@hilbras/keystone 1.1.0

package/dist/services/setup/types.d.ts

@@ -0,0 +1,35 @@
+import type { Result } from "../../lib/result.js";
+export interface ConfigWriter {
+    read(): Promise<Record<string, string | undefined>>;
+    write(values: Record<string, string>): Promise<Result<void>>;
+    backup(): Promise<Result<string>>;
+}
+export interface DatabaseValidationInput {
+    databaseUrl: string;
+}
+export interface RedisValidationInput {
+    redisUrl: string;
+}
+export interface EmailValidationInput {
+    provider: "none" | "console" | "smtp" | "sendgrid" | "mailgun";
+    from: string;
+    smtpHost?: string;
+    smtpPort?: number;
+    smtpUser?: string;
+    smtpPass?: string;
+    smtpSecure?: boolean;
+    sendgridApiKey?: string;
+    mailgunApiKey?: string;
+    mailgunDomain?: string;
+}
+export interface SmsValidationInput {
+    provider: "none" | "console" | "twilio";
+    twilioAccountSid?: string;
+    twilioAuthToken?: string;
+    twilioFromNumber?: string;
+    twilioMessagingServiceSid?: string;
+}
+export interface SetupConfigInput {
+    env: Record<string, string>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/services/setup/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/services/setup/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAElD,MAAM,WAAW,YAAY;IAC3B,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IACpD,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;IACxC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B"}

package/dist/services/setup/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/services/setup/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/services/setup/types.ts"],"names":[],"mappings":""}

package/dist/services/setup/validation.d.ts

@@ -0,0 +1,7 @@
+import { type Result } from "../../lib/result.js";
+import type { DatabaseValidationInput, RedisValidationInput, EmailValidationInput, SmsValidationInput } from "./types.js";
+export declare function validateDatabase(input: DatabaseValidationInput): Promise<Result<void>>;
+export declare function validateRedis(input: RedisValidationInput): Promise<Result<void>>;
+export declare function validateEmail(input: EmailValidationInput, to: string): Promise<Result<void>>;
+export declare function validateSms(input: SmsValidationInput, to: string): Promise<Result<void>>;
+//# sourceMappingURL=validation.d.ts.map

package/dist/services/setup/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../src/services/setup/validation.ts"],"names":[],"mappings":"AAEA,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAE1H,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAyB5F;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAsBtF;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,oBAAoB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAiBlG;AAED,wBAAsB,WAAW,CAAC,KAAK,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAgB9F"}

package/dist/services/setup/validation.js

@@ -0,0 +1,198 @@
+import postgres from "postgres";
+import { Redis } from "ioredis";
+import { ok, err } from "../../lib/result.js";
+export async function validateDatabase(input) {
+    const { databaseUrl } = input;
+    if (!databaseUrl) {
+        return err({ code: "MISSING_DATABASE_URL", message: "Database URL is required", statusCode: 400 });
+    }
+    let client;
+    try {
+        client = postgres(databaseUrl, { max: 1, connect_timeout: 5 });
+        // Test basic connectivity.
+        await client `SELECT 1`;
+        // Test DDL privileges by creating and dropping a temporary table.
+        await client `CREATE TABLE IF NOT EXISTS __keystone_setup_probe (id serial PRIMARY KEY)`;
+        await client `ALTER TABLE __keystone_setup_probe ADD COLUMN IF NOT EXISTS probe_text text`;
+        await client `DROP TABLE __keystone_setup_probe`;
+        await client.end();
+        return ok(undefined);
+    }
+    catch (error) {
+        await client?.end().catch(() => { });
+        const message = error instanceof Error ? error.message : "Database validation failed";
+        return err({ code: "DATABASE_VALIDATION_FAILED", message, statusCode: 400 });
+    }
+}
+export async function validateRedis(input) {
+    const { redisUrl } = input;
+    if (!redisUrl) {
+        return err({ code: "MISSING_REDIS_URL", message: "Redis URL is required", statusCode: 400 });
+    }
+    const redis = new Redis(redisUrl, {
+        maxRetriesPerRequest: 1,
+        lazyConnect: true,
+        connectTimeout: 5000,
+    });
+    try {
+        await redis.connect();
+        await redis.ping();
+        redis.disconnect();
+        return ok(undefined);
+    }
+    catch (error) {
+        try {
+            redis.disconnect();
+        }
+        catch { /* ignore */ }
+        const message = error instanceof Error ? error.message : "Redis validation failed";
+        return err({ code: "REDIS_VALIDATION_FAILED", message, statusCode: 400 });
+    }
+}
+export async function validateEmail(input, to) {
+    if (input.provider === "none" || input.provider === "console") {
+        return ok(undefined);
+    }
+    try {
+        const provider = createTransientEmailProvider(input);
+        await provider.send({
+            to,
+            subject: "Hilbras Keystone setup test",
+            text: "This is a test message from the Hilbras Keystone setup wizard.",
+        });
+        return ok(undefined);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : "Email validation failed";
+        return err({ code: "EMAIL_VALIDATION_FAILED", message, statusCode: 400 });
+    }
+}
+export async function validateSms(input, to) {
+    if (input.provider === "none" || input.provider === "console") {
+        return ok(undefined);
+    }
+    try {
+        const provider = createTransientSmsProvider(input);
+        await provider.send({
+            to,
+            body: "Hilbras Keystone setup test message.",
+        });
+        return ok(undefined);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : "SMS validation failed";
+        return err({ code: "SMS_VALIDATION_FAILED", message, statusCode: 400 });
+    }
+}
+function createTransientEmailProvider(input) {
+    return {
+        send: async (message) => {
+            switch (input.provider) {
+                case "smtp":
+                    return sendSmtp(input, message);
+                case "sendgrid":
+                    return sendSendGrid(input, message);
+                case "mailgun":
+                    return sendMailgun(input, message);
+                default:
+                    throw new Error("Unsupported email provider");
+            }
+        },
+    };
+}
+async function sendSmtp(input, message) {
+    if (!input.smtpHost)
+        throw new Error("SMTP host is required");
+    const { createTransport } = await import("nodemailer");
+    const transporter = createTransport({
+        host: input.smtpHost,
+        port: input.smtpPort || 587,
+        secure: input.smtpSecure || false,
+        auth: input.smtpUser && input.smtpPass ? { user: input.smtpUser, pass: input.smtpPass } : undefined,
+    });
+    await transporter.verify();
+    await transporter.sendMail({
+        from: input.from,
+        to: message.to,
+        subject: message.subject,
+        text: message.text,
+    });
+}
+async function sendSendGrid(input, message) {
+    if (!input.sendgridApiKey)
+        throw new Error("SendGrid API key is required");
+    const response = await fetch("https://api.sendgrid.com/v3/mail/send", {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${input.sendgridApiKey}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({
+            personalizations: [{ to: [{ email: message.to }] }],
+            from: { email: input.from },
+            subject: message.subject,
+            content: [{ type: "text/plain", value: message.text }],
+        }),
+    });
+    if (!response.ok) {
+        const body = await response.text();
+        throw new Error(`SendGrid request failed: ${response.status} ${body}`);
+    }
+}
+async function sendMailgun(input, message) {
+    if (!input.mailgunApiKey || !input.mailgunDomain)
+        throw new Error("Mailgun API key and domain are required");
+    const params = new URLSearchParams();
+    params.set("from", input.from);
+    params.set("to", message.to);
+    params.set("subject", message.subject);
+    params.set("text", message.text);
+    const response = await fetch(`https://api.mailgun.net/v3/${input.mailgunDomain}/messages`, {
+        method: "POST",
+        headers: {
+            Authorization: `Basic ${Buffer.from(`api:${input.mailgunApiKey}`).toString("base64")}`,
+            "Content-Type": "application/x-www-form-urlencoded",
+        },
+        body: params.toString(),
+    });
+    if (!response.ok) {
+        const body = await response.text();
+        throw new Error(`Mailgun request failed: ${response.status} ${body}`);
+    }
+}
+function createTransientSmsProvider(input) {
+    return {
+        send: async (message) => {
+            if (input.provider !== "twilio")
+                throw new Error("Unsupported SMS provider");
+            if (!input.twilioAccountSid || !input.twilioAuthToken) {
+                throw new Error("Twilio account SID and auth token are required");
+            }
+            const params = new URLSearchParams();
+            params.set("To", message.to);
+            params.set("Body", message.body);
+            if (input.twilioMessagingServiceSid) {
+                params.set("MessagingServiceSid", input.twilioMessagingServiceSid);
+            }
+            else if (input.twilioFromNumber) {
+                params.set("From", input.twilioFromNumber);
+            }
+            else {
+                throw new Error("Twilio messaging service SID or from number is required");
+            }
+            const response = await fetch(`https://api.twilio.com/2010-04-01/Accounts/${input.twilioAccountSid}/Messages.json`, {
+                method: "POST",
+                headers: {
+                    Authorization: `Basic ${Buffer.from(`${input.twilioAccountSid}:${input.twilioAuthToken}`).toString("base64")}`,
+                    "Content-Type": "application/x-www-form-urlencoded",
+                },
+                body: params.toString(),
+            });
+            if (!response.ok) {
+                const body = await response.text();
+                throw new Error(`Twilio request failed: ${response.status} ${body}`);
+            }
+        },
+    };
+}
+//# sourceMappingURL=validation.js.map

package/dist/services/setup/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../src/services/setup/validation.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAChC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAe,MAAM,qBAAqB,CAAC;AAG3D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAA8B;IACnE,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IAC9B,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,0BAA0B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACrG,CAAC;IAED,IAAI,MAAgC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC,CAAC;QAE/D,2BAA2B;QAC3B,MAAM,MAAM,CAAA,UAAU,CAAC;QAEvB,kEAAkE;QAClE,MAAM,MAAM,CAAA,2EAA2E,CAAC;QACxF,MAAM,MAAM,CAAA,6EAA6E,CAAC;QAC1F,MAAM,MAAM,CAAA,mCAAmC,CAAC;QAEhD,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC;QACtF,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAA2B;IAC7D,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC3B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE;QAChC,oBAAoB,EAAE,CAAC;QACvB,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,IAAI;KACrB,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,CAAC,UAAU,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC;QACnF,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAA2B,EAAE,EAAU;IACzE,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC9D,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,QAAQ,CAAC,IAAI,CAAC;YAClB,EAAE;YACF,OAAO,EAAE,6BAA6B;YACtC,IAAI,EAAE,gEAAgE;SACvE,CAAC,CAAC;QACH,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC;QACnF,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAyB,EAAE,EAAU;IACrE,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC9D,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,QAAQ,CAAC,IAAI,CAAC;YAClB,EAAE;YACF,IAAI,EAAE,sCAAsC;SAC7C,CAAC,CAAC;QACH,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC;QACjF,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,KAA2B;IAC/D,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,OAAsD,EAAE,EAAE;YACrE,QAAQ,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACvB,KAAK,MAAM;oBACT,OAAO,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAClC,KAAK,UAAU;oBACb,OAAO,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACtC,KAAK,SAAS;oBACZ,OAAO,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACrC;oBACE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,KAA2B,EAAE,OAAsD;IACzG,IAAI,CAAC,KAAK,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC9D,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,eAAe,CAAC;QAClC,IAAI,EAAE,KAAK,CAAC,QAAQ;QACpB,IAAI,EAAE,KAAK,CAAC,QAAQ,IAAI,GAAG;QAC3B,MAAM,EAAE,KAAK,CAAC,UAAU,IAAI,KAAK;QACjC,IAAI,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;KACpG,CAAC,CAAC;IACH,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC;IAC3B,MAAM,WAAW,CAAC,QAAQ,CAAC;QACzB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,KAA2B,EAAE,OAAsD;IAC7G,IAAI,CAAC,KAAK,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,uCAAuC,EAAE;QACpE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,CAAC,cAAc,EAAE;YAC/C,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,gBAAgB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACnD,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;YAC3B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;SACvD,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAA2B,EAAE,OAAsD;IAC5G,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7G,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,8BAA8B,KAAK,CAAC,aAAa,WAAW,EAAE;QACzF,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;YACtF,cAAc,EAAE,mCAAmC;SACpD;QACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;KACxB,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAyB;IAC3D,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,OAAqC,EAAE,EAAE;YACpD,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC7E,IAAI,CAAC,KAAK,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,KAAK,CAAC,yBAAyB,EAAE,CAAC;gBACpC,MAAM,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACrE,CAAC;iBAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;gBAClC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YAC7E,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,8CAA8C,KAAK,CAAC,gBAAgB,gBAAgB,EACpF;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;oBAC9G,cAAc,EAAE,mCAAmC;iBACpD;gBACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;aACxB,CACF,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/services/sms.d.ts

@@ -0,0 +1,10 @@
+export interface SmsMessage {
+    to: string;
+    body: string;
+}
+export interface SmsProvider {
+    name?: string;
+    send(message: SmsMessage): Promise<void>;
+}
+export declare const smsProvider: SmsProvider;
+//# sourceMappingURL=sms.d.ts.map

package/dist/services/sms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sms.d.ts","sourceRoot":"","sources":["../../src/services/sms.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAqED,eAAO,MAAM,WAAW,aAAsB,CAAC"}

package/dist/services/sms.js

@@ -0,0 +1,62 @@
+import { config } from "../config.js";
+import { getPluginSmsProvider } from "./plugins/registry.js";
+class NoOpSmsProvider {
+    async send(message) {
+        console.log("[sms] no-op provider would send:", JSON.stringify(message));
+    }
+}
+class ConsoleSmsProvider {
+    async send(message) {
+        console.log("[sms] console provider:");
+        console.log(`To: ${message.to}`);
+        console.log(message.body);
+    }
+}
+class TwilioSmsProvider {
+    async send(message) {
+        if (!config.TWILIO_ACCOUNT_SID || !config.TWILIO_AUTH_TOKEN) {
+            throw new Error("Twilio provider requires TWILIO_ACCOUNT_SID and TWILIO_AUTH_TOKEN");
+        }
+        const params = new URLSearchParams();
+        params.set("To", message.to);
+        params.set("Body", message.body);
+        if (config.TWILIO_MESSAGING_SERVICE_SID) {
+            params.set("MessagingServiceSid", config.TWILIO_MESSAGING_SERVICE_SID);
+        }
+        else if (config.TWILIO_FROM_NUMBER) {
+            params.set("From", config.TWILIO_FROM_NUMBER);
+        }
+        else {
+            throw new Error("Twilio provider requires TWILIO_MESSAGING_SERVICE_SID or TWILIO_FROM_NUMBER");
+        }
+        const response = await fetch(`https://api.twilio.com/2010-04-01/Accounts/${config.TWILIO_ACCOUNT_SID}/Messages.json`, {
+            method: "POST",
+            headers: {
+                Authorization: `Basic ${Buffer.from(`${config.TWILIO_ACCOUNT_SID}:${config.TWILIO_AUTH_TOKEN}`).toString("base64")}`,
+                "Content-Type": "application/x-www-form-urlencoded",
+            },
+            body: params.toString(),
+        });
+        if (!response.ok) {
+            const body = await response.text();
+            throw new Error(`Twilio request failed: ${response.status} ${body}`);
+        }
+    }
+}
+function createSmsProvider() {
+    const plugin = getPluginSmsProvider();
+    if (plugin)
+        return plugin;
+    const provider = config.SMS_PROVIDER || "none";
+    switch (provider) {
+        case "twilio":
+            return new TwilioSmsProvider();
+        case "console":
+            return new ConsoleSmsProvider();
+        case "none":
+        default:
+            return new NoOpSmsProvider();
+    }
+}
+export const smsProvider = createSmsProvider();
+//# sourceMappingURL=sms.js.map

package/dist/services/sms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sms.js","sourceRoot":"","sources":["../../src/services/sms.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAY7D,MAAM,eAAe;IACnB,KAAK,CAAC,IAAI,CAAC,OAAmB;QAC5B,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3E,CAAC;CACF;AAED,MAAM,kBAAkB;IACtB,KAAK,CAAC,IAAI,CAAC,OAAmB;QAC5B,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,iBAAiB;IACrB,KAAK,CAAC,IAAI,CAAC,OAAmB;QAC5B,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAEjC,IAAI,MAAM,CAAC,4BAA4B,EAAE,CAAC;YACxC,MAAM,CAAC,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,4BAA4B,CAAC,CAAC;QACzE,CAAC;aAAM,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;QACjG,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,8CAA8C,MAAM,CAAC,kBAAkB,gBAAgB,EACvF;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBACpH,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CACF,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;CACF;AAED,SAAS,iBAAiB;IACxB,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;IACtC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC;IAC/C,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACjC,KAAK,SAAS;YACZ,OAAO,IAAI,kBAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC;QACZ;YACE,OAAO,IAAI,eAAe,EAAE,CAAC;IACjC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC"}

package/dist/services/smsOtp.d.ts

@@ -0,0 +1,7 @@
+import { type User } from "../db/schema.js";
+export declare function generateSmsCode(): string;
+export declare function sendSmsOtp(user: User, phoneNumber: string): Promise<string>;
+export declare function verifySmsOtp(userId: string, code: string): Promise<boolean>;
+export declare function hasVerifiedPhone(userId: string): Promise<boolean>;
+export declare function markPhoneVerified(userId: string, phoneNumber: string): Promise<void>;
+//# sourceMappingURL=smsOtp.d.ts.map

package/dist/services/smsOtp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"smsOtp.d.ts","sourceRoot":"","sources":["../../src/services/smsOtp.ts"],"names":[],"mappings":"AAGA,OAAO,EAAsB,KAAK,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAMhE,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAMD,wBAAsB,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBjF;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAqBjF;AAED,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOvE;AAED,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK1F"}

package/dist/services/smsOtp.js

@@ -0,0 +1,56 @@
+import crypto from "node:crypto";
+import { eq, and, gt, isNull } from "drizzle-orm";
+import { db } from "../db/index.js";
+import { smsOtpCodes, users } from "../db/schema.js";
+import { smsProvider } from "./sms.js";
+const CODE_TTL_SECONDS = 300;
+const CODE_LENGTH = 6;
+export function generateSmsCode() {
+    return crypto.randomInt(0, 1_000_000).toString().padStart(CODE_LENGTH, "0");
+}
+function hashCode(code) {
+    return crypto.createHash("sha256").update(code).digest("hex");
+}
+export async function sendSmsOtp(user, phoneNumber) {
+    const code = generateSmsCode();
+    const expiresAt = new Date(Date.now() + CODE_TTL_SECONDS * 1000);
+    await db.insert(smsOtpCodes).values({
+        userId: user.id,
+        phoneNumber,
+        codeHash: hashCode(code),
+        expiresAt,
+    });
+    await smsProvider.send({
+        to: phoneNumber,
+        body: `Your Hilbras verification code is: ${code}`,
+    });
+    return code;
+}
+export async function verifySmsOtp(userId, code) {
+    const codeHash = hashCode(code);
+    const now = new Date();
+    const [record] = await db
+        .select()
+        .from(smsOtpCodes)
+        .where(and(eq(smsOtpCodes.userId, userId), eq(smsOtpCodes.codeHash, codeHash), gt(smsOtpCodes.expiresAt, now), isNull(smsOtpCodes.usedAt)))
+        .limit(1);
+    if (!record)
+        return false;
+    await db.update(smsOtpCodes).set({ usedAt: now }).where(eq(smsOtpCodes.id, record.id));
+    return true;
+}
+export async function hasVerifiedPhone(userId) {
+    const [user] = await db
+        .select({ phoneVerified: users.phoneVerified })
+        .from(users)
+        .where(eq(users.id, userId))
+        .limit(1);
+    return user?.phoneVerified ?? false;
+}
+export async function markPhoneVerified(userId, phoneNumber) {
+    await db
+        .update(users)
+        .set({ phoneNumber, phoneVerified: true })
+        .where(eq(users.id, userId));
+}
+//# sourceMappingURL=smsOtp.js.map

package/dist/services/smsOtp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smsOtp.js","sourceRoot":"","sources":["../../src/services/smsOtp.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAa,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB,MAAM,UAAU,eAAe;IAC7B,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAU,EAAE,WAAmB;IAC9D,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAEjE,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;QAClC,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,WAAW;QACX,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC;QACxB,SAAS;KACV,CAAC,CAAC;IAEH,MAAM,WAAW,CAAC,IAAI,CAAC;QACrB,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,sCAAsC,IAAI,EAAE;KACnD,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,IAAY;IAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE;SACtB,MAAM,EAAE;SACR,IAAI,CAAC,WAAW,CAAC;SACjB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAClC,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,EAC9B,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAC3B,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IAEZ,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAE1B,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACvF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc;IACnD,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE;SACpB,MAAM,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;SAC9C,IAAI,CAAC,KAAK,CAAC;SACX,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;SAC3B,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,IAAI,EAAE,aAAa,IAAI,KAAK,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAc,EAAE,WAAmB;IACzE,MAAM,EAAE;SACL,MAAM,CAAC,KAAK,CAAC;SACb,GAAG,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SACzC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;AACjC,CAAC"}

package/dist/services/tokens.d.ts

@@ -0,0 +1,66 @@
+import { type User, type Application } from "../db/schema.js";
+import type { TokenClaims } from "../types.js";
+export declare function loadSigningKeys(): Promise<void>;
+/**
+ * Return the public JWK for the active signing key. Kept for backwards
+ * compatibility; new code should prefer `getPublicJwks()`.
+ */
+export declare function getPublicJWK(): Promise<import("jose").JWK>;
+/**
+ * Return the JWKS document containing every valid public key, including
+ * recently rotated keys still within the grace period.
+ */
+export declare function getPublicJwks(): Promise<{
+    keys: {
+        kid: string;
+        use: string;
+        key_ops: string[];
+        crv?: string;
+        d?: string;
+        dp?: string;
+        dq?: string;
+        e?: string;
+        k?: string;
+        n?: string;
+        p?: string;
+        q?: string;
+        qi?: string;
+        x?: string;
+        y?: string;
+        kty: string;
+        alg?: string;
+        ext?: boolean;
+        x5c?: string[];
+        x5t?: string;
+        'x5t#S256'?: string;
+        x5u?: string;
+    }[];
+}>;
+export interface AccessTokenOptions {
+    appId?: string;
+    orgId?: string;
+    clientId?: string;
+    deviceFingerprint?: string;
+}
+export declare function createAccessToken(user: User, opts?: AccessTokenOptions): Promise<string>;
+export interface ApplicationAccessTokenOptions {
+    appId: string;
+    orgId: string;
+    clientId: string;
+    scopes?: string[];
+}
+export declare function createApplicationAccessToken(opts: ApplicationAccessTokenOptions): Promise<string>;
+export declare function createIdToken(user: User, app: Application, nonce?: string): Promise<string>;
+export interface TokenSet {
+    accessToken: string;
+    refreshToken: string;
+    refreshTokenHash: string;
+    expiresAt: Date;
+}
+export declare function createTokenSet(user: User, ip?: string, userAgent?: string, opts?: AccessTokenOptions, deviceFingerprint?: string): Promise<TokenSet>;
+export declare function verifyAccessToken(token: string): Promise<TokenClaims>;
+export declare function rotateRefreshToken(token: string, ip?: string, userAgent?: string): Promise<TokenSet | null>;
+export declare function revokeRefreshToken(token: string): Promise<void>;
+export declare function revokeAllUserRefreshTokens(userId: string): Promise<void>;
+export { hashApiKey, generateApiKey } from "./secrets.js";
+//# sourceMappingURL=tokens.d.ts.map

package/dist/services/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/services/tokens.ts"],"names":[],"mappings":"AAaA,OAAO,EAGL,KAAK,IAAI,EAET,KAAK,WAAW,EACjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAa/C,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAerD;AAED;;;GAGG;AACH,wBAAsB,YAAY,gCAGjC;AAED;;;GAGG;AACH,wBAAsB,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;GASlC;AAMD,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,GAAE,kBAAuB,GAAG,OAAO,CAAC,MAAM,CAAC,CAsB5F;AAED,MAAM,WAAW,6BAA6B;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,6BAA6B,GAClC,OAAO,CAAC,MAAM,CAAC,CAkBjB;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,WAAW,EAChB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAmBjB;AAED,MAAM,WAAW,QAAQ;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE,IAAI,EACV,EAAE,CAAC,EAAE,MAAM,EACX,SAAS,CAAC,EAAE,MAAM,EAClB,IAAI,GAAE,kBAAuB,EAC7B,iBAAiB,CAAC,EAAE,MAAM,GACzB,OAAO,CAAC,QAAQ,CAAC,CA+BnB;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAgB3E;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,MAAM,EACb,EAAE,CAAC,EAAE,MAAM,EACX,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAuC1B;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGrE;AAED,wBAAsB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9E;AAOD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC"}