@spfn/auth 0.2.0-beta.90 → 0.2.0-beta.91

package/dist/server.d.ts

@@ -1,16 +1,17 @@
-import { k as AuthInitOptions, l as OAuthProvider, f as VerificationPurpose, j as PermissionCategory, n as AuthContext } from './authenticate-CnccboAg.js';
-export { ab as AuthProfileVerifier, C as ChangePasswordParams, ag as DeviceNameSchema, ae as EmailSchema, I as IssueOneTimeTokenResult, H as KEY_FINGERPRINT_PREFIX_LENGTH, K as KeySummary, t as LoginParams, L as LoginResult, u as LogoutParams, an as NativeVerifyOptions, al as NormalizedIdentity, a4 as OAuthCallbackParams, a5 as OAuthCallbackResult, ao as OAuthCodeExchangeOptions, a8 as OAuthNativeParams, d as OAuthNativeResult, a3 as OAuthStartParams, O as OAuthStartResult, am as OAuthTokens, ai as PasswordSchema, af as PhoneSchema, ah as PlatformSchema, s as RegisterParams, J as RegisterPublicKeyParams, a as RegisterResult, Q as RevokeAllKeysParams, c as RevokeAllKeysResult, N as RevokeKeyParams, M as RotateKeyParams, b as RotateKeyResult, x as SendVerificationCodeParams, S as SendVerificationCodeResult, aj as TargetTypeSchema, aq as UnlinkNotification, ar as UnlinkNotifyRejection, ap as UnlinkNotifyRequest, a6 as UnlinkNotifyResult, h as VERIFICATION_PURPOSES, g as VERIFICATION_TARGET_TYPES, ak as VerificationPurposeSchema, V as VerificationTargetType, y as VerifyCodeParams, z as VerifyCodeResult, m as authRouter, ac as authenticate, Z as buildOAuthErrorUrl, q as changePasswordService, a0 as getEnabledOAuthProviders, a1 as getGoogleAccessToken, at as getOAuthProvider, au as getRegisteredProviders, _ as isOAuthProviderEnabled, T as issueOneTimeTokenService, F as listKeysService, o as loginService, p as logoutService, Y as oauthCallbackService, a7 as oauthNativeService, X as oauthStartService, a2 as oauthUnlinkNotifyService, ad as optionalAuth, as as registerOAuthProvider, B as registerPublicKeyService, r as registerService, $ as requireEnabledProvider, aa as resolveAuthenticatedUser, G as revokeAllKeysService, E as revokeKeyService, D as rotateKeyService, a9 as selectAuthProfile, v as sendVerificationCodeService, w as verifyCodeService, W as verifyOneTimeTokenService } from './authenticate-CnccboAg.js';
+import { A as AuthInitOptions, l as OAuthProvider, j as VerificationPurpose, h as PermissionCategory, n as AuthContext } from './authenticate-DlTGaBT8.js';
+export { o as AuthProfileOutcome, p as AuthProfileVerifier, C as ChangePasswordParams, D as DeviceNameSchema, E as EmailSchema, I as IssueOneTimeTokenResult, q as KEY_FINGERPRINT_PREFIX_LENGTH, K as KeySummary, r as LoginParams, L as LoginResult, s as LogoutParams, N as NativeVerifyOptions, t as NormalizedIdentity, u as OAuthCallbackParams, v as OAuthCallbackResult, w as OAuthCodeExchangeOptions, x as OAuthNativeParams, d as OAuthNativeResult, y as OAuthStartParams, O as OAuthStartResult, z as OAuthTokens, B as PasswordSchema, F as PhoneSchema, G as PlatformSchema, H as RegisterParams, J as RegisterPublicKeyParams, a as RegisterResult, M as RevokeAllKeysParams, c as RevokeAllKeysResult, Q as RevokeKeyParams, T as RotateKeyParams, b as RotateKeyResult, W as SendVerificationCodeParams, S as SendVerificationCodeResult, X as TargetTypeSchema, Y as UnlinkNotification, Z as UnlinkNotifyRejection, _ as UnlinkNotifyRequest, $ as UnlinkNotifyResult, V as VERIFICATION_PURPOSES, i as VERIFICATION_TARGET_TYPES, a0 as VerificationPurposeSchema, k as VerificationTargetType, a1 as VerifyCodeParams, a2 as VerifyCodeResult, m as authRouter, a3 as authenticate, a4 as buildOAuthErrorUrl, a5 as changePasswordService, a6 as getEnabledOAuthProviders, a7 as getGoogleAccessToken, a8 as getOAuthProvider, a9 as getRegisteredProviders, aa as isOAuthProviderEnabled, ab as issueOneTimeTokenService, ac as listKeysService, ad as loginService, ae as logoutService, af as oauthCallbackService, ag as oauthNativeService, ah as oauthStartService, ai as oauthUnlinkNotifyService, aj as optionalAuth, ak as registerOAuthProvider, al as registerPublicKeyService, am as registerService, an as requireEnabledProvider, ao as resolveAuthenticatedUser, ap as revokeAllKeysService, aq as revokeKeyService, ar as rotateKeyService, as as runAuthProfile, at as selectAuthProfile, au as sendVerificationCodeService, av as verifyCodeService, aw as verifyOneTimeTokenService } from './authenticate-DlTGaBT8.js';
 import * as drizzle_orm_pg_core from 'drizzle-orm/pg-core';
-import { K as KeyAlgorithmType, f as InvitationStatus, h as SocialProvider, j as AccountDeletionRequestedBy, k as PurgeStrategy } from './types-CD95yudz.js';
-export { b as ACCOUNT_DELETION_REQUESTED_BY, A as ACCOUNT_DELETION_REQUEST_STATUSES, i as AccountDeletionRequestStatus, I as INVITATION_STATUSES, a as KEY_ALGORITHM, e as KEY_DEVICE_NAME_MAX_LENGTH, c as KEY_PLATFORM, d as KeyPlatformType, P as PURGE_STRATEGIES, S as SOCIAL_PROVIDERS, U as USER_STATUSES, g as UserStatus } from './types-CD95yudz.js';
+import { K as KeyAlgorithmType, d as InvitationStatus, j as SocialProvider, c as AccountDeletionRequestedBy, i as PurgeStrategy } from './types-DYyhze28.js';
+export { A as ACCOUNT_DELETION_REQUESTED_BY, a as ACCOUNT_DELETION_REQUEST_STATUSES, b as AccountDeletionRequestStatus, I as INVITATION_STATUSES, e as KEY_ALGORITHM, f as KEY_DEVICE_NAME_MAX_LENGTH, g as KEY_PLATFORM, h as KeyPlatformType, P as PURGE_STRATEGIES, S as SOCIAL_PROVIDERS, U as USER_STATUSES, k as UserStatus } from './types-DYyhze28.js';
 import { UserProfile as UserProfile$1, ProfileInfo } from '@spfn/auth';
 import { BaseRepository } from '@spfn/core/db';
+import { c as ClientIdentity } from './wire-version-CtzMKvBB.js';
 import { Context } from 'hono';
 import * as _spfn_core_route from '@spfn/core/route';
 import { Algorithm } from 'jsonwebtoken';
-export { S as SessionData, g as getSessionInfo, s as sealSession, a as shouldRefreshSession, u as unsealSession } from './session-CFK4BT25.js';
+export { S as SessionData, g as getSessionInfo, s as sealSession, a as shouldRefreshSession, u as unsealSession } from './session-DTHahDQ9.js';
 import { JWTPayload } from 'jose';
-import { SSETokenStore, SSETokenManager } from '@spfn/core/event/sse';
+import { SSETokenManager, SSETokenStore } from '@spfn/core/event/sse';
 import * as _spfn_core_logger from '@spfn/core/logger';
 import * as _spfn_core_job from '@spfn/core/job';
 import * as _spfn_core_event from '@spfn/core/event';
@@ -1317,7 +1318,7 @@ declare function getAuthSessionService(userId: string | number | bigint): Promis
         id: number;
         name: string;
         displayName: string;
-        category: "custom" | "user" | "auth" | "rbac" | "system" | undefined;
+        category: "auth" | "custom" | "user" | "rbac" | "system" | undefined;
     }[];
     userId: number;
     publicId: string;
@@ -1763,7 +1764,7 @@ declare const accountDeletionRequests: drizzle_orm_pg_core.PgTableWithColumns<{
             name: string;
             tableName: "account_deletion_requests";
             dataType: "string enum";
-            data: "self" | "admin";
+            data: "admin" | "self";
             driverParam: string;
             notNull: true;
             hasDefault: true;
@@ -2371,6 +2372,66 @@ declare const userPublicKeys: drizzle_orm_pg_core.PgTableWithColumns<{
             identity: undefined;
             generated: undefined;
         }>;
+        clientKind: drizzle_orm_pg_core.PgBuildColumn<"user_public_keys", drizzle_orm_pg_core.PgTextBuilder<["web", "ios", "android"] & [string, ...string[]]>, {
+            name: string;
+            tableName: "user_public_keys";
+            dataType: "string enum";
+            data: "ios" | "android" | "web";
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: ["web", "ios", "android"] & [string, ...string[]];
+            identity: undefined;
+            generated: undefined;
+        }>;
+        clientVersion: drizzle_orm_pg_core.PgBuildColumn<"user_public_keys", drizzle_orm_pg_core.PgTextBuilder<[string, ...string[]]>, {
+            name: string;
+            tableName: "user_public_keys";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            identity: undefined;
+            generated: undefined;
+        }>;
+        clientContractVersion: drizzle_orm_pg_core.PgBuildColumn<"user_public_keys", drizzle_orm_pg_core.PgTextBuilder<[string, ...string[]]>, {
+            name: string;
+            tableName: "user_public_keys";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            identity: undefined;
+            generated: undefined;
+        }>;
+        clientSeenAt: drizzle_orm_pg_core.PgBuildColumn<"user_public_keys", drizzle_orm_pg_core.PgTimestampBuilder, {
+            name: string;
+            tableName: "user_public_keys";
+            dataType: "object date";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            identity: undefined;
+            generated: undefined;
+        }>;
         isActive: drizzle_orm_pg_core.PgBuildColumn<"user_public_keys", drizzle_orm_pg_core.SetHasDefault<drizzle_orm_pg_core.SetNotNull<drizzle_orm_pg_core.PgBooleanBuilder>>, {
             name: string;
             tableName: "user_public_keys";
@@ -2907,7 +2968,7 @@ declare const permissions: drizzle_orm_pg_core.PgTableWithColumns<{
             name: string;
             tableName: "permissions";
             dataType: "string enum";
-            data: "custom" | "user" | "auth" | "rbac" | "system";
+            data: "auth" | "custom" | "user" | "rbac" | "system";
             driverParam: string;
             notNull: false;
             hasDefault: false;
@@ -3496,15 +3557,15 @@ declare class UsersRepository extends BaseRepository {
     create(data: NewUser): Promise<{
         email: string | null;
         phone: string | null;
-        status: "active" | "inactive" | "suspended" | "pending_deletion" | "deleted";
-        username: string | null;
         id: number;
-        createdAt: Date;
-        updatedAt: Date;
         publicId: string;
+        username: string | null;
         passwordHash: string | null;
         passwordChangeRequired: boolean;
         roleId: number;
+        createdAt: Date;
+        updatedAt: Date;
+        status: "active" | "inactive" | "suspended" | "pending_deletion" | "deleted";
         emailVerifiedAt: Date | null;
         phoneVerifiedAt: Date | null;
         lastLoginAt: Date | null;
@@ -3611,15 +3672,15 @@ declare class UsersRepository extends BaseRepository {
     deleteById(id: number): Promise<{
         email: string | null;
         phone: string | null;
-        status: "active" | "inactive" | "suspended" | "pending_deletion" | "deleted";
-        username: string | null;
         id: number;
-        createdAt: Date;
-        updatedAt: Date;
         publicId: string;
+        username: string | null;
         passwordHash: string | null;
         passwordChangeRequired: boolean;
         roleId: number;
+        createdAt: Date;
+        updatedAt: Date;
+        status: "active" | "inactive" | "suspended" | "pending_deletion" | "deleted";
         emailVerifiedAt: Date | null;
         phoneVerifiedAt: Date | null;
         lastLoginAt: Date | null;
@@ -3644,7 +3705,7 @@ declare class UsersRepository extends BaseRepository {
             id: number;
             name: string;
             displayName: string;
-            category: "custom" | "user" | "auth" | "rbac" | "system" | undefined;
+            category: "auth" | "custom" | "user" | "rbac" | "system" | undefined;
         }[];
     }>;
     /**
@@ -3713,6 +3774,10 @@ declare class KeysRepository extends BaseRepository {
         fingerprint: string;
         deviceName: string | null;
         platform: "ios" | "android" | "web" | "desktop" | null;
+        clientKind: "ios" | "android" | "web" | null;
+        clientVersion: string | null;
+        clientContractVersion: string | null;
+        clientSeenAt: Date | null;
         isActive: boolean;
         createdAt: Date;
         lastUsedAt: Date | null;
@@ -3733,6 +3798,10 @@ declare class KeysRepository extends BaseRepository {
         fingerprint: string;
         deviceName: string | null;
         platform: "ios" | "android" | "web" | "desktop" | null;
+        clientKind: "ios" | "android" | "web" | null;
+        clientVersion: string | null;
+        clientContractVersion: string | null;
+        clientSeenAt: Date | null;
         isActive: boolean;
         createdAt: Date;
         lastUsedAt: Date | null;
@@ -3753,6 +3822,10 @@ declare class KeysRepository extends BaseRepository {
         fingerprint: string;
         deviceName: string | null;
         platform: "ios" | "android" | "web" | "desktop" | null;
+        clientKind: "ios" | "android" | "web" | null;
+        clientVersion: string | null;
+        clientContractVersion: string | null;
+        clientSeenAt: Date | null;
         isActive: boolean;
         createdAt: Date;
         lastUsedAt: Date | null;
@@ -3787,18 +3860,22 @@ declare class KeysRepository extends BaseRepository {
      * Write primary 사용
      */
     create(data: NewUserPublicKey): Promise<{
-        userId: number;
-        keyId: string;
-        id: number;
-        isActive: boolean;
-        createdAt: Date;
         publicKey: string;
-        algorithm: "ES256" | "RS256";
+        keyId: string;
         fingerprint: string;
+        algorithm: "ES256" | "RS256";
         deviceName: string | null;
         platform: "ios" | "android" | "web" | "desktop" | null;
-        lastUsedAt: Date | null;
+        userId: number;
+        id: number;
+        isActive: boolean;
+        createdAt: Date;
         expiresAt: Date | null;
+        clientKind: "ios" | "android" | "web" | null;
+        clientVersion: string | null;
+        clientContractVersion: string | null;
+        clientSeenAt: Date | null;
+        lastUsedAt: Date | null;
         revokedAt: Date | null;
         revokedReason: string | null;
     }>;
@@ -3815,6 +3892,10 @@ declare class KeysRepository extends BaseRepository {
         fingerprint: string;
         deviceName: string | null;
         platform: "ios" | "android" | "web" | "desktop" | null;
+        clientKind: "ios" | "android" | "web" | null;
+        clientVersion: string | null;
+        clientContractVersion: string | null;
+        clientSeenAt: Date | null;
         isActive: boolean;
         createdAt: Date;
         lastUsedAt: Date | null;
@@ -3838,6 +3919,10 @@ declare class KeysRepository extends BaseRepository {
         fingerprint: string;
         deviceName: string | null;
         platform: "ios" | "android" | "web" | "desktop" | null;
+        clientKind: "ios" | "android" | "web" | null;
+        clientVersion: string | null;
+        clientContractVersion: string | null;
+        clientSeenAt: Date | null;
         isActive: boolean;
         createdAt: Date;
         lastUsedAt: Date | null;
@@ -3861,6 +3946,10 @@ declare class KeysRepository extends BaseRepository {
         fingerprint: string;
         deviceName: string | null;
         platform: "ios" | "android" | "web" | "desktop" | null;
+        clientKind: "ios" | "android" | "web" | null;
+        clientVersion: string | null;
+        clientContractVersion: string | null;
+        clientSeenAt: Date | null;
         isActive: boolean;
         createdAt: Date;
         lastUsedAt: Date | null;
@@ -3873,18 +3962,22 @@ declare class KeysRepository extends BaseRepository {
      * Write primary 사용
      */
     deleteByKeyIdAndUserId(keyId: string, userId: number): Promise<{
-        userId: number;
-        keyId: string;
-        id: number;
-        isActive: boolean;
-        createdAt: Date;
         publicKey: string;
-        algorithm: "ES256" | "RS256";
+        keyId: string;
         fingerprint: string;
+        algorithm: "ES256" | "RS256";
         deviceName: string | null;
         platform: "ios" | "android" | "web" | "desktop" | null;
-        lastUsedAt: Date | null;
+        userId: number;
+        id: number;
+        isActive: boolean;
+        createdAt: Date;
         expiresAt: Date | null;
+        clientKind: "ios" | "android" | "web" | null;
+        clientVersion: string | null;
+        clientContractVersion: string | null;
+        clientSeenAt: Date | null;
+        lastUsedAt: Date | null;
         revokedAt: Date | null;
         revokedReason: string | null;
     }>;
@@ -3909,6 +4002,10 @@ declare class KeysRepository extends BaseRepository {
         fingerprint: string;
         deviceName: string | null;
         platform: "ios" | "android" | "web" | "desktop" | null;
+        clientKind: "ios" | "android" | "web" | null;
+        clientVersion: string | null;
+        clientContractVersion: string | null;
+        clientSeenAt: Date | null;
         isActive: boolean;
         createdAt: Date;
         lastUsedAt: Date | null;
@@ -3929,6 +4026,10 @@ declare class KeysRepository extends BaseRepository {
         fingerprint: string;
         deviceName: string | null;
         platform: "ios" | "android" | "web" | "desktop" | null;
+        clientKind: "ios" | "android" | "web" | null;
+        clientVersion: string | null;
+        clientContractVersion: string | null;
+        clientSeenAt: Date | null;
         isActive: boolean;
         createdAt: Date;
         lastUsedAt: Date | null;
@@ -3952,6 +4053,10 @@ declare class KeysRepository extends BaseRepository {
         fingerprint: string;
         deviceName: string | null;
         platform: "ios" | "android" | "web" | "desktop" | null;
+        clientKind: "ios" | "android" | "web" | null;
+        clientVersion: string | null;
+        clientContractVersion: string | null;
+        clientSeenAt: Date | null;
         isActive: boolean;
         createdAt: Date;
         lastUsedAt: Date | null;
@@ -3972,6 +4077,10 @@ declare class KeysRepository extends BaseRepository {
         fingerprint: string;
         deviceName: string | null;
         platform: "ios" | "android" | "web" | "desktop" | null;
+        clientKind: "ios" | "android" | "web" | null;
+        clientVersion: string | null;
+        clientContractVersion: string | null;
+        clientSeenAt: Date | null;
         isActive: boolean;
         createdAt: Date;
         lastUsedAt: Date | null;
@@ -3987,8 +4096,19 @@ declare class KeysRepository extends BaseRepository {
      * LAST_USED_THROTTLE_MS), so a busy key isn't UPDATEd on every request. The
      * throttle lives in the WHERE clause — atomic, no read-then-write race. No
      * RETURNING (callers fire-and-forget and discard the row).
+     *
+     * `identity` is what the client said about itself on this request. It is
+     * recorded on the same row, and the throttle does not apply to it: a version
+     * that changed is written immediately, because an app update is the event this
+     * column exists to catch and waiting a minute to notice it serves nobody. A
+     * version that did not change writes nothing extra — the UPDATE the throttle
+     * was already going to do carries it.
+     *
+     * `clientSeenAt` moves only when one of the three values differs from what is
+     * stored, so it answers "since when has this device been on this release"
+     * rather than "when was it last seen", which lastUsedAt already answers.
      */
-    updateLastUsedById(id: number): Promise<void>;
+    updateLastUsedById(id: number, identity?: ClientIdentity | null): Promise<void>;
 }
 declare const keysRepository: KeysRepository;
 
@@ -4046,14 +4166,14 @@ declare class VerificationCodesRepository extends BaseRepository {
      * Write primary 사용
      */
     create(data: NewVerificationCode): Promise<{
+        target: string;
+        targetType: "email" | "phone";
+        purpose: "registration" | "login" | "password_reset" | "email_change" | "phone_change" | "account_deletion";
+        code: string;
         id: number;
         createdAt: Date;
         updatedAt: Date;
         expiresAt: Date;
-        target: string;
-        targetType: "email" | "phone";
-        code: string;
-        purpose: "registration" | "login" | "password_reset" | "email_change" | "phone_change" | "account_deletion";
         usedAt: Date | null;
         attempts: number;
     }>;
@@ -4186,8 +4306,8 @@ declare class RolesRepository extends BaseRepository {
      */
     create(data: NewRoleEntity): Promise<{
         description: string | null;
-        id: number;
         name: string;
+        id: number;
         displayName: string;
         isBuiltin: boolean;
         isSystem: boolean;
@@ -4216,8 +4336,8 @@ declare class RolesRepository extends BaseRepository {
      */
     deleteById(id: number): Promise<{
         description: string | null;
-        id: number;
         name: string;
+        id: number;
         displayName: string;
         isBuiltin: boolean;
         isSystem: boolean;
@@ -4250,7 +4370,7 @@ declare class PermissionsRepository extends BaseRepository {
         name: string;
         displayName: string;
         description: string | null;
-        category: "custom" | "user" | "auth" | "rbac" | "system" | null;
+        category: "auth" | "custom" | "user" | "rbac" | "system" | null;
         isBuiltin: boolean;
         isSystem: boolean;
         isActive: boolean;
@@ -4266,7 +4386,7 @@ declare class PermissionsRepository extends BaseRepository {
         name: string;
         displayName: string;
         description: string | null;
-        category: "custom" | "user" | "auth" | "rbac" | "system" | null;
+        category: "auth" | "custom" | "user" | "rbac" | "system" | null;
         isBuiltin: boolean;
         isSystem: boolean;
         isActive: boolean;
@@ -4306,7 +4426,7 @@ declare class PermissionsRepository extends BaseRepository {
         name: string;
         displayName: string;
         description: string | null;
-        category: "custom" | "user" | "auth" | "rbac" | "system" | null;
+        category: "auth" | "custom" | "user" | "rbac" | "system" | null;
         isBuiltin: boolean;
         isSystem: boolean;
         isActive: boolean;
@@ -4317,16 +4437,16 @@ declare class PermissionsRepository extends BaseRepository {
      */
     deleteById(id: number): Promise<{
         description: string | null;
-        id: number;
+        metadata: Record<string, any> | null;
         name: string;
+        id: number;
         displayName: string;
         isBuiltin: boolean;
         isSystem: boolean;
         isActive: boolean;
         createdAt: Date;
         updatedAt: Date;
-        metadata: Record<string, any> | null;
-        category: "custom" | "user" | "auth" | "rbac" | "system" | null;
+        category: "auth" | "custom" | "user" | "rbac" | "system" | null;
     }>;
 }
 declare const permissionsRepository: PermissionsRepository;
@@ -4371,9 +4491,9 @@ declare class RolePermissionsRepository extends BaseRepository {
      */
     createMany(data: NewRolePermission[]): Promise<{
         id: number;
+        roleId: number;
         createdAt: Date;
         updatedAt: Date;
-        roleId: number;
         permissionId: number;
     }[]>;
     /**
@@ -4389,9 +4509,9 @@ declare class RolePermissionsRepository extends BaseRepository {
      */
     setPermissionsForRole(roleId: number, permissionIds: number[]): Promise<{
         id: number;
+        roleId: number;
         createdAt: Date;
         updatedAt: Date;
-        roleId: number;
         permissionId: number;
     }[]>;
 }
@@ -4456,9 +4576,9 @@ declare class UserPermissionsRepository extends BaseRepository {
         id: number;
         createdAt: Date;
         updatedAt: Date;
-        expiresAt: Date | null;
-        reason: string | null;
         permissionId: number;
+        reason: string | null;
+        expiresAt: Date | null;
         granted: boolean;
     }>;
     /**
@@ -4482,9 +4602,9 @@ declare class UserPermissionsRepository extends BaseRepository {
         id: number;
         createdAt: Date;
         updatedAt: Date;
-        expiresAt: Date | null;
-        reason: string | null;
         permissionId: number;
+        reason: string | null;
+        expiresAt: Date | null;
         granted: boolean;
     }>;
     /**
@@ -4563,6 +4683,7 @@ declare class UserProfilesRepository extends BaseRepository {
      * 프로필 생성
      */
     create(data: NewUserProfile): Promise<{
+        metadata: Record<string, any> | null;
         userId: number;
         id: number;
         displayName: string | null;
@@ -4580,7 +4701,6 @@ declare class UserProfilesRepository extends BaseRepository {
         location: string | null;
         company: string | null;
         jobTitle: string | null;
-        metadata: Record<string, any> | null;
     }>;
     /**
      * 프로필 업데이트 (by ID)
@@ -4632,6 +4752,7 @@ declare class UserProfilesRepository extends BaseRepository {
      * 프로필 삭제 (by ID)
      */
     deleteById(id: number): Promise<{
+        metadata: Record<string, any> | null;
         userId: number;
         id: number;
         displayName: string | null;
@@ -4649,12 +4770,12 @@ declare class UserProfilesRepository extends BaseRepository {
         location: string | null;
         company: string | null;
         jobTitle: string | null;
-        metadata: Record<string, any> | null;
     }>;
     /**
      * 프로필 삭제 (by User ID)
      */
     deleteByUserId(userId: number): Promise<{
+        metadata: Record<string, any> | null;
         userId: number;
         id: number;
         displayName: string | null;
@@ -4672,7 +4793,6 @@ declare class UserProfilesRepository extends BaseRepository {
         location: string | null;
         company: string | null;
         jobTitle: string | null;
-        metadata: Record<string, any> | null;
     }>;
     /**
      * 프로필 Upsert (by User ID)
@@ -4681,6 +4801,7 @@ declare class UserProfilesRepository extends BaseRepository {
      * 새로 생성 시 displayName은 필수 (없으면 'User'로 설정)
      */
     upsertByUserId(userId: number, data: Partial<Omit<NewUserProfile, 'userId'>>): Promise<{
+        metadata: Record<string, any> | null;
         userId: number;
         id: number;
         displayName: string | null;
@@ -4698,7 +4819,6 @@ declare class UserProfilesRepository extends BaseRepository {
         location: string | null;
         company: string | null;
         jobTitle: string | null;
-        metadata: Record<string, any> | null;
     }>;
     /**
      * User ID로 프로필 데이터 조회 (formatted)
@@ -4826,15 +4946,15 @@ declare class InvitationsRepository extends BaseRepository {
      */
     create(data: NewInvitation): Promise<{
         email: string;
-        status: "pending" | "accepted" | "expired" | "cancelled";
+        metadata: Record<string, any> | null;
         id: number;
+        roleId: number;
         createdAt: Date;
         updatedAt: Date;
-        roleId: number;
-        metadata: Record<string, any> | null;
-        expiresAt: Date;
+        status: "pending" | "accepted" | "expired" | "cancelled";
         token: string;
         invitedBy: number;
+        expiresAt: Date;
         acceptedAt: Date | null;
         cancelledAt: Date | null;
     }>;
@@ -4860,15 +4980,15 @@ declare class InvitationsRepository extends BaseRepository {
      */
     deleteById(id: number): Promise<{
         email: string;
-        status: "pending" | "accepted" | "expired" | "cancelled";
+        metadata: Record<string, any> | null;
         id: number;
+        roleId: number;
         createdAt: Date;
         updatedAt: Date;
-        roleId: number;
-        metadata: Record<string, any> | null;
-        expiresAt: Date;
+        status: "pending" | "accepted" | "expired" | "cancelled";
         token: string;
         invitedBy: number;
+        expiresAt: Date;
         acceptedAt: Date | null;
         cancelledAt: Date | null;
     }>;
@@ -5106,9 +5226,9 @@ declare class SocialAccountsRepository extends BaseRepository {
         createdAt: Date;
         updatedAt: Date;
         provider: "google" | "apple" | "github" | "kakao" | "naver" | "superself";
+        accessToken: string | null;
         providerUserId: string;
         providerEmail: string | null;
-        accessToken: string | null;
         refreshToken: string | null;
         tokenExpiresAt: Date | null;
     }>;
@@ -5122,9 +5242,9 @@ declare class SocialAccountsRepository extends BaseRepository {
         createdAt: Date;
         updatedAt: Date;
         provider: "google" | "apple" | "github" | "kakao" | "naver" | "superself";
+        accessToken: string | null;
         providerUserId: string;
         providerEmail: string | null;
-        accessToken: string | null;
         refreshToken: string | null;
         tokenExpiresAt: Date | null;
     }>;
@@ -5184,7 +5304,7 @@ declare class AccountDeletionRequestsRepository extends BaseRepository {
         requestedAt: Date;
         purgeScheduledAt: Date;
         status: "pending" | "cancelled" | "completed";
-        requestedBy: "self" | "admin";
+        requestedBy: "admin" | "self";
         reason: string | null;
         cancelledAt: Date | null;
         completedAt: Date | null;
@@ -5203,7 +5323,7 @@ declare class AccountDeletionRequestsRepository extends BaseRepository {
         requestedAt: Date;
         purgeScheduledAt: Date;
         status: "pending" | "cancelled" | "completed";
-        requestedBy: "self" | "admin";
+        requestedBy: "admin" | "self";
         reason: string | null;
         cancelledAt: Date | null;
         completedAt: Date | null;
@@ -5225,7 +5345,7 @@ declare class AccountDeletionRequestsRepository extends BaseRepository {
         requestedAt: Date;
         purgeScheduledAt: Date;
         status: "pending" | "cancelled" | "completed";
-        requestedBy: "self" | "admin";
+        requestedBy: "admin" | "self";
         reason: string | null;
         cancelledAt: Date | null;
         completedAt: Date | null;
@@ -5244,7 +5364,7 @@ declare class AccountDeletionRequestsRepository extends BaseRepository {
         requestedAt: Date;
         purgeScheduledAt: Date;
         status: "pending" | "cancelled" | "completed";
-        requestedBy: "self" | "admin";
+        requestedBy: "admin" | "self";
         reason: string | null;
         cancelledAt: Date | null;
         completedAt: Date | null;
@@ -5256,16 +5376,16 @@ declare class AccountDeletionRequestsRepository extends BaseRepository {
      */
     create(data: NewAccountDeletionRequest): Promise<{
         userId: number | null;
-        status: "pending" | "cancelled" | "completed";
-        purgeScheduledAt: Date;
         id: number;
         createdAt: Date;
         updatedAt: Date;
+        status: "pending" | "cancelled" | "completed";
+        reason: string | null;
+        purgeScheduledAt: Date;
         cancelledAt: Date | null;
         userPublicId: string;
         requestedAt: Date;
-        requestedBy: "self" | "admin";
-        reason: string | null;
+        requestedBy: "admin" | "self";
         completedAt: Date | null;
         purgeStrategy: "anonymize" | "hard-delete" | null;
     }>;
@@ -5286,7 +5406,7 @@ declare class AccountDeletionRequestsRepository extends BaseRepository {
         requestedAt: Date;
         purgeScheduledAt: Date;
         status: "pending" | "cancelled" | "completed";
-        requestedBy: "self" | "admin";
+        requestedBy: "admin" | "self";
         reason: string | null;
         cancelledAt: Date | null;
         completedAt: Date | null;
@@ -5311,7 +5431,7 @@ declare class AccountDeletionRequestsRepository extends BaseRepository {
         requestedAt: Date;
         purgeScheduledAt: Date;
         status: "pending" | "cancelled" | "completed";
-        requestedBy: "self" | "admin";
+        requestedBy: "admin" | "self";
         reason: string | null;
         cancelledAt: Date | null;
         completedAt: Date | null;
@@ -5763,15 +5883,15 @@ declare function getUser(c: Context | {
 }): {
     email: string | null;
     phone: string | null;
-    status: "active" | "inactive" | "suspended" | "pending_deletion" | "deleted";
-    username: string | null;
     id: number;
-    createdAt: Date;
-    updatedAt: Date;
     publicId: string;
+    username: string | null;
     passwordHash: string | null;
     passwordChangeRequired: boolean;
     roleId: number;
+    createdAt: Date;
+    updatedAt: Date;
+    status: "active" | "inactive" | "suspended" | "pending_deletion" | "deleted";
     emailVerifiedAt: Date | null;
     phoneVerifiedAt: Date | null;
     lastLoginAt: Date | null;
@@ -6448,7 +6568,7 @@ declare const authLoginEvent: _spfn_core_event.EventDef<{
     email?: string | undefined;
     phone?: string | undefined;
     userId: string;
-    provider: "google" | "apple" | "github" | "kakao" | "naver" | "superself" | "email" | "phone";
+    provider: "email" | "phone" | "google" | "apple" | "github" | "kakao" | "naver" | "superself";
 }>;
 /**
  * auth.register - 회원가입 성공 이벤트
@@ -6471,7 +6591,7 @@ declare const authRegisterEvent: _spfn_core_event.EventDef<{
         [x: string]: unknown;
     } | undefined;
     userId: string;
-    provider: "google" | "apple" | "github" | "kakao" | "naver" | "superself" | "email" | "phone";
+    provider: "email" | "phone" | "google" | "apple" | "github" | "kakao" | "naver" | "superself";
 }>;
 /**
  * auth.invitation.created - 초대 생성 이벤트
@@ -6499,9 +6619,9 @@ declare const invitationCreatedEvent: _spfn_core_event.EventDef<{
     } | undefined;
     email: string;
     roleId: number;
-    expiresAt: string;
     token: string;
     invitedBy: string;
+    expiresAt: string;
     invitationId: string;
     isResend: boolean;
 }>;
@@ -6545,7 +6665,7 @@ declare const authDeletionRequestedEvent: _spfn_core_event.EventDef<{
     userId: string;
     purgeScheduledAt: string;
     userPublicId: string;
-    requestedBy: "self" | "admin";
+    requestedBy: "admin" | "self";
 }>;
 /**
  * auth.deletion.cancelled - 계정 탈퇴 복구 이벤트
@@ -6590,7 +6710,7 @@ declare const authDeletionCompletedEvent: _spfn_core_event.EventDef<{
 declare const oauthUnlinkedEvent: _spfn_core_event.EventDef<{
     reason?: string | undefined;
     userId: string;
-    provider: "google" | "apple" | "github" | "kakao" | "naver" | "superself" | "email" | "phone";
+    provider: "email" | "phone" | "google" | "apple" | "github" | "kakao" | "naver" | "superself";
     providerUserId: string;
 }>;
 /**