@neohm/nestend 4.1.1 → 5.0.1

package/dist/admin/dtos/add.admin.user.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"add.admin.user.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.admin.user.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAUyB;AACzB,6CAA8C;AAC9C,uEAAkE;AAGlE,MAAa,eAAgB,SAAQ,+BAAa;CAgCjD;AAhCD,0CAgCC;AA5BC;IAHC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACpC,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;6CACF;AAKb;IAHC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC5C,IAAA,yBAAO,GAAE;IACT,IAAA,2BAAS,EAAC,GAAG,CAAC;;8CACD;AAKd;IAHC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACpC,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;iDACE;AAOjB;IALC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACrD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,CAAC,CAAC;IACZ,IAAA,2BAAS,EAAC,EAAE,CAAC;;iDACI;AAUlB;IARC,IAAA,qBAAW,EAAC;QACX,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,gDAAgD;KAC9D,CAAC;IACD,IAAA,yBAAO,GAAE;IACT,IAAA,8BAAY,EAAC,CAAC,CAAC;IACf,IAAA,wBAAM,EAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;iDACX"}
+{"version":3,"file":"add.admin.user.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.admin.user.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAayB;AACzB,6CAAmE;AACnE,uEAAkE;AAClE,oEAAyD;AACzD,iEAAgE;AAGhE,MAAa,eAAgB,SAAQ,+BAAa;CAuDjD;AAvDD,0CAuDC;AAlDC;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACpC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;6CACF;AAKb;IAHC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC5C,IAAA,yBAAO,GAAE;IACT,IAAA,2BAAS,EAAC,GAAG,CAAC;;8CACD;AAad;IAXC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,UAAU;QACnB,WAAW,EAAE,iEAAiE;KAC/E,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,CAAC,CAAC;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,iCAAgB,EAAE;QACzB,OAAO,EACL,0EAA0E;KAC7E,CAAC;;iDACe;AAWjB;IATC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,CAAC;QACZ,WAAW,EAAE,sCAAsC;KACpD,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,CAAC,CAAC;IACZ,IAAA,2BAAS,EAAC,EAAE,CAAC;;iDACI;AAYlB;IAVC,IAAA,qBAAW,EAAC;QACX,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,MAAM;QACd,WAAW,EACT,mFAAmF;KACtF,CAAC;IACD,IAAA,yBAAO,GAAE;IACT,IAAA,8BAAY,EAAC,CAAC,CAAC;IACf,IAAA,8BAAY,EAAC,+BAAU,CAAC,YAAY,CAAC;IACrC,IAAA,wBAAM,EAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;iDACX;AAQnB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,sFAAsF;KACzF,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;+CACK"}

package/dist/admin/dtos/add.api.key.dto.d.ts

@@ -1,7 +1,7 @@
 export declare class AddApiKeyDto {
     name: string;
     tenant_id: string;
-    scope_ids: string[];
+    scope_ids?: string[];
     expires_at?: string;
 }
 //# sourceMappingURL=add.api.key.dto.d.ts.map

package/dist/admin/dtos/add.api.key.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"add.api.key.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.api.key.dto.ts"],"names":[],"mappings":"AAgBA,qBAAa,YAAY;IAKvB,IAAI,EAAE,MAAM,CAAC;IAQb,SAAS,EAAE,MAAM,CAAC;IAYlB,SAAS,EAAE,MAAM,EAAE,CAAC;IAQpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}
+{"version":3,"file":"add.api.key.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.api.key.dto.ts"],"names":[],"mappings":"AAgBA,qBAAa,YAAY;IAKvB,IAAI,EAAE,MAAM,CAAC;IAQb,SAAS,EAAE,MAAM,CAAC;IAalB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IASrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}

package/dist/admin/dtos/add.api.key.dto.js

@@ -12,6 +12,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AddApiKeyDto = void 0;
 const class_validator_1 = require("class-validator");
 const swagger_1 = require("@nestjs/swagger");
+const admin_default_enum_1 = require("../enums/admin.default.enum");
+const admin_validators_1 = require("../validators/admin.validators");
 class AddApiKeyDto {
 }
 exports.AddApiKeyDto = AddApiKeyDto;
@@ -40,16 +42,18 @@ __decorate([
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsArray)(),
     (0, class_validator_1.ArrayMinSize)(1),
+    (0, class_validator_1.ArrayMaxSize)(admin_default_enum_1.AdminLimit.MAX_ID_ARRAY),
     (0, class_validator_1.IsUUID)('all', { each: true }),
     __metadata("design:type", Array)
 ], AddApiKeyDto.prototype, "scope_ids", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
-        description: 'When the key stops working (ISO 8601).',
+        description: `When the key stops working (ISO 8601). Must be in the future and at most ${admin_default_enum_1.AdminLimit.API_KEY_MAX_TTL_DAYS} days ahead; defaults to ${admin_default_enum_1.AdminLimit.API_KEY_DEFAULT_TTL_DAYS} days.`,
         example: '2027-01-01T00:00:00.000Z',
     }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsISO8601)(),
+    (0, admin_validators_1.IsFutureDate)(),
     __metadata("design:type", String)
 ], AddApiKeyDto.prototype, "expires_at", void 0);
 //# sourceMappingURL=add.api.key.dto.js.map

package/dist/admin/dtos/add.api.key.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"add.api.key.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.api.key.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDASyB;AACzB,6CAAmE;AAMnE,MAAa,YAAY;CAkCxB;AAlCD,oCAkCC;AA7BC;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IACvC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;0CACF;AAQb;IANC,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,wCAAwC;KACtD,CAAC;IACD,IAAA,wBAAM,GAAE;IACR,IAAA,4BAAU,GAAE;;+CACK;AAYlB;IAVC,IAAA,6BAAmB,EAAC;QACnB,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,MAAM;QACd,WAAW,EACT,yEAAyE;KAC5E,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,GAAE;IACT,IAAA,8BAAY,EAAC,CAAC,CAAC;IACf,IAAA,wBAAM,EAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;+CACV;AAQpB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,wCAAwC;QACrD,OAAO,EAAE,0BAA0B;KACpC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;gDACQ"}
+{"version":3,"file":"add.api.key.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.api.key.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAUyB;AACzB,6CAAmE;AACnE,oEAAyD;AACzD,qEAA8D;AAG9D,MAAa,YAAY;CAoCxB;AApCD,oCAoCC;AA/BC;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IACvC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;0CACF;AAQb;IANC,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,wCAAwC;KACtD,CAAC;IACD,IAAA,wBAAM,GAAE;IACR,IAAA,4BAAU,GAAE;;+CACK;AAalB;IAXC,IAAA,6BAAmB,EAAC;QACnB,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,MAAM;QACd,WAAW,EACT,yEAAyE;KAC5E,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,GAAE;IACT,IAAA,8BAAY,EAAC,CAAC,CAAC;IACf,IAAA,8BAAY,EAAC,+BAAU,CAAC,YAAY,CAAC;IACrC,IAAA,wBAAM,EAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;+CACT;AASrB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,4EAA4E,+BAAU,CAAC,oBAAoB,4BAA4B,+BAAU,CAAC,wBAAwB,QAAQ;QAC/L,OAAO,EAAE,0BAA0B;KACpC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;IACX,IAAA,+BAAY,GAAE;;gDACK"}

package/dist/admin/dtos/add.bulk.users.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"add.bulk.users.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.bulk.users.dto.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAG9C,qBAAa,eAAgB,SAAQ,WAAW;CAAG;AAGnD,qBAAa,eAAe;IAI1B,SAAS,EAAE,MAAM,CAAC;IAQlB,KAAK,EAAE,eAAe,EAAE,CAAC;CAC1B"}
+{"version":3,"file":"add.bulk.users.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.bulk.users.dto.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAI9C,qBAAa,eAAgB,SAAQ,WAAW;CAAG;AAGnD,qBAAa,eAAe;IAI1B,SAAS,EAAE,MAAM,CAAC;IAWlB,KAAK,EAAE,eAAe,EAAE,CAAC;CAC1B"}

package/dist/admin/dtos/add.bulk.users.dto.js

@@ -14,6 +14,7 @@ const class_transformer_1 = require("class-transformer");
 const class_validator_1 = require("class-validator");
 const swagger_1 = require("@nestjs/swagger");
 const base_user_dto_1 = require("./base.user.dto");
+const admin_default_enum_1 = require("../enums/admin.default.enum");
 class BulkUserItemDto extends base_user_dto_1.BaseUserDto {
 }
 exports.BulkUserItemDto = BulkUserItemDto;
@@ -27,10 +28,13 @@ __decorate([
     __metadata("design:type", String)
 ], AddBulkUsersDto.prototype, "tenant_id", void 0);
 __decorate([
-    (0, swagger_1.ApiProperty)({ type: [BulkUserItemDto] }),
+    (0, swagger_1.ApiProperty)({
+        type: [BulkUserItemDto],
+        maxItems: admin_default_enum_1.AdminLimit.MAX_BULK_USERS,
+    }),
     (0, class_validator_1.IsArray)(),
     (0, class_validator_1.ArrayMinSize)(1),
-    (0, class_validator_1.ArrayMaxSize)(500),
+    (0, class_validator_1.ArrayMaxSize)(admin_default_enum_1.AdminLimit.MAX_BULK_USERS),
     (0, class_validator_1.ValidateNested)({ each: true }),
     (0, class_transformer_1.Type)(() => BulkUserItemDto),
     __metadata("design:type", Array)

package/dist/admin/dtos/add.bulk.users.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"add.bulk.users.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.bulk.users.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yDAAyC;AACzC,qDAOyB;AACzB,6CAA8C;AAC9C,mDAA8C;AAG9C,MAAa,eAAgB,SAAQ,2BAAW;CAAG;AAAnD,0CAAmD;AAGnD,MAAa,eAAe;CAa3B;AAbD,0CAaC;AATC;IAHC,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;IAC3E,IAAA,wBAAM,GAAE;IACR,IAAA,4BAAU,GAAE;;kDACK;AAQlB;IANC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC;IACxC,IAAA,yBAAO,GAAE;IACT,IAAA,8BAAY,EAAC,CAAC,CAAC;IACf,IAAA,8BAAY,EAAC,GAAG,CAAC;IACjB,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,eAAe,CAAC;;8CACH"}
+{"version":3,"file":"add.bulk.users.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.bulk.users.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yDAAyC;AACzC,qDAOyB;AACzB,6CAA8C;AAC9C,mDAA8C;AAC9C,oEAAyD;AAGzD,MAAa,eAAgB,SAAQ,2BAAW;CAAG;AAAnD,0CAAmD;AAGnD,MAAa,eAAe;CAgB3B;AAhBD,0CAgBC;AAZC;IAHC,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;IAC3E,IAAA,wBAAM,GAAE;IACR,IAAA,4BAAU,GAAE;;kDACK;AAWlB;IATC,IAAA,qBAAW,EAAC;QACX,IAAI,EAAE,CAAC,eAAe,CAAC;QACvB,QAAQ,EAAE,+BAAU,CAAC,cAAwB;KAC9C,CAAC;IACD,IAAA,yBAAO,GAAE;IACT,IAAA,8BAAY,EAAC,CAAC,CAAC;IACf,IAAA,8BAAY,EAAC,+BAAU,CAAC,cAAc,CAAC;IACvC,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,eAAe,CAAC;;8CACH"}

package/dist/admin/dtos/add.client.membership.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"add.client.membership.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.client.membership.dto.ts"],"names":[],"mappings":"AAIA,qBAAa,sBAAsB;IAIjC,OAAO,EAAE,MAAM,CAAC;IAKhB,SAAS,EAAE,MAAM,CAAC;IAUlB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB"}
+{"version":3,"file":"add.client.membership.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.client.membership.dto.ts"],"names":[],"mappings":"AAWA,qBAAa,sBAAsB;IAIjC,OAAO,EAAE,MAAM,CAAC;IAKhB,SAAS,EAAE,MAAM,CAAC;IAalB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB"}

package/dist/admin/dtos/add.client.membership.dto.js

@@ -12,6 +12,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AddClientMembershipDto = void 0;
 const class_validator_1 = require("class-validator");
 const swagger_1 = require("@nestjs/swagger");
+const admin_default_enum_1 = require("../enums/admin.default.enum");
 class AddClientMembershipDto {
 }
 exports.AddClientMembershipDto = AddClientMembershipDto;
@@ -31,10 +32,12 @@ __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         type: [String],
         format: 'uuid',
-        description: 'sys_roles uuids granted in that tenant.',
+        maxItems: admin_default_enum_1.AdminLimit.MAX_ID_ARRAY,
+        description: 'sys_roles uuids granted in that tenant. A privileged role needs super admin.',
     }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMaxSize)(admin_default_enum_1.AdminLimit.MAX_ID_ARRAY),
     (0, class_validator_1.IsUUID)('all', { each: true }),
     __metadata("design:type", Array)
 ], AddClientMembershipDto.prototype, "role_ids", void 0);

package/dist/admin/dtos/add.client.membership.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"add.client.membership.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.client.membership.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAA0E;AAC1E,6CAAmE;AAGnE,MAAa,sBAAsB;CAoBlC;AApBD,wDAoBC;AAhBC;IAHC,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC/B,IAAA,wBAAM,GAAE;IACR,IAAA,4BAAU,GAAE;;uDACG;AAKhB;IAHC,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;IACtE,IAAA,wBAAM,GAAE;IACR,IAAA,4BAAU,GAAE;;yDACK;AAUlB;IARC,IAAA,6BAAmB,EAAC;QACnB,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,yCAAyC;KACvD,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,GAAE;IACT,IAAA,wBAAM,EAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;wDACV"}
+{"version":3,"file":"add.client.membership.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.client.membership.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAMyB;AACzB,6CAAmE;AACnE,oEAAyD;AAGzD,MAAa,sBAAsB;CAuBlC;AAvBD,wDAuBC;AAnBC;IAHC,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC/B,IAAA,wBAAM,GAAE;IACR,IAAA,4BAAU,GAAE;;uDACG;AAKhB;IAHC,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;IACtE,IAAA,wBAAM,GAAE;IACR,IAAA,4BAAU,GAAE;;yDACK;AAalB;IAXC,IAAA,6BAAmB,EAAC;QACnB,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,+BAAU,CAAC,YAAsB;QAC3C,WAAW,EACT,8EAA8E;KACjF,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,GAAE;IACT,IAAA,8BAAY,EAAC,+BAAU,CAAC,YAAY,CAAC;IACrC,IAAA,wBAAM,EAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;wDACV"}

package/dist/admin/dtos/add.client.user.dto.d.ts

@@ -1,6 +1,6 @@
 import { BaseUserDto } from './base.user.dto';
 export declare class AddClientUserDto extends BaseUserDto {
     tenant_id: string;
-    role_ids: string[];
+    role_ids?: string[];
 }
 //# sourceMappingURL=add.client.user.dto.d.ts.map

package/dist/admin/dtos/add.client.user.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"add.client.user.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.client.user.dto.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAG9C,qBAAa,gBAAiB,SAAQ,WAAW;IAI/C,SAAS,EAAE,MAAM,CAAC;IAWlB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB"}
+{"version":3,"file":"add.client.user.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.client.user.dto.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAI9C,qBAAa,gBAAiB,SAAQ,WAAW;IAI/C,SAAS,EAAE,MAAM,CAAC;IAclB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB"}

package/dist/admin/dtos/add.client.user.dto.js

@@ -13,6 +13,7 @@ exports.AddClientUserDto = void 0;
 const class_validator_1 = require("class-validator");
 const swagger_1 = require("@nestjs/swagger");
 const base_user_dto_1 = require("./base.user.dto");
+const admin_default_enum_1 = require("../enums/admin.default.enum");
 class AddClientUserDto extends base_user_dto_1.BaseUserDto {
 }
 exports.AddClientUserDto = AddClientUserDto;
@@ -23,14 +24,16 @@ __decorate([
     __metadata("design:type", String)
 ], AddClientUserDto.prototype, "tenant_id", void 0);
 __decorate([
-    (0, swagger_1.ApiProperty)({
+    (0, swagger_1.ApiPropertyOptional)({
         type: [String],
         format: 'uuid',
-        description: 'sys_roles uuids, roles to be granted to a client user',
+        maxItems: admin_default_enum_1.AdminLimit.MAX_ID_ARRAY,
+        description: 'sys_roles uuids granted in `tenant_id`. On an edit the list replaces that tenant\'s grants; omitted keeps them. A privileged role needs super admin.',
     }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsArray)(),
     (0, class_validator_1.ArrayMinSize)(1),
+    (0, class_validator_1.ArrayMaxSize)(admin_default_enum_1.AdminLimit.MAX_ID_ARRAY),
     (0, class_validator_1.IsUUID)('all', { each: true }),
     __metadata("design:type", Array)
 ], AddClientUserDto.prototype, "role_ids", void 0);

package/dist/admin/dtos/add.client.user.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"add.client.user.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.client.user.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAMyB;AACzB,6CAA8C;AAC9C,mDAA8C;AAG9C,MAAa,gBAAiB,SAAQ,2BAAW;CAgBhD;AAhBD,4CAgBC;AAZC;IAHC,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;IAC3E,IAAA,wBAAM,GAAE;IACR,IAAA,4BAAU,GAAE;;mDACK;AAWlB;IATC,IAAA,qBAAW,EAAC;QACX,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,uDAAuD;KACrE,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,GAAE;IACT,IAAA,8BAAY,EAAC,CAAC,CAAC;IACf,IAAA,wBAAM,EAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;kDACX"}
+{"version":3,"file":"add.client.user.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.client.user.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AACzB,6CAAmE;AACnE,mDAA8C;AAC9C,oEAAyD;AAGzD,MAAa,gBAAiB,SAAQ,2BAAW;CAmBhD;AAnBD,4CAmBC;AAfC;IAHC,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;IAC3E,IAAA,wBAAM,GAAE;IACR,IAAA,4BAAU,GAAE;;mDACK;AAclB;IAZC,IAAA,6BAAmB,EAAC;QACnB,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,+BAAU,CAAC,YAAsB;QAC3C,WAAW,EACT,sJAAsJ;KACzJ,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,GAAE;IACT,IAAA,8BAAY,EAAC,CAAC,CAAC;IACf,IAAA,8BAAY,EAAC,+BAAU,CAAC,YAAY,CAAC;IACrC,IAAA,wBAAM,EAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;kDACV"}

package/dist/admin/dtos/add.email.template.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"add.email.template.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.email.template.dto.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AASlE,qBAAa,mBAAoB,SAAQ,aAAa;IAapD,UAAU,EAAE,MAAM,CAAC;IAMnB,WAAW,EAAE,MAAM,CAAC;IAcpB,IAAI,CAAC,EAAE,MAAM,CAAC;IASd,OAAO,EAAE,MAAM,CAAC;IAKhB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC"}
+{"version":3,"file":"add.email.template.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.email.template.dto.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAclE,qBAAa,mBAAoB,SAAQ,aAAa;IAapD,UAAU,EAAE,MAAM,CAAC;IAMnB,WAAW,EAAE,MAAM,CAAC;IAcpB,IAAI,CAAC,EAAE,MAAM,CAAC;IASd,OAAO,EAAE,MAAM,CAAC;IAMhB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC"}

package/dist/admin/dtos/add.email.template.dto.js

@@ -13,19 +13,21 @@ exports.AddEmailTemplateDto = void 0;
 const class_validator_1 = require("class-validator");
 const swagger_1 = require("@nestjs/swagger");
 const common_data_dto_1 = require("../../common/dtos/common.data.dto");
+const admin_validators_1 = require("../validators/admin.validators");
+const admin_patterns_1 = require("../validators/admin.patterns");
 class AddEmailTemplateDto extends common_data_dto_1.CommonDataDto {
 }
 exports.AddEmailTemplateDto = AddEmailTemplateDto;
 __decorate([
     (0, swagger_1.ApiProperty)({
         example: 'tenant-onboarded',
-        description: 'Template key the sending code names, and the last segment of the render URL. Unique across the catalogue.',
+        description: 'Template key the sending code names, and the last segment of the render URL. Unique across the catalogue and fixed once created.',
     }),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsNotEmpty)(),
     (0, class_validator_1.MaxLength)(255),
-    (0, class_validator_1.Matches)(/^[a-z0-9._-]+$/, {
-        message: 'identifier may only contain lowercase letters, digits, dots, hyphens and underscores',
+    (0, class_validator_1.Matches)(admin_patterns_1.TEMPLATE_IDENTIFIER_PATTERN, {
+        message: 'identifier may only contain lowercase letters, digits, hyphens and underscores, separated by single dots',
     }),
     __metadata("design:type", String)
 ], AddEmailTemplateDto.prototype, "identifier", void 0);
@@ -39,13 +41,13 @@ __decorate([
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         example: 'v1/auth/',
-        description: 'Path segment between the base url and the identifier. Include the trailing slash — the render URL is a plain concatenation.',
+        description: 'Path between the base url and the identifier, as `segment/` parts with a trailing slash. No leading slash, no `.` or `..` segments.',
     }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.MaxLength)(255),
-    (0, class_validator_1.Matches)(/^[a-zA-Z0-9._\-/]*$/, {
-        message: 'path may only contain letters, digits, dots, hyphens, underscores and slashes',
+    (0, class_validator_1.Matches)(admin_patterns_1.TEMPLATE_PATH_PATTERN, {
+        message: 'path must be zero or more "segment/" parts (letters, digits, dots, hyphens, underscores); "." and ".." segments are not allowed',
     }),
     __metadata("design:type", String)
 ], AddEmailTemplateDto.prototype, "path", void 0);
@@ -63,6 +65,7 @@ __decorate([
     (0, swagger_1.ApiPropertyOptional)({ type: 'object', additionalProperties: true }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsObject)(),
+    (0, admin_validators_1.MaxJsonSize)(),
     __metadata("design:type", Object)
 ], AddEmailTemplateDto.prototype, "attributes", void 0);
 //# sourceMappingURL=add.email.template.dto.js.map

package/dist/admin/dtos/add.email.template.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"add.email.template.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.email.template.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AACzB,6CAAmE;AACnE,uEAAkE;AASlE,MAAa,mBAAoB,SAAQ,+BAAa;CAgDrD;AAhDD,kDAgDC;AAnCC;IAZC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EACT,2GAA2G;KAC9G,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,gBAAgB,EAAE;QACzB,OAAO,EACL,sFAAsF;KACzF,CAAC;;uDACiB;AAMnB;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;IACzE,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;wDACK;AAcpB;IAZC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,UAAU;QACnB,WAAW,EACT,6HAA6H;KAChI,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,qBAAqB,EAAE;QAC9B,OAAO,EACL,+EAA+E;KAClF,CAAC;;iDACY;AASd;IAPC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,iBAAiB;QAC1B,WAAW,EAAE,iDAAiD;KAC/D,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;oDACC;AAKhB;IAHC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;IACnE,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;uDAC0B"}
+{"version":3,"file":"add.email.template.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.email.template.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AACzB,6CAAmE;AACnE,uEAAkE;AAClE,qEAA6D;AAC7D,iEAGsC;AAStC,MAAa,mBAAoB,SAAQ,+BAAa;CAiDrD;AAjDD,kDAiDC;AApCC;IAZC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EACT,kIAAkI;KACrI,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,4CAA2B,EAAE;QACpC,OAAO,EACL,0GAA0G;KAC7G,CAAC;;uDACiB;AAMnB;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;IACzE,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;wDACK;AAcpB;IAZC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,UAAU;QACnB,WAAW,EACT,qIAAqI;KACxI,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,sCAAqB,EAAE;QAC9B,OAAO,EACL,iIAAiI;KACpI,CAAC;;iDACY;AASd;IAPC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,iBAAiB;QAC1B,WAAW,EAAE,iDAAiD;KAC/D,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;oDACC;AAMhB;IAJC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;IACnE,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,8BAAW,GAAE;;uDACuB"}

package/dist/admin/dtos/add.pdf.template.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"add.pdf.template.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.pdf.template.dto.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AASlE,qBAAa,iBAAkB,SAAQ,aAAa;IAalD,UAAU,EAAE,MAAM,CAAC;IAMnB,WAAW,EAAE,MAAM,CAAC;IAcpB,IAAI,CAAC,EAAE,MAAM,CAAC;IAKd,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC"}
+{"version":3,"file":"add.pdf.template.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.pdf.template.dto.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAclE,qBAAa,iBAAkB,SAAQ,aAAa;IAalD,UAAU,EAAE,MAAM,CAAC;IAMnB,WAAW,EAAE,MAAM,CAAC;IAcpB,IAAI,CAAC,EAAE,MAAM,CAAC;IAMd,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC"}

package/dist/admin/dtos/add.pdf.template.dto.js

@@ -13,19 +13,21 @@ exports.AddPdfTemplateDto = void 0;
 const class_validator_1 = require("class-validator");
 const swagger_1 = require("@nestjs/swagger");
 const common_data_dto_1 = require("../../common/dtos/common.data.dto");
+const admin_validators_1 = require("../validators/admin.validators");
+const admin_patterns_1 = require("../validators/admin.patterns");
 class AddPdfTemplateDto extends common_data_dto_1.CommonDataDto {
 }
 exports.AddPdfTemplateDto = AddPdfTemplateDto;
 __decorate([
     (0, swagger_1.ApiProperty)({
         example: 'summary-report',
-        description: 'Template key the generating code names, and the last segment of the render URL. Unique across the catalogue.',
+        description: 'Template key the generating code names, and the last segment of the render URL. Unique across the catalogue and fixed once created.',
     }),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsNotEmpty)(),
     (0, class_validator_1.MaxLength)(255),
-    (0, class_validator_1.Matches)(/^[a-z0-9._-]+$/, {
-        message: 'identifier may only contain lowercase letters, digits, dots, hyphens and underscores',
+    (0, class_validator_1.Matches)(admin_patterns_1.TEMPLATE_IDENTIFIER_PATTERN, {
+        message: 'identifier may only contain lowercase letters, digits, hyphens and underscores, separated by single dots',
     }),
     __metadata("design:type", String)
 ], AddPdfTemplateDto.prototype, "identifier", void 0);
@@ -39,13 +41,13 @@ __decorate([
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         example: 'v1/business/',
-        description: 'Path segment between the base url and the identifier. Include the trailing slash — the render URL is a plain concatenation.',
+        description: 'Path between the base url and the identifier, as `segment/` parts with a trailing slash. No leading slash, no `.` or `..` segments.',
     }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.MaxLength)(255),
-    (0, class_validator_1.Matches)(/^[a-zA-Z0-9._\-/]*$/, {
-        message: 'path may only contain letters, digits, dots, hyphens, underscores and slashes',
+    (0, class_validator_1.Matches)(admin_patterns_1.TEMPLATE_PATH_PATTERN, {
+        message: 'path must be zero or more "segment/" parts (letters, digits, dots, hyphens, underscores); "." and ".." segments are not allowed',
     }),
     __metadata("design:type", String)
 ], AddPdfTemplateDto.prototype, "path", void 0);
@@ -53,6 +55,7 @@ __decorate([
     (0, swagger_1.ApiPropertyOptional)({ type: 'object', additionalProperties: true }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsObject)(),
+    (0, admin_validators_1.MaxJsonSize)(),
     __metadata("design:type", Object)
 ], AddPdfTemplateDto.prototype, "attributes", void 0);
 //# sourceMappingURL=add.pdf.template.dto.js.map

package/dist/admin/dtos/add.pdf.template.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"add.pdf.template.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.pdf.template.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AACzB,6CAAmE;AACnE,uEAAkE;AASlE,MAAa,iBAAkB,SAAQ,+BAAa;CAuCnD;AAvCD,8CAuCC;AA1BC;IAZC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,gBAAgB;QACzB,WAAW,EACT,8GAA8G;KACjH,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,gBAAgB,EAAE;QACzB,OAAO,EACL,sFAAsF;KACzF,CAAC;;qDACiB;AAMnB;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;IAClE,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;sDACK;AAcpB;IAZC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,cAAc;QACvB,WAAW,EACT,6HAA6H;KAChI,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,qBAAqB,EAAE;QAC9B,OAAO,EACL,+EAA+E;KAClF,CAAC;;+CACY;AAKd;IAHC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;IACnE,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;qDAC0B"}
+{"version":3,"file":"add.pdf.template.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.pdf.template.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AACzB,6CAAmE;AACnE,uEAAkE;AAClE,qEAA6D;AAC7D,iEAGsC;AAStC,MAAa,iBAAkB,SAAQ,+BAAa;CAwCnD;AAxCD,8CAwCC;AA3BC;IAZC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,gBAAgB;QACzB,WAAW,EACT,qIAAqI;KACxI,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,4CAA2B,EAAE;QACpC,OAAO,EACL,0GAA0G;KAC7G,CAAC;;qDACiB;AAMnB;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;IAClE,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;sDACK;AAcpB;IAZC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,cAAc;QACvB,WAAW,EACT,qIAAqI;KACxI,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,sCAAqB,EAAE;QAC9B,OAAO,EACL,iIAAiI;KACpI,CAAC;;+CACY;AAMd;IAJC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;IACnE,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,8BAAW,GAAE;;qDACuB"}

package/dist/admin/dtos/add.scheduled.task.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"add.scheduled.task.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.scheduled.task.dto.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EACL,aAAa,EACb,aAAa,EAEb,YAAY,EACb,MAAM,kCAAkC,CAAC;AAW1C,qBAAa,WAAW;IAGtB,IAAI,EAAE,YAAY,CAAC;IAOnB,GAAG,CAAC,EAAE,MAAM,CAAC;IAOb,IAAI,CAAC,EAAE,MAAM,CAAC;IAOd,GAAG,CAAC,EAAE,MAAM,CAAC;IAOb,GAAG,CAAC,EAAE,MAAM,CAAC;IASb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAOD,qBAAa,mBAAoB,SAAQ,aAAa;IAQpD,UAAU,EAAE,MAAM,CAAC;IAMnB,IAAI,EAAE,MAAM,CAAC;IASb,UAAU,CAAC,EAAE,MAAM,CAAC;IAUpB,QAAQ,EAAE,WAAW,CAAC;IAStB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAQlB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAUlC,eAAe,CAAC,EAAE,aAAa,CAAC;IAUhC,WAAW,CAAC,EAAE,MAAM,CAAC;IAKrB,cAAc,CAAC,EAAE,aAAa,CAAC;IAU/B,UAAU,CAAC,EAAE,MAAM,CAAC;IAKpB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB"}
+{"version":3,"file":"add.scheduled.task.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.scheduled.task.dto.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EACL,aAAa,EACb,aAAa,EAEb,YAAY,EACb,MAAM,kCAAkC,CAAC;AAa1C,qBAAa,WAAW;IAGtB,IAAI,EAAE,YAAY,CAAC;IAQnB,GAAG,CAAC,EAAE,MAAM,CAAC;IAQb,IAAI,CAAC,EAAE,MAAM,CAAC;IAQd,GAAG,CAAC,EAAE,MAAM,CAAC;IAQb,GAAG,CAAC,EAAE,MAAM,CAAC;IAWb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAOD,qBAAa,mBAAoB,SAAQ,aAAa;IASpD,UAAU,EAAE,MAAM,CAAC;IAMnB,IAAI,EAAE,MAAM,CAAC;IASb,UAAU,CAAC,EAAE,MAAM,CAAC;IAUpB,QAAQ,EAAE,WAAW,CAAC;IAUtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAUlB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAUlC,eAAe,CAAC,EAAE,aAAa,CAAC;IAYhC,WAAW,CAAC,EAAE,MAAM,CAAC;IAKrB,cAAc,CAAC,EAAE,aAAa,CAAC;IAY/B,UAAU,CAAC,EAAE,MAAM,CAAC;IAKpB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB"}

package/dist/admin/dtos/add.scheduled.task.dto.js

@@ -16,6 +16,8 @@ const swagger_1 = require("@nestjs/swagger");
 const common_data_dto_1 = require("../../common/dtos/common.data.dto");
 const schedule_enum_1 = require("../../common/enums/schedule.enum");
 const schedule_validator_1 = require("../../common/validators/schedule.validator");
+const admin_default_enum_1 = require("../enums/admin.default.enum");
+const admin_validators_1 = require("../validators/admin.validators");
 class ScheduleDto {
 }
 exports.ScheduleDto = ScheduleDto;
@@ -30,6 +32,7 @@ __decorate([
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsInt)(),
     (0, class_validator_1.Min)(0),
+    (0, class_validator_1.Max)(admin_default_enum_1.AdminLimit.MAX_INTERVAL_PART),
     __metadata("design:type", Number)
 ], ScheduleDto.prototype, "day", void 0);
 __decorate([
@@ -38,6 +41,7 @@ __decorate([
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsInt)(),
     (0, class_validator_1.Min)(0),
+    (0, class_validator_1.Max)(admin_default_enum_1.AdminLimit.MAX_INTERVAL_PART),
     __metadata("design:type", Number)
 ], ScheduleDto.prototype, "hour", void 0);
 __decorate([
@@ -46,6 +50,7 @@ __decorate([
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsInt)(),
     (0, class_validator_1.Min)(0),
+    (0, class_validator_1.Max)(admin_default_enum_1.AdminLimit.MAX_INTERVAL_PART),
     __metadata("design:type", Number)
 ], ScheduleDto.prototype, "min", void 0);
 __decorate([
@@ -54,15 +59,17 @@ __decorate([
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsInt)(),
     (0, class_validator_1.Min)(0),
+    (0, class_validator_1.Max)(admin_default_enum_1.AdminLimit.MAX_INTERVAL_PART),
     __metadata("design:type", Number)
 ], ScheduleDto.prototype, "sec", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
-        description: 'Required when kind is cron. 5-field or 6-field expression.',
+        description: 'Required when kind is cron. Standard 5-field expression; a seconds field is refused.',
         example: '0 2 * * MON',
     }),
     (0, class_validator_1.ValidateIf)((dto) => dto.kind === schedule_enum_1.ScheduleKind.CRON),
     (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(255),
     (0, schedule_validator_1.IsCronExpression)(),
     __metadata("design:type", String)
 ], ScheduleDto.prototype, "expression", void 0);
@@ -71,7 +78,7 @@ class AddScheduledTaskDto extends common_data_dto_1.CommonDataDto {
 exports.AddScheduledTaskDto = AddScheduledTaskDto;
 __decorate([
     (0, swagger_1.ApiProperty)({
-        description: 'Must match the identifier of a registered job.',
+        description: 'Identifier of a registered job that opted in to scheduling. Changing it requires the global admin role.',
         example: 'cleanup.expired.tokens',
     }),
     (0, class_validator_1.IsString)(),
@@ -112,16 +119,18 @@ __decorate([
         example: 'Asia/Kathmandu',
     }),
     (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.MaxLength)(64),
     (0, schedule_validator_1.IsTimezone)(),
     __metadata("design:type", String)
 ], AddScheduledTaskDto.prototype, "timezone", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
-        description: 'Passed to the dispatched job as its payload.',
+        description: 'Passed to the dispatched job as its payload. Visible to content readers, so never put secrets here. Changing it requires the global admin role.',
         example: { batch_size: 500 },
     }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsObject)(),
+    (0, admin_validators_1.MaxJsonSize)(),
     __metadata("design:type", Object)
 ], AddScheduledTaskDto.prototype, "payload", void 0);
 __decorate([
@@ -138,11 +147,13 @@ __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         default: schedule_enum_1.ScheduleDefault.MAX_CATCHUP,
         minimum: 1,
+        maximum: admin_default_enum_1.AdminLimit.MAX_CATCHUP,
         description: 'Slots this task may materialise in one pass.',
     }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsInt)(),
     (0, class_validator_1.Min)(1),
+    (0, class_validator_1.Max)(admin_default_enum_1.AdminLimit.MAX_CATCHUP),
     __metadata("design:type", Number)
 ], AddScheduledTaskDto.prototype, "max_catchup", void 0);
 __decorate([
@@ -155,11 +166,13 @@ __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         default: 0,
         minimum: 0,
+        maximum: admin_default_enum_1.AdminLimit.MAX_JITTER_SEC,
         description: 'Random spread added to each fire time, in seconds.',
     }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsInt)(),
     (0, class_validator_1.Min)(0),
+    (0, class_validator_1.Max)(admin_default_enum_1.AdminLimit.MAX_JITTER_SEC),
     __metadata("design:type", Number)
 ], AddScheduledTaskDto.prototype, "jitter_sec", void 0);
 __decorate([

package/dist/admin/dtos/add.scheduled.task.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"add.scheduled.task.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.scheduled.task.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yDAAyC;AACzC,qDAayB;AACzB,6CAAmE;AACnE,uEAAkE;AAClE,oEAK0C;AAC1C,mFAGoD;AAOpD,MAAa,WAAW;CAyCvB;AAzCD,kCAyCC;AAtCC;IAFC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,4BAAY,EAAE,OAAO,EAAE,4BAAY,CAAC,QAAQ,EAAE,CAAC;IACnE,IAAA,wBAAM,EAAC,4BAAY,CAAC;;yCACF;AAOnB;IALC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC/C,IAAA,4BAAU,EAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,4BAAY,CAAC,QAAQ,CAAC;IACpE,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;;wCACM;AAOb;IALC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC/C,IAAA,4BAAU,EAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,4BAAY,CAAC,QAAQ,CAAC;IACpE,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;;yCACO;AAOd;IALC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC/C,IAAA,4BAAU,EAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,4BAAY,CAAC,QAAQ,CAAC;IACpE,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;;wCACM;AAOb;IALC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC/C,IAAA,4BAAU,EAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,4BAAY,CAAC,QAAQ,CAAC;IACpE,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;;wCACM;AASb;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,4DAA4D;QACzE,OAAO,EAAE,aAAa;KACvB,CAAC;IACD,IAAA,4BAAU,EAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,4BAAY,CAAC,IAAI,CAAC;IAChE,IAAA,0BAAQ,GAAE;IACV,IAAA,qCAAgB,GAAE;;+CACC;AAQtB,MAAa,mBAAoB,SAAQ,+BAAa;CA2FrD;AA3FD,kDA2FC;AAnFC;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,gDAAgD;QAC7D,OAAO,EAAE,wBAAwB;KAClC,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;uDACI;AAMnB;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IAClD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;iDACF;AASb;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,yFAAyF;QAC3F,OAAO,EAAE,0BAA0B;KACpC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;uDACQ;AAUpB;IARC,IAAA,qBAAW,EAAC;QACX,IAAI,EAAE,WAAW;QACjB,WAAW,EACT,uEAAuE;KAC1E,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,WAAW,CAAC;8BACd,WAAW;qDAAC;AAStB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE,+BAAe,CAAC,QAAQ;QACjC,OAAO,EAAE,gBAAgB;KAC1B,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,+BAAU,GAAE;;qDACK;AAQlB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,8CAA8C;QAC3D,OAAO,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE;KAC7B,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;oDACuB;AAUlC;IARC,IAAA,6BAAmB,EAAC;QACnB,IAAI,EAAE,6BAAa;QACnB,OAAO,EAAE,6BAAa,CAAC,SAAS;QAChC,WAAW,EACT,iEAAiE;KACpE,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,EAAC,6BAAa,CAAC;;4DACU;AAUhC;IARC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,+BAAe,CAAC,WAAW;QACpC,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,8CAA8C;KAC5D,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;;wDACc;AAKrB;IAHC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,6BAAa,EAAE,OAAO,EAAE,6BAAa,CAAC,KAAK,EAAE,CAAC;IAC1E,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,EAAC,6BAAa,CAAC;;2DACS;AAU/B;IARC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,oDAAoD;KAClE,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;;uDACa;AAKpB;IAHC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtC,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;oDACM"}
+{"version":3,"file":"add.scheduled.task.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.scheduled.task.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yDAAyC;AACzC,qDAcyB;AACzB,6CAAmE;AACnE,uEAAkE;AAClE,oEAK0C;AAC1C,mFAGoD;AACpD,oEAAyD;AACzD,qEAA6D;AAO7D,MAAa,WAAW;CA+CvB;AA/CD,kCA+CC;AA5CC;IAFC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,4BAAY,EAAE,OAAO,EAAE,4BAAY,CAAC,QAAQ,EAAE,CAAC;IACnE,IAAA,wBAAM,EAAC,4BAAY,CAAC;;yCACF;AAQnB;IANC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC/C,IAAA,4BAAU,EAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,4BAAY,CAAC,QAAQ,CAAC;IACpE,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;IACN,IAAA,qBAAG,EAAC,+BAAU,CAAC,iBAAiB,CAAC;;wCACrB;AAQb;IANC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC/C,IAAA,4BAAU,EAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,4BAAY,CAAC,QAAQ,CAAC;IACpE,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;IACN,IAAA,qBAAG,EAAC,+BAAU,CAAC,iBAAiB,CAAC;;yCACpB;AAQd;IANC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC/C,IAAA,4BAAU,EAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,4BAAY,CAAC,QAAQ,CAAC;IACpE,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;IACN,IAAA,qBAAG,EAAC,+BAAU,CAAC,iBAAiB,CAAC;;wCACrB;AAQb;IANC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC/C,IAAA,4BAAU,EAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,4BAAY,CAAC,QAAQ,CAAC;IACpE,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;IACN,IAAA,qBAAG,EAAC,+BAAU,CAAC,iBAAiB,CAAC;;wCACrB;AAWb;IATC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,sFAAsF;QACxF,OAAO,EAAE,aAAa;KACvB,CAAC;IACD,IAAA,4BAAU,EAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,4BAAY,CAAC,IAAI,CAAC;IAChE,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,qCAAgB,GAAE;;+CACC;AAQtB,MAAa,mBAAoB,SAAQ,+BAAa;CAmGrD;AAnGD,kDAmGC;AA1FC;IARC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,yGAAyG;QAC3G,OAAO,EAAE,wBAAwB;KAClC,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;uDACI;AAMnB;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IAClD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;iDACF;AASb;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,yFAAyF;QAC3F,OAAO,EAAE,0BAA0B;KACpC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;uDACQ;AAUpB;IARC,IAAA,qBAAW,EAAC;QACX,IAAI,EAAE,WAAW;QACjB,WAAW,EACT,uEAAuE;KAC1E,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,WAAW,CAAC;8BACd,WAAW;qDAAC;AAUtB;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE,+BAAe,CAAC,QAAQ;QACjC,OAAO,EAAE,gBAAgB;KAC1B,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,CAAC;IACb,IAAA,+BAAU,GAAE;;qDACK;AAUlB;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,iJAAiJ;QACnJ,OAAO,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE;KAC7B,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,8BAAW,GAAE;;oDACoB;AAUlC;IARC,IAAA,6BAAmB,EAAC;QACnB,IAAI,EAAE,6BAAa;QACnB,OAAO,EAAE,6BAAa,CAAC,SAAS;QAChC,WAAW,EACT,iEAAiE;KACpE,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,EAAC,6BAAa,CAAC;;4DACU;AAYhC;IAVC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,+BAAe,CAAC,WAAW;QACpC,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,+BAAU,CAAC,WAAW;QAC/B,WAAW,EAAE,8CAA8C;KAC5D,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;IACN,IAAA,qBAAG,EAAC,+BAAU,CAAC,WAAW,CAAC;;wDACP;AAKrB;IAHC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,6BAAa,EAAE,OAAO,EAAE,6BAAa,CAAC,KAAK,EAAE,CAAC;IAC1E,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,EAAC,6BAAa,CAAC;;2DACS;AAY/B;IAVC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,+BAAU,CAAC,cAAc;QAClC,WAAW,EAAE,oDAAoD;KAClE,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;IACN,IAAA,qBAAG,EAAC,+BAAU,CAAC,cAAc,CAAC;;uDACX;AAKpB;IAHC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtC,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;oDACM"}

package/dist/admin/dtos/add.scope.dto.d.ts

@@ -3,6 +3,6 @@ export declare class AddScopeDto extends CommonDataDto {
     identifier: string;
     name: string;
     description?: string;
-    parent_id?: string;
+    parent_id?: string | null;
 }
 //# sourceMappingURL=add.scope.dto.d.ts.map

package/dist/admin/dtos/add.scope.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"add.scope.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.scope.dto.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AASlE,qBAAa,WAAY,SAAQ,aAAa;IAa5C,UAAU,EAAE,MAAM,CAAC;IAMnB,IAAI,EAAE,MAAM,CAAC;IAOb,WAAW,CAAC,EAAE,MAAM,CAAC;IASrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}
+{"version":3,"file":"add.scope.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.scope.dto.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAUlE,qBAAa,WAAY,SAAQ,aAAa;IAa5C,UAAU,EAAE,MAAM,CAAC;IAMnB,IAAI,EAAE,MAAM,CAAC;IAQb,WAAW,CAAC,EAAE,MAAM,CAAC;IAUrB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B"}

package/dist/admin/dtos/add.scope.dto.js

@@ -13,19 +13,20 @@ exports.AddScopeDto = void 0;
 const class_validator_1 = require("class-validator");
 const swagger_1 = require("@nestjs/swagger");
 const common_data_dto_1 = require("../../common/dtos/common.data.dto");
+const admin_patterns_1 = require("../validators/admin.patterns");
 class AddScopeDto extends common_data_dto_1.CommonDataDto {
 }
 exports.AddScopeDto = AddScopeDto;
 __decorate([
     (0, swagger_1.ApiProperty)({
         example: 'billing.invoices',
-        description: 'Machine-readable key checked by validateAccess (lowercase letters, digits, dots, colons, hyphens, underscores).',
+        description: 'Machine-readable key checked by validateAccess. Fixed once created. The `*` wildcard cannot be defined here.',
     }),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsNotEmpty)(),
     (0, class_validator_1.MaxLength)(100),
-    (0, class_validator_1.Matches)(/^[a-z0-9._:*-]+$/, {
-        message: 'identifier may only contain lowercase letters, digits, dots, colons, hyphens, underscores and *',
+    (0, class_validator_1.Matches)(admin_patterns_1.CATALOGUE_IDENTIFIER_PATTERN, {
+        message: 'identifier may only contain lowercase letters, digits, hyphens and underscores, joined by single dots or colons (no wildcard)',
     }),
     __metadata("design:type", String)
 ], AddScopeDto.prototype, "identifier", void 0);
@@ -42,12 +43,14 @@ __decorate([
     }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(1000),
     __metadata("design:type", String)
 ], AddScopeDto.prototype, "description", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         format: 'uuid',
-        description: 'The parent scope this one belongs to. Granting the parent grants this child with it. Omit for a parent scope; a scope that already has children cannot be given one.',
+        description: 'The parent scope this one belongs to; granting the parent grants this child with it. On an edit, omit to keep the stored parent and send null to make it a top-level scope. Changing it requires the global super admin role.',
+        nullable: true,
     }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsUUID)(),

package/dist/admin/dtos/add.scope.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"add.scope.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.scope.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AACzB,6CAAmE;AACnE,uEAAkE;AASlE,MAAa,WAAY,SAAQ,+BAAa;CAoC7C;AApCD,kCAoCC;AAvBC;IAZC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EACT,iHAAiH;KACpH,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,kBAAkB,EAAE;QAC3B,OAAO,EACL,iGAAiG;KACpG,CAAC;;+CACiB;AAMnB;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAC9C,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;yCACF;AAOb;IALC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,+CAA+C;KACzD,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;gDACU;AASrB;IAPC,IAAA,6BAAmB,EAAC;QACnB,MAAM,EAAE,MAAM;QACd,WAAW,EACT,sKAAsK;KACzK,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,GAAE;;8CACU"}
+{"version":3,"file":"add.scope.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.scope.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AACzB,6CAAmE;AACnE,uEAAkE;AAClE,iEAA4E;AAS5E,MAAa,WAAY,SAAQ,+BAAa;CAsC7C;AAtCD,kCAsCC;AAzBC;IAZC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EACT,8GAA8G;KACjH,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,6CAA4B,EAAE;QACrC,OAAO,EACL,+HAA+H;KAClI,CAAC;;+CACiB;AAMnB;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAC9C,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;yCACF;AAQb;IANC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,+CAA+C;KACzD,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;;gDACK;AAUrB;IARC,IAAA,6BAAmB,EAAC;QACnB,MAAM,EAAE,MAAM;QACd,WAAW,EACT,+NAA+N;QACjO,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,GAAE;;8CACiB"}

package/dist/admin/dtos/add.system.role.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"add.system.role.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.system.role.dto.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAOlE,qBAAa,gBAAiB,SAAQ,aAAa;IAajD,UAAU,EAAE,MAAM,CAAC;IAMnB,IAAI,EAAE,MAAM,CAAC;IAOb,WAAW,CAAC,EAAE,MAAM,CAAC;IASrB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB"}
+{"version":3,"file":"add.system.role.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.system.role.dto.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAQlE,qBAAa,gBAAiB,SAAQ,aAAa;IAajD,UAAU,EAAE,MAAM,CAAC;IAMnB,IAAI,EAAE,MAAM,CAAC;IAQb,WAAW,CAAC,EAAE,MAAM,CAAC;IASrB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB"}

package/dist/admin/dtos/add.system.role.dto.js

@@ -13,19 +13,20 @@ exports.AddSystemRoleDto = void 0;
 const class_validator_1 = require("class-validator");
 const swagger_1 = require("@nestjs/swagger");
 const common_data_dto_1 = require("../../common/dtos/common.data.dto");
+const admin_patterns_1 = require("../validators/admin.patterns");
 class AddSystemRoleDto extends common_data_dto_1.CommonDataDto {
 }
 exports.AddSystemRoleDto = AddSystemRoleDto;
 __decorate([
     (0, swagger_1.ApiProperty)({
         example: 'org.owner',
-        description: 'Machine-readable key application code checks (lowercase letters, digits, dots, colons, hyphens, underscores).',
+        description: 'Machine-readable key application code checks. Fixed once created; reserved identifiers (`global.admin`) cannot be used.',
     }),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsNotEmpty)(),
     (0, class_validator_1.MaxLength)(100),
-    (0, class_validator_1.Matches)(/^[a-z0-9._:-]+$/, {
-        message: 'identifier may only contain lowercase letters, digits, dots, colons, hyphens and underscores',
+    (0, class_validator_1.Matches)(admin_patterns_1.CATALOGUE_IDENTIFIER_PATTERN, {
+        message: 'identifier may only contain lowercase letters, digits, hyphens and underscores, joined by single dots or colons',
     }),
     __metadata("design:type", String)
 ], AddSystemRoleDto.prototype, "identifier", void 0);
@@ -42,12 +43,13 @@ __decorate([
     }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(1000),
     __metadata("design:type", String)
 ], AddSystemRoleDto.prototype, "description", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         default: true,
-        description: 'Inactive roles stay assigned and keep their history; they are just not offered in the pickers.',
+        description: 'Inactive roles stay assigned but grant nothing and are not offered in the pickers. Changing it on an existing role requires the global super admin role.',
     }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsBoolean)(),

package/dist/admin/dtos/add.system.role.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"add.system.role.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.system.role.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AACzB,6CAAmE;AACnE,uEAAkE;AAOlE,MAAa,gBAAiB,SAAQ,+BAAa;CAoClD;AApCD,4CAoCC;AAvBC;IAZC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,WAAW;QACpB,WAAW,EACT,+GAA+G;KAClH,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,iBAAiB,EAAE;QAC1B,OAAO,EACL,8FAA8F;KACjG,CAAC;;oDACiB;AAMnB;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAC9C,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;8CACF;AAOb;IALC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,sDAAsD;KAChE,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;qDACU;AASrB;IAPC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,IAAI;QACb,WAAW,EACT,gGAAgG;KACnG,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;mDACQ"}
+{"version":3,"file":"add.system.role.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.system.role.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AACzB,6CAAmE;AACnE,uEAAkE;AAClE,iEAA4E;AAO5E,MAAa,gBAAiB,SAAQ,+BAAa;CAqClD;AArCD,4CAqCC;AAxBC;IAZC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,WAAW;QACpB,WAAW,EACT,yHAAyH;KAC5H,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,6CAA4B,EAAE;QACrC,OAAO,EACL,iHAAiH;KACpH,CAAC;;oDACiB;AAMnB;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAC9C,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;8CACF;AAQb;IANC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,sDAAsD;KAChE,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;;qDACK;AASrB;IAPC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,IAAI;QACb,WAAW,EACT,0JAA0J;KAC7J,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;mDACQ"}

package/dist/admin/dtos/add.tenant.dto.d.ts

@@ -16,6 +16,6 @@ export declare class AddTenantDto extends CommonDataDto {
     contract_expires_at?: string;
     is_active?: boolean;
     attributes?: Record<string, unknown>;
-    scope_ids: string[];
+    scope_ids?: string[];
 }
 //# sourceMappingURL=add.tenant.dto.d.ts.map

package/dist/admin/dtos/add.tenant.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"add.tenant.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.tenant.dto.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAOlE,qBAAa,YAAa,SAAQ,aAAa;IAK7C,IAAI,EAAE,MAAM,CAAC;IAab,IAAI,EAAE,MAAM,CAAC;IAMb,MAAM,CAAC,EAAE,MAAM,CAAC;IAMhB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAMlB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAMlB,SAAS,CAAC,EAAE,MAAM,CAAC;IAMnB,WAAW,CAAC,EAAE,MAAM,CAAC;IAMrB,aAAa,CAAC,EAAE,MAAM,CAAC;IAMvB,aAAa,CAAC,EAAE,MAAM,CAAC;IAMvB,IAAI,CAAC,EAAE,MAAM,CAAC;IAMd,KAAK,CAAC,EAAE,MAAM,CAAC;IAMf,WAAW,CAAC,EAAE,MAAM,CAAC;IAMrB,OAAO,CAAC,EAAE,MAAM,CAAC;IAQjB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAK7B,SAAS,CAAC,EAAE,OAAO,CAAC;IAKpB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAYrC,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB"}
+{"version":3,"file":"add.tenant.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.tenant.dto.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AASlE,qBAAa,YAAa,SAAQ,aAAa;IAK7C,IAAI,EAAE,MAAM,CAAC;IAab,IAAI,EAAE,MAAM,CAAC;IAUb,MAAM,CAAC,EAAE,MAAM,CAAC;IAWhB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAMlB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAMlB,SAAS,CAAC,EAAE,MAAM,CAAC;IAMnB,WAAW,CAAC,EAAE,MAAM,CAAC;IAMrB,aAAa,CAAC,EAAE,MAAM,CAAC;IAMvB,aAAa,CAAC,EAAE,MAAM,CAAC;IAMvB,IAAI,CAAC,EAAE,MAAM,CAAC;IAMd,KAAK,CAAC,EAAE,MAAM,CAAC;IAMf,WAAW,CAAC,EAAE,MAAM,CAAC;IAMrB,OAAO,CAAC,EAAE,MAAM,CAAC;IAQjB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAS7B,SAAS,CAAC,EAAE,OAAO,CAAC;IAMpB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAYrC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB"}