@venizia/ignis-kernel 0.4.1 → 0.4.2

package/dist/cjs/base/repositories/core/abstract.js.map

@@ -1 +1 @@
-{"version":3,"file":"abstract.js","sourceRoot":"","sources":["../../../../../src/base/repositories/core/abstract.ts"],"names":[],"mappings":";;;AAGA,mDAAuD;AAEvD,sDAAmE;AACnE,0DAA6D;AAC7D,sDAAoG;AAYpG,sGAAsG;AACtG,sFAAsF;AACtF,mDAI6B;AAU7B;;;;GAIG;AACH,MAAsB,kBAKpB,SAAQ,iBAAU;IAiBlB,YACE,UAA+B,EAC/B,IAIC;QAED,MAAM,SAAS,GACb,IAAI,EAAE,KAAK;YACX,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE/F,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAlB9B;;;WAGG;QACK,mBAAc,GAAsC,IAAI,CAAC;QAgB/D,IAAI,CAAC,eAAe,GAAG,IAAI,EAAE,cAAc,IAAI,qCAAyB,CAAC,SAAS,CAAC;QAEnF,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;QAChC,CAAC;QAED,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,OAAO,GAAG,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,CAAC;IACH,CAAC;IAED,IAAI,UAAU;QACZ,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,kIAAkI;aACrK,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,IAAI,UAAU,CAAC,KAAyB;QACtC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,qEAAqE;IACrE,IAAI,MAAM;QACR,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAI,MAAM,CAAC,KAAqB;QAC9B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,aAAa,CAAC,IAAwC;QACpD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC;IACrC,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,IAAc,aAAa;QACzB,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,cAAc,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,4BAAgB,CAAC,WAAW,EAAE,CAAC,gBAAgB,CAAC;YACpE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;SAChC,CAAC,EAAE,QAAQ,CAAC;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,IAAc,YAAY;QACxB,OAAO,IAAI,CAAC,aAAa,EAAE,gBAAgB,IAAI,EAAE,CAAC;IACpD,CAAC;IAED,0GAA0G;IAC1G,IAAc,YAAY;QACxB,OAAO,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC;IAClD,CAAC;IAED,IAAc,YAAY;QACxB,OAAO,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC;IAC1C,CAAC;IAED,2HAA2H;IAC3H,IAAc,QAAQ;QACpB,OAAO,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC;IACtC,CAAC;IAED;;;;;;;;;;;OAWG;IACO,wBAAwB,CAAC,IAAwC;QACzE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;QAEvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,8DAA8D;QAC9D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,KAAK,8DAA8D,KAAK,EAAE;aAClH,CAAC,CAAC;QACL,CAAC;QAED,wFAAwF;QACxF,+FAA+F;QAC/F,+FAA+F;QAC/F,gGAAgG;QAChG,gFAAgF;QAChF,MAAM,eAAe,GAAG,OAAO,CAC7B,4BAAgB,CAAC,WAAW,EAAE,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,KAAK,CACzF,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,6BAAiB,CAAC;QAEnF,IAAI,KAAK,GAAG,OAAO,EAAE,CAAC;YACpB,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,KAAK,4DAA4D,KAAK,eAAe,OAAO,gFAAgF;aACpN,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACO,kBAAkB,CAAC,IAA0C;QACrE,MAAM,EAAE,MAAM,EAAE,KAAK,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;QAExC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QAED,IAAI,CAAC,wBAAwB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAE9D,MAAM,IAAI,GAAG,CAAC,UAAoC,EAAE,IAAY,EAAQ,EAAE;YACxE,MAAM,cAAc,GAAG,UAAU,IAAI,EAAE,CAAC;YACxC,KAAK,MAAM,SAAS,IAAI,cAAc,EAAE,CAAC;gBACvC,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC;gBACtC,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,SAAS;gBACX,CAAC;gBAED,MAAM,YAAY,GAAG,GAAG,IAAI,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACrD,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,CAAC;gBAE1C,IACE,aAAa,KAAK,SAAS;oBAC3B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,CAAC,EACvD,CAAC;oBACD,MAAM,IAAA,eAAQ,EAAC;wBACb,OAAO,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,KAAK,mDAAmD,YAAY,6CAA6C,aAAa,EAAE;qBACxK,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,8EAA8E;IACpE,aAAa;QACrB,MAAM,QAAQ,GAAG,4BAAgB,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAE5E,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YACpB,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,iHAAiH;aACpJ,CAAC,CAAC;QACL,CAAC;QAED,4FAA4F;QAC5F,oFAAoF;QACpF,MAAM,UAAU,GAAG,IAAA,qBAAY,EAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAA2B,CAAC;QACpF,OAAO,IAAI,UAAU,EAAE,CAAC;IAC1B,CAAC;IAED,kEAAkE;IACxD,aAAa,CAAC,IAA4B;QAClD,MAAM,IAAA,eAAQ,EAAC;YACb,WAAW,EAAE,gCAAoB,CAAC,qBAAqB;YACvD,OAAO,EAAE,IAAI,IAAI,CAAC,UAAU,kDAAkD,IAAI,CAAC,cAAc,EAAE;SACpG,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACO,oBAAoB,CAAU,IAKvC;QACC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QAE7D,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QAED,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC1E,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QAED,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;QAE1E,OAAO,kBAAW,CAAC,qBAAqB,CAAU;YAChD,SAAS,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YACvD,SAAS;YACT,KAAK,EAAE,KAAK,IAAI,YAAY;YAC5B,WAAW;YACX,UAAU;YACV,MAAM;YACN,OAAO,EAAE,OAAO,IAAI;gBAClB,QAAQ,EAAE,6BAAsB,CAAC,WAAW;gBAC5C,cAAc,EAAE,EAAE;gBAClB,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,uBAAgB,CAAC,KAAK;aAC/B;YACD,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,aAAa,CACnB,OAAqB;QAErB,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8HAA8H;IACpH,SAAS,CAAkB,IAGpC;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEjD,OAAO,IAAI,CAAC,oBAAoB,CAAW;YACzC,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAC3C,gGAAgG;YAChG,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAsB;SACrF,CAAC,CAAC;IACL,CAAC;IAED,4KAA4K;IAClK,cAAc,CAAkB,IAGzC;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEjD,OAAO,IAAI,CAAC,oBAAoB,CAAoB;YAClD,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YAChD,SAAS,EAAE,GAAG,EAAE,CACd,IAAI,CAAC,IAAI,CAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAA0C;SAC1F,CAAC,CAAC;IACL,CAAC;IAED,kHAAkH;IACxG,YAAY,CAAkB,IAGvC;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEjD,OAAO,IAAI,CAAC,oBAAoB,CAAe;YAC7C,SAAS,EAAE,SAAS;YACpB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;YACjE,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAA0B;SAC5F,CAAC,CAAC;IACL,CAAC;IAqFD,QAAQ,CAAkB,IAIzB;QACC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QAEtC,IAAI,OAAO,EAAE,YAAY,KAAK,KAAK,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACrD,CAAC;IA+BD,QAAQ,CAAkB,IAGzB;QACC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QAEhC,IAAI,OAAO,EAAE,YAAY,KAAK,KAAK,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC;CACF;AArdD,gDAqdC","sourcesContent":["import type { AbstractDataSource } from '@/base/datasources';\nimport type { AbstractEntity, IdType } from '@/base/models';\nimport type { IModelMetadata } from '@/helpers/inversion';\nimport { MetadataRegistry } from '@/helpers/inversion';\nimport type { TClass, TNullable } from '@venizia/ignis-helpers/common';\nimport { BaseHelper, getError } from '@venizia/ignis-helpers/core';\nimport { resolveValue } from '@venizia/ignis-helpers/common';\nimport { RetryBackoffStrategies, RetryHelper, RetryJitterModes } from '@venizia/ignis-helpers/core';\nimport type {\n  IExtraOptions,\n  IPersistableRepository,\n  IWithReadRetry,\n  TCount,\n  TDataWithRange,\n  TFindOneOptions,\n  TFindOptions,\n  TFindRangeOptions,\n  TRepositoryOperationScope,\n} from '../common';\n// The file, not the `../common` barrel: the barrel re-exports the OpenAPI schemas, and this module is\n// on the `./repository` entry, which must load without `@hono/zod-openapi` installed.\nimport {\n  DEFAULT_MAX_LIMIT,\n  RepositoryErrorCodes,\n  RepositoryOperationScopes,\n} from '../common/constants';\nimport type {\n  TByIdFilter,\n  TFields,\n  TFilter,\n  TInclusion,\n  TRow,\n  TWhere,\n} from '@venizia/ignis-filter';\n\n/**\n * Engine-neutral repository plumbing - lazy dataSource/entity resolution, class-keyed `@model`\n * settings, operation scope. `TOptions` defaults to `IExtraOptions` so connectors can narrow it\n * while staying assignable to this base.\n */\nexport abstract class AbstractRepository<\n  TDataObject extends object,\n  TPersistObject extends object = TDataObject,\n  TOptions extends IExtraOptions = IExtraOptions,\n>\n  extends BaseHelper\n  implements IPersistableRepository<TDataObject, TPersistObject, TOptions>\n{\n  protected _operationScope: TRepositoryOperationScope;\n\n  /** Lazy-resolved on first access if not provided in constructor. */\n  protected _dataSource?: AbstractDataSource;\n\n  /** Lazy-resolved from @repository metadata on first access. */\n  protected _entity?: AbstractEntity;\n\n  /**\n   * Memoized @model settings for `this.entity`'s class. `null` means not yet resolved - `undefined`\n   * is itself a valid resolved value: the model declares no settings.\n   */\n  private _modelSettings: IModelMetadata['settings'] | null = null;\n\n  constructor(\n    dataSource?: AbstractDataSource,\n    opts?: {\n      scope?: string;\n      entityClass?: TClass<AbstractEntity>;\n      operationScope?: TRepositoryOperationScope;\n    },\n  ) {\n    const scopeName =\n      opts?.scope ??\n      (opts?.entityClass?.name ? [opts.entityClass.name, 'Repository'].join('') : new.target.name);\n\n    super({ scope: scopeName });\n\n    this._operationScope = opts?.operationScope ?? RepositoryOperationScopes.READ_ONLY;\n\n    if (dataSource) {\n      this._dataSource = dataSource;\n    }\n\n    if (opts?.entityClass) {\n      this._entity = new opts.entityClass();\n    }\n  }\n\n  get dataSource(): AbstractDataSource {\n    if (!this._dataSource) {\n      throw getError({\n        message: `[${this.constructor.name}] DataSource not available. Use @repository({ model: YourModel, dataSource: YourDataSource }) or pass dataSource in constructor.`,\n      });\n    }\n\n    return this._dataSource;\n  }\n\n  set dataSource(value: AbstractDataSource) {\n    this._dataSource = value;\n  }\n\n  /** Auto-resolves from @repository metadata if not explicitly set. */\n  get entity(): AbstractEntity {\n    this._entity ??= this.resolveEntity();\n    return this._entity;\n  }\n\n  set entity(value: AbstractEntity) {\n    this._entity = value;\n  }\n\n  get operationScope(): TRepositoryOperationScope {\n    return this._operationScope;\n  }\n\n  setDataSource(opts: { dataSource: AbstractDataSource }): void {\n    this._dataSource = opts.dataSource;\n  }\n\n  getEntity(): AbstractEntity {\n    return this.entity;\n  }\n\n  /**\n   * Resolved `@model` settings for `this.entity`'s class, keyed by Reflect target - not by\n   * `entity.name`, which can diverge from the `@model` registry key.\n   */\n  protected get modelSettings(): IModelMetadata['settings'] {\n    if (this._modelSettings !== null) {\n      return this._modelSettings;\n    }\n\n    this._modelSettings = MetadataRegistry.getInstance().getModelMetadata({\n      target: this.entity.constructor,\n    })?.settings;\n\n    return this._modelSettings;\n  }\n\n  protected get hiddenFields(): string[] {\n    return this.modelSettings?.hiddenProperties ?? [];\n  }\n\n  /** Default where from @model settings.defaultFilter.where, AND-merged into every query unless skipped. */\n  protected get defaultWhere(): TWhere | undefined {\n    return this.modelSettings?.defaultFilter?.where;\n  }\n\n  protected get defaultLimit(): number | undefined {\n    return this.modelSettings?.defaultLimit;\n  }\n\n  /** Largest `limit` a caller may ask for, when the model declares one; undefined leaves the tier's own default in force. */\n  protected get maxLimit(): number | undefined {\n    return this.modelSettings?.maxLimit;\n  }\n\n  /**\n   * Both bounds, in one place, for every tier.\n   *\n   * The upper bound is the point: `@model({ settings: { maxLimit } })` is public and validated at\n   * decoration time, but the relational tier read it nowhere, so `maxLimit: 2` still issued\n   * `LIMIT 50000000`.\n   *\n   * The lower bound matters just as much and is easy to miss: a NEGATIVE limit is not a smaller\n   * page. Drizzle renders the LIMIT clause only when the value is `>= 0`, so a negative one removes\n   * the clause and returns the whole table. The wire schema now rejects it too, but a server-side\n   * caller reaches this method without passing through the schema at all.\n   */\n  protected assertLimitWithinCeiling(opts: { limit?: number; scope?: string }): void {\n    const { limit, scope = 'find' } = opts;\n\n    if (limit === undefined) {\n      return;\n    }\n\n    // The shape check first, because it needs no metadata at all.\n    if (!Number.isInteger(limit) || limit < 0) {\n      throw getError({\n        message: `[${this.constructor.name}][${scope}] Invalid 'limit' | Expected a non-negative integer | Got: ${limit}`,\n      });\n    }\n\n    // `maxLimit` reaches `modelSettings`, which resolves the entity - and THAT throws for a\n    // repository with no `@repository` model binding. Such a repository is a misconfiguration this\n    // method has no business reporting, and the caller path that used to reach `getDefaultLimit()`\n    // never touched it either, because `??` short-circuits when a limit is given. So the ceiling is\n    // consulted only when the binding that makes it resolvable is actually present.\n    const hasModelBinding = Boolean(\n      MetadataRegistry.getInstance().getRepositoryBinding({ target: this.constructor })?.model,\n    );\n    const ceiling = (hasModelBinding ? this.maxLimit : undefined) ?? DEFAULT_MAX_LIMIT;\n\n    if (limit > ceiling) {\n      throw getError({\n        message: `[${this.constructor.name}][${scope}] Requested page exceeds this model's limit | requested: ${limit} | maximum: ${ceiling} | raise it with @model settings.maxLimit if larger pages are genuinely needed`,\n      });\n    }\n  }\n\n  /**\n   * The whole filter, relations included. Checking only the top-level `limit` left the identical\n   * defect reachable one level down: a relation scope's negative limit drops Drizzle's LIMIT clause\n   * for that relation and loads the entire related table.\n   *\n   * A relation's limit gets the SHAPE check only, not a ceiling. The ceiling belongs to the\n   * relation's own model, which this repository cannot resolve - claiming otherwise would enforce\n   * the parent's `maxLimit` on a different entity.\n   */\n  protected assertFilterLimits(opts: { filter?: TFilter; scope?: string }): void {\n    const { filter, scope = 'find' } = opts;\n\n    if (!filter) {\n      return;\n    }\n\n    this.assertLimitWithinCeiling({ limit: filter.limit, scope });\n\n    const walk = (inclusions: TInclusion[] | undefined, path: string): void => {\n      const inclusionsList = inclusions ?? [];\n      for (const inclusion of inclusionsList) {\n        const relationScope = inclusion.scope;\n        if (!relationScope) {\n          continue;\n        }\n\n        const relationPath = `${path}.${inclusion.relation}`;\n        const relationLimit = relationScope.limit;\n\n        if (\n          relationLimit !== undefined &&\n          (!Number.isInteger(relationLimit) || relationLimit < 0)\n        ) {\n          throw getError({\n            message: `[${this.constructor.name}][${scope}] Invalid 'limit' on relation scope | relation: ${relationPath} | Expected a non-negative integer | Got: ${relationLimit}`,\n          });\n        }\n\n        walk(relationScope.include, relationPath);\n      }\n    };\n\n    walk(filter.include, scope);\n  }\n\n  /** Resolves the entity instance from @repository metadata on first access. */\n  protected resolveEntity(): AbstractEntity {\n    const registry = MetadataRegistry.getInstance();\n    const binding = registry.getRepositoryBinding({ target: this.constructor });\n\n    if (!binding?.model) {\n      throw getError({\n        message: `[${this.constructor.name}] Cannot resolve entity. Either pass entityClass in constructor or use @repository decorator with model option.`,\n      });\n    }\n\n    // resolveValue() erases to the resolved value's structural type, not this class-or-resolver\n    // union's member - the `@repository` decorator guarantees a class constructor here.\n    const ModelClass = resolveValue({ value: binding.model }) as TClass<AbstractEntity>;\n    return new ModelClass();\n  }\n\n  /** Rejects a verb the current operation scope does not permit. */\n  protected denyOperation(opts: { methodName: string }): never {\n    throw getError({\n      messageCode: RepositoryErrorCodes.OPERATION_NOT_ALLOWED,\n      message: `[${opts.methodName}] Repository operation is NOT ALLOWED | scope: ${this.operationScope}`,\n    });\n  }\n\n  /**\n   * Shared retry orchestration for read verbs. Inside a transaction retry is skipped - the pool\n   * routes transactions to the primary, so there is no replica lag to wait out.\n   */\n  protected executeReadWithRetry<TResult>(opts: {\n    operation: string;\n    options: IExtraOptions & IWithReadRetry<TResult>;\n    defaultUntil: (result: TResult) => boolean;\n    execution: () => Promise<TResult>;\n  }): Promise<TResult> {\n    const { operation, options, defaultUntil, execution } = opts;\n\n    if (!options.retry) {\n      return execution();\n    }\n\n    if (options.transaction) {\n      this.logger.for(operation).debug('Read retry skipped inside transaction');\n      return execution();\n    }\n\n    const { maxAttempts, maxTotalMs, signal, backoff, until } = options.retry;\n\n    return RetryHelper.executeWithRetryUntil<TResult>({\n      operation: [this.constructor.name, operation].join('.'),\n      execution,\n      until: until ?? defaultUntil,\n      maxAttempts,\n      maxTotalMs,\n      signal,\n      backoff: backoff ?? {\n        strategy: RetryBackoffStrategies.EXPONENTIAL,\n        initialDelayMs: 50,\n        maxDelayMs: 500,\n        jitter: RetryJitterModes.EQUAL,\n      },\n      logger: this.logger,\n    });\n  }\n\n  /**\n   * A copy of `options` without `retry`, so re-entering a read verb takes its non-retry path - this\n   * is what keeps the retry recursion single-depth. Copy-then-delete rather than a rest-destructure\n   * (lint rejects the unused rest sibling) or `lodash/omit` (its `Omit<>` return type is not\n   * assignable back to `TOptions`).\n   */\n  private omitReadRetry<TReadOptions extends { retry?: unknown }>(\n    options: TReadOptions,\n  ): TReadOptions {\n    const rest = { ...options };\n    delete rest.retry;\n    return rest;\n  }\n\n  /** `find`, re-executed until the retry predicate holds - connectors dispatch here from `find` when `options.retry` is set. */\n  protected findUntil<R = TDataObject>(opts: {\n    filter: TFilter<TDataObject>;\n    options: TFindOptions<TOptions, R>;\n  }): Promise<Array<R>> {\n    const options = this.omitReadRetry(opts.options);\n\n    return this.executeReadWithRetry<Array<R>>({\n      operation: 'find',\n      options: opts.options,\n      defaultUntil: (result) => result.length > 0,\n      // `R` is named here, so the row is `R`; TypeScript cannot resolve `TRow` for an unresolved `R`.\n      execution: () => this.find<R>({ filter: opts.filter, options }) as Promise<Array<R>>,\n    });\n  }\n\n  /** `find` with the range envelope, re-executed until the retry predicate holds - split from `findUntil` so each result shape is checked against its own `find` overload. */\n  protected findRangeUntil<R = TDataObject>(opts: {\n    filter: TFilter<TDataObject>;\n    options: TFindRangeOptions<TOptions, R>;\n  }): Promise<TDataWithRange<R>> {\n    const options = this.omitReadRetry(opts.options);\n\n    return this.executeReadWithRetry<TDataWithRange<R>>({\n      operation: 'find',\n      options: opts.options,\n      defaultUntil: (result) => result.data.length > 0,\n      execution: () =>\n        this.find<R>({ filter: opts.filter, options }) as unknown as Promise<TDataWithRange<R>>,\n    });\n  }\n\n  /** `findOne`, re-executed until the retry predicate holds - also serves `findById` via its findOne delegation. */\n  protected findOneUntil<R = TDataObject>(opts: {\n    filter: TFilter<TDataObject>;\n    options: TFindOneOptions<TOptions, R>;\n  }): Promise<TNullable<R>> {\n    const options = this.omitReadRetry(opts.options);\n\n    return this.executeReadWithRetry<TNullable<R>>({\n      operation: 'findOne',\n      options: opts.options,\n      defaultUntil: (result) => result !== null && result !== undefined,\n      execution: () => this.findOne<R>({ filter: opts.filter, options }) as Promise<TNullable<R>>,\n    });\n  }\n\n  abstract count(opts: { where: TWhere<TDataObject>; options?: TOptions }): Promise<TCount>;\n\n  abstract existsWith(opts: { where: TWhere<TDataObject>; options?: TOptions }): Promise<boolean>;\n\n  abstract find<R = unknown, const F extends TFields<TDataObject> = TFields<TDataObject>>(opts: {\n    filter: TFilter<TDataObject, F>;\n    options: TFindRangeOptions<TOptions, TRow<TDataObject, R, F>>;\n  }): Promise<TDataWithRange<TRow<TDataObject, R, F>>>;\n\n  abstract find<R = unknown, const F extends TFields<TDataObject> = TFields<TDataObject>>(opts: {\n    filter: TFilter<TDataObject, F>;\n    options?: TFindOptions<TOptions, TRow<TDataObject, R, F>>;\n  }): Promise<Array<TRow<TDataObject, R, F>>>;\n\n  abstract findOne<R = unknown, const F extends TFields<TDataObject> = TFields<TDataObject>>(opts: {\n    filter: TFilter<TDataObject, F>;\n    options?: TFindOneOptions<TOptions, TRow<TDataObject, R, F>>;\n  }): Promise<TNullable<TRow<TDataObject, R, F>>>;\n\n  abstract findById<\n    R = unknown,\n    const F extends TFields<TDataObject> = TFields<TDataObject>,\n  >(opts: {\n    id: IdType;\n    filter?: TByIdFilter<TDataObject, F>;\n    options?: TFindOneOptions<TOptions, TRow<TDataObject, R, F>>;\n  }): Promise<TNullable<TRow<TDataObject, R, F>>>;\n\n  abstract create(opts: {\n    data: TPersistObject;\n    options: TOptions & { shouldReturn: false };\n  }): Promise<TCount & { data: undefined | null }>;\n\n  abstract create<R = TDataObject>(opts: {\n    data: TPersistObject;\n    options?: TOptions & { shouldReturn?: true };\n  }): Promise<TCount & { data: R }>;\n\n  abstract createAll(opts: {\n    data: Array<TPersistObject>;\n    options: TOptions & { shouldReturn: false };\n  }): Promise<TCount & { data: undefined | null }>;\n\n  abstract createAll<R = TDataObject>(opts: {\n    data: Array<TPersistObject>;\n    options?: TOptions & { shouldReturn?: true };\n  }): Promise<TCount & { data: Array<R> }>;\n\n  abstract updateById(opts: {\n    id: IdType;\n    data: Partial<TPersistObject>;\n    options: TOptions & { shouldReturn: false };\n  }): Promise<TCount & { data: undefined | null }>;\n\n  abstract updateById<R = TDataObject>(opts: {\n    id: IdType;\n    data: Partial<TPersistObject>;\n    options?: TOptions & { shouldReturn?: true };\n  }): Promise<TCount & { data: R }>;\n\n  abstract updateAll(opts: {\n    data: Partial<TPersistObject>;\n    where: TWhere<TDataObject>;\n    options: TOptions & { shouldReturn: false; force?: boolean };\n  }): Promise<TCount & { data: undefined | null }>;\n\n  abstract updateAll<R = TDataObject>(opts: {\n    data: Partial<TPersistObject>;\n    where: TWhere<TDataObject>;\n    options?: TOptions & { shouldReturn?: true; force?: boolean };\n  }): Promise<TCount & { data: Array<R> | null }>;\n\n  /** Alias for updateAll. */\n  updateBy(opts: {\n    data: Partial<TPersistObject>;\n    where: TWhere<TDataObject>;\n    options: TOptions & { shouldReturn: false; force?: boolean };\n  }): Promise<TCount & { data: undefined | null }>;\n  updateBy<R = TDataObject>(opts: {\n    data: Partial<TPersistObject>;\n    where: TWhere<TDataObject>;\n    options?: TOptions & { shouldReturn?: true; force?: boolean };\n  }): Promise<TCount & { data: Array<R> | null }>;\n  updateBy<R = TDataObject>(opts: {\n    data: Partial<TPersistObject>;\n    where: TWhere<TDataObject>;\n    options?: TOptions & { shouldReturn?: boolean; force?: boolean };\n  }): Promise<TCount & { data: TNullable<Array<R>> }> {\n    const { data, where, options } = opts;\n\n    if (options?.shouldReturn === false) {\n      return this.updateAll({ data, where, options: { ...options, shouldReturn: false } });\n    }\n\n    return this.updateAll<R>({ data, where, options });\n  }\n\n  abstract deleteById(opts: {\n    id: IdType;\n    options: TOptions & { shouldReturn: false };\n  }): Promise<TCount & { data: undefined | null }>;\n\n  abstract deleteById<R = TDataObject>(opts: {\n    id: IdType;\n    options?: TOptions & { shouldReturn?: true };\n  }): Promise<TCount & { data: R }>;\n\n  abstract deleteAll(opts: {\n    where?: TWhere<TDataObject>;\n    options: TOptions & { shouldReturn: false; force?: boolean };\n  }): Promise<TCount & { data: undefined | null }>;\n\n  abstract deleteAll<R = TDataObject>(opts: {\n    where?: TWhere<TDataObject>;\n    options?: TOptions & { shouldReturn?: true; force?: boolean };\n  }): Promise<TCount & { data: Array<R> | null }>;\n\n  /** Alias for deleteAll. */\n  deleteBy(opts: {\n    where: TWhere<TDataObject>;\n    options: TOptions & { shouldReturn: false; force?: boolean };\n  }): Promise<TCount & { data: undefined | null }>;\n  deleteBy<R = TDataObject>(opts: {\n    where: TWhere<TDataObject>;\n    options?: TOptions & { shouldReturn?: true; force?: boolean };\n  }): Promise<TCount & { data: Array<R> | null }>;\n  deleteBy<R = TDataObject>(opts: {\n    where: TWhere<TDataObject>;\n    options?: TOptions & { shouldReturn?: boolean; force?: boolean };\n  }): Promise<TCount & { data: TNullable<Array<R>> }> {\n    const { where, options } = opts;\n\n    if (options?.shouldReturn === false) {\n      return this.deleteAll({ where, options: { ...options, shouldReturn: false } });\n    }\n\n    return this.deleteAll<R>({ where, options });\n  }\n}\n"]}
+{"version":3,"file":"abstract.js","sourceRoot":"","sources":["../../../../../src/base/repositories/core/abstract.ts"],"names":[],"mappings":";;;AAGA,mDAAuD;AAEvD,sDAAmE;AACnE,0DAA6D;AAC7D,sDAAoG;AAYpG,sGAAsG;AACtG,sFAAsF;AACtF,mDAI6B;AAU7B;;;;GAIG;AACH,MAAsB,kBAKpB,SAAQ,iBAAU;IAiBlB,YACE,UAA+B,EAC/B,IAIC;QAED,MAAM,SAAS,GACb,IAAI,EAAE,KAAK;YACX,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE/F,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAlB9B;;;WAGG;QACK,mBAAc,GAAsC,IAAI,CAAC;QAgB/D,IAAI,CAAC,eAAe,GAAG,IAAI,EAAE,cAAc,IAAI,qCAAyB,CAAC,SAAS,CAAC;QAEnF,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;QAChC,CAAC;QAED,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,OAAO,GAAG,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,CAAC;IACH,CAAC;IAED,IAAI,UAAU;QACZ,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,kIAAkI;aACrK,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,IAAI,UAAU,CAAC,KAAyB;QACtC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,qEAAqE;IACrE,IAAI,MAAM;QACR,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAI,MAAM,CAAC,KAAqB;QAC9B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,aAAa,CAAC,IAAwC;QACpD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC;IACrC,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,IAAc,aAAa;QACzB,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,cAAc,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,4BAAgB,CAAC,WAAW,EAAE,CAAC,gBAAgB,CAAC;YACpE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;SAChC,CAAC,EAAE,QAAQ,CAAC;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,IAAc,YAAY;QACxB,OAAO,IAAI,CAAC,aAAa,EAAE,gBAAgB,IAAI,EAAE,CAAC;IACpD,CAAC;IAED,yGAAyG;IACzG,IAAc,YAAY;QACxB,OAAO,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC;IAClD,CAAC;IAED,IAAc,YAAY;QACxB,OAAO,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC;IACnD,CAAC;IAED,2HAA2H;IAC3H,IAAc,QAAQ;QACpB,OAAO,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC;IAC/C,CAAC;IAED;;;;;;;;;;;OAWG;IACO,wBAAwB,CAAC,IAAwC;QACzE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;QAEvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,8DAA8D;QAC9D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,KAAK,8DAA8D,KAAK,EAAE;aAClH,CAAC,CAAC;QACL,CAAC;QAED,wFAAwF;QACxF,+FAA+F;QAC/F,+FAA+F;QAC/F,gGAAgG;QAChG,gFAAgF;QAChF,MAAM,eAAe,GAAG,OAAO,CAC7B,4BAAgB,CAAC,WAAW,EAAE,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,KAAK,CACzF,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,6BAAiB,CAAC;QAEnF,IAAI,KAAK,GAAG,OAAO,EAAE,CAAC;YACpB,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,KAAK,4DAA4D,KAAK,eAAe,OAAO,gFAAgF;aACpN,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACO,kBAAkB,CAAC,IAA0C;QACrE,MAAM,EAAE,MAAM,EAAE,KAAK,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;QAExC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QAED,IAAI,CAAC,wBAAwB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAE9D,MAAM,IAAI,GAAG,CAAC,UAAoC,EAAE,IAAY,EAAQ,EAAE;YACxE,MAAM,cAAc,GAAG,UAAU,IAAI,EAAE,CAAC;YACxC,KAAK,MAAM,SAAS,IAAI,cAAc,EAAE,CAAC;gBACvC,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC;gBACtC,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,SAAS;gBACX,CAAC;gBAED,MAAM,YAAY,GAAG,GAAG,IAAI,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACrD,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,CAAC;gBAE1C,IACE,aAAa,KAAK,SAAS;oBAC3B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,CAAC,EACvD,CAAC;oBACD,MAAM,IAAA,eAAQ,EAAC;wBACb,OAAO,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,KAAK,mDAAmD,YAAY,6CAA6C,aAAa,EAAE;qBACxK,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,8EAA8E;IACpE,aAAa;QACrB,MAAM,QAAQ,GAAG,4BAAgB,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAE5E,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YACpB,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,iHAAiH;aACpJ,CAAC,CAAC;QACL,CAAC;QAED,4FAA4F;QAC5F,oFAAoF;QACpF,MAAM,UAAU,GAAG,IAAA,qBAAY,EAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAA2B,CAAC;QACpF,OAAO,IAAI,UAAU,EAAE,CAAC;IAC1B,CAAC;IAED,kEAAkE;IACxD,aAAa,CAAC,IAA4B;QAClD,MAAM,IAAA,eAAQ,EAAC;YACb,WAAW,EAAE,gCAAoB,CAAC,qBAAqB;YACvD,OAAO,EAAE,IAAI,IAAI,CAAC,UAAU,kDAAkD,IAAI,CAAC,cAAc,EAAE;SACpG,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACO,oBAAoB,CAAU,IAKvC;QACC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QAE7D,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QAED,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC1E,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QAED,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;QAE1E,OAAO,kBAAW,CAAC,qBAAqB,CAAU;YAChD,SAAS,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YACvD,SAAS;YACT,KAAK,EAAE,KAAK,IAAI,YAAY;YAC5B,WAAW;YACX,UAAU;YACV,MAAM;YACN,OAAO,EAAE,OAAO,IAAI;gBAClB,QAAQ,EAAE,6BAAsB,CAAC,WAAW;gBAC5C,cAAc,EAAE,EAAE;gBAClB,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,uBAAgB,CAAC,KAAK;aAC/B;YACD,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,aAAa,CACnB,OAAqB;QAErB,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8HAA8H;IACpH,SAAS,CAAkB,IAGpC;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEjD,OAAO,IAAI,CAAC,oBAAoB,CAAW;YACzC,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAC3C,gGAAgG;YAChG,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAsB;SACrF,CAAC,CAAC;IACL,CAAC;IAED,4KAA4K;IAClK,cAAc,CAAkB,IAGzC;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEjD,OAAO,IAAI,CAAC,oBAAoB,CAAoB;YAClD,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YAChD,SAAS,EAAE,GAAG,EAAE,CACd,IAAI,CAAC,IAAI,CAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAA0C;SAC1F,CAAC,CAAC;IACL,CAAC;IAED,kHAAkH;IACxG,YAAY,CAAkB,IAGvC;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEjD,OAAO,IAAI,CAAC,oBAAoB,CAAe;YAC7C,SAAS,EAAE,SAAS;YACpB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;YACjE,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAA0B;SAC5F,CAAC,CAAC;IACL,CAAC;IAqFD,QAAQ,CAAkB,IAIzB;QACC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QAEtC,IAAI,OAAO,EAAE,YAAY,KAAK,KAAK,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACrD,CAAC;IA+BD,QAAQ,CAAkB,IAGzB;QACC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QAEhC,IAAI,OAAO,EAAE,YAAY,KAAK,KAAK,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC;CACF;AArdD,gDAqdC","sourcesContent":["import type { AbstractDataSource } from '@/base/datasources';\nimport type { AbstractEntity, IdType } from '@/base/models';\nimport type { IModelMetadata } from '@/helpers/inversion';\nimport { MetadataRegistry } from '@/helpers/inversion';\nimport type { TClass, TNullable } from '@venizia/ignis-helpers/common';\nimport { BaseHelper, getError } from '@venizia/ignis-helpers/core';\nimport { resolveValue } from '@venizia/ignis-helpers/common';\nimport { RetryBackoffStrategies, RetryHelper, RetryJitterModes } from '@venizia/ignis-helpers/core';\nimport type {\n  IExtraOptions,\n  IPersistableRepository,\n  IWithReadRetry,\n  TCount,\n  TDataWithRange,\n  TFindOneOptions,\n  TFindOptions,\n  TFindRangeOptions,\n  TRepositoryOperationScope,\n} from '../common';\n// The file, not the `../common` barrel: the barrel re-exports the OpenAPI schemas, and this module is\n// on the `./repository` entry, which must load without `@hono/zod-openapi` installed.\nimport {\n  DEFAULT_MAX_LIMIT,\n  RepositoryErrorCodes,\n  RepositoryOperationScopes,\n} from '../common/constants';\nimport type {\n  TByIdFilter,\n  TFields,\n  TFilter,\n  TInclusion,\n  TRow,\n  TWhere,\n} from '@venizia/ignis-filter';\n\n/**\n * Engine-neutral repository plumbing - lazy dataSource/entity resolution, class-keyed `@model`\n * settings, operation scope. `TOptions` defaults to `IExtraOptions` so connectors can narrow it\n * while staying assignable to this base.\n */\nexport abstract class AbstractRepository<\n  TDataObject extends object,\n  TPersistObject extends object = TDataObject,\n  TOptions extends IExtraOptions = IExtraOptions,\n>\n  extends BaseHelper\n  implements IPersistableRepository<TDataObject, TPersistObject, TOptions>\n{\n  protected _operationScope: TRepositoryOperationScope;\n\n  /** Lazy-resolved on first access if not provided in constructor. */\n  protected _dataSource?: AbstractDataSource;\n\n  /** Lazy-resolved from @repository metadata on first access. */\n  protected _entity?: AbstractEntity;\n\n  /**\n   * Memoized @model settings for `this.entity`'s class. `null` means not yet resolved - `undefined`\n   * is itself a valid resolved value: the model declares no settings.\n   */\n  private _modelSettings: IModelMetadata['settings'] | null = null;\n\n  constructor(\n    dataSource?: AbstractDataSource,\n    opts?: {\n      scope?: string;\n      entityClass?: TClass<AbstractEntity>;\n      operationScope?: TRepositoryOperationScope;\n    },\n  ) {\n    const scopeName =\n      opts?.scope ??\n      (opts?.entityClass?.name ? [opts.entityClass.name, 'Repository'].join('') : new.target.name);\n\n    super({ scope: scopeName });\n\n    this._operationScope = opts?.operationScope ?? RepositoryOperationScopes.READ_ONLY;\n\n    if (dataSource) {\n      this._dataSource = dataSource;\n    }\n\n    if (opts?.entityClass) {\n      this._entity = new opts.entityClass();\n    }\n  }\n\n  get dataSource(): AbstractDataSource {\n    if (!this._dataSource) {\n      throw getError({\n        message: `[${this.constructor.name}] DataSource not available. Use @repository({ model: YourModel, dataSource: YourDataSource }) or pass dataSource in constructor.`,\n      });\n    }\n\n    return this._dataSource;\n  }\n\n  set dataSource(value: AbstractDataSource) {\n    this._dataSource = value;\n  }\n\n  /** Auto-resolves from @repository metadata if not explicitly set. */\n  get entity(): AbstractEntity {\n    this._entity ??= this.resolveEntity();\n    return this._entity;\n  }\n\n  set entity(value: AbstractEntity) {\n    this._entity = value;\n  }\n\n  get operationScope(): TRepositoryOperationScope {\n    return this._operationScope;\n  }\n\n  setDataSource(opts: { dataSource: AbstractDataSource }): void {\n    this._dataSource = opts.dataSource;\n  }\n\n  getEntity(): AbstractEntity {\n    return this.entity;\n  }\n\n  /**\n   * Resolved `@model` settings for `this.entity`'s class, keyed by Reflect target - not by\n   * `entity.name`, which can diverge from the `@model` registry key.\n   */\n  protected get modelSettings(): IModelMetadata['settings'] {\n    if (this._modelSettings !== null) {\n      return this._modelSettings;\n    }\n\n    this._modelSettings = MetadataRegistry.getInstance().getModelMetadata({\n      target: this.entity.constructor,\n    })?.settings;\n\n    return this._modelSettings;\n  }\n\n  protected get hiddenFields(): string[] {\n    return this.modelSettings?.hiddenProperties ?? [];\n  }\n\n  /** Default where from @model settings.query.filter.where, AND-merged into every query unless skipped. */\n  protected get defaultWhere(): TWhere | undefined {\n    return this.modelSettings?.query?.filter?.where;\n  }\n\n  protected get defaultLimit(): number | undefined {\n    return this.modelSettings?.query?.limit?.default;\n  }\n\n  /** Largest `limit` a caller may ask for, when the model declares one; undefined leaves the tier's own default in force. */\n  protected get maxLimit(): number | undefined {\n    return this.modelSettings?.query?.limit?.max;\n  }\n\n  /**\n   * Both bounds, in one place, for every tier.\n   *\n   * The upper bound is the point: `@model({ settings: { maxLimit } })` is public and validated at\n   * decoration time, but the relational tier read it nowhere, so `maxLimit: 2` still issued\n   * `LIMIT 50000000`.\n   *\n   * The lower bound matters just as much and is easy to miss: a NEGATIVE limit is not a smaller\n   * page. Drizzle renders the LIMIT clause only when the value is `>= 0`, so a negative one removes\n   * the clause and returns the whole table. The wire schema now rejects it too, but a server-side\n   * caller reaches this method without passing through the schema at all.\n   */\n  protected assertLimitWithinCeiling(opts: { limit?: number; scope?: string }): void {\n    const { limit, scope = 'find' } = opts;\n\n    if (limit === undefined) {\n      return;\n    }\n\n    // The shape check first, because it needs no metadata at all.\n    if (!Number.isInteger(limit) || limit < 0) {\n      throw getError({\n        message: `[${this.constructor.name}][${scope}] Invalid 'limit' | Expected a non-negative integer | Got: ${limit}`,\n      });\n    }\n\n    // `maxLimit` reaches `modelSettings`, which resolves the entity - and THAT throws for a\n    // repository with no `@repository` model binding. Such a repository is a misconfiguration this\n    // method has no business reporting, and the caller path that used to reach `getDefaultLimit()`\n    // never touched it either, because `??` short-circuits when a limit is given. So the ceiling is\n    // consulted only when the binding that makes it resolvable is actually present.\n    const hasModelBinding = Boolean(\n      MetadataRegistry.getInstance().getRepositoryBinding({ target: this.constructor })?.model,\n    );\n    const ceiling = (hasModelBinding ? this.maxLimit : undefined) ?? DEFAULT_MAX_LIMIT;\n\n    if (limit > ceiling) {\n      throw getError({\n        message: `[${this.constructor.name}][${scope}] Requested page exceeds this model's limit | requested: ${limit} | maximum: ${ceiling} | raise it with @model settings.maxLimit if larger pages are genuinely needed`,\n      });\n    }\n  }\n\n  /**\n   * The whole filter, relations included. Checking only the top-level `limit` left the identical\n   * defect reachable one level down: a relation scope's negative limit drops Drizzle's LIMIT clause\n   * for that relation and loads the entire related table.\n   *\n   * A relation's limit gets the SHAPE check only, not a ceiling. The ceiling belongs to the\n   * relation's own model, which this repository cannot resolve - claiming otherwise would enforce\n   * the parent's `maxLimit` on a different entity.\n   */\n  protected assertFilterLimits(opts: { filter?: TFilter; scope?: string }): void {\n    const { filter, scope = 'find' } = opts;\n\n    if (!filter) {\n      return;\n    }\n\n    this.assertLimitWithinCeiling({ limit: filter.limit, scope });\n\n    const walk = (inclusions: TInclusion[] | undefined, path: string): void => {\n      const inclusionsList = inclusions ?? [];\n      for (const inclusion of inclusionsList) {\n        const relationScope = inclusion.scope;\n        if (!relationScope) {\n          continue;\n        }\n\n        const relationPath = `${path}.${inclusion.relation}`;\n        const relationLimit = relationScope.limit;\n\n        if (\n          relationLimit !== undefined &&\n          (!Number.isInteger(relationLimit) || relationLimit < 0)\n        ) {\n          throw getError({\n            message: `[${this.constructor.name}][${scope}] Invalid 'limit' on relation scope | relation: ${relationPath} | Expected a non-negative integer | Got: ${relationLimit}`,\n          });\n        }\n\n        walk(relationScope.include, relationPath);\n      }\n    };\n\n    walk(filter.include, scope);\n  }\n\n  /** Resolves the entity instance from @repository metadata on first access. */\n  protected resolveEntity(): AbstractEntity {\n    const registry = MetadataRegistry.getInstance();\n    const binding = registry.getRepositoryBinding({ target: this.constructor });\n\n    if (!binding?.model) {\n      throw getError({\n        message: `[${this.constructor.name}] Cannot resolve entity. Either pass entityClass in constructor or use @repository decorator with model option.`,\n      });\n    }\n\n    // resolveValue() erases to the resolved value's structural type, not this class-or-resolver\n    // union's member - the `@repository` decorator guarantees a class constructor here.\n    const ModelClass = resolveValue({ value: binding.model }) as TClass<AbstractEntity>;\n    return new ModelClass();\n  }\n\n  /** Rejects a verb the current operation scope does not permit. */\n  protected denyOperation(opts: { methodName: string }): never {\n    throw getError({\n      messageCode: RepositoryErrorCodes.OPERATION_NOT_ALLOWED,\n      message: `[${opts.methodName}] Repository operation is NOT ALLOWED | scope: ${this.operationScope}`,\n    });\n  }\n\n  /**\n   * Shared retry orchestration for read verbs. Inside a transaction retry is skipped - the pool\n   * routes transactions to the primary, so there is no replica lag to wait out.\n   */\n  protected executeReadWithRetry<TResult>(opts: {\n    operation: string;\n    options: IExtraOptions & IWithReadRetry<TResult>;\n    defaultUntil: (result: TResult) => boolean;\n    execution: () => Promise<TResult>;\n  }): Promise<TResult> {\n    const { operation, options, defaultUntil, execution } = opts;\n\n    if (!options.retry) {\n      return execution();\n    }\n\n    if (options.transaction) {\n      this.logger.for(operation).debug('Read retry skipped inside transaction');\n      return execution();\n    }\n\n    const { maxAttempts, maxTotalMs, signal, backoff, until } = options.retry;\n\n    return RetryHelper.executeWithRetryUntil<TResult>({\n      operation: [this.constructor.name, operation].join('.'),\n      execution,\n      until: until ?? defaultUntil,\n      maxAttempts,\n      maxTotalMs,\n      signal,\n      backoff: backoff ?? {\n        strategy: RetryBackoffStrategies.EXPONENTIAL,\n        initialDelayMs: 50,\n        maxDelayMs: 500,\n        jitter: RetryJitterModes.EQUAL,\n      },\n      logger: this.logger,\n    });\n  }\n\n  /**\n   * A copy of `options` without `retry`, so re-entering a read verb takes its non-retry path - this\n   * is what keeps the retry recursion single-depth. Copy-then-delete rather than a rest-destructure\n   * (lint rejects the unused rest sibling) or `lodash/omit` (its `Omit<>` return type is not\n   * assignable back to `TOptions`).\n   */\n  private omitReadRetry<TReadOptions extends { retry?: unknown }>(\n    options: TReadOptions,\n  ): TReadOptions {\n    const rest = { ...options };\n    delete rest.retry;\n    return rest;\n  }\n\n  /** `find`, re-executed until the retry predicate holds - connectors dispatch here from `find` when `options.retry` is set. */\n  protected findUntil<R = TDataObject>(opts: {\n    filter: TFilter<TDataObject>;\n    options: TFindOptions<TOptions, R>;\n  }): Promise<Array<R>> {\n    const options = this.omitReadRetry(opts.options);\n\n    return this.executeReadWithRetry<Array<R>>({\n      operation: 'find',\n      options: opts.options,\n      defaultUntil: (result) => result.length > 0,\n      // `R` is named here, so the row is `R`; TypeScript cannot resolve `TRow` for an unresolved `R`.\n      execution: () => this.find<R>({ filter: opts.filter, options }) as Promise<Array<R>>,\n    });\n  }\n\n  /** `find` with the range envelope, re-executed until the retry predicate holds - split from `findUntil` so each result shape is checked against its own `find` overload. */\n  protected findRangeUntil<R = TDataObject>(opts: {\n    filter: TFilter<TDataObject>;\n    options: TFindRangeOptions<TOptions, R>;\n  }): Promise<TDataWithRange<R>> {\n    const options = this.omitReadRetry(opts.options);\n\n    return this.executeReadWithRetry<TDataWithRange<R>>({\n      operation: 'find',\n      options: opts.options,\n      defaultUntil: (result) => result.data.length > 0,\n      execution: () =>\n        this.find<R>({ filter: opts.filter, options }) as unknown as Promise<TDataWithRange<R>>,\n    });\n  }\n\n  /** `findOne`, re-executed until the retry predicate holds - also serves `findById` via its findOne delegation. */\n  protected findOneUntil<R = TDataObject>(opts: {\n    filter: TFilter<TDataObject>;\n    options: TFindOneOptions<TOptions, R>;\n  }): Promise<TNullable<R>> {\n    const options = this.omitReadRetry(opts.options);\n\n    return this.executeReadWithRetry<TNullable<R>>({\n      operation: 'findOne',\n      options: opts.options,\n      defaultUntil: (result) => result !== null && result !== undefined,\n      execution: () => this.findOne<R>({ filter: opts.filter, options }) as Promise<TNullable<R>>,\n    });\n  }\n\n  abstract count(opts: { where: TWhere<TDataObject>; options?: TOptions }): Promise<TCount>;\n\n  abstract existsWith(opts: { where: TWhere<TDataObject>; options?: TOptions }): Promise<boolean>;\n\n  abstract find<R = unknown, const F extends TFields<TDataObject> = TFields<TDataObject>>(opts: {\n    filter: TFilter<TDataObject, F>;\n    options: TFindRangeOptions<TOptions, TRow<TDataObject, R, F>>;\n  }): Promise<TDataWithRange<TRow<TDataObject, R, F>>>;\n\n  abstract find<R = unknown, const F extends TFields<TDataObject> = TFields<TDataObject>>(opts: {\n    filter: TFilter<TDataObject, F>;\n    options?: TFindOptions<TOptions, TRow<TDataObject, R, F>>;\n  }): Promise<Array<TRow<TDataObject, R, F>>>;\n\n  abstract findOne<R = unknown, const F extends TFields<TDataObject> = TFields<TDataObject>>(opts: {\n    filter: TFilter<TDataObject, F>;\n    options?: TFindOneOptions<TOptions, TRow<TDataObject, R, F>>;\n  }): Promise<TNullable<TRow<TDataObject, R, F>>>;\n\n  abstract findById<\n    R = unknown,\n    const F extends TFields<TDataObject> = TFields<TDataObject>,\n  >(opts: {\n    id: IdType;\n    filter?: TByIdFilter<TDataObject, F>;\n    options?: TFindOneOptions<TOptions, TRow<TDataObject, R, F>>;\n  }): Promise<TNullable<TRow<TDataObject, R, F>>>;\n\n  abstract create(opts: {\n    data: TPersistObject;\n    options: TOptions & { shouldReturn: false };\n  }): Promise<TCount & { data: undefined | null }>;\n\n  abstract create<R = TDataObject>(opts: {\n    data: TPersistObject;\n    options?: TOptions & { shouldReturn?: true };\n  }): Promise<TCount & { data: R }>;\n\n  abstract createAll(opts: {\n    data: Array<TPersistObject>;\n    options: TOptions & { shouldReturn: false };\n  }): Promise<TCount & { data: undefined | null }>;\n\n  abstract createAll<R = TDataObject>(opts: {\n    data: Array<TPersistObject>;\n    options?: TOptions & { shouldReturn?: true };\n  }): Promise<TCount & { data: Array<R> }>;\n\n  abstract updateById(opts: {\n    id: IdType;\n    data: Partial<TPersistObject>;\n    options: TOptions & { shouldReturn: false };\n  }): Promise<TCount & { data: undefined | null }>;\n\n  abstract updateById<R = TDataObject>(opts: {\n    id: IdType;\n    data: Partial<TPersistObject>;\n    options?: TOptions & { shouldReturn?: true };\n  }): Promise<TCount & { data: R }>;\n\n  abstract updateAll(opts: {\n    data: Partial<TPersistObject>;\n    where: TWhere<TDataObject>;\n    options: TOptions & { shouldReturn: false; force?: boolean };\n  }): Promise<TCount & { data: undefined | null }>;\n\n  abstract updateAll<R = TDataObject>(opts: {\n    data: Partial<TPersistObject>;\n    where: TWhere<TDataObject>;\n    options?: TOptions & { shouldReturn?: true; force?: boolean };\n  }): Promise<TCount & { data: Array<R> | null }>;\n\n  /** Alias for updateAll. */\n  updateBy(opts: {\n    data: Partial<TPersistObject>;\n    where: TWhere<TDataObject>;\n    options: TOptions & { shouldReturn: false; force?: boolean };\n  }): Promise<TCount & { data: undefined | null }>;\n  updateBy<R = TDataObject>(opts: {\n    data: Partial<TPersistObject>;\n    where: TWhere<TDataObject>;\n    options?: TOptions & { shouldReturn?: true; force?: boolean };\n  }): Promise<TCount & { data: Array<R> | null }>;\n  updateBy<R = TDataObject>(opts: {\n    data: Partial<TPersistObject>;\n    where: TWhere<TDataObject>;\n    options?: TOptions & { shouldReturn?: boolean; force?: boolean };\n  }): Promise<TCount & { data: TNullable<Array<R>> }> {\n    const { data, where, options } = opts;\n\n    if (options?.shouldReturn === false) {\n      return this.updateAll({ data, where, options: { ...options, shouldReturn: false } });\n    }\n\n    return this.updateAll<R>({ data, where, options });\n  }\n\n  abstract deleteById(opts: {\n    id: IdType;\n    options: TOptions & { shouldReturn: false };\n  }): Promise<TCount & { data: undefined | null }>;\n\n  abstract deleteById<R = TDataObject>(opts: {\n    id: IdType;\n    options?: TOptions & { shouldReturn?: true };\n  }): Promise<TCount & { data: R }>;\n\n  abstract deleteAll(opts: {\n    where?: TWhere<TDataObject>;\n    options: TOptions & { shouldReturn: false; force?: boolean };\n  }): Promise<TCount & { data: undefined | null }>;\n\n  abstract deleteAll<R = TDataObject>(opts: {\n    where?: TWhere<TDataObject>;\n    options?: TOptions & { shouldReturn?: true; force?: boolean };\n  }): Promise<TCount & { data: Array<R> | null }>;\n\n  /** Alias for deleteAll. */\n  deleteBy(opts: {\n    where: TWhere<TDataObject>;\n    options: TOptions & { shouldReturn: false; force?: boolean };\n  }): Promise<TCount & { data: undefined | null }>;\n  deleteBy<R = TDataObject>(opts: {\n    where: TWhere<TDataObject>;\n    options?: TOptions & { shouldReturn?: true; force?: boolean };\n  }): Promise<TCount & { data: Array<R> | null }>;\n  deleteBy<R = TDataObject>(opts: {\n    where: TWhere<TDataObject>;\n    options?: TOptions & { shouldReturn?: boolean; force?: boolean };\n  }): Promise<TCount & { data: TNullable<Array<R>> }> {\n    const { where, options } = opts;\n\n    if (options?.shouldReturn === false) {\n      return this.deleteAll({ where, options: { ...options, shouldReturn: false } });\n    }\n\n    return this.deleteAll<R>({ where, options });\n  }\n}\n"]}

package/dist/cjs/helpers/inversion/common/types/model.d.ts

@@ -1,5 +1,5 @@
 import type { AbstractEntity } from '../../../../base/models';
-import type { ScopeFilters, TFilter, TScopeFilterMissingBehavior, TWhere } from '../../../../base/repositories';
+import type { ScopeFilters, TFilter, TScopeFilterMissingBehavior, TScopeWriteGuard, TWhere } from '../../../../base/repositories';
 import type { TClass, TNullable, TValueOrResolver } from '@venizia/ignis-helpers/common';
 import type { IArtifactRegistrationOptions } from './artifact';
 export interface IModelAuthorizeSettings {
@@ -8,12 +8,38 @@ export interface IModelAuthorizeSettings {
     /** Extensible - consumers can add any extra authorization metadata. */
     [extra: string | symbol]: any;
 }
+/** What a restricted caller may write to the scope columns (`@model` settings.access.write). */
+export interface IModelAccessWriteSettings {
+    /**
+     * What a create, createAll or an update payload that names a scope column does when its value
+     * disagrees with the resolved scope. `reject` (default) refuses the write and writes nothing - for
+     * `createAll` not even the valid rows. `assign` also fills a scope column that is ABSENT from a
+     * created row, when the scope is a single equality; a value that is present and disagrees is
+     * still refused.
+     *
+     * The scope's columns and allowed values are read from the resolved `where` (equality, `eq`, `inq`
+     * and arrays, `and`, and an `or` over one column). Any other shape cannot be checked, and the write
+     * is refused with its own message - never skipped. `ScopeFilters.UNRESTRICTED` bypasses the guard
+     * too, which is the deliberate way to write across scopes (system scope, an admin role).
+     *
+     * Not checked: an update that does not name the scope column (the row was already selected through
+     * the scoped `where`), and raw statements that bypass the repository.
+     */
+    mode?: TScopeWriteGuard;
+    /**
+     * `true` lets a restricted caller write `null` to a scope column, or leave it out on create: the
+     * row has no owner and is shared. Default `false`, so `null` is refused like any other value
+     * outside the scope, even when the resolved scope has a `null` branch (that branch lets the caller
+     * READ shared rows, a separate permission). Reads are scoped as before.
+     */
+    sharedRows?: boolean;
+}
 /**
- * Row-scope resolver for `@model` settings.scopeFilter - resolved per query, so it can depend on
- * the current request (tenant, org, membership). Framework-internal escape hatches aside, nothing
- * short of removing this setting from the model turns scoping off.
+ * Row access for `@model` settings.access - resolved per query, so it can depend on the current
+ * request (tenant, org, membership). Framework-internal escape hatches aside, nothing short of
+ * removing this setting from the model turns scoping off.
  */
-export interface IScopeFilterSettings {
+export interface IModelAccessSettings {
     /**
      * Returns the scope `where`; `ScopeFilters.UNRESTRICTED` to apply no scope for THIS call (an
      * internal operator, a caller the application has decided sees everything); or null/undefined
@@ -27,41 +53,87 @@ export interface IScopeFilterSettings {
      * per MODEL - it cannot express a per-USER bypass; use `ScopeFilters.UNRESTRICTED` for that.
      */
     onMissing?: TScopeFilterMissingBehavior;
+    /**
+     * The property names the write guard checks. Optional: with none declared the guard checks every
+     * column the resolved scope constrains. When declared, each name must exist on the model (checked
+     * at boot), and a resolved scope that constrains any other column is refused as unverifiable.
+     */
+    columns?: string[];
+    /** What a restricted caller may write to the scope columns. See {@link IModelAccessWriteSettings}. */
+    write?: IModelAccessWriteSettings;
+}
+/**
+ * The old, flat shape of {@link IModelAccessSettings}.
+ *
+ * @deprecated Use `settings.access` (`writeGuard` is `access.write.mode`, `sharedRows` is
+ * `access.write.sharedRows`). Removed in 0.4.3.
+ */
+export interface IScopeFilterSettings {
+    resolve: () => TNullable<TWhere> | typeof ScopeFilters.UNRESTRICTED;
+    onMissing?: TScopeFilterMissingBehavior;
+    writeGuard?: TScopeWriteGuard;
+    sharedRows?: boolean;
+    columns?: string[];
+}
+/** What a query runs with when it names nothing (`@model` settings.query). */
+export interface IModelQuerySettings {
+    /** Default filter auto-applied to all repository operations. Bypassable via shouldSkipDefaultFilter. */
+    filter?: TFilter;
+    limit?: {
+        /** Default row limit when a query omits `limit`. Must be a positive integer. Falls back to DEFAULT_LIMIT (10). */
+        default?: number;
+        /**
+         * Largest `limit` a CALLER may ask for. Must be a positive integer. Falls back to
+         * DEFAULT_MAX_LIMIT (1000).
+         *
+         * Policy, not capacity - the engine's own ceiling sits far above it. The number is chosen so
+         * that reaching it means the caller is doing something unusual, and raising it is how a model
+         * says so deliberately.
+         */
+        max?: number;
+    };
 }
 export interface IModelSettings {
     /** Properties excluded from all query results at SQL level. */
     hiddenProperties?: string[];
-    /** Default filter auto-applied to all repository operations. Bypassable via shouldSkipDefaultFilter. */
-    defaultFilter?: TFilter;
+    /** Default filter and limits of a query: `filter`, `limit.default`, `limit.max`. */
+    query?: IModelQuerySettings;
     /**
-     * Row scope: ANDed into every read and write whose scope is expressible as a filter clause, and
-     * NOT removable by `shouldSkipDefaultFilter`. Resolved per query, so it can depend on the current
-     * request. Ownership resolved per row or through a polymorphic reference is NOT expressible here -
-     * that check is still the application's to perform.
+     * Row access: the scope ANDed into every read and write whose scope is expressible as a filter
+     * clause, NOT removable by `shouldSkipDefaultFilter`, and the guard that holds writes to it.
+     * Ownership resolved per row or through a polymorphic reference is NOT expressible here - that
+     * check is still the application's to perform.
      *
      * Relational repositories only - a search-backed model (Typesense, Meilisearch) never reads
      * this setting, so mirroring a scoped entity into a search index needs its own query-time scope.
      */
+    access?: IModelAccessSettings;
+    /** Authorization settings for this model (principal name, etc.). */
+    authorize?: IModelAuthorizeSettings;
+    /** @deprecated Use `query.filter`. Removed in 0.4.3. */
+    defaultFilter?: TFilter;
+    /** @deprecated Use `access`. Removed in 0.4.3. */
     scopeFilter?: IScopeFilterSettings;
-    /** Default row limit when a query omits `limit`. Must be a positive integer. Falls back to DEFAULT_LIMIT (10). */
+    /** @deprecated Use `query.limit.default`. Removed in 0.4.3. */
     defaultLimit?: number;
-    /**
-     * Largest `limit` a CALLER may ask for. Must be a positive integer. Falls back to
-     * DEFAULT_MAX_LIMIT (1000).
-     *
-     * Policy, not capacity - the engine's own ceiling sits far above it. The number is chosen so
-     * that reaching it means the caller is doing something unusual, and raising it is how a model
-     * says so deliberately.
-     */
+    /** @deprecated Use `query.limit.max`. Removed in 0.4.3. */
     maxLimit?: number;
-    /** Authorization settings for this model (principal name, etc.). */
-    authorize?: IModelAuthorizeSettings;
+}
+/** One deprecated settings key a model still uses, and the key that replaces it. */
+export interface IDeprecatedModelSetting {
+    /** The old key, written as the model wrote it: `defaultFilter`, `scopeFilter.writeGuard`. */
+    key: string;
+    /** The key that replaces it: `query.filter`, `access.write.mode`. */
+    use: string;
 }
 export interface IModelMetadata extends IArtifactRegistrationOptions {
     type: 'entity' | 'view';
     tableName?: string;
     skipMigrate?: boolean;
+    /** As the `@model` decorator stores it: normalised to the new keys; the deprecated keys are gone. */
     settings?: IModelSettings;
+    /** Set by the decorator, read by the boot warning; not for application code. */
+    deprecatedSettings?: IDeprecatedModelSetting[];
 }
 export interface IEntityStatics {
     schema?: unknown;

package/dist/cjs/helpers/inversion/common/types/model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../../../../../src/helpers/inversion/common/types/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EACV,YAAY,EACZ,OAAO,EACP,2BAA2B,EAC3B,MAAM,EACP,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACzF,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAE/D,MAAM,WAAW,uBAAuB;IACtC,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,OAAO,EAAE,MAAM,SAAS,CAAC,MAAM,CAAC,GAAG,OAAO,YAAY,CAAC,YAAY,CAAC;IAEpE;;;;;OAKG;IACH,SAAS,CAAC,EAAE,2BAA2B,CAAC;CACzC;AAED,MAAM,WAAW,cAAc;IAC7B,+DAA+D;IAC/D,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B,wGAAwG;IACxG,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,oBAAoB,CAAC;IAEnC,kHAAkH;IAClH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,oEAAoE;IACpE,SAAS,CAAC,EAAE,uBAAuB,CAAC;CACrC;AAED,MAAM,WAAW,cAAe,SAAQ,4BAA4B;IAClE,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;CAC9C;AAED,MAAM,MAAM,WAAW,CAAC,KAAK,SAAS,cAAc,GAAG,cAAc,IAAI,MAAM,CAAC,KAAK,CAAC,GACpF,cAAc,CAAC;AAEjB,qGAAqG;AACrG,MAAM,MAAM,qBAAqB,CAAC,KAAK,SAAS,cAAc,GAAG,cAAc,IAC3E,WAAW,CAAC,KAAK,CAAC,GAClB,CAAC,QAAQ,GAAG,cAAc,CAAC,CAAC;AAEhC,MAAM,WAAW,mBAAmB,CAAC,KAAK,SAAS,cAAc,GAAG,cAAc;IAChF,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACxC,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;IAEhB,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAErD,mDAAmD;IACnD,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B"}
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../../../../../src/helpers/inversion/common/types/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EACV,YAAY,EACZ,OAAO,EACP,2BAA2B,EAC3B,gBAAgB,EAChB,MAAM,EACP,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACzF,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAE/D,MAAM,WAAW,uBAAuB;IACtC,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,gGAAgG;AAChG,MAAM,WAAW,yBAAyB;IACxC;;;;;;;;;;;;;;OAcG;IACH,IAAI,CAAC,EAAE,gBAAgB,CAAC;IAExB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,OAAO,EAAE,MAAM,SAAS,CAAC,MAAM,CAAC,GAAG,OAAO,YAAY,CAAC,YAAY,CAAC;IAEpE;;;;;OAKG;IACH,SAAS,CAAC,EAAE,2BAA2B,CAAC;IAExC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB,sGAAsG;IACtG,KAAK,CAAC,EAAE,yBAAyB,CAAC;CACnC;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,SAAS,CAAC,MAAM,CAAC,GAAG,OAAO,YAAY,CAAC,YAAY,CAAC;IACpE,SAAS,CAAC,EAAE,2BAA2B,CAAC;IACxC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,8EAA8E;AAC9E,MAAM,WAAW,mBAAmB;IAClC,wGAAwG;IACxG,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,KAAK,CAAC,EAAE;QACN,kHAAkH;QAClH,OAAO,CAAC,EAAE,MAAM,CAAC;QAEjB;;;;;;;WAOG;QACH,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,+DAA+D;IAC/D,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B,oFAAoF;IACpF,KAAK,CAAC,EAAE,mBAAmB,CAAC;IAE5B;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAE9B,oEAAoE;IACpE,SAAS,CAAC,EAAE,uBAAuB,CAAC;IAEpC,wDAAwD;IACxD,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB,kDAAkD;IAClD,WAAW,CAAC,EAAE,oBAAoB,CAAC;IAEnC,+DAA+D;IAC/D,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,oFAAoF;AACpF,MAAM,WAAW,uBAAuB;IACtC,6FAA6F;IAC7F,GAAG,EAAE,MAAM,CAAC;IACZ,qEAAqE;IACrE,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,cAAe,SAAQ,4BAA4B;IAClE,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB,qGAAqG;IACrG,QAAQ,CAAC,EAAE,cAAc,CAAC;IAE1B,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,uBAAuB,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;CAC9C;AAED,MAAM,MAAM,WAAW,CAAC,KAAK,SAAS,cAAc,GAAG,cAAc,IAAI,MAAM,CAAC,KAAK,CAAC,GACpF,cAAc,CAAC;AAEjB,qGAAqG;AACrG,MAAM,MAAM,qBAAqB,CAAC,KAAK,SAAS,cAAc,GAAG,cAAc,IAC3E,WAAW,CAAC,KAAK,CAAC,GAClB,CAAC,QAAQ,GAAG,cAAc,CAAC,CAAC;AAEhC,MAAM,WAAW,mBAAmB,CAAC,KAAK,SAAS,cAAc,GAAG,cAAc;IAChF,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACxC,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;IAEhB,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAErD,mDAAmD;IACnD,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B"}

package/dist/cjs/helpers/inversion/common/types/model.js.map

@@ -1 +1 @@
-{"version":3,"file":"model.js","sourceRoot":"","sources":["../../../../../../src/helpers/inversion/common/types/model.ts"],"names":[],"mappings":"","sourcesContent":["import type { AbstractEntity } from '@/base/models';\nimport type {\n  ScopeFilters,\n  TFilter,\n  TScopeFilterMissingBehavior,\n  TWhere,\n} from '@/base/repositories';\nimport type { TClass, TNullable, TValueOrResolver } from '@venizia/ignis-helpers/common';\nimport type { IArtifactRegistrationOptions } from './artifact';\n\nexport interface IModelAuthorizeSettings {\n  /** The authorization principal name (resource/subject) for this model. */\n  principal: string;\n  /** Extensible - consumers can add any extra authorization metadata. */\n  [extra: string | symbol]: any;\n}\n\n/**\n * Row-scope resolver for `@model` settings.scopeFilter - resolved per query, so it can depend on\n * the current request (tenant, org, membership). Framework-internal escape hatches aside, nothing\n * short of removing this setting from the model turns scoping off.\n */\nexport interface IScopeFilterSettings {\n  /**\n   * Returns the scope `where`; `ScopeFilters.UNRESTRICTED` to apply no scope for THIS call (an\n   * internal operator, a caller the application has decided sees everything); or null/undefined\n   * when this caller's scope cannot be determined at all.\n   */\n  resolve: () => TNullable<TWhere> | typeof ScopeFilters.UNRESTRICTED;\n\n  /**\n   * What `applyScopeFilter` does when `resolve()` returns null/undefined - no request context, no\n   * tenant, a background job. Defaults to `deny`: an unresolved scope matches zero rows, never\n   * every row. `allow` is an explicit, reviewed opt-out for migrations and background jobs, declared\n   * per MODEL - it cannot express a per-USER bypass; use `ScopeFilters.UNRESTRICTED` for that.\n   */\n  onMissing?: TScopeFilterMissingBehavior;\n}\n\nexport interface IModelSettings {\n  /** Properties excluded from all query results at SQL level. */\n  hiddenProperties?: string[];\n\n  /** Default filter auto-applied to all repository operations. Bypassable via shouldSkipDefaultFilter. */\n  defaultFilter?: TFilter;\n\n  /**\n   * Row scope: ANDed into every read and write whose scope is expressible as a filter clause, and\n   * NOT removable by `shouldSkipDefaultFilter`. Resolved per query, so it can depend on the current\n   * request. Ownership resolved per row or through a polymorphic reference is NOT expressible here -\n   * that check is still the application's to perform.\n   *\n   * Relational repositories only - a search-backed model (Typesense, Meilisearch) never reads\n   * this setting, so mirroring a scoped entity into a search index needs its own query-time scope.\n   */\n  scopeFilter?: IScopeFilterSettings;\n\n  /** Default row limit when a query omits `limit`. Must be a positive integer. Falls back to DEFAULT_LIMIT (10). */\n  defaultLimit?: number;\n\n  /**\n   * Largest `limit` a CALLER may ask for. Must be a positive integer. Falls back to\n   * DEFAULT_MAX_LIMIT (1000).\n   *\n   * Policy, not capacity - the engine's own ceiling sits far above it. The number is chosen so\n   * that reaching it means the caller is doing something unusual, and raising it is how a model\n   * says so deliberately.\n   */\n  maxLimit?: number;\n\n  /** Authorization settings for this model (principal name, etc.). */\n  authorize?: IModelAuthorizeSettings;\n}\n\nexport interface IModelMetadata extends IArtifactRegistrationOptions {\n  type: 'entity' | 'view';\n  tableName?: string;\n  skipMigrate?: boolean;\n  settings?: IModelSettings;\n}\n\nexport interface IEntityStatics {\n  schema?: unknown;\n  relations?: TValueOrResolver<Array<unknown>>;\n}\n\nexport type TModelClass<Model extends AbstractEntity = AbstractEntity> = TClass<Model> &\n  IEntityStatics;\n\n/** Decorator target for model classes (supports both strongly typed and ClassDecorator patterns). */\nexport type TDecoratorModelTarget<Model extends AbstractEntity = AbstractEntity> =\n  | TModelClass<Model>\n  | (Function & IEntityStatics);\n\nexport interface IModelRegistryEntry<Model extends AbstractEntity = AbstractEntity> {\n  target: TValueOrResolver<TClass<Model>>;\n  metadata: IModelMetadata;\n  schema: unknown;\n\n  /** Lazy resolver to avoid circular deps. Resolved when DataSource builds schema. */\n  relationsResolver?: TValueOrResolver<Array<unknown>>;\n\n  /** Cache populated on first buildSchema() call. */\n  _builtRelations?: unknown;\n}\n"]}
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../../../../../src/helpers/inversion/common/types/model.ts"],"names":[],"mappings":"","sourcesContent":["import type { AbstractEntity } from '@/base/models';\nimport type {\n  ScopeFilters,\n  TFilter,\n  TScopeFilterMissingBehavior,\n  TScopeWriteGuard,\n  TWhere,\n} from '@/base/repositories';\nimport type { TClass, TNullable, TValueOrResolver } from '@venizia/ignis-helpers/common';\nimport type { IArtifactRegistrationOptions } from './artifact';\n\nexport interface IModelAuthorizeSettings {\n  /** The authorization principal name (resource/subject) for this model. */\n  principal: string;\n  /** Extensible - consumers can add any extra authorization metadata. */\n  [extra: string | symbol]: any;\n}\n\n/** What a restricted caller may write to the scope columns (`@model` settings.access.write). */\nexport interface IModelAccessWriteSettings {\n  /**\n   * What a create, createAll or an update payload that names a scope column does when its value\n   * disagrees with the resolved scope. `reject` (default) refuses the write and writes nothing - for\n   * `createAll` not even the valid rows. `assign` also fills a scope column that is ABSENT from a\n   * created row, when the scope is a single equality; a value that is present and disagrees is\n   * still refused.\n   *\n   * The scope's columns and allowed values are read from the resolved `where` (equality, `eq`, `inq`\n   * and arrays, `and`, and an `or` over one column). Any other shape cannot be checked, and the write\n   * is refused with its own message - never skipped. `ScopeFilters.UNRESTRICTED` bypasses the guard\n   * too, which is the deliberate way to write across scopes (system scope, an admin role).\n   *\n   * Not checked: an update that does not name the scope column (the row was already selected through\n   * the scoped `where`), and raw statements that bypass the repository.\n   */\n  mode?: TScopeWriteGuard;\n\n  /**\n   * `true` lets a restricted caller write `null` to a scope column, or leave it out on create: the\n   * row has no owner and is shared. Default `false`, so `null` is refused like any other value\n   * outside the scope, even when the resolved scope has a `null` branch (that branch lets the caller\n   * READ shared rows, a separate permission). Reads are scoped as before.\n   */\n  sharedRows?: boolean;\n}\n\n/**\n * Row access for `@model` settings.access - resolved per query, so it can depend on the current\n * request (tenant, org, membership). Framework-internal escape hatches aside, nothing short of\n * removing this setting from the model turns scoping off.\n */\nexport interface IModelAccessSettings {\n  /**\n   * Returns the scope `where`; `ScopeFilters.UNRESTRICTED` to apply no scope for THIS call (an\n   * internal operator, a caller the application has decided sees everything); or null/undefined\n   * when this caller's scope cannot be determined at all.\n   */\n  resolve: () => TNullable<TWhere> | typeof ScopeFilters.UNRESTRICTED;\n\n  /**\n   * What `applyScopeFilter` does when `resolve()` returns null/undefined - no request context, no\n   * tenant, a background job. Defaults to `deny`: an unresolved scope matches zero rows, never\n   * every row. `allow` is an explicit, reviewed opt-out for migrations and background jobs, declared\n   * per MODEL - it cannot express a per-USER bypass; use `ScopeFilters.UNRESTRICTED` for that.\n   */\n  onMissing?: TScopeFilterMissingBehavior;\n\n  /**\n   * The property names the write guard checks. Optional: with none declared the guard checks every\n   * column the resolved scope constrains. When declared, each name must exist on the model (checked\n   * at boot), and a resolved scope that constrains any other column is refused as unverifiable.\n   */\n  columns?: string[];\n\n  /** What a restricted caller may write to the scope columns. See {@link IModelAccessWriteSettings}. */\n  write?: IModelAccessWriteSettings;\n}\n\n/**\n * The old, flat shape of {@link IModelAccessSettings}.\n *\n * @deprecated Use `settings.access` (`writeGuard` is `access.write.mode`, `sharedRows` is\n * `access.write.sharedRows`). Removed in 0.4.3.\n */\nexport interface IScopeFilterSettings {\n  resolve: () => TNullable<TWhere> | typeof ScopeFilters.UNRESTRICTED;\n  onMissing?: TScopeFilterMissingBehavior;\n  writeGuard?: TScopeWriteGuard;\n  sharedRows?: boolean;\n  columns?: string[];\n}\n\n/** What a query runs with when it names nothing (`@model` settings.query). */\nexport interface IModelQuerySettings {\n  /** Default filter auto-applied to all repository operations. Bypassable via shouldSkipDefaultFilter. */\n  filter?: TFilter;\n\n  limit?: {\n    /** Default row limit when a query omits `limit`. Must be a positive integer. Falls back to DEFAULT_LIMIT (10). */\n    default?: number;\n\n    /**\n     * Largest `limit` a CALLER may ask for. Must be a positive integer. Falls back to\n     * DEFAULT_MAX_LIMIT (1000).\n     *\n     * Policy, not capacity - the engine's own ceiling sits far above it. The number is chosen so\n     * that reaching it means the caller is doing something unusual, and raising it is how a model\n     * says so deliberately.\n     */\n    max?: number;\n  };\n}\n\nexport interface IModelSettings {\n  /** Properties excluded from all query results at SQL level. */\n  hiddenProperties?: string[];\n\n  /** Default filter and limits of a query: `filter`, `limit.default`, `limit.max`. */\n  query?: IModelQuerySettings;\n\n  /**\n   * Row access: the scope ANDed into every read and write whose scope is expressible as a filter\n   * clause, NOT removable by `shouldSkipDefaultFilter`, and the guard that holds writes to it.\n   * Ownership resolved per row or through a polymorphic reference is NOT expressible here - that\n   * check is still the application's to perform.\n   *\n   * Relational repositories only - a search-backed model (Typesense, Meilisearch) never reads\n   * this setting, so mirroring a scoped entity into a search index needs its own query-time scope.\n   */\n  access?: IModelAccessSettings;\n\n  /** Authorization settings for this model (principal name, etc.). */\n  authorize?: IModelAuthorizeSettings;\n\n  /** @deprecated Use `query.filter`. Removed in 0.4.3. */\n  defaultFilter?: TFilter;\n\n  /** @deprecated Use `access`. Removed in 0.4.3. */\n  scopeFilter?: IScopeFilterSettings;\n\n  /** @deprecated Use `query.limit.default`. Removed in 0.4.3. */\n  defaultLimit?: number;\n\n  /** @deprecated Use `query.limit.max`. Removed in 0.4.3. */\n  maxLimit?: number;\n}\n\n/** One deprecated settings key a model still uses, and the key that replaces it. */\nexport interface IDeprecatedModelSetting {\n  /** The old key, written as the model wrote it: `defaultFilter`, `scopeFilter.writeGuard`. */\n  key: string;\n  /** The key that replaces it: `query.filter`, `access.write.mode`. */\n  use: string;\n}\n\nexport interface IModelMetadata extends IArtifactRegistrationOptions {\n  type: 'entity' | 'view';\n  tableName?: string;\n  skipMigrate?: boolean;\n\n  /** As the `@model` decorator stores it: normalised to the new keys; the deprecated keys are gone. */\n  settings?: IModelSettings;\n\n  /** Set by the decorator, read by the boot warning; not for application code. */\n  deprecatedSettings?: IDeprecatedModelSetting[];\n}\n\nexport interface IEntityStatics {\n  schema?: unknown;\n  relations?: TValueOrResolver<Array<unknown>>;\n}\n\nexport type TModelClass<Model extends AbstractEntity = AbstractEntity> = TClass<Model> &\n  IEntityStatics;\n\n/** Decorator target for model classes (supports both strongly typed and ClassDecorator patterns). */\nexport type TDecoratorModelTarget<Model extends AbstractEntity = AbstractEntity> =\n  | TModelClass<Model>\n  | (Function & IEntityStatics);\n\nexport interface IModelRegistryEntry<Model extends AbstractEntity = AbstractEntity> {\n  target: TValueOrResolver<TClass<Model>>;\n  metadata: IModelMetadata;\n  schema: unknown;\n\n  /** Lazy resolver to avoid circular deps. Resolved when DataSource builds schema. */\n  relationsResolver?: TValueOrResolver<Array<unknown>>;\n\n  /** Cache populated on first buildSchema() call. */\n  _builtRelations?: unknown;\n}\n"]}

package/dist/esm/base/applications/cors.d.ts

@@ -0,0 +1,13 @@
+import type { Hono } from 'hono';
+import type { ICORSOptions } from './common/index.js';
+/**
+ * Installs `configs.middlewares.cors` on the server when it is set and not disabled; with no config
+ * nothing is installed. Called first in the default stack, so every response the framework produces
+ * on its own - a bodyLimit 413, a body the request spy cannot parse, the error envelope - leaves
+ * with the headers a browser needs to read it.
+ */
+export declare const registerCors: (opts: {
+    server: Hono<any, any, any>;
+    options?: ICORSOptions;
+}) => void;
+//# sourceMappingURL=cors.d.ts.map

package/dist/esm/base/applications/cors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../../../src/base/applications/cors.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAE7C;;;;;GAKG;AACH,eAAO,MAAM,YAAY,GAAI,MAAM;IACjC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5B,OAAO,CAAC,EAAE,YAAY,CAAC;CACxB,KAAG,IAwCH,CAAC"}

package/dist/esm/base/applications/cors.js

@@ -0,0 +1,39 @@
+import { getError } from '@venizia/ignis-helpers/core';
+import { cors } from 'hono/cors';
+/**
+ * Installs `configs.middlewares.cors` on the server when it is set and not disabled; with no config
+ * nothing is installed. Called first in the default stack, so every response the framework produces
+ * on its own - a bodyLimit 413, a body the request spy cannot parse, the error envelope - leaves
+ * with the headers a browser needs to read it.
+ */
+export const registerCors = (opts) => {
+    const { server, options } = opts;
+    if (!options || options.enable === false) {
+        return;
+    }
+    const { origin, path, allowMethods, allowHeaders, maxAge, credentials, exposeHeaders } = options;
+    const hasOrigin = typeof origin === 'function' || (Array.isArray(origin) ? origin.length > 0 : !!origin);
+    if (!hasOrigin) {
+        throw getError({
+            message: '[registerCors] configs.middlewares.cors.origin is required | a string, a list of strings or a function',
+        });
+    }
+    const origins = Array.isArray(origin) ? origin : [origin];
+    if (credentials && origins.includes('*')) {
+        throw getError({
+            message: "[registerCors] configs.middlewares.cors.credentials cannot be combined with origin '*' | a browser refuses a wildcard origin on a credentialed request | list the origins instead",
+        });
+    }
+    // Only the keys that are set: hono spreads over its defaults, so an `undefined` would erase one
+    // (a missing `allowMethods` would then answer a preflight with no allowed methods).
+    const settings = Object.fromEntries(Object.entries({
+        origin,
+        allowMethods,
+        allowHeaders,
+        maxAge,
+        credentials,
+        exposeHeaders,
+    }).filter(([, value]) => value !== undefined));
+    server.use(path ?? '*', cors(settings));
+};
+//# sourceMappingURL=cors.js.map

package/dist/esm/base/applications/cors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.js","sourceRoot":"","sources":["../../../../src/base/applications/cors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAEvD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAG5B,EAAQ,EAAE;IACT,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAEjC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACzC,OAAO;IACT,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAEjG,MAAM,SAAS,GACb,OAAO,MAAM,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACzF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,QAAQ,CAAC;YACb,OAAO,EACL,wGAAwG;SAC3G,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,QAAQ,CAAC;YACb,OAAO,EACL,mLAAmL;SACtL,CAAC,CAAC;IACL,CAAC;IAED,gGAAgG;IAChG,oFAAoF;IACpF,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CACjC,MAAM,CAAC,OAAO,CAAC;QACb,MAAM;QACN,YAAY;QACZ,YAAY;QACZ,MAAM;QACN,WAAW;QACX,aAAa;KACd,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAC9C,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,IAAI,CAAC,QAAsC,CAAC,CAAC,CAAC;AACxE,CAAC,CAAC","sourcesContent":["import { getError } from '@venizia/ignis-helpers/core';\nimport type { Hono } from 'hono';\nimport { cors } from 'hono/cors';\nimport type { ICORSOptions } from './common';\n\n/**\n * Installs `configs.middlewares.cors` on the server when it is set and not disabled; with no config\n * nothing is installed. Called first in the default stack, so every response the framework produces\n * on its own - a bodyLimit 413, a body the request spy cannot parse, the error envelope - leaves\n * with the headers a browser needs to read it.\n */\nexport const registerCors = (opts: {\n  server: Hono<any, any, any>;\n  options?: ICORSOptions;\n}): void => {\n  const { server, options } = opts;\n\n  if (!options || options.enable === false) {\n    return;\n  }\n\n  const { origin, path, allowMethods, allowHeaders, maxAge, credentials, exposeHeaders } = options;\n\n  const hasOrigin =\n    typeof origin === 'function' || (Array.isArray(origin) ? origin.length > 0 : !!origin);\n  if (!hasOrigin) {\n    throw getError({\n      message:\n        '[registerCors] configs.middlewares.cors.origin is required | a string, a list of strings or a function',\n    });\n  }\n\n  const origins = Array.isArray(origin) ? origin : [origin];\n  if (credentials && origins.includes('*')) {\n    throw getError({\n      message:\n        \"[registerCors] configs.middlewares.cors.credentials cannot be combined with origin '*' | a browser refuses a wildcard origin on a credentialed request | list the origins instead\",\n    });\n  }\n\n  // Only the keys that are set: hono spreads over its defaults, so an `undefined` would erase one\n  // (a missing `allowMethods` would then answer a preflight with no allowed methods).\n  const settings = Object.fromEntries(\n    Object.entries({\n      origin,\n      allowMethods,\n      allowHeaders,\n      maxAge,\n      credentials,\n      exposeHeaders,\n    }).filter(([, value]) => value !== undefined),\n  );\n\n  server.use(path ?? '*', cors(settings as Parameters<typeof cors>[0]));\n};\n"]}

package/dist/esm/base/applications/deprecations.d.ts

@@ -0,0 +1,10 @@
+import type { ILogger } from '@venizia/ignis-helpers/core';
+/**
+ * One warning per deprecated `@model` settings key a model still uses, naming the model, the old
+ * key, the key that replaces it and the release that removes it. Read from what the decorator
+ * recorded, so it covers models registered by components and auto-discovery too.
+ */
+export declare const warnDeprecatedModelSettings: (opts: {
+    logger: ILogger;
+}) => number;
+//# sourceMappingURL=deprecations.d.ts.map

package/dist/esm/base/applications/deprecations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deprecations.d.ts","sourceRoot":"","sources":["../../../../src/base/applications/deprecations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAI3D;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,GAAI,MAAM;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,KAAG,MAkBvE,CAAC"}

package/dist/esm/base/applications/deprecations.js

@@ -0,0 +1,19 @@
+import { MetadataRegistry } from '../../helpers/inversion/index.js';
+import { DEPRECATED_MODEL_SETTINGS_REMOVED_IN } from '../metadata/model-settings.js';
+/**
+ * One warning per deprecated `@model` settings key a model still uses, naming the model, the old
+ * key, the key that replaces it and the release that removes it. Read from what the decorator
+ * recorded, so it covers models registered by components and auto-discovery too.
+ */
+export const warnDeprecatedModelSettings = (opts) => {
+    const { logger } = opts;
+    let count = 0;
+    for (const [name, entry] of MetadataRegistry.getInstance().getAllModels()) {
+        for (const { key, use } of entry.metadata?.deprecatedSettings ?? []) {
+            logger.warn('[deprecated] model %s uses settings.%s | use settings.%s instead | removed in %s', name, key, use, DEPRECATED_MODEL_SETTINGS_REMOVED_IN);
+            count += 1;
+        }
+    }
+    return count;
+};
+//# sourceMappingURL=deprecations.js.map

package/dist/esm/base/applications/deprecations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deprecations.js","sourceRoot":"","sources":["../../../../src/base/applications/deprecations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,oCAAoC,EAAE,MAAM,4BAA4B,CAAC;AAElF;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,IAAyB,EAAU,EAAE;IAC/E,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,gBAAgB,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC;QAC1E,KAAK,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,KAAK,CAAC,QAAQ,EAAE,kBAAkB,IAAI,EAAE,EAAE,CAAC;YACpE,MAAM,CAAC,IAAI,CACT,kFAAkF,EAClF,IAAI,EACJ,GAAG,EACH,GAAG,EACH,oCAAoC,CACrC,CAAC;YACF,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CAAC","sourcesContent":["import type { ILogger } from '@venizia/ignis-helpers/core';\nimport { MetadataRegistry } from '@/helpers/inversion';\nimport { DEPRECATED_MODEL_SETTINGS_REMOVED_IN } from '../metadata/model-settings';\n\n/**\n * One warning per deprecated `@model` settings key a model still uses, naming the model, the old\n * key, the key that replaces it and the release that removes it. Read from what the decorator\n * recorded, so it covers models registered by components and auto-discovery too.\n */\nexport const warnDeprecatedModelSettings = (opts: { logger: ILogger }): number => {\n  const { logger } = opts;\n  let count = 0;\n\n  for (const [name, entry] of MetadataRegistry.getInstance().getAllModels()) {\n    for (const { key, use } of entry.metadata?.deprecatedSettings ?? []) {\n      logger.warn(\n        '[deprecated] model %s uses settings.%s | use settings.%s instead | removed in %s',\n        name,\n        key,\n        use,\n        DEPRECATED_MODEL_SETTINGS_REMOVED_IN,\n      );\n      count += 1;\n    }\n  }\n\n  return count;\n};\n"]}

package/dist/esm/base/applications/rest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rest.d.ts","sourceRoot":"","sources":["../../../../src/base/applications/rest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,OAAO,KAAK,EAAE,OAAO,EAAiB,MAAM,qBAAqB,CAAC;AAElE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAW,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpG,OAAO,EAGL,kBAAkB,EAEnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAIxC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAGvF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,KAAK,EAAE,mBAAmB,EAAqB,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAE5F,UAAU,+BAA+B,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa;IAC/E,SAAS,EAAE,iBAAiB,CAAC;IAE7B,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAAC,QAAQ,EAAE,CAAC,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAClF;AAED,4NAA4N;AAC5N,8BAAsB,eAAe,CACnC,MAAM,SAAS,GAAG,GAAG,GAAG,EACxB,SAAS,SAAS,MAAM,GAAG,EAAE,EAC7B,QAAQ,SAAS,MAAM,GAAG,GAAG,CAC7B,SAAQ,mBAAmB;IAC3B,OAAO,CAAC,kBAAkB,CAAmC;IAC7D,OAAO,CAAC,eAAe,CAA6B;IAEpD,sPAAsP;IACtP,SAAS,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;KAAE,CAAC;IAErE,SAAS,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC/D,SAAS,CAAC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAE1D,8GAA8G;IAC9G,OAAO,CAAC,kBAAkB,CAAC,CAAkC;gBAEjD,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,mBAAmB,CAAA;KAAE;IA0BhE,aAAa,IAAI,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;IAIzD,SAAS,IAAI,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;cAIlC,oBAAoB;IAWvC,oHAAoH;IACpH,SAAS,CAAC,iBAAiB,IAAI,MAAM;IAIrC,sLAAsL;IACtL,SAAS,CAAC,oBAAoB,IAAI,sBAAsB;IAYxD;;;;OAIG;IACH,SAAS,CAAC,0BAA0B,IAAI,cAAc,CAAC,IAAI,CAAC;IAyC5D,wHAAwH;IACxH,OAAO,CAAC,oBAAoB;IAY5B,OAAO,CAAC,eAAe;IAiBvB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAiBhC;;;;OAIG;IACH,SAAS,CAAC,eAAe,IAAI,iBAAiB,EAAE;IA4C1C,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC,qKAAqK;IACrK,OAAO,CAAC,sBAAsB,CAAqB;YAErC,kBAAkB;IAYhC;;;;;;;OAOG;IACH,qBAAqB,CAAC,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,MAAM,EAAE;IAyB3D,8OAA8O;IAC9O,SAAS,CAAC,cAAc,IAAI,IAAI;IAiChC,6JAA6J;cAC7I,eAAe,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,iBAAiB,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAkCpF,SAAS,CAAC,aAAa;IAevB;;;;OAIG;IACG,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE;QACxB,GAAG,EAAE,MAAM,CAAC;QACZ,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACxB,MAAM,EAAE,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;SAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KAC1D,GAAG,OAAO,CAAC,IAAI,CAAC;cAwBD,uBAAuB,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa,EAC7E,IAAI,EAAE,+BAA+B,CAAC,CAAC,CAAC,GACvC,OAAO,CAAC,IAAI,CAAC;IAsChB,6UAA6U;IAC7U,SAAS,CAAC,wBAAwB,CAAC,IAAI,EAAE;QACvC,GAAG,EAAE,MAAM,CAAC;QACZ,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,IAAI;IAmBR,uNAAuN;IACvN,OAAO,CAAC,gBAAgB;IAgDxB,aAAa,CAAC,IAAI,SAAS,iBAAiB,CAAC,OAAO,CAAC,EAAE,OAAO,SAAS,MAAM,GAAG,EAAE,EAChF,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EACpB,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,GACzB,OAAO,CAAC,IAAI,CAAC;IAUV,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;IAW7C,SAAS,CAAC,IAAI,SAAS,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,SAAS,MAAM,GAAG,EAAE,EACxE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EACpB,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,GACzB,OAAO,CAAC,IAAI,CAAC;IAUV,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IAWzC;;;;OAIG;IACG,8BAA8B,IAAI,OAAO,CAAC,IAAI,CAAC;IAWrD,oHAAoH;IAC9G,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAiB1C,8JAA8J;IAC9J,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUxE,OAAO,CAAC,IAAI,SAAS,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUtF,UAAU,CAAC,IAAI,SAAS,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAU5F,UAAU,CAAC,IAAI,SAAS,WAAW,CAAC,OAAO,CAAC,EAAE,OAAO,SAAS,MAAM,GAAG,EAAE,EACvE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EACpB,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,GACzB,OAAO,CAAC,IAAI,CAAC;IAUhB,+IAA+I;IACzI,iBAAiB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IA8DlE,0OAA0O;IACpO,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC;IAIlD;;;;;;;OAOG;cACa,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC;IAkB5D,uOAAuO;IACvO,OAAO,CAAC,gBAAgB;IAgClB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAW1C;;;;OAIG;cACa,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;CA4BlD"}
+{"version":3,"file":"rest.d.ts","sourceRoot":"","sources":["../../../../src/base/applications/rest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,OAAO,KAAK,EAAE,OAAO,EAAiB,MAAM,qBAAqB,CAAC;AAElE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAW,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpG,OAAO,EAGL,kBAAkB,EAEnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAIxC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAGvF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAIjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,KAAK,EAAE,mBAAmB,EAAqB,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAE5F,UAAU,+BAA+B,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa;IAC/E,SAAS,EAAE,iBAAiB,CAAC;IAE7B,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAAC,QAAQ,EAAE,CAAC,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAClF;AAED,4NAA4N;AAC5N,8BAAsB,eAAe,CACnC,MAAM,SAAS,GAAG,GAAG,GAAG,EACxB,SAAS,SAAS,MAAM,GAAG,EAAE,EAC7B,QAAQ,SAAS,MAAM,GAAG,GAAG,CAC7B,SAAQ,mBAAmB;IAC3B,OAAO,CAAC,kBAAkB,CAAmC;IAC7D,OAAO,CAAC,eAAe,CAA6B;IAEpD,sPAAsP;IACtP,SAAS,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;KAAE,CAAC;IAErE,SAAS,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC/D,SAAS,CAAC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAE1D,8GAA8G;IAC9G,OAAO,CAAC,kBAAkB,CAAC,CAAkC;gBAEjD,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,mBAAmB,CAAA;KAAE;IA0BhE,aAAa,IAAI,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;IAIzD,SAAS,IAAI,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;cAIlC,oBAAoB;IAWvC,oHAAoH;IACpH,SAAS,CAAC,iBAAiB,IAAI,MAAM;IAIrC,sLAAsL;IACtL,SAAS,CAAC,oBAAoB,IAAI,sBAAsB;IAYxD;;;;OAIG;IACH,SAAS,CAAC,0BAA0B,IAAI,cAAc,CAAC,IAAI,CAAC;IA6C5D,wHAAwH;IACxH,OAAO,CAAC,oBAAoB;IAY5B,OAAO,CAAC,eAAe;IAiBvB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAiBhC;;;;OAIG;IACH,SAAS,CAAC,eAAe,IAAI,iBAAiB,EAAE;IA4C1C,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC,qKAAqK;IACrK,OAAO,CAAC,sBAAsB,CAAqB;YAErC,kBAAkB;IAYhC;;;;;;;OAOG;IACH,qBAAqB,CAAC,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,MAAM,EAAE;IAyB3D,8OAA8O;IAC9O,SAAS,CAAC,cAAc,IAAI,IAAI;IAiChC,6JAA6J;cAC7I,eAAe,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,iBAAiB,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAoCpF,SAAS,CAAC,aAAa;IAevB;;;;OAIG;IACG,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE;QACxB,GAAG,EAAE,MAAM,CAAC;QACZ,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACxB,MAAM,EAAE,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;SAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KAC1D,GAAG,OAAO,CAAC,IAAI,CAAC;cAwBD,uBAAuB,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa,EAC7E,IAAI,EAAE,+BAA+B,CAAC,CAAC,CAAC,GACvC,OAAO,CAAC,IAAI,CAAC;IAsChB,6UAA6U;IAC7U,SAAS,CAAC,wBAAwB,CAAC,IAAI,EAAE;QACvC,GAAG,EAAE,MAAM,CAAC;QACZ,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,IAAI;IAmBR,uNAAuN;IACvN,OAAO,CAAC,gBAAgB;IAgDxB,aAAa,CAAC,IAAI,SAAS,iBAAiB,CAAC,OAAO,CAAC,EAAE,OAAO,SAAS,MAAM,GAAG,EAAE,EAChF,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EACpB,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,GACzB,OAAO,CAAC,IAAI,CAAC;IAUV,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;IAW7C,SAAS,CAAC,IAAI,SAAS,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,SAAS,MAAM,GAAG,EAAE,EACxE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EACpB,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,GACzB,OAAO,CAAC,IAAI,CAAC;IAUV,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IAWzC;;;;OAIG;IACG,8BAA8B,IAAI,OAAO,CAAC,IAAI,CAAC;IAWrD,oHAAoH;IAC9G,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAiB1C,8JAA8J;IAC9J,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUxE,OAAO,CAAC,IAAI,SAAS,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUtF,UAAU,CAAC,IAAI,SAAS,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAU5F,UAAU,CAAC,IAAI,SAAS,WAAW,CAAC,OAAO,CAAC,EAAE,OAAO,SAAS,MAAM,GAAG,EAAE,EACvE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EACpB,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,GACzB,OAAO,CAAC,IAAI,CAAC;IAUhB,+IAA+I;IACzI,iBAAiB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IA8DlE,0OAA0O;IACpO,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC;IAIlD;;;;;;;OAOG;cACa,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC;IAkB5D,uOAAuO;IACvO,OAAO,CAAC,gBAAgB;IAgClB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAW1C;;;;OAIG;cACa,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;CA4BlD"}

package/dist/esm/base/applications/rest.js

@@ -12,6 +12,8 @@ import { BaseAppErrorMiddleware } from '../middlewares/app-error/app-error.middl
 import { RequestErrors } from '../middlewares/common/errors.js';
 import { notFoundHandler } from '../middlewares/not-found/not-found.middleware.js';
 import { AbstractApplication } from './abstract.js';
+import { registerCors } from './cors.js';
+import { warnDeprecatedModelSettings } from './deprecations.js';
 import { ArtifactIndexHelper } from './artifact-index.js';
 import { BootSteps } from './boot-sequence.js';
 /** Adds the `OpenAPIHono` router surface on top of `AbstractApplication` - no listening server, so this is the layer a browser Worker or gRPC-only host can extend without pulling in `Bun.serve` / `@hono/node-server`. */
@@ -75,6 +77,9 @@ export class RestApplication extends AbstractApplication {
      */
     registerDefaultMiddlewares() {
         const server = this.getServer();
+        // First of all, so every response the framework produces on its own - a bodyLimit 413, a body the
+        // request spy cannot parse, the error envelope - leaves with the headers a browser needs to read it.
+        registerCors({ server, options: this.configs.middlewares?.cors });
         server.use(requestId({ generator: () => this.generateRequestId() }));
         // Ahead of every middleware a host adds after this one, so none of them buffers a body over it.
         const bodyLimitOptions = this.configs.middlewares?.bodyLimit;
@@ -279,6 +284,7 @@ export class RestApplication extends AbstractApplication {
                 throw error;
             }
         }
+        warnDeprecatedModelSettings({ logger });
         logger.info('Boot sequence complete | %d step(s) | Took: %s (ms) | %s', steps.length, performance.now() - t, steps.map((step) => step.name).join(' -> '));
     }
     inspectRoutes() {