@hed-hog/core 0.0.387 → 0.0.393

package/dist/realtime/realtime.service.js

@@ -0,0 +1,177 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var RealtimeService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RealtimeService = void 0;
+const common_1 = require("@nestjs/common");
+const crypto_1 = require("crypto");
+const redis_1 = require("redis");
+/**
+ * Generic real-time messaging layer usable by ANY module. Wraps the Socket.IO
+ * server (bound by {@link RealtimeGateway}) and fans emits out across API
+ * instances via Redis pub/sub — mirroring the settings-sync pattern — so a
+ * message emitted on one pod reaches clients connected to another. Without
+ * `REDIS_URL` it degrades to single-instance (local emit still works).
+ *
+ * Rooms: `user:{id}` (auto-joined on connect) and `channel:{name}` (joined via
+ * the gateway's `subscribe` message). Other modules just inject this service and
+ * call {@link emitToUser} / {@link emitToChannel} / {@link broadcast}.
+ */
+let RealtimeService = RealtimeService_1 = class RealtimeService {
+    constructor() {
+        this.logger = new common_1.Logger(RealtimeService_1.name);
+        this.instanceId = (0, crypto_1.randomUUID)();
+        this.redisUrl = String(process.env.REDIS_URL || '').trim();
+        this.channel = 'core:realtime:emit';
+        this.server = null;
+        this.redisPublisher = null;
+        this.redisSubscriber = null;
+        /** Local (this-instance) socket count per user id, for presence/liveness. */
+        this.localConnections = new Map();
+    }
+    async onModuleInit() {
+        await this.initRedis();
+    }
+    async onModuleDestroy() {
+        await Promise.allSettled([
+            this.safeClose(this.redisSubscriber),
+            this.safeClose(this.redisPublisher),
+        ]);
+    }
+    /** Called by the gateway once Socket.IO is initialized. */
+    setServer(server) {
+        this.server = server;
+    }
+    userRoom(userId) {
+        return `user:${userId}`;
+    }
+    channelRoom(name) {
+        return `channel:${name}`;
+    }
+    /** Emits an event to every socket of a given user (all their tabs/devices). */
+    emitToUser(userId, event, payload) {
+        this.dispatch({ target: { type: 'user', target: String(userId) }, event, payload });
+    }
+    /** Emits an event to everyone subscribed to a named channel. */
+    emitToChannel(channel, event, payload) {
+        this.dispatch({ target: { type: 'channel', target: channel }, event, payload });
+    }
+    /** Emits an event to every connected client. */
+    broadcast(event, payload) {
+        this.dispatch({ target: { type: 'broadcast' }, event, payload });
+    }
+    dispatch(msg) {
+        this.emitLocal(msg);
+        this.publish(msg);
+    }
+    emitLocal(msg) {
+        if (!this.server)
+            return;
+        const { target, event, payload } = msg;
+        if (target.type === 'user') {
+            this.server.to(this.userRoom(target.target)).emit(event, payload);
+        }
+        else if (target.type === 'channel') {
+            this.server.to(this.channelRoom(target.target)).emit(event, payload);
+        }
+        else {
+            this.server.emit(event, payload);
+        }
+    }
+    publish(msg) {
+        if (!this.redisPublisher)
+            return;
+        const full = Object.assign(Object.assign({}, msg), { originInstanceId: this.instanceId });
+        this.redisPublisher
+            .publish(this.channel, JSON.stringify(full))
+            .catch((error) => this.logger.warn(`Realtime publish failed: ${error instanceof Error ? error.message : 'unknown'}`));
+    }
+    handleRedisMessage(raw) {
+        let msg;
+        try {
+            msg = JSON.parse(raw);
+        }
+        catch (_a) {
+            return;
+        }
+        // Skip our own messages — they were already emitted locally.
+        if (!msg || msg.originInstanceId === this.instanceId)
+            return;
+        this.emitLocal(msg);
+    }
+    // ── Connection tracking (called by the gateway) ────────────────────────────
+    /** Records a new local socket for a user; returns the new local count. */
+    trackConnect(userId) {
+        var _a;
+        const next = ((_a = this.localConnections.get(userId)) !== null && _a !== void 0 ? _a : 0) + 1;
+        this.localConnections.set(userId, next);
+        return next;
+    }
+    /** Drops a local socket for a user; returns the remaining local count. */
+    trackDisconnect(userId) {
+        var _a;
+        const next = Math.max(0, ((_a = this.localConnections.get(userId)) !== null && _a !== void 0 ? _a : 0) - 1);
+        if (next === 0)
+            this.localConnections.delete(userId);
+        else
+            this.localConnections.set(userId, next);
+        return next;
+    }
+    /** Whether the user has at least one socket on THIS instance. */
+    isLocallyConnected(userId) {
+        var _a;
+        return ((_a = this.localConnections.get(userId)) !== null && _a !== void 0 ? _a : 0) > 0;
+    }
+    /** All user ids with at least one socket on this instance. */
+    getLocallyConnectedUserIds() {
+        return [...this.localConnections.keys()];
+    }
+    // ── Redis wiring (mirrors setting.service) ─────────────────────────────────
+    async initRedis() {
+        if (!this.redisUrl) {
+            this.logger.log('Realtime Redis fan-out disabled (REDIS_URL not set); single-instance only.');
+            return;
+        }
+        try {
+            const opts = {
+                url: this.redisUrl,
+                socket: { reconnectStrategy: (retries) => Math.min(retries * 250, 5000) },
+            };
+            this.redisPublisher = (0, redis_1.createClient)(opts);
+            this.redisSubscriber = (0, redis_1.createClient)(opts);
+            this.redisPublisher.on('error', (e) => { var _a; return this.logger.warn(`Realtime Redis publisher error: ${(_a = e === null || e === void 0 ? void 0 : e.message) !== null && _a !== void 0 ? _a : e}`); });
+            this.redisSubscriber.on('error', (e) => { var _a; return this.logger.warn(`Realtime Redis subscriber error: ${(_a = e === null || e === void 0 ? void 0 : e.message) !== null && _a !== void 0 ? _a : e}`); });
+            await this.redisPublisher.connect();
+            await this.redisSubscriber.connect();
+            await this.redisSubscriber.subscribe(this.channel, (msg) => this.handleRedisMessage(msg));
+            this.logger.log(`Realtime Redis fan-out enabled on channel ${this.channel}`);
+        }
+        catch (error) {
+            this.logger.warn(`Failed to init realtime Redis fan-out: ${error instanceof Error ? error.message : 'unknown'}`);
+            await Promise.allSettled([this.safeClose(this.redisSubscriber), this.safeClose(this.redisPublisher)]);
+            this.redisPublisher = null;
+            this.redisSubscriber = null;
+        }
+    }
+    async safeClose(client) {
+        if (!client)
+            return;
+        try {
+            if (client.isOpen)
+                await client.quit();
+        }
+        catch (_a) {
+            /* ignore */
+        }
+    }
+};
+exports.RealtimeService = RealtimeService;
+exports.RealtimeService = RealtimeService = RealtimeService_1 = __decorate([
+    (0, common_1.Injectable)()
+], RealtimeService);
+//# sourceMappingURL=realtime.service.js.map

package/dist/realtime/realtime.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime.service.js","sourceRoot":"","sources":["../../src/realtime/realtime.service.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAmF;AACnF,mCAAoC;AACpC,iCAA2D;AAe3D;;;;;;;;;;GAUG;AAEI,IAAM,eAAe,uBAArB,MAAM,eAAe;IAArB;QACY,WAAM,GAAG,IAAI,eAAM,CAAC,iBAAe,CAAC,IAAI,CAAC,CAAC;QAC1C,eAAU,GAAG,IAAA,mBAAU,GAAE,CAAC;QAC1B,aAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtD,YAAO,GAAG,oBAAoB,CAAC;QAExC,WAAM,GAAkB,IAAI,CAAC;QAC7B,mBAAc,GAA2B,IAAI,CAAC;QAC9C,oBAAe,GAA2B,IAAI,CAAC;QAEvD,6EAA6E;QAC5D,qBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAkJhE,CAAC;IAhJC,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,MAAM,OAAO,CAAC,UAAU,CAAC;YACvB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC;YACpC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAED,2DAA2D;IAC3D,SAAS,CAAC,MAAc;QACtB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAEO,QAAQ,CAAC,MAAuB;QACtC,OAAO,QAAQ,MAAM,EAAE,CAAC;IAC1B,CAAC;IACO,WAAW,CAAC,IAAY;QAC9B,OAAO,WAAW,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,+EAA+E;IAC/E,UAAU,CAAC,MAAuB,EAAE,KAAa,EAAE,OAAgB;QACjE,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,gEAAgE;IAChE,aAAa,CAAC,OAAe,EAAE,KAAa,EAAE,OAAgB;QAC5D,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,gDAAgD;IAChD,SAAS,CAAC,KAAa,EAAE,OAAgB;QACvC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACnE,CAAC;IAEO,QAAQ,CAAC,GAA8C;QAC7D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IAEO,SAAS,CAAC,GAA8C;QAC9D,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QACzB,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;QACvC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACpE,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACvE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,GAA8C;QAC5D,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO;QACjC,MAAM,IAAI,mCAAyB,GAAG,KAAE,gBAAgB,EAAE,IAAI,CAAC,UAAU,GAAE,CAAC;QAC5E,IAAI,CAAC,cAAc;aAChB,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;aAC3C,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACf,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CACjF,CACF,CAAC;IACN,CAAC;IAEO,kBAAkB,CAAC,GAAW;QACpC,IAAI,GAAoB,CAAC;QACzB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;QAC3C,CAAC;QAAC,WAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,6DAA6D;QAC7D,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI,CAAC,UAAU;YAAE,OAAO;QAC7D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAED,8EAA8E;IAE9E,0EAA0E;IAC1E,YAAY,CAAC,MAAc;;QACzB,MAAM,IAAI,GAAG,CAAC,MAAA,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,mCAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1D,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0EAA0E;IAC1E,eAAe,CAAC,MAAc;;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,MAAA,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,mCAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvE,IAAI,IAAI,KAAK,CAAC;YAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;;YAChD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iEAAiE;IACjE,kBAAkB,CAAC,MAAc;;QAC/B,OAAO,CAAC,MAAA,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,mCAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,8DAA8D;IAC9D,0BAA0B;QACxB,OAAO,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,8EAA8E;IAEtE,KAAK,CAAC,SAAS;QACrB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,4EAA4E,CAAC,CAAC;YAC9F,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG;gBACX,GAAG,EAAE,IAAI,CAAC,QAAQ;gBAClB,MAAM,EAAE,EAAE,iBAAiB,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE;aAClF,CAAC;YACF,IAAI,CAAC,cAAc,GAAG,IAAA,oBAAY,EAAC,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC,eAAe,GAAG,IAAA,oBAAY,EAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,CAAC,EAAE,CAAC,CAAA,EAAA,CAAC,CAAC;YAC/G,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,CAAC,EAAE,CAAC,CAAA,EAAA,CAAC,CAAC;YACjH,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1F,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,6CAA6C,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,0CAA0C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAC/F,CAAC;YACF,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;YACtG,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;YAC3B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,MAA8B;QACpD,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,MAAM;gBAAE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACzC,CAAC;QAAC,WAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;CACF,CAAA;AA7JY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;GACA,eAAe,CA6J3B"}

package/dist/redis/redis-pubsub.d.ts

@@ -0,0 +1,27 @@
+import { Logger } from '@nestjs/common';
+export type RedisPubSub = {
+    /** `false` means no Redis: publishing is a no-op and this process runs single-instance. */
+    readonly enabled: boolean;
+    publish(payload: unknown): Promise<void>;
+    close(): Promise<void>;
+};
+export type CreateRedisPubSubOptions = {
+    channel: string;
+    logger: Logger;
+    /** Used in log lines, e.g. `ai instruction` -> "Redis ai instruction sync enabled...". */
+    label: string;
+    onMessage: (raw: string) => void | Promise<void>;
+    /** Defaults to `REDIS_URL`, read at call time so tests can set it before init. */
+    url?: string;
+    errorLogCooldownMs?: number;
+};
+/**
+ * Publisher/subscriber pair on a single channel, mirroring the settings-sync
+ * pattern. Never throws: without a URL — or if the connection fails — it returns
+ * an inert handle and logs once.
+ *
+ * A dedicated subscriber connection is required: node-redis v4 puts a client in
+ * subscriber mode, where it can no longer issue regular commands.
+ */
+export declare function createRedisPubSub(options: CreateRedisPubSubOptions): Promise<RedisPubSub>;
+//# sourceMappingURL=redis-pubsub.d.ts.map

package/dist/redis/redis-pubsub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis-pubsub.d.ts","sourceRoot":"","sources":["../../src/redis/redis-pubsub.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAGxC,MAAM,MAAM,WAAW,GAAG;IACxB,2FAA2F;IAC3F,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,kFAAkF;IAClF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAmDF;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,WAAW,CAAC,CA4GtB"}

package/dist/redis/redis-pubsub.js

@@ -0,0 +1,184 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createRedisPubSub = createRedisPubSub;
+const Sentry = __importStar(require("@sentry/nestjs"));
+const redis_1 = require("redis");
+const DEFAULT_ERROR_LOG_COOLDOWN_MS = 30000;
+/**
+ * A connection failure must never take the client's data path down with it, so
+ * every error path here degrades to `INERT` and lets the caller keep serving
+ * from its local cache.
+ */
+const INERT = {
+    enabled: false,
+    async publish() {
+        // no-op
+    },
+    async close() {
+        // no-op
+    },
+};
+/**
+ * `createClient` rejects with an `AggregateError` whose own `message` is empty,
+ * so logging it directly yields "Redis error: " with nothing after it.
+ */
+function extractRedisErrorMessage(error) {
+    var _a;
+    if (error instanceof AggregateError && ((_a = error.errors) === null || _a === void 0 ? void 0 : _a.length)) {
+        return error.errors
+            .map((e) => (e instanceof Error ? e.message || e.toString() : String(e)))
+            .join('; ');
+    }
+    if (error instanceof Error) {
+        return error.message || error.toString();
+    }
+    return String(error);
+}
+async function safeClose(client) {
+    if (!client || !client.isOpen) {
+        return;
+    }
+    try {
+        await client.quit();
+    }
+    catch (_a) {
+        try {
+            client.disconnect();
+        }
+        catch (_b) {
+            // ignore shutdown errors
+        }
+    }
+}
+/**
+ * Publisher/subscriber pair on a single channel, mirroring the settings-sync
+ * pattern. Never throws: without a URL — or if the connection fails — it returns
+ * an inert handle and logs once.
+ *
+ * A dedicated subscriber connection is required: node-redis v4 puts a client in
+ * subscriber mode, where it can no longer issue regular commands.
+ */
+async function createRedisPubSub(options) {
+    var _a, _b;
+    const { channel, logger, label, onMessage } = options;
+    const url = String((_b = (_a = options.url) !== null && _a !== void 0 ? _a : process.env.REDIS_URL) !== null && _b !== void 0 ? _b : '').trim();
+    if (!url) {
+        logger.log(`Redis ${label} sync disabled because REDIS_URL is not configured.`);
+        return INERT;
+    }
+    const cooldownMs = Math.max(1000, Number(options.errorLogCooldownMs || DEFAULT_ERROR_LOG_COOLDOWN_MS));
+    // A Redis outage fires `error` on every reconnect attempt; unthrottled that
+    // buries every other log line in the pod.
+    const lastErrorLogAt = {
+        subscriber: 0,
+        publisher: 0,
+    };
+    const logClientError = (kind, error) => {
+        const now = Date.now();
+        if (now - lastErrorLogAt[kind] < cooldownMs) {
+            return;
+        }
+        lastErrorLogAt[kind] = now;
+        logger.warn(`Redis ${label} ${kind} error: ${extractRedisErrorMessage(error)}`);
+    };
+    let subscriber = null;
+    let publisher = null;
+    try {
+        const clientOptions = {
+            url,
+            socket: {
+                reconnectStrategy: (retries) => Math.min(retries * 250, 5000),
+            },
+        };
+        subscriber = (0, redis_1.createClient)(clientOptions);
+        publisher = (0, redis_1.createClient)(clientOptions);
+        // Registered before `connect` so a failure during the handshake is handled
+        // rather than thrown as an unhandled 'error' event.
+        subscriber.on('error', (error) => logClientError('subscriber', error));
+        publisher.on('error', (error) => logClientError('publisher', error));
+        await subscriber.connect();
+        await publisher.connect();
+        await subscriber.subscribe(channel, async (message) => {
+            try {
+                await onMessage(message);
+            }
+            catch (error) {
+                // A instrumentação automática do Sentry para node-redis cobre publish()
+                // mas NÃO subscribe()/entrega de mensagem (limitação da instrumentação
+                // vendorizada, não deste projeto) — sem esta captura explícita, uma
+                // falha aqui era só um logger.warn, invisível fora do log do pod.
+                Sentry.withScope((scope) => {
+                    scope.setTags({ 'redis.channel': channel, 'redis.label': label });
+                    Sentry.captureException(error, {
+                        mechanism: { handled: true, type: 'hedhog.redis_pubsub' },
+                    });
+                });
+                logger.warn(`Failed to handle Redis ${label} message: ${extractRedisErrorMessage(error)}`);
+            }
+        });
+        logger.log(`Redis ${label} sync enabled on channel ${channel}`);
+    }
+    catch (error) {
+        logger.warn(`Failed to initialize Redis ${label} sync: ${extractRedisErrorMessage(error)}`);
+        await Promise.allSettled([safeClose(subscriber), safeClose(publisher)]);
+        return INERT;
+    }
+    const activePublisher = publisher;
+    const activeSubscriber = subscriber;
+    let closed = false;
+    return {
+        enabled: true,
+        async publish(payload) {
+            if (closed || !activePublisher.isOpen) {
+                return;
+            }
+            try {
+                await activePublisher.publish(channel, JSON.stringify(payload));
+            }
+            catch (error) {
+                logger.warn(`Failed to publish Redis ${label} message: ${extractRedisErrorMessage(error)}`);
+            }
+        },
+        async close() {
+            if (closed) {
+                return;
+            }
+            closed = true;
+            await Promise.allSettled([safeClose(activeSubscriber), safeClose(activePublisher)]);
+        },
+    };
+}
+//# sourceMappingURL=redis-pubsub.js.map

package/dist/redis/redis-pubsub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis-pubsub.js","sourceRoot":"","sources":["../../src/redis/redis-pubsub.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+EA,8CA8GC;AA7LD,uDAAyC;AAEzC,iCAA2D;AAoB3D,MAAM,6BAA6B,GAAG,KAAK,CAAC;AAE5C;;;;GAIG;AACH,MAAM,KAAK,GAAgB;IACzB,OAAO,EAAE,KAAK;IACd,KAAK,CAAC,OAAO;QACX,QAAQ;IACV,CAAC;IACD,KAAK,CAAC,KAAK;QACT,QAAQ;IACV,CAAC;CACF,CAAC;AAEF;;;GAGG;AACH,SAAS,wBAAwB,CAAC,KAAc;;IAC9C,IAAI,KAAK,YAAY,cAAc,KAAI,MAAA,KAAK,CAAC,MAAM,0CAAE,MAAM,CAAA,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC,MAAM;aAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;aACxE,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,MAA8B;IACrD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9B,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,WAAM,CAAC;QACP,IAAI,CAAC;YACH,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,CAAC;QAAC,WAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,iBAAiB,CACrC,OAAiC;;IAEjC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IACtD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAA,MAAA,OAAO,CAAC,GAAG,mCAAI,OAAO,CAAC,GAAG,CAAC,SAAS,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAEtE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,qDAAqD,CAAC,CAAC;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CACzB,IAAI,EACJ,MAAM,CAAC,OAAO,CAAC,kBAAkB,IAAI,6BAA6B,CAAC,CACpE,CAAC;IACF,4EAA4E;IAC5E,0CAA0C;IAC1C,MAAM,cAAc,GAA+C;QACjE,UAAU,EAAE,CAAC;QACb,SAAS,EAAE,CAAC;KACb,CAAC;IAEF,MAAM,cAAc,GAAG,CAAC,IAAgC,EAAE,KAAc,EAAE,EAAE;QAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,cAAc,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,WAAW,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC;IAEF,IAAI,UAAU,GAA2B,IAAI,CAAC;IAC9C,IAAI,SAAS,GAA2B,IAAI,CAAC;IAE7C,IAAI,CAAC;QACH,MAAM,aAAa,GAAG;YACpB,GAAG;YACH,MAAM,EAAE;gBACN,iBAAiB,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,GAAG,EAAE,IAAI,CAAC;aACtE;SACF,CAAC;QAEF,UAAU,GAAG,IAAA,oBAAY,EAAC,aAAa,CAAoB,CAAC;QAC5D,SAAS,GAAG,IAAA,oBAAY,EAAC,aAAa,CAAoB,CAAC;QAE3D,2EAA2E;QAC3E,oDAAoD;QACpD,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;QACvE,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;QAErE,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC;QAC3B,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACpD,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,wEAAwE;gBACxE,uEAAuE;gBACvE,oEAAoE;gBACpE,kEAAkE;gBAClE,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;oBACzB,KAAK,CAAC,OAAO,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;oBAClE,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE;wBAC7B,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,qBAAqB,EAAE;qBAC1D,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,MAAM,CAAC,IAAI,CACT,0BAA0B,KAAK,aAAa,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAC9E,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,4BAA4B,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CACT,8BAA8B,KAAK,UAAU,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAC/E,CAAC;QAEF,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAExE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,eAAe,GAAG,SAAS,CAAC;IAClC,MAAM,gBAAgB,GAAG,UAAU,CAAC;IACpC,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,OAAO;QACL,OAAO,EAAE,IAAI;QACb,KAAK,CAAC,OAAO,CAAC,OAAgB;YAC5B,IAAI,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;gBACtC,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CACT,2BAA2B,KAAK,aAAa,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAC/E,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAK;YACT,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO;YACT,CAAC;YACD,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACtF,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/role/guards/role.guard.d.ts

@@ -7,6 +7,11 @@ export declare class RoleGuard implements CanActivate {
     private readonly forcePasswordResetAllowedRoutes;
     constructor(reflector: Reflector, prisma: PrismaService);
     canActivate(context: ExecutionContext): Promise<boolean>;
+    /**
+     * Reconstroi `METHOD /path` a partir dos metadados do Nest — a mesma chave
+     * usada na tabela `route`, com os `:params` declarados no controller.
+     */
+    private resolveRoute;
     private extractTokenFromHeader;
 }
 //# sourceMappingURL=role.guard.d.ts.map

package/dist/role/guards/role.guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"role.guard.d.ts","sourceRoot":"","sources":["../../../src/role/guards/role.guard.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACH,WAAW,EACX,gBAAgB,EAOnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGzC,qBACa,SAAU,YAAW,WAAW;IAOzC,OAAO,CAAC,SAAS;IAEjB,OAAO,CAAC,QAAQ,CAAC,MAAM;IARzB,OAAO,CAAC,QAAQ,CAAC,+BAA+B,CAG7C;gBAGO,SAAS,EAAE,SAAS,EAEX,MAAM,EAAE,aAAa;IAGlC,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IA+I9D,OAAO,CAAC,sBAAsB;CAI/B"}
+{"version":3,"file":"role.guard.d.ts","sourceRoot":"","sources":["../../../src/role/guards/role.guard.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACH,WAAW,EACX,gBAAgB,EAOnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAIzC,qBACa,SAAU,YAAW,WAAW;IAOzC,OAAO,CAAC,SAAS;IAEjB,OAAO,CAAC,QAAQ,CAAC,MAAM;IARzB,OAAO,CAAC,QAAQ,CAAC,+BAA+B,CAG7C;gBAGO,SAAS,EAAE,SAAS,EAEX,MAAM,EAAE,aAAa;IAGlC,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IAyH9D;;;OAGG;IACH,OAAO,CAAC,YAAY;IAmCpB,OAAO,CAAC,sBAAsB;CAI/B"}

package/dist/role/guards/role.guard.js

@@ -19,6 +19,7 @@ const api_prisma_1 = require("@hed-hog/api-prisma");
 const common_1 = require("@nestjs/common");
 const constants_1 = require("@nestjs/common/constants");
 const core_1 = require("@nestjs/core");
+const impersonation_restrictions_1 = require("../../impersonation/impersonation-restrictions");
 let RoleGuard = class RoleGuard {
     constructor(reflector, prisma) {
         this.reflector = reflector;
@@ -29,7 +30,18 @@ let RoleGuard = class RoleGuard {
         ]);
     }
     async canActivate(context) {
-        var _a;
+        var _a, _b;
+        const request = context.switchToHttp().getRequest();
+        const { fullPath, httpMethod } = this.resolveRoute(context);
+        // ANTES dos atalhos de @Public()/@NoRole(): sao esses dois decorators que
+        // protegem as rotas que uma simulacao nao pode alcancar (ver
+        // impersonation-restrictions.ts). Checar depois deles deixaria
+        // /auth/desktop-token e /auth/logout passarem.
+        if (((_a = request === null || request === void 0 ? void 0 : request.auth) === null || _a === void 0 ? void 0 : _a.imp) === true &&
+            (0, impersonation_restrictions_1.isRestrictedDuringImpersonation)(httpMethod, fullPath)) {
+            const locale = request['locale'] || 'en';
+            throw new common_1.ForbiddenException((0, api_locale_1.getLocaleText)('impersonation.restrictedRoute', locale, 'This action is not available during an access simulation.'));
+        }
         const isPublic = this.reflector.getAllAndOverride(api_1.IS_PUBLIC_KEY, [
             context.getHandler(),
             context.getClass(),
@@ -52,51 +64,16 @@ let RoleGuard = class RoleGuard {
         if (!withRole) {
             return true;
         }
-        const request = context.switchToHttp().getRequest();
-        const controller = context.getClass();
-        const handler = context.getHandler();
-        const controllerPath = this.reflector.get('path', controller) || '';
-        const methodPath = this.reflector.get('path', handler) || '';
-        const requestMethod = this.reflector.get(constants_1.METHOD_METADATA, handler);
-        let fullPath = `/${controllerPath}/${methodPath}`.replace(/\/+/g, '/');
-        if (fullPath.endsWith('/')) {
-            fullPath = fullPath.slice(0, -1);
-        }
         const token = this.extractTokenFromHeader(request);
         if (!token) {
             const locale = request['locale'] || 'en';
             throw new common_1.UnauthorizedException((0, api_locale_1.getLocaleText)('accessDenied', locale, 'Access denied.'));
         }
-        const userId = (_a = request === null || request === void 0 ? void 0 : request.auth) === null || _a === void 0 ? void 0 : _a.sub;
-        let httpMethod;
-        switch (requestMethod) {
-            case common_1.RequestMethod.GET:
-                httpMethod = 'GET';
-                break;
-            case common_1.RequestMethod.POST:
-                httpMethod = 'POST';
-                break;
-            case common_1.RequestMethod.PUT:
-                httpMethod = 'PUT';
-                break;
-            case common_1.RequestMethod.DELETE:
-                httpMethod = 'DELETE';
-                break;
-            case common_1.RequestMethod.PATCH:
-                httpMethod = 'PATCH';
-                break;
-            case common_1.RequestMethod.OPTIONS:
-                httpMethod = 'OPTIONS';
-                break;
-            case common_1.RequestMethod.HEAD:
-                httpMethod = 'HEAD';
-                break;
-            case common_1.RequestMethod.ALL:
-                httpMethod = 'ALL';
-                break;
-        }
+        const userId = (_b = request === null || request === void 0 ? void 0 : request.auth) === null || _b === void 0 ? void 0 : _b.sub;
         const route = await this.prisma.route.count({
             where: {
+                // `route.method` e um enum gerado com nome variavel por instalacao; o
+                // valor vem dos metadados do Nest e sempre casa com um dos membros.
                 method: httpMethod,
                 url: fullPath,
                 role_route: {
@@ -135,6 +112,31 @@ let RoleGuard = class RoleGuard {
         }
         return true;
     }
+    /**
+     * Reconstroi `METHOD /path` a partir dos metadados do Nest — a mesma chave
+     * usada na tabela `route`, com os `:params` declarados no controller.
+     */
+    resolveRoute(context) {
+        var _a;
+        const controllerPath = this.reflector.get('path', context.getClass()) || '';
+        const methodPath = this.reflector.get('path', context.getHandler()) || '';
+        let fullPath = `/${controllerPath}/${methodPath}`.replace(/\/+/g, '/');
+        if (fullPath.endsWith('/')) {
+            fullPath = fullPath.slice(0, -1);
+        }
+        const requestMethod = this.reflector.get(constants_1.METHOD_METADATA, context.getHandler());
+        const httpMethod = (_a = {
+            [common_1.RequestMethod.GET]: 'GET',
+            [common_1.RequestMethod.POST]: 'POST',
+            [common_1.RequestMethod.PUT]: 'PUT',
+            [common_1.RequestMethod.DELETE]: 'DELETE',
+            [common_1.RequestMethod.PATCH]: 'PATCH',
+            [common_1.RequestMethod.OPTIONS]: 'OPTIONS',
+            [common_1.RequestMethod.HEAD]: 'HEAD',
+            [common_1.RequestMethod.ALL]: 'ALL',
+        }[requestMethod]) !== null && _a !== void 0 ? _a : '';
+        return { fullPath, httpMethod };
+    }
     extractTokenFromHeader(request) {
         var _a, _b;
         const [type, token] = (_b = (_a = request.headers.authorization) === null || _a === void 0 ? void 0 : _a.split(' ')) !== null && _b !== void 0 ? _b : [];

package/dist/role/guards/role.guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"role.guard.js","sourceRoot":"","sources":["../../../src/role/guards/role.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,sCAAsE;AACtE,oDAAoD;AACpD,oDAAoD;AACpD,2CASwB;AACxB,wDAA2D;AAC3D,uCAAyC;AAIlC,IAAM,SAAS,GAAf,MAAM,SAAS;IAMpB,YACU,SAAoB,EAE5B,MAAsC;QAF9B,cAAS,GAAT,SAAS,CAAW;QAEX,WAAM,GAAN,MAAM,CAAe;QARvB,oCAA+B,GAAG,IAAI,GAAG,CAAC;YACzD,8BAA8B;YAC9B,kBAAkB;SACnB,CAAC,CAAC;IAMA,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,OAAyB;;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,mBAAa,EAAE;YACxE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QAEH,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,kBAAY,EAAE;YACzE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QAEH,IAAI,UAAU,EAAE,CAAC;YACf,0EAA0E;YAC1E,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,eAAS,EAAE;YACpE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAC7D,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;QACrC,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAS,MAAM,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QAC5E,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAS,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QAErE,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CACtC,2BAAe,EACf,OAAO,CACR,CAAC;QAEF,IAAI,QAAQ,GAAG,IAAI,cAAc,IAAI,UAAU,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAEvE,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAEnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;YACzC,MAAM,IAAI,8BAAqB,CAC7B,IAAA,0BAAa,EAAC,cAAc,EAAE,MAAM,EAAE,gBAAgB,CAAC,CACxD,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAC,OAAe,aAAf,OAAO,uBAAP,OAAO,CAAU,IAAI,0CAAE,GAAG,CAAC;QAE3C,IAAI,UAAe,CAAC;QACpB,QAAQ,aAAa,EAAE,CAAC;YACtB,KAAK,sBAAa,CAAC,GAAG;gBACpB,UAAU,GAAG,KAAK,CAAC;gBACnB,MAAM;YACR,KAAK,sBAAa,CAAC,IAAI;gBACrB,UAAU,GAAG,MAAM,CAAC;gBACpB,MAAM;YACR,KAAK,sBAAa,CAAC,GAAG;gBACpB,UAAU,GAAG,KAAK,CAAC;gBACnB,MAAM;YACR,KAAK,sBAAa,CAAC,MAAM;gBACvB,UAAU,GAAG,QAAQ,CAAC;gBACtB,MAAM;YACR,KAAK,sBAAa,CAAC,KAAK;gBACtB,UAAU,GAAG,OAAO,CAAC;gBACrB,MAAM;YACR,KAAK,sBAAa,CAAC,OAAO;gBACxB,UAAU,GAAG,SAAS,CAAC;gBACvB,MAAM;YACR,KAAK,sBAAa,CAAC,IAAI;gBACrB,UAAU,GAAG,MAAM,CAAC;gBACpB,MAAM;YACR,KAAK,sBAAa,CAAC,GAAG;gBACpB,UAAU,GAAG,KAAK,CAAC;gBACnB,MAAM;QACV,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAC1C,KAAK,EAAE;gBACL,MAAM,EAAE,UAAU;gBAClB,GAAG,EAAE,QAAQ;gBACb,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,IAAI,EAAE;4BACJ,SAAS,EAAE;gCACT,IAAI,EAAE;oCACJ,OAAO,EAAE,MAAM;iCAChB;6BACF;yBACF;qBACF;iBACF;aACF;SACF,CAAC,CAAC;QAEH,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;YACzC,MAAM,OAAO,GAAG,IAAA,0BAAa,EAC3B,cAAc,EACd,MAAM,EACN,4EAA4E,CAC7E;iBACE,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC;iBACjC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAEjC,MAAM,IAAI,2BAAkB,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC;YAC1E,KAAK,EAAE;gBACL,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,UAAU;gBAChB,cAAc,EAAE,IAAI;gBACpB,UAAU,EAAE,IAAI;aACjB;YACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;SACrB,CAAC,CAAC;QAEH,IACE,uBAAuB;YACvB,CAAC,IAAI,CAAC,+BAA+B,CAAC,GAAG,CAAC,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC,EACtE,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;YACzC,MAAM,IAAI,8BAAqB,CAC7B,IAAA,0BAAa,EACX,iCAAiC,EACjC,MAAM,EACN,0DAA0D,CAC3D,CACF,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,sBAAsB,CAAC,OAAgB;;QAC7C,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAA,MAAA,OAAO,CAAC,OAAO,CAAC,aAAa,0CAAE,KAAK,CAAC,GAAG,CAAC,mCAAI,EAAE,CAAC;QACtE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/C,CAAC;CACF,CAAA;AA/JY,8BAAS;oBAAT,SAAS;IADrB,IAAA,mBAAU,GAAE;IASR,WAAA,IAAA,eAAM,EAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,0BAAa,CAAC,CAAC,CAAA;qCADrB,gBAAS;QAEH,0BAAa;GAT7B,SAAS,CA+JrB"}
+{"version":3,"file":"role.guard.js","sourceRoot":"","sources":["../../../src/role/guards/role.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,sCAAsE;AACtE,oDAAoD;AACpD,oDAAoD;AACpD,2CASwB;AACxB,wDAA2D;AAC3D,uCAAyC;AAEzC,+FAAiG;AAG1F,IAAM,SAAS,GAAf,MAAM,SAAS;IAMpB,YACU,SAAoB,EAE5B,MAAsC;QAF9B,cAAS,GAAT,SAAS,CAAW;QAEX,WAAM,GAAN,MAAM,CAAe;QARvB,oCAA+B,GAAG,IAAI,GAAG,CAAC;YACzD,8BAA8B;YAC9B,kBAAkB;SACnB,CAAC,CAAC;IAMA,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,OAAyB;;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAC7D,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAE5D,0EAA0E;QAC1E,6DAA6D;QAC7D,+DAA+D;QAC/D,+CAA+C;QAC/C,IACE,CAAA,MAAC,OAAe,aAAf,OAAO,uBAAP,OAAO,CAAU,IAAI,0CAAE,GAAG,MAAK,IAAI;YACpC,IAAA,4DAA+B,EAAC,UAAU,EAAE,QAAQ,CAAC,EACrD,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;YACzC,MAAM,IAAI,2BAAkB,CAC1B,IAAA,0BAAa,EACX,+BAA+B,EAC/B,MAAM,EACN,2DAA2D,CAC5D,CACF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,mBAAa,EAAE;YACxE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QAEH,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,kBAAY,EAAE;YACzE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QAEH,IAAI,UAAU,EAAE,CAAC;YACf,0EAA0E;YAC1E,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,eAAS,EAAE;YACpE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAEnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;YACzC,MAAM,IAAI,8BAAqB,CAC7B,IAAA,0BAAa,EAAC,cAAc,EAAE,MAAM,EAAE,gBAAgB,CAAC,CACxD,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAC,OAAe,aAAf,OAAO,uBAAP,OAAO,CAAU,IAAI,0CAAE,GAAG,CAAC;QAE3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAC1C,KAAK,EAAE;gBACL,sEAAsE;gBACtE,oEAAoE;gBACpE,MAAM,EAAE,UAAiB;gBACzB,GAAG,EAAE,QAAQ;gBACb,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,IAAI,EAAE;4BACJ,SAAS,EAAE;gCACT,IAAI,EAAE;oCACJ,OAAO,EAAE,MAAM;iCAChB;6BACF;yBACF;qBACF;iBACF;aACF;SACF,CAAC,CAAC;QAEH,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;YACzC,MAAM,OAAO,GAAG,IAAA,0BAAa,EAC3B,cAAc,EACd,MAAM,EACN,4EAA4E,CAC7E;iBACE,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC;iBACjC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAEjC,MAAM,IAAI,2BAAkB,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC;YAC1E,KAAK,EAAE;gBACL,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,UAAU;gBAChB,cAAc,EAAE,IAAI;gBACpB,UAAU,EAAE,IAAI;aACjB;YACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;SACrB,CAAC,CAAC;QAEH,IACE,uBAAuB;YACvB,CAAC,IAAI,CAAC,+BAA+B,CAAC,GAAG,CAAC,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC,EACtE,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;YACzC,MAAM,IAAI,8BAAqB,CAC7B,IAAA,0BAAa,EACX,iCAAiC,EACjC,MAAM,EACN,0DAA0D,CAC3D,CACF,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACK,YAAY,CAAC,OAAyB;;QAI5C,MAAM,cAAc,GAClB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAS,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QAC/D,MAAM,UAAU,GACd,IAAI,CAAC,SAAS,CAAC,GAAG,CAAS,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,CAAC;QAEjE,IAAI,QAAQ,GAAG,IAAI,cAAc,IAAI,UAAU,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAEvE,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CACtC,2BAAe,EACf,OAAO,CAAC,UAAU,EAAE,CACrB,CAAC;QAEF,MAAM,UAAU,GACd,MAAA;YACE,CAAC,sBAAa,CAAC,GAAG,CAAC,EAAE,KAAK;YAC1B,CAAC,sBAAa,CAAC,IAAI,CAAC,EAAE,MAAM;YAC5B,CAAC,sBAAa,CAAC,GAAG,CAAC,EAAE,KAAK;YAC1B,CAAC,sBAAa,CAAC,MAAM,CAAC,EAAE,QAAQ;YAChC,CAAC,sBAAa,CAAC,KAAK,CAAC,EAAE,OAAO;YAC9B,CAAC,sBAAa,CAAC,OAAO,CAAC,EAAE,SAAS;YAClC,CAAC,sBAAa,CAAC,IAAI,CAAC,EAAE,MAAM;YAC5B,CAAC,sBAAa,CAAC,GAAG,CAAC,EAAE,KAAK;SAC3B,CAAC,aAAa,CAAC,mCAAI,EAAE,CAAC;QAEzB,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IAClC,CAAC;IAEO,sBAAsB,CAAC,OAAgB;;QAC7C,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAA,MAAA,OAAO,CAAC,OAAO,CAAC,aAAa,0CAAE,KAAK,CAAC,GAAG,CAAC,mCAAI,EAAE,CAAC;QACtE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/C,CAAC;CACF,CAAA;AAhLY,8BAAS;oBAAT,SAAS;IADrB,IAAA,mBAAU,GAAE;IASR,WAAA,IAAA,eAAM,EAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,0BAAa,CAAC,CAAC,CAAA;qCADrB,gBAAS;QAEH,0BAAa;GAT7B,SAAS,CAgLrB"}

package/dist/role/role.controller.d.ts

@@ -77,8 +77,8 @@ export declare class RoleController {
             created_at: Date;
             name: string;
             updated_at: Date;
-            locale_id: number;
             description: string | null;
+            locale_id: number;
             role_id: number;
         })[];
         id: number;
@@ -100,8 +100,8 @@ export declare class RoleController {
             created_at: Date;
             name: string;
             updated_at: Date;
-            locale_id: number;
             description: string | null;
+            locale_id: number;
             role_id: number;
         })[];
         id: number;
@@ -123,8 +123,8 @@ export declare class RoleController {
             created_at: Date;
             name: string;
             updated_at: Date;
-            locale_id: number;
             description: string | null;
+            locale_id: number;
             role_id: number;
         })[];
         id: number;

package/dist/role/role.service.d.ts

@@ -83,8 +83,8 @@ export declare class RoleService {
             created_at: Date;
             name: string;
             updated_at: Date;
-            locale_id: number;
             description: string | null;
+            locale_id: number;
             role_id: number;
         })[];
         id: number;
@@ -106,8 +106,8 @@ export declare class RoleService {
             created_at: Date;
             name: string;
             updated_at: Date;
-            locale_id: number;
             description: string | null;
+            locale_id: number;
             role_id: number;
         })[];
         id: number;
@@ -129,8 +129,8 @@ export declare class RoleService {
             created_at: Date;
             name: string;
             updated_at: Date;
-            locale_id: number;
             description: string | null;
+            locale_id: number;
             role_id: number;
         })[];
         id: number;

package/dist/session/session.controller.d.ts

@@ -34,12 +34,14 @@ export declare class SessionController {
         user_id: number;
         user_agent: string;
         created_at: Date;
+        impersonator_user_id: number | null;
         updated_at: Date;
         hash: string;
         ip_address: string;
         revoked_at: Date | null;
         expires_at: Date;
         browser_id: string | null;
+        impersonation_reason: string | null;
     }>;
 }
 //# sourceMappingURL=session.controller.d.ts.map

package/dist/session/session.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.controller.d.ts","sourceRoot":"","sources":["../../src/session/session.controller.ts"],"names":[],"mappings":"AAEA,OAAO,EAAc,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAEpE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,qBAEa,iBAAiB;IAEtB,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAAd,cAAc,EAAE,cAAc;IAI7C,qBAAqB,CACT,gBAAgB,EAAE,aAAa,EACrC,EAAE,EAAE,EAAE;;KAAA,EACJ,MAAM,EAAE,MAAM;;;;;;;IAMtB,eAAe,CACH,gBAAgB,EAAE,aAAa,EACrC,EAAE,EAAE,EAAE;;KAAA,EACJ,MAAM,EAAE,MAAM;;;;;;;IAMtB,sBAAsB,CAAS,EAAE,EAAE,EAAE;;KAAA,EAAa,SAAS,EAAE,MAAM;IAKnE,iBAAiB,CAAS,EAAE,EAAE,EAAE;;KAAA;IAKhC,aAAa,CACP,EAAE,EAAE,EAAE,MAAM,EAAE;;KAAA,EACY,SAAS,EAAE,MAAM,EACzC,MAAM,EAAE,MAAM;;;;;;;;;;;;CAI/B"}
+{"version":3,"file":"session.controller.d.ts","sourceRoot":"","sources":["../../src/session/session.controller.ts"],"names":[],"mappings":"AAEA,OAAO,EAAc,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAEpE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,qBAEa,iBAAiB;IAEtB,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAAd,cAAc,EAAE,cAAc;IAI7C,qBAAqB,CACT,gBAAgB,EAAE,aAAa,EACrC,EAAE,EAAE,EAAE;;KAAA,EACJ,MAAM,EAAE,MAAM;;;;;;;IAMtB,eAAe,CACH,gBAAgB,EAAE,aAAa,EACrC,EAAE,EAAE,EAAE;;KAAA,EACJ,MAAM,EAAE,MAAM;;;;;;;IAMtB,sBAAsB,CAAS,EAAE,EAAE,EAAE;;KAAA,EAAa,SAAS,EAAE,MAAM;IAKnE,iBAAiB,CAAS,EAAE,EAAE,EAAE;;KAAA;IAKhC,aAAa,CACP,EAAE,EAAE,EAAE,MAAM,EAAE;;KAAA,EACY,SAAS,EAAE,MAAM,EACzC,MAAM,EAAE,MAAM;;;;;;;;;;;;;;CAI/B"}