@xemahq/platform-common 0.29.0 → 0.30.0

package/dist/nestjs/jwt-verification.guard.js

@@ -13,7 +13,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 };
 var JwtVerificationGuard_1;
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.JwtVerificationGuard = void 0;
+exports.JwtVerificationGuard = exports.UnclassifiableForeignBearerError = void 0;
 const common_1 = require("@nestjs/common");
 const decorator_metadata_1 = require("./decorator-metadata");
 const public_decorator_1 = require("./public.decorator");
@@ -25,6 +25,18 @@ const actor_classification_1 = require("./auth/actor-classification");
 const realm_token_verifier_1 = require("./auth/realm-token-verifier");
 const PUBLIC_PATH_PREFIXES = ['/health', '/api/docs', '/api/openapi.json'];
 const PUBLIC_WEBHOOK_PREFIX = '/webhooks';
+class UnclassifiableForeignBearerError extends common_1.UnauthorizedException {
+    constructor(issuer) {
+        super(`The access token was proved by trusted issuer '${issuer}', which ` +
+            `declares no "subjectClass", and the token carries no "token_class" ` +
+            `of its own. Nothing states what kind of subject this is, so it is ` +
+            `refused rather than assumed to be a user — the assumption that a ` +
+            `signal-less token is a browser login holds for this deployment's own ` +
+            `realm and for nothing else. Declare "subjectClass" on the issuer's ` +
+            `registry entry, or have the issuer stamp "token_class".`);
+    }
+}
+exports.UnclassifiableForeignBearerError = UnclassifiableForeignBearerError;
 let JwtVerificationGuard = JwtVerificationGuard_1 = class JwtVerificationGuard {
     logger = new common_1.Logger(JwtVerificationGuard_1.name);
     verifier;
@@ -89,11 +101,12 @@ let JwtVerificationGuard = JwtVerificationGuard_1 = class JwtVerificationGuard {
     applyDeclaredSubjectClass(request, payload, source) {
         if (source.kind !== 'trusted-issuer')
             return;
-        const declared = source.entry.subjectClass;
-        if (!declared)
-            return;
         if (typeof payload.token_class === 'string' && payload.token_class)
             return;
+        const declared = source.entry.subjectClass;
+        if (!declared) {
+            throw new UnclassifiableForeignBearerError(source.entry.issuer);
+        }
         const ctx = request[request_context_1.REQUEST_CONTEXT];
         if (!ctx)
             return;

package/dist/nestjs/jwt-verification.guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-verification.guard.js","sourceRoot":"","sources":["../../src/nestjs/jwt-verification.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAQwB;AACxB,6DAA6D;AAE7D,yDAAmD;AACnD,oEAAiE;AAEjE,4DAAyD;AAEzD,mDAA2D;AAE3D,8DAAoE;AACpE,sEAAwE;AACxE,sEAAiE;AASjE,MAAM,oBAAoB,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC;AAC3E,MAAM,qBAAqB,GAAG,WAAW,CAAC;AAiCnC,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IACd,MAAM,GAAG,IAAI,eAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;IAU/C,QAAQ,CAAqB;IAE9C,YAGE,WAA+B;QAE/B,IAAI,CAAC,QAAQ,GAAG,IAAI,yCAAkB,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAyB;QAEzC,MAAM,QAAQ,GAAG,IAAA,0CAAqB,EAAU,gCAAa,EAAE;YAC7D,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAG7D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAEzC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QAEjD,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,8BAAqB,CAC7B,yCAAyC,CAC1C,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAG1D,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAGpD,IAAI,CAAC,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAEzD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,8BAAqB;gBAAE,MAAM,KAAK,CAAC;YAExD,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACtE,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAUO,KAAK,CAAC,WAAW,CACvB,KAAa;QAEb,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kCAAqB,EAAE,CAAC;gBAC3C,MAAM,IAAI,8BAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAiBO,oBAAoB,CAC1B,OAAgB,EAChB,OAAmB,EACnB,MAA2B;QAE3B,MAAM,MAAM,GACV,MAAM,CAAC,IAAI,KAAK,gBAAgB;YAC9B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM;YACrB,CAAC,CAAC,OAAO,CAAC,GAAG;gBACX,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC;oBAC3D,SAAS,CAAC;gBACZ,CAAC,CAAC,SAAS,CAAC;QAClB,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,MAAM,GAAG,GAAI,OAA8C,CACzD,iCAAe,CACc,CAAC;QAChC,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC;QACvB,CAAC;IACH,CAAC;IA2BO,yBAAyB,CAC/B,OAAgB,EAChB,OAAmB,EACnB,MAA2B;QAE3B,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB;YAAE,OAAO;QAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;QAC3C,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO;QAE3E,MAAM,GAAG,GAAI,OAA8C,CACzD,iCAAe,CACc,CAAC;QAChC,IAAI,CAAC,GAAG;YAAE,OAAO;QAEjB,MAAM,MAAM,GAAG,0BAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAKpB,MAAM,IAAI,8BAAqB,CAC7B,mBAAmB,MAAM,CAAC,KAAK,CAAC,MAAM,0BAA0B;gBAC9D,IAAI,QAAQ,qCAAqC,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAA,gDAAyB,EAAC;YAC3C,GAAG,OAAO;YACV,WAAW,EAAE,MAAM,CAAC,IAAI;SACzB,CAAC,CAAC;QACH,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACvC,GAAG,CAAC,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC;QAC/D,GAAG,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACvC,CAAC;IAEO,YAAY,CAAC,IAAY;QAC/B,KAAK,MAAM,MAAM,IAAI,oBAAoB,EAAE,CAAC;YAC1C,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QACpE,CAAC;QACD,IACE,IAAI,KAAK,qBAAqB;YAC9B,IAAI,CAAC,UAAU,CAAC,qBAAqB,GAAG,GAAG,CAAC,EAC5C,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAA;AAnMY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;IAeR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,yCAAmB,CAAC,CAAA;;GAfnB,oBAAoB,CAmMhC"}
+{"version":3,"file":"jwt-verification.guard.js","sourceRoot":"","sources":["../../src/nestjs/jwt-verification.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAQwB;AACxB,6DAA6D;AAE7D,yDAAmD;AACnD,oEAAiE;AAEjE,4DAAyD;AAEzD,mDAA2D;AAE3D,8DAAoE;AACpE,sEAAwE;AACxE,sEAAiE;AASjE,MAAM,oBAAoB,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC;AAC3E,MAAM,qBAAqB,GAAG,WAAW,CAAC;AA+B1C,MAAa,gCAAiC,SAAQ,8BAAqB;IACzE,YAAY,MAAc;QACxB,KAAK,CACH,kDAAkD,MAAM,WAAW;YACjE,qEAAqE;YACrE,oEAAoE;YACpE,mEAAmE;YACnE,uEAAuE;YACvE,qEAAqE;YACrE,yDAAyD,CAC5D,CAAC;IACJ,CAAC;CACF;AAZD,4EAYC;AAiCM,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IACd,MAAM,GAAG,IAAI,eAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;IAU/C,QAAQ,CAAqB;IAE9C,YAGE,WAA+B;QAE/B,IAAI,CAAC,QAAQ,GAAG,IAAI,yCAAkB,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAyB;QAEzC,MAAM,QAAQ,GAAG,IAAA,0CAAqB,EAAU,gCAAa,EAAE;YAC7D,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAG7D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAEzC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QAEjD,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,8BAAqB,CAC7B,yCAAyC,CAC1C,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAG1D,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAGpD,IAAI,CAAC,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAEzD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,8BAAqB;gBAAE,MAAM,KAAK,CAAC;YAExD,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACtE,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAUO,KAAK,CAAC,WAAW,CACvB,KAAa;QAEb,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kCAAqB,EAAE,CAAC;gBAC3C,MAAM,IAAI,8BAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAiBO,oBAAoB,CAC1B,OAAgB,EAChB,OAAmB,EACnB,MAA2B;QAE3B,MAAM,MAAM,GACV,MAAM,CAAC,IAAI,KAAK,gBAAgB;YAC9B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM;YACrB,CAAC,CAAC,OAAO,CAAC,GAAG;gBACX,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC;oBAC3D,SAAS,CAAC;gBACZ,CAAC,CAAC,SAAS,CAAC;QAClB,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,MAAM,GAAG,GAAI,OAA8C,CACzD,iCAAe,CACc,CAAC;QAChC,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC;QACvB,CAAC;IACH,CAAC;IA6BO,yBAAyB,CAC/B,OAAgB,EAChB,OAAmB,EACnB,MAA2B;QAE3B,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB;YAAE,OAAO;QAG7C,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO;QAE3E,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;QAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;YAKd,MAAM,IAAI,gCAAgC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,GAAG,GAAI,OAA8C,CACzD,iCAAe,CACc,CAAC;QAChC,IAAI,CAAC,GAAG;YAAE,OAAO;QAEjB,MAAM,MAAM,GAAG,0BAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAKpB,MAAM,IAAI,8BAAqB,CAC7B,mBAAmB,MAAM,CAAC,KAAK,CAAC,MAAM,0BAA0B;gBAC9D,IAAI,QAAQ,qCAAqC,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAA,gDAAyB,EAAC;YAC3C,GAAG,OAAO;YACV,WAAW,EAAE,MAAM,CAAC,IAAI;SACzB,CAAC,CAAC;QACH,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACvC,GAAG,CAAC,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC;QAC/D,GAAG,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACvC,CAAC;IAEO,YAAY,CAAC,IAAY;QAC/B,KAAK,MAAM,MAAM,IAAI,oBAAoB,EAAE,CAAC;YAC1C,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QACpE,CAAC;QACD,IACE,IAAI,KAAK,qBAAqB;YAC9B,IAAI,CAAC,UAAU,CAAC,qBAAqB,GAAG,GAAG,CAAC,EAC5C,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAA;AA9MY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;IAeR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,yCAAmB,CAAC,CAAA;;GAfnB,oBAAoB,CA8MhC"}

package/dist/nestjs/org-scope.d.ts

@@ -0,0 +1,9 @@
+import { ForbiddenException } from '@nestjs/common';
+export declare enum OrgScopeErrorCode {
+    ORG_SCOPE_REQUIRED = "ORG_SCOPE_REQUIRED"
+}
+export declare class OrgScopeRequiredError extends ForbiddenException {
+    constructor(operation: string);
+}
+export declare function assertOrgScope(orgId: string | undefined | null, operation: string): asserts orgId is string;
+//# sourceMappingURL=org-scope.d.ts.map

package/dist/nestjs/org-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-scope.d.ts","sourceRoot":"","sources":["../../src/nestjs/org-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AA8DpD,oBAAY,iBAAiB;IAC3B,kBAAkB,uBAAuB;CAC1C;AAQD,qBAAa,qBAAsB,SAAQ,kBAAkB;gBAC/C,SAAS,EAAE,MAAM;CAS9B;AASD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EAChC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,KAAK,IAAI,MAAM,CAIzB"}

package/dist/nestjs/org-scope.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrgScopeRequiredError = exports.OrgScopeErrorCode = void 0;
+exports.assertOrgScope = assertOrgScope;
+const common_1 = require("@nestjs/common");
+var OrgScopeErrorCode;
+(function (OrgScopeErrorCode) {
+    OrgScopeErrorCode["ORG_SCOPE_REQUIRED"] = "ORG_SCOPE_REQUIRED";
+})(OrgScopeErrorCode || (exports.OrgScopeErrorCode = OrgScopeErrorCode = {}));
+class OrgScopeRequiredError extends common_1.ForbiddenException {
+    constructor(operation) {
+        super({
+            code: OrgScopeErrorCode.ORG_SCOPE_REQUIRED,
+            message: `"${operation}" is org-scoped and was called without a resolved orgId. ` +
+                'Pass a tenant-scoped request context (user JWT org claim, or a service ' +
+                'token carrying X-Xema-Org-Id).',
+        });
+    }
+}
+exports.OrgScopeRequiredError = OrgScopeRequiredError;
+function assertOrgScope(orgId, operation) {
+    if (typeof orgId !== 'string' || orgId.trim().length === 0) {
+        throw new OrgScopeRequiredError(operation);
+    }
+}
+//# sourceMappingURL=org-scope.js.map

package/dist/nestjs/org-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-scope.js","sourceRoot":"","sources":["../../src/nestjs/org-scope.ts"],"names":[],"mappings":";;;AA2FA,wCAOC;AAlGD,2CAAoD;AA8DpD,IAAY,iBAEX;AAFD,WAAY,iBAAiB;IAC3B,8DAAyC,CAAA;AAC3C,CAAC,EAFW,iBAAiB,iCAAjB,iBAAiB,QAE5B;AAQD,MAAa,qBAAsB,SAAQ,2BAAkB;IAC3D,YAAY,SAAiB;QAC3B,KAAK,CAAC;YACJ,IAAI,EAAE,iBAAiB,CAAC,kBAAkB;YAC1C,OAAO,EACL,IAAI,SAAS,2DAA2D;gBACxE,yEAAyE;gBACzE,gCAAgC;SACnC,CAAC,CAAC;IACL,CAAC;CACF;AAVD,sDAUC;AASD,SAAgB,cAAc,CAC5B,KAAgC,EAChC,SAAiB;IAEjB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/nestjs/pagination.d.ts

@@ -1,6 +1,6 @@
-export declare const PAGINATION_MAX_LIMIT = 100;
-export declare const PAGINATION_DEFAULT_LIMIT = 20;
-export declare const PAGINATION_MAX_PAGE = 10000;
+import { PAGINATION_DEFAULT_LIMIT, PAGINATION_MAX_LIMIT, PAGINATION_MAX_PAGE } from '@xemahq/kernel-contracts/pagination';
+import type { PageCursor } from '@xemahq/kernel-contracts/pagination';
+export { PAGINATION_DEFAULT_LIMIT, PAGINATION_MAX_LIMIT, PAGINATION_MAX_PAGE, };
 export declare class PaginationQueryDto {
     page?: number;
     limit?: number;
@@ -12,6 +12,11 @@ export declare class PaginationMeta {
     totalPages: number;
     hasMore: boolean;
 }
+export declare class CursorPaginationMeta {
+    hasMore: boolean;
+    nextCursor: PageCursor | null;
+    limit?: number;
+}
 export declare class PaginationRangeError extends Error {
     readonly field: 'page' | 'limit';
     readonly received: unknown;
@@ -31,4 +36,16 @@ export declare function buildPaginatedResponse<T>(items: T[], total: number, pag
     items: T[];
     pagination: PaginationMeta;
 };
+export declare class CursorPaginationQueryDto {
+    limit?: number;
+    cursor?: string;
+}
+export declare function buildCursorPaginatedResponse<T>(items: T[], options: {
+    binding: string;
+    nextPosition: unknown | null;
+    limit?: number;
+}): {
+    items: T[];
+    pagination: CursorPaginationMeta;
+};
 //# sourceMappingURL=pagination.d.ts.map

package/dist/nestjs/pagination.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pagination.d.ts","sourceRoot":"","sources":["../../src/nestjs/pagination.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAGxC,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAgB3C,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAgC1C,qBAAa,kBAAkB;IAc7B,IAAI,CAAC,EAAE,MAAM,CAAK;IAelB,KAAK,CAAC,EAAE,MAAM,CAA4B;CAC3C;AAKD,qBAAa,cAAc;IACzB,KAAK,EAAG,MAAM,CAAC;IACf,IAAI,EAAG,MAAM,CAAC;IACd,KAAK,EAAG,MAAM,CAAC;IACf,UAAU,EAAG,MAAM,CAAC;IACpB,OAAO,EAAG,OAAO,CAAC;CACnB;AASD,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAChC,QAAQ,CAAC,QAAQ,EAAE,OAAO;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM;gBAFf,KAAK,EAAE,MAAM,GAAG,OAAO,EACvB,QAAQ,EAAE,OAAO,EACjB,OAAO,EAAE,MAAM;CAO3B;AA+BD,wBAAgB,eAAe,CAAC,KAAK,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG;IACzE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf,CAcA;AA6BD,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,KAAK,EAAE,CAAC,EAAE,EACV,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GACZ;IAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAAC,UAAU,EAAE,cAAc,CAAA;CAAE,CAY5C"}
+{"version":3,"file":"pagination.d.ts","sourceRoot":"","sources":["../../src/nestjs/pagination.ts"],"names":[],"mappings":"AACA,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EAEpB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAGV,UAAU,EACX,MAAM,qCAAqC,CAAC;AAkB7C,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,GACpB,CAAC;AAgCF,qBAAa,kBAAkB;IAc7B,IAAI,CAAC,EAAE,MAAM,CAAK;IAelB,KAAK,CAAC,EAAE,MAAM,CAA4B;CAC3C;AAiBD,qBAAa,cAAc;IACzB,KAAK,EAAG,MAAM,CAAC;IACf,IAAI,EAAG,MAAM,CAAC;IACd,KAAK,EAAG,MAAM,CAAC;IACf,UAAU,EAAG,MAAM,CAAC;IACpB,OAAO,EAAG,OAAO,CAAC;CACnB;AAWD,qBAAa,oBAAoB;IAK/B,OAAO,EAAG,OAAO,CAAC;IAsBlB,UAAU,EAAG,UAAU,GAAG,IAAI,CAAC;IAG/B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AASD,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAChC,QAAQ,CAAC,QAAQ,EAAE,OAAO;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM;gBAFf,KAAK,EAAE,MAAM,GAAG,OAAO,EACvB,QAAQ,EAAE,OAAO,EACjB,OAAO,EAAE,MAAM;CAO3B;AA+BD,wBAAgB,eAAe,CAAC,KAAK,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG;IACzE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf,CAcA;AA6BD,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,KAAK,EAAE,CAAC,EAAE,EACV,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GACZ;IAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAAC,UAAU,EAAE,cAAc,CAAA;CAAE,CAY5C;AA+BD,qBAAa,wBAAwB;IAcnC,KAAK,CAAC,EAAE,MAAM,CAA4B;IAS1C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AA2BD,wBAAgB,4BAA4B,CAAC,CAAC,EAC5C,KAAK,EAAE,CAAC,EAAE,EACV,OAAO,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,OAAO,GAAG,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACzE;IAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAAC,UAAU,EAAE,oBAAoB,CAAA;CAAE,CAgBlD"}

package/dist/nestjs/pagination.js

@@ -9,18 +9,20 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PaginationRangeError = exports.PaginationMeta = exports.PaginationQueryDto = exports.PAGINATION_MAX_PAGE = exports.PAGINATION_DEFAULT_LIMIT = exports.PAGINATION_MAX_LIMIT = void 0;
+exports.CursorPaginationQueryDto = exports.PaginationRangeError = exports.CursorPaginationMeta = exports.PaginationMeta = exports.PaginationQueryDto = exports.PAGINATION_MAX_PAGE = exports.PAGINATION_MAX_LIMIT = exports.PAGINATION_DEFAULT_LIMIT = void 0;
 exports.parsePagination = parsePagination;
 exports.buildPaginatedResponse = buildPaginatedResponse;
+exports.buildCursorPaginatedResponse = buildCursorPaginatedResponse;
 const swagger_1 = require("@nestjs/swagger");
+const pagination_1 = require("@xemahq/kernel-contracts/pagination");
+Object.defineProperty(exports, "PAGINATION_DEFAULT_LIMIT", { enumerable: true, get: function () { return pagination_1.PAGINATION_DEFAULT_LIMIT; } });
+Object.defineProperty(exports, "PAGINATION_MAX_LIMIT", { enumerable: true, get: function () { return pagination_1.PAGINATION_MAX_LIMIT; } });
+Object.defineProperty(exports, "PAGINATION_MAX_PAGE", { enumerable: true, get: function () { return pagination_1.PAGINATION_MAX_PAGE; } });
 const class_transformer_1 = require("class-transformer");
 const class_validator_1 = require("class-validator");
-exports.PAGINATION_MAX_LIMIT = 100;
-exports.PAGINATION_DEFAULT_LIMIT = 20;
-exports.PAGINATION_MAX_PAGE = 10_000;
 class PaginationQueryDto {
     page = 1;
-    limit = exports.PAGINATION_DEFAULT_LIMIT;
+    limit = pagination_1.PAGINATION_DEFAULT_LIMIT;
 }
 exports.PaginationQueryDto = PaginationQueryDto;
 __decorate([
@@ -28,7 +30,7 @@ __decorate([
         description: 'Page number (1-indexed)',
         example: 1,
         minimum: 1,
-        maximum: exports.PAGINATION_MAX_PAGE,
+        maximum: pagination_1.PAGINATION_MAX_PAGE,
         default: 1,
         type: Number,
     }),
@@ -36,23 +38,23 @@ __decorate([
     (0, class_transformer_1.Type)(() => Number),
     (0, class_validator_1.IsInt)(),
     (0, class_validator_1.Min)(1),
-    (0, class_validator_1.Max)(exports.PAGINATION_MAX_PAGE),
+    (0, class_validator_1.Max)(pagination_1.PAGINATION_MAX_PAGE),
     __metadata("design:type", Number)
 ], PaginationQueryDto.prototype, "page", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         description: 'Items per page',
-        example: exports.PAGINATION_DEFAULT_LIMIT,
+        example: pagination_1.PAGINATION_DEFAULT_LIMIT,
         minimum: 1,
-        maximum: exports.PAGINATION_MAX_LIMIT,
-        default: exports.PAGINATION_DEFAULT_LIMIT,
+        maximum: pagination_1.PAGINATION_MAX_LIMIT,
+        default: pagination_1.PAGINATION_DEFAULT_LIMIT,
         type: Number,
     }),
     (0, class_validator_1.IsOptional)(),
     (0, class_transformer_1.Type)(() => Number),
     (0, class_validator_1.IsInt)(),
     (0, class_validator_1.Min)(1),
-    (0, class_validator_1.Max)(exports.PAGINATION_MAX_LIMIT),
+    (0, class_validator_1.Max)(pagination_1.PAGINATION_MAX_LIMIT),
     __metadata("design:type", Number)
 ], PaginationQueryDto.prototype, "limit", void 0);
 class PaginationMeta {
@@ -63,6 +65,31 @@ class PaginationMeta {
     hasMore;
 }
 exports.PaginationMeta = PaginationMeta;
+class CursorPaginationMeta {
+    hasMore;
+    nextCursor;
+    limit;
+}
+exports.CursorPaginationMeta = CursorPaginationMeta;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Whether another page exists. Mandatory for cursor pagination (§3.3).',
+    }),
+    __metadata("design:type", Boolean)
+], CursorPaginationMeta.prototype, "hasMore", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Opaque continuation token, or null on the last page. Clients MUST NOT ' +
+            'parse it, construct one, or derive meaning from its structure.',
+        nullable: true,
+        type: String,
+    }),
+    __metadata("design:type", Object)
+], CursorPaginationMeta.prototype, "nextCursor", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'The page size this scan was asked for.' }),
+    __metadata("design:type", Number)
+], CursorPaginationMeta.prototype, "limit", void 0);
 class PaginationRangeError extends Error {
     field;
     received;
@@ -77,8 +104,8 @@ class PaginationRangeError extends Error {
 }
 exports.PaginationRangeError = PaginationRangeError;
 function parsePagination(query) {
-    const page = requireInRange('page', query.page, 1, exports.PAGINATION_MAX_PAGE);
-    const limit = requireInRange('limit', query.limit, exports.PAGINATION_DEFAULT_LIMIT, exports.PAGINATION_MAX_LIMIT);
+    const page = requireInRange('page', query.page, 1, pagination_1.PAGINATION_MAX_PAGE);
+    const limit = requireInRange('limit', query.limit, pagination_1.PAGINATION_DEFAULT_LIMIT, pagination_1.PAGINATION_MAX_LIMIT);
     return {
         skip: (page - 1) * limit,
         take: limit,
@@ -108,4 +135,54 @@ function buildPaginatedResponse(items, total, page, limit) {
         },
     };
 }
+class CursorPaginationQueryDto {
+    limit = pagination_1.PAGINATION_DEFAULT_LIMIT;
+    cursor;
+}
+exports.CursorPaginationQueryDto = CursorPaginationQueryDto;
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Items per page',
+        example: pagination_1.PAGINATION_DEFAULT_LIMIT,
+        minimum: 1,
+        maximum: pagination_1.PAGINATION_MAX_LIMIT,
+        default: pagination_1.PAGINATION_DEFAULT_LIMIT,
+        type: Number,
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_transformer_1.Type)(() => Number),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(1),
+    (0, class_validator_1.Max)(pagination_1.PAGINATION_MAX_LIMIT),
+    __metadata("design:type", Number)
+], CursorPaginationQueryDto.prototype, "limit", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Opaque cursor from a previous page. Do not construct or modify one.',
+        type: String,
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], CursorPaginationQueryDto.prototype, "cursor", void 0);
+function buildCursorPaginatedResponse(items, options) {
+    const nextCursor = options.nextPosition === null
+        ? null
+        : (0, pagination_1.encodePageCursor)({
+            binding: options.binding,
+            position: options.nextPosition,
+        });
+    return {
+        items,
+        pagination: {
+            hasMore: nextCursor !== null,
+            nextCursor,
+            ...(options.limit === undefined ? {} : { limit: options.limit }),
+        },
+    };
+}
+const _offsetProjectionMatchesKernel = new PaginationMeta();
+const _cursorProjectionMatchesKernel = new CursorPaginationMeta();
+void _offsetProjectionMatchesKernel;
+void _cursorProjectionMatchesKernel;
 //# sourceMappingURL=pagination.js.map

package/dist/nestjs/pagination.js.map

@@ -1 +1 @@
-{"version":3,"file":"pagination.js","sourceRoot":"","sources":["../../src/nestjs/pagination.ts"],"names":[],"mappings":";;;;;;;;;;;;AAoJA,0CAmBC;AA6BD,wDAiBC;AArND,6CAAsD;AACtD,yDAAyC;AACzC,qDAA8D;AAGjD,QAAA,oBAAoB,GAAG,GAAG,CAAC;AAG3B,QAAA,wBAAwB,GAAG,EAAE,CAAC;AAgB9B,QAAA,mBAAmB,GAAG,MAAM,CAAC;AAgC1C,MAAa,kBAAkB;IAc7B,IAAI,GAAY,CAAC,CAAC;IAelB,KAAK,GAAY,gCAAwB,CAAC;CAC3C;AA9BD,gDA8BC;AAhBC;IAbC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,yBAAyB;QACtC,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,2BAAmB;QAC5B,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;IACN,IAAA,qBAAG,EAAC,2BAAmB,CAAC;;gDACP;AAelB;IAbC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,gBAAgB;QAC7B,OAAO,EAAE,gCAAwB;QACjC,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,4BAAoB;QAC7B,OAAO,EAAE,gCAAwB;QACjC,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;IACN,IAAA,qBAAG,EAAC,4BAAoB,CAAC;;iDACgB;AAM5C,MAAa,cAAc;IACzB,KAAK,CAAU;IACf,IAAI,CAAU;IACd,KAAK,CAAU;IACf,UAAU,CAAU;IACpB,OAAO,CAAW;CACnB;AAND,wCAMC;AASD,MAAa,oBAAqB,SAAQ,KAAK;IAElC;IACA;IACA;IAHX,YACW,KAAuB,EACvB,QAAiB,EACjB,OAAe;QAExB,KAAK,CACH,eAAe,KAAK,8BAA8B,OAAO,cAAc,MAAM,CAAC,QAAQ,CAAC,GAAG,CAC3F,CAAC;QANO,UAAK,GAAL,KAAK,CAAkB;QACvB,aAAQ,GAAR,QAAQ,CAAS;QACjB,YAAO,GAAP,OAAO,CAAQ;QAKxB,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAXD,oDAWC;AA+BD,SAAgB,eAAe,CAAC,KAAwC;IAMtE,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,2BAAmB,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,cAAc,CAC1B,OAAO,EACP,KAAK,CAAC,KAAK,EACX,gCAAwB,EACxB,4BAAoB,CACrB,CAAC;IACF,OAAO;QACL,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK;QACxB,IAAI,EAAE,KAAK;QACX,IAAI;QACJ,KAAK;KACN,CAAC;AACJ,CAAC;AAQD,SAAS,cAAc,CACrB,KAAuB,EACvB,KAAyB,EACzB,UAAkB,EAClB,OAAe;IAEf,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,OAAO,EAAE,CAAC;QAC7D,MAAM,IAAI,oBAAoB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAQD,SAAgB,sBAAsB,CACpC,KAAU,EACV,KAAa,EACb,IAAY,EACZ,KAAa;IAEb,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;IAC5C,OAAO;QACL,KAAK;QACL,UAAU,EAAE;YACV,KAAK;YACL,IAAI;YACJ,KAAK;YACL,UAAU;YACV,OAAO,EAAE,IAAI,GAAG,UAAU;SAC3B;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"pagination.js","sourceRoot":"","sources":["../../src/nestjs/pagination.ts"],"names":[],"mappings":";;;;;;;;;;;;AAmNA,0CAmBC;AA6BD,wDAiBC;AAkFD,oEAmBC;AAzXD,6CAAmE;AACnE,oEAK6C;AAwB3C,yGA5BA,qCAAwB,OA4BA;AACxB,qGA5BA,iCAAoB,OA4BA;AACpB,oGA5BA,gCAAmB,OA4BA;AApBrB,yDAAyC;AACzC,qDAAwE;AAoDxE,MAAa,kBAAkB;IAc7B,IAAI,GAAY,CAAC,CAAC;IAelB,KAAK,GAAY,qCAAwB,CAAC;CAC3C;AA9BD,gDA8BC;AAhBC;IAbC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,yBAAyB;QACtC,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,gCAAmB;QAC5B,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;IACN,IAAA,qBAAG,EAAC,gCAAmB,CAAC;;gDACP;AAelB;IAbC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,gBAAgB;QAC7B,OAAO,EAAE,qCAAwB;QACjC,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,iCAAoB;QAC7B,OAAO,EAAE,qCAAwB;QACjC,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;IACN,IAAA,qBAAG,EAAC,iCAAoB,CAAC;;iDACgB;AAkB5C,MAAa,cAAc;IACzB,KAAK,CAAU;IACf,IAAI,CAAU;IACd,KAAK,CAAU;IACf,UAAU,CAAU;IACpB,OAAO,CAAW;CACnB;AAND,wCAMC;AAWD,MAAa,oBAAoB;IAK/B,OAAO,CAAW;IAsBlB,UAAU,CAAqB;IAG/B,KAAK,CAAU;CAChB;AA/BD,oDA+BC;AA1BC;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,sEAAsE;KACzE,CAAC;;qDACgB;AAsBlB;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,wEAAwE;YACxE,gEAAgE;QAClE,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,MAAM;KACb,CAAC;;wDAC6B;AAG/B;IADC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,wCAAwC,EAAE,CAAC;;mDAChE;AAUjB,MAAa,oBAAqB,SAAQ,KAAK;IAElC;IACA;IACA;IAHX,YACW,KAAuB,EACvB,QAAiB,EACjB,OAAe;QAExB,KAAK,CACH,eAAe,KAAK,8BAA8B,OAAO,cAAc,MAAM,CAAC,QAAQ,CAAC,GAAG,CAC3F,CAAC;QANO,UAAK,GAAL,KAAK,CAAkB;QACvB,aAAQ,GAAR,QAAQ,CAAS;QACjB,YAAO,GAAP,OAAO,CAAQ;QAKxB,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAXD,oDAWC;AA+BD,SAAgB,eAAe,CAAC,KAAwC;IAMtE,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,gCAAmB,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,cAAc,CAC1B,OAAO,EACP,KAAK,CAAC,KAAK,EACX,qCAAwB,EACxB,iCAAoB,CACrB,CAAC;IACF,OAAO;QACL,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK;QACxB,IAAI,EAAE,KAAK;QACX,IAAI;QACJ,KAAK;KACN,CAAC;AACJ,CAAC;AAQD,SAAS,cAAc,CACrB,KAAuB,EACvB,KAAyB,EACzB,UAAkB,EAClB,OAAe;IAEf,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,OAAO,EAAE,CAAC;QAC7D,MAAM,IAAI,oBAAoB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAQD,SAAgB,sBAAsB,CACpC,KAAU,EACV,KAAa,EACb,IAAY,EACZ,KAAa;IAEb,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;IAC5C,OAAO;QACL,KAAK;QACL,UAAU,EAAE;YACV,KAAK;YACL,IAAI;YACJ,KAAK;YACL,UAAU;YACV,OAAO,EAAE,IAAI,GAAG,UAAU;SAC3B;KACF,CAAC;AACJ,CAAC;AA+BD,MAAa,wBAAwB;IAcnC,KAAK,GAAY,qCAAwB,CAAC;IAS1C,MAAM,CAAU;CACjB;AAxBD,4DAwBC;AAVC;IAbC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,gBAAgB;QAC7B,OAAO,EAAE,qCAAwB;QACjC,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,iCAAoB;QAC7B,OAAO,EAAE,qCAAwB;QACjC,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;IACN,IAAA,qBAAG,EAAC,iCAAoB,CAAC;;uDACgB;AAS1C;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,qEAAqE;QACvE,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;wDACK;AA4BlB,SAAgB,4BAA4B,CAC1C,KAAU,EACV,OAA0E;IAE1E,MAAM,UAAU,GACd,OAAO,CAAC,YAAY,KAAK,IAAI;QAC3B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAA,6BAAgB,EAAC;YACf,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,OAAO,CAAC,YAAY;SAC/B,CAAC,CAAC;IACT,OAAO;QACL,KAAK;QACL,UAAU,EAAE;YACV,OAAO,EAAE,UAAU,KAAK,IAAI;YAC5B,UAAU;YACV,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;SACjE;KACF,CAAC;AACJ,CAAC;AAeD,MAAM,8BAA8B,GAClC,IAAI,cAAc,EAAE,CAAC;AACvB,MAAM,8BAA8B,GAClC,IAAI,oBAAoB,EAAE,CAAC;AAC7B,KAAK,8BAA8B,CAAC;AACpC,KAAK,8BAA8B,CAAC"}

package/dist/nestjs/problem-details.dto.d.ts

@@ -0,0 +1,15 @@
+export declare class ProblemFieldIssueDto {
+    pointer: string;
+    detail: string;
+}
+export declare class ProblemDetailsDto {
+    type: string;
+    title: string;
+    status: number;
+    code: string;
+    detail?: string;
+    instance?: string;
+    traceId?: string;
+    errors?: ProblemFieldIssueDto[];
+}
+//# sourceMappingURL=problem-details.dto.d.ts.map

package/dist/nestjs/problem-details.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"problem-details.dto.d.ts","sourceRoot":"","sources":["../../src/nestjs/problem-details.dto.ts"],"names":[],"mappings":"AA4DA,qBAAa,oBAAoB;IAK/B,OAAO,EAAG,MAAM,CAAC;IAGjB,MAAM,EAAG,MAAM,CAAC;CACjB;AAED,qBAAa,iBAAiB;IAQ5B,IAAI,EAAG,MAAM,CAAC;IAQd,KAAK,EAAG,MAAM,CAAC;IAQf,MAAM,EAAG,MAAM,CAAC;IAQhB,IAAI,EAAG,MAAM,CAAC;IAMd,MAAM,CAAC,EAAE,MAAM,CAAC;IAOhB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAQlB,OAAO,CAAC,EAAE,MAAM,CAAC;IAMjB,MAAM,CAAC,EAAE,oBAAoB,EAAE,CAAC;CACjC"}

package/dist/nestjs/problem-details.dto.js

@@ -0,0 +1,103 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProblemDetailsDto = exports.ProblemFieldIssueDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+class ProblemFieldIssueDto {
+    pointer;
+    detail;
+}
+exports.ProblemFieldIssueDto = ProblemFieldIssueDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        example: '/name',
+        description: 'RFC 6901 JSON Pointer into the request body. Root is "/".',
+    }),
+    __metadata("design:type", String)
+], ProblemFieldIssueDto.prototype, "pointer", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ example: 'String must contain at least 1 character(s)' }),
+    __metadata("design:type", String)
+], ProblemFieldIssueDto.prototype, "detail", void 0);
+class ProblemDetailsDto {
+    type;
+    title;
+    status;
+    code;
+    detail;
+    instance;
+    traceId;
+    errors;
+}
+exports.ProblemDetailsDto = ProblemDetailsDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        example: 'https://xema.dev/problems/no-grant-found',
+        description: 'Absolute URI identifying the refusal TYPE. Derived one-to-one from ' +
+            '`code`, so a caller may branch on either and can never be told two ' +
+            'different things. Never `about:blank`.',
+    }),
+    __metadata("design:type", String)
+], ProblemDetailsDto.prototype, "type", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        example: 'No grant found',
+        description: 'Short, human-readable, and STABLE for a given `type`. Never ' +
+            'per-occurrence — that is `detail`.',
+    }),
+    __metadata("design:type", String)
+], ProblemDetailsDto.prototype, "title", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        example: 403,
+        description: 'The HTTP status code, repeated in the body so a logged document is ' +
+            'self-contained.',
+    }),
+    __metadata("design:type", Number)
+], ProblemDetailsDto.prototype, "status", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        example: 'NO_GRANT_FOUND',
+        description: 'SCREAMING_SNAKE_CASE. The machine-branchable refusal, and the value ' +
+            'a policy rule, a retry predicate and a UI branch all name.',
+    }),
+    __metadata("design:type", String)
+], ProblemDetailsDto.prototype, "code", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        example: 'No grant admits capability connector:mail.fetch@1 for this subject.',
+        description: 'Human-readable and specific to THIS occurrence.',
+    }),
+    __metadata("design:type", String)
+], ProblemDetailsDto.prototype, "detail", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        example: '/capabilities/invoke',
+        description: 'URI reference identifying the occurrence — a request path, a run, a row.',
+    }),
+    __metadata("design:type", String)
+], ProblemDetailsDto.prototype, "instance", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        example: '4bf92f3577b34da6a3ce929d0e0e4736',
+        description: 'W3C trace-context trace-id, present when the caller sent a ' +
+            '`traceparent`. Omitted rather than invented when it did not.',
+    }),
+    __metadata("design:type", String)
+], ProblemDetailsDto.prototype, "traceId", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        type: [ProblemFieldIssueDto],
+        description: 'Field-level issues, when the refusal is about the request body.',
+    }),
+    __metadata("design:type", Array)
+], ProblemDetailsDto.prototype, "errors", void 0);
+//# sourceMappingURL=problem-details.dto.js.map

package/dist/nestjs/problem-details.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"problem-details.dto.js","sourceRoot":"","sources":["../../src/nestjs/problem-details.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AA4DnE,MAAa,oBAAoB;IAK/B,OAAO,CAAU;IAGjB,MAAM,CAAU;CACjB;AATD,oDASC;AAJC;IAJC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,2DAA2D;KACzE,CAAC;;qDACe;AAGjB;IADC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;;oDACxD;AAGlB,MAAa,iBAAiB;IAQ5B,IAAI,CAAU;IAQd,KAAK,CAAU;IAQf,MAAM,CAAU;IAQhB,IAAI,CAAU;IAMd,MAAM,CAAU;IAOhB,QAAQ,CAAU;IAQlB,OAAO,CAAU;IAMjB,MAAM,CAA0B;CACjC;AA5DD,8CA4DC;AApDC;IAPC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,0CAA0C;QACnD,WAAW,EACT,qEAAqE;YACrE,qEAAqE;YACrE,wCAAwC;KAC3C,CAAC;;+CACY;AAQd;IANC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,gBAAgB;QACzB,WAAW,EACT,8DAA8D;YAC9D,oCAAoC;KACvC,CAAC;;gDACa;AAQf;IANC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,GAAG;QACZ,WAAW,EACT,qEAAqE;YACrE,iBAAiB;KACpB,CAAC;;iDACc;AAQhB;IANC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,gBAAgB;QACzB,WAAW,EACT,sEAAsE;YACtE,4DAA4D;KAC/D,CAAC;;+CACY;AAMd;IAJC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,qEAAqE;QAC9E,WAAW,EAAE,iDAAiD;KAC/D,CAAC;;iDACc;AAOhB;IALC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,sBAAsB;QAC/B,WAAW,EACT,0EAA0E;KAC7E,CAAC;;mDACgB;AAQlB;IANC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EACT,6DAA6D;YAC7D,8DAA8D;KACjE,CAAC;;kDACe;AAMjB;IAJC,IAAA,6BAAmB,EAAC;QACnB,IAAI,EAAE,CAAC,oBAAoB,CAAC;QAC5B,WAAW,EAAE,iEAAiE;KAC/E,CAAC;;iDAC8B"}

package/dist/nestjs/refusal.d.ts

@@ -0,0 +1,27 @@
+import { type ProblemDetails, type ProblemFieldIssue } from '@xemahq/kernel-contracts/http';
+export interface Refusal {
+    readonly status: number;
+    readonly code: string;
+    readonly title: string;
+    readonly detail: string;
+    readonly errors?: readonly ProblemFieldIssue[];
+    readonly extensions?: Readonly<Record<string, unknown>>;
+}
+export declare function titleForCode(code: string): string;
+interface ZodLikeIssue {
+    readonly path?: ReadonlyArray<string | number>;
+    readonly message: string;
+    readonly pattern?: unknown;
+}
+interface ZodLikeError extends Error {
+    readonly issues: readonly ZodLikeIssue[];
+}
+export declare function isZodError(exception: unknown): exception is ZodLikeError;
+export declare function problemFieldIssuesFromZod(issues: readonly ZodLikeIssue[]): ProblemFieldIssue[];
+export declare function refusalFrom(exception: unknown): Refusal;
+export declare function problemDetailsFor(refusal: Refusal, context?: {
+    readonly instance?: string;
+    readonly traceId?: string;
+}): ProblemDetails;
+export {};
+//# sourceMappingURL=refusal.d.ts.map

package/dist/nestjs/refusal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refusal.d.ts","sourceRoot":"","sources":["../../src/nestjs/refusal.ts"],"names":[],"mappings":"AAMA,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACvB,MAAM,+BAA+B,CAAC;AAwDvC,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAE/C,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACzD;AAsED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGjD;AAGD,UAAU,YAAY;IACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAGD,UAAU,YAAa,SAAQ,KAAK;IAClC,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;CAC1C;AAUD,wBAAgB,UAAU,CAAC,SAAS,EAAE,OAAO,GAAG,SAAS,IAAI,YAAY,CAMxE;AAUD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,SAAS,YAAY,EAAE,GAC9B,iBAAiB,EAAE,CAQrB;AA+CD,wBAAgB,WAAW,CAAC,SAAS,EAAE,OAAO,GAAG,OAAO,CA2CvD;AAwMD,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAClE,cAAc,CAahB"}