@nodefony/drizzle 10.0.0-alpha.1

package/migrations/mysql/0000_framework_init.sql

@@ -0,0 +1,137 @@
+-- nodefony:migration format=1
+CREATE TABLE `access_token` (
+	`id` varchar(512) NOT NULL,
+	`kind` text NOT NULL,
+	`name` text NOT NULL,
+	`prefix` text,
+	`subjectId` varchar(512) NOT NULL,
+	`subjectType` text NOT NULL,
+	`tenantId` text,
+	`scopes` json NOT NULL,
+	`audience` json NOT NULL,
+	`resources` json,
+	`secretHash` varchar(512) NOT NULL,
+	`hashAlg` text NOT NULL,
+	`clientId` text,
+	`cnf` text,
+	`family` varchar(512),
+	`replacedBy` text,
+	`createdAt` bigint NOT NULL,
+	`expiresAt` bigint,
+	`lastUsedAt` bigint,
+	`lastUsedIp` text,
+	`lastUsedUserAgent` text,
+	`revokedAt` bigint,
+	`revokedReason` text,
+	`metadata` json NOT NULL,
+	CONSTRAINT `access_token_id` PRIMARY KEY(`id`),
+	CONSTRAINT `access_token_secretHash_unique` UNIQUE(`secretHash`)
+);
+--> statement-breakpoint
+CREATE TABLE `audit_event` (
+	`id` varchar(512) NOT NULL,
+	`ts` bigint NOT NULL,
+	`category` varchar(512) NOT NULL,
+	`action` text NOT NULL,
+	`outcome` text NOT NULL,
+	`actor` varchar(512),
+	`resource` text,
+	`reason` text,
+	`ip` text,
+	`userAgent` text,
+	`requestId` varchar(512),
+	`flags` json,
+	`metadata` json,
+	CONSTRAINT `audit_event_id` PRIMARY KEY(`id`)
+);
+--> statement-breakpoint
+CREATE TABLE `denied_jti` (
+	`jti` varchar(512) NOT NULL,
+	`expiresAt` bigint NOT NULL,
+	CONSTRAINT `denied_jti_jti` PRIMARY KEY(`jti`)
+);
+--> statement-breakpoint
+CREATE TABLE `idempotency_key` (
+	`key` varchar(512) NOT NULL,
+	`fingerprint` text NOT NULL,
+	`state` varchar(64) NOT NULL,
+	`response` json,
+	`expiresAt` bigint NOT NULL,
+	CONSTRAINT `idempotency_key_key` PRIMARY KEY(`key`),
+	CONSTRAINT `idempotency_key_state_check` CHECK(`state` IN ('if', 'done'))
+);
+--> statement-breakpoint
+CREATE TABLE `session` (
+	`session_id` varchar(512) NOT NULL,
+	`Attributes` json,
+	`flashBag` json,
+	`metaBag` json,
+	`user` varchar(512),
+	`createdAt` bigint NOT NULL,
+	`updatedAt` bigint NOT NULL,
+	CONSTRAINT `session_session_id` PRIMARY KEY(`session_id`)
+);
+--> statement-breakpoint
+CREATE TABLE `subject_revocation` (
+	`subjectId` varchar(512) NOT NULL,
+	`invalidBefore` bigint NOT NULL,
+	CONSTRAINT `subject_revocation_subjectId` PRIMARY KEY(`subjectId`)
+);
+--> statement-breakpoint
+CREATE TABLE `totp_secret` (
+	`userId` varchar(512) NOT NULL,
+	`secretEnc` text NOT NULL,
+	`algorithm` text NOT NULL,
+	`digits` int NOT NULL,
+	`period` int NOT NULL,
+	`recoveryCodes` json NOT NULL,
+	`confirmedAt` bigint,
+	`lastUsedStep` bigint,
+	`createdAt` bigint NOT NULL,
+	`lastUsedAt` bigint,
+	CONSTRAINT `totp_secret_userId` PRIMARY KEY(`userId`)
+);
+--> statement-breakpoint
+CREATE TABLE `webauthn_credential` (
+	`id` varchar(512) NOT NULL,
+	`userId` varchar(512) NOT NULL,
+	`publicKey` text NOT NULL,
+	`signCount` bigint NOT NULL,
+	`transports` json NOT NULL,
+	`backupEligible` boolean NOT NULL,
+	`backupState` boolean NOT NULL,
+	`uvInitialized` boolean NOT NULL,
+	`nickname` text,
+	`createdAt` bigint NOT NULL,
+	`lastUsedAt` bigint,
+	CONSTRAINT `webauthn_credential_id` PRIMARY KEY(`id`)
+);
+--> statement-breakpoint
+CREATE TABLE `webhook_endpoint` (
+	`id` varchar(512) NOT NULL,
+	`url` text NOT NULL,
+	`secretEnc` text NOT NULL,
+	`events` json NOT NULL,
+	`enabled` boolean NOT NULL,
+	`description` text,
+	`tenantId` text,
+	`createdBy` text,
+	`createdAt` bigint NOT NULL,
+	`updatedAt` bigint NOT NULL,
+	`lastDeliveryAt` bigint,
+	`lastDeliveryStatus` int,
+	`lastDeliveryError` text,
+	`failureCount` int NOT NULL,
+	`metadata` json NOT NULL,
+	CONSTRAINT `webhook_endpoint_id` PRIMARY KEY(`id`)
+);
+--> statement-breakpoint
+CREATE INDEX `access_token_subjectId_idx` ON `access_token` (`subjectId`);--> statement-breakpoint
+CREATE INDEX `access_token_family_idx` ON `access_token` (`family`);--> statement-breakpoint
+CREATE INDEX `audit_event_ts_idx` ON `audit_event` (`ts`);--> statement-breakpoint
+CREATE INDEX `audit_event_category_idx` ON `audit_event` (`category`);--> statement-breakpoint
+CREATE INDEX `audit_event_actor_idx` ON `audit_event` (`actor`);--> statement-breakpoint
+CREATE INDEX `audit_event_requestId_idx` ON `audit_event` (`requestId`);--> statement-breakpoint
+CREATE INDEX `idempotency_key_expiresAt_idx` ON `idempotency_key` (`expiresAt`);--> statement-breakpoint
+CREATE INDEX `session_user_idx` ON `session` (`user`);--> statement-breakpoint
+CREATE INDEX `webauthn_credential_userId_idx` ON `webauthn_credential` (`userId`);

package/migrations/mysql/meta/_journal.json

@@ -0,0 +1,13 @@
+{
+  "version": "7",
+  "dialect": "mysql",
+  "entries": [
+    {
+      "idx": 0,
+      "version": "5",
+      "when": 1788277073654,
+      "tag": "0000_framework_init",
+      "breakpoints": true
+    }
+  ]
+}

package/migrations/postgres/0000_framework_init.sql

@@ -0,0 +1,128 @@
+-- nodefony:migration format=1
+CREATE TABLE "access_token" (
+	"id" text PRIMARY KEY NOT NULL,
+	"kind" text NOT NULL,
+	"name" text NOT NULL,
+	"prefix" text,
+	"subjectId" text NOT NULL,
+	"subjectType" text NOT NULL,
+	"tenantId" text,
+	"scopes" jsonb NOT NULL,
+	"audience" jsonb NOT NULL,
+	"resources" jsonb,
+	"secretHash" text NOT NULL,
+	"hashAlg" text NOT NULL,
+	"clientId" text,
+	"cnf" text,
+	"family" text,
+	"replacedBy" text,
+	"createdAt" bigint NOT NULL,
+	"expiresAt" bigint,
+	"lastUsedAt" bigint,
+	"lastUsedIp" text,
+	"lastUsedUserAgent" text,
+	"revokedAt" bigint,
+	"revokedReason" text,
+	"metadata" jsonb NOT NULL,
+	CONSTRAINT "access_token_secretHash_unique" UNIQUE("secretHash")
+);
+--> statement-breakpoint
+CREATE TABLE "audit_event" (
+	"id" text PRIMARY KEY NOT NULL,
+	"ts" bigint NOT NULL,
+	"category" text NOT NULL,
+	"action" text NOT NULL,
+	"outcome" text NOT NULL,
+	"actor" text,
+	"resource" text,
+	"reason" text,
+	"ip" text,
+	"userAgent" text,
+	"requestId" text,
+	"flags" jsonb,
+	"metadata" jsonb
+);
+--> statement-breakpoint
+CREATE TABLE "denied_jti" (
+	"jti" text PRIMARY KEY NOT NULL,
+	"expiresAt" bigint NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "idempotency_key" (
+	"key" text PRIMARY KEY NOT NULL,
+	"fingerprint" text NOT NULL,
+	"state" text NOT NULL,
+	"response" jsonb,
+	"expiresAt" bigint NOT NULL,
+	CONSTRAINT "idempotency_key_state_check" CHECK ("state" IN ('if', 'done'))
+);
+--> statement-breakpoint
+CREATE TABLE "session" (
+	"session_id" text PRIMARY KEY NOT NULL,
+	"Attributes" jsonb,
+	"flashBag" jsonb,
+	"metaBag" jsonb,
+	"user" text,
+	"createdAt" bigint NOT NULL,
+	"updatedAt" bigint NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "subject_revocation" (
+	"subjectId" text PRIMARY KEY NOT NULL,
+	"invalidBefore" bigint NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "totp_secret" (
+	"userId" text PRIMARY KEY NOT NULL,
+	"secretEnc" text NOT NULL,
+	"algorithm" text NOT NULL,
+	"digits" integer NOT NULL,
+	"period" integer NOT NULL,
+	"recoveryCodes" jsonb NOT NULL,
+	"confirmedAt" bigint,
+	"lastUsedStep" bigint,
+	"createdAt" bigint NOT NULL,
+	"lastUsedAt" bigint
+);
+--> statement-breakpoint
+CREATE TABLE "webauthn_credential" (
+	"id" text PRIMARY KEY NOT NULL,
+	"userId" text NOT NULL,
+	"publicKey" text NOT NULL,
+	"signCount" bigint NOT NULL,
+	"transports" jsonb NOT NULL,
+	"backupEligible" boolean NOT NULL,
+	"backupState" boolean NOT NULL,
+	"uvInitialized" boolean NOT NULL,
+	"nickname" text,
+	"createdAt" bigint NOT NULL,
+	"lastUsedAt" bigint
+);
+--> statement-breakpoint
+CREATE TABLE "webhook_endpoint" (
+	"id" text PRIMARY KEY NOT NULL,
+	"url" text NOT NULL,
+	"secretEnc" text NOT NULL,
+	"events" jsonb NOT NULL,
+	"enabled" boolean NOT NULL,
+	"description" text,
+	"tenantId" text,
+	"createdBy" text,
+	"createdAt" bigint NOT NULL,
+	"updatedAt" bigint NOT NULL,
+	"lastDeliveryAt" bigint,
+	"lastDeliveryStatus" integer,
+	"lastDeliveryError" text,
+	"failureCount" integer NOT NULL,
+	"metadata" jsonb NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX "access_token_subjectId_idx" ON "access_token" USING btree ("subjectId");--> statement-breakpoint
+CREATE INDEX "access_token_family_idx" ON "access_token" USING btree ("family");--> statement-breakpoint
+CREATE INDEX "audit_event_ts_idx" ON "audit_event" USING btree ("ts");--> statement-breakpoint
+CREATE INDEX "audit_event_category_idx" ON "audit_event" USING btree ("category");--> statement-breakpoint
+CREATE INDEX "audit_event_actor_idx" ON "audit_event" USING btree ("actor");--> statement-breakpoint
+CREATE INDEX "audit_event_requestId_idx" ON "audit_event" USING btree ("requestId");--> statement-breakpoint
+CREATE INDEX "idempotency_key_expiresAt_idx" ON "idempotency_key" USING btree ("expiresAt");--> statement-breakpoint
+CREATE INDEX "session_user_idx" ON "session" USING btree ("user");--> statement-breakpoint
+CREATE INDEX "webauthn_credential_userId_idx" ON "webauthn_credential" USING btree ("userId");

package/migrations/postgres/meta/_journal.json

@@ -0,0 +1,13 @@
+{
+  "version": "7",
+  "dialect": "postgresql",
+  "entries": [
+    {
+      "idx": 0,
+      "version": "7",
+      "when": 1788277072486,
+      "tag": "0000_framework_init",
+      "breakpoints": true
+    }
+  ]
+}

package/migrations/sqlite/0000_framework_init.sql

@@ -0,0 +1,127 @@
+-- nodefony:migration format=1
+CREATE TABLE `access_token` (
+	`id` text PRIMARY KEY NOT NULL,
+	`kind` text NOT NULL,
+	`name` text NOT NULL,
+	`prefix` text,
+	`subjectId` text NOT NULL,
+	`subjectType` text NOT NULL,
+	`tenantId` text,
+	`scopes` text NOT NULL,
+	`audience` text NOT NULL,
+	`resources` text,
+	`secretHash` text NOT NULL,
+	`hashAlg` text NOT NULL,
+	`clientId` text,
+	`cnf` text,
+	`family` text,
+	`replacedBy` text,
+	`createdAt` integer NOT NULL,
+	`expiresAt` integer,
+	`lastUsedAt` integer,
+	`lastUsedIp` text,
+	`lastUsedUserAgent` text,
+	`revokedAt` integer,
+	`revokedReason` text,
+	`metadata` text NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `access_token_secretHash_unique` ON `access_token` (`secretHash`);--> statement-breakpoint
+CREATE INDEX `access_token_subjectId_idx` ON `access_token` (`subjectId`);--> statement-breakpoint
+CREATE INDEX `access_token_family_idx` ON `access_token` (`family`);--> statement-breakpoint
+CREATE TABLE `audit_event` (
+	`id` text PRIMARY KEY NOT NULL,
+	`ts` integer NOT NULL,
+	`category` text NOT NULL,
+	`action` text NOT NULL,
+	`outcome` text NOT NULL,
+	`actor` text,
+	`resource` text,
+	`reason` text,
+	`ip` text,
+	`userAgent` text,
+	`requestId` text,
+	`flags` text,
+	`metadata` text
+);
+--> statement-breakpoint
+CREATE INDEX `audit_event_ts_idx` ON `audit_event` (`ts`);--> statement-breakpoint
+CREATE INDEX `audit_event_category_idx` ON `audit_event` (`category`);--> statement-breakpoint
+CREATE INDEX `audit_event_actor_idx` ON `audit_event` (`actor`);--> statement-breakpoint
+CREATE INDEX `audit_event_requestId_idx` ON `audit_event` (`requestId`);--> statement-breakpoint
+CREATE TABLE `denied_jti` (
+	`jti` text PRIMARY KEY NOT NULL,
+	`expiresAt` integer NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE `idempotency_key` (
+	`key` text PRIMARY KEY NOT NULL,
+	`fingerprint` text NOT NULL,
+	`state` text NOT NULL,
+	`response` text,
+	`expiresAt` integer NOT NULL,
+	CONSTRAINT "idempotency_key_state_check" CHECK("state" IN ('if', 'done'))
+);
+--> statement-breakpoint
+CREATE INDEX `idempotency_key_expiresAt_idx` ON `idempotency_key` (`expiresAt`);--> statement-breakpoint
+CREATE TABLE `session` (
+	`session_id` text PRIMARY KEY NOT NULL,
+	`Attributes` text,
+	`flashBag` text,
+	`metaBag` text,
+	`user` text,
+	`createdAt` integer NOT NULL,
+	`updatedAt` integer NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX `session_user_idx` ON `session` (`user`);--> statement-breakpoint
+CREATE TABLE `subject_revocation` (
+	`subjectId` text PRIMARY KEY NOT NULL,
+	`invalidBefore` integer NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE `totp_secret` (
+	`userId` text PRIMARY KEY NOT NULL,
+	`secretEnc` text NOT NULL,
+	`algorithm` text NOT NULL,
+	`digits` integer NOT NULL,
+	`period` integer NOT NULL,
+	`recoveryCodes` text NOT NULL,
+	`confirmedAt` integer,
+	`lastUsedStep` integer,
+	`createdAt` integer NOT NULL,
+	`lastUsedAt` integer
+);
+--> statement-breakpoint
+CREATE TABLE `webauthn_credential` (
+	`id` text PRIMARY KEY NOT NULL,
+	`userId` text NOT NULL,
+	`publicKey` text NOT NULL,
+	`signCount` integer NOT NULL,
+	`transports` text NOT NULL,
+	`backupEligible` integer NOT NULL,
+	`backupState` integer NOT NULL,
+	`uvInitialized` integer NOT NULL,
+	`nickname` text,
+	`createdAt` integer NOT NULL,
+	`lastUsedAt` integer
+);
+--> statement-breakpoint
+CREATE INDEX `webauthn_credential_userId_idx` ON `webauthn_credential` (`userId`);--> statement-breakpoint
+CREATE TABLE `webhook_endpoint` (
+	`id` text PRIMARY KEY NOT NULL,
+	`url` text NOT NULL,
+	`secretEnc` text NOT NULL,
+	`events` text NOT NULL,
+	`enabled` integer NOT NULL,
+	`description` text,
+	`tenantId` text,
+	`createdBy` text,
+	`createdAt` integer NOT NULL,
+	`updatedAt` integer NOT NULL,
+	`lastDeliveryAt` integer,
+	`lastDeliveryStatus` integer,
+	`lastDeliveryError` text,
+	`failureCount` integer NOT NULL,
+	`metadata` text NOT NULL
+);

package/migrations/sqlite/meta/_journal.json

@@ -0,0 +1,13 @@
+{
+  "version": "7",
+  "dialect": "sqlite",
+  "entries": [
+    {
+      "idx": 0,
+      "version": "6",
+      "when": 1788277071454,
+      "tag": "0000_framework_init",
+      "breakpoints": true
+    }
+  ]
+}

package/package.json

@@ -0,0 +1,126 @@
+{
+  "name": "@nodefony/drizzle",
+  "version": "10.0.0-alpha.1",
+  "description": "Moteur SQL de Nodefony sur Drizzle ORM (SQLite, PostgreSQL, MySQL) : dépôts typés, migrations de schéma et adoption d'une base existante",
+  "nodefony": {
+    "storeKind": "durable",
+    "stores": [
+      "session",
+      "user",
+      "tokens",
+      "passkeys",
+      "totp",
+      "audit",
+      "webhooks",
+      "idempotency"
+    ]
+  },
+  "contributors": [],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/types/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "start": "node dist/index.js",
+    "build": "rimraf dist && rolldown -c rolldown.config.ts && tsgo -p tsconfig.declarations.json",
+    "clean": "rimraf dist",
+    "generate:migrations": "tsx scripts/generate-migrations.ts",
+    "check:migrations": "tsx scripts/check-migrations-drift.ts",
+    "dev": "rolldown -c rolldown.config.ts --watch",
+    "test": "vitest run",
+    "coverage": "vitest run --coverage",
+    "test:load": "vitest run --config vitest.config.load.ts",
+    "typecheck": "tsgo --noEmit -p tsconfig.json && tsgo --noEmit -p tsconfig.tests.json"
+  },
+  "private": false,
+  "engines": {
+    "node": ">=24.0.0"
+  },
+  "keywords": [
+    "nodefony",
+    "orm",
+    "drizzle",
+    "sql",
+    "sqlite",
+    "postgresql",
+    "mysql",
+    "migrations",
+    "typescript",
+    "esm"
+  ],
+  "dependencies": {
+    "drizzle-orm": "0.45.2",
+    "tslib": "2.8.1",
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@nodefony/framework": "*",
+    "@nodefony/http": "*",
+    "@nodefony/orm-core": "*",
+    "@nodefony/security": "*",
+    "@nodefony/user": "*",
+    "@types/better-sqlite3": "9.6.0",
+    "@types/node": "26.4.1",
+    "@types/pg": "8.23.1",
+    "better-sqlite3": "13.0.3",
+    "drizzle-kit": "0.31.10",
+    "mysql2": "3.24.3",
+    "nodefony": "*",
+    "pg": "8.23.0",
+    "rimraf": "6.1.3"
+  },
+  "peerDependencies": {
+    "@nodefony/framework": "*",
+    "@nodefony/http": "*",
+    "@nodefony/orm-core": "*",
+    "@nodefony/security": "*",
+    "@nodefony/user": "*",
+    "better-sqlite3": "^13.0.0",
+    "mysql2": "^3.24.0",
+    "nodefony": "*",
+    "pg": "^8.23.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/nodefony/nodefony-core.git",
+    "directory": "src/packages/@nodefony/drizzle"
+  },
+  "license": "CECILL-B",
+  "licenses": [
+    {
+      "type": "CECILL-B",
+      "url": "http://www.cecill.info/licences/Licence_CeCILL-B_V1-en.html"
+    }
+  ],
+  "author": "Christophe CAMENSULI <ccamensuli@gmail.com>",
+  "files": [
+    "dist",
+    "docs",
+    "migrations/*/*.sql",
+    "migrations/*/meta/_journal.json"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "homepage": "https://nodefony.github.io/nodefony-core/",
+  "bugs": {
+    "url": "https://github.com/nodefony/nodefony-core/issues"
+  },
+  "peerDependenciesMeta": {
+    "better-sqlite3": {
+      "optional": true
+    },
+    "mysql2": {
+      "optional": true
+    },
+    "pg": {
+      "optional": true
+    }
+  }
+}