@flusys/nestjs-auth 1.0.0-beta → 1.0.0-rc

package/cjs/controllers/user-permission.controller.js

@@ -10,7 +10,7 @@ Object.defineProperty(exports, "UserPermissionController", {
 });
 const _common = require("@nestjs/common");
 const _swagger = require("@nestjs/swagger");
-const _guards = require("@flusys/nestjs-shared/guards");
+const _nestjsshared = require("@flusys/nestjs-shared");
 const _userpermissiondto = require("../dtos/user-permission.dto");
 const _userpermissionservice = require("../services/user-permission.service");
 function _define_property(obj, key, value) {
@@ -41,8 +41,7 @@ function _ts_param(paramIndex, decorator) {
     };
 }
 let UserPermissionController = class UserPermissionController {
-    // User-Company Permissions
-    /** Batch assign/revoke user-company permissions */ async assignUserCompany(dto) {
+    async assignUserCompany(dto) {
         let addedCount = 0;
         let removedCount = 0;
         for (const item of dto.items){
@@ -62,9 +61,8 @@ let UserPermissionController = class UserPermissionController {
             message: `Processed ${addedCount} additions and ${removedCount} removals`
         };
     }
-    /** Get user's companies */ async getUserCompanies(userId) {
+    async getUserCompanies(userId) {
         const permissions = await this.userPermissionService.findUserCompanies(userId);
-        // Map to DTO format with populated company details
         const data = permissions.map((permission)=>({
                 id: permission.id,
                 userId: permission.userId,
@@ -73,11 +71,12 @@ let UserPermissionController = class UserPermissionController {
                 companySlug: permission.company?.slug || ''
             }));
         return {
+            success: true,
+            message: 'User companies retrieved successfully',
             data
         };
     }
-    // User-Branch Permissions
-    /** Batch assign/revoke user-branch permissions */ async assignUserBranch(dto) {
+    async assignUserBranch(dto) {
         let addedCount = 0;
         let removedCount = 0;
         for (const item of dto.items){
@@ -97,9 +96,8 @@ let UserPermissionController = class UserPermissionController {
             message: `Processed ${addedCount} additions and ${removedCount} removals`
         };
     }
-    /** Get user's branches */ async getUserBranches(userId) {
+    async getUserBranches(userId) {
         const permissions = await this.userPermissionService.findUserBranches(userId);
-        // Map to DTO format with populated branch details
         const data = permissions.map((permission)=>({
                 id: permission.id,
                 userId: permission.userId,
@@ -109,10 +107,11 @@ let UserPermissionController = class UserPermissionController {
                 companyId: permission.branch?.companyId || ''
             }));
         return {
+            success: true,
+            message: 'User branches retrieved successfully',
             data
         };
     }
-    // NOTE: @Inject() required for bundled code - type metadata may be lost during esbuild
     constructor(userPermissionService){
         _define_property(this, "userPermissionService", void 0);
         this.userPermissionService = userPermissionService;
@@ -120,6 +119,7 @@ let UserPermissionController = class UserPermissionController {
 };
 _ts_decorate([
     (0, _common.Post)('user-company/assign'),
+    (0, _nestjsshared.RequirePermission)(_nestjsshared.USER_PERMISSIONS.UPDATE),
     (0, _swagger.ApiOperation)({
         summary: 'Batch assign/revoke user-company permissions',
         description: `
@@ -174,22 +174,29 @@ Batch operation to assign or revoke user permissions to companies.
     _ts_metadata("design:returntype", Promise)
 ], UserPermissionController.prototype, "assignUserCompany", null);
 _ts_decorate([
-    (0, _common.Get)('user-company'),
+    (0, _common.Post)('get-user-company'),
+    (0, _nestjsshared.RequirePermission)(_nestjsshared.USER_PERMISSIONS.READ),
     (0, _swagger.ApiOperation)({
         summary: 'Get user companies',
         description: 'Returns all companies the user has access to.'
     }),
-    (0, _swagger.ApiQuery)({
-        name: 'userId',
-        required: true,
-        description: 'User ID to get companies for',
-        example: '550e8400-e29b-41d4-a716-446655440000'
+    (0, _swagger.ApiBody)({
+        schema: {
+            properties: {
+                userId: {
+                    type: 'string'
+                }
+            },
+            required: [
+                'userId'
+            ]
+        }
     }),
     (0, _swagger.ApiResponse)({
         status: 200,
         type: _userpermissiondto.UserCompaniesResponseDto
     }),
-    _ts_param(0, (0, _common.Query)('userId')),
+    _ts_param(0, (0, _common.Body)('userId')),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [
         String
@@ -198,6 +205,7 @@ _ts_decorate([
 ], UserPermissionController.prototype, "getUserCompanies", null);
 _ts_decorate([
     (0, _common.Post)('user-branch/assign'),
+    (0, _nestjsshared.RequirePermission)(_nestjsshared.USER_PERMISSIONS.UPDATE),
     (0, _swagger.ApiOperation)({
         summary: 'Batch assign/revoke user-branch permissions',
         description: `
@@ -252,22 +260,29 @@ Batch operation to assign or revoke user permissions to branches.
     _ts_metadata("design:returntype", Promise)
 ], UserPermissionController.prototype, "assignUserBranch", null);
 _ts_decorate([
-    (0, _common.Get)('user-branch'),
+    (0, _common.Post)('get-user-branch'),
+    (0, _nestjsshared.RequirePermission)(_nestjsshared.USER_PERMISSIONS.READ),
     (0, _swagger.ApiOperation)({
         summary: 'Get user branches',
         description: 'Returns all branches the user has access to.'
     }),
-    (0, _swagger.ApiQuery)({
-        name: 'userId',
-        required: true,
-        description: 'User ID to get branches for',
-        example: '550e8400-e29b-41d4-a716-446655440000'
+    (0, _swagger.ApiBody)({
+        schema: {
+            properties: {
+                userId: {
+                    type: 'string'
+                }
+            },
+            required: [
+                'userId'
+            ]
+        }
     }),
     (0, _swagger.ApiResponse)({
         status: 200,
         type: _userpermissiondto.UserBranchesResponseDto
     }),
-    _ts_param(0, (0, _common.Query)('userId')),
+    _ts_param(0, (0, _common.Body)('userId')),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [
         String
@@ -278,7 +293,7 @@ UserPermissionController = _ts_decorate([
     (0, _swagger.ApiTags)('User Permissions'),
     (0, _swagger.ApiBearerAuth)(),
     (0, _common.Controller)('administration/permissions'),
-    (0, _common.UseGuards)(_guards.JwtAuthGuard),
+    (0, _common.UseGuards)(_nestjsshared.JwtAuthGuard),
     _ts_param(0, (0, _common.Inject)(_userpermissionservice.UserPermissionService)),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [

package/cjs/controllers/user.controller.js

@@ -44,42 +44,151 @@ function _ts_param(paramIndex, decorator) {
     };
 }
 let UserController = class UserController extends (0, _classes.createApiController)(_userdto.CreateUserDto, _userdto.UpdateUserDto, _userdto.UserResponseDto, {
-    security: 'jwt'
+    security: {
+        insert: {
+            level: 'permission',
+            permissions: [
+                _classes.USER_PERMISSIONS.CREATE
+            ]
+        },
+        insertMany: {
+            level: 'permission',
+            permissions: [
+                _classes.USER_PERMISSIONS.CREATE
+            ]
+        },
+        getById: {
+            level: 'permission',
+            permissions: [
+                _classes.USER_PERMISSIONS.READ
+            ]
+        },
+        getAll: {
+            level: 'permission',
+            permissions: [
+                _classes.USER_PERMISSIONS.READ
+            ]
+        },
+        update: {
+            level: 'permission',
+            permissions: [
+                _classes.USER_PERMISSIONS.UPDATE
+            ]
+        },
+        updateMany: {
+            level: 'permission',
+            permissions: [
+                _classes.USER_PERMISSIONS.UPDATE
+            ]
+        },
+        delete: {
+            level: 'permission',
+            permissions: [
+                _classes.USER_PERMISSIONS.DELETE
+            ]
+        }
+    }
 }) {
-    // Custom Endpoints
-    /** Verify user email */ async verifyEmail(id) {
+    async getProfileWithExtras(id, user) {
+        const data = await this.service.getProfileWithExtras(id, user);
+        return {
+            success: true,
+            data
+        };
+    }
+    async verifyEmail(id) {
         await this.service.verifyEmail(id);
         return {
+            success: true,
             message: 'Email verified successfully'
         };
     }
-    /** Verify user phone */ async verifyPhone(id) {
+    async verifyPhone(id) {
         await this.service.verifyPhone(id);
         return {
+            success: true,
             message: 'Phone verified successfully'
         };
     }
-    /** Update user active status. When company feature enabled, updates permission isActive for logged user's company. */ async updateStatus(id, isActive, user) {
+    async updateStatus(id, isActive, user) {
         await this.service.updateStatus(id, isActive, user);
         return {
+            success: true,
             message: 'Status updated successfully'
         };
     }
-    /** Update user profile */ async profile(dto, user) {
+    async profile(dto, user) {
         const data = await this.service.profile(dto, user);
         return {
+            success: true,
             message: 'Profile updated successfully',
             data
         };
     }
+    async getProfileSections() {
+        const sections = await this.service.getProfileSections();
+        return {
+            success: true,
+            message: 'Profile sections retrieved successfully',
+            data: sections
+        };
+    }
+    async getProfileSectionData(id, sectionId, user) {
+        const data = await this.service.getProfileSectionData(id, sectionId, user);
+        return {
+            success: true,
+            message: 'Profile section data retrieved successfully',
+            data
+        };
+    }
+    async updateProfileSection(id, sectionId, data, user) {
+        await this.service.updateProfileSection(id, sectionId, data, user);
+        return {
+            success: true,
+            message: 'Section updated successfully'
+        };
+    }
+    async getProfileCompletion(id, user) {
+        const percentage = await this.service.getProfileCompletion(id, user);
+        return {
+            success: true,
+            message: 'Profile completion retrieved successfully',
+            data: {
+                completionPercentage: percentage
+            }
+        };
+    }
     constructor(service){
         super(service), _define_property(this, "service", void 0), this.service = service;
     }
 };
+_ts_decorate([
+    (0, _common.Post)(':id/profile-extras'),
+    (0, _common.UseGuards)(_guards.JwtAuthGuard),
+    (0, _swagger.ApiBearerAuth)(),
+    (0, _decorators.RequirePermission)(_classes.USER_PERMISSIONS.READ),
+    (0, _swagger.ApiOperation)({
+        summary: 'Get user profile with extras',
+        description: 'Returns user profile along with extra data (roles, permissions, etc.) if UserEnricher is provided.'
+    }),
+    (0, _swagger.ApiParam)({
+        name: 'id',
+        description: 'User ID'
+    }),
+    _ts_param(0, (0, _common.Param)('id')),
+    _ts_param(1, (0, _decorators.CurrentUser)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        String,
+        typeof _interfaces.ILoggedUserInfo === "undefined" ? Object : _interfaces.ILoggedUserInfo
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], UserController.prototype, "getProfileWithExtras", null);
 _ts_decorate([
     (0, _common.Post)(':id/verify-email'),
     (0, _common.UseGuards)(_guards.JwtAuthGuard),
     (0, _swagger.ApiBearerAuth)(),
+    (0, _decorators.RequirePermission)(_classes.USER_PERMISSIONS.UPDATE),
     (0, _swagger.ApiOperation)({
         summary: 'Verify user email'
     }),
@@ -98,6 +207,7 @@ _ts_decorate([
     (0, _common.Post)(':id/verify-phone'),
     (0, _common.UseGuards)(_guards.JwtAuthGuard),
     (0, _swagger.ApiBearerAuth)(),
+    (0, _decorators.RequirePermission)(_classes.USER_PERMISSIONS.UPDATE),
     (0, _swagger.ApiOperation)({
         summary: 'Verify user phone'
     }),
@@ -113,9 +223,10 @@ _ts_decorate([
     _ts_metadata("design:returntype", Promise)
 ], UserController.prototype, "verifyPhone", null);
 _ts_decorate([
-    (0, _common.Put)(':id/status'),
+    (0, _common.Post)(':id/status'),
     (0, _common.UseGuards)(_guards.JwtAuthGuard),
     (0, _swagger.ApiBearerAuth)(),
+    (0, _decorators.RequirePermission)(_classes.USER_PERMISSIONS.UPDATE),
     (0, _swagger.ApiOperation)({
         summary: 'Update user active status',
         description: 'Updates user active status. When company feature is enabled, updates the status for the current company context.'
@@ -161,6 +272,99 @@ _ts_decorate([
     ]),
     _ts_metadata("design:returntype", Promise)
 ], UserController.prototype, "profile", null);
+_ts_decorate([
+    (0, _common.Post)('profile-sections'),
+    (0, _common.UseGuards)(_guards.JwtAuthGuard),
+    (0, _swagger.ApiBearerAuth)(),
+    (0, _decorators.RequirePermission)(_classes.USER_PERMISSIONS.READ),
+    (0, _swagger.ApiOperation)({
+        summary: 'Get profile section definitions',
+        description: 'Returns available profile sections for multi-step profile (if enricher configured).'
+    }),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", []),
+    _ts_metadata("design:returntype", Promise)
+], UserController.prototype, "getProfileSections", null);
+_ts_decorate([
+    (0, _common.Post)(':id/profile-section/:sectionId'),
+    (0, _common.UseGuards)(_guards.JwtAuthGuard),
+    (0, _swagger.ApiBearerAuth)(),
+    (0, _decorators.RequirePermission)(_classes.USER_PERMISSIONS.READ),
+    (0, _swagger.ApiOperation)({
+        summary: 'Get profile section data',
+        description: 'Returns data for a specific profile section.'
+    }),
+    (0, _swagger.ApiParam)({
+        name: 'id',
+        description: 'User ID'
+    }),
+    (0, _swagger.ApiParam)({
+        name: 'sectionId',
+        description: 'Section identifier'
+    }),
+    _ts_param(0, (0, _common.Param)('id')),
+    _ts_param(1, (0, _common.Param)('sectionId')),
+    _ts_param(2, (0, _decorators.CurrentUser)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        String,
+        String,
+        typeof _interfaces.ILoggedUserInfo === "undefined" ? Object : _interfaces.ILoggedUserInfo
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], UserController.prototype, "getProfileSectionData", null);
+_ts_decorate([
+    (0, _common.Post)(':id/profile-section/:sectionId/update'),
+    (0, _common.UseGuards)(_guards.JwtAuthGuard),
+    (0, _swagger.ApiBearerAuth)(),
+    (0, _decorators.RequirePermission)(_classes.USER_PERMISSIONS.UPDATE),
+    (0, _swagger.ApiOperation)({
+        summary: 'Update profile section',
+        description: 'Updates a specific profile section data.'
+    }),
+    (0, _swagger.ApiParam)({
+        name: 'id',
+        description: 'User ID'
+    }),
+    (0, _swagger.ApiParam)({
+        name: 'sectionId',
+        description: 'Section identifier'
+    }),
+    _ts_param(0, (0, _common.Param)('id')),
+    _ts_param(1, (0, _common.Param)('sectionId')),
+    _ts_param(2, (0, _common.Body)()),
+    _ts_param(3, (0, _decorators.CurrentUser)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        String,
+        String,
+        typeof Record === "undefined" ? Object : Record,
+        typeof _interfaces.ILoggedUserInfo === "undefined" ? Object : _interfaces.ILoggedUserInfo
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], UserController.prototype, "updateProfileSection", null);
+_ts_decorate([
+    (0, _common.Post)(':id/profile-completion'),
+    (0, _common.UseGuards)(_guards.JwtAuthGuard),
+    (0, _swagger.ApiBearerAuth)(),
+    (0, _decorators.RequirePermission)(_classes.USER_PERMISSIONS.READ),
+    (0, _swagger.ApiOperation)({
+        summary: 'Get profile completion percentage',
+        description: 'Returns overall profile completion percentage.'
+    }),
+    (0, _swagger.ApiParam)({
+        name: 'id',
+        description: 'User ID'
+    }),
+    _ts_param(0, (0, _common.Param)('id')),
+    _ts_param(1, (0, _decorators.CurrentUser)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        String,
+        typeof _interfaces.ILoggedUserInfo === "undefined" ? Object : _interfaces.ILoggedUserInfo
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], UserController.prototype, "getProfileCompletion", null);
 UserController = _ts_decorate([
     (0, _swagger.ApiTags)('Users'),
     (0, _common.Controller)('administration/users'),

package/cjs/dtos/authentication.dto.js

@@ -27,12 +27,18 @@ _export(exports, {
     get CompanyWithBranchesDto () {
         return CompanyWithBranchesDto;
     },
+    get ForgotPasswordDto () {
+        return ForgotPasswordDto;
+    },
     get LoginDto () {
         return LoginDto;
     },
     get LoginResponseDto () {
         return LoginResponseDto;
     },
+    get LoginResponseRequiresEmailVerificationDto () {
+        return LoginResponseRequiresEmailVerificationDto;
+    },
     get MeResponseDto () {
         return MeResponseDto;
     },
@@ -45,6 +51,12 @@ _export(exports, {
     get RegistrationResponseDto () {
         return RegistrationResponseDto;
     },
+    get ResendVerificationDto () {
+        return ResendVerificationDto;
+    },
+    get ResetPasswordDto () {
+        return ResetPasswordDto;
+    },
     get SelectDto () {
         return SelectDto;
     },
@@ -53,10 +65,14 @@ _export(exports, {
     },
     get UserInfoDto () {
         return UserInfoDto;
+    },
+    get VerifyEmailDto () {
+        return VerifyEmailDto;
     }
 });
 const _swagger = require("@nestjs/swagger");
 const _classvalidator = require("class-validator");
+const _passwordvalidator = require("../validators/password.validator");
 function _define_property(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
@@ -96,12 +112,12 @@ _ts_decorate([
 ], LoginDto.prototype, "email", void 0);
 _ts_decorate([
     (0, _swagger.ApiProperty)({
-        example: '123456',
-        description: 'User password (min 6 chars)'
+        example: 'SecureP@ss1',
+        description: 'User password'
     }),
     (0, _classvalidator.IsString)(),
     (0, _classvalidator.IsNotEmpty)(),
-    (0, _classvalidator.MinLength)(6),
+    (0, _classvalidator.MaxLength)(128),
     _ts_metadata("design:type", String)
 ], LoginDto.prototype, "password", void 0);
 let RegistrationDto = class RegistrationDto {
@@ -140,13 +156,13 @@ _ts_decorate([
 ], RegistrationDto.prototype, "email", void 0);
 _ts_decorate([
     (0, _swagger.ApiProperty)({
-        example: 'strongPassword123',
-        description: 'Password (min 6 chars)'
+        example: 'StrongP@ss123',
+        description: 'Password (min 8 chars, requires uppercase, lowercase, number, special char)'
     }),
     (0, _classvalidator.IsNotEmpty)(),
     (0, _classvalidator.IsString)(),
-    (0, _classvalidator.MinLength)(6),
-    (0, _classvalidator.MaxLength)(60),
+    (0, _passwordvalidator.IsStrongPassword)(),
+    (0, _classvalidator.MaxLength)(128),
     _ts_metadata("design:type", String)
 ], RegistrationDto.prototype, "password", void 0);
 _ts_decorate([
@@ -207,6 +223,7 @@ _ts_decorate([
     }),
     (0, _classvalidator.IsOptional)(),
     (0, _classvalidator.IsString)(),
+    (0, _classvalidator.MaxLength)(500),
     _ts_metadata("design:type", String)
 ], RegistrationDto.prototype, "newCompanyAddress", void 0);
 let RefreshTokenDto = class RefreshTokenDto {
@@ -236,16 +253,17 @@ _ts_decorate([
     }),
     (0, _classvalidator.IsString)(),
     (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.MaxLength)(128),
     _ts_metadata("design:type", String)
 ], ChangePasswordDto.prototype, "currentPassword", void 0);
 _ts_decorate([
     (0, _swagger.ApiProperty)({
-        example: 'newPassword456',
-        description: 'New password (min 6 chars)'
+        example: 'NewP@ssword456',
+        description: 'New password (min 8 chars, requires uppercase, lowercase, number, special char)'
     }),
     (0, _classvalidator.IsString)(),
     (0, _classvalidator.IsNotEmpty)(),
-    (0, _classvalidator.MinLength)(6),
+    (0, _passwordvalidator.IsStrongPassword)(),
     _ts_metadata("design:type", String)
 ], ChangePasswordDto.prototype, "newPassword", void 0);
 let SelectDto = class SelectDto {
@@ -558,16 +576,17 @@ let RegistrationResponseDto = class RegistrationResponseDto {
         _define_property(this, "company", void 0);
         _define_property(this, "branch", void 0);
         _define_property(this, "companyFeatureEnabled", void 0);
+        _define_property(this, "requiresEmailVerification", void 0);
     }
 };
 _ts_decorate([
-    (0, _swagger.ApiProperty)({
+    (0, _swagger.ApiPropertyOptional)({
         example: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...'
     }),
     _ts_metadata("design:type", String)
 ], RegistrationResponseDto.prototype, "accessToken", void 0);
 _ts_decorate([
-    (0, _swagger.ApiProperty)({
+    (0, _swagger.ApiPropertyOptional)({
         example: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...'
     }),
     _ts_metadata("design:type", String)
@@ -594,12 +613,19 @@ _ts_decorate([
     _ts_metadata("design:type", typeof BranchInfoDto === "undefined" ? Object : BranchInfoDto)
 ], RegistrationResponseDto.prototype, "branch", void 0);
 _ts_decorate([
-    (0, _swagger.ApiProperty)({
+    (0, _swagger.ApiPropertyOptional)({
         example: true,
         description: 'Whether company feature is enabled'
     }),
     _ts_metadata("design:type", Boolean)
 ], RegistrationResponseDto.prototype, "companyFeatureEnabled", void 0);
+_ts_decorate([
+    (0, _swagger.ApiPropertyOptional)({
+        example: true,
+        description: 'Whether email verification is required'
+    }),
+    _ts_metadata("design:type", Boolean)
+], RegistrationResponseDto.prototype, "requiresEmailVerification", void 0);
 let MeResponseDto = class MeResponseDto {
     constructor(){
         _define_property(this, "user", void 0);
@@ -674,3 +700,83 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", Array)
 ], CompanySelectionResponseDto.prototype, "companies", void 0);
+let LoginResponseRequiresEmailVerificationDto = class LoginResponseRequiresEmailVerificationDto {
+    constructor(){
+        _define_property(this, "requiresEmailVerification", void 0);
+        _define_property(this, "email", void 0);
+        _define_property(this, "message", void 0);
+    }
+};
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        example: true
+    }),
+    _ts_metadata("design:type", Boolean)
+], LoginResponseRequiresEmailVerificationDto.prototype, "requiresEmailVerification", void 0);
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        example: 'john@example.com'
+    }),
+    _ts_metadata("design:type", String)
+], LoginResponseRequiresEmailVerificationDto.prototype, "email", void 0);
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        example: 'Please verify your email address before logging in.'
+    }),
+    _ts_metadata("design:type", String)
+], LoginResponseRequiresEmailVerificationDto.prototype, "message", void 0);
+let ForgotPasswordDto = class ForgotPasswordDto {
+    constructor(){
+        _define_property(this, "email", void 0);
+    }
+};
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        example: 'john@example.com',
+        description: 'Email address to send reset link to'
+    }),
+    (0, _classvalidator.IsEmail)(),
+    (0, _classvalidator.IsNotEmpty)(),
+    _ts_metadata("design:type", String)
+], ForgotPasswordDto.prototype, "email", void 0);
+let ResetPasswordDto = class ResetPasswordDto {
+    constructor(){
+        _define_property(this, "token", void 0);
+        _define_property(this, "newPassword", void 0);
+    }
+};
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        example: 'a1b2c3d4e5f6...',
+        description: 'Password reset token from email'
+    }),
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsNotEmpty)(),
+    _ts_metadata("design:type", String)
+], ResetPasswordDto.prototype, "token", void 0);
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        example: 'NewSecureP@ss123',
+        description: 'New password (min 8 chars, requires uppercase, lowercase, number, special char)'
+    }),
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _passwordvalidator.IsStrongPassword)(),
+    _ts_metadata("design:type", String)
+], ResetPasswordDto.prototype, "newPassword", void 0);
+let VerifyEmailDto = class VerifyEmailDto {
+    constructor(){
+        _define_property(this, "token", void 0);
+    }
+};
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        example: 'a1b2c3d4e5f6...',
+        description: 'Email verification token from email'
+    }),
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsNotEmpty)(),
+    _ts_metadata("design:type", String)
+], VerifyEmailDto.prototype, "token", void 0);
+let ResendVerificationDto = class ResendVerificationDto extends ForgotPasswordDto {
+};