@neohm/nestend 3.0.2 → 3.0.4

package/README.md

@@ -82,32 +82,32 @@ app.useGlobalInterceptors(
 
 ## Feature Map
 
-| Area              | Key exports                                                                                                                                               | Notes                                                                                                                                                                                                                                    |
-| ----------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| Entities          | `RootEntity`, `CommonEntity`, `CommonAdminEntity`, `UserEntity`, `AdminUserEntity`, `SystemRoleEntity`, `SystemAdminRoleEntity`, ...                      | uuid PK, soft deletes, `created_by`, jsonb `attributes`; entity-level `findOneOrNew`, `softDelete`, `hardDelete`, `restore`, `paginate` statics                                                                                          |
-| Migrations        | `CreateSysUsersTable...` (26 files, one per table), `MigrationUtility`, `SeederUtility`                                                                   | fluent `this.string()`, `this.numeric()`, `addRecord()` seeding                                                                                                                                                                          |
-| Queue             | `QueueModule`, `QueueService`, `CommonJob`, `JobConsumer`                                                                                                 | BullMQ `@Processor`/`WorkerHost` consumer; auto-discovered jobs, duplicate prevention, recurring schedulers, 1-day TTL, retries, failures persisted to `sys_failed_jobs`                                                                 |
-| Scheduled events  | `SystemScheduledTaskEntity`, `ScheduledEventEntity`, `SetScheduledEventJob`, `DispatchScheduledEventJob`                                                  | schedule definitions in `sys_scheduled_tasks` → events in `sys_scheduled_events`; worker-driven materialisation + dispatch via `SCHEDULED_EVENT_*` env                                                                                   |
+| Area              | Key exports                                                                                                                                               | Notes                                                                                                                                                                                                                                                             |
+| ----------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Entities          | `RootEntity`, `CommonEntity`, `CommonAdminEntity`, `UserEntity`, `AdminUserEntity`, `SystemRoleEntity`, `SystemAdminRoleEntity`, ...                      | uuid PK, soft deletes, `created_by`, jsonb `attributes`; entity-level `findOneOrNew`, `softDelete`, `hardDelete`, `restore`, `paginate` statics                                                                                                                   |
+| Migrations        | `CreateSysUsersTable...` (26 files, one per table), `MigrationUtility`, `SeederUtility`                                                                   | fluent `this.string()`, `this.numeric()`, `addRecord()` seeding                                                                                                                                                                                                   |
+| Queue             | `QueueModule`, `QueueService`, `CommonJob`, `JobConsumer`                                                                                                 | BullMQ `@Processor`/`WorkerHost` consumer; auto-discovered jobs, duplicate prevention, recurring schedulers, 1-day TTL, retries, failures persisted to `sys_failed_jobs`                                                                                          |
+| Scheduled events  | `SystemScheduledTaskEntity`, `ScheduledEventEntity`, `SetScheduledEventJob`, `DispatchScheduledEventJob`                                                  | schedule definitions in `sys_scheduled_tasks` → events in `sys_scheduled_events`; worker-driven materialisation + fire-once dispatch, cadence via `SCHEDULED_EVENT_MIN`                                                                                           |
 | Auth              | `AuthModule`, `AuthService.validateRole()`, `Auth`, `JwtMiddleware`, `GoogleAuthService`                                                                  | imperative auth (open by default); JwtMiddleware resolves the user into `Auth`'s AsyncLocalStorage context per request; access + rotating refresh tokens; session-based logout invalidation (`sys_auth_sessions`); Google SSO via ID token at `POST /auth/google` |
-| Admin auth        | `AdminAuthService.validateRole()`, `AdminAuth`, `AdminJwtMiddleware`, `AdminAuthController` (`/admin/auth`)                                               | fully separate stack for back-office admins — own users table (`sys_admin_users`), own roles (`sys_admin_roles`/`sys_auser_roles`), own sessions/refresh tokens (shared tables, `is_admin` flag)                                          |
-| API keys          | `ApiKeyService`, `ApiKeyGuard` / `ApiKeyMiddleware`, `@ApiKeyScopes()`, `ScopeEntity`, `ApiScopeEntity`                                                    | hashed keys in `sys_api_keys` (admin-owned), scopes, expiry/revocation, `x-api-key` header; normalized scopes catalogue in `sys_scopes`/`sys_api_scopes`                                                                                  |
-| Multi-tenancy     | `TenantModule`, `TenantEntity`, `TenantCommonEntity`, `TenantContextService`, `TenantContextMiddleware`                                                   | AsyncLocalStorage tenant context; resolve by header, slug, or domain; tenants are onboarded by admins (`TenantEntity.creator` → `AdminUserEntity`)                                                                                        |
-| Admin             | `AdminModule`, `AdminAccessService`, `TenantDataProcessor`, `ClientUserDataProcessor`, `BulkUserDataProcessor`, `AdminUserDataProcessor`, list processors | back-office APIs: tenant onboarding, client/admin user registration (single + bulk, no role granting), tenant + scheduled-task listing; 4-tier `GlobalAdminRoles` gate over `sys_admin_roles`; Swagger at `/docs` (hidden in production) |
-| Notifications     | `NotificationModule`, `NotificationService`, `FcmPushNotificationService`                                                                                 | in-app rows + FCM push (optional `firebase-admin`); device token registry                                                                                                                                                                |
-| Email (SES)       | `EmailNotificationService`, `ProcessEmailNotification`, `EmailTemplateEntity`, `EmailNotificationLogEntity`                                               | templates in `sys_email_templates` rendered by a remote service, dispatched via SES per recipient (to/cc/bcc); logged to `sys_email_notification_logs` outside production; dispatch skipped when `AWS_SES_FROM_ADDRESS` unset            |
-| Audit             | `AuditService`                                                                                                                                            | `saveAuditLog(old, new)` with changed-value diffing into `sys_audit_logs`                                                                                                                                                                |
-| Feature flags     | `FeatureFlagService`                                                                                                                                      | on/off, percentage rollouts, allow lists — stored as `feature.*` system properties                                                                                                                                                       |
-| Cache             | `CacheService`                                                                                                                                            | Redis, TTL objects (`{days, hours, min}`), transparent encryption                                                                                                                                                                        |
-| Encryption        | `EncryptionService`                                                                                                                                       | AES-256-GCM, scrypt-derived keys                                                                                                                                                                                                         |
-| System properties | `SystemPropertyModule`, `SystemPropertyService`                                                                                                           | cached + optionally encrypted key/value settings in `sys_properties`                                                                                                                                                                     |
-| Documents         | `DocumentModule`, `DocumentService`, `S3BucketDocumentService`, `MinioBucketDocumentService`                                                              | `uploadDocument(multerFiles) → links[]`; driver chosen via `DOCUMENT_STORAGE_DRIVER`                                                                                                                                                     |
-| HTTP              | `CommonController`, `GlobalExceptionFilter`, common DTOs                                                                                                  | health endpoint base controller, uniform error envelope                                                                                                                                                                                  |
-| Raw SQL           | `SqlService`, `SqlTarget`                                                                                                                                 | named `:key` placeholders always bound as driver params, `:...key` array expansion; runs on the read replica (`DB_READ_*`) with transparent primary fallback; `fetchOne`/`fetchScalar`/`exists`/`count`/`paginate` helpers               |
-| List endpoints    | `CommonListProcessor`, `CommonListFilterDto`, `FilterDto`, `FILTER_OPERATORS`                                                                             | allowlisted columns, parameterised operators (`eq`…`isNull`), typed value casting (`str`/`num`/`date`/`bool`/`null`), multi-sort + paginated on the read replica                                                                         |
-| Outbound HTTP     | `RemoteRequestService`, `ApiRequestTypeEnum`, `ApiContentTypeEnum`                                                                                        | injectable `fetch` wrapper (global via `CommonModule`); `getApiResponse<T>()` parses JSON/text and throws `OperationException` on non-2xx, `getApiRawResponse()` returns the raw `Response`; JSON + form-urlencoded body serialisation   |
-| Observability     | `LoggingInterceptor`, `MonitoringInterceptor`, `MonitoringService`                                                                                        | Sentry auto-registers when `@sentry/node` + `SENTRY_DSN` present; pluggable `MonitoringAdapter`                                                                                                                                          |
-| Jobs/Events       | `CommonJob`, `JobConsumer`, `CommonSubscriber`, `CommonDataProcessor`                                                                                     | dispatch/handle separation, discovery-based registration, worker-event lifecycle, column-change detection, field error collection                                                                                                        |
-| Constants & maps  | `baseEntityConstants`, `baseJobConstants`, `baseEntityMaps`, `baseJobMaps`                                                                                | centralised dotted identifiers (`as const`) plus identifier → class maps of every concrete entity and job (abstract bases excluded); map keys are computed from the constants, so renames propagate at compile time                      |
+| Admin auth        | `AdminAuthService.validateRole()`, `AdminAuth`, `AdminJwtMiddleware`, `AdminAuthController` (`/admin/auth`)                                               | fully separate stack for back-office admins — own users table (`sys_admin_users`), own roles (`sys_admin_roles`/`sys_auser_roles`), own sessions/refresh tokens (shared tables, `is_admin` flag)                                                                  |
+| API keys          | `ApiKeyService`, `ApiKeyGuard` / `ApiKeyMiddleware`, `@ApiKeyScopes()`, `ScopeEntity`, `ApiScopeEntity`                                                   | hashed keys in `sys_api_keys` (admin-owned), scopes, expiry/revocation, `x-api-key` header; normalized scopes catalogue in `sys_scopes`/`sys_api_scopes`                                                                                                          |
+| Multi-tenancy     | `TenantModule`, `TenantEntity`, `TenantCommonEntity`, `TenantContextService`, `TenantContextMiddleware`                                                   | AsyncLocalStorage tenant context; resolve by header, slug, or domain; tenants are onboarded by admins (`TenantEntity.creator` → `AdminUserEntity`)                                                                                                                |
+| Admin             | `AdminModule`, `AdminAccessService`, `TenantDataProcessor`, `ClientUserDataProcessor`, `BulkUserDataProcessor`, `AdminUserDataProcessor`, list processors | back-office APIs: tenant onboarding, client/admin user registration (single + bulk, no role granting), tenant + scheduled-task listing; 4-tier `GlobalAdminRoles` gate over `sys_admin_roles`; Swagger at `/docs` (hidden in production)                          |
+| Notifications     | `NotificationModule`, `NotificationService`, `FcmPushNotificationService`                                                                                 | in-app rows + FCM push (optional `firebase-admin`); device token registry                                                                                                                                                                                         |
+| Email (SES)       | `EmailNotificationService`, `ProcessEmailNotification`, `EmailTemplateEntity`, `EmailNotificationLogEntity`                                               | templates in `sys_email_templates` rendered by a remote service, dispatched via SES per recipient (to/cc/bcc); logged to `sys_email_notification_logs` outside production; dispatch skipped when `AWS_SES_FROM_ADDRESS` unset                                     |
+| Audit             | `AuditService`                                                                                                                                            | `saveAuditLog(old, new)` with changed-value diffing into `sys_audit_logs`                                                                                                                                                                                         |
+| Feature flags     | `FeatureFlagService`                                                                                                                                      | on/off, percentage rollouts, allow lists — stored as `feature.*` system properties                                                                                                                                                                                |
+| Cache             | `CacheService`                                                                                                                                            | Redis, TTL objects (`{days, hours, min}`), transparent encryption                                                                                                                                                                                                 |
+| Encryption        | `EncryptionService`                                                                                                                                       | AES-256-GCM, scrypt-derived keys                                                                                                                                                                                                                                  |
+| System properties | `SystemPropertyModule`, `SystemPropertyService`                                                                                                           | cached + optionally encrypted key/value settings in `sys_properties`                                                                                                                                                                                              |
+| Documents         | `DocumentModule`, `DocumentService`, `S3BucketDocumentService`, `MinioBucketDocumentService`                                                              | `uploadDocument(multerFiles) → links[]`; driver chosen via `DOCUMENT_STORAGE_DRIVER`                                                                                                                                                                              |
+| HTTP              | `CommonController`, `GlobalExceptionFilter`, common DTOs                                                                                                  | health endpoint base controller, uniform error envelope                                                                                                                                                                                                           |
+| Raw SQL           | `SqlService`, `SqlTarget`                                                                                                                                 | named `:key` placeholders always bound as driver params, `:...key` array expansion; runs on the read replica (`DB_READ_*`) with transparent primary fallback; `fetchOne`/`fetchScalar`/`exists`/`count`/`paginate` helpers                                        |
+| List endpoints    | `CommonListProcessor`, `CommonListFilterDto`, `FilterDto`, `FILTER_OPERATORS`                                                                             | allowlisted columns, parameterised operators (`eq`…`isNull`), typed value casting (`str`/`num`/`date`/`bool`/`null`), multi-sort + paginated on the read replica                                                                                                  |
+| Outbound HTTP     | `RemoteRequestService`, `ApiRequestTypeEnum`, `ApiContentTypeEnum`                                                                                        | injectable `fetch` wrapper (global via `CommonModule`); `getApiResponse<T>()` parses JSON/text and throws `OperationException` on non-2xx, `getApiRawResponse()` returns the raw `Response`; JSON + form-urlencoded body serialisation                            |
+| Observability     | `LoggingInterceptor`, `MonitoringInterceptor`, `MonitoringService`                                                                                        | Sentry auto-registers when `@sentry/node` + `SENTRY_DSN` present; pluggable `MonitoringAdapter`                                                                                                                                                                   |
+| Jobs/Events       | `CommonJob`, `JobConsumer`, `CommonSubscriber`, `CommonDataProcessor`                                                                                     | dispatch/handle separation, discovery-based registration, worker-event lifecycle, column-change detection, field error collection                                                                                                                                 |
+| Constants & maps  | `baseEntityConstants`, `baseJobConstants`, `baseEntityMaps`, `baseJobMaps`                                                                                | centralised dotted identifiers (`as const`) plus identifier → class maps of every concrete entity and job (abstract bases excluded); map keys are computed from the constants, so renames propagate at compile time                                               |
 
 ## Environment Variables
 
@@ -136,22 +136,22 @@ queries). Comma-separate `DB_READ_HOST` for multiple replicas; unset `DB_READ_*`
 values fall back to the primary's. Leave `DB_READ_HOST` empty to route replica
 queries to the primary.
 
-| Variable           | Default        | Description            |
-| ------------------ | -------------- | ---------------------- |
-| `DB_READ_HOST`     | _(empty)_      | Replica host(s)        |
-| `DB_READ_PORT`     | `DB_PORT`      | Replica port           |
-| `DB_READ_USERNAME` | `DB_USERNAME`  | Replica user           |
-| `DB_READ_PASSWORD` | `DB_PASSWORD`  | Replica password       |
-| `DB_READ_NAME`     | `DB_NAME`      | Replica database name  |
+| Variable           | Default       | Description           |
+| ------------------ | ------------- | --------------------- |
+| `DB_READ_HOST`     | _(empty)_     | Replica host(s)       |
+| `DB_READ_PORT`     | `DB_PORT`     | Replica port          |
+| `DB_READ_USERNAME` | `DB_USERNAME` | Replica user          |
+| `DB_READ_PASSWORD` | `DB_PASSWORD` | Replica password      |
+| `DB_READ_NAME`     | `DB_NAME`     | Replica database name |
 
 ### JWT / Auth
 
-| Variable               | Default | Description                                                   |
-| ---------------------- | ------- | ------------------------------------------------------------- |
-| `ACCESS_TOKEN_SECRET`  | —       | **Required.** Secret for signing access tokens. Min 32 chars  |
-| `REFRESH_TOKEN_SECRET` | —       | **Required.** Secret for signing refresh tokens. Min 32 chars |
-| `ACCESS_TOKEN_EXPIRY`  | `1h`    | Access token lifetime (`60s`, `15m`, `1h`, `7d`, …)           |
-| `REFRESH_TOKEN_EXPIRY` | `30d`   | Refresh token lifetime                                        |
+| Variable               | Default   | Description                                                                                    |
+| ---------------------- | --------- | ---------------------------------------------------------------------------------------------- |
+| `ACCESS_TOKEN_SECRET`  | —         | **Required.** Secret for signing access tokens. Min 32 chars                                   |
+| `REFRESH_TOKEN_SECRET` | —         | **Required.** Secret for signing refresh tokens. Min 32 chars                                  |
+| `ACCESS_TOKEN_EXPIRY`  | `1h`      | Access token lifetime (`60s`, `15m`, `1h`, `7d`, …)                                            |
+| `REFRESH_TOKEN_EXPIRY` | `30d`     | Refresh token lifetime                                                                         |
 | `GOOGLE_CLIENT_ID`     | _(empty)_ | OAuth client id whose ID tokens are accepted at `POST /auth/google`. Empty disables Google SSO |
 
 #### Authentication (imperative)
@@ -169,7 +169,10 @@ logic, so layering tenant/plan/role checks is just more code.
 `AuthController` (mounted at `/auth`) exposes the ready-made flows: `POST
 /auth/login`, `/auth/google`, `/auth/register`, `/auth/refresh`, `/auth/logout`,
 `/auth/change-password`, and `GET /auth/me`. Passwords are hashed/verified via
-`AuthUtility` (bcrypt); the write flows use the processor lifecycle. Every
+`AuthUtility` (bcrypt); the write flows use the processor lifecycle. Credential
+misses spend the same bcrypt work as a wrong password
+(`AuthUtility.compareAgainstDummy()`), so response timing does not reveal
+whether an account exists. Every
 `issueTokens()` call (login or refresh) creates a fresh `sys_auth_sessions` row
 and embeds its identifier in the access token as `sid`; `logout()` revokes the
 refresh token and invalidates that session, so a still-unexpired access token
@@ -255,20 +258,19 @@ admin with the `admin` role can grant `sys_admin_roles` to other admins via
 
 ### Queue (BullMQ / Redis)
 
-| Variable               | Default       | Description                                                                                         |
-| ---------------------- | ------------- | --------------------------------------------------------------------------------------------------- |
-| `BULL_REDIS_HOST`      | `localhost`   | Redis host for BullMQ                                                                               |
-| `BULL_REDIS_PORT`      | `6379`        | Redis port                                                                                          |
-| `BULL_REDIS_PASSWORD`  | _(empty)_     | Redis password                                                                                      |
-| `BULL_REDIS_DB`        | `0`           | Redis DB index                                                                                      |
-| `BULL_QUEUE_NAME`      | `myapp-queue` | Name of the BullMQ queue                                                                            |
-| `BULL_WORKERS`         | `2`           | Concurrent worker threads per process                                                               |
-| `BULL_QUEUE_WORKER`    | `false`       | Set `true` on consumer instances only — API servers should leave this `false`                       |
-| `BULL_JOB_TTL_SECONDS` | `86400`       | Retention (seconds) for completed/failed jobs before removal from the queue + Redis (default 1 day) |
-| `MAX_JOB_RETRIES`      | `3`           | Max attempts per job (BullMQ `attempts` default) and the scheduled-event retry ceiling              |
-| `SCHEDULED_EVENT_HOUR` | `1`           | Hour component of the `SetScheduledEventJob` cadence                                                |
-| `SCHEDULED_EVENT_MIN`  | `0`           | Minute component of the cadence                                                                     |
-| `SCHEDULED_EVENT_SEC`  | `0`           | Second component of the cadence (all three are summed; all-zero disables it)                        |
+| Variable                            | Default       | Description                                                                                         |
+| ----------------------------------- | ------------- | --------------------------------------------------------------------------------------------------- |
+| `BULL_REDIS_HOST`                   | `localhost`   | Redis host for BullMQ                                                                               |
+| `BULL_REDIS_PORT`                   | `6379`        | Redis port                                                                                          |
+| `BULL_REDIS_PASSWORD`               | _(empty)_     | Redis password                                                                                      |
+| `BULL_REDIS_DB`                     | `0`           | Redis DB index                                                                                      |
+| `BULL_QUEUE_NAME`                   | `myapp-queue` | Name of the BullMQ queue                                                                            |
+| `BULL_WORKERS`                      | `2`           | Concurrent worker threads per process                                                               |
+| `BULL_QUEUE_WORKER`                 | `false`       | Set `true` on consumer instances only — API servers should leave this `false`                       |
+| `BULL_JOB_TTL_SECONDS`              | `86400`       | Retention (seconds) for completed/failed jobs before removal from the queue + Redis (default 1 day) |
+| `MAX_JOB_RETRIES`                   | `3`           | Max attempts per job (BullMQ `attempts` default) and the scheduled-event retry ceiling              |
+| `SCHEDULED_EVENT_MIN`               | `0`           | `SetScheduledEventJob` cadence in minutes (every N minutes); `0`/unset disables self-scheduling     |
+| `ENABLE_SCHEDULED_EVENTS_EXECUTION` | _unset_       | Must be exactly `true` to arm scheduled-event materialisation and dispatch                          |
 
 #### Jobs
 
@@ -330,23 +332,57 @@ loop. Two tables back it:
 | `sys_scheduled_tasks`  | `SystemScheduledTaskEntity` | a schedule definition (`identifier`, `name`, `start_from`, `schedule_interval`, `enabled`, `next_upsert_at`)                           |
 | `sys_scheduled_events` | `ScheduledEventEntity`      | one row per fire time (`job_id` → task, `scheduled_at`, `started_at`, `failed_at`, `total_attempts`, `active`); one task → many events |
 
-At application bootstrap (once the job registry is populated), `JobConsumer`
-enrols `SetScheduledEventJob` as a
-recurring scheduler whose cadence comes from `SCHEDULED_EVENT_{HOUR,MIN,SEC}`
-(summed to an interval; all-zero disables it). BullMQ keys the scheduler on the
-job identifier, so re-running on each boot **upserts** rather than duplicates.
+`JobConsumer` enrols `SetScheduledEventJob` as a recurring scheduler once **both**
+the worker's Redis connection is ready and the application has bootstrapped —
+whichever lands second triggers it. Both conditions matter: BullMQ emits `ready`
+from the connection built in the `Worker` constructor, so it can arrive before the
+job registry exists, while enrolling at bootstrap alone would reach for Redis
+before it is known to be up. Because BullMQ schedules the first job of an `every`
+series at the current time, the first materialise-and-dispatch pass runs as soon as
+the worker is ready rather than one cadence later.
+
+Cadence comes from `SCHEDULED_EVENT_MIN` — every N minutes (`0`/unset disables it).
+BullMQ keys the scheduler on the job identifier, so re-running on each boot
+**upserts** rather than duplicates. Per-task schedules are separate: each
+`sys_scheduled_tasks` row carries its own `{hour, min, sec}` `schedule_interval`.
 
 Each tick, `SetScheduledEventJob.handle()` materialises due
 `sys_scheduled_events` rows from enabled `sys_scheduled_tasks` (using
 `ScheduleUtility.addInterval`) and triggers `DispatchScheduledEventJob`, which
-enqueues each due event's job (bounded by `MAX_JOB_RETRIES`).
+enqueues each due event's job. Set `ENABLE_SCHEDULED_EVENTS_EXECUTION=true` to
+arm it — the value must be exactly `true`.
+
+Each occurrence fires **once**. A pass claims an event by stamping `started_at`
+under a `started_at IS NULL` condition, incrementing `total_attempts` in the same
+statement, and only enqueues if that claim affected a row — so two concurrent
+passes cannot both dispatch it. Stamped rows are excluded from the due set. A
+failed enqueue releases the claim (`started_at` back to null) and records
+`failed_at`/`error`, so the event is retried on later ticks until `total_attempts`
+reaches `MAX_JOB_RETRIES` (default 3).
+
+Because the claim is written before the enqueue, dispatch is **at-most-once**: if
+the process dies in the window between them, that occurrence is skipped rather
+than dispatched twice. Once a job is on the queue, BullMQ's own `attempts` governs
+its retries.
+
+Materialisation is safe to run concurrently — `BULL_WORKERS` defaults to 2, and
+several worker instances may share one queue. Each due task is **claimed** before
+its event is created: a conditional `UPDATE` re-asserts `next_upsert_at < now`
+while advancing it, so a second racing pass matches zero rows and skips the task.
+The claim and the insert share a transaction, so a crash between them cannot
+advance the schedule without creating the occurrence it accounted for.
 `SystemScheduledTaskJob` (via `SystemScheduledTaskSubscriber`) keeps events in
 step with task changes — toggling `active` when a task is enabled/disabled and
 soft-deleting events when a task is removed.
 
-When a `ScheduledEventEntity` row is written, `ScheduledEventSubscriber` fires
-`ScheduledEventJob` with the database event — wire your per-event dispatch logic
-into that job's `handle()`.
+`DispatchScheduledEventJob` enqueues each due event under **the scheduled task's
+own `identifier`**, so register a job in your app whose identifier matches the
+`identifier` you gave the task — that job's `handle()` is what runs per fire time.
+
+`SystemScheduledTaskSubscriber` is the only entity subscriber this package
+registers, because it is the only one backed by a job that does real work.
+Subscribers for your own entities are yours to provide (see `CommonSubscriber`);
+a subscriber only starts firing once something constructs it.
 
 ### Document Storage
 
@@ -500,10 +536,25 @@ dispatch is skipped entirely — so development stays send-free by default.
 await new ProcessEmailNotification(emailNotificationService).process({
   identifier: 'user.welcome',
   data: { name: 'Jane' }, // payload for the remote template renderer
-  emailRecepients: [{ recepient: 'jane@example.com', cc: ['ops@example.com'] }],
+  emailRecipients: [{ recipient: 'jane@example.com', cc: ['ops@example.com'] }],
 });
 ```
 
+The templates the library itself dispatches are named by the
+`EmailTemplateIdentifier` enum — seed a matching `sys_email_templates` row for each
+one you want delivered:
+
+| Identifier              | Sent by                   | Recipient          | `data` keys                                                                 |
+| ----------------------- | ------------------------- | ------------------ | --------------------------------------------------------------------------- |
+| `tenant-onboarded`      | `TenantDataProcessor`     | tenant's POC email | `tenant_name`, `tenant_poc`, `tenant_email`, `onboarded_on`, support fields |
+| `tenant-user-onboarded` | `ClientUserDataProcessor` | the new user       | `user_name`, `user_email`, `tenant_name`, `onboarded_on`, support fields    |
+
+Both add `support_email` and `support_link`, read from the `support_email` /
+`support_link` system properties and falling back to the placeholders in
+`EmailNotificationDefault`. Neither send can fail its flow: the row is committed
+first, so a missing template or SES error is logged as a warning and the request
+still succeeds.
+
 ## List Endpoints & Filtering
 
 List endpoints are `POST .../list` routes backed by `CommonListProcessor`: a
@@ -517,13 +568,13 @@ into the SQL.
 Each `FilterDto` is `{ identifier, operator, value, value_type }`. The raw
 string `value` is cast per its declared `value_type` before binding:
 
-| `value_type` | Cast                                                                     |
-| ------------ | ------------------------------------------------------------------------ |
-| `str`        | used as-is                                                               |
-| `num`        | `Number(value)` — rejects empty / non-numeric input                      |
-| `date`       | `new Date(value)` — rejects invalid dates                                |
+| `value_type` | Cast                                                                          |
+| ------------ | ----------------------------------------------------------------------------- |
+| `str`        | used as-is                                                                    |
+| `num`        | `Number(value)` — rejects empty / non-numeric input                           |
+| `date`       | `new Date(value)` — rejects invalid dates                                     |
 | `bool`       | case-insensitive `'true'` / `'false'` → real boolean, rejects everything else |
-| `null`       | bound as SQL `NULL`                                                      |
+| `null`       | bound as SQL `NULL`                                                           |
 
 Operators: `eq`, `ne`, `in`, `gt`, `gte`, `lt`, `lte`, `like`, `ilike`,
 `between`, `isNull`. Multi-value operators (`in`, `between`) take
@@ -535,11 +586,26 @@ comma-separated values and cast each part; `isNull` reads its value truthily
   "page": 1,
   "limit": 10,
   "filters": [
-    { "identifier": "tenant_name", "operator": "ilike", "value": "acme", "value_type": "str" },
-    { "identifier": "is_active", "operator": "eq", "value": "true", "value_type": "bool" },
-    { "identifier": "created_at", "operator": "between", "value": "2026-01-01, 2026-06-30", "value_type": "date" }
+    {
+      "identifier": "tenant_name",
+      "operator": "ilike",
+      "value": "acme",
+      "value_type": "str",
+    },
+    {
+      "identifier": "is_active",
+      "operator": "eq",
+      "value": "true",
+      "value_type": "bool",
+    },
+    {
+      "identifier": "created_at",
+      "operator": "between",
+      "value": "2026-01-01, 2026-06-30",
+      "value_type": "date",
+    },
   ],
-  "sorts": [{ "identifier": "created_at", "direction": "DESC" }]
+  "sorts": [{ "identifier": "created_at", "direction": "DESC" }],
 }
 ```
 
@@ -561,11 +627,11 @@ satisfies any junior requirement. They're held by admins only
 (`sys_admin_users`, via `sys_auser_roles`) — never by tenant users:
 
 | Role (`sys_admin_roles.identifier`) | Capability                                           |
-| ------------------------------------ | ---------------------------------------------------- |
-| `global.super.admin`     | View/change/delete everything, including tenant info |
-| `global.admin`           | Tenant listing and admin-user management             |
-| `global.content.manager` | View/change/edit everything except tenant info       |
-| `global.content.reader`  | Read-only access to non-tenant content               |
+| ----------------------------------- | ---------------------------------------------------- |
+| `global.super.admin`                | View/change/delete everything, including tenant info |
+| `global.admin`                      | Tenant listing and admin-user management             |
+| `global.content.manager`            | View/change/edit everything except tenant info       |
+| `global.content.reader`             | Read-only access to non-tenant content               |
 
 `AdminAccessService` exposes `validateSuperAdmin()`, `validateAdmin()`,
 `validateContentManager()` and `validateContentReader()`. Each authenticates
@@ -575,8 +641,8 @@ pass the actor to a processor.
 
 ### Endpoints
 
-| Route                            | Min. role       | Processor                    |
-| -------------------------------- | --------------- | ---------------------------- |
+| Route                              | Min. role       | Processor                    |
+| ---------------------------------- | --------------- | ---------------------------- |
 | `POST /admin/tenants`              | super admin     | `TenantDataProcessor`        |
 | `POST /admin/tenants/list`         | admin           | `TenantListProcessor`        |
 | `POST /admin/users/clients`        | super admin     | `ClientUserDataProcessor`    |
@@ -598,10 +664,20 @@ at `/admin/auth` (`AdminAuthController`) — see
 @Post()
 async onboard(@Body() dto: AddTenantDto) {
   const { user } = await this.adminAccessService.validateSuperAdmin();
-  return new TenantDataProcessor(user).process(dto);
+  return new TenantDataProcessor(
+    user,
+    this.emailNotificationService,
+    this.systemPropertyService,
+  ).process(dto);
 }
 ```
 
+Onboarding a tenant (`tenant-onboarded`) or a single client user
+(`tenant-user-onboarded`) also sends a templated welcome email — see
+[Templated Email](#templated-email-aws-ses) for the payloads. That is why
+`AdminModule` imports `NotificationModule` and `SystemPropertyModule`; bulk
+registration deliberately sends nothing.
+
 Data processors extend `CommonDataProcessor` and are created per request
 (`new XxxDataProcessor(...deps).process(dto)`); list processors return a
 `PaginatedResult`. Bulk registration validates the entire batch before any insert.

package/dist/admin/admin.module.d.ts

@@ -1,7 +1,6 @@
 import { DynamicModule } from '@nestjs/common';
-export interface AdminModuleOptions {
-    dataSourceName?: string;
-}
+import type { AdminModuleOptions } from './types/admin.types';
+export type { AdminModuleOptions } from './types/admin.types';
 export declare class AdminModule {
     static register(options?: AdminModuleOptions): DynamicModule;
 }

package/dist/admin/admin.module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.module.d.ts","sourceRoot":"","sources":["../../src/admin/admin.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAU,MAAM,gBAAgB,CAAC;AAOvD,MAAM,WAAW,kBAAkB;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAWD,qBAMa,WAAW;IACtB,MAAM,CAAC,QAAQ,CAAC,OAAO,GAAE,kBAAuB,GAAG,aAAa;CASjE"}
+{"version":3,"file":"admin.module.d.ts","sourceRoot":"","sources":["../../src/admin/admin.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAU,MAAM,gBAAgB,CAAC;AAIvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAG9D,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAc9D,qBAMa,WAAW;IACtB,MAAM,CAAC,QAAQ,CAAC,OAAO,GAAE,kBAAuB,GAAG,aAAa;CAcjE"}

package/dist/admin/admin.module.js

@@ -12,12 +12,19 @@ const common_1 = require("@nestjs/common");
 const auth_module_1 = require("../auth/auth.module");
 const tenant_module_1 = require("../tenant/tenant.module");
 const es6_classes_1 = require("./es6.classes");
+const notification_module_1 = require("../notification/notification.module");
+const system_property_module_1 = require("../common/system.property.module");
 const [AdminAccessService] = es6_classes_1.es6Classes.services;
 let AdminModule = AdminModule_1 = class AdminModule {
     static register(options = {}) {
         return {
             module: AdminModule_1,
-            imports: [auth_module_1.AuthModule.register(options), tenant_module_1.TenantModule.register(options)],
+            imports: [
+                auth_module_1.AuthModule.register(options),
+                tenant_module_1.TenantModule.register(options),
+                notification_module_1.NotificationModule.register(options),
+                system_property_module_1.SystemPropertyModule.register(options),
+            ],
             controllers: [...es6_classes_1.es6Classes.controllers],
             providers: [...es6_classes_1.es6Classes.services],
             exports: [...es6_classes_1.es6Classes.services],
@@ -27,7 +34,7 @@ let AdminModule = AdminModule_1 = class AdminModule {
 exports.AdminModule = AdminModule;
 exports.AdminModule = AdminModule = AdminModule_1 = __decorate([
     (0, common_1.Module)({
-        imports: [auth_module_1.AuthModule, tenant_module_1.TenantModule],
+        imports: [auth_module_1.AuthModule, tenant_module_1.TenantModule, notification_module_1.NotificationModule, system_property_module_1.SystemPropertyModule],
         controllers: [...es6_classes_1.es6Classes.controllers],
         providers: [...es6_classes_1.es6Classes.services],
         exports: [...es6_classes_1.es6Classes.services],

package/dist/admin/admin.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin.module.js","sourceRoot":"","sources":["../../src/admin/admin.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuD;AACvD,qDAAiD;AACjD,2DAAuD;AACvD,+CAA2C;AAE3C,MAAM,CAAC,kBAAkB,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;AAqB1C,IAAM,WAAW,mBAAjB,MAAM,WAAW;IACtB,MAAM,CAAC,QAAQ,CAAC,UAA8B,EAAE;QAC9C,OAAO;YACL,MAAM,EAAE,aAAW;YACnB,OAAO,EAAE,CAAC,wBAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,4BAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACvE,WAAW,EAAE,CAAC,GAAG,wBAAU,CAAC,WAAW,CAAC;YACxC,SAAS,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;YACnC,OAAO,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;SAClC,CAAC;IACJ,CAAC;CACF,CAAA;AAVY,kCAAW;sBAAX,WAAW;IANvB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,wBAAU,EAAE,4BAAY,CAAC;QACnC,WAAW,EAAE,CAAC,GAAG,wBAAU,CAAC,WAAW,CAAC;QACxC,SAAS,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;QACnC,OAAO,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;KAClC,CAAC;GACW,WAAW,CAUvB"}
+{"version":3,"file":"admin.module.js","sourceRoot":"","sources":["../../src/admin/admin.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuD;AACvD,qDAAiD;AACjD,2DAAuD;AACvD,+CAA2C;AAE3C,6EAAyE;AACzE,6EAAwE;AAGxE,MAAM,CAAC,kBAAkB,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;AAkB1C,IAAM,WAAW,mBAAjB,MAAM,WAAW;IACtB,MAAM,CAAC,QAAQ,CAAC,UAA8B,EAAE;QAC9C,OAAO;YACL,MAAM,EAAE,aAAW;YACnB,OAAO,EAAE;gBACP,wBAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC5B,4BAAY,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC9B,wCAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACpC,6CAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC;aACvC;YACD,WAAW,EAAE,CAAC,GAAG,wBAAU,CAAC,WAAW,CAAC;YACxC,SAAS,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;YACnC,OAAO,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;SAClC,CAAC;IACJ,CAAC;CACF,CAAA;AAfY,kCAAW;sBAAX,WAAW;IANvB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,wBAAU,EAAE,4BAAY,EAAE,wCAAkB,EAAE,6CAAoB,CAAC;QAC7E,WAAW,EAAE,CAAC,GAAG,wBAAU,CAAC,WAAW,CAAC;QACxC,SAAS,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;QACnC,OAAO,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;KAClC,CAAC;GACW,WAAW,CAevB"}

package/dist/admin/controllers/admin.scheduled.task.controller.js

@@ -61,7 +61,7 @@ __decorate([
 exports.AdminScheduledTaskController = AdminScheduledTaskController = __decorate([
     (0, swagger_1.ApiTags)('Admin - Scheduled Tasks'),
     (0, swagger_1.ApiBearerAuth)(),
-    (0, common_1.Controller)('admin/scheduled-tasks'),
+    (0, common_1.Controller)('api/admin/scheduled-tasks'),
     __metadata("design:paramtypes", [admin_access_service_1.AdminAccessService,
         sql_service_1.SqlService])
 ], AdminScheduledTaskController);

package/dist/admin/controllers/admin.scheduled.task.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin.scheduled.task.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.scheduled.task.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwD;AACxD,6CAAuE;AACvE,mEAA+D;AAC/D,2EAAsE;AACtE,8FAAwF;AACxF,8FAAwF;AACxF,2EAAqE;AACrE,6EAAuE;AAKhE,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IACvC,YACmB,kBAAsC,EACtC,UAAsB;QADtB,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,eAAU,GAAV,UAAU,CAAY;IACtC,CAAC;IAOE,AAAN,KAAK,CAAC,GAAG,CAAS,GAAwB;QACxC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,sBAAsB,EAAE,CAAC;QACxE,OAAO,IAAI,0DAA0B,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;IAOK,AAAN,KAAK,CAAC,IAAI,CAAS,GAAyB;QAC1C,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,IAAI,0DAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtE,CAAC;CACF,CAAA;AAzBY,oEAA4B;AAWjC;IALL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,uBAAuB;QAChC,WAAW,EAAE,oDAAoD;KAClE,CAAC;IACS,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,4CAAmB;;uDAGzC;AAOK;IALL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,0CAA0C;QACnD,WAAW,EAAE,mDAAmD;KACjE,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,8CAAoB;;wDAG3C;uCAxBU,4BAA4B;IAHxC,IAAA,iBAAO,EAAC,yBAAyB,CAAC;IAClC,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,uBAAuB,CAAC;qCAGK,yCAAkB;QAC1B,wBAAU;GAH9B,4BAA4B,CAyBxC"}
+{"version":3,"file":"admin.scheduled.task.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.scheduled.task.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwD;AACxD,6CAAuE;AACvE,mEAA+D;AAC/D,2EAAsE;AACtE,8FAAwF;AACxF,8FAAwF;AACxF,2EAAqE;AACrE,6EAAuE;AAKhE,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IACvC,YACmB,kBAAsC,EACtC,UAAsB;QADtB,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,eAAU,GAAV,UAAU,CAAY;IACtC,CAAC;IAOE,AAAN,KAAK,CAAC,GAAG,CAAS,GAAwB;QACxC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,sBAAsB,EAAE,CAAC;QACxE,OAAO,IAAI,0DAA0B,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;IAOK,AAAN,KAAK,CAAC,IAAI,CAAS,GAAyB;QAC1C,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,IAAI,0DAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtE,CAAC;CACF,CAAA;AAzBY,oEAA4B;AAWjC;IALL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,uBAAuB;QAChC,WAAW,EAAE,oDAAoD;KAClE,CAAC;IACS,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,4CAAmB;;uDAGzC;AAOK;IALL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,0CAA0C;QACnD,WAAW,EAAE,mDAAmD;KACjE,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,8CAAoB;;wDAG3C;uCAxBU,4BAA4B;IAHxC,IAAA,iBAAO,EAAC,yBAAyB,CAAC;IAClC,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,2BAA2B,CAAC;qCAGC,yCAAkB;QAC1B,wBAAU;GAH9B,4BAA4B,CAyBxC"}

package/dist/admin/controllers/admin.tenant.controller.d.ts

@@ -2,10 +2,14 @@ import { SqlService } from '../../common/services/sql.service';
 import { AdminAccessService } from '../services/admin.access.service';
 import { AddTenantDto } from '../dtos/add.tenant.dto';
 import { TenantListDto } from '../dtos/tenant.list.dto';
+import { EmailNotificationService } from '../../notification/services/email.notification.service';
+import { SystemPropertyService } from '../../common/services/system.property.service';
 export declare class AdminTenantController {
     private readonly adminAccessService;
     private readonly sqlService;
-    constructor(adminAccessService: AdminAccessService, sqlService: SqlService);
+    private readonly emailNotificationService;
+    private readonly systemPropertyService;
+    constructor(adminAccessService: AdminAccessService, sqlService: SqlService, emailNotificationService: EmailNotificationService, systemPropertyService: SystemPropertyService);
     onboard(dto: AddTenantDto): Promise<import("../..").TenantEntity>;
     list(dto: TenantListDto): Promise<{
         records: import("../..").SqlRow[];

package/dist/admin/controllers/admin.tenant.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.tenant.controller.d.ts","sourceRoot":"","sources":["../../../src/admin/controllers/admin.tenant.controller.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAGtE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,qBAGa,qBAAqB;IAE9B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,kBAAkB,EAAE,kBAAkB,EACtC,UAAU,EAAE,UAAU;IAQnC,OAAO,CAAS,GAAG,EAAE,YAAY;IAUjC,IAAI,CAAS,GAAG,EAAE,aAAa;;;;;;;CAItC"}
+{"version":3,"file":"admin.tenant.controller.d.ts","sourceRoot":"","sources":["../../../src/admin/controllers/admin.tenant.controller.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAGtE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AAClG,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AAEtF,qBAGa,qBAAqB;IAE9B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IACzC,OAAO,CAAC,QAAQ,CAAC,qBAAqB;gBAHrB,kBAAkB,EAAE,kBAAkB,EACtC,UAAU,EAAE,UAAU,EACtB,wBAAwB,EAAE,wBAAwB,EAClD,qBAAqB,EAAE,qBAAqB;IAQzD,OAAO,CAAS,GAAG,EAAE,YAAY;IAejC,IAAI,CAAS,GAAG,EAAE,aAAa;;;;;;;CAItC"}

package/dist/admin/controllers/admin.tenant.controller.js

@@ -21,14 +21,18 @@ const tenant_data_processor_1 = require("../libraries/tenant.data.processor");
 const tenant_list_processor_1 = require("../libraries/tenant.list.processor");
 const add_tenant_dto_1 = require("../dtos/add.tenant.dto");
 const tenant_list_dto_1 = require("../dtos/tenant.list.dto");
+const email_notification_service_1 = require("../../notification/services/email.notification.service");
+const system_property_service_1 = require("../../common/services/system.property.service");
 let AdminTenantController = class AdminTenantController {
-    constructor(adminAccessService, sqlService) {
+    constructor(adminAccessService, sqlService, emailNotificationService, systemPropertyService) {
         this.adminAccessService = adminAccessService;
         this.sqlService = sqlService;
+        this.emailNotificationService = emailNotificationService;
+        this.systemPropertyService = systemPropertyService;
     }
     async onboard(dto) {
         const { user } = await this.adminAccessService.validateSuperAdmin();
-        return new tenant_data_processor_1.TenantDataProcessor(user).process(dto);
+        return new tenant_data_processor_1.TenantDataProcessor(user, this.emailNotificationService, this.systemPropertyService).process(dto);
     }
     async list(dto) {
         await this.adminAccessService.validateAdmin();
@@ -61,8 +65,10 @@ __decorate([
 exports.AdminTenantController = AdminTenantController = __decorate([
     (0, swagger_1.ApiTags)('Admin - Tenants'),
     (0, swagger_1.ApiBearerAuth)(),
-    (0, common_1.Controller)('admin/tenants'),
+    (0, common_1.Controller)('api/admin/tenants'),
     __metadata("design:paramtypes", [admin_access_service_1.AdminAccessService,
-        sql_service_1.SqlService])
+        sql_service_1.SqlService,
+        email_notification_service_1.EmailNotificationService,
+        system_property_service_1.SystemPropertyService])
 ], AdminTenantController);
 //# sourceMappingURL=admin.tenant.controller.js.map

package/dist/admin/controllers/admin.tenant.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin.tenant.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.tenant.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwD;AACxD,6CAAuE;AACvE,mEAA+D;AAC/D,2EAAsE;AACtE,8EAAyE;AACzE,8EAAyE;AACzE,2DAAsD;AACtD,6DAAwD;AAKjD,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,YACmB,kBAAsC,EACtC,UAAsB;QADtB,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,eAAU,GAAV,UAAU,CAAY;IACtC,CAAC;IAOE,AAAN,KAAK,CAAC,OAAO,CAAS,GAAiB;QACrC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QACpE,OAAO,IAAI,2CAAmB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpD,CAAC;IAOK,AAAN,KAAK,CAAC,IAAI,CAAS,GAAkB;QACnC,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC9C,OAAO,IAAI,2CAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;CACF,CAAA;AAzBY,sDAAqB;AAW1B;IALL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,yCAAyC;QAClD,WAAW,EAAE,uCAAuC;KACrD,CAAC;IACa,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,6BAAY;;oDAGtC;AAOK;IALL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EAAE,0CAA0C;KACxD,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,+BAAa;;iDAGpC;gCAxBU,qBAAqB;IAHjC,IAAA,iBAAO,EAAC,iBAAiB,CAAC;IAC1B,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,eAAe,CAAC;qCAGa,yCAAkB;QAC1B,wBAAU;GAH9B,qBAAqB,CAyBjC"}
+{"version":3,"file":"admin.tenant.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.tenant.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwD;AACxD,6CAAuE;AACvE,mEAA+D;AAC/D,2EAAsE;AACtE,8EAAyE;AACzE,8EAAyE;AACzE,2DAAsD;AACtD,6DAAwD;AACxD,uGAAkG;AAClG,2FAAsF;AAK/E,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,YACmB,kBAAsC,EACtC,UAAsB,EACtB,wBAAkD,EAClD,qBAA4C;QAH5C,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,eAAU,GAAV,UAAU,CAAY;QACtB,6BAAwB,GAAxB,wBAAwB,CAA0B;QAClD,0BAAqB,GAArB,qBAAqB,CAAuB;IAC5D,CAAC;IAOE,AAAN,KAAK,CAAC,OAAO,CAAS,GAAiB;QACrC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QAEpE,OAAO,IAAI,2CAAmB,CAC5B,IAAI,EACJ,IAAI,CAAC,wBAAwB,EAC7B,IAAI,CAAC,qBAAqB,CAC3B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAOK,AAAN,KAAK,CAAC,IAAI,CAAS,GAAkB;QACnC,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC9C,OAAO,IAAI,2CAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;CACF,CAAA;AAhCY,sDAAqB;AAa1B;IALL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,yCAAyC;QAClD,WAAW,EAAE,uCAAuC;KACrD,CAAC;IACa,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,6BAAY;;oDAQtC;AAOK;IALL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EAAE,0CAA0C;KACxD,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,+BAAa;;iDAGpC;gCA/BU,qBAAqB;IAHjC,IAAA,iBAAO,EAAC,iBAAiB,CAAC;IAC1B,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,mBAAmB,CAAC;qCAGS,yCAAkB;QAC1B,wBAAU;QACI,qDAAwB;QAC3B,+CAAqB;GALpD,qBAAqB,CAgCjC"}

package/dist/admin/controllers/admin.user.controller.d.ts

@@ -3,12 +3,16 @@ import { AdminAccessService } from '../services/admin.access.service';
 import { AddClientUserDto } from '../dtos/add.client.user.dto';
 import { AddBulkUsersDto } from '../dtos/add.bulk.users.dto';
 import { AddAdminUserDto } from '../dtos/add.admin.user.dto';
+import { EmailNotificationService } from '../../notification/services/email.notification.service';
+import { SystemPropertyService } from '../../common/services/system.property.service';
 export declare class AdminUserController {
     private readonly adminAccessService;
     private readonly tenantService;
-    constructor(adminAccessService: AdminAccessService, tenantService: TenantService);
+    private readonly emailNotificationService;
+    private readonly systemPropertyService;
+    constructor(adminAccessService: AdminAccessService, tenantService: TenantService, emailNotificationService: EmailNotificationService, systemPropertyService: SystemPropertyService);
     addClientUser(dto: AddClientUserDto): Promise<import("../..").UserEntity>;
-    addClientUsersBulk(dto: AddBulkUsersDto): Promise<import("../libraries/bulk.user.data.processor").BulkUserResult>;
+    addClientUsersBulk(dto: AddBulkUsersDto): Promise<import("../types/admin.types").BulkUserResult>;
     addAdminUser(dto: AddAdminUserDto): Promise<import("../..").AdminUserEntity>;
 }
 //# sourceMappingURL=admin.user.controller.d.ts.map

package/dist/admin/controllers/admin.user.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.user.controller.d.ts","sourceRoot":"","sources":["../../../src/admin/controllers/admin.user.controller.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAItE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,qBAGa,mBAAmB;IAE5B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa;gBADb,kBAAkB,EAAE,kBAAkB,EACtC,aAAa,EAAE,aAAa;IAQzC,aAAa,CAAS,GAAG,EAAE,gBAAgB;IAU3C,kBAAkB,CAAS,GAAG,EAAE,eAAe;IAU/C,YAAY,CAAS,GAAG,EAAE,eAAe;CAIhD"}
+{"version":3,"file":"admin.user.controller.d.ts","sourceRoot":"","sources":["../../../src/admin/controllers/admin.user.controller.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAItE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AAClG,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AAEtF,qBAGa,mBAAmB;IAE5B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IACzC,OAAO,CAAC,QAAQ,CAAC,qBAAqB;gBAHrB,kBAAkB,EAAE,kBAAkB,EACtC,aAAa,EAAE,aAAa,EAC5B,wBAAwB,EAAE,wBAAwB,EAClD,qBAAqB,EAAE,qBAAqB;IAQzD,aAAa,CAAS,GAAG,EAAE,gBAAgB;IAc3C,kBAAkB,CAAS,GAAG,EAAE,eAAe;IAU/C,YAAY,CAAS,GAAG,EAAE,eAAe;CAIhD"}

package/dist/admin/controllers/admin.user.controller.js

@@ -23,14 +23,18 @@ const admin_user_data_processor_1 = require("../libraries/admin.user.data.proces
 const add_client_user_dto_1 = require("../dtos/add.client.user.dto");
 const add_bulk_users_dto_1 = require("../dtos/add.bulk.users.dto");
 const add_admin_user_dto_1 = require("../dtos/add.admin.user.dto");
+const email_notification_service_1 = require("../../notification/services/email.notification.service");
+const system_property_service_1 = require("../../common/services/system.property.service");
 let AdminUserController = class AdminUserController {
-    constructor(adminAccessService, tenantService) {
+    constructor(adminAccessService, tenantService, emailNotificationService, systemPropertyService) {
         this.adminAccessService = adminAccessService;
         this.tenantService = tenantService;
+        this.emailNotificationService = emailNotificationService;
+        this.systemPropertyService = systemPropertyService;
     }
     async addClientUser(dto) {
         await this.adminAccessService.validateSuperAdmin();
-        return new client_user_data_processor_1.ClientUserDataProcessor(this.tenantService).process(dto);
+        return new client_user_data_processor_1.ClientUserDataProcessor(this.tenantService, this.emailNotificationService, this.systemPropertyService).process(dto);
     }
     async addClientUsersBulk(dto) {
         await this.adminAccessService.validateSuperAdmin();
@@ -78,8 +82,10 @@ __decorate([
 exports.AdminUserController = AdminUserController = __decorate([
     (0, swagger_1.ApiTags)('Admin - Users'),
     (0, swagger_1.ApiBearerAuth)(),
-    (0, common_1.Controller)('admin/users'),
+    (0, common_1.Controller)('api/admin/users'),
     __metadata("design:paramtypes", [admin_access_service_1.AdminAccessService,
-        tenant_service_1.TenantService])
+        tenant_service_1.TenantService,
+        email_notification_service_1.EmailNotificationService,
+        system_property_service_1.SystemPropertyService])
 ], AdminUserController);
 //# sourceMappingURL=admin.user.controller.js.map

package/dist/admin/controllers/admin.user.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin.user.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.user.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwD;AACxD,6CAAuE;AACvE,yEAAqE;AACrE,2EAAsE;AACtE,wFAAkF;AAClF,oFAA8E;AAC9E,sFAAgF;AAChF,qEAA+D;AAC/D,mEAA6D;AAC7D,mEAA6D;AAKtD,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC9B,YACmB,kBAAsC,EACtC,aAA4B;QAD5B,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,kBAAa,GAAb,aAAa,CAAe;IAC5C,CAAC;IAOE,AAAN,KAAK,CAAC,aAAa,CAAS,GAAqB;QAC/C,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QACnD,OAAO,IAAI,oDAAuB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtE,CAAC;IAOK,AAAN,KAAK,CAAC,kBAAkB,CAAS,GAAoB;QACnD,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QACnD,OAAO,IAAI,gDAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpE,CAAC;IAOK,AAAN,KAAK,CAAC,YAAY,CAAS,GAAoB;QAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,kDAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;CACF,CAAA;AAnCY,kDAAmB;AAWxB;IALL,IAAA,aAAI,EAAC,SAAS,CAAC;IACf,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gDAAgD;QACzD,WAAW,EAAE,uCAAuC;KACrD,CAAC;IACmB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,sCAAgB;;wDAGhD;AAOK;IALL,IAAA,aAAI,EAAC,cAAc,CAAC;IACpB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8CAA8C;QACvD,WAAW,EAAE,uCAAuC;KACrD,CAAC;IACwB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,oCAAe;;6DAGpD;AAOK;IALL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EAAE,0CAA0C;KACxD,CAAC;IACkB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,oCAAe;;uDAG9C;8BAlCU,mBAAmB;IAH/B,IAAA,iBAAO,EAAC,eAAe,CAAC;IACxB,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,aAAa,CAAC;qCAGe,yCAAkB;QACvB,8BAAa;GAHpC,mBAAmB,CAmC/B"}
+{"version":3,"file":"admin.user.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.user.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwD;AACxD,6CAAuE;AACvE,yEAAqE;AACrE,2EAAsE;AACtE,wFAAkF;AAClF,oFAA8E;AAC9E,sFAAgF;AAChF,qEAA+D;AAC/D,mEAA6D;AAC7D,mEAA6D;AAC7D,uGAAkG;AAClG,2FAAsF;AAK/E,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC9B,YACmB,kBAAsC,EACtC,aAA4B,EAC5B,wBAAkD,EAClD,qBAA4C;QAH5C,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,kBAAa,GAAb,aAAa,CAAe;QAC5B,6BAAwB,GAAxB,wBAAwB,CAA0B;QAClD,0BAAqB,GAArB,qBAAqB,CAAuB;IAC5D,CAAC;IAOE,AAAN,KAAK,CAAC,aAAa,CAAS,GAAqB;QAC/C,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QACnD,OAAO,IAAI,oDAAuB,CAChC,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,wBAAwB,EAC7B,IAAI,CAAC,qBAAqB,CAC3B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAOK,AAAN,KAAK,CAAC,kBAAkB,CAAS,GAAoB;QACnD,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QACnD,OAAO,IAAI,gDAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpE,CAAC;IAOK,AAAN,KAAK,CAAC,YAAY,CAAS,GAAoB;QAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,kDAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;CACF,CAAA;AAzCY,kDAAmB;AAaxB;IALL,IAAA,aAAI,EAAC,SAAS,CAAC;IACf,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gDAAgD;QACzD,WAAW,EAAE,uCAAuC;KACrD,CAAC;IACmB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,sCAAgB;;wDAOhD;AAOK;IALL,IAAA,aAAI,EAAC,cAAc,CAAC;IACpB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8CAA8C;QACvD,WAAW,EAAE,uCAAuC;KACrD,CAAC;IACwB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,oCAAe;;6DAGpD;AAOK;IALL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EAAE,0CAA0C;KACxD,CAAC;IACkB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,oCAAe;;uDAG9C;8BAxCU,mBAAmB;IAH/B,IAAA,iBAAO,EAAC,eAAe,CAAC;IACxB,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,iBAAiB,CAAC;qCAGW,yCAAkB;QACvB,8BAAa;QACF,qDAAwB;QAC3B,+CAAqB;GALpD,mBAAmB,CAyC/B"}

package/dist/admin/libraries/admin.user.data.processor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.user.data.processor.d.ts","sourceRoot":"","sources":["../../../src/admin/libraries/admin.user.data.processor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAGxE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAG7D,qBAAa,sBAAuB,SAAQ,mBAAmB;IAGjD,OAAO,CAAC,QAAQ,CAAC,KAAK;IAFlC,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC;gBAEN,KAAK,EAAE,eAAe;IAI7C,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;YAMnD,QAAQ;YAQR,MAAM;YAiBN,oBAAoB;YAQpB,uBAAuB;YASvB,iBAAiB;YAiBjB,eAAe;IAc7B,OAAO,CAAC,YAAY;CAIrB"}
+{"version":3,"file":"admin.user.data.processor.d.ts","sourceRoot":"","sources":["../../../src/admin/libraries/admin.user.data.processor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAGxE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAI7D,qBAAa,sBAAuB,SAAQ,mBAAmB;IAGjD,OAAO,CAAC,QAAQ,CAAC,KAAK;IAFlC,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC;gBAEN,KAAK,EAAE,eAAe;IAI7C,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;YAMnD,QAAQ;YAQR,MAAM;YAiBN,oBAAoB;YAQpB,uBAAuB;YASvB,iBAAiB;YAiBjB,eAAe;IAc7B,OAAO,CAAC,YAAY;CAIrB"}