@spfn/auth 0.2.0-beta.74 → 0.2.0-beta.80

package/dist/{session-s_hiXmXC.d.ts → session-CGxgH3C9.d.ts}

@@ -1,4 +1,4 @@
-import { K as KeyAlgorithmType } from './types-BtksCI9X.js';
+import { K as KeyAlgorithmType } from './types-1BMx0OX1.js';
 
 /**
  * @spfn/auth - Client Session Management

package/dist/types-1BMx0OX1.d.ts

@@ -0,0 +1,84 @@
+/**
+ * @spfn/auth - Shared Types
+ *
+ * Common types and constants used across the auth package
+ */
+/**
+ * Supported JWT signature algorithms
+ *
+ * - ES256: ECDSA with P-256 and SHA-256 (recommended, smaller keys)
+ * - RS256: RSA with SHA-256 (fallback, larger keys)
+ */
+declare const KEY_ALGORITHM: readonly ["ES256", "RS256"];
+/**
+ * Key algorithm type derived from the const array
+ */
+type KeyAlgorithmType = typeof KEY_ALGORITHM[number];
+/**
+ * Invitation status enum values
+ * Single source of truth for all invitation statuses
+ */
+declare const INVITATION_STATUSES: readonly ["pending", "accepted", "expired", "cancelled"];
+/**
+ * Invitation status type derived from the const array
+ */
+type InvitationStatus = typeof INVITATION_STATUSES[number];
+/**
+ * User status enum values
+ * Single source of truth for all user statuses
+ *
+ * - active: Normal operation (default)
+ * - inactive: Deactivated (user request, dormant)
+ * - suspended: Locked (security incident, ToS violation)
+ * - pending_deletion: Deletion requested, within the grace period (recoverable)
+ * - deleted: Grace period elapsed and the account was purged (anonymize mode only —
+ *   hard-delete removes the row instead, so this status never appears for it)
+ */
+declare const USER_STATUSES: readonly ["active", "inactive", "suspended", "pending_deletion", "deleted"];
+/**
+ * User status type derived from the const array
+ */
+type UserStatus = typeof USER_STATUSES[number];
+/**
+ * Social provider enum values
+ * Single source of truth for supported OAuth providers
+ */
+declare const SOCIAL_PROVIDERS: readonly ["google", "apple", "github", "kakao", "naver", "superself"];
+/**
+ * Social provider type derived from the const array
+ */
+type SocialProvider = typeof SOCIAL_PROVIDERS[number];
+/**
+ * Account deletion request status enum values
+ * Single source of truth for `account_deletion_requests.status`
+ *
+ * - pending: Awaiting the grace period (or immediate purge)
+ * - cancelled: User (or admin) recovered the account before purge
+ * - completed: The purge ran (row is kept as an audit record, never deleted)
+ */
+declare const ACCOUNT_DELETION_REQUEST_STATUSES: readonly ["pending", "cancelled", "completed"];
+/**
+ * Account deletion request status type derived from the const array
+ */
+type AccountDeletionRequestStatus = typeof ACCOUNT_DELETION_REQUEST_STATUSES[number];
+/**
+ * Who initiated an account deletion request
+ */
+declare const ACCOUNT_DELETION_REQUESTED_BY: readonly ["self", "admin"];
+/**
+ * Account deletion requester type derived from the const array
+ */
+type AccountDeletionRequestedBy = typeof ACCOUNT_DELETION_REQUESTED_BY[number];
+/**
+ * Purge strategy enum values
+ *
+ * - anonymize: Scrub PII, keep the row (status becomes 'deleted') — default
+ * - hard-delete: Physically remove the `users` row (cascades to child rows)
+ */
+declare const PURGE_STRATEGIES: readonly ["anonymize", "hard-delete"];
+/**
+ * Purge strategy type derived from the const array
+ */
+type PurgeStrategy = typeof PURGE_STRATEGIES[number];
+
+export { ACCOUNT_DELETION_REQUEST_STATUSES as A, INVITATION_STATUSES as I, type KeyAlgorithmType as K, PURGE_STRATEGIES as P, SOCIAL_PROVIDERS as S, USER_STATUSES as U, KEY_ALGORITHM as a, ACCOUNT_DELETION_REQUESTED_BY as b, type InvitationStatus as c, type UserStatus as d, type SocialProvider as e, type AccountDeletionRequestStatus as f, type AccountDeletionRequestedBy as g, type PurgeStrategy as h };

package/migrations/0006_easy_hardball.sql

@@ -0,0 +1,24 @@
+CREATE TABLE "spfn_auth"."account_deletion_requests" (
+	"id" bigserial PRIMARY KEY NOT NULL,
+	"user_id" bigint,
+	"user_public_id" text NOT NULL,
+	"requested_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"purge_scheduled_at" timestamp with time zone NOT NULL,
+	"status" text DEFAULT 'pending' NOT NULL,
+	"requested_by" text DEFAULT 'self' NOT NULL,
+	"reason" text,
+	"cancelled_at" timestamp with time zone,
+	"completed_at" timestamp with time zone,
+	"purge_strategy" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "spfn_auth"."users" ADD COLUMN "deleted_at" timestamp with time zone;--> statement-breakpoint
+ALTER TABLE "spfn_auth"."users" ADD COLUMN "deleted_by" text;--> statement-breakpoint
+ALTER TABLE "spfn_auth"."account_deletion_requests" ADD CONSTRAINT "account_deletion_requests_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "spfn_auth"."users"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "account_deletion_requests_user_id_idx" ON "spfn_auth"."account_deletion_requests" USING btree ("user_id");--> statement-breakpoint
+CREATE INDEX "account_deletion_requests_status_idx" ON "spfn_auth"."account_deletion_requests" USING btree ("status");--> statement-breakpoint
+CREATE INDEX "account_deletion_requests_purge_scheduled_at_idx" ON "spfn_auth"."account_deletion_requests" USING btree ("purge_scheduled_at");--> statement-breakpoint
+CREATE INDEX "account_deletion_requests_user_public_id_idx" ON "spfn_auth"."account_deletion_requests" USING btree ("user_public_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "account_deletion_requests_user_pending_unique_idx" ON "spfn_auth"."account_deletion_requests" USING btree ("user_id") WHERE "spfn_auth"."account_deletion_requests"."status" = 'pending';

package/migrations/0007_glossy_major_mapleleaf.sql

@@ -0,0 +1 @@
+ALTER TABLE "spfn_auth"."users" DROP CONSTRAINT "email_or_phone_check";