@veritas-lex/contract-analysis-package 1.2.3 → 1.3.0

package/README.md

@@ -1,181 +1,5 @@
-# @ignatg/contract-analysis-package
-
-Shared NestJS infrastructure for the Contract Analysis platform. This package extracts duplicated infrastructure code from `contract-analysis-api` and `ai-analysis-api` into a single, versioned package.
-
 ## Installation
 
 ```bash
-npm install @ignatg/contract-analysis-package
-```
-
-Or reference locally during development:
-
-```json
-{
-  "dependencies": {
-    "@ignatg/contract-analysis-package": "^1.0.0",
-  }
-}
-```
-
-## What's Included
-
-| Module | Exports | Description |
-|--------|---------|-------------|
-| **Auth** | `JwtAuthGuard`, `BaseJwtStrategy`, `AuthCoreModule`, `CurrentUser`, `Public` | JWT authentication with Supabase JWKS support |
-| **Config** | `createAppConfig`, `createDatabaseConfig`, `createDocConfig`, `createJwtConfig`, `createLoggingConfig`, `createSecurityConfig`, `buildPinoParams`, `RedisConfig`, `StorageConfig` | Parameterised config factories |
-| **Constants** | `CRITICAL_PII_TYPES`, `HIGH_RISK_PII_TYPES`, `STANDARD_PII_TYPES`, `CONTEXTUAL_ENTITIES`, `ContractStatus`, `JobType`, `JobStatus`, `TaskStatus`, `TaskPriority`, `RiskLevel`, `RuleKind`, `RuleDirection` | PII classification + workflow enums |
-| **Database** | `DatabaseModule`, `BaseEntity`, `RedisModule`, `RedisProvider` | TypeORM + BullMQ infrastructure |
-| **DTO** | `ApiResponseDto` | Standard API response wrapper |
-| **Filters** | `AllExceptionsFilter` | Global exception filter |
-| **Helpers** | `TransformInterceptor` | Response transformation interceptor |
-| **Swagger** | `SwaggerDocs` | Swagger/OpenAPI documentation setup |
-| **Bootstrap** | `configureApp` | Shared application bootstrap helper |
-
-## Usage
-
-### Config Factories
-
-Each API calls factory functions with its own defaults:
-
-```typescript
-// config/index.ts
-import {
-  createAppConfig,
-  createDatabaseConfig,
-  createDocConfig,
-  createJwtConfig,
-  createLoggingConfig,
-  createSecurityConfig,
-  RedisConfig,
-  StorageConfig,
-} from '@ignatg/contract-analysis-package';
-
-const AppConfig = createAppConfig({
-  name: 'My API',
-  port: 3000,
-  corsOrigins: 'http://localhost:3333',
-});
-
-const DatabaseConfig = createDatabaseConfig({
-  defaultDbName: 'mydb',
-  defaultPoolMax: 20,
-});
-
-const DocConfig = createDocConfig({
-  name: 'My API Specification',
-  description: 'API documentation',
-});
-
-const JwtConfig = createJwtConfig({ strict: true });
-const LoggingConfig = createLoggingConfig({ defaultLevel: 'debug' });
-const SecurityConfig = createSecurityConfig({ includeEncryptionKey: true });
-
-export default [
-  AppConfig,
-  DatabaseConfig,
-  DocConfig,
-  JwtConfig,
-  LoggingConfig,
-  SecurityConfig,
-  RedisConfig,
-  StorageConfig,
-];
-```
-
-### Auth Module
-
-Extend `BaseJwtStrategy` with your custom `validate()` logic:
-
-```typescript
-import { Injectable } from '@nestjs/common';
-import { ConfigService } from '@nestjs/config';
-import { BaseJwtStrategy, JwtPayload } from '@ignatg/contract-analysis-package';
-
-@Injectable()
-export class JwtStrategy extends BaseJwtStrategy {
-  constructor(configService: ConfigService) {
-    super(configService);
-  }
-
-  validate(payload: JwtPayload) {
-    this.validateCorePayload(payload);
-    return {
-      userId: payload.sub,
-      email: payload.email || '',
-      role: payload.role || 'user',
-    };
-  }
-}
-```
-
-### Bootstrap Helper
-
-Simplify your `main.ts`:
-
-```typescript
-import { NestFactory, NestApplication } from '@nestjs/core';
-import { ConfigService } from '@nestjs/config';
-import { Logger } from 'nestjs-pino';
-import { configureApp } from '@ignatg/contract-analysis-package';
-import { MainModule } from './main.module';
-
-async function bootstrap() {
-  const app = await NestFactory.create<NestApplication>(MainModule, { bufferLogs: true });
-  await configureApp(app);
-
-  const configService = app.get(ConfigService);
-  const port = configService.get<number>('app.port');
-  const logger = app.get(Logger);
-  logger.log(`Main app will serve on PORT ${port}`, 'MainApplication');
-  await app.listen(port);
-}
-
-bootstrap();
-```
-
-### Database Module
-
-```typescript
-import { Module } from '@nestjs/common';
-import { DatabaseModule } from '@ignatg/contract-analysis-package';
-
-@Module({
-  imports: [DatabaseModule.register()],
-})
-export class MainModule {}
-```
-
-### Shared Enums
-
-```typescript
-import { ContractStatus, JobStatus, RiskLevel } from '@ignatg/contract-analysis-package';
-
-// Use in entity files (re-export pattern)
-export { ContractStatus } from '@ignatg/contract-analysis-package';
-
-// Use in services
-if (contract.status === ContractStatus.READY) { ... }
-if (job.status === JobStatus.QUEUED) { ... }
-```
-
-Available enums: `ContractStatus`, `JobType`, `JobStatus`, `TaskStatus`, `TaskPriority`, `RiskLevel`, `RuleKind`, `RuleDirection`
-
-## Peer Dependencies
-
-This package declares all NestJS ecosystem packages as `peerDependencies` to avoid version conflicts. Your consuming application must have them installed.
-
-## Building
-
-```bash
-npm run build    # Compiles TypeScript to dist/
-npm run clean    # Removes dist/
-```
-
-## Publishing
-
-Configured for GitHub Packages:
-
-```bash
-npm publish
+npm install @veritas-lex/contract-analysis-package
 ```

package/dist/config/storage.config.d.ts

@@ -7,6 +7,8 @@ declare const _default: (() => {
         key: string | undefined;
         bucket: string;
         signedUrlExpiry: number;
+        uploadUrlExpiry: number;
+        downloadUrlExpiry: number;
     };
 }) & import("@nestjs/config").ConfigFactoryKeyHost<{
     supabase: {
@@ -14,6 +16,8 @@ declare const _default: (() => {
         key: string | undefined;
         bucket: string;
         signedUrlExpiry: number;
+        uploadUrlExpiry: number;
+        downloadUrlExpiry: number;
     };
 }>;
 export default _default;

package/dist/config/storage.config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage.config.d.ts","sourceRoot":"","sources":["../../src/config/storage.config.ts"],"names":[],"mappings":"AAEA;;GAEG;;;;;;;;;;;;;;;;AACH,wBASI"}
+{"version":3,"file":"storage.config.d.ts","sourceRoot":"","sources":["../../src/config/storage.config.ts"],"names":[],"mappings":"AAEA;;GAEG;;;;;;;;;;;;;;;;;;;;AACH,wBAeI"}

package/dist/config/storage.config.js

@@ -11,6 +11,12 @@ exports.default = (0, config_1.registerAs)("storage", () => ({
         bucket: process.env.SUPABASE_STORAGE_BUCKET || "contracts",
         signedUrlExpiry: process.env.SUPABASE_SIGNED_URL_EXPIRY
             ? parseInt(process.env.SUPABASE_SIGNED_URL_EXPIRY, 10)
+            : 3600, // Default to 1 hour (backward compat)
+        uploadUrlExpiry: process.env.SUPABASE_UPLOAD_URL_EXPIRY
+            ? parseInt(process.env.SUPABASE_UPLOAD_URL_EXPIRY, 10)
+            : 600, // Default to 10 minutes — uploads should be short-lived
+        downloadUrlExpiry: process.env.SUPABASE_DOWNLOAD_URL_EXPIRY
+            ? parseInt(process.env.SUPABASE_DOWNLOAD_URL_EXPIRY, 10)
             : 3600, // Default to 1 hour
     },
 }));

package/dist/config/storage.config.js.map

@@ -1 +1 @@
-{"version":3,"file":"storage.config.js","sourceRoot":"","sources":["../../src/config/storage.config.ts"],"names":[],"mappings":";;AAAA,2CAA4C;AAE5C;;GAEG;AACH,kBAAe,IAAA,mBAAU,EAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,QAAQ,EAAE;QACR,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;QAC7B,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB;QAC1C,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,WAAW;QAC1D,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B;YACrD,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,EAAE,CAAC;YACtD,CAAC,CAAC,IAAI,EAAE,oBAAoB;KAC/B;CACF,CAAC,CAAC,CAAC"}
+{"version":3,"file":"storage.config.js","sourceRoot":"","sources":["../../src/config/storage.config.ts"],"names":[],"mappings":";;AAAA,2CAA4C;AAE5C;;GAEG;AACH,kBAAe,IAAA,mBAAU,EAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,QAAQ,EAAE;QACR,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;QAC7B,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB;QAC1C,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,WAAW;QAC1D,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B;YACrD,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,EAAE,CAAC;YACtD,CAAC,CAAC,IAAI,EAAE,sCAAsC;QAChD,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B;YACrD,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,EAAE,CAAC;YACtD,CAAC,CAAC,GAAG,EAAE,wDAAwD;QACjE,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B;YACzD,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,EAAE,CAAC;YACxD,CAAC,CAAC,IAAI,EAAE,oBAAoB;KAC/B;CACF,CAAC,CAAC,CAAC"}

package/dist/constants/file-validation.constants.d.ts

@@ -25,4 +25,27 @@ export declare const MIME_TO_EXTENSIONS: Record<AllowedMimeType, string[]>;
  * @returns `null` if valid, or a human-readable error string if mismatched.
  */
 export declare function validateExtensionMimeMatch(filename: string, mimeType: string): string | null;
+/**
+ * Detect MIME type from the magic bytes of a file buffer.
+ * Returns only types from the {@link AllowedMimeType} union (for upload validation).
+ *
+ * @param buffer - First 4-16 bytes of the file (only the head is needed)
+ * @returns The detected allowed MIME type, or `null` if unrecognised.
+ */
+export declare function detectMimeFromMagicBytes(buffer: Buffer): AllowedMimeType | null;
+/**
+ * Detect MIME type from buffer magic bytes (general purpose).
+ * Supports all known formats including image types used by OCR (WebP, GIF, BMP).
+ * Falls back to `'application/pdf'` if detection fails.
+ *
+ * @param buffer - Raw file or page buffer
+ * @returns The detected MIME type string, never null.
+ */
+export declare function detectMimeType(buffer: Buffer): string;
+/**
+ * Validate that a file's magic bytes are compatible with the declared MIME type.
+ *
+ * @returns `null` if valid, or a human-readable error string if mismatched.
+ */
+export declare function validateMagicBytes(buffer: Buffer, declaredMimeType: string): string | null;
 //# sourceMappingURL=file-validation.constants.d.ts.map

package/dist/constants/file-validation.constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-validation.constants.d.ts","sourceRoot":"","sources":["../../src/constants/file-validation.constants.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,YAAc,CAAC;AAEjD,uDAAuD;AACvD,eAAO,MAAM,kBAAkB,wKAOrB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,CAW/D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,CAa7D,CAAC;AAEL;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,MAAM,GAAG,IAAI,CAmBf"}
+{"version":3,"file":"file-validation.constants.d.ts","sourceRoot":"","sources":["../../src/constants/file-validation.constants.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,YAAc,CAAC;AAEjD,uDAAuD;AACvD,eAAO,MAAM,kBAAkB,wKAOrB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,CAW/D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,CAa7D,CAAC;AAEL;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,MAAM,GAAG,IAAI,CAmBf;AAsGD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,GACb,eAAe,GAAG,IAAI,CAUxB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAUrD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,gBAAgB,EAAE,MAAM,GACvB,MAAM,GAAG,IAAI,CAsBf"}

package/dist/constants/file-validation.constants.js

@@ -9,6 +9,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MIME_TO_EXTENSIONS = exports.EXTENSION_TO_MIME = exports.ALLOWED_MIME_TYPES = exports.MAX_UPLOAD_SIZE_BYTES = void 0;
 exports.validateExtensionMimeMatch = validateExtensionMimeMatch;
+exports.detectMimeFromMagicBytes = detectMimeFromMagicBytes;
+exports.detectMimeType = detectMimeType;
+exports.validateMagicBytes = validateMagicBytes;
 /** Maximum upload size in bytes (100 MB — matches Supabase bucket limit) */
 exports.MAX_UPLOAD_SIZE_BYTES = 104_857_600;
 /** Allowed MIME types for contract document uploads */
@@ -78,4 +81,127 @@ function getFileExtension(filename) {
     const match = filename.match(/\.[a-zA-Z0-9]+$/);
     return match ? match[0].toLowerCase() : null;
 }
+const MAGIC_BYTE_SIGNATURES = [
+    // PDF: %PDF
+    {
+        check: (buf) => buf[0] === 0x25 && buf[1] === 0x50 && buf[2] === 0x44 && buf[3] === 0x46,
+        uploadMimes: ["application/pdf"],
+        detectedMime: "application/pdf",
+    },
+    // PNG: 0x89 PNG
+    {
+        check: (buf) => buf[0] === 0x89 && buf[1] === 0x50 && buf[2] === 0x4e && buf[3] === 0x47,
+        uploadMimes: ["image/png"],
+        detectedMime: "image/png",
+    },
+    // JPEG: 0xFF 0xD8
+    {
+        check: (buf) => buf[0] === 0xff && buf[1] === 0xd8,
+        uploadMimes: ["image/jpeg"],
+        detectedMime: "image/jpeg",
+    },
+    // TIFF: II (little-endian) or MM (big-endian)
+    {
+        check: (buf) => (buf[0] === 0x49 && buf[1] === 0x49) ||
+            (buf[0] === 0x4d && buf[1] === 0x4d),
+        uploadMimes: ["image/tiff"],
+        detectedMime: "image/tiff",
+    },
+    // WebP: RIFF....WEBP
+    {
+        check: (buf) => buf.length > 11 &&
+            buf[0] === 0x52 &&
+            buf[1] === 0x49 &&
+            buf[2] === 0x46 &&
+            buf[3] === 0x46 &&
+            buf[8] === 0x57 &&
+            buf[9] === 0x45 &&
+            buf[10] === 0x42 &&
+            buf[11] === 0x50,
+        uploadMimes: [],
+        detectedMime: "image/webp",
+    },
+    // GIF: GIF8
+    {
+        check: (buf) => buf[0] === 0x47 && buf[1] === 0x49 && buf[2] === 0x46 && buf[3] === 0x38,
+        uploadMimes: [],
+        detectedMime: "image/gif",
+    },
+    // BMP: BM
+    {
+        check: (buf) => buf[0] === 0x42 && buf[1] === 0x4d,
+        uploadMimes: [],
+        detectedMime: "image/bmp",
+    },
+    // ZIP-based Office documents (DOCX, XLSX, PPTX): PK signature
+    {
+        check: (buf) => buf[0] === 0x50 && buf[1] === 0x4b,
+        uploadMimes: [
+            "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+            "application/msword",
+        ],
+        detectedMime: "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+    },
+    // Legacy MS Office compound binary (DOC, XLS, PPT): D0 CF 11 E0
+    {
+        check: (buf) => buf[0] === 0xd0 && buf[1] === 0xcf && buf[2] === 0x11 && buf[3] === 0xe0,
+        uploadMimes: ["application/msword"],
+        detectedMime: "application/msword",
+    },
+];
+/**
+ * Detect MIME type from the magic bytes of a file buffer.
+ * Returns only types from the {@link AllowedMimeType} union (for upload validation).
+ *
+ * @param buffer - First 4-16 bytes of the file (only the head is needed)
+ * @returns The detected allowed MIME type, or `null` if unrecognised.
+ */
+function detectMimeFromMagicBytes(buffer) {
+    if (!buffer || buffer.length < 2)
+        return null;
+    for (const sig of MAGIC_BYTE_SIGNATURES) {
+        if (sig.check(buffer) && sig.uploadMimes.length > 0) {
+            return sig.uploadMimes[0];
+        }
+    }
+    return null;
+}
+/**
+ * Detect MIME type from buffer magic bytes (general purpose).
+ * Supports all known formats including image types used by OCR (WebP, GIF, BMP).
+ * Falls back to `'application/pdf'` if detection fails.
+ *
+ * @param buffer - Raw file or page buffer
+ * @returns The detected MIME type string, never null.
+ */
+function detectMimeType(buffer) {
+    if (!buffer || buffer.length < 2)
+        return "application/pdf";
+    for (const sig of MAGIC_BYTE_SIGNATURES) {
+        if (sig.check(buffer)) {
+            return sig.detectedMime;
+        }
+    }
+    return "application/pdf";
+}
+/**
+ * Validate that a file's magic bytes are compatible with the declared MIME type.
+ *
+ * @returns `null` if valid, or a human-readable error string if mismatched.
+ */
+function validateMagicBytes(buffer, declaredMimeType) {
+    const detectedMime = detectMimeFromMagicBytes(buffer);
+    if (!detectedMime) {
+        return `Unable to determine file type from content. The uploaded file may be corrupted or unsupported.`;
+    }
+    // Find all upload MIME types that share the same magic byte signature
+    const matchedSignature = MAGIC_BYTE_SIGNATURES.find((sig) => sig.check(buffer));
+    const compatibleMimes = matchedSignature?.uploadMimes ?? [detectedMime];
+    if (!compatibleMimes.includes(declaredMimeType)) {
+        return (`File content does not match declared type "${declaredMimeType}". ` +
+            `Detected content type: "${detectedMime}". ` +
+            `Please ensure you are uploading the correct file.`);
+    }
+    return null;
+}
 //# sourceMappingURL=file-validation.constants.js.map

package/dist/constants/file-validation.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"file-validation.constants.js","sourceRoot":"","sources":["../../src/constants/file-validation.constants.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAyDH,gEAsBC;AA7ED,4EAA4E;AAC/D,QAAA,qBAAqB,GAAG,WAAW,CAAC;AAEjD,uDAAuD;AAC1C,QAAA,kBAAkB,GAAG;IAChC,iBAAiB;IACjB,yEAAyE;IACzE,oBAAoB;IACpB,WAAW;IACX,YAAY;IACZ,YAAY;CACJ,CAAC;AAIX;;GAEG;AACU,QAAA,iBAAiB,GAAsC;IAClE,MAAM,EAAE,CAAC,iBAAiB,CAAC;IAC3B,OAAO,EAAE;QACP,yEAAyE;KAC1E;IACD,MAAM,EAAE,CAAC,oBAAoB,CAAC;IAC9B,MAAM,EAAE,CAAC,WAAW,CAAC;IACrB,MAAM,EAAE,CAAC,YAAY,CAAC;IACtB,OAAO,EAAE,CAAC,YAAY,CAAC;IACvB,MAAM,EAAE,CAAC,YAAY,CAAC;IACtB,OAAO,EAAE,CAAC,YAAY,CAAC;CACxB,CAAC;AAEF;;;GAGG;AACU,QAAA,kBAAkB,GAAsC,CAAC,GAAG,EAAE;IACzE,MAAM,GAAG,GAA6B,EAAE,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,0BAAkB,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACjB,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,yBAAiB,CAAC,EAAE,CAAC;QAC7D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAwC,CAAC;AAClD,CAAC,CAAC,EAAE,CAAC;AAEL;;;;GAIG;AACH,SAAgB,0BAA0B,CACxC,QAAgB,EAChB,QAAgB;IAEhB,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAEvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,aAAa,QAAQ,sCAAsC,CAAC;IACrE,CAAC;IAED,MAAM,YAAY,GAAG,yBAAiB,CAAC,GAAG,CAAC,CAAC;IAE5C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,yBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,OAAO,mBAAmB,GAAG,4CAA4C,aAAa,EAAE,CAAC;IAC3F,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAA2B,CAAC,EAAE,CAAC;QACxD,OAAO,mBAAmB,GAAG,+BAA+B,QAAQ,iCAAiC,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1I,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sEAAsE;AACtE,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"file-validation.constants.js","sourceRoot":"","sources":["../../src/constants/file-validation.constants.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAyDH,gEAsBC;AA6GD,4DAYC;AAUD,wCAUC;AAOD,gDAyBC;AA1PD,4EAA4E;AAC/D,QAAA,qBAAqB,GAAG,WAAW,CAAC;AAEjD,uDAAuD;AAC1C,QAAA,kBAAkB,GAAG;IAChC,iBAAiB;IACjB,yEAAyE;IACzE,oBAAoB;IACpB,WAAW;IACX,YAAY;IACZ,YAAY;CACJ,CAAC;AAIX;;GAEG;AACU,QAAA,iBAAiB,GAAsC;IAClE,MAAM,EAAE,CAAC,iBAAiB,CAAC;IAC3B,OAAO,EAAE;QACP,yEAAyE;KAC1E;IACD,MAAM,EAAE,CAAC,oBAAoB,CAAC;IAC9B,MAAM,EAAE,CAAC,WAAW,CAAC;IACrB,MAAM,EAAE,CAAC,YAAY,CAAC;IACtB,OAAO,EAAE,CAAC,YAAY,CAAC;IACvB,MAAM,EAAE,CAAC,YAAY,CAAC;IACtB,OAAO,EAAE,CAAC,YAAY,CAAC;CACxB,CAAC;AAEF;;;GAGG;AACU,QAAA,kBAAkB,GAAsC,CAAC,GAAG,EAAE;IACzE,MAAM,GAAG,GAA6B,EAAE,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,0BAAkB,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACjB,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,yBAAiB,CAAC,EAAE,CAAC;QAC7D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAwC,CAAC;AAClD,CAAC,CAAC,EAAE,CAAC;AAEL;;;;GAIG;AACH,SAAgB,0BAA0B,CACxC,QAAgB,EAChB,QAAgB;IAEhB,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAEvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,aAAa,QAAQ,sCAAsC,CAAC;IACrE,CAAC;IAED,MAAM,YAAY,GAAG,yBAAiB,CAAC,GAAG,CAAC,CAAC;IAE5C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,yBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,OAAO,mBAAmB,GAAG,4CAA4C,aAAa,EAAE,CAAC;IAC3F,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAA2B,CAAC,EAAE,CAAC;QACxD,OAAO,mBAAmB,GAAG,+BAA+B,QAAQ,iCAAiC,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1I,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sEAAsE;AACtE,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAoBD,MAAM,qBAAqB,GAAyB;IAClD,YAAY;IACZ;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAC1E,WAAW,EAAE,CAAC,iBAAiB,CAAC;QAChC,YAAY,EAAE,iBAAiB;KAChC;IACD,gBAAgB;IAChB;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAC1E,WAAW,EAAE,CAAC,WAAW,CAAC;QAC1B,YAAY,EAAE,WAAW;KAC1B;IACD,kBAAkB;IAClB;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAClD,WAAW,EAAE,CAAC,YAAY,CAAC;QAC3B,YAAY,EAAE,YAAY;KAC3B;IACD,8CAA8C;IAC9C;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;YACpC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QACtC,WAAW,EAAE,CAAC,YAAY,CAAC;QAC3B,YAAY,EAAE,YAAY;KAC3B;IACD,qBAAqB;IACrB;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,GAAG,CAAC,MAAM,GAAG,EAAE;YACf,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YACf,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YACf,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YACf,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YACf,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YACf,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YACf,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI;YAChB,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI;QAClB,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,YAAY;KAC3B;IACD,YAAY;IACZ;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAC1E,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,WAAW;KAC1B;IACD,UAAU;IACV;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAClD,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,WAAW;KAC1B;IACD,8DAA8D;IAC9D;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAClD,WAAW,EAAE;YACX,yEAAyE;YACzE,oBAAoB;SACrB;QACD,YAAY,EACV,yEAAyE;KAC5E;IACD,gEAAgE;IAChE;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAC1E,WAAW,EAAE,CAAC,oBAAoB,CAAC;QACnC,YAAY,EAAE,oBAAoB;KACnC;CACF,CAAC;AAEF;;;;;;GAMG;AACH,SAAgB,wBAAwB,CACtC,MAAc;IAEd,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9C,KAAK,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,OAAO,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,cAAc,CAAC,MAAc;IAC3C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,iBAAiB,CAAC;IAE3D,KAAK,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,OAAO,GAAG,CAAC,YAAY,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB,CAChC,MAAc,EACd,gBAAwB;IAExB,MAAM,YAAY,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAEtD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,gGAAgG,CAAC;IAC1G,CAAC;IAED,sEAAsE;IACtE,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAC1D,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAClB,CAAC;IACF,MAAM,eAAe,GAAG,gBAAgB,EAAE,WAAW,IAAI,CAAC,YAAY,CAAC,CAAC;IAExE,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,gBAAmC,CAAC,EAAE,CAAC;QACnE,OAAO,CACL,8CAA8C,gBAAgB,KAAK;YACnE,2BAA2B,YAAY,KAAK;YAC5C,mDAAmD,CACpD,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/constants/index.d.ts

@@ -1,6 +1,6 @@
 export { CRITICAL_PII_TYPES, HIGH_RISK_PII_TYPES, CONTEXTUAL_ENTITIES, STANDARD_PII_TYPES, ALL_MASKABLE_PII_TYPES, APPROVAL_REQUIRED_PII_TYPES, } from "./pii-classifications.constants";
 export type { PiiRiskLevel } from "./pii-classifications.constants";
-export { MAX_UPLOAD_SIZE_BYTES, ALLOWED_MIME_TYPES, EXTENSION_TO_MIME, MIME_TO_EXTENSIONS, validateExtensionMimeMatch, } from "./file-validation.constants";
+export { MAX_UPLOAD_SIZE_BYTES, ALLOWED_MIME_TYPES, EXTENSION_TO_MIME, MIME_TO_EXTENSIONS, validateExtensionMimeMatch, detectMimeFromMagicBytes, detectMimeType, validateMagicBytes, } from "./file-validation.constants";
 export type { AllowedMimeType } from "./file-validation.constants";
 export { ContractStatus, JobType, JobStatus, TaskStatus, TaskPriority, RiskLevel, RuleKind, RuleDirection, } from "./enums";
 //# sourceMappingURL=index.d.ts.map

package/dist/constants/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/constants/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,iCAAiC,CAAC;AACzC,YAAY,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAEpE,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,6BAA6B,CAAC;AACrC,YAAY,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAEnE,OAAO,EACL,cAAc,EACd,OAAO,EACP,SAAS,EACT,UAAU,EACV,YAAY,EACZ,SAAS,EACT,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/constants/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,iCAAiC,CAAC;AACzC,YAAY,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAEpE,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,0BAA0B,EAC1B,wBAAwB,EACxB,cAAc,EACd,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAEnE,OAAO,EACL,cAAc,EACd,OAAO,EACP,SAAS,EACT,UAAU,EACV,YAAY,EACZ,SAAS,EACT,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC"}

package/dist/constants/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RuleDirection = exports.RuleKind = exports.RiskLevel = exports.TaskPriority = exports.TaskStatus = exports.JobStatus = exports.JobType = exports.ContractStatus = exports.validateExtensionMimeMatch = exports.MIME_TO_EXTENSIONS = exports.EXTENSION_TO_MIME = exports.ALLOWED_MIME_TYPES = exports.MAX_UPLOAD_SIZE_BYTES = exports.APPROVAL_REQUIRED_PII_TYPES = exports.ALL_MASKABLE_PII_TYPES = exports.STANDARD_PII_TYPES = exports.CONTEXTUAL_ENTITIES = exports.HIGH_RISK_PII_TYPES = exports.CRITICAL_PII_TYPES = void 0;
+exports.RuleDirection = exports.RuleKind = exports.RiskLevel = exports.TaskPriority = exports.TaskStatus = exports.JobStatus = exports.JobType = exports.ContractStatus = exports.validateMagicBytes = exports.detectMimeType = exports.detectMimeFromMagicBytes = exports.validateExtensionMimeMatch = exports.MIME_TO_EXTENSIONS = exports.EXTENSION_TO_MIME = exports.ALLOWED_MIME_TYPES = exports.MAX_UPLOAD_SIZE_BYTES = exports.APPROVAL_REQUIRED_PII_TYPES = exports.ALL_MASKABLE_PII_TYPES = exports.STANDARD_PII_TYPES = exports.CONTEXTUAL_ENTITIES = exports.HIGH_RISK_PII_TYPES = exports.CRITICAL_PII_TYPES = void 0;
 var pii_classifications_constants_1 = require("./pii-classifications.constants");
 Object.defineProperty(exports, "CRITICAL_PII_TYPES", { enumerable: true, get: function () { return pii_classifications_constants_1.CRITICAL_PII_TYPES; } });
 Object.defineProperty(exports, "HIGH_RISK_PII_TYPES", { enumerable: true, get: function () { return pii_classifications_constants_1.HIGH_RISK_PII_TYPES; } });
@@ -14,6 +14,9 @@ Object.defineProperty(exports, "ALLOWED_MIME_TYPES", { enumerable: true, get: fu
 Object.defineProperty(exports, "EXTENSION_TO_MIME", { enumerable: true, get: function () { return file_validation_constants_1.EXTENSION_TO_MIME; } });
 Object.defineProperty(exports, "MIME_TO_EXTENSIONS", { enumerable: true, get: function () { return file_validation_constants_1.MIME_TO_EXTENSIONS; } });
 Object.defineProperty(exports, "validateExtensionMimeMatch", { enumerable: true, get: function () { return file_validation_constants_1.validateExtensionMimeMatch; } });
+Object.defineProperty(exports, "detectMimeFromMagicBytes", { enumerable: true, get: function () { return file_validation_constants_1.detectMimeFromMagicBytes; } });
+Object.defineProperty(exports, "detectMimeType", { enumerable: true, get: function () { return file_validation_constants_1.detectMimeType; } });
+Object.defineProperty(exports, "validateMagicBytes", { enumerable: true, get: function () { return file_validation_constants_1.validateMagicBytes; } });
 var enums_1 = require("./enums");
 Object.defineProperty(exports, "ContractStatus", { enumerable: true, get: function () { return enums_1.ContractStatus; } });
 Object.defineProperty(exports, "JobType", { enumerable: true, get: function () { return enums_1.JobType; } });

package/dist/constants/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/constants/index.ts"],"names":[],"mappings":";;;AAAA,iFAOyC;AANvC,mIAAA,kBAAkB,OAAA;AAClB,oIAAA,mBAAmB,OAAA;AACnB,oIAAA,mBAAmB,OAAA;AACnB,mIAAA,kBAAkB,OAAA;AAClB,uIAAA,sBAAsB,OAAA;AACtB,4IAAA,2BAA2B,OAAA;AAI7B,yEAMqC;AALnC,kIAAA,qBAAqB,OAAA;AACrB,+HAAA,kBAAkB,OAAA;AAClB,8HAAA,iBAAiB,OAAA;AACjB,+HAAA,kBAAkB,OAAA;AAClB,uIAAA,0BAA0B,OAAA;AAI5B,iCASiB;AARf,uGAAA,cAAc,OAAA;AACd,gGAAA,OAAO,OAAA;AACP,kGAAA,SAAS,OAAA;AACT,mGAAA,UAAU,OAAA;AACV,qGAAA,YAAY,OAAA;AACZ,kGAAA,SAAS,OAAA;AACT,iGAAA,QAAQ,OAAA;AACR,sGAAA,aAAa,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/constants/index.ts"],"names":[],"mappings":";;;AAAA,iFAOyC;AANvC,mIAAA,kBAAkB,OAAA;AAClB,oIAAA,mBAAmB,OAAA;AACnB,oIAAA,mBAAmB,OAAA;AACnB,mIAAA,kBAAkB,OAAA;AAClB,uIAAA,sBAAsB,OAAA;AACtB,4IAAA,2BAA2B,OAAA;AAI7B,yEASqC;AARnC,kIAAA,qBAAqB,OAAA;AACrB,+HAAA,kBAAkB,OAAA;AAClB,8HAAA,iBAAiB,OAAA;AACjB,+HAAA,kBAAkB,OAAA;AAClB,uIAAA,0BAA0B,OAAA;AAC1B,qIAAA,wBAAwB,OAAA;AACxB,2HAAA,cAAc,OAAA;AACd,+HAAA,kBAAkB,OAAA;AAIpB,iCASiB;AARf,uGAAA,cAAc,OAAA;AACd,gGAAA,OAAO,OAAA;AACP,kGAAA,SAAS,OAAA;AACT,mGAAA,UAAU,OAAA;AACV,qGAAA,YAAY,OAAA;AACZ,kGAAA,SAAS,OAAA;AACT,iGAAA,QAAQ,OAAA;AACR,sGAAA,aAAa,OAAA"}

package/dist/index.d.ts

@@ -2,7 +2,7 @@ export { CurrentUser, IS_PUBLIC_KEY, Public, JwtAuthGuard, BaseJwtStrategy, Auth
 export type { JwtPayload } from "./auth";
 export { createAppConfig, createDatabaseConfig, createDocConfig, createJwtConfig, createLoggingConfig, createSecurityConfig, buildPinoParams, RedisConfig, StorageConfig, createBaseValidationRules, } from "./config";
 export type { AppConfigOptions, DatabaseConfigOptions, DocConfigOptions, JwtConfigOptions, LoggingConfigOptions, SecurityConfigOptions, BaseValidationOptions, } from "./config";
-export { CRITICAL_PII_TYPES, HIGH_RISK_PII_TYPES, CONTEXTUAL_ENTITIES, STANDARD_PII_TYPES, ALL_MASKABLE_PII_TYPES, APPROVAL_REQUIRED_PII_TYPES, ContractStatus, JobType, JobStatus, TaskStatus, TaskPriority, RiskLevel, RuleKind, RuleDirection, MAX_UPLOAD_SIZE_BYTES, ALLOWED_MIME_TYPES, EXTENSION_TO_MIME, MIME_TO_EXTENSIONS, validateExtensionMimeMatch, } from "./constants";
+export { CRITICAL_PII_TYPES, HIGH_RISK_PII_TYPES, CONTEXTUAL_ENTITIES, STANDARD_PII_TYPES, ALL_MASKABLE_PII_TYPES, APPROVAL_REQUIRED_PII_TYPES, ContractStatus, JobType, JobStatus, TaskStatus, TaskPriority, RiskLevel, RuleKind, RuleDirection, MAX_UPLOAD_SIZE_BYTES, ALLOWED_MIME_TYPES, EXTENSION_TO_MIME, MIME_TO_EXTENSIONS, validateExtensionMimeMatch, detectMimeFromMagicBytes, detectMimeType, validateMagicBytes, } from "./constants";
 export type { PiiRiskLevel, AllowedMimeType } from "./constants";
 export { UserTier } from "./database";
 export { BaseEntity, DatabaseModule, RedisModule, RedisProvider, BaseUsersProfileEntity, BaseContractEntity, PiiEntity, BaseJobEntity, BaseContractTextEntity, BaseContractChunkEntity, BaseContractRedFlagEntity, BaseContractPiiReplacementEntity, BaseContractTaskEntity, BaseContractKeyDateRuleEntity, BaseContractEventEntity, BaseAuditLogEntity, BaseQnaQuestionEntity, BaseScoringCriteriaEntity, QnaQuestionTemplate, QnaResponse, } from "./database";
@@ -14,4 +14,6 @@ export { SwaggerDocs } from "./swagger";
 export { configureApp } from "./bootstrap";
 export type { AppBootstrapOptions } from "./bootstrap";
 export { CryptoService } from "./helpers";
+export { BaseSupabaseStorageService } from "./storage";
+export type { DownloadUrlResult, StorageMetadata } from "./storage";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EACX,aAAa,EACb,MAAM,EACN,YAAY,EACZ,eAAe,EACf,cAAc,GACf,MAAM,QAAQ,CAAC;AAChB,YAAY,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAGzC,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,WAAW,EACX,aAAa,EACb,yBAAyB,GAC1B,MAAM,UAAU,CAAC;AAClB,YAAY,EACV,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,2BAA2B,EAC3B,cAAc,EACd,OAAO,EACP,SAAS,EACT,UAAU,EACV,YAAY,EACZ,SAAS,EACT,QAAQ,EACR,aAAa,EACb,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAGtC,OAAO,EACL,UAAU,EACV,cAAc,EACd,WAAW,EACX,aAAa,EAEb,sBAAsB,EACtB,kBAAkB,EAClB,SAAS,EACT,aAAa,EACb,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,gCAAgC,EAChC,sBAAsB,EACtB,6BAA6B,EAC7B,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,yBAAyB,EAEzB,mBAAmB,EACnB,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAGxD,OAAO,EAAE,cAAc,EAAE,MAAM,OAAO,CAAC;AAGvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG/C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAGxC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGvD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EACX,aAAa,EACb,MAAM,EACN,YAAY,EACZ,eAAe,EACf,cAAc,GACf,MAAM,QAAQ,CAAC;AAChB,YAAY,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAGzC,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,WAAW,EACX,aAAa,EACb,yBAAyB,GAC1B,MAAM,UAAU,CAAC;AAClB,YAAY,EACV,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,2BAA2B,EAC3B,cAAc,EACd,OAAO,EACP,SAAS,EACT,UAAU,EACV,YAAY,EACZ,SAAS,EACT,QAAQ,EACR,aAAa,EACb,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,0BAA0B,EAC1B,wBAAwB,EACxB,cAAc,EACd,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAGtC,OAAO,EACL,UAAU,EACV,cAAc,EACd,WAAW,EACX,aAAa,EAEb,sBAAsB,EACtB,kBAAkB,EAClB,SAAS,EACT,aAAa,EACb,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,gCAAgC,EAChC,sBAAsB,EACtB,6BAA6B,EAC7B,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,yBAAyB,EAEzB,mBAAmB,EACnB,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAGxD,OAAO,EAAE,cAAc,EAAE,MAAM,OAAO,CAAC;AAGvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG/C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAGxC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGvD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACvD,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC"}

package/dist/index.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.BaseContractEventEntity = exports.BaseContractKeyDateRuleEntity = exports.BaseContractTaskEntity = exports.BaseContractPiiReplacementEntity = exports.BaseContractRedFlagEntity = exports.BaseContractChunkEntity = exports.BaseContractTextEntity = exports.BaseJobEntity = exports.BaseContractEntity = exports.BaseUsersProfileEntity = exports.RedisProvider = exports.RedisModule = exports.DatabaseModule = exports.BaseEntity = exports.UserTier = exports.validateExtensionMimeMatch = exports.MIME_TO_EXTENSIONS = exports.EXTENSION_TO_MIME = exports.ALLOWED_MIME_TYPES = exports.MAX_UPLOAD_SIZE_BYTES = exports.RuleDirection = exports.RuleKind = exports.RiskLevel = exports.TaskPriority = exports.TaskStatus = exports.JobStatus = exports.JobType = exports.ContractStatus = exports.APPROVAL_REQUIRED_PII_TYPES = exports.ALL_MASKABLE_PII_TYPES = exports.STANDARD_PII_TYPES = exports.CONTEXTUAL_ENTITIES = exports.HIGH_RISK_PII_TYPES = exports.CRITICAL_PII_TYPES = exports.createBaseValidationRules = exports.StorageConfig = exports.RedisConfig = exports.buildPinoParams = exports.createSecurityConfig = exports.createLoggingConfig = exports.createJwtConfig = exports.createDocConfig = exports.createDatabaseConfig = exports.createAppConfig = exports.AuthCoreModule = exports.BaseJwtStrategy = exports.JwtAuthGuard = exports.Public = exports.IS_PUBLIC_KEY = exports.CurrentUser = void 0;
-exports.CryptoService = exports.configureApp = exports.SwaggerDocs = exports.AllExceptionsFilter = exports.ApiResponseDto = exports.QnaResponse = exports.QnaQuestionTemplate = exports.BaseScoringCriteriaEntity = exports.BaseQnaQuestionEntity = exports.BaseAuditLogEntity = void 0;
+exports.BaseContractPiiReplacementEntity = exports.BaseContractRedFlagEntity = exports.BaseContractChunkEntity = exports.BaseContractTextEntity = exports.BaseJobEntity = exports.BaseContractEntity = exports.BaseUsersProfileEntity = exports.RedisProvider = exports.RedisModule = exports.DatabaseModule = exports.BaseEntity = exports.UserTier = exports.validateMagicBytes = exports.detectMimeType = exports.detectMimeFromMagicBytes = exports.validateExtensionMimeMatch = exports.MIME_TO_EXTENSIONS = exports.EXTENSION_TO_MIME = exports.ALLOWED_MIME_TYPES = exports.MAX_UPLOAD_SIZE_BYTES = exports.RuleDirection = exports.RuleKind = exports.RiskLevel = exports.TaskPriority = exports.TaskStatus = exports.JobStatus = exports.JobType = exports.ContractStatus = exports.APPROVAL_REQUIRED_PII_TYPES = exports.ALL_MASKABLE_PII_TYPES = exports.STANDARD_PII_TYPES = exports.CONTEXTUAL_ENTITIES = exports.HIGH_RISK_PII_TYPES = exports.CRITICAL_PII_TYPES = exports.createBaseValidationRules = exports.StorageConfig = exports.RedisConfig = exports.buildPinoParams = exports.createSecurityConfig = exports.createLoggingConfig = exports.createJwtConfig = exports.createDocConfig = exports.createDatabaseConfig = exports.createAppConfig = exports.AuthCoreModule = exports.BaseJwtStrategy = exports.JwtAuthGuard = exports.Public = exports.IS_PUBLIC_KEY = exports.CurrentUser = void 0;
+exports.BaseSupabaseStorageService = exports.CryptoService = exports.configureApp = exports.SwaggerDocs = exports.AllExceptionsFilter = exports.ApiResponseDto = exports.QnaResponse = exports.QnaQuestionTemplate = exports.BaseScoringCriteriaEntity = exports.BaseQnaQuestionEntity = exports.BaseAuditLogEntity = exports.BaseContractEventEntity = exports.BaseContractKeyDateRuleEntity = exports.BaseContractTaskEntity = void 0;
 // ── Auth ──────────────────────────────────────────────────────────────
 var auth_1 = require("./auth");
 Object.defineProperty(exports, "CurrentUser", { enumerable: true, get: function () { return auth_1.CurrentUser; } });
@@ -43,6 +43,9 @@ Object.defineProperty(exports, "ALLOWED_MIME_TYPES", { enumerable: true, get: fu
 Object.defineProperty(exports, "EXTENSION_TO_MIME", { enumerable: true, get: function () { return constants_1.EXTENSION_TO_MIME; } });
 Object.defineProperty(exports, "MIME_TO_EXTENSIONS", { enumerable: true, get: function () { return constants_1.MIME_TO_EXTENSIONS; } });
 Object.defineProperty(exports, "validateExtensionMimeMatch", { enumerable: true, get: function () { return constants_1.validateExtensionMimeMatch; } });
+Object.defineProperty(exports, "detectMimeFromMagicBytes", { enumerable: true, get: function () { return constants_1.detectMimeFromMagicBytes; } });
+Object.defineProperty(exports, "detectMimeType", { enumerable: true, get: function () { return constants_1.detectMimeType; } });
+Object.defineProperty(exports, "validateMagicBytes", { enumerable: true, get: function () { return constants_1.validateMagicBytes; } });
 var database_1 = require("./database");
 Object.defineProperty(exports, "UserTier", { enumerable: true, get: function () { return database_1.UserTier; } });
 // ── Database ──────────────────────────────────────────────────────────
@@ -83,4 +86,7 @@ Object.defineProperty(exports, "configureApp", { enumerable: true, get: function
 // ── Helpers ───────────────────────────────────────────────────────────
 var helpers_1 = require("./helpers");
 Object.defineProperty(exports, "CryptoService", { enumerable: true, get: function () { return helpers_1.CryptoService; } });
+// ── Storage ───────────────────────────────────────────────────────────
+var storage_1 = require("./storage");
+Object.defineProperty(exports, "BaseSupabaseStorageService", { enumerable: true, get: function () { return storage_1.BaseSupabaseStorageService; } });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;AAAA,yEAAyE;AACzE,+BAOgB;AANd,mGAAA,WAAW,OAAA;AACX,qGAAA,aAAa,OAAA;AACb,8FAAA,MAAM,OAAA;AACN,oGAAA,YAAY,OAAA;AACZ,uGAAA,eAAe,OAAA;AACf,sGAAA,cAAc,OAAA;AAIhB,yEAAyE;AACzE,mCAWkB;AAVhB,yGAAA,eAAe,OAAA;AACf,8GAAA,oBAAoB,OAAA;AACpB,yGAAA,eAAe,OAAA;AACf,yGAAA,eAAe,OAAA;AACf,6GAAA,mBAAmB,OAAA;AACnB,8GAAA,oBAAoB,OAAA;AACpB,yGAAA,eAAe,OAAA;AACf,qGAAA,WAAW,OAAA;AACX,uGAAA,aAAa,OAAA;AACb,mHAAA,yBAAyB,OAAA;AAY3B,yEAAyE;AACzE,yCAoBqB;AAnBnB,+GAAA,kBAAkB,OAAA;AAClB,gHAAA,mBAAmB,OAAA;AACnB,gHAAA,mBAAmB,OAAA;AACnB,+GAAA,kBAAkB,OAAA;AAClB,mHAAA,sBAAsB,OAAA;AACtB,wHAAA,2BAA2B,OAAA;AAC3B,2GAAA,cAAc,OAAA;AACd,oGAAA,OAAO,OAAA;AACP,sGAAA,SAAS,OAAA;AACT,uGAAA,UAAU,OAAA;AACV,yGAAA,YAAY,OAAA;AACZ,sGAAA,SAAS,OAAA;AACT,qGAAA,QAAQ,OAAA;AACR,0GAAA,aAAa,OAAA;AACb,kHAAA,qBAAqB,OAAA;AACrB,+GAAA,kBAAkB,OAAA;AAClB,8GAAA,iBAAiB,OAAA;AACjB,+GAAA,kBAAkB,OAAA;AAClB,uHAAA,0BAA0B,OAAA;AAG5B,uCAAsC;AAA7B,oGAAA,QAAQ,OAAA;AAEjB,yEAAyE;AACzE,uCAuBoB;AAtBlB,sGAAA,UAAU,OAAA;AACV,0GAAA,cAAc,OAAA;AACd,uGAAA,WAAW,OAAA;AACX,yGAAA,aAAa,OAAA;AACb,yBAAyB;AACzB,kHAAA,sBAAsB,OAAA;AACtB,8GAAA,kBAAkB,OAAA;AAElB,yGAAA,aAAa,OAAA;AACb,kHAAA,sBAAsB,OAAA;AACtB,mHAAA,uBAAuB,OAAA;AACvB,qHAAA,yBAAyB,OAAA;AACzB,4HAAA,gCAAgC,OAAA;AAChC,kHAAA,sBAAsB,OAAA;AACtB,yHAAA,6BAA6B,OAAA;AAC7B,mHAAA,uBAAuB,OAAA;AACvB,8GAAA,kBAAkB,OAAA;AAClB,iHAAA,qBAAqB,OAAA;AACrB,qHAAA,yBAAyB,OAAA;AACzB,2BAA2B;AAC3B,+GAAA,mBAAmB,OAAA;AACnB,uGAAA,WAAW,OAAA;AAIb,yEAAyE;AACzE,6BAAuC;AAA9B,qGAAA,cAAc,OAAA;AAEvB,yEAAyE;AACzE,qCAAgD;AAAvC,8GAAA,mBAAmB,OAAA;AAG5B,yEAAyE;AACzE,qCAAwC;AAA/B,sGAAA,WAAW,OAAA;AAEpB,yEAAyE;AACzE,yCAA2C;AAAlC,yGAAA,YAAY,OAAA;AAGrB,yEAAyE;AACzE,qCAA0C;AAAjC,wGAAA,aAAa,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;AAAA,yEAAyE;AACzE,+BAOgB;AANd,mGAAA,WAAW,OAAA;AACX,qGAAA,aAAa,OAAA;AACb,8FAAA,MAAM,OAAA;AACN,oGAAA,YAAY,OAAA;AACZ,uGAAA,eAAe,OAAA;AACf,sGAAA,cAAc,OAAA;AAIhB,yEAAyE;AACzE,mCAWkB;AAVhB,yGAAA,eAAe,OAAA;AACf,8GAAA,oBAAoB,OAAA;AACpB,yGAAA,eAAe,OAAA;AACf,yGAAA,eAAe,OAAA;AACf,6GAAA,mBAAmB,OAAA;AACnB,8GAAA,oBAAoB,OAAA;AACpB,yGAAA,eAAe,OAAA;AACf,qGAAA,WAAW,OAAA;AACX,uGAAA,aAAa,OAAA;AACb,mHAAA,yBAAyB,OAAA;AAY3B,yEAAyE;AACzE,yCAuBqB;AAtBnB,+GAAA,kBAAkB,OAAA;AAClB,gHAAA,mBAAmB,OAAA;AACnB,gHAAA,mBAAmB,OAAA;AACnB,+GAAA,kBAAkB,OAAA;AAClB,mHAAA,sBAAsB,OAAA;AACtB,wHAAA,2BAA2B,OAAA;AAC3B,2GAAA,cAAc,OAAA;AACd,oGAAA,OAAO,OAAA;AACP,sGAAA,SAAS,OAAA;AACT,uGAAA,UAAU,OAAA;AACV,yGAAA,YAAY,OAAA;AACZ,sGAAA,SAAS,OAAA;AACT,qGAAA,QAAQ,OAAA;AACR,0GAAA,aAAa,OAAA;AACb,kHAAA,qBAAqB,OAAA;AACrB,+GAAA,kBAAkB,OAAA;AAClB,8GAAA,iBAAiB,OAAA;AACjB,+GAAA,kBAAkB,OAAA;AAClB,uHAAA,0BAA0B,OAAA;AAC1B,qHAAA,wBAAwB,OAAA;AACxB,2GAAA,cAAc,OAAA;AACd,+GAAA,kBAAkB,OAAA;AAGpB,uCAAsC;AAA7B,oGAAA,QAAQ,OAAA;AAEjB,yEAAyE;AACzE,uCAuBoB;AAtBlB,sGAAA,UAAU,OAAA;AACV,0GAAA,cAAc,OAAA;AACd,uGAAA,WAAW,OAAA;AACX,yGAAA,aAAa,OAAA;AACb,yBAAyB;AACzB,kHAAA,sBAAsB,OAAA;AACtB,8GAAA,kBAAkB,OAAA;AAElB,yGAAA,aAAa,OAAA;AACb,kHAAA,sBAAsB,OAAA;AACtB,mHAAA,uBAAuB,OAAA;AACvB,qHAAA,yBAAyB,OAAA;AACzB,4HAAA,gCAAgC,OAAA;AAChC,kHAAA,sBAAsB,OAAA;AACtB,yHAAA,6BAA6B,OAAA;AAC7B,mHAAA,uBAAuB,OAAA;AACvB,8GAAA,kBAAkB,OAAA;AAClB,iHAAA,qBAAqB,OAAA;AACrB,qHAAA,yBAAyB,OAAA;AACzB,2BAA2B;AAC3B,+GAAA,mBAAmB,OAAA;AACnB,uGAAA,WAAW,OAAA;AAIb,yEAAyE;AACzE,6BAAuC;AAA9B,qGAAA,cAAc,OAAA;AAEvB,yEAAyE;AACzE,qCAAgD;AAAvC,8GAAA,mBAAmB,OAAA;AAG5B,yEAAyE;AACzE,qCAAwC;AAA/B,sGAAA,WAAW,OAAA;AAEpB,yEAAyE;AACzE,yCAA2C;AAAlC,yGAAA,YAAY,OAAA;AAGrB,yEAAyE;AACzE,qCAA0C;AAAjC,wGAAA,aAAa,OAAA;AAEtB,yEAAyE;AACzE,qCAAuD;AAA9C,qHAAA,0BAA0B,OAAA"}

package/dist/storage/base-storage.service.d.ts

@@ -0,0 +1,70 @@
+import { Logger } from "@nestjs/common";
+import { ConfigService } from "@nestjs/config";
+import { SupabaseClient } from "@supabase/supabase-js";
+/**
+ * Common interfaces for storage operation results.
+ */
+export interface DownloadUrlResult {
+    downloadUrl: string;
+    expiresAt: Date;
+}
+export interface StorageMetadata {
+    contentType?: string;
+    contentLength?: number;
+    checksum?: string;
+}
+/**
+ * Abstract base class for Supabase Storage services.
+ *
+ * Provides the common read-oriented operations shared by both
+ * `contract-analysis-api` and `ai-analysis-api`:
+ *
+ * - Supabase client initialisation (from `storage.supabase.*` config)
+ * - Signed download URLs
+ * - File download (as Buffer)
+ * - File existence check
+ * - File metadata retrieval
+ * - File deletion
+ *
+ * Each consuming API extends this base and adds its own operations
+ * (e.g. upload URLs, bucket initialisation, file copy).
+ */
+export declare abstract class BaseSupabaseStorageService {
+    protected readonly configService: ConfigService;
+    protected readonly logger: Logger;
+    protected readonly supabase: SupabaseClient;
+    protected readonly bucketName: string;
+    protected readonly downloadUrlExpiry: number;
+    constructor(configService: ConfigService);
+    /**
+     * Generate a signed download URL for a file.
+     *
+     * @param storageKey - The storage key of the file
+     * @param expirySeconds - Custom expiry (defaults to `downloadUrlExpiry` config)
+     */
+    getSignedUrl(storageKey: string, expirySeconds?: number): Promise<string>;
+    /**
+     * Get a pre-signed download URL with expiry metadata.
+     */
+    getDownloadUrl(storageKey: string): Promise<DownloadUrlResult>;
+    /**
+     * Download a file as a Buffer.
+     */
+    downloadBlob(storageKey: string): Promise<Buffer>;
+    /**
+     * Check whether a file exists in storage.
+     *
+     * Uses `list()` with a search filter on the directory — Supabase
+     * does not expose a dedicated HEAD / exists API.
+     */
+    blobExists(storageKey: string): Promise<boolean>;
+    /**
+     * Retrieve file metadata (content type, size, checksum).
+     */
+    getFileMetadata(storageKey: string): Promise<StorageMetadata | null>;
+    /**
+     * Delete a file from storage.
+     */
+    deleteFile(storageKey: string): Promise<void>;
+}
+//# sourceMappingURL=base-storage.service.d.ts.map

package/dist/storage/base-storage.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-storage.service.d.ts","sourceRoot":"","sources":["../../src/storage/base-storage.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAgB,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAErE;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;GAeG;AACH,8BAAsB,0BAA0B;IAMlC,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa;IAL3D,SAAS,CAAC,QAAQ,CAAC,MAAM,SAAqC;IAC9D,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAC5C,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IACtC,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;gBAEd,aAAa,EAAE,aAAa;IAsB3D;;;;;OAKG;IACG,YAAY,CAChB,UAAU,EAAE,MAAM,EAClB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,CAAC;IAiBlB;;OAEG;IACG,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAQpE;;OAEG;IACG,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAoBvD;;;;;OAKG;IACG,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAuBtD;;OAEG;IACG,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IA2B1E;;OAEG;IACG,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAiBpD"}

package/dist/storage/base-storage.service.js

@@ -0,0 +1,160 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BaseSupabaseStorageService = void 0;
+const common_1 = require("@nestjs/common");
+const supabase_js_1 = require("@supabase/supabase-js");
+/**
+ * Abstract base class for Supabase Storage services.
+ *
+ * Provides the common read-oriented operations shared by both
+ * `contract-analysis-api` and `ai-analysis-api`:
+ *
+ * - Supabase client initialisation (from `storage.supabase.*` config)
+ * - Signed download URLs
+ * - File download (as Buffer)
+ * - File existence check
+ * - File metadata retrieval
+ * - File deletion
+ *
+ * Each consuming API extends this base and adds its own operations
+ * (e.g. upload URLs, bucket initialisation, file copy).
+ */
+class BaseSupabaseStorageService {
+    configService;
+    logger = new common_1.Logger(this.constructor.name);
+    supabase;
+    bucketName;
+    downloadUrlExpiry;
+    constructor(configService) {
+        this.configService = configService;
+        const supabaseUrl = this.configService.get("storage.supabase.url");
+        const supabaseKey = this.configService.get("storage.supabase.key");
+        this.bucketName =
+            this.configService.get("storage.supabase.bucket") || "contracts";
+        this.downloadUrlExpiry =
+            this.configService.get("storage.supabase.downloadUrlExpiry") ||
+                3600;
+        if (!supabaseUrl || !supabaseKey) {
+            this.logger.warn("Supabase Storage not configured. Set SUPABASE_URL and SUPABASE_SERVICE_ROLE_KEY.");
+        }
+        this.supabase = (0, supabase_js_1.createClient)(supabaseUrl, supabaseKey, {
+            auth: { persistSession: false },
+        });
+    }
+    // ── Signed URLs ─────────────────────────────────────────────────────
+    /**
+     * Generate a signed download URL for a file.
+     *
+     * @param storageKey - The storage key of the file
+     * @param expirySeconds - Custom expiry (defaults to `downloadUrlExpiry` config)
+     */
+    async getSignedUrl(storageKey, expirySeconds) {
+        const expiry = expirySeconds || this.downloadUrlExpiry;
+        const { data, error } = await this.supabase.storage
+            .from(this.bucketName)
+            .createSignedUrl(storageKey, expiry);
+        if (error || !data) {
+            this.logger.error(`Failed to generate signed URL for ${storageKey}: ${error?.message}`);
+            throw new Error(`Failed to generate signed URL: ${error?.message}`);
+        }
+        return data.signedUrl;
+    }
+    /**
+     * Get a pre-signed download URL with expiry metadata.
+     */
+    async getDownloadUrl(storageKey) {
+        const expiresAt = new Date(Date.now() + this.downloadUrlExpiry * 1000);
+        const downloadUrl = await this.getSignedUrl(storageKey);
+        return { downloadUrl, expiresAt };
+    }
+    // ── File Download ───────────────────────────────────────────────────
+    /**
+     * Download a file as a Buffer.
+     */
+    async downloadBlob(storageKey) {
+        this.logger.log(`Downloading file: ${storageKey}`);
+        const { data, error } = await this.supabase.storage
+            .from(this.bucketName)
+            .download(storageKey);
+        if (error || !data) {
+            throw new Error(`Failed to download file: ${error?.message}`);
+        }
+        const arrayBuffer = await data.arrayBuffer();
+        const buffer = Buffer.from(arrayBuffer);
+        this.logger.log(`Downloaded ${buffer.length} bytes from ${storageKey}`);
+        return buffer;
+    }
+    // ── Existence Check ─────────────────────────────────────────────────
+    /**
+     * Check whether a file exists in storage.
+     *
+     * Uses `list()` with a search filter on the directory — Supabase
+     * does not expose a dedicated HEAD / exists API.
+     */
+    async blobExists(storageKey) {
+        try {
+            const dirname = storageKey.substring(0, storageKey.lastIndexOf("/"));
+            const filename = storageKey.substring(storageKey.lastIndexOf("/") + 1);
+            const { data, error } = await this.supabase.storage
+                .from(this.bucketName)
+                .list(dirname, { search: filename });
+            if (error) {
+                this.logger.error(`Error checking file existence: ${error.message}`);
+                return false;
+            }
+            return data.length > 0;
+        }
+        catch (error) {
+            this.logger.error(`Error checking file existence: ${error.message}`);
+            return false;
+        }
+    }
+    // ── File Metadata ───────────────────────────────────────────────────
+    /**
+     * Retrieve file metadata (content type, size, checksum).
+     */
+    async getFileMetadata(storageKey) {
+        try {
+            const dirname = storageKey.substring(0, storageKey.lastIndexOf("/"));
+            const filename = storageKey.substring(storageKey.lastIndexOf("/") + 1);
+            const { data, error } = await this.supabase.storage
+                .from(this.bucketName)
+                .list(dirname, { search: filename, limit: 1 });
+            if (error || !data || data.length === 0) {
+                return null;
+            }
+            const file = data[0];
+            return {
+                contentType: file.metadata?.mimetype,
+                contentLength: file.metadata?.size,
+                checksum: file.metadata?.eTag,
+            };
+        }
+        catch (error) {
+            this.logger.error(`Error getting file metadata: ${error.message}`);
+            return null;
+        }
+    }
+    // ── File Deletion ───────────────────────────────────────────────────
+    /**
+     * Delete a file from storage.
+     */
+    async deleteFile(storageKey) {
+        try {
+            const { error } = await this.supabase.storage
+                .from(this.bucketName)
+                .remove([storageKey]);
+            if (error) {
+                this.logger.warn(`Failed to delete file ${storageKey}: ${error.message}`);
+            }
+            else {
+                this.logger.log(`Deleted file: ${storageKey}`);
+            }
+        }
+        catch (error) {
+            this.logger.warn(`Error deleting file: ${error.message}`);
+        }
+    }
+}
+exports.BaseSupabaseStorageService = BaseSupabaseStorageService;
+//# sourceMappingURL=base-storage.service.js.map

package/dist/storage/base-storage.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-storage.service.js","sourceRoot":"","sources":["../../src/storage/base-storage.service.ts"],"names":[],"mappings":";;;AAAA,2CAAwC;AAExC,uDAAqE;AAgBrE;;;;;;;;;;;;;;;GAeG;AACH,MAAsB,0BAA0B;IAMf;IALZ,MAAM,GAAG,IAAI,eAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3C,QAAQ,CAAiB;IACzB,UAAU,CAAS;IACnB,iBAAiB,CAAS;IAE7C,YAA+B,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;QACzD,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,sBAAsB,CAAC,CAAC;QAC3E,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,sBAAsB,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU;YACb,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,yBAAyB,CAAC,IAAI,WAAW,CAAC;QAC3E,IAAI,CAAC,iBAAiB;YACpB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,oCAAoC,CAAC;gBACpE,IAAI,CAAC;QAEP,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,kFAAkF,CACnF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,IAAA,0BAAY,EAAC,WAAY,EAAE,WAAY,EAAE;YACvD,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE;SAChC,CAAC,CAAC;IACL,CAAC;IAED,uEAAuE;IAEvE;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAChB,UAAkB,EAClB,aAAsB;QAEtB,MAAM,MAAM,GAAG,aAAa,IAAI,IAAI,CAAC,iBAAiB,CAAC;QAEvD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO;aAChD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;aACrB,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAEvC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,qCAAqC,UAAU,KAAK,KAAK,EAAE,OAAO,EAAE,CACrE,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,UAAkB;QACrC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACxD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;IACpC,CAAC;IAED,uEAAuE;IAEvE;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,UAAU,EAAE,CAAC,CAAC;QAEnD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO;aAChD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;aACrB,QAAQ,CAAC,UAAU,CAAC,CAAC;QAExB,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAExC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,MAAM,eAAe,UAAU,EAAE,CAAC,CAAC;QACxE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,uEAAuE;IAEvE;;;;;OAKG;IACH,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAEvE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO;iBAChD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;iBACrB,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAEvC,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACrE,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACrE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,uEAAuE;IAEvE;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,UAAkB;QACtC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAEvE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO;iBAChD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;iBACrB,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAEjD,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,OAAO;gBACL,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ;gBACpC,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI;gBAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI;aAC9B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,uEAAuE;IAEvE;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO;iBAC1C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;iBACrB,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;YAExB,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,yBAAyB,UAAU,KAAK,KAAK,CAAC,OAAO,EAAE,CACxD,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,UAAU,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;CACF;AAvKD,gEAuKC"}

package/dist/storage/index.d.ts

@@ -0,0 +1,2 @@
+export { BaseSupabaseStorageService, DownloadUrlResult, StorageMetadata, } from "./base-storage.service";
+//# sourceMappingURL=index.d.ts.map

package/dist/storage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/storage/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,EACjB,eAAe,GAChB,MAAM,wBAAwB,CAAC"}

package/dist/storage/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BaseSupabaseStorageService = void 0;
+var base_storage_service_1 = require("./base-storage.service");
+Object.defineProperty(exports, "BaseSupabaseStorageService", { enumerable: true, get: function () { return base_storage_service_1.BaseSupabaseStorageService; } });
+//# sourceMappingURL=index.js.map

package/dist/storage/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/storage/index.ts"],"names":[],"mappings":";;;AAAA,+DAIgC;AAH9B,kIAAA,0BAA0B,OAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@veritas-lex/contract-analysis-package",
-  "version": "1.2.3",
+  "version": "1.3.0",
   "description": "Shared NestJS infrastructure for Contract Analysis APIs",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -19,6 +19,7 @@
     "@nestjs/platform-express": "^11.1.13",
     "@nestjs/swagger": "^11.2.6",
     "@nestjs/typeorm": "^11.0.0",
+    "@supabase/supabase-js": "^2.49.0",
     "bullmq": "^5.67.3",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.14.3",
@@ -37,6 +38,7 @@
     "typeorm": "^0.3.28"
   },
   "devDependencies": {
+    "@supabase/supabase-js": "^2.95.3",
     "@types/compression": "^1.8.1",
     "@types/express": "^5.0.6",
     "@types/joi": "^17.2.2",