@holeauth/2fa-drizzle 0.0.1-alpha.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Robert Kratz
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,11 @@
+# @holeauth/2fa-drizzle
+
+Drizzle adapter for `@holeauth/plugin-2fa`. Subpaths: `/pg`, `/mysql`, `/sqlite`.
+
+```ts
+import { createTwoFactorTables, createTwoFactorAdapter } from '@holeauth/2fa-drizzle/pg';
+import { users } from '@/db/schema';
+
+export const twofa = createTwoFactorTables({ usersTable: users });
+const twoFactorAdapter = createTwoFactorAdapter({ db, tables: twofa.tables });
+```

package/dist/index.cjs

@@ -0,0 +1,4 @@
+'use strict';
+
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.cjs"}

package/dist/index.d.cts

@@ -0,0 +1,2 @@
+
+export {  }

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+
+export {  }

package/dist/index.js

@@ -0,0 +1,3 @@
+
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.js"}

package/dist/mysql/index.cjs

@@ -0,0 +1,72 @@
+'use strict';
+
+var mysqlCore = require('drizzle-orm/mysql-core');
+var drizzleOrm = require('drizzle-orm');
+
+// src/mysql/index.ts
+function createTwoFactorTables(opts) {
+  const { usersTable, prefix = "holeauth_2fa_" } = opts;
+  const p = (s) => `${prefix}${s}`;
+  const twoFactor = mysqlCore.mysqlTable(p("credential"), {
+    userId: mysqlCore.varchar("user_id", { length: 191 }).primaryKey().references(() => usersTable.id, { onDelete: "cascade" }),
+    secret: mysqlCore.varchar("secret", { length: 191 }).notNull(),
+    enabled: mysqlCore.boolean("enabled").notNull().default(false),
+    recoveryCodes: mysqlCore.json("recovery_codes").$type().notNull(),
+    createdAt: mysqlCore.timestamp("created_at", { fsp: 3 }).notNull().defaultNow(),
+    updatedAt: mysqlCore.timestamp("updated_at", { fsp: 3 }).notNull().defaultNow()
+  });
+  const twoFactorRelations = drizzleOrm.relations(twoFactor, ({ one }) => ({
+    user: one(usersTable, { fields: [twoFactor.userId], references: [usersTable.id] })
+  }));
+  return { tables: { twoFactor }, relations: { twoFactorRelations } };
+}
+var rowToRecord = (r) => ({
+  userId: String(r.userId),
+  secret: String(r.secret),
+  enabled: Boolean(r.enabled),
+  recoveryCodes: r.recoveryCodes ?? [],
+  createdAt: r.createdAt,
+  updatedAt: r.updatedAt
+});
+function createTwoFactorAdapter(opts) {
+  const { db, tables } = opts;
+  const { twoFactor } = tables;
+  return {
+    async getByUserId(userId) {
+      const rows = await db.select().from(twoFactor).where(drizzleOrm.eq(twoFactor.userId, userId)).limit(1);
+      return rows[0] ? rowToRecord(rows[0]) : null;
+    },
+    async upsert(record) {
+      await db.insert(twoFactor).values({
+        userId: record.userId,
+        secret: record.secret,
+        enabled: record.enabled,
+        recoveryCodes: record.recoveryCodes
+      }).onDuplicateKeyUpdate({
+        set: {
+          secret: record.secret,
+          enabled: record.enabled,
+          recoveryCodes: record.recoveryCodes,
+          updatedAt: /* @__PURE__ */ new Date()
+        }
+      });
+      const rows = await db.select().from(twoFactor).where(drizzleOrm.eq(twoFactor.userId, record.userId)).limit(1);
+      return rowToRecord(rows[0]);
+    },
+    async update(userId, patch) {
+      const toSet = { ...patch, updatedAt: /* @__PURE__ */ new Date() };
+      delete toSet.userId;
+      await db.update(twoFactor).set(toSet).where(drizzleOrm.eq(twoFactor.userId, userId));
+      const rows = await db.select().from(twoFactor).where(drizzleOrm.eq(twoFactor.userId, userId)).limit(1);
+      return rows[0] ? rowToRecord(rows[0]) : null;
+    },
+    async delete(userId) {
+      await db.delete(twoFactor).where(drizzleOrm.eq(twoFactor.userId, userId));
+    }
+  };
+}
+
+exports.createTwoFactorAdapter = createTwoFactorAdapter;
+exports.createTwoFactorTables = createTwoFactorTables;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/mysql/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/mysql/index.ts"],"names":["mysqlTable","varchar","boolean","json","timestamp","relations","eq"],"mappings":";;;;;;AAmBO,SAAS,sBAAiD,IAAA,EAAuC;AACtG,EAAA,MAAM,EAAE,UAAA,EAAY,MAAA,GAAS,eAAA,EAAgB,GAAI,IAAA;AACjD,EAAA,MAAM,IAAI,CAAC,CAAA,KAAc,CAAA,EAAG,MAAM,GAAG,CAAC,CAAA,CAAA;AACtC,EAAA,MAAM,SAAA,GAAYA,oBAAA,CAAW,CAAA,CAAE,YAAY,CAAA,EAAG;AAAA,IAC5C,QAAQC,iBAAA,CAAQ,SAAA,EAAW,EAAE,MAAA,EAAQ,KAAK,CAAA,CACvC,UAAA,EAAW,CACX,WAAW,MAAM,UAAA,CAAW,IAAI,EAAE,QAAA,EAAU,WAAW,CAAA;AAAA,IAC1D,MAAA,EAAQA,kBAAQ,QAAA,EAAU,EAAE,QAAQ,GAAA,EAAK,EAAE,OAAA,EAAQ;AAAA,IACnD,SAASC,iBAAA,CAAQ,SAAS,EAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK,CAAA;AAAA,IACnD,eAAeC,cAAA,CAAK,gBAAgB,CAAA,CAAE,KAAA,GAAkB,OAAA,EAAQ;AAAA,IAChE,SAAA,EAAWC,mBAAA,CAAU,YAAA,EAAc,EAAE,GAAA,EAAK,GAAG,CAAA,CAAE,OAAA,EAAQ,CAAE,UAAA,EAAW;AAAA,IACpE,SAAA,EAAWA,mBAAA,CAAU,YAAA,EAAc,EAAE,GAAA,EAAK,GAAG,CAAA,CAAE,OAAA,EAAQ,CAAE,UAAA;AAAW,GACrE,CAAA;AACD,EAAA,MAAM,qBAAqBC,oBAAA,CAAU,SAAA,EAAW,CAAC,EAAE,KAAI,MAAO;AAAA,IAC5D,IAAA,EAAM,GAAA,CAAI,UAAA,EAAY,EAAE,QAAQ,CAAC,SAAA,CAAU,MAAM,CAAA,EAAG,UAAA,EAAY,CAAC,UAAA,CAAW,EAAE,GAAG;AAAA,GACnF,CAAE,CAAA;AACF,EAAA,OAAO,EAAE,QAAQ,EAAE,SAAA,IAAa,SAAA,EAAW,EAAE,oBAAmB,EAAE;AACpE;AAUA,IAAM,WAAA,GAAc,CAAC,CAAA,MAAiD;AAAA,EACpE,MAAA,EAAQ,MAAA,CAAO,CAAA,CAAE,MAAM,CAAA;AAAA,EACvB,MAAA,EAAQ,MAAA,CAAO,CAAA,CAAE,MAAM,CAAA;AAAA,EACvB,OAAA,EAAS,OAAA,CAAQ,CAAA,CAAE,OAAO,CAAA;AAAA,EAC1B,aAAA,EAAgB,CAAA,CAAE,aAAA,IAAiD,EAAC;AAAA,EACpE,WAAW,CAAA,CAAE,SAAA;AAAA,EACb,WAAW,CAAA,CAAE;AACf,CAAA,CAAA;AAEO,SAAS,uBAAuB,IAAA,EAAuD;AAC5F,EAAA,MAAM,EAAE,EAAA,EAAI,MAAA,EAAO,GAAI,IAAA;AACvB,EAAA,MAAM,EAAE,WAAU,GAAI,MAAA;AACtB,EAAA,OAAO;AAAA,IACL,MAAM,YAAY,MAAA,EAAQ;AACxB,MAAA,MAAM,OAAO,MAAM,EAAA,CAAG,MAAA,EAAO,CAAE,KAAK,SAAS,CAAA,CAAE,KAAA,CAAMC,aAAA,CAAG,UAAU,MAAA,EAAQ,MAAM,CAAC,CAAA,CAAE,MAAM,CAAC,CAAA;AAC1F,MAAA,OAAO,KAAK,CAAC,CAAA,GAAI,YAAY,IAAA,CAAK,CAAC,CAA4B,CAAA,GAAI,IAAA;AAAA,IACrE,CAAA;AAAA,IACA,MAAM,OAAO,MAAA,EAAQ;AACnB,MAAA,MAAM,EAAA,CACH,MAAA,CAAO,SAAS,CAAA,CAChB,MAAA,CAAO;AAAA,QACN,QAAQ,MAAA,CAAO,MAAA;AAAA,QACf,QAAQ,MAAA,CAAO,MAAA;AAAA,QACf,SAAS,MAAA,CAAO,OAAA;AAAA,QAChB,eAAe,MAAA,CAAO;AAAA,OACvB,EACA,oBAAA,CAAqB;AAAA,QACpB,GAAA,EAAK;AAAA,UACH,QAAQ,MAAA,CAAO,MAAA;AAAA,UACf,SAAS,MAAA,CAAO,OAAA;AAAA,UAChB,eAAe,MAAA,CAAO,aAAA;AAAA,UACtB,SAAA,sBAAe,IAAA;AAAK;AACtB,OACD,CAAA;AACH,MAAA,MAAM,OAAO,MAAM,EAAA,CAAG,MAAA,EAAO,CAAE,KAAK,SAAS,CAAA,CAAE,KAAA,CAAMA,aAAA,CAAG,UAAU,MAAA,EAAQ,MAAA,CAAO,MAAM,CAAC,CAAA,CAAE,MAAM,CAAC,CAAA;AACjG,MAAA,OAAO,WAAA,CAAY,IAAA,CAAK,CAAC,CAA4B,CAAA;AAAA,IACvD,CAAA;AAAA,IACA,MAAM,MAAA,CAAO,MAAA,EAAQ,KAAA,EAAO;AAC1B,MAAA,MAAM,QAAiC,EAAE,GAAG,OAAO,SAAA,kBAAW,IAAI,MAAK,EAAE;AACzE,MAAA,OAAO,KAAA,CAAM,MAAA;AACb,MAAA,MAAM,EAAA,CAAG,MAAA,CAAO,SAAS,CAAA,CAAE,GAAA,CAAI,KAAK,CAAA,CAAE,KAAA,CAAMA,aAAA,CAAG,SAAA,CAAU,MAAA,EAAQ,MAAM,CAAC,CAAA;AACxE,MAAA,MAAM,OAAO,MAAM,EAAA,CAAG,MAAA,EAAO,CAAE,KAAK,SAAS,CAAA,CAAE,KAAA,CAAMA,aAAA,CAAG,UAAU,MAAA,EAAQ,MAAM,CAAC,CAAA,CAAE,MAAM,CAAC,CAAA;AAC1F,MAAA,OAAO,KAAK,CAAC,CAAA,GAAI,YAAY,IAAA,CAAK,CAAC,CAA4B,CAAA,GAAI,IAAA;AAAA,IACrE,CAAA;AAAA,IACA,MAAM,OAAO,MAAA,EAAQ;AACnB,MAAA,MAAM,EAAA,CAAG,OAAO,SAAS,CAAA,CAAE,MAAMA,aAAA,CAAG,SAAA,CAAU,MAAA,EAAQ,MAAM,CAAC,CAAA;AAAA,IAC/D;AAAA,GACF;AACF","file":"index.cjs","sourcesContent":["import {\n  mysqlTable,\n  varchar,\n  timestamp,\n  boolean,\n  json,\n  type MySqlTableWithColumns,\n} from 'drizzle-orm/mysql-core';\nimport { relations, eq } from 'drizzle-orm';\nimport type { TwoFactorAdapter, TwoFactorRecord } from '@holeauth/plugin-2fa';\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport type MysqlUsersTable = MySqlTableWithColumns<any> & { id: any };\n\nexport interface CreateTwoFactorTablesOptions<U extends MysqlUsersTable> {\n  usersTable: U;\n  prefix?: string;\n}\n\nexport function createTwoFactorTables<U extends MysqlUsersTable>(opts: CreateTwoFactorTablesOptions<U>) {\n  const { usersTable, prefix = 'holeauth_2fa_' } = opts;\n  const p = (s: string) => `${prefix}${s}`;\n  const twoFactor = mysqlTable(p('credential'), {\n    userId: varchar('user_id', { length: 191 })\n      .primaryKey()\n      .references(() => usersTable.id, { onDelete: 'cascade' }),\n    secret: varchar('secret', { length: 191 }).notNull(),\n    enabled: boolean('enabled').notNull().default(false),\n    recoveryCodes: json('recovery_codes').$type<string[]>().notNull(),\n    createdAt: timestamp('created_at', { fsp: 3 }).notNull().defaultNow(),\n    updatedAt: timestamp('updated_at', { fsp: 3 }).notNull().defaultNow(),\n  });\n  const twoFactorRelations = relations(twoFactor, ({ one }) => ({\n    user: one(usersTable, { fields: [twoFactor.userId], references: [usersTable.id] }),\n  }));\n  return { tables: { twoFactor }, relations: { twoFactorRelations } };\n}\n\ntype Tables = ReturnType<typeof createTwoFactorTables>['tables'];\n\nexport interface CreateTwoFactorAdapterOptions {\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  db: any;\n  tables: Tables;\n}\n\nconst rowToRecord = (r: Record<string, unknown>): TwoFactorRecord => ({\n  userId: String(r.userId),\n  secret: String(r.secret),\n  enabled: Boolean(r.enabled),\n  recoveryCodes: (r.recoveryCodes as string[] | null | undefined) ?? [],\n  createdAt: r.createdAt as Date | undefined,\n  updatedAt: r.updatedAt as Date | undefined,\n});\n\nexport function createTwoFactorAdapter(opts: CreateTwoFactorAdapterOptions): TwoFactorAdapter {\n  const { db, tables } = opts;\n  const { twoFactor } = tables;\n  return {\n    async getByUserId(userId) {\n      const rows = await db.select().from(twoFactor).where(eq(twoFactor.userId, userId)).limit(1);\n      return rows[0] ? rowToRecord(rows[0] as Record<string, unknown>) : null;\n    },\n    async upsert(record) {\n      await db\n        .insert(twoFactor)\n        .values({\n          userId: record.userId,\n          secret: record.secret,\n          enabled: record.enabled,\n          recoveryCodes: record.recoveryCodes,\n        })\n        .onDuplicateKeyUpdate({\n          set: {\n            secret: record.secret,\n            enabled: record.enabled,\n            recoveryCodes: record.recoveryCodes,\n            updatedAt: new Date(),\n          },\n        });\n      const rows = await db.select().from(twoFactor).where(eq(twoFactor.userId, record.userId)).limit(1);\n      return rowToRecord(rows[0] as Record<string, unknown>);\n    },\n    async update(userId, patch) {\n      const toSet: Record<string, unknown> = { ...patch, updatedAt: new Date() };\n      delete toSet.userId;\n      await db.update(twoFactor).set(toSet).where(eq(twoFactor.userId, userId));\n      const rows = await db.select().from(twoFactor).where(eq(twoFactor.userId, userId)).limit(1);\n      return rows[0] ? rowToRecord(rows[0] as Record<string, unknown>) : null;\n    },\n    async delete(userId) {\n      await db.delete(twoFactor).where(eq(twoFactor.userId, userId));\n    },\n  };\n}\n"]}

package/dist/mysql/index.d.cts

@@ -0,0 +1,138 @@
+import * as drizzle_orm from 'drizzle-orm';
+import * as drizzle_orm_mysql_core from 'drizzle-orm/mysql-core';
+import { MySqlTableWithColumns } from 'drizzle-orm/mysql-core';
+import { TwoFactorAdapter } from '@holeauth/plugin-2fa';
+
+type MysqlUsersTable = MySqlTableWithColumns<any> & {
+    id: any;
+};
+interface CreateTwoFactorTablesOptions<U extends MysqlUsersTable> {
+    usersTable: U;
+    prefix?: string;
+}
+declare function createTwoFactorTables<U extends MysqlUsersTable>(opts: CreateTwoFactorTablesOptions<U>): {
+    tables: {
+        twoFactor: MySqlTableWithColumns<{
+            name: string;
+            schema: undefined;
+            columns: {
+                userId: drizzle_orm_mysql_core.MySqlColumn<{
+                    name: "user_id";
+                    tableName: string;
+                    dataType: "string";
+                    columnType: "MySqlVarChar";
+                    data: string;
+                    driverParam: string | number;
+                    notNull: true;
+                    hasDefault: false;
+                    isPrimaryKey: true;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: [string, ...string[]];
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+                secret: drizzle_orm_mysql_core.MySqlColumn<{
+                    name: "secret";
+                    tableName: string;
+                    dataType: "string";
+                    columnType: "MySqlVarChar";
+                    data: string;
+                    driverParam: string | number;
+                    notNull: true;
+                    hasDefault: false;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: [string, ...string[]];
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+                enabled: drizzle_orm_mysql_core.MySqlColumn<{
+                    name: "enabled";
+                    tableName: string;
+                    dataType: "boolean";
+                    columnType: "MySqlBoolean";
+                    data: boolean;
+                    driverParam: number | boolean;
+                    notNull: true;
+                    hasDefault: true;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: undefined;
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+                recoveryCodes: drizzle_orm_mysql_core.MySqlColumn<{
+                    name: "recovery_codes";
+                    tableName: string;
+                    dataType: "json";
+                    columnType: "MySqlJson";
+                    data: string[];
+                    driverParam: string;
+                    notNull: true;
+                    hasDefault: false;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: undefined;
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+                createdAt: drizzle_orm_mysql_core.MySqlColumn<{
+                    name: "created_at";
+                    tableName: string;
+                    dataType: "date";
+                    columnType: "MySqlTimestamp";
+                    data: Date;
+                    driverParam: string | number;
+                    notNull: true;
+                    hasDefault: true;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: undefined;
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+                updatedAt: drizzle_orm_mysql_core.MySqlColumn<{
+                    name: "updated_at";
+                    tableName: string;
+                    dataType: "date";
+                    columnType: "MySqlTimestamp";
+                    data: Date;
+                    driverParam: string | number;
+                    notNull: true;
+                    hasDefault: true;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: undefined;
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+            };
+            dialect: "mysql";
+        }>;
+    };
+    relations: {
+        twoFactorRelations: drizzle_orm.Relations<string, {
+            user: drizzle_orm.One<U["_"]["name"], true>;
+        }>;
+    };
+};
+type Tables = ReturnType<typeof createTwoFactorTables>['tables'];
+interface CreateTwoFactorAdapterOptions {
+    db: any;
+    tables: Tables;
+}
+declare function createTwoFactorAdapter(opts: CreateTwoFactorAdapterOptions): TwoFactorAdapter;
+
+export { type CreateTwoFactorAdapterOptions, type CreateTwoFactorTablesOptions, type MysqlUsersTable, createTwoFactorAdapter, createTwoFactorTables };

package/dist/mysql/index.d.ts

@@ -0,0 +1,138 @@
+import * as drizzle_orm from 'drizzle-orm';
+import * as drizzle_orm_mysql_core from 'drizzle-orm/mysql-core';
+import { MySqlTableWithColumns } from 'drizzle-orm/mysql-core';
+import { TwoFactorAdapter } from '@holeauth/plugin-2fa';
+
+type MysqlUsersTable = MySqlTableWithColumns<any> & {
+    id: any;
+};
+interface CreateTwoFactorTablesOptions<U extends MysqlUsersTable> {
+    usersTable: U;
+    prefix?: string;
+}
+declare function createTwoFactorTables<U extends MysqlUsersTable>(opts: CreateTwoFactorTablesOptions<U>): {
+    tables: {
+        twoFactor: MySqlTableWithColumns<{
+            name: string;
+            schema: undefined;
+            columns: {
+                userId: drizzle_orm_mysql_core.MySqlColumn<{
+                    name: "user_id";
+                    tableName: string;
+                    dataType: "string";
+                    columnType: "MySqlVarChar";
+                    data: string;
+                    driverParam: string | number;
+                    notNull: true;
+                    hasDefault: false;
+                    isPrimaryKey: true;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: [string, ...string[]];
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+                secret: drizzle_orm_mysql_core.MySqlColumn<{
+                    name: "secret";
+                    tableName: string;
+                    dataType: "string";
+                    columnType: "MySqlVarChar";
+                    data: string;
+                    driverParam: string | number;
+                    notNull: true;
+                    hasDefault: false;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: [string, ...string[]];
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+                enabled: drizzle_orm_mysql_core.MySqlColumn<{
+                    name: "enabled";
+                    tableName: string;
+                    dataType: "boolean";
+                    columnType: "MySqlBoolean";
+                    data: boolean;
+                    driverParam: number | boolean;
+                    notNull: true;
+                    hasDefault: true;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: undefined;
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+                recoveryCodes: drizzle_orm_mysql_core.MySqlColumn<{
+                    name: "recovery_codes";
+                    tableName: string;
+                    dataType: "json";
+                    columnType: "MySqlJson";
+                    data: string[];
+                    driverParam: string;
+                    notNull: true;
+                    hasDefault: false;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: undefined;
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+                createdAt: drizzle_orm_mysql_core.MySqlColumn<{
+                    name: "created_at";
+                    tableName: string;
+                    dataType: "date";
+                    columnType: "MySqlTimestamp";
+                    data: Date;
+                    driverParam: string | number;
+                    notNull: true;
+                    hasDefault: true;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: undefined;
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+                updatedAt: drizzle_orm_mysql_core.MySqlColumn<{
+                    name: "updated_at";
+                    tableName: string;
+                    dataType: "date";
+                    columnType: "MySqlTimestamp";
+                    data: Date;
+                    driverParam: string | number;
+                    notNull: true;
+                    hasDefault: true;
+                    isPrimaryKey: false;
+                    isAutoincrement: false;
+                    hasRuntimeDefault: false;
+                    enumValues: undefined;
+                    baseColumn: never;
+                    identity: undefined;
+                    generated: undefined;
+                }, object>;
+            };
+            dialect: "mysql";
+        }>;
+    };
+    relations: {
+        twoFactorRelations: drizzle_orm.Relations<string, {
+            user: drizzle_orm.One<U["_"]["name"], true>;
+        }>;
+    };
+};
+type Tables = ReturnType<typeof createTwoFactorTables>['tables'];
+interface CreateTwoFactorAdapterOptions {
+    db: any;
+    tables: Tables;
+}
+declare function createTwoFactorAdapter(opts: CreateTwoFactorAdapterOptions): TwoFactorAdapter;
+
+export { type CreateTwoFactorAdapterOptions, type CreateTwoFactorTablesOptions, type MysqlUsersTable, createTwoFactorAdapter, createTwoFactorTables };

package/dist/mysql/index.js

@@ -0,0 +1,69 @@
+import { mysqlTable, timestamp, json, boolean, varchar } from 'drizzle-orm/mysql-core';
+import { relations, eq } from 'drizzle-orm';
+
+// src/mysql/index.ts
+function createTwoFactorTables(opts) {
+  const { usersTable, prefix = "holeauth_2fa_" } = opts;
+  const p = (s) => `${prefix}${s}`;
+  const twoFactor = mysqlTable(p("credential"), {
+    userId: varchar("user_id", { length: 191 }).primaryKey().references(() => usersTable.id, { onDelete: "cascade" }),
+    secret: varchar("secret", { length: 191 }).notNull(),
+    enabled: boolean("enabled").notNull().default(false),
+    recoveryCodes: json("recovery_codes").$type().notNull(),
+    createdAt: timestamp("created_at", { fsp: 3 }).notNull().defaultNow(),
+    updatedAt: timestamp("updated_at", { fsp: 3 }).notNull().defaultNow()
+  });
+  const twoFactorRelations = relations(twoFactor, ({ one }) => ({
+    user: one(usersTable, { fields: [twoFactor.userId], references: [usersTable.id] })
+  }));
+  return { tables: { twoFactor }, relations: { twoFactorRelations } };
+}
+var rowToRecord = (r) => ({
+  userId: String(r.userId),
+  secret: String(r.secret),
+  enabled: Boolean(r.enabled),
+  recoveryCodes: r.recoveryCodes ?? [],
+  createdAt: r.createdAt,
+  updatedAt: r.updatedAt
+});
+function createTwoFactorAdapter(opts) {
+  const { db, tables } = opts;
+  const { twoFactor } = tables;
+  return {
+    async getByUserId(userId) {
+      const rows = await db.select().from(twoFactor).where(eq(twoFactor.userId, userId)).limit(1);
+      return rows[0] ? rowToRecord(rows[0]) : null;
+    },
+    async upsert(record) {
+      await db.insert(twoFactor).values({
+        userId: record.userId,
+        secret: record.secret,
+        enabled: record.enabled,
+        recoveryCodes: record.recoveryCodes
+      }).onDuplicateKeyUpdate({
+        set: {
+          secret: record.secret,
+          enabled: record.enabled,
+          recoveryCodes: record.recoveryCodes,
+          updatedAt: /* @__PURE__ */ new Date()
+        }
+      });
+      const rows = await db.select().from(twoFactor).where(eq(twoFactor.userId, record.userId)).limit(1);
+      return rowToRecord(rows[0]);
+    },
+    async update(userId, patch) {
+      const toSet = { ...patch, updatedAt: /* @__PURE__ */ new Date() };
+      delete toSet.userId;
+      await db.update(twoFactor).set(toSet).where(eq(twoFactor.userId, userId));
+      const rows = await db.select().from(twoFactor).where(eq(twoFactor.userId, userId)).limit(1);
+      return rows[0] ? rowToRecord(rows[0]) : null;
+    },
+    async delete(userId) {
+      await db.delete(twoFactor).where(eq(twoFactor.userId, userId));
+    }
+  };
+}
+
+export { createTwoFactorAdapter, createTwoFactorTables };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/mysql/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/mysql/index.ts"],"names":[],"mappings":";;;;AAmBO,SAAS,sBAAiD,IAAA,EAAuC;AACtG,EAAA,MAAM,EAAE,UAAA,EAAY,MAAA,GAAS,eAAA,EAAgB,GAAI,IAAA;AACjD,EAAA,MAAM,IAAI,CAAC,CAAA,KAAc,CAAA,EAAG,MAAM,GAAG,CAAC,CAAA,CAAA;AACtC,EAAA,MAAM,SAAA,GAAY,UAAA,CAAW,CAAA,CAAE,YAAY,CAAA,EAAG;AAAA,IAC5C,QAAQ,OAAA,CAAQ,SAAA,EAAW,EAAE,MAAA,EAAQ,KAAK,CAAA,CACvC,UAAA,EAAW,CACX,WAAW,MAAM,UAAA,CAAW,IAAI,EAAE,QAAA,EAAU,WAAW,CAAA;AAAA,IAC1D,MAAA,EAAQ,QAAQ,QAAA,EAAU,EAAE,QAAQ,GAAA,EAAK,EAAE,OAAA,EAAQ;AAAA,IACnD,SAAS,OAAA,CAAQ,SAAS,EAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK,CAAA;AAAA,IACnD,eAAe,IAAA,CAAK,gBAAgB,CAAA,CAAE,KAAA,GAAkB,OAAA,EAAQ;AAAA,IAChE,SAAA,EAAW,SAAA,CAAU,YAAA,EAAc,EAAE,GAAA,EAAK,GAAG,CAAA,CAAE,OAAA,EAAQ,CAAE,UAAA,EAAW;AAAA,IACpE,SAAA,EAAW,SAAA,CAAU,YAAA,EAAc,EAAE,GAAA,EAAK,GAAG,CAAA,CAAE,OAAA,EAAQ,CAAE,UAAA;AAAW,GACrE,CAAA;AACD,EAAA,MAAM,qBAAqB,SAAA,CAAU,SAAA,EAAW,CAAC,EAAE,KAAI,MAAO;AAAA,IAC5D,IAAA,EAAM,GAAA,CAAI,UAAA,EAAY,EAAE,QAAQ,CAAC,SAAA,CAAU,MAAM,CAAA,EAAG,UAAA,EAAY,CAAC,UAAA,CAAW,EAAE,GAAG;AAAA,GACnF,CAAE,CAAA;AACF,EAAA,OAAO,EAAE,QAAQ,EAAE,SAAA,IAAa,SAAA,EAAW,EAAE,oBAAmB,EAAE;AACpE;AAUA,IAAM,WAAA,GAAc,CAAC,CAAA,MAAiD;AAAA,EACpE,MAAA,EAAQ,MAAA,CAAO,CAAA,CAAE,MAAM,CAAA;AAAA,EACvB,MAAA,EAAQ,MAAA,CAAO,CAAA,CAAE,MAAM,CAAA;AAAA,EACvB,OAAA,EAAS,OAAA,CAAQ,CAAA,CAAE,OAAO,CAAA;AAAA,EAC1B,aAAA,EAAgB,CAAA,CAAE,aAAA,IAAiD,EAAC;AAAA,EACpE,WAAW,CAAA,CAAE,SAAA;AAAA,EACb,WAAW,CAAA,CAAE;AACf,CAAA,CAAA;AAEO,SAAS,uBAAuB,IAAA,EAAuD;AAC5F,EAAA,MAAM,EAAE,EAAA,EAAI,MAAA,EAAO,GAAI,IAAA;AACvB,EAAA,MAAM,EAAE,WAAU,GAAI,MAAA;AACtB,EAAA,OAAO;AAAA,IACL,MAAM,YAAY,MAAA,EAAQ;AACxB,MAAA,MAAM,OAAO,MAAM,EAAA,CAAG,MAAA,EAAO,CAAE,KAAK,SAAS,CAAA,CAAE,KAAA,CAAM,EAAA,CAAG,UAAU,MAAA,EAAQ,MAAM,CAAC,CAAA,CAAE,MAAM,CAAC,CAAA;AAC1F,MAAA,OAAO,KAAK,CAAC,CAAA,GAAI,YAAY,IAAA,CAAK,CAAC,CAA4B,CAAA,GAAI,IAAA;AAAA,IACrE,CAAA;AAAA,IACA,MAAM,OAAO,MAAA,EAAQ;AACnB,MAAA,MAAM,EAAA,CACH,MAAA,CAAO,SAAS,CAAA,CAChB,MAAA,CAAO;AAAA,QACN,QAAQ,MAAA,CAAO,MAAA;AAAA,QACf,QAAQ,MAAA,CAAO,MAAA;AAAA,QACf,SAAS,MAAA,CAAO,OAAA;AAAA,QAChB,eAAe,MAAA,CAAO;AAAA,OACvB,EACA,oBAAA,CAAqB;AAAA,QACpB,GAAA,EAAK;AAAA,UACH,QAAQ,MAAA,CAAO,MAAA;AAAA,UACf,SAAS,MAAA,CAAO,OAAA;AAAA,UAChB,eAAe,MAAA,CAAO,aAAA;AAAA,UACtB,SAAA,sBAAe,IAAA;AAAK;AACtB,OACD,CAAA;AACH,MAAA,MAAM,OAAO,MAAM,EAAA,CAAG,MAAA,EAAO,CAAE,KAAK,SAAS,CAAA,CAAE,KAAA,CAAM,EAAA,CAAG,UAAU,MAAA,EAAQ,MAAA,CAAO,MAAM,CAAC,CAAA,CAAE,MAAM,CAAC,CAAA;AACjG,MAAA,OAAO,WAAA,CAAY,IAAA,CAAK,CAAC,CAA4B,CAAA;AAAA,IACvD,CAAA;AAAA,IACA,MAAM,MAAA,CAAO,MAAA,EAAQ,KAAA,EAAO;AAC1B,MAAA,MAAM,QAAiC,EAAE,GAAG,OAAO,SAAA,kBAAW,IAAI,MAAK,EAAE;AACzE,MAAA,OAAO,KAAA,CAAM,MAAA;AACb,MAAA,MAAM,EAAA,CAAG,MAAA,CAAO,SAAS,CAAA,CAAE,GAAA,CAAI,KAAK,CAAA,CAAE,KAAA,CAAM,EAAA,CAAG,SAAA,CAAU,MAAA,EAAQ,MAAM,CAAC,CAAA;AACxE,MAAA,MAAM,OAAO,MAAM,EAAA,CAAG,MAAA,EAAO,CAAE,KAAK,SAAS,CAAA,CAAE,KAAA,CAAM,EAAA,CAAG,UAAU,MAAA,EAAQ,MAAM,CAAC,CAAA,CAAE,MAAM,CAAC,CAAA;AAC1F,MAAA,OAAO,KAAK,CAAC,CAAA,GAAI,YAAY,IAAA,CAAK,CAAC,CAA4B,CAAA,GAAI,IAAA;AAAA,IACrE,CAAA;AAAA,IACA,MAAM,OAAO,MAAA,EAAQ;AACnB,MAAA,MAAM,EAAA,CAAG,OAAO,SAAS,CAAA,CAAE,MAAM,EAAA,CAAG,SAAA,CAAU,MAAA,EAAQ,MAAM,CAAC,CAAA;AAAA,IAC/D;AAAA,GACF;AACF","file":"index.js","sourcesContent":["import {\n  mysqlTable,\n  varchar,\n  timestamp,\n  boolean,\n  json,\n  type MySqlTableWithColumns,\n} from 'drizzle-orm/mysql-core';\nimport { relations, eq } from 'drizzle-orm';\nimport type { TwoFactorAdapter, TwoFactorRecord } from '@holeauth/plugin-2fa';\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport type MysqlUsersTable = MySqlTableWithColumns<any> & { id: any };\n\nexport interface CreateTwoFactorTablesOptions<U extends MysqlUsersTable> {\n  usersTable: U;\n  prefix?: string;\n}\n\nexport function createTwoFactorTables<U extends MysqlUsersTable>(opts: CreateTwoFactorTablesOptions<U>) {\n  const { usersTable, prefix = 'holeauth_2fa_' } = opts;\n  const p = (s: string) => `${prefix}${s}`;\n  const twoFactor = mysqlTable(p('credential'), {\n    userId: varchar('user_id', { length: 191 })\n      .primaryKey()\n      .references(() => usersTable.id, { onDelete: 'cascade' }),\n    secret: varchar('secret', { length: 191 }).notNull(),\n    enabled: boolean('enabled').notNull().default(false),\n    recoveryCodes: json('recovery_codes').$type<string[]>().notNull(),\n    createdAt: timestamp('created_at', { fsp: 3 }).notNull().defaultNow(),\n    updatedAt: timestamp('updated_at', { fsp: 3 }).notNull().defaultNow(),\n  });\n  const twoFactorRelations = relations(twoFactor, ({ one }) => ({\n    user: one(usersTable, { fields: [twoFactor.userId], references: [usersTable.id] }),\n  }));\n  return { tables: { twoFactor }, relations: { twoFactorRelations } };\n}\n\ntype Tables = ReturnType<typeof createTwoFactorTables>['tables'];\n\nexport interface CreateTwoFactorAdapterOptions {\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  db: any;\n  tables: Tables;\n}\n\nconst rowToRecord = (r: Record<string, unknown>): TwoFactorRecord => ({\n  userId: String(r.userId),\n  secret: String(r.secret),\n  enabled: Boolean(r.enabled),\n  recoveryCodes: (r.recoveryCodes as string[] | null | undefined) ?? [],\n  createdAt: r.createdAt as Date | undefined,\n  updatedAt: r.updatedAt as Date | undefined,\n});\n\nexport function createTwoFactorAdapter(opts: CreateTwoFactorAdapterOptions): TwoFactorAdapter {\n  const { db, tables } = opts;\n  const { twoFactor } = tables;\n  return {\n    async getByUserId(userId) {\n      const rows = await db.select().from(twoFactor).where(eq(twoFactor.userId, userId)).limit(1);\n      return rows[0] ? rowToRecord(rows[0] as Record<string, unknown>) : null;\n    },\n    async upsert(record) {\n      await db\n        .insert(twoFactor)\n        .values({\n          userId: record.userId,\n          secret: record.secret,\n          enabled: record.enabled,\n          recoveryCodes: record.recoveryCodes,\n        })\n        .onDuplicateKeyUpdate({\n          set: {\n            secret: record.secret,\n            enabled: record.enabled,\n            recoveryCodes: record.recoveryCodes,\n            updatedAt: new Date(),\n          },\n        });\n      const rows = await db.select().from(twoFactor).where(eq(twoFactor.userId, record.userId)).limit(1);\n      return rowToRecord(rows[0] as Record<string, unknown>);\n    },\n    async update(userId, patch) {\n      const toSet: Record<string, unknown> = { ...patch, updatedAt: new Date() };\n      delete toSet.userId;\n      await db.update(twoFactor).set(toSet).where(eq(twoFactor.userId, userId));\n      const rows = await db.select().from(twoFactor).where(eq(twoFactor.userId, userId)).limit(1);\n      return rows[0] ? rowToRecord(rows[0] as Record<string, unknown>) : null;\n    },\n    async delete(userId) {\n      await db.delete(twoFactor).where(eq(twoFactor.userId, userId));\n    },\n  };\n}\n"]}

package/dist/pg/index.cjs

@@ -0,0 +1,71 @@
+'use strict';
+
+var pgCore = require('drizzle-orm/pg-core');
+var drizzleOrm = require('drizzle-orm');
+
+// src/pg/index.ts
+function createTwoFactorTables(opts) {
+  const { usersTable, prefix = "holeauth_2fa_" } = opts;
+  const p = (s) => `${prefix}${s}`;
+  const twoFactor = pgCore.pgTable(p("credential"), {
+    userId: pgCore.text("user_id").primaryKey().references(() => usersTable.id, { onDelete: "cascade" }),
+    secret: pgCore.text("secret").notNull(),
+    enabled: pgCore.boolean("enabled").notNull().default(false),
+    recoveryCodes: pgCore.text("recovery_codes").array().notNull().default([]),
+    createdAt: pgCore.timestamp("created_at", { withTimezone: true, mode: "date" }).notNull().defaultNow(),
+    updatedAt: pgCore.timestamp("updated_at", { withTimezone: true, mode: "date" }).notNull().defaultNow()
+  });
+  const twoFactorRelations = drizzleOrm.relations(twoFactor, ({ one }) => ({
+    user: one(usersTable, { fields: [twoFactor.userId], references: [usersTable.id] })
+  }));
+  return { tables: { twoFactor }, relations: { twoFactorRelations } };
+}
+var rowToRecord = (r) => ({
+  userId: String(r.userId),
+  secret: String(r.secret),
+  enabled: Boolean(r.enabled),
+  recoveryCodes: r.recoveryCodes ?? [],
+  createdAt: r.createdAt,
+  updatedAt: r.updatedAt
+});
+function createTwoFactorAdapter(opts) {
+  const { db, tables } = opts;
+  const { twoFactor } = tables;
+  return {
+    async getByUserId(userId) {
+      const rows = await db.select().from(twoFactor).where(drizzleOrm.eq(twoFactor.userId, userId)).limit(1);
+      return rows[0] ? rowToRecord(rows[0]) : null;
+    },
+    async upsert(record) {
+      const [row] = await db.insert(twoFactor).values({
+        userId: record.userId,
+        secret: record.secret,
+        enabled: record.enabled,
+        recoveryCodes: record.recoveryCodes
+      }).onConflictDoUpdate({
+        target: twoFactor.userId,
+        set: {
+          secret: record.secret,
+          enabled: record.enabled,
+          recoveryCodes: record.recoveryCodes,
+          updatedAt: /* @__PURE__ */ new Date()
+        }
+      }).returning();
+      return rowToRecord(row);
+    },
+    async update(userId, patch) {
+      const toSet = { ...patch, updatedAt: /* @__PURE__ */ new Date() };
+      delete toSet.userId;
+      const [row] = await db.update(twoFactor).set(toSet).where(drizzleOrm.eq(twoFactor.userId, userId)).returning();
+      return row ? rowToRecord(row) : null;
+    },
+    async delete(userId) {
+      await db.delete(twoFactor).where(drizzleOrm.eq(twoFactor.userId, userId));
+    }
+  };
+}
+
+exports.createTwoFactorAdapter = createTwoFactorAdapter;
+exports.createTwoFactorTables = createTwoFactorTables;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/pg/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/pg/index.ts"],"names":["pgTable","text","boolean","timestamp","relations","eq"],"mappings":";;;;;;AAYO,SAAS,sBAA8C,IAAA,EAAuC;AACnG,EAAA,MAAM,EAAE,UAAA,EAAY,MAAA,GAAS,eAAA,EAAgB,GAAI,IAAA;AACjD,EAAA,MAAM,IAAI,CAAC,CAAA,KAAc,CAAA,EAAG,MAAM,GAAG,CAAC,CAAA,CAAA;AAEtC,EAAA,MAAM,SAAA,GAAYA,cAAA,CAAQ,CAAA,CAAE,YAAY,CAAA,EAAG;AAAA,IACzC,MAAA,EAAQC,WAAA,CAAK,SAAS,CAAA,CACnB,UAAA,EAAW,CACX,UAAA,CAAW,MAAM,UAAA,CAAW,EAAA,EAAI,EAAE,QAAA,EAAU,WAAW,CAAA;AAAA,IAC1D,MAAA,EAAQA,WAAA,CAAK,QAAQ,CAAA,CAAE,OAAA,EAAQ;AAAA,IAC/B,SAASC,cAAA,CAAQ,SAAS,EAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK,CAAA;AAAA,IACnD,aAAA,EAAeD,WAAA,CAAK,gBAAgB,CAAA,CAAE,KAAA,GAAQ,OAAA,EAAQ,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,IAClE,SAAA,EAAWE,gBAAA,CAAU,YAAA,EAAc,EAAE,YAAA,EAAc,IAAA,EAAM,IAAA,EAAM,MAAA,EAAQ,CAAA,CAAE,OAAA,EAAQ,CAAE,UAAA,EAAW;AAAA,IAC9F,SAAA,EAAWA,gBAAA,CAAU,YAAA,EAAc,EAAE,YAAA,EAAc,IAAA,EAAM,IAAA,EAAM,MAAA,EAAQ,CAAA,CAAE,OAAA,EAAQ,CAAE,UAAA;AAAW,GAC/F,CAAA;AAED,EAAA,MAAM,qBAAqBC,oBAAA,CAAU,SAAA,EAAW,CAAC,EAAE,KAAI,MAAO;AAAA,IAC5D,IAAA,EAAM,GAAA,CAAI,UAAA,EAAY,EAAE,QAAQ,CAAC,SAAA,CAAU,MAAM,CAAA,EAAG,UAAA,EAAY,CAAC,UAAA,CAAW,EAAE,GAAG;AAAA,GACnF,CAAE,CAAA;AAEF,EAAA,OAAO,EAAE,QAAQ,EAAE,SAAA,IAAa,SAAA,EAAW,EAAE,oBAAmB,EAAE;AACpE;AAUA,IAAM,WAAA,GAAc,CAAC,CAAA,MAAiD;AAAA,EACpE,MAAA,EAAQ,MAAA,CAAO,CAAA,CAAE,MAAM,CAAA;AAAA,EACvB,MAAA,EAAQ,MAAA,CAAO,CAAA,CAAE,MAAM,CAAA;AAAA,EACvB,OAAA,EAAS,OAAA,CAAQ,CAAA,CAAE,OAAO,CAAA;AAAA,EAC1B,aAAA,EAAgB,CAAA,CAAE,aAAA,IAAiD,EAAC;AAAA,EACpE,WAAW,CAAA,CAAE,SAAA;AAAA,EACb,WAAW,CAAA,CAAE;AACf,CAAA,CAAA;AAEO,SAAS,uBAAuB,IAAA,EAAuD;AAC5F,EAAA,MAAM,EAAE,EAAA,EAAI,MAAA,EAAO,GAAI,IAAA;AACvB,EAAA,MAAM,EAAE,WAAU,GAAI,MAAA;AACtB,EAAA,OAAO;AAAA,IACL,MAAM,YAAY,MAAA,EAAQ;AACxB,MAAA,MAAM,OAAO,MAAM,EAAA,CAAG,MAAA,EAAO,CAAE,KAAK,SAAS,CAAA,CAAE,KAAA,CAAMC,aAAA,CAAG,UAAU,MAAA,EAAQ,MAAM,CAAC,CAAA,CAAE,MAAM,CAAC,CAAA;AAC1F,MAAA,OAAO,KAAK,CAAC,CAAA,GAAI,YAAY,IAAA,CAAK,CAAC,CAAC,CAAA,GAAI,IAAA;AAAA,IAC1C,CAAA;AAAA,IACA,MAAM,OAAO,MAAA,EAAQ;AACnB,MAAA,MAAM,CAAC,GAAG,CAAA,GAAI,MAAM,GACjB,MAAA,CAAO,SAAS,EAChB,MAAA,CAAO;AAAA,QACN,QAAQ,MAAA,CAAO,MAAA;AAAA,QACf,QAAQ,MAAA,CAAO,MAAA;AAAA,QACf,SAAS,MAAA,CAAO,OAAA;AAAA,QAChB,eAAe,MAAA,CAAO;AAAA,OACvB,EACA,kBAAA,CAAmB;AAAA,QAClB,QAAQ,SAAA,CAAU,MAAA;AAAA,QAClB,GAAA,EAAK;AAAA,UACH,QAAQ,MAAA,CAAO,MAAA;AAAA,UACf,SAAS,MAAA,CAAO,OAAA;AAAA,UAChB,eAAe,MAAA,CAAO,aAAA;AAAA,UACtB,SAAA,sBAAe,IAAA;AAAK;AACtB,OACD,EACA,SAAA,EAAU;AACb,MAAA,OAAO,YAAY,GAAG,CAAA;AAAA,IACxB,CAAA;AAAA,IACA,MAAM,MAAA,CAAO,MAAA,EAAQ,KAAA,EAAO;AAC1B,MAAA,MAAM,QAAiC,EAAE,GAAG,OAAO,SAAA,kBAAW,IAAI,MAAK,EAAE;AACzE,MAAA,OAAO,KAAA,CAAM,MAAA;AACb,MAAA,MAAM,CAAC,GAAG,CAAA,GAAI,MAAM,EAAA,CAAG,MAAA,CAAO,SAAS,CAAA,CAAE,GAAA,CAAI,KAAK,CAAA,CAAE,MAAMA,aAAA,CAAG,SAAA,CAAU,QAAQ,MAAM,CAAC,EAAE,SAAA,EAAU;AAClG,MAAA,OAAO,GAAA,GAAM,WAAA,CAAY,GAAG,CAAA,GAAI,IAAA;AAAA,IAClC,CAAA;AAAA,IACA,MAAM,OAAO,MAAA,EAAQ;AACnB,MAAA,MAAM,EAAA,CAAG,OAAO,SAAS,CAAA,CAAE,MAAMA,aAAA,CAAG,SAAA,CAAU,MAAA,EAAQ,MAAM,CAAC,CAAA;AAAA,IAC/D;AAAA,GACF;AACF","file":"index.cjs","sourcesContent":["import { pgTable, text, timestamp, boolean, type PgTableWithColumns } from 'drizzle-orm/pg-core';\nimport { relations, eq } from 'drizzle-orm';\nimport type { TwoFactorAdapter, TwoFactorRecord } from '@holeauth/plugin-2fa';\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport type PgUsersTable = PgTableWithColumns<any> & { id: any };\n\nexport interface CreateTwoFactorTablesOptions<U extends PgUsersTable> {\n  usersTable: U;\n  prefix?: string;\n}\n\nexport function createTwoFactorTables<U extends PgUsersTable>(opts: CreateTwoFactorTablesOptions<U>) {\n  const { usersTable, prefix = 'holeauth_2fa_' } = opts;\n  const p = (s: string) => `${prefix}${s}`;\n\n  const twoFactor = pgTable(p('credential'), {\n    userId: text('user_id')\n      .primaryKey()\n      .references(() => usersTable.id, { onDelete: 'cascade' }),\n    secret: text('secret').notNull(),\n    enabled: boolean('enabled').notNull().default(false),\n    recoveryCodes: text('recovery_codes').array().notNull().default([]),\n    createdAt: timestamp('created_at', { withTimezone: true, mode: 'date' }).notNull().defaultNow(),\n    updatedAt: timestamp('updated_at', { withTimezone: true, mode: 'date' }).notNull().defaultNow(),\n  });\n\n  const twoFactorRelations = relations(twoFactor, ({ one }) => ({\n    user: one(usersTable, { fields: [twoFactor.userId], references: [usersTable.id] }),\n  }));\n\n  return { tables: { twoFactor }, relations: { twoFactorRelations } };\n}\n\ntype Tables = ReturnType<typeof createTwoFactorTables>['tables'];\n\nexport interface CreateTwoFactorAdapterOptions {\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  db: any;\n  tables: Tables;\n}\n\nconst rowToRecord = (r: Record<string, unknown>): TwoFactorRecord => ({\n  userId: String(r.userId),\n  secret: String(r.secret),\n  enabled: Boolean(r.enabled),\n  recoveryCodes: (r.recoveryCodes as string[] | null | undefined) ?? [],\n  createdAt: r.createdAt as Date | undefined,\n  updatedAt: r.updatedAt as Date | undefined,\n});\n\nexport function createTwoFactorAdapter(opts: CreateTwoFactorAdapterOptions): TwoFactorAdapter {\n  const { db, tables } = opts;\n  const { twoFactor } = tables;\n  return {\n    async getByUserId(userId) {\n      const rows = await db.select().from(twoFactor).where(eq(twoFactor.userId, userId)).limit(1);\n      return rows[0] ? rowToRecord(rows[0]) : null;\n    },\n    async upsert(record) {\n      const [row] = await db\n        .insert(twoFactor)\n        .values({\n          userId: record.userId,\n          secret: record.secret,\n          enabled: record.enabled,\n          recoveryCodes: record.recoveryCodes,\n        })\n        .onConflictDoUpdate({\n          target: twoFactor.userId,\n          set: {\n            secret: record.secret,\n            enabled: record.enabled,\n            recoveryCodes: record.recoveryCodes,\n            updatedAt: new Date(),\n          },\n        })\n        .returning();\n      return rowToRecord(row);\n    },\n    async update(userId, patch) {\n      const toSet: Record<string, unknown> = { ...patch, updatedAt: new Date() };\n      delete toSet.userId;\n      const [row] = await db.update(twoFactor).set(toSet).where(eq(twoFactor.userId, userId)).returning();\n      return row ? rowToRecord(row) : null;\n    },\n    async delete(userId) {\n      await db.delete(twoFactor).where(eq(twoFactor.userId, userId));\n    },\n  };\n}\n"]}