@neohm/nestend 4.1.1 → 5.0.0

package/README.md

@@ -67,19 +67,16 @@ export class AppModule {}
 
 ```ts
 // main.ts
-import {
-  GlobalExceptionFilter,
-  LoggingInterceptor,
-  MonitoringInterceptor,
-  MonitoringService,
-} from '@neohm/nestend';
-
-const app = await NestFactory.create(AppModule);
-app.useGlobalFilters(new GlobalExceptionFilter());
-app.useGlobalInterceptors(
-  new LoggingInterceptor(), // morgan-style request log
-  new MonitoringInterceptor(app.get(MonitoringService)), // 5xx + slow-request reporting
-);
+import { NestFactory } from '@nestjs/core';
+import type { NestExpressApplication } from '@nestjs/platform-express';
+import { applySecureDefaults, validateEnvironment } from '@neohm/nestend';
+
+validateEnvironment(); // fail fast on missing/weak secrets and bad config
+const app = await NestFactory.create<NestExpressApplication>(AppModule);
+// Security headers, trust proxy, body limits, CORS allowlist, StrictValidationPipe,
+// GlobalExceptionFilter, logging/monitoring interceptors, shutdown hooks,
+// and Swagger only when ENABLE_SWAGGER=true.
+applySecureDefaults(app);
 ```
 
 ## Public API Surface
@@ -333,7 +330,7 @@ context helper (`AdminAuth`), own middleware (`AdminJwtMiddleware`), own service
 export class AppModule implements NestModule {
   configure(consumer: MiddlewareConsumer) {
     consumer.apply(JwtMiddleware).forRoutes('*');
-    consumer.apply(AdminJwtMiddleware).forRoutes('admin/*');
+    consumer.apply(AdminJwtMiddleware).forRoutes('api/admin/{*splat}');
   }
 }
 ```
@@ -1245,6 +1242,63 @@ Interactive docs are served at `GET /docs` (JSON at `/docs-json`) in every
 environment **except production** — `main.ts` only mounts Swagger when
 `SERVER_ENV !== 'production'`, so the schema is never exposed in prod.
 
+## Security
+
+The library ships secure defaults; most hardening needs no code. The full audit and
+its remediation status live outside the package (`security-audit/`).
+
+### What the application must do
+
+- Bootstrap with `validateEnvironment()` + `applySecureDefaults(app)` (see Quick Start), or at
+  least install `StrictValidationPipe` and `GlobalExceptionFilter` globally.
+- Set strong, distinct `ACCESS_TOKEN_SECRET`, `REFRESH_TOKEN_SECRET` and `ENCRYPTION_SECRET`
+  (≥ 32 random characters each; placeholders abort boot).
+- Behind a load balancer set `TRUST_PROXY`, so rate limits and audit logs see the client IP.
+- Run the migrations on a fresh database: each `Create*` migration carries its table's final
+  shape (partial unique indexes included), plus one new table,
+  `1749600000032.CreateSysEmailVerificationTokensTable`.
+- Register a `DOCUMENT_SOURCE_AUTHORIZER` (or `DocumentModule.register({ authorizeSource })`):
+  `POST /api/documents/set` refuses every request until one decides who may attach files to
+  which record.
+- Seed an `email-verification` email template; set `EMAIL_VERIFICATION_URL`.
+- Schedule the retention jobs with `sys_scheduled_tasks` rows (e.g. daily):
+  `auth.purge.expired.records.job`, `purge.email.logs.job`, `clean.orphan.documents.job`
+  (failed jobs are purged automatically).
+- Serve the storage bucket from a domain that is not same-site with the app.
+
+### Built-in protections
+
+- **Auth:** HS256-pinned tokens with `typ`/`aud`/`iss`, separate keys per audience; sessions
+  checked on every request (middleware and `JwtAuthGuard`); atomic refresh rotation with reuse
+  detection; password change revokes other sessions; brute-force throttling per IP and account
+  (`AUTH_THROTTLE_*`); bcrypt cost 12; Google sign-in bound to the Google `sub` with
+  takeover of unverified look-alike accounts; email verification flow.
+- **API keys:** stored hash-only (reveal is opt-in via `API_KEY_REVEAL_ENABLED`), always expire,
+  require an active owner, and their scopes are cut to what the owner still holds.
+- **Admin:** role/scope identifiers immutable, reserved roles protected, last super admin
+  guarded, every mutation audited, scheduled tasks limited to jobs that opt in (`schedulable`).
+- **Data:** strict DTO validation on every built-in route, bounded list queries, statement
+  timeout, partial unique indexes, generic 5xx bodies, redacted logs/failed jobs.
+- **Documents:** auth before multer, size/count limits, byte-sniffed type allowlist, private
+  by default, owner and tenant scoping, hardened Puppeteer (JS off, request allowlist).
+- **Outbound HTTP:** timeouts, size caps, redirects off by default, optional private-network block.
+- **Tenancy:** invitations need a verified email, OTPs expire and never sit in plaintext in queues or logs, tenant suspension revokes sessions and keys, `TenantScopeSubscriber` stamps and guards `tenant_id`.
+
+### Breaking changes in this release
+
+- All previously issued tokens are invalid; users sign in again.
+- Unknown body properties and non-UUID ids are rejected with 400.
+- Default cache Redis DB is `1`; Swagger is opt-in (`ENABLE_SWAGGER=true`).
+- `ApiKeyGuard` refuses routes without `@ApiKeyScopes()` (use `@ApiKeyAnyScope()` to opt out);
+  `GET /api/admin/api-keys/:id` no longer returns the key.
+- Uploads are private and type-restricted; `markAsRead(userId, id)` and
+  `removeDeviceToken(userId, token)` now take the user id.
+- Template data is HTML-escaped (`TEMPLATE_DATA_ESCAPE=false` if the renderer escapes);
+  template base URLs must be https outside development/test.
+- Scheduled tasks: only `schedulable` jobs, ≥ 60 s period, 5-field cron.
+- `sendMail` throws when `AWS_SES_FROM_ADDRESS` is unset outside development/test.
+- Impersonation login returns no refresh token; OTP accounts are limited to change-password until it is replaced.
+
 ## License
 
 MIT

package/dist/admin/admin.module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.module.d.ts","sourceRoot":"","sources":["../../src/admin/admin.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAU,MAAM,gBAAgB,CAAC;AAIvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAG9D,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAa9D,qBAMa,WAAW;IACtB,MAAM,CAAC,QAAQ,CAAC,OAAO,GAAE,kBAAuB,GAAG,aAAa;CAcjE"}
+{"version":3,"file":"admin.module.d.ts","sourceRoot":"","sources":["../../src/admin/admin.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAU,MAAM,gBAAgB,CAAC;AAIvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAI9D,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAa9D,qBAYa,WAAW;IACtB,MAAM,CAAC,QAAQ,CAAC,OAAO,GAAE,kBAAuB,GAAG,aAAa;CAgBjE"}

package/dist/admin/admin.module.js

@@ -14,6 +14,7 @@ const tenant_module_1 = require("../tenant/tenant.module");
 const es6_classes_1 = require("./es6.classes");
 const notification_module_1 = require("../notification/notification.module");
 const system_property_module_1 = require("../common/system.property.module");
+const queue_module_1 = require("../common/queue.module");
 let AdminModule = AdminModule_1 = class AdminModule {
     static register(options = {}) {
         return {
@@ -23,6 +24,7 @@ let AdminModule = AdminModule_1 = class AdminModule {
                 tenant_module_1.TenantModule.register(options),
                 notification_module_1.NotificationModule.register(options),
                 system_property_module_1.SystemPropertyModule.register(options),
+                queue_module_1.QueueModule,
             ],
             controllers: [...es6_classes_1.es6Classes.controllers],
             providers: [...es6_classes_1.es6Classes.services],
@@ -33,7 +35,13 @@ let AdminModule = AdminModule_1 = class AdminModule {
 exports.AdminModule = AdminModule;
 exports.AdminModule = AdminModule = AdminModule_1 = __decorate([
     (0, common_1.Module)({
-        imports: [auth_module_1.AuthModule, tenant_module_1.TenantModule, notification_module_1.NotificationModule, system_property_module_1.SystemPropertyModule],
+        imports: [
+            auth_module_1.AuthModule,
+            tenant_module_1.TenantModule,
+            notification_module_1.NotificationModule,
+            system_property_module_1.SystemPropertyModule,
+            queue_module_1.QueueModule,
+        ],
         controllers: [...es6_classes_1.es6Classes.controllers],
         providers: [...es6_classes_1.es6Classes.services],
         exports: [...es6_classes_1.es6Classes.services],

package/dist/admin/admin.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin.module.js","sourceRoot":"","sources":["../../src/admin/admin.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuD;AACvD,qDAAiD;AACjD,2DAAuD;AACvD,+CAA2C;AAE3C,6EAAyE;AACzE,6EAAwE;AAoBjE,IAAM,WAAW,mBAAjB,MAAM,WAAW;IACtB,MAAM,CAAC,QAAQ,CAAC,UAA8B,EAAE;QAC9C,OAAO;YACL,MAAM,EAAE,aAAW;YACnB,OAAO,EAAE;gBACP,wBAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC5B,4BAAY,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC9B,wCAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACpC,6CAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC;aACvC;YACD,WAAW,EAAE,CAAC,GAAG,wBAAU,CAAC,WAAW,CAAC;YACxC,SAAS,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;YACnC,OAAO,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;SAClC,CAAC;IACJ,CAAC;CACF,CAAA;AAfY,kCAAW;sBAAX,WAAW;IANvB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,wBAAU,EAAE,4BAAY,EAAE,wCAAkB,EAAE,6CAAoB,CAAC;QAC7E,WAAW,EAAE,CAAC,GAAG,wBAAU,CAAC,WAAW,CAAC;QACxC,SAAS,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;QACnC,OAAO,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;KAClC,CAAC;GACW,WAAW,CAevB"}
+{"version":3,"file":"admin.module.js","sourceRoot":"","sources":["../../src/admin/admin.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuD;AACvD,qDAAiD;AACjD,2DAAuD;AACvD,+CAA2C;AAE3C,6EAAyE;AACzE,6EAAwE;AACxE,yDAAqD;AA0B9C,IAAM,WAAW,mBAAjB,MAAM,WAAW;IACtB,MAAM,CAAC,QAAQ,CAAC,UAA8B,EAAE;QAC9C,OAAO;YACL,MAAM,EAAE,aAAW;YACnB,OAAO,EAAE;gBACP,wBAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC5B,4BAAY,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC9B,wCAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACpC,6CAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAEtC,0BAAW;aACZ;YACD,WAAW,EAAE,CAAC,GAAG,wBAAU,CAAC,WAAW,CAAC;YACxC,SAAS,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;YACnC,OAAO,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;SAClC,CAAC;IACJ,CAAC;CACF,CAAA;AAjBY,kCAAW;sBAAX,WAAW;IAZvB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,wBAAU;YACV,4BAAY;YACZ,wCAAkB;YAClB,6CAAoB;YACpB,0BAAW;SACZ;QACD,WAAW,EAAE,CAAC,GAAG,wBAAU,CAAC,WAAW,CAAC;QACxC,SAAS,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;QACnC,OAAO,EAAE,CAAC,GAAG,wBAAU,CAAC,QAAQ,CAAC;KAClC,CAAC;GACW,WAAW,CAiBvB"}

package/dist/admin/controllers/admin.api.key.controller.d.ts

@@ -2,7 +2,7 @@ import { ListFilterService } from '../../common/services/list.filter.service';
 import { ApiKeyService } from '../../auth/services/api.key.service';
 import { ScopeService } from '../../auth/services/scope.service';
 import { AdminAccessService } from '../services/admin.access.service';
-import { CommonParamsDto } from '../../common/dtos/common.params.dto';
+import { CacheService } from '../../common/services/cache.service';
 import { AddApiKeyDto } from '../dtos/add.api.key.dto';
 import { ApiKeyListDto } from '../dtos/api.key.list.dto';
 export declare class AdminApiKeyController {
@@ -10,11 +10,19 @@ export declare class AdminApiKeyController {
     private readonly apiKeyService;
     private readonly scopeService;
     private readonly listFilterService;
-    constructor(adminAccessService: AdminAccessService, apiKeyService: ApiKeyService, scopeService: ScopeService, listFilterService: ListFilterService);
+    private readonly cacheService;
+    constructor(adminAccessService: AdminAccessService, apiKeyService: ApiKeyService, scopeService: ScopeService, listFilterService: ListFilterService, cacheService: CacheService);
+    static readonly REVEAL_LIMIT = 10;
+    static readonly REVEAL_WINDOW_SEC = 3600;
     issue(dto: AddApiKeyDto): Promise<import("../types/admin.types").IssuedApiKey>;
     list(dto: ApiKeyListDto): Promise<import("../..").CommonListResult>;
-    detail({ id }: CommonParamsDto): Promise<import("../..").ApiKeyDetail>;
-    disable({ id }: CommonParamsDto): Promise<import("../..").DisableResult>;
-    remove({ id }: CommonParamsDto): Promise<import("../..").DeleteResult>;
+    detail(id: string): Promise<import("../..").ApiKeyDetail>;
+    reveal(id: string): Promise<{
+        id: string;
+        key: string;
+    }>;
+    disable(id: string): Promise<import("../..").DisableResult>;
+    remove(id: string): Promise<import("../..").DeleteResult>;
+    private audit;
 }
 //# sourceMappingURL=admin.api.key.controller.d.ts.map

package/dist/admin/controllers/admin.api.key.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.api.key.controller.d.ts","sourceRoot":"","sources":["../../../src/admin/controllers/admin.api.key.controller.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAEjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAGtE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAOzD,qBAGa,qBAAqB;IAE9B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBAHjB,kBAAkB,EAAE,kBAAkB,EACtC,aAAa,EAAE,aAAa,EAC5B,YAAY,EAAE,YAAY,EAC1B,iBAAiB,EAAE,iBAAiB;IASjD,KAAK,CAAS,GAAG,EAAE,YAAY;IAe/B,IAAI,CAAS,GAAG,EAAE,aAAa;IAW/B,MAAM,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe;IAgBvC,OAAO,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe;IAWxC,MAAM,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe;CAI9C"}
+{"version":3,"file":"admin.api.key.controller.d.ts","sourceRoot":"","sources":["../../../src/admin/controllers/admin.api.key.controller.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEtE,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAQnE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAOzD,qBAIa,qBAAqB;IAE9B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAJZ,kBAAkB,EAAE,kBAAkB,EACtC,aAAa,EAAE,aAAa,EAC5B,YAAY,EAAE,YAAY,EAC1B,iBAAiB,EAAE,iBAAiB,EACpC,YAAY,EAAE,YAAY;IAI7C,MAAM,CAAC,QAAQ,CAAC,YAAY,MAAM;IAClC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,QAAQ;IAQnC,KAAK,CAAS,GAAG,EAAE,YAAY;IAe/B,IAAI,CAAS,GAAG,EAAE,aAAa;IAW/B,MAAM,CAA6B,EAAE,EAAE,MAAM;IAY7C,MAAM,CAA6B,EAAE,EAAE,MAAM;;;;IA0B7C,OAAO,CAA6B,EAAE,EAAE,MAAM;IAa9C,MAAM,CAA6B,EAAE,EAAE,MAAM;IAOnD,OAAO,CAAC,KAAK;CAQd"}

package/dist/admin/controllers/admin.api.key.controller.js

@@ -11,6 +11,7 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
+var AdminApiKeyController_1;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AdminApiKeyController = void 0;
 const common_1 = require("@nestjs/common");
@@ -18,19 +19,25 @@ const swagger_1 = require("@nestjs/swagger");
 const list_filter_service_1 = require("../../common/services/list.filter.service");
 const api_key_service_1 = require("../../auth/services/api.key.service");
 const scope_service_1 = require("../../auth/services/scope.service");
-const global_admin_roles_enum_1 = require("../../auth/enums/global.admin.roles.enum");
 const admin_access_service_1 = require("../services/admin.access.service");
-const common_params_dto_1 = require("../../common/dtos/common.params.dto");
+const strict_validation_pipe_1 = require("../../common/pipes/strict.validation.pipe");
+const cache_service_1 = require("../../common/services/cache.service");
+const audit_action_enum_1 = require("../../common/enums/audit.action.enum");
+const entity_constants_1 = require("../../constants/entity.constants");
+const api_key_entity_1 = require("../../auth/entities/api.key.entity");
+const access_exception_1 = require("../../global/exceptions/access.exception");
+const admin_audit_1 = require("../utilities/admin.audit");
 const api_key_data_processor_1 = require("../libraries/api.key.data.processor");
 const api_key_list_processor_1 = require("../libraries/api.key.list.processor");
 const add_api_key_dto_1 = require("../dtos/add.api.key.dto");
 const api_key_list_dto_1 = require("../dtos/api.key.list.dto");
-let AdminApiKeyController = class AdminApiKeyController {
-    constructor(adminAccessService, apiKeyService, scopeService, listFilterService) {
+let AdminApiKeyController = AdminApiKeyController_1 = class AdminApiKeyController {
+    constructor(adminAccessService, apiKeyService, scopeService, listFilterService, cacheService) {
         this.adminAccessService = adminAccessService;
         this.apiKeyService = apiKeyService;
         this.scopeService = scopeService;
         this.listFilterService = listFilterService;
+        this.cacheService = cacheService;
     }
     async issue(dto) {
         const { user } = await this.adminAccessService.validateAdmin();
@@ -40,26 +47,53 @@ let AdminApiKeyController = class AdminApiKeyController {
         await this.adminAccessService.validateContentReader();
         return new api_key_list_processor_1.ApiKeyListProcessor(this.listFilterService).process(dto);
     }
-    async detail({ id }) {
-        const access = await this.adminAccessService.validateContentReader();
-        const reveal = this.adminAccessService.holdsAtLeast(access, global_admin_roles_enum_1.GlobalAdminRoles.GLOBAL_ADMIN);
-        return this.apiKeyService.apiKeyDetail(id, reveal);
+    async detail(id) {
+        await this.adminAccessService.validateContentReader();
+        return this.apiKeyService.apiKeyDetail(id);
+    }
+    async reveal(id) {
+        const { user } = await this.adminAccessService.validateSuperAdmin();
+        const count = await this.cacheService.increment(`admin:api-key-reveal:${user.id}`, AdminApiKeyController_1.REVEAL_WINDOW_SEC);
+        if (count > AdminApiKeyController_1.REVEAL_LIMIT)
+            throw new access_exception_1.AccessException('Too many API key reveals; try again later.');
+        const key = await this.apiKeyService.revealApiKey(id);
+        await admin_audit_1.AdminAudit.record(api_key_entity_1.ApiKeyEntity.getRepository().manager, {
+            actor: user,
+            sourceType: entity_constants_1.baseEntityConstants.apiKey,
+            sourceId: id,
+            action: 'REVEAL',
+        });
+        return { id, key };
     }
-    async disable({ id }) {
+    async disable(id) {
         const { user } = await this.adminAccessService.validateAdmin();
-        return this.apiKeyService.disableApiKey(id, user.id);
+        const result = await this.apiKeyService.disableApiKey(id, user.id);
+        await this.audit(user, id, 'DISABLE');
+        return result;
     }
-    async remove({ id }) {
+    async remove(id) {
         const { user } = await this.adminAccessService.validateAdmin();
-        return this.apiKeyService.deleteApiKey(id, user.id);
+        const result = await this.apiKeyService.deleteApiKey(id, user.id);
+        await this.audit(user, id, audit_action_enum_1.AuditAction.SOFT_DELETE);
+        return result;
+    }
+    audit(actor, id, action) {
+        return admin_audit_1.AdminAudit.record(api_key_entity_1.ApiKeyEntity.getRepository().manager, {
+            actor,
+            sourceType: entity_constants_1.baseEntityConstants.apiKey,
+            sourceId: id,
+            action,
+        });
     }
 };
 exports.AdminApiKeyController = AdminApiKeyController;
+AdminApiKeyController.REVEAL_LIMIT = 10;
+AdminApiKeyController.REVEAL_WINDOW_SEC = 3600;
 __decorate([
     (0, common_1.Post)(),
     (0, swagger_1.ApiOperation)({
         summary: 'Issue an API key for a tenant.',
-        description: 'Create-only — `raw_key` is the full key and is returned exactly once, since only its hash is stored. A key can only be granted scopes its tenant already holds, which includes the children of any parent scope the tenant is enabled for. Requires at least the global admin role.',
+        description: 'Create-only — `raw_key` is the full key and is returned exactly once. Keys are stored hash-only unless API_KEY_REVEAL_ENABLED is on. `expires_at` defaults to 365 days and may be at most 730 days ahead. The tenant (or user) must be active. A key can only be granted scopes its tenant already holds, which includes the children of any parent scope the tenant is enabled for. Requires at least the global admin role.',
     }),
     __param(0, (0, common_1.Body)()),
     __metadata("design:type", Function),
@@ -80,23 +114,35 @@ __decorate([
 __decorate([
     (0, common_1.Get)(':id'),
     (0, swagger_1.ApiOperation)({
-        summary: 'One API key, in full.',
-        description: 'Carries the owning tenant and the `scopes` granted to the key. Requires at least the global content reader role — but `key`, the decrypted raw key, is only included from the global admin role up: it is a live credential, and reading a record is not the same permission as holding it. A key issued before keys were stored recoverably has no `key` at all.',
+        summary: 'One API key, without its secret.',
+        description: 'Carries the owner and the `scopes` granted to the key. The raw key is never part of this response; see `POST :id/reveal`. Requires at least the global content reader role.',
     }),
-    __param(0, (0, common_1.Param)()),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [common_params_dto_1.CommonParamsDto]),
+    __metadata("design:paramtypes", [String]),
     __metadata("design:returntype", Promise)
 ], AdminApiKeyController.prototype, "detail", null);
+__decorate([
+    (0, common_1.Post)(':id/reveal'),
+    (0, common_1.HttpCode)(200),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Reveal the raw API key.',
+        description: 'Only when the deployment opted in with API_KEY_REVEAL_ENABLED=true and the key was issued while it was on; otherwise 403/404. Every reveal is audit-logged and rate-limited per admin. Requires the global super admin role.',
+    }),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], AdminApiKeyController.prototype, "reveal", null);
 __decorate([
     (0, common_1.Post)(':id/disable'),
     (0, swagger_1.ApiOperation)({
         summary: 'Disable an API key.',
         description: 'Turns the key off (`is_active` false) without destroying it: validation stops accepting it, while the row keeps its scopes and its history. Requires at least the global admin role.',
     }),
-    __param(0, (0, common_1.Param)()),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [common_params_dto_1.CommonParamsDto]),
+    __metadata("design:paramtypes", [String]),
     __metadata("design:returntype", Promise)
 ], AdminApiKeyController.prototype, "disable", null);
 __decorate([
@@ -105,18 +151,20 @@ __decorate([
         summary: 'Delete an API key.',
         description: 'Soft delete: the row keeps its data with `deleted_at` set and drops out of every listing. It is revoked in the same transaction, along with its scope grants — key validation matches on `is_active`/`revoked_at`, so a row that only left the listings would keep authenticating requests. Requires at least the global admin role.',
     }),
-    __param(0, (0, common_1.Param)()),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [common_params_dto_1.CommonParamsDto]),
+    __metadata("design:paramtypes", [String]),
     __metadata("design:returntype", Promise)
 ], AdminApiKeyController.prototype, "remove", null);
-exports.AdminApiKeyController = AdminApiKeyController = __decorate([
+exports.AdminApiKeyController = AdminApiKeyController = AdminApiKeyController_1 = __decorate([
     (0, swagger_1.ApiTags)('Admin - API Keys'),
     (0, swagger_1.ApiBearerAuth)(),
+    (0, common_1.UsePipes)(strict_validation_pipe_1.StrictValidationPipe),
     (0, common_1.Controller)('api/admin/api-keys'),
     __metadata("design:paramtypes", [admin_access_service_1.AdminAccessService,
         api_key_service_1.ApiKeyService,
         scope_service_1.ScopeService,
-        list_filter_service_1.ListFilterService])
+        list_filter_service_1.ListFilterService,
+        cache_service_1.CacheService])
 ], AdminApiKeyController);
 //# sourceMappingURL=admin.api.key.controller.js.map

package/dist/admin/controllers/admin.api.key.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin.api.key.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.api.key.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4E;AAC5E,6CAAuE;AACvE,mFAA8E;AAC9E,yEAAoE;AACpE,qEAAiE;AACjE,sFAA4E;AAC5E,2EAAsE;AACtE,2EAAsE;AACtE,gFAA0E;AAC1E,gFAA0E;AAC1E,6DAAuD;AACvD,+DAAyD;AAUlD,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,YACmB,kBAAsC,EACtC,aAA4B,EAC5B,YAA0B,EAC1B,iBAAoC;QAHpC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,kBAAa,GAAb,aAAa,CAAe;QAC5B,iBAAY,GAAZ,YAAY,CAAc;QAC1B,sBAAiB,GAAjB,iBAAiB,CAAmB;IACpD,CAAC;IAQE,AAAN,KAAK,CAAC,KAAK,CAAS,GAAiB;QACnC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,4CAAmB,CAC5B,IAAI,EACJ,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,YAAY,CAClB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAQK,AAAN,KAAK,CAAC,IAAI,CAAS,GAAkB;QACnC,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,IAAI,4CAAmB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtE,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAAU,EAAE,EAAE,EAAmB;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CACjD,MAAM,EACN,0CAAgB,CAAC,YAAY,CAC9B,CAAC;QAEF,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAQK,AAAN,KAAK,CAAC,OAAO,CAAU,EAAE,EAAE,EAAmB;QAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAAU,EAAE,EAAE,EAAmB;QAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC;CACF,CAAA;AAvEY,sDAAqB;AAc1B;IANL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gCAAgC;QACzC,WAAW,EACT,qRAAqR;KACxR,CAAC;IACW,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,8BAAY;;kDAOpC;AAQK;IANL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EACT,uKAAuK;KAC1K,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,gCAAa;;iDAGpC;AAQK;IANL,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,uBAAuB;QAChC,WAAW,EACT,mWAAmW;KACtW,CAAC;IACY,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;mDAQ5C;AAQK;IANL,IAAA,aAAI,EAAC,aAAa,CAAC;IACnB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,qBAAqB;QAC9B,WAAW,EACT,sLAAsL;KACzL,CAAC;IACa,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;oDAG7C;AAQK;IANL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EACT,sUAAsU;KACzU,CAAC;IACY,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;mDAG5C;gCAtEU,qBAAqB;IAHjC,IAAA,iBAAO,EAAC,kBAAkB,CAAC;IAC3B,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,oBAAoB,CAAC;qCAGQ,yCAAkB;QACvB,+BAAa;QACd,4BAAY;QACP,uCAAiB;GAL5C,qBAAqB,CAuEjC"}
+{"version":3,"file":"admin.api.key.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.api.key.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAUwB;AACxB,6CAAuE;AACvE,mFAA8E;AAC9E,yEAAoE;AACpE,qEAAiE;AACjE,2EAAsE;AACtE,sFAAiF;AACjF,uEAAmE;AACnE,4EAAmE;AACnE,uEAAuE;AACvE,uEAAkE;AAClE,+EAA2E;AAC3E,0DAAsD;AACtD,gFAA0E;AAC1E,gFAA0E;AAC1E,6DAAuD;AACvD,+DAAyD;AAWlD,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IAChC,YACmB,kBAAsC,EACtC,aAA4B,EAC5B,YAA0B,EAC1B,iBAAoC,EACpC,YAA0B;QAJ1B,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,kBAAa,GAAb,aAAa,CAAe;QAC5B,iBAAY,GAAZ,YAAY,CAAc;QAC1B,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,iBAAY,GAAZ,YAAY,CAAc;IAC1C,CAAC;IAYE,AAAN,KAAK,CAAC,KAAK,CAAS,GAAiB;QACnC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,4CAAmB,CAC5B,IAAI,EACJ,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,YAAY,CAClB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAQK,AAAN,KAAK,CAAC,IAAI,CAAS,GAAkB;QACnC,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,IAAI,4CAAmB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtE,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAA6B,EAAU;QACjD,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC;IASK,AAAN,KAAK,CAAC,MAAM,CAA6B,EAAU;QACjD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QAEpE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAC7C,wBAAwB,IAAI,CAAC,EAAE,EAAE,EACjC,uBAAqB,CAAC,iBAAiB,CACxC,CAAC;QACF,IAAI,KAAK,GAAG,uBAAqB,CAAC,YAAY;YAC5C,MAAM,IAAI,kCAAe,CAAC,4CAA4C,CAAC,CAAC;QAE1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACtD,MAAM,wBAAU,CAAC,MAAM,CAAC,6BAAY,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE;YAC5D,KAAK,EAAE,IAAI;YACX,UAAU,EAAE,sCAAmB,CAAC,MAAM;YACtC,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;IACrB,CAAC;IAQK,AAAN,KAAK,CAAC,OAAO,CAA6B,EAAU;QAClD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;QACtC,OAAO,MAAM,CAAC;IAChB,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAA6B,EAAU;QACjD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,+BAAW,CAAC,WAAW,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,KAAqB,EAAE,EAAU,EAAE,MAAc;QAC7D,OAAO,wBAAU,CAAC,MAAM,CAAC,6BAAY,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE;YAC7D,KAAK;YACL,UAAU,EAAE,sCAAmB,CAAC,MAAM;YACtC,QAAQ,EAAE,EAAE;YACZ,MAAM;SACP,CAAC,CAAC;IACL,CAAC;;AA9GU,sDAAqB;AAUhB,kCAAY,GAAG,EAAE,AAAL,CAAM;AAClB,uCAAiB,GAAG,IAAI,AAAP,CAAQ;AAQnC;IANL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gCAAgC;QACzC,WAAW,EACT,+ZAA+Z;KACla,CAAC;IACW,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,8BAAY;;kDAOpC;AAQK;IANL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EACT,uKAAuK;KAC1K,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,gCAAa;;iDAGpC;AAQK;IANL,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EACT,6KAA6K;KAChL,CAAC;IACY,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;mDAGvC;AASK;IAPL,IAAA,aAAI,EAAC,YAAY,CAAC;IAClB,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,yBAAyB;QAClC,WAAW,EACT,8NAA8N;KACjO,CAAC;IACY,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;mDAkBvC;AAQK;IANL,IAAA,aAAI,EAAC,aAAa,CAAC;IACnB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,qBAAqB;QAC9B,WAAW,EACT,sLAAsL;KACzL,CAAC;IACa,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;oDAKxC;AAQK;IANL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EACT,sUAAsU;KACzU,CAAC;IACY,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;mDAKvC;gCArGU,qBAAqB;IAJjC,IAAA,iBAAO,EAAC,kBAAkB,CAAC;IAC3B,IAAA,uBAAa,GAAE;IACf,IAAA,iBAAQ,EAAC,6CAAoB,CAAC;IAC9B,IAAA,mBAAU,EAAC,oBAAoB,CAAC;qCAGQ,yCAAkB;QACvB,+BAAa;QACd,4BAAY;QACP,uCAAiB;QACtB,4BAAY;GANlC,qBAAqB,CA+GjC"}

package/dist/admin/controllers/admin.email.template.controller.d.ts

@@ -1,7 +1,6 @@
 import { ListFilterService } from '../../common/services/list.filter.service';
 import { AdminAccessService } from '../services/admin.access.service';
 import { TemplateService } from '../services/template.service';
-import { CommonParamsDto } from '../../common/dtos/common.params.dto';
 import { AddEmailTemplateDto } from '../dtos/add.email.template.dto';
 import { EmailTemplateListDto } from '../dtos/email.template.list.dto';
 import { EmailTemplateEntity } from '../../notification/entities/email.template.entity';
@@ -12,7 +11,7 @@ export declare class AdminEmailTemplateController {
     constructor(adminAccessService: AdminAccessService, templateService: TemplateService, listFilterService: ListFilterService);
     save(dto: AddEmailTemplateDto): Promise<EmailTemplateEntity>;
     list(dto: EmailTemplateListDto): Promise<import("../..").CommonListResult>;
-    detail({ id }: CommonParamsDto): Promise<EmailTemplateEntity>;
-    remove({ id }: CommonParamsDto): Promise<import("../..").DeleteResult>;
+    detail(id: string): Promise<EmailTemplateEntity>;
+    remove(id: string): Promise<import("../..").DeleteResult>;
 }
 //# sourceMappingURL=admin.email.template.controller.d.ts.map

package/dist/admin/controllers/admin.email.template.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.email.template.controller.d.ts","sourceRoot":"","sources":["../../../src/admin/controllers/admin.email.template.controller.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAGtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mDAAmD,CAAC;AAQxF,qBAGa,4BAA4B;IAErC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBAFjB,kBAAkB,EAAE,kBAAkB,EACtC,eAAe,EAAE,eAAe,EAChC,iBAAiB,EAAE,iBAAiB;IASjD,IAAI,CAAS,GAAG,EAAE,mBAAmB;IAUrC,IAAI,CAAS,GAAG,EAAE,oBAAoB;IAWtC,MAAM,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAgBtE,MAAM,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe;CAI9C"}
+{"version":3,"file":"admin.email.template.controller.d.ts","sourceRoot":"","sources":["../../../src/admin/controllers/admin.email.template.controller.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAK/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mDAAmD,CAAC;AAQxF,qBAIa,4BAA4B;IAErC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBAFjB,kBAAkB,EAAE,kBAAkB,EACtC,eAAe,EAAE,eAAe,EAChC,iBAAiB,EAAE,iBAAiB;IASjD,IAAI,CAAS,GAAG,EAAE,mBAAmB;IAUrC,IAAI,CAAS,GAAG,EAAE,oBAAoB;IAWtC,MAAM,CAA6B,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAgB5E,MAAM,CAA6B,EAAE,EAAE,MAAM;CAIpD"}

package/dist/admin/controllers/admin.email.template.controller.js

@@ -18,7 +18,8 @@ const swagger_1 = require("@nestjs/swagger");
 const list_filter_service_1 = require("../../common/services/list.filter.service");
 const admin_access_service_1 = require("../services/admin.access.service");
 const template_service_1 = require("../services/template.service");
-const common_params_dto_1 = require("../../common/dtos/common.params.dto");
+const strict_validation_pipe_1 = require("../../common/pipes/strict.validation.pipe");
+const not_found_exception_1 = require("../../global/exceptions/not.found.exception");
 const email_template_data_processor_1 = require("../libraries/email.template.data.processor");
 const email_template_list_processor_1 = require("../libraries/email.template.list.processor");
 const add_email_template_dto_1 = require("../dtos/add.email.template.dto");
@@ -31,21 +32,21 @@ let AdminEmailTemplateController = class AdminEmailTemplateController {
         this.listFilterService = listFilterService;
     }
     async save(dto) {
-        const { user } = await this.adminAccessService.validateContentManager();
-        return new email_template_data_processor_1.EmailTemplateDataProcessor(user).process(dto);
+        const access = await this.adminAccessService.validateContentManager();
+        return new email_template_data_processor_1.EmailTemplateDataProcessor(access).process(dto);
     }
     async list(dto) {
         await this.adminAccessService.validateContentReader();
         return new email_template_list_processor_1.EmailTemplateListProcessor(this.listFilterService).process(dto);
     }
-    async detail({ id }) {
+    async detail(id) {
         await this.adminAccessService.validateContentReader();
         const emailTemplate = await email_template_entity_1.EmailTemplateEntity.findOne({ where: { id } });
         if (!emailTemplate)
-            throw new common_1.NotFoundException('No email template exists for this id');
+            throw new not_found_exception_1.NotFoundException('No email template exists for this id');
         return emailTemplate;
     }
-    async remove({ id }) {
+    async remove(id) {
         const { user } = await this.adminAccessService.validateAdmin();
         return this.templateService.deleteEmailTemplate(id, user);
     }
@@ -55,7 +56,7 @@ __decorate([
     (0, common_1.Post)(),
     (0, swagger_1.ApiOperation)({
         summary: 'Define an email template, or update an existing one.',
-        description: 'Send an `id` to edit that template; omit it to define a new one. `identifier` is what sending code names and is unique across the catalogue. Requires at least the global content manager role.',
+        description: 'Send an `id` to edit that template; omit it to define a new one. `identifier` is what sending code names and is unique across the catalogue and fixed once created; omitted optional fields keep their stored value. Requires at least the global content manager role, and the global admin role to change the `path` of an existing template.',
     }),
     __param(0, (0, common_1.Body)()),
     __metadata("design:type", Function),
@@ -79,9 +80,9 @@ __decorate([
         summary: 'One email template, in full.',
         description: 'Everything the listing leaves out — the `attributes` bag and the authoring trail. Requires at least the global content reader role.',
     }),
-    __param(0, (0, common_1.Param)()),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [common_params_dto_1.CommonParamsDto]),
+    __metadata("design:paramtypes", [String]),
     __metadata("design:returntype", Promise)
 ], AdminEmailTemplateController.prototype, "detail", null);
 __decorate([
@@ -90,14 +91,15 @@ __decorate([
         summary: 'Delete an email template.',
         description: 'Soft delete: the row keeps its data with `deleted_at` set and drops out of every listing. Nothing cascades — the remote template and every mail already sent from it are untouched — but a flow that still names the identifier stops rendering. Requires at least the global admin role.',
     }),
-    __param(0, (0, common_1.Param)()),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [common_params_dto_1.CommonParamsDto]),
+    __metadata("design:paramtypes", [String]),
     __metadata("design:returntype", Promise)
 ], AdminEmailTemplateController.prototype, "remove", null);
 exports.AdminEmailTemplateController = AdminEmailTemplateController = __decorate([
     (0, swagger_1.ApiTags)('Admin - Email Templates'),
     (0, swagger_1.ApiBearerAuth)(),
+    (0, common_1.UsePipes)(strict_validation_pipe_1.StrictValidationPipe),
     (0, common_1.Controller)('api/admin/email-templates'),
     __metadata("design:paramtypes", [admin_access_service_1.AdminAccessService,
         template_service_1.TemplateService,

package/dist/admin/controllers/admin.email.template.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin.email.template.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.email.template.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAQwB;AACxB,6CAAuE;AACvE,mFAA8E;AAC9E,2EAAsE;AACtE,mEAA+D;AAC/D,2EAAsE;AACtE,8FAAwF;AACxF,8FAAwF;AACxF,2EAAqE;AACrE,6EAAuE;AACvE,6FAAwF;AAWjF,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IACvC,YACmB,kBAAsC,EACtC,eAAgC,EAChC,iBAAoC;QAFpC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,oBAAe,GAAf,eAAe,CAAiB;QAChC,sBAAiB,GAAjB,iBAAiB,CAAmB;IACpD,CAAC;IAQE,AAAN,KAAK,CAAC,IAAI,CAAS,GAAwB;QACzC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,sBAAsB,EAAE,CAAC;QACxE,OAAO,IAAI,0DAA0B,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;IAOK,AAAN,KAAK,CAAC,IAAI,CAAS,GAAyB;QAC1C,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,IAAI,0DAA0B,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7E,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAAU,EAAE,EAAE,EAAmB;QAC3C,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QAEtD,MAAM,aAAa,GAAG,MAAM,2CAAmB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,aAAa;YAChB,MAAM,IAAI,0BAAiB,CAAC,sCAAsC,CAAC,CAAC;QAEtE,OAAO,aAAa,CAAC;IACvB,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAAU,EAAE,EAAE,EAAmB;QAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;CACF,CAAA;AAtDY,oEAA4B;AAajC;IANL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,sDAAsD;QAC/D,WAAW,EACT,iMAAiM;KACpM,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,4CAAmB;;wDAG1C;AAOK;IALL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,0CAA0C;QACnD,WAAW,EAAE,mDAAmD;KACjE,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,8CAAoB;;wDAG3C;AAQK;IANL,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8BAA8B;QACvC,WAAW,EACT,qIAAqI;KACxI,CAAC;IACY,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;0DAQ5C;AAQK;IANL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,2BAA2B;QACpC,WAAW,EACT,2RAA2R;KAC9R,CAAC;IACY,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;0DAG5C;uCArDU,4BAA4B;IAHxC,IAAA,iBAAO,EAAC,yBAAyB,CAAC;IAClC,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,2BAA2B,CAAC;qCAGC,yCAAkB;QACrB,kCAAe;QACb,uCAAiB;GAJ5C,4BAA4B,CAsDxC"}
+{"version":3,"file":"admin.email.template.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.email.template.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CASwB;AACxB,6CAAuE;AACvE,mFAA8E;AAC9E,2EAAsE;AACtE,mEAA+D;AAC/D,sFAAiF;AACjF,qFAAgF;AAChF,8FAAwF;AACxF,8FAAwF;AACxF,2EAAqE;AACrE,6EAAuE;AACvE,6FAAwF;AAYjF,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IACvC,YACmB,kBAAsC,EACtC,eAAgC,EAChC,iBAAoC;QAFpC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,oBAAe,GAAf,eAAe,CAAiB;QAChC,sBAAiB,GAAjB,iBAAiB,CAAmB;IACpD,CAAC;IAQE,AAAN,KAAK,CAAC,IAAI,CAAS,GAAwB;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,sBAAsB,EAAE,CAAC;QACtE,OAAO,IAAI,0DAA0B,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7D,CAAC;IAOK,AAAN,KAAK,CAAC,IAAI,CAAS,GAAyB;QAC1C,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,IAAI,0DAA0B,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7E,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAA6B,EAAU;QACjD,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QAEtD,MAAM,aAAa,GAAG,MAAM,2CAAmB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,aAAa;YAChB,MAAM,IAAI,uCAAiB,CAAC,sCAAsC,CAAC,CAAC;QAEtE,OAAO,aAAa,CAAC;IACvB,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAA6B,EAAU;QACjD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;CACF,CAAA;AAtDY,oEAA4B;AAajC;IANL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,sDAAsD;QAC/D,WAAW,EACT,iVAAiV;KACpV,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,4CAAmB;;wDAG1C;AAOK;IALL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,0CAA0C;QACnD,WAAW,EAAE,mDAAmD;KACjE,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,8CAAoB;;wDAG3C;AAQK;IANL,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8BAA8B;QACvC,WAAW,EACT,qIAAqI;KACxI,CAAC;IACY,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;0DAQvC;AAQK;IANL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,2BAA2B;QACpC,WAAW,EACT,2RAA2R;KAC9R,CAAC;IACY,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;0DAGvC;uCArDU,4BAA4B;IAJxC,IAAA,iBAAO,EAAC,yBAAyB,CAAC;IAClC,IAAA,uBAAa,GAAE;IACf,IAAA,iBAAQ,EAAC,6CAAoB,CAAC;IAC9B,IAAA,mBAAU,EAAC,2BAA2B,CAAC;qCAGC,yCAAkB;QACrB,kCAAe;QACb,uCAAiB;GAJ5C,4BAA4B,CAsDxC"}

package/dist/admin/controllers/admin.pdf.template.controller.d.ts

@@ -1,7 +1,6 @@
 import { ListFilterService } from '../../common/services/list.filter.service';
 import { AdminAccessService } from '../services/admin.access.service';
 import { TemplateService } from '../services/template.service';
-import { CommonParamsDto } from '../../common/dtos/common.params.dto';
 import { AddPdfTemplateDto } from '../dtos/add.pdf.template.dto';
 import { PdfTemplateListDto } from '../dtos/pdf.template.list.dto';
 import { PdfTemplateEntity } from '../../document/entities/pdf.template.entity';
@@ -12,7 +11,7 @@ export declare class AdminPdfTemplateController {
     constructor(adminAccessService: AdminAccessService, templateService: TemplateService, listFilterService: ListFilterService);
     save(dto: AddPdfTemplateDto): Promise<PdfTemplateEntity>;
     list(dto: PdfTemplateListDto): Promise<import("../..").CommonListResult>;
-    detail({ id }: CommonParamsDto): Promise<PdfTemplateEntity>;
-    remove({ id }: CommonParamsDto): Promise<import("../..").DeleteResult>;
+    detail(id: string): Promise<PdfTemplateEntity>;
+    remove(id: string): Promise<import("../..").DeleteResult>;
 }
 //# sourceMappingURL=admin.pdf.template.controller.d.ts.map

package/dist/admin/controllers/admin.pdf.template.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.pdf.template.controller.d.ts","sourceRoot":"","sources":["../../../src/admin/controllers/admin.pdf.template.controller.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAGtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAQhF,qBAGa,0BAA0B;IAEnC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBAFjB,kBAAkB,EAAE,kBAAkB,EACtC,eAAe,EAAE,eAAe,EAChC,iBAAiB,EAAE,iBAAiB;IASjD,IAAI,CAAS,GAAG,EAAE,iBAAiB;IAUnC,IAAI,CAAS,GAAG,EAAE,kBAAkB;IAWpC,MAAM,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAgBpE,MAAM,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe;CAI9C"}
+{"version":3,"file":"admin.pdf.template.controller.d.ts","sourceRoot":"","sources":["../../../src/admin/controllers/admin.pdf.template.controller.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAK/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAQhF,qBAIa,0BAA0B;IAEnC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBAFjB,kBAAkB,EAAE,kBAAkB,EACtC,eAAe,EAAE,eAAe,EAChC,iBAAiB,EAAE,iBAAiB;IASjD,IAAI,CAAS,GAAG,EAAE,iBAAiB;IAUnC,IAAI,CAAS,GAAG,EAAE,kBAAkB;IAWpC,MAAM,CAA6B,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAgB1E,MAAM,CAA6B,EAAE,EAAE,MAAM;CAIpD"}

package/dist/admin/controllers/admin.pdf.template.controller.js

@@ -18,7 +18,8 @@ const swagger_1 = require("@nestjs/swagger");
 const list_filter_service_1 = require("../../common/services/list.filter.service");
 const admin_access_service_1 = require("../services/admin.access.service");
 const template_service_1 = require("../services/template.service");
-const common_params_dto_1 = require("../../common/dtos/common.params.dto");
+const strict_validation_pipe_1 = require("../../common/pipes/strict.validation.pipe");
+const not_found_exception_1 = require("../../global/exceptions/not.found.exception");
 const pdf_template_data_processor_1 = require("../libraries/pdf.template.data.processor");
 const pdf_template_list_processor_1 = require("../libraries/pdf.template.list.processor");
 const add_pdf_template_dto_1 = require("../dtos/add.pdf.template.dto");
@@ -31,21 +32,21 @@ let AdminPdfTemplateController = class AdminPdfTemplateController {
         this.listFilterService = listFilterService;
     }
     async save(dto) {
-        const { user } = await this.adminAccessService.validateContentManager();
-        return new pdf_template_data_processor_1.PdfTemplateDataProcessor(user).process(dto);
+        const access = await this.adminAccessService.validateContentManager();
+        return new pdf_template_data_processor_1.PdfTemplateDataProcessor(access).process(dto);
     }
     async list(dto) {
         await this.adminAccessService.validateContentReader();
         return new pdf_template_list_processor_1.PdfTemplateListProcessor(this.listFilterService).process(dto);
     }
-    async detail({ id }) {
+    async detail(id) {
         await this.adminAccessService.validateContentReader();
         const pdfTemplate = await pdf_template_entity_1.PdfTemplateEntity.findOne({ where: { id } });
         if (!pdfTemplate)
-            throw new common_1.NotFoundException('No PDF template exists for this id');
+            throw new not_found_exception_1.NotFoundException('No PDF template exists for this id');
         return pdfTemplate;
     }
-    async remove({ id }) {
+    async remove(id) {
         const { user } = await this.adminAccessService.validateAdmin();
         return this.templateService.deletePdfTemplate(id, user);
     }
@@ -55,7 +56,7 @@ __decorate([
     (0, common_1.Post)(),
     (0, swagger_1.ApiOperation)({
         summary: 'Define a PDF template, or update an existing one.',
-        description: 'Send an `id` to edit that template; omit it to define a new one. `identifier` is what generating code names and is unique across the catalogue. Requires at least the global content manager role.',
+        description: 'Send an `id` to edit that template; omit it to define a new one. `identifier` is what generating code names and is unique across the catalogue and fixed once created; omitted optional fields keep their stored value. Requires at least the global content manager role, and the global admin role to change the `path` of an existing template.',
     }),
     __param(0, (0, common_1.Body)()),
     __metadata("design:type", Function),
@@ -79,9 +80,9 @@ __decorate([
         summary: 'One PDF template, in full.',
         description: 'Everything the listing leaves out — the `attributes` bag and the authoring trail. Requires at least the global content reader role.',
     }),
-    __param(0, (0, common_1.Param)()),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [common_params_dto_1.CommonParamsDto]),
+    __metadata("design:paramtypes", [String]),
     __metadata("design:returntype", Promise)
 ], AdminPdfTemplateController.prototype, "detail", null);
 __decorate([
@@ -90,14 +91,15 @@ __decorate([
         summary: 'Delete a PDF template.',
         description: 'Soft delete: the row keeps its data with `deleted_at` set and drops out of every listing. Nothing cascades — the remote template and every document already generated from it are untouched — but a flow that still names the identifier stops rendering. Requires at least the global admin role.',
     }),
-    __param(0, (0, common_1.Param)()),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [common_params_dto_1.CommonParamsDto]),
+    __metadata("design:paramtypes", [String]),
     __metadata("design:returntype", Promise)
 ], AdminPdfTemplateController.prototype, "remove", null);
 exports.AdminPdfTemplateController = AdminPdfTemplateController = __decorate([
     (0, swagger_1.ApiTags)('Admin - PDF Templates'),
     (0, swagger_1.ApiBearerAuth)(),
+    (0, common_1.UsePipes)(strict_validation_pipe_1.StrictValidationPipe),
     (0, common_1.Controller)('api/admin/pdf-templates'),
     __metadata("design:paramtypes", [admin_access_service_1.AdminAccessService,
         template_service_1.TemplateService,

package/dist/admin/controllers/admin.pdf.template.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin.pdf.template.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.pdf.template.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAQwB;AACxB,6CAAuE;AACvE,mFAA8E;AAC9E,2EAAsE;AACtE,mEAA+D;AAC/D,2EAAsE;AACtE,0FAAoF;AACpF,0FAAoF;AACpF,uEAAiE;AACjE,yEAAmE;AACnE,qFAAgF;AAWzE,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IACrC,YACmB,kBAAsC,EACtC,eAAgC,EAChC,iBAAoC;QAFpC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,oBAAe,GAAf,eAAe,CAAiB;QAChC,sBAAiB,GAAjB,iBAAiB,CAAmB;IACpD,CAAC;IAQE,AAAN,KAAK,CAAC,IAAI,CAAS,GAAsB;QACvC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,sBAAsB,EAAE,CAAC;QACxE,OAAO,IAAI,sDAAwB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzD,CAAC;IAOK,AAAN,KAAK,CAAC,IAAI,CAAS,GAAuB;QACxC,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,IAAI,sDAAwB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3E,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAAU,EAAE,EAAE,EAAmB;QAC3C,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QAEtD,MAAM,WAAW,GAAG,MAAM,uCAAiB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,WAAW;YACd,MAAM,IAAI,0BAAiB,CAAC,oCAAoC,CAAC,CAAC;QAEpE,OAAO,WAAW,CAAC;IACrB,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAAU,EAAE,EAAE,EAAmB;QAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;CACF,CAAA;AAtDY,gEAA0B;AAa/B;IANL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mDAAmD;QAC5D,WAAW,EACT,oMAAoM;KACvM,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,wCAAiB;;sDAGxC;AAOK;IALL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wCAAwC;QACjD,WAAW,EAAE,mDAAmD;KACjE,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,0CAAkB;;sDAGzC;AAQK;IANL,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,4BAA4B;QACrC,WAAW,EACT,qIAAqI;KACxI,CAAC;IACY,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;wDAQ5C;AAQK;IANL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wBAAwB;QACjC,WAAW,EACT,oSAAoS;KACvS,CAAC;IACY,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;wDAG5C;qCArDU,0BAA0B;IAHtC,IAAA,iBAAO,EAAC,uBAAuB,CAAC;IAChC,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,yBAAyB,CAAC;qCAGG,yCAAkB;QACrB,kCAAe;QACb,uCAAiB;GAJ5C,0BAA0B,CAsDtC"}
+{"version":3,"file":"admin.pdf.template.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.pdf.template.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CASwB;AACxB,6CAAuE;AACvE,mFAA8E;AAC9E,2EAAsE;AACtE,mEAA+D;AAC/D,sFAAiF;AACjF,qFAAgF;AAChF,0FAAoF;AACpF,0FAAoF;AACpF,uEAAiE;AACjE,yEAAmE;AACnE,qFAAgF;AAYzE,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IACrC,YACmB,kBAAsC,EACtC,eAAgC,EAChC,iBAAoC;QAFpC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,oBAAe,GAAf,eAAe,CAAiB;QAChC,sBAAiB,GAAjB,iBAAiB,CAAmB;IACpD,CAAC;IAQE,AAAN,KAAK,CAAC,IAAI,CAAS,GAAsB;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,sBAAsB,EAAE,CAAC;QACtE,OAAO,IAAI,sDAAwB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;IAOK,AAAN,KAAK,CAAC,IAAI,CAAS,GAAuB;QACxC,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,IAAI,sDAAwB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3E,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAA6B,EAAU;QACjD,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QAEtD,MAAM,WAAW,GAAG,MAAM,uCAAiB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,WAAW;YACd,MAAM,IAAI,uCAAiB,CAAC,oCAAoC,CAAC,CAAC;QAEpE,OAAO,WAAW,CAAC;IACrB,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAA6B,EAAU;QACjD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;CACF,CAAA;AAtDY,gEAA0B;AAa/B;IANL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mDAAmD;QAC5D,WAAW,EACT,oVAAoV;KACvV,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,wCAAiB;;sDAGxC;AAOK;IALL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wCAAwC;QACjD,WAAW,EAAE,mDAAmD;KACjE,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,0CAAkB;;sDAGzC;AAQK;IANL,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,4BAA4B;QACrC,WAAW,EACT,qIAAqI;KACxI,CAAC;IACY,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;wDAQvC;AAQK;IANL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wBAAwB;QACjC,WAAW,EACT,oSAAoS;KACvS,CAAC;IACY,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;wDAGvC;qCArDU,0BAA0B;IAJtC,IAAA,iBAAO,EAAC,uBAAuB,CAAC;IAChC,IAAA,uBAAa,GAAE;IACf,IAAA,iBAAQ,EAAC,6CAAoB,CAAC;IAC9B,IAAA,mBAAU,EAAC,yBAAyB,CAAC;qCAGG,yCAAkB;QACrB,kCAAe;QACb,uCAAiB;GAJ5C,0BAA0B,CAsDtC"}