@authhero/kysely-adapter 11.18.1 → 11.20.0

package/dist/types/migrate/migrations/2026-07-16T10:00:00_control_plane_comm_keys.d.ts

@@ -0,0 +1,28 @@
+import { Kysely } from "kysely";
+/**
+ * Registry of per-tenant control-plane-communication PUBLIC keys (issue #1139).
+ *
+ * Each WFP tenant shard is provisioned a dedicated keypair: the private half
+ * becomes the shard's `CONTROL_PLANE_COMM_KEY` secret and signs only its
+ * write-through calls (custom domains, tenant members) — never the tenant's
+ * user tokens. The public half lives here so the control plane's verifier
+ * resolves it locally, with no reach back to the shard.
+ *
+ * A table rather than KV: the control plane must verify a shard's token
+ * immediately after provisioning, and an eventually-consistent store yields
+ * transient `unknown kid` failures inside the propagation window.
+ *
+ * `kid` is the primary key — verification resolves a key by `kid` and rotation
+ * mints a new one, so several live rows per tenant are expected (a token signed
+ * with the prior key must still verify during a swap).
+ *
+ * No FK to `tenants`, for the same reason as `tenant_operations`: cleanup is a
+ * deprovision concern, and an orphaned public key is inert — it can only verify
+ * a token whose private half nothing holds.
+ *
+ * `public_jwk` holds the full JWK JSON including `kid` + `alg`
+ * (`crypto.subtle.exportKey("jwk")` omits both, so the producer must stamp
+ * them; the verifier matches on `kid` and rejects on `alg` mismatch).
+ */
+export declare function up(db: Kysely<unknown>): Promise<void>;
+export declare function down(db: Kysely<unknown>): Promise<void>;

package/dist/types/migrate/migrations/2026-07-16T12:00:00_codes_expires_at_ts.d.ts

@@ -0,0 +1,4 @@
+import { Kysely } from "kysely";
+import { Database } from "../../src/db";
+export declare function up(db: Kysely<Database>): Promise<void>;
+export declare function down(db: Kysely<Database>): Promise<void>;

package/dist/types/migrate/migrations/index.d.ts

@@ -177,6 +177,8 @@ import * as o078_tenant_database_version from "./2026-06-27T12:00:00_tenant_data
 import * as o079_user_activity_and_user_column_cleanup from "./2026-06-30T12:00:00_user_activity_and_user_column_cleanup";
 import * as o080_drop_user_activity_columns_from_users from "./2026-07-02T12:00:00_drop_user_activity_columns_from_users";
 import * as o081_tenant_operations from "./2026-07-04T12:00:00_tenant_operations";
+import * as o082_control_plane_comm_keys from "./2026-07-16T10:00:00_control_plane_comm_keys";
+import * as o083_codes_expires_at_ts from "./2026-07-16T12:00:00_codes_expires_at_ts";
 declare const _default: {
     m1_init: typeof m1_init;
     m2_magicLink: typeof m2_magicLink;
@@ -357,5 +359,7 @@ declare const _default: {
     o079_user_activity_and_user_column_cleanup: typeof o079_user_activity_and_user_column_cleanup;
     o080_drop_user_activity_columns_from_users: typeof o080_drop_user_activity_columns_from_users;
     o081_tenant_operations: typeof o081_tenant_operations;
+    o082_control_plane_comm_keys: typeof o082_control_plane_comm_keys;
+    o083_codes_expires_at_ts: typeof o083_codes_expires_at_ts;
 };
 export default _default;

package/dist/types/src/codes/cleanup.d.ts

@@ -0,0 +1,3 @@
+import { Kysely } from "kysely";
+import { Database } from "../db";
+export declare function cleanupCodes(db: Kysely<Database>): (olderThan: string) => Promise<number>;

package/dist/types/src/codes/expires-at-ts.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Convert a code's ISO-8601 `expires_at` into the numeric `expires_at_ts` twin.
+ *
+ * `Code.expires_at` is only typed as `z.string()`, so an unparseable value is
+ * representable. `Date.getTime()` would return NaN for it, which fails against
+ * the bigint column. Treat it as already expired (0) instead: such a code is
+ * unusable anyway, and 0 keeps it sweepable rather than stranding it in the
+ * table forever. The migration's backfill applies the same rule.
+ */
+export declare function toExpiresAtTs(expiresAt: string): number;

package/dist/types/src/db.d.ts

@@ -836,6 +836,7 @@ export interface Database {
     client_registration_tokens: z.infer<typeof sqlClientRegistrationTokenSchema>;
     codes: Code & {
         tenant_id: string;
+        expires_at_ts?: number | null;
     };
     connections: z.infer<typeof sqlConnectionSchema>;
     custom_domains: z.infer<typeof sqlCustomDomainSchema>;

package/dist/types/src/helpers/paginate.d.ts

@@ -15,10 +15,14 @@ import { ListParams } from "@authhero/adapter-interfaces";
  */
 export declare function isKeysetRequest(params?: ListParams): boolean;
 export interface KeysetOptions {
-    /** Column to sort by. Must be a real column on the queried table. */
+    /**
+     * Column to sort by. Must be a real column on the queried table. May be
+     * table-qualified (`users.created_at`) when the query joins other tables;
+     * the row property is read from the segment after the last dot.
+     */
     sortColumn: string;
     sortOrder: "asc" | "desc";
-    /** Unique tiebreaker column; defaults to "id". */
+    /** Unique tiebreaker column (may be table-qualified); defaults to "id". */
     idColumn?: string;
     /**
      * Sort spec (e.g. `date:desc`) for endpoints that honor a caller-chosen sort