@os.io/nest-kit 0.0.1-alpha.0

package/dist/auth/strategies/passkey/passkey.strategy.js

@@ -0,0 +1,102 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Inject, Injectable } from '@nestjs/common';
+import { AuthMethod } from '../../interfaces';
+import { USER_SERVICE } from '../../auth.constants';
+import { JwtService } from '../../session/jwt.service';
+import { BaseStrategy } from '../base/base.strategy';
+/**
+ * WebAuthn / FIDO2 Passkey authentication strategy.
+ *
+ * Provides credential registration and assertion ceremonies
+ * using the `@simplewebauthn/server` package (loaded dynamically).
+ */
+let PasskeyStrategy = class PasskeyStrategy extends BaseStrategy {
+    userService;
+    jwtService;
+    type = AuthMethod.PASSKEY;
+    name = 'passkey';
+    constructor(userService, jwtService) {
+        super();
+        this.userService = userService;
+        this.jwtService = jwtService;
+    }
+    /**
+     * Authenticate using a WebAuthn assertion response.
+     */
+    async authenticate(payload, _context) {
+        const userId = payload.userId;
+        const credential = payload.credential;
+        if (!userId || !credential) {
+            throw new Error('userId and credential are required');
+        }
+        const user = await this.userService.findById(userId);
+        if (!user) {
+            throw new Error('User not found');
+        }
+        // In production, use @simplewebauthn/server to verify the assertion.
+        // This requires stored credential records (credentialID, publicKey, counter).
+        //
+        // const verification = await verifyAuthenticationResponse({ ... });
+        //
+        // For now, we assume verification succeeds when the strategy is called.
+        // Consumers should override or extend this behavior.
+        user.roles = await this.userService.getRoles(user.id);
+        user.permissions = await this.userService.getPermissions(user.id);
+        const tokens = await this.jwtService.signTokens(user);
+        return { user, tokens };
+    }
+    /**
+     * Generate registration options for the WebAuthn ceremony.
+     */
+    async generateRegistrationOptions(userId, userName, rpName = 'NestKit', rpId) {
+        const webauthn = await this.loadWebAuthn();
+        const userEncoder = new TextEncoder();
+        const options = webauthn.generateRegistrationOptions({
+            rpName,
+            rpID: rpId ?? 'localhost',
+            userName,
+            userID: userEncoder.encode(userId),
+            attestationType: 'none',
+        });
+        return options;
+    }
+    /**
+     * Verify a registration response and return the credential.
+     */
+    async verifyRegistrationResponse(credential, expectedChallenge, expectedOrigin, expectedRpId) {
+        const webauthn = await this.loadWebAuthn();
+        const verification = await webauthn.verifyRegistrationResponse({
+            response: credential,
+            expectedChallenge,
+            expectedOrigin,
+            expectedRPID: expectedRpId,
+        });
+        return verification;
+    }
+    async loadWebAuthn() {
+        try {
+            return await import('@simplewebauthn/server');
+        }
+        catch {
+            throw new Error('Passkey strategy requires "@simplewebauthn/server". Run: npm install @simplewebauthn/server');
+        }
+    }
+};
+PasskeyStrategy = __decorate([
+    Injectable(),
+    __param(0, Inject(USER_SERVICE)),
+    __metadata("design:paramtypes", [Object, JwtService])
+], PasskeyStrategy);
+export { PasskeyStrategy };
+//# sourceMappingURL=passkey.strategy.js.map

package/dist/auth/strategies/passkey/passkey.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey.strategy.js","sourceRoot":"","sources":["../../../../packages/auth/strategies/passkey/passkey.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAoB,MAAM,kBAAkB,CAAC;AAEhE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD;;;;;GAKG;AAEI,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,YAAY;IAM5B;IACA;IANV,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC;IAC1B,IAAI,GAAG,SAAS,CAAC;IAE1B,YAEmB,WAAyB,EACzB,UAAsB;QAEvC,KAAK,EAAE,CAAC;QAHS,gBAAW,GAAX,WAAW,CAAc;QACzB,eAAU,GAAV,UAAU,CAAY;IAGzC,CAAC;IAED;;OAEG;IACM,KAAK,CAAC,YAAY,CACzB,OAAgC,EAChC,QAA2B;QAE3B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAgB,CAAC;QACxC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAqC,CAAC;QAEjE,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpC,CAAC;QAED,qEAAqE;QACrE,8EAA8E;QAC9E,EAAE;QACF,oEAAoE;QACpE,EAAE;QACF,wEAAwE;QACxE,qDAAqD;QAErD,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAEtD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,2BAA2B,CAC/B,MAAc,EACd,QAAgB,EAChB,MAAM,GAAG,SAAS,EAClB,IAAa;QAEb,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,2BAA2B,CAAC;YACnD,MAAM;YACN,IAAI,EAAE,IAAI,IAAI,WAAW;YACzB,QAAQ;YACR,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;YAClC,eAAe,EAAE,MAAM;SACxB,CAAC,CAAC;QAEH,OAAO,OAA6C,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,0BAA0B,CAC9B,UAAmC,EACnC,iBAAyB,EACzB,cAAsB,EACtB,YAAoB;QAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC3C,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,0BAA0B,CAAC;YAC7D,QAAQ,EAAE,UAAmB;YAC7B,iBAAiB;YACjB,cAAc;YACd,YAAY,EAAE,YAAY;SAC3B,CAAC,CAAC;QAEH,OAAO,YAAY,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC;YACH,OAAO,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AAlGY,eAAe;IAD3B,UAAU,EAAE;IAMR,WAAA,MAAM,CAAC,YAAY,CAAC,CAAA;6CAEQ,UAAU;GAP9B,eAAe,CAkG3B"}

package/dist/auth/strategies/sso/sso.strategy.d.ts

@@ -0,0 +1,25 @@
+import type { ExecutionContext } from '@nestjs/common';
+import { AuthMethod, type IAuthResult } from '../../interfaces';
+import type { IUserService } from '../../interfaces';
+import { JwtService } from '../../session/jwt.service';
+import { BaseStrategy } from '../base/base.strategy';
+/**
+ * SSO authentication via SAML2 or OpenID Connect.
+ *
+ * Supports multiple SAML and OIDC providers configured at module init.
+ */
+export declare class SsoStrategy extends BaseStrategy {
+    private readonly userService;
+    private readonly jwtService;
+    readonly type = AuthMethod.SSO;
+    readonly name = "sso";
+    constructor(userService: IUserService, jwtService: JwtService);
+    /**
+     * Authenticate using an SSO assertion / token.
+     *
+     * SAML: payload contains `SAMLResponse` (base64-encoded XML assertion)
+     * OIDC: payload contains `idToken` (JWT)
+     */
+    authenticate(payload: Record<string, unknown>, _context?: ExecutionContext): Promise<IAuthResult>;
+}
+//# sourceMappingURL=sso.strategy.d.ts.map

package/dist/auth/strategies/sso/sso.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sso.strategy.d.ts","sourceRoot":"","sources":["../../../../packages/auth/strategies/sso/sso.strategy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD;;;;GAIG;AACH,qBACa,WAAY,SAAQ,YAAY;IAMzC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAN7B,QAAQ,CAAC,IAAI,kBAAkB;IAC/B,QAAQ,CAAC,IAAI,SAAS;gBAIH,WAAW,EAAE,YAAY,EACzB,UAAU,EAAE,UAAU;IAKzC;;;;;OAKG;IACY,YAAY,CACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,OAAO,CAAC,WAAW,CAAC;CA2CxB"}

package/dist/auth/strategies/sso/sso.strategy.js

@@ -0,0 +1,80 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Inject, Injectable } from '@nestjs/common';
+import { AuthMethod } from '../../interfaces';
+import { USER_SERVICE } from '../../auth.constants';
+import { JwtService } from '../../session/jwt.service';
+import { BaseStrategy } from '../base/base.strategy';
+/**
+ * SSO authentication via SAML2 or OpenID Connect.
+ *
+ * Supports multiple SAML and OIDC providers configured at module init.
+ */
+let SsoStrategy = class SsoStrategy extends BaseStrategy {
+    userService;
+    jwtService;
+    type = AuthMethod.SSO;
+    name = 'sso';
+    constructor(userService, jwtService) {
+        super();
+        this.userService = userService;
+        this.jwtService = jwtService;
+    }
+    /**
+     * Authenticate using an SSO assertion / token.
+     *
+     * SAML: payload contains `SAMLResponse` (base64-encoded XML assertion)
+     * OIDC: payload contains `idToken` (JWT)
+     */
+    async authenticate(payload, _context) {
+        const provider = payload.provider;
+        const samlResponse = payload.SAMLResponse;
+        const idToken = payload.idToken;
+        if (!provider) {
+            throw new Error('SSO provider is required');
+        }
+        if (!samlResponse && !idToken) {
+            throw new Error('Either SAMLResponse or idToken is required');
+        }
+        // SAML: Parse the assertion, extract attributes (NameID, email, etc.)
+        // OIDC: Verify the ID token JWT, extract claims
+        //
+        // In production, use passport-saml for SAML or manually verify OIDC JWTs.
+        //
+        // const profile = samlResponse
+        //   ? await parseSamlResponse(samlResponse, providerConfig)
+        //   : await verifyOidcToken(idToken, providerConfig);
+        const subject = payload.sub || payload.NameID;
+        const email = payload.email;
+        const name = payload.name;
+        const socialId = `sso:${provider}:${subject}`;
+        let user = await this.userService.findBySocialId(provider, socialId);
+        if (!user) {
+            user = await this.userService.create({
+                email,
+                username: name,
+            });
+        }
+        user.roles = await this.userService.getRoles(user.id);
+        user.permissions = await this.userService.getPermissions(user.id);
+        const tokens = await this.jwtService.signTokens(user);
+        return { user, tokens, isNewUser: !user.email };
+    }
+};
+SsoStrategy = __decorate([
+    Injectable(),
+    __param(0, Inject(USER_SERVICE)),
+    __metadata("design:paramtypes", [Object, JwtService])
+], SsoStrategy);
+export { SsoStrategy };
+//# sourceMappingURL=sso.strategy.js.map

package/dist/auth/strategies/sso/sso.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sso.strategy.js","sourceRoot":"","sources":["../../../../packages/auth/strategies/sso/sso.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAoB,MAAM,kBAAkB,CAAC;AAEhE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD;;;;GAIG;AAEI,IAAM,WAAW,GAAjB,MAAM,WAAY,SAAQ,YAAY;IAMxB;IACA;IANV,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC;IACtB,IAAI,GAAG,KAAK,CAAC;IAEtB,YAEmB,WAAyB,EACzB,UAAsB;QAEvC,KAAK,EAAE,CAAC;QAHS,gBAAW,GAAX,WAAW,CAAc;QACzB,eAAU,GAAV,UAAU,CAAY;IAGzC,CAAC;IAED;;;;;OAKG;IACM,KAAK,CAAC,YAAY,CACzB,OAAgC,EAChC,QAA2B;QAE3B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAkB,CAAC;QAC5C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAkC,CAAC;QAChE,MAAM,OAAO,GAAG,OAAO,CAAC,OAA6B,CAAC;QAEtD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QAED,sEAAsE;QACtE,gDAAgD;QAChD,EAAE;QACF,0EAA0E;QAC1E,EAAE;QACF,+BAA+B;QAC/B,4DAA4D;QAC5D,sDAAsD;QAEtD,MAAM,OAAO,GAAI,OAAO,CAAC,GAAc,IAAK,OAAO,CAAC,MAAiB,CAAC;QACtE,MAAM,KAAK,GAAG,OAAO,CAAC,KAA2B,CAAC;QAClD,MAAM,IAAI,GAAG,OAAO,CAAC,IAA0B,CAAC;QAEhD,MAAM,QAAQ,GAAG,OAAO,QAAQ,IAAI,OAAO,EAAE,CAAC;QAC9C,IAAI,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAErE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;gBACnC,KAAK;gBACL,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAEtD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IAClD,CAAC;CACF,CAAA;AAhEY,WAAW;IADvB,UAAU,EAAE;IAMR,WAAA,MAAM,CAAC,YAAY,CAAC,CAAA;6CAEQ,UAAU;GAP9B,WAAW,CAgEvB"}

package/dist/auth/strategies/totp/totp.strategy.d.ts

@@ -0,0 +1,37 @@
+import type { ExecutionContext } from '@nestjs/common';
+import { AuthMethod, type IAuthResult } from '../../interfaces';
+import type { IUserService } from '../../interfaces';
+import { JwtService } from '../../session/jwt.service';
+import { BaseStrategy } from '../base/base.strategy';
+/**
+ * TOTP-based Two-Factor Authentication.
+ *
+ * Supports enrollment (generating secret + QR code), verification of codes,
+ * and backup-code management.
+ */
+export declare class TotpStrategy extends BaseStrategy {
+    private readonly userService;
+    private readonly jwtService;
+    readonly type = AuthMethod.TOTP;
+    readonly name = "totp";
+    constructor(userService: IUserService, jwtService: JwtService);
+    /**
+     * Authenticate using a TOTP code after primary authentication.
+     * Expects `userId` and `code` in the payload.
+     */
+    authenticate(payload: Record<string, unknown>, _context?: ExecutionContext): Promise<IAuthResult>;
+    /**
+     * Generate a new TOTP secret for a user (enrollment).
+     * Returns the secret and an otpauth URL for QR code generation.
+     */
+    enroll(userId: string, issuer?: string): Promise<{
+        secret: string;
+        otpauthUrl: string;
+    }>;
+    /**
+     * Verify a TOTP or backup code.
+     */
+    verifyCode(secret: string, code: string): Promise<boolean>;
+    private loadOtpauth;
+}
+//# sourceMappingURL=totp.strategy.d.ts.map

package/dist/auth/strategies/totp/totp.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp.strategy.d.ts","sourceRoot":"","sources":["../../../../packages/auth/strategies/totp/totp.strategy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD;;;;;GAKG;AACH,qBACa,YAAa,SAAQ,YAAY;IAM1C,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAN7B,QAAQ,CAAC,IAAI,mBAAmB;IAChC,QAAQ,CAAC,IAAI,UAAU;gBAIJ,WAAW,EAAE,YAAY,EACzB,UAAU,EAAE,UAAU;IAKzC;;;OAGG;IACY,YAAY,CACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,OAAO,CAAC,WAAW,CAAC;IAgCvB;;;OAGG;IACG,MAAM,CACV,MAAM,EAAE,MAAM,EACd,MAAM,SAAY,GACjB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAgBlD;;OAEG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YAclD,WAAW;CAO1B"}

package/dist/auth/strategies/totp/totp.strategy.js

@@ -0,0 +1,109 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Inject, Injectable } from '@nestjs/common';
+import { AuthMethod } from '../../interfaces';
+import { USER_SERVICE } from '../../auth.constants';
+import { JwtService } from '../../session/jwt.service';
+import { BaseStrategy } from '../base/base.strategy';
+/**
+ * TOTP-based Two-Factor Authentication.
+ *
+ * Supports enrollment (generating secret + QR code), verification of codes,
+ * and backup-code management.
+ */
+let TotpStrategy = class TotpStrategy extends BaseStrategy {
+    userService;
+    jwtService;
+    type = AuthMethod.TOTP;
+    name = 'totp';
+    constructor(userService, jwtService) {
+        super();
+        this.userService = userService;
+        this.jwtService = jwtService;
+    }
+    /**
+     * Authenticate using a TOTP code after primary authentication.
+     * Expects `userId` and `code` in the payload.
+     */
+    async authenticate(payload, _context) {
+        const userId = payload.userId;
+        const code = payload.code;
+        if (!userId || !code) {
+            throw new Error('userId and code are required');
+        }
+        const secret = await this.userService.getTotpSecret(userId);
+        if (!secret) {
+            throw new Error('TOTP is not configured for this user');
+        }
+        const valid = await this.verifyCode(secret, code);
+        if (!valid) {
+            throw new Error('Invalid TOTP code');
+        }
+        const user = await this.userService.findById(userId);
+        if (!user) {
+            throw new Error('User not found');
+        }
+        user.isMfaVerified = true;
+        user.roles = await this.userService.getRoles(user.id);
+        user.permissions = await this.userService.getPermissions(user.id);
+        const tokens = await this.jwtService.signTokens(user);
+        return { user, tokens };
+    }
+    /**
+     * Generate a new TOTP secret for a user (enrollment).
+     * Returns the secret and an otpauth URL for QR code generation.
+     */
+    async enroll(userId, issuer = 'NestKit') {
+        const otpauth = await this.loadOtpauth();
+        const secret = new otpauth.Secret({ size: 20 });
+        const secretBase32 = secret.base32;
+        const totp = new otpauth.TOTP({
+            issuer,
+            label: userId,
+            secret,
+        });
+        await this.userService.setTotpSecret(userId, secretBase32);
+        return { secret: secretBase32, otpauthUrl: totp.toString() };
+    }
+    /**
+     * Verify a TOTP or backup code.
+     */
+    async verifyCode(secret, code) {
+        const otpauth = await this.loadOtpauth();
+        try {
+            const totp = new otpauth.TOTP({
+                secret: otpauth.Secret.fromBase32(secret),
+            });
+            const delta = totp.validate({ token: code });
+            return delta !== null;
+        }
+        catch {
+            return false;
+        }
+    }
+    async loadOtpauth() {
+        try {
+            return await import('otpauth');
+        }
+        catch {
+            throw new Error('TOTP strategy requires "otpauth". Run: npm install otpauth');
+        }
+    }
+};
+TotpStrategy = __decorate([
+    Injectable(),
+    __param(0, Inject(USER_SERVICE)),
+    __metadata("design:paramtypes", [Object, JwtService])
+], TotpStrategy);
+export { TotpStrategy };
+//# sourceMappingURL=totp.strategy.js.map

package/dist/auth/strategies/totp/totp.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp.strategy.js","sourceRoot":"","sources":["../../../../packages/auth/strategies/totp/totp.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAoB,MAAM,kBAAkB,CAAC;AAEhE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD;;;;;GAKG;AAEI,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,YAAY;IAMzB;IACA;IANV,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IACvB,IAAI,GAAG,MAAM,CAAC;IAEvB,YAEmB,WAAyB,EACzB,UAAsB;QAEvC,KAAK,EAAE,CAAC;QAHS,gBAAW,GAAX,WAAW,CAAc;QACzB,eAAU,GAAV,UAAU,CAAY;IAGzC,CAAC;IAED;;;OAGG;IACM,KAAK,CAAC,YAAY,CACzB,OAAgC,EAChC,QAA2B;QAE3B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAgB,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAc,CAAC;QAEpC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAEtD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,MAAc,EACd,MAAM,GAAG,SAAS;QAElB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;QAEnC,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;YAC5B,MAAM;YACN,KAAK,EAAE,MAAM;YACb,MAAM;SACP,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAE3D,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,IAAY;QAC3C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;aAC1C,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,OAAO,KAAK,KAAK,IAAI,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC;YACH,OAAO,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;CACF,CAAA;AAlGY,YAAY;IADxB,UAAU,EAAE;IAMR,WAAA,MAAM,CAAC,YAAY,CAAC,CAAA;6CAEQ,UAAU;GAP9B,YAAY,CAkGxB"}

package/dist/auth/throttling/index.d.ts

@@ -0,0 +1,2 @@
+export { ThrottleService } from './throttle.service';
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/throttling/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../packages/auth/throttling/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/auth/throttling/index.js

@@ -0,0 +1,2 @@
+export { ThrottleService } from './throttle.service';
+//# sourceMappingURL=index.js.map

package/dist/auth/throttling/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../packages/auth/throttling/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/auth/throttling/throttle.service.d.ts

@@ -0,0 +1,27 @@
+import type { ICacheService } from '../interfaces';
+/**
+ * Rate-limits login attempts per identifier (email, IP, etc.)
+ * using the shared cache.
+ */
+export declare class ThrottleService {
+    private readonly cache;
+    constructor(cache: ICacheService);
+    /**
+     * Check if the identifier is currently throttled.
+     *
+     * @param identifier  User email, IP, or any unique key
+     * @param maxAttempts Max allowed attempts (default 5)
+     * @param windowSec   Window in seconds (default 900 = 15 min)
+     * @throws Error if throttled
+     */
+    check(identifier: string, maxAttempts?: number, windowSec?: number): Promise<void>;
+    /**
+     * Record a failed login attempt.
+     */
+    recordFailure(identifier: string, windowSec?: number): Promise<void>;
+    /**
+     * Clear the attempt counter on successful login.
+     */
+    clear(identifier: string): Promise<void>;
+}
+//# sourceMappingURL=throttle.service.d.ts.map

package/dist/auth/throttling/throttle.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"throttle.service.d.ts","sourceRoot":"","sources":["../../../packages/auth/throttling/throttle.service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD;;;GAGG;AACH,qBACa,eAAe;IAGxB,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,aAAa;IAGvC;;;;;;;OAOG;IACG,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,SAAI,EAAE,SAAS,SAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUhF;;OAEG;IACG,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,SAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASvE;;OAEG;IACG,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG/C"}

package/dist/auth/throttling/throttle.service.js

@@ -0,0 +1,63 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Inject, Injectable } from '@nestjs/common';
+import { CACHE_SERVICE, LOGIN_ATTEMPT_PREFIX } from '../auth.constants';
+/**
+ * Rate-limits login attempts per identifier (email, IP, etc.)
+ * using the shared cache.
+ */
+let ThrottleService = class ThrottleService {
+    cache;
+    constructor(cache) {
+        this.cache = cache;
+    }
+    /**
+     * Check if the identifier is currently throttled.
+     *
+     * @param identifier  User email, IP, or any unique key
+     * @param maxAttempts Max allowed attempts (default 5)
+     * @param windowSec   Window in seconds (default 900 = 15 min)
+     * @throws Error if throttled
+     */
+    async check(identifier, maxAttempts = 5, windowSec = 900) {
+        const key = `${LOGIN_ATTEMPT_PREFIX}${identifier}`;
+        const attempts = await this.cache.get(key);
+        const current = attempts ?? 0;
+        if (current >= maxAttempts) {
+            throw new Error(`Too many login attempts. Please try again in ${windowSec} seconds.`);
+        }
+    }
+    /**
+     * Record a failed login attempt.
+     */
+    async recordFailure(identifier, windowSec = 900) {
+        const key = `${LOGIN_ATTEMPT_PREFIX}${identifier}`;
+        const attempts = await this.cache.get(key);
+        const next = (attempts ?? 0) + 1;
+        // Extend TTL on each failure so the window resets only after inactivity
+        await this.cache.set(key, next, windowSec);
+    }
+    /**
+     * Clear the attempt counter on successful login.
+     */
+    async clear(identifier) {
+        await this.cache.del(`${LOGIN_ATTEMPT_PREFIX}${identifier}`);
+    }
+};
+ThrottleService = __decorate([
+    Injectable(),
+    __param(0, Inject(CACHE_SERVICE)),
+    __metadata("design:paramtypes", [Object])
+], ThrottleService);
+export { ThrottleService };
+//# sourceMappingURL=throttle.service.js.map

package/dist/auth/throttling/throttle.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"throttle.service.js","sourceRoot":"","sources":["../../../packages/auth/throttling/throttle.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAExE;;;GAGG;AAEI,IAAM,eAAe,GAArB,MAAM,eAAe;IAGP;IAFnB,YAEmB,KAAoB;QAApB,UAAK,GAAL,KAAK,CAAe;IACpC,CAAC;IAEJ;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,CAAC,UAAkB,EAAE,WAAW,GAAG,CAAC,EAAE,SAAS,GAAG,GAAG;QAC9D,MAAM,GAAG,GAAG,GAAG,oBAAoB,GAAG,UAAU,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAS,GAAG,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,QAAQ,IAAI,CAAC,CAAC;QAE9B,IAAI,OAAO,IAAI,WAAW,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,gDAAgD,SAAS,WAAW,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,SAAS,GAAG,GAAG;QACrD,MAAM,GAAG,GAAG,GAAG,oBAAoB,GAAG,UAAU,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAS,GAAG,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAEjC,wEAAwE;QACxE,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,UAAkB;QAC5B,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,oBAAoB,GAAG,UAAU,EAAE,CAAC,CAAC;IAC/D,CAAC;CACF,CAAA;AA1CY,eAAe;IAD3B,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,aAAa,CAAC,CAAA;;GAFb,eAAe,CA0C3B"}

package/dist/bootstrap/cache/config.d.ts

@@ -0,0 +1,135 @@
+import { ConfigService } from '@nestjs/config';
+/** Per-store configuration. */
+export interface CacheStoreConfig {
+    /** Store type */
+    type: 'memory' | 'redis' | 'valkey';
+    /**
+     * Optional name to distinguish this store.
+     *
+     * When set, the bootstrapper also reads `CACHE_{NAME}_URL`,
+     * `CACHE_{NAME}_KEY_PREFIX`, `CACHE_{NAME}_TTL`, and
+     * `CACHE_{NAME}_MAX` environment variables (with `NAME`
+     * uppercased). Named env vars take priority over the
+     * generic `REDIS_*` / `VALKEY_*` / `CACHE_*` variables.
+     *
+     * @example
+     * ```ts
+     * stores: [
+     *   { type: 'redis', name: 'sessions' },
+     *   { type: 'redis', name: 'data' },
+     * ]
+     * // Also reads: CACHE_SESSIONS_URL, CACHE_DATA_URL
+     * ```
+     */
+    name?: string;
+    /**
+     * Keyv adapter constructor.
+     *
+     * @example
+     * ```ts
+     * import { KeyvCacheableMemory } from 'cacheable';
+     * import KeyvRedis from '@keyv/redis';
+     * import KeyvValkey from '@keyv/valkey';
+     *
+     * const cfg = configCache({
+     *   keyv: Keyv,
+     *   stores: [
+     *     { type: 'memory', adapter: KeyvCacheableMemory },
+     *     { type: 'redis',  adapter: KeyvRedis },
+     *     { type: 'valkey', adapter: KeyvValkey },
+     *   ],
+     * });
+     * ```
+     */
+    adapter?: new (...args: unknown[]) => unknown;
+    /** Connection URL (redis / valkey), e.g. `redis://localhost:6379`. */
+    url?: string;
+    /** Max items (memory store). */
+    max?: number;
+    /** Key prefix for namespacing. */
+    keyPrefix?: string;
+    /** Enable RDS (ElastiCache) TLS mode. */
+    rdsEnabled?: boolean;
+    /** TTL override for this store (seconds). */
+    ttl?: number;
+}
+/** Top-level cache configuration. */
+export interface CacheConfigOptions {
+    /**
+     * Default TTL (seconds).
+     * When `keyv` is provided, this value is converted to milliseconds for Keyv.
+     */
+    ttl?: number;
+    /** Register as `@Global()`. */
+    isGlobal?: boolean;
+    /**
+     * One or more cache stores. Pass multiple to enable multi-tier caching.
+     * Each store creates a separate `Keyv` instance.
+     */
+    stores?: CacheStoreConfig[];
+    /**
+     * The `Keyv` class from the `keyv` package.
+     *
+     * Required when any store provides an `adapter` — the config builds Keyv
+     * instances so the output is ready for `CacheModule.register()`.
+     *
+     * @example
+     * ```ts
+     * import Keyv from 'keyv';
+     * ```
+     */
+    keyv?: new (options?: Record<string, unknown>) => Record<string, unknown>;
+}
+type StoreRecord = Record<string, unknown>;
+/**
+ * Build cache module options from environment variables.
+ *
+ * @example
+ * ```ts
+ * import Keyv from 'keyv';
+ * import KeyvRedis from '@keyv/redis';
+ * import { KeyvCacheableMemory } from 'cacheable';
+ *
+ * const cfg = configCache({
+ *   keyv: Keyv,
+ *   stores: [
+ *     { type: 'memory', adapter: KeyvCacheableMemory },
+ *     { type: 'redis', adapter: KeyvRedis },
+ *   ],
+ * });
+ * CacheModule.register(cfg);
+ * ```
+ *
+ * Environment variables:
+ * | Variable                  | Default                    | Description                               |
+ * |---------------------------|----------------------------|-------------------------------------------|
+ * | `CACHE_STORE`             | `memory`                   | Comma-separated store types               |
+ * | `CACHE_TTL`               | `60`                       | Default TTL (seconds)                     |
+ * | `CACHE_MAX`               | `100`                      | Max items (memory store)                  |
+ * | `CACHE_IS_GLOBAL`         | `false`                    | Register as global module                 |
+ * | `CACHE_{NAME}_URL`        | —                          | Named-store URL (overrides `REDIS_URL`)   |
+ * | `CACHE_{NAME}_KEY_PREFIX` | —                          | Named-store key prefix                    |
+ * | `CACHE_{NAME}_TTL`        | —                          | Named-store TTL (overrides `CACHE_TTL`)   |
+ * | `CACHE_{NAME}_MAX`        | —                          | Named-store max (overrides `CACHE_MAX`)   |
+ * | `REDIS_URL`               | `redis://localhost:6379/0` | Redis connection URL                      |
+ * | `REDIS_KEY_PREFIX`        | —                          | Redis key prefix                          |
+ * | `VALKEY_URL`              | `redis://localhost:6379/0` | Valkey connection URL                     |
+ * | `VALKEY_KEY_PREFIX`       | —                          | Valkey key prefix                         |
+ * | `RDS_CACHE_ENABLED`        | `false`                    | Enable TLS for Redis / Valkey             |
+ */
+export declare function configCache(options?: CacheConfigOptions): StoreRecord;
+/**
+ * Build cache module options from `ConfigService`.
+ *
+ * @example
+ * ```ts
+ * CacheModule.registerAsync({
+ *   imports: [ConfigModule],
+ *   inject: [ConfigService],
+ *   useFactory: (cs) => configCacheAsync(cs, { keyv: Keyv, stores: [...] }),
+ * })
+ * ```
+ */
+export declare function configCacheAsync(configService: ConfigService, options?: CacheConfigOptions): StoreRecord;
+export {};
+//# sourceMappingURL=config.d.ts.map

package/dist/bootstrap/cache/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../packages/bootstrap/cache/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,+BAA+B;AAC/B,MAAM,WAAW,gBAAgB;IAC/B,iBAAiB;IACjB,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;IAEpC;;;;;;;;;;;;;;;;;OAiBG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC;IAE9C,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,6CAA6C;IAC7C,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,qCAAqC;AACrC,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,OAAO,CAAC;IAEnB;;;OAGG;IACH,MAAM,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAE5B;;;;;;;;;;OAUG;IACH,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3E;AAYD,KAAK,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAiL3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAgB,WAAW,CAAC,OAAO,CAAC,EAAE,kBAAkB,GAAG,WAAW,CAYrE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAC9B,aAAa,EAAE,aAAa,EAC5B,OAAO,CAAC,EAAE,kBAAkB,GAC3B,WAAW,CASb"}