@actuate-media/cms-core 0.83.0 → 0.85.0

package/dist/__tests__/api/totp-login.test.js

@@ -1,115 +0,0 @@
-import { beforeEach, describe, expect, it } from 'vitest';
-import { handleActuateAPI } from '../../api/index.js';
-import { initDB } from '../../db.js';
-import { encryptSecret, encryptStringArray } from '../../security/secret-storage.js';
-import { createMfaPendingToken, computeRequestFingerprint } from '../../auth/mfa-pending.js';
-import { generateTOTPSecret } from '../../auth/totp.js';
-/**
- * Contract test for the backup-code recovery path of POST /auth/totp/login.
- *
- * Backup codes are generated and shown at enrollment but, before this, were
- * never consumed anywhere — a lost authenticator meant permanent lockout. This
- * proves a valid code signs the user in, is single-use (consumed on success),
- * and that an unknown code is rejected.
- */
-const SECRET = 'a'.repeat(48);
-const ENCRYPTION_KEY = 'b'.repeat(64); // 32 bytes hex
-const BACKUP_CODES = ['aaaa1111', 'bbbb2222', 'cccc3333'];
-async function createMockDB(state) {
-    const totpSecret = await encryptSecret(generateTOTPSecret());
-    return {
-        user: {
-            findUnique: async () => ({
-                id: 'user-1',
-                email: 'admin@example.com',
-                name: 'Admin',
-                role: 'ADMIN',
-                totpSecret,
-                totpEnabled: true,
-                backupCodes: await encryptStringArray(state.backupCodes),
-                isActive: true,
-            }),
-            update: async ({ data }) => {
-                // The handler re-encrypts the remaining codes; decrypt-by-count is
-                // enough for the assertion (we only check how many remain).
-                state.backupCodes = state.backupCodes.slice(0, data.backupCodes.length);
-                return { id: 'user-1' };
-            },
-        },
-        document: {
-            findFirst: async () => ({ data: {} }),
-        },
-        session: {
-            findMany: async () => [],
-            create: async () => ({ id: 'sess-1' }),
-            updateMany: async () => ({ count: 0 }),
-        },
-        auditLog: {
-            create: async () => ({ id: 'log-1' }),
-        },
-    };
-}
-async function makePendingToken(ip, userAgent) {
-    const fingerprint = await computeRequestFingerprint(ip, userAgent);
-    return createMfaPendingToken({ userId: 'user-1', fingerprint }, SECRET);
-}
-beforeEach(() => {
-    delete globalThis.__actuateConfig;
-    process.env.CMS_SECRET = SECRET;
-    process.env.CMS_ENCRYPTION_KEY = ENCRYPTION_KEY;
-});
-describe('POST /auth/totp/login — backup code recovery', () => {
-    it('signs in with a valid backup code and consumes it (single-use)', async () => {
-        const ip = '203.0.113.10';
-        const ua = 'vitest-agent';
-        const state = { backupCodes: [...BACKUP_CODES] };
-        const db = await createMockDB(state);
-        initDB(db);
-        const handler = handleActuateAPI({ prismaClient: db, config: { collections: {} } });
-        const token = await makePendingToken(ip, ua);
-        const res = await handler(new Request('https://example.com/api/cms/auth/totp/login', {
-            method: 'POST',
-            headers: { 'x-real-ip': ip, 'user-agent': ua, 'content-type': 'application/json' },
-            body: JSON.stringify({ mfaPendingToken: token, code: 'BBBB-2222' }),
-        }));
-        expect(res.status).toBe(200);
-        expect(res.headers.get('set-cookie')).toContain('actuate_session=');
-        // The used code was removed — one fewer remains.
-        expect(state.backupCodes).toHaveLength(BACKUP_CODES.length - 1);
-    });
-    it('rejects an unknown code', async () => {
-        const ip = '203.0.113.11';
-        const ua = 'vitest-agent';
-        const state = { backupCodes: [...BACKUP_CODES] };
-        const db = await createMockDB(state);
-        initDB(db);
-        const handler = handleActuateAPI({ prismaClient: db, config: { collections: {} } });
-        const token = await makePendingToken(ip, ua);
-        const res = await handler(new Request('https://example.com/api/cms/auth/totp/login', {
-            method: 'POST',
-            headers: { 'x-real-ip': ip, 'user-agent': ua, 'content-type': 'application/json' },
-            body: JSON.stringify({ mfaPendingToken: token, code: 'deadbeef' }),
-        }));
-        expect(res.status).toBe(401);
-        expect(state.backupCodes).toHaveLength(BACKUP_CODES.length);
-    });
-    it('rejects a stale pending token from a different device fingerprint', async () => {
-        const state = { backupCodes: [...BACKUP_CODES] };
-        const db = await createMockDB(state);
-        initDB(db);
-        const handler = handleActuateAPI({ prismaClient: db, config: { collections: {} } });
-        // Token minted for one device, redeemed from another (different UA).
-        const token = await makePendingToken('203.0.113.12', 'device-a');
-        const res = await handler(new Request('https://example.com/api/cms/auth/totp/login', {
-            method: 'POST',
-            headers: {
-                'x-real-ip': '203.0.113.12',
-                'user-agent': 'device-b',
-                'content-type': 'application/json',
-            },
-            body: JSON.stringify({ mfaPendingToken: token, code: 'aaaa1111' }),
-        }));
-        expect(res.status).toBe(401);
-    });
-});
-//# sourceMappingURL=totp-login.test.js.map

package/dist/__tests__/api/totp-login.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"totp-login.test.js","sourceRoot":"","sources":["../../../src/__tests__/api/totp-login.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAEzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AACpF,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AAC5F,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAEvD;;;;;;;GAOG;AACH,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AAC7B,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA,CAAC,eAAe;AAErD,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;AAMzD,KAAK,UAAU,YAAY,CAAC,KAAoB;IAC9C,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,kBAAkB,EAAE,CAAC,CAAA;IAC5D,OAAO;QACL,IAAI,EAAE;YACJ,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;gBACvB,EAAE,EAAE,QAAQ;gBACZ,KAAK,EAAE,mBAAmB;gBAC1B,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,OAAO;gBACb,UAAU;gBACV,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,MAAM,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC;gBACxD,QAAQ,EAAE,IAAI;aACf,CAAC;YACF,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAuC,EAAE,EAAE;gBAC9D,mEAAmE;gBACnE,4DAA4D;gBAC5D,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;gBACvE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAA;YACzB,CAAC;SACF;QACD,QAAQ,EAAE;YACR,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;SACtC;QACD,OAAO,EAAE;YACP,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;YACxB,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;YACtC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;SACvC;QACD,QAAQ,EAAE;YACR,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;SACtC;KACK,CAAA;AACV,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,EAAU,EAAE,SAAiB;IAC3D,MAAM,WAAW,GAAG,MAAM,yBAAyB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAA;IAClE,OAAO,qBAAqB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,CAAA;AACzE,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,OAAQ,UAAkB,CAAC,eAAe,CAAA;IAC1C,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAA;IAC/B,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,cAAc,CAAA;AACjD,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,EAAE,GAAG,cAAc,CAAA;QACzB,MAAM,EAAE,GAAG,cAAc,CAAA;QACzB,MAAM,KAAK,GAAkB,EAAE,WAAW,EAAE,CAAC,GAAG,YAAY,CAAC,EAAE,CAAA;QAC/D,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAA;QACpC,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QAEnF,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAC5C,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,6CAA6C,EAAE;YACzD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAClF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;SACpE,CAAC,CACH,CAAA;QAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;QACnE,iDAAiD;QACjD,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,EAAE,GAAG,cAAc,CAAA;QACzB,MAAM,EAAE,GAAG,cAAc,CAAA;QACzB,MAAM,KAAK,GAAkB,EAAE,WAAW,EAAE,CAAC,GAAG,YAAY,CAAC,EAAE,CAAA;QAC/D,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAA;QACpC,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QAEnF,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAC5C,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,6CAA6C,EAAE;YACzD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAClF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;SACnE,CAAC,CACH,CAAA;QAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,KAAK,GAAkB,EAAE,WAAW,EAAE,CAAC,GAAG,YAAY,CAAC,EAAE,CAAA;QAC/D,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAA;QACpC,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QAEnF,qEAAqE;QACrE,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,cAAc,EAAE,UAAU,CAAC,CAAA;QAChE,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,6CAA6C,EAAE;YACzD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,WAAW,EAAE,cAAc;gBAC3B,YAAY,EAAE,UAAU;gBACxB,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;SACnE,CAAC,CACH,CAAA;QAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/api/updates-routes.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=updates-routes.test.d.ts.map

package/dist/__tests__/api/updates-routes.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"updates-routes.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/api/updates-routes.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/api/updates-routes.test.js

@@ -1,248 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
-import { handleActuateAPI } from '../../api/index.js';
-import { initDB } from '../../db.js';
-import { generateApiKey } from '../../security/api-key-enhanced.js';
-/**
- * Contract tests for the Settings → Updates endpoints:
- *   - GET  /updates/check   → any authed session; admins additionally see the
- *                              GitHub-integration config hints (`canManage`).
- *   - GET  /updates/config  → admin only.
- *   - PUT  /updates/config  → admin only; encrypts credentials at rest.
- *   - POST /updates/apply   → admin only.
- *
- * Regression guard for the role-check bug where these routes compared
- * `session.role !== 'admin'` (lowercase) while roles are stored uppercase
- * (`'ADMIN'` / `'OWNER'`) — which 403'd every real admin. Admin auth here is
- * exercised through an admin-scoped API key (the same path real admin sessions
- * resolve through `requireAdminScope`).
- */
-const VALID_SECRET = 'a'.repeat(48);
-const VALID_ENC_KEY = 'a'.repeat(64);
-function createMockDB(state, apiKey) {
-    return {
-        apiKey: {
-            findMany: async () => (apiKey ? [apiKey] : []),
-            findUnique: async ({ where }) => apiKey && apiKey.keyHash === where.keyHash ? apiKey : null,
-            update: async () => apiKey,
-        },
-        document: {
-            findFirst: async () => state.configDoc,
-            upsert: async (args) => {
-                state.upsertArgs = args;
-                return { id: 'cfg-doc' };
-            },
-        },
-        user: { count: async () => 1 },
-        auditLog: { create: async () => ({ id: 'log1' }) },
-        version: { create: async () => ({ id: 'v1' }) },
-    };
-}
-async function makeKey(scopes) {
-    const { key, keyHash, keyPrefix } = await generateApiKey({ prefix: 'act_sk', scopes });
-    return {
-        key,
-        record: {
-            id: 'apikey-1',
-            keyHash,
-            keyPrefix,
-            userId: 'user-1',
-            scopes,
-            ipRestrictions: null,
-            expiresAt: null,
-            lastUsedAt: null,
-            revokedAt: null,
-        },
-    };
-}
-function freshState() {
-    return { configDoc: null };
-}
-beforeEach(() => {
-    delete globalThis.__actuateConfig;
-    process.env.CMS_SECRET = VALID_SECRET;
-    process.env.CMS_ENCRYPTION_KEY = VALID_ENC_KEY;
-    delete process.env.ACTUATE_GITHUB_TOKEN;
-    delete process.env.ACTUATE_GITHUB_REPO;
-});
-afterEach(() => {
-    vi.restoreAllMocks();
-});
-/**
- * Stub the network so `checkForUpdates` (and the future update-server hybrid)
- * resolve deterministically without hitting npm. The update-server URL is
- * forced to fail so the npm-registry fallback path is what we assert.
- */
-function stubUpdateNetwork(latest = '0.46.0') {
-    vi.spyOn(globalThis, 'fetch').mockImplementation(async (input) => {
-        const url = String(input);
-        if (url.includes('registry.npmjs.org')) {
-            return new Response(JSON.stringify({
-                'dist-tags': { latest },
-                time: { [latest]: '2026-01-01T00:00:00.000Z' },
-                versions: { [latest]: {} },
-            }), { status: 200, headers: { 'Content-Type': 'application/json' } });
-        }
-        // Any update-server call fails → exercises the npm fallback.
-        return new Response('unavailable', { status: 503 });
-    });
-}
-describe('GET /updates/check', () => {
-    it('requires authentication', async () => {
-        const db = createMockDB(freshState());
-        initDB(db);
-        const handler = handleActuateAPI({ prismaClient: db, config: { collections: {} } });
-        const res = await handler(new Request('https://example.com/api/cms/updates/check'));
-        expect(res.status).toBe(401);
-    });
-    it('returns version info to a non-admin session without GitHub config hints', async () => {
-        stubUpdateNetwork();
-        const { key, record } = await makeKey({ media: true });
-        const db = createMockDB(freshState(), record);
-        initDB(db);
-        const handler = handleActuateAPI({ prismaClient: db, config: { collections: {} } });
-        const res = await handler(new Request('https://example.com/api/cms/updates/check', {
-            headers: { Authorization: `Bearer ${key}` },
-        }));
-        expect(res.status).toBe(200);
-        const body = (await res.json());
-        expect(body.data.canManage).toBe(false);
-        expect(body.data.githubRepo).toBeUndefined();
-        expect(body.data).not.toHaveProperty('hasGithubToken');
-        expect(typeof body.data.current).toBe('string');
-    });
-    it('exposes GitHub config hints to admins', async () => {
-        stubUpdateNetwork();
-        const { key, record } = await makeKey({ admin: true });
-        const db = createMockDB(freshState(), record);
-        initDB(db);
-        const handler = handleActuateAPI({ prismaClient: db, config: { collections: {} } });
-        const res = await handler(new Request('https://example.com/api/cms/updates/check', {
-            headers: { Authorization: `Bearer ${key}` },
-        }));
-        expect(res.status).toBe(200);
-        const body = (await res.json());
-        expect(body.data.canManage).toBe(true);
-        expect(body.data.hasGithubToken).toBe(false);
-        expect(body.data).toHaveProperty('githubRepo');
-    });
-});
-describe('GET /updates/config', () => {
-    it('rejects unauthenticated requests', async () => {
-        const db = createMockDB(freshState());
-        initDB(db);
-        const handler = handleActuateAPI({ prismaClient: db, config: { collections: {} } });
-        const res = await handler(new Request('https://example.com/api/cms/updates/config'));
-        expect(res.status).toBe(401);
-    });
-    it('rejects non-admin API keys', async () => {
-        const { key, record } = await makeKey({ media: true });
-        const db = createMockDB(freshState(), record);
-        initDB(db);
-        const handler = handleActuateAPI({ prismaClient: db, config: { collections: {} } });
-        const res = await handler(new Request('https://example.com/api/cms/updates/config', {
-            headers: { Authorization: `Bearer ${key}` },
-        }));
-        expect(res.status).toBe(403);
-    });
-    it('allows admins (regression: uppercase ADMIN role must pass)', async () => {
-        const { key, record } = await makeKey({ admin: true });
-        const db = createMockDB(freshState(), record);
-        initDB(db);
-        const handler = handleActuateAPI({ prismaClient: db, config: { collections: {} } });
-        const res = await handler(new Request('https://example.com/api/cms/updates/config', {
-            headers: { Authorization: `Bearer ${key}` },
-        }));
-        expect(res.status).toBe(200);
-        const body = (await res.json());
-        expect(body.data.hasGithubToken).toBe(false);
-        expect(body.data.githubRepo).toBe('');
-    });
-});
-describe('PUT /updates/config', () => {
-    it('rejects non-admin API keys', async () => {
-        const { key, record } = await makeKey({ media: true });
-        const db = createMockDB(freshState(), record);
-        initDB(db);
-        const handler = handleActuateAPI({ prismaClient: db, config: { collections: {} } });
-        const res = await handler(new Request('https://example.com/api/cms/updates/config', {
-            method: 'PUT',
-            headers: { Authorization: `Bearer ${key}`, 'Content-Type': 'application/json' },
-            body: JSON.stringify({ githubRepo: 'owner/repo' }),
-        }));
-        expect(res.status).toBe(403);
-    });
-    it('validates the repository format', async () => {
-        const { key, record } = await makeKey({ admin: true });
-        const db = createMockDB(freshState(), record);
-        initDB(db);
-        const handler = handleActuateAPI({ prismaClient: db, config: { collections: {} } });
-        const res = await handler(new Request('https://example.com/api/cms/updates/config', {
-            method: 'PUT',
-            headers: { Authorization: `Bearer ${key}`, 'Content-Type': 'application/json' },
-            body: JSON.stringify({ githubRepo: 'not a repo' }),
-        }));
-        expect(res.status).toBe(400);
-    });
-    it('encrypts credentials at rest (never persists plaintext)', async () => {
-        const { key, record } = await makeKey({ admin: true });
-        const state = freshState();
-        const db = createMockDB(state, record);
-        initDB(db);
-        const handler = handleActuateAPI({ prismaClient: db, config: { collections: {} } });
-        const res = await handler(new Request('https://example.com/api/cms/updates/config', {
-            method: 'PUT',
-            headers: { Authorization: `Bearer ${key}`, 'Content-Type': 'application/json' },
-            body: JSON.stringify({ githubToken: 'ghp_secret_token_value', githubRepo: 'owner/repo' }),
-        }));
-        expect(res.status).toBe(200);
-        const persisted = state.upsertArgs?.create?.data ?? {};
-        expect(persisted.githubToken).toBeTruthy();
-        expect(persisted.githubRepo).toBeTruthy();
-        // The raw token/repo must never be stored in plaintext.
-        expect(JSON.stringify(state.upsertArgs)).not.toContain('ghp_secret_token_value');
-        expect(persisted.githubRepo).not.toBe('owner/repo');
-    });
-});
-describe('POST /updates/apply', () => {
-    it('rejects non-admin API keys', async () => {
-        const { key, record } = await makeKey({ media: true });
-        const db = createMockDB(freshState(), record);
-        initDB(db);
-        const handler = handleActuateAPI({ prismaClient: db, config: { collections: {} } });
-        const res = await handler(new Request('https://example.com/api/cms/updates/apply', {
-            method: 'POST',
-            headers: { Authorization: `Bearer ${key}`, 'Content-Type': 'application/json' },
-            body: JSON.stringify({ targetVersion: '1.0.0' }),
-        }));
-        expect(res.status).toBe(403);
-    });
-    it('lets admins through the role gate (then fails on missing GitHub config)', async () => {
-        const { key, record } = await makeKey({ admin: true });
-        const db = createMockDB(freshState(), record);
-        initDB(db);
-        const handler = handleActuateAPI({ prismaClient: db, config: { collections: {} } });
-        const res = await handler(new Request('https://example.com/api/cms/updates/apply', {
-            method: 'POST',
-            headers: { Authorization: `Bearer ${key}`, 'Content-Type': 'application/json' },
-            body: JSON.stringify({ targetVersion: '1.0.0' }),
-        }));
-        // Not 403 — the admin passed the role check; it fails later (400) because
-        // no GitHub token/repo is configured in this test environment.
-        expect(res.status).toBe(400);
-        const body = (await res.json());
-        expect(String(body.error)).toMatch(/github/i);
-    });
-    it('rejects an invalid target version', async () => {
-        const { key, record } = await makeKey({ admin: true });
-        const db = createMockDB(freshState(), record);
-        initDB(db);
-        const handler = handleActuateAPI({ prismaClient: db, config: { collections: {} } });
-        const res = await handler(new Request('https://example.com/api/cms/updates/apply', {
-            method: 'POST',
-            headers: { Authorization: `Bearer ${key}`, 'Content-Type': 'application/json' },
-            body: JSON.stringify({ targetVersion: 'not-a-version' }),
-        }));
-        expect(res.status).toBe(400);
-    });
-});
-//# sourceMappingURL=updates-routes.test.js.map

package/dist/__tests__/api/updates-routes.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"updates-routes.test.js","sourceRoot":"","sources":["../../../src/__tests__/api/updates-routes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAExE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AAGnE;;;;;;;;;;;;;GAaG;AACH,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AACnC,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AAsBpC,SAAS,YAAY,CAAC,KAAgB,EAAE,MAAyB;IAC/D,OAAO;QACL,MAAM,EAAE;YACN,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,UAAU,EAAE,KAAK,EAAE,EAAE,KAAK,EAAkC,EAAE,EAAE,CAC9D,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YAC5D,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM;SAC3B;QACD,QAAQ,EAAE;YACR,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,SAAS;YACtC,MAAM,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE;gBAC9C,KAAK,CAAC,UAAU,GAAG,IAAI,CAAA;gBACvB,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,CAAA;YAC1B,CAAC;SACF;QACD,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE;QAC9B,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE;QAClD,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;KACzC,CAAA;AACV,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,MAAmB;IACxC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,cAAc,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;IACtF,OAAO;QACL,GAAG;QACH,MAAM,EAAE;YACN,EAAE,EAAE,UAAU;YACd,OAAO;YACP,SAAS;YACT,MAAM,EAAE,QAAQ;YAChB,MAAM;YACN,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,IAAI;SAChB;KACF,CAAA;AACH,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;AAC5B,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,OAAQ,UAAkB,CAAC,eAAe,CAAA;IAC1C,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,YAAY,CAAA;IACrC,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,aAAa,CAAA;IAC9C,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAA;IACvC,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAA;AACxC,CAAC,CAAC,CAAA;AAEF,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,eAAe,EAAE,CAAA;AACtB,CAAC,CAAC,CAAA;AAEF;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,MAAM,GAAG,QAAQ;IAC1C,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAU,EAAE,EAAE;QACpE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;QACzB,IAAI,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACvC,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;gBACb,WAAW,EAAE,EAAE,MAAM,EAAE;gBACvB,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,0BAA0B,EAAE;gBAC9C,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE;aAC3B,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAA;QACH,CAAC;QACD,6DAA6D;QAC7D,OAAO,IAAI,QAAQ,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,EAAE,GAAG,YAAY,CAAC,UAAU,EAAE,CAAC,CAAA;QACrC,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QACnF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,OAAO,CAAC,2CAA2C,CAAC,CAAC,CAAA;QACnF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,iBAAiB,EAAE,CAAA;QACnB,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,MAAM,EAAE,GAAG,YAAY,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAA;QAC7C,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QACnF,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,2CAA2C,EAAE;YACvD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE;SAC5C,CAAC,CACH,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACvC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,aAAa,EAAE,CAAA;QAC5C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAA;QACtD,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,iBAAiB,EAAE,CAAA;QACnB,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,MAAM,EAAE,GAAG,YAAY,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAA;QAC7C,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QACnF,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,2CAA2C,EAAE;YACvD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE;SAC5C,CAAC,CACH,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,EAAE,GAAG,YAAY,CAAC,UAAU,EAAE,CAAC,CAAA;QACrC,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QACnF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,OAAO,CAAC,4CAA4C,CAAC,CAAC,CAAA;QACpF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,MAAM,EAAE,GAAG,YAAY,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAA;QAC7C,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QACnF,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,4CAA4C,EAAE;YACxD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE;SAC5C,CAAC,CACH,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,MAAM,EAAE,GAAG,YAAY,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAA;QAC7C,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QACnF,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,4CAA4C,EAAE;YACxD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE;SAC5C,CAAC,CACH,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,MAAM,EAAE,GAAG,YAAY,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAA;QAC7C,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QACnF,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,4CAA4C,EAAE;YACxD,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;SACnD,CAAC,CACH,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,MAAM,EAAE,GAAG,YAAY,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAA;QAC7C,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QACnF,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,4CAA4C,EAAE;YACxD,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;SACnD,CAAC,CACH,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,MAAM,KAAK,GAAG,UAAU,EAAE,CAAA;QAC1B,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACtC,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QACnF,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,4CAA4C,EAAE;YACxD,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;SAC1F,CAAC,CACH,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,CAAA;QACtD,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,CAAA;QAC1C,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,UAAU,EAAE,CAAA;QACzC,wDAAwD;QACxD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAA;QAChF,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,MAAM,EAAE,GAAG,YAAY,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAA;QAC7C,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QACnF,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,2CAA2C,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;SACjD,CAAC,CACH,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,MAAM,EAAE,GAAG,YAAY,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAA;QAC7C,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QACnF,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,2CAA2C,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;SACjD,CAAC,CACH,CAAA;QACD,0EAA0E;QAC1E,+DAA+D;QAC/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAA;QACtC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,MAAM,EAAE,GAAG,YAAY,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAA;QAC7C,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QACnF,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,2CAA2C,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;SACzD,CAAC,CACH,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/api/users-detail.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=users-detail.test.d.ts.map

package/dist/__tests__/api/users-detail.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"users-detail.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/api/users-detail.test.ts"],"names":[],"mappings":""}