@gigapay-dev/contracts 1.8.6 → 3.0.0

package/README.md

@@ -0,0 +1 @@
+# Contracts

package/build/domains/admin/index.d.ts

@@ -0,0 +1,150 @@
+import { z } from "zod";
+export declare const AdminDashboardSummarySchema: z.ZodObject<{
+    usersTotal: z.ZodNumber;
+    ordersPending: z.ZodNumber;
+    ordersSucceeded: z.ZodNumber;
+    outboxPending: z.ZodNumber;
+    outboxOldestAgeSeconds: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const GetDashboardSummaryEndpoint: {
+    readonly method: "GET";
+    readonly path: "/api/admin/dashboard/summary";
+    readonly response: z.ZodObject<{
+        usersTotal: z.ZodNumber;
+        ordersPending: z.ZodNumber;
+        ordersSucceeded: z.ZodNumber;
+        outboxPending: z.ZodNumber;
+        outboxOldestAgeSeconds: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>;
+    readonly requiresAuth: true;
+    readonly requiresAdmin: true;
+};
+export declare const DesslyTxIdParamSchema: z.ZodObject<{
+    txId: z.ZodString;
+}, z.core.$strip>;
+export declare const DesslyBalanceEndpoint: {
+    readonly method: "GET";
+    readonly path: "/api/admin/dessly/balance";
+    readonly response: z.ZodObject<{
+        balance: z.ZodString;
+    }, z.core.$strip>;
+    readonly requiresAuth: true;
+    readonly requiresAdmin: true;
+};
+export declare const DesslySteamGamesEndpoint: {
+    readonly method: "GET";
+    readonly path: "/api/admin/dessly/steam/games";
+    readonly response: z.ZodObject<{
+        games: z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            appid: z.ZodNumber;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    readonly requiresAuth: true;
+    readonly requiresAdmin: true;
+};
+export declare const DesslyMobileGamesEndpoint: {
+    readonly method: "GET";
+    readonly path: "/api/admin/dessly/mobile/games";
+    readonly response: z.ZodObject<{
+        games: z.ZodArray<z.ZodObject<{
+            id: z.ZodNumber;
+            name: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    readonly requiresAuth: true;
+    readonly requiresAdmin: true;
+};
+export declare const DesslyTransactionsEndpoint: {
+    readonly method: "GET";
+    readonly path: "/api/admin/dessly/transactions";
+    readonly query: z.ZodObject<{
+        page: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+    }, z.core.$strip>;
+    readonly response: z.ZodObject<{
+        transactions: z.ZodArray<z.ZodObject<{
+            transaction_id: z.ZodString;
+            status: z.ZodString;
+            amount: z.ZodString;
+            commission: z.ZodString;
+            final_amount: z.ZodString;
+            created_at: z.ZodString;
+            updated_at: z.ZodString;
+            description: z.ZodString;
+        }, z.core.$strip>>;
+        count: z.ZodNumber;
+    }, z.core.$strip>;
+    readonly requiresAuth: true;
+    readonly requiresAdmin: true;
+};
+export declare const AdminEndpoints: {
+    readonly dashboardSummary: {
+        readonly method: "GET";
+        readonly path: "/api/admin/dashboard/summary";
+        readonly response: z.ZodObject<{
+            usersTotal: z.ZodNumber;
+            ordersPending: z.ZodNumber;
+            ordersSucceeded: z.ZodNumber;
+            outboxPending: z.ZodNumber;
+            outboxOldestAgeSeconds: z.ZodNullable<z.ZodNumber>;
+        }, z.core.$strip>;
+        readonly requiresAuth: true;
+        readonly requiresAdmin: true;
+    };
+    readonly desslyBalance: {
+        readonly method: "GET";
+        readonly path: "/api/admin/dessly/balance";
+        readonly response: z.ZodObject<{
+            balance: z.ZodString;
+        }, z.core.$strip>;
+        readonly requiresAuth: true;
+        readonly requiresAdmin: true;
+    };
+    readonly desslySteamGames: {
+        readonly method: "GET";
+        readonly path: "/api/admin/dessly/steam/games";
+        readonly response: z.ZodObject<{
+            games: z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                appid: z.ZodNumber;
+            }, z.core.$strip>>;
+        }, z.core.$strip>;
+        readonly requiresAuth: true;
+        readonly requiresAdmin: true;
+    };
+    readonly desslyMobileGames: {
+        readonly method: "GET";
+        readonly path: "/api/admin/dessly/mobile/games";
+        readonly response: z.ZodObject<{
+            games: z.ZodArray<z.ZodObject<{
+                id: z.ZodNumber;
+                name: z.ZodString;
+            }, z.core.$strip>>;
+        }, z.core.$strip>;
+        readonly requiresAuth: true;
+        readonly requiresAdmin: true;
+    };
+    readonly desslyTransactions: {
+        readonly method: "GET";
+        readonly path: "/api/admin/dessly/transactions";
+        readonly query: z.ZodObject<{
+            page: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+        }, z.core.$strip>;
+        readonly response: z.ZodObject<{
+            transactions: z.ZodArray<z.ZodObject<{
+                transaction_id: z.ZodString;
+                status: z.ZodString;
+                amount: z.ZodString;
+                commission: z.ZodString;
+                final_amount: z.ZodString;
+                created_at: z.ZodString;
+                updated_at: z.ZodString;
+                description: z.ZodString;
+            }, z.core.$strip>>;
+            count: z.ZodNumber;
+        }, z.core.$strip>;
+        readonly requiresAuth: true;
+        readonly requiresAdmin: true;
+    };
+};
+//# sourceMappingURL=index.d.ts.map

package/build/domains/admin/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/domains/admin/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,2BAA2B;;;;;;iBAMtC,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;CAMH,CAAC;AAEtC,eAAO,MAAM,qBAAqB;;iBAAwC,CAAC;AAE3E,eAAO,MAAM,qBAAqB;;;;;;;;CAMG,CAAC;AAEtC,eAAO,MAAM,wBAAwB;;;;;;;;;;;CAQA,CAAC;AAEtC,eAAO,MAAM,yBAAyB;;;;;;;;;;;CAQD,CAAC;AAEtC,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;CAqBF,CAAC;AAEtC,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAMjB,CAAC"}

package/build/domains/admin/index.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminEndpoints = exports.DesslyTransactionsEndpoint = exports.DesslyMobileGamesEndpoint = exports.DesslySteamGamesEndpoint = exports.DesslyBalanceEndpoint = exports.DesslyTxIdParamSchema = exports.GetDashboardSummaryEndpoint = exports.AdminDashboardSummarySchema = void 0;
+const zod_1 = require("zod");
+exports.AdminDashboardSummarySchema = zod_1.z.object({
+    usersTotal: zod_1.z.number().int().nonnegative(),
+    ordersPending: zod_1.z.number().int().nonnegative(),
+    ordersSucceeded: zod_1.z.number().int().nonnegative(),
+    outboxPending: zod_1.z.number().int().nonnegative(),
+    outboxOldestAgeSeconds: zod_1.z.number().nullable(),
+});
+exports.GetDashboardSummaryEndpoint = {
+    method: "GET",
+    path: "/api/admin/dashboard/summary",
+    response: exports.AdminDashboardSummarySchema,
+    requiresAuth: true,
+    requiresAdmin: true,
+};
+exports.DesslyTxIdParamSchema = zod_1.z.object({ txId: zod_1.z.string().min(1) });
+exports.DesslyBalanceEndpoint = {
+    method: "GET",
+    path: "/api/admin/dessly/balance",
+    response: zod_1.z.object({ balance: zod_1.z.string() }),
+    requiresAuth: true,
+    requiresAdmin: true,
+};
+exports.DesslySteamGamesEndpoint = {
+    method: "GET",
+    path: "/api/admin/dessly/steam/games",
+    response: zod_1.z.object({
+        games: zod_1.z.array(zod_1.z.object({ name: zod_1.z.string(), appid: zod_1.z.number().int() })),
+    }),
+    requiresAuth: true,
+    requiresAdmin: true,
+};
+exports.DesslyMobileGamesEndpoint = {
+    method: "GET",
+    path: "/api/admin/dessly/mobile/games",
+    response: zod_1.z.object({
+        games: zod_1.z.array(zod_1.z.object({ id: zod_1.z.number().int(), name: zod_1.z.string() })),
+    }),
+    requiresAuth: true,
+    requiresAdmin: true,
+};
+exports.DesslyTransactionsEndpoint = {
+    method: "GET",
+    path: "/api/admin/dessly/transactions",
+    query: zod_1.z.object({ page: zod_1.z.coerce.number().int().positive().optional() }),
+    response: zod_1.z.object({
+        transactions: zod_1.z.array(zod_1.z.object({
+            transaction_id: zod_1.z.string(),
+            status: zod_1.z.string(),
+            amount: zod_1.z.string(),
+            commission: zod_1.z.string(),
+            final_amount: zod_1.z.string(),
+            created_at: zod_1.z.string(),
+            updated_at: zod_1.z.string(),
+            description: zod_1.z.string(),
+        })),
+        count: zod_1.z.number().int().nonnegative(),
+    }),
+    requiresAuth: true,
+    requiresAdmin: true,
+};
+exports.AdminEndpoints = {
+    dashboardSummary: exports.GetDashboardSummaryEndpoint,
+    desslyBalance: exports.DesslyBalanceEndpoint,
+    desslySteamGames: exports.DesslySteamGamesEndpoint,
+    desslyMobileGames: exports.DesslyMobileGamesEndpoint,
+    desslyTransactions: exports.DesslyTransactionsEndpoint,
+};
+//# sourceMappingURL=index.js.map

package/build/domains/admin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/domains/admin/index.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAGX,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IACnD,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC7C,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC/C,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC7C,sBAAsB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAEU,QAAA,2BAA2B,GAAG;IAC1C,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,8BAA8B;IACpC,QAAQ,EAAE,mCAA2B;IACrC,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,IAAI;CACiB,CAAC;AAEzB,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAE9D,QAAA,qBAAqB,GAAG;IACpC,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,2BAA2B;IACjC,QAAQ,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC3C,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,IAAI;CACiB,CAAC;AAEzB,QAAA,wBAAwB,GAAG;IACvC,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,+BAA+B;IACrC,QAAQ,EAAE,OAAC,CAAC,MAAM,CAAC;QAClB,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;KACvE,CAAC;IACF,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,IAAI;CACiB,CAAC;AAEzB,QAAA,yBAAyB,GAAG;IACxC,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,gCAAgC;IACtC,QAAQ,EAAE,OAAC,CAAC,MAAM,CAAC;QAClB,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;KACpE,CAAC;IACF,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,IAAI;CACiB,CAAC;AAEzB,QAAA,0BAA0B,GAAG;IACzC,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,gCAAgC;IACtC,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IACxE,QAAQ,EAAE,OAAC,CAAC,MAAM,CAAC;QAClB,YAAY,EAAE,OAAC,CAAC,KAAK,CACpB,OAAC,CAAC,MAAM,CAAC;YACR,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE;YAC1B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;YAClB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;YAClB,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE;YACtB,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE;YACxB,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE;YACtB,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE;YACtB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;SACvB,CAAC,CACF;QACD,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,IAAI;CACiB,CAAC;AAEzB,QAAA,cAAc,GAAG;IAC7B,gBAAgB,EAAE,mCAA2B;IAC7C,aAAa,EAAE,6BAAqB;IACpC,gBAAgB,EAAE,gCAAwB;IAC1C,iBAAiB,EAAE,iCAAyB;IAC5C,kBAAkB,EAAE,kCAA0B;CACrC,CAAC"}

package/build/domains/auth/commands.d.ts

@@ -0,0 +1,294 @@
+import { z } from "zod";
+export declare const RegisterRequestSchema: z.ZodObject<{
+    email: z.ZodEmail;
+    password: z.ZodString;
+    utmSource: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type RegisterRequest = z.infer<typeof RegisterRequestSchema>;
+export declare const RegisterResponseSchema: z.ZodObject<{
+    userId: z.ZodNumber;
+}, z.core.$strip>;
+export type RegisterResponse = z.infer<typeof RegisterResponseSchema>;
+export declare const RegisterEndpoint: {
+    readonly method: "POST";
+    readonly path: "/api/auth/register";
+    readonly request: z.ZodObject<{
+        email: z.ZodEmail;
+        password: z.ZodString;
+        utmSource: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    readonly response: z.ZodObject<{
+        userId: z.ZodNumber;
+    }, z.core.$strip>;
+    readonly requiresCaptcha: "register";
+    readonly rateLimit: {
+        readonly limit: 3;
+        readonly ttlSec: 3600;
+    };
+};
+export declare const LoginRequestSchema: z.ZodObject<{
+    email: z.ZodEmail;
+    password: z.ZodString;
+    totpCode: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type LoginRequest = z.infer<typeof LoginRequestSchema>;
+export declare const LoginEndpoint: {
+    readonly method: "POST";
+    readonly path: "/api/auth/login";
+    readonly request: z.ZodObject<{
+        email: z.ZodEmail;
+        password: z.ZodString;
+        totpCode: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    readonly response: z.ZodObject<{
+        accessToken: z.ZodString;
+    }, z.core.$strip>;
+    readonly rateLimit: {
+        readonly limit: 5;
+        readonly ttlSec: 900;
+    };
+};
+export declare const RefreshEndpoint: {
+    readonly method: "POST";
+    readonly path: "/api/auth/refresh";
+    readonly response: z.ZodObject<{
+        accessToken: z.ZodString;
+    }, z.core.$strip>;
+    readonly rateLimit: {
+        readonly limit: 30;
+        readonly ttlSec: 60;
+    };
+};
+export declare const LogoutEndpoint: {
+    readonly method: "POST";
+    readonly path: "/api/auth/logout";
+    readonly response: z.ZodObject<{
+        ok: z.ZodLiteral<true>;
+    }, z.core.$strip>;
+    readonly requiresAuth: true;
+};
+export declare const LogoutAllEndpoint: {
+    readonly method: "POST";
+    readonly path: "/api/auth/logout-all";
+    readonly response: z.ZodObject<{
+        ok: z.ZodLiteral<true>;
+    }, z.core.$strip>;
+    readonly requiresAuth: true;
+};
+export declare const RevokeSessionParamsSchema: z.ZodObject<{
+    sid: z.ZodString;
+}, z.core.$strip>;
+export declare const RevokeSessionEndpoint: {
+    readonly method: "DELETE";
+    readonly path: "/api/auth/sessions/:sid";
+    readonly params: z.ZodObject<{
+        sid: z.ZodString;
+    }, z.core.$strip>;
+    readonly response: z.ZodObject<{
+        ok: z.ZodLiteral<true>;
+    }, z.core.$strip>;
+    readonly requiresAuth: true;
+};
+export declare const ForgotPasswordRequestSchema: z.ZodObject<{
+    email: z.ZodEmail;
+}, z.core.$strip>;
+export declare const ForgotPasswordEndpoint: {
+    readonly method: "POST";
+    readonly path: "/api/auth/forgot-password";
+    readonly request: z.ZodObject<{
+        email: z.ZodEmail;
+    }, z.core.$strip>;
+    readonly response: z.ZodObject<{
+        ok: z.ZodLiteral<true>;
+    }, z.core.$strip>;
+    readonly requiresCaptcha: "forgot_password";
+    readonly rateLimit: {
+        readonly limit: 3;
+        readonly ttlSec: 3600;
+    };
+};
+export declare const ConfirmPasswordResetRequestSchema: z.ZodObject<{
+    code: z.ZodString;
+    password: z.ZodString;
+}, z.core.$strip>;
+export declare const ConfirmPasswordResetEndpoint: {
+    readonly method: "POST";
+    readonly path: "/api/auth/reset-password";
+    readonly request: z.ZodObject<{
+        code: z.ZodString;
+        password: z.ZodString;
+    }, z.core.$strip>;
+    readonly response: z.ZodObject<{
+        ok: z.ZodLiteral<true>;
+    }, z.core.$strip>;
+};
+export declare const ConfirmEmailRequestSchema: z.ZodObject<{
+    code: z.ZodString;
+}, z.core.$strip>;
+export declare const ConfirmEmailEndpoint: {
+    readonly method: "POST";
+    readonly path: "/api/auth/confirm-email";
+    readonly request: z.ZodObject<{
+        code: z.ZodString;
+    }, z.core.$strip>;
+    readonly response: z.ZodObject<{
+        ok: z.ZodLiteral<true>;
+    }, z.core.$strip>;
+};
+export declare const EnableTotpResponseSchema: z.ZodObject<{
+    otpAuthUri: z.ZodString;
+    secret: z.ZodString;
+}, z.core.$strip>;
+export declare const EnableTotpEndpoint: {
+    readonly method: "POST";
+    readonly path: "/api/auth/totp/enable";
+    readonly response: z.ZodObject<{
+        otpAuthUri: z.ZodString;
+        secret: z.ZodString;
+    }, z.core.$strip>;
+    readonly requiresAuth: true;
+};
+export declare const VerifyTotpRequestSchema: z.ZodObject<{
+    code: z.ZodString;
+}, z.core.$strip>;
+export declare const VerifyTotpEndpoint: {
+    readonly method: "POST";
+    readonly path: "/api/auth/totp/verify";
+    readonly request: z.ZodObject<{
+        code: z.ZodString;
+    }, z.core.$strip>;
+    readonly response: z.ZodObject<{
+        ok: z.ZodLiteral<true>;
+    }, z.core.$strip>;
+    readonly requiresAuth: true;
+};
+export declare const AuthCommands: {
+    readonly register: {
+        readonly method: "POST";
+        readonly path: "/api/auth/register";
+        readonly request: z.ZodObject<{
+            email: z.ZodEmail;
+            password: z.ZodString;
+            utmSource: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        readonly response: z.ZodObject<{
+            userId: z.ZodNumber;
+        }, z.core.$strip>;
+        readonly requiresCaptcha: "register";
+        readonly rateLimit: {
+            readonly limit: 3;
+            readonly ttlSec: 3600;
+        };
+    };
+    readonly login: {
+        readonly method: "POST";
+        readonly path: "/api/auth/login";
+        readonly request: z.ZodObject<{
+            email: z.ZodEmail;
+            password: z.ZodString;
+            totpCode: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        readonly response: z.ZodObject<{
+            accessToken: z.ZodString;
+        }, z.core.$strip>;
+        readonly rateLimit: {
+            readonly limit: 5;
+            readonly ttlSec: 900;
+        };
+    };
+    readonly refresh: {
+        readonly method: "POST";
+        readonly path: "/api/auth/refresh";
+        readonly response: z.ZodObject<{
+            accessToken: z.ZodString;
+        }, z.core.$strip>;
+        readonly rateLimit: {
+            readonly limit: 30;
+            readonly ttlSec: 60;
+        };
+    };
+    readonly logout: {
+        readonly method: "POST";
+        readonly path: "/api/auth/logout";
+        readonly response: z.ZodObject<{
+            ok: z.ZodLiteral<true>;
+        }, z.core.$strip>;
+        readonly requiresAuth: true;
+    };
+    readonly logoutAll: {
+        readonly method: "POST";
+        readonly path: "/api/auth/logout-all";
+        readonly response: z.ZodObject<{
+            ok: z.ZodLiteral<true>;
+        }, z.core.$strip>;
+        readonly requiresAuth: true;
+    };
+    readonly revokeSession: {
+        readonly method: "DELETE";
+        readonly path: "/api/auth/sessions/:sid";
+        readonly params: z.ZodObject<{
+            sid: z.ZodString;
+        }, z.core.$strip>;
+        readonly response: z.ZodObject<{
+            ok: z.ZodLiteral<true>;
+        }, z.core.$strip>;
+        readonly requiresAuth: true;
+    };
+    readonly forgotPassword: {
+        readonly method: "POST";
+        readonly path: "/api/auth/forgot-password";
+        readonly request: z.ZodObject<{
+            email: z.ZodEmail;
+        }, z.core.$strip>;
+        readonly response: z.ZodObject<{
+            ok: z.ZodLiteral<true>;
+        }, z.core.$strip>;
+        readonly requiresCaptcha: "forgot_password";
+        readonly rateLimit: {
+            readonly limit: 3;
+            readonly ttlSec: 3600;
+        };
+    };
+    readonly confirmPasswordReset: {
+        readonly method: "POST";
+        readonly path: "/api/auth/reset-password";
+        readonly request: z.ZodObject<{
+            code: z.ZodString;
+            password: z.ZodString;
+        }, z.core.$strip>;
+        readonly response: z.ZodObject<{
+            ok: z.ZodLiteral<true>;
+        }, z.core.$strip>;
+    };
+    readonly confirmEmail: {
+        readonly method: "POST";
+        readonly path: "/api/auth/confirm-email";
+        readonly request: z.ZodObject<{
+            code: z.ZodString;
+        }, z.core.$strip>;
+        readonly response: z.ZodObject<{
+            ok: z.ZodLiteral<true>;
+        }, z.core.$strip>;
+    };
+    readonly enableTotp: {
+        readonly method: "POST";
+        readonly path: "/api/auth/totp/enable";
+        readonly response: z.ZodObject<{
+            otpAuthUri: z.ZodString;
+            secret: z.ZodString;
+        }, z.core.$strip>;
+        readonly requiresAuth: true;
+    };
+    readonly verifyTotp: {
+        readonly method: "POST";
+        readonly path: "/api/auth/totp/verify";
+        readonly request: z.ZodObject<{
+            code: z.ZodString;
+        }, z.core.$strip>;
+        readonly response: z.ZodObject<{
+            ok: z.ZodLiteral<true>;
+        }, z.core.$strip>;
+        readonly requiresAuth: true;
+    };
+};
+//# sourceMappingURL=commands.d.ts.map

package/build/domains/auth/commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../../src/domains/auth/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,qBAAqB;;;;iBAIhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,sBAAsB;;iBAAoD,CAAC;AACxF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;CAOQ,CAAC;AAEtC,eAAO,MAAM,kBAAkB;;;;iBAI7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;CAMW,CAAC;AAEtC,eAAO,MAAM,eAAe;;;;;;;;;;CAKS,CAAC;AAEtC,eAAO,MAAM,cAAc;;;;;;;CAKU,CAAC;AAEtC,eAAO,MAAM,iBAAiB;;;;;;;CAKO,CAAC;AAEtC,eAAO,MAAM,yBAAyB;;iBAAuC,CAAC;AAC9E,eAAO,MAAM,qBAAqB;;;;;;;;;;CAMG,CAAC;AAEtC,eAAO,MAAM,2BAA2B;;iBAAiC,CAAC;AAC1E,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;CAOE,CAAC;AAEtC,eAAO,MAAM,iCAAiC;;;iBAG5C,CAAC;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;CAKJ,CAAC;AAEtC,eAAO,MAAM,yBAAyB;;iBAAwC,CAAC;AAC/E,eAAO,MAAM,oBAAoB;;;;;;;;;CAKI,CAAC;AAEtC,eAAO,MAAM,wBAAwB;;;iBAGnC,CAAC;AACH,eAAO,MAAM,kBAAkB;;;;;;;;CAKM,CAAC;AAEtC,eAAO,MAAM,uBAAuB;;iBAAkD,CAAC;AACvF,eAAO,MAAM,kBAAkB;;;;;;;;;;CAMM,CAAC;AAEtC,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYf,CAAC"}

package/build/domains/auth/commands.js

@@ -0,0 +1,116 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthCommands = exports.VerifyTotpEndpoint = exports.VerifyTotpRequestSchema = exports.EnableTotpEndpoint = exports.EnableTotpResponseSchema = exports.ConfirmEmailEndpoint = exports.ConfirmEmailRequestSchema = exports.ConfirmPasswordResetEndpoint = exports.ConfirmPasswordResetRequestSchema = exports.ForgotPasswordEndpoint = exports.ForgotPasswordRequestSchema = exports.RevokeSessionEndpoint = exports.RevokeSessionParamsSchema = exports.LogoutAllEndpoint = exports.LogoutEndpoint = exports.RefreshEndpoint = exports.LoginEndpoint = exports.LoginRequestSchema = exports.RegisterEndpoint = exports.RegisterResponseSchema = exports.RegisterRequestSchema = void 0;
+const zod_1 = require("zod");
+const common_1 = require("../../shared/common");
+const dtos_1 = require("./dtos");
+exports.RegisterRequestSchema = zod_1.z.object({
+    email: zod_1.z.email(),
+    password: zod_1.z.string().min(8).max(128),
+    utmSource: zod_1.z.string().max(32).optional(),
+});
+exports.RegisterResponseSchema = zod_1.z.object({ userId: zod_1.z.number().int().positive() });
+exports.RegisterEndpoint = {
+    method: "POST",
+    path: "/api/auth/register",
+    request: exports.RegisterRequestSchema,
+    response: exports.RegisterResponseSchema,
+    requiresCaptcha: "register",
+    rateLimit: { limit: 3, ttlSec: 3600 },
+};
+exports.LoginRequestSchema = zod_1.z.object({
+    email: zod_1.z.email(),
+    password: zod_1.z.string().min(1),
+    totpCode: zod_1.z.string().regex(/^\d{6}$/).optional(),
+});
+exports.LoginEndpoint = {
+    method: "POST",
+    path: "/api/auth/login",
+    request: exports.LoginRequestSchema,
+    response: dtos_1.TokensResponseSchema,
+    rateLimit: { limit: 5, ttlSec: 900 },
+};
+exports.RefreshEndpoint = {
+    method: "POST",
+    path: "/api/auth/refresh",
+    response: dtos_1.TokensResponseSchema,
+    rateLimit: { limit: 30, ttlSec: 60 },
+};
+exports.LogoutEndpoint = {
+    method: "POST",
+    path: "/api/auth/logout",
+    response: common_1.SuccessResponseSchema,
+    requiresAuth: true,
+};
+exports.LogoutAllEndpoint = {
+    method: "POST",
+    path: "/api/auth/logout-all",
+    response: common_1.SuccessResponseSchema,
+    requiresAuth: true,
+};
+exports.RevokeSessionParamsSchema = zod_1.z.object({ sid: zod_1.z.string().min(1) });
+exports.RevokeSessionEndpoint = {
+    method: "DELETE",
+    path: "/api/auth/sessions/:sid",
+    params: exports.RevokeSessionParamsSchema,
+    response: common_1.SuccessResponseSchema,
+    requiresAuth: true,
+};
+exports.ForgotPasswordRequestSchema = zod_1.z.object({ email: zod_1.z.email() });
+exports.ForgotPasswordEndpoint = {
+    method: "POST",
+    path: "/api/auth/forgot-password",
+    request: exports.ForgotPasswordRequestSchema,
+    response: common_1.SuccessResponseSchema,
+    requiresCaptcha: "forgot_password",
+    rateLimit: { limit: 3, ttlSec: 3600 },
+};
+exports.ConfirmPasswordResetRequestSchema = zod_1.z.object({
+    code: zod_1.z.string().min(1),
+    password: zod_1.z.string().min(8).max(128),
+});
+exports.ConfirmPasswordResetEndpoint = {
+    method: "POST",
+    path: "/api/auth/reset-password",
+    request: exports.ConfirmPasswordResetRequestSchema,
+    response: common_1.SuccessResponseSchema,
+};
+exports.ConfirmEmailRequestSchema = zod_1.z.object({ code: zod_1.z.string().min(1) });
+exports.ConfirmEmailEndpoint = {
+    method: "POST",
+    path: "/api/auth/confirm-email",
+    request: exports.ConfirmEmailRequestSchema,
+    response: common_1.SuccessResponseSchema,
+};
+exports.EnableTotpResponseSchema = zod_1.z.object({
+    otpAuthUri: zod_1.z.string(),
+    secret: zod_1.z.string(),
+});
+exports.EnableTotpEndpoint = {
+    method: "POST",
+    path: "/api/auth/totp/enable",
+    response: exports.EnableTotpResponseSchema,
+    requiresAuth: true,
+};
+exports.VerifyTotpRequestSchema = zod_1.z.object({ code: zod_1.z.string().regex(/^\d{6}$/) });
+exports.VerifyTotpEndpoint = {
+    method: "POST",
+    path: "/api/auth/totp/verify",
+    request: exports.VerifyTotpRequestSchema,
+    response: common_1.SuccessResponseSchema,
+    requiresAuth: true,
+};
+exports.AuthCommands = {
+    register: exports.RegisterEndpoint,
+    login: exports.LoginEndpoint,
+    refresh: exports.RefreshEndpoint,
+    logout: exports.LogoutEndpoint,
+    logoutAll: exports.LogoutAllEndpoint,
+    revokeSession: exports.RevokeSessionEndpoint,
+    forgotPassword: exports.ForgotPasswordEndpoint,
+    confirmPasswordReset: exports.ConfirmPasswordResetEndpoint,
+    confirmEmail: exports.ConfirmEmailEndpoint,
+    enableTotp: exports.EnableTotpEndpoint,
+    verifyTotp: exports.VerifyTotpEndpoint,
+};
+//# sourceMappingURL=commands.js.map

package/build/domains/auth/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../../src/domains/auth/commands.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,gDAA4D;AAC5D,iCAA8C;AAEjC,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,KAAK,EAAE,OAAC,CAAC,KAAK,EAAE;IAChB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAGU,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAG3E,QAAA,gBAAgB,GAAG;IAC/B,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,oBAAoB;IAC1B,OAAO,EAAE,6BAAqB;IAC9B,QAAQ,EAAE,8BAAsB;IAChC,eAAe,EAAE,UAAU;IAC3B,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE;CACD,CAAC;AAEzB,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,OAAC,CAAC,KAAK,EAAE;IAChB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC;AAGU,QAAA,aAAa,GAAG;IAC5B,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,0BAAkB;IAC3B,QAAQ,EAAE,2BAAoB;IAC9B,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE;CACA,CAAC;AAEzB,QAAA,eAAe,GAAG;IAC9B,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,mBAAmB;IACzB,QAAQ,EAAE,2BAAoB;IAC9B,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;CACA,CAAC;AAEzB,QAAA,cAAc,GAAG;IAC7B,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,8BAAqB;IAC/B,YAAY,EAAE,IAAI;CACkB,CAAC;AAEzB,QAAA,iBAAiB,GAAG;IAChC,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,sBAAsB;IAC5B,QAAQ,EAAE,8BAAqB;IAC/B,YAAY,EAAE,IAAI;CACkB,CAAC;AAEzB,QAAA,yBAAyB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACjE,QAAA,qBAAqB,GAAG;IACpC,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,yBAAyB;IAC/B,MAAM,EAAE,iCAAyB;IACjC,QAAQ,EAAE,8BAAqB;IAC/B,YAAY,EAAE,IAAI;CACkB,CAAC;AAEzB,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC7D,QAAA,sBAAsB,GAAG;IACrC,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,2BAA2B;IACjC,OAAO,EAAE,mCAA2B;IACpC,QAAQ,EAAE,8BAAqB;IAC/B,eAAe,EAAE,iBAAiB;IAClC,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE;CACD,CAAC;AAEzB,QAAA,iCAAiC,GAAG,OAAC,CAAC,MAAM,CAAC;IACzD,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACpC,CAAC,CAAC;AACU,QAAA,4BAA4B,GAAG;IAC3C,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,0BAA0B;IAChC,OAAO,EAAE,yCAAiC;IAC1C,QAAQ,EAAE,8BAAqB;CACK,CAAC;AAEzB,QAAA,yBAAyB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAClE,QAAA,oBAAoB,GAAG;IACnC,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,yBAAyB;IAC/B,OAAO,EAAE,iCAAyB;IAClC,QAAQ,EAAE,8BAAqB;CACK,CAAC;AAEzB,QAAA,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC;IAChD,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE;IACtB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AACU,QAAA,kBAAkB,GAAG;IACjC,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,uBAAuB;IAC7B,QAAQ,EAAE,gCAAwB;IAClC,YAAY,EAAE,IAAI;CACkB,CAAC;AAEzB,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAC1E,QAAA,kBAAkB,GAAG;IACjC,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,uBAAuB;IAC7B,OAAO,EAAE,+BAAuB;IAChC,QAAQ,EAAE,8BAAqB;IAC/B,YAAY,EAAE,IAAI;CACkB,CAAC;AAEzB,QAAA,YAAY,GAAG;IAC3B,QAAQ,EAAE,wBAAgB;IAC1B,KAAK,EAAE,qBAAa;IACpB,OAAO,EAAE,uBAAe;IACxB,MAAM,EAAE,sBAAc;IACtB,SAAS,EAAE,yBAAiB;IAC5B,aAAa,EAAE,6BAAqB;IACpC,cAAc,EAAE,8BAAsB;IACtC,oBAAoB,EAAE,oCAA4B;IAClD,YAAY,EAAE,4BAAoB;IAClC,UAAU,EAAE,0BAAkB;IAC9B,UAAU,EAAE,0BAAkB;CACrB,CAAC"}