express-model-binding 1.0.0 → 1.1.0

package/dist/{BaseAdapter-BjvLQijd.d.mts → BaseAdapter-Dr9a8ZUY.d.mts}

@@ -185,6 +185,22 @@ type TypedRequestHandler<Models extends Record<string, unknown> = Record<string,
  * Middleware function type
  */
 type MiddlewareFunction = RequestHandler;
+/**
+ * Validate field/column name to prevent injection
+ * Only allows alphanumeric, underscores, and dots (for nested fields)
+ */
+declare function isValidFieldName(name: string): boolean;
+/**
+ * Operator condition for advanced WHERE clauses
+ */
+interface OperatorCondition {
+    operator: string;
+    value: unknown;
+}
+/**
+ * Check if value is a valid operator condition with whitelisted operator
+ */
+declare function isOperatorCondition(value: unknown): value is OperatorCondition;
 
 /**
  * Abstract base class providing common adapter functionality.
@@ -211,4 +227,4 @@ declare abstract class BaseAdapter<TModel = unknown, TResult = unknown, TQueryBu
     protected applyCustomQuery(queryBuilder: TQueryBuilder, queryFn?: QueryModifier<TQueryBuilder>): TQueryBuilder;
 }
 
-export { type BindOptions as B, type CacheEntry as C, type ExtractModelType as E, type IORMAdapter as I, type ModelBindingsConfig as M, type QueryOptions as Q, type TypedRequest as T, type BindingResult as a, BaseAdapter as b, type BindingContext as c, type ModelMetadata as d, type ModelBindingGlobalConfig as e, type TypedRequestHandler as f, type MiddlewareFunction as g };
+export { type BindOptions as B, type CacheEntry as C, type ExtractModelType as E, type IORMAdapter as I, type ModelBindingsConfig as M, type OperatorCondition as O, type QueryOptions as Q, type TypedRequest as T, type BindingResult as a, BaseAdapter as b, type BindingContext as c, type ModelMetadata as d, type ModelBindingGlobalConfig as e, type TypedRequestHandler as f, type MiddlewareFunction as g, isOperatorCondition as h, isValidFieldName as i };

package/dist/{BaseAdapter-BjvLQijd.d.ts → BaseAdapter-Dr9a8ZUY.d.ts}

@@ -185,6 +185,22 @@ type TypedRequestHandler<Models extends Record<string, unknown> = Record<string,
  * Middleware function type
  */
 type MiddlewareFunction = RequestHandler;
+/**
+ * Validate field/column name to prevent injection
+ * Only allows alphanumeric, underscores, and dots (for nested fields)
+ */
+declare function isValidFieldName(name: string): boolean;
+/**
+ * Operator condition for advanced WHERE clauses
+ */
+interface OperatorCondition {
+    operator: string;
+    value: unknown;
+}
+/**
+ * Check if value is a valid operator condition with whitelisted operator
+ */
+declare function isOperatorCondition(value: unknown): value is OperatorCondition;
 
 /**
  * Abstract base class providing common adapter functionality.
@@ -211,4 +227,4 @@ declare abstract class BaseAdapter<TModel = unknown, TResult = unknown, TQueryBu
     protected applyCustomQuery(queryBuilder: TQueryBuilder, queryFn?: QueryModifier<TQueryBuilder>): TQueryBuilder;
 }
 
-export { type BindOptions as B, type CacheEntry as C, type ExtractModelType as E, type IORMAdapter as I, type ModelBindingsConfig as M, type QueryOptions as Q, type TypedRequest as T, type BindingResult as a, BaseAdapter as b, type BindingContext as c, type ModelMetadata as d, type ModelBindingGlobalConfig as e, type TypedRequestHandler as f, type MiddlewareFunction as g };
+export { type BindOptions as B, type CacheEntry as C, type ExtractModelType as E, type IORMAdapter as I, type ModelBindingsConfig as M, type OperatorCondition as O, type QueryOptions as Q, type TypedRequest as T, type BindingResult as a, BaseAdapter as b, type BindingContext as c, type ModelMetadata as d, type ModelBindingGlobalConfig as e, type TypedRequestHandler as f, type MiddlewareFunction as g, isOperatorCondition as h, isValidFieldName as i };

package/dist/adapters/KnexAdapter.d.mts

@@ -1,5 +1,5 @@
 import { Knex } from 'knex';
-import { b as BaseAdapter, Q as QueryOptions, d as ModelMetadata } from '../BaseAdapter-BjvLQijd.mjs';
+import { b as BaseAdapter, Q as QueryOptions, d as ModelMetadata } from '../BaseAdapter-Dr9a8ZUY.mjs';
 import 'express';
 
 /**

package/dist/adapters/KnexAdapter.d.ts

@@ -1,5 +1,5 @@
 import { Knex } from 'knex';
-import { b as BaseAdapter, Q as QueryOptions, d as ModelMetadata } from '../BaseAdapter-BjvLQijd.js';
+import { b as BaseAdapter, Q as QueryOptions, d as ModelMetadata } from '../BaseAdapter-Dr9a8ZUY.js';
 import 'express';
 
 /**

package/dist/adapters/KnexAdapter.js

@@ -1,257 +1 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/adapters/KnexAdapter.ts
-var KnexAdapter_exports = {};
-__export(KnexAdapter_exports, {
-  KnexAdapter: () => KnexAdapter,
-  defineKnexModel: () => defineKnexModel
-});
-module.exports = __toCommonJS(KnexAdapter_exports);
-
-// src/errors/index.ts
-var BindingError = class extends Error {
-  constructor(message, originalError) {
-    super(message);
-    this.name = "BindingError";
-    this.originalError = originalError;
-    Error.captureStackTrace(this, this.constructor);
-  }
-  toJSON() {
-    return {
-      name: this.name,
-      message: this.message,
-      originalError: this.originalError?.message
-    };
-  }
-};
-var InvalidModelError = class extends Error {
-  constructor(message, model) {
-    super(message);
-    this.name = "InvalidModelError";
-    this.model = model;
-    Error.captureStackTrace(this, this.constructor);
-  }
-  toJSON() {
-    return {
-      name: this.name,
-      message: this.message,
-      model: typeof this.model === "string" ? this.model : String(this.model)
-    };
-  }
-};
-
-// src/core/BaseAdapter.ts
-var BaseAdapter = class {
-  transformValue(_model, _key, value) {
-    if (/^\d+$/.test(value)) {
-      const num = parseInt(value, 10);
-      if (!isNaN(num) && Number.isSafeInteger(num)) {
-        return num;
-      }
-    }
-    return value;
-  }
-  supportsSoftDeletes(_model) {
-    return false;
-  }
-  getModelMetadata(model) {
-    return {
-      name: this.getModelName(model),
-      primaryKey: this.getPrimaryKeyName(model),
-      softDeletes: this.supportsSoftDeletes(model),
-      adapter: this.name
-    };
-  }
-  validateModel(model) {
-    if (!this.isValidModel(model)) {
-      throw new InvalidModelError(`Invalid model for ${this.name} adapter`, model);
-    }
-  }
-  getModelName(model) {
-    if (typeof model === "string") {
-      return model;
-    }
-    if (model && typeof model === "object") {
-      const obj = model;
-      if (typeof obj.name === "string") return obj.name;
-      if (typeof obj.modelName === "string") return obj.modelName;
-      if (typeof obj.tableName === "string") return obj.tableName;
-    }
-    if (model && typeof model === "function") {
-      return model.name || "Unknown";
-    }
-    return "Unknown";
-  }
-  applySoftDeleteFilter(queryBuilder, _options) {
-    return queryBuilder;
-  }
-  applyIncludes(queryBuilder, _includes) {
-    return queryBuilder;
-  }
-  applySelect(queryBuilder, _select) {
-    return queryBuilder;
-  }
-  applyWhereConditions(queryBuilder, _where) {
-    return queryBuilder;
-  }
-  applyCustomQuery(queryBuilder, queryFn) {
-    if (queryFn) {
-      return queryFn(queryBuilder);
-    }
-    return queryBuilder;
-  }
-};
-
-// src/core/types.ts
-function isOperatorCondition(value) {
-  return typeof value === "object" && value !== null && "operator" in value && "value" in value;
-}
-
-// src/utils/validators.ts
-var UUID_REGEX = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-function isUUID(value) {
-  return UUID_REGEX.test(value);
-}
-
-// src/adapters/KnexAdapter.ts
-function isKnexModel(value) {
-  return typeof value === "object" && value !== null && typeof value.tableName === "string";
-}
-var KnexAdapter = class extends BaseAdapter {
-  constructor(knex) {
-    super();
-    this.knex = knex;
-    this.name = "knex";
-  }
-  getKnex() {
-    return this.knex;
-  }
-  async findByKey(model, key, value, options = {}) {
-    this.validateModel(model);
-    const tableName = this.getTableName(model);
-    try {
-      let query = this.knex(tableName);
-      query = query.where(key, value);
-      if (this.supportsSoftDeletes(model) && !options.withTrashed && !options.onlyTrashed) {
-        const softDeleteColumn = this.getSoftDeleteColumn(model);
-        query = query.whereNull(softDeleteColumn);
-      } else if (options.onlyTrashed && this.supportsSoftDeletes(model)) {
-        const softDeleteColumn = this.getSoftDeleteColumn(model);
-        query = query.whereNotNull(softDeleteColumn);
-      }
-      if (options.where) {
-        query = this.applyWhereConditions(query, options.where);
-      }
-      if (options.select && options.select.length > 0) {
-        query = query.select(options.select);
-      } else {
-        query = query.select("*");
-      }
-      if (options.query) {
-        query = this.applyCustomQuery(
-          query,
-          options.query
-        );
-      }
-      if (options.lock === "forUpdate") {
-        query = query.forUpdate();
-      } else if (options.lock === "forShare") {
-        query = query.forShare();
-      }
-      const result = await query.first();
-      return result || null;
-    } catch (error) {
-      throw new BindingError(
-        `Failed to fetch ${this.getModelName(model)}: ${error.message}`,
-        error
-      );
-    }
-  }
-  getPrimaryKeyName(model) {
-    if (isKnexModel(model) && model.primaryKey) {
-      return model.primaryKey;
-    }
-    return "id";
-  }
-  isValidModel(model) {
-    return typeof model === "string" || isKnexModel(model);
-  }
-  transformValue(model, key, value) {
-    const primaryKey = this.getPrimaryKeyName(model);
-    if (key === primaryKey || key === "id") {
-      const num = parseInt(value, 10);
-      if (!isNaN(num) && num.toString() === value && Number.isSafeInteger(num)) {
-        return num;
-      }
-    }
-    if (isUUID(value)) {
-      return value;
-    }
-    return value;
-  }
-  supportsSoftDeletes(model) {
-    return isKnexModel(model) && !!model.softDeleteColumn;
-  }
-  getModelMetadata(model) {
-    return {
-      name: this.getModelName(model),
-      primaryKey: this.getPrimaryKeyName(model),
-      tableName: this.getTableName(model),
-      softDeletes: this.supportsSoftDeletes(model),
-      adapter: this.name
-    };
-  }
-  getTableName(model) {
-    return typeof model === "string" ? model : model.tableName;
-  }
-  getSoftDeleteColumn(model) {
-    if (isKnexModel(model) && model.softDeleteColumn) {
-      return model.softDeleteColumn;
-    }
-    return "deleted_at";
-  }
-  applyWhereConditions(query, where) {
-    Object.entries(where).forEach(([column, value]) => {
-      if (value === null) {
-        query = query.whereNull(column);
-      } else if (Array.isArray(value)) {
-        query = query.whereIn(column, value);
-      } else if (isOperatorCondition(value)) {
-        query = query.where(column, value.operator, value.value);
-      } else {
-        query = query.where(column, value);
-      }
-    });
-    return query;
-  }
-};
-function defineKnexModel(config) {
-  return {
-    tableName: config.tableName,
-    primaryKey: config.primaryKey || "id",
-    softDeleteColumn: config.softDeleteColumn
-  };
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  KnexAdapter,
-  defineKnexModel
-});
-//# sourceMappingURL=KnexAdapter.js.map
+'use strict';var chunkEEPSARTF_js=require('../chunk-EEPSARTF.js');require('../chunk-7I3EYD6K.js');Object.defineProperty(exports,"KnexAdapter",{enumerable:true,get:function(){return chunkEEPSARTF_js.a}});Object.defineProperty(exports,"defineKnexModel",{enumerable:true,get:function(){return chunkEEPSARTF_js.b}});

package/dist/adapters/KnexAdapter.mjs

@@ -1,229 +1 @@
-// src/errors/index.ts
-var BindingError = class extends Error {
-  constructor(message, originalError) {
-    super(message);
-    this.name = "BindingError";
-    this.originalError = originalError;
-    Error.captureStackTrace(this, this.constructor);
-  }
-  toJSON() {
-    return {
-      name: this.name,
-      message: this.message,
-      originalError: this.originalError?.message
-    };
-  }
-};
-var InvalidModelError = class extends Error {
-  constructor(message, model) {
-    super(message);
-    this.name = "InvalidModelError";
-    this.model = model;
-    Error.captureStackTrace(this, this.constructor);
-  }
-  toJSON() {
-    return {
-      name: this.name,
-      message: this.message,
-      model: typeof this.model === "string" ? this.model : String(this.model)
-    };
-  }
-};
-
-// src/core/BaseAdapter.ts
-var BaseAdapter = class {
-  transformValue(_model, _key, value) {
-    if (/^\d+$/.test(value)) {
-      const num = parseInt(value, 10);
-      if (!isNaN(num) && Number.isSafeInteger(num)) {
-        return num;
-      }
-    }
-    return value;
-  }
-  supportsSoftDeletes(_model) {
-    return false;
-  }
-  getModelMetadata(model) {
-    return {
-      name: this.getModelName(model),
-      primaryKey: this.getPrimaryKeyName(model),
-      softDeletes: this.supportsSoftDeletes(model),
-      adapter: this.name
-    };
-  }
-  validateModel(model) {
-    if (!this.isValidModel(model)) {
-      throw new InvalidModelError(`Invalid model for ${this.name} adapter`, model);
-    }
-  }
-  getModelName(model) {
-    if (typeof model === "string") {
-      return model;
-    }
-    if (model && typeof model === "object") {
-      const obj = model;
-      if (typeof obj.name === "string") return obj.name;
-      if (typeof obj.modelName === "string") return obj.modelName;
-      if (typeof obj.tableName === "string") return obj.tableName;
-    }
-    if (model && typeof model === "function") {
-      return model.name || "Unknown";
-    }
-    return "Unknown";
-  }
-  applySoftDeleteFilter(queryBuilder, _options) {
-    return queryBuilder;
-  }
-  applyIncludes(queryBuilder, _includes) {
-    return queryBuilder;
-  }
-  applySelect(queryBuilder, _select) {
-    return queryBuilder;
-  }
-  applyWhereConditions(queryBuilder, _where) {
-    return queryBuilder;
-  }
-  applyCustomQuery(queryBuilder, queryFn) {
-    if (queryFn) {
-      return queryFn(queryBuilder);
-    }
-    return queryBuilder;
-  }
-};
-
-// src/core/types.ts
-function isOperatorCondition(value) {
-  return typeof value === "object" && value !== null && "operator" in value && "value" in value;
-}
-
-// src/utils/validators.ts
-var UUID_REGEX = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-function isUUID(value) {
-  return UUID_REGEX.test(value);
-}
-
-// src/adapters/KnexAdapter.ts
-function isKnexModel(value) {
-  return typeof value === "object" && value !== null && typeof value.tableName === "string";
-}
-var KnexAdapter = class extends BaseAdapter {
-  constructor(knex) {
-    super();
-    this.knex = knex;
-    this.name = "knex";
-  }
-  getKnex() {
-    return this.knex;
-  }
-  async findByKey(model, key, value, options = {}) {
-    this.validateModel(model);
-    const tableName = this.getTableName(model);
-    try {
-      let query = this.knex(tableName);
-      query = query.where(key, value);
-      if (this.supportsSoftDeletes(model) && !options.withTrashed && !options.onlyTrashed) {
-        const softDeleteColumn = this.getSoftDeleteColumn(model);
-        query = query.whereNull(softDeleteColumn);
-      } else if (options.onlyTrashed && this.supportsSoftDeletes(model)) {
-        const softDeleteColumn = this.getSoftDeleteColumn(model);
-        query = query.whereNotNull(softDeleteColumn);
-      }
-      if (options.where) {
-        query = this.applyWhereConditions(query, options.where);
-      }
-      if (options.select && options.select.length > 0) {
-        query = query.select(options.select);
-      } else {
-        query = query.select("*");
-      }
-      if (options.query) {
-        query = this.applyCustomQuery(
-          query,
-          options.query
-        );
-      }
-      if (options.lock === "forUpdate") {
-        query = query.forUpdate();
-      } else if (options.lock === "forShare") {
-        query = query.forShare();
-      }
-      const result = await query.first();
-      return result || null;
-    } catch (error) {
-      throw new BindingError(
-        `Failed to fetch ${this.getModelName(model)}: ${error.message}`,
-        error
-      );
-    }
-  }
-  getPrimaryKeyName(model) {
-    if (isKnexModel(model) && model.primaryKey) {
-      return model.primaryKey;
-    }
-    return "id";
-  }
-  isValidModel(model) {
-    return typeof model === "string" || isKnexModel(model);
-  }
-  transformValue(model, key, value) {
-    const primaryKey = this.getPrimaryKeyName(model);
-    if (key === primaryKey || key === "id") {
-      const num = parseInt(value, 10);
-      if (!isNaN(num) && num.toString() === value && Number.isSafeInteger(num)) {
-        return num;
-      }
-    }
-    if (isUUID(value)) {
-      return value;
-    }
-    return value;
-  }
-  supportsSoftDeletes(model) {
-    return isKnexModel(model) && !!model.softDeleteColumn;
-  }
-  getModelMetadata(model) {
-    return {
-      name: this.getModelName(model),
-      primaryKey: this.getPrimaryKeyName(model),
-      tableName: this.getTableName(model),
-      softDeletes: this.supportsSoftDeletes(model),
-      adapter: this.name
-    };
-  }
-  getTableName(model) {
-    return typeof model === "string" ? model : model.tableName;
-  }
-  getSoftDeleteColumn(model) {
-    if (isKnexModel(model) && model.softDeleteColumn) {
-      return model.softDeleteColumn;
-    }
-    return "deleted_at";
-  }
-  applyWhereConditions(query, where) {
-    Object.entries(where).forEach(([column, value]) => {
-      if (value === null) {
-        query = query.whereNull(column);
-      } else if (Array.isArray(value)) {
-        query = query.whereIn(column, value);
-      } else if (isOperatorCondition(value)) {
-        query = query.where(column, value.operator, value.value);
-      } else {
-        query = query.where(column, value);
-      }
-    });
-    return query;
-  }
-};
-function defineKnexModel(config) {
-  return {
-    tableName: config.tableName,
-    primaryKey: config.primaryKey || "id",
-    softDeleteColumn: config.softDeleteColumn
-  };
-}
-export {
-  KnexAdapter,
-  defineKnexModel
-};
-//# sourceMappingURL=KnexAdapter.mjs.map
+export{a as KnexAdapter,b as defineKnexModel}from'../chunk-Z6WU7X3A.mjs';import'../chunk-DBYMXDVA.mjs';

package/dist/adapters/MongooseAdapter.d.mts

@@ -1,5 +1,5 @@
 import { Model, Document, Schema, Query } from 'mongoose';
-import { b as BaseAdapter, Q as QueryOptions, d as ModelMetadata } from '../BaseAdapter-BjvLQijd.mjs';
+import { b as BaseAdapter, Q as QueryOptions, d as ModelMetadata } from '../BaseAdapter-Dr9a8ZUY.mjs';
 import 'express';
 
 /**

package/dist/adapters/MongooseAdapter.d.ts

@@ -1,5 +1,5 @@
 import { Model, Document, Schema, Query } from 'mongoose';
-import { b as BaseAdapter, Q as QueryOptions, d as ModelMetadata } from '../BaseAdapter-BjvLQijd.js';
+import { b as BaseAdapter, Q as QueryOptions, d as ModelMetadata } from '../BaseAdapter-Dr9a8ZUY.js';
 import 'express';
 
 /**