@overlordai/server 1.0.52 → 1.0.54

package/dist/adapters/slack/slack.controller.js

@@ -0,0 +1,257 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var SlackController_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SlackController = void 0;
+const protocol_1 = require("@overlordai/protocol");
+const common_1 = require("@nestjs/common");
+const slack_adapter_1 = require("./slack.adapter");
+const slack_block_builder_1 = require("./slack-block.builder");
+const dispatcher_service_1 = require("../../dispatcher/dispatcher.service");
+const slack_signature_1 = require("./slack-signature");
+const bot_repository_1 = require("../../database/repositories/bot.repository");
+let SlackController = SlackController_1 = class SlackController {
+    slackAdapter;
+    dispatcher;
+    blockBuilder;
+    botRepo;
+    logger = new common_1.Logger(SlackController_1.name);
+    constructor(slackAdapter, dispatcher, blockBuilder, botRepo) {
+        this.slackAdapter = slackAdapter;
+        this.dispatcher = dispatcher;
+        this.blockBuilder = blockBuilder;
+        this.botRepo = botRepo;
+    }
+    verifyRequest(req, appId) {
+        const timestamp = req.headers['x-slack-request-timestamp'] ?? '';
+        const signature = req.headers['x-slack-signature'] ?? '';
+        const rawBody = req.rawBody ?? '';
+        if (!rawBody) {
+            this.logger.warn('Missing raw body for signature verification');
+            return false;
+        }
+        if (!timestamp || !signature)
+            return false;
+        let resolvedAppId = appId ?? req.body?.api_app_id;
+        if (!resolvedAppId && req.body?.payload) {
+            try {
+                resolvedAppId = JSON.parse(req.body.payload)?.api_app_id;
+            }
+            catch { /* invalid payload JSON */ }
+        }
+        if (!resolvedAppId)
+            return false;
+        const botInstance = this.botRepo.findByAppId('slack', resolvedAppId);
+        if (!botInstance)
+            return false;
+        if (!botInstance.webhookToken) {
+            return false;
+        }
+        return (0, slack_signature_1.verifySlackSignature)(timestamp, rawBody, botInstance.webhookToken, signature);
+    }
+    async handleEvents(req, res) {
+        const body = req.body;
+        // URL verification BEFORE signature (bot may not exist yet during initial setup)
+        if (body.type === 'url_verification' && typeof body.challenge === 'string') {
+            res.status(common_1.HttpStatus.OK).json({ challenge: body.challenge });
+            return;
+        }
+        if (!this.verifyRequest(req, body.api_app_id)) {
+            res.status(common_1.HttpStatus.UNAUTHORIZED).json({ error: 'Invalid signature' });
+            return;
+        }
+        res.status(common_1.HttpStatus.OK).json({});
+        this.processEvent(req).catch((err) => {
+            this.logger.error(`Events processing error: ${(0, protocol_1.getErrorMessage)(err)}`);
+        });
+    }
+    async processEvent(req) {
+        const command = await this.slackAdapter.handleWebhook(req);
+        if (!command)
+            return;
+        const result = await this.dispatcher.handleCommand(command);
+        if (result.task) {
+            const card = this.blockBuilder.buildTaskCard(result.task);
+            await this.slackAdapter.sendMessage(command.chat.id, card);
+        }
+        else if (result.confirmRequired) {
+            const card = this.blockBuilder.buildDedupConfirmCard(result.confirmRequired.taskId ?? 0, result.confirmRequired.message, result.confirmRequired.confirmKey);
+            await this.slackAdapter.sendMessage(command.chat.id, card);
+        }
+        else if (result.tasks) {
+            const lines = result.tasks.map((t) => `#${t.id} [${t.status}] ${t.description.slice(0, 40)}`);
+            const text = lines.length > 0 ? `Active tasks:\n${lines.join('\n')}` : 'No active tasks.';
+            await this.slackAdapter.sendMessage(command.chat.id, { type: 'text', text });
+        }
+        else if (result.message) {
+            await this.slackAdapter.sendMessage(command.chat.id, { type: 'text', text: result.message });
+        }
+    }
+    async handleInteraction(req, res) {
+        const payloadStr = req.body?.payload;
+        if (!payloadStr) {
+            res.status(common_1.HttpStatus.BAD_REQUEST).json({ error: 'Missing payload' });
+            return;
+        }
+        let payload;
+        try {
+            payload = JSON.parse(payloadStr);
+        }
+        catch {
+            res.status(common_1.HttpStatus.BAD_REQUEST).json({ error: 'Invalid payload JSON' });
+            return;
+        }
+        if (!this.verifyRequest(req, payload.api_app_id)) {
+            res.status(common_1.HttpStatus.UNAUTHORIZED).json({ error: 'Invalid signature' });
+            return;
+        }
+        res.status(common_1.HttpStatus.OK).json({});
+        try {
+            await this.slackAdapter.handleInteraction(payload);
+        }
+        catch (err) {
+            this.logger.error(`Interaction processing error: ${(0, protocol_1.getErrorMessage)(err)}`);
+        }
+    }
+    async handleSlashCommand(req, res) {
+        const body = req.body;
+        if (!this.verifyRequest(req, body.api_app_id)) {
+            res.status(common_1.HttpStatus.UNAUTHORIZED).json({ error: 'Invalid signature' });
+            return;
+        }
+        res.status(common_1.HttpStatus.OK).send('');
+        const responseUrl = body.response_url;
+        if (!responseUrl) {
+            this.logger.warn('Slash command missing response_url');
+            return;
+        }
+        this.processSlashCommand(body, responseUrl).catch((err) => {
+            this.logger.error(`Slash command processing error: ${(0, protocol_1.getErrorMessage)(err)}`);
+        });
+    }
+    async processSlashCommand(body, responseUrl) {
+        const ky = (await import('ky')).default;
+        let command;
+        try {
+            command = await this.slackAdapter.handleSlashCommand(body);
+        }
+        catch (err) {
+            if (err instanceof Error) {
+                if (err.message === 'UNLINKED_USER') {
+                    await ky.post(responseUrl, {
+                        json: { response_type: 'ephemeral', text: 'Your Slack account is not linked. Send "bind" to get a link to connect your account.' },
+                    });
+                    return;
+                }
+                if (err.message.startsWith('BIND_ALREADY_LINKED:')) {
+                    const name = err.message.slice('BIND_ALREADY_LINKED:'.length);
+                    await ky.post(responseUrl, {
+                        json: { response_type: 'ephemeral', text: `Your Slack account is already linked to: ${name}` },
+                    });
+                    return;
+                }
+                if (err.message.startsWith('BIND_URL:')) {
+                    const url = err.message.slice('BIND_URL:'.length);
+                    await ky.post(responseUrl, {
+                        json: { response_type: 'ephemeral', text: `Click to link your account:\n${url}` },
+                    });
+                    return;
+                }
+                if (err.message.startsWith('INFO_RESPONSE:')) {
+                    const text = err.message.slice('INFO_RESPONSE:'.length);
+                    await ky.post(responseUrl, {
+                        json: { response_type: 'ephemeral', text },
+                    });
+                    return;
+                }
+            }
+            throw err;
+        }
+        if (!command) {
+            await ky.post(responseUrl, {
+                json: {
+                    response_type: 'ephemeral',
+                    text: [
+                        'Available commands:',
+                        '  /overlord develop "description" [--project key] [--on worker]',
+                        '  /overlord progress [#taskId]',
+                        '  /overlord cancel #taskId',
+                        '  /overlord retry #taskId',
+                        '  /overlord list [--project key]',
+                        '  /overlord workspace #taskId',
+                        '  /overlord logs #taskId',
+                        '  /overlord confirm #taskId',
+                        '  /overlord drain worker-name',
+                        '  /overlord undrain worker-name',
+                        '  /overlord bind — link your Slack account to Overlord',
+                        '  /overlord info — show channel and user info',
+                    ].join('\n'),
+                },
+            });
+            return;
+        }
+        const result = await this.dispatcher.handleCommand(command);
+        if (result.task) {
+            const card = this.blockBuilder.buildTaskCard(result.task);
+            const blocks = this.blockBuilder.toSlackBlocks(card);
+            await ky.post(responseUrl, { json: { response_type: 'in_channel', blocks, text: card.card?.title ?? '' } });
+        }
+        else if (result.confirmRequired) {
+            const card = this.blockBuilder.buildDedupConfirmCard(result.confirmRequired.taskId ?? 0, result.confirmRequired.message, result.confirmRequired.confirmKey);
+            const blocks = this.blockBuilder.toSlackBlocks(card);
+            await ky.post(responseUrl, { json: { response_type: 'ephemeral', blocks, text: 'Duplicate task detected' } });
+        }
+        else if (result.tasks) {
+            const lines = result.tasks.map((t) => `#${t.id} [${t.status}] ${t.description.slice(0, 40)}`);
+            const text = lines.length > 0 ? `Active tasks:\n${lines.join('\n')}` : 'No active tasks.';
+            await ky.post(responseUrl, { json: { response_type: 'in_channel', text } });
+        }
+        else if (result.message) {
+            await ky.post(responseUrl, { json: { response_type: 'in_channel', text: result.message } });
+        }
+    }
+};
+exports.SlackController = SlackController;
+__decorate([
+    (0, common_1.Post)('events'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], SlackController.prototype, "handleEvents", null);
+__decorate([
+    (0, common_1.Post)('interact'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], SlackController.prototype, "handleInteraction", null);
+__decorate([
+    (0, common_1.Post)('commands'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], SlackController.prototype, "handleSlashCommand", null);
+exports.SlackController = SlackController = SlackController_1 = __decorate([
+    (0, common_1.Controller)('webhook/slack'),
+    __metadata("design:paramtypes", [slack_adapter_1.SlackAdapter,
+        dispatcher_service_1.DispatcherService,
+        slack_block_builder_1.SlackBlockBuilder,
+        bot_repository_1.BotRepository])
+], SlackController);
+//# sourceMappingURL=slack.controller.js.map

package/dist/adapters/slack/slack.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack.controller.js","sourceRoot":"","sources":["../../../src/adapters/slack/slack.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AACA,mDAAuD;AACvD,2CAEwB;AAExB,mDAA+C;AAE/C,+DAA0D;AAC1D,4EAAwE;AACxE,uDAAyD;AACzD,+EAA2E;AAGpE,IAAM,eAAe,uBAArB,MAAM,eAAe;IAIP;IACA;IACA;IACA;IANF,MAAM,GAAG,IAAI,eAAM,CAAC,iBAAe,CAAC,IAAI,CAAC,CAAC;IAE3D,YACmB,YAA0B,EAC1B,UAA6B,EAC7B,YAA+B,EAC/B,OAAsB;QAHtB,iBAAY,GAAZ,YAAY,CAAc;QAC1B,eAAU,GAAV,UAAU,CAAmB;QAC7B,iBAAY,GAAZ,YAAY,CAAmB;QAC/B,YAAO,GAAP,OAAO,CAAe;IACtC,CAAC;IAEI,aAAa,CAAC,GAAY,EAAE,KAAc;QAChD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,2BAA2B,CAAW,IAAI,EAAE,CAAC;QAC3E,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAW,IAAI,EAAE,CAAC;QACnE,MAAM,OAAO,GAAI,GAAW,CAAC,OAAO,IAAI,EAAE,CAAC;QAE3C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;YAChE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAE3C,IAAI,aAAa,GAAG,KAAK,IAAK,GAAG,CAAC,IAAY,EAAE,UAAU,CAAC;QAC3D,IAAI,CAAC,aAAa,IAAK,GAAG,CAAC,IAAY,EAAE,OAAO,EAAE,CAAC;YACjD,IAAI,CAAC;gBACH,aAAa,GAAG,IAAI,CAAC,KAAK,CAAE,GAAG,CAAC,IAAY,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC;YACpE,CAAC;YAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QAEjC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACrE,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAE/B,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAA,sCAAoB,EAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACvF,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CAAQ,GAAY,EAAS,GAAa;QAC1D,MAAM,IAAI,GAAG,GAAG,CAAC,IAA+B,CAAC;QAEjD,iFAAiF;QACjF,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3E,GAAG,CAAC,MAAM,CAAC,mBAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,UAAoB,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,MAAM,CAAC,mBAAU,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,mBAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,IAAA,0BAAe,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,GAAY;QACrC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAE5D,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1D,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7D,CAAC;aAAM,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAClD,MAAM,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,EAClC,MAAM,CAAC,eAAe,CAAC,OAAO,EAC9B,MAAM,CAAC,eAAe,CAAC,UAAU,CAClC,CAAC;YACF,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7D,CAAC;aAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9F,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC;YAC1F,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,iBAAiB,CAAQ,GAAY,EAAS,GAAa;QAC/D,MAAM,UAAU,GAAI,GAAG,CAAC,IAAY,EAAE,OAAO,CAAC;QAC9C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,GAAG,CAAC,MAAM,CAAC,mBAAU,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QAED,IAAI,OAAY,CAAC;QACjB,IAAI,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAC/C,GAAG,CAAC,MAAM,CAAC,mBAAU,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,MAAM,CAAC,mBAAU,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,mBAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,IAAA,0BAAe,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,kBAAkB,CAAQ,GAAY,EAAS,GAAa;QAChE,MAAM,IAAI,GAAG,GAAG,CAAC,IAA8B,CAAC;QAEhD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,GAAG,CAAC,MAAM,CAAC,mBAAU,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,mBAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACxD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,IAAA,0BAAe,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,IAA4B,EAAE,WAAmB;QACjF,MAAM,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QAExC,IAAI,OAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAA2C,CAAC,CAAC;QACpG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;gBACzB,IAAI,GAAG,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;oBACpC,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE;wBACzB,IAAI,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,IAAI,EAAE,sFAAsF,EAAE;qBACnI,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,sBAAsB,CAAC,EAAE,CAAC;oBACnD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;oBAC9D,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE;wBACzB,IAAI,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,IAAI,EAAE,4CAA4C,IAAI,EAAE,EAAE;qBAC/F,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;oBACxC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;oBAClD,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE;wBACzB,IAAI,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,IAAI,EAAE,gCAAgC,GAAG,EAAE,EAAE;qBAClF,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;oBACxD,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE;wBACzB,IAAI,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,IAAI,EAAE;qBAC3C,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;YACH,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE;gBACzB,IAAI,EAAE;oBACJ,aAAa,EAAE,WAAW;oBAC1B,IAAI,EAAE;wBACJ,qBAAqB;wBACrB,iEAAiE;wBACjE,gCAAgC;wBAChC,4BAA4B;wBAC5B,2BAA2B;wBAC3B,kCAAkC;wBAClC,+BAA+B;wBAC/B,0BAA0B;wBAC1B,6BAA6B;wBAC7B,+BAA+B;wBAC/B,iCAAiC;wBACjC,wDAAwD;wBACxD,+CAA+C;qBAChD,CAAC,IAAI,CAAC,IAAI,CAAC;iBACb;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAE5D,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9G,CAAC;aAAM,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAClD,MAAM,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,EAClC,MAAM,CAAC,eAAe,CAAC,OAAO,EAC9B,MAAM,CAAC,eAAe,CAAC,UAAU,CAClC,CAAC;YACF,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,EAAE,EAAE,CAAC,CAAC;QAChH,CAAC;aAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9F,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC;YAC1F,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9E,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;CACF,CAAA;AA9NY,0CAAe;AAyCpB;IADL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACK,WAAA,IAAA,YAAG,GAAE,CAAA;IAAgB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;mDAmB7C;AA4BK;IADL,IAAA,aAAI,EAAC,UAAU,CAAC;IACQ,WAAA,IAAA,YAAG,GAAE,CAAA;IAAgB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;wDAyBlD;AAGK;IADL,IAAA,aAAI,EAAC,UAAU,CAAC;IACS,WAAA,IAAA,YAAG,GAAE,CAAA;IAAgB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;yDAmBnD;0BAvIU,eAAe;IAD3B,IAAA,mBAAU,EAAC,eAAe,CAAC;qCAKO,4BAAY;QACd,sCAAiB;QACf,uCAAiB;QACtB,8BAAa;GAP9B,eAAe,CA8N3B"}

package/dist/app.module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.module.d.ts","sourceRoot":"","sources":["../src/app.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,kBAAkB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAWxE,qBAiBa,SAAU,YAAW,UAAU;IAC1C,SAAS,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI;CAK9C"}
+{"version":3,"file":"app.module.d.ts","sourceRoot":"","sources":["../src/app.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,kBAAkB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAaxE,qBAmBa,SAAU,YAAW,UAAU;IAC1C,SAAS,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI;CAK9C"}

package/dist/app.module.js

@@ -10,11 +10,13 @@ exports.AppModule = void 0;
 const common_1 = require("@nestjs/common");
 const core_1 = require("@nestjs/core");
 const database_module_1 = require("./database/database.module");
+const repository_module_1 = require("./database/repository.module");
 const redis_module_1 = require("./redis/redis.module");
 const auth_module_1 = require("./auth/auth.module");
 const dispatcher_module_1 = require("./dispatcher/dispatcher.module");
 const web_module_1 = require("./web/web.module");
 const adapter_module_1 = require("./adapters/adapter.module");
+const events_module_1 = require("./events/events.module");
 const rate_limit_guard_1 = require("./common/rate-limit.guard");
 const extract_user_middleware_1 = require("./auth/extract-user.middleware");
 let AppModule = class AppModule {
@@ -28,7 +30,9 @@ exports.AppModule = AppModule;
 exports.AppModule = AppModule = __decorate([
     (0, common_1.Module)({
         imports: [
+            events_module_1.EventsModule,
             database_module_1.DatabaseModule,
+            repository_module_1.RepositoryModule,
             redis_module_1.RedisModule,
             auth_module_1.AuthModule,
             dispatcher_module_1.DispatcherModule,

package/dist/app.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"app.module.js","sourceRoot":"","sources":["../src/app.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwE;AACxE,uCAAyC;AACzC,gEAA4D;AAC5D,uDAAmD;AACnD,oDAAgD;AAChD,sEAAkE;AAClE,iDAA6C;AAC7C,8DAA0D;AAC1D,gEAA2D;AAC3D,4EAAuE;AAmBhE,IAAM,SAAS,GAAf,MAAM,SAAS;IACpB,SAAS,CAAC,QAA4B;QACpC,oEAAoE;QACpE,4DAA4D;QAC5D,QAAQ,CAAC,KAAK,CAAC,+CAAqB,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;CACF,CAAA;AANY,8BAAS;oBAAT,SAAS;IAjBrB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,gCAAc;YACd,0BAAW;YACX,wBAAU;YACV,oCAAgB;YAChB,sBAAS;YACT,8BAAa;YACb,+DAA+D;SAChE;QACD,SAAS,EAAE;YACT;gBACE,OAAO,EAAE,gBAAS;gBAClB,QAAQ,EAAE,iCAAc;aACzB;SACF;KACF,CAAC;GACW,SAAS,CAMrB"}
+{"version":3,"file":"app.module.js","sourceRoot":"","sources":["../src/app.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwE;AACxE,uCAAyC;AACzC,gEAA4D;AAC5D,oEAAgE;AAChE,uDAAmD;AACnD,oDAAgD;AAChD,sEAAkE;AAClE,iDAA6C;AAC7C,8DAA0D;AAC1D,0DAAsD;AACtD,gEAA2D;AAC3D,4EAAuE;AAqBhE,IAAM,SAAS,GAAf,MAAM,SAAS;IACpB,SAAS,CAAC,QAA4B;QACpC,oEAAoE;QACpE,4DAA4D;QAC5D,QAAQ,CAAC,KAAK,CAAC,+CAAqB,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;CACF,CAAA;AANY,8BAAS;oBAAT,SAAS;IAnBrB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,4BAAY;YACZ,gCAAc;YACd,oCAAgB;YAChB,0BAAW;YACX,wBAAU;YACV,oCAAgB;YAChB,sBAAS;YACT,8BAAa;YACb,+DAA+D;SAChE;QACD,SAAS,EAAE;YACT;gBACE,OAAO,EAAE,gBAAS;gBAClB,QAAQ,EAAE,iCAAc;aACzB;SACF;KACF,CAAC;GACW,SAAS,CAMrB"}

package/dist/auth/auth.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.controller.d.ts","sourceRoot":"","sources":["../../src/auth/auth.controller.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,YAAY,EACZ,aAAa,EACb,cAAc,EACd,eAAe,EAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG7C,qBACa,cAAc;IACb,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAAX,WAAW,EAAE,WAAW;IAK/C,KAAK,CACD,IAAI,EAAE,YAAY,GACzB,OAAO,CAAC,aAAa,GAAG;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,CAAC;IAM9D,OAAO,CAAS,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IAO/D,MAAM,CAAS,IAAI,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAKpE"}
+{"version":3,"file":"auth.controller.d.ts","sourceRoot":"","sources":["../../src/auth/auth.controller.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,YAAY,EACZ,aAAa,EACb,cAAc,EACd,eAAe,EAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG7C,qBACa,cAAc;IACb,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAAX,WAAW,EAAE,WAAW;IAK/C,KAAK,CACD,IAAI,EAAE,YAAY,GACzB,OAAO,CAAC,aAAa,GAAG;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,CAAC;IAO9D,OAAO,CAAS,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IAO/D,MAAM,CAAS,IAAI,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAKpE"}

package/dist/auth/auth.controller.js

@@ -46,6 +46,7 @@ __decorate([
 __decorate([
     (0, common_1.Post)('refresh'),
     (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, rate_limit_guard_1.RateLimit)({ limit: 10, windowMs: 60_000, byIp: true }),
     __param(0, (0, common_1.Body)()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object]),

package/dist/auth/auth.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../src/auth/auth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAMwB;AAOxB,iDAA6C;AAC7C,iEAAuD;AAGhD,IAAM,cAAc,GAApB,MAAM,cAAc;IACI;IAA7B,YAA6B,WAAwB;QAAxB,gBAAW,GAAX,WAAW,CAAa;IAAG,CAAC;IAKnD,AAAN,KAAK,CAAC,KAAK,CACD,IAAkB;QAE1B,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7E,CAAC;IAIK,AAAN,KAAK,CAAC,OAAO,CAAS,IAAoB;QACxC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC;IAKK,AAAN,KAAK,CAAC,MAAM,CAAS,IAA8B;QACjD,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACnD,CAAC;CACF,CAAA;AA1BY,wCAAc;AAMnB;IAHL,IAAA,aAAI,EAAC,OAAO,CAAC;IACb,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,4BAAS,EAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAEnD,WAAA,IAAA,aAAI,GAAE,CAAA;;;;2CAGR;AAIK;IAFL,IAAA,aAAI,EAAC,SAAS,CAAC;IACf,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACT,WAAA,IAAA,aAAI,GAAE,CAAA;;;;6CAEpB;AAKK;IAHL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,iBAAQ,EAAC,mBAAU,CAAC,UAAU,CAAC;IAC/B,IAAA,4BAAS,EAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACzC,WAAA,IAAA,aAAI,GAAE,CAAA;;;;4CAInB;yBAzBU,cAAc;IAD1B,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAEqB,0BAAW;GAD1C,cAAc,CA0B1B"}
+{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../src/auth/auth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAMwB;AAOxB,iDAA6C;AAC7C,iEAAuD;AAGhD,IAAM,cAAc,GAApB,MAAM,cAAc;IACI;IAA7B,YAA6B,WAAwB;QAAxB,gBAAW,GAAX,WAAW,CAAa;IAAG,CAAC;IAKnD,AAAN,KAAK,CAAC,KAAK,CACD,IAAkB;QAE1B,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7E,CAAC;IAKK,AAAN,KAAK,CAAC,OAAO,CAAS,IAAoB;QACxC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC;IAKK,AAAN,KAAK,CAAC,MAAM,CAAS,IAA8B;QACjD,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACnD,CAAC;CACF,CAAA;AA3BY,wCAAc;AAMnB;IAHL,IAAA,aAAI,EAAC,OAAO,CAAC;IACb,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,4BAAS,EAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAEnD,WAAA,IAAA,aAAI,GAAE,CAAA;;;;2CAGR;AAKK;IAHL,IAAA,aAAI,EAAC,SAAS,CAAC;IACf,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,4BAAS,EAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxC,WAAA,IAAA,aAAI,GAAE,CAAA;;;;6CAEpB;AAKK;IAHL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,iBAAQ,EAAC,mBAAU,CAAC,UAAU,CAAC;IAC/B,IAAA,4BAAS,EAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACzC,WAAA,IAAA,aAAI,GAAE,CAAA;;;;4CAInB;yBA1BU,cAAc;IAD1B,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAEqB,0BAAW;GAD1C,cAAc,CA2B1B"}

package/dist/auth/auth.module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.module.d.ts","sourceRoot":"","sources":["../../src/auth/auth.module.ts"],"names":[],"mappings":"AAYA,qBAoBa,UAAU;CAAG"}
+{"version":3,"file":"auth.module.d.ts","sourceRoot":"","sources":["../../src/auth/auth.module.ts"],"names":[],"mappings":"AAYA,qBAmBa,UAAU;CAAG"}

package/dist/auth/auth.module.js

@@ -10,14 +10,14 @@ exports.AuthModule = void 0;
 const common_1 = require("@nestjs/common");
 const jwt_1 = require("@nestjs/jwt");
 const passport_1 = require("@nestjs/passport");
-const developer_repository_1 = require("../database/repositories/developer.repository");
-const developer_token_repository_1 = require("../database/repositories/developer-token.repository");
 const auth_service_1 = require("./auth.service");
 const auth_controller_1 = require("./auth.controller");
 const jwt_strategy_1 = require("./jwt.strategy");
 const jwt_auth_guard_1 = require("./guards/jwt-auth.guard");
 const roles_guard_1 = require("./guards/roles.guard");
 const project_role_guard_1 = require("./guards/project-role.guard");
+const crypto_service_1 = require("../common/crypto.service");
+const config_1 = require("../common/config");
 let AuthModule = class AuthModule {
 };
 exports.AuthModule = AuthModule;
@@ -26,7 +26,7 @@ exports.AuthModule = AuthModule = __decorate([
         imports: [
             passport_1.PassportModule.register({ defaultStrategy: 'jwt' }),
             jwt_1.JwtModule.register({
-                secret: process.env.JWT_SECRET || 'default-jwt-secret',
+                secret: (0, config_1.getJwtSecret)(),
                 signOptions: { expiresIn: '15m' },
             }),
         ],
@@ -37,8 +37,7 @@ exports.AuthModule = AuthModule = __decorate([
             jwt_auth_guard_1.JwtAuthGuard,
             roles_guard_1.RolesGuard,
             project_role_guard_1.ProjectRoleGuard,
-            developer_repository_1.DeveloperRepository,
-            developer_token_repository_1.DeveloperTokenRepository,
+            crypto_service_1.CryptoService,
         ],
         exports: [auth_service_1.AuthService, jwt_auth_guard_1.JwtAuthGuard, roles_guard_1.RolesGuard, project_role_guard_1.ProjectRoleGuard, jwt_1.JwtModule],
     })

package/dist/auth/auth.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../../src/auth/auth.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,qCAAwC;AACxC,+CAAkD;AAClD,wFAAoF;AACpF,oGAA+F;AAC/F,iDAA6C;AAC7C,uDAAmD;AACnD,iDAA6C;AAC7C,4DAAuD;AACvD,sDAAkD;AAClD,oEAA+D;AAsBxD,IAAM,UAAU,GAAhB,MAAM,UAAU;CAAG,CAAA;AAAb,gCAAU;qBAAV,UAAU;IApBtB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,yBAAc,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;YACnD,eAAS,CAAC,QAAQ,CAAC;gBACjB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,oBAAoB;gBACtD,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;aAClC,CAAC;SACH;QACD,WAAW,EAAE,CAAC,gCAAc,CAAC;QAC7B,SAAS,EAAE;YACT,0BAAW;YACX,0BAAW;YACX,6BAAY;YACZ,wBAAU;YACV,qCAAgB;YAChB,0CAAmB;YACnB,qDAAwB;SACzB;QACD,OAAO,EAAE,CAAC,0BAAW,EAAE,6BAAY,EAAE,wBAAU,EAAE,qCAAgB,EAAE,eAAS,CAAC;KAC9E,CAAC;GACW,UAAU,CAAG"}
+{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../../src/auth/auth.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,qCAAwC;AACxC,+CAAkD;AAClD,iDAA6C;AAC7C,uDAAmD;AACnD,iDAA6C;AAC7C,4DAAuD;AACvD,sDAAkD;AAClD,oEAA+D;AAC/D,6DAAyD;AACzD,6CAAgD;AAqBzC,IAAM,UAAU,GAAhB,MAAM,UAAU;CAAG,CAAA;AAAb,gCAAU;qBAAV,UAAU;IAnBtB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,yBAAc,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;YACnD,eAAS,CAAC,QAAQ,CAAC;gBACjB,MAAM,EAAE,IAAA,qBAAY,GAAE;gBACtB,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;aAClC,CAAC;SACH;QACD,WAAW,EAAE,CAAC,gCAAc,CAAC;QAC7B,SAAS,EAAE;YACT,0BAAW;YACX,0BAAW;YACX,6BAAY;YACZ,wBAAU;YACV,qCAAgB;YAChB,8BAAa;SACd;QACD,OAAO,EAAE,CAAC,0BAAW,EAAE,6BAAY,EAAE,wBAAU,EAAE,qCAAgB,EAAE,eAAS,CAAC;KAC9E,CAAC;GACW,UAAU,CAAG"}

package/dist/auth/auth.service.d.ts

@@ -2,6 +2,7 @@ import { OnModuleInit } from '@nestjs/common';
 import { JwtService } from '@nestjs/jwt';
 import { DeveloperRepository } from '../database/repositories/developer.repository';
 import { RedisService } from '../redis/redis.service';
+import { CryptoService } from '../common/crypto.service';
 interface UserJwtPayload {
     sub: number;
     name: string;
@@ -21,8 +22,9 @@ export declare class AuthService implements OnModuleInit {
     private readonly jwtService;
     private readonly developerRepo;
     private readonly redis;
+    private readonly crypto;
     private readonly logger;
-    constructor(jwtService: JwtService, developerRepo: DeveloperRepository, redis: RedisService);
+    constructor(jwtService: JwtService, developerRepo: DeveloperRepository, redis: RedisService, crypto: CryptoService);
     onModuleInit(): void;
     login(username: string, password: string, totpCode?: string): Promise<{
         accessToken: string;
@@ -44,7 +46,7 @@ export declare class AuthService implements OnModuleInit {
     signRefreshToken(developer: {
         id: number;
     }): string;
-    signWorkerJwt(machineId: string, tokenId: number): string;
+    signWorkerJwt(workerId: string, tokenId: number): string;
     signChannelToken(taskId: number, aud: 'worker' | 'web'): string;
     validateChannelToken(token: string, expectedAud: 'worker' | 'web'): Promise<ChannelTokenPayload>;
     /**
@@ -57,6 +59,11 @@ export declare class AuthService implements OnModuleInit {
      * Throws UnauthorizedException on invalid/expired token.
      */
     verifyUserJwt(token: string): UserJwtPayload;
+    /**
+     * Atomically blacklist a refresh token via Redis SET NX.
+     * Returns true if successfully blacklisted, false if already expired or used.
+     */
+    private blacklistRefreshToken;
 }
 export {};
 //# sourceMappingURL=auth.service.d.ts.map

package/dist/auth/auth.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/auth/auth.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,YAAY,EAEb,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,UAAU,cAAc;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAUD,UAAU,gBAAgB;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,mBAAmB;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,QAAQ,GAAG,KAAK,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,qBACa,WAAY,YAAW,YAAY;IAI5C,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK;IALxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;gBAGpC,UAAU,EAAE,UAAU,EACtB,aAAa,EAAE,mBAAmB,EAClC,KAAK,EAAE,YAAY;IAGtC,YAAY,IAAI,IAAI;IAmCd,KAAK,CACT,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CACN;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAC7C;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,CAC3C;IAmEK,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IA+CrF,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsCjD,WAAW,CAAC,SAAS,EAAE;QACrB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,MAAM;IAcV,gBAAgB,CAAC,SAAS,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM;IAanD,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM;IAYzD,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM;IAazD,oBAAoB,CACxB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,QAAQ,GAAG,KAAK,GAC5B,OAAO,CAAC,mBAAmB,CAAC;IAoC/B;;;OAGG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB;IAUhD;;;OAGG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc;CAS7C"}
+{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/auth/auth.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,YAAY,EAEb,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAQzD,UAAU,cAAc;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAUD,UAAU,gBAAgB;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,mBAAmB;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,QAAQ,GAAG,KAAK,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,qBACa,WAAY,YAAW,YAAY;IAI5C,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM;IANzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;gBAGpC,UAAU,EAAE,UAAU,EACtB,aAAa,EAAE,mBAAmB,EAClC,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE,aAAa;IAGxC,YAAY,IAAI,IAAI;IAkCd,KAAK,CACT,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CACN;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAC7C;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,CAC3C;IAgEK,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAmCrF,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA6BjD,WAAW,CAAC,SAAS,EAAE;QACrB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,MAAM;IAcV,gBAAgB,CAAC,SAAS,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM;IAanD,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM;IAYxD,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM;IAazD,oBAAoB,CACxB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,QAAQ,GAAG,KAAK,GAC5B,OAAO,CAAC,mBAAmB,CAAC;IAoC/B;;;OAGG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB;IAUhD;;;OAGG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc;IAU5C;;;OAGG;YACW,qBAAqB;CAapC"}