@authhero/kysely-adapter 12.13.0 → 12.15.0

package/dist/types/migrate/migrations/2026-10-13T12:00:00_prompt_partials.d.ts

@@ -0,0 +1,4 @@
+import { Kysely } from "kysely";
+import { Database } from "../../src/db";
+export declare function up(db: Kysely<Database>): Promise<void>;
+export declare function down(db: Kysely<Database>): Promise<void>;

package/dist/types/migrate/migrations/index.d.ts

@@ -9,6 +9,7 @@ import * as refreshTokenSessionId from "./2026-08-20T12:00:00_refresh_token_sess
 import * as refreshTokenSessionIdBackfill from "./2026-08-21T12:00:00_refresh_token_session_id_backfill";
 import * as tenantOperationRows from "./2026-09-01T12:00:00_tenant_operation_rows";
 import * as tokenExchangeProfiles from "./2026-09-25T12:00:00_token_exchange_profiles";
+import * as promptPartials from "./2026-10-13T12:00:00_prompt_partials";
 /**
  * Kysely runs these in key order and refuses to start if an already-executed
  * migration sorts after a pending one, so the keys must sort in execution
@@ -36,5 +37,6 @@ declare const _default: {
     "2026-08-21T12:00:00_refresh_token_session_id_backfill": typeof refreshTokenSessionIdBackfill;
     "2026-09-01T12:00:00_tenant_operation_rows": typeof tenantOperationRows;
     "2026-09-25T12:00:00_token_exchange_profiles": typeof tokenExchangeProfiles;
+    "2026-10-13T12:00:00_prompt_partials": typeof promptPartials;
 };
 export default _default;

package/dist/types/src/cleanup.d.ts

@@ -6,11 +6,11 @@ export declare const MAX_BATCHES = 300;
  * Create a scoped session cleanup function that can filter by tenant and/or user.
  * This is designed for lazy cleanup after login session creation.
  *
- * The refreshTokens.create and refreshTokens.update adapter methods bump the
- * parent login_sessions.expires_at_ts in the same transaction whenever a refresh
- * token's validity is extended. Likewise, silent auth bumps it when a session is
- * refreshed. This invariant means we can delete expired login_sessions
- * independently without expensive subqueries to check for active children.
+ * refreshTokens.create and silent auth bump the parent login_sessions.expires_at_ts
+ * so a login_session is not reaped while a session still references it. The
+ * refresh grant no longer resolves anything through the login_session, so a
+ * refresh exchange does not keep it alive. Cleanup deletes each table on its
+ * own clock without subqueries to check for children.
  *
  * Records are deleted only after they have been expired for the grace period (1 week).
  *

package/dist/types/src/db.d.ts

@@ -48,6 +48,13 @@ declare const sqlCustomTextSchema: z.ZodObject<{
     created_at_ts: z.ZodNumber;
     updated_at_ts: z.ZodNumber;
 }, z.core.$strip>;
+declare const sqlPromptPartialsSchema: z.ZodObject<{
+    tenant_id: z.ZodString;
+    prompt: z.ZodString;
+    body: z.ZodString;
+    created_at_ts: z.ZodNumber;
+    updated_at_ts: z.ZodNumber;
+}, z.core.$strip>;
 declare const sqlPromptSettingSchema: z.ZodObject<{
     universal_login_experience: z.ZodDefault<z.ZodEnum<{
         new: "new";
@@ -887,6 +894,7 @@ export interface Database {
     invites: z.infer<typeof sqlInviteSchema>;
     universal_login_templates: z.infer<typeof sqlUniversalLoginTemplateSchema>;
     custom_text: z.infer<typeof sqlCustomTextSchema>;
+    prompt_partials: z.infer<typeof sqlPromptPartialsSchema>;
     authentication_methods: z.infer<typeof sqlAuthenticationMethodSchema>;
     log_streams: {
         id: string;

package/dist/types/src/promptPartials/index.d.ts

@@ -0,0 +1,4 @@
+import type { PromptPartialsAdapter } from "@authhero/adapter-interfaces";
+import { Kysely } from "kysely";
+import { Database } from "../db";
+export declare function createPromptPartialsAdapter(db: Kysely<Database>): PromptPartialsAdapter;

package/dist/types/src/refreshTokens/update.d.ts

@@ -1,4 +1,4 @@
 import { Kysely } from "kysely";
 import { Database } from "../db";
-import { RefreshTokenUpdate, UpdateRefreshTokenOptions } from "@authhero/adapter-interfaces";
-export declare function update(db: Kysely<Database>): (tenant_id: string, id: string, refresh_token: RefreshTokenUpdate, options?: UpdateRefreshTokenOptions) => Promise<boolean>;
+import { RefreshTokenUpdate } from "@authhero/adapter-interfaces";
+export declare function update(db: Kysely<Database>): (tenant_id: string, id: string, refresh_token: RefreshTokenUpdate) => Promise<boolean>;

package/dist/types/src/user-permissions/index.d.ts

@@ -7,4 +7,5 @@ export declare function userPermissions(db: Kysely<Database>): {
         permission_name: string;
     }, organization_id?: string) => Promise<boolean>;
     list: (tenant_id: string, user_id: string, _params?: import("@authhero/adapter-interfaces").ListParams, organization_id?: string) => Promise<import("@authhero/adapter-interfaces").UserPermissionWithDetails[]>;
+    listCheckpoint: (tenant_id: string, user_id: string, params?: import("@authhero/adapter-interfaces").ListParams, organization_id?: string) => Promise<import("@authhero/adapter-interfaces").ListUserPermissionsCheckpointResponse>;
 };

package/dist/types/src/user-permissions/list.d.ts

@@ -1,5 +1,6 @@
 import { Kysely } from "kysely";
 import { Database } from "../db";
-import { ListParams, UserPermissionWithDetails } from "@authhero/adapter-interfaces";
-export declare function list(db: Kysely<Database>): (tenant_id: string, user_id: string, _params?: ListParams, // TODO: Implement pagination when needed
+import { ListParams, ListUserPermissionsCheckpointResponse, UserPermissionWithDetails } from "@authhero/adapter-interfaces";
+export declare function list(db: Kysely<Database>): (tenant_id: string, user_id: string, _params?: ListParams, // TODO: Implement offset pagination when needed
 organization_id?: string) => Promise<UserPermissionWithDetails[]>;
+export declare function listCheckpoint(db: Kysely<Database>): (tenant_id: string, user_id: string, params?: ListParams, organization_id?: string) => Promise<ListUserPermissionsCheckpointResponse>;

package/dist/types/src/user-roles/index.d.ts

@@ -2,6 +2,7 @@ import { Kysely } from "kysely";
 import { Database } from "../db";
 export declare function userRoles(db: Kysely<Database>): {
     list: (tenant_id: string, user_id: string, _params?: import("@authhero/adapter-interfaces").ListParams, organization_id?: string) => Promise<import("@authhero/adapter-interfaces").Role[]>;
+    listCheckpoint: (tenant_id: string, user_id: string, params?: import("@authhero/adapter-interfaces").ListParams, organization_id?: string) => Promise<import("@authhero/adapter-interfaces").ListUserRolesCheckpointResponse>;
     listUsers: (tenant_id: string, role_id: string, params?: import("@authhero/adapter-interfaces").ListParams) => Promise<import("@authhero/adapter-interfaces").ListRoleUsersResponse>;
     create: (tenant_id: string, user_id: string, role_id: string, organization_id?: string, options?: import("@authhero/adapter-interfaces").CreateOptions) => Promise<boolean>;
     remove: (tenant_id: string, user_id: string, role_id: string, organization_id?: string) => Promise<boolean>;

package/dist/types/src/user-roles/list.d.ts

@@ -1,4 +1,5 @@
 import { Kysely } from "kysely";
 import { Database } from "../db";
-import { Role, ListParams } from "@authhero/adapter-interfaces";
+import { Role, ListParams, ListUserRolesCheckpointResponse } from "@authhero/adapter-interfaces";
 export declare function list(db: Kysely<Database>): (tenant_id: string, user_id: string, _params?: ListParams, organization_id?: string) => Promise<Role[]>;
+export declare function listCheckpoint(db: Kysely<Database>): (tenant_id: string, user_id: string, params?: ListParams, organization_id?: string) => Promise<ListUserRolesCheckpointResponse>;