@veruna/api-contracts 19.1.0 → 20.1.0

package/build/v1/auth/commands/login-code-verify.command.js

@@ -7,8 +7,10 @@ const rest_api_1 = require("../../../rest-api");
 const http_method_enum_1 = require("../../../shared/http-method.enum");
 var AuthLoginCodeVerifyCommand;
 (function (AuthLoginCodeVerifyCommand) {
+    // Request/Response — response mirrors signin so the frontend reuses its login handler.
     AuthLoginCodeVerifyCommand.Request = login_code_verify_schema_1.LoginCodeVerifyRequestSchema;
     AuthLoginCodeVerifyCommand.Response = auth_response_schema_1.AuthResponseSchema;
+    // URL/Method
     AuthLoginCodeVerifyCommand.URL = rest_api_1.REST_API.V1.AUTH.REG.LOGIN_CODE_VERIFY;
     AuthLoginCodeVerifyCommand.METHOD = http_method_enum_1.HttpMethod.POST;
 })(AuthLoginCodeVerifyCommand || (exports.AuthLoginCodeVerifyCommand = AuthLoginCodeVerifyCommand = {}));

package/build/v1/auth/commands/login-code-verify.command.js.map

@@ -1 +1 @@
-{"version":3,"file":"login-code-verify.command.js","sourceRoot":"","sources":["../../../../v1/auth/commands/login-code-verify.command.ts"],"names":[],"mappings":";;;AACA,kFAAmF;AACnF,0EAAqE;AACrE,gDAA6C;AAC7C,uEAA8D;AAE9D,IAAiB,0BAA0B,CAY1C;AAZD,WAAiB,0BAA0B;IAE1B,kCAAO,GAAG,uDAA4B,CAAC;IACvC,mCAAQ,GAAG,yCAAkB,CAAC;IAG9B,8BAAG,GAAG,mBAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC7C,iCAAM,GAAG,6BAAU,CAAC,IAAI,CAAC;AAK1C,CAAC,EAZgB,0BAA0B,0CAA1B,0BAA0B,QAY1C"}
+{"version":3,"file":"login-code-verify.command.js","sourceRoot":"","sources":["../../../../v1/auth/commands/login-code-verify.command.ts"],"names":[],"mappings":";;;AACA,kFAAmF;AACnF,0EAAqE;AACrE,gDAA6C;AAC7C,uEAA8D;AAE9D,IAAiB,0BAA0B,CAY1C;AAZD,WAAiB,0BAA0B;IACvC,uFAAuF;IAC1E,kCAAO,GAAG,uDAA4B,CAAC;IACvC,mCAAQ,GAAG,yCAAkB,CAAC;IAE3C,aAAa;IACA,8BAAG,GAAG,mBAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC7C,iCAAM,GAAG,6BAAU,CAAC,IAAI,CAAC;AAK1C,CAAC,EAZgB,0BAA0B,0CAA1B,0BAA0B,QAY1C"}

package/build/v1/auth/commands/logout-all.command.js

@@ -6,10 +6,12 @@ const rest_api_1 = require("../../../rest-api");
 const http_method_enum_1 = require("../../../shared/http-method.enum");
 var AuthLogoutAllCommand;
 (function (AuthLogoutAllCommand) {
+    // Request/Response
     AuthLogoutAllCommand.Request = zod_1.z.object({});
     AuthLogoutAllCommand.Response = zod_1.z.object({
         sessionIds: zod_1.z.array(zod_1.z.string().uuid()),
     });
+    // URL/Method
     AuthLogoutAllCommand.URL = rest_api_1.REST_API.V1.AUTH.REG.LOGOUT_ALL;
     AuthLogoutAllCommand.METHOD = http_method_enum_1.HttpMethod.POST;
 })(AuthLogoutAllCommand || (exports.AuthLogoutAllCommand = AuthLogoutAllCommand = {}));

package/build/v1/auth/commands/logout-all.command.js.map

@@ -1 +1 @@
-{"version":3,"file":"logout-all.command.js","sourceRoot":"","sources":["../../../../v1/auth/commands/logout-all.command.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,gDAA6C;AAC7C,uEAA8D;AAE9D,IAAiB,oBAAoB,CAcpC;AAdD,WAAiB,oBAAoB;IAEpB,4BAAO,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvB,6BAAQ,GAAG,OAAC,CAAC,MAAM,CAAC;QAC7B,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;KACzC,CAAC,CAAC;IAGU,wBAAG,GAAG,mBAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;IACtC,2BAAM,GAAG,6BAAU,CAAC,IAAI,CAAC;AAK1C,CAAC,EAdgB,oBAAoB,oCAApB,oBAAoB,QAcpC"}
+{"version":3,"file":"logout-all.command.js","sourceRoot":"","sources":["../../../../v1/auth/commands/logout-all.command.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,gDAA6C;AAC7C,uEAA8D;AAE9D,IAAiB,oBAAoB,CAcpC;AAdD,WAAiB,oBAAoB;IACjC,mBAAmB;IACN,4BAAO,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvB,6BAAQ,GAAG,OAAC,CAAC,MAAM,CAAC;QAC7B,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;KACzC,CAAC,CAAC;IAEH,aAAa;IACA,wBAAG,GAAG,mBAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;IACtC,2BAAM,GAAG,6BAAU,CAAC,IAAI,CAAC;AAK1C,CAAC,EAdgB,oBAAoB,oCAApB,oBAAoB,QAcpC"}

package/build/v1/auth/commands/logout.command.js

@@ -6,10 +6,12 @@ const rest_api_1 = require("../../../rest-api");
 const http_method_enum_1 = require("../../../shared/http-method.enum");
 var AuthLogoutCommand;
 (function (AuthLogoutCommand) {
+    // Request/Response
     AuthLogoutCommand.Request = zod_1.z.object({});
     AuthLogoutCommand.Response = zod_1.z.object({
         sessionId: zod_1.z.string().uuid(),
     });
+    // URL/Method
     AuthLogoutCommand.URL = rest_api_1.REST_API.V1.AUTH.REG.LOGOUT;
     AuthLogoutCommand.METHOD = http_method_enum_1.HttpMethod.POST;
 })(AuthLogoutCommand || (exports.AuthLogoutCommand = AuthLogoutCommand = {}));

package/build/v1/auth/commands/logout.command.js.map

@@ -1 +1 @@
-{"version":3,"file":"logout.command.js","sourceRoot":"","sources":["../../../../v1/auth/commands/logout.command.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,gDAA6C;AAC7C,uEAA8D;AAE9D,IAAiB,iBAAiB,CAcjC;AAdD,WAAiB,iBAAiB;IAEjB,yBAAO,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvB,0BAAQ,GAAG,OAAC,CAAC,MAAM,CAAC;QAC7B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;KAC/B,CAAC,CAAC;IAGU,qBAAG,GAAG,mBAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IAClC,wBAAM,GAAG,6BAAU,CAAC,IAAI,CAAC;AAK1C,CAAC,EAdgB,iBAAiB,iCAAjB,iBAAiB,QAcjC"}
+{"version":3,"file":"logout.command.js","sourceRoot":"","sources":["../../../../v1/auth/commands/logout.command.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,gDAA6C;AAC7C,uEAA8D;AAE9D,IAAiB,iBAAiB,CAcjC;AAdD,WAAiB,iBAAiB;IAC9B,mBAAmB;IACN,yBAAO,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvB,0BAAQ,GAAG,OAAC,CAAC,MAAM,CAAC;QAC7B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;KAC/B,CAAC,CAAC;IAEH,aAAa;IACA,qBAAG,GAAG,mBAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IAClC,wBAAM,GAAG,6BAAU,CAAC,IAAI,CAAC;AAK1C,CAAC,EAdgB,iBAAiB,iCAAjB,iBAAiB,QAcjC"}

package/build/v1/auth/commands/signin.command.js

@@ -7,8 +7,10 @@ const rest_api_1 = require("../../../rest-api");
 const http_method_enum_1 = require("../../../shared/http-method.enum");
 var AuthSignInCommand;
 (function (AuthSignInCommand) {
+    // Request/Response
     AuthSignInCommand.Request = signin_request_schema_1.SignInRequestSchema;
     AuthSignInCommand.Response = auth_response_schema_1.AuthResponseSchema;
+    // URL/Method
     AuthSignInCommand.URL = rest_api_1.REST_API.V1.AUTH.REG.SIGNIN;
     AuthSignInCommand.METHOD = http_method_enum_1.HttpMethod.POST;
 })(AuthSignInCommand || (exports.AuthSignInCommand = AuthSignInCommand = {}));

package/build/v1/auth/commands/signin.command.js.map

@@ -1 +1 @@
-{"version":3,"file":"signin.command.js","sourceRoot":"","sources":["../../../../v1/auth/commands/signin.command.ts"],"names":[],"mappings":";;;AACA,4EAAuE;AACvE,0EAAqE;AACrE,gDAA6C;AAC7C,uEAA8D;AAE9D,IAAiB,iBAAiB,CAYjC;AAZD,WAAiB,iBAAiB;IAEnB,yBAAO,GAAG,2CAAmB,CAAC;IAC9B,0BAAQ,GAAG,yCAAkB,CAAC;IAG9B,qBAAG,GAAG,mBAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IAClC,wBAAM,GAAG,6BAAU,CAAC,IAAI,CAAC;AAKxC,CAAC,EAZgB,iBAAiB,iCAAjB,iBAAiB,QAYjC"}
+{"version":3,"file":"signin.command.js","sourceRoot":"","sources":["../../../../v1/auth/commands/signin.command.ts"],"names":[],"mappings":";;;AACA,4EAAuE;AACvE,0EAAqE;AACrE,gDAA6C;AAC7C,uEAA8D;AAE9D,IAAiB,iBAAiB,CAYjC;AAZD,WAAiB,iBAAiB;IAChC,mBAAmB;IACN,yBAAO,GAAG,2CAAmB,CAAC;IAC9B,0BAAQ,GAAG,yCAAkB,CAAC;IAE3C,aAAa;IACA,qBAAG,GAAG,mBAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IAClC,wBAAM,GAAG,6BAAU,CAAC,IAAI,CAAC;AAKxC,CAAC,EAZgB,iBAAiB,iCAAjB,iBAAiB,QAYjC"}

package/build/v1/auth/commands/signup.command.js

@@ -7,8 +7,10 @@ const rest_api_1 = require("../../../rest-api");
 const http_method_enum_1 = require("../../../shared/http-method.enum");
 var AuthSignupCommand;
 (function (AuthSignupCommand) {
+    // Request/Response
     AuthSignupCommand.Request = schemas_1.SignUpRequestSchema;
     AuthSignupCommand.Response = schemas_2.SignupResponseSchema;
+    // URL/Method
     AuthSignupCommand.URL = rest_api_1.REST_API.V1.AUTH.REG.SIGNUP;
     AuthSignupCommand.METHOD = http_method_enum_1.HttpMethod.POST;
 })(AuthSignupCommand || (exports.AuthSignupCommand = AuthSignupCommand = {}));

package/build/v1/auth/commands/signup.command.js.map

@@ -1 +1 @@
-{"version":3,"file":"signup.command.js","sourceRoot":"","sources":["../../../../v1/auth/commands/signup.command.ts"],"names":[],"mappings":";;;AACA,wCAAiD;AACjD,wCAAkD;AAClD,gDAA6C;AAC7C,uEAA8D;AAE9D,IAAiB,iBAAiB,CAYjC;AAZD,WAAiB,iBAAiB;IAEjB,yBAAO,GAAG,6BAAmB,CAAC;IAC9B,0BAAQ,GAAG,8BAAoB,CAAC;IAGhC,qBAAG,GAAG,mBAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IAClC,wBAAM,GAAG,6BAAU,CAAC,IAAI,CAAC;AAK1C,CAAC,EAZgB,iBAAiB,iCAAjB,iBAAiB,QAYjC"}
+{"version":3,"file":"signup.command.js","sourceRoot":"","sources":["../../../../v1/auth/commands/signup.command.ts"],"names":[],"mappings":";;;AACA,wCAAiD;AACjD,wCAAkD;AAClD,gDAA6C;AAC7C,uEAA8D;AAE9D,IAAiB,iBAAiB,CAYjC;AAZD,WAAiB,iBAAiB;IAC9B,mBAAmB;IACN,yBAAO,GAAG,6BAAmB,CAAC;IAC9B,0BAAQ,GAAG,8BAAoB,CAAC;IAE7C,aAAa;IACA,qBAAG,GAAG,mBAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IAClC,wBAAM,GAAG,6BAAU,CAAC,IAAI,CAAC;AAK1C,CAAC,EAZgB,iBAAiB,iCAAjB,iBAAiB,QAYjC"}

package/build/v1/auth/index.js

@@ -20,6 +20,7 @@ __exportStar(require("./auth.errors"), exports);
 __exportStar(require("./commands"), exports);
 __exportStar(require("./queries"), exports);
 __exportStar(require("./admin"), exports);
+// Re-export from centralized locations
 var controllers_1 = require("../../controllers");
 Object.defineProperty(exports, "AUTH_CONTROLLER", { enumerable: true, get: function () { return controllers_1.AUTH_CONTROLLER; } });
 var routes_1 = require("../../routes");

package/build/v1/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../v1/auth/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,4CAA0B;AAC1B,gDAA8B;AAC9B,6CAA2B;AAC3B,4CAA0B;AAC1B,0CAAwB;AAExB,iDAAoD;AAA3C,8GAAA,eAAe,OAAA;AACxB,uCAA2C;AAAlC,qGAAA,WAAW,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../v1/auth/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,4CAA0B;AAC1B,gDAA8B;AAC9B,6CAA2B;AAC3B,4CAA0B;AAC1B,0CAAwB;AACxB,uCAAuC;AACvC,iDAAoD;AAA3C,8GAAA,eAAe,OAAA;AACxB,uCAA2C;AAAlC,qGAAA,WAAW,OAAA"}

package/build/v1/auth/queries/get-sessions.query.js

@@ -7,8 +7,10 @@ const rest_api_1 = require("../../../rest-api");
 const http_method_enum_1 = require("../../../shared/http-method.enum");
 var AuthGetSessionsQuery;
 (function (AuthGetSessionsQuery) {
+    // Request/Response
     AuthGetSessionsQuery.Request = zod_1.z.object({});
     AuthGetSessionsQuery.Response = auth_response_schema_1.SessionsListResponseSchema;
+    // URL/Method
     AuthGetSessionsQuery.URL = rest_api_1.REST_API.V1.AUTH.REG.SESSIONS;
     AuthGetSessionsQuery.METHOD = http_method_enum_1.HttpMethod.GET;
 })(AuthGetSessionsQuery || (exports.AuthGetSessionsQuery = AuthGetSessionsQuery = {}));

package/build/v1/auth/queries/get-sessions.query.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-sessions.query.js","sourceRoot":"","sources":["../../../../v1/auth/queries/get-sessions.query.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,0EAA6E;AAC7E,gDAA6C;AAC7C,uEAA8D;AAE9D,IAAiB,oBAAoB,CAYpC;AAZD,WAAiB,oBAAoB;IAEtB,4BAAO,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvB,6BAAQ,GAAG,iDAA0B,CAAC;IAGtC,wBAAG,GAAG,mBAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;IACpC,2BAAM,GAAG,6BAAU,CAAC,GAAG,CAAC;AAKvC,CAAC,EAZgB,oBAAoB,oCAApB,oBAAoB,QAYpC"}
+{"version":3,"file":"get-sessions.query.js","sourceRoot":"","sources":["../../../../v1/auth/queries/get-sessions.query.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,0EAA6E;AAC7E,gDAA6C;AAC7C,uEAA8D;AAE9D,IAAiB,oBAAoB,CAYpC;AAZD,WAAiB,oBAAoB;IACnC,mBAAmB;IACN,4BAAO,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvB,6BAAQ,GAAG,iDAA0B,CAAC;IAEnD,aAAa;IACA,wBAAG,GAAG,mBAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;IACpC,2BAAM,GAAG,6BAAU,CAAC,GAAG,CAAC;AAKvC,CAAC,EAZgB,oBAAoB,oCAApB,oBAAoB,QAYpC"}

package/build/v1/auth/schemas/auth-response.schema.d.ts

@@ -1,5 +1,8 @@
 import { z } from 'zod';
 import { TrustStatus } from '../../antifraud/enums/trust-status.enum';
+/**
+ * Auth Response Schema (signin/login — no emailStatus)
+ */
 export declare const AuthResponseSchema: z.ZodObject<{
     user: z.ZodObject<{
         uuid: z.ZodString;
@@ -21,6 +24,11 @@ export declare const AuthResponseSchema: z.ZodObject<{
         lastUsedAt: z.ZodString;
     }, z.core.$strip>;
 }, z.core.$strip>;
+/**
+ * Signup Response Schema — includes emailStatus block and optional scoring state.
+ * trustStatus is omitted when antifraud is disabled; PENDING_REVIEW means the
+ * frontend shows the "проверяем" status until the review resolves.
+ */
 export declare const SignupResponseSchema: z.ZodObject<{
     user: z.ZodObject<{
         uuid: z.ZodString;
@@ -49,6 +57,9 @@ export declare const SignupResponseSchema: z.ZodObject<{
     }, z.core.$strip>;
     trustStatus: z.ZodOptional<z.ZodEnum<typeof TrustStatus>>;
 }, z.core.$strip>;
+/**
+ * Sessions List Response Schema
+ */
 export declare const SessionsListResponseSchema: z.ZodObject<{
     sessions: z.ZodArray<z.ZodObject<{
         uuid: z.ZodString;

package/build/v1/auth/schemas/auth-response.schema.js

@@ -6,11 +6,19 @@ const user_response_schema_1 = require("../../users/schemas/user-response.schema
 const session_response_schema_1 = require("./session-response.schema");
 const email_status_schema_1 = require("../../antifraud/schemas/email-status.schema");
 const trust_status_enum_1 = require("../../antifraud/enums/trust-status.enum");
+/**
+ * Auth Response Schema (signin/login — no emailStatus)
+ */
 exports.AuthResponseSchema = zod_1.z.object({
     user: user_response_schema_1.UserResponseSchema,
     accessToken: zod_1.z.string(),
     session: session_response_schema_1.SessionResponseSchema,
 });
+/**
+ * Signup Response Schema — includes emailStatus block and optional scoring state.
+ * trustStatus is omitted when antifraud is disabled; PENDING_REVIEW means the
+ * frontend shows the "проверяем" status until the review resolves.
+ */
 exports.SignupResponseSchema = zod_1.z.object({
     user: user_response_schema_1.UserResponseSchema,
     accessToken: zod_1.z.string(),
@@ -18,6 +26,9 @@ exports.SignupResponseSchema = zod_1.z.object({
     emailStatus: email_status_schema_1.EmailStatusSchema,
     trustStatus: zod_1.z.enum(trust_status_enum_1.TrustStatus).optional(),
 });
+/**
+ * Sessions List Response Schema
+ */
 exports.SessionsListResponseSchema = zod_1.z.object({
     sessions: zod_1.z.array(session_response_schema_1.SessionResponseSchema),
 });

package/build/v1/auth/schemas/auth-response.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-response.schema.js","sourceRoot":"","sources":["../../../../v1/auth/schemas/auth-response.schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,mFAA8E;AAC9E,uEAAkE;AAClE,qFAAgF;AAChF,+EAAsE;AAKzD,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,yCAAkB;IACxB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;IACvB,OAAO,EAAE,+CAAqB;CAC/B,CAAC,CAAC;AAOU,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,yCAAkB;IACxB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;IACvB,OAAO,EAAE,+CAAqB;IAC9B,WAAW,EAAE,uCAAiB;IAC9B,WAAW,EAAE,OAAC,CAAC,IAAI,CAAC,+BAAW,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAKU,QAAA,0BAA0B,GAAG,OAAC,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,+CAAqB,CAAC;CACzC,CAAC,CAAC"}
+{"version":3,"file":"auth-response.schema.js","sourceRoot":"","sources":["../../../../v1/auth/schemas/auth-response.schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,mFAA8E;AAC9E,uEAAkE;AAClE,qFAAgF;AAChF,+EAAsE;AAEtE;;GAEG;AACU,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,yCAAkB;IACxB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;IACvB,OAAO,EAAE,+CAAqB;CAC/B,CAAC,CAAC;AAEH;;;;GAIG;AACU,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,yCAAkB;IACxB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;IACvB,OAAO,EAAE,+CAAqB;IAC9B,WAAW,EAAE,uCAAiB;IAC9B,WAAW,EAAE,OAAC,CAAC,IAAI,CAAC,+BAAW,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,0BAA0B,GAAG,OAAC,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,+CAAqB,CAAC;CACzC,CAAC,CAAC"}

package/build/v1/auth/schemas/express-signup-request.schema.d.ts

@@ -1,4 +1,10 @@
 import { z } from 'zod';
+/**
+ * Express (passwordless) signup request — fast-buy flow. Email only; the account
+ * is created without a password (set later) and a session is returned immediately.
+ *
+ * Error messages: ExpressSignupRequest.{field}.{rule}
+ */
 export declare const ExpressSignupRequestSchema: z.ZodObject<{
     email: z.ZodString;
     marketingConsent: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;

package/build/v1/auth/schemas/express-signup-request.schema.js

@@ -3,6 +3,12 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ExpressSignupRequestSchema = void 0;
 const zod_1 = require("zod");
 const common_schemas_1 = require("../../../shared/common-schemas");
+/**
+ * Express (passwordless) signup request — fast-buy flow. Email only; the account
+ * is created without a password (set later) and a session is returned immediately.
+ *
+ * Error messages: ExpressSignupRequest.{field}.{rule}
+ */
 exports.ExpressSignupRequestSchema = zod_1.z.object({
     email: (0, common_schemas_1.normalizedEmailSchema)('ExpressSignupRequest.email.required', 'ExpressSignupRequest.email.invalid'),
     marketingConsent: zod_1.z

package/build/v1/auth/schemas/express-signup-request.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"express-signup-request.schema.js","sourceRoot":"","sources":["../../../../v1/auth/schemas/express-signup-request.schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,mEAAuE;AAQ1D,QAAA,0BAA0B,GAAG,OAAC,CAAC,MAAM,CAAC;IAC/C,KAAK,EAAE,IAAA,sCAAqB,EACxB,qCAAqC,EACrC,oCAAoC,CACvC;IACD,gBAAgB,EAAE,OAAC;SACd,OAAO,CAAC,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC;SACnE,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;CACrB,CAAC,CAAC"}
+{"version":3,"file":"express-signup-request.schema.js","sourceRoot":"","sources":["../../../../v1/auth/schemas/express-signup-request.schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,mEAAuE;AAEvE;;;;;GAKG;AACU,QAAA,0BAA0B,GAAG,OAAC,CAAC,MAAM,CAAC;IAC/C,KAAK,EAAE,IAAA,sCAAqB,EACxB,qCAAqC,EACrC,oCAAoC,CACvC;IACD,gBAAgB,EAAE,OAAC;SACd,OAAO,CAAC,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC;SACnE,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;CACrB,CAAC,CAAC"}

package/build/v1/auth/schemas/login-code-request.schema.d.ts

@@ -1,7 +1,19 @@
 import { z } from 'zod';
+/**
+ * Login-by-code request (step 1): user asks for a one-time code to be sent to
+ * their email. Response is intentionally uniform — it never reveals whether the
+ * email belongs to an existing account (anti-enumeration).
+ *
+ * Error messages: LoginCodeRequest.{field}.{rule}
+ */
 export declare const LoginCodeRequestSchema: z.ZodObject<{
     email: z.ZodString;
 }, z.core.$strip>;
+/**
+ * Opaque correlation id for the request — generated uniformly on every call
+ * (existing account or not), so it carries no account-existence signal. Useful
+ * for client-side correlation / support, not required to verify the code.
+ */
 export declare const LoginCodeRequestResponseSchema: z.ZodObject<{
     requestId: z.ZodString;
 }, z.core.$strip>;

package/build/v1/auth/schemas/login-code-request.schema.js

@@ -3,9 +3,21 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.LoginCodeRequestResponseSchema = exports.LoginCodeRequestSchema = void 0;
 const zod_1 = require("zod");
 const common_schemas_1 = require("../../../shared/common-schemas");
+/**
+ * Login-by-code request (step 1): user asks for a one-time code to be sent to
+ * their email. Response is intentionally uniform — it never reveals whether the
+ * email belongs to an existing account (anti-enumeration).
+ *
+ * Error messages: LoginCodeRequest.{field}.{rule}
+ */
 exports.LoginCodeRequestSchema = zod_1.z.object({
     email: (0, common_schemas_1.normalizedEmailSchema)('LoginCodeRequest.email.required', 'LoginCodeRequest.email.invalid'),
 });
+/**
+ * Opaque correlation id for the request — generated uniformly on every call
+ * (existing account or not), so it carries no account-existence signal. Useful
+ * for client-side correlation / support, not required to verify the code.
+ */
 exports.LoginCodeRequestResponseSchema = zod_1.z.object({
     requestId: zod_1.z.string().uuid(),
 });

package/build/v1/auth/schemas/login-code-request.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"login-code-request.schema.js","sourceRoot":"","sources":["../../../../v1/auth/schemas/login-code-request.schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,mEAAuE;AAS1D,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,IAAA,sCAAqB,EACxB,iCAAiC,EACjC,gCAAgC,CACnC;CACJ,CAAC,CAAC;AAOU,QAAA,8BAA8B,GAAG,OAAC,CAAC,MAAM,CAAC;IACnD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;CAC/B,CAAC,CAAC"}
+{"version":3,"file":"login-code-request.schema.js","sourceRoot":"","sources":["../../../../v1/auth/schemas/login-code-request.schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,mEAAuE;AAEvE;;;;;;GAMG;AACU,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,IAAA,sCAAqB,EACxB,iCAAiC,EACjC,gCAAgC,CACnC;CACJ,CAAC,CAAC;AAEH;;;;GAIG;AACU,QAAA,8BAA8B,GAAG,OAAC,CAAC,MAAM,CAAC;IACnD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;CAC/B,CAAC,CAAC"}

package/build/v1/auth/schemas/login-code-verify.schema.d.ts

@@ -1,4 +1,11 @@
 import { z } from 'zod';
+/**
+ * Login-by-code verify (step 2): user submits the 6-digit code they received.
+ * On success the response mirrors signin (AuthResponseSchema) so the frontend
+ * reuses its existing login handler 1:1.
+ *
+ * Error messages: LoginCodeVerifyRequest.{field}.{rule}
+ */
 export declare const LoginCodeVerifyRequestSchema: z.ZodObject<{
     email: z.ZodString;
     code: z.ZodString;

package/build/v1/auth/schemas/login-code-verify.schema.js

@@ -3,6 +3,13 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.LoginCodeVerifyRequestSchema = void 0;
 const zod_1 = require("zod");
 const common_schemas_1 = require("../../../shared/common-schemas");
+/**
+ * Login-by-code verify (step 2): user submits the 6-digit code they received.
+ * On success the response mirrors signin (AuthResponseSchema) so the frontend
+ * reuses its existing login handler 1:1.
+ *
+ * Error messages: LoginCodeVerifyRequest.{field}.{rule}
+ */
 exports.LoginCodeVerifyRequestSchema = zod_1.z.object({
     email: (0, common_schemas_1.normalizedEmailSchema)('LoginCodeVerifyRequest.email.required', 'LoginCodeVerifyRequest.email.invalid'),
     code: zod_1.z

package/build/v1/auth/schemas/login-code-verify.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"login-code-verify.schema.js","sourceRoot":"","sources":["../../../../v1/auth/schemas/login-code-verify.schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,mEAAuE;AAS1D,QAAA,4BAA4B,GAAG,OAAC,CAAC,MAAM,CAAC;IACjD,KAAK,EAAE,IAAA,sCAAqB,EACxB,uCAAuC,EACvC,sCAAsC,CACzC;IACD,IAAI,EAAE,OAAC;SACF,MAAM,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;SACzD,KAAK,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;CAC5E,CAAC,CAAC"}
+{"version":3,"file":"login-code-verify.schema.js","sourceRoot":"","sources":["../../../../v1/auth/schemas/login-code-verify.schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,mEAAuE;AAEvE;;;;;;GAMG;AACU,QAAA,4BAA4B,GAAG,OAAC,CAAC,MAAM,CAAC;IACjD,KAAK,EAAE,IAAA,sCAAqB,EACxB,uCAAuC,EACvC,sCAAsC,CACzC;IACD,IAAI,EAAE,OAAC;SACF,MAAM,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;SACzD,KAAK,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;CAC5E,CAAC,CAAC"}

package/build/v1/auth/schemas/session-response.schema.d.ts

@@ -1,5 +1,9 @@
 import { z } from 'zod';
 import { DeviceType } from '../../../shared';
+/**
+ * Session Response Schema
+ * Error messages are in locales (en.ts, ru.ts)
+ */
 export declare const SessionResponseSchema: z.ZodObject<{
     uuid: z.ZodString;
     deviceName: z.ZodString;

package/build/v1/auth/schemas/session-response.schema.js

@@ -3,6 +3,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.SessionResponseSchema = void 0;
 const zod_1 = require("zod");
 const shared_1 = require("../../../shared");
+/**
+ * Session Response Schema
+ * Error messages are in locales (en.ts, ru.ts)
+ */
 exports.SessionResponseSchema = zod_1.z.object({
     uuid: zod_1.z.string().regex(shared_1.UUID_REGEX),
     deviceName: zod_1.z.string(),

package/build/v1/auth/schemas/session-response.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-response.schema.js","sourceRoot":"","sources":["../../../../v1/auth/schemas/session-response.schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,4CAAyE;AAM5D,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAU,CAAC;IAClC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,OAAC,CAAC,IAAI,CAAC,mBAAU,CAAC;IAC9B,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE;IACtB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAc,CAAC;IAC3C,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAc,CAAC;CAC/C,CAAC,CAAC"}
+{"version":3,"file":"session-response.schema.js","sourceRoot":"","sources":["../../../../v1/auth/schemas/session-response.schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,4CAAyE;AAEzE;;;GAGG;AACU,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAU,CAAC;IAClC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,OAAC,CAAC,IAAI,CAAC,mBAAU,CAAC;IAC9B,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE;IACtB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAc,CAAC;IAC3C,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAc,CAAC;CAC/C,CAAC,CAAC"}

package/build/v1/auth/schemas/signin-request.schema.d.ts

@@ -1,4 +1,8 @@
 import { z } from 'zod';
+/**
+ * SignIn Request Schema
+ * Error messages: SignInRequest.{field}.{rule}
+ */
 export declare const SignInRequestSchema: z.ZodObject<{
     email: z.ZodString;
     password: z.ZodString;

package/build/v1/auth/schemas/signin-request.schema.js

@@ -3,6 +3,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.SignInRequestSchema = void 0;
 const zod_1 = require("zod");
 const common_schemas_1 = require("../../../shared/common-schemas");
+/**
+ * SignIn Request Schema
+ * Error messages: SignInRequest.{field}.{rule}
+ */
 exports.SignInRequestSchema = zod_1.z.object({
     email: (0, common_schemas_1.normalizedEmailSchema)('SignInRequest.email.required', 'SignInRequest.email.invalid'),
     password: zod_1.z

package/build/v1/auth/schemas/signin-request.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"signin-request.schema.js","sourceRoot":"","sources":["../../../../v1/auth/schemas/signin-request.schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,mEAAuE;AAM1D,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,IAAA,sCAAqB,EAAC,8BAA8B,EAAE,6BAA6B,CAAC;IAC3F,QAAQ,EAAE,OAAC;SACN,MAAM,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;SACpD,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;CACzD,CAAC,CAAC"}
+{"version":3,"file":"signin-request.schema.js","sourceRoot":"","sources":["../../../../v1/auth/schemas/signin-request.schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,mEAAuE;AAEvE;;;GAGG;AACU,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,IAAA,sCAAqB,EAAC,8BAA8B,EAAE,6BAA6B,CAAC;IAC3F,QAAQ,EAAE,OAAC;SACN,MAAM,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;SACpD,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;CACzD,CAAC,CAAC"}

package/build/v1/auth/schemas/signup-request.schema.d.ts

@@ -1,4 +1,8 @@
 import { z } from 'zod';
+/**
+ * Sign Up Request Schema
+ * Error messages: SignUpRequest.{field}.{rule}
+ */
 export declare const SignUpRequestSchema: z.ZodObject<{
     email: z.ZodString;
     password: z.ZodString;

package/build/v1/auth/schemas/signup-request.schema.js

@@ -3,6 +3,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.SignUpRequestSchema = void 0;
 const zod_1 = require("zod");
 const common_schemas_1 = require("../../../shared/common-schemas");
+/**
+ * Sign Up Request Schema
+ * Error messages: SignUpRequest.{field}.{rule}
+ */
 exports.SignUpRequestSchema = zod_1.z.object({
     email: (0, common_schemas_1.normalizedEmailSchema)('SignUpRequest.email.required', 'SignUpRequest.email.invalid'),
     password: zod_1.z

package/build/v1/auth/schemas/signup-request.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"signup-request.schema.js","sourceRoot":"","sources":["../../../../v1/auth/schemas/signup-request.schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,mEAAuE;AAM1D,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,IAAA,sCAAqB,EAAC,8BAA8B,EAAE,6BAA6B,CAAC;IAC3F,QAAQ,EAAE,OAAC;SACN,MAAM,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;SACpD,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;SACjD,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;IACxD,IAAI,EAAE,OAAC;SACF,MAAM,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;SAChD,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;SAC7C,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACpD,gBAAgB,EAAE,OAAC;SACd,OAAO,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;SAC5D,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;CACrB,CAAC,CAAC"}
+{"version":3,"file":"signup-request.schema.js","sourceRoot":"","sources":["../../../../v1/auth/schemas/signup-request.schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,mEAAuE;AAEvE;;;GAGG;AACU,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,IAAA,sCAAqB,EAAC,8BAA8B,EAAE,6BAA6B,CAAC;IAC3F,QAAQ,EAAE,OAAC;SACN,MAAM,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;SACpD,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;SACjD,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;IACxD,IAAI,EAAE,OAAC;SACF,MAAM,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;SAChD,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;SAC7C,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACpD,gBAAgB,EAAE,OAAC;SACd,OAAO,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;SAC5D,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;CACrB,CAAC,CAAC"}

package/build/v1/auth/schemas/user-role.enum.d.ts

@@ -1,3 +1,6 @@
+/**
+ * User Role enum
+ */
 export declare enum UserRole {
     USER = "USER",
     ADMIN = "ADMIN"

package/build/v1/auth/schemas/user-role.enum.js

@@ -1,6 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.UserRole = void 0;
+/**
+ * User Role enum
+ */
 var UserRole;
 (function (UserRole) {
     UserRole["USER"] = "USER";

package/build/v1/auth/schemas/user-role.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"user-role.enum.js","sourceRoot":"","sources":["../../../../v1/auth/schemas/user-role.enum.ts"],"names":[],"mappings":";;;AAGA,IAAY,QAGX;AAHD,WAAY,QAAQ;IAClB,yBAAa,CAAA;IACb,2BAAe,CAAA;AACjB,CAAC,EAHW,QAAQ,wBAAR,QAAQ,QAGnB"}
+{"version":3,"file":"user-role.enum.js","sourceRoot":"","sources":["../../../../v1/auth/schemas/user-role.enum.ts"],"names":[],"mappings":";;;AAAA;;GAEG;AACH,IAAY,QAGX;AAHD,WAAY,QAAQ;IAClB,yBAAa,CAAA;IACb,2BAAe,CAAA;AACjB,CAAC,EAHW,QAAQ,wBAAR,QAAQ,QAGnB"}

package/build/v1/avatar/avatar-owner-type.enum.d.ts

@@ -1,3 +1,7 @@
+/**
+ * Type of entity an avatar belongs to. The avatar module is generic so other
+ * domain entities (users, etc.) can be added without schema changes.
+ */
 export declare enum AvatarOwnerType {
     ASSISTANT = "ASSISTANT"
 }

package/build/v1/avatar/avatar-owner-type.enum.js

@@ -1,6 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AvatarOwnerType = void 0;
+/**
+ * Type of entity an avatar belongs to. The avatar module is generic so other
+ * domain entities (users, etc.) can be added without schema changes.
+ */
 var AvatarOwnerType;
 (function (AvatarOwnerType) {
     AvatarOwnerType["ASSISTANT"] = "ASSISTANT";

package/build/v1/avatar/avatar-owner-type.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"avatar-owner-type.enum.js","sourceRoot":"","sources":["../../../v1/avatar/avatar-owner-type.enum.ts"],"names":[],"mappings":";;;AAIA,IAAY,eAEX;AAFD,WAAY,eAAe;IACvB,0CAAuB,CAAA;AAC3B,CAAC,EAFW,eAAe,+BAAf,eAAe,QAE1B"}
+{"version":3,"file":"avatar-owner-type.enum.js","sourceRoot":"","sources":["../../../v1/avatar/avatar-owner-type.enum.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACH,IAAY,eAEX;AAFD,WAAY,eAAe;IACvB,0CAAuB,CAAA;AAC3B,CAAC,EAFW,eAAe,+BAAf,eAAe,QAE1B"}

package/build/v1/avatar/avatar.constants.d.ts

@@ -3,6 +3,10 @@ import type { AvatarValidationLimits } from './avatar.types';
 export declare const AVATAR_IMAGE_MIME_TYPES: readonly ["image/jpeg", "image/png", "image/webp"];
 export type AvatarImageMimeType = (typeof AVATAR_IMAGE_MIME_TYPES)[number];
 export declare const AVATAR_IMAGE_EXTENSION_MAP: Record<AvatarImageMimeType, string>;
+/**
+ * First N magic bytes per MIME. Used for server-side content sniffing so
+ * a client cannot upload arbitrary bytes under a faked image/* header.
+ */
 export declare const AVATAR_IMAGE_MAGIC_BYTES: Record<AvatarImageMimeType, readonly (number | null)[]>;
 export declare const AVATAR_STATUS: {
     readonly PENDING: "pending";
@@ -10,5 +14,10 @@ export declare const AVATAR_STATUS: {
 };
 export type AvatarStatus = (typeof AVATAR_STATUS)[keyof typeof AVATAR_STATUS];
 export declare const AVATAR_VALIDATION_LIMITS: Record<AvatarOwnerType, AvatarValidationLimits>;
+/** Time after which a PENDING avatar (uploaded but never attached) is purged. */
 export declare const AVATAR_PENDING_TTL_HOURS = 24;
+/**
+ * Hard cap on simultaneous PENDING avatars per (ownerUserId, ownerType).
+ * Protects S3 + DB from a user who uploads in a loop without ever attaching.
+ */
 export declare const AVATAR_MAX_PENDING_PER_USER = 5;

package/build/v1/avatar/avatar.constants.js

@@ -12,9 +12,15 @@ exports.AVATAR_IMAGE_EXTENSION_MAP = {
     'image/png': 'png',
     'image/webp': 'webp',
 };
+/**
+ * First N magic bytes per MIME. Used for server-side content sniffing so
+ * a client cannot upload arbitrary bytes under a faked image/* header.
+ */
 exports.AVATAR_IMAGE_MAGIC_BYTES = {
     'image/jpeg': [0xff, 0xd8, 0xff],
     'image/png': [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a],
+    // RIFF....WEBP — bytes 8..11 spell "WEBP"; null = wildcard for the
+    // 4-byte little-endian file-size in between.
     'image/webp': [
         0x52, 0x49, 0x46, 0x46,
         null, null, null, null,
@@ -32,6 +38,11 @@ exports.AVATAR_VALIDATION_LIMITS = {
         maxSizeBytes: FIVE_MB,
     },
 };
+/** Time after which a PENDING avatar (uploaded but never attached) is purged. */
 exports.AVATAR_PENDING_TTL_HOURS = 24;
+/**
+ * Hard cap on simultaneous PENDING avatars per (ownerUserId, ownerType).
+ * Protects S3 + DB from a user who uploads in a loop without ever attaching.
+ */
 exports.AVATAR_MAX_PENDING_PER_USER = 5;
 //# sourceMappingURL=avatar.constants.js.map

package/build/v1/avatar/avatar.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"avatar.constants.js","sourceRoot":"","sources":["../../../v1/avatar/avatar.constants.ts"],"names":[],"mappings":";;;AAAA,qEAA2D;AAG9C,QAAA,uBAAuB,GAAG;IACnC,YAAY;IACZ,WAAW;IACX,YAAY;CACN,CAAC;AAIE,QAAA,0BAA0B,GAAwC;IAC3E,YAAY,EAAE,KAAK;IACnB,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,MAAM;CACvB,CAAC;AAMW,QAAA,wBAAwB,GAA4D;IAC7F,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;IAChC,WAAW,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;IAG7D,YAAY,EAAE;QACV,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;QACtB,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;QACtB,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;KACzB;CACJ,CAAC;AAEW,QAAA,aAAa,GAAG;IACzB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;CACd,CAAC;AAIX,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEnB,QAAA,wBAAwB,GAAoD;IACrF,CAAC,wCAAe,CAAC,SAAS,CAAC,EAAE;QACzB,gBAAgB,EAAE,+BAAuB;QACzC,YAAY,EAAE,OAAO;KACxB;CACJ,CAAC;AAGW,QAAA,wBAAwB,GAAG,EAAE,CAAC;AAM9B,QAAA,2BAA2B,GAAG,CAAC,CAAC"}
+{"version":3,"file":"avatar.constants.js","sourceRoot":"","sources":["../../../v1/avatar/avatar.constants.ts"],"names":[],"mappings":";;;AAAA,qEAA2D;AAG9C,QAAA,uBAAuB,GAAG;IACnC,YAAY;IACZ,WAAW;IACX,YAAY;CACN,CAAC;AAIE,QAAA,0BAA0B,GAAwC;IAC3E,YAAY,EAAE,KAAK;IACnB,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,MAAM;CACvB,CAAC;AAEF;;;GAGG;AACU,QAAA,wBAAwB,GAA4D;IAC7F,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;IAChC,WAAW,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;IAC7D,mEAAmE;IACnE,6CAA6C;IAC7C,YAAY,EAAE;QACV,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;QACtB,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;QACtB,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;KACzB;CACJ,CAAC;AAEW,QAAA,aAAa,GAAG;IACzB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;CACd,CAAC;AAIX,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEnB,QAAA,wBAAwB,GAAoD;IACrF,CAAC,wCAAe,CAAC,SAAS,CAAC,EAAE;QACzB,gBAAgB,EAAE,+BAAuB;QACzC,YAAY,EAAE,OAAO;KACxB;CACJ,CAAC;AAEF,iFAAiF;AACpE,QAAA,wBAAwB,GAAG,EAAE,CAAC;AAE3C;;;GAGG;AACU,QAAA,2BAA2B,GAAG,CAAC,CAAC"}

package/build/v1/avatar/avatar.errors.d.ts

@@ -7,7 +7,9 @@ export declare enum AvatarErrorCode {
     AVATAR_TOO_LARGE = "AVATAR_TOO_LARGE",
     AVATAR_INVALID_OWNER_TYPE = "AVATAR_INVALID_OWNER_TYPE",
     AVATAR_UPLOAD_FAILED = "AVATAR_UPLOAD_FAILED",
+    /** Concurrent attach to the same (ownerType, ownerId). 409 Conflict. */
     AVATAR_CONFLICT = "AVATAR_CONFLICT",
+    /** Per-user cap on simultaneous PENDING avatars exceeded. 429-ish. */
     AVATAR_TOO_MANY_PENDING = "AVATAR_TOO_MANY_PENDING"
 }
 export declare const AVATAR_ERRORS: Record<AvatarErrorCode, ErrorMetadata>;

package/build/v1/avatar/avatar.errors.js

@@ -10,7 +10,9 @@ var AvatarErrorCode;
     AvatarErrorCode["AVATAR_TOO_LARGE"] = "AVATAR_TOO_LARGE";
     AvatarErrorCode["AVATAR_INVALID_OWNER_TYPE"] = "AVATAR_INVALID_OWNER_TYPE";
     AvatarErrorCode["AVATAR_UPLOAD_FAILED"] = "AVATAR_UPLOAD_FAILED";
+    /** Concurrent attach to the same (ownerType, ownerId). 409 Conflict. */
     AvatarErrorCode["AVATAR_CONFLICT"] = "AVATAR_CONFLICT";
+    /** Per-user cap on simultaneous PENDING avatars exceeded. 429-ish. */
     AvatarErrorCode["AVATAR_TOO_MANY_PENDING"] = "AVATAR_TOO_MANY_PENDING";
 })(AvatarErrorCode || (exports.AvatarErrorCode = AvatarErrorCode = {}));
 exports.AVATAR_ERRORS = {

package/build/v1/avatar/avatar.errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"avatar.errors.js","sourceRoot":"","sources":["../../../v1/avatar/avatar.errors.ts"],"names":[],"mappings":";;;AAEA,IAAY,eAYX;AAZD,WAAY,eAAe;IACvB,wDAAqC,CAAA;IACrC,wDAAqC,CAAA;IACrC,kEAA+C,CAAA;IAC/C,8DAA2C,CAAA;IAC3C,wDAAqC,CAAA;IACrC,0EAAuD,CAAA;IACvD,gEAA6C,CAAA;IAE7C,sDAAmC,CAAA;IAEnC,sEAAmD,CAAA;AACvD,CAAC,EAZW,eAAe,+BAAf,eAAe,QAY1B;AAEY,QAAA,aAAa,GAA2C;IACjE,CAAC,eAAe,CAAC,gBAAgB,CAAC,EAAE;QAChC,IAAI,EAAE,eAAe,CAAC,gBAAgB;QACtC,UAAU,EAAE,GAAG;KAClB;IACD,CAAC,eAAe,CAAC,gBAAgB,CAAC,EAAE;QAChC,IAAI,EAAE,eAAe,CAAC,gBAAgB;QACtC,UAAU,EAAE,GAAG;KAClB;IACD,CAAC,eAAe,CAAC,qBAAqB,CAAC,EAAE;QACrC,IAAI,EAAE,eAAe,CAAC,qBAAqB;QAC3C,UAAU,EAAE,GAAG;KAClB;IACD,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE;QACnC,IAAI,EAAE,eAAe,CAAC,mBAAmB;QACzC,UAAU,EAAE,GAAG;KAClB;IACD,CAAC,eAAe,CAAC,gBAAgB,CAAC,EAAE;QAChC,IAAI,EAAE,eAAe,CAAC,gBAAgB;QACtC,UAAU,EAAE,GAAG;KAClB;IACD,CAAC,eAAe,CAAC,yBAAyB,CAAC,EAAE;QACzC,IAAI,EAAE,eAAe,CAAC,yBAAyB;QAC/C,UAAU,EAAE,GAAG;KAClB;IACD,CAAC,eAAe,CAAC,oBAAoB,CAAC,EAAE;QACpC,IAAI,EAAE,eAAe,CAAC,oBAAoB;QAC1C,UAAU,EAAE,GAAG;KAClB;IACD,CAAC,eAAe,CAAC,eAAe,CAAC,EAAE;QAC/B,IAAI,EAAE,eAAe,CAAC,eAAe;QACrC,UAAU,EAAE,GAAG;KAClB;IACD,CAAC,eAAe,CAAC,uBAAuB,CAAC,EAAE;QACvC,IAAI,EAAE,eAAe,CAAC,uBAAuB;QAC7C,UAAU,EAAE,GAAG;KAClB;CACK,CAAC"}
+{"version":3,"file":"avatar.errors.js","sourceRoot":"","sources":["../../../v1/avatar/avatar.errors.ts"],"names":[],"mappings":";;;AAEA,IAAY,eAYX;AAZD,WAAY,eAAe;IACvB,wDAAqC,CAAA;IACrC,wDAAqC,CAAA;IACrC,kEAA+C,CAAA;IAC/C,8DAA2C,CAAA;IAC3C,wDAAqC,CAAA;IACrC,0EAAuD,CAAA;IACvD,gEAA6C,CAAA;IAC7C,wEAAwE;IACxE,sDAAmC,CAAA;IACnC,sEAAsE;IACtE,sEAAmD,CAAA;AACvD,CAAC,EAZW,eAAe,+BAAf,eAAe,QAY1B;AAEY,QAAA,aAAa,GAA2C;IACjE,CAAC,eAAe,CAAC,gBAAgB,CAAC,EAAE;QAChC,IAAI,EAAE,eAAe,CAAC,gBAAgB;QACtC,UAAU,EAAE,GAAG;KAClB;IACD,CAAC,eAAe,CAAC,gBAAgB,CAAC,EAAE;QAChC,IAAI,EAAE,eAAe,CAAC,gBAAgB;QACtC,UAAU,EAAE,GAAG;KAClB;IACD,CAAC,eAAe,CAAC,qBAAqB,CAAC,EAAE;QACrC,IAAI,EAAE,eAAe,CAAC,qBAAqB;QAC3C,UAAU,EAAE,GAAG;KAClB;IACD,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE;QACnC,IAAI,EAAE,eAAe,CAAC,mBAAmB;QACzC,UAAU,EAAE,GAAG;KAClB;IACD,CAAC,eAAe,CAAC,gBAAgB,CAAC,EAAE;QAChC,IAAI,EAAE,eAAe,CAAC,gBAAgB;QACtC,UAAU,EAAE,GAAG;KAClB;IACD,CAAC,eAAe,CAAC,yBAAyB,CAAC,EAAE;QACzC,IAAI,EAAE,eAAe,CAAC,yBAAyB;QAC/C,UAAU,EAAE,GAAG;KAClB;IACD,CAAC,eAAe,CAAC,oBAAoB,CAAC,EAAE;QACpC,IAAI,EAAE,eAAe,CAAC,oBAAoB;QAC1C,UAAU,EAAE,GAAG;KAClB;IACD,CAAC,eAAe,CAAC,eAAe,CAAC,EAAE;QAC/B,IAAI,EAAE,eAAe,CAAC,eAAe;QACrC,UAAU,EAAE,GAAG;KAClB;IACD,CAAC,eAAe,CAAC,uBAAuB,CAAC,EAAE;QACvC,IAAI,EAAE,eAAe,CAAC,uBAAuB;QAC7C,UAAU,EAAE,GAAG;KAClB;CACK,CAAC"}

package/build/v1/avatar/avatar.types.d.ts

@@ -1,4 +1,9 @@
 import { AvatarImageMimeType } from './avatar.constants';
+/**
+ * Per-owner-type validation policy. Adding a new AvatarOwnerType requires
+ * a new entry in AVATAR_VALIDATION_LIMITS — TypeScript will refuse to
+ * compile otherwise (Record exhaustiveness).
+ */
 export interface AvatarValidationLimits {
     allowedMimeTypes: readonly AvatarImageMimeType[];
     maxSizeBytes: number;

package/build/v1/avatar/schemas/avatar-attach-request.schema.d.ts

@@ -1,5 +1,9 @@
 import { z } from 'zod';
 import { AvatarOwnerType } from '../avatar-owner-type.enum';
+/**
+ * S2S request: claim a PENDING avatar for a domain entity (e.g. assistant)
+ * and atomically release the previously attached avatar (if any).
+ */
 export declare const AvatarAttachRequestSchema: z.ZodObject<{
     uuid: z.ZodString;
     ownerUserId: z.ZodString;

package/build/v1/avatar/schemas/avatar-attach-request.schema.js

@@ -4,6 +4,10 @@ exports.AvatarAttachRequestSchema = void 0;
 const zod_1 = require("zod");
 const shared_1 = require("../../../shared");
 const avatar_owner_type_enum_1 = require("../avatar-owner-type.enum");
+/**
+ * S2S request: claim a PENDING avatar for a domain entity (e.g. assistant)
+ * and atomically release the previously attached avatar (if any).
+ */
 exports.AvatarAttachRequestSchema = zod_1.z.object({
     uuid: zod_1.z
         .string({ error: 'AvatarAttachRequest.uuid.required' })

package/build/v1/avatar/schemas/avatar-attach-request.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"avatar-attach-request.schema.js","sourceRoot":"","sources":["../../../../v1/avatar/schemas/avatar-attach-request.schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,4CAA6C;AAC7C,sEAA4D;AAM/C,QAAA,yBAAyB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,OAAC;SACF,MAAM,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;SACtD,KAAK,CAAC,mBAAU,EAAE,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IACvE,WAAW,EAAE,OAAC;SACT,MAAM,CAAC,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC;SAC7D,KAAK,CAAC,mBAAU,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IAC9E,SAAS,EAAE,OAAC,CAAC,IAAI,CAAC,wCAAe,EAAE;QAC/B,KAAK,EAAE,uCAAuC;KACjD,CAAC;IACF,OAAO,EAAE,OAAC;SACL,MAAM,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;SACzD,KAAK,CAAC,mBAAU,EAAE,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;CAC7E,CAAC,CAAC"}
+{"version":3,"file":"avatar-attach-request.schema.js","sourceRoot":"","sources":["../../../../v1/avatar/schemas/avatar-attach-request.schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,4CAA6C;AAC7C,sEAA4D;AAE5D;;;GAGG;AACU,QAAA,yBAAyB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,OAAC;SACF,MAAM,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;SACtD,KAAK,CAAC,mBAAU,EAAE,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IACvE,WAAW,EAAE,OAAC;SACT,MAAM,CAAC,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC;SAC7D,KAAK,CAAC,mBAAU,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IAC9E,SAAS,EAAE,OAAC,CAAC,IAAI,CAAC,wCAAe,EAAE;QAC/B,KAAK,EAAE,uCAAuC;KACjD,CAAC;IACF,OAAO,EAAE,OAAC;SACL,MAAM,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;SACzD,KAAK,CAAC,mBAAU,EAAE,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;CAC7E,CAAC,CAAC"}

package/build/v1/avatar/schemas/avatar-release-by-uuid-request.schema.d.ts

@@ -1,4 +1,11 @@
 import { z } from 'zod';
+/**
+ * S2S request: release exactly one avatar by uuid. Used as a compensating
+ * action by the api service after a local DB failure that followed a
+ * successful attach — release the just-attached uuid only, never blindly
+ * the current avatar of the owner (which may be a concurrent successful
+ * attach by another request).
+ */
 export declare const AvatarReleaseByUuidRequestSchema: z.ZodObject<{
     uuid: z.ZodString;
     ownerUserId: z.ZodString;