briyah 1.0.0

package/dist/server/src/auth/agent-access.decorator.d.ts

@@ -0,0 +1,2 @@
+export declare const AgentReadAccess: () => <TFunction extends Function, Y>(target: TFunction | object, propertyKey?: string | symbol, descriptor?: TypedPropertyDescriptor<Y>) => void;
+export declare const AgentAccess: () => <TFunction extends Function, Y>(target: TFunction | object, propertyKey?: string | symbol, descriptor?: TypedPropertyDescriptor<Y>) => void;

package/dist/server/src/auth/agent-access.decorator.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentAccess = exports.AgentReadAccess = void 0;
+const common_1 = require("@nestjs/common");
+const scopes_guard_1 = require("./scopes.guard");
+const scopes_decorator_1 = require("./scopes.decorator");
+const AgentReadAccess = () => (0, common_1.applyDecorators)((0, common_1.UseGuards)(scopes_guard_1.ScopesGuard), (0, scopes_decorator_1.RequireScopes)('agent:read'));
+exports.AgentReadAccess = AgentReadAccess;
+const AgentAccess = () => (0, common_1.applyDecorators)((0, common_1.UseGuards)(scopes_guard_1.ScopesGuard), (0, scopes_decorator_1.RequireScopes)('agent:read', 'agent:interact'));
+exports.AgentAccess = AgentAccess;

package/dist/server/src/auth/auth.controller.d.ts

@@ -0,0 +1,38 @@
+import { Request as ExpressRequest, Response as ExpressResponse } from 'express';
+import { AuthService } from './auth.service';
+import { PublishedAgentsService } from '../ai/published-agents.service';
+import { PublishedRoomsService } from '../room/published-rooms.service';
+import { UserServiceManager } from '../app/user-service-manager';
+import { TwilioService } from './twilio.service';
+import { PhoneValidationService } from './phone-validation.service';
+import { RateLimitService } from './rate-limit.service';
+import { UsersService } from './users.service';
+import { SendOtpDto, VerifyOtpDto } from './dto/phone-login.dto';
+import { BotLoginDto } from './dto/bot-login.dto';
+export declare class AuthController {
+    private authService;
+    private publishedAgentsService;
+    private publishedRoomsService;
+    private userServiceManager;
+    private twilioService;
+    private phoneValidationService;
+    private rateLimitService;
+    private usersService;
+    constructor(authService: AuthService, publishedAgentsService: PublishedAgentsService, publishedRoomsService: PublishedRoomsService, userServiceManager: UserServiceManager, twilioService: TwilioService, phoneValidationService: PhoneValidationService, rateLimitService: RateLimitService, usersService: UsersService);
+    sendLoginOtp(dto: SendOtpDto): Promise<{
+        success: boolean;
+        message: string;
+        remainingAttempts: number;
+    }>;
+    verifyLoginOtp(dto: VerifyOtpDto, res: ExpressResponse): Promise<ExpressResponse<any, Record<string, any>>>;
+    botLogin(dto: BotLoginDto, res: ExpressResponse): Promise<ExpressResponse<any, Record<string, any>>>;
+    agentLogin(loginDto: {
+        agentId: string;
+    }, res: ExpressResponse): Promise<ExpressResponse<any, Record<string, any>>>;
+    roomLogin(loginDto: {
+        roomId: string;
+    }, res: ExpressResponse): Promise<ExpressResponse<any, Record<string, any>>>;
+    logout(req: ExpressRequest, res: ExpressResponse): Promise<ExpressResponse<any, Record<string, any>>>;
+    getSession(req: ExpressRequest, res: ExpressResponse): Promise<ExpressResponse<any, Record<string, any>>>;
+    deleteUser(req: ExpressRequest, res: ExpressResponse): Promise<ExpressResponse<any, Record<string, any>>>;
+}

package/dist/server/src/auth/auth.controller.js

@@ -0,0 +1,356 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthController = void 0;
+const common_1 = require("@nestjs/common");
+const auth_service_1 = require("./auth.service");
+const public_decorator_1 = require("./public.decorator");
+const published_agents_service_1 = require("../ai/published-agents.service");
+const published_rooms_service_1 = require("../room/published-rooms.service");
+const user_service_manager_1 = require("../app/user-service-manager");
+const twilio_service_1 = require("./twilio.service");
+const phone_validation_service_1 = require("./phone-validation.service");
+const rate_limit_service_1 = require("./rate-limit.service");
+const users_service_1 = require("./users.service");
+let AuthController = class AuthController {
+    authService;
+    publishedAgentsService;
+    publishedRoomsService;
+    userServiceManager;
+    twilioService;
+    phoneValidationService;
+    rateLimitService;
+    usersService;
+    constructor(authService, publishedAgentsService, publishedRoomsService, userServiceManager, twilioService, phoneValidationService, rateLimitService, usersService) {
+        this.authService = authService;
+        this.publishedAgentsService = publishedAgentsService;
+        this.publishedRoomsService = publishedRoomsService;
+        this.userServiceManager = userServiceManager;
+        this.twilioService = twilioService;
+        this.phoneValidationService = phoneValidationService;
+        this.rateLimitService = rateLimitService;
+        this.usersService = usersService;
+    }
+    async sendLoginOtp(dto) {
+        if (!dto.phoneNumber) {
+            throw new common_1.BadRequestException('Phone number is required');
+        }
+        const normalizedPhone = this.phoneValidationService.normalizePhone(dto.phoneNumber);
+        if (!this.phoneValidationService.validatePhoneFormat(dto.phoneNumber)) {
+            throw new common_1.BadRequestException('Invalid phone number format. Please enter a valid US phone number.');
+        }
+        if (!this.phoneValidationService.validateNotTestNumber(dto.phoneNumber)) {
+            throw new common_1.BadRequestException('Test phone numbers are not allowed in production');
+        }
+        const rateLimitCheck = this.rateLimitService.checkRateLimit(normalizedPhone);
+        if (!rateLimitCheck.allowed) {
+            throw new common_1.BadRequestException('Too many verification attempts. Please try again later.');
+        }
+        try {
+            await this.twilioService.sendVerification(normalizedPhone);
+            this.rateLimitService.recordAttempt(normalizedPhone);
+            return {
+                success: true,
+                message: 'Verification code sent successfully',
+                remainingAttempts: rateLimitCheck.remainingAttempts
+                    ? rateLimitCheck.remainingAttempts - 1
+                    : undefined,
+            };
+        }
+        catch (error) {
+            console.error('Error sending verification code:', error);
+            throw new common_1.BadRequestException('Failed to send verification code. Please try again.');
+        }
+    }
+    async verifyLoginOtp(dto, res) {
+        if (!dto.phoneNumber || !dto.code || !dto.mode) {
+            throw new common_1.BadRequestException('Phone number, code, and mode are required');
+        }
+        if (dto.code.length !== 6) {
+            throw new common_1.BadRequestException('Verification code must be 6 digits');
+        }
+        const normalizedPhone = this.phoneValidationService.normalizePhone(dto.phoneNumber);
+        if (!this.phoneValidationService.validatePhoneFormat(dto.phoneNumber)) {
+            throw new common_1.BadRequestException('Invalid phone number format');
+        }
+        if (!this.phoneValidationService.validateNotTestNumber(dto.phoneNumber)) {
+            throw new common_1.BadRequestException('Test phone numbers are not allowed in production');
+        }
+        try {
+            const verified = await this.twilioService.checkVerification(normalizedPhone, dto.code);
+            if (!verified) {
+                throw new common_1.UnauthorizedException('Invalid or expired verification code');
+            }
+            let user = this.usersService.findUserByPhone(normalizedPhone);
+            if (!user) {
+                const userId = this.authService.register(normalizedPhone);
+                user = this.usersService.findUser(userId);
+                if (!user) {
+                    throw new common_1.BadRequestException('Failed to create user account');
+                }
+                console.log(`[AUTH] Auto-registered new user: ${userId}`);
+            }
+            this.rateLimitService.clearAttempts(normalizedPhone);
+            await this.authService.loginWithPhone(user, dto.mode, res);
+            console.log(`[AUTH] Phone login successful for user: ${user.userId} with mode: ${dto.mode}`);
+            return res.json({
+                success: true,
+                userId: user.userId,
+                phoneNumber: user.phoneNumber,
+                mode: dto.mode,
+            });
+        }
+        catch (error) {
+            console.error('Error verifying OTP:', error);
+            if (error instanceof common_1.UnauthorizedException) {
+                throw error;
+            }
+            throw new common_1.BadRequestException('Failed to verify code. Please try again.');
+        }
+    }
+    async botLogin(dto, res) {
+        if (!dto.botApiKey || dto.botApiKey !== process.env.BOT_API_KEY) {
+            console.log(`[AUTH] Bot login attempt failed: Invalid bot API key`);
+            throw new common_1.UnauthorizedException('Invalid bot API key');
+        }
+        if (!dto.discordUserId) {
+            console.log(`[AUTH] Bot login attempt failed: Missing Discord user ID`);
+            throw new common_1.BadRequestException('Discord user ID is required');
+        }
+        console.log(`[AUTH] Bot login attempt for Discord user: ${dto.discordUserId}`);
+        let user = this.usersService.findUser(dto.discordUserId);
+        if (!user) {
+            const userId = this.authService.register(dto.discordUserId);
+            user = this.usersService.findUser(userId);
+            if (!user) {
+                throw new common_1.BadRequestException('Failed to create user account');
+            }
+            console.log(`[AUTH] Auto-registered Discord user: ${userId}`);
+        }
+        await this.authService.loginWithPhone(user, 'agents', res);
+        console.log(`[AUTH] Bot login successful for Discord user: ${dto.discordUserId} (userId: ${user.userId})`);
+        const token = res.getHeader('Set-Cookie');
+        let accessToken = '';
+        if (token) {
+            const cookieStr = Array.isArray(token) ? token[0] : String(token);
+            const match = cookieStr.match(/briyah_jwt=([^;]+)/);
+            if (match) {
+                accessToken = match[1];
+            }
+        }
+        return res.json({
+            success: true,
+            access_token: accessToken,
+            userId: user.userId,
+        });
+    }
+    async agentLogin(loginDto, res) {
+        if (!loginDto.agentId) {
+            console.log(`[AUTH] Agent login attempt failed: Missing agent ID`);
+            throw new common_1.BadRequestException('Agent ID is required');
+        }
+        console.log(`[AUTH] Agent login attempt for agent: ${loginDto.agentId}`);
+        const userId = this.publishedAgentsService.getUserId(loginDto.agentId);
+        if (!userId) {
+            console.log(`[AUTH] Agent login failed for agent: ${loginDto.agentId} - Agent not found or not published`);
+            throw new common_1.NotFoundException('Agent not found or not published');
+        }
+        const appService = this.userServiceManager.getAppService(userId);
+        const agentDetails = await appService.getAgentDetails(loginDto.agentId);
+        if (!agentDetails || !agentDetails.isPublished) {
+            console.log(`[AUTH] Agent login failed for agent: ${loginDto.agentId} - Agent is not published`);
+            throw new common_1.UnauthorizedException('Agent is not published');
+        }
+        await this.authService.loginAgent(loginDto.agentId, userId, res);
+        console.log(`[AUTH] Agent login successful for agent: ${loginDto.agentId} (owner: ${userId})`);
+        return res.json({ success: true, agentId: loginDto.agentId });
+    }
+    async roomLogin(loginDto, res) {
+        if (!loginDto.roomId) {
+            console.log(`[AUTH] Room login attempt failed: Missing room ID`);
+            throw new common_1.BadRequestException('Room ID is required');
+        }
+        console.log(`[AUTH] Room login attempt for room: ${loginDto.roomId}`);
+        const userId = this.publishedRoomsService.getUserId(loginDto.roomId);
+        if (!userId) {
+            console.log(`[AUTH] Room login failed for room: ${loginDto.roomId} - Room not found or not published`);
+            throw new common_1.NotFoundException('Room not found or not published');
+        }
+        const appService = this.userServiceManager.getAppService(userId);
+        const roomDetails = await appService.getRoomDetails(loginDto.roomId);
+        if (!roomDetails) {
+            console.log(`[AUTH] Room login failed for room: ${loginDto.roomId} - Room is not published`);
+            throw new common_1.UnauthorizedException('Room is not published');
+        }
+        await this.authService.loginRoom(loginDto.roomId, userId, res);
+        console.log(`[AUTH] Room login successful for room: ${loginDto.roomId} (owner: ${userId})`);
+        return res.json({ success: true, roomId: loginDto.roomId });
+    }
+    async logout(req, res) {
+        const token = req.cookies?.briyah_jwt;
+        let userId;
+        let type;
+        if (token) {
+            try {
+                const payload = this.authService.verifyToken(token);
+                userId = payload.sub;
+                type = payload.type;
+            }
+            catch (_error) {
+            }
+        }
+        res.clearCookie('briyah_jwt', {
+            httpOnly: true,
+            secure: process.env.NODE_ENV === 'production',
+            sameSite: 'lax',
+        });
+        if (userId) {
+            console.log(`[AUTH] Logout for ${type}: ${userId}`);
+        }
+        return res.json({ success: true });
+    }
+    async getSession(req, res) {
+        const token = req.cookies?.briyah_jwt;
+        if (!token) {
+            return res.status(common_1.HttpStatus.UNAUTHORIZED).json({ userId: null });
+        }
+        try {
+            const payload = this.authService.verifyToken(token);
+            return res.json({
+                userId: payload.sub,
+                phoneNumber: payload.phoneNumber,
+                type: payload.type,
+                scope: payload.scope,
+                mode: payload.mode || 'agents',
+                agentId: payload.agentId,
+                roomId: payload.roomId,
+            });
+        }
+        catch (_error) {
+            return res.status(common_1.HttpStatus.UNAUTHORIZED).json({ userId: null });
+        }
+    }
+    async deleteUser(req, res) {
+        const token = req.cookies?.briyah_jwt;
+        if (!token) {
+            throw new common_1.UnauthorizedException('Authentication required');
+        }
+        try {
+            const payload = this.authService.verifyToken(token);
+            if (payload.type !== 'user') {
+                throw new common_1.UnauthorizedException('Only users can delete their account');
+            }
+            await this.authService.deleteUser(payload.sub);
+            res.clearCookie('briyah_jwt', {
+                httpOnly: true,
+                secure: process.env.NODE_ENV === 'production',
+                sameSite: 'lax',
+            });
+            return res.status(common_1.HttpStatus.NO_CONTENT).send();
+        }
+        catch (_error) {
+            throw new common_1.UnauthorizedException('Authentication required');
+        }
+    }
+};
+exports.AuthController = AuthController;
+__decorate([
+    (0, public_decorator_1.Public)(),
+    (0, common_1.Post)('phone-login/send-otp'),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "sendLoginOtp", null);
+__decorate([
+    (0, public_decorator_1.Public)(),
+    (0, common_1.Post)('phone-login/verify-otp'),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    __param(0, (0, common_1.Body)()),
+    __param(1, (0, common_1.Response)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "verifyLoginOtp", null);
+__decorate([
+    (0, public_decorator_1.Public)(),
+    (0, common_1.Post)('bot-login'),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    __param(0, (0, common_1.Body)()),
+    __param(1, (0, common_1.Response)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "botLogin", null);
+__decorate([
+    (0, public_decorator_1.Public)(),
+    (0, common_1.Post)('agent-login'),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    __param(0, (0, common_1.Body)()),
+    __param(1, (0, common_1.Response)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "agentLogin", null);
+__decorate([
+    (0, public_decorator_1.Public)(),
+    (0, common_1.Post)('room-login'),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    __param(0, (0, common_1.Body)()),
+    __param(1, (0, common_1.Response)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "roomLogin", null);
+__decorate([
+    (0, public_decorator_1.Public)(),
+    (0, common_1.Post)('logout'),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    __param(0, (0, common_1.Request)()),
+    __param(1, (0, common_1.Response)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "logout", null);
+__decorate([
+    (0, public_decorator_1.Public)(),
+    (0, common_1.Get)('session'),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    __param(0, (0, common_1.Request)()),
+    __param(1, (0, common_1.Response)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "getSession", null);
+__decorate([
+    (0, common_1.Delete)('deleteuser'),
+    (0, common_1.HttpCode)(common_1.HttpStatus.NO_CONTENT),
+    __param(0, (0, common_1.Request)()),
+    __param(1, (0, common_1.Response)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "deleteUser", null);
+exports.AuthController = AuthController = __decorate([
+    (0, common_1.Controller)('api/auth'),
+    __metadata("design:paramtypes", [auth_service_1.AuthService,
+        published_agents_service_1.PublishedAgentsService,
+        published_rooms_service_1.PublishedRoomsService,
+        user_service_manager_1.UserServiceManager,
+        twilio_service_1.TwilioService,
+        phone_validation_service_1.PhoneValidationService,
+        rate_limit_service_1.RateLimitService,
+        users_service_1.UsersService])
+], AuthController);

package/dist/server/src/auth/auth.module.d.ts

@@ -0,0 +1,2 @@
+export declare class AuthModule {
+}

package/dist/server/src/auth/auth.module.js

@@ -0,0 +1,55 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthModule = void 0;
+const common_1 = require("@nestjs/common");
+const jwt_1 = require("@nestjs/jwt");
+const passport_1 = require("@nestjs/passport");
+const config_1 = require("@nestjs/config");
+const auth_service_1 = require("./auth.service");
+const users_service_1 = require("./users.service");
+const jwt_strategy_1 = require("./jwt.strategy");
+const jwt_auth_guard_1 = require("./jwt-auth.guard");
+const auth_controller_1 = require("./auth.controller");
+const twilio_service_1 = require("./twilio.service");
+const phone_validation_service_1 = require("./phone-validation.service");
+const rate_limit_service_1 = require("./rate-limit.service");
+const published_agents_service_1 = require("../ai/published-agents.service");
+const published_rooms_service_1 = require("../room/published-rooms.service");
+let AuthModule = class AuthModule {
+};
+exports.AuthModule = AuthModule;
+exports.AuthModule = AuthModule = __decorate([
+    (0, common_1.Global)(),
+    (0, common_1.Module)({
+        imports: [
+            passport_1.PassportModule,
+            jwt_1.JwtModule.registerAsync({
+                imports: [config_1.ConfigModule],
+                useFactory: async (configService) => ({
+                    secret: configService.get('JWT_SECRET'),
+                    signOptions: { expiresIn: '7d' },
+                }),
+                inject: [config_1.ConfigService],
+            }),
+        ],
+        providers: [
+            auth_service_1.AuthService,
+            users_service_1.UsersService,
+            jwt_strategy_1.JwtStrategy,
+            jwt_auth_guard_1.JwtAuthGuard,
+            twilio_service_1.TwilioService,
+            phone_validation_service_1.PhoneValidationService,
+            rate_limit_service_1.RateLimitService,
+            published_agents_service_1.PublishedAgentsService,
+            published_rooms_service_1.PublishedRoomsService,
+        ],
+        controllers: [auth_controller_1.AuthController],
+        exports: [auth_service_1.AuthService, jwt_1.JwtModule, jwt_auth_guard_1.JwtAuthGuard],
+    })
+], AuthModule);

package/dist/server/src/auth/auth.service.d.ts

@@ -0,0 +1,14 @@
+import { JwtService } from '@nestjs/jwt';
+import { UsersService } from './users.service';
+import { Response } from 'express';
+export declare class AuthService {
+    private usersService;
+    private jwtService;
+    constructor(usersService: UsersService, jwtService: JwtService);
+    loginWithPhone(user: any, mode: 'stories' | 'agents', res: Response): Promise<void>;
+    verifyToken(token: string): any;
+    loginAgent(agentId: string, userId: string, res: Response): Promise<void>;
+    loginRoom(roomId: string, userId: string, res: Response): Promise<void>;
+    register(phoneNumber: string): string | null;
+    deleteUser(userId: string): void;
+}

package/dist/server/src/auth/auth.service.js

@@ -0,0 +1,84 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthService = void 0;
+const common_1 = require("@nestjs/common");
+const jwt_1 = require("@nestjs/jwt");
+const users_service_1 = require("./users.service");
+let AuthService = class AuthService {
+    usersService;
+    jwtService;
+    constructor(usersService, jwtService) {
+        this.usersService = usersService;
+        this.jwtService = jwtService;
+    }
+    async loginWithPhone(user, mode, res) {
+        const payload = {
+            sub: user.userId,
+            phoneNumber: user.phoneNumber,
+            type: 'user',
+            scope: ['user:full'],
+            mode,
+        };
+        const token = this.jwtService.sign(payload, { expiresIn: '7d' });
+        res.cookie('briyah_jwt', token, {
+            httpOnly: true,
+            secure: process.env.NODE_ENV === 'production',
+            sameSite: 'lax',
+            maxAge: 7 * 24 * 60 * 60 * 1000,
+        });
+    }
+    verifyToken(token) {
+        return this.jwtService.verify(token);
+    }
+    async loginAgent(agentId, userId, res) {
+        const payload = {
+            sub: userId,
+            type: 'agent-access',
+            agentId: agentId,
+            scope: ['agent:read', 'agent:interact'],
+        };
+        const token = this.jwtService.sign(payload, { expiresIn: '7d' });
+        res.cookie('briyah_jwt', token, {
+            httpOnly: true,
+            secure: process.env.NODE_ENV === 'production',
+            sameSite: 'lax',
+            maxAge: 7 * 24 * 60 * 60 * 1000,
+        });
+    }
+    async loginRoom(roomId, userId, res) {
+        const payload = {
+            sub: userId,
+            type: 'room-access',
+            roomId: roomId,
+            scope: ['room:read', 'room:interact'],
+        };
+        const token = this.jwtService.sign(payload, { expiresIn: '7d' });
+        res.cookie('briyah_jwt', token, {
+            httpOnly: true,
+            secure: process.env.NODE_ENV === 'production',
+            sameSite: 'lax',
+            maxAge: 7 * 24 * 60 * 60 * 1000,
+        });
+    }
+    register(phoneNumber) {
+        return this.usersService.createUser(phoneNumber);
+    }
+    deleteUser(userId) {
+        this.usersService.deleteUser(userId);
+    }
+};
+exports.AuthService = AuthService;
+exports.AuthService = AuthService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [users_service_1.UsersService,
+        jwt_1.JwtService])
+], AuthService);

package/dist/server/src/auth/dto/bot-login.dto.d.ts

@@ -0,0 +1,4 @@
+export interface BotLoginDto {
+    discordUserId: string;
+    botApiKey: string;
+}

package/dist/server/src/auth/dto/bot-login.dto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/server/src/auth/dto/password-reset.dto.d.ts

@@ -0,0 +1,11 @@
+export interface SendPasswordResetCodeDto {
+    phoneNumber: string;
+}
+export interface VerifyPasswordResetCodeDto {
+    phoneNumber: string;
+    code: string;
+}
+export interface CompletePasswordResetDto {
+    resetToken: string;
+    newPassword: string;
+}

package/dist/server/src/auth/dto/password-reset.dto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/server/src/auth/dto/phone-login.dto.d.ts

@@ -0,0 +1,8 @@
+export interface SendOtpDto {
+    phoneNumber: string;
+}
+export interface VerifyOtpDto {
+    phoneNumber: string;
+    code: string;
+    mode: 'stories' | 'agents';
+}

package/dist/server/src/auth/dto/phone-login.dto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/server/src/auth/dto/phone-verification.dto.d.ts

@@ -0,0 +1,9 @@
+export interface SendVerificationDto {
+    phoneNumber: string;
+}
+export interface RegisterDto {
+    username: string;
+    password: string;
+    phoneNumber: string;
+    verificationCode: string;
+}

package/dist/server/src/auth/dto/phone-verification.dto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/server/src/auth/jwt-auth.guard.d.ts

@@ -0,0 +1,13 @@
+import { ExecutionContext, CanActivate } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { JwtService } from '@nestjs/jwt';
+import { PublishedAgentsService } from '../ai/published-agents.service';
+import { PublishedRoomsService } from '../room/published-rooms.service';
+export declare class JwtAuthGuard implements CanActivate {
+    private reflector;
+    private jwtService;
+    private publishedAgentsService;
+    private publishedRoomsService;
+    constructor(reflector: Reflector, jwtService: JwtService, publishedAgentsService: PublishedAgentsService, publishedRoomsService: PublishedRoomsService);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+}