@loopstack/auth 0.35.0 → 0.37.0

package/dist/auth.module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.module.d.ts","sourceRoot":"","sources":["../src/auth.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAU,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAgBvF,qBACa,UAAW,YAAW,UAAU;IAC3C,SAAS,CAAC,QAAQ,EAAE,kBAAkB;IAItC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,aAAa;CA+BnD"}
+{"version":3,"file":"auth.module.d.ts","sourceRoot":"","sources":["../src/auth.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAU,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAgBvF,qBACa,UAAW,YAAW,UAAU;IAC3C,SAAS,CAAC,QAAQ,EAAE,kBAAkB;IAItC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,aAAa;CAgCnD"}

package/dist/auth.module.js

@@ -11,13 +11,13 @@ import { JwtModule } from '@nestjs/jwt';
 import { PassportModule } from '@nestjs/passport';
 import { TypeOrmModule } from '@nestjs/typeorm';
 import cookieParser from 'cookie-parser';
-import { Role, User } from '@loopstack/common';
+import { ApiTokenEntity, Role, User } from '@loopstack/common';
 import { AssignRoleCommand } from './commands/assign-role.command.js';
-import { AuthController } from './controllers/index.js';
+import { ApiTokenController, AuthController } from './controllers/index.js';
 import { JwtAuthGuard, RolesGuard } from './guards/index.js';
 import { UserRepository } from './repositories/index.js';
 import { ConfigValidationService } from './services/config-validation.service.js';
-import { AuthService, TokenService } from './services/index.js';
+import { ApiTokenService, AuthService, TokenService } from './services/index.js';
 import { HubStrategy, JwtStrategy } from './strategies/index.js';
 let AuthModule = AuthModule_1 = class AuthModule {
     configure(consumer) {
@@ -37,11 +37,12 @@ let AuthModule = AuthModule_1 = class AuthModule {
                     }),
                     inject: [ConfigService],
                 }),
-                TypeOrmModule.forFeature([User, Role], connection),
+                TypeOrmModule.forFeature([User, Role, ApiTokenEntity], connection),
             ],
-            controllers: [AuthController],
+            controllers: [ApiTokenController, AuthController],
             providers: [
                 ConfigValidationService,
+                ApiTokenService,
                 AuthService,
                 UserRepository,
                 TokenService,
@@ -51,7 +52,7 @@ let AuthModule = AuthModule_1 = class AuthModule {
                 RolesGuard,
                 AssignRoleCommand,
             ],
-            exports: [AuthService, UserRepository, JwtAuthGuard, RolesGuard],
+            exports: [ApiTokenService, AuthService, UserRepository, JwtAuthGuard, RolesGuard],
         };
     }
 };

package/dist/auth.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../src/auth.module.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EAAqC,MAAM,EAAc,MAAM,gBAAgB,CAAC;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,YAAY,MAAM,eAAe,CAAC;AAEzC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAG1D,IAAM,UAAU,kBAAhB,MAAM,UAAU;IACrB,SAAS,CAAC,QAA4B;QACpC,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,UAAmB;QAChC,OAAO;YACL,MAAM,EAAE,YAAU;YAClB,OAAO,EAAE;gBACP,cAAc,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;gBACnD,SAAS,CAAC,aAAa,CAAC;oBACtB,UAAU,EAAE,CAAC,aAA4B,EAAE,EAAE,CAAC,CAAC;wBAC7C,MAAM,EAAE,aAAa,CAAC,GAAG,CAAS,iBAAiB,CAAC;wBACpD,WAAW,EAAE;4BACX,SAAS,EAAE,aAAa,CAAC,GAAG,CAAmC,oBAAoB,CAAC,IAAI,IAAI;yBAC7F;qBACF,CAAC;oBACF,MAAM,EAAE,CAAC,aAAa,CAAC;iBACxB,CAAC;gBACF,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,UAAU,CAAC;aACnD;YACD,WAAW,EAAE,CAAC,cAAc,CAAC;YAC7B,SAAS,EAAE;gBACT,uBAAuB;gBACvB,WAAW;gBACX,cAAc;gBACd,YAAY;gBACZ,WAAW;gBACX,WAAW;gBACX,YAAY;gBACZ,UAAU;gBACV,iBAAiB;aAClB;YACD,OAAO,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,CAAC;SACjE,CAAC;IACJ,CAAC;CACF,CAAA;AApCY,UAAU;IADtB,MAAM,CAAC,EAAE,CAAC;GACE,UAAU,CAoCtB"}
+{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../src/auth.module.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EAAqC,MAAM,EAAc,MAAM,gBAAgB,CAAC;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,YAAY,MAAM,eAAe,CAAC;AAEzC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAG1D,IAAM,UAAU,kBAAhB,MAAM,UAAU;IACrB,SAAS,CAAC,QAA4B;QACpC,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,UAAmB;QAChC,OAAO;YACL,MAAM,EAAE,YAAU;YAClB,OAAO,EAAE;gBACP,cAAc,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;gBACnD,SAAS,CAAC,aAAa,CAAC;oBACtB,UAAU,EAAE,CAAC,aAA4B,EAAE,EAAE,CAAC,CAAC;wBAC7C,MAAM,EAAE,aAAa,CAAC,GAAG,CAAS,iBAAiB,CAAC;wBACpD,WAAW,EAAE;4BACX,SAAS,EAAE,aAAa,CAAC,GAAG,CAAmC,oBAAoB,CAAC,IAAI,IAAI;yBAC7F;qBACF,CAAC;oBACF,MAAM,EAAE,CAAC,aAAa,CAAC;iBACxB,CAAC;gBACF,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,UAAU,CAAC;aACnE;YACD,WAAW,EAAE,CAAC,kBAAkB,EAAE,cAAc,CAAC;YACjD,SAAS,EAAE;gBACT,uBAAuB;gBACvB,eAAe;gBACf,WAAW;gBACX,cAAc;gBACd,YAAY;gBACZ,WAAW;gBACX,WAAW;gBACX,YAAY;gBACZ,UAAU;gBACV,iBAAiB;aAClB;YACD,OAAO,EAAE,CAAC,eAAe,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,CAAC;SAClF,CAAC;IACJ,CAAC;CACF,CAAA;AArCY,UAAU;IADtB,MAAM,CAAC,EAAE,CAAC;GACE,UAAU,CAqCtB"}

package/dist/controllers/api-token.controller.d.ts

@@ -0,0 +1,11 @@
+import { CurrentUserInterface } from '@loopstack/common';
+import type { ApiTokenCreateInterface, ApiTokenCreatedInterface, ApiTokenInterface } from '@loopstack/contracts/api';
+import { ApiTokenService } from '../services/api-token.service.js';
+export declare class ApiTokenController {
+    private readonly apiTokenService;
+    constructor(apiTokenService: ApiTokenService);
+    create(payload: ApiTokenCreateInterface, user: CurrentUserInterface): Promise<ApiTokenCreatedInterface>;
+    list(user: CurrentUserInterface): Promise<ApiTokenInterface[]>;
+    revoke(id: string, user: CurrentUserInterface): Promise<void>;
+}
+//# sourceMappingURL=api-token.controller.d.ts.map

package/dist/controllers/api-token.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-token.controller.d.ts","sourceRoot":"","sources":["../../src/controllers/api-token.controller.ts"],"names":[],"mappings":"AACA,OAAO,EAA+B,oBAAoB,EAAqB,MAAM,mBAAmB,CAAC;AAEzG,OAAO,KAAK,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACrH,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAYnE,qBACa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,eAAe;gBAAf,eAAe,EAAE,eAAe;IAOvD,MAAM,CACyC,OAAO,EAAE,uBAAuB,EACpE,IAAI,EAAE,oBAAoB,GACxC,OAAO,CAAC,wBAAwB,CAAC;IAS9B,IAAI,CAAgB,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAS7E,MAAM,CAAc,EAAE,EAAE,MAAM,EAAiB,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;CAGhG"}

package/dist/controllers/api-token.controller.js

@@ -0,0 +1,71 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Body, Controller, Delete, Get, Param, Post } from '@nestjs/common';
+import { CurrentUser, ZodValidationPipe } from '@loopstack/common';
+import { ApiTokenCreateSchema } from '@loopstack/contracts/api';
+import { ApiTokenService } from '../services/api-token.service.js';
+function toApiToken(entity) {
+    return {
+        id: entity.id,
+        name: entity.name,
+        createdAt: entity.createdAt.toISOString(),
+        lastUsedAt: entity.lastUsedAt?.toISOString() ?? null,
+        expiresAt: entity.expiresAt?.toISOString() ?? null,
+    };
+}
+let ApiTokenController = class ApiTokenController {
+    apiTokenService;
+    constructor(apiTokenService) {
+        this.apiTokenService = apiTokenService;
+    }
+    async create(payload, user) {
+        const { entity, token } = await this.apiTokenService.create(user.userId, payload);
+        return { ...toApiToken(entity), token };
+    }
+    async list(user) {
+        const tokens = await this.apiTokenService.list(user.userId);
+        return tokens.map(toApiToken);
+    }
+    async revoke(id, user) {
+        await this.apiTokenService.revoke(id, user.userId);
+    }
+};
+__decorate([
+    Post(),
+    __param(0, Body(new ZodValidationPipe(ApiTokenCreateSchema))),
+    __param(1, CurrentUser()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], ApiTokenController.prototype, "create", null);
+__decorate([
+    Get(),
+    __param(0, CurrentUser()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], ApiTokenController.prototype, "list", null);
+__decorate([
+    Delete(':id'),
+    __param(0, Param('id')),
+    __param(1, CurrentUser()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], ApiTokenController.prototype, "revoke", null);
+ApiTokenController = __decorate([
+    Controller('api/v1/auth/tokens'),
+    __metadata("design:paramtypes", [ApiTokenService])
+], ApiTokenController);
+export { ApiTokenController };
+//# sourceMappingURL=api-token.controller.js.map

package/dist/controllers/api-token.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-token.controller.js","sourceRoot":"","sources":["../../src/controllers/api-token.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAkB,WAAW,EAAwB,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACzG,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAEnE,SAAS,UAAU,CAAC,MAAsB;IACxC,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;QACzC,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI;QACpD,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI;KACnD,CAAC;AACJ,CAAC;AAGM,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IACA;IAA7B,YAA6B,eAAgC;QAAhC,oBAAe,GAAf,eAAe,CAAiB;IAAG,CAAC;IAO3D,AAAN,KAAK,CAAC,MAAM,CACyC,OAAgC,EACpE,IAA0B;QAEzC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClF,OAAO,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IAMK,AAAN,KAAK,CAAC,IAAI,CAAgB,IAA0B;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAMK,AAAN,KAAK,CAAC,MAAM,CAAc,EAAU,EAAiB,IAA0B;QAC7E,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACrD,CAAC;CACF,CAAA;AAxBO;IADL,IAAI,EAAE;IAEJ,WAAA,IAAI,CAAC,IAAI,iBAAiB,CAAC,oBAAoB,CAAC,CAAC,CAAA;IACjD,WAAA,WAAW,EAAE,CAAA;;;;gDAIf;AAMK;IADL,GAAG,EAAE;IACM,WAAA,WAAW,EAAE,CAAA;;;;8CAGxB;AAMK;IADL,MAAM,CAAC,KAAK,CAAC;IACA,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IAAc,WAAA,WAAW,EAAE,CAAA;;;;gDAEnD;AA/BU,kBAAkB;IAD9B,UAAU,CAAC,oBAAoB,CAAC;qCAEe,eAAe;GADlD,kBAAkB,CAgC9B"}

package/dist/controllers/auth.controller.d.ts

@@ -1,25 +1,18 @@
 import { Request, Response } from 'express';
 import { CurrentUserInterface, User } from '@loopstack/common';
-import { HubLoginRequestDto } from '../dtos/hub-login-request.dto.js';
-import { HubLoginResponseDto } from '../dtos/hub-login-response.dto.js';
-import { UserResponseDto } from '../dtos/user-response.dto.js';
-import { WorkerInfoDto } from '../dtos/worker-info.dto.js';
+import { AuthMessageInterface, AuthUserInterface, HubLoginRequestInterface, HubLoginResponseInterface, WorkerInfoInterface } from '@loopstack/contracts/api';
 import { AuthService, TokenService } from '../services/index.js';
 export declare class AuthController {
     private readonly authService;
     private readonly tokenService;
     constructor(authService: AuthService, tokenService: TokenService);
     private setCookies;
-    refresh(req: Request, res: Response): Promise<{
-        message: string;
-    }>;
-    logout(res: Response): {
-        message: string;
-    };
-    me(user: CurrentUserInterface): Promise<UserResponseDto>;
-    getInfo(): WorkerInfoDto;
-    hubLogin(_hubLoginRequestDto: HubLoginRequestDto, req: Request & {
+    refresh(req: Request, res: Response): Promise<AuthMessageInterface>;
+    logout(res: Response): AuthMessageInterface;
+    me(user: CurrentUserInterface): Promise<AuthUserInterface>;
+    getInfo(): WorkerInfoInterface;
+    hubLogin(_payload: HubLoginRequestInterface, req: Request & {
         user: User;
-    }, res: Response): Promise<HubLoginResponseDto>;
+    }, res: Response): Promise<HubLoginResponseInterface>;
 }
 //# sourceMappingURL=auth.controller.d.ts.map

package/dist/controllers/auth.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.controller.d.ts","sourceRoot":"","sources":["../../src/controllers/auth.controller.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAe,oBAAoB,EAAU,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAEpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAE3D,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEjE,qBACa,cAAc;IAEvB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,YAAY;gBADZ,WAAW,EAAE,WAAW,EACxB,YAAY,EAAE,YAAY;IAG7C,OAAO,CAAC,UAAU;IAgBZ,OAAO,CAAQ,GAAG,EAAE,OAAO,EAA8B,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAa3G,MAAM,CAA6B,GAAG,EAAE,QAAQ,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE;IAOhE,EAAE,CAAgB,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC;IAM7E,OAAO,IAAI,aAAa;IAQlB,QAAQ,CACJ,mBAAmB,EAAE,kBAAkB,EACxC,GAAG,EAAE,OAAO,GAAG;QAAE,IAAI,EAAE,IAAI,CAAA;KAAE,EACR,GAAG,EAAE,QAAQ,GACxC,OAAO,CAAC,mBAAmB,CAAC;CAOhC"}
+{"version":3,"file":"auth.controller.d.ts","sourceRoot":"","sources":["../../src/controllers/auth.controller.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAe,oBAAoB,EAAU,IAAI,EAAqB,MAAM,mBAAmB,CAAC;AACvG,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,wBAAwB,EAExB,yBAAyB,EACzB,mBAAmB,EACpB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEjE,qBACa,cAAc;IAEvB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,YAAY;gBADZ,WAAW,EAAE,WAAW,EACxB,YAAY,EAAE,YAAY;IAG7C,OAAO,CAAC,UAAU;IAgBZ,OAAO,CAAQ,GAAG,EAAE,OAAO,EAA8B,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAa5G,MAAM,CAA6B,GAAG,EAAE,QAAQ,GAAG,oBAAoB;IAOjE,EAAE,CAAgB,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAM/E,OAAO,IAAI,mBAAmB;IAQxB,QAAQ,CACwC,QAAQ,EAAE,wBAAwB,EAC/E,GAAG,EAAE,OAAO,GAAG;QAAE,IAAI,EAAE,IAAI,CAAA;KAAE,EACR,GAAG,EAAE,QAAQ,GACxC,OAAO,CAAC,yBAAyB,CAAC;CAOtC"}

package/dist/controllers/auth.controller.js

@@ -11,9 +11,8 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
 import { Body, Controller, Get, HttpCode, HttpStatus, Post, Req, Res, UseGuards } from '@nestjs/common';
-import { CurrentUser, Public } from '@loopstack/common';
-import { HubLoginRequestDto } from '../dtos/hub-login-request.dto.js';
-import { WorkerInfoDto } from '../dtos/worker-info.dto.js';
+import { CurrentUser, Public, ZodValidationPipe } from '@loopstack/common';
+import { HubLoginRequestSchema, } from '@loopstack/contracts/api';
 import { HubAuthGuard } from '../guards/hub-auth.guard.js';
 import { AuthService, TokenService } from '../services/index.js';
 let AuthController = class AuthController {
@@ -45,7 +44,7 @@ let AuthController = class AuthController {
     getInfo() {
         return this.authService.getWorkerHealthInfo();
     }
-    async hubLogin(_hubLoginRequestDto, req, res) {
+    async hubLogin(_payload, req, res) {
         const tokens = await this.authService.login(req.user);
         this.setCookies(res, tokens);
         return { id: req.user.id, message: 'Login successful' };
@@ -81,18 +80,18 @@ __decorate([
     Get('worker/health'),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", []),
-    __metadata("design:returntype", WorkerInfoDto)
+    __metadata("design:returntype", Object)
 ], AuthController.prototype, "getInfo", null);
 __decorate([
     Public(),
     Post('oauth/hub'),
     HttpCode(HttpStatus.OK),
     UseGuards(HubAuthGuard),
-    __param(0, Body()),
+    __param(0, Body(new ZodValidationPipe(HubLoginRequestSchema))),
     __param(1, Req()),
     __param(2, Res({ passthrough: true })),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [HubLoginRequestDto, Object, Object]),
+    __metadata("design:paramtypes", [Object, Object, Object]),
     __metadata("design:returntype", Promise)
 ], AuthController.prototype, "hubLogin", null);
 AuthController = __decorate([

package/dist/controllers/auth.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../src/controllers/auth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAExG,OAAO,EAAE,WAAW,EAAwB,MAAM,EAAQ,MAAM,mBAAmB,CAAC;AAEpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAGtE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAG1D,IAAM,cAAc,GAApB,MAAM,cAAc;IAEN;IACA;IAFnB,YACmB,WAAwB,EACxB,YAA0B;QAD1B,gBAAW,GAAX,WAAW,CAAa;QACxB,iBAAY,GAAZ,YAAY,CAAc;IAC1C,CAAC;IAEI,UAAU,CAAC,GAAa,EAAE,MAAuB;QACvD,GAAG,CAAC,MAAM,CACR,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,QAAQ,CAAC,EACzC,MAAM,CAAC,WAAW,EAClB,IAAI,CAAC,YAAY,CAAC,8BAA8B,EAAE,CACnD,CAAC;QACF,GAAG,CAAC,MAAM,CACR,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,EAC1C,MAAM,CAAC,YAAY,EACnB,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CACpD,CAAC;IACJ,CAAC;IAKK,AAAN,KAAK,CAAC,OAAO,CAAQ,GAAY,EAA8B,GAAa;QAC1E,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QACpE,MAAM,YAAY,GAAI,GAAG,CAAC,OAAkC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;QAEvF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAE5D,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAE7B,OAAO,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;IACrD,CAAC;IAID,MAAM,CAA6B,GAAa;QAC9C,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5D,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC1C,CAAC;IAGK,AAAN,KAAK,CAAC,EAAE,CAAgB,IAA0B;QAChD,OAAO,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;IAID,OAAO;QACL,OAAO,IAAI,CAAC,WAAW,CAAC,mBAAmB,EAAE,CAAC;IAChD,CAAC;IAMK,AAAN,KAAK,CAAC,QAAQ,CACJ,mBAAuC,EACxC,GAA6B,EACR,GAAa;QAEzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEtD,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAE7B,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC1D,CAAC;CACF,CAAA;AA7CO;IAHL,MAAM,EAAE;IACR,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;IACvB,IAAI,CAAC,SAAS,CAAC;IACD,WAAA,GAAG,EAAE,CAAA;IAAgB,WAAA,GAAG,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;;;6CAS7D;AAID;IAFC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;IACvB,IAAI,CAAC,QAAQ,CAAC;IACP,WAAA,GAAG,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;;;4CAIjC;AAGK;IADL,GAAG,CAAC,IAAI,CAAC;IACA,WAAA,WAAW,EAAE,CAAA;;;;wCAEtB;AAID;IAFC,MAAM,EAAE;IACR,GAAG,CAAC,eAAe,CAAC;;;oCACV,aAAa;6CAEvB;AAMK;IAJL,MAAM,EAAE;IACR,IAAI,CAAC,WAAW,CAAC;IACjB,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;IACvB,SAAS,CAAC,YAAY,CAAC;IAErB,WAAA,IAAI,EAAE,CAAA;IACN,WAAA,GAAG,EAAE,CAAA;IACL,WAAA,GAAG,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;qCAFE,kBAAkB;;8CAShD;AAlEU,cAAc;IAD1B,UAAU,CAAC,aAAa,CAAC;qCAGQ,WAAW;QACV,YAAY;GAHlC,cAAc,CAmE1B"}
+{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../src/controllers/auth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAExG,OAAO,EAAE,WAAW,EAAwB,MAAM,EAAQ,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACvG,OAAO,EAIL,qBAAqB,GAGtB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAG1D,IAAM,cAAc,GAApB,MAAM,cAAc;IAEN;IACA;IAFnB,YACmB,WAAwB,EACxB,YAA0B;QAD1B,gBAAW,GAAX,WAAW,CAAa;QACxB,iBAAY,GAAZ,YAAY,CAAc;IAC1C,CAAC;IAEI,UAAU,CAAC,GAAa,EAAE,MAAuB;QACvD,GAAG,CAAC,MAAM,CACR,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,QAAQ,CAAC,EACzC,MAAM,CAAC,WAAW,EAClB,IAAI,CAAC,YAAY,CAAC,8BAA8B,EAAE,CACnD,CAAC;QACF,GAAG,CAAC,MAAM,CACR,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,EAC1C,MAAM,CAAC,YAAY,EACnB,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CACpD,CAAC;IACJ,CAAC;IAKK,AAAN,KAAK,CAAC,OAAO,CAAQ,GAAY,EAA8B,GAAa;QAC1E,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QACpE,MAAM,YAAY,GAAI,GAAG,CAAC,OAAkC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;QAEvF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAE5D,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAE7B,OAAO,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;IACrD,CAAC;IAID,MAAM,CAA6B,GAAa;QAC9C,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5D,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC1C,CAAC;IAGK,AAAN,KAAK,CAAC,EAAE,CAAgB,IAA0B;QAChD,OAAO,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;IAID,OAAO;QACL,OAAO,IAAI,CAAC,WAAW,CAAC,mBAAmB,EAAE,CAAC;IAChD,CAAC;IAMK,AAAN,KAAK,CAAC,QAAQ,CACwC,QAAkC,EAC/E,GAA6B,EACR,GAAa;QAEzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEtD,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAE7B,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC1D,CAAC;CACF,CAAA;AA7CO;IAHL,MAAM,EAAE;IACR,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;IACvB,IAAI,CAAC,SAAS,CAAC;IACD,WAAA,GAAG,EAAE,CAAA;IAAgB,WAAA,GAAG,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;;;6CAS7D;AAID;IAFC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;IACvB,IAAI,CAAC,QAAQ,CAAC;IACP,WAAA,GAAG,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;;;4CAIjC;AAGK;IADL,GAAG,CAAC,IAAI,CAAC;IACA,WAAA,WAAW,EAAE,CAAA;;;;wCAEtB;AAID;IAFC,MAAM,EAAE;IACR,GAAG,CAAC,eAAe,CAAC;;;;6CAGpB;AAMK;IAJL,MAAM,EAAE;IACR,IAAI,CAAC,WAAW,CAAC;IACjB,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;IACvB,SAAS,CAAC,YAAY,CAAC;IAErB,WAAA,IAAI,CAAC,IAAI,iBAAiB,CAAC,qBAAqB,CAAC,CAAC,CAAA;IAClD,WAAA,GAAG,EAAE,CAAA;IACL,WAAA,GAAG,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;;;8CAO5B;AAlEU,cAAc;IAD1B,UAAU,CAAC,aAAa,CAAC;qCAGQ,WAAW;QACV,YAAY;GAHlC,cAAc,CAmE1B"}

package/dist/controllers/index.d.ts

@@ -1,2 +1,3 @@
+export * from './api-token.controller.js';
 export * from './auth.controller.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/controllers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/controllers/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/controllers/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC"}

package/dist/controllers/index.js

@@ -1,2 +1,3 @@
+export * from './api-token.controller.js';
 export * from './auth.controller.js';
 //# sourceMappingURL=index.js.map

package/dist/controllers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/controllers/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/controllers/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC"}

package/dist/guards/jwt-auth.guard.d.ts

@@ -1,12 +1,18 @@
 import { ExecutionContext } from '@nestjs/common';
 import { ConfigService } from '@nestjs/config';
 import { Reflector } from '@nestjs/core';
+import { UserRepository } from '../repositories/index.js';
+import { ApiTokenService } from '../services/api-token.service.js';
 declare const JwtAuthGuard_base: import("@nestjs/passport").Type<import("@nestjs/passport").IAuthGuard>;
 export declare class JwtAuthGuard extends JwtAuthGuard_base {
     private readonly reflector;
     private readonly configService;
-    constructor(reflector: Reflector, configService: ConfigService);
+    private readonly apiTokenService;
+    private readonly userRepository;
+    constructor(reflector: Reflector, configService: ConfigService, apiTokenService: ApiTokenService, userRepository: UserRepository);
     canActivate(context: ExecutionContext): Promise<boolean>;
+    private extractBearer;
+    private hasCredential;
 }
 export {};
 //# sourceMappingURL=jwt-auth.guard.d.ts.map

package/dist/guards/jwt-auth.guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-auth.guard.d.ts","sourceRoot":"","sources":["../../src/guards/jwt-auth.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAc,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;;AAKzC,qBACa,YAAa,SAAQ,iBAAgB;IAE9C,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa;gBADb,SAAS,EAAE,SAAS,EACpB,aAAa,EAAE,aAAa;IAKzC,WAAW,CAAC,OAAO,EAAE,gBAAgB;CAgC5C"}
+{"version":3,"file":"jwt-auth.guard.d.ts","sourceRoot":"","sources":["../../src/guards/jwt-auth.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAqC,MAAM,gBAAgB,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAKzC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;;AAEnE,qBACa,YAAa,SAAQ,iBAAgB;IAE9C,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAHd,SAAS,EAAE,SAAS,EACpB,aAAa,EAAE,aAAa,EAC5B,eAAe,EAAE,eAAe,EAChC,cAAc,EAAE,cAAc;IAK3C,WAAW,CAAC,OAAO,EAAE,gBAAgB;IA2D3C,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,aAAa;CAItB"}

package/dist/guards/jwt-auth.guard.js

@@ -7,19 +7,25 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-import { Injectable } from '@nestjs/common';
+import { Injectable, UnauthorizedException } from '@nestjs/common';
 import { ConfigService } from '@nestjs/config';
 import { Reflector } from '@nestjs/core';
 import { AuthGuard } from '@nestjs/passport';
-import { IS_PUBLIC_KEY } from '@loopstack/common';
+import { API_TOKEN_PREFIX, IS_PUBLIC_KEY } from '@loopstack/common';
 import { UserTypeEnum } from '@loopstack/common';
+import { UserRepository } from '../repositories/index.js';
+import { ApiTokenService } from '../services/api-token.service.js';
 let JwtAuthGuard = class JwtAuthGuard extends AuthGuard('jwt') {
     reflector;
     configService;
-    constructor(reflector, configService) {
+    apiTokenService;
+    userRepository;
+    constructor(reflector, configService, apiTokenService, userRepository) {
         super();
         this.reflector = reflector;
         this.configService = configService;
+        this.apiTokenService = apiTokenService;
+        this.userRepository = userRepository;
     }
     async canActivate(context) {
         const isPublic = this.reflector.getAllAndOverride(IS_PUBLIC_KEY, [
@@ -29,23 +35,55 @@ let JwtAuthGuard = class JwtAuthGuard extends AuthGuard('jwt') {
         if (isPublic) {
             return true;
         }
+        const request = context.switchToHttp().getRequest();
+        const clientId = this.configService.get('auth.clientId');
+        const enableAuth = this.configService.get('app.enableAuth');
+        const bearer = this.extractBearer(request);
+        if (bearer?.startsWith(API_TOKEN_PREFIX)) {
+            const user = await this.apiTokenService.validate(bearer);
+            if (!user) {
+                throw new UnauthorizedException('Invalid or expired API token');
+            }
+            request.user = user;
+            return true;
+        }
+        if (!enableAuth && !this.hasCredential(request, clientId)) {
+            const localUser = await this.userRepository.findOrCreateLocalUser();
+            request.user = {
+                userId: localUser.id,
+                type: localUser.type,
+                workerId: clientId,
+                roles: localUser.roles?.map((role) => role.name) ?? [],
+            };
+            return true;
+        }
         const result = await super.canActivate(context);
         if (!result) {
             return false;
         }
         const { user } = context.switchToHttp().getRequest();
-        const enableAuth = this.configService.get('app.enableAuth');
         if (!enableAuth) {
             return user.type === UserTypeEnum.Local;
         }
-        const clientId = this.configService.get('auth.clientId');
         return clientId === user.workerId;
     }
+    extractBearer(request) {
+        const header = request.headers.authorization;
+        if (!header?.startsWith('Bearer '))
+            return undefined;
+        return header.slice('Bearer '.length);
+    }
+    hasCredential(request, clientId) {
+        const cookies = request.cookies;
+        return Boolean(request.headers.authorization || (clientId && cookies?.[`${clientId}-access`]));
+    }
 };
 JwtAuthGuard = __decorate([
     Injectable(),
     __metadata("design:paramtypes", [Reflector,
-        ConfigService])
+        ConfigService,
+        ApiTokenService,
+        UserRepository])
 ], JwtAuthGuard);
 export { JwtAuthGuard };
 //# sourceMappingURL=jwt-auth.guard.js.map

package/dist/guards/jwt-auth.guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-auth.guard.js","sourceRoot":"","sources":["../../src/guards/jwt-auth.guard.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAoB,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAwB,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAG1C,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,SAAS,CAAC,KAAK,CAAC;IAE7B;IACA;IAFnB,YACmB,SAAoB,EACpB,aAA4B;QAE7C,KAAK,EAAE,CAAC;QAHS,cAAS,GAAT,SAAS,CAAW;QACpB,kBAAa,GAAb,aAAa,CAAe;IAG/C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAyB;QAEzC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,aAAa,EAAE;YACxE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAmC,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QAGrF,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAU,gBAAgB,CAAC,CAAC;QACrE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,IAAI,KAAK,YAAY,CAAC,KAAK,CAAC;QAC1C,CAAC;QAOD,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,eAAe,CAAC,CAAC;QACjE,OAAO,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC;IACpC,CAAC;CACF,CAAA;AAxCY,YAAY;IADxB,UAAU,EAAE;qCAGmB,SAAS;QACL,aAAa;GAHpC,YAAY,CAwCxB"}
+{"version":3,"file":"jwt-auth.guard.js","sourceRoot":"","sources":["../../src/guards/jwt-auth.guard.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAoB,UAAU,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EAAE,gBAAgB,EAAwB,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAG5D,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,SAAS,CAAC,KAAK,CAAC;IAE7B;IACA;IACA;IACA;IAJnB,YACmB,SAAoB,EACpB,aAA4B,EAC5B,eAAgC,EAChC,cAA8B;QAE/C,KAAK,EAAE,CAAC;QALS,cAAS,GAAT,SAAS,CAAW;QACpB,kBAAa,GAAb,aAAa,CAAe;QAC5B,oBAAe,GAAf,eAAe,CAAiB;QAChC,mBAAc,GAAd,cAAc,CAAgB;IAGjD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAyB;QAEzC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,aAAa,EAAE;YACxE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAA6C,CAAC;QAC/F,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,eAAe,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAU,gBAAgB,CAAC,CAAC;QAGrE,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,MAAM,EAAE,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,qBAAqB,CAAC,8BAA8B,CAAC,CAAC;YAClE,CAAC;YACD,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAID,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC1D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,EAAE,CAAC;YACpE,OAAO,CAAC,IAAI,GAAG;gBACb,MAAM,EAAE,SAAS,CAAC,EAAE;gBACpB,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,QAAQ,EAAE,QAAS;gBACnB,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;aACvD,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAmC,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QAGrF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,IAAI,KAAK,YAAY,CAAC,KAAK,CAAC;QAC1C,CAAC;QAOD,OAAO,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC;IACpC,CAAC;IAEO,aAAa,CAAC,OAAgB;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QAC7C,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QACrD,OAAO,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAEO,aAAa,CAAC,OAAgB,EAAE,QAA4B;QAClE,MAAM,OAAO,GAAG,OAAO,CAAC,OAA6C,CAAC;QACtE,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,QAAQ,IAAI,OAAO,EAAE,CAAC,GAAG,QAAQ,SAAS,CAAC,CAAC,CAAC,CAAC;IACjG,CAAC;CACF,CAAA;AA/EY,YAAY;IADxB,UAAU,EAAE;qCAGmB,SAAS;QACL,aAAa;QACX,eAAe;QAChB,cAAc;GALtC,YAAY,CA+ExB"}

package/dist/repositories/user.repository.d.ts

@@ -5,6 +5,7 @@ export declare class UserRepository {
     constructor(repository: Repository<User>);
     findById(id: string): Promise<User | null>;
     findLocalUser(): Promise<User | null>;
+    findOrCreateLocalUser(): Promise<User>;
     create(userData: Partial<User>): Promise<User>;
     update(id: string, userData: Partial<User>): Promise<User | null>;
     getRepository(): Repository<User>;

package/dist/repositories/user.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/user.repository.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAGzC,qBACa,cAAc;IAGvB,OAAO,CAAC,UAAU;gBAAV,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC;IAGhC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAO1C,aAAa,IAAI,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IASrC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAK9C,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAKvE,aAAa;CAGd"}
+{"version":3,"file":"user.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/user.repository.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAGzC,qBACa,cAAc;IAGvB,OAAO,CAAC,UAAU;gBAAV,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC;IAGhC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAO1C,aAAa,IAAI,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAUrC,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC;IAYtC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAK9C,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAKvE,aAAa;CAGd"}

package/dist/repositories/user.repository.js

@@ -12,6 +12,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 };
 import { Injectable } from '@nestjs/common';
 import { InjectRepository } from '@nestjs/typeorm';
+import { randomUUID } from 'node:crypto';
 import { Repository } from 'typeorm';
 import { User } from '@loopstack/common';
 import { UserTypeEnum } from '@loopstack/common';
@@ -34,6 +35,17 @@ let UserRepository = class UserRepository {
             relations: ['roles'],
         });
     }
+    async findOrCreateLocalUser() {
+        const existing = await this.findLocalUser();
+        if (existing)
+            return existing;
+        return this.create({
+            id: randomUUID(),
+            type: UserTypeEnum.Local,
+            isActive: true,
+            roles: [],
+        });
+    }
     async create(userData) {
         const user = this.repository.create(userData);
         return this.repository.save(user);

package/dist/repositories/user.repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"user.repository.js","sourceRoot":"","sources":["../../src/repositories/user.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAG1C,IAAM,cAAc,GAApB,MAAM,cAAc;IAGf;IAFV,YAEU,UAA4B;QAA5B,eAAU,GAAV,UAAU,CAAkB;IACnC,CAAC;IAEJ,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,SAAS,EAAE,CAAC,OAAO,CAAC;SACrB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,KAAK,EAAE;gBACL,IAAI,EAAE,YAAY,CAAC,KAAK;aACzB;YACD,SAAS,EAAE,CAAC,OAAO,CAAC;SACrB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAuB;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,QAAuB;QAC9C,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF,CAAA;AAnCY,cAAc;IAD1B,UAAU,EAAE;IAGR,WAAA,gBAAgB,CAAC,IAAI,CAAC,CAAA;qCACH,UAAU;GAHrB,cAAc,CAmC1B"}
+{"version":3,"file":"user.repository.js","sourceRoot":"","sources":["../../src/repositories/user.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAG1C,IAAM,cAAc,GAApB,MAAM,cAAc;IAGf;IAFV,YAEU,UAA4B;QAA5B,eAAU,GAAV,UAAU,CAAkB;IACnC,CAAC;IAEJ,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,SAAS,EAAE,CAAC,OAAO,CAAC;SACrB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,KAAK,EAAE;gBACL,IAAI,EAAE,YAAY,CAAC,KAAK;aACzB;YACD,SAAS,EAAE,CAAC,OAAO,CAAC;SACrB,CAAC,CAAC;IACL,CAAC;IAGD,KAAK,CAAC,qBAAqB;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,OAAO,IAAI,CAAC,MAAM,CAAC;YACjB,EAAE,EAAE,UAAU,EAAE;YAChB,IAAI,EAAE,YAAY,CAAC,KAAK;YACxB,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAuB;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,QAAuB;QAC9C,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF,CAAA;AAhDY,cAAc;IAD1B,UAAU,EAAE;IAGR,WAAA,gBAAgB,CAAC,IAAI,CAAC,CAAA;qCACH,UAAU;GAHrB,cAAc,CAgD1B"}

package/dist/services/api-token.service.d.ts

@@ -0,0 +1,18 @@
+import { ConfigService } from '@nestjs/config';
+import { Repository } from 'typeorm';
+import { ApiTokenEntity, CurrentUserInterface } from '@loopstack/common';
+import type { ApiTokenCreateInterface } from '@loopstack/contracts/api';
+export declare class ApiTokenService {
+    private readonly apiTokenRepository;
+    private readonly configService;
+    private readonly logger;
+    constructor(apiTokenRepository: Repository<ApiTokenEntity>, configService: ConfigService);
+    create(userId: string, payload: ApiTokenCreateInterface): Promise<{
+        entity: ApiTokenEntity;
+        token: string;
+    }>;
+    list(userId: string): Promise<ApiTokenEntity[]>;
+    revoke(id: string, userId: string): Promise<void>;
+    validate(token: string): Promise<CurrentUserInterface | null>;
+}
+//# sourceMappingURL=api-token.service.d.ts.map

package/dist/services/api-token.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-token.service.d.ts","sourceRoot":"","sources":["../../src/services/api-token.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAG/C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAoB,cAAc,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AASxE,qBACa,eAAe;IAKxB,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa;IALhC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;gBAIxC,kBAAkB,EAAE,UAAU,CAAC,cAAc,CAAC,EAC9C,aAAa,EAAE,aAAa;IAOzC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,cAAc,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAiB5G,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAI/C,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWjD,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;CAsBpE"}

package/dist/services/api-token.service.js

@@ -0,0 +1,82 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var ApiTokenService_1;
+import { Injectable, Logger, NotFoundException } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import { InjectRepository } from '@nestjs/typeorm';
+import { createHash, randomBytes } from 'node:crypto';
+import { Repository } from 'typeorm';
+import { API_TOKEN_PREFIX, ApiTokenEntity } from '@loopstack/common';
+const LAST_USED_WRITE_INTERVAL_MS = 60 * 1000;
+function hashToken(token) {
+    return createHash('sha256').update(token).digest('hex');
+}
+let ApiTokenService = ApiTokenService_1 = class ApiTokenService {
+    apiTokenRepository;
+    configService;
+    logger = new Logger(ApiTokenService_1.name);
+    constructor(apiTokenRepository, configService) {
+        this.apiTokenRepository = apiTokenRepository;
+        this.configService = configService;
+    }
+    async create(userId, payload) {
+        const token = API_TOKEN_PREFIX + randomBytes(32).toString('base64url');
+        const expiresAt = payload.expiresInDays ? new Date(Date.now() + payload.expiresInDays * 24 * 60 * 60 * 1000) : null;
+        const entity = await this.apiTokenRepository.save(this.apiTokenRepository.create({
+            name: payload.name,
+            tokenHash: hashToken(token),
+            userId,
+            expiresAt,
+            lastUsedAt: null,
+        }));
+        return { entity, token };
+    }
+    async list(userId) {
+        return this.apiTokenRepository.find({ where: { userId }, order: { createdAt: 'DESC' } });
+    }
+    async revoke(id, userId) {
+        const result = await this.apiTokenRepository.delete({ id, userId });
+        if (!result.affected) {
+            throw new NotFoundException(`API token ${id} not found`);
+        }
+    }
+    async validate(token) {
+        const entity = await this.apiTokenRepository.findOne({
+            where: { tokenHash: hashToken(token) },
+            relations: ['user', 'user.roles'],
+        });
+        if (!entity || !entity.user?.isActive)
+            return null;
+        if (entity.expiresAt && entity.expiresAt.getTime() < Date.now())
+            return null;
+        if (!entity.lastUsedAt || Date.now() - entity.lastUsedAt.getTime() > LAST_USED_WRITE_INTERVAL_MS) {
+            this.apiTokenRepository
+                .update(entity.id, { lastUsedAt: new Date() })
+                .catch((error) => this.logger.warn(`Failed to update lastUsedAt for token ${entity.id}:`, error));
+        }
+        return {
+            userId: entity.user.id,
+            type: entity.user.type,
+            workerId: this.configService.get('auth.clientId'),
+            roles: entity.user.roles?.map((role) => role.name) ?? [],
+        };
+    }
+};
+ApiTokenService = ApiTokenService_1 = __decorate([
+    Injectable(),
+    __param(0, InjectRepository(ApiTokenEntity)),
+    __metadata("design:paramtypes", [Repository,
+        ConfigService])
+], ApiTokenService);
+export { ApiTokenService };
+//# sourceMappingURL=api-token.service.js.map

package/dist/services/api-token.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-token.service.js","sourceRoot":"","sources":["../../src/services/api-token.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAwB,MAAM,mBAAmB,CAAC;AAI3F,MAAM,2BAA2B,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9C,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAGM,IAAM,eAAe,uBAArB,MAAM,eAAe;IAKP;IACA;IALF,MAAM,GAAG,IAAI,MAAM,CAAC,iBAAe,CAAC,IAAI,CAAC,CAAC;IAE3D,YAEmB,kBAA8C,EAC9C,aAA4B;QAD5B,uBAAkB,GAAlB,kBAAkB,CAA4B;QAC9C,kBAAa,GAAb,aAAa,CAAe;IAC5C,CAAC;IAMJ,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,OAAgC;QAC3D,MAAM,KAAK,GAAG,gBAAgB,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEpH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAC/C,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;YAC7B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC;YAC3B,MAAM;YACN,SAAS;YACT,UAAU,EAAE,IAAI;SACjB,CAAC,CACH,CAAC;QAEF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAc;QACvB,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,MAAc;QACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,IAAI,iBAAiB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAMD,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YACnD,KAAK,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE;YACtC,SAAS,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ;YAAE,OAAO,IAAI,CAAC;QACnD,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAE7E,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,2BAA2B,EAAE,CAAC;YACjG,IAAI,CAAC,kBAAkB;iBACpB,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;iBAC7C,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QACtG,CAAC;QAED,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;YACtB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;YACtB,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,eAAe,CAAE;YAC1D,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;SACzD,CAAC;IACJ,CAAC;CACF,CAAA;AAnEY,eAAe;IAD3B,UAAU,EAAE;IAKR,WAAA,gBAAgB,CAAC,cAAc,CAAC,CAAA;qCACI,UAAU;QACf,aAAa;GANpC,eAAe,CAmE3B"}

package/dist/services/auth.service.d.ts

@@ -1,8 +1,7 @@
 import { ConfigService } from '@nestjs/config';
 import { User } from '@loopstack/common';
+import { AuthUserInterface, WorkerInfoInterface } from '@loopstack/contracts/api';
 import { AuthResponseDto } from '../dtos/auth-response.dto.js';
-import { UserResponseDto } from '../dtos/user-response.dto.js';
-import { WorkerInfoDto } from '../dtos/worker-info.dto.js';
 import { UserRepository } from '../repositories/index.js';
 import { TokenService } from './token.service.js';
 export declare class AuthService {
@@ -12,8 +11,8 @@ export declare class AuthService {
     constructor(configService: ConfigService, userRepository: UserRepository, tokenService: TokenService);
     login(user: User): Promise<AuthResponseDto>;
     refresh(refreshToken: string): Promise<AuthResponseDto>;
-    mapUserToResponse(user: User): UserResponseDto;
-    getCurrentUser(userId: string): Promise<UserResponseDto>;
-    getWorkerHealthInfo(): WorkerInfoDto;
+    mapUserToResponse(user: User): AuthUserInterface;
+    getCurrentUser(userId: string): Promise<AuthUserInterface>;
+    getWorkerHealthInfo(): WorkerInfoInterface;
 }
 //# sourceMappingURL=auth.service.d.ts.map

package/dist/services/auth.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAAuB,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,qBACa,WAAW;IAEpB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,YAAY;gBAFH,aAAa,EAAE,aAAa,EACrC,cAAc,EAAE,cAAc,EAC9B,YAAY,EAAE,YAAY;IAG9B,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,eAAe,CAAC;IAgB3C,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IA2B7D,iBAAiB,CAAC,IAAI,EAAE,IAAI,GAAG,eAAe;IAUxC,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAQ9D,mBAAmB,IAAI,aAAa;CAcrC"}
+{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAuB,IAAI,EAAkB,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAkB,mBAAmB,EAAoB,MAAM,0BAA0B,CAAC;AACpH,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,qBACa,WAAW;IAEpB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,YAAY;gBAFH,aAAa,EAAE,aAAa,EACrC,cAAc,EAAE,cAAc,EAC9B,YAAY,EAAE,YAAY;IAG9B,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,eAAe,CAAC;IAgB3C,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IA2B7D,iBAAiB,CAAC,IAAI,EAAE,IAAI,GAAG,iBAAiB;IAU1C,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAQhE,mBAAmB,IAAI,mBAAmB;CAQ3C"}

package/dist/services/auth.service.js

@@ -9,8 +9,8 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 };
 import { Injectable, UnauthorizedException } from '@nestjs/common';
 import { ConfigService } from '@nestjs/config';
-import { plainToInstance } from 'class-transformer';
-import { WorkerInfoDto } from '../dtos/worker-info.dto.js';
+import { assertResponse } from '@loopstack/common';
+import { AuthUserSchema, WorkerInfoSchema } from '@loopstack/contracts/api';
 import { UserRepository } from '../repositories/index.js';
 import { TokenService } from './token.service.js';
 let AuthService = class AuthService {
@@ -60,13 +60,13 @@ let AuthService = class AuthService {
         }
     }
     mapUserToResponse(user) {
-        return {
+        return assertResponse(AuthUserSchema, {
             id: user.id,
             isActive: user.isActive,
             roles: user.roles?.map((role) => role.name) || [],
-            createdAt: user.createdAt,
-            updatedAt: user.updatedAt,
-        };
+            createdAt: user.createdAt.toISOString(),
+            updatedAt: user.updatedAt.toISOString(),
+        });
     }
     async getCurrentUser(userId) {
         const user = await this.userRepository.findById(userId);
@@ -77,12 +77,10 @@ let AuthService = class AuthService {
     }
     getWorkerHealthInfo() {
         const enableAuth = this.configService.get('app.enableAuth');
-        return plainToInstance(WorkerInfoDto, {
+        return assertResponse(WorkerInfoSchema, {
             clientId: enableAuth ? this.configService.get('auth.clientId') : 'local',
             isConfigured: !enableAuth || !!this.configService.get('auth.hub.jwksUri'),
-            timestamp: new Date(),
-        }, {
-            excludeExtraneousValues: true,
+            timestamp: new Date().toISOString(),
         });
     }
 };

package/dist/services/auth.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAIpD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAG3C,IAAM,WAAW,GAAjB,MAAM,WAAW;IAEH;IACT;IACA;IAHV,YACmB,aAA4B,EACrC,cAA8B,EAC9B,YAA0B;QAFjB,kBAAa,GAAb,aAAa,CAAe;QACrC,mBAAc,GAAd,cAAc,CAAgB;QAC9B,iBAAY,GAAZ,YAAY,CAAc;IACjC,CAAC;IAEJ,KAAK,CAAC,KAAK,CAAC,IAAU;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,eAAe,CAAC,IAAI,EAAE,CAAC;QACvE,MAAM,OAAO,GAAwB;YACnC,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YACjD,QAAQ;SACT,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC/D,OAAO;YACL,GAAG,MAAM;YACT,SAAS,EAAE,QAAQ;SACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,YAAoB;QAChC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YAEnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC5B,MAAM,IAAI,qBAAqB,CAAC,uBAAuB,CAAC,CAAC;YAC3D,CAAC;YAGD,MAAM,UAAU,GAAG;gBACjB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;aAClD,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YAClE,OAAO;gBACL,GAAG,MAAM;gBACT,SAAS,EAAE,QAAQ;aACpB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,qBAAqB,CAAC,uBAAuB,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,IAAU;QAC1B,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YACjD,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,mBAAmB;QACjB,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAU,gBAAgB,CAAC,CAAC;QACrE,OAAO,eAAe,CACpB,aAAa,EACb;YACE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,eAAe,CAAC,CAAC,CAAC,CAAC,OAAO;YAChF,YAAY,EAAE,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,kBAAkB,CAAC;YACjF,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,EACD;YACE,uBAAuB,EAAE,IAAI;SAC9B,CACF,CAAC;IACJ,CAAC;CACF,CAAA;AAlFY,WAAW;IADvB,UAAU,EAAE;qCAGuB,aAAa;QACrB,cAAc;QAChB,YAAY;GAJzB,WAAW,CAkFvB"}
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAA6B,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAqB,cAAc,EAAuB,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEpH,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAG3C,IAAM,WAAW,GAAjB,MAAM,WAAW;IAEH;IACT;IACA;IAHV,YACmB,aAA4B,EACrC,cAA8B,EAC9B,YAA0B;QAFjB,kBAAa,GAAb,aAAa,CAAe;QACrC,mBAAc,GAAd,cAAc,CAAgB;QAC9B,iBAAY,GAAZ,YAAY,CAAc;IACjC,CAAC;IAEJ,KAAK,CAAC,KAAK,CAAC,IAAU;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,eAAe,CAAC,IAAI,EAAE,CAAC;QACvE,MAAM,OAAO,GAAwB;YACnC,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YACjD,QAAQ;SACT,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC/D,OAAO;YACL,GAAG,MAAM;YACT,SAAS,EAAE,QAAQ;SACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,YAAoB;QAChC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YAEnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC5B,MAAM,IAAI,qBAAqB,CAAC,uBAAuB,CAAC,CAAC;YAC3D,CAAC;YAGD,MAAM,UAAU,GAAG;gBACjB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;aAClD,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YAClE,OAAO;gBACL,GAAG,MAAM;gBACT,SAAS,EAAE,QAAQ;aACpB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,qBAAqB,CAAC,uBAAuB,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,IAAU;QAC1B,OAAO,cAAc,CAAC,cAAc,EAAE;YACpC,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YACjD,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;YACvC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;SACxC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,mBAAmB;QACjB,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAU,gBAAgB,CAAC,CAAC;QACrE,OAAO,cAAc,CAAC,gBAAgB,EAAE;YACtC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,eAAe,CAAC,CAAC,CAAC,CAAC,OAAO;YAChF,YAAY,EAAE,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,kBAAkB,CAAC;YACjF,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA5EY,WAAW;IADvB,UAAU,EAAE;qCAGuB,aAAa;QACrB,cAAc;QAChB,YAAY;GAJzB,WAAW,CA4EvB"}

package/dist/services/index.d.ts

@@ -1,3 +1,4 @@
+export * from './api-token.service.js';
 export * from './auth.service.js';
 export * from './token.service.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/services/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC"}

package/dist/services/index.js

@@ -1,3 +1,4 @@
+export * from './api-token.service.js';
 export * from './auth.service.js';
 export * from './token.service.js';
 //# sourceMappingURL=index.js.map

package/dist/services/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC"}

package/dist/strategies/hub.strategy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hub.strategy.d.ts","sourceRoot":"","sources":["../../src/strategies/hub.strategy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;;;;AAE1D,qBACa,WAAY,SAAQ,gBAAiC;IAK9D,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,cAAc;IALjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,IAAI,CAAgC;gBAGzB,aAAa,EAAE,aAAa,EAC5B,cAAc,EAAE,cAAc;IAKjD,OAAO,CAAC,OAAO;YAWD,iBAAiB;YAkBjB,iBAAiB;IAoCzB,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAgB5C"}
+{"version":3,"file":"hub.strategy.d.ts","sourceRoot":"","sources":["../../src/strategies/hub.strategy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;;;;AAE1D,qBACa,WAAY,SAAQ,gBAAiC;IAK9D,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,cAAc;IALjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,IAAI,CAAgC;gBAGzB,aAAa,EAAE,aAAa,EAC5B,cAAc,EAAE,cAAc;IAKjD,OAAO,CAAC,OAAO;YAWD,iBAAiB;YAMjB,iBAAiB;IAoCzB,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAgB5C"}

package/dist/strategies/hub.strategy.js

@@ -36,16 +36,7 @@ let HubStrategy = HubStrategy_1 = class HubStrategy extends PassportStrategy(Str
         return this.jwks;
     }
     async validateLocalUser() {
-        const existingUser = await this.userRepository.findLocalUser();
-        if (existingUser) {
-            return existingUser;
-        }
-        const user = await this.userRepository.create({
-            id: crypto.randomUUID(),
-            type: UserTypeEnum.Local,
-            isActive: true,
-            roles: [],
-        });
+        const user = await this.userRepository.findOrCreateLocalUser();
         this.logger.log(`Local authentication successful for user ${user.id}`);
         return user;
     }

package/dist/strategies/hub.strategy.js.map

@@ -1 +1 @@
-{"version":3,"file":"hub.strategy.js","sourceRoot":"","sources":["../../src/strategies/hub.strategy.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,EAAmB,kBAAkB,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAGnD,IAAM,WAAW,mBAAjB,MAAM,WAAY,SAAQ,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC;IAK7C;IACA;IALF,MAAM,GAAG,IAAI,MAAM,CAAC,aAAW,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,GAA2B,IAAI,CAAC;IAE5C,YACmB,aAA4B,EAC5B,cAA8B;QAE/C,KAAK,EAAE,CAAC;QAHS,kBAAa,GAAb,aAAa,CAAe;QAC5B,mBAAc,GAAd,cAAc,CAAgB;IAGjD,CAAC;IAEO,OAAO;QACb,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,kBAAkB,CAAC,CAAC;YACnE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,qBAAqB,CAAC,6BAA6B,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QAC/D,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAC5C,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,IAAI,EAAE,YAAY,CAAC,KAAK;YACxB,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,4CAA4C,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAEvE,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,GAAY;QAC1C,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAA4B,CAAC;QAErD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,iBAAiB,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,eAAe,CAAC,CAAC;QAEjE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE;YAC3D,MAAM;YACN,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACjB,MAAM,IAAI,qBAAqB,CAAC,4BAA4B,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrE,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAC5C,EAAE,EAAE,OAAO,CAAC,GAAG;YACf,IAAI,EAAE,YAAY,CAAC,KAAK;YACxB,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,mDAAmD,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAE9E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAY;QACzB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAU,gBAAgB,CAAC,CAAC;YACrE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAClC,CAAC;YAED,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YACxG,MAAM,IAAI,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;CACF,CAAA;AA5FY,WAAW;IADvB,UAAU,EAAE;qCAMuB,aAAa;QACZ,cAAc;GANtC,WAAW,CA4FvB"}
+{"version":3,"file":"hub.strategy.js","sourceRoot":"","sources":["../../src/strategies/hub.strategy.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,EAAmB,kBAAkB,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAGnD,IAAM,WAAW,mBAAjB,MAAM,WAAY,SAAQ,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC;IAK7C;IACA;IALF,MAAM,GAAG,IAAI,MAAM,CAAC,aAAW,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,GAA2B,IAAI,CAAC;IAE5C,YACmB,aAA4B,EAC5B,cAA8B;QAE/C,KAAK,EAAE,CAAC;QAHS,kBAAa,GAAb,aAAa,CAAe;QAC5B,mBAAc,GAAd,cAAc,CAAgB;IAGjD,CAAC;IAEO,OAAO;QACb,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,kBAAkB,CAAC,CAAC;YACnE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,qBAAqB,CAAC,6BAA6B,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,EAAE,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,4CAA4C,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,GAAY;QAC1C,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAA4B,CAAC;QAErD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,iBAAiB,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,eAAe,CAAC,CAAC;QAEjE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE;YAC3D,MAAM;YACN,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACjB,MAAM,IAAI,qBAAqB,CAAC,4BAA4B,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrE,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAC5C,EAAE,EAAE,OAAO,CAAC,GAAG;YACf,IAAI,EAAE,YAAY,CAAC,KAAK;YACxB,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,mDAAmD,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAE9E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAY;QACzB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAU,gBAAgB,CAAC,CAAC;YACrE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAClC,CAAC;YAED,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YACxG,MAAM,IAAI,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;CACF,CAAA;AAhFY,WAAW;IADvB,UAAU,EAAE;qCAMuB,aAAa;QACZ,cAAc;GANtC,WAAW,CAgFvB"}

package/package.json

@@ -2,7 +2,7 @@
   "name": "@loopstack/auth",
   "displayName": "Loopstack Auth Module",
   "description": "The auth module of the loopstack automation framework",
-  "version": "0.35.0",
+  "version": "0.37.0",
   "license": "MIT",
   "author": {
     "name": "Jakob Klippel",
@@ -30,9 +30,9 @@
     "watch": "nest build --watch"
   },
   "dependencies": {
-    "@loopstack/common": "^0.35.0",
-    "@loopstack/contracts": "^0.35.0",
-    "@loopstack/core": "^0.35.0",
+    "@loopstack/common": "^0.37.0",
+    "@loopstack/contracts": "^0.37.0",
+    "@loopstack/core": "^0.37.0",
     "axios": "^1.15.0",
     "cookie-parser": "^1.4.7",
     "jose": "^6.2.2",

package/dist/dtos/hub-login-request.dto.d.ts

@@ -1,5 +0,0 @@
-import type { HubLoginRequestInterface } from '@loopstack/contracts/api';
-export declare class HubLoginRequestDto implements HubLoginRequestInterface {
-    idToken: string;
-}
-//# sourceMappingURL=hub-login-request.dto.d.ts.map

package/dist/dtos/hub-login-request.dto.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hub-login-request.dto.d.ts","sourceRoot":"","sources":["../../src/dtos/hub-login-request.dto.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAEzE,qBAAa,kBAAmB,YAAW,wBAAwB;IAEjE,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/dtos/hub-login-request.dto.js

@@ -1,18 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-import { Expose } from 'class-transformer';
-export class HubLoginRequestDto {
-    idToken;
-}
-__decorate([
-    Expose(),
-    __metadata("design:type", String)
-], HubLoginRequestDto.prototype, "idToken", void 0);
-//# sourceMappingURL=hub-login-request.dto.js.map

package/dist/dtos/hub-login-request.dto.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hub-login-request.dto.js","sourceRoot":"","sources":["../../src/dtos/hub-login-request.dto.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAG3C,MAAM,OAAO,kBAAkB;IAE7B,OAAO,CAAS;CACjB;AADC;IADC,MAAM,EAAE;;mDACO"}

package/dist/dtos/hub-login-response.dto.d.ts

@@ -1,5 +0,0 @@
-export declare class HubLoginResponseDto {
-    id: string;
-    message: string;
-}
-//# sourceMappingURL=hub-login-response.dto.d.ts.map

package/dist/dtos/hub-login-response.dto.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hub-login-response.dto.d.ts","sourceRoot":"","sources":["../../src/dtos/hub-login-response.dto.ts"],"names":[],"mappings":"AAEA,qBAAa,mBAAmB;IAE9B,EAAE,EAAE,MAAM,CAAC;IAGX,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/dtos/hub-login-response.dto.js

@@ -1,23 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-import { Expose } from 'class-transformer';
-export class HubLoginResponseDto {
-    id;
-    message;
-}
-__decorate([
-    Expose(),
-    __metadata("design:type", String)
-], HubLoginResponseDto.prototype, "id", void 0);
-__decorate([
-    Expose(),
-    __metadata("design:type", String)
-], HubLoginResponseDto.prototype, "message", void 0);
-//# sourceMappingURL=hub-login-response.dto.js.map

package/dist/dtos/hub-login-response.dto.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hub-login-response.dto.js","sourceRoot":"","sources":["../../src/dtos/hub-login-response.dto.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C,MAAM,OAAO,mBAAmB;IAE9B,EAAE,CAAS;IAGX,OAAO,CAAS;CACjB;AAJC;IADC,MAAM,EAAE;;+CACE;AAGX;IADC,MAAM,EAAE;;oDACO"}

package/dist/dtos/user-response.dto.d.ts

@@ -1,8 +0,0 @@
-export declare class UserResponseDto {
-    id: string;
-    isActive: boolean;
-    roles: string[];
-    createdAt: Date;
-    updatedAt: Date;
-}
-//# sourceMappingURL=user-response.dto.d.ts.map

package/dist/dtos/user-response.dto.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"user-response.dto.d.ts","sourceRoot":"","sources":["../../src/dtos/user-response.dto.ts"],"names":[],"mappings":"AAAA,qBAAa,eAAe;IAC1B,EAAE,EAAG,MAAM,CAAC;IACZ,QAAQ,EAAG,OAAO,CAAC;IACnB,KAAK,EAAG,MAAM,EAAE,CAAC;IACjB,SAAS,EAAG,IAAI,CAAC;IACjB,SAAS,EAAG,IAAI,CAAC;CAClB"}

package/dist/dtos/user-response.dto.js

@@ -1,8 +0,0 @@
-export class UserResponseDto {
-    id;
-    isActive;
-    roles;
-    createdAt;
-    updatedAt;
-}
-//# sourceMappingURL=user-response.dto.js.map

package/dist/dtos/user-response.dto.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"user-response.dto.js","sourceRoot":"","sources":["../../src/dtos/user-response.dto.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,eAAe;IAC1B,EAAE,CAAU;IACZ,QAAQ,CAAW;IACnB,KAAK,CAAY;IACjB,SAAS,CAAQ;IACjB,SAAS,CAAQ;CAClB"}

package/dist/dtos/worker-info.dto.d.ts

@@ -1,7 +0,0 @@
-import type { WorkerInfoInterface } from '@loopstack/contracts/api';
-export declare class WorkerInfoDto implements WorkerInfoInterface {
-    clientId?: string;
-    isConfigured: boolean;
-    timestamp: string;
-}
-//# sourceMappingURL=worker-info.dto.d.ts.map

package/dist/dtos/worker-info.dto.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"worker-info.dto.d.ts","sourceRoot":"","sources":["../../src/dtos/worker-info.dto.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,qBAAa,aAAc,YAAW,mBAAmB;IAEvD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,YAAY,EAAE,OAAO,CAAC;IAGtB,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/dtos/worker-info.dto.js

@@ -1,28 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-import { Expose } from 'class-transformer';
-export class WorkerInfoDto {
-    clientId;
-    isConfigured;
-    timestamp;
-}
-__decorate([
-    Expose(),
-    __metadata("design:type", String)
-], WorkerInfoDto.prototype, "clientId", void 0);
-__decorate([
-    Expose(),
-    __metadata("design:type", Boolean)
-], WorkerInfoDto.prototype, "isConfigured", void 0);
-__decorate([
-    Expose(),
-    __metadata("design:type", String)
-], WorkerInfoDto.prototype, "timestamp", void 0);
-//# sourceMappingURL=worker-info.dto.js.map

package/dist/dtos/worker-info.dto.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"worker-info.dto.js","sourceRoot":"","sources":["../../src/dtos/worker-info.dto.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAG3C,MAAM,OAAO,aAAa;IAExB,QAAQ,CAAU;IAGlB,YAAY,CAAU;IAGtB,SAAS,CAAS;CACnB;AAPC;IADC,MAAM,EAAE;;+CACS;AAGlB;IADC,MAAM,EAAE;;mDACa;AAGtB;IADC,MAAM,EAAE;;gDACS"}

package/dist/seeds/local-dev-user.seed.d.ts

@@ -1,12 +0,0 @@
-import { OnModuleInit } from '@nestjs/common';
-import { ConfigService } from '@nestjs/config';
-import { UserRepository } from '../repositories/index.js';
-export declare class LocalDevUserSeeder implements OnModuleInit {
-    private readonly configService;
-    private readonly userRepository;
-    private readonly LOCAL_DEV_USER_ID;
-    constructor(configService: ConfigService, userRepository: UserRepository);
-    onModuleInit(): Promise<void>;
-    getLocalDevUserId(): string;
-}
-//# sourceMappingURL=local-dev-user.seed.d.ts.map

package/dist/seeds/local-dev-user.seed.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"local-dev-user.seed.d.ts","sourceRoot":"","sources":["../../src/seeds/local-dev-user.seed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,qBACa,kBAAmB,YAAW,YAAY;IAInD,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAJjC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA0C;gBAGzD,aAAa,EAAE,aAAa,EAC5B,cAAc,EAAE,cAAc;IAG3C,YAAY;IAkBlB,iBAAiB,IAAI,MAAM;CAG5B"}

package/dist/seeds/local-dev-user.seed.js

@@ -1,45 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-import { Injectable } from '@nestjs/common';
-import { ConfigService } from '@nestjs/config';
-import { UserRepository } from '../repositories/index.js';
-let LocalDevUserSeeder = class LocalDevUserSeeder {
-    configService;
-    userRepository;
-    LOCAL_DEV_USER_ID = 'a1b2c3d4-e5f6-7890-abcd-ef1234567890';
-    constructor(configService, userRepository) {
-        this.configService = configService;
-        this.userRepository = userRepository;
-    }
-    async onModuleInit() {
-        const enableAuth = this.configService.get('app.enableAuth');
-        if (enableAuth)
-            return;
-        const existingUser = await this.userRepository.findById(this.LOCAL_DEV_USER_ID);
-        if (!existingUser) {
-            await this.userRepository.create({
-                id: this.LOCAL_DEV_USER_ID,
-                isActive: true,
-                roles: [],
-            });
-            console.log('✓ Local dev user created');
-        }
-    }
-    getLocalDevUserId() {
-        return this.LOCAL_DEV_USER_ID;
-    }
-};
-LocalDevUserSeeder = __decorate([
-    Injectable(),
-    __metadata("design:paramtypes", [ConfigService,
-        UserRepository])
-], LocalDevUserSeeder);
-export { LocalDevUserSeeder };
-//# sourceMappingURL=local-dev-user.seed.js.map

package/dist/seeds/local-dev-user.seed.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"local-dev-user.seed.js","sourceRoot":"","sources":["../../src/seeds/local-dev-user.seed.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAgB,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAGnD,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAIV;IACA;IAJF,iBAAiB,GAAG,sCAAsC,CAAC;IAE5E,YACmB,aAA4B,EAC5B,cAA8B;QAD9B,kBAAa,GAAb,aAAa,CAAe;QAC5B,mBAAc,GAAd,cAAc,CAAgB;IAC9C,CAAC;IAEJ,KAAK,CAAC,YAAY;QAChB,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAU,gBAAgB,CAAC,CAAC;QACrE,IAAI,UAAU;YAAE,OAAO;QAGvB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAEhF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;gBAC/B,EAAE,EAAE,IAAI,CAAC,iBAAiB;gBAC1B,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,EAAE;aACc,CAAC,CAAC;YAE3B,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,iBAAiB;QACf,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;CACF,CAAA;AA7BY,kBAAkB;IAD9B,UAAU,EAAE;qCAKuB,aAAa;QACZ,cAAc;GALtC,kBAAkB,CA6B9B"}