@nauth-toolkit/core 0.1.86 → 0.1.88

package/dist/dto/get-user-auth-history.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-user-auth-history.dto.js","sourceRoot":"","sources":["../../src/dto/get-user-auth-history.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAAyE;AAGzE,qDAAqG;AACrG,yDAAoD;AAEpD;;;;;;;;;;;;;GAaG;AACH,MAAa,qBAAqB;IAChC;;;;;;;;OAQG;IASH,OAAO,CAAU;IAEjB;;;;OAIG;IAWH,IAAI,CAAU;IAEd;;;;OAIG;IAYH,KAAK,CAAU;IAEf;;OAEG;IAIH,SAAS,CAAQ;IAEjB;;OAEG;IAIH,OAAO,CAAQ;IAEf;;;;OAIG;IAIH,UAAU,CAAwB;IAElC;;;;OAIG;IAOH,WAAW,CAA0B;CACtC;AA7FD,sDA6FC;AA3EC;IARC,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;IAClE,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;sDACe;AAiBjB;IAVC,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,EAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;IAC7C,IAAA,qBAAG,EAAC,CAAC,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;IAC9C,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1C,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;mDACY;AAkBd;IAXC,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,EAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;IAC9C,IAAA,qBAAG,EAAC,CAAC,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;IAC/C,IAAA,qBAAG,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;IAClD,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1C,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;oDACa;AAQf;IAHC,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,IAAI,CAAC;IAChB,IAAA,wBAAM,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;8BAC1C,IAAI;wDAAC;AAQjB;IAHC,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,IAAI,CAAC;IAChB,IAAA,wBAAM,EAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;8BAC1C,IAAI;sDAAC;AAUf;IAHC,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,EAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;IACnD,IAAA,wBAAM,EAAC,+CAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC;;yDAC5E;AAalC;IANC,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,EAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;IACpD,IAAA,sBAAI,EAAC,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE;QAClD,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,mEAAmE;KAC7E,CAAC;;0DACmC;AAGvC;;GAEG;AACH,MAAa,6BAA6B;IACxC;;OAEG;IACH,IAAI,CAAgB;IAEpB;;OAEG;IACH,KAAK,CAAU;IAEf;;OAEG;IACH,IAAI,CAAU;IAEd;;OAEG;IACH,KAAK,CAAU;IAEf;;OAEG;IACH,UAAU,CAAU;CACrB;AAzBD,sEAyBC"}
+{"version":3,"file":"get-user-auth-history.dto.js","sourceRoot":"","sources":["../../src/dto/get-user-auth-history.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAAyE;AAEzE,qDAA6F;AAC7F,yDAAoD;AAEpD;;;;;;;;;;;;;;GAcG;AACH,MAAa,qBAAqB;IAChC;;;;OAIG;IAWH,IAAI,CAAU;IAEd;;;;OAIG;IAYH,KAAK,CAAU;IAEf;;OAEG;IAIH,SAAS,CAAQ;IAEjB;;OAEG;IAIH,OAAO,CAAQ;IAEf;;;;OAIG;IAiCH,UAAU,CAAwB;IAElC;;;;OAIG;IAoCH,WAAW,CAA0B;CACtC;AApID,sDAoIC;AApHC;IAVC,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,EAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;IAC7C,IAAA,qBAAG,EAAC,CAAC,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;IAC9C,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1C,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;mDACY;AAkBd;IAXC,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,EAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;IAC9C,IAAA,qBAAG,EAAC,CAAC,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;IAC/C,IAAA,qBAAG,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;IAClD,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1C,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;oDACa;AAQf;IAHC,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,IAAI,CAAC;IAChB,IAAA,wBAAM,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;8BAC1C,IAAI;wDAAC;AAQjB;IAHC,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,IAAI,CAAC;IAChB,IAAA,wBAAM,EAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;8BAC1C,IAAI;sDAAC;AAuCf;IAhCC,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,EAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;IACnD,IAAA,wBAAM,EAAC,+CAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC;IAC7G,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAsB,EAAE,EAAE;QAC3C,6BAA6B;QAC7B,8BAA8B;QAC9B,sDAAsD;QACtD,2CAA2C;QAC3C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBACnB,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,KAAK,GAAG,OAAO;iBAClB,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC,CAAC;YAEnB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAC1C,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;yDACgC;AA0ClC;IAnCC,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,EAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;IACpD,IAAA,sBAAI,EAAC,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE;QAClD,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,mEAAmE;KAC7E,CAAC;IACD,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAsB,EAAE,EAAE;QAC3C,6BAA6B;QAC7B,yBAAyB;QACzB,6CAA6C;QAC7C,iCAAiC;QACjC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBACnB,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,KAAK,GAAG,OAAO;iBAClB,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC,CAAC;YAEnB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAC1C,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;0DACmC"}

package/dist/dto/get-user-devices.dto.d.ts

@@ -1,34 +1,21 @@
 /**
  * DTO for getting user MFA devices
  *
- * Used to retrieve all MFA devices configured for a user.
+ * Used to retrieve all MFA devices configured for the current authenticated user.
+ * User sub is obtained from authenticated context automatically.
  *
  * @example
  * ```typescript
- * const devices = await mfaService.getUserDevices({
- *   sub: 'user-uuid'
- * });
+ * const devices = await mfaService.getUserDevices({});
  * ```
  */
 import { IMFADevice } from '../interfaces/entities.interface';
 /**
  * DTO for getting user MFA devices
+ *
+ * User self-service DTO - no sub field. Service gets user from authenticated context.
  */
 export declare class GetUserDevicesDTO {
-    /**
-     * User's unique identifier (UUID v4)
-     *
-     * Validation:
-     * - Must be a valid UUID v4 format
-     * - Matches DB constraint: char(36) or uuid
-     *
-     * Sanitization:
-     * - Trimmed
-     * - Lowercased for consistency
-     *
-     * @example "a21b654c-2746-4168-acee-c175083a65cd"
-     */
-    sub: string;
 }
 /**
  * Response DTO for user MFA devices

package/dist/dto/get-user-devices.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-user-devices.dto.d.ts","sourceRoot":"","sources":["../../src/dto/get-user-devices.dto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAE9D;;GAEG;AACH,qBAAa,iBAAiB;IAC5B;;;;;;;;;;;;OAYG;IAQH,GAAG,EAAG,MAAM,CAAC;CACd;AAED;;GAEG;AACH,qBAAa,yBAAyB;IACpC;;OAEG;IACH,OAAO,EAAG,UAAU,EAAE,CAAC;CACxB"}
+{"version":3,"file":"get-user-devices.dto.d.ts","sourceRoot":"","sources":["../../src/dto/get-user-devices.dto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAE9D;;;;GAIG;AACH,qBAAa,iBAAiB;CAE7B;AAED;;GAEG;AACH,qBAAa,yBAAyB;IACpC;;OAEG;IACH,OAAO,EAAG,UAAU,EAAE,CAAC;CACxB"}

package/dist/dto/get-user-devices.dto.js

@@ -2,58 +2,24 @@
 /**
  * DTO for getting user MFA devices
  *
- * Used to retrieve all MFA devices configured for a user.
+ * Used to retrieve all MFA devices configured for the current authenticated user.
+ * User sub is obtained from authenticated context automatically.
  *
  * @example
  * ```typescript
- * const devices = await mfaService.getUserDevices({
- *   sub: 'user-uuid'
- * });
+ * const devices = await mfaService.getUserDevices({});
  * ```
  */
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.GetUserDevicesResponseDTO = exports.GetUserDevicesDTO = void 0;
-const class_validator_1 = require("class-validator");
-const class_transformer_1 = require("class-transformer");
 /**
  * DTO for getting user MFA devices
+ *
+ * User self-service DTO - no sub field. Service gets user from authenticated context.
  */
 class GetUserDevicesDTO {
-    /**
-     * User's unique identifier (UUID v4)
-     *
-     * Validation:
-     * - Must be a valid UUID v4 format
-     * - Matches DB constraint: char(36) or uuid
-     *
-     * Sanitization:
-     * - Trimmed
-     * - Lowercased for consistency
-     *
-     * @example "a21b654c-2746-4168-acee-c175083a65cd"
-     */
-    sub;
 }
 exports.GetUserDevicesDTO = GetUserDevicesDTO;
-__decorate([
-    (0, class_validator_1.IsUUID)('4', { message: 'User sub must be a valid UUID v4 format' }),
-    (0, class_transformer_1.Transform)(({ value }) => {
-        if (typeof value === 'string') {
-            return value.trim().toLowerCase();
-        }
-        return value;
-    }),
-    __metadata("design:type", String)
-], GetUserDevicesDTO.prototype, "sub", void 0);
 /**
  * Response DTO for user MFA devices
  */

package/dist/dto/get-user-devices.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-user-devices.dto.js","sourceRoot":"","sources":["../../src/dto/get-user-devices.dto.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;;;;;;;;;;AAEH,qDAAyC;AACzC,yDAA8C;AAG9C;;GAEG;AACH,MAAa,iBAAiB;IAC5B;;;;;;;;;;;;OAYG;IAQH,GAAG,CAAU;CACd;AAtBD,8CAsBC;AADC;IAPC,IAAA,wBAAM,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IACnE,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;8CACW;AAGf;;GAEG;AACH,MAAa,yBAAyB;IACpC;;OAEG;IACH,OAAO,CAAgB;CACxB;AALD,8DAKC"}
+{"version":3,"file":"get-user-devices.dto.js","sourceRoot":"","sources":["../../src/dto/get-user-devices.dto.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAIH;;;;GAIG;AACH,MAAa,iBAAiB;CAE7B;AAFD,8CAEC;AAED;;GAEG;AACH,MAAa,yBAAyB;IACpC;;OAEG;IACH,OAAO,CAAgB;CACxB;AALD,8DAKC"}

package/dist/dto/get-user-sessions-response.dto.d.ts

@@ -75,7 +75,7 @@ export declare class UserSessionInfo {
  *
  * @example
  * ```typescript
- * const response = await authService.getUserSessions(dto);
+ * const response = await authService.getUserSessions();
  * // response.sessions = [{ sessionId: '123', authMethod: 'password', ... }, ...]
  * ```
  */

package/dist/dto/get-user-sessions-response.dto.js

@@ -167,7 +167,7 @@ __decorate([
  *
  * @example
  * ```typescript
- * const response = await authService.getUserSessions(dto);
+ * const response = await authService.getUserSessions();
  * // response.sessions = [{ sessionId: '123', authMethod: 'password', ... }, ...]
  * ```
  */

package/dist/dto/get-user-sessions.dto.d.ts

@@ -5,7 +5,7 @@
  * ```typescript
  * const dto = new GetUserSessionsDTO();
  * dto.sub = 'user-uuid-123';
- * const sessions = await authService.getUserSessions(dto);
+ * const sessions = await adminAuthService.getUserSessions(dto);
  * ```
  */
 export declare class GetUserSessionsDTO {

package/dist/dto/get-user-sessions.dto.js

@@ -19,7 +19,7 @@ const class_transformer_1 = require("class-transformer");
  * ```typescript
  * const dto = new GetUserSessionsDTO();
  * dto.sub = 'user-uuid-123';
- * const sessions = await authService.getUserSessions(dto);
+ * const sessions = await adminAuthService.getUserSessions(dto);
  * ```
  */
 class GetUserSessionsDTO {

package/dist/dto/index.d.ts

@@ -7,11 +7,11 @@ export * from './disable-user.dto';
 export * from './enable-user.dto';
 export * from './login.dto';
 export * from './change-password.dto';
-export * from './change-password-request.dto';
 export * from './change-password-response.dto';
 export * from './user-response.dto';
 export * from './user-update.dto';
-export * from './update-user-attributes-request.dto';
+export * from './update-user-attributes.dto';
+export * from './admin-update-user-attributes.dto';
 export * from './update-verified-status-request.dto';
 export * from './verify-email.dto';
 export * from './verify-phone.dto';
@@ -34,8 +34,10 @@ export * from './get-user-devices.dto';
 export * from './has-provider.dto';
 export * from './list-providers-response.dto';
 export * from './remove-devices.dto';
+export * from './admin-remove-devices.dto';
 export * from './set-mfa-exemption.dto';
 export * from './set-preferred-method.dto';
+export * from './admin-set-preferred-method.dto';
 export * from './setup-mfa.dto';
 export * from './verify-mfa-code.dto';
 export * from './get-client-info.dto';
@@ -52,10 +54,12 @@ export * from './logout.dto';
 export * from './logout-response.dto';
 export * from './logout-all.dto';
 export * from './logout-all-response.dto';
+export * from './admin-logout-all.dto';
 export * from './get-user-sessions.dto';
 export * from './get-user-sessions-response.dto';
 export * from './logout-session.dto';
 export * from './logout-session-response.dto';
+export * from './admin-revoke-session.dto';
 export * from './set-must-change-password.dto';
 export * from './set-must-change-password-response.dto';
 export * from './admin-set-password.dto';
@@ -65,6 +69,8 @@ export * from './is-trusted-device-response.dto';
 export * from './validate-access-token.dto';
 export * from './validate-access-token-response.dto';
 export * from './get-user-auth-history.dto';
+export * from './admin-get-user-auth-history.dto';
+export * from './admin-get-user-auth-history.dto';
 export * from './social-auth.dto';
 export * from './social-redirect.dto';
 //# sourceMappingURL=index.d.ts.map

package/dist/dto/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/dto/index.ts"],"names":[],"mappings":"AACA,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sCAAsC,CAAC;AACrD,cAAc,sCAAsC,CAAC;AACrD,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,0BAA0B,CAAC;AACzC,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,kCAAkC,CAAC;AACjD,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,yCAAyC,CAAC;AACxD,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAE3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sCAAsC,CAAC;AACrD,cAAc,6BAA6B,CAAC;AAE5C,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/dto/index.ts"],"names":[],"mappings":"AACA,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oCAAoC,CAAC;AACnD,cAAc,sCAAsC,CAAC;AACrD,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,0BAA0B,CAAC;AACzC,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kCAAkC,CAAC;AACjD,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kCAAkC,CAAC;AACjD,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,yCAAyC,CAAC;AACxD,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAE3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sCAAsC,CAAC;AACrD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC;AAClD,cAAc,mCAAmC,CAAC;AAElD,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC"}

package/dist/dto/index.js

@@ -24,11 +24,11 @@ __exportStar(require("./disable-user.dto"), exports);
 __exportStar(require("./enable-user.dto"), exports);
 __exportStar(require("./login.dto"), exports);
 __exportStar(require("./change-password.dto"), exports);
-__exportStar(require("./change-password-request.dto"), exports);
 __exportStar(require("./change-password-response.dto"), exports);
 __exportStar(require("./user-response.dto"), exports);
 __exportStar(require("./user-update.dto"), exports);
-__exportStar(require("./update-user-attributes-request.dto"), exports);
+__exportStar(require("./update-user-attributes.dto"), exports);
+__exportStar(require("./admin-update-user-attributes.dto"), exports);
 __exportStar(require("./update-verified-status-request.dto"), exports);
 __exportStar(require("./verify-email.dto"), exports);
 __exportStar(require("./verify-phone.dto"), exports);
@@ -51,8 +51,10 @@ __exportStar(require("./get-user-devices.dto"), exports);
 __exportStar(require("./has-provider.dto"), exports);
 __exportStar(require("./list-providers-response.dto"), exports);
 __exportStar(require("./remove-devices.dto"), exports);
+__exportStar(require("./admin-remove-devices.dto"), exports);
 __exportStar(require("./set-mfa-exemption.dto"), exports);
 __exportStar(require("./set-preferred-method.dto"), exports);
+__exportStar(require("./admin-set-preferred-method.dto"), exports);
 __exportStar(require("./setup-mfa.dto"), exports);
 __exportStar(require("./verify-mfa-code.dto"), exports);
 __exportStar(require("./get-client-info.dto"), exports);
@@ -69,10 +71,12 @@ __exportStar(require("./logout.dto"), exports);
 __exportStar(require("./logout-response.dto"), exports);
 __exportStar(require("./logout-all.dto"), exports);
 __exportStar(require("./logout-all-response.dto"), exports);
+__exportStar(require("./admin-logout-all.dto"), exports);
 __exportStar(require("./get-user-sessions.dto"), exports);
 __exportStar(require("./get-user-sessions-response.dto"), exports);
 __exportStar(require("./logout-session.dto"), exports);
 __exportStar(require("./logout-session-response.dto"), exports);
+__exportStar(require("./admin-revoke-session.dto"), exports);
 __exportStar(require("./set-must-change-password.dto"), exports);
 __exportStar(require("./set-must-change-password-response.dto"), exports);
 __exportStar(require("./admin-set-password.dto"), exports);
@@ -83,6 +87,8 @@ __exportStar(require("./is-trusted-device-response.dto"), exports);
 __exportStar(require("./validate-access-token.dto"), exports);
 __exportStar(require("./validate-access-token-response.dto"), exports);
 __exportStar(require("./get-user-auth-history.dto"), exports);
+__exportStar(require("./admin-get-user-auth-history.dto"), exports);
+__exportStar(require("./admin-get-user-auth-history.dto"), exports);
 __exportStar(require("./social-auth.dto"), exports);
 __exportStar(require("./social-redirect.dto"), exports);
 // Note: Social and MFA DTOs moved to their respective packages

package/dist/dto/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/dto/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iBAAiB;AACjB,+CAA6B;AAC7B,qDAAmC;AACnC,4DAA0C;AAC1C,oDAAkC;AAClC,kDAAgC;AAChC,qDAAmC;AACnC,oDAAkC;AAClC,8CAA4B;AAC5B,wDAAsC;AACtC,gEAA8C;AAC9C,iEAA+C;AAC/C,sDAAoC;AACpC,oDAAkC;AAClC,uEAAqD;AACrD,uEAAqD;AACrD,qDAAmC;AACnC,qDAAmC;AACnC,4DAA0C;AAC1C,uDAAqC;AACrC,wDAAsC;AACtC,gEAA8C;AAC9C,sDAAoC;AACpC,sDAAoC;AACpC,uDAAqC;AACrC,2DAAyC;AACzC,0DAAwC;AACxC,uDAAqC;AACrC,gEAA8C;AAC9C,2DAAyC;AACzC,oEAAkD;AAClD,8DAA4C;AAC5C,uDAAqC;AACrC,yDAAuC;AACvC,qDAAmC;AACnC,gEAA8C;AAC9C,uDAAqC;AACrC,0DAAwC;AACxC,6DAA2C;AAC3C,kDAAgC;AAChC,wDAAsC;AACtC,wDAAsC;AACtC,gEAA8C;AAC9C,gEAA8C;AAC9C,kEAAgD;AAChD,gEAA8C;AAC9C,oDAAkC;AAClC,6DAA2C;AAC3C,0DAAwC;AACxC,uDAAqC;AACrC,0DAAwC;AACxC,+CAA6B;AAC7B,wDAAsC;AACtC,mDAAiC;AACjC,4DAA0C;AAC1C,0DAAwC;AACxC,mEAAiD;AACjD,uDAAqC;AACrC,gEAA8C;AAC9C,iEAA+C;AAC/C,0EAAwD;AACxD,2DAAyC;AACzC,6DAA2C;AAC3C,+EAA+E;AAC/E,8DAA4C;AAC5C,mEAAiD;AACjD,8DAA4C;AAC5C,uEAAqD;AACrD,8DAA4C;AAE5C,oDAAkC;AAClC,wDAAsC;AAEtC,+DAA+D;AAC/D,+CAA+C;AAC/C,mCAAmC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/dto/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iBAAiB;AACjB,+CAA6B;AAC7B,qDAAmC;AACnC,4DAA0C;AAC1C,oDAAkC;AAClC,kDAAgC;AAChC,qDAAmC;AACnC,oDAAkC;AAClC,8CAA4B;AAC5B,wDAAsC;AACtC,iEAA+C;AAC/C,sDAAoC;AACpC,oDAAkC;AAClC,+DAA6C;AAC7C,qEAAmD;AACnD,uEAAqD;AACrD,qDAAmC;AACnC,qDAAmC;AACnC,4DAA0C;AAC1C,uDAAqC;AACrC,wDAAsC;AACtC,gEAA8C;AAC9C,sDAAoC;AACpC,sDAAoC;AACpC,uDAAqC;AACrC,2DAAyC;AACzC,0DAAwC;AACxC,uDAAqC;AACrC,gEAA8C;AAC9C,2DAAyC;AACzC,oEAAkD;AAClD,8DAA4C;AAC5C,uDAAqC;AACrC,yDAAuC;AACvC,qDAAmC;AACnC,gEAA8C;AAC9C,uDAAqC;AACrC,6DAA2C;AAC3C,0DAAwC;AACxC,6DAA2C;AAC3C,mEAAiD;AACjD,kDAAgC;AAChC,wDAAsC;AACtC,wDAAsC;AACtC,gEAA8C;AAC9C,gEAA8C;AAC9C,kEAAgD;AAChD,gEAA8C;AAC9C,oDAAkC;AAClC,6DAA2C;AAC3C,0DAAwC;AACxC,uDAAqC;AACrC,0DAAwC;AACxC,+CAA6B;AAC7B,wDAAsC;AACtC,mDAAiC;AACjC,4DAA0C;AAC1C,yDAAuC;AACvC,0DAAwC;AACxC,mEAAiD;AACjD,uDAAqC;AACrC,gEAA8C;AAC9C,6DAA2C;AAC3C,iEAA+C;AAC/C,0EAAwD;AACxD,2DAAyC;AACzC,6DAA2C;AAC3C,+EAA+E;AAC/E,8DAA4C;AAC5C,mEAAiD;AACjD,8DAA4C;AAC5C,uEAAqD;AACrD,8DAA4C;AAC5C,oEAAkD;AAClD,oEAAkD;AAElD,oDAAkC;AAClC,wDAAsC;AAEtC,+DAA+D;AAC/D,+CAA+C;AAC/C,mCAAmC"}

package/dist/dto/logout-all-response.dto.d.ts

@@ -6,7 +6,7 @@
  *
  * @example
  * ```typescript
- * const result = await authService.logoutAll({ sub: 'user-uuid' });
+ * const result = await authService.logoutAll({ forgetDevices: true });
  * // Returns: { revokedCount: 5 }
  * ```
  */

package/dist/dto/logout-all-response.dto.js

@@ -7,7 +7,7 @@
  *
  * @example
  * ```typescript
- * const result = await authService.logoutAll({ sub: 'user-uuid' });
+ * const result = await authService.logoutAll({ forgetDevices: true });
  * // Returns: { revokedCount: 5 }
  * ```
  */

package/dist/dto/logout-all.dto.d.ts

@@ -4,7 +4,7 @@
  * Request DTO for logging out a user from all sessions (global logout).
  *
  * Security:
- * - User sub validated (UUID)
+ * - Uses authenticated user context for sub
  * - Prevents unauthorized logout attempts
  *
  * @example
@@ -18,23 +18,6 @@
  * Request DTO for logout all sessions
  */
 export declare class LogoutAllDTO {
-    /**
-     * User's unique identifier (UUID v4)
-     *
-     * Optional at controller level - filled from authenticated user's JWT.
-     * Validated only when provided (service layer will ensure it's set).
-     *
-     * Validation:
-     * - Must be a valid UUID v4 format when provided
-     * - Matches DB constraint: char(36) or uuid
-     *
-     * Sanitization:
-     * - Trimmed
-     * - Lowercased for consistency
-     *
-     * @example "a21b654c-2746-4168-acee-c175083a65cd"
-     */
-    sub?: string;
     /**
      * Whether to also forget/revoke all trusted devices
      *

package/dist/dto/logout-all.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logout-all.dto.d.ts","sourceRoot":"","sources":["../../src/dto/logout-all.dto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH;;GAEG;AACH,qBAAa,YAAY;IACvB;;;;;;;;;;;;;;;OAeG;IAUH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;;;;;;;;OASG;IAQH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB"}
+{"version":3,"file":"logout-all.dto.d.ts","sourceRoot":"","sources":["../../src/dto/logout-all.dto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH;;GAEG;AACH,qBAAa,YAAY;IACvB;;;;;;;;;OASG;IAQH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB"}

package/dist/dto/logout-all.dto.js

@@ -5,7 +5,7 @@
  * Request DTO for logging out a user from all sessions (global logout).
  *
  * Security:
- * - User sub validated (UUID)
+ * - Uses authenticated user context for sub
  * - Prevents unauthorized logout attempts
  *
  * @example
@@ -32,23 +32,6 @@ const class_transformer_1 = require("class-transformer");
  * Request DTO for logout all sessions
  */
 class LogoutAllDTO {
-    /**
-     * User's unique identifier (UUID v4)
-     *
-     * Optional at controller level - filled from authenticated user's JWT.
-     * Validated only when provided (service layer will ensure it's set).
-     *
-     * Validation:
-     * - Must be a valid UUID v4 format when provided
-     * - Matches DB constraint: char(36) or uuid
-     *
-     * Sanitization:
-     * - Trimmed
-     * - Lowercased for consistency
-     *
-     * @example "a21b654c-2746-4168-acee-c175083a65cd"
-     */
-    sub;
     /**
      * Whether to also forget/revoke all trusted devices
      *
@@ -62,18 +45,6 @@ class LogoutAllDTO {
     forgetDevices;
 }
 exports.LogoutAllDTO = LogoutAllDTO;
-__decorate([
-    (0, class_validator_1.ValidateIf)((o) => o.sub !== undefined && o.sub !== null && o.sub !== ''),
-    (0, class_validator_1.IsUUID)('4', { message: 'User sub must be a valid UUID v4 format' }),
-    (0, class_transformer_1.Transform)(({ value }) => {
-        if (typeof value === 'string') {
-            return value.trim().toLowerCase();
-        }
-        return value;
-    }),
-    (0, class_validator_1.IsOptional)(),
-    __metadata("design:type", String)
-], LogoutAllDTO.prototype, "sub", void 0);
 __decorate([
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsBoolean)(),

package/dist/dto/logout-all.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"logout-all.dto.js","sourceRoot":"","sources":["../../src/dto/logout-all.dto.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;;;AAEH,qDAA4E;AAC5E,yDAA8C;AAE9C;;GAEG;AACH,MAAa,YAAY;IACvB;;;;;;;;;;;;;;;OAeG;IAUH,GAAG,CAAU;IAEb;;;;;;;;;OASG;IAQH,aAAa,CAAW;CACzB;AA9CD,oCA8CC;AApBC;IATC,IAAA,4BAAU,EAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC;IACxE,IAAA,wBAAM,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IACnE,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACD,IAAA,4BAAU,GAAE;;yCACA;AAmBb;IAPC,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;IACX,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACnD,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;mDACsB"}
+{"version":3,"file":"logout-all.dto.js","sourceRoot":"","sources":["../../src/dto/logout-all.dto.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;;;AAEH,qDAAwD;AACxD,yDAA8C;AAE9C;;GAEG;AACH,MAAa,YAAY;IACvB;;;;;;;;;OASG;IAQH,aAAa,CAAW;CACzB;AAnBD,oCAmBC;AADC;IAPC,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;IACX,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACnD,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;mDACsB"}

package/dist/dto/logout-session.dto.d.ts

@@ -4,16 +4,11 @@
  * @example
  * ```typescript
  * const dto = new LogoutSessionDTO();
- * dto.sub = 'user-uuid-123';
  * dto.sessionId = '456';
  * await authService.logoutSession(dto);
  * ```
  */
 export declare class LogoutSessionDTO {
-    /**
-     * User sub (UUID) - must match the session owner
-     */
-    sub: string;
     /**
      * Session ID to revoke
      */

package/dist/dto/logout-session.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logout-session.dto.d.ts","sourceRoot":"","sources":["../../src/dto/logout-session.dto.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;GAUG;AACH,qBAAa,gBAAgB;IAC3B;;OAEG;IAIH,GAAG,EAAG,MAAM,CAAC;IAEb;;OAEG;IAGH,SAAS,EAAG,MAAM,CAAC;CACpB"}
+{"version":3,"file":"logout-session.dto.d.ts","sourceRoot":"","sources":["../../src/dto/logout-session.dto.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,qBAAa,gBAAgB;IAC3B;;OAEG;IAGH,SAAS,EAAG,MAAM,CAAC;CACpB"}

package/dist/dto/logout-session.dto.js

@@ -11,35 +11,23 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LogoutSessionDTO = void 0;
 const class_validator_1 = require("class-validator");
-const class_transformer_1 = require("class-transformer");
 /**
  * DTO for logging out a specific session
  *
  * @example
  * ```typescript
  * const dto = new LogoutSessionDTO();
- * dto.sub = 'user-uuid-123';
  * dto.sessionId = '456';
  * await authService.logoutSession(dto);
  * ```
  */
 class LogoutSessionDTO {
-    /**
-     * User sub (UUID) - must match the session owner
-     */
-    sub;
     /**
      * Session ID to revoke
      */
     sessionId;
 }
 exports.LogoutSessionDTO = LogoutSessionDTO;
-__decorate([
-    (0, class_validator_1.IsUUID)('4'),
-    (0, class_validator_1.IsNotEmpty)(),
-    (0, class_transformer_1.Transform)(({ value }) => value?.trim().toLowerCase()),
-    __metadata("design:type", String)
-], LogoutSessionDTO.prototype, "sub", void 0);
 __decorate([
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsNotEmpty)(),

package/dist/dto/logout-session.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"logout-session.dto.js","sourceRoot":"","sources":["../../src/dto/logout-session.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAA+D;AAC/D,yDAA8C;AAE9C;;;;;;;;;;GAUG;AACH,MAAa,gBAAgB;IAC3B;;OAEG;IAIH,GAAG,CAAU;IAEb;;OAEG;IAGH,SAAS,CAAU;CACpB;AAfD,4CAeC;AARC;IAHC,IAAA,wBAAM,EAAC,GAAG,CAAC;IACX,IAAA,4BAAU,GAAE;IACZ,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;;6CACzC;AAOb;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;mDACM"}
+{"version":3,"file":"logout-session.dto.js","sourceRoot":"","sources":["../../src/dto/logout-session.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAAuD;AAEvD;;;;;;;;;GASG;AACH,MAAa,gBAAgB;IAC3B;;OAEG;IAGH,SAAS,CAAU;CACpB;AAPD,4CAOC;AADC;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;mDACM"}

package/dist/dto/logout.dto.d.ts

@@ -5,7 +5,7 @@
  *
  * Security:
  * - Session ID is automatically extracted from JWT token context (via ClientInfoService)
- * - User sub validated (UUID) - optional, for additional verification
+ * - Uses authenticated user context for sub
  * - Prevents unauthorized logout attempts
  *
  * @example
@@ -19,23 +19,6 @@
  * Request DTO for logout
  */
 export declare class LogoutDTO {
-    /**
-     * User's unique identifier (UUID v4) - Optional
-     *
-     * If provided, validates that the authenticated user matches this sub.
-     * Session ID is automatically extracted from JWT token context.
-     *
-     * Validation:
-     * - Must be a valid UUID v4 format if provided
-     * - Matches DB constraint: char(36) or uuid
-     *
-     * Sanitization:
-     * - Trimmed
-     * - Lowercased for consistency
-     *
-     * @example "a21b654c-2746-4168-acee-c175083a65cd"
-     */
-    sub?: string;
     /**
      * If true, also removes trusted device
      *

package/dist/dto/logout.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logout.dto.d.ts","sourceRoot":"","sources":["../../src/dto/logout.dto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH;;GAEG;AACH,qBAAa,SAAS;IACpB;;;;;;;;;;;;;;;OAeG;IASH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;;;;;;;OAQG;IAGH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB"}
+{"version":3,"file":"logout.dto.d.ts","sourceRoot":"","sources":["../../src/dto/logout.dto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH;;GAEG;AACH,qBAAa,SAAS;IACpB;;;;;;;;OAQG;IAGH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB"}

package/dist/dto/logout.dto.js

@@ -6,7 +6,7 @@
  *
  * Security:
  * - Session ID is automatically extracted from JWT token context (via ClientInfoService)
- * - User sub validated (UUID) - optional, for additional verification
+ * - Uses authenticated user context for sub
  * - Prevents unauthorized logout attempts
  *
  * @example
@@ -28,28 +28,10 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LogoutDTO = void 0;
 const class_validator_1 = require("class-validator");
-const class_transformer_1 = require("class-transformer");
 /**
  * Request DTO for logout
  */
 class LogoutDTO {
-    /**
-     * User's unique identifier (UUID v4) - Optional
-     *
-     * If provided, validates that the authenticated user matches this sub.
-     * Session ID is automatically extracted from JWT token context.
-     *
-     * Validation:
-     * - Must be a valid UUID v4 format if provided
-     * - Matches DB constraint: char(36) or uuid
-     *
-     * Sanitization:
-     * - Trimmed
-     * - Lowercased for consistency
-     *
-     * @example "a21b654c-2746-4168-acee-c175083a65cd"
-     */
-    sub;
     /**
      * If true, also removes trusted device
      *
@@ -62,17 +44,6 @@ class LogoutDTO {
     forgetMe;
 }
 exports.LogoutDTO = LogoutDTO;
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsUUID)('4', { message: 'User sub must be a valid UUID v4 format' }),
-    (0, class_transformer_1.Transform)(({ value }) => {
-        if (typeof value === 'string') {
-            return value.trim().toLowerCase();
-        }
-        return value;
-    }),
-    __metadata("design:type", String)
-], LogoutDTO.prototype, "sub", void 0);
 __decorate([
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsBoolean)({ message: 'forgetMe must be a boolean' }),

package/dist/dto/logout.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"logout.dto.js","sourceRoot":"","sources":["../../src/dto/logout.dto.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;;;;;;;;;;;AAEH,qDAAgE;AAChE,yDAA8C;AAE9C;;GAEG;AACH,MAAa,SAAS;IACpB;;;;;;;;;;;;;;;OAeG;IASH,GAAG,CAAU;IAEb;;;;;;;;OAQG;IAGH,QAAQ,CAAW;CACpB;AAvCD,8BAuCC;AAdC;IARC,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IACnE,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;;sCACW;AAab;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;;2CAClC"}
+{"version":3,"file":"logout.dto.js","sourceRoot":"","sources":["../../src/dto/logout.dto.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;;;;;;;;;;;AAEH,qDAAwD;AAExD;;GAEG;AACH,MAAa,SAAS;IACpB;;;;;;;;OAQG;IAGH,QAAQ,CAAW;CACpB;AAbD,8BAaC;AADC;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;;2CAClC"}

package/dist/dto/remove-devices.dto.d.ts

@@ -1,35 +1,23 @@
 /**
  * DTO for removing MFA devices
  *
- * Used to remove all MFA devices of a specific method type for a user.
+ * Used to remove all MFA devices of a specific method type for the current authenticated user.
  * Automatically disables MFA if this was the last device.
+ * User sub is obtained from authenticated context automatically.
  *
  * @example
  * ```typescript
  * const result = await mfaService.removeDevices({
- *   userSub: 'user-uuid',
  *   methodType: 'totp'
  * });
  * ```
  */
 /**
  * DTO for removing MFA devices
+ *
+ * User self-service DTO - no userSub field. Service gets user from authenticated context.
  */
 export declare class RemoveDevicesDTO {
-    /**
-     * User's unique identifier (UUID v4)
-     *
-     * Validation:
-     * - Must be a valid UUID v4 format
-     * - Matches DB constraint: char(36) or uuid
-     *
-     * Sanitization:
-     * - Trimmed
-     * - Lowercased for consistency
-     *
-     * @example "a21b654c-2746-4168-acee-c175083a65cd"
-     */
-    userSub: string;
     /**
      * MFA method type to remove
      *

package/dist/dto/remove-devices.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remove-devices.dto.d.ts","sourceRoot":"","sources":["../../src/dto/remove-devices.dto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH;;GAEG;AACH,qBAAa,gBAAgB;IAC3B;;;;;;;;;;;;OAYG;IAQH,OAAO,EAAG,MAAM,CAAC;IAEjB;;;;;;;;;;;OAWG;IAYH,UAAU,EAAG,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,qBAAa,wBAAwB;IACnC;;OAEG;IACH,YAAY,EAAG,MAAM,CAAC;IAEtB;;OAEG;IACH,WAAW,EAAG,OAAO,CAAC;CACvB"}
+{"version":3,"file":"remove-devices.dto.d.ts","sourceRoot":"","sources":["../../src/dto/remove-devices.dto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH;;;;GAIG;AACH,qBAAa,gBAAgB;IAE3B;;;;;;;;;;;OAWG;IAYH,UAAU,EAAG,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,qBAAa,wBAAwB;IACnC;;OAEG;IACH,YAAY,EAAG,MAAM,CAAC;IAEtB;;OAEG;IACH,WAAW,EAAG,OAAO,CAAC;CACvB"}