ysk-omni 1.0.0

package/dist/controllers/admin/documents.handlers.js

@@ -0,0 +1,207 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.adminDocumentsHandlers = void 0;
+const database_1 = require("../../config/database");
+const constants_1 = require("../../config/constants");
+const exception_factory_1 = require("../../exceptions/exception.factory");
+const async_handler_1 = require("../../utils/async-handler");
+const audit_service_1 = require("../../services/audit.service");
+const document_service_1 = require("../../services/document.service");
+const env_1 = require("../../config/env");
+const client_ip_1 = require("../../utils/client-ip");
+const list_sort_1 = require("../../utils/list-sort");
+const DOC_SORT_FIELDS = [
+    'createdAt',
+    'originalName',
+    'mimeType',
+    'sizeBytes',
+    'storageType',
+];
+/** Admin handlers: documents */
+exports.adminDocumentsHandlers = {
+    listDocuments: (0, async_handler_1.asyncHandler)(async (req, res) => {
+        const query = req.query;
+        const where = { deletedAt: null };
+        if (query.apiKeyId)
+            where.apiKeyId = query.apiKeyId;
+        if (query.storageType === 'db' || query.storageType === 'filesystem') {
+            where.storageType = query.storageType;
+        }
+        const q = query.q?.trim();
+        if (q) {
+            where.OR = [
+                { originalName: { contains: q } },
+                { mimeType: { contains: q } },
+                { checksumSha256: { contains: q } },
+            ];
+        }
+        const createdAt = {};
+        if (query.from) {
+            const d = new Date(query.from);
+            if (!Number.isNaN(d.getTime()))
+                createdAt.gte = d;
+        }
+        if (query.to) {
+            const d = new Date(query.to);
+            if (!Number.isNaN(d.getTime()))
+                createdAt.lte = d;
+        }
+        if (Object.keys(createdAt).length)
+            where.createdAt = createdAt;
+        const orderBy = (0, list_sort_1.resolveScalarOrderBy)(query.sortBy, query.sortDir, DOC_SORT_FIELDS, 'createdAt');
+        const [rows, total] = await Promise.all([
+            database_1.prisma.document.findMany({
+                where,
+                orderBy,
+                take: query.limit,
+                skip: query.offset,
+                include: {
+                    apiKey: { select: { id: true, name: true, keyPrefix: true } },
+                },
+            }),
+            database_1.prisma.document.count({ where }),
+        ]);
+        res.json({
+            object: 'list',
+            total,
+            limit: query.limit,
+            offset: query.offset,
+            meta: {
+                // Do not expose host storageDir (path disclosure)
+                documentDbMaxBytes: env_1.env.DOCUMENT_DB_MAX_BYTES,
+                uploadMaxBytes: env_1.env.UPLOAD_MAX_BYTES,
+            },
+            data: rows.map((d) => ({
+                id: d.id,
+                originalName: d.originalName,
+                mimeType: d.mimeType,
+                sizeBytes: d.sizeBytes,
+                storageType: d.storageType,
+                storagePath: d.storagePath,
+                checksumSha256: d.checksumSha256,
+                createdAt: d.createdAt,
+                apiKey: d.apiKey,
+            })),
+        });
+    }),
+    getDocument: (0, async_handler_1.asyncHandler)(async (req, res) => {
+        if (!req.apiKey)
+            throw exception_factory_1.ExceptionFactory.unauthorized();
+        const doc = await database_1.prisma.document.findFirst({
+            where: { id: String(req.params.id), deletedAt: null },
+            include: {
+                apiKey: { select: { id: true, name: true, keyPrefix: true } },
+            },
+        });
+        if (!doc)
+            throw exception_factory_1.ExceptionFactory.notFound('Document');
+        let contentPreview = null;
+        let imageDataUrl = null;
+        let isBinary = false;
+        const isImage = (0, constants_1.isImageMime)(doc.mimeType);
+        /** Inline base64 preview cap — larger images use authenticated download in UI */
+        const IMAGE_INLINE_MAX_BYTES = 3 * 1024 * 1024;
+        try {
+            if (isImage) {
+                if (doc.sizeBytes <= IMAGE_INLINE_MAX_BYTES) {
+                    const buf = await document_service_1.documentService.readDecryptedContent(doc.apiKeyId, doc.id);
+                    const mime = doc.mimeType || 'image/jpeg';
+                    imageDataUrl = `data:${mime};base64,${buf.toString('base64')}`;
+                    contentPreview = null;
+                    isBinary = false;
+                }
+                else {
+                    // Too large for JSON inline — client should load /download with auth
+                    isBinary = false;
+                    contentPreview = null;
+                    imageDataUrl = null;
+                }
+            }
+            else {
+                const buf = await document_service_1.documentService.readDecryptedContent(doc.apiKeyId, doc.id);
+                if (doc.mimeType === 'application/pdf' ||
+                    buf.includes(0) ||
+                    !(0, constants_1.isTextualMime)(doc.mimeType)) {
+                    isBinary = true;
+                    contentPreview = null;
+                }
+                else {
+                    const text = buf.toString('utf8');
+                    if (text.includes('\u0000')) {
+                        isBinary = true;
+                        contentPreview = null;
+                    }
+                    else {
+                        contentPreview = text.slice(0, 50_000);
+                    }
+                }
+            }
+        }
+        catch {
+            contentPreview = '[decrypt_failed]';
+        }
+        await audit_service_1.auditService.log({
+            apiKeyId: req.apiKey.id,
+            action: constants_1.AUDIT_ACTIONS.DOCUMENT_READ,
+            resource: 'document',
+            resourceId: doc.id,
+            ip: (0, client_ip_1.requestIp)(req),
+        });
+        res.json({
+            object: 'admin.document',
+            data: {
+                id: doc.id,
+                originalName: doc.originalName,
+                mimeType: doc.mimeType,
+                sizeBytes: doc.sizeBytes,
+                storageType: doc.storageType,
+                // omit storagePath (host path disclosure)
+                checksumSha256: doc.checksumSha256,
+                createdAt: doc.createdAt,
+                apiKey: doc.apiKey,
+                content: contentPreview,
+                imageDataUrl,
+                isImage,
+                isBinary,
+                downloadAvailable: true,
+            },
+        });
+    }),
+    downloadDocument: (0, async_handler_1.asyncHandler)(async (req, res) => {
+        if (!req.apiKey)
+            throw exception_factory_1.ExceptionFactory.unauthorized();
+        const doc = await database_1.prisma.document.findFirst({
+            where: { id: String(req.params.id), deletedAt: null },
+        });
+        if (!doc)
+            throw exception_factory_1.ExceptionFactory.notFound('Document');
+        const buf = await document_service_1.documentService.readDecryptedContent(doc.apiKeyId, doc.id);
+        await audit_service_1.auditService.log({
+            apiKeyId: req.apiKey.id,
+            action: constants_1.AUDIT_ACTIONS.DOCUMENT_DOWNLOAD,
+            resource: 'document',
+            resourceId: doc.id,
+            meta: { originalName: doc.originalName, sizeBytes: doc.sizeBytes },
+            ip: (0, client_ip_1.requestIp)(req),
+        });
+        const safeName = doc.originalName.replace(/[\r\n"]/g, '_');
+        const encoded = encodeURIComponent(doc.originalName);
+        res.setHeader('Content-Type', doc.mimeType || 'application/octet-stream');
+        res.setHeader('Content-Disposition', `attachment; filename="${safeName}"; filename*=UTF-8''${encoded}`);
+        res.setHeader('Content-Length', String(buf.length));
+        res.setHeader('X-Content-Type-Options', 'nosniff');
+        res.status(200).send(buf);
+    }),
+    deleteDocument: (0, async_handler_1.asyncHandler)(async (req, res) => {
+        if (!req.apiKey)
+            throw exception_factory_1.ExceptionFactory.unauthorized();
+        const doc = await database_1.prisma.document.findFirst({
+            where: { id: String(req.params.id), deletedAt: null },
+        });
+        if (!doc)
+            throw exception_factory_1.ExceptionFactory.notFound('Document');
+        await document_service_1.documentService.softDelete(doc.apiKeyId, doc.id, (0, client_ip_1.requestIp)(req));
+        res.json({ object: 'document.deleted', id: doc.id, deleted: true });
+    }),
+};
+//# sourceMappingURL=documents.handlers.js.map

package/dist/controllers/admin/documents.handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documents.handlers.js","sourceRoot":"","sources":["../../../src/controllers/admin/documents.handlers.ts"],"names":[],"mappings":";;;AACA,oDAA+C;AAC/C,sDAAmF;AAEnF,0EAAsE;AACtE,6DAAyD;AACzD,gEAA4D;AAC5D,sEAAkE;AAClE,0CAAuC;AACvC,qDAAkD;AAClD,qDAA6D;AAE7D,MAAM,eAAe,GAAG;IACtB,WAAW;IACX,cAAc;IACd,UAAU;IACV,WAAW;IACX,aAAa;CACL,CAAC;AAEX,gCAAgC;AACnB,QAAA,sBAAsB,GAAG;IACpC,aAAa,EAAE,IAAA,4BAAY,EAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAChE,MAAM,KAAK,GAAG,GAAG,CAAC,KAEjB,CAAC;QACF,MAAM,KAAK,GAA4B,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC3D,IAAI,KAAK,CAAC,QAAQ;YAAE,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACpD,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;YACrE,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACxC,CAAC;QACD,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,EAAE,CAAC;YACN,KAAK,CAAC,EAAE,GAAG;gBACT,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE;gBACjC,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE;gBAC7B,EAAE,cAAc,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE;aACpC,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAA+B,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;gBAAE,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;gBAAE,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM;YAAE,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;QAE/D,MAAM,OAAO,GAAG,IAAA,gCAAoB,EAClC,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,OAAO,EACb,eAAe,EACf,WAAW,CACZ,CAAC;QAEF,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtC,iBAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACvB,KAAK;gBACL,OAAO;gBACP,IAAI,EAAE,KAAK,CAAC,KAAK;gBACjB,IAAI,EAAE,KAAK,CAAC,MAAM;gBAClB,OAAO,EAAE;oBACP,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;iBAC9D;aACF,CAAC;YACF,iBAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,MAAM;YACd,KAAK;YACL,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE;gBACJ,kDAAkD;gBAClD,kBAAkB,EAAE,SAAG,CAAC,qBAAqB;gBAC7C,cAAc,EAAE,SAAG,CAAC,gBAAgB;aACrC;YACD,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,cAAc,EAAE,CAAC,CAAC,cAAc;gBAChC,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,WAAW,EAAE,IAAA,4BAAY,EAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC9D,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,MAAM,oCAAgB,CAAC,YAAY,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,iBAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC1C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE;YACrD,OAAO,EAAE;gBACP,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;aAC9D;SACF,CAAC,CAAC;QACH,IAAI,CAAC,GAAG;YAAE,MAAM,oCAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAEtD,IAAI,cAAc,GAAkB,IAAI,CAAC;QACzC,IAAI,YAAY,GAAkB,IAAI,CAAC;QACvC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,OAAO,GAAG,IAAA,uBAAW,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,iFAAiF;QACjF,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;QAC/C,IAAI,CAAC;YACH,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,GAAG,CAAC,SAAS,IAAI,sBAAsB,EAAE,CAAC;oBAC5C,MAAM,GAAG,GAAG,MAAM,kCAAe,CAAC,oBAAoB,CACpD,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,EAAE,CACP,CAAC;oBACF,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,IAAI,YAAY,CAAC;oBAC1C,YAAY,GAAG,QAAQ,IAAI,WAAW,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC/D,cAAc,GAAG,IAAI,CAAC;oBACtB,QAAQ,GAAG,KAAK,CAAC;gBACnB,CAAC;qBAAM,CAAC;oBACN,qEAAqE;oBACrE,QAAQ,GAAG,KAAK,CAAC;oBACjB,cAAc,GAAG,IAAI,CAAC;oBACtB,YAAY,GAAG,IAAI,CAAC;gBACtB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,MAAM,kCAAe,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC7E,IACE,GAAG,CAAC,QAAQ,KAAK,iBAAiB;oBAClC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;oBACf,CAAC,IAAA,yBAAa,EAAC,GAAG,CAAC,QAAQ,CAAC,EAC5B,CAAC;oBACD,QAAQ,GAAG,IAAI,CAAC;oBAChB,cAAc,GAAG,IAAI,CAAC;gBACxB,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAClC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC5B,QAAQ,GAAG,IAAI,CAAC;wBAChB,cAAc,GAAG,IAAI,CAAC;oBACxB,CAAC;yBAAM,CAAC;wBACN,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;oBACzC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,cAAc,GAAG,kBAAkB,CAAC;QACtC,CAAC;QAED,MAAM,4BAAY,CAAC,GAAG,CAAC;YACrB,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE;YACvB,MAAM,EAAE,yBAAa,CAAC,aAAa;YACnC,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,GAAG,CAAC,EAAE;YAClB,EAAE,EAAE,IAAA,qBAAS,EAAC,GAAG,CAAC;SACnB,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,gBAAgB;YACxB,IAAI,EAAE;gBACJ,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,0CAA0C;gBAC1C,cAAc,EAAE,GAAG,CAAC,cAAc;gBAClC,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,OAAO,EAAE,cAAc;gBACvB,YAAY;gBACZ,OAAO;gBACP,QAAQ;gBACR,iBAAiB,EAAE,IAAI;aACxB;SACF,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,gBAAgB,EAAE,IAAA,4BAAY,EAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACnE,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,MAAM,oCAAgB,CAAC,YAAY,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,iBAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC1C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE;SACtD,CAAC,CAAC;QACH,IAAI,CAAC,GAAG;YAAE,MAAM,oCAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAEtD,MAAM,GAAG,GAAG,MAAM,kCAAe,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAE7E,MAAM,4BAAY,CAAC,GAAG,CAAC;YACrB,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE;YACvB,MAAM,EAAE,yBAAa,CAAC,iBAAiB;YACvC,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,GAAG,CAAC,EAAE;YAClB,IAAI,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE;YAClE,EAAE,EAAE,IAAA,qBAAS,EAAC,GAAG,CAAC;SACnB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACrD,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,CAAC,QAAQ,IAAI,0BAA0B,CAAC,CAAC;QAC1E,GAAG,CAAC,SAAS,CACX,qBAAqB,EACrB,yBAAyB,QAAQ,uBAAuB,OAAO,EAAE,CAClE,CAAC;QACF,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QACpD,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC,CAAC;IAEF,cAAc,EAAE,IAAA,4BAAY,EAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACjE,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,MAAM,oCAAgB,CAAC,YAAY,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,iBAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC1C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE;SACtD,CAAC,CAAC;QACH,IAAI,CAAC,GAAG;YAAE,MAAM,oCAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACtD,MAAM,kCAAe,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,IAAA,qBAAS,EAAC,GAAG,CAAC,CAAC,CAAC;QACvE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,CAAC,CAAC;CAEH,CAAC"}

package/dist/controllers/admin/keys.handlers.d.ts

@@ -0,0 +1,8 @@
+/** Admin handlers: keys */
+export declare const adminKeysHandlers: {
+    listKeys: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    createKey: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    updateKey: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    revokeKey: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+};
+//# sourceMappingURL=keys.handlers.d.ts.map

package/dist/controllers/admin/keys.handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.handlers.d.ts","sourceRoot":"","sources":["../../../src/controllers/admin/keys.handlers.ts"],"names":[],"mappings":"AAaA,2BAA2B;AAC3B,eAAO,MAAM,iBAAiB;;;;;CAoF7B,CAAC"}

package/dist/controllers/admin/keys.handlers.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.adminKeysHandlers = void 0;
+const exception_factory_1 = require("../../exceptions/exception.factory");
+const async_handler_1 = require("../../utils/async-handler");
+const api_key_service_1 = require("../../services/api-key.service");
+const role_normalize_1 = require("../../utils/role-normalize");
+const client_ip_1 = require("../../utils/client-ip");
+/** Admin handlers: keys */
+exports.adminKeysHandlers = {
+    listKeys: (0, async_handler_1.asyncHandler)(async (req, res) => {
+        const query = req.query;
+        const isActiveRaw = query.isActive;
+        let isActive;
+        if (isActiveRaw === 'true' || isActiveRaw === '1')
+            isActive = true;
+        if (isActiveRaw === 'false' || isActiveRaw === '0')
+            isActive = false;
+        const all = query.all === '1' || query.all === 'true' || query.all === 'yes';
+        const result = await api_key_service_1.apiKeyService.list({
+            q: query.q,
+            role: query.role,
+            mode: query.mode,
+            isActive,
+            limit: query.limit,
+            offset: query.offset,
+            all,
+            sortBy: query.sortBy,
+            sortDir: query.sortDir,
+        });
+        res.json({
+            object: 'list',
+            total: result.total,
+            limit: result.limit,
+            offset: result.offset,
+            data: result.data,
+        });
+    }),
+    createKey: (0, async_handler_1.asyncHandler)(async (req, res) => {
+        if (!req.apiKey)
+            throw exception_factory_1.ExceptionFactory.unauthorized();
+        const body = req.body;
+        const role = (0, role_normalize_1.normalizeApiKeyRole)(body.role);
+        const created = await api_key_service_1.apiKeyService.create({
+            name: body.name,
+            role,
+            mode: (0, role_normalize_1.normalizeApiKeyMode)(role, body.mode),
+            rateLimit: body.rateLimit,
+            maxTurns: body.maxTurns,
+            timeoutMs: body.timeoutMs,
+            ipWhitelist: body.ipWhitelist,
+            allowedModels: body.allowedModels,
+            actorApiKeyId: req.apiKey.id,
+            ip: (0, client_ip_1.requestIp)(req),
+        });
+        res.status(201).json({ object: 'api_key', data: created });
+    }),
+    updateKey: (0, async_handler_1.asyncHandler)(async (req, res) => {
+        if (!req.apiKey)
+            throw exception_factory_1.ExceptionFactory.unauthorized();
+        const body = req.body;
+        const data = await api_key_service_1.apiKeyService.update(String(req.params.id), {
+            name: body.name,
+            role: body.role !== undefined
+                ? (0, role_normalize_1.normalizeApiKeyRole)(body.role)
+                : undefined,
+            mode: body.mode,
+            rateLimit: body.rateLimit,
+            isActive: body.isActive,
+            maxTurns: body.maxTurns,
+            timeoutMs: body.timeoutMs,
+            ipWhitelist: body.ipWhitelist,
+            allowedModels: body.allowedModels,
+        }, req.apiKey.id, (0, client_ip_1.requestIp)(req));
+        res.json({ object: 'api_key', data });
+    }),
+    revokeKey: (0, async_handler_1.asyncHandler)(async (req, res) => {
+        if (!req.apiKey)
+            throw exception_factory_1.ExceptionFactory.unauthorized();
+        await api_key_service_1.apiKeyService.revoke(String(req.params.id), req.apiKey.id, (0, client_ip_1.requestIp)(req));
+        res.json({ object: 'api_key.deleted', id: req.params.id, deleted: true });
+    }),
+};
+//# sourceMappingURL=keys.handlers.js.map

package/dist/controllers/admin/keys.handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.handlers.js","sourceRoot":"","sources":["../../../src/controllers/admin/keys.handlers.ts"],"names":[],"mappings":";;;AAGA,0EAAsE;AACtE,6DAAyD;AACzD,oEAA+D;AAE/D,+DAGoC;AACpC,qDAAkD;AAElD,2BAA2B;AACd,QAAA,iBAAiB,GAAG;IAC/B,QAAQ,EAAE,IAAA,4BAAY,EAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,KAKjB,CAAC;QACF,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC;QACnC,IAAI,QAA6B,CAAC;QAClC,IAAI,WAAW,KAAK,MAAM,IAAI,WAAW,KAAK,GAAG;YAAE,QAAQ,GAAG,IAAI,CAAC;QACnE,IAAI,WAAW,KAAK,OAAO,IAAI,WAAW,KAAK,GAAG;YAAE,QAAQ,GAAG,KAAK,CAAC;QACrE,MAAM,GAAG,GACP,KAAK,CAAC,GAAG,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,+BAAa,CAAC,IAAI,CAAC;YACtC,CAAC,EAAE,KAAK,CAAC,CAAC;YACV,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ;YACR,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG;YACH,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,SAAS,EAAE,IAAA,4BAAY,EAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5D,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,MAAM,oCAAgB,CAAC,YAAY,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAqB,CAAC;QACvC,MAAM,IAAI,GAAG,IAAA,oCAAmB,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,+BAAa,CAAC,MAAM,CAAC;YACzC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI;YACJ,IAAI,EAAE,IAAA,oCAAmB,EAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC;YAC1C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE;YAC5B,EAAE,EAAE,IAAA,qBAAS,EAAC,GAAG,CAAC;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC;IAEF,SAAS,EAAE,IAAA,4BAAY,EAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5D,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,MAAM,oCAAgB,CAAC,YAAY,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAqB,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,+BAAa,CAAC,MAAM,CACrC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EACrB;YACE,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EACF,IAAI,CAAC,IAAI,KAAK,SAAS;gBACrB,CAAC,CAAC,IAAA,oCAAmB,EAAC,IAAI,CAAC,IAAI,CAAC;gBAChC,CAAC,CAAC,SAAS;YACf,IAAI,EAAE,IAAI,CAAC,IAA8B;YACzC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,EACD,GAAG,CAAC,MAAM,CAAC,EAAE,EACb,IAAA,qBAAS,EAAC,GAAG,CAAC,CACf,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC;IAEF,SAAS,EAAE,IAAA,4BAAY,EAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5D,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,MAAM,oCAAgB,CAAC,YAAY,EAAE,CAAC;QACvD,MAAM,+BAAa,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,IAAA,qBAAS,EAAC,GAAG,CAAC,CAAC,CAAC;QACjF,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC;CAEH,CAAC"}

package/dist/controllers/admin/media.handlers.d.ts

@@ -0,0 +1,27 @@
+/** Admin: browse / download / delete generated media + video jobs */
+export declare const adminMediaHandlers: {
+    listAssets: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    getAsset: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    downloadAsset: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    deleteAsset: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    listJobs: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    /**
+     * Admin SPA image generation (uses session admin actor or optional agent apiKeyId).
+     * Body mirrors POST /v1/images/generations + optional apiKeyId + aspect_ratio.
+     */
+    generateImage: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    /**
+     * Admin SPA image edit.
+     * Source (any one): multipart `image`, `sourceAssetId` (media), or `sourceDocumentId` (documents).
+     */
+    editImage: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    /**
+     * Admin SPA: enqueue video job.
+     * Source frame (optional): multipart `image`, media asset id, or document id.
+     * If none, a frame is generated from the prompt first (image-to-video).
+     */
+    createVideo: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    speech: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    transcribe: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+};
+//# sourceMappingURL=media.handlers.d.ts.map

package/dist/controllers/admin/media.handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.handlers.d.ts","sourceRoot":"","sources":["../../../src/controllers/admin/media.handlers.ts"],"names":[],"mappings":"AA+CA,qEAAqE;AACrE,eAAO,MAAM,kBAAkB;;;;;;IAkN7B;;;OAGG;;IA4CH;;;OAGG;;IAgFH;;;;OAIG;;;;CAyNJ,CAAC"}