@techelusive/nest-auth 0.0.0-stage → 0.2.1

package/dist/features/admin/admin.controller.js

@@ -0,0 +1,623 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminController = void 0;
+const common_1 = require("@nestjs/common");
+const strict_validation_pipe_1 = require("../../common/strict-validation.pipe.js");
+const request_context_1 = require("../../common/request-context.js");
+const auth_decorators_1 = require("../../guards/auth.decorators.js");
+const api_keys_service_1 = require("../api-keys/api-keys.service.js");
+const data_retention_service_1 = require("../maintenance/data-retention.service.js");
+const session_service_1 = require("../sessions/session.service.js");
+const settings_service_1 = require("../settings/settings.service.js");
+const signing_keys_service_1 = require("../signing-keys/signing-keys.service.js");
+const two_factor_service_1 = require("../two-factor/two-factor.service.js");
+const users_service_1 = require("../users/users.service.js");
+const webhooks_service_1 = require("../webhooks/webhooks.service.js");
+const admin_dto_1 = require("./admin.dto");
+const admin_service_1 = require("./admin.service");
+const constants_1 = require("../../constants.js");
+const refresh_token_cookie_1 = require("../../common/refresh-token-cookie.js");
+/**
+ * Shorthand for the pipe that rejects route ids that aren't UUIDs (with a 400, before any query runs).
+ *
+ * @returns A new ParseUUIDPipe.
+ */
+const uuid = () => new common_1.ParseUUIDPipe();
+/**
+ * Admin API. Every route needs a user with one of settings.admin.adminRoles, and checks the
+ * session live, so a demoted or signed-out admin loses access at once.
+ *
+ * Users
+ *   GET    /auth/admin/users                      search (?search=&status=&role=&page=&pageSize=)
+ *   GET    /auth/admin/users/:id                  details, sign-in methods, devices
+ *   PATCH  /auth/admin/users/:id                  change name / app fields
+ *   PUT    /auth/admin/users/:id/roles            replace roles
+ *   POST   /auth/admin/users/:id/suspend          suspend with a reason (signs out everywhere)
+ *   POST   /auth/admin/users/:id/unsuspend        lift a suspension
+ *   POST   /auth/admin/users/:id/verify-email     mark email verified (support case)
+ *   POST   /auth/admin/users/:id/reset-2fa        turn off 2FA (lost phone)
+ *   POST   /auth/admin/users/:id/logout-all       sign out every device
+ *   DELETE /auth/admin/users/:id                  delete account (permanent)
+ * Settings
+ *   GET    /auth/admin/settings                   settings in force
+ *   PATCH  /auth/admin/settings                   change some settings at runtime
+ *   DELETE /auth/admin/settings                   back to the settings in code
+ * Security and operations
+ *   GET    /auth/admin/audit-log                  security history (?userId=&eventName=)
+ *   GET    /auth/admin/stats                      accounts by status, devices, last 24 hours
+ *   POST   /auth/admin/maintenance/cleanup        delete old rows now (also runs hourly)
+ *   POST   /auth/admin/signing-keys/rotate        new token signing key
+ * API keys and webhooks
+ *   GET/POST /auth/admin/api-keys, DELETE /auth/admin/api-keys/:id
+ *   GET/POST /auth/admin/webhooks, PATCH/DELETE /auth/admin/webhooks/:id,
+ *   POST /auth/admin/webhooks/:id/rotate-secret, POST /auth/admin/webhooks/:id/test,
+ *   GET /auth/admin/webhooks/:id/deliveries, POST /auth/admin/webhooks/:id/deliveries/:deliveryId/retry
+ */
+let AdminController = class AdminController {
+    admin;
+    settingsService;
+    users;
+    sessions;
+    twoFactor;
+    signingKeys;
+    apiKeys;
+    webhooks;
+    dataRetention;
+    constructor(admin, settingsService, users, sessions, twoFactor, signingKeys, apiKeys, webhooks, dataRetention) {
+        this.admin = admin;
+        this.settingsService = settingsService;
+        this.users = users;
+        this.sessions = sessions;
+        this.twoFactor = twoFactor;
+        this.signingKeys = signingKeys;
+        this.apiKeys = apiKeys;
+        this.webhooks = webhooks;
+        this.dataRetention = dataRetention;
+    }
+    // ---- Users ----------------------------------------------------------------------------------
+    /**
+     * GET /auth/admin/users — Searches users.
+     *
+     * @param query - `?search=&status=&role=&page=&pageSize=`.
+     * @returns One page of users.
+     */
+    searchUsers(query) {
+        return this.admin.searchUsers(query);
+    }
+    /**
+     * GET /auth/admin/users/:id — Details, sign-in methods and devices of one user.
+     *
+     * @param userId - The user to act on (from the URL).
+     * @returns See `AdminService.getUserDetails`.
+     */
+    getUser(userId) {
+        return this.admin.getUserDetails(userId);
+    }
+    /**
+     * PATCH /auth/admin/users/:id — Changes the user's names or app fields.
+     *
+     * @param adminUserId - The signed-in admin (for the audit log).
+     * @param userId - The user to act on (from the URL).
+     * @param body - The fields to change.
+     * @param request - Who is asking.
+     * @returns The user's updated public profile.
+     */
+    async updateUser(adminUserId, userId, body, request) {
+        const user = await this.users.updateProfile(userId, body, constants_1.PERFORMED_BY.admin(adminUserId), request);
+        return { success: true, user: this.users.toPublicProfile(user, await this.settingsService.getSettings()) };
+    }
+    /**
+     * PUT /auth/admin/users/:id/roles — Replaces the user's roles.
+     *
+     * @param adminUserId - The signed-in admin (for the audit log).
+     * @param userId - The user to act on (from the URL).
+     * @param body - `{ roles }`: the full new list.
+     * @param request - Who is asking.
+     * @returns The user's updated public profile.
+     */
+    async setRoles(adminUserId, userId, body, request) {
+        const user = await this.users.setRoles(userId, body.roles, adminUserId, request);
+        return { success: true, user: this.users.toPublicProfile(user, await this.settingsService.getSettings()) };
+    }
+    /**
+     * POST /auth/admin/users/:id/suspend — Suspends the account and signs the user out everywhere.
+     *
+     * @param adminUserId - The signed-in admin (for the audit log).
+     * @param userId - The user to act on (from the URL).
+     * @param body - `{ reason }`.
+     * @param request - Who is asking.
+     * @returns The user's updated public profile.
+     */
+    async suspendUser(adminUserId, userId, body, request) {
+        const user = await this.users.suspendUser(userId, body.reason, adminUserId, request);
+        return { success: true, user: this.users.toPublicProfile(user, await this.settingsService.getSettings()) };
+    }
+    /**
+     * POST /auth/admin/users/:id/unsuspend — Lifts a suspension.
+     *
+     * @param adminUserId - The signed-in admin (for the audit log).
+     * @param userId - The user to act on (from the URL).
+     * @param request - Who is asking.
+     * @returns The user's updated public profile.
+     */
+    async unsuspendUser(adminUserId, userId, request) {
+        const settings = await this.settingsService.getSettings();
+        const user = await this.users.liftSuspension(userId, adminUserId, settings, request);
+        return { success: true, user: this.users.toPublicProfile(user, settings) };
+    }
+    /**
+     * POST /auth/admin/users/:id/verify-email — Marks the email verified (support case).
+     *
+     * @param userId - The user to act on (from the URL).
+     * @param request - Who is asking.
+     * @returns The user's updated public profile.
+     */
+    async verifyEmail(userId, request) {
+        const settings = await this.settingsService.getSettings();
+        const user = await this.users.markEmailVerified(await this.users.getUserOrThrow(userId), settings, request);
+        return { success: true, user: this.users.toPublicProfile(user, settings) };
+    }
+    /**
+     * POST /auth/admin/users/:id/reset-2fa — Turns off 2FA for a user who lost their phone.
+     *
+     * @param adminUserId - The signed-in admin (for the audit log).
+     * @param userId - The user to act on (from the URL).
+     * @param request - Who is asking.
+     * @returns `{ success: true }`.
+     */
+    resetTwoFactor(adminUserId, userId, request) {
+        return this.twoFactor.resetForUser(userId, adminUserId, request);
+    }
+    /**
+     * POST /auth/admin/users/:id/logout-all — Signs the user out on every device.
+     *
+     * @param userId - The user to act on (from the URL).
+     * @returns How many sessions were ended.
+     */
+    async signOutUserEverywhere(userId) {
+        return { success: true, endedSessions: await this.sessions.revokeAllSessions(userId, constants_1.SESSION_END_REASON.signedOutByAdmin) };
+    }
+    /**
+     * DELETE /auth/admin/users/:id — Deletes the account. This cannot be undone.
+     *
+     * @param adminUserId - The signed-in admin (for the audit log).
+     * @param userId - The user to act on (from the URL).
+     * @param request - Who is asking.
+     * @returns `{ success: true }`.
+     */
+    async deleteUser(adminUserId, userId, request) {
+        await this.users.deleteUser(userId, constants_1.PERFORMED_BY.admin(adminUserId), request);
+        return { success: true };
+    }
+    // ---- Settings -------------------------------------------------------------------------------
+    /**
+     * GET /auth/admin/settings — The settings in force.
+     *
+     * @returns The full settings.
+     */
+    getSettings() {
+        return this.admin.getSettings();
+    }
+    /**
+     * PATCH /auth/admin/settings — Changes some settings at runtime.
+     * The body is checked against the settings rules by SettingsService (unknown fields are refused there).
+     *
+     * @param adminUserId - The signed-in admin (for the audit log).
+     * @param body - Only the sections and fields to change.
+     * @param request - Who is asking.
+     * @returns The settings now in force.
+     */
+    changeSettings(adminUserId, body, request) {
+        return this.admin.changeSettings(body, adminUserId, request);
+    }
+    /**
+     * DELETE /auth/admin/settings — Discards admin changes, back to the settings in code.
+     *
+     * @param adminUserId - The signed-in admin (for the audit log).
+     * @param request - Who is asking.
+     * @returns The settings now in force.
+     */
+    resetSettings(adminUserId, request) {
+        return this.admin.resetSettings(adminUserId, request);
+    }
+    // ---- Security -------------------------------------------------------------------------------
+    /**
+     * GET /auth/admin/audit-log — Security history, newest first.
+     *
+     * @param query - `?userId=&eventName=&page=&pageSize=`.
+     * @returns One page of entries.
+     */
+    searchAuditLog(query) {
+        return this.admin.searchAuditLog(query);
+    }
+    /**
+     * GET /auth/admin/stats — Accounts by status, signed-in devices, last 24 hours.
+     *
+     * @returns See `AdminService.getStats`.
+     */
+    getStats() {
+        return this.admin.getStats();
+    }
+    /**
+     * POST /auth/admin/maintenance/cleanup — Runs the data-retention cleanup now
+     * (it also runs every hour by itself).
+     *
+     * @returns How many rows were removed from each table.
+     */
+    async runCleanup() {
+        return { success: true, removed: await this.dataRetention.runCleanup() };
+    }
+    /**
+     * POST /auth/admin/signing-keys/rotate — Creates a new token signing key.
+     * Tokens signed with the old key keep working until they expire.
+     *
+     * @returns `{ success: true }`.
+     */
+    async rotateSigningKey() {
+        await this.signingKeys.rotateSigningKey();
+        return { success: true };
+    }
+    // ---- API keys -------------------------------------------------------------------------------
+    /**
+     * GET /auth/admin/api-keys — Lists API keys (never the secret part).
+     *
+     * @returns The API keys.
+     */
+    async listApiKeys() {
+        return { success: true, apiKeys: await this.apiKeys.listApiKeys() };
+    }
+    /**
+     * POST /auth/admin/api-keys — Creates an API key. The key itself is shown only in this response.
+     *
+     * @param adminUserId - The signed-in admin (for the audit log).
+     * @param body - Name, scopes and optional expiry date.
+     * @param request - Who is asking.
+     * @returns The new key's details and the plain key.
+     */
+    async createApiKey(adminUserId, body, request) {
+        const created = await this.apiKeys.createApiKey({ ...body, expiresAt: body.expiresAt ? new Date(body.expiresAt) : null }, adminUserId, request);
+        return { success: true, ...created };
+    }
+    /**
+     * DELETE /auth/admin/api-keys/:id — Revokes an API key; it stops working at once.
+     *
+     * @param adminUserId - The signed-in admin (for the audit log).
+     * @param apiKeyId - The key (from the URL).
+     * @param request - Who is asking.
+     * @returns `{ success: true }`.
+     */
+    async revokeApiKey(adminUserId, apiKeyId, request) {
+        await this.apiKeys.revokeApiKey(apiKeyId, adminUserId, request);
+        return { success: true };
+    }
+    // ---- Webhooks -------------------------------------------------------------------------------
+    /**
+     * GET /auth/admin/webhooks — Lists webhooks.
+     *
+     * @returns The webhooks.
+     */
+    async listWebhooks() {
+        return { success: true, webhooks: await this.webhooks.listWebhooks() };
+    }
+    /**
+     * POST /auth/admin/webhooks — Adds a webhook. The signing secret is shown only in this response.
+     *
+     * @param body - URL, events, description and whether it is on.
+     * @returns The webhook and its signing secret.
+     */
+    createWebhook(body) {
+        return this.webhooks.createWebhook(body);
+    }
+    /**
+     * PATCH /auth/admin/webhooks/:id — Changes a webhook's URL, events, description or on/off state.
+     *
+     * @param webhookId - The webhook (from the URL).
+     * @param body - The fields to change.
+     * @returns The updated webhook.
+     */
+    updateWebhook(webhookId, body) {
+        return this.webhooks.updateWebhook(webhookId, body);
+    }
+    /**
+     * DELETE /auth/admin/webhooks/:id — Deletes a webhook and its delivery history.
+     *
+     * @param webhookId - The webhook (from the URL).
+     * @returns `{ success: true }`.
+     */
+    deleteWebhook(webhookId) {
+        return this.webhooks.deleteWebhook(webhookId);
+    }
+    /**
+     * POST /auth/admin/webhooks/:id/rotate-secret — Replaces the signing secret.
+     *
+     * @param webhookId - The webhook (from the URL).
+     * @returns The new signing secret (shown only once).
+     */
+    rotateWebhookSecret(webhookId) {
+        return this.webhooks.rotateSigningSecret(webhookId);
+    }
+    /**
+     * POST /auth/admin/webhooks/:id/test — Sends a test event to the webhook.
+     *
+     * @param webhookId - The webhook (from the URL).
+     * @returns `{ success: true }`; the worker sends it within seconds.
+     */
+    sendTestDelivery(webhookId) {
+        return this.webhooks.sendTestDelivery(webhookId);
+    }
+    /**
+     * GET /auth/admin/webhooks/:id/deliveries — Delivery history, newest first.
+     *
+     * @param webhookId - The webhook (from the URL).
+     * @param query - `?page=&pageSize=`.
+     * @returns One page of deliveries.
+     */
+    listDeliveries(webhookId, query) {
+        return this.webhooks.listDeliveries(webhookId, query.page, query.pageSize);
+    }
+    /**
+     * POST /auth/admin/webhooks/:id/deliveries/:deliveryId/retry — Sends a failed delivery again.
+     *
+     * @param webhookId - The webhook (from the URL).
+     * @param deliveryId - The delivery (from the URL).
+     * @returns `{ success: true }`; the worker sends it within seconds.
+     */
+    retryDelivery(webhookId, deliveryId) {
+        return this.webhooks.retryDelivery(webhookId, deliveryId);
+    }
+};
+exports.AdminController = AdminController;
+__decorate([
+    (0, common_1.Get)(constants_1.ROUTES.admin.users),
+    __param(0, (0, common_1.Query)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [admin_dto_1.SearchUsersQuery]),
+    __metadata("design:returntype", void 0)
+], AdminController.prototype, "searchUsers", null);
+__decorate([
+    (0, common_1.Get)(constants_1.ROUTES.admin.user),
+    __param(0, (0, common_1.Param)(constants_1.ROUTE_PARAM.userId, uuid())),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", void 0)
+], AdminController.prototype, "getUser", null);
+__decorate([
+    (0, common_1.Patch)(constants_1.ROUTES.admin.user),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __param(1, (0, common_1.Param)(constants_1.ROUTE_PARAM.userId, uuid())),
+    __param(2, (0, common_1.Body)()),
+    __param(3, (0, request_context_1.CurrentRequest)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, admin_dto_1.AdminUpdateUserInput, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "updateUser", null);
+__decorate([
+    (0, common_1.Put)(constants_1.ROUTES.admin.userRoles),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __param(1, (0, common_1.Param)(constants_1.ROUTE_PARAM.userId, uuid())),
+    __param(2, (0, common_1.Body)()),
+    __param(3, (0, request_context_1.CurrentRequest)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, admin_dto_1.SetRolesInput, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "setRoles", null);
+__decorate([
+    (0, common_1.Post)(constants_1.ROUTES.admin.userSuspend),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __param(1, (0, common_1.Param)(constants_1.ROUTE_PARAM.userId, uuid())),
+    __param(2, (0, common_1.Body)()),
+    __param(3, (0, request_context_1.CurrentRequest)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, admin_dto_1.SuspendUserInput, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "suspendUser", null);
+__decorate([
+    (0, common_1.Post)(constants_1.ROUTES.admin.userUnsuspend),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __param(1, (0, common_1.Param)(constants_1.ROUTE_PARAM.userId, uuid())),
+    __param(2, (0, request_context_1.CurrentRequest)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "unsuspendUser", null);
+__decorate([
+    (0, common_1.Post)(constants_1.ROUTES.admin.userVerifyEmail),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    __param(0, (0, common_1.Param)(constants_1.ROUTE_PARAM.userId, uuid())),
+    __param(1, (0, request_context_1.CurrentRequest)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "verifyEmail", null);
+__decorate([
+    (0, common_1.Post)(constants_1.ROUTES.admin.userResetTwoFactor),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __param(1, (0, common_1.Param)(constants_1.ROUTE_PARAM.userId, uuid())),
+    __param(2, (0, request_context_1.CurrentRequest)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", void 0)
+], AdminController.prototype, "resetTwoFactor", null);
+__decorate([
+    (0, common_1.Post)(constants_1.ROUTES.admin.userLogoutAll),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    __param(0, (0, common_1.Param)(constants_1.ROUTE_PARAM.userId, uuid())),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "signOutUserEverywhere", null);
+__decorate([
+    (0, common_1.Delete)(constants_1.ROUTES.admin.user),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __param(1, (0, common_1.Param)(constants_1.ROUTE_PARAM.userId, uuid())),
+    __param(2, (0, request_context_1.CurrentRequest)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "deleteUser", null);
+__decorate([
+    (0, common_1.Get)(constants_1.ROUTES.admin.settings),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], AdminController.prototype, "getSettings", null);
+__decorate([
+    (0, common_1.Patch)(constants_1.ROUTES.admin.settings),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, request_context_1.CurrentRequest)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", void 0)
+], AdminController.prototype, "changeSettings", null);
+__decorate([
+    (0, common_1.Delete)(constants_1.ROUTES.admin.settings),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __param(1, (0, request_context_1.CurrentRequest)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", void 0)
+], AdminController.prototype, "resetSettings", null);
+__decorate([
+    (0, common_1.Get)(constants_1.ROUTES.admin.auditLog),
+    __param(0, (0, common_1.Query)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [admin_dto_1.SearchAuditLogQuery]),
+    __metadata("design:returntype", void 0)
+], AdminController.prototype, "searchAuditLog", null);
+__decorate([
+    (0, common_1.Get)(constants_1.ROUTES.admin.stats),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], AdminController.prototype, "getStats", null);
+__decorate([
+    (0, common_1.Post)(constants_1.ROUTES.admin.runCleanup),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "runCleanup", null);
+__decorate([
+    (0, common_1.Post)(constants_1.ROUTES.admin.rotateSigningKey),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "rotateSigningKey", null);
+__decorate([
+    (0, common_1.Get)(constants_1.ROUTES.admin.apiKeys),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "listApiKeys", null);
+__decorate([
+    (0, common_1.Post)(constants_1.ROUTES.admin.apiKeys),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, request_context_1.CurrentRequest)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, admin_dto_1.CreateApiKeyInput, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "createApiKey", null);
+__decorate([
+    (0, common_1.Delete)(constants_1.ROUTES.admin.apiKey),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __param(1, (0, common_1.Param)(constants_1.ROUTE_PARAM.apiKeyId, uuid())),
+    __param(2, (0, request_context_1.CurrentRequest)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "revokeApiKey", null);
+__decorate([
+    (0, common_1.Get)(constants_1.ROUTES.admin.webhooks),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "listWebhooks", null);
+__decorate([
+    (0, common_1.Post)(constants_1.ROUTES.admin.webhooks),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [admin_dto_1.CreateWebhookInput]),
+    __metadata("design:returntype", void 0)
+], AdminController.prototype, "createWebhook", null);
+__decorate([
+    (0, common_1.Patch)(constants_1.ROUTES.admin.webhook),
+    __param(0, (0, common_1.Param)(constants_1.ROUTE_PARAM.webhookId, uuid())),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, admin_dto_1.UpdateWebhookInput]),
+    __metadata("design:returntype", void 0)
+], AdminController.prototype, "updateWebhook", null);
+__decorate([
+    (0, common_1.Delete)(constants_1.ROUTES.admin.webhook),
+    __param(0, (0, common_1.Param)(constants_1.ROUTE_PARAM.webhookId, uuid())),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", void 0)
+], AdminController.prototype, "deleteWebhook", null);
+__decorate([
+    (0, common_1.Post)(constants_1.ROUTES.admin.webhookRotateSecret),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    __param(0, (0, common_1.Param)(constants_1.ROUTE_PARAM.webhookId, uuid())),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", void 0)
+], AdminController.prototype, "rotateWebhookSecret", null);
+__decorate([
+    (0, common_1.Post)(constants_1.ROUTES.admin.webhookTest),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    __param(0, (0, common_1.Param)(constants_1.ROUTE_PARAM.webhookId, uuid())),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", void 0)
+], AdminController.prototype, "sendTestDelivery", null);
+__decorate([
+    (0, common_1.Get)(constants_1.ROUTES.admin.webhookDeliveries),
+    __param(0, (0, common_1.Param)(constants_1.ROUTE_PARAM.webhookId, uuid())),
+    __param(1, (0, common_1.Query)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, admin_dto_1.PageQuery]),
+    __metadata("design:returntype", void 0)
+], AdminController.prototype, "listDeliveries", null);
+__decorate([
+    (0, common_1.Post)(constants_1.ROUTES.admin.webhookRetryDelivery),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    __param(0, (0, common_1.Param)(constants_1.ROUTE_PARAM.webhookId, uuid())),
+    __param(1, (0, common_1.Param)(constants_1.ROUTE_PARAM.deliveryId, uuid())),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", void 0)
+], AdminController.prototype, "retryDelivery", null);
+exports.AdminController = AdminController = __decorate([
+    (0, common_1.Controller)(constants_1.ROUTES.admin.prefix),
+    (0, refresh_token_cookie_1.LibraryController)(),
+    (0, auth_decorators_1.AdminOnly)(),
+    (0, common_1.UsePipes)(strict_validation_pipe_1.strictValidationPipe),
+    __metadata("design:paramtypes", [admin_service_1.AdminService,
+        settings_service_1.SettingsService,
+        users_service_1.UsersService,
+        session_service_1.SessionService,
+        two_factor_service_1.TwoFactorService,
+        signing_keys_service_1.SigningKeysService,
+        api_keys_service_1.ApiKeysService,
+        webhooks_service_1.WebhooksService,
+        data_retention_service_1.DataRetentionService])
+], AdminController);
+//# sourceMappingURL=admin.controller.js.map

package/dist/features/admin/admin.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.controller.js","sourceRoot":"","sources":["../../../src/features/admin/admin.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA8I;AAC9I,4EAAuE;AACvE,8DAA0E;AAC1E,8DAAoE;AACpE,2EAAsE;AACtE,0FAAqF;AACrF,yEAAqE;AACrE,2EAAuE;AAEvE,uFAAkF;AAClF,iFAA4E;AAC5E,kEAA8D;AAC9D,2EAAuE;AACvE,2CAUqB;AACrB,mDAA+C;AAC/C,2CAAoF;AACpF,wEAAkE;AAElE;;;;GAIG;AACH,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,sBAAa,EAAE,CAAC;AAEvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAKI,IAAM,eAAe,GAArB,MAAM,eAAe;IAEP;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IATnB,YACmB,KAAmB,EACnB,eAAgC,EAChC,KAAmB,EACnB,QAAwB,EACxB,SAA2B,EAC3B,WAA+B,EAC/B,OAAuB,EACvB,QAAyB,EACzB,aAAmC;QARnC,UAAK,GAAL,KAAK,CAAc;QACnB,oBAAe,GAAf,eAAe,CAAiB;QAChC,UAAK,GAAL,KAAK,CAAc;QACnB,aAAQ,GAAR,QAAQ,CAAgB;QACxB,cAAS,GAAT,SAAS,CAAkB;QAC3B,gBAAW,GAAX,WAAW,CAAoB;QAC/B,YAAO,GAAP,OAAO,CAAgB;QACvB,aAAQ,GAAR,QAAQ,CAAiB;QACzB,kBAAa,GAAb,aAAa,CAAsB;IACnD,CAAC;IAEJ,gGAAgG;IAEhG;;;;;OAKG;IAEH,WAAW,CAAU,KAAuB;QAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IAEH,OAAO,CAAoC,MAAc;QACvD,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;;;OAQG;IAEG,AAAN,KAAK,CAAC,UAAU,CACG,WAAmB,EACD,MAAc,EACzC,IAA0B,EAChB,OAAuB;QAEzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,wBAAY,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC;QACpG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;IAC7G,CAAC;IAED;;;;;;;;OAQG;IAEG,AAAN,KAAK,CAAC,QAAQ,CACK,WAAmB,EACD,MAAc,EACzC,IAAmB,EACT,OAAuB;QAEzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QACjF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;IAC7G,CAAC;IAED;;;;;;;;OAQG;IAGG,AAAN,KAAK,CAAC,WAAW,CACE,WAAmB,EACD,MAAc,EACzC,IAAsB,EACZ,OAAuB;QAEzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QACrF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;IAC7G,CAAC;IAED;;;;;;;OAOG;IAGG,AAAN,KAAK,CAAC,aAAa,CAAkB,WAAmB,EAAqC,MAAc,EAAoB,OAAuB;QACpJ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACrF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;IAC7E,CAAC;IAED;;;;;;OAMG;IAGG,AAAN,KAAK,CAAC,WAAW,CAAoC,MAAc,EAAoB,OAAuB;QAC5G,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5G,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;IAC7E,CAAC;IAED;;;;;;;OAOG;IAGH,cAAc,CAAkB,WAAmB,EAAqC,MAAc,EAAoB,OAAuB;QAC/I,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IAED;;;;;OAKG;IAGG,AAAN,KAAK,CAAC,qBAAqB,CAAoC,MAAc;QAC3E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,EAAE,8BAAkB,CAAC,gBAAgB,CAAC,EAAE,CAAC;IAC9H,CAAC;IAED;;;;;;;OAOG;IAEG,AAAN,KAAK,CAAC,UAAU,CAAkB,WAAmB,EAAqC,MAAc,EAAoB,OAAuB;QACjJ,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,wBAAY,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC;QAC9E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,gGAAgG;IAEhG;;;;OAIG;IAEH,WAAW;QACT,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC;IAED;;;;;;;;OAQG;IAEH,cAAc,CAAkB,WAAmB,EAAU,IAAqB,EAAoB,OAAuB;QAC3H,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;OAMG;IAEH,aAAa,CAAkB,WAAmB,EAAoB,OAAuB;QAC3F,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,gGAAgG;IAEhG;;;;;OAKG;IAEH,cAAc,CAAU,KAA0B;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IAEH,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IAGG,AAAN,KAAK,CAAC,UAAU;QACd,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE,CAAC;IAC3E,CAAC;IAED;;;;;OAKG;IAGG,AAAN,KAAK,CAAC,gBAAgB;QACpB,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,gGAAgG;IAEhG;;;;OAIG;IAEG,AAAN,KAAK,CAAC,WAAW;QACf,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;IACtE,CAAC;IAED;;;;;;;OAOG;IAEG,AAAN,KAAK,CAAC,YAAY,CAAkB,WAAmB,EAAU,IAAuB,EAAoB,OAAuB;QACjI,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAC7C,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EACxE,WAAW,EACX,OAAO,CACR,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC;IACvC,CAAC;IAED;;;;;;;OAOG;IAEG,AAAN,KAAK,CAAC,YAAY,CAAkB,WAAmB,EAAuC,QAAgB,EAAoB,OAAuB;QACvJ,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,gGAAgG;IAEhG;;;;OAIG;IAEG,AAAN,KAAK,CAAC,YAAY;QAChB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;IACzE,CAAC;IAED;;;;;OAKG;IAEH,aAAa,CAAS,IAAwB;QAC5C,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;OAMG;IAEH,aAAa,CAAuC,SAAiB,EAAU,IAAwB;QACrG,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IAED;;;;;OAKG;IAEH,aAAa,CAAuC,SAAiB;QACnE,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IAGH,mBAAmB,CAAuC,SAAiB;QACzE,OAAO,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;IAED;;;;;OAKG;IAGH,gBAAgB,CAAuC,SAAiB;QACtE,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IAED;;;;;;OAMG;IAEH,cAAc,CAAuC,SAAiB,EAAW,KAAgB;QAC/F,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7E,CAAC;IAED;;;;;;OAMG;IAGH,aAAa,CAAuC,SAAiB,EAAyC,UAAkB;QAC9H,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC5D,CAAC;CACF,CAAA;AAzYY,0CAAe;AAsB1B;IADC,IAAA,YAAG,EAAC,kBAAM,CAAC,KAAK,CAAC,KAAK,CAAC;IACX,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAQ,4BAAgB;;kDAE3C;AASD;IADC,IAAA,YAAG,EAAC,kBAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IACd,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;;;;8CAEzC;AAYK;IADL,IAAA,cAAK,EAAC,kBAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IAEtB,WAAA,IAAA,+BAAa,GAAE,CAAA;IACf,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IACjC,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,gCAAc,GAAE,CAAA;;qDADH,gCAAoB;;iDAKnC;AAYK;IADL,IAAA,YAAG,EAAC,kBAAM,CAAC,KAAK,CAAC,SAAS,CAAC;IAEzB,WAAA,IAAA,+BAAa,GAAE,CAAA;IACf,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IACjC,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,gCAAc,GAAE,CAAA;;qDADH,yBAAa;;+CAK5B;AAaK;IAFL,IAAA,aAAI,EAAC,kBAAM,CAAC,KAAK,CAAC,WAAW,CAAC;IAC9B,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IAErB,WAAA,IAAA,+BAAa,GAAE,CAAA;IACf,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IACjC,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,gCAAc,GAAE,CAAA;;qDADH,4BAAgB;;kDAK/B;AAYK;IAFL,IAAA,aAAI,EAAC,kBAAM,CAAC,KAAK,CAAC,aAAa,CAAC;IAChC,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACH,WAAA,IAAA,+BAAa,GAAE,CAAA;IAAuB,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAAkB,WAAA,IAAA,gCAAc,GAAE,CAAA;;;;oDAI7H;AAWK;IAFL,IAAA,aAAI,EAAC,kBAAM,CAAC,KAAK,CAAC,eAAe,CAAC;IAClC,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACL,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAAkB,WAAA,IAAA,gCAAc,GAAE,CAAA;;;;kDAIrF;AAYD;IAFC,IAAA,aAAI,EAAC,kBAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACrC,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACR,WAAA,IAAA,+BAAa,GAAE,CAAA;IAAuB,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAAkB,WAAA,IAAA,gCAAc,GAAE,CAAA;;;;qDAExH;AAUK;IAFL,IAAA,aAAI,EAAC,kBAAM,CAAC,KAAK,CAAC,aAAa,CAAC;IAChC,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACK,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;;;;4DAE7D;AAWK;IADL,IAAA,eAAM,EAAC,kBAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IACR,WAAA,IAAA,+BAAa,GAAE,CAAA;IAAuB,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAAkB,WAAA,IAAA,gCAAc,GAAE,CAAA;;;;iDAG1H;AAUD;IADC,IAAA,YAAG,EAAC,kBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;;;;kDAG1B;AAYD;IADC,IAAA,cAAK,EAAC,kBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;IACb,WAAA,IAAA,+BAAa,GAAE,CAAA;IAAuB,WAAA,IAAA,aAAI,GAAE,CAAA;IAAyB,WAAA,IAAA,gCAAc,GAAE,CAAA;;;;qDAEpG;AAUD;IADC,IAAA,eAAM,EAAC,kBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;IACf,WAAA,IAAA,+BAAa,GAAE,CAAA;IAAuB,WAAA,IAAA,gCAAc,GAAE,CAAA;;;;oDAEpE;AAWD;IADC,IAAA,YAAG,EAAC,kBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;IACX,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAQ,+BAAmB;;qDAEjD;AAQD;IADC,IAAA,YAAG,EAAC,kBAAM,CAAC,KAAK,CAAC,KAAK,CAAC;;;;+CAGvB;AAUK;IAFL,IAAA,aAAI,EAAC,kBAAM,CAAC,KAAK,CAAC,UAAU,CAAC;IAC7B,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;;;;iDAGvB;AAUK;IAFL,IAAA,aAAI,EAAC,kBAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACnC,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;;;;uDAIvB;AAUK;IADL,IAAA,YAAG,EAAC,kBAAM,CAAC,KAAK,CAAC,OAAO,CAAC;;;;kDAGzB;AAWK;IADL,IAAA,aAAI,EAAC,kBAAM,CAAC,KAAK,CAAC,OAAO,CAAC;IACP,WAAA,IAAA,+BAAa,GAAE,CAAA;IAAuB,WAAA,IAAA,aAAI,GAAE,CAAA;IAA2B,WAAA,IAAA,gCAAc,GAAE,CAAA;;6CAApC,6BAAiB;;mDAOvF;AAWK;IADL,IAAA,eAAM,EAAC,kBAAM,CAAC,KAAK,CAAC,MAAM,CAAC;IACR,WAAA,IAAA,+BAAa,GAAE,CAAA;IAAuB,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IAAoB,WAAA,IAAA,gCAAc,GAAE,CAAA;;;;mDAGhI;AAUK;IADL,IAAA,YAAG,EAAC,kBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;;;;mDAG1B;AASD;IADC,IAAA,aAAI,EAAC,kBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;IACb,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAO,8BAAkB;;oDAE7C;AAUD;IADC,IAAA,cAAK,EAAC,kBAAM,CAAC,KAAK,CAAC,OAAO,CAAC;IACb,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAAqB,WAAA,IAAA,aAAI,GAAE,CAAA;;6CAAO,8BAAkB;;oDAEtG;AASD;IADC,IAAA,eAAM,EAAC,kBAAM,CAAC,KAAK,CAAC,OAAO,CAAC;IACd,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;;;;oDAElD;AAUD;IAFC,IAAA,aAAI,EAAC,kBAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACtC,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACH,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;;;;0DAExD;AAUD;IAFC,IAAA,aAAI,EAAC,kBAAM,CAAC,KAAK,CAAC,WAAW,CAAC;IAC9B,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACN,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;;;;uDAErD;AAUD;IADC,IAAA,YAAG,EAAC,kBAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACpB,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAAqB,WAAA,IAAA,cAAK,GAAE,CAAA;;6CAAQ,qBAAS;;qDAEhG;AAWD;IAFC,IAAA,aAAI,EAAC,kBAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC;IACvC,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACT,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAAqB,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;;;;oDAE5G;0BAxYU,eAAe;IAJ3B,IAAA,mBAAU,EAAC,kBAAM,CAAC,KAAK,CAAC,MAAM,CAAC;IAC/B,IAAA,wCAAiB,GAAE;IACnB,IAAA,2BAAS,GAAE;IACX,IAAA,iBAAQ,EAAC,6CAAoB,CAAC;qCAGH,4BAAY;QACF,kCAAe;QACzB,4BAAY;QACT,gCAAc;QACb,qCAAgB;QACd,yCAAkB;QACtB,iCAAc;QACb,kCAAe;QACV,6CAAoB;GAV3C,eAAe,CAyY3B"}