@neohm/nestend 4.1.1 → 5.0.0

package/dist/admin/controllers/admin.tenant.user.controller.d.ts

@@ -1,5 +1,4 @@
 import { UserEntity } from '../../auth/entities/user.entity';
-import { CommonParamsDto } from '../../common/dtos/common.params.dto';
 import { AddBulkUsersDto } from '../dtos/add.bulk.users.dto';
 import { AddClientUserDto } from '../dtos/add.client.user.dto';
 import { ClientUserListDto } from '../dtos/client.user.list.dto';
@@ -8,6 +7,7 @@ import { TenantService } from '../../tenant/services/tenant.service';
 import { TenantUserOnboardedMailJob } from '../../notification/jobs/tenant.user.onboarded.mail.job';
 import { ListFilterService } from '../../common/services/list.filter.service';
 import { TenantMembershipService } from '../../auth/services/tenant.membership.service';
+import { TenantUserEntity } from '../../auth/entities/tenant.user.entity';
 import { AddClientMembershipDto } from '../dtos/add.client.membership.dto';
 export declare class AdminTenantUserController {
     protected readonly adminAccessService: AdminAccessService;
@@ -16,14 +16,20 @@ export declare class AdminTenantUserController {
     private readonly listFilterService;
     private readonly tenantMembershipService;
     constructor(adminAccessService: AdminAccessService, tenantService: TenantService, tenantUserOnboardedMailJob: TenantUserOnboardedMailJob, listFilterService: ListFilterService, tenantMembershipService: TenantMembershipService);
-    clientUserDetail({ id }: CommonParamsDto): Promise<UserEntity>;
+    clientUserDetail(id: string): Promise<UserEntity>;
     addClientUser(dto: AddClientUserDto): Promise<UserEntity>;
     addClientUsersBulk(dto: AddBulkUsersDto): Promise<import("../types/admin.types").BulkUserResult>;
-    addMembership(dto: AddClientMembershipDto): Promise<import("../..").TenantUserEntity>;
-    deactivateMembership(id: string, tenantId: string): Promise<import("../..").TenantUserEntity>;
-    reactivateMembership(id: string, tenantId: string): Promise<import("../..").TenantUserEntity>;
-    removeMembership(id: string, tenantId: string): Promise<import("../..").DeleteResult>;
+    addMembership(dto: AddClientMembershipDto): Promise<TenantUserEntity>;
+    deactivateMembership(id: string, tenantId: string): Promise<TenantUserEntity>;
+    reactivateMembership(id: string, tenantId: string): Promise<TenantUserEntity>;
+    removeMembership(id: string, tenantId: string): Promise<{
+        deleted_by: string;
+        id: string;
+        deleted: true;
+    }>;
     listClientUsers(dto: ClientUserListDto): Promise<import("../..").CommonListResult>;
     removeClientUser(id: string): Promise<import("../..").DeleteResult>;
+    private setMembershipActive;
+    private auditMembership;
 }
 //# sourceMappingURL=admin.tenant.user.controller.d.ts.map

package/dist/admin/controllers/admin.tenant.user.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.tenant.user.controller.d.ts","sourceRoot":"","sources":["../../../src/admin/controllers/admin.tenant.user.controller.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAE7D,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAKjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,wDAAwD,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AACxF,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAG3E,qBACa,yBAAyB;IAElC,SAAS,CAAC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB;IACzD,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa;IAC/C,SAAS,CAAC,QAAQ,CAAC,0BAA0B,EAAE,0BAA0B;IACzE,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;gBAJrB,kBAAkB,EAAE,kBAAkB,EACtC,aAAa,EAAE,aAAa,EAC5B,0BAA0B,EAAE,0BAA0B,EACxD,iBAAiB,EAAE,iBAAiB,EACpC,uBAAuB,EAAE,uBAAuB;IAS7D,gBAAgB,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe;IAkBjD,aAAa,CAAS,GAAG,EAAE,gBAAgB;IAa3C,kBAAkB,CAAS,GAAG,EAAE,eAAe;IAW/C,aAAa,CAAS,GAAG,EAAE,sBAAsB;IAWjD,oBAAoB,CACI,EAAE,EAAE,MAAM,EACJ,QAAQ,EAAE,MAAM;IAiB9C,oBAAoB,CACI,EAAE,EAAE,MAAM,EACJ,QAAQ,EAAE,MAAM;IAkB9C,gBAAgB,CACQ,EAAE,EAAE,MAAM,EACJ,QAAQ,EAAE,MAAM;IAiB9C,eAAe,CAAS,GAAG,EAAE,iBAAiB;IAW9C,gBAAgB,CAA6B,EAAE,EAAE,MAAM;CAI9D"}
+{"version":3,"file":"admin.tenant.user.controller.d.ts","sourceRoot":"","sources":["../../../src/admin/controllers/admin.tenant.user.controller.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAO7D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAKjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,wDAAwD,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AACxF,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAI3E,qBAIa,yBAAyB;IAElC,SAAS,CAAC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB;IACzD,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa;IAC/C,SAAS,CAAC,QAAQ,CAAC,0BAA0B,EAAE,0BAA0B;IACzE,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;gBAJrB,kBAAkB,EAAE,kBAAkB,EACtC,aAAa,EAAE,aAAa,EAC5B,0BAA0B,EAAE,0BAA0B,EACxD,iBAAiB,EAAE,iBAAiB,EACpC,uBAAuB,EAAE,uBAAuB;IAS7D,gBAAgB,CAA6B,EAAE,EAAE,MAAM;IAkBvD,aAAa,CAAS,GAAG,EAAE,gBAAgB;IAe3C,kBAAkB,CAAS,GAAG,EAAE,eAAe;IAW/C,aAAa,CAAS,GAAG,EAAE,sBAAsB;IAajD,oBAAoB,CACI,EAAE,EAAE,MAAM,EACJ,QAAQ,EAAE,MAAM;IAW9C,oBAAoB,CACI,EAAE,EAAE,MAAM,EACJ,QAAQ,EAAE,MAAM;IAY9C,gBAAgB,CACQ,EAAE,EAAE,MAAM,EACJ,QAAQ,EAAE,MAAM;;;;;IAuB9C,eAAe,CAAS,GAAG,EAAE,iBAAiB;IAW9C,gBAAgB,CAA6B,EAAE,EAAE,MAAM;YAK/C,mBAAmB;IAsBjC,OAAO,CAAC,eAAe;CAcxB"}

package/dist/admin/controllers/admin.tenant.user.controller.js

@@ -17,7 +17,10 @@ const common_1 = require("@nestjs/common");
 const swagger_1 = require("@nestjs/swagger");
 const user_entity_1 = require("../../auth/entities/user.entity");
 const user_type_enum_1 = require("../../auth/enums/user.type.enum");
-const common_params_dto_1 = require("../../common/dtos/common.params.dto");
+const strict_validation_pipe_1 = require("../../common/pipes/strict.validation.pipe");
+const audit_action_enum_1 = require("../../common/enums/audit.action.enum");
+const entity_constants_1 = require("../../constants/entity.constants");
+const not_found_exception_1 = require("../../global/exceptions/not.found.exception");
 const add_bulk_users_dto_1 = require("../dtos/add.bulk.users.dto");
 const add_client_user_dto_1 = require("../dtos/add.client.user.dto");
 const client_user_list_dto_1 = require("../dtos/client.user.list.dto");
@@ -30,8 +33,10 @@ const tenant_service_1 = require("../../tenant/services/tenant.service");
 const tenant_user_onboarded_mail_job_1 = require("../../notification/jobs/tenant.user.onboarded.mail.job");
 const list_filter_service_1 = require("../../common/services/list.filter.service");
 const tenant_membership_service_1 = require("../../auth/services/tenant.membership.service");
+const tenant_user_entity_1 = require("../../auth/entities/tenant.user.entity");
 const add_client_membership_dto_1 = require("../dtos/add.client.membership.dto");
 const client_membership_data_processor_1 = require("../libraries/client.membership.data.processor");
+const admin_audit_1 = require("../utilities/admin.audit");
 let AdminTenantUserController = class AdminTenantUserController {
     constructor(adminAccessService, tenantService, tenantUserOnboardedMailJob, listFilterService, tenantMembershipService) {
         this.adminAccessService = adminAccessService;
@@ -40,39 +45,44 @@ let AdminTenantUserController = class AdminTenantUserController {
         this.listFilterService = listFilterService;
         this.tenantMembershipService = tenantMembershipService;
     }
-    async clientUserDetail({ id }) {
+    async clientUserDetail(id) {
         await this.adminAccessService.validateContentReader();
         const user = await user_entity_1.UserEntity.findOne({
             where: { id, user_type: user_type_enum_1.UserType.TENANT_USER },
             relations: { memberships: { tenant: true }, userRoles: { role: true } },
         });
         if (!user)
-            throw new common_1.NotFoundException('No client user exists for this id');
+            throw new not_found_exception_1.NotFoundException('No client user exists for this id');
         return user;
     }
     async addClientUser(dto) {
-        await this.adminAccessService.validateAdmin();
-        return new client_user_data_processor_1.ClientUserDataProcessor(this.tenantService, this.tenantUserOnboardedMailJob).process(dto);
+        const access = await this.adminAccessService.validateAdmin();
+        return new client_user_data_processor_1.ClientUserDataProcessor(access, this.tenantService, this.tenantUserOnboardedMailJob).process(dto);
     }
     async addClientUsersBulk(dto) {
-        await this.adminAccessService.validateAdmin();
-        return new bulk_user_data_processor_1.BulkUserDataProcessor(this.tenantService).process(dto);
+        const { user } = await this.adminAccessService.validateSuperAdmin();
+        return new bulk_user_data_processor_1.BulkUserDataProcessor(user, this.tenantService).process(dto);
     }
     async addMembership(dto) {
-        await this.adminAccessService.validateAdmin();
-        return new client_membership_data_processor_1.ClientMembershipDataProcessor(this.tenantService).process(dto);
+        const access = await this.adminAccessService.validateAdmin();
+        return new client_membership_data_processor_1.ClientMembershipDataProcessor(access, this.tenantService).process(dto);
     }
     async deactivateMembership(id, tenantId) {
-        await this.adminAccessService.validateAdmin();
-        return this.tenantMembershipService.setMemberActive(id, tenantId, false, undefined, false);
+        const { user } = await this.adminAccessService.validateAdmin();
+        return this.setMembershipActive(user, id, tenantId, false);
     }
     async reactivateMembership(id, tenantId) {
-        await this.adminAccessService.validateAdmin();
-        return this.tenantMembershipService.setMemberActive(id, tenantId, true, undefined, false);
+        const { user } = await this.adminAccessService.validateAdmin();
+        return this.setMembershipActive(user, id, tenantId, true);
     }
     async removeMembership(id, tenantId) {
         const { user } = await this.adminAccessService.validateAdmin();
-        return this.tenantMembershipService.removeMember(id, tenantId, user.id, false);
+        const result = await this.tenantMembershipService.removeMember(id, tenantId, undefined, false);
+        await this.auditMembership(user, result.id, audit_action_enum_1.AuditAction.SOFT_DELETE, {
+            user_id: id,
+            tenant_id: tenantId,
+        });
+        return { ...result, deleted_by: user.id };
     }
     async listClientUsers(dto) {
         await this.adminAccessService.validateContentReader();
@@ -82,6 +92,24 @@ let AdminTenantUserController = class AdminTenantUserController {
         const { user } = await this.adminAccessService.validateAdmin();
         return new client_user_delete_processor_1.ClientUserDeleteProcessor(user).process(id);
     }
+    async setMembershipActive(actor, userId, tenantId, active) {
+        const membership = await this.tenantMembershipService.setMemberActive(userId, tenantId, active, undefined, false);
+        await this.auditMembership(actor, membership.id, audit_action_enum_1.AuditAction.UPDATE, {
+            user_id: userId,
+            tenant_id: tenantId,
+            is_active: active,
+        });
+        return membership;
+    }
+    auditMembership(actor, membershipId, action, value) {
+        return admin_audit_1.AdminAudit.record(tenant_user_entity_1.TenantUserEntity.getRepository().manager, {
+            actor,
+            sourceType: entity_constants_1.baseEntityConstants.tenantUser,
+            sourceId: membershipId,
+            action,
+            newValue: value,
+        });
+    }
 };
 exports.AdminTenantUserController = AdminTenantUserController;
 __decorate([
@@ -90,16 +118,16 @@ __decorate([
         summary: 'One client (tenant-scoped) user, in full.',
         description: "Carries the user's memberships (each with its tenant) and role grants (each with its `tenant_id`) alongside everything the listing leaves out. The grants matter for editing: a save reconciles one tenant's `role_ids` against them and revokes whatever the payload omits, so an edit form has to start from this list. Requires at least the global content reader role.",
     }),
-    __param(0, (0, common_1.Param)()),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [common_params_dto_1.CommonParamsDto]),
+    __metadata("design:paramtypes", [String]),
     __metadata("design:returntype", Promise)
 ], AdminTenantUserController.prototype, "clientUserDetail", null);
 __decorate([
     (0, common_1.Post)(),
     (0, swagger_1.ApiOperation)({
         summary: 'Register a single client (tenant-scoped) user, or update one.',
-        description: "Send an `id` to edit that user; omit it to register a new one as a member of `tenant_id`. `password` is required only when creating. `role_ids` replaces the grants held in `tenant_id`, so an edit must send that tenant's full set (read them from `GET :id`). On an edit `tenant_id` must be one of the user's memberships; others are untouched. Requires at least the global admin role.",
+        description: "Send an `id` to edit that user; omit it to register a new one as a member of `tenant_id`. `password` is required only when creating. `role_ids`, when sent, replaces the grants held in `tenant_id`, so an edit must send that tenant's full set (read them from `GET :id`); omitted keeps them, as for every optional field. On an edit `tenant_id` must be one of the user's memberships; others are untouched. Changing the email clears `email_verified_at` and revokes the user's sessions. Requires at least the global admin role, and the global super admin role to grant `global.admin` or a `.manager` role, or to change the email of a user holding one. Audit-logged.",
     }),
     __param(0, (0, common_1.Body)()),
     __metadata("design:type", Function),
@@ -110,7 +138,7 @@ __decorate([
     (0, common_1.Post)('bulk'),
     (0, swagger_1.ApiOperation)({
         summary: 'Bulk-register client users under one tenant.',
-        description: 'Requires the global super admin role.',
+        description: 'All-or-nothing; no roles are granted. Audit-logged. Requires the global super admin role.',
     }),
     __param(0, (0, common_1.Body)()),
     __metadata("design:type", Function),
@@ -121,7 +149,7 @@ __decorate([
     (0, common_1.Post)('memberships'),
     (0, swagger_1.ApiOperation)({
         summary: 'Add an existing client user to another tenant.',
-        description: 'Creates the membership and grants `role_ids` in that tenant. Refused when the user is already a member. Requires at least the global admin role.',
+        description: 'Creates the membership and grants `role_ids` in that tenant. Refused when the user is already a member. Requires at least the global admin role, and the global super admin role to grant `global.admin` or a `.manager` role. Audit-logged.',
     }),
     __param(0, (0, common_1.Body)()),
     __metadata("design:type", Function),
@@ -132,7 +160,7 @@ __decorate([
     (0, common_1.Post)(':id/memberships/:tenantId/deactivate'),
     (0, swagger_1.ApiOperation)({
         summary: "Deactivate a client user's membership of one tenant.",
-        description: "Roles are kept; the user's credentials bound to the tenant are revoked and it can no longer be worked in. Reversible. Requires at least the global admin role.",
+        description: "Roles are kept; the user's credentials bound to the tenant are revoked and it can no longer be worked in. Reversible. Audit-logged. Requires at least the global admin role.",
     }),
     __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __param(1, (0, common_1.Param)('tenantId', common_1.ParseUUIDPipe)),
@@ -144,7 +172,7 @@ __decorate([
     (0, common_1.Post)(':id/memberships/:tenantId/reactivate'),
     (0, swagger_1.ApiOperation)({
         summary: "Reactivate a client user's membership of one tenant.",
-        description: 'Requires at least the global admin role.',
+        description: 'Audit-logged. Requires at least the global admin role.',
     }),
     __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __param(1, (0, common_1.Param)('tenantId', common_1.ParseUUIDPipe)),
@@ -156,7 +184,7 @@ __decorate([
     (0, common_1.Delete)(':id/memberships/:tenantId'),
     (0, swagger_1.ApiOperation)({
         summary: 'Remove a client user from one tenant.',
-        description: "Ends that membership and its roles and revokes the user's credentials bound to the tenant; the account and its other memberships stay. Requires at least the global admin role.",
+        description: "Ends that membership and its roles and revokes the user's credentials bound to the tenant; the account and its other memberships stay. Audit-logged. Requires at least the global admin role.",
     }),
     __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __param(1, (0, common_1.Param)('tenantId', common_1.ParseUUIDPipe)),
@@ -168,7 +196,7 @@ __decorate([
     (0, common_1.Post)('list'),
     (0, swagger_1.ApiOperation)({
         summary: 'List, search and filter client (tenant-scoped) users.',
-        description: 'Scoped to tenant users, one row per membership, joined to its tenant so rows carry `membership_id` and `tenant_name` alongside `tenant_id`. A user in no tenant appears once with no tenant. Requires the global super admin role.',
+        description: 'Scoped to tenant users, one row per membership, joined to its tenant so rows carry `membership_id` and `tenant_name` alongside `tenant_id`. A user in no tenant appears once with no tenant. Requires at least the global content reader role.',
     }),
     __param(0, (0, common_1.Body)()),
     __metadata("design:type", Function),
@@ -179,7 +207,7 @@ __decorate([
     (0, common_1.Delete)(':id'),
     (0, swagger_1.ApiOperation)({
         summary: 'Delete a client user.',
-        description: "Soft delete of the user and every membership, with the user's sessions and refresh tokens revoked in the same transaction so tokens already issued stop working immediately. Requires the global admin role.",
+        description: "Soft delete of the user and every membership, with the user's sessions and refresh tokens revoked in the same transaction so tokens already issued stop working immediately. Audit-logged. Requires at least the global admin role.",
     }),
     __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __metadata("design:type", Function),
@@ -187,6 +215,9 @@ __decorate([
     __metadata("design:returntype", Promise)
 ], AdminTenantUserController.prototype, "removeClientUser", null);
 exports.AdminTenantUserController = AdminTenantUserController = __decorate([
+    (0, swagger_1.ApiTags)('Admin - Tenant Users'),
+    (0, swagger_1.ApiBearerAuth)(),
+    (0, common_1.UsePipes)(strict_validation_pipe_1.StrictValidationPipe),
     (0, common_1.Controller)('api/admin/tenant-users'),
     __metadata("design:paramtypes", [admin_access_service_1.AdminAccessService,
         tenant_service_1.TenantService,

package/dist/admin/controllers/admin.tenant.user.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin.tenant.user.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.tenant.user.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CASwB;AACxB,6CAA+C;AAC/C,iEAA6D;AAC7D,oEAA2D;AAC3D,2EAAsE;AACtE,mEAA6D;AAC7D,qEAA+D;AAC/D,uEAAiE;AACjE,oFAA8E;AAC9E,wFAAkF;AAClF,4FAAsF;AACtF,wFAAkF;AAClF,2EAAsE;AACtE,yEAAqE;AACrE,2GAAoG;AACpG,mFAA8E;AAC9E,6FAAwF;AACxF,iFAA2E;AAC3E,oGAA8F;AAGvF,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;IACpC,YACqB,kBAAsC,EACtC,aAA4B,EAC5B,0BAAsD,EACxD,iBAAoC,EACpC,uBAAgD;QAJ9C,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,kBAAa,GAAb,aAAa,CAAe;QAC5B,+BAA0B,GAA1B,0BAA0B,CAA4B;QACxD,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,4BAAuB,GAAvB,uBAAuB,CAAyB;IAChE,CAAC;IAQE,AAAN,KAAK,CAAC,gBAAgB,CAAU,EAAE,EAAE,EAAmB;QACrD,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QAEtD,MAAM,IAAI,GAAG,MAAM,wBAAU,CAAC,OAAO,CAAC;YACpC,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,yBAAQ,CAAC,WAAW,EAAE;YAC9C,SAAS,EAAE,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;SACxE,CAAC,CAAC;QACH,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,0BAAiB,CAAC,mCAAmC,CAAC,CAAC;QAE5E,OAAO,IAAI,CAAC;IACd,CAAC;IAQK,AAAN,KAAK,CAAC,aAAa,CAAS,GAAqB;QAC/C,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC9C,OAAO,IAAI,oDAAuB,CAChC,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,0BAA0B,CAChC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAOK,AAAN,KAAK,CAAC,kBAAkB,CAAS,GAAoB;QACnD,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC9C,OAAO,IAAI,gDAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpE,CAAC;IAQK,AAAN,KAAK,CAAC,aAAa,CAAS,GAA2B;QACrD,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC9C,OAAO,IAAI,gEAA6B,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5E,CAAC;IAQK,AAAN,KAAK,CAAC,oBAAoB,CACI,EAAU,EACJ,QAAgB;QAElD,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC,uBAAuB,CAAC,eAAe,CACjD,EAAE,EACF,QAAQ,EACR,KAAK,EACL,SAAS,EACT,KAAK,CACN,CAAC;IACJ,CAAC;IAOK,AAAN,KAAK,CAAC,oBAAoB,CACI,EAAU,EACJ,QAAgB;QAElD,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC,uBAAuB,CAAC,eAAe,CACjD,EAAE,EACF,QAAQ,EACR,IAAI,EACJ,SAAS,EACT,KAAK,CACN,CAAC;IACJ,CAAC;IAQK,AAAN,KAAK,CAAC,gBAAgB,CACQ,EAAU,EACJ,QAAgB;QAElD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,uBAAuB,CAAC,YAAY,CAC9C,EAAE,EACF,QAAQ,EACR,IAAI,CAAC,EAAE,EACP,KAAK,CACN,CAAC;IACJ,CAAC;IAQK,AAAN,KAAK,CAAC,eAAe,CAAS,GAAsB;QAClD,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,IAAI,oDAAuB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1E,CAAC;IAQK,AAAN,KAAK,CAAC,gBAAgB,CAA6B,EAAU;QAC3D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,wDAAyB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;CACF,CAAA;AA7IY,8DAAyB;AAe9B;IANL,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,2CAA2C;QACpD,WAAW,EACT,6WAA6W;KAChX,CAAC;IACsB,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;iEAUtD;AAQK;IANL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,+DAA+D;QACxE,WAAW,EACT,+XAA+X;KAClY,CAAC;IACmB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,sCAAgB;;8DAMhD;AAOK;IALL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8CAA8C;QACvD,WAAW,EAAE,uCAAuC;KACrD,CAAC;IACwB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,oCAAe;;mEAGpD;AAQK;IANL,IAAA,aAAI,EAAC,aAAa,CAAC;IACnB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gDAAgD;QACzD,WAAW,EACT,kJAAkJ;KACrJ,CAAC;IACmB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,kDAAsB;;8DAGtD;AAQK;IANL,IAAA,aAAI,EAAC,sCAAsC,CAAC;IAC5C,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,sDAAsD;QAC/D,WAAW,EACT,gKAAgK;KACnK,CAAC;IAEC,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;IAC1B,WAAA,IAAA,cAAK,EAAC,UAAU,EAAE,sBAAa,CAAC,CAAA;;;;qEAUlC;AAOK;IALL,IAAA,aAAI,EAAC,sCAAsC,CAAC;IAC5C,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,sDAAsD;QAC/D,WAAW,EAAE,0CAA0C;KACxD,CAAC;IAEC,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;IAC1B,WAAA,IAAA,cAAK,EAAC,UAAU,EAAE,sBAAa,CAAC,CAAA;;;;qEAUlC;AAQK;IANL,IAAA,eAAM,EAAC,2BAA2B,CAAC;IACnC,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,uCAAuC;QAChD,WAAW,EACT,iLAAiL;KACpL,CAAC;IAEC,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;IAC1B,WAAA,IAAA,cAAK,EAAC,UAAU,EAAE,sBAAa,CAAC,CAAA;;;;iEASlC;AAQK;IANL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,uDAAuD;QAChE,WAAW,EACT,oOAAoO;KACvO,CAAC;IACqB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,wCAAiB;;gEAGnD;AAQK;IANL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,uBAAuB;QAChC,WAAW,EACT,8MAA8M;KACjN,CAAC;IACsB,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;iEAGjD;oCA5IU,yBAAyB;IADrC,IAAA,mBAAU,EAAC,wBAAwB,CAAC;qCAGM,yCAAkB;QACvB,8BAAa;QACA,2DAA0B;QACrC,uCAAiB;QACX,mDAAuB;GANxD,yBAAyB,CA6IrC"}
+{"version":3,"file":"admin.tenant.user.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.tenant.user.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CASwB;AACxB,6CAAuE;AACvE,iEAA6D;AAE7D,oEAA2D;AAC3D,sFAAiF;AACjF,4EAAmE;AACnE,uEAAuE;AACvE,qFAAgF;AAChF,mEAA6D;AAC7D,qEAA+D;AAC/D,uEAAiE;AACjE,oFAA8E;AAC9E,wFAAkF;AAClF,4FAAsF;AACtF,wFAAkF;AAClF,2EAAsE;AACtE,yEAAqE;AACrE,2GAAoG;AACpG,mFAA8E;AAC9E,6FAAwF;AACxF,+EAA0E;AAC1E,iFAA2E;AAC3E,oGAA8F;AAC9F,0DAAsD;AAM/C,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;IACpC,YACqB,kBAAsC,EACtC,aAA4B,EAC5B,0BAAsD,EACxD,iBAAoC,EACpC,uBAAgD;QAJ9C,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,kBAAa,GAAb,aAAa,CAAe;QAC5B,+BAA0B,GAA1B,0BAA0B,CAA4B;QACxD,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,4BAAuB,GAAvB,uBAAuB,CAAyB;IAChE,CAAC;IAQE,AAAN,KAAK,CAAC,gBAAgB,CAA6B,EAAU;QAC3D,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QAEtD,MAAM,IAAI,GAAG,MAAM,wBAAU,CAAC,OAAO,CAAC;YACpC,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,yBAAQ,CAAC,WAAW,EAAE;YAC9C,SAAS,EAAE,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;SACxE,CAAC,CAAC;QACH,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,uCAAiB,CAAC,mCAAmC,CAAC,CAAC;QAE5E,OAAO,IAAI,CAAC;IACd,CAAC;IAQK,AAAN,KAAK,CAAC,aAAa,CAAS,GAAqB;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC7D,OAAO,IAAI,oDAAuB,CAChC,MAAM,EACN,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,0BAA0B,CAChC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAQK,AAAN,KAAK,CAAC,kBAAkB,CAAS,GAAoB;QACnD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QACpE,OAAO,IAAI,gDAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1E,CAAC;IAQK,AAAN,KAAK,CAAC,aAAa,CAAS,GAA2B;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC7D,OAAO,IAAI,gEAA6B,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAC1E,GAAG,CACJ,CAAC;IACJ,CAAC;IAQK,AAAN,KAAK,CAAC,oBAAoB,CACI,EAAU,EACJ,QAAgB;QAElD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;IAOK,AAAN,KAAK,CAAC,oBAAoB,CACI,EAAU,EACJ,QAAgB;QAElD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IAQK,AAAN,KAAK,CAAC,gBAAgB,CACQ,EAAU,EACJ,QAAgB;QAElD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAE/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,YAAY,CAC5D,EAAE,EACF,QAAQ,EACR,SAAS,EACT,KAAK,CACN,CAAC;QACF,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,+BAAW,CAAC,WAAW,EAAE;YACnE,OAAO,EAAE,EAAE;YACX,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QACH,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IAC5C,CAAC;IAQK,AAAN,KAAK,CAAC,eAAe,CAAS,GAAsB;QAClD,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,IAAI,oDAAuB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1E,CAAC;IAQK,AAAN,KAAK,CAAC,gBAAgB,CAA6B,EAAU;QAC3D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,wDAAyB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,KAAsB,EACtB,MAAc,EACd,QAAgB,EAChB,MAAe;QAEf,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,eAAe,CACnE,MAAM,EACN,QAAQ,EACR,MAAM,EACN,SAAS,EACT,KAAK,CACN,CAAC;QACF,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,EAAE,+BAAW,CAAC,MAAM,EAAE;YACnE,OAAO,EAAE,MAAM;YACf,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,MAAM;SAClB,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC;IAGO,eAAe,CACrB,KAAsB,EACtB,YAAoB,EACpB,MAAmB,EACnB,KAA8B;QAE9B,OAAO,wBAAU,CAAC,MAAM,CAAC,qCAAgB,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE;YACjE,KAAK;YACL,UAAU,EAAE,sCAAmB,CAAC,UAAU;YAC1C,QAAQ,EAAE,YAAY;YACtB,MAAM;YACN,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAhLY,8DAAyB;AAe9B;IANL,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,2CAA2C;QACpD,WAAW,EACT,6WAA6W;KAChX,CAAC;IACsB,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;iEAUjD;AAQK;IANL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,+DAA+D;QACxE,WAAW,EACT,qpBAAqpB;KACxpB,CAAC;IACmB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,sCAAgB;;8DAOhD;AAQK;IANL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8CAA8C;QACvD,WAAW,EACT,2FAA2F;KAC9F,CAAC;IACwB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,oCAAe;;mEAGpD;AAQK;IANL,IAAA,aAAI,EAAC,aAAa,CAAC;IACnB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gDAAgD;QACzD,WAAW,EACT,8OAA8O;KACjP,CAAC;IACmB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,kDAAsB;;8DAKtD;AAQK;IANL,IAAA,aAAI,EAAC,sCAAsC,CAAC;IAC5C,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,sDAAsD;QAC/D,WAAW,EACT,8KAA8K;KACjL,CAAC;IAEC,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;IAC1B,WAAA,IAAA,cAAK,EAAC,UAAU,EAAE,sBAAa,CAAC,CAAA;;;;qEAIlC;AAOK;IALL,IAAA,aAAI,EAAC,sCAAsC,CAAC;IAC5C,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,sDAAsD;QAC/D,WAAW,EAAE,wDAAwD;KACtE,CAAC;IAEC,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;IAC1B,WAAA,IAAA,cAAK,EAAC,UAAU,EAAE,sBAAa,CAAC,CAAA;;;;qEAIlC;AAQK;IANL,IAAA,eAAM,EAAC,2BAA2B,CAAC;IACnC,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,uCAAuC;QAChD,WAAW,EACT,+LAA+L;KAClM,CAAC;IAEC,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;IAC1B,WAAA,IAAA,cAAK,EAAC,UAAU,EAAE,sBAAa,CAAC,CAAA;;;;iEAelC;AAQK;IANL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,uDAAuD;QAChE,WAAW,EACT,gPAAgP;KACnP,CAAC;IACqB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,wCAAiB;;gEAGnD;AAQK;IANL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,uBAAuB;QAChC,WAAW,EACT,qOAAqO;KACxO,CAAC;IACsB,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;iEAGjD;oCA1IU,yBAAyB;IAJrC,IAAA,iBAAO,EAAC,sBAAsB,CAAC;IAC/B,IAAA,uBAAa,GAAE;IACf,IAAA,iBAAQ,EAAC,6CAAoB,CAAC;IAC9B,IAAA,mBAAU,EAAC,wBAAwB,CAAC;qCAGM,yCAAkB;QACvB,8BAAa;QACA,2DAA0B;QACrC,uCAAiB;QACX,mDAAuB;GANxD,yBAAyB,CAgLrC"}

package/dist/admin/controllers/admin.user.controller.d.ts

@@ -3,14 +3,14 @@ import { AdminAccessService } from '../services/admin.access.service';
 import { AddAdminUserDto } from '../dtos/add.admin.user.dto';
 import { AdminUserListDto } from '../dtos/admin.user.list.dto';
 import { AdminUserEntity } from '../../auth/entities/admin.user.entity';
-import { CommonParamsDto } from '../../common/dtos/common.params.dto';
+import { AdminUserDetail } from '../types/admin.types';
 export declare class AdminUserController {
     private readonly adminAccessService;
     private readonly listFilterService;
     constructor(adminAccessService: AdminAccessService, listFilterService: ListFilterService);
-    detail({ id }: CommonParamsDto): Promise<AdminUserEntity>;
+    detail(id: string): Promise<AdminUserDetail>;
     addAdminUser(dto: AddAdminUserDto): Promise<AdminUserEntity>;
     listAdminUsers(dto: AdminUserListDto): Promise<import("../..").CommonListResult>;
-    removeAdminUser(id: string): Promise<import("../..").DeleteResult>;
+    removeAdminUser(id: string): Promise<import("../types/admin.types").DeleteResult>;
 }
 //# sourceMappingURL=admin.user.controller.d.ts.map

package/dist/admin/controllers/admin.user.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.user.controller.d.ts","sourceRoot":"","sources":["../../../src/admin/controllers/admin.user.controller.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAItE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAEtE,qBAGa,mBAAmB;IAE5B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBADjB,kBAAkB,EAAE,kBAAkB,EACtC,iBAAiB,EAAE,iBAAiB;IAQjD,MAAM,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe;IAUvC,YAAY,CAAS,GAAG,EAAE,eAAe;IAWzC,cAAc,CAAS,GAAG,EAAE,gBAAgB;IAW5C,eAAe,CAA6B,EAAE,EAAE,MAAM;CAI7D"}
+{"version":3,"file":"admin.user.controller.d.ts","sourceRoot":"","sources":["../../../src/admin/controllers/admin.user.controller.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAItE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAIxE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,qBAIa,mBAAmB;IAE5B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBADjB,kBAAkB,EAAE,kBAAkB,EACtC,iBAAiB,EAAE,iBAAiB;IASjD,MAAM,CAA6B,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAyBxE,YAAY,CAAS,GAAG,EAAE,eAAe;IAWzC,cAAc,CAAS,GAAG,EAAE,gBAAgB;IAW5C,eAAe,CAA6B,EAAE,EAAE,MAAM;CAI7D"}

package/dist/admin/controllers/admin.user.controller.js

@@ -23,15 +23,28 @@ const admin_user_list_processor_1 = require("../libraries/admin.user.list.proces
 const add_admin_user_dto_1 = require("../dtos/add.admin.user.dto");
 const admin_user_list_dto_1 = require("../dtos/admin.user.list.dto");
 const admin_user_entity_1 = require("../../auth/entities/admin.user.entity");
-const common_params_dto_1 = require("../../common/dtos/common.params.dto");
+const system_admin_user_role_entity_1 = require("../../auth/entities/system.admin.user.role.entity");
+const strict_validation_pipe_1 = require("../../common/pipes/strict.validation.pipe");
+const not_found_exception_1 = require("../../global/exceptions/not.found.exception");
 let AdminUserController = class AdminUserController {
     constructor(adminAccessService, listFilterService) {
         this.adminAccessService = adminAccessService;
         this.listFilterService = listFilterService;
     }
-    async detail({ id }) {
+    async detail(id) {
         await this.adminAccessService.validateContentReader();
-        return admin_user_entity_1.AdminUserEntity.findOne({ where: { id } });
+        const adminUser = await admin_user_entity_1.AdminUserEntity.findOne({ where: { id } });
+        if (!adminUser)
+            throw new not_found_exception_1.NotFoundException('No admin user exists for this id');
+        const grants = await system_admin_user_role_entity_1.SystemAdminUserRoleEntity.find({
+            where: { admin_user_id: id },
+            relations: { role: true },
+        });
+        return Object.assign(adminUser, {
+            roles: grants
+                .map((grant) => grant.role)
+                .filter((role) => !!role),
+        });
     }
     async addAdminUser(dto) {
         const { user } = await this.adminAccessService.validateSuperAdmin();
@@ -51,18 +64,18 @@ __decorate([
     (0, common_1.Get)(':id'),
     (0, swagger_1.ApiOperation)({
         summary: `Get admin user's details`,
-        description: `Requires at least global content reader role`,
+        description: 'Carries `roles`, the sys_admin_roles rows granted to this admin — an edit sends the whole set back, so a form that could not read them would reset the account it was saving. Requires at least the global content reader role.',
     }),
-    __param(0, (0, common_1.Param)()),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [common_params_dto_1.CommonParamsDto]),
+    __metadata("design:paramtypes", [String]),
     __metadata("design:returntype", Promise)
 ], AdminUserController.prototype, "detail", null);
 __decorate([
     (0, common_1.Post)(),
     (0, swagger_1.ApiOperation)({
         summary: 'Create or update global admin user.',
-        description: 'Requires at least the global super admin role.',
+        description: "Send an `id` to edit that admin; omit it to create one. `role_ids` is the whole set the admin should hold — a role left out is revoked. The password is create-only. Email and username are unique case-insensitively; usernames cannot contain `@`. `active: false` suspends the account and revokes its sessions. An edit that would leave no active super admin, or strip your own super admin role, is refused. Requires the global super admin role.",
     }),
     __param(0, (0, common_1.Body)()),
     __metadata("design:type", Function),
@@ -84,7 +97,7 @@ __decorate([
     (0, common_1.Delete)(':id'),
     (0, swagger_1.ApiOperation)({
         summary: 'Delete a back-office admin user.',
-        description: 'Soft delete, with sessions and refresh tokens revoked. An admin cannot delete their own account, and the last remaining super admin cannot be deleted — either would leave the back office unreachable. Role grants are kept, so restoring the row restores the access it had. Requires at least the global admin role.',
+        description: 'Soft delete, with sessions and refresh tokens revoked. An admin cannot delete their own account, and the last remaining super admin cannot be deleted — either would leave the back office unreachable. Role grants are kept, so restoring the row restores the access it had. Requires the global super admin role.',
     }),
     __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __metadata("design:type", Function),
@@ -94,6 +107,7 @@ __decorate([
 exports.AdminUserController = AdminUserController = __decorate([
     (0, swagger_1.ApiTags)('Admin - Users'),
     (0, swagger_1.ApiBearerAuth)(),
+    (0, common_1.UsePipes)(strict_validation_pipe_1.StrictValidationPipe),
     (0, common_1.Controller)('api/admin/users'),
     __metadata("design:paramtypes", [admin_access_service_1.AdminAccessService,
         list_filter_service_1.ListFilterService])

package/dist/admin/controllers/admin.user.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin.user.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.user.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAQwB;AACxB,6CAAuE;AACvE,mFAA8E;AAC9E,2EAAsE;AACtE,sFAAgF;AAChF,0FAAoF;AACpF,sFAAgF;AAChF,mEAA6D;AAC7D,qEAA+D;AAC/D,6EAAwE;AACxE,2EAAsE;AAK/D,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC9B,YACmB,kBAAsC,EACtC,iBAAoC;QADpC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,sBAAiB,GAAjB,iBAAiB,CAAmB;IACpD,CAAC;IAOE,AAAN,KAAK,CAAC,MAAM,CAAU,EAAE,EAAE,EAAmB;QAC3C,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,mCAAe,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC;IAOK,AAAN,KAAK,CAAC,YAAY,CAAS,GAAoB;QAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QACpE,OAAO,IAAI,kDAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;IAQK,AAAN,KAAK,CAAC,cAAc,CAAS,GAAqB;QAChD,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,IAAI,kDAAsB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IAQK,AAAN,KAAK,CAAC,eAAe,CAA6B,EAAU;QAC1D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QACpE,OAAO,IAAI,sDAAwB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;CACF,CAAA;AA/CY,kDAAmB;AAWxB;IALL,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,0BAA0B;QACnC,WAAW,EAAE,8CAA8C;KAC5D,CAAC;IACY,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;iDAG5C;AAOK;IALL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,qCAAqC;QAC9C,WAAW,EAAE,gDAAgD;KAC9D,CAAC;IACkB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,oCAAe;;uDAG9C;AAQK;IANL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,kDAAkD;QAC3D,WAAW,EACT,2HAA2H;KAC9H,CAAC;IACoB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,sCAAgB;;yDAGjD;AAQK;IANL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EACT,yTAAyT;KAC5T,CAAC;IACqB,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;0DAGhD;8BA9CU,mBAAmB;IAH/B,IAAA,iBAAO,EAAC,eAAe,CAAC;IACxB,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,iBAAiB,CAAC;qCAGW,yCAAkB;QACnB,uCAAiB;GAH5C,mBAAmB,CA+C/B"}
+{"version":3,"file":"admin.user.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.user.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CASwB;AACxB,6CAAuE;AACvE,mFAA8E;AAC9E,2EAAsE;AACtE,sFAAgF;AAChF,0FAAoF;AACpF,sFAAgF;AAChF,mEAA6D;AAC7D,qEAA+D;AAC/D,6EAAwE;AACxE,qGAA8F;AAC9F,sFAAiF;AACjF,qFAAgF;AAOzE,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC9B,YACmB,kBAAsC,EACtC,iBAAoC;QADpC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,sBAAiB,GAAjB,iBAAiB,CAAmB;IACpD,CAAC;IAQE,AAAN,KAAK,CAAC,MAAM,CAA6B,EAAU;QACjD,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QAEtD,MAAM,SAAS,GAAG,MAAM,mCAAe,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,SAAS;YACZ,MAAM,IAAI,uCAAiB,CAAC,kCAAkC,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,yDAAyB,CAAC,IAAI,CAAC;YAClD,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE;YAC5B,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;SAC1B,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE;YAC9B,KAAK,EAAE,MAAM;iBACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;iBAC1B,MAAM,CAAC,CAAC,IAAI,EAAoC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;IAQK,AAAN,KAAK,CAAC,YAAY,CAAS,GAAoB;QAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QACpE,OAAO,IAAI,kDAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;IAQK,AAAN,KAAK,CAAC,cAAc,CAAS,GAAqB;QAChD,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,IAAI,kDAAsB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IAQK,AAAN,KAAK,CAAC,eAAe,CAA6B,EAAU;QAC1D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QACpE,OAAO,IAAI,sDAAwB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;CACF,CAAA;AA/DY,kDAAmB;AAYxB;IANL,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,0BAA0B;QACnC,WAAW,EACT,iOAAiO;KACpO,CAAC;IACY,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;iDAiBvC;AAQK;IANL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,qCAAqC;QAC9C,WAAW,EACT,2bAA2b;KAC9b,CAAC;IACkB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,oCAAe;;uDAG9C;AAQK;IANL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,kDAAkD;QAC3D,WAAW,EACT,2HAA2H;KAC9H,CAAC;IACoB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,sCAAgB;;yDAGjD;AAQK;IANL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EACT,sTAAsT;KACzT,CAAC;IACqB,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;0DAGhD;8BA9DU,mBAAmB;IAJ/B,IAAA,iBAAO,EAAC,eAAe,CAAC;IACxB,IAAA,uBAAa,GAAE;IACf,IAAA,iBAAQ,EAAC,6CAAoB,CAAC;IAC9B,IAAA,mBAAU,EAAC,iBAAiB,CAAC;qCAGW,yCAAkB;QACnB,uCAAiB;GAH5C,mBAAmB,CA+D/B"}

package/dist/admin/controllers/system.role.controller.d.ts

@@ -1,6 +1,5 @@
 import { ListFilterService } from '../../common/services/list.filter.service';
 import { AdminAccessService } from '../services/admin.access.service';
-import { CommonParamsDto } from '../../common/dtos/common.params.dto';
 import { RoleService } from '../../auth/services/role.service';
 import { AddSystemRoleDto } from '../dtos/add.system.role.dto';
 import { RoleListDto } from '../dtos/role.list.dto';
@@ -12,7 +11,7 @@ export declare class SystemRoleController {
     constructor(adminAccessService: AdminAccessService, roleService: RoleService, listFilterService: ListFilterService);
     save(dto: AddSystemRoleDto): Promise<SystemRoleEntity>;
     list(dto: RoleListDto): Promise<import("../..").CommonListResult>;
-    detail({ id }: CommonParamsDto): Promise<SystemRoleEntity>;
-    remove({ id }: CommonParamsDto): Promise<import("../..").DeleteResult>;
+    detail(id: string): Promise<SystemRoleEntity>;
+    remove(id: string): Promise<import("../..").DeleteResult>;
 }
 //# sourceMappingURL=system.role.controller.d.ts.map

package/dist/admin/controllers/system.role.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"system.role.controller.d.ts","sourceRoot":"","sources":["../../../src/admin/controllers/system.role.controller.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAG/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAa1E,qBAGa,oBAAoB;IAE7B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBAFjB,kBAAkB,EAAE,kBAAkB,EACtC,WAAW,EAAE,WAAW,EACxB,iBAAiB,EAAE,iBAAiB;IASjD,IAAI,CAAS,GAAG,EAAE,gBAAgB;IAUlC,IAAI,CAAS,GAAG,EAAE,WAAW;IAU7B,MAAM,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe;IAevC,MAAM,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe;CAI9C"}
+{"version":3,"file":"system.role.controller.d.ts","sourceRoot":"","sources":["../../../src/admin/controllers/system.role.controller.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAQtE,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAG/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAc1E,qBAIa,oBAAoB;IAE7B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBAFjB,kBAAkB,EAAE,kBAAkB,EACtC,WAAW,EAAE,WAAW,EACxB,iBAAiB,EAAE,iBAAiB;IASjD,IAAI,CAAS,GAAG,EAAE,gBAAgB;IAUlC,IAAI,CAAS,GAAG,EAAE,WAAW;IAU7B,MAAM,CAA6B,EAAE,EAAE,MAAM;IAe7C,MAAM,CAA6B,EAAE,EAAE,MAAM;CAkBpD"}

package/dist/admin/controllers/system.role.controller.js

@@ -17,7 +17,13 @@ const common_1 = require("@nestjs/common");
 const swagger_1 = require("@nestjs/swagger");
 const list_filter_service_1 = require("../../common/services/list.filter.service");
 const admin_access_service_1 = require("../services/admin.access.service");
-const common_params_dto_1 = require("../../common/dtos/common.params.dto");
+const strict_validation_pipe_1 = require("../../common/pipes/strict.validation.pipe");
+const not_found_exception_1 = require("../../global/exceptions/not.found.exception");
+const operation_exception_1 = require("../../global/exceptions/operation.exception");
+const audit_action_enum_1 = require("../../common/enums/audit.action.enum");
+const entity_constants_1 = require("../../constants/entity.constants");
+const admin_audit_1 = require("../utilities/admin.audit");
+const tenant_role_policy_1 = require("../utilities/tenant.role.policy");
 const role_service_1 = require("../../auth/services/role.service");
 const system_role_data_processor_1 = require("../libraries/system.role.data.processor");
 const role_list_processor_1 = require("../libraries/role.list.processor");
@@ -31,23 +37,36 @@ let SystemRoleController = class SystemRoleController {
         this.listFilterService = listFilterService;
     }
     async save(dto) {
-        await this.adminAccessService.validateContentManager();
-        return new system_role_data_processor_1.SystemRoleDataProcessor().process(dto);
+        const access = await this.adminAccessService.validateAdmin();
+        return new system_role_data_processor_1.SystemRoleDataProcessor(access).process(dto);
     }
     async list(dto) {
         await this.adminAccessService.validateContentReader();
         return new role_list_processor_1.RoleListProcessor(this.listFilterService).process(dto);
     }
-    async detail({ id }) {
+    async detail(id) {
         await this.adminAccessService.validateContentReader();
         const role = await system_role_entity_1.SystemRoleEntity.findOne({ where: { id } });
         if (!role)
-            throw new common_1.NotFoundException('No role exists for this id');
+            throw new not_found_exception_1.NotFoundException('No role exists for this id');
         return role;
     }
-    async remove({ id }) {
-        const { user } = await this.adminAccessService.validateContentManager();
-        return this.roleService.deleteRole(id, user.id);
+    async remove(id) {
+        const { user } = await this.adminAccessService.validateSuperAdmin();
+        const role = await system_role_entity_1.SystemRoleEntity.findOne({ where: { id } });
+        if (!role)
+            throw new not_found_exception_1.NotFoundException('No role exists for this id');
+        if (tenant_role_policy_1.TenantRolePolicy.isReserved(role.identifier))
+            throw new operation_exception_1.OperationException('A reserved role cannot be deleted');
+        const result = await this.roleService.deleteRole(id, user.id);
+        await admin_audit_1.AdminAudit.record(system_role_entity_1.SystemRoleEntity.getRepository().manager, {
+            actor: user,
+            sourceType: entity_constants_1.baseEntityConstants.systemRole,
+            sourceId: id,
+            action: audit_action_enum_1.AuditAction.SOFT_DELETE,
+            oldValue: admin_audit_1.AdminAudit.pick(role, ['identifier', 'name', 'is_active']),
+        });
+        return result;
     }
 };
 exports.SystemRoleController = SystemRoleController;
@@ -55,7 +74,7 @@ __decorate([
     (0, common_1.Post)(),
     (0, swagger_1.ApiOperation)({
         summary: 'Define a role, or update an existing one.',
-        description: 'Send an `id` to edit that role; omit it to define a new one. `identifier` is what application code checks and is unique across the catalogue. Requires at least the global content manager role.',
+        description: 'Send an `id` to edit that role; omit it to define a new one. `identifier` is unique, fixed once created, and may not be a reserved identifier. Omitted optional fields keep their stored value. Requires at least the global admin role, and the global super admin role to change `is_active` of an existing role.',
     }),
     __param(0, (0, common_1.Body)()),
     __metadata("design:type", Function),
@@ -79,25 +98,26 @@ __decorate([
         summary: 'One role, in full.',
         description: 'Requires at least the global content reader role.',
     }),
-    __param(0, (0, common_1.Param)()),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [common_params_dto_1.CommonParamsDto]),
+    __metadata("design:paramtypes", [String]),
     __metadata("design:returntype", Promise)
 ], SystemRoleController.prototype, "detail", null);
 __decorate([
     (0, common_1.Delete)(':id'),
     (0, swagger_1.ApiOperation)({
         summary: 'Delete a role.',
-        description: 'Soft delete: the row keeps its data with `deleted_at` set and drops out of every listing. Every grant of it in `sys_user_roles` goes too, so no user keeps a role the catalogue no longer defines. Requires at least the global content manager role.',
+        description: 'Soft delete. Every grant of it in `sys_user_roles` goes too, across every tenant. Reserved roles cannot be deleted. Requires the global super admin role.',
     }),
-    __param(0, (0, common_1.Param)()),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [common_params_dto_1.CommonParamsDto]),
+    __metadata("design:paramtypes", [String]),
     __metadata("design:returntype", Promise)
 ], SystemRoleController.prototype, "remove", null);
 exports.SystemRoleController = SystemRoleController = __decorate([
     (0, swagger_1.ApiTags)('Admin - System Roles'),
     (0, swagger_1.ApiBearerAuth)(),
+    (0, common_1.UsePipes)(strict_validation_pipe_1.StrictValidationPipe),
     (0, common_1.Controller)('api/admin/system-roles'),
     __metadata("design:paramtypes", [admin_access_service_1.AdminAccessService,
         role_service_1.RoleService,

package/dist/admin/controllers/system.role.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"system.role.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/system.role.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAQwB;AACxB,6CAAuE;AACvE,mFAA8E;AAC9E,2EAAsE;AACtE,2EAAsE;AACtE,mEAA+D;AAC/D,wFAAkF;AAClF,0EAAqE;AACrE,qEAA+D;AAC/D,yDAAoD;AACpD,+EAA0E;AAgBnE,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAC/B,YACmB,kBAAsC,EACtC,WAAwB,EACxB,iBAAoC;QAFpC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,gBAAW,GAAX,WAAW,CAAa;QACxB,sBAAiB,GAAjB,iBAAiB,CAAmB;IACpD,CAAC;IAQE,AAAN,KAAK,CAAC,IAAI,CAAS,GAAqB;QACtC,MAAM,IAAI,CAAC,kBAAkB,CAAC,sBAAsB,EAAE,CAAC;QACvD,OAAO,IAAI,oDAAuB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpD,CAAC;IAOK,AAAN,KAAK,CAAC,IAAI,CAAS,GAAgB;QACjC,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,IAAI,uCAAiB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpE,CAAC;IAOK,AAAN,KAAK,CAAC,MAAM,CAAU,EAAE,EAAE,EAAmB;QAC3C,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QAEtD,MAAM,IAAI,GAAG,MAAM,qCAAgB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,0BAAiB,CAAC,4BAA4B,CAAC,CAAC;QAErE,OAAO,IAAI,CAAC;IACd,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAAU,EAAE,EAAE,EAAmB;QAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,sBAAsB,EAAE,CAAC;QACxE,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC;CACF,CAAA;AApDY,oDAAoB;AAazB;IANL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,2CAA2C;QACpD,WAAW,EACT,kMAAkM;KACrM,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,sCAAgB;;gDAGvC;AAOK;IALL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gCAAgC;QACzC,WAAW,EAAE,mDAAmD;KACjE,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,2BAAW;;gDAGlC;AAOK;IALL,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EAAE,mDAAmD;KACjE,CAAC;IACY,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;kDAO5C;AAQK;IANL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gBAAgB;QACzB,WAAW,EACT,uPAAuP;KAC1P,CAAC;IACY,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;kDAG5C;+BAnDU,oBAAoB;IAHhC,IAAA,iBAAO,EAAC,sBAAsB,CAAC;IAC/B,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,wBAAwB,CAAC;qCAGI,yCAAkB;QACzB,0BAAW;QACL,uCAAiB;GAJ5C,oBAAoB,CAoDhC"}
+{"version":3,"file":"system.role.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/system.role.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CASwB;AACxB,6CAAuE;AACvE,mFAA8E;AAC9E,2EAAsE;AACtE,sFAAiF;AACjF,qFAAgF;AAChF,qFAAiF;AACjF,4EAAmE;AACnE,uEAAuE;AACvE,0DAAsD;AACtD,wEAAmE;AACnE,mEAA+D;AAC/D,wFAAkF;AAClF,0EAAqE;AACrE,qEAA+D;AAC/D,yDAAoD;AACpD,+EAA0E;AAkBnE,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAC/B,YACmB,kBAAsC,EACtC,WAAwB,EACxB,iBAAoC;QAFpC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,gBAAW,GAAX,WAAW,CAAa;QACxB,sBAAiB,GAAjB,iBAAiB,CAAmB;IACpD,CAAC;IAQE,AAAN,KAAK,CAAC,IAAI,CAAS,GAAqB;QACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC7D,OAAO,IAAI,oDAAuB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC;IAOK,AAAN,KAAK,CAAC,IAAI,CAAS,GAAgB;QACjC,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,IAAI,uCAAiB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpE,CAAC;IAOK,AAAN,KAAK,CAAC,MAAM,CAA6B,EAAU;QACjD,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QAEtD,MAAM,IAAI,GAAG,MAAM,qCAAgB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,uCAAiB,CAAC,4BAA4B,CAAC,CAAC;QAErE,OAAO,IAAI,CAAC;IACd,CAAC;IAQK,AAAN,KAAK,CAAC,MAAM,CAA6B,EAAU;QACjD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QAEpE,MAAM,IAAI,GAAG,MAAM,qCAAgB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,uCAAiB,CAAC,4BAA4B,CAAC,CAAC;QACrE,IAAI,qCAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;YAC9C,MAAM,IAAI,wCAAkB,CAAC,mCAAmC,CAAC,CAAC;QAEpE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9D,MAAM,wBAAU,CAAC,MAAM,CAAC,qCAAgB,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE;YAChE,KAAK,EAAE,IAAI;YACX,UAAU,EAAE,sCAAmB,CAAC,UAAU;YAC1C,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,+BAAW,CAAC,WAAW;YAC/B,QAAQ,EAAE,wBAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;SACrE,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAA;AAlEY,oDAAoB;AAazB;IANL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,2CAA2C;QACpD,WAAW,EACT,qTAAqT;KACxT,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,sCAAgB;;gDAGvC;AAOK;IALL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gCAAgC;QACzC,WAAW,EAAE,mDAAmD;KACjE,CAAC;IACU,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,2BAAW;;gDAGlC;AAOK;IALL,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EAAE,mDAAmD;KACjE,CAAC;IACY,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;kDAOvC;AAQK;IANL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gBAAgB;QACzB,WAAW,EACT,2JAA2J;KAC9J,CAAC;IACY,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;kDAiBvC;+BAjEU,oBAAoB;IAJhC,IAAA,iBAAO,EAAC,sBAAsB,CAAC;IAC/B,IAAA,uBAAa,GAAE;IACf,IAAA,iBAAQ,EAAC,6CAAoB,CAAC;IAC9B,IAAA,mBAAU,EAAC,wBAAwB,CAAC;qCAGI,yCAAkB;QACzB,0BAAW;QACL,uCAAiB;GAJ5C,oBAAoB,CAkEhC"}

package/dist/admin/dtos/add.admin.user.dto.d.ts

@@ -5,5 +5,6 @@ export declare class AddAdminUserDto extends CommonDataDto {
     username: string;
     password?: string;
     role_ids: string[];
+    active?: boolean;
 }
 //# sourceMappingURL=add.admin.user.dto.d.ts.map

package/dist/admin/dtos/add.admin.user.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"add.admin.user.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.admin.user.dto.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAGlE,qBAAa,eAAgB,SAAQ,aAAa;IAIhD,IAAI,EAAE,MAAM,CAAC;IAKb,KAAK,EAAE,MAAM,CAAC;IAKd,QAAQ,EAAE,MAAM,CAAC;IAOjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAUlB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB"}
+{"version":3,"file":"add.admin.user.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.admin.user.dto.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAKlE,qBAAa,eAAgB,SAAQ,aAAa;IAKhD,IAAI,EAAE,MAAM,CAAC;IAKb,KAAK,EAAE,MAAM,CAAC;IAad,QAAQ,EAAE,MAAM,CAAC;IAWjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAYlB,QAAQ,EAAE,MAAM,EAAE,CAAC;IAQnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB"}

package/dist/admin/dtos/add.admin.user.dto.js

@@ -13,12 +13,15 @@ exports.AddAdminUserDto = void 0;
 const class_validator_1 = require("class-validator");
 const swagger_1 = require("@nestjs/swagger");
 const common_data_dto_1 = require("../../common/dtos/common.data.dto");
+const admin_default_enum_1 = require("../enums/admin.default.enum");
+const admin_patterns_1 = require("../validators/admin.patterns");
 class AddAdminUserDto extends common_data_dto_1.CommonDataDto {
 }
 exports.AddAdminUserDto = AddAdminUserDto;
 __decorate([
     (0, swagger_1.ApiProperty)({ example: 'Jane Doe' }),
     (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
     (0, class_validator_1.MaxLength)(255),
     __metadata("design:type", String)
 ], AddAdminUserDto.prototype, "name", void 0);
@@ -29,13 +32,24 @@ __decorate([
     __metadata("design:type", String)
 ], AddAdminUserDto.prototype, "email", void 0);
 __decorate([
-    (0, swagger_1.ApiProperty)({ example: 'jane.doe' }),
+    (0, swagger_1.ApiProperty)({
+        example: 'jane.doe',
+        description: 'Letters, digits, dots, hyphens and underscores; never an email.',
+    }),
     (0, class_validator_1.IsString)(),
-    (0, class_validator_1.MaxLength)(255),
+    (0, class_validator_1.MinLength)(3),
+    (0, class_validator_1.MaxLength)(100),
+    (0, class_validator_1.Matches)(admin_patterns_1.USERNAME_PATTERN, {
+        message: 'username may only contain letters, digits, dots, hyphens and underscores',
+    }),
     __metadata("design:type", String)
 ], AddAdminUserDto.prototype, "username", void 0);
 __decorate([
-    (0, swagger_1.ApiProperty)({ example: 'S3curePass!', minLength: 8 }),
+    (0, swagger_1.ApiPropertyOptional)({
+        example: 'S3curePass!',
+        minLength: 8,
+        description: 'Required on create, ignored on edit.',
+    }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.MinLength)(8),
@@ -46,11 +60,20 @@ __decorate([
     (0, swagger_1.ApiProperty)({
         type: [String],
         format: 'uuid',
-        description: 'sys_admin_roles UUIDs to grant the admin user.',
+        description: 'sys_admin_roles UUIDs the admin holds after the save; a role left out is revoked.',
     }),
     (0, class_validator_1.IsArray)(),
     (0, class_validator_1.ArrayMinSize)(1),
+    (0, class_validator_1.ArrayMaxSize)(admin_default_enum_1.AdminLimit.MAX_ID_ARRAY),
     (0, class_validator_1.IsUUID)('all', { each: true }),
     __metadata("design:type", Array)
 ], AddAdminUserDto.prototype, "role_ids", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'false suspends the account and revokes its sessions. Omitted keeps the stored value.',
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], AddAdminUserDto.prototype, "active", void 0);
 //# sourceMappingURL=add.admin.user.dto.js.map