mirror of
https://github.com/mauriceboe/TREK.git
synced 2026-10-19 05:26:47 +00:00
jubnl
6c583c2f27
- One global ZodValidationPipe (APP_PIPE, createZodValidationPipe) validates
any @Body() typed with a createZodDto class; the custom exception factory
keeps TREK's { error: 'field: message; ...' } envelope byte-identical.
- The 7 piped controllers (collections, places, vacay, todo, health,
airtrail x2) now type bodies with colocated <domain>.dto.ts wrappers —
the Zod schemas in @trek/shared stay the single source of truth.
- OpenAPI: the hand-rolled api-zod.ts enricher is replaced by nestjs-zod's
cleanupOpenApiDoc; request bodies surface as $refs to named DTO schemas.
- validateBodyContracts() runs in buildApp() after init and refuses to boot
when any POST/PUT/PATCH @Body() (including @Body('field') sub-reads) lacks
a ZodDto metatype. The 175 pre-existing legacy handlers are grandfathered
in body-contract-allow-list.ts; the list is ratchet-only — the gate also
throws on stale entries, so migrating a domain forces their removal.
71 lines
4.2 KiB
TypeScript
71 lines
4.2 KiB
TypeScript
import { NestFactory } from '@nestjs/core';
|
|
import { ExpressAdapter } from '@nestjs/platform-express';
|
|
import type { INestApplication } from '@nestjs/common';
|
|
import type { ConfigType } from '@nestjs/config';
|
|
import { AppModule } from './nest/app.module';
|
|
import { httpConfig } from './nest/app-config';
|
|
import { applyGlobalMiddleware } from './middleware/globalMiddleware';
|
|
import { applyPlatformUploads, applyPlatformTransport, applyPlatformStatic } from './nest/platform/platform.routes';
|
|
import { apiDocsEnabled } from './nest/common/api-docs.kill-switch';
|
|
import { setupApiDocs } from './nest/platform/api-docs';
|
|
import { McpRegistryService } from '@trek/nest-mcp';
|
|
import { setMcpRegistry } from './mcp/registry-handoff';
|
|
import { validateBodyContracts } from './nest/common/validate-body-contracts';
|
|
|
|
/**
|
|
* Builds the unified TREK NestJS application that serves the ENTIRE surface — the
|
|
* former Express app is gone. One builder is shared by the production bootstrap
|
|
* (index.ts) and the integration-test harness so the two can never drift.
|
|
*
|
|
* Composition order is load-bearing. Everything except the SPA index.html fallback
|
|
* is registered on the underlying Express instance BEFORE `app.init()`, because
|
|
* Nest's router terminates an unmatched request by throwing NotFoundException — it
|
|
* does NOT fall through to a route registered after init, so a post-init Express
|
|
* route is unreachable. The platform routes are all specific paths (/uploads/*,
|
|
* /api/health, /mcp, /.well-known/*, /oauth/{authorize,register,consent}) so they
|
|
* match their own requests and `next()` everything else through to the Nest
|
|
* controllers registered during init.
|
|
*
|
|
* 1. applyGlobalMiddleware — helmet/CSP, CORS, HSTS, forced-HTTPS, the global MFA
|
|
* policy, request logging + cookie-parser. `bodyParser: false` so Nest does its
|
|
* own parsing and the raw /mcp body reaches the MCP handler unparsed.
|
|
* 2. applyPlatformUploads — the static + guarded /uploads/* routes.
|
|
* 3. applyPlatformTransport — /api/health, the OAuth/MCP SDK + /.well-known
|
|
* metadata, the /mcp routes, the /oauth/consent COOP header.
|
|
* 4. applyPlatformStatic — the production built-client static assets (so a real
|
|
* asset request returns the file before the Nest router 404s it).
|
|
* 4b. setupApiDocs — Swagger UI/spec at /api/docs* when TREK_API_DOCS_ENABLED;
|
|
* also Express-level, so it must precede init for the same reason.
|
|
* 5. app.init() — registers every migrated /api domain (the Nest controllers).
|
|
*
|
|
* The SPA index.html fallback (unmatched GET → index.html in production) is the
|
|
* SpaFallbackFilter (APP_FILTER in AppModule); the global error envelope is the
|
|
* TrekExceptionFilter (also APP_FILTER).
|
|
*/
|
|
export async function buildApp(): Promise<INestApplication> {
|
|
// rawBody keeps the unparsed request bytes on req.rawBody so a plugin webhook
|
|
// route can verify a provider's HMAC signature over the exact payload (the
|
|
// parsed JSON alone can't be re-serialised byte-for-byte).
|
|
const app = await NestFactory.create(AppModule, new ExpressAdapter(), { rawBody: true });
|
|
const instance = app.getHttpAdapter().getInstance();
|
|
// ConfigModule.forRoot's load factories already ran inside NestFactory.create,
|
|
// so the boot-stable snapshot is resolvable here, BEFORE app.init() — this is
|
|
// the one bridge that lets the pre-init Express layer consume the validated
|
|
// config instead of reading process.env itself.
|
|
const http = app.get<ConfigType<typeof httpConfig>>(httpConfig.KEY);
|
|
applyGlobalMiddleware(instance, { bodyParser: false, http });
|
|
applyPlatformUploads(instance);
|
|
applyPlatformTransport(instance);
|
|
applyPlatformStatic(instance);
|
|
if (apiDocsEnabled()) setupApiDocs(app);
|
|
await app.init();
|
|
// The /mcp handler is mounted pre-init (step 3) and has no DI access — hand
|
|
// it the boot-discovered registry now that the container is fully built.
|
|
setMcpRegistry(app.get(McpRegistryService));
|
|
// Fail closed on unvalidated mutation bodies: every POST/PUT/PATCH @Body()
|
|
// must carry a createZodDto class (validated by the global ZodValidationPipe)
|
|
// or sit on the ratchet-only legacy allow-list — otherwise refuse to boot.
|
|
validateBodyContracts(app);
|
|
return app;
|
|
}
|