@hilbras/keystone 1.1.0

package/dist/repositories/samlConnection.d.ts

@@ -0,0 +1,107 @@
+import { type SamlConnection } from "../db/schema.js";
+export type SamlConnectionListItem = {
+    id: string;
+    name: string;
+    idpEntityId: string | null;
+    idpSsoUrl: string | null;
+    spEntityId: string;
+    spAcsUrl: string;
+    isActive: boolean;
+    createdAt: Date;
+};
+export interface SamlConnectionRepository {
+    listByOrgId(orgId: string): Promise<SamlConnectionListItem[]>;
+    findById(id: string): Promise<SamlConnection | undefined>;
+    findActiveById(id: string): Promise<SamlConnection | undefined>;
+    create(input: {
+        orgId: string;
+        name: string;
+        idpEntityId?: string;
+        idpSsoUrl?: string;
+        idpCertificate?: string;
+        spEntityId: string;
+        spAcsUrl: string;
+        attributeMapping?: Record<string, unknown>;
+        isActive?: boolean;
+    }): Promise<SamlConnection>;
+    deleteByIdAndOrgId(id: string, orgId: string): Promise<SamlConnection | undefined>;
+}
+export declare class DrizzleSamlConnectionRepository implements SamlConnectionRepository {
+    listByOrgId(orgId: string): Promise<{
+        id: string;
+        name: string;
+        idpEntityId: string | null;
+        idpSsoUrl: string | null;
+        spEntityId: string;
+        spAcsUrl: string;
+        isActive: boolean;
+        createdAt: Date;
+    }[]>;
+    findById(id: string): Promise<{
+        id: string;
+        name: string;
+        createdAt: Date;
+        updatedAt: Date;
+        orgId: string;
+        isActive: boolean;
+        idpEntityId: string | null;
+        idpSsoUrl: string | null;
+        idpCertificate: string | null;
+        spEntityId: string;
+        spAcsUrl: string;
+        attributeMapping: unknown;
+    }>;
+    findActiveById(id: string): Promise<{
+        id: string;
+        name: string;
+        createdAt: Date;
+        updatedAt: Date;
+        orgId: string;
+        isActive: boolean;
+        idpEntityId: string | null;
+        idpSsoUrl: string | null;
+        idpCertificate: string | null;
+        spEntityId: string;
+        spAcsUrl: string;
+        attributeMapping: unknown;
+    }>;
+    create(input: {
+        orgId: string;
+        name: string;
+        idpEntityId?: string;
+        idpSsoUrl?: string;
+        idpCertificate?: string;
+        spEntityId: string;
+        spAcsUrl: string;
+        attributeMapping?: Record<string, unknown>;
+        isActive?: boolean;
+    }): Promise<{
+        id: string;
+        name: string;
+        createdAt: Date;
+        updatedAt: Date;
+        orgId: string;
+        isActive: boolean;
+        idpEntityId: string | null;
+        idpSsoUrl: string | null;
+        idpCertificate: string | null;
+        spEntityId: string;
+        spAcsUrl: string;
+        attributeMapping: unknown;
+    }>;
+    deleteByIdAndOrgId(id: string, orgId: string): Promise<{
+        id: string;
+        name: string;
+        createdAt: Date;
+        updatedAt: Date;
+        orgId: string;
+        isActive: boolean;
+        idpEntityId: string | null;
+        idpSsoUrl: string | null;
+        idpCertificate: string | null;
+        spEntityId: string;
+        spAcsUrl: string;
+        attributeMapping: unknown;
+    }>;
+}
+//# sourceMappingURL=samlConnection.d.ts.map

package/dist/repositories/samlConnection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"samlConnection.d.ts","sourceRoot":"","sources":["../../src/repositories/samlConnection.ts"],"names":[],"mappings":"AAEA,OAAO,EAAmB,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEvE,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;CACjB,CAAC;AAEF,MAAM,WAAW,wBAAwB;IACvC,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAC9D,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAC1D,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAChE,MAAM,CAAC,KAAK,EAAE;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5B,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;CACpF;AAED,qBAAa,+BAAgC,YAAW,wBAAwB;IACxE,WAAW,CAAC,KAAK,EAAE,MAAM;;;;;;;;;;IAgBzB,QAAQ,CAAC,EAAE,EAAE,MAAM;;;;;;;;;;;;;;IAKnB,cAAc,CAAC,EAAE,EAAE,MAAM;;;;;;;;;;;;;;IAKzB,MAAM,CAAC,KAAK,EAAE;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB;;;;;;;;;;;;;;IAkBK,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;;;;;;;;;;;;;;CAOnD"}

package/dist/repositories/samlConnection.js

@@ -0,0 +1,53 @@
+import { eq, and } from "drizzle-orm";
+import { db } from "../db/index.js";
+import { samlConnections } from "../db/schema.js";
+export class DrizzleSamlConnectionRepository {
+    async listByOrgId(orgId) {
+        return db
+            .select({
+            id: samlConnections.id,
+            name: samlConnections.name,
+            idpEntityId: samlConnections.idpEntityId,
+            idpSsoUrl: samlConnections.idpSsoUrl,
+            spEntityId: samlConnections.spEntityId,
+            spAcsUrl: samlConnections.spAcsUrl,
+            isActive: samlConnections.isActive,
+            createdAt: samlConnections.createdAt,
+        })
+            .from(samlConnections)
+            .where(eq(samlConnections.orgId, orgId));
+    }
+    async findById(id) {
+        const [connection] = await db.select().from(samlConnections).where(eq(samlConnections.id, id)).limit(1);
+        return connection;
+    }
+    async findActiveById(id) {
+        const [connection] = await db.select().from(samlConnections).where(and(eq(samlConnections.id, id), eq(samlConnections.isActive, true))).limit(1);
+        return connection;
+    }
+    async create(input) {
+        const [connection] = await db
+            .insert(samlConnections)
+            .values({
+            orgId: input.orgId,
+            name: input.name,
+            idpEntityId: input.idpEntityId,
+            idpSsoUrl: input.idpSsoUrl,
+            idpCertificate: input.idpCertificate,
+            spEntityId: input.spEntityId,
+            spAcsUrl: input.spAcsUrl,
+            attributeMapping: input.attributeMapping ?? {},
+            isActive: input.isActive ?? true,
+        })
+            .returning();
+        return connection;
+    }
+    async deleteByIdAndOrgId(id, orgId) {
+        const [record] = await db
+            .delete(samlConnections)
+            .where(and(eq(samlConnections.id, id), eq(samlConnections.orgId, orgId)))
+            .returning();
+        return record;
+    }
+}
+//# sourceMappingURL=samlConnection.js.map

package/dist/repositories/samlConnection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"samlConnection.js","sourceRoot":"","sources":["../../src/repositories/samlConnection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,eAAe,EAAuB,MAAM,iBAAiB,CAAC;AA+BvE,MAAM,OAAO,+BAA+B;IAC1C,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,OAAO,EAAE;aACN,MAAM,CAAC;YACN,EAAE,EAAE,eAAe,CAAC,EAAE;YACtB,IAAI,EAAE,eAAe,CAAC,IAAI;YAC1B,WAAW,EAAE,eAAe,CAAC,WAAW;YACxC,SAAS,EAAE,eAAe,CAAC,SAAS;YACpC,UAAU,EAAE,eAAe,CAAC,UAAU;YACtC,QAAQ,EAAE,eAAe,CAAC,QAAQ;YAClC,QAAQ,EAAE,eAAe,CAAC,QAAQ;YAClC,SAAS,EAAE,eAAe,CAAC,SAAS;SACrC,CAAC;aACD,IAAI,CAAC,eAAe,CAAC;aACrB,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxG,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EAAU;QAC7B,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACjJ,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAUZ;QACC,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,EAAE;aAC1B,MAAM,CAAC,eAAe,CAAC;aACvB,MAAM,CAAC;YACN,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,EAAE;YAC9C,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;SACjC,CAAC;aACD,SAAS,EAAE,CAAC;QACf,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,EAAU,EAAE,KAAa;QAChD,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE;aACtB,MAAM,CAAC,eAAe,CAAC;aACvB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;aACxE,SAAS,EAAE,CAAC;QACf,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/repositories/session.d.ts

@@ -0,0 +1,73 @@
+export interface CreateSessionInput {
+    userId: string;
+    refreshTokenId: string;
+    deviceFingerprint?: string;
+    ipAddress?: string;
+    userAgent?: string;
+    expiresAt: Date;
+}
+export declare class SessionRepository {
+    create(input: CreateSessionInput): Promise<{
+        id: string;
+        createdAt: Date;
+        userId: string;
+        refreshTokenId: string;
+        deviceFingerprint: string | null;
+        ipAddress: string | null;
+        userAgent: string | null;
+        lastSeenAt: Date;
+        expiresAt: Date;
+    }>;
+    listByUser(userId: string): Promise<{
+        id: string;
+        createdAt: Date;
+        userId: string;
+        refreshTokenId: string;
+        deviceFingerprint: string | null;
+        ipAddress: string | null;
+        userAgent: string | null;
+        lastSeenAt: Date;
+        expiresAt: Date;
+    }[]>;
+    findByRefreshTokenId(refreshTokenId: string): Promise<{
+        id: string;
+        createdAt: Date;
+        userId: string;
+        refreshTokenId: string;
+        deviceFingerprint: string | null;
+        ipAddress: string | null;
+        userAgent: string | null;
+        lastSeenAt: Date;
+        expiresAt: Date;
+    }>;
+    findById(id: string): Promise<{
+        id: string;
+        createdAt: Date;
+        userId: string;
+        refreshTokenId: string;
+        deviceFingerprint: string | null;
+        ipAddress: string | null;
+        userAgent: string | null;
+        lastSeenAt: Date;
+        expiresAt: Date;
+    }>;
+    updateLastSeen(id: string): Promise<void>;
+    deleteById(id: string, userId: string): Promise<boolean>;
+    deleteByRefreshTokenId(refreshTokenId: string): Promise<void>;
+    deleteExpired(): Promise<void>;
+    deleteAllForUser(userId: string, exceptRefreshTokenId?: string): Promise<void>;
+    revokeRefreshToken(tokenId: string): Promise<void>;
+    findRefreshTokenByHash(tokenHash: string): Promise<{
+        id: string;
+        createdAt: Date;
+        userId: string;
+        deviceFingerprint: string | null;
+        ipAddress: string | null;
+        userAgent: string | null;
+        expiresAt: Date;
+        appId: string | null;
+        tokenHash: string;
+        revokedAt: Date | null;
+    }>;
+}
+//# sourceMappingURL=session.d.ts.map

package/dist/repositories/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/repositories/session.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,qBAAa,iBAAiB;IACtB,MAAM,CAAC,KAAK,EAAE,kBAAkB;;;;;;;;;;;IAYhC,UAAU,CAAC,MAAM,EAAE,MAAM;;;;;;;;;;;IAMzB,oBAAoB,CAAC,cAAc,EAAE,MAAM;;;;;;;;;;;IAO3C,QAAQ,CAAC,EAAE,EAAE,MAAM;;;;;;;;;;;IAOnB,cAAc,CAAC,EAAE,EAAE,MAAM;IAMzB,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAMrC,sBAAsB,CAAC,cAAc,EAAE,MAAM;IAK7C,aAAa;IAKb,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,oBAAoB,CAAC,EAAE,MAAM;IAS9D,kBAAkB,CAAC,OAAO,EAAE,MAAM;IAIlC,sBAAsB,CAAC,SAAS,EAAE,MAAM;;;;;;;;;;;;CAI/C"}

package/dist/repositories/session.js

@@ -0,0 +1,68 @@
+import { db } from "../db/index.js";
+import { userSessions, refreshTokens } from "../db/schema.js";
+import { eq, and, lt, desc } from "drizzle-orm";
+export class SessionRepository {
+    async create(input) {
+        const [session] = await db.insert(userSessions).values({
+            userId: input.userId,
+            refreshTokenId: input.refreshTokenId,
+            deviceFingerprint: input.deviceFingerprint ?? null,
+            ipAddress: input.ipAddress ?? null,
+            userAgent: input.userAgent ?? null,
+            expiresAt: input.expiresAt,
+        }).returning();
+        return session;
+    }
+    async listByUser(userId) {
+        return db.select().from(userSessions)
+            .where(eq(userSessions.userId, userId))
+            .orderBy(desc(userSessions.lastSeenAt));
+    }
+    async findByRefreshTokenId(refreshTokenId) {
+        const [session] = await db.select().from(userSessions)
+            .where(eq(userSessions.refreshTokenId, refreshTokenId))
+            .limit(1);
+        return session;
+    }
+    async findById(id) {
+        const [session] = await db.select().from(userSessions)
+            .where(eq(userSessions.id, id))
+            .limit(1);
+        return session;
+    }
+    async updateLastSeen(id) {
+        await db.update(userSessions)
+            .set({ lastSeenAt: new Date() })
+            .where(eq(userSessions.id, id));
+    }
+    async deleteById(id, userId) {
+        const result = await db.delete(userSessions)
+            .where(and(eq(userSessions.id, id), eq(userSessions.userId, userId)));
+        return result.count > 0;
+    }
+    async deleteByRefreshTokenId(refreshTokenId) {
+        await db.delete(userSessions)
+            .where(eq(userSessions.refreshTokenId, refreshTokenId));
+    }
+    async deleteExpired() {
+        await db.delete(userSessions)
+            .where(lt(userSessions.expiresAt, new Date()));
+    }
+    async deleteAllForUser(userId, exceptRefreshTokenId) {
+        if (exceptRefreshTokenId) {
+            await db.delete(userSessions)
+                .where(and(eq(userSessions.userId, userId), lt(userSessions.refreshTokenId, exceptRefreshTokenId)));
+        }
+        else {
+            await db.delete(userSessions).where(eq(userSessions.userId, userId));
+        }
+    }
+    async revokeRefreshToken(tokenId) {
+        await db.update(refreshTokens).set({ revokedAt: new Date() }).where(eq(refreshTokens.id, tokenId));
+    }
+    async findRefreshTokenByHash(tokenHash) {
+        const [row] = await db.select().from(refreshTokens).where(eq(refreshTokens.tokenHash, tokenHash)).limit(1);
+        return row;
+    }
+}
+//# sourceMappingURL=session.js.map

package/dist/repositories/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/repositories/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAWhD,MAAM,OAAO,iBAAiB;IAC5B,KAAK,CAAC,MAAM,CAAC,KAAyB;QACpC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;YACrD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,IAAI,IAAI;YAClD,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;aAClC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;aACtC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,cAAsB;QAC/C,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;aACnD,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;aACtD,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;aACnD,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aAC9B,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EAAU;QAC7B,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;aAC1B,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aAC/B,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,MAAc;QACzC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;aACzC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACxE,OAAO,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,cAAsB;QACjD,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;aAC1B,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;aAC1B,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAc,EAAE,oBAA6B;QAClE,IAAI,oBAAoB,EAAE,CAAC;YACzB,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;iBAC1B,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACxG,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,OAAe;QACtC,MAAM,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IACrG,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,SAAiB;QAC5C,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3G,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/repositories/types.d.ts

@@ -0,0 +1,155 @@
+import type { User, Organization, OrgMembership, Application, auditLog, Permission } from "../db/schema.js";
+export interface CreateUserInput {
+    email: string;
+    username: string;
+    name: string;
+    passwordHash?: string | null;
+    provider?: string;
+    emailVerified?: boolean;
+    avatarUrl?: string | null;
+    zitadelUserId?: string | null;
+    metadata?: Record<string, unknown>;
+}
+export interface UpdateUserInput {
+    name?: string;
+    email?: string;
+    username?: string;
+    role?: string;
+    emailVerified?: boolean;
+    avatarUrl?: string | null;
+    phoneNumber?: string | null;
+    phoneVerified?: boolean;
+    metadata?: Record<string, unknown>;
+}
+export interface UserRepository {
+    findById(id: string): Promise<User | undefined>;
+    findByEmail(email: string): Promise<User | undefined>;
+    create(input: CreateUserInput): Promise<User>;
+    update(id: string, input: UpdateUserInput): Promise<User | undefined>;
+    deactivate(id: string): Promise<void>;
+    listByOrg(orgId: string): Promise<User[]>;
+    listAll(): Promise<User[]>;
+    updateLastSeen(id: string): Promise<void>;
+    ensureUniqueUsername(base: string, excludeId?: string): Promise<string>;
+    recordFailedLogin(id: string): Promise<User | undefined>;
+    resetFailedLogins(id: string): Promise<void>;
+    lockAccount(id: string, until: Date): Promise<void>;
+    setTotpSecret(userId: string, totpSecret: string): Promise<void>;
+    enableTotp(userId: string): Promise<void>;
+    disableTotp(userId: string): Promise<void>;
+    deleteById(userId: string): Promise<void>;
+}
+export interface CreateOrganizationInput {
+    name: string;
+    slug?: string;
+    plan?: string;
+}
+export interface OrganizationRepository {
+    create(input: CreateOrganizationInput): Promise<Organization>;
+    findById(id: string): Promise<Organization | undefined>;
+    findBySlug(slug: string): Promise<Organization | undefined>;
+    listByUserId(userId: string): Promise<Organization[]>;
+    listAll(): Promise<Organization[]>;
+    update(id: string, input: {
+        name?: string;
+        branding?: Record<string, unknown>;
+    }): Promise<Organization | undefined>;
+    countMembers(orgId: string): Promise<number>;
+    addMembership(input: {
+        orgId: string;
+        userId: string;
+        role: string;
+    }): Promise<OrgMembership>;
+    findMembership(orgId: string, userId: string): Promise<OrgMembership | undefined>;
+    updateMembershipRole(orgId: string, userId: string, role: string): Promise<OrgMembership | undefined>;
+    removeMembership(orgId: string, userId: string): Promise<boolean>;
+    countOwners(orgId: string): Promise<number>;
+    listMembers(orgId: string): Promise<{
+        membership: OrgMembership;
+        user: {
+            id: string;
+            email: string;
+            username: string;
+            name: string | null;
+            avatarUrl: string | null;
+        };
+    }[]>;
+}
+export interface IdentityLinkInput {
+    userId: string;
+    providerId: string;
+    providerType: string;
+    externalSub: string;
+    email?: string;
+    profile?: Record<string, unknown>;
+}
+export interface IdentityRepository {
+    link(input: IdentityLinkInput): Promise<void>;
+    findLinkedByExternalSub(providerId: string, externalSub: string): Promise<User | undefined>;
+    listByUserId(userId: string): Promise<{
+        identity: any;
+        provider: {
+            id: string;
+            name: string;
+            providerType: string;
+        };
+    }[]>;
+}
+export interface AuditRepository {
+    list(opts: {
+        orgId?: string;
+        appId?: string;
+        userId?: string;
+        event?: string;
+        limit?: number;
+        offset?: number;
+    }): Promise<typeof auditLog.$inferSelect[]>;
+}
+export interface CreateApplicationInput {
+    orgId: string;
+    name: string;
+    redirectUris?: string[];
+    allowedOrigins?: string[];
+    clientId?: string;
+    clientSecret?: string;
+}
+export interface UpdateApplicationInput {
+    name?: string;
+    redirectUris?: string[];
+    allowedOrigins?: string[];
+    allowedIps?: string[];
+    blockedIps?: string[];
+    isActive?: boolean;
+    branding?: Record<string, unknown>;
+}
+export interface ApplicationRepository {
+    create(input: CreateApplicationInput): Promise<Application & {
+        clientSecret: string;
+    }>;
+    findByClientId(clientId: string): Promise<Application | undefined>;
+    listByOrgId(orgId: string): Promise<Application[]>;
+    update(appId: string, orgId: string, input: UpdateApplicationInput): Promise<Application | undefined>;
+    verifyClientSecret(clientId: string, secret: string): Promise<Application | undefined>;
+}
+export interface PermissionRepository {
+    ensureSeeded(): Promise<void>;
+    ensureRolePermissionsSeeded(): Promise<void>;
+    list(): Promise<Permission[]>;
+    listForRole(role: string): Promise<Permission[]>;
+    listKeysForRole(role: string): Promise<Set<string>>;
+    listDistinctRoles(): Promise<string[]>;
+    create(input: {
+        resource: string;
+        action: string;
+        description?: string;
+    }): Promise<Permission>;
+    remove(id: string): Promise<Permission | undefined>;
+    assignToRole(role: string, permissionId: string): Promise<void>;
+    removeFromRole(role: string, permissionId: string): Promise<void>;
+    hasPermission(role: string, resource: string, action: string): Promise<boolean>;
+    hasAnyPermission(role: string, required: {
+        resource: string;
+        action: string;
+    }[]): Promise<boolean>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/repositories/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/repositories/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE5G,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC;IAChD,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC;IACtE,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1C,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3B,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxE,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC;IACzD,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9D,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;IACxD,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;IAC5D,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IACtD,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IACnC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;IACpH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,aAAa,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9F,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IAClF,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IACtG,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,aAAa,CAAC;QAAC,IAAI,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAA;KAAE,EAAE,CAAC,CAAC;CAC5K;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC;IAC5F,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,GAAG,CAAC;QAAC,QAAQ,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,EAAE,CAAC,CAAC;CAC1H;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,IAAI,EAAE;QACT,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,OAAO,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,WAAW,GAAG;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvF,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;IACnE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;IACtG,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;CACxF;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9B,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACjD,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACpD,iBAAiB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,MAAM,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/F,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IACpD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChF,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpG"}

package/dist/repositories/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/repositories/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/repositories/types.ts"],"names":[],"mappings":""}

package/dist/repositories/user.d.ts

@@ -0,0 +1,40 @@
+import { type User } from "../db/schema.js";
+import type { CreateUserInput, UpdateUserInput, UserRepository } from "./types.js";
+export declare class DrizzleUserRepository implements UserRepository {
+    findById(id: string): Promise<User | undefined>;
+    findByEmail(email: string): Promise<User | undefined>;
+    create(input: CreateUserInput): Promise<User>;
+    update(id: string, input: UpdateUserInput): Promise<User | undefined>;
+    deactivate(id: string): Promise<void>;
+    listByOrg(orgId: string): Promise<User[]>;
+    updateLastSeen(id: string): Promise<void>;
+    recordFailedLogin(id: string): Promise<User | undefined>;
+    resetFailedLogins(id: string): Promise<void>;
+    lockAccount(id: string, until: Date): Promise<void>;
+    ensureUniqueUsername(base: string, excludeId?: string): Promise<string>;
+    listAll(): Promise<User[]>;
+    setTotpSecret(userId: string, totpSecret: string): Promise<void>;
+    enableTotp(userId: string): Promise<void>;
+    disableTotp(userId: string): Promise<void>;
+    deleteById(userId: string): Promise<void>;
+}
+export declare class DrizzleIdentityRepository {
+    link(input: {
+        userId: string;
+        providerId: string;
+        providerType: string;
+        externalSub: string;
+        email?: string;
+        profile?: Record<string, unknown>;
+    }): Promise<void>;
+    findLinkedByExternalSub(providerId: string, externalSub: string): Promise<User | undefined>;
+    listByUserId(userId: string): Promise<{
+        identity: any;
+        provider: {
+            id: string;
+            name: string;
+            providerType: string;
+        };
+    }[]>;
+}
+//# sourceMappingURL=user.d.ts.map

package/dist/repositories/user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../src/repositories/user.ts"],"names":[],"mappings":"AAEA,OAAO,EAA4D,KAAK,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACtG,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEnF,qBAAa,qBAAsB,YAAW,cAAc;IACpD,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAK/C,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAKrD,MAAM,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB7C,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IASrE,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IASzC,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IASxD,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO5C,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAInD,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAiBvE,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAI1B,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhE,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1C,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGhD;AAED,qBAAa,yBAAyB;IAC9B,IAAI,CAAC,KAAK,EAAE;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACnC,GAAG,OAAO,CAAC,IAAI,CAAC;IAcX,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAU3F,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,GAAG,CAAC;QAAC,QAAQ,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,EAAE,CAAC;CAU/H"}