@vritti/api-sdk 0.3.13 → 0.3.15

package/dist/files.js

@@ -0,0 +1,182 @@
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+
+// src/files/uploaded-file.decorator.ts
+import { createParamDecorator } from "@nestjs/common";
+import { plainToInstance } from "class-transformer";
+import { validate } from "class-validator";
+
+// src/exceptions/bad-gateway.exception.ts
+import { HttpStatus } from "@nestjs/common";
+
+// src/exceptions/base-field.exception.ts
+import { HttpException } from "@nestjs/common";
+var HttpProblemException = class extends HttpException {
+  static {
+    __name(this, "HttpProblemException");
+  }
+  constructor(detailOrOptions, httpStatus) {
+    const options = typeof detailOrOptions === "string" ? {
+      detail: detailOrOptions
+    } : detailOrOptions;
+    super({
+      type: options.type ?? "about:blank",
+      label: options.label,
+      detail: options.detail,
+      errors: options.errors ?? []
+    }, httpStatus);
+  }
+};
+
+// src/exceptions/bad-request.exception.ts
+import { HttpStatus as HttpStatus2 } from "@nestjs/common";
+var BadRequestException = class extends HttpProblemException {
+  static {
+    __name(this, "BadRequestException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Bad Request", HttpStatus2.BAD_REQUEST);
+  }
+};
+
+// src/exceptions/conflict.exception.ts
+import { HttpStatus as HttpStatus3 } from "@nestjs/common";
+
+// src/exceptions/forbidden.exception.ts
+import { HttpStatus as HttpStatus4 } from "@nestjs/common";
+
+// src/exceptions/gone.exception.ts
+import { HttpStatus as HttpStatus5 } from "@nestjs/common";
+
+// src/exceptions/internal-server-error.exception.ts
+import { HttpStatus as HttpStatus6 } from "@nestjs/common";
+
+// src/exceptions/method-not-allowed.exception.ts
+import { HttpStatus as HttpStatus7 } from "@nestjs/common";
+
+// src/exceptions/not-acceptable.exception.ts
+import { HttpStatus as HttpStatus8 } from "@nestjs/common";
+
+// src/exceptions/not-found.exception.ts
+import { HttpStatus as HttpStatus9 } from "@nestjs/common";
+
+// src/exceptions/not-implemented.exception.ts
+import { HttpStatus as HttpStatus10 } from "@nestjs/common";
+
+// src/exceptions/payload-too-large.exception.ts
+import { HttpStatus as HttpStatus11 } from "@nestjs/common";
+
+// src/exceptions/request-timeout.exception.ts
+import { HttpStatus as HttpStatus12 } from "@nestjs/common";
+
+// src/exceptions/service-unavailable.exception.ts
+import { HttpStatus as HttpStatus13 } from "@nestjs/common";
+
+// src/exceptions/too-many-requests.exception.ts
+import { HttpStatus as HttpStatus14 } from "@nestjs/common";
+
+// src/exceptions/unauthorized.exception.ts
+import { HttpStatus as HttpStatus15 } from "@nestjs/common";
+
+// src/exceptions/unprocessable-entity.exception.ts
+import { HttpStatus as HttpStatus16 } from "@nestjs/common";
+
+// src/exceptions/unsupported-media-type.exception.ts
+import { HttpStatus as HttpStatus17 } from "@nestjs/common";
+
+// src/exceptions/validation.exception.ts
+import { HttpStatus as HttpStatus18 } from "@nestjs/common";
+
+// src/files/uploaded-file.decorator.ts
+var PARSED = Symbol("vritti.multipart");
+function readMultipart(request) {
+  const cached = request;
+  cached[PARSED] ??= (async () => {
+    const content = {
+      fields: {},
+      files: {}
+    };
+    for await (const part of request.parts()) {
+      if (part.type === "file") {
+        const file = {
+          buffer: await part.toBuffer(),
+          filename: part.filename,
+          mimetype: part.mimetype
+        };
+        const existing = content.files[part.fieldname];
+        if (existing) existing.push(file);
+        else content.files[part.fieldname] = [
+          file
+        ];
+      } else {
+        content.fields[part.fieldname] = part.value;
+      }
+    }
+    return content;
+  })();
+  return cached[PARSED];
+}
+__name(readMultipart, "readMultipart");
+function flatten(files) {
+  return Object.values(files).flat();
+}
+__name(flatten, "flatten");
+var UploadedFile = createParamDecorator(async (fieldName, ctx) => {
+  const { files } = await readMultipart(ctx.switchToHttp().getRequest());
+  const file = (fieldName ? files[fieldName] : flatten(files))?.[0];
+  if (!file) {
+    const field = fieldName ?? "file";
+    throw new BadRequestException({
+      label: "File Required",
+      detail: `Please attach a file${fieldName ? ` under "${fieldName}"` : ""} to your request.`,
+      errors: [
+        {
+          field,
+          message: "File required"
+        }
+      ]
+    });
+  }
+  return file;
+});
+var UploadedFiles = createParamDecorator(async (fieldName, ctx) => {
+  const { files } = await readMultipart(ctx.switchToHttp().getRequest());
+  if (!fieldName) return files;
+  const matched = files[fieldName] ?? [];
+  if (matched.length === 0) {
+    throw new BadRequestException({
+      label: "Files Required",
+      detail: `Please attach at least one file under "${fieldName}" to your request.`,
+      errors: [
+        {
+          field: fieldName,
+          message: "At least one file is required"
+        }
+      ]
+    });
+  }
+  return matched;
+});
+var MultipartDto = createParamDecorator(async (dtoClass, ctx) => {
+  const { fields } = await readMultipart(ctx.switchToHttp().getRequest());
+  const dto = plainToInstance(dtoClass, fields);
+  const errors = await validate(dto);
+  if (errors.length > 0) {
+    throw new BadRequestException({
+      label: "Validation Failed",
+      detail: "One or more fields are invalid.",
+      errors: errors.map((e) => ({
+        field: e.property,
+        message: Object.values(e.constraints ?? {})[0] ?? "Invalid value"
+      }))
+    });
+  }
+  return dto;
+});
+export {
+  MultipartDto,
+  UploadedFile,
+  UploadedFiles,
+  readMultipart
+};
+//# sourceMappingURL=files.js.map

package/dist/files.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/files/uploaded-file.decorator.ts","../src/exceptions/bad-gateway.exception.ts","../src/exceptions/base-field.exception.ts","../src/exceptions/bad-request.exception.ts","../src/exceptions/conflict.exception.ts","../src/exceptions/forbidden.exception.ts","../src/exceptions/gone.exception.ts","../src/exceptions/internal-server-error.exception.ts","../src/exceptions/method-not-allowed.exception.ts","../src/exceptions/not-acceptable.exception.ts","../src/exceptions/not-found.exception.ts","../src/exceptions/not-implemented.exception.ts","../src/exceptions/payload-too-large.exception.ts","../src/exceptions/request-timeout.exception.ts","../src/exceptions/service-unavailable.exception.ts","../src/exceptions/too-many-requests.exception.ts","../src/exceptions/unauthorized.exception.ts","../src/exceptions/unprocessable-entity.exception.ts","../src/exceptions/unsupported-media-type.exception.ts","../src/exceptions/validation.exception.ts"],"sourcesContent":["import type {} from '@fastify/multipart';\nimport { createParamDecorator, type ExecutionContext } from '@nestjs/common';\nimport { type ClassConstructor, plainToInstance } from 'class-transformer';\nimport { validate } from 'class-validator';\nimport type { FastifyRequest } from 'fastify';\nimport { BadRequestException } from '../exceptions';\n\nexport interface UploadedFileResult {\n  buffer: Buffer;\n  filename: string;\n  mimetype: string;\n}\n\nexport type UploadedFileMap = Record<string, UploadedFileResult[]>;\n\nexport interface MultipartContent {\n  fields: Record<string, unknown>;\n  files: UploadedFileMap;\n}\n\nconst PARSED = Symbol('vritti.multipart');\n\ntype ParsedRequest = FastifyRequest & { [PARSED]?: Promise<MultipartContent> };\n\n// Reads the whole multipart body once and caches it — the part stream cannot be walked twice\nexport function readMultipart(request: FastifyRequest): Promise<MultipartContent> {\n  const cached = request as ParsedRequest;\n  cached[PARSED] ??= (async () => {\n    const content: MultipartContent = { fields: {}, files: {} };\n    for await (const part of request.parts()) {\n      if (part.type === 'file') {\n        const file = { buffer: await part.toBuffer(), filename: part.filename, mimetype: part.mimetype };\n        const existing = content.files[part.fieldname];\n        if (existing) existing.push(file);\n        else content.files[part.fieldname] = [file];\n      } else {\n        content.fields[part.fieldname] = part.value;\n      }\n    }\n    return content;\n  })();\n  return cached[PARSED];\n}\n\nfunction flatten(files: Record<string, UploadedFileResult[]>): UploadedFileResult[] {\n  return Object.values(files).flat();\n}\n\n// The single file sent under `fieldName`, or the only file on the request; throws when absent\nexport const UploadedFile = createParamDecorator(\n  async (fieldName: string | undefined, ctx: ExecutionContext): Promise<UploadedFileResult> => {\n    const { files } = await readMultipart(ctx.switchToHttp().getRequest<FastifyRequest>());\n    const file = (fieldName ? files[fieldName] : flatten(files))?.[0];\n\n    if (!file) {\n      const field = fieldName ?? 'file';\n      throw new BadRequestException({\n        label: 'File Required',\n        detail: `Please attach a file${fieldName ? ` under \"${fieldName}\"` : ''} to your request.`,\n        errors: [{ field, message: 'File required' }],\n      });\n    }\n    return file;\n  },\n);\n\n// Every file under `fieldName` (throws when none), or with no name every file keyed by field name (never throws)\nexport const UploadedFiles = createParamDecorator(\n  async (\n    fieldName: string | undefined,\n    ctx: ExecutionContext,\n  ): Promise<UploadedFileResult[] | Record<string, UploadedFileResult[]>> => {\n    const { files } = await readMultipart(ctx.switchToHttp().getRequest<FastifyRequest>());\n    if (!fieldName) return files;\n\n    const matched = files[fieldName] ?? [];\n    if (matched.length === 0) {\n      throw new BadRequestException({\n        label: 'Files Required',\n        detail: `Please attach at least one file under \"${fieldName}\" to your request.`,\n        errors: [{ field: fieldName, message: 'At least one file is required' }],\n      });\n    }\n    return matched;\n  },\n);\n\n// The request's text fields validated into `dto`, for a multipart form whose body cannot reach @Body() —\n// fastify only surfaces fields while walking the parts, so request.body is empty without attachFieldsToBody.\nexport const MultipartDto = createParamDecorator(\n  async <T extends object>(dtoClass: ClassConstructor<T>, ctx: ExecutionContext): Promise<T> => {\n    const { fields } = await readMultipart(ctx.switchToHttp().getRequest<FastifyRequest>());\n    const dto = plainToInstance(dtoClass, fields);\n    const errors = await validate(dto as object);\n\n    if (errors.length > 0) {\n      throw new BadRequestException({\n        label: 'Validation Failed',\n        detail: 'One or more fields are invalid.',\n        errors: errors.map((e) => ({\n          field: e.property,\n          message: Object.values(e.constraints ?? {})[0] ?? 'Invalid value',\n        })),\n      });\n    }\n    return dto;\n  },\n);\n","import { HttpStatus } from '@nestjs/common';\nimport { HttpProblemException, type ProblemOptions } from './base-field.exception';\n\nexport class BadGatewayException extends HttpProblemException {\n  constructor(detailOrOptions?: string | ProblemOptions) {\n    super(detailOrOptions ?? 'Bad Gateway', HttpStatus.BAD_GATEWAY);\n  }\n}\n","import { HttpException, HttpStatus } from '@nestjs/common';\nimport type { FieldError } from '../types/error-response.types';\n\n// Re-export FieldError for backwards compatibility\nexport type { FieldError } from '../types/error-response.types';\n\nexport interface ProblemOptions {\n  type?: string;\n  label?: string;\n  detail?: string;\n  errors?: FieldError[];\n}\n\nexport abstract class HttpProblemException extends HttpException {\n  constructor(detailOrOptions: string | ProblemOptions, httpStatus: HttpStatus) {\n    const options = typeof detailOrOptions === 'string' ? { detail: detailOrOptions } : detailOrOptions;\n\n    super(\n      {\n        type: options.type ?? 'about:blank',\n        label: options.label,\n        detail: options.detail,\n        errors: options.errors ?? [],\n      },\n      httpStatus,\n    );\n  }\n}\n","import { HttpStatus } from '@nestjs/common';\nimport { HttpProblemException, type ProblemOptions } from './base-field.exception';\n\nexport class BadRequestException extends HttpProblemException {\n  constructor(detailOrOptions?: string | ProblemOptions) {\n    super(detailOrOptions ?? 'Bad Request', HttpStatus.BAD_REQUEST);\n  }\n}\n","import { HttpStatus } from '@nestjs/common';\nimport { HttpProblemException, type ProblemOptions } from './base-field.exception';\n\nexport class ConflictException extends HttpProblemException {\n  constructor(detailOrOptions?: string | ProblemOptions) {\n    super(detailOrOptions ?? 'Conflict', HttpStatus.CONFLICT);\n  }\n}\n","import { HttpStatus } from '@nestjs/common';\nimport { HttpProblemException, type ProblemOptions } from './base-field.exception';\n\nexport class ForbiddenException extends HttpProblemException {\n  constructor(detailOrOptions?: string | ProblemOptions) {\n    super(detailOrOptions ?? 'Forbidden', HttpStatus.FORBIDDEN);\n  }\n}\n","import { HttpStatus } from '@nestjs/common';\nimport { HttpProblemException, type ProblemOptions } from './base-field.exception';\n\nexport class GoneException extends HttpProblemException {\n  constructor(detailOrOptions?: string | ProblemOptions) {\n    super(detailOrOptions ?? 'Gone', HttpStatus.GONE);\n  }\n}\n","import { HttpStatus } from '@nestjs/common';\nimport { HttpProblemException, type ProblemOptions } from './base-field.exception';\n\nexport class InternalServerErrorException extends HttpProblemException {\n  constructor(detailOrOptions?: string | ProblemOptions) {\n    super(detailOrOptions ?? 'Internal Server Error', HttpStatus.INTERNAL_SERVER_ERROR);\n  }\n}\n","import { HttpStatus } from '@nestjs/common';\nimport { HttpProblemException, type ProblemOptions } from './base-field.exception';\n\nexport class MethodNotAllowedException extends HttpProblemException {\n  constructor(detailOrOptions?: string | ProblemOptions) {\n    super(detailOrOptions ?? 'Method Not Allowed', HttpStatus.METHOD_NOT_ALLOWED);\n  }\n}\n","import { HttpStatus } from '@nestjs/common';\nimport { HttpProblemException, type ProblemOptions } from './base-field.exception';\n\nexport class NotAcceptableException extends HttpProblemException {\n  constructor(detailOrOptions?: string | ProblemOptions) {\n    super(detailOrOptions ?? 'Not Acceptable', HttpStatus.NOT_ACCEPTABLE);\n  }\n}\n","import { HttpStatus } from '@nestjs/common';\nimport { HttpProblemException, type ProblemOptions } from './base-field.exception';\n\nexport class NotFoundException extends HttpProblemException {\n  constructor(detailOrOptions?: string | ProblemOptions) {\n    super(detailOrOptions ?? 'Not Found', HttpStatus.NOT_FOUND);\n  }\n}\n","import { HttpStatus } from '@nestjs/common';\nimport { HttpProblemException, type ProblemOptions } from './base-field.exception';\n\nexport class NotImplementedException extends HttpProblemException {\n  constructor(detailOrOptions?: string | ProblemOptions) {\n    super(detailOrOptions ?? 'Not Implemented', HttpStatus.NOT_IMPLEMENTED);\n  }\n}\n","import { HttpStatus } from '@nestjs/common';\nimport { HttpProblemException, type ProblemOptions } from './base-field.exception';\n\nexport class PayloadTooLargeException extends HttpProblemException {\n  constructor(detailOrOptions?: string | ProblemOptions) {\n    super(detailOrOptions ?? 'Payload Too Large', HttpStatus.PAYLOAD_TOO_LARGE);\n  }\n}\n","import { HttpStatus } from '@nestjs/common';\nimport { HttpProblemException, type ProblemOptions } from './base-field.exception';\n\nexport class RequestTimeoutException extends HttpProblemException {\n  constructor(detailOrOptions?: string | ProblemOptions) {\n    super(detailOrOptions ?? 'Request Timeout', HttpStatus.REQUEST_TIMEOUT);\n  }\n}\n","import { HttpStatus } from '@nestjs/common';\nimport { HttpProblemException, type ProblemOptions } from './base-field.exception';\n\nexport class ServiceUnavailableException extends HttpProblemException {\n  constructor(detailOrOptions?: string | ProblemOptions) {\n    super(detailOrOptions ?? 'Service Unavailable', HttpStatus.SERVICE_UNAVAILABLE);\n  }\n}\n","import { HttpStatus } from '@nestjs/common';\nimport { HttpProblemException, type ProblemOptions } from './base-field.exception';\n\nexport class TooManyRequestsException extends HttpProblemException {\n  constructor(detailOrOptions?: string | ProblemOptions) {\n    super(detailOrOptions ?? 'Too Many Requests', HttpStatus.TOO_MANY_REQUESTS);\n  }\n}\n","import { HttpStatus } from '@nestjs/common';\nimport { HttpProblemException, type ProblemOptions } from './base-field.exception';\n\nexport class UnauthorizedException extends HttpProblemException {\n  constructor(detailOrOptions?: string | ProblemOptions) {\n    super(detailOrOptions ?? 'Unauthorized', HttpStatus.UNAUTHORIZED);\n  }\n}\n","import { HttpStatus } from '@nestjs/common';\nimport { HttpProblemException, type ProblemOptions } from './base-field.exception';\n\nexport class UnprocessableEntityException extends HttpProblemException {\n  constructor(detailOrOptions?: string | ProblemOptions) {\n    super(detailOrOptions ?? 'Unprocessable Entity', HttpStatus.UNPROCESSABLE_ENTITY);\n  }\n}\n","import { HttpStatus } from '@nestjs/common';\nimport { HttpProblemException, type ProblemOptions } from './base-field.exception';\n\nexport class UnsupportedMediaTypeException extends HttpProblemException {\n  constructor(detailOrOptions?: string | ProblemOptions) {\n    super(detailOrOptions ?? 'Unsupported Media Type', HttpStatus.UNSUPPORTED_MEDIA_TYPE);\n  }\n}\n","import { HttpStatus } from '@nestjs/common';\nimport { HttpProblemException, type ProblemOptions } from './base-field.exception';\n\nexport class ValidationException extends HttpProblemException {\n  constructor(detailOrOptions?: string | ProblemOptions) {\n    super(detailOrOptions ?? 'Validation Failed', HttpStatus.UNPROCESSABLE_ENTITY);\n  }\n}\n"],"mappings":";;;;AACA,SAASA,4BAAmD;AAC5D,SAAgCC,uBAAuB;AACvD,SAASC,gBAAgB;;;ACHzB,SAASC,kBAAkB;;;ACA3B,SAASC,qBAAiC;AAanC,IAAeC,uBAAf,cAA4CC,cAAAA;EAbnD,OAamDA;;;EACjD,YAAYC,iBAA0CC,YAAwB;AAC5E,UAAMC,UAAU,OAAOF,oBAAoB,WAAW;MAAEG,QAAQH;IAAgB,IAAIA;AAEpF,UACE;MACEI,MAAMF,QAAQE,QAAQ;MACtBC,OAAOH,QAAQG;MACfF,QAAQD,QAAQC;MAChBG,QAAQJ,QAAQI,UAAU,CAAA;IAC5B,GACAL,UAAAA;EAEJ;AACF;;;AC3BA,SAASM,cAAAA,mBAAkB;AAGpB,IAAMC,sBAAN,cAAkCC,qBAAAA;EAHzC,OAGyCA;;;EACvC,YAAYC,iBAA2C;AACrD,UAAMA,mBAAmB,eAAeC,YAAWC,WAAW;EAChE;AACF;;;ACPA,SAASC,cAAAA,mBAAkB;;;ACA3B,SAASC,cAAAA,mBAAkB;;;ACA3B,SAASC,cAAAA,mBAAkB;;;ACA3B,SAASC,cAAAA,mBAAkB;;;ACA3B,SAASC,cAAAA,mBAAkB;;;ACA3B,SAASC,cAAAA,mBAAkB;;;ACA3B,SAASC,cAAAA,mBAAkB;;;ACA3B,SAASC,cAAAA,oBAAkB;;;ACA3B,SAASC,cAAAA,oBAAkB;;;ACA3B,SAASC,cAAAA,oBAAkB;;;ACA3B,SAASC,cAAAA,oBAAkB;;;ACA3B,SAASC,cAAAA,oBAAkB;;;ACA3B,SAASC,cAAAA,oBAAkB;;;ACA3B,SAASC,cAAAA,oBAAkB;;;ACA3B,SAASC,cAAAA,oBAAkB;;;ACA3B,SAASC,cAAAA,oBAAkB;;;AnBoB3B,IAAMC,SAASC,OAAO,kBAAA;AAKf,SAASC,cAAcC,SAAuB;AACnD,QAAMC,SAASD;AACfC,SAAOJ,MAAAA,OAAa,YAAA;AAClB,UAAMK,UAA4B;MAAEC,QAAQ,CAAC;MAAGC,OAAO,CAAC;IAAE;AAC1D,qBAAiBC,QAAQL,QAAQM,MAAK,GAAI;AACxC,UAAID,KAAKE,SAAS,QAAQ;AACxB,cAAMC,OAAO;UAAEC,QAAQ,MAAMJ,KAAKK,SAAQ;UAAIC,UAAUN,KAAKM;UAAUC,UAAUP,KAAKO;QAAS;AAC/F,cAAMC,WAAWX,QAAQE,MAAMC,KAAKS,SAAS;AAC7C,YAAID,SAAUA,UAASE,KAAKP,IAAAA;YACvBN,SAAQE,MAAMC,KAAKS,SAAS,IAAI;UAACN;;MACxC,OAAO;AACLN,gBAAQC,OAAOE,KAAKS,SAAS,IAAIT,KAAKW;MACxC;IACF;AACA,WAAOd;EACT,GAAA;AACA,SAAOD,OAAOJ,MAAAA;AAChB;AAjBgBE;AAmBhB,SAASkB,QAAQb,OAA2C;AAC1D,SAAOc,OAAOC,OAAOf,KAAAA,EAAOgB,KAAI;AAClC;AAFSH;AAKF,IAAMI,eAAeC,qBAC1B,OAAOC,WAA+BC,QAAAA;AACpC,QAAM,EAAEpB,MAAK,IAAK,MAAML,cAAcyB,IAAIC,aAAY,EAAGC,WAAU,CAAA;AACnE,QAAMlB,QAAQe,YAAYnB,MAAMmB,SAAAA,IAAaN,QAAQb,KAAAA,KAAU,CAAA;AAE/D,MAAI,CAACI,MAAM;AACT,UAAMmB,QAAQJ,aAAa;AAC3B,UAAM,IAAIK,oBAAoB;MAC5BC,OAAO;MACPC,QAAQ,uBAAuBP,YAAY,WAAWA,SAAAA,MAAe,EAAA;MACrEQ,QAAQ;QAAC;UAAEJ;UAAOK,SAAS;QAAgB;;IAC7C,CAAA;EACF;AACA,SAAOxB;AACT,CAAA;AAIK,IAAMyB,gBAAgBX,qBAC3B,OACEC,WACAC,QAAAA;AAEA,QAAM,EAAEpB,MAAK,IAAK,MAAML,cAAcyB,IAAIC,aAAY,EAAGC,WAAU,CAAA;AACnE,MAAI,CAACH,UAAW,QAAOnB;AAEvB,QAAM8B,UAAU9B,MAAMmB,SAAAA,KAAc,CAAA;AACpC,MAAIW,QAAQC,WAAW,GAAG;AACxB,UAAM,IAAIP,oBAAoB;MAC5BC,OAAO;MACPC,QAAQ,0CAA0CP,SAAAA;MAClDQ,QAAQ;QAAC;UAAEJ,OAAOJ;UAAWS,SAAS;QAAgC;;IACxE,CAAA;EACF;AACA,SAAOE;AACT,CAAA;AAKK,IAAME,eAAed,qBAC1B,OAAyBe,UAA+Bb,QAAAA;AACtD,QAAM,EAAErB,OAAM,IAAK,MAAMJ,cAAcyB,IAAIC,aAAY,EAAGC,WAAU,CAAA;AACpE,QAAMY,MAAMC,gBAAgBF,UAAUlC,MAAAA;AACtC,QAAM4B,SAAS,MAAMS,SAASF,GAAAA;AAE9B,MAAIP,OAAOI,SAAS,GAAG;AACrB,UAAM,IAAIP,oBAAoB;MAC5BC,OAAO;MACPC,QAAQ;MACRC,QAAQA,OAAOU,IAAI,CAACC,OAAO;QACzBf,OAAOe,EAAEC;QACTX,SAASd,OAAOC,OAAOuB,EAAEE,eAAe,CAAC,CAAA,EAAG,CAAA,KAAM;MACpD,EAAA;IACF,CAAA;EACF;AACA,SAAON;AACT,CAAA;","names":["createParamDecorator","plainToInstance","validate","HttpStatus","HttpException","HttpProblemException","HttpException","detailOrOptions","httpStatus","options","detail","type","label","errors","HttpStatus","BadRequestException","HttpProblemException","detailOrOptions","HttpStatus","BAD_REQUEST","HttpStatus","HttpStatus","HttpStatus","HttpStatus","HttpStatus","HttpStatus","HttpStatus","HttpStatus","HttpStatus","HttpStatus","HttpStatus","HttpStatus","HttpStatus","HttpStatus","HttpStatus","HttpStatus","PARSED","Symbol","readMultipart","request","cached","content","fields","files","part","parts","type","file","buffer","toBuffer","filename","mimetype","existing","fieldname","push","value","flatten","Object","values","flat","UploadedFile","createParamDecorator","fieldName","ctx","switchToHttp","getRequest","field","BadRequestException","label","detail","errors","message","UploadedFiles","matched","length","MultipartDto","dtoClass","dto","plainToInstance","validate","map","e","property","constraints"]}

package/dist/license.d.cts

@@ -1,4 +1,4 @@
-import { V as VersionSnapshot } from './types-CG-Ynwyf.cjs';
+import { V as VersionSnapshot } from './types-B7ArIjwo.cjs';
 export { S as SignedDocument } from './document-BoS0NIbf.cjs';
 
 declare function hashSnapshot(value: unknown): string;

package/dist/license.d.ts

@@ -1,4 +1,4 @@
-import { V as VersionSnapshot } from './types-CG-Ynwyf.js';
+import { V as VersionSnapshot } from './types-B7ArIjwo.js';
 export { S as SignedDocument } from './document-BoS0NIbf.js';
 
 declare function hashSnapshot(value: unknown): string;

package/dist/{types-CG-Ynwyf.d.cts → types-B7ArIjwo.d.cts}

@@ -2,24 +2,38 @@
  * The surfaces a permission can be granted on.
  *
  * `web` and `mobile` are UI buckets: a feature reaches them through a microfrontend, and a grant
- * there means a person can operate it on that surface. `app` is not a UI at all — it is an API
- * client signing its own requests, so it has no microfrontend and no route, and a feature needs
- * neither to be reachable by one.
+ * there means a person can operate it on that surface. `graphql` and `http` are not UIs at all —
+ * each is an API surface a credential signs its own requests against, so they have no
+ * microfrontend and no route, and a feature needs neither to be reachable on one.
  *
- * Keeping `app` in the same algebra rather than beside it is what lets plan entitlement, node
- * feature locks and permission prerequisites bind an API client exactly as they bind a person.
+ * Keeping the API buckets in the same algebra rather than beside it is what lets plan entitlement,
+ * node feature locks and permission prerequisites bind an API client exactly as they bind a person.
+ * One bucket per surface is what lets a plan entitle GraphQL and HTTP access independently.
  */
-type PlatformBucket = 'web' | 'mobile' | 'app';
+type PlatformBucket = 'web' | 'mobile' | 'graphql' | 'http';
 declare const PLATFORMS: PlatformBucket[];
+/** Buckets that reach their feature through a microfrontend, and so require one to resolve. */
+type UiPlatformBucket = 'web' | 'mobile';
+declare const UI_PLATFORMS: UiPlatformBucket[];
+declare const API_SURFACES: readonly ["GRAPHQL", "HTTP"];
+type ApiSurface = (typeof API_SURFACES)[number];
+/** Buckets that admit an API credential rather than a person — exactly one per surface. */
+type ApiBucket = Exclude<PlatformBucket, UiPlatformBucket>;
+declare const API_BUCKETS: ApiBucket[];
+declare const SURFACE_BY_BUCKET: Record<ApiBucket, ApiSurface>;
+declare const BUCKET_BY_SURFACE: Record<ApiSurface, ApiBucket>;
+declare function isApiBucket(bucket: PlatformBucket): bucket is ApiBucket;
 interface PlatformCodes {
     web?: string[];
     mobile?: string[];
-    app?: string[];
+    graphql?: string[];
+    http?: string[];
 }
 interface PlatformDenyCodes {
     web?: string[] | null;
     mobile?: string[] | null;
-    app?: string[] | null;
+    graphql?: string[] | null;
+    http?: string[] | null;
 }
 type FeatureUnlocks = Record<string, PlatformCodes>;
 type FeatureLocks = Record<string, PlatformDenyCodes>;
@@ -66,6 +80,7 @@ interface SnapshotFeature {
     permissions: SnapshotPermission[];
     microfrontends: SnapshotMicrofrontends;
     requiredServices?: ServiceCode[];
+    apiSurfaces?: ApiSurface[];
 }
 interface SnapshotAppFeatureRef {
     code: string;
@@ -116,7 +131,7 @@ interface VersionSnapshot {
     businesses: Record<string, SnapshotBusiness>;
 }
 declare function snapshotFeatureKey(code: string, scope: ScopeType): string;
-declare const SNAPSHOT_SCHEMA_VERSION = 2;
+declare const SNAPSHOT_SCHEMA_VERSION = 4;
 type LockReason = 'PLAN' | 'SITE' | 'SERVICE';
 interface CatalogPermission {
     code: string;
@@ -154,4 +169,4 @@ interface FeatureCatalogEntry {
 }
 type RoleItem = SnapshotRoleTemplate;
 
-export { type BusinessVocabulary as B, type CatalogPermission as C, type FeatureCatalogEntry as F, type LockReason as L, type PlatformBucket as P, type RoleItem as R, type SiteFeatureLocks as S, type VersionSnapshot as V, type SiteType as a, type ScopeType as b, type ServiceCode as c, type SnapshotFeature as d, type PlatformCodes as e, type FeatureUnlocks as f, type PlatformDenyCodes as g, type FeatureLocks as h, PLATFORMS as i, SERVICE_CODES as j, SITE_TYPES as k, SNAPSHOT_SCHEMA_VERSION as l, type SnapshotApp as m, type SnapshotAppFeatureRef as n, type SnapshotBusiness as o, type SnapshotMicrofrontendMobile as p, type SnapshotMicrofrontends as q, type SnapshotMicrofrontendWeb as r, type SnapshotPermission as s, type SnapshotPlan as t, type SnapshotRoleTemplate as u, snapshotFeatureKey as v, type VocabularyEntry as w };
+export { type ApiSurface as A, BUCKET_BY_SURFACE as B, type CatalogPermission as C, SURFACE_BY_BUCKET as D, snapshotFeatureKey as E, type FeatureCatalogEntry as F, type UiPlatformBucket as G, type VocabularyEntry as H, type LockReason as L, type PlatformBucket as P, type RoleItem as R, type SiteFeatureLocks as S, UI_PLATFORMS as U, type VersionSnapshot as V, type SiteType as a, type ScopeType as b, type ServiceCode as c, type SnapshotFeature as d, type PlatformCodes as e, type PlatformDenyCodes as f, type FeatureUnlocks as g, API_BUCKETS as h, API_SURFACES as i, type ApiBucket as j, type BusinessVocabulary as k, type FeatureLocks as l, isApiBucket as m, PLATFORMS as n, SERVICE_CODES as o, SITE_TYPES as p, SNAPSHOT_SCHEMA_VERSION as q, type SnapshotApp as r, type SnapshotAppFeatureRef as s, type SnapshotBusiness as t, type SnapshotMicrofrontendMobile as u, type SnapshotMicrofrontends as v, type SnapshotMicrofrontendWeb as w, type SnapshotPermission as x, type SnapshotPlan as y, type SnapshotRoleTemplate as z };

package/dist/{types-CG-Ynwyf.d.ts → types-B7ArIjwo.d.ts}

@@ -2,24 +2,38 @@
  * The surfaces a permission can be granted on.
  *
  * `web` and `mobile` are UI buckets: a feature reaches them through a microfrontend, and a grant
- * there means a person can operate it on that surface. `app` is not a UI at all — it is an API
- * client signing its own requests, so it has no microfrontend and no route, and a feature needs
- * neither to be reachable by one.
+ * there means a person can operate it on that surface. `graphql` and `http` are not UIs at all —
+ * each is an API surface a credential signs its own requests against, so they have no
+ * microfrontend and no route, and a feature needs neither to be reachable on one.
  *
- * Keeping `app` in the same algebra rather than beside it is what lets plan entitlement, node
- * feature locks and permission prerequisites bind an API client exactly as they bind a person.
+ * Keeping the API buckets in the same algebra rather than beside it is what lets plan entitlement,
+ * node feature locks and permission prerequisites bind an API client exactly as they bind a person.
+ * One bucket per surface is what lets a plan entitle GraphQL and HTTP access independently.
  */
-type PlatformBucket = 'web' | 'mobile' | 'app';
+type PlatformBucket = 'web' | 'mobile' | 'graphql' | 'http';
 declare const PLATFORMS: PlatformBucket[];
+/** Buckets that reach their feature through a microfrontend, and so require one to resolve. */
+type UiPlatformBucket = 'web' | 'mobile';
+declare const UI_PLATFORMS: UiPlatformBucket[];
+declare const API_SURFACES: readonly ["GRAPHQL", "HTTP"];
+type ApiSurface = (typeof API_SURFACES)[number];
+/** Buckets that admit an API credential rather than a person — exactly one per surface. */
+type ApiBucket = Exclude<PlatformBucket, UiPlatformBucket>;
+declare const API_BUCKETS: ApiBucket[];
+declare const SURFACE_BY_BUCKET: Record<ApiBucket, ApiSurface>;
+declare const BUCKET_BY_SURFACE: Record<ApiSurface, ApiBucket>;
+declare function isApiBucket(bucket: PlatformBucket): bucket is ApiBucket;
 interface PlatformCodes {
     web?: string[];
     mobile?: string[];
-    app?: string[];
+    graphql?: string[];
+    http?: string[];
 }
 interface PlatformDenyCodes {
     web?: string[] | null;
     mobile?: string[] | null;
-    app?: string[] | null;
+    graphql?: string[] | null;
+    http?: string[] | null;
 }
 type FeatureUnlocks = Record<string, PlatformCodes>;
 type FeatureLocks = Record<string, PlatformDenyCodes>;
@@ -66,6 +80,7 @@ interface SnapshotFeature {
     permissions: SnapshotPermission[];
     microfrontends: SnapshotMicrofrontends;
     requiredServices?: ServiceCode[];
+    apiSurfaces?: ApiSurface[];
 }
 interface SnapshotAppFeatureRef {
     code: string;
@@ -116,7 +131,7 @@ interface VersionSnapshot {
     businesses: Record<string, SnapshotBusiness>;
 }
 declare function snapshotFeatureKey(code: string, scope: ScopeType): string;
-declare const SNAPSHOT_SCHEMA_VERSION = 2;
+declare const SNAPSHOT_SCHEMA_VERSION = 4;
 type LockReason = 'PLAN' | 'SITE' | 'SERVICE';
 interface CatalogPermission {
     code: string;
@@ -154,4 +169,4 @@ interface FeatureCatalogEntry {
 }
 type RoleItem = SnapshotRoleTemplate;
 
-export { type BusinessVocabulary as B, type CatalogPermission as C, type FeatureCatalogEntry as F, type LockReason as L, type PlatformBucket as P, type RoleItem as R, type SiteFeatureLocks as S, type VersionSnapshot as V, type SiteType as a, type ScopeType as b, type ServiceCode as c, type SnapshotFeature as d, type PlatformCodes as e, type FeatureUnlocks as f, type PlatformDenyCodes as g, type FeatureLocks as h, PLATFORMS as i, SERVICE_CODES as j, SITE_TYPES as k, SNAPSHOT_SCHEMA_VERSION as l, type SnapshotApp as m, type SnapshotAppFeatureRef as n, type SnapshotBusiness as o, type SnapshotMicrofrontendMobile as p, type SnapshotMicrofrontends as q, type SnapshotMicrofrontendWeb as r, type SnapshotPermission as s, type SnapshotPlan as t, type SnapshotRoleTemplate as u, snapshotFeatureKey as v, type VocabularyEntry as w };
+export { type ApiSurface as A, BUCKET_BY_SURFACE as B, type CatalogPermission as C, SURFACE_BY_BUCKET as D, snapshotFeatureKey as E, type FeatureCatalogEntry as F, type UiPlatformBucket as G, type VocabularyEntry as H, type LockReason as L, type PlatformBucket as P, type RoleItem as R, type SiteFeatureLocks as S, UI_PLATFORMS as U, type VersionSnapshot as V, type SiteType as a, type ScopeType as b, type ServiceCode as c, type SnapshotFeature as d, type PlatformCodes as e, type PlatformDenyCodes as f, type FeatureUnlocks as g, API_BUCKETS as h, API_SURFACES as i, type ApiBucket as j, type BusinessVocabulary as k, type FeatureLocks as l, isApiBucket as m, PLATFORMS as n, SERVICE_CODES as o, SITE_TYPES as p, SNAPSHOT_SCHEMA_VERSION as q, type SnapshotApp as r, type SnapshotAppFeatureRef as s, type SnapshotBusiness as t, type SnapshotMicrofrontendMobile as u, type SnapshotMicrofrontends as v, type SnapshotMicrofrontendWeb as w, type SnapshotPermission as x, type SnapshotPlan as y, type SnapshotRoleTemplate as z };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@vritti/api-sdk",
   "type": "module",
-  "version": "0.3.13",
+  "version": "0.3.15",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -236,6 +236,16 @@
         "default": "./dist/decorators.cjs"
       }
     },
+    "./files": {
+      "import": {
+        "types": "./dist/files.d.ts",
+        "default": "./dist/files.js"
+      },
+      "require": {
+        "types": "./dist/files.d.cts",
+        "default": "./dist/files.cjs"
+      }
+    },
     "./filters": {
       "import": {
         "types": "./dist/filters.d.ts",