAC,CAAC;QACX,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/E,CAAC;CACF,CAAA;AAdY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,cAAK,EAAC,0BAAe,CAAC;GACV,qBAAqB,CAcjC"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@ts-typed/nestjs",
-    "version": "0.1.0",
+    "version": "0.1.2",
     "private": false,
     "publishConfig": {
         "access": "public"
@@ -33,7 +33,7 @@
         "test": "npm run build && node --test --test-concurrency=1"
     },
     "dependencies": {
-        "@ts-typed/compiler": "0.1.0"
+        "@ts-typed/compiler": "0.1.2"
     },
     "peerDependencies": {
         "@nestjs/common": ">=10 <13",