@awesome-lang-auth/node 1.10.1

package/dist/interfaces/session-store.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=session-store.interface.js.map

package/dist/interfaces/session-store.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.interface.js","sourceRoot":"","sources":["../../src/interfaces/session-store.interface.ts"],"names":[],"mappings":""}

package/dist/interfaces/settings-store.interface.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Optional store for global authentication settings.
+ *
+ * Implement this interface when you need to persist global auth configuration
+ * (e.g., mandatory email verification, mandatory 2FA) that can be toggled by
+ * administrators at runtime via the admin UI's Control panel.
+ *
+ * @example
+ * ```typescript
+ * import { ISettingsStore, AuthSettings } from '@awesome-lang-auth/node';
+ *
+ * export class MySettingsStore implements ISettingsStore {
+ *   private settings: AuthSettings = {};
+ *
+ *   async getSettings(): Promise<AuthSettings> {
+ *     const row = await db.from('settings').first();
+ *     return row ? JSON.parse(row.data) : {};
+ *   }
+ *
+ *   async updateSettings(settings: Partial<AuthSettings>): Promise<void> {
+ *     const current = await this.getSettings();
+ *     const merged = { ...current, ...settings };
+ *     await db('settings').update({ data: JSON.stringify(merged) });
+ *   }
+ * }
+ * ```
+ */
+export interface ISettingsStore {
+    /**
+     * Retrieve all current authentication settings.
+     * Returns an empty object if no settings have been configured.
+     */
+    getSettings(): Promise<AuthSettings>;
+    /**
+     * Merge (shallow-patch) the provided settings into the store.
+     * Settings not present in the input are left untouched.
+     */
+    updateSettings(settings: Partial<AuthSettings>): Promise<void>;
+}
+/**
+ * Global authentication settings that can be toggled by admins at runtime.
+ */
+export interface AuthSettings {
+    /** Whether email verification is mandatory for all users. */
+    requireEmailVerification?: boolean;
+    /**
+     * Global email-verification enforcement mode.
+     * When set, overrides `requireEmailVerification`.
+     * - `'none'`   — not required.
+     * - `'lazy'`   — user may log in until `emailVerificationDeadline` expires.
+     * - `'strict'` — login blocked until email is verified.
+     */
+    emailVerificationMode?: 'none' | 'lazy' | 'strict';
+    /**
+     * When `emailVerificationMode` is `'lazy'`, the number of days after
+     * account creation before the user must verify their email.
+     * Used by the admin UI to display and update the grace period.
+     * Defaults to `7` when not set.
+     */
+    lazyEmailVerificationGracePeriodDays?: number;
+    /** Whether two-factor authentication is mandatory for all users. */
+    require2FA?: boolean;
+    /**
+     * IDs of webhook actions that are globally enabled by the administrator.
+     *
+     * Only actions whose IDs appear in this array can be injected into the
+     * `vm` sandbox of an inbound webhook.  This provides a global circuit-
+     * breaker on top of the per-webhook `allowedActions` list.
+     *
+     * Managed via the Admin UI's Control → Webhook Actions panel.
+     */
+    enabledWebhookActions?: string[];
+    /**
+     * Optional UI customization settings.
+     * Managed via the Admin UI's 🎨 UI Customization panel.
+     */
+    ui?: {
+        primaryColor: string;
+        secondaryColor: string;
+        logoUrl: string;
+        siteName: string;
+        logoPath: string;
+        /** Background color for the entire auth page (CSS color value, sets `--bg-color`). */
+        bgColor: string;
+        /** URL of a background image for the entire auth page (sets `--bg-image`). */
+        bgImage: string;
+        /** Background color for the form/card container (CSS color value, sets `--card-bg`). */
+        cardBg: string;
+    };
+}
+//# sourceMappingURL=settings-store.interface.d.ts.map

package/dist/interfaces/settings-store.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-store.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/settings-store.interface.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IAErC;;;OAGG;IACH,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChE;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,6DAA6D;IAC7D,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC;IACnD;;;;;OAKG;IACH,oCAAoC,CAAC,EAAE,MAAM,CAAC;IAC9C,oEAAoE;IACpE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;;;OAQG;IACH,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC;;;OAGG;IACH,EAAE,CAAC,EAAE;QACH,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,MAAM,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,sFAAsF;QACtF,OAAO,EAAE,MAAM,CAAC;QAChB,8EAA8E;QAC9E,OAAO,EAAE,MAAM,CAAC;QAChB,wFAAwF;QACxF,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH"}

package/dist/interfaces/settings-store.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=settings-store.interface.js.map

package/dist/interfaces/settings-store.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-store.interface.js","sourceRoot":"","sources":["../../src/interfaces/settings-store.interface.ts"],"names":[],"mappings":""}

package/dist/interfaces/sse-distributor.interface.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Interface for cross-instance SSE event distribution.
+ *
+ * When awesome-node-auth runs in a multi-instance (clustered) environment, SSE
+ * connections are local to each server's memory.  An implementation of this
+ * interface (e.g. using Redis Pub/Sub) allows broadcasting events across all
+ * instances so that every subscriber receives them regardless of which server
+ * they are connected to.
+ */
+export interface ISseDistributor {
+    /**
+     * Publish an event to the distribution bus.
+     *
+     * @param topic  The topic/channel name.
+     * @param event  The event payload (must be serializable).
+     */
+    publish(topic: string, event: any): Promise<void>;
+    /**
+     * Subscribe to events from the distribution bus.
+     *
+     * @param callback  Invoked whenever an event is received from another instance.
+     */
+    subscribe(callback: (topic: string, event: any) => void): Promise<void>;
+}
+//# sourceMappingURL=sse-distributor.interface.d.ts.map

package/dist/interfaces/sse-distributor.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse-distributor.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/sse-distributor.interface.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC5B;;;;;OAKG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAElD;;;;OAIG;IACH,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E"}

package/dist/interfaces/sse-distributor.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=sse-distributor.interface.js.map

package/dist/interfaces/sse-distributor.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse-distributor.interface.js","sourceRoot":"","sources":["../../src/interfaces/sse-distributor.interface.ts"],"names":[],"mappings":""}

package/dist/interfaces/telemetry-store.interface.d.ts

@@ -0,0 +1,72 @@
+/**
+ * A single recorded telemetry event.
+ */
+export interface TelemetryEvent {
+    /** Auto-generated unique identifier. */
+    id: string;
+    /** The event name (e.g. `identity.auth.login.success`). */
+    event: string;
+    /** ISO 8601 timestamp. */
+    timestamp: string;
+    /** Arbitrary event data. */
+    data?: unknown;
+    /** User ID (optional). */
+    userId?: string;
+    /** Tenant ID for multi-tenant partitioning (optional). */
+    tenantId?: string;
+    /** Session ID (optional). */
+    sessionId?: string;
+    /** Correlation ID (optional). */
+    correlationId?: string;
+    /** Client IP (optional). */
+    ip?: string;
+    /** Client User-Agent (optional). */
+    userAgent?: string;
+}
+/**
+ * Optional filter for querying telemetry events.
+ */
+export interface TelemetryFilter {
+    event?: string;
+    userId?: string;
+    tenantId?: string;
+    sessionId?: string;
+    from?: Date;
+    to?: Date;
+    limit?: number;
+    offset?: number;
+}
+/**
+ * Interface for persisting and querying telemetry events.
+ *
+ * Implement this interface to store telemetry events in any database.
+ * When not provided, telemetry events are only emitted on the `AuthEventBus`
+ * and forwarded to configured webhooks without being persisted.
+ *
+ * @example
+ * ```typescript
+ * import { ITelemetryStore, TelemetryEvent } from '@awesome-lang-auth/node';
+ *
+ * export class MyTelemetryStore implements ITelemetryStore {
+ *   async save(event: TelemetryEvent): Promise<void> {
+ *     await db('telemetry').insert(event);
+ *   }
+ *   async query(filter: TelemetryFilter): Promise<TelemetryEvent[]> {
+ *     return db('telemetry').where(filter).limit(filter.limit ?? 100);
+ *   }
+ * }
+ * ```
+ */
+export interface ITelemetryStore {
+    /**
+     * Persist a telemetry event.
+     */
+    save(event: TelemetryEvent): Promise<void>;
+    /**
+     * Query persisted events with optional filters.
+     * Implementing this method is optional but enables the
+     * `GET /tools/telemetry` query endpoint.
+     */
+    query?(filter: TelemetryFilter): Promise<TelemetryEvent[]>;
+}
+//# sourceMappingURL=telemetry-store.interface.d.ts.map

package/dist/interfaces/telemetry-store.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-store.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/telemetry-store.interface.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,2DAA2D;IAC3D,KAAK,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,0BAA0B;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,4BAA4B;IAC5B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,oCAAoC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,EAAE,CAAC,EAAE,IAAI,CAAC;IACV,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,IAAI,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3C;;;;OAIG;IACH,KAAK,CAAC,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;CAC5D"}

package/dist/interfaces/telemetry-store.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=telemetry-store.interface.js.map

package/dist/interfaces/telemetry-store.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-store.interface.js","sourceRoot":"","sources":["../../src/interfaces/telemetry-store.interface.ts"],"names":[],"mappings":""}

package/dist/interfaces/template-store.interface.d.ts

@@ -0,0 +1,37 @@
+export interface MailTemplate {
+    id: string;
+    baseHtml: string;
+    baseText: string;
+    translations: Record<string, Record<string, string>>;
+}
+export interface UiTranslation {
+    page: string;
+    translations: Record<string, Record<string, string>>;
+}
+export interface ITemplateStore {
+    /**
+     * Get a mail template by ID.
+     */
+    getMailTemplate(id: string): Promise<MailTemplate | null>;
+    /**
+     * List all mail templates.
+     */
+    listMailTemplates(): Promise<MailTemplate[]>;
+    /**
+     * Update or create a mail template.
+     */
+    updateMailTemplate(id: string, template: Partial<MailTemplate>): Promise<void>;
+    /**
+     * Get UI translations for a specific page.
+     */
+    getUiTranslations(page: string): Promise<UiTranslation | null>;
+    /**
+     * List all UI translations.
+     */
+    listUiTranslations(): Promise<UiTranslation[]>;
+    /**
+     * Update or create UI translations for a page.
+     */
+    updateUiTranslations(page: string, translations: Record<string, Record<string, string>>): Promise<void>;
+}
+//# sourceMappingURL=template-store.interface.d.ts.map

package/dist/interfaces/template-store.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template-store.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/template-store.interface.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,aAAa;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,cAAc;IAC3B;;OAEG;IACH,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAE1D;;OAEG;IACH,iBAAiB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAE7C;;OAEG;IACH,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/E;;OAEG;IACH,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAE/D;;OAEG;IACH,kBAAkB,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAE/C;;OAEG;IACH,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3G"}

package/dist/interfaces/template-store.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=template-store.interface.js.map

package/dist/interfaces/template-store.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template-store.interface.js","sourceRoot":"","sources":["../../src/interfaces/template-store.interface.ts"],"names":[],"mappings":""}

package/dist/interfaces/tenant-store.interface.d.ts

@@ -0,0 +1,97 @@
+import { Tenant } from '../models/tenant.model';
+/**
+ * Optional store for multi-tenant applications.
+ *
+ * Implement this interface when your application serves multiple independent
+ * tenants (organisations, workspaces, teams, etc.) and you need to isolate
+ * users, data, and configuration per tenant.
+ *
+ * The interface covers three concerns:
+ *  1. **Tenant CRUD** — create, read, update and delete tenants.
+ *  2. **User ↔ Tenant association** — which users belong to which tenant.
+ *  3. **Per-tenant auth config** — optional overrides such as allowed auth
+ *     methods, custom OAuth clients, or token lifetimes per tenant.
+ *
+ * @example
+ * ```typescript
+ * import { ITenantStore } from '@awesome-lang-auth/node';
+ *
+ * export class MyTenantStore implements ITenantStore {
+ *   async createTenant(data) {
+ *     const id = slugify(data.name);
+ *     await db('tenants').insert({ id, ...data });
+ *     return { id, ...data };
+ *   }
+ *   async getTenantById(id) {
+ *     return db('tenants').where({ id }).first() ?? null;
+ *   }
+ *   async getAllTenants() {
+ *     return db('tenants').select();
+ *   }
+ *   async updateTenant(id, data) {
+ *     await db('tenants').where({ id }).update(data);
+ *   }
+ *   async deleteTenant(id) {
+ *     await db('tenants').where({ id }).delete();
+ *   }
+ *   async associateUserWithTenant(userId, tenantId) {
+ *     await db('tenant_users').insert({ userId, tenantId });
+ *   }
+ *   async disassociateUserFromTenant(userId, tenantId) {
+ *     await db('tenant_users').where({ userId, tenantId }).delete();
+ *   }
+ *   async getTenantsForUser(userId) {
+ *     return db('tenant_users').join('tenants', ...).where({ userId });
+ *   }
+ *   async getUsersForTenant(tenantId) {
+ *     return db('tenant_users').where({ tenantId }).pluck('userId');
+ *   }
+ * }
+ * ```
+ */
+export interface ITenantStore {
+    /**
+     * Create a new tenant.  The `id` is generated by the implementation
+     * (e.g. a UUID or a URL-safe slug derived from `name`).
+     */
+    createTenant(data: Omit<Tenant, 'id'>): Promise<Tenant>;
+    /**
+     * Fetch a tenant by its unique identifier.
+     * Returns `null` when no tenant with that ID exists.
+     */
+    getTenantById(id: string): Promise<Tenant | null>;
+    /**
+     * Return all tenants.  For large deployments consider adding pagination
+     * in your own implementation.
+     */
+    getAllTenants(): Promise<Tenant[]>;
+    /**
+     * Partially update a tenant's fields.
+     * Only the fields present in `data` are changed.
+     */
+    updateTenant(id: string, data: Partial<Omit<Tenant, 'id'>>): Promise<void>;
+    /**
+     * Permanently delete a tenant and all its associated data.
+     * This should also remove all user ↔ tenant associations for the tenant.
+     */
+    deleteTenant(id: string): Promise<void>;
+    /**
+     * Add `userId` as a member of `tenantId`.
+     * Idempotent — calling it when the association already exists should not throw.
+     */
+    associateUserWithTenant(userId: string, tenantId: string): Promise<void>;
+    /**
+     * Remove `userId` from `tenantId`.
+     * No-op when the association does not exist.
+     */
+    disassociateUserFromTenant(userId: string, tenantId: string): Promise<void>;
+    /**
+     * Return all tenants the given user belongs to.
+     */
+    getTenantsForUser(userId: string): Promise<Tenant[]>;
+    /**
+     * Return the IDs of all users that belong to the given tenant.
+     */
+    getUsersForTenant(tenantId: string): Promise<string[]>;
+}
+//# sourceMappingURL=tenant-store.interface.d.ts.map

package/dist/interfaces/tenant-store.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-store.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/tenant-store.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,MAAM,WAAW,YAAY;IAK3B;;;OAGG;IACH,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAExD;;;OAGG;IACH,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAElD;;;OAGG;IACH,aAAa,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAEnC;;;OAGG;IACH,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3E;;;OAGG;IACH,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAMxC;;;OAGG;IACH,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzE;;;OAGG;IACH,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5E;;OAEG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAErD;;OAEG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACxD"}

package/dist/interfaces/tenant-store.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=tenant-store.interface.js.map

package/dist/interfaces/tenant-store.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-store.interface.js","sourceRoot":"","sources":["../../src/interfaces/tenant-store.interface.ts"],"names":[],"mappings":""}

package/dist/interfaces/token-store.interface.d.ts

@@ -0,0 +1,10 @@
+export interface ITokenStore {
+    saveRefreshToken(userId: string, token: string, expiry: Date): Promise<void>;
+    findRefreshToken(token: string): Promise<{
+        userId: string;
+        expiry: Date;
+    } | null>;
+    deleteRefreshToken(token: string): Promise<void>;
+    deleteAllUserTokens(userId: string): Promise<void>;
+}
+//# sourceMappingURL=token-store.interface.d.ts.map

package/dist/interfaces/token-store.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-store.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/token-store.interface.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAClF,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD"}

package/dist/interfaces/token-store.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=token-store.interface.js.map

package/dist/interfaces/token-store.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-store.interface.js","sourceRoot":"","sources":["../../src/interfaces/token-store.interface.ts"],"names":[],"mappings":""}

package/dist/interfaces/user-metadata-store.interface.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Optional store for arbitrary per-user metadata.
+ *
+ * Implement this interface when you need to attach project-specific data to
+ * users without extending `BaseUser` (e.g. preferences, profile fields,
+ * feature flags, or any other key/value pairs).
+ *
+ * The interface is intentionally generic — your database schema can store
+ * metadata as a JSON column, a separate key-value table, or any other way
+ * that suits your project.
+ *
+ * @example
+ * ```typescript
+ * import { IUserMetadataStore } from '@awesome-lang-auth/node';
+ *
+ * export class MyUserMetadataStore implements IUserMetadataStore {
+ *   async getMetadata(userId: string) {
+ *     const row = await db.from('user_metadata').where({ userId }).first();
+ *     return row?.data ?? {};
+ *   }
+ *   async updateMetadata(userId: string, metadata: Record<string, unknown>) {
+ *     await db('user_metadata')
+ *       .insert({ userId, data: JSON.stringify(metadata) })
+ *       .onConflict('userId')
+ *       .merge();
+ *   }
+ *   async clearMetadata(userId: string) {
+ *     await db('user_metadata').where({ userId }).delete();
+ *   }
+ * }
+ * ```
+ */
+export interface IUserMetadataStore {
+    /**
+     * Retrieve all metadata for the given user.
+     * Returns an empty object when no metadata exists.
+     */
+    getMetadata(userId: string): Promise<Record<string, unknown>>;
+    /**
+     * Merge (shallow-patch) the provided key/value pairs into the user's
+     * existing metadata.  Fields not present in `metadata` are left untouched.
+     */
+    updateMetadata(userId: string, metadata: Record<string, unknown>): Promise<void>;
+    /**
+     * Delete all metadata for the given user.
+     * Useful when a user account is deleted.
+     */
+    clearMetadata(userId: string): Promise<void>;
+}
+//# sourceMappingURL=user-metadata-store.interface.d.ts.map

package/dist/interfaces/user-metadata-store.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-metadata-store.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/user-metadata-store.interface.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAE9D;;;OAGG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjF;;;OAGG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C"}

package/dist/interfaces/user-metadata-store.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=user-metadata-store.interface.js.map

package/dist/interfaces/user-metadata-store.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-metadata-store.interface.js","sourceRoot":"","sources":["../../src/interfaces/user-metadata-store.interface.ts"],"names":[],"mappings":""}

package/dist/interfaces/user-store.interface.d.ts

@@ -0,0 +1,113 @@
+import { BaseUser } from '../models/user.model';
+export interface IUserStore<U extends BaseUser = BaseUser> {
+    findByEmail(email: string): Promise<U | null>;
+    findById(id: string): Promise<U | null>;
+    create(data: Partial<U>): Promise<U>;
+    updateRefreshToken(userId: string, token: string | null, expiry: Date | null): Promise<void>;
+    updateLastLogin(userId: string): Promise<void>;
+    updateResetToken(userId: string, token: string | null, expiry: Date | null): Promise<void>;
+    updatePassword(userId: string, hashedPassword: string): Promise<void>;
+    updateTotpSecret(userId: string, secret: string | null): Promise<void>;
+    updateMagicLinkToken(userId: string, token: string | null, expiry: Date | null): Promise<void>;
+    updateSmsCode(userId: string, code: string | null, expiry: Date | null): Promise<void>;
+    /**
+     * Find a user by their password-reset token.
+     * Required to support the POST /auth/reset-password endpoint.
+     */
+    findByResetToken?(token: string): Promise<U | null>;
+    /**
+     * Find a user by their magic-link token.
+     * Required to support the POST /auth/magic-link/verify endpoint.
+     */
+    findByMagicLinkToken?(token: string): Promise<U | null>;
+    /**
+     * Set (or clear) the email-verification token and its expiry.
+     * Required to support POST /auth/send-verification-email and GET /auth/verify-email.
+     */
+    updateEmailVerificationToken?(userId: string, token: string | null, expiry: Date | null): Promise<void>;
+    /**
+     * Mark the user's primary email as verified (or unverified).
+     * Required to support GET /auth/verify-email.
+     */
+    updateEmailVerified?(userId: string, isVerified: boolean): Promise<void>;
+    /**
+     * Find a user by their email-verification token.
+     * Required to support GET /auth/verify-email.
+     */
+    findByEmailVerificationToken?(token: string): Promise<U | null>;
+    /**
+     * Store the pending new email address together with a confirmation token
+     * and expiry.  Set all three to `null` to cancel an in-progress change.
+     * Required to support POST /auth/change-email/request and
+     * POST /auth/change-email/confirm.
+     */
+    updateEmailChangeToken?(userId: string, pendingEmail: string | null, token: string | null, expiry: Date | null): Promise<void>;
+    /**
+     * Commit the pending email change: overwrite the user's primary email with
+     * `newEmail` and clear the change-token fields.
+     * Required to support POST /auth/change-email/confirm.
+     */
+    updateEmail?(userId: string, newEmail: string): Promise<void>;
+    /**
+     * Find a user by their email-change confirmation token.
+     * Required to support POST /auth/change-email/confirm.
+     */
+    findByEmailChangeToken?(token: string): Promise<U | null>;
+    /**
+     * Store the pending link details (target email, provider, token, expiry)
+     * for an in-progress account-link flow.
+     * Set all four mutable args to `null` to cancel an in-progress link request.
+     * Required to support POST /auth/link-request and POST /auth/link-verify.
+     */
+    updateAccountLinkToken?(userId: string, pendingEmail: string | null, pendingProvider: string | null, token: string | null, expiry: Date | null): Promise<void>;
+    /**
+     * Find the user who initiated a link request by their pending link token.
+     * Required to support POST /auth/link-verify.
+     */
+    findByAccountLinkToken?(token: string): Promise<U | null>;
+    /**
+     * Set or clear the "2FA required" flag for a single user.
+     * Required to support `POST /admin/api/2fa-policy` (batch 2FA enforcement).
+     */
+    updateRequire2FA?(userId: string, required: boolean): Promise<void>;
+    /**
+     * Look up a user by their OAuth provider name and provider-specific user ID.
+     *
+     * Use this in your `findOrCreateUser` implementation instead of (or in
+     * addition to) `findByEmail` to avoid account-takeover attacks: two
+     * different OAuth providers can have the same email address without
+     * representing the same person.
+     *
+     * @param provider        The provider name, e.g. `'google'` or `'github'`.
+     * @param providerAccountId  The unique user ID returned by the provider
+     *                           (stored in `BaseUser.providerAccountId`).
+     */
+    findByProviderAccount?(provider: string, providerAccountId: string): Promise<U | null>;
+    /**
+     * Return a paginated list of users.
+     * Used by the optional admin router to display the users table.
+     *
+     * @param limit  Maximum number of records to return.
+     * @param offset Zero-based offset for pagination.
+     */
+    listUsers?(limit: number, offset: number): Promise<U[]>;
+    /**
+     * Update the user's profile information (first name, last name).
+     * Required to support the PATCH /auth/profile endpoint.
+     */
+    updateProfile?(userId: string, data: {
+        firstName?: string | null;
+        lastName?: string | null;
+    }): Promise<void>;
+    /**
+     * Update the user's phone number.
+     * Required to support the POST /auth/add-phone endpoint.
+     */
+    updatePhoneNumber?(userId: string, phoneNumber: string | null): Promise<void>;
+    /**
+     * Apply a partial update to the user record.
+     * Optional helper used by admin bootstrap utilities such as promote/revoke.
+     */
+    update?(userId: string, patch: Partial<U>): Promise<void>;
+}
+//# sourceMappingURL=user-store.interface.d.ts.map

package/dist/interfaces/user-store.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-store.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/user-store.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,MAAM,WAAW,UAAU,CAAC,CAAC,SAAS,QAAQ,GAAG,QAAQ;IACvD,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9C,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACxC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACrC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7F,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3F,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/F,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvF;;;OAGG;IACH,gBAAgB,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAEpD;;;OAGG;IACH,oBAAoB,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAIxD;;;OAGG;IACH,4BAA4B,CAAC,CAC3B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,MAAM,EAAE,IAAI,GAAG,IAAI,GAClB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;OAGG;IACH,mBAAmB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzE;;;OAGG;IACH,4BAA4B,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAIhE;;;;;OAKG;IACH,sBAAsB,CAAC,CACrB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GAAG,IAAI,EAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,MAAM,EAAE,IAAI,GAAG,IAAI,GAClB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;OAIG;IACH,WAAW,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9D;;;OAGG;IACH,sBAAsB,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAI1D;;;;;OAKG;IACH,sBAAsB,CAAC,CACrB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GAAG,IAAI,EAC3B,eAAe,EAAE,MAAM,GAAG,IAAI,EAC9B,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,MAAM,EAAE,IAAI,GAAG,IAAI,GAClB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;OAGG;IACH,sBAAsB,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAE1D;;;OAGG;IACH,gBAAgB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpE;;;;;;;;;;;OAWG;IACH,qBAAqB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAIvF;;;;;;OAMG;IACH,SAAS,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAExD;;;OAGG;IACH,aAAa,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7G;;;OAGG;IACH,iBAAiB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9E;;;OAGG;IACH,MAAM,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D"}

package/dist/interfaces/user-store.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=user-store.interface.js.map

package/dist/interfaces/user-store.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-store.interface.js","sourceRoot":"","sources":["../../src/interfaces/user-store.interface.ts"],"names":[],"mappings":""}