dialog-survey 1.11.3 → 1.11.4

package/VERSION

@@ -1 +1 @@
-1.11.3
+1.11.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dialog-survey",
-  "version": "1.11.3",
+  "version": "1.11.4",
   "type": "module",
   "description": "AI-powered survey dialog bot that conducts async multi-turn conversations via DingTalk",
   "repository": {
@@ -27,7 +27,7 @@
   },
   "scripts": {
     "dev": "tsx --env-file=.env --watch src/server.ts",
-    "build": "tsc",
+    "build": "tsc -p tsconfig.build.json",
     "prisma:generate": "prisma generate",
     "test": "vitest",
     "test:coverage": "vitest run --coverage",

package/scripts/sync-version.cjs

@@ -36,6 +36,9 @@ const path = require('node:path');
  */
 const PACKAGE_TARGETS = [
   'package.json',
+  // package-lock.json carries the package version twice (root + packages[""]) and
+  // was historically left stale by the fan-out — see updatePackageTarget() below.
+  'package-lock.json',
   'src/npm-package/package.json',
   'plugins/claude-code/.claude-plugin/plugin.json',
   'plugins/opencode/package.json',
@@ -114,6 +117,12 @@ function updatePackageTarget(target, version) {
   const contents = fs.readFileSync(full, 'utf8');
   const json = JSON.parse(contents);
   json.version = version;
+  // package-lock.json mirrors the version in the self-referencing packages[""] entry
+  // (npm reads that one for the root project); update both so the lock never drifts
+  // from package.json again. Mirrors update_package_target() in the .sh.
+  if (target === 'package-lock.json' && json.packages?.['']) {
+    json.packages[''].version = version;
+  }
   const updated = `${JSON.stringify(json, null, 2)}\n`;
   // Idempotence: a same-value rewrite must not touch mtime or bytes.
   if (updated !== contents) {

package/scripts/sync-version.sh

@@ -19,6 +19,7 @@ cd "$ROOT"
 if [ "${1:-}" = "--list-targets" ]; then
   for target in \
     package.json \
+    package-lock.json \
     src/npm-package/package.json \
     plugins/claude-code/.claude-plugin/plugin.json \
     plugins/opencode/package.json \
@@ -69,11 +70,16 @@ update_package_target() {
     const [, target, version] = process.argv;
     const json = JSON.parse(fs.readFileSync(target, "utf8"));
     json.version = version;
+    // package-lock.json mirrors the version in packages[""]; update both. Mirrors
+    // updatePackageTarget() in the .cjs.
+    if (target === "package-lock.json" && json.packages && json.packages[""]) {
+      json.packages[""].version = version;
+    }
     fs.writeFileSync(target, `${JSON.stringify(json, null, 2)}\n`);
   ' "$pkg" "$NEW_VERSION"
 }
 
-for pkg in package.json src/npm-package/package.json \
+for pkg in package.json package-lock.json src/npm-package/package.json \
            plugins/claude-code/.claude-plugin/plugin.json \
            plugins/opencode/package.json \
            src/npm-package/plugins/claude-code/.claude-plugin/plugin.json \

package/dist/tests/admin-auth-integration.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=admin-auth-integration.test.d.ts.map

package/dist/tests/admin-auth-integration.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin-auth-integration.test.d.ts","sourceRoot":"","sources":["../../tests/admin-auth-integration.test.ts"],"names":[],"mappings":""}

package/dist/tests/admin-auth-integration.test.js

@@ -1,91 +0,0 @@
-import secureSession from '@fastify/secure-session';
-import Fastify from 'fastify';
-import { afterEach, describe, expect, it, vi } from 'vitest';
-import { adminAuth } from '../src/middleware/admin-auth.js';
-async function createProtectedApp(handler) {
-    const app = Fastify({ logger: false });
-    await app.register(secureSession, {
-        secret: 'a'.repeat(32),
-        salt: 'b'.repeat(16),
-    });
-    app.route({
-        method: ['GET', 'POST'],
-        url: '/protected',
-        preHandler: adminAuth,
-        handler: async () => {
-            handler();
-            return { reached: true };
-        },
-    });
-    app.post('/login', async (request) => {
-        request.session.set('admin', {
-            userId: 'session-admin',
-            role: 'admin',
-            loginTime: Date.now(),
-            lastActivity: Date.now(),
-        });
-        return { loggedIn: true };
-    });
-    await app.ready();
-    return app;
-}
-describe('adminAuth Fastify integration', () => {
-    let apps = [];
-    function trackApp(app) {
-        apps.push(app);
-        return app;
-    }
-    afterEach(async () => {
-        vi.unstubAllEnvs();
-        vi.useRealTimers();
-        for (const app of apps) {
-            await app.close();
-        }
-        apps = [];
-    });
-    it('should not reach a protected handler after an anonymous redirect', async () => {
-        const handler = vi.fn();
-        const app = trackApp(await createProtectedApp(handler));
-        const response = await app.inject({ method: 'GET', url: '/protected' });
-        expect(response.statusCode).toBe(302);
-        expect(response.headers.location).toBe('/admin/login');
-        expect(handler).not.toHaveBeenCalled();
-    });
-    it('should not reach a protected handler after an anonymous 401 response', async () => {
-        const handler = vi.fn();
-        const app = trackApp(await createProtectedApp(handler));
-        const response = await app.inject({ method: 'POST', url: '/protected' });
-        expect(response.statusCode).toBe(401);
-        expect(handler).not.toHaveBeenCalled();
-    });
-    it('should persist refreshed activity across requests', async () => {
-        vi.useFakeTimers();
-        vi.setSystemTime(new Date('2026-08-20T00:00:00.000Z'));
-        vi.stubEnv('SESSION_MAX_AGE', '10');
-        const handler = vi.fn();
-        const app = trackApp(await createProtectedApp(handler));
-        const loginResponse = await app.inject({ method: 'POST', url: '/login' });
-        const sessionCookie = loginResponse.headers['set-cookie'];
-        vi.advanceTimersByTime(9_000);
-        const firstResponse = await app.inject({
-            method: 'GET',
-            url: '/protected',
-            headers: { cookie: sessionCookie },
-        });
-        const refreshedCookie = firstResponse.headers['set-cookie'];
-        expect(refreshedCookie).toBeDefined();
-        if (!refreshedCookie) {
-            throw new Error('Protected response did not refresh the session cookie');
-        }
-        vi.advanceTimersByTime(9_000);
-        const secondResponse = await app.inject({
-            method: 'GET',
-            url: '/protected',
-            headers: { cookie: refreshedCookie },
-        });
-        expect(firstResponse.statusCode).toBe(200);
-        expect(secondResponse.statusCode).toBe(200);
-        expect(handler).toHaveBeenCalledTimes(2);
-    });
-});
-//# sourceMappingURL=admin-auth-integration.test.js.map

package/dist/tests/admin-auth-integration.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin-auth-integration.test.js","sourceRoot":"","sources":["../../tests/admin-auth-integration.test.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,MAAM,yBAAyB,CAAC;AACpD,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAE5D,KAAK,UAAU,kBAAkB,CAAC,OAAmB;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACvC,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE;QAChC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;KACrB,CAAC,CAAC;IACH,GAAG,CAAC,KAAK,CAAC;QACR,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,GAAG,EAAE,YAAY;QACjB,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;KACF,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACnC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YAC3B,MAAM,EAAE,eAAe;YACvB,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;SACzB,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IAClB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,IAAI,IAAI,GAAsC,EAAE,CAAC;IAEjD,SAAS,QAAQ,CAAC,GAA+B;QAC/C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,OAAO,GAAG,CAAC;IACb,CAAC;IAED,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;QACD,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;QAExD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;QAExE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACvD,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;QAExD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;QAEzE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,EAAE,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;QACvD,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;QAExD,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1E,MAAM,aAAa,GAAG,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC1D,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAE9B,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,YAAY;YACjB,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;SACnC,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC5D,MAAM,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC;QACtC,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAE9B,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YACtC,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,YAAY;YACjB,OAAO,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE;SACrC,CAAC,CAAC;QAEH,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/admin-auth-routes.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=admin-auth-routes.test.d.ts.map

package/dist/tests/admin-auth-routes.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin-auth-routes.test.d.ts","sourceRoot":"","sources":["../../tests/admin-auth-routes.test.ts"],"names":[],"mappings":""}

package/dist/tests/admin-auth-routes.test.js

@@ -1,290 +0,0 @@
-import fastifyCsrfProtection from '@fastify/csrf-protection';
-import fastifyFormbody from '@fastify/formbody';
-import secureSession from '@fastify/secure-session';
-import fastifyView from '@fastify/view';
-import bcrypt from 'bcryptjs';
-import Fastify from 'fastify';
-import nunjucks from 'nunjucks';
-import { afterEach, beforeAll, beforeEach, describe, expect, it, vi } from 'vitest';
-import { adminAuthRoutes } from '../src/routes/admin-auth.js';
-import { loginRateLimiter } from '../src/utils/security.js';
-const testUsername = 'testadmin';
-const testPassword = 'testpassword123';
-let testHash;
-function cookieHeader(...setCookieHeaders) {
-    const cookies = new Map();
-    for (const setCookieHeader of setCookieHeaders) {
-        const values = Array.isArray(setCookieHeader) ? setCookieHeader : [setCookieHeader];
-        for (const value of values) {
-            const pair = value?.split(';')[0];
-            const name = pair?.split('=')[0];
-            if (pair && name) {
-                cookies.set(name, pair);
-            }
-        }
-    }
-    return [...cookies.values()].join('; ');
-}
-function formBody(values) {
-    return new URLSearchParams(values).toString();
-}
-describe('adminAuthRoutes', () => {
-    let app;
-    beforeAll(async () => {
-        testHash = await bcrypt.hash(testPassword, 4);
-    });
-    beforeEach(async () => {
-        loginRateLimiter.clear();
-        app = Fastify();
-        await app.register(secureSession, {
-            secret: 'a'.repeat(32),
-            salt: 'b'.repeat(16),
-        });
-        await app.register(fastifyCsrfProtection);
-        await app.register(fastifyFormbody);
-        await app.register(fastifyView, {
-            engine: { nunjucks },
-            templates: 'src/views',
-            options: { autoescape: true, noCache: true },
-        });
-        await app.register(adminAuthRoutes);
-        app.get('/probe', async (request) => ({
-            admin: request.session.get('admin') ?? null,
-        }));
-        process.env['ADMIN_USERNAME'] = testUsername;
-        process.env['ADMIN_PASSWORD_HASH'] = testHash;
-        await app.ready();
-    });
-    afterEach(async () => {
-        vi.restoreAllMocks();
-        await app.close();
-        delete process.env['ADMIN_USERNAME'];
-        delete process.env['ADMIN_PASSWORD_HASH'];
-        delete process.env['SESSION_MAX_AGE'];
-    });
-    async function getCsrfState() {
-        const response = await app.inject({ method: 'GET', url: '/admin/login' });
-        const token = /name="_csrf" value="([^"]+)"/.exec(response.body)?.[1];
-        if (!token) {
-            throw new Error('Login page did not render a CSRF token');
-        }
-        return { token, cookie: cookieHeader(response.headers['set-cookie']) };
-    }
-    async function login(csrf, username = testUsername, password = testPassword) {
-        return app.inject({
-            method: 'POST',
-            url: '/admin/login',
-            headers: {
-                cookie: csrf.cookie,
-                'content-type': 'application/x-www-form-urlencoded',
-            },
-            payload: formBody({ username, password, _csrf: csrf.token }),
-        });
-    }
-    it('renders a CSRF-protected login page', async () => {
-        const response = await app.inject({ method: 'GET', url: '/admin/login' });
-        expect(response.statusCode).toBe(200);
-        expect(response.body).toContain('name="_csrf"');
-        expect(response.headers['set-cookie']).toBeDefined();
-    });
-    it('rejects a tokenless login', async () => {
-        const response = await app.inject({
-            method: 'POST',
-            url: '/admin/login',
-            payload: { username: testUsername, password: testPassword },
-        });
-        expect(response.statusCode).toBe(403);
-    });
-    it('rejects a login whose token does not match its cookie', async () => {
-        const csrf = await getCsrfState();
-        const response = await app.inject({
-            method: 'POST',
-            url: '/admin/login',
-            headers: {
-                cookie: csrf.cookie,
-                'content-type': 'application/x-www-form-urlencoded',
-            },
-            payload: formBody({ username: testUsername, password: testPassword, _csrf: 'invalid' }),
-        });
-        expect(response.statusCode).toBe(403);
-    });
-    it('rejects a login whose token and storage cookie come from different sessions', async () => {
-        const firstSession = await getCsrfState();
-        const secondSession = await getCsrfState();
-        const response = await app.inject({
-            method: 'POST',
-            url: '/admin/login',
-            headers: {
-                cookie: firstSession.cookie,
-                'content-type': 'application/x-www-form-urlencoded',
-            },
-            payload: formBody({
-                username: testUsername,
-                password: testPassword,
-                _csrf: secondSession.token,
-            }),
-        });
-        expect(response.statusCode).toBe(403);
-    });
-    it('logs in with a matching token and cookie', async () => {
-        const response = await login(await getCsrfState());
-        expect(response.statusCode).toBe(302);
-        expect(response.headers.location).toBe('/admin');
-    });
-    it('reaches invalid-credential outcomes with valid CSRF', async () => {
-        const response = await login(await getCsrfState(), testUsername, 'wrong-password');
-        expect(response.statusCode).toBe(401);
-        expect(response.body).toContain('用户名或密码错误');
-    });
-    it('does not log the submitted username on a failed login', async () => {
-        const warnSpy = vi.spyOn(app.log, 'warn');
-        const submittedUsername = 'attacker-probe-username';
-        const response = await login(await getCsrfState(), submittedUsername, 'wrong-password');
-        expect(response.statusCode).toBe(401);
-        const loggedText = JSON.stringify(warnSpy.mock.calls);
-        expect(loggedText).not.toContain(submittedUsername);
-    });
-    it('clears an expired session when the login page is requested', async () => {
-        const csrf = await getCsrfState();
-        const loginResponse = await login(csrf);
-        const sessionCookie = cookieHeader(csrf.cookie, loginResponse.headers['set-cookie']);
-        process.env['SESSION_MAX_AGE'] = '10';
-        const nowSpy = vi.spyOn(Date, 'now').mockReturnValue(Date.now() + 60_000);
-        const loginPageResponse = await app.inject({
-            method: 'GET',
-            url: '/admin/login',
-            headers: { cookie: sessionCookie },
-        });
-        nowSpy.mockRestore();
-        expect(loginPageResponse.statusCode).toBe(200);
-        const probeResponse = await app.inject({
-            method: 'GET',
-            url: '/probe',
-            headers: {
-                cookie: cookieHeader(sessionCookie, loginPageResponse.headers['set-cookie']),
-            },
-        });
-        expect(probeResponse.statusCode).toBe(200);
-        expect(JSON.parse(probeResponse.body).admin).toBeNull();
-    });
-    it('reaches configuration errors with valid CSRF', async () => {
-        delete process.env['ADMIN_USERNAME'];
-        delete process.env['ADMIN_PASSWORD_HASH'];
-        const response = await login(await getCsrfState());
-        expect(response.statusCode).toBe(500);
-        expect(response.body).toContain('管理员凭据未设置');
-    });
-    it('reaches request validation with valid CSRF', async () => {
-        const csrf = await getCsrfState();
-        const response = await app.inject({
-            method: 'POST',
-            url: '/admin/login',
-            headers: {
-                cookie: csrf.cookie,
-                'content-type': 'application/x-www-form-urlencoded',
-            },
-            payload: formBody({ username: '', password: '', _csrf: csrf.token }),
-        });
-        expect(response.statusCode).toBe(400);
-        expect(response.body).toContain('无效的请求格式');
-    });
-    it('uses inactivity rather than absolute login age for the login-page redirect', async () => {
-        const currentTime = new Date('2026-08-20T00:00:00Z').getTime();
-        const expiredLoginTime = currentTime - 12_000;
-        vi.spyOn(Date, 'now')
-            .mockReturnValueOnce(expiredLoginTime)
-            .mockReturnValueOnce(currentTime)
-            .mockReturnValue(currentTime);
-        process.env['SESSION_MAX_AGE'] = '10';
-        const csrf = await getCsrfState();
-        const loginResponse = await login(csrf);
-        const sessionCookie = cookieHeader(csrf.cookie, loginResponse.headers['set-cookie']);
-        const response = await app.inject({
-            method: 'GET',
-            url: '/admin/login',
-            headers: { cookie: sessionCookie },
-        });
-        expect(response.statusCode).toBe(302);
-        expect(response.headers.location).toBe('/admin');
-    });
-    it('rejects a tokenless logout', async () => {
-        const csrf = await getCsrfState();
-        const loginResponse = await login(csrf);
-        const authenticatedCookie = cookieHeader(csrf.cookie, loginResponse.headers['set-cookie']);
-        const response = await app.inject({
-            method: 'POST',
-            url: '/admin/logout',
-            headers: { cookie: authenticatedCookie },
-        });
-        expect(response.statusCode).toBe(403);
-    });
-    it('logs out an authenticated session with matching CSRF and clears it', async () => {
-        const csrf = await getCsrfState();
-        const loginResponse = await login(csrf);
-        const authenticatedCookie = cookieHeader(csrf.cookie, loginResponse.headers['set-cookie']);
-        const logoutResponse = await app.inject({
-            method: 'POST',
-            url: '/admin/logout',
-            headers: {
-                cookie: authenticatedCookie,
-                'content-type': 'application/x-www-form-urlencoded',
-            },
-            payload: formBody({ _csrf: csrf.token }),
-        });
-        const loggedOutCookie = cookieHeader(authenticatedCookie, logoutResponse.headers['set-cookie']);
-        const loginPageResponse = await app.inject({
-            method: 'GET',
-            url: '/admin/login',
-            headers: { cookie: loggedOutCookie },
-        });
-        expect(logoutResponse.statusCode).toBe(302);
-        expect(logoutResponse.headers.location).toBe('/admin/login');
-        expect(loginPageResponse.statusCode).toBe(200);
-    });
-    it.each([
-        ['GET', '/admin/content/change-password'],
-        ['POST', '/admin/change-password'],
-    ])('returns 404 for removed password route %s %s', async (method, url) => {
-        const response = await app.inject({ method, url });
-        expect(response.statusCode).toBe(404);
-    });
-    it('returns 429 after repeated failed logins from the same IP', async () => {
-        for (let attempt = 0; attempt < 5; attempt += 1) {
-            const failure = await login(await getCsrfState(), testUsername, 'wrong-password');
-            expect(failure.statusCode).toBe(401);
-        }
-        const blocked = await login(await getCsrfState(), testUsername, testPassword);
-        expect(blocked.statusCode).toBe(429);
-        expect(blocked.body).toContain('尝试次数过多');
-    });
-    it('does not count request-validation failures toward the rate limit', async () => {
-        const csrf = await getCsrfState();
-        const invalidBody = await app.inject({
-            method: 'POST',
-            url: '/admin/login',
-            headers: {
-                cookie: csrf.cookie,
-                'content-type': 'application/x-www-form-urlencoded',
-            },
-            payload: formBody({ username: '', password: '', _csrf: csrf.token }),
-        });
-        expect(invalidBody.statusCode).toBe(400);
-        for (let attempt = 0; attempt < 4; attempt += 1) {
-            const failure = await login(await getCsrfState(), testUsername, 'wrong-password');
-            expect(failure.statusCode).toBe(401);
-        }
-        const success = await login(await getCsrfState());
-        expect(success.statusCode).toBe(302);
-    });
-    it('clears the failure counter after a successful login', async () => {
-        await login(await getCsrfState(), testUsername, 'wrong-password');
-        await login(await getCsrfState(), testUsername, 'wrong-password');
-        const success = await login(await getCsrfState());
-        expect(success.statusCode).toBe(302);
-        for (let attempt = 0; attempt < 4; attempt += 1) {
-            const failure = await login(await getCsrfState(), testUsername, 'wrong-password');
-            expect(failure.statusCode).toBe(401);
-        }
-    });
-});
-//# sourceMappingURL=admin-auth-routes.test.js.map

package/dist/tests/admin-auth-routes.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin-auth-routes.test.js","sourceRoot":"","sources":["../../tests/admin-auth-routes.test.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,MAAM,0BAA0B,CAAC;AAC7D,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,aAAa,MAAM,yBAAyB,CAAC;AACpD,OAAO,WAAW,MAAM,eAAe,CAAC;AACxC,OAAO,MAAM,MAAM,UAAU,CAAC;AAC9B,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEpF,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,MAAM,YAAY,GAAG,WAAW,CAAC;AACjC,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,IAAI,QAAgB,CAAC;AAOrB,SAAS,YAAY,CAAC,GAAG,gBAAmD;IAC1E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QACpF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,QAAQ,CAAC,MAAwC;IACxD,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;AAChD,CAAC;AAED,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,IAAI,GAA+B,CAAC;IAEpC,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,gBAAgB,CAAC,KAAK,EAAE,CAAC;QACzB,GAAG,GAAG,OAAO,EAAE,CAAC;QAChB,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE;YAChC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;SACrB,CAAC,CAAC;QACH,MAAM,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;QAC1C,MAAM,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QACpC,MAAM,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE;YAC9B,MAAM,EAAE,EAAE,QAAQ,EAAE;YACpB,SAAS,EAAE,WAAW;YACtB,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;SAC7C,CAAC,CAAC;QACH,MAAM,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QACpC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAuB,EAAE,EAAE,CAAC,CAAC;YACpD,KAAK,EAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAA8B,IAAI,IAAI;SAC1E,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,YAAY,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,GAAG,QAAQ,CAAC;QAC9C,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,EAAE,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACrC,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAC1C,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,YAAY;QACzB,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,8BAA8B,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;IACzE,CAAC;IAED,KAAK,UAAU,KAAK,CAClB,IAAe,EACf,QAAQ,GAAG,YAAY,EACvB,QAAQ,GAAG,YAAY;QAEvB,OAAO,GAAG,CAAC,MAAM,CAAC;YAChB,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,cAAc;YACnB,OAAO,EAAE;gBACP,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,cAAc,EAAE,mCAAmC;aACpD;YACD,OAAO,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;SAC7D,CAAC,CAAC;IACL,CAAC;IAED,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC;QAE1E,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAChD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAChC,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,cAAc;YACnB,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE;SAC5D,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAChC,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,cAAc;YACnB,OAAO,EAAE;gBACP,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,cAAc,EAAE,mCAAmC;aACpD;YACD,OAAO,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;SACxF,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,YAAY,GAAG,MAAM,YAAY,EAAE,CAAC;QAC1C,MAAM,aAAa,GAAG,MAAM,YAAY,EAAE,CAAC;QAE3C,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAChC,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,cAAc;YACnB,OAAO,EAAE;gBACP,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,cAAc,EAAE,mCAAmC;aACpD;YACD,OAAO,EAAE,QAAQ,CAAC;gBAChB,QAAQ,EAAE,YAAY;gBACtB,QAAQ,EAAE,YAAY;gBACtB,KAAK,EAAE,aAAa,CAAC,KAAK;aAC3B,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;QAEnD,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,YAAY,EAAE,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;QAEnF,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;QAEpD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,YAAY,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;QAExF,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;QAClC,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QAErF,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC;QACtC,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;QAC1E,MAAM,iBAAiB,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YACzC,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,cAAc;YACnB,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;SACnC,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,EAAE,CAAC;QAErB,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE/C,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,QAAQ;YACb,OAAO,EAAE;gBACP,MAAM,EAAE,YAAY,CAAC,aAAa,EAAE,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;aAC7E;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACrC,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAE1C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;QAEnD,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAChC,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,cAAc;YACnB,OAAO,EAAE;gBACP,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,cAAc,EAAE,mCAAmC;aACpD;YACD,OAAO,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;SACrE,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE,CAAC;QAC/D,MAAM,gBAAgB,GAAG,WAAW,GAAG,MAAM,CAAC;QAC9C,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;aAClB,mBAAmB,CAAC,gBAAgB,CAAC;aACrC,mBAAmB,CAAC,WAAW,CAAC;aAChC,eAAe,CAAC,WAAW,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;QAClC,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAChC,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,cAAc;YACnB,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;SACnC,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;QAClC,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,mBAAmB,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QAC3F,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAChC,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,eAAe;YACpB,OAAO,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE;SACzC,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;QAClC,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,mBAAmB,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QAC3F,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YACtC,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,eAAe;YACpB,OAAO,EAAE;gBACP,MAAM,EAAE,mBAAmB;gBAC3B,cAAc,EAAE,mCAAmC;aACpD;YACD,OAAO,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;SACzC,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,YAAY,CAAC,mBAAmB,EAAE,cAAc,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QAChG,MAAM,iBAAiB,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YACzC,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,cAAc;YACnB,OAAO,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE;SACrC,CAAC,CAAC;QAEH,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7D,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,KAAK,EAAE,gCAAgC,CAAC;QACzC,CAAC,MAAM,EAAE,wBAAwB,CAAC;KAC1B,CAAC,CAAC,8CAA8C,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAChF,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAEnD,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,YAAY,EAAE,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;YAClF,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,YAAY,EAAE,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;QAE9E,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YACnC,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,cAAc;YACnB,OAAO,EAAE;gBACP,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,cAAc,EAAE,mCAAmC;aACpD;YACD,OAAO,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;SACrE,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEzC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,YAAY,EAAE,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;YAClF,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,KAAK,CAAC,MAAM,YAAY,EAAE,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;QAClE,MAAM,KAAK,CAAC,MAAM,YAAY,EAAE,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAErC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,YAAY,EAAE,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;YAClF,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/admin-auth.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=admin-auth.test.d.ts.map

package/dist/tests/admin-auth.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin-auth.test.d.ts","sourceRoot":"","sources":["../../tests/admin-auth.test.ts"],"names":[],"mappings":""}