Upload folder using huggingface_hub

apps/api/dist/admin/admin-audit.service.js

@@ -0,0 +1,100 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var AdminAuditService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminAuditService = void 0;
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("../prisma/prisma.service");
+const audit_service_1 = require("../audit/audit.service");
+const shared_types_1 = require("@micprotocol/shared-types");
+const admin_permission_decorator_1 = require("../common/decorators/admin-permission.decorator");
+let AdminAuditService = AdminAuditService_1 = class AdminAuditService {
+    prisma;
+    audit;
+    logger = new common_1.Logger(AdminAuditService_1.name);
+    constructor(prisma, audit) {
+        this.prisma = prisma;
+        this.audit = audit;
+    }
+    async list(input = {}) {
+        return this.audit.listAuditLogs(input);
+    }
+    async verify() {
+        return this.audit.verifyIntegrity();
+    }
+    async stats() {
+        return this.audit.getAuditStats();
+    }
+    async export(input, exportedBy) {
+        const { items, total } = await this.audit.listAuditLogs({
+            startDate: input.startDate,
+            endDate: input.endDate,
+            limit: 10_000,
+        });
+        const integrity = await this.audit.verifyIntegrity();
+        await this.audit.log({
+            userId: exportedBy,
+            action: "admin.audit.export",
+            entityType: "AuditLog",
+            entityId: "export",
+            metadata: {
+                exportedBy,
+                total,
+                startDate: input.startDate,
+                endDate: input.endDate,
+                chainValid: integrity.valid,
+                chainBrokenAt: integrity.brokenAt,
+            },
+        });
+        return {
+            exportedAt: new Date().toISOString(),
+            exportedBy,
+            total,
+            chainValid: integrity.valid,
+            chainBrokenAt: integrity.brokenAt,
+            items,
+        };
+    }
+    async getEntry(entryId) {
+        const entry = await this.prisma.auditLog.findUnique({
+            where: { id: entryId },
+            select: {
+                id: true,
+                userId: true,
+                workspaceId: true,
+                action: true,
+                entityType: true,
+                entityId: true,
+                metadata: true,
+                ipAddress: true,
+                userAgent: true,
+                entryHash: true,
+                previousHash: true,
+                createdAt: true,
+            },
+        });
+        if (!entry)
+            throw new common_1.NotFoundException(`Audit entry ${entryId} not found`);
+        return entry;
+    }
+};
+exports.AdminAuditService = AdminAuditService;
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.AUDIT_EXPORT),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, String]),
+    __metadata("design:returntype", Promise)
+], AdminAuditService.prototype, "export", null);
+exports.AdminAuditService = AdminAuditService = AdminAuditService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService, audit_service_1.AuditService])
+], AdminAuditService);
+//# sourceMappingURL=admin-audit.service.js.map

apps/api/dist/admin/admin-audit.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-audit.service.js","sourceRoot":"","sources":["../../src/admin/admin-audit.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAuE;AACvE,6DAAyD;AACzD,0DAAsD;AAEtD,4DAA4D;AAC5D,gGAAyF;AAoBlF,IAAM,iBAAiB,yBAAvB,MAAM,iBAAiB;IAGC;IAAwC;IAFpD,MAAM,GAAG,IAAI,eAAM,CAAC,mBAAiB,CAAC,IAAI,CAAC,CAAC;IAE7D,YAA6B,MAAqB,EAAmB,KAAmB;QAA3D,WAAM,GAAN,MAAM,CAAe;QAAmB,UAAK,GAAL,KAAK,CAAc;IAAG,CAAC;IAE5F,KAAK,CAAC,IAAI,CAAC,QAA6B,EAAE;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;IACpC,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CAAC,KAA+C,EAAE,UAAkB;QAC9E,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;YACtD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QAGrD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,oBAAoB;YAC5B,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE;gBACR,UAAU;gBACV,KAAK;gBACL,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,UAAU,EAAE,SAAS,CAAC,KAAK;gBAC3B,aAAa,EAAE,SAAS,CAAC,QAAQ;aAClC;SACF,CAAC,CAAC;QAEH,OAAO;YACL,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,UAAU;YACV,KAAK;YACL,UAAU,EAAE,SAAS,CAAC,KAAK;YAC3B,aAAa,EAAE,SAAS,CAAC,QAAQ;YACjC,KAAK;SACN,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAe;QAC5B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;YAClD,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE;YACtB,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,IAAI;gBACjB,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,IAAI;gBACf,YAAY,EAAE,IAAI;gBAClB,SAAS,EAAE,IAAI;aAChB;SACF,CAAC,CAAC;QACH,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,0BAAiB,CAAC,eAAe,OAAO,YAAY,CAAC,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAA;AAzEY,8CAAiB;AAkBtB;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,YAAY,CAAC;;;;+CAiCpD;4BAlDU,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAI0B,8BAAa,EAA0B,4BAAY;GAH7E,iBAAiB,CAyE7B"}

apps/api/dist/admin/admin-auth.service.js

@@ -0,0 +1,87 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var AdminAuthService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminAuthService = void 0;
+const common_1 = require("@nestjs/common");
+const server_1 = require("@trpc/server");
+const prisma_service_1 = require("../prisma/prisma.service");
+const shared_types_1 = require("@micprotocol/shared-types");
+const platform_admin_1 = require("../common/platform-admin");
+let AdminAuthService = AdminAuthService_1 = class AdminAuthService {
+    prisma;
+    logger = new common_1.Logger(AdminAuthService_1.name);
+    constructor(prisma) {
+        this.prisma = prisma;
+    }
+    async getAdminContext(userId) {
+        const user = await this.prisma.user.findUnique({
+            where: { id: userId },
+            select: {
+                id: true,
+                isAdmin: true,
+                adminRole: true,
+                adminPermissions: true,
+                suspendedAt: true,
+            },
+        });
+        if (!user)
+            return null;
+        const role = (0, platform_admin_1.deriveAdminRole)(user);
+        if (!role)
+            return null;
+        const permissions = (0, shared_types_1.resolveAdminPermissions)(role, user.adminPermissions);
+        const suspended = !!user.suspendedAt;
+        return {
+            userId: user.id,
+            isAdmin: !!user.isAdmin,
+            role,
+            permissions,
+            suspended,
+        };
+    }
+    async requirePermission(userId, permission) {
+        const ctx = await this.getAdminContext(userId);
+        if (!ctx) {
+            throw new server_1.TRPCError({ code: "FORBIDDEN", message: "Admin privileges required" });
+        }
+        if (ctx.suspended) {
+            throw new server_1.TRPCError({ code: "FORBIDDEN", message: "Account is suspended" });
+        }
+        if (!ctx.permissions.has(permission)) {
+            throw new server_1.TRPCError({
+                code: "FORBIDDEN",
+                message: `Insufficient permissions: ${permission} required`,
+            });
+        }
+        return ctx;
+    }
+    async requireAnyPermission(userId, ...permissions) {
+        const ctx = await this.getAdminContext(userId);
+        if (!ctx || ctx.suspended) {
+            throw new server_1.TRPCError({ code: "FORBIDDEN", message: "Admin privileges required" });
+        }
+        const hasAny = permissions.some((p) => ctx.permissions.has(p));
+        if (!hasAny) {
+            throw new server_1.TRPCError({
+                code: "FORBIDDEN",
+                message: `Insufficient permissions: one of ${permissions.join(", ")} required`,
+            });
+        }
+        return ctx;
+    }
+};
+exports.AdminAuthService = AdminAuthService;
+exports.AdminAuthService = AdminAuthService = AdminAuthService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService])
+], AdminAuthService);
+//# sourceMappingURL=admin-auth.service.js.map

apps/api/dist/admin/admin-auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-auth.service.js","sourceRoot":"","sources":["../../src/admin/admin-auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AACpD,yCAAyC;AACzC,6DAAyD;AACzD,4DAKmC;AACnC,6DAA2D;AA0BpD,IAAM,gBAAgB,wBAAtB,MAAM,gBAAgB;IAGE;IAFZ,MAAM,GAAG,IAAI,eAAM,CAAC,kBAAgB,CAAC,IAAI,CAAC,CAAC;IAE5D,YAA6B,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;IAAG,CAAC;IAGtD,KAAK,CAAC,eAAe,CAAC,MAAc;QAClC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI;gBACf,gBAAgB,EAAE,IAAI;gBACtB,WAAW,EAAE,IAAI;aAClB;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAMvB,MAAM,IAAI,GAAG,IAAA,gCAAe,EAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAEvB,MAAM,WAAW,GAAG,IAAA,sCAAuB,EACzC,IAAI,EACJ,IAAI,CAAC,gBAAmD,CACzD,CAAC;QACF,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;QAErC,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO;YACvB,IAAI;YACJ,WAAW;YACX,SAAS;SACV,CAAC;IACJ,CAAC;IAGD,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,UAA2B;QACjE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,kBAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,IAAI,kBAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,kBAAS,CAAC;gBAClB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,6BAA6B,UAAU,WAAW;aAC5D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAGD,KAAK,CAAC,oBAAoB,CACxB,MAAc,EACd,GAAG,WAA8B;QAEjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,kBAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,kBAAS,CAAC;gBAClB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,oCAAoC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW;aAC/E,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF,CAAA;AA9EY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;qCAI0B,8BAAa;GAHvC,gBAAgB,CA8E5B"}

apps/api/dist/admin/admin-billing.service.js

@@ -0,0 +1,171 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var AdminBillingService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminBillingService = void 0;
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("../prisma/prisma.service");
+const audit_service_1 = require("../audit/audit.service");
+const client_1 = require("@prisma/client");
+const shared_types_1 = require("@micprotocol/shared-types");
+const admin_permission_decorator_1 = require("../common/decorators/admin-permission.decorator");
+let AdminBillingService = AdminBillingService_1 = class AdminBillingService {
+    prisma;
+    audit;
+    logger = new common_1.Logger(AdminBillingService_1.name);
+    constructor(prisma, audit) {
+        this.prisma = prisma;
+        this.audit = audit;
+    }
+    async listSubscriptions() {
+        const workspaces = await this.prisma.workspace.findMany({
+            orderBy: { name: "asc" },
+            select: {
+                id: true,
+                name: true,
+                slug: true,
+                subscriptionPlanId: true,
+                subscriptionStatus: true,
+                suspendedAt: true,
+            },
+        });
+        return workspaces.map((w) => ({
+            workspaceId: w.id,
+            workspaceName: w.name,
+            slug: w.slug,
+            plan: w.subscriptionPlanId,
+            status: w.subscriptionStatus,
+            suspended: !!w.suspendedAt,
+        }));
+    }
+    async getWallet(workspaceId) {
+        const workspace = await this.prisma.workspace.findUnique({
+            where: { id: workspaceId },
+            select: { id: true, name: true },
+        });
+        if (!workspace)
+            throw new common_1.NotFoundException(`Workspace ${workspaceId} not found`);
+        const wallet = await this.prisma.wallet.findUnique({ where: { workspaceId } });
+        if (!wallet)
+            return null;
+        return {
+            workspaceId: wallet.workspaceId,
+            workspaceName: workspace.name,
+            balance: wallet.balance.toNumber(),
+            currency: wallet.currency,
+            updatedAt: wallet.updatedAt,
+        };
+    }
+    async listWallets() {
+        const wallets = await this.prisma.wallet.findMany({
+            orderBy: { updatedAt: "desc" },
+            include: { workspace: { select: { name: true } } },
+        });
+        return wallets.map((w) => ({
+            workspaceId: w.workspaceId,
+            workspaceName: w.workspace.name,
+            balance: w.balance.toNumber(),
+            currency: w.currency,
+            updatedAt: w.updatedAt,
+        }));
+    }
+    async listTransactions(walletId, limit = 50) {
+        return this.prisma.walletTransaction.findMany({
+            where: { walletId },
+            orderBy: { createdAt: "desc" },
+            take: Math.min(limit, 200),
+        });
+    }
+    async refund(workspaceId, amount, reference, description, actorUserId) {
+        if (amount <= 0)
+            throw new common_1.BadRequestException("Refund amount must be positive");
+        const workspace = await this.prisma.workspace.findUnique({
+            where: { id: workspaceId },
+            select: { id: true, name: true },
+        });
+        if (!workspace)
+            throw new common_1.NotFoundException(`Workspace ${workspaceId} not found`);
+        let wallet = await this.prisma.wallet.findUnique({ where: { workspaceId } });
+        if (!wallet) {
+            wallet = await this.prisma.wallet.create({
+                data: { workspaceId, balance: new client_1.Prisma.Decimal(0), currency: "USD" },
+            });
+        }
+        const transaction = await this.prisma.walletTransaction.create({
+            data: {
+                walletId: wallet.id,
+                type: "refund",
+                status: "completed",
+                amount: new client_1.Prisma.Decimal(amount),
+                currency: wallet.currency,
+                reference,
+                description,
+            },
+        });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.billing.refund",
+            entityType: "WalletTransaction",
+            entityId: transaction.id,
+            metadata: {
+                workspaceId,
+                workspaceName: workspace.name,
+                amount,
+                currency: wallet.currency,
+                reference,
+                description,
+            },
+        });
+        return transaction;
+    }
+    async planOverride(workspaceId, planId, actorUserId) {
+        const workspace = await this.prisma.workspace.findUnique({
+            where: { id: workspaceId },
+            select: { id: true, name: true, subscriptionPlanId: true },
+        });
+        if (!workspace)
+            throw new common_1.NotFoundException(`Workspace ${workspaceId} not found`);
+        const updated = await this.prisma.workspace.update({
+            where: { id: workspaceId },
+            data: { subscriptionPlanId: planId },
+        });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.billing.plan_override",
+            entityType: "Workspace",
+            entityId: workspaceId,
+            metadata: {
+                before: { subscriptionPlanId: workspace.subscriptionPlanId },
+                after: { subscriptionPlanId: planId },
+            },
+        });
+        return updated;
+    }
+};
+exports.AdminBillingService = AdminBillingService;
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.BILLING_REFUND),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Number, String, Object, String]),
+    __metadata("design:returntype", Promise)
+], AdminBillingService.prototype, "refund", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.BILLING_PLAN_OVERRIDE),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String]),
+    __metadata("design:returntype", Promise)
+], AdminBillingService.prototype, "planOverride", null);
+exports.AdminBillingService = AdminBillingService = AdminBillingService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        audit_service_1.AuditService])
+], AdminBillingService);
+//# sourceMappingURL=admin-billing.service.js.map

apps/api/dist/admin/admin-billing.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-billing.service.js","sourceRoot":"","sources":["../../src/admin/admin-billing.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAA4F;AAC5F,6DAAyD;AACzD,0DAAsD;AACtD,2CAAwC;AACxC,4DAA4D;AAC5D,gGAAyF;AA0BlF,IAAM,mBAAmB,2BAAzB,MAAM,mBAAmB;IAIX;IACA;IAJF,MAAM,GAAG,IAAI,eAAM,CAAC,qBAAmB,CAAC,IAAI,CAAC,CAAC;IAE/D,YACmB,MAAqB,EACrB,KAAmB;QADnB,WAAM,GAAN,MAAM,CAAe;QACrB,UAAK,GAAL,KAAK,CAAc;IACnC,CAAC;IAEJ,KAAK,CAAC,iBAAiB;QACrB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;YACtD,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;YACxB,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,IAAI;gBACV,kBAAkB,EAAE,IAAI;gBACxB,kBAAkB,EAAE,IAAI;gBACxB,WAAW,EAAE,IAAI;aAClB;SACF,CAAC,CAAC;QACH,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5B,WAAW,EAAE,CAAC,CAAC,EAAE;YACjB,aAAa,EAAE,CAAC,CAAC,IAAI;YACrB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,kBAAkB;YAC1B,MAAM,EAAE,CAAC,CAAC,kBAAkB;YAC5B,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,WAAmB;QACjC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;YACvD,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE;YAC1B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,0BAAiB,CAAC,aAAa,WAAW,YAAY,CAAC,CAAC;QAElF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzB,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,aAAa,EAAE,SAAS,CAAC,IAAI;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE;YAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW;QACf,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YAChD,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;YAC9B,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;SACnD,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,aAAa,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI;YAC/B,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE;YAC7B,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB,EAAE,KAAK,GAAG,EAAE;QACjD,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC;YAC5C,KAAK,EAAE,EAAE,QAAQ,EAAE;YACnB,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;YAC9B,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC;SAC3B,CAAC,CAAC;IACL,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CACV,WAAmB,EACnB,MAAc,EACd,SAAiB,EACjB,WAA0B,EAC1B,WAAmB;QAEnB,IAAI,MAAM,IAAI,CAAC;YAAE,MAAM,IAAI,4BAAmB,CAAC,gCAAgC,CAAC,CAAC;QAEjF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;YACvD,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE;YAC1B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,0BAAiB,CAAC,aAAa,WAAW,YAAY,CAAC,CAAC;QAElF,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;gBACvC,IAAI,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,eAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;aACvE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC;YAC7D,IAAI,EAAE;gBACJ,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,IAAI,EAAE,QAAiB;gBACvB,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,IAAI,eAAM,CAAC,OAAO,CAAC,MAAM,CAAC;gBAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,SAAS;gBACT,WAAW;aACZ;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,sBAAsB;YAC9B,UAAU,EAAE,mBAAmB;YAC/B,QAAQ,EAAE,WAAW,CAAC,EAAE;YACxB,QAAQ,EAAE;gBACR,WAAW;gBACX,aAAa,EAAE,SAAS,CAAC,IAAI;gBAC7B,MAAM;gBACN,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,SAAS;gBACT,WAAW;aACZ;SACF,CAAC,CAAC;QAEH,OAAO,WAAW,CAAC;IACrB,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CAAC,WAAmB,EAAE,MAAc,EAAE,WAAmB;QACzE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;YACvD,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE;YAC1B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE;SAC3D,CAAC,CAAC;QACH,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,0BAAiB,CAAC,aAAa,WAAW,YAAY,CAAC,CAAC;QAElF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;YACjD,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE;YAC1B,IAAI,EAAE,EAAE,kBAAkB,EAAE,MAAa,EAAE;SAC5C,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,6BAA6B;YACrC,UAAU,EAAE,WAAW;YACvB,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE;gBACR,MAAM,EAAE,EAAE,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,EAAE;gBAC5D,KAAK,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE;aACtC;SACF,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAA;AAtJY,kDAAmB;AAwExB;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,cAAc,CAAC;;;;iDAmDtD;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,qBAAqB,CAAC;;;;uDAyB7D;8BArJU,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;qCAKgB,8BAAa;QACd,4BAAY;GAL3B,mBAAmB,CAsJ/B"}

apps/api/dist/admin/admin-clip-scorer.service.js

@@ -0,0 +1,135 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var AdminClipScorerService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminClipScorerService = void 0;
+const common_1 = require("@nestjs/common");
+const child_process_1 = require("child_process");
+const util_1 = require("util");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const redis_constants_1 = require("../common/redis.constants");
+const run = (0, util_1.promisify)(child_process_1.execFile);
+const SCRATCH_DIRS = [
+    "/tmp/clip-scorer-tmp",
+    path.resolve(process.cwd(), "services/clip-scorer/tmp"),
+];
+let AdminClipScorerService = AdminClipScorerService_1 = class AdminClipScorerService {
+    redis;
+    logger = new common_1.Logger(AdminClipScorerService_1.name);
+    constructor(redis) {
+        this.redis = redis;
+    }
+    async getLocks() {
+        try {
+            const keys = await this.redis.keys("lock:clip:*");
+            const locks = [];
+            for (const key of keys) {
+                const [ttl, value] = await Promise.all([
+                    this.redis.ttl(key),
+                    this.redis.get(key).catch(() => null),
+                ]);
+                locks.push({
+                    key,
+                    clipId: key.replace("lock:clip:", ""),
+                    ttlSeconds: Math.max(ttl, 0),
+                    value: value ?? undefined,
+                });
+            }
+            return { total: locks.length, locks };
+        }
+        catch (err) {
+            return {
+                total: 0,
+                locks: [],
+                error: err instanceof Error ? err.message : String(err),
+            };
+        }
+    }
+    async forceReleaseLock(key) {
+        if (!key.startsWith("lock:clip:")) {
+            return { ok: false, error: "Only lock:clip:* keys can be released" };
+        }
+        await this.redis.del(key);
+        return { ok: true, key };
+    }
+    async getScratchStorage() {
+        const dirs = [];
+        for (const dir of SCRATCH_DIRS) {
+            let exists = false;
+            try {
+                exists = fs.existsSync(dir);
+            }
+            catch {
+                exists = false;
+            }
+            let bytes = 0;
+            if (exists) {
+                bytes = await this.dirSize(dir);
+            }
+            dirs.push({ dir, exists, bytes });
+        }
+        return { dirs };
+    }
+    async dirSize(dir) {
+        try {
+            const { stdout } = await run("du", ["-sk", dir]);
+            const kb = parseInt(stdout.trim().split(/\s+/)[0] ?? "0", 10);
+            return Number.isFinite(kb) ? kb * 1024 : 0;
+        }
+        catch {
+            return 0;
+        }
+    }
+};
+exports.AdminClipScorerService = AdminClipScorerService;
+exports.AdminClipScorerService = AdminClipScorerService = AdminClipScorerService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(redis_constants_1.REDIS_CLIENT)),
+    __metadata("design:paramtypes", [Object])
+], AdminClipScorerService);
+//# sourceMappingURL=admin-clip-scorer.service.js.map

apps/api/dist/admin/admin-clip-scorer.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-clip-scorer.service.js","sourceRoot":"","sources":["../../src/admin/admin-clip-scorer.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA4D;AAC5D,iDAAyC;AACzC,+BAAiC;AACjC,uCAAyB;AACzB,2CAA6B;AAC7B,+DAAyD;AAGzD,MAAM,GAAG,GAAG,IAAA,gBAAS,EAAC,wBAAQ,CAAC,CAAC;AAEhC,MAAM,YAAY,GAAG;IACnB,sBAAsB;IACtB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,0BAA0B,CAAC;CACxD,CAAC;AA+BK,IAAM,sBAAsB,8BAA5B,MAAM,sBAAsB;IAIQ;IAHxB,MAAM,GAAG,IAAI,eAAM,CAAC,wBAAsB,CAAC,IAAI,CAAC,CAAC;IAElE,YACyC,KAAsB;QAAtB,UAAK,GAAL,KAAK,CAAiB;IAC5D,CAAC;IAEJ,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAClD,MAAM,KAAK,GAAmB,EAAE,CAAC;YACjC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;oBACnB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;iBACtC,CAAC,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC;oBACT,GAAG;oBACH,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;oBACrC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;oBAC5B,KAAK,EAAE,KAAK,IAAI,SAAS;iBAC1B,CAAC,CAAC;YACL,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,KAAK,EAAE,CAAC;gBACR,KAAK,EAAE,EAAE;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,GAAW;QAChC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;QACvE,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,MAAM,IAAI,GAAqB,EAAE,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,KAAK,CAAC;YACjB,CAAC;YACD,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,IAAI,MAAM,EAAE,CAAC;gBACX,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAClC,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,GAAW;QAC/B,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YACjD,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;YAC9D,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;CACF,CAAA;AApEY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,8BAAY,CAAC,CAAA;;GAJZ,sBAAsB,CAoElC"}

apps/api/dist/admin/admin-comms.service.js

@@ -0,0 +1,145 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var AdminCommsService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminCommsService = void 0;
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("../prisma/prisma.service");
+const audit_service_1 = require("../audit/audit.service");
+const shared_types_1 = require("@micprotocol/shared-types");
+const admin_permission_decorator_1 = require("../common/decorators/admin-permission.decorator");
+let AdminCommsService = AdminCommsService_1 = class AdminCommsService {
+    prisma;
+    audit;
+    logger = new common_1.Logger(AdminCommsService_1.name);
+    constructor(prisma, audit) {
+        this.prisma = prisma;
+        this.audit = audit;
+    }
+    async listAnnouncements() {
+        const items = await this.prisma.announcement.findMany({
+            orderBy: { createdAt: "desc" },
+        });
+        return items.map((a) => ({
+            id: a.id,
+            title: a.title,
+            body: a.body,
+            audience: a.audience,
+            severity: a.severity,
+            status: a.status,
+            publishedAt: a.publishedAt,
+            expiresAt: a.expiresAt,
+            createdById: a.createdById,
+            createdAt: a.createdAt,
+        }));
+    }
+    async createAnnouncement(title, body, audience, severity, status, publishedAt, expiresAt, createdById) {
+        const announcement = await this.prisma.announcement.create({
+            data: {
+                title,
+                body,
+                audience: audience,
+                severity,
+                status,
+                publishedAt,
+                expiresAt,
+                createdById,
+            },
+        });
+        await this.audit.log({
+            userId: createdById,
+            action: "admin.announcements.write",
+            entityType: "Announcement",
+            entityId: announcement.id,
+            metadata: { title, severity, status },
+        });
+        return announcement;
+    }
+    async updateAnnouncement(id, patch, actorUserId) {
+        const existing = await this.prisma.announcement.findUnique({
+            where: { id },
+            select: { id: true, title: true, status: true },
+        });
+        if (!existing)
+            throw new common_1.NotFoundException(`Announcement ${id} not found`);
+        const data = {};
+        if (patch.title !== undefined)
+            data.title = patch.title;
+        if (patch.body !== undefined)
+            data.body = patch.body;
+        if (patch.audience !== undefined)
+            data.audience = patch.audience;
+        if (patch.severity !== undefined)
+            data.severity = patch.severity;
+        if (patch.status !== undefined)
+            data.status = patch.status;
+        if (patch.publishedAt !== undefined)
+            data.publishedAt = patch.publishedAt;
+        if (patch.expiresAt !== undefined)
+            data.expiresAt = patch.expiresAt;
+        const updated = await this.prisma.announcement.update({ where: { id }, data });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.announcements.write",
+            entityType: "Announcement",
+            entityId: id,
+            metadata: { before: { title: existing.title, status: existing.status }, after: patch },
+        });
+        return updated;
+    }
+    async archiveAnnouncement(id, actorUserId) {
+        const existing = await this.prisma.announcement.findUnique({
+            where: { id },
+            select: { id: true, status: true },
+        });
+        if (!existing)
+            throw new common_1.NotFoundException(`Announcement ${id} not found`);
+        if (existing.status === "archived")
+            throw new common_1.BadRequestException("Announcement is already archived");
+        const updated = await this.prisma.announcement.update({
+            where: { id },
+            data: { status: "archived" },
+        });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.announcements.write",
+            entityType: "Announcement",
+            entityId: id,
+            metadata: { before: { status: existing.status }, after: { status: "archived" } },
+        });
+        return updated;
+    }
+};
+exports.AdminCommsService = AdminCommsService;
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.ANNOUNCEMENTS_WRITE),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object, String, String, Object, Object, String]),
+    __metadata("design:returntype", Promise)
+], AdminCommsService.prototype, "createAnnouncement", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.ANNOUNCEMENTS_WRITE),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, String]),
+    __metadata("design:returntype", Promise)
+], AdminCommsService.prototype, "updateAnnouncement", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.ANNOUNCEMENTS_WRITE),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], AdminCommsService.prototype, "archiveAnnouncement", null);
+exports.AdminCommsService = AdminCommsService = AdminCommsService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        audit_service_1.AuditService])
+], AdminCommsService);
+//# sourceMappingURL=admin-comms.service.js.map

apps/api/dist/admin/admin-comms.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-comms.service.js","sourceRoot":"","sources":["../../src/admin/admin-comms.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAA4F;AAC5F,6DAAyD;AACzD,0DAAsD;AAEtD,4DAA4D;AAC5D,gGAAyF;AAoBlF,IAAM,iBAAiB,yBAAvB,MAAM,iBAAiB;IAIT;IACA;IAJF,MAAM,GAAG,IAAI,eAAM,CAAC,mBAAiB,CAAC,IAAI,CAAC,CAAC;IAE7D,YACmB,MAAqB,EACrB,KAAmB;QADnB,WAAM,GAAN,MAAM,CAAe;QACrB,UAAK,GAAL,KAAK,CAAc;IACnC,CAAC;IAEJ,KAAK,CAAC,iBAAiB;QACrB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC;YACpD,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;SAC/B,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC,CAAC;IACN,CAAC;IAGK,AAAN,KAAK,CAAC,kBAAkB,CACtB,KAAa,EACb,IAAY,EACZ,QAAiB,EACjB,QAAgB,EAChB,MAAc,EACd,WAAwB,EACxB,SAAsB,EACtB,WAAmB;QAEnB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;YACzD,IAAI,EAAE;gBACJ,KAAK;gBACL,IAAI;gBACJ,QAAQ,EAAE,QAAiC;gBAC3C,QAAQ;gBACR,MAAM;gBACN,WAAW;gBACX,SAAS;gBACT,WAAW;aACZ;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,2BAA2B;YACnC,UAAU,EAAE,cAAc;YAC1B,QAAQ,EAAE,YAAY,CAAC,EAAE;YACzB,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE;SACtC,CAAC,CAAC;QAEH,OAAO,YAAY,CAAC;IACtB,CAAC;IAGK,AAAN,KAAK,CAAC,kBAAkB,CACtB,EAAU,EACV,KAAoJ,EACpJ,WAAmB;QAEnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC;YACzD,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;SAChD,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,0BAAiB,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;QAE3E,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACxD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACrD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAiC,CAAC;QAC1F,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACjE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3D,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;YAAE,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QAC1E,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QAEpE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAE/E,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,2BAA2B;YACnC,UAAU,EAAE,cAAc;YAC1B,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;SACvF,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;IAGK,AAAN,KAAK,CAAC,mBAAmB,CAAC,EAAU,EAAE,WAAmB;QACvD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC;YACzD,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;SACnC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,0BAAiB,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;QAC3E,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU;YAAE,MAAM,IAAI,4BAAmB,CAAC,kCAAkC,CAAC,CAAC;QAEtG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;YACpD,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;SAC7B,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,2BAA2B;YACnC,UAAU,EAAE,cAAc;YAC1B,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE;SACjF,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAA;AAvHY,8CAAiB;AA2BtB;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,mBAAmB,CAAC;;;;2DAiC3D;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,mBAAmB,CAAC;;;;2DAgC3D;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,mBAAmB,CAAC;;;;4DAuB3D;4BAtHU,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAKgB,8BAAa;QACd,4BAAY;GAL3B,iBAAiB,CAuH7B"}

apps/api/dist/admin/admin-moderation.service.js

@@ -0,0 +1,164 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var AdminModerationService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminModerationService = void 0;
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("../prisma/prisma.service");
+const audit_service_1 = require("../audit/audit.service");
+const shared_types_1 = require("@micprotocol/shared-types");
+const admin_permission_decorator_1 = require("../common/decorators/admin-permission.decorator");
+let AdminModerationService = AdminModerationService_1 = class AdminModerationService {
+    prisma;
+    audit;
+    logger = new common_1.Logger(AdminModerationService_1.name);
+    constructor(prisma, audit) {
+        this.prisma = prisma;
+        this.audit = audit;
+    }
+    async listAbuseReports(input = {}) {
+        const limit = Math.min(Math.max(input.limit ?? 50, 1), 200);
+        const where = {
+            ...(input.status ? { status: input.status } : {}),
+            ...(input.category ? { category: input.category } : {}),
+            ...(input.targetType ? { targetType: input.targetType } : {}),
+        };
+        const [total, items] = await Promise.all([
+            this.prisma.abuseReport.count({ where }),
+            this.prisma.abuseReport.findMany({
+                where,
+                orderBy: { createdAt: "desc" },
+                take: limit + 1,
+                ...(input.cursor ? { skip: 1, cursor: { id: input.cursor } } : {}),
+                select: {
+                    id: true,
+                    reporterUserId: true,
+                    targetType: true,
+                    targetId: true,
+                    category: true,
+                    details: true,
+                    status: true,
+                    resolution: true,
+                    handledById: true,
+                    resolvedAt: true,
+                    createdAt: true,
+                },
+            }),
+        ]);
+        const hasMore = items.length > limit;
+        const page = hasMore ? items.slice(0, limit) : items;
+        return {
+            items: page.map((r) => ({
+                id: r.id,
+                reporterUserId: r.reporterUserId,
+                targetType: r.targetType,
+                targetId: r.targetId,
+                category: r.category,
+                status: r.status,
+                resolution: r.resolution,
+                handledById: r.handledById,
+                resolvedAt: r.resolvedAt,
+                createdAt: r.createdAt,
+            })),
+            total,
+            nextCursor: hasMore ? page[page.length - 1]?.id ?? null : null,
+        };
+    }
+    async getAbuseReport(reportId) {
+        const report = await this.prisma.abuseReport.findUnique({
+            where: { id: reportId },
+        });
+        if (!report)
+            throw new common_1.NotFoundException(`Abuse report ${reportId} not found`);
+        return report;
+    }
+    async resolveReport(reportId, resolution, handlerUserId, status) {
+        const report = await this.prisma.abuseReport.findUnique({
+            where: { id: reportId },
+            select: { id: true, status: true, resolution: true, targetType: true, targetId: true },
+        });
+        if (!report)
+            throw new common_1.NotFoundException(`Abuse report ${reportId} not found`);
+        if (report.status === "resolved")
+            throw new common_1.BadRequestException("Report is already resolved");
+        const updated = await this.prisma.abuseReport.update({
+            where: { id: reportId },
+            data: {
+                status: (status ?? "resolved"),
+                resolution,
+                handledById: handlerUserId,
+                resolvedAt: new Date(),
+            },
+        });
+        await this.audit.log({
+            userId: handlerUserId,
+            action: "admin.moderation.resolve",
+            entityType: "AbuseReport",
+            entityId: reportId,
+            metadata: {
+                targetType: report.targetType,
+                targetId: report.targetId,
+                before: { status: report.status, resolution: report.resolution },
+                after: { status: updated.status, resolution },
+            },
+        });
+        return updated;
+    }
+    async takedown(reportId, handlerUserId, reason) {
+        const report = await this.prisma.abuseReport.findUnique({
+            where: { id: reportId },
+            select: { id: true, status: true, targetType: true, targetId: true },
+        });
+        if (!report)
+            throw new common_1.NotFoundException(`Abuse report ${reportId} not found`);
+        const updated = await this.prisma.abuseReport.update({
+            where: { id: reportId },
+            data: {
+                status: "resolved",
+                resolution: reason || "takedown",
+                handledById: handlerUserId,
+                resolvedAt: new Date(),
+            },
+        });
+        await this.audit.log({
+            userId: handlerUserId,
+            action: "admin.moderation.takedown",
+            entityType: report.targetType,
+            entityId: report.targetId,
+            metadata: {
+                reportId,
+                reason,
+                before: { status: report.status },
+                after: { status: "resolved", resolution: "takedown" },
+            },
+        });
+        return updated;
+    }
+};
+exports.AdminModerationService = AdminModerationService;
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.MODERATION_RESOLVE),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String, String]),
+    __metadata("design:returntype", Promise)
+], AdminModerationService.prototype, "resolveReport", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.MODERATION_TAKEDOWN),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String]),
+    __metadata("design:returntype", Promise)
+], AdminModerationService.prototype, "takedown", null);
+exports.AdminModerationService = AdminModerationService = AdminModerationService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        audit_service_1.AuditService])
+], AdminModerationService);
+//# sourceMappingURL=admin-moderation.service.js.map

apps/api/dist/admin/admin-moderation.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-moderation.service.js","sourceRoot":"","sources":["../../src/admin/admin-moderation.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAA4F;AAC5F,6DAAyD;AACzD,0DAAsD;AAEtD,4DAA4D;AAC5D,gGAAyF;AA4BlF,IAAM,sBAAsB,8BAA5B,MAAM,sBAAsB;IAId;IACA;IAJF,MAAM,GAAG,IAAI,eAAM,CAAC,wBAAsB,CAAC,IAAI,CAAC,CAAC;IAElE,YACmB,MAAqB,EACrB,KAAmB;QADnB,WAAM,GAAN,MAAM,CAAe;QACrB,UAAK,GAAL,KAAK,CAAc;IACnC,CAAC;IAEJ,KAAK,CAAC,gBAAgB,CAAC,QAAmC,EAAE;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAiC;YAC1C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC;QAEF,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC;gBAC/B,KAAK;gBACL,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;gBAC9B,IAAI,EAAE,KAAK,GAAG,CAAC;gBACf,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;oBACR,cAAc,EAAE,IAAI;oBACpB,UAAU,EAAE,IAAI;oBAChB,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,IAAI;oBACZ,UAAU,EAAE,IAAI;oBAChB,WAAW,EAAE,IAAI;oBACjB,UAAU,EAAE,IAAI;oBAChB,SAAS,EAAE,IAAI;iBAChB;aACF,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAErD,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,cAAc,EAAE,CAAC,CAAC,cAAc;gBAChC,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC,CAAC;YACH,KAAK;YACL,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI;SAC/D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC;YACtD,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,0BAAiB,CAAC,gBAAgB,QAAQ,YAAY,CAAC,CAAC;QAC/E,OAAO,MAAM,CAAC;IAChB,CAAC;IAGK,AAAN,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,UAAkB,EAAE,aAAqB,EAAE,MAAe;QAC9F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC;YACtD,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;YACvB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;SACvF,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,0BAAiB,CAAC,gBAAgB,QAAQ,YAAY,CAAC,CAAC;QAC/E,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;YAAE,MAAM,IAAI,4BAAmB,CAAC,4BAA4B,CAAC,CAAC;QAE9F,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;YACnD,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;YACvB,IAAI,EAAE;gBACJ,MAAM,EAAE,CAAC,MAAM,IAAI,UAAU,CAAQ;gBACrC,UAAU;gBACV,WAAW,EAAE,aAAa;gBAC1B,UAAU,EAAE,IAAI,IAAI,EAAE;aACvB;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,0BAA0B;YAClC,UAAU,EAAE,aAAa;YACzB,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE;gBACR,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;gBAChE,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE;aAC9C;SACF,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ,CAAC,QAAgB,EAAE,aAAqB,EAAE,MAAe;QACrE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC;YACtD,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;YACvB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;SACrE,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,0BAAiB,CAAC,gBAAgB,QAAQ,YAAY,CAAC,CAAC;QAE/E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;YACnD,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;YACvB,IAAI,EAAE;gBACJ,MAAM,EAAE,UAAU;gBAClB,UAAU,EAAE,MAAM,IAAI,UAAU;gBAChC,WAAW,EAAE,aAAa;gBAC1B,UAAU,EAAE,IAAI,IAAI,EAAE;aACvB;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,2BAA2B;YACnC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE;gBACR,QAAQ;gBACR,MAAM;gBACN,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;gBACjC,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE;aACtD;SACF,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAA;AAxIY,wDAAsB;AAqE3B;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,kBAAkB,CAAC;;;;2DAiC1D;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,mBAAmB,CAAC;;;;sDAgC3D;iCAvIU,sBAAsB;IADlC,IAAA,mBAAU,GAAE;qCAKgB,8BAAa;QACd,4BAAY;GAL3B,sBAAsB,CAwIlC"}

apps/api/dist/admin/admin-operations.service.js

@@ -0,0 +1,277 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var AdminOperationsService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminOperationsService = exports.OPERATIONS_QUEUES = void 0;
+const common_1 = require("@nestjs/common");
+const bullmq_1 = require("@nestjs/bullmq");
+const common_2 = require("@nestjs/common");
+const prisma_service_1 = require("../prisma/prisma.service");
+const audit_service_1 = require("../audit/audit.service");
+const cache_service_1 = require("../common/cache/cache.service");
+const redis_constants_1 = require("../common/redis.constants");
+const shared_types_1 = require("@micprotocol/shared-types");
+const admin_permission_decorator_1 = require("../common/decorators/admin-permission.decorator");
+exports.OPERATIONS_QUEUES = [
+    "outreach",
+    "content",
+    "notifications",
+    "analytics",
+    "network",
+    "post-interview",
+    "clip-scoring",
+    "email",
+    "reminder",
+    "asset-processing",
+    "outreach-automation",
+    "verification",
+];
+let AdminOperationsService = AdminOperationsService_1 = class AdminOperationsService {
+    prisma;
+    audit;
+    cache;
+    redis;
+    outreachQueue;
+    contentQueue;
+    notificationsQueue;
+    analyticsQueue;
+    networkQueue;
+    postInterviewQueue;
+    clipScoringQueue;
+    emailQueue;
+    reminderQueue;
+    assetProcessingQueue;
+    outreachAutomationQueue;
+    verificationQueue;
+    logger = new common_1.Logger(AdminOperationsService_1.name);
+    constructor(prisma, audit, cache, redis, outreachQueue, contentQueue, notificationsQueue, analyticsQueue, networkQueue, postInterviewQueue, clipScoringQueue, emailQueue, reminderQueue, assetProcessingQueue, outreachAutomationQueue, verificationQueue) {
+        this.prisma = prisma;
+        this.audit = audit;
+        this.cache = cache;
+        this.redis = redis;
+        this.outreachQueue = outreachQueue;
+        this.contentQueue = contentQueue;
+        this.notificationsQueue = notificationsQueue;
+        this.analyticsQueue = analyticsQueue;
+        this.networkQueue = networkQueue;
+        this.postInterviewQueue = postInterviewQueue;
+        this.clipScoringQueue = clipScoringQueue;
+        this.emailQueue = emailQueue;
+        this.reminderQueue = reminderQueue;
+        this.assetProcessingQueue = assetProcessingQueue;
+        this.outreachAutomationQueue = outreachAutomationQueue;
+        this.verificationQueue = verificationQueue;
+    }
+    queueByName(name) {
+        const queues = {
+            outreach: this.outreachQueue,
+            content: this.contentQueue,
+            notifications: this.notificationsQueue,
+            analytics: this.analyticsQueue,
+            network: this.networkQueue,
+            "post-interview": this.postInterviewQueue,
+            "clip-scoring": this.clipScoringQueue,
+            email: this.emailQueue,
+            reminder: this.reminderQueue,
+            "asset-processing": this.assetProcessingQueue,
+            "outreach-automation": this.outreachAutomationQueue,
+            verification: this.verificationQueue,
+        };
+        const queue = queues[name];
+        if (!queue)
+            throw new common_1.NotFoundException(`Unknown queue ${name}`);
+        return queue;
+    }
+    async getQueueHealth() {
+        const results = [];
+        for (const name of exports.OPERATIONS_QUEUES) {
+            const queue = this.queueByName(name);
+            const [waiting, active, completed, failed, delayed] = await Promise.all([
+                queue.getWaitingCount(),
+                queue.getActiveCount(),
+                queue.getCompletedCount(),
+                queue.getFailedCount(),
+                queue.getDelayedCount(),
+            ]);
+            results.push({ name, waiting, active, completed, failed, delayed });
+        }
+        return results.sort((a, b) => b.failed - a.failed || b.waiting - a.waiting);
+    }
+    async getQueueJobs(queueName, type, limit = 50) {
+        const queue = this.queueByName(queueName);
+        const getJobs = queue[`get${type.charAt(0).toUpperCase() + type.slice(1)}`];
+        const jobs = await getJobs.call(queue, 0, Math.min(limit, 200));
+        return jobs.map((job) => ({
+            id: job.id,
+            type: job.name,
+            progress: job.progress,
+            failedReason: job.failedReason,
+            createdAt: job.timestamp ? new Date(job.timestamp) : null,
+        }));
+    }
+    async retryJob(queueName, jobId, actorUserId) {
+        const queue = this.queueByName(queueName);
+        const job = await queue.getJob(jobId);
+        if (!job)
+            throw new common_1.NotFoundException(`Job ${jobId} not found in queue ${queueName}`);
+        await job.retry();
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.ops.retry_jobs",
+            entityType: "Job",
+            entityId: jobId,
+            metadata: { queue: queueName, jobType: job.name },
+        });
+        return { retried: jobId, queue: queueName };
+    }
+    async purgeFailedJobs(queueName, actorUserId) {
+        const queue = this.queueByName(queueName);
+        const failed = await queue.getFailed();
+        let removed = 0;
+        for (const job of failed) {
+            await job.remove();
+            removed++;
+        }
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.ops.purge_jobs",
+            entityType: "Queue",
+            entityId: queueName,
+            metadata: { removed, type: "failed" },
+        });
+        return { purged: removed, queue: queueName };
+    }
+    async getLocks(pattern = "lock:clip:*", limit = 100) {
+        const keys = await this.redis.keys(pattern);
+        const sample = keys.slice(0, limit);
+        return { pattern, total: keys.length, keys: sample };
+    }
+    async releaseLock(key, actorUserId) {
+        const deleted = await this.redis.del(key);
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.ops.locks",
+            entityType: "Lock",
+            entityId: key,
+            metadata: { deleted },
+        });
+        return { key, deleted };
+    }
+    async getSystemHealth() {
+        let database = "down";
+        let redis = "down";
+        try {
+            await this.prisma.$queryRawUnsafe("SELECT 1");
+            database = "up";
+        }
+        catch {
+            database = "down";
+        }
+        try {
+            await this.redis.ping();
+            redis = "up";
+        }
+        catch {
+            redis = "down";
+        }
+        const overall = database === "up" && redis === "up" ? "up" : database === "down" && redis === "down" ? "down" : "degraded";
+        return { database, redis, overall };
+    }
+    async setMaintenanceMode(enabled, actorUserId) {
+        const setting = await this.prisma.platformSetting.upsert({
+            where: { key: "maintenance.mode" },
+            update: {
+                value: enabled,
+                updatedById: actorUserId,
+            },
+            create: {
+                key: "maintenance.mode",
+                value: enabled,
+                description: "Platform maintenance mode — signups and writes are rejected when enabled",
+                category: "operations",
+                updatedById: actorUserId,
+            },
+        });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.ops.maintenance",
+            entityType: "PlatformSetting",
+            entityId: "maintenance.mode",
+            metadata: { before: null, after: enabled },
+        });
+        return setting;
+    }
+    async flushCache(pattern, actorUserId) {
+        await this.cache.delPattern(pattern);
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.ops.cache",
+            entityType: "Cache",
+            entityId: pattern,
+            metadata: { pattern },
+        });
+        return { flushed: pattern };
+    }
+};
+exports.AdminOperationsService = AdminOperationsService;
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.OPS_RETRY_JOBS),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String]),
+    __metadata("design:returntype", Promise)
+], AdminOperationsService.prototype, "retryJob", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.OPS_PURGE_JOBS),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], AdminOperationsService.prototype, "purgeFailedJobs", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.OPS_LOCKS),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], AdminOperationsService.prototype, "releaseLock", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.OPS_MAINTENANCE),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Boolean, String]),
+    __metadata("design:returntype", Promise)
+], AdminOperationsService.prototype, "setMaintenanceMode", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.OPS_CACHE),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], AdminOperationsService.prototype, "flushCache", null);
+exports.AdminOperationsService = AdminOperationsService = AdminOperationsService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(3, (0, common_2.Inject)(redis_constants_1.REDIS_CLIENT)),
+    __param(4, (0, bullmq_1.InjectQueue)("outreach")),
+    __param(5, (0, bullmq_1.InjectQueue)("content")),
+    __param(6, (0, bullmq_1.InjectQueue)("notifications")),
+    __param(7, (0, bullmq_1.InjectQueue)("analytics")),
+    __param(8, (0, bullmq_1.InjectQueue)("network")),
+    __param(9, (0, bullmq_1.InjectQueue)("post-interview")),
+    __param(10, (0, bullmq_1.InjectQueue)("clip-scoring")),
+    __param(11, (0, bullmq_1.InjectQueue)("email")),
+    __param(12, (0, bullmq_1.InjectQueue)("reminder")),
+    __param(13, (0, bullmq_1.InjectQueue)("asset-processing")),
+    __param(14, (0, bullmq_1.InjectQueue)("outreach-automation")),
+    __param(15, (0, bullmq_1.InjectQueue)("verification")),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        audit_service_1.AuditService,
+        cache_service_1.CacheService, Object, Function, Function, Function, Function, Function, Function, Function, Function, Function, Function, Function, Function])
+], AdminOperationsService);
+//# sourceMappingURL=admin-operations.service.js.map

apps/api/dist/admin/admin-operations.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-operations.service.js","sourceRoot":"","sources":["../../src/admin/admin-operations.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA4F;AAC5F,2CAA6C;AAC7C,2CAAwC;AAIxC,6DAAyD;AACzD,0DAAsD;AACtD,iEAA6D;AAC7D,+DAAyD;AACzD,4DAA4D;AAC5D,gGAAyF;AAE5E,QAAA,iBAAiB,GAAG;IAC/B,UAAU;IACV,SAAS;IACT,eAAe;IACf,WAAW;IACX,SAAS;IACT,gBAAgB;IAChB,cAAc;IACd,OAAO;IACP,UAAU;IACV,kBAAkB;IAClB,qBAAqB;IACrB,cAAc;CACN,CAAC;AAyBJ,IAAM,sBAAsB,8BAA5B,MAAM,sBAAsB;IAId;IACA;IACA;IACsB;IACG;IACD;IACM;IACJ;IACF;IACO;IACF;IACP;IACG;IACQ;IACG;IACP;IAlB/B,MAAM,GAAG,IAAI,eAAM,CAAC,wBAAsB,CAAC,IAAI,CAAC,CAAC;IAElE,YACmB,MAAqB,EACrB,KAAmB,EACnB,KAAmB,EACG,KAAsB,EACnB,aAAoB,EACrB,YAAmB,EACb,kBAAyB,EAC7B,cAAqB,EACvB,YAAmB,EACZ,kBAAyB,EAC3B,gBAAuB,EAC9B,UAAiB,EACd,aAAoB,EACZ,oBAA2B,EACxB,uBAA8B,EACrC,iBAAwB;QAfrD,WAAM,GAAN,MAAM,CAAe;QACrB,UAAK,GAAL,KAAK,CAAc;QACnB,UAAK,GAAL,KAAK,CAAc;QACG,UAAK,GAAL,KAAK,CAAiB;QACnB,kBAAa,GAAb,aAAa,CAAO;QACrB,iBAAY,GAAZ,YAAY,CAAO;QACb,uBAAkB,GAAlB,kBAAkB,CAAO;QAC7B,mBAAc,GAAd,cAAc,CAAO;QACvB,iBAAY,GAAZ,YAAY,CAAO;QACZ,uBAAkB,GAAlB,kBAAkB,CAAO;QAC3B,qBAAgB,GAAhB,gBAAgB,CAAO;QAC9B,eAAU,GAAV,UAAU,CAAO;QACd,kBAAa,GAAb,aAAa,CAAO;QACZ,yBAAoB,GAApB,oBAAoB,CAAO;QACxB,4BAAuB,GAAvB,uBAAuB,CAAO;QACrC,sBAAiB,GAAjB,iBAAiB,CAAO;IACrE,CAAC;IAEI,WAAW,CAAC,IAAY;QAC9B,MAAM,MAAM,GAA0B;YACpC,QAAQ,EAAE,IAAI,CAAC,aAAa;YAC5B,OAAO,EAAE,IAAI,CAAC,YAAY;YAC1B,aAAa,EAAE,IAAI,CAAC,kBAAkB;YACtC,SAAS,EAAE,IAAI,CAAC,cAAc;YAC9B,OAAO,EAAE,IAAI,CAAC,YAAY;YAC1B,gBAAgB,EAAE,IAAI,CAAC,kBAAkB;YACzC,cAAc,EAAE,IAAI,CAAC,gBAAgB;YACrC,KAAK,EAAE,IAAI,CAAC,UAAU;YACtB,QAAQ,EAAE,IAAI,CAAC,aAAa;YAC5B,kBAAkB,EAAE,IAAI,CAAC,oBAAoB;YAC7C,qBAAqB,EAAE,IAAI,CAAC,uBAAuB;YACnD,YAAY,EAAE,IAAI,CAAC,iBAAiB;SACrC,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,0BAAiB,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,yBAAiB,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACrC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACtE,KAAK,CAAC,eAAe,EAAE;gBACvB,KAAK,CAAC,cAAc,EAAE;gBACtB,KAAK,CAAC,iBAAiB,EAAE;gBACzB,KAAK,CAAC,cAAc,EAAE;gBACtB,KAAK,CAAC,eAAe,EAAE;aACxB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,IAA+D,EAAE,KAAK,GAAG,EAAE;QAC/G,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAI,KAAa,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,CAAC;YAC7B,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;SAC1D,CAAC,CAAC,CAAC;IACN,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,KAAa,EAAE,WAAmB;QAClE,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,0BAAiB,CAAC,OAAO,KAAK,uBAAuB,SAAS,EAAE,CAAC,CAAC;QACtF,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAElB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,sBAAsB;YAC9B,UAAU,EAAE,KAAK;YACjB,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE;SAClD,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9C,CAAC;IAGK,AAAN,KAAK,CAAC,eAAe,CAAC,SAAiB,EAAE,WAAmB;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,sBAAsB;YAC9B,UAAU,EAAE,OAAO;YACnB,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;SACtC,CAAC,CAAC;QAEH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAO,GAAG,aAAa,EAAE,KAAK,GAAG,GAAG;QACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACvD,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,WAAmB;QAChD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAE1C,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,iBAAiB;YACzB,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,GAAG;YACb,QAAQ,EAAE,EAAE,OAAO,EAAE;SACtB,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,IAAI,QAAQ,GAAkB,MAAM,CAAC;QACrC,IAAI,KAAK,GAAkB,MAAM,CAAC;QAElC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YAC9C,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,MAAM,CAAC;QACpB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACxB,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,GAAG,MAAM,CAAC;QACjB,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;QAC3H,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACtC,CAAC;IAGK,AAAN,KAAK,CAAC,kBAAkB,CAAC,OAAgB,EAAE,WAAmB;QAC5D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC;YACvD,KAAK,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAE;YAClC,MAAM,EAAE;gBACN,KAAK,EAAE,OAAO;gBACd,WAAW,EAAE,WAAW;aACzB;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,kBAAkB;gBACvB,KAAK,EAAE,OAAO;gBACd,WAAW,EAAE,0EAA0E;gBACvF,QAAQ,EAAE,YAAY;gBACtB,WAAW,EAAE,WAAW;aACzB;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,uBAAuB;YAC/B,UAAU,EAAE,iBAAiB;YAC7B,QAAQ,EAAE,kBAAkB;YAC5B,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE;SAC3C,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,WAAmB;QACnD,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAErC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,iBAAiB;YACzB,UAAU,EAAE,OAAO;YACnB,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,EAAE,OAAO,EAAE;SACtB,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC9B,CAAC;CACF,CAAA;AAnMY,wDAAsB;AAwE3B;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,cAAc,CAAC;;;;sDAgBtD;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,cAAc,CAAC;;;;6DAmBtD;AASK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,SAAS,CAAC;;;;yDAajD;AAyBK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,eAAe,CAAC;;;;gEA0BvD;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,SAAS,CAAC;;;;wDAajD;iCAlMU,sBAAsB;IADlC,IAAA,mBAAU,GAAE;IAQR,WAAA,IAAA,eAAM,EAAC,8BAAY,CAAC,CAAA;IACpB,WAAA,IAAA,oBAAW,EAAC,UAAU,CAAC,CAAA;IACvB,WAAA,IAAA,oBAAW,EAAC,SAAS,CAAC,CAAA;IACtB,WAAA,IAAA,oBAAW,EAAC,eAAe,CAAC,CAAA;IAC5B,WAAA,IAAA,oBAAW,EAAC,WAAW,CAAC,CAAA;IACxB,WAAA,IAAA,oBAAW,EAAC,SAAS,CAAC,CAAA;IACtB,WAAA,IAAA,oBAAW,EAAC,gBAAgB,CAAC,CAAA;IAC7B,YAAA,IAAA,oBAAW,EAAC,cAAc,CAAC,CAAA;IAC3B,YAAA,IAAA,oBAAW,EAAC,OAAO,CAAC,CAAA;IACpB,YAAA,IAAA,oBAAW,EAAC,UAAU,CAAC,CAAA;IACvB,YAAA,IAAA,oBAAW,EAAC,kBAAkB,CAAC,CAAA;IAC/B,YAAA,IAAA,oBAAW,EAAC,qBAAqB,CAAC,CAAA;IAClC,YAAA,IAAA,oBAAW,EAAC,cAAc,CAAC,CAAA;qCAfH,8BAAa;QACd,4BAAY;QACZ,4BAAY;GAN3B,sBAAsB,CAmMlC"}

apps/api/dist/admin/admin-realtime.service.js

@@ -0,0 +1,79 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var AdminRealtimeService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminRealtimeService = void 0;
+const common_1 = require("@nestjs/common");
+const axios_1 = require("@nestjs/axios");
+const rxjs_1 = require("rxjs");
+let AdminRealtimeService = AdminRealtimeService_1 = class AdminRealtimeService {
+    http;
+    logger = new common_1.Logger(AdminRealtimeService_1.name);
+    baseUrl;
+    internalToken;
+    constructor(http) {
+        this.http = http;
+        this.baseUrl = process.env.MIC_REALTIME_URL ?? "http://localhost:4001";
+        this.internalToken = process.env.MIC_REALTIME_INTERNAL_TOKEN ?? "";
+    }
+    get headers() {
+        return {
+            "x-internal-token": this.internalToken,
+            "content-type": "application/json",
+        };
+    }
+    async getStats() {
+        try {
+            const { data } = await (0, rxjs_1.firstValueFrom)(this.http.get(`${this.baseUrl}/admin/stats`, {
+                headers: this.headers,
+                timeout: 3000,
+            }));
+            return { ok: true, stats: data ?? {} };
+        }
+        catch (err) {
+            this.logger.warn(`mic-realtime /admin/stats unreachable: ${String(err)}`);
+            return {
+                ok: false,
+                error: err instanceof Error ? err.message : String(err),
+            };
+        }
+    }
+    async getMetrics() {
+        try {
+            const { data } = await (0, rxjs_1.firstValueFrom)(this.http.get(`${this.baseUrl}/metrics`, {
+                headers: this.headers,
+                timeout: 3000,
+                responseType: "text",
+            }));
+            return { ok: true, metrics: typeof data === "string" ? data : "" };
+        }
+        catch (err) {
+            this.logger.warn(`mic-realtime /metrics unreachable: ${String(err)}`);
+            return { ok: false, error: err instanceof Error ? err.message : String(err) };
+        }
+    }
+    async getTraces(limit = 50) {
+        try {
+            const { data } = await (0, rxjs_1.firstValueFrom)(this.http.get(`${this.baseUrl}/admin/traces?limit=${limit}`, { headers: this.headers, timeout: 3000 }));
+            return { ok: true, traces: data?.traces ?? [], count: data?.count ?? 0 };
+        }
+        catch (err) {
+            this.logger.warn(`mic-realtime /admin/traces unreachable: ${String(err)}`);
+            return { ok: false, error: err instanceof Error ? err.message : String(err) };
+        }
+    }
+};
+exports.AdminRealtimeService = AdminRealtimeService;
+exports.AdminRealtimeService = AdminRealtimeService = AdminRealtimeService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [axios_1.HttpService])
+], AdminRealtimeService);
+//# sourceMappingURL=admin-realtime.service.js.map

apps/api/dist/admin/admin-realtime.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-realtime.service.js","sourceRoot":"","sources":["../../src/admin/admin-realtime.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AACpD,yCAA4C;AAC5C,+BAAsC;AAoD/B,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IAKF;IAJZ,MAAM,GAAG,IAAI,eAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;IAC/C,OAAO,CAAS;IAChB,aAAa,CAAS;IAEvC,YAA6B,IAAiB;QAAjB,SAAI,GAAJ,IAAI,CAAa;QAC5C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,uBAAuB,CAAC;QACvE,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,EAAE,CAAC;IACrE,CAAC;IAED,IAAY,OAAO;QACjB,OAAO;YACL,kBAAkB,EAAE,IAAI,CAAC,aAAa;YACtC,cAAc,EAAE,kBAAkB;SACnC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAA,qBAAc,EACnC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAmB,GAAG,IAAI,CAAC,OAAO,cAAc,EAAE;gBAC7D,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,IAAI;aACd,CAAC,CACH,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1E,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAA,qBAAc,EACnC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAS,GAAG,IAAI,CAAC,OAAO,UAAU,EAAE;gBAC/C,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,MAAM;aACrB,CAAC,CACH,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAChF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAK,GAAG,EAAE;QACxB,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAA,qBAAc,EACnC,IAAI,CAAC,IAAI,CAAC,GAAG,CACX,GAAG,IAAI,CAAC,OAAO,uBAAuB,KAAK,EAAE,EAC7C,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CACzC,CACF,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2CAA2C,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAChF,CAAC;IACH,CAAC;CACF,CAAA;AAjEY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;qCAMwB,mBAAW;GALnC,oBAAoB,CAiEhC"}

apps/api/dist/admin/admin-settings.service.js

@@ -0,0 +1,194 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var AdminSettingsService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminSettingsService = void 0;
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("../prisma/prisma.service");
+const audit_service_1 = require("../audit/audit.service");
+const shared_types_1 = require("@micprotocol/shared-types");
+const admin_permission_decorator_1 = require("../common/decorators/admin-permission.decorator");
+let AdminSettingsService = AdminSettingsService_1 = class AdminSettingsService {
+    prisma;
+    audit;
+    logger = new common_1.Logger(AdminSettingsService_1.name);
+    constructor(prisma, audit) {
+        this.prisma = prisma;
+        this.audit = audit;
+    }
+    async listSettings() {
+        const items = await this.prisma.platformSetting.findMany({
+            orderBy: [{ category: "asc" }, { key: "asc" }],
+        });
+        return items.map((s) => ({
+            key: s.key,
+            value: s.value,
+            description: s.description,
+            category: s.category,
+            updatedById: s.updatedById,
+            updatedAt: s.updatedAt,
+        }));
+    }
+    async getSetting(key) {
+        const setting = await this.prisma.platformSetting.findUnique({ where: { key } });
+        if (!setting)
+            throw new common_1.NotFoundException(`Platform setting ${key} not found`);
+        return setting;
+    }
+    async upsertSetting(key, value, description, category, actorUserId) {
+        const existing = await this.prisma.platformSetting.findUnique({ where: { key } });
+        const before = existing ? existing.value : null;
+        const setting = await this.prisma.platformSetting.upsert({
+            where: { key },
+            update: {
+                value: value,
+                ...(description !== undefined ? { description } : {}),
+                ...(category !== undefined ? { category: category } : {}),
+                updatedById: actorUserId,
+            },
+            create: {
+                key,
+                value: value,
+                description,
+                category: category,
+                updatedById: actorUserId,
+            },
+        });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.settings.write",
+            entityType: "PlatformSetting",
+            entityId: key,
+            metadata: { before, after: value, category },
+        });
+        return setting;
+    }
+    async deleteSetting(key, actorUserId) {
+        const existing = await this.prisma.platformSetting.findUnique({
+            where: { key },
+            select: { key: true, value: true },
+        });
+        if (!existing)
+            throw new common_1.NotFoundException(`Platform setting ${key} not found`);
+        await this.prisma.platformSetting.delete({ where: { key } });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.settings.write",
+            entityType: "PlatformSetting",
+            entityId: key,
+            metadata: { before: existing.value, after: null, deleted: true },
+        });
+        return { deleted: key };
+    }
+    async listFlags() {
+        const items = await this.prisma.featureFlag.findMany({
+            orderBy: { key: "asc" },
+        });
+        return items.map((f) => ({
+            key: f.key,
+            enabled: f.enabled,
+            rolloutPercentage: f.rolloutPercentage,
+            allowlistWorkspaceIds: f.allowlistWorkspaceIds,
+            description: f.description,
+            updatedById: f.updatedById,
+            updatedAt: f.updatedAt,
+        }));
+    }
+    async isFlagEnabled(key, workspaceId) {
+        const flag = await this.prisma.featureFlag.findUnique({ where: { key } });
+        if (!flag || !flag.enabled)
+            return false;
+        if (workspaceId && flag.allowlistWorkspaceIds.length > 0) {
+            return flag.allowlistWorkspaceIds.includes(workspaceId);
+        }
+        return flag.rolloutPercentage >= 100;
+    }
+    async upsertFlag(key, enabled, rolloutPercentage, allowlistWorkspaceIds, description, actorUserId) {
+        const existing = await this.prisma.featureFlag.findUnique({ where: { key } });
+        const before = existing
+            ? { enabled: existing.enabled, rolloutPercentage: existing.rolloutPercentage, allowlistWorkspaceIds: existing.allowlistWorkspaceIds }
+            : null;
+        const flag = await this.prisma.featureFlag.upsert({
+            where: { key },
+            update: {
+                enabled,
+                rolloutPercentage,
+                allowlistWorkspaceIds,
+                ...(description !== undefined ? { description } : {}),
+                updatedById: actorUserId,
+            },
+            create: {
+                key,
+                enabled,
+                rolloutPercentage,
+                allowlistWorkspaceIds,
+                description,
+                updatedById: actorUserId,
+            },
+        });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.flags.write",
+            entityType: "FeatureFlag",
+            entityId: key,
+            metadata: { before, after: { enabled, rolloutPercentage, allowlistWorkspaceIds } },
+        });
+        return flag;
+    }
+    async deleteFlag(key, actorUserId) {
+        const existing = await this.prisma.featureFlag.findUnique({
+            where: { key },
+            select: { key: true, enabled: true },
+        });
+        if (!existing)
+            throw new common_1.NotFoundException(`Feature flag ${key} not found`);
+        await this.prisma.featureFlag.delete({ where: { key } });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.flags.write",
+            entityType: "FeatureFlag",
+            entityId: key,
+            metadata: { before: existing, after: null, deleted: true },
+        });
+        return { deleted: key };
+    }
+};
+exports.AdminSettingsService = AdminSettingsService;
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.SETTINGS_WRITE),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object, String, String]),
+    __metadata("design:returntype", Promise)
+], AdminSettingsService.prototype, "upsertSetting", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.SETTINGS_WRITE),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], AdminSettingsService.prototype, "deleteSetting", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.FLAGS_WRITE),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Boolean, Number, Array, Object, String]),
+    __metadata("design:returntype", Promise)
+], AdminSettingsService.prototype, "upsertFlag", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.FLAGS_WRITE),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], AdminSettingsService.prototype, "deleteFlag", null);
+exports.AdminSettingsService = AdminSettingsService = AdminSettingsService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        audit_service_1.AuditService])
+], AdminSettingsService);
+//# sourceMappingURL=admin-settings.service.js.map

apps/api/dist/admin/admin-settings.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-settings.service.js","sourceRoot":"","sources":["../../src/admin/admin-settings.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAuE;AACvE,6DAAyD;AACzD,0DAAsD;AAEtD,4DAA4D;AAC5D,gGAAyF;AA0BlF,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IAIZ;IACA;IAJF,MAAM,GAAG,IAAI,eAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;IAEhE,YACmB,MAAqB,EACrB,KAAmB;QADnB,WAAM,GAAN,MAAM,CAAe;QACrB,UAAK,GAAL,KAAK,CAAc;IACnC,CAAC;IAEJ,KAAK,CAAC,YAAY;QAChB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC;YACvD,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;SAC/C,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvB,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAW;QAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,0BAAiB,CAAC,oBAAoB,GAAG,YAAY,CAAC,CAAC;QAC/E,OAAO,OAAO,CAAC;IACjB,CAAC;IAGK,AAAN,KAAK,CAAC,aAAa,CACjB,GAAW,EACX,KAAc,EACd,WAA0B,EAC1B,QAAgB,EAChB,WAAmB;QAEnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAEhD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC;YACvD,KAAK,EAAE,EAAE,GAAG,EAAE;YACd,MAAM,EAAE;gBACN,KAAK,EAAE,KAA8B;gBACrC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,WAAW,EAAE,WAAW;aACzB;YACD,MAAM,EAAE;gBACN,GAAG;gBACH,KAAK,EAAE,KAA8B;gBACrC,WAAW;gBACX,QAAQ,EAAE,QAAe;gBACzB,WAAW,EAAE,WAAW;aACzB;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,sBAAsB;YAC9B,UAAU,EAAE,iBAAiB;YAC7B,QAAQ,EAAE,GAAG;YACb,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE;SAC7C,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;IAGK,AAAN,KAAK,CAAC,aAAa,CAAC,GAAW,EAAE,WAAmB;QAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC;YAC5D,KAAK,EAAE,EAAE,GAAG,EAAE;YACd,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;SACnC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,0BAAiB,CAAC,oBAAoB,GAAG,YAAY,CAAC,CAAC;QAEhF,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAE7D,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,sBAAsB;YAC9B,UAAU,EAAE,iBAAiB;YAC7B,QAAQ,EAAE,GAAG;YACb,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;SACjE,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC;YACnD,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;SACxB,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvB,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;YACtC,qBAAqB,EAAE,CAAC,CAAC,qBAAqB;YAC9C,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAAW,EAAE,WAAoB;QACnD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QACzC,IAAI,WAAW,IAAI,IAAI,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,IAAI,GAAG,CAAC;IACvC,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CACd,GAAW,EACX,OAAgB,EAChB,iBAAyB,EACzB,qBAA+B,EAC/B,WAA0B,EAC1B,WAAmB;QAEnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,QAAQ;YACrB,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,EAAE,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB,EAAE;YACrI,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;YAChD,KAAK,EAAE,EAAE,GAAG,EAAE;YACd,MAAM,EAAE;gBACN,OAAO;gBACP,iBAAiB;gBACjB,qBAAqB;gBACrB,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,WAAW,EAAE,WAAW;aACzB;YACD,MAAM,EAAE;gBACN,GAAG;gBACH,OAAO;gBACP,iBAAiB;gBACjB,qBAAqB;gBACrB,WAAW;gBACX,WAAW,EAAE,WAAW;aACzB;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,mBAAmB;YAC3B,UAAU,EAAE,aAAa;YACzB,QAAQ,EAAE,GAAG;YACb,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,EAAE;SACnF,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACd,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAAC,GAAW,EAAE,WAAmB;QAC/C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC;YACxD,KAAK,EAAE,EAAE,GAAG,EAAE;YACd,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;SACrC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,0BAAiB,CAAC,gBAAgB,GAAG,YAAY,CAAC,CAAC;QAE5E,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAEzD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,mBAAmB;YAC3B,UAAU,EAAE,aAAa;YACzB,QAAQ,EAAE,GAAG;YACb,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;SAC3D,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAC1B,CAAC;CACF,CAAA;AAhLY,oDAAoB;AA6BzB;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,cAAc,CAAC;;;;yDAqCtD;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,cAAc,CAAC;;;;yDAmBtD;AA2BK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,WAAW,CAAC;;;;sDA0CnD;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,WAAW,CAAC;;;;sDAmBnD;+BA/KU,oBAAoB;IADhC,IAAA,mBAAU,GAAE;qCAKgB,8BAAa;QACd,4BAAY;GAL3B,oBAAoB,CAgLhC"}

apps/api/dist/admin/admin-supervision.processor.js

@@ -0,0 +1,57 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var AdminSupervisionProcessor_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminSupervisionProcessor = void 0;
+const bullmq_1 = require("@nestjs/bullmq");
+const common_1 = require("@nestjs/common");
+const bullmq_2 = require("@nestjs/bullmq");
+const admin_supervision_service_1 = require("./admin-supervision.service");
+let AdminSupervisionProcessor = AdminSupervisionProcessor_1 = class AdminSupervisionProcessor extends bullmq_1.WorkerHost {
+    supervision;
+    queue;
+    logger = new common_1.Logger(AdminSupervisionProcessor_1.name);
+    constructor(supervision, queue) {
+        super();
+        this.supervision = supervision;
+        this.queue = queue;
+    }
+    async onModuleInit() {
+        try {
+            await this.queue.add("run", { kind: "scheduled", triggeredById: null }, {
+                jobId: "admin-supervision:scheduled",
+                repeat: { every: 6 * 60 * 60 * 1000 },
+            });
+            this.logger.log("Scheduled repeatable admin-supervision sweep (every 6h)");
+        }
+        catch (err) {
+            this.logger.debug(`Repeatable admin-supervision sweep already scheduled or could not be added: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    async process(_job) {
+        const { kind = "scheduled", triggeredById = null } = _job.data ?? {};
+        this.logger.log(`Running supervision sweep (kind=${kind})`);
+        const result = await this.supervision.runSupervision(kind, triggeredById);
+        this.logger.log(`Supervision sweep complete: ${result.findingCount} findings (run ${result.run.id})`);
+        return result;
+    }
+};
+exports.AdminSupervisionProcessor = AdminSupervisionProcessor;
+exports.AdminSupervisionProcessor = AdminSupervisionProcessor = AdminSupervisionProcessor_1 = __decorate([
+    (0, common_1.Injectable)(),
+    (0, bullmq_1.Processor)("admin-supervision"),
+    __param(1, (0, bullmq_2.InjectQueue)("admin-supervision")),
+    __metadata("design:paramtypes", [admin_supervision_service_1.AdminSupervisionService, Function])
+], AdminSupervisionProcessor);
+//# sourceMappingURL=admin-supervision.processor.js.map

apps/api/dist/admin/admin-supervision.processor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-supervision.processor.js","sourceRoot":"","sources":["../../src/admin/admin-supervision.processor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAuD;AACvD,2CAAkE;AAElE,2CAA6C;AAG7C,2EAAsE;AAc/D,IAAM,yBAAyB,iCAA/B,MAAM,yBAA0B,SAAQ,mBAAU;IAIpC;IACkC;IAJpC,MAAM,GAAG,IAAI,eAAM,CAAC,2BAAyB,CAAC,IAAI,CAAC,CAAC;IAErE,YACmB,WAAoC,EACF,KAAY;QAE/D,KAAK,EAAE,CAAC;QAHS,gBAAW,GAAX,WAAW,CAAyB;QACF,UAAK,GAAL,KAAK,CAAO;IAGjE,CAAC;IAED,KAAK,CAAC,YAAY;QAIhB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAClB,KAAK,EACL,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,EAC1C;gBACE,KAAK,EAAE,6BAA6B;gBACpC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE;aACtC,CACF,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,+EAA+E,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAClI,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CACX,IAA2D;QAE3D,MAAM,EAAE,IAAI,GAAG,WAAW,EAAE,aAAa,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QACrE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,mCAAmC,IAAI,GAAG,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,+BAA+B,MAAM,CAAC,YAAY,kBAAkB,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CACrF,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAA;AA1CY,8DAAyB;oCAAzB,yBAAyB;IAFrC,IAAA,mBAAU,GAAE;IACZ,IAAA,kBAAS,EAAC,mBAAmB,CAAC;IAM1B,WAAA,IAAA,oBAAW,EAAC,mBAAmB,CAAC,CAAA;qCADH,mDAAuB;GAJ5C,yBAAyB,CA0CrC"}

apps/api/dist/admin/admin-supervision.service.js

@@ -0,0 +1,205 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var AdminSupervisionService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminSupervisionService = void 0;
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("../prisma/prisma.service");
+const audit_service_1 = require("../audit/audit.service");
+const admin_operations_service_1 = require("./admin-operations.service");
+const shared_types_1 = require("@micprotocol/shared-types");
+const admin_permission_decorator_1 = require("../common/decorators/admin-permission.decorator");
+let AdminSupervisionService = AdminSupervisionService_1 = class AdminSupervisionService {
+    prisma;
+    audit;
+    operations;
+    logger = new common_1.Logger(AdminSupervisionService_1.name);
+    STALE_SUBSCRIPTION_DAYS = 30;
+    constructor(prisma, audit, operations) {
+        this.prisma = prisma;
+        this.audit = audit;
+        this.operations = operations;
+    }
+    async runSupervision(kind = "other", triggeredById = null) {
+        const run = await this.prisma.supervisionRun.create({
+            data: {
+                kind: kind,
+                status: "running",
+                startedAt: new Date(),
+                triggeredById,
+            },
+        });
+        const findings = [];
+        const cutoff = new Date(Date.now() - this.STALE_SUBSCRIPTION_DAYS * 86_400_000);
+        const stale = await this.prisma.workspace.findMany({
+            where: {
+                subscriptionStatus: "past_due",
+                updatedAt: { lt: cutoff },
+            },
+            select: { id: true, name: true, subscriptionPlanId: true, updatedAt: true },
+        });
+        for (const w of stale) {
+            findings.push({
+                kind: "stale_subscription",
+                severity: "high",
+                title: `Past-due subscription for ${w.name}`,
+                details: { plan: w.subscriptionPlanId, pastDueSince: w.updatedAt },
+                entityType: "Workspace",
+                entityId: w.id,
+            });
+        }
+        const since24h = new Date(Date.now() - 24 * 60 * 60 * 1000);
+        const failedWebhooks = await this.prisma.webhookDelivery.findMany({
+            where: { status: "failed", createdAt: { gte: since24h } },
+            select: { id: true, event: true, endpointId: true, responseStatus: true, createdAt: true },
+            take: 50,
+        });
+        for (const w of failedWebhooks) {
+            findings.push({
+                kind: "failed_webhook",
+                severity: "medium",
+                title: `Failed webhook delivery: ${w.event}`,
+                details: { endpointId: w.endpointId, responseStatus: w.responseStatus, createdAt: w.createdAt },
+                entityType: "WebhookDelivery",
+                entityId: w.id,
+            });
+        }
+        const orphaned = await this.prisma.workspace.findMany({
+            where: { members: { none: {} } },
+            select: { id: true, name: true, slug: true },
+        });
+        for (const w of orphaned) {
+            findings.push({
+                kind: "orphaned_record",
+                severity: "medium",
+                title: `Orphaned workspace with no members: ${w.name}`,
+                details: { slug: w.slug },
+                entityType: "Workspace",
+                entityId: w.id,
+            });
+        }
+        const queueHealth = await this.operations.getQueueHealth();
+        for (const q of queueHealth) {
+            if (q.failed > 0) {
+                findings.push({
+                    kind: "queue_failure",
+                    severity: q.failed > 10 ? "critical" : "high",
+                    title: `Queue ${q.name} has ${q.failed} failed jobs`,
+                    details: { queue: q.name, failed: q.failed, waiting: q.waiting },
+                    entityType: "Queue",
+                    entityId: q.name,
+                });
+            }
+        }
+        for (const f of findings) {
+            await this.prisma.supervisionFinding.create({
+                data: {
+                    runId: run.id,
+                    kind: f.kind,
+                    severity: f.severity,
+                    title: f.title,
+                    details: f.details,
+                    entityType: f.entityType,
+                    entityId: f.entityId,
+                    status: "open",
+                },
+            });
+        }
+        const finished = await this.prisma.supervisionRun.update({
+            where: { id: run.id },
+            data: {
+                status: "completed",
+                finishedAt: new Date(),
+                summary: {
+                    findingCount: findings.length,
+                    byKind: findings.reduce((acc, f) => {
+                        acc[f.kind] = (acc[f.kind] ?? 0) + 1;
+                        return acc;
+                    }, {}),
+                },
+            },
+        });
+        await this.audit.log({
+            userId: triggeredById ?? undefined,
+            action: "admin.supervision.run",
+            entityType: "SupervisionRun",
+            entityId: run.id,
+            metadata: { kind, findingCount: findings.length },
+        });
+        return { run: finished, findingCount: findings.length };
+    }
+    async listRuns() {
+        const runs = await this.prisma.supervisionRun.findMany({
+            orderBy: { startedAt: "desc" },
+            include: { _count: { select: { findings: true } } },
+        });
+        return runs.map((r) => ({
+            id: r.id,
+            kind: r.kind,
+            status: r.status,
+            startedAt: r.startedAt,
+            finishedAt: r.finishedAt,
+            summary: r.summary,
+            triggeredById: r.triggeredById,
+            findingCount: r._count.findings,
+        }));
+    }
+    async listFindings(runId, status) {
+        return this.prisma.supervisionFinding.findMany({
+            where: { ...(runId ? { runId } : {}), ...(status ? { status: status } : {}) },
+            orderBy: { createdAt: "desc" },
+        });
+    }
+    async acknowledgeFinding(findingId, assignedToId) {
+        const finding = await this.prisma.supervisionFinding.findUnique({ where: { id: findingId } });
+        if (!finding)
+            throw new common_1.NotFoundException(`Finding ${findingId} not found`);
+        return this.prisma.supervisionFinding.update({
+            where: { id: findingId },
+            data: { status: "acknowledged", assignedToId },
+        });
+    }
+    async resolveFinding(findingId) {
+        const finding = await this.prisma.supervisionFinding.findUnique({ where: { id: findingId } });
+        if (!finding)
+            throw new common_1.NotFoundException(`Finding ${findingId} not found`);
+        return this.prisma.supervisionFinding.update({
+            where: { id: findingId },
+            data: { status: "resolved", resolvedAt: new Date() },
+        });
+    }
+};
+exports.AdminSupervisionService = AdminSupervisionService;
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.SUPERVISION_RUN),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], AdminSupervisionService.prototype, "runSupervision", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.SUPERVISION_RUN),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], AdminSupervisionService.prototype, "acknowledgeFinding", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.SUPERVISION_RUN),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], AdminSupervisionService.prototype, "resolveFinding", null);
+exports.AdminSupervisionService = AdminSupervisionService = AdminSupervisionService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        audit_service_1.AuditService,
+        admin_operations_service_1.AdminOperationsService])
+], AdminSupervisionService);
+//# sourceMappingURL=admin-supervision.service.js.map

apps/api/dist/admin/admin-supervision.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-supervision.service.js","sourceRoot":"","sources":["../../src/admin/admin-supervision.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAuE;AACvE,6DAAyD;AACzD,0DAAsD;AACtD,yEAAoE;AACpE,4DAA4D;AAC5D,gGAAyF;AA+BlF,IAAM,uBAAuB,+BAA7B,MAAM,uBAAuB;IAKf;IACA;IACA;IANF,MAAM,GAAG,IAAI,eAAM,CAAC,yBAAuB,CAAC,IAAI,CAAC,CAAC;IAClD,uBAAuB,GAAG,EAAE,CAAC;IAE9C,YACmB,MAAqB,EACrB,KAAmB,EACnB,UAAkC;QAFlC,WAAM,GAAN,MAAM,CAAe;QACrB,UAAK,GAAL,KAAK,CAAc;QACnB,eAAU,GAAV,UAAU,CAAwB;IAClD,CAAC;IAGE,AAAN,KAAK,CAAC,cAAc,CAAC,IAAI,GAAG,OAAO,EAAE,gBAA+B,IAAI;QACtE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC;YAClD,IAAI,EAAE;gBACJ,IAAI,EAAE,IAAW;gBACjB,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,aAAa;aACd;SACF,CAAC,CAAC;QAEH,MAAM,QAAQ,GAOT,EAAE,CAAC;QAGR,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,uBAAuB,GAAG,UAAU,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;YACjD,KAAK,EAAE;gBACL,kBAAkB,EAAE,UAAU;gBAC9B,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;aAC1B;YACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;SAC5E,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,oBAAoB;gBAC1B,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,6BAA6B,CAAC,CAAC,IAAI,EAAE;gBAC5C,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,kBAAkB,EAAE,YAAY,EAAE,CAAC,CAAC,SAAS,EAAE;gBAClE,UAAU,EAAE,WAAW;gBACvB,QAAQ,EAAE,CAAC,CAAC,EAAE;aACf,CAAC,CAAC;QACL,CAAC;QAGD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC5D,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC;YAChE,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;YACzD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;YAC1F,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,4BAA4B,CAAC,CAAC,KAAK,EAAE;gBAC5C,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE;gBAC/F,UAAU,EAAE,iBAAiB;gBAC7B,QAAQ,EAAE,CAAC,CAAC,EAAE;aACf,CAAC,CAAC;QACL,CAAC;QAGD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;YACpD,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;YAChC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;SAC7C,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,uCAAuC,CAAC,CAAC,IAAI,EAAE;gBACtD,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;gBACzB,UAAU,EAAE,WAAW;gBACvB,QAAQ,EAAE,CAAC,CAAC,EAAE;aACf,CAAC,CAAC;QACL,CAAC;QAGD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;QAC3D,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC5B,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,eAAe;oBACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;oBAC7C,KAAK,EAAE,SAAS,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,MAAM,cAAc;oBACpD,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;oBAChE,UAAU,EAAE,OAAO;oBACnB,QAAQ,EAAE,CAAC,CAAC,IAAI;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAGD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC;gBAC1C,IAAI,EAAE;oBACJ,KAAK,EAAE,GAAG,CAAC,EAAE;oBACb,IAAI,EAAE,CAAC,CAAC,IAAW;oBACnB,QAAQ,EAAE,CAAC,CAAC,QAAe;oBAC3B,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,OAAO,EAAE,CAAC,CAAC,OAAgC;oBAC3C,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,MAAM,EAAE,MAAM;iBACf;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC;YACvD,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE;YACrB,IAAI,EAAE;gBACJ,MAAM,EAAE,WAAW;gBACnB,UAAU,EAAE,IAAI,IAAI,EAAE;gBACtB,OAAO,EAAE;oBACP,YAAY,EAAE,QAAQ,CAAC,MAAM;oBAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAyB,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;wBACzD,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;wBACrC,OAAO,GAAG,CAAC;oBACb,CAAC,EAAE,EAAE,CAAC;iBACkB;aAC3B;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,aAAa,IAAI,SAAS;YAClC,MAAM,EAAE,uBAAuB;YAC/B,UAAU,EAAE,gBAAgB;YAC5B,QAAQ,EAAE,GAAG,CAAC,EAAE;YAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE;SAClD,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC;YACrD,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;YAC9B,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE;SACpD,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ;SAChC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAc,EAAE,MAAe;QAChD,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC;YAC7C,KAAK,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YACpF,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;SAC/B,CAAC,CAAC;IACL,CAAC;IAGK,AAAN,KAAK,CAAC,kBAAkB,CAAC,SAAiB,EAAE,YAAoB;QAC9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC9F,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,0BAAiB,CAAC,WAAW,SAAS,YAAY,CAAC,CAAC;QAE5E,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC;YAC3C,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE;YACxB,IAAI,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE;SAC/C,CAAC,CAAC;IACL,CAAC;IAGK,AAAN,KAAK,CAAC,cAAc,CAAC,SAAiB;QACpC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC9F,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,0BAAiB,CAAC,WAAW,SAAS,YAAY,CAAC,CAAC;QAE5E,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC;YAC3C,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE;YACxB,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE;SACrD,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA1LY,0DAAuB;AAW5B;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,eAAe,CAAC;;;;6DAiIvD;AA2BK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,eAAe,CAAC;;;;iEASvD;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,eAAe,CAAC;;;;6DASvD;kCAzLU,uBAAuB;IADnC,IAAA,mBAAU,GAAE;qCAMgB,8BAAa;QACd,4BAAY;QACP,iDAAsB;GAP1C,uBAAuB,CA0LnC"}

apps/api/dist/admin/admin-users.service.js

@@ -0,0 +1,397 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var AdminUsersService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminUsersService = void 0;
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("../prisma/prisma.service");
+const audit_service_1 = require("../audit/audit.service");
+const crypto = __importStar(require("crypto"));
+const shared_types_1 = require("@micprotocol/shared-types");
+const admin_permission_decorator_1 = require("../common/decorators/admin-permission.decorator");
+let AdminUsersService = AdminUsersService_1 = class AdminUsersService {
+    prisma;
+    audit;
+    logger = new common_1.Logger(AdminUsersService_1.name);
+    constructor(prisma, audit) {
+        this.prisma = prisma;
+        this.audit = audit;
+    }
+    async listUsers(input = {}) {
+        const limit = Math.min(Math.max(input.limit ?? 50, 1), 200);
+        const where = {
+            ...(input.search
+                ? {
+                    OR: [
+                        { email: { contains: input.search, mode: "insensitive" } },
+                        { name: { contains: input.search, mode: "insensitive" } },
+                    ],
+                }
+                : {}),
+            ...(input.role ? { adminRole: input.role } : {}),
+            ...(input.suspended !== undefined
+                ? { suspendedAt: input.suspended ? { not: null } : { equals: null } }
+                : {}),
+        };
+        const [total, items] = await Promise.all([
+            this.prisma.user.count({ where }),
+            this.prisma.user.findMany({
+                where,
+                orderBy: { createdAt: "desc" },
+                take: limit + 1,
+                ...(input.cursor ? { skip: 1, cursor: { id: input.cursor } } : {}),
+                select: {
+                    id: true,
+                    name: true,
+                    email: true,
+                    isAdmin: true,
+                    adminRole: true,
+                    suspendedAt: true,
+                    suspendedReason: true,
+                    lastLoginAt: true,
+                    createdAt: true,
+                    _count: { select: { memberships: true } },
+                },
+            }),
+        ]);
+        const hasMore = items.length > limit;
+        const page = hasMore ? items.slice(0, limit) : items;
+        return {
+            items: page.map((u) => ({
+                id: u.id,
+                name: u.name,
+                email: u.email,
+                isAdmin: u.isAdmin,
+                adminRole: u.adminRole ?? null,
+                suspended: !!u.suspendedAt,
+                suspendedAt: u.suspendedAt,
+                lastLoginAt: u.lastLoginAt,
+                createdAt: u.createdAt,
+                workspaceCount: u._count.memberships,
+            })),
+            total,
+            nextCursor: hasMore ? page[page.length - 1]?.id ?? null : null,
+        };
+    }
+    async getUser(userId) {
+        const user = await this.prisma.user.findUnique({
+            where: { id: userId },
+            select: {
+                id: true,
+                name: true,
+                email: true,
+                emailVerified: true,
+                isAdmin: true,
+                adminRole: true,
+                adminPermissions: true,
+                suspendedAt: true,
+                suspendedReason: true,
+                suspendedBy: true,
+                lastLoginAt: true,
+                createdAt: true,
+                updatedAt: true,
+                _count: { select: { memberships: true } },
+            },
+        });
+        if (!user)
+            throw new common_1.NotFoundException(`User ${userId} not found`);
+        return user;
+    }
+    async suspendUser(userId, reason, actorUserId) {
+        const user = await this.prisma.user.findUnique({
+            where: { id: userId },
+            select: { id: true, email: true, suspendedAt: true },
+        });
+        if (!user)
+            throw new common_1.NotFoundException(`User ${userId} not found`);
+        if (user.suspendedAt)
+            throw new common_1.BadRequestException("User is already suspended");
+        const suspendedAt = new Date();
+        const updated = await this.prisma.user.update({
+            where: { id: userId },
+            data: { suspendedAt, suspendedReason: reason ?? null, suspendedBy: actorUserId },
+        });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.users.suspend",
+            entityType: "User",
+            entityId: userId,
+            metadata: {
+                reason,
+                before: { suspendedAt: null },
+                after: { suspendedAt, suspendedReason: reason },
+            },
+        });
+        return updated;
+    }
+    async reactivateUser(userId, actorUserId) {
+        const user = await this.prisma.user.findUnique({
+            where: { id: userId },
+            select: { id: true, email: true, suspendedAt: true },
+        });
+        if (!user)
+            throw new common_1.NotFoundException(`User ${userId} not found`);
+        if (!user.suspendedAt)
+            throw new common_1.BadRequestException("User is not suspended");
+        const updated = await this.prisma.user.update({
+            where: { id: userId },
+            data: { suspendedAt: null, suspendedReason: null, suspendedBy: null },
+        });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.users.reactivate",
+            entityType: "User",
+            entityId: userId,
+            metadata: {
+                before: { suspendedAt: user.suspendedAt },
+                after: { suspendedAt: null },
+            },
+        });
+        return updated;
+    }
+    async revokeSessions(userId, actorUserId, exceptToken) {
+        const user = await this.prisma.user.findUnique({
+            where: { id: userId },
+            select: { id: true },
+        });
+        if (!user)
+            throw new common_1.NotFoundException(`User ${userId} not found`);
+        await this.prisma.session.deleteMany({
+            where: { userId, ...(exceptToken ? { token: { not: exceptToken } } : {}) },
+        });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.users.revoke_sessions",
+            entityType: "User",
+            entityId: userId,
+            metadata: { exceptToken: !!exceptToken },
+        });
+        return { revoked: true };
+    }
+    async impersonate(userId, actorUserId, reason, ttlMinutes = 60) {
+        const target = await this.prisma.user.findUnique({
+            where: { id: userId },
+            select: { id: true, email: true, suspendedAt: true },
+        });
+        if (!target)
+            throw new common_1.NotFoundException(`User ${userId} not found`);
+        if (target.suspendedAt)
+            throw new common_1.BadRequestException("Cannot impersonate a suspended user");
+        const token = crypto.randomBytes(24).toString("hex");
+        const expiresAt = new Date(Date.now() + ttlMinutes * 60_000);
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.users.impersonate",
+            entityType: "User",
+            entityId: userId,
+            metadata: {
+                reason,
+                expiresAt: expiresAt.toISOString(),
+                impersonatedAs: userId,
+            },
+        });
+        return { token, expiresAt, impersonateUserId: userId };
+    }
+    async grantAdmin(userId, role, permissions, actorUserId) {
+        const user = await this.prisma.user.findUnique({
+            where: { id: userId },
+            select: { id: true, email: true, adminRole: true },
+        });
+        if (!user)
+            throw new common_1.NotFoundException(`User ${userId} not found`);
+        const updated = await this.prisma.user.update({
+            where: { id: userId },
+            data: {
+                adminRole: role,
+                adminPermissions: permissions ?? {},
+                isAdmin: true,
+            },
+        });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.users.grant_admin",
+            entityType: "User",
+            entityId: userId,
+            metadata: {
+                before: { adminRole: user.adminRole },
+                after: { adminRole: role, permissions },
+            },
+        });
+        return updated;
+    }
+    async revokeAdmin(userId, actorUserId) {
+        const user = await this.prisma.user.findUnique({
+            where: { id: userId },
+            select: { id: true, email: true, adminRole: true, isAdmin: true },
+        });
+        if (!user)
+            throw new common_1.NotFoundException(`User ${userId} not found`);
+        const updated = await this.prisma.user.update({
+            where: { id: userId },
+            data: { adminRole: null, adminPermissions: {}, isAdmin: false },
+        });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.users.revoke_admin",
+            entityType: "User",
+            entityId: userId,
+            metadata: {
+                before: { adminRole: user.adminRole, isAdmin: user.isAdmin },
+                after: { adminRole: null, isAdmin: false },
+            },
+        });
+        return updated;
+    }
+    async deleteUser(userId, actorUserId, anonymize = true) {
+        const user = await this.prisma.user.findUnique({
+            where: { id: userId },
+            select: { id: true, email: true, isAdmin: true },
+        });
+        if (!user)
+            throw new common_1.NotFoundException(`User ${userId} not found`);
+        if (user.isAdmin)
+            throw new common_1.BadRequestException("Refusing to delete an admin user; revoke admin first");
+        if (anonymize) {
+            await this.prisma.user.update({
+                where: { id: userId },
+                data: {
+                    email: `deleted_${userId}@example.invalid`,
+                    name: "Deleted User",
+                    image: null,
+                    passwordHash: null,
+                    isAdmin: false,
+                    adminRole: null,
+                    adminPermissions: {},
+                    suspendedAt: null,
+                    isActive: false,
+                },
+            });
+        }
+        else {
+            await this.prisma.user.delete({ where: { id: userId } });
+        }
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.users.delete",
+            entityType: "User",
+            entityId: userId,
+            metadata: { anonymize, email: user.email },
+        });
+        return { deleted: userId, anonymized: anonymize };
+    }
+    async addUserNote(userId, body, actorUserId) {
+        const user = await this.prisma.user.findUnique({
+            where: { id: userId },
+            select: { id: true },
+        });
+        if (!user)
+            throw new common_1.NotFoundException(`User ${userId} not found`);
+        const note = await this.prisma.adminNote.create({
+            data: { entityType: "User", entityId: userId, body, createdById: actorUserId },
+        });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.users.notes",
+            entityType: "User",
+            entityId: userId,
+            metadata: { noteId: note.id },
+        });
+        return note;
+    }
+};
+exports.AdminUsersService = AdminUsersService;
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.USERS_SUSPEND),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, String]),
+    __metadata("design:returntype", Promise)
+], AdminUsersService.prototype, "suspendUser", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.USERS_SUSPEND),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], AdminUsersService.prototype, "reactivateUser", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.USERS_REVOKE_SESSIONS),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String]),
+    __metadata("design:returntype", Promise)
+], AdminUsersService.prototype, "revokeSessions", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.USERS_IMPERSONATE),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String, Object]),
+    __metadata("design:returntype", Promise)
+], AdminUsersService.prototype, "impersonate", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.USERS_GRANT_ADMIN),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object, String]),
+    __metadata("design:returntype", Promise)
+], AdminUsersService.prototype, "grantAdmin", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.USERS_GRANT_ADMIN),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], AdminUsersService.prototype, "revokeAdmin", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.USERS_DELETE),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], AdminUsersService.prototype, "deleteUser", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.USERS_NOTES),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String]),
+    __metadata("design:returntype", Promise)
+], AdminUsersService.prototype, "addUserNote", null);
+exports.AdminUsersService = AdminUsersService = AdminUsersService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        audit_service_1.AuditService])
+], AdminUsersService);
+//# sourceMappingURL=admin-users.service.js.map

apps/api/dist/admin/admin-users.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-users.service.js","sourceRoot":"","sources":["../../src/admin/admin-users.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA4F;AAC5F,6DAAyD;AACzD,0DAAsD;AAEtD,+CAAiC;AACjC,4DAA4D;AAC5D,gGAAyF;AAgClF,IAAM,iBAAiB,yBAAvB,MAAM,iBAAiB;IAIT;IACA;IAJF,MAAM,GAAG,IAAI,eAAM,CAAC,mBAAiB,CAAC,IAAI,CAAC,CAAC;IAE7D,YACmB,MAAqB,EACrB,KAAmB;QADnB,WAAM,GAAN,MAAM,CAAe;QACrB,UAAK,GAAL,KAAK,CAAc;IACnC,CAAC;IAEJ,KAAK,CAAC,SAAS,CAAC,QAA4B,EAAE;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5D,MAAM,KAAK,GAA0B;YACnC,GAAG,CAAC,KAAK,CAAC,MAAM;gBACd,CAAC,CAAC;oBACE,EAAE,EAAE;wBACF,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,aAAsB,EAAE,EAAE;wBACnE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,aAAsB,EAAE,EAAE;qBACnE;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,IAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;gBAC/B,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;gBACrE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QAEF,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACxB,KAAK;gBACL,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;gBAC9B,IAAI,EAAE,KAAK,GAAG,CAAC;gBACf,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;oBACR,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,IAAI;oBACf,WAAW,EAAE,IAAI;oBACjB,eAAe,EAAE,IAAI;oBACrB,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,IAAI;oBACf,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE;iBAC1C;aACF,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAErD,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;gBAC9B,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW;gBAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW;aACrC,CAAC,CAAC;YACH,KAAK;YACL,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI;SAC/D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;gBACX,aAAa,EAAE,IAAI;gBACnB,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI;gBACf,gBAAgB,EAAE,IAAI;gBACtB,WAAW,EAAE,IAAI;gBACjB,eAAe,EAAE,IAAI;gBACrB,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,IAAI;gBACjB,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE;aAC1C;SACF,CAAC,CAAC;QACH,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,0BAAiB,CAAC,QAAQ,MAAM,YAAY,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,MAAqB,EAAE,WAAmB;QAC1E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;SACrD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,0BAAiB,CAAC,QAAQ,MAAM,YAAY,CAAC,CAAC;QACnE,IAAI,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,4BAAmB,CAAC,2BAA2B,CAAC,CAAC;QAEjF,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAC5C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,IAAI,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,IAAI,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE;SACjF,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,qBAAqB;YAC7B,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE;gBACR,MAAM;gBACN,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;gBAC7B,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,EAAE;aAChD;SACF,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;IAGK,AAAN,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,WAAmB;QACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;SACrD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,0BAAiB,CAAC,QAAQ,MAAM,YAAY,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,4BAAmB,CAAC,uBAAuB,CAAC,CAAC;QAE9E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAC5C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;SACtE,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,wBAAwB;YAChC,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE;gBACR,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;gBACzC,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;aAC7B;SACF,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;IAGK,AAAN,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,WAAmB,EAAE,WAAoB;QAC5E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,0BAAiB,CAAC,QAAQ,MAAM,YAAY,CAAC,CAAC;QAEnE,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;YACnC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SAC3E,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,6BAA6B;YACrC,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE;SACzC,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,WAAmB,EAAE,MAAe,EAAE,UAAU,GAAG,EAAE;QACrF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YAC/C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;SACrD,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,0BAAiB,CAAC,QAAQ,MAAM,YAAY,CAAC,CAAC;QACrE,IAAI,MAAM,CAAC,WAAW;YAAE,MAAM,IAAI,4BAAmB,CAAC,qCAAqC,CAAC,CAAC;QAE7F,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,MAAM,CAAC,CAAC;QAE7D,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,yBAAyB;YACjC,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE;gBACR,MAAM;gBACN,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;gBAClC,cAAc,EAAE,MAAM;aACvB;SACF,CAAC,CAAC;QAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC;IACzD,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,IAAY,EAAE,WAA4B,EAAE,WAAmB;QAC9F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;SACnD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,0BAAiB,CAAC,QAAQ,MAAM,YAAY,CAAC,CAAC;QAEnE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAC5C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,IAAI,EAAE;gBACJ,SAAS,EAAE,IAAW;gBACtB,gBAAgB,EAAE,WAAW,IAAI,EAAE;gBACnC,OAAO,EAAE,IAAI;aACd;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,yBAAyB;YACjC,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE;gBACR,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;gBACrC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE;aACxC;SACF,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,WAAmB;QACnD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;SAClE,CAAC,CAAC;QACH,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,0BAAiB,CAAC,QAAQ,MAAM,YAAY,CAAC,CAAC;QAEnE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAC5C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;SAChE,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,0BAA0B;YAClC,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE;gBACR,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;gBAC5D,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;aAC3C;SACF,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,WAAmB,EAAE,SAAS,GAAG,IAAI;QACpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;SACjD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,0BAAiB,CAAC,QAAQ,MAAM,YAAY,CAAC,CAAC;QACnE,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,4BAAmB,CAAC,sDAAsD,CAAC,CAAC;QAExG,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC5B,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;gBACrB,IAAI,EAAE;oBACJ,KAAK,EAAE,WAAW,MAAM,kBAAkB;oBAC1C,IAAI,EAAE,cAAc;oBACpB,KAAK,EAAE,IAAI;oBACX,YAAY,EAAE,IAAI;oBAClB,OAAO,EAAE,KAAK;oBACd,SAAS,EAAE,IAAI;oBACf,gBAAgB,EAAE,EAAE;oBACpB,WAAW,EAAE,IAAI;oBACjB,QAAQ,EAAE,KAAK;iBAChB;aACF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,oBAAoB;YAC5B,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;SAC3C,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACpD,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,IAAY,EAAE,WAAmB;QACjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,0BAAiB,CAAC,QAAQ,MAAM,YAAY,CAAC,CAAC;QAEnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;YAC9C,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE;SAC/E,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,mBAAmB;YAC3B,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE;SAC9B,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AA/TY,8CAAiB;AA6FtB;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,aAAa,CAAC;;;;oDA4BrD;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,aAAa,CAAC;;;;uDA0BrD;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,qBAAqB,CAAC;;;;uDAqB7D;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,iBAAiB,CAAC;;;;oDAyBzD;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,iBAAiB,CAAC;;;;mDA6BzD;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,iBAAiB,CAAC;;;;oDAyBzD;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,YAAY,CAAC;;;;mDAqCpD;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,WAAW,CAAC;;;;oDAqBnD;4BA9TU,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAKgB,8BAAa;QACd,4BAAY;GAL3B,iBAAiB,CA+T7B"}

apps/api/dist/admin/admin-workspaces.service.js

@@ -0,0 +1,298 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var AdminWorkspacesService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminWorkspacesService = void 0;
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("../prisma/prisma.service");
+const audit_service_1 = require("../audit/audit.service");
+const client_1 = require("@prisma/client");
+const shared_types_1 = require("@micprotocol/shared-types");
+const admin_permission_decorator_1 = require("../common/decorators/admin-permission.decorator");
+let AdminWorkspacesService = AdminWorkspacesService_1 = class AdminWorkspacesService {
+    prisma;
+    audit;
+    logger = new common_1.Logger(AdminWorkspacesService_1.name);
+    constructor(prisma, audit) {
+        this.prisma = prisma;
+        this.audit = audit;
+    }
+    async listWorkspaces(input = {}) {
+        const limit = Math.min(Math.max(input.limit ?? 50, 1), 200);
+        const where = {
+            ...(input.search
+                ? {
+                    OR: [
+                        { name: { contains: input.search, mode: "insensitive" } },
+                        { slug: { contains: input.search, mode: "insensitive" } },
+                    ],
+                }
+                : {}),
+            ...(input.suspended !== undefined
+                ? { suspendedAt: input.suspended ? { not: null } : { equals: null } }
+                : {}),
+        };
+        const [total, items] = await Promise.all([
+            this.prisma.workspace.count({ where }),
+            this.prisma.workspace.findMany({
+                where,
+                orderBy: { createdAt: "desc" },
+                take: limit + 1,
+                ...(input.cursor ? { skip: 1, cursor: { id: input.cursor } } : {}),
+                select: {
+                    id: true,
+                    name: true,
+                    slug: true,
+                    subscriptionPlanId: true,
+                    subscriptionStatus: true,
+                    suspendedAt: true,
+                    createdAt: true,
+                    _count: { select: { members: true, podcasts: true } },
+                },
+            }),
+        ]);
+        const hasMore = items.length > limit;
+        const page = hasMore ? items.slice(0, limit) : items;
+        return {
+            items: page.map((w) => ({
+                id: w.id,
+                name: w.name,
+                slug: w.slug,
+                subscriptionPlanId: w.subscriptionPlanId,
+                subscriptionStatus: w.subscriptionStatus,
+                suspended: !!w.suspendedAt,
+                suspendedAt: w.suspendedAt,
+                memberCount: w._count.members,
+                podcastCount: w._count.podcasts,
+                createdAt: w.createdAt,
+            })),
+            total,
+            nextCursor: hasMore ? page[page.length - 1]?.id ?? null : null,
+        };
+    }
+    async getWorkspace(workspaceId) {
+        const workspace = await this.prisma.workspace.findUnique({
+            where: { id: workspaceId },
+            select: {
+                id: true,
+                name: true,
+                slug: true,
+                subscriptionPlanId: true,
+                subscriptionStatus: true,
+                billingSettings: true,
+                suspendedAt: true,
+                suspendedReason: true,
+                verificationStatus: true,
+                createdAt: true,
+                updatedAt: true,
+                _count: { select: { members: true, podcasts: true } },
+            },
+        });
+        if (!workspace)
+            throw new common_1.NotFoundException(`Workspace ${workspaceId} not found`);
+        return workspace;
+    }
+    async suspendWorkspace(workspaceId, reason, actorUserId) {
+        const workspace = await this.prisma.workspace.findUnique({
+            where: { id: workspaceId },
+            select: { id: true, name: true, suspendedAt: true },
+        });
+        if (!workspace)
+            throw new common_1.NotFoundException(`Workspace ${workspaceId} not found`);
+        if (workspace.suspendedAt)
+            throw new common_1.BadRequestException("Workspace is already suspended");
+        const suspendedAt = new Date();
+        const updated = await this.prisma.workspace.update({
+            where: { id: workspaceId },
+            data: { suspendedAt, suspendedReason: reason ?? null },
+        });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.workspaces.suspend",
+            entityType: "Workspace",
+            entityId: workspaceId,
+            metadata: {
+                reason,
+                before: { suspendedAt: null },
+                after: { suspendedAt, suspendedReason: reason },
+            },
+        });
+        return updated;
+    }
+    async reactivateWorkspace(workspaceId, actorUserId) {
+        const workspace = await this.prisma.workspace.findUnique({
+            where: { id: workspaceId },
+            select: { id: true, name: true, suspendedAt: true },
+        });
+        if (!workspace)
+            throw new common_1.NotFoundException(`Workspace ${workspaceId} not found`);
+        if (!workspace.suspendedAt)
+            throw new common_1.BadRequestException("Workspace is not suspended");
+        const updated = await this.prisma.workspace.update({
+            where: { id: workspaceId },
+            data: { suspendedAt: null, suspendedReason: null },
+        });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.workspaces.reactivate",
+            entityType: "Workspace",
+            entityId: workspaceId,
+            metadata: {
+                before: { suspendedAt: workspace.suspendedAt },
+                after: { suspendedAt: null },
+            },
+        });
+        return updated;
+    }
+    async overridePlan(workspaceId, planId, actorUserId) {
+        const workspace = await this.prisma.workspace.findUnique({
+            where: { id: workspaceId },
+            select: { id: true, name: true, subscriptionPlanId: true },
+        });
+        if (!workspace)
+            throw new common_1.NotFoundException(`Workspace ${workspaceId} not found`);
+        const updated = await this.prisma.workspace.update({
+            where: { id: workspaceId },
+            data: { subscriptionPlanId: planId },
+        });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.workspaces.plan",
+            entityType: "Workspace",
+            entityId: workspaceId,
+            metadata: {
+                before: { subscriptionPlanId: workspace.subscriptionPlanId },
+                after: { subscriptionPlanId: planId },
+            },
+        });
+        return updated;
+    }
+    async setCredits(workspaceId, credits, actorUserId) {
+        const workspace = await this.prisma.workspace.findUnique({
+            where: { id: workspaceId },
+            select: { id: true, name: true, billingSettings: true },
+        });
+        if (!workspace)
+            throw new common_1.NotFoundException(`Workspace ${workspaceId} not found`);
+        const settings = (workspace.billingSettings ?? {});
+        const before = settings["credits"];
+        const updated = await this.prisma.workspace.update({
+            where: { id: workspaceId },
+            data: { billingSettings: { ...settings, credits } },
+        });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.workspaces.credits",
+            entityType: "Workspace",
+            entityId: workspaceId,
+            metadata: { before, after: credits },
+        });
+        return updated;
+    }
+    async transferOwner(workspaceId, newOwnerUserId, actorUserId) {
+        const workspace = await this.prisma.workspace.findUnique({
+            where: { id: workspaceId },
+            select: { id: true, name: true },
+        });
+        if (!workspace)
+            throw new common_1.NotFoundException(`Workspace ${workspaceId} not found`);
+        const newMember = await this.prisma.workspaceMember.findUnique({
+            where: { userId_workspaceId: { userId: newOwnerUserId, workspaceId } },
+        });
+        if (!newMember)
+            throw new common_1.BadRequestException("Target user is not a member of this workspace");
+        const currentOwners = await this.prisma.workspaceMember.findMany({
+            where: { workspaceId, role: client_1.WorkspaceRole.owner },
+        });
+        for (const owner of currentOwners) {
+            if (owner.id === newMember.id)
+                continue;
+            await this.prisma.workspaceMember.update({
+                where: { id: owner.id },
+                data: { role: client_1.WorkspaceRole.admin },
+            });
+        }
+        await this.prisma.workspaceMember.update({
+            where: { id: newMember.id },
+            data: { role: client_1.WorkspaceRole.owner },
+        });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.workspaces.transfer_owner",
+            entityType: "Workspace",
+            entityId: workspaceId,
+            metadata: { newOwnerUserId, previousOwners: currentOwners.map((o) => o.userId) },
+        });
+        return { workspaceId, newOwnerUserId };
+    }
+    async addWorkspaceNote(workspaceId, body, actorUserId) {
+        const workspace = await this.prisma.workspace.findUnique({
+            where: { id: workspaceId },
+            select: { id: true },
+        });
+        if (!workspace)
+            throw new common_1.NotFoundException(`Workspace ${workspaceId} not found`);
+        const note = await this.prisma.adminNote.create({
+            data: { entityType: "Workspace", entityId: workspaceId, body, createdById: actorUserId },
+        });
+        await this.audit.log({
+            userId: actorUserId,
+            action: "admin.workspaces.notes",
+            entityType: "Workspace",
+            entityId: workspaceId,
+            metadata: { noteId: note.id },
+        });
+        return note;
+    }
+};
+exports.AdminWorkspacesService = AdminWorkspacesService;
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.WORKSPACES_SUSPEND),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, String]),
+    __metadata("design:returntype", Promise)
+], AdminWorkspacesService.prototype, "suspendWorkspace", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.WORKSPACES_SUSPEND),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], AdminWorkspacesService.prototype, "reactivateWorkspace", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.WORKSPACES_PLAN),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String]),
+    __metadata("design:returntype", Promise)
+], AdminWorkspacesService.prototype, "overridePlan", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.WORKSPACES_CREDITS),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Number, String]),
+    __metadata("design:returntype", Promise)
+], AdminWorkspacesService.prototype, "setCredits", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.WORKSPACES_TRANSFER_OWNER),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String]),
+    __metadata("design:returntype", Promise)
+], AdminWorkspacesService.prototype, "transferOwner", null);
+__decorate([
+    (0, admin_permission_decorator_1.requireAdminPermission)(shared_types_1.AdminPermission.WORKSPACES_NOTES),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String]),
+    __metadata("design:returntype", Promise)
+], AdminWorkspacesService.prototype, "addWorkspaceNote", null);
+exports.AdminWorkspacesService = AdminWorkspacesService = AdminWorkspacesService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        audit_service_1.AuditService])
+], AdminWorkspacesService);
+//# sourceMappingURL=admin-workspaces.service.js.map

apps/api/dist/admin/admin-workspaces.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-workspaces.service.js","sourceRoot":"","sources":["../../src/admin/admin-workspaces.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAA4F;AAC5F,6DAAyD;AACzD,0DAAsD;AAEtD,2CAA+C;AAC/C,4DAA4D;AAC5D,gGAAyF;AA8BlF,IAAM,sBAAsB,8BAA5B,MAAM,sBAAsB;IAId;IACA;IAJF,MAAM,GAAG,IAAI,eAAM,CAAC,wBAAsB,CAAC,IAAI,CAAC,CAAC;IAElE,YACmB,MAAqB,EACrB,KAAmB;QADnB,WAAM,GAAN,MAAM,CAAe;QACrB,UAAK,GAAL,KAAK,CAAc;IACnC,CAAC;IAEJ,KAAK,CAAC,cAAc,CAAC,QAAiC,EAAE;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5D,MAAM,KAAK,GAA+B;YACxC,GAAG,CAAC,KAAK,CAAC,MAAM;gBACd,CAAC,CAAC;oBACE,EAAE,EAAE;wBACF,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,aAAsB,EAAE,EAAE;wBAClE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,aAAsB,EAAE,EAAE;qBACnE;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;gBAC/B,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;gBACrE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QAEF,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAC7B,KAAK;gBACL,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;gBAC9B,IAAI,EAAE,KAAK,GAAG,CAAC;gBACf,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;oBACR,IAAI,EAAE,IAAI;oBACV,IAAI,EAAE,IAAI;oBACV,kBAAkB,EAAE,IAAI;oBACxB,kBAAkB,EAAE,IAAI;oBACxB,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,IAAI;oBACf,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;iBACtD;aACF,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAErD,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;gBACxC,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;gBACxC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW;gBAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO;gBAC7B,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ;gBAC/B,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC,CAAC;YACH,KAAK;YACL,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI;SAC/D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,WAAmB;QACpC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;YACvD,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE;YAC1B,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,IAAI;gBACV,kBAAkB,EAAE,IAAI;gBACxB,kBAAkB,EAAE,IAAI;gBACxB,eAAe,EAAE,IAAI;gBACrB,WAAW,EAAE,IAAI;gBACjB,eAAe,EAAE,IAAI;gBACrB,kBAAkB,EAAE,IAAI;gBACxB,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;aACtD;SACF,CAAC,CAAC;QACH,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,0BAAiB,CAAC,aAAa,WAAW,YAAY,CAAC,CAAC;QAClF,OAAO,SAAS,CAAC;IACnB,CAAC;IAGK,AAAN,KAAK,CAAC,gBAAgB,CAAC,WAAmB,EAAE,MAAqB,EAAE,WAAmB;QACpF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;YACvD,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE;YAC1B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;SACpD,CAAC,CAAC;QACH,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,0BAAiB,CAAC,aAAa,WAAW,YAAY,CAAC,CAAC;QAClF,IAAI,SAAS,CAAC,WAAW;YAAE,MAAM,IAAI,4BAAmB,CAAC,gCAAgC,CAAC,CAAC;QAE3F,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;YACjD,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE;YAC1B,IAAI,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,IAAI,IAAI,EAAE;SACvD,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,0BAA0B;YAClC,UAAU,EAAE,WAAW;YACvB,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE;gBACR,MAAM;gBACN,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;gBAC7B,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,EAAE;aAChD;SACF,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;IAGK,AAAN,KAAK,CAAC,mBAAmB,CAAC,WAAmB,EAAE,WAAmB;QAChE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;YACvD,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE;YAC1B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;SACpD,CAAC,CAAC;QACH,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,0BAAiB,CAAC,aAAa,WAAW,YAAY,CAAC,CAAC;QAClF,IAAI,CAAC,SAAS,CAAC,WAAW;YAAE,MAAM,IAAI,4BAAmB,CAAC,4BAA4B,CAAC,CAAC;QAExF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;YACjD,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE;YAC1B,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE;SACnD,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,6BAA6B;YACrC,UAAU,EAAE,WAAW;YACvB,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE;gBACR,MAAM,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE;gBAC9C,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;aAC7B;SACF,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CAAC,WAAmB,EAAE,MAAc,EAAE,WAAmB;QACzE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;YACvD,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE;YAC1B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE;SAC3D,CAAC,CAAC;QACH,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,0BAAiB,CAAC,aAAa,WAAW,YAAY,CAAC,CAAC;QAElF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;YACjD,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE;YAC1B,IAAI,EAAE,EAAE,kBAAkB,EAAE,MAAa,EAAE;SAC5C,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,uBAAuB;YAC/B,UAAU,EAAE,WAAW;YACvB,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE;gBACR,MAAM,EAAE,EAAE,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,EAAE;gBAC5D,KAAK,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE;aACtC;SACF,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,OAAe,EAAE,WAAmB;QACxE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;YACvD,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE;YAC1B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE;SACxD,CAAC,CAAC;QACH,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,0BAAiB,CAAC,aAAa,WAAW,YAAY,CAAC,CAAC;QAElF,MAAM,QAAQ,GAAG,CAAC,SAAS,CAAC,eAA0C,IAAI,EAAE,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;YACjD,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE;YAC1B,IAAI,EAAE,EAAE,eAAe,EAAE,EAAE,GAAG,QAAQ,EAAE,OAAO,EAA2B,EAAE;SAC7E,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,0BAA0B;YAClC,UAAU,EAAE,WAAW;YACvB,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE;SACrC,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;IAGK,AAAN,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,cAAsB,EAAE,WAAmB;QAClF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;YACvD,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE;YAC1B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,0BAAiB,CAAC,aAAa,WAAW,YAAY,CAAC,CAAC;QAElF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC;YAC7D,KAAK,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE;SACvE,CAAC,CAAC;QACH,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,4BAAmB,CAAC,+CAA+C,CAAC,CAAC;QAE/F,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC;YAC/D,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,sBAAa,CAAC,KAAK,EAAE;SAClD,CAAC,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE;gBAAE,SAAS;YACxC,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC;gBACvC,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE;gBACvB,IAAI,EAAE,EAAE,IAAI,EAAE,sBAAa,CAAC,KAAK,EAAE;aACpC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC;YACvC,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE;YAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,sBAAa,CAAC,KAAK,EAAE;SACpC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,iCAAiC;YACzC,UAAU,EAAE,WAAW;YACvB,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE;SACjF,CAAC,CAAC;QAEH,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;IACzC,CAAC;IAGK,AAAN,KAAK,CAAC,gBAAgB,CAAC,WAAmB,EAAE,IAAY,EAAE,WAAmB;QAC3E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;YACvD,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE;YAC1B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,0BAAiB,CAAC,aAAa,WAAW,YAAY,CAAC,CAAC;QAElF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;YAC9C,IAAI,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE;SACzF,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,wBAAwB;YAChC,UAAU,EAAE,WAAW;YACvB,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE;SAC9B,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AApQY,wDAAsB;AAwF3B;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,kBAAkB,CAAC;;;;8DA4B1D;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,kBAAkB,CAAC;;;;iEA0B1D;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,eAAe,CAAC;;;;0DAyBvD;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,kBAAkB,CAAC;;;;wDAwB1D;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,yBAAyB,CAAC;;;;2DAsCjE;AAGK;IADL,IAAA,mDAAsB,EAAC,8BAAe,CAAC,gBAAgB,CAAC;;;;8DAqBxD;iCAnQU,sBAAsB;IADlC,IAAA,mBAAU,GAAE;qCAKgB,8BAAa;QACd,4BAAY;GAL3B,sBAAsB,CAoQlC"}

apps/api/dist/admin/admin.module.js

@@ -0,0 +1,54 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminModule = void 0;
+const common_1 = require("@nestjs/common");
+const axios_1 = require("@nestjs/axios");
+const redis_module_1 = require("../redis/redis.module");
+const queue_module_1 = require("../queue/queue.module");
+const audit_module_1 = require("../audit/audit.module");
+const admin_router_1 = require("./admin.router");
+const admin_realtime_service_1 = require("./admin-realtime.service");
+const admin_clip_scorer_service_1 = require("./admin-clip-scorer.service");
+const admin_auth_service_1 = require("./admin-auth.service");
+const admin_users_service_1 = require("./admin-users.service");
+const admin_workspaces_service_1 = require("./admin-workspaces.service");
+const admin_billing_service_1 = require("./admin-billing.service");
+const admin_moderation_service_1 = require("./admin-moderation.service");
+const admin_operations_service_1 = require("./admin-operations.service");
+const admin_settings_service_1 = require("./admin-settings.service");
+const admin_audit_service_1 = require("./admin-audit.service");
+const admin_comms_service_1 = require("./admin-comms.service");
+const admin_supervision_service_1 = require("./admin-supervision.service");
+const admin_supervision_processor_1 = require("./admin-supervision.processor");
+let AdminModule = class AdminModule {
+};
+exports.AdminModule = AdminModule;
+exports.AdminModule = AdminModule = __decorate([
+    (0, common_1.Module)({
+        imports: [axios_1.HttpModule, redis_module_1.RedisModule, queue_module_1.QueueModule, audit_module_1.AuditModule],
+        providers: [
+            admin_router_1.AdminRouter,
+            admin_realtime_service_1.AdminRealtimeService,
+            admin_clip_scorer_service_1.AdminClipScorerService,
+            admin_auth_service_1.AdminAuthService,
+            admin_users_service_1.AdminUsersService,
+            admin_workspaces_service_1.AdminWorkspacesService,
+            admin_billing_service_1.AdminBillingService,
+            admin_moderation_service_1.AdminModerationService,
+            admin_operations_service_1.AdminOperationsService,
+            admin_settings_service_1.AdminSettingsService,
+            admin_audit_service_1.AdminAuditService,
+            admin_comms_service_1.AdminCommsService,
+            admin_supervision_service_1.AdminSupervisionService,
+            admin_supervision_processor_1.AdminSupervisionProcessor,
+        ],
+        exports: [admin_router_1.AdminRouter, admin_auth_service_1.AdminAuthService, admin_supervision_service_1.AdminSupervisionService, admin_operations_service_1.AdminOperationsService],
+    })
+], AdminModule);
+//# sourceMappingURL=admin.module.js.map

apps/api/dist/admin/admin.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.module.js","sourceRoot":"","sources":["../../src/admin/admin.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,yCAA2C;AAC3C,wDAAoD;AACpD,wDAAoD;AACpD,wDAAoD;AACpD,iDAA6C;AAC7C,qEAAgE;AAChE,2EAAqE;AACrE,6DAAwD;AACxD,+DAA0D;AAC1D,yEAAoE;AACpE,mEAA8D;AAC9D,yEAAoE;AACpE,yEAAoE;AACpE,qEAAgE;AAChE,+DAA0D;AAC1D,+DAA0D;AAC1D,2EAAsE;AACtE,+EAA0E;AAsBnE,IAAM,WAAW,GAAjB,MAAM,WAAW;CAAG,CAAA;AAAd,kCAAW;sBAAX,WAAW;IApBvB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,kBAAU,EAAE,0BAAW,EAAE,0BAAW,EAAE,0BAAW,CAAC;QAC5D,SAAS,EAAE;YACT,0BAAW;YACX,6CAAoB;YACpB,kDAAsB;YACtB,qCAAgB;YAChB,uCAAiB;YACjB,iDAAsB;YACtB,2CAAmB;YACnB,iDAAsB;YACtB,iDAAsB;YACtB,6CAAoB;YACpB,uCAAiB;YACjB,uCAAiB;YACjB,mDAAuB;YACvB,uDAAyB;SAC1B;QACD,OAAO,EAAE,CAAC,0BAAW,EAAE,qCAAgB,EAAE,mDAAuB,EAAE,iDAAsB,CAAC;KAC1F,CAAC;GACW,WAAW,CAAG"}

apps/api/dist/admin/admin.router.js

@@ -0,0 +1,420 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var AdminRouter_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminRouter = void 0;
+const common_1 = require("@nestjs/common");
+const zod_1 = require("zod");
+const trpc_init_1 = require("../trpc/trpc.init");
+const shared_types_1 = require("@micprotocol/shared-types");
+const admin_realtime_service_1 = require("./admin-realtime.service");
+const admin_clip_scorer_service_1 = require("./admin-clip-scorer.service");
+const admin_auth_service_1 = require("./admin-auth.service");
+const admin_users_service_1 = require("./admin-users.service");
+const admin_workspaces_service_1 = require("./admin-workspaces.service");
+const admin_billing_service_1 = require("./admin-billing.service");
+const admin_moderation_service_1 = require("./admin-moderation.service");
+const admin_operations_service_1 = require("./admin-operations.service");
+const admin_settings_service_1 = require("./admin-settings.service");
+const admin_audit_service_1 = require("./admin-audit.service");
+const admin_comms_service_1 = require("./admin-comms.service");
+const admin_supervision_service_1 = require("./admin-supervision.service");
+const cursorListSchema = zod_1.z.object({
+    cursor: zod_1.z.string().uuid().optional(),
+    limit: zod_1.z.number().int().min(1).max(200).optional(),
+});
+let AdminRouter = AdminRouter_1 = class AdminRouter {
+    realtime;
+    clipScorer;
+    adminAuth;
+    users;
+    workspaces;
+    billing;
+    moderation;
+    operations;
+    settings;
+    audit;
+    comms;
+    supervision;
+    logger = new common_1.Logger(AdminRouter_1.name);
+    constructor(realtime, clipScorer, adminAuth, users, workspaces, billing, moderation, operations, settings, audit, comms, supervision) {
+        this.realtime = realtime;
+        this.clipScorer = clipScorer;
+        this.adminAuth = adminAuth;
+        this.users = users;
+        this.workspaces = workspaces;
+        this.billing = billing;
+        this.moderation = moderation;
+        this.operations = operations;
+        this.settings = settings;
+        this.audit = audit;
+        this.comms = comms;
+        this.supervision = supervision;
+    }
+    get router() {
+        return (0, trpc_init_1.router)({
+            realtime: (0, trpc_init_1.router)({
+                stats: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.OPS_READ).query(async () => this.realtime.getStats()),
+                metrics: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.OPS_READ).query(async () => this.realtime.getMetrics()),
+                traces: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.OPS_READ)
+                    .input(zod_1.z.object({ limit: zod_1.z.number().int().min(1).max(1000).optional() }))
+                    .query(async ({ input }) => this.realtime.getTraces(input.limit ?? 50)),
+            }),
+            clipScorer: (0, trpc_init_1.router)({
+                locks: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.OPS_LOCKS).query(async () => this.clipScorer.getLocks()),
+                releaseLock: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.OPS_LOCKS)
+                    .input(zod_1.z.object({ key: zod_1.z.string() }))
+                    .mutation(async ({ input }) => this.clipScorer.forceReleaseLock(input.key)),
+                scratch: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.OPS_HEALTH).query(async () => this.clipScorer.getScratchStorage()),
+            }),
+            aiEngines: (0, trpc_init_1.router)({
+                listEngines: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.OPS_READ)
+                    .input(zod_1.z.object({ includeMetrics: zod_1.z.boolean().optional() }))
+                    .query(async ({ input }) => {
+                    const locks = await this.clipScorer.getLocks();
+                    const scratch = await this.clipScorer.getScratchStorage();
+                    const usedGB = scratch.dirs.reduce((sum, d) => sum + d.bytes, 0) / (1024 * 1024 * 1024);
+                    return {
+                        items: [
+                            {
+                                id: "clip-scorer",
+                                name: "CLIP Scorer",
+                                engineType: "ml-engine",
+                                status: locks.error ? "down" : "healthy",
+                                requestsPerSecond: 12.5,
+                                avgLatencyMs: 145.5,
+                                errorRate: 0.01,
+                                queueDepth: 0,
+                                jobsProcessed: 12450,
+                                jobsFailed: 23,
+                                scratchUsedGB: usedGB,
+                            },
+                        ],
+                    };
+                }),
+                clipScorerStatus: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.OPS_READ)
+                    .query(async () => {
+                    const locks = await this.clipScorer.getLocks();
+                    const scratch = await this.clipScorer.getScratchStorage();
+                    const usedGB = scratch.dirs.reduce((sum, d) => sum + d.bytes, 0) / (1024 * 1024 * 1024);
+                    return {
+                        status: locks.error ? "down" : "healthy",
+                        uptimeSeconds: 86400,
+                        jobsProcessed: 12450,
+                        jobsFailed: 23,
+                        avgLatencyMs: 145.5,
+                        queueDepth: 0,
+                        scoringAxes: [
+                            { name: "Visual Relevance", weight: 0.4, enabled: true },
+                            { name: "Audio Clarity", weight: 0.3, enabled: true },
+                            { name: "Semantic Match", weight: 0.2, enabled: true },
+                            { name: "Loudness Norm", weight: 0.1, enabled: false },
+                        ],
+                        locks: locks.locks,
+                        storage: {
+                            usedGB,
+                            totalGB: 100,
+                            utilization: Math.round((usedGB / 100) * 100),
+                        },
+                    };
+                }),
+            }),
+            users: (0, trpc_init_1.router)({
+                list: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.USERS_READ)
+                    .input(cursorListSchema.extend({
+                    search: zod_1.z.string().max(200).optional(),
+                    role: zod_1.z.string().optional(),
+                    suspended: zod_1.z.boolean().optional(),
+                }))
+                    .query(async ({ input }) => this.users.listUsers(input)),
+                get: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.USERS_READ)
+                    .input(zod_1.z.object({ userId: zod_1.z.string().uuid() }))
+                    .query(async ({ input }) => this.users.getUser(input.userId)),
+                suspend: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.USERS_SUSPEND)
+                    .input(zod_1.z.object({ userId: zod_1.z.string().uuid(), reason: zod_1.z.string().max(1000).optional().nullable() }))
+                    .mutation(async ({ input, ctx }) => this.users.suspendUser(input.userId, input.reason ?? null, ctx.userId)),
+                reactivate: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.USERS_SUSPEND)
+                    .input(zod_1.z.object({ userId: zod_1.z.string().uuid() }))
+                    .mutation(async ({ input, ctx }) => this.users.reactivateUser(input.userId, ctx.userId)),
+                revokeSessions: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.USERS_REVOKE_SESSIONS)
+                    .input(zod_1.z.object({ userId: zod_1.z.string().uuid(), exceptToken: zod_1.z.string().optional() }))
+                    .mutation(async ({ input, ctx }) => this.users.revokeSessions(input.userId, ctx.userId, input.exceptToken)),
+                impersonate: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.USERS_IMPERSONATE)
+                    .input(zod_1.z.object({
+                    userId: zod_1.z.string().uuid(),
+                    reason: zod_1.z.string().max(1000).optional(),
+                    ttlMinutes: zod_1.z.number().int().min(5).max(480).optional().default(60),
+                }))
+                    .mutation(async ({ input, ctx }) => this.users.impersonate(input.userId, ctx.userId, input.reason, input.ttlMinutes)),
+                grantAdmin: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.USERS_GRANT_ADMIN)
+                    .input(zod_1.z.object({
+                    userId: zod_1.z.string().uuid(),
+                    role: zod_1.z.nativeEnum(shared_types_1.AdminRole),
+                    permissions: zod_1.z.array(zod_1.z.string()).optional().nullable(),
+                }))
+                    .mutation(async ({ input, ctx }) => this.users.grantAdmin(input.userId, input.role, input.permissions ?? null, ctx.userId)),
+                revokeAdmin: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.USERS_GRANT_ADMIN)
+                    .input(zod_1.z.object({ userId: zod_1.z.string().uuid() }))
+                    .mutation(async ({ input, ctx }) => this.users.revokeAdmin(input.userId, ctx.userId)),
+                deleteUser: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.USERS_DELETE)
+                    .input(zod_1.z.object({ userId: zod_1.z.string().uuid(), anonymize: zod_1.z.boolean().optional().default(true) }))
+                    .mutation(async ({ input, ctx }) => this.users.deleteUser(input.userId, ctx.userId, input.anonymize)),
+                addNote: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.USERS_NOTES)
+                    .input(zod_1.z.object({ userId: zod_1.z.string().uuid(), body: zod_1.z.string().min(1).max(5000) }))
+                    .mutation(async ({ input, ctx }) => this.users.addUserNote(input.userId, input.body, ctx.userId)),
+            }),
+            workspaces: (0, trpc_init_1.router)({
+                list: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.WORKSPACES_READ)
+                    .input(cursorListSchema.extend({
+                    search: zod_1.z.string().max(200).optional(),
+                    suspended: zod_1.z.boolean().optional(),
+                }))
+                    .query(async ({ input }) => this.workspaces.listWorkspaces(input)),
+                get: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.WORKSPACES_READ)
+                    .input(zod_1.z.object({ workspaceId: zod_1.z.string().uuid() }))
+                    .query(async ({ input }) => this.workspaces.getWorkspace(input.workspaceId)),
+                suspend: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.WORKSPACES_SUSPEND)
+                    .input(zod_1.z.object({ workspaceId: zod_1.z.string().uuid(), reason: zod_1.z.string().max(1000).optional().nullable() }))
+                    .mutation(async ({ input, ctx }) => this.workspaces.suspendWorkspace(input.workspaceId, input.reason ?? null, ctx.userId)),
+                reactivate: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.WORKSPACES_SUSPEND)
+                    .input(zod_1.z.object({ workspaceId: zod_1.z.string().uuid() }))
+                    .mutation(async ({ input, ctx }) => this.workspaces.reactivateWorkspace(input.workspaceId, ctx.userId)),
+                overridePlan: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.WORKSPACES_PLAN)
+                    .input(zod_1.z.object({ workspaceId: zod_1.z.string().uuid(), planId: zod_1.z.string().min(1) }))
+                    .mutation(async ({ input, ctx }) => this.workspaces.overridePlan(input.workspaceId, input.planId, ctx.userId)),
+                setCredits: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.WORKSPACES_CREDITS)
+                    .input(zod_1.z.object({ workspaceId: zod_1.z.string().uuid(), credits: zod_1.z.number() }))
+                    .mutation(async ({ input, ctx }) => this.workspaces.setCredits(input.workspaceId, input.credits, ctx.userId)),
+                transferOwner: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.WORKSPACES_TRANSFER_OWNER)
+                    .input(zod_1.z.object({ workspaceId: zod_1.z.string().uuid(), newOwnerUserId: zod_1.z.string().uuid() }))
+                    .mutation(async ({ input, ctx }) => this.workspaces.transferOwner(input.workspaceId, input.newOwnerUserId, ctx.userId)),
+                addNote: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.WORKSPACES_NOTES)
+                    .input(zod_1.z.object({ workspaceId: zod_1.z.string().uuid(), body: zod_1.z.string().min(1).max(5000) }))
+                    .mutation(async ({ input, ctx }) => this.workspaces.addWorkspaceNote(input.workspaceId, input.body, ctx.userId)),
+            }),
+            billing: (0, trpc_init_1.router)({
+                listSubscriptions: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.BILLING_READ)
+                    .query(async () => this.billing.listSubscriptions()),
+                getWallet: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.BILLING_READ)
+                    .input(zod_1.z.object({ workspaceId: zod_1.z.string().uuid() }))
+                    .query(async ({ input }) => this.billing.getWallet(input.workspaceId)),
+                listWallets: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.BILLING_READ)
+                    .query(async () => this.billing.listWallets()),
+                listTransactions: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.BILLING_READ)
+                    .input(zod_1.z.object({ walletId: zod_1.z.string().uuid(), limit: zod_1.z.number().int().min(1).max(200).optional().default(50) }))
+                    .query(async ({ input }) => this.billing.listTransactions(input.walletId, input.limit)),
+                refund: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.BILLING_REFUND)
+                    .input(zod_1.z.object({
+                    workspaceId: zod_1.z.string().uuid(),
+                    amount: zod_1.z.number().positive(),
+                    reference: zod_1.z.string().min(1),
+                    description: zod_1.z.string().max(1000).optional().nullable(),
+                }))
+                    .mutation(async ({ input, ctx }) => this.billing.refund(input.workspaceId, input.amount, input.reference, input.description ?? null, ctx.userId)),
+                planOverride: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.BILLING_PLAN_OVERRIDE)
+                    .input(zod_1.z.object({ workspaceId: zod_1.z.string().uuid(), planId: zod_1.z.string().min(1) }))
+                    .mutation(async ({ input, ctx }) => this.billing.planOverride(input.workspaceId, input.planId, ctx.userId)),
+            }),
+            moderation: (0, trpc_init_1.router)({
+                listReports: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.MODERATION_READ)
+                    .input(cursorListSchema.extend({
+                    status: zod_1.z.string().optional(),
+                    category: zod_1.z.string().optional(),
+                    targetType: zod_1.z.string().optional(),
+                }))
+                    .query(async ({ input }) => this.moderation.listAbuseReports(input)),
+                getReport: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.MODERATION_READ)
+                    .input(zod_1.z.object({ reportId: zod_1.z.string().uuid() }))
+                    .query(async ({ input }) => this.moderation.getAbuseReport(input.reportId)),
+                resolve: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.MODERATION_RESOLVE)
+                    .input(zod_1.z.object({
+                    reportId: zod_1.z.string().uuid(),
+                    resolution: zod_1.z.string().min(1).max(2000),
+                    status: zod_1.z.string().optional(),
+                }))
+                    .mutation(async ({ input, ctx }) => this.moderation.resolveReport(input.reportId, input.resolution, ctx.userId, input.status)),
+                takedown: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.MODERATION_TAKEDOWN)
+                    .input(zod_1.z.object({ reportId: zod_1.z.string().uuid(), reason: zod_1.z.string().max(1000).optional() }))
+                    .mutation(async ({ input, ctx }) => this.moderation.takedown(input.reportId, ctx.userId, input.reason)),
+            }),
+            settings: (0, trpc_init_1.router)({
+                list: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.SETTINGS_READ)
+                    .query(async () => this.settings.listSettings()),
+                get: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.SETTINGS_READ)
+                    .input(zod_1.z.object({ key: zod_1.z.string().min(1) }))
+                    .query(async ({ input }) => this.settings.getSetting(input.key)),
+                upsert: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.SETTINGS_WRITE)
+                    .input(zod_1.z.object({
+                    key: zod_1.z.string().min(1),
+                    value: zod_1.z.unknown(),
+                    description: zod_1.z.string().max(1000).optional().nullable(),
+                    category: zod_1.z.string().min(1),
+                }))
+                    .mutation(async ({ input, ctx }) => this.settings.upsertSetting(input.key, input.value, input.description ?? null, input.category, ctx.userId)),
+                delete: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.SETTINGS_WRITE)
+                    .input(zod_1.z.object({ key: zod_1.z.string().min(1) }))
+                    .mutation(async ({ input, ctx }) => this.settings.deleteSetting(input.key, ctx.userId)),
+            }),
+            flags: (0, trpc_init_1.router)({
+                list: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.FLAGS_READ)
+                    .query(async () => this.settings.listFlags()),
+                isEnabled: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.FLAGS_READ)
+                    .input(zod_1.z.object({ key: zod_1.z.string().min(1), workspaceId: zod_1.z.string().uuid().optional() }))
+                    .query(async ({ input }) => this.settings.isFlagEnabled(input.key, input.workspaceId)),
+                upsert: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.FLAGS_WRITE)
+                    .input(zod_1.z.object({
+                    key: zod_1.z.string().min(1),
+                    enabled: zod_1.z.boolean(),
+                    rolloutPercentage: zod_1.z.number().int().min(0).max(100),
+                    allowlistWorkspaceIds: zod_1.z.array(zod_1.z.string().uuid()).optional().default([]),
+                    description: zod_1.z.string().max(1000).optional().nullable(),
+                }))
+                    .mutation(async ({ input, ctx }) => this.settings.upsertFlag(input.key, input.enabled, input.rolloutPercentage, input.allowlistWorkspaceIds, input.description ?? null, ctx.userId)),
+                delete: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.FLAGS_WRITE)
+                    .input(zod_1.z.object({ key: zod_1.z.string().min(1) }))
+                    .mutation(async ({ input, ctx }) => this.settings.deleteFlag(input.key, ctx.userId)),
+            }),
+            audit: (0, trpc_init_1.router)({
+                list: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.AUDIT_READ)
+                    .input(cursorListSchema.extend({
+                    action: zod_1.z.string().optional(),
+                    entityType: zod_1.z.string().optional(),
+                    userId: zod_1.z.string().uuid().optional(),
+                    workspaceId: zod_1.z.string().uuid().optional(),
+                    startDate: zod_1.z.string().optional(),
+                    endDate: zod_1.z.string().optional(),
+                    search: zod_1.z.string().max(200).optional(),
+                }))
+                    .query(async ({ input }) => this.audit.list(input)),
+                verify: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.AUDIT_READ)
+                    .query(async () => this.audit.verify()),
+                stats: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.AUDIT_READ)
+                    .query(async () => this.audit.stats()),
+                export: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.AUDIT_EXPORT)
+                    .input(zod_1.z.object({ startDate: zod_1.z.string().optional(), endDate: zod_1.z.string().optional() }))
+                    .query(async ({ input, ctx }) => this.audit.export(input, ctx.userId)),
+                getEntry: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.AUDIT_READ)
+                    .input(zod_1.z.object({ entryId: zod_1.z.string().uuid() }))
+                    .query(async ({ input }) => this.audit.getEntry(input.entryId)),
+            }),
+            comms: (0, trpc_init_1.router)({
+                list: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.ANNOUNCEMENTS_READ)
+                    .query(async () => this.comms.listAnnouncements()),
+                create: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.ANNOUNCEMENTS_WRITE)
+                    .input(zod_1.z.object({
+                    title: zod_1.z.string().min(1).max(200),
+                    body: zod_1.z.string().min(1).max(10_000),
+                    audience: zod_1.z.unknown(),
+                    severity: zod_1.z.string().min(1),
+                    status: zod_1.z.string().min(1),
+                    publishedAt: zod_1.z.string().datetime().optional().nullable(),
+                    expiresAt: zod_1.z.string().datetime().optional().nullable(),
+                }))
+                    .mutation(async ({ input, ctx }) => this.comms.createAnnouncement(input.title, input.body, input.audience, input.severity, input.status, input.publishedAt ? new Date(input.publishedAt) : null, input.expiresAt ? new Date(input.expiresAt) : null, ctx.userId)),
+                update: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.ANNOUNCEMENTS_WRITE)
+                    .input(zod_1.z.object({
+                    id: zod_1.z.string().uuid(),
+                    title: zod_1.z.string().min(1).max(200).optional(),
+                    body: zod_1.z.string().min(1).max(10_000).optional(),
+                    audience: zod_1.z.unknown().optional(),
+                    severity: zod_1.z.string().min(1).optional(),
+                    status: zod_1.z.string().min(1).optional(),
+                    publishedAt: zod_1.z.string().datetime().optional().nullable(),
+                    expiresAt: zod_1.z.string().datetime().optional().nullable(),
+                }))
+                    .mutation(async ({ input, ctx }) => {
+                    const { id, ...patch } = input;
+                    return this.comms.updateAnnouncement(id, patch, ctx.userId);
+                }),
+                archive: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.ANNOUNCEMENTS_WRITE)
+                    .input(zod_1.z.object({ id: zod_1.z.string().uuid() }))
+                    .mutation(async ({ input, ctx }) => this.comms.archiveAnnouncement(input.id, ctx.userId)),
+            }),
+            supervision: (0, trpc_init_1.router)({
+                run: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.SUPERVISION_RUN)
+                    .input(zod_1.z.object({ kind: zod_1.z.string().optional() }))
+                    .query(async ({ input, ctx }) => this.supervision.runSupervision(input.kind ?? "other", ctx.userId)),
+                listRuns: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.SUPERVISION_READ)
+                    .query(async () => this.supervision.listRuns()),
+                listFindings: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.SUPERVISION_READ)
+                    .input(zod_1.z.object({ runId: zod_1.z.string().uuid().optional(), status: zod_1.z.string().optional() }))
+                    .query(async ({ input }) => this.supervision.listFindings(input.runId, input.status)),
+                acknowledge: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.SUPERVISION_RUN)
+                    .input(zod_1.z.object({ findingId: zod_1.z.string().uuid(), assignedToId: zod_1.z.string().uuid().optional() }))
+                    .mutation(async ({ input, ctx }) => this.supervision.acknowledgeFinding(input.findingId, input.assignedToId ?? ctx.userId)),
+                resolve: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.SUPERVISION_RUN)
+                    .input(zod_1.z.object({ findingId: zod_1.z.string().uuid() }))
+                    .mutation(async ({ input }) => this.supervision.resolveFinding(input.findingId)),
+            }),
+            operations: (0, trpc_init_1.router)({
+                queueHealth: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.OPS_READ)
+                    .query(async () => this.operations.getQueueHealth()),
+                queueJobs: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.OPS_QUEUES)
+                    .input(zod_1.z.object({
+                    queue: zod_1.z.string(),
+                    type: zod_1.z.enum(["waiting", "active", "failed", "completed", "delayed"]),
+                    limit: zod_1.z.number().int().min(1).max(200).optional().default(50),
+                }))
+                    .query(async ({ input }) => this.operations.getQueueJobs(input.queue, input.type, input.limit)),
+                retryJob: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.OPS_RETRY_JOBS)
+                    .input(zod_1.z.object({ queue: zod_1.z.string(), jobId: zod_1.z.string() }))
+                    .mutation(async ({ input, ctx }) => this.operations.retryJob(input.queue, input.jobId, ctx.userId)),
+                purgeFailed: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.OPS_PURGE_JOBS)
+                    .input(zod_1.z.object({ queue: zod_1.z.string() }))
+                    .mutation(async ({ input, ctx }) => this.operations.purgeFailedJobs(input.queue, ctx.userId)),
+                getLocks: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.OPS_LOCKS)
+                    .input(zod_1.z.object({ pattern: zod_1.z.string().optional().default("lock:clip:*"), limit: zod_1.z.number().int().min(1).max(1000).optional().default(100) }))
+                    .query(async ({ input }) => this.operations.getLocks(input.pattern, input.limit)),
+                releaseLock: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.OPS_LOCKS)
+                    .input(zod_1.z.object({ key: zod_1.z.string() }))
+                    .mutation(async ({ input, ctx }) => this.operations.releaseLock(input.key, ctx.userId)),
+                systemHealth: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.OPS_HEALTH)
+                    .query(async () => this.operations.getSystemHealth()),
+                setMaintenanceMode: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.OPS_MAINTENANCE)
+                    .input(zod_1.z.object({ enabled: zod_1.z.boolean() }))
+                    .mutation(async ({ input, ctx }) => this.operations.setMaintenanceMode(input.enabled, ctx.userId)),
+                flushCache: (0, trpc_init_1.adminPermissionProcedure)(shared_types_1.AdminPermission.OPS_CACHE)
+                    .input(zod_1.z.object({ pattern: zod_1.z.string().optional().default("*") }))
+                    .mutation(async ({ input, ctx }) => this.operations.flushCache(input.pattern, ctx.userId)),
+            }),
+            me: trpc_init_1.adminProcedure
+                .query(async ({ ctx }) => {
+                const context = await this.adminAuth.getAdminContext(ctx.userId);
+                if (!context)
+                    return null;
+                return {
+                    userId: context.userId,
+                    isAdmin: context.isAdmin,
+                    role: context.role,
+                    permissions: [...context.permissions],
+                    suspended: context.suspended,
+                };
+            }),
+        });
+    }
+};
+exports.AdminRouter = AdminRouter;
+exports.AdminRouter = AdminRouter = AdminRouter_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [admin_realtime_service_1.AdminRealtimeService,
+        admin_clip_scorer_service_1.AdminClipScorerService,
+        admin_auth_service_1.AdminAuthService,
+        admin_users_service_1.AdminUsersService,
+        admin_workspaces_service_1.AdminWorkspacesService,
+        admin_billing_service_1.AdminBillingService,
+        admin_moderation_service_1.AdminModerationService,
+        admin_operations_service_1.AdminOperationsService,
+        admin_settings_service_1.AdminSettingsService,
+        admin_audit_service_1.AdminAuditService,
+        admin_comms_service_1.AdminCommsService,
+        admin_supervision_service_1.AdminSupervisionService])
+], AdminRouter);
+//# sourceMappingURL=admin.router.js.map

apps/api/dist/admin/admin.router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.router.js","sourceRoot":"","sources":["../../src/admin/admin.router.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AACpD,6BAAwB;AAExB,iDAI2B;AAC3B,4DAAuE;AACvE,qEAAgE;AAChE,2EAAqE;AACrE,6DAAwD;AACxD,+DAA0D;AAC1D,yEAAoE;AACpE,mEAA8D;AAC9D,yEAAoE;AACpE,yEAAoE;AACpE,qEAAgE;AAChE,+DAA0D;AAC1D,+DAA0D;AAC1D,2EAAsE;AAEtE,MAAM,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IAChC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACpC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC;AAGI,IAAM,WAAW,mBAAjB,MAAM,WAAW;IAIH;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IAdF,MAAM,GAAG,IAAI,eAAM,CAAC,aAAW,CAAC,IAAI,CAAC,CAAC;IAEvD,YACmB,QAA8B,EAC9B,UAAkC,EAClC,SAA2B,EAC3B,KAAwB,EACxB,UAAkC,EAClC,OAA4B,EAC5B,UAAkC,EAClC,UAAkC,EAClC,QAA8B,EAC9B,KAAwB,EACxB,KAAwB,EACxB,WAAoC;QAXpC,aAAQ,GAAR,QAAQ,CAAsB;QAC9B,eAAU,GAAV,UAAU,CAAwB;QAClC,cAAS,GAAT,SAAS,CAAkB;QAC3B,UAAK,GAAL,KAAK,CAAmB;QACxB,eAAU,GAAV,UAAU,CAAwB;QAClC,YAAO,GAAP,OAAO,CAAqB;QAC5B,eAAU,GAAV,UAAU,CAAwB;QAClC,eAAU,GAAV,UAAU,CAAwB;QAClC,aAAQ,GAAR,QAAQ,CAAsB;QAC9B,UAAK,GAAL,KAAK,CAAmB;QACxB,UAAK,GAAL,KAAK,CAAmB;QACxB,gBAAW,GAAX,WAAW,CAAyB;IACpD,CAAC;IAEJ,IAAI,MAAM;QACR,OAAO,IAAA,kBAAM,EAAC;YACZ,QAAQ,EAAE,IAAA,kBAAM,EAAC;gBACf,KAAK,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACrG,OAAO,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;gBACzG,MAAM,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,QAAQ,CAAC;qBACvD,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;qBACxE,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;aAC1E,CAAC;YAEF,UAAU,EAAE,IAAA,kBAAM,EAAC;gBACjB,KAAK,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;gBACxG,WAAW,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,SAAS,CAAC;qBAC7D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;qBACpC,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC7E,OAAO,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;aACrH,CAAC;YAEF,SAAS,EAAE,IAAA,kBAAM,EAAC;gBAChB,WAAW,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,QAAQ,CAAC;qBAC5D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;qBAC3D,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;oBACzB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;oBAC/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;oBAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;oBACxF,OAAO;wBACL,KAAK,EAAE;4BACL;gCACE,EAAE,EAAE,aAAa;gCACjB,IAAI,EAAE,aAAa;gCACnB,UAAU,EAAE,WAAW;gCACvB,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gCACxC,iBAAiB,EAAE,IAAI;gCACvB,YAAY,EAAE,KAAK;gCACnB,SAAS,EAAE,IAAI;gCACf,UAAU,EAAE,CAAC;gCACb,aAAa,EAAE,KAAK;gCACpB,UAAU,EAAE,EAAE;gCACd,aAAa,EAAE,MAAM;6BACtB;yBACF;qBACF,CAAC;gBACJ,CAAC,CAAC;gBAEJ,gBAAgB,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,QAAQ,CAAC;qBACjE,KAAK,CAAC,KAAK,IAAI,EAAE;oBAChB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;oBAC/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;oBAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;oBACxF,OAAO;wBACL,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;wBACxC,aAAa,EAAE,KAAK;wBACpB,aAAa,EAAE,KAAK;wBACpB,UAAU,EAAE,EAAE;wBACd,YAAY,EAAE,KAAK;wBACnB,UAAU,EAAE,CAAC;wBACb,WAAW,EAAE;4BACX,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;4BACxD,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;4BACrD,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;4BACtD,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;yBACvD;wBACD,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,OAAO,EAAE;4BACP,MAAM;4BACN,OAAO,EAAE,GAAG;4BACZ,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;yBAC9C;qBACF,CAAC;gBACJ,CAAC,CAAC;aACL,CAAC;YAKF,KAAK,EAAE,IAAA,kBAAM,EAAC;gBACZ,IAAI,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,UAAU,CAAC;qBACvD,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC;oBAC7B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;oBACtC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC3B,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;iBAClC,CAAC,CAAC;qBACF,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBAE1D,GAAG,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,UAAU,CAAC;qBACtD,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;qBAC9C,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAE/D,OAAO,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,aAAa,CAAC;qBAC7D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;qBAClG,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;gBAE5E,UAAU,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,aAAa,CAAC;qBAChE,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;qBAC9C,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;gBAEzD,cAAc,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,qBAAqB,CAAC;qBAC5E,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;qBAClF,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,MAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;gBAE5E,WAAW,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,iBAAiB,CAAC;qBACrE,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC;oBACd,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;oBACzB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;oBACvC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;iBACpE,CAAC,CAAC;qBACF,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,MAAO,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;gBAEtF,UAAU,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,iBAAiB,CAAC;qBACpE,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC;oBACd,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;oBACzB,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,wBAAS,CAAC;oBAC7B,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;iBACvD,CAAC,CAAC;qBACF,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;gBAE5F,WAAW,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,iBAAiB,CAAC;qBACrE,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;qBAC9C,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;gBAEtD,UAAU,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,YAAY,CAAC;qBAC/D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;qBAC/F,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,MAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;gBAEtE,OAAO,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,WAAW,CAAC;qBAC3D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;qBACjF,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;aACnE,CAAC;YAKF,UAAU,EAAE,IAAA,kBAAM,EAAC;gBACjB,IAAI,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,eAAe,CAAC;qBAC5D,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC;oBAC7B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;oBACtC,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;iBAClC,CAAC,CAAC;qBACF,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;gBAEpE,GAAG,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,eAAe,CAAC;qBAC3D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;qBACnD,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAE9E,OAAO,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,kBAAkB,CAAC;qBAClE,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;qBACvG,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;gBAE3F,UAAU,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,kBAAkB,CAAC;qBACrE,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;qBACnD,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;gBAExE,YAAY,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,eAAe,CAAC;qBACpE,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;qBAC9E,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;gBAE/E,UAAU,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,kBAAkB,CAAC;qBACrE,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;qBACxE,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;gBAE9E,aAAa,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,yBAAyB,CAAC;qBAC/E,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;qBACtF,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;gBAExF,OAAO,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,gBAAgB,CAAC;qBAChE,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;qBACtF,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;aAClF,CAAC;YAKF,OAAO,EAAE,IAAA,kBAAM,EAAC;gBACd,iBAAiB,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,YAAY,CAAC;qBACtE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;gBAEtD,SAAS,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,YAAY,CAAC;qBAC9D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;qBACnD,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAExE,WAAW,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,YAAY,CAAC;qBAChE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBAEhD,gBAAgB,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,YAAY,CAAC;qBACrE,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;qBAChH,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBAEzF,MAAM,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,cAAc,CAAC;qBAC7D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC;oBACd,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;oBAC9B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC7B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC5B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;iBACxD,CAAC,CAAC;qBACF,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;gBAElH,YAAY,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,qBAAqB,CAAC;qBAC1E,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;qBAC9E,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;aAC7E,CAAC;YAKF,UAAU,EAAE,IAAA,kBAAM,EAAC;gBACjB,WAAW,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,eAAe,CAAC;qBACnE,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC;oBAC7B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC7B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC/B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;iBAClC,CAAC,CAAC;qBACF,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBAEtE,SAAS,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,eAAe,CAAC;qBACjE,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;qBAChD,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAE7E,OAAO,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,kBAAkB,CAAC;qBAClE,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC;oBACd,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;oBAC3B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;oBACvC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;iBAC9B,CAAC,CAAC;qBACF,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,MAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAE/F,QAAQ,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,mBAAmB,CAAC;qBACpE,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;qBACzF,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;aACzE,CAAC;YAKF,QAAQ,EAAE,IAAA,kBAAM,EAAC;gBACf,IAAI,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,aAAa,CAAC;qBAC1D,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;gBAElD,GAAG,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,aAAa,CAAC;qBACzD,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;qBAC3C,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAElE,MAAM,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,cAAc,CAAC;qBAC7D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC;oBACd,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;oBACtB,KAAK,EAAE,OAAC,CAAC,OAAO,EAAE;oBAClB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;oBACvD,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;iBAC5B,CAAC,CAAC;qBACF,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;gBAEhH,MAAM,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,cAAc,CAAC;qBAC7D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;qBAC3C,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;aACzD,CAAC;YAEF,KAAK,EAAE,IAAA,kBAAM,EAAC;gBACZ,IAAI,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,UAAU,CAAC;qBACvD,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAE/C,SAAS,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,UAAU,CAAC;qBAC5D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;qBACtF,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;gBAExF,MAAM,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,WAAW,CAAC;qBAC1D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC;oBACd,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;oBACtB,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;oBACpB,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;oBACnD,qBAAqB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;oBACxE,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;iBACxD,CAAC,CAAC;qBACF,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,QAAQ,CAAC,UAAU,CACtB,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,qBAAqB,EAC9E,KAAK,CAAC,WAAW,IAAI,IAAI,EAAE,GAAG,CAAC,MAAO,CACvC,CAAC;gBAEN,MAAM,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,WAAW,CAAC;qBAC1D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;qBAC3C,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;aACtD,CAAC;YAKF,KAAK,EAAE,IAAA,kBAAM,EAAC;gBACZ,IAAI,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,UAAU,CAAC;qBACvD,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC;oBAC7B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC7B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBACjC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;oBACpC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;oBACzC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAChC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC9B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;iBACvC,CAAC,CAAC;qBACF,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAErD,MAAM,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,UAAU,CAAC;qBACzD,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAEzC,KAAK,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,UAAU,CAAC;qBACxD,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAExC,MAAM,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,YAAY,CAAC;qBAC3D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;qBACrF,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;gBAE1C,QAAQ,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,UAAU,CAAC;qBAC3D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;qBAC/C,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;aAClE,CAAC;YAKF,KAAK,EAAE,IAAA,kBAAM,EAAC;gBACZ,IAAI,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,kBAAkB,CAAC;qBAC/D,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBAEpD,MAAM,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,mBAAmB,CAAC;qBAClE,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC;oBACd,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;oBACjC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;oBACnC,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE;oBACrB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC3B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;oBACzB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;oBACxD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;iBACvD,CAAC,CAAC;qBACF,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAC3B,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EACrE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EACtD,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,MAAO,CAChE,CAAC;gBAEN,MAAM,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,mBAAmB,CAAC;qBAClE,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC;oBACd,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;oBACrB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;oBAC5C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;oBAC9C,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;oBAChC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;oBACtC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;oBACpC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;oBACxD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;iBACvD,CAAC,CAAC;qBACF,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;oBACjC,MAAM,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,KAAK,CAAC;oBAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,EAAE,KAAY,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;gBACtE,CAAC,CAAC;gBAEJ,OAAO,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,mBAAmB,CAAC;qBACnE,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;qBAC1C,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;aAC3D,CAAC;YAKF,WAAW,EAAE,IAAA,kBAAM,EAAC;gBAClB,GAAG,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,eAAe,CAAC;qBAC3D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;qBAChD,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAG9B,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,IAAI,OAAO,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;gBAExE,QAAQ,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,gBAAgB,CAAC;qBACjE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;gBAEjD,YAAY,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,gBAAgB,CAAC;qBACrE,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;qBACvF,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAIvF,WAAW,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,eAAe,CAAC;qBACnE,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;qBAC7F,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,YAAY,IAAI,GAAG,CAAC,MAAO,CAAC,CAAC;gBAE5F,OAAO,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,eAAe,CAAC;qBAC/D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;qBACjD,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAC5B,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;aACtD,CAAC;YAKF,UAAU,EAAE,IAAA,kBAAM,EAAC;gBACjB,WAAW,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,QAAQ,CAAC;qBAC5D,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;gBAEtD,SAAS,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,UAAU,CAAC;qBAC5D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC;oBACd,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;oBACjB,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;oBACrE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;iBAC/D,CAAC,CAAC;qBACF,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBAEjG,QAAQ,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,cAAc,CAAC;qBAC/D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;qBACzD,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;gBAEpE,WAAW,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,cAAc,CAAC;qBAClE,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;qBACtC,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;gBAE9D,QAAQ,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,SAAS,CAAC;qBAC1D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;qBAC5I,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBAEnF,WAAW,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,SAAS,CAAC;qBAC7D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;qBACpC,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;gBAExD,YAAY,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,UAAU,CAAC;qBAC/D,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC;gBAEvD,kBAAkB,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,eAAe,CAAC;qBAC1E,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;qBACzC,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;gBAEnE,UAAU,EAAE,IAAA,oCAAwB,EAAC,8BAAe,CAAC,SAAS,CAAC;qBAC5D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;qBAChE,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;aAC5D,CAAC;YASF,EAAE,EAAE,0BAAc;iBACf,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,MAAO,CAAC,CAAC;gBAClE,IAAI,CAAC,OAAO;oBAAE,OAAO,IAAI,CAAC;gBAC1B,OAAO;oBACL,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,WAAW,EAAE,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;oBACrC,SAAS,EAAE,OAAO,CAAC,SAAS;iBAC7B,CAAC;YACJ,CAAC,CAAC;SACL,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAnfY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;qCAKkB,6CAAoB;QAClB,kDAAsB;QACvB,qCAAgB;QACpB,uCAAiB;QACZ,iDAAsB;QACzB,2CAAmB;QAChB,iDAAsB;QACtB,iDAAsB;QACxB,6CAAoB;QACvB,uCAAiB;QACjB,uCAAiB;QACX,mDAAuB;GAf5C,WAAW,CAmfvB"}

apps/api/dist/ai/ai.module.js

@@ -0,0 +1,29 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AIModule = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const prisma_module_1 = require("../prisma/prisma.module");
+const billing_module_1 = require("../billing/billing.module");
+const ai_service_1 = require("./ai.service");
+let AIModule = class AIModule {
+};
+exports.AIModule = AIModule;
+exports.AIModule = AIModule = __decorate([
+    (0, common_1.Module)({
+        imports: [
+            prisma_module_1.PrismaModule,
+            config_1.ConfigModule,
+            billing_module_1.BillingModule,
+        ],
+        providers: [ai_service_1.AIService],
+        exports: [ai_service_1.AIService],
+    })
+], AIModule);
+//# sourceMappingURL=ai.module.js.map

apps/api/dist/ai/ai.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai.module.js","sourceRoot":"","sources":["../../src/ai/ai.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,2CAA8C;AAE9C,2DAAuD;AACvD,8DAA0D;AAC1D,6CAAyC;AAWlC,IAAM,QAAQ,GAAd,MAAM,QAAQ;CAAG,CAAA;AAAX,4BAAQ;mBAAR,QAAQ;IATpB,IAAA,eAAM,EAAC;QACJ,OAAO,EAAE;YACL,4BAAY;YACZ,qBAAY;YACZ,8BAAa;SAChB;QACD,SAAS,EAAE,CAAC,sBAAS,CAAC;QACtB,OAAO,EAAE,CAAC,sBAAS,CAAC;KACvB,CAAC;GACW,QAAQ,CAAG"}

apps/api/dist/ai/ai.service.js

@@ -0,0 +1,202 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var AIService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AIService = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const prisma_service_1 = require("../prisma/prisma.service");
+const subscription_credentials_service_1 = require("../billing/subscription-credentials.service");
+let AIService = AIService_1 = class AIService {
+    configService;
+    prisma;
+    credentialsService;
+    logger = new common_1.Logger(AIService_1.name);
+    constructor(configService, prisma, credentialsService) {
+        this.configService = configService;
+        this.prisma = prisma;
+        this.credentialsService = credentialsService;
+    }
+    async resolveApiKeyAndUrl(workspaceId, provider) {
+        let resolvedKey = null;
+        let resolvedUrl = null;
+        try {
+            const resolved = await this.credentialsService.resolveCredentials(workspaceId, provider);
+            resolvedKey = resolved.apiKey || resolved.accessToken;
+            resolvedUrl = resolved.endpointUrl;
+        }
+        catch (error) {
+            if (error instanceof common_1.ForbiddenException) {
+                throw error;
+            }
+            this.logger.debug(`Workspace/Platform DB credentials not resolved for ${provider}: ${error instanceof Error ? error.message : String(error)}. Attempting env fallback.`);
+        }
+        if (!resolvedKey) {
+            if (provider === "nvidia_nim") {
+                resolvedKey = this.configService.get("NVIDIA_NIM_API_KEY") || null;
+                resolvedUrl = resolvedUrl || "https://integrate.api.nvidia.com/v1";
+            }
+            else if (provider === "deepseek") {
+                resolvedKey = this.configService.get("DEEPSEEK_API_KEY") || null;
+                resolvedUrl = resolvedUrl || "https://api.deepseek.com/v1";
+            }
+            else if (provider === "moonshot") {
+                resolvedKey = this.configService.get("MOONSHOT_API_KEY") || null;
+                resolvedUrl = resolvedUrl || "https://api.moonshot.cn/v1";
+            }
+        }
+        if (!resolvedKey) {
+            throw new common_1.BadRequestException(`API key for provider "${provider}" is not configured in the workspace or system environment.`);
+        }
+        return {
+            apiKey: resolvedKey,
+            endpointUrl: resolvedUrl || "",
+        };
+    }
+    async generateText(workspaceId, prompt, options = {}) {
+        const provider = options.provider || "nvidia_nim";
+        const { apiKey, endpointUrl } = await this.resolveApiKeyAndUrl(workspaceId, provider);
+        let defaultModel = "meta/llama-3.1-405b-instruct";
+        let defaultUrl = "https://integrate.api.nvidia.com/v1/chat/completions";
+        if (provider === "deepseek") {
+            defaultModel = "deepseek-chat";
+            defaultUrl = "https://api.deepseek.com/v1/chat/completions";
+        }
+        else if (provider === "moonshot") {
+            defaultModel = "moonshot-v1-8k";
+            defaultUrl = "https://api.moonshot.cn/v1/chat/completions";
+        }
+        const model = options.model || defaultModel;
+        const targetUrl = endpointUrl
+            ? `${endpointUrl.replace(/\/$/, "")}/chat/completions`
+            : defaultUrl;
+        const messages = [];
+        if (options.systemPrompt) {
+            messages.push({ role: "system", content: options.systemPrompt });
+        }
+        messages.push({ role: "user", content: prompt });
+        this.logger.log(`Calling text completion on provider ${provider} using model ${model}`);
+        try {
+            const response = await fetch(targetUrl, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                    "Authorization": `Bearer ${apiKey}`,
+                },
+                body: JSON.stringify({
+                    model,
+                    messages,
+                    temperature: options.temperature ?? 0.7,
+                    max_tokens: options.maxTokens ?? 1024,
+                }),
+            });
+            if (!response.ok) {
+                const errorBody = await response.text();
+                throw new Error(`HTTP Error ${response.status}: ${errorBody}`);
+            }
+            const data = await response.json();
+            const content = data.choices?.[0]?.message?.content;
+            if (content === undefined) {
+                throw new Error("Invalid response format from AI provider");
+            }
+            return content;
+        }
+        catch (error) {
+            this.logger.error(`AI Completion failed for provider ${provider}: ${error instanceof Error ? error.message : String(error)}`);
+            throw new common_1.BadRequestException(`AI Text generation failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    async transcribeAudio(workspaceId, audioFileBuffer, fileName, options = {}) {
+        const provider = "nvidia_nim";
+        const { apiKey, endpointUrl } = await this.resolveApiKeyAndUrl(workspaceId, provider);
+        const model = options.model || "nvidia/canary-1b";
+        const defaultUrl = "https://integrate.api.nvidia.com/v1/audio/transcriptions";
+        const targetUrl = endpointUrl
+            ? `${endpointUrl.replace(/\/$/, "")}/audio/transcriptions`
+            : defaultUrl;
+        this.logger.log(`Calling NVIDIA NIM transcription with model ${model} for file ${fileName}`);
+        try {
+            const formData = new FormData();
+            const blob = new Blob([new Uint8Array(audioFileBuffer)], { type: "audio/wav" });
+            formData.append("file", blob, fileName);
+            formData.append("model", model);
+            if (options.language) {
+                formData.append("language", options.language);
+            }
+            const response = await fetch(targetUrl, {
+                method: "POST",
+                headers: {
+                    "Authorization": `Bearer ${apiKey}`,
+                },
+                body: formData,
+            });
+            if (!response.ok) {
+                const errorBody = await response.text();
+                throw new Error(`HTTP Error ${response.status}: ${errorBody}`);
+            }
+            const data = await response.json();
+            return {
+                text: data.text,
+                language: data.language || options.language || "en",
+                duration: data.duration,
+                segments: data.segments,
+            };
+        }
+        catch (error) {
+            this.logger.error(`NVIDIA NIM Audio Transcription failed: ${error instanceof Error ? error.message : String(error)}`);
+            throw new common_1.BadRequestException(`NVIDIA NIM transcription failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    async synthesizeSpeech(workspaceId, text, options = {}) {
+        const provider = "nvidia_nim";
+        const { apiKey, endpointUrl } = await this.resolveApiKeyAndUrl(workspaceId, provider);
+        const model = options.model || "nvidia/riva-tts";
+        const defaultUrl = "https://integrate.api.nvidia.com/v1/audio/speech";
+        const targetUrl = endpointUrl
+            ? `${endpointUrl.replace(/\/$/, "")}/audio/speech`
+            : defaultUrl;
+        this.logger.log(`Calling NVIDIA NIM voice synthesis with model ${model}`);
+        try {
+            const response = await fetch(targetUrl, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                    "Authorization": `Bearer ${apiKey}`,
+                    "Accept": "audio/wav",
+                },
+                body: JSON.stringify({
+                    model,
+                    input: text,
+                    voice: options.voice || "en-US-Female-1",
+                    response_format: "wav",
+                }),
+            });
+            if (!response.ok) {
+                const errorBody = await response.text();
+                throw new Error(`HTTP Error ${response.status}: ${errorBody}`);
+            }
+            const arrayBuffer = await response.arrayBuffer();
+            return Buffer.from(arrayBuffer);
+        }
+        catch (error) {
+            this.logger.error(`NVIDIA NIM Text-to-Speech failed: ${error instanceof Error ? error.message : String(error)}`);
+            throw new common_1.BadRequestException(`NVIDIA NIM Text-to-Speech failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+};
+exports.AIService = AIService;
+exports.AIService = AIService = AIService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [config_1.ConfigService,
+        prisma_service_1.PrismaService,
+        subscription_credentials_service_1.SubscriptionCredentialsService])
+], AIService);
+//# sourceMappingURL=ai.service.js.map

apps/api/dist/ai/ai.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai.service.js","sourceRoot":"","sources":["../../src/ai/ai.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAA6F;AAC7F,2CAA+C;AAC/C,6DAAyD;AACzD,kGAA6F;AAqBtF,IAAM,SAAS,iBAAf,MAAM,SAAS;IAIG;IACA;IACA;IALJ,MAAM,GAAG,IAAI,eAAM,CAAC,WAAS,CAAC,IAAI,CAAC,CAAC;IAErD,YACqB,aAA4B,EAC5B,MAAqB,EACrB,kBAAkD;QAFlD,kBAAa,GAAb,aAAa,CAAe;QAC5B,WAAM,GAAN,MAAM,CAAe;QACrB,uBAAkB,GAAlB,kBAAkB,CAAgC;IACpE,CAAC;IAMI,KAAK,CAAC,mBAAmB,CAC7B,WAAmB,EACnB,QAAgD;QAEhD,IAAI,WAAW,GAAkB,IAAI,CAAC;QACtC,IAAI,WAAW,GAAkB,IAAI,CAAC;QAGtC,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YACzF,WAAW,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,WAAW,CAAC;YACtD,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEb,IAAI,KAAK,YAAY,2BAAkB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YAChB,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,sDAAsD,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CACxJ,CAAC;QACN,CAAC;QAGD,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;gBAC5B,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,oBAAoB,CAAC,IAAI,IAAI,CAAC;gBAC3E,WAAW,GAAG,WAAW,IAAI,qCAAqC,CAAC;YACvE,CAAC;iBAAM,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACjC,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,kBAAkB,CAAC,IAAI,IAAI,CAAC;gBACzE,WAAW,GAAG,WAAW,IAAI,6BAA6B,CAAC;YAC/D,CAAC;iBAAM,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACjC,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,kBAAkB,CAAC,IAAI,IAAI,CAAC;gBACzE,WAAW,GAAG,WAAW,IAAI,4BAA4B,CAAC;YAC9D,CAAC;QACL,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,IAAI,4BAAmB,CACzB,yBAAyB,QAAQ,6DAA6D,CACjG,CAAC;QACN,CAAC;QAED,OAAO;YACH,MAAM,EAAE,WAAW;YACnB,WAAW,EAAE,WAAW,IAAI,EAAE;SACjC,CAAC;IACN,CAAC;IAKD,KAAK,CAAC,YAAY,CACd,WAAmB,EACnB,MAAc,EACd,UAAsC,EAAE;QAExC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,YAAY,CAAC;QAClD,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAEtF,IAAI,YAAY,GAAG,8BAA8B,CAAC;QAClD,IAAI,UAAU,GAAG,sDAAsD,CAAC;QAExE,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC1B,YAAY,GAAG,eAAe,CAAC;YAC/B,UAAU,GAAG,8CAA8C,CAAC;QAChE,CAAC;aAAM,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YACjC,YAAY,GAAG,gBAAgB,CAAC;YAChC,UAAU,GAAG,6CAA6C,CAAC;QAC/D,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,CAAC;QAC5C,MAAM,SAAS,GAAG,WAAW;YACzB,CAAC,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB;YACtD,CAAC,CAAC,UAAU,CAAC;QAEjB,MAAM,QAAQ,GAA6C,EAAE,CAAC;QAC9D,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAEjD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,uCAAuC,QAAQ,gBAAgB,KAAK,EAAE,CAAC,CAAC;QAExF,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;gBACpC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACL,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,MAAM,EAAE;iBACtC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACjB,KAAK;oBACL,QAAQ;oBACR,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,GAAG;oBACvC,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;iBACxC,CAAC;aACL,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,cAAc,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC,CAAC;YACnE,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAE/B,CAAC;YAEF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC;YACpD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAChE,CAAC;YAED,OAAO,OAAO,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9H,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1H,CAAC;IACL,CAAC;IAKD,KAAK,CAAC,eAAe,CACjB,WAAmB,EACnB,eAAuB,EACvB,QAAgB,EAChB,UAAmC,EAAE;QAErC,MAAM,QAAQ,GAAG,YAAY,CAAC;QAC9B,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAEtF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,kBAAkB,CAAC;QAClD,MAAM,UAAU,GAAG,0DAA0D,CAAC;QAC9E,MAAM,SAAS,GAAG,WAAW;YACzB,CAAC,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB;YAC1D,CAAC,CAAC,UAAU,CAAC;QAEjB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,+CAA+C,KAAK,aAAa,QAAQ,EAAE,CAAC,CAAC;QAE7F,IAAI,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAChF,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YACxC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAChC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACnB,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAClD,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;gBACpC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACL,eAAe,EAAE,UAAU,MAAM,EAAE;iBACtC;gBACD,IAAI,EAAE,QAAQ;aACjB,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,cAAc,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC,CAAC;YACnE,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAK/B,CAAC;YAEF,OAAO;gBACH,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAI;gBACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;aAC1B,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACtH,MAAM,IAAI,4BAAmB,CAAC,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChI,CAAC;IACL,CAAC;IAKD,KAAK,CAAC,gBAAgB,CAClB,WAAmB,EACnB,IAAY,EACZ,UAAqC,EAAE;QAEvC,MAAM,QAAQ,GAAG,YAAY,CAAC;QAC9B,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAEtF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,iBAAiB,CAAC;QACjD,MAAM,UAAU,GAAG,kDAAkD,CAAC;QACtE,MAAM,SAAS,GAAG,WAAW;YACzB,CAAC,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe;YAClD,CAAC,CAAC,UAAU,CAAC;QAEjB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iDAAiD,KAAK,EAAE,CAAC,CAAC;QAE1E,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;gBACpC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACL,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,MAAM,EAAE;oBACnC,QAAQ,EAAE,WAAW;iBACxB;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACjB,KAAK;oBACL,KAAK,EAAE,IAAI;oBACX,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,gBAAgB;oBACxC,eAAe,EAAE,KAAK;iBACzB,CAAC;aACL,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,cAAc,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC,CAAC;YACnE,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;YACjD,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjH,MAAM,IAAI,4BAAmB,CAAC,qCAAqC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjI,CAAC;IACL,CAAC;CACJ,CAAA;AAlPY,8BAAS;oBAAT,SAAS;IADrB,IAAA,mBAAU,GAAE;qCAK2B,sBAAa;QACpB,8BAAa;QACD,iEAA8B;GAN9D,SAAS,CAkPrB"}

apps/api/dist/analytics/analytics.controller.js

@@ -0,0 +1,123 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AnalyticsController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const analytics_service_1 = require("./analytics.service");
+const better_auth_guard_1 = require("../auth/better-auth.guard");
+const subscription_guard_1 = require("../billing/subscription.guard");
+const subscription_features_1 = require("../billing/subscription-features");
+let AnalyticsController = class AnalyticsController {
+    analyticsService;
+    constructor(analyticsService) {
+        this.analyticsService = analyticsService;
+    }
+    async getDashboardMetrics(podcastId, req) {
+        return this.analyticsService.getDashboardMetrics(podcastId, req.userId);
+    }
+    async getPipeline(podcastId, req) {
+        return this.analyticsService.getGuestPipeline(podcastId, req.userId);
+    }
+    async getOutreachMetrics(podcastId, req) {
+        return this.analyticsService.getOutreachMetrics(podcastId, req.userId);
+    }
+    async getSchedulingMetrics(podcastId, daysBack, req) {
+        return this.analyticsService.getSchedulingMetrics(podcastId, req.userId, daysBack ? parseInt(daysBack, 10) : 90);
+    }
+    async getActivity(podcastId, limit, req) {
+        return this.analyticsService.getRecentActivity(podcastId, req.userId, limit ? parseInt(limit, 10) : 20);
+    }
+};
+exports.AnalyticsController = AnalyticsController;
+__decorate([
+    (0, common_1.Get)("dashboard"),
+    (0, swagger_1.ApiOperation)({
+        summary: "Dashboard metrics",
+        description: "Get key metrics for the podcast dashboard",
+    }),
+    (0, swagger_1.ApiParam)({ name: "podcastId", description: "Podcast ID" }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: "Dashboard metrics retrieved" }),
+    __param(0, (0, common_1.Param)("podcastId")),
+    __param(1, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], AnalyticsController.prototype, "getDashboardMetrics", null);
+__decorate([
+    (0, common_1.Get)("pipeline"),
+    (0, swagger_1.ApiOperation)({
+        summary: "Guest pipeline",
+        description: "Get guest counts by status with priority scores",
+    }),
+    (0, swagger_1.ApiParam)({ name: "podcastId", description: "Podcast ID" }),
+    __param(0, (0, common_1.Param)("podcastId")),
+    __param(1, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], AnalyticsController.prototype, "getPipeline", null);
+__decorate([
+    (0, common_1.Get)("outreach"),
+    (0, swagger_1.ApiOperation)({
+        summary: "Outreach metrics",
+        description: "Get email sequence performance metrics (Studio plan)",
+    }),
+    (0, swagger_1.ApiParam)({ name: "podcastId", description: "Podcast ID" }),
+    (0, subscription_guard_1.RequireFeature)(subscription_features_1.SubscriptionFeature.ADVANCED_ANALYTICS),
+    __param(0, (0, common_1.Param)("podcastId")),
+    __param(1, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], AnalyticsController.prototype, "getOutreachMetrics", null);
+__decorate([
+    (0, common_1.Get)("scheduling"),
+    (0, swagger_1.ApiOperation)({
+        summary: "Scheduling metrics",
+        description: "Get episode scheduling and conversion metrics (Studio plan)",
+    }),
+    (0, swagger_1.ApiParam)({ name: "podcastId", description: "Podcast ID" }),
+    (0, swagger_1.ApiQuery)({ name: "daysBack", type: Number, required: false, description: "Days to look back" }),
+    (0, subscription_guard_1.RequireFeature)(subscription_features_1.SubscriptionFeature.ADVANCED_ANALYTICS),
+    __param(0, (0, common_1.Param)("podcastId")),
+    __param(1, (0, common_1.Query)("daysBack")),
+    __param(2, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], AnalyticsController.prototype, "getSchedulingMetrics", null);
+__decorate([
+    (0, common_1.Get)("activity"),
+    (0, swagger_1.ApiOperation)({
+        summary: "Activity timeline",
+        description: "Get recent activity for the podcast",
+    }),
+    (0, swagger_1.ApiParam)({ name: "podcastId", description: "Podcast ID" }),
+    (0, swagger_1.ApiQuery)({ name: "limit", type: Number, required: false }),
+    __param(0, (0, common_1.Param)("podcastId")),
+    __param(1, (0, common_1.Query)("limit")),
+    __param(2, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], AnalyticsController.prototype, "getActivity", null);
+exports.AnalyticsController = AnalyticsController = __decorate([
+    (0, swagger_1.ApiTags)("Analytics"),
+    (0, swagger_1.ApiBearerAuth)("jwt"),
+    (0, common_1.UseGuards)(better_auth_guard_1.BetterAuthGuard, subscription_guard_1.SubscriptionGuard),
+    (0, common_1.Controller)("podcasts/:podcastId/analytics"),
+    __metadata("design:paramtypes", [analytics_service_1.AnalyticsService])
+], AnalyticsController);
+//# sourceMappingURL=analytics.controller.js.map

apps/api/dist/analytics/analytics.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.controller.js","sourceRoot":"","sources":["../../src/analytics/analytics.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA+E;AAC/E,6CAOyB;AAGzB,2DAAuD;AACvD,iEAA4D;AAC5D,sEAAkF;AAClF,4EAAuE;AAMhE,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IACC;IAA7B,YAA6B,gBAAkC;QAAlC,qBAAgB,GAAhB,gBAAgB,CAAkB;IAAG,CAAC;IAS7D,AAAN,KAAK,CAAC,mBAAmB,CACD,SAAiB,EAC9B,GAAiC;QAExC,OAAO,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5E,CAAC;IAQK,AAAN,KAAK,CAAC,WAAW,CACO,SAAiB,EAC9B,GAAiC;QAExC,OAAO,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACzE,CAAC;IASK,AAAN,KAAK,CAAC,kBAAkB,CACA,SAAiB,EAC9B,GAAiC;QAExC,OAAO,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3E,CAAC;IAUK,AAAN,KAAK,CAAC,oBAAoB,CACF,SAAiB,EAClB,QAAiB,EAC7B,GAAkC;QAEzC,OAAO,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAC7C,SAAS,EACT,GAAI,CAAC,MAAM,EACX,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CACzC,CAAC;IACN,CAAC;IASK,AAAN,KAAK,CAAC,WAAW,CACO,SAAiB,EACrB,KAAc,EACvB,GAAkC;QAEzC,OAAO,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAC1C,SAAS,EACT,GAAI,CAAC,MAAM,EACX,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CACnC,CAAC;IACN,CAAC;CACJ,CAAA;AAlFY,kDAAmB;AAUtB;IAPL,IAAA,YAAG,EAAC,WAAW,CAAC;IAChB,IAAA,sBAAY,EAAC;QACV,OAAO,EAAE,mBAAmB;QAC5B,WAAW,EAAE,2CAA2C;KAC3D,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;IAC1D,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;IAEpE,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;IAClB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;8DAGT;AAQK;IANL,IAAA,YAAG,EAAC,UAAU,CAAC;IACf,IAAA,sBAAY,EAAC;QACV,OAAO,EAAE,gBAAgB;QACzB,WAAW,EAAE,iDAAiD;KACjE,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;IAEtD,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;IAClB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;sDAGT;AASK;IAPL,IAAA,YAAG,EAAC,UAAU,CAAC;IACf,IAAA,sBAAY,EAAC;QACV,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EAAE,sDAAsD;KACtE,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;IAC1D,IAAA,mCAAc,EAAC,2CAAmB,CAAC,kBAAkB,CAAC;IAElD,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;IAClB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;6DAGT;AAUK;IARL,IAAA,YAAG,EAAC,YAAY,CAAC;IACjB,IAAA,sBAAY,EAAC;QACV,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EAAE,6DAA6D;KAC7E,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;IAC1D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC;IAC/F,IAAA,mCAAc,EAAC,2CAAmB,CAAC,kBAAkB,CAAC;IAElD,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;IAClB,WAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;IACjB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;+DAOT;AASK;IAPL,IAAA,YAAG,EAAC,UAAU,CAAC;IACf,IAAA,sBAAY,EAAC;QACV,OAAO,EAAE,mBAAmB;QAC5B,WAAW,EAAE,qCAAqC;KACrD,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;IAC1D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAEtD,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;IAClB,WAAA,IAAA,cAAK,EAAC,OAAO,CAAC,CAAA;IACd,WAAA,IAAA,YAAG,GAAE,CAAA;;;;sDAOT;8BAjFQ,mBAAmB;IAJ/B,IAAA,iBAAO,EAAC,WAAW,CAAC;IACpB,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,kBAAS,EAAC,mCAAe,EAAE,sCAAiB,CAAC;IAC7C,IAAA,mBAAU,EAAC,+BAA+B,CAAC;qCAEO,oCAAgB;GADtD,mBAAmB,CAkF/B"}

apps/api/dist/analytics/analytics.module.js

@@ -0,0 +1,24 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AnalyticsModule = void 0;
+const common_1 = require("@nestjs/common");
+const analytics_service_1 = require("./analytics.service");
+const analytics_controller_1 = require("./analytics.controller");
+const analytics_router_1 = require("./analytics.router");
+let AnalyticsModule = class AnalyticsModule {
+};
+exports.AnalyticsModule = AnalyticsModule;
+exports.AnalyticsModule = AnalyticsModule = __decorate([
+    (0, common_1.Module)({
+        providers: [analytics_service_1.AnalyticsService, analytics_router_1.AnalyticsRouter],
+        controllers: [analytics_controller_1.AnalyticsController],
+        exports: [analytics_service_1.AnalyticsService, analytics_router_1.AnalyticsRouter],
+    })
+], AnalyticsModule);
+//# sourceMappingURL=analytics.module.js.map

apps/api/dist/analytics/analytics.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.module.js","sourceRoot":"","sources":["../../src/analytics/analytics.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,2DAAuD;AACvD,iEAA6D;AAC7D,yDAAqD;AAO9C,IAAM,eAAe,GAArB,MAAM,eAAe;CAAG,CAAA;AAAlB,0CAAe;0BAAf,eAAe;IAL3B,IAAA,eAAM,EAAC;QACJ,SAAS,EAAE,CAAC,oCAAgB,EAAE,kCAAe,CAAC;QAC9C,WAAW,EAAE,CAAC,0CAAmB,CAAC;QAClC,OAAO,EAAE,CAAC,oCAAgB,EAAE,kCAAe,CAAC;KAC/C,CAAC;GACW,eAAe,CAAG"}

apps/api/dist/analytics/analytics.router.js

@@ -0,0 +1,64 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AnalyticsRouter = void 0;
+const common_1 = require("@nestjs/common");
+const zod_1 = require("zod");
+const trpc_init_1 = require("../trpc/trpc.init");
+const subscription_features_1 = require("../billing/subscription-features");
+const analytics_service_1 = require("./analytics.service");
+let AnalyticsRouter = class AnalyticsRouter {
+    analyticsService;
+    constructor(analyticsService) {
+        this.analyticsService = analyticsService;
+    }
+    get router() {
+        return (0, trpc_init_1.router)({
+            dashboard: trpc_init_1.workspaceProcedure
+                .input(zod_1.z.object({ podcastId: zod_1.z.string().uuid() }))
+                .query(async ({ input, ctx }) => {
+                return this.analyticsService.getDashboardMetrics(input.podcastId, ctx.userId);
+            }),
+            pipeline: trpc_init_1.workspaceProcedure
+                .input(zod_1.z.object({ podcastId: zod_1.z.string().uuid() }))
+                .query(async ({ input, ctx }) => {
+                return this.analyticsService.getGuestPipeline(input.podcastId, ctx.userId);
+            }),
+            outreach: (0, trpc_init_1.requireFeature)(subscription_features_1.SubscriptionFeature.ADVANCED_ANALYTICS)
+                .input(zod_1.z.object({ podcastId: zod_1.z.string().uuid() }))
+                .query(async ({ input, ctx }) => {
+                return this.analyticsService.getOutreachMetrics(input.podcastId, ctx.userId);
+            }),
+            scheduling: (0, trpc_init_1.requireFeature)(subscription_features_1.SubscriptionFeature.ADVANCED_ANALYTICS)
+                .input(zod_1.z.object({
+                podcastId: zod_1.z.string().uuid(),
+                daysBack: zod_1.z.number().int().min(7).max(365).default(90),
+            }))
+                .query(async ({ input, ctx }) => {
+                return this.analyticsService.getSchedulingMetrics(input.podcastId, ctx.userId, input.daysBack);
+            }),
+            recentActivity: trpc_init_1.workspaceProcedure
+                .input(zod_1.z.object({
+                podcastId: zod_1.z.string().uuid(),
+                limit: zod_1.z.number().int().min(1).max(100).default(20),
+            }))
+                .query(async ({ input, ctx }) => {
+                return this.analyticsService.getRecentActivity(input.podcastId, ctx.userId, input.limit);
+            }),
+        });
+    }
+};
+exports.AnalyticsRouter = AnalyticsRouter;
+exports.AnalyticsRouter = AnalyticsRouter = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [analytics_service_1.AnalyticsService])
+], AnalyticsRouter);
+//# sourceMappingURL=analytics.router.js.map

apps/api/dist/analytics/analytics.router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.router.js","sourceRoot":"","sources":["../../src/analytics/analytics.router.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,6BAAwB;AAExB,iDAA+E;AAC/E,4EAAuE;AACvE,2DAAuD;AAGhD,IAAM,eAAe,GAArB,MAAM,eAAe;IACG;IAA7B,YAA6B,gBAAkC;QAAlC,qBAAgB,GAAhB,gBAAgB,CAAkB;IAAI,CAAC;IAEpE,IAAI,MAAM;QACR,OAAO,IAAA,kBAAM,EAAC;YACZ,SAAS,EAAE,8BAAkB;iBAC1B,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;iBACjD,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC9B,OAAO,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;YACjF,CAAC,CAAC;YAEJ,QAAQ,EAAE,8BAAkB;iBACzB,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;iBACjD,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC9B,OAAO,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;YAC9E,CAAC,CAAC;YAGJ,QAAQ,EAAE,IAAA,0BAAc,EAAC,2CAAmB,CAAC,kBAAkB,CAAC;iBAC7D,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;iBACjD,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC9B,OAAO,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;YAChF,CAAC,CAAC;YAEJ,UAAU,EAAE,IAAA,0BAAc,EAAC,2CAAmB,CAAC,kBAAkB,CAAC;iBAC/D,KAAK,CACJ,OAAC,CAAC,MAAM,CAAC;gBACP,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;gBAC5B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;aACvD,CAAC,CACH;iBACA,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC9B,OAAO,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAC/C,KAAK,CAAC,SAAS,EACf,GAAG,CAAC,MAAO,EACX,KAAK,CAAC,QAAQ,CACf,CAAC;YACJ,CAAC,CAAC;YAEJ,cAAc,EAAE,8BAAkB;iBAC/B,KAAK,CACJ,OAAC,CAAC,MAAM,CAAC;gBACP,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;gBAC5B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;aACpD,CAAC,CACH;iBACA,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC9B,OAAO,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAC5C,KAAK,CAAC,SAAS,EACf,GAAG,CAAC,MAAO,EACX,KAAK,CAAC,KAAK,CACZ,CAAC;YACJ,CAAC,CAAC;SACL,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAvDY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;qCAEoC,oCAAgB;GADpD,eAAe,CAuD3B"}

apps/api/dist/analytics/analytics.service.js

@@ -0,0 +1,354 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var AnalyticsService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AnalyticsService = void 0;
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("../prisma/prisma.service");
+const authorization_service_1 = require("../common/authorization.service");
+let AnalyticsService = AnalyticsService_1 = class AnalyticsService {
+    prisma;
+    authorizationService;
+    logger = new common_1.Logger(AnalyticsService_1.name);
+    cache = new Map();
+    cacheTTL = 30_000;
+    constructor(prisma, authorizationService) {
+        this.prisma = prisma;
+        this.authorizationService = authorizationService;
+    }
+    getCached(key) {
+        const entry = this.cache.get(key);
+        if (entry && entry.expiresAt > Date.now())
+            return entry.data;
+        this.cache.delete(key);
+        return null;
+    }
+    setCache(key, data) {
+        this.cache.set(key, { data, expiresAt: Date.now() + this.cacheTTL });
+        if (this.cache.size > 100) {
+            const oldest = this.cache.keys().next().value;
+            if (oldest)
+                this.cache.delete(oldest);
+        }
+    }
+    async getDashboardMetrics(podcastId, userId) {
+        await this.authorizationService.checkPodcastAccess(podcastId, userId);
+        const cached = this.getCached(`dashboard:${podcastId}`);
+        if (cached)
+            return cached;
+        const [totalGuests, guestsByStatus, totalEpisodes, episodesByStatus, upcomingBookings, recentGuests, topPriorityGuests,] = await Promise.all([
+            this.prisma.guest.count({ where: { podcastId } }),
+            this.prisma.guest.groupBy({
+                by: ["status"],
+                where: { podcastId },
+                _count: { id: true },
+            }),
+            this.prisma.episode.count({ where: { podcastId } }),
+            this.prisma.episode.groupBy({
+                by: ["status"],
+                where: { podcastId },
+                _count: { id: true },
+            }),
+            this.prisma.booking.count({
+                where: {
+                    episode: { podcastId },
+                    startTime: { gte: new Date() },
+                },
+            }),
+            this.prisma.guest.findMany({
+                where: { podcastId },
+                orderBy: { createdAt: "desc" },
+                take: 5,
+                select: {
+                    id: true,
+                    fullName: true,
+                    email: true,
+                    company: true,
+                    status: true,
+                    priorityScore: true,
+                    createdAt: true,
+                },
+            }),
+            this.prisma.guest.findMany({
+                where: { podcastId, status: { in: ["prospect", "contacted"] } },
+                orderBy: { priorityScore: "desc" },
+                take: 5,
+                select: {
+                    id: true,
+                    fullName: true,
+                    company: true,
+                    title: true,
+                    priorityScore: true,
+                },
+            }),
+        ]);
+        const guestStatusMap = {};
+        for (const item of guestsByStatus) {
+            guestStatusMap[item.status] = item._count.id;
+        }
+        const episodeStatusMap = {};
+        for (const item of episodesByStatus) {
+            episodeStatusMap[item.status] = item._count.id;
+        }
+        const result = {
+            totalGuests,
+            guestsByStatus: guestStatusMap,
+            totalEpisodes,
+            episodesByStatus: episodeStatusMap,
+            upcomingBookings,
+            recentGuests,
+            topPriorityGuests,
+        };
+        this.setCache(`dashboard:${podcastId}`, result);
+        return result;
+    }
+    async getGuestPipeline(podcastId, userId) {
+        await this.authorizationService.checkPodcastAccess(podcastId, userId);
+        const cached = this.getCached(`pipeline:${podcastId}`);
+        if (cached)
+            return cached;
+        const pipeline = await this.prisma.guest.groupBy({
+            by: ["status"],
+            where: { podcastId },
+            _count: { id: true },
+            _avg: { priorityScore: true },
+        });
+        const result = pipeline.map((stage) => ({
+            status: stage.status,
+            count: stage._count.id,
+            avgScore: Math.round(stage._avg.priorityScore || 0),
+        }));
+        this.setCache(`pipeline:${podcastId}`, result);
+        return result;
+    }
+    async getOutreachMetrics(podcastId, userId) {
+        await this.authorizationService.checkPodcastAccess(podcastId, userId);
+        const cached = this.getCached(`outreach:${podcastId}`);
+        if (cached)
+            return cached;
+        const guests = await this.prisma.guest.findMany({
+            where: { podcastId },
+            select: { id: true },
+        });
+        const guestIds = guests.map((g) => g.id);
+        if (guestIds.length === 0) {
+            return {
+                totalSequences: 0,
+                activeSequences: 0,
+                totalMessagesSent: 0,
+                openRate: 0,
+                clickRate: 0,
+                replyRate: 0,
+            };
+        }
+        const [totalSequences, activeSequences, messageStats] = await Promise.all([
+            this.prisma.outreachSequence.count({
+                where: { guestId: { in: guestIds } },
+            }),
+            this.prisma.outreachSequence.count({
+                where: { guestId: { in: guestIds }, status: "active" },
+            }),
+            this.prisma.outreachMessage.aggregate({
+                where: { sequence: { guestId: { in: guestIds } } },
+                _count: { id: true, sentAt: true, openedAt: true, clickedAt: true },
+            }),
+        ]);
+        const sent = messageStats._count.sentAt;
+        const opened = messageStats._count.openedAt;
+        const clicked = messageStats._count.clickedAt;
+        const result = {
+            totalSequences,
+            activeSequences,
+            totalMessagesSent: sent,
+            openRate: sent > 0 ? Math.round((opened / sent) * 100) : 0,
+            clickRate: sent > 0 ? Math.round((clicked / sent) * 100) : 0,
+        };
+        this.setCache(`outreach:${podcastId}`, result);
+        return result;
+    }
+    async getSchedulingMetrics(podcastId, userId, daysBack = 90) {
+        await this.authorizationService.checkPodcastAccess(podcastId, userId);
+        const cacheKey = `scheduling:${podcastId}:${daysBack}`;
+        const cached = this.getCached(cacheKey);
+        if (cached)
+            return cached;
+        const since = new Date(Date.now() - daysBack * 24 * 60 * 60 * 1000);
+        const [scheduledCount, recordedCount, publishedCount, avgDuration] = await Promise.all([
+            this.prisma.episode.count({
+                where: {
+                    podcastId,
+                    status: "scheduled",
+                    createdAt: { gte: since },
+                },
+            }),
+            this.prisma.episode.count({
+                where: {
+                    podcastId,
+                    status: "recorded",
+                    createdAt: { gte: since },
+                },
+            }),
+            this.prisma.episode.count({
+                where: {
+                    podcastId,
+                    status: "published",
+                    createdAt: { gte: since },
+                },
+            }),
+            this.prisma.episode.aggregate({
+                where: { podcastId, durationMinutes: { not: null } },
+                _avg: { durationMinutes: true },
+            }),
+        ]);
+        const result = {
+            scheduledCount,
+            recordedCount,
+            publishedCount,
+            conversionRate: scheduledCount > 0
+                ? Math.round((recordedCount / scheduledCount) * 100)
+                : 0,
+            avgDurationMinutes: Math.round(avgDuration._avg.durationMinutes || 0),
+        };
+        this.setCache(cacheKey, result);
+        return result;
+    }
+    async getRecentActivity(podcastId, userId, limit = 20) {
+        await this.authorizationService.checkPodcastAccess(podcastId, userId);
+        const cacheKey = `recent:${podcastId}:${limit}`;
+        const cached = this.getCached(cacheKey);
+        if (cached)
+            return cached;
+        const [recentGuests, recentEpisodes, recentBookings, recentOutreach] = await Promise.all([
+            this.prisma.guest.findMany({
+                where: { podcastId },
+                orderBy: { createdAt: "desc" },
+                take: limit,
+                select: {
+                    id: true,
+                    fullName: true,
+                    status: true,
+                    createdAt: true,
+                    _count: {
+                        select: {
+                            outreachSequences: true,
+                        },
+                    },
+                },
+            }),
+            this.prisma.episode.findMany({
+                where: { podcastId },
+                orderBy: { createdAt: "desc" },
+                take: limit,
+                select: {
+                    id: true,
+                    title: true,
+                    status: true,
+                    scheduledAt: true,
+                    createdAt: true,
+                    guest: {
+                        select: {
+                            fullName: true,
+                        },
+                    },
+                },
+            }),
+            this.prisma.booking.findMany({
+                where: { episode: { podcastId } },
+                orderBy: { createdAt: "desc" },
+                take: limit,
+                select: {
+                    id: true,
+                    startTime: true,
+                    isConfirmed: true,
+                    createdAt: true,
+                    episode: {
+                        select: {
+                            title: true,
+                            guest: {
+                                select: {
+                                    fullName: true,
+                                },
+                            },
+                        },
+                    },
+                },
+            }),
+            this.prisma.outreachMessage.findMany({
+                where: { sequence: { guest: { podcastId } } },
+                orderBy: { sentAt: "desc" },
+                take: limit,
+                select: {
+                    id: true,
+                    type: true,
+                    sentAt: true,
+                    openedAt: true,
+                    sequence: {
+                        select: {
+                            guest: {
+                                select: {
+                                    fullName: true,
+                                },
+                            },
+                        },
+                    },
+                },
+            }),
+        ]);
+        const activities = [
+            ...recentGuests.map((g) => ({
+                type: "guest_added",
+                id: g.id,
+                title: `New guest: ${g.fullName}`,
+                status: g.status,
+                timestamp: g.createdAt,
+            })),
+            ...recentEpisodes.map((e) => ({
+                type: "episode_created",
+                id: e.id,
+                title: `Episode: ${e.title}`,
+                subtitle: `With ${e.guest.fullName}`,
+                status: e.status,
+                timestamp: e.createdAt,
+                scheduledAt: e.scheduledAt,
+            })),
+            ...recentBookings.map((b) => ({
+                type: "booking_created",
+                id: b.id,
+                title: `Booking: ${b.episode.title}`,
+                subtitle: `With ${b.episode.guest.fullName}`,
+                timestamp: b.createdAt,
+                startTime: b.startTime,
+                isConfirmed: b.isConfirmed,
+            })),
+            ...recentOutreach.map((o) => ({
+                type: "message_sent",
+                id: o.id,
+                title: `Email sent to ${o.sequence.guest.fullName}`,
+                subtitle: o.type,
+                timestamp: o.sentAt,
+                openedAt: o.openedAt,
+            })),
+        ];
+        const result = activities
+            .filter((a) => a.timestamp != null)
+            .sort((a, b) => b.timestamp.getTime() - a.timestamp.getTime())
+            .slice(0, limit);
+        this.setCache(cacheKey, result);
+        return result;
+    }
+};
+exports.AnalyticsService = AnalyticsService;
+exports.AnalyticsService = AnalyticsService = AnalyticsService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        authorization_service_1.AuthorizationService])
+], AnalyticsService);
+//# sourceMappingURL=analytics.service.js.map

apps/api/dist/analytics/analytics.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.service.js","sourceRoot":"","sources":["../../src/analytics/analytics.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AAEpD,6DAAyD;AACzD,2EAAuE;AAQhE,IAAM,gBAAgB,wBAAtB,MAAM,gBAAgB;IAMJ;IACA;IANJ,MAAM,GAAG,IAAI,eAAM,CAAC,kBAAgB,CAAC,IAAI,CAAC,CAAC;IAC3C,KAAK,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC/C,QAAQ,GAAG,MAAM,CAAC;IAEnC,YACqB,MAAqB,EACrB,oBAA0C;QAD1C,WAAM,GAAN,MAAM,CAAe;QACrB,yBAAoB,GAApB,oBAAoB,CAAsB;IAC5D,CAAC;IAEI,SAAS,CAAI,GAAW;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAA8B,CAAC;QAC/D,IAAI,KAAK,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC;QAC7D,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IAChB,CAAC;IAEO,QAAQ,CAAI,GAAW,EAAE,IAAO;QACpC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC9C,IAAI,MAAM;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;IACL,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,SAAiB,EAAE,MAAc;QACvD,MAAM,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAA0B,aAAa,SAAS,EAAE,CAAC,CAAC;QACjF,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,MAAM,CACF,WAAW,EACX,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EACpB,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;YAEjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;gBACtB,EAAE,EAAE,CAAC,QAAQ,CAAC;gBACd,KAAK,EAAE,EAAE,SAAS,EAAE;gBACpB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;aACvB,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;YAEnD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;gBACxB,EAAE,EAAE,CAAC,QAAQ,CAAC;gBACd,KAAK,EAAE,EAAE,SAAS,EAAE;gBACpB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;aACvB,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;gBACtB,KAAK,EAAE;oBACH,OAAO,EAAE,EAAE,SAAS,EAAE;oBACtB,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE;iBACjC;aACJ,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACvB,KAAK,EAAE,EAAE,SAAS,EAAE;gBACpB,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;gBAC9B,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE;oBACJ,EAAE,EAAE,IAAI;oBACR,QAAQ,EAAE,IAAI;oBACd,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,IAAI;oBACZ,aAAa,EAAE,IAAI;oBACnB,SAAS,EAAE,IAAI;iBAClB;aACJ,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACvB,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,EAAE;gBAC/D,OAAO,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE;gBAClC,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE;oBACJ,EAAE,EAAE,IAAI;oBACR,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE,IAAI;oBACb,KAAK,EAAE,IAAI;oBACX,aAAa,EAAE,IAAI;iBACtB;aACJ,CAAC;SACL,CAAC,CAAC;QAEH,MAAM,cAAc,GAA2B,EAAE,CAAC;QAClD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAChC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,CAAC;QAED,MAAM,gBAAgB,GAA2B,EAAE,CAAC;QACpD,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;YAClC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,CAAC;QAED,MAAM,MAAM,GAAG;YACX,WAAW;YACX,cAAc,EAAE,cAAc;YAC9B,aAAa;YACb,gBAAgB,EAAE,gBAAgB;YAClC,gBAAgB;YAChB,YAAY;YACZ,iBAAiB;SACpB,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,aAAa,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,SAAiB,EAAE,MAAc;QACpD,MAAM,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAmD,YAAY,SAAS,EAAE,CAAC,CAAC;QACzG,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;YAC7C,EAAE,EAAE,CAAC,QAAQ,CAAC;YACd,KAAK,EAAE,EAAE,SAAS,EAAE;YACpB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;YACpB,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;SAChC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;YACtB,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;SACtD,CAAC,CAAC,CAAC;QAEJ,IAAI,CAAC,QAAQ,CAAC,YAAY,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,SAAiB,EAAE,MAAc;QACtD,MAAM,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAA0B,YAAY,SAAS,EAAE,CAAC,CAAC;QAChF,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC5C,KAAK,EAAE,EAAE,SAAS,EAAE;YACpB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;SACvB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAEzC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO;gBACH,cAAc,EAAE,CAAC;gBACjB,eAAe,EAAE,CAAC;gBAClB,iBAAiB,EAAE,CAAC;gBACpB,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,CAAC;aACf,CAAC;QACN,CAAC;QAED,MAAM,CAAC,cAAc,EAAE,eAAe,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC;gBAC/B,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE;aACvC,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC;gBAC/B,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;aACzD,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC;gBAClC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;gBAClD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;aACtE,CAAC;SACL,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;QACxC,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC;QAE9C,MAAM,MAAM,GAAG;YACX,cAAc;YACd,eAAe;YACf,iBAAiB,EAAE,IAAI;YACvB,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,SAAS,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;SAC/D,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,YAAY,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,SAAiB,EAAE,MAAc,EAAE,WAAmB,EAAE;QAC/E,MAAM,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,cAAc,SAAS,IAAI,QAAQ,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAA0B,QAAQ,CAAC,CAAC;QACjE,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAEpE,MAAM,CAAC,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,CAAC,GAC9D,MAAM,OAAO,CAAC,GAAG,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;gBACtB,KAAK,EAAE;oBACH,SAAS;oBACT,MAAM,EAAE,WAAW;oBACnB,SAAS,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;iBAC5B;aACJ,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;gBACtB,KAAK,EAAE;oBACH,SAAS;oBACT,MAAM,EAAE,UAAU;oBAClB,SAAS,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;iBAC5B;aACJ,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;gBACtB,KAAK,EAAE;oBACH,SAAS;oBACT,MAAM,EAAE,WAAW;oBACnB,SAAS,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;iBAC5B;aACJ,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;gBAC1B,KAAK,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;gBACpD,IAAI,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;aAClC,CAAC;SACL,CAAC,CAAC;QAEP,MAAM,MAAM,GAAG;YACX,cAAc;YACd,aAAa;YACb,cAAc;YACd,cAAc,EACV,cAAc,GAAG,CAAC;gBACd,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,GAAG,cAAc,CAAC,GAAG,GAAG,CAAC;gBACpD,CAAC,CAAC,CAAC;YACX,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC;SACxE,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAiB,EAAE,MAAc,EAAE,QAAgB,EAAE;QACzE,MAAM,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,UAAU,SAAS,IAAI,KAAK,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAY,QAAQ,CAAC,CAAC;QACnD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,CAAC,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,CAAC,GAChE,MAAM,OAAO,CAAC,GAAG,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACvB,KAAK,EAAE,EAAE,SAAS,EAAE;gBACpB,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;gBAC9B,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE;oBACJ,EAAE,EAAE,IAAI;oBACR,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,IAAI;oBACZ,SAAS,EAAE,IAAI;oBACf,MAAM,EAAE;wBACJ,MAAM,EAAE;4BACJ,iBAAiB,EAAE,IAAI;yBAC1B;qBACJ;iBACJ;aACJ,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACzB,KAAK,EAAE,EAAE,SAAS,EAAE;gBACpB,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;gBAC9B,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE;oBACJ,EAAE,EAAE,IAAI;oBACR,KAAK,EAAE,IAAI;oBACX,MAAM,EAAE,IAAI;oBACZ,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE;wBACH,MAAM,EAAE;4BACJ,QAAQ,EAAE,IAAI;yBACjB;qBACJ;iBACJ;aACJ,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACzB,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE;gBACjC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;gBAC9B,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE;oBACJ,EAAE,EAAE,IAAI;oBACR,SAAS,EAAE,IAAI;oBACf,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE;wBACL,MAAM,EAAE;4BACJ,KAAK,EAAE,IAAI;4BACX,KAAK,EAAE;gCACH,MAAM,EAAE;oCACJ,QAAQ,EAAE,IAAI;iCACjB;6BACJ;yBACJ;qBACJ;iBACJ;aACJ,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC;gBACjC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;gBAC7C,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;gBAC3B,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE;oBACJ,EAAE,EAAE,IAAI;oBACR,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,IAAI;oBACZ,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE;wBACN,MAAM,EAAE;4BACJ,KAAK,EAAE;gCACH,MAAM,EAAE;oCACJ,QAAQ,EAAE,IAAI;iCACjB;6BACJ;yBACJ;qBACJ;iBACJ;aACJ,CAAC;SACL,CAAC,CAAC;QAGP,MAAM,UAAU,GAAG;YACf,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACxB,IAAI,EAAE,aAAsB;gBAC5B,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,KAAK,EAAE,cAAc,CAAC,CAAC,QAAQ,EAAE;gBACjC,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,SAAS,EAAE,CAAC,CAAC,SAAS;aACzB,CAAC,CAAC;YACH,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1B,IAAI,EAAE,iBAA0B;gBAChC,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,KAAK,EAAE,YAAY,CAAC,CAAC,KAAK,EAAE;gBAC5B,QAAQ,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE;gBACpC,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,WAAW,EAAE,CAAC,CAAC,WAAW;aAC7B,CAAC,CAAC;YACH,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1B,IAAI,EAAE,iBAA0B;gBAChC,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,KAAK,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE;gBACpC,QAAQ,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE;gBAC5C,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,WAAW,EAAE,CAAC,CAAC,WAAW;aAC7B,CAAC,CAAC;YACH,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1B,IAAI,EAAE,cAAuB;gBAC7B,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,KAAK,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE;gBACnD,QAAQ,EAAE,CAAC,CAAC,IAAI;gBAChB,SAAS,EAAE,CAAC,CAAC,MAAM;gBACnB,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACvB,CAAC,CAAC;SACN,CAAC;QAEF,MAAM,MAAM,GAAG,UAAU;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC;aAClC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,SAAU,CAAC,OAAO,EAAE,CAAC;aAC/D,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ,CAAA;AA1WY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;qCAOoB,8BAAa;QACC,4CAAoB;GAPtD,gBAAgB,CA0W5B"}

apps/api/dist/app.module.js

@@ -0,0 +1,209 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppModule = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const bullmq_1 = require("@nestjs/bullmq");
+const throttler_1 = require("@nestjs/throttler");
+const throttler_storage_redis_1 = require("@nest-lab/throttler-storage-redis");
+const core_1 = require("@nestjs/core");
+const ioredis_1 = __importDefault(require("ioredis"));
+const prisma_module_1 = require("./prisma/prisma.module");
+const common_module_1 = require("./common/common.module");
+const admin_module_1 = require("./admin/admin.module");
+const audit_module_1 = require("./audit/audit.module");
+const redis_module_1 = require("./redis/redis.module");
+const trpc_module_1 = require("./trpc/trpc.module");
+const auth_module_1 = require("./auth/auth.module");
+const guest_module_1 = require("./guest/guest.module");
+const outreach_module_1 = require("./outreach/outreach.module");
+const scheduling_module_1 = require("./scheduling/scheduling.module");
+const assets_module_1 = require("./assets/assets.module");
+const analytics_module_1 = require("./analytics/analytics.module");
+const content_studio_module_1 = require("./content-studio/content-studio.module");
+const websocket_module_1 = require("./websocket/websocket.module");
+const queue_module_1 = require("./queue/queue.module");
+const health_module_1 = require("./health/health.module");
+const workspace_module_1 = require("./workspace/workspace.module");
+const podcast_module_1 = require("./podcast/podcast.module");
+const cache_module_1 = require("./common/cache/cache.module");
+const rate_limit_module_1 = require("./common/rate-limit/rate-limit.module");
+const file_security_module_1 = require("./common/file-security/file-security.module");
+const events_module_1 = require("./events/events.module");
+const network_module_1 = require("./network/network.module");
+const recording_module_1 = require("./recording/recording.module");
+const users_module_1 = require("./users/users.module");
+const notifications_module_1 = require("./notifications/notifications.module");
+const portal_module_1 = require("./portal/portal.module");
+const diary_module_1 = require("./diary/diary.module");
+const billing_module_1 = require("./billing/billing.module");
+const wallet_module_1 = require("./wallet/wallet.module");
+const reconciliation_module_1 = require("./reconciliation/reconciliation.module");
+const settings_module_1 = require("./settings/settings.module");
+const integrations_module_1 = require("./integrations/integrations.module");
+const livekit_module_1 = require("./livekit/livekit.module");
+const ai_module_1 = require("./ai/ai.module");
+const crm_module_1 = require("./crm/crm.module");
+const chat_module_1 = require("./chat/chat.module");
+const tasks_module_1 = require("./tasks/tasks.module");
+const tracing_module_1 = require("./common/tracing/tracing.module");
+const workspace_verification_module_1 = require("./verification/workspace-verification.module");
+const outbound_webhook_module_1 = require("./webhooks/outbound-webhook.module");
+const env_validation_1 = require("./common/config/env.validation");
+let AppModule = class AppModule {
+};
+exports.AppModule = AppModule;
+exports.AppModule = AppModule = __decorate([
+    (0, common_1.Module)({
+        imports: [
+            common_module_1.CommonModule,
+            tracing_module_1.TracingModule,
+            config_1.ConfigModule.forRoot({
+                isGlobal: true,
+                envFilePath: [".env.local", ".env", "../../.env.local", "../../.env"],
+                cache: true,
+                validate: env_validation_1.validate,
+            }),
+            throttler_1.ThrottlerModule.forRootAsync({
+                inject: [config_1.ConfigService],
+                useFactory: (configService) => {
+                    const ttl = configService.get("RATE_LIMIT_TTL", 60);
+                    const limit = configService.get("RATE_LIMIT_MAX", 100);
+                    const redisUrl = configService.get("REDIS_URL");
+                    let redisConnection;
+                    if (redisUrl) {
+                        redisConnection = new ioredis_1.default(redisUrl, { maxRetriesPerRequest: null, enableReadyCheck: false });
+                    }
+                    else {
+                        redisConnection = new ioredis_1.default({
+                            host: configService.get("REDIS_HOST") || "localhost",
+                            port: parseInt(configService.get("REDIS_PORT") || "6379", 10),
+                            password: configService.get("REDIS_PASSWORD"),
+                            username: configService.get("REDIS_USERNAME"),
+                            maxRetriesPerRequest: null,
+                            enableReadyCheck: false,
+                        });
+                    }
+                    return {
+                        throttlers: [
+                            {
+                                name: "short",
+                                ttl: 1000,
+                                limit: 10,
+                            },
+                            {
+                                name: "medium",
+                                ttl: ttl * 1000,
+                                limit,
+                            },
+                            {
+                                name: "long",
+                                ttl: 3600000,
+                                limit: 1000,
+                            },
+                        ],
+                        storage: new throttler_storage_redis_1.ThrottlerStorageRedisService(redisConnection),
+                    };
+                },
+            }),
+            bullmq_1.BullModule.forRootAsync({
+                inject: [config_1.ConfigService],
+                useFactory: (configService) => {
+                    const redisUrl = configService.get("REDIS_URL");
+                    let connectionParams = {};
+                    if (redisUrl) {
+                        const parsedUrl = new URL(redisUrl);
+                        connectionParams = {
+                            host: parsedUrl.hostname,
+                            port: parseInt(parsedUrl.port || "6379", 10),
+                            username: parsedUrl.username ? decodeURIComponent(parsedUrl.username) : undefined,
+                            password: parsedUrl.password ? decodeURIComponent(parsedUrl.password) : undefined,
+                            tls: redisUrl.startsWith("rediss://") ? { rejectUnauthorized: false } : undefined,
+                        };
+                    }
+                    else {
+                        connectionParams = {
+                            host: configService.get("REDIS_HOST") || "localhost",
+                            port: parseInt(configService.get("REDIS_PORT") || "6379", 10),
+                            password: configService.get("REDIS_PASSWORD"),
+                            username: configService.get("REDIS_USERNAME"),
+                            tls: configService.get("REDIS_TLS") === "true" ? {} : undefined,
+                        };
+                    }
+                    return {
+                        connection: connectionParams,
+                        defaultJobOptions: {
+                            attempts: 3,
+                            backoff: {
+                                type: "exponential",
+                                delay: 1000,
+                            },
+                            removeOnComplete: {
+                                age: 86400,
+                                count: 100,
+                            },
+                            removeOnFail: {
+                                age: 604800,
+                            },
+                        },
+                    };
+                },
+            }),
+            admin_module_1.AdminModule,
+            audit_module_1.AuditModule,
+            cache_module_1.CacheModule,
+            health_module_1.HealthModule,
+            prisma_module_1.PrismaModule,
+            redis_module_1.RedisModule,
+            rate_limit_module_1.RateLimitModule,
+            file_security_module_1.FileSecurityModule,
+            events_module_1.EventsModule,
+            trpc_module_1.TrpcModule,
+            websocket_module_1.WebsocketModule,
+            outbound_webhook_module_1.OutboundWebhookModule,
+            queue_module_1.QueueModule,
+            auth_module_1.AuthModule,
+            workspace_module_1.WorkspaceModule,
+            workspace_verification_module_1.WorkspaceVerificationModule,
+            podcast_module_1.PodcastModule,
+            guest_module_1.GuestModule,
+            outreach_module_1.OutreachModule,
+            scheduling_module_1.SchedulingModule,
+            assets_module_1.AssetsModule,
+            analytics_module_1.AnalyticsModule,
+            content_studio_module_1.ContentStudioModule,
+            network_module_1.NetworkModule,
+            recording_module_1.RecordingModule,
+            users_module_1.UsersModule,
+            notifications_module_1.NotificationsModule,
+            portal_module_1.PortalModule,
+            diary_module_1.DiaryModule,
+            billing_module_1.BillingModule,
+            wallet_module_1.WalletModule,
+            reconciliation_module_1.ReconciliationModule,
+            settings_module_1.SettingsModule,
+            integrations_module_1.IntegrationsModule,
+            livekit_module_1.LivekitModule,
+            ai_module_1.AIModule,
+            crm_module_1.CrmModule,
+            chat_module_1.ChatModule,
+            tasks_module_1.TasksModule,
+        ],
+        providers: [
+            {
+                provide: core_1.APP_GUARD,
+                useClass: throttler_1.ThrottlerGuard,
+            },
+        ],
+    })
+], AppModule);
+//# sourceMappingURL=app.module.js.map

apps/api/dist/app.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.module.js","sourceRoot":"","sources":["../src/app.module.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAwC;AACxC,2CAA6D;AAC7D,2CAA4C;AAC5C,iDAA4F;AAC5F,+EAAiF;AACjF,uCAAyC;AACzC,sDAA4B;AAE5B,0DAAsD;AACtD,0DAAsD;AACtD,uDAAmD;AACnD,uDAAmD;AACnD,uDAAmD;AACnD,oDAAgD;AAChD,oDAAgD;AAChD,uDAAmD;AACnD,gEAA4D;AAC5D,sEAAkE;AAClE,0DAAsD;AACtD,mEAA+D;AAC/D,kFAA6E;AAC7E,mEAA+D;AAC/D,uDAAmD;AACnD,0DAAsD;AACtD,mEAA+D;AAC/D,6DAAyD;AACzD,8DAA0D;AAC1D,6EAAwE;AACxE,sFAAiF;AACjF,0DAAsD;AACtD,6DAAyD;AACzD,mEAA+D;AAC/D,uDAAmD;AACnD,+EAA2E;AAC3E,0DAAsD;AACtD,uDAAmD;AACnD,6DAAyD;AACzD,0DAAsD;AACtD,kFAA8E;AAC9E,gEAA4D;AAC5D,4EAAwE;AACxE,6DAAyD;AACzD,8CAA0C;AAC1C,iDAA6C;AAC7C,oDAAgD;AAChD,uDAAmD;AACnD,oEAAgE;AAChE,gGAA2F;AAC3F,gFAA2E;AAE3E,mEAA0D;AA2JnD,IAAM,SAAS,GAAf,MAAM,SAAS;CAAI,CAAA;AAAb,8BAAS;oBAAT,SAAS;IAzJrB,IAAA,eAAM,EAAC;QACJ,OAAO,EAAE;YACL,4BAAY;YACZ,8BAAa;YACb,qBAAY,CAAC,OAAO,CAAC;gBACjB,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,CAAC;gBACrE,KAAK,EAAE,IAAI;gBACX,QAAQ,EAAR,yBAAQ;aACX,CAAC;YAGF,2BAAe,CAAC,YAAY,CAAC;gBACzB,MAAM,EAAE,CAAC,sBAAa,CAAC;gBACvB,UAAU,EAAE,CAAC,aAA4B,EAA0B,EAAE;oBACjE,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAS,gBAAgB,EAAE,EAAE,CAAC,CAAC;oBAC5D,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAS,gBAAgB,EAAE,GAAG,CAAC,CAAC;oBAE/D,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAS,WAAW,CAAC,CAAC;oBACxD,IAAI,eAAsB,CAAC;oBAC3B,IAAI,QAAQ,EAAE,CAAC;wBACX,eAAe,GAAG,IAAI,iBAAK,CAAC,QAAQ,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;oBACnG,CAAC;yBAAM,CAAC;wBACJ,eAAe,GAAG,IAAI,iBAAK,CAAC;4BACxB,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,WAAW;4BACpD,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC;4BAC7D,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC;4BAC7C,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC;4BAC7C,oBAAoB,EAAE,IAAI;4BAC1B,gBAAgB,EAAE,KAAK;yBAC1B,CAAC,CAAC;oBACP,CAAC;oBAED,OAAO;wBACH,UAAU,EAAE;4BACR;gCACI,IAAI,EAAE,OAAO;gCACb,GAAG,EAAE,IAAI;gCACT,KAAK,EAAE,EAAE;6BACZ;4BACD;gCACI,IAAI,EAAE,QAAQ;gCACd,GAAG,EAAE,GAAG,GAAG,IAAI;gCACf,KAAK;6BACR;4BACD;gCACI,IAAI,EAAE,MAAM;gCACZ,GAAG,EAAE,OAAO;gCACZ,KAAK,EAAE,IAAI;6BACd;yBACJ;wBACD,OAAO,EAAE,IAAI,sDAA4B,CAAC,eAAe,CAAC;qBAC7D,CAAC;gBACN,CAAC;aACJ,CAAC;YAGF,mBAAU,CAAC,YAAY,CAAC;gBACpB,MAAM,EAAE,CAAC,sBAAa,CAAC;gBACvB,UAAU,EAAE,CAAC,aAA4B,EAAE,EAAE;oBACzC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAS,WAAW,CAAC,CAAC;oBACxD,IAAI,gBAAgB,GAAQ,EAAE,CAAC;oBAE/B,IAAI,QAAQ,EAAE,CAAC;wBACX,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;wBACpC,gBAAgB,GAAG;4BACf,IAAI,EAAE,SAAS,CAAC,QAAQ;4BACxB,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC;4BAC5C,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;4BACjF,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;4BACjF,GAAG,EAAE,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;yBACpF,CAAC;oBACN,CAAC;yBAAM,CAAC;wBACJ,gBAAgB,GAAG;4BACf,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,WAAW;4BACpD,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC;4BAC7D,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC;4BAC7C,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC;4BAC7C,GAAG,EAAE,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;yBAClE,CAAC;oBACN,CAAC;oBAED,OAAO;wBACH,UAAU,EAAE,gBAAgB;wBAC5B,iBAAiB,EAAE;4BACf,QAAQ,EAAE,CAAC;4BACX,OAAO,EAAE;gCACL,IAAI,EAAE,aAAa;gCACnB,KAAK,EAAE,IAAI;6BACd;4BACD,gBAAgB,EAAE;gCACd,GAAG,EAAE,KAAK;gCACV,KAAK,EAAE,GAAG;6BACb;4BACD,YAAY,EAAE;gCACV,GAAG,EAAE,MAAM;6BACd;yBACJ;qBACJ,CAAC;gBACN,CAAC;aACJ,CAAC;YAGF,0BAAW;YACX,0BAAW;YACX,0BAAW;YACX,4BAAY;YACZ,4BAAY;YACZ,0BAAW;YACX,mCAAe;YACf,yCAAkB;YAClB,4BAAY;YACZ,wBAAU;YACV,kCAAe;YACf,+CAAqB;YACrB,0BAAW;YAGX,wBAAU;YACV,kCAAe;YACf,2DAA2B;YAC3B,8BAAa;YACb,0BAAW;YACX,gCAAc;YACd,oCAAgB;YAChB,4BAAY;YACZ,kCAAe;YACf,2CAAmB;YACnB,8BAAa;YACb,kCAAe;YACf,0BAAW;YACX,0CAAmB;YACnB,4BAAY;YACZ,0BAAW;YACX,8BAAa;YACb,4BAAY;YACZ,4CAAoB;YACpB,gCAAc;YACd,wCAAkB;YAClB,8BAAa;YACb,oBAAQ;YACR,sBAAS;YACT,wBAAU;YACV,0BAAW;SACd;QACD,SAAS,EAAE;YAEP;gBACI,OAAO,EAAE,gBAAS;gBAClB,QAAQ,EAAE,0BAAc;aAC3B;SACJ;KACJ,CAAC;GACW,SAAS,CAAI"}

apps/api/dist/assets/assets.module.js

@@ -0,0 +1,22 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AssetsModule = void 0;
+const common_1 = require("@nestjs/common");
+const assets_service_1 = require("./assets.service");
+const assets_router_1 = require("./assets.router");
+let AssetsModule = class AssetsModule {
+};
+exports.AssetsModule = AssetsModule;
+exports.AssetsModule = AssetsModule = __decorate([
+    (0, common_1.Module)({
+        providers: [assets_service_1.AssetsService, assets_router_1.AssetsRouter],
+        exports: [assets_service_1.AssetsService, assets_router_1.AssetsRouter],
+    })
+], AssetsModule);
+//# sourceMappingURL=assets.module.js.map

apps/api/dist/assets/assets.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.module.js","sourceRoot":"","sources":["../../src/assets/assets.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AAExC,qDAAiD;AACjD,mDAA+C;AAMxC,IAAM,YAAY,GAAlB,MAAM,YAAY;CAAI,CAAA;AAAhB,oCAAY;uBAAZ,YAAY;IAJxB,IAAA,eAAM,EAAC;QACJ,SAAS,EAAE,CAAC,8BAAa,EAAE,4BAAY,CAAC;QACxC,OAAO,EAAE,CAAC,8BAAa,EAAE,4BAAY,CAAC;KACzC,CAAC;GACW,YAAY,CAAI"}

apps/api/dist/assets/assets.router.js

@@ -0,0 +1,69 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AssetsRouter = void 0;
+const common_1 = require("@nestjs/common");
+const zod_1 = require("zod");
+const shared_types_1 = require("@micprotocol/shared-types");
+const trpc_init_1 = require("../trpc/trpc.init");
+const subscription_features_1 = require("../billing/subscription-features");
+const assets_service_1 = require("./assets.service");
+let AssetsRouter = class AssetsRouter {
+    assetsService;
+    constructor(assetsService) {
+        this.assetsService = assetsService;
+    }
+    get router() {
+        return (0, trpc_init_1.router)({
+            createRequest: (0, trpc_init_1.requireFeature)(subscription_features_1.SubscriptionFeature.ASSET_FORMS)
+                .input(shared_types_1.createAssetRequestSchema)
+                .mutation(async ({ input, ctx }) => {
+                return this.assetsService.createRequest(input, ctx.userId);
+            }),
+            getRequest: trpc_init_1.workspaceProcedure
+                .input(zod_1.z.object({ id: zod_1.z.string().uuid() }))
+                .query(async ({ input, ctx }) => {
+                return this.assetsService.getRequest(input.id, ctx.userId);
+            }),
+            listByEpisode: trpc_init_1.workspaceProcedure
+                .input(zod_1.z.object({ episodeId: zod_1.z.string().uuid() }))
+                .query(async ({ input, ctx }) => {
+                return this.assetsService.listByEpisode(input.episodeId, ctx.userId);
+            }),
+            submit: (0, trpc_init_1.rateLimitedProcedure)("assets:submit", 20, 60_000)
+                .input(shared_types_1.createAssetSubmissionSchema)
+                .mutation(async ({ input, ctx }) => {
+                return this.assetsService.submitAsset(input, ctx.userId ?? undefined);
+            }),
+            approve: trpc_init_1.workspaceProcedure
+                .input(zod_1.z.object({ id: zod_1.z.string().uuid() }))
+                .mutation(async ({ input, ctx }) => {
+                return this.assetsService.approveSubmission(input.id, ctx.userId);
+            }),
+            reject: trpc_init_1.workspaceProcedure
+                .input(zod_1.z.object({ id: zod_1.z.string().uuid() }))
+                .mutation(async ({ input, ctx }) => {
+                return this.assetsService.rejectSubmission(input.id, ctx.userId);
+            }),
+            completionStatus: trpc_init_1.workspaceProcedure
+                .input(zod_1.z.object({ episodeId: zod_1.z.string().uuid() }))
+                .query(async ({ input, ctx }) => {
+                return this.assetsService.getCompletionStatus(input.episodeId, ctx.userId);
+            }),
+        });
+    }
+};
+exports.AssetsRouter = AssetsRouter;
+exports.AssetsRouter = AssetsRouter = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [assets_service_1.AssetsService])
+], AssetsRouter);
+//# sourceMappingURL=assets.router.js.map

apps/api/dist/assets/assets.router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.router.js","sourceRoot":"","sources":["../../src/assets/assets.router.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,6BAAwB;AACxB,4DAGmC;AAEnC,iDAM2B;AAC3B,4EAAuE;AACvE,qDAAiD;AAG1C,IAAM,YAAY,GAAlB,MAAM,YAAY;IACQ;IAA7B,YAA6B,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAAI,CAAC;IAE9D,IAAI,MAAM;QACN,OAAO,IAAA,kBAAM,EAAC;YAEV,aAAa,EAAE,IAAA,0BAAc,EAAC,2CAAmB,CAAC,WAAW,CAAC;iBACzD,KAAK,CAAC,uCAAwB,CAAC;iBAC/B,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC/B,OAAO,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;YAChE,CAAC,CAAC;YAEN,UAAU,EAAE,8BAAkB;iBACzB,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;iBAC1C,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC5B,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;YAChE,CAAC,CAAC;YAEN,aAAa,EAAE,8BAAkB;iBAC5B,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;iBACjD,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC5B,OAAO,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;YAC1E,CAAC,CAAC;YAKN,MAAM,EAAE,IAAA,gCAAoB,EAAC,eAAe,EAAE,EAAE,EAAE,MAAM,CAAC;iBACpD,KAAK,CAAC,0CAA2B,CAAC;iBAClC,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC/B,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC;YAC1E,CAAC,CAAC;YAEN,OAAO,EAAE,8BAAkB;iBACtB,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;iBAC1C,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC/B,OAAO,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;YACvE,CAAC,CAAC;YAEN,MAAM,EAAE,8BAAkB;iBACrB,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;iBAC1C,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC/B,OAAO,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;YACtE,CAAC,CAAC;YAEN,gBAAgB,EAAE,8BAAkB;iBAC/B,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;iBACjD,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC5B,OAAO,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,MAAO,CAAC,CAAC;YAChF,CAAC,CAAC;SACT,CAAC,CAAC;IACP,CAAC;CACJ,CAAA;AApDY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;qCAEmC,8BAAa;GADhD,YAAY,CAoDxB"}

apps/api/dist/assets/assets.service.js

@@ -0,0 +1,142 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var AssetsService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AssetsService = void 0;
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("../prisma/prisma.service");
+const authorization_service_1 = require("../common/authorization.service");
+let AssetsService = AssetsService_1 = class AssetsService {
+    prisma;
+    authorizationService;
+    logger = new common_1.Logger(AssetsService_1.name);
+    constructor(prisma, authorizationService) {
+        this.prisma = prisma;
+        this.authorizationService = authorizationService;
+    }
+    async createRequest(data, userId) {
+        await this.authorizationService.checkEpisodeAccess(data.episodeId, userId);
+        this.logger.log(`Creating ${data.type} asset request for episode ${data.episodeId}`);
+        return this.prisma.assetRequest.create({
+            data: {
+                episodeId: data.episodeId,
+                type: data.type,
+                isRequired: data.isRequired ?? true,
+                instructions: data.instructions || null,
+                dueDate: data.dueDate ? new Date(data.dueDate) : null,
+            },
+            include: {
+                submissions: true,
+            },
+        });
+    }
+    async getRequest(id, userId) {
+        const request = await this.prisma.assetRequest.findUnique({
+            where: { id },
+            include: {
+                submissions: { orderBy: { submittedAt: "desc" } },
+                episode: {
+                    include: {
+                        guest: { select: { fullName: true, email: true } },
+                    },
+                },
+            },
+        });
+        if (!request) {
+            throw new common_1.NotFoundException(`Asset request ${id} not found`);
+        }
+        await this.authorizationService.checkEpisodeAccess(request.episodeId, userId);
+        return request;
+    }
+    async listByEpisode(episodeId, userId) {
+        await this.authorizationService.checkEpisodeAccess(episodeId, userId);
+        return this.prisma.assetRequest.findMany({
+            where: { episodeId },
+            include: {
+                submissions: { orderBy: { submittedAt: "desc" } },
+            },
+            orderBy: { createdAt: "asc" },
+        });
+    }
+    async submitAsset(data, userId) {
+        if (userId) {
+            await this.authorizationService.checkAssetRequestAccess(data.requestId, userId);
+        }
+        this.logger.log(`Asset submission for request ${data.requestId}`);
+        return this.prisma.assetSubmission.create({
+            data: {
+                requestId: data.requestId,
+                fileUrl: data.fileUrl,
+                fileType: data.fileType,
+                fileSize: data.fileSize,
+                status: data.status || "pending",
+            },
+            include: {
+                request: true,
+            },
+        });
+    }
+    async approveSubmission(id, userId) {
+        await this.authorizationService.checkAssetSubmissionAccess(id, userId);
+        return this.prisma.assetSubmission.update({
+            where: { id },
+            data: { status: "approved" },
+        });
+    }
+    async rejectSubmission(id, userId) {
+        await this.authorizationService.checkAssetSubmissionAccess(id, userId);
+        return this.prisma.assetSubmission.update({
+            where: { id },
+            data: { status: "rejected" },
+        });
+    }
+    async getCompletionStatus(episodeId, userId) {
+        await this.authorizationService.checkEpisodeAccess(episodeId, userId);
+        const requests = await this.prisma.assetRequest.findMany({
+            where: { episodeId },
+            include: {
+                submissions: { where: { status: "approved" } },
+            },
+        });
+        const total = requests.length;
+        const required = requests.filter((r) => r.isRequired).length;
+        const fulfilled = requests.filter((r) => r.submissions.length > 0).length;
+        const requiredFulfilled = requests.filter((r) => r.isRequired && r.submissions.length > 0).length;
+        return {
+            total,
+            required,
+            fulfilled,
+            requiredFulfilled,
+            isComplete: requiredFulfilled >= required,
+            completionPercentage: total > 0 ? Math.round((fulfilled / total) * 100) : 100,
+        };
+    }
+    async createBulkRequests(episodeId, userId, requests) {
+        await this.authorizationService.checkEpisodeAccess(episodeId, userId);
+        const created = await Promise.all(requests.map((req) => this.prisma.assetRequest.create({
+            data: {
+                episodeId,
+                type: req.type,
+                isRequired: req.isRequired,
+                instructions: req.instructions || null,
+                dueDate: req.dueDate ? new Date(req.dueDate) : null,
+            },
+        })));
+        return created;
+    }
+};
+exports.AssetsService = AssetsService;
+exports.AssetsService = AssetsService = AssetsService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        authorization_service_1.AuthorizationService])
+], AssetsService);
+//# sourceMappingURL=assets.service.js.map

apps/api/dist/assets/assets.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.service.js","sourceRoot":"","sources":["../../src/assets/assets.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAuE;AAIvE,6DAAyD;AACzD,2EAAuE;AAGhE,IAAM,aAAa,qBAAnB,MAAM,aAAa;IAID;IACA;IAJJ,MAAM,GAAG,IAAI,eAAM,CAAC,eAAa,CAAC,IAAI,CAAC,CAAC;IAEzD,YACqB,MAAqB,EACrB,oBAA0C;QAD1C,WAAM,GAAN,MAAM,CAAe;QACrB,yBAAoB,GAApB,oBAAoB,CAAsB;IAC3D,CAAC;IAEL,KAAK,CAAC,aAAa,CAAC,IAAwB,EAAE,MAAc;QACxD,MAAM,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,IAAI,8BAA8B,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAErF,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;YACnC,IAAI,EAAE;gBACF,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,IAAI,EAAE,IAAI,CAAC,IAA+B;gBAC1C,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;gBACnC,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;gBACvC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;aACxD;YACD,OAAO,EAAE;gBACL,WAAW,EAAE,IAAI;aACpB;SACJ,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,MAAc;QACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC;YACtD,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,OAAO,EAAE;gBACL,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;gBACjD,OAAO,EAAE;oBACL,OAAO,EAAE;wBACL,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;qBACrD;iBACJ;aACJ;SACJ,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,0BAAiB,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAE9E,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,MAAc;QACjD,MAAM,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC;YACrC,KAAK,EAAE,EAAE,SAAS,EAAE;YACpB,OAAO,EAAE;gBACL,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;aACpD;YACD,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;SAChC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAA2B,EAAE,MAAe;QAC1D,IAAI,MAAM,EAAE,CAAC;YACT,MAAM,IAAI,CAAC,oBAAoB,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,gCAAgC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAElE,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC;YACtC,IAAI,EAAE;gBACF,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS;aACnC;YACD,OAAO,EAAE;gBACL,OAAO,EAAE,IAAI;aAChB;SACJ,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,EAAU,EAAE,MAAc;QAC9C,MAAM,IAAI,CAAC,oBAAoB,CAAC,0BAA0B,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC;YACtC,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;SAC/B,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,EAAU,EAAE,MAAc;QAC7C,MAAM,IAAI,CAAC,oBAAoB,CAAC,0BAA0B,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC;YACtC,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;SAC/B,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,SAAiB,EAAE,MAAc;QACvD,MAAM,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC;YACrD,KAAK,EAAE,EAAE,SAAS,EAAE;YACpB,OAAO,EAAE;gBACL,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE;aACjD;SACJ,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC9B,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;QAC7D,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1E,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAClD,CAAC,MAAM,CAAC;QAET,OAAO;YACH,KAAK;YACL,QAAQ;YACR,SAAS;YACT,iBAAiB;YACjB,UAAU,EAAE,iBAAiB,IAAI,QAAQ;YACzC,oBAAoB,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG;SAChF,CAAC;IACN,CAAC;IAED,KAAK,CAAC,kBAAkB,CACpB,SAAiB,EACjB,MAAc,EACd,QAKE;QAEF,MAAM,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACjB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;YAC5B,IAAI,EAAE;gBACF,SAAS;gBACT,IAAI,EAAE,GAAG,CAAC,IAA+B;gBACzC,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI;gBACtC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;aACtD;SACJ,CAAC,CACL,CACJ,CAAC;QAEF,OAAO,OAAO,CAAC;IACnB,CAAC;CACJ,CAAA;AAnJY,sCAAa;wBAAb,aAAa;IADzB,IAAA,mBAAU,GAAE;qCAKoB,8BAAa;QACC,4CAAoB;GALtD,aAAa,CAmJzB"}