@nauth-toolkit/core 0.1.14 → 0.1.17

package/dist/dto/has-provider.dto.js

@@ -1,4 +1,16 @@
 "use strict";
+/**
+ * DTO for checking if MFA provider is registered
+ *
+ * Used to check if a specific MFA provider is registered and available.
+ *
+ * @example
+ * ```typescript
+ * const hasTotp = await mfaService.hasProvider({
+ *   methodName: 'totp'
+ * });
+ * ```
+ */
 var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -13,7 +25,22 @@ exports.HasProviderResponseDTO = exports.HasProviderDTO = void 0;
 const class_validator_1 = require("class-validator");
 const class_transformer_1 = require("class-transformer");
 const mfa_method_enum_1 = require("../enums/mfa-method.enum");
+/**
+ * DTO for checking if MFA provider is registered
+ */
 class HasProviderDTO {
+    /**
+     * Provider method name
+     *
+     * Validation:
+     * - Must be one of: totp, sms, email, passkey
+     * - Max 50 characters
+     *
+     * Sanitization:
+     * - Trimmed and lowercased
+     *
+     * @example "totp"
+     */
     methodName;
 }
 exports.HasProviderDTO = HasProviderDTO;
@@ -31,7 +58,13 @@ __decorate([
     }),
     __metadata("design:type", String)
 ], HasProviderDTO.prototype, "methodName", void 0);
+/**
+ * Response DTO for has provider check
+ */
 class HasProviderResponseDTO {
+    /**
+     * Whether provider is registered
+     */
     hasProvider;
 }
 exports.HasProviderResponseDTO = HasProviderResponseDTO;

package/dist/dto/has-provider.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"has-provider.dto.js","sourceRoot":"","sources":["../../src/dto/has-provider.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAaA,qDAA8D;AAC9D,yDAA8C;AAC9C,8DAAqD;AAKrD,MAAa,cAAc;IAwBzB,UAAU,CAAU;CACrB;AAzBD,wCAyBC;AADC;IAXC,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;IACrD,IAAA,wBAAM,EAAC,2BAAS,EAAE;QACjB,OAAO,EAAE,uDAAuD;KACjE,CAAC;IACD,IAAA,2BAAS,EAAC,EAAE,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IACvE,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;kDACkB;AAMtB,MAAa,sBAAsB;IAIjC,WAAW,CAAW;CACvB;AALD,wDAKC"}
+{"version":3,"file":"has-provider.dto.js","sourceRoot":"","sources":["../../src/dto/has-provider.dto.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;;;;;;;;;;AAEH,qDAA8D;AAC9D,yDAA8C;AAC9C,8DAAqD;AAErD;;GAEG;AACH,MAAa,cAAc;IACzB;;;;;;;;;;;OAWG;IAYH,UAAU,CAAU;CACrB;AAzBD,wCAyBC;AADC;IAXC,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;IACrD,IAAA,wBAAM,EAAC,2BAAS,EAAE;QACjB,OAAO,EAAE,uDAAuD;KACjE,CAAC;IACD,IAAA,2BAAS,EAAC,EAAE,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IACvE,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;kDACkB;AAGtB;;GAEG;AACH,MAAa,sBAAsB;IACjC;;OAEG;IACH,WAAW,CAAW;CACvB;AALD,wDAKC"}

package/dist/dto/index.js

@@ -14,6 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+// Core Auth DTOs
 __exportStar(require("./signup.dto"), exports);
 __exportStar(require("./login.dto"), exports);
 __exportStar(require("./change-password.dto"), exports);
@@ -64,7 +65,11 @@ __exportStar(require("./logout-all-response.dto"), exports);
 __exportStar(require("./set-must-change-password.dto"), exports);
 __exportStar(require("./set-must-change-password-response.dto"), exports);
 __exportStar(require("./admin-set-password.dto"), exports);
+// Note: trust-device.dto.ts removed - trustDevice() no longer takes parameters
 __exportStar(require("./trust-device-response.dto"), exports);
 __exportStar(require("./is-trusted-device-response.dto"), exports);
 __exportStar(require("./social-auth.dto"), exports);
+// Note: Social and MFA DTOs moved to their respective packages
+// - social-login.dto → @nauth-toolkit/social-*
+// - mfa.dto → @nauth-toolkit/mfa-*
 //# sourceMappingURL=index.js.map

package/dist/dto/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/dto/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AACA,+CAA6B;AAC7B,8CAA4B;AAC5B,wDAAsC;AACtC,gEAA8C;AAC9C,iEAA+C;AAC/C,sDAAoC;AACpC,oDAAkC;AAClC,uEAAqD;AACrD,qDAAmC;AACnC,qDAAmC;AACnC,4DAA0C;AAC1C,uDAAqC;AACrC,wDAAsC;AACtC,gEAA8C;AAC9C,sDAAoC;AACpC,sDAAoC;AACpC,uDAAqC;AACrC,2DAAyC;AACzC,0DAAwC;AACxC,uDAAqC;AACrC,gEAA8C;AAC9C,2DAAyC;AACzC,oEAAkD;AAClD,8DAA4C;AAC5C,uDAAqC;AACrC,yDAAuC;AACvC,qDAAmC;AACnC,gEAA8C;AAC9C,uDAAqC;AACrC,0DAAwC;AACxC,6DAA2C;AAC3C,kDAAgC;AAChC,wDAAsC;AACtC,wDAAsC;AACtC,gEAA8C;AAC9C,gEAA8C;AAC9C,kEAAgD;AAChD,gEAA8C;AAC9C,oDAAkC;AAClC,6DAA2C;AAC3C,0DAAwC;AACxC,uDAAqC;AACrC,0DAAwC;AACxC,+CAA6B;AAC7B,wDAAsC;AACtC,mDAAiC;AACjC,4DAA0C;AAC1C,iEAA+C;AAC/C,0EAAwD;AACxD,2DAAyC;AAEzC,8DAA4C;AAC5C,mEAAiD;AAEjD,oDAAkC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/dto/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iBAAiB;AACjB,+CAA6B;AAC7B,8CAA4B;AAC5B,wDAAsC;AACtC,gEAA8C;AAC9C,iEAA+C;AAC/C,sDAAoC;AACpC,oDAAkC;AAClC,uEAAqD;AACrD,qDAAmC;AACnC,qDAAmC;AACnC,4DAA0C;AAC1C,uDAAqC;AACrC,wDAAsC;AACtC,gEAA8C;AAC9C,sDAAoC;AACpC,sDAAoC;AACpC,uDAAqC;AACrC,2DAAyC;AACzC,0DAAwC;AACxC,uDAAqC;AACrC,gEAA8C;AAC9C,2DAAyC;AACzC,oEAAkD;AAClD,8DAA4C;AAC5C,uDAAqC;AACrC,yDAAuC;AACvC,qDAAmC;AACnC,gEAA8C;AAC9C,uDAAqC;AACrC,0DAAwC;AACxC,6DAA2C;AAC3C,kDAAgC;AAChC,wDAAsC;AACtC,wDAAsC;AACtC,gEAA8C;AAC9C,gEAA8C;AAC9C,kEAAgD;AAChD,gEAA8C;AAC9C,oDAAkC;AAClC,6DAA2C;AAC3C,0DAAwC;AACxC,uDAAqC;AACrC,0DAAwC;AACxC,+CAA6B;AAC7B,wDAAsC;AACtC,mDAAiC;AACjC,4DAA0C;AAC1C,iEAA+C;AAC/C,0EAAwD;AACxD,2DAAyC;AACzC,+EAA+E;AAC/E,8DAA4C;AAC5C,mEAAiD;AAEjD,oDAAkC;AAElC,+DAA+D;AAC/D,+CAA+C;AAC/C,mCAAmC"}

package/dist/dto/is-trusted-device-response.dto.d.ts

@@ -1,4 +1,32 @@
+/**
+ * Is Trusted Device Response DTO
+ *
+ * Response DTO for checking if the current device is trusted.
+ * No validators needed - this is generated internally by the library.
+ *
+ * Security:
+ * - Works in both cookies mode (reads from httpOnly cookie) and JSON mode (reads from X-Device-Token header)
+ * - Returns server-validated trusted status
+ * - Does not expose device token value for security
+ *
+ * @example
+ * ```typescript
+ * const result = await authService.isTrustedDevice();
+ * // Returns: { trusted: true }
+ * ```
+ */
+/**
+ * Response DTO for checking trusted device status
+ */
 export declare class IsTrustedDeviceResponseDTO {
+    /**
+     * Whether the current device is trusted
+     *
+     * True if the device has a valid trusted device token and trust has not expired.
+     * False if no device token exists, device token is invalid, or trust has expired.
+     *
+     * @example true
+     */
     trusted: boolean;
 }
 //# sourceMappingURL=is-trusted-device-response.dto.d.ts.map

package/dist/dto/is-trusted-device-response.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"is-trusted-device-response.dto.d.ts","sourceRoot":"","sources":["../../src/dto/is-trusted-device-response.dto.ts"],"names":[],"mappings":"AAqBA,qBAAa,0BAA0B;IASrC,OAAO,EAAG,OAAO,CAAC;CACnB"}
+{"version":3,"file":"is-trusted-device-response.dto.d.ts","sourceRoot":"","sources":["../../src/dto/is-trusted-device-response.dto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;GAEG;AACH,qBAAa,0BAA0B;IACrC;;;;;;;OAOG;IACH,OAAO,EAAG,OAAO,CAAC;CACnB"}

package/dist/dto/is-trusted-device-response.dto.js

@@ -1,7 +1,35 @@
 "use strict";
+/**
+ * Is Trusted Device Response DTO
+ *
+ * Response DTO for checking if the current device is trusted.
+ * No validators needed - this is generated internally by the library.
+ *
+ * Security:
+ * - Works in both cookies mode (reads from httpOnly cookie) and JSON mode (reads from X-Device-Token header)
+ * - Returns server-validated trusted status
+ * - Does not expose device token value for security
+ *
+ * @example
+ * ```typescript
+ * const result = await authService.isTrustedDevice();
+ * // Returns: { trusted: true }
+ * ```
+ */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.IsTrustedDeviceResponseDTO = void 0;
+/**
+ * Response DTO for checking trusted device status
+ */
 class IsTrustedDeviceResponseDTO {
+    /**
+     * Whether the current device is trusted
+     *
+     * True if the device has a valid trusted device token and trust has not expired.
+     * False if no device token exists, device token is invalid, or trust has expired.
+     *
+     * @example true
+     */
     trusted;
 }
 exports.IsTrustedDeviceResponseDTO = IsTrustedDeviceResponseDTO;

package/dist/dto/is-trusted-device-response.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"is-trusted-device-response.dto.js","sourceRoot":"","sources":["../../src/dto/is-trusted-device-response.dto.ts"],"names":[],"mappings":";;;AAqBA,MAAa,0BAA0B;IASrC,OAAO,CAAW;CACnB;AAVD,gEAUC"}
+{"version":3,"file":"is-trusted-device-response.dto.js","sourceRoot":"","sources":["../../src/dto/is-trusted-device-response.dto.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;;AAEH;;GAEG;AACH,MAAa,0BAA0B;IACrC;;;;;;;OAOG;IACH,OAAO,CAAW;CACnB;AAVD,gEAUC"}

package/dist/dto/list-providers-response.dto.d.ts

@@ -1,4 +1,23 @@
+/**
+ * Response DTO for listing MFA providers
+ *
+ * Used to return all registered MFA provider method names.
+ *
+ * @example
+ * ```typescript
+ * const providers = await mfaService.listProviders();
+ * // Returns: { providers: ['totp', 'sms', 'passkey'] }
+ * ```
+ */
+/**
+ * Response DTO for listing providers
+ */
 export declare class ListProvidersResponseDTO {
+    /**
+     * Array of registered provider method names
+     *
+     * @example ['totp', 'sms', 'passkey']
+     */
     providers: string[];
 }
 //# sourceMappingURL=list-providers-response.dto.d.ts.map

package/dist/dto/list-providers-response.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list-providers-response.dto.d.ts","sourceRoot":"","sources":["../../src/dto/list-providers-response.dto.ts"],"names":[],"mappings":"AAeA,qBAAa,wBAAwB;IAMnC,SAAS,EAAG,MAAM,EAAE,CAAC;CACtB"}
+{"version":3,"file":"list-providers-response.dto.d.ts","sourceRoot":"","sources":["../../src/dto/list-providers-response.dto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;GAEG;AACH,qBAAa,wBAAwB;IACnC;;;;OAIG;IACH,SAAS,EAAG,MAAM,EAAE,CAAC;CACtB"}

package/dist/dto/list-providers-response.dto.js

@@ -1,7 +1,26 @@
 "use strict";
+/**
+ * Response DTO for listing MFA providers
+ *
+ * Used to return all registered MFA provider method names.
+ *
+ * @example
+ * ```typescript
+ * const providers = await mfaService.listProviders();
+ * // Returns: { providers: ['totp', 'sms', 'passkey'] }
+ * ```
+ */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ListProvidersResponseDTO = void 0;
+/**
+ * Response DTO for listing providers
+ */
 class ListProvidersResponseDTO {
+    /**
+     * Array of registered provider method names
+     *
+     * @example ['totp', 'sms', 'passkey']
+     */
     providers;
 }
 exports.ListProvidersResponseDTO = ListProvidersResponseDTO;

package/dist/dto/list-providers-response.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"list-providers-response.dto.js","sourceRoot":"","sources":["../../src/dto/list-providers-response.dto.ts"],"names":[],"mappings":";;;AAeA,MAAa,wBAAwB;IAMnC,SAAS,CAAY;CACtB;AAPD,4DAOC"}
+{"version":3,"file":"list-providers-response.dto.js","sourceRoot":"","sources":["../../src/dto/list-providers-response.dto.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAEH;;GAEG;AACH,MAAa,wBAAwB;IACnC;;;;OAIG;IACH,SAAS,CAAY;CACtB;AAPD,4DAOC"}

package/dist/dto/login.dto.d.ts

@@ -1,7 +1,55 @@
+/**
+ * DTO for user login with security-focused validation
+ *
+ * Security:
+ * - Identifier validated (email, username, or phone)
+ * - Password length enforced
+ * - Input sanitization applied
+ * - DeviceId validated if provided
+ */
 export declare class LoginDTO {
+    /**
+     * Login identifier (email, username, or phone)
+     *
+     * Validation:
+     * - At least 1 character
+     * - Max 255 characters (prevents attacks)
+     *
+     * Sanitization:
+     * - Trimmed
+     * - Lowercased if it looks like email
+     */
     identifier: string;
+    /**
+     * User password
+     *
+     * Validation:
+     * - At least 1 character (lenient for login)
+     * - Max 128 characters (prevents DoS)
+     *
+     * Note: NOT trimmed (passwords can have spaces)
+     */
     password: string;
+    /**
+     * Optional device name for session identification
+     *
+     * Validation:
+     * - Max 255 characters (matches DB constraint: varchar(255))
+     *
+     * Sanitization:
+     * - Trimmed
+     */
     deviceName?: string;
+    /**
+     * Optional device type
+     *
+     * Validation:
+     * - Must be one of: mobile, desktop, tablet
+     * - Max 50 characters (matches DB constraint: varchar(50))
+     *
+     * Sanitization:
+     * - Trimmed and lowercased
+     */
     deviceType?: 'mobile' | 'desktop' | 'tablet';
 }
 //# sourceMappingURL=login.dto.d.ts.map

package/dist/dto/login.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login.dto.d.ts","sourceRoot":"","sources":["../../src/dto/login.dto.ts"],"names":[],"mappings":"AAYA,qBAAa,QAAQ;IA0BnB,UAAU,EAAG,MAAM,CAAC;IAcpB,QAAQ,EAAG,MAAM,CAAC;IAoBlB,UAAU,CAAC,EAAE,MAAM,CAAC;IAqBpB,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;CAC9C"}
+{"version":3,"file":"login.dto.d.ts","sourceRoot":"","sources":["../../src/dto/login.dto.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AACH,qBAAa,QAAQ;IACnB;;;;;;;;;;OAUG;IAeH,UAAU,EAAG,MAAM,CAAC;IAEpB;;;;;;;;OAQG;IAIH,QAAQ,EAAG,MAAM,CAAC;IAElB;;;;;;;;OAQG;IAUH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;;;;;OASG;IAUH,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;CAC9C"}

package/dist/dto/login.dto.js

@@ -12,10 +12,58 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.LoginDTO = void 0;
 const class_validator_1 = require("class-validator");
 const class_transformer_1 = require("class-transformer");
+/**
+ * DTO for user login with security-focused validation
+ *
+ * Security:
+ * - Identifier validated (email, username, or phone)
+ * - Password length enforced
+ * - Input sanitization applied
+ * - DeviceId validated if provided
+ */
 class LoginDTO {
-    identifier;
+    /**
+     * Login identifier (email, username, or phone)
+     *
+     * Validation:
+     * - At least 1 character
+     * - Max 255 characters (prevents attacks)
+     *
+     * Sanitization:
+     * - Trimmed
+     * - Lowercased if it looks like email
+     */
+    identifier; // email, username, or phone
+    /**
+     * User password
+     *
+     * Validation:
+     * - At least 1 character (lenient for login)
+     * - Max 128 characters (prevents DoS)
+     *
+     * Note: NOT trimmed (passwords can have spaces)
+     */
     password;
+    /**
+     * Optional device name for session identification
+     *
+     * Validation:
+     * - Max 255 characters (matches DB constraint: varchar(255))
+     *
+     * Sanitization:
+     * - Trimmed
+     */
     deviceName;
+    /**
+     * Optional device type
+     *
+     * Validation:
+     * - Must be one of: mobile, desktop, tablet
+     * - Max 50 characters (matches DB constraint: varchar(50))
+     *
+     * Sanitization:
+     * - Trimmed and lowercased
+     */
     deviceType;
 }
 exports.LoginDTO = LoginDTO;
@@ -26,6 +74,7 @@ __decorate([
     (0, class_transformer_1.Transform)(({ value }) => {
         if (typeof value === 'string') {
             const trimmed = value.trim();
+            // If it contains @, treat as email and lowercase
             if (trimmed.includes('@')) {
                 return trimmed.toLowerCase();
             }

package/dist/dto/login.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"login.dto.js","sourceRoot":"","sources":["../../src/dto/login.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAA6E;AAC7E,yDAA8C;AAW9C,MAAa,QAAQ;IA0BnB,UAAU,CAAU;IAcpB,QAAQ,CAAU;IAoBlB,UAAU,CAAU;IAqBpB,UAAU,CAAmC;CAC9C;AAlFD,4BAkFC;AAxDC;IAdC,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;IACpD,IAAA,2BAAS,EAAC,CAAC,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACnD,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IACxE,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAE7B,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC;YAC/B,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;4CACkB;AAcpB;IAHC,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;IAClD,IAAA,2BAAS,EAAC,CAAC,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IACjD,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;;0CACrD;AAoBlB;IATC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;IACpD,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IACxE,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;4CACkB;AAqBpB;IATC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;IACpD,IAAA,2BAAS,EAAC,EAAE,EAAE,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;IACtE,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;4CAC2C"}
+{"version":3,"file":"login.dto.js","sourceRoot":"","sources":["../../src/dto/login.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAA6E;AAC7E,yDAA8C;AAE9C;;;;;;;;GAQG;AACH,MAAa,QAAQ;IACnB;;;;;;;;;;OAUG;IAeH,UAAU,CAAU,CAAC,4BAA4B;IAEjD;;;;;;;;OAQG;IAIH,QAAQ,CAAU;IAElB;;;;;;;;OAQG;IAUH,UAAU,CAAU;IAEpB;;;;;;;;;OASG;IAUH,UAAU,CAAmC;CAC9C;AAlFD,4BAkFC;AAxDC;IAdC,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;IACpD,IAAA,2BAAS,EAAC,CAAC,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACnD,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IACxE,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7B,iDAAiD;YACjD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC;YAC/B,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;4CACkB;AAcpB;IAHC,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;IAClD,IAAA,2BAAS,EAAC,CAAC,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IACjD,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;;0CACrD;AAoBlB;IATC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;IACpD,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IACxE,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;4CACkB;AAqBpB;IATC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;IACpD,IAAA,2BAAS,EAAC,EAAE,EAAE,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;IACtE,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;4CAC2C"}

package/dist/dto/logout-all-response.dto.d.ts

@@ -1,4 +1,24 @@
+/**
+ * Logout All Response DTO
+ *
+ * Response DTO for logging out from all sessions.
+ * No validators needed - this is generated internally by the library.
+ *
+ * @example
+ * ```typescript
+ * const result = await authService.logoutAll({ sub: 'user-uuid' });
+ * // Returns: { revokedCount: 5 }
+ * ```
+ */
+/**
+ * Response DTO for logout all sessions
+ */
 export declare class LogoutAllResponseDTO {
+    /**
+     * Number of sessions revoked
+     *
+     * @example 5
+     */
     revokedCount: number;
 }
 //# sourceMappingURL=logout-all-response.dto.d.ts.map

package/dist/dto/logout-all-response.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logout-all-response.dto.d.ts","sourceRoot":"","sources":["../../src/dto/logout-all-response.dto.ts"],"names":[],"mappings":"AAgBA,qBAAa,oBAAoB;IAM/B,YAAY,EAAG,MAAM,CAAC;CACvB"}
+{"version":3,"file":"logout-all-response.dto.d.ts","sourceRoot":"","sources":["../../src/dto/logout-all-response.dto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;GAEG;AACH,qBAAa,oBAAoB;IAC/B;;;;OAIG;IACH,YAAY,EAAG,MAAM,CAAC;CACvB"}

package/dist/dto/logout-all-response.dto.js

@@ -1,7 +1,27 @@
 "use strict";
+/**
+ * Logout All Response DTO
+ *
+ * Response DTO for logging out from all sessions.
+ * No validators needed - this is generated internally by the library.
+ *
+ * @example
+ * ```typescript
+ * const result = await authService.logoutAll({ sub: 'user-uuid' });
+ * // Returns: { revokedCount: 5 }
+ * ```
+ */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LogoutAllResponseDTO = void 0;
+/**
+ * Response DTO for logout all sessions
+ */
 class LogoutAllResponseDTO {
+    /**
+     * Number of sessions revoked
+     *
+     * @example 5
+     */
     revokedCount;
 }
 exports.LogoutAllResponseDTO = LogoutAllResponseDTO;

package/dist/dto/logout-all-response.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"logout-all-response.dto.js","sourceRoot":"","sources":["../../src/dto/logout-all-response.dto.ts"],"names":[],"mappings":";;;AAgBA,MAAa,oBAAoB;IAM/B,YAAY,CAAU;CACvB;AAPD,oDAOC"}
+{"version":3,"file":"logout-all-response.dto.js","sourceRoot":"","sources":["../../src/dto/logout-all-response.dto.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAEH;;GAEG;AACH,MAAa,oBAAoB;IAC/B;;;;OAIG;IACH,YAAY,CAAU;CACvB;AAPD,oDAOC"}

package/dist/dto/logout-all.dto.d.ts

@@ -1,5 +1,47 @@
+/**
+ * Logout All DTO
+ *
+ * Request DTO for logging out a user from all sessions (global logout).
+ *
+ * Security:
+ * - User sub validated (UUID)
+ * - Prevents unauthorized logout attempts
+ *
+ * @example
+ * ```typescript
+ * const result = await authService.logoutAll({
+ *   sub: 'user-uuid'
+ * });
+ * ```
+ */
+/**
+ * Request DTO for logout all sessions
+ */
 export declare class LogoutAllDTO {
+    /**
+     * User's unique identifier (UUID v4)
+     *
+     * Validation:
+     * - Must be a valid UUID v4 format
+     * - Matches DB constraint: char(36) or uuid
+     *
+     * Sanitization:
+     * - Trimmed
+     * - Lowercased for consistency
+     *
+     * @example "a21b654c-2746-4168-acee-c175083a65cd"
+     */
     sub: string;
+    /**
+     * Whether to also forget/revoke all trusted devices
+     *
+     * If true, all trusted devices for this user will be revoked,
+     * requiring MFA on next login from any device.
+     *
+     * Default: false (devices remain trusted)
+     *
+     * @example false
+     */
     forgetDevices?: boolean;
 }
 //# sourceMappingURL=logout-all.dto.d.ts.map

package/dist/dto/logout-all.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logout-all.dto.d.ts","sourceRoot":"","sources":["../../src/dto/logout-all.dto.ts"],"names":[],"mappings":"AAuBA,qBAAa,YAAY;IAqBvB,GAAG,EAAG,MAAM,CAAC;IAmBb,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB"}
+{"version":3,"file":"logout-all.dto.d.ts","sourceRoot":"","sources":["../../src/dto/logout-all.dto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH;;GAEG;AACH,qBAAa,YAAY;IACvB;;;;;;;;;;;;OAYG;IAQH,GAAG,EAAG,MAAM,CAAC;IAEb;;;;;;;;;OASG;IAQH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB"}

package/dist/dto/logout-all.dto.js

@@ -1,4 +1,20 @@
 "use strict";
+/**
+ * Logout All DTO
+ *
+ * Request DTO for logging out a user from all sessions (global logout).
+ *
+ * Security:
+ * - User sub validated (UUID)
+ * - Prevents unauthorized logout attempts
+ *
+ * @example
+ * ```typescript
+ * const result = await authService.logoutAll({
+ *   sub: 'user-uuid'
+ * });
+ * ```
+ */
 var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -12,8 +28,34 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.LogoutAllDTO = void 0;
 const class_validator_1 = require("class-validator");
 const class_transformer_1 = require("class-transformer");
+/**
+ * Request DTO for logout all sessions
+ */
 class LogoutAllDTO {
+    /**
+     * User's unique identifier (UUID v4)
+     *
+     * Validation:
+     * - Must be a valid UUID v4 format
+     * - Matches DB constraint: char(36) or uuid
+     *
+     * Sanitization:
+     * - Trimmed
+     * - Lowercased for consistency
+     *
+     * @example "a21b654c-2746-4168-acee-c175083a65cd"
+     */
     sub;
+    /**
+     * Whether to also forget/revoke all trusted devices
+     *
+     * If true, all trusted devices for this user will be revoked,
+     * requiring MFA on next login from any device.
+     *
+     * Default: false (devices remain trusted)
+     *
+     * @example false
+     */
     forgetDevices;
 }
 exports.LogoutAllDTO = LogoutAllDTO;

package/dist/dto/logout-all.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"logout-all.dto.js","sourceRoot":"","sources":["../../src/dto/logout-all.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAiBA,qDAAgE;AAChE,yDAA8C;AAK9C,MAAa,YAAY;IAqBvB,GAAG,CAAU;IAmBb,aAAa,CAAW;CACzB;AAzCD,oCAyCC;AApBC;IAPC,IAAA,wBAAM,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IACnE,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;yCACW;AAmBb;IAPC,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;IACX,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACnD,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;mDACsB"}
+{"version":3,"file":"logout-all.dto.js","sourceRoot":"","sources":["../../src/dto/logout-all.dto.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;;;AAEH,qDAAgE;AAChE,yDAA8C;AAE9C;;GAEG;AACH,MAAa,YAAY;IACvB;;;;;;;;;;;;OAYG;IAQH,GAAG,CAAU;IAEb;;;;;;;;;OASG;IAQH,aAAa,CAAW;CACzB;AAzCD,oCAyCC;AApBC;IAPC,IAAA,wBAAM,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IACnE,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;yCACW;AAmBb;IAPC,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;IACX,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACnD,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;mDACsB"}

package/dist/dto/logout-response.dto.d.ts

@@ -1,4 +1,25 @@
+/**
+ * Logout Response DTO
+ *
+ * Response DTO for logging out from a specific session.
+ * No validators needed - this is generated internally by the library.
+ *
+ * @example
+ * ```typescript
+ * await authService.logout({ forgetMe: false });
+ * // Returns: { success: true }
+ * ```
+ */
+/**
+ * Response DTO for logout
+ */
 export declare class LogoutResponseDTO {
+    /**
+     * Success indicator
+     * Always true on successful logout
+     *
+     * @example true
+     */
     success: boolean;
 }
 //# sourceMappingURL=logout-response.dto.d.ts.map

package/dist/dto/logout-response.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logout-response.dto.d.ts","sourceRoot":"","sources":["../../src/dto/logout-response.dto.ts"],"names":[],"mappings":"AAgBA,qBAAa,iBAAiB;IAO5B,OAAO,EAAG,OAAO,CAAC;CACnB"}
+{"version":3,"file":"logout-response.dto.d.ts","sourceRoot":"","sources":["../../src/dto/logout-response.dto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;GAEG;AACH,qBAAa,iBAAiB;IAC5B;;;;;OAKG;IACH,OAAO,EAAG,OAAO,CAAC;CACnB"}

package/dist/dto/logout-response.dto.js

@@ -1,7 +1,28 @@
 "use strict";
+/**
+ * Logout Response DTO
+ *
+ * Response DTO for logging out from a specific session.
+ * No validators needed - this is generated internally by the library.
+ *
+ * @example
+ * ```typescript
+ * await authService.logout({ forgetMe: false });
+ * // Returns: { success: true }
+ * ```
+ */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LogoutResponseDTO = void 0;
+/**
+ * Response DTO for logout
+ */
 class LogoutResponseDTO {
+    /**
+     * Success indicator
+     * Always true on successful logout
+     *
+     * @example true
+     */
     success;
 }
 exports.LogoutResponseDTO = LogoutResponseDTO;

package/dist/dto/logout-response.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"logout-response.dto.js","sourceRoot":"","sources":["../../src/dto/logout-response.dto.ts"],"names":[],"mappings":";;;AAgBA,MAAa,iBAAiB;IAO5B,OAAO,CAAW;CACnB;AARD,8CAQC"}
+{"version":3,"file":"logout-response.dto.js","sourceRoot":"","sources":["../../src/dto/logout-response.dto.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAEH;;GAEG;AACH,MAAa,iBAAiB;IAC5B;;;;;OAKG;IACH,OAAO,CAAW;CACnB;AARD,8CAQC"}