@aibrains/shared-types 0.1.0

package/dist/schemas/identity/security.schema.js

@@ -0,0 +1,151 @@
+"use strict";
+/**
+ * Security Schemas - Identity Service
+ *
+ * Zod schemas for security-related DTOs.
+ *
+ * ============================================
+ * PASSWORD VALIDATION - COGNITO IS SOURCE OF TRUTH
+ * ============================================
+ *
+ * AWS Cognito User Pool password policy (from server/lib/tenant-template/identity-provider.ts):
+ *   passwordPolicy: {
+ *     minLength: 8,
+ *     requireLowercase: true,
+ *     requireUppercase: true,
+ *     requireDigits: true,
+ *     requireSymbols: true  // Uses Cognito's default symbol set
+ *   }
+ *
+ * Cognito's default special characters when requireSymbols=true:
+ *   ^ $ * . [ ] { } ( ) ? " ! @ # % & / \ , > < ' : ; | _ ~ ` + = -
+ *
+ * @see https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-policies.html
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loginHistoryResponseSchema = exports.loginHistoryEntrySchema = exports.revokeAllSessionsResponseSchema = exports.revokeSessionResponseSchema = exports.securitySessionsListSchema = exports.securitySessionSchema = exports.mfaDisableResponseSchema = exports.mfaDisableSchema = exports.mfaVerifyResponseSchema = exports.mfaVerifySchema = exports.mfaSetupResponseSchema = exports.passwordErrorResponseSchema = exports.changePasswordResponseSchema = exports.changePasswordSchema = exports.securityOverviewSchema = exports.deviceTypeSchema = exports.loginStatusSchema = exports.mfaMethodSchema = exports.COGNITO_PASSWORD_REQUIREMENTS = exports.passwordSchema = void 0;
+const zod_1 = require("zod");
+const common_1 = require("../common");
+const password_1 = require("../../validators/password");
+Object.defineProperty(exports, "passwordSchema", { enumerable: true, get: function () { return password_1.passwordSchema; } });
+Object.defineProperty(exports, "COGNITO_PASSWORD_REQUIREMENTS", { enumerable: true, get: function () { return password_1.COGNITO_PASSWORD_REQUIREMENTS; } });
+// ============================================
+// Enums
+// ============================================
+exports.mfaMethodSchema = zod_1.z.enum(['totp', 'sms']);
+exports.loginStatusSchema = zod_1.z.enum(['success', 'failed', 'blocked']);
+exports.deviceTypeSchema = zod_1.z.enum(['desktop', 'mobile', 'tablet', 'unknown']);
+// ============================================
+// Security Overview Schema
+// ============================================
+exports.securityOverviewSchema = zod_1.z.object({
+    userId: zod_1.z.string(),
+    email: zod_1.z.string().email(),
+    mfaEnabled: zod_1.z.boolean(),
+    mfaMethod: exports.mfaMethodSchema.optional(),
+    lastLoginAt: common_1.isoDateSchema.optional(),
+    lastLoginIp: zod_1.z.string().optional(),
+    lastLoginDevice: zod_1.z.string().optional(),
+    passwordLastChangedAt: common_1.isoDateSchema.optional(),
+    accountLocked: zod_1.z.boolean(),
+    lockExpiresAt: common_1.isoDateSchema.optional(),
+    failedLoginAttempts: zod_1.z.number().int().min(0),
+    activeSessions: zod_1.z.number().int().min(0),
+    securityScore: zod_1.z.number().int().min(0).max(100),
+    recommendations: zod_1.z.array(zod_1.z.string()),
+});
+// ============================================
+// Change Password Schemas
+// ============================================
+exports.changePasswordSchema = zod_1.z.object({
+    currentPassword: zod_1.z.string().min(1, 'Current password is required'),
+    newPassword: password_1.passwordSchema,
+});
+exports.changePasswordResponseSchema = zod_1.z.object({
+    success: zod_1.z.boolean(),
+    message: zod_1.z.string(),
+    passwordLastChangedAt: common_1.isoDateSchema,
+});
+exports.passwordErrorResponseSchema = zod_1.z.object({
+    statusCode: zod_1.z.number(),
+    errorCode: zod_1.z.string(),
+    message: zod_1.z.string(),
+    field: zod_1.z.string().optional(),
+});
+// ============================================
+// MFA Setup Schemas
+// ============================================
+exports.mfaSetupResponseSchema = zod_1.z.object({
+    secretKey: zod_1.z.string(),
+    qrCodeUrl: zod_1.z.string().url(),
+    manualEntryKey: zod_1.z.string(),
+    expiresAt: common_1.isoDateSchema,
+});
+exports.mfaVerifySchema = zod_1.z.object({
+    code: zod_1.z.string().length(6, 'MFA code must be exactly 6 digits'),
+    secretKey: zod_1.z.string().optional(),
+});
+exports.mfaVerifyResponseSchema = zod_1.z.object({
+    success: zod_1.z.boolean(),
+    backupCodes: zod_1.z.array(zod_1.z.string()).optional(),
+    message: zod_1.z.string(),
+});
+exports.mfaDisableSchema = zod_1.z.object({
+    password: zod_1.z.string().min(1, 'Password is required'),
+    code: zod_1.z.string().optional(),
+});
+exports.mfaDisableResponseSchema = zod_1.z.object({
+    success: zod_1.z.boolean(),
+    message: zod_1.z.string(),
+});
+// ============================================
+// Session Schemas (Security Context)
+// ============================================
+exports.securitySessionSchema = zod_1.z.object({
+    sessionId: zod_1.z.string(),
+    createdAt: common_1.isoDateSchema,
+    lastActivityAt: common_1.isoDateSchema.optional(),
+    expiresAt: common_1.isoDateSchema,
+    ipAddress: zod_1.z.string().optional(),
+    userAgent: zod_1.z.string().optional(),
+    deviceType: exports.deviceTypeSchema.optional(),
+    browser: zod_1.z.string().optional(),
+    os: zod_1.z.string().optional(),
+    location: zod_1.z.string().optional(),
+    isCurrent: zod_1.z.boolean(),
+});
+exports.securitySessionsListSchema = zod_1.z.object({
+    sessions: zod_1.z.array(exports.securitySessionSchema),
+    total: zod_1.z.number().int().min(0),
+    currentSessionId: zod_1.z.string().optional(),
+});
+exports.revokeSessionResponseSchema = zod_1.z.object({
+    success: zod_1.z.boolean(),
+    sessionId: zod_1.z.string(),
+    message: zod_1.z.string(),
+});
+exports.revokeAllSessionsResponseSchema = zod_1.z.object({
+    success: zod_1.z.boolean(),
+    revokedCount: zod_1.z.number().int().min(0),
+    message: zod_1.z.string(),
+});
+// ============================================
+// Login History Schemas
+// ============================================
+exports.loginHistoryEntrySchema = zod_1.z.object({
+    timestamp: common_1.isoDateSchema,
+    status: exports.loginStatusSchema,
+    ipAddress: zod_1.z.string().optional(),
+    userAgent: zod_1.z.string().optional(),
+    deviceType: exports.deviceTypeSchema.optional(),
+    browser: zod_1.z.string().optional(),
+    os: zod_1.z.string().optional(),
+    location: zod_1.z.string().optional(),
+    failureReason: zod_1.z.string().optional(),
+});
+exports.loginHistoryResponseSchema = zod_1.z.object({
+    entries: zod_1.z.array(exports.loginHistoryEntrySchema),
+    total: zod_1.z.number().int().min(0),
+    hasMore: zod_1.z.boolean(),
+});
+//# sourceMappingURL=security.schema.js.map

package/dist/schemas/identity/security.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.schema.js","sourceRoot":"","sources":["../../../src/schemas/identity/security.schema.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;;;AAEH,6BAAwB;AACxB,sCAA0C;AAC1C,wDAA0F;AAGjF,+FAHA,yBAAc,OAGA;AAAE,8GAHA,wCAA6B,OAGA;AAEtD,+CAA+C;AAC/C,QAAQ;AACR,+CAA+C;AAElC,QAAA,eAAe,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAG1C,QAAA,iBAAiB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAG7D,QAAA,gBAAgB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAGnF,+CAA+C;AAC/C,2BAA2B;AAC3B,+CAA+C;AAElC,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;IAClB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE;IACvB,SAAS,EAAE,uBAAe,CAAC,QAAQ,EAAE;IACrC,WAAW,EAAE,sBAAa,CAAC,QAAQ,EAAE;IACrC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,qBAAqB,EAAE,sBAAa,CAAC,QAAQ,EAAE;IAC/C,aAAa,EAAE,OAAC,CAAC,OAAO,EAAE;IAC1B,aAAa,EAAE,sBAAa,CAAC,QAAQ,EAAE;IACvC,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/C,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;CACrC,CAAC,CAAC;AAIH,+CAA+C;AAC/C,0BAA0B;AAC1B,+CAA+C;AAElC,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,8BAA8B,CAAC;IAClE,WAAW,EAAE,yBAAc;CAC5B,CAAC,CAAC;AAIU,QAAA,4BAA4B,GAAG,OAAC,CAAC,MAAM,CAAC;IACnD,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,qBAAqB,EAAE,sBAAa;CACrC,CAAC,CAAC;AAIU,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IAClD,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE;IACtB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAIH,+CAA+C;AAC/C,oBAAoB;AACpB,+CAA+C;AAElC,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC3B,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE;IAC1B,SAAS,EAAE,sBAAa;CACzB,CAAC,CAAC;AAIU,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,mCAAmC,CAAC;IAC/D,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAIU,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;IACpB,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3C,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAIU,QAAA,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC;IACnD,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAIU,QAAA,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAIH,+CAA+C;AAC/C,qCAAqC;AACrC,+CAA+C;AAElC,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,sBAAa;IACxB,cAAc,EAAE,sBAAa,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,sBAAa;IACxB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,wBAAgB,CAAC,QAAQ,EAAE;IACvC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAC;AAIU,QAAA,0BAA0B,GAAG,OAAC,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,6BAAqB,CAAC;IACxC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAIU,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;IACpB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAIU,QAAA,+BAA+B,GAAG,OAAC,CAAC,MAAM,CAAC;IACtD,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;IACpB,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAIH,+CAA+C;AAC/C,wBAAwB;AACxB,+CAA+C;AAElC,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,SAAS,EAAE,sBAAa;IACxB,MAAM,EAAE,yBAAiB;IACzB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,wBAAgB,CAAC,QAAQ,EAAE;IACvC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAIU,QAAA,0BAA0B,GAAG,OAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,+BAAuB,CAAC;IACzC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC"}

package/dist/schemas/identity/session.schema.d.ts

@@ -0,0 +1,193 @@
+/**
+ * Session Schemas - Identity Service
+ *
+ * Zod schemas for session management DTOs.
+ */
+import { z } from 'zod';
+export declare const sessionDeviceInfoSchema: z.ZodObject<{
+    deviceType: z.ZodEnum<["desktop", "mobile", "tablet", "unknown"]>;
+    os: z.ZodOptional<z.ZodString>;
+    browser: z.ZodOptional<z.ZodString>;
+    deviceId: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    deviceType: "unknown" | "mobile" | "desktop" | "tablet";
+    browser?: string | undefined;
+    os?: string | undefined;
+    deviceId?: string | undefined;
+}, {
+    deviceType: "unknown" | "mobile" | "desktop" | "tablet";
+    browser?: string | undefined;
+    os?: string | undefined;
+    deviceId?: string | undefined;
+}>;
+export type SessionDeviceInfoDto = z.infer<typeof sessionDeviceInfoSchema>;
+export declare const sessionStatusSchema: z.ZodEnum<["active", "expired", "revoked"]>;
+export type SessionStatus = z.infer<typeof sessionStatusSchema>;
+export declare const sessionResponseSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    userId: z.ZodString;
+    status: z.ZodEnum<["active", "expired", "revoked"]>;
+    createdAt: z.ZodString;
+    expiresAt: z.ZodString;
+    deviceInfo: z.ZodOptional<z.ZodObject<{
+        deviceType: z.ZodEnum<["desktop", "mobile", "tablet", "unknown"]>;
+        os: z.ZodOptional<z.ZodString>;
+        browser: z.ZodOptional<z.ZodString>;
+        deviceId: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        deviceType: "unknown" | "mobile" | "desktop" | "tablet";
+        browser?: string | undefined;
+        os?: string | undefined;
+        deviceId?: string | undefined;
+    }, {
+        deviceType: "unknown" | "mobile" | "desktop" | "tablet";
+        browser?: string | undefined;
+        os?: string | undefined;
+        deviceId?: string | undefined;
+    }>>;
+    ipAddress: z.ZodOptional<z.ZodString>;
+    lastActiveAt: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    status: "active" | "expired" | "revoked";
+    createdAt: string;
+    userId: string;
+    expiresAt: string;
+    sessionId: string;
+    ipAddress?: string | undefined;
+    deviceInfo?: {
+        deviceType: "unknown" | "mobile" | "desktop" | "tablet";
+        browser?: string | undefined;
+        os?: string | undefined;
+        deviceId?: string | undefined;
+    } | undefined;
+    lastActiveAt?: string | undefined;
+}, {
+    status: "active" | "expired" | "revoked";
+    createdAt: string;
+    userId: string;
+    expiresAt: string;
+    sessionId: string;
+    ipAddress?: string | undefined;
+    deviceInfo?: {
+        deviceType: "unknown" | "mobile" | "desktop" | "tablet";
+        browser?: string | undefined;
+        os?: string | undefined;
+        deviceId?: string | undefined;
+    } | undefined;
+    lastActiveAt?: string | undefined;
+}>;
+export type SessionResponseDto = z.infer<typeof sessionResponseSchema>;
+export declare const sessionListResponseSchema: z.ZodObject<{
+    sessions: z.ZodArray<z.ZodObject<{
+        sessionId: z.ZodString;
+        userId: z.ZodString;
+        status: z.ZodEnum<["active", "expired", "revoked"]>;
+        createdAt: z.ZodString;
+        expiresAt: z.ZodString;
+        deviceInfo: z.ZodOptional<z.ZodObject<{
+            deviceType: z.ZodEnum<["desktop", "mobile", "tablet", "unknown"]>;
+            os: z.ZodOptional<z.ZodString>;
+            browser: z.ZodOptional<z.ZodString>;
+            deviceId: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            deviceType: "unknown" | "mobile" | "desktop" | "tablet";
+            browser?: string | undefined;
+            os?: string | undefined;
+            deviceId?: string | undefined;
+        }, {
+            deviceType: "unknown" | "mobile" | "desktop" | "tablet";
+            browser?: string | undefined;
+            os?: string | undefined;
+            deviceId?: string | undefined;
+        }>>;
+        ipAddress: z.ZodOptional<z.ZodString>;
+        lastActiveAt: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        status: "active" | "expired" | "revoked";
+        createdAt: string;
+        userId: string;
+        expiresAt: string;
+        sessionId: string;
+        ipAddress?: string | undefined;
+        deviceInfo?: {
+            deviceType: "unknown" | "mobile" | "desktop" | "tablet";
+            browser?: string | undefined;
+            os?: string | undefined;
+            deviceId?: string | undefined;
+        } | undefined;
+        lastActiveAt?: string | undefined;
+    }, {
+        status: "active" | "expired" | "revoked";
+        createdAt: string;
+        userId: string;
+        expiresAt: string;
+        sessionId: string;
+        ipAddress?: string | undefined;
+        deviceInfo?: {
+            deviceType: "unknown" | "mobile" | "desktop" | "tablet";
+            browser?: string | undefined;
+            os?: string | undefined;
+            deviceId?: string | undefined;
+        } | undefined;
+        lastActiveAt?: string | undefined;
+    }>, "many">;
+    total: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    total: number;
+    sessions: {
+        status: "active" | "expired" | "revoked";
+        createdAt: string;
+        userId: string;
+        expiresAt: string;
+        sessionId: string;
+        ipAddress?: string | undefined;
+        deviceInfo?: {
+            deviceType: "unknown" | "mobile" | "desktop" | "tablet";
+            browser?: string | undefined;
+            os?: string | undefined;
+            deviceId?: string | undefined;
+        } | undefined;
+        lastActiveAt?: string | undefined;
+    }[];
+}, {
+    total: number;
+    sessions: {
+        status: "active" | "expired" | "revoked";
+        createdAt: string;
+        userId: string;
+        expiresAt: string;
+        sessionId: string;
+        ipAddress?: string | undefined;
+        deviceInfo?: {
+            deviceType: "unknown" | "mobile" | "desktop" | "tablet";
+            browser?: string | undefined;
+            os?: string | undefined;
+            deviceId?: string | undefined;
+        } | undefined;
+        lastActiveAt?: string | undefined;
+    }[];
+}>;
+export type SessionListResponseDto = z.infer<typeof sessionListResponseSchema>;
+export declare const revokeSessionSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    reason: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    sessionId: string;
+    reason?: string | undefined;
+}, {
+    sessionId: string;
+    reason?: string | undefined;
+}>;
+export type RevokeSessionDto = z.infer<typeof revokeSessionSchema>;
+export declare const revokeAllSessionsSchema: z.ZodObject<{
+    exceptCurrentSession: z.ZodOptional<z.ZodString>;
+    reason: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    reason?: string | undefined;
+    exceptCurrentSession?: string | undefined;
+}, {
+    reason?: string | undefined;
+    exceptCurrentSession?: string | undefined;
+}>;
+export type RevokeAllSessionsDto = z.infer<typeof revokeAllSessionsSchema>;
+//# sourceMappingURL=session.schema.d.ts.map

package/dist/schemas/identity/session.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/identity/session.schema.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;EAKlC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAM3E,eAAO,MAAM,mBAAmB,6CAA2C,CAAC;AAC5E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAMhE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAShC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAMvE,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGpC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAM/E,eAAO,MAAM,mBAAmB;;;;;;;;;EAG9B,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAMnE,eAAO,MAAM,uBAAuB;;;;;;;;;EAGlC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/schemas/identity/session.schema.js

@@ -0,0 +1,59 @@
+"use strict";
+/**
+ * Session Schemas - Identity Service
+ *
+ * Zod schemas for session management DTOs.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.revokeAllSessionsSchema = exports.revokeSessionSchema = exports.sessionListResponseSchema = exports.sessionResponseSchema = exports.sessionStatusSchema = exports.sessionDeviceInfoSchema = void 0;
+const zod_1 = require("zod");
+const common_1 = require("../common");
+const security_schema_1 = require("./security.schema");
+// ============================================
+// Device Info Schema
+// ============================================
+exports.sessionDeviceInfoSchema = zod_1.z.object({
+    deviceType: security_schema_1.deviceTypeSchema,
+    os: zod_1.z.string().optional(),
+    browser: zod_1.z.string().optional(),
+    deviceId: zod_1.z.string().optional(),
+});
+// ============================================
+// Session Status Schema
+// ============================================
+exports.sessionStatusSchema = zod_1.z.enum(['active', 'expired', 'revoked']);
+// ============================================
+// Session Response Schema
+// ============================================
+exports.sessionResponseSchema = zod_1.z.object({
+    sessionId: zod_1.z.string(),
+    userId: zod_1.z.string(),
+    status: exports.sessionStatusSchema,
+    createdAt: common_1.isoDateSchema,
+    expiresAt: common_1.isoDateSchema,
+    deviceInfo: exports.sessionDeviceInfoSchema.optional(),
+    ipAddress: zod_1.z.string().optional(),
+    lastActiveAt: common_1.isoDateSchema.optional(),
+});
+// ============================================
+// Session List Response Schema
+// ============================================
+exports.sessionListResponseSchema = zod_1.z.object({
+    sessions: zod_1.z.array(exports.sessionResponseSchema),
+    total: zod_1.z.number().int().min(0),
+});
+// ============================================
+// Revoke Session Schema
+// ============================================
+exports.revokeSessionSchema = zod_1.z.object({
+    sessionId: zod_1.z.string().min(1),
+    reason: zod_1.z.string().optional(),
+});
+// ============================================
+// Revoke All Sessions Schema
+// ============================================
+exports.revokeAllSessionsSchema = zod_1.z.object({
+    exceptCurrentSession: zod_1.z.string().optional(),
+    reason: zod_1.z.string().optional(),
+});
+//# sourceMappingURL=session.schema.js.map

package/dist/schemas/identity/session.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.schema.js","sourceRoot":"","sources":["../../../src/schemas/identity/session.schema.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,6BAAwB;AACxB,sCAA0C;AAC1C,uDAAqD;AAErD,+CAA+C;AAC/C,qBAAqB;AACrB,+CAA+C;AAElC,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,UAAU,EAAE,kCAAgB;IAC5B,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAIH,+CAA+C;AAC/C,wBAAwB;AACxB,+CAA+C;AAElC,QAAA,mBAAmB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAG5E,+CAA+C;AAC/C,0BAA0B;AAC1B,+CAA+C;AAElC,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;IAClB,MAAM,EAAE,2BAAmB;IAC3B,SAAS,EAAE,sBAAa;IACxB,SAAS,EAAE,sBAAa;IACxB,UAAU,EAAE,+BAAuB,CAAC,QAAQ,EAAE;IAC9C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,YAAY,EAAE,sBAAa,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAIH,+CAA+C;AAC/C,+BAA+B;AAC/B,+CAA+C;AAElC,QAAA,yBAAyB,GAAG,OAAC,CAAC,MAAM,CAAC;IAChD,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,6BAAqB,CAAC;IACxC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/B,CAAC,CAAC;AAIH,+CAA+C;AAC/C,wBAAwB;AACxB,+CAA+C;AAElC,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAIH,+CAA+C;AAC/C,6BAA6B;AAC7B,+CAA+C;AAElC,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,oBAAoB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3C,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC"}