@veritas-lex/contract-analysis-package 1.3.0 → 1.4.0

package/dist/constants/file-detection.utils.d.ts

@@ -0,0 +1,43 @@
+/**
+ * File type detection utilities.
+ *
+ * Uses a hybrid approach:
+ * - **Fast synchronous detection** for unambiguous magic byte signatures
+ *   (PDF, PNG, JPEG, TIFF, WebP, GIF, BMP, legacy DOC)
+ * - **Async `file-type` package** only for ZIP-based formats (PK header)
+ *   where archive inspection is needed to distinguish DOCX from XLSX/PPTX
+ *
+ * This avoids unnecessary async overhead for the 90%+ of calls that are
+ * simple image/PDF detection (e.g., OCR page buffers).
+ */
+import type { AllowedMimeType } from "./file-validation.constants";
+/**
+ * Detect MIME type from the magic bytes of a file buffer.
+ * Returns only types from the {@link AllowedMimeType} union (for upload validation).
+ *
+ * **Fast path:** Synchronous check for PDF, PNG, JPEG, TIFF, legacy DOC.
+ * **Slow path:** Async `file-type` only for ZIP-based files (DOCX detection).
+ *
+ * @param buffer - File buffer (at least 4 KB recommended for ZIP-based detection)
+ * @returns The detected allowed MIME type, or `null` if unrecognised.
+ */
+export declare function detectMimeFromMagicBytes(buffer: Buffer): Promise<AllowedMimeType | null>;
+/**
+ * Detect MIME type from buffer magic bytes (general purpose).
+ * Supports all known formats including image types used by OCR (WebP, GIF, BMP).
+ * Falls back to `'application/pdf'` if detection fails.
+ *
+ * **Fast path:** Synchronous — covers PDF, PNG, JPEG, TIFF, WebP, GIF, BMP, legacy DOC.
+ * **Slow path:** Async `file-type` only for ambiguous ZIP-based formats.
+ *
+ * @param buffer - Raw file or page buffer
+ * @returns The detected MIME type string, never null.
+ */
+export declare function detectMimeType(buffer: Buffer): Promise<string>;
+/**
+ * Validate that a file's magic bytes are compatible with the declared MIME type.
+ *
+ * @returns `null` if valid, or a human-readable error string if mismatched.
+ */
+export declare function validateMagicBytes(buffer: Buffer, declaredMimeType: string): Promise<string | null>;
+//# sourceMappingURL=file-detection.utils.d.ts.map

package/dist/constants/file-detection.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-detection.utils.d.ts","sourceRoot":"","sources":["../../src/constants/file-detection.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAgKnE;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAuBjC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAcpE;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAgCxB"}

package/dist/constants/file-detection.utils.js

@@ -0,0 +1,237 @@
+"use strict";
+/**
+ * File type detection utilities.
+ *
+ * Uses a hybrid approach:
+ * - **Fast synchronous detection** for unambiguous magic byte signatures
+ *   (PDF, PNG, JPEG, TIFF, WebP, GIF, BMP, legacy DOC)
+ * - **Async `file-type` package** only for ZIP-based formats (PK header)
+ *   where archive inspection is needed to distinguish DOCX from XLSX/PPTX
+ *
+ * This avoids unnecessary async overhead for the 90%+ of calls that are
+ * simple image/PDF detection (e.g., OCR page buffers).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectMimeFromMagicBytes = detectMimeFromMagicBytes;
+exports.detectMimeType = detectMimeType;
+exports.validateMagicBytes = validateMagicBytes;
+const load_esm_1 = require("load-esm");
+// ── Lazy-loaded ESM module (file-type v21+ is ESM-only) ─────────────
+/** Cached `fileTypeFromBuffer` function, loaded once via `load-esm`. */
+let _fileTypeFromBuffer;
+// ── Synchronous magic byte signatures ────────────────────────────────
+/**
+ * Unambiguous magic byte signatures that can be checked synchronously.
+ * Each entry maps a byte-level predicate to its canonical MIME type.
+ */
+const SYNC_SIGNATURES = [
+    // PDF: %PDF
+    {
+        check: (buf) => buf[0] === 0x25 && buf[1] === 0x50 && buf[2] === 0x44 && buf[3] === 0x46,
+        mime: "application/pdf",
+    },
+    // PNG: 0x89 P N G
+    {
+        check: (buf) => buf[0] === 0x89 && buf[1] === 0x50 && buf[2] === 0x4e && buf[3] === 0x47,
+        mime: "image/png",
+    },
+    // JPEG: 0xFF 0xD8
+    {
+        check: (buf) => buf[0] === 0xff && buf[1] === 0xd8,
+        mime: "image/jpeg",
+    },
+    // TIFF: II (little-endian) or MM (big-endian)
+    {
+        check: (buf) => (buf[0] === 0x49 && buf[1] === 0x49 && buf[2] === 0x2a) ||
+            (buf[0] === 0x4d &&
+                buf[1] === 0x4d &&
+                buf[2] === 0x00 &&
+                buf[3] === 0x2a),
+        mime: "image/tiff",
+    },
+    // WebP: RIFF....WEBP
+    {
+        check: (buf) => buf.length > 11 &&
+            buf[0] === 0x52 &&
+            buf[1] === 0x49 &&
+            buf[2] === 0x46 &&
+            buf[3] === 0x46 &&
+            buf[8] === 0x57 &&
+            buf[9] === 0x45 &&
+            buf[10] === 0x42 &&
+            buf[11] === 0x50,
+        mime: "image/webp",
+    },
+    // GIF: GIF8
+    {
+        check: (buf) => buf[0] === 0x47 && buf[1] === 0x49 && buf[2] === 0x46 && buf[3] === 0x38,
+        mime: "image/gif",
+    },
+    // BMP: BM
+    {
+        check: (buf) => buf[0] === 0x42 && buf[1] === 0x4d,
+        mime: "image/bmp",
+    },
+];
+// ── Mapping constants ────────────────────────────────────────────────
+/**
+ * Map detected MIME strings to our {@link AllowedMimeType} union (upload validation).
+ */
+const MIME_TO_ALLOWED = {
+    "application/pdf": "application/pdf",
+    "image/png": "image/png",
+    "image/jpeg": "image/jpeg",
+    "image/tiff": "image/tiff",
+    "application/vnd.openxmlformats-officedocument.wordprocessingml.document": "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+};
+/**
+ * DOCX / DOC MIME types for upload-validation compatibility.
+ * A DOCX-detected file is compatible with both DOCX and DOC MIME declarations.
+ */
+const PK_UPLOAD_COMPATIBLE_MIMES = [
+    "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+    "application/msword",
+];
+// ── Helpers ──────────────────────────────────────────────────────────
+/** Check for legacy MS Office compound binary header (D0 CF 11 E0). */
+function isLegacyDoc(buffer) {
+    return (buffer.length >= 4 &&
+        buffer[0] === 0xd0 &&
+        buffer[1] === 0xcf &&
+        buffer[2] === 0x11 &&
+        buffer[3] === 0xe0);
+}
+/** Check for ZIP/PK header (0x50 0x4B). */
+function isPkSignature(buffer) {
+    return buffer.length >= 2 && buffer[0] === 0x50 && buffer[1] === 0x4b;
+}
+/**
+ * Fast synchronous MIME detection for unambiguous signatures.
+ * Returns `null` for ZIP-based formats (need async `file-type`) and unknown formats.
+ */
+function quickDetectMime(buffer) {
+    if (isLegacyDoc(buffer))
+        return "application/msword";
+    for (const sig of SYNC_SIGNATURES) {
+        if (sig.check(buffer))
+            return sig.mime;
+    }
+    return null;
+}
+/**
+ * Lazily load `fileTypeFromBuffer` from the ESM-only `file-type` package.
+ * Uses `load-esm` to bridge CJS → ESM without eval/Function hacks.
+ */
+async function getFileTypeFromBuffer() {
+    if (!_fileTypeFromBuffer) {
+        const mod = await (0, load_esm_1.loadEsm)("file-type");
+        _fileTypeFromBuffer = mod.fileTypeFromBuffer;
+    }
+    return _fileTypeFromBuffer;
+}
+/**
+ * Use the `file-type` package for deep inspection (ZIP-based formats).
+ * Wrapped in try-catch to handle small/truncated buffers gracefully.
+ */
+async function fileTypeDetect(buffer) {
+    try {
+        const fromBuffer = await getFileTypeFromBuffer();
+        return (await fromBuffer(buffer)) ?? null;
+    }
+    catch {
+        // file-type may throw on buffers that are too small or malformed
+        return null;
+    }
+}
+// ── Public API ───────────────────────────────────────────────────────
+/**
+ * Detect MIME type from the magic bytes of a file buffer.
+ * Returns only types from the {@link AllowedMimeType} union (for upload validation).
+ *
+ * **Fast path:** Synchronous check for PDF, PNG, JPEG, TIFF, legacy DOC.
+ * **Slow path:** Async `file-type` only for ZIP-based files (DOCX detection).
+ *
+ * @param buffer - File buffer (at least 4 KB recommended for ZIP-based detection)
+ * @returns The detected allowed MIME type, or `null` if unrecognised.
+ */
+async function detectMimeFromMagicBytes(buffer) {
+    if (!buffer || buffer.length < 2)
+        return null;
+    // Fast path: unambiguous signatures (sync)
+    const quick = quickDetectMime(buffer);
+    if (quick)
+        return MIME_TO_ALLOWED[quick] ?? null;
+    // ZIP/PK signature → use file-type for archive inspection (DOCX vs XLSX vs PPTX)
+    if (isPkSignature(buffer)) {
+        const result = await fileTypeDetect(buffer);
+        if (result) {
+            const mapped = MIME_TO_ALLOWED[result.mime];
+            if (mapped)
+                return mapped;
+            // file-type detected generic 'application/zip' — buffer too small to
+            // inspect archive contents and determine specific Office subtype.
+            // Fall through to DOCX fallback below.
+        }
+        // PK header but file-type couldn't determine specific subtype (truncated buffer).
+        // Fall back to DOCX since that's the only ZIP-based type we allow for uploads.
+        return "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
+    }
+    return null;
+}
+/**
+ * Detect MIME type from buffer magic bytes (general purpose).
+ * Supports all known formats including image types used by OCR (WebP, GIF, BMP).
+ * Falls back to `'application/pdf'` if detection fails.
+ *
+ * **Fast path:** Synchronous — covers PDF, PNG, JPEG, TIFF, WebP, GIF, BMP, legacy DOC.
+ * **Slow path:** Async `file-type` only for ambiguous ZIP-based formats.
+ *
+ * @param buffer - Raw file or page buffer
+ * @returns The detected MIME type string, never null.
+ */
+async function detectMimeType(buffer) {
+    if (!buffer || buffer.length < 2)
+        return "application/pdf";
+    // Fast path: unambiguous signatures (sync)
+    const quick = quickDetectMime(buffer);
+    if (quick)
+        return quick;
+    // ZIP/PK signature → use file-type for archive inspection
+    if (isPkSignature(buffer)) {
+        const result = await fileTypeDetect(buffer);
+        return result?.mime ?? "application/pdf";
+    }
+    return "application/pdf";
+}
+/**
+ * Validate that a file's magic bytes are compatible with the declared MIME type.
+ *
+ * @returns `null` if valid, or a human-readable error string if mismatched.
+ */
+async function validateMagicBytes(buffer, declaredMimeType) {
+    const detectedMime = await detectMimeFromMagicBytes(buffer);
+    if (!detectedMime) {
+        return `Unable to determine file type from content. The uploaded file may be corrupted or unsupported.`;
+    }
+    // Determine which declared MIME types are compatible with the detected content
+    let compatibleMimes;
+    if (detectedMime ===
+        "application/vnd.openxmlformats-officedocument.wordprocessingml.document") {
+        // DOCX signature is compatible with both DOCX and DOC MIME declarations
+        compatibleMimes = PK_UPLOAD_COMPATIBLE_MIMES;
+    }
+    else if (detectedMime === "application/msword") {
+        // Legacy DOC is compatible with msword declaration
+        compatibleMimes = ["application/msword"];
+    }
+    else {
+        compatibleMimes = [detectedMime];
+    }
+    if (!compatibleMimes.includes(declaredMimeType)) {
+        return (`File content does not match declared type "${declaredMimeType}". ` +
+            `Detected content type: "${detectedMime}". ` +
+            `Please ensure you are uploading the correct file.`);
+    }
+    return null;
+}
+//# sourceMappingURL=file-detection.utils.js.map

package/dist/constants/file-detection.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-detection.utils.js","sourceRoot":"","sources":["../../src/constants/file-detection.utils.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;AA8KH,4DAyBC;AAaD,wCAcC;AAOD,gDAmCC;AA1QD,uCAAmC;AAInC,uEAAuE;AAEvE,wEAAwE;AACxE,IAAI,mBAIS,CAAC;AAEd,wEAAwE;AAExE;;;GAGG;AACH,MAAM,eAAe,GAGhB;IACH,YAAY;IACZ;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAC1E,IAAI,EAAE,iBAAiB;KACxB;IACD,kBAAkB;IAClB;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAC1E,IAAI,EAAE,WAAW;KAClB;IACD,kBAAkB;IAClB;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAClD,IAAI,EAAE,YAAY;KACnB;IACD,8CAA8C;IAC9C;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;YACvD,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;gBACd,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;gBACf,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;gBACf,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QACpB,IAAI,EAAE,YAAY;KACnB;IACD,qBAAqB;IACrB;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,GAAG,CAAC,MAAM,GAAG,EAAE;YACf,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YACf,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YACf,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YACf,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YACf,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YACf,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YACf,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI;YAChB,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI;QAClB,IAAI,EAAE,YAAY;KACnB;IACD,YAAY;IACZ;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAC1E,IAAI,EAAE,WAAW;KAClB;IACD,UAAU;IACV;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAClD,IAAI,EAAE,WAAW;KAClB;CACF,CAAC;AAEF,wEAAwE;AAExE;;GAEG;AACH,MAAM,eAAe,GAAoC;IACvD,iBAAiB,EAAE,iBAAiB;IACpC,WAAW,EAAE,WAAW;IACxB,YAAY,EAAE,YAAY;IAC1B,YAAY,EAAE,YAAY;IAC1B,yEAAyE,EACvE,yEAAyE;CAC5E,CAAC;AAEF;;;GAGG;AACH,MAAM,0BAA0B,GAAsB;IACpD,yEAAyE;IACzE,oBAAoB;CACrB,CAAC;AAEF,wEAAwE;AAExE,uEAAuE;AACvE,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,CACL,MAAM,CAAC,MAAM,IAAI,CAAC;QAClB,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;QAClB,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;QAClB,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;QAClB,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CACnB,CAAC;AACJ,CAAC;AAED,2CAA2C;AAC3C,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,MAAc;IACrC,IAAI,WAAW,CAAC,MAAM,CAAC;QAAE,OAAO,oBAAoB,CAAC;IAErD,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC;IACzC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,qBAAqB;IAClC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,IAAA,kBAAO,EAA6B,WAAW,CAAC,CAAC;QACnE,mBAAmB,GAAG,GAAG,CAAC,kBAAkB,CAAC;IAC/C,CAAC;IACD,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,cAAc,CAC3B,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,qBAAqB,EAAE,CAAC;QACjD,OAAO,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,wEAAwE;AAExE;;;;;;;;;GASG;AACI,KAAK,UAAU,wBAAwB,CAC5C,MAAc;IAEd,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9C,2CAA2C;IAC3C,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,KAAK;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IAEjD,iFAAiF;IACjF,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;YAC1B,qEAAqE;YACrE,kEAAkE;YAClE,uCAAuC;QACzC,CAAC;QACD,kFAAkF;QAClF,+EAA+E;QAC/E,OAAO,yEAAyE,CAAC;IACnF,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,cAAc,CAAC,MAAc;IACjD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,iBAAiB,CAAC;IAE3D,2CAA2C;IAC3C,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAExB,0DAA0D;IAC1D,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO,MAAM,EAAE,IAAI,IAAI,iBAAiB,CAAC;IAC3C,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,gBAAwB;IAExB,MAAM,YAAY,GAAG,MAAM,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAE5D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,gGAAgG,CAAC;IAC1G,CAAC;IAED,+EAA+E;IAC/E,IAAI,eAAkC,CAAC;IAEvC,IACE,YAAY;QACZ,yEAAyE,EACzE,CAAC;QACD,wEAAwE;QACxE,eAAe,GAAG,0BAA0B,CAAC;IAC/C,CAAC;SAAM,IAAI,YAAY,KAAK,oBAAoB,EAAE,CAAC;QACjD,mDAAmD;QACnD,eAAe,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,eAAe,GAAG,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,gBAAmC,CAAC,EAAE,CAAC;QACnE,OAAO,CACL,8CAA8C,gBAAgB,KAAK;YACnE,2BAA2B,YAAY,KAAK;YAC5C,mDAAmD,CACpD,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/constants/file-validation.constants.d.ts

@@ -4,6 +4,8 @@
  * Centralised allowlist of accepted MIME types, file extensions,
  * and the mapping between them. Used by both the DTO validation
  * layer and the service-level cross-check.
+ *
+ * For magic byte / content-type detection, see `file-detection.utils.ts`.
  */
 /** Maximum upload size in bytes (100 MB — matches Supabase bucket limit) */
 export declare const MAX_UPLOAD_SIZE_BYTES = 104857600;
@@ -25,27 +27,4 @@ export declare const MIME_TO_EXTENSIONS: Record<AllowedMimeType, string[]>;
  * @returns `null` if valid, or a human-readable error string if mismatched.
  */
 export declare function validateExtensionMimeMatch(filename: string, mimeType: string): string | null;
-/**
- * Detect MIME type from the magic bytes of a file buffer.
- * Returns only types from the {@link AllowedMimeType} union (for upload validation).
- *
- * @param buffer - First 4-16 bytes of the file (only the head is needed)
- * @returns The detected allowed MIME type, or `null` if unrecognised.
- */
-export declare function detectMimeFromMagicBytes(buffer: Buffer): AllowedMimeType | null;
-/**
- * Detect MIME type from buffer magic bytes (general purpose).
- * Supports all known formats including image types used by OCR (WebP, GIF, BMP).
- * Falls back to `'application/pdf'` if detection fails.
- *
- * @param buffer - Raw file or page buffer
- * @returns The detected MIME type string, never null.
- */
-export declare function detectMimeType(buffer: Buffer): string;
-/**
- * Validate that a file's magic bytes are compatible with the declared MIME type.
- *
- * @returns `null` if valid, or a human-readable error string if mismatched.
- */
-export declare function validateMagicBytes(buffer: Buffer, declaredMimeType: string): string | null;
 //# sourceMappingURL=file-validation.constants.d.ts.map

package/dist/constants/file-validation.constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-validation.constants.d.ts","sourceRoot":"","sources":["../../src/constants/file-validation.constants.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,YAAc,CAAC;AAEjD,uDAAuD;AACvD,eAAO,MAAM,kBAAkB,wKAOrB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,CAW/D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,CAa7D,CAAC;AAEL;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,MAAM,GAAG,IAAI,CAmBf;AAsGD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,GACb,eAAe,GAAG,IAAI,CAUxB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAUrD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,gBAAgB,EAAE,MAAM,GACvB,MAAM,GAAG,IAAI,CAsBf"}
+{"version":3,"file":"file-validation.constants.d.ts","sourceRoot":"","sources":["../../src/constants/file-validation.constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,YAAc,CAAC;AAEjD,uDAAuD;AACvD,eAAO,MAAM,kBAAkB,wKAOrB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,CAW/D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,CAa7D,CAAC;AAEL;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,MAAM,GAAG,IAAI,CAmBf"}

package/dist/constants/file-validation.constants.js

@@ -5,13 +5,12 @@
  * Centralised allowlist of accepted MIME types, file extensions,
  * and the mapping between them. Used by both the DTO validation
  * layer and the service-level cross-check.
+ *
+ * For magic byte / content-type detection, see `file-detection.utils.ts`.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MIME_TO_EXTENSIONS = exports.EXTENSION_TO_MIME = exports.ALLOWED_MIME_TYPES = exports.MAX_UPLOAD_SIZE_BYTES = void 0;
 exports.validateExtensionMimeMatch = validateExtensionMimeMatch;
-exports.detectMimeFromMagicBytes = detectMimeFromMagicBytes;
-exports.detectMimeType = detectMimeType;
-exports.validateMagicBytes = validateMagicBytes;
 /** Maximum upload size in bytes (100 MB — matches Supabase bucket limit) */
 exports.MAX_UPLOAD_SIZE_BYTES = 104_857_600;
 /** Allowed MIME types for contract document uploads */
@@ -81,127 +80,4 @@ function getFileExtension(filename) {
     const match = filename.match(/\.[a-zA-Z0-9]+$/);
     return match ? match[0].toLowerCase() : null;
 }
-const MAGIC_BYTE_SIGNATURES = [
-    // PDF: %PDF
-    {
-        check: (buf) => buf[0] === 0x25 && buf[1] === 0x50 && buf[2] === 0x44 && buf[3] === 0x46,
-        uploadMimes: ["application/pdf"],
-        detectedMime: "application/pdf",
-    },
-    // PNG: 0x89 PNG
-    {
-        check: (buf) => buf[0] === 0x89 && buf[1] === 0x50 && buf[2] === 0x4e && buf[3] === 0x47,
-        uploadMimes: ["image/png"],
-        detectedMime: "image/png",
-    },
-    // JPEG: 0xFF 0xD8
-    {
-        check: (buf) => buf[0] === 0xff && buf[1] === 0xd8,
-        uploadMimes: ["image/jpeg"],
-        detectedMime: "image/jpeg",
-    },
-    // TIFF: II (little-endian) or MM (big-endian)
-    {
-        check: (buf) => (buf[0] === 0x49 && buf[1] === 0x49) ||
-            (buf[0] === 0x4d && buf[1] === 0x4d),
-        uploadMimes: ["image/tiff"],
-        detectedMime: "image/tiff",
-    },
-    // WebP: RIFF....WEBP
-    {
-        check: (buf) => buf.length > 11 &&
-            buf[0] === 0x52 &&
-            buf[1] === 0x49 &&
-            buf[2] === 0x46 &&
-            buf[3] === 0x46 &&
-            buf[8] === 0x57 &&
-            buf[9] === 0x45 &&
-            buf[10] === 0x42 &&
-            buf[11] === 0x50,
-        uploadMimes: [],
-        detectedMime: "image/webp",
-    },
-    // GIF: GIF8
-    {
-        check: (buf) => buf[0] === 0x47 && buf[1] === 0x49 && buf[2] === 0x46 && buf[3] === 0x38,
-        uploadMimes: [],
-        detectedMime: "image/gif",
-    },
-    // BMP: BM
-    {
-        check: (buf) => buf[0] === 0x42 && buf[1] === 0x4d,
-        uploadMimes: [],
-        detectedMime: "image/bmp",
-    },
-    // ZIP-based Office documents (DOCX, XLSX, PPTX): PK signature
-    {
-        check: (buf) => buf[0] === 0x50 && buf[1] === 0x4b,
-        uploadMimes: [
-            "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
-            "application/msword",
-        ],
-        detectedMime: "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
-    },
-    // Legacy MS Office compound binary (DOC, XLS, PPT): D0 CF 11 E0
-    {
-        check: (buf) => buf[0] === 0xd0 && buf[1] === 0xcf && buf[2] === 0x11 && buf[3] === 0xe0,
-        uploadMimes: ["application/msword"],
-        detectedMime: "application/msword",
-    },
-];
-/**
- * Detect MIME type from the magic bytes of a file buffer.
- * Returns only types from the {@link AllowedMimeType} union (for upload validation).
- *
- * @param buffer - First 4-16 bytes of the file (only the head is needed)
- * @returns The detected allowed MIME type, or `null` if unrecognised.
- */
-function detectMimeFromMagicBytes(buffer) {
-    if (!buffer || buffer.length < 2)
-        return null;
-    for (const sig of MAGIC_BYTE_SIGNATURES) {
-        if (sig.check(buffer) && sig.uploadMimes.length > 0) {
-            return sig.uploadMimes[0];
-        }
-    }
-    return null;
-}
-/**
- * Detect MIME type from buffer magic bytes (general purpose).
- * Supports all known formats including image types used by OCR (WebP, GIF, BMP).
- * Falls back to `'application/pdf'` if detection fails.
- *
- * @param buffer - Raw file or page buffer
- * @returns The detected MIME type string, never null.
- */
-function detectMimeType(buffer) {
-    if (!buffer || buffer.length < 2)
-        return "application/pdf";
-    for (const sig of MAGIC_BYTE_SIGNATURES) {
-        if (sig.check(buffer)) {
-            return sig.detectedMime;
-        }
-    }
-    return "application/pdf";
-}
-/**
- * Validate that a file's magic bytes are compatible with the declared MIME type.
- *
- * @returns `null` if valid, or a human-readable error string if mismatched.
- */
-function validateMagicBytes(buffer, declaredMimeType) {
-    const detectedMime = detectMimeFromMagicBytes(buffer);
-    if (!detectedMime) {
-        return `Unable to determine file type from content. The uploaded file may be corrupted or unsupported.`;
-    }
-    // Find all upload MIME types that share the same magic byte signature
-    const matchedSignature = MAGIC_BYTE_SIGNATURES.find((sig) => sig.check(buffer));
-    const compatibleMimes = matchedSignature?.uploadMimes ?? [detectedMime];
-    if (!compatibleMimes.includes(declaredMimeType)) {
-        return (`File content does not match declared type "${declaredMimeType}". ` +
-            `Detected content type: "${detectedMime}". ` +
-            `Please ensure you are uploading the correct file.`);
-    }
-    return null;
-}
 //# sourceMappingURL=file-validation.constants.js.map

package/dist/constants/file-validation.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"file-validation.constants.js","sourceRoot":"","sources":["../../src/constants/file-validation.constants.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAyDH,gEAsBC;AA6GD,4DAYC;AAUD,wCAUC;AAOD,gDAyBC;AA1PD,4EAA4E;AAC/D,QAAA,qBAAqB,GAAG,WAAW,CAAC;AAEjD,uDAAuD;AAC1C,QAAA,kBAAkB,GAAG;IAChC,iBAAiB;IACjB,yEAAyE;IACzE,oBAAoB;IACpB,WAAW;IACX,YAAY;IACZ,YAAY;CACJ,CAAC;AAIX;;GAEG;AACU,QAAA,iBAAiB,GAAsC;IAClE,MAAM,EAAE,CAAC,iBAAiB,CAAC;IAC3B,OAAO,EAAE;QACP,yEAAyE;KAC1E;IACD,MAAM,EAAE,CAAC,oBAAoB,CAAC;IAC9B,MAAM,EAAE,CAAC,WAAW,CAAC;IACrB,MAAM,EAAE,CAAC,YAAY,CAAC;IACtB,OAAO,EAAE,CAAC,YAAY,CAAC;IACvB,MAAM,EAAE,CAAC,YAAY,CAAC;IACtB,OAAO,EAAE,CAAC,YAAY,CAAC;CACxB,CAAC;AAEF;;;GAGG;AACU,QAAA,kBAAkB,GAAsC,CAAC,GAAG,EAAE;IACzE,MAAM,GAAG,GAA6B,EAAE,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,0BAAkB,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACjB,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,yBAAiB,CAAC,EAAE,CAAC;QAC7D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAwC,CAAC;AAClD,CAAC,CAAC,EAAE,CAAC;AAEL;;;;GAIG;AACH,SAAgB,0BAA0B,CACxC,QAAgB,EAChB,QAAgB;IAEhB,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAEvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,aAAa,QAAQ,sCAAsC,CAAC;IACrE,CAAC;IAED,MAAM,YAAY,GAAG,yBAAiB,CAAC,GAAG,CAAC,CAAC;IAE5C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,yBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,OAAO,mBAAmB,GAAG,4CAA4C,aAAa,EAAE,CAAC;IAC3F,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAA2B,CAAC,EAAE,CAAC;QACxD,OAAO,mBAAmB,GAAG,+BAA+B,QAAQ,iCAAiC,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1I,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sEAAsE;AACtE,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAoBD,MAAM,qBAAqB,GAAyB;IAClD,YAAY;IACZ;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAC1E,WAAW,EAAE,CAAC,iBAAiB,CAAC;QAChC,YAAY,EAAE,iBAAiB;KAChC;IACD,gBAAgB;IAChB;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAC1E,WAAW,EAAE,CAAC,WAAW,CAAC;QAC1B,YAAY,EAAE,WAAW;KAC1B;IACD,kBAAkB;IAClB;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAClD,WAAW,EAAE,CAAC,YAAY,CAAC;QAC3B,YAAY,EAAE,YAAY;KAC3B;IACD,8CAA8C;IAC9C;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;YACpC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QACtC,WAAW,EAAE,CAAC,YAAY,CAAC;QAC3B,YAAY,EAAE,YAAY;KAC3B;IACD,qBAAqB;IACrB;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,GAAG,CAAC,MAAM,GAAG,EAAE;YACf,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YACf,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YACf,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YACf,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YACf,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YACf,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YACf,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI;YAChB,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI;QAClB,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,YAAY;KAC3B;IACD,YAAY;IACZ;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAC1E,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,WAAW;KAC1B;IACD,UAAU;IACV;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAClD,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,WAAW;KAC1B;IACD,8DAA8D;IAC9D;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAClD,WAAW,EAAE;YACX,yEAAyE;YACzE,oBAAoB;SACrB;QACD,YAAY,EACV,yEAAyE;KAC5E;IACD,gEAAgE;IAChE;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAC1E,WAAW,EAAE,CAAC,oBAAoB,CAAC;QACnC,YAAY,EAAE,oBAAoB;KACnC;CACF,CAAC;AAEF;;;;;;GAMG;AACH,SAAgB,wBAAwB,CACtC,MAAc;IAEd,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9C,KAAK,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,OAAO,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,cAAc,CAAC,MAAc;IAC3C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,iBAAiB,CAAC;IAE3D,KAAK,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,OAAO,GAAG,CAAC,YAAY,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB,CAChC,MAAc,EACd,gBAAwB;IAExB,MAAM,YAAY,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAEtD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,gGAAgG,CAAC;IAC1G,CAAC;IAED,sEAAsE;IACtE,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAC1D,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAClB,CAAC;IACF,MAAM,eAAe,GAAG,gBAAgB,EAAE,WAAW,IAAI,CAAC,YAAY,CAAC,CAAC;IAExE,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,gBAAmC,CAAC,EAAE,CAAC;QACnE,OAAO,CACL,8CAA8C,gBAAgB,KAAK;YACnE,2BAA2B,YAAY,KAAK;YAC5C,mDAAmD,CACpD,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"file-validation.constants.js","sourceRoot":"","sources":["../../src/constants/file-validation.constants.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAyDH,gEAsBC;AA7ED,4EAA4E;AAC/D,QAAA,qBAAqB,GAAG,WAAW,CAAC;AAEjD,uDAAuD;AAC1C,QAAA,kBAAkB,GAAG;IAChC,iBAAiB;IACjB,yEAAyE;IACzE,oBAAoB;IACpB,WAAW;IACX,YAAY;IACZ,YAAY;CACJ,CAAC;AAIX;;GAEG;AACU,QAAA,iBAAiB,GAAsC;IAClE,MAAM,EAAE,CAAC,iBAAiB,CAAC;IAC3B,OAAO,EAAE;QACP,yEAAyE;KAC1E;IACD,MAAM,EAAE,CAAC,oBAAoB,CAAC;IAC9B,MAAM,EAAE,CAAC,WAAW,CAAC;IACrB,MAAM,EAAE,CAAC,YAAY,CAAC;IACtB,OAAO,EAAE,CAAC,YAAY,CAAC;IACvB,MAAM,EAAE,CAAC,YAAY,CAAC;IACtB,OAAO,EAAE,CAAC,YAAY,CAAC;CACxB,CAAC;AAEF;;;GAGG;AACU,QAAA,kBAAkB,GAAsC,CAAC,GAAG,EAAE;IACzE,MAAM,GAAG,GAA6B,EAAE,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,0BAAkB,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACjB,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,yBAAiB,CAAC,EAAE,CAAC;QAC7D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAwC,CAAC;AAClD,CAAC,CAAC,EAAE,CAAC;AAEL;;;;GAIG;AACH,SAAgB,0BAA0B,CACxC,QAAgB,EAChB,QAAgB;IAEhB,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAEvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,aAAa,QAAQ,sCAAsC,CAAC;IACrE,CAAC;IAED,MAAM,YAAY,GAAG,yBAAiB,CAAC,GAAG,CAAC,CAAC;IAE5C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,yBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,OAAO,mBAAmB,GAAG,4CAA4C,aAAa,EAAE,CAAC;IAC3F,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAA2B,CAAC,EAAE,CAAC;QACxD,OAAO,mBAAmB,GAAG,+BAA+B,QAAQ,iCAAiC,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1I,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sEAAsE;AACtE,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC"}

package/dist/constants/index.d.ts

@@ -1,6 +1,7 @@
 export { CRITICAL_PII_TYPES, HIGH_RISK_PII_TYPES, CONTEXTUAL_ENTITIES, STANDARD_PII_TYPES, ALL_MASKABLE_PII_TYPES, APPROVAL_REQUIRED_PII_TYPES, } from "./pii-classifications.constants";
 export type { PiiRiskLevel } from "./pii-classifications.constants";
-export { MAX_UPLOAD_SIZE_BYTES, ALLOWED_MIME_TYPES, EXTENSION_TO_MIME, MIME_TO_EXTENSIONS, validateExtensionMimeMatch, detectMimeFromMagicBytes, detectMimeType, validateMagicBytes, } from "./file-validation.constants";
+export { MAX_UPLOAD_SIZE_BYTES, ALLOWED_MIME_TYPES, EXTENSION_TO_MIME, MIME_TO_EXTENSIONS, validateExtensionMimeMatch, } from "./file-validation.constants";
 export type { AllowedMimeType } from "./file-validation.constants";
+export { detectMimeFromMagicBytes, detectMimeType, validateMagicBytes, } from "./file-detection.utils";
 export { ContractStatus, JobType, JobStatus, TaskStatus, TaskPriority, RiskLevel, RuleKind, RuleDirection, } from "./enums";
 //# sourceMappingURL=index.d.ts.map

package/dist/constants/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/constants/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,iCAAiC,CAAC;AACzC,YAAY,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAEpE,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,0BAA0B,EAC1B,wBAAwB,EACxB,cAAc,EACd,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAEnE,OAAO,EACL,cAAc,EACd,OAAO,EACP,SAAS,EACT,UAAU,EACV,YAAY,EACZ,SAAS,EACT,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/constants/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,iCAAiC,CAAC;AACzC,YAAY,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAEpE,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,6BAA6B,CAAC;AACrC,YAAY,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAEnE,OAAO,EACL,wBAAwB,EACxB,cAAc,EACd,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,cAAc,EACd,OAAO,EACP,SAAS,EACT,UAAU,EACV,YAAY,EACZ,SAAS,EACT,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC"}

package/dist/constants/index.js

@@ -14,9 +14,10 @@ Object.defineProperty(exports, "ALLOWED_MIME_TYPES", { enumerable: true, get: fu
 Object.defineProperty(exports, "EXTENSION_TO_MIME", { enumerable: true, get: function () { return file_validation_constants_1.EXTENSION_TO_MIME; } });
 Object.defineProperty(exports, "MIME_TO_EXTENSIONS", { enumerable: true, get: function () { return file_validation_constants_1.MIME_TO_EXTENSIONS; } });
 Object.defineProperty(exports, "validateExtensionMimeMatch", { enumerable: true, get: function () { return file_validation_constants_1.validateExtensionMimeMatch; } });
-Object.defineProperty(exports, "detectMimeFromMagicBytes", { enumerable: true, get: function () { return file_validation_constants_1.detectMimeFromMagicBytes; } });
-Object.defineProperty(exports, "detectMimeType", { enumerable: true, get: function () { return file_validation_constants_1.detectMimeType; } });
-Object.defineProperty(exports, "validateMagicBytes", { enumerable: true, get: function () { return file_validation_constants_1.validateMagicBytes; } });
+var file_detection_utils_1 = require("./file-detection.utils");
+Object.defineProperty(exports, "detectMimeFromMagicBytes", { enumerable: true, get: function () { return file_detection_utils_1.detectMimeFromMagicBytes; } });
+Object.defineProperty(exports, "detectMimeType", { enumerable: true, get: function () { return file_detection_utils_1.detectMimeType; } });
+Object.defineProperty(exports, "validateMagicBytes", { enumerable: true, get: function () { return file_detection_utils_1.validateMagicBytes; } });
 var enums_1 = require("./enums");
 Object.defineProperty(exports, "ContractStatus", { enumerable: true, get: function () { return enums_1.ContractStatus; } });
 Object.defineProperty(exports, "JobType", { enumerable: true, get: function () { return enums_1.JobType; } });

package/dist/constants/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/constants/index.ts"],"names":[],"mappings":";;;AAAA,iFAOyC;AANvC,mIAAA,kBAAkB,OAAA;AAClB,oIAAA,mBAAmB,OAAA;AACnB,oIAAA,mBAAmB,OAAA;AACnB,mIAAA,kBAAkB,OAAA;AAClB,uIAAA,sBAAsB,OAAA;AACtB,4IAAA,2BAA2B,OAAA;AAI7B,yEASqC;AARnC,kIAAA,qBAAqB,OAAA;AACrB,+HAAA,kBAAkB,OAAA;AAClB,8HAAA,iBAAiB,OAAA;AACjB,+HAAA,kBAAkB,OAAA;AAClB,uIAAA,0BAA0B,OAAA;AAC1B,qIAAA,wBAAwB,OAAA;AACxB,2HAAA,cAAc,OAAA;AACd,+HAAA,kBAAkB,OAAA;AAIpB,iCASiB;AARf,uGAAA,cAAc,OAAA;AACd,gGAAA,OAAO,OAAA;AACP,kGAAA,SAAS,OAAA;AACT,mGAAA,UAAU,OAAA;AACV,qGAAA,YAAY,OAAA;AACZ,kGAAA,SAAS,OAAA;AACT,iGAAA,QAAQ,OAAA;AACR,sGAAA,aAAa,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/constants/index.ts"],"names":[],"mappings":";;;AAAA,iFAOyC;AANvC,mIAAA,kBAAkB,OAAA;AAClB,oIAAA,mBAAmB,OAAA;AACnB,oIAAA,mBAAmB,OAAA;AACnB,mIAAA,kBAAkB,OAAA;AAClB,uIAAA,sBAAsB,OAAA;AACtB,4IAAA,2BAA2B,OAAA;AAI7B,yEAMqC;AALnC,kIAAA,qBAAqB,OAAA;AACrB,+HAAA,kBAAkB,OAAA;AAClB,8HAAA,iBAAiB,OAAA;AACjB,+HAAA,kBAAkB,OAAA;AAClB,uIAAA,0BAA0B,OAAA;AAI5B,+DAIgC;AAH9B,gIAAA,wBAAwB,OAAA;AACxB,sHAAA,cAAc,OAAA;AACd,0HAAA,kBAAkB,OAAA;AAGpB,iCASiB;AARf,uGAAA,cAAc,OAAA;AACd,gGAAA,OAAO,OAAA;AACP,kGAAA,SAAS,OAAA;AACT,mGAAA,UAAU,OAAA;AACV,qGAAA,YAAY,OAAA;AACZ,kGAAA,SAAS,OAAA;AACT,iGAAA,QAAQ,OAAA;AACR,sGAAA,aAAa,OAAA"}

package/dist/helpers/index.d.ts

@@ -1,2 +1,3 @@
 export { CryptoService } from "./crypto.service";
+export { maskStorageKey } from "./log-utils";
 //# sourceMappingURL=index.d.ts.map

package/dist/helpers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/helpers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/helpers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC"}

package/dist/helpers/index.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CryptoService = void 0;
+exports.maskStorageKey = exports.CryptoService = void 0;
 var crypto_service_1 = require("./crypto.service");
 Object.defineProperty(exports, "CryptoService", { enumerable: true, get: function () { return crypto_service_1.CryptoService; } });
+var log_utils_1 = require("./log-utils");
+Object.defineProperty(exports, "maskStorageKey", { enumerable: true, get: function () { return log_utils_1.maskStorageKey; } });
 //# sourceMappingURL=index.js.map

package/dist/helpers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/helpers/index.ts"],"names":[],"mappings":";;;AAAA,mDAAiD;AAAxC,+GAAA,aAAa,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/helpers/index.ts"],"names":[],"mappings":";;;AAAA,mDAAiD;AAAxC,+GAAA,aAAa,OAAA;AACtB,yCAA6C;AAApC,2GAAA,cAAc,OAAA"}

package/dist/helpers/log-utils.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Mask a storage key to prevent exposing full paths in logs.
+ *
+ * Preserves the directory structure but truncates the filename,
+ * showing only the first 8 and last 4 characters.
+ *
+ * Examples:
+ * - `contracts/original/a1b2c3d4-e5f6-7890-abcd-ef1234567890.pdf`
+ *   → `contracts/original/a1b2c3d4...7890.pdf`
+ * - `short.pdf` → `short.pdf` (no masking for short names)
+ *
+ * @param storageKey - The full storage key / path
+ * @returns A masked version safe for logging
+ */
+export declare function maskStorageKey(storageKey: string): string;
+//# sourceMappingURL=log-utils.d.ts.map

package/dist/helpers/log-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-utils.d.ts","sourceRoot":"","sources":["../../src/helpers/log-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAmBzD"}

package/dist/helpers/log-utils.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.maskStorageKey = maskStorageKey;
+/**
+ * Mask a storage key to prevent exposing full paths in logs.
+ *
+ * Preserves the directory structure but truncates the filename,
+ * showing only the first 8 and last 4 characters.
+ *
+ * Examples:
+ * - `contracts/original/a1b2c3d4-e5f6-7890-abcd-ef1234567890.pdf`
+ *   → `contracts/original/a1b2c3d4...7890.pdf`
+ * - `short.pdf` → `short.pdf` (no masking for short names)
+ *
+ * @param storageKey - The full storage key / path
+ * @returns A masked version safe for logging
+ */
+function maskStorageKey(storageKey) {
+    if (!storageKey)
+        return "<empty>";
+    const lastSlash = storageKey.lastIndexOf("/");
+    const dir = lastSlash >= 0 ? storageKey.substring(0, lastSlash + 1) : "";
+    const filename = lastSlash >= 0 ? storageKey.substring(lastSlash + 1) : storageKey;
+    // Find extension
+    const dotIndex = filename.lastIndexOf(".");
+    const name = dotIndex >= 0 ? filename.substring(0, dotIndex) : filename;
+    const ext = dotIndex >= 0 ? filename.substring(dotIndex) : "";
+    // Only mask if the name portion is long enough
+    if (name.length <= 12) {
+        return `${dir}${filename}`;
+    }
+    return `${dir}${name.substring(0, 8)}...${name.substring(name.length - 4)}${ext}`;
+}
+//# sourceMappingURL=log-utils.js.map

package/dist/helpers/log-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-utils.js","sourceRoot":"","sources":["../../src/helpers/log-utils.ts"],"names":[],"mappings":";;AAcA,wCAmBC;AAjCD;;;;;;;;;;;;;GAaG;AACH,SAAgB,cAAc,CAAC,UAAkB;IAC/C,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAElC,MAAM,SAAS,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,QAAQ,GACZ,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IAEpE,iBAAiB;IACjB,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxE,MAAM,GAAG,GAAG,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE9D,+CAA+C;IAC/C,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACtB,OAAO,GAAG,GAAG,GAAG,QAAQ,EAAE,CAAC;IAC7B,CAAC;IAED,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;AACpF,CAAC"}

package/dist/index.d.ts

@@ -13,7 +13,7 @@ export type { ErrorResponse } from "./filters";
 export { SwaggerDocs } from "./swagger";
 export { configureApp } from "./bootstrap";
 export type { AppBootstrapOptions } from "./bootstrap";
-export { CryptoService } from "./helpers";
+export { CryptoService, maskStorageKey } from "./helpers";
 export { BaseSupabaseStorageService } from "./storage";
 export type { DownloadUrlResult, StorageMetadata } from "./storage";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EACX,aAAa,EACb,MAAM,EACN,YAAY,EACZ,eAAe,EACf,cAAc,GACf,MAAM,QAAQ,CAAC;AAChB,YAAY,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAGzC,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,WAAW,EACX,aAAa,EACb,yBAAyB,GAC1B,MAAM,UAAU,CAAC;AAClB,YAAY,EACV,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,2BAA2B,EAC3B,cAAc,EACd,OAAO,EACP,SAAS,EACT,UAAU,EACV,YAAY,EACZ,SAAS,EACT,QAAQ,EACR,aAAa,EACb,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,0BAA0B,EAC1B,wBAAwB,EACxB,cAAc,EACd,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAGtC,OAAO,EACL,UAAU,EACV,cAAc,EACd,WAAW,EACX,aAAa,EAEb,sBAAsB,EACtB,kBAAkB,EAClB,SAAS,EACT,aAAa,EACb,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,gCAAgC,EAChC,sBAAsB,EACtB,6BAA6B,EAC7B,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,yBAAyB,EAEzB,mBAAmB,EACnB,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAGxD,OAAO,EAAE,cAAc,EAAE,MAAM,OAAO,CAAC;AAGvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG/C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAGxC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGvD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACvD,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EACX,aAAa,EACb,MAAM,EACN,YAAY,EACZ,eAAe,EACf,cAAc,GACf,MAAM,QAAQ,CAAC;AAChB,YAAY,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAGzC,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,WAAW,EACX,aAAa,EACb,yBAAyB,GAC1B,MAAM,UAAU,CAAC;AAClB,YAAY,EACV,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,2BAA2B,EAC3B,cAAc,EACd,OAAO,EACP,SAAS,EACT,UAAU,EACV,YAAY,EACZ,SAAS,EACT,QAAQ,EACR,aAAa,EACb,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,0BAA0B,EAC1B,wBAAwB,EACxB,cAAc,EACd,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAGtC,OAAO,EACL,UAAU,EACV,cAAc,EACd,WAAW,EACX,aAAa,EAEb,sBAAsB,EACtB,kBAAkB,EAClB,SAAS,EACT,aAAa,EACb,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,gCAAgC,EAChC,sBAAsB,EACtB,6BAA6B,EAC7B,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,yBAAyB,EAEzB,mBAAmB,EACnB,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAGxD,OAAO,EAAE,cAAc,EAAE,MAAM,OAAO,CAAC;AAGvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG/C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAGxC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGvD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAG1D,OAAO,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACvD,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC"}

package/dist/index.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.BaseContractPiiReplacementEntity = exports.BaseContractRedFlagEntity = exports.BaseContractChunkEntity = exports.BaseContractTextEntity = exports.BaseJobEntity = exports.BaseContractEntity = exports.BaseUsersProfileEntity = exports.RedisProvider = exports.RedisModule = exports.DatabaseModule = exports.BaseEntity = exports.UserTier = exports.validateMagicBytes = exports.detectMimeType = exports.detectMimeFromMagicBytes = exports.validateExtensionMimeMatch = exports.MIME_TO_EXTENSIONS = exports.EXTENSION_TO_MIME = exports.ALLOWED_MIME_TYPES = exports.MAX_UPLOAD_SIZE_BYTES = exports.RuleDirection = exports.RuleKind = exports.RiskLevel = exports.TaskPriority = exports.TaskStatus = exports.JobStatus = exports.JobType = exports.ContractStatus = exports.APPROVAL_REQUIRED_PII_TYPES = exports.ALL_MASKABLE_PII_TYPES = exports.STANDARD_PII_TYPES = exports.CONTEXTUAL_ENTITIES = exports.HIGH_RISK_PII_TYPES = exports.CRITICAL_PII_TYPES = exports.createBaseValidationRules = exports.StorageConfig = exports.RedisConfig = exports.buildPinoParams = exports.createSecurityConfig = exports.createLoggingConfig = exports.createJwtConfig = exports.createDocConfig = exports.createDatabaseConfig = exports.createAppConfig = exports.AuthCoreModule = exports.BaseJwtStrategy = exports.JwtAuthGuard = exports.Public = exports.IS_PUBLIC_KEY = exports.CurrentUser = void 0;
-exports.BaseSupabaseStorageService = exports.CryptoService = exports.configureApp = exports.SwaggerDocs = exports.AllExceptionsFilter = exports.ApiResponseDto = exports.QnaResponse = exports.QnaQuestionTemplate = exports.BaseScoringCriteriaEntity = exports.BaseQnaQuestionEntity = exports.BaseAuditLogEntity = exports.BaseContractEventEntity = exports.BaseContractKeyDateRuleEntity = exports.BaseContractTaskEntity = void 0;
+exports.BaseSupabaseStorageService = exports.maskStorageKey = exports.CryptoService = exports.configureApp = exports.SwaggerDocs = exports.AllExceptionsFilter = exports.ApiResponseDto = exports.QnaResponse = exports.QnaQuestionTemplate = exports.BaseScoringCriteriaEntity = exports.BaseQnaQuestionEntity = exports.BaseAuditLogEntity = exports.BaseContractEventEntity = exports.BaseContractKeyDateRuleEntity = exports.BaseContractTaskEntity = void 0;
 // ── Auth ──────────────────────────────────────────────────────────────
 var auth_1 = require("./auth");
 Object.defineProperty(exports, "CurrentUser", { enumerable: true, get: function () { return auth_1.CurrentUser; } });
@@ -86,6 +86,7 @@ Object.defineProperty(exports, "configureApp", { enumerable: true, get: function
 // ── Helpers ───────────────────────────────────────────────────────────
 var helpers_1 = require("./helpers");
 Object.defineProperty(exports, "CryptoService", { enumerable: true, get: function () { return helpers_1.CryptoService; } });
+Object.defineProperty(exports, "maskStorageKey", { enumerable: true, get: function () { return helpers_1.maskStorageKey; } });
 // ── Storage ───────────────────────────────────────────────────────────
 var storage_1 = require("./storage");
 Object.defineProperty(exports, "BaseSupabaseStorageService", { enumerable: true, get: function () { return storage_1.BaseSupabaseStorageService; } });

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;AAAA,yEAAyE;AACzE,+BAOgB;AANd,mGAAA,WAAW,OAAA;AACX,qGAAA,aAAa,OAAA;AACb,8FAAA,MAAM,OAAA;AACN,oGAAA,YAAY,OAAA;AACZ,uGAAA,eAAe,OAAA;AACf,sGAAA,cAAc,OAAA;AAIhB,yEAAyE;AACzE,mCAWkB;AAVhB,yGAAA,eAAe,OAAA;AACf,8GAAA,oBAAoB,OAAA;AACpB,yGAAA,eAAe,OAAA;AACf,yGAAA,eAAe,OAAA;AACf,6GAAA,mBAAmB,OAAA;AACnB,8GAAA,oBAAoB,OAAA;AACpB,yGAAA,eAAe,OAAA;AACf,qGAAA,WAAW,OAAA;AACX,uGAAA,aAAa,OAAA;AACb,mHAAA,yBAAyB,OAAA;AAY3B,yEAAyE;AACzE,yCAuBqB;AAtBnB,+GAAA,kBAAkB,OAAA;AAClB,gHAAA,mBAAmB,OAAA;AACnB,gHAAA,mBAAmB,OAAA;AACnB,+GAAA,kBAAkB,OAAA;AAClB,mHAAA,sBAAsB,OAAA;AACtB,wHAAA,2BAA2B,OAAA;AAC3B,2GAAA,cAAc,OAAA;AACd,oGAAA,OAAO,OAAA;AACP,sGAAA,SAAS,OAAA;AACT,uGAAA,UAAU,OAAA;AACV,yGAAA,YAAY,OAAA;AACZ,sGAAA,SAAS,OAAA;AACT,qGAAA,QAAQ,OAAA;AACR,0GAAA,aAAa,OAAA;AACb,kHAAA,qBAAqB,OAAA;AACrB,+GAAA,kBAAkB,OAAA;AAClB,8GAAA,iBAAiB,OAAA;AACjB,+GAAA,kBAAkB,OAAA;AAClB,uHAAA,0BAA0B,OAAA;AAC1B,qHAAA,wBAAwB,OAAA;AACxB,2GAAA,cAAc,OAAA;AACd,+GAAA,kBAAkB,OAAA;AAGpB,uCAAsC;AAA7B,oGAAA,QAAQ,OAAA;AAEjB,yEAAyE;AACzE,uCAuBoB;AAtBlB,sGAAA,UAAU,OAAA;AACV,0GAAA,cAAc,OAAA;AACd,uGAAA,WAAW,OAAA;AACX,yGAAA,aAAa,OAAA;AACb,yBAAyB;AACzB,kHAAA,sBAAsB,OAAA;AACtB,8GAAA,kBAAkB,OAAA;AAElB,yGAAA,aAAa,OAAA;AACb,kHAAA,sBAAsB,OAAA;AACtB,mHAAA,uBAAuB,OAAA;AACvB,qHAAA,yBAAyB,OAAA;AACzB,4HAAA,gCAAgC,OAAA;AAChC,kHAAA,sBAAsB,OAAA;AACtB,yHAAA,6BAA6B,OAAA;AAC7B,mHAAA,uBAAuB,OAAA;AACvB,8GAAA,kBAAkB,OAAA;AAClB,iHAAA,qBAAqB,OAAA;AACrB,qHAAA,yBAAyB,OAAA;AACzB,2BAA2B;AAC3B,+GAAA,mBAAmB,OAAA;AACnB,uGAAA,WAAW,OAAA;AAIb,yEAAyE;AACzE,6BAAuC;AAA9B,qGAAA,cAAc,OAAA;AAEvB,yEAAyE;AACzE,qCAAgD;AAAvC,8GAAA,mBAAmB,OAAA;AAG5B,yEAAyE;AACzE,qCAAwC;AAA/B,sGAAA,WAAW,OAAA;AAEpB,yEAAyE;AACzE,yCAA2C;AAAlC,yGAAA,YAAY,OAAA;AAGrB,yEAAyE;AACzE,qCAA0C;AAAjC,wGAAA,aAAa,OAAA;AAEtB,yEAAyE;AACzE,qCAAuD;AAA9C,qHAAA,0BAA0B,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;AAAA,yEAAyE;AACzE,+BAOgB;AANd,mGAAA,WAAW,OAAA;AACX,qGAAA,aAAa,OAAA;AACb,8FAAA,MAAM,OAAA;AACN,oGAAA,YAAY,OAAA;AACZ,uGAAA,eAAe,OAAA;AACf,sGAAA,cAAc,OAAA;AAIhB,yEAAyE;AACzE,mCAWkB;AAVhB,yGAAA,eAAe,OAAA;AACf,8GAAA,oBAAoB,OAAA;AACpB,yGAAA,eAAe,OAAA;AACf,yGAAA,eAAe,OAAA;AACf,6GAAA,mBAAmB,OAAA;AACnB,8GAAA,oBAAoB,OAAA;AACpB,yGAAA,eAAe,OAAA;AACf,qGAAA,WAAW,OAAA;AACX,uGAAA,aAAa,OAAA;AACb,mHAAA,yBAAyB,OAAA;AAY3B,yEAAyE;AACzE,yCAuBqB;AAtBnB,+GAAA,kBAAkB,OAAA;AAClB,gHAAA,mBAAmB,OAAA;AACnB,gHAAA,mBAAmB,OAAA;AACnB,+GAAA,kBAAkB,OAAA;AAClB,mHAAA,sBAAsB,OAAA;AACtB,wHAAA,2BAA2B,OAAA;AAC3B,2GAAA,cAAc,OAAA;AACd,oGAAA,OAAO,OAAA;AACP,sGAAA,SAAS,OAAA;AACT,uGAAA,UAAU,OAAA;AACV,yGAAA,YAAY,OAAA;AACZ,sGAAA,SAAS,OAAA;AACT,qGAAA,QAAQ,OAAA;AACR,0GAAA,aAAa,OAAA;AACb,kHAAA,qBAAqB,OAAA;AACrB,+GAAA,kBAAkB,OAAA;AAClB,8GAAA,iBAAiB,OAAA;AACjB,+GAAA,kBAAkB,OAAA;AAClB,uHAAA,0BAA0B,OAAA;AAC1B,qHAAA,wBAAwB,OAAA;AACxB,2GAAA,cAAc,OAAA;AACd,+GAAA,kBAAkB,OAAA;AAGpB,uCAAsC;AAA7B,oGAAA,QAAQ,OAAA;AAEjB,yEAAyE;AACzE,uCAuBoB;AAtBlB,sGAAA,UAAU,OAAA;AACV,0GAAA,cAAc,OAAA;AACd,uGAAA,WAAW,OAAA;AACX,yGAAA,aAAa,OAAA;AACb,yBAAyB;AACzB,kHAAA,sBAAsB,OAAA;AACtB,8GAAA,kBAAkB,OAAA;AAElB,yGAAA,aAAa,OAAA;AACb,kHAAA,sBAAsB,OAAA;AACtB,mHAAA,uBAAuB,OAAA;AACvB,qHAAA,yBAAyB,OAAA;AACzB,4HAAA,gCAAgC,OAAA;AAChC,kHAAA,sBAAsB,OAAA;AACtB,yHAAA,6BAA6B,OAAA;AAC7B,mHAAA,uBAAuB,OAAA;AACvB,8GAAA,kBAAkB,OAAA;AAClB,iHAAA,qBAAqB,OAAA;AACrB,qHAAA,yBAAyB,OAAA;AACzB,2BAA2B;AAC3B,+GAAA,mBAAmB,OAAA;AACnB,uGAAA,WAAW,OAAA;AAIb,yEAAyE;AACzE,6BAAuC;AAA9B,qGAAA,cAAc,OAAA;AAEvB,yEAAyE;AACzE,qCAAgD;AAAvC,8GAAA,mBAAmB,OAAA;AAG5B,yEAAyE;AACzE,qCAAwC;AAA/B,sGAAA,WAAW,OAAA;AAEpB,yEAAyE;AACzE,yCAA2C;AAAlC,yGAAA,YAAY,OAAA;AAGrB,yEAAyE;AACzE,qCAA0D;AAAjD,wGAAA,aAAa,OAAA;AAAE,yGAAA,cAAc,OAAA;AAEtC,yEAAyE;AACzE,qCAAuD;AAA9C,qHAAA,0BAA0B,OAAA"}

package/dist/storage/base-storage.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base-storage.service.d.ts","sourceRoot":"","sources":["../../src/storage/base-storage.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAgB,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAErE;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;GAeG;AACH,8BAAsB,0BAA0B;IAMlC,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa;IAL3D,SAAS,CAAC,QAAQ,CAAC,MAAM,SAAqC;IAC9D,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAC5C,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IACtC,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;gBAEd,aAAa,EAAE,aAAa;IAsB3D;;;;;OAKG;IACG,YAAY,CAChB,UAAU,EAAE,MAAM,EAClB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,CAAC;IAiBlB;;OAEG;IACG,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAQpE;;OAEG;IACG,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAoBvD;;;;;OAKG;IACG,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAuBtD;;OAEG;IACG,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IA2B1E;;OAEG;IACG,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAiBpD"}
+{"version":3,"file":"base-storage.service.d.ts","sourceRoot":"","sources":["../../src/storage/base-storage.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAgB,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGrE;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;GAeG;AACH,8BAAsB,0BAA0B;IAMlC,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa;IAL3D,SAAS,CAAC,QAAQ,CAAC,MAAM,SAAqC;IAC9D,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAC5C,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IACtC,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;gBAEd,aAAa,EAAE,aAAa;IAsB3D;;;;;OAKG;IACG,YAAY,CAChB,UAAU,EAAE,MAAM,EAClB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,CAAC;IAiBlB;;OAEG;IACG,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAQpE;;OAEG;IACG,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAsBvD;;;;;OAKG;IACG,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAuBtD;;OAEG;IACG,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IA2B1E;;OAEG;IACG,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAiBpD"}

package/dist/storage/base-storage.service.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.BaseSupabaseStorageService = void 0;
 const common_1 = require("@nestjs/common");
 const supabase_js_1 = require("@supabase/supabase-js");
+const log_utils_1 = require("../helpers/log-utils");
 /**
  * Abstract base class for Supabase Storage services.
  *
@@ -54,7 +55,7 @@ class BaseSupabaseStorageService {
             .from(this.bucketName)
             .createSignedUrl(storageKey, expiry);
         if (error || !data) {
-            this.logger.error(`Failed to generate signed URL for ${storageKey}: ${error?.message}`);
+            this.logger.error(`Failed to generate signed URL for ${(0, log_utils_1.maskStorageKey)(storageKey)}: ${error?.message}`);
             throw new Error(`Failed to generate signed URL: ${error?.message}`);
         }
         return data.signedUrl;
@@ -72,7 +73,7 @@ class BaseSupabaseStorageService {
      * Download a file as a Buffer.
      */
     async downloadBlob(storageKey) {
-        this.logger.log(`Downloading file: ${storageKey}`);
+        this.logger.log(`Downloading file: ${(0, log_utils_1.maskStorageKey)(storageKey)}`);
         const { data, error } = await this.supabase.storage
             .from(this.bucketName)
             .download(storageKey);
@@ -81,7 +82,7 @@ class BaseSupabaseStorageService {
         }
         const arrayBuffer = await data.arrayBuffer();
         const buffer = Buffer.from(arrayBuffer);
-        this.logger.log(`Downloaded ${buffer.length} bytes from ${storageKey}`);
+        this.logger.log(`Downloaded ${buffer.length} bytes from ${(0, log_utils_1.maskStorageKey)(storageKey)}`);
         return buffer;
     }
     // ── Existence Check ─────────────────────────────────────────────────
@@ -145,10 +146,10 @@ class BaseSupabaseStorageService {
                 .from(this.bucketName)
                 .remove([storageKey]);
             if (error) {
-                this.logger.warn(`Failed to delete file ${storageKey}: ${error.message}`);
+                this.logger.warn(`Failed to delete file ${(0, log_utils_1.maskStorageKey)(storageKey)}: ${error.message}`);
             }
             else {
-                this.logger.log(`Deleted file: ${storageKey}`);
+                this.logger.log(`Deleted file: ${(0, log_utils_1.maskStorageKey)(storageKey)}`);
             }
         }
         catch (error) {

package/dist/storage/base-storage.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"base-storage.service.js","sourceRoot":"","sources":["../../src/storage/base-storage.service.ts"],"names":[],"mappings":";;;AAAA,2CAAwC;AAExC,uDAAqE;AAgBrE;;;;;;;;;;;;;;;GAeG;AACH,MAAsB,0BAA0B;IAMf;IALZ,MAAM,GAAG,IAAI,eAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3C,QAAQ,CAAiB;IACzB,UAAU,CAAS;IACnB,iBAAiB,CAAS;IAE7C,YAA+B,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;QACzD,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,sBAAsB,CAAC,CAAC;QAC3E,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,sBAAsB,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU;YACb,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,yBAAyB,CAAC,IAAI,WAAW,CAAC;QAC3E,IAAI,CAAC,iBAAiB;YACpB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,oCAAoC,CAAC;gBACpE,IAAI,CAAC;QAEP,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,kFAAkF,CACnF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,IAAA,0BAAY,EAAC,WAAY,EAAE,WAAY,EAAE;YACvD,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE;SAChC,CAAC,CAAC;IACL,CAAC;IAED,uEAAuE;IAEvE;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAChB,UAAkB,EAClB,aAAsB;QAEtB,MAAM,MAAM,GAAG,aAAa,IAAI,IAAI,CAAC,iBAAiB,CAAC;QAEvD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO;aAChD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;aACrB,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAEvC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,qCAAqC,UAAU,KAAK,KAAK,EAAE,OAAO,EAAE,CACrE,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,UAAkB;QACrC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACxD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;IACpC,CAAC;IAED,uEAAuE;IAEvE;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,UAAU,EAAE,CAAC,CAAC;QAEnD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO;aAChD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;aACrB,QAAQ,CAAC,UAAU,CAAC,CAAC;QAExB,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAExC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,MAAM,eAAe,UAAU,EAAE,CAAC,CAAC;QACxE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,uEAAuE;IAEvE;;;;;OAKG;IACH,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAEvE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO;iBAChD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;iBACrB,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAEvC,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACrE,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACrE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,uEAAuE;IAEvE;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,UAAkB;QACtC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAEvE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO;iBAChD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;iBACrB,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAEjD,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,OAAO;gBACL,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ;gBACpC,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI;gBAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI;aAC9B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,uEAAuE;IAEvE;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO;iBAC1C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;iBACrB,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;YAExB,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,yBAAyB,UAAU,KAAK,KAAK,CAAC,OAAO,EAAE,CACxD,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,UAAU,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;CACF;AAvKD,gEAuKC"}
+{"version":3,"file":"base-storage.service.js","sourceRoot":"","sources":["../../src/storage/base-storage.service.ts"],"names":[],"mappings":";;;AAAA,2CAAwC;AAExC,uDAAqE;AACrE,oDAAsD;AAgBtD;;;;;;;;;;;;;;;GAeG;AACH,MAAsB,0BAA0B;IAMf;IALZ,MAAM,GAAG,IAAI,eAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3C,QAAQ,CAAiB;IACzB,UAAU,CAAS;IACnB,iBAAiB,CAAS;IAE7C,YAA+B,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;QACzD,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,sBAAsB,CAAC,CAAC;QAC3E,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,sBAAsB,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU;YACb,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,yBAAyB,CAAC,IAAI,WAAW,CAAC;QAC3E,IAAI,CAAC,iBAAiB;YACpB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,oCAAoC,CAAC;gBACpE,IAAI,CAAC;QAEP,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,kFAAkF,CACnF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,IAAA,0BAAY,EAAC,WAAY,EAAE,WAAY,EAAE;YACvD,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE;SAChC,CAAC,CAAC;IACL,CAAC;IAED,uEAAuE;IAEvE;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAChB,UAAkB,EAClB,aAAsB;QAEtB,MAAM,MAAM,GAAG,aAAa,IAAI,IAAI,CAAC,iBAAiB,CAAC;QAEvD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO;aAChD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;aACrB,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAEvC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,qCAAqC,IAAA,0BAAc,EAAC,UAAU,CAAC,KAAK,KAAK,EAAE,OAAO,EAAE,CACrF,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,UAAkB;QACrC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACxD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;IACpC,CAAC;IAED,uEAAuE;IAEvE;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,IAAA,0BAAc,EAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAEnE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO;aAChD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;aACrB,QAAQ,CAAC,UAAU,CAAC,CAAC;QAExB,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAExC,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,cAAc,MAAM,CAAC,MAAM,eAAe,IAAA,0BAAc,EAAC,UAAU,CAAC,EAAE,CACvE,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,uEAAuE;IAEvE;;;;;OAKG;IACH,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAEvE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO;iBAChD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;iBACrB,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAEvC,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACrE,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACrE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,uEAAuE;IAEvE;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,UAAkB;QACtC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAEvE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO;iBAChD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;iBACrB,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAEjD,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,OAAO;gBACL,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ;gBACpC,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI;gBAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI;aAC9B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,uEAAuE;IAEvE;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO;iBAC1C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;iBACrB,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;YAExB,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,yBAAyB,IAAA,0BAAc,EAAC,UAAU,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CACxE,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,IAAA,0BAAc,EAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;CACF;AAzKD,gEAyKC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@veritas-lex/contract-analysis-package",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "description": "Shared NestJS infrastructure for Contract Analysis APIs",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -37,8 +37,12 @@
     "swagger-themes": "^1.4.3",
     "typeorm": "^0.3.28"
   },
+  "dependencies": {
+    "@supabase/supabase-js": "^2.49.0",
+    "file-type": "^21.3.0",
+    "load-esm": "^1.0.3"
+  },
   "devDependencies": {
-    "@supabase/supabase-js": "^2.95.3",
     "@types/compression": "^1.8.1",
     "@types/express": "^5.0.6",
     "@types/joi": "^17.2.2",