@authup/server-core 1.0.0-beta.52 → 1.0.0-beta.53

package/dist/adapters/database/domains/session/entity.mjs

@@ -31,6 +31,8 @@ var SessionEntity = class {
 	expires_at;
 	refreshed_at;
 	seen_at;
+	mfa_at;
+	auth_method;
 	updated_at;
 	created_at;
 	client_id;
@@ -89,6 +91,16 @@ _ts_decorate([Column({
 	length: 28,
 	nullable: true
 }), _ts_metadata("design:type", Object)], SessionEntity.prototype, "seen_at", void 0);
+_ts_decorate([Column({
+	type: "varchar",
+	length: 28,
+	nullable: true
+}), _ts_metadata("design:type", Object)], SessionEntity.prototype, "mfa_at", void 0);
+_ts_decorate([Column({
+	type: "varchar",
+	length: 16,
+	nullable: true
+}), _ts_metadata("design:type", Object)], SessionEntity.prototype, "auth_method", void 0);
 _ts_decorate([UpdateDateColumn({ transformer: dateToISOStringTransformer }), _ts_metadata("design:type", String)], SessionEntity.prototype, "updated_at", void 0);
 _ts_decorate([CreateDateColumn({ transformer: dateToISOStringTransformer }), _ts_metadata("design:type", String)], SessionEntity.prototype, "created_at", void 0);
 _ts_decorate([Column({

package/dist/adapters/database/domains/session/entity.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryGeneratedColumn","UpdateDateColumn","dateToISOStringTransformer","ClientEntity","RobotEntity","RealmEntity","UserEntity","SessionEntity","id","sub","sub_kind","ip_address","user_agent","expires_at","refreshed_at","seen_at","updated_at","created_at","client_id","client","user_id","user","robot_id","robot","realm_id","realm","type","length","nullable","transformer","default","onDelete","name"],"sources":["../../../../../src/adapters/database/domains/session/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    Column, \n    CreateDateColumn, \n    Entity, \n    Index, \n    JoinColumn, \n    ManyToOne, \n    PrimaryGeneratedColumn, \n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport type {\n    Client, \n    Realm, \n    Robot, \n    Session, \n    User,\n} from '@authup/core-kit';\nimport { ClientEntity } from '../client/index.ts';\nimport { RobotEntity } from '../robot/index.ts';\nimport { RealmEntity } from '../realm/index.ts';\nimport { UserEntity } from '../user/index.ts';\n\n@Entity({ name: 'auth_sessions' })\nexport class SessionEntity implements Session {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    @Index()\n    @Column({\n        type: 'varchar',\n        length: 64, \n    })\n    sub: string;\n\n    @Index()\n    @Column({\n        type: 'varchar',\n        length: 64, \n    })\n    sub_kind: string;\n\n    @Index()\n    @Column({\n        type: 'varchar',\n        length: 45,\n    })\n    ip_address: string;\n\n    @Index()\n    @Column({\n        type: 'varchar',\n        length: 512, \n    })\n    user_agent: string;\n\n    // ------------------------------------------------------------------\n\n    @Column({\n        type: 'varchar',\n        length: 28,\n    })\n    expires_at: string;\n\n    @Column({\n        type: 'varchar',\n        length: 28,\n        nullable: true,\n    })\n    refreshed_at: string | null;\n\n    @Column({\n        type: 'varchar',\n        length: 28,\n        nullable: true,\n    })\n    seen_at: string | null;\n\n    @UpdateDateColumn({ transformer: dateToISOStringTransformer })\n    updated_at: string;\n\n    @CreateDateColumn({ transformer: dateToISOStringTransformer })\n    created_at: string;\n\n    // ------------------------------------------------------------------\n\n    @Column({\n        nullable: true,\n        default: null, \n    })\n    client_id: Client['id'] | null;\n\n    @ManyToOne(() => ClientEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'client_id' })\n    client: ClientEntity | null;\n\n    @Column({\n        nullable: true,\n        default: null, \n    })\n    user_id: User['id'] | null;\n\n    @ManyToOne(() => UserEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'user_id' })\n    user: UserEntity | null;\n\n    @Column({\n        nullable: true,\n        default: null, \n    })\n    robot_id: Robot['id'] | null;\n\n    @ManyToOne(() => RobotEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'robot_id' })\n    robot: RobotEntity | null;\n\n    @Column()\n    realm_id: Realm['id'];\n\n    @ManyToOne(() => RealmEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'realm_id' })\n    realm: RealmEntity;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AA+BA,IAAaa,gBAAb,MAAaA;CAETC;CAOAC;CAOAC;CAOAC;CAOAC;CAQAC;CAOAC;CAOAC;CAGAC;CAGAC;CAQAC;CAOAC;CAMAC;CAOAC;CAMAC;CAOAC;CAGAC;CAIAC;AACJ;;;;;EArGQC,MAAM;EACNC,QAAQ;;;;;;;EAMRD,MAAM;EACNC,QAAQ;;;;;;;EAMRD,MAAM;EACNC,QAAQ;;;;;;;EAMRD,MAAM;EACNC,QAAQ;;;;;CAORD,MAAM;CACNC,QAAQ;;;CAKRD,MAAM;CACNC,QAAQ;CACRC,UAAU;;;CAKVF,MAAM;CACNC,QAAQ;CACRC,UAAU;;iCAIMC,aAAa3B,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,cAAAA,WAAAA,cAAAA,KAAAA,CAAAA;iCAGb2B,aAAa3B,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,cAAAA,WAAAA,cAAAA,KAAAA,CAAAA;;CAM7B0B,UAAU;CACVE,SAAS;;;iBAII3B,cAAAA;EACb4B,UAAU;EACVH,UAAU;;cAEAI,MAAM,YAAA,CAAA;;;;CAIhBJ,UAAU;CACVE,SAAS;;;iBAIIxB,YAAAA;EACbyB,UAAU;EACVH,UAAU;;cAEAI,MAAM,UAAA,CAAA;;;;CAIhBJ,UAAU;CACVE,SAAS;;;iBAII1B,aAAAA;EACb2B,UAAU;EACVH,UAAU;;cAEAI,MAAM,WAAA,CAAA;;;;;iBAMH3B,aAAAA,EAAe0B,UAAU,UAAA,CAAA;cAC5BC,MAAM,WAAA,CAAA;;;uCA1GdA,MAAM,gBAAA,CAAA,CAAA,GAAA,aAAA"}
+{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryGeneratedColumn","UpdateDateColumn","dateToISOStringTransformer","ClientEntity","RobotEntity","RealmEntity","UserEntity","SessionEntity","id","sub","sub_kind","ip_address","user_agent","expires_at","refreshed_at","seen_at","mfa_at","auth_method","updated_at","created_at","client_id","client","user_id","user","robot_id","robot","realm_id","realm","type","length","nullable","transformer","default","onDelete","name"],"sources":["../../../../../src/adapters/database/domains/session/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    Column, \n    CreateDateColumn, \n    Entity, \n    Index, \n    JoinColumn, \n    ManyToOne, \n    PrimaryGeneratedColumn, \n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport type {\n    Client,\n    Realm,\n    Robot,\n    Session,\n    SessionAuthMethod,\n    User,\n} from '@authup/core-kit';\nimport { ClientEntity } from '../client/index.ts';\nimport { RobotEntity } from '../robot/index.ts';\nimport { RealmEntity } from '../realm/index.ts';\nimport { UserEntity } from '../user/index.ts';\n\n@Entity({ name: 'auth_sessions' })\nexport class SessionEntity implements Session {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    @Index()\n    @Column({\n        type: 'varchar',\n        length: 64, \n    })\n    sub: string;\n\n    @Index()\n    @Column({\n        type: 'varchar',\n        length: 64, \n    })\n    sub_kind: string;\n\n    @Index()\n    @Column({\n        type: 'varchar',\n        length: 45,\n    })\n    ip_address: string;\n\n    @Index()\n    @Column({\n        type: 'varchar',\n        length: 512, \n    })\n    user_agent: string;\n\n    // ------------------------------------------------------------------\n\n    @Column({\n        type: 'varchar',\n        length: 28,\n    })\n    expires_at: string;\n\n    @Column({\n        type: 'varchar',\n        length: 28,\n        nullable: true,\n    })\n    refreshed_at: string | null;\n\n    @Column({\n        type: 'varchar',\n        length: 28,\n        nullable: true,\n    })\n    seen_at: string | null;\n\n    @Column({\n        type: 'varchar',\n        length: 28,\n        nullable: true,\n    })\n    mfa_at: string | null;\n\n    @Column({\n        type: 'varchar',\n        length: 16,\n        nullable: true,\n    })\n    auth_method: `${SessionAuthMethod}` | null;\n\n    @UpdateDateColumn({ transformer: dateToISOStringTransformer })\n    updated_at: string;\n\n    @CreateDateColumn({ transformer: dateToISOStringTransformer })\n    created_at: string;\n\n    // ------------------------------------------------------------------\n\n    @Column({\n        nullable: true,\n        default: null, \n    })\n    client_id: Client['id'] | null;\n\n    @ManyToOne(() => ClientEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'client_id' })\n    client: ClientEntity | null;\n\n    @Column({\n        nullable: true,\n        default: null, \n    })\n    user_id: User['id'] | null;\n\n    @ManyToOne(() => UserEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'user_id' })\n    user: UserEntity | null;\n\n    @Column({\n        nullable: true,\n        default: null, \n    })\n    robot_id: Robot['id'] | null;\n\n    @ManyToOne(() => RobotEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'robot_id' })\n    robot: RobotEntity | null;\n\n    @Column()\n    realm_id: Realm['id'];\n\n    @ManyToOne(() => RealmEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'realm_id' })\n    realm: RealmEntity;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAgCA,IAAaa,gBAAb,MAAaA;CAETC;CAOAC;CAOAC;CAOAC;CAOAC;CAQAC;CAOAC;CAOAC;CAOAC;CAOAC;CAGAC;CAGAC;CAQAC;CAOAC;CAMAC;CAOAC;CAMAC;CAOAC;CAGAC;CAIAC;AACJ;;;;;EAnHQC,MAAM;EACNC,QAAQ;;;;;;;EAMRD,MAAM;EACNC,QAAQ;;;;;;;EAMRD,MAAM;EACNC,QAAQ;;;;;;;EAMRD,MAAM;EACNC,QAAQ;;;;;CAORD,MAAM;CACNC,QAAQ;;;CAKRD,MAAM;CACNC,QAAQ;CACRC,UAAU;;;CAKVF,MAAM;CACNC,QAAQ;CACRC,UAAU;;;CAKVF,MAAM;CACNC,QAAQ;CACRC,UAAU;;;CAKVF,MAAM;CACNC,QAAQ;CACRC,UAAU;;iCAIMC,aAAa7B,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,cAAAA,WAAAA,cAAAA,KAAAA,CAAAA;iCAGb6B,aAAa7B,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,cAAAA,WAAAA,cAAAA,KAAAA,CAAAA;;CAM7B4B,UAAU;CACVE,SAAS;;;iBAII7B,cAAAA;EACb8B,UAAU;EACVH,UAAU;;cAEAI,MAAM,YAAA,CAAA;;;;CAIhBJ,UAAU;CACVE,SAAS;;;iBAII1B,YAAAA;EACb2B,UAAU;EACVH,UAAU;;cAEAI,MAAM,UAAA,CAAA;;;;CAIhBJ,UAAU;CACVE,SAAS;;;iBAII5B,aAAAA;EACb6B,UAAU;EACVH,UAAU;;cAEAI,MAAM,WAAA,CAAA;;;;;iBAMH7B,aAAAA,EAAe4B,UAAU,UAAA,CAAA;cAC5BC,MAAM,WAAA,CAAA;;;uCAxHdA,MAAM,gBAAA,CAAA,CAAA,GAAA,aAAA"}

package/dist/adapters/database/domains/trust-anchor/entity.d.ts

@@ -0,0 +1,13 @@
+import type { Realm, TrustAnchor } from '@authup/core-kit';
+import { RealmEntity } from '../realm/index.ts';
+export declare class TrustAnchorEntity implements TrustAnchor {
+    id: string;
+    name: string;
+    certificate: string;
+    enabled: boolean;
+    created_at: string;
+    updated_at: string;
+    realm_id: Realm['id'];
+    realm: RealmEntity;
+}
+//# sourceMappingURL=entity.d.ts.map

package/dist/adapters/database/domains/trust-anchor/entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/domains/trust-anchor/entity.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAa3D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,qBAEa,iBAAkB,YAAW,WAAW;IAEjD,EAAE,EAAE,MAAM,CAAC;IAMX,IAAI,EAAE,MAAM,CAAC;IAGb,WAAW,EAAE,MAAM,CAAC;IAMpB,OAAO,EAAE,OAAO,CAAC;IAGjB,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,MAAM,CAAC;IAInB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAItB,KAAK,EAAE,WAAW,CAAC;CACtB"}

package/dist/adapters/database/domains/trust-anchor/entity.mjs

@@ -0,0 +1,55 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { dateToISOStringTransformer } from "../../helpers/date.mjs";
+import "../../helpers/index.mjs";
+import { RealmEntity } from "../realm/entity.mjs";
+import "../realm/index.mjs";
+import { Column, CreateDateColumn, Entity, Index, JoinColumn, ManyToOne, PrimaryGeneratedColumn, Unique, UpdateDateColumn } from "typeorm";
+//#region src/adapters/database/domains/trust-anchor/entity.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+var TrustAnchorEntity = class {
+	id;
+	name;
+	certificate;
+	enabled;
+	created_at;
+	updated_at;
+	realm_id;
+	realm;
+};
+_ts_decorate([PrimaryGeneratedColumn("uuid"), _ts_metadata("design:type", String)], TrustAnchorEntity.prototype, "id", void 0);
+_ts_decorate([Column({
+	type: "varchar",
+	length: 128
+}), _ts_metadata("design:type", String)], TrustAnchorEntity.prototype, "name", void 0);
+_ts_decorate([Column({ type: "text" }), _ts_metadata("design:type", String)], TrustAnchorEntity.prototype, "certificate", void 0);
+_ts_decorate([Column({
+	type: "boolean",
+	default: true
+}), _ts_metadata("design:type", Boolean)], TrustAnchorEntity.prototype, "enabled", void 0);
+_ts_decorate([CreateDateColumn({ transformer: dateToISOStringTransformer }), _ts_metadata("design:type", String)], TrustAnchorEntity.prototype, "created_at", void 0);
+_ts_decorate([UpdateDateColumn({ transformer: dateToISOStringTransformer }), _ts_metadata("design:type", String)], TrustAnchorEntity.prototype, "updated_at", void 0);
+_ts_decorate([
+	Index(),
+	Column(),
+	_ts_metadata("design:type", Object)
+], TrustAnchorEntity.prototype, "realm_id", void 0);
+_ts_decorate([
+	ManyToOne(() => RealmEntity, { onDelete: "CASCADE" }),
+	JoinColumn({ name: "realm_id" }),
+	_ts_metadata("design:type", typeof RealmEntity === "undefined" ? Object : RealmEntity)
+], TrustAnchorEntity.prototype, "realm", void 0);
+TrustAnchorEntity = _ts_decorate([Unique("UQ_auth_trust_anchors_name_realm_id", ["name", "realm_id"]), Entity({ name: "auth_trust_anchors" })], TrustAnchorEntity);
+//#endregion
+export { TrustAnchorEntity };
+
+//# sourceMappingURL=entity.mjs.map

package/dist/adapters/database/domains/trust-anchor/entity.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryGeneratedColumn","Unique","UpdateDateColumn","dateToISOStringTransformer","RealmEntity","TrustAnchorEntity","id","name","certificate","enabled","created_at","updated_at","realm_id","realm","type","length","default","transformer","onDelete"],"sources":["../../../../../src/adapters/database/domains/trust-anchor/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Realm, TrustAnchor } from '@authup/core-kit';\nimport {\n    Column,\n    CreateDateColumn,\n    Entity,\n    Index,\n    JoinColumn,\n    ManyToOne,\n    PrimaryGeneratedColumn,\n    Unique,\n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport { RealmEntity } from '../realm/index.ts';\n\n@Unique('UQ_auth_trust_anchors_name_realm_id', ['name', 'realm_id'])\n@Entity({ name: 'auth_trust_anchors' })\nexport class TrustAnchorEntity implements TrustAnchor {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    @Column({\n        type: 'varchar',\n        length: 128,\n    })\n    name: string;\n\n    @Column({ type: 'text' })\n    certificate: string;\n\n    @Column({\n        type: 'boolean',\n        default: true,\n    })\n    enabled: boolean;\n\n    @CreateDateColumn({ transformer: dateToISOStringTransformer })\n    created_at: string;\n\n    @UpdateDateColumn({ transformer: dateToISOStringTransformer })\n    updated_at: string;\n\n    @Index()\n    @Column()\n    realm_id: Realm['id'];\n\n    @ManyToOne(() => RealmEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'realm_id' })\n    realm: RealmEntity;\n}\n"],"mappings":";;;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;AAmBD,IAAaW,oBAAb,MAAaA;CAETC;CAMAC;CAGAC;CAMAC;CAGAC;CAGAC;CAIAC;CAIAC;AACJ;;;CA3BQC,MAAM;CACNC,QAAQ;;uBAIFD,MAAM,OAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,kBAAA,WAAA,eAAA,KAAA,CAAA;;CAIZA,MAAM;CACNE,SAAS;;iCAIOC,aAAad,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,kBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;iCAGbc,aAAad,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,kBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;;;;;;;iBAOhBC,aAAAA,EAAec,UAAU,UAAA,CAAA;cAC5BX,MAAM,WAAA,CAAA;;;iFAhCwB,QAAQ,UAAA,CAAA,GAAA,OAAA,EAC9CA,MAAM,qBAAA,CAAA,CAAA,GAAA,iBAAA"}

package/dist/adapters/database/domains/trust-anchor/index.d.ts

@@ -0,0 +1,2 @@
+export * from './entity.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/database/domains/trust-anchor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/domains/trust-anchor/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/database/domains/trust-anchor/index.mjs

@@ -0,0 +1,5 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { TrustAnchorEntity } from "./entity.mjs";
+export { TrustAnchorEntity };

package/dist/adapters/database/domains/user-authenticator/entity.d.ts

@@ -0,0 +1,20 @@
+import type { Realm, User, UserAuthenticator, UserAuthenticatorKind } from '@authup/core-kit';
+import { RealmEntity } from '../realm/index.ts';
+import { UserEntity } from '../user/index.ts';
+export declare class UserAuthenticatorEntity implements UserAuthenticator {
+    id: string;
+    kind: `${UserAuthenticatorKind}`;
+    name: string | null;
+    secret: string | null;
+    parameters: string | null;
+    codes: string | null;
+    confirmed: boolean;
+    last_used_at: string | null;
+    created_at: string;
+    updated_at: string;
+    user_id: User['id'];
+    user: UserEntity;
+    realm_id: Realm['id'];
+    realm: RealmEntity;
+}
+//# sourceMappingURL=entity.d.ts.map

package/dist/adapters/database/domains/user-authenticator/entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/domains/user-authenticator/entity.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EACR,KAAK,EACL,IAAI,EACJ,iBAAiB,EACjB,qBAAqB,EACxB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,qBACa,uBAAwB,YAAW,iBAAiB;IAE7D,EAAE,EAAE,MAAM,CAAC;IAOX,IAAI,EAAE,GAAG,qBAAqB,EAAE,CAAC;IAQjC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IASpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAMtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAO1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAMrB,SAAS,EAAE,OAAO,CAAC;IAQnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAK5B,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,MAAM,CAAC;IAMnB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAIpB,IAAI,EAAE,UAAU,CAAC;IAGjB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAItB,KAAK,EAAE,WAAW,CAAC;CACtB"}

package/dist/adapters/database/domains/user-authenticator/entity.mjs

@@ -0,0 +1,98 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { dateToISOStringTransformer } from "../../helpers/date.mjs";
+import "../../helpers/index.mjs";
+import { RealmEntity } from "../realm/entity.mjs";
+import "../realm/index.mjs";
+import { UserEntity } from "../user/entity.mjs";
+import "../user/index.mjs";
+import { Column, CreateDateColumn, Entity, Index, JoinColumn, ManyToOne, PrimaryGeneratedColumn, UpdateDateColumn } from "typeorm";
+//#region src/adapters/database/domains/user-authenticator/entity.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+var UserAuthenticatorEntity = class {
+	id;
+	kind;
+	name;
+	secret;
+	parameters;
+	codes;
+	confirmed;
+	last_used_at;
+	created_at;
+	updated_at;
+	user_id;
+	user;
+	realm_id;
+	realm;
+};
+_ts_decorate([PrimaryGeneratedColumn("uuid"), _ts_metadata("design:type", String)], UserAuthenticatorEntity.prototype, "id", void 0);
+_ts_decorate([
+	Index(),
+	Column({
+		type: "varchar",
+		length: 16
+	}),
+	_ts_metadata("design:type", String)
+], UserAuthenticatorEntity.prototype, "kind", void 0);
+_ts_decorate([Column({
+	type: "varchar",
+	length: 128,
+	nullable: true,
+	default: null
+}), _ts_metadata("design:type", Object)], UserAuthenticatorEntity.prototype, "name", void 0);
+_ts_decorate([Column({
+	type: "text",
+	nullable: true,
+	select: false
+}), _ts_metadata("design:type", Object)], UserAuthenticatorEntity.prototype, "secret", void 0);
+_ts_decorate([Column({
+	type: "text",
+	nullable: true
+}), _ts_metadata("design:type", Object)], UserAuthenticatorEntity.prototype, "parameters", void 0);
+_ts_decorate([Column({
+	type: "text",
+	nullable: true,
+	select: false
+}), _ts_metadata("design:type", Object)], UserAuthenticatorEntity.prototype, "codes", void 0);
+_ts_decorate([Column({
+	type: "boolean",
+	default: false
+}), _ts_metadata("design:type", Boolean)], UserAuthenticatorEntity.prototype, "confirmed", void 0);
+_ts_decorate([Column({
+	type: "varchar",
+	length: 28,
+	nullable: true,
+	default: null
+}), _ts_metadata("design:type", Object)], UserAuthenticatorEntity.prototype, "last_used_at", void 0);
+_ts_decorate([CreateDateColumn({ transformer: dateToISOStringTransformer }), _ts_metadata("design:type", String)], UserAuthenticatorEntity.prototype, "created_at", void 0);
+_ts_decorate([UpdateDateColumn({ transformer: dateToISOStringTransformer }), _ts_metadata("design:type", String)], UserAuthenticatorEntity.prototype, "updated_at", void 0);
+_ts_decorate([
+	Index(),
+	Column({ type: "uuid" }),
+	_ts_metadata("design:type", Object)
+], UserAuthenticatorEntity.prototype, "user_id", void 0);
+_ts_decorate([
+	ManyToOne(() => UserEntity, { onDelete: "CASCADE" }),
+	JoinColumn({ name: "user_id" }),
+	_ts_metadata("design:type", typeof UserEntity === "undefined" ? Object : UserEntity)
+], UserAuthenticatorEntity.prototype, "user", void 0);
+_ts_decorate([Column({ type: "uuid" }), _ts_metadata("design:type", Object)], UserAuthenticatorEntity.prototype, "realm_id", void 0);
+_ts_decorate([
+	ManyToOne(() => RealmEntity, { onDelete: "CASCADE" }),
+	JoinColumn({ name: "realm_id" }),
+	_ts_metadata("design:type", typeof RealmEntity === "undefined" ? Object : RealmEntity)
+], UserAuthenticatorEntity.prototype, "realm", void 0);
+UserAuthenticatorEntity = _ts_decorate([Entity({ name: "auth_user_authenticators" })], UserAuthenticatorEntity);
+//#endregion
+export { UserAuthenticatorEntity };
+
+//# sourceMappingURL=entity.mjs.map

package/dist/adapters/database/domains/user-authenticator/entity.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryGeneratedColumn","UpdateDateColumn","dateToISOStringTransformer","RealmEntity","UserEntity","UserAuthenticatorEntity","id","kind","name","secret","parameters","codes","confirmed","last_used_at","created_at","updated_at","user_id","user","realm_id","realm","type","length","nullable","default","select","transformer","onDelete"],"sources":["../../../../../src/adapters/database/domains/user-authenticator/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    Column,\n    CreateDateColumn,\n    Entity,\n    Index,\n    JoinColumn,\n    ManyToOne,\n    PrimaryGeneratedColumn,\n    UpdateDateColumn,\n} from 'typeorm';\nimport type {\n    Realm,\n    User,\n    UserAuthenticator,\n    UserAuthenticatorKind,\n} from '@authup/core-kit';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport { RealmEntity } from '../realm/index.ts';\nimport { UserEntity } from '../user/index.ts';\n\n@Entity({ name: 'auth_user_authenticators' })\nexport class UserAuthenticatorEntity implements UserAuthenticator {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    @Index()\n    @Column({\n        type: 'varchar',\n        length: 16,\n    })\n    kind: `${UserAuthenticatorKind}`;\n\n    @Column({\n        type: 'varchar',\n        length: 128,\n        nullable: true,\n        default: null,\n    })\n    name: string | null;\n\n    // select:false — a stray read must never surface the encrypted seed\n    // (defense in depth on top of the read-DTO stripping in the service).\n    @Column({\n        type: 'text',\n        nullable: true,\n        select: false,\n    })\n    secret: string | null;\n\n    @Column({\n        type: 'text',\n        nullable: true,\n    })\n    parameters: string | null;\n\n    @Column({\n        type: 'text',\n        nullable: true,\n        select: false,\n    })\n    codes: string | null;\n\n    @Column({\n        type: 'boolean',\n        default: false,\n    })\n    confirmed: boolean;\n\n    @Column({\n        type: 'varchar',\n        length: 28,\n        nullable: true,\n        default: null,\n    })\n    last_used_at: string | null;\n\n    // ------------------------------------------------------------------\n\n    @CreateDateColumn({ transformer: dateToISOStringTransformer })\n    created_at: string;\n\n    @UpdateDateColumn({ transformer: dateToISOStringTransformer })\n    updated_at: string;\n\n    // ------------------------------------------------------------------\n\n    @Index()\n    @Column({ type: 'uuid' })\n    user_id: User['id'];\n\n    @ManyToOne(() => UserEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'user_id' })\n    user: UserEntity;\n\n    @Column({ type: 'uuid' })\n    realm_id: Realm['id'];\n\n    @ManyToOne(() => RealmEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'realm_id' })\n    realm: RealmEntity;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA4BA,IAAaW,0BAAb,MAAaA;CAETC;CAOAC;CAQAC;CASAC;CAMAC;CAOAC;CAMAC;CAQAC;CAKAC;CAGAC;CAMAC;CAIAC;CAGAC;CAIAC;AACJ;;;;;EAzEQC,MAAM;EACNC,QAAQ;;;;;CAKRD,MAAM;CACNC,QAAQ;CACRC,UAAU;CACVC,SAAS;;;CAOTH,MAAM;CACNE,UAAU;CACVE,QAAQ;;;CAKRJ,MAAM;CACNE,UAAU;;;CAKVF,MAAM;CACNE,UAAU;CACVE,QAAQ;;;CAKRJ,MAAM;CACNG,SAAS;;;CAKTH,MAAM;CACNC,QAAQ;CACRC,UAAU;CACVC,SAAS;;iCAMOE,aAAavB,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,wBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;iCAGbuB,aAAavB,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,wBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;;;UAMvBkB,MAAM,OAAA,CAAA;;;;iBAGChB,YAAAA,EAAcsB,UAAU,UAAA,CAAA;cAC3BlB,MAAM,UAAA,CAAA;;;uBAGVY,MAAM,OAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,wBAAA,WAAA,YAAA,KAAA,CAAA;;iBAGCjB,aAAAA,EAAeuB,UAAU,UAAA,CAAA;cAC5BlB,MAAM,WAAA,CAAA;;;iDA9EdA,MAAM,2BAAA,CAAA,CAAA,GAAA,uBAAA"}

package/dist/adapters/database/domains/user-authenticator/index.d.ts

@@ -0,0 +1,2 @@
+export * from './entity.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/database/domains/user-authenticator/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/domains/user-authenticator/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/database/domains/user-authenticator/index.mjs

@@ -0,0 +1,5 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { UserAuthenticatorEntity } from "./entity.mjs";
+export { UserAuthenticatorEntity };

package/dist/adapters/database/domains/user-permission/entity.mjs

@@ -5,9 +5,9 @@ import { dateToISOStringTransformer } from "../../helpers/date.mjs";
 import "../../helpers/index.mjs";
 import { RealmEntity } from "../realm/entity.mjs";
 import "../realm/index.mjs";
-import { PermissionEntity } from "../permission/entity.mjs";
 import { PolicyEntity } from "../policy/entity.mjs";
 import "../policy/index.mjs";
+import { PermissionEntity } from "../permission/entity.mjs";
 import { UserEntity } from "../user/entity.mjs";
 import { Column, CreateDateColumn, Entity, Index, JoinColumn, ManyToOne, PrimaryGeneratedColumn, UpdateDateColumn } from "typeorm";
 //#region src/adapters/database/domains/user-permission/entity.ts

package/dist/adapters/database/errors/driver.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Unwrap the vendor error code from a thrown database error. TypeORM wraps the
+ * raw driver error in a `QueryFailedError`, exposing the vendor code on the
+ * top-level `code` and/or the nested `driverError.code` depending on the
+ * driver — this normalizes both shapes to the vendor code string.
+ */
+export declare function getDatabaseDriverErrorCode(input: unknown): string | undefined;
+/**
+ * True when the error is a unique-constraint (duplicate key) violation from any
+ * supported driver — the benign race outcome when two writers insert the same
+ * unique key concurrently.
+ */
+export declare function isUniqueConstraintDatabaseError(input: unknown): boolean;
+//# sourceMappingURL=driver.d.ts.map

package/dist/adapters/database/errors/driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"driver.d.ts","sourceRoot":"","sources":["../../../../src/adapters/database/errors/driver.ts"],"names":[],"mappings":"AASA;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAsB7E;AAQD;;;;GAIG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAGvE"}

package/dist/adapters/database/errors/driver.mjs

@@ -0,0 +1,32 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { hasOwnProperty, isObject } from "@authup/kit";
+//#region src/adapters/database/errors/driver.ts
+/**
+* Unwrap the vendor error code from a thrown database error. TypeORM wraps the
+* raw driver error in a `QueryFailedError`, exposing the vendor code on the
+* top-level `code` and/or the nested `driverError.code` depending on the
+* driver — this normalizes both shapes to the vendor code string.
+*/ function getDatabaseDriverErrorCode(input) {
+	if (!isObject(input)) return;
+	if (hasOwnProperty(input, "code") && typeof input.code === "string") return input.code;
+	if (hasOwnProperty(input, "driverError") && isObject(input.driverError) && hasOwnProperty(input.driverError, "code") && typeof input.driverError.code === "string") return input.driverError.code;
+}
+const UNIQUE_CONSTRAINT_ERROR_CODES = [
+	"ER_DUP_ENTRY",
+	"23505",
+	"SQLITE_CONSTRAINT_UNIQUE"
+];
+/**
+* True when the error is a unique-constraint (duplicate key) violation from any
+* supported driver — the benign race outcome when two writers insert the same
+* unique key concurrently.
+*/ function isUniqueConstraintDatabaseError(input) {
+	const code = getDatabaseDriverErrorCode(input);
+	return typeof code === "string" && UNIQUE_CONSTRAINT_ERROR_CODES.includes(code);
+}
+//#endregion
+export { getDatabaseDriverErrorCode, isUniqueConstraintDatabaseError };
+
+//# sourceMappingURL=driver.mjs.map

package/dist/adapters/database/errors/driver.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"driver.mjs","names":["hasOwnProperty","isObject","getDatabaseDriverErrorCode","input","undefined","code","driverError","UNIQUE_CONSTRAINT_ERROR_CODES","isUniqueConstraintDatabaseError","includes"],"sources":["../../../../src/adapters/database/errors/driver.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { hasOwnProperty, isObject } from '@authup/kit';\n\n/**\n * Unwrap the vendor error code from a thrown database error. TypeORM wraps the\n * raw driver error in a `QueryFailedError`, exposing the vendor code on the\n * top-level `code` and/or the nested `driverError.code` depending on the\n * driver — this normalizes both shapes to the vendor code string.\n */\nexport function getDatabaseDriverErrorCode(input: unknown): string | undefined {\n    if (!isObject(input)) {\n        return undefined;\n    }\n\n    if (\n        hasOwnProperty(input, 'code') &&\n        typeof input.code === 'string'\n    ) {\n        return input.code;\n    }\n\n    if (\n        hasOwnProperty(input, 'driverError') &&\n        isObject(input.driverError) &&\n        hasOwnProperty(input.driverError, 'code') &&\n        typeof input.driverError.code === 'string'\n    ) {\n        return input.driverError.code;\n    }\n\n    return undefined;\n}\n\nconst UNIQUE_CONSTRAINT_ERROR_CODES = [\n    'ER_DUP_ENTRY', // mysql\n    '23505', // postgres\n    'SQLITE_CONSTRAINT_UNIQUE', // sqlite (better-sqlite3)\n];\n\n/**\n * True when the error is a unique-constraint (duplicate key) violation from any\n * supported driver — the benign race outcome when two writers insert the same\n * unique key concurrently.\n */\nexport function isUniqueConstraintDatabaseError(input: unknown): boolean {\n    const code = getDatabaseDriverErrorCode(input);\n    return typeof code === 'string' && UNIQUE_CONSTRAINT_ERROR_CODES.includes(code);\n}\n"],"mappings":";;;;;;;;;;GAeA,SAAgBE,2BAA2BC,OAAc;CACrD,IAAI,CAACF,SAASE,KAAAA,GACV;CAGJ,IACIH,eAAeG,OAAO,MAAA,KACtB,OAAOA,MAAME,SAAS,UAEtB,OAAOF,MAAME;CAGjB,IACIL,eAAeG,OAAO,aAAA,KACtBF,SAASE,MAAMG,WAAW,KAC1BN,eAAeG,MAAMG,aAAa,MAAA,KAClC,OAAOH,MAAMG,YAAYD,SAAS,UAElC,OAAOF,MAAMG,YAAYD;AAIjC;AAEA,MAAME,gCAAgC;CAClC;CACA;CACA;;;;;;GAQJ,SAAgBC,gCAAgCL,OAAc;CAC1D,MAAME,OAAOH,2BAA2BC,KAAAA;CACxC,OAAO,OAAOE,SAAS,YAAYE,8BAA8BE,SAASJ,IAAAA;AAC9E"}

package/dist/adapters/database/errors/index.d.ts

@@ -1,2 +1,3 @@
 export * from './conflict.ts';
+export * from './driver.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/adapters/database/errors/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/adapters/database/errors/index.ts"],"names":[],"mappings":"AAOA,cAAc,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/adapters/database/errors/index.ts"],"names":[],"mappings":"AAOA,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC"}

package/dist/adapters/database/errors/index.mjs

@@ -2,4 +2,5 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { DatabaseConflictError } from "./conflict.mjs";
-export { DatabaseConflictError };
+import { getDatabaseDriverErrorCode, isUniqueConstraintDatabaseError } from "./driver.mjs";
+export { DatabaseConflictError, getDatabaseDriverErrorCode, isUniqueConstraintDatabaseError };

package/dist/adapters/database/index.mjs

@@ -11,6 +11,11 @@ import "./subscriber/index.mjs";
 import { CachePrefix } from "./domains/constants.mjs";
 import { RealmSubscriber } from "./domains/realm/subscriber.mjs";
 import { KeyEntity } from "./domains/key/entity.mjs";
+import { PolicyEntity } from "./domains/policy/entity.mjs";
+import { PolicyAttributeEntity } from "./domains/policy-attribute/entity.mjs";
+import { PolicyAttributeSubscriber } from "./domains/policy-attribute/subscriber.mjs";
+import { PolicyRepository } from "./domains/policy/repository.mjs";
+import { PolicySubscriber } from "./domains/policy/subscriber.mjs";
 import { ClientEntity } from "./domains/client/entity.mjs";
 import { ClientSubscriber } from "./domains/client/subscriber.mjs";
 import { RoleEntity } from "./domains/role/entity.mjs";
@@ -21,27 +26,25 @@ import { ClientRoleEntity } from "./domains/client-role/entity.mjs";
 import { ClientRoleSubscriber } from "./domains/client-role/subscriber.mjs";
 import { PermissionEntity } from "./domains/permission/entity.mjs";
 import { PermissionSubscriber } from "./domains/permission/subscriber.mjs";
-import { PolicyEntity } from "./domains/policy/entity.mjs";
-import { PolicyAttributeEntity } from "./domains/policy-attribute/entity.mjs";
-import { PolicyAttributeSubscriber } from "./domains/policy-attribute/subscriber.mjs";
-import { PolicyRepository } from "./domains/policy/repository.mjs";
-import { PolicySubscriber } from "./domains/policy/subscriber.mjs";
 import { ClientPermissionEntity } from "./domains/client-permission/entity.mjs";
 import { ClientPermissionSubscriber } from "./domains/client-permission/subscriber.mjs";
 import { ScopeEntity } from "./domains/scope/entity.mjs";
 import { ScopeSubscriber } from "./domains/scope/subscriber.mjs";
 import { ClientScopeEntity } from "./domains/client-scope/entity.mjs";
 import { ClientScopeSubscriber } from "./domains/client-scope/subscriber.mjs";
-import { IdentityProviderEntity } from "./domains/identity-provider/entity.mjs";
-import { IdentityProviderAttributeEntity } from "./domains/identity-provider-attribute/entity.mjs";
-import { IdentityProviderAttributeSubscriber } from "./domains/identity-provider-attribute/subscriber.mjs";
-import { IdentityProviderRepository } from "./domains/identity-provider/repository.mjs";
-import { IdentityProviderSubscriber } from "./domains/identity-provider/subscriber.mjs";
 import { UserEntity } from "./domains/user/entity.mjs";
 import { UserAttributeEntity } from "./domains/user-attribute/entity.mjs";
 import { UserAttributeSubscriber } from "./domains/user-attribute/subscriber.mjs";
 import { UserRepository } from "./domains/user/repository.mjs";
 import { UserSubscriber } from "./domains/user/subscriber.mjs";
+import { ConsentEntity } from "./domains/consent/entity.mjs";
+import { ConsentEntitySubscriber } from "./domains/consent/subscriber.mjs";
+import { EventEntity } from "./domains/event/entity.mjs";
+import { IdentityProviderEntity } from "./domains/identity-provider/entity.mjs";
+import { IdentityProviderAttributeEntity } from "./domains/identity-provider-attribute/entity.mjs";
+import { IdentityProviderAttributeSubscriber } from "./domains/identity-provider-attribute/subscriber.mjs";
+import { IdentityProviderRepository } from "./domains/identity-provider/repository.mjs";
+import { IdentityProviderSubscriber } from "./domains/identity-provider/subscriber.mjs";
 import { IdentityProviderAccountEntity } from "./domains/identity-provider-account/entity.mjs";
 import { IdentityProviderAccountSubscriber } from "./domains/identity-provider-account/subscriber.mjs";
 import { IdentityProviderAttributeMappingEntity } from "./domains/identity-provider-attribute-mapping/entity.mjs";
@@ -52,6 +55,7 @@ import { RobotEntity } from "./domains/robot/entity.mjs";
 import { RobotSubscriber } from "./domains/robot/subscriber.mjs";
 import { SessionEntity } from "./domains/session/entity.mjs";
 import { SessionTokenEntity } from "./domains/session-token/entity.mjs";
+import { TrustAnchorEntity } from "./domains/trust-anchor/entity.mjs";
 import { PermissionPolicyEntity } from "./domains/permission-policy/entity.mjs";
 import { RobotPermissionEntity } from "./domains/robot-permission/entity.mjs";
 import { RobotPermissionSubscriber } from "./domains/robot-permission/subscriber.mjs";
@@ -60,6 +64,7 @@ import { RobotRoleSubscriber } from "./domains/robot-role/subscriber.mjs";
 import { RoleAttributeSubscriber } from "./domains/role-attribute/subscriber.mjs";
 import { RolePermissionEntity } from "./domains/role-permission/entity.mjs";
 import { RolePermissionSubscriber } from "./domains/role-permission/subscriber.mjs";
+import { UserAuthenticatorEntity } from "./domains/user-authenticator/entity.mjs";
 import { UserPermissionEntity } from "./domains/user-permission/entity.mjs";
 import { UserPermissionSubscriber } from "./domains/user-permission/subscriber.mjs";
 import { UserRoleEntity } from "./domains/user-role/entity.mjs";
@@ -70,5 +75,6 @@ import "./cache/index.mjs";
 import { DataSourceOptionsBuilder } from "./data-source/options/module.mjs";
 import "./data-source/index.mjs";
 import { DatabaseConflictError } from "./errors/conflict.mjs";
+import { getDatabaseDriverErrorCode, isUniqueConstraintDatabaseError } from "./errors/driver.mjs";
 import "./errors/index.mjs";
-export { CachePrefix, ClientEntity, ClientPermissionEntity, ClientPermissionSubscriber, ClientRoleEntity, ClientRoleSubscriber, ClientScopeEntity, ClientScopeSubscriber, ClientSubscriber, DataSourceOptionsBuilder, DatabaseConflictError, DatabaseQueryResultCache, EntitySubscriber, IdentityProviderAccountEntity, IdentityProviderAccountSubscriber, IdentityProviderAttributeEntity, IdentityProviderAttributeMappingEntity, IdentityProviderAttributeSubscriber, IdentityProviderEntity, IdentityProviderPermissionMappingEntity, IdentityProviderRepository, IdentityProviderRoleMappingEntity, IdentityProviderRoleSubscriber, IdentityProviderSubscriber, KeyEntity, PermissionEntity, PermissionPolicyEntity, PermissionSubscriber, PolicyAttributeEntity, PolicyAttributeSubscriber, PolicyEntity, PolicyRepository, PolicySubscriber, RealmEntity, RealmRepository, RealmSubscriber, RobotEntity, RobotPermissionEntity, RobotPermissionSubscriber, RobotRoleEntity, RobotRoleSubscriber, RobotSubscriber, RoleAttributeEntity, RoleAttributeSubscriber, RoleEntity, RolePermissionEntity, RolePermissionSubscriber, RoleRepository, RoleSubscriber, ScopeEntity, ScopeSubscriber, SessionEntity, SessionTokenEntity, UserAttributeEntity, UserAttributeSubscriber, UserEntity, UserPermissionEntity, UserPermissionSubscriber, UserRepository, UserRoleEntity, UserRoleSubscriber, UserSubscriber, buildEntityDestinations, dateToISOStringTransformer, isDatabaseTypeSupported, isDatabaseTypeSupportedForEnvironment };
+export { CachePrefix, ClientEntity, ClientPermissionEntity, ClientPermissionSubscriber, ClientRoleEntity, ClientRoleSubscriber, ClientScopeEntity, ClientScopeSubscriber, ClientSubscriber, ConsentEntity, ConsentEntitySubscriber, DataSourceOptionsBuilder, DatabaseConflictError, DatabaseQueryResultCache, EntitySubscriber, EventEntity, IdentityProviderAccountEntity, IdentityProviderAccountSubscriber, IdentityProviderAttributeEntity, IdentityProviderAttributeMappingEntity, IdentityProviderAttributeSubscriber, IdentityProviderEntity, IdentityProviderPermissionMappingEntity, IdentityProviderRepository, IdentityProviderRoleMappingEntity, IdentityProviderRoleSubscriber, IdentityProviderSubscriber, KeyEntity, PermissionEntity, PermissionPolicyEntity, PermissionSubscriber, PolicyAttributeEntity, PolicyAttributeSubscriber, PolicyEntity, PolicyRepository, PolicySubscriber, RealmEntity, RealmRepository, RealmSubscriber, RobotEntity, RobotPermissionEntity, RobotPermissionSubscriber, RobotRoleEntity, RobotRoleSubscriber, RobotSubscriber, RoleAttributeEntity, RoleAttributeSubscriber, RoleEntity, RolePermissionEntity, RolePermissionSubscriber, RoleRepository, RoleSubscriber, ScopeEntity, ScopeSubscriber, SessionEntity, SessionTokenEntity, TrustAnchorEntity, UserAttributeEntity, UserAttributeSubscriber, UserAuthenticatorEntity, UserEntity, UserPermissionEntity, UserPermissionSubscriber, UserRepository, UserRoleEntity, UserRoleSubscriber, UserSubscriber, buildEntityDestinations, dateToISOStringTransformer, getDatabaseDriverErrorCode, isDatabaseTypeSupported, isDatabaseTypeSupportedForEnvironment, isUniqueConstraintDatabaseError };

package/dist/adapters/database/migrations/mysql/1783769340000-Default.d.ts

@@ -0,0 +1,50 @@
+import type { MigrationInterface, QueryRunner } from 'typeorm';
+/**
+ * Security event log (plan 057), MFA — authenticator devices (plan 049) +
+ * auth-method claims (plan 050), application access policy (plan 052) +
+ * persisted consent (plan 055), realm key store (plans 069 + 071) and
+ * RFC 8705 client authentication (plan 072).
+ *
+ * - Adds auth_events: append-only, PII-stripped security audit log. No FKs
+ *   by design: a row must survive deletion of the realm/actor/client it
+ *   references. Retention is per-row (`expires_at`, stamped at write from
+ *   `eventLogRetentionDays`; NULL = keep forever) and swept by the
+ *   event-cleaner component (plan 057).
+ * - Adds auth_user_authenticators: polymorphic second-factor device rows
+ *   (kind: totp/recovery/email/webauthn) hanging off a user. The TOTP seed
+ *   (secret) is symmetrically encrypted at rest; recovery codes are hashed.
+ *   FKs to auth_users / auth_realms (ON DELETE CASCADE).
+ * - Adds auth_sessions.mfa_at: instant the subject last passed a
+ *   second-factor challenge for the session (plan 049).
+ * - Adds auth_sessions.auth_method: how the subject authenticated
+ *   (pwd/ldap/ext/client/robot — plan 050); NULL for pre-existing sessions.
+ * - Adds auth_clients.access_policy_id: nullable FK to auth_policies
+ *   (ON DELETE SET NULL) — the policy that must pass for an identity to
+ *   authorize against the client (null = default-allow; plan 052).
+ * - Adds auth_consents: one row per (client_id, sub, sub_kind, scope token)
+ *   a subject has approved at POST /authorize. Union/keep (missing tokens
+ *   only, never deleted on re-approval); built_in clients keep zero rows;
+ *   expires_at is dormant (always null in Stage 1) but honored by the
+ *   covering check. FKs to auth_clients / auth_realms and a nullable user_id
+ *   FK (all ON DELETE CASCADE, so a user deletion drops its consents;
+ *   plan 055).
+ * - Adds auth_keys.use: JWK-use discriminator (sig | enc, RFC 7517 §4.2) —
+ *   generalizes auth_keys into the per-realm key store. enc rows hold the
+ *   realm's auto-generated symmetric at-rest encryption key (oct) that the
+ *   MFA seed cipher rides; existing rows default to sig (plan 069).
+ * - Adds auth_keys.name (canonical identifier, backfilled from id),
+ *   auth_keys.status (lifecycle: active/passive/disabled) and the dormant
+ *   auth_keys.certificate (PEM chain, Stage B) — key management API
+ *   (plan 071 Stage A).
+ * - Adds auth_trust_anchors: realm-scoped public CA certificates used by
+ *   RFC 8705 PKI client authentication (plan 071 Stage C).
+ * - Replaces auth_clients.is_confidential with auth_method
+ *   (none/secret/tls) and adds token_binding_method (none/tls) for RFC 8705
+ *   client authentication and sender-constrained tokens (plan 072).
+ */
+export declare class Default1783769340000 implements MigrationInterface {
+    name: string;
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}
+//# sourceMappingURL=1783769340000-Default.d.ts.map

package/dist/adapters/database/migrations/mysql/1783769340000-Default.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"1783769340000-Default.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/migrations/mysql/1783769340000-Default.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE/D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,qBAAa,oBAAqB,YAAW,kBAAkB;IAC3D,IAAI,SAA0B;IAEjB,EAAE,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA0L3C,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAqH7D"}