@actuate-media/cms-core 0.35.1 → 0.37.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (72) hide show
  1. package/dist/__tests__/api/appearance-routes.test.d.ts +2 -0
  2. package/dist/__tests__/api/appearance-routes.test.d.ts.map +1 -0
  3. package/dist/__tests__/api/appearance-routes.test.js +134 -0
  4. package/dist/__tests__/api/appearance-routes.test.js.map +1 -0
  5. package/dist/__tests__/api/security-routes.test.d.ts +2 -0
  6. package/dist/__tests__/api/security-routes.test.d.ts.map +1 -0
  7. package/dist/__tests__/api/security-routes.test.js +212 -0
  8. package/dist/__tests__/api/security-routes.test.js.map +1 -0
  9. package/dist/__tests__/appearance/appearance.test.d.ts +2 -0
  10. package/dist/__tests__/appearance/appearance.test.d.ts.map +1 -0
  11. package/dist/__tests__/appearance/appearance.test.js +273 -0
  12. package/dist/__tests__/appearance/appearance.test.js.map +1 -0
  13. package/dist/__tests__/security/center.test.d.ts +2 -0
  14. package/dist/__tests__/security/center.test.d.ts.map +1 -0
  15. package/dist/__tests__/security/center.test.js +226 -0
  16. package/dist/__tests__/security/center.test.js.map +1 -0
  17. package/dist/api/handlers.d.ts.map +1 -1
  18. package/dist/api/handlers.js +261 -3
  19. package/dist/api/handlers.js.map +1 -1
  20. package/dist/appearance/color.d.ts +24 -0
  21. package/dist/appearance/color.d.ts.map +1 -0
  22. package/dist/appearance/color.js +90 -0
  23. package/dist/appearance/color.js.map +1 -0
  24. package/dist/appearance/index.d.ts +13 -0
  25. package/dist/appearance/index.d.ts.map +1 -0
  26. package/dist/appearance/index.js +5 -0
  27. package/dist/appearance/index.js.map +1 -0
  28. package/dist/appearance/logo-shape.d.ts +26 -0
  29. package/dist/appearance/logo-shape.d.ts.map +1 -0
  30. package/dist/appearance/logo-shape.js +62 -0
  31. package/dist/appearance/logo-shape.js.map +1 -0
  32. package/dist/appearance/resolve.d.ts +46 -0
  33. package/dist/appearance/resolve.d.ts.map +1 -0
  34. package/dist/appearance/resolve.js +208 -0
  35. package/dist/appearance/resolve.js.map +1 -0
  36. package/dist/appearance/theme-tokens.d.ts +50 -0
  37. package/dist/appearance/theme-tokens.d.ts.map +1 -0
  38. package/dist/appearance/theme-tokens.js +198 -0
  39. package/dist/appearance/theme-tokens.js.map +1 -0
  40. package/dist/appearance/types.d.ts +110 -0
  41. package/dist/appearance/types.d.ts.map +1 -0
  42. package/dist/appearance/types.js +16 -0
  43. package/dist/appearance/types.js.map +1 -0
  44. package/dist/index.d.ts +2 -0
  45. package/dist/index.d.ts.map +1 -1
  46. package/dist/index.js +2 -0
  47. package/dist/index.js.map +1 -1
  48. package/dist/security/center/gather.d.ts +12 -0
  49. package/dist/security/center/gather.d.ts.map +1 -0
  50. package/dist/security/center/gather.js +185 -0
  51. package/dist/security/center/gather.js.map +1 -0
  52. package/dist/security/center/index.d.ts +13 -0
  53. package/dist/security/center/index.d.ts.map +1 -0
  54. package/dist/security/center/index.js +4 -0
  55. package/dist/security/center/index.js.map +1 -0
  56. package/dist/security/center/settings.d.ts +38 -0
  57. package/dist/security/center/settings.d.ts.map +1 -0
  58. package/dist/security/center/settings.js +121 -0
  59. package/dist/security/center/settings.js.map +1 -0
  60. package/dist/security/center/status.d.ts +10 -0
  61. package/dist/security/center/status.d.ts.map +1 -0
  62. package/dist/security/center/status.js +249 -0
  63. package/dist/security/center/status.js.map +1 -0
  64. package/dist/security/center/summaries.d.ts +21 -0
  65. package/dist/security/center/summaries.d.ts.map +1 -0
  66. package/dist/security/center/summaries.js +65 -0
  67. package/dist/security/center/summaries.js.map +1 -0
  68. package/dist/security/center/types.d.ts +127 -0
  69. package/dist/security/center/types.d.ts.map +1 -0
  70. package/dist/security/center/types.js +12 -0
  71. package/dist/security/center/types.js.map +1 -0
  72. package/package.json +11 -1
@@ -0,0 +1,273 @@
1
+ import { describe, expect, it } from 'vitest';
2
+ import { classifyLogoShape, logoShapeWarning, contrastRatio, isParseableColor, validateAccentColor, generateAdminThemeTokens, accentTokensToCssVars, ACCENT_PRESETS, siteInitials, resolveAdminBrand, resolvePublicBrand, getFaviconMetadata, parseAppearance, parseBrand, brandAssetIds, resolveBrand, DEFAULT_APPEARANCE, } from '../../appearance/index.js';
3
+ describe('classifyLogoShape', () => {
4
+ it('classifies by aspect ratio', () => {
5
+ expect(classifyLogoShape(100, 100)).toBe('square');
6
+ expect(classifyLogoShape(120, 100)).toBe('square'); // ratio 1.2
7
+ expect(classifyLogoShape(400, 100)).toBe('horizontal'); // ratio 4
8
+ expect(classifyLogoShape(100, 400)).toBe('vertical'); // ratio 0.25
9
+ expect(classifyLogoShape(160, 100)).toBe('neutral'); // ratio 1.6
10
+ });
11
+ it('returns unknown for missing/invalid dimensions', () => {
12
+ expect(classifyLogoShape(undefined, undefined)).toBe('unknown');
13
+ expect(classifyLogoShape(0, 100)).toBe('unknown');
14
+ expect(classifyLogoShape(100, null)).toBe('unknown');
15
+ });
16
+ });
17
+ describe('logoShapeWarning', () => {
18
+ it('warns when a square is used as a primary logo', () => {
19
+ expect(logoShapeWarning('publicPrimaryLogo', 'square')).toMatch(/square mark/i);
20
+ });
21
+ it('warns when a horizontal is used as a logo mark', () => {
22
+ expect(logoShapeWarning('adminLogoMark', 'horizontal')).toMatch(/square mark works better/i);
23
+ });
24
+ it('warns when a non-square favicon source is uploaded', () => {
25
+ expect(logoShapeWarning('faviconSource', 'horizontal')).toMatch(/not square/i);
26
+ });
27
+ it('warns about vertical logos in wide slots', () => {
28
+ expect(logoShapeWarning('publicPrimaryLogo', 'vertical')).toMatch(/vertical/i);
29
+ });
30
+ it('is silent for good fits and unknown shapes', () => {
31
+ expect(logoShapeWarning('publicPrimaryLogo', 'horizontal')).toBeNull();
32
+ expect(logoShapeWarning('publicLogoMark', 'square')).toBeNull();
33
+ expect(logoShapeWarning('publicPrimaryLogo', 'unknown')).toBeNull();
34
+ });
35
+ });
36
+ describe('color + contrast', () => {
37
+ it('computes the canonical black/white contrast as 21:1', () => {
38
+ expect(contrastRatio('#000000', '#ffffff')).toBeCloseTo(21, 0);
39
+ });
40
+ it('returns 1 for identical colors', () => {
41
+ expect(contrastRatio('#ffffff', '#ffffff')).toBeCloseTo(1, 5);
42
+ });
43
+ it('parses oklch and hex', () => {
44
+ expect(isParseableColor('oklch(0.54 0.23 293)')).toBe(true);
45
+ expect(isParseableColor('#abc')).toBe(true);
46
+ expect(isParseableColor('rebeccapurple')).toBe(false);
47
+ expect(isParseableColor('')).toBe(false);
48
+ });
49
+ it('ranks a dark oklch accent as high contrast against white', () => {
50
+ // The purple preset on white should clear the 3:1 UI bar comfortably.
51
+ expect(contrastRatio('oklch(0.54 0.23 293)', '#ffffff')).toBeGreaterThan(3);
52
+ });
53
+ });
54
+ describe('validateAccentColor', () => {
55
+ it('accepts every preset', () => {
56
+ for (const name of Object.keys(ACCENT_PRESETS)) {
57
+ expect(validateAccentColor(name).valid).toBe(true);
58
+ }
59
+ });
60
+ it('rejects an unparseable color', () => {
61
+ const r = validateAccentColor('not-a-color');
62
+ expect(r.valid).toBe(false);
63
+ expect(r.reason).toMatch(/valid hex or oklch/i);
64
+ });
65
+ it('rejects a custom color that fails contrast against white', () => {
66
+ const r = validateAccentColor('#fff8dc'); // near-white, low contrast
67
+ expect(r.valid).toBe(false);
68
+ expect(r.reason).toMatch(/below the 3:1/i);
69
+ });
70
+ it('accepts a sufficiently dark custom color', () => {
71
+ expect(validateAccentColor('#0a3d62').valid).toBe(true);
72
+ });
73
+ });
74
+ describe('generateAdminThemeTokens', () => {
75
+ it('returns preset tokens for light and dark', () => {
76
+ expect(generateAdminThemeTokens({ adminAccentColor: 'blue' }, 'light')).toEqual(ACCENT_PRESETS.blue.light);
77
+ expect(generateAdminThemeTokens({ adminAccentColor: 'blue' }, 'dark')).toEqual(ACCENT_PRESETS.blue.dark);
78
+ });
79
+ it('drives tokens from a custom color', () => {
80
+ const tokens = generateAdminThemeTokens({ adminAccentColor: '#0a3d62' }, 'light');
81
+ expect(tokens.brand).toBe('#0a3d62');
82
+ expect(tokens.primary).toBe('#0a3d62');
83
+ });
84
+ it('falls back to purple for an unknown name', () => {
85
+ expect(generateAdminThemeTokens({ adminAccentColor: 'chartreuse' }, 'light')).toEqual(ACCENT_PRESETS.purple.light);
86
+ });
87
+ it('maps tokens to the expected CSS variables', () => {
88
+ const vars = accentTokensToCssVars(ACCENT_PRESETS.purple.light);
89
+ expect(Object.keys(vars).sort()).toEqual([
90
+ '--brand',
91
+ '--brand-foreground',
92
+ '--primary',
93
+ '--primary-foreground',
94
+ '--ring',
95
+ '--sidebar-primary',
96
+ '--sidebar-primary-foreground',
97
+ ].sort());
98
+ });
99
+ });
100
+ describe('siteInitials', () => {
101
+ it('derives up to two initials', () => {
102
+ expect(siteInitials('Actuate Media')).toBe('AM');
103
+ expect(siteInitials('Actuate')).toBe('AC');
104
+ expect(siteInitials('')).toBe('A');
105
+ expect(siteInitials(undefined)).toBe('A');
106
+ });
107
+ });
108
+ function assetMap(...assets) {
109
+ return new Map(assets.map((a) => [a.id, a]));
110
+ }
111
+ const HORIZONTAL = {
112
+ id: 'primary-1',
113
+ publicUrl: 'https://cdn.example.com/logo.svg',
114
+ mimeType: 'image/svg+xml',
115
+ width: 400,
116
+ height: 100,
117
+ };
118
+ const MARK = {
119
+ id: 'mark-1',
120
+ publicUrl: 'https://cdn.example.com/mark.svg',
121
+ mimeType: 'image/svg+xml',
122
+ width: 64,
123
+ height: 64,
124
+ };
125
+ const FAVICON = {
126
+ id: 'fav-1',
127
+ publicUrl: 'https://cdn.example.com/favicon.png',
128
+ mimeType: 'image/png',
129
+ width: 32,
130
+ height: 32,
131
+ };
132
+ describe('resolveAdminBrand', () => {
133
+ it('inherits the public brand by default', () => {
134
+ const brand = {
135
+ mode: 'inheritPublicBrand',
136
+ publicPrimaryLogoAssetId: 'primary-1',
137
+ publicLogoMarkAssetId: 'mark-1',
138
+ };
139
+ const r = resolveAdminBrand(brand, assetMap(HORIZONTAL, MARK), 'Actuate Media');
140
+ expect(r.inherited).toBe(true);
141
+ expect(r.primary?.url).toBe(HORIZONTAL.publicUrl);
142
+ expect(r.mark?.url).toBe(MARK.publicUrl);
143
+ expect(r.primary?.shape).toBe('horizontal');
144
+ expect(r.initials).toBe('AM');
145
+ });
146
+ it('prefers admin assets in customAdminBrand mode, falling back to public', () => {
147
+ const adminPrimary = { ...HORIZONTAL, id: 'admin-primary' };
148
+ const brand = {
149
+ mode: 'customAdminBrand',
150
+ adminPrimaryLogoAssetId: 'admin-primary',
151
+ publicLogoMarkAssetId: 'mark-1',
152
+ };
153
+ const r = resolveAdminBrand(brand, assetMap(adminPrimary, MARK), 'Actuate Media');
154
+ expect(r.inherited).toBe(false);
155
+ expect(r.primary?.url).toBe(adminPrimary.publicUrl);
156
+ // No admin mark → falls back to the public mark.
157
+ expect(r.mark?.url).toBe(MARK.publicUrl);
158
+ });
159
+ it('falls back the collapsed mark to the favicon source', () => {
160
+ const brand = {
161
+ mode: 'inheritPublicBrand',
162
+ publicPrimaryLogoAssetId: 'primary-1',
163
+ faviconSourceAssetId: 'fav-1',
164
+ };
165
+ const r = resolveAdminBrand(brand, assetMap(HORIZONTAL, FAVICON), 'Actuate Media');
166
+ expect(r.mark?.url).toBe(FAVICON.publicUrl);
167
+ });
168
+ it('returns null logos and initials when nothing is configured', () => {
169
+ const r = resolveAdminBrand({ mode: 'inheritPublicBrand' }, assetMap(), 'Globex Corp');
170
+ expect(r.primary).toBeNull();
171
+ expect(r.mark).toBeNull();
172
+ expect(r.initials).toBe('GC');
173
+ });
174
+ });
175
+ describe('resolvePublicBrand', () => {
176
+ it('resolves public assets and mark fallback', () => {
177
+ const brand = {
178
+ mode: 'customAdminBrand', // irrelevant to public resolution
179
+ publicPrimaryLogoAssetId: 'primary-1',
180
+ faviconSourceAssetId: 'fav-1',
181
+ };
182
+ const r = resolvePublicBrand(brand, assetMap(HORIZONTAL, FAVICON), 'Actuate Media');
183
+ expect(r.primary?.url).toBe(HORIZONTAL.publicUrl);
184
+ expect(r.mark?.url).toBe(FAVICON.publicUrl);
185
+ });
186
+ });
187
+ describe('getFaviconMetadata', () => {
188
+ it('returns null icons when no favicon source is set', () => {
189
+ const r = getFaviconMetadata({ mode: 'inheritPublicBrand' }, assetMap());
190
+ expect(r.icon).toBeNull();
191
+ expect(r.apple).toBeNull();
192
+ });
193
+ it('cache-busts the icon URL from updatedAt', () => {
194
+ const brand = {
195
+ mode: 'inheritPublicBrand',
196
+ faviconSourceAssetId: 'fav-1',
197
+ updatedAt: '2026-02-03T00:00:00.000Z',
198
+ };
199
+ const r = getFaviconMetadata(brand, assetMap(FAVICON));
200
+ expect(r.icon).toBe(`${FAVICON.publicUrl}?v=${Date.parse(brand.updatedAt)}`);
201
+ expect(r.apple).toBe(r.icon);
202
+ expect(r.type).toBe('image/png');
203
+ });
204
+ });
205
+ describe('parse + ids', () => {
206
+ it('parses appearance with defaults', () => {
207
+ expect(parseAppearance({})).toEqual(DEFAULT_APPEARANCE);
208
+ expect(parseAppearance({ appearance: { adminAccentColor: 'teal' } }).adminAccentColor).toBe('teal');
209
+ });
210
+ it('parses brand with defaults', () => {
211
+ expect(parseBrand({}).mode).toBe('inheritPublicBrand');
212
+ });
213
+ it('collects unique asset ids', () => {
214
+ const brand = {
215
+ mode: 'customAdminBrand',
216
+ publicPrimaryLogoAssetId: 'a',
217
+ adminPrimaryLogoAssetId: 'a', // duplicate
218
+ faviconSourceAssetId: 'b',
219
+ generatedFaviconAssetIds: ['c', 'b'],
220
+ };
221
+ expect(brandAssetIds(brand).sort()).toEqual(['a', 'b', 'c']);
222
+ });
223
+ });
224
+ describe('resolveBrand (async)', () => {
225
+ it('reads the settings global and resolves every view', async () => {
226
+ const db = {
227
+ document: {
228
+ findFirst: async () => ({
229
+ data: {
230
+ siteTitle: 'Actuate Media',
231
+ brand: {
232
+ mode: 'inheritPublicBrand',
233
+ publicPrimaryLogoAssetId: 'primary-1',
234
+ faviconSourceAssetId: 'fav-1',
235
+ updatedAt: '2026-02-03T00:00:00.000Z',
236
+ },
237
+ },
238
+ }),
239
+ },
240
+ media: {
241
+ findMany: async () => [
242
+ {
243
+ id: 'primary-1',
244
+ publicUrl: HORIZONTAL.publicUrl,
245
+ mimeType: 'image/svg+xml',
246
+ width: 400,
247
+ height: 100,
248
+ },
249
+ {
250
+ id: 'fav-1',
251
+ publicUrl: FAVICON.publicUrl,
252
+ mimeType: 'image/png',
253
+ width: 32,
254
+ height: 32,
255
+ },
256
+ ],
257
+ },
258
+ };
259
+ const r = await resolveBrand(db, null);
260
+ expect(r.admin.primary?.url).toBe(HORIZONTAL.publicUrl);
261
+ expect(r.public.primary?.url).toBe(HORIZONTAL.publicUrl);
262
+ expect(r.favicon.icon).toContain(FAVICON.publicUrl);
263
+ expect(r.admin.initials).toBe('AM');
264
+ });
265
+ it('degrades gracefully with no media table', async () => {
266
+ const db = { document: { findFirst: async () => ({ data: {} }) } };
267
+ const r = await resolveBrand(db, 'Globex');
268
+ expect(r.admin.primary).toBeNull();
269
+ expect(r.favicon.icon).toBeNull();
270
+ expect(r.public.initials).toBe('GL');
271
+ });
272
+ });
273
+ //# sourceMappingURL=appearance.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"appearance.test.js","sourceRoot":"","sources":["../../../src/__tests__/appearance/appearance.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,mBAAmB,EACnB,wBAAwB,EACxB,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,UAAU,EACV,aAAa,EACb,YAAY,EACZ,kBAAkB,GACnB,MAAM,2BAA2B,CAAA;AAGlC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAClD,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA,CAAC,YAAY;QAC/D,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA,CAAC,UAAU;QACjE,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA,CAAC,aAAa;QAClE,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA,CAAC,YAAY;IAClE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC/D,MAAM,CAAC,iBAAiB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACjD,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;IACjF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,gBAAgB,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAA;IAC9F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,gBAAgB,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QACtE,MAAM,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC/D,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACrE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3D,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3C,MAAM,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrD,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,sEAAsE;QACtE,MAAM,CAAC,aAAa,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;IAC7E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/C,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAA;QAC5C,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC3B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAA,CAAC,2BAA2B;QACpE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC3B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,wBAAwB,CAAC,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAC7E,cAAc,CAAC,IAAI,CAAC,KAAK,CAC1B,CAAA;QACD,MAAM,CAAC,wBAAwB,CAAC,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAC5E,cAAc,CAAC,IAAI,CAAC,IAAI,CACzB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,MAAM,GAAG,wBAAwB,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,CAAA;QACjF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,wBAAwB,CAAC,EAAE,gBAAgB,EAAE,YAAY,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CACnF,cAAc,CAAC,MAAM,CAAC,KAAK,CAC5B,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,IAAI,GAAG,qBAAqB,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC/D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CACtC;YACE,SAAS;YACT,oBAAoB;YACpB,WAAW;YACX,sBAAsB;YACtB,QAAQ;YACR,mBAAmB;YACnB,8BAA8B;SAC/B,CAAC,IAAI,EAAE,CACT,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChD,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC1C,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAClC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,SAAS,QAAQ,CAAC,GAAG,MAAwB;IAC3C,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;AAC9C,CAAC;AAED,MAAM,UAAU,GAAmB;IACjC,EAAE,EAAE,WAAW;IACf,SAAS,EAAE,kCAAkC;IAC7C,QAAQ,EAAE,eAAe;IACzB,KAAK,EAAE,GAAG;IACV,MAAM,EAAE,GAAG;CACZ,CAAA;AACD,MAAM,IAAI,GAAmB;IAC3B,EAAE,EAAE,QAAQ;IACZ,SAAS,EAAE,kCAAkC;IAC7C,QAAQ,EAAE,eAAe;IACzB,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,EAAE;CACX,CAAA;AACD,MAAM,OAAO,GAAmB;IAC9B,EAAE,EAAE,OAAO;IACX,SAAS,EAAE,qCAAqC;IAChD,QAAQ,EAAE,WAAW;IACrB,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,EAAE;CACX,CAAA;AAED,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,KAAK,GAAkB;YAC3B,IAAI,EAAE,oBAAoB;YAC1B,wBAAwB,EAAE,WAAW;YACrC,qBAAqB,EAAE,QAAQ;SAChC,CAAA;QACD,MAAM,CAAC,GAAG,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,eAAe,CAAC,CAAA;QAC/E,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9B,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACjD,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACxC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC3C,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,YAAY,GAAmB,EAAE,GAAG,UAAU,EAAE,EAAE,EAAE,eAAe,EAAE,CAAA;QAC3E,MAAM,KAAK,GAAkB;YAC3B,IAAI,EAAE,kBAAkB;YACxB,uBAAuB,EAAE,eAAe;YACxC,qBAAqB,EAAE,QAAQ;SAChC,CAAA;QACD,MAAM,CAAC,GAAG,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,eAAe,CAAC,CAAA;QACjF,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC/B,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;QACnD,iDAAiD;QACjD,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,KAAK,GAAkB;YAC3B,IAAI,EAAE,oBAAoB;YAC1B,wBAAwB,EAAE,WAAW;YACrC,oBAAoB,EAAE,OAAO;SAC9B,CAAA;QACD,MAAM,CAAC,GAAG,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,eAAe,CAAC,CAAA;QAClF,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,GAAG,iBAAiB,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,QAAQ,EAAE,EAAE,aAAa,CAAC,CAAA;QACtF,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC5B,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;QACzB,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,KAAK,GAAkB;YAC3B,IAAI,EAAE,kBAAkB,EAAE,kCAAkC;YAC5D,wBAAwB,EAAE,WAAW;YACrC,oBAAoB,EAAE,OAAO;SAC9B,CAAA;QACD,MAAM,CAAC,GAAG,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,eAAe,CAAC,CAAA;QACnF,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACjD,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,GAAG,kBAAkB,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;QACxE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;QACzB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,KAAK,GAAkB;YAC3B,IAAI,EAAE,oBAAoB;YAC1B,oBAAoB,EAAE,OAAO;YAC7B,SAAS,EAAE,0BAA0B;SACtC,CAAA;QACD,MAAM,CAAC,GAAG,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;QACtD,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAU,CAAC,EAAE,CAAC,CAAA;QAC7E,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAC5B,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;QACvD,MAAM,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,IAAI,CACzF,MAAM,CACP,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,KAAK,GAAkB;YAC3B,IAAI,EAAE,kBAAkB;YACxB,wBAAwB,EAAE,GAAG;YAC7B,uBAAuB,EAAE,GAAG,EAAE,YAAY;YAC1C,oBAAoB,EAAE,GAAG;YACzB,wBAAwB,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;SACrC,CAAA;QACD,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,EAAE,GAAG;YACT,QAAQ,EAAE;gBACR,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;oBACtB,IAAI,EAAE;wBACJ,SAAS,EAAE,eAAe;wBAC1B,KAAK,EAAE;4BACL,IAAI,EAAE,oBAAoB;4BAC1B,wBAAwB,EAAE,WAAW;4BACrC,oBAAoB,EAAE,OAAO;4BAC7B,SAAS,EAAE,0BAA0B;yBACtC;qBACF;iBACF,CAAC;aACH;YACD,KAAK,EAAE;gBACL,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC;oBACpB;wBACE,EAAE,EAAE,WAAW;wBACf,SAAS,EAAE,UAAU,CAAC,SAAS;wBAC/B,QAAQ,EAAE,eAAe;wBACzB,KAAK,EAAE,GAAG;wBACV,MAAM,EAAE,GAAG;qBACZ;oBACD;wBACE,EAAE,EAAE,OAAO;wBACX,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,QAAQ,EAAE,WAAW;wBACrB,KAAK,EAAE,EAAE;wBACT,MAAM,EAAE,EAAE;qBACX;iBACF;aACF;SACF,CAAA;QACD,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;QACtC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACvD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACxD,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACnD,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAA;QAClE,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;QAC1C,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;QAClC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;QACjC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=center.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"center.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/security/center.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,226 @@
1
+ import { describe, expect, it } from 'vitest';
2
+ import { DEFAULT_SECURITY_SETTINGS, computeSecurityStatus, mfaEnableLockoutError, parseSecuritySettings, summarizeApiKeys, summarizeUsers, validateIpRange, validateSecuritySettings, } from '../../security/center/index.js';
3
+ function baseInput(overrides = {}) {
4
+ return {
5
+ isProduction: true,
6
+ settings: {
7
+ mfa: { required: true, gracePeriodDays: 7 },
8
+ session: { maxConcurrentSessions: 5 },
9
+ },
10
+ users: {
11
+ totalUsers: 3,
12
+ totalAdmins: 2,
13
+ withMfa: 2,
14
+ withoutMfa: 1,
15
+ adminsWithoutMfa: 0,
16
+ inactive: 0,
17
+ },
18
+ apiKeys: { active: 1, withoutExpiration: 0, broadScope: 0, staleUnused90d: 0 },
19
+ secrets: {
20
+ cmsSecret: 'pass',
21
+ encryptionKey: 'pass',
22
+ rateLimitBackend: 'distributed',
23
+ apiKeysHashed: true,
24
+ webhookSecretsEncrypted: true,
25
+ },
26
+ ipAllowlist: {
27
+ enabled: false,
28
+ source: 'none',
29
+ ranges: [],
30
+ currentIp: '1.2.3.4',
31
+ currentIpAllowed: null,
32
+ },
33
+ failedLogins24h: 0,
34
+ activeSessions: 1,
35
+ csrfEnabled: true,
36
+ uploadValidation: true,
37
+ auditEnabled: true,
38
+ ...overrides,
39
+ };
40
+ }
41
+ describe('computeSecurityStatus', () => {
42
+ it('reports secure when all controls pass', () => {
43
+ const status = computeSecurityStatus(baseInput());
44
+ expect(status.status).toBe('secure');
45
+ expect(status.score).toBe(100);
46
+ expect(status.warnings).toHaveLength(0);
47
+ // Every advertised check is present.
48
+ const keys = status.checks.map((c) => c.key);
49
+ expect(keys).toEqual(expect.arrayContaining([
50
+ 'mfa',
51
+ 'sessions',
52
+ 'api_keys',
53
+ 'csrf',
54
+ 'rate_limit',
55
+ 'cms_secret',
56
+ 'audit',
57
+ ]));
58
+ });
59
+ it('is at_risk when CSRF is disabled', () => {
60
+ const status = computeSecurityStatus(baseInput({ csrfEnabled: false }));
61
+ expect(status.status).toBe('at_risk');
62
+ expect(status.warnings.some((w) => w.id === 'csrf-disabled' && w.severity === 'critical')).toBe(true);
63
+ expect(status.score).toBeLessThan(100);
64
+ });
65
+ it('is at_risk when MFA is required but an admin has not enrolled', () => {
66
+ const status = computeSecurityStatus(baseInput({
67
+ users: {
68
+ totalUsers: 3,
69
+ totalAdmins: 2,
70
+ withMfa: 1,
71
+ withoutMfa: 1,
72
+ adminsWithoutMfa: 1,
73
+ inactive: 0,
74
+ },
75
+ }));
76
+ expect(status.status).toBe('at_risk');
77
+ expect(status.warnings.some((w) => w.id === 'mfa-required-gap')).toBe(true);
78
+ const mfaCheck = status.checks.find((c) => c.key === 'mfa');
79
+ expect(mfaCheck?.status).toBe('fail');
80
+ });
81
+ it('is at_risk in production when CMS_SECRET is missing', () => {
82
+ const status = computeSecurityStatus(baseInput({ secrets: { ...baseInput().secrets, cmsSecret: 'fail' } }));
83
+ expect(status.status).toBe('at_risk');
84
+ expect(status.warnings.some((w) => w.id === 'cms-secret-missing')).toBe(true);
85
+ });
86
+ it('needs_attention when MFA is not required in production', () => {
87
+ const status = computeSecurityStatus(baseInput({
88
+ settings: {
89
+ mfa: { required: false, gracePeriodDays: 7 },
90
+ session: { maxConcurrentSessions: 5 },
91
+ },
92
+ }));
93
+ expect(status.status).toBe('needs_attention');
94
+ expect(status.warnings.some((w) => w.id === 'mfa-not-required')).toBe(true);
95
+ });
96
+ it('warns (not critical) about in-memory rate limiting in production', () => {
97
+ const status = computeSecurityStatus(baseInput({ secrets: { ...baseInput().secrets, rateLimitBackend: 'in_memory' } }));
98
+ expect(status.status).toBe('needs_attention');
99
+ expect(status.warnings.some((w) => w.id === 'rate-limit-in-memory')).toBe(true);
100
+ });
101
+ it('is unknown when secret state cannot be determined', () => {
102
+ const status = computeSecurityStatus(baseInput({ secrets: { ...baseInput().secrets, cmsSecret: 'unknown' } }));
103
+ expect(status.status).toBe('unknown');
104
+ });
105
+ it('flags broad-scope API keys as a failing check', () => {
106
+ const status = computeSecurityStatus(baseInput({ apiKeys: { active: 2, withoutExpiration: 0, broadScope: 1, staleUnused90d: 0 } }));
107
+ expect(status.checks.find((c) => c.key === 'api_keys')?.status).toBe('fail');
108
+ expect(status.warnings.some((w) => w.id === 'api-keys-broad')).toBe(true);
109
+ });
110
+ });
111
+ describe('validateSecuritySettings', () => {
112
+ it('accepts valid settings', () => {
113
+ expect(validateSecuritySettings(DEFAULT_SECURITY_SETTINGS)).toEqual([]);
114
+ });
115
+ it('rejects an out-of-range grace period', () => {
116
+ const issues = validateSecuritySettings({
117
+ mfa: { required: true, gracePeriodDays: 999 },
118
+ session: { maxConcurrentSessions: 5 },
119
+ });
120
+ expect(issues.some((i) => i.field === 'mfaGracePeriodDays' && i.severity === 'error')).toBe(true);
121
+ });
122
+ it('rejects an out-of-range concurrent session cap', () => {
123
+ const issues = validateSecuritySettings({
124
+ mfa: { required: false, gracePeriodDays: 0 },
125
+ session: { maxConcurrentSessions: -1 },
126
+ });
127
+ expect(issues.some((i) => i.field === 'maxConcurrentSessions')).toBe(true);
128
+ });
129
+ });
130
+ describe('parseSecuritySettings', () => {
131
+ it('returns defaults for an empty blob', () => {
132
+ expect(parseSecuritySettings({})).toEqual(DEFAULT_SECURITY_SETTINGS);
133
+ });
134
+ it('coerces and clamps values', () => {
135
+ const parsed = parseSecuritySettings({
136
+ security: {
137
+ mfa: { required: 'yes', gracePeriodDays: 9999 },
138
+ session: { maxConcurrentSessions: -5 },
139
+ },
140
+ });
141
+ expect(parsed.mfa.required).toBe(true);
142
+ expect(parsed.mfa.gracePeriodDays).toBe(365);
143
+ expect(parsed.session.maxConcurrentSessions).toBe(0);
144
+ });
145
+ it('preserves requiredAt when present', () => {
146
+ const parsed = parseSecuritySettings({
147
+ security: {
148
+ mfa: { required: true, gracePeriodDays: 1, requiredAt: '2026-01-01T00:00:00.000Z' },
149
+ },
150
+ });
151
+ expect(parsed.mfa.requiredAt).toBe('2026-01-01T00:00:00.000Z');
152
+ });
153
+ });
154
+ describe('validateIpRange', () => {
155
+ it.each([
156
+ '192.168.1.1',
157
+ '10.0.0.0/8',
158
+ '172.16.0.0/12',
159
+ '0.0.0.0/0',
160
+ '2001:db8::1',
161
+ '2001:db8::/32',
162
+ '::1',
163
+ ])('accepts %s', (entry) => {
164
+ expect(validateIpRange(entry)).toBe(true);
165
+ });
166
+ it.each(['', 'not-an-ip', '999.1.1.1', '10.0.0.0/33', '1.2.3.4/abc', '2001:db8::/129', '1.2.3'])('rejects %s', (entry) => {
167
+ expect(validateIpRange(entry)).toBe(false);
168
+ });
169
+ });
170
+ describe('mfaEnableLockoutError', () => {
171
+ it('blocks enabling MFA when the acting admin has no MFA', () => {
172
+ expect(mfaEnableLockoutError({ enabling: true, viewerHasMfa: false, totalAdmins: 1 })).toMatch(/lock yourself out/i);
173
+ });
174
+ it('allows enabling when the acting admin has MFA', () => {
175
+ expect(mfaEnableLockoutError({ enabling: true, viewerHasMfa: true, totalAdmins: 1 })).toBeNull();
176
+ });
177
+ it('never blocks when not enabling', () => {
178
+ expect(mfaEnableLockoutError({ enabling: false, viewerHasMfa: false, totalAdmins: 3 })).toBeNull();
179
+ });
180
+ });
181
+ describe('summarizeUsers', () => {
182
+ it('counts admin MFA coverage and inactive accounts', () => {
183
+ const summary = summarizeUsers([
184
+ { role: 'ADMIN', isActive: true, totpEnabled: true },
185
+ { role: 'ADMIN', isActive: true, totpEnabled: false },
186
+ { role: 'EDITOR', isActive: true, totpEnabled: false },
187
+ { role: 'ADMIN', isActive: false, totpEnabled: false },
188
+ ]);
189
+ expect(summary.totalUsers).toBe(4);
190
+ expect(summary.totalAdmins).toBe(3);
191
+ expect(summary.withMfa).toBe(1);
192
+ expect(summary.adminsWithoutMfa).toBe(1); // inactive admin excluded
193
+ expect(summary.inactive).toBe(1);
194
+ });
195
+ });
196
+ describe('summarizeApiKeys', () => {
197
+ const now = Date.parse('2026-06-01T00:00:00.000Z');
198
+ it('classifies risk and excludes revoked/expired keys', () => {
199
+ const summary = summarizeApiKeys([
200
+ { scopes: { admin: true }, expiresAt: null, lastUsedAt: null, revokedAt: null },
201
+ {
202
+ scopes: { media: true },
203
+ expiresAt: '2026-12-01T00:00:00.000Z',
204
+ lastUsedAt: '2026-01-01T00:00:00.000Z',
205
+ revokedAt: null,
206
+ },
207
+ {
208
+ scopes: { media: true },
209
+ expiresAt: '2020-01-01T00:00:00.000Z',
210
+ lastUsedAt: null,
211
+ revokedAt: null,
212
+ }, // expired
213
+ {
214
+ scopes: { admin: true },
215
+ expiresAt: null,
216
+ lastUsedAt: null,
217
+ revokedAt: '2026-01-01T00:00:00.000Z',
218
+ }, // revoked
219
+ ], now);
220
+ expect(summary.active).toBe(2);
221
+ expect(summary.broadScope).toBe(1);
222
+ expect(summary.withoutExpiration).toBe(1);
223
+ expect(summary.staleUnused90d).toBe(1); // key 2 last used > 90d before `now`
224
+ });
225
+ });
226
+ //# sourceMappingURL=center.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"center.test.js","sourceRoot":"","sources":["../../../src/__tests__/security/center.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,wBAAwB,GAEzB,MAAM,gCAAgC,CAAA;AAEvC,SAAS,SAAS,CAAC,YAA0C,EAAE;IAC7D,OAAO;QACL,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE;YACR,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE;YAC3C,OAAO,EAAE,EAAE,qBAAqB,EAAE,CAAC,EAAE;SACtC;QACD,KAAK,EAAE;YACL,UAAU,EAAE,CAAC;YACb,WAAW,EAAE,CAAC;YACd,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,CAAC;YACb,gBAAgB,EAAE,CAAC;YACnB,QAAQ,EAAE,CAAC;SACZ;QACD,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE;QAC9E,OAAO,EAAE;YACP,SAAS,EAAE,MAAM;YACjB,aAAa,EAAE,MAAM;YACrB,gBAAgB,EAAE,aAAa;YAC/B,aAAa,EAAE,IAAI;YACnB,uBAAuB,EAAE,IAAI;SAC9B;QACD,WAAW,EAAE;YACX,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,SAAS;YACpB,gBAAgB,EAAE,IAAI;SACvB;QACD,eAAe,EAAE,CAAC;QAClB,cAAc,EAAE,CAAC;QACjB,WAAW,EAAE,IAAI;QACjB,gBAAgB,EAAE,IAAI;QACtB,YAAY,EAAE,IAAI;QAClB,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,EAAE,CAAC,CAAA;QACjD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACvC,qCAAqC;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAClB,MAAM,CAAC,eAAe,CAAC;YACrB,KAAK;YACL,UAAU;YACV,UAAU;YACV,MAAM;YACN,YAAY;YACZ,YAAY;YACZ,OAAO;SACR,CAAC,CACH,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;QACvE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,eAAe,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAC7F,IAAI,CACL,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,MAAM,GAAG,qBAAqB,CAClC,SAAS,CAAC;YACR,KAAK,EAAE;gBACL,UAAU,EAAE,CAAC;gBACb,WAAW,EAAE,CAAC;gBACd,OAAO,EAAE,CAAC;gBACV,UAAU,EAAE,CAAC;gBACb,gBAAgB,EAAE,CAAC;gBACnB,QAAQ,EAAE,CAAC;aACZ;SACF,CAAC,CACH,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3E,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,CAAA;QAC3D,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,MAAM,GAAG,qBAAqB,CAClC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,SAAS,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CACtE,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,MAAM,GAAG,qBAAqB,CAClC,SAAS,CAAC;YACR,QAAQ,EAAE;gBACR,GAAG,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE;gBAC5C,OAAO,EAAE,EAAE,qBAAqB,EAAE,CAAC,EAAE;aACtC;SACF,CAAC,CACH,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QAC7C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,MAAM,GAAG,qBAAqB,CAClC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,SAAS,EAAE,CAAC,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,EAAE,CAAC,CAClF,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QAC7C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACjF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,MAAM,GAAG,qBAAqB,CAClC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,SAAS,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CACzE,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,MAAM,GAAG,qBAAqB,CAClC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC,CAC9F,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC5E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,wBAAwB,CAAC,yBAAyB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,wBAAwB,CAAC;YACtC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE;YAC7C,OAAO,EAAE,EAAE,qBAAqB,EAAE,CAAC,EAAE;SACtC,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,oBAAoB,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CACzF,IAAI,CACL,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,MAAM,GAAG,wBAAwB,CAAC;YACtC,GAAG,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE;YAC5C,OAAO,EAAE,EAAE,qBAAqB,EAAE,CAAC,CAAC,EAAE;SACvC,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAA;IACtE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,MAAM,GAAG,qBAAqB,CAAC;YACnC,QAAQ,EAAE;gBACR,GAAG,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE;gBAC/C,OAAO,EAAE,EAAE,qBAAqB,EAAE,CAAC,CAAC,EAAE;aACvC;SACF,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,MAAM,GAAG,qBAAqB,CAAC;YACnC,QAAQ,EAAE;gBACR,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE,UAAU,EAAE,0BAA0B,EAAE;aACpF;SACF,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,IAAI,CAAC;QACN,aAAa;QACb,YAAY;QACZ,eAAe;QACf,WAAW;QACX,aAAa;QACb,eAAe;QACf,KAAK;KACN,CAAC,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE;QACzB,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAC9F,YAAY,EACZ,CAAC,KAAK,EAAE,EAAE;QACR,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5C,CAAC,CACF,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,qBAAqB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAC5F,oBAAoB,CACrB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,qBAAqB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAClG,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CACJ,qBAAqB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAChF,CAAC,QAAQ,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,OAAO,GAAG,cAAc,CAAC;YAC7B,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;YACpD,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE;YACrD,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE;YACtD,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE;SACvD,CAAC,CAAA;QACF,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAClC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA,CAAC,0BAA0B;QACnE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAA;IAElD,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,OAAO,GAAG,gBAAgB,CAC9B;YACE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;YAC/E;gBACE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;gBACvB,SAAS,EAAE,0BAA0B;gBACrC,UAAU,EAAE,0BAA0B;gBACtC,SAAS,EAAE,IAAI;aAChB;YACD;gBACE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;gBACvB,SAAS,EAAE,0BAA0B;gBACrC,UAAU,EAAE,IAAI;gBAChB,SAAS,EAAE,IAAI;aAChB,EAAE,UAAU;YACb;gBACE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;gBACvB,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,IAAI;gBAChB,SAAS,EAAE,0BAA0B;aACtC,EAAE,UAAU;SACd,EACD,GAAG,CACJ,CAAA;QACD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAClC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACzC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA,CAAC,qCAAqC;IAC9E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
@@ -1 +1 @@
1
- {"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/api/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AA+/B5C,iFAAiF;AACjF,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AA8JD,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAS9E;AAyRD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA0tUzD"}
1
+ {"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/api/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AA+/B5C,iFAAiF;AACjF,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AA8JD,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAS9E;AAiTD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA68UzD"}