@nauth-toolkit/core 0.3.0 → 0.3.2

package/dist/bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../src/bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,OAAO,EAAE,YAAY,EAA+B,MAAM,uBAAuB,CAAC;AASlF,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAKhE,OAAO,EAAgB,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE1E,OAAO,EAAkB,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGjF,OAAO,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAChE,OAAO,EAAE,KAAK,EAAE,MAAM,iCAAiC,CAAC;AAExD,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAM3E;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,0BAA0B;IAC1B,MAAM,EAAE,WAAW,CAAC;IAEpB,yBAAyB;IACzB,UAAU,EAAE,UAAU,CAAC;IAEvB;;;OAGG;IACH,OAAO,CAAC,EAAE,YAAY,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa,CAAC,WAAW,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,CACrE,SAAQ,IAAI,CAAC,aAAa,EAAE,kBAAkB,GAAG,4BAA4B,CAAC,EAAE,oBAAoB;IACpG,0CAA0C;IAC1C,UAAU,EAAE;QACV,6CAA6C;QAC7C,UAAU,EAAE,WAAW,CAAC;QACxB,yBAAyB;QACzB,IAAI,EAAE,WAAW,CAAC;QAClB,sBAAsB;QACtB,IAAI,EAAE,WAAW,CAAC;QAClB,4CAA4C;QAC5C,aAAa,EAAE,WAAW,CAAC;KAC5B,CAAC;IAEF,oBAAoB;IACpB,OAAO,EAAE;QACP,2CAA2C;QAC3C,MAAM,EAAE,MAAM,OAAO,CAAC;QACtB,yDAAyD;QACzD,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,OAAO,CAAA;SAAE,KAAK,OAAO,CAAC;QACvD,qCAAqC;QACrC,YAAY,EAAE,MAAM,OAAO,CAAC;QAC5B,mCAAmC;QACnC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC;QACrD,+CAA+C;QAC/C,aAAa,EAAE,MAAM,OAAO,CAAC;QAC7B,kDAAkD;QAClD,gBAAgB,EAAE,MAAM,OAAO,CAAC;QAChC,qCAAqC;QACrC,cAAc,EAAE,MAAM,KAAK,GAAG,SAAS,CAAC;QACxC,6BAA6B;QAC7B,iBAAiB,EAAE,MAAM,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;QACrD,sBAAsB;QACtB,aAAa,EAAE,MAAM,UAAU,GAAG,SAAS,CAAC;KAC7C,CAAC;IAEF,6BAA6B;IAC7B,OAAO,EAAE,YAAY,CAAC;IAEtB,oBAAoB;IACpB,MAAM,EAAE,WAAW,CAAC;IAEpB,sBAAsB;IACtB,MAAM,EAAE,WAAW,CAAC;IAEpB,gCAAgC;IAChC,WAAW,CAAC,EAAE,WAAW,CAAC;IAE1B,0EAA0E;IAC1E,cAAc,CAAC,EAAE,qBAAqB,CAAC;IAEvC,0FAA0F;IAC1F,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAMD;;;;GAIG;AACH,qBAAa,KAAK;IAChB;;;;;;;;;;;;;;OAcG;WACU,MAAM,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;CAyVnE"}
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../src/bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,OAAO,EAAE,YAAY,EAA+B,MAAM,uBAAuB,CAAC;AAUlF,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAKhE,OAAO,EAAgB,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE1E,OAAO,EAAkB,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGjF,OAAO,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAChE,OAAO,EAAE,KAAK,EAAE,MAAM,iCAAiC,CAAC;AAExD,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAM3E;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,0BAA0B;IAC1B,MAAM,EAAE,WAAW,CAAC;IAEpB,yBAAyB;IACzB,UAAU,EAAE,UAAU,CAAC;IAEvB;;;OAGG;IACH,OAAO,CAAC,EAAE,YAAY,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa,CAAC,WAAW,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,CACrE,SAAQ,IAAI,CAAC,aAAa,EAAE,kBAAkB,GAAG,4BAA4B,CAAC,EAAE,oBAAoB;IACpG,0CAA0C;IAC1C,UAAU,EAAE;QACV,6CAA6C;QAC7C,UAAU,EAAE,WAAW,CAAC;QACxB,yBAAyB;QACzB,IAAI,EAAE,WAAW,CAAC;QAClB,sBAAsB;QACtB,IAAI,EAAE,WAAW,CAAC;QAClB,4CAA4C;QAC5C,aAAa,EAAE,WAAW,CAAC;KAC5B,CAAC;IAEF,oBAAoB;IACpB,OAAO,EAAE;QACP,2CAA2C;QAC3C,MAAM,EAAE,MAAM,OAAO,CAAC;QACtB,yDAAyD;QACzD,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,OAAO,CAAA;SAAE,KAAK,OAAO,CAAC;QACvD,qCAAqC;QACrC,YAAY,EAAE,MAAM,OAAO,CAAC;QAC5B,mCAAmC;QACnC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC;QACrD,+CAA+C;QAC/C,aAAa,EAAE,MAAM,OAAO,CAAC;QAC7B,kDAAkD;QAClD,gBAAgB,EAAE,MAAM,OAAO,CAAC;QAChC,qCAAqC;QACrC,cAAc,EAAE,MAAM,KAAK,GAAG,SAAS,CAAC;QACxC,6BAA6B;QAC7B,iBAAiB,EAAE,MAAM,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;QACrD,sBAAsB;QACtB,aAAa,EAAE,MAAM,UAAU,GAAG,SAAS,CAAC;KAC7C,CAAC;IAEF,6BAA6B;IAC7B,OAAO,EAAE,YAAY,CAAC;IAEtB,oBAAoB;IACpB,MAAM,EAAE,WAAW,CAAC;IAEpB,sBAAsB;IACtB,MAAM,EAAE,WAAW,CAAC;IAEpB,gCAAgC;IAChC,WAAW,CAAC,EAAE,WAAW,CAAC;IAE1B,0EAA0E;IAC1E,cAAc,CAAC,EAAE,qBAAqB,CAAC;IAEvC,0FAA0F;IAC1F,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAMD;;;;GAIG;AACH,qBAAa,KAAK;IAChB;;;;;;;;;;;;;;OAcG;WACU,MAAM,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;CAsZnE"}

package/dist/bootstrap.js

@@ -37,6 +37,7 @@ const context_storage_1 = require("./utils/context-storage");
 // Handlers
 const client_info_handler_1 = require("./handlers/client-info.handler");
 const auth_handler_1 = require("./handlers/auth.handler");
+const api_key_handler_1 = require("./handlers/api-key.handler");
 const token_delivery_handler_1 = require("./handlers/token-delivery.handler");
 const csrf_handler_1 = require("./handlers/csrf.handler");
 const csrf_service_1 = require("./services/csrf.service");
@@ -159,6 +160,10 @@ class NAuth {
         // ========================================================================
         const clientInfoHandler = new client_info_handler_1.ClientInfoHandler(services.clientInfoService, config, services.geoLocationService, logger);
         const authHandler = new auth_handler_1.AuthHandler(services.jwtService, services.sessionService, services.authService, config, logger);
+        // API key handler (only when the feature is enabled and the service is available)
+        const apiKeyHandler = config.apiKeys?.enabled && services.apiKeyService
+            ? new api_key_handler_1.ApiKeyHandler(services.apiKeyService, services.authService, config, logger)
+            : null;
         const tokenDeliveryHandler = new token_delivery_handler_1.TokenDeliveryHandler(config, logger);
         // CSRF service (only for cookies/hybrid delivery)
         const csrfService = config.tokenDelivery?.method === 'cookies' || config.tokenDelivery?.method === 'hybrid'
@@ -173,6 +178,13 @@ class NAuth {
             clientInfo: adapter.registerMiddleware('clientInfo', clientInfoHandler.handle.bind(clientInfoHandler), {
                 initializesContext: true,
             }),
+            // API key handler - MUST run before the JWT auth handler. When an API key is present it
+            // is the only credential considered; a valid key makes the auth handler skip cookie/bearer.
+            apiKey: apiKeyHandler
+                ? adapter.registerMiddleware('apiKey', apiKeyHandler.handle.bind(apiKeyHandler))
+                : adapter.registerMiddleware('noop', async (_req, _res, next) => {
+                    await next();
+                }),
             // Auth handler
             auth: adapter.registerMiddleware('auth', authHandler.handle.bind(authHandler)),
             // CSRF handler (no-op if disabled)
@@ -215,6 +227,22 @@ class NAuth {
                     });
                     return;
                 }
+                // API-key route opt-in enforcement (deny-wins, least privilege):
+                // a key-authenticated request is only allowed on routes explicitly opted-in via
+                // allowApiKey() (or globalAllowlist), and never on routes opted-out via denyApiKey().
+                if (req.attributes.nauthApiKeyAuth) {
+                    const allowed = req.attributes.nauthDenyApiKey !== true &&
+                        (req.attributes.nauthAllowApiKey === true || config.apiKeys?.globalAllowlist === true);
+                    if (!allowed) {
+                        res.status(403).json({
+                            statusCode: 403,
+                            error: 'Forbidden',
+                            message: 'API key authentication is not allowed for this route',
+                            code: error_codes_enum_1.AuthErrorCode.FORBIDDEN,
+                        });
+                        return;
+                    }
+                }
                 return next();
             }),
             /**
@@ -283,6 +311,31 @@ class NAuth {
                 req.attributes.nauthRequireRecaptcha = true;
                 return next();
             }),
+            /**
+             * Allow API-key authentication for this route (opt-in).
+             *
+             * With the default opt-in policy, API keys only authenticate on routes marked with this
+             * helper. Enforced by `requireAuth()`.
+             *
+             * @example
+             * ```typescript
+             * app.get('/api/data', nauth.helpers.allowApiKey(), nauth.helpers.requireAuth(), handler);
+             * ```
+             */
+            allowApiKey: () => adapter.registerMiddleware('allowApiKey', (req, _res, next) => {
+                req.attributes.nauthAllowApiKey = true;
+                return next();
+            }),
+            /**
+             * Deny API-key authentication for this route (takes precedence over allow / globalAllowlist).
+             *
+             * Use to exclude a sensitive route even when keys are enabled globally or on a controller.
+             * Enforced by `requireAuth()`.
+             */
+            denyApiKey: () => adapter.registerMiddleware('denyApiKey', (req, _res, next) => {
+                req.attributes.nauthDenyApiKey = true;
+                return next();
+            }),
             // Context helpers (read from ContextStorage)
             getCurrentUser: () => context_storage_1.ContextStorage.get('CURRENT_USER'),
             getCurrentSession: () => context_storage_1.ContextStorage.get('CURRENT_SESSION'),

package/dist/bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../src/bootstrap.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;;;AAIH,uDAAmD;AACnD,kEAA8D;AAC9D,+DAAyD;AAEzD,gEAA4D;AAC5D,6DAAyD;AAEzD,WAAW;AACX,wEAAmE;AACnE,0DAAsD;AACtD,8EAAyE;AACzE,0DAAsD;AACtD,0DAAsD;AACtD,oEAAgE;AAEhE,gBAAgB;AAChB,qEAAiE;AACjE,6DAAyD;AACzD,+DAA0E;AAC1E,6DAAkE;AAClE,2DAAiF;AACjF,6EAAiF;AACjF,yCAAiF;AAGjF,gGAAkF;AAClF,gFAA2E;AAsF3E,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;;;GAIG;AACH,MAAa,KAAK;IAChB;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAqB;QACvC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,gCAAc,EAAE,CAAC;QAExD,MAAM,MAAM,GAAG,IAAI,0BAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,2BAA2B,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC;QAEzD,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,MAAM,IAAA,kDAA2B,EAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAE9D,2EAA2E;QAC3E,uCAAuC;QACvC,2EAA2E;QAC3E,MAAM,KAAK,GAAG,IAAA,kCAAe,EAAC,UAAU,CAAC,CAAC;QAE1C,MAAM,OAAO,GAAG,MAAM,IAAA,0BAAW,EAAC,MAAM,EAAE,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QAE1G,2EAA2E;QAC3E,yBAAyB;QACzB,2EAA2E;QAC3E,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACvC,MAAM,QAAQ,GAAkB,IAAA,4BAAY,EAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;QAEzG,2EAA2E;QAC3E,wCAAwC;QACxC,2EAA2E;QAC3E,MAAM,cAAc,GAAG,IAAI,iCAAsB,CAC/C,QAAQ,CAAC,oBAAoB,EAC7B,QAAQ,CAAC,0BAA0B,EACnC,QAAQ,CAAC,iBAAiB,EAC1B,MAAM,CACP,CAAC;QACF,MAAM,YAAY,GAAG,IAAI,sCAA2B,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAE7E,IAAI,QAAQ,CAAC,0BAA0B,EAAE,CAAC;YACvC,QAAQ,CAAC,0BAAiE,CAAC,YAAY,GAAG,YAAY,CAAC;YACvG,QAAQ,CAAC,0BAAiE,CAAC,cAAc,GAAG,cAAc,CAAC;QAC9G,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,cAAc,EAAE,6CAA6C,CAAC,CAAC;QACxG,CAAC;QAED,2EAA2E;QAC3E,qCAAqC;QACrC,2EAA2E;QAC3E,MAAM,oBAAoB,GAAG,IAAI,sDAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAEvE,IAAI,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC/C,MAAM,IAAA,mCAAoB,EACxB,MAAM,EACN,QAAQ,CAAC,UAAU,EACnB,KAAK,CAAC,mBAAoB,EAC1B,KAAK,CAAC,cAAc,EACpB,MAAM,EACN,QAAQ,CAAC,eAAe,EACxB,QAAQ,CAAC,wBAAwB,EACjC,QAAQ,CAAC,wBAAwB,EACjC,QAAQ,CAAC,gBAAgB,EACzB,QAAQ,CAAC,YAAY,EACrB,QAAQ,CAAC,iBAAiB,CAC3B,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAyB,MAAM,IAAA,4BAAc,EAChE,MAAM,EACN,QAAQ,CAAC,sBAAsB,EAC/B,QAAQ,CAAC,WAAW,EACpB,QAAQ,CAAC,iBAAiB,EAC1B,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,cAAc,EACvB,QAAQ,CAAC,0BAA0B,EACnC,QAAQ,CAAC,iBAAiB,EAC1B,MAAM,EACN,oBAAoB,EACpB,KAAK,CAAC,cAAc,EACpB,QAAQ,CAAC,wBAAwB,EACjC,QAAQ,CAAC,YAAY,EACrB,QAAQ,CAAC,oBAAoB,EAC7B,KAAK,CAAC,8BAA8B,EACpC,QAAQ,CAAC,YAAY,CACtB,CAAC;QAEF,kEAAkE;QAClE,MAAM,SAAS,GACb,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;QACtG,MAAM,qBAAqB,GAAG,SAAS;YACrC,CAAC,CAAC,IAAI,+CAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,CAAC;YAC3G,CAAC,CAAC,SAAS,CAAC;QAEd,2EAA2E;QAC3E,+CAA+C;QAC/C,2EAA2E;QAC3E,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC3D,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,iBAAiB,IAAI,MAAM,CAAC;YAClE,gFAAgF;YAChF,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,QAEjC,CAAC;YAEF,IAAI,YAAY,KAAK,KAAK,IAAI,OAAO,QAAQ,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;gBAC5E,IAAI,CAAC;oBACH,MAAM,gBAAgB,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAC;oBAEzD,IAAI,gBAAgB,CAAC,KAAK,EAAE,CAAC;wBAC3B,MAAM,CAAC,GAAG,CAAC,cAAc,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC;oBACvD,CAAC;yBAAM,CAAC;wBACN,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI;4BACvC,CAAC,CAAC,GAAG,gBAAgB,CAAC,OAAO,IAAI,gBAAgB,CAAC,IAAI,EAAE;4BACxD,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC;wBAE7B,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;4BAC7B,MAAM,IAAI,gCAAc,CACtB,gCAAa,CAAC,0BAA0B,EACxC,wCAAwC,WAAW,EAAE,CACtD,CAAC;wBACJ,CAAC;6BAAM,CAAC;4BACN,MAAM,CAAC,IAAI,CAAC,wCAAwC,WAAW,EAAE,CAAC,CAAC;wBACrE,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAc,EAAE,CAAC;oBACxB,IAAI,KAAK,YAAY,gCAAc,EAAE,CAAC;wBACpC,MAAM,KAAK,CAAC;oBACd,CAAC;oBACD,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC;oBACzF,MAAM,CAAC,IAAI,CAAC,oDAAoD,YAAY,EAAE,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,qBAAqB;QACrB,2EAA2E;QAC3E,MAAM,iBAAiB,GAAG,IAAI,uCAAiB,CAC7C,QAAQ,CAAC,iBAAiB,EAC1B,MAAM,EACN,QAAQ,CAAC,kBAAkB,EAC3B,MAAM,CACP,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,0BAAW,CACjC,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,cAAc,EACvB,QAAQ,CAAC,WAAW,EACpB,MAAM,EACN,MAAM,CACP,CAAC;QAEF,MAAM,oBAAoB,GAAG,IAAI,6CAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAEtE,kDAAkD;QAClD,MAAM,WAAW,GACf,MAAM,CAAC,aAAa,EAAE,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,EAAE,MAAM,KAAK,QAAQ;YACrF,CAAC,CAAC,IAAI,0BAAW,CAAC,MAAM,CAAC;YACzB,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,0BAAW,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEtF,2EAA2E;QAC3E,sCAAsC;QACtC,2EAA2E;QAC3E,MAAM,UAAU,GAAG;YACjB,iDAAiD;YACjD,UAAU,EAAE,OAAO,CAAC,kBAAkB,CAAC,YAAY,EAAE,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE;gBACrG,kBAAkB,EAAE,IAAI;aACzB,CAAC;YAEF,eAAe;YACf,IAAI,EAAE,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAE9E,mCAAmC;YACnC,IAAI,EAAE,WAAW;gBACf,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC1E,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAkB,EAAE,IAAmB,EAAE,IAAgB,EAAE,EAAE;oBACrG,MAAM,IAAI,EAAE,CAAC;gBACf,CAAC,CAAC;YAEN,wCAAwC;YACxC,aAAa,EAAE,OAAO,CAAC,2BAA2B,CAChD,oBAAoB,CAAC,cAAc,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAC/D;SACF,CAAC;QAEF,2EAA2E;QAC3E,oBAAoB;QACpB,2EAA2E;QAC3E,MAAM,OAAO,GAAG;YACd;;eAEG;YACH,MAAM,EAAE,GAAG,EAAE,CACX,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC,GAAiB,EAAE,IAAmB,EAAE,IAAgB,EAAE,EAAE;gBAChG,GAAG,CAAC,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC;gBAClC,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC,CAAC;YAEJ;;;;eAIG;YACH,WAAW,EAAE,CAAC,OAA4B,EAAE,EAAE,CAC5C,OAAO,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC,GAAiB,EAAE,GAAkB,EAAE,IAAgB,EAAE,EAAE;gBACpG,gDAAgD;gBAChD,IAAI,OAAO,EAAE,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;oBAC7D,MAAM,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC;gBACtC,CAAC;gBAED,yBAAyB;gBACzB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;oBACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,UAAU,EAAE,GAAG;wBACf,KAAK,EAAE,cAAc;wBACrB,OAAO,EAAE,yBAAyB;wBAClC,IAAI,EAAE,eAAe;qBACtB,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC,CAAC;YAEJ;;;;;eAKG;YACH,YAAY,EAAE,GAAG,EAAE,CACjB,OAAO,CAAC,kBAAkB,CAAC,cAAc,EAAE,CAAC,IAAkB,EAAE,IAAmB,EAAE,IAAgB,EAAE,EAAE;gBACvG,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC,CAAC;YAEJ;;eAEG;YACH,aAAa,EAAE,CAAC,IAAwB,EAAE,EAAE,CAC1C,OAAO,CAAC,kBAAkB,CACxB,qBAAqB,EACrB,CAAC,GAAiB,EAAE,IAAmB,EAAE,IAAgB,EAAE,EAAE;gBAC3D,GAAG,CAAC,UAAU,CAAC,kBAAkB,GAAG,IAAI,CAAC;gBACzC,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC,CACF;YAEH;;;;;;;;;;;;;;;;;;;;eAoBG;YACH,aAAa,EAAE,GAAG,EAAE,CAClB,OAAO,CAAC,kBAAkB,CAAC,eAAe,EAAE,CAAC,GAAiB,EAAE,IAAmB,EAAE,IAAgB,EAAE,EAAE;gBACvG,GAAG,CAAC,UAAU,CAAC,kBAAkB,GAAG,IAAI,CAAC;gBACzC,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC,CAAC;YAEJ;;;;;;;;;;;;;;;;;;;;eAoBG;YACH,gBAAgB,EAAE,GAAG,EAAE,CACrB,OAAO,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC,GAAiB,EAAE,IAAmB,EAAE,IAAgB,EAAE,EAAE;gBAC1G,GAAG,CAAC,UAAU,CAAC,qBAAqB,GAAG,IAAI,CAAC;gBAC5C,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC,CAAC;YAEJ,6CAA6C;YAC7C,cAAc,EAAE,GAAG,EAAE,CAAC,gCAAc,CAAC,GAAG,CAAQ,cAAc,CAAC;YAC/D,iBAAiB,EAAE,GAAG,EAAE,CAAC,gCAAc,CAAC,GAAG,CAAkB,iBAAiB,CAAC;YAC/E,aAAa,EAAE,GAAG,EAAE,CAAC,gCAAc,CAAC,GAAG,CAAa,aAAa,CAAC;SACnE,CAAC;QAEF,2EAA2E;QAC3E,+BAA+B;QAC/B,2EAA2E;QAE3E,4CAA4C;QAC5C,MAAM,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,GAAG,cAAc,EAAE,GAAG,QAAQ,CAAC;QAErF,MAAM,CAAC,GAAG,CAAC,uCAAuC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAElE,oEAAoE;QACpE,wEAAwE;QACxE,yDAAyD;QACzD,MAAM,gBAAgB,GAAG,IAAI,oCAAgB,CAC3C,MAAM,EACN,OAAO,EACP,MAAM,EACN,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,EACnD,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,sBAAsB,CAChC,CAAC;QACF,YAAY,CAAC,GAAG,EAAE;YAChB,gBAAgB,CAAC,YAAY,EAAE,CAAC;YAChC,gBAAgB,CAAC,cAAc,EAAE,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,GAAG,cAAc;YACjB,GAAG,eAAe;YAClB,UAAU;YACV,OAAO;YACP,OAAO;YACP,MAAM;YACN,MAAM;YACN,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,WAAW;YACX,cAAc,EAAE,qBAAqB;YACrC,gBAAgB;SACjB,CAAC;IACJ,CAAC;CACF;AAzWD,sBAyWC"}
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../src/bootstrap.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;;;AAIH,uDAAmD;AACnD,kEAA8D;AAC9D,+DAAyD;AAEzD,gEAA4D;AAC5D,6DAAyD;AAEzD,WAAW;AACX,wEAAmE;AACnE,0DAAsD;AACtD,gEAA2D;AAC3D,8EAAyE;AACzE,0DAAsD;AACtD,0DAAsD;AACtD,oEAAgE;AAEhE,gBAAgB;AAChB,qEAAiE;AACjE,6DAAyD;AACzD,+DAA0E;AAC1E,6DAAkE;AAClE,2DAAiF;AACjF,6EAAiF;AACjF,yCAAiF;AAGjF,gGAAkF;AAClF,gFAA2E;AAsF3E,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;;;GAIG;AACH,MAAa,KAAK;IAChB;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAqB;QACvC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,gCAAc,EAAE,CAAC;QAExD,MAAM,MAAM,GAAG,IAAI,0BAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,2BAA2B,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC;QAEzD,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,MAAM,IAAA,kDAA2B,EAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAE9D,2EAA2E;QAC3E,uCAAuC;QACvC,2EAA2E;QAC3E,MAAM,KAAK,GAAG,IAAA,kCAAe,EAAC,UAAU,CAAC,CAAC;QAE1C,MAAM,OAAO,GAAG,MAAM,IAAA,0BAAW,EAAC,MAAM,EAAE,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QAE1G,2EAA2E;QAC3E,yBAAyB;QACzB,2EAA2E;QAC3E,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACvC,MAAM,QAAQ,GAAkB,IAAA,4BAAY,EAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;QAEzG,2EAA2E;QAC3E,wCAAwC;QACxC,2EAA2E;QAC3E,MAAM,cAAc,GAAG,IAAI,iCAAsB,CAC/C,QAAQ,CAAC,oBAAoB,EAC7B,QAAQ,CAAC,0BAA0B,EACnC,QAAQ,CAAC,iBAAiB,EAC1B,MAAM,CACP,CAAC;QACF,MAAM,YAAY,GAAG,IAAI,sCAA2B,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAE7E,IAAI,QAAQ,CAAC,0BAA0B,EAAE,CAAC;YACvC,QAAQ,CAAC,0BAAiE,CAAC,YAAY,GAAG,YAAY,CAAC;YACvG,QAAQ,CAAC,0BAAiE,CAAC,cAAc,GAAG,cAAc,CAAC;QAC9G,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,cAAc,EAAE,6CAA6C,CAAC,CAAC;QACxG,CAAC;QAED,2EAA2E;QAC3E,qCAAqC;QACrC,2EAA2E;QAC3E,MAAM,oBAAoB,GAAG,IAAI,sDAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAEvE,IAAI,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC/C,MAAM,IAAA,mCAAoB,EACxB,MAAM,EACN,QAAQ,CAAC,UAAU,EACnB,KAAK,CAAC,mBAAoB,EAC1B,KAAK,CAAC,cAAc,EACpB,MAAM,EACN,QAAQ,CAAC,eAAe,EACxB,QAAQ,CAAC,wBAAwB,EACjC,QAAQ,CAAC,wBAAwB,EACjC,QAAQ,CAAC,gBAAgB,EACzB,QAAQ,CAAC,YAAY,EACrB,QAAQ,CAAC,iBAAiB,CAC3B,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAyB,MAAM,IAAA,4BAAc,EAChE,MAAM,EACN,QAAQ,CAAC,sBAAsB,EAC/B,QAAQ,CAAC,WAAW,EACpB,QAAQ,CAAC,iBAAiB,EAC1B,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,cAAc,EACvB,QAAQ,CAAC,0BAA0B,EACnC,QAAQ,CAAC,iBAAiB,EAC1B,MAAM,EACN,oBAAoB,EACpB,KAAK,CAAC,cAAc,EACpB,QAAQ,CAAC,wBAAwB,EACjC,QAAQ,CAAC,YAAY,EACrB,QAAQ,CAAC,oBAAoB,EAC7B,KAAK,CAAC,8BAA8B,EACpC,QAAQ,CAAC,YAAY,CACtB,CAAC;QAEF,kEAAkE;QAClE,MAAM,SAAS,GACb,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;QACtG,MAAM,qBAAqB,GAAG,SAAS;YACrC,CAAC,CAAC,IAAI,+CAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,CAAC;YAC3G,CAAC,CAAC,SAAS,CAAC;QAEd,2EAA2E;QAC3E,+CAA+C;QAC/C,2EAA2E;QAC3E,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC3D,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,iBAAiB,IAAI,MAAM,CAAC;YAClE,gFAAgF;YAChF,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,QAEjC,CAAC;YAEF,IAAI,YAAY,KAAK,KAAK,IAAI,OAAO,QAAQ,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;gBAC5E,IAAI,CAAC;oBACH,MAAM,gBAAgB,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAC;oBAEzD,IAAI,gBAAgB,CAAC,KAAK,EAAE,CAAC;wBAC3B,MAAM,CAAC,GAAG,CAAC,cAAc,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC;oBACvD,CAAC;yBAAM,CAAC;wBACN,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI;4BACvC,CAAC,CAAC,GAAG,gBAAgB,CAAC,OAAO,IAAI,gBAAgB,CAAC,IAAI,EAAE;4BACxD,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC;wBAE7B,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;4BAC7B,MAAM,IAAI,gCAAc,CACtB,gCAAa,CAAC,0BAA0B,EACxC,wCAAwC,WAAW,EAAE,CACtD,CAAC;wBACJ,CAAC;6BAAM,CAAC;4BACN,MAAM,CAAC,IAAI,CAAC,wCAAwC,WAAW,EAAE,CAAC,CAAC;wBACrE,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAc,EAAE,CAAC;oBACxB,IAAI,KAAK,YAAY,gCAAc,EAAE,CAAC;wBACpC,MAAM,KAAK,CAAC;oBACd,CAAC;oBACD,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC;oBACzF,MAAM,CAAC,IAAI,CAAC,oDAAoD,YAAY,EAAE,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,qBAAqB;QACrB,2EAA2E;QAC3E,MAAM,iBAAiB,GAAG,IAAI,uCAAiB,CAC7C,QAAQ,CAAC,iBAAiB,EAC1B,MAAM,EACN,QAAQ,CAAC,kBAAkB,EAC3B,MAAM,CACP,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,0BAAW,CACjC,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,cAAc,EACvB,QAAQ,CAAC,WAAW,EACpB,MAAM,EACN,MAAM,CACP,CAAC;QAEF,kFAAkF;QAClF,MAAM,aAAa,GACjB,MAAM,CAAC,OAAO,EAAE,OAAO,IAAI,QAAQ,CAAC,aAAa;YAC/C,CAAC,CAAC,IAAI,+BAAa,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC;YACjF,CAAC,CAAC,IAAI,CAAC;QAEX,MAAM,oBAAoB,GAAG,IAAI,6CAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAEtE,kDAAkD;QAClD,MAAM,WAAW,GACf,MAAM,CAAC,aAAa,EAAE,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,EAAE,MAAM,KAAK,QAAQ;YACrF,CAAC,CAAC,IAAI,0BAAW,CAAC,MAAM,CAAC;YACzB,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,0BAAW,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEtF,2EAA2E;QAC3E,sCAAsC;QACtC,2EAA2E;QAC3E,MAAM,UAAU,GAAG;YACjB,iDAAiD;YACjD,UAAU,EAAE,OAAO,CAAC,kBAAkB,CAAC,YAAY,EAAE,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE;gBACrG,kBAAkB,EAAE,IAAI;aACzB,CAAC;YAEF,wFAAwF;YACxF,4FAA4F;YAC5F,MAAM,EAAE,aAAa;gBACnB,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAChF,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAkB,EAAE,IAAmB,EAAE,IAAgB,EAAE,EAAE;oBACrG,MAAM,IAAI,EAAE,CAAC;gBACf,CAAC,CAAC;YAEN,eAAe;YACf,IAAI,EAAE,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAE9E,mCAAmC;YACnC,IAAI,EAAE,WAAW;gBACf,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC1E,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAkB,EAAE,IAAmB,EAAE,IAAgB,EAAE,EAAE;oBACrG,MAAM,IAAI,EAAE,CAAC;gBACf,CAAC,CAAC;YAEN,wCAAwC;YACxC,aAAa,EAAE,OAAO,CAAC,2BAA2B,CAChD,oBAAoB,CAAC,cAAc,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAC/D;SACF,CAAC;QAEF,2EAA2E;QAC3E,oBAAoB;QACpB,2EAA2E;QAC3E,MAAM,OAAO,GAAG;YACd;;eAEG;YACH,MAAM,EAAE,GAAG,EAAE,CACX,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC,GAAiB,EAAE,IAAmB,EAAE,IAAgB,EAAE,EAAE;gBAChG,GAAG,CAAC,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC;gBAClC,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC,CAAC;YAEJ;;;;eAIG;YACH,WAAW,EAAE,CAAC,OAA4B,EAAE,EAAE,CAC5C,OAAO,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC,GAAiB,EAAE,GAAkB,EAAE,IAAgB,EAAE,EAAE;gBACpG,gDAAgD;gBAChD,IAAI,OAAO,EAAE,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;oBAC7D,MAAM,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC;gBACtC,CAAC;gBAED,yBAAyB;gBACzB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;oBACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,UAAU,EAAE,GAAG;wBACf,KAAK,EAAE,cAAc;wBACrB,OAAO,EAAE,yBAAyB;wBAClC,IAAI,EAAE,eAAe;qBACtB,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,iEAAiE;gBACjE,gFAAgF;gBAChF,sFAAsF;gBACtF,IAAI,GAAG,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC;oBACnC,MAAM,OAAO,GACX,GAAG,CAAC,UAAU,CAAC,eAAe,KAAK,IAAI;wBACvC,CAAC,GAAG,CAAC,UAAU,CAAC,gBAAgB,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,eAAe,KAAK,IAAI,CAAC,CAAC;oBACzF,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;4BACnB,UAAU,EAAE,GAAG;4BACf,KAAK,EAAE,WAAW;4BAClB,OAAO,EAAE,sDAAsD;4BAC/D,IAAI,EAAE,gCAAa,CAAC,SAAS;yBAC9B,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;gBACH,CAAC;gBAED,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC,CAAC;YAEJ;;;;;eAKG;YACH,YAAY,EAAE,GAAG,EAAE,CACjB,OAAO,CAAC,kBAAkB,CAAC,cAAc,EAAE,CAAC,IAAkB,EAAE,IAAmB,EAAE,IAAgB,EAAE,EAAE;gBACvG,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC,CAAC;YAEJ;;eAEG;YACH,aAAa,EAAE,CAAC,IAAwB,EAAE,EAAE,CAC1C,OAAO,CAAC,kBAAkB,CACxB,qBAAqB,EACrB,CAAC,GAAiB,EAAE,IAAmB,EAAE,IAAgB,EAAE,EAAE;gBAC3D,GAAG,CAAC,UAAU,CAAC,kBAAkB,GAAG,IAAI,CAAC;gBACzC,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC,CACF;YAEH;;;;;;;;;;;;;;;;;;;;eAoBG;YACH,aAAa,EAAE,GAAG,EAAE,CAClB,OAAO,CAAC,kBAAkB,CAAC,eAAe,EAAE,CAAC,GAAiB,EAAE,IAAmB,EAAE,IAAgB,EAAE,EAAE;gBACvG,GAAG,CAAC,UAAU,CAAC,kBAAkB,GAAG,IAAI,CAAC;gBACzC,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC,CAAC;YAEJ;;;;;;;;;;;;;;;;;;;;eAoBG;YACH,gBAAgB,EAAE,GAAG,EAAE,CACrB,OAAO,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC,GAAiB,EAAE,IAAmB,EAAE,IAAgB,EAAE,EAAE;gBAC1G,GAAG,CAAC,UAAU,CAAC,qBAAqB,GAAG,IAAI,CAAC;gBAC5C,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC,CAAC;YAEJ;;;;;;;;;;eAUG;YACH,WAAW,EAAE,GAAG,EAAE,CAChB,OAAO,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC,GAAiB,EAAE,IAAmB,EAAE,IAAgB,EAAE,EAAE;gBACrG,GAAG,CAAC,UAAU,CAAC,gBAAgB,GAAG,IAAI,CAAC;gBACvC,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC,CAAC;YAEJ;;;;;eAKG;YACH,UAAU,EAAE,GAAG,EAAE,CACf,OAAO,CAAC,kBAAkB,CAAC,YAAY,EAAE,CAAC,GAAiB,EAAE,IAAmB,EAAE,IAAgB,EAAE,EAAE;gBACpG,GAAG,CAAC,UAAU,CAAC,eAAe,GAAG,IAAI,CAAC;gBACtC,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC,CAAC;YAEJ,6CAA6C;YAC7C,cAAc,EAAE,GAAG,EAAE,CAAC,gCAAc,CAAC,GAAG,CAAQ,cAAc,CAAC;YAC/D,iBAAiB,EAAE,GAAG,EAAE,CAAC,gCAAc,CAAC,GAAG,CAAkB,iBAAiB,CAAC;YAC/E,aAAa,EAAE,GAAG,EAAE,CAAC,gCAAc,CAAC,GAAG,CAAa,aAAa,CAAC;SACnE,CAAC;QAEF,2EAA2E;QAC3E,+BAA+B;QAC/B,2EAA2E;QAE3E,4CAA4C;QAC5C,MAAM,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,GAAG,cAAc,EAAE,GAAG,QAAQ,CAAC;QAErF,MAAM,CAAC,GAAG,CAAC,uCAAuC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAElE,oEAAoE;QACpE,wEAAwE;QACxE,yDAAyD;QACzD,MAAM,gBAAgB,GAAG,IAAI,oCAAgB,CAC3C,MAAM,EACN,OAAO,EACP,MAAM,EACN,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,EACnD,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,sBAAsB,CAChC,CAAC;QACF,YAAY,CAAC,GAAG,EAAE;YAChB,gBAAgB,CAAC,YAAY,EAAE,CAAC;YAChC,gBAAgB,CAAC,cAAc,EAAE,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,GAAG,cAAc;YACjB,GAAG,eAAe;YAClB,UAAU;YACV,OAAO;YACP,OAAO;YACP,MAAM;YACN,MAAM;YACN,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,WAAW;YACX,cAAc,EAAE,qBAAqB;YACrC,gBAAgB;SACjB,CAAC;IACJ,CAAC;CACF;AAtaD,sBAsaC"}

package/dist/dto/admin-api-key.dto.d.ts

@@ -0,0 +1,69 @@
+/**
+ * DTO for administrative API key creation on behalf of a user
+ *
+ * Warning: This endpoint should be protected by admin authentication.
+ * The service does not enforce authorization - it is the responsibility of the
+ * framework adapter (NestJS/Express/Fastify) to protect the endpoint.
+ *
+ * Admin-created keys bypass the `allowUserCreation` restriction but still obey
+ * `maxKeysPerUser`, expiry, and IP-restriction rules.
+ */
+export declare class AdminCreateApiKeyDTO {
+    /**
+     * Target user sub (UUID v4)
+     *
+     * Sanitization: Trimmed and lowercased.
+     */
+    sub: string;
+    /**
+     * User-friendly label for the key (optional)
+     */
+    name?: string;
+    /**
+     * Key expiry in days, or `null` for a key that never expires
+     *
+     * Mandatory at creation (see {@link CreateApiKeyDTO} for the rules the service enforces).
+     */
+    expiresInDays?: number | null;
+    /**
+     * Allowed source IPs / CIDR ranges for this key (optional)
+     */
+    allowedIps?: string[];
+}
+/**
+ * DTO for administrative API key update on behalf of a user
+ */
+export declare class AdminUpdateApiKeyDTO {
+    /**
+     * Target user sub (UUID v4)
+     */
+    sub: string;
+    /**
+     * External key identifier (UUID v4)
+     */
+    keyId: string;
+    /**
+     * New label for the key (optional)
+     */
+    name?: string;
+    /**
+     * Replacement IP allowlist (optional). Pass an empty array to clear restrictions.
+     */
+    allowedIps?: string[];
+}
+/**
+ * DTO for administrative API key management (list / revoke / delete) by user sub
+ *
+ * For list operations, only `sub` is required. For revoke/delete, `keyId` is also required.
+ */
+export declare class AdminManageApiKeyDTO {
+    /**
+     * Target user sub (UUID v4)
+     */
+    sub: string;
+    /**
+     * External key identifier (UUID v4). Required for revoke/delete, omitted for list.
+     */
+    keyId?: string;
+}
+//# sourceMappingURL=admin-api-key.dto.d.ts.map

package/dist/dto/admin-api-key.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-api-key.dto.d.ts","sourceRoot":"","sources":["../../src/dto/admin-api-key.dto.ts"],"names":[],"mappings":"AAaA;;;;;;;;;GASG;AACH,qBAAa,oBAAoB;IAC/B;;;;OAIG;IAGH,GAAG,EAAG,MAAM,CAAC;IAEb;;OAEG;IAKH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;;OAIG;IAIH,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE9B;;OAEG;IAKH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;GAEG;AACH,qBAAa,oBAAoB;IAC/B;;OAEG;IAGH,GAAG,EAAG,MAAM,CAAC;IAEb;;OAEG;IAEH,KAAK,EAAG,MAAM,CAAC;IAEf;;OAEG;IAKH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;OAEG;IAKH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;GAIG;AACH,qBAAa,oBAAoB;IAC/B;;OAEG;IAGH,GAAG,EAAG,MAAM,CAAC;IAEb;;OAEG;IAGH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/dto/admin-api-key.dto.js

@@ -0,0 +1,144 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminManageApiKeyDTO = exports.AdminUpdateApiKeyDTO = exports.AdminCreateApiKeyDTO = void 0;
+const class_validator_1 = require("class-validator");
+const class_transformer_1 = require("class-transformer");
+/**
+ * DTO for administrative API key creation on behalf of a user
+ *
+ * Warning: This endpoint should be protected by admin authentication.
+ * The service does not enforce authorization - it is the responsibility of the
+ * framework adapter (NestJS/Express/Fastify) to protect the endpoint.
+ *
+ * Admin-created keys bypass the `allowUserCreation` restriction but still obey
+ * `maxKeysPerUser`, expiry, and IP-restriction rules.
+ */
+class AdminCreateApiKeyDTO {
+    /**
+     * Target user sub (UUID v4)
+     *
+     * Sanitization: Trimmed and lowercased.
+     */
+    sub;
+    /**
+     * User-friendly label for the key (optional)
+     */
+    name;
+    /**
+     * Key expiry in days, or `null` for a key that never expires
+     *
+     * Mandatory at creation (see {@link CreateApiKeyDTO} for the rules the service enforces).
+     */
+    expiresInDays;
+    /**
+     * Allowed source IPs / CIDR ranges for this key (optional)
+     */
+    allowedIps;
+}
+exports.AdminCreateApiKeyDTO = AdminCreateApiKeyDTO;
+__decorate([
+    (0, class_validator_1.IsUUID)('4', { message: 'User sub must be a valid UUID v4' }),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim().toLowerCase() : value)),
+    __metadata("design:type", String)
+], AdminCreateApiKeyDTO.prototype, "sub", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)({ message: 'Name must be a string' }),
+    (0, class_validator_1.MaxLength)(255, { message: 'Name must not exceed 255 characters' }),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], AdminCreateApiKeyDTO.prototype, "name", void 0);
+__decorate([
+    (0, class_validator_1.ValidateIf)((o) => o.expiresInDays !== undefined && o.expiresInDays !== null),
+    (0, class_validator_1.IsInt)({ message: 'expiresInDays must be an integer number of days or null' }),
+    (0, class_validator_1.Min)(1, { message: 'expiresInDays must be at least 1' }),
+    __metadata("design:type", Object)
+], AdminCreateApiKeyDTO.prototype, "expiresInDays", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)({ message: 'allowedIps must be an array of IP addresses or CIDR ranges' }),
+    (0, class_validator_1.ArrayMaxSize)(100, { message: 'allowedIps has too many entries' }),
+    (0, class_validator_1.IsString)({ each: true, message: 'Each allowedIps entry must be a string' }),
+    __metadata("design:type", Array)
+], AdminCreateApiKeyDTO.prototype, "allowedIps", void 0);
+/**
+ * DTO for administrative API key update on behalf of a user
+ */
+class AdminUpdateApiKeyDTO {
+    /**
+     * Target user sub (UUID v4)
+     */
+    sub;
+    /**
+     * External key identifier (UUID v4)
+     */
+    keyId;
+    /**
+     * New label for the key (optional)
+     */
+    name;
+    /**
+     * Replacement IP allowlist (optional). Pass an empty array to clear restrictions.
+     */
+    allowedIps;
+}
+exports.AdminUpdateApiKeyDTO = AdminUpdateApiKeyDTO;
+__decorate([
+    (0, class_validator_1.IsUUID)('4', { message: 'User sub must be a valid UUID v4' }),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim().toLowerCase() : value)),
+    __metadata("design:type", String)
+], AdminUpdateApiKeyDTO.prototype, "sub", void 0);
+__decorate([
+    (0, class_validator_1.IsUUID)('4', { message: 'keyId must be a valid UUID v4' }),
+    __metadata("design:type", String)
+], AdminUpdateApiKeyDTO.prototype, "keyId", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)({ message: 'Name must be a string' }),
+    (0, class_validator_1.MaxLength)(255, { message: 'Name must not exceed 255 characters' }),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], AdminUpdateApiKeyDTO.prototype, "name", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)({ message: 'allowedIps must be an array of IP addresses or CIDR ranges' }),
+    (0, class_validator_1.ArrayMaxSize)(100, { message: 'allowedIps has too many entries' }),
+    (0, class_validator_1.IsString)({ each: true, message: 'Each allowedIps entry must be a string' }),
+    __metadata("design:type", Array)
+], AdminUpdateApiKeyDTO.prototype, "allowedIps", void 0);
+/**
+ * DTO for administrative API key management (list / revoke / delete) by user sub
+ *
+ * For list operations, only `sub` is required. For revoke/delete, `keyId` is also required.
+ */
+class AdminManageApiKeyDTO {
+    /**
+     * Target user sub (UUID v4)
+     */
+    sub;
+    /**
+     * External key identifier (UUID v4). Required for revoke/delete, omitted for list.
+     */
+    keyId;
+}
+exports.AdminManageApiKeyDTO = AdminManageApiKeyDTO;
+__decorate([
+    (0, class_validator_1.IsUUID)('4', { message: 'User sub must be a valid UUID v4' }),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim().toLowerCase() : value)),
+    __metadata("design:type", String)
+], AdminManageApiKeyDTO.prototype, "sub", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsUUID)('4', { message: 'keyId must be a valid UUID v4' }),
+    __metadata("design:type", String)
+], AdminManageApiKeyDTO.prototype, "keyId", void 0);
+//# sourceMappingURL=admin-api-key.dto.js.map

package/dist/dto/admin-api-key.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-api-key.dto.js","sourceRoot":"","sources":["../../src/dto/admin-api-key.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAUyB;AACzB,yDAA8C;AAE9C;;;;;;;;;GASG;AACH,MAAa,oBAAoB;IAC/B;;;;OAIG;IAGH,GAAG,CAAU;IAEb;;OAEG;IAKH,IAAI,CAAU;IAEd;;;;OAIG;IAIH,aAAa,CAAiB;IAE9B;;OAEG;IAKH,UAAU,CAAY;CACvB;AArCD,oDAqCC;AA7BC;IAFC,IAAA,wBAAM,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IAC5D,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;iDAC9E;AASb;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;IAC9C,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;IAClE,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;kDAC/D;AAUd;IAHC,IAAA,4BAAU,EAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,CAAC,aAAa,KAAK,IAAI,CAAC;IAC5E,IAAA,uBAAK,EAAC,EAAE,OAAO,EAAE,yDAAyD,EAAE,CAAC;IAC7E,IAAA,qBAAG,EAAC,CAAC,EAAE,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;;2DAC1B;AAS9B;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,EAAC,EAAE,OAAO,EAAE,4DAA4D,EAAE,CAAC;IAClF,IAAA,8BAAY,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;IACjE,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;;wDACtD;AAGxB;;GAEG;AACH,MAAa,oBAAoB;IAC/B;;OAEG;IAGH,GAAG,CAAU;IAEb;;OAEG;IAEH,KAAK,CAAU;IAEf;;OAEG;IAKH,IAAI,CAAU;IAEd;;OAEG;IAKH,UAAU,CAAY;CACvB;AA/BD,oDA+BC;AAzBC;IAFC,IAAA,wBAAM,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IAC5D,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;iDAC9E;AAMb;IADC,IAAA,wBAAM,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;;mDAC3C;AASf;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;IAC9C,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;IAClE,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;kDAC/D;AASd;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,EAAC,EAAE,OAAO,EAAE,4DAA4D,EAAE,CAAC;IAClF,IAAA,8BAAY,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;IACjE,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;;wDACtD;AAGxB;;;;GAIG;AACH,MAAa,oBAAoB;IAC/B;;OAEG;IAGH,GAAG,CAAU;IAEb;;OAEG;IAGH,KAAK,CAAU;CAChB;AAdD,oDAcC;AARC;IAFC,IAAA,wBAAM,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IAC5D,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;iDAC9E;AAOb;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;;mDAC3C"}

package/dist/dto/admin-signup-social.dto.d.ts

@@ -111,7 +111,7 @@ export declare class AdminSignupSocialDTO {
      *
      * Validation:
      * - Min 8 characters
-     * - Max 128 characters (prevents DoS via bcrypt)
+     * - Max 128 characters (prevents DoS via Argon2 hashing)
      * - Additional policy checks in service layer
      *
      * Note: NOT trimmed (passwords can have leading/trailing spaces)

package/dist/dto/admin-signup-social.dto.js

@@ -124,7 +124,7 @@ class AdminSignupSocialDTO {
      *
      * Validation:
      * - Min 8 characters
-     * - Max 128 characters (prevents DoS via bcrypt)
+     * - Max 128 characters (prevents DoS via Argon2 hashing)
      * - Additional policy checks in service layer
      *
      * Note: NOT trimmed (passwords can have leading/trailing spaces)

package/dist/dto/admin-signup.dto.d.ts

@@ -56,7 +56,7 @@ export declare class AdminSignupDTO {
      *
      * Validation:
      * - Min 8 characters
-     * - Max 128 characters (prevents DoS via bcrypt)
+     * - Max 128 characters (prevents DoS via Argon2 hashing)
      * - Additional policy checks in service layer
      *
      * Note: NOT trimmed (passwords can have leading/trailing spaces)

package/dist/dto/admin-signup.dto.js

@@ -69,7 +69,7 @@ class AdminSignupDTO {
      *
      * Validation:
      * - Min 8 characters
-     * - Max 128 characters (prevents DoS via bcrypt)
+     * - Max 128 characters (prevents DoS via Argon2 hashing)
      * - Additional policy checks in service layer
      *
      * Note: NOT trimmed (passwords can have leading/trailing spaces)

package/dist/dto/api-key.dto.d.ts

@@ -0,0 +1,153 @@
+/**
+ * DTO for creating an API key (user self-service)
+ *
+ * Security:
+ * - Expiry is explicit and mandatory (enforced in the service layer):
+ *   provide a positive number of days, or `null` for a never-expiring key
+ *   (only allowed when `apiKeys.allowIndefinite` is true).
+ * - Optional per-key IP allowlist restricts which source IPs may use the key.
+ *
+ * Note: The owning user is derived from the authenticated request, never from the body.
+ */
+export declare class CreateApiKeyDTO {
+    /**
+     * User-friendly label for the key (optional)
+     *
+     * Validation:
+     * - Max 255 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    name?: string;
+    /**
+     * Key expiry in days, or `null` for a key that never expires
+     *
+     * This field is mandatory at creation. The service rejects the request when it
+     * is omitted (`API_KEY_EXPIRY_REQUIRED`), when `null` is used but indefinite keys
+     * are disallowed (`API_KEY_INDEFINITE_NOT_ALLOWED`), or when it exceeds the
+     * configured maximum (`API_KEY_EXPIRY_TOO_LONG`).
+     *
+     * Validation:
+     * - When provided and not null: positive integer
+     */
+    expiresInDays?: number | null;
+    /**
+     * Allowed source IPs / CIDR ranges for this key (optional)
+     *
+     * When omitted or empty, the key may be used from any IP. Each entry must be a
+     * valid IPv4/IPv6 address or CIDR range (validated in the service layer).
+     *
+     * Validation:
+     * - Array of strings, max 100 entries at the DTO layer (per-key cap enforced by config)
+     */
+    allowedIps?: string[];
+}
+/**
+ * DTO for updating an API key (user self-service)
+ *
+ * Only the label and IP allowlist are mutable. The secret and expiry are immutable —
+ * to rotate or extend a key, delete it and create a new one.
+ */
+export declare class UpdateApiKeyDTO {
+    /**
+     * External key identifier (UUID v4)
+     */
+    keyId: string;
+    /**
+     * New label for the key (optional)
+     */
+    name?: string;
+    /**
+     * Replacement IP allowlist (optional)
+     *
+     * Pass an empty array to clear restrictions (open to any IP).
+     */
+    allowedIps?: string[];
+}
+/**
+ * DTO for revoking an API key (soft delete)
+ */
+export declare class RevokeApiKeyDTO {
+    /**
+     * External key identifier (UUID v4)
+     */
+    keyId: string;
+}
+/**
+ * DTO for permanently deleting an API key
+ */
+export declare class DeleteApiKeyDTO {
+    /**
+     * External key identifier (UUID v4)
+     */
+    keyId: string;
+}
+/**
+ * Sanitized API key response
+ *
+ * Never includes the plaintext key or its hash. Returned by list and update operations.
+ */
+export declare class ApiKeyResponseDTO {
+    /** External key identifier (UUID v4) */
+    keyId: string;
+    /** User-friendly label */
+    name?: string | null;
+    /** Last few characters of the key (display hint) */
+    lastFour?: string | null;
+    /** Allowed source IPs / CIDR ranges (empty/null = any IP) */
+    allowedIps?: string[] | null;
+    /** Expiry timestamp, or null if the key never expires */
+    expiresAt?: Date | null;
+    /** Whether the key is active */
+    isActive: boolean;
+    /** Whether the key was created by an administrator */
+    createdByAdmin: boolean;
+    /** Last successful use timestamp, or null if never used */
+    lastUsedAt?: Date | null;
+    /** IP of the last successful use (only when usage IP tracking is enabled) */
+    lastUsedIp?: string | null;
+    /** Total number of successful authentications with this key */
+    usageCount: number;
+    /** Creation timestamp */
+    createdAt: Date;
+}
+/**
+ * Response returned once when a key is created
+ *
+ * The plaintext `key` is shown only here and never again — the caller must store it securely.
+ */
+export declare class CreateApiKeyResponseDTO {
+    /**
+     * The full plaintext API key (shown once)
+     *
+     * Security: Never stored in plaintext. Deliver securely to the consumer.
+     */
+    key: string;
+    /**
+     * Sanitized metadata for the created key
+     */
+    apiKey: ApiKeyResponseDTO;
+}
+/**
+ * Response for listing API keys
+ */
+export declare class ListApiKeysResponseDTO {
+    /** The user's API keys (sanitized; never includes secrets) */
+    apiKeys: ApiKeyResponseDTO[];
+}
+/**
+ * Response for revoking an API key
+ */
+export declare class RevokeApiKeyResponseDTO {
+    /** Whether the key was revoked */
+    success: boolean;
+}
+/**
+ * Response for deleting an API key
+ */
+export declare class DeleteApiKeyResponseDTO {
+    /** Whether the key was deleted */
+    success: boolean;
+}
+//# sourceMappingURL=api-key.dto.d.ts.map

package/dist/dto/api-key.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key.dto.d.ts","sourceRoot":"","sources":["../../src/dto/api-key.dto.ts"],"names":[],"mappings":"AAaA;;;;;;;;;;GAUG;AACH,qBAAa,eAAe;IAC1B;;;;;;;;OAQG;IAKH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;;;;;;;;OAUG;IAIH,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE9B;;;;;;;;OAQG;IAKH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;GAKG;AACH,qBAAa,eAAe;IAC1B;;OAEG;IAEH,KAAK,EAAG,MAAM,CAAC;IAEf;;OAEG;IAKH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;;OAIG;IAKH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;GAEG;AACH,qBAAa,eAAe;IAC1B;;OAEG;IAEH,KAAK,EAAG,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,qBAAa,eAAe;IAC1B;;OAEG;IAEH,KAAK,EAAG,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,qBAAa,iBAAiB;IAC5B,wCAAwC;IACxC,KAAK,EAAG,MAAM,CAAC;IAEf,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAErB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAE7B,yDAAyD;IACzD,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAExB,gCAAgC;IAChC,QAAQ,EAAG,OAAO,CAAC;IAEnB,sDAAsD;IACtD,cAAc,EAAG,OAAO,CAAC;IAEzB,2DAA2D;IAC3D,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAEzB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3B,+DAA+D;IAC/D,UAAU,EAAG,MAAM,CAAC;IAEpB,yBAAyB;IACzB,SAAS,EAAG,IAAI,CAAC;CAClB;AAED;;;;GAIG;AACH,qBAAa,uBAAuB;IAClC;;;;OAIG;IACH,GAAG,EAAG,MAAM,CAAC;IAEb;;OAEG;IACH,MAAM,EAAG,iBAAiB,CAAC;CAC5B;AAED;;GAEG;AACH,qBAAa,sBAAsB;IACjC,8DAA8D;IAC9D,OAAO,EAAG,iBAAiB,EAAE,CAAC;CAC/B;AAED;;GAEG;AACH,qBAAa,uBAAuB;IAClC,kCAAkC;IAClC,OAAO,EAAG,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,qBAAa,uBAAuB;IAClC,kCAAkC;IAClC,OAAO,EAAG,OAAO,CAAC;CACnB"}