crewly 1.5.17 → 1.5.19

package/dist/backend/backend/src/services/cloud/auth/auth.service.js

@@ -1,494 +0,0 @@
-/**
- * Auth Service
- *
- * Handles user registration, authentication, JWT token management,
- * and user data persistence for the CrewlyAI Cloud account system.
- *
- * Uses Node.js built-in crypto module for password hashing (scrypt)
- * and JWT signing (HMAC-SHA256), consistent with the project's
- * existing crypto patterns (relay-crypto.service).
- *
- * User data is stored as JSON files in ~/.crewly/cloud/users/.
- *
- * @module services/cloud/auth/auth.service
- */
-import { randomBytes, scryptSync, createHmac, timingSafeEqual } from 'crypto';
-import { randomUUID } from 'crypto';
-import { promises as fs } from 'fs';
-import * as path from 'path';
-import * as os from 'os';
-import { LoggerService } from '../../core/logger.service.js';
-import { AUTH_CONSTANTS } from '../../../constants.js';
-import { toUserProfile, isJwtPayload, } from './auth.types.js';
-const AUTH = AUTH_CONSTANTS;
-// ---------------------------------------------------------------------------
-// Service
-// ---------------------------------------------------------------------------
-/**
- * AuthService singleton.
- *
- * Manages user accounts, password verification, and JWT lifecycle.
- * All user data is stored as individual JSON files in ~/.crewly/cloud/users/.
- */
-export class AuthService {
-    static instance = null;
-    logger;
-    usersDir;
-    indexPath;
-    jwtSecret;
-    constructor() {
-        this.logger = LoggerService.getInstance().createComponentLogger('AuthService');
-        const crewlyHome = path.join(os.homedir(), '.crewly');
-        this.usersDir = path.join(crewlyHome, AUTH.STORAGE.USERS_DIR);
-        this.indexPath = path.join(crewlyHome, AUTH.STORAGE.USER_INDEX_FILE);
-        this.jwtSecret = process.env['CREWLY_JWT_SECRET'] || AUTH.JWT.DEFAULT_SECRET;
-    }
-    /**
-     * Get the singleton instance.
-     *
-     * @returns AuthService instance
-     */
-    static getInstance() {
-        if (!AuthService.instance) {
-            AuthService.instance = new AuthService();
-        }
-        return AuthService.instance;
-    }
-    /**
-     * Reset the singleton (for testing).
-     */
-    static resetInstance() {
-        AuthService.instance = null;
-    }
-    // -------------------------------------------------------------------------
-    // Registration
-    // -------------------------------------------------------------------------
-    /**
-     * Register a new user account.
-     *
-     * @param email - User email (must be unique)
-     * @param password - Plain-text password (will be hashed)
-     * @param displayName - User display name
-     * @returns Auth token response with access and refresh tokens
-     * @throws Error if email is already registered
-     */
-    async register(email, password, displayName) {
-        const normalizedEmail = email.toLowerCase().trim();
-        // Check for existing user
-        const existingId = await this.findUserIdByEmail(normalizedEmail);
-        if (existingId) {
-            throw new Error('Email already registered');
-        }
-        const now = new Date().toISOString();
-        const user = {
-            id: randomUUID(),
-            email: normalizedEmail,
-            passwordHash: this.hashPassword(password),
-            displayName: displayName.trim(),
-            plan: AUTH.PLANS.FREE,
-            createdAt: now,
-            updatedAt: now,
-        };
-        await this.saveUser(user);
-        await this.updateIndex(normalizedEmail, user.id);
-        this.logger.info('User registered', { userId: user.id, email: normalizedEmail });
-        return this.createTokenResponse(user);
-    }
-    // -------------------------------------------------------------------------
-    // Login
-    // -------------------------------------------------------------------------
-    /**
-     * Authenticate a user with email and password.
-     *
-     * @param email - User email
-     * @param password - Plain-text password
-     * @returns Auth token response with access and refresh tokens
-     * @throws Error if credentials are invalid
-     */
-    async login(email, password) {
-        const normalizedEmail = email.toLowerCase().trim();
-        const userId = await this.findUserIdByEmail(normalizedEmail);
-        if (!userId) {
-            throw new Error('Invalid email or password');
-        }
-        const user = await this.loadUser(userId);
-        if (!user) {
-            throw new Error('Invalid email or password');
-        }
-        if (!this.verifyPassword(password, user.passwordHash)) {
-            throw new Error('Invalid email or password');
-        }
-        this.logger.info('User logged in', { userId: user.id });
-        return this.createTokenResponse(user);
-    }
-    // -------------------------------------------------------------------------
-    // Token management
-    // -------------------------------------------------------------------------
-    /**
-     * Refresh an access token using a valid refresh token.
-     *
-     * @param refreshToken - JWT refresh token
-     * @returns New auth token response
-     * @throws Error if refresh token is invalid or expired
-     */
-    async refreshToken(refreshToken) {
-        const payload = this.verifyToken(refreshToken);
-        if (payload.type !== 'refresh') {
-            throw new Error('Invalid token type — expected refresh token');
-        }
-        const user = await this.loadUser(payload.sub);
-        if (!user) {
-            throw new Error('User not found');
-        }
-        this.logger.info('Token refreshed', { userId: user.id });
-        return this.createTokenResponse(user);
-    }
-    /**
-     * Verify a JWT token and return its payload.
-     *
-     * @param token - JWT token string
-     * @returns Decoded JWT payload
-     * @throws Error if token is invalid, expired, or malformed
-     */
-    verifyToken(token) {
-        const parts = token.split('.');
-        if (parts.length !== 3) {
-            throw new Error('Invalid token format');
-        }
-        const [headerB64, payloadB64, signatureB64] = parts;
-        const expectedSig = this.sign(`${headerB64}.${payloadB64}`);
-        if (signatureB64 !== expectedSig) {
-            throw new Error('Invalid token signature');
-        }
-        const payloadJson = Buffer.from(payloadB64, 'base64url').toString('utf8');
-        let payload;
-        try {
-            payload = JSON.parse(payloadJson);
-        }
-        catch {
-            throw new Error('Invalid token payload');
-        }
-        if (!isJwtPayload(payload)) {
-            throw new Error('Invalid token payload structure');
-        }
-        const now = Math.floor(Date.now() / 1000);
-        if (payload.exp <= now) {
-            throw new Error('Token expired');
-        }
-        return payload;
-    }
-    // -------------------------------------------------------------------------
-    // User profile
-    // -------------------------------------------------------------------------
-    /**
-     * Get a user profile by ID.
-     *
-     * @param userId - User ID
-     * @returns Public user profile or null if not found
-     */
-    async getUserProfile(userId) {
-        const user = await this.loadUser(userId);
-        if (!user)
-            return null;
-        return toUserProfile(user);
-    }
-    /**
-     * Update a user's display name.
-     *
-     * @param userId - User ID
-     * @param updates - Fields to update
-     * @returns Updated user profile
-     * @throws Error if user not found
-     */
-    async updateProfile(userId, updates) {
-        const user = await this.loadUser(userId);
-        if (!user) {
-            throw new Error('User not found');
-        }
-        if (updates.displayName !== undefined) {
-            user.displayName = updates.displayName.trim();
-        }
-        user.updatedAt = new Date().toISOString();
-        await this.saveUser(user);
-        this.logger.info('User profile updated', { userId });
-        return toUserProfile(user);
-    }
-    // -------------------------------------------------------------------------
-    // OAuth login (no password required)
-    // -------------------------------------------------------------------------
-    /**
-     * Login or create a user via OAuth (e.g., Google Sign-In).
-     *
-     * If the user exists, returns tokens for them.
-     * If not, creates a new account with no password (OAuth-only).
-     *
-     * @param email - User email from OAuth provider
-     * @param displayName - Display name from OAuth profile
-     * @returns Auth token response with access and refresh tokens
-     */
-    async loginOrCreateOAuth(email, displayName) {
-        const normalizedEmail = email.toLowerCase().trim();
-        const existingId = await this.findUserIdByEmail(normalizedEmail);
-        if (existingId) {
-            const user = await this.loadUser(existingId);
-            if (user) {
-                this.logger.info('OAuth login for existing user', { userId: user.id, email: normalizedEmail });
-                return this.createTokenResponse(user);
-            }
-        }
-        // Create new OAuth user (no password — they authenticate via provider)
-        const now = new Date().toISOString();
-        const user = {
-            id: randomUUID(),
-            email: normalizedEmail,
-            passwordHash: '', // OAuth users have no password
-            displayName: displayName.trim(),
-            plan: AUTH.PLANS.FREE,
-            createdAt: now,
-            updatedAt: now,
-        };
-        await this.saveUser(user);
-        await this.updateIndex(normalizedEmail, user.id);
-        this.logger.info('OAuth user created', { userId: user.id, email: normalizedEmail });
-        return this.createTokenResponse(user);
-    }
-    // -------------------------------------------------------------------------
-    // Admin operations
-    // -------------------------------------------------------------------------
-    /**
-     * List all registered users (admin only).
-     *
-     * Reads all user JSON files from the users directory.
-     *
-     * @returns Array of public user profiles
-     */
-    async listAllUsers() {
-        await this.ensureDir();
-        let files;
-        try {
-            files = await fs.readdir(this.usersDir);
-        }
-        catch {
-            return [];
-        }
-        const profiles = [];
-        for (const file of files) {
-            if (!file.endsWith('.json') || file === 'index.json')
-                continue;
-            try {
-                const content = await fs.readFile(path.join(this.usersDir, file), 'utf8');
-                const user = JSON.parse(content);
-                profiles.push(toUserProfile(user));
-            }
-            catch {
-                // Skip malformed files
-            }
-        }
-        return profiles.sort((a, b) => b.createdAt.localeCompare(a.createdAt));
-    }
-    /**
-     * Update a user's subscription tier (admin only).
-     *
-     * @param userId - User ID to update
-     * @param tier - New plan tier
-     * @returns Updated user profile
-     * @throws Error if user not found
-     */
-    async updateUserTier(userId, tier) {
-        const user = await this.loadUser(userId);
-        if (!user) {
-            throw new Error('User not found');
-        }
-        user.plan = tier;
-        user.updatedAt = new Date().toISOString();
-        await this.saveUser(user);
-        this.logger.info('User tier updated', { userId, tier });
-        return toUserProfile(user);
-    }
-    // -------------------------------------------------------------------------
-    // License
-    // -------------------------------------------------------------------------
-    /**
-     * Get the license status for a user.
-     *
-     * @param userId - User ID
-     * @returns License status with plan and feature list
-     * @throws Error if user not found
-     */
-    async getLicenseStatus(userId) {
-        const user = await this.loadUser(userId);
-        if (!user) {
-            throw new Error('User not found');
-        }
-        const isPro = user.plan === AUTH.PLANS.PRO;
-        return {
-            plan: user.plan,
-            features: isPro ? [...AUTH.PRO_FEATURES] : [],
-            active: true,
-        };
-    }
-    // -------------------------------------------------------------------------
-    // Password hashing (scrypt)
-    // -------------------------------------------------------------------------
-    /**
-     * Hash a password using scrypt with a random salt.
-     *
-     * @param password - Plain-text password
-     * @returns Encoded hash in format "salt:hash" (both hex-encoded)
-     */
-    hashPassword(password) {
-        const salt = randomBytes(AUTH.PASSWORD.SALT_LENGTH);
-        const hash = scryptSync(password, salt, AUTH.PASSWORD.KEY_LENGTH, {
-            cost: AUTH.PASSWORD.COST,
-        });
-        return `${salt.toString('hex')}:${hash.toString('hex')}`;
-    }
-    /**
-     * Verify a password against a stored hash.
-     *
-     * @param password - Plain-text password to verify
-     * @param storedHash - Stored hash in "salt:hash" format
-     * @returns true if password matches
-     */
-    verifyPassword(password, storedHash) {
-        const [saltHex, hashHex] = storedHash.split(':');
-        if (!saltHex || !hashHex)
-            return false;
-        const salt = Buffer.from(saltHex, 'hex');
-        const expectedHash = Buffer.from(hashHex, 'hex');
-        const actualHash = scryptSync(password, salt, AUTH.PASSWORD.KEY_LENGTH, {
-            cost: AUTH.PASSWORD.COST,
-        });
-        return timingSafeEqual(expectedHash, actualHash);
-    }
-    // -------------------------------------------------------------------------
-    // JWT creation
-    // -------------------------------------------------------------------------
-    /**
-     * Create a JWT token response with access and refresh tokens.
-     *
-     * @param user - User record to create tokens for
-     * @returns Auth token response
-     */
-    createTokenResponse(user) {
-        const now = Math.floor(Date.now() / 1000);
-        const accessPayload = {
-            sub: user.id,
-            email: user.email,
-            plan: user.plan,
-            iat: now,
-            exp: now + AUTH.JWT.ACCESS_TOKEN_EXPIRY_S,
-            iss: AUTH.JWT.ISSUER,
-            type: 'access',
-        };
-        const refreshPayload = {
-            sub: user.id,
-            email: user.email,
-            plan: user.plan,
-            iat: now,
-            exp: now + AUTH.JWT.REFRESH_TOKEN_EXPIRY_S,
-            iss: AUTH.JWT.ISSUER,
-            type: 'refresh',
-        };
-        return {
-            accessToken: this.createJwt(accessPayload),
-            refreshToken: this.createJwt(refreshPayload),
-            expiresIn: AUTH.JWT.ACCESS_TOKEN_EXPIRY_S,
-            user: toUserProfile(user),
-        };
-    }
-    /**
-     * Create a signed JWT from a payload.
-     *
-     * @param payload - JWT payload object
-     * @returns Signed JWT string (header.payload.signature)
-     */
-    createJwt(payload) {
-        const header = { alg: AUTH.JWT.ALGORITHM, typ: 'JWT' };
-        const headerB64 = Buffer.from(JSON.stringify(header)).toString('base64url');
-        const payloadB64 = Buffer.from(JSON.stringify(payload)).toString('base64url');
-        const signature = this.sign(`${headerB64}.${payloadB64}`);
-        return `${headerB64}.${payloadB64}.${signature}`;
-    }
-    /**
-     * Sign data with HMAC-SHA256 using the JWT secret.
-     *
-     * @param data - Data to sign
-     * @returns Base64url-encoded signature
-     */
-    sign(data) {
-        return createHmac('sha256', this.jwtSecret).update(data).digest('base64url');
-    }
-    // -------------------------------------------------------------------------
-    // Storage
-    // -------------------------------------------------------------------------
-    /**
-     * Ensure the users storage directory exists.
-     */
-    async ensureDir() {
-        await fs.mkdir(this.usersDir, { recursive: true });
-    }
-    /**
-     * Save a user record to disk.
-     *
-     * @param user - User record to save
-     */
-    async saveUser(user) {
-        await this.ensureDir();
-        const filePath = path.join(this.usersDir, `${user.id}.json`);
-        await fs.writeFile(filePath, JSON.stringify(user, null, 2), 'utf8');
-    }
-    /**
-     * Load a user record from disk.
-     *
-     * @param userId - User ID
-     * @returns User record or null if not found
-     */
-    async loadUser(userId) {
-        const filePath = path.join(this.usersDir, `${userId}.json`);
-        try {
-            const content = await fs.readFile(filePath, 'utf8');
-            return JSON.parse(content);
-        }
-        catch {
-            return null;
-        }
-    }
-    /**
-     * Find a user ID by email using the index.
-     *
-     * @param email - User email (normalized)
-     * @returns User ID or null if not found
-     */
-    async findUserIdByEmail(email) {
-        const index = await this.loadIndex();
-        return index[email] || null;
-    }
-    /**
-     * Load the email → userId index from disk.
-     *
-     * @returns User index object
-     */
-    async loadIndex() {
-        try {
-            const content = await fs.readFile(this.indexPath, 'utf8');
-            return JSON.parse(content);
-        }
-        catch {
-            return {};
-        }
-    }
-    /**
-     * Update the email → userId index on disk.
-     *
-     * @param email - User email
-     * @param userId - User ID
-     */
-    async updateIndex(email, userId) {
-        await this.ensureDir();
-        const index = await this.loadIndex();
-        index[email] = userId;
-        await fs.writeFile(this.indexPath, JSON.stringify(index, null, 2), 'utf8');
-    }
-}
-//# sourceMappingURL=auth.service.js.map

package/dist/backend/backend/src/services/cloud/auth/auth.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../../../../backend/src/services/cloud/auth/auth.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,aAAa,EAAwB,MAAM,8BAA8B,CAAC;AACnF,OAAO,EAAE,cAAc,EAAiB,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAML,aAAa,EACb,YAAY,GACb,MAAM,iBAAiB,CAAC;AAEzB,MAAM,IAAI,GAAG,cAAc,CAAC;AAU5B,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,OAAO,WAAW;IACd,MAAM,CAAC,QAAQ,GAAuB,IAAI,CAAC;IAClC,MAAM,CAAkB;IACxB,QAAQ,CAAS;IACjB,SAAS,CAAS;IAClB,SAAS,CAAS;IAEnC;QACE,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;QAC/E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC;IAC/E,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC1B,WAAW,CAAC,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC;QAC3C,CAAC;QACD,OAAO,WAAW,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,aAAa;QAClB,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC9B,CAAC;IAED,4EAA4E;IAC5E,eAAe;IACf,4EAA4E;IAE5E;;;;;;;;OAQG;IACH,KAAK,CAAC,QAAQ,CAAC,KAAa,EAAE,QAAgB,EAAE,WAAmB;QACjE,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAEnD,0BAA0B;QAC1B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QACjE,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,GAAe;YACvB,EAAE,EAAE,UAAU,EAAE;YAChB,KAAK,EAAE,eAAe;YACtB,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC;YACzC,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE;YAC/B,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAgB;YACjC,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;QAEF,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAEjD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QAEjF,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,4EAA4E;IAC5E,QAAQ;IACR,4EAA4E;IAE5E;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,QAAgB;QACzC,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAEnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAExD,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,4EAA4E;IAC5E,mBAAmB;IACnB,4EAA4E;IAE5E;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CAAC,YAAoB;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QAE/C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAEzD,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;OAMG;IACH,WAAW,CAAC,KAAa;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC;QACpD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC;QAE5D,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4EAA4E;IAC5E,eAAe;IACf,4EAA4E;IAE5E;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,OAAiC;QACnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE1C,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAErD,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,4EAA4E;IAC5E,qCAAqC;IACrC,4EAA4E;IAE5E;;;;;;;;;OASG;IACH,KAAK,CAAC,kBAAkB,CAAC,KAAa,EAAE,WAAmB;QACzD,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAEnD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QACjE,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC7C,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;gBAC/F,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,GAAe;YACvB,EAAE,EAAE,UAAU,EAAE;YAChB,KAAK,EAAE,eAAe;YACtB,YAAY,EAAE,EAAE,EAAE,+BAA+B;YACjD,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE;YAC/B,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAgB;YACjC,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;QAEF,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAEjD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QACpF,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,4EAA4E;IAC5E,mBAAmB;IACnB,4EAA4E;IAE5E;;;;;;OAMG;IACH,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,QAAQ,GAAkB,EAAE,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,YAAY;gBAAE,SAAS;YAC/D,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;gBAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAe,CAAC;gBAC/C,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACzE,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,IAAc;QACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE1C,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAExD,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,4EAA4E;IAC5E,UAAU;IACV,4EAA4E;IAE5E;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CAAC,MAAc;QACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAE3C,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE;YAC7C,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,4BAA4B;IAC5B,4EAA4E;IAE5E;;;;;OAKG;IACH,YAAY,CAAC,QAAgB;QAC3B,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;SACzB,CAAC,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3D,CAAC;IAED;;;;;;OAMG;IACH,cAAc,CAAC,QAAgB,EAAE,UAAkB;QACjD,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAEvC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE;YACtE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;SACzB,CAAC,CAAC;QAEH,OAAO,eAAe,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACnD,CAAC;IAED,4EAA4E;IAC5E,eAAe;IACf,4EAA4E;IAE5E;;;;;OAKG;IACK,mBAAmB,CAAC,IAAgB;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,MAAM,aAAa,GAAe;YAChC,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,qBAAqB;YACzC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;YACpB,IAAI,EAAE,QAAQ;SACf,CAAC;QAEF,MAAM,cAAc,GAAe;YACjC,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,sBAAsB;YAC1C,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;YACpB,IAAI,EAAE,SAAS;SAChB,CAAC;QAEF,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;YAC1C,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;YAC5C,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,qBAAqB;YACzC,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC;SAC1B,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,SAAS,CAAC,OAAmB;QACnC,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC5E,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC;QAC1D,OAAO,GAAG,SAAS,IAAI,UAAU,IAAI,SAAS,EAAE,CAAC;IACnD,CAAC;IAED;;;;;OAKG;IACK,IAAI,CAAC,IAAY;QACvB,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC/E,CAAC;IAED,4EAA4E;IAC5E,UAAU;IACV,4EAA4E;IAE5E;;OAEG;IACK,KAAK,CAAC,SAAS;QACrB,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,QAAQ,CAAC,IAAgB;QACrC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,QAAQ,CAAC,MAAc;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAe,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,iBAAiB,CAAC,KAAa;QAC3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,SAAS;QACrB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,MAAc;QACrD,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACrC,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;QACtB,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7E,CAAC"}

package/dist/backend/backend/src/services/cloud/auth/auth.types.d.ts

@@ -1,110 +0,0 @@
-/**
- * Auth Types
- *
- * Type definitions for the CrewlyAI Cloud account system.
- * Covers user entities, JWT payloads, and request/response shapes.
- *
- * @module services/cloud/auth/auth.types
- */
-import type { UserPlan } from '../../../constants.js';
-/** Stored user record (password hash included, never exposed via API). */
-export interface UserRecord {
-    /** Unique user identifier (UUID) */
-    id: string;
-    /** User email address (unique) */
-    email: string;
-    /** Scrypt-hashed password (hex-encoded salt:hash) */
-    passwordHash: string;
-    /** Display name */
-    displayName: string;
-    /** Subscription plan */
-    plan: UserPlan;
-    /** ISO timestamp of account creation */
-    createdAt: string;
-    /** ISO timestamp of last update */
-    updatedAt: string;
-}
-/** Public user profile (no sensitive fields). */
-export interface UserProfile {
-    /** Unique user identifier */
-    id: string;
-    /** User email address */
-    email: string;
-    /** Display name */
-    displayName: string;
-    /** Subscription plan */
-    plan: UserPlan;
-    /** ISO timestamp of account creation */
-    createdAt: string;
-}
-/** Payload embedded in JWT access tokens. */
-export interface JwtPayload {
-    /** Subject — user ID */
-    sub: string;
-    /** User email */
-    email: string;
-    /** User plan */
-    plan: UserPlan;
-    /** Issued-at timestamp (seconds since epoch) */
-    iat: number;
-    /** Expiration timestamp (seconds since epoch) */
-    exp: number;
-    /** Issuer */
-    iss: string;
-    /** Token type discriminator */
-    type: 'access' | 'refresh';
-}
-/** Request body for POST /api/auth/register. */
-export interface RegisterRequest {
-    email: string;
-    password: string;
-    displayName: string;
-}
-/** Request body for POST /api/auth/login. */
-export interface LoginRequest {
-    email: string;
-    password: string;
-}
-/** Request body for POST /api/auth/refresh. */
-export interface RefreshRequest {
-    refreshToken: string;
-}
-/** Request body for PUT /api/auth/me. */
-export interface UpdateProfileRequest {
-    displayName?: string;
-}
-/** Auth response with tokens. */
-export interface AuthTokenResponse {
-    accessToken: string;
-    refreshToken: string;
-    expiresIn: number;
-    user: UserProfile;
-}
-/** License status response. */
-export interface LicenseStatus {
-    plan: UserPlan;
-    features: string[];
-    active: boolean;
-}
-/**
- * Check whether a value is a valid UserPlan.
- *
- * @param value - Value to check
- * @returns true if value is 'free' or 'pro'
- */
-export declare function isValidPlan(value: unknown): value is UserPlan;
-/**
- * Check whether a parsed object is a valid JwtPayload.
- *
- * @param data - Parsed JWT payload
- * @returns true if data has all required fields
- */
-export declare function isJwtPayload(data: unknown): data is JwtPayload;
-/**
- * Convert a UserRecord to a public UserProfile (strips sensitive data).
- *
- * @param record - Full user record
- * @returns Public profile without passwordHash
- */
-export declare function toUserProfile(record: UserRecord): UserProfile;
-//# sourceMappingURL=auth.types.d.ts.map

package/dist/backend/backend/src/services/cloud/auth/auth.types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.types.d.ts","sourceRoot":"","sources":["../../../../../../../backend/src/services/cloud/auth/auth.types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAMtD,0EAA0E;AAC1E,MAAM,WAAW,UAAU;IACzB,oCAAoC;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,wBAAwB;IACxB,IAAI,EAAE,QAAQ,CAAC;IACf,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,iDAAiD;AACjD,MAAM,WAAW,WAAW;IAC1B,6BAA6B;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,yBAAyB;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,wBAAwB;IACxB,IAAI,EAAE,QAAQ,CAAC;IACf,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,6CAA6C;AAC7C,MAAM,WAAW,UAAU;IACzB,wBAAwB;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB;IAChB,IAAI,EAAE,QAAQ,CAAC;IACf,gDAAgD;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,+BAA+B;IAC/B,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAC;CAC5B;AAMD,gDAAgD;AAChD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,+CAA+C;AAC/C,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,yCAAyC;AACzC,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,iCAAiC;AACjC,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,WAAW,CAAC;CACnB;AAED,+BAA+B;AAC/B,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;CACjB;AAMD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAE7D;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,UAAU,CAY9D;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,WAAW,CAQ7D"}

package/dist/backend/backend/src/services/cloud/auth/auth.types.js

@@ -1,54 +0,0 @@
-/**
- * Auth Types
- *
- * Type definitions for the CrewlyAI Cloud account system.
- * Covers user entities, JWT payloads, and request/response shapes.
- *
- * @module services/cloud/auth/auth.types
- */
-// ---------------------------------------------------------------------------
-// Type guards
-// ---------------------------------------------------------------------------
-/**
- * Check whether a value is a valid UserPlan.
- *
- * @param value - Value to check
- * @returns true if value is 'free' or 'pro'
- */
-export function isValidPlan(value) {
-    return value === 'free' || value === 'pro' || value === 'enterprise';
-}
-/**
- * Check whether a parsed object is a valid JwtPayload.
- *
- * @param data - Parsed JWT payload
- * @returns true if data has all required fields
- */
-export function isJwtPayload(data) {
-    if (typeof data !== 'object' || data === null)
-        return false;
-    const obj = data;
-    return (typeof obj['sub'] === 'string' &&
-        typeof obj['email'] === 'string' &&
-        typeof obj['plan'] === 'string' &&
-        typeof obj['iat'] === 'number' &&
-        typeof obj['exp'] === 'number' &&
-        typeof obj['iss'] === 'string' &&
-        (obj['type'] === 'access' || obj['type'] === 'refresh'));
-}
-/**
- * Convert a UserRecord to a public UserProfile (strips sensitive data).
- *
- * @param record - Full user record
- * @returns Public profile without passwordHash
- */
-export function toUserProfile(record) {
-    return {
-        id: record.id,
-        email: record.email,
-        displayName: record.displayName,
-        plan: record.plan,
-        createdAt: record.createdAt,
-    };
-}
-//# sourceMappingURL=auth.types.js.map