@sixb/sqlite 0.0.1

package/dist/auth-storage/rows.d.ts

@@ -0,0 +1,134 @@
+import type { Principal } from "@sixb/core";
+import type { AccessTokenRecord, GroupMembershipRecord, GroupMembershipSource, InvitationRecord, InvitationStatus, MagicLinkRecord, OidcAuthorizationAttemptRecord, ServiceAccountGroupMembershipRecord, ServiceAccountRecord, ServiceAccountStatus, SessionRecord, UserIdentityRecord, UserRecord, UserStatus } from "@sixb/core/storage";
+export interface SqliteAuthUserRow {
+    readonly project_id: string;
+    readonly id: string;
+    readonly email: string;
+    readonly display_name: string | null;
+    readonly avatar_url: string | null;
+    readonly status: UserStatus;
+    readonly created_at: string;
+    readonly updated_at: string;
+}
+export interface SqliteAuthUserIdentityRow {
+    readonly project_id: string;
+    readonly strategy_id: string;
+    readonly subject: string;
+    readonly user_id: string;
+    readonly claims: string | null;
+    readonly created_at: string;
+    readonly updated_at: string;
+}
+export interface SqliteAuthServiceAccountRow {
+    readonly project_id: string;
+    readonly id: string;
+    readonly name: string;
+    readonly description: string | null;
+    readonly status: ServiceAccountStatus;
+    readonly created_by_principal_type: Principal["type"] | null;
+    readonly created_by_principal_id: string | null;
+    readonly created_by_session_id: string | null;
+    readonly created_at: string;
+    readonly updated_at: string;
+}
+export interface SqliteAuthServiceAccountGroupMembershipRow {
+    readonly project_id: string;
+    readonly service_account_id: string;
+    readonly group_id: string;
+    readonly source: GroupMembershipSource;
+    readonly created_at: string;
+}
+export interface SqliteAuthSessionRow {
+    readonly project_id: string;
+    readonly id: string;
+    readonly user_id: string;
+    readonly strategy_id: string;
+    readonly audience: SessionRecord["audience"];
+    readonly token_hash: string;
+    readonly created_at: string;
+    readonly expires_at: string;
+    readonly absolute_expires_at: string | null;
+    readonly revoked_at: string | null;
+    readonly last_seen_at: string | null;
+    readonly user_agent: string | null;
+    readonly ip_address: string | null;
+}
+export interface SqliteAuthAccessTokenRow {
+    readonly project_id: string;
+    readonly id: string;
+    readonly name: string;
+    readonly kind: AccessTokenRecord["kind"];
+    readonly subject_type: AccessTokenRecord["subjectType"];
+    readonly subject_id: string;
+    readonly token_hash: string;
+    readonly group_ids: string | null;
+    readonly created_by_principal_type: Principal["type"] | null;
+    readonly created_by_principal_id: string | null;
+    readonly created_by_session_id: string | null;
+    readonly created_at: string;
+    readonly expires_at: string;
+    readonly revoked_at: string | null;
+    readonly last_used_at: string | null;
+    readonly last_used_user_agent: string | null;
+    readonly last_used_ip_address: string | null;
+}
+export interface SqliteAuthInvitationRow {
+    readonly project_id: string;
+    readonly id: string;
+    readonly email: string;
+    readonly status: InvitationStatus;
+    readonly created_by_principal_type: Principal["type"] | null;
+    readonly created_by_principal_id: string | null;
+    readonly created_by_session_id: string | null;
+    readonly created_at: string;
+    readonly updated_at: string;
+    readonly expires_at: string;
+    readonly accepted_at: string | null;
+    readonly revoked_at: string | null;
+}
+export interface SqliteAuthGroupMembershipRow {
+    readonly project_id: string;
+    readonly user_id: string;
+    readonly group_id: string;
+    readonly source: GroupMembershipSource;
+    readonly created_at: string;
+}
+export interface SqliteAuthMagicLinkRow {
+    readonly project_id: string;
+    readonly id: string;
+    readonly strategy_id: string;
+    readonly audience: MagicLinkRecord["audience"];
+    readonly email: string;
+    readonly token_hash: string;
+    readonly return_to: string | null;
+    readonly created_at: string;
+    readonly expires_at: string;
+    readonly consumed_at: string | null;
+    readonly revoked_at: string | null;
+}
+export interface SqliteAuthOidcAttemptRow {
+    readonly project_id: string;
+    readonly id: string;
+    readonly strategy_id: string;
+    readonly audience: OidcAuthorizationAttemptRecord["audience"];
+    readonly state_hash: string;
+    readonly nonce_hash: string;
+    readonly code_verifier: string;
+    readonly return_to: string | null;
+    readonly created_at: string;
+    readonly expires_at: string;
+    readonly consumed_at: string | null;
+}
+export declare function rowToUserRecord(row: SqliteAuthUserRow): UserRecord;
+export declare function rowToIdentityRecord(row: SqliteAuthUserIdentityRow): UserIdentityRecord;
+export declare function rowToServiceAccountRecord(row: SqliteAuthServiceAccountRow): ServiceAccountRecord;
+export declare function rowToServiceAccountGroupMembershipRecord(row: SqliteAuthServiceAccountGroupMembershipRow): ServiceAccountGroupMembershipRecord;
+export declare function rowToSessionRecord(row: SqliteAuthSessionRow): SessionRecord;
+export declare function rowToAccessTokenRecord(row: SqliteAuthAccessTokenRow): AccessTokenRecord;
+export declare function rowToInvitationRecord(row: SqliteAuthInvitationRow, groupIds: readonly string[]): InvitationRecord;
+export declare function rowToGroupMembershipRecord(row: SqliteAuthGroupMembershipRow): GroupMembershipRecord;
+export declare function rowToMagicLinkRecord(row: SqliteAuthMagicLinkRow): MagicLinkRecord;
+export declare function rowToOidcAuthorizationAttemptRecord(row: SqliteAuthOidcAttemptRow): OidcAuthorizationAttemptRecord;
+export declare function serializeOptionalRecord(value: Readonly<Record<string, unknown>> | undefined): string | null;
+export declare function serializeOptionalStringArray(value: readonly string[] | undefined): string | null;
+//# sourceMappingURL=rows.d.ts.map

package/dist/auth-storage/rows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rows.d.ts","sourceRoot":"","sources":["../../src/auth-storage/rows.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,KAAK,EACV,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,8BAA8B,EAC9B,mCAAmC,EACnC,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,UAAU,EACV,UAAU,EACX,MAAM,oBAAoB,CAAA;AAE3B,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAA;IACrC,QAAQ,CAAC,yBAAyB,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;IAC5D,QAAQ,CAAC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAA;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC,CAAA;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAA;IACxC,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC,aAAa,CAAC,CAAA;IACvD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,yBAAyB,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;IAC5D,QAAQ,CAAC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7C;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;IACjC,QAAQ,CAAC,yBAAyB,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;IAC5D,QAAQ,CAAC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CACnC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAA;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,UAAU,CAAC,CAAA;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,8BAA8B,CAAC,UAAU,CAAC,CAAA;IAC7D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CACpC;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,iBAAiB,GAAG,UAAU,CAWlE;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,yBAAyB,GAAG,kBAAkB,CAUtF;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,2BAA2B,GAAG,oBAAoB,CAkBhG;AAED,wBAAgB,wCAAwC,CACtD,GAAG,EAAE,0CAA0C,GAC9C,mCAAmC,CAQrC;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,oBAAoB,GAAG,aAAa,CAgB3E;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,wBAAwB,GAAG,iBAAiB,CAyBvF;AAED,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,uBAAuB,EAC5B,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,gBAAgB,CAqBlB;AAED,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,4BAA4B,GAChC,qBAAqB,CAQvB;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,sBAAsB,GAAG,eAAe,CAcjF;AAED,wBAAgB,mCAAmC,CACjD,GAAG,EAAE,wBAAwB,GAC5B,8BAA8B,CAchC;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,GACnD,MAAM,GAAG,IAAI,CAEf;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAEhG"}

package/dist/auth-storage/service-account-group-memberships.d.ts

@@ -0,0 +1,17 @@
+import type { Database } from "bun:sqlite";
+import type { AuthServiceAccountGroupMembershipStore, ReconcileAuthServiceAccountGroupMembershipsInput, ServiceAccountGroupMembershipRecord, UpsertAuthServiceAccountGroupMembershipInput } from "@sixb/core/storage";
+export declare class SqliteAuthServiceAccountGroupMembershipStore implements AuthServiceAccountGroupMembershipStore {
+    private readonly db;
+    constructor(db: Database);
+    upsert(input: UpsertAuthServiceAccountGroupMembershipInput): Promise<ServiceAccountGroupMembershipRecord>;
+    reconcileForServiceAccount(input: ReconcileAuthServiceAccountGroupMembershipsInput): Promise<readonly ServiceAccountGroupMembershipRecord[]>;
+    listForServiceAccount(params: {
+        readonly projectId: string;
+        readonly serviceAccountId: string;
+    }): Promise<readonly ServiceAccountGroupMembershipRecord[]>;
+    listForGroup(params: {
+        readonly projectId: string;
+        readonly groupId: string;
+    }): Promise<readonly ServiceAccountGroupMembershipRecord[]>;
+}
+//# sourceMappingURL=service-account-group-memberships.d.ts.map

package/dist/auth-storage/service-account-group-memberships.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-account-group-memberships.d.ts","sourceRoot":"","sources":["../../src/auth-storage/service-account-group-memberships.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAC1C,OAAO,KAAK,EACV,sCAAsC,EACtC,gDAAgD,EAChD,mCAAmC,EACnC,4CAA4C,EAC7C,MAAM,oBAAoB,CAAA;AAS3B,qBAAa,4CACX,YAAW,sCAAsC;IAErC,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEnC,MAAM,CACV,KAAK,EAAE,4CAA4C,GAClD,OAAO,CAAC,mCAAmC,CAAC;IA0CzC,0BAA0B,CAC9B,KAAK,EAAE,gDAAgD,GACtD,OAAO,CAAC,SAAS,mCAAmC,EAAE,CAAC;IAsDpD,qBAAqB,CAAC,MAAM,EAAE;QAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;KAClC,GAAG,OAAO,CAAC,SAAS,mCAAmC,EAAE,CAAC;IAmBrD,YAAY,CAAC,MAAM,EAAE;QACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KACzB,GAAG,OAAO,CAAC,SAAS,mCAAmC,EAAE,CAAC;CAe5D"}

package/dist/auth-storage/service-accounts.d.ts

@@ -0,0 +1,14 @@
+import type { Database } from "bun:sqlite";
+import type { AuthServiceAccountStore, CreateAuthServiceAccountInput, ListAuthServiceAccountsInput, ListAuthServiceAccountsResult, ServiceAccountRecord, UpdateAuthServiceAccountInput } from "@sixb/core/storage";
+export declare class SqliteAuthServiceAccountStore implements AuthServiceAccountStore {
+    private readonly db;
+    constructor(db: Database);
+    create(input: CreateAuthServiceAccountInput): Promise<ServiceAccountRecord>;
+    getById(params: {
+        readonly projectId: string;
+        readonly id: string;
+    }): Promise<ServiceAccountRecord | null>;
+    update(input: UpdateAuthServiceAccountInput): Promise<ServiceAccountRecord>;
+    list(input: ListAuthServiceAccountsInput): Promise<ListAuthServiceAccountsResult>;
+}
+//# sourceMappingURL=service-accounts.d.ts.map

package/dist/auth-storage/service-accounts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-accounts.d.ts","sourceRoot":"","sources":["../../src/auth-storage/service-accounts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAC1C,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC7B,4BAA4B,EAC5B,6BAA6B,EAC7B,oBAAoB,EACpB,6BAA6B,EAC9B,MAAM,oBAAoB,CAAA;AAc3B,qBAAa,6BAA8B,YAAW,uBAAuB;IAC/D,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEnC,MAAM,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA0D3E,OAAO,CAAC,MAAM,EAAE;QACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KACpB,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAOlC,MAAM,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAqC3E,IAAI,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,6BAA6B,CAAC;CAqCxF"}

package/dist/auth-storage/sessions.d.ts

@@ -0,0 +1,55 @@
+import type { Database } from "bun:sqlite";
+import type { AuthSessionAudience } from "@sixb/core";
+import type { AuthSessionStore, CreateAuthSessionInput, SessionRecord } from "@sixb/core/storage";
+export declare class SqliteAuthSessionStore implements AuthSessionStore {
+    private readonly db;
+    constructor(db: Database);
+    create(input: CreateAuthSessionInput): Promise<SessionRecord>;
+    getById(params: {
+        readonly projectId: string;
+        readonly id: string;
+    }): Promise<SessionRecord | null>;
+    getActiveByUserId(params: {
+        readonly projectId: string;
+        readonly userId: string;
+        readonly audience: AuthSessionAudience;
+        readonly now: Date;
+    }): Promise<SessionRecord | null>;
+    listActiveByUserId(params: {
+        readonly projectId: string;
+        readonly userId: string;
+        readonly now: Date;
+    }): Promise<readonly SessionRecord[]>;
+    findValidByTokenHash(params: {
+        readonly projectId: string;
+        readonly id: string;
+        readonly audience: AuthSessionAudience;
+        readonly tokenHash: string;
+        readonly now: Date;
+    }): Promise<SessionRecord | null>;
+    renewIfValid(params: {
+        readonly projectId: string;
+        readonly id: string;
+        readonly audience: AuthSessionAudience;
+        readonly tokenHash: string;
+        readonly now: Date;
+        readonly expiresAt: Date;
+    }): Promise<SessionRecord | null>;
+    revoke(params: {
+        readonly projectId: string;
+        readonly id: string;
+        readonly revokedAt: Date;
+    }): Promise<SessionRecord>;
+    revokeActiveForUser(params: {
+        readonly projectId: string;
+        readonly userId: string;
+        readonly audience?: AuthSessionAudience;
+        readonly revokedAt: Date;
+    }): Promise<readonly SessionRecord[]>;
+    touch(params: {
+        readonly projectId: string;
+        readonly id: string;
+        readonly lastSeenAt: Date;
+    }): Promise<SessionRecord>;
+}
+//# sourceMappingURL=sessions.d.ts.map

package/dist/auth-storage/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/auth-storage/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAC1C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAcjG,qBAAa,sBAAuB,YAAW,gBAAgB;IACjD,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEnC,MAAM,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,aAAa,CAAC;IAI7D,OAAO,CAAC,MAAM,EAAE;QACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KACpB,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAI3B,iBAAiB,CAAC,MAAM,EAAE;QAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;QACtC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;KACnB,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IA2B3B,kBAAkB,CAAC,MAAM,EAAE;QAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;KACnB,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC;IAwB/B,oBAAoB,CAAC,MAAM,EAAE;QACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;QACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;KACnB,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAiB3B,YAAY,CAAC,MAAM,EAAE;QACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;QACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;QAClB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;KACzB,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAsC3B,MAAM,CAAC,MAAM,EAAE;QACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;KACzB,GAAG,OAAO,CAAC,aAAa,CAAC;IA6BpB,mBAAmB,CAAC,MAAM,EAAE;QAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAA;QACvC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;KACzB,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC;IAI/B,KAAK,CAAC,MAAM,EAAE;QAClB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;KAC1B,GAAG,OAAO,CAAC,aAAa,CAAC;CAyB3B"}

package/dist/auth-storage/shared.d.ts

@@ -0,0 +1,131 @@
+import type { Database } from "bun:sqlite";
+import type { AuthSessionAudience } from "@sixb/core";
+import type { CompleteAuthSessionInput, CreateAuthSessionInput, GroupMembershipRecord, InvitationRecord, MagicLinkRecord, OidcAuthorizationAttemptRecord, UpsertAuthGroupMembershipInput, UserRecord } from "@sixb/core/storage";
+import type { SqliteAuthMagicLinkRow, SqliteAuthOidcAttemptRow, SqliteAuthSessionRow, SqliteAuthUserIdentityRow, SqliteAuthUserRow } from "./rows";
+import { rowToSessionRecord } from "./rows";
+export type SqliteValue = string | number | null;
+export declare function assertNonEmpty(value: string, label: string): string;
+export declare function normalizeEmail(email: string): string;
+export declare function normalizeGroupIds(groupIds: readonly string[] | undefined): readonly string[];
+export declare function cloneRecord<T>(record: T): T;
+export declare function dateOrNow(value: Date | undefined): Date;
+export declare function toIso(value: Date): string;
+export declare function hasEmptyFilter(values: readonly unknown[] | undefined): boolean;
+export declare function appendPagination(query: string, args: SqliteValue[], input: {
+    readonly limit?: number;
+    readonly offset?: number;
+}): string;
+export declare function getUserRowById(db: Database, params: {
+    readonly projectId: string;
+    readonly id: string;
+}): SqliteAuthUserRow | null;
+export declare function getUserById(db: Database, params: {
+    readonly projectId: string;
+    readonly id: string;
+}): UserRecord | null;
+export declare function getUserRowByEmail(db: Database, params: {
+    readonly projectId: string;
+    readonly email: string;
+}): SqliteAuthUserRow | null;
+export declare function getUserByEmail(db: Database, params: {
+    readonly projectId: string;
+    readonly email: string;
+}): UserRecord | null;
+export declare function getIdentityRowBySubject(db: Database, params: {
+    readonly projectId: string;
+    readonly strategyId: string;
+    readonly subject: string;
+}): SqliteAuthUserIdentityRow | null;
+export declare function getSessionRowById(db: Database, params: {
+    readonly projectId: string;
+    readonly id: string;
+}): SqliteAuthSessionRow | null;
+export declare function getSessionById(db: Database, params: {
+    readonly projectId: string;
+    readonly id: string;
+}): ReturnType<typeof rowToSessionRecord> | null;
+export declare function requireSessionById(db: Database, params: {
+    readonly projectId: string;
+    readonly id: string;
+}): ReturnType<typeof rowToSessionRecord>;
+export declare function getInvitationGroupIds(db: Database, params: {
+    readonly projectId: string;
+    readonly invitationId: string;
+}): readonly string[];
+export declare function getInvitationById(db: Database, params: {
+    readonly projectId: string;
+    readonly id: string;
+}): InvitationRecord | null;
+export declare function requireInvitationById(db: Database, params: {
+    readonly projectId: string;
+    readonly id: string;
+}): InvitationRecord;
+export declare function getActiveInvitationByEmail(db: Database, params: {
+    readonly projectId: string;
+    readonly email: string;
+    readonly now: Date;
+}): InvitationRecord | null;
+export declare function replaceInvitationGroups(db: Database, params: {
+    readonly projectId: string;
+    readonly invitationId: string;
+    readonly groupIds: readonly string[];
+}): void;
+export declare function getMagicLinkRowById(db: Database, params: {
+    readonly projectId: string;
+    readonly id: string;
+}): SqliteAuthMagicLinkRow | null;
+export declare function getMagicLinkById(db: Database, params: {
+    readonly projectId: string;
+    readonly id: string;
+}): MagicLinkRecord | null;
+export declare function consumeMagicLink(db: Database, params: {
+    readonly projectId: string;
+    readonly id: string;
+    readonly tokenHash: string;
+    readonly consumedAt: Date;
+}): MagicLinkRecord;
+export declare function getOidcAttemptRowById(db: Database, params: {
+    readonly projectId: string;
+    readonly id: string;
+}): SqliteAuthOidcAttemptRow | null;
+export declare function getOidcAttemptById(db: Database, params: {
+    readonly projectId: string;
+    readonly id: string;
+}): OidcAuthorizationAttemptRecord | null;
+export declare function consumeOidcAttempt(db: Database, params: {
+    readonly projectId: string;
+    readonly id: string;
+    readonly stateHash: string;
+    readonly consumedAt: Date;
+}): OidcAuthorizationAttemptRecord;
+export declare function validateCompleteSessionInput(db: Database, projectId: string, session: CompleteAuthSessionInput): void;
+export declare function assertSessionIdAvailable(db: Database, projectId: string, sessionId: string): void;
+export declare function createSession(db: Database, input: CreateAuthSessionInput): ReturnType<typeof rowToSessionRecord>;
+export declare function revokeActiveSessionsForUser(db: Database, params: {
+    readonly projectId: string;
+    readonly userId: string;
+    readonly audience?: AuthSessionAudience;
+    readonly revokedAt: Date;
+}): readonly ReturnType<typeof rowToSessionRecord>[];
+export declare function upsertGroupMembership(db: Database, input: UpsertAuthGroupMembershipInput): GroupMembershipRecord;
+export declare function removeGroupMembership(db: Database, params: {
+    readonly projectId: string;
+    readonly userId: string;
+    readonly groupId: string;
+}): GroupMembershipRecord | null;
+export declare function getGroupMembership(db: Database, params: {
+    readonly projectId: string;
+    readonly userId: string;
+    readonly groupId: string;
+}): GroupMembershipRecord | null;
+export declare function listMembershipsForUser(db: Database, params: {
+    readonly projectId: string;
+    readonly userId: string;
+}): readonly GroupMembershipRecord[];
+export declare function revokeActiveMagicLinksForEmail(db: Database, params: {
+    readonly projectId: string;
+    readonly email: string;
+    readonly revokedAt: Date;
+}): readonly MagicLinkRecord[];
+export declare function mapUniqueConstraintError(error: unknown, code: "duplicate_access_token" | "duplicate_identity" | "duplicate_invitation" | "duplicate_magic_link" | "duplicate_oidc_attempt" | "duplicate_service_account" | "duplicate_session" | "duplicate_user", message: string): never;
+//# sourceMappingURL=shared.d.ts.map

package/dist/auth-storage/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/auth-storage/shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAC1C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AACrD,OAAO,KAAK,EACV,wBAAwB,EACxB,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,EACf,8BAA8B,EAC9B,8BAA8B,EAC9B,UAAU,EACX,MAAM,oBAAoB,CAAA;AAG3B,OAAO,KAAK,EAGV,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,yBAAyB,EACzB,iBAAiB,EAClB,MAAM,QAAQ,CAAA;AACf,OAAO,EAKL,kBAAkB,EAEnB,MAAM,QAAQ,CAAA;AAEf,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;AAEhD,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAMnE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,CAE5F;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAE3C;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,IAAI,GAAG,SAAS,GAAG,IAAI,CAEvD;AAED,wBAAgB,KAAK,CAAC,KAAK,EAAE,IAAI,GAAG,MAAM,CAEzC;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,GAAG,OAAO,CAE9E;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,WAAW,EAAE,EACnB,KAAK,EAAE;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3D,MAAM,CAcR;AAED,wBAAgB,cAAc,CAC5B,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,iBAAiB,GAAG,IAAI,CAI1B;AAED,wBAAgB,WAAW,CACzB,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,UAAU,GAAG,IAAI,CAGnB;AAED,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC7D,iBAAiB,GAAG,IAAI,CAI1B;AAED,wBAAgB,cAAc,CAC5B,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC7D,UAAU,GAAG,IAAI,CAGnB;AAED,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IACN,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB,GACA,yBAAyB,GAAG,IAAI,CAYlC;AAED,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,oBAAoB,GAAG,IAAI,CAI7B;AAED,wBAAgB,cAAc,CAC5B,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,UAAU,CAAC,OAAO,kBAAkB,CAAC,GAAG,IAAI,CAG9C;AAED,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,UAAU,CAAC,OAAO,kBAAkB,CAAC,CASvC;AAED,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACpE,SAAS,MAAM,EAAE,CAcnB;AAED,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,gBAAgB,GAAG,IAAI,CAMzB;AAED,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,gBAAgB,CASlB;AAED,wBAAgB,0BAA0B,CACxC,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;CAAE,GACjF,gBAAgB,GAAG,IAAI,CAqBzB;AAED,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IACN,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CACrC,GACA,IAAI,CAkBN;AAED,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,sBAAsB,GAAG,IAAI,CAI/B;AAED,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,eAAe,GAAG,IAAI,CAGxB;AAED,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IACN,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;CAC1B,GACA,eAAe,CAwCjB;AAED,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,wBAAwB,GAAG,IAAI,CAIjC;AAED,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,8BAA8B,GAAG,IAAI,CAGvC;AAED,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IACN,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;CAC1B,GACA,8BAA8B,CAwChC;AAED,wBAAgB,4BAA4B,CAC1C,EAAE,EAAE,QAAQ,EACZ,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,wBAAwB,GAChC,IAAI,CAKN;AAED,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAOjG;AAED,wBAAgB,aAAa,CAC3B,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,sBAAsB,GAC5B,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAgDvC;AAED,wBAAgB,2BAA2B,CACzC,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IACN,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IACvC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CACzB,GACA,SAAS,UAAU,CAAC,OAAO,kBAAkB,CAAC,EAAE,CA8ClD;AAED,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,8BAA8B,GACpC,qBAAqB,CAqCvB;AAED,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxF,qBAAqB,GAAG,IAAI,CAoB9B;AAED,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxF,qBAAqB,GAAG,IAAI,CAc9B;AAED,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC9D,SAAS,qBAAqB,EAAE,CAclC;AAED,wBAAgB,8BAA8B,CAC5C,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CAAE,GACvF,SAAS,eAAe,EAAE,CAoC5B;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,OAAO,EACd,IAAI,EACA,wBAAwB,GACxB,oBAAoB,GACpB,sBAAsB,GACtB,sBAAsB,GACtB,wBAAwB,GACxB,2BAA2B,GAC3B,mBAAmB,GACnB,gBAAgB,EACpB,OAAO,EAAE,MAAM,GACd,KAAK,CAMP"}

package/dist/auth-storage/users.d.ts

@@ -0,0 +1,19 @@
+import type { Database } from "bun:sqlite";
+import type { AuthUserStore, CreateAuthUserInput, ListAuthUsersInput, ListAuthUsersResult, UpdateAuthUserProfileInput, UpdateAuthUserStatusInput, UserRecord } from "@sixb/core/storage";
+export declare class SqliteAuthUserStore implements AuthUserStore {
+    private readonly db;
+    constructor(db: Database);
+    create(input: CreateAuthUserInput): Promise<UserRecord>;
+    getById(params: {
+        readonly projectId: string;
+        readonly id: string;
+    }): Promise<UserRecord | null>;
+    getByEmail(params: {
+        readonly projectId: string;
+        readonly email: string;
+    }): Promise<UserRecord | null>;
+    updateProfile(input: UpdateAuthUserProfileInput): Promise<UserRecord>;
+    updateStatus(input: UpdateAuthUserStatusInput): Promise<UserRecord>;
+    list(input: ListAuthUsersInput): Promise<ListAuthUsersResult>;
+}
+//# sourceMappingURL=users.d.ts.map

package/dist/auth-storage/users.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../src/auth-storage/users.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAC1C,OAAO,KAAK,EACV,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,0BAA0B,EAC1B,yBAAyB,EACzB,UAAU,EACX,MAAM,oBAAoB,CAAA;AAiB3B,qBAAa,mBAAoB,YAAW,aAAa;IAC3C,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEnC,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC;IAoEvD,OAAO,CAAC,MAAM,EAAE;QACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KACpB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAKxB,UAAU,CAAC,MAAM,EAAE;QACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KACvB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAKxB,aAAa,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,UAAU,CAAC;IAyCrE,YAAY,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,UAAU,CAAC;IAiCnE,IAAI,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAsCpE"}

package/dist/index.d.ts

@@ -0,0 +1,71 @@
+import type { MigrationCapableStorage, Storage, StorageMigrator, StorageTransactionOptions } from "@sixb/core";
+import { SqliteActionRunStorage } from "./action-run-storage";
+import { SqliteAgentStorage } from "./agents";
+import { SqliteAuthStorage } from "./auth-storage";
+import { SqliteOntologyStorage } from "./ontology-storage";
+import { SqlitePipelineRunStorage } from "./pipeline-run-storage";
+import { SqliteProjectionRunStorage } from "./projection-run-storage";
+import { SqliteRulesStorage } from "./rules-storage";
+import { SqliteSyncRunStorage } from "./sync-run-storage";
+import { SqliteWebhookDeliveryStorage } from "./webhook-delivery-storage";
+import { SqliteWebhookRunStorage } from "./webhook-run-storage";
+import { SqliteWorkflowInterventionStorage } from "./workflow-intervention-storage";
+import { SqliteWorkflowRunStorage } from "./workflow-run-storage";
+export interface SqliteStorageOptions {
+    /** Directory path for the SQLite storage database. */
+    path?: string;
+}
+/**
+ * SQLite storage provider for Sixb.
+ *
+ * Bundles object, timeseries, auth, sync run, pipeline run, projection run, workflow run, webhook
+ * run, and webhook delivery storage backed by SQLite.
+ *
+ * Usage:
+ * ```ts
+ * const storage = new SqliteStorage({ path: ".sixb" })
+ *
+ * export const sixb = createSixb({
+ *   broker: new InMemoryBroker(),
+ *   storage,
+ * })
+ * ```
+ */
+export declare class SqliteStorage implements MigrationCapableStorage {
+    readonly objects: Storage["objects"];
+    readonly ontology: SqliteOntologyStorage;
+    readonly auth: SqliteAuthStorage;
+    readonly agents: SqliteAgentStorage;
+    readonly actionRuns: SqliteActionRunStorage;
+    readonly pipelineRuns: SqlitePipelineRunStorage;
+    readonly syncRuns: SqliteSyncRunStorage;
+    readonly projectionRuns: SqliteProjectionRunStorage;
+    readonly workflowRuns: SqliteWorkflowRunStorage;
+    readonly workflowInterventions: SqliteWorkflowInterventionStorage;
+    readonly timeseries: Storage["timeseries"];
+    readonly webhookDeliveries: SqliteWebhookDeliveryStorage;
+    readonly webhookRuns: SqliteWebhookRunStorage;
+    readonly rules: SqliteRulesStorage;
+    readonly migrators: readonly StorageMigrator[];
+    private readonly connection;
+    private readonly transactionScope;
+    private transactionTail;
+    constructor(options?: SqliteStorageOptions);
+    ping(): Promise<void>;
+    /**
+     * The `isolation` option is intentionally ignored. SQLite runs every transaction through one
+     * shared connection serialized by {@link withTransactionLock} and a `BEGIN IMMEDIATE`, so there is
+     * no concurrent transaction to isolate against — the lock already provides serializable semantics
+     * for transaction-vs-transaction races. Postgres, which has true concurrent connections, is where
+     * `isolation: "serializable"` translates to a real isolation level.
+     */
+    transaction<T>(run: (tx: Storage) => Promise<T> | T, _options?: StorageTransactionOptions): Promise<T>;
+    close(): void;
+    private createTransactionStorage;
+    private runRootStorageOperation;
+    private runRootOntologyOperation;
+    private assertRootOperationAvailable;
+    private withTransactionLock;
+}
+export { migrateSqliteStorage } from "./migrations";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,uBAAuB,EACvB,OAAO,EACP,eAAe,EACf,yBAAyB,EAC1B,MAAM,YAAY,CAAA;AAenB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAOlD,OAAO,EAAE,qBAAqB,EAAyC,MAAM,oBAAoB,CAAA;AACjG,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAQzD,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAA;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,iCAAiC,EAAE,MAAM,iCAAiC,CAAA;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAA;AAEjE,MAAM,WAAW,oBAAoB;IACnC,sDAAsD;IACtD,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,aAAc,YAAW,uBAAuB;IAC3D,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;IACpC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAA;IACxC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAA;IACnC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAA;IAC3C,QAAQ,CAAC,YAAY,EAAE,wBAAwB,CAAA;IAC/C,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAA;IACvC,QAAQ,CAAC,cAAc,EAAE,0BAA0B,CAAA;IACnD,QAAQ,CAAC,YAAY,EAAE,wBAAwB,CAAA;IAC/C,QAAQ,CAAC,qBAAqB,EAAE,iCAAiC,CAAA;IACjE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IAC1C,QAAQ,CAAC,iBAAiB,EAAE,4BAA4B,CAAA;IACxD,QAAQ,CAAC,WAAW,EAAE,uBAAuB,CAAA;IAC7C,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAA;IAClC,QAAQ,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,CAAA;IAE9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA+C;IAChF,OAAO,CAAC,eAAe,CAAmC;gBAE9C,OAAO,GAAE,oBAAyB;IAsCxC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAM3B;;;;;;OAMG;IACG,WAAW,CAAC,CAAC,EACjB,GAAG,EAAE,CAAC,EAAE,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EACpC,QAAQ,GAAE,yBAA8B,GACvC,OAAO,CAAC,CAAC,CAAC;IAqCb,KAAK,IAAI,IAAI;IAIb,OAAO,CAAC,wBAAwB;IAwBhC,OAAO,CAAC,uBAAuB;IAK/B,OAAO,CAAC,wBAAwB;IAKhC,OAAO,CAAC,4BAA4B;YAOtB,mBAAmB;CAclC;AAgDD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA"}