claude-flow-novice 2.15.11 → 2.16.0

package/dist/services/user-service.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/services/user-service.ts"],"sourcesContent":["/**\r\n * User Service\r\n *\r\n * Comprehensive user management service with authentication, authorization,\r\n * and security features for the CFN Loop system.\r\n */\r\n\r\nimport { DatabaseService } from '../lib/database-service/index.js';\r\nimport { v4 as uuidv4 } from 'uuid';\r\nimport { User, UserRole, UserStatus, CreateUserRequest, UpdateUserRequest, UserSecurity } from '../types/user.js';\r\nimport { PasswordUtils, JWTUtils, AuthRateLimit } from '../middleware/authentication.js';\r\nimport { AuthMiddleware, UserContext, RBACEnforcer, PromotionOperation } from '../middleware/auth-middleware.js';\r\nimport { createLogger } from '../lib/logging.js';\r\nimport { StandardError, ErrorCode } from '../lib/errors.js';\r\n\r\nconst logger = createLogger('user-service');\r\n\r\nexport interface LoginRequest {\r\n  email: string;\r\n  password: string;\r\n  rememberMe?: boolean;\r\n}\r\n\r\nexport interface LoginResponse {\r\n  user: PublicUser;\r\n  accessToken: string;\r\n  refreshToken: string;\r\n  expiresIn: number;\r\n}\r\n\r\nexport interface RegisterRequest {\r\n  username: string;\r\n  email: string;\r\n  password: string;\r\n  firstName: string;\r\n  lastName: string;\r\n  displayName?: string;\r\n}\r\n\r\nexport interface PublicUser {\r\n  id: string;\r\n  username: string;\r\n  email: string;\r\n  role: UserRole;\r\n  status: UserStatus;\r\n  profile: {\r\n    displayName: string;\r\n    firstName: string;\r\n    lastName: string;\r\n    bio?: string;\r\n    avatar?: string;\r\n  };\r\n  security: {\r\n    emailVerified: boolean;\r\n    twoFactorEnabled: boolean;\r\n  };\r\n}\r\n\r\nexport interface AuthTokens {\r\n  accessToken: string;\r\n  refreshToken: string;\r\n  expiresIn: number;\r\n}\r\n\r\nexport interface UserServiceConfig {\r\n  jwtSecret: string;\r\n  jwtExpiration: string;\r\n  refreshExpiration: string;\r\n  bcryptRounds: number;\r\n  maxLoginAttempts: number;\r\n  loginLockoutMs: number;\r\n  emailVerificationRequired: boolean;\r\n  twoFactorRequired: boolean;\r\n}\r\n\r\n/**\r\n * User Service Class\r\n *\r\n * Manages user lifecycle, authentication, and authorization.\r\n */\r\nexport class UserService {\r\n  private db: DatabaseService;\r\n  private authMiddleware: AuthMiddleware;\r\n  private rbacEnforcer: RBACEnforcer;\r\n  private config: UserServiceConfig;\r\n\r\n  constructor(db: DatabaseService, config: UserServiceConfig) {\r\n    this.db = db;\r\n    this.config = config;\r\n    this.authMiddleware = new AuthMiddleware(config.jwtSecret);\r\n    this.rbacEnforcer = new RBACEnforcer(this.authMiddleware);\r\n  }\r\n\r\n  /**\r\n   * Initialize the user service\r\n   * Creates necessary tables and indexes if they don't exist\r\n   */\r\n  async initialize(): Promise<void> {\r\n    try {\r\n      const sqliteAdapter = this.db.getAdapter('sqlite');\r\n      \r\n      // Create users table\r\n      await sqliteAdapter.execute(`\r\n        CREATE TABLE IF NOT EXISTS users (\r\n          id TEXT PRIMARY KEY,\r\n          username TEXT UNIQUE NOT NULL,\r\n          email TEXT UNIQUE NOT NULL,\r\n          role TEXT NOT NULL DEFAULT 'user',\r\n          status TEXT NOT NULL DEFAULT 'pending_verification',\r\n          password_hash TEXT NOT NULL,\r\n          salt TEXT NOT NULL,\r\n          profile_json TEXT NOT NULL,\r\n          privacy_json TEXT NOT NULL,\r\n          preferences_json TEXT NOT NULL,\r\n          security_json TEXT NOT NULL,\r\n          stats_json TEXT NOT NULL,\r\n          created_at INTEGER NOT NULL,\r\n          updated_at INTEGER NOT NULL,\r\n          last_login_at INTEGER,\r\n          email_verified_at INTEGER,\r\n          phone_verified_at INTEGER\r\n        )\r\n      `);\r\n\r\n      // Create refresh tokens table\r\n      await sqliteAdapter.execute(`\r\n        CREATE TABLE IF NOT EXISTS refresh_tokens (\r\n          id TEXT PRIMARY KEY,\r\n          user_id TEXT NOT NULL,\r\n          token_hash TEXT NOT NULL,\r\n          expires_at INTEGER NOT NULL,\r\n          created_at INTEGER NOT NULL,\r\n          last_used_at INTEGER,\r\n          is_revoked BOOLEAN DEFAULT FALSE,\r\n          FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE\r\n        )\r\n      `);\r\n\r\n      // Create password reset tokens table\r\n      await sqliteAdapter.execute(`\r\n        CREATE TABLE IF NOT EXISTS password_reset_tokens (\r\n          id TEXT PRIMARY KEY,\r\n          user_id TEXT NOT NULL,\r\n          token_hash TEXT NOT NULL,\r\n          expires_at INTEGER NOT NULL,\r\n          created_at INTEGER NOT NULL,\r\n          used_at INTEGER,\r\n          FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE\r\n        )\r\n      `);\r\n\r\n      // Create email verification tokens table\r\n      await sqliteAdapter.execute(`\r\n        CREATE TABLE IF NOT EXISTS email_verification_tokens (\r\n          id TEXT PRIMARY KEY,\r\n          user_id TEXT NOT NULL,\r\n          email TEXT NOT NULL,\r\n          token_hash TEXT NOT NULL,\r\n          expires_at INTEGER NOT NULL,\r\n          created_at INTEGER NOT NULL,\r\n          verified_at INTEGER,\r\n          FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE\r\n        )\r\n      `);\r\n\r\n      // Create indexes\r\n      await sqliteAdapter.execute('CREATE INDEX IF NOT EXISTS idx_users_email ON users (email)');\r\n      await sqliteAdapter.execute('CREATE INDEX IF NOT EXISTS idx_users_username ON users (username)');\r\n      await sqliteAdapter.execute('CREATE INDEX IF NOT EXISTS idx_users_role ON users (role)');\r\n      await sqliteAdapter.execute('CREATE INDEX IF NOT EXISTS idx_users_status ON users (status)');\r\n      await sqliteAdapter.execute('CREATE INDEX IF NOT EXISTS idx_refresh_tokens_user_id ON refresh_tokens (user_id)');\r\n      await sqliteAdapter.execute('CREATE INDEX IF NOT EXISTS idx_refresh_tokens_expires_at ON refresh_tokens (expires_at)');\r\n\r\n      logger.info('User service initialized successfully');\r\n    } catch (error) {\r\n      logger.error('Failed to initialize user service:', error);\r\n      throw new StandardError(\r\n        ErrorCode.INTERNAL_ERROR,\r\n        'Failed to initialize user service',\r\n        {},\r\n        error as Error\r\n      );\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Register a new user\r\n   */\r\n  async register(request: RegisterRequest): Promise<{ user: PublicUser; tokens: AuthTokens }> {\r\n    const { username, email, password, firstName, lastName, displayName } = request;\r\n\r\n    try {\r\n      // Validate input\r\n      this.validateEmail(email);\r\n      this.validateUsername(username);\r\n      this.validatePassword(password);\r\n\r\n      // Check if user already exists\r\n      const existingUser = await this.findUserByEmailOrUsername(email, username);\r\n      if (existingUser) {\r\n        throw new StandardError(\r\n          ErrorCode.CONFLICT,\r\n          existingUser.email === email ? 'Email already registered' : 'Username already taken',\r\n          { field: existingUser.email === email ? 'email' : 'username' }\r\n        );\r\n      }\r\n\r\n      // Hash password\r\n      const salt = await PasswordUtils.generateSalt();\r\n      const passwordHash = await PasswordUtils.hashPassword(password, this.config.bcryptRounds);\r\n\r\n      // Create user\r\n      const now = Math.floor(Date.now() / 1000);\r\n      const userId = uuidv4();\r\n\r\n      const user: User = {\r\n        id: userId,\r\n        username,\r\n        email,\r\n        role: UserRole.USER,\r\n        status: this.config.emailVerificationRequired ? UserStatus.PENDING_VERIFICATION : UserStatus.ACTIVE,\r\n        profile: {\r\n          firstName,\r\n          lastName,\r\n          displayName: displayName || `${firstName} ${lastName}`,\r\n        },\r\n        privacy: {\r\n          profileVisibility: 'public',\r\n          allowFriendRequests: true,\r\n          allowMessages: true,\r\n          allowStoryTagging: true,\r\n          allowLocationSharing: false,\r\n          showOnlineStatus: true,\r\n        },\r\n        preferences: {\r\n          theme: 'auto',\r\n          language: 'en',\r\n          timezone: 'UTC',\r\n          emailNotifications: true,\r\n          pushNotifications: true,\r\n          autoSaveStories: true,\r\n          storyVisibilityDefault: 'private',\r\n        },\r\n        security: {\r\n          email,\r\n          emailVerified: !this.config.emailVerificationRequired,\r\n          twoFactorEnabled: false,\r\n          loginAttempts: 0,\r\n        },\r\n        stats: {\r\n          storiesCount: 0,\r\n          friendsCount: 0,\r\n          followersCount: 0,\r\n          followingCount: 0,\r\n        },\r\n        createdAt: new Date(now * 1000),\r\n        updatedAt: new Date(now * 1000),\r\n      };\r\n\r\n      // Save user to database\r\n      await this.saveUser(user, passwordHash, salt);\r\n\r\n      // Create email verification token if required\r\n      if (this.config.emailVerificationRequired) {\r\n        await this.createEmailVerificationToken(userId, email);\r\n      }\r\n\r\n      // Generate tokens\r\n      const tokens = await this.generateAuthTokens(user);\r\n\r\n      // Log user registration\r\n      logger.info('User registered successfully', { userId, username, email });\r\n\r\n      return {\r\n        user: this.toPublicUser(user),\r\n        tokens,\r\n      };\r\n    } catch (error) {\r\n      if (error instanceof StandardError) {\r\n        throw error;\r\n      }\r\n      logger.error('User registration failed:', error);\r\n      throw new StandardError(\r\n        ErrorCode.INTERNAL_ERROR,\r\n        'User registration failed',\r\n        {},\r\n        error as Error\r\n      );\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Authenticate user and generate tokens\r\n   */\r\n  async login(request: LoginRequest): Promise<LoginResponse> {\r\n    const { email, password, rememberMe } = request;\r\n\r\n    try {\r\n      // Check rate limiting\r\n      if (AuthRateLimit.hasExceededAttempts(email, this.config.maxLoginAttempts, this.config.loginLockoutMs)) {\r\n        throw new StandardError(\r\n          ErrorCode.TOO_MANY_REQUESTS,\r\n          'Too many login attempts. Please try again later.',\r\n          { retryAfter: Math.ceil(this.config.loginLockoutMs / 1000) }\r\n        );\r\n      }\r\n\r\n      // Find user by email\r\n      const user = await this.findUserByEmail(email);\r\n      if (!user) {\r\n        AuthRateLimit.hasExceededAttempts(email, this.config.maxLoginAttempts, this.config.loginLockoutMs);\r\n        throw new StandardError(\r\n          ErrorCode.NOT_FOUND,\r\n          'Invalid email or password'\r\n        );\r\n      }\r\n\r\n      // Check user status\r\n      if (user.status === UserStatus.SUSPENDED) {\r\n        throw new StandardError(\r\n          ErrorCode.FORBIDDEN,\r\n          'Account suspended. Please contact support.'\r\n        );\r\n      }\r\n\r\n      if (user.status === UserStatus.INACTIVE) {\r\n        throw new StandardError(\r\n          ErrorCode.FORBIDDEN,\r\n          'Account inactive. Please contact support.'\r\n        );\r\n      }\r\n\r\n      // Get user credentials\r\n      const credentials = await this.getUserCredentials(user.id);\r\n      if (!credentials) {\r\n        throw new StandardError(\r\n          ErrorCode.INTERNAL_ERROR,\r\n          'User credentials not found'\r\n        );\r\n      }\r\n\r\n      // Verify password\r\n      const isPasswordValid = await PasswordUtils.comparePassword(password, credentials.passwordHash);\r\n      if (!isPasswordValid) {\r\n        AuthRateLimit.hasExceededAttempts(email, this.config.maxLoginAttempts, this.config.loginLockoutMs);\r\n        \r\n        // Update failed login attempts\r\n        await this.updateFailedLoginAttempts(user.id, user.security.loginAttempts + 1);\r\n        \r\n        throw new StandardError(\r\n          ErrorCode.NOT_FOUND,\r\n          'Invalid email or password'\r\n        );\r\n      }\r\n\r\n      // Clear failed login attempts\r\n      AuthRateLimit.clearAttempts(email);\r\n      await this.updateFailedLoginAttempts(user.id, 0);\r\n\r\n      // Update last login\r\n      await this.updateLastLogin(user.id);\r\n\r\n      // Generate tokens\r\n      const tokens = await this.generateAuthTokens(user, rememberMe);\r\n\r\n      // Log successful login\r\n      logger.info('User logged in successfully', { userId: user.id, email });\r\n\r\n      return {\r\n        user: this.toPublicUser(user),\r\n        accessToken: tokens.accessToken,\r\n        refreshToken: tokens.refreshToken,\r\n        expiresIn: tokens.expiresIn,\r\n      };\r\n    } catch (error) {\r\n      if (error instanceof StandardError) {\r\n        throw error;\r\n      }\r\n      logger.error('Login failed:', error);\r\n      throw new StandardError(\r\n        ErrorCode.INTERNAL_ERROR,\r\n        'Login failed',\r\n        {},\r\n        error as Error\r\n      );\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Refresh access token using refresh token\r\n   */\r\n  async refreshToken(refreshToken: string): Promise<AuthTokens> {\r\n    try {\r\n      // Validate refresh token\r\n      const payload = JWTUtils.verifyToken(refreshToken, this.config.jwtSecret);\r\n      if (payload.type !== 'refresh') {\r\n        throw new StandardError(\r\n          ErrorCode.INVALID_TOKEN,\r\n          'Invalid refresh token'\r\n        );\r\n      }\r\n\r\n      // Check if refresh token exists and is not revoked\r\n      const tokenRecord = await this.findRefreshToken(payload.jti!, payload.userId);\r\n      if (!tokenRecord || tokenRecord.isRevoked) {\r\n        throw new StandardError(\r\n          ErrorCode.INVALID_TOKEN,\r\n          'Invalid or revoked refresh token'\r\n        );\r\n      }\r\n\r\n      // Find user\r\n      const user = await this.findUserById(payload.userId);\r\n      if (!user) {\r\n        throw new StandardError(\r\n          ErrorCode.NOT_FOUND,\r\n          'User not found'\r\n        );\r\n      }\r\n\r\n      // Check user status\r\n      if (user.status !== UserStatus.ACTIVE) {\r\n        throw new StandardError(\r\n          ErrorCode.FORBIDDEN,\r\n          'Account is not active'\r\n        );\r\n      }\r\n\r\n      // Revoke old refresh token\r\n      await this.revokeRefreshToken(payload.jti!);\r\n\r\n      // Generate new tokens\r\n      const tokens = await this.generateAuthTokens(user);\r\n\r\n      // Update last used timestamp\r\n      await this.updateRefreshTokenLastUsed(payload.jti!);\r\n\r\n      logger.info('Token refreshed successfully', { userId: user.id });\r\n\r\n      return tokens;\r\n    } catch (error) {\r\n      if (error instanceof StandardError) {\r\n        throw error;\r\n      }\r\n      logger.error('Token refresh failed:', error);\r\n      throw new StandardError(\r\n        ErrorCode.INTERNAL_ERROR,\r\n        'Token refresh failed',\r\n        {},\r\n        error as Error\r\n      );\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Logout user and revoke tokens\r\n   */\r\n  async logout(refreshToken: string): Promise<void> {\r\n    try {\r\n      // Validate refresh token\r\n      const payload = JWTUtils.decodeToken(refreshToken);\r\n      if (!payload || payload.type !== 'refresh') {\r\n        return; // Invalid token, just return success\r\n      }\r\n\r\n      // Revoke refresh token\r\n      if (payload.jti) {\r\n        await this.revokeRefreshToken(payload.jti);\r\n      }\r\n\r\n      logger.info('User logged out successfully', { userId: payload.userId });\r\n    } catch (error) {\r\n      logger.error('Logout failed:', error);\r\n      // Don't throw error on logout to prevent client issues\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Get user by ID\r\n   */\r\n  async getUserById(userId: string): Promise<PublicUser | null> {\r\n    try {\r\n      const user = await this.findUserById(userId);\r\n      return user ? this.toPublicUser(user) : null;\r\n    } catch (error) {\r\n      logger.error('Failed to get user by ID:', error);\r\n      return null;\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Update user profile\r\n   */\r\n  async updateUserProfile(userId: string, updates: UpdateUserRequest): Promise<PublicUser> {\r\n    try {\r\n      const user = await this.findUserById(userId);\r\n      if (!user) {\r\n        throw new StandardError(\r\n          ErrorCode.NOT_FOUND,\r\n          'User not found'\r\n        );\r\n      }\r\n\r\n      // Update user\r\n      const updatedUser = {\r\n        ...user,\r\n        profile: {\r\n          ...user.profile,\r\n          ...updates.profile,\r\n        },\r\n        privacy: {\r\n          ...user.privacy,\r\n          ...updates.privacy,\r\n        },\r\n        preferences: {\r\n          ...user.preferences,\r\n          ...updates.preferences,\r\n        },\r\n        updatedAt: new Date(),\r\n      };\r\n\r\n      await this.saveUser(updatedUser);\r\n\r\n      logger.info('User profile updated successfully', { userId });\r\n\r\n      return this.toPublicUser(updatedUser);\r\n    } catch (error) {\r\n      if (error instanceof StandardError) {\r\n        throw error;\r\n      }\r\n      logger.error('Failed to update user profile:', error);\r\n      throw new StandardError(\r\n        ErrorCode.INTERNAL_ERROR,\r\n        'Failed to update user profile',\r\n        {},\r\n        error as Error\r\n      );\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Change user password\r\n   */\r\n  async changePassword(userId: string, currentPassword: string, newPassword: string): Promise<void> {\r\n    try {\r\n      // Validate new password\r\n      this.validatePassword(newPassword);\r\n\r\n      // Get current credentials\r\n      const credentials = await this.getUserCredentials(userId);\r\n      if (!credentials) {\r\n        throw new StandardError(\r\n          ErrorCode.NOT_FOUND,\r\n          'User not found'\r\n        );\r\n      }\r\n\r\n      // Verify current password\r\n      const isCurrentPasswordValid = await PasswordUtils.comparePassword(currentPassword, credentials.passwordHash);\r\n      if (!isCurrentPasswordValid) {\r\n        throw new StandardError(\r\n          ErrorCode.VALIDATION_FAILED,\r\n          'Current password is incorrect'\r\n        );\r\n      }\r\n\r\n      // Hash new password\r\n      const salt = await PasswordUtils.generateSalt();\r\n      const newPasswordHash = await PasswordUtils.hashPassword(newPassword, this.config.bcryptRounds);\r\n\r\n      // Update password\r\n      await this.updateUserPassword(userId, newPasswordHash, salt);\r\n\r\n      // Revoke all refresh tokens for this user\r\n      await this.revokeAllUserRefreshTokens(userId);\r\n\r\n      logger.info('Password changed successfully', { userId });\r\n    } catch (error) {\r\n      if (error instanceof StandardError) {\r\n        throw error;\r\n      }\r\n      logger.error('Failed to change password:', error);\r\n      throw new StandardError(\r\n        ErrorCode.INTERNAL_ERROR,\r\n        'Failed to change password',\r\n        {},\r\n        error as Error\r\n      );\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Validate JWT token and return user context\r\n   */\r\n  async validateToken(token: string): Promise<UserContext> {\r\n    try {\r\n      return this.authMiddleware.validateToken(token);\r\n    } catch (error) {\r\n      throw new StandardError(\r\n        ErrorCode.INVALID_TOKEN,\r\n        'Invalid authentication token',\r\n        {},\r\n        error as Error\r\n      );\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Check if user has permission for an operation\r\n   */\r\n  async checkPermission(userContext: UserContext, operation: PromotionOperation): Promise<boolean> {\r\n    try {\r\n      return this.rbacEnforcer.hasPermission(userContext, operation);\r\n    } catch (error) {\r\n      logger.error('Permission check failed:', error);\r\n      return false;\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Enforce permission check - throws if user lacks permission\r\n   */\r\n  async enforcePermission(userContext: UserContext, operation: PromotionOperation, skillId?: string): Promise<void> {\r\n    try {\r\n      this.rbacEnforcer.enforcePermission(userContext, operation, skillId);\r\n    } catch (error) {\r\n      if (error instanceof StandardError) {\r\n        throw error;\r\n      }\r\n      throw new StandardError(\r\n        ErrorCode.FORBIDDEN,\r\n        'Permission check failed',\r\n        {},\r\n        error as Error\r\n      );\r\n    }\r\n  }\r\n\r\n  // Private helper methods\r\n\r\n  private validateEmail(email: string): void {\r\n    const emailRegex = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/;\r\n    if (!emailRegex.test(email)) {\r\n      throw new StandardError(\r\n        ErrorCode.VALIDATION_FAILED,\r\n        'Invalid email format'\r\n      );\r\n    }\r\n  }\r\n\r\n  private validateUsername(username: string): void {\r\n    if (username.length < 3 || username.length > 30) {\r\n      throw new StandardError(\r\n        ErrorCode.VALIDATION_FAILED,\r\n        'Username must be between 3 and 30 characters'\r\n      );\r\n    }\r\n\r\n    const usernameRegex = /^[a-zA-Z0-9_-]+$/;\r\n    if (!usernameRegex.test(username)) {\r\n      throw new StandardError(\r\n        ErrorCode.VALIDATION_FAILED,\r\n        'Username can only contain letters, numbers, underscores, and hyphens'\r\n      );\r\n    }\r\n  }\r\n\r\n  private validatePassword(password: string): void {\r\n    if (!PasswordUtils.validatePasswordStrength(password)) {\r\n      throw new StandardError(\r\n        ErrorCode.VALIDATION_FAILED,\r\n        'Password must be at least 8 characters long and contain uppercase, lowercase, number, and special character'\r\n      );\r\n    }\r\n  }\r\n\r\n  private async generateAuthTokens(user: User, rememberMe: boolean = false): Promise<AuthTokens> {\r\n    const expiresIn = rememberMe ? '30d' : this.config.jwtExpiration;\r\n    const refreshExpiresIn = rememberMe ? '90d' : this.config.refreshExpiration;\r\n\r\n    // Generate access token\r\n    const accessTokenPayload = {\r\n      userId: user.id,\r\n      email: user.email,\r\n      role: user.role,\r\n      type: 'access',\r\n    };\r\n    const accessToken = JWTUtils.generateToken(accessTokenPayload, this.config.jwtSecret, expiresIn);\r\n\r\n    // Generate refresh token\r\n    const refreshTokenId = uuidv4();\r\n    const refreshTokenPayload = {\r\n      userId: user.id,\r\n      email: user.email,\r\n      role: user.role,\r\n      type: 'refresh',\r\n      jti: refreshTokenId,\r\n    };\r\n    const refreshToken = JWTUtils.generateToken(refreshTokenPayload, this.config.jwtSecret, refreshExpiresIn);\r\n\r\n    // Save refresh token to database\r\n    const now = Math.floor(Date.now() / 1000);\r\n    const refreshTokenHash = await PasswordUtils.hashPassword(refreshToken, 10);\r\n    const expiresAt = now + (rememberMe ? 90 * 24 * 60 * 60 : 7 * 24 * 60 * 60); // 90 days or 7 days\r\n\r\n    await this.saveRefreshToken(refreshTokenId, user.id, refreshTokenHash, expiresAt);\r\n\r\n    // Calculate expiresIn in seconds\r\n    const expiresInSeconds = rememberMe ? 30 * 24 * 60 * 60 : 24 * 60 * 60; // 30 days or 24 hours\r\n\r\n    return {\r\n      accessToken,\r\n      refreshToken,\r\n      expiresIn: expiresInSeconds,\r\n    };\r\n  }\r\n\r\n  private toPublicUser(user: User): PublicUser {\r\n    return {\r\n      id: user.id,\r\n      username: user.username,\r\n      email: user.email,\r\n      role: user.role,\r\n      status: user.status,\r\n      profile: {\r\n        displayName: user.profile.displayName,\r\n        firstName: user.profile.firstName,\r\n        lastName: user.profile.lastName,\r\n        bio: user.profile.bio,\r\n        avatar: user.profile.avatar,\r\n      },\r\n      security: {\r\n        emailVerified: user.security.emailVerified,\r\n        twoFactorEnabled: user.security.twoFactorEnabled,\r\n      },\r\n    };\r\n  }\r\n\r\n  // Database helper methods\r\n\r\n  private async findUserById(userId: string): Promise<User | null> {\r\n    const adapter = this.db.getAdapter('sqlite');\r\n    const row = await adapter.get(\r\n      'SELECT * FROM users WHERE id = ?',\r\n      [userId]\r\n    );\r\n    return row ? this.rowToUser(row) : null;\r\n  }\r\n\r\n  private async findUserByEmail(email: string): Promise<User | null> {\r\n    const adapter = this.db.getAdapter('sqlite');\r\n    const row = await adapter.get(\r\n      'SELECT * FROM users WHERE email = ?',\r\n      [email]\r\n    );\r\n    return row ? this.rowToUser(row) : null;\r\n  }\r\n\r\n  private async findUserByEmailOrUsername(email: string, username: string): Promise<User | null> {\r\n    const adapter = this.db.getAdapter('sqlite');\r\n    const row = await adapter.get(\r\n      'SELECT * FROM users WHERE email = ? OR username = ?',\r\n      [email, username]\r\n    );\r\n    return row ? this.rowToUser(row) : null;\r\n  }\r\n\r\n  private async getUserCredentials(userId: string): Promise<{ passwordHash: string; salt: string } | null> {\r\n    const adapter = this.db.getAdapter('sqlite');\r\n    const row = await adapter.get(\r\n      'SELECT password_hash, salt FROM users WHERE id = ?',\r\n      [userId]\r\n    );\r\n    return row ? { passwordHash: row.password_hash, salt: row.salt } : null;\r\n  }\r\n\r\n  private async saveUser(user: User, passwordHash?: string, salt?: string): Promise<void> {\r\n    const adapter = this.db.getAdapter('sqlite');\r\n    const now = Math.floor(Date.now() / 1000);\r\n\r\n    await adapter.execute(`\r\n      INSERT OR REPLACE INTO users (\r\n        id, username, email, role, status, password_hash, salt,\r\n        profile_json, privacy_json, preferences_json, security_json, stats_json,\r\n        created_at, updated_at, last_login_at, email_verified_at, phone_verified_at\r\n      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\r\n    `, [\r\n      user.id,\r\n      user.username,\r\n      user.email,\r\n      user.role,\r\n      user.status,\r\n      passwordHash,\r\n      salt,\r\n      JSON.stringify(user.profile),\r\n      JSON.stringify(user.privacy),\r\n      JSON.stringify(user.preferences),\r\n      JSON.stringify(user.security),\r\n      JSON.stringify(user.stats),\r\n      Math.floor(user.createdAt.getTime() / 1000),\r\n      now,\r\n      user.updatedAt ? Math.floor(user.updatedAt.getTime() / 1000) : now,\r\n      user.security.emailVerifiedAt ? Math.floor(user.security.emailVerifiedAt.getTime() / 1000) : null,\r\n      user.security.phoneVerifiedAt ? Math.floor(user.security.phoneVerifiedAt.getTime() / 1000) : null,\r\n    ]);\r\n  }\r\n\r\n  private async updateFailedLoginAttempts(userId: string, attempts: number): Promise<void> {\r\n    const adapter = this.db.getAdapter('sqlite');\r\n    const lockedUntil = attempts >= this.config.maxLoginAttempts ? \r\n      Math.floor(Date.now() / 1000) + Math.floor(this.config.loginLockoutMs / 1000) : null;\r\n\r\n    await adapter.execute(`\r\n      UPDATE users \r\n      SET security_json = json_set(\r\n        json_set(security_json, '$.loginAttempts', ?),\r\n        '$.lockedUntil',\r\n        ?\r\n      )\r\n      WHERE id = ?\r\n    `, [attempts, lockedUntil, userId]);\r\n  }\r\n\r\n  private async updateLastLogin(userId: string): Promise<void> {\r\n    const adapter = this.db.getAdapter('sqlite');\r\n    const now = Math.floor(Date.now() / 1000);\r\n\r\n    await adapter.execute(`\r\n      UPDATE users \r\n      SET last_login_at = ?, updated_at = ?\r\n      WHERE id = ?\r\n    `, [now, now, userId]);\r\n  }\r\n\r\n  private async updateRefreshTokenLastUsed(tokenId: string): Promise<void> {\r\n    const adapter = this.db.getAdapter('sqlite');\r\n    const now = Math.floor(Date.now() / 1000);\r\n\r\n    await adapter.execute(`\r\n      UPDATE refresh_tokens \r\n      SET last_used_at = ?\r\n      WHERE id = ?\r\n    `, [now, tokenId]);\r\n  }\r\n\r\n  private async saveRefreshToken(\r\n    tokenId: string,\r\n    userId: string,\r\n    tokenHash: string,\r\n    expiresAt: number\r\n  ): Promise<void> {\r\n    const adapter = this.db.getAdapter('sqlite');\r\n    const now = Math.floor(Date.now() / 1000);\r\n\r\n    await adapter.execute(`\r\n      INSERT INTO refresh_tokens (id, user_id, token_hash, expires_at, created_at)\r\n      VALUES (?, ?, ?, ?, ?)\r\n    `, [tokenId, userId, tokenHash, expiresAt, now]);\r\n  }\r\n\r\n  private async findRefreshToken(tokenId: string, userId: string): Promise<{ id: string; isRevoked: boolean } | null> {\r\n    const adapter = this.db.getAdapter('sqlite');\r\n    const row = await adapter.get(\r\n      'SELECT id, is_revoked FROM refresh_tokens WHERE id = ? AND user_id = ? AND expires_at > ?',\r\n      [tokenId, userId, Math.floor(Date.now() / 1000)]\r\n    );\r\n    return row;\r\n  }\r\n\r\n  private async revokeRefreshToken(tokenId: string): Promise<void> {\r\n    const adapter = this.db.getAdapter('sqlite');\r\n    await adapter.execute(\r\n      'UPDATE refresh_tokens SET is_revoked = TRUE WHERE id = ?',\r\n      [tokenId]\r\n    );\r\n  }\r\n\r\n  private async revokeAllUserRefreshTokens(userId: string): Promise<void> {\r\n    const adapter = this.db.getAdapter('sqlite');\r\n    await adapter.execute(\r\n      'UPDATE refresh_tokens SET is_revoked = TRUE WHERE user_id = ?',\r\n      [userId]\r\n    );\r\n  }\r\n\r\n  private async updateUserPassword(userId: string, passwordHash: string, salt: string): Promise<void> {\r\n    const adapter = this.db.getAdapter('sqlite');\r\n    const now = Math.floor(Date.now() / 1000);\r\n\r\n    await adapter.execute(`\r\n      UPDATE users \r\n      SET password_hash = ?, salt = ?, updated_at = ?,\r\n          security_json = json_set(security_json, '$.lastPasswordChange', ?)\r\n      WHERE id = ?\r\n    `, [passwordHash, salt, now, now, userId]);\r\n  }\r\n\r\n  private async createEmailVerificationToken(userId: string, email: string): Promise<void> {\r\n    const adapter = this.db.getAdapter('sqlite');\r\n    const tokenId = uuidv4();\r\n    const token = uuidv4();\r\n    const tokenHash = await PasswordUtils.hashPassword(token, 10);\r\n    const expiresAt = Math.floor(Date.now() / 1000) + (24 * 60 * 60); // 24 hours\r\n\r\n    await adapter.execute(`\r\n      INSERT INTO email_verification_tokens (id, user_id, email, token_hash, expires_at, created_at)\r\n      VALUES (?, ?, ?, ?, ?, ?)\r\n    `, [tokenId, userId, email, tokenHash, expiresAt, Math.floor(Date.now() / 1000)]);\r\n\r\n    // In a real implementation, send email with token\r\n    logger.info('Email verification token created', { userId, email, token });\r\n  }\r\n\r\n  private rowToUser(row: any): User {\r\n    return {\r\n      id: row.id,\r\n      username: row.username,\r\n      email: row.email,\r\n      role: row.role as UserRole,\r\n      status: row.status as UserStatus,\r\n      profile: JSON.parse(row.profile_json),\r\n      privacy: JSON.parse(row.privacy_json),\r\n      preferences: JSON.parse(row.preferences_json),\r\n      security: JSON.parse(row.security_json),\r\n      stats: JSON.parse(row.stats_json),\r\n      createdAt: new Date(row.created_at * 1000),\r\n      updatedAt: new Date(row.updated_at * 1000),\r\n    };\r\n  }\r\n}\r\n\r\nexport default UserService;"],"names":["v4","uuidv4","UserRole","UserStatus","PasswordUtils","JWTUtils","AuthRateLimit","AuthMiddleware","RBACEnforcer","createLogger","StandardError","ErrorCode","logger","UserService","db","authMiddleware","rbacEnforcer","config","jwtSecret","initialize","sqliteAdapter","getAdapter","execute","info","error","INTERNAL_ERROR","register","request","username","email","password","firstName","lastName","displayName","validateEmail","validateUsername","validatePassword","existingUser","findUserByEmailOrUsername","CONFLICT","field","salt","generateSalt","passwordHash","hashPassword","bcryptRounds","now","Math","floor","Date","userId","user","id","role","USER","status","emailVerificationRequired","PENDING_VERIFICATION","ACTIVE","profile","privacy","profileVisibility","allowFriendRequests","allowMessages","allowStoryTagging","allowLocationSharing","showOnlineStatus","preferences","theme","language","timezone","emailNotifications","pushNotifications","autoSaveStories","storyVisibilityDefault","security","emailVerified","twoFactorEnabled","loginAttempts","stats","storiesCount","friendsCount","followersCount","followingCount","createdAt","updatedAt","saveUser","createEmailVerificationToken","tokens","generateAuthTokens","toPublicUser","login","rememberMe","hasExceededAttempts","maxLoginAttempts","loginLockoutMs","TOO_MANY_REQUESTS","retryAfter","ceil","findUserByEmail","NOT_FOUND","SUSPENDED","FORBIDDEN","INACTIVE","credentials","getUserCredentials","isPasswordValid","comparePassword","updateFailedLoginAttempts","clearAttempts","updateLastLogin","accessToken","refreshToken","expiresIn","payload","verifyToken","type","INVALID_TOKEN","tokenRecord","findRefreshToken","jti","isRevoked","findUserById","revokeRefreshToken","updateRefreshTokenLastUsed","logout","decodeToken","getUserById","updateUserProfile","updates","updatedUser","changePassword","currentPassword","newPassword","isCurrentPasswordValid","VALIDATION_FAILED","newPasswordHash","updateUserPassword","revokeAllUserRefreshTokens","validateToken","token","checkPermission","userContext","operation","hasPermission","enforcePermission","skillId","emailRegex","test","length","usernameRegex","validatePasswordStrength","jwtExpiration","refreshExpiresIn","refreshExpiration","accessTokenPayload","generateToken","refreshTokenId","refreshTokenPayload","refreshTokenHash","expiresAt","saveRefreshToken","expiresInSeconds","bio","avatar","adapter","row","get","rowToUser","password_hash","JSON","stringify","getTime","emailVerifiedAt","phoneVerifiedAt","attempts","lockedUntil","tokenId","tokenHash","parse","profile_json","privacy_json","preferences_json","security_json","stats_json","created_at","updated_at"],"mappings":"AAAA;;;;;CAKC,GAGD,SAASA,MAAMC,MAAM,QAAQ,OAAO;AACpC,SAAeC,QAAQ,EAAEC,UAAU,QAA4D,mBAAmB;AAClH,SAASC,aAAa,EAAEC,QAAQ,EAAEC,aAAa,QAAQ,kCAAkC;AACzF,SAASC,cAAc,EAAeC,YAAY,QAA4B,mCAAmC;AACjH,SAASC,YAAY,QAAQ,oBAAoB;AACjD,SAASC,aAAa,EAAEC,SAAS,QAAQ,mBAAmB;AAE5D,MAAMC,SAASH,aAAa;AA4D5B;;;;CAIC,GACD,OAAO,MAAMI;IACHC,GAAoB;IACpBC,eAA+B;IAC/BC,aAA2B;IAC3BC,OAA0B;IAElC,YAAYH,EAAmB,EAAEG,MAAyB,CAAE;QAC1D,IAAI,CAACH,EAAE,GAAGA;QACV,IAAI,CAACG,MAAM,GAAGA;QACd,IAAI,CAACF,cAAc,GAAG,IAAIR,eAAeU,OAAOC,SAAS;QACzD,IAAI,CAACF,YAAY,GAAG,IAAIR,aAAa,IAAI,CAACO,cAAc;IAC1D;IAEA;;;GAGC,GACD,MAAMI,aAA4B;QAChC,IAAI;YACF,MAAMC,gBAAgB,IAAI,CAACN,EAAE,CAACO,UAAU,CAAC;YAEzC,qBAAqB;YACrB,MAAMD,cAAcE,OAAO,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;MAoB7B,CAAC;YAED,8BAA8B;YAC9B,MAAMF,cAAcE,OAAO,CAAC,CAAC;;;;;;;;;;;MAW7B,CAAC;YAED,qCAAqC;YACrC,MAAMF,cAAcE,OAAO,CAAC,CAAC;;;;;;;;;;MAU7B,CAAC;YAED,yCAAyC;YACzC,MAAMF,cAAcE,OAAO,CAAC,CAAC;;;;;;;;;;;MAW7B,CAAC;YAED,iBAAiB;YACjB,MAAMF,cAAcE,OAAO,CAAC;YAC5B,MAAMF,cAAcE,OAAO,CAAC;YAC5B,MAAMF,cAAcE,OAAO,CAAC;YAC5B,MAAMF,cAAcE,OAAO,CAAC;YAC5B,MAAMF,cAAcE,OAAO,CAAC;YAC5B,MAAMF,cAAcE,OAAO,CAAC;YAE5BV,OAAOW,IAAI,CAAC;QACd,EAAE,OAAOC,OAAO;YACdZ,OAAOY,KAAK,CAAC,sCAAsCA;YACnD,MAAM,IAAId,cACRC,UAAUc,cAAc,EACxB,qCACA,CAAC,GACDD;QAEJ;IACF;IAEA;;GAEC,GACD,MAAME,SAASC,OAAwB,EAAqD;QAC1F,MAAM,EAAEC,QAAQ,EAAEC,KAAK,EAAEC,QAAQ,EAAEC,SAAS,EAAEC,QAAQ,EAAEC,WAAW,EAAE,GAAGN;QAExE,IAAI;YACF,iBAAiB;YACjB,IAAI,CAACO,aAAa,CAACL;YACnB,IAAI,CAACM,gBAAgB,CAACP;YACtB,IAAI,CAACQ,gBAAgB,CAACN;YAEtB,+BAA+B;YAC/B,MAAMO,eAAe,MAAM,IAAI,CAACC,yBAAyB,CAACT,OAAOD;YACjE,IAAIS,cAAc;gBAChB,MAAM,IAAI3B,cACRC,UAAU4B,QAAQ,EAClBF,aAAaR,KAAK,KAAKA,QAAQ,6BAA6B,0BAC5D;oBAAEW,OAAOH,aAAaR,KAAK,KAAKA,QAAQ,UAAU;gBAAW;YAEjE;YAEA,gBAAgB;YAChB,MAAMY,OAAO,MAAMrC,cAAcsC,YAAY;YAC7C,MAAMC,eAAe,MAAMvC,cAAcwC,YAAY,CAACd,UAAU,IAAI,CAACb,MAAM,CAAC4B,YAAY;YAExF,cAAc;YACd,MAAMC,MAAMC,KAAKC,KAAK,CAACC,KAAKH,GAAG,KAAK;YACpC,MAAMI,SAASjD;YAEf,MAAMkD,OAAa;gBACjBC,IAAIF;gBACJtB;gBACAC;gBACAwB,MAAMnD,SAASoD,IAAI;gBACnBC,QAAQ,IAAI,CAACtC,MAAM,CAACuC,yBAAyB,GAAGrD,WAAWsD,oBAAoB,GAAGtD,WAAWuD,MAAM;gBACnGC,SAAS;oBACP5B;oBACAC;oBACAC,aAAaA,eAAe,GAAGF,UAAU,CAAC,EAAEC,UAAU;gBACxD;gBACA4B,SAAS;oBACPC,mBAAmB;oBACnBC,qBAAqB;oBACrBC,eAAe;oBACfC,mBAAmB;oBACnBC,sBAAsB;oBACtBC,kBAAkB;gBACpB;gBACAC,aAAa;oBACXC,OAAO;oBACPC,UAAU;oBACVC,UAAU;oBACVC,oBAAoB;oBACpBC,mBAAmB;oBACnBC,iBAAiB;oBACjBC,wBAAwB;gBAC1B;gBACAC,UAAU;oBACR9C;oBACA+C,eAAe,CAAC,IAAI,CAAC3D,MAAM,CAACuC,yBAAyB;oBACrDqB,kBAAkB;oBAClBC,eAAe;gBACjB;gBACAC,OAAO;oBACLC,cAAc;oBACdC,cAAc;oBACdC,gBAAgB;oBAChBC,gBAAgB;gBAClB;gBACAC,WAAW,IAAInC,KAAKH,MAAM;gBAC1BuC,WAAW,IAAIpC,KAAKH,MAAM;YAC5B;YAEA,wBAAwB;YACxB,MAAM,IAAI,CAACwC,QAAQ,CAACnC,MAAMR,cAAcF;YAExC,8CAA8C;YAC9C,IAAI,IAAI,CAACxB,MAAM,CAACuC,yBAAyB,EAAE;gBACzC,MAAM,IAAI,CAAC+B,4BAA4B,CAACrC,QAAQrB;YAClD;YAEA,kBAAkB;YAClB,MAAM2D,SAAS,MAAM,IAAI,CAACC,kBAAkB,CAACtC;YAE7C,wBAAwB;YACxBvC,OAAOW,IAAI,CAAC,gCAAgC;gBAAE2B;gBAAQtB;gBAAUC;YAAM;YAEtE,OAAO;gBACLsB,MAAM,IAAI,CAACuC,YAAY,CAACvC;gBACxBqC;YACF;QACF,EAAE,OAAOhE,OAAO;YACd,IAAIA,iBAAiBd,eAAe;gBAClC,MAAMc;YACR;YACAZ,OAAOY,KAAK,CAAC,6BAA6BA;YAC1C,MAAM,IAAId,cACRC,UAAUc,cAAc,EACxB,4BACA,CAAC,GACDD;QAEJ;IACF;IAEA;;GAEC,GACD,MAAMmE,MAAMhE,OAAqB,EAA0B;QACzD,MAAM,EAAEE,KAAK,EAAEC,QAAQ,EAAE8D,UAAU,EAAE,GAAGjE;QAExC,IAAI;YACF,sBAAsB;YACtB,IAAIrB,cAAcuF,mBAAmB,CAAChE,OAAO,IAAI,CAACZ,MAAM,CAAC6E,gBAAgB,EAAE,IAAI,CAAC7E,MAAM,CAAC8E,cAAc,GAAG;gBACtG,MAAM,IAAIrF,cACRC,UAAUqF,iBAAiB,EAC3B,oDACA;oBAAEC,YAAYlD,KAAKmD,IAAI,CAAC,IAAI,CAACjF,MAAM,CAAC8E,cAAc,GAAG;gBAAM;YAE/D;YAEA,qBAAqB;YACrB,MAAM5C,OAAO,MAAM,IAAI,CAACgD,eAAe,CAACtE;YACxC,IAAI,CAACsB,MAAM;gBACT7C,cAAcuF,mBAAmB,CAAChE,OAAO,IAAI,CAACZ,MAAM,CAAC6E,gBAAgB,EAAE,IAAI,CAAC7E,MAAM,CAAC8E,cAAc;gBACjG,MAAM,IAAIrF,cACRC,UAAUyF,SAAS,EACnB;YAEJ;YAEA,oBAAoB;YACpB,IAAIjD,KAAKI,MAAM,KAAKpD,WAAWkG,SAAS,EAAE;gBACxC,MAAM,IAAI3F,cACRC,UAAU2F,SAAS,EACnB;YAEJ;YAEA,IAAInD,KAAKI,MAAM,KAAKpD,WAAWoG,QAAQ,EAAE;gBACvC,MAAM,IAAI7F,cACRC,UAAU2F,SAAS,EACnB;YAEJ;YAEA,uBAAuB;YACvB,MAAME,cAAc,MAAM,IAAI,CAACC,kBAAkB,CAACtD,KAAKC,EAAE;YACzD,IAAI,CAACoD,aAAa;gBAChB,MAAM,IAAI9F,cACRC,UAAUc,cAAc,EACxB;YAEJ;YAEA,kBAAkB;YAClB,MAAMiF,kBAAkB,MAAMtG,cAAcuG,eAAe,CAAC7E,UAAU0E,YAAY7D,YAAY;YAC9F,IAAI,CAAC+D,iBAAiB;gBACpBpG,cAAcuF,mBAAmB,CAAChE,OAAO,IAAI,CAACZ,MAAM,CAAC6E,gBAAgB,EAAE,IAAI,CAAC7E,MAAM,CAAC8E,cAAc;gBAEjG,+BAA+B;gBAC/B,MAAM,IAAI,CAACa,yBAAyB,CAACzD,KAAKC,EAAE,EAAED,KAAKwB,QAAQ,CAACG,aAAa,GAAG;gBAE5E,MAAM,IAAIpE,cACRC,UAAUyF,SAAS,EACnB;YAEJ;YAEA,8BAA8B;YAC9B9F,cAAcuG,aAAa,CAAChF;YAC5B,MAAM,IAAI,CAAC+E,yBAAyB,CAACzD,KAAKC,EAAE,EAAE;YAE9C,oBAAoB;YACpB,MAAM,IAAI,CAAC0D,eAAe,CAAC3D,KAAKC,EAAE;YAElC,kBAAkB;YAClB,MAAMoC,SAAS,MAAM,IAAI,CAACC,kBAAkB,CAACtC,MAAMyC;YAEnD,uBAAuB;YACvBhF,OAAOW,IAAI,CAAC,+BAA+B;gBAAE2B,QAAQC,KAAKC,EAAE;gBAAEvB;YAAM;YAEpE,OAAO;gBACLsB,MAAM,IAAI,CAACuC,YAAY,CAACvC;gBACxB4D,aAAavB,OAAOuB,WAAW;gBAC/BC,cAAcxB,OAAOwB,YAAY;gBACjCC,WAAWzB,OAAOyB,SAAS;YAC7B;QACF,EAAE,OAAOzF,OAAO;YACd,IAAIA,iBAAiBd,eAAe;gBAClC,MAAMc;YACR;YACAZ,OAAOY,KAAK,CAAC,iBAAiBA;YAC9B,MAAM,IAAId,cACRC,UAAUc,cAAc,EACxB,gBACA,CAAC,GACDD;QAEJ;IACF;IAEA;;GAEC,GACD,MAAMwF,aAAaA,YAAoB,EAAuB;QAC5D,IAAI;YACF,yBAAyB;YACzB,MAAME,UAAU7G,SAAS8G,WAAW,CAACH,cAAc,IAAI,CAAC/F,MAAM,CAACC,SAAS;YACxE,IAAIgG,QAAQE,IAAI,KAAK,WAAW;gBAC9B,MAAM,IAAI1G,cACRC,UAAU0G,aAAa,EACvB;YAEJ;YAEA,mDAAmD;YACnD,MAAMC,cAAc,MAAM,IAAI,CAACC,gBAAgB,CAACL,QAAQM,GAAG,EAAGN,QAAQhE,MAAM;YAC5E,IAAI,CAACoE,eAAeA,YAAYG,SAAS,EAAE;gBACzC,MAAM,IAAI/G,cACRC,UAAU0G,aAAa,EACvB;YAEJ;YAEA,YAAY;YACZ,MAAMlE,OAAO,MAAM,IAAI,CAACuE,YAAY,CAACR,QAAQhE,MAAM;YACnD,IAAI,CAACC,MAAM;gBACT,MAAM,IAAIzC,cACRC,UAAUyF,SAAS,EACnB;YAEJ;YAEA,oBAAoB;YACpB,IAAIjD,KAAKI,MAAM,KAAKpD,WAAWuD,MAAM,EAAE;gBACrC,MAAM,IAAIhD,cACRC,UAAU2F,SAAS,EACnB;YAEJ;YAEA,2BAA2B;YAC3B,MAAM,IAAI,CAACqB,kBAAkB,CAACT,QAAQM,GAAG;YAEzC,sBAAsB;YACtB,MAAMhC,SAAS,MAAM,IAAI,CAACC,kBAAkB,CAACtC;YAE7C,6BAA6B;YAC7B,MAAM,IAAI,CAACyE,0BAA0B,CAACV,QAAQM,GAAG;YAEjD5G,OAAOW,IAAI,CAAC,gCAAgC;gBAAE2B,QAAQC,KAAKC,EAAE;YAAC;YAE9D,OAAOoC;QACT,EAAE,OAAOhE,OAAO;YACd,IAAIA,iBAAiBd,eAAe;gBAClC,MAAMc;YACR;YACAZ,OAAOY,KAAK,CAAC,yBAAyBA;YACtC,MAAM,IAAId,cACRC,UAAUc,cAAc,EACxB,wBACA,CAAC,GACDD;QAEJ;IACF;IAEA;;GAEC,GACD,MAAMqG,OAAOb,YAAoB,EAAiB;QAChD,IAAI;YACF,yBAAyB;YACzB,MAAME,UAAU7G,SAASyH,WAAW,CAACd;YACrC,IAAI,CAACE,WAAWA,QAAQE,IAAI,KAAK,WAAW;gBAC1C,QAAQ,qCAAqC;YAC/C;YAEA,uBAAuB;YACvB,IAAIF,QAAQM,GAAG,EAAE;gBACf,MAAM,IAAI,CAACG,kBAAkB,CAACT,QAAQM,GAAG;YAC3C;YAEA5G,OAAOW,IAAI,CAAC,gCAAgC;gBAAE2B,QAAQgE,QAAQhE,MAAM;YAAC;QACvE,EAAE,OAAO1B,OAAO;YACdZ,OAAOY,KAAK,CAAC,kBAAkBA;QAC/B,uDAAuD;QACzD;IACF;IAEA;;GAEC,GACD,MAAMuG,YAAY7E,MAAc,EAA8B;QAC5D,IAAI;YACF,MAAMC,OAAO,MAAM,IAAI,CAACuE,YAAY,CAACxE;YACrC,OAAOC,OAAO,IAAI,CAACuC,YAAY,CAACvC,QAAQ;QAC1C,EAAE,OAAO3B,OAAO;YACdZ,OAAOY,KAAK,CAAC,6BAA6BA;YAC1C,OAAO;QACT;IACF;IAEA;;GAEC,GACD,MAAMwG,kBAAkB9E,MAAc,EAAE+E,OAA0B,EAAuB;QACvF,IAAI;YACF,MAAM9E,OAAO,MAAM,IAAI,CAACuE,YAAY,CAACxE;YACrC,IAAI,CAACC,MAAM;gBACT,MAAM,IAAIzC,cACRC,UAAUyF,SAAS,EACnB;YAEJ;YAEA,cAAc;YACd,MAAM8B,cAAc;gBAClB,GAAG/E,IAAI;gBACPQ,SAAS;oBACP,GAAGR,KAAKQ,OAAO;oBACf,GAAGsE,QAAQtE,OAAO;gBACpB;gBACAC,SAAS;oBACP,GAAGT,KAAKS,OAAO;oBACf,GAAGqE,QAAQrE,OAAO;gBACpB;gBACAO,aAAa;oBACX,GAAGhB,KAAKgB,WAAW;oBACnB,GAAG8D,QAAQ9D,WAAW;gBACxB;gBACAkB,WAAW,IAAIpC;YACjB;YAEA,MAAM,IAAI,CAACqC,QAAQ,CAAC4C;YAEpBtH,OAAOW,IAAI,CAAC,qCAAqC;gBAAE2B;YAAO;YAE1D,OAAO,IAAI,CAACwC,YAAY,CAACwC;QAC3B,EAAE,OAAO1G,OAAO;YACd,IAAIA,iBAAiBd,eAAe;gBAClC,MAAMc;YACR;YACAZ,OAAOY,KAAK,CAAC,kCAAkCA;YAC/C,MAAM,IAAId,cACRC,UAAUc,cAAc,EACxB,iCACA,CAAC,GACDD;QAEJ;IACF;IAEA;;GAEC,GACD,MAAM2G,eAAejF,MAAc,EAAEkF,eAAuB,EAAEC,WAAmB,EAAiB;QAChG,IAAI;YACF,wBAAwB;YACxB,IAAI,CAACjG,gBAAgB,CAACiG;YAEtB,0BAA0B;YAC1B,MAAM7B,cAAc,MAAM,IAAI,CAACC,kBAAkB,CAACvD;YAClD,IAAI,CAACsD,aAAa;gBAChB,MAAM,IAAI9F,cACRC,UAAUyF,SAAS,EACnB;YAEJ;YAEA,0BAA0B;YAC1B,MAAMkC,yBAAyB,MAAMlI,cAAcuG,eAAe,CAACyB,iBAAiB5B,YAAY7D,YAAY;YAC5G,IAAI,CAAC2F,wBAAwB;gBAC3B,MAAM,IAAI5H,cACRC,UAAU4H,iBAAiB,EAC3B;YAEJ;YAEA,oBAAoB;YACpB,MAAM9F,OAAO,MAAMrC,cAAcsC,YAAY;YAC7C,MAAM8F,kBAAkB,MAAMpI,cAAcwC,YAAY,CAACyF,aAAa,IAAI,CAACpH,MAAM,CAAC4B,YAAY;YAE9F,kBAAkB;YAClB,MAAM,IAAI,CAAC4F,kBAAkB,CAACvF,QAAQsF,iBAAiB/F;YAEvD,0CAA0C;YAC1C,MAAM,IAAI,CAACiG,0BAA0B,CAACxF;YAEtCtC,OAAOW,IAAI,CAAC,iCAAiC;gBAAE2B;YAAO;QACxD,EAAE,OAAO1B,OAAO;YACd,IAAIA,iBAAiBd,eAAe;gBAClC,MAAMc;YACR;YACAZ,OAAOY,KAAK,CAAC,8BAA8BA;YAC3C,MAAM,IAAId,cACRC,UAAUc,cAAc,EACxB,6BACA,CAAC,GACDD;QAEJ;IACF;IAEA;;GAEC,GACD,MAAMmH,cAAcC,KAAa,EAAwB;QACvD,IAAI;YACF,OAAO,IAAI,CAAC7H,cAAc,CAAC4H,aAAa,CAACC;QAC3C,EAAE,OAAOpH,OAAO;YACd,MAAM,IAAId,cACRC,UAAU0G,aAAa,EACvB,gCACA,CAAC,GACD7F;QAEJ;IACF;IAEA;;GAEC,GACD,MAAMqH,gBAAgBC,WAAwB,EAAEC,SAA6B,EAAoB;QAC/F,IAAI;YACF,OAAO,IAAI,CAAC/H,YAAY,CAACgI,aAAa,CAACF,aAAaC;QACtD,EAAE,OAAOvH,OAAO;YACdZ,OAAOY,KAAK,CAAC,4BAA4BA;YACzC,OAAO;QACT;IACF;IAEA;;GAEC,GACD,MAAMyH,kBAAkBH,WAAwB,EAAEC,SAA6B,EAAEG,OAAgB,EAAiB;QAChH,IAAI;YACF,IAAI,CAAClI,YAAY,CAACiI,iBAAiB,CAACH,aAAaC,WAAWG;QAC9D,EAAE,OAAO1H,OAAO;YACd,IAAIA,iBAAiBd,eAAe;gBAClC,MAAMc;YACR;YACA,MAAM,IAAId,cACRC,UAAU2F,SAAS,EACnB,2BACA,CAAC,GACD9E;QAEJ;IACF;IAEA,yBAAyB;IAEjBU,cAAcL,KAAa,EAAQ;QACzC,MAAMsH,aAAa;QACnB,IAAI,CAACA,WAAWC,IAAI,CAACvH,QAAQ;YAC3B,MAAM,IAAInB,cACRC,UAAU4H,iBAAiB,EAC3B;QAEJ;IACF;IAEQpG,iBAAiBP,QAAgB,EAAQ;QAC/C,IAAIA,SAASyH,MAAM,GAAG,KAAKzH,SAASyH,MAAM,GAAG,IAAI;YAC/C,MAAM,IAAI3I,cACRC,UAAU4H,iBAAiB,EAC3B;QAEJ;QAEA,MAAMe,gBAAgB;QACtB,IAAI,CAACA,cAAcF,IAAI,CAACxH,WAAW;YACjC,MAAM,IAAIlB,cACRC,UAAU4H,iBAAiB,EAC3B;QAEJ;IACF;IAEQnG,iBAAiBN,QAAgB,EAAQ;QAC/C,IAAI,CAAC1B,cAAcmJ,wBAAwB,CAACzH,WAAW;YACrD,MAAM,IAAIpB,cACRC,UAAU4H,iBAAiB,EAC3B;QAEJ;IACF;IAEA,MAAc9C,mBAAmBtC,IAAU,EAAEyC,aAAsB,KAAK,EAAuB;QAC7F,MAAMqB,YAAYrB,aAAa,QAAQ,IAAI,CAAC3E,MAAM,CAACuI,aAAa;QAChE,MAAMC,mBAAmB7D,aAAa,QAAQ,IAAI,CAAC3E,MAAM,CAACyI,iBAAiB;QAE3E,wBAAwB;QACxB,MAAMC,qBAAqB;YACzBzG,QAAQC,KAAKC,EAAE;YACfvB,OAAOsB,KAAKtB,KAAK;YACjBwB,MAAMF,KAAKE,IAAI;YACf+D,MAAM;QACR;QACA,MAAML,cAAc1G,SAASuJ,aAAa,CAACD,oBAAoB,IAAI,CAAC1I,MAAM,CAACC,SAAS,EAAE+F;QAEtF,yBAAyB;QACzB,MAAM4C,iBAAiB5J;QACvB,MAAM6J,sBAAsB;YAC1B5G,QAAQC,KAAKC,EAAE;YACfvB,OAAOsB,KAAKtB,KAAK;YACjBwB,MAAMF,KAAKE,IAAI;YACf+D,MAAM;YACNI,KAAKqC;QACP;QACA,MAAM7C,eAAe3G,SAASuJ,aAAa,CAACE,qBAAqB,IAAI,CAAC7I,MAAM,CAACC,SAAS,EAAEuI;QAExF,iCAAiC;QACjC,MAAM3G,MAAMC,KAAKC,KAAK,CAACC,KAAKH,GAAG,KAAK;QACpC,MAAMiH,mBAAmB,MAAM3J,cAAcwC,YAAY,CAACoE,cAAc;QACxE,MAAMgD,YAAYlH,MAAO8C,CAAAA,aAAa,KAAK,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,EAAC,GAAI,oBAAoB;QAEjG,MAAM,IAAI,CAACqE,gBAAgB,CAACJ,gBAAgB1G,KAAKC,EAAE,EAAE2G,kBAAkBC;QAEvE,iCAAiC;QACjC,MAAME,mBAAmBtE,aAAa,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,IAAI,sBAAsB;QAE9F,OAAO;YACLmB;YACAC;YACAC,WAAWiD;QACb;IACF;IAEQxE,aAAavC,IAAU,EAAc;QAC3C,OAAO;YACLC,IAAID,KAAKC,EAAE;YACXxB,UAAUuB,KAAKvB,QAAQ;YACvBC,OAAOsB,KAAKtB,KAAK;YACjBwB,MAAMF,KAAKE,IAAI;YACfE,QAAQJ,KAAKI,MAAM;YACnBI,SAAS;gBACP1B,aAAakB,KAAKQ,OAAO,CAAC1B,WAAW;gBACrCF,WAAWoB,KAAKQ,OAAO,CAAC5B,SAAS;gBACjCC,UAAUmB,KAAKQ,OAAO,CAAC3B,QAAQ;gBAC/BmI,KAAKhH,KAAKQ,OAAO,CAACwG,GAAG;gBACrBC,QAAQjH,KAAKQ,OAAO,CAACyG,MAAM;YAC7B;YACAzF,UAAU;gBACRC,eAAezB,KAAKwB,QAAQ,CAACC,aAAa;gBAC1CC,kBAAkB1B,KAAKwB,QAAQ,CAACE,gBAAgB;YAClD;QACF;IACF;IAEA,0BAA0B;IAE1B,MAAc6C,aAAaxE,MAAc,EAAwB;QAC/D,MAAMmH,UAAU,IAAI,CAACvJ,EAAE,CAACO,UAAU,CAAC;QACnC,MAAMiJ,MAAM,MAAMD,QAAQE,GAAG,CAC3B,oCACA;YAACrH;SAAO;QAEV,OAAOoH,MAAM,IAAI,CAACE,SAAS,CAACF,OAAO;IACrC;IAEA,MAAcnE,gBAAgBtE,KAAa,EAAwB;QACjE,MAAMwI,UAAU,IAAI,CAACvJ,EAAE,CAACO,UAAU,CAAC;QACnC,MAAMiJ,MAAM,MAAMD,QAAQE,GAAG,CAC3B,uCACA;YAAC1I;SAAM;QAET,OAAOyI,MAAM,IAAI,CAACE,SAAS,CAACF,OAAO;IACrC;IAEA,MAAchI,0BAA0BT,KAAa,EAAED,QAAgB,EAAwB;QAC7F,MAAMyI,UAAU,IAAI,CAACvJ,EAAE,CAACO,UAAU,CAAC;QACnC,MAAMiJ,MAAM,MAAMD,QAAQE,GAAG,CAC3B,uDACA;YAAC1I;YAAOD;SAAS;QAEnB,OAAO0I,MAAM,IAAI,CAACE,SAAS,CAACF,OAAO;IACrC;IAEA,MAAc7D,mBAAmBvD,MAAc,EAA0D;QACvG,MAAMmH,UAAU,IAAI,CAACvJ,EAAE,CAACO,UAAU,CAAC;QACnC,MAAMiJ,MAAM,MAAMD,QAAQE,GAAG,CAC3B,sDACA;YAACrH;SAAO;QAEV,OAAOoH,MAAM;YAAE3H,cAAc2H,IAAIG,aAAa;YAAEhI,MAAM6H,IAAI7H,IAAI;QAAC,IAAI;IACrE;IAEA,MAAc6C,SAASnC,IAAU,EAAER,YAAqB,EAAEF,IAAa,EAAiB;QACtF,MAAM4H,UAAU,IAAI,CAACvJ,EAAE,CAACO,UAAU,CAAC;QACnC,MAAMyB,MAAMC,KAAKC,KAAK,CAACC,KAAKH,GAAG,KAAK;QAEpC,MAAMuH,QAAQ/I,OAAO,CAAC,CAAC;;;;;;IAMvB,CAAC,EAAE;YACD6B,KAAKC,EAAE;YACPD,KAAKvB,QAAQ;YACbuB,KAAKtB,KAAK;YACVsB,KAAKE,IAAI;YACTF,KAAKI,MAAM;YACXZ;YACAF;YACAiI,KAAKC,SAAS,CAACxH,KAAKQ,OAAO;YAC3B+G,KAAKC,SAAS,CAACxH,KAAKS,OAAO;YAC3B8G,KAAKC,SAAS,CAACxH,KAAKgB,WAAW;YAC/BuG,KAAKC,SAAS,CAACxH,KAAKwB,QAAQ;YAC5B+F,KAAKC,SAAS,CAACxH,KAAK4B,KAAK;YACzBhC,KAAKC,KAAK,CAACG,KAAKiC,SAAS,CAACwF,OAAO,KAAK;YACtC9H;YACAK,KAAKkC,SAAS,GAAGtC,KAAKC,KAAK,CAACG,KAAKkC,SAAS,CAACuF,OAAO,KAAK,QAAQ9H;YAC/DK,KAAKwB,QAAQ,CAACkG,eAAe,GAAG9H,KAAKC,KAAK,CAACG,KAAKwB,QAAQ,CAACkG,eAAe,CAACD,OAAO,KAAK,QAAQ;YAC7FzH,KAAKwB,QAAQ,CAACmG,eAAe,GAAG/H,KAAKC,KAAK,CAACG,KAAKwB,QAAQ,CAACmG,eAAe,CAACF,OAAO,KAAK,QAAQ;SAC9F;IACH;IAEA,MAAchE,0BAA0B1D,MAAc,EAAE6H,QAAgB,EAAiB;QACvF,MAAMV,UAAU,IAAI,CAACvJ,EAAE,CAACO,UAAU,CAAC;QACnC,MAAM2J,cAAcD,YAAY,IAAI,CAAC9J,MAAM,CAAC6E,gBAAgB,GAC1D/C,KAAKC,KAAK,CAACC,KAAKH,GAAG,KAAK,QAAQC,KAAKC,KAAK,CAAC,IAAI,CAAC/B,MAAM,CAAC8E,cAAc,GAAG,QAAQ;QAElF,MAAMsE,QAAQ/I,OAAO,CAAC,CAAC;;;;;;;;IAQvB,CAAC,EAAE;YAACyJ;YAAUC;YAAa9H;SAAO;IACpC;IAEA,MAAc4D,gBAAgB5D,MAAc,EAAiB;QAC3D,MAAMmH,UAAU,IAAI,CAACvJ,EAAE,CAACO,UAAU,CAAC;QACnC,MAAMyB,MAAMC,KAAKC,KAAK,CAACC,KAAKH,GAAG,KAAK;QAEpC,MAAMuH,QAAQ/I,OAAO,CAAC,CAAC;;;;IAIvB,CAAC,EAAE;YAACwB;YAAKA;YAAKI;SAAO;IACvB;IAEA,MAAc0E,2BAA2BqD,OAAe,EAAiB;QACvE,MAAMZ,UAAU,IAAI,CAACvJ,EAAE,CAACO,UAAU,CAAC;QACnC,MAAMyB,MAAMC,KAAKC,KAAK,CAACC,KAAKH,GAAG,KAAK;QAEpC,MAAMuH,QAAQ/I,OAAO,CAAC,CAAC;;;;IAIvB,CAAC,EAAE;YAACwB;YAAKmI;SAAQ;IACnB;IAEA,MAAchB,iBACZgB,OAAe,EACf/H,MAAc,EACdgI,SAAiB,EACjBlB,SAAiB,EACF;QACf,MAAMK,UAAU,IAAI,CAACvJ,EAAE,CAACO,UAAU,CAAC;QACnC,MAAMyB,MAAMC,KAAKC,KAAK,CAACC,KAAKH,GAAG,KAAK;QAEpC,MAAMuH,QAAQ/I,OAAO,CAAC,CAAC;;;IAGvB,CAAC,EAAE;YAAC2J;YAAS/H;YAAQgI;YAAWlB;YAAWlH;SAAI;IACjD;IAEA,MAAcyE,iBAAiB0D,OAAe,EAAE/H,MAAc,EAAsD;QAClH,MAAMmH,UAAU,IAAI,CAACvJ,EAAE,CAACO,UAAU,CAAC;QACnC,MAAMiJ,MAAM,MAAMD,QAAQE,GAAG,CAC3B,6FACA;YAACU;YAAS/H;YAAQH,KAAKC,KAAK,CAACC,KAAKH,GAAG,KAAK;SAAM;QAElD,OAAOwH;IACT;IAEA,MAAc3C,mBAAmBsD,OAAe,EAAiB;QAC/D,MAAMZ,UAAU,IAAI,CAACvJ,EAAE,CAACO,UAAU,CAAC;QACnC,MAAMgJ,QAAQ/I,OAAO,CACnB,4DACA;YAAC2J;SAAQ;IAEb;IAEA,MAAcvC,2BAA2BxF,MAAc,EAAiB;QACtE,MAAMmH,UAAU,IAAI,CAACvJ,EAAE,CAACO,UAAU,CAAC;QACnC,MAAMgJ,QAAQ/I,OAAO,CACnB,iEACA;YAAC4B;SAAO;IAEZ;IAEA,MAAcuF,mBAAmBvF,MAAc,EAAEP,YAAoB,EAAEF,IAAY,EAAiB;QAClG,MAAM4H,UAAU,IAAI,CAACvJ,EAAE,CAACO,UAAU,CAAC;QACnC,MAAMyB,MAAMC,KAAKC,KAAK,CAACC,KAAKH,GAAG,KAAK;QAEpC,MAAMuH,QAAQ/I,OAAO,CAAC,CAAC;;;;;IAKvB,CAAC,EAAE;YAACqB;YAAcF;YAAMK;YAAKA;YAAKI;SAAO;IAC3C;IAEA,MAAcqC,6BAA6BrC,MAAc,EAAErB,KAAa,EAAiB;QACvF,MAAMwI,UAAU,IAAI,CAACvJ,EAAE,CAACO,UAAU,CAAC;QACnC,MAAM4J,UAAUhL;QAChB,MAAM2I,QAAQ3I;QACd,MAAMiL,YAAY,MAAM9K,cAAcwC,YAAY,CAACgG,OAAO;QAC1D,MAAMoB,YAAYjH,KAAKC,KAAK,CAACC,KAAKH,GAAG,KAAK,QAAS,KAAK,KAAK,IAAK,WAAW;QAE7E,MAAMuH,QAAQ/I,OAAO,CAAC,CAAC;;;IAGvB,CAAC,EAAE;YAAC2J;YAAS/H;YAAQrB;YAAOqJ;YAAWlB;YAAWjH,KAAKC,KAAK,CAACC,KAAKH,GAAG,KAAK;SAAM;QAEhF,kDAAkD;QAClDlC,OAAOW,IAAI,CAAC,oCAAoC;YAAE2B;YAAQrB;YAAO+G;QAAM;IACzE;IAEQ4B,UAAUF,GAAQ,EAAQ;QAChC,OAAO;YACLlH,IAAIkH,IAAIlH,EAAE;YACVxB,UAAU0I,IAAI1I,QAAQ;YACtBC,OAAOyI,IAAIzI,KAAK;YAChBwB,MAAMiH,IAAIjH,IAAI;YACdE,QAAQ+G,IAAI/G,MAAM;YAClBI,SAAS+G,KAAKS,KAAK,CAACb,IAAIc,YAAY;YACpCxH,SAAS8G,KAAKS,KAAK,CAACb,IAAIe,YAAY;YACpClH,aAAauG,KAAKS,KAAK,CAACb,IAAIgB,gBAAgB;YAC5C3G,UAAU+F,KAAKS,KAAK,CAACb,IAAIiB,aAAa;YACtCxG,OAAO2F,KAAKS,KAAK,CAACb,IAAIkB,UAAU;YAChCpG,WAAW,IAAInC,KAAKqH,IAAImB,UAAU,GAAG;YACrCpG,WAAW,IAAIpC,KAAKqH,IAAIoB,UAAU,GAAG;QACvC;IACF;AACF;AAEA,eAAe7K,YAAY"}

package/dist/types/trigger-dev-events.d.js

@@ -0,0 +1,10 @@
+/**
+ * TypeScript declarations for trigger.dev webhook events and CFN Loop integration
+ * Used for type-safe event handling in trigger.dev orchestration
+ */ /**
+ * Run status literal type matching trigger.dev API
+ */ /**
+ * Task mode agent result
+ */ export { };
+
+//# sourceMappingURL=trigger-dev-events.d.js.map

package/dist/types/trigger-dev-events.d.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/types/trigger-dev-events.d.ts"],"sourcesContent":["/**\r\n * TypeScript declarations for trigger.dev webhook events and CFN Loop integration\r\n * Used for type-safe event handling in trigger.dev orchestration\r\n */\r\n\r\n/**\r\n * Run status literal type matching trigger.dev API\r\n */\r\nexport type RunStatusType = 'PENDING' | 'RUNNING' | 'SUCCESS' | 'FAILURE' | 'CANCELED' | 'TIMEOUT' | 'WAITING';\r\n\r\n/**\r\n * CFN Loop agent type discriminated union\r\n */\r\nexport type AgentType = 'loop3-implementer' | 'loop2-validator' | 'product-owner' | 'orchestrator';\r\n\r\n/**\r\n * Agent completion event payload\r\n */\r\nexport interface AgentCompletePayload {\r\n  agentId: string;\r\n  agentType: AgentType;\r\n  taskId: string;\r\n  status: 'success' | 'failure';\r\n  output: string;\r\n  confidenceScore?: number;\r\n  executionTimeMs: number;\r\n  metadata?: Record<string, unknown>;\r\n}\r\n\r\n/**\r\n * Gate check result from Loop 3\r\n */\r\nexport interface GateResultPayload {\r\n  taskId: string;\r\n  gateType: 'loop3-test-gate' | 'loop2-consensus-gate';\r\n  passed: boolean;\r\n  passRate?: number;\r\n  details: {\r\n    threshold: number;\r\n    actualValue: number;\r\n    failureReason?: string;\r\n  };\r\n  timestamp: string;\r\n}\r\n\r\n/**\r\n * Consensus collection result from Loop 2\r\n */\r\nexport interface ConsensusResultPayload {\r\n  taskId: string;\r\n  validatorCount: number;\r\n  consensusScore: number;\r\n  consensusThreshold: number;\r\n  passed: boolean;\r\n  validatorScores: Array<{\r\n    validatorId: string;\r\n    score: number;\r\n    feedback?: string;\r\n  }>;\r\n  timestamp: string;\r\n}\r\n\r\n/**\r\n * Product Owner decision payload\r\n */\r\nexport interface PODecisionPayload {\r\n  taskId: string;\r\n  decision: 'PROCEED' | 'ITERATE' | 'ABORT';\r\n  reasoning: string;\r\n  reviewNotes?: string;\r\n  deliverablesSummary?: string;\r\n  timestamp: string;\r\n}\r\n\r\n/**\r\n * CFN Loop trigger payload\r\n */\r\nexport interface CFNLoopPayload {\r\n  taskId: string;\r\n  description: string;\r\n  mode: 'standard' | 'mvp' | 'enterprise';\r\n  successCriteria: {\r\n    gate: string;\r\n    consensusThreshold: number;\r\n    testPassRateThreshold: number;\r\n  };\r\n  context?: Record<string, unknown>;\r\n  webhookUrl?: string;\r\n}\r\n\r\n/**\r\n * Trigger.dev run status response\r\n */\r\nexport interface RunStatusResponse {\r\n  id: string;\r\n  status: RunStatusType;\r\n  startedAt?: string;\r\n  completedAt?: string;\r\n  output?: unknown;\r\n  error?: string;\r\n}\r\n\r\n/**\r\n * Trigger.dev run object\r\n */\r\nexport interface Run {\r\n  id: string;\r\n  taskId: string;\r\n  status: RunStatusType;\r\n  createdAt: string;\r\n  updatedAt: string;\r\n  startedAt?: string;\r\n  completedAt?: string;\r\n  output?: unknown;\r\n  error?: string;\r\n  metadata?: Record<string, unknown>;\r\n}\r\n\r\n/**\r\n * Webhook signature verification options\r\n */\r\nexport interface WebhookVerificationOptions {\r\n  algorithmType: 'sha256' | 'sha512';\r\n  headerName: string;\r\n}\r\n\r\n/**\r\n * Typed webhook request context\r\n */\r\nexport interface WebhookContext<T> {\r\n  payload: T;\r\n  isVerified: boolean;\r\n  timestamp: number;\r\n  signature?: string;\r\n}\r\n\r\n/**\r\n * Webhook handler result\r\n */\r\nexport interface WebhookHandlerResult {\r\n  success: boolean;\r\n  message: string;\r\n  data?: unknown;\r\n}\r\n\r\n/**\r\n * Task mode coordination event (in-memory)\r\n */\r\nexport interface TaskModeEvent {\r\n  type: 'agent-complete' | 'gate-result' | 'consensus-result' | 'po-decision';\r\n  taskId: string;\r\n  payload: AgentCompletePayload | GateResultPayload | ConsensusResultPayload | PODecisionPayload;\r\n  timestamp: number;\r\n}\r\n\r\n/**\r\n * Task mode agent spawning request\r\n */\r\nexport interface TaskModeSpawnRequest {\r\n  agentType: AgentType;\r\n  taskId: string;\r\n  payload: Record<string, unknown>;\r\n  timeoutMs?: number;\r\n}\r\n\r\n/**\r\n * Task mode agent result\r\n */\r\nexport interface TaskModeAgentResult {\r\n  agentId: string;\r\n  agentType: AgentType;\r\n  success: boolean;\r\n  output: string;\r\n  confidenceScore?: number;\r\n  executionTimeMs: number;\r\n}\r\n"],"names":[],"mappings":"AAAA;;;CAGC,GAED;;CAEC,GA8JD;;CAEC,GACD,WAOC"}

package/docs/README.md

@@ -0,0 +1,240 @@
+# Documentation Structure - Quick Start
+
+**Last Updated:** November 20, 2025
+**Structure:** 15 folders, 732 files
+
+---
+
+## Finding What You Need
+
+### By Topic
+
+**Architecture & System Design**
+→ `docs/architecture/` - System patterns, agent models, database design
+
+**Orchestration & CFN Loop**
+→ `docs/cfn-system/` - Methodology, coordinator/orchestrator patterns
+
+**Deployment & Operations**
+→ `docs/operations/` - Runbooks, environment setup, configuration
+
+**Testing & Quality**
+→ `docs/testing/` - Test patterns, frameworks, performance benchmarks
+→ `docs/quality-assurance/` - QA strategy, coverage targets
+
+**Code & Implementation**
+→ `docs/implementation/` - Execution patterns, delivery guides
+→ `docs/guides/` - Developer tutorials, quick references
+
+**Bug Tracking & Issues**
+→ `docs/bugs/` - Issue database, fixes, investigations
+
+**Security & Compliance**
+→ `docs/security/` - Audits, compliance, threat analysis
+
+**Reports & Analytics**
+→ `docs/analysis-reports/` - Test coverage, metrics, dashboards
+→ `docs/analytics/` - System intelligence, organizational insights
+
+**Code Reviews & Feedback**
+→ `docs/reviews/` - Review guidelines, consistency analysis
+
+**Strategic Planning**
+→ `docs/roadmap/` - Product roadmap, iteration planning
+
+**Major Migrations**
+→ `docs/migration/` - Version upgrades, deprecation notices
+
+---
+
+## By Role
+
+### Product Manager
+- **Roadmap:** `docs/roadmap/`
+- **Analytics:** `docs/analytics/`
+- **Architecture:** `docs/architecture/`
+
+### Developer
+- **Setup:** `docs/guides/`
+- **Code Patterns:** `docs/implementation/`
+- **Testing:** `docs/testing/`
+- **Architecture:** `docs/architecture/`
+
+### DevOps
+- **Deployment:** `docs/operations/`
+- **Docker:** `docs/docker/`
+- **Security:** `docs/security/`
+
+### QA/Tester
+- **Test Strategy:** `docs/quality-assurance/`
+- **Test Patterns:** `docs/testing/`
+- **Test Reports:** `docs/analysis-reports/`
+- **Issues:** `docs/bugs/`
+
+### Technical Lead
+- **System Design:** `docs/architecture/`
+- **Orchestration:** `docs/cfn-system/`
+- **Security:** `docs/security/`
+- **Operations:** `docs/operations/`
+
+---
+
+## Folder Structure (15 folders)
+
+```
+docs/
+├── analytics/                 (23 files)  System analytics & intelligence
+├── analysis-reports/          (53 files)  Reports & metrics
+├── architecture/              (134 files) System design & patterns
+├── bugs/                      (73 files)  Issue tracking & fixes
+├── cfn-system/                (36 files)  Orchestration methodology
+├── docker/                    (59 files)  Containers & CI/CD
+├── guides/                    (55 files)  Developer guides & tutorials
+├── implementation/            (51 files)  Execution patterns
+├── migration/                 (53 files)  Version upgrades
+├── operations/                (58 files)  Deployment & operations
+├── quality-assurance/         (28 files)  QA strategy & validation
+├── reviews/                   (43 files)  Code reviews & feedback
+├── roadmap/                   (18 files)  Strategic planning
+├── security/                  (47 files)  Compliance & security
+└── testing/                   (33 files)  All testing disciplines
+```
+
+---
+
+## Consolidated from (Old Folders)
+
+If you're looking for content that was previously in:
+
+- **testing-performance/** → Now in `docs/testing/`
+- **resources/** → Now in `docs/guides/`
+- **analysis/, meta/, handoff/** → Now in `docs/reviews/`
+- **fixes/** → Now in `docs/bugs/`
+- **environment, environment-config/** → Now in `docs/operations/`
+- **features, agent-spawner, database/** → Now in `docs/architecture/`
+- **cfn-loop, reports/** → Now in `docs/analysis-reports/`
+- **ace-system, organization/** → Now in `docs/analytics/`
+- **iteration-reports/** → Now in `docs/roadmap/`
+
+---
+
+## Quick Search
+
+```bash
+# Find documentation by keyword
+grep -r "search term" docs/
+
+# Find in specific folder
+grep -r "term" docs/testing/
+
+# Find markdown files only
+grep -r "term" docs/ --include="*.md"
+```
+
+---
+
+## Key Documents
+
+### Getting Started
+- `docs/guides/DEVELOPER_TYPESCRIPT_MIGRATION_GUIDE.md`
+- `docs/architecture/AGENT_OUTPUT_STANDARDS.md`
+- `docs/NAVIGATION_GUIDE.md` (detailed navigation reference)
+
+### Architecture
+- `docs/architecture/` - Browse architecture decisions
+- `docs/cfn-system/CFN_LOOP_ARCHITECTURE.md`
+- `docs/docker/` - Container patterns
+
+### Operations
+- `docs/operations/` - Deployment procedures
+- `docs/security/` - Security policies
+- `docs/bugs/` - Issue tracking
+
+### Quality
+- `docs/testing/` - Test frameworks
+- `docs/quality-assurance/` - QA strategy
+- `docs/analysis-reports/` - Test coverage
+
+---
+
+## Recent Changes
+
+**Consolidation Completed:** November 20, 2025
+
+The documentation structure was consolidated from 29 folders to 15 folders:
+- **48% folder reduction** while maintaining all 732 files
+- **Improved navigation** with domain-based organization
+- **Zero data loss** - all content preserved
+
+See `CONSOLIDATION_REPORT.md` for details.
+
+---
+
+## Documentation Files
+
+For detailed navigation and information:
+
+- **NAVIGATION_GUIDE.md** - How to find documentation
+- **CONSOLIDATION_PLAN.md** - Original consolidation strategy
+- **CONSOLIDATION_REPORT.md** - Complete execution report
+- **CONSOLIDATION_COMMANDS.md** - Technical reference
+- **CONSOLIDATION_STATUS.md** - Final status (in root directory)
+- **CONSOLIDATION_EXECUTION_SUMMARY.md** - Executive summary (in root directory)
+
+---
+
+## Folder Responsibilities
+
+### Kept Intact (7 folders)
+- architecture - System design & patterns
+- cfn-system - Orchestration methodology
+- docker - Container infrastructure
+- implementation - Execution patterns
+- migration - Version upgrades
+- quality-assurance - QA strategy
+- security - Compliance & security
+
+### Expanded (6 folders)
+- testing - All testing disciplines (added performance)
+- guides - Developer guides (added resources)
+- operations - Operations management (added environment)
+- bugs - Issue tracking (added fixes)
+- reviews - Code reviews (added analysis, meta)
+- roadmap - Strategic planning (added iterations)
+
+### New (2 folders)
+- analytics - System intelligence & insights
+- analysis-reports - Reports & metrics
+
+---
+
+## Next Steps
+
+1. **Bookmark this README** for quick reference
+2. **Read NAVIGATION_GUIDE.md** for detailed navigation
+3. **Explore folders** for your area of interest
+4. **Use grep** to search for specific topics
+5. **Report issues** if you find broken links
+
+---
+
+## Support
+
+**Questions?** Check:
+- NAVIGATION_GUIDE.md - Detailed folder descriptions
+- CONSOLIDATION_PLAN.md - Why folders were consolidated
+- CONSOLIDATION_REPORT.md - What changed and how
+
+**Can't find something?**
+```bash
+grep -r "your search term" docs/
+```
+
+---
+
+**Status:** Complete
+**Files Preserved:** 732 (100%)
+**Data Loss:** 0
+**Ready for Use:** Yes
+
+For more details, see CONSOLIDATION_STATUS.md in the root directory.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-flow-novice",
-  "version": "2.15.11",
+  "version": "2.16.0",
   "description": "AI agent orchestration framework with namespace-isolated skills, agents, and CFN Loop validation. Safe installation with ~0.01% collision risk.",
   "main": "dist/index.js",
   "type": "module",
@@ -98,8 +98,13 @@
   "homepage": "https://github.com/yourusername/claude-flow-novice#readme",
   "scripts": {
     "dev": "tsx src/cli/index.ts",
-    "build": "npm run clean && npm run build:swc",
+    "build": "npm run clean && npm run build:swc && npm run build:orchestrator",
     "build:swc": "swc src -d dist --config-file .swcrc --ignore '**/*.test.ts' --ignore '**/*.test.tsx' --ignore '**/*.spec.ts'",
+    "build:orchestrator": "cd .claude/skills/cfn-loop-orchestration && npm run build 2>/dev/null || echo 'Orchestrator build skipped (optional)'",
+    "build:all": "npm run build && npm run build:spawner && npm run build:selector && npm run build:coordination",
+    "build:spawner": "cd src/coordination && tsc spawn-agent.ts --outDir ../../dist/coordination --module commonjs --target es2020 --skipLibCheck 2>/dev/null || echo 'Spawner build skipped'",
+    "build:selector": "cd .claude/skills/cfn-agent-selection-with-fallback && npm run build 2>/dev/null || echo 'Selector build skipped'",
+    "build:coordination": "cd src/coordination && tsc store-task-context.ts store-success-criteria.ts --outDir ../../dist/coordination --module es2020 --target es2020 --esModuleInterop --allowSyntheticDefaultImports --skipLibCheck 2>/dev/null || echo 'Coordination build skipped'",
     "clean": "rm -rf dist",
     "test": "jest",
     "test:skills": "jest skill-markdown-validator.test.ts",
@@ -125,7 +130,7 @@
     "portal:status": "./scripts/portal-status.sh",
     "test:watch": "jest --watch",
     "test:coverage": "jest --coverage",
-    "test:integration": "jest tests/integration --maxWorkers=4",
+    "test:integration": "jest --config=jest.integration.config.ts --maxWorkers=4",
     "test:performance": "jest tests/performance --maxWorkers=2",
     "test:load": "jest tests/load-testing --maxWorkers=2 --testTimeout=30000",
     "docker:build": "docker build -f Dockerfile.production -t claude-flow-novice:production .",
@@ -146,7 +151,9 @@
     "db:rollback:dry-run": "tsx scripts/migrations/rollback.ts --dry-run",
     "db:migrations:list": "tsx scripts/migrations/list-migrations.ts",
     "db:migrations:validate": "tsx scripts/migrations/validate.ts",
-    "db:migrations:history": "tsx scripts/migrations/history.ts"
+    "db:migrations:history": "tsx scripts/migrations/history.ts",
+    "test:integration:verbose": "jest --config=jest.integration.config.ts --maxWorkers=4 --verbose",
+    "test:integration:watch": "jest --config=jest.integration.config.ts --maxWorkers=2 --watch"
   },
   "dependencies": {
     "@anthropic-ai/sdk": "^0.67.0",
@@ -166,6 +173,7 @@
     "jsonwebtoken": "^9.0.2",
     "lodash": "^4.17.21",
     "redis": "^5.8.3",
+    "shell-quote": "^1.8.3",
     "socket.io": "^4.8.1",
     "sqlite": "^5.1.1",
     "sqlite3": "^5.1.7",
@@ -184,6 +192,7 @@
     "@types/jest": "^30.0.0",
     "@types/lodash": "^4.17.20",
     "@types/pg": "^8.15.6",
+    "@types/shell-quote": "^1.7.5",
     "@types/sqlite3": "^3.1.11",
     "@types/uuid": "^10.0.0",
     "@types/yaml": "^1.9.6",