@shipfox/api-auth 5.0.0 → 6.0.0

package/dist/core/entities/email-verification.d.ts

@@ -1,9 +0,0 @@
-export interface EmailVerification {
-    id: string;
-    userId: string;
-    hashedToken: string;
-    expiresAt: Date;
-    usedAt: Date | null;
-    createdAt: Date;
-}
-//# sourceMappingURL=email-verification.d.ts.map

package/dist/core/entities/email-verification.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"email-verification.d.ts","sourceRoot":"","sources":["../../../src/core/entities/email-verification.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;CACjB"}

package/dist/core/entities/email-verification.js

@@ -1,3 +0,0 @@
-export { };
-
-//# sourceMappingURL=email-verification.js.map

package/dist/core/entities/email-verification.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/core/entities/email-verification.ts"],"sourcesContent":["export interface EmailVerification {\n  id: string;\n  userId: string;\n  hashedToken: string;\n  expiresAt: Date;\n  usedAt: Date | null;\n  createdAt: Date;\n}\n"],"names":[],"mappings":"AAAA,WAOC"}

package/dist/db/email-verifications.d.ts

@@ -1,39 +0,0 @@
-import type { EmailVerification } from '#core/entities/email-verification.js';
-import type { User } from '#core/entities/user.js';
-interface CreateEmailVerificationBaseParams {
-    userId: string;
-    hashedToken: string;
-    expiresAt: Date;
-}
-export type CreateEmailVerificationParams = CreateEmailVerificationBaseParams & ({
-    sendEmail: {
-        email: string;
-        verifyLink: string;
-    };
-    skipEmail?: never;
-} | {
-    sendEmail?: never;
-    skipEmail: true;
-});
-export declare function createEmailVerification(params: CreateEmailVerificationParams): Promise<EmailVerification>;
-export interface CreateResendEmailVerificationParams {
-    email: string;
-    hashedToken: string;
-    expiresAt: Date;
-    cooldownSeconds: number;
-    sendEmail: {
-        verifyLink: string;
-    };
-    now?: Date | undefined;
-}
-export interface CreateResendEmailVerificationResult {
-    user?: User | undefined;
-    verification?: EmailVerification | undefined;
-    nextResendAvailableAt: Date;
-}
-export declare function createResendEmailVerification(params: CreateResendEmailVerificationParams): Promise<CreateResendEmailVerificationResult>;
-export declare function consumeEmailVerification(params: {
-    hashedToken: string;
-}): Promise<EmailVerification | undefined>;
-export {};
-//# sourceMappingURL=email-verifications.d.ts.map

package/dist/db/email-verifications.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"email-verifications.d.ts","sourceRoot":"","sources":["../../src/db/email-verifications.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,sCAAsC,CAAC;AAC5E,OAAO,KAAK,EAAC,IAAI,EAAC,MAAM,wBAAwB,CAAC;AAMjD,UAAU,iCAAiC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,MAAM,6BAA6B,GAAG,iCAAiC,GAC3E,CACI;IAAC,SAAS,EAAE;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAC,CAAC;IAAC,SAAS,CAAC,EAAE,KAAK,CAAA;CAAC,GACnE;IAAC,SAAS,CAAC,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,IAAI,CAAA;CAAC,CACvC,CAAC;AAEJ,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,6BAA6B,GACpC,OAAO,CAAC,iBAAiB,CAAC,CA0B5B;AAED,MAAM,WAAW,mCAAmC;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE;QAAC,UAAU,EAAE,MAAM,CAAA;KAAC,CAAC;IAChC,GAAG,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;CACxB;AAED,MAAM,WAAW,mCAAmC;IAClD,IAAI,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACxB,YAAY,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC7C,qBAAqB,EAAE,IAAI,CAAC;CAC7B;AAMD,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,mCAAmC,GAC1C,OAAO,CAAC,mCAAmC,CAAC,CAkE9C;AAED,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAgBzC"}

package/dist/db/email-verifications.js

@@ -1,95 +0,0 @@
-import { AUTH_EMAIL_VERIFICATION_SEND_REQUESTED } from '@shipfox/api-auth-dto';
-import { writeOutboxEvent } from '@shipfox/node-outbox';
-import { and, desc, eq, gt, isNull, sql } from 'drizzle-orm';
-import { db } from './db.js';
-import { emailVerifications, toEmailVerification } from './schema/email-verifications.js';
-import { authOutbox } from './schema/outbox.js';
-import { toUser, users } from './schema/users.js';
-export async function createEmailVerification(params) {
-    return await db().transaction(async (tx)=>{
-        await tx.update(emailVerifications).set({
-            usedAt: sql`now()`
-        }).where(and(eq(emailVerifications.userId, params.userId), isNull(emailVerifications.usedAt)));
-        const rows = await tx.insert(emailVerifications).values({
-            userId: params.userId,
-            hashedToken: params.hashedToken,
-            expiresAt: params.expiresAt
-        }).returning();
-        const row = rows[0];
-        if (!row) throw new Error('Insert returned no rows');
-        if (params.sendEmail) {
-            await writeOutboxEvent(tx, authOutbox, {
-                type: AUTH_EMAIL_VERIFICATION_SEND_REQUESTED,
-                payload: params.sendEmail
-            });
-        }
-        return toEmailVerification(row);
-    });
-}
-function secondsAfter(date, seconds) {
-    return new Date(date.getTime() + seconds * 1000);
-}
-export async function createResendEmailVerification(params) {
-    const now = params.now ?? new Date();
-    const genericNextResendAvailableAt = secondsAfter(now, params.cooldownSeconds);
-    return await db().transaction(async (tx)=>{
-        const userRows = await tx.select().from(users).where(eq(users.email, params.email)).limit(1).for('update');
-        const userRow = userRows[0];
-        if (!userRow) {
-            return {
-                nextResendAvailableAt: genericNextResendAvailableAt
-            };
-        }
-        const user = toUser(userRow);
-        if (user.status !== 'active' || user.emailVerifiedAt !== null) {
-            return {
-                nextResendAvailableAt: genericNextResendAvailableAt
-            };
-        }
-        const latestRows = await tx.select().from(emailVerifications).where(and(eq(emailVerifications.userId, user.id), isNull(emailVerifications.usedAt))).orderBy(desc(emailVerifications.createdAt)).limit(1);
-        const latest = latestRows[0] ? toEmailVerification(latestRows[0]) : undefined;
-        if (latest && secondsAfter(latest.createdAt, params.cooldownSeconds) > now) {
-            // Return the same public retry estimate as no-op cases so the endpoint does
-            // not expose existing account state or prior verification timing.
-            return {
-                user,
-                nextResendAvailableAt: genericNextResendAvailableAt
-            };
-        }
-        await tx.update(emailVerifications).set({
-            usedAt: sql`now()`
-        }).where(and(eq(emailVerifications.userId, user.id), isNull(emailVerifications.usedAt)));
-        const rows = await tx.insert(emailVerifications).values({
-            userId: user.id,
-            hashedToken: params.hashedToken,
-            expiresAt: params.expiresAt
-        }).returning();
-        const row = rows[0];
-        if (!row) throw new Error('Insert returned no rows');
-        const verification = toEmailVerification(row);
-        if (params.sendEmail) {
-            await writeOutboxEvent(tx, authOutbox, {
-                type: AUTH_EMAIL_VERIFICATION_SEND_REQUESTED,
-                payload: {
-                    email: user.email,
-                    verifyLink: params.sendEmail.verifyLink
-                }
-            });
-        }
-        return {
-            user,
-            verification,
-            nextResendAvailableAt: secondsAfter(verification.createdAt, params.cooldownSeconds)
-        };
-    });
-}
-export async function consumeEmailVerification(params) {
-    const rows = await db().update(emailVerifications).set({
-        usedAt: sql`now()`
-    }).where(and(eq(emailVerifications.hashedToken, params.hashedToken), isNull(emailVerifications.usedAt), gt(emailVerifications.expiresAt, sql`now()`))).returning();
-    const row = rows[0];
-    if (!row) return undefined;
-    return toEmailVerification(row);
-}
-
-//# sourceMappingURL=email-verifications.js.map

package/dist/db/email-verifications.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/db/email-verifications.ts"],"sourcesContent":["import {AUTH_EMAIL_VERIFICATION_SEND_REQUESTED, type AuthEventMap} from '@shipfox/api-auth-dto';\nimport {writeOutboxEvent} from '@shipfox/node-outbox';\nimport {and, desc, eq, gt, isNull, sql} from 'drizzle-orm';\nimport type {EmailVerification} from '#core/entities/email-verification.js';\nimport type {User} from '#core/entities/user.js';\nimport {db} from './db.js';\nimport {emailVerifications, toEmailVerification} from './schema/email-verifications.js';\nimport {authOutbox} from './schema/outbox.js';\nimport {toUser, users} from './schema/users.js';\n\ninterface CreateEmailVerificationBaseParams {\n  userId: string;\n  hashedToken: string;\n  expiresAt: Date;\n}\n\nexport type CreateEmailVerificationParams = CreateEmailVerificationBaseParams &\n  (\n    | {sendEmail: {email: string; verifyLink: string}; skipEmail?: never}\n    | {sendEmail?: never; skipEmail: true}\n  );\n\nexport async function createEmailVerification(\n  params: CreateEmailVerificationParams,\n): Promise<EmailVerification> {\n  return await db().transaction(async (tx) => {\n    await tx\n      .update(emailVerifications)\n      .set({usedAt: sql`now()`})\n      .where(and(eq(emailVerifications.userId, params.userId), isNull(emailVerifications.usedAt)));\n\n    const rows = await tx\n      .insert(emailVerifications)\n      .values({\n        userId: params.userId,\n        hashedToken: params.hashedToken,\n        expiresAt: params.expiresAt,\n      })\n      .returning();\n\n    const row = rows[0];\n    if (!row) throw new Error('Insert returned no rows');\n    if (params.sendEmail) {\n      await writeOutboxEvent<AuthEventMap>(tx, authOutbox, {\n        type: AUTH_EMAIL_VERIFICATION_SEND_REQUESTED,\n        payload: params.sendEmail,\n      });\n    }\n    return toEmailVerification(row);\n  });\n}\n\nexport interface CreateResendEmailVerificationParams {\n  email: string;\n  hashedToken: string;\n  expiresAt: Date;\n  cooldownSeconds: number;\n  sendEmail: {verifyLink: string};\n  now?: Date | undefined;\n}\n\nexport interface CreateResendEmailVerificationResult {\n  user?: User | undefined;\n  verification?: EmailVerification | undefined;\n  nextResendAvailableAt: Date;\n}\n\nfunction secondsAfter(date: Date, seconds: number): Date {\n  return new Date(date.getTime() + seconds * 1000);\n}\n\nexport async function createResendEmailVerification(\n  params: CreateResendEmailVerificationParams,\n): Promise<CreateResendEmailVerificationResult> {\n  const now = params.now ?? new Date();\n  const genericNextResendAvailableAt = secondsAfter(now, params.cooldownSeconds);\n\n  return await db().transaction(async (tx) => {\n    const userRows = await tx\n      .select()\n      .from(users)\n      .where(eq(users.email, params.email))\n      .limit(1)\n      .for('update');\n    const userRow = userRows[0];\n    if (!userRow) {\n      return {nextResendAvailableAt: genericNextResendAvailableAt};\n    }\n\n    const user = toUser(userRow);\n    if (user.status !== 'active' || user.emailVerifiedAt !== null) {\n      return {nextResendAvailableAt: genericNextResendAvailableAt};\n    }\n\n    const latestRows = await tx\n      .select()\n      .from(emailVerifications)\n      .where(and(eq(emailVerifications.userId, user.id), isNull(emailVerifications.usedAt)))\n      .orderBy(desc(emailVerifications.createdAt))\n      .limit(1);\n    const latest = latestRows[0] ? toEmailVerification(latestRows[0]) : undefined;\n    if (latest && secondsAfter(latest.createdAt, params.cooldownSeconds) > now) {\n      // Return the same public retry estimate as no-op cases so the endpoint does\n      // not expose existing account state or prior verification timing.\n      return {user, nextResendAvailableAt: genericNextResendAvailableAt};\n    }\n\n    await tx\n      .update(emailVerifications)\n      .set({usedAt: sql`now()`})\n      .where(and(eq(emailVerifications.userId, user.id), isNull(emailVerifications.usedAt)));\n\n    const rows = await tx\n      .insert(emailVerifications)\n      .values({\n        userId: user.id,\n        hashedToken: params.hashedToken,\n        expiresAt: params.expiresAt,\n      })\n      .returning();\n\n    const row = rows[0];\n    if (!row) throw new Error('Insert returned no rows');\n    const verification = toEmailVerification(row);\n    if (params.sendEmail) {\n      await writeOutboxEvent<AuthEventMap>(tx, authOutbox, {\n        type: AUTH_EMAIL_VERIFICATION_SEND_REQUESTED,\n        payload: {\n          email: user.email,\n          verifyLink: params.sendEmail.verifyLink,\n        },\n      });\n    }\n    return {\n      user,\n      verification,\n      nextResendAvailableAt: secondsAfter(verification.createdAt, params.cooldownSeconds),\n    };\n  });\n}\n\nexport async function consumeEmailVerification(params: {\n  hashedToken: string;\n}): Promise<EmailVerification | undefined> {\n  const rows = await db()\n    .update(emailVerifications)\n    .set({usedAt: sql`now()`})\n    .where(\n      and(\n        eq(emailVerifications.hashedToken, params.hashedToken),\n        isNull(emailVerifications.usedAt),\n        gt(emailVerifications.expiresAt, sql`now()`),\n      ),\n    )\n    .returning();\n\n  const row = rows[0];\n  if (!row) return undefined;\n  return toEmailVerification(row);\n}\n"],"names":["AUTH_EMAIL_VERIFICATION_SEND_REQUESTED","writeOutboxEvent","and","desc","eq","gt","isNull","sql","db","emailVerifications","toEmailVerification","authOutbox","toUser","users","createEmailVerification","params","transaction","tx","update","set","usedAt","where","userId","rows","insert","values","hashedToken","expiresAt","returning","row","Error","sendEmail","type","payload","secondsAfter","date","seconds","Date","getTime","createResendEmailVerification","now","genericNextResendAvailableAt","cooldownSeconds","userRows","select","from","email","limit","for","userRow","nextResendAvailableAt","user","status","emailVerifiedAt","latestRows","id","orderBy","createdAt","latest","undefined","verification","verifyLink","consumeEmailVerification"],"mappings":"AAAA,SAAQA,sCAAsC,QAA0B,wBAAwB;AAChG,SAAQC,gBAAgB,QAAO,uBAAuB;AACtD,SAAQC,GAAG,EAAEC,IAAI,EAAEC,EAAE,EAAEC,EAAE,EAAEC,MAAM,EAAEC,GAAG,QAAO,cAAc;AAG3D,SAAQC,EAAE,QAAO,UAAU;AAC3B,SAAQC,kBAAkB,EAAEC,mBAAmB,QAAO,kCAAkC;AACxF,SAAQC,UAAU,QAAO,qBAAqB;AAC9C,SAAQC,MAAM,EAAEC,KAAK,QAAO,oBAAoB;AAchD,OAAO,eAAeC,wBACpBC,MAAqC;IAErC,OAAO,MAAMP,KAAKQ,WAAW,CAAC,OAAOC;QACnC,MAAMA,GACHC,MAAM,CAACT,oBACPU,GAAG,CAAC;YAACC,QAAQb,GAAG,CAAC,KAAK,CAAC;QAAA,GACvBc,KAAK,CAACnB,IAAIE,GAAGK,mBAAmBa,MAAM,EAAEP,OAAOO,MAAM,GAAGhB,OAAOG,mBAAmBW,MAAM;QAE3F,MAAMG,OAAO,MAAMN,GAChBO,MAAM,CAACf,oBACPgB,MAAM,CAAC;YACNH,QAAQP,OAAOO,MAAM;YACrBI,aAAaX,OAAOW,WAAW;YAC/BC,WAAWZ,OAAOY,SAAS;QAC7B,GACCC,SAAS;QAEZ,MAAMC,MAAMN,IAAI,CAAC,EAAE;QACnB,IAAI,CAACM,KAAK,MAAM,IAAIC,MAAM;QAC1B,IAAIf,OAAOgB,SAAS,EAAE;YACpB,MAAM9B,iBAA+BgB,IAAIN,YAAY;gBACnDqB,MAAMhC;gBACNiC,SAASlB,OAAOgB,SAAS;YAC3B;QACF;QACA,OAAOrB,oBAAoBmB;IAC7B;AACF;AAiBA,SAASK,aAAaC,IAAU,EAAEC,OAAe;IAC/C,OAAO,IAAIC,KAAKF,KAAKG,OAAO,KAAKF,UAAU;AAC7C;AAEA,OAAO,eAAeG,8BACpBxB,MAA2C;IAE3C,MAAMyB,MAAMzB,OAAOyB,GAAG,IAAI,IAAIH;IAC9B,MAAMI,+BAA+BP,aAAaM,KAAKzB,OAAO2B,eAAe;IAE7E,OAAO,MAAMlC,KAAKQ,WAAW,CAAC,OAAOC;QACnC,MAAM0B,WAAW,MAAM1B,GACpB2B,MAAM,GACNC,IAAI,CAAChC,OACLQ,KAAK,CAACjB,GAAGS,MAAMiC,KAAK,EAAE/B,OAAO+B,KAAK,GAClCC,KAAK,CAAC,GACNC,GAAG,CAAC;QACP,MAAMC,UAAUN,QAAQ,CAAC,EAAE;QAC3B,IAAI,CAACM,SAAS;YACZ,OAAO;gBAACC,uBAAuBT;YAA4B;QAC7D;QAEA,MAAMU,OAAOvC,OAAOqC;QACpB,IAAIE,KAAKC,MAAM,KAAK,YAAYD,KAAKE,eAAe,KAAK,MAAM;YAC7D,OAAO;gBAACH,uBAAuBT;YAA4B;QAC7D;QAEA,MAAMa,aAAa,MAAMrC,GACtB2B,MAAM,GACNC,IAAI,CAACpC,oBACLY,KAAK,CAACnB,IAAIE,GAAGK,mBAAmBa,MAAM,EAAE6B,KAAKI,EAAE,GAAGjD,OAAOG,mBAAmBW,MAAM,IAClFoC,OAAO,CAACrD,KAAKM,mBAAmBgD,SAAS,GACzCV,KAAK,CAAC;QACT,MAAMW,SAASJ,UAAU,CAAC,EAAE,GAAG5C,oBAAoB4C,UAAU,CAAC,EAAE,IAAIK;QACpE,IAAID,UAAUxB,aAAawB,OAAOD,SAAS,EAAE1C,OAAO2B,eAAe,IAAIF,KAAK;YAC1E,4EAA4E;YAC5E,kEAAkE;YAClE,OAAO;gBAACW;gBAAMD,uBAAuBT;YAA4B;QACnE;QAEA,MAAMxB,GACHC,MAAM,CAACT,oBACPU,GAAG,CAAC;YAACC,QAAQb,GAAG,CAAC,KAAK,CAAC;QAAA,GACvBc,KAAK,CAACnB,IAAIE,GAAGK,mBAAmBa,MAAM,EAAE6B,KAAKI,EAAE,GAAGjD,OAAOG,mBAAmBW,MAAM;QAErF,MAAMG,OAAO,MAAMN,GAChBO,MAAM,CAACf,oBACPgB,MAAM,CAAC;YACNH,QAAQ6B,KAAKI,EAAE;YACf7B,aAAaX,OAAOW,WAAW;YAC/BC,WAAWZ,OAAOY,SAAS;QAC7B,GACCC,SAAS;QAEZ,MAAMC,MAAMN,IAAI,CAAC,EAAE;QACnB,IAAI,CAACM,KAAK,MAAM,IAAIC,MAAM;QAC1B,MAAM8B,eAAelD,oBAAoBmB;QACzC,IAAId,OAAOgB,SAAS,EAAE;YACpB,MAAM9B,iBAA+BgB,IAAIN,YAAY;gBACnDqB,MAAMhC;gBACNiC,SAAS;oBACPa,OAAOK,KAAKL,KAAK;oBACjBe,YAAY9C,OAAOgB,SAAS,CAAC8B,UAAU;gBACzC;YACF;QACF;QACA,OAAO;YACLV;YACAS;YACAV,uBAAuBhB,aAAa0B,aAAaH,SAAS,EAAE1C,OAAO2B,eAAe;QACpF;IACF;AACF;AAEA,OAAO,eAAeoB,yBAAyB/C,MAE9C;IACC,MAAMQ,OAAO,MAAMf,KAChBU,MAAM,CAACT,oBACPU,GAAG,CAAC;QAACC,QAAQb,GAAG,CAAC,KAAK,CAAC;IAAA,GACvBc,KAAK,CACJnB,IACEE,GAAGK,mBAAmBiB,WAAW,EAAEX,OAAOW,WAAW,GACrDpB,OAAOG,mBAAmBW,MAAM,GAChCf,GAAGI,mBAAmBkB,SAAS,EAAEpB,GAAG,CAAC,KAAK,CAAC,IAG9CqB,SAAS;IAEZ,MAAMC,MAAMN,IAAI,CAAC,EAAE;IACnB,IAAI,CAACM,KAAK,OAAO8B;IACjB,OAAOjD,oBAAoBmB;AAC7B"}

package/dist/db/schema/email-verifications.d.ts

@@ -1,114 +0,0 @@
-import type { EmailVerification } from '#core/entities/email-verification.js';
-export declare const emailVerifications: import("drizzle-orm/pg-core").PgTableWithColumns<{
-    name: "email_verifications";
-    schema: undefined;
-    columns: {
-        id: import("drizzle-orm/pg-core").PgColumn<{
-            name: "id";
-            tableName: "email_verifications";
-            dataType: "string";
-            columnType: "PgUUID";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: true;
-            isPrimaryKey: true;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        userId: import("drizzle-orm/pg-core").PgColumn<{
-            name: "user_id";
-            tableName: "email_verifications";
-            dataType: "string";
-            columnType: "PgUUID";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        hashedToken: import("drizzle-orm/pg-core").PgColumn<{
-            name: "hashed_token";
-            tableName: "email_verifications";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        expiresAt: import("drizzle-orm/pg-core").PgColumn<{
-            name: "expires_at";
-            tableName: "email_verifications";
-            dataType: "date";
-            columnType: "PgTimestamp";
-            data: Date;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        usedAt: import("drizzle-orm/pg-core").PgColumn<{
-            name: "used_at";
-            tableName: "email_verifications";
-            dataType: "date";
-            columnType: "PgTimestamp";
-            data: Date;
-            driverParam: string;
-            notNull: false;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        createdAt: import("drizzle-orm/pg-core").PgColumn<{
-            name: "created_at";
-            tableName: "email_verifications";
-            dataType: "date";
-            columnType: "PgTimestamp";
-            data: Date;
-            driverParam: string;
-            notNull: true;
-            hasDefault: true;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-    };
-    dialect: "pg";
-}>;
-export type EmailVerificationDb = typeof emailVerifications.$inferSelect;
-export type EmailVerificationCreateDb = typeof emailVerifications.$inferInsert;
-export declare function toEmailVerification(row: EmailVerificationDb): EmailVerification;
-//# sourceMappingURL=email-verifications.d.ts.map

package/dist/db/schema/email-verifications.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"email-verifications.d.ts","sourceRoot":"","sources":["../../../src/db/schema/email-verifications.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,sCAAsC,CAAC;AAI5E,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgB9B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,OAAO,kBAAkB,CAAC,YAAY,CAAC;AACzE,MAAM,MAAM,yBAAyB,GAAG,OAAO,kBAAkB,CAAC,YAAY,CAAC;AAE/E,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,mBAAmB,GAAG,iBAAiB,CAS/E"}

package/dist/db/schema/email-verifications.js

@@ -1,35 +0,0 @@
-import { uuidv7PrimaryKey } from '@shipfox/node-drizzle';
-import { index, text, timestamp, uniqueIndex, uuid } from 'drizzle-orm/pg-core';
-import { pgTable } from './common.js';
-import { users } from './users.js';
-export const emailVerifications = pgTable('email_verifications', {
-    id: uuidv7PrimaryKey(),
-    userId: uuid('user_id').notNull().references(()=>users.id, {
-        onDelete: 'cascade'
-    }),
-    hashedToken: text('hashed_token').notNull(),
-    expiresAt: timestamp('expires_at', {
-        withTimezone: true
-    }).notNull(),
-    usedAt: timestamp('used_at', {
-        withTimezone: true
-    }),
-    createdAt: timestamp('created_at', {
-        withTimezone: true
-    }).notNull().defaultNow()
-}, (table)=>[
-        uniqueIndex('auth_email_verifications_hashed_token_unique').on(table.hashedToken),
-        index('auth_email_verifications_user_id_idx').on(table.userId)
-    ]);
-export function toEmailVerification(row) {
-    return {
-        id: row.id,
-        userId: row.userId,
-        hashedToken: row.hashedToken,
-        expiresAt: row.expiresAt,
-        usedAt: row.usedAt,
-        createdAt: row.createdAt
-    };
-}
-
-//# sourceMappingURL=email-verifications.js.map

package/dist/db/schema/email-verifications.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/db/schema/email-verifications.ts"],"sourcesContent":["import {uuidv7PrimaryKey} from '@shipfox/node-drizzle';\nimport {index, text, timestamp, uniqueIndex, uuid} from 'drizzle-orm/pg-core';\nimport type {EmailVerification} from '#core/entities/email-verification.js';\nimport {pgTable} from './common.js';\nimport {users} from './users.js';\n\nexport const emailVerifications = pgTable(\n  'email_verifications',\n  {\n    id: uuidv7PrimaryKey(),\n    userId: uuid('user_id')\n      .notNull()\n      .references(() => users.id, {onDelete: 'cascade'}),\n    hashedToken: text('hashed_token').notNull(),\n    expiresAt: timestamp('expires_at', {withTimezone: true}).notNull(),\n    usedAt: timestamp('used_at', {withTimezone: true}),\n    createdAt: timestamp('created_at', {withTimezone: true}).notNull().defaultNow(),\n  },\n  (table) => [\n    uniqueIndex('auth_email_verifications_hashed_token_unique').on(table.hashedToken),\n    index('auth_email_verifications_user_id_idx').on(table.userId),\n  ],\n);\n\nexport type EmailVerificationDb = typeof emailVerifications.$inferSelect;\nexport type EmailVerificationCreateDb = typeof emailVerifications.$inferInsert;\n\nexport function toEmailVerification(row: EmailVerificationDb): EmailVerification {\n  return {\n    id: row.id,\n    userId: row.userId,\n    hashedToken: row.hashedToken,\n    expiresAt: row.expiresAt,\n    usedAt: row.usedAt,\n    createdAt: row.createdAt,\n  };\n}\n"],"names":["uuidv7PrimaryKey","index","text","timestamp","uniqueIndex","uuid","pgTable","users","emailVerifications","id","userId","notNull","references","onDelete","hashedToken","expiresAt","withTimezone","usedAt","createdAt","defaultNow","table","on","toEmailVerification","row"],"mappings":"AAAA,SAAQA,gBAAgB,QAAO,wBAAwB;AACvD,SAAQC,KAAK,EAAEC,IAAI,EAAEC,SAAS,EAAEC,WAAW,EAAEC,IAAI,QAAO,sBAAsB;AAE9E,SAAQC,OAAO,QAAO,cAAc;AACpC,SAAQC,KAAK,QAAO,aAAa;AAEjC,OAAO,MAAMC,qBAAqBF,QAChC,uBACA;IACEG,IAAIT;IACJU,QAAQL,KAAK,WACVM,OAAO,GACPC,UAAU,CAAC,IAAML,MAAME,EAAE,EAAE;QAACI,UAAU;IAAS;IAClDC,aAAaZ,KAAK,gBAAgBS,OAAO;IACzCI,WAAWZ,UAAU,cAAc;QAACa,cAAc;IAAI,GAAGL,OAAO;IAChEM,QAAQd,UAAU,WAAW;QAACa,cAAc;IAAI;IAChDE,WAAWf,UAAU,cAAc;QAACa,cAAc;IAAI,GAAGL,OAAO,GAAGQ,UAAU;AAC/E,GACA,CAACC,QAAU;QACThB,YAAY,gDAAgDiB,EAAE,CAACD,MAAMN,WAAW;QAChFb,MAAM,wCAAwCoB,EAAE,CAACD,MAAMV,MAAM;KAC9D,EACD;AAKF,OAAO,SAASY,oBAAoBC,GAAwB;IAC1D,OAAO;QACLd,IAAIc,IAAId,EAAE;QACVC,QAAQa,IAAIb,MAAM;QAClBI,aAAaS,IAAIT,WAAW;QAC5BC,WAAWQ,IAAIR,SAAS;QACxBE,QAAQM,IAAIN,MAAM;QAClBC,WAAWK,IAAIL,SAAS;IAC1B;AACF"}

package/dist/presentation/subscribers/on-email-verification-send-requested.d.ts

@@ -1,3 +0,0 @@
-import type { AuthEmailVerificationSendRequestedEvent } from '@shipfox/api-auth-dto';
-export declare function onEmailVerificationSendRequested(payload: AuthEmailVerificationSendRequestedEvent): Promise<void>;
-//# sourceMappingURL=on-email-verification-send-requested.d.ts.map

package/dist/presentation/subscribers/on-email-verification-send-requested.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"on-email-verification-send-requested.d.ts","sourceRoot":"","sources":["../../../src/presentation/subscribers/on-email-verification-send-requested.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,uCAAuC,EAAC,MAAM,uBAAuB,CAAC;AAInF,wBAAsB,gCAAgC,CACpD,OAAO,EAAE,uCAAuC,GAC/C,OAAO,CAAC,IAAI,CAAC,CAGf"}

package/dist/presentation/subscribers/on-email-verification-send-requested.js

@@ -1,13 +0,0 @@
-import { renderEmail } from '@shipfox/node-email';
-import { mailer } from '#config.js';
-export async function onEmailVerificationSendRequested(payload) {
-    const email = await renderEmail('verify-email', {
-        verifyLink: payload.verifyLink
-    });
-    await mailer.send({
-        to: payload.email,
-        ...email
-    });
-}
-
-//# sourceMappingURL=on-email-verification-send-requested.js.map

package/dist/presentation/subscribers/on-email-verification-send-requested.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/presentation/subscribers/on-email-verification-send-requested.ts"],"sourcesContent":["import type {AuthEmailVerificationSendRequestedEvent} from '@shipfox/api-auth-dto';\nimport {renderEmail} from '@shipfox/node-email';\nimport {mailer} from '#config.js';\n\nexport async function onEmailVerificationSendRequested(\n  payload: AuthEmailVerificationSendRequestedEvent,\n): Promise<void> {\n  const email = await renderEmail('verify-email', {verifyLink: payload.verifyLink});\n  await mailer.send({to: payload.email, ...email});\n}\n"],"names":["renderEmail","mailer","onEmailVerificationSendRequested","payload","email","verifyLink","send","to"],"mappings":"AACA,SAAQA,WAAW,QAAO,sBAAsB;AAChD,SAAQC,MAAM,QAAO,aAAa;AAElC,OAAO,eAAeC,iCACpBC,OAAgD;IAEhD,MAAMC,QAAQ,MAAMJ,YAAY,gBAAgB;QAACK,YAAYF,QAAQE,UAAU;IAAA;IAC/E,MAAMJ,OAAOK,IAAI,CAAC;QAACC,IAAIJ,QAAQC,KAAK;QAAE,GAAGA,KAAK;IAAA;AAChD"}

package/src/core/entities/email-verification.ts

@@ -1,8 +0,0 @@
-export interface EmailVerification {
-  id: string;
-  userId: string;
-  hashedToken: string;
-  expiresAt: Date;
-  usedAt: Date | null;
-  createdAt: Date;
-}

package/src/db/email-verifications.test.ts

@@ -1,61 +0,0 @@
-import {hashOpaqueToken} from '@shipfox/node-tokens';
-import {consumeEmailVerification, createEmailVerification} from './email-verifications.js';
-import {createUser} from './users.js';
-
-function emailFor(suffix: string): string {
-  return `${suffix}-${crypto.randomUUID()}@example.com`;
-}
-
-describe('email-verifications db', () => {
-  test('creates a verification and consumes it once', async () => {
-    const user = await createUser({email: emailFor('ev1'), hashedPassword: 'h'});
-    const raw = `verification-${crypto.randomUUID()}`;
-    const verification = await createEmailVerification({
-      userId: user.id,
-      hashedToken: hashOpaqueToken(raw),
-      expiresAt: new Date(Date.now() + 60_000),
-      skipEmail: true,
-    });
-
-    const first = await consumeEmailVerification({hashedToken: verification.hashedToken});
-    const second = await consumeEmailVerification({hashedToken: verification.hashedToken});
-
-    expect(first?.id).toBe(verification.id);
-    expect(second).toBeUndefined();
-  });
-
-  test('rejects expired verification', async () => {
-    const user = await createUser({email: emailFor('ev2'), hashedPassword: 'h'});
-    const verification = await createEmailVerification({
-      userId: user.id,
-      hashedToken: hashOpaqueToken(`expired-v-${crypto.randomUUID()}`),
-      expiresAt: new Date(Date.now() - 60_000),
-      skipEmail: true,
-    });
-
-    const consumed = await consumeEmailVerification({hashedToken: verification.hashedToken});
-
-    expect(consumed).toBeUndefined();
-  });
-
-  test('creating a new verification invalidates prior unused for the same user', async () => {
-    const user = await createUser({email: emailFor('ev3'), hashedPassword: 'h'});
-    const first = await createEmailVerification({
-      userId: user.id,
-      hashedToken: hashOpaqueToken(`first-v-${crypto.randomUUID()}`),
-      expiresAt: new Date(Date.now() + 60_000),
-      skipEmail: true,
-    });
-
-    await createEmailVerification({
-      userId: user.id,
-      hashedToken: hashOpaqueToken(`second-v-${crypto.randomUUID()}`),
-      expiresAt: new Date(Date.now() + 60_000),
-      skipEmail: true,
-    });
-
-    const consumeFirst = await consumeEmailVerification({hashedToken: first.hashedToken});
-
-    expect(consumeFirst).toBeUndefined();
-  });
-});

package/src/db/email-verifications.ts

@@ -1,160 +0,0 @@
-import {AUTH_EMAIL_VERIFICATION_SEND_REQUESTED, type AuthEventMap} from '@shipfox/api-auth-dto';
-import {writeOutboxEvent} from '@shipfox/node-outbox';
-import {and, desc, eq, gt, isNull, sql} from 'drizzle-orm';
-import type {EmailVerification} from '#core/entities/email-verification.js';
-import type {User} from '#core/entities/user.js';
-import {db} from './db.js';
-import {emailVerifications, toEmailVerification} from './schema/email-verifications.js';
-import {authOutbox} from './schema/outbox.js';
-import {toUser, users} from './schema/users.js';
-
-interface CreateEmailVerificationBaseParams {
-  userId: string;
-  hashedToken: string;
-  expiresAt: Date;
-}
-
-export type CreateEmailVerificationParams = CreateEmailVerificationBaseParams &
-  (
-    | {sendEmail: {email: string; verifyLink: string}; skipEmail?: never}
-    | {sendEmail?: never; skipEmail: true}
-  );
-
-export async function createEmailVerification(
-  params: CreateEmailVerificationParams,
-): Promise<EmailVerification> {
-  return await db().transaction(async (tx) => {
-    await tx
-      .update(emailVerifications)
-      .set({usedAt: sql`now()`})
-      .where(and(eq(emailVerifications.userId, params.userId), isNull(emailVerifications.usedAt)));
-
-    const rows = await tx
-      .insert(emailVerifications)
-      .values({
-        userId: params.userId,
-        hashedToken: params.hashedToken,
-        expiresAt: params.expiresAt,
-      })
-      .returning();
-
-    const row = rows[0];
-    if (!row) throw new Error('Insert returned no rows');
-    if (params.sendEmail) {
-      await writeOutboxEvent<AuthEventMap>(tx, authOutbox, {
-        type: AUTH_EMAIL_VERIFICATION_SEND_REQUESTED,
-        payload: params.sendEmail,
-      });
-    }
-    return toEmailVerification(row);
-  });
-}
-
-export interface CreateResendEmailVerificationParams {
-  email: string;
-  hashedToken: string;
-  expiresAt: Date;
-  cooldownSeconds: number;
-  sendEmail: {verifyLink: string};
-  now?: Date | undefined;
-}
-
-export interface CreateResendEmailVerificationResult {
-  user?: User | undefined;
-  verification?: EmailVerification | undefined;
-  nextResendAvailableAt: Date;
-}
-
-function secondsAfter(date: Date, seconds: number): Date {
-  return new Date(date.getTime() + seconds * 1000);
-}
-
-export async function createResendEmailVerification(
-  params: CreateResendEmailVerificationParams,
-): Promise<CreateResendEmailVerificationResult> {
-  const now = params.now ?? new Date();
-  const genericNextResendAvailableAt = secondsAfter(now, params.cooldownSeconds);
-
-  return await db().transaction(async (tx) => {
-    const userRows = await tx
-      .select()
-      .from(users)
-      .where(eq(users.email, params.email))
-      .limit(1)
-      .for('update');
-    const userRow = userRows[0];
-    if (!userRow) {
-      return {nextResendAvailableAt: genericNextResendAvailableAt};
-    }
-
-    const user = toUser(userRow);
-    if (user.status !== 'active' || user.emailVerifiedAt !== null) {
-      return {nextResendAvailableAt: genericNextResendAvailableAt};
-    }
-
-    const latestRows = await tx
-      .select()
-      .from(emailVerifications)
-      .where(and(eq(emailVerifications.userId, user.id), isNull(emailVerifications.usedAt)))
-      .orderBy(desc(emailVerifications.createdAt))
-      .limit(1);
-    const latest = latestRows[0] ? toEmailVerification(latestRows[0]) : undefined;
-    if (latest && secondsAfter(latest.createdAt, params.cooldownSeconds) > now) {
-      // Return the same public retry estimate as no-op cases so the endpoint does
-      // not expose existing account state or prior verification timing.
-      return {user, nextResendAvailableAt: genericNextResendAvailableAt};
-    }
-
-    await tx
-      .update(emailVerifications)
-      .set({usedAt: sql`now()`})
-      .where(and(eq(emailVerifications.userId, user.id), isNull(emailVerifications.usedAt)));
-
-    const rows = await tx
-      .insert(emailVerifications)
-      .values({
-        userId: user.id,
-        hashedToken: params.hashedToken,
-        expiresAt: params.expiresAt,
-      })
-      .returning();
-
-    const row = rows[0];
-    if (!row) throw new Error('Insert returned no rows');
-    const verification = toEmailVerification(row);
-    if (params.sendEmail) {
-      await writeOutboxEvent<AuthEventMap>(tx, authOutbox, {
-        type: AUTH_EMAIL_VERIFICATION_SEND_REQUESTED,
-        payload: {
-          email: user.email,
-          verifyLink: params.sendEmail.verifyLink,
-        },
-      });
-    }
-    return {
-      user,
-      verification,
-      nextResendAvailableAt: secondsAfter(verification.createdAt, params.cooldownSeconds),
-    };
-  });
-}
-
-export async function consumeEmailVerification(params: {
-  hashedToken: string;
-}): Promise<EmailVerification | undefined> {
-  const rows = await db()
-    .update(emailVerifications)
-    .set({usedAt: sql`now()`})
-    .where(
-      and(
-        eq(emailVerifications.hashedToken, params.hashedToken),
-        isNull(emailVerifications.usedAt),
-        gt(emailVerifications.expiresAt, sql`now()`),
-      ),
-    )
-    .returning();
-
-  const row = rows[0];
-  if (!row) return undefined;
-  return toEmailVerification(row);
-}

package/src/db/schema/email-verifications.ts

@@ -1,37 +0,0 @@
-import {uuidv7PrimaryKey} from '@shipfox/node-drizzle';
-import {index, text, timestamp, uniqueIndex, uuid} from 'drizzle-orm/pg-core';
-import type {EmailVerification} from '#core/entities/email-verification.js';
-import {pgTable} from './common.js';
-import {users} from './users.js';
-
-export const emailVerifications = pgTable(
-  'email_verifications',
-  {
-    id: uuidv7PrimaryKey(),
-    userId: uuid('user_id')
-      .notNull()
-      .references(() => users.id, {onDelete: 'cascade'}),
-    hashedToken: text('hashed_token').notNull(),
-    expiresAt: timestamp('expires_at', {withTimezone: true}).notNull(),
-    usedAt: timestamp('used_at', {withTimezone: true}),
-    createdAt: timestamp('created_at', {withTimezone: true}).notNull().defaultNow(),
-  },
-  (table) => [
-    uniqueIndex('auth_email_verifications_hashed_token_unique').on(table.hashedToken),
-    index('auth_email_verifications_user_id_idx').on(table.userId),
-  ],
-);
-
-export type EmailVerificationDb = typeof emailVerifications.$inferSelect;
-export type EmailVerificationCreateDb = typeof emailVerifications.$inferInsert;
-
-export function toEmailVerification(row: EmailVerificationDb): EmailVerification {
-  return {
-    id: row.id,
-    userId: row.userId,
-    hashedToken: row.hashedToken,
-    expiresAt: row.expiresAt,
-    usedAt: row.usedAt,
-    createdAt: row.createdAt,
-  };
-}