alepha 0.20.1 → 0.20.2

package/dist/api/verifications/index.js

@@ -354,7 +354,8 @@ var VerificationJobs = class {
 	verificationParameters = $inject(VerificationParameters);
 	dateTimeProvider = $inject(DateTimeProvider);
 	cleanExpired = $scheduler({
-		cron: "0 0 * * *",
+		name: "api:verifications:cleanExpired",
+		cron: "0 * * * *",
 		description: "Clean expired verifications",
 		handler: async () => {
 			const purgeDays = this.verificationParameters.get("purgeDays");

package/dist/api/verifications/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/api/verifications/schemas/requestVerificationCodeResponseSchema.ts","../../../src/api/verifications/schemas/validateVerificationCodeResponseSchema.ts","../../../src/api/verifications/schemas/verificationTypeEnumSchema.ts","../../../src/api/verifications/entities/verifications.ts","../../../src/api/verifications/schemas/verificationSettingsSchema.ts","../../../src/api/verifications/parameters/VerificationParameters.ts","../../../src/api/verifications/services/VerificationService.ts","../../../src/api/verifications/controllers/VerificationController.ts","../../../src/api/verifications/jobs/VerificationJobs.ts","../../../src/api/verifications/index.ts"],"sourcesContent":["import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const requestVerificationCodeResponseSchema = t.object({\n  token: t.string({\n    description:\n      \"The verification token (6-digit code for phone, UUID for email). The caller should send this to the user via their preferred notification method.\",\n  }),\n  codeExpiration: t.integer({\n    description: \"Time in seconds before your verification token expires.\",\n  }),\n  verificationCooldown: t.integer({\n    description:\n      \"Cooldown period in seconds before you can request another verification.\",\n  }),\n  maxVerificationAttempts: t.integer({\n    description:\n      \"Maximum number of verification attempts allowed before the token is locked.\",\n  }),\n});\n\nexport type RequestVerificationResponse = Static<\n  typeof requestVerificationCodeResponseSchema\n>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const validateVerificationCodeResponseSchema = t.object({\n  ok: t.boolean({\n    description: \"Indicates whether the verification was successful.\",\n  }),\n  alreadyVerified: t.optional(\n    t.boolean({\n      description: \"Indicates whether the target was already verified.\",\n    }),\n  ),\n});\n\nexport type ValidateVerificationCodeResponse = Static<\n  typeof validateVerificationCodeResponseSchema\n>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const verificationTypeEnumSchema = t.enum([\"code\", \"link\"]);\nexport type VerificationTypeEnum = Static<typeof verificationTypeEnumSchema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\nimport { verificationTypeEnumSchema } from \"../schemas/verificationTypeEnumSchema.ts\";\n\nexport const verifications = $entity({\n  name: \"verification\",\n  schema: t.object({\n    id: db.primaryKey(t.bigint()),\n\n    createdAt: db.createdAt(),\n\n    updatedAt: db.updatedAt(),\n\n    version: db.version(),\n\n    type: verificationTypeEnumSchema,\n\n    target: t.text({\n      description: \"Can be a phone (E.164 format) or email address\",\n    }),\n\n    code: t.text({\n      description: \"Hashed verification token (n-digit code or UUID)\",\n    }),\n\n    verifiedAt: t.optional(\n      t.datetime({\n        description: \"When it was successfully verified\",\n      }),\n    ),\n\n    attempts: db.default(\n      t.integer({\n        description: \"Number of failed attempts (to prevent brute-force)\",\n      }),\n      0,\n    ),\n  }),\n  indexes: [\n    \"createdAt\",\n    {\n      columns: [\"target\", \"code\"],\n    },\n  ],\n});\n\nexport const verificationEntitySchema = verifications.schema;\nexport const verificationEntityInsertSchema = verifications.insertSchema;\nexport type VerificationEntity = Static<typeof verifications.schema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const verificationSettingsSchema = t.object({\n  code: t.object(\n    {\n      maxAttempts: t.integer({\n        description:\n          \"Maximum number of attempts before locking the verification.\",\n        minimum: 1,\n        maximum: 10,\n      }),\n      codeLength: t.integer({\n        description: \"Length of the verification code.\",\n        minimum: 4,\n        maximum: 12,\n      }),\n      codeExpiration: t.integer({\n        description: \"Time in seconds before the verification code expires.\",\n        minimum: 60, // 1 minute\n        maximum: 3600, // 1 hour\n      }),\n      verificationCooldown: t.integer({\n        description: \"Cooldown period in seconds after a request verification.\",\n        minimum: 0,\n        maximum: 3600, // 1 hour\n      }),\n      limitPerDay: t.integer({\n        description:\n          \"Maximum number of verification requests per day for one entry.\",\n        minimum: 1,\n        maximum: 100,\n      }),\n    },\n    {\n      description: \"Settings specific to code verifications.\",\n    },\n  ),\n  link: t.object(\n    {\n      maxAttempts: t.integer({\n        description:\n          \"Maximum number of attempts before locking the verification.\",\n        minimum: 1,\n        maximum: 10,\n      }),\n      codeExpiration: t.integer({\n        description: \"Time in seconds before the verification token expires.\",\n        minimum: 60, // 1 minute\n        maximum: 7200, // 2 hours\n      }),\n      verificationCooldown: t.integer({\n        description: \"Cooldown period in seconds after a request verification.\",\n        minimum: 0,\n        maximum: 3600, // 1 hour\n      }),\n      limitPerDay: t.integer({\n        description:\n          \"Maximum number of verification requests per day for one entry.\",\n        minimum: 1,\n        maximum: 100,\n      }),\n    },\n    {\n      description: \"Settings specific to link verifications.\",\n    },\n  ),\n  purgeDays: t.integer({\n    description:\n      \"Number of days after which expired verifications are automatically deleted. Set to 0 to disable auto-deletion.\",\n    minimum: 0,\n    maximum: 365,\n  }),\n});\n\nexport type VerificationSettings = Static<typeof verificationSettingsSchema>;\n","import { $atom, $state, type Static } from \"alepha\";\nimport {\n  type VerificationSettings,\n  verificationSettingsSchema,\n} from \"../schemas/verificationSettingsSchema.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Verification settings configuration atom\n */\nexport const verificationOptions = $atom({\n  name: \"alepha.api.verifications.options\",\n  schema: verificationSettingsSchema,\n  default: {\n    code: {\n      maxAttempts: 5,\n      codeLength: 6,\n      codeExpiration: 300, // 5 minutes\n      verificationCooldown: 90,\n      limitPerDay: 10,\n    },\n    link: {\n      maxAttempts: 3, // Lower since UUIDs are harder to guess\n      codeExpiration: 1800, // 30 minutes\n      verificationCooldown: 90,\n      limitPerDay: 10,\n    },\n    purgeDays: 1,\n  },\n});\n\nexport type VerificationOptions = Static<typeof verificationOptions.schema>;\n\ndeclare module \"alepha\" {\n  interface State {\n    [verificationOptions.key]: VerificationOptions;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport class VerificationParameters {\n  protected readonly options = $state(verificationOptions);\n\n  public get<K extends keyof VerificationSettings>(\n    key: K,\n  ): VerificationSettings[K] {\n    return this.options[key];\n  }\n}\n","import { createHash, randomInt, randomUUID } from \"node:crypto\";\nimport { $inject } from \"alepha\";\nimport { DateTimeProvider } from \"alepha/datetime\";\nimport { $logger } from \"alepha/logger\";\nimport { $repository } from \"alepha/orm\";\nimport { BadRequestError, NotFoundError } from \"alepha/server\";\nimport {\n  type VerificationEntity,\n  verifications,\n} from \"../entities/verifications.ts\";\nimport { VerificationParameters } from \"../parameters/VerificationParameters.ts\";\nimport type { RequestVerificationResponse } from \"../schemas/requestVerificationCodeResponseSchema.ts\";\nimport type { ValidateVerificationCodeResponse } from \"../schemas/validateVerificationCodeResponseSchema.ts\";\nimport type { VerificationTypeEnum } from \"../schemas/verificationTypeEnumSchema.ts\";\n\nexport class VerificationService {\n  protected readonly log = $logger();\n  protected readonly dateTimeProvider = $inject(DateTimeProvider);\n  protected readonly verificationParameters = $inject(VerificationParameters);\n  protected readonly verificationRepository = $repository(verifications);\n\n  public async findByEntry(\n    entry: VerificationEntry,\n  ): Promise<VerificationEntity> {\n    this.log.trace(\"Finding verification by entry\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    const results = await this.verificationRepository.findMany({\n      limit: 1, // only need the most recent entry\n      orderBy: {\n        column: \"createdAt\",\n        direction: \"desc\",\n      },\n      where: {\n        type: { eq: entry.type },\n        target: { eq: entry.target },\n      },\n    });\n\n    if (results.length === 0) {\n      this.log.debug(\"Verification entry not found\", {\n        type: entry.type,\n        target: entry.target,\n      });\n      throw new NotFoundError(\"Verification entry not found\");\n    }\n\n    this.log.debug(\"Verification entry found\", {\n      id: results[0].id,\n      type: entry.type,\n      target: entry.target,\n    });\n\n    return results[0];\n  }\n\n  public findRecentsByEntry(entry: VerificationEntry) {\n    this.log.trace(\"Finding recent verifications by entry\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    return this.verificationRepository.findMany({\n      orderBy: {\n        column: \"createdAt\",\n        direction: \"desc\",\n      },\n      where: {\n        type: { eq: entry.type },\n        target: { eq: entry.target },\n        createdAt: {\n          gte: this.dateTimeProvider.now().startOf(\"day\").toISOString(),\n        },\n      },\n    });\n  }\n\n  /**\n   * Creates a verification entry and returns the token.\n   * The caller is responsible for sending notifications with the token.\n   * This allows for context-specific notifications (e.g., password reset vs email verification).\n   */\n  public async createVerification(\n    entry: VerificationEntry,\n  ): Promise<RequestVerificationResponse> {\n    this.log.trace(\"Creating verification\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    const settings = this.verificationParameters.get(entry.type);\n\n    const recents = await this.findRecentsByEntry(entry);\n    if (recents.length >= settings.limitPerDay) {\n      this.log.warn(\"Daily verification limit reached\", {\n        type: entry.type,\n        target: entry.target,\n        limit: settings.limitPerDay,\n        count: recents.length,\n      });\n      throw new BadRequestError(\n        `Maximum number of verification requests per day reached (${settings.limitPerDay})`,\n      );\n    }\n\n    const existingVerification = recents[0];\n    if (existingVerification) {\n      const nowSec = this.dateTimeProvider.now().unix();\n      const createdAtSec = this.dateTimeProvider\n        .of(existingVerification.createdAt)\n        .unix();\n\n      const diffSec = nowSec - createdAtSec;\n      if (diffSec < settings.verificationCooldown) {\n        const remainingCooldown = Math.floor(\n          settings.verificationCooldown - diffSec,\n        );\n        this.log.debug(\"Verification on cooldown\", {\n          type: entry.type,\n          target: entry.target,\n          remainingSeconds: remainingCooldown,\n        });\n        throw new BadRequestError(\n          `Verification is on cooldown for ${remainingCooldown} seconds`,\n        );\n      }\n    }\n\n    const token = this.generateToken(entry.type);\n\n    const verification = await this.verificationRepository.create({\n      type: entry.type,\n      target: entry.target,\n      code: this.hashCode(token),\n    });\n\n    this.log.info(\"Verification created\", {\n      id: verification.id,\n      type: entry.type,\n      target: entry.target,\n      expiresInSeconds: settings.codeExpiration,\n    });\n\n    return {\n      token,\n      codeExpiration: settings.codeExpiration,\n      verificationCooldown: settings.verificationCooldown,\n      maxVerificationAttempts: settings.maxAttempts,\n    };\n  }\n\n  public async verifyCode(\n    entry: VerificationEntry,\n    code: string,\n  ): Promise<ValidateVerificationCodeResponse> {\n    this.log.trace(\"Verifying code\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    const settings = this.verificationParameters.get(entry.type);\n\n    const verification = await this.findByEntry(entry);\n    if (verification.verifiedAt) {\n      this.log.debug(\"Verification already verified\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        verifiedAt: verification.verifiedAt,\n      });\n      return { ok: true, alreadyVerified: true };\n    }\n\n    // DO NOT DELETE THE VERIFICATION WHEN IT IS REJECTED,\n    // or we won't be able to cooldown the verification\n\n    const now = this.dateTimeProvider.now();\n    const expirationDate = this.dateTimeProvider\n      .of(verification.createdAt)\n      .add(settings.codeExpiration, \"seconds\");\n\n    if (now > expirationDate) {\n      this.log.warn(\"Verification code expired\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        createdAt: verification.createdAt,\n        expiredAt: expirationDate.toISOString(),\n      });\n      throw new BadRequestError(\"Verification code has expired\");\n    }\n\n    if (verification.attempts >= settings.maxAttempts) {\n      this.log.warn(\"Verification locked due to max attempts\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        attempts: verification.attempts,\n        maxAttempts: settings.maxAttempts,\n      });\n      throw new BadRequestError(\n        \"Maximum number of attempts reached - verification is locked\",\n      );\n    }\n\n    if (verification.code !== this.hashCode(code)) {\n      const newAttempts = verification.attempts + 1;\n      this.log.warn(\"Invalid verification code\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        attempts: newAttempts,\n        maxAttempts: settings.maxAttempts,\n      });\n      await this.verificationRepository.updateById(verification.id, {\n        attempts: newAttempts,\n      });\n      throw new BadRequestError(\"Invalid verification code\");\n    }\n\n    await this.verificationRepository.updateById(verification.id, {\n      verifiedAt: this.dateTimeProvider.nowISOString(),\n    });\n\n    this.log.info(\"Verification code verified\", {\n      id: verification.id,\n      type: entry.type,\n      target: entry.target,\n    });\n\n    return { ok: true };\n  }\n\n  public hashCode(code: string): string {\n    return createHash(\"sha256\").update(code).digest(\"hex\");\n  }\n\n  public generateToken(type: VerificationTypeEnum): string {\n    if (type === \"code\") {\n      const settings = this.verificationParameters.get(\"code\");\n      return randomInt(0, 1_000_000)\n        .toString()\n        .padStart(settings.codeLength, \"0\");\n    } else if (type === \"link\") {\n      return randomUUID();\n    }\n\n    throw new BadRequestError(`Invalid verification type: ${type}`);\n  }\n}\n\nexport interface VerificationEntry {\n  type: VerificationTypeEnum;\n  target: string;\n}\n","import { $inject, t } from \"alepha\";\nimport { $action } from \"alepha/server\";\nimport { requestVerificationCodeResponseSchema } from \"../schemas/requestVerificationCodeResponseSchema.ts\";\nimport { validateVerificationCodeResponseSchema } from \"../schemas/validateVerificationCodeResponseSchema.ts\";\nimport { verificationTypeEnumSchema } from \"../schemas/verificationTypeEnumSchema.ts\";\nimport { VerificationService } from \"../services/VerificationService.ts\";\n\nexport class VerificationController {\n  protected readonly verificationService = $inject(VerificationService);\n\n  public readonly url = \"/verifications\";\n  public readonly group = \"verifications\";\n\n  public readonly requestVerificationCode = $action({\n    path: `${this.url}/:type`,\n    group: this.group,\n    method: \"POST\",\n    schema: {\n      params: t.object({\n        type: verificationTypeEnumSchema,\n      }),\n      body: t.object({\n        target: t.text(),\n      }),\n      response: requestVerificationCodeResponseSchema,\n    },\n    handler: async ({ body, params }) => {\n      return await this.verificationService.createVerification({\n        type: params.type,\n        target: body.target,\n      });\n    },\n  });\n\n  public readonly validateVerificationCode = $action({\n    path: `${this.url}/:type/validate`,\n    group: this.group,\n    method: \"POST\",\n    schema: {\n      params: t.object({\n        type: verificationTypeEnumSchema,\n      }),\n      body: t.object({\n        target: t.text(),\n        token: t.text({\n          description:\n            \"The verification token (6-digit code for phone, UUID for email).\",\n        }),\n      }),\n      response: validateVerificationCodeResponseSchema,\n    },\n    handler: async ({ body, params }) => {\n      return this.verificationService.verifyCode(\n        {\n          type: params.type,\n          target: body.target,\n        },\n        body.token,\n      );\n    },\n  });\n}\n","import { $inject } from \"alepha\";\nimport { DateTimeProvider } from \"alepha/datetime\";\nimport { $repository } from \"alepha/orm\";\nimport { $scheduler } from \"alepha/scheduler\";\nimport { verifications } from \"../entities/verifications.ts\";\nimport { VerificationParameters } from \"../parameters/VerificationParameters.ts\";\n\nexport class VerificationJobs {\n  protected readonly verificationRepository = $repository(verifications);\n  protected readonly verificationParameters = $inject(VerificationParameters);\n  protected readonly dateTimeProvider = $inject(DateTimeProvider);\n\n  public readonly cleanExpired = $scheduler({\n    cron: \"0 0 * * *\", // Every day at midnight\n    description: \"Clean expired verifications\",\n    handler: async () => {\n      const purgeDays = this.verificationParameters.get(\"purgeDays\");\n      if (purgeDays <= 0) {\n        return; // Auto deletion is disabled\n      }\n\n      const dayMs = 24 * 60 * 60 * 1000;\n      const purgeThreshold =\n        this.dateTimeProvider.nowMillis() - purgeDays * dayMs;\n\n      await this.verificationRepository.deleteMany({\n        createdAt: {\n          lt: this.dateTimeProvider.of(purgeThreshold).toISOString(),\n        },\n      });\n    },\n  });\n}\n","import { $module } from \"alepha\";\nimport { VerificationController } from \"./controllers/VerificationController.ts\";\nimport { VerificationJobs } from \"./jobs/VerificationJobs.ts\";\nimport { VerificationParameters } from \"./parameters/VerificationParameters.ts\";\nimport { VerificationService } from \"./services/VerificationService.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./controllers/VerificationController.ts\";\nexport * from \"./entities/verifications.ts\";\nexport * from \"./jobs/VerificationJobs.ts\";\nexport * from \"./parameters/VerificationParameters.ts\";\nexport * from \"./schemas/requestVerificationCodeResponseSchema.ts\";\nexport * from \"./schemas/validateVerificationCodeResponseSchema.ts\";\nexport * from \"./schemas/verificationTypeEnumSchema.ts\";\nexport * from \"./services/VerificationService.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Email and phone verification workflows.\n *\n * **Features:**\n * - Verification token generation\n * - Verification code sending\n * - Verification completion tracking\n * - Resend functionality\n *\n * @module alepha.api.verifications\n */\nexport const AlephaApiVerification = $module({\n  name: \"alepha.api.verifications\",\n  services: [\n    VerificationController,\n    VerificationJobs,\n    VerificationService,\n    VerificationParameters,\n  ],\n});\n"],"mappings":";;;;;;;;AAGA,MAAa,wCAAwC,EAAE,OAAO;CAC5D,OAAO,EAAE,OAAO,EACd,aACE,qJACH,CAAC;CACF,gBAAgB,EAAE,QAAQ,EACxB,aAAa,2DACd,CAAC;CACF,sBAAsB,EAAE,QAAQ,EAC9B,aACE,2EACH,CAAC;CACF,yBAAyB,EAAE,QAAQ,EACjC,aACE,+EACH,CAAC;CACH,CAAC;;;AChBF,MAAa,yCAAyC,EAAE,OAAO;CAC7D,IAAI,EAAE,QAAQ,EACZ,aAAa,sDACd,CAAC;CACF,iBAAiB,EAAE,SACjB,EAAE,QAAQ,EACR,aAAa,sDACd,CAAC,CACH;CACF,CAAC;;;ACTF,MAAa,6BAA6B,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC;;;ACElE,MAAa,gBAAgB,QAAQ;CACnC,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,QAAQ,CAAC;EAE7B,WAAW,GAAG,WAAW;EAEzB,WAAW,GAAG,WAAW;EAEzB,SAAS,GAAG,SAAS;EAErB,MAAM;EAEN,QAAQ,EAAE,KAAK,EACb,aAAa,kDACd,CAAC;EAEF,MAAM,EAAE,KAAK,EACX,aAAa,oDACd,CAAC;EAEF,YAAY,EAAE,SACZ,EAAE,SAAS,EACT,aAAa,qCACd,CAAC,CACH;EAED,UAAU,GAAG,QACX,EAAE,QAAQ,EACR,aAAa,sDACd,CAAC,EACF,EACD;EACF,CAAC;CACF,SAAS,CACP,aACA,EACE,SAAS,CAAC,UAAU,OAAO,EAC5B,CACF;CACF,CAAC;AAEF,MAAa,2BAA2B,cAAc;AACtD,MAAa,iCAAiC,cAAc;;;;;;AErC5D,MAAa,sBAAsB,MAAM;CACvC,MAAM;CACN,QDVwC,EAAE,OAAO;EACjD,MAAM,EAAE,OACN;GACE,aAAa,EAAE,QAAQ;IACrB,aACE;IACF,SAAS;IACT,SAAS;IACV,CAAC;GACF,YAAY,EAAE,QAAQ;IACpB,aAAa;IACb,SAAS;IACT,SAAS;IACV,CAAC;GACF,gBAAgB,EAAE,QAAQ;IACxB,aAAa;IACb,SAAS;IACT,SAAS;IACV,CAAC;GACF,sBAAsB,EAAE,QAAQ;IAC9B,aAAa;IACb,SAAS;IACT,SAAS;IACV,CAAC;GACF,aAAa,EAAE,QAAQ;IACrB,aACE;IACF,SAAS;IACT,SAAS;IACV,CAAC;GACH,EACD,EACE,aAAa,4CACd,CACF;EACD,MAAM,EAAE,OACN;GACE,aAAa,EAAE,QAAQ;IACrB,aACE;IACF,SAAS;IACT,SAAS;IACV,CAAC;GACF,gBAAgB,EAAE,QAAQ;IACxB,aAAa;IACb,SAAS;IACT,SAAS;IACV,CAAC;GACF,sBAAsB,EAAE,QAAQ;IAC9B,aAAa;IACb,SAAS;IACT,SAAS;IACV,CAAC;GACF,aAAa,EAAE,QAAQ;IACrB,aACE;IACF,SAAS;IACT,SAAS;IACV,CAAC;GACH,EACD,EACE,aAAa,4CACd,CACF;EACD,WAAW,EAAE,QAAQ;GACnB,aACE;GACF,SAAS;GACT,SAAS;GACV,CAAC;EACH,CAAC;CC3DA,SAAS;EACP,MAAM;GACJ,aAAa;GACb,YAAY;GACZ,gBAAgB;GAChB,sBAAsB;GACtB,aAAa;GACd;EACD,MAAM;GACJ,aAAa;GACb,gBAAgB;GAChB,sBAAsB;GACtB,aAAa;GACd;EACD,WAAW;EACZ;CACF,CAAC;AAYF,IAAa,yBAAb,MAAoC;CAClC,UAA6B,OAAO,oBAAoB;CAExD,IACE,KACyB;AACzB,SAAO,KAAK,QAAQ;;;;;ACjCxB,IAAa,sBAAb,MAAiC;CAC/B,MAAyB,SAAS;CAClC,mBAAsC,QAAQ,iBAAiB;CAC/D,yBAA4C,QAAQ,uBAAuB;CAC3E,yBAA4C,YAAY,cAAc;CAEtE,MAAa,YACX,OAC6B;AAC7B,OAAK,IAAI,MAAM,iCAAiC;GAC9C,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;EAEF,MAAM,UAAU,MAAM,KAAK,uBAAuB,SAAS;GACzD,OAAO;GACP,SAAS;IACP,QAAQ;IACR,WAAW;IACZ;GACD,OAAO;IACL,MAAM,EAAE,IAAI,MAAM,MAAM;IACxB,QAAQ,EAAE,IAAI,MAAM,QAAQ;IAC7B;GACF,CAAC;AAEF,MAAI,QAAQ,WAAW,GAAG;AACxB,QAAK,IAAI,MAAM,gCAAgC;IAC7C,MAAM,MAAM;IACZ,QAAQ,MAAM;IACf,CAAC;AACF,SAAM,IAAI,cAAc,+BAA+B;;AAGzD,OAAK,IAAI,MAAM,4BAA4B;GACzC,IAAI,QAAQ,GAAG;GACf,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;AAEF,SAAO,QAAQ;;CAGjB,mBAA0B,OAA0B;AAClD,OAAK,IAAI,MAAM,yCAAyC;GACtD,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;AAEF,SAAO,KAAK,uBAAuB,SAAS;GAC1C,SAAS;IACP,QAAQ;IACR,WAAW;IACZ;GACD,OAAO;IACL,MAAM,EAAE,IAAI,MAAM,MAAM;IACxB,QAAQ,EAAE,IAAI,MAAM,QAAQ;IAC5B,WAAW,EACT,KAAK,KAAK,iBAAiB,KAAK,CAAC,QAAQ,MAAM,CAAC,aAAa,EAC9D;IACF;GACF,CAAC;;;;;;;CAQJ,MAAa,mBACX,OACsC;AACtC,OAAK,IAAI,MAAM,yBAAyB;GACtC,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;EAEF,MAAM,WAAW,KAAK,uBAAuB,IAAI,MAAM,KAAK;EAE5D,MAAM,UAAU,MAAM,KAAK,mBAAmB,MAAM;AACpD,MAAI,QAAQ,UAAU,SAAS,aAAa;AAC1C,QAAK,IAAI,KAAK,oCAAoC;IAChD,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,OAAO,SAAS;IAChB,OAAO,QAAQ;IAChB,CAAC;AACF,SAAM,IAAI,gBACR,4DAA4D,SAAS,YAAY,GAClF;;EAGH,MAAM,uBAAuB,QAAQ;AACrC,MAAI,sBAAsB;GAMxB,MAAM,UALS,KAAK,iBAAiB,KAAK,CAAC,MAAM,GAC5B,KAAK,iBACvB,GAAG,qBAAqB,UAAU,CAClC,MAAM;AAGT,OAAI,UAAU,SAAS,sBAAsB;IAC3C,MAAM,oBAAoB,KAAK,MAC7B,SAAS,uBAAuB,QACjC;AACD,SAAK,IAAI,MAAM,4BAA4B;KACzC,MAAM,MAAM;KACZ,QAAQ,MAAM;KACd,kBAAkB;KACnB,CAAC;AACF,UAAM,IAAI,gBACR,mCAAmC,kBAAkB,UACtD;;;EAIL,MAAM,QAAQ,KAAK,cAAc,MAAM,KAAK;EAE5C,MAAM,eAAe,MAAM,KAAK,uBAAuB,OAAO;GAC5D,MAAM,MAAM;GACZ,QAAQ,MAAM;GACd,MAAM,KAAK,SAAS,MAAM;GAC3B,CAAC;AAEF,OAAK,IAAI,KAAK,wBAAwB;GACpC,IAAI,aAAa;GACjB,MAAM,MAAM;GACZ,QAAQ,MAAM;GACd,kBAAkB,SAAS;GAC5B,CAAC;AAEF,SAAO;GACL;GACA,gBAAgB,SAAS;GACzB,sBAAsB,SAAS;GAC/B,yBAAyB,SAAS;GACnC;;CAGH,MAAa,WACX,OACA,MAC2C;AAC3C,OAAK,IAAI,MAAM,kBAAkB;GAC/B,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;EAEF,MAAM,WAAW,KAAK,uBAAuB,IAAI,MAAM,KAAK;EAE5D,MAAM,eAAe,MAAM,KAAK,YAAY,MAAM;AAClD,MAAI,aAAa,YAAY;AAC3B,QAAK,IAAI,MAAM,iCAAiC;IAC9C,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,YAAY,aAAa;IAC1B,CAAC;AACF,UAAO;IAAE,IAAI;IAAM,iBAAiB;IAAM;;EAM5C,MAAM,MAAM,KAAK,iBAAiB,KAAK;EACvC,MAAM,iBAAiB,KAAK,iBACzB,GAAG,aAAa,UAAU,CAC1B,IAAI,SAAS,gBAAgB,UAAU;AAE1C,MAAI,MAAM,gBAAgB;AACxB,QAAK,IAAI,KAAK,6BAA6B;IACzC,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,WAAW,aAAa;IACxB,WAAW,eAAe,aAAa;IACxC,CAAC;AACF,SAAM,IAAI,gBAAgB,gCAAgC;;AAG5D,MAAI,aAAa,YAAY,SAAS,aAAa;AACjD,QAAK,IAAI,KAAK,2CAA2C;IACvD,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,UAAU,aAAa;IACvB,aAAa,SAAS;IACvB,CAAC;AACF,SAAM,IAAI,gBACR,8DACD;;AAGH,MAAI,aAAa,SAAS,KAAK,SAAS,KAAK,EAAE;GAC7C,MAAM,cAAc,aAAa,WAAW;AAC5C,QAAK,IAAI,KAAK,6BAA6B;IACzC,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,UAAU;IACV,aAAa,SAAS;IACvB,CAAC;AACF,SAAM,KAAK,uBAAuB,WAAW,aAAa,IAAI,EAC5D,UAAU,aACX,CAAC;AACF,SAAM,IAAI,gBAAgB,4BAA4B;;AAGxD,QAAM,KAAK,uBAAuB,WAAW,aAAa,IAAI,EAC5D,YAAY,KAAK,iBAAiB,cAAc,EACjD,CAAC;AAEF,OAAK,IAAI,KAAK,8BAA8B;GAC1C,IAAI,aAAa;GACjB,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;AAEF,SAAO,EAAE,IAAI,MAAM;;CAGrB,SAAgB,MAAsB;AACpC,SAAO,WAAW,SAAS,CAAC,OAAO,KAAK,CAAC,OAAO,MAAM;;CAGxD,cAAqB,MAAoC;AACvD,MAAI,SAAS,QAAQ;GACnB,MAAM,WAAW,KAAK,uBAAuB,IAAI,OAAO;AACxD,UAAO,UAAU,GAAG,IAAU,CAC3B,UAAU,CACV,SAAS,SAAS,YAAY,IAAI;aAC5B,SAAS,OAClB,QAAO,YAAY;AAGrB,QAAM,IAAI,gBAAgB,8BAA8B,OAAO;;;;;AClPnE,IAAa,yBAAb,MAAoC;CAClC,sBAAyC,QAAQ,oBAAoB;CAErE,MAAsB;CACtB,QAAwB;CAExB,0BAA0C,QAAQ;EAChD,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,QAAQ;EACR,QAAQ;GACN,QAAQ,EAAE,OAAO,EACf,MAAM,4BACP,CAAC;GACF,MAAM,EAAE,OAAO,EACb,QAAQ,EAAE,MAAM,EACjB,CAAC;GACF,UAAU;GACX;EACD,SAAS,OAAO,EAAE,MAAM,aAAa;AACnC,UAAO,MAAM,KAAK,oBAAoB,mBAAmB;IACvD,MAAM,OAAO;IACb,QAAQ,KAAK;IACd,CAAC;;EAEL,CAAC;CAEF,2BAA2C,QAAQ;EACjD,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,QAAQ;EACR,QAAQ;GACN,QAAQ,EAAE,OAAO,EACf,MAAM,4BACP,CAAC;GACF,MAAM,EAAE,OAAO;IACb,QAAQ,EAAE,MAAM;IAChB,OAAO,EAAE,KAAK,EACZ,aACE,oEACH,CAAC;IACH,CAAC;GACF,UAAU;GACX;EACD,SAAS,OAAO,EAAE,MAAM,aAAa;AACnC,UAAO,KAAK,oBAAoB,WAC9B;IACE,MAAM,OAAO;IACb,QAAQ,KAAK;IACd,EACD,KAAK,MACN;;EAEJ,CAAC;;;;ACrDJ,IAAa,mBAAb,MAA8B;CAC5B,yBAA4C,YAAY,cAAc;CACtE,yBAA4C,QAAQ,uBAAuB;CAC3E,mBAAsC,QAAQ,iBAAiB;CAE/D,eAA+B,WAAW;EACxC,MAAM;EACN,aAAa;EACb,SAAS,YAAY;GACnB,MAAM,YAAY,KAAK,uBAAuB,IAAI,YAAY;AAC9D,OAAI,aAAa,EACf;GAIF,MAAM,iBACJ,KAAK,iBAAiB,WAAW,GAAG,aAFxB,OAAU,KAAK;AAI7B,SAAM,KAAK,uBAAuB,WAAW,EAC3C,WAAW,EACT,IAAI,KAAK,iBAAiB,GAAG,eAAe,CAAC,aAAa,EAC3D,EACF,CAAC;;EAEL,CAAC;;;;;;;;;;;;;;;ACDJ,MAAa,wBAAwB,QAAQ;CAC3C,MAAM;CACN,UAAU;EACR;EACA;EACA;EACA;EACD;CACF,CAAC"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/api/verifications/schemas/requestVerificationCodeResponseSchema.ts","../../../src/api/verifications/schemas/validateVerificationCodeResponseSchema.ts","../../../src/api/verifications/schemas/verificationTypeEnumSchema.ts","../../../src/api/verifications/entities/verifications.ts","../../../src/api/verifications/schemas/verificationSettingsSchema.ts","../../../src/api/verifications/parameters/VerificationParameters.ts","../../../src/api/verifications/services/VerificationService.ts","../../../src/api/verifications/controllers/VerificationController.ts","../../../src/api/verifications/jobs/VerificationJobs.ts","../../../src/api/verifications/index.ts"],"sourcesContent":["import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const requestVerificationCodeResponseSchema = t.object({\n  token: t.string({\n    description:\n      \"The verification token (6-digit code for phone, UUID for email). The caller should send this to the user via their preferred notification method.\",\n  }),\n  codeExpiration: t.integer({\n    description: \"Time in seconds before your verification token expires.\",\n  }),\n  verificationCooldown: t.integer({\n    description:\n      \"Cooldown period in seconds before you can request another verification.\",\n  }),\n  maxVerificationAttempts: t.integer({\n    description:\n      \"Maximum number of verification attempts allowed before the token is locked.\",\n  }),\n});\n\nexport type RequestVerificationResponse = Static<\n  typeof requestVerificationCodeResponseSchema\n>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const validateVerificationCodeResponseSchema = t.object({\n  ok: t.boolean({\n    description: \"Indicates whether the verification was successful.\",\n  }),\n  alreadyVerified: t.optional(\n    t.boolean({\n      description: \"Indicates whether the target was already verified.\",\n    }),\n  ),\n});\n\nexport type ValidateVerificationCodeResponse = Static<\n  typeof validateVerificationCodeResponseSchema\n>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const verificationTypeEnumSchema = t.enum([\"code\", \"link\"]);\nexport type VerificationTypeEnum = Static<typeof verificationTypeEnumSchema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\nimport { verificationTypeEnumSchema } from \"../schemas/verificationTypeEnumSchema.ts\";\n\nexport const verifications = $entity({\n  name: \"verification\",\n  schema: t.object({\n    id: db.primaryKey(t.bigint()),\n\n    createdAt: db.createdAt(),\n\n    updatedAt: db.updatedAt(),\n\n    version: db.version(),\n\n    type: verificationTypeEnumSchema,\n\n    target: t.text({\n      description: \"Can be a phone (E.164 format) or email address\",\n    }),\n\n    code: t.text({\n      description: \"Hashed verification token (n-digit code or UUID)\",\n    }),\n\n    verifiedAt: t.optional(\n      t.datetime({\n        description: \"When it was successfully verified\",\n      }),\n    ),\n\n    attempts: db.default(\n      t.integer({\n        description: \"Number of failed attempts (to prevent brute-force)\",\n      }),\n      0,\n    ),\n  }),\n  indexes: [\n    \"createdAt\",\n    {\n      columns: [\"target\", \"code\"],\n    },\n  ],\n});\n\nexport const verificationEntitySchema = verifications.schema;\nexport const verificationEntityInsertSchema = verifications.insertSchema;\nexport type VerificationEntity = Static<typeof verifications.schema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const verificationSettingsSchema = t.object({\n  code: t.object(\n    {\n      maxAttempts: t.integer({\n        description:\n          \"Maximum number of attempts before locking the verification.\",\n        minimum: 1,\n        maximum: 10,\n      }),\n      codeLength: t.integer({\n        description: \"Length of the verification code.\",\n        minimum: 4,\n        maximum: 12,\n      }),\n      codeExpiration: t.integer({\n        description: \"Time in seconds before the verification code expires.\",\n        minimum: 60, // 1 minute\n        maximum: 3600, // 1 hour\n      }),\n      verificationCooldown: t.integer({\n        description: \"Cooldown period in seconds after a request verification.\",\n        minimum: 0,\n        maximum: 3600, // 1 hour\n      }),\n      limitPerDay: t.integer({\n        description:\n          \"Maximum number of verification requests per day for one entry.\",\n        minimum: 1,\n        maximum: 100,\n      }),\n    },\n    {\n      description: \"Settings specific to code verifications.\",\n    },\n  ),\n  link: t.object(\n    {\n      maxAttempts: t.integer({\n        description:\n          \"Maximum number of attempts before locking the verification.\",\n        minimum: 1,\n        maximum: 10,\n      }),\n      codeExpiration: t.integer({\n        description: \"Time in seconds before the verification token expires.\",\n        minimum: 60, // 1 minute\n        maximum: 7200, // 2 hours\n      }),\n      verificationCooldown: t.integer({\n        description: \"Cooldown period in seconds after a request verification.\",\n        minimum: 0,\n        maximum: 3600, // 1 hour\n      }),\n      limitPerDay: t.integer({\n        description:\n          \"Maximum number of verification requests per day for one entry.\",\n        minimum: 1,\n        maximum: 100,\n      }),\n    },\n    {\n      description: \"Settings specific to link verifications.\",\n    },\n  ),\n  purgeDays: t.integer({\n    description:\n      \"Number of days after which expired verifications are automatically deleted. Set to 0 to disable auto-deletion.\",\n    minimum: 0,\n    maximum: 365,\n  }),\n});\n\nexport type VerificationSettings = Static<typeof verificationSettingsSchema>;\n","import { $atom, $state, type Static } from \"alepha\";\nimport {\n  type VerificationSettings,\n  verificationSettingsSchema,\n} from \"../schemas/verificationSettingsSchema.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Verification settings configuration atom\n */\nexport const verificationOptions = $atom({\n  name: \"alepha.api.verifications.options\",\n  schema: verificationSettingsSchema,\n  default: {\n    code: {\n      maxAttempts: 5,\n      codeLength: 6,\n      codeExpiration: 300, // 5 minutes\n      verificationCooldown: 90,\n      limitPerDay: 10,\n    },\n    link: {\n      maxAttempts: 3, // Lower since UUIDs are harder to guess\n      codeExpiration: 1800, // 30 minutes\n      verificationCooldown: 90,\n      limitPerDay: 10,\n    },\n    purgeDays: 1,\n  },\n});\n\nexport type VerificationOptions = Static<typeof verificationOptions.schema>;\n\ndeclare module \"alepha\" {\n  interface State {\n    [verificationOptions.key]: VerificationOptions;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport class VerificationParameters {\n  protected readonly options = $state(verificationOptions);\n\n  public get<K extends keyof VerificationSettings>(\n    key: K,\n  ): VerificationSettings[K] {\n    return this.options[key];\n  }\n}\n","import { createHash, randomInt, randomUUID } from \"node:crypto\";\nimport { $inject } from \"alepha\";\nimport { DateTimeProvider } from \"alepha/datetime\";\nimport { $logger } from \"alepha/logger\";\nimport { $repository } from \"alepha/orm\";\nimport { BadRequestError, NotFoundError } from \"alepha/server\";\nimport {\n  type VerificationEntity,\n  verifications,\n} from \"../entities/verifications.ts\";\nimport { VerificationParameters } from \"../parameters/VerificationParameters.ts\";\nimport type { RequestVerificationResponse } from \"../schemas/requestVerificationCodeResponseSchema.ts\";\nimport type { ValidateVerificationCodeResponse } from \"../schemas/validateVerificationCodeResponseSchema.ts\";\nimport type { VerificationTypeEnum } from \"../schemas/verificationTypeEnumSchema.ts\";\n\nexport class VerificationService {\n  protected readonly log = $logger();\n  protected readonly dateTimeProvider = $inject(DateTimeProvider);\n  protected readonly verificationParameters = $inject(VerificationParameters);\n  protected readonly verificationRepository = $repository(verifications);\n\n  public async findByEntry(\n    entry: VerificationEntry,\n  ): Promise<VerificationEntity> {\n    this.log.trace(\"Finding verification by entry\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    const results = await this.verificationRepository.findMany({\n      limit: 1, // only need the most recent entry\n      orderBy: {\n        column: \"createdAt\",\n        direction: \"desc\",\n      },\n      where: {\n        type: { eq: entry.type },\n        target: { eq: entry.target },\n      },\n    });\n\n    if (results.length === 0) {\n      this.log.debug(\"Verification entry not found\", {\n        type: entry.type,\n        target: entry.target,\n      });\n      throw new NotFoundError(\"Verification entry not found\");\n    }\n\n    this.log.debug(\"Verification entry found\", {\n      id: results[0].id,\n      type: entry.type,\n      target: entry.target,\n    });\n\n    return results[0];\n  }\n\n  public findRecentsByEntry(entry: VerificationEntry) {\n    this.log.trace(\"Finding recent verifications by entry\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    return this.verificationRepository.findMany({\n      orderBy: {\n        column: \"createdAt\",\n        direction: \"desc\",\n      },\n      where: {\n        type: { eq: entry.type },\n        target: { eq: entry.target },\n        createdAt: {\n          gte: this.dateTimeProvider.now().startOf(\"day\").toISOString(),\n        },\n      },\n    });\n  }\n\n  /**\n   * Creates a verification entry and returns the token.\n   * The caller is responsible for sending notifications with the token.\n   * This allows for context-specific notifications (e.g., password reset vs email verification).\n   */\n  public async createVerification(\n    entry: VerificationEntry,\n  ): Promise<RequestVerificationResponse> {\n    this.log.trace(\"Creating verification\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    const settings = this.verificationParameters.get(entry.type);\n\n    const recents = await this.findRecentsByEntry(entry);\n    if (recents.length >= settings.limitPerDay) {\n      this.log.warn(\"Daily verification limit reached\", {\n        type: entry.type,\n        target: entry.target,\n        limit: settings.limitPerDay,\n        count: recents.length,\n      });\n      throw new BadRequestError(\n        `Maximum number of verification requests per day reached (${settings.limitPerDay})`,\n      );\n    }\n\n    const existingVerification = recents[0];\n    if (existingVerification) {\n      const nowSec = this.dateTimeProvider.now().unix();\n      const createdAtSec = this.dateTimeProvider\n        .of(existingVerification.createdAt)\n        .unix();\n\n      const diffSec = nowSec - createdAtSec;\n      if (diffSec < settings.verificationCooldown) {\n        const remainingCooldown = Math.floor(\n          settings.verificationCooldown - diffSec,\n        );\n        this.log.debug(\"Verification on cooldown\", {\n          type: entry.type,\n          target: entry.target,\n          remainingSeconds: remainingCooldown,\n        });\n        throw new BadRequestError(\n          `Verification is on cooldown for ${remainingCooldown} seconds`,\n        );\n      }\n    }\n\n    const token = this.generateToken(entry.type);\n\n    const verification = await this.verificationRepository.create({\n      type: entry.type,\n      target: entry.target,\n      code: this.hashCode(token),\n    });\n\n    this.log.info(\"Verification created\", {\n      id: verification.id,\n      type: entry.type,\n      target: entry.target,\n      expiresInSeconds: settings.codeExpiration,\n    });\n\n    return {\n      token,\n      codeExpiration: settings.codeExpiration,\n      verificationCooldown: settings.verificationCooldown,\n      maxVerificationAttempts: settings.maxAttempts,\n    };\n  }\n\n  public async verifyCode(\n    entry: VerificationEntry,\n    code: string,\n  ): Promise<ValidateVerificationCodeResponse> {\n    this.log.trace(\"Verifying code\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    const settings = this.verificationParameters.get(entry.type);\n\n    const verification = await this.findByEntry(entry);\n    if (verification.verifiedAt) {\n      this.log.debug(\"Verification already verified\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        verifiedAt: verification.verifiedAt,\n      });\n      return { ok: true, alreadyVerified: true };\n    }\n\n    // DO NOT DELETE THE VERIFICATION WHEN IT IS REJECTED,\n    // or we won't be able to cooldown the verification\n\n    const now = this.dateTimeProvider.now();\n    const expirationDate = this.dateTimeProvider\n      .of(verification.createdAt)\n      .add(settings.codeExpiration, \"seconds\");\n\n    if (now > expirationDate) {\n      this.log.warn(\"Verification code expired\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        createdAt: verification.createdAt,\n        expiredAt: expirationDate.toISOString(),\n      });\n      throw new BadRequestError(\"Verification code has expired\");\n    }\n\n    if (verification.attempts >= settings.maxAttempts) {\n      this.log.warn(\"Verification locked due to max attempts\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        attempts: verification.attempts,\n        maxAttempts: settings.maxAttempts,\n      });\n      throw new BadRequestError(\n        \"Maximum number of attempts reached - verification is locked\",\n      );\n    }\n\n    if (verification.code !== this.hashCode(code)) {\n      const newAttempts = verification.attempts + 1;\n      this.log.warn(\"Invalid verification code\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        attempts: newAttempts,\n        maxAttempts: settings.maxAttempts,\n      });\n      await this.verificationRepository.updateById(verification.id, {\n        attempts: newAttempts,\n      });\n      throw new BadRequestError(\"Invalid verification code\");\n    }\n\n    await this.verificationRepository.updateById(verification.id, {\n      verifiedAt: this.dateTimeProvider.nowISOString(),\n    });\n\n    this.log.info(\"Verification code verified\", {\n      id: verification.id,\n      type: entry.type,\n      target: entry.target,\n    });\n\n    return { ok: true };\n  }\n\n  public hashCode(code: string): string {\n    return createHash(\"sha256\").update(code).digest(\"hex\");\n  }\n\n  public generateToken(type: VerificationTypeEnum): string {\n    if (type === \"code\") {\n      const settings = this.verificationParameters.get(\"code\");\n      return randomInt(0, 1_000_000)\n        .toString()\n        .padStart(settings.codeLength, \"0\");\n    } else if (type === \"link\") {\n      return randomUUID();\n    }\n\n    throw new BadRequestError(`Invalid verification type: ${type}`);\n  }\n}\n\nexport interface VerificationEntry {\n  type: VerificationTypeEnum;\n  target: string;\n}\n","import { $inject, t } from \"alepha\";\nimport { $action } from \"alepha/server\";\nimport { requestVerificationCodeResponseSchema } from \"../schemas/requestVerificationCodeResponseSchema.ts\";\nimport { validateVerificationCodeResponseSchema } from \"../schemas/validateVerificationCodeResponseSchema.ts\";\nimport { verificationTypeEnumSchema } from \"../schemas/verificationTypeEnumSchema.ts\";\nimport { VerificationService } from \"../services/VerificationService.ts\";\n\nexport class VerificationController {\n  protected readonly verificationService = $inject(VerificationService);\n\n  public readonly url = \"/verifications\";\n  public readonly group = \"verifications\";\n\n  public readonly requestVerificationCode = $action({\n    path: `${this.url}/:type`,\n    group: this.group,\n    method: \"POST\",\n    schema: {\n      params: t.object({\n        type: verificationTypeEnumSchema,\n      }),\n      body: t.object({\n        target: t.text(),\n      }),\n      response: requestVerificationCodeResponseSchema,\n    },\n    handler: async ({ body, params }) => {\n      return await this.verificationService.createVerification({\n        type: params.type,\n        target: body.target,\n      });\n    },\n  });\n\n  public readonly validateVerificationCode = $action({\n    path: `${this.url}/:type/validate`,\n    group: this.group,\n    method: \"POST\",\n    schema: {\n      params: t.object({\n        type: verificationTypeEnumSchema,\n      }),\n      body: t.object({\n        target: t.text(),\n        token: t.text({\n          description:\n            \"The verification token (6-digit code for phone, UUID for email).\",\n        }),\n      }),\n      response: validateVerificationCodeResponseSchema,\n    },\n    handler: async ({ body, params }) => {\n      return this.verificationService.verifyCode(\n        {\n          type: params.type,\n          target: body.target,\n        },\n        body.token,\n      );\n    },\n  });\n}\n","import { $inject } from \"alepha\";\nimport { DateTimeProvider } from \"alepha/datetime\";\nimport { $repository } from \"alepha/orm\";\nimport { $scheduler } from \"alepha/scheduler\";\nimport { verifications } from \"../entities/verifications.ts\";\nimport { VerificationParameters } from \"../parameters/VerificationParameters.ts\";\n\nexport class VerificationJobs {\n  protected readonly verificationRepository = $repository(verifications);\n  protected readonly verificationParameters = $inject(VerificationParameters);\n  protected readonly dateTimeProvider = $inject(DateTimeProvider);\n\n  public readonly cleanExpired = $scheduler({\n    name: \"api:verifications:cleanExpired\",\n    cron: \"0 * * * *\", // Hourly at minute 0\n    description: \"Clean expired verifications\",\n    handler: async () => {\n      const purgeDays = this.verificationParameters.get(\"purgeDays\");\n      if (purgeDays <= 0) {\n        return; // Auto deletion is disabled\n      }\n\n      const dayMs = 24 * 60 * 60 * 1000;\n      const purgeThreshold =\n        this.dateTimeProvider.nowMillis() - purgeDays * dayMs;\n\n      await this.verificationRepository.deleteMany({\n        createdAt: {\n          lt: this.dateTimeProvider.of(purgeThreshold).toISOString(),\n        },\n      });\n    },\n  });\n}\n","import { $module } from \"alepha\";\nimport { VerificationController } from \"./controllers/VerificationController.ts\";\nimport { VerificationJobs } from \"./jobs/VerificationJobs.ts\";\nimport { VerificationParameters } from \"./parameters/VerificationParameters.ts\";\nimport { VerificationService } from \"./services/VerificationService.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./controllers/VerificationController.ts\";\nexport * from \"./entities/verifications.ts\";\nexport * from \"./jobs/VerificationJobs.ts\";\nexport * from \"./parameters/VerificationParameters.ts\";\nexport * from \"./schemas/requestVerificationCodeResponseSchema.ts\";\nexport * from \"./schemas/validateVerificationCodeResponseSchema.ts\";\nexport * from \"./schemas/verificationTypeEnumSchema.ts\";\nexport * from \"./services/VerificationService.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Email and phone verification workflows.\n *\n * **Features:**\n * - Verification token generation\n * - Verification code sending\n * - Verification completion tracking\n * - Resend functionality\n *\n * @module alepha.api.verifications\n */\nexport const AlephaApiVerification = $module({\n  name: \"alepha.api.verifications\",\n  services: [\n    VerificationController,\n    VerificationJobs,\n    VerificationService,\n    VerificationParameters,\n  ],\n});\n"],"mappings":";;;;;;;;AAGA,MAAa,wCAAwC,EAAE,OAAO;CAC5D,OAAO,EAAE,OAAO,EACd,aACE,qJACH,CAAC;CACF,gBAAgB,EAAE,QAAQ,EACxB,aAAa,2DACd,CAAC;CACF,sBAAsB,EAAE,QAAQ,EAC9B,aACE,2EACH,CAAC;CACF,yBAAyB,EAAE,QAAQ,EACjC,aACE,+EACH,CAAC;CACH,CAAC;;;AChBF,MAAa,yCAAyC,EAAE,OAAO;CAC7D,IAAI,EAAE,QAAQ,EACZ,aAAa,sDACd,CAAC;CACF,iBAAiB,EAAE,SACjB,EAAE,QAAQ,EACR,aAAa,sDACd,CAAC,CACH;CACF,CAAC;;;ACTF,MAAa,6BAA6B,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC;;;ACElE,MAAa,gBAAgB,QAAQ;CACnC,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,QAAQ,CAAC;EAE7B,WAAW,GAAG,WAAW;EAEzB,WAAW,GAAG,WAAW;EAEzB,SAAS,GAAG,SAAS;EAErB,MAAM;EAEN,QAAQ,EAAE,KAAK,EACb,aAAa,kDACd,CAAC;EAEF,MAAM,EAAE,KAAK,EACX,aAAa,oDACd,CAAC;EAEF,YAAY,EAAE,SACZ,EAAE,SAAS,EACT,aAAa,qCACd,CAAC,CACH;EAED,UAAU,GAAG,QACX,EAAE,QAAQ,EACR,aAAa,sDACd,CAAC,EACF,EACD;EACF,CAAC;CACF,SAAS,CACP,aACA,EACE,SAAS,CAAC,UAAU,OAAO,EAC5B,CACF;CACF,CAAC;AAEF,MAAa,2BAA2B,cAAc;AACtD,MAAa,iCAAiC,cAAc;;;;;;AErC5D,MAAa,sBAAsB,MAAM;CACvC,MAAM;CACN,QDVwC,EAAE,OAAO;EACjD,MAAM,EAAE,OACN;GACE,aAAa,EAAE,QAAQ;IACrB,aACE;IACF,SAAS;IACT,SAAS;IACV,CAAC;GACF,YAAY,EAAE,QAAQ;IACpB,aAAa;IACb,SAAS;IACT,SAAS;IACV,CAAC;GACF,gBAAgB,EAAE,QAAQ;IACxB,aAAa;IACb,SAAS;IACT,SAAS;IACV,CAAC;GACF,sBAAsB,EAAE,QAAQ;IAC9B,aAAa;IACb,SAAS;IACT,SAAS;IACV,CAAC;GACF,aAAa,EAAE,QAAQ;IACrB,aACE;IACF,SAAS;IACT,SAAS;IACV,CAAC;GACH,EACD,EACE,aAAa,4CACd,CACF;EACD,MAAM,EAAE,OACN;GACE,aAAa,EAAE,QAAQ;IACrB,aACE;IACF,SAAS;IACT,SAAS;IACV,CAAC;GACF,gBAAgB,EAAE,QAAQ;IACxB,aAAa;IACb,SAAS;IACT,SAAS;IACV,CAAC;GACF,sBAAsB,EAAE,QAAQ;IAC9B,aAAa;IACb,SAAS;IACT,SAAS;IACV,CAAC;GACF,aAAa,EAAE,QAAQ;IACrB,aACE;IACF,SAAS;IACT,SAAS;IACV,CAAC;GACH,EACD,EACE,aAAa,4CACd,CACF;EACD,WAAW,EAAE,QAAQ;GACnB,aACE;GACF,SAAS;GACT,SAAS;GACV,CAAC;EACH,CAAC;CC3DA,SAAS;EACP,MAAM;GACJ,aAAa;GACb,YAAY;GACZ,gBAAgB;GAChB,sBAAsB;GACtB,aAAa;GACd;EACD,MAAM;GACJ,aAAa;GACb,gBAAgB;GAChB,sBAAsB;GACtB,aAAa;GACd;EACD,WAAW;EACZ;CACF,CAAC;AAYF,IAAa,yBAAb,MAAoC;CAClC,UAA6B,OAAO,oBAAoB;CAExD,IACE,KACyB;AACzB,SAAO,KAAK,QAAQ;;;;;ACjCxB,IAAa,sBAAb,MAAiC;CAC/B,MAAyB,SAAS;CAClC,mBAAsC,QAAQ,iBAAiB;CAC/D,yBAA4C,QAAQ,uBAAuB;CAC3E,yBAA4C,YAAY,cAAc;CAEtE,MAAa,YACX,OAC6B;AAC7B,OAAK,IAAI,MAAM,iCAAiC;GAC9C,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;EAEF,MAAM,UAAU,MAAM,KAAK,uBAAuB,SAAS;GACzD,OAAO;GACP,SAAS;IACP,QAAQ;IACR,WAAW;IACZ;GACD,OAAO;IACL,MAAM,EAAE,IAAI,MAAM,MAAM;IACxB,QAAQ,EAAE,IAAI,MAAM,QAAQ;IAC7B;GACF,CAAC;AAEF,MAAI,QAAQ,WAAW,GAAG;AACxB,QAAK,IAAI,MAAM,gCAAgC;IAC7C,MAAM,MAAM;IACZ,QAAQ,MAAM;IACf,CAAC;AACF,SAAM,IAAI,cAAc,+BAA+B;;AAGzD,OAAK,IAAI,MAAM,4BAA4B;GACzC,IAAI,QAAQ,GAAG;GACf,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;AAEF,SAAO,QAAQ;;CAGjB,mBAA0B,OAA0B;AAClD,OAAK,IAAI,MAAM,yCAAyC;GACtD,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;AAEF,SAAO,KAAK,uBAAuB,SAAS;GAC1C,SAAS;IACP,QAAQ;IACR,WAAW;IACZ;GACD,OAAO;IACL,MAAM,EAAE,IAAI,MAAM,MAAM;IACxB,QAAQ,EAAE,IAAI,MAAM,QAAQ;IAC5B,WAAW,EACT,KAAK,KAAK,iBAAiB,KAAK,CAAC,QAAQ,MAAM,CAAC,aAAa,EAC9D;IACF;GACF,CAAC;;;;;;;CAQJ,MAAa,mBACX,OACsC;AACtC,OAAK,IAAI,MAAM,yBAAyB;GACtC,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;EAEF,MAAM,WAAW,KAAK,uBAAuB,IAAI,MAAM,KAAK;EAE5D,MAAM,UAAU,MAAM,KAAK,mBAAmB,MAAM;AACpD,MAAI,QAAQ,UAAU,SAAS,aAAa;AAC1C,QAAK,IAAI,KAAK,oCAAoC;IAChD,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,OAAO,SAAS;IAChB,OAAO,QAAQ;IAChB,CAAC;AACF,SAAM,IAAI,gBACR,4DAA4D,SAAS,YAAY,GAClF;;EAGH,MAAM,uBAAuB,QAAQ;AACrC,MAAI,sBAAsB;GAMxB,MAAM,UALS,KAAK,iBAAiB,KAAK,CAAC,MAAM,GAC5B,KAAK,iBACvB,GAAG,qBAAqB,UAAU,CAClC,MAAM;AAGT,OAAI,UAAU,SAAS,sBAAsB;IAC3C,MAAM,oBAAoB,KAAK,MAC7B,SAAS,uBAAuB,QACjC;AACD,SAAK,IAAI,MAAM,4BAA4B;KACzC,MAAM,MAAM;KACZ,QAAQ,MAAM;KACd,kBAAkB;KACnB,CAAC;AACF,UAAM,IAAI,gBACR,mCAAmC,kBAAkB,UACtD;;;EAIL,MAAM,QAAQ,KAAK,cAAc,MAAM,KAAK;EAE5C,MAAM,eAAe,MAAM,KAAK,uBAAuB,OAAO;GAC5D,MAAM,MAAM;GACZ,QAAQ,MAAM;GACd,MAAM,KAAK,SAAS,MAAM;GAC3B,CAAC;AAEF,OAAK,IAAI,KAAK,wBAAwB;GACpC,IAAI,aAAa;GACjB,MAAM,MAAM;GACZ,QAAQ,MAAM;GACd,kBAAkB,SAAS;GAC5B,CAAC;AAEF,SAAO;GACL;GACA,gBAAgB,SAAS;GACzB,sBAAsB,SAAS;GAC/B,yBAAyB,SAAS;GACnC;;CAGH,MAAa,WACX,OACA,MAC2C;AAC3C,OAAK,IAAI,MAAM,kBAAkB;GAC/B,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;EAEF,MAAM,WAAW,KAAK,uBAAuB,IAAI,MAAM,KAAK;EAE5D,MAAM,eAAe,MAAM,KAAK,YAAY,MAAM;AAClD,MAAI,aAAa,YAAY;AAC3B,QAAK,IAAI,MAAM,iCAAiC;IAC9C,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,YAAY,aAAa;IAC1B,CAAC;AACF,UAAO;IAAE,IAAI;IAAM,iBAAiB;IAAM;;EAM5C,MAAM,MAAM,KAAK,iBAAiB,KAAK;EACvC,MAAM,iBAAiB,KAAK,iBACzB,GAAG,aAAa,UAAU,CAC1B,IAAI,SAAS,gBAAgB,UAAU;AAE1C,MAAI,MAAM,gBAAgB;AACxB,QAAK,IAAI,KAAK,6BAA6B;IACzC,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,WAAW,aAAa;IACxB,WAAW,eAAe,aAAa;IACxC,CAAC;AACF,SAAM,IAAI,gBAAgB,gCAAgC;;AAG5D,MAAI,aAAa,YAAY,SAAS,aAAa;AACjD,QAAK,IAAI,KAAK,2CAA2C;IACvD,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,UAAU,aAAa;IACvB,aAAa,SAAS;IACvB,CAAC;AACF,SAAM,IAAI,gBACR,8DACD;;AAGH,MAAI,aAAa,SAAS,KAAK,SAAS,KAAK,EAAE;GAC7C,MAAM,cAAc,aAAa,WAAW;AAC5C,QAAK,IAAI,KAAK,6BAA6B;IACzC,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,UAAU;IACV,aAAa,SAAS;IACvB,CAAC;AACF,SAAM,KAAK,uBAAuB,WAAW,aAAa,IAAI,EAC5D,UAAU,aACX,CAAC;AACF,SAAM,IAAI,gBAAgB,4BAA4B;;AAGxD,QAAM,KAAK,uBAAuB,WAAW,aAAa,IAAI,EAC5D,YAAY,KAAK,iBAAiB,cAAc,EACjD,CAAC;AAEF,OAAK,IAAI,KAAK,8BAA8B;GAC1C,IAAI,aAAa;GACjB,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;AAEF,SAAO,EAAE,IAAI,MAAM;;CAGrB,SAAgB,MAAsB;AACpC,SAAO,WAAW,SAAS,CAAC,OAAO,KAAK,CAAC,OAAO,MAAM;;CAGxD,cAAqB,MAAoC;AACvD,MAAI,SAAS,QAAQ;GACnB,MAAM,WAAW,KAAK,uBAAuB,IAAI,OAAO;AACxD,UAAO,UAAU,GAAG,IAAU,CAC3B,UAAU,CACV,SAAS,SAAS,YAAY,IAAI;aAC5B,SAAS,OAClB,QAAO,YAAY;AAGrB,QAAM,IAAI,gBAAgB,8BAA8B,OAAO;;;;;AClPnE,IAAa,yBAAb,MAAoC;CAClC,sBAAyC,QAAQ,oBAAoB;CAErE,MAAsB;CACtB,QAAwB;CAExB,0BAA0C,QAAQ;EAChD,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,QAAQ;EACR,QAAQ;GACN,QAAQ,EAAE,OAAO,EACf,MAAM,4BACP,CAAC;GACF,MAAM,EAAE,OAAO,EACb,QAAQ,EAAE,MAAM,EACjB,CAAC;GACF,UAAU;GACX;EACD,SAAS,OAAO,EAAE,MAAM,aAAa;AACnC,UAAO,MAAM,KAAK,oBAAoB,mBAAmB;IACvD,MAAM,OAAO;IACb,QAAQ,KAAK;IACd,CAAC;;EAEL,CAAC;CAEF,2BAA2C,QAAQ;EACjD,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,QAAQ;EACR,QAAQ;GACN,QAAQ,EAAE,OAAO,EACf,MAAM,4BACP,CAAC;GACF,MAAM,EAAE,OAAO;IACb,QAAQ,EAAE,MAAM;IAChB,OAAO,EAAE,KAAK,EACZ,aACE,oEACH,CAAC;IACH,CAAC;GACF,UAAU;GACX;EACD,SAAS,OAAO,EAAE,MAAM,aAAa;AACnC,UAAO,KAAK,oBAAoB,WAC9B;IACE,MAAM,OAAO;IACb,QAAQ,KAAK;IACd,EACD,KAAK,MACN;;EAEJ,CAAC;;;;ACrDJ,IAAa,mBAAb,MAA8B;CAC5B,yBAA4C,YAAY,cAAc;CACtE,yBAA4C,QAAQ,uBAAuB;CAC3E,mBAAsC,QAAQ,iBAAiB;CAE/D,eAA+B,WAAW;EACxC,MAAM;EACN,MAAM;EACN,aAAa;EACb,SAAS,YAAY;GACnB,MAAM,YAAY,KAAK,uBAAuB,IAAI,YAAY;AAC9D,OAAI,aAAa,EACf;GAIF,MAAM,iBACJ,KAAK,iBAAiB,WAAW,GAAG,aAFxB,OAAU,KAAK;AAI7B,SAAM,KAAK,uBAAuB,WAAW,EAC3C,WAAW,EACT,IAAI,KAAK,iBAAiB,GAAG,eAAe,CAAC,aAAa,EAC3D,EACF,CAAC;;EAEL,CAAC;;;;;;;;;;;;;;;ACFJ,MAAa,wBAAwB,QAAQ;CAC3C,MAAM;CACN,UAAU;EACR;EACA;EACA;EACA;EACD;CACF,CAAC"}

package/dist/cli/core/index.d.ts

@@ -126,16 +126,6 @@ declare const alephaPackageJson: {
       import: string;
       default: string;
     };
-    "./api/invitations": {
-      types: string;
-      import: string;
-      default: string;
-    };
-    "./api/issues": {
-      types: string;
-      import: string;
-      default: string;
-    };
     "./api/jobs": {
       types: string;
       "react-native": string;
@@ -174,11 +164,6 @@ declare const alephaPackageJson: {
       import: string;
       default: string;
     };
-    "./api/subscriptions": {
-      types: string;
-      import: string;
-      default: string;
-    };
     "./api/users": {
       types: string;
       "react-native": string;
@@ -193,13 +178,6 @@ declare const alephaPackageJson: {
       import: string;
       default: string;
     };
-    "./api/workflows": {
-      types: string;
-      "react-native": string;
-      browser: string;
-      import: string;
-      default: string;
-    };
     "./batch": {
       types: string;
       import: string;
@@ -394,6 +372,11 @@ declare const alephaPackageJson: {
       import: string;
       default: string;
     };
+    "./react/ui": {
+      types: string;
+      import: string;
+      default: string;
+    };
     "./react/websocket": {
       types: string;
       import: string;
@@ -12551,7 +12534,6 @@ declare class PackageManagerUtils {
 }
 interface DependencyModes {
   react?: boolean;
-  ui?: boolean;
   expo?: boolean;
   tailwind?: boolean;
   test?: boolean;
@@ -12565,7 +12547,6 @@ interface DependencyModes {
 type AgentMdType = "claude" | "agents";
 interface AgentMdOptions {
   type: AgentMdType;
-  ui?: boolean;
 }
 //#endregion
 //#region ../../src/cli/core/services/ProjectScaffolder.d.ts
@@ -12652,8 +12633,6 @@ declare class ProjectScaffolder {
    * - src/api/controllers/HelloController.ts (example controller)
    */
   ensureApiProject(root: string, opts?: {
-    auth?: boolean;
-    adminEmail?: string;
     force?: boolean;
   }): Promise<void>;
   /**
@@ -12666,14 +12645,13 @@ declare class ProjectScaffolder {
    */
   ensureWebProject(root: string, opts?: {
     api?: boolean;
-    ui?: boolean;
-    auth?: boolean;
-    admin?: boolean;
     tailwind?: boolean;
     force?: boolean;
   }): Promise<void>;
   /**
-   * Ensure test directory exists with a dummy test file.
+   * Ensure test directory exists with a dummy test file + a self-contained
+   * `vitest.config.ts`. Pinning `test.root` prevents Vitest from walking up
+   * to a parent monorepo config (e.g. one that boots a Postgres container).
    */
   ensureTestDir(root: string): Promise<void>;
   /**
@@ -12691,8 +12669,6 @@ declare class ProjectScaffolder {
       pm?: "yarn" | "npm" | "pnpm" | "bun";
       api?: boolean;
       react?: boolean;
-      ui?: boolean;
-      saas?: boolean;
       tailwind?: boolean;
       test?: boolean;
       force?: boolean;
@@ -13589,8 +13565,6 @@ declare class InitCommand {
     pm: _$alepha.TOptional<_$alepha.TUnsafe<"bun" | "yarn" | "npm" | "pnpm">>;
     api: _$alepha.TOptional<_$alepha.TBoolean>;
     react: _$alepha.TOptional<_$alepha.TBoolean>;
-    ui: _$alepha.TOptional<_$alepha.TBoolean>;
-    saas: _$alepha.TOptional<_$alepha.TBoolean>;
     tailwind: _$alepha.TOptional<_$alepha.TBoolean>;
     test: _$alepha.TOptional<_$alepha.TBoolean>;
     force: _$alepha.TOptional<_$alepha.TBoolean>;