@trokky/trokky 2.0.3

package/dist/core/services/media-service.js

@@ -0,0 +1,396 @@
+import { SecurityValidator } from '../security/validation.js';
+import { mediaUploaded, mediaDeleted } from '../events/index.js';
+import { DocumentNotFoundError, InvalidInputError } from '../errors/index.js';
+/**
+ * Media upload, retrieval, image variants and filename sanitization.
+ */
+export class MediaService {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    // Media operations
+    async uploadMedia(file) {
+        if (this.deps.rateLimiter) {
+            await this.deps.rateLimiter.checkRateLimit('uploadMedia');
+        }
+        let sanitizedFilename = file.name;
+        if (this.deps.securityEnabled) {
+            sanitizedFilename = this.validateAndSanitizeMediaFile(file);
+        }
+        const metadata = {
+            id: this.deps.idGenerator.generate({ prefix: 'media' }),
+            filename: sanitizedFilename,
+            contentType: file.type,
+            size: file.size,
+            extension: this.getFileExtension(sanitizedFilename)
+        };
+        // Upload to storage first
+        const mediaFile = await this.deps.mediaStorage.uploadFile(file, metadata);
+        // Process image if it's an image file
+        if (file.type.startsWith('image/')) {
+            try {
+                const processedImage = await this.deps.getImageProcessor().processImage(file, {
+                    id: metadata.id,
+                    filename: metadata.filename,
+                    path: metadata.filename // Use filename as fallback since we don't have the full path here
+                });
+                // Save variant files directly to storage without creating separate MediaFile records
+                const savedVariants = {};
+                for (const [variantName, variantData] of Object.entries(processedImage.variants)) {
+                    if (variantData.buffer) {
+                        try {
+                            // Save variant file directly using storage adapter's variant support
+                            if (this.deps.mediaStorage.saveVariantFile) {
+                                const variantPath = await this.deps.mediaStorage.saveVariantFile(metadata.id, variantName, variantData.buffer, variantData.format);
+                                // Store variant info without URL - let frontend handle URL construction
+                                savedVariants[variantName] = {
+                                    width: variantData.width,
+                                    height: variantData.height,
+                                    format: variantData.format,
+                                    size: variantData.size
+                                };
+                                this.deps.logger.info('Variant file saved directly', {
+                                    parentId: metadata.id,
+                                    variantName,
+                                    path: variantPath
+                                });
+                            }
+                            else {
+                                // Fallback: just store metadata without physical files for now
+                                savedVariants[variantName] = {
+                                    url: variantData.url,
+                                    width: variantData.width,
+                                    height: variantData.height,
+                                    format: variantData.format,
+                                    size: variantData.size
+                                };
+                                this.deps.logger.warn('Storage adapter does not support variant files - storing metadata only', {
+                                    parentId: metadata.id,
+                                    variantName
+                                });
+                            }
+                        }
+                        catch (variantError) {
+                            this.deps.logger.warn('Failed to save variant file', {
+                                parentId: metadata.id,
+                                variantName,
+                                error: variantError instanceof Error ? variantError.message : 'Unknown error'
+                            });
+                        }
+                    }
+                }
+                // Store processed image metadata in the media file
+                mediaFile.metadata = {
+                    ...mediaFile.metadata,
+                    imageVariants: savedVariants,
+                    originalDimensions: {
+                        width: processedImage.original.width,
+                        height: processedImage.original.height
+                    }
+                };
+                // Save the updated metadata back to storage
+                try {
+                    if (this.deps.mediaStorage.updateFile) {
+                        await this.deps.mediaStorage.updateFile(mediaFile.id, mediaFile.metadata);
+                    }
+                    this.deps.logger.info('Image variants metadata saved', {
+                        fileId: metadata.id,
+                        variantCount: Object.keys(processedImage.variants).length
+                    });
+                }
+                catch (updateError) {
+                    this.deps.logger.warn('Failed to save image variants metadata', {
+                        fileId: metadata.id,
+                        error: updateError instanceof Error ? updateError.message : 'Unknown error'
+                    });
+                }
+            }
+            catch (error) {
+                // Log error but don't fail the upload - image processing is optional
+                this.deps.logger.warn('Image processing failed', {
+                    fileId: metadata.id,
+                    error: error instanceof Error ? error.message : 'Unknown error'
+                });
+            }
+        }
+        // Emit media uploaded event
+        if (this.deps.eventsEnabled) {
+            try {
+                await this.deps.eventBus.emitEvent(mediaUploaded(mediaFile));
+            }
+            catch (error) {
+                this.deps.logger.warn('Failed to emit media uploaded event', {
+                    error,
+                    fileId: mediaFile.id
+                });
+            }
+        }
+        return mediaFile;
+    }
+    async getMedia(id) {
+        if (this.deps.rateLimiter) {
+            await this.deps.rateLimiter.checkRateLimit('getMedia');
+        }
+        if (this.deps.securityEnabled) {
+            SecurityValidator.validateDocumentId(id);
+        }
+        return await this.deps.mediaStorage.getFile(id);
+    }
+    async updateMedia(id, metadata) {
+        if (this.deps.rateLimiter) {
+            await this.deps.rateLimiter.checkRateLimit('updateMedia');
+        }
+        if (this.deps.securityEnabled) {
+            SecurityValidator.validateDocumentId(id);
+        }
+        // Check if media exists first
+        const existingMedia = await this.deps.mediaStorage.getFile(id);
+        if (!existingMedia) {
+            throw new DocumentNotFoundError('media', id);
+        }
+        // Use the storage adapter's updateFile method if available
+        if (!this.deps.mediaStorage.updateFile) {
+            throw new Error('Media update not supported by storage adapter');
+        }
+        return await this.deps.mediaStorage.updateFile(id, metadata);
+    }
+    async getMediaContent(id) {
+        if (this.deps.rateLimiter) {
+            await this.deps.rateLimiter.checkRateLimit('getMediaContent');
+        }
+        if (this.deps.securityEnabled) {
+            SecurityValidator.validateDocumentId(id);
+        }
+        return await this.deps.mediaStorage.getFileContent(id);
+    }
+    async listMedia(options) {
+        if (this.deps.rateLimiter) {
+            await this.deps.rateLimiter.checkRateLimit('listMedia');
+        }
+        // Use the storage adapter's listMedia method if available
+        if (!this.deps.mediaStorage.listMedia) {
+            throw new Error('Media listing not supported by storage adapter');
+        }
+        return await this.deps.mediaStorage.listMedia(options || {});
+    }
+    async deleteMedia(id) {
+        if (this.deps.rateLimiter) {
+            await this.deps.rateLimiter.checkRateLimit('deleteMedia');
+        }
+        if (this.deps.securityEnabled) {
+            SecurityValidator.validateDocumentId(id);
+        }
+        // Check if media exists
+        const existingMedia = await this.deps.mediaStorage.getFile(id);
+        if (!existingMedia) {
+            throw new DocumentNotFoundError('media', id);
+        }
+        // Delete image variants if it's an image
+        if (existingMedia.contentType.startsWith('image/')) {
+            try {
+                await this.deps.getImageProcessor().deleteImage(id);
+            }
+            catch (error) {
+                // Log error but don't fail the deletion - variants cleanup is optional
+                this.deps.logger.warn('Image variants cleanup failed', {
+                    fileId: id,
+                    error: error instanceof Error ? error.message : 'Unknown error'
+                });
+            }
+        }
+        await this.deps.mediaStorage.deleteFile(id);
+        // Emit media deleted event
+        if (this.deps.eventsEnabled) {
+            try {
+                await this.deps.eventBus.emitEvent(mediaDeleted(id, existingMedia));
+            }
+            catch (error) {
+                this.deps.logger.warn('Failed to emit media deleted event', {
+                    error,
+                    fileId: id
+                });
+            }
+        }
+    }
+    async regenerateMediaVariants(id) {
+        try {
+            await this.deps.rateLimiter?.checkRateLimit('regenerateMediaVariants');
+            // Get the existing media file
+            const mediaFile = await this.deps.mediaStorage.getFile(id);
+            if (!mediaFile) {
+                throw new Error(`Media file with id ${id} not found`);
+            }
+            // Check if it's an image file
+            if (!mediaFile.contentType.startsWith('image/')) {
+                throw new InvalidInputError('Variant regeneration is only supported for image files', 'contentType');
+            }
+            this.deps.logger.info('Starting variant regeneration', { id, filename: mediaFile.filename });
+            // Get the original file content
+            const fileContent = await this.deps.mediaStorage.getFileContent(id);
+            if (!fileContent) {
+                throw new Error('Unable to read original file content');
+            }
+            // Convert ArrayBuffer to File object for image processing
+            const file = new File([new Uint8Array(fileContent)], mediaFile.filename, {
+                type: mediaFile.contentType
+            });
+            // Process the image to generate new variants
+            const processedImage = await this.deps.getImageProcessor().processImage(file, {
+                id: mediaFile.id,
+                filename: mediaFile.filename,
+                path: mediaFile.metadata?.path || mediaFile.filename
+            });
+            // Delete existing variants first
+            if (this.deps.mediaStorage.deleteVariantFiles) {
+                try {
+                    await this.deps.mediaStorage.deleteVariantFiles(id);
+                    this.deps.logger.info('Existing variants deleted', { id });
+                }
+                catch (deleteError) {
+                    this.deps.logger.warn('Failed to delete existing variants', { id, error: deleteError });
+                }
+            }
+            // Save new variant files
+            const savedVariants = {};
+            for (const [variantName, variantData] of Object.entries(processedImage.variants)) {
+                if (variantData.buffer) {
+                    try {
+                        if (this.deps.mediaStorage.saveVariantFile) {
+                            const variantPath = await this.deps.mediaStorage.saveVariantFile(id, variantName, variantData.buffer, variantData.format);
+                            // Store variant info without URL - let frontend handle URL construction
+                            savedVariants[variantName] = {
+                                width: variantData.width,
+                                height: variantData.height,
+                                format: variantData.format,
+                                size: variantData.size
+                            };
+                            this.deps.logger.info('New variant saved', {
+                                parentId: id,
+                                variantName,
+                                path: variantPath
+                            });
+                        }
+                    }
+                    catch (variantError) {
+                        this.deps.logger.warn('Failed to save new variant', {
+                            parentId: id,
+                            variantName,
+                            error: variantError instanceof Error ? variantError.message : 'Unknown error'
+                        });
+                    }
+                }
+            }
+            // Update metadata with new variants
+            const updatedMetadata = {
+                ...mediaFile.metadata,
+                imageVariants: savedVariants,
+                originalDimensions: {
+                    width: processedImage.original.width,
+                    height: processedImage.original.height
+                }
+            };
+            // Save updated metadata
+            const updatedMediaFile = await this.deps.mediaStorage.updateFile?.(id, updatedMetadata);
+            if (!updatedMediaFile) {
+                throw new Error('Failed to update media file metadata');
+            }
+            this.deps.logger.info('Variants regenerated successfully', {
+                id,
+                variantCount: Object.keys(savedVariants).length
+            });
+            return updatedMediaFile;
+        }
+        catch (error) {
+            this.deps.logger.error('Failed to regenerate variants', {
+                id,
+                error: error instanceof Error ? error.message : 'Unknown error'
+            });
+            throw error;
+        }
+    }
+    // Image processing operations
+    getImageUrl(imageId, variantName) {
+        return this.deps.getImageProcessor().getImageUrl(imageId, variantName);
+    }
+    async getImageProcessor() {
+        return this.deps.getImageProcessor();
+    }
+    // Utility methods
+    validateAndSanitizeMediaFile(file) {
+        // Use configuration or fall back to defaults
+        const mediaValidation = this.deps.config.media?.validation;
+        const maxSize = mediaValidation?.maxFileSize || (100 * 1024 * 1024); // 100MB default
+        const allowedTypes = mediaValidation?.allowedTypes || [
+            // Images
+            'image/jpeg', 'image/png', 'image/gif', 'image/webp', 'image/svg+xml',
+            // Video
+            'video/mp4', 'video/webm', 'video/mov', 'video/avi',
+            // Audio - comprehensive list to match AudioField and Routes
+            'audio/mpeg', // MP3 (primary MIME type)
+            'audio/mp3', // MP3 (alternative MIME type)
+            'audio/wav', // WAV
+            'audio/wave', // WAV (alternative MIME type)
+            'audio/ogg', // OGG
+            'audio/aac', // AAC
+            'audio/mp4', // M4A (MP4 audio)
+            'audio/x-m4a', // M4A (alternative MIME type)
+            'audio/flac', // FLAC
+            'audio/webm', // WebM audio
+            // Documents
+            'application/pdf',
+            'application/msword',
+            'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+            // Text
+            'text/plain', 'text/csv',
+            'application/json'
+        ];
+        if (file.size > maxSize) {
+            throw new InvalidInputError(`File too large (max ${maxSize / 1024 / 1024}MB)`, 'file');
+        }
+        if (!allowedTypes.includes(file.type)) {
+            throw new InvalidInputError(`File type not allowed: ${file.type}`, 'file');
+        }
+        // Sanitize filename instead of rejecting it
+        const sanitizedName = this.sanitizeFilename(file.name);
+        if (sanitizedName !== file.name) {
+            this.deps.logger.debug('Filename sanitized', {
+                original: file.name,
+                sanitized: sanitizedName
+            });
+        }
+        return sanitizedName;
+    }
+    sanitizeFilename(filename) {
+        // Extract extension first
+        const lastDot = filename.lastIndexOf('.');
+        const name = lastDot > 0 ? filename.substring(0, lastDot) : filename;
+        const extension = lastDot > 0 ? filename.substring(lastDot) : '';
+        // Sanitize the name part
+        let sanitized = name
+            // Replace accented characters with ASCII equivalents
+            .normalize('NFD')
+            .replace(/[\u0300-\u036f]/g, '')
+            // Replace spaces and special characters with hyphens
+            .replace(/[^a-zA-Z0-9._-]/g, '-')
+            // Remove multiple consecutive hyphens
+            .replace(/-+/g, '-')
+            // Remove leading/trailing hyphens
+            .replace(/^-+|-+$/g, '')
+            // Ensure it's not empty
+            || 'file';
+        // Sanitize extension (keep dots, letters, numbers only)
+        const sanitizedExtension = extension.replace(/[^.a-zA-Z0-9]/g, '');
+        // Limit total length to 255 characters (filesystem limit)
+        const maxNameLength = 255 - sanitizedExtension.length;
+        if (sanitized.length > maxNameLength) {
+            sanitized = sanitized.substring(0, maxNameLength);
+        }
+        return sanitized + sanitizedExtension;
+    }
+    getFileExtension(filename) {
+        const parts = filename.split('.');
+        return parts.length > 1 ? parts.pop() : '';
+    }
+}
+//# sourceMappingURL=media-service.js.map

package/dist/core/services/media-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-service.js","sourceRoot":"","sources":["../../../src/core/services/media-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAM7D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAChE,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAqB7E;;GAEG;AACH,MAAM,OAAO,YAAY;IACM;IAA7B,YAA6B,IAA8B;QAA9B,SAAI,GAAJ,IAAI,CAA0B;IAAG,CAAC;IAE/D,mBAAmB;IACZ,KAAK,CAAC,WAAW,CAAC,IAAU;QACjC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,aAAa,CAAC,CAAA;QAC3D,CAAC;QAED,IAAI,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAA;QACjC,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9B,iBAAiB,GAAG,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAA;QAC7D,CAAC;QAED,MAAM,QAAQ,GAAkB;YAC9B,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YACvD,QAAQ,EAAE,iBAAiB;YAC3B,WAAW,EAAE,IAAI,CAAC,IAAI;YACtB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC;SACpD,CAAA;QAED,0BAA0B;QAC1B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QAEzE,sCAAsC;QACtC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE;oBAC5E,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,kEAAkE;iBAC3F,CAAC,CAAA;gBAEF,qFAAqF;gBACrF,MAAM,aAAa,GAAwB,EAAE,CAAA;gBAC7C,KAAK,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAsC,EAAE,CAAC;oBACtH,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;wBACvB,IAAI,CAAC;4BACH,qEAAqE;4BACrE,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,CAAC;gCAC3C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,eAAe,CAC9D,QAAQ,CAAC,EAAE,EACX,WAAW,EACX,WAAW,CAAC,MAAM,EAClB,WAAW,CAAC,MAAM,CACnB,CAAA;gCAED,wEAAwE;gCACxE,aAAa,CAAC,WAAW,CAAC,GAAG;oCAC3B,KAAK,EAAE,WAAW,CAAC,KAAK;oCACxB,MAAM,EAAE,WAAW,CAAC,MAAM;oCAC1B,MAAM,EAAE,WAAW,CAAC,MAAM;oCAC1B,IAAI,EAAE,WAAW,CAAC,IAAI;iCACvB,CAAA;gCAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;oCACnD,QAAQ,EAAE,QAAQ,CAAC,EAAE;oCACrB,WAAW;oCACX,IAAI,EAAE,WAAW;iCAClB,CAAC,CAAA;4BACJ,CAAC;iCAAM,CAAC;gCACN,+DAA+D;gCAC/D,aAAa,CAAC,WAAW,CAAC,GAAG;oCAC3B,GAAG,EAAE,WAAW,CAAC,GAAG;oCACpB,KAAK,EAAE,WAAW,CAAC,KAAK;oCACxB,MAAM,EAAE,WAAW,CAAC,MAAM;oCAC1B,MAAM,EAAE,WAAW,CAAC,MAAM;oCAC1B,IAAI,EAAE,WAAW,CAAC,IAAI;iCACvB,CAAA;gCACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wEAAwE,EAAE;oCAC9F,QAAQ,EAAE,QAAQ,CAAC,EAAE;oCACrB,WAAW;iCACZ,CAAC,CAAA;4BACJ,CAAC;wBACH,CAAC;wBAAC,OAAO,YAAY,EAAE,CAAC;4BACtB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;gCACnD,QAAQ,EAAE,QAAQ,CAAC,EAAE;gCACrB,WAAW;gCACX,KAAK,EAAE,YAAY,YAAY,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;6BAC9E,CAAC,CAAA;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,mDAAmD;gBACnD,SAAS,CAAC,QAAQ,GAAG;oBACnB,GAAG,SAAS,CAAC,QAAQ;oBACrB,aAAa,EAAE,aAAa;oBAC5B,kBAAkB,EAAE;wBAClB,KAAK,EAAE,cAAc,CAAC,QAAQ,CAAC,KAAK;wBACpC,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,MAAM;qBACvC;iBACF,CAAA;gBAED,4CAA4C;gBAC5C,IAAI,CAAC;oBACH,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;wBACtC,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAA;oBAC3E,CAAC;oBACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;wBACrD,MAAM,EAAE,QAAQ,CAAC,EAAE;wBACnB,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,MAAM;qBAC1D,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,WAAW,EAAE,CAAC;oBACrB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;wBAC9D,MAAM,EAAE,QAAQ,CAAC,EAAE;wBACnB,KAAK,EAAE,WAAW,YAAY,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;qBAC5E,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,qEAAqE;gBACrE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;oBAC/C,MAAM,EAAE,QAAQ,CAAC,EAAE;oBACnB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBAChE,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAA;YAC9D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;oBAC3D,KAAK;oBACL,MAAM,EAAE,SAAS,CAAC,EAAE;iBACrB,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAA;IAClB,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,EAAU;QAC9B,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,UAAU,CAAC,CAAA;QACxD,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9B,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAA;QAC1C,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACjD,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,EAAU,EAAE,QAA6B;QAChE,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,aAAa,CAAC,CAAA;QAC3D,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9B,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAA;QAC1C,CAAC;QAED,8BAA8B;QAC9B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC9D,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,qBAAqB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QAC9C,CAAC;QAED,2DAA2D;QAC3D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAClE,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;IAC9D,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,EAAU;QACrC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAA;QAC/D,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9B,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAA;QAC1C,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,EAAE,CAAC,CAAA;IACxD,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,OAA6C;QAClE,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;QACzD,CAAC;QAED,0DAA0D;QAC1D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;QACnE,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAA;IAC9D,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,EAAU;QACjC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,aAAa,CAAC,CAAA;QAC3D,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9B,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAA;QAC1C,CAAC;QAED,wBAAwB;QACxB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC9D,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,qBAAqB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QAC9C,CAAC;QAED,yCAAyC;QACzC,IAAI,aAAa,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;YACrD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,uEAAuE;gBACvE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;oBACrD,MAAM,EAAE,EAAE;oBACV,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBAChE,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAE3C,2BAA2B;QAC3B,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC,CAAA;YACrE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;oBAC1D,KAAK;oBACL,MAAM,EAAE,EAAE;iBACX,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,uBAAuB,CAAC,EAAU;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,yBAAyB,CAAC,CAAA;YAEtE,8BAA8B;YAC9B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YAC1D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAA;YACvD,CAAC;YAED,8BAA8B;YAC9B,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,iBAAiB,CAAC,wDAAwD,EAAE,aAAa,CAAC,CAAA;YACtG,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAA;YAE5F,gCAAgC;YAChC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,EAAE,CAAC,CAAA;YACnE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;YACzD,CAAC;YAED,0DAA0D;YAC1D,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,SAAS,CAAC,QAAQ,EAAE;gBACvE,IAAI,EAAE,SAAS,CAAC,WAAW;aAC5B,CAAC,CAAA;YAEF,6CAA6C;YAC7C,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE;gBAC5E,EAAE,EAAE,SAAS,CAAC,EAAE;gBAChB,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,IAAI,EAAG,SAAS,CAAC,QAAgB,EAAE,IAAI,IAAI,SAAS,CAAC,QAAQ;aAC9D,CAAC,CAAA;YAEF,iCAAiC;YACjC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,CAAC;gBAC9C,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAA;oBACnD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;gBAC5D,CAAC;gBAAC,OAAO,WAAW,EAAE,CAAC;oBACrB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;gBACzF,CAAC;YACH,CAAC;YAED,yBAAyB;YACzB,MAAM,aAAa,GAAwB,EAAE,CAAA;YAC7C,KAAK,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAsC,EAAE,CAAC;gBACtH,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;oBACvB,IAAI,CAAC;wBACH,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,CAAC;4BAC3C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,eAAe,CAC9D,EAAE,EACF,WAAW,EACX,WAAW,CAAC,MAAM,EAClB,WAAW,CAAC,MAAM,CACnB,CAAA;4BAED,wEAAwE;4BACxE,aAAa,CAAC,WAAW,CAAC,GAAG;gCAC3B,KAAK,EAAE,WAAW,CAAC,KAAK;gCACxB,MAAM,EAAE,WAAW,CAAC,MAAM;gCAC1B,MAAM,EAAE,WAAW,CAAC,MAAM;gCAC1B,IAAI,EAAE,WAAW,CAAC,IAAI;6BACvB,CAAA;4BAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE;gCACzC,QAAQ,EAAE,EAAE;gCACZ,WAAW;gCACX,IAAI,EAAE,WAAW;6BAClB,CAAC,CAAA;wBACJ,CAAC;oBACH,CAAC;oBAAC,OAAO,YAAY,EAAE,CAAC;wBACtB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;4BAClD,QAAQ,EAAE,EAAE;4BACZ,WAAW;4BACX,KAAK,EAAE,YAAY,YAAY,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;yBAC9E,CAAC,CAAA;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAED,oCAAoC;YACpC,MAAM,eAAe,GAAG;gBACtB,GAAG,SAAS,CAAC,QAAQ;gBACrB,aAAa,EAAE,aAAa;gBAC5B,kBAAkB,EAAE;oBAClB,KAAK,EAAE,cAAc,CAAC,QAAQ,CAAC,KAAK;oBACpC,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,MAAM;iBACvC;aACF,CAAA;YAED,wBAAwB;YACxB,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,eAAe,CAAC,CAAA;YACvF,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;YACzD,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;gBACzD,EAAE;gBACF,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM;aAChD,CAAC,CAAA;YAEF,OAAO,gBAAgB,CAAA;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE;gBACtD,EAAE;gBACF,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC,CAAA;YACF,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,8BAA8B;IACvB,WAAW,CAAC,OAAe,EAAE,WAAoB;QACtD,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;IACxE,CAAC;IAEM,KAAK,CAAC,iBAAiB;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAA;IACtC,CAAC;IAED,kBAAkB;IACX,4BAA4B,CAAC,IAAU;QAC5C,6CAA6C;QAC7C,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAA;QAC1D,MAAM,OAAO,GAAG,eAAe,EAAE,WAAW,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAA,CAAC,gBAAgB;QACpF,MAAM,YAAY,GAAG,eAAe,EAAE,YAAY,IAAI;YACpD,SAAS;YACT,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe;YACrE,QAAQ;YACR,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW;YACnD,4DAA4D;YAC5D,YAAY,EAAQ,0BAA0B;YAC9C,WAAW,EAAS,8BAA8B;YAClD,WAAW,EAAS,MAAM;YAC1B,YAAY,EAAQ,8BAA8B;YAClD,WAAW,EAAS,MAAM;YAC1B,WAAW,EAAS,MAAM;YAC1B,WAAW,EAAS,kBAAkB;YACtC,aAAa,EAAO,8BAA8B;YAClD,YAAY,EAAQ,OAAO;YAC3B,YAAY,EAAQ,aAAa;YACjC,YAAY;YACZ,iBAAiB;YACjB,oBAAoB;YACpB,yEAAyE;YACzE,OAAO;YACP,YAAY,EAAE,UAAU;YACxB,kBAAkB;SACnB,CAAA;QAED,IAAI,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,OAAO,GAAG,IAAI,GAAG,IAAI,KAAK,EAAE,MAAM,CAAC,CAAA;QACxF,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,iBAAiB,CAAC,0BAA0B,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAA;QAC5E,CAAC;QAED,4CAA4C;QAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtD,IAAI,aAAa,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;gBAC3C,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,SAAS,EAAE,aAAa;aACzB,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,aAAa,CAAA;IACtB,CAAC;IAEM,gBAAgB,CAAC,QAAgB;QACtC,0BAA0B;QAC1B,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QACzC,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;QACpE,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAEhE,yBAAyB;QACzB,IAAI,SAAS,GAAG,IAAI;YAClB,qDAAqD;aACpD,SAAS,CAAC,KAAK,CAAC;aAChB,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAChC,qDAAqD;aACpD,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC;YACjC,sCAAsC;aACrC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;YACpB,kCAAkC;aACjC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;YACxB,wBAAwB;eACrB,MAAM,CAAA;QAEX,wDAAwD;QACxD,MAAM,kBAAkB,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAA;QAElE,0DAA0D;QAC1D,MAAM,aAAa,GAAG,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAA;QACrD,IAAI,SAAS,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;YACrC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;QACnD,CAAC;QAED,OAAO,SAAS,GAAG,kBAAkB,CAAA;IACvC,CAAC;IAEM,gBAAgB,CAAC,QAAgB;QACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACjC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IAC7C,CAAC;CACF"}

package/dist/core/services/mfa-service.d.ts

@@ -0,0 +1,123 @@
+import { TOTPService, EmailOTPService, type TOTPSecretResult } from '../security/mfa/index.js';
+import type { TrokkyEventBus } from '../events/index.js';
+import type { TrokkyLogger } from '../utils/logger.js';
+import type { AuditEvent } from '../core/engine.js';
+import type { MFAMethodType, SettingsConfig, UpdateUserData, User } from '../types/index.js';
+export interface MFARequirement {
+    required: boolean;
+    methods: MFAMethodType[];
+    reason: 'user_enabled' | 'org_required' | 'role_required' | 'not_required';
+    userHasMFA: boolean;
+}
+export interface MFAServiceDependencies {
+    logger: TrokkyLogger;
+    eventBus: TrokkyEventBus;
+    eventsEnabled: boolean;
+    getUser: (id: string) => Promise<User | null>;
+    updateUser: (id: string, userData: UpdateUserData) => Promise<User>;
+    getSettings: () => Promise<SettingsConfig | null>;
+    verifyPassword: (plainPassword: string, hashedPassword: string) => Promise<boolean>;
+    logAuditEvent: (event: AuditEvent) => void;
+}
+/**
+ * Generate a cryptographically secure random secret.
+ * Standalone so TrokkyCore can use it before its services exist.
+ */
+export declare function generateSecureSecret(): string;
+/**
+ * Multi-factor authentication service: TOTP and email OTP enrolment,
+ * verification, backup codes and administrative resets.
+ */
+export declare class MFAService {
+    private readonly deps;
+    constructor(deps: MFAServiceDependencies);
+    /**
+     * Get the TOTP service instance
+     * Creates one with a default issuer (can be overridden via settings)
+     */
+    getTOTPService(issuer?: string): TOTPService;
+    /**
+     * Get the Email OTP service instance
+     */
+    getEmailOTPService(): EmailOTPService;
+    /**
+     * Check if MFA is required for a user
+     * Returns whether MFA is required and available methods
+     */
+    checkMFARequired(userId: string): Promise<MFARequirement>;
+    /**
+     * Initialize TOTP setup for a user
+     * Returns QR code and secret for authenticator app
+     */
+    initializeTOTPSetup(userId: string): Promise<TOTPSecretResult>;
+    /**
+     * Verify and enable TOTP for a user
+     * Must be called after initializeTOTPSetup with a valid code from authenticator
+     */
+    verifyAndEnableTOTP(userId: string, code: string): Promise<{
+        enabled: boolean;
+        backupCodes?: string[];
+    }>;
+    /**
+     * Initialize Email OTP setup for a user
+     * Sends verification code to user's email
+     */
+    initializeEmailOTPSetup(userId: string): Promise<{
+        expiresIn: number;
+    }>;
+    /**
+     * Verify and enable Email OTP for a user
+     */
+    verifyAndEnableEmailOTP(userId: string, code: string): Promise<{
+        enabled: boolean;
+        backupCodes?: string[];
+    }>;
+    /**
+     * Verify MFA code during login
+     * Supports TOTP, email, and backup codes
+     */
+    verifyMFACode(userId: string, code: string, method: 'totp' | 'email' | 'backup'): Promise<boolean>;
+    /**
+     * Send Email OTP for MFA verification during login
+     */
+    sendMFAEmailOTP(userId: string): Promise<{
+        expiresIn: number;
+    }>;
+    /**
+     * Disable MFA method for a user
+     * Requires password verification
+     */
+    disableMFAMethod(userId: string, method: MFAMethodType, password: string): Promise<void>;
+    /**
+     * Disable all MFA for a user (removes all methods and backup codes)
+     * Requires password verification
+     */
+    disableAllMFA(userId: string, password: string): Promise<void>;
+    /**
+     * Regenerate backup codes for a user
+     * Requires password verification
+     */
+    regenerateBackupCodes(userId: string, password: string): Promise<string[]>;
+    /**
+     * Admin: Reset MFA for a user (emergency recovery)
+     * Removes all MFA configuration
+     */
+    adminResetUserMFA(adminUserId: string, targetUserId: string): Promise<void>;
+    /**
+     * Get MFA status for a user
+     */
+    getMFAStatus(userId: string): Promise<{
+        enabled: boolean;
+        methods: Array<{
+            type: MFAMethodType;
+            enabled: boolean;
+            verified: boolean;
+            verifiedAt?: string;
+        }>;
+        backupCodesRemaining: number;
+        backupCodesGeneratedAt?: string;
+        trustedDevicesCount: number;
+    }>;
+    generateSecureSecret(): string;
+}
+//# sourceMappingURL=mfa-service.d.ts.map

package/dist/core/services/mfa-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa-service.d.ts","sourceRoot":"","sources":["../../../src/core/services/mfa-service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,gBAAgB,EAAuB,MAAM,0BAA0B,CAAA;AACnH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,KAAK,EAEV,aAAa,EACb,cAAc,EACd,cAAc,EACd,IAAI,EACL,MAAM,mBAAmB,CAAA;AAE1B,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,OAAO,CAAA;IACjB,OAAO,EAAE,aAAa,EAAE,CAAA;IACxB,MAAM,EAAE,cAAc,GAAG,cAAc,GAAG,eAAe,GAAG,cAAc,CAAA;IAC1E,UAAU,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,YAAY,CAAA;IACpB,QAAQ,EAAE,cAAc,CAAA;IACxB,aAAa,EAAE,OAAO,CAAA;IACtB,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;IAC7C,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE,WAAW,EAAE,MAAM,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAA;IACjD,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACnF,aAAa,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;CAC3C;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAa7C;AAED;;;GAGG;AACH,qBAAa,UAAU;IACT,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,sBAAsB;IAEzD;;;OAGG;IACI,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,WAAW;IAKnD;;OAEG;IACI,kBAAkB,IAAI,eAAe;IAQ5C;;;OAGG;IACU,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAyDtE;;;OAGG;IACU,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAoC3E;;;OAGG;IACU,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QACtE,OAAO,EAAE,OAAO,CAAA;QAChB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;KACvB,CAAC;IAuEF;;;OAGG;IACU,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAgDpF;;OAEG;IACU,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAC1E,OAAO,EAAE,OAAO,CAAA;QAChB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;KACvB,CAAC;IAiFF;;;OAGG;IACU,aAAa,CACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAClC,OAAO,CAAC,OAAO,CAAC;IA4EnB;;OAEG;IACU,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAmD5E;;;OAGG;IACU,gBAAgB,CAC3B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC;IAkDhB;;;OAGG;IACU,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA6C3E;;;OAGG;IACU,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAkCvF;;;OAGG;IACU,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2CxF;;OAEG;IACU,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QACjD,OAAO,EAAE,OAAO,CAAA;QAChB,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,aAAa,CAAC;YAAC,OAAO,EAAE,OAAO,CAAC;YAAC,QAAQ,EAAE,OAAO,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;QACjG,oBAAoB,EAAE,MAAM,CAAA;QAC5B,sBAAsB,CAAC,EAAE,MAAM,CAAA;QAC/B,mBAAmB,EAAE,MAAM,CAAA;KAC5B,CAAC;IAwBK,oBAAoB,IAAI,MAAM;CAGtC"}