@neohm/nestend 4.1.1 → 5.0.0

package/dist/auth/controllers/impersonation.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"impersonation.controller.d.ts","sourceRoot":"","sources":["../../../src/auth/controllers/impersonation.controller.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAqB,MAAM,qBAAqB,CAAC;AAE7E,qBAEa,uBAAuB;IACtB,OAAO,CAAC,QAAQ,CAAC,oBAAoB;gBAApB,oBAAoB,EAAE,oBAAoB;IAQjE,KAAK,CACD,GAAG,EAAE,qBAAqB,EAC3B,OAAO,EAAE,OAAO,GACtB,OAAO,CAAC,mBAAmB,CAAC;IAWzB,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IAIxC,OAAO,CAAC,SAAS;CAMlB"}
+{"version":3,"file":"impersonation.controller.d.ts","sourceRoot":"","sources":["../../../src/auth/controllers/impersonation.controller.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAI3D,qBAGa,uBAAuB;IAEhC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBADR,oBAAoB,EAAE,oBAAoB,EAC1C,QAAQ,EAAE,oBAAoB;IAU3C,KAAK,CACD,GAAG,EAAE,qBAAqB,EAC3B,OAAO,EAAE,OAAO,GACtB,OAAO,CAAC,oBAAoB,CAAC;IAmB1B,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;CAGzC"}

package/dist/auth/controllers/impersonation.controller.js

@@ -15,31 +15,31 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ImpersonationController = void 0;
 const common_1 = require("@nestjs/common");
 const swagger_1 = require("@nestjs/swagger");
+const strict_validation_pipe_1 = require("../../common/pipes/strict.validation.pipe");
 const impersonation_login_dto_1 = require("../dtos/impersonation.login.dto");
 const impersonation_service_1 = require("../services/impersonation.service");
+const login_throttle_service_1 = require("../services/login.throttle.service");
+const public_decorator_1 = require("../decorators/public.decorator");
+const request_credentials_1 = require("../utilities/request.credentials");
 let ImpersonationController = class ImpersonationController {
-    constructor(impersonationService) {
+    constructor(impersonationService, throttle) {
         this.impersonationService = impersonationService;
+        this.throttle = throttle;
     }
     async login(dto, request) {
-        return this.impersonationService.login(dto, this.contextOf(request));
+        return this.throttle.protect('impersonation.login', { ip: request.ip, account: dto.email }, () => this.impersonationService.login(dto, request_credentials_1.RequestCredentials.issueContext(request)));
     }
     async tenants() {
         return this.impersonationService.accessibleTenants();
     }
-    contextOf(request) {
-        return {
-            ip_address: request.ip,
-            user_agent: request.headers['user-agent'],
-        };
-    }
 };
 exports.ImpersonationController = ImpersonationController;
 __decorate([
     (0, common_1.Post)('login'),
+    (0, public_decorator_1.Public)(),
     (0, swagger_1.ApiOperation)({
         summary: 'Sign a global-access user into one organization.',
-        description: 'Takes the same credentials as `POST /auth/login` plus the `tenant_id` to enter. The account must be a tenantless system user with `has_global_access`; anything else is refused. The returned pair behaves like an ordinary tenant-user session scoped to that organization, and a refresh keeps it there.',
+        description: 'Takes the same credentials as `POST /auth/login` plus the `tenant_id` to enter. The account must be a tenantless system user with `has_global_access`. Returns an access token only (no refresh token) that expires after IMPERSONATION_TOKEN_EXPIRY. Audited and rate-limited (429).',
     }),
     __param(0, (0, common_1.Body)()),
     __param(1, (0, common_1.Req)()),
@@ -61,6 +61,8 @@ __decorate([
 exports.ImpersonationController = ImpersonationController = __decorate([
     (0, swagger_1.ApiTags)('Impersonation'),
     (0, common_1.Controller)('api/auth/impersonation'),
-    __metadata("design:paramtypes", [impersonation_service_1.ImpersonationService])
+    (0, common_1.UsePipes)(strict_validation_pipe_1.StrictValidationPipe),
+    __metadata("design:paramtypes", [impersonation_service_1.ImpersonationService,
+        login_throttle_service_1.LoginThrottleService])
 ], ImpersonationController);
 //# sourceMappingURL=impersonation.controller.js.map

package/dist/auth/controllers/impersonation.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"impersonation.controller.js","sourceRoot":"","sources":["../../../src/auth/controllers/impersonation.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAkE;AAClE,6CAAuE;AAGvE,6EAAwE;AACxE,6EAAyE;AAKlE,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAClC,YAA6B,oBAA0C;QAA1C,yBAAoB,GAApB,oBAAoB,CAAsB;IAAG,CAAC;IAQrE,AAAN,KAAK,CAAC,KAAK,CACD,GAA0B,EAC3B,OAAgB;QAEvB,OAAO,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACvE,CAAC;IASK,AAAN,KAAK,CAAC,OAAO;QACX,OAAO,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,CAAC;IACvD,CAAC;IAEO,SAAS,CAAC,OAAgB;QAChC,OAAO;YACL,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;SAC1C,CAAC;IACJ,CAAC;CACF,CAAA;AAjCY,0DAAuB;AAS5B;IANL,IAAA,aAAI,EAAC,OAAO,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,kDAAkD;QAC3D,WAAW,EACT,4SAA4S;KAC/S,CAAC;IAEC,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;qCADO,+CAAqB;;oDAInC;AASK;IAPL,IAAA,YAAG,EAAC,SAAS,CAAC;IACd,IAAA,uBAAa,GAAE;IACf,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,iDAAiD;QAC1D,WAAW,EACT,oIAAoI;KACvI,CAAC;;;;sDAGD;kCAzBU,uBAAuB;IAFnC,IAAA,iBAAO,EAAC,eAAe,CAAC;IACxB,IAAA,mBAAU,EAAC,wBAAwB,CAAC;qCAEgB,4CAAoB;GAD5D,uBAAuB,CAiCnC"}
+{"version":3,"file":"impersonation.controller.js","sourceRoot":"","sources":["../../../src/auth/controllers/impersonation.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4E;AAC5E,6CAAuE;AAEvE,sFAAiF;AAEjF,6EAAwE;AACxE,6EAAyE;AACzE,+EAA0E;AAE1E,qEAAwD;AACxD,0EAAsE;AAK/D,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAClC,YACmB,oBAA0C,EAC1C,QAA8B;QAD9B,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,aAAQ,GAAR,QAAQ,CAAsB;IAC9C,CAAC;IASE,AAAN,KAAK,CAAC,KAAK,CACD,GAA0B,EAC3B,OAAgB;QAEvB,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAC1B,qBAAqB,EACrB,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,EACtC,GAAG,EAAE,CACH,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAC7B,GAAG,EACH,wCAAkB,CAAC,YAAY,CAAC,OAAO,CAAC,CACzC,CACJ,CAAC;IACJ,CAAC;IASK,AAAN,KAAK,CAAC,OAAO;QACX,OAAO,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,CAAC;IACvD,CAAC;CACF,CAAA;AAtCY,0DAAuB;AAa5B;IAPL,IAAA,aAAI,EAAC,OAAO,CAAC;IACb,IAAA,yBAAM,GAAE;IACR,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,kDAAkD;QAC3D,WAAW,EACT,uRAAuR;KAC1R,CAAC;IAEC,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;qCADO,+CAAqB;;oDAYnC;AASK;IAPL,IAAA,YAAG,EAAC,SAAS,CAAC;IACd,IAAA,uBAAa,GAAE;IACf,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,iDAAiD;QAC1D,WAAW,EACT,oIAAoI;KACvI,CAAC;;;;sDAGD;kCArCU,uBAAuB;IAHnC,IAAA,iBAAO,EAAC,eAAe,CAAC;IACxB,IAAA,mBAAU,EAAC,wBAAwB,CAAC;IACpC,IAAA,iBAAQ,EAAC,6CAAoB,CAAC;qCAGY,4CAAoB;QAChC,6CAAoB;GAHtC,uBAAuB,CAsCnC"}

package/dist/auth/controllers/tenant.invitation.controller.d.ts

@@ -1,4 +1,4 @@
-import { CommonParamsDto } from '../../common/dtos/common.params.dto';
+import { CacheService } from '../../common/services/cache.service';
 import { ListFilterService } from '../../common/services/list.filter.service';
 import { InviteTenantUserDto } from '../dtos/invite.tenant.user.dto';
 import { TenantInvitationListDto } from '../dtos/tenant.invitation.list.dto';
@@ -8,11 +8,13 @@ export declare class TenantInvitationController {
     private readonly authService;
     private readonly tenantInvitationService;
     private readonly listFilterService;
-    constructor(authService: AuthService, tenantInvitationService: TenantInvitationService, listFilterService: ListFilterService);
+    private readonly cacheService;
+    constructor(authService: AuthService, tenantInvitationService: TenantInvitationService, listFilterService: ListFilterService, cacheService: CacheService);
     invite(dto: InviteTenantUserDto): Promise<import("../..").TenantInvitationEntity>;
     roles(): Promise<import("../..").SystemRoleEntity[]>;
     list(dto: TenantInvitationListDto): Promise<import("../..").CommonListResult>;
-    resend({ id }: CommonParamsDto): Promise<import("../..").TenantInvitationEntity>;
-    revoke({ id }: CommonParamsDto): Promise<import("../..").TenantInvitationEntity>;
+    resend(id: string): Promise<import("../..").TenantInvitationEntity>;
+    revoke(id: string): Promise<import("../..").TenantInvitationEntity>;
+    private throttle;
 }
 //# sourceMappingURL=tenant.invitation.controller.d.ts.map

package/dist/auth/controllers/tenant.invitation.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenant.invitation.controller.d.ts","sourceRoot":"","sources":["../../../src/auth/controllers/tenant.invitation.controller.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAI7E,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAGhF,qBAGa,0BAA0B;IAEnC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBAFjB,WAAW,EAAE,WAAW,EACxB,uBAAuB,EAAE,uBAAuB,EAChD,iBAAiB,EAAE,iBAAiB;IASjD,MAAM,CAAS,GAAG,EAAE,mBAAmB;IAgBvC,KAAK;IAUL,IAAI,CAAS,GAAG,EAAE,uBAAuB;IAgBzC,MAAM,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe;IAgBvC,MAAM,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe;CAU9C"}
+{"version":3,"file":"tenant.invitation.controller.d.ts","sourceRoot":"","sources":["../../../src/auth/controllers/tenant.invitation.controller.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAK7E,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAGhF,qBAIa,0BAA0B;IAEnC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAHZ,WAAW,EAAE,WAAW,EACxB,uBAAuB,EAAE,uBAAuB,EAChD,iBAAiB,EAAE,iBAAiB,EACpC,YAAY,EAAE,YAAY;IASvC,MAAM,CAAS,GAAG,EAAE,mBAAmB;IAsBvC,KAAK;IAUL,IAAI,CAAS,GAAG,EAAE,uBAAuB;IAgBzC,MAAM,CAA6B,EAAE,EAAE,MAAM;IAsB7C,MAAM,CAA6B,EAAE,EAAE,MAAM;YAYrC,QAAQ;CAevB"}

package/dist/auth/controllers/tenant.invitation.controller.js

@@ -15,23 +15,27 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.TenantInvitationController = void 0;
 const common_1 = require("@nestjs/common");
 const swagger_1 = require("@nestjs/swagger");
-const common_params_dto_1 = require("../../common/dtos/common.params.dto");
+const strict_validation_pipe_1 = require("../../common/pipes/strict.validation.pipe");
+const cache_service_1 = require("../../common/services/cache.service");
 const list_filter_service_1 = require("../../common/services/list.filter.service");
 const invite_tenant_user_dto_1 = require("../dtos/invite.tenant.user.dto");
 const tenant_invitation_list_dto_1 = require("../dtos/tenant.invitation.list.dto");
+const tenant_invitation_default_enum_1 = require("../enums/tenant.invitation.default.enum");
 const tenant_role_enum_1 = require("../enums/tenant.role.enum");
 const tenant_invitation_data_processor_1 = require("../processors/tenant.invitation.data.processor");
 const tenant_invitation_list_processor_1 = require("../processors/tenant.invitation.list.processor");
 const auth_service_1 = require("../services/auth.service");
 const tenant_invitation_service_1 = require("../services/tenant.invitation.service");
 let TenantInvitationController = class TenantInvitationController {
-    constructor(authService, tenantInvitationService, listFilterService) {
+    constructor(authService, tenantInvitationService, listFilterService, cacheService) {
         this.authService = authService;
         this.tenantInvitationService = tenantInvitationService;
         this.listFilterService = listFilterService;
+        this.cacheService = cacheService;
     }
     async invite(dto) {
         const { user } = await this.authService.validateRole(tenant_role_enum_1.TenantRole.GLOBAL_ADMIN);
+        await this.throttle(`tenant-invitations:daily:${user.organization_id}`, 'TENANT_INVITATION_DAILY_LIMIT', tenant_invitation_default_enum_1.TenantInvitationDefault.DAILY_LIMIT, tenant_invitation_default_enum_1.TenantInvitationDefault.DAILY_WINDOW_SECONDS);
         return new tenant_invitation_data_processor_1.TenantInvitationDataProcessor(user, this.tenantInvitationService).process(dto);
     }
     async roles() {
@@ -40,26 +44,30 @@ let TenantInvitationController = class TenantInvitationController {
     }
     async list(dto) {
         const { user } = await this.authService.validateRole(tenant_role_enum_1.TenantRole.GLOBAL_ADMIN);
-        return new tenant_invitation_list_processor_1.TenantInvitationListProcessor(this.listFilterService).process({
-            ...dto,
-            tenant_id: user.organization_id,
-        });
+        return new tenant_invitation_list_processor_1.TenantInvitationListProcessor(this.listFilterService).process(dto, user.organization_id);
     }
-    async resend({ id }) {
+    async resend(id) {
         const { user } = await this.authService.validateRole(tenant_role_enum_1.TenantRole.GLOBAL_ADMIN);
+        await this.throttle(`tenant-invitations:resend:${id}`, 'TENANT_INVITATION_RESEND_LIMIT', tenant_invitation_default_enum_1.TenantInvitationDefault.RESEND_LIMIT, tenant_invitation_default_enum_1.TenantInvitationDefault.RESEND_WINDOW_SECONDS);
         return this.tenantInvitationService.resend(id, user.organization_id, user.id);
     }
-    async revoke({ id }) {
+    async revoke(id) {
         const { user } = await this.authService.validateRole(tenant_role_enum_1.TenantRole.GLOBAL_ADMIN);
         return this.tenantInvitationService.revoke(id, user.organization_id, user.id);
     }
+    async throttle(key, envName, fallback, windowSeconds) {
+        const configured = Number(process.env[envName]);
+        const limit = Number.isInteger(configured) && configured > 0 ? configured : fallback;
+        if ((await this.cacheService.increment(key, windowSeconds)) > limit)
+            throw new common_1.HttpException('Too many invitation requests; try again later.', common_1.HttpStatus.TOO_MANY_REQUESTS);
+    }
 };
 exports.TenantInvitationController = TenantInvitationController;
 __decorate([
     (0, common_1.Post)(),
     (0, swagger_1.ApiOperation)({
         summary: 'Invite an email into the session organization.',
-        description: 'The roles in `role_ids` are granted in this organization when the invitee accepts. An email with no account gets one — named `full_name`, with a random one-time password mailed to it that must be changed at first sign-in. Refused for an existing member, a system account, or an email with a pending invitation here. Requires the `global.admin` tenant role.',
+        description: 'The roles in `role_ids` are granted in this organization when the invitee accepts. An email with no account gets one — named `full_name`, with an expiring one-time password mailed to it that must be changed at first sign-in. Only an account with a verified email can see or accept an invitation. Refused for an existing member or an email with a pending invitation here; rate-limited per organization per day. Requires the `global.admin` tenant role.',
     }),
     __param(0, (0, common_1.Body)()),
     __metadata("design:type", Function),
@@ -91,11 +99,11 @@ __decorate([
     (0, common_1.Post)(':id/resend'),
     (0, swagger_1.ApiOperation)({
         summary: 'Give a pending invitation a fresh expiry.',
-        description: 'Also revives one that expired unanswered. When the invitation created the account and nobody has signed in to it yet, a fresh one-time password is mailed. Requires the `global.admin` tenant role.',
+        description: 'Also revives one that expired unanswered. When this invitation created the account and nobody has signed in to it yet, a fresh one-time password is mailed. Rate-limited per invitation. Requires the `global.admin` tenant role.',
     }),
-    __param(0, (0, common_1.Param)()),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [common_params_dto_1.CommonParamsDto]),
+    __metadata("design:paramtypes", [String]),
     __metadata("design:returntype", Promise)
 ], TenantInvitationController.prototype, "resend", null);
 __decorate([
@@ -104,17 +112,19 @@ __decorate([
         summary: 'Revoke a pending invitation.',
         description: 'Requires the `global.admin` tenant role.',
     }),
-    __param(0, (0, common_1.Param)()),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [common_params_dto_1.CommonParamsDto]),
+    __metadata("design:paramtypes", [String]),
     __metadata("design:returntype", Promise)
 ], TenantInvitationController.prototype, "revoke", null);
 exports.TenantInvitationController = TenantInvitationController = __decorate([
     (0, swagger_1.ApiTags)('Organization Invitations'),
     (0, swagger_1.ApiBearerAuth)(),
+    (0, common_1.UsePipes)(strict_validation_pipe_1.StrictValidationPipe),
     (0, common_1.Controller)('api/organization/invitations'),
     __metadata("design:paramtypes", [auth_service_1.AuthService,
         tenant_invitation_service_1.TenantInvitationService,
-        list_filter_service_1.ListFilterService])
+        list_filter_service_1.ListFilterService,
+        cache_service_1.CacheService])
 ], TenantInvitationController);
 //# sourceMappingURL=tenant.invitation.controller.js.map

package/dist/auth/controllers/tenant.invitation.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"tenant.invitation.controller.js","sourceRoot":"","sources":["../../../src/auth/controllers/tenant.invitation.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4E;AAC5E,6CAAuE;AACvE,2EAAsE;AACtE,mFAA8E;AAC9E,2EAAqE;AACrE,mFAA6E;AAC7E,gEAAuD;AACvD,qGAA+F;AAC/F,qGAA+F;AAC/F,2DAAuD;AACvD,qFAAgF;AAMzE,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IACrC,YACmB,WAAwB,EACxB,uBAAgD,EAChD,iBAAoC;QAFpC,gBAAW,GAAX,WAAW,CAAa;QACxB,4BAAuB,GAAvB,uBAAuB,CAAyB;QAChD,sBAAiB,GAAjB,iBAAiB,CAAmB;IACpD,CAAC;IAQE,AAAN,KAAK,CAAC,MAAM,CAAS,GAAwB;QAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAClD,6BAAU,CAAC,YAAY,CACxB,CAAC;QACF,OAAO,IAAI,gEAA6B,CACtC,IAAI,EACJ,IAAI,CAAC,uBAAuB,CAC7B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAQK,AAAN,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,6BAAU,CAAC,YAAY,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,uBAAuB,CAAC,cAAc,EAAE,CAAC;IACvD,CAAC;IAOK,AAAN,KAAK,CAAC,IAAI,CAAS,GAA4B;QAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAClD,6BAAU,CAAC,YAAY,CACxB,CAAC;QACF,OAAO,IAAI,gEAA6B,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC;YACvE,GAAG,GAAG;YACN,SAAS,EAAE,IAAI,CAAC,eAAe;SAChC,CAAC,CAAC;IACL,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAAU,EAAE,EAAE,EAAmB;QAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAClD,6BAAU,CAAC,YAAY,CACxB,CAAC;QACF,OAAO,IAAI,CAAC,uBAAuB,CAAC,MAAM,CACxC,EAAE,EACF,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,EAAE,CACR,CAAC;IACJ,CAAC;IAOK,AAAN,KAAK,CAAC,MAAM,CAAU,EAAE,EAAE,EAAmB;QAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAClD,6BAAU,CAAC,YAAY,CACxB,CAAC;QACF,OAAO,IAAI,CAAC,uBAAuB,CAAC,MAAM,CACxC,EAAE,EACF,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,EAAE,CACR,CAAC;IACJ,CAAC;CACF,CAAA;AAjFY,gEAA0B;AAa/B;IANL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gDAAgD;QACzD,WAAW,EACT,sWAAsW;KACzW,CAAC;IACY,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,4CAAmB;;wDAQ5C;AAQK;IANL,IAAA,YAAG,EAAC,OAAO,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gCAAgC;QACzC,WAAW,EACT,iGAAiG;KACpG,CAAC;;;;uDAID;AAOK;IALL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8CAA8C;QACvD,WAAW,EAAE,0CAA0C;KACxD,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,oDAAuB;;sDAQ9C;AAQK;IANL,IAAA,aAAI,EAAC,YAAY,CAAC;IAClB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,2CAA2C;QACpD,WAAW,EACT,qMAAqM;KACxM,CAAC;IACY,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;wDAS5C;AAOK;IALL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8BAA8B;QACvC,WAAW,EAAE,0CAA0C;KACxD,CAAC;IACY,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;wDAS5C;qCAhFU,0BAA0B;IAHtC,IAAA,iBAAO,EAAC,0BAA0B,CAAC;IACnC,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,8BAA8B,CAAC;qCAGT,0BAAW;QACC,mDAAuB;QAC7B,uCAAiB;GAJ5C,0BAA0B,CAiFtC"}
+{"version":3,"file":"tenant.invitation.controller.js","sourceRoot":"","sources":["../../../src/auth/controllers/tenant.invitation.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAWwB;AACxB,6CAAuE;AACvE,sFAAiF;AACjF,uEAAmE;AACnE,mFAA8E;AAC9E,2EAAqE;AACrE,mFAA6E;AAC7E,4FAAkF;AAClF,gEAAuD;AACvD,qGAA+F;AAC/F,qGAA+F;AAC/F,2DAAuD;AACvD,qFAAgF;AAOzE,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IACrC,YACmB,WAAwB,EACxB,uBAAgD,EAChD,iBAAoC,EACpC,YAA0B;QAH1B,gBAAW,GAAX,WAAW,CAAa;QACxB,4BAAuB,GAAvB,uBAAuB,CAAyB;QAChD,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,iBAAY,GAAZ,YAAY,CAAc;IAC1C,CAAC;IAQE,AAAN,KAAK,CAAC,MAAM,CAAS,GAAwB;QAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAClD,6BAAU,CAAC,YAAY,CACxB,CAAC;QACF,MAAM,IAAI,CAAC,QAAQ,CACjB,4BAA4B,IAAI,CAAC,eAAe,EAAE,EAClD,+BAA+B,EAC/B,wDAAuB,CAAC,WAAW,EACnC,wDAAuB,CAAC,oBAAoB,CAC7C,CAAC;QACF,OAAO,IAAI,gEAA6B,CACtC,IAAI,EACJ,IAAI,CAAC,uBAAuB,CAC7B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAQK,AAAN,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,6BAAU,CAAC,YAAY,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,uBAAuB,CAAC,cAAc,EAAE,CAAC;IACvD,CAAC;IAOK,AAAN,KAAK,CAAC,IAAI,CAAS,GAA4B;QAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAClD,6BAAU,CAAC,YAAY,CACxB,CAAC;QACF,OAAO,IAAI,gEAA6B,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CACtE,GAAG,EACH,IAAI,CAAC,eAAe,CACrB,CAAC;IACJ,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAA6B,EAAU;QACjD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAClD,6BAAU,CAAC,YAAY,CACxB,CAAC;QACF,MAAM,IAAI,CAAC,QAAQ,CACjB,6BAA6B,EAAE,EAAE,EACjC,gCAAgC,EAChC,wDAAuB,CAAC,YAAY,EACpC,wDAAuB,CAAC,qBAAqB,CAC9C,CAAC;QACF,OAAO,IAAI,CAAC,uBAAuB,CAAC,MAAM,CACxC,EAAE,EACF,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,EAAE,CACR,CAAC;IACJ,CAAC;IAOK,AAAN,KAAK,CAAC,MAAM,CAA6B,EAAU;QACjD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAClD,6BAAU,CAAC,YAAY,CACxB,CAAC;QACF,OAAO,IAAI,CAAC,uBAAuB,CAAC,MAAM,CACxC,EAAE,EACF,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,EAAE,CACR,CAAC;IACJ,CAAC;IAGO,KAAK,CAAC,QAAQ,CACpB,GAAW,EACX,OAAe,EACf,QAAgB,EAChB,aAAqB;QAErB,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAChD,MAAM,KAAK,GACT,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;QACzE,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,GAAG,KAAK;YACjE,MAAM,IAAI,sBAAa,CACrB,gDAAgD,EAChD,mBAAU,CAAC,iBAAiB,CAC7B,CAAC;IACN,CAAC;CACF,CAAA;AA/GY,gEAA0B;AAc/B;IANL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gDAAgD;QACzD,WAAW,EACT,ocAAoc;KACvc,CAAC;IACY,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,4CAAmB;;wDAc5C;AAQK;IANL,IAAA,YAAG,EAAC,OAAO,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gCAAgC;QACzC,WAAW,EACT,iGAAiG;KACpG,CAAC;;;;uDAID;AAOK;IALL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8CAA8C;QACvD,WAAW,EAAE,0CAA0C;KACxD,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,oDAAuB;;sDAQ9C;AAQK;IANL,IAAA,aAAI,EAAC,YAAY,CAAC;IAClB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,2CAA2C;QACpD,WAAW,EACT,mOAAmO;KACtO,CAAC;IACY,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;wDAevC;AAOK;IALL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8BAA8B;QACvC,WAAW,EAAE,0CAA0C;KACxD,CAAC;IACY,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;wDASvC;qCA7FU,0BAA0B;IAJtC,IAAA,iBAAO,EAAC,0BAA0B,CAAC;IACnC,IAAA,uBAAa,GAAE;IACf,IAAA,iBAAQ,EAAC,6CAAoB,CAAC;IAC9B,IAAA,mBAAU,EAAC,8BAA8B,CAAC;qCAGT,0BAAW;QACC,mDAAuB;QAC7B,uCAAiB;QACtB,4BAAY;GALlC,0BAA0B,CA+GtC"}

package/dist/auth/controllers/tenant.member.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenant.member.controller.d.ts","sourceRoot":"","sources":["../../../src/auth/controllers/tenant.member.controller.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAE9E,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAGrE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAGhF,qBAGa,sBAAsB;IAE/B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBAFjB,WAAW,EAAE,WAAW,EACxB,uBAAuB,EAAE,uBAAuB,EAChD,iBAAiB,EAAE,iBAAiB;IASjD,IAAI,CAAS,GAAG,EAAE,mBAAmB;IAgBrC,QAAQ,CACoB,MAAM,EAAE,MAAM,EACtC,GAAG,EAAE,cAAc;IAoBvB,UAAU,CAAiC,MAAM,EAAE,MAAM;IAoBzD,UAAU,CAAiC,MAAM,EAAE,MAAM;IAkBzD,MAAM,CAAiC,MAAM,EAAE,MAAM;IAa3D,OAAO,CAAC,UAAU;CAMnB"}
+{"version":3,"file":"tenant.member.controller.d.ts","sourceRoot":"","sources":["../../../src/auth/controllers/tenant.member.controller.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAE9E,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAGrE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAGhF,qBAIa,sBAAsB;IAE/B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBAFjB,WAAW,EAAE,WAAW,EACxB,uBAAuB,EAAE,uBAAuB,EAChD,iBAAiB,EAAE,iBAAiB;IASjD,IAAI,CAAS,GAAG,EAAE,mBAAmB;IAgBrC,QAAQ,CACoB,MAAM,EAAE,MAAM,EACtC,GAAG,EAAE,cAAc;IAoBvB,UAAU,CAAiC,MAAM,EAAE,MAAM;IAoBzD,UAAU,CAAiC,MAAM,EAAE,MAAM;IAkBzD,MAAM,CAAiC,MAAM,EAAE,MAAM;IAa3D,OAAO,CAAC,UAAU;CAMnB"}

package/dist/auth/controllers/tenant.member.controller.js

@@ -15,6 +15,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.TenantMemberController = void 0;
 const common_1 = require("@nestjs/common");
 const swagger_1 = require("@nestjs/swagger");
+const strict_validation_pipe_1 = require("../../common/pipes/strict.validation.pipe");
 const list_filter_service_1 = require("../../common/services/list.filter.service");
 const operation_exception_1 = require("../../global/exceptions/operation.exception");
 const member_roles_dto_1 = require("../dtos/member.roles.dto");
@@ -31,10 +32,7 @@ let TenantMemberController = class TenantMemberController {
     }
     async list(dto) {
         const { user } = await this.authService.validateRole(tenant_role_enum_1.TenantRole.GLOBAL_ADMIN);
-        return new tenant_member_list_processor_1.TenantMemberListProcessor(this.listFilterService).process({
-            ...dto,
-            tenant_id: user.organization_id,
-        });
+        return new tenant_member_list_processor_1.TenantMemberListProcessor(this.listFilterService).process(dto, user.organization_id);
     }
     async setRoles(userId, dto) {
         const { user } = await this.authService.validateRole(tenant_role_enum_1.TenantRole.GLOBAL_ADMIN);
@@ -121,6 +119,7 @@ __decorate([
 exports.TenantMemberController = TenantMemberController = __decorate([
     (0, swagger_1.ApiTags)('Organization Members'),
     (0, swagger_1.ApiBearerAuth)(),
+    (0, common_1.UsePipes)(strict_validation_pipe_1.StrictValidationPipe),
     (0, common_1.Controller)('api/organization/members'),
     __metadata("design:paramtypes", [auth_service_1.AuthService,
         tenant_membership_service_1.TenantMembershipService,

package/dist/auth/controllers/tenant.member.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"tenant.member.controller.js","sourceRoot":"","sources":["../../../src/auth/controllers/tenant.member.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CASwB;AACxB,6CAAuE;AACvE,mFAA8E;AAC9E,qFAAiF;AACjF,+DAA0D;AAC1D,2EAAqE;AACrE,gEAAuD;AACvD,6FAAuF;AACvF,2DAAuD;AACvD,qFAAgF;AAMzE,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IACjC,YACmB,WAAwB,EACxB,uBAAgD,EAChD,iBAAoC;QAFpC,gBAAW,GAAX,WAAW,CAAa;QACxB,4BAAuB,GAAvB,uBAAuB,CAAyB;QAChD,sBAAiB,GAAjB,iBAAiB,CAAmB;IACpD,CAAC;IAQE,AAAN,KAAK,CAAC,IAAI,CAAS,GAAwB;QACzC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAClD,6BAAU,CAAC,YAAY,CACxB,CAAC;QACF,OAAO,IAAI,wDAAyB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC;YACnE,GAAG,GAAG;YACN,SAAS,EAAE,IAAI,CAAC,eAAe;SAChC,CAAC,CAAC;IACL,CAAC;IAQK,AAAN,KAAK,CAAC,QAAQ,CACoB,MAAc,EACtC,GAAmB;QAE3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAClD,6BAAU,CAAC,YAAY,CACxB,CAAC;QACF,OAAO,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAChD,MAAM,EACN,IAAI,CAAC,eAAe,EACpB,GAAG,CAAC,QAAQ,EACZ,IAAI,CAAC,EAAE,CACR,CAAC;IACJ,CAAC;IASK,AAAN,KAAK,CAAC,UAAU,CAAiC,MAAc;QAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAClD,6BAAU,CAAC,YAAY,CACxB,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,uBAAuB,CAAC,eAAe,CACjD,MAAM,EACN,IAAI,CAAC,eAAe,EACpB,KAAK,EACL,IAAI,CAAC,EAAE,CACR,CAAC;IACJ,CAAC;IASK,AAAN,KAAK,CAAC,UAAU,CAAiC,MAAc;QAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAClD,6BAAU,CAAC,YAAY,CACxB,CAAC;QACF,OAAO,IAAI,CAAC,uBAAuB,CAAC,eAAe,CACjD,MAAM,EACN,IAAI,CAAC,eAAe,EACpB,IAAI,EACJ,IAAI,CAAC,EAAE,CACR,CAAC;IACJ,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAAiC,MAAc;QACzD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAClD,6BAAU,CAAC,YAAY,CACxB,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,uBAAuB,CAAC,YAAY,CAC9C,MAAM,EACN,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,EAAE,CACR,CAAC;IACJ,CAAC;IAGO,UAAU,CAAC,MAAc,EAAE,QAAgB;QACjD,IAAI,MAAM,KAAK,QAAQ;YACrB,MAAM,IAAI,wCAAkB,CAC1B,yDAAyD,CAC1D,CAAC;IACN,CAAC;CACF,CAAA;AA5GY,wDAAsB;AAa3B;IANL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,0CAA0C;QACnD,WAAW,EACT,gGAAgG;KACnG,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,4CAAmB;;kDAQ1C;AAQK;IANL,IAAA,aAAI,EAAC,eAAe,CAAC;IACrB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,uDAAuD;QAChE,WAAW,EACT,4KAA4K;KAC/K,CAAC;IAEC,WAAA,IAAA,cAAK,EAAC,QAAQ,EAAE,sBAAa,CAAC,CAAA;IAC9B,WAAA,IAAA,aAAI,GAAE,CAAA;;6CAAM,iCAAc;;sDAW5B;AASK;IAPL,IAAA,aAAI,EAAC,oBAAoB,CAAC;IAC1B,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,+DAA+D;QACxE,WAAW,EACT,0RAA0R;KAC7R,CAAC;IACgB,WAAA,IAAA,cAAK,EAAC,QAAQ,EAAE,sBAAa,CAAC,CAAA;;;;wDAW/C;AASK;IAPL,IAAA,aAAI,EAAC,oBAAoB,CAAC;IAC1B,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,+DAA+D;QACxE,WAAW,EACT,8EAA8E;KACjF,CAAC;IACgB,WAAA,IAAA,cAAK,EAAC,QAAQ,EAAE,sBAAa,CAAC,CAAA;;;;wDAU/C;AAQK;IANL,IAAA,eAAM,EAAC,SAAS,CAAC;IACjB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gDAAgD;QACzD,WAAW,EACT,iPAAiP;KACpP,CAAC;IACY,WAAA,IAAA,cAAK,EAAC,QAAQ,EAAE,sBAAa,CAAC,CAAA;;;;oDAU3C;iCAnGU,sBAAsB;IAHlC,IAAA,iBAAO,EAAC,sBAAsB,CAAC;IAC/B,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,0BAA0B,CAAC;qCAGL,0BAAW;QACC,mDAAuB;QAC7B,uCAAiB;GAJ5C,sBAAsB,CA4GlC"}
+{"version":3,"file":"tenant.member.controller.js","sourceRoot":"","sources":["../../../src/auth/controllers/tenant.member.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAUwB;AACxB,6CAAuE;AACvE,sFAAiF;AACjF,mFAA8E;AAC9E,qFAAiF;AACjF,+DAA0D;AAC1D,2EAAqE;AACrE,gEAAuD;AACvD,6FAAuF;AACvF,2DAAuD;AACvD,qFAAgF;AAOzE,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IACjC,YACmB,WAAwB,EACxB,uBAAgD,EAChD,iBAAoC;QAFpC,gBAAW,GAAX,WAAW,CAAa;QACxB,4BAAuB,GAAvB,uBAAuB,CAAyB;QAChD,sBAAiB,GAAjB,iBAAiB,CAAmB;IACpD,CAAC;IAQE,AAAN,KAAK,CAAC,IAAI,CAAS,GAAwB;QACzC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAClD,6BAAU,CAAC,YAAY,CACxB,CAAC;QACF,OAAO,IAAI,wDAAyB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAClE,GAAG,EACH,IAAI,CAAC,eAAe,CACrB,CAAC;IACJ,CAAC;IAQK,AAAN,KAAK,CAAC,QAAQ,CACoB,MAAc,EACtC,GAAmB;QAE3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAClD,6BAAU,CAAC,YAAY,CACxB,CAAC;QACF,OAAO,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAChD,MAAM,EACN,IAAI,CAAC,eAAe,EACpB,GAAG,CAAC,QAAQ,EACZ,IAAI,CAAC,EAAE,CACR,CAAC;IACJ,CAAC;IASK,AAAN,KAAK,CAAC,UAAU,CAAiC,MAAc;QAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAClD,6BAAU,CAAC,YAAY,CACxB,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,uBAAuB,CAAC,eAAe,CACjD,MAAM,EACN,IAAI,CAAC,eAAe,EACpB,KAAK,EACL,IAAI,CAAC,EAAE,CACR,CAAC;IACJ,CAAC;IASK,AAAN,KAAK,CAAC,UAAU,CAAiC,MAAc;QAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAClD,6BAAU,CAAC,YAAY,CACxB,CAAC;QACF,OAAO,IAAI,CAAC,uBAAuB,CAAC,eAAe,CACjD,MAAM,EACN,IAAI,CAAC,eAAe,EACpB,IAAI,EACJ,IAAI,CAAC,EAAE,CACR,CAAC;IACJ,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAAiC,MAAc;QACzD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAClD,6BAAU,CAAC,YAAY,CACxB,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,uBAAuB,CAAC,YAAY,CAC9C,MAAM,EACN,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,EAAE,CACR,CAAC;IACJ,CAAC;IAGO,UAAU,CAAC,MAAc,EAAE,QAAgB;QACjD,IAAI,MAAM,KAAK,QAAQ;YACrB,MAAM,IAAI,wCAAkB,CAC1B,yDAAyD,CAC1D,CAAC;IACN,CAAC;CACF,CAAA;AA5GY,wDAAsB;AAa3B;IANL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,0CAA0C;QACnD,WAAW,EACT,gGAAgG;KACnG,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,4CAAmB;;kDAQ1C;AAQK;IANL,IAAA,aAAI,EAAC,eAAe,CAAC;IACrB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,uDAAuD;QAChE,WAAW,EACT,4KAA4K;KAC/K,CAAC;IAEC,WAAA,IAAA,cAAK,EAAC,QAAQ,EAAE,sBAAa,CAAC,CAAA;IAC9B,WAAA,IAAA,aAAI,GAAE,CAAA;;6CAAM,iCAAc;;sDAW5B;AASK;IAPL,IAAA,aAAI,EAAC,oBAAoB,CAAC;IAC1B,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,+DAA+D;QACxE,WAAW,EACT,0RAA0R;KAC7R,CAAC;IACgB,WAAA,IAAA,cAAK,EAAC,QAAQ,EAAE,sBAAa,CAAC,CAAA;;;;wDAW/C;AASK;IAPL,IAAA,aAAI,EAAC,oBAAoB,CAAC;IAC1B,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,+DAA+D;QACxE,WAAW,EACT,8EAA8E;KACjF,CAAC;IACgB,WAAA,IAAA,cAAK,EAAC,QAAQ,EAAE,sBAAa,CAAC,CAAA;;;;wDAU/C;AAQK;IANL,IAAA,eAAM,EAAC,SAAS,CAAC;IACjB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gDAAgD;QACzD,WAAW,EACT,iPAAiP;KACpP,CAAC;IACY,WAAA,IAAA,cAAK,EAAC,QAAQ,EAAE,sBAAa,CAAC,CAAA;;;;oDAU3C;iCAnGU,sBAAsB;IAJlC,IAAA,iBAAO,EAAC,sBAAsB,CAAC;IAC/B,IAAA,uBAAa,GAAE;IACf,IAAA,iBAAQ,EAAC,6CAAoB,CAAC;IAC9B,IAAA,mBAAU,EAAC,0BAA0B,CAAC;qCAGL,0BAAW;QACC,mDAAuB;QAC7B,uCAAiB;GAJ5C,sBAAsB,CA4GlC"}

package/dist/auth/controllers/user.invitation.controller.d.ts

@@ -1,4 +1,3 @@
-import { CommonParamsDto } from '../../common/dtos/common.params.dto';
 import { AuthService } from '../services/auth.service';
 import { TenantInvitationService } from '../services/tenant.invitation.service';
 export declare class UserInvitationController {
@@ -6,7 +5,7 @@ export declare class UserInvitationController {
     private readonly tenantInvitationService;
     constructor(authService: AuthService, tenantInvitationService: TenantInvitationService);
     pending(): Promise<import("../..").PendingInvitation[]>;
-    accept({ id }: CommonParamsDto): Promise<import("../..").OrganizationSummary>;
-    decline({ id }: CommonParamsDto): Promise<import("../..").TenantInvitationEntity>;
+    accept(id: string): Promise<import("../..").OrganizationSummary>;
+    decline(id: string): Promise<import("../..").TenantInvitationEntity>;
 }
 //# sourceMappingURL=user.invitation.controller.d.ts.map

package/dist/auth/controllers/user.invitation.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.invitation.controller.d.ts","sourceRoot":"","sources":["../../../src/auth/controllers/user.invitation.controller.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAGhF,qBAGa,wBAAwB;IAEjC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;gBADvB,WAAW,EAAE,WAAW,EACxB,uBAAuB,EAAE,uBAAuB;IAS7D,OAAO;IAYP,MAAM,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe;IAOvC,OAAO,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe;CAG/C"}
+{"version":3,"file":"user.invitation.controller.d.ts","sourceRoot":"","sources":["../../../src/auth/controllers/user.invitation.controller.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAGhF,qBAIa,wBAAwB;IAEjC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;gBADvB,WAAW,EAAE,WAAW,EACxB,uBAAuB,EAAE,uBAAuB;IAS7D,OAAO;IAYP,MAAM,CAA6B,EAAE,EAAE,MAAM;IAO7C,OAAO,CAA6B,EAAE,EAAE,MAAM;CAGrD"}

package/dist/auth/controllers/user.invitation.controller.js

@@ -15,7 +15,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.UserInvitationController = void 0;
 const common_1 = require("@nestjs/common");
 const swagger_1 = require("@nestjs/swagger");
-const common_params_dto_1 = require("../../common/dtos/common.params.dto");
+const strict_validation_pipe_1 = require("../../common/pipes/strict.validation.pipe");
 const auth_service_1 = require("../services/auth.service");
 const tenant_invitation_service_1 = require("../services/tenant.invitation.service");
 let UserInvitationController = class UserInvitationController {
@@ -27,10 +27,10 @@ let UserInvitationController = class UserInvitationController {
         const { user } = await this.authService.validateRole();
         return this.tenantInvitationService.pendingFor(user);
     }
-    async accept({ id }) {
+    async accept(id) {
         return this.tenantInvitationService.accept(id);
     }
-    async decline({ id }) {
+    async decline(id) {
         return this.tenantInvitationService.decline(id);
     }
 };
@@ -39,7 +39,7 @@ __decorate([
     (0, common_1.Get)(),
     (0, swagger_1.ApiOperation)({
         summary: 'Pending invitations addressed to the caller.',
-        description: 'Also returned by `GET /auth/me`. Works on a tenantless session, so a user with no organization yet can see and accept one.',
+        description: "Also returned by `GET /auth/me`. Empty until the caller's email is verified. Works on a tenantless session, so a user with no organization yet can see and accept one.",
     }),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", []),
@@ -50,25 +50,26 @@ __decorate([
     (0, common_1.HttpCode)(common_1.HttpStatus.OK),
     (0, swagger_1.ApiOperation)({
         summary: 'Accept an invitation and join its organization.',
-        description: 'Adds the membership and the invited roles, and returns the organization. The session stays where it is — call `POST /auth/organizations/switch` to work in the new one.',
+        description: 'Requires a verified email. Adds the membership and the invited roles, and returns the organization. The session stays where it is — call `POST /auth/organizations/switch` to work in the new one.',
     }),
-    __param(0, (0, common_1.Param)()),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [common_params_dto_1.CommonParamsDto]),
+    __metadata("design:paramtypes", [String]),
     __metadata("design:returntype", Promise)
 ], UserInvitationController.prototype, "accept", null);
 __decorate([
     (0, common_1.Post)(':id/decline'),
     (0, common_1.HttpCode)(common_1.HttpStatus.OK),
     (0, swagger_1.ApiOperation)({ summary: 'Decline an invitation.' }),
-    __param(0, (0, common_1.Param)()),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [common_params_dto_1.CommonParamsDto]),
+    __metadata("design:paramtypes", [String]),
     __metadata("design:returntype", Promise)
 ], UserInvitationController.prototype, "decline", null);
 exports.UserInvitationController = UserInvitationController = __decorate([
     (0, swagger_1.ApiTags)('Auth'),
     (0, swagger_1.ApiBearerAuth)(),
+    (0, common_1.UsePipes)(strict_validation_pipe_1.StrictValidationPipe),
     (0, common_1.Controller)('api/auth/invitations'),
     __metadata("design:paramtypes", [auth_service_1.AuthService,
         tenant_invitation_service_1.TenantInvitationService])

package/dist/auth/controllers/user.invitation.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"user.invitation.controller.js","sourceRoot":"","sources":["../../../src/auth/controllers/user.invitation.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAOwB;AACxB,6CAAuE;AACvE,2EAAsE;AACtE,2DAAuD;AACvD,qFAAgF;AAMzE,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACnC,YACmB,WAAwB,EACxB,uBAAgD;QADhD,gBAAW,GAAX,WAAW,CAAa;QACxB,4BAAuB,GAAvB,uBAAuB,CAAyB;IAChE,CAAC;IAQE,AAAN,KAAK,CAAC,OAAO;QACX,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IASK,AAAN,KAAK,CAAC,MAAM,CAAU,EAAE,EAAE,EAAmB;QAC3C,OAAO,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAKK,AAAN,KAAK,CAAC,OAAO,CAAU,EAAE,EAAE,EAAmB;QAC5C,OAAO,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC;CACF,CAAA;AAlCY,4DAAwB;AAY7B;IANL,IAAA,YAAG,GAAE;IACL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8CAA8C;QACvD,WAAW,EACT,4HAA4H;KAC/H,CAAC;;;;uDAID;AASK;IAPL,IAAA,aAAI,EAAC,YAAY,CAAC;IAClB,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,iDAAiD;QAC1D,WAAW,EACT,yKAAyK;KAC5K,CAAC;IACY,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;sDAE5C;AAKK;IAHL,IAAA,aAAI,EAAC,aAAa,CAAC;IACnB,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACrC,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;uDAE7C;mCAjCU,wBAAwB;IAHpC,IAAA,iBAAO,EAAC,MAAM,CAAC;IACf,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,sBAAsB,CAAC;qCAGD,0BAAW;QACC,mDAAuB;GAHxD,wBAAwB,CAkCpC"}
+{"version":3,"file":"user.invitation.controller.js","sourceRoot":"","sources":["../../../src/auth/controllers/user.invitation.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CASwB;AACxB,6CAAuE;AACvE,sFAAiF;AACjF,2DAAuD;AACvD,qFAAgF;AAOzE,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACnC,YACmB,WAAwB,EACxB,uBAAgD;QADhD,gBAAW,GAAX,WAAW,CAAa;QACxB,4BAAuB,GAAvB,uBAAuB,CAAyB;IAChE,CAAC;IAQE,AAAN,KAAK,CAAC,OAAO;QACX,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IASK,AAAN,KAAK,CAAC,MAAM,CAA6B,EAAU;QACjD,OAAO,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAKK,AAAN,KAAK,CAAC,OAAO,CAA6B,EAAU;QAClD,OAAO,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC;CACF,CAAA;AAlCY,4DAAwB;AAY7B;IANL,IAAA,YAAG,GAAE;IACL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8CAA8C;QACvD,WAAW,EACT,wKAAwK;KAC3K,CAAC;;;;uDAID;AASK;IAPL,IAAA,aAAI,EAAC,YAAY,CAAC;IAClB,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,iDAAiD;QAC1D,WAAW,EACT,oMAAoM;KACvM,CAAC;IACY,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;sDAEvC;AAKK;IAHL,IAAA,aAAI,EAAC,aAAa,CAAC;IACnB,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACrC,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;uDAExC;mCAjCU,wBAAwB;IAJpC,IAAA,iBAAO,EAAC,MAAM,CAAC;IACf,IAAA,uBAAa,GAAE;IACf,IAAA,iBAAQ,EAAC,6CAAoB,CAAC;IAC9B,IAAA,mBAAU,EAAC,sBAAsB,CAAC;qCAGD,0BAAW;QACC,mDAAuB;GAHxD,wBAAwB,CAkCpC"}

package/dist/auth/controllers/user.organization.controller.d.ts

@@ -1,5 +1,4 @@
 import type { Request } from 'express';
-import { CommonParamsDto } from '../../common/dtos/common.params.dto';
 import { RefreshTokenDto } from '../dtos/refresh.token.dto';
 import { SwitchOrganizationDto } from '../dtos/switch.organization.dto';
 import { AuthService } from '../services/auth.service';
@@ -11,7 +10,7 @@ export declare class UserOrganizationController {
     constructor(authService: AuthService, tenantMembershipService: TenantMembershipService);
     organizations(): Promise<OrganizationSummary[]>;
     switch(dto: SwitchOrganizationDto, request: Request): Promise<OrganizationSession>;
-    leave({ id }: CommonParamsDto, dto: RefreshTokenDto, request: Request): Promise<AuthTokenPair>;
+    leave(id: string, dto: RefreshTokenDto, request: Request): Promise<AuthTokenPair>;
     private contextOf;
 }
 //# sourceMappingURL=user.organization.controller.d.ts.map

package/dist/auth/controllers/user.organization.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.organization.controller.d.ts","sourceRoot":"","sources":["../../../src/auth/controllers/user.organization.controller.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,mBAAmB,EAEpB,MAAM,qBAAqB,CAAC;AAG7B,qBAGa,0BAA0B;IAEnC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;gBADvB,WAAW,EAAE,WAAW,EACxB,uBAAuB,EAAE,uBAAuB;IAK7D,aAAa,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAY/C,MAAM,CACF,GAAG,EAAE,qBAAqB,EAC3B,OAAO,EAAE,OAAO,GACtB,OAAO,CAAC,mBAAmB,CAAC;IAczB,KAAK,CACA,EAAE,EAAE,EAAE,EAAE,eAAe,EACxB,GAAG,EAAE,eAAe,EACrB,OAAO,EAAE,OAAO,GACtB,OAAO,CAAC,aAAa,CAAC;IAIzB,OAAO,CAAC,SAAS;CAMlB"}
+{"version":3,"file":"user.organization.controller.d.ts","sourceRoot":"","sources":["../../../src/auth/controllers/user.organization.controller.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,mBAAmB,EAEpB,MAAM,qBAAqB,CAAC;AAG7B,qBAIa,0BAA0B;IAEnC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;gBADvB,WAAW,EAAE,WAAW,EACxB,uBAAuB,EAAE,uBAAuB;IAK7D,aAAa,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAY/C,MAAM,CACF,GAAG,EAAE,qBAAqB,EAC3B,OAAO,EAAE,OAAO,GACtB,OAAO,CAAC,mBAAmB,CAAC;IAczB,KAAK,CACmB,EAAE,EAAE,MAAM,EAC9B,GAAG,EAAE,eAAe,EACrB,OAAO,EAAE,OAAO,GACtB,OAAO,CAAC,aAAa,CAAC;IAIzB,OAAO,CAAC,SAAS;CAMlB"}

package/dist/auth/controllers/user.organization.controller.js

@@ -15,7 +15,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.UserOrganizationController = void 0;
 const common_1 = require("@nestjs/common");
 const swagger_1 = require("@nestjs/swagger");
-const common_params_dto_1 = require("../../common/dtos/common.params.dto");
+const strict_validation_pipe_1 = require("../../common/pipes/strict.validation.pipe");
 const refresh_token_dto_1 = require("../dtos/refresh.token.dto");
 const switch_organization_dto_1 = require("../dtos/switch.organization.dto");
 const auth_service_1 = require("../services/auth.service");
@@ -32,7 +32,7 @@ let UserOrganizationController = class UserOrganizationController {
     async switch(dto, request) {
         return this.tenantMembershipService.switchOrganization(dto, this.contextOf(request));
     }
-    async leave({ id }, dto, request) {
+    async leave(id, dto, request) {
         return this.tenantMembershipService.leave(id, dto, this.contextOf(request));
     }
     contextOf(request) {
@@ -55,7 +55,7 @@ __decorate([
     (0, common_1.HttpCode)(common_1.HttpStatus.OK),
     (0, swagger_1.ApiOperation)({
         summary: 'Move the session into another of the caller’s organizations.',
-        description: 'Retires the current session and the supplied refresh token, and returns a pair bound to `tenant_id`. The choice is remembered: the next login lands there. Global-access accounts use the impersonation login instead.',
+        description: "`refresh_token` must be the caller's own. Retires the current session and that refresh token, and returns a pair bound to `tenant_id`. The choice is remembered: the next login lands there. Global-access accounts use the impersonation login instead.",
     }),
     __param(0, (0, common_1.Body)()),
     __param(1, (0, common_1.Req)()),
@@ -70,17 +70,17 @@ __decorate([
         summary: 'Leave an organization.',
         description: 'Ends the membership and its roles, and revokes the caller’s credentials bound to that organization. Retires the supplied refresh token and returns a new pair in whichever organization a login would now land in (tenantless when none). Refused for the organization’s last `global.admin`.',
     }),
-    __param(0, (0, common_1.Param)()),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __param(1, (0, common_1.Body)()),
     __param(2, (0, common_1.Req)()),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [common_params_dto_1.CommonParamsDto,
-        refresh_token_dto_1.RefreshTokenDto, Object]),
+    __metadata("design:paramtypes", [String, refresh_token_dto_1.RefreshTokenDto, Object]),
     __metadata("design:returntype", Promise)
 ], UserOrganizationController.prototype, "leave", null);
 exports.UserOrganizationController = UserOrganizationController = __decorate([
     (0, swagger_1.ApiTags)('Auth'),
     (0, swagger_1.ApiBearerAuth)(),
+    (0, common_1.UsePipes)(strict_validation_pipe_1.StrictValidationPipe),
     (0, common_1.Controller)('api/auth/organizations'),
     __metadata("design:paramtypes", [auth_service_1.AuthService,
         tenant_membership_service_1.TenantMembershipService])

package/dist/auth/controllers/user.organization.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"user.organization.controller.js","sourceRoot":"","sources":["../../../src/auth/controllers/user.organization.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CASwB;AACxB,6CAAuE;AAEvE,2EAAsE;AACtE,iEAA4D;AAC5D,6EAAwE;AACxE,2DAAuD;AACvD,qFAAgF;AAYzE,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IACrC,YACmB,WAAwB,EACxB,uBAAgD;QADhD,gBAAW,GAAX,WAAW,CAAa;QACxB,4BAAuB,GAAvB,uBAAuB,CAAyB;IAChE,CAAC;IAIE,AAAN,KAAK,CAAC,aAAa;QACjB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC,uBAAuB,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IASK,AAAN,KAAK,CAAC,MAAM,CACF,GAA0B,EAC3B,OAAgB;QAEvB,OAAO,IAAI,CAAC,uBAAuB,CAAC,kBAAkB,CACpD,GAAG,EACH,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CACxB,CAAC;IACJ,CAAC;IASK,AAAN,KAAK,CAAC,KAAK,CACA,EAAE,EAAE,EAAmB,EACxB,GAAoB,EACrB,OAAgB;QAEvB,OAAO,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9E,CAAC;IAEO,SAAS,CAAC,OAAgB;QAChC,OAAO;YACL,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;SAC1C,CAAC;IACJ,CAAC;CACF,CAAA;AAnDY,gEAA0B;AAQ/B;IAFL,IAAA,YAAG,GAAE;IACL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;;;;+DAI5E;AASK;IAPL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8DAA8D;QACvE,WAAW,EACT,wNAAwN;KAC3N,CAAC;IAEC,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;qCADO,+CAAqB;;wDAOnC;AASK;IAPL,IAAA,aAAI,EAAC,WAAW,CAAC;IACjB,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wBAAwB;QACjC,WAAW,EACT,+RAA+R;KAClS,CAAC;IAEC,WAAA,IAAA,cAAK,GAAE,CAAA;IACP,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;qCAFW,mCAAe;QACnB,mCAAe;;uDAI7B;qCA3CU,0BAA0B;IAHtC,IAAA,iBAAO,EAAC,MAAM,CAAC;IACf,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,wBAAwB,CAAC;qCAGH,0BAAW;QACC,mDAAuB;GAHxD,0BAA0B,CAmDtC"}
+{"version":3,"file":"user.organization.controller.js","sourceRoot":"","sources":["../../../src/auth/controllers/user.organization.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAWwB;AACxB,6CAAuE;AAEvE,sFAAiF;AACjF,iEAA4D;AAC5D,6EAAwE;AACxE,2DAAuD;AACvD,qFAAgF;AAazE,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IACrC,YACmB,WAAwB,EACxB,uBAAgD;QADhD,gBAAW,GAAX,WAAW,CAAa;QACxB,4BAAuB,GAAvB,uBAAuB,CAAyB;IAChE,CAAC;IAIE,AAAN,KAAK,CAAC,aAAa;QACjB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC,uBAAuB,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IASK,AAAN,KAAK,CAAC,MAAM,CACF,GAA0B,EAC3B,OAAgB;QAEvB,OAAO,IAAI,CAAC,uBAAuB,CAAC,kBAAkB,CACpD,GAAG,EACH,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CACxB,CAAC;IACJ,CAAC;IASK,AAAN,KAAK,CAAC,KAAK,CACmB,EAAU,EAC9B,GAAoB,EACrB,OAAgB;QAEvB,OAAO,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9E,CAAC;IAEO,SAAS,CAAC,OAAgB;QAChC,OAAO;YACL,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;SAC1C,CAAC;IACJ,CAAC;CACF,CAAA;AAnDY,gEAA0B;AAQ/B;IAFL,IAAA,YAAG,GAAE;IACL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;;;;+DAI5E;AASK;IAPL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8DAA8D;QACvE,WAAW,EACT,0PAA0P;KAC7P,CAAC;IAEC,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;qCADO,+CAAqB;;wDAOnC;AASK;IAPL,IAAA,aAAI,EAAC,WAAW,CAAC;IACjB,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wBAAwB;QACjC,WAAW,EACT,+RAA+R;KAClS,CAAC;IAEC,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;IAC1B,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;6CADO,mCAAe;;uDAI7B;qCA3CU,0BAA0B;IAJtC,IAAA,iBAAO,EAAC,MAAM,CAAC;IACf,IAAA,uBAAa,GAAE;IACf,IAAA,iBAAQ,EAAC,6CAAoB,CAAC;IAC9B,IAAA,mBAAU,EAAC,wBAAwB,CAAC;qCAGH,0BAAW;QACC,mDAAuB;GAHxD,0BAA0B,CAmDtC"}

package/dist/auth/decorators/allow.pending.password.change.decorator.d.ts

@@ -0,0 +1,3 @@
+export declare const ALLOW_PENDING_PASSWORD_CHANGE_KEY = "allowPendingPasswordChange";
+export declare const AllowPendingPasswordChange: () => import("@nestjs/common").CustomDecorator<string>;
+//# sourceMappingURL=allow.pending.password.change.decorator.d.ts.map

package/dist/auth/decorators/allow.pending.password.change.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allow.pending.password.change.decorator.d.ts","sourceRoot":"","sources":["../../../src/auth/decorators/allow.pending.password.change.decorator.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,iCAAiC,+BAA+B,CAAC;AAM9E,eAAO,MAAM,0BAA0B,wDACe,CAAC"}

package/dist/auth/decorators/allow.pending.password.change.decorator.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AllowPendingPasswordChange = exports.ALLOW_PENDING_PASSWORD_CHANGE_KEY = void 0;
+const common_1 = require("@nestjs/common");
+exports.ALLOW_PENDING_PASSWORD_CHANGE_KEY = 'allowPendingPasswordChange';
+const AllowPendingPasswordChange = () => (0, common_1.SetMetadata)(exports.ALLOW_PENDING_PASSWORD_CHANGE_KEY, true);
+exports.AllowPendingPasswordChange = AllowPendingPasswordChange;
+//# sourceMappingURL=allow.pending.password.change.decorator.js.map

package/dist/auth/decorators/allow.pending.password.change.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allow.pending.password.change.decorator.js","sourceRoot":"","sources":["../../../src/auth/decorators/allow.pending.password.change.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAA6C;AAEhC,QAAA,iCAAiC,GAAG,4BAA4B,CAAC;AAMvE,MAAM,0BAA0B,GAAG,GAAG,EAAE,CAC7C,IAAA,oBAAW,EAAC,yCAAiC,EAAE,IAAI,CAAC,CAAC;AAD1C,QAAA,0BAA0B,8BACgB"}

package/dist/auth/decorators/api.key.scopes.decorator.d.ts

@@ -1,3 +1,5 @@
 export declare const API_KEY_SCOPES_KEY = "api_key_scopes";
+export declare const API_KEY_ANY_SCOPE_KEY = "api_key_any_scope";
 export declare const ApiKeyScopes: (...scopes: string[]) => import("@nestjs/common").CustomDecorator<string>;
+export declare const ApiKeyAnyScope: () => import("@nestjs/common").CustomDecorator<string>;
 //# sourceMappingURL=api.key.scopes.decorator.d.ts.map

package/dist/auth/decorators/api.key.scopes.decorator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.key.scopes.decorator.d.ts","sourceRoot":"","sources":["../../../src/auth/decorators/api.key.scopes.decorator.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AAQnD,eAAO,MAAM,YAAY,GAAI,GAAG,QAAQ,MAAM,EAAE,qDACP,CAAC"}
+{"version":3,"file":"api.key.scopes.decorator.d.ts","sourceRoot":"","sources":["../../../src/auth/decorators/api.key.scopes.decorator.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AACnD,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AAQzD,eAAO,MAAM,YAAY,GAAI,GAAG,QAAQ,MAAM,EAAE,qDACP,CAAC;AAM1C,eAAO,MAAM,cAAc,wDAAiD,CAAC"}

package/dist/auth/decorators/api.key.scopes.decorator.js

@@ -1,8 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ApiKeyScopes = exports.API_KEY_SCOPES_KEY = void 0;
+exports.ApiKeyAnyScope = exports.ApiKeyScopes = exports.API_KEY_ANY_SCOPE_KEY = exports.API_KEY_SCOPES_KEY = void 0;
 const common_1 = require("@nestjs/common");
 exports.API_KEY_SCOPES_KEY = 'api_key_scopes';
+exports.API_KEY_ANY_SCOPE_KEY = 'api_key_any_scope';
 const ApiKeyScopes = (...scopes) => (0, common_1.SetMetadata)(exports.API_KEY_SCOPES_KEY, scopes);
 exports.ApiKeyScopes = ApiKeyScopes;
+const ApiKeyAnyScope = () => (0, common_1.SetMetadata)(exports.API_KEY_ANY_SCOPE_KEY, true);
+exports.ApiKeyAnyScope = ApiKeyAnyScope;
 //# sourceMappingURL=api.key.scopes.decorator.js.map

package/dist/auth/decorators/api.key.scopes.decorator.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.key.scopes.decorator.js","sourceRoot":"","sources":["../../../src/auth/decorators/api.key.scopes.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAA6C;AAEhC,QAAA,kBAAkB,GAAG,gBAAgB,CAAC;AAQ5C,MAAM,YAAY,GAAG,CAAC,GAAG,MAAgB,EAAE,EAAE,CAClD,IAAA,oBAAW,EAAC,0BAAkB,EAAE,MAAM,CAAC,CAAC;AAD7B,QAAA,YAAY,gBACiB"}
+{"version":3,"file":"api.key.scopes.decorator.js","sourceRoot":"","sources":["../../../src/auth/decorators/api.key.scopes.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAA6C;AAEhC,QAAA,kBAAkB,GAAG,gBAAgB,CAAC;AACtC,QAAA,qBAAqB,GAAG,mBAAmB,CAAC;AAQlD,MAAM,YAAY,GAAG,CAAC,GAAG,MAAgB,EAAE,EAAE,CAClD,IAAA,oBAAW,EAAC,0BAAkB,EAAE,MAAM,CAAC,CAAC;AAD7B,QAAA,YAAY,gBACiB;AAMnC,MAAM,cAAc,GAAG,GAAG,EAAE,CAAC,IAAA,oBAAW,EAAC,6BAAqB,EAAE,IAAI,CAAC,CAAC;AAAhE,QAAA,cAAc,kBAAkD"}

package/dist/auth/decorators/max.bytes.decorator.d.ts

@@ -0,0 +1,3 @@
+import { ValidationOptions } from 'class-validator';
+export declare function MaxBytes(max: number, validationOptions?: ValidationOptions): PropertyDecorator;
+//# sourceMappingURL=max.bytes.decorator.d.ts.map

package/dist/auth/decorators/max.bytes.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"max.bytes.decorator.d.ts","sourceRoot":"","sources":["../../../src/auth/decorators/max.bytes.decorator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,iBAAiB,EAAgB,MAAM,iBAAiB,CAAC;AAG9E,wBAAgB,QAAQ,CACtB,GAAG,EAAE,MAAM,EACX,iBAAiB,CAAC,EAAE,iBAAiB,GACpC,iBAAiB,CAgBnB"}

package/dist/auth/decorators/max.bytes.decorator.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MaxBytes = MaxBytes;
+const class_validator_1 = require("class-validator");
+function MaxBytes(max, validationOptions) {
+    return (0, class_validator_1.ValidateBy)({
+        name: 'maxBytes',
+        constraints: [max],
+        validator: {
+            validate: (value) => typeof value === 'string' && Buffer.byteLength(value, 'utf8') <= max,
+            defaultMessage: (0, class_validator_1.buildMessage)((prefix) => `${prefix}$property must not exceed $constraint1 bytes`, validationOptions),
+        },
+    }, validationOptions);
+}
+//# sourceMappingURL=max.bytes.decorator.js.map

package/dist/auth/decorators/max.bytes.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"max.bytes.decorator.js","sourceRoot":"","sources":["../../../src/auth/decorators/max.bytes.decorator.ts"],"names":[],"mappings":";;AAGA,4BAmBC;AAtBD,qDAA8E;AAG9E,SAAgB,QAAQ,CACtB,GAAW,EACX,iBAAqC;IAErC,OAAO,IAAA,4BAAU,EACf;QACE,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,CAAC,GAAG,CAAC;QAClB,SAAS,EAAE;YACT,QAAQ,EAAE,CAAC,KAAc,EAAE,EAAE,CAC3B,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG;YACtE,cAAc,EAAE,IAAA,8BAAY,EAC1B,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,8CAA8C,EACnE,iBAAiB,CAClB;SACF;KACF,EACD,iBAAiB,CAClB,CAAC;AACJ,CAAC"}

package/dist/auth/decorators/normalize.email.decorator.d.ts

@@ -0,0 +1,2 @@
+export declare const NormalizeEmail: () => PropertyDecorator;
+//# sourceMappingURL=normalize.email.decorator.d.ts.map

package/dist/auth/decorators/normalize.email.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.email.decorator.d.ts","sourceRoot":"","sources":["../../../src/auth/decorators/normalize.email.decorator.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,cAAc,QAAO,iBAG/B,CAAC"}

package/dist/auth/decorators/normalize.email.decorator.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NormalizeEmail = void 0;
+const class_transformer_1 = require("class-transformer");
+const NormalizeEmail = () => (0, class_transformer_1.Transform)(({ value }) => typeof value === 'string' ? value.trim().toLowerCase() : value);
+exports.NormalizeEmail = NormalizeEmail;
+//# sourceMappingURL=normalize.email.decorator.js.map

package/dist/auth/decorators/normalize.email.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.email.decorator.js","sourceRoot":"","sources":["../../../src/auth/decorators/normalize.email.decorator.ts"],"names":[],"mappings":";;;AAAA,yDAA8C;AAGvC,MAAM,cAAc,GAAG,GAAsB,EAAE,CACpD,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAsB,EAAE,EAAE,CAC1C,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAC/D,CAAC;AAHS,QAAA,cAAc,kBAGvB"}

package/dist/auth/dtos/admin.login.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.login.dto.d.ts","sourceRoot":"","sources":["../../../src/auth/dtos/admin.login.dto.ts"],"names":[],"mappings":"AAGA,qBAAa,aAAa;IAIxB,iBAAiB,EAAE,MAAM,CAAC;IAK1B,QAAQ,EAAE,MAAM,CAAC;CAClB"}
+{"version":3,"file":"admin.login.dto.d.ts","sourceRoot":"","sources":["../../../src/auth/dtos/admin.login.dto.ts"],"names":[],"mappings":"AAIA,qBAAa,aAAa;IAQxB,iBAAiB,EAAE,MAAM,CAAC;IAM1B,QAAQ,EAAE,MAAM,CAAC;CAClB"}