@factiii/auth 0.5.5 → 0.5.6

package/dist/{chunk-KUYH4DBN.mjs → chunk-EHI4P63M.mjs}

@@ -1,10 +1,3 @@
-var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
-  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
-}) : x)(function(x) {
-  if (typeof require !== "undefined") return require.apply(this, arguments);
-  throw Error('Dynamic require of "' + x + '" is not supported');
-});
-
 // src/validators.ts
 import { z } from "zod";
 var usernameValidationRegex = /^[a-zA-Z0-9_]+$/;
@@ -84,7 +77,6 @@ function createSchemas(extensions) {
 }
 
 export {
-  __require,
   signupSchema,
   loginSchema,
   oAuthLoginSchema,

package/dist/database-CqnmD1HM.d.mts

@@ -0,0 +1,148 @@
+/**
+ * ORM-agnostic database adapter interface for @factiii/auth.
+ * Implement this interface to use any database/ORM with the auth library.
+ */
+interface AuthUser {
+    id: number;
+    status: string;
+    email: string;
+    username: string;
+    password: string | null;
+    twoFaEnabled: boolean;
+    oauthProvider: string | null;
+    oauthId: string | null;
+    tag: string;
+    verifiedHumanAt: Date | null;
+    emailVerificationStatus: string;
+    otpForEmailVerification: string | null;
+    isActive: boolean;
+}
+interface AuthSession {
+    id: number;
+    userId: number;
+    socketId: string | null;
+    twoFaSecret: string | null;
+    browserName: string;
+    issuedAt: Date;
+    lastUsed: Date;
+    revokedAt: Date | null;
+    deviceId: number | null;
+}
+interface AuthOTP {
+    id: number;
+    code: number;
+    expiresAt: Date;
+    userId: number;
+}
+interface AuthPasswordReset {
+    id: string;
+    createdAt: Date;
+    userId: number;
+}
+interface CreateUserData {
+    username: string;
+    email: string;
+    password: string | null;
+    status: string;
+    tag: string;
+    twoFaEnabled: boolean;
+    emailVerificationStatus: string;
+    verifiedHumanAt: Date | null;
+    oauthProvider?: string;
+    oauthId?: string;
+}
+interface CreateSessionData {
+    userId: number;
+    browserName: string;
+    socketId: string | null;
+    [key: string]: unknown;
+}
+type SessionWithUser = AuthSession & {
+    user: {
+        status: string;
+        verifiedHumanAt: Date | null;
+    };
+};
+type SessionWithDevice = {
+    twoFaSecret: string | null;
+    deviceId: number | null;
+    device: {
+        pushToken: string;
+    } | null;
+};
+interface DatabaseAdapter {
+    user: {
+        findByEmailInsensitive(email: string): Promise<AuthUser | null>;
+        findByUsernameInsensitive(username: string): Promise<AuthUser | null>;
+        findByEmailOrUsernameInsensitive(identifier: string): Promise<AuthUser | null>;
+        findByEmailOrOAuthId(email: string, oauthId: string): Promise<AuthUser | null>;
+        findById(id: number): Promise<AuthUser | null>;
+        findActiveById(id: number): Promise<AuthUser | null>;
+        create(data: CreateUserData): Promise<AuthUser>;
+        update(id: number, data: Partial<Omit<AuthUser, 'id'>>): Promise<AuthUser>;
+    };
+    session: {
+        /** Find session by ID with user status and verifiedHumanAt joined. */
+        findById(id: number): Promise<SessionWithUser | null>;
+        create(data: CreateSessionData): Promise<AuthSession>;
+        update(id: number, data: Partial<Pick<AuthSession, 'revokedAt' | 'lastUsed' | 'twoFaSecret' | 'deviceId'>>): Promise<AuthSession>;
+        /** Update lastUsed and return session with user's verifiedHumanAt. */
+        updateLastUsed(id: number): Promise<AuthSession & {
+            user: {
+                verifiedHumanAt: Date | null;
+            };
+        }>;
+        /** Set revokedAt on a single session. */
+        revoke(id: number): Promise<void>;
+        /** Find active (non-revoked) sessions for a user, optionally excluding one. */
+        findActiveByUserId(userId: number, excludeSessionId?: number): Promise<Pick<AuthSession, 'id' | 'socketId' | 'userId'>[]>;
+        /** Revoke all active sessions for a user, optionally excluding one. */
+        revokeAllByUserId(userId: number, excludeSessionId?: number): Promise<void>;
+        /** Get twoFaSecret from all sessions that have one for a user. */
+        findTwoFaSecretsByUserId(userId: number): Promise<{
+            twoFaSecret: string | null;
+        }[]>;
+        /** Clear twoFaSecret on sessions for a user, optionally excluding one. */
+        clearTwoFaSecrets(userId: number, excludeSessionId?: number): Promise<void>;
+        /** Find session with device relation for TOTP verification. */
+        findByIdWithDevice(id: number, userId: number): Promise<SessionWithDevice | null>;
+        /** Revoke other sessions that share a device push token. */
+        revokeByDevicePushToken(userId: number, pushToken: string, excludeSessionId: number): Promise<void>;
+        /** Clear deviceId on all sessions for a user+device pair. */
+        clearDeviceId(userId: number, deviceId: number): Promise<void>;
+    };
+    otp: {
+        findValidByUserAndCode(userId: number, code: number): Promise<AuthOTP | null>;
+        create(data: {
+            userId: number;
+            code: number;
+            expiresAt: Date;
+        }): Promise<AuthOTP>;
+        delete(id: number): Promise<void>;
+    };
+    passwordReset: {
+        findById(id: string): Promise<AuthPasswordReset | null>;
+        create(userId: number): Promise<AuthPasswordReset>;
+        delete(id: string): Promise<void>;
+        deleteAllByUserId(userId: number): Promise<void>;
+    };
+    device: {
+        findByTokenSessionAndUser(pushToken: string, sessionId: number, userId: number): Promise<{
+            id: number;
+        } | null>;
+        upsertByPushToken(pushToken: string, sessionId: number, userId: number): Promise<void>;
+        findByUserAndToken(userId: number, pushToken: string): Promise<{
+            id: number;
+        } | null>;
+        disconnectUser(deviceId: number, userId: number): Promise<void>;
+        hasRemainingUsers(deviceId: number): Promise<boolean>;
+        delete(id: number): Promise<void>;
+    };
+    admin: {
+        findByUserId(userId: number): Promise<{
+            ip: string;
+        } | null>;
+    };
+}
+
+export type { AuthOTP as A, CreateSessionData as C, DatabaseAdapter as D, SessionWithDevice as S, AuthPasswordReset as a, AuthSession as b, AuthUser as c, CreateUserData as d, SessionWithUser as e };

package/dist/database-CqnmD1HM.d.ts

@@ -0,0 +1,148 @@
+/**
+ * ORM-agnostic database adapter interface for @factiii/auth.
+ * Implement this interface to use any database/ORM with the auth library.
+ */
+interface AuthUser {
+    id: number;
+    status: string;
+    email: string;
+    username: string;
+    password: string | null;
+    twoFaEnabled: boolean;
+    oauthProvider: string | null;
+    oauthId: string | null;
+    tag: string;
+    verifiedHumanAt: Date | null;
+    emailVerificationStatus: string;
+    otpForEmailVerification: string | null;
+    isActive: boolean;
+}
+interface AuthSession {
+    id: number;
+    userId: number;
+    socketId: string | null;
+    twoFaSecret: string | null;
+    browserName: string;
+    issuedAt: Date;
+    lastUsed: Date;
+    revokedAt: Date | null;
+    deviceId: number | null;
+}
+interface AuthOTP {
+    id: number;
+    code: number;
+    expiresAt: Date;
+    userId: number;
+}
+interface AuthPasswordReset {
+    id: string;
+    createdAt: Date;
+    userId: number;
+}
+interface CreateUserData {
+    username: string;
+    email: string;
+    password: string | null;
+    status: string;
+    tag: string;
+    twoFaEnabled: boolean;
+    emailVerificationStatus: string;
+    verifiedHumanAt: Date | null;
+    oauthProvider?: string;
+    oauthId?: string;
+}
+interface CreateSessionData {
+    userId: number;
+    browserName: string;
+    socketId: string | null;
+    [key: string]: unknown;
+}
+type SessionWithUser = AuthSession & {
+    user: {
+        status: string;
+        verifiedHumanAt: Date | null;
+    };
+};
+type SessionWithDevice = {
+    twoFaSecret: string | null;
+    deviceId: number | null;
+    device: {
+        pushToken: string;
+    } | null;
+};
+interface DatabaseAdapter {
+    user: {
+        findByEmailInsensitive(email: string): Promise<AuthUser | null>;
+        findByUsernameInsensitive(username: string): Promise<AuthUser | null>;
+        findByEmailOrUsernameInsensitive(identifier: string): Promise<AuthUser | null>;
+        findByEmailOrOAuthId(email: string, oauthId: string): Promise<AuthUser | null>;
+        findById(id: number): Promise<AuthUser | null>;
+        findActiveById(id: number): Promise<AuthUser | null>;
+        create(data: CreateUserData): Promise<AuthUser>;
+        update(id: number, data: Partial<Omit<AuthUser, 'id'>>): Promise<AuthUser>;
+    };
+    session: {
+        /** Find session by ID with user status and verifiedHumanAt joined. */
+        findById(id: number): Promise<SessionWithUser | null>;
+        create(data: CreateSessionData): Promise<AuthSession>;
+        update(id: number, data: Partial<Pick<AuthSession, 'revokedAt' | 'lastUsed' | 'twoFaSecret' | 'deviceId'>>): Promise<AuthSession>;
+        /** Update lastUsed and return session with user's verifiedHumanAt. */
+        updateLastUsed(id: number): Promise<AuthSession & {
+            user: {
+                verifiedHumanAt: Date | null;
+            };
+        }>;
+        /** Set revokedAt on a single session. */
+        revoke(id: number): Promise<void>;
+        /** Find active (non-revoked) sessions for a user, optionally excluding one. */
+        findActiveByUserId(userId: number, excludeSessionId?: number): Promise<Pick<AuthSession, 'id' | 'socketId' | 'userId'>[]>;
+        /** Revoke all active sessions for a user, optionally excluding one. */
+        revokeAllByUserId(userId: number, excludeSessionId?: number): Promise<void>;
+        /** Get twoFaSecret from all sessions that have one for a user. */
+        findTwoFaSecretsByUserId(userId: number): Promise<{
+            twoFaSecret: string | null;
+        }[]>;
+        /** Clear twoFaSecret on sessions for a user, optionally excluding one. */
+        clearTwoFaSecrets(userId: number, excludeSessionId?: number): Promise<void>;
+        /** Find session with device relation for TOTP verification. */
+        findByIdWithDevice(id: number, userId: number): Promise<SessionWithDevice | null>;
+        /** Revoke other sessions that share a device push token. */
+        revokeByDevicePushToken(userId: number, pushToken: string, excludeSessionId: number): Promise<void>;
+        /** Clear deviceId on all sessions for a user+device pair. */
+        clearDeviceId(userId: number, deviceId: number): Promise<void>;
+    };
+    otp: {
+        findValidByUserAndCode(userId: number, code: number): Promise<AuthOTP | null>;
+        create(data: {
+            userId: number;
+            code: number;
+            expiresAt: Date;
+        }): Promise<AuthOTP>;
+        delete(id: number): Promise<void>;
+    };
+    passwordReset: {
+        findById(id: string): Promise<AuthPasswordReset | null>;
+        create(userId: number): Promise<AuthPasswordReset>;
+        delete(id: string): Promise<void>;
+        deleteAllByUserId(userId: number): Promise<void>;
+    };
+    device: {
+        findByTokenSessionAndUser(pushToken: string, sessionId: number, userId: number): Promise<{
+            id: number;
+        } | null>;
+        upsertByPushToken(pushToken: string, sessionId: number, userId: number): Promise<void>;
+        findByUserAndToken(userId: number, pushToken: string): Promise<{
+            id: number;
+        } | null>;
+        disconnectUser(deviceId: number, userId: number): Promise<void>;
+        hasRemainingUsers(deviceId: number): Promise<boolean>;
+        delete(id: number): Promise<void>;
+    };
+    admin: {
+        findByUserId(userId: number): Promise<{
+            ip: string;
+        } | null>;
+    };
+}
+
+export type { AuthOTP as A, CreateSessionData as C, DatabaseAdapter as D, SessionWithDevice as S, AuthPasswordReset as a, AuthSession as b, AuthUser as c, CreateUserData as d, SessionWithUser as e };

package/dist/drizzle.d.mts

@@ -0,0 +1,60 @@
+import { AnyPgTable, PgColumn, PgDatabase, PgQueryResultHKT } from 'drizzle-orm/pg-core';
+import { D as DatabaseAdapter } from './database-CqnmD1HM.mjs';
+
+/**
+ * A Postgres Drizzle table with column properties accessible by name.
+ * `AnyPgTable` is Drizzle's base Postgres table type; intersecting with
+ * `Record<string, Column>` exposes the column descriptors for index access.
+ */
+type DrizzleTable = AnyPgTable & Record<string, PgColumn>;
+/**
+ * Drizzle table references required by the adapter.
+ * Consumers pass their Drizzle Postgres table objects so the adapter
+ * can build queries without knowing the schema file location.
+ *
+ * **Note:** This adapter only supports PostgreSQL via `drizzle-orm/pg-core`.
+ */
+interface DrizzleAdapterTables {
+    users: DrizzleTable;
+    sessions: DrizzleTable;
+    otps: DrizzleTable;
+    passwordResets: DrizzleTable;
+    devices: DrizzleTable;
+    admins: DrizzleTable;
+    /** Join table for many-to-many device↔user relation (if applicable). */
+    devicesToUsers?: DrizzleTable;
+    /** Join table for many-to-many device↔session relation (if applicable). */
+    devicesToSessions?: DrizzleTable;
+}
+/**
+ * Any `PgDatabase` instance, regardless of the underlying driver
+ * (node-postgres, postgres.js, Neon, PGLite, etc.).
+ */
+type AnyPgDatabase = PgDatabase<PgQueryResultHKT, Record<string, unknown>>;
+/**
+ * Creates a DatabaseAdapter backed by Drizzle ORM.
+ *
+ * Usage:
+ * ```ts
+ * import { drizzle } from 'drizzle-orm/node-postgres';
+ * import { createDrizzleAdapter } from '@factiii/auth/drizzle';
+ * import * as schema from './schema';
+ *
+ * const db = drizzle(pool, { schema });
+ * const adapter = createDrizzleAdapter(db, {
+ *   users: schema.users,
+ *   sessions: schema.sessions,
+ *   otps: schema.otps,
+ *   passwordResets: schema.passwordResets,
+ *   devices: schema.devices,
+ *   admins: schema.admins,
+ * });
+ * ```
+ *
+ * **Important:** This adapter uses Drizzle's relational query API (`db.query.*`)
+ * for joins and `db.insert/update/delete` for mutations. Make sure your Drizzle
+ * instance is created with `{ schema }` so relational queries work.
+ */
+declare function createDrizzleAdapter(db: AnyPgDatabase, tables: DrizzleAdapterTables): DatabaseAdapter;
+
+export { type DrizzleAdapterTables, createDrizzleAdapter };

package/dist/drizzle.d.ts

@@ -0,0 +1,60 @@
+import { AnyPgTable, PgColumn, PgDatabase, PgQueryResultHKT } from 'drizzle-orm/pg-core';
+import { D as DatabaseAdapter } from './database-CqnmD1HM.js';
+
+/**
+ * A Postgres Drizzle table with column properties accessible by name.
+ * `AnyPgTable` is Drizzle's base Postgres table type; intersecting with
+ * `Record<string, Column>` exposes the column descriptors for index access.
+ */
+type DrizzleTable = AnyPgTable & Record<string, PgColumn>;
+/**
+ * Drizzle table references required by the adapter.
+ * Consumers pass their Drizzle Postgres table objects so the adapter
+ * can build queries without knowing the schema file location.
+ *
+ * **Note:** This adapter only supports PostgreSQL via `drizzle-orm/pg-core`.
+ */
+interface DrizzleAdapterTables {
+    users: DrizzleTable;
+    sessions: DrizzleTable;
+    otps: DrizzleTable;
+    passwordResets: DrizzleTable;
+    devices: DrizzleTable;
+    admins: DrizzleTable;
+    /** Join table for many-to-many device↔user relation (if applicable). */
+    devicesToUsers?: DrizzleTable;
+    /** Join table for many-to-many device↔session relation (if applicable). */
+    devicesToSessions?: DrizzleTable;
+}
+/**
+ * Any `PgDatabase` instance, regardless of the underlying driver
+ * (node-postgres, postgres.js, Neon, PGLite, etc.).
+ */
+type AnyPgDatabase = PgDatabase<PgQueryResultHKT, Record<string, unknown>>;
+/**
+ * Creates a DatabaseAdapter backed by Drizzle ORM.
+ *
+ * Usage:
+ * ```ts
+ * import { drizzle } from 'drizzle-orm/node-postgres';
+ * import { createDrizzleAdapter } from '@factiii/auth/drizzle';
+ * import * as schema from './schema';
+ *
+ * const db = drizzle(pool, { schema });
+ * const adapter = createDrizzleAdapter(db, {
+ *   users: schema.users,
+ *   sessions: schema.sessions,
+ *   otps: schema.otps,
+ *   passwordResets: schema.passwordResets,
+ *   devices: schema.devices,
+ *   admins: schema.admins,
+ * });
+ * ```
+ *
+ * **Important:** This adapter uses Drizzle's relational query API (`db.query.*`)
+ * for joins and `db.insert/update/delete` for mutations. Make sure your Drizzle
+ * instance is created with `{ schema }` so relational queries work.
+ */
+declare function createDrizzleAdapter(db: AnyPgDatabase, tables: DrizzleAdapterTables): DatabaseAdapter;
+
+export { type DrizzleAdapterTables, createDrizzleAdapter };