@os.io/nest-kit 0.0.1-alpha.0 → 0.0.1-alpha.2

package/dist/auth/interfaces/auth-strategy.interface.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-strategy.interface.d.ts","sourceRoot":"","sources":["../../../packages/auth/interfaces/auth-strategy.interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE3D;;GAEG;AACH,oBAAY,UAAU;IACpB,WAAW,gBAAgB;IAC3B,KAAK,UAAU;IACf,IAAI,SAAS;IACb,SAAS,cAAc;IACvB,UAAU,eAAe;IACzB,GAAG,QAAQ;IACX,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,GAAG,QAAQ;CACZ;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAE1B,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB;;;;;;;;OAQG;IACH,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CAClG"}

package/dist/auth/interfaces/auth-strategy.interface.js

@@ -1,16 +0,0 @@
-/**
- * Authentication method enum — each value maps to a strategy.
- */
-export var AuthMethod;
-(function (AuthMethod) {
-    AuthMethod["CREDENTIALS"] = "credentials";
-    AuthMethod["OAUTH"] = "oauth";
-    AuthMethod["TOTP"] = "totp";
-    AuthMethod["ANONYMOUS"] = "anonymous";
-    AuthMethod["MAGIC_LINK"] = "magic-link";
-    AuthMethod["OTP"] = "otp";
-    AuthMethod["PASSKEY"] = "passkey";
-    AuthMethod["ONETAP"] = "onetap";
-    AuthMethod["SSO"] = "sso";
-})(AuthMethod || (AuthMethod = {}));
-//# sourceMappingURL=auth-strategy.interface.js.map

package/dist/auth/interfaces/auth-strategy.interface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-strategy.interface.js","sourceRoot":"","sources":["../../../packages/auth/interfaces/auth-strategy.interface.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,CAAN,IAAY,UAUX;AAVD,WAAY,UAAU;IACpB,yCAA2B,CAAA;IAC3B,6BAAe,CAAA;IACf,2BAAa,CAAA;IACb,qCAAuB,CAAA;IACvB,uCAAyB,CAAA;IACzB,yBAAW,CAAA;IACX,iCAAmB,CAAA;IACnB,+BAAiB,CAAA;IACjB,yBAAW,CAAA;AACb,CAAC,EAVW,UAAU,KAAV,UAAU,QAUrB"}

package/dist/auth/interfaces/auth-user.interface.d.ts

@@ -1,25 +0,0 @@
-/**
- * Represents an authenticated user across the system.
- * This interface is used inside JWT payloads, request objects, and guards.
- */
-export interface IAuthUser {
-    /** Unique user identifier (UUID or numeric ID as string) */
-    id: string;
-    /** Email address (may be absent for anonymous users) */
-    email?: string;
-    /** Phone number (may be absent) */
-    phone?: string;
-    /** Username or display name */
-    username?: string;
-    /** Assigned roles for RBAC */
-    roles?: string[];
-    /** Direct permissions for simple permission checks */
-    permissions?: string[];
-    /** Whether this is an anonymous session */
-    isAnonymous?: boolean;
-    /** Whether the user has passed 2FA in this session */
-    isMfaVerified?: boolean;
-    /** Custom claims bag for extensibility */
-    [key: string]: unknown;
-}
-//# sourceMappingURL=auth-user.interface.d.ts.map

package/dist/auth/interfaces/auth-user.interface.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-user.interface.d.ts","sourceRoot":"","sources":["../../../packages/auth/interfaces/auth-user.interface.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,4DAA4D;IAC5D,EAAE,EAAE,MAAM,CAAC;IAEX,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,mCAAmC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,8BAA8B;IAC9B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjB,sDAAsD;IACtD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAEvB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB,sDAAsD;IACtD,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB,0CAA0C;IAC1C,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB"}

package/dist/auth/interfaces/auth-user.interface.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=auth-user.interface.js.map

package/dist/auth/interfaces/auth-user.interface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-user.interface.js","sourceRoot":"","sources":["../../../packages/auth/interfaces/auth-user.interface.ts"],"names":[],"mappings":""}

package/dist/auth/interfaces/cache-service.interface.d.ts

@@ -1,30 +0,0 @@
-/**
- * Minimal cache abstraction consumed internally by the auth module.
- *
- * > IMPORTANT: You must register a provider under the `'CACHE_SERVICE'`
- * > token (or a custom token via `AuthModuleOptions.cacheServiceToken`).
- * > The provider can be any compatible cache implementation:
- * >   - `cache-manager` (`Cache` from `@nestjs/cache-manager`)
- * >   - `keyv` instance
- * >   - A custom wrapper implementing this interface
- *
- * @example
- * ```typescript
- * // Register this in your consumer module:
- * {
- *   provide: 'CACHE_SERVICE',
- *   useExisting: getCache(), // your cache instance
- * }
- * ```
- */
-export interface ICacheService {
-    /** Retrieve a cached value by key */
-    get<T = unknown>(key: string): Promise<T | undefined>;
-    /** Store a value with optional TTL (seconds) */
-    set<T = unknown>(key: string, value: T, ttl?: number): Promise<void>;
-    /** Delete a single key */
-    del(key: string): Promise<void>;
-    /** Flush entire cache (use with care) */
-    reset(): Promise<void>;
-}
-//# sourceMappingURL=cache-service.interface.d.ts.map

package/dist/auth/interfaces/cache-service.interface.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cache-service.interface.d.ts","sourceRoot":"","sources":["../../../packages/auth/interfaces/cache-service.interface.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,aAAa;IAC5B,qCAAqC;IACrC,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IAEtD,gDAAgD;IAChD,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAErE,0BAA0B;IAC1B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhC,yCAAyC;IACzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB"}

package/dist/auth/interfaces/cache-service.interface.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=cache-service.interface.js.map

package/dist/auth/interfaces/cache-service.interface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cache-service.interface.js","sourceRoot":"","sources":["../../../packages/auth/interfaces/cache-service.interface.ts"],"names":[],"mappings":""}

package/dist/auth/interfaces/index.d.ts

@@ -1,8 +0,0 @@
-export type { IAuthUser } from './auth-user.interface';
-export type { IAuthRequest } from './auth-request.interface';
-export type { ITokenPair, IAuthResult } from './auth-result.interface';
-export { AuthMethod } from './auth-strategy.interface';
-export type { IAuthStrategy } from './auth-strategy.interface';
-export type { ICacheService } from './cache-service.interface';
-export type { IUserService } from './user-service.interface';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/interfaces/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../packages/auth/interfaces/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,YAAY,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,YAAY,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/auth/interfaces/index.js

@@ -1,2 +0,0 @@
-export { AuthMethod } from './auth-strategy.interface';
-//# sourceMappingURL=index.js.map

package/dist/auth/interfaces/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../packages/auth/interfaces/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/auth/interfaces/user-service.interface.d.ts

@@ -1,34 +0,0 @@
-import type { IAuthUser } from './auth-user.interface';
-/**
- * Consumer-provided user service.
- * You must register a provider under the `'USER_SERVICE'` token.
- */
-export interface IUserService {
-    /** Find a user by their unique ID */
-    findById(id: string): Promise<IAuthUser | null>;
-    /** Find a user by email address */
-    findByEmail(email: string): Promise<IAuthUser | null>;
-    /** Find a user by username */
-    findByUsername(username: string): Promise<IAuthUser | null>;
-    /** Find a user by a social / OAuth provider ID */
-    findBySocialId(provider: string, socialId: string): Promise<IAuthUser | null>;
-    /** Create a new user account */
-    create(data: Partial<IAuthUser> & {
-        password?: string;
-    }): Promise<IAuthUser>;
-    /** Update user fields */
-    update(id: string, data: Partial<IAuthUser>): Promise<IAuthUser>;
-    /** Compare a plaintext password against the stored hash */
-    validatePassword(user: IAuthUser, password: string): Promise<boolean>;
-    /** Store / overwrite the password hash for a user */
-    setPassword(id: string, passwordHash: string): Promise<void>;
-    /** Retrieve the stored TOTP secret (null if 2FA not configured) */
-    getTotpSecret(id: string): Promise<string | null>;
-    /** Persist a new TOTP secret (e.g. after enrollment) */
-    setTotpSecret(id: string, secret: string): Promise<void>;
-    /** Get the list of role identifiers assigned to a user */
-    getRoles(id: string): Promise<string[]>;
-    /** Get the list of permission identifiers assigned to a user */
-    getPermissions(id: string): Promise<string[]>;
-}
-//# sourceMappingURL=user-service.interface.d.ts.map

package/dist/auth/interfaces/user-service.interface.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"user-service.interface.d.ts","sourceRoot":"","sources":["../../../packages/auth/interfaces/user-service.interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAEvD;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,qCAAqC;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAEhD,mCAAmC;IACnC,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAEtD,8BAA8B;IAC9B,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAE5D,kDAAkD;IAClD,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAE9E,gCAAgC;IAChC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAE7E,yBAAyB;IACzB,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAEjE,2DAA2D;IAC3D,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtE,qDAAqD;IACrD,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7D,mEAAmE;IACnE,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAElD,wDAAwD;IACxD,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzD,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAExC,gEAAgE;IAChE,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC/C"}

package/dist/auth/interfaces/user-service.interface.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=user-service.interface.js.map

package/dist/auth/interfaces/user-service.interface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"user-service.interface.js","sourceRoot":"","sources":["../../../packages/auth/interfaces/user-service.interface.ts"],"names":[],"mappings":""}

package/dist/auth/password/password.service.d.ts

@@ -1,23 +0,0 @@
-/**
- * Service for hashing and verifying passwords using bcrypt.
- *
- * Uses dynamic import of `bcrypt` so the dependency is optional.
- * If `bcrypt` is not installed, operations throw a descriptive error.
- */
-export declare class PasswordService {
-    private bcrypt;
-    private resolved;
-    /**
-     * Hash a plaintext password.
-     *
-     * @param password - Plaintext password
-     * @param rounds   - Cost factor (default 12)
-     */
-    hash(password: string, rounds?: number): Promise<string>;
-    /**
-     * Compare a plaintext password against a stored hash.
-     */
-    verify(password: string, hash: string): Promise<boolean>;
-    private loadBcrypt;
-}
-//# sourceMappingURL=password.service.d.ts.map

package/dist/auth/password/password.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"password.service.d.ts","sourceRoot":"","sources":["../../../packages/auth/password/password.service.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,qBACa,eAAe;IAC1B,OAAO,CAAC,MAAM,CAAwC;IACtD,OAAO,CAAC,QAAQ,CAAS;IAEzB;;;;;OAKG;IACG,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IAK1D;;OAEG;IACG,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YAKhD,UAAU;CAczB"}

package/dist/auth/password/password.service.js

@@ -1,52 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-import { Injectable } from '@nestjs/common';
-/**
- * Service for hashing and verifying passwords using bcrypt.
- *
- * Uses dynamic import of `bcrypt` so the dependency is optional.
- * If `bcrypt` is not installed, operations throw a descriptive error.
- */
-let PasswordService = class PasswordService {
-    bcrypt = null;
-    resolved = false;
-    /**
-     * Hash a plaintext password.
-     *
-     * @param password - Plaintext password
-     * @param rounds   - Cost factor (default 12)
-     */
-    async hash(password, rounds = 12) {
-        const bcrypt = await this.loadBcrypt();
-        return bcrypt.hash(password, rounds);
-    }
-    /**
-     * Compare a plaintext password against a stored hash.
-     */
-    async verify(password, hash) {
-        const bcrypt = await this.loadBcrypt();
-        return bcrypt.compare(password, hash);
-    }
-    async loadBcrypt() {
-        if (!this.resolved) {
-            try {
-                this.bcrypt = await import('bcrypt');
-            }
-            catch {
-                throw new Error('PasswordService requires the "bcrypt" package. ' +
-                    'Run: npm install bcrypt && npm install -D @types/bcrypt');
-            }
-            this.resolved = true;
-        }
-        return this.bcrypt;
-    }
-};
-PasswordService = __decorate([
-    Injectable()
-], PasswordService);
-export { PasswordService };
-//# sourceMappingURL=password.service.js.map

package/dist/auth/password/password.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"password.service.js","sourceRoot":"","sources":["../../../packages/auth/password/password.service.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C;;;;;GAKG;AAEI,IAAM,eAAe,GAArB,MAAM,eAAe;IAClB,MAAM,GAAmC,IAAI,CAAC;IAC9C,QAAQ,GAAG,KAAK,CAAC;IAEzB;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,MAAM,GAAG,EAAE;QACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,IAAY;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CACb,iDAAiD;oBAC/C,yDAAyD,CAC5D,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC;QACD,OAAO,IAAI,CAAC,MAAO,CAAC;IACtB,CAAC;CACF,CAAA;AArCY,eAAe;IAD3B,UAAU,EAAE;GACA,eAAe,CAqC3B"}

package/dist/auth/session/device-session.service.d.ts

@@ -1,43 +0,0 @@
-import type { ICacheService } from '../interfaces';
-export interface IDeviceInfo {
-    deviceId: string;
-    userId: string;
-    userAgent?: string;
-    ip?: string;
-    lastActivity: number;
-    createdAt: number;
-}
-/**
- * Tracks active devices / sessions per user so that:
- *   - Users can view all active sessions
- *   - Users can log out a specific device (like Telegram)
- *   - Admins can force-terminate sessions
- */
-export declare class DeviceSessionService {
-    private readonly cache;
-    constructor(cache: ICacheService);
-    /**
-     * Register a new device session.
-     *
-     * @param info Device and session metadata
-     * @param ttl  Session TTL in seconds (default 30 days)
-     */
-    register(info: Omit<IDeviceInfo, 'createdAt'>, ttl?: number): Promise<void>;
-    /**
-     * Get all active sessions for a user.
-     */
-    getUserSessions(_userId: string): Promise<IDeviceInfo[]>;
-    /**
-     * Get a single device session by user + device ID.
-     */
-    getSession(userId: string, deviceId: string): Promise<IDeviceInfo | null>;
-    /**
-     * Remove a specific device session (per-device logout).
-     */
-    removeSession(userId: string, deviceId: string): Promise<void>;
-    /**
-     * Remove all sessions for a user (global logout).
-     */
-    removeAllUserSessions(_userId: string): Promise<void>;
-}
-//# sourceMappingURL=device-session.service.d.ts.map

package/dist/auth/session/device-session.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"device-session.service.d.ts","sourceRoot":"","sources":["../../../packages/auth/session/device-session.service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,qBACa,oBAAoB;IAG7B,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,aAAa;IAGvC;;;;;OAKG;IACG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,GAAG,SAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAKpF;;OAEG;IACH,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAOxD;;OAEG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAO/E;;OAEG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpE;;OAEG;IACG,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAI5D"}

package/dist/auth/session/device-session.service.js

@@ -1,72 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-import { Inject, Injectable } from '@nestjs/common';
-import { CACHE_SERVICE, DEVICE_SESSION_PREFIX } from '../auth.constants';
-/**
- * Tracks active devices / sessions per user so that:
- *   - Users can view all active sessions
- *   - Users can log out a specific device (like Telegram)
- *   - Admins can force-terminate sessions
- */
-let DeviceSessionService = class DeviceSessionService {
-    cache;
-    constructor(cache) {
-        this.cache = cache;
-    }
-    /**
-     * Register a new device session.
-     *
-     * @param info Device and session metadata
-     * @param ttl  Session TTL in seconds (default 30 days)
-     */
-    async register(info, ttl = 2_592_000) {
-        const session = { ...info, createdAt: Date.now() };
-        await this.cache.set(`${DEVICE_SESSION_PREFIX}${info.userId}:${info.deviceId}`, session, ttl);
-    }
-    /**
-     * Get all active sessions for a user.
-     */
-    getUserSessions(_userId) {
-        // In production, this would use Redis SCAN or a session DB table.
-        // For simplicity we rely on a key convention and read individually.
-        // Consumers are encouraged to override this method.
-        return Promise.resolve([]);
-    }
-    /**
-     * Get a single device session by user + device ID.
-     */
-    async getSession(userId, deviceId) {
-        const result = await this.cache.get(`${DEVICE_SESSION_PREFIX}${userId}:${deviceId}`);
-        return result ?? null;
-    }
-    /**
-     * Remove a specific device session (per-device logout).
-     */
-    async removeSession(userId, deviceId) {
-        await this.cache.del(`${DEVICE_SESSION_PREFIX}${userId}:${deviceId}`);
-    }
-    /**
-     * Remove all sessions for a user (global logout).
-     */
-    async removeAllUserSessions(_userId) {
-        // TODO: iterate all user sessions. For now, consumer's responsibility.
-        return Promise.resolve();
-    }
-};
-DeviceSessionService = __decorate([
-    Injectable(),
-    __param(0, Inject(CACHE_SERVICE)),
-    __metadata("design:paramtypes", [Object])
-], DeviceSessionService);
-export { DeviceSessionService };
-//# sourceMappingURL=device-session.service.js.map

package/dist/auth/session/device-session.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"device-session.service.js","sourceRoot":"","sources":["../../../packages/auth/session/device-session.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAWzE;;;;;GAKG;AAEI,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAGZ;IAFnB,YAEmB,KAAoB;QAApB,UAAK,GAAL,KAAK,CAAe;IACpC,CAAC;IAEJ;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,IAAoC,EAAE,GAAG,GAAG,SAAS;QAClE,MAAM,OAAO,GAAgB,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAChE,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,qBAAqB,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAChG,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,OAAe;QAC7B,kEAAkE;QAClE,oEAAoE;QACpE,oDAAoD;QACpD,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,QAAgB;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CACjC,GAAG,qBAAqB,GAAG,MAAM,IAAI,QAAQ,EAAE,CAChD,CAAC;QACF,OAAO,MAAM,IAAI,IAAI,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,QAAgB;QAClD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,qBAAqB,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CAAC,OAAe;QACzC,uEAAuE;QACvE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF,CAAA;AAnDY,oBAAoB;IADhC,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,aAAa,CAAC,CAAA;;GAFb,oBAAoB,CAmDhC"}

package/dist/auth/session/index.d.ts

@@ -1,5 +0,0 @@
-export { JwtService } from './jwt.service';
-export { TokenBlacklistService } from './token-blacklist.service';
-export { DeviceSessionService } from './device-session.service';
-export type { IDeviceInfo } from './device-session.service';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/session/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../packages/auth/session/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/auth/session/index.js

@@ -1,4 +0,0 @@
-export { JwtService } from './jwt.service';
-export { TokenBlacklistService } from './token-blacklist.service';
-export { DeviceSessionService } from './device-session.service';
-//# sourceMappingURL=index.js.map

package/dist/auth/session/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../packages/auth/session/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/auth/session/jwt.service.d.ts

@@ -1,37 +0,0 @@
-import type { IAuthUser, ITokenPair } from '../interfaces';
-import type { SessionOptions } from '../auth.options';
-/**
- * Low-level JWT service that signs and verifies tokens
- * using `@nestjs/jwt` (loaded dynamically so the dependency is optional).
- */
-export declare class JwtService {
-    private readonly options;
-    private nestJwt;
-    private jwtServiceInstance;
-    private resolved;
-    constructor(options: {
-        jwtSecret?: string;
-        jwtPrivateKey?: string;
-        jwtPublicKey?: string;
-        session?: SessionOptions;
-    });
-    /**
-     * Generate an access + refresh token pair for the given user.
-     */
-    signTokens(user: IAuthUser): Promise<ITokenPair>;
-    /**
-     * Verify and decode an access token. Throws if invalid / expired.
-     */
-    verifyAccess(token: string): Promise<Record<string, unknown>>;
-    /**
-     * Verify a refresh token. Throws if invalid / expired.
-     */
-    verifyRefresh(token: string): Promise<Record<string, unknown>>;
-    /**
-     * Decode a token without verification (useful for extracting metadata).
-     */
-    decode(token: string): Record<string, unknown> | null;
-    private parseExpiresIn;
-    private getInstance;
-}
-//# sourceMappingURL=jwt.service.d.ts.map

package/dist/auth/session/jwt.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt.service.d.ts","sourceRoot":"","sources":["../../../packages/auth/session/jwt.service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAGtD;;;GAGG;AACH,qBACa,UAAU;IAOnB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAN1B,OAAO,CAAC,OAAO,CAA6C;IAC5D,OAAO,CAAC,kBAAkB,CAAiD;IAC3E,OAAO,CAAC,QAAQ,CAAS;gBAIN,OAAO,EAAE;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,OAAO,CAAC,EAAE,cAAc,CAAC;KAC1B;IAGH;;OAEG;IACG,UAAU,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;IA+BtD;;OAEG;IACG,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAKnE;;OAEG;IACG,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAKpE;;OAEG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAKrD,OAAO,CAAC,cAAc;YAcR,WAAW;CAqB1B"}

package/dist/auth/session/jwt.service.js

@@ -1,119 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-import { Injectable, Inject } from '@nestjs/common';
-import { AUTH_MODULE_OPTIONS } from '../auth.constants';
-/**
- * Low-level JWT service that signs and verifies tokens
- * using `@nestjs/jwt` (loaded dynamically so the dependency is optional).
- */
-let JwtService = class JwtService {
-    options;
-    nestJwt = null;
-    jwtServiceInstance = null;
-    resolved = false;
-    constructor(options) {
-        this.options = options;
-    }
-    /**
-     * Generate an access + refresh token pair for the given user.
-     */
-    async signTokens(user) {
-        const jwt = await this.getInstance();
-        const session = this.options.session ?? {};
-        const accessExp = session.accessTokenExpiresIn ?? '15m';
-        const refreshExp = session.refreshTokenExpiresIn ?? '7d';
-        const payload = {
-            sub: user.id,
-            email: user.email,
-            username: user.username,
-            roles: user.roles,
-            permissions: user.permissions,
-            isAnonymous: user.isAnonymous ?? false,
-            isMfaVerified: user.isMfaVerified ?? false,
-        };
-        const accessToken = jwt.sign(payload, {
-            expiresIn: accessExp,
-        });
-        const refreshToken = jwt.sign({ sub: user.id, type: 'refresh' }, { expiresIn: refreshExp });
-        return {
-            accessToken,
-            refreshToken,
-            expiresIn: this.parseExpiresIn(accessExp),
-        };
-    }
-    /**
-     * Verify and decode an access token. Throws if invalid / expired.
-     */
-    async verifyAccess(token) {
-        const jwt = await this.getInstance();
-        return jwt.verifyAsync(token);
-    }
-    /**
-     * Verify a refresh token. Throws if invalid / expired.
-     */
-    async verifyRefresh(token) {
-        const jwt = await this.getInstance();
-        return jwt.verifyAsync(token);
-    }
-    /**
-     * Decode a token without verification (useful for extracting metadata).
-     */
-    decode(token) {
-        if (!this.jwtServiceInstance)
-            return null;
-        return this.jwtServiceInstance.decode(token);
-    }
-    parseExpiresIn(value) {
-        const match = value.match(/^(\d+)([smhd])$/);
-        if (!match)
-            return 900;
-        const num = parseInt(match[1], 10);
-        const unit = match[2];
-        const multipliers = {
-            s: 1,
-            m: 60,
-            h: 3600,
-            d: 86400,
-        };
-        return num * (multipliers[unit] ?? 1);
-    }
-    async getInstance() {
-        if (!this.resolved) {
-            try {
-                this.nestJwt = await import('@nestjs/jwt');
-                const secretOrPrivateKey = this.options.jwtSecret ?? this.options.jwtPrivateKey;
-                this.jwtServiceInstance = new this.nestJwt.JwtService({
-                    secret: secretOrPrivateKey,
-                    publicKey: this.options.jwtPublicKey,
-                    signOptions: {
-                        algorithm: this.options.session?.algorithm ?? 'HS256',
-                        issuer: this.options.session?.issuer,
-                        audience: this.options.session?.audience,
-                    },
-                });
-            }
-            catch {
-                throw new Error('JwtService requires "@nestjs/jwt". Run: npm install @nestjs/jwt');
-            }
-            this.resolved = true;
-        }
-        return this.jwtServiceInstance;
-    }
-};
-JwtService = __decorate([
-    Injectable(),
-    __param(0, Inject(AUTH_MODULE_OPTIONS)),
-    __metadata("design:paramtypes", [Object])
-], JwtService);
-export { JwtService };
-//# sourceMappingURL=jwt.service.js.map

package/dist/auth/session/jwt.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt.service.js","sourceRoot":"","sources":["../../../packages/auth/session/jwt.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAGpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD;;;GAGG;AAEI,IAAM,UAAU,GAAhB,MAAM,UAAU;IAOF;IANX,OAAO,GAAwC,IAAI,CAAC;IACpD,kBAAkB,GAA4C,IAAI,CAAC;IACnE,QAAQ,GAAG,KAAK,CAAC;IAEzB,YAEmB,OAKhB;QALgB,YAAO,GAAP,OAAO,CAKvB;IACA,CAAC;IAEJ;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,IAAe;QAC9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,oBAAoB,IAAI,KAAK,CAAC;QACxD,MAAM,UAAU,GAAG,OAAO,CAAC,qBAAqB,IAAI,IAAI,CAAC;QAEzD,MAAM,OAAO,GAA4B;YACvC,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,KAAK;YACtC,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,KAAK;SAC3C,CAAC;QAEF,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE;YACpC,SAAS,EAAE,SAAgD;SAC5D,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAC3B,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,EAAE,SAAS,EAAE,UAAiD,EAAE,CACjE,CAAC;QAEF,OAAO;YACL,WAAW;YACX,YAAY;YACZ,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;SAC1C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,KAAa;QAC9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,KAAa;QAC/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAa;QAClB,IAAI,CAAC,IAAI,CAAC,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAC1C,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAEO,cAAc,CAAC,KAAa;QAClC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK;YAAE,OAAO,GAAG,CAAC;QACvB,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,WAAW,GAA2B;YAC1C,CAAC,EAAE,CAAC;YACJ,CAAC,EAAE,EAAE;YACL,CAAC,EAAE,IAAI;YACP,CAAC,EAAE,KAAK;SACT,CAAC;QACF,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;gBAC3C,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;gBAChF,IAAI,CAAC,kBAAkB,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;oBACpD,MAAM,EAAE,kBAAkB;oBAC1B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;oBACpC,WAAW,EAAE;wBACX,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,IAAI,OAAO;wBACrD,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM;wBACpC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ;qBACzC;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;YACrF,CAAC;YACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC;QACD,OAAO,IAAI,CAAC,kBAAmB,CAAC;IAClC,CAAC;CACF,CAAA;AA5GY,UAAU;IADtB,UAAU,EAAE;IAOR,WAAA,MAAM,CAAC,mBAAmB,CAAC,CAAA;;GANnB,UAAU,CA4GtB"}

package/dist/auth/session/token-blacklist.service.d.ts

@@ -1,37 +0,0 @@
-import type { ICacheService } from '../interfaces';
-/**
- * Redis-backed token blacklist that enables immediate token revocation.
- *
- * Tokens are stored with a TTL matching the token's remaining lifespan
- * so the blacklist does not grow unbounded.
- */
-export declare class TokenBlacklistService {
-    private readonly cache;
-    constructor(cache: ICacheService);
-    /**
-     * Blacklist an access token (by its `jti`) until its natural expiry.
-     *
-     * @param jti        Token ID (unique per token)
-     * @param ttlSeconds Seconds until the token would have expired
-     */
-    blacklistAccess(jti: string, ttlSeconds: number): Promise<void>;
-    /**
-     * Check whether an access token has been blacklisted.
-     */
-    isBlacklisted(jti: string): Promise<boolean>;
-    /**
-     * Flag a refresh token family as revoked.
-     * When rotation detects a reused old refresh token, the entire
-     * family is revoked to prevent token theft.
-     */
-    revokeFamily(familyId: string, ttlSeconds: number): Promise<void>;
-    /**
-     * Check whether a refresh token family has been revoked.
-     */
-    isFamilyRevoked(familyId: string): Promise<boolean>;
-    /**
-     * Remove a specific token from the blacklist (used during cleanup).
-     */
-    remove(jti: string): Promise<void>;
-}
-//# sourceMappingURL=token-blacklist.service.d.ts.map

package/dist/auth/session/token-blacklist.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"token-blacklist.service.d.ts","sourceRoot":"","sources":["../../../packages/auth/session/token-blacklist.service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAOnD;;;;;GAKG;AACH,qBACa,qBAAqB;IAG9B,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,aAAa;IAGvC;;;;;OAKG;IACG,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrE;;OAEG;IACG,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKlD;;;;OAIG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvE;;OAEG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKzD;;OAEG;IACG,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGzC"}