@lyxa.ai/core 1.4.312 → 1.4.313-alpha-2

package/dist/types/libraries/auth/index.js

@@ -0,0 +1,270 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenType = exports.AuthEntityType = void 0;
+exports.getRefreshTokenModel = getRefreshTokenModel;
+exports.getRiderModel = getRiderModel;
+exports.initializeRefreshTokenModel = initializeRefreshTokenModel;
+exports.signAccessToken = signAccessToken;
+exports.generateRefreshToken = generateRefreshToken;
+exports.verifyAccessToken = verifyAccessToken;
+exports.validateRefreshToken = validateRefreshToken;
+exports.refreshTokens = refreshTokens;
+exports.revokeRefreshToken = revokeRefreshToken;
+exports.revokeAllRefreshTokens = revokeAllRefreshTokens;
+exports.signTokenPair = signTokenPair;
+exports.handleTokenRenewal = handleTokenRenewal;
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const crypto_1 = require("crypto");
+const refreshtoken_1 = require("./refreshtoken");
+const index_1 = require("../../index");
+const typegoose_1 = require("@typegoose/typegoose");
+const models_1 = require("../mongo/models");
+const enum_1 = require("../../utilities/enum");
+Object.defineProperty(exports, "AuthEntityType", { enumerable: true, get: function () { return enum_1.AuthEntityType; } });
+var TokenType;
+(function (TokenType) {
+    TokenType["ACCESS"] = "ACCESS";
+    TokenType["REFRESH"] = "REFRESH";
+})(TokenType || (exports.TokenType = TokenType = {}));
+let actualRefreshTokenModel = null;
+let riderModel = null;
+function getRefreshTokenModel() {
+    if (!actualRefreshTokenModel) {
+        throw new Error('RefreshToken model not initialized yet. Call initGlobalConnection() first.');
+    }
+    return actualRefreshTokenModel;
+}
+function getRiderModel() {
+    if (!riderModel) {
+        throw new Error('RefreshToken model not initialized yet. Call initGlobalConnection() first.');
+    }
+    return riderModel;
+}
+function initializeRefreshTokenModel(globalConnection) {
+    actualRefreshTokenModel = (0, typegoose_1.getModelForClass)(refreshtoken_1.RefreshToken, { existingConnection: globalConnection });
+    riderModel = (0, typegoose_1.getModelForClass)(models_1.Rider, { existingConnection: globalConnection });
+    console.log('✅ RefreshToken model initialized');
+}
+async function signAccessToken(entity, options) {
+    if (!entity?.type) {
+        throw new Error('Entity type is required to sign token');
+    }
+    const secret = await (0, index_1.getLibraries)().getSecretsService().getKey(`${entity.type.toUpperCase()}_JWT_TOKEN`);
+    if (!secret) {
+        throw new Error(`No secret found for entity type ${entity.type}`);
+    }
+    const payload = {
+        id: entity.id,
+        type: entity.type,
+        parameters: entity.parameters,
+        tokenType: TokenType.ACCESS,
+    };
+    const tokenOptions = {
+        ...options,
+        expiresIn: options?.expiresIn || '1d',
+    };
+    return jsonwebtoken_1.default.sign(payload, secret, tokenOptions);
+}
+async function generateRefreshToken(entity, options) {
+    const tokenValue = (0, crypto_1.randomBytes)(40).toString('hex');
+    const expiresIn = options?.expiresIn || '7d';
+    const expiresAt = new Date();
+    if (typeof expiresIn === 'string') {
+        const match = expiresIn.match(/^(\d+)([smhdwy])$/);
+        if (match) {
+            const value = parseInt(match[1]);
+            const unit = match[2];
+            switch (unit) {
+                case 's':
+                    expiresAt.setSeconds(expiresAt.getSeconds() + value);
+                    break;
+                case 'm':
+                    expiresAt.setMinutes(expiresAt.getMinutes() + value);
+                    break;
+                case 'h':
+                    expiresAt.setHours(expiresAt.getHours() + value);
+                    break;
+                case 'd':
+                    expiresAt.setDate(expiresAt.getDate() + value);
+                    break;
+                case 'w':
+                    expiresAt.setDate(expiresAt.getDate() + value * 7);
+                    break;
+                case 'y':
+                    expiresAt.setFullYear(expiresAt.getFullYear() + value);
+                    break;
+            }
+        }
+        else {
+            expiresAt.setDate(expiresAt.getDate() + 7);
+        }
+    }
+    else if (typeof expiresIn === 'number') {
+        expiresAt.setSeconds(expiresAt.getSeconds() + expiresIn);
+    }
+    await storeRefreshToken({
+        token: tokenValue,
+        entityId: entity.id,
+        entityType: entity.type,
+        expiresAt,
+        isRevoked: false,
+        metadata: entity.parameters,
+    });
+    return tokenValue;
+}
+async function storeRefreshToken(tokenRecord) {
+    const tokenRepository = (0, index_1.getLibraries)().getAuthTokenRepository();
+    await tokenRepository.saveRefreshToken(tokenRecord);
+}
+async function verifyAccessToken(entityTypes, token) {
+    for (const entityType of entityTypes) {
+        const secret = await (0, index_1.getLibraries)()
+            .getSecretsService()
+            .getKey(entityType.toUpperCase() + '_JWT_TOKEN');
+        try {
+            const decoded = jsonwebtoken_1.default.verify(token, secret);
+            if (decoded.tokenType !== TokenType.ACCESS) {
+                continue;
+            }
+            return decoded;
+        }
+        catch (err) {
+        }
+    }
+    return undefined;
+}
+async function validateRefreshToken(token) {
+    const tokenRepository = (0, index_1.getLibraries)().getAuthTokenRepository();
+    const storedToken = await tokenRepository.findRefreshToken(token);
+    if (storedToken && storedToken?.entityType === enum_1.AuthEntityType.DELIVERY_BOY) {
+        const rider = await getRiderModel().findOne({ _id: storedToken.entityId }).lean();
+        if (rider && storedToken.metadata && rider.lastLoginDeviceId !== storedToken.metadata.deviceId) {
+            return { valid: false };
+        }
+    }
+    if (!storedToken) {
+        return { valid: false };
+    }
+    if (storedToken.expiresAt && new Date() > storedToken.expiresAt) {
+        return { valid: false };
+    }
+    if (storedToken.isRevoked) {
+        return { valid: false };
+    }
+    return {
+        valid: true,
+        entity: {
+            id: storedToken.entityId,
+            type: storedToken.entityType,
+            parameters: storedToken.metadata,
+        },
+    };
+}
+async function refreshTokens(refreshToken) {
+    const validation = await validateRefreshToken(refreshToken);
+    if (!validation.valid || !validation.entity) {
+        return null;
+    }
+    await revokeRefreshToken(refreshToken);
+    const entity = validation.entity;
+    const newAccessToken = await signAccessToken({
+        id: entity.id,
+        type: entity.type,
+        parameters: entity.parameters || {},
+    });
+    const newRefreshToken = await generateRefreshToken({
+        id: entity.id,
+        type: entity.type,
+        parameters: entity.parameters,
+    });
+    return {
+        accessToken: newAccessToken,
+        refreshToken: newRefreshToken,
+        entity: {
+            id: entity.id,
+            type: entity.type,
+        },
+    };
+}
+async function revokeRefreshToken(token) {
+    const tokenRepository = (0, index_1.getLibraries)().getAuthTokenRepository();
+    return tokenRepository.revokeRefreshToken(token);
+}
+async function revokeAllRefreshTokens(entityId, entityType) {
+    const tokenRepository = (0, index_1.getLibraries)().getAuthTokenRepository();
+    return tokenRepository.revokeAllRefreshTokensForEntity(entityId, entityType);
+}
+async function signTokenPair(entity, options) {
+    const accessToken = await signAccessToken({
+        id: entity.id,
+        type: entity.type,
+        parameters: entity.parameters || {},
+    }, options?.accessTokenOptions);
+    const refreshToken = await generateRefreshToken({
+        id: entity.id,
+        type: entity.type,
+        parameters: entity.parameters,
+    }, { expiresIn: options?.refreshTokenExpiresIn });
+    return {
+        accessToken,
+        refreshToken,
+    };
+}
+async function handleTokenRenewal(refreshToken) {
+    const tokenRepository = (0, index_1.getLibraries)().getAuthTokenRepository();
+    const storedToken = await tokenRepository.findRefreshToken(refreshToken);
+    if (!storedToken) {
+        return {
+            success: false,
+            tokenStatus: 'invalid',
+        };
+    }
+    const isRevoked = storedToken.isRevoked;
+    if (isRevoked) {
+        return {
+            success: false,
+            tokenStatus: 'revoked',
+        };
+    }
+    const isExpired = storedToken.isExpired();
+    const entityData = {
+        id: storedToken.entityId,
+        type: storedToken.entityType,
+        parameters: storedToken.metadata || {},
+    };
+    if (isExpired) {
+        const newTokens = await signTokenPair({
+            id: storedToken.entityId,
+            type: storedToken.entityType,
+            parameters: storedToken.metadata || {},
+        });
+        await tokenRepository.revokeRefreshToken(refreshToken);
+        return {
+            success: true,
+            entity: entityData,
+            tokenStatus: 'expired',
+            newTokens: {
+                accessToken: newTokens.accessToken,
+                refreshToken: newTokens.refreshToken,
+            },
+        };
+    }
+    const newAccessToken = await signAccessToken({
+        id: storedToken.entityId,
+        type: storedToken.entityType,
+        parameters: storedToken.metadata || {},
+    });
+    return {
+        success: true,
+        entity: entityData,
+        tokenStatus: 'valid',
+        newTokens: {
+            accessToken: newAccessToken,
+            refreshToken: null,
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/types/libraries/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"/","sources":["libraries/auth/index.ts"],"names":[],"mappings":";;;;;;AAgCA,oDAKC;AAGD,sCAKC;AAKD,kEAIC;AAMD,0CA2BC;AAKD,oDAuDC;AAaD,8CAwBC;AAKD,oDAiCE;AAMF,sCAoCC;AAKD,gDAGC;AAKD,wDAGC;AAKD,sCA6BC;AAOD,gDA2EC;AA5YD,gEAA4D;AAE5D,mCAAqC;AACrC,iDAA8C;AAC9C,uCAA2C;AAC3C,oDAAyE;AACzE,4CAAwC;AACxC,+CAAsD;AAE9C,+FAFC,qBAAc,OAED;AAEtB,IAAY,SAGX;AAHD,WAAY,SAAS;IACpB,8BAAiB,CAAA;IACjB,gCAAmB,CAAA;AACpB,CAAC,EAHW,SAAS,yBAAT,SAAS,QAGpB;AAYD,IAAI,uBAAuB,GAAgD,IAAI,CAAC;AAChF,IAAI,UAAU,GAAyC,IAAI,CAAC;AAK5D,SAAgB,oBAAoB;IACnC,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,uBAAuB,CAAC;AAChC,CAAC;AAGD,SAAgB,aAAa;IAC5B,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC;AAKD,SAAgB,2BAA2B,CAAC,gBAAqB;IAChE,uBAAuB,GAAG,IAAA,4BAAgB,EAAC,2BAAY,EAAE,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACnG,UAAU,GAAG,IAAA,4BAAgB,EAAC,cAAK,EAAE,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,CAAC,CAAA;IAC9E,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;AACjD,CAAC;AAMM,KAAK,UAAU,eAAe,CACpC,MAAiF,EACjF,OAAqB;IAErB,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,oBAAY,GAAE,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAEzG,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,OAAO,GAAG;QACf,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,SAAS,CAAC,MAAM;KAC3B,CAAC;IAEF,MAAM,YAAY,GAAgB;QACjC,GAAG,OAAO;QACV,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,IAAI;KACrC,CAAC;IAEF,OAAO,sBAAG,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;AAChD,CAAC;AAKM,KAAK,UAAU,oBAAoB,CACzC,MAAkF,EAClF,OAAyC;IAEzC,MAAM,UAAU,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEnD,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IAE7B,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAEnC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACnD,IAAI,KAAK,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAEtB,QAAQ,IAAI,EAAE,CAAC;gBACd,KAAK,GAAG;oBACP,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,CAAC;oBACrD,MAAM;gBACP,KAAK,GAAG;oBACP,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,CAAC;oBACrD,MAAM;gBACP,KAAK,GAAG;oBACP,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC;oBACjD,MAAM;gBACP,KAAK,GAAG;oBACP,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC;oBAC/C,MAAM;gBACP,KAAK,GAAG;oBACP,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC;oBACnD,MAAM;gBACP,KAAK,GAAG;oBACP,SAAS,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,CAAC;oBACvD,MAAM;YACR,CAAC;QACF,CAAC;aAAM,CAAC;YAEP,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC;IACF,CAAC;SAAM,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAE1C,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,SAAS,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,iBAAiB,CAAC;QACvB,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,UAAU,EAAE,MAAM,CAAC,IAAI;QACvB,SAAS;QACT,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,MAAM,CAAC,UAAU;KAC3B,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC;AACnB,CAAC;AAKD,KAAK,UAAU,iBAAiB,CAAC,WAA+B;IAC/D,MAAM,eAAe,GAAG,IAAA,oBAAY,GAAE,CAAC,sBAAsB,EAAE,CAAC;IAChE,MAAM,eAAe,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;AACrD,CAAC;AAKM,KAAK,UAAU,iBAAiB,CACtC,WAA6B,EAC7B,KAAa;IAEb,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,IAAA,oBAAY,GAAE;aACjC,iBAAiB,EAAE;aACnB,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,GAAG,YAAY,CAAC,CAAC;QAElD,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAO,CAA8C,CAAC;YAGxF,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;gBAC5C,SAAS;YACV,CAAC;YAED,OAAO,OAAO,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;QAEf,CAAC;IACF,CAAC;IAED,OAAO,SAAS,CAAC;AAClB,CAAC;AAKM,KAAK,UAAU,oBAAoB,CAAC,KAAa;IAItD,MAAM,eAAe,GAAG,IAAA,oBAAY,GAAE,CAAC,sBAAsB,EAAE,CAAC;IAChE,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAClE,IAAI,WAAW,IAAI,WAAW,EAAE,UAAU,KAAK,qBAAc,CAAC,YAAY,EAAE,CAAC;QAC5E,MAAM,KAAK,GAAG,MAAM,aAAa,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClF,IAAI,KAAK,IAAI,WAAW,CAAC,QAAQ,IAAI,KAAK,CAAC,iBAAiB,KAAK,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAChG,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACzB,CAAC;IACF,CAAC;IAED,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;IAED,IAAI,WAAW,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;QACjE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;IAED,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;IAED,OAAO;QACN,KAAK,EAAE,IAAI;QACX,MAAM,EAAE;YACP,EAAE,EAAE,WAAW,CAAC,QAAQ;YACxB,IAAI,EAAE,WAAW,CAAC,UAAU;YAC5B,UAAU,EAAE,WAAW,CAAC,QAAQ;SAChC;KACD,CAAC;AACH,CAAC;AAMK,KAAK,UAAU,aAAa,CAAC,YAAoB;IAMvD,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAE5D,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAGvC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IACjC,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC;QAC5C,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;KACnC,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAAC;QAClD,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC7B,CAAC,CAAC;IAEH,OAAO;QACN,WAAW,EAAE,cAAc;QAC3B,YAAY,EAAE,eAAe;QAC7B,MAAM,EAAE;YACP,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;SACjB;KACD,CAAC;AACH,CAAC;AAKM,KAAK,UAAU,kBAAkB,CAAC,KAAa;IACrD,MAAM,eAAe,GAAG,IAAA,oBAAY,GAAE,CAAC,sBAAsB,EAAE,CAAC;IAChE,OAAO,eAAe,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;AAClD,CAAC;AAKM,KAAK,UAAU,sBAAsB,CAAC,QAAgB,EAAE,UAA0B;IACxF,MAAM,eAAe,GAAG,IAAA,oBAAY,GAAE,CAAC,sBAAsB,EAAE,CAAC;IAChE,OAAO,eAAe,CAAC,+BAA+B,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AAC9E,CAAC;AAKM,KAAK,UAAU,aAAa,CAClC,MAAkF,EAClF,OAAuF;IAKvF,MAAM,WAAW,GAAG,MAAM,eAAe,CACxC;QACC,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;KACnC,EACD,OAAO,EAAE,kBAAkB,CAC3B,CAAC;IAEF,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAC9C;QACC,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC7B,EACD,EAAE,SAAS,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAC7C,CAAC;IAEF,OAAO;QACN,WAAW;QACX,YAAY;KACZ,CAAC;AACH,CAAC;AAOM,KAAK,UAAU,kBAAkB,CAAC,YAAoB;IAa5D,MAAM,eAAe,GAAG,IAAA,oBAAY,GAAE,CAAC,sBAAsB,EAAE,CAAC;IAEhE,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAEzE,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,OAAO;YACN,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,SAAS;SACtB,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC;IACxC,IAAI,SAAS,EAAE,CAAC;QACf,OAAO;YACN,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,SAAS;SACtB,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;IAE1C,MAAM,UAAU,GAAG;QAClB,EAAE,EAAE,WAAW,CAAC,QAAQ;QACxB,IAAI,EAAE,WAAW,CAAC,UAAU;QAC5B,UAAU,EAAE,WAAW,CAAC,QAAQ,IAAI,EAAE;KACtC,CAAC;IAEF,IAAI,SAAS,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC;YACrC,EAAE,EAAE,WAAW,CAAC,QAAQ;YACxB,IAAI,EAAE,WAAW,CAAC,UAAU;YAC5B,UAAU,EAAE,WAAW,CAAC,QAAQ,IAAI,EAAE;SACtC,CAAC,CAAC;QAEH,MAAM,eAAe,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAEvD,OAAO;YACN,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,UAAU;YAClB,WAAW,EAAE,SAAS;YACtB,SAAS,EAAE;gBACV,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,YAAY,EAAE,SAAS,CAAC,YAAY;aACpC;SACD,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC;QAC5C,EAAE,EAAE,WAAW,CAAC,QAAQ;QACxB,IAAI,EAAE,WAAW,CAAC,UAAU;QAC5B,UAAU,EAAE,WAAW,CAAC,QAAQ,IAAI,EAAE;KACtC,CAAC,CAAC;IAEH,OAAO;QACN,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,OAAO;QACpB,SAAS,EAAE;YACV,WAAW,EAAE,cAAc;YAC3B,YAAY,EAAE,IAAI;SAClB;KACD,CAAC;AACH,CAAC","sourcesContent":["import jwt, { SignOptions, JwtPayload } from 'jsonwebtoken';\nimport { EntityContext } from '../trpc/context';\nimport { randomBytes } from 'crypto';\nimport { RefreshToken } from './refreshtoken';\nimport { getLibraries } from '../../index';\nimport { getModelForClass, ReturnModelType } from '@typegoose/typegoose';\nimport { Rider } from '../mongo/models';\nimport { AuthEntityType } from '../../utilities/enum';\n\nexport {AuthEntityType}\n\nexport enum TokenType {\n\tACCESS = 'ACCESS',\n\tREFRESH = 'REFRESH',\n}\n\nexport interface RefreshTokenRecord {\n\ttoken: string;\n\tentityId: string;\n\tentityType: AuthEntityType;\n\texpiresAt: Date;\n\tisRevoked: boolean;\n\tmetadata?: Record<string, unknown>;\n}\n\n// Global model for RefreshToken - will be set after initGlobalConnection()\nlet actualRefreshTokenModel: ReturnModelType<typeof RefreshToken> | null = null;\nlet riderModel: ReturnModelType<typeof Rider> | null = null;\n\n/**\n * Get the RefreshToken model (throws if not initialized)\n */\nexport function getRefreshTokenModel(): ReturnModelType<typeof RefreshToken> {\n\tif (!actualRefreshTokenModel) {\n\t\tthrow new Error('RefreshToken model not initialized yet. Call initGlobalConnection() first.');\n\t}\n\treturn actualRefreshTokenModel;\n}\n\n\nexport function getRiderModel(): ReturnModelType<typeof Rider> {\n\tif (!riderModel) {\n\t\tthrow new Error('RefreshToken model not initialized yet. Call initGlobalConnection() first.');\n\t}\n\treturn riderModel;\n}\n\n/**\n * Initialize the RefreshToken model (called from initGlobalConnection)\n */\nexport function initializeRefreshTokenModel(globalConnection: any) {\n\tactualRefreshTokenModel = getModelForClass(RefreshToken, { existingConnection: globalConnection });\n\triderModel = getModelForClass(Rider, { existingConnection: globalConnection })\n\tconsole.log('✅ RefreshToken model initialized');\n}\n\n/**\n * Sign a JWT access token for the given entity (id + type).\n * It will fetch the secret for that entity type and create a token.\n */\nexport async function signAccessToken(\n\tentity: { id: string; type: AuthEntityType; parameters: Record<string, unknown> },\n\toptions?: SignOptions\n): Promise<string> {\n\tif (!entity?.type) {\n\t\tthrow new Error('Entity type is required to sign token');\n\t}\n\n\tconst secret = await getLibraries().getSecretsService().getKey(`${entity.type.toUpperCase()}_JWT_TOKEN`);\n\n\tif (!secret) {\n\t\tthrow new Error(`No secret found for entity type ${entity.type}`);\n\t}\n\n\tconst payload = {\n\t\tid: entity.id,\n\t\ttype: entity.type,\n\t\tparameters: entity.parameters,\n\t\ttokenType: TokenType.ACCESS,\n\t};\n\n\tconst tokenOptions: SignOptions = {\n\t\t...options,\n\t\texpiresIn: options?.expiresIn || '1d',\n\t};\n\n\treturn jwt.sign(payload, secret, tokenOptions);\n}\n\n/**\n * Generate a refresh token for the given entity\n */\nexport async function generateRefreshToken(\n\tentity: { id: string; type: AuthEntityType; parameters?: Record<string, unknown> },\n\toptions?: { expiresIn?: string | number }\n): Promise<string> {\n\tconst tokenValue = randomBytes(40).toString('hex');\n\n\tconst expiresIn = options?.expiresIn || '7d';\n\tconst expiresAt = new Date();\n\n\tif (typeof expiresIn === 'string') {\n\t\t// Parse duration strings like '7d', '30d', etc.\n\t\tconst match = expiresIn.match(/^(\\d+)([smhdwy])$/);\n\t\tif (match) {\n\t\t\tconst value = parseInt(match[1]);\n\t\t\tconst unit = match[2];\n\n\t\t\tswitch (unit) {\n\t\t\t\tcase 's':\n\t\t\t\t\texpiresAt.setSeconds(expiresAt.getSeconds() + value);\n\t\t\t\t\tbreak;\n\t\t\t\tcase 'm':\n\t\t\t\t\texpiresAt.setMinutes(expiresAt.getMinutes() + value);\n\t\t\t\t\tbreak;\n\t\t\t\tcase 'h':\n\t\t\t\t\texpiresAt.setHours(expiresAt.getHours() + value);\n\t\t\t\t\tbreak;\n\t\t\t\tcase 'd':\n\t\t\t\t\texpiresAt.setDate(expiresAt.getDate() + value);\n\t\t\t\t\tbreak;\n\t\t\t\tcase 'w':\n\t\t\t\t\texpiresAt.setDate(expiresAt.getDate() + value * 7);\n\t\t\t\t\tbreak;\n\t\t\t\tcase 'y':\n\t\t\t\t\texpiresAt.setFullYear(expiresAt.getFullYear() + value);\n\t\t\t\t\tbreak;\n\t\t\t}\n\t\t} else {\n\t\t\t// Default to 7 days if format is invalid\n\t\t\texpiresAt.setDate(expiresAt.getDate() + 7);\n\t\t}\n\t} else if (typeof expiresIn === 'number') {\n\t\t// Interpret number as seconds\n\t\texpiresAt.setSeconds(expiresAt.getSeconds() + expiresIn);\n\t}\n\n\tawait storeRefreshToken({\n\t\ttoken: tokenValue,\n\t\tentityId: entity.id,\n\t\tentityType: entity.type,\n\t\texpiresAt,\n\t\tisRevoked: false,\n\t\tmetadata: entity.parameters,\n\t});\n\n\treturn tokenValue;\n}\n\n/**\n * Store a refresh token in the database\n */\nasync function storeRefreshToken(tokenRecord: RefreshTokenRecord): Promise<void> {\n\tconst tokenRepository = getLibraries().getAuthTokenRepository();\n\tawait tokenRepository.saveRefreshToken(tokenRecord);\n}\n\n/**\n * Verify an access token for the given entity types\n */\nexport async function verifyAccessToken(\n\tentityTypes: AuthEntityType[],\n\ttoken: string\n): Promise<EntityContext | undefined> {\n\tfor (const entityType of entityTypes) {\n\t\tconst secret = await getLibraries()\n\t\t\t.getSecretsService()\n\t\t\t.getKey(entityType.toUpperCase() + '_JWT_TOKEN');\n\n\t\ttry {\n\t\t\tconst decoded = jwt.verify(token, secret!) as EntityContext & { tokenType?: TokenType };\n\n\t\t\t// Verify this is an access token\n\t\t\tif (decoded.tokenType !== TokenType.ACCESS) {\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\treturn decoded;\n\t\t} catch (err) {\n\t\t\t// Continue to the next entity type\n\t\t}\n\t}\n\n\treturn undefined;\n}\n\n/**\n * Validate a refresh token and return the associated entity\n */\nexport async function validateRefreshToken(token: string): Promise<{\n\t\tvalid: boolean;\n\t\tentity?: { id: string; type: AuthEntityType; parameters?: Record<string, unknown> };\n\t}> {\n\t\tconst tokenRepository = getLibraries().getAuthTokenRepository();\n\t\tconst storedToken = await tokenRepository.findRefreshToken(token);\t\t\n\t\tif (storedToken && storedToken?.entityType === AuthEntityType.DELIVERY_BOY) {\n\t\t\tconst rider = await getRiderModel().findOne({ _id: storedToken.entityId }).lean();\t\t\t\n\t\t\tif (rider && storedToken.metadata && rider.lastLoginDeviceId !== storedToken.metadata.deviceId) {\t\t\t\t\n\t\t\t\treturn { valid: false };\n\t\t\t}\n\t\t}\n\n\t\tif (!storedToken) {\n\t\t\treturn { valid: false };\n\t\t}\n\n\t\tif (storedToken.expiresAt && new Date() > storedToken.expiresAt) {\n\t\t\treturn { valid: false };\n\t\t}\n\n\t\tif (storedToken.isRevoked) {\n\t\t\treturn { valid: false };\n\t\t}\n\n\t\treturn {\n\t\t\tvalid: true,\n\t\t\tentity: {\n\t\t\t\tid: storedToken.entityId,\n\t\t\t\ttype: storedToken.entityType,\n\t\t\t\tparameters: storedToken.metadata,\n\t\t\t},\n\t\t};\n\t}\n\n/**\n * Refresh authentication tokens\n * Returns new access and refresh tokens\n */\nexport async function refreshTokens(refreshToken: string): Promise<{\n\taccessToken: string;\n\trefreshToken: string;\n\tentity: { id: string; type: AuthEntityType };\n} | null> {\n\t// Validate the refresh token\n\tconst validation = await validateRefreshToken(refreshToken);\n\n\tif (!validation.valid || !validation.entity) {\n\t\treturn null;\n\t}\n\n\tawait revokeRefreshToken(refreshToken);\n\n\t// Create new tokens\n\tconst entity = validation.entity;\n\tconst newAccessToken = await signAccessToken({\n\t\tid: entity.id,\n\t\ttype: entity.type,\n\t\tparameters: entity.parameters || {},\n\t});\n\n\tconst newRefreshToken = await generateRefreshToken({\n\t\tid: entity.id,\n\t\ttype: entity.type,\n\t\tparameters: entity.parameters,\n\t});\n\n\treturn {\n\t\taccessToken: newAccessToken,\n\t\trefreshToken: newRefreshToken,\n\t\tentity: {\n\t\t\tid: entity.id,\n\t\t\ttype: entity.type,\n\t\t},\n\t};\n}\n\n/**\n * Revoke a refresh token\n */\nexport async function revokeRefreshToken(token: string): Promise<boolean> {\n\tconst tokenRepository = getLibraries().getAuthTokenRepository();\n\treturn tokenRepository.revokeRefreshToken(token);\n}\n\n/**\n * Revoke all refresh tokens for a specific entity\n */\nexport async function revokeAllRefreshTokens(entityId: string, entityType: AuthEntityType): Promise<boolean> {\n\tconst tokenRepository = getLibraries().getAuthTokenRepository();\n\treturn tokenRepository.revokeAllRefreshTokensForEntity(entityId, entityType);\n}\n\n/**\n * Sign both access and refresh tokens - utility for initial login/authentication\n */\nexport async function signTokenPair(\n\tentity: { id: string; type: AuthEntityType; parameters?: Record<string, unknown> },\n\toptions?: { accessTokenOptions?: SignOptions; refreshTokenExpiresIn?: string | number }\n): Promise<{\n\taccessToken: string;\n\trefreshToken: string;\n}> {\n\tconst accessToken = await signAccessToken(\n\t\t{\n\t\t\tid: entity.id,\n\t\t\ttype: entity.type,\n\t\t\tparameters: entity.parameters || {},\n\t\t},\n\t\toptions?.accessTokenOptions\n\t);\n\n\tconst refreshToken = await generateRefreshToken(\n\t\t{\n\t\t\tid: entity.id,\n\t\t\ttype: entity.type,\n\t\t\tparameters: entity.parameters,\n\t\t},\n\t\t{ expiresIn: options?.refreshTokenExpiresIn }\n\t);\n\n\treturn {\n\t\taccessToken,\n\t\trefreshToken,\n\t};\n}\n\n/**\n * Handle the refresh token validation and renewal logic\n * @param refreshToken The refresh token to validate or renew\n * @returns Result object with token status and renewal information\n */\nexport async function handleTokenRenewal(refreshToken: string): Promise<{\n\tsuccess: boolean;\n\tentity?: {\n\t\tid: string;\n\t\ttype: AuthEntityType;\n\t\tparameters: Record<string, unknown>;\n\t};\n\ttokenStatus: 'valid' | 'expired' | 'revoked' | 'invalid';\n\tnewTokens?: {\n\t\taccessToken: string;\n\t\trefreshToken?: string | null;\n\t};\n}> {\n\tconst tokenRepository = getLibraries().getAuthTokenRepository();\n\n\tconst storedToken = await tokenRepository.findRefreshToken(refreshToken);\n\n\tif (!storedToken) {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\ttokenStatus: 'invalid',\n\t\t};\n\t}\n\n\tconst isRevoked = storedToken.isRevoked;\n\tif (isRevoked) {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\ttokenStatus: 'revoked',\n\t\t};\n\t}\n\n\tconst isExpired = storedToken.isExpired();\n\n\tconst entityData = {\n\t\tid: storedToken.entityId,\n\t\ttype: storedToken.entityType,\n\t\tparameters: storedToken.metadata || {},\n\t};\n\n\tif (isExpired) {\n\t\tconst newTokens = await signTokenPair({\n\t\t\tid: storedToken.entityId,\n\t\t\ttype: storedToken.entityType,\n\t\t\tparameters: storedToken.metadata || {},\n\t\t});\n\n\t\tawait tokenRepository.revokeRefreshToken(refreshToken);\n\n\t\treturn {\n\t\t\tsuccess: true,\n\t\t\tentity: entityData,\n\t\t\ttokenStatus: 'expired',\n\t\t\tnewTokens: {\n\t\t\t\taccessToken: newTokens.accessToken,\n\t\t\t\trefreshToken: newTokens.refreshToken,\n\t\t\t},\n\t\t};\n\t}\n\n\tconst newAccessToken = await signAccessToken({\n\t\tid: storedToken.entityId,\n\t\ttype: storedToken.entityType,\n\t\tparameters: storedToken.metadata || {},\n\t});\n\n\treturn {\n\t\tsuccess: true,\n\t\tentity: entityData,\n\t\ttokenStatus: 'valid',\n\t\tnewTokens: {\n\t\t\taccessToken: newAccessToken,\n\t\t\trefreshToken: null,\n\t\t},\n\t};\n}\n"]}

package/dist/types/libraries/auth/refreshtoken.d.ts

@@ -0,0 +1,15 @@
+import { DocumentType, ReturnModelType } from '@typegoose/typegoose';
+import { TimeStamps } from '@typegoose/typegoose/lib/defaultClasses';
+import { AuthEntityType } from './index';
+export declare class RefreshToken extends TimeStamps {
+    token: string;
+    entityId: string;
+    entityType: AuthEntityType;
+    expiresAt?: Date | null;
+    isRevoked: boolean;
+    metadata?: Record<string, unknown>;
+    static findValidToken(this: ReturnModelType<typeof RefreshToken>, token: string): Promise<DocumentType<RefreshToken> | null>;
+    static revokeAllForEntity(this: ReturnModelType<typeof RefreshToken>, entityId: string, entityType: AuthEntityType): Promise<number>;
+    isExpired(): boolean;
+    static cleanupExpiredTokens(this: ReturnModelType<typeof RefreshToken>, olderThan?: Date): Promise<number>;
+}

package/dist/types/libraries/auth/refreshtoken.js

@@ -0,0 +1,91 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var RefreshToken_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RefreshToken = void 0;
+const typegoose_1 = require("@typegoose/typegoose");
+const defaultClasses_1 = require("@typegoose/typegoose/lib/defaultClasses");
+const index_1 = require("./index");
+let RefreshToken = RefreshToken_1 = class RefreshToken extends defaultClasses_1.TimeStamps {
+    token;
+    entityId;
+    entityType;
+    expiresAt;
+    isRevoked;
+    metadata;
+    static async findValidToken(token) {
+        const query = { token, isRevoked: false };
+        query.$or = [{ expiresAt: { $exists: false } }, { expiresAt: null }, { expiresAt: { $gt: new Date() } }];
+        return this.findOne(query);
+    }
+    static async revokeAllForEntity(entityId, entityType) {
+        const result = await this.updateMany({ entityId, entityType, isRevoked: false }, { isRevoked: true });
+        return result.modifiedCount;
+    }
+    isExpired() {
+        if (!this.expiresAt)
+            return false;
+        return new Date() > this.expiresAt;
+    }
+    static async cleanupExpiredTokens(olderThan) {
+        const cutoffDate = olderThan || new Date();
+        const result = await this.deleteMany({
+            expiresAt: { $ne: null, $lt: cutoffDate },
+            isRevoked: true,
+        });
+        return result.deletedCount;
+    }
+};
+exports.RefreshToken = RefreshToken;
+__decorate([
+    (0, typegoose_1.prop)({ required: true, type: () => String, unique: true }),
+    __metadata("design:type", String)
+], RefreshToken.prototype, "token", void 0);
+__decorate([
+    (0, typegoose_1.prop)({ required: true, type: () => String }),
+    __metadata("design:type", String)
+], RefreshToken.prototype, "entityId", void 0);
+__decorate([
+    (0, typegoose_1.prop)({
+        required: true,
+        type: () => String,
+        enum: index_1.AuthEntityType,
+    }),
+    __metadata("design:type", String)
+], RefreshToken.prototype, "entityType", void 0);
+__decorate([
+    (0, typegoose_1.prop)({ required: false, type: () => Date }),
+    __metadata("design:type", Object)
+], RefreshToken.prototype, "expiresAt", void 0);
+__decorate([
+    (0, typegoose_1.prop)({ required: true, type: () => Boolean, default: false }),
+    __metadata("design:type", Boolean)
+], RefreshToken.prototype, "isRevoked", void 0);
+__decorate([
+    (0, typegoose_1.prop)({ required: false, type: () => Object }),
+    __metadata("design:type", Object)
+], RefreshToken.prototype, "metadata", void 0);
+exports.RefreshToken = RefreshToken = RefreshToken_1 = __decorate([
+    (0, typegoose_1.modelOptions)({
+        schemaOptions: {
+            collection: 'refresh_tokens',
+            autoCreate: true,
+            toJSON: { virtuals: true },
+            toObject: { virtuals: true },
+        },
+        options: {
+            allowMixed: typegoose_1.Severity.ALLOW,
+        },
+    }),
+    (0, typegoose_1.index)({ entityId: 1, entityType: 1 }),
+    (0, typegoose_1.index)({ isRevoked: 1 })
+], RefreshToken);
+//# sourceMappingURL=refreshtoken.js.map

package/dist/types/libraries/auth/refreshtoken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refreshtoken.js","sourceRoot":"/","sources":["libraries/auth/refreshtoken.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,oDAQ8B;AAC9B,4EAAqE;AAErE,mCAAyC;AAelC,IAAM,YAAY,oBAAlB,MAAM,YAAa,SAAQ,2BAAU;IAEpC,KAAK,CAAU;IAGf,QAAQ,CAAU;IAOlB,UAAU,CAAkB;IAG5B,SAAS,CAAe;IAGxB,SAAS,CAAW;IAGpB,QAAQ,CAA2B;IAKnC,MAAM,CAAC,KAAK,CAAC,cAAc,CAEjC,KAAa;QAEb,MAAM,KAAK,GAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAG/C,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAEzG,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAKM,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAErC,QAAgB,EAChB,UAA0B;QAE1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEtG,OAAO,MAAM,CAAC,aAAa,CAAC;IAC7B,CAAC;IAKM,SAAS;QACf,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAClC,OAAO,IAAI,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;IACpC,CAAC;IAMM,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAEvC,SAAgB;QAEhB,MAAM,UAAU,GAAG,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC;QAE3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACpC,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE;YACzC,SAAS,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,YAAY,CAAC;IAC5B,CAAC;CACD,CAAA;AA5EY,oCAAY;AAEjB;IADN,IAAA,gBAAI,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;;2CACrC;AAGf;IADN,IAAA,gBAAI,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;;8CACpB;AAOlB;IALN,IAAA,gBAAI,EAAC;QACL,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM;QAClB,IAAI,EAAE,sBAAc;KACpB,CAAC;;gDACiC;AAG5B;IADN,IAAA,gBAAI,EAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;;+CACb;AAGxB;IADN,IAAA,gBAAI,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;;+CACnC;AAGpB;IADN,IAAA,gBAAI,EAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;;8CACJ;uBArB9B,YAAY;IAbxB,IAAA,wBAAY,EAAC;QACb,aAAa,EAAE;YACd,UAAU,EAAE,gBAAgB;YAC5B,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC1B,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC5B;QACD,OAAO,EAAE;YACR,UAAU,EAAE,oBAAQ,CAAC,KAAK;SAC1B;KACD,CAAC;IACD,IAAA,iBAAK,EAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IACrC,IAAA,iBAAK,EAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;GACX,YAAY,CA4ExB","sourcesContent":["import {\n\tprop,\n\tgetModelForClass,\n\tmodelOptions,\n\tindex,\n\tSeverity,\n\tDocumentType,\n\tReturnModelType,\n} from '@typegoose/typegoose';\nimport { TimeStamps } from '@typegoose/typegoose/lib/defaultClasses';\nimport { getLibraries } from '../../index';\nimport { AuthEntityType } from './index';\n\n@modelOptions({\n\tschemaOptions: {\n\t\tcollection: 'refresh_tokens',\n\t\tautoCreate: true,\n\t\ttoJSON: { virtuals: true },\n\t\ttoObject: { virtuals: true },\n\t},\n\toptions: {\n\t\tallowMixed: Severity.ALLOW, // Allow mixed types for metadata\n\t},\n})\n@index({ entityId: 1, entityType: 1 })\n@index({ isRevoked: 1 })\nexport class RefreshToken extends TimeStamps {\n\t@prop({ required: true, type: () => String, unique: true })\n\tpublic token!: string;\n\n\t@prop({ required: true, type: () => String })\n\tpublic entityId!: string;\n\n\t@prop({\n\t\trequired: true,\n\t\ttype: () => String,\n\t\tenum: AuthEntityType,\n\t})\n\tpublic entityType!: AuthEntityType;\n\n\t@prop({ required: false, type: () => Date })\n\tpublic expiresAt?: Date | null;\n\n\t@prop({ required: true, type: () => Boolean, default: false })\n\tpublic isRevoked!: boolean;\n\n\t@prop({ required: false, type: () => Object })\n\tpublic metadata?: Record<string, unknown>;\n\n\t/**\n\t * Static method to find a valid token\n\t */\n\tpublic static async findValidToken(\n\t\tthis: ReturnModelType<typeof RefreshToken>,\n\t\ttoken: string\n\t): Promise<DocumentType<RefreshToken> | null> {\n\t\tconst query: any = { token, isRevoked: false };\n\n\t\t// Only check expiration if token has an expiration date\n\t\tquery.$or = [{ expiresAt: { $exists: false } }, { expiresAt: null }, { expiresAt: { $gt: new Date() } }];\n\n\t\treturn this.findOne(query);\n\t}\n\n\t/**\n\t * Static method to revoke all tokens for an entity\n\t */\n\tpublic static async revokeAllForEntity(\n\t\tthis: ReturnModelType<typeof RefreshToken>,\n\t\tentityId: string,\n\t\tentityType: AuthEntityType\n\t): Promise<number> {\n\t\tconst result = await this.updateMany({ entityId, entityType, isRevoked: false }, { isRevoked: true });\n\n\t\treturn result.modifiedCount;\n\t}\n\n\t/**\n\t * Check if this token is expired\n\t */\n\tpublic isExpired(): boolean {\n\t\tif (!this.expiresAt) return false;\n\t\treturn new Date() > this.expiresAt;\n\t}\n\n\t/**\n\t * Static method to clean up old expired tokens\n\t * Call this periodically to keep your database clean\n\t */\n\tpublic static async cleanupExpiredTokens(\n\t\tthis: ReturnModelType<typeof RefreshToken>,\n\t\tolderThan?: Date\n\t): Promise<number> {\n\t\tconst cutoffDate = olderThan || new Date();\n\n\t\tconst result = await this.deleteMany({\n\t\t\texpiresAt: { $ne: null, $lt: cutoffDate },\n\t\t\tisRevoked: true, // Only delete tokens that are both expired and already revoked\n\t\t});\n\n\t\treturn result.deletedCount;\n\t}\n}\n"]}

package/dist/types/libraries/auth/repository.d.ts

@@ -0,0 +1,18 @@
+import { AuthEntityType } from './index';
+import { DocumentType } from '@typegoose/typegoose';
+import { RefreshToken } from './refreshtoken';
+export declare class TokenRepository {
+    saveRefreshToken(token: {
+        token: string;
+        entityId: string;
+        entityType: AuthEntityType;
+        expiresAt?: Date | null;
+        isRevoked?: boolean;
+        metadata?: Record<string, unknown>;
+    }): Promise<DocumentType<RefreshToken>>;
+    findRefreshToken(token: string): Promise<DocumentType<RefreshToken> | null>;
+    revokeRefreshToken(token: string): Promise<boolean>;
+    revokeAllRefreshTokensForEntity(entityId: string, entityType: AuthEntityType): Promise<boolean>;
+    getActiveTokensForEntity(entityId: string, entityType: AuthEntityType): Promise<DocumentType<RefreshToken>[]>;
+    cleanupExpiredTokens(olderThan?: Date): Promise<number>;
+}

package/dist/types/libraries/auth/repository.js

@@ -0,0 +1,43 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenRepository = void 0;
+const index_1 = require("./index");
+const typedi_1 = require("typedi");
+let TokenRepository = class TokenRepository {
+    async saveRefreshToken(token) {
+        return (0, index_1.getRefreshTokenModel)().create(token);
+    }
+    async findRefreshToken(token) {
+        return (0, index_1.getRefreshTokenModel)().findValidToken(token);
+    }
+    async revokeRefreshToken(token) {
+        const result = await (0, index_1.getRefreshTokenModel)().updateOne({ token }, { isRevoked: true });
+        return result.modifiedCount > 0;
+    }
+    async revokeAllRefreshTokensForEntity(entityId, entityType) {
+        const count = await (0, index_1.getRefreshTokenModel)().revokeAllForEntity(entityId, entityType);
+        return count > 0;
+    }
+    async getActiveTokensForEntity(entityId, entityType) {
+        return (0, index_1.getRefreshTokenModel)().find({
+            entityId,
+            entityType,
+            isRevoked: false,
+            $or: [{ expiresAt: { $exists: false } }, { expiresAt: null }, { expiresAt: { $gt: new Date() } }],
+        });
+    }
+    async cleanupExpiredTokens(olderThan) {
+        return (0, index_1.getRefreshTokenModel)().cleanupExpiredTokens(olderThan);
+    }
+};
+exports.TokenRepository = TokenRepository;
+exports.TokenRepository = TokenRepository = __decorate([
+    (0, typedi_1.Service)()
+], TokenRepository);
+//# sourceMappingURL=repository.js.map

package/dist/types/libraries/auth/repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.js","sourceRoot":"/","sources":["libraries/auth/repository.ts"],"names":[],"mappings":";;;;;;;;;AAAA,mCAA6D;AAG7D,mCAAiC;AAG1B,IAAM,eAAe,GAArB,MAAM,eAAe;IAI3B,KAAK,CAAC,gBAAgB,CAAC,KAOtB;QACA,OAAO,IAAA,4BAAoB,GAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAKD,KAAK,CAAC,gBAAgB,CAAC,KAAa;QACnC,OAAO,IAAA,4BAAoB,GAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;IAKD,KAAK,CAAC,kBAAkB,CAAC,KAAa;QACrC,MAAM,MAAM,GAAG,MAAM,IAAA,4BAAoB,GAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEtF,OAAO,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC;IACjC,CAAC;IAKD,KAAK,CAAC,+BAA+B,CAAC,QAAgB,EAAE,UAA0B;QACjF,MAAM,KAAK,GAAG,MAAM,IAAA,4BAAoB,GAAE,CAAC,kBAAkB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACpF,OAAO,KAAK,GAAG,CAAC,CAAC;IAClB,CAAC;IAKD,KAAK,CAAC,wBAAwB,CAC7B,QAAgB,EAChB,UAA0B;QAE1B,OAAO,IAAA,4BAAoB,GAAE,CAAC,IAAI,CAAC;YAClC,QAAQ;YACR,UAAU;YACV,SAAS,EAAE,KAAK;YAChB,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC;SACjG,CAAC,CAAC;IACJ,CAAC;IAMD,KAAK,CAAC,oBAAoB,CAAC,SAAgB;QAC1C,OAAO,IAAA,4BAAoB,GAAE,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC/D,CAAC;CACD,CAAA;AA7DY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,gBAAO,GAAE;GACG,eAAe,CA6D3B","sourcesContent":["import {AuthEntityType, getRefreshTokenModel} from './index';\nimport { DocumentType } from '@typegoose/typegoose';\nimport { RefreshToken } from './refreshtoken';\nimport { Service } from 'typedi';\n\n@Service()\nexport class TokenRepository {\n\t/**\n\t * Save a refresh token\n\t */\n\tasync saveRefreshToken(token: {\n\t\ttoken: string;\n\t\tentityId: string;\n\t\tentityType: AuthEntityType;\n\t\texpiresAt?: Date | null;\n\t\tisRevoked?: boolean;\n\t\tmetadata?: Record<string, unknown>;\n\t}): Promise<DocumentType<RefreshToken>> {\n\t\treturn getRefreshTokenModel().create(token);\n\t}\n\n\t/**\n\t * Find a refresh token by its value\n\t */\n\tasync findRefreshToken(token: string): Promise<DocumentType<RefreshToken> | null> {\n\t\treturn getRefreshTokenModel().findValidToken(token);\n\t}\n\n\t/**\n\t * Revoke a specific refresh token\n\t */\n\tasync revokeRefreshToken(token: string): Promise<boolean> {\n\t\tconst result = await getRefreshTokenModel().updateOne({ token }, { isRevoked: true });\n\n\t\treturn result.modifiedCount > 0;\n\t}\n\n\t/**\n\t * Revoke all refresh tokens for a specific entity\n\t */\n\tasync revokeAllRefreshTokensForEntity(entityId: string, entityType: AuthEntityType): Promise<boolean> {\n\t\tconst count = await getRefreshTokenModel().revokeAllForEntity(entityId, entityType);\n\t\treturn count > 0;\n\t}\n\n\t/**\n\t * Get all active tokens for an entity\n\t */\n\tasync getActiveTokensForEntity(\n\t\tentityId: string,\n\t\tentityType: AuthEntityType\n\t): Promise<DocumentType<RefreshToken>[]> {\n\t\treturn getRefreshTokenModel().find({\n\t\t\tentityId,\n\t\t\tentityType,\n\t\t\tisRevoked: false,\n\t\t\t$or: [{ expiresAt: { $exists: false } }, { expiresAt: null }, { expiresAt: { $gt: new Date() } }],\n\t\t});\n\t}\n\n\t/**\n\t * Clean up expired tokens (can be called periodically if needed)\n\t * Note: MongoDB TTL index will also handle this automatically for tokens with expiresAt\n\t */\n\tasync cleanupExpiredTokens(olderThan?: Date): Promise<number> {\n\t\treturn getRefreshTokenModel().cleanupExpiredTokens(olderThan);\n\t}\n}\n"]}

package/dist/types/libraries/bullmq/bull-mq-service.d.ts

@@ -0,0 +1,9 @@
+import { Queue, Worker, Job, WorkerOptions } from 'bullmq';
+import { RedisService } from '../redis/index';
+export declare class BullMQService {
+    private redisService;
+    private connection;
+    constructor(redisService: RedisService);
+    createQueue(queueName: string): Queue;
+    createWorker<T = any, R = void>(queueName: string, processor: (job: Job<T>) => Promise<R>, options?: Omit<WorkerOptions, 'connection'>): Worker<T, R>;
+}

package/dist/types/libraries/bullmq/bull-mq-service.js

@@ -0,0 +1,42 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BullMQService = void 0;
+const typedi_1 = require("typedi");
+const bullmq_1 = require("bullmq");
+const index_1 = require("../redis/index");
+let BullMQService = class BullMQService {
+    redisService;
+    connection;
+    constructor(redisService) {
+        this.redisService = redisService;
+        this.connection = { connection: this.redisService.redisClient };
+    }
+    createQueue(queueName) {
+        return new bullmq_1.Queue(queueName, this.connection);
+    }
+    createWorker(queueName, processor, options) {
+        return new bullmq_1.Worker(queueName, processor, {
+            ...this.connection,
+            ...options,
+        });
+    }
+};
+exports.BullMQService = BullMQService;
+exports.BullMQService = BullMQService = __decorate([
+    (0, typedi_1.Service)(),
+    __param(0, (0, typedi_1.Inject)(() => index_1.RedisService)),
+    __metadata("design:paramtypes", [index_1.RedisService])
+], BullMQService);
+//# sourceMappingURL=bull-mq-service.js.map

package/dist/types/libraries/bullmq/bull-mq-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bull-mq-service.js","sourceRoot":"/","sources":["libraries/bullmq/bull-mq-service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAEA,mCAAyC;AACzC,mCAAyE;AACzE,0CAA8C;AAGvC,IAAM,aAAa,GAAnB,MAAM,aAAa;IAGuB;IAFxC,UAAU,CAAoB;IAEtC,YAAgD,YAA0B;QAA1B,iBAAY,GAAZ,YAAY,CAAc;QACzE,IAAI,CAAC,UAAU,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;IACjE,CAAC;IAKM,WAAW,CAAC,SAAiB;QACnC,OAAO,IAAI,cAAK,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC;IAKM,YAAY,CAClB,SAAiB,EACjB,SAAsC,EACtC,OAA2C;QAE3C,OAAO,IAAI,eAAM,CAAO,SAAS,EAAE,SAAS,EAAE;YAC7C,GAAG,IAAI,CAAC,UAAU;YAClB,GAAG,OAAO;SACV,CAAC,CAAC;IACJ,CAAC;CACD,CAAA;AA3BY,sCAAa;wBAAb,aAAa;IADzB,IAAA,gBAAO,GAAE;IAII,WAAA,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,oBAAY,CAAC,CAAA;qCAAuB,oBAAY;GAH9D,aAAa,CA2BzB","sourcesContent":["// lyxa-core/libraries/bullmq/BullMQService.ts\n\nimport { Service, Inject } from 'typedi';\nimport { Queue, Worker, Job, QueueOptions, WorkerOptions } from 'bullmq';\nimport { RedisService } from '../redis/index';\n\n@Service()\nexport class BullMQService {\n\tprivate connection: QueueOptions | any\n\n\tconstructor(@Inject(() => RedisService) private redisService: RedisService) {\n\t\tthis.connection = { connection: this.redisService.redisClient };\n\t}\n\n\t/**\n\t * Creates a new queue.\n\t */\n\tpublic createQueue(queueName: string): Queue {\n\t\treturn new Queue(queueName, this.connection);\n\t}\n\n\t/**\n\t * Creates a worker to process jobs from a given queue.\n\t */\n\tpublic createWorker<T = any, R = void>(\n\t\tqueueName: string,\n\t\tprocessor: (job: Job<T>) => Promise<R>,\n\t\toptions?: Omit<WorkerOptions, 'connection'>\n\t): Worker<T, R> {\n\t\treturn new Worker<T, R>(queueName, processor, {\n\t\t\t...this.connection,\n\t\t\t...options,\n\t\t});\n\t}\n}\n"]}

package/dist/types/libraries/cache/settings/index.d.ts

@@ -0,0 +1,7 @@
+import { RedisService } from '../../redis';
+export declare class CachedSettingsService {
+    private readonly redisService;
+    constructor(redisService: RedisService);
+    getSettings(): Promise<any>;
+    updateSettings(): Promise<string>;
+}

package/dist/types/libraries/cache/settings/index.js

@@ -0,0 +1,56 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CachedSettingsService = void 0;
+const typedi_1 = require("typedi");
+const redis_1 = require("../../redis");
+const models_1 = require("../../mongo/models");
+const getSettingsKey = () => {
+    const tenant = process.env.tenant || 'lb';
+    const environment = process.env.environment || 'dev';
+    return `settings:${tenant}:${environment}`;
+};
+let CachedSettingsService = class CachedSettingsService {
+    redisService;
+    constructor(redisService) {
+        this.redisService = redisService;
+    }
+    async getSettings() {
+        const key = getSettingsKey();
+        const cached = await this.redisService.getCachedObject(key);
+        if (cached)
+            return cached;
+        const settings = await models_1.SettingModel.findOne({}).lean().exec();
+        if (!settings)
+            throw new Error('Settings not found');
+        await this.redisService.cacheObject(key, settings);
+        return settings;
+    }
+    async updateSettings() {
+        const key = getSettingsKey();
+        await this.redisService.deleteCachedObject(key);
+        const settings = await models_1.SettingModel.findOne({}).lean().exec();
+        if (!settings)
+            throw new Error('Settings not found');
+        await this.redisService.cacheObject(key, settings);
+        return 'Settings cache cleared successfully';
+    }
+};
+exports.CachedSettingsService = CachedSettingsService;
+exports.CachedSettingsService = CachedSettingsService = __decorate([
+    (0, typedi_1.Service)(),
+    __param(0, (0, typedi_1.Inject)(() => redis_1.RedisService)),
+    __metadata("design:paramtypes", [redis_1.RedisService])
+], CachedSettingsService);
+//# sourceMappingURL=index.js.map

package/dist/types/libraries/cache/settings/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"/","sources":["libraries/cache/settings/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,mCAAyC;AACzC,uCAA2C;AAC3C,+CAAkD;AAElD,MAAM,cAAc,GAAG,GAAW,EAAE;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC;IAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,KAAK,CAAC;IACrD,OAAO,YAAY,MAAM,IAAI,WAAW,EAAE,CAAC;AAC5C,CAAC,CAAC;AAGK,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IACwB;IAAzD,YAAyD,YAA0B;QAA1B,iBAAY,GAAZ,YAAY,CAAc;IAAG,CAAC;IAEvF,KAAK,CAAC,WAAW;QAChB,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAM,GAAG,CAAC,CAAC;QACjE,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,QAAQ,GAAG,MAAM,qBAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QAC9D,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACrD,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACnD,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,cAAc;QACnB,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;QAC7B,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,qBAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QAC9D,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACrD,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACnD,OAAO,qCAAqC,CAAC;IAC9C,CAAC;CACD,CAAA;AArBY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,gBAAO,GAAE;IAEI,WAAA,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,oBAAY,CAAC,CAAA;qCAAgC,oBAAY;GADvE,qBAAqB,CAqBjC","sourcesContent":["import { Service, Inject } from 'typedi';\nimport { RedisService } from '../../redis';\nimport { SettingModel } from '../../mongo/models';\n\nconst getSettingsKey = (): string => {\n\tconst tenant = process.env.tenant || 'lb';\n\tconst environment = process.env.environment || 'dev';\n\treturn `settings:${tenant}:${environment}`;\n};\n\n@Service()\nexport class CachedSettingsService {\n\tconstructor(@Inject(() => RedisService) private readonly redisService: RedisService) {}\n\n\tasync getSettings(): Promise<any> {\n\t\tconst key = getSettingsKey();\n\t\tconst cached = await this.redisService.getCachedObject<any>(key);\n\t\tif (cached) return cached;\n\t\tconst settings = await SettingModel.findOne({}).lean().exec();\n\t\tif (!settings) throw new Error('Settings not found');\n\t\tawait this.redisService.cacheObject(key, settings);\n\t\treturn settings;\n\t}\n\n\tasync updateSettings(): Promise<string> {\t\t\n\t\tconst key = getSettingsKey();\n\t\tawait this.redisService.deleteCachedObject(key);\n\t\tconst settings = await SettingModel.findOne({}).lean().exec();\n\t\tif (!settings) throw new Error('Settings not found');\n\t\tawait this.redisService.cacheObject(key, settings);\n\t\treturn 'Settings cache cleared successfully';\n\t}\n}\n"]}