@qwickapps/server 1.3.1 → 1.5.0

package/dist/plugins/auth/config-store.js

@@ -0,0 +1,232 @@
+/**
+ * Auth Configuration Store
+ *
+ * PostgreSQL-based storage for runtime auth configuration.
+ * Supports pg_notify for cross-instance hot-reload in scaled deployments.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+/**
+ * Create a PostgreSQL-backed auth configuration store
+ *
+ * @param config Configuration including a pg Pool instance
+ * @returns AuthConfigStore implementation
+ *
+ * @example
+ * ```ts
+ * import { Pool } from 'pg';
+ * import { postgresAuthConfigStore } from '@qwickapps/server';
+ *
+ * const pool = new Pool({ connectionString: process.env.DATABASE_URL });
+ * const store = postgresAuthConfigStore({ pool });
+ *
+ * // Or with lazy initialization:
+ * const store = postgresAuthConfigStore({ pool: () => getPostgres().getPool() });
+ * ```
+ */
+// Valid identifier pattern (alphanumeric + underscore, starting with letter or underscore)
+const VALID_IDENTIFIER = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
+/**
+ * Validate SQL identifier to prevent SQL injection
+ */
+function validateIdentifier(name, type) {
+    if (!VALID_IDENTIFIER.test(name)) {
+        throw new Error(`Invalid ${type}: must be alphanumeric with underscores, starting with letter or underscore`);
+    }
+    if (name.length > 63) {
+        throw new Error(`Invalid ${type}: must be 63 characters or less`);
+    }
+}
+export function postgresAuthConfigStore(config) {
+    const { pool: poolOrFn, tableName = 'auth_config', schema = 'public', autoCreateTable = true, enableNotify = true, notifyChannel = 'auth_config_changed', } = config;
+    // Validate identifiers to prevent SQL injection
+    validateIdentifier(tableName, 'table name');
+    validateIdentifier(schema, 'schema name');
+    validateIdentifier(notifyChannel, 'notify channel');
+    // Helper to get pool (supports lazy initialization via function)
+    const getPool = () => {
+        const pool = typeof poolOrFn === 'function' ? poolOrFn() : poolOrFn;
+        if (!pool || typeof pool.query !== 'function') {
+            throw new Error('Invalid pool: must have query method');
+        }
+        return pool;
+    };
+    const tableFullName = `"${schema}"."${tableName}"`;
+    // Listeners for config changes
+    const listeners = new Set();
+    // Client dedicated to listening for notifications
+    let listenerClient = null;
+    // Reconnection state for exponential backoff
+    let reconnectAttempt = 0;
+    const maxReconnectDelay = 60000; // Max 60 seconds
+    const baseReconnectDelay = 1000; // Start at 1 second
+    /**
+     * Calculate reconnect delay with exponential backoff
+     */
+    function getReconnectDelay() {
+        // Exponential backoff: 1s, 2s, 4s, 8s, 16s, 32s, 60s (capped)
+        const delay = Math.min(baseReconnectDelay * Math.pow(2, reconnectAttempt), maxReconnectDelay);
+        reconnectAttempt++;
+        return delay;
+    }
+    /**
+     * Reset reconnection state after successful connection
+     */
+    function resetReconnectState() {
+        reconnectAttempt = 0;
+    }
+    /**
+     * Start listening for pg_notify events
+     */
+    async function startListening() {
+        if (!enableNotify || listenerClient)
+            return;
+        try {
+            const pool = getPool();
+            listenerClient = await pool.connect();
+            // Subscribe to the notification channel
+            await listenerClient.query(`LISTEN ${notifyChannel}`);
+            // Reset backoff on successful connection
+            resetReconnectState();
+            // Handle notifications
+            listenerClient.on('notification', async (msg) => {
+                if (msg.channel === notifyChannel) {
+                    // Reload config from database and notify listeners
+                    const newConfig = await loadFromDb();
+                    for (const listener of listeners) {
+                        try {
+                            listener(newConfig);
+                        }
+                        catch (err) {
+                            console.error('[AuthConfigStore] Listener error:', err);
+                        }
+                    }
+                }
+            });
+            // Handle errors - try to reconnect with exponential backoff
+            // Note: pg client emits 'error' events with Error objects, but our interface
+            // only defines 'notification'. We cast to any to handle this.
+            listenerClient.on('error', (err) => {
+                console.error('[AuthConfigStore] Listener connection error:', err);
+                listenerClient?.release(true);
+                listenerClient = null;
+                // Try to reconnect with exponential backoff
+                const delay = getReconnectDelay();
+                console.log(`[AuthConfigStore] Reconnecting in ${delay}ms (attempt ${reconnectAttempt})`);
+                setTimeout(() => startListening(), delay);
+            });
+        }
+        catch (err) {
+            console.error('[AuthConfigStore] Failed to start listener:', err);
+            listenerClient = null;
+            // Also apply backoff on initial connection failure
+            const delay = getReconnectDelay();
+            console.log(`[AuthConfigStore] Retrying connection in ${delay}ms (attempt ${reconnectAttempt})`);
+            setTimeout(() => startListening(), delay);
+        }
+    }
+    /**
+     * Load config from database
+     */
+    async function loadFromDb() {
+        const pool = getPool();
+        const result = await pool.query(`SELECT adapter, config, settings, updated_at, updated_by
+       FROM ${tableFullName}
+       LIMIT 1`);
+        if (result.rows.length === 0) {
+            return null;
+        }
+        const row = result.rows[0];
+        return {
+            adapter: row.adapter,
+            config: row.config,
+            settings: row.settings,
+            updatedAt: row.updated_at.toISOString(),
+            updatedBy: row.updated_by || undefined,
+        };
+    }
+    return {
+        name: 'postgres',
+        async initialize() {
+            if (!autoCreateTable) {
+                await startListening();
+                return;
+            }
+            const pool = getPool();
+            // Create table with singleton pattern (only one row allowed)
+            await pool.query(`
+        CREATE TABLE IF NOT EXISTS ${tableFullName} (
+          id SERIAL PRIMARY KEY,
+          adapter VARCHAR(50),
+          config JSONB NOT NULL DEFAULT '{}',
+          settings JSONB NOT NULL DEFAULT '{}',
+          created_at TIMESTAMPTZ DEFAULT NOW(),
+          updated_at TIMESTAMPTZ DEFAULT NOW(),
+          updated_by VARCHAR(255)
+        );
+
+        -- Ensure only one config row (singleton pattern)
+        CREATE UNIQUE INDEX IF NOT EXISTS idx_${tableName}_singleton
+        ON ${tableFullName} ((true));
+      `);
+            // Start listening for notifications
+            await startListening();
+        },
+        async load() {
+            return loadFromDb();
+        },
+        async save(runtimeConfig) {
+            const pool = getPool();
+            // Upsert the configuration
+            await pool.query(`INSERT INTO ${tableFullName} (adapter, config, settings, updated_at, updated_by)
+         VALUES ($1, $2, $3, NOW(), $4)
+         ON CONFLICT ((true)) DO UPDATE SET
+           adapter = $1,
+           config = $2,
+           settings = $3,
+           updated_at = NOW(),
+           updated_by = $4`, [
+                runtimeConfig.adapter,
+                JSON.stringify(runtimeConfig.config),
+                JSON.stringify(runtimeConfig.settings),
+                runtimeConfig.updatedBy || null,
+            ]);
+            // Notify other instances
+            if (enableNotify) {
+                await pool.query(`NOTIFY ${notifyChannel}`);
+            }
+        },
+        async delete() {
+            const pool = getPool();
+            const result = await pool.query(`DELETE FROM ${tableFullName}`);
+            // Notify other instances
+            if (enableNotify) {
+                await pool.query(`NOTIFY ${notifyChannel}`);
+            }
+            return (result.rowCount ?? 0) > 0;
+        },
+        onChange(callback) {
+            listeners.add(callback);
+            // Return unsubscribe function
+            return () => {
+                listeners.delete(callback);
+            };
+        },
+        async shutdown() {
+            // Release the listener client
+            if (listenerClient) {
+                try {
+                    await listenerClient.query(`UNLISTEN ${notifyChannel}`);
+                }
+                catch {
+                    // Ignore errors during shutdown
+                }
+                listenerClient.release(true);
+                listenerClient = null;
+            }
+            // Clear listeners
+            listeners.clear();
+        },
+    };
+}
+//# sourceMappingURL=config-store.js.map

package/dist/plugins/auth/config-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.js","sourceRoot":"","sources":["../../../src/plugins/auth/config-store.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAqBH;;;;;;;;;;;;;;;;;GAiBG;AACH,2FAA2F;AAC3F,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;AAEpD;;GAEG;AACH,SAAS,kBAAkB,CAAC,IAAY,EAAE,IAAY;IACpD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,6EAA6E,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,iCAAiC,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAqC;IAC3E,MAAM,EACJ,IAAI,EAAE,QAAQ,EACd,SAAS,GAAG,aAAa,EACzB,MAAM,GAAG,QAAQ,EACjB,eAAe,GAAG,IAAI,EACtB,YAAY,GAAG,IAAI,EACnB,aAAa,GAAG,qBAAqB,GACtC,GAAG,MAAM,CAAC;IAEX,gDAAgD;IAChD,kBAAkB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC5C,kBAAkB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1C,kBAAkB,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAEpD,iEAAiE;IACjE,MAAM,OAAO,GAAG,GAAW,EAAE;QAC3B,MAAM,IAAI,GAAG,OAAO,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QACpE,IAAI,CAAC,IAAI,IAAI,OAAQ,IAAe,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,IAAc,CAAC;IACxB,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,IAAI,MAAM,MAAM,SAAS,GAAG,CAAC;IAEnD,+BAA+B;IAC/B,MAAM,SAAS,GAAoD,IAAI,GAAG,EAAE,CAAC;IAE7E,kDAAkD;IAClD,IAAI,cAAc,GAAwB,IAAI,CAAC;IAE/C,6CAA6C;IAC7C,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,iBAAiB;IAClD,MAAM,kBAAkB,GAAG,IAAI,CAAC,CAAC,oBAAoB;IAErD;;OAEG;IACH,SAAS,iBAAiB;QACxB,8DAA8D;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAC9F,gBAAgB,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,SAAS,mBAAmB;QAC1B,gBAAgB,GAAG,CAAC,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,cAAc;QAC3B,IAAI,CAAC,YAAY,IAAI,cAAc;YAAE,OAAO;QAE5C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,cAAc,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YAEtC,wCAAwC;YACxC,MAAM,cAAc,CAAC,KAAK,CAAC,UAAU,aAAa,EAAE,CAAC,CAAC;YAEtD,yCAAyC;YACzC,mBAAmB,EAAE,CAAC;YAEtB,uBAAuB;YACvB,cAAc,CAAC,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,GAA0C,EAAE,EAAE;gBACrF,IAAI,GAAG,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;oBAClC,mDAAmD;oBACnD,MAAM,SAAS,GAAG,MAAM,UAAU,EAAE,CAAC;oBACrC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;wBACjC,IAAI,CAAC;4BACH,QAAQ,CAAC,SAAS,CAAC,CAAC;wBACtB,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;wBAC1D,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,4DAA4D;YAC5D,6EAA6E;YAC7E,8DAA8D;YAC7D,cAAoF,CAAC,EAAE,CACtF,OAAO,EACP,CAAC,GAAU,EAAE,EAAE;gBACb,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAAC;gBACnE,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC9B,cAAc,GAAG,IAAI,CAAC;gBACtB,4CAA4C;gBAC5C,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;gBAClC,OAAO,CAAC,GAAG,CAAC,qCAAqC,KAAK,eAAe,gBAAgB,GAAG,CAAC,CAAC;gBAC1F,UAAU,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,GAAG,CAAC,CAAC;YAClE,cAAc,GAAG,IAAI,CAAC;YACtB,mDAAmD;YACnD,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,4CAA4C,KAAK,eAAe,gBAAgB,GAAG,CAAC,CAAC;YACjG,UAAU,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,UAAU;QACvB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B;cACQ,aAAa;eACZ,CACV,CAAC;QAEF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAMxB,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,GAAG,CAAC,OAAuC;YACpD,MAAM,EAAE,GAAG,CAAC,MAAqC;YACjD,QAAQ,EAAE,GAAG,CAAC,QAAyC;YACvD,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE;YACvC,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;SACvC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,UAAU;QAEhB,KAAK,CAAC,UAAU;YACd,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,MAAM,cAAc,EAAE,CAAC;gBACvB,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YAEvB,6DAA6D;YAC7D,MAAM,IAAI,CAAC,KAAK,CAAC;qCACc,aAAa;;;;;;;;;;;gDAWF,SAAS;aAC5C,aAAa;OACnB,CAAC,CAAC;YAEH,oCAAoC;YACpC,MAAM,cAAc,EAAE,CAAC;QACzB,CAAC;QAED,KAAK,CAAC,IAAI;YACR,OAAO,UAAU,EAAE,CAAC;QACtB,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,aAAgC;YACzC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YAEvB,2BAA2B;YAC3B,MAAM,IAAI,CAAC,KAAK,CACd,eAAe,aAAa;;;;;;;2BAOT,EACnB;gBACE,aAAa,CAAC,OAAO;gBACrB,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC;gBACpC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC;gBACtC,aAAa,CAAC,SAAS,IAAI,IAAI;aAChC,CACF,CAAC;YAEF,yBAAyB;YACzB,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,aAAa,EAAE,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM;YACV,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YAEvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,aAAa,EAAE,CAAC,CAAC;YAEhE,yBAAyB;YACzB,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,aAAa,EAAE,CAAC,CAAC;YAC9C,CAAC;YAED,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;QAED,QAAQ,CAAC,QAAoD;YAC3D,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAExB,8BAA8B;YAC9B,OAAO,GAAG,EAAE;gBACV,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7B,CAAC,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,QAAQ;YACZ,8BAA8B;YAC9B,IAAI,cAAc,EAAE,CAAC;gBACnB,IAAI,CAAC;oBACH,MAAM,cAAc,CAAC,KAAK,CAAC,YAAY,aAAa,EAAE,CAAC,CAAC;gBAC1D,CAAC;gBAAC,MAAM,CAAC;oBACP,gCAAgC;gBAClC,CAAC;gBACD,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC7B,cAAc,GAAG,IAAI,CAAC;YACxB,CAAC;YAED,kBAAkB;YAClB,SAAS,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/plugins/auth/config-store.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Auth Config Store Tests
+ *
+ * Unit tests for PostgreSQL-backed auth configuration store.
+ */
+export {};
+//# sourceMappingURL=config-store.test.d.ts.map

package/dist/plugins/auth/config-store.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.test.d.ts","sourceRoot":"","sources":["../../../src/plugins/auth/config-store.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/plugins/auth/config-store.test.js

@@ -0,0 +1,299 @@
+/**
+ * Auth Config Store Tests
+ *
+ * Unit tests for PostgreSQL-backed auth configuration store.
+ */
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import { postgresAuthConfigStore } from './config-store.js';
+function createMockPool() {
+    const mockClient = {
+        query: vi.fn().mockResolvedValue({ rows: [], rowCount: 0 }),
+        on: vi.fn(),
+        release: vi.fn(),
+    };
+    return {
+        query: vi.fn().mockResolvedValue({ rows: [], rowCount: 0 }),
+        connect: vi.fn().mockResolvedValue(mockClient),
+        on: vi.fn(),
+    };
+}
+describe('postgresAuthConfigStore', () => {
+    let mockPool;
+    beforeEach(() => {
+        mockPool = createMockPool();
+    });
+    afterEach(() => {
+        vi.clearAllMocks();
+    });
+    describe('identifier validation', () => {
+        it('should reject invalid table names', () => {
+            expect(() => postgresAuthConfigStore({
+                pool: mockPool,
+                tableName: 'DROP TABLE users;--',
+            })).toThrow('Invalid table name');
+        });
+        it('should reject table names with spaces', () => {
+            expect(() => postgresAuthConfigStore({
+                pool: mockPool,
+                tableName: 'my table',
+            })).toThrow('Invalid table name');
+        });
+        it('should reject table names starting with numbers', () => {
+            expect(() => postgresAuthConfigStore({
+                pool: mockPool,
+                tableName: '123table',
+            })).toThrow('Invalid table name');
+        });
+        it('should reject table names longer than 63 characters', () => {
+            const longName = 'a'.repeat(64);
+            expect(() => postgresAuthConfigStore({
+                pool: mockPool,
+                tableName: longName,
+            })).toThrow('Invalid table name');
+        });
+        it('should accept valid table names', () => {
+            expect(() => postgresAuthConfigStore({
+                pool: mockPool,
+                tableName: 'auth_config',
+            })).not.toThrow();
+        });
+        it('should accept table names with underscores', () => {
+            expect(() => postgresAuthConfigStore({
+                pool: mockPool,
+                tableName: '_my_auth_config_table',
+            })).not.toThrow();
+        });
+        it('should reject invalid schema names', () => {
+            expect(() => postgresAuthConfigStore({
+                pool: mockPool,
+                schema: 'public; DROP TABLE users;--',
+            })).toThrow('Invalid schema name');
+        });
+        it('should reject invalid notify channel names', () => {
+            expect(() => postgresAuthConfigStore({
+                pool: mockPool,
+                notifyChannel: 'channel-with-dashes',
+            })).toThrow('Invalid notify channel');
+        });
+    });
+    describe('initialize', () => {
+        it('should create table if autoCreateTable is true', async () => {
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: true,
+                enableNotify: false,
+            });
+            await store.initialize();
+            expect(mockPool.query).toHaveBeenCalledWith(expect.stringContaining('CREATE TABLE IF NOT EXISTS'));
+        });
+        it('should not create table if autoCreateTable is false', async () => {
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            await store.initialize();
+            expect(mockPool.query).not.toHaveBeenCalledWith(expect.stringContaining('CREATE TABLE IF NOT EXISTS'));
+        });
+        it('should use custom table name', async () => {
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                tableName: 'custom_auth_config',
+                autoCreateTable: true,
+                enableNotify: false,
+            });
+            await store.initialize();
+            expect(mockPool.query).toHaveBeenCalledWith(expect.stringContaining('"public"."custom_auth_config"'));
+        });
+        it('should use custom schema name', async () => {
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                schema: 'myschema',
+                autoCreateTable: true,
+                enableNotify: false,
+            });
+            await store.initialize();
+            expect(mockPool.query).toHaveBeenCalledWith(expect.stringContaining('"myschema"."auth_config"'));
+        });
+    });
+    describe('load', () => {
+        it('should return null when no config exists', async () => {
+            mockPool.query.mockResolvedValueOnce({ rows: [], rowCount: 0 });
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            const result = await store.load();
+            expect(result).toBeNull();
+        });
+        it('should return config when it exists', async () => {
+            const mockConfig = {
+                adapter: 'basic',
+                config: { basic: { username: 'admin', password: 'secret' } },
+                settings: {},
+                updated_at: new Date('2025-01-15T12:00:00Z'),
+                updated_by: 'admin@example.com',
+            };
+            mockPool.query.mockResolvedValueOnce({ rows: [mockConfig], rowCount: 1 });
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            const result = await store.load();
+            expect(result).toEqual({
+                adapter: 'basic',
+                config: { basic: { username: 'admin', password: 'secret' } },
+                settings: {},
+                updatedAt: '2025-01-15T12:00:00.000Z',
+                updatedBy: 'admin@example.com',
+            });
+        });
+    });
+    describe('save', () => {
+        it('should upsert config to database', async () => {
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            const config = {
+                adapter: 'basic',
+                config: { basic: { username: 'admin', password: 'secret', realm: 'Test' } },
+                settings: {},
+                updatedAt: new Date().toISOString(),
+                updatedBy: 'admin@example.com',
+            };
+            await store.save(config);
+            expect(mockPool.query).toHaveBeenCalledWith(expect.stringContaining('INSERT INTO'), expect.arrayContaining(['basic', expect.any(String), expect.any(String), 'admin@example.com']));
+        });
+        it('should send NOTIFY when enableNotify is true', async () => {
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: true,
+            });
+            const config = {
+                adapter: 'basic',
+                config: { basic: { username: 'admin', password: 'secret', realm: 'Test' } },
+                settings: {},
+                updatedAt: new Date().toISOString(),
+            };
+            await store.save(config);
+            expect(mockPool.query).toHaveBeenCalledWith('NOTIFY auth_config_changed');
+        });
+        it('should not send NOTIFY when enableNotify is false', async () => {
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            const config = {
+                adapter: 'basic',
+                config: { basic: { username: 'admin', password: 'secret', realm: 'Test' } },
+                settings: {},
+                updatedAt: new Date().toISOString(),
+            };
+            await store.save(config);
+            expect(mockPool.query).not.toHaveBeenCalledWith('NOTIFY auth_config_changed');
+        });
+    });
+    describe('delete', () => {
+        it('should delete config from database', async () => {
+            mockPool.query.mockResolvedValueOnce({ rows: [], rowCount: 1 });
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            const result = await store.delete();
+            expect(mockPool.query).toHaveBeenCalledWith(expect.stringContaining('DELETE FROM'));
+            expect(result).toBe(true);
+        });
+        it('should return false when no config to delete', async () => {
+            mockPool.query.mockResolvedValueOnce({ rows: [], rowCount: 0 });
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            const result = await store.delete();
+            expect(result).toBe(false);
+        });
+        it('should send NOTIFY after delete when enableNotify is true', async () => {
+            mockPool.query.mockResolvedValueOnce({ rows: [], rowCount: 1 });
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: true,
+            });
+            await store.delete();
+            expect(mockPool.query).toHaveBeenCalledWith('NOTIFY auth_config_changed');
+        });
+    });
+    describe('onChange', () => {
+        it('should register listener and return unsubscribe function', () => {
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            const listener = vi.fn();
+            const unsubscribe = store.onChange(listener);
+            expect(typeof unsubscribe).toBe('function');
+        });
+        it('should unsubscribe listener when called', () => {
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            const listener = vi.fn();
+            const unsubscribe = store.onChange(listener);
+            // Unsubscribe
+            unsubscribe();
+            // Listener should not be called anymore
+            // (We can't easily test this without exposing internals, but the function exists)
+            expect(unsubscribe).toBeDefined();
+        });
+    });
+    describe('lazy pool initialization', () => {
+        it('should accept a function that returns the pool', async () => {
+            const poolFn = vi.fn().mockReturnValue(mockPool);
+            const store = postgresAuthConfigStore({
+                pool: poolFn,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            mockPool.query.mockResolvedValueOnce({ rows: [], rowCount: 0 });
+            await store.load();
+            expect(poolFn).toHaveBeenCalled();
+        });
+        it('should throw if pool is invalid', async () => {
+            const store = postgresAuthConfigStore({
+                pool: (() => ({})),
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            await expect(store.load()).rejects.toThrow('Invalid pool');
+        });
+    });
+    describe('shutdown', () => {
+        it('should release listener client and clear listeners', async () => {
+            const store = postgresAuthConfigStore({
+                pool: mockPool,
+                autoCreateTable: false,
+                enableNotify: false,
+            });
+            // Add a listener
+            const listener = vi.fn();
+            store.onChange(listener);
+            // Shutdown
+            await store.shutdown();
+            // Should complete without error
+            expect(true).toBe(true);
+        });
+    });
+});
+//# sourceMappingURL=config-store.test.js.map

package/dist/plugins/auth/config-store.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.test.js","sourceRoot":"","sources":["../../../src/plugins/auth/config-store.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAgB5D,SAAS,cAAc;IACrB,MAAM,UAAU,GAAmB;QACjC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QAC3D,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE;QACX,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE;KACjB,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC;QAC9C,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,IAAI,QAAkB,CAAC;IAEvB,UAAU,CAAC,GAAG,EAAE;QACd,QAAQ,GAAG,cAAc,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC3C,MAAM,CAAC,GAAG,EAAE,CACV,uBAAuB,CAAC;gBACtB,IAAI,EAAE,QAA4E;gBAClF,SAAS,EAAE,qBAAqB;aACjC,CAAC,CACH,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,GAAG,EAAE,CACV,uBAAuB,CAAC;gBACtB,IAAI,EAAE,QAA4E;gBAClF,SAAS,EAAE,UAAU;aACtB,CAAC,CACH,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,CAAC,GAAG,EAAE,CACV,uBAAuB,CAAC;gBACtB,IAAI,EAAE,QAA4E;gBAClF,SAAS,EAAE,UAAU;aACtB,CAAC,CACH,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAChC,MAAM,CAAC,GAAG,EAAE,CACV,uBAAuB,CAAC;gBACtB,IAAI,EAAE,QAA4E;gBAClF,SAAS,EAAE,QAAQ;aACpB,CAAC,CACH,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,CAAC,GAAG,EAAE,CACV,uBAAuB,CAAC;gBACtB,IAAI,EAAE,QAA4E;gBAClF,SAAS,EAAE,aAAa;aACzB,CAAC,CACH,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,CAAC,GAAG,EAAE,CACV,uBAAuB,CAAC;gBACtB,IAAI,EAAE,QAA4E;gBAClF,SAAS,EAAE,uBAAuB;aACnC,CAAC,CACH,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,MAAM,CAAC,GAAG,EAAE,CACV,uBAAuB,CAAC;gBACtB,IAAI,EAAE,QAA4E;gBAClF,MAAM,EAAE,6BAA6B;aACtC,CAAC,CACH,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,CAAC,GAAG,EAAE,CACV,uBAAuB,CAAC;gBACtB,IAAI,EAAE,QAA4E;gBAClF,aAAa,EAAE,qBAAqB;aACrC,CAAC,CACH,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;QAC1B,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,IAAI;gBACrB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;YAEzB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACzC,MAAM,CAAC,gBAAgB,CAAC,4BAA4B,CAAC,CACtD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;YAEzB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAC7C,MAAM,CAAC,gBAAgB,CAAC,4BAA4B,CAAC,CACtD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,SAAS,EAAE,oBAAoB;gBAC/B,eAAe,EAAE,IAAI;gBACrB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;YAEzB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACzC,MAAM,CAAC,gBAAgB,CAAC,+BAA+B,CAAC,CACzD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,MAAM,EAAE,UAAU;gBAClB,eAAe,EAAE,IAAI;gBACrB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;YAEzB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACzC,MAAM,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,CACpD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;QACpB,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAEhE,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YAElC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,UAAU,GAAG;gBACjB,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE;gBAC5D,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC;gBAC5C,UAAU,EAAE,mBAAmB;aAChC,CAAC;YAEF,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAE1E,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YAElC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACrB,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE;gBAC5D,QAAQ,EAAE,EAAE;gBACZ,SAAS,EAAE,0BAA0B;gBACrC,SAAS,EAAE,mBAAmB;aAC/B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;QACpB,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAsB;gBAChC,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBAC3E,QAAQ,EAAE,EAAE;gBACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,SAAS,EAAE,mBAAmB;aAC/B,CAAC;YAEF,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEzB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACzC,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC,EACtC,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAC/F,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAsB;gBAChC,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBAC3E,QAAQ,EAAE,EAAE;gBACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YAEF,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEzB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,4BAA4B,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAsB;gBAChC,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBAC3E,QAAQ,EAAE,EAAE;gBACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YAEF,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEzB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,4BAA4B,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;QACtB,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAEhE,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;YAEpC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACzC,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC,CACvC,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAEhE,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;YAEpC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAEhE,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;YAErB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,4BAA4B,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;QACxB,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;YAClE,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YACzB,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAE7C,MAAM,CAAC,OAAO,WAAW,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YACzB,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAE7C,cAAc;YACd,WAAW,EAAE,CAAC;YAEd,wCAAwC;YACxC,kFAAkF;YAClF,MAAM,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACxC,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAEjD,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,MAA0E;gBAChF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAChE,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YAEnB,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAqE;gBACtF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;QACxB,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,IAAI,EAAE,QAA4E;gBAClF,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YAEH,iBAAiB;YACjB,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YACzB,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAEzB,WAAW;YACX,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;YAEvB,gCAAgC;YAChC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/plugins/auth/env-config.d.ts

@@ -7,7 +7,8 @@
  * Copyright (c) 2025 QwickApps.com. All rights reserved.
  */
 import type { Plugin } from '../../core/plugin-registry.js';
-import type { Auth0AdapterConfig, SupabaseAdapterConfig, SupertokensAdapterConfig, BasicAdapterConfig, AuthEnvPluginOptions, AuthConfigStatus } from './types.js';
+import type { AuthAdapter, Auth0AdapterConfig, SupabaseAdapterConfig, SupertokensAdapterConfig, BasicAdapterConfig, AuthEnvPluginOptions, AuthConfigStatus, AuthAdapterType, RuntimeAuthConfig, TestProviderResponse, AuthConfigStore } from './types.js';
+import { type AdapterWrapper } from './adapter-wrapper.js';
 /**
  * Get an environment variable, treating empty strings as undefined
  */
@@ -73,6 +74,52 @@ export declare function createAuthPluginFromEnv(options?: AuthEnvPluginOptions):
  * Get current auth plugin status
  */
 export declare function getAuthStatus(): AuthConfigStatus;
+/**
+ * Extended options for createAuthPluginFromEnv with runtime config support
+ */
+export interface AuthEnvPluginOptionsExtended extends AuthEnvPluginOptions {
+    /** Configuration store for runtime config persistence */
+    configStore?: AuthConfigStore;
+}
+/**
+ * Create an adapter from runtime configuration
+ */
+declare function createAdapterFromConfig(adapterType: AuthAdapterType, config: RuntimeAuthConfig['config']): AuthAdapter | null;
+/**
+ * Validate adapter configuration
+ */
+declare function validateAdapterConfig(adapterType: AuthAdapterType, config: Record<string, unknown>): {
+    valid: boolean;
+    errors: string[];
+};
+/**
+ * Test a provider connection
+ */
+declare function testProviderConnection(adapterType: AuthAdapterType, config: Record<string, unknown>): Promise<TestProviderResponse>;
+/**
+ * Set the configuration store for runtime auth config persistence.
+ *
+ * This must be called during application startup to enable runtime configuration
+ * features. Without a config store, the PUT/DELETE endpoints will return 503.
+ *
+ * @param store - PostgreSQL-backed config store from `postgresAuthConfigStore()`
+ *
+ * @example
+ * ```typescript
+ * import { Pool } from 'pg';
+ * import { setAuthConfigStore, postgresAuthConfigStore } from '@qwickapps/server';
+ *
+ * const pool = new Pool({ connectionString: process.env.DATABASE_URL });
+ * const configStore = postgresAuthConfigStore({ pool });
+ * await configStore.initialize();
+ * setAuthConfigStore(configStore);
+ * ```
+ */
+export declare function setAuthConfigStore(store: AuthConfigStore): void;
+/**
+ * Get the current adapter wrapper
+ */
+export declare function getAdapterWrapper(): AdapterWrapper | null;
 export declare const __testing: {
     parseSupertokensEnv: typeof parseSupertokensEnv;
     parseAuth0Env: typeof parseAuth0Env;
@@ -83,6 +130,9 @@ export declare const __testing: {
     getEnvList: typeof getEnvList;
     maskValue: typeof maskValue;
     VALID_ADAPTERS: readonly ["supertokens", "auth0", "supabase", "basic"];
+    validateAdapterConfig: typeof validateAdapterConfig;
+    testProviderConnection: typeof testProviderConnection;
+    createAdapterFromConfig: typeof createAdapterFromConfig;
 };
 export {};
 //# sourceMappingURL=env-config.d.ts.map

package/dist/plugins/auth/env-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env-config.d.ts","sourceRoot":"","sources":["../../../src/plugins/auth/env-config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAgC,MAAM,+BAA+B,CAAC;AAC1F,OAAO,KAAK,EAEV,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAEjB,MAAM,YAAY,CAAC;AAoBpB;;GAEG;AACH,iBAAS,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAM/C;AAED;;;GAGG;AACH,iBAAS,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAa/D;AAED;;GAEG;AACH,iBAAS,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CASrD;AAED;;GAEG;AACH,iBAAS,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKxC;AAMD,UAAU,cAAc,CAAC,CAAC;IACxB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;GAEG;AACH,iBAAS,mBAAmB,IAAI,cAAc,CAAC,wBAAwB,CAAC,CAoEvE;AAED;;GAEG;AACH,iBAAS,aAAa,IAAI,cAAc,CAAC,kBAAkB,CAAC,CAwC3D;AAED;;GAEG;AACH,iBAAS,gBAAgB,IAAI,cAAc,CAAC,qBAAqB,CAAC,CAoBjE;AAED;;GAEG;AACH,iBAAS,iBAAiB,IAAI,cAAc,CAAC,kBAAkB,CAAC,CAqB/D;AAYD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,MAAM,CA0G9E;AAMD;;GAEG;AACH,wBAAgB,aAAa,IAAI,gBAAgB,CAEhD;AA2ID,eAAO,MAAM,SAAS;;;;;;;;;;CAUrB,CAAC"}
+{"version":3,"file":"env-config.d.ts","sourceRoot":"","sources":["../../../src/plugins/auth/env-config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAgC,MAAM,+BAA+B,CAAC;AAC1F,OAAO,KAAK,EAEV,WAAW,EACX,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAEhB,eAAe,EACf,iBAAiB,EAGjB,oBAAoB,EACpB,eAAe,EAChB,MAAM,YAAY,CAAC;AAMpB,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAwBjF;;GAEG;AACH,iBAAS,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAM/C;AAED;;;GAGG;AACH,iBAAS,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAa/D;AAED;;GAEG;AACH,iBAAS,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CASrD;AAED;;GAEG;AACH,iBAAS,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKxC;AAMD,UAAU,cAAc,CAAC,CAAC;IACxB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;GAEG;AACH,iBAAS,mBAAmB,IAAI,cAAc,CAAC,wBAAwB,CAAC,CAoEvE;AAED;;GAEG;AACH,iBAAS,aAAa,IAAI,cAAc,CAAC,kBAAkB,CAAC,CAwC3D;AAED;;GAEG;AACH,iBAAS,gBAAgB,IAAI,cAAc,CAAC,qBAAqB,CAAC,CAoBjE;AAED;;GAEG;AACH,iBAAS,iBAAiB,IAAI,cAAc,CAAC,kBAAkB,CAAC,CAqB/D;AAYD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,MAAM,CA0G9E;AAMD;;GAEG;AACH,wBAAgB,aAAa,IAAI,gBAAgB,CAEhD;AA8aD;;GAEG;AACH,MAAM,WAAW,4BAA6B,SAAQ,oBAAoB;IACxE,yDAAyD;IACzD,WAAW,CAAC,EAAE,eAAe,CAAC;CAC/B;AAED;;GAEG;AACH,iBAAS,uBAAuB,CAC9B,WAAW,EAAE,eAAe,EAC5B,MAAM,EAAE,iBAAiB,CAAC,QAAQ,CAAC,GAClC,WAAW,GAAG,IAAI,CAwBpB;AAED;;GAEG;AACH,iBAAS,qBAAqB,CAC5B,WAAW,EAAE,eAAe,EAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CA4BtC;AA4BD;;GAEG;AACH,iBAAe,sBAAsB,CACnC,WAAW,EAAE,eAAe,EAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,oBAAoB,CAAC,CA2I/B;AAkHD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAE/D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,GAAG,IAAI,CAEzD;AAOD,eAAO,MAAM,SAAS;;;;;;;;;;;;;CAarB,CAAC"}