@neohm/nestend 3.3.9 → 3.3.10

package/README.md

@@ -104,7 +104,7 @@ these are free to change without a breaking release.
 | Area              | Key exports                                                                                                                          | Notes                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
 | ----------------- | ------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | Entities          | `RootEntity`, `CommonEntity`, `CommonAdminEntity`, `UserEntity`, `AdminUserEntity`, `SystemRoleEntity`, `SystemAdminRoleEntity`, ... | uuid PK, soft deletes, `created_by`/`updated_by` (+ `creator`/`updater` relations), jsonb `attributes`; entity-level `findOneOrNew`, `hardDelete`, `restore`, `paginate` statics plus a row-wise `softDelete()`                                                                                                                                                                                                                                                                                         |
-| Migrations        | `MigrationUtility`, `SeederUtility` (the 28 table migrations ship in `dist/migrations` — glob them, they are not barrel exports)     | fluent `this.string()`, `this.numeric()`, `addRecord()` seeding                                                                                                                                                                                                                                                                                                                                                                                                                                         |
+| Migrations        | `MigrationUtility`, `SeederUtility` (the 29 table migrations ship in `dist/migrations` — glob them, they are not barrel exports)     | fluent `this.string()`, `this.numeric()`, `addRecord()` seeding                                                                                                                                                                                                                                                                                                                                                                                                                                         |
 | Queue             | `QueueModule`, `QueueModule.withConnection()`, `QueueService`, `CommonJob`                                                           | BullMQ `@Processor`/`WorkerHost` consumer; auto-discovered jobs, duplicate prevention, recurring schedulers, completed jobs cleared from Redis on success (1-day TTL on failures), `clearQueue()`, retries, failures persisted to `sys_failed_jobs`; connection from `BULL_REDIS_*` or supplied by the app — never register `BullModule.forRoot()` yourself, two roots race over the worker's connection                                                                                                |
 | Scheduled events  | `SystemScheduledTaskEntity`, `ScheduledEventEntity`, `ScheduleKind`, `ScheduleSpec`, `IsCronExpression`                              | schedule definitions in `sys_scheduled_tasks` → events in `sys_scheduled_events`; interval / cron / once specs with timezones, drift-free slots, horizon materialisation, catch-up + overlap policies, fire-once dispatch with backoff, cadence via `SCHEDULED_EVENT_MIN`                                                                                                                                                                                                                               |
 | Auth              | `AuthModule`, `AuthService.validateRole()`, `RoleTier`, `TenantRole`, `Auth`, `JwtMiddleware`                                        | imperative auth (open by default); `<module>.<tier>` role hierarchy (manager > writer > viewer), with `global.admin` overriding every role check; JwtMiddleware resolves the user into `Auth`'s AsyncLocalStorage context per request; access + rotating refresh tokens; session-based logout invalidation (`sys_auth_sessions`); Google SSO via ID token at `POST /auth/google`; impersonation — a tenantless `has_global_access` user signs into one organization at `POST /auth/impersonation/login` |
@@ -112,15 +112,15 @@ these are free to change without a breaking release.
 | API keys          | `ApiKeyService`, `ApiKeyGuard` / `ApiKeyMiddleware`, `@ApiKeyScopes()`, `ApiKeyContext`                                              | hashed keys in `sys_api_keys` (admin-owned), one tenant per key, expiry/revocation, `x-api-key` header; `validateAccess(scope)` returns the tenant the key acts for                                                                                                                                                                                                                                                                                                                                     |
 | Scopes            | `ScopeService`, `AuthService.validateAccess()`, `ScopeEntity`, `TenantScopeEntity`, `ApiScopeEntity`                                 | one feature named once in `sys_scopes`, then granted per organization (`sys_tenant_scopes`) or per API key (`sys_api_scopes`) — never an array on the principal                                                                                                                                                                                                                                                                                                                                         |
 | Multi-tenancy     | `TenantModule`, `TenantEntity`, `CommonTenantEntity`, `TenantContextService`, `TenantContextMiddleware`                              | AsyncLocalStorage tenant context; resolve by header, slug, or domain; tenants are onboarded by admins (`TenantEntity.creator` → `AdminUserEntity`)                                                                                                                                                                                                                                                                                                                                                      |
-| Admin             | `AdminModule` (its controllers, DTOs and processors are internal — import the module and hit the endpoints), `GlobalAdminRoles`      | back-office APIs: tenant onboarding, client/admin/system user registration (single + bulk), the `has_global_access` grant that enables impersonation, tenant + scheduled-task listing; 4-tier `GlobalAdminRoles` gate over `sys_admin_roles`; Swagger at `/docs` (hidden in production)                                                                                                                                                                                                                 |
+| Admin             | `AdminModule` (its controllers, DTOs and processors are internal — import the module and hit the endpoints), `GlobalAdminRoles`      | back-office APIs: tenant onboarding, client/admin/system user registration (single + bulk), the `has_global_access` grant that enables impersonation, tenant + scheduled-task listing, the email/PDF template catalogues (read at content-reader, written at content-manager, deleted at global admin); 4-tier `GlobalAdminRoles` gate over `sys_admin_roles`; Swagger at `/docs` (hidden in production)                                                                                                                                                                                                                 |
 | Notifications     | `NotificationModule`, `NotificationService`, `FcmPushNotificationService`                                                            | in-app rows + FCM push (optional `firebase-admin`); device token registry                                                                                                                                                                                                                                                                                                                                                                                                                               |
-| Email (SES)       | `EmailNotificationService`, `ProcessEmailNotification`, `EmailTemplateEntity`, `EmailNotificationLogEntity`                          | templates in `sys_email_templates` rendered by a remote service, dispatched via SES per recipient (to/cc/bcc); logged to `sys_email_notification_logs` outside production; dispatch skipped when `AWS_SES_FROM_ADDRESS` unset                                                                                                                                                                                                                                                                           |
+| Email (SES)       | `EmailNotificationService`, `ProcessEmailNotification`, `EmailTemplateEntity`, `EmailNotificationLogEntity`                          | templates in `sys_email_templates` (managed from the admin surface) rendered by a remote service, dispatched via SES per recipient (to/cc/bcc); logged to `sys_email_notification_logs` outside production; dispatch skipped when `AWS_SES_FROM_ADDRESS` unset                                                                                                                                                                                                                                                                           |
 | Audit             | `AuditService`                                                                                                                       | `saveAuditLog(old, new)` with changed-value diffing into `sys_audit_logs`                                                                                                                                                                                                                                                                                                                                                                                                                               |
 | Cache             | `CacheService`                                                                                                                       | Redis, TTL objects (`{days, hours, min}`), transparent encryption                                                                                                                                                                                                                                                                                                                                                                                                                                       |
 | Encryption        | `EncryptionService`                                                                                                                  | AES-256-GCM, scrypt-derived keys                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
 | System properties | `SystemPropertyModule`, `SystemPropertyService`                                                                                      | cached + optionally encrypted key/value settings in `sys_properties`                                                                                                                                                                                                                                                                                                                                                                                                                                    |
-| Documents         | `DocumentModule`, `DocumentService`, `S3BucketDocumentService`, `MinioBucketDocumentService`                                         | `POST /api/documents/upload` (multipart) or `uploadDocument(multerFiles) → links[]`; driver chosen via `DOCUMENT_STORAGE_DRIVER`                                                                                                                                                                                                                                                                                                                                                                        |
-| PDF generation    | `PdfService`, `PdfRenderOptions`                                                                                                     | `renderHtmlToPdf(html) → Buffer` via headless Chromium; honours the document's own `@page` rules and paginates to any length; optional peer dep `puppeteer`                                                                                                                                                                                                                                                                                                                                             |
+| Documents         | `DocumentModule`, `DocumentService`, `S3BucketDocumentService`, `MinioBucketDocumentService`                                         | `POST /api/documents/upload` (multipart) or `uploadDocument(multerFiles) → links[]`; driver chosen via `DOCUMENT_STORAGE_DRIVER`; `sys_document_uploads` is the file, `sys_documents` the link to one of your records (`system_generated` marks the ones the backend produced itself)                                                                                                                                                                                                                    |
+| PDF documents     | `PdfService`, `PdfTemplateService`, `ProcessPdfDocument`, `PdfTemplateEntity`, `PdfRenderOptions`                                     | templates in `sys_pdf_templates` rendered to HTML by a remote service, rasterized by headless Chromium (`renderHtmlToPdf(html) → Buffer`, honours the document's own `@page` rules and paginates to any length), then stored — `ProcessPdfDocument` writes both rows and flags the `sys_documents` one `system_generated`; optional peer dep `puppeteer`                                                                                                                                                  |
 | HTTP              | `CommonController`, `GlobalExceptionFilter`, common DTOs                                                                             | health endpoint base controller, uniform error envelope                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
 | Raw SQL           | `SqlService`, `SqlTarget`                                                                                                            | named `:key` placeholders always bound as driver params, `:...key` array expansion; runs on the read replica (`DB_READ_*`) with transparent primary fallback; `fetchOne`/`fetchScalar`/`exists`/`count`/`paginate` helpers                                                                                                                                                                                                                                                                              |
 | List endpoints    | `CommonListProcessor`, `CommonListFilterDto`, `FilterDto`, `CommonListFilterConfig`                                                  | allowlisted columns, parameterised operators (`eq`…`isNull`), typed value casting (`str`/`num`/`date`/`bool`/`null`), multi-sort + paginated on the read replica                                                                                                                                                                                                                                                                                                                                        |
@@ -605,7 +605,7 @@ a subscriber only starts firing once something constructs it.
 | `MINIO_BUCKET`     | `documents`  | Bucket name (auto-created if missing)       |
 | `MINIO_PUBLIC_URL` | _(empty)_    | CDN base URL when MinIO sits behind a proxy |
 
-### PDF Generation
+### PDF Documents
 
 Requires the optional peer dependency `puppeteer`.
 
@@ -694,9 +694,18 @@ Requires the optional peer dependency `firebase-admin`. Provide **one** of:
 Storage is split across two tables. `sys_document_uploads` (`DocumentUploadEntity`)
 is the stored object — name, mime type, size, driver, path, url, `is_public` — and
 every upload writes one row automatically. `sys_documents` (`DocumentEntity`) is just
-the link to one of your records: `upload_id` + `source_type` + `source_id`, no file
-metadata. So one file can hang off several records, and a file can exist before
-anything owns it.
+the link to one of your records: `upload_id` + `source_type` + `source_id` +
+`system_generated`, no file metadata. So one file can hang off several records, and a
+file can exist before anything owns it.
+
+`system_generated` answers a question the two tables otherwise cannot: whether anybody
+uploaded this file. A generated invoice and an uploaded scan of one are the same pair of
+rows, so the flag is what lets a listing tell them apart — and what lets a regeneration
+know which of its records it may replace. It is set through
+`setDocument(dto, { systemGenerated: true })`, which is how
+[`ProcessPdfDocument`](#pdf-documents-pdfservice-pdftemplateservice-processpdfdocument)
+marks what it produces; it is deliberately absent from `SetDocumentDto`, so the HTTP
+endpoint cannot claim it.
 
 `DocumentModule` ships two endpoints. `POST /api/documents/upload` is multipart: it
 takes the files in a `files` field, uploads them through the active driver and returns
@@ -752,43 +761,97 @@ that object from the bucket and soft deletes its row, so one unreachable file re
 alone instead of stalling the sweep. Schedule it with a `sys_scheduled_tasks` row under
 that identifier — the module registers the handler but never dispatches it.
 
-## PDF Generation (PdfService)
+## PDF Documents (PdfService, PdfTemplateService, ProcessPdfDocument)
 
-`PdfService` (exported by `DocumentModule`) turns an HTML document into PDF
-bytes using a headless Chromium.
+The `/pdfs` counterpart of [Templated Email](#templated-email-aws-ses), and it reuses
+that pipeline's shape exactly: a catalogue row names a template, a remote service
+renders it, a processor drives the whole thing. What differs is the last mile — mail is
+handed to SES, a document is rasterized and stored.
 
-It is the backend half of the document rendering service: that service serves
-print-ready, A4-locked HTML at `POST /pdfs/<version>/<path>/<template>`, and
-this service rasterizes it. The split keeps the template service free of a
-browser binary and puts the PDF bytes next to the storage and delivery code
-that needs them.
+Three pieces, split along the one line that matters — where the browser binary lives:
+
+- **`PdfTemplateService`** — resolves a `sys_pdf_templates` row by `identifier` and
+  POSTs your `data` to the remote template service, returning print-ready HTML. Exactly
+  `EmailNotificationService.getEmailBody()`, for documents.
+- **`PdfService`** — turns that HTML into PDF bytes with a headless Chromium. Knows
+  nothing about templates or storage.
+- **`ProcessPdfDocument`** — the entry point. Validates, renders, rasterizes, stores,
+  and returns the `sys_documents` row with its `upload` relation attached.
+
+All three are exported by `DocumentModule`.
+
+### The whole thing in one call
 
 ```ts
-// 1. Fetch the rendered document from the template service.
-const html = await this.remoteRequestService.getApiResponse<string>({
-  url: `${templateBaseUrl}/pdfs/v1/business/summary-report`,
-  requestType: ApiRequestTypeEnum.POST,
-  contentType: ApiContentTypeEnum.APPLICATION_JSON,
-  headers: { 'x-client-key': clientKey },
-  body: reportPayload,
+const processor = new ProcessPdfDocument(
+  this.pdfTemplateService,
+  this.pdfService,
+  this.documentService,
+);
+
+const document = await processor.process({
+  identifier: 'purchase-order',        // a sys_pdf_templates row
+  metadata: {
+    fileName: 'po-10432.pdf',
+    mimeType: 'application/pdf',       // default
+    pathIdentifier: 'purchase.order',  // → the document.path.purchase.order property
+    isPublic: false,                   // default
+  },
+  source: {                            // becomes the sys_documents row
+    source_type: 'purchase.order',
+    source_id: purchaseOrder.id,
+  },
+  data: { order: purchaseOrder, lines },  // payload for the remote renderer
 });
 
-// 2. Rasterize it.
+const link = await this.documentService.getDocumentLink(document.upload);
+```
+
+Four steps, in order:
+
+1. `PdfTemplateService.getPdfHtml()` — loads the template (`OperationException` if the
+   identifier is unknown), builds the URL as the `pdf.template.base.url` system
+   property + `template.path` + `identifier`, and POSTs `data` to it. The URL is a
+   plain concatenation, so the property and `path` carry their own trailing slashes —
+   same contract as `email.template.base.url`.
+2. `PdfService.renderHtmlToUploadableFile()` — the bytes, named (`.pdf` appended when
+   the file name lacks it).
+3. `DocumentService.uploadSingleDocument()` — the object goes to the active driver and
+   one `sys_document_uploads` row records it. `pathIdentifier` is resolved through
+   `resolvePathPrefix()` first, so the destination folder is a `document.path.*` system
+   property rather than a caller-supplied path.
+4. `DocumentService.setDocument(…, { systemGenerated: true })` — the `sys_documents`
+   row linking that upload to your record.
+
+The upload is deliberately made _without_ `sourceType`/`sourceId` and linked in a
+separate call: those options attach the document as an ordinary upload, and
+`system_generated` is only settable on the explicit `setDocument()` — never from
+`SetDocumentDto`, so the HTTP endpoint cannot claim it.
+
+**Seed the catalogue.** A `sys_pdf_templates` row per document, plus the
+`pdf.template.base.url` property; without either, `getPdfHtml()` raises. Manage them
+through [the admin surface](#admin-module) — content manager to define or edit, global
+admin to delete. There is no `PdfTemplateIdentifier` enum: the library dispatches no
+documents of its own, so name yours in an enum in your app rather than inline.
+
+### Using PdfService on its own
+
+Skip the processor when you already have the HTML, or want the bytes rather than a
+stored document:
+
+```ts
 const pdf: Buffer = await this.pdfService.renderHtmlToPdf(html);
 
 // …or go straight to bucket storage.
-const file = await this.pdfService.renderHtmlToUploadableFile(
-  html,
-  'summary-report.pdf',
-);
+const file = await this.pdfService.renderHtmlToUploadableFile(html, 'report.pdf');
 const [link] = await this.documentService.uploadDocument([file], {
   pathPrefix: 'reports',
 });
 ```
 
-**Install puppeteer.** It is an _optional_ peer dependency — nothing imports it
-until a PDF is actually requested, so apps that never generate one skip the
-~170MB Chromium download entirely:
+**Install puppeteer.** It is an _optional_ peer dependency — nothing imports it until a
+PDF is actually requested, so apps that never generate one skip the ~170MB Chromium
+download entirely:
 
 ```bash
 yarn add puppeteer
@@ -878,9 +941,15 @@ await new ProcessEmailNotification(emailNotificationService).process({
 });
 ```
 
+The catalogue is managed from [the admin surface](#admin-module) —
+`POST /admin/email-templates` and friends — and `EmailTemplateEntity` extends
+`CommonAdminEntity` for that reason: a row is authored from the back office, never by a
+tenant user.
+
 The templates the library itself dispatches are named by the
 `EmailTemplateIdentifier` enum — seed a matching `sys_email_templates` row for each
-one you want delivered:
+one you want delivered, and note that these two are exactly the rows a delete must not
+reach:
 
 | Identifier              | Sent by                   | Recipient          | `data` keys                                                                 |
 | ----------------------- | ------------------------- | ------------------ | --------------------------------------------------------------------------- |
@@ -953,7 +1022,8 @@ SQL runs. Results come back as `{ records, total, page, limit, total_pages }`.
 ## Admin Module
 
 `AdminModule` is the back-office surface — tenant onboarding, client/admin user
-registration, tenant listing and scheduled-task management. It uses the same
+registration, tenant listing, scheduled-task management and the email/PDF template
+catalogues. It uses the same
 imperative auth model as the rest of the app: controllers are open by default and
 gate each action through `AdminAccessService` before handing the work to a
 processor.
@@ -979,42 +1049,73 @@ pass the actor to a processor.
 
 ### Endpoints
 
-| Route                                    | Min. role       | Handler                                                     |
-| ---------------------------------------- | --------------- | ----------------------------------------------------------- |
-| `POST /admin/tenants`                    | super admin     | `TenantDataProcessor` (upsert — send `id` to update)        |
-| `POST /admin/tenants/list`               | content reader  | `TenantListProcessor`                                       |
-| `GET  /admin/tenants/:id`                | content reader  | the row plus its `scopes`                                   |
-| `POST /admin/tenants/:id/delete`         | super admin     | `TenantDeleteProcessor`                                     |
-| `POST /admin/tenant-users`               | admin           | `ClientUserDataProcessor`                                   |
-| `POST /admin/tenant-users/bulk`          | admin           | `BulkUserDataProcessor`                                     |
-| `POST /admin/tenant-users/list`          | content reader  | `ClientUserListProcessor`                                   |
-| `GET  /admin/tenant-users/:id`           | content reader  | the row                                                     |
-| `POST /admin/tenant-users/:id/delete`    | admin           | `ClientUserDeleteProcessor`                                 |
-| `POST /admin/users`                      | super admin     | `AdminUserDataProcessor`                                    |
-| `POST /admin/users/list`                 | content reader  | `AdminUserListProcessor`                                    |
-| `GET  /admin/users/:id`                  | content reader  | the row                                                     |
-| `POST /admin/users/:id/delete`           | super admin     | `AdminUserDeleteProcessor`                                  |
-| `POST /admin/roles/list`                 | admin           | `AdminRoleListProcessor`                                    |
-| `POST /admin/roles/tenant/list`          | admin           | `RoleListProcessor`                                         |
-| `POST /admin/scheduled-tasks`            | content manager | `ScheduledTaskDataProcessor` (upsert — send `id` to update) |
-| `POST /admin/scheduled-tasks/list`       | content reader  | `ScheduledTaskListProcessor`                                |
-| `GET  /admin/scheduled-tasks/:id`        | content reader  | the row                                                     |
-| `POST /admin/scheduled-tasks/:id/delete` | content manager | `ScheduledTaskDeleteProcessor`                              |
-| `POST /admin/scopes`                     | content manager | `ScopeDataProcessor` (upsert — send `id` to update)         |
-| `POST /admin/scopes/list`                | content reader  | `ScopeListProcessor`                                        |
-| `GET  /admin/scopes/:id`                 | content reader  | the row                                                     |
-| `POST /admin/scopes/:id/delete`          | content manager | `ScopeService.deleteScope` (cascades to every grant)        |
-| `POST /admin/api-keys`                   | admin           | `ApiKeyDataProcessor` — returns `{ raw_key, api_key }`      |
-| `POST /admin/api-keys/list`              | content reader  | `ApiKeyListProcessor`                                       |
-| `GET  /admin/api-keys/:id`               | content reader  | the row, its `scopes`, and `key` from admin up              |
-| `POST /admin/api-keys/:id/disable`       | admin           | `ApiKeyService.disableApiKey` (reversible)                  |
-| `POST /admin/api-keys/:id/delete`        | admin           | `ApiKeyService.deleteApiKey` (soft, and revokes)            |
+| Route                                | Min. role       | Handler                                                         |
+| ------------------------------------ | --------------- | --------------------------------------------------------------- |
+| `POST   /admin/tenants`              | super admin     | `TenantDataProcessor` (upsert — send `id` to update)            |
+| `POST   /admin/tenants/list`         | content reader  | `TenantListProcessor`                                           |
+| `GET    /admin/tenants/:id`          | content reader  | the row plus its `scopes`                                       |
+| `DELETE /admin/tenants/:id`          | super admin     | `TenantDeleteProcessor` (cascades to users, keys, grants)       |
+| `POST   /admin/tenant-users`         | admin           | `ClientUserDataProcessor`                                       |
+| `POST   /admin/tenant-users/bulk`    | admin           | `BulkUserDataProcessor`                                         |
+| `POST   /admin/tenant-users/list`    | content reader  | `ClientUserListProcessor`                                       |
+| `GET    /admin/tenant-users/:id`     | content reader  | the row                                                         |
+| `DELETE /admin/tenant-users/:id`     | admin           | `ClientUserDeleteProcessor`                                     |
+| `POST   /admin/system-users`         | super admin     | `SystemUserDataProcessor` (upsert — send `id` to update)        |
+| `POST   /admin/system-users/list`    | content reader  | `SystemUserListProcessor` (scoped to `user_type = system.user`) |
+| `GET    /admin/system-users/:id`     | content reader  | the row                                                         |
+| `DELETE /admin/system-users/:id`     | super admin     | `SystemUserService.delete` (revokes live sessions)              |
+| `POST   /admin/users`                | super admin     | `AdminUserDataProcessor`                                        |
+| `POST   /admin/users/list`           | content reader  | `AdminUserListProcessor`                                        |
+| `GET    /admin/users/:id`            | content reader  | the row                                                         |
+| `DELETE /admin/users/:id`            | super admin     | `AdminUserDeleteProcessor`                                      |
+| `POST   /admin/roles/list`           | admin           | `AdminRoleListProcessor` — picker feed (`sys_admin_roles`)      |
+| `POST   /admin/roles/tenant/list`    | admin           | `RoleListProcessor` — picker feed (`sys_roles`)                 |
+| `POST   /admin/system-roles`         | content manager | `SystemRoleDataProcessor` (upsert — send `id` to update)        |
+| `POST   /admin/system-roles/list`    | content reader  | `RoleListProcessor`                                             |
+| `GET    /admin/system-roles/:id`     | content reader  | the row                                                         |
+| `DELETE /admin/system-roles/:id`     | content manager | `RoleService.deleteRole` (cascades to every grant)              |
+| `POST   /admin/scheduled-tasks`      | content manager | `ScheduledTaskDataProcessor` (upsert — send `id` to update)     |
+| `POST   /admin/scheduled-tasks/list` | content reader  | `ScheduledTaskListProcessor`                                    |
+| `GET    /admin/scheduled-tasks/:id`  | content reader  | the row                                                         |
+| `DELETE /admin/scheduled-tasks/:id`  | content manager | `ScheduledTaskDeleteProcessor`                                  |
+| `POST   /admin/email-templates`      | content manager | `EmailTemplateDataProcessor` (upsert — send `id` to update)     |
+| `POST   /admin/email-templates/list` | content reader  | `EmailTemplateListProcessor`                                    |
+| `GET    /admin/email-templates/:id`  | content reader  | the row                                                         |
+| `DELETE /admin/email-templates/:id`  | **admin**       | `TemplateService.deleteEmailTemplate`                           |
+| `POST   /admin/pdf-templates`        | content manager | `PdfTemplateDataProcessor` (upsert — send `id` to update)       |
+| `POST   /admin/pdf-templates/list`   | content reader  | `PdfTemplateListProcessor`                                      |
+| `GET    /admin/pdf-templates/:id`    | content reader  | the row                                                         |
+| `DELETE /admin/pdf-templates/:id`    | **admin**       | `TemplateService.deletePdfTemplate`                             |
+| `POST   /admin/scopes`               | content manager | `ScopeDataProcessor` (upsert — send `id` to update)             |
+| `POST   /admin/scopes/list`          | content reader  | `ScopeListProcessor`                                            |
+| `GET    /admin/scopes/:id`           | content reader  | the row                                                         |
+| `DELETE /admin/scopes/:id`           | content manager | `ScopeService.deleteScope` (cascades to every grant)            |
+| `POST   /admin/api-keys`             | admin           | `ApiKeyDataProcessor` — returns `{ raw_key, api_key }`          |
+| `POST   /admin/api-keys/list`        | content reader  | `ApiKeyListProcessor`                                           |
+| `GET    /admin/api-keys/:id`         | content reader  | the row, its `scopes`, and `key` from admin up                  |
+| `POST   /admin/api-keys/:id/disable` | admin           | `ApiKeyService.disableApiKey` (reversible)                      |
+| `DELETE /admin/api-keys/:id`         | admin           | `ApiKeyService.deleteApiKey` (soft, and revokes)                |
 
 List endpoints are `POST .../list` with the filter payload in the body (a
 `CommonListFilterDto`) — see [List Endpoints & Filtering](#list-endpoints--filtering).
 Deletes and the API-key disable are single-action, so they sit on the domain service
 rather than in a processor; processors are for the writes that validate a payload.
 
+**Template catalogues.** `sys_email_templates` and `sys_pdf_templates` are the same
+surface across two controllers — same routes, same DTO, and a PDF template simply has
+no `subject` because a document has no envelope to address. Neither row holds markup:
+`path` + `identifier` are appended to a base-URL system property to reach the remote
+template service, so the catalogue is a table of pointers.
+
+Reading is content-reader work and writing content-manager work, the same split scopes
+get. **Deleting sits one level higher, at global admin** — the one place these differ
+from every other catalogue. An identifier is named by _code_
+(`EmailTemplateIdentifier.TENANT_ONBOARDED`, whatever `ProcessPdfDocument` asks for),
+so deleting a row does not change what a flow says, it stops the flow rendering at all
+— and only at send/generate time, as an `OperationException`. Nothing cascades: the
+remote template, every mail already sent and every document already generated are left
+exactly as they are.
+
 **Scopes and grants.** A scope is defined once in `sys_scopes` (content manager),
 then granted to the principals that hold it. `AddTenantDto.scope_ids` carries the
 tenant's whole scope set — `setScopes()` grants what is new and soft-removes what is

package/dist/admin/admin.module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.module.d.ts","sourceRoot":"","sources":["../../src/admin/admin.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAU,MAAM,gBAAgB,CAAC;AAIvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAG9D,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAY9D,qBAMa,WAAW;IACtB,MAAM,CAAC,QAAQ,CAAC,OAAO,GAAE,kBAAuB,GAAG,aAAa;CAcjE"}
+{"version":3,"file":"admin.module.d.ts","sourceRoot":"","sources":["../../src/admin/admin.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAU,MAAM,gBAAgB,CAAC;AAIvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAG9D,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAa9D,qBAMa,WAAW;IACtB,MAAM,CAAC,QAAQ,CAAC,OAAO,GAAE,kBAAuB,GAAG,aAAa;CAcjE"}

package/dist/admin/admin.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin.module.js","sourceRoot":"","sources":["../../src/admin/admin.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuD;AACvD,qDAAiD;AACjD,2DAAuD;AACvD,+CAA2C;AAE3C,6EAAyE;AACzE,6EAAwE;AAmBjE,IAAM,WAAW,mBAAjB,MAAM,WAAW;IACtB,MAAM,CAAC,QAAQ,CAAC,UAA8B,EAAE;QAC9C,OAAO;YACL,MAAM,EAAE,aAAW;YACnB,OAAO,EAAE;gBACP,wBAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC5B,4BAAY,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC9B,wCAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACpC,6CAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC;aACvC;YACD,WAAW,EAAE,CAAC,GAAG,wBAAU,CAAC,WAAW,CAAC;YACxC,SAAS,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;YACnC,OAAO,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;SAClC,CAAC;IACJ,CAAC;CACF,CAAA;AAfY,kCAAW;sBAAX,WAAW;IANvB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,wBAAU,EAAE,4BAAY,EAAE,wCAAkB,EAAE,6CAAoB,CAAC;QAC7E,WAAW,EAAE,CAAC,GAAG,wBAAU,CAAC,WAAW,CAAC;QACxC,SAAS,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;QACnC,OAAO,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;KAClC,CAAC;GACW,WAAW,CAevB"}
+{"version":3,"file":"admin.module.js","sourceRoot":"","sources":["../../src/admin/admin.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuD;AACvD,qDAAiD;AACjD,2DAAuD;AACvD,+CAA2C;AAE3C,6EAAyE;AACzE,6EAAwE;AAoBjE,IAAM,WAAW,mBAAjB,MAAM,WAAW;IACtB,MAAM,CAAC,QAAQ,CAAC,UAA8B,EAAE;QAC9C,OAAO;YACL,MAAM,EAAE,aAAW;YACnB,OAAO,EAAE;gBACP,wBAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC5B,4BAAY,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC9B,wCAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACpC,6CAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC;aACvC;YACD,WAAW,EAAE,CAAC,GAAG,wBAAU,CAAC,WAAW,CAAC;YACxC,SAAS,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;YACnC,OAAO,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;SAClC,CAAC;IACJ,CAAC;CACF,CAAA;AAfY,kCAAW;sBAAX,WAAW;IANvB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,wBAAU,EAAE,4BAAY,EAAE,wCAAkB,EAAE,6CAAoB,CAAC;QAC7E,WAAW,EAAE,CAAC,GAAG,wBAAU,CAAC,WAAW,CAAC;QACxC,SAAS,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;QACnC,OAAO,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;KAClC,CAAC;GACW,WAAW,CAevB"}

package/dist/admin/controllers/admin.api.key.controller.js

@@ -98,7 +98,7 @@ __decorate([
     __metadata("design:returntype", Promise)
 ], AdminApiKeyController.prototype, "disable", null);
 __decorate([
-    (0, common_1.Post)(':id/delete'),
+    (0, common_1.Delete)(':id'),
     (0, swagger_1.ApiOperation)({
         summary: 'Delete an API key.',
         description: 'Soft delete: the row keeps its data with `deleted_at` set and drops out of every listing. It is revoked in the same transaction, along with its scope grants — key validation matches on `is_active`/`revoked_at`, so a row that only left the listings would keep authenticating requests. Requires at least the global admin role.',

package/dist/admin/controllers/admin.api.key.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin.api.key.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.api.key.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoE;AACpE,6CAAuE;AACvE,mEAA+D;AAC/D,yEAAoE;AACpE,sFAA4E;AAC5E,2EAAsE;AACtE,2EAAsE;AACtE,gFAA0E;AAC1E,gFAA0E;AAC1E,6DAAuD;AACvD,+DAAyD;AAUlD,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,YACmB,kBAAsC,EACtC,aAA4B,EAC5B,UAAsB;QAFtB,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,kBAAa,GAAb,aAAa,CAAe;QAC5B,eAAU,GAAV,UAAU,CAAY;IACtC,CAAC;IAQE,AAAN,KAAK,CAAC,KAAK,CAAS,GAAiB;QACnC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,4CAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxE,CAAC;IAQK,AAAN,KAAK,CAAC,IAAI,CAAS,GAAkB;QACnC,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,IAAI,4CAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAAU,EAAE,EAAE,EAAmB;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CACjD,MAAM,EACN,0CAAgB,CAAC,YAAY,CAC9B,CAAC;QAEF,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAQK,AAAN,KAAK,CAAC,OAAO,CAAU,EAAE,EAAE,EAAmB;QAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAAU,EAAE,EAAE,EAAmB;QAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC;CACF,CAAA;AAlEY,sDAAqB;AAa1B;IANL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gCAAgC;QACzC,WAAW,EACT,0MAA0M;KAC7M,CAAC;IACW,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,8BAAY;;kDAGpC;AAQK;IANL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EACT,uKAAuK;KAC1K,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,gCAAa;;iDAGpC;AAQK;IANL,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,uBAAuB;QAChC,WAAW,EACT,mWAAmW;KACtW,CAAC;IACY,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;mDAQ5C;AAQK;IANL,IAAA,aAAI,EAAC,aAAa,CAAC;IACnB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,qBAAqB;QAC9B,WAAW,EACT,sLAAsL;KACzL,CAAC;IACa,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;oDAG7C;AAQK;IANL,IAAA,aAAI,EAAC,YAAY,CAAC;IAClB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EACT,sUAAsU;KACzU,CAAC;IACY,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;mDAG5C;gCAjEU,qBAAqB;IAHjC,IAAA,iBAAO,EAAC,kBAAkB,CAAC;IAC3B,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,oBAAoB,CAAC;qCAGQ,yCAAkB;QACvB,+BAAa;QAChB,wBAAU;GAJ9B,qBAAqB,CAkEjC"}
+{"version":3,"file":"admin.api.key.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.api.key.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4E;AAC5E,6CAAuE;AACvE,mEAA+D;AAC/D,yEAAoE;AACpE,sFAA4E;AAC5E,2EAAsE;AACtE,2EAAsE;AACtE,gFAA0E;AAC1E,gFAA0E;AAC1E,6DAAuD;AACvD,+DAAyD;AAUlD,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,YACmB,kBAAsC,EACtC,aAA4B,EAC5B,UAAsB;QAFtB,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,kBAAa,GAAb,aAAa,CAAe;QAC5B,eAAU,GAAV,UAAU,CAAY;IACtC,CAAC;IAQE,AAAN,KAAK,CAAC,KAAK,CAAS,GAAiB;QACnC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,4CAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxE,CAAC;IAQK,AAAN,KAAK,CAAC,IAAI,CAAS,GAAkB;QACnC,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,IAAI,4CAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAAU,EAAE,EAAE,EAAmB;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CACjD,MAAM,EACN,0CAAgB,CAAC,YAAY,CAC9B,CAAC;QAEF,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAQK,AAAN,KAAK,CAAC,OAAO,CAAU,EAAE,EAAE,EAAmB;QAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAAU,EAAE,EAAE,EAAmB;QAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC;CACF,CAAA;AAlEY,sDAAqB;AAa1B;IANL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gCAAgC;QACzC,WAAW,EACT,0MAA0M;KAC7M,CAAC;IACW,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,8BAAY;;kDAGpC;AAQK;IANL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EACT,uKAAuK;KAC1K,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,gCAAa;;iDAGpC;AAQK;IANL,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,uBAAuB;QAChC,WAAW,EACT,mWAAmW;KACtW,CAAC;IACY,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;mDAQ5C;AAQK;IANL,IAAA,aAAI,EAAC,aAAa,CAAC;IACnB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,qBAAqB;QAC9B,WAAW,EACT,sLAAsL;KACzL,CAAC;IACa,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;oDAG7C;AAQK;IANL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EACT,sUAAsU;KACzU,CAAC;IACY,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;mDAG5C;gCAjEU,qBAAqB;IAHjC,IAAA,iBAAO,EAAC,kBAAkB,CAAC;IAC3B,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,oBAAoB,CAAC;qCAGQ,yCAAkB;QACvB,+BAAa;QAChB,wBAAU;GAJ9B,qBAAqB,CAkEjC"}

package/dist/admin/controllers/admin.email.template.controller.d.ts

@@ -0,0 +1,24 @@
+import { SqlService } from '../../common/services/sql.service';
+import { AdminAccessService } from '../services/admin.access.service';
+import { TemplateService } from '../services/template.service';
+import { CommonParamsDto } from '../../common/dtos/common.params.dto';
+import { AddEmailTemplateDto } from '../dtos/add.email.template.dto';
+import { EmailTemplateListDto } from '../dtos/email.template.list.dto';
+import { EmailTemplateEntity } from '../../notification/entities/email.template.entity';
+export declare class AdminEmailTemplateController {
+    private readonly adminAccessService;
+    private readonly templateService;
+    private readonly sqlService;
+    constructor(adminAccessService: AdminAccessService, templateService: TemplateService, sqlService: SqlService);
+    save(dto: AddEmailTemplateDto): Promise<EmailTemplateEntity>;
+    list(dto: EmailTemplateListDto): Promise<{
+        records: import("../..").SqlRow[];
+        total: number;
+        page: number;
+        limit: number;
+        total_pages: number;
+    }>;
+    detail({ id }: CommonParamsDto): Promise<EmailTemplateEntity>;
+    remove({ id }: CommonParamsDto): Promise<import("../..").DeleteResult>;
+}
+//# sourceMappingURL=admin.email.template.controller.d.ts.map

package/dist/admin/controllers/admin.email.template.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.email.template.controller.d.ts","sourceRoot":"","sources":["../../../src/admin/controllers/admin.email.template.controller.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAGtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mDAAmD,CAAC;AAQxF,qBAGa,4BAA4B;IAErC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAFV,kBAAkB,EAAE,kBAAkB,EACtC,eAAe,EAAE,eAAe,EAChC,UAAU,EAAE,UAAU;IASnC,IAAI,CAAS,GAAG,EAAE,mBAAmB;IAUrC,IAAI,CAAS,GAAG,EAAE,oBAAoB;;;;;;;IAWtC,MAAM,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAgBtE,MAAM,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe;CAI9C"}

package/dist/admin/controllers/admin.email.template.controller.js

@@ -0,0 +1,106 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminEmailTemplateController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const sql_service_1 = require("../../common/services/sql.service");
+const admin_access_service_1 = require("../services/admin.access.service");
+const template_service_1 = require("../services/template.service");
+const common_params_dto_1 = require("../../common/dtos/common.params.dto");
+const email_template_data_processor_1 = require("../libraries/email.template.data.processor");
+const email_template_list_processor_1 = require("../libraries/email.template.list.processor");
+const add_email_template_dto_1 = require("../dtos/add.email.template.dto");
+const email_template_list_dto_1 = require("../dtos/email.template.list.dto");
+const email_template_entity_1 = require("../../notification/entities/email.template.entity");
+let AdminEmailTemplateController = class AdminEmailTemplateController {
+    constructor(adminAccessService, templateService, sqlService) {
+        this.adminAccessService = adminAccessService;
+        this.templateService = templateService;
+        this.sqlService = sqlService;
+    }
+    async save(dto) {
+        const { user } = await this.adminAccessService.validateContentManager();
+        return new email_template_data_processor_1.EmailTemplateDataProcessor(user).process(dto);
+    }
+    async list(dto) {
+        await this.adminAccessService.validateContentReader();
+        return new email_template_list_processor_1.EmailTemplateListProcessor(this.sqlService).process(dto);
+    }
+    async detail({ id }) {
+        await this.adminAccessService.validateContentReader();
+        const emailTemplate = await email_template_entity_1.EmailTemplateEntity.findOne({ where: { id } });
+        if (!emailTemplate)
+            throw new common_1.NotFoundException('No email template exists for this id');
+        return emailTemplate;
+    }
+    async remove({ id }) {
+        const { user } = await this.adminAccessService.validateAdmin();
+        return this.templateService.deleteEmailTemplate(id, user);
+    }
+};
+exports.AdminEmailTemplateController = AdminEmailTemplateController;
+__decorate([
+    (0, common_1.Post)(),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Define an email template, or update an existing one.',
+        description: 'Send an `id` to edit that template; omit it to define a new one. `identifier` is what sending code names and is unique across the catalogue. Requires at least the global content manager role.',
+    }),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [add_email_template_dto_1.AddEmailTemplateDto]),
+    __metadata("design:returntype", Promise)
+], AdminEmailTemplateController.prototype, "save", null);
+__decorate([
+    (0, common_1.Post)('list'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'List, search and filter email templates.',
+        description: 'Requires at least the global content reader role.',
+    }),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [email_template_list_dto_1.EmailTemplateListDto]),
+    __metadata("design:returntype", Promise)
+], AdminEmailTemplateController.prototype, "list", null);
+__decorate([
+    (0, common_1.Get)(':id'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'One email template, in full.',
+        description: 'Everything the listing leaves out — the `attributes` bag and the authoring trail. Requires at least the global content reader role.',
+    }),
+    __param(0, (0, common_1.Param)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [common_params_dto_1.CommonParamsDto]),
+    __metadata("design:returntype", Promise)
+], AdminEmailTemplateController.prototype, "detail", null);
+__decorate([
+    (0, common_1.Delete)(':id'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Delete an email template.',
+        description: 'Soft delete: the row keeps its data with `deleted_at` set and drops out of every listing. Nothing cascades — the remote template and every mail already sent from it are untouched — but a flow that still names the identifier stops rendering. Requires at least the global admin role.',
+    }),
+    __param(0, (0, common_1.Param)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [common_params_dto_1.CommonParamsDto]),
+    __metadata("design:returntype", Promise)
+], AdminEmailTemplateController.prototype, "remove", null);
+exports.AdminEmailTemplateController = AdminEmailTemplateController = __decorate([
+    (0, swagger_1.ApiTags)('Admin - Email Templates'),
+    (0, swagger_1.ApiBearerAuth)(),
+    (0, common_1.Controller)('api/admin/email-templates'),
+    __metadata("design:paramtypes", [admin_access_service_1.AdminAccessService,
+        template_service_1.TemplateService,
+        sql_service_1.SqlService])
+], AdminEmailTemplateController);
+//# sourceMappingURL=admin.email.template.controller.js.map

package/dist/admin/controllers/admin.email.template.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.email.template.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.email.template.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAQwB;AACxB,6CAAuE;AACvE,mEAA+D;AAC/D,2EAAsE;AACtE,mEAA+D;AAC/D,2EAAsE;AACtE,8FAAwF;AACxF,8FAAwF;AACxF,2EAAqE;AACrE,6EAAuE;AACvE,6FAAwF;AAWjF,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IACvC,YACmB,kBAAsC,EACtC,eAAgC,EAChC,UAAsB;QAFtB,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,oBAAe,GAAf,eAAe,CAAiB;QAChC,eAAU,GAAV,UAAU,CAAY;IACtC,CAAC;IAQE,AAAN,KAAK,CAAC,IAAI,CAAS,GAAwB;QACzC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,sBAAsB,EAAE,CAAC;QACxE,OAAO,IAAI,0DAA0B,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;IAOK,AAAN,KAAK,CAAC,IAAI,CAAS,GAAyB;QAC1C,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,IAAI,0DAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtE,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAAU,EAAE,EAAE,EAAmB;QAC3C,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QAEtD,MAAM,aAAa,GAAG,MAAM,2CAAmB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,aAAa;YAChB,MAAM,IAAI,0BAAiB,CAAC,sCAAsC,CAAC,CAAC;QAEtE,OAAO,aAAa,CAAC;IACvB,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAAU,EAAE,EAAE,EAAmB;QAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;CACF,CAAA;AAtDY,oEAA4B;AAajC;IANL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,sDAAsD;QAC/D,WAAW,EACT,iMAAiM;KACpM,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,4CAAmB;;wDAG1C;AAOK;IALL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,0CAA0C;QACnD,WAAW,EAAE,mDAAmD;KACjE,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,8CAAoB;;wDAG3C;AAQK;IANL,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8BAA8B;QACvC,WAAW,EACT,qIAAqI;KACxI,CAAC;IACY,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;0DAQ5C;AAQK;IANL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,2BAA2B;QACpC,WAAW,EACT,2RAA2R;KAC9R,CAAC;IACY,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;0DAG5C;uCArDU,4BAA4B;IAHxC,IAAA,iBAAO,EAAC,yBAAyB,CAAC;IAClC,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,2BAA2B,CAAC;qCAGC,yCAAkB;QACrB,kCAAe;QACpB,wBAAU;GAJ9B,4BAA4B,CAsDxC"}

package/dist/admin/controllers/admin.pdf.template.controller.d.ts

@@ -0,0 +1,24 @@
+import { SqlService } from '../../common/services/sql.service';
+import { AdminAccessService } from '../services/admin.access.service';
+import { TemplateService } from '../services/template.service';
+import { CommonParamsDto } from '../../common/dtos/common.params.dto';
+import { AddPdfTemplateDto } from '../dtos/add.pdf.template.dto';
+import { PdfTemplateListDto } from '../dtos/pdf.template.list.dto';
+import { PdfTemplateEntity } from '../../document/entities/pdf.template.entity';
+export declare class AdminPdfTemplateController {
+    private readonly adminAccessService;
+    private readonly templateService;
+    private readonly sqlService;
+    constructor(adminAccessService: AdminAccessService, templateService: TemplateService, sqlService: SqlService);
+    save(dto: AddPdfTemplateDto): Promise<PdfTemplateEntity>;
+    list(dto: PdfTemplateListDto): Promise<{
+        records: import("../..").SqlRow[];
+        total: number;
+        page: number;
+        limit: number;
+        total_pages: number;
+    }>;
+    detail({ id }: CommonParamsDto): Promise<PdfTemplateEntity>;
+    remove({ id }: CommonParamsDto): Promise<import("../..").DeleteResult>;
+}
+//# sourceMappingURL=admin.pdf.template.controller.d.ts.map

package/dist/admin/controllers/admin.pdf.template.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.pdf.template.controller.d.ts","sourceRoot":"","sources":["../../../src/admin/controllers/admin.pdf.template.controller.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAGtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAQhF,qBAGa,0BAA0B;IAEnC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAFV,kBAAkB,EAAE,kBAAkB,EACtC,eAAe,EAAE,eAAe,EAChC,UAAU,EAAE,UAAU;IASnC,IAAI,CAAS,GAAG,EAAE,iBAAiB;IAUnC,IAAI,CAAS,GAAG,EAAE,kBAAkB;;;;;;;IAWpC,MAAM,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAgBpE,MAAM,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe;CAI9C"}