@acorex-platform/framework-server 0.0.33 → 0.0.38

package/security/src/lib/auth/auth.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.service.ts"],"names":[],"mappings":";;;;;AAAA,2CAOwB;AACxB,iEAAwF;AACxF,6EAIwD;AACxD,iEAKgD;AAChD,yCAAiC;AACjC,mCAAoC;AACpC,yDAAsD;AACtD,+CAAwD;AACxD,+CAA+E;AAC/E,qFAA+E;AAC/E,qEAAgE;AAEhE,mDAA+C;AAW/C,gCAAgC;AAEhC,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAChD,MAAM,kBAAkB,GAAG,mCAAmC,CAAC;AAC/D,MAAM,oBAAoB,GAAG,QAAQ,CAAC;AACtC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AACvC,MAAM,wBAAwB,GAAG,QAAQ,CAAC;AAC1C,4DAA4D;AAC/C,QAAA,8BAA8B,GAAG,2BAA2B,CAAC;AAGnE,IAAM,WAAW,mBAAjB,MAAM,WAAW;IAGtB,YACmB,aAA6C,EAC7C,YAA0B,EAC1B,gBAA6C,EAC7C,cAAoC,EACzC,MAAuC;QAJlC,kBAAa,GAAb,aAAa,CAAgC;QAC7C,iBAAY,GAAZ,YAAY,CAAc;QAC1B,qBAAgB,GAAhB,gBAAgB,CAA6B;QAC7C,mBAAc,GAAd,cAAc,CAAsB;QACxB,WAAM,GAAN,MAAM,CAAgB;QAPpC,WAAM,GAAG,IAAI,eAAM,CAAC,aAAW,CAAC,IAAI,CAAC,CAAC;IAQpD,CAAC;IAEJ,KAAK,CAAC,cAAc,CAClB,IAAkC,EAClC,IAAqB;QAErB,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,6BAA6B,CAAC,QAAiB;QAC7C,MAAM,QAAQ,GAAG,QAAQ,IAAI,qCAAuB,CAAC;QACrD,IAAI,QAAQ,KAAK,qCAAuB,EAAE,CAAC;YACzC,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAuB,EAAE,IAAqB;QAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,qCAAuB,CAAC;QACzD,IAAI,QAAQ,KAAK,qCAAuB,EAAE,CAAC;YACzC,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,4BAAmB,CAAC,qCAAqC,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC1E,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,4BAAmB,CAAC,4BAA4B,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,EAAE,GAAG,IAAA,mBAAU,GAAE,CAAC;QACxB,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC;QACtD,MAAM,YAAY,GAAG,MAAM,IAAA,mBAAY,EAAC,QAAQ,CAAC,CAAC;QAElD,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,WAAW,EAAE;YAC9C,EAAE;YACF,QAAQ;YACR,WAAW;YACX,QAAQ,EAAE,YAAY;YACtB,YAAY,EAAE,oBAAoB;YAClC,WAAW,EAAE,oBAAoB;SAClC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAChC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,EACxD,IAAI,EACJ,EAAE,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,YAAoB,EAAE,IAAqB;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAE/D,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAErE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC;YAClC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC;SACxC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE;YAC9D,QAAQ,EAAE,OAAO,CAAC,GAAG;YACrB,aAAa,EAAE,OAAO,CAAC,GAAG;YAC1B,MAAM;YACN,WAAW;YACX,SAAS,EAAE,OAAO,CAAC,GAAG;SACvB,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,YAA4B;QACvC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/D,IAAI,CAAC,eAAe,CAAC;gBACnB,MAAM,EAAE,OAAO,CAAC,GAAG;gBACnB,QAAQ,EAAE,OAAO,CAAC,GAAG;gBACrB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC7B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,kBAA0B,EAC1B,GAA4B,EAC5B,IAAqB;QAErB,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC;QAC/D,MAAM,uBAAuB,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC;QAC/E,MAAM,4BAA4B,GAAG,GAAG,CAAC,aAAa,IAAI,IAAI,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,IAAI,IAAI,CAAC;QAE9F,IAAI,aAAiC,CAAC;QACtC,IAAI,4BAA4B,EAAE,CAAC;YACjC,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3D,CAAC;aAAM,IAAI,uBAAuB,EAAE,CAAC;YACnC,gFAAgF;YAChF,aAAa,GAAG,SAAS,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC;QAC9B,CAAC;QAED,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAEpE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;YAC3C,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,GAAG,CAAC,WAAW,CAAC;SAC3D,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE;YAC9D,QAAQ;YACR,aAAa;YACb,MAAM;YACN,WAAW;YACX,SAAS,EAAE,OAAO,CAAC,GAAG;SACvB,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC;IAED,iBAAiB,CAAC,KAAa;QAC7B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,kBAAkB,CAAC,KAAa;QAC9B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,kCAAkC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,mBAAmB;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,CAAC;IACjD,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC,oBAAoB,EAAE,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAClC,IAAiB,EACjB,IAAqB,EACrB,OAMC,EACD,oBAAiD,QAAQ;QAEzD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,cAAc,CAAC,GAAG,CAAC;QAEzD,IAAI,iBAAiB,KAAK,gBAAgB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC;gBAC7D,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,eAAe,EAAE,cAAc,CAAC,GAAG;gBACnC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;oBACtC,IAAI;oBACJ,eAAe,EAAE,cAAc,CAAC,GAAG;oBACnC,SAAS;oBACT,IAAI;oBACJ,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;iBACrC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;gBACtC,IAAI;gBACJ,eAAe,EAAE,cAAc,CAAC,GAAG;gBACnC,SAAS;gBACT,IAAI;gBACJ,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE;gBAC/D,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACvC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,eAAe,CAAC,OAA+B;QACrD,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,+BAAiB,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,IAAkC;QACnD,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE;YAC9B,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE;YACnD,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;SAC1C,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,KAAc;QACpC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,sBAAsB,CAClC,MAAc,EACd,QAA4B,EAC5B,aAAiC;QAEjC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAA,oCAAyB,GAAE,CAAC;QAC5C,MAAM,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,IAAI,6BAA6B,CAAC;QACvF,MAAM,eAAe,GACnB,OAAO,CAAC,6BAA6B,IAAI,sCAAsC,CAAC;QAElF,MAAM,YAAY,GAAG;YACnB,CAAC,8BAAmB,CAAC,EAAE,IAAI;YAC3B,CAAC,mCAAwB,CAAC,EAAE,IAAI;SACjC,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,gBAAgB,EAAE;YACnE,IAAI,EAAE,CAAC;YACP,IAAI,EAAE,EAAE;YACR,MAAM,EAAE;gBACN,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE;oBACP,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;oBAC/D,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;oBACnE;wBACE,KAAK,EAAE,IAAI;wBACX,OAAO,EAAE;4BACP,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE;4BACnF,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;4BACnD,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;yBACrD;qBACF;iBACF;aACF;YACD,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAmC,CAAC;QACpF,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,sCAA8B;gBACpC,OAAO,EAAE,8CAA8C;gBACvD,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE;aAC3D,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,cAAc;aACjC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;aACvB,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QAEhE,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,sCAA8B;gBACpC,OAAO,EAAE,8CAA8C;gBACvD,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE;aAC3D,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,EAAE;YAChE,IAAI,EAAE,CAAC;YACP,IAAI,EAAE,EAAE;YACR,MAAM,EAAE;gBACN,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE;oBACP,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;oBACzE,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;oBAC7E;wBACE,KAAK,EAAE,IAAI;wBACX,OAAO,EAAE;4BACP,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE;4BACnF,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;4BACnD,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;yBACrD;qBACF;iBACF;aACF;YACD,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QAEH,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;YACrC,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,sCAA8B;gBACpC,OAAO,EAAE,6CAA6C;gBACtD,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE;aACnE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,QAAiB,EACjB,OAAuB;QAEvB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,IAAA,8BAAuB,EAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO;gBACL,EAAE,EAAE,QAAQ;gBACZ,IAAI,EAAE,OAAO,EAAE,IAAI;gBACnB,KAAK,EAAE,IAAA,yCAAkC,EAAC,OAAO,EAAE,KAAK,CAAC;aAC1D,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAGhE,CAAC;QACT,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,OAAO,EAAE,IAAI,IAAI,IAAA,8BAAuB,EAAC,OAAO,EAAE,KAAK,CAAC;gBAC7D,CAAC,CAAC;oBACE,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,OAAO,EAAE,IAAI;oBACnB,KAAK,EAAE,IAAA,yCAAkC,EAAC,OAAO,EAAE,KAAK,CAAC;iBAC1D;gBACH,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,yCAAkC,EAAC,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,KAAK,CAAC,CAAC;QACpF,MAAM,YAAY,GAAG,IAAA,iCAA0B,EAAC,KAAK,EAAE,OAAO,CAAC;aAC5D,WAAW,EAAE;aACb,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,EAAE,IAAI,IAAI,CAAC,YAAY,IAAI,cAAc,CAAC,CAAC;YACjF,KAAK;SACN,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,aAAsB,EACtB,OAA4B;QAE5B,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,IAAA,8BAAuB,EAAC,OAAO,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YACrE,OAAO;gBACL,EAAE,EAAE,aAAa;gBACjB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK,EAAE,IAAA,yCAAkC,EAAC,OAAO,CAAC,KAAK,CAAC;aACzD,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAClD,kBAAkB,EAClB,aAAa,CACd,CAAmC,CAAC;QACrC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,OAAO,EAAE,IAAI,IAAI,IAAA,8BAAuB,EAAC,OAAO,EAAE,KAAK,CAAC;gBAC7D,CAAC,CAAC;oBACE,EAAE,EAAE,aAAa;oBACjB,IAAI,EAAE,OAAO,EAAE,IAAI;oBACnB,KAAK,EAAE,IAAA,yCAAkC,EAAC,OAAO,EAAE,KAAK,CAAC;iBAC1D;gBACH,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC;QAC5B,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,yCAAkC,EAAC,WAAW,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,KAAK,CAAC,CAAC;QACzF,MAAM,SAAS,GACb,OAAO,EAAE,IAAI;YACb,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvE,IAAA,iCAA0B,EAAC,KAAK,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;YAC7E,cAAc,CAAC;QAEjB,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;CACF,CAAA;AAtbY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;IASR,mBAAA,IAAA,iBAAQ,GAAE,CAAA;6CAJqB,qCAA8B;QAC/B,4BAAY;QACR,4DAA2B;QAC7B,6CAAoB;QACf,6BAAa;GAR1C,WAAW,CAsbvB;AAED,YAAY"}
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.service.ts"],"names":[],"mappings":";;;;;AAAA,2CASwB;AACxB,iEAAwF;AACxF,6EAIwD;AACxD,iEAKgD;AAChD,yCAAiC;AACjC,mCAAoC;AACpC,8DAA4B;AAC5B,yDAAsD;AACtD,+CAAwD;AACxD,+CAA8I;AAC9I,qFAA+E;AAC/E,uFAAiF;AACjF,qEAAgG;AAEhG,2DAAqD;AACrD,mDAA+C;AAC/C,6EAKsC;AAatC,gCAAgC;AAEhC,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAChD,MAAM,kBAAkB,GAAG,mCAAmC,CAAC;AAC/D,MAAM,oBAAoB,GAAG,QAAQ,CAAC;AACtC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AACvC,MAAM,wBAAwB,GAAG,QAAQ,CAAC;AAC1C,4DAA4D;AAC/C,QAAA,8BAA8B,GAAG,2BAA2B,CAAC;AAC1E,mFAAmF;AACtE,QAAA,+BAA+B,GAAG,4BAA4B,CAAC;AAI5E,SAAS,mCAAmC;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC;IAC7C,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,EAAE,GAAG,EAAE,CAAC;IACjB,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,CAAC;IAC1D,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,8BAA8B,CACrC,UAAuD;IAEvD,IAAI,KAAK,IAAI,UAAU,EAAE,CAAC;QACxB,OAAO,IAAI,iBAAK,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,oBAAoB,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,IAAI,iBAAK,CAAC,EAAE,GAAG,UAAU,EAAE,oBAAoB,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;AAClF,CAAC;AAGM,IAAM,WAAW,mBAAjB,MAAM,WAAW;IAItB,YACmB,aAA6C,EAC7C,YAA0B,EAC1B,gBAA6C,EAC7C,cAAoC,EACzC,MAAuC;QAJlC,kBAAa,GAAb,aAAa,CAAgC;QAC7C,iBAAY,GAAZ,YAAY,CAAc;QAC1B,qBAAgB,GAAhB,gBAAgB,CAA6B;QAC7C,mBAAc,GAAd,cAAc,CAAsB;QACxB,WAAM,GAAN,MAAM,CAAgB;QARpC,WAAM,GAAG,IAAI,eAAM,CAAC,aAAW,CAAC,IAAI,CAAC,CAAC;QAUrD,MAAM,UAAU,GAAG,mCAAmC,EAAE,CAAC;QACzD,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,CAAC,CAAC,8BAA8B,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,MAAM,IAAI,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,IAAkC,EAClC,IAAqB,EACrB,OAAkD;QAElD,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE;YAC9D,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC,CAAC;IACL,CAAC;IAED,6BAA6B,CAAC,QAAiB;QAC7C,MAAM,QAAQ,GAAG,QAAQ,IAAI,qCAAuB,CAAC;QACrD,IAAI,QAAQ,KAAK,qCAAuB,EAAE,CAAC;YACzC,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAuB,EAAE,IAAqB;QAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,qCAAuB,CAAC;QACzD,IAAI,QAAQ,KAAK,qCAAuB,EAAE,CAAC;YACzC,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,4BAAmB,CAAC,qCAAqC,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC1E,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,4BAAmB,CAAC,4BAA4B,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,EAAE,GAAG,IAAA,mBAAU,GAAE,CAAC;QACxB,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,GAAG,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC;QACtD,MAAM,YAAY,GAAG,MAAM,IAAA,mBAAY,EAAC,QAAQ,CAAC,CAAC;QAElD,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,WAAW,EAAE;YAC9C,EAAE;YACF,QAAQ;YACR,WAAW;YACX,QAAQ,EAAE,YAAY;YACtB,YAAY,EAAE,oBAAoB;YAClC,WAAW,EAAE,oBAAoB;SAClC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAChC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,EACxD,IAAI,EACJ,EAAE,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,YAAoB,EACpB,IAAqB,EACrB,OAA+B;QAE/B,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAEtD,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEhD,iCAAiC;QACjC,kFAAkF;QAClF,uEAAuE;QACvE,MAAM,QAAQ,GAAG,GAAG,4DAA+B,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACrF,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,qEAAqE;gBACrE,MAAM,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACzD,MAAM,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC/D,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/D,MAAM,IAAI,8BAAqB,CAAC,+BAA+B,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAE7C,4DAA4D;QAC5D,gFAAgF;QAChF,mFAAmF;QACnF,kFAAkF;QAClF,iFAAiF;QACjF,qFAAqF;QAErF,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAErE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC;YAClC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC;SACxC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE;YAC9D,QAAQ,EAAE,OAAO,CAAC,GAAG;YACrB,aAAa,EAAE,OAAO,CAAC,GAAG;YAC1B,MAAM;YACN,WAAW;YACX,SAAS,EAAE,OAAO,CAAC,GAAG;YACtB,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,gFAAgF;YAChF,OAAO,EAAE,OAAO,CAAC,OAAO,KAAK,KAAK;SACnC,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,YAA4B;QACvC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3C,iDAAiD;YACjD,MAAM,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/D,MAAM,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACzD,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,eAAe,CAAC;gBACnB,MAAM,EAAE,OAAO,CAAC,GAAG;gBACnB,QAAQ,EAAE,OAAO,CAAC,GAAG;gBACrB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC7B,CAAC,CAAC;YACH,IAAI,CAAC,iBAAiB,CAAC;gBACrB,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,OAAO,CAAC,GAAG;gBACnB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,cAAc,EAAE,OAAO,CAAC,GAAG;aAC5B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,kBAA0B,EAC1B,GAA4B,EAC5B,IAAqB;QAErB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC;QAC/D,MAAM,uBAAuB,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC;QAC/E,MAAM,4BAA4B,GAAG,GAAG,CAAC,aAAa,IAAI,IAAI,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,IAAI,IAAI,CAAC;QAE9F,IAAI,aAAiC,CAAC;QACtC,IAAI,4BAA4B,EAAE,CAAC;YACjC,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3D,CAAC;aAAM,IAAI,uBAAuB,EAAE,CAAC;YACnC,gFAAgF;YAChF,aAAa,GAAG,SAAS,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC;QAC9B,CAAC;QAED,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAEpE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;YAC3C,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,GAAG,CAAC,WAAW,CAAC;SAC3D,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE;YAC9D,QAAQ;YACR,aAAa;YACb,MAAM;YACN,WAAW;YACX,SAAS,EAAE,OAAO,CAAC,GAAG;SACvB,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,KAAa,EAAE,gBAAyB;QACxD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,KAAa,EACb,gBAAyB;QAEzB,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAChE,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,kBAAkB,CAAC,KAAa;QAC9B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,kCAAkC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,mBAAmB;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,CAAC;IACjD,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC,oBAAoB,EAAE,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAiB;QACvC,sFAAsF;QACtF,MAAM,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,sBAAsB,CAAC,SAAiB;QAC5C,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED;;;OAGG;IACH,6BAA6B,CAAC,MAAc,EAAE,SAAiB;QAC7D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC;YACrB,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,GAAG;YACX,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,eAAe,EAAE,GAAG;SACrB,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,KAAa;QAC7B,OAAO,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAClC,IAAiB,EACjB,IAAqB,EACrB,OAQC,EACD,oBAAiD,QAAQ;QAEzD,IAAI,iBAAiB,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE;gBAC/E,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE;gBAC/E,IAAI,EAAE,gBAAgB;gBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,cAAc,CAAC,GAAG,CAAC;QAEzD,IAAI,iBAAiB,KAAK,gBAAgB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC;gBAC7D,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,eAAe,EAAE,cAAc,CAAC,GAAG;gBACnC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;oBACtD,IAAI;oBACJ,eAAe,EAAE,cAAc,CAAC,GAAG;oBACnC,SAAS;oBACT,IAAI;oBACJ,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;iBACrC,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;gBACtD,IAAI;gBACJ,eAAe,EAAE,cAAc,CAAC,GAAG;gBACnC,SAAS;gBACT,IAAI;gBACJ,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YACpE,IAAI,CAAC,iBAAiB,CAAC;gBACrB,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,cAAc,EAAE,SAAS;gBACzB,GAAG,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC;aACxC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE;gBAC/D,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACvC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,oCAAoC,CAChD,MAAc,EACd,IAAqB,EACrB,QAA4B,EAC5B,OAGC;QAED,MAAM,GAAG,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,IAAI,IAAA,uDAA8B,EAAC,GAAG,CAAC,EAAE,CAAC;YAChD,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAA,8DAA4B,EAAC,GAAG,CAAC,CAAC;QACpD,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,gBAAgB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YAC3D,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,2BAA2B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC/F,IAAI,aAAa,KAAK,GAAG,EAAE,CAAC;gBAC1B,OAAO;YACT,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,EAAE;gBAClF,iBAAiB,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;aACvC,CAAC,CAAC;YACH,IAAI,WAAW,IAAI,GAAG,EAAE,CAAC;gBACvB,MAAM,IAAI,2BAAkB,CAAC;oBAC3B,IAAI,EAAE,uCAA+B;oBACrC,OAAO,EAAE,uCAA+B;oBACxC,KAAK,EAAE,uCAA+B;iBACvC,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,MAAM,IAAI,CAAC,cAAc,CAAC,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YACnE,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpF,IAAI,WAAW,IAAI,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,uCAA+B;gBACrC,OAAO,EAAE,uCAA+B;gBACxC,KAAK,EAAE,uCAA+B;aACvC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,2BAA2B,CAC/B,WAAmB,EACnB,QAAgB;QAEhB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,IAAI,IAAA,uDAA8B,EAAC,GAAG,CAAC,EAAE,CAAC;YAChD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,+BAA+B,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzF,OAAO,IAAI;aACR,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,OAAO,CAAC,GAAG,CAAC;aAC9C,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACb,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,eAAe,EAAE,GAAG,CAAC,eAAe;YACpC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,WAAW,EAAE,GAAG,CAAC,WAAW;SAC7B,CAAC,CAAC,CAAC;IACR,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,yBAAyB,CAAC,WAAmB,EAAE,eAAuB;QAC1E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,sBAAsB,CACjE,OAAO,CAAC,GAAG,EACX,eAAe,CAChB,CAAC;QACF,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,4BAAmB,CAAC,0BAA0B,CAAC,CAAC;QAC5D,CAAC;QAED,8EAA8E;QAC9E,IAAI,UAAU,KAAK,EAAE,IAAI,UAAU,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;YACpD,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9D,IAAI,CAAC,6BAA6B,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,OAA+B;QACrD,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,+BAAiB,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,OAAsC;QAC9D,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,uCAAyB,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAEO,yBAAyB,CAAC,IAAqB;QAIrD,MAAM,MAAM,GAAG,IAAA,kCAAc,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9C,OAAO;YACL,aAAa,EAAE,GAAG,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE;YACzD,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,eAAe,EAAE,MAAM,CAAC,eAAe;SACxC,CAAC;IACJ,CAAC;IAEO,UAAU,CAAC,IAAkC;QACnD,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE;YAC9B,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE;YACnD,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;SAC1C,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,KAAc;QACpC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,sBAAsB,CAClC,MAAc,EACd,QAA4B,EAC5B,aAAiC;QAEjC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAA,oCAAyB,GAAE,CAAC;QAC5C,MAAM,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,IAAI,6BAA6B,CAAC;QACvF,MAAM,eAAe,GACnB,OAAO,CAAC,6BAA6B,IAAI,sCAAsC,CAAC;QAElF,MAAM,YAAY,GAAG;YACnB,CAAC,8BAAmB,CAAC,EAAE,IAAI;YAC3B,CAAC,mCAAwB,CAAC,EAAE,IAAI;SACjC,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,gBAAgB,EAAE;YACnE,IAAI,EAAE,CAAC;YACP,IAAI,EAAE,EAAE;YACR,MAAM,EAAE;gBACN,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE;oBACP,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;oBAC/D,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;oBACnE;wBACE,KAAK,EAAE,IAAI;wBACX,OAAO,EAAE;4BACP,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE;4BACnF,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;4BACnD,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;yBACrD;qBACF;iBACF;aACF;YACD,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAmC,CAAC;QACpF,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,sCAA8B;gBACpC,OAAO,EAAE,8CAA8C;gBACvD,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE;aAC3D,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,cAAc;aACjC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;aACvB,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QAEhE,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,sCAA8B;gBACpC,OAAO,EAAE,8CAA8C;gBACvD,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE;aAC3D,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,EAAE;YAChE,IAAI,EAAE,CAAC;YACP,IAAI,EAAE,EAAE;YACR,MAAM,EAAE;gBACN,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE;oBACP,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;oBACzE,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;oBAC7E;wBACE,KAAK,EAAE,IAAI;wBACX,OAAO,EAAE;4BACP,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE;4BACnF,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;4BACnD,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;yBACrD;qBACF;iBACF;aACF;YACD,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QAEH,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;YACrC,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,sCAA8B;gBACpC,OAAO,EAAE,6CAA6C;gBACtD,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE;aACnE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,QAAiB,EACjB,OAAuB;QAEvB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,IAAA,8BAAuB,EAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO;gBACL,EAAE,EAAE,QAAQ;gBACZ,IAAI,EAAE,OAAO,EAAE,IAAI;gBACnB,KAAK,EAAE,IAAA,yCAAkC,EAAC,OAAO,EAAE,KAAK,CAAC;aAC1D,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAGhE,CAAC;QACT,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,OAAO,EAAE,IAAI,IAAI,IAAA,8BAAuB,EAAC,OAAO,EAAE,KAAK,CAAC;gBAC7D,CAAC,CAAC;oBACE,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,OAAO,EAAE,IAAI;oBACnB,KAAK,EAAE,IAAA,yCAAkC,EAAC,OAAO,EAAE,KAAK,CAAC;iBAC1D;gBACH,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,yCAAkC,EAAC,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,KAAK,CAAC,CAAC;QACpF,MAAM,YAAY,GAAG,IAAA,iCAA0B,EAAC,KAAK,EAAE,OAAO,CAAC;aAC5D,WAAW,EAAE;aACb,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,EAAE,IAAI,IAAI,CAAC,YAAY,IAAI,cAAc,CAAC,CAAC;YACjF,KAAK;SACN,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,aAAsB,EACtB,OAA4B;QAE5B,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,IAAA,8BAAuB,EAAC,OAAO,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YACrE,OAAO;gBACL,EAAE,EAAE,aAAa;gBACjB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK,EAAE,IAAA,yCAAkC,EAAC,OAAO,CAAC,KAAK,CAAC;aACzD,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAClD,kBAAkB,EAClB,aAAa,CACd,CAAmC,CAAC;QACrC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,OAAO,EAAE,IAAI,IAAI,IAAA,8BAAuB,EAAC,OAAO,EAAE,KAAK,CAAC;gBAC7D,CAAC,CAAC;oBACE,EAAE,EAAE,aAAa;oBACjB,IAAI,EAAE,OAAO,EAAE,IAAI;oBACnB,KAAK,EAAE,IAAA,yCAAkC,EAAC,OAAO,EAAE,KAAK,CAAC;iBAC1D;gBACH,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC;QAC5B,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,yCAAkC,EAAC,WAAW,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,KAAK,CAAC,CAAC;QACzF,MAAM,SAAS,GACb,OAAO,EAAE,IAAI;YACb,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvE,IAAA,iCAA0B,EAAC,KAAK,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;YAC7E,cAAc,CAAC;QAEjB,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,GAAW;QAC/C,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,6DAAgC,GAAG,GAAG,EAAE,CAAC,CAAC;QAC/F,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,GAAW;QAC1C,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1C,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,6DAAgC,GAAG,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACnG,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,SAA6B,EAC7B,OAAgC;QAEhC,MAAM,GAAG,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;gBACtB,MAAM,IAAI,4BAAmB,CAAC,sDAAsD,CAAC,CAAC;YACxF,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,oFAAoF,CAAC;YACrG,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;gBACtB,MAAM,IAAI,oCAA2B,CAAC,OAAO,CAAC,CAAC;YACjD,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,iFAAiF;QACjF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAChF,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,6DAAgC,GAAG,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACnG,CAAC;IAED,+FAA+F;IACvF,KAAK,CAAC,4BAA4B,CAAC,UAAoB;QAC7D,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,oBAAoB,CAAC,SAA6B;QAC9D,MAAM,GAAG,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,2DAA2D;YAC3D,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,MAAM,IAAI,oCAA2B,CAAC,uCAAuC,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,6DAAgC,GAAG,GAAG,EAAE,CAAC,CAAC;QAC/F,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,8BAAqB,CAAC,2BAA2B,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,yBAAyB,CAAC,GAAuB;QAC7D,MAAM,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,EAAE,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,4DAA+B,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7F,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,8BAAqB,CAAC,gCAAgC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;CACF,CAAA;AA7wBY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;IAUR,mBAAA,IAAA,iBAAQ,GAAE,CAAA;6CAJqB,qCAA8B;QAC/B,4BAAY;QACR,4DAA2B;QAC7B,6CAAoB;QACf,6BAAa;GAT1C,WAAW,CA6wBvB;AAED,YAAY"}

package/security/src/lib/auth/auth.types.d.ts

@@ -3,6 +3,8 @@ export interface SignInRequestDto {
     strategy?: string;
     username: string;
     password: string;
+    /** When true, refresh cookie uses maxAge (survive browser restart). When false, session cookie. */
+    rememberMe?: boolean;
 }
 export interface RegisterRequestDto {
     strategy?: string;
@@ -24,6 +26,24 @@ export interface UpdateSessionRequestDto {
         title?: AXPMultiLanguageString;
     };
 }
+/** Device session row for the session-limit chooser (caller’s other devices). */
+export interface AuthOwnDeviceSessionDto {
+    id: string;
+    sessionId: string;
+    tenantId: string;
+    deviceName: string;
+    browser: string;
+    operatingSystem: string;
+    ipAddress: string;
+    lastLoginAt?: string;
+}
+export interface AuthListOwnDeviceSessionsRequestDto {
+    tenantId: string;
+}
+export interface AuthTerminateOwnDeviceSessionRequestDto {
+    /** DeviceSessions entity id (not JWT `sid`). */
+    id: string;
+}
 export interface RefreshTokenRequestDto {
     refreshToken?: string;
 }
@@ -49,6 +69,12 @@ export interface AuthTokenResponseDto {
     refreshToken: string;
     expiresIn: string;
     sessionId?: string;
+    /**
+     * When true, browser should set a persistent refresh cookie (maxAge).
+     * When false, refresh cookie is session-scoped (cleared on browser close).
+     * Omitted / undefined → treat as persistent (backward compatible).
+     */
+    persist?: boolean;
     user: AuthUserDto;
     tenant?: AuthTenantDto | null;
     application?: AuthApplicationDto | null;
@@ -58,8 +84,15 @@ export interface AccessTokenPayload {
     username: string;
     tid?: string;
     aid?: string;
+    /** Session id — OD-09 session-level revoke. */
     sid?: string;
+    /** JWT id — OD-09 token-level revoke (optional on legacy tokens). */
+    jti?: string;
     type: 'access';
+    /** RFC 9068 access token type claim when present in JWT payload. */
+    typ?: string;
+    /** Standard OAuth/JWT audience; Platform OP stamps fixed `platform`. */
+    aud?: string | string[];
 }
 export interface RefreshTokenPayload {
     sub: string;
@@ -68,11 +101,14 @@ export interface RefreshTokenPayload {
     sid: string;
     tid?: string;
     aid?: string;
+    /** Remember-me: re-apply persistent refresh cookie on rotation. */
+    persist?: boolean;
 }
 export interface SecurityManagementUserRecord {
     id: string;
     username?: string;
     displayName?: string;
+    email?: string;
     password?: string;
     avatar?: string | null;
     accountState?: string;

package/security/src/lib/auth/auth.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.types.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.types.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAErF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,sBAAsB,CAAA;KAAE,CAAC;IACvE,WAAW,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,sBAAsB,CAAA;KAAE,CAAC;CAC7E;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,sBAAsB,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,sBAAsB,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAC1C"}
+{"version":3,"file":"auth.types.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.types.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAErF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,mGAAmG;IACnG,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,sBAAsB,CAAA;KAAE,CAAC;IACvE,WAAW,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,sBAAsB,CAAA;KAAE,CAAC;CAC7E;AAED,iFAAiF;AACjF,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uCAAuC;IACtD,gDAAgD;IAChD,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,sBAAsB,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,sBAAsB,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,CAAC;IACf,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAC1C"}

package/security/src/lib/auth/auth.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.types.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.types.ts"],"names":[],"mappings":";AAAA,8CAA8C;;AAuF9C,YAAY"}
+{"version":3,"file":"auth.types.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/auth.types.ts"],"names":[],"mappings":";AAAA,8CAA8C;;AA8H9C,YAAY"}

package/security/src/lib/auth/device-session.service.d.ts

@@ -9,23 +9,81 @@ export interface CreateDeviceSessionInput {
     tenantId?: string;
     applicationId?: string;
 }
+/** Result of create/upsert — callers must revoke replaced login session ids. */
+export interface CreateDeviceSessionResult {
+    id: string;
+    /** Prior `sid` values superseded on this device (invalidate in Redis). */
+    replacedSessionIds: string[];
+}
 export interface UpdateDeviceSessionBindingInput {
     sessionId: string;
     authorizationId: string;
     tenantId?: string;
     applicationId?: string;
 }
+/** Placeholder tenant stamped at create-login before tenant chooser bind. */
+export declare const DEVICE_SESSION_UNBOUND_TENANT_ID = "default";
+/** Active login row used to resolve Socket.IO fan-out rooms (`t:{tenantId}:u:{userId}`). */
+export interface ActiveDeviceSessionDestination {
+    id: string;
+    sessionId: string;
+    tenantId: string;
+    applicationId: string;
+    deviceName: string;
+    browser: string;
+    operatingSystem: string;
+    ipAddress: string;
+    userAgent: string;
+    lastLoginAt?: string;
+}
+export declare function isUnboundDeviceSessionTenantId(tenantId: string | undefined | null): boolean;
 export declare class DeviceSessionService {
     private readonly entityStorage;
     private readonly logger;
     constructor(entityStorage: EntityStorageMiddlewareService);
-    createSession(input: CreateDeviceSessionInput): Promise<string>;
+    /**
+     * Ensures one active DeviceSessions row per user+device (Telegram-style).
+     * Re-login on the same browser/UA updates the existing row instead of inserting.
+     */
+    createSession(input: CreateDeviceSessionInput): Promise<CreateDeviceSessionResult>;
     /**
      * Tenant/app/token rotation during an existing sign-in journey.
      * Updates the primary row for {@link sessionId} and revokes duplicate legacy rows.
      */
     updateSessionBinding(input: UpdateDeviceSessionBindingInput): Promise<boolean>;
     revokeByAuthorizationId(authorizationId: string): Promise<void>;
+    /**
+     * Family revoke on refresh-token replay.
+     * Revoke all active device session rows bound to the same `sessionId`.
+     */
+    revokeBySessionId(sessionId: string): Promise<void>;
+    isSessionActive(sessionId: string): Promise<boolean>;
+    /**
+     * Active DeviceSessions for a user across all tenants (engine query — no RLS).
+     * Used to resolve Socket.IO destinations: room `t:{tenantId}:u:{userId}` per row.
+     */
+    listActiveSessionsForUser(userId: string): Promise<ActiveDeviceSessionDestination[]>;
+    /** Distinct tenant ids that have at least one active session for the user. */
+    listActiveTenantIdsForUser(userId: string): Promise<string[]>;
+    /** True when the user already has an active DeviceSessions row for this device. */
+    hasActiveDeviceForUser(userId: string, meta: AuthRequestMeta): Promise<boolean>;
+    /** Count of active DeviceSessions for the user in a specific tenant. */
+    countActiveForUserTenant(userId: string, tenantId: string, options?: {
+        excludeSessionIds?: string[];
+    }): Promise<number>;
+    /** Active DeviceSessions for a user in one tenant (engine query — no RLS). */
+    listActiveSessionsForUserTenant(userId: string, tenantId: string): Promise<ActiveDeviceSessionDestination[]>;
+    /** Tenant id currently stamped on the active DeviceSessions row for this login `sid`. */
+    getActiveTenantIdForSession(sessionId: string): Promise<string | undefined>;
+    /**
+     * Revoke an active DeviceSessions row by entity id (or login `sid`) when it belongs to `userId`.
+     * Uses engine update so tenant isolation on the unbound session-limit page cannot block revoke.
+     * Returns the login `sid` that was revoked (for Redis projection), or null when not found/owned.
+     */
+    revokeOwnedSessionById(userId: string, deviceSessionId: string): Promise<string | null>;
+    private upsertExistingDeviceSession;
+    private findActiveByDevice;
+    private queryActiveDeviceRows;
     private findBySessionId;
     /** Legacy rows stored only under `config.sessionId`. */
     private findBySessionIdFromConfig;

package/security/src/lib/auth/device-session.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"device-session.service.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/device-session.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AAExF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,KAAK,EAAE,WAAW,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAO9E,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,WAAW,GAAG,4BAA4B,CAAC;IACjD,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAWD,qBACa,oBAAoB;IAGnB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAF1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;gBAEnC,aAAa,EAAE,8BAA8B;IAEpE,aAAa,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC;IA0CrE;;;OAGG;IACG,oBAAoB,CAAC,KAAK,EAAE,+BAA+B,GAAG,OAAO,CAAC,OAAO,CAAC;IAoC9E,uBAAuB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAwBvD,eAAe;IAoC7B,wDAAwD;YAC1C,yBAAyB;YAgCzB,0BAA0B;YAW1B,gBAAgB;CAQ/B"}
+{"version":3,"file":"device-session.service.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/device-session.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AAExF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,KAAK,EAAE,WAAW,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAO9E,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,WAAW,GAAG,4BAA4B,CAAC;IACjD,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,gFAAgF;AAChF,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,0EAA0E;IAC1E,kBAAkB,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,6EAA6E;AAC7E,eAAO,MAAM,gCAAgC,YAAY,CAAC;AAE1D,4FAA4F;AAC5F,MAAM,WAAW,8BAA8B;IAC7C,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAG3F;AAiBD,qBACa,oBAAoB;IAGnB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAF1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;gBAEnC,aAAa,EAAE,8BAA8B;IAE1E;;;OAGG;IACG,aAAa,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IA0DxF;;;OAGG;IACG,oBAAoB,CAAC,KAAK,EAAE,+BAA+B,GAAG,OAAO,CAAC,OAAO,CAAC;IAoC9E,uBAAuB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBrE;;;OAGG;IACG,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASnD,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAS1D;;;OAGG;IACG,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,8BAA8B,EAAE,CAAC;IAsC1F,8EAA8E;IACxE,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAKnE,mFAAmF;IAC7E,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC;IAYrF,wEAAwE;IAClE,wBAAwB,CAC5B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GACzC,OAAO,CAAC,MAAM,CAAC;IAclB,8EAA8E;IACxE,+BAA+B,CACnC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,8BAA8B,EAAE,CAAC;IAU5C,yFAAyF;IACnF,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAYjF;;;;OAIG;IACG,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;YA4B/E,2BAA2B;YAiD3B,kBAAkB;YAsBlB,qBAAqB;YAyBrB,eAAe;IAoC7B,wDAAwD;YAC1C,yBAAyB;YAgCzB,0BAA0B;YAW1B,gBAAgB;CAQ/B"}

package/security/src/lib/auth/device-session.service.js

@@ -1,7 +1,8 @@
 "use strict";
 var DeviceSessionService_1;
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DeviceSessionService = void 0;
+exports.DeviceSessionService = exports.DEVICE_SESSION_UNBOUND_TENANT_ID = void 0;
+exports.isUnboundDeviceSessionTenantId = isUnboundDeviceSessionTenantId;
 const tslib_1 = require("tslib");
 const common_1 = require("@nestjs/common");
 const core_1 = require("@acorex-platform/framework-server/core");
@@ -10,48 +11,74 @@ const request_meta_util_1 = require("./request-meta.util");
 //#region ---- Device session service ----
 const DEVICE_SESSION_ENTITY = 'SecurityManagement.DeviceSessions';
 const SESSION_QUERY_PAGE = 100;
+/** Placeholder tenant stamped at create-login before tenant chooser bind. */
+exports.DEVICE_SESSION_UNBOUND_TENANT_ID = 'default';
+function isUnboundDeviceSessionTenantId(tenantId) {
+    const tid = tenantId?.trim();
+    return !tid || tid === exports.DEVICE_SESSION_UNBOUND_TENANT_ID;
+}
 let DeviceSessionService = DeviceSessionService_1 = class DeviceSessionService {
     constructor(entityStorage) {
         this.entityStorage = entityStorage;
         this.logger = new common_1.Logger(DeviceSessionService_1.name);
     }
+    /**
+     * Ensures one active DeviceSessions row per user+device (Telegram-style).
+     * Re-login on the same browser/UA updates the existing row instead of inserting.
+     */
     async createSession(input) {
         const userId = input.user.id;
         const username = 'name' in input.user && 'title' in input.user
             ? input.user.name
             : input.user.username ?? userId;
         const parsed = (0, request_meta_util_1.parseUserAgent)(input.meta.userAgent);
-        const tenantId = input.tenantId ?? 'default';
-        const applicationId = input.applicationId ?? 'default';
+        const deviceKey = buildDeviceKey(input.meta.userAgent, parsed);
+        const tenantId = input.tenantId?.trim() || exports.DEVICE_SESSION_UNBOUND_TENANT_ID;
+        const applicationId = input.applicationId?.trim() || 'default';
         const now = new Date();
-        const record = {
-            id: (0, crypto_1.randomUUID)(),
-            clientName: input.meta.clientName,
-            ipAddress: input.meta.ipAddress,
-            userAgent: input.meta.userAgent,
-            authorizationId: input.authorizationId,
-            status: 'active',
-            userId,
-            user: { id: userId, name: username },
-            applicationId,
-            application: { id: applicationId, name: applicationId },
-            tenantId,
-            tenant: { id: tenantId, name: tenantId },
-            isActiveSession: true,
-            deviceName: parsed.deviceName,
-            operatingSystem: parsed.operatingSystem,
-            browser: parsed.browser,
-            location: 'Unknown',
-            lastLoginDate: now,
-            sessionId: input.sessionId,
-            config: { sessionId: input.sessionId },
-        };
         try {
-            return await this.entityStorage.insertOne(DEVICE_SESSION_ENTITY, record);
+            const existing = await this.findActiveByDevice(userId, deviceKey, input.meta.userAgent);
+            if (existing.length > 0) {
+                return await this.upsertExistingDeviceSession({
+                    existing,
+                    input,
+                    deviceKey,
+                    parsed,
+                    username,
+                    tenantId,
+                    applicationId,
+                    now,
+                });
+            }
+            const id = (0, crypto_1.randomUUID)();
+            await this.entityStorage.insertOne(DEVICE_SESSION_ENTITY, {
+                id,
+                clientName: input.meta.clientName,
+                ipAddress: input.meta.ipAddress,
+                userAgent: input.meta.userAgent,
+                deviceKey,
+                authorizationId: input.authorizationId,
+                status: 'active',
+                userId,
+                user: { id: userId, name: username },
+                applicationId,
+                application: { id: applicationId, name: applicationId },
+                tenantId,
+                tenant: { id: tenantId, name: tenantId },
+                isActiveSession: true,
+                deviceName: parsed.deviceName,
+                operatingSystem: parsed.operatingSystem,
+                browser: parsed.browser,
+                location: 'Unknown',
+                lastLoginDate: now,
+                sessionId: input.sessionId,
+                config: { sessionId: input.sessionId, deviceKey },
+            });
+            return { id, replacedSessionIds: [] };
         }
         catch (error) {
             this.logger.warn(`Failed to create device session: ${String(error)}`);
-            return record.id;
+            return { id: (0, crypto_1.randomUUID)(), replacedSessionIds: [] };
         }
     }
     /**
@@ -79,7 +106,7 @@ let DeviceSessionService = DeviceSessionService_1 = class DeviceSessionService {
                 applicationId,
                 application: { id: applicationId, name: applicationId },
                 sessionId,
-                config: { sessionId },
+                config: { sessionId, deviceKey: primary.deviceKey || undefined },
                 status: 'active',
                 isActiveSession: true,
             });
@@ -113,6 +140,216 @@ let DeviceSessionService = DeviceSessionService_1 = class DeviceSessionService {
             this.logger.warn(`Failed to revoke device session: ${String(error)}`);
         }
     }
+    /**
+     * Family revoke on refresh-token replay.
+     * Revoke all active device session rows bound to the same `sessionId`.
+     */
+    async revokeBySessionId(sessionId) {
+        try {
+            const rows = await this.findBySessionId(sessionId);
+            await Promise.all(rows.map((row) => this.revokeSessionRow(row.id)));
+        }
+        catch (error) {
+            this.logger.warn(`Failed to revoke device sessions by sessionId: ${String(error)}`);
+        }
+    }
+    async isSessionActive(sessionId) {
+        if (!sessionId.trim()) {
+            return false;
+        }
+        const rows = await this.findBySessionId(sessionId);
+        return rows.some((row) => row.status.toLowerCase() === 'active');
+    }
+    /**
+     * Active DeviceSessions for a user across all tenants (engine query — no RLS).
+     * Used to resolve Socket.IO destinations: room `t:{tenantId}:u:{userId}` per row.
+     */
+    async listActiveSessionsForUser(userId) {
+        const uid = userId.trim();
+        if (!uid) {
+            return [];
+        }
+        try {
+            const items = [];
+            let skip = 0;
+            for (;;) {
+                const page = await this.entityStorage.queryAsEngine(DEVICE_SESSION_ENTITY, {
+                    skip,
+                    take: SESSION_QUERY_PAGE,
+                    filter: {
+                        logic: 'and',
+                        filters: [
+                            { field: 'userId', operator: { type: 'equal' }, value: uid },
+                            { field: 'status', operator: { type: 'equal' }, value: 'active' },
+                        ],
+                    },
+                });
+                const batch = (page.items ?? []);
+                items.push(...batch);
+                if (batch.length < SESSION_QUERY_PAGE) {
+                    break;
+                }
+                skip += SESSION_QUERY_PAGE;
+            }
+            return items
+                .map(asActiveDeviceSessionDestination)
+                .filter((row) => row != null);
+        }
+        catch (error) {
+            this.logger.warn(`Failed to list active device sessions for user ${uid}: ${String(error)}`);
+            return [];
+        }
+    }
+    /** Distinct tenant ids that have at least one active session for the user. */
+    async listActiveTenantIdsForUser(userId) {
+        const rows = await this.listActiveSessionsForUser(userId);
+        return [...new Set(rows.map((row) => row.tenantId).filter(Boolean))];
+    }
+    /** True when the user already has an active DeviceSessions row for this device. */
+    async hasActiveDeviceForUser(userId, meta) {
+        const uid = userId.trim();
+        if (!uid) {
+            return false;
+        }
+        const parsed = (0, request_meta_util_1.parseUserAgent)(meta.userAgent);
+        const deviceKey = buildDeviceKey(meta.userAgent, parsed);
+        const existing = await this.findActiveByDevice(uid, deviceKey, meta.userAgent);
+        return existing.length > 0;
+    }
+    /** Count of active DeviceSessions for the user in a specific tenant. */
+    async countActiveForUserTenant(userId, tenantId, options) {
+        const uid = userId.trim();
+        const tid = tenantId.trim();
+        if (!uid || !tid || isUnboundDeviceSessionTenantId(tid)) {
+            return 0;
+        }
+        const excluded = new Set((options?.excludeSessionIds ?? []).map((id) => id.trim()).filter(Boolean));
+        const rows = await this.listActiveSessionsForUserTenant(uid, tid);
+        return rows.filter((row) => !excluded.has(row.sessionId)).length;
+    }
+    /** Active DeviceSessions for a user in one tenant (engine query — no RLS). */
+    async listActiveSessionsForUserTenant(userId, tenantId) {
+        const tid = tenantId.trim();
+        if (!tid || isUnboundDeviceSessionTenantId(tid)) {
+            return [];
+        }
+        const rows = await this.listActiveSessionsForUser(userId);
+        return rows.filter((row) => row.tenantId === tid);
+    }
+    /** Tenant id currently stamped on the active DeviceSessions row for this login `sid`. */
+    async getActiveTenantIdForSession(sessionId) {
+        const sid = sessionId.trim();
+        if (!sid) {
+            return undefined;
+        }
+        const rows = await this.findBySessionId(sid);
+        const primary = rows.find((row) => row.status.toLowerCase() === 'active') ?? rows[0];
+        const tid = primary?.tenantId?.trim();
+        return tid && !isUnboundDeviceSessionTenantId(tid) ? tid : undefined;
+    }
+    /**
+     * Revoke an active DeviceSessions row by entity id (or login `sid`) when it belongs to `userId`.
+     * Uses engine update so tenant isolation on the unbound session-limit page cannot block revoke.
+     * Returns the login `sid` that was revoked (for Redis projection), or null when not found/owned.
+     */
+    async revokeOwnedSessionById(userId, deviceSessionId) {
+        const uid = userId.trim();
+        const id = deviceSessionId.trim();
+        if (!uid || !id) {
+            return null;
+        }
+        try {
+            const rows = await this.listActiveSessionsForUser(uid);
+            const match = rows.find((row) => row.id === id || row.sessionId === id);
+            if (!match) {
+                return null;
+            }
+            const loggedOutAt = new Date();
+            await this.entityStorage.updateOneAsEngine(DEVICE_SESSION_ENTITY, match.id, {
+                status: 'revoked',
+                isActiveSession: false,
+                loggedOutAt,
+            });
+            // Empty string = revoked but no JWT sid to stamp (caller treats null as not-found).
+            return match.sessionId?.trim() || '';
+        }
+        catch (error) {
+            this.logger.warn(`Failed to revoke owned device session ${id}: ${String(error)}`);
+            return null;
+        }
+    }
+    async upsertExistingDeviceSession(args) {
+        const { existing, input, deviceKey, parsed, username, tenantId, applicationId, now } = args;
+        const primary = pickPrimarySessionRow(existing);
+        const replacedSessionIds = new Set();
+        for (const row of existing) {
+            if (row.sessionId && row.sessionId !== input.sessionId) {
+                replacedSessionIds.add(row.sessionId);
+            }
+            if (row.id !== primary.id && row.status.toLowerCase() === 'active') {
+                await this.revokeSessionRow(row.id);
+            }
+        }
+        await this.entityStorage.updateOne(DEVICE_SESSION_ENTITY, primary.id, {
+            clientName: input.meta.clientName,
+            ipAddress: input.meta.ipAddress,
+            userAgent: input.meta.userAgent,
+            deviceKey,
+            authorizationId: input.authorizationId,
+            status: 'active',
+            userId: input.user.id,
+            user: { id: input.user.id, name: username },
+            applicationId,
+            application: { id: applicationId, name: applicationId },
+            tenantId,
+            tenant: { id: tenantId, name: tenantId },
+            isActiveSession: true,
+            deviceName: parsed.deviceName,
+            operatingSystem: parsed.operatingSystem,
+            browser: parsed.browser,
+            lastLoginDate: now,
+            loggedOutAt: null,
+            sessionId: input.sessionId,
+            config: { sessionId: input.sessionId, deviceKey },
+        });
+        return { id: primary.id, replacedSessionIds: [...replacedSessionIds] };
+    }
+    async findActiveByDevice(userId, deviceKey, userAgent) {
+        const byKey = await this.queryActiveDeviceRows([
+            { field: 'userId', operator: { type: 'equal' }, value: userId },
+            { field: 'status', operator: { type: 'equal' }, value: 'active' },
+            { field: 'deviceKey', operator: { type: 'equal' }, value: deviceKey },
+        ]);
+        if (byKey.length > 0) {
+            return byKey;
+        }
+        // Legacy rows created before deviceKey existed.
+        return this.queryActiveDeviceRows([
+            { field: 'userId', operator: { type: 'equal' }, value: userId },
+            { field: 'status', operator: { type: 'equal' }, value: 'active' },
+            { field: 'userAgent', operator: { type: 'equal' }, value: userAgent },
+        ]);
+    }
+    async queryActiveDeviceRows(filters) {
+        const items = [];
+        let skip = 0;
+        for (;;) {
+            const page = await this.entityStorage.query(DEVICE_SESSION_ENTITY, {
+                skip,
+                take: SESSION_QUERY_PAGE,
+                filter: { logic: 'and', filters },
+            });
+            const batch = (page.items ?? []);
+            items.push(...batch);
+            if (batch.length < SESSION_QUERY_PAGE) {
+                break;
+            }
+            skip += SESSION_QUERY_PAGE;
+        }
+        return items
+            .map(asStoredDeviceSessionRow)
+            .filter((row) => row != null);
+    }
     async findBySessionId(sessionId) {
         const items = [];
         let skip = 0;
@@ -196,6 +433,13 @@ exports.DeviceSessionService = DeviceSessionService = DeviceSessionService_1 = t
 ], DeviceSessionService);
 //#endregion
 //#region ----- Helpers -----
+function buildDeviceKey(userAgent, parsed) {
+    const normalizedUa = userAgent.trim().toLowerCase();
+    return (0, crypto_1.createHash)('sha256')
+        .update(`${parsed.browser}|${parsed.operatingSystem}|${parsed.deviceName}|${normalizedUa}`)
+        .digest('hex')
+        .slice(0, 32);
+}
 function pickPrimarySessionRow(rows) {
     const sorted = [...rows].sort((a, b) => (b.lastLoginDate?.getTime() ?? 0) - (a.lastLoginDate?.getTime() ?? 0));
     return sorted.find((row) => row.status.toLowerCase() === 'active') ?? sorted[0];
@@ -209,6 +453,9 @@ function asStoredDeviceSessionRow(raw) {
     const sessionId = (typeof raw['sessionId'] === 'string' && raw['sessionId'].trim()) ||
         (typeof config?.sessionId === 'string' && config.sessionId.trim()) ||
         '';
+    const deviceKey = (typeof raw['deviceKey'] === 'string' && raw['deviceKey'].trim()) ||
+        (typeof config?.deviceKey === 'string' && config.deviceKey.trim()) ||
+        '';
     return {
         id,
         status: typeof raw['status'] === 'string' ? raw['status'] : 'unknown',
@@ -216,6 +463,30 @@ function asStoredDeviceSessionRow(raw) {
         tenantId: typeof raw['tenantId'] === 'string' ? raw['tenantId'] : 'default',
         applicationId: typeof raw['applicationId'] === 'string' ? raw['applicationId'] : 'default',
         sessionId,
+        userAgent: typeof raw['userAgent'] === 'string' ? raw['userAgent'] : '',
+        deviceKey,
+        deviceName: typeof raw['deviceName'] === 'string' ? raw['deviceName'] : undefined,
+        browser: typeof raw['browser'] === 'string' ? raw['browser'] : undefined,
+        operatingSystem: typeof raw['operatingSystem'] === 'string' ? raw['operatingSystem'] : undefined,
+        ipAddress: typeof raw['ipAddress'] === 'string' ? raw['ipAddress'] : undefined,
+    };
+}
+function asActiveDeviceSessionDestination(raw) {
+    const row = asStoredDeviceSessionRow(raw);
+    if (!row?.sessionId || !row.tenantId) {
+        return null;
+    }
+    return {
+        id: row.id,
+        sessionId: row.sessionId,
+        tenantId: row.tenantId,
+        applicationId: row.applicationId,
+        deviceName: row.deviceName?.trim() || 'Desktop',
+        browser: row.browser?.trim() || 'Unknown Browser',
+        operatingSystem: row.operatingSystem?.trim() || 'Unknown OS',
+        ipAddress: row.ipAddress?.trim() || '',
+        userAgent: row.userAgent,
+        lastLoginAt: row.lastLoginDate?.toISOString(),
     };
 }
 function toDate(value) {