@spfn/auth 0.2.0-beta.86 → 0.2.0-beta.87

package/dist/server.d.ts

@@ -1,5 +1,5 @@
-import { j as AuthInitOptions, k as OAuthProvider, e as VerificationPurpose, i as PermissionCategory, l as AuthContext } from './authenticate-DTA7W4v2.js';
-export { C as ChangePasswordParams, a5 as EmailSchema, I as IssueOneTimeTokenResult, s as LoginParams, L as LoginResult, t as LogoutParams, ac as NativeVerifyOptions, aa as NormalizedIdentity, _ as OAuthCallbackParams, $ as OAuthCallbackResult, ad as OAuthCodeExchangeOptions, a2 as OAuthNativeParams, c as OAuthNativeResult, Z as OAuthStartParams, O as OAuthStartResult, ab as OAuthTokens, a7 as PasswordSchema, a6 as PhoneSchema, q as RegisterParams, E as RegisterPublicKeyParams, a as RegisterResult, G as RevokeKeyParams, F as RotateKeyParams, b as RotateKeyResult, w as SendVerificationCodeParams, S as SendVerificationCodeResult, a8 as TargetTypeSchema, af as UnlinkNotification, ag as UnlinkNotifyRejection, ae as UnlinkNotifyRequest, a0 as UnlinkNotifyResult, g as VERIFICATION_PURPOSES, f as VERIFICATION_TARGET_TYPES, a9 as VerificationPurposeSchema, V as VerificationTargetType, x as VerifyCodeParams, y as VerifyCodeResult, m as authRouter, a3 as authenticate, N as buildOAuthErrorUrl, p as changePasswordService, W as getEnabledOAuthProviders, X as getGoogleAccessToken, ai as getOAuthProvider, aj as getRegisteredProviders, Q as isOAuthProviderEnabled, H as issueOneTimeTokenService, n as loginService, o as logoutService, M as oauthCallbackService, a1 as oauthNativeService, K as oauthStartService, Y as oauthUnlinkNotifyService, a4 as optionalAuth, ah as registerOAuthProvider, z as registerPublicKeyService, r as registerService, T as requireEnabledProvider, D as revokeKeyService, B as rotateKeyService, u as sendVerificationCodeService, v as verifyCodeService, J as verifyOneTimeTokenService } from './authenticate-DTA7W4v2.js';
+import { j as AuthInitOptions, k as OAuthProvider, e as VerificationPurpose, i as PermissionCategory, l as AuthContext } from './authenticate-C7w-pLOR.js';
+export { a5 as AuthProfileVerifier, C as ChangePasswordParams, a8 as EmailSchema, I as IssueOneTimeTokenResult, s as LoginParams, L as LoginResult, t as LogoutParams, af as NativeVerifyOptions, ad as NormalizedIdentity, _ as OAuthCallbackParams, $ as OAuthCallbackResult, ag as OAuthCodeExchangeOptions, a2 as OAuthNativeParams, c as OAuthNativeResult, Z as OAuthStartParams, O as OAuthStartResult, ae as OAuthTokens, aa as PasswordSchema, a9 as PhoneSchema, q as RegisterParams, E as RegisterPublicKeyParams, a as RegisterResult, G as RevokeKeyParams, F as RotateKeyParams, b as RotateKeyResult, w as SendVerificationCodeParams, S as SendVerificationCodeResult, ab as TargetTypeSchema, ai as UnlinkNotification, aj as UnlinkNotifyRejection, ah as UnlinkNotifyRequest, a0 as UnlinkNotifyResult, g as VERIFICATION_PURPOSES, f as VERIFICATION_TARGET_TYPES, ac as VerificationPurposeSchema, V as VerificationTargetType, x as VerifyCodeParams, y as VerifyCodeResult, m as authRouter, a6 as authenticate, N as buildOAuthErrorUrl, p as changePasswordService, W as getEnabledOAuthProviders, X as getGoogleAccessToken, al as getOAuthProvider, am as getRegisteredProviders, Q as isOAuthProviderEnabled, H as issueOneTimeTokenService, n as loginService, o as logoutService, M as oauthCallbackService, a1 as oauthNativeService, K as oauthStartService, Y as oauthUnlinkNotifyService, a7 as optionalAuth, ak as registerOAuthProvider, z as registerPublicKeyService, r as registerService, T as requireEnabledProvider, a4 as resolveAuthenticatedUser, D as revokeKeyService, B as rotateKeyService, a3 as selectAuthProfile, u as sendVerificationCodeService, v as verifyCodeService, J as verifyOneTimeTokenService } from './authenticate-C7w-pLOR.js';
 import * as drizzle_orm_pg_core from 'drizzle-orm/pg-core';
 import { K as KeyAlgorithmType, c as InvitationStatus, e as SocialProvider, g as AccountDeletionRequestedBy, h as PurgeStrategy } from './types-1BMx0OX1.js';
 export { b as ACCOUNT_DELETION_REQUESTED_BY, A as ACCOUNT_DELETION_REQUEST_STATUSES, f as AccountDeletionRequestStatus, I as INVITATION_STATUSES, a as KEY_ALGORITHM, P as PURGE_STRATEGIES, S as SOCIAL_PROVIDERS, U as USER_STATUSES, d as UserStatus } from './types-1BMx0OX1.js';
@@ -1317,7 +1317,7 @@ declare function getAuthSessionService(userId: string | number | bigint): Promis
         id: number;
         name: string;
         displayName: string;
-        category: "custom" | "user" | "auth" | "rbac" | "system" | undefined;
+        category: "auth" | "custom" | "user" | "rbac" | "system" | undefined;
     }[];
     userId: number;
     publicId: string;
@@ -1763,7 +1763,7 @@ declare const accountDeletionRequests: drizzle_orm_pg_core.PgTableWithColumns<{
             name: string;
             tableName: "account_deletion_requests";
             dataType: "string enum";
-            data: "self" | "admin";
+            data: "admin" | "self";
             driverParam: string;
             notNull: true;
             hasDefault: true;
@@ -2877,7 +2877,7 @@ declare const permissions: drizzle_orm_pg_core.PgTableWithColumns<{
             name: string;
             tableName: "permissions";
             dataType: "string enum";
-            data: "custom" | "user" | "auth" | "rbac" | "system";
+            data: "auth" | "custom" | "user" | "rbac" | "system";
             driverParam: string;
             notNull: false;
             hasDefault: false;
@@ -3466,15 +3466,15 @@ declare class UsersRepository extends BaseRepository {
     create(data: NewUser): Promise<{
         email: string | null;
         phone: string | null;
-        status: "active" | "inactive" | "suspended" | "pending_deletion" | "deleted";
-        username: string | null;
         id: number;
-        createdAt: Date;
-        updatedAt: Date;
         publicId: string;
+        username: string | null;
         passwordHash: string | null;
         passwordChangeRequired: boolean;
         roleId: number;
+        createdAt: Date;
+        updatedAt: Date;
+        status: "active" | "inactive" | "suspended" | "pending_deletion" | "deleted";
         emailVerifiedAt: Date | null;
         phoneVerifiedAt: Date | null;
         lastLoginAt: Date | null;
@@ -3581,15 +3581,15 @@ declare class UsersRepository extends BaseRepository {
     deleteById(id: number): Promise<{
         email: string | null;
         phone: string | null;
-        status: "active" | "inactive" | "suspended" | "pending_deletion" | "deleted";
-        username: string | null;
         id: number;
-        createdAt: Date;
-        updatedAt: Date;
         publicId: string;
+        username: string | null;
         passwordHash: string | null;
         passwordChangeRequired: boolean;
         roleId: number;
+        createdAt: Date;
+        updatedAt: Date;
+        status: "active" | "inactive" | "suspended" | "pending_deletion" | "deleted";
         emailVerifiedAt: Date | null;
         phoneVerifiedAt: Date | null;
         lastLoginAt: Date | null;
@@ -3614,7 +3614,7 @@ declare class UsersRepository extends BaseRepository {
             id: number;
             name: string;
             displayName: string;
-            category: "custom" | "user" | "auth" | "rbac" | "system" | undefined;
+            category: "auth" | "custom" | "user" | "rbac" | "system" | undefined;
         }[];
     }>;
     /**
@@ -3729,16 +3729,16 @@ declare class KeysRepository extends BaseRepository {
      * Write primary 사용
      */
     create(data: NewUserPublicKey): Promise<{
-        userId: number;
+        publicKey: string;
         keyId: string;
+        fingerprint: string;
+        algorithm: "ES256" | "RS256";
+        userId: number;
         id: number;
         isActive: boolean;
         createdAt: Date;
-        publicKey: string;
-        algorithm: "ES256" | "RS256";
-        fingerprint: string;
-        lastUsedAt: Date | null;
         expiresAt: Date | null;
+        lastUsedAt: Date | null;
         revokedAt: Date | null;
         revokedReason: string | null;
     }>;
@@ -3786,16 +3786,16 @@ declare class KeysRepository extends BaseRepository {
      * Write primary 사용
      */
     deleteByKeyIdAndUserId(keyId: string, userId: number): Promise<{
-        userId: number;
+        publicKey: string;
         keyId: string;
+        fingerprint: string;
+        algorithm: "ES256" | "RS256";
+        userId: number;
         id: number;
         isActive: boolean;
         createdAt: Date;
-        publicKey: string;
-        algorithm: "ES256" | "RS256";
-        fingerprint: string;
-        lastUsedAt: Date | null;
         expiresAt: Date | null;
+        lastUsedAt: Date | null;
         revokedAt: Date | null;
         revokedReason: string | null;
     }>;
@@ -3825,6 +3825,27 @@ declare class KeysRepository extends BaseRepository {
         revokedAt: Date | null;
         revokedReason: string | null;
     }>;
+    /**
+     * Key ID로 공개키 조회 — 활성 여부 무관 (clientProofV1 admission의 revocation 판정용)
+     *
+     * 폐기(isActive=false)·만료(expiresAt 경과)를 SESSION_REVOKED로, 미등록을
+     * PROOF_INVALID로 구분해야 하므로 활성 필터 없이 조회한다. keyId는 UNIQUE.
+     * Read replica 사용
+     */
+    findByKeyId(keyId: string): Promise<{
+        id: number;
+        userId: number;
+        keyId: string;
+        publicKey: string;
+        algorithm: "ES256" | "RS256";
+        fingerprint: string;
+        isActive: boolean;
+        createdAt: Date;
+        lastUsedAt: Date | null;
+        expiresAt: Date | null;
+        revokedAt: Date | null;
+        revokedReason: string | null;
+    }>;
     /**
      * Key ID로 활성 공개키 조회 (authenticate용)
      * Read replica 사용
@@ -3910,14 +3931,14 @@ declare class VerificationCodesRepository extends BaseRepository {
      * Write primary 사용
      */
     create(data: NewVerificationCode): Promise<{
+        target: string;
+        targetType: "email" | "phone";
+        purpose: "registration" | "login" | "password_reset" | "email_change" | "phone_change" | "account_deletion";
+        code: string;
         id: number;
         createdAt: Date;
         updatedAt: Date;
         expiresAt: Date;
-        target: string;
-        targetType: "email" | "phone";
-        code: string;
-        purpose: "registration" | "login" | "password_reset" | "email_change" | "phone_change" | "account_deletion";
         usedAt: Date | null;
         attempts: number;
     }>;
@@ -4050,8 +4071,8 @@ declare class RolesRepository extends BaseRepository {
      */
     create(data: NewRoleEntity): Promise<{
         description: string | null;
-        id: number;
         name: string;
+        id: number;
         displayName: string;
         isBuiltin: boolean;
         isSystem: boolean;
@@ -4080,8 +4101,8 @@ declare class RolesRepository extends BaseRepository {
      */
     deleteById(id: number): Promise<{
         description: string | null;
-        id: number;
         name: string;
+        id: number;
         displayName: string;
         isBuiltin: boolean;
         isSystem: boolean;
@@ -4114,7 +4135,7 @@ declare class PermissionsRepository extends BaseRepository {
         name: string;
         displayName: string;
         description: string | null;
-        category: "custom" | "user" | "auth" | "rbac" | "system" | null;
+        category: "auth" | "custom" | "user" | "rbac" | "system" | null;
         isBuiltin: boolean;
         isSystem: boolean;
         isActive: boolean;
@@ -4130,7 +4151,7 @@ declare class PermissionsRepository extends BaseRepository {
         name: string;
         displayName: string;
         description: string | null;
-        category: "custom" | "user" | "auth" | "rbac" | "system" | null;
+        category: "auth" | "custom" | "user" | "rbac" | "system" | null;
         isBuiltin: boolean;
         isSystem: boolean;
         isActive: boolean;
@@ -4170,7 +4191,7 @@ declare class PermissionsRepository extends BaseRepository {
         name: string;
         displayName: string;
         description: string | null;
-        category: "custom" | "user" | "auth" | "rbac" | "system" | null;
+        category: "auth" | "custom" | "user" | "rbac" | "system" | null;
         isBuiltin: boolean;
         isSystem: boolean;
         isActive: boolean;
@@ -4181,16 +4202,16 @@ declare class PermissionsRepository extends BaseRepository {
      */
     deleteById(id: number): Promise<{
         description: string | null;
-        id: number;
+        metadata: Record<string, any> | null;
         name: string;
+        id: number;
         displayName: string;
         isBuiltin: boolean;
         isSystem: boolean;
         isActive: boolean;
         createdAt: Date;
         updatedAt: Date;
-        metadata: Record<string, any> | null;
-        category: "custom" | "user" | "auth" | "rbac" | "system" | null;
+        category: "auth" | "custom" | "user" | "rbac" | "system" | null;
     }>;
 }
 declare const permissionsRepository: PermissionsRepository;
@@ -4235,9 +4256,9 @@ declare class RolePermissionsRepository extends BaseRepository {
      */
     createMany(data: NewRolePermission[]): Promise<{
         id: number;
+        roleId: number;
         createdAt: Date;
         updatedAt: Date;
-        roleId: number;
         permissionId: number;
     }[]>;
     /**
@@ -4253,9 +4274,9 @@ declare class RolePermissionsRepository extends BaseRepository {
      */
     setPermissionsForRole(roleId: number, permissionIds: number[]): Promise<{
         id: number;
+        roleId: number;
         createdAt: Date;
         updatedAt: Date;
-        roleId: number;
         permissionId: number;
     }[]>;
 }
@@ -4320,9 +4341,9 @@ declare class UserPermissionsRepository extends BaseRepository {
         id: number;
         createdAt: Date;
         updatedAt: Date;
-        expiresAt: Date | null;
-        reason: string | null;
         permissionId: number;
+        reason: string | null;
+        expiresAt: Date | null;
         granted: boolean;
     }>;
     /**
@@ -4346,9 +4367,9 @@ declare class UserPermissionsRepository extends BaseRepository {
         id: number;
         createdAt: Date;
         updatedAt: Date;
-        expiresAt: Date | null;
-        reason: string | null;
         permissionId: number;
+        reason: string | null;
+        expiresAt: Date | null;
         granted: boolean;
     }>;
     /**
@@ -4427,6 +4448,7 @@ declare class UserProfilesRepository extends BaseRepository {
      * 프로필 생성
      */
     create(data: NewUserProfile): Promise<{
+        metadata: Record<string, any> | null;
         userId: number;
         id: number;
         displayName: string | null;
@@ -4444,7 +4466,6 @@ declare class UserProfilesRepository extends BaseRepository {
         location: string | null;
         company: string | null;
         jobTitle: string | null;
-        metadata: Record<string, any> | null;
     }>;
     /**
      * 프로필 업데이트 (by ID)
@@ -4496,6 +4517,7 @@ declare class UserProfilesRepository extends BaseRepository {
      * 프로필 삭제 (by ID)
      */
     deleteById(id: number): Promise<{
+        metadata: Record<string, any> | null;
         userId: number;
         id: number;
         displayName: string | null;
@@ -4513,12 +4535,12 @@ declare class UserProfilesRepository extends BaseRepository {
         location: string | null;
         company: string | null;
         jobTitle: string | null;
-        metadata: Record<string, any> | null;
     }>;
     /**
      * 프로필 삭제 (by User ID)
      */
     deleteByUserId(userId: number): Promise<{
+        metadata: Record<string, any> | null;
         userId: number;
         id: number;
         displayName: string | null;
@@ -4536,7 +4558,6 @@ declare class UserProfilesRepository extends BaseRepository {
         location: string | null;
         company: string | null;
         jobTitle: string | null;
-        metadata: Record<string, any> | null;
     }>;
     /**
      * 프로필 Upsert (by User ID)
@@ -4545,6 +4566,7 @@ declare class UserProfilesRepository extends BaseRepository {
      * 새로 생성 시 displayName은 필수 (없으면 'User'로 설정)
      */
     upsertByUserId(userId: number, data: Partial<Omit<NewUserProfile, 'userId'>>): Promise<{
+        metadata: Record<string, any> | null;
         userId: number;
         id: number;
         displayName: string | null;
@@ -4562,7 +4584,6 @@ declare class UserProfilesRepository extends BaseRepository {
         location: string | null;
         company: string | null;
         jobTitle: string | null;
-        metadata: Record<string, any> | null;
     }>;
     /**
      * User ID로 프로필 데이터 조회 (formatted)
@@ -4690,15 +4711,15 @@ declare class InvitationsRepository extends BaseRepository {
      */
     create(data: NewInvitation): Promise<{
         email: string;
-        status: "pending" | "accepted" | "expired" | "cancelled";
+        metadata: Record<string, any> | null;
         id: number;
+        roleId: number;
         createdAt: Date;
         updatedAt: Date;
-        roleId: number;
-        metadata: Record<string, any> | null;
-        expiresAt: Date;
+        status: "pending" | "accepted" | "expired" | "cancelled";
         token: string;
         invitedBy: number;
+        expiresAt: Date;
         acceptedAt: Date | null;
         cancelledAt: Date | null;
     }>;
@@ -4724,15 +4745,15 @@ declare class InvitationsRepository extends BaseRepository {
      */
     deleteById(id: number): Promise<{
         email: string;
-        status: "pending" | "accepted" | "expired" | "cancelled";
+        metadata: Record<string, any> | null;
         id: number;
+        roleId: number;
         createdAt: Date;
         updatedAt: Date;
-        roleId: number;
-        metadata: Record<string, any> | null;
-        expiresAt: Date;
+        status: "pending" | "accepted" | "expired" | "cancelled";
         token: string;
         invitedBy: number;
+        expiresAt: Date;
         acceptedAt: Date | null;
         cancelledAt: Date | null;
     }>;
@@ -5048,7 +5069,7 @@ declare class AccountDeletionRequestsRepository extends BaseRepository {
         requestedAt: Date;
         purgeScheduledAt: Date;
         status: "pending" | "cancelled" | "completed";
-        requestedBy: "self" | "admin";
+        requestedBy: "admin" | "self";
         reason: string | null;
         cancelledAt: Date | null;
         completedAt: Date | null;
@@ -5067,7 +5088,7 @@ declare class AccountDeletionRequestsRepository extends BaseRepository {
         requestedAt: Date;
         purgeScheduledAt: Date;
         status: "pending" | "cancelled" | "completed";
-        requestedBy: "self" | "admin";
+        requestedBy: "admin" | "self";
         reason: string | null;
         cancelledAt: Date | null;
         completedAt: Date | null;
@@ -5089,7 +5110,7 @@ declare class AccountDeletionRequestsRepository extends BaseRepository {
         requestedAt: Date;
         purgeScheduledAt: Date;
         status: "pending" | "cancelled" | "completed";
-        requestedBy: "self" | "admin";
+        requestedBy: "admin" | "self";
         reason: string | null;
         cancelledAt: Date | null;
         completedAt: Date | null;
@@ -5108,7 +5129,7 @@ declare class AccountDeletionRequestsRepository extends BaseRepository {
         requestedAt: Date;
         purgeScheduledAt: Date;
         status: "pending" | "cancelled" | "completed";
-        requestedBy: "self" | "admin";
+        requestedBy: "admin" | "self";
         reason: string | null;
         cancelledAt: Date | null;
         completedAt: Date | null;
@@ -5120,16 +5141,16 @@ declare class AccountDeletionRequestsRepository extends BaseRepository {
      */
     create(data: NewAccountDeletionRequest): Promise<{
         userId: number | null;
-        status: "pending" | "cancelled" | "completed";
-        purgeScheduledAt: Date;
         id: number;
         createdAt: Date;
         updatedAt: Date;
+        status: "pending" | "cancelled" | "completed";
+        reason: string | null;
+        purgeScheduledAt: Date;
         cancelledAt: Date | null;
         userPublicId: string;
         requestedAt: Date;
-        requestedBy: "self" | "admin";
-        reason: string | null;
+        requestedBy: "admin" | "self";
         completedAt: Date | null;
         purgeStrategy: "anonymize" | "hard-delete" | null;
     }>;
@@ -5150,7 +5171,7 @@ declare class AccountDeletionRequestsRepository extends BaseRepository {
         requestedAt: Date;
         purgeScheduledAt: Date;
         status: "pending" | "cancelled" | "completed";
-        requestedBy: "self" | "admin";
+        requestedBy: "admin" | "self";
         reason: string | null;
         cancelledAt: Date | null;
         completedAt: Date | null;
@@ -5175,7 +5196,7 @@ declare class AccountDeletionRequestsRepository extends BaseRepository {
         requestedAt: Date;
         purgeScheduledAt: Date;
         status: "pending" | "cancelled" | "completed";
-        requestedBy: "self" | "admin";
+        requestedBy: "admin" | "self";
         reason: string | null;
         cancelledAt: Date | null;
         completedAt: Date | null;
@@ -5627,15 +5648,15 @@ declare function getUser(c: Context | {
 }): {
     email: string | null;
     phone: string | null;
-    status: "active" | "inactive" | "suspended" | "pending_deletion" | "deleted";
-    username: string | null;
     id: number;
-    createdAt: Date;
-    updatedAt: Date;
     publicId: string;
+    username: string | null;
     passwordHash: string | null;
     passwordChangeRequired: boolean;
     roleId: number;
+    createdAt: Date;
+    updatedAt: Date;
+    status: "active" | "inactive" | "suspended" | "pending_deletion" | "deleted";
     emailVerifiedAt: Date | null;
     phoneVerifiedAt: Date | null;
     lastLoginAt: Date | null;
@@ -6363,9 +6384,9 @@ declare const invitationCreatedEvent: _spfn_core_event.EventDef<{
     } | undefined;
     email: string;
     roleId: number;
-    expiresAt: string;
     token: string;
     invitedBy: string;
+    expiresAt: string;
     invitationId: string;
     isResend: boolean;
 }>;
@@ -6409,7 +6430,7 @@ declare const authDeletionRequestedEvent: _spfn_core_event.EventDef<{
     userId: string;
     purgeScheduledAt: string;
     userPublicId: string;
-    requestedBy: "self" | "admin";
+    requestedBy: "admin" | "self";
 }>;
 /**
  * auth.deletion.cancelled - 계정 탈퇴 복구 이벤트