@shipfox/api-auth 2.0.0

package/dist/db/schema/rate-limits.js

@@ -0,0 +1,25 @@
+import { index, integer, text, timestamp, uniqueIndex } from 'drizzle-orm/pg-core';
+import { pgTable } from './common.js';
+export const authRateLimits = pgTable('rate_limits', {
+    action: text('action').notNull(),
+    scope: text('scope').notNull(),
+    identifierHmac: text('identifier_hmac').notNull(),
+    windowStart: timestamp('window_start', {
+        withTimezone: true
+    }).notNull(),
+    count: integer('count').notNull().default(1),
+    expiresAt: timestamp('expires_at', {
+        withTimezone: true
+    }).notNull(),
+    createdAt: timestamp('created_at', {
+        withTimezone: true
+    }).notNull().defaultNow(),
+    updatedAt: timestamp('updated_at', {
+        withTimezone: true
+    }).notNull().defaultNow()
+}, (table)=>[
+        uniqueIndex('auth_rate_limits_window_unique').on(table.action, table.scope, table.identifierHmac, table.windowStart),
+        index('auth_rate_limits_expires_at_idx').on(table.expiresAt)
+    ]);
+
+//# sourceMappingURL=rate-limits.js.map

package/dist/db/schema/rate-limits.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/db/schema/rate-limits.ts"],"sourcesContent":["import {index, integer, text, timestamp, uniqueIndex} from 'drizzle-orm/pg-core';\nimport {pgTable} from './common.js';\n\nexport const authRateLimits = pgTable(\n  'rate_limits',\n  {\n    action: text('action').notNull(),\n    scope: text('scope').notNull(),\n    identifierHmac: text('identifier_hmac').notNull(),\n    windowStart: timestamp('window_start', {withTimezone: true}).notNull(),\n    count: integer('count').notNull().default(1),\n    expiresAt: timestamp('expires_at', {withTimezone: true}).notNull(),\n    createdAt: timestamp('created_at', {withTimezone: true}).notNull().defaultNow(),\n    updatedAt: timestamp('updated_at', {withTimezone: true}).notNull().defaultNow(),\n  },\n  (table) => [\n    uniqueIndex('auth_rate_limits_window_unique').on(\n      table.action,\n      table.scope,\n      table.identifierHmac,\n      table.windowStart,\n    ),\n    index('auth_rate_limits_expires_at_idx').on(table.expiresAt),\n  ],\n);\n\nexport type AuthRateLimitDb = typeof authRateLimits.$inferSelect;\n"],"names":["index","integer","text","timestamp","uniqueIndex","pgTable","authRateLimits","action","notNull","scope","identifierHmac","windowStart","withTimezone","count","default","expiresAt","createdAt","defaultNow","updatedAt","table","on"],"mappings":"AAAA,SAAQA,KAAK,EAAEC,OAAO,EAAEC,IAAI,EAAEC,SAAS,EAAEC,WAAW,QAAO,sBAAsB;AACjF,SAAQC,OAAO,QAAO,cAAc;AAEpC,OAAO,MAAMC,iBAAiBD,QAC5B,eACA;IACEE,QAAQL,KAAK,UAAUM,OAAO;IAC9BC,OAAOP,KAAK,SAASM,OAAO;IAC5BE,gBAAgBR,KAAK,mBAAmBM,OAAO;IAC/CG,aAAaR,UAAU,gBAAgB;QAACS,cAAc;IAAI,GAAGJ,OAAO;IACpEK,OAAOZ,QAAQ,SAASO,OAAO,GAAGM,OAAO,CAAC;IAC1CC,WAAWZ,UAAU,cAAc;QAACS,cAAc;IAAI,GAAGJ,OAAO;IAChEQ,WAAWb,UAAU,cAAc;QAACS,cAAc;IAAI,GAAGJ,OAAO,GAAGS,UAAU;IAC7EC,WAAWf,UAAU,cAAc;QAACS,cAAc;IAAI,GAAGJ,OAAO,GAAGS,UAAU;AAC/E,GACA,CAACE,QAAU;QACTf,YAAY,kCAAkCgB,EAAE,CAC9CD,MAAMZ,MAAM,EACZY,MAAMV,KAAK,EACXU,MAAMT,cAAc,EACpBS,MAAMR,WAAW;QAEnBX,MAAM,mCAAmCoB,EAAE,CAACD,MAAMJ,SAAS;KAC5D,EACD"}

package/dist/db/schema/refresh-tokens.d.ts

@@ -0,0 +1,165 @@
+import type { RefreshToken } from '#core/entities/refresh-token.js';
+export declare const refreshTokens: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "refresh_tokens";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "refresh_tokens";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        userId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "user_id";
+            tableName: "refresh_tokens";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        hashedToken: import("drizzle-orm/pg-core").PgColumn<{
+            name: "hashed_token";
+            tableName: "refresh_tokens";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        expiresAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "expires_at";
+            tableName: "refresh_tokens";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        revokedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "revoked_at";
+            tableName: "refresh_tokens";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        rotatedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "rotated_at";
+            tableName: "refresh_tokens";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        lastUsedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "last_used_at";
+            tableName: "refresh_tokens";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "refresh_tokens";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "updated_at";
+            tableName: "refresh_tokens";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;
+export type RefreshTokenDb = typeof refreshTokens.$inferSelect;
+export type RefreshTokenCreateDb = typeof refreshTokens.$inferInsert;
+export declare function toRefreshToken(row: RefreshTokenDb): RefreshToken;
+//# sourceMappingURL=refresh-tokens.d.ts.map

package/dist/db/schema/refresh-tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-tokens.d.ts","sourceRoot":"","sources":["../../../src/db/schema/refresh-tokens.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,iCAAiC,CAAC;AAIlE,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmBzB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,OAAO,aAAa,CAAC,YAAY,CAAC;AAC/D,MAAM,MAAM,oBAAoB,GAAG,OAAO,aAAa,CAAC,YAAY,CAAC;AAErE,wBAAgB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,YAAY,CAYhE"}

package/dist/db/schema/refresh-tokens.js

@@ -0,0 +1,47 @@
+import { uuidv7PrimaryKey } from '@shipfox/node-drizzle';
+import { index, text, timestamp, uniqueIndex, uuid } from 'drizzle-orm/pg-core';
+import { pgTable } from './common.js';
+import { users } from './users.js';
+export const refreshTokens = pgTable('refresh_tokens', {
+    id: uuidv7PrimaryKey(),
+    userId: uuid('user_id').notNull().references(()=>users.id, {
+        onDelete: 'cascade'
+    }),
+    hashedToken: text('hashed_token').notNull(),
+    expiresAt: timestamp('expires_at', {
+        withTimezone: true
+    }).notNull(),
+    revokedAt: timestamp('revoked_at', {
+        withTimezone: true
+    }),
+    rotatedAt: timestamp('rotated_at', {
+        withTimezone: true
+    }),
+    lastUsedAt: timestamp('last_used_at', {
+        withTimezone: true
+    }),
+    createdAt: timestamp('created_at', {
+        withTimezone: true
+    }).notNull().defaultNow(),
+    updatedAt: timestamp('updated_at', {
+        withTimezone: true
+    }).notNull().defaultNow()
+}, (table)=>[
+        uniqueIndex('auth_refresh_tokens_hashed_token_unique').on(table.hashedToken),
+        index('auth_refresh_tokens_user_id_idx').on(table.userId)
+    ]);
+export function toRefreshToken(row) {
+    return {
+        id: row.id,
+        userId: row.userId,
+        hashedToken: row.hashedToken,
+        expiresAt: row.expiresAt,
+        revokedAt: row.revokedAt,
+        rotatedAt: row.rotatedAt,
+        lastUsedAt: row.lastUsedAt,
+        createdAt: row.createdAt,
+        updatedAt: row.updatedAt
+    };
+}
+
+//# sourceMappingURL=refresh-tokens.js.map

package/dist/db/schema/refresh-tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/db/schema/refresh-tokens.ts"],"sourcesContent":["import {uuidv7PrimaryKey} from '@shipfox/node-drizzle';\nimport {index, text, timestamp, uniqueIndex, uuid} from 'drizzle-orm/pg-core';\nimport type {RefreshToken} from '#core/entities/refresh-token.js';\nimport {pgTable} from './common.js';\nimport {users} from './users.js';\n\nexport const refreshTokens = pgTable(\n  'refresh_tokens',\n  {\n    id: uuidv7PrimaryKey(),\n    userId: uuid('user_id')\n      .notNull()\n      .references(() => users.id, {onDelete: 'cascade'}),\n    hashedToken: text('hashed_token').notNull(),\n    expiresAt: timestamp('expires_at', {withTimezone: true}).notNull(),\n    revokedAt: timestamp('revoked_at', {withTimezone: true}),\n    rotatedAt: timestamp('rotated_at', {withTimezone: true}),\n    lastUsedAt: timestamp('last_used_at', {withTimezone: true}),\n    createdAt: timestamp('created_at', {withTimezone: true}).notNull().defaultNow(),\n    updatedAt: timestamp('updated_at', {withTimezone: true}).notNull().defaultNow(),\n  },\n  (table) => [\n    uniqueIndex('auth_refresh_tokens_hashed_token_unique').on(table.hashedToken),\n    index('auth_refresh_tokens_user_id_idx').on(table.userId),\n  ],\n);\n\nexport type RefreshTokenDb = typeof refreshTokens.$inferSelect;\nexport type RefreshTokenCreateDb = typeof refreshTokens.$inferInsert;\n\nexport function toRefreshToken(row: RefreshTokenDb): RefreshToken {\n  return {\n    id: row.id,\n    userId: row.userId,\n    hashedToken: row.hashedToken,\n    expiresAt: row.expiresAt,\n    revokedAt: row.revokedAt,\n    rotatedAt: row.rotatedAt,\n    lastUsedAt: row.lastUsedAt,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  };\n}\n"],"names":["uuidv7PrimaryKey","index","text","timestamp","uniqueIndex","uuid","pgTable","users","refreshTokens","id","userId","notNull","references","onDelete","hashedToken","expiresAt","withTimezone","revokedAt","rotatedAt","lastUsedAt","createdAt","defaultNow","updatedAt","table","on","toRefreshToken","row"],"mappings":"AAAA,SAAQA,gBAAgB,QAAO,wBAAwB;AACvD,SAAQC,KAAK,EAAEC,IAAI,EAAEC,SAAS,EAAEC,WAAW,EAAEC,IAAI,QAAO,sBAAsB;AAE9E,SAAQC,OAAO,QAAO,cAAc;AACpC,SAAQC,KAAK,QAAO,aAAa;AAEjC,OAAO,MAAMC,gBAAgBF,QAC3B,kBACA;IACEG,IAAIT;IACJU,QAAQL,KAAK,WACVM,OAAO,GACPC,UAAU,CAAC,IAAML,MAAME,EAAE,EAAE;QAACI,UAAU;IAAS;IAClDC,aAAaZ,KAAK,gBAAgBS,OAAO;IACzCI,WAAWZ,UAAU,cAAc;QAACa,cAAc;IAAI,GAAGL,OAAO;IAChEM,WAAWd,UAAU,cAAc;QAACa,cAAc;IAAI;IACtDE,WAAWf,UAAU,cAAc;QAACa,cAAc;IAAI;IACtDG,YAAYhB,UAAU,gBAAgB;QAACa,cAAc;IAAI;IACzDI,WAAWjB,UAAU,cAAc;QAACa,cAAc;IAAI,GAAGL,OAAO,GAAGU,UAAU;IAC7EC,WAAWnB,UAAU,cAAc;QAACa,cAAc;IAAI,GAAGL,OAAO,GAAGU,UAAU;AAC/E,GACA,CAACE,QAAU;QACTnB,YAAY,2CAA2CoB,EAAE,CAACD,MAAMT,WAAW;QAC3Eb,MAAM,mCAAmCuB,EAAE,CAACD,MAAMb,MAAM;KACzD,EACD;AAKF,OAAO,SAASe,eAAeC,GAAmB;IAChD,OAAO;QACLjB,IAAIiB,IAAIjB,EAAE;QACVC,QAAQgB,IAAIhB,MAAM;QAClBI,aAAaY,IAAIZ,WAAW;QAC5BC,WAAWW,IAAIX,SAAS;QACxBE,WAAWS,IAAIT,SAAS;QACxBC,WAAWQ,IAAIR,SAAS;QACxBC,YAAYO,IAAIP,UAAU;QAC1BC,WAAWM,IAAIN,SAAS;QACxBE,WAAWI,IAAIJ,SAAS;IAC1B;AACF"}

package/dist/db/schema/users.d.ts

@@ -0,0 +1,149 @@
+import type { User } from '#core/entities/user.js';
+export declare const userStatusEnum: import("drizzle-orm/pg-core").PgEnum<["active", "suspended", "deleted"]>;
+export declare const users: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "users";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "users";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        email: import("drizzle-orm/pg-core").PgColumn<{
+            name: "email";
+            tableName: "users";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        hashedPassword: import("drizzle-orm/pg-core").PgColumn<{
+            name: "hashed_password";
+            tableName: "users";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        name: import("drizzle-orm/pg-core").PgColumn<{
+            name: "name";
+            tableName: "users";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        emailVerifiedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "email_verified_at";
+            tableName: "users";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        status: import("drizzle-orm/pg-core").PgColumn<{
+            name: "status";
+            tableName: "users";
+            dataType: "string";
+            columnType: "PgEnumColumn";
+            data: "active" | "suspended" | "deleted";
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: ["active", "suspended", "deleted"];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "users";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "updated_at";
+            tableName: "users";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;
+export type UserDb = typeof users.$inferSelect;
+export type UserCreateDb = typeof users.$inferInsert;
+export declare function toUser(row: UserDb): User;
+//# sourceMappingURL=users.d.ts.map

package/dist/db/schema/users.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../../src/db/schema/users.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,IAAI,EAAa,MAAM,wBAAwB,CAAC;AAG7D,eAAO,MAAM,cAAc,0EAAiE,CAAC;AAE7F,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAajB,CAAC;AAEF,MAAM,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,YAAY,CAAC;AAC/C,MAAM,MAAM,YAAY,GAAG,OAAO,KAAK,CAAC,YAAY,CAAC;AAErD,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAWxC"}

package/dist/db/schema/users.js

@@ -0,0 +1,40 @@
+import { uuidv7PrimaryKey } from '@shipfox/node-drizzle';
+import { pgEnum, text, timestamp, uniqueIndex } from 'drizzle-orm/pg-core';
+import { pgTable } from './common.js';
+export const userStatusEnum = pgEnum('auth_user_status', [
+    'active',
+    'suspended',
+    'deleted'
+]);
+export const users = pgTable('users', {
+    id: uuidv7PrimaryKey(),
+    email: text('email').notNull(),
+    hashedPassword: text('hashed_password'),
+    name: text('name'),
+    emailVerifiedAt: timestamp('email_verified_at', {
+        withTimezone: true
+    }),
+    status: userStatusEnum('status').notNull().default('active'),
+    createdAt: timestamp('created_at', {
+        withTimezone: true
+    }).notNull().defaultNow(),
+    updatedAt: timestamp('updated_at', {
+        withTimezone: true
+    }).notNull().defaultNow()
+}, (table)=>[
+        uniqueIndex('auth_users_email_unique').on(table.email)
+    ]);
+export function toUser(row) {
+    return {
+        id: row.id,
+        email: row.email,
+        hashedPassword: row.hashedPassword,
+        name: row.name,
+        emailVerifiedAt: row.emailVerifiedAt,
+        status: row.status,
+        createdAt: row.createdAt,
+        updatedAt: row.updatedAt
+    };
+}
+
+//# sourceMappingURL=users.js.map

package/dist/db/schema/users.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/db/schema/users.ts"],"sourcesContent":["import {uuidv7PrimaryKey} from '@shipfox/node-drizzle';\nimport {pgEnum, text, timestamp, uniqueIndex} from 'drizzle-orm/pg-core';\nimport type {User, UserStatus} from '#core/entities/user.js';\nimport {pgTable} from './common.js';\n\nexport const userStatusEnum = pgEnum('auth_user_status', ['active', 'suspended', 'deleted']);\n\nexport const users = pgTable(\n  'users',\n  {\n    id: uuidv7PrimaryKey(),\n    email: text('email').notNull(),\n    hashedPassword: text('hashed_password'),\n    name: text('name'),\n    emailVerifiedAt: timestamp('email_verified_at', {withTimezone: true}),\n    status: userStatusEnum('status').notNull().default('active'),\n    createdAt: timestamp('created_at', {withTimezone: true}).notNull().defaultNow(),\n    updatedAt: timestamp('updated_at', {withTimezone: true}).notNull().defaultNow(),\n  },\n  (table) => [uniqueIndex('auth_users_email_unique').on(table.email)],\n);\n\nexport type UserDb = typeof users.$inferSelect;\nexport type UserCreateDb = typeof users.$inferInsert;\n\nexport function toUser(row: UserDb): User {\n  return {\n    id: row.id,\n    email: row.email,\n    hashedPassword: row.hashedPassword,\n    name: row.name,\n    emailVerifiedAt: row.emailVerifiedAt,\n    status: row.status as UserStatus,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  };\n}\n"],"names":["uuidv7PrimaryKey","pgEnum","text","timestamp","uniqueIndex","pgTable","userStatusEnum","users","id","email","notNull","hashedPassword","name","emailVerifiedAt","withTimezone","status","default","createdAt","defaultNow","updatedAt","table","on","toUser","row"],"mappings":"AAAA,SAAQA,gBAAgB,QAAO,wBAAwB;AACvD,SAAQC,MAAM,EAAEC,IAAI,EAAEC,SAAS,EAAEC,WAAW,QAAO,sBAAsB;AAEzE,SAAQC,OAAO,QAAO,cAAc;AAEpC,OAAO,MAAMC,iBAAiBL,OAAO,oBAAoB;IAAC;IAAU;IAAa;CAAU,EAAE;AAE7F,OAAO,MAAMM,QAAQF,QACnB,SACA;IACEG,IAAIR;IACJS,OAAOP,KAAK,SAASQ,OAAO;IAC5BC,gBAAgBT,KAAK;IACrBU,MAAMV,KAAK;IACXW,iBAAiBV,UAAU,qBAAqB;QAACW,cAAc;IAAI;IACnEC,QAAQT,eAAe,UAAUI,OAAO,GAAGM,OAAO,CAAC;IACnDC,WAAWd,UAAU,cAAc;QAACW,cAAc;IAAI,GAAGJ,OAAO,GAAGQ,UAAU;IAC7EC,WAAWhB,UAAU,cAAc;QAACW,cAAc;IAAI,GAAGJ,OAAO,GAAGQ,UAAU;AAC/E,GACA,CAACE,QAAU;QAAChB,YAAY,2BAA2BiB,EAAE,CAACD,MAAMX,KAAK;KAAE,EACnE;AAKF,OAAO,SAASa,OAAOC,GAAW;IAChC,OAAO;QACLf,IAAIe,IAAIf,EAAE;QACVC,OAAOc,IAAId,KAAK;QAChBE,gBAAgBY,IAAIZ,cAAc;QAClCC,MAAMW,IAAIX,IAAI;QACdC,iBAAiBU,IAAIV,eAAe;QACpCE,QAAQQ,IAAIR,MAAM;QAClBE,WAAWM,IAAIN,SAAS;QACxBE,WAAWI,IAAIJ,SAAS;IAC1B;AACF"}

package/dist/db/users.d.ts

@@ -0,0 +1,28 @@
+import type { User } from '#core/entities/user.js';
+export interface CreateUserParams {
+    email: string;
+    hashedPassword: string | null;
+    name?: string | null;
+    emailVerifiedAt?: Date | null;
+}
+export interface ProvisionUserParams {
+    email: string;
+    name?: string | null;
+}
+export declare function createUser(params: CreateUserParams): Promise<User>;
+export declare function provisionUser(params: ProvisionUserParams): Promise<User>;
+export declare function findUserByEmail(params: {
+    email: string;
+}): Promise<User | undefined>;
+export declare function findUserById(params: {
+    id: string;
+}): Promise<User | undefined>;
+export interface UpdateUserPasswordParams {
+    userId: string;
+    hashedPassword: string;
+}
+export declare function updateUserPassword(params: UpdateUserPasswordParams): Promise<User | undefined>;
+export declare function markEmailVerified(params: {
+    userId: string;
+}): Promise<User | undefined>;
+//# sourceMappingURL=users.d.ts.map

package/dist/db/users.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../src/db/users.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,IAAI,EAAC,MAAM,wBAAwB,CAAC;AAKjD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAcD,wBAAsB,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBxE;AAED,wBAAsB,aAAa,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB9E;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAKxF;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE;IAAC,EAAE,EAAE,MAAM,CAAA;CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAKlF;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAa3B;AAED,wBAAsB,iBAAiB,CAAC,MAAM,EAAE;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAU3F"}

package/dist/db/users.js

@@ -0,0 +1,83 @@
+import { eq } from 'drizzle-orm';
+import { EmailTakenError } from '#core/errors.js';
+import { db } from './db.js';
+import { toUser, users } from './schema/users.js';
+// Drizzle wraps the underlying Postgres error; walk `.cause` to reach it.
+function isAuthUsersEmailUniqueViolation(error) {
+    let current = error;
+    for(let depth = 0; depth < 5 && current != null; depth += 1){
+        if (typeof current !== 'object') return false;
+        const { code, constraint } = current;
+        if (code === '23505' && constraint === 'auth_users_email_unique') return true;
+        current = current.cause;
+    }
+    return false;
+}
+export async function createUser(params) {
+    let rows;
+    try {
+        rows = await db().insert(users).values({
+            email: params.email,
+            hashedPassword: params.hashedPassword,
+            name: params.name ?? null,
+            emailVerifiedAt: params.emailVerifiedAt ?? null
+        }).returning();
+    } catch (error) {
+        if (isAuthUsersEmailUniqueViolation(error)) {
+            throw new EmailTakenError(params.email);
+        }
+        throw error;
+    }
+    const row = rows[0];
+    if (!row) throw new Error('Insert returned no rows');
+    return toUser(row);
+}
+export async function provisionUser(params) {
+    const rows = await db().insert(users).values({
+        email: params.email,
+        hashedPassword: null,
+        name: params.name ?? null,
+        emailVerifiedAt: new Date()
+    }).onConflictDoNothing({
+        target: users.email
+    }).returning();
+    const row = rows[0];
+    if (row) return toUser(row);
+    const existing = await findUserByEmail({
+        email: params.email
+    });
+    if (existing) return existing;
+    throw new Error('Provisioning user conflict returned no user');
+}
+export async function findUserByEmail(params) {
+    const rows = await db().select().from(users).where(eq(users.email, params.email)).limit(1);
+    const row = rows[0];
+    if (!row) return undefined;
+    return toUser(row);
+}
+export async function findUserById(params) {
+    const rows = await db().select().from(users).where(eq(users.id, params.id)).limit(1);
+    const row = rows[0];
+    if (!row) return undefined;
+    return toUser(row);
+}
+export async function updateUserPassword(params) {
+    const rows = await db().update(users).set({
+        hashedPassword: params.hashedPassword,
+        updatedAt: new Date()
+    }).where(eq(users.id, params.userId)).returning();
+    const row = rows[0];
+    if (!row) return undefined;
+    return toUser(row);
+}
+export async function markEmailVerified(params) {
+    const rows = await db().update(users).set({
+        emailVerifiedAt: new Date(),
+        updatedAt: new Date()
+    }).where(eq(users.id, params.userId)).returning();
+    const row = rows[0];
+    if (!row) return undefined;
+    return toUser(row);
+}
+
+//# sourceMappingURL=users.js.map

package/dist/db/users.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/db/users.ts"],"sourcesContent":["import {eq} from 'drizzle-orm';\nimport type {User} from '#core/entities/user.js';\nimport {EmailTakenError} from '#core/errors.js';\nimport {db} from './db.js';\nimport {toUser, type UserDb, users} from './schema/users.js';\n\nexport interface CreateUserParams {\n  email: string;\n  hashedPassword: string | null;\n  name?: string | null;\n  emailVerifiedAt?: Date | null;\n}\n\nexport interface ProvisionUserParams {\n  email: string;\n  name?: string | null;\n}\n\n// Drizzle wraps the underlying Postgres error; walk `.cause` to reach it.\nfunction isAuthUsersEmailUniqueViolation(error: unknown): boolean {\n  let current: unknown = error;\n  for (let depth = 0; depth < 5 && current != null; depth += 1) {\n    if (typeof current !== 'object') return false;\n    const {code, constraint} = current as {code?: unknown; constraint?: unknown};\n    if (code === '23505' && constraint === 'auth_users_email_unique') return true;\n    current = (current as {cause?: unknown}).cause;\n  }\n  return false;\n}\n\nexport async function createUser(params: CreateUserParams): Promise<User> {\n  let rows: UserDb[];\n  try {\n    rows = await db()\n      .insert(users)\n      .values({\n        email: params.email,\n        hashedPassword: params.hashedPassword,\n        name: params.name ?? null,\n        emailVerifiedAt: params.emailVerifiedAt ?? null,\n      })\n      .returning();\n  } catch (error) {\n    if (isAuthUsersEmailUniqueViolation(error)) {\n      throw new EmailTakenError(params.email);\n    }\n    throw error;\n  }\n\n  const row = rows[0];\n  if (!row) throw new Error('Insert returned no rows');\n  return toUser(row);\n}\n\nexport async function provisionUser(params: ProvisionUserParams): Promise<User> {\n  const rows = await db()\n    .insert(users)\n    .values({\n      email: params.email,\n      hashedPassword: null,\n      name: params.name ?? null,\n      emailVerifiedAt: new Date(),\n    })\n    .onConflictDoNothing({target: users.email})\n    .returning();\n\n  const row = rows[0];\n  if (row) return toUser(row);\n\n  const existing = await findUserByEmail({email: params.email});\n  if (existing) return existing;\n  throw new Error('Provisioning user conflict returned no user');\n}\n\nexport async function findUserByEmail(params: {email: string}): Promise<User | undefined> {\n  const rows = await db().select().from(users).where(eq(users.email, params.email)).limit(1);\n  const row = rows[0];\n  if (!row) return undefined;\n  return toUser(row);\n}\n\nexport async function findUserById(params: {id: string}): Promise<User | undefined> {\n  const rows = await db().select().from(users).where(eq(users.id, params.id)).limit(1);\n  const row = rows[0];\n  if (!row) return undefined;\n  return toUser(row);\n}\n\nexport interface UpdateUserPasswordParams {\n  userId: string;\n  hashedPassword: string;\n}\n\nexport async function updateUserPassword(\n  params: UpdateUserPasswordParams,\n): Promise<User | undefined> {\n  const rows = await db()\n    .update(users)\n    .set({\n      hashedPassword: params.hashedPassword,\n      updatedAt: new Date(),\n    })\n    .where(eq(users.id, params.userId))\n    .returning();\n\n  const row = rows[0];\n  if (!row) return undefined;\n  return toUser(row);\n}\n\nexport async function markEmailVerified(params: {userId: string}): Promise<User | undefined> {\n  const rows = await db()\n    .update(users)\n    .set({emailVerifiedAt: new Date(), updatedAt: new Date()})\n    .where(eq(users.id, params.userId))\n    .returning();\n\n  const row = rows[0];\n  if (!row) return undefined;\n  return toUser(row);\n}\n"],"names":["eq","EmailTakenError","db","toUser","users","isAuthUsersEmailUniqueViolation","error","current","depth","code","constraint","cause","createUser","params","rows","insert","values","email","hashedPassword","name","emailVerifiedAt","returning","row","Error","provisionUser","Date","onConflictDoNothing","target","existing","findUserByEmail","select","from","where","limit","undefined","findUserById","id","updateUserPassword","update","set","updatedAt","userId","markEmailVerified"],"mappings":"AAAA,SAAQA,EAAE,QAAO,cAAc;AAE/B,SAAQC,eAAe,QAAO,kBAAkB;AAChD,SAAQC,EAAE,QAAO,UAAU;AAC3B,SAAQC,MAAM,EAAeC,KAAK,QAAO,oBAAoB;AAc7D,0EAA0E;AAC1E,SAASC,gCAAgCC,KAAc;IACrD,IAAIC,UAAmBD;IACvB,IAAK,IAAIE,QAAQ,GAAGA,QAAQ,KAAKD,WAAW,MAAMC,SAAS,EAAG;QAC5D,IAAI,OAAOD,YAAY,UAAU,OAAO;QACxC,MAAM,EAACE,IAAI,EAAEC,UAAU,EAAC,GAAGH;QAC3B,IAAIE,SAAS,WAAWC,eAAe,2BAA2B,OAAO;QACzEH,UAAU,AAACA,QAA8BI,KAAK;IAChD;IACA,OAAO;AACT;AAEA,OAAO,eAAeC,WAAWC,MAAwB;IACvD,IAAIC;IACJ,IAAI;QACFA,OAAO,MAAMZ,KACVa,MAAM,CAACX,OACPY,MAAM,CAAC;YACNC,OAAOJ,OAAOI,KAAK;YACnBC,gBAAgBL,OAAOK,cAAc;YACrCC,MAAMN,OAAOM,IAAI,IAAI;YACrBC,iBAAiBP,OAAOO,eAAe,IAAI;QAC7C,GACCC,SAAS;IACd,EAAE,OAAOf,OAAO;QACd,IAAID,gCAAgCC,QAAQ;YAC1C,MAAM,IAAIL,gBAAgBY,OAAOI,KAAK;QACxC;QACA,MAAMX;IACR;IAEA,MAAMgB,MAAMR,IAAI,CAAC,EAAE;IACnB,IAAI,CAACQ,KAAK,MAAM,IAAIC,MAAM;IAC1B,OAAOpB,OAAOmB;AAChB;AAEA,OAAO,eAAeE,cAAcX,MAA2B;IAC7D,MAAMC,OAAO,MAAMZ,KAChBa,MAAM,CAACX,OACPY,MAAM,CAAC;QACNC,OAAOJ,OAAOI,KAAK;QACnBC,gBAAgB;QAChBC,MAAMN,OAAOM,IAAI,IAAI;QACrBC,iBAAiB,IAAIK;IACvB,GACCC,mBAAmB,CAAC;QAACC,QAAQvB,MAAMa,KAAK;IAAA,GACxCI,SAAS;IAEZ,MAAMC,MAAMR,IAAI,CAAC,EAAE;IACnB,IAAIQ,KAAK,OAAOnB,OAAOmB;IAEvB,MAAMM,WAAW,MAAMC,gBAAgB;QAACZ,OAAOJ,OAAOI,KAAK;IAAA;IAC3D,IAAIW,UAAU,OAAOA;IACrB,MAAM,IAAIL,MAAM;AAClB;AAEA,OAAO,eAAeM,gBAAgBhB,MAAuB;IAC3D,MAAMC,OAAO,MAAMZ,KAAK4B,MAAM,GAAGC,IAAI,CAAC3B,OAAO4B,KAAK,CAAChC,GAAGI,MAAMa,KAAK,EAAEJ,OAAOI,KAAK,GAAGgB,KAAK,CAAC;IACxF,MAAMX,MAAMR,IAAI,CAAC,EAAE;IACnB,IAAI,CAACQ,KAAK,OAAOY;IACjB,OAAO/B,OAAOmB;AAChB;AAEA,OAAO,eAAea,aAAatB,MAAoB;IACrD,MAAMC,OAAO,MAAMZ,KAAK4B,MAAM,GAAGC,IAAI,CAAC3B,OAAO4B,KAAK,CAAChC,GAAGI,MAAMgC,EAAE,EAAEvB,OAAOuB,EAAE,GAAGH,KAAK,CAAC;IAClF,MAAMX,MAAMR,IAAI,CAAC,EAAE;IACnB,IAAI,CAACQ,KAAK,OAAOY;IACjB,OAAO/B,OAAOmB;AAChB;AAOA,OAAO,eAAee,mBACpBxB,MAAgC;IAEhC,MAAMC,OAAO,MAAMZ,KAChBoC,MAAM,CAAClC,OACPmC,GAAG,CAAC;QACHrB,gBAAgBL,OAAOK,cAAc;QACrCsB,WAAW,IAAIf;IACjB,GACCO,KAAK,CAAChC,GAAGI,MAAMgC,EAAE,EAAEvB,OAAO4B,MAAM,GAChCpB,SAAS;IAEZ,MAAMC,MAAMR,IAAI,CAAC,EAAE;IACnB,IAAI,CAACQ,KAAK,OAAOY;IACjB,OAAO/B,OAAOmB;AAChB;AAEA,OAAO,eAAeoB,kBAAkB7B,MAAwB;IAC9D,MAAMC,OAAO,MAAMZ,KAChBoC,MAAM,CAAClC,OACPmC,GAAG,CAAC;QAACnB,iBAAiB,IAAIK;QAAQe,WAAW,IAAIf;IAAM,GACvDO,KAAK,CAAChC,GAAGI,MAAMgC,EAAE,EAAEvB,OAAO4B,MAAM,GAChCpB,SAAS;IAEZ,MAAMC,MAAMR,IAAI,CAAC,EAAE;IACnB,IAAI,CAACQ,KAAK,OAAOY;IACjB,OAAO/B,OAAOmB;AAChB"}

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+import type { ShipfoxModule } from '@shipfox/node-module';
+export type { JobLeaseTokenClaims, RunnerSessionTokenClaims } from '@shipfox/api-auth-dto';
+export type { CreateSessionForUserError, CreateSessionForUserParams, CreateSessionForUserResult, ProvisionUserParams, } from '#core/auth.js';
+export { createSessionForUser, provisionUser } from '#core/auth.js';
+export type { User, UserStatus } from '#core/entities/user.js';
+export { AuthDependencyUnavailableError, EmailNotVerifiedError, InvalidCredentialsError, UserNotFoundError, } from '#core/errors.js';
+export { issueJobLeaseToken, jobLeaseParamsFrom, verifyJobLeaseToken, } from '#core/job-lease-token.js';
+export { issueRunnerSessionToken, verifyRunnerSessionToken, } from '#core/runner-session-token.js';
+export { createJwtAuthMethod } from '#presentation/auth/jwt-auth.js';
+export { createLeaseTokenAuthMethod } from '#presentation/auth/lease-token-auth.js';
+export { authCookiePlugin, clearRefreshTokenCookie, getRefreshTokenCookie, setRefreshTokenCookie, } from '#presentation/auth/refresh-cookie.js';
+export { createRunnerSessionAuthMethod } from '#presentation/auth/runner-session-auth.js';
+export declare const authModule: ShipfoxModule;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,sBAAsB,CAAC;AAexD,YAAY,EAAC,mBAAmB,EAAE,wBAAwB,EAAC,MAAM,uBAAuB,CAAC;AACzF,YAAY,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,EAC1B,mBAAmB,GACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAC,oBAAoB,EAAE,aAAa,EAAC,MAAM,eAAe,CAAC;AAClE,YAAY,EAAC,IAAI,EAAE,UAAU,EAAC,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EACL,8BAA8B,EAC9B,qBAAqB,EACrB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAC,mBAAmB,EAAC,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAC,0BAA0B,EAAC,MAAM,wCAAwC,CAAC;AAClF,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAC,6BAA6B,EAAC,MAAM,2CAA2C,CAAC;AAIxF,eAAO,MAAM,UAAU,EAAE,aAWxB,CAAC"}