@neohm/nestend 4.1.0 → 5.0.0

package/dist/auth/dtos/tenant.member.list.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenant.member.list.dto.d.ts","sourceRoot":"","sources":["../../../src/auth/dtos/tenant.member.list.dto.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAM/E,qBAAa,mBAAoB,SAAQ,mBAAmB;IAM1D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}
+{"version":3,"file":"tenant.member.list.dto.d.ts","sourceRoot":"","sources":["../../../src/auth/dtos/tenant.member.list.dto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAO/E,qBAAa,mBAAoB,SAAQ,mBAAmB;CAAG"}

package/dist/auth/dtos/tenant.member.list.dto.js

@@ -1,27 +1,8 @@
 "use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TenantMemberListDto = void 0;
-const swagger_1 = require("@nestjs/swagger");
-const class_transformer_1 = require("class-transformer");
-const class_validator_1 = require("class-validator");
 const common_list_filter_dto_1 = require("../../common/dtos/common.list.filter.dto");
 class TenantMemberListDto extends common_list_filter_dto_1.CommonListFilterDto {
 }
 exports.TenantMemberListDto = TenantMemberListDto;
-__decorate([
-    (0, swagger_1.ApiHideProperty)(),
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsUUID)(),
-    (0, class_validator_1.IsOptional)(),
-    __metadata("design:type", String)
-], TenantMemberListDto.prototype, "tenant_id", void 0);
 //# sourceMappingURL=tenant.member.list.dto.js.map

package/dist/auth/dtos/tenant.member.list.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"tenant.member.list.dto.js","sourceRoot":"","sources":["../../../src/auth/dtos/tenant.member.list.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAkD;AAClD,yDAA2C;AAC3C,qDAAqD;AACrD,qFAA+E;AAM/E,MAAa,mBAAoB,SAAQ,4CAAmB;CAO3D;AAPD,kDAOC;AADC;IAJC,IAAA,yBAAe,GAAE;IACjB,IAAA,0BAAM,GAAE;IACR,IAAA,wBAAM,GAAE;IACR,IAAA,4BAAU,GAAE;;sDACM"}
+{"version":3,"file":"tenant.member.list.dto.js","sourceRoot":"","sources":["../../../src/auth/dtos/tenant.member.list.dto.ts"],"names":[],"mappings":";;;AAAA,qFAA+E;AAO/E,MAAa,mBAAoB,SAAQ,4CAAmB;CAAG;AAA/D,kDAA+D"}

package/dist/auth/dtos/verify.email.dto.d.ts

@@ -0,0 +1,4 @@
+export declare class VerifyEmailDto {
+    token: string;
+}
+//# sourceMappingURL=verify.email.dto.d.ts.map

package/dist/auth/dtos/verify.email.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.email.dto.d.ts","sourceRoot":"","sources":["../../../src/auth/dtos/verify.email.dto.ts"],"names":[],"mappings":"AAIA,qBAAa,cAAc;IAKzB,KAAK,EAAE,MAAM,CAAC;CACf"}

package/dist/auth/dtos/verify.email.dto.js

@@ -0,0 +1,25 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VerifyEmailDto = void 0;
+const class_validator_1 = require("class-validator");
+const swagger_1 = require("@nestjs/swagger");
+class VerifyEmailDto {
+}
+exports.VerifyEmailDto = VerifyEmailDto;
+__decorate([
+    (0, swagger_1.ApiProperty)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.MaxLength)(128),
+    __metadata("design:type", String)
+], VerifyEmailDto.prototype, "token", void 0);
+//# sourceMappingURL=verify.email.dto.js.map

package/dist/auth/dtos/verify.email.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.email.dto.js","sourceRoot":"","sources":["../../../src/auth/dtos/verify.email.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAAkE;AAClE,6CAA8C;AAG9C,MAAa,cAAc;CAM1B;AAND,wCAMC;AADC;IAJC,IAAA,qBAAW,GAAE;IACb,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;6CACD"}

package/dist/auth/entities/admin.user.entity.d.ts

@@ -1,6 +1,7 @@
 import { RootEntity } from '../../common/entities/root.entity';
 import type { SystemAdminUserRoleEntity } from './system.admin.user.role.entity';
 export declare class AdminUserEntity extends RootEntity {
+    active: boolean;
     name: string;
     email: string;
     username: string;

package/dist/auth/entities/admin.user.entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.user.entity.d.ts","sourceRoot":"","sources":["../../../src/auth/entities/admin.user.entity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC/D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAMjF,qBACa,eAAgB,SAAQ,UAAU;IAE7C,IAAI,EAAE,MAAM,CAAC;IAGb,KAAK,EAAE,MAAM,CAAC;IAGd,QAAQ,EAAE,MAAM,CAAC;IAGjB,QAAQ,EAAE,MAAM,CAAC;IAGjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAMhC,cAAc,EAAE,yBAAyB,EAAE,CAAC;CAC7C"}
+{"version":3,"file":"admin.user.entity.d.ts","sourceRoot":"","sources":["../../../src/auth/entities/admin.user.entity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC/D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAMjF,qBACa,eAAgB,SAAQ,UAAU;IAG7C,MAAM,EAAE,OAAO,CAAC;IAGhB,IAAI,EAAE,MAAM,CAAC;IAGb,KAAK,EAAE,MAAM,CAAC;IAGd,QAAQ,EAAE,MAAM,CAAC;IAGjB,QAAQ,EAAE,MAAM,CAAC;IAGjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAMhC,cAAc,EAAE,yBAAyB,EAAE,CAAC;CAC7C"}

package/dist/auth/entities/admin.user.entity.js

@@ -15,6 +15,10 @@ const root_entity_1 = require("../../common/entities/root.entity");
 let AdminUserEntity = class AdminUserEntity extends root_entity_1.RootEntity {
 };
 exports.AdminUserEntity = AdminUserEntity;
+__decorate([
+    (0, typeorm_1.Column)({ type: 'boolean', default: true }),
+    __metadata("design:type", Boolean)
+], AdminUserEntity.prototype, "active", void 0);
 __decorate([
     (0, typeorm_1.Column)({ type: 'text' }),
     __metadata("design:type", String)

package/dist/auth/entities/admin.user.entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin.user.entity.js","sourceRoot":"","sources":["../../../src/auth/entities/admin.user.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAAoD;AACpD,mEAA+D;AAQxD,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,wBAAU;CAqB9C,CAAA;AArBY,0CAAe;AAE1B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;6CACZ;AAGb;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;8CACd;AAGd;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;iDACX;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;;iDAC1B;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;;mDACM;AAMhC;IAJC,IAAA,mBAAS,EACR,2BAA2B,EAC3B,CAAC,cAAyC,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CACxE;;uDAC2C;0BApBjC,eAAe;IAD3B,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;GACvB,eAAe,CAqB3B"}
+{"version":3,"file":"admin.user.entity.js","sourceRoot":"","sources":["../../../src/auth/entities/admin.user.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAAoD;AACpD,mEAA+D;AAQxD,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,wBAAU;CAyB9C,CAAA;AAzBY,0CAAe;AAG1B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;;+CAC3B;AAGhB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;6CACZ;AAGb;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;8CACd;AAGd;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;iDACX;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;;iDAC1B;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;;mDACM;AAMhC;IAJC,IAAA,mBAAS,EACR,2BAA2B,EAC3B,CAAC,cAAyC,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CACxE;;uDAC2C;0BAxBjC,eAAe;IAD3B,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;GACvB,eAAe,CAyB3B"}

package/dist/auth/entities/api.key.entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.key.entity.d.ts","sourceRoot":"","sources":["../../../src/auth/entities/api.key.entity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAGnE,qBACa,YAAa,SAAQ,iBAAiB;IAEjD,SAAS,EAAE,OAAO,CAAC;IAGnB,IAAI,EAAE,MAAM,CAAC;IAIb,UAAU,EAAE,MAAM,CAAC;IAInB,QAAQ,EAAE,MAAM,CAAC;IAQjB,aAAa,EAAE,MAAM,CAAC;IAGtB,SAAS,EAAE,MAAM,CAAC;IAGlB,UAAU,EAAE,IAAI,CAAC;IAGjB,UAAU,EAAE,IAAI,CAAC;IAGjB,YAAY,EAAE,IAAI,CAAC;IAInB,MAAM,EAAE,YAAY,CAAC;CACtB"}
+{"version":3,"file":"api.key.entity.d.ts","sourceRoot":"","sources":["../../../src/auth/entities/api.key.entity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAGnE,qBACa,YAAa,SAAQ,iBAAiB;IAEjD,SAAS,EAAE,OAAO,CAAC;IAGnB,IAAI,EAAE,MAAM,CAAC;IAIb,UAAU,EAAE,MAAM,CAAC;IAInB,QAAQ,EAAE,MAAM,CAAC;IAOjB,aAAa,EAAE,MAAM,CAAC;IAGtB,SAAS,EAAE,MAAM,CAAC;IAGlB,UAAU,EAAE,IAAI,CAAC;IAGjB,UAAU,EAAE,IAAI,CAAC;IAGjB,YAAY,EAAE,IAAI,CAAC;IAInB,MAAM,EAAE,YAAY,CAAC;CACtB"}

package/dist/auth/entities/api.key.entity.js

@@ -29,11 +29,11 @@ __decorate([
     __metadata("design:type", String)
 ], ApiKeyEntity.prototype, "key_prefix", void 0);
 __decorate([
-    (0, typeorm_1.Column)({ type: 'varchar' }),
+    (0, typeorm_1.Column)({ type: 'varchar', select: false }),
     __metadata("design:type", String)
 ], ApiKeyEntity.prototype, "key_hash", void 0);
 __decorate([
-    (0, typeorm_1.Column)({ type: 'text', select: false }),
+    (0, typeorm_1.Column)({ type: 'text', select: false, nullable: true }),
     __metadata("design:type", String)
 ], ApiKeyEntity.prototype, "key_encrypted", void 0);
 __decorate([

package/dist/auth/entities/api.key.entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.key.entity.js","sourceRoot":"","sources":["../../../src/auth/entities/api.key.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAAgE;AAChE,mFAA8E;AAC9E,uEAAmE;AAI5D,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,uCAAiB;CAsClD,CAAA;AAtCY,oCAAY;AAEvB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;;+CACxB;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;0CACf;AAIb;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;gDACT;AAInB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;8CACX;AAQjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;;mDAClB;AAGtB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+CACvB;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACpB,IAAI;gDAAC;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACpB,IAAI;gDAAC;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BAClB,IAAI;kDAAC;AAInB;IAFC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,4BAAY,CAAC;IAC7B,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;8BAC1B,4BAAY;4CAAC;uBArCV,YAAY;IADxB,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;GACpB,YAAY,CAsCxB"}
+{"version":3,"file":"api.key.entity.js","sourceRoot":"","sources":["../../../src/auth/entities/api.key.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAAgE;AAChE,mFAA8E;AAC9E,uEAAmE;AAI5D,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,uCAAiB;CAqClD,CAAA;AArCY,oCAAY;AAEvB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;;+CACxB;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;0CACf;AAIb;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;gDACT;AAInB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;;8CAC1B;AAOjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;mDAClC;AAGtB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+CACvB;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACpB,IAAI;gDAAC;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACpB,IAAI;gDAAC;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BAClB,IAAI;kDAAC;AAInB;IAFC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,4BAAY,CAAC;IAC7B,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;8BAC1B,4BAAY;4CAAC;uBApCV,YAAY;IADxB,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;GACpB,YAAY,CAqCxB"}

package/dist/auth/entities/email.verification.token.entity.d.ts

@@ -0,0 +1,11 @@
+import { RootEntity } from '../../common/entities/root.entity';
+import { UserEntity } from './user.entity';
+export declare class EmailVerificationTokenEntity extends RootEntity {
+    user_id: string;
+    email: string;
+    token_hash: string;
+    expires_at: Date;
+    used_at: Date | null;
+    user: UserEntity;
+}
+//# sourceMappingURL=email.verification.token.entity.d.ts.map

package/dist/auth/entities/email.verification.token.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.verification.token.entity.d.ts","sourceRoot":"","sources":["../../../src/auth/entities/email.verification.token.entity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAG3C,qBACa,4BAA6B,SAAQ,UAAU;IAE1D,OAAO,EAAE,MAAM,CAAC;IAIhB,KAAK,EAAE,MAAM,CAAC;IAGd,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,IAAI,CAAC;IAGjB,OAAO,EAAE,IAAI,GAAG,IAAI,CAAC;IAIrB,IAAI,EAAE,UAAU,CAAC;CAClB"}

package/dist/auth/entities/email.verification.token.entity.js

@@ -0,0 +1,47 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmailVerificationTokenEntity = void 0;
+const typeorm_1 = require("typeorm");
+const root_entity_1 = require("../../common/entities/root.entity");
+const user_entity_1 = require("./user.entity");
+let EmailVerificationTokenEntity = class EmailVerificationTokenEntity extends root_entity_1.RootEntity {
+};
+exports.EmailVerificationTokenEntity = EmailVerificationTokenEntity;
+__decorate([
+    (0, typeorm_1.Column)({ type: 'uuid' }),
+    __metadata("design:type", String)
+], EmailVerificationTokenEntity.prototype, "user_id", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'varchar' }),
+    __metadata("design:type", String)
+], EmailVerificationTokenEntity.prototype, "email", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'varchar', select: false }),
+    __metadata("design:type", String)
+], EmailVerificationTokenEntity.prototype, "token_hash", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], EmailVerificationTokenEntity.prototype, "expires_at", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'timestamptz', nullable: true }),
+    __metadata("design:type", Date)
+], EmailVerificationTokenEntity.prototype, "used_at", void 0);
+__decorate([
+    (0, typeorm_1.ManyToOne)(() => user_entity_1.UserEntity, { onDelete: 'CASCADE' }),
+    (0, typeorm_1.JoinColumn)({ name: 'user_id' }),
+    __metadata("design:type", user_entity_1.UserEntity)
+], EmailVerificationTokenEntity.prototype, "user", void 0);
+exports.EmailVerificationTokenEntity = EmailVerificationTokenEntity = __decorate([
+    (0, typeorm_1.Entity)({ name: 'sys_email_verification_tokens' })
+], EmailVerificationTokenEntity);
+//# sourceMappingURL=email.verification.token.entity.js.map

package/dist/auth/entities/email.verification.token.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.verification.token.entity.js","sourceRoot":"","sources":["../../../src/auth/entities/email.verification.token.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAAgE;AAChE,mEAA+D;AAC/D,+CAA2C;AAIpC,IAAM,4BAA4B,GAAlC,MAAM,4BAA6B,SAAQ,wBAAU;CAoB3D,CAAA;AApBY,oEAA4B;AAEvC;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;6DACT;AAIhB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;2DACd;AAGd;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;;gEACxB;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACpB,IAAI;gEAAC;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;8BACvC,IAAI;6DAAQ;AAIrB;IAFC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,wBAAU,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACpD,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;8BAC1B,wBAAU;0DAAC;uCAnBN,4BAA4B;IADxC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC;GACrC,4BAA4B,CAoBxC"}

package/dist/auth/entities/system.refresh.token.entity.d.ts

@@ -4,6 +4,7 @@ export declare class SystemRefreshTokenEntity extends CommonEntity {
     is_admin: boolean;
     tenant_id: string;
     token_hash: string;
+    session_identifier: string;
     ip_address: string;
     user_agent: string;
     expires_at: Date;

package/dist/auth/entities/system.refresh.token.entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"system.refresh.token.entity.d.ts","sourceRoot":"","sources":["../../../src/auth/entities/system.refresh.token.entity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAEnE,qBACa,wBAAyB,SAAQ,YAAY;IAExD,OAAO,EAAE,MAAM,CAAC;IAIhB,QAAQ,EAAE,OAAO,CAAC;IAIlB,SAAS,EAAE,MAAM,CAAC;IAGlB,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,IAAI,CAAC;IAGjB,UAAU,EAAE,IAAI,CAAC;IAGjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CACjC"}
+{"version":3,"file":"system.refresh.token.entity.d.ts","sourceRoot":"","sources":["../../../src/auth/entities/system.refresh.token.entity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAEnE,qBACa,wBAAyB,SAAQ,YAAY;IAExD,OAAO,EAAE,MAAM,CAAC;IAIhB,QAAQ,EAAE,OAAO,CAAC;IAIlB,SAAS,EAAE,MAAM,CAAC;IAGlB,UAAU,EAAE,MAAM,CAAC;IAInB,kBAAkB,EAAE,MAAM,CAAC;IAG3B,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,IAAI,CAAC;IAGjB,UAAU,EAAE,IAAI,CAAC;IAGjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CACjC"}

package/dist/auth/entities/system.refresh.token.entity.js

@@ -31,6 +31,10 @@ __decorate([
     (0, typeorm_1.Column)({ type: 'varchar' }),
     __metadata("design:type", String)
 ], SystemRefreshTokenEntity.prototype, "token_hash", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'varchar', nullable: true }),
+    __metadata("design:type", String)
+], SystemRefreshTokenEntity.prototype, "session_identifier", void 0);
 __decorate([
     (0, typeorm_1.Column)({ type: 'varchar' }),
     __metadata("design:type", String)

package/dist/auth/entities/system.refresh.token.entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"system.refresh.token.entity.js","sourceRoot":"","sources":["../../../src/auth/entities/system.refresh.token.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAAyC;AACzC,uEAAmE;AAG5D,IAAM,wBAAwB,GAA9B,MAAM,wBAAyB,SAAQ,4BAAY;CA6BzD,CAAA;AA7BY,4DAAwB;AAEnC;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;yDACT;AAIhB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;;0DAC1B;AAIlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;2DACvB;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;4DACT;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;4DACT;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;4DACN;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACpB,IAAI;4DAAC;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACpB,IAAI;4DAAC;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;;4DACM;mCA5BrB,wBAAwB;IADpC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;GAC1B,wBAAwB,CA6BpC"}
+{"version":3,"file":"system.refresh.token.entity.js","sourceRoot":"","sources":["../../../src/auth/entities/system.refresh.token.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAAyC;AACzC,uEAAmE;AAG5D,IAAM,wBAAwB,GAA9B,MAAM,wBAAyB,SAAQ,4BAAY;CAiCzD,CAAA;AAjCY,4DAAwB;AAEnC;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;yDACT;AAIhB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;;0DAC1B;AAIlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;2DACvB;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;4DACT;AAInB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oEACjB;AAG3B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;4DACT;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;4DACN;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACpB,IAAI;4DAAC;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACpB,IAAI;4DAAC;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;;4DACM;mCAhCrB,wBAAwB;IADpC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;GAC1B,wBAAwB,CAiCpC"}

package/dist/auth/entities/tenant.invitation.entity.d.ts

@@ -8,6 +8,7 @@ export declare class TenantInvitationEntity extends CommonTenantEntity {
     expires_at: Date;
     responded_at: Date;
     user_id: string;
+    created_user_id: string;
     user: UserEntity;
 }
 //# sourceMappingURL=tenant.invitation.entity.d.ts.map

package/dist/auth/entities/tenant.invitation.entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenant.invitation.entity.d.ts","sourceRoot":"","sources":["../../../src/auth/entities/tenant.invitation.entity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAM3C,qBACa,sBAAuB,SAAQ,kBAAkB;IAG5D,KAAK,EAAE,MAAM,CAAC;IAId,QAAQ,EAAE,MAAM,EAAE,CAAC;IAGnB,MAAM,EAAE,sBAAsB,CAAC;IAG/B,UAAU,EAAE,IAAI,CAAC;IAGjB,YAAY,EAAE,IAAI,CAAC;IAGnB,OAAO,EAAE,MAAM,CAAC;IAKhB,IAAI,EAAE,UAAU,CAAC;CAClB"}
+{"version":3,"file":"tenant.invitation.entity.d.ts","sourceRoot":"","sources":["../../../src/auth/entities/tenant.invitation.entity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAM3C,qBACa,sBAAuB,SAAQ,kBAAkB;IAG5D,KAAK,EAAE,MAAM,CAAC;IAId,QAAQ,EAAE,MAAM,EAAE,CAAC;IAGnB,MAAM,EAAE,sBAAsB,CAAC;IAG/B,UAAU,EAAE,IAAI,CAAC;IAGjB,YAAY,EAAE,IAAI,CAAC;IAGnB,OAAO,EAAE,MAAM,CAAC;IAIhB,eAAe,EAAE,MAAM,CAAC;IAKxB,IAAI,EAAE,UAAU,CAAC;CAClB"}

package/dist/auth/entities/tenant.invitation.entity.js

@@ -42,7 +42,11 @@ __decorate([
     __metadata("design:type", String)
 ], TenantInvitationEntity.prototype, "user_id", void 0);
 __decorate([
-    (0, typeorm_1.ManyToOne)(() => user_entity_1.UserEntity),
+    (0, typeorm_1.Column)({ type: 'uuid', nullable: true, select: false }),
+    __metadata("design:type", String)
+], TenantInvitationEntity.prototype, "created_user_id", void 0);
+__decorate([
+    (0, typeorm_1.ManyToOne)(() => user_entity_1.UserEntity, { onDelete: 'SET NULL' }),
     (0, typeorm_1.JoinColumn)({ name: 'user_id' }),
     __metadata("design:type", user_entity_1.UserEntity)
 ], TenantInvitationEntity.prototype, "user", void 0);

package/dist/auth/entities/tenant.invitation.entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"tenant.invitation.entity.js","sourceRoot":"","sources":["../../../src/auth/entities/tenant.invitation.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAAgE;AAChE,qFAAgF;AAChF,0FAAgF;AAChF,+CAA2C;AAOpC,IAAM,sBAAsB,GAA5B,MAAM,sBAAuB,SAAQ,yCAAkB;CAyB7D,CAAA;AAzBY,wDAAsB;AAGjC;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;qDACd;AAId;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;;wDACP;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,sDAAsB,CAAC,OAAO,EAAE,CAAC;;sDACtC;AAG/B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACpB,IAAI;0DAAC;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BAClB,IAAI;4DAAC;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;uDACzB;AAKhB;IAFC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,wBAAU,CAAC;IAC3B,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;8BAC1B,wBAAU;oDAAC;iCAxBN,sBAAsB;IADlC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;GAC9B,sBAAsB,CAyBlC"}
+{"version":3,"file":"tenant.invitation.entity.js","sourceRoot":"","sources":["../../../src/auth/entities/tenant.invitation.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAAgE;AAChE,qFAAgF;AAChF,0FAAgF;AAChF,+CAA2C;AAOpC,IAAM,sBAAsB,GAA5B,MAAM,sBAAuB,SAAQ,yCAAkB;CA6B7D,CAAA;AA7BY,wDAAsB;AAGjC;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;qDACd;AAId;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;;wDACP;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,sDAAsB,CAAC,OAAO,EAAE,CAAC;;sDACtC;AAG/B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACpB,IAAI;0DAAC;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BAClB,IAAI;4DAAC;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;uDACzB;AAIhB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;;+DAChC;AAKxB;IAFC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,wBAAU,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IACrD,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;8BAC1B,wBAAU;oDAAC;iCA5BN,sBAAsB;IADlC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;GAC9B,sBAAsB,CA6BlC"}

package/dist/auth/entities/user.entity.d.ts

@@ -11,6 +11,7 @@ export declare class UserEntity extends RootEntity {
     user_type: UserType;
     has_global_access: boolean;
     password_change_required: boolean;
+    one_time_password_expires_at: Date;
     full_name: string;
     email: string;
     country: string;

package/dist/auth/entities/user.entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.entity.d.ts","sourceRoot":"","sources":["../../../src/auth/entities/user.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,GAAG,EAKJ,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,qBACa,UAAW,SAAQ,UAAU;IAKxC,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,GAAG,CAAC;IAWtE,MAAM,EAAE,OAAO,CAAC;IAIhB,SAAS,EAAE,QAAQ,CAAC;IAIpB,iBAAiB,EAAE,OAAO,CAAC;IAI3B,wBAAwB,EAAE,OAAO,CAAC;IAGlC,SAAS,EAAE,MAAM,CAAC;IAGlB,KAAK,EAAE,MAAM,CAAC;IAGd,OAAO,EAAE,MAAM,CAAC;IAGhB,YAAY,EAAE,MAAM,CAAC;IAGrB,OAAO,EAAE,MAAM,CAAC;IAGhB,QAAQ,EAAE,MAAM,CAAC;IAGjB,aAAa,EAAE,IAAI,CAAC;IAGpB,iBAAiB,EAAE,IAAI,CAAC;IAGxB,mBAAmB,EAAE,IAAI,CAAC;IAG1B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAOhC,eAAe,EAAE,MAAM,CAAC;IAKxB,YAAY,EAAE,YAAY,CAAC;IAG3B,SAAS,EAAE,cAAc,EAAE,CAAC;IAM5B,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAMhC,OAAO,EAAE,iBAAiB,CAAC;CAC5B"}
+{"version":3,"file":"user.entity.d.ts","sourceRoot":"","sources":["../../../src/auth/entities/user.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,GAAG,EAKJ,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,qBACa,UAAW,SAAQ,UAAU;IAKxC,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,GAAG,CAAC;IAWtE,MAAM,EAAE,OAAO,CAAC;IAIhB,SAAS,EAAE,QAAQ,CAAC;IAIpB,iBAAiB,EAAE,OAAO,CAAC;IAI3B,wBAAwB,EAAE,OAAO,CAAC;IAIlC,4BAA4B,EAAE,IAAI,CAAC;IAGnC,SAAS,EAAE,MAAM,CAAC;IAGlB,KAAK,EAAE,MAAM,CAAC;IAGd,OAAO,EAAE,MAAM,CAAC;IAGhB,YAAY,EAAE,MAAM,CAAC;IAGrB,OAAO,EAAE,MAAM,CAAC;IAGhB,QAAQ,EAAE,MAAM,CAAC;IAGjB,aAAa,EAAE,IAAI,CAAC;IAGpB,iBAAiB,EAAE,IAAI,CAAC;IAGxB,mBAAmB,EAAE,IAAI,CAAC;IAG1B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAOhC,eAAe,EAAE,MAAM,CAAC;IAKxB,YAAY,EAAE,YAAY,CAAC;IAG3B,SAAS,EAAE,cAAc,EAAE,CAAC;IAM5B,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAMhC,OAAO,EAAE,iBAAiB,CAAC;CAC5B"}

package/dist/auth/entities/user.entity.js

@@ -42,6 +42,10 @@ __decorate([
     (0, typeorm_1.Column)({ type: 'boolean', default: false }),
     __metadata("design:type", Boolean)
 ], UserEntity.prototype, "password_change_required", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'timestamptz', nullable: true }),
+    __metadata("design:type", Date)
+], UserEntity.prototype, "one_time_password_expires_at", void 0);
 __decorate([
     (0, typeorm_1.Column)({ type: 'text' }),
     __metadata("design:type", String)
@@ -87,7 +91,7 @@ __decorate([
     __metadata("design:type", String)
 ], UserEntity.prototype, "organization_id", void 0);
 __decorate([
-    (0, typeorm_1.ManyToOne)(() => tenant_entity_1.TenantEntity, { onDelete: 'CASCADE' }),
+    (0, typeorm_1.ManyToOne)(() => tenant_entity_1.TenantEntity, { onDelete: 'SET NULL' }),
     (0, typeorm_1.JoinColumn)({ name: 'organization_id' }),
     __metadata("design:type", tenant_entity_1.TenantEntity)
 ], UserEntity.prototype, "organization", void 0);

package/dist/auth/entities/user.entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"user.entity.js","sourceRoot":"","sources":["../../../src/auth/entities/user.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAQiB;AACjB,mEAA+D;AAC/D,uEAAmE;AACnE,4DAAmD;AAM5C,IAAM,UAAU,GAAhB,MAAM,UAAW,SAAQ,wBAAU;IAKxC,MAAM,CAAC,aAAa,CAAC,KAAwB;QAC3C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACzB,CAAC,CAAC,IAAA,aAAG,EAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,MAAM,mBAAmB,EAAE;gBAClD,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;aAClD,CAAC;YACJ,CAAC,CAAC,IAAA,aAAG,EAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,MAAM,YAAY,EAAE;gBAC3C,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;aAC3B,CAAC,CAAC;IACT,CAAC;CAyEF,CAAA;AAtFY,gCAAU;AAgBrB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;;0CAC3B;AAIhB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,yBAAQ,CAAC,WAAW,EAAE,CAAC;;6CACvC;AAIpB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;;qDACjB;AAI3B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;;4DACV;AAGlC;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;6CACP;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;yCACd;AAGd;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;2CACZ;AAGhB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;gDACP;AAGrB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;2CACZ;AAGhB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;;4CAC1B;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACjB,IAAI;iDAAC;AAGpB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACb,IAAI;qDAAC;AAGxB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACX,IAAI;uDAAC;AAG1B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;;8CACM;AAOhC;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;mDACjB;AAKxB;IAFC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,4BAAY,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtD,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;8BAC1B,4BAAY;gDAAC;AAG3B;IADC,IAAA,mBAAS,EAAC,gBAAgB,EAAE,CAAC,SAAyB,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC;;6CAC/C;AAM5B;IAJC,IAAA,mBAAS,EACR,kBAAkB,EAClB,CAAC,UAA4B,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAClD;;+CAC+B;AAMhC;IAJC,IAAA,kBAAQ,EACP,mBAAmB,EACnB,CAAC,WAA8B,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CACrD;;2CAC0B;qBArFhB,UAAU;IADtB,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;GACjB,UAAU,CAsFtB"}
+{"version":3,"file":"user.entity.js","sourceRoot":"","sources":["../../../src/auth/entities/user.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAQiB;AACjB,mEAA+D;AAC/D,uEAAmE;AACnE,4DAAmD;AAM5C,IAAM,UAAU,GAAhB,MAAM,UAAW,SAAQ,wBAAU;IAKxC,MAAM,CAAC,aAAa,CAAC,KAAwB;QAC3C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACzB,CAAC,CAAC,IAAA,aAAG,EAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,MAAM,mBAAmB,EAAE;gBAClD,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;aAClD,CAAC;YACJ,CAAC,CAAC,IAAA,aAAG,EAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,MAAM,YAAY,EAAE;gBAC3C,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;aAC3B,CAAC,CAAC;IACT,CAAC;CA6EF,CAAA;AA1FY,gCAAU;AAgBrB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;;0CAC3B;AAIhB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,yBAAQ,CAAC,WAAW,EAAE,CAAC;;6CACvC;AAIpB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;;qDACjB;AAI3B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;;4DACV;AAIlC;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;8BAClB,IAAI;gEAAC;AAGnC;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;6CACP;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;yCACd;AAGd;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;2CACZ;AAGhB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;gDACP;AAGrB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;2CACZ;AAGhB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;;4CAC1B;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACjB,IAAI;iDAAC;AAGpB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACb,IAAI;qDAAC;AAGxB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACX,IAAI;uDAAC;AAG1B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;;8CACM;AAOhC;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;mDACjB;AAKxB;IAFC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,4BAAY,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvD,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;8BAC1B,4BAAY;gDAAC;AAG3B;IADC,IAAA,mBAAS,EAAC,gBAAgB,EAAE,CAAC,SAAyB,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC;;6CAC/C;AAM5B;IAJC,IAAA,mBAAS,EACR,kBAAkB,EAClB,CAAC,UAA4B,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAClD;;+CAC+B;AAMhC;IAJC,IAAA,kBAAQ,EACP,mBAAmB,EACnB,CAAC,WAA8B,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CACrD;;2CAC0B;qBAzFhB,UAAU;IADtB,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;GACjB,UAAU,CA0FtB"}

package/dist/auth/enums/auth.default.enum.d.ts

@@ -1,6 +1,30 @@
 export declare enum AuthDefault {
-    BCRYPT_SALT_ROUNDS = 10,
+    BCRYPT_SALT_ROUNDS = 12,
+    BCRYPT_MIN_ROUNDS = 10,
+    BCRYPT_MAX_ROUNDS = 15,
+    PASSWORD_MAX_BYTES = 72,
+    PASSWORD_MIN_LENGTH = 8,
+    LOGIN_PASSWORD_MAX_LENGTH = 1024,
     ONE_TIME_PASSWORD_LENGTH = 12,
-    ONE_TIME_PASSWORD_ALPHABET = "ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnpqrstuvwxyz23456789"
+    ONE_TIME_PASSWORD_ALPHABET = "ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnpqrstuvwxyz23456789",
+    ONE_TIME_PASSWORD_TTL_HOURS = 72,
+    TOKEN_ISSUER = "neohm",
+    ACCESS_TOKEN_EXPIRY = "1h",
+    REFRESH_TOKEN_EXPIRY = "30d",
+    IMPERSONATION_TOKEN_EXPIRY = "15m",
+    EMAIL_VERIFICATION_TOKEN_EXPIRY = "24h",
+    SECRET_MIN_LENGTH = 32,
+    SECRET_MIN_DISTINCT_CHARS = 10,
+    THROTTLE_IP_LIMIT = 30,
+    THROTTLE_REFRESH_IP_LIMIT = 120,
+    THROTTLE_ACCOUNT_LIMIT = 10,
+    THROTTLE_WINDOW = "15m",
+    THROTTLE_KEY_PREFIX = "auth:throttle",
+    RECORD_RETENTION_DAYS = 7,
+    PURGE_BATCH_SIZE = 5000,
+    PURGE_EXPIRED_RECORDS_JOB = "auth.purge.expired.records.job"
 }
+export declare const AuthPattern: {
+    readonly SECRET_PLACEHOLDER: RegExp;
+};
 //# sourceMappingURL=auth.default.enum.d.ts.map

package/dist/auth/enums/auth.default.enum.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.default.enum.d.ts","sourceRoot":"","sources":["../../../src/auth/enums/auth.default.enum.ts"],"names":[],"mappings":"AACA,oBAAY,WAAW;IAErB,kBAAkB,KAAK;IAEvB,wBAAwB,KAAK;IAE7B,0BAA0B,6DAA6D;CACxF"}
+{"version":3,"file":"auth.default.enum.d.ts","sourceRoot":"","sources":["../../../src/auth/enums/auth.default.enum.ts"],"names":[],"mappings":"AACA,oBAAY,WAAW;IAErB,kBAAkB,KAAK;IACvB,iBAAiB,KAAK;IACtB,iBAAiB,KAAK;IAEtB,kBAAkB,KAAK;IACvB,mBAAmB,IAAI;IAEvB,yBAAyB,OAAO;IAEhC,wBAAwB,KAAK;IAE7B,0BAA0B,6DAA6D;IACvF,2BAA2B,KAAK;IAEhC,YAAY,UAAU;IACtB,mBAAmB,OAAO;IAC1B,oBAAoB,QAAQ;IAC5B,0BAA0B,QAAQ;IAClC,+BAA+B,QAAQ;IACvC,iBAAiB,KAAK;IACtB,yBAAyB,KAAK;IAC9B,iBAAiB,KAAK;IACtB,yBAAyB,MAAM;IAC/B,sBAAsB,KAAK;IAC3B,eAAe,QAAQ;IAEvB,mBAAmB,kBAAkB;IAErC,qBAAqB,IAAI;IACzB,gBAAgB,OAAO;IACvB,yBAAyB,mCAAmC;CAC7D;AAED,eAAO,MAAM,WAAW;;CAId,CAAC"}

package/dist/auth/enums/auth.default.enum.js

@@ -1,10 +1,34 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthDefault = void 0;
+exports.AuthPattern = exports.AuthDefault = void 0;
 var AuthDefault;
 (function (AuthDefault) {
-    AuthDefault[AuthDefault["BCRYPT_SALT_ROUNDS"] = 10] = "BCRYPT_SALT_ROUNDS";
+    AuthDefault[AuthDefault["BCRYPT_SALT_ROUNDS"] = 12] = "BCRYPT_SALT_ROUNDS";
+    AuthDefault[AuthDefault["BCRYPT_MIN_ROUNDS"] = 10] = "BCRYPT_MIN_ROUNDS";
+    AuthDefault[AuthDefault["BCRYPT_MAX_ROUNDS"] = 15] = "BCRYPT_MAX_ROUNDS";
+    AuthDefault[AuthDefault["PASSWORD_MAX_BYTES"] = 72] = "PASSWORD_MAX_BYTES";
+    AuthDefault[AuthDefault["PASSWORD_MIN_LENGTH"] = 8] = "PASSWORD_MIN_LENGTH";
+    AuthDefault[AuthDefault["LOGIN_PASSWORD_MAX_LENGTH"] = 1024] = "LOGIN_PASSWORD_MAX_LENGTH";
     AuthDefault[AuthDefault["ONE_TIME_PASSWORD_LENGTH"] = 12] = "ONE_TIME_PASSWORD_LENGTH";
     AuthDefault["ONE_TIME_PASSWORD_ALPHABET"] = "ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnpqrstuvwxyz23456789";
+    AuthDefault[AuthDefault["ONE_TIME_PASSWORD_TTL_HOURS"] = 72] = "ONE_TIME_PASSWORD_TTL_HOURS";
+    AuthDefault["TOKEN_ISSUER"] = "neohm";
+    AuthDefault["ACCESS_TOKEN_EXPIRY"] = "1h";
+    AuthDefault["REFRESH_TOKEN_EXPIRY"] = "30d";
+    AuthDefault["IMPERSONATION_TOKEN_EXPIRY"] = "15m";
+    AuthDefault["EMAIL_VERIFICATION_TOKEN_EXPIRY"] = "24h";
+    AuthDefault[AuthDefault["SECRET_MIN_LENGTH"] = 32] = "SECRET_MIN_LENGTH";
+    AuthDefault[AuthDefault["SECRET_MIN_DISTINCT_CHARS"] = 10] = "SECRET_MIN_DISTINCT_CHARS";
+    AuthDefault[AuthDefault["THROTTLE_IP_LIMIT"] = 30] = "THROTTLE_IP_LIMIT";
+    AuthDefault[AuthDefault["THROTTLE_REFRESH_IP_LIMIT"] = 120] = "THROTTLE_REFRESH_IP_LIMIT";
+    AuthDefault[AuthDefault["THROTTLE_ACCOUNT_LIMIT"] = 10] = "THROTTLE_ACCOUNT_LIMIT";
+    AuthDefault["THROTTLE_WINDOW"] = "15m";
+    AuthDefault["THROTTLE_KEY_PREFIX"] = "auth:throttle";
+    AuthDefault[AuthDefault["RECORD_RETENTION_DAYS"] = 7] = "RECORD_RETENTION_DAYS";
+    AuthDefault[AuthDefault["PURGE_BATCH_SIZE"] = 5000] = "PURGE_BATCH_SIZE";
+    AuthDefault["PURGE_EXPIRED_RECORDS_JOB"] = "auth.purge.expired.records.job";
 })(AuthDefault || (exports.AuthDefault = AuthDefault = {}));
+exports.AuthPattern = {
+    SECRET_PLACEHOLDER: /change[_-]?me|placeholder|your[_-]?secret|my[_-]?super[_-]?secret|^secret$|example/i,
+};
 //# sourceMappingURL=auth.default.enum.js.map

package/dist/auth/enums/auth.default.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.default.enum.js","sourceRoot":"","sources":["../../../src/auth/enums/auth.default.enum.ts"],"names":[],"mappings":";;;AACA,IAAY,WAOX;AAPD,WAAY,WAAW;IAErB,0EAAuB,CAAA;IAEvB,sFAA6B,CAAA;IAE7B,sGAAuF,CAAA;AACzF,CAAC,EAPW,WAAW,2BAAX,WAAW,QAOtB"}
+{"version":3,"file":"auth.default.enum.js","sourceRoot":"","sources":["../../../src/auth/enums/auth.default.enum.ts"],"names":[],"mappings":";;;AACA,IAAY,WAiCX;AAjCD,WAAY,WAAW;IAErB,0EAAuB,CAAA;IACvB,wEAAsB,CAAA;IACtB,wEAAsB,CAAA;IAEtB,0EAAuB,CAAA;IACvB,2EAAuB,CAAA;IAEvB,0FAAgC,CAAA;IAEhC,sFAA6B,CAAA;IAE7B,sGAAuF,CAAA;IACvF,4FAAgC,CAAA;IAEhC,qCAAsB,CAAA;IACtB,yCAA0B,CAAA;IAC1B,2CAA4B,CAAA;IAC5B,iDAAkC,CAAA;IAClC,sDAAuC,CAAA;IACvC,wEAAsB,CAAA;IACtB,wFAA8B,CAAA;IAC9B,wEAAsB,CAAA;IACtB,yFAA+B,CAAA;IAC/B,kFAA2B,CAAA;IAC3B,sCAAuB,CAAA;IAEvB,oDAAqC,CAAA;IAErC,+EAAyB,CAAA;IACzB,wEAAuB,CAAA;IACvB,2EAA4D,CAAA;AAC9D,CAAC,EAjCW,WAAW,2BAAX,WAAW,QAiCtB;AAEY,QAAA,WAAW,GAAG;IAEzB,kBAAkB,EAChB,qFAAqF;CAC/E,CAAC"}

package/dist/auth/enums/auth.message.enum.d.ts

@@ -0,0 +1,8 @@
+export declare enum AuthMessage {
+    INVALID_CREDENTIALS = "Invalid email or password",
+    INVALID_ADMIN_CREDENTIALS = "Invalid credentials",
+    INVALID_REFRESH = "Invalid refresh token",
+    INVALID_VERIFICATION_TOKEN = "This verification link is invalid or has expired.",
+    TOO_MANY_ATTEMPTS = "Too many attempts. Try again later."
+}
+//# sourceMappingURL=auth.message.enum.d.ts.map

package/dist/auth/enums/auth.message.enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.message.enum.d.ts","sourceRoot":"","sources":["../../../src/auth/enums/auth.message.enum.ts"],"names":[],"mappings":"AACA,oBAAY,WAAW;IACrB,mBAAmB,8BAA8B;IACjD,yBAAyB,wBAAwB;IACjD,eAAe,0BAA0B;IACzC,0BAA0B,sDAAsD;IAChF,iBAAiB,wCAAwC;CAC1D"}

package/dist/auth/enums/auth.message.enum.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthMessage = void 0;
+var AuthMessage;
+(function (AuthMessage) {
+    AuthMessage["INVALID_CREDENTIALS"] = "Invalid email or password";
+    AuthMessage["INVALID_ADMIN_CREDENTIALS"] = "Invalid credentials";
+    AuthMessage["INVALID_REFRESH"] = "Invalid refresh token";
+    AuthMessage["INVALID_VERIFICATION_TOKEN"] = "This verification link is invalid or has expired.";
+    AuthMessage["TOO_MANY_ATTEMPTS"] = "Too many attempts. Try again later.";
+})(AuthMessage || (exports.AuthMessage = AuthMessage = {}));
+//# sourceMappingURL=auth.message.enum.js.map

package/dist/auth/enums/auth.message.enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.message.enum.js","sourceRoot":"","sources":["../../../src/auth/enums/auth.message.enum.ts"],"names":[],"mappings":";;;AACA,IAAY,WAMX;AAND,WAAY,WAAW;IACrB,gEAAiD,CAAA;IACjD,gEAAiD,CAAA;IACjD,wDAAyC,CAAA;IACzC,+FAAgF,CAAA;IAChF,wEAAyD,CAAA;AAC3D,CAAC,EANW,WAAW,2BAAX,WAAW,QAMtB"}

package/dist/auth/enums/email.verification.default.enum.d.ts

@@ -0,0 +1,6 @@
+export declare enum EmailVerificationDefault {
+    TOKEN_BYTES = 32,
+    JOB_IDENTIFIER = "email.verification.job",
+    TEMPLATE_IDENTIFIER = "email-verification"
+}
+//# sourceMappingURL=email.verification.default.enum.d.ts.map

package/dist/auth/enums/email.verification.default.enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.verification.default.enum.d.ts","sourceRoot":"","sources":["../../../src/auth/enums/email.verification.default.enum.ts"],"names":[],"mappings":"AACA,oBAAY,wBAAwB;IAElC,WAAW,KAAK;IAChB,cAAc,2BAA2B;IAEzC,mBAAmB,uBAAuB;CAC3C"}

package/dist/auth/enums/email.verification.default.enum.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmailVerificationDefault = void 0;
+var EmailVerificationDefault;
+(function (EmailVerificationDefault) {
+    EmailVerificationDefault[EmailVerificationDefault["TOKEN_BYTES"] = 32] = "TOKEN_BYTES";
+    EmailVerificationDefault["JOB_IDENTIFIER"] = "email.verification.job";
+    EmailVerificationDefault["TEMPLATE_IDENTIFIER"] = "email-verification";
+})(EmailVerificationDefault || (exports.EmailVerificationDefault = EmailVerificationDefault = {}));
+//# sourceMappingURL=email.verification.default.enum.js.map

package/dist/auth/enums/email.verification.default.enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.verification.default.enum.js","sourceRoot":"","sources":["../../../src/auth/enums/email.verification.default.enum.ts"],"names":[],"mappings":";;;AACA,IAAY,wBAMX;AAND,WAAY,wBAAwB;IAElC,sFAAgB,CAAA;IAChB,qEAAyC,CAAA;IAEzC,sEAA0C,CAAA;AAC5C,CAAC,EANW,wBAAwB,wCAAxB,wBAAwB,QAMnC"}

package/dist/auth/enums/tenant.invitation.default.enum.d.ts

@@ -1,4 +1,8 @@
 export declare enum TenantInvitationDefault {
-    EXPIRY = "7d"
+    EXPIRY = "7d",
+    RESEND_LIMIT = 3,
+    RESEND_WINDOW_SECONDS = 3600,
+    DAILY_LIMIT = 100,
+    DAILY_WINDOW_SECONDS = 86400
 }
 //# sourceMappingURL=tenant.invitation.default.enum.d.ts.map

package/dist/auth/enums/tenant.invitation.default.enum.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenant.invitation.default.enum.d.ts","sourceRoot":"","sources":["../../../src/auth/enums/tenant.invitation.default.enum.ts"],"names":[],"mappings":"AACA,oBAAY,uBAAuB;IAEjC,MAAM,OAAO;CACd"}
+{"version":3,"file":"tenant.invitation.default.enum.d.ts","sourceRoot":"","sources":["../../../src/auth/enums/tenant.invitation.default.enum.ts"],"names":[],"mappings":"AACA,oBAAY,uBAAuB;IAEjC,MAAM,OAAO;IAEb,YAAY,IAAI;IAChB,qBAAqB,OAAO;IAE5B,WAAW,MAAM;IACjB,oBAAoB,QAAQ;CAC7B"}

package/dist/auth/enums/tenant.invitation.default.enum.js

@@ -4,5 +4,9 @@ exports.TenantInvitationDefault = void 0;
 var TenantInvitationDefault;
 (function (TenantInvitationDefault) {
     TenantInvitationDefault["EXPIRY"] = "7d";
+    TenantInvitationDefault[TenantInvitationDefault["RESEND_LIMIT"] = 3] = "RESEND_LIMIT";
+    TenantInvitationDefault[TenantInvitationDefault["RESEND_WINDOW_SECONDS"] = 3600] = "RESEND_WINDOW_SECONDS";
+    TenantInvitationDefault[TenantInvitationDefault["DAILY_LIMIT"] = 100] = "DAILY_LIMIT";
+    TenantInvitationDefault[TenantInvitationDefault["DAILY_WINDOW_SECONDS"] = 86400] = "DAILY_WINDOW_SECONDS";
 })(TenantInvitationDefault || (exports.TenantInvitationDefault = TenantInvitationDefault = {}));
 //# sourceMappingURL=tenant.invitation.default.enum.js.map

package/dist/auth/enums/tenant.invitation.default.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"tenant.invitation.default.enum.js","sourceRoot":"","sources":["../../../src/auth/enums/tenant.invitation.default.enum.ts"],"names":[],"mappings":";;;AACA,IAAY,uBAGX;AAHD,WAAY,uBAAuB;IAEjC,wCAAa,CAAA;AACf,CAAC,EAHW,uBAAuB,uCAAvB,uBAAuB,QAGlC"}
+{"version":3,"file":"tenant.invitation.default.enum.js","sourceRoot":"","sources":["../../../src/auth/enums/tenant.invitation.default.enum.ts"],"names":[],"mappings":";;;AACA,IAAY,uBASX;AATD,WAAY,uBAAuB;IAEjC,wCAAa,CAAA;IAEb,qFAAgB,CAAA;IAChB,0GAA4B,CAAA;IAE5B,qFAAiB,CAAA;IACjB,yGAA4B,CAAA;AAC9B,CAAC,EATW,uBAAuB,uCAAvB,uBAAuB,QASlC"}

package/dist/auth/es6.classes.d.ts

@@ -14,6 +14,10 @@ import { GoogleAuthService } from './services/google.auth.service';
 import { ImpersonationService } from './services/impersonation.service';
 import { TenantInvitationService } from './services/tenant.invitation.service';
 import { TenantMembershipService } from './services/tenant.membership.service';
+import { TokenService } from './services/token.service';
+import { LoginThrottleService } from './services/login.throttle.service';
+import { EmailVerificationService } from './services/email.verification.service';
+import { PurgeExpiredAuthRecordsJob } from './jobs/purge.expired.auth.records.job';
 import { TenantInvitationDataProcessor } from './processors/tenant.invitation.data.processor';
 import { TenantInvitationListProcessor } from './processors/tenant.invitation.list.processor';
 import { TenantMemberListProcessor } from './processors/tenant.member.list.processor';
@@ -24,12 +28,13 @@ import { LoginDto } from './dtos/login.dto';
 import { MemberRolesDto } from './dtos/member.roles.dto';
 import { RefreshTokenDto } from './dtos/refresh.token.dto';
 import { TenantInvitationListDto } from './dtos/tenant.invitation.list.dto';
+import { VerifyEmailDto } from './dtos/verify.email.dto';
 export declare const es6Classes: {
     controllers: (typeof AuthController | typeof AdminAuthController | typeof ImpersonationController | typeof TenantInvitationController | typeof TenantMemberController | typeof UserInvitationController | typeof UserOrganizationController)[];
-    services: readonly [typeof ApiKeyService, typeof ScopeService, typeof AuthService, typeof AdminAuthService, typeof GoogleAuthService, typeof RoleService, typeof ImpersonationService, typeof TenantMembershipService, typeof TenantInvitationService];
+    services: readonly [typeof ApiKeyService, typeof ScopeService, typeof AuthService, typeof AdminAuthService, typeof GoogleAuthService, typeof RoleService, typeof ImpersonationService, typeof TenantMembershipService, typeof TenantInvitationService, typeof TokenService, typeof LoginThrottleService, typeof EmailVerificationService];
     libraries: (typeof TenantInvitationDataProcessor | typeof TenantInvitationListProcessor | typeof TenantMemberListProcessor)[];
-    dtos: (typeof RefreshTokenDto | typeof LoginDto | typeof GoogleLoginDto | typeof ChangePasswordDto | typeof AdminLoginDto | typeof TenantInvitationListDto | typeof MemberRolesDto)[];
-    jobs: any[];
+    dtos: (typeof RefreshTokenDto | typeof LoginDto | typeof GoogleLoginDto | typeof ChangePasswordDto | typeof VerifyEmailDto | typeof AdminLoginDto | typeof TenantInvitationListDto | typeof MemberRolesDto)[];
+    jobs: readonly [typeof PurgeExpiredAuthRecordsJob];
     subscribers: any[];
 };
 //# sourceMappingURL=es6.classes.d.ts.map

package/dist/auth/es6.classes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"es6.classes.d.ts","sourceRoot":"","sources":["../../src/auth/es6.classes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGzD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAG3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAG5E,eAAO,MAAM,UAAU;;;;;;;CA0CtB,CAAC"}
+{"version":3,"file":"es6.classes.d.ts","sourceRoot":"","sources":["../../src/auth/es6.classes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGzD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAG3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAE5E,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,eAAO,MAAM,UAAU;;;;;;;CA8CtB,CAAC"}

package/dist/auth/es6.classes.js

@@ -17,6 +17,10 @@ const google_auth_service_1 = require("./services/google.auth.service");
 const impersonation_service_1 = require("./services/impersonation.service");
 const tenant_invitation_service_1 = require("./services/tenant.invitation.service");
 const tenant_membership_service_1 = require("./services/tenant.membership.service");
+const token_service_1 = require("./services/token.service");
+const login_throttle_service_1 = require("./services/login.throttle.service");
+const email_verification_service_1 = require("./services/email.verification.service");
+const purge_expired_auth_records_job_1 = require("./jobs/purge.expired.auth.records.job");
 const tenant_invitation_data_processor_1 = require("./processors/tenant.invitation.data.processor");
 const tenant_invitation_list_processor_1 = require("./processors/tenant.invitation.list.processor");
 const tenant_member_list_processor_1 = require("./processors/tenant.member.list.processor");
@@ -32,6 +36,7 @@ const register_dto_1 = require("./dtos/register.dto");
 const switch_organization_dto_1 = require("./dtos/switch.organization.dto");
 const tenant_invitation_list_dto_1 = require("./dtos/tenant.invitation.list.dto");
 const tenant_member_list_dto_1 = require("./dtos/tenant.member.list.dto");
+const verify_email_dto_1 = require("./dtos/verify.email.dto");
 exports.es6Classes = {
     controllers: [
         auth_controller_1.AuthController,
@@ -52,6 +57,9 @@ exports.es6Classes = {
         impersonation_service_1.ImpersonationService,
         tenant_membership_service_1.TenantMembershipService,
         tenant_invitation_service_1.TenantInvitationService,
+        token_service_1.TokenService,
+        login_throttle_service_1.LoginThrottleService,
+        email_verification_service_1.EmailVerificationService,
     ],
     libraries: [
         tenant_invitation_data_processor_1.TenantInvitationDataProcessor,
@@ -71,8 +79,9 @@ exports.es6Classes = {
         switch_organization_dto_1.SwitchOrganizationDto,
         tenant_invitation_list_dto_1.TenantInvitationListDto,
         tenant_member_list_dto_1.TenantMemberListDto,
+        verify_email_dto_1.VerifyEmailDto,
     ],
-    jobs: [],
+    jobs: [purge_expired_auth_records_job_1.PurgeExpiredAuthRecordsJob],
     subscribers: [],
 };
 //# sourceMappingURL=es6.classes.js.map