@neohm/nestend 4.1.0 → 5.0.0

package/dist/admin/dtos/add.scope.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"add.scope.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.scope.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AACzB,6CAAmE;AACnE,uEAAkE;AASlE,MAAa,WAAY,SAAQ,+BAAa;CAoC7C;AApCD,kCAoCC;AAvBC;IAZC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EACT,iHAAiH;KACpH,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,kBAAkB,EAAE;QAC3B,OAAO,EACL,iGAAiG;KACpG,CAAC;;+CACiB;AAMnB;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAC9C,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;yCACF;AAOb;IALC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,+CAA+C;KACzD,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;gDACU;AASrB;IAPC,IAAA,6BAAmB,EAAC;QACnB,MAAM,EAAE,MAAM;QACd,WAAW,EACT,sKAAsK;KACzK,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,GAAE;;8CACU"}
+{"version":3,"file":"add.scope.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.scope.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AACzB,6CAAmE;AACnE,uEAAkE;AAClE,iEAA4E;AAS5E,MAAa,WAAY,SAAQ,+BAAa;CAsC7C;AAtCD,kCAsCC;AAzBC;IAZC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EACT,8GAA8G;KACjH,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,6CAA4B,EAAE;QACrC,OAAO,EACL,+HAA+H;KAClI,CAAC;;+CACiB;AAMnB;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAC9C,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;yCACF;AAQb;IANC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,+CAA+C;KACzD,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;;gDACK;AAUrB;IARC,IAAA,6BAAmB,EAAC;QACnB,MAAM,EAAE,MAAM;QACd,WAAW,EACT,+NAA+N;QACjO,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,GAAE;;8CACiB"}

package/dist/admin/dtos/add.system.role.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"add.system.role.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.system.role.dto.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAOlE,qBAAa,gBAAiB,SAAQ,aAAa;IAajD,UAAU,EAAE,MAAM,CAAC;IAMnB,IAAI,EAAE,MAAM,CAAC;IAOb,WAAW,CAAC,EAAE,MAAM,CAAC;IASrB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB"}
+{"version":3,"file":"add.system.role.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.system.role.dto.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAQlE,qBAAa,gBAAiB,SAAQ,aAAa;IAajD,UAAU,EAAE,MAAM,CAAC;IAMnB,IAAI,EAAE,MAAM,CAAC;IAQb,WAAW,CAAC,EAAE,MAAM,CAAC;IASrB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB"}

package/dist/admin/dtos/add.system.role.dto.js

@@ -13,19 +13,20 @@ exports.AddSystemRoleDto = void 0;
 const class_validator_1 = require("class-validator");
 const swagger_1 = require("@nestjs/swagger");
 const common_data_dto_1 = require("../../common/dtos/common.data.dto");
+const admin_patterns_1 = require("../validators/admin.patterns");
 class AddSystemRoleDto extends common_data_dto_1.CommonDataDto {
 }
 exports.AddSystemRoleDto = AddSystemRoleDto;
 __decorate([
     (0, swagger_1.ApiProperty)({
         example: 'org.owner',
-        description: 'Machine-readable key application code checks (lowercase letters, digits, dots, colons, hyphens, underscores).',
+        description: 'Machine-readable key application code checks. Fixed once created; reserved identifiers (`global.admin`) cannot be used.',
     }),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsNotEmpty)(),
     (0, class_validator_1.MaxLength)(100),
-    (0, class_validator_1.Matches)(/^[a-z0-9._:-]+$/, {
-        message: 'identifier may only contain lowercase letters, digits, dots, colons, hyphens and underscores',
+    (0, class_validator_1.Matches)(admin_patterns_1.CATALOGUE_IDENTIFIER_PATTERN, {
+        message: 'identifier may only contain lowercase letters, digits, hyphens and underscores, joined by single dots or colons',
     }),
     __metadata("design:type", String)
 ], AddSystemRoleDto.prototype, "identifier", void 0);
@@ -42,12 +43,13 @@ __decorate([
     }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(1000),
     __metadata("design:type", String)
 ], AddSystemRoleDto.prototype, "description", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         default: true,
-        description: 'Inactive roles stay assigned and keep their history; they are just not offered in the pickers.',
+        description: 'Inactive roles stay assigned but grant nothing and are not offered in the pickers. Changing it on an existing role requires the global super admin role.',
     }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsBoolean)(),

package/dist/admin/dtos/add.system.role.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"add.system.role.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.system.role.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AACzB,6CAAmE;AACnE,uEAAkE;AAOlE,MAAa,gBAAiB,SAAQ,+BAAa;CAoClD;AApCD,4CAoCC;AAvBC;IAZC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,WAAW;QACpB,WAAW,EACT,+GAA+G;KAClH,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,iBAAiB,EAAE;QAC1B,OAAO,EACL,8FAA8F;KACjG,CAAC;;oDACiB;AAMnB;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAC9C,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;8CACF;AAOb;IALC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,sDAAsD;KAChE,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;qDACU;AASrB;IAPC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,IAAI;QACb,WAAW,EACT,gGAAgG;KACnG,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;mDACQ"}
+{"version":3,"file":"add.system.role.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.system.role.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AACzB,6CAAmE;AACnE,uEAAkE;AAClE,iEAA4E;AAO5E,MAAa,gBAAiB,SAAQ,+BAAa;CAqClD;AArCD,4CAqCC;AAxBC;IAZC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,WAAW;QACpB,WAAW,EACT,yHAAyH;KAC5H,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,6CAA4B,EAAE;QACrC,OAAO,EACL,iHAAiH;KACpH,CAAC;;oDACiB;AAMnB;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAC9C,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;8CACF;AAQb;IANC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,sDAAsD;KAChE,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;;qDACK;AASrB;IAPC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,IAAI;QACb,WAAW,EACT,0JAA0J;KAC7J,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;mDACQ"}

package/dist/admin/dtos/add.tenant.dto.d.ts

@@ -16,6 +16,6 @@ export declare class AddTenantDto extends CommonDataDto {
     contract_expires_at?: string;
     is_active?: boolean;
     attributes?: Record<string, unknown>;
-    scope_ids: string[];
+    scope_ids?: string[];
 }
 //# sourceMappingURL=add.tenant.dto.d.ts.map

package/dist/admin/dtos/add.tenant.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"add.tenant.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.tenant.dto.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAOlE,qBAAa,YAAa,SAAQ,aAAa;IAK7C,IAAI,EAAE,MAAM,CAAC;IAab,IAAI,EAAE,MAAM,CAAC;IAMb,MAAM,CAAC,EAAE,MAAM,CAAC;IAMhB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAMlB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAMlB,SAAS,CAAC,EAAE,MAAM,CAAC;IAMnB,WAAW,CAAC,EAAE,MAAM,CAAC;IAMrB,aAAa,CAAC,EAAE,MAAM,CAAC;IAMvB,aAAa,CAAC,EAAE,MAAM,CAAC;IAMvB,IAAI,CAAC,EAAE,MAAM,CAAC;IAMd,KAAK,CAAC,EAAE,MAAM,CAAC;IAMf,WAAW,CAAC,EAAE,MAAM,CAAC;IAMrB,OAAO,CAAC,EAAE,MAAM,CAAC;IAQjB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAK7B,SAAS,CAAC,EAAE,OAAO,CAAC;IAKpB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAYrC,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB"}
+{"version":3,"file":"add.tenant.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.tenant.dto.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AASlE,qBAAa,YAAa,SAAQ,aAAa;IAK7C,IAAI,EAAE,MAAM,CAAC;IAab,IAAI,EAAE,MAAM,CAAC;IAUb,MAAM,CAAC,EAAE,MAAM,CAAC;IAWhB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAMlB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAMlB,SAAS,CAAC,EAAE,MAAM,CAAC;IAMnB,WAAW,CAAC,EAAE,MAAM,CAAC;IAMrB,aAAa,CAAC,EAAE,MAAM,CAAC;IAMvB,aAAa,CAAC,EAAE,MAAM,CAAC;IAMvB,IAAI,CAAC,EAAE,MAAM,CAAC;IAMd,KAAK,CAAC,EAAE,MAAM,CAAC;IAMf,WAAW,CAAC,EAAE,MAAM,CAAC;IAMrB,OAAO,CAAC,EAAE,MAAM,CAAC;IAQjB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAS7B,SAAS,CAAC,EAAE,OAAO,CAAC;IAMpB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAYrC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB"}

package/dist/admin/dtos/add.tenant.dto.js

@@ -13,6 +13,8 @@ exports.AddTenantDto = void 0;
 const class_validator_1 = require("class-validator");
 const swagger_1 = require("@nestjs/swagger");
 const common_data_dto_1 = require("../../common/dtos/common.data.dto");
+const admin_default_enum_1 = require("../enums/admin.default.enum");
+const admin_validators_1 = require("../validators/admin.validators");
 class AddTenantDto extends common_data_dto_1.CommonDataDto {
 }
 exports.AddTenantDto = AddTenantDto;
@@ -37,17 +39,26 @@ __decorate([
     __metadata("design:type", String)
 ], AddTenantDto.prototype, "slug", void 0);
 __decorate([
-    (0, swagger_1.ApiPropertyOptional)({ example: 'acme.example.com' }),
+    (0, swagger_1.ApiPropertyOptional)({
+        example: 'acme.example.com',
+        description: 'Fully qualified domain name, unique across tenants.',
+    }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.MaxLength)(255),
+    (0, class_validator_1.IsFQDN)({ require_tld: true, allow_underscores: false }),
     __metadata("design:type", String)
 ], AddTenantDto.prototype, "domain", void 0);
 __decorate([
-    (0, swagger_1.ApiPropertyOptional)({ example: 'acme.example.com/logo.png' }),
+    (0, swagger_1.ApiPropertyOptional)({ example: 'https://acme.example.com/logo.png' }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.MaxLength)(1024),
+    (0, class_validator_1.IsUrl)({
+        protocols: ['https'],
+        require_protocol: true,
+        require_valid_protocol: true,
+    }),
     __metadata("design:type", String)
 ], AddTenantDto.prototype, "logo_url", void 0);
 __decorate([
@@ -123,7 +134,10 @@ __decorate([
     __metadata("design:type", String)
 ], AddTenantDto.prototype, "contract_expires_at", void 0);
 __decorate([
-    (0, swagger_1.ApiPropertyOptional)({ default: true }),
+    (0, swagger_1.ApiPropertyOptional)({
+        default: true,
+        description: 'false suspends the tenant: its sessions, API keys and pending invitations are revoked.',
+    }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsBoolean)(),
     __metadata("design:type", Boolean)
@@ -132,17 +146,18 @@ __decorate([
     (0, swagger_1.ApiPropertyOptional)({ type: 'object', additionalProperties: true }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsObject)(),
+    (0, admin_validators_1.MaxJsonSize)(),
     __metadata("design:type", Object)
 ], AddTenantDto.prototype, "attributes", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         type: [String],
         format: 'uuid',
-        description: 'sys_scopes uuids to enable for this tenant. The list replaces the current grants, so an omitted list revokes them all — a scope picker has no other way to remove the last one.',
+        description: 'sys_scopes uuids to enable for this tenant. The list replaces the current grants (an empty list revokes them all, and API-key grants the tenant no longer covers go with them); omitted keeps the current grants.',
     }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsArray)(),
-    (0, class_validator_1.ArrayMinSize)(1),
+    (0, class_validator_1.ArrayMaxSize)(admin_default_enum_1.AdminLimit.MAX_ID_ARRAY),
     (0, class_validator_1.IsUUID)('all', { each: true }),
     __metadata("design:type", Array)
 ], AddTenantDto.prototype, "scope_ids", void 0);

package/dist/admin/dtos/add.tenant.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"add.tenant.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.tenant.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAayB;AACzB,6CAAmE;AACnE,uEAAkE;AAOlE,MAAa,YAAa,SAAQ,+BAAa;CAmH9C;AAnHD,oCAmHC;AA9GC;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC5C,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;0CACF;AAab;IAXC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,MAAM;QACf,WAAW,EACT,kEAAkE;KACrE,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,cAAc,EAAE;QACvB,OAAO,EAAE,6DAA6D;KACvE,CAAC;;0CACW;AAMb;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IACpD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;4CACC;AAMhB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;IAC7D,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;;8CACE;AAMlB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAC9C,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;8CACG;AAMlB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IACjD,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,GAAE;IACT,IAAA,2BAAS,EAAC,GAAG,CAAC;;+CACI;AAMnB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IAC/C,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;;iDACO;AAMrB;IAJC,IAAA,6BAAmB,GAAE;IACrB,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;mDACQ;AAMvB;IAJC,IAAA,6BAAmB,GAAE;IACrB,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;mDACQ;AAMvB;IAJC,IAAA,6BAAmB,GAAE;IACrB,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;0CACD;AAMd;IAJC,IAAA,6BAAmB,GAAE;IACrB,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;2CACA;AAMf;IAJC,IAAA,6BAAmB,GAAE;IACrB,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;;iDACO;AAMrB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;6CACE;AAQjB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,uCAAuC;QACpD,OAAO,EAAE,0BAA0B;KACpC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;yDACiB;AAK7B;IAHC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtC,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;+CACQ;AAKpB;IAHC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;IACnE,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;gDAC0B;AAYrC;IAVC,IAAA,6BAAmB,EAAC;QACnB,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,MAAM;QACd,WAAW,EACT,iLAAiL;KACpL,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,GAAE;IACT,IAAA,8BAAY,EAAC,CAAC,CAAC;IACf,IAAA,wBAAM,EAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;+CACV"}
+{"version":3,"file":"add.tenant.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.tenant.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAeyB;AACzB,6CAAmE;AACnE,uEAAkE;AAClE,oEAAyD;AACzD,qEAA6D;AAO7D,MAAa,YAAa,SAAQ,+BAAa;CAiI9C;AAjID,oCAiIC;AA5HC;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC5C,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;0CACF;AAab;IAXC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,MAAM;QACf,WAAW,EACT,kEAAkE;KACrE,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,cAAc,EAAE;QACvB,OAAO,EAAE,6DAA6D;KACvE,CAAC;;0CACW;AAUb;IARC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EAAE,qDAAqD;KACnE,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,wBAAM,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;;4CACxC;AAWhB;IATC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;IACrE,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;IACf,IAAA,uBAAK,EAAC;QACL,SAAS,EAAE,CAAC,OAAO,CAAC;QACpB,gBAAgB,EAAE,IAAI;QACtB,sBAAsB,EAAE,IAAI;KAC7B,CAAC;;8CACgB;AAMlB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAC9C,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;8CACG;AAMlB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IACjD,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,GAAE;IACT,IAAA,2BAAS,EAAC,GAAG,CAAC;;+CACI;AAMnB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IAC/C,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;;iDACO;AAMrB;IAJC,IAAA,6BAAmB,GAAE;IACrB,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;mDACQ;AAMvB;IAJC,IAAA,6BAAmB,GAAE;IACrB,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;mDACQ;AAMvB;IAJC,IAAA,6BAAmB,GAAE;IACrB,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;0CACD;AAMd;IAJC,IAAA,6BAAmB,GAAE;IACrB,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;2CACA;AAMf;IAJC,IAAA,6BAAmB,GAAE;IACrB,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;;iDACO;AAMrB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;6CACE;AAQjB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,uCAAuC;QACpD,OAAO,EAAE,0BAA0B;KACpC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;yDACiB;AAS7B;IAPC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,IAAI;QACb,WAAW,EACT,wFAAwF;KAC3F,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;+CACQ;AAMpB;IAJC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;IACnE,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,8BAAW,GAAE;;gDACuB;AAYrC;IAVC,IAAA,6BAAmB,EAAC;QACnB,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,MAAM;QACd,WAAW,EACT,mNAAmN;KACtN,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,GAAE;IACT,IAAA,8BAAY,EAAC,+BAAU,CAAC,YAAY,CAAC;IACrC,IAAA,wBAAM,EAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;+CACT"}

package/dist/admin/dtos/base.user.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base.user.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/base.user.dto.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AASlE,qBAAa,WAAY,SAAQ,aAAa;IAI5C,SAAS,EAAE,MAAM,CAAC;IAKlB,KAAK,EAAE,MAAM,CAAC;IAiBd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAMlB,OAAO,CAAC,EAAE,MAAM,CAAC;IAMjB,YAAY,CAAC,EAAE,MAAM,CAAC;IAMtB,OAAO,CAAC,EAAE,MAAM,CAAC;IAKjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB"}
+{"version":3,"file":"base.user.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/base.user.dto.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AASlE,qBAAa,WAAY,SAAQ,aAAa;IAK5C,SAAS,EAAE,MAAM,CAAC;IAKlB,KAAK,EAAE,MAAM,CAAC;IAiBd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAMlB,OAAO,CAAC,EAAE,MAAM,CAAC;IAMjB,YAAY,CAAC,EAAE,MAAM,CAAC;IAMtB,OAAO,CAAC,EAAE,MAAM,CAAC;IAQjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB"}

package/dist/admin/dtos/base.user.dto.js

@@ -19,6 +19,7 @@ exports.BaseUserDto = BaseUserDto;
 __decorate([
     (0, swagger_1.ApiProperty)({ example: 'Jane Doe' }),
     (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
     (0, class_validator_1.MaxLength)(255),
     __metadata("design:type", String)
 ], BaseUserDto.prototype, "full_name", void 0);
@@ -62,7 +63,10 @@ __decorate([
     __metadata("design:type", String)
 ], BaseUserDto.prototype, "contact", void 0);
 __decorate([
-    (0, swagger_1.ApiPropertyOptional)({ default: true }),
+    (0, swagger_1.ApiPropertyOptional)({
+        default: true,
+        description: 'Defaults to true on create; omitted on an edit keeps the stored value.',
+    }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsBoolean)(),
     __metadata("design:type", Boolean)

package/dist/admin/dtos/base.user.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"base.user.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/base.user.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AACzB,6CAAmE;AACnE,uEAAkE;AASlE,MAAa,WAAY,SAAQ,+BAAa;CAkD7C;AAlDD,kCAkDC;AA9CC;IAHC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACpC,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;8CACG;AAKlB;IAHC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IACzC,IAAA,yBAAO,GAAE;IACT,IAAA,2BAAS,EAAC,GAAG,CAAC;;0CACD;AAiBd;IATC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,CAAC;QACZ,WAAW,EAAE,sCAAsC;KACpD,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,CAAC,CAAC;IACZ,IAAA,2BAAS,EAAC,EAAE,CAAC;;6CACI;AAMlB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;4CACE;AAMjB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACxC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;;iDACQ;AAMtB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAC9C,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;;4CACG;AAKjB;IAHC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtC,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;2CACK"}
+{"version":3,"file":"base.user.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/base.user.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAQyB;AACzB,6CAAmE;AACnE,uEAAkE;AASlE,MAAa,WAAY,SAAQ,+BAAa;CAsD7C;AAtDD,kCAsDC;AAjDC;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACpC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;8CACG;AAKlB;IAHC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IACzC,IAAA,yBAAO,GAAE;IACT,IAAA,2BAAS,EAAC,GAAG,CAAC;;0CACD;AAiBd;IATC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,CAAC;QACZ,WAAW,EAAE,sCAAsC;KACpD,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,CAAC,CAAC;IACZ,IAAA,2BAAS,EAAC,EAAE,CAAC;;6CACI;AAMlB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;4CACE;AAMjB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACxC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;;iDACQ;AAMtB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAC9C,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;;4CACG;AAQjB;IANC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,wEAAwE;KACtF,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;2CACK"}

package/dist/admin/enums/admin.default.enum.d.ts

@@ -0,0 +1,17 @@
+export declare enum AdminLimit {
+    MAX_JSON_BYTES = 16384,
+    MAX_ID_ARRAY = 100,
+    MAX_BULK_USERS = 500,
+    BULK_HASH_CONCURRENCY = 4,
+    MIN_SCHEDULE_INTERVAL_SEC = 60,
+    MAX_CATCHUP = 1000,
+    MAX_JITTER_SEC = 86400,
+    MAX_INTERVAL_PART = 100000,
+    API_KEY_DEFAULT_TTL_DAYS = 365,
+    API_KEY_MAX_TTL_DAYS = 730,
+    MANUAL_GRANT_MAX_TTL_DAYS = 366
+}
+export declare enum AdminDefault {
+    MS_PER_DAY = 86400000
+}
+//# sourceMappingURL=admin.default.enum.d.ts.map

package/dist/admin/enums/admin.default.enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.default.enum.d.ts","sourceRoot":"","sources":["../../../src/admin/enums/admin.default.enum.ts"],"names":[],"mappings":"AACA,oBAAY,UAAU;IAEpB,cAAc,QAAQ;IAEtB,YAAY,MAAM;IAElB,cAAc,MAAM;IAEpB,qBAAqB,IAAI;IAEzB,yBAAyB,KAAK;IAE9B,WAAW,OAAO;IAElB,cAAc,QAAQ;IAEtB,iBAAiB,SAAS;IAE1B,wBAAwB,MAAM;IAE9B,oBAAoB,MAAM;IAE1B,yBAAyB,MAAM;CAChC;AAED,oBAAY,YAAY;IACtB,UAAU,WAAa;CACxB"}

package/dist/admin/enums/admin.default.enum.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminDefault = exports.AdminLimit = void 0;
+var AdminLimit;
+(function (AdminLimit) {
+    AdminLimit[AdminLimit["MAX_JSON_BYTES"] = 16384] = "MAX_JSON_BYTES";
+    AdminLimit[AdminLimit["MAX_ID_ARRAY"] = 100] = "MAX_ID_ARRAY";
+    AdminLimit[AdminLimit["MAX_BULK_USERS"] = 500] = "MAX_BULK_USERS";
+    AdminLimit[AdminLimit["BULK_HASH_CONCURRENCY"] = 4] = "BULK_HASH_CONCURRENCY";
+    AdminLimit[AdminLimit["MIN_SCHEDULE_INTERVAL_SEC"] = 60] = "MIN_SCHEDULE_INTERVAL_SEC";
+    AdminLimit[AdminLimit["MAX_CATCHUP"] = 1000] = "MAX_CATCHUP";
+    AdminLimit[AdminLimit["MAX_JITTER_SEC"] = 86400] = "MAX_JITTER_SEC";
+    AdminLimit[AdminLimit["MAX_INTERVAL_PART"] = 100000] = "MAX_INTERVAL_PART";
+    AdminLimit[AdminLimit["API_KEY_DEFAULT_TTL_DAYS"] = 365] = "API_KEY_DEFAULT_TTL_DAYS";
+    AdminLimit[AdminLimit["API_KEY_MAX_TTL_DAYS"] = 730] = "API_KEY_MAX_TTL_DAYS";
+    AdminLimit[AdminLimit["MANUAL_GRANT_MAX_TTL_DAYS"] = 366] = "MANUAL_GRANT_MAX_TTL_DAYS";
+})(AdminLimit || (exports.AdminLimit = AdminLimit = {}));
+var AdminDefault;
+(function (AdminDefault) {
+    AdminDefault[AdminDefault["MS_PER_DAY"] = 86400000] = "MS_PER_DAY";
+})(AdminDefault || (exports.AdminDefault = AdminDefault = {}));
+//# sourceMappingURL=admin.default.enum.js.map

package/dist/admin/enums/admin.default.enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.default.enum.js","sourceRoot":"","sources":["../../../src/admin/enums/admin.default.enum.ts"],"names":[],"mappings":";;;AACA,IAAY,UAuBX;AAvBD,WAAY,UAAU;IAEpB,mEAAsB,CAAA;IAEtB,6DAAkB,CAAA;IAElB,iEAAoB,CAAA;IAEpB,6EAAyB,CAAA;IAEzB,sFAA8B,CAAA;IAE9B,4DAAkB,CAAA;IAElB,mEAAsB,CAAA;IAEtB,0EAA0B,CAAA;IAE1B,qFAA8B,CAAA;IAE9B,6EAA0B,CAAA;IAE1B,uFAA+B,CAAA;AACjC,CAAC,EAvBW,UAAU,0BAAV,UAAU,QAuBrB;AAED,IAAY,YAEX;AAFD,WAAY,YAAY;IACtB,kEAAuB,CAAA;AACzB,CAAC,EAFW,YAAY,4BAAZ,YAAY,QAEvB"}

package/dist/admin/libraries/admin.user.data.processor.d.ts

@@ -4,17 +4,15 @@ import { AddAdminUserDto } from '../dtos/add.admin.user.dto';
 export declare class AdminUserDataProcessor extends CommonDataProcessor {
     private readonly actor;
     protected payload: AddAdminUserDto;
+    private existing;
     constructor(actor: AdminUserEntity);
     process(payload: AddAdminUserDto): Promise<AdminUserEntity>;
     private validate;
-    private save;
-    private create;
-    private update;
-    private validateEmail;
-    private assertUsernameAvailable;
+    private validateIdentity;
     private resolveAdminRoles;
-    private grantAdminRoles;
-    private updateAdminRoles;
+    private save;
+    private guardSuperAdmin;
+    private reconcileRoles;
     private stripSecrets;
 }
 //# sourceMappingURL=admin.user.data.processor.d.ts.map

package/dist/admin/libraries/admin.user.data.processor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.user.data.processor.d.ts","sourceRoot":"","sources":["../../../src/admin/libraries/admin.user.data.processor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAGxE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAK7D,qBAAa,sBAAuB,SAAQ,mBAAmB;IAGjD,OAAO,CAAC,QAAQ,CAAC,KAAK;IAFlC,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC;gBAEN,KAAK,EAAE,eAAe;IAI7C,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;YAMnD,QAAQ;YAQR,IAAI;YAMJ,MAAM;YAgBN,MAAM;YAgBN,aAAa;YAKb,uBAAuB;YASvB,iBAAiB;YAiBjB,eAAe;YAcf,gBAAgB;IA2B9B,OAAO,CAAC,YAAY;CAIrB"}
+{"version":3,"file":"admin.user.data.processor.d.ts","sourceRoot":"","sources":["../../../src/admin/libraries/admin.user.data.processor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAOxE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAsB7D,qBAAa,sBAAuB,SAAQ,mBAAmB;IAIjD,OAAO,CAAC,QAAQ,CAAC,KAAK;IAHlC,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC;IACnC,OAAO,CAAC,QAAQ,CAAgC;gBAEnB,KAAK,EAAE,eAAe;IAI7C,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;YAMnD,QAAQ;YAiBR,gBAAgB;YAoBhB,iBAAiB;YAYjB,IAAI;YA0CJ,eAAe;YAuBf,cAAc;IAuC5B,OAAO,CAAC,YAAY;CAIrB"}

package/dist/admin/libraries/admin.user.data.processor.js

@@ -7,10 +7,24 @@ const admin_user_entity_1 = require("../../auth/entities/admin.user.entity");
 const system_admin_role_entity_1 = require("../../auth/entities/system.admin.role.entity");
 const system_admin_user_role_entity_1 = require("../../auth/entities/system.admin.user.role.entity");
 const auth_utilities_1 = require("../../auth/utilities/auth.utilities");
+const access_revocation_1 = require("../../auth/utilities/access.revocation");
+const audit_action_enum_1 = require("../../common/enums/audit.action.enum");
+const entity_constants_1 = require("../../constants/entity.constants");
+const admin_audit_1 = require("../utilities/admin.audit");
+const admin_policy_1 = require("../utilities/admin.policy");
+const super_admin_guard_1 = require("../utilities/super.admin.guard");
+const AUDITED = [
+    'name',
+    'email',
+    'username',
+    'active',
+];
+const ciEquals = (value) => (0, typeorm_1.Raw)((column) => `lower(${column}) = :value`, { value: value.toLowerCase() });
 class AdminUserDataProcessor extends common_data_processor_1.CommonDataProcessor {
     constructor(actor) {
         super();
         this.actor = actor;
+        this.existing = null;
     }
     async process(payload) {
         this.payload = payload;
@@ -18,92 +32,117 @@ class AdminUserDataProcessor extends common_data_processor_1.CommonDataProcessor
         return this.save();
     }
     async validate() {
-        await this.validateEmail(this.payload.email);
-        await this.assertUsernameAvailable(this.payload.username);
-        await this.resolveAdminRoles(this.payload.role_ids, 'role_ids');
-        this.raiseExceptionOnValidationFailure();
-    }
-    async save() {
-        if (this.payload?.id)
-            return this.update();
-        return this.create();
-    }
-    async create() {
         const body = this.payload;
-        const adminUser = admin_user_entity_1.AdminUserEntity.create({
-            name: body.name,
-            email: body.email,
-            username: body.username,
-            password: await auth_utilities_1.AuthUtility.hashPassword(body.password),
-        });
-        await adminUser.save();
-        await this.grantAdminRoles(adminUser.id, body.role_ids);
-        return this.stripSecrets(adminUser);
-    }
-    async update() {
-        const adminUser = await admin_user_entity_1.AdminUserEntity.findOne({
-            where: { id: this.payload.id },
-        });
-        adminUser.name = this.payload.name;
-        adminUser.email = this.payload.email;
-        adminUser.username = this.payload.username;
-        await adminUser.save();
-        await this.updateAdminRoles(adminUser.id, this.payload.role_ids);
-        return this.stripSecrets(adminUser);
-    }
-    async validateEmail(email, field = 'email') {
-        const existing = await admin_user_entity_1.AdminUserEntity.findOne({ where: { email } });
-        if (existing)
-            this.setColumnError(field, 'Email is already registered');
+        if (body.id) {
+            this.existing = await admin_user_entity_1.AdminUserEntity.findOne({ where: { id: body.id } });
+            if (!this.existing)
+                this.setColumnError('id', 'No admin user exists for this id');
+        }
+        else if (!body.password)
+            this.setColumnError('password', 'Password is required');
+        await this.validateIdentity();
+        await this.resolveAdminRoles(body.role_ids);
+        this.raiseExceptionOnValidationFailure();
     }
-    async assertUsernameAvailable(username, field = 'username') {
-        const existing = await admin_user_entity_1.AdminUserEntity.findOne({ where: { username } });
-        if (existing)
-            this.setColumnError(field, 'Username is already taken');
+    async validateIdentity() {
+        const { email, username, id } = this.payload;
+        const others = id ? { id: (0, typeorm_1.Not)(id) } : {};
+        if ((await admin_user_entity_1.AdminUserEntity.existsBy({ ...others, email: ciEquals(email) })) ||
+            (await admin_user_entity_1.AdminUserEntity.existsBy({ ...others, username: ciEquals(email) })))
+            this.setColumnError('email', 'Email is already registered');
+        if ((await admin_user_entity_1.AdminUserEntity.existsBy({
+            ...others,
+            username: ciEquals(username),
+        })) ||
+            (await admin_user_entity_1.AdminUserEntity.existsBy({ ...others, email: ciEquals(username) })))
+            this.setColumnError('username', 'Username is already taken');
     }
-    async resolveAdminRoles(roleIds, field) {
-        if (!roleIds?.length)
-            return [];
-        const unique = [...new Set(roleIds)];
+    async resolveAdminRoles(roleIds) {
+        const unique = [...new Set(roleIds ?? [])];
+        if (!unique.length)
+            return;
         const roles = await system_admin_role_entity_1.SystemAdminRoleEntity.find({
             where: { id: (0, typeorm_1.In)(unique) },
         });
         const foundIds = new Set(roles.map((role) => role.id));
-        for (const id of unique) {
+        for (const id of unique)
             if (!foundIds.has(id))
-                this.setColumnError(field, `Role ${id} not found`);
-        }
-        return roles;
+                this.setColumnError('role_ids', `Role ${id} not found`);
     }
-    async grantAdminRoles(adminUserId, roleIds = []) {
-        const links = [...new Set(roleIds)].map((roleId) => system_admin_user_role_entity_1.SystemAdminUserRoleEntity.create({
-            admin_user_id: adminUserId,
-            role_id: roleId,
-            created_by: this.actor.id,
-        }));
-        if (links.length)
-            await system_admin_user_role_entity_1.SystemAdminUserRoleEntity.save(links);
+    async save() {
+        const body = this.payload;
+        const before = admin_audit_1.AdminAudit.pick(this.existing, AUDITED);
+        const password = this.existing
+            ? undefined
+            : await auth_utilities_1.AuthUtility.hashPassword(body.password);
+        const adminUser = await admin_user_entity_1.AdminUserEntity.getRepository().manager.transaction(async (trx) => {
+            if (this.existing)
+                await this.guardSuperAdmin(trx, this.existing);
+            const user = this.existing ??
+                trx.create(admin_user_entity_1.AdminUserEntity, { password, attributes: {} });
+            const wasActive = this.existing?.active ?? true;
+            user.name = body.name;
+            user.email = body.email;
+            user.username = body.username;
+            user.active = body.active ?? user.active ?? true;
+            await trx.save(user);
+            const roleChange = await this.reconcileRoles(trx, user.id);
+            if (wasActive && !user.active)
+                await access_revocation_1.AccessRevocation.revokeAll(trx, user.id, true);
+            await admin_audit_1.AdminAudit.record(trx, {
+                actor: this.actor,
+                sourceType: entity_constants_1.baseEntityConstants.adminUser,
+                sourceId: user.id,
+                action: before ? audit_action_enum_1.AuditAction.UPDATE : audit_action_enum_1.AuditAction.CREATE,
+                oldValue: before,
+                newValue: admin_audit_1.AdminAudit.pick(user, AUDITED),
+                context: roleChange,
+            });
+            return user;
+        });
+        return this.stripSecrets(adminUser);
     }
-    async updateAdminRoles(adminUserId, roleIds = []) {
-        const existingRoles = await system_admin_user_role_entity_1.SystemAdminUserRoleEntity.find({
-            where: {
-                admin_user_id: adminUserId,
-            },
+    async guardSuperAdmin(trx, target) {
+        await super_admin_guard_1.SuperAdminGuard.lock(trx);
+        const superRole = await super_admin_guard_1.SuperAdminGuard.superRole(trx);
+        if (!superRole)
+            return;
+        const error = admin_policy_1.AdminPolicy.superAdminEditError({
+            actorId: this.actor.id,
+            targetId: target.id,
+            holders: await super_admin_guard_1.SuperAdminGuard.holders(trx, superRole.id),
+            targetKeepsSuper: this.payload.role_ids.includes(superRole.id) &&
+                (this.payload.active ?? target.active ?? true),
         });
-        const existingRoleIds = new Set(existingRoles.map((role) => role.role_id));
-        for (const existingRole of existingRoles) {
-            if (!roleIds.includes(existingRole.role_id)) {
-                await existingRole.softDelete();
-            }
+        if (error) {
+            this.setColumnError('role_ids', error);
+            this.raiseExceptionOnValidationFailure();
         }
-        for (const roleId of roleIds) {
-            if (!existingRoleIds.has(roleId)) {
-                await system_admin_user_role_entity_1.SystemAdminUserRoleEntity.create({
-                    admin_user_id: adminUserId,
-                    role_id: roleId,
-                }).save();
-            }
+    }
+    async reconcileRoles(trx, adminUserId) {
+        const wanted = new Set(this.payload.role_ids);
+        const held = await trx.find(system_admin_user_role_entity_1.SystemAdminUserRoleEntity, {
+            where: { admin_user_id: adminUserId },
+        });
+        const heldRoleIds = new Set(held.map((grant) => grant.role_id));
+        const revoked = held.filter((grant) => !wanted.has(grant.role_id));
+        if (revoked.length) {
+            await trx.update(system_admin_user_role_entity_1.SystemAdminUserRoleEntity, { id: (0, typeorm_1.In)(revoked.map((grant) => grant.id)) }, { updated_by: this.actor.id });
+            await trx.softDelete(system_admin_user_role_entity_1.SystemAdminUserRoleEntity, {
+                id: (0, typeorm_1.In)(revoked.map((grant) => grant.id)),
+            });
         }
+        const granted = [...wanted].filter((roleId) => !heldRoleIds.has(roleId));
+        if (granted.length)
+            await trx.insert(system_admin_user_role_entity_1.SystemAdminUserRoleEntity, granted.map((roleId) => ({
+                admin_user_id: adminUserId,
+                role_id: roleId,
+                created_by: this.actor.id,
+            })));
+        return {
+            granted_role_ids: granted,
+            revoked_role_ids: revoked.map((grant) => grant.role_id),
+        };
     }
     stripSecrets(adminUser) {
         delete adminUser.password;

package/dist/admin/libraries/admin.user.data.processor.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin.user.data.processor.js","sourceRoot":"","sources":["../../../src/admin/libraries/admin.user.data.processor.ts"],"names":[],"mappings":";;;AAAA,qCAA6B;AAC7B,wFAAmF;AACnF,6EAAwE;AACxE,2FAAqF;AACrF,qGAA8F;AAE9F,wEAAkE;AAIlE,MAAa,sBAAuB,SAAQ,2CAAmB;IAG7D,YAA6B,KAAsB;QACjD,KAAK,EAAE,CAAC;QADmB,UAAK,GAAL,KAAK,CAAiB;IAEnD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAwB;QACpC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1D,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAEhE,IAAI,CAAC,iCAAiC,EAAE,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE;YAAE,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QAE3C,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAE1B,MAAM,SAAS,GAAG,mCAAe,CAAC,MAAM,CAAC;YACvC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,MAAM,4BAAW,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;SACxD,CAAC,CAAC;QACH,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QAEvB,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAExD,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,MAAM,SAAS,GAAG,MAAM,mCAAe,CAAC,OAAO,CAAC;YAC9C,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE;SAC/B,CAAC,CAAC;QAEH,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QACnC,SAAS,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QACrC,SAAS,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QAE3C,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QAEvB,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEjE,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,KAAK,GAAG,OAAO;QACxD,MAAM,QAAQ,GAAG,MAAM,mCAAe,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACrE,IAAI,QAAQ;YAAE,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;IAC1E,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACnC,QAAgB,EAChB,KAAK,GAAG,UAAU;QAElB,MAAM,QAAQ,GAAG,MAAM,mCAAe,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACxE,IAAI,QAAQ;YAAE,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;IACxE,CAAC;IAGO,KAAK,CAAC,iBAAiB,CAC7B,OAAiB,EACjB,KAAa;QAEb,IAAI,CAAC,OAAO,EAAE,MAAM;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,gDAAqB,CAAC,IAAI,CAAC;YAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,IAAA,YAAE,EAAC,MAAM,CAAC,EAAE;SAC1B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACvD,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;YACxB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,WAAmB,EACnB,UAAoB,EAAE;QAEtB,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACjD,yDAAyB,CAAC,MAAM,CAAC;YAC/B,aAAa,EAAE,WAAW;YAC1B,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;SAC1B,CAAC,CACH,CAAC;QACF,IAAI,KAAK,CAAC,MAAM;YAAE,MAAM,yDAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,WAAmB,EACnB,UAAoB,EAAE;QAEtB,MAAM,aAAa,GAAG,MAAM,yDAAyB,CAAC,IAAI,CAAC;YACzD,KAAK,EAAE;gBACL,aAAa,EAAE,WAAW;aAC3B;SACF,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAE3E,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;YACzC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5C,MAAM,YAAY,CAAC,UAAU,EAAE,CAAC;YAClC,CAAC;QACH,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,MAAM,yDAAyB,CAAC,MAAM,CAAC;oBACrC,aAAa,EAAE,WAAW;oBAC1B,OAAO,EAAE,MAAM;iBAChB,CAAC,CAAC,IAAI,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,YAAY,CAA4B,SAAY;QAC1D,OAAQ,SAAmC,CAAC,QAAQ,CAAC;QACrD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAvID,wDAuIC"}
+{"version":3,"file":"admin.user.data.processor.js","sourceRoot":"","sources":["../../../src/admin/libraries/admin.user.data.processor.ts"],"names":[],"mappings":";;;AAAA,qCAAsD;AACtD,wFAAmF;AACnF,6EAAwE;AACxE,2FAAqF;AACrF,qGAA8F;AAC9F,wEAAkE;AAClE,8EAA0E;AAC1E,4EAAmE;AACnE,uEAAuE;AAEvE,0DAAsD;AACtD,4DAAwD;AACxD,sEAAiE;AAEjE,MAAM,OAAO,GAA8B;IACzC,MAAM;IACN,OAAO;IACP,UAAU;IACV,QAAQ;CACT,CAAC;AAGF,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,EAAE,CACjC,IAAA,aAAG,EAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,MAAM,YAAY,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AAQ/E,MAAa,sBAAuB,SAAQ,2CAAmB;IAI7D,YAA6B,KAAsB;QACjD,KAAK,EAAE,CAAC;QADmB,UAAK,GAAL,KAAK,CAAiB;QAF3C,aAAQ,GAA2B,IAAI,CAAC;IAIhD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAwB;QACpC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAE1B,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,CAAC,QAAQ,GAAG,MAAM,mCAAe,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAChB,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,kCAAkC,CAAC,CAAC;QAClE,CAAC;aAAM,IAAI,CAAC,IAAI,CAAC,QAAQ;YACvB,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;QAE1D,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9B,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE5C,IAAI,CAAC,iCAAiC,EAAE,CAAC;IAC3C,CAAC;IAGO,KAAK,CAAC,gBAAgB;QAC5B,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7C,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAEzC,IACE,CAAC,MAAM,mCAAe,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvE,CAAC,MAAM,mCAAe,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAE1E,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;QAE9D,IACE,CAAC,MAAM,mCAAe,CAAC,QAAQ,CAAC;YAC9B,GAAG,MAAM;YACT,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;SAC7B,CAAC,CAAC;YACH,CAAC,MAAM,mCAAe,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAE1E,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;IACjE,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,OAAiB;QAC/C,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO;QAC3B,MAAM,KAAK,GAAG,MAAM,gDAAqB,CAAC,IAAI,CAAC;YAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,IAAA,YAAE,EAAC,MAAM,CAAC,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACvD,KAAK,MAAM,EAAE,IAAI,MAAM;YACrB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnB,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC9D,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAC1B,MAAM,MAAM,GAAG,wBAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ;YAC5B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,4BAAW,CAAC,YAAY,CAAC,IAAI,CAAC,QAAkB,CAAC,CAAC;QAE5D,MAAM,SAAS,GAAG,MAAM,mCAAe,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,WAAW,CACzE,KAAK,EAAE,GAAG,EAAE,EAAE;YACZ,IAAI,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAElE,MAAM,IAAI,GACR,IAAI,CAAC,QAAQ;gBACb,GAAG,CAAC,MAAM,CAAC,mCAAe,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,IAAI,IAAI,CAAC;YAChD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACtB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACxB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;YACjD,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAErB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3D,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM;gBAC3B,MAAM,oCAAgB,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAEvD,MAAM,wBAAU,CAAC,MAAM,CAAC,GAAG,EAAE;gBAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,UAAU,EAAE,sCAAmB,CAAC,SAAS;gBACzC,QAAQ,EAAE,IAAI,CAAC,EAAE;gBACjB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,+BAAW,CAAC,MAAM,CAAC,CAAC,CAAC,+BAAW,CAAC,MAAM;gBACxD,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,wBAAU,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;gBACxC,OAAO,EAAE,UAAU;aACpB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC,CACF,CAAC;QAEF,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAGO,KAAK,CAAC,eAAe,CAC3B,GAAkB,EAClB,MAAuB;QAEvB,MAAM,mCAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,MAAM,mCAAe,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,MAAM,KAAK,GAAG,0BAAW,CAAC,mBAAmB,CAAC;YAC5C,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;YACtB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,OAAO,EAAE,MAAM,mCAAe,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC;YACzD,gBAAgB,EACd,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC5C,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC;SACjD,CAAC,CAAC;QACH,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACvC,IAAI,CAAC,iCAAiC,EAAE,CAAC;QAC3C,CAAC;IACH,CAAC;IAGO,KAAK,CAAC,cAAc,CAC1B,GAAkB,EAClB,WAAmB;QAEnB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,yDAAyB,EAAE;YACrD,KAAK,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE;SACtC,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAEhE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,GAAG,CAAC,MAAM,CACd,yDAAyB,EACzB,EAAE,EAAE,EAAE,IAAA,YAAE,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,EAC5C,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAC9B,CAAC;YACF,MAAM,GAAG,CAAC,UAAU,CAAC,yDAAyB,EAAE;gBAC9C,EAAE,EAAE,IAAA,YAAE,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;aACzC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QACzE,IAAI,OAAO,CAAC,MAAM;YAChB,MAAM,GAAG,CAAC,MAAM,CACd,yDAAyB,EACzB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACvB,aAAa,EAAE,WAAW;gBAC1B,OAAO,EAAE,MAAM;gBACf,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;aAC1B,CAAC,CAAC,CACJ,CAAC;QAEJ,OAAO;YACL,gBAAgB,EAAE,OAAO;YACzB,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;SACxD,CAAC;IACJ,CAAC;IAEO,YAAY,CAA4B,SAAY;QAC1D,OAAQ,SAAmC,CAAC,QAAQ,CAAC;QACrD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AA3KD,wDA2KC"}

package/dist/admin/libraries/admin.user.delete.processor.d.ts

@@ -5,7 +5,5 @@ export declare class AdminUserDeleteProcessor extends CommonDataProcessor {
     private readonly actor;
     constructor(actor: AdminUserEntity);
     process(id: string): Promise<DeleteResult>;
-    private validate;
-    private isLastSuperAdmin;
 }
 //# sourceMappingURL=admin.user.delete.processor.d.ts.map

package/dist/admin/libraries/admin.user.delete.processor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.user.delete.processor.d.ts","sourceRoot":"","sources":["../../../src/admin/libraries/admin.user.delete.processor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAKxE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAcpD,qBAAa,wBAAyB,SAAQ,mBAAmB;IACnD,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,eAAe;IAI7C,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;YAWlC,QAAQ;YAmBR,gBAAgB;CA0B/B"}
+{"version":3,"file":"admin.user.delete.processor.d.ts","sourceRoot":"","sources":["../../../src/admin/libraries/admin.user.delete.processor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAKxE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAWpD,qBAAa,wBAAyB,SAAQ,mBAAmB;IACnD,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,eAAe;IAI7C,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;CAwCjD"}