@wildo-ai/saas-backend-lib 1.0.1

package/dist/esm/base-classes/services/controllers/validate-field-handler.backend.service.d.ts

@@ -0,0 +1,194 @@
+/**
+ * Validate Field Handler — General-Purpose Server-Side Field Validation Gateway
+ *
+ * Provides a single endpoint for all server-side field-level pre-validations.
+ * Each validation type is implemented as a FieldValidationStrategy. The handler
+ * dispatches to the matching strategy based on field decorators and resource config.
+ *
+ * Route: POST /api/v1/.../:resourceType/validate-field
+ *
+ * ## Architecture
+ *
+ * ```
+ *   Frontend (blur)  ──POST──>  validate-field endpoint
+ *                                    │
+ *                              parse & sanitize request
+ *                                    │
+ *                              resolve field schema
+ *                                    │
+ *                              authorize (CREATE rights)
+ *                                    │
+ *                              detect applicable strategies
+ *                                    │
+ *                    ┌───────────────┼───────────────┐
+ *                    ▼               ▼               ▼
+ *              [uniqueness]    [future: FK]    [future: external]
+ *                    │               │               │
+ *                    └───────────────┼───────────────┘
+ *                                    │
+ *                              return first failure (or valid)
+ * ```
+ *
+ * ## Strategy Registration
+ *
+ * Strategies are registered at module level in FIELD_VALIDATION_STRATEGIES.
+ * Each strategy declares:
+ * - `id`: unique identifier for logging/debugging
+ * - `appliesTo(fieldSchema)`: whether this field needs this validation
+ * - `validate(context)`: execute the validation, return result
+ *
+ * ## Security Model
+ *
+ * - Authorization: CREATE operation rights (collection-level) — if you can create, you can pre-validate
+ * - Value sanitization: only scalars allowed (prevents NoSQL injection)
+ * - Scope enforcement: organization/user scoping is mandatory when declared
+ * - Fail-open for UX: missing scope context returns valid (DB constraints catch at write time)
+ *
+ * ## Currently Implemented Strategies
+ *
+ * - `uniqueness`: checks `isUnique()` decorated fields against the collection
+ *
+ * ## Future Strategies (documented for roadmap)
+ *
+ * ### Foreign Key Existence (`fk-existence`) — DEFERRED
+ * Check that a foreign key value references an existing, accessible resource.
+ * Decorator: `isForeignKey()` (already exists on the schema, validation would be added).
+ * Deferred because: future field developments (autocomplete, resource pickers) will
+ * inherently avoid invalid FK values at the UI level. Server-side FK validation
+ * is a safety net, not a primary UX concern.
+ * Implementation notes when ready:
+ * - Read FK target from relationship configuration (not hardcoded)
+ * - Verify target resource exists via repositoriesRegistry
+ * - Respect user permissions (don't confirm existence of resources the user can't see)
+ * - Handle polymorphic FKs (discriminator-based target resolution)
+ *
+ * ### Quota / Cardinality Limits (`quota`) — DEFERRED
+ * Pre-check "can I create one more of this resource?" before the user fills the form.
+ * Tied to feature flags and billing tiers, which are not yet finalized.
+ * Implementation notes when ready:
+ * - Resource-level check, not field-level (applies to the CREATE action itself)
+ * - Could be triggered on form mount rather than on blur
+ * - Needs to integrate with the billing/subscription service
+ * - May return a quota-specific error type for distinct UI treatment (upgrade prompts)
+ *
+ * ### External API Validation (`external-api`) — DEFERRED
+ * Delegate validation to external services (email deliverability, phone format, VAT, etc.).
+ * Requires a pluggable connector architecture for different providers.
+ * Implementation notes when ready:
+ * - Decorator: `isExternallyValidated({ provider: 'email-deliverability' })` or similar
+ * - Strategy resolves provider from resource configuration or application config
+ * - External connectors engine (`external-connectors/`) would handle the actual API calls
+ * - Needs timeout handling, caching (same email checked twice shouldn't hit the API twice),
+ *   and graceful degradation when the external service is unavailable
+ * - Cost awareness: some APIs charge per call (e.g., Twilio, ZeroBounce)
+ *
+ * ### Custom Server Validators (`custom`) — DEFERRED
+ * Escape hatch for app-specific business rules that can't be expressed declaratively.
+ * Implementation notes when ready:
+ * - Decorator: `isServerValidated({ validator: 'my-custom-check' })` registered in resource config
+ * - Validator is a named function/class registered in the DI container
+ * - Receives the field value, execution context, and access to services
+ * - Must return ValidateFieldResponse (same contract as all strategies)
+ * - Risk: custom code quality varies — engine should impose timeout and error boundaries
+ */
+import { Request, Response, NextFunction, Router } from 'express';
+import { z } from 'zod';
+import type { ResourceConfiguration, ResourceType } from '@wildo-ai/saas-models';
+import { ValidateFieldResponse } from '@wildo-ai/saas-models';
+import { LoggerService } from '../../../monitoring/logger/services/logger.service.js';
+import { ErrorBuilderBackendService } from '../../../errors/services/error-builder.backend.service.js';
+import { AuthorizationsBackendService } from '../../../security/authorizations/services/authorizations.backend.service.js';
+import { ExecutionContextCreatorBackendService } from '../../../runtime/services/execution-context-creator.backend.service.js';
+import { ResourcesRegistryBackendService } from '../../../resources/services/resources-registry.backend.service.js';
+import { RepositoriesRegistryHandlerBackendService } from '../../../base-classes/services/repositories/repositories-registry-handler.backend.service.js';
+import { ExecutionContext } from '../../../runtime/models/execution-context.backend.schemas.js';
+/**
+ * Context passed to each validation strategy.
+ * Contains everything needed to perform the validation without leaking implementation details.
+ */
+export interface FieldValidationContext {
+    /** The field name being validated */
+    fieldName: string;
+    /** The sanitized scalar value */
+    value: string | number | boolean | null;
+    /** The field's Zod schema (with decorators) */
+    fieldSchema: z.ZodTypeAny;
+    /** Resource ID to exclude from checks (self-exclusion for UPDATE) */
+    excludeId?: string;
+    /** The resource type identifier */
+    resourceType: ResourceType;
+    /** The full resource configuration */
+    resourceConfiguration: ResourceConfiguration<any, any, any>;
+    /** The authenticated execution context (authorization already performed) */
+    executionContext: ExecutionContext<any>;
+    /** Framework services for database access */
+    repositoriesRegistry: RepositoriesRegistryHandlerBackendService;
+    /** Framework services for resource metadata */
+    resourcesRegistry: ResourcesRegistryBackendService;
+    /** Error builder for structured errors */
+    errorBuilder: ErrorBuilderBackendService;
+    /** Debug logger */
+    logDebug: (message: string, context?: Record<string, unknown>) => void;
+}
+/**
+ * A field validation strategy performs a single category of server-side pre-validation.
+ *
+ * Strategies are stateless — all request-specific data is passed via FieldValidationContext.
+ * They are instantiated once at module initialization time, not per-request.
+ *
+ * The validate-field handler runs all applicable strategies for a field in registration order
+ * and returns the first failure. If all strategies pass, the field is valid.
+ */
+export interface FieldValidationStrategy {
+    /** Unique identifier for this strategy (used in logging and debugging) */
+    readonly id: string;
+    /**
+     * Determine whether this strategy applies to a given field.
+     * Called once at route initialization time (not per-request) to detect
+     * which fields need the validate-field endpoint.
+     */
+    appliesTo(fieldSchema: z.ZodTypeAny, fieldName: string): boolean;
+    /**
+     * Check if the value can be skipped (e.g., null/empty for sparse unique fields).
+     * Called per-request BEFORE authorization to avoid unnecessary auth calls.
+     * Return true to skip this strategy (treat as valid), false to proceed.
+     */
+    shouldSkip?(context: FieldValidationContext): boolean;
+    /**
+     * Execute the validation. Returns a ValidateFieldResponse.
+     * Called per-request AFTER authorization has been verified.
+     *
+     * MUST NOT perform its own authorization — that's the handler's job.
+     * MUST NOT access the raw Request object — use FieldValidationContext.
+     */
+    validate(context: FieldValidationContext): Promise<ValidateFieldResponse>;
+}
+/**
+ * Detect which fields in a resource schema require server-side pre-validation.
+ * Returns a map of field names to their applicable strategies.
+ *
+ * This is called at route initialization time to determine whether to register
+ * the validate-field endpoint for a given resource.
+ *
+ * Exported so the frontend can use a matching check (via decorator inspection)
+ * to know whether to enable the validate-field URL for a resource.
+ */
+export declare function detectFieldsRequiringServerValidation(mainSchema: z.ZodTypeAny): Map<string, FieldValidationStrategy[]>;
+/**
+ * Quick boolean check: does a resource schema have any fields that require
+ * server-side pre-validation? Used for route gating and frontend URL computation.
+ */
+export declare function hasFieldsRequiringServerValidation(mainSchema: z.ZodTypeAny): boolean;
+/**
+ * Initialize validate-field routes for a resource that has fields requiring
+ * server-side pre-validation.
+ *
+ * Called from ControllerResourceBackendService.initializeRoutes().
+ *
+ * Uses the CREATE operation's initiatorInfos to generate URL patterns,
+ * ensuring proper parent resource context in hierarchical resources.
+ *
+ * Authorization uses CREATE operation rights (collection-level).
+ */
+export declare function initializeValidateFieldRoutes(router: Router, resourceConfiguration: ResourceConfiguration<any, any, any>, logger: LoggerService, errorBuilder: ErrorBuilderBackendService, authorizationsService: AuthorizationsBackendService, executionContextCreator: ExecutionContextCreatorBackendService, resourcesRegistry: ResourcesRegistryBackendService, repositoriesRegistry: RepositoriesRegistryHandlerBackendService, convertUrlPatternToExpressPath: (urlPattern: string) => string, asyncHandler: (fn: Function) => (req: Request, res: Response, next: NextFunction) => void): void;
+//# sourceMappingURL=validate-field-handler.backend.service.d.ts.map

package/dist/esm/base-classes/services/controllers/validate-field-handler.backend.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-field-handler.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/base-classes/services/controllers/validate-field-handler.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4FG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EACV,qBAAqB,EAGrB,YAAY,EACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAML,qBAAqB,EACtB,MAAM,uBAAuB,CAAC;AAQ/B,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,4BAA4B,EAAE,MAAM,oFAAoF,CAAC;AAClI,OAAO,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AACtI,OAAO,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAC3H,OAAO,EAAE,yCAAyC,EAAE,MAAM,qGAAqG,CAAC;AAChK,OAAO,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAuCvG;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IACxC,+CAA+C;IAC/C,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC;IAC1B,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,YAAY,EAAE,YAAY,CAAC;IAC3B,sCAAsC;IACtC,qBAAqB,EAAE,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5D,4EAA4E;IAC5E,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxC,6CAA6C;IAC7C,oBAAoB,EAAE,yCAAyC,CAAC;IAChE,+CAA+C;IAC/C,iBAAiB,EAAE,+BAA+B,CAAC;IACnD,0CAA0C;IAC1C,YAAY,EAAE,0BAA0B,CAAC;IACzC,mBAAmB;IACnB,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACxE;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,uBAAuB;IACtC,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB;;;;OAIG;IACH,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAEjE;;;;OAIG;IACH,UAAU,CAAC,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC;IAEtD;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CAC3E;AA6HD;;;;;;;;;GASG;AACH,wBAAgB,qCAAqC,CACnD,UAAU,EAAE,CAAC,CAAC,UAAU,GACvB,GAAG,CAAC,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAiBxC;AAED;;;GAGG;AACH,wBAAgB,kCAAkC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,GAAG,OAAO,CAcpF;AAMD;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,MAAM,EACd,qBAAqB,EAAE,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAC3D,MAAM,EAAE,aAAa,EACrB,YAAY,EAAE,0BAA0B,EACxC,qBAAqB,EAAE,4BAA4B,EACnD,uBAAuB,EAAE,qCAAqC,EAC9D,iBAAiB,EAAE,+BAA+B,EAClD,oBAAoB,EAAE,yCAAyC,EAC/D,8BAA8B,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,EAC9D,YAAY,EAAE,CAAC,EAAE,EAAE,QAAQ,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,KAAK,IAAI,GACxF,IAAI,CAwLN"}

package/dist/esm/base-classes/services/controllers/validate-field-handler.backend.service.js

@@ -0,0 +1,417 @@
+/**
+ * Validate Field Handler — General-Purpose Server-Side Field Validation Gateway
+ *
+ * Provides a single endpoint for all server-side field-level pre-validations.
+ * Each validation type is implemented as a FieldValidationStrategy. The handler
+ * dispatches to the matching strategy based on field decorators and resource config.
+ *
+ * Route: POST /api/v1/.../:resourceType/validate-field
+ *
+ * ## Architecture
+ *
+ * ```
+ *   Frontend (blur)  ──POST──>  validate-field endpoint
+ *                                    │
+ *                              parse & sanitize request
+ *                                    │
+ *                              resolve field schema
+ *                                    │
+ *                              authorize (CREATE rights)
+ *                                    │
+ *                              detect applicable strategies
+ *                                    │
+ *                    ┌───────────────┼───────────────┐
+ *                    ▼               ▼               ▼
+ *              [uniqueness]    [future: FK]    [future: external]
+ *                    │               │               │
+ *                    └───────────────┼───────────────┘
+ *                                    │
+ *                              return first failure (or valid)
+ * ```
+ *
+ * ## Strategy Registration
+ *
+ * Strategies are registered at module level in FIELD_VALIDATION_STRATEGIES.
+ * Each strategy declares:
+ * - `id`: unique identifier for logging/debugging
+ * - `appliesTo(fieldSchema)`: whether this field needs this validation
+ * - `validate(context)`: execute the validation, return result
+ *
+ * ## Security Model
+ *
+ * - Authorization: CREATE operation rights (collection-level) — if you can create, you can pre-validate
+ * - Value sanitization: only scalars allowed (prevents NoSQL injection)
+ * - Scope enforcement: organization/user scoping is mandatory when declared
+ * - Fail-open for UX: missing scope context returns valid (DB constraints catch at write time)
+ *
+ * ## Currently Implemented Strategies
+ *
+ * - `uniqueness`: checks `isUnique()` decorated fields against the collection
+ *
+ * ## Future Strategies (documented for roadmap)
+ *
+ * ### Foreign Key Existence (`fk-existence`) — DEFERRED
+ * Check that a foreign key value references an existing, accessible resource.
+ * Decorator: `isForeignKey()` (already exists on the schema, validation would be added).
+ * Deferred because: future field developments (autocomplete, resource pickers) will
+ * inherently avoid invalid FK values at the UI level. Server-side FK validation
+ * is a safety net, not a primary UX concern.
+ * Implementation notes when ready:
+ * - Read FK target from relationship configuration (not hardcoded)
+ * - Verify target resource exists via repositoriesRegistry
+ * - Respect user permissions (don't confirm existence of resources the user can't see)
+ * - Handle polymorphic FKs (discriminator-based target resolution)
+ *
+ * ### Quota / Cardinality Limits (`quota`) — DEFERRED
+ * Pre-check "can I create one more of this resource?" before the user fills the form.
+ * Tied to feature flags and billing tiers, which are not yet finalized.
+ * Implementation notes when ready:
+ * - Resource-level check, not field-level (applies to the CREATE action itself)
+ * - Could be triggered on form mount rather than on blur
+ * - Needs to integrate with the billing/subscription service
+ * - May return a quota-specific error type for distinct UI treatment (upgrade prompts)
+ *
+ * ### External API Validation (`external-api`) — DEFERRED
+ * Delegate validation to external services (email deliverability, phone format, VAT, etc.).
+ * Requires a pluggable connector architecture for different providers.
+ * Implementation notes when ready:
+ * - Decorator: `isExternallyValidated({ provider: 'email-deliverability' })` or similar
+ * - Strategy resolves provider from resource configuration or application config
+ * - External connectors engine (`external-connectors/`) would handle the actual API calls
+ * - Needs timeout handling, caching (same email checked twice shouldn't hit the API twice),
+ *   and graceful degradation when the external service is unavailable
+ * - Cost awareness: some APIs charge per call (e.g., Twilio, ZeroBounce)
+ *
+ * ### Custom Server Validators (`custom`) — DEFERRED
+ * Escape hatch for app-specific business rules that can't be expressed declaratively.
+ * Implementation notes when ready:
+ * - Decorator: `isServerValidated({ validator: 'my-custom-check' })` registered in resource config
+ * - Validator is a named function/class registered in the DI container
+ * - Receives the field value, execution context, and access to services
+ * - Must return ValidateFieldResponse (same contract as all strategies)
+ * - Risk: custom code quality varies — engine should impose timeout and error boundaries
+ */
+import { CoreResourceOperation, ResourceOperationVariantType, ErrorType, ErrorCustomMessageReference, ValidateFieldRequest_Schema, } from '@wildo-ai/saas-models';
+import { isUnique, getUniqueParams, getZodObjectShape, isZodObject, } from '@wildo-ai/zod-decorators';
+// =============================================================================
+// VALUE SANITIZATION
+// =============================================================================
+/**
+ * Sanitize a value for use in a database query filter.
+ * Rejects objects and arrays to prevent NoSQL injection via query operators
+ * (e.g., { "$regex": ".*" } or { "$gt": "" }).
+ *
+ * Only scalar values (string, number, boolean, null) are safe for equality checks.
+ */
+function sanitizeValueForFilter(value) {
+    if (value === null || value === undefined) {
+        return { valid: true, sanitized: null };
+    }
+    if (typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean') {
+        return { valid: true, sanitized: value };
+    }
+    // Objects, arrays, functions, symbols — reject
+    return { valid: false };
+}
+/**
+ * Validate that an ID string has a recognized format (ObjectId or UUID).
+ * Used to sanitize excludeId before injecting into filters.
+ */
+function isValidResourceId(id) {
+    return /^[a-fA-F0-9]{24}$/.test(id) ||
+        /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/.test(id);
+}
+// =============================================================================
+// UNIQUENESS STRATEGY (IMPLEMENTED)
+// =============================================================================
+/**
+ * Validates that a field value is unique within the collection,
+ * respecting the `isUnique()` decorator's scope (global, organization, user)
+ * and sparse settings.
+ */
+const uniquenessStrategy = {
+    id: 'uniqueness',
+    appliesTo(fieldSchema) {
+        return isUnique(fieldSchema);
+    },
+    shouldSkip(context) {
+        const uniqueParams = getUniqueParams(context.fieldSchema);
+        // Sparse: null/undefined/empty values are always valid (multiple nulls allowed)
+        return (context.value === null || context.value === undefined || context.value === '') &&
+            (uniqueParams?.sparse !== false);
+    },
+    async validate(context) {
+        const { fieldName, value, fieldSchema, excludeId, resourceType, executionContext, repositoriesRegistry, logDebug } = context;
+        const uniqueParams = getUniqueParams(fieldSchema);
+        // Build the filter with scope-aware filtering
+        const filter = { [fieldName]: value };
+        // Apply scope-based filtering.
+        // SECURITY: If scope requires organization/user context but the context is missing,
+        // we MUST NOT fall through to global scope. Instead, return valid (fail-open for UX)
+        // — the actual unique constraint at CREATE/UPDATE time will catch real conflicts.
+        const scope = uniqueParams?.scope ?? 'global';
+        if (scope === 'organization') {
+            const organizationId = executionContext.initiatorIds?.organizationId;
+            if (!organizationId) {
+                logDebug('Organization scope required but no organizationId in context, skipping check', { fieldName, resourceType });
+                return { valid: true };
+            }
+            filter.organizationId = organizationId;
+        }
+        else if (scope === 'user') {
+            const userId = executionContext.initiatorIds?.userId;
+            if (!userId) {
+                logDebug('User scope required but no userId in context, skipping check', { fieldName, resourceType });
+                return { valid: true };
+            }
+            filter.createdByUserId = userId;
+        }
+        // 'global' scope: no additional filter (intentional — check entire collection)
+        // Exclude self for UPDATE operations (avoid false conflict with own value)
+        if (excludeId && isValidResourceId(excludeId)) {
+            filter._id = { $ne: excludeId };
+        }
+        // Execute uniqueness check via registry infrastructure query
+        const count = await repositoriesRegistry.countDocumentsForInfrastructure(resourceType, filter, executionContext);
+        logDebug('Uniqueness check result', { resourceType, fieldName, value, count, excludeId, scope });
+        if (count === 0) {
+            return { valid: true };
+        }
+        // Build error message, respecting custom errorMessage from decorator
+        const customMessage = uniqueParams?.errorMessage;
+        const fallbackMessage = customMessage
+            ? customMessage.replace('{fieldName}', fieldName)
+            : `This ${fieldName} is already taken`;
+        return {
+            valid: false,
+            error: {
+                fieldName,
+                message: fallbackMessage,
+                i18nKey: 'validation.unique.conflict',
+                i18nParams: {
+                    fieldName,
+                    value: String(value),
+                },
+            },
+        };
+    },
+};
+// =============================================================================
+// STRATEGY REGISTRY
+// =============================================================================
+/**
+ * All registered field validation strategies, in execution order.
+ * When multiple strategies apply to the same field, they are executed
+ * in this order and the first failure short-circuits.
+ *
+ * To add a new strategy:
+ * 1. Implement FieldValidationStrategy
+ * 2. Add it to this array
+ * 3. Update detectFieldsRequiringServerValidation() if the detection
+ *    is not already covered by the strategy's appliesTo()
+ */
+const FIELD_VALIDATION_STRATEGIES = [
+    uniquenessStrategy,
+    // Future strategies will be added here:
+    // foreignKeyExistenceStrategy,
+    // externalApiStrategy,
+    // quotaStrategy,
+    // customServerValidatorStrategy,
+];
+// =============================================================================
+// FIELD DETECTION
+// =============================================================================
+/**
+ * Detect which fields in a resource schema require server-side pre-validation.
+ * Returns a map of field names to their applicable strategies.
+ *
+ * This is called at route initialization time to determine whether to register
+ * the validate-field endpoint for a given resource.
+ *
+ * Exported so the frontend can use a matching check (via decorator inspection)
+ * to know whether to enable the validate-field URL for a resource.
+ */
+export function detectFieldsRequiringServerValidation(mainSchema) {
+    const result = new Map();
+    if (!isZodObject(mainSchema))
+        return result;
+    const shape = getZodObjectShape(mainSchema);
+    for (const [fieldName, fieldSchema] of Object.entries(shape)) {
+        const applicableStrategies = FIELD_VALIDATION_STRATEGIES.filter(strategy => strategy.appliesTo(fieldSchema, fieldName));
+        if (applicableStrategies.length > 0) {
+            result.set(fieldName, applicableStrategies);
+        }
+    }
+    return result;
+}
+/**
+ * Quick boolean check: does a resource schema have any fields that require
+ * server-side pre-validation? Used for route gating and frontend URL computation.
+ */
+export function hasFieldsRequiringServerValidation(mainSchema) {
+    if (!isZodObject(mainSchema))
+        return false;
+    const shape = getZodObjectShape(mainSchema);
+    for (const [fieldName, fieldSchema] of Object.entries(shape)) {
+        for (const strategy of FIELD_VALIDATION_STRATEGIES) {
+            if (strategy.appliesTo(fieldSchema, fieldName)) {
+                return true;
+            }
+        }
+    }
+    return false;
+}
+// =============================================================================
+// ROUTE INITIALIZATION
+// =============================================================================
+/**
+ * Initialize validate-field routes for a resource that has fields requiring
+ * server-side pre-validation.
+ *
+ * Called from ControllerResourceBackendService.initializeRoutes().
+ *
+ * Uses the CREATE operation's initiatorInfos to generate URL patterns,
+ * ensuring proper parent resource context in hierarchical resources.
+ *
+ * Authorization uses CREATE operation rights (collection-level).
+ */
+export function initializeValidateFieldRoutes(router, resourceConfiguration, logger, errorBuilder, authorizationsService, executionContextCreator, resourcesRegistry, repositoriesRegistry, convertUrlPatternToExpressPath, asyncHandler) {
+    const resourceType = resourceConfiguration.resourceIdentifier;
+    const logDebug = logger.debugByType(`ValidateField_${resourceType}`);
+    logger.setDebugTypeLogging(`ValidateField_${resourceType}`, false);
+    // Detect all fields that need server-side validation
+    const serverValidatedFields = detectFieldsRequiringServerValidation(resourceConfiguration.mainSchema);
+    if (serverValidatedFields.size === 0) {
+        logDebug('No fields require server-side validation, skipping validate-field routes', { resourceType });
+        return;
+    }
+    const fieldNames = Array.from(serverValidatedFields.keys());
+    const strategyIds = [...new Set(Array.from(serverValidatedFields.values()).flatMap(strategies => strategies.map(s => s.id)))];
+    logDebug('Fields requiring server-side validation detected', { resourceType, fieldNames, strategyIds });
+    // Get CREATE operation for authorization and URL patterns
+    const createOperation = resourceConfiguration.operations.find(op => op.operationIdentifier === CoreResourceOperation.CREATE &&
+        [ResourceOperationVariantType.API_CALL, ResourceOperationVariantType.API_CALL_WITH_CALLBACK].includes(op.variantType));
+    if (!createOperation) {
+        logDebug('CREATE operation not found, skipping validate-field routes', { resourceType });
+        return;
+    }
+    const createInitiatorInfos = createOperation.initiatorInfos || [];
+    if (createInitiatorInfos.length === 0) {
+        logDebug('CREATE operation has no initiatorInfos, skipping validate-field routes', { resourceType });
+        return;
+    }
+    // Get the schema shape for field lookups
+    const schemaShape = getZodObjectShape(resourceConfiguration.mainSchema);
+    // Register routes for each parent combination (same pattern as file upload routes)
+    const sortedInitiatorInfos = [...createInitiatorInfos].sort((a, b) => {
+        const aParams = a.parameters?.length || 0;
+        const bParams = b.parameters?.length || 0;
+        return bParams - aParams; // More specific first
+    });
+    for (const initiatorInfo of sortedInitiatorInfos) {
+        const basePath = convertUrlPatternToExpressPath(initiatorInfo.url);
+        const validatePath = `${basePath}/validate-field`;
+        router.post(validatePath, asyncHandler(async (req, res, next) => {
+            try {
+                // ─── 1. Parse and validate request body ───────────────────────
+                const parseResult = ValidateFieldRequest_Schema.safeParse(req.body);
+                if (!parseResult.success) {
+                    throw errorBuilder.buildError(ErrorType.VALIDATION, undefined, {
+                        customMessageReference: ErrorCustomMessageReference.CONTROLLER_RESOURCE_VALIDATION_FAILED,
+                        context: { error: parseResult.error.message },
+                    });
+                }
+                const { fieldName, value, excludeId } = parseResult.data;
+                // ─── 2. Sanitize value (prevent NoSQL injection) ─────────────
+                const sanitizeResult = sanitizeValueForFilter(value);
+                if (!sanitizeResult.valid) {
+                    throw errorBuilder.buildError(ErrorType.VALIDATION, undefined, {
+                        customMessageReference: ErrorCustomMessageReference.CONTROLLER_RESOURCE_VALIDATION_FAILED,
+                        context: { fieldName, resourceType, reason: 'Value must be a scalar (string, number, or boolean)' },
+                    });
+                }
+                const sanitizedValue = sanitizeResult.sanitized;
+                // ─── 3. Resolve field schema and applicable strategies ────────
+                const fieldSchema = schemaShape[fieldName];
+                if (!fieldSchema) {
+                    throw errorBuilder.buildError(ErrorType.VALIDATION, undefined, {
+                        customMessageReference: ErrorCustomMessageReference.VALIDATE_FIELD_NOT_FOUND,
+                        context: { fieldName, resourceType },
+                    });
+                }
+                // Find strategies that apply to this field
+                const applicableStrategies = FIELD_VALIDATION_STRATEGIES.filter(strategy => strategy.appliesTo(fieldSchema, fieldName));
+                if (applicableStrategies.length === 0) {
+                    // Field exists but no strategies apply — return valid (no-op)
+                    res.json({ valid: true });
+                    return;
+                }
+                logDebug('Dispatching to strategies', {
+                    fieldName,
+                    strategies: applicableStrategies.map(s => s.id),
+                });
+                // ─── 4. Build validation context (shared across strategies) ──
+                // Note: authorization is deferred until after shouldSkip checks
+                // to avoid unnecessary auth calls for no-op cases.
+                const baseContext = {
+                    fieldName,
+                    value: sanitizedValue,
+                    fieldSchema,
+                    excludeId,
+                    resourceType: resourceType,
+                    resourceConfiguration,
+                    repositoriesRegistry,
+                    resourcesRegistry,
+                    errorBuilder,
+                    logDebug,
+                };
+                // ─── 5. Check if ALL strategies want to skip ─────────────────
+                const strategiesNeedingExecution = applicableStrategies.filter(strategy => !strategy.shouldSkip?.(baseContext));
+                if (strategiesNeedingExecution.length === 0) {
+                    // All strategies skipped (e.g., null value on sparse unique field)
+                    res.json({ valid: true });
+                    return;
+                }
+                // ─── 6. Authorize (CREATE operation rights) ──────────────────
+                const operationPath = resourcesRegistry.getOperationPathDefault(resourceType, CoreResourceOperation.CREATE);
+                const executionContext = await executionContextCreator.createExecutionContextFromRequest(req, resourcesRegistry.getOperationFromPath(operationPath), {
+                    url: validatePath,
+                    parameters: initiatorInfo.parameters || [],
+                });
+                // Attach executionContext to request for error handler access
+                req.executionContext = executionContext;
+                await authorizationsService.authorizeInController(undefined, executionContext);
+                // ─── 7. Execute strategies (first failure short-circuits) ─────
+                const fullContext = {
+                    ...baseContext,
+                    executionContext,
+                };
+                for (const strategy of strategiesNeedingExecution) {
+                    const result = await strategy.validate(fullContext);
+                    if (!result.valid) {
+                        logDebug('Strategy returned failure', {
+                            strategyId: strategy.id,
+                            fieldName,
+                            error: result.error?.message,
+                        });
+                        res.json(result);
+                        return;
+                    }
+                }
+                // ─── 8. All strategies passed ────────────────────────────────
+                res.json({ valid: true });
+            }
+            catch (error) {
+                next(error);
+            }
+        }));
+        logDebug('validate-field route registered', {
+            resourceType,
+            path: validatePath,
+            serverValidatedFields: fieldNames,
+            strategies: strategyIds,
+            parentParams: initiatorInfo.parameters?.map(p => `${p.fieldIdentifier}:${p.resourceType}`).join(', ') || 'none',
+        });
+    }
+}
+//# sourceMappingURL=validate-field-handler.backend.service.js.map

package/dist/esm/base-classes/services/controllers/validate-field-handler.backend.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-field-handler.backend.service.js","sourceRoot":"","sources":["../../../../../src/base-classes/services/controllers/validate-field-handler.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4FG;AAUH,OAAO,EACL,qBAAqB,EACrB,4BAA4B,EAC5B,SAAS,EACT,2BAA2B,EAC3B,2BAA2B,GAE5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,QAAQ,EACR,eAAe,EACf,iBAAiB,EACjB,WAAW,GACZ,MAAM,0BAA0B,CAAC;AAWlC,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF;;;;;;GAMG;AACH,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QACzF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IACD,+CAA+C;IAC/C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,EAAU;IACnC,OAAO,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,+EAA+E,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC7F,CAAC;AA0ED,gFAAgF;AAChF,oCAAoC;AACpC,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,kBAAkB,GAA4B;IAClD,EAAE,EAAE,YAAY;IAEhB,SAAS,CAAC,WAAyB;QACjC,OAAO,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,UAAU,CAAC,OAA+B;QACxC,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1D,gFAAgF;QAChF,OAAO,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC;YACpF,CAAC,YAAY,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAA+B;QAC5C,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QAC7H,MAAM,YAAY,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;QAElD,8CAA8C;QAC9C,MAAM,MAAM,GAA4B,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;QAE/D,+BAA+B;QAC/B,oFAAoF;QACpF,qFAAqF;QACrF,kFAAkF;QAClF,MAAM,KAAK,GAAG,YAAY,EAAE,KAAK,IAAI,QAAQ,CAAC;QAE9C,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;YAC7B,MAAM,cAAc,GAAG,gBAAgB,CAAC,YAAY,EAAE,cAAc,CAAC;YACrE,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,QAAQ,CAAC,8EAA8E,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;gBACtH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACzB,CAAC;YACD,MAAM,CAAC,cAAc,GAAG,cAAc,CAAC;QACzC,CAAC;aAAM,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,EAAE,MAAM,CAAC;YACrD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CAAC,8DAA8D,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;gBACtG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACzB,CAAC;YACD,MAAM,CAAC,eAAe,GAAG,MAAM,CAAC;QAClC,CAAC;QACD,+EAA+E;QAE/E,2EAA2E;QAC3E,IAAI,SAAS,IAAI,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9C,MAAM,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;QAClC,CAAC;QAED,6DAA6D;QAC7D,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,+BAA+B,CACtE,YAAY,EACZ,MAAM,EACN,gBAAgB,CACjB,CAAC;QAEF,QAAQ,CAAC,yBAAyB,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAEjG,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QAED,qEAAqE;QACrE,MAAM,aAAa,GAAG,YAAY,EAAE,YAAY,CAAC;QACjD,MAAM,eAAe,GAAG,aAAa;YACnC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC;YACjD,CAAC,CAAC,QAAQ,SAAS,mBAAmB,CAAC;QAEzC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE;gBACL,SAAS;gBACT,OAAO,EAAE,eAAe;gBACxB,OAAO,EAAE,4BAA4B;gBACrC,UAAU,EAAE;oBACV,SAAS;oBACT,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;iBACrB;aACF;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAGF,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF;;;;;;;;;;GAUG;AACH,MAAM,2BAA2B,GAA8B;IAC7D,kBAAkB;IAClB,wCAAwC;IACxC,+BAA+B;IAC/B,uBAAuB;IACvB,iBAAiB;IACjB,iCAAiC;CAClC,CAAC;AAGF,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,UAAU,qCAAqC,CACnD,UAAwB;IAExB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqC,CAAC;IAE5D,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC;QAAE,OAAO,MAAM,CAAC;IAE5C,MAAM,KAAK,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAE5C,KAAK,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,MAAM,oBAAoB,GAAG,2BAA2B,CAAC,MAAM,CAC7D,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CACvD,CAAC;QACF,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kCAAkC,CAAC,UAAwB;IACzE,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAE3C,MAAM,KAAK,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAE5C,KAAK,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,KAAK,MAAM,QAAQ,IAAI,2BAA2B,EAAE,CAAC;YACnD,IAAI,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;gBAC/C,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAChF,uBAAuB;AACvB,gFAAgF;AAEhF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAAc,EACd,qBAA2D,EAC3D,MAAqB,EACrB,YAAwC,EACxC,qBAAmD,EACnD,uBAA8D,EAC9D,iBAAkD,EAClD,oBAA+D,EAC/D,8BAA8D,EAC9D,YAAyF;IAEzF,MAAM,YAAY,GAAG,qBAAqB,CAAC,kBAAkB,CAAC;IAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,iBAAiB,YAAY,EAAE,CAAC,CAAC;IACrE,MAAM,CAAC,mBAAmB,CAAC,iBAAiB,YAAY,EAAE,EAAE,KAAK,CAAC,CAAC;IAEnE,qDAAqD;IACrD,MAAM,qBAAqB,GAAG,qCAAqC,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAEtG,IAAI,qBAAqB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACrC,QAAQ,CAAC,0EAA0E,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QACvG,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAC7B,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAC5F,CAAC,CAAC;IAEH,QAAQ,CAAC,kDAAkD,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;IAExG,0DAA0D;IAC1D,MAAM,eAAe,GAAG,qBAAqB,CAAC,UAAU,CAAC,IAAI,CAC3D,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,mBAAmB,KAAK,qBAAqB,CAAC,MAAM;QAC3D,CAAC,4BAA4B,CAAC,QAAQ,EAAE,4BAA4B,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,CACmB,CAAC;IAE7I,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,QAAQ,CAAC,4DAA4D,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QACzF,OAAO;IACT,CAAC;IAED,MAAM,oBAAoB,GAAG,eAAe,CAAC,cAAc,IAAI,EAAE,CAAC;IAClE,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,QAAQ,CAAC,wEAAwE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QACrG,OAAO;IACT,CAAC;IAED,yCAAyC;IACzC,MAAM,WAAW,GAAG,iBAAiB,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAExE,mFAAmF;IACnF,MAAM,oBAAoB,GAAG,CAAC,GAAG,oBAAoB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACnE,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC,CAAC;QAC1C,OAAO,OAAO,GAAG,OAAO,CAAC,CAAC,sBAAsB;IAClD,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,aAAa,IAAI,oBAAoB,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,8BAA8B,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACnE,MAAM,YAAY,GAAG,GAAG,QAAQ,iBAAiB,CAAC;QAElD,MAAM,CAAC,IAAI,CACT,YAAY,EACZ,YAAY,CAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YACrE,IAAI,CAAC;gBACH,iEAAiE;gBACjE,MAAM,WAAW,GAAG,2BAA2B,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACpE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE;wBAC7D,sBAAsB,EAAE,2BAA2B,CAAC,qCAAqC;wBACzF,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE;qBAC9C,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC;gBAEzD,gEAAgE;gBAChE,MAAM,cAAc,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;gBACrD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;oBAC1B,MAAM,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE;wBAC7D,sBAAsB,EAAE,2BAA2B,CAAC,qCAAqC;wBACzF,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,qDAAqD,EAAE;qBACpG,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,cAAc,GAAG,cAAc,CAAC,SAAS,CAAC;gBAEhD,iEAAiE;gBACjE,MAAM,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;gBAC3C,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,MAAM,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE;wBAC7D,sBAAsB,EAAE,2BAA2B,CAAC,wBAAwB;wBAC5E,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE;qBACrC,CAAC,CAAC;gBACL,CAAC;gBAED,2CAA2C;gBAC3C,MAAM,oBAAoB,GAAG,2BAA2B,CAAC,MAAM,CAC7D,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CACvD,CAAC;gBAEF,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACtC,8DAA8D;oBAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAkC,CAAC,CAAC;oBAC1D,OAAO;gBACT,CAAC;gBAED,QAAQ,CAAC,2BAA2B,EAAE;oBACpC,SAAS;oBACT,UAAU,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChD,CAAC,CAAC;gBAEH,gEAAgE;gBAChE,gEAAgE;gBAChE,mDAAmD;gBACnD,MAAM,WAAW,GAAqD;oBACpE,SAAS;oBACT,KAAK,EAAE,cAAc;oBACrB,WAAW;oBACX,SAAS;oBACT,YAAY,EAAE,YAA4B;oBAC1C,qBAAqB;oBACrB,oBAAoB;oBACpB,iBAAiB;oBACjB,YAAY;oBACZ,QAAQ;iBACT,CAAC;gBAEF,gEAAgE;gBAChE,MAAM,0BAA0B,GAAG,oBAAoB,CAAC,MAAM,CAC5D,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,WAAqC,CAAC,CAC1E,CAAC;gBAEF,IAAI,0BAA0B,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC5C,mEAAmE;oBACnE,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAkC,CAAC,CAAC;oBAC1D,OAAO;gBACT,CAAC;gBAED,gEAAgE;gBAChE,MAAM,aAAa,GAAG,iBAAiB,CAAC,uBAAuB,CAC7D,YAA4B,EAC5B,qBAAqB,CAAC,MAAM,CAC7B,CAAC;gBACF,MAAM,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,iCAAiC,CACtF,GAAG,EACH,iBAAiB,CAAC,oBAAoB,CAAC,aAAa,CAAC,EACrD;oBACE,GAAG,EAAE,YAAY;oBACjB,UAAU,EAAE,aAAa,CAAC,UAAU,IAAI,EAAE;iBAC3C,CACF,CAAC;gBAEF,8DAA8D;gBAC7D,GAAW,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;gBAEjD,MAAM,qBAAqB,CAAC,qBAAqB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;gBAE/E,iEAAiE;gBACjE,MAAM,WAAW,GAA2B;oBAC1C,GAAG,WAAW;oBACd,gBAAgB;iBACjB,CAAC;gBAEF,KAAK,MAAM,QAAQ,IAAI,0BAA0B,EAAE,CAAC;oBAClD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;oBAEpD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;wBAClB,QAAQ,CAAC,2BAA2B,EAAE;4BACpC,UAAU,EAAE,QAAQ,CAAC,EAAE;4BACvB,SAAS;4BACT,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO;yBAC7B,CAAC,CAAC;wBACH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBACjB,OAAO;oBACT,CAAC;gBACH,CAAC;gBAED,gEAAgE;gBAChE,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAkC,CAAC,CAAC;YAE5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,KAAK,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QAEF,QAAQ,CAAC,iCAAiC,EAAE;YAC1C,YAAY;YACZ,IAAI,EAAE,YAAY;YAClB,qBAAqB,EAAE,UAAU;YACjC,UAAU,EAAE,WAAW;YACvB,YAAY,EAAE,aAAa,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM;SAChH,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/esm/base-classes/services/repositories/__tests__/mock-repositories-registry-handler.service.d.ts

@@ -0,0 +1,9 @@
+import 'reflect-metadata';
+export declare class MockRepositoriesRegistryHandlerBackendService {
+    private readonly repositories;
+    getRepository: import("vitest").Mock<[resourceType: string], unknown>;
+    getRepositoryOrThrow: import("vitest").Mock<[resourceType: string], unknown>;
+    setRepository(resourceType: string, repository: unknown): void;
+    reset(): void;
+}
+//# sourceMappingURL=mock-repositories-registry-handler.service.d.ts.map

package/dist/esm/base-classes/services/repositories/__tests__/mock-repositories-registry-handler.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-repositories-registry-handler.service.d.ts","sourceRoot":"","sources":["../../../../../../src/base-classes/services/repositories/__tests__/mock-repositories-registry-handler.service.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAI1B,qBACa,6CAA6C;IACxD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA8B;IAE3D,aAAa,yDAEV;IAEH,oBAAoB,yDAOjB;IAEH,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,IAAI;IAI9D,KAAK,IAAI,IAAI;CAKd"}