@sqrzro/server 4.0.0-alpha.3 → 4.0.0-alpha.31

package/dist/utility/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"index.js"}
+{"version":3,"sources":["../../src/utility/generate-id.ts","../../src/utility/log.ts"],"names":["ID_LENGTH","generateID","prefix","length","chars","bytes","randomBytes","result","i","generate_id_default","shouldLog","alias","log","fnName","message","log_default"],"mappings":"mHAEA,IAAMA,EAAY,EAAA,CAElB,SAASC,EAAsCC,CAAAA,CAAwBC,CAAAA,CAASH,EAAc,CAC1F,IAAMI,EAAQ,sCAAA,CACRC,CAAAA,CAAQC,YAAYH,CAAM,CAAA,CAE5BI,EAAS,EAAA,CAEb,IAAA,IAASC,EAAI,CAAA,CAAGA,CAAAA,CAAIL,EAAQK,CAAAA,EAAAA,CACxBD,CAAAA,EAAUH,EAAMC,CAAAA,CAAMG,CAAC,EAAIJ,CAAAA,CAAM,MAAM,EAG3C,OAAO,CAAA,EAAGF,EAASA,CAAAA,CAAS,GAAA,CAAM,EAAE,CAAA,EAAGK,CAAM,CAAA,CACjD,CAEA,IAAOE,CAAAA,CAAQR,ECjBf,SAASS,CAAAA,CAAUC,EAAwB,CACvC,OAAI,QAAQ,GAAA,CAAI,MAAA,GAAW,OAChB,IAAA,CAGP,OAAO,QAAQ,GAAA,CAAI,MAAA,EAAW,SACX,OAAA,CAAQ,GAAA,CAAI,OAAO,KAAA,CAAM,GAAG,CAAA,CAC7B,QAAA,CAASA,CAAK,CAAA,CAG7B,KACX,CAEA,SAASC,EAAID,CAAAA,CAAeE,CAAAA,CAAgBC,EAAuB,CAC3DJ,CAAAA,CAAUC,CAAK,CAAA,EACf,OAAA,CAAQ,IAAI,CAAA,CAAA,EAAIA,CAAK,KAAKE,CAAM,CAAA,EAAA,EAAKC,CAAO,CAAA,CAAE,EAEtD,CAEA,IAAOC,CAAAA,CAAQH","file":"index.js","sourcesContent":["import { randomBytes } from 'crypto';\n\nconst ID_LENGTH = 16;\n\nfunction generateID<T extends string = string>(prefix?: string | null, length = ID_LENGTH): T {\n    const chars = 'abcdefghijklmnopqrstuvwxyz0123456789';\n    const bytes = randomBytes(length);\n\n    let result = '';\n\n    for (let i = 0; i < length; i++) {\n        result += chars[bytes[i] % chars.length];\n    }\n\n    return `${prefix ? prefix + '_' : ''}${result}` as T;\n}\n\nexport default generateID;\n","function shouldLog(alias: string): boolean {\n    if (process.env.SZ_LOG === 'true') {\n        return true;\n    }\n\n    if (typeof process.env.SZ_LOG === 'string') {\n        const logAliases = process.env.SZ_LOG.split(',');\n        return logAliases.includes(alias);\n    }\n\n    return false;\n}\n\nfunction log(alias: string, fnName: string, message: string): void {\n    if (shouldLog(alias)) {\n        console.log(`[${alias}] ${fnName}: ${message}`); // eslint-disable-line no-console\n    }\n}\n\nexport default log;\n"]}

package/package.json

@@ -1,25 +1,14 @@
 {
   "name": "@sqrzro/server",
-  "version": "4.0.0-alpha.3",
+  "version": "4.0.0-alpha.31",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "license": "ISC",
-  "bin": {
-    "szserver": "./dist/cli/index.js"
-  },
   "exports": {
-    "./auth": {
-      "types": "./dist/auth/index.d.ts",
-      "default": "./dist/auth/index.js"
-    },
-    "./auth/schema": {
-      "types": "./dist/auth/utility/schema.d.ts",
-      "default": "./dist/auth/utility/schema.js"
-    },
-    "./cli": {
-      "types": "./dist/cli/index.d.ts",
-      "default": "./dist/cli/index.js"
+    "./csv": {
+      "types": "./dist/csv/index.d.ts",
+      "default": "./dist/csv/index.js"
     },
     "./database": {
       "types": "./dist/database/index.d.ts",
@@ -33,6 +22,18 @@
       "types": "./dist/json/index.d.ts",
       "default": "./dist/json/index.js"
     },
+    "./mail": {
+      "types": "./dist/mail/index.d.ts",
+      "default": "./dist/mail/index.js"
+    },
+    "./proxy": {
+      "types": "./dist/proxy/index.d.ts",
+      "default": "./dist/proxy/index.js"
+    },
+    "./storage": {
+      "types": "./dist/storage/index.d.ts",
+      "default": "./dist/storage/index.js"
+    },
     "./utility": {
       "types": "./dist/utility/index.d.ts",
       "default": "./dist/utility/index.js"
@@ -43,32 +44,26 @@
   ],
   "dependencies": {
     "@sendgrid/mail": "^8.1.6",
-    "bcryptjs": "^3.0.3",
-    "commander": "^14.0.2",
-    "dotenv": "^17.2.3",
-    "drizzle-kit": "^0.30.6",
-    "drizzle-orm": "^0.44.7",
-    "joi": "^18.0.2",
-    "pg": "^8.16.3",
-    "react-dom": "^19.2.1",
-    "redis": "^5.10.0",
-    "tsx": "^4.21.0",
-    "zod": "^4.1.13",
-    "@sqrzro/utility": "^4.0.0-alpha.1"
+    "csv": "^6.4.1",
+    "drizzle-orm": "^0.45.1",
+    "pg": "^8.19.0",
+    "react-dom": "^19.2.4",
+    "redis": "^5.11.0",
+    "zod": "^4.3.6",
+    "@sqrzro/utility": "^4.0.0-alpha.12"
   },
   "devDependencies": {
     "@types/jest": "^29.5.14",
-    "@types/node": "^24.10.2",
-    "@types/pg": "^8.15.6",
-    "@types/react": "^19.2.7",
+    "@types/pg": "^8.18.0",
+    "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
     "jest": "^29.7.0",
-    "prettier": "^3.7.4",
+    "prettier": "^3.8.1",
     "rimraf": "^4.4.1",
     "ts-jest": "^29.4.6",
     "tsup": "^8.5.1",
     "typescript": "^5.9.3",
-    "@sqrzro/prettier-config": "^4.0.0-alpha.1"
+    "@sqrzro/prettier-config": "^4.0.0-alpha.3"
   },
   "peerDependencies": {
     "next": "^16.1.6",

package/dist/auth/index.d.ts

@@ -1,49 +0,0 @@
-import { ResetType, AuthUserTable } from './utility/schema.js';
-import { NextRequest } from 'next/server';
-import { M as MakeNullOptional } from '../interfaces-BheedaEI.js';
-import 'drizzle-orm/pg-core';
-
-declare function createMFA(): Promise<void>;
-
-declare function updatePasswordWithPassword(): Promise<void>;
-
-declare function updatePasswordWithToken(token: string, newPassword: string): Promise<void>;
-
-declare function createReset(type: ResetType, email: string): Promise<string | null>;
-
-declare function validateReset(type: ResetType, token: string): Promise<boolean>;
-
-declare function createSession(userID: string, expiresIn?: number): Promise<void>;
-
-declare function deleteSession(): Promise<void>;
-
-declare function deleteUserSessions(): Promise<void>;
-
-interface AuthSession {
-    expires: Date;
-    secret: string;
-    userID: string;
-}
-
-declare function uncached_validateSession(cookies?: NextRequest['cookies']): Promise<AuthSession | null>;
-declare const validateSession: typeof uncached_validateSession;
-
-type AuthUser = AuthUserTable;
-type AuthUserDataWithID = MakeNullOptional<AuthUser>;
-interface User {
-    email: string;
-    id: string;
-}
-
-declare function createUser(data: AuthUserDataWithID): Promise<AuthUser | null>;
-
-declare function deleteUser(): Promise<void>;
-
-declare function ensureSessionUser(): Promise<User>;
-
-declare function uncached_getSessionUser(): Promise<User | null>;
-declare function getSessionUser(): ReturnType<typeof uncached_getSessionUser>;
-
-declare function validateUser(email: string, password: string): Promise<string>;
-
-export { createMFA, createReset, createSession, createUser, deleteSession, deleteUser, deleteUserSessions, ensureSessionUser, getSessionUser, updatePasswordWithPassword, updatePasswordWithToken, validateReset, validateSession, validateUser };

package/dist/auth/index.js

@@ -1,2 +0,0 @@
-import {a,e as e$1,g,b as b$1,h,d,c as c$2,f as f$1}from'../chunk-QE347FVL.js';export{k as ensureSessionUser,j as getSessionUser,i as validateSession}from'../chunk-QE347FVL.js';import {a as a$1}from'../chunk-AGS5PPG2.js';import'../chunk-37TYQL5Y.js';import {c as c$1}from'../chunk-XSJ4OEIH.js';import {e,f}from'../chunk-JI2U2EMD.js';import {eq,and,isNull,gte}from'drizzle-orm';import V from'bcryptjs';import {cookies}from'next/headers';function _(){throw new Error("Function not implemented.")}var b=_;function O(){throw new Error("Function not implemented.")}var N=O;async function W(e,t){await a.delete(f).where(and(eq(f.userID,t),eq(f.type,e)));}var l=W;var F={INVITE:c$2,MFA:d,PASSWORD:d};async function M(e$2,t){let r=e$1(),o=new Date;o.setHours(o.getHours()-F[e$2]);let n=await a.select().from(f).innerJoin(e,and(eq(e.id,f.userID),eq(e.role,r),isNull(e.deletedAt))).where(and(eq(f.id,t),eq(f.type,e$2),gte(f.createdAt,o))).limit(1);return n[0]?{...n[0].resets,user:n[0].user_credentials}:null}var c=M;var q=12;async function K(e){return V.hash(e,q)}var m=K;async function X(e$1,t){let r=await c("PASSWORD",e$1);if(!r)throw new Error("RESET_TOKEN_INVALID");await a.update(e).set({password:await m(t)}).where(eq(e.id,r.userID)),await l("PASSWORD",r.userID);}var C=X;async function Y(e){return f$1("email",e)}var w=Y;var $=48;async function j(e,t){let r=await w(t);if(!r)return null;await l(e,r.id);let o=c$1(null,$);return await a.insert(f).values({createdAt:new Date,id:o,type:e,userID:r.id}),o}var z=j;async function G(e,t){return !!await c(e,t)}var J=G;function Q(){let e="abcdefghijkmnpqrstuvwxyz23456789",t=new Uint8Array(24);crypto.getRandomValues(t);let r="";for(let o=0;o<t.length;o++)r+=e[t[o]>>3];return r}var y=Q;var ee=24,te=3600*1e3;async function re(e,t=ee){let r=e$1(),o=y(),n=y(),P=`${o}.${n}`,R=new Date(Date.now()+t*te);await g.setItem("session",o,{expires:R,role:r,secret:await m(n),userID:e}),(await cookies()).set(b$1,P,{expires:R,httpOnly:true,path:"/",sameSite:"lax",secure:true});}var oe=re;async function ie(){let e=await h();e&&(await g.removeItem("session",e.id),(await cookies()).delete(b$1));}var ae=ie;function ne(){throw new Error("Function not implemented.")}var me=ne;async function ue(e$1){let[t]=await a.insert(e).values({...e$1,password:e$1.password?await m(e$1.password):null}).returning();return t??null}var fe=ue;function pe(){throw new Error("Function not implemented.")}var le=pe;async function ce(e,t){let r=await w(e);if(!r?.password||!await V.compare(t,r.password))throw new a$1({email:"",password:""});return r.id}var we=ce;export{b as createMFA,z as createReset,oe as createSession,fe as createUser,ae as deleteSession,le as deleteUser,me as deleteUserSessions,N as updatePasswordWithPassword,C as updatePasswordWithToken,J as validateReset,we as validateUser};//# sourceMappingURL=index.js.map
-//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/auth/mfas/create-mfa.ts","../../src/auth/passwords/update-password-with-password.ts","../../src/auth/resets/utility/delete-user-resets.ts","../../src/auth/resets/utility/get-reset-by-id.ts","../../src/auth/utility/hash-secret.ts","../../src/auth/passwords/update-password-with-token.ts","../../src/auth/users/utility/get-user-by-email.ts","../../src/auth/resets/create-reset.ts","../../src/auth/resets/validate-reset.ts","../../src/auth/utility/create-secure-random-string.ts","../../src/auth/sessions/create-session.ts","../../src/auth/sessions/delete-session.ts","../../src/auth/sessions/delete-user-sessions.ts","../../src/auth/users/create-user.ts","../../src/auth/users/delete-user.ts","../../src/auth/users/validate-user.ts"],"names":["createMFA","create_mfa_default","updatePasswordWithPassword","update_password_with_password_default","deleteUserResets","type","userID","db_default","authResetTable","and","eq","delete_user_resets_default","EXPIRIES","AUTH_INVITE_EXPIRY_HOURS","AUTH_RESET_EXPIRY_HOURS","getResetByID","id","role","ensure_role_default","expiry","results","authUserTable","isNull","gte","get_reset_by_id_default","PW_SALT_ROUNDS","hashSecret","secret","bcrypt","hash_secret_default","updatePasswordWithToken","token","newPassword","reset","update_password_with_token_default","getUserByEmail","email","get_user_by_default","get_user_by_email_default","TOKEN_LENGTH","createReset","user","generate_id_default","create_reset_default","validateReset","validate_reset_default","createSecureRandomString","alphabet","bytes","i","create_secure_random_string_default","DEFAULT_EXPIRES","HOUR_IN_MS","createSession","expiresIn","expires","storage_default","cookies","AUTH_COOKIE_NAME","create_session_default","deleteSession","cookie","get_session_cookie_default","delete_session_default","deleteUserSessions","delete_user_sessions_default","createUser","data","result","create_user_default","deleteUser","delete_user_default","validateUser","password","ValidationError_default","validate_user_default"],"mappings":"obAAA,SAASA,CAAAA,EAA2B,CAChC,MAAM,IAAI,MAAM,2BAA2B,CAC/C,CAEA,IAAOC,CAAAA,CAAQD,ECJf,SAASE,CAAAA,EAA4C,CACjD,MAAM,IAAI,KAAA,CAAM,2BAA2B,CAC/C,CAEA,IAAOC,CAAAA,CAAQD,ECIf,eAAeE,CAAAA,CAAiBC,CAAAA,CAAiBC,CAAAA,CAA+B,CAC5E,MAAMC,CAAAA,CACD,OAAOC,CAAc,CAAA,CACrB,KAAA,CAAMC,GAAAA,CAAIC,EAAAA,CAAGF,CAAAA,CAAe,MAAA,CAAQF,CAAM,EAAGI,EAAAA,CAAGF,CAAAA,CAAe,IAAA,CAAMH,CAAI,CAAC,CAAC,EACpF,CAEA,IAAOM,CAAAA,CAAQP,CAAAA,CCHf,IAAMQ,CAAAA,CAAsC,CACxC,MAAA,CAAQC,GAAAA,CACR,GAAA,CAAKC,EACL,QAAA,CAAUA,CACd,CAAA,CAEA,eAAeC,CAAAA,CACXV,GAAAA,CACAW,CAAAA,CACgD,CAChD,IAAMC,CAAAA,CAAOC,GAAAA,EAAW,CAElBC,CAAAA,CAAS,IAAI,IAAA,CACnBA,CAAAA,CAAO,QAAA,CAASA,EAAO,QAAA,EAAS,CAAIP,CAAAA,CAASP,GAAI,CAAC,CAAA,CAElD,IAAMe,CAAAA,CAAU,MAAMb,CAAAA,CACjB,MAAA,EAAO,CACP,IAAA,CAAKC,CAAc,CAAA,CACnB,SAAA,CACGa,CAAAA,CACAZ,IACIC,EAAAA,CAAGW,CAAAA,CAAc,EAAA,CAAIb,CAAAA,CAAe,MAAM,CAAA,CAC1CE,EAAAA,CAAGW,CAAAA,CAAc,KAAMJ,CAAI,CAAA,CAC3BK,MAAAA,CAAOD,CAAAA,CAAc,SAAS,CAClC,CACJ,CAAA,CACC,MACGZ,GAAAA,CACIC,EAAAA,CAAGF,CAAAA,CAAe,EAAA,CAAIQ,CAAE,CAAA,CACxBN,EAAAA,CAAGF,CAAAA,CAAe,IAAA,CAAMH,GAAI,CAAA,CAC5BkB,GAAAA,CAAIf,CAAAA,CAAe,SAAA,CAAWW,CAAM,CACxC,CACJ,CAAA,CACC,MAAM,CAAC,CAAA,CAEZ,OAAOC,CAAAA,CAAQ,CAAC,CAAA,CAAI,CAAE,GAAGA,EAAQ,CAAC,CAAA,CAAE,MAAA,CAAQ,IAAA,CAAMA,CAAAA,CAAQ,CAAC,CAAA,CAAE,gBAAiB,EAAI,IACtF,CAEA,IAAOI,CAAAA,CAAQT,CAAAA,CC/Cf,IAAMU,CAAAA,CAAiB,EAAA,CAEvB,eAAeC,CAAAA,CAAWC,CAAAA,CAAiC,CACvD,OAAOC,CAAAA,CAAO,KAAKD,CAAAA,CAAQF,CAAc,CAC7C,CAEA,IAAOI,CAAAA,CAAQH,CAAAA,CCCf,eAAeI,EAAwBC,GAAAA,CAAeC,CAAAA,CAAoC,CACtF,IAAMC,CAAAA,CAAQ,MAAMT,CAAAA,CAAa,UAAA,CAAYO,GAAK,CAAA,CAElD,GAAI,CAACE,CAAAA,CACD,MAAM,IAAI,KAAA,CAAM,qBAAqB,CAAA,CAGzC,MAAM1B,CAAAA,CACD,MAAA,CAAOc,CAAa,CAAA,CACpB,GAAA,CAAI,CACD,QAAA,CAAU,MAAMQ,EAAWG,CAAW,CAC1C,CAAC,CAAA,CACA,KAAA,CAAMtB,EAAAA,CAAGW,CAAAA,CAAc,EAAA,CAAIY,EAAM,MAAM,CAAC,CAAA,CAE7C,MAAMtB,CAAAA,CAAiB,UAAA,CAAYsB,CAAAA,CAAM,MAAM,EACnD,CAEA,IAAOC,CAAAA,CAAQJ,ECvBf,eAAeK,CAAAA,CAAeC,CAAAA,CAAyC,CACnE,OAAOC,IAAU,OAAA,CAASD,CAAK,CACnC,CAEA,IAAOE,CAAAA,CAAQH,CAAAA,CCEf,IAAMI,EAAe,EAAA,CAErB,eAAeC,CAAAA,CAAYnC,CAAAA,CAAiB+B,CAAAA,CAAuC,CAC/E,IAAMK,CAAAA,CAAO,MAAMH,CAAAA,CAAeF,CAAK,CAAA,CAEvC,GAAI,CAACK,CAAAA,CACD,OAAO,IAAA,CAGX,MAAM9B,CAAAA,CAAiBN,CAAAA,CAAMoC,CAAAA,CAAK,EAAE,EAEpC,IAAMzB,CAAAA,CAAK0B,GAAAA,CAAW,IAAA,CAAMH,CAAY,CAAA,CAExC,OAAA,MAAMhC,CAAAA,CAAG,MAAA,CAAOC,CAAc,CAAA,CAAE,MAAA,CAAO,CACnC,UAAW,IAAI,IAAA,CACf,EAAA,CAAAQ,CAAAA,CACA,IAAA,CAAAX,CAAAA,CACA,MAAA,CAAQoC,CAAAA,CAAK,EACjB,CAAC,CAAA,CAEMzB,CACX,CAEA,IAAO2B,CAAAA,CAAQH,EC5Bf,eAAeI,EAAcvC,CAAAA,CAAiB0B,CAAAA,CAAiC,CAC3E,OAAO,CAAA,CAAQ,MAAMP,CAAAA,CAAanB,CAAAA,CAAM0B,CAAK,CACjD,CAEA,IAAOc,CAAAA,CAAQD,ECRf,SAASE,CAAAA,EAAmC,CAE3C,IAAMC,CAAAA,CAAW,kCAAA,CAIXC,CAAAA,CAAQ,IAAI,WAAW,EAAE,CAAA,CAC/B,MAAA,CAAO,eAAA,CAAgBA,CAAK,CAAA,CAE5B,IAAIhC,CAAAA,CAAK,GACT,IAAA,IAASiC,CAAAA,CAAI,CAAA,CAAGA,CAAAA,CAAID,EAAM,MAAA,CAAQC,CAAAA,EAAAA,CAEjCjC,CAAAA,EAAM+B,CAAAA,CAASC,EAAMC,CAAC,CAAA,EAAK,CAAC,CAAA,CAE7B,OAAOjC,CACR,CAEA,IAAOkC,EAAQJ,CAAAA,CCRf,IAAMK,EAAAA,CAAkB,EAAA,CAClBC,EAAAA,CAAa,IAAA,CAAU,GAAA,CAE7B,eAAeC,GAAc/C,CAAAA,CAAgBgD,CAAAA,CAAYH,EAAAA,CAAgC,CACrF,IAAMlC,CAAAA,CAAOC,GAAAA,EAAW,CAElBF,EAAKkC,CAAAA,EAAyB,CAC9BvB,CAAAA,CAASuB,CAAAA,GACTnB,CAAAA,CAAQ,CAAA,EAAGf,CAAE,CAAA,CAAA,EAAIW,CAAM,CAAA,CAAA,CAEvB4B,CAAAA,CAAU,IAAI,IAAA,CAAK,IAAA,CAAK,GAAA,EAAI,CAAID,CAAAA,CAAYF,EAAU,CAAA,CAE5D,MAAMI,CAAAA,CAAc,OAAA,CAAQ,SAAA,CAAWxC,CAAAA,CAAI,CACvC,OAAA,CAAAuC,EACA,IAAA,CAAAtC,CAAAA,CACA,MAAA,CAAQ,MAAMY,CAAAA,CAAWF,CAAM,CAAA,CAC/B,MAAA,CAAArB,CACJ,CAAC,CAAA,CAAA,CAEA,MAAMmD,OAAAA,IAAW,GAAA,CAAIC,GAAAA,CAAkB3B,CAAAA,CAAO,CAC3C,QAAAwB,CAAAA,CACA,QAAA,CAAU,IAAA,CACV,IAAA,CAAM,GAAA,CACN,QAAA,CAAU,KAAA,CACV,MAAA,CAAQ,IACZ,CAAC,EACL,CAEA,IAAOI,EAAAA,CAAQN,GC7Bf,eAAeO,EAAAA,EAA+B,CAC1C,IAAMC,CAAAA,CAAS,MAAMC,CAAAA,GAEhBD,CAAAA,GAIL,MAAML,CAAAA,CAAc,UAAA,CAAW,SAAA,CAAWK,CAAAA,CAAO,EAAE,CAAA,CAAA,CAClD,MAAMJ,OAAAA,EAAQ,EAAG,MAAA,CAAOC,GAAgB,CAAA,EAC7C,CAEA,IAAOK,EAAAA,CAAQH,GCnBf,SAASI,EAAAA,EAAoC,CACzC,MAAM,IAAI,KAAA,CAAM,2BAA2B,CAC/C,CAEA,IAAOC,EAAAA,CAAQD,GCGf,eAAeE,EAAAA,CAAWC,GAAAA,CAAoD,CAC1E,GAAM,CAACC,CAAM,CAAA,CAAI,MAAM7D,CAAAA,CAClB,OAAOc,CAAa,CAAA,CACpB,MAAA,CAAO,CAAE,GAAG8C,GAAAA,CAAM,QAAA,CAAUA,GAAAA,CAAK,QAAA,CAAW,MAAMtC,CAAAA,CAAWsC,GAAAA,CAAK,QAAQ,EAAI,IAAK,CAAC,CAAA,CACpF,SAAA,EAAU,CAEf,OAAOC,CAAAA,EAAU,IACrB,CAEA,IAAOC,EAAAA,CAAQH,GChBf,SAASI,EAAAA,EAA4B,CACjC,MAAM,IAAI,MAAM,2BAA2B,CAC/C,CAEA,IAAOC,GAAQD,GCEf,eAAeE,EAAAA,CAAapC,CAAAA,CAAeqC,CAAAA,CAAmC,CAC1E,IAAMhC,CAAAA,CAAO,MAAMH,CAAAA,CAAeF,CAAK,CAAA,CAEvC,GAAI,CAACK,CAAAA,EAAM,QAAA,EAAY,CAAE,MAAMb,CAAAA,CAAO,QAAQ6C,CAAAA,CAAUhC,CAAAA,CAAK,QAAQ,CAAA,CACjE,MAAM,IAAIiC,GAAAA,CAAgB,CAAE,MAAO,EAAA,CAAI,QAAA,CAAU,EAAG,CAAC,EAGzD,OAAOjC,CAAAA,CAAK,EAChB,KAEOkC,EAAAA,CAAQH","file":"index.js","sourcesContent":["function createMFA(): Promise<void> {\n    throw new Error('Function not implemented.');\n}\n\nexport default createMFA;\n","function updatePasswordWithPassword(): Promise<void> {\n    throw new Error('Function not implemented.');\n}\n\nexport default updatePasswordWithPassword;\n","import { and, eq } from 'drizzle-orm';\n\nimport db from '../../../utility/db';\n\nimport { authResetTable } from '../../utility/schema';\n\nimport type { ResetType } from './interfaces';\n\nasync function deleteUserResets(type: ResetType, userID: string): Promise<void> {\n    await db\n        .delete(authResetTable)\n        .where(and(eq(authResetTable.userID, userID), eq(authResetTable.type, type)));\n}\n\nexport default deleteUserResets;\n","import { and, eq, gte, isNull } from 'drizzle-orm';\n\nimport db from '../../../utility/db';\n\nimport { AuthUser } from '../../users/utility/interfaces';\nimport { AUTH_INVITE_EXPIRY_HOURS, AUTH_RESET_EXPIRY_HOURS } from '../../utility/config';\nimport ensureRole from '../../utility/ensure-role';\nimport { authResetTable, authUserTable } from '../../utility/schema';\n\nimport type { AuthReset, ResetType } from './interfaces';\n\nconst EXPIRIES: Record<ResetType, number> = {\n    INVITE: AUTH_INVITE_EXPIRY_HOURS,\n    MFA: AUTH_RESET_EXPIRY_HOURS,\n    PASSWORD: AUTH_RESET_EXPIRY_HOURS,\n};\n\nasync function getResetByID(\n    type: ResetType,\n    id: string\n): Promise<(AuthReset & { user: AuthUser }) | null> {\n    const role = ensureRole();\n\n    const expiry = new Date();\n    expiry.setHours(expiry.getHours() - EXPIRIES[type]);\n\n    const results = await db\n        .select()\n        .from(authResetTable)\n        .innerJoin(\n            authUserTable,\n            and(\n                eq(authUserTable.id, authResetTable.userID),\n                eq(authUserTable.role, role),\n                isNull(authUserTable.deletedAt)\n            )\n        )\n        .where(\n            and(\n                eq(authResetTable.id, id),\n                eq(authResetTable.type, type),\n                gte(authResetTable.createdAt, expiry)\n            )\n        )\n        .limit(1);\n\n    return results[0] ? { ...results[0].resets, user: results[0].user_credentials } : null;\n}\n\nexport default getResetByID;\n","import bcrypt from 'bcryptjs';\n\nconst PW_SALT_ROUNDS = 12;\n\nasync function hashSecret(secret: string): Promise<string> {\n    return bcrypt.hash(secret, PW_SALT_ROUNDS);\n}\n\nexport default hashSecret;\n","import { eq } from 'drizzle-orm';\n\nimport db from '../../utility/db';\n\nimport deleteUserResets from '../resets/utility/delete-user-resets';\nimport getResetByID from '../resets/utility/get-reset-by-id';\nimport hashSecret from '../utility/hash-secret';\nimport { authUserTable } from '../utility/schema';\n\nasync function updatePasswordWithToken(token: string, newPassword: string): Promise<void> {\n    const reset = await getResetByID('PASSWORD', token);\n\n    if (!reset) {\n        throw new Error('RESET_TOKEN_INVALID');\n    }\n\n    await db\n        .update(authUserTable)\n        .set({\n            password: await hashSecret(newPassword),\n        })\n        .where(eq(authUserTable.id, reset.userID));\n\n    await deleteUserResets('PASSWORD', reset.userID);\n}\n\nexport default updatePasswordWithToken;\n","import getUserBy from './get-user-by';\nimport type { AuthUser } from './interfaces';\n\nasync function getUserByEmail(email: string): Promise<AuthUser | null> {\n    return getUserBy('email', email);\n}\n\nexport default getUserByEmail;\n","import db from '../../utility/db';\nimport { generateID } from '../../utility';\n\nimport getUserByEmail from '../users/utility/get-user-by-email';\nimport { authResetTable } from '../utility/schema';\n\nimport deleteUserResets from './utility/delete-user-resets';\nimport type { ResetType } from './utility/interfaces';\n\nconst TOKEN_LENGTH = 48;\n\nasync function createReset(type: ResetType, email: string): Promise<string | null> {\n    const user = await getUserByEmail(email);\n\n    if (!user) {\n        return null;\n    }\n\n    await deleteUserResets(type, user.id);\n\n    const id = generateID(null, TOKEN_LENGTH);\n\n    await db.insert(authResetTable).values({\n        createdAt: new Date(),\n        id,\n        type,\n        userID: user.id,\n    });\n\n    return id;\n}\n\nexport default createReset;\n","import type { ResetType } from '../utility/schema';\n\nimport getResetByID from './utility/get-reset-by-id';\n\nasync function validateReset(type: ResetType, token: string): Promise<boolean> {\n    return Boolean(await getResetByID(type, token));\n}\n\nexport default validateReset;\n","function createSecureRandomString(): string {\n\t// Human readable alphabet (a-z, 0-9 without l, o, 0, 1 to avoid confusion)\n\tconst alphabet = \"abcdefghijkmnpqrstuvwxyz23456789\";\n\n\t// Generate 24 bytes = 192 bits of entropy.\n\t// We're only going to use 5 bits per byte so the total entropy will be 192 * 5 / 8 = 120 bits\n\tconst bytes = new Uint8Array(24);\n\tcrypto.getRandomValues(bytes);\n\n\tlet id = \"\";\n\tfor (let i = 0; i < bytes.length; i++) {\n\t\t// >> 3 \"removes\" the right-most 3 bits of the byte\n\t\tid += alphabet[bytes[i] >> 3];\n\t}\n\treturn id;\n}\n\nexport default createSecureRandomString;","import { cookies } from 'next/headers';\n\nimport serverStorage from '../../storage';\n\nimport createSecureRandomString from '../utility/create-secure-random-string';\nimport { AUTH_COOKIE_NAME } from '../utility/config';\nimport ensureRole from '../utility/ensure-role';\nimport hashSecret from '../utility/hash-secret';\n\nconst DEFAULT_EXPIRES = 24;\nconst HOUR_IN_MS = 60 * 60 * 1000;\n\nasync function createSession(userID: string, expiresIn = DEFAULT_EXPIRES): Promise<void> {\n    const role = ensureRole();\n\n    const id = createSecureRandomString();\n    const secret = createSecureRandomString();\n    const token = `${id}.${secret}`;\n\n    const expires = new Date(Date.now() + expiresIn * HOUR_IN_MS);\n\n    await serverStorage.setItem('session', id, {\n        expires,\n        role,\n        secret: await hashSecret(secret),\n        userID,\n    });\n\n    (await cookies()).set(AUTH_COOKIE_NAME, token, {\n        expires,\n        httpOnly: true,\n        path: '/',\n        sameSite: 'lax',\n        secure: true,\n    });\n}\n\nexport default createSession;\n","import { cookies } from 'next/headers';\n\nimport serverStorage from '../../storage';\n\nimport { AUTH_COOKIE_NAME } from '../utility/config';\n\nimport getSessionCookie from './utility/get-session-cookie';\n\nasync function deleteSession(): Promise<void> {\n    const cookie = await getSessionCookie();\n\n    if (!cookie) {\n        return;\n    }\n\n    await serverStorage.removeItem('session', cookie.id);\n    (await cookies()).delete(AUTH_COOKIE_NAME);\n}\n\nexport default deleteSession;\n","function deleteUserSessions(): Promise<void> {\n    throw new Error('Function not implemented.');\n}\n\nexport default deleteUserSessions;\n","import db from '../../utility/db';\n\nimport hashSecret from '../utility/hash-secret';\nimport { authUserTable } from '../utility/schema';\n\nimport type { AuthUser, AuthUserDataWithID } from './utility/interfaces';\n\nasync function createUser(data: AuthUserDataWithID): Promise<AuthUser | null> {\n    const [result] = await db\n        .insert(authUserTable)\n        .values({ ...data, password: data.password ? await hashSecret(data.password) : null })\n        .returning();\n\n    return result ?? null;\n}\n\nexport default createUser;\n","function deleteUser(): Promise<void> {\n    throw new Error('Function not implemented.');\n}\n\nexport default deleteUser;\n","import bcrypt from 'bcryptjs';\n\nimport ValidationError from '../../forms/utility/ValidationError';\n\nimport getUserByEmail from './utility/get-user-by-email';\n\nasync function validateUser(email: string, password: string): Promise<string> {\n    const user = await getUserByEmail(email);\n\n    if (!user?.password || !(await bcrypt.compare(password, user.password))) {\n        throw new ValidationError({ email: '', password: '' });\n    }\n\n    return user.id;\n}\n\nexport default validateUser;\n"]}

package/dist/auth/utility/schema.d.ts

@@ -1,348 +0,0 @@
-import * as drizzle_orm_pg_core from 'drizzle-orm/pg-core';
-
-declare const DEFAULT_ROLE = 10;
-declare const mfaType: drizzle_orm_pg_core.PgEnum<["TOTP", "HARDWARE"]>;
-declare const resetType: drizzle_orm_pg_core.PgEnum<["INVITE", "MFA", "PASSWORD"]>;
-type MFAType = (typeof mfaType.enumValues)[number];
-type ResetType = (typeof resetType.enumValues)[number];
-declare const authSchema: drizzle_orm_pg_core.PgSchema<"auth">;
-declare const authUserTable: drizzle_orm_pg_core.PgTableWithColumns<{
-    name: "user_credentials";
-    schema: "auth";
-    columns: {
-        id: drizzle_orm_pg_core.PgColumn<{
-            name: "id";
-            tableName: "user_credentials";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: true;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        email: drizzle_orm_pg_core.PgColumn<{
-            name: "email";
-            tableName: "user_credentials";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        password: drizzle_orm_pg_core.PgColumn<{
-            name: "password";
-            tableName: "user_credentials";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: false;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        role: drizzle_orm_pg_core.PgColumn<{
-            name: "role";
-            tableName: "user_credentials";
-            dataType: "number";
-            columnType: "PgInteger";
-            data: number;
-            driverParam: string | number;
-            notNull: true;
-            hasDefault: true;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        deletedAt: drizzle_orm_pg_core.PgColumn<{
-            name: "deletedAt";
-            tableName: "user_credentials";
-            dataType: "date";
-            columnType: "PgTimestamp";
-            data: Date;
-            driverParam: string;
-            notNull: false;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-    };
-    dialect: "pg";
-}>;
-type AuthUserTable = typeof authUserTable.$inferSelect;
-declare const authResetTable: drizzle_orm_pg_core.PgTableWithColumns<{
-    name: "resets";
-    schema: "auth";
-    columns: {
-        id: drizzle_orm_pg_core.PgColumn<{
-            name: "id";
-            tableName: "resets";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: true;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        userID: drizzle_orm_pg_core.PgColumn<{
-            name: "userID";
-            tableName: "resets";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        type: drizzle_orm_pg_core.PgColumn<{
-            name: "type";
-            tableName: "resets";
-            dataType: "string";
-            columnType: "PgEnumColumn";
-            data: "INVITE" | "MFA" | "PASSWORD";
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: ["INVITE", "MFA", "PASSWORD"];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        createdAt: drizzle_orm_pg_core.PgColumn<{
-            name: "createdAt";
-            tableName: "resets";
-            dataType: "date";
-            columnType: "PgTimestamp";
-            data: Date;
-            driverParam: string;
-            notNull: true;
-            hasDefault: true;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-    };
-    dialect: "pg";
-}>;
-type AuthResetTable = typeof authResetTable.$inferSelect;
-declare const authMFATable: drizzle_orm_pg_core.PgTableWithColumns<{
-    name: "mfas";
-    schema: "auth";
-    columns: {
-        id: drizzle_orm_pg_core.PgColumn<{
-            name: "id";
-            tableName: "mfas";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: true;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        name: drizzle_orm_pg_core.PgColumn<{
-            name: "name";
-            tableName: "mfas";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        userID: drizzle_orm_pg_core.PgColumn<{
-            name: "userID";
-            tableName: "mfas";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        type: drizzle_orm_pg_core.PgColumn<{
-            name: "type";
-            tableName: "mfas";
-            dataType: "string";
-            columnType: "PgEnumColumn";
-            data: "TOTP" | "HARDWARE";
-            driverParam: string;
-            notNull: true;
-            hasDefault: true;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: ["TOTP", "HARDWARE"];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        secret: drizzle_orm_pg_core.PgColumn<{
-            name: "secret";
-            tableName: "mfas";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        verifiedAt: drizzle_orm_pg_core.PgColumn<{
-            name: "verifiedAt";
-            tableName: "mfas";
-            dataType: "date";
-            columnType: "PgTimestamp";
-            data: Date;
-            driverParam: string;
-            notNull: false;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-    };
-    dialect: "pg";
-}>;
-type AuthMFATable = typeof authMFATable.$inferSelect;
-declare const authClientTable: drizzle_orm_pg_core.PgTableWithColumns<{
-    name: "client_credentials";
-    schema: "auth";
-    columns: {
-        id: drizzle_orm_pg_core.PgColumn<{
-            name: "id";
-            tableName: "client_credentials";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: true;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        alias: drizzle_orm_pg_core.PgColumn<{
-            name: "alias";
-            tableName: "client_credentials";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        secret: drizzle_orm_pg_core.PgColumn<{
-            name: "secret";
-            tableName: "client_credentials";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-    };
-    dialect: "pg";
-}>;
-type AuthClientTable = typeof authClientTable.$inferSelect;
-
-export { type AuthClientTable, type AuthMFATable, type AuthResetTable, type AuthUserTable, DEFAULT_ROLE, type MFAType, type ResetType, authClientTable, authMFATable, authResetTable, authSchema, authUserTable, mfaType, resetType };

package/dist/auth/utility/schema.js

@@ -1,2 +0,0 @@
-export{a as DEFAULT_ROLE,h as authClientTable,g as authMFATable,f as authResetTable,d as authSchema,e as authUserTable,b as mfaType,c as resetType}from'../../chunk-JI2U2EMD.js';//# sourceMappingURL=schema.js.map
-//# sourceMappingURL=schema.js.map

package/dist/auth/utility/schema.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"schema.js"}

package/dist/chunk-37TYQL5Y.js

@@ -1,2 +0,0 @@
-//# sourceMappingURL=chunk-37TYQL5Y.js.map
-//# sourceMappingURL=chunk-37TYQL5Y.js.map

package/dist/chunk-37TYQL5Y.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"chunk-37TYQL5Y.js"}

package/dist/chunk-AGS5PPG2.js

@@ -1,2 +0,0 @@
-var s=class extends Error{messages;constructor(r){super(JSON.stringify(r)),this.messages=r,this.name="ValidationError";}},e=s;export{e as a};//# sourceMappingURL=chunk-AGS5PPG2.js.map
-//# sourceMappingURL=chunk-AGS5PPG2.js.map

package/dist/chunk-AGS5PPG2.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/forms/utility/ValidationError.ts"],"names":["ValidationError","messages","ValidationError_default"],"mappings":"AAMA,IAAMA,CAAAA,CAAN,cAA8B,KAAM,CACzB,SAEA,WAAA,CAAYC,CAAAA,CAAkC,CACjD,KAAA,CAAM,IAAA,CAAK,SAAA,CAAUA,CAAQ,CAAC,CAAA,CAE9B,KAAK,QAAA,CAAWA,CAAAA,CAChB,KAAK,IAAA,CAAO,kBAChB,CACJ,CAAA,CAEOC,CAAAA,CAAQF","file":"chunk-AGS5PPG2.js","sourcesContent":["/**\n * Custom error class to represent validation errors in form processing.\n * \n * It extends the built-in Error class and includes a messages property\n * that holds a record of validation error messages.\n */\nclass ValidationError extends Error {\n    public messages: Record<string, string>;\n\n    public constructor(messages: Record<string, string>) {\n        super(JSON.stringify(messages));\n\n        this.messages = messages;\n        this.name = 'ValidationError';\n    }\n}\n\nexport default ValidationError;\n"]}

package/dist/chunk-JI2U2EMD.js

@@ -1,2 +0,0 @@
-import {sql}from'drizzle-orm';import {pgEnum,pgSchema,timestamp,integer,text}from'drizzle-orm/pg-core';var u=10,n=pgEnum("mfaType",["TOTP","HARDWARE"]),i=pgEnum("resetType",["INVITE","MFA","PASSWORD"]),t=pgSchema("auth"),a=t.table("user_credentials",{id:text("id").primaryKey(),email:text("email").notNull(),password:text("password"),role:integer("role").notNull().default(u),deletedAt:timestamp("deletedAt")}),T=t.table("resets",{id:text("id").primaryKey(),userID:text("userID").notNull().references(()=>a.id,{onDelete:"cascade"}),type:i("type").notNull(),createdAt:timestamp("createdAt").notNull().default(sql`CURRENT_TIMESTAMP`)}),d=t.table("mfas",{id:text("id").primaryKey(),name:text("name").notNull(),userID:text("userID").notNull().references(()=>a.id,{onDelete:"cascade"}),type:n("type").notNull().default("TOTP"),secret:text("secret").notNull(),verifiedAt:timestamp("verifiedAt")}),m=t.table("client_credentials",{id:text("id").primaryKey(),alias:text("alias").notNull().unique(),secret:text("secret").notNull().unique()});export{u as a,n as b,i as c,t as d,a as e,T as f,d as g,m as h};//# sourceMappingURL=chunk-JI2U2EMD.js.map
-//# sourceMappingURL=chunk-JI2U2EMD.js.map

package/dist/chunk-JI2U2EMD.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/auth/utility/schema.ts"],"names":["DEFAULT_ROLE","mfaType","pgEnum","resetType","authSchema","pgSchema","authUserTable","text","integer","timestamp","authResetTable","sql","authMFATable","authClientTable"],"mappings":"uGAKO,IAAMA,EAAe,EAAA,CAEfC,CAAAA,CAAUC,MAAAA,CAAO,SAAA,CAAW,CAAC,MAAA,CAAQ,UAAU,CAAC,CAAA,CAChDC,EAAYD,MAAAA,CAAO,WAAA,CAAa,CAAC,QAAA,CAAU,KAAA,CAAO,UAAU,CAAC,CAAA,CAK7DE,EAAaC,QAAAA,CAAS,MAAM,EAE5BC,CAAAA,CAAgBF,CAAAA,CAAW,MAAM,kBAAA,CAAoB,CAC9D,EAAA,CAAIG,IAAAA,CAAK,IAAI,CAAA,CAAE,YAAW,CAC1B,KAAA,CAAOA,KAAK,OAAO,CAAA,CAAE,SAAQ,CAC7B,QAAA,CAAUA,KAAK,UAAU,CAAA,CACzB,KAAMC,OAAAA,CAAQ,MAAM,EAAE,OAAA,EAAQ,CAAE,QAAQR,CAAY,CAAA,CACpD,SAAA,CAAWS,SAAAA,CAAU,WAAW,CACpC,CAAC,CAAA,CAIYC,CAAAA,CAAiBN,EAAW,KAAA,CAAM,QAAA,CAAU,CACrD,EAAA,CAAIG,IAAAA,CAAK,IAAI,CAAA,CAAE,UAAA,EAAW,CAC1B,OAAQA,IAAAA,CAAK,QAAQ,EAChB,OAAA,EAAQ,CACR,WAAW,IAAMD,CAAAA,CAAc,EAAA,CAAI,CAAE,QAAA,CAAU,SAAU,CAAC,CAAA,CAC/D,IAAA,CAAMH,EAAU,MAAM,CAAA,CAAE,SAAQ,CAChC,SAAA,CAAWM,UAAU,WAAW,CAAA,CAC3B,SAAQ,CACR,OAAA,CAAQE,sBAAsB,CACvC,CAAC,EAIYC,CAAAA,CAAeR,CAAAA,CAAW,KAAA,CAAM,MAAA,CAAQ,CACjD,EAAA,CAAIG,KAAK,IAAI,CAAA,CAAE,YAAW,CAC1B,IAAA,CAAMA,KAAK,MAAM,CAAA,CAAE,SAAQ,CAC3B,MAAA,CAAQA,KAAK,QAAQ,CAAA,CAChB,SAAQ,CACR,UAAA,CAAW,IAAMD,CAAAA,CAAc,EAAA,CAAI,CAAE,QAAA,CAAU,SAAU,CAAC,EAC/D,IAAA,CAAML,CAAAA,CAAQ,MAAM,CAAA,CAAE,OAAA,GAAU,OAAA,CAAQ,MAAM,EAC9C,MAAA,CAAQM,IAAAA,CAAK,QAAQ,CAAA,CAAE,OAAA,GACvB,UAAA,CAAYE,SAAAA,CAAU,YAAY,CACtC,CAAC,CAAA,CAIYI,CAAAA,CAAkBT,CAAAA,CAAW,KAAA,CAAM,qBAAsB,CAClE,EAAA,CAAIG,KAAK,IAAI,CAAA,CAAE,YAAW,CAC1B,KAAA,CAAOA,IAAAA,CAAK,OAAO,CAAA,CAAE,OAAA,GAAU,MAAA,EAAO,CACtC,OAAQA,IAAAA,CAAK,QAAQ,EAAE,OAAA,EAAQ,CAAE,MAAA,EACrC,CAAC","file":"chunk-JI2U2EMD.js","sourcesContent":["/* istanbul ignore file */\n\nimport { sql } from 'drizzle-orm';\nimport { integer, pgEnum, pgSchema, text, timestamp } from 'drizzle-orm/pg-core';\n\nexport const DEFAULT_ROLE = 10;\n\nexport const mfaType = pgEnum('mfaType', ['TOTP', 'HARDWARE']);\nexport const resetType = pgEnum('resetType', ['INVITE', 'MFA', 'PASSWORD']);\n\nexport type MFAType = (typeof mfaType.enumValues)[number];\nexport type ResetType = (typeof resetType.enumValues)[number];\n\nexport const authSchema = pgSchema('auth');\n\nexport const authUserTable = authSchema.table('user_credentials', {\n    id: text('id').primaryKey(),\n    email: text('email').notNull(),\n    password: text('password'),\n    role: integer('role').notNull().default(DEFAULT_ROLE),\n    deletedAt: timestamp('deletedAt'),\n});\n\nexport type AuthUserTable = typeof authUserTable.$inferSelect;\n\nexport const authResetTable = authSchema.table('resets', {\n    id: text('id').primaryKey(),\n    userID: text('userID')\n        .notNull()\n        .references(() => authUserTable.id, { onDelete: 'cascade' }),\n    type: resetType('type').notNull(),\n    createdAt: timestamp('createdAt')\n        .notNull()\n        .default(sql`CURRENT_TIMESTAMP`),\n});\n\nexport type AuthResetTable = typeof authResetTable.$inferSelect;\n\nexport const authMFATable = authSchema.table('mfas', {\n    id: text('id').primaryKey(),\n    name: text('name').notNull(),\n    userID: text('userID')\n        .notNull()\n        .references(() => authUserTable.id, { onDelete: 'cascade' }),\n    type: mfaType('type').notNull().default('TOTP'),\n    secret: text('secret').notNull(),\n    verifiedAt: timestamp('verifiedAt'),\n});\n\nexport type AuthMFATable = typeof authMFATable.$inferSelect;\n\nexport const authClientTable = authSchema.table('client_credentials', {\n    id: text('id').primaryKey(),\n    alias: text('alias').notNull().unique(),\n    secret: text('secret').notNull().unique(),\n});\n\nexport type AuthClientTable = typeof authClientTable.$inferSelect;\n"]}

package/dist/chunk-QE347FVL.js

@@ -1,2 +0,0 @@
-import {e}from'./chunk-JI2U2EMD.js';import I from'bcryptjs';import {cache}from'react';import {createClient}from'redis';import {cookies}from'next/headers';import {and,eq,isNull}from'drizzle-orm';import {drizzle}from'drizzle-orm/node-postgres';var i=null;async function S(){if(!process.env.REDIS_URL)throw new Error("REDIS_URL is not defined. Access to the cache is not possible.");return i||(i=createClient({url:process.env.REDIS_URL}),await i.connect(),i)}var o=S;var w={async getItem(e,r){let t=await(await o()).get(`[${e}]:${r}`);if(!t)return null;try{return JSON.parse(t)}catch{return null}},async getArray(e,r){return await(await o()).sMembers(`[${e}]:${r}`)},async addToArray(e,r,t){await(await o()).sAdd(`[${e}]:${r}`,t);},async removeFromArray(e,r,t){await(await o()).sRem(`[${e}]:${r}`,t);},async setItem(e,r,t){await(await o()).set(`[${e}]:${r}`,JSON.stringify(t));},async removeItem(e,r){await(await o()).del(`[${e}]:${r}`);}},l=w;function _(){let e=process.env.AUTH_ROLE;if(!e)throw new Error("AUTH_ROLE environment variable is not set.");let r=parseInt(e,10);if(isNaN(r))throw new Error("AUTH_ROLE environment variable is not a valid number.");return r}var u=_;var c=process.env.AUTH_COOKIE_NAME??"session",K=process.env.AUTH_INVITE_EXPIRY_HOURS?Number(process.env.AUTH_INVITE_EXPIRY_HOURS):24,V=process.env.AUTH_RESET_EXPIRY_HOURS?Number(process.env.AUTH_RESET_EXPIRY_HOURS):2;async function h(e){let r=(e??await cookies()).get(c)?.value;if(!r)return null;let t=r.split(".");if(t.length!==2)return null;let[s,a]=t;return {id:s,secret:a}}var m=h;function v(e){let{expires:r,secret:t,userID:s}=e;if(typeof r!="string"||typeof t!="string"||typeof s!="string")return null;let a=new Date(r);return isNaN(a.getTime())?null:{expires:a,secret:t,userID:s}}var f=v;async function x(e){let r=await m(e);if(!r)return null;let t=u(),s=await l.getItem("session",r.id);return s?.role!==t||typeof s?.secret!="string"||!await I.compare(r.secret,s.secret)?null:f(s)}var N=cache(x),p=N;var y=drizzle(process.env.DATABASE_URL??"");async function b(e$1,r){let t=u();return (await y.select().from(e).where(and(eq(e[e$1],r),eq(e.role,t),isNull(e.deletedAt))).limit(1))[0]??null}var d=b;async function k(e){return d("id",e)}var U=k;async function $(){let e=await p();if(!e)return null;let r=await U(e.userID);return r?{email:r.email,id:r.id}:null}async function D(){return cache($)()}var R=D;async function L(){let e=await R();if(!e)throw new Error("Could not ensure session user. No session user found.");return e}var Re=L;export{y as a,c as b,K as c,V as d,u as e,d as f,l as g,m as h,p as i,R as j,Re as k};//# sourceMappingURL=chunk-QE347FVL.js.map
-//# sourceMappingURL=chunk-QE347FVL.js.map

package/dist/chunk-QE347FVL.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/storage/utility/get-client.ts","../src/storage/index.ts","../src/auth/utility/ensure-role.ts","../src/auth/utility/config.ts","../src/auth/sessions/utility/get-session-cookie.ts","../src/auth/sessions/utility/parse-session.ts","../src/auth/sessions/validate-session.ts","../src/utility/db.ts","../src/auth/users/utility/get-user-by.ts","../src/auth/users/utility/get-user-by-id.ts","../src/auth/users/get-session-user.ts","../src/auth/users/ensure-session-user.ts"],"names":["client","getClient","createClient","get_client_default","serverStorage","prefix","key","value","storage_default","ensureRole","role","roleNumber","ensure_role_default","AUTH_COOKIE_NAME","AUTH_INVITE_EXPIRY_HOURS","AUTH_RESET_EXPIRY_HOURS","getSessionCookie","cookies","cookie","cookieFn","parts","id","secret","get_session_cookie_default","parseSession","session","expires","userID","expiresDate","parse_session_default","uncached_validateSession","bcrypt","validateSession","cache","validate_session_default","db_default","drizzle","getUserBy","authUserTable","and","eq","isNull","get_user_by_default","getUserByID","get_user_by_id_default","uncached_getSessionUser","authUser","getSessionUser","get_session_user_default","ensureSessionUser","user","ensure_session_user_default"],"mappings":"kPAIA,IAAIA,CAAAA,CAAiD,KAQrD,eAAeC,CAAAA,EAAsD,CACjE,GAAI,CAAC,OAAA,CAAQ,GAAA,CAAI,SAAA,CACb,MAAM,IAAI,KAAA,CAAM,gEAAgE,CAAA,CAGpF,OAAID,CAAAA,GAIJA,CAAAA,CAASE,aAAa,CAClB,GAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,SACrB,CAAC,CAAA,CAED,MAAMF,CAAAA,CAAO,OAAA,EAAQ,CACdA,CAAAA,CACX,CAEA,IAAOG,CAAAA,CAAQF,CAAAA,KCxBTG,CAAAA,CAAgB,CAOlB,MAAM,OAAA,CAAQC,CAAAA,CAAgBC,CAAAA,CAAsD,CAChF,IAAMC,EAAQ,KAAA,CAAO,MAAMJ,CAAAA,EAAU,EAAG,GAAA,CAAI,CAAA,CAAA,EAAIE,CAAM,CAAA,EAAA,EAAKC,CAAG,CAAA,CAAE,CAAA,CAEhE,GAAI,CAACC,CAAAA,CACD,OAAO,IAAA,CAGX,GAAI,CACA,OAAO,IAAA,CAAK,KAAA,CAAMA,CAAK,CAC3B,CAAA,KAAQ,CACJ,OAAO,IACX,CACJ,CAAA,CAEA,MAAM,QAAA,CAASF,CAAAA,CAAgBC,CAAAA,CAAgC,CAE3D,OADe,KAAA,CAAO,MAAMH,CAAAA,EAAU,EAAG,QAAA,CAAS,CAAA,CAAA,EAAIE,CAAM,CAAA,EAAA,EAAKC,CAAG,CAAA,CAAE,CAE1E,CAAA,CAEA,MAAM,UAAA,CAAWD,CAAAA,CAAgBC,CAAAA,CAAaC,CAAAA,CAA8B,CACxE,KAAA,CAAO,MAAMJ,CAAAA,EAAU,EAAG,IAAA,CAAK,CAAA,CAAA,EAAIE,CAAM,KAAKC,CAAG,CAAA,CAAA,CAAIC,CAAK,EAC9D,CAAA,CAEA,MAAM,eAAA,CAAgBF,CAAAA,CAAgBC,EAAaC,CAAAA,CAA8B,CAC7E,KAAA,CAAO,MAAMJ,CAAAA,EAAU,EAAG,IAAA,CAAK,CAAA,CAAA,EAAIE,CAAM,CAAA,EAAA,EAAKC,CAAG,CAAA,CAAA,CAAIC,CAAK,EAC9D,CAAA,CAQA,MAAM,OAAA,CAAQF,CAAAA,CAAgBC,CAAAA,CAAaC,CAAAA,CAA+C,CACtF,KAAA,CAAO,MAAMJ,CAAAA,EAAU,EAAG,IAAI,CAAA,CAAA,EAAIE,CAAM,CAAA,EAAA,EAAKC,CAAG,CAAA,CAAA,CAAI,IAAA,CAAK,SAAA,CAAUC,CAAK,CAAC,EAC7E,CAAA,CAOA,MAAM,UAAA,CAAWF,CAAAA,CAAgBC,CAAAA,CAA4B,CACzD,MAAO,MAAMH,CAAAA,EAAU,EAAG,GAAA,CAAI,CAAA,CAAA,EAAIE,CAAM,CAAA,EAAA,EAAKC,CAAG,CAAA,CAAE,EACtD,CACJ,CAAA,CAEOE,CAAAA,CAAQJ,EC3Df,SAASK,CAAAA,EAAqB,CAC1B,IAAMC,CAAAA,CAAO,OAAA,CAAQ,GAAA,CAAI,SAAA,CAEzB,GAAI,CAACA,CAAAA,CACD,MAAM,IAAI,KAAA,CAAM,4CAA4C,CAAA,CAGhE,IAAMC,CAAAA,CAAa,QAAA,CAASD,CAAAA,CAAM,EAAE,CAAA,CAEpC,GAAI,KAAA,CAAMC,CAAU,CAAA,CAChB,MAAM,IAAI,KAAA,CAAM,uDAAuD,CAAA,CAG3E,OAAOA,CACX,CAEA,IAAOC,CAAAA,CAAQH,EChBR,IAAMI,CAAAA,CAAmB,OAAA,CAAQ,GAAA,CAAI,gBAAA,EAAoB,UAEnDC,CAAAA,CAA2B,OAAA,CAAQ,GAAA,CAAI,wBAAA,CAC9C,MAAA,CAAO,OAAA,CAAQ,GAAA,CAAI,wBAAwB,EAC3C,EAAA,CAEOC,CAAAA,CAA0B,OAAA,CAAQ,GAAA,CAAI,uBAAA,CAC7C,MAAA,CAAO,OAAA,CAAQ,GAAA,CAAI,uBAAuB,CAAA,CAC1C,ECDN,eAAeC,CAAAA,CACXC,CAAAA,CACiC,CACjC,IAAMC,GAAUD,CAAAA,EAAY,MAAME,OAAAA,EAAS,EAAI,GAAA,CAAIN,CAAgB,CAAA,EAAG,KAAA,CAEtE,GAAI,CAACK,CAAAA,CACD,OAAO,IAAA,CAGX,IAAME,CAAAA,CAAQF,CAAAA,CAAO,KAAA,CAAM,GAAG,CAAA,CAE9B,GAAIE,CAAAA,CAAM,MAAA,GAAW,CAAA,CACjB,OAAO,IAAA,CAGX,GAAM,CAACC,CAAAA,CAAIC,CAAM,CAAA,CAAIF,CAAAA,CACrB,OAAO,CAAE,EAAA,CAAAC,EAAI,MAAA,CAAAC,CAAO,CACxB,CAEA,IAAOC,CAAAA,CAAQP,ECxBf,SAASQ,CAAAA,CAAaC,CAAAA,CAAsD,CACxE,GAAM,CAAE,OAAA,CAAAC,CAAAA,CAAS,MAAA,CAAAJ,EAAQ,MAAA,CAAAK,CAAO,CAAA,CAAIF,CAAAA,CAEpC,GAAI,OAAOC,CAAAA,EAAY,QAAA,EAAY,OAAOJ,CAAAA,EAAW,QAAA,EAAY,OAAOK,CAAAA,EAAW,QAAA,CAC/E,OAAO,IAAA,CAGX,IAAMC,CAAAA,CAAc,IAAI,IAAA,CAAKF,CAAO,CAAA,CAEpC,OAAI,KAAA,CAAME,CAAAA,CAAY,SAAS,CAAA,CACpB,IAAA,CAGJ,CACH,OAAA,CAASA,CAAAA,CACT,MAAA,CAAAN,CAAAA,CACA,OAAAK,CACJ,CACJ,CAEA,IAAOE,CAAAA,CAAQL,CAAAA,CCXf,eAAeM,CAAAA,CACXb,CAAAA,CAC2B,CAC3B,IAAMC,CAAAA,CAAS,MAAMK,CAAAA,CAAiBN,CAAO,CAAA,CAE7C,GAAI,CAACC,CAAAA,CACD,OAAO,IAAA,CAGX,IAAMR,CAAAA,CAAOE,CAAAA,EAAW,CAClBa,EAAU,MAAMjB,CAAAA,CAAc,OAAA,CAAQ,SAAA,CAAWU,CAAAA,CAAO,EAAE,CAAA,CAUhE,OARGO,GAAS,IAAA,GAASf,CAAAA,EAIjB,OAAOe,CAAAA,EAAS,MAAA,EAAW,QAAA,EAI3B,CAAE,MAAMM,CAAAA,CAAO,OAAA,CAAQb,CAAAA,CAAO,MAAA,CAAQO,CAAAA,CAAQ,MAAM,CAAA,CAC7C,IAAA,CAGJI,EAAaJ,CAAO,CAC/B,CAEA,IAAMO,CAAAA,CAAkBC,KAAAA,CAAMH,CAAwB,CAAA,CAE/CI,EAAQF,ECtCf,IAAOG,CAAAA,CAAQC,OAAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAA,EAAgB,EAAE,ECQrD,eAAeC,CAAAA,CAAU/B,GAAAA,CAA0BC,CAAAA,CAAyC,CACxF,IAAMG,CAAAA,CAAOE,CAAAA,EAAW,CAcxB,OAAA,CAZgB,MAAMuB,CAAAA,CACjB,MAAA,EAAO,CACP,IAAA,CAAKG,CAAa,CAAA,CAClB,MACGC,GAAAA,CACIC,EAAAA,CAAGF,CAAAA,CAAchC,GAAG,CAAA,CAAGC,CAAK,CAAA,CAC5BiC,EAAAA,CAAGF,CAAAA,CAAc,IAAA,CAAM5B,CAAI,CAAA,CAC3B+B,MAAAA,CAAOH,CAAAA,CAAc,SAAS,CAClC,CACJ,CAAA,CACC,KAAA,CAAM,CAAC,CAAA,EAEG,CAAC,CAAA,EAAK,IACzB,KAEOI,CAAAA,CAAQL,ECzBf,eAAeM,CAAAA,CAAYtB,CAAAA,CAAsC,CAC7D,OAAOqB,CAAAA,CAAU,KAAMrB,CAAE,CAC7B,CAEA,IAAOuB,CAAAA,CAAQD,CAAAA,CCAf,eAAeE,CAAAA,EAAgD,CAC3D,IAAMpB,CAAAA,CAAU,MAAMS,CAAAA,EAAgB,CAEtC,GAAI,CAACT,EACD,OAAO,IAAA,CAGX,IAAMqB,CAAAA,CAAW,MAAMF,CAAAA,CAAYnB,CAAAA,CAAQ,MAAM,EAEjD,OAAKqB,CAAAA,CAIE,CACH,KAAA,CAAOA,CAAAA,CAAS,KAAA,CAChB,EAAA,CAAIA,CAAAA,CAAS,EACjB,CAAA,CANW,IAOf,CAEA,eAAeC,CAAAA,EAA6D,CACxE,OAAOd,KAAAA,CAAMY,CAAuB,CAAA,EACxC,CAEA,IAAOG,CAAAA,CAAQD,EC3Bf,eAAeE,GAAmC,CAC9C,IAAMC,CAAAA,CAAO,MAAMF,CAAAA,EAAe,CAElC,GAAI,CAACE,EACD,MAAM,IAAI,KAAA,CAAM,uDAAuD,CAAA,CAG3E,OAAOA,CACX,KAEOC,EAAAA,CAAQF","file":"chunk-QE347FVL.js","sourcesContent":["import { createClient } from 'redis';\n\nimport isLocalhost from './is-localhost.js';\n\nlet client: ReturnType<typeof createClient> | null = null;\n\n/**\n * Get a Redis client instance. If the client does not exist, it creates a new one and connects to the Redis server.\n * If the client already exists, it returns the existing instance.\n *\n * @returns A promise that resolves to a Redis client instance.\n */\nasync function getClient(): Promise<ReturnType<typeof createClient>> {\n    if (!process.env.REDIS_URL) {\n        throw new Error('REDIS_URL is not defined. Access to the cache is not possible.');\n    }\n\n    if (client) {\n        return client;\n    }\n\n    client = createClient({\n        url: process.env.REDIS_URL,\n    });\n\n    await client.connect();\n    return client;\n}\n\nexport default getClient;\n","import getClient from './utility/get-client';\n\n/**\n * Server-side storage utility for caching data using Redis. It is designed to match the interface of localStorage, but operates on the server side.\n */\nconst serverStorage = {\n    /**\n     * Get an item from the cache.\n     * @param prefix The prefix to use for the cache key.\n     * @param key The key of the item to retrieve.\n     * @returns The cached item, or null if not found.\n     */\n    async getItem(prefix: string, key: string): Promise<Record<string, unknown> | null> {\n        const value = await (await getClient()).get(`[${prefix}]:${key}`);\n\n        if (!value) {\n            return null;\n        }\n\n        try {\n            return JSON.parse(value);\n        } catch {\n            return null;\n        }\n    },\n\n    async getArray(prefix: string, key: string): Promise<string[]> {\n        const values = await (await getClient()).sMembers(`[${prefix}]:${key}`);\n        return values;\n    },\n\n    async addToArray(prefix: string, key: string, value: string): Promise<void> {\n        await (await getClient()).sAdd(`[${prefix}]:${key}`, value);\n    },\n\n    async removeFromArray(prefix: string, key: string, value: string): Promise<void> {\n        await (await getClient()).sRem(`[${prefix}]:${key}`, value);\n    },\n\n    /**\n     * Set an item in the cache.\n     * @param prefix The prefix to use for the cache key.\n     * @param key The key of the item to set.\n     * @param value The value of the item to set.\n     */\n    async setItem(prefix: string, key: string, value: Record<string, unknown>): Promise<void> {\n        await (await getClient()).set(`[${prefix}]:${key}`, JSON.stringify(value));\n    },\n\n    /**\n     * Remove an item from the cache.\n     * @param prefix The prefix to use for the cache key.\n     * @param key The key of the item to remove.\n     */\n    async removeItem(prefix: string, key: string): Promise<void> {\n        await (await getClient()).del(`[${prefix}]:${key}`);\n    },\n};\n\nexport default serverStorage;\n","function ensureRole(): number {\n    const role = process.env.AUTH_ROLE;\n\n    if (!role) {\n        throw new Error('AUTH_ROLE environment variable is not set.');\n    }\n\n    const roleNumber = parseInt(role, 10);\n\n    if (isNaN(roleNumber)) {\n        throw new Error('AUTH_ROLE environment variable is not a valid number.');\n    }\n\n    return roleNumber;\n}\n\nexport default ensureRole;\n","export const AUTH_COOKIE_NAME = process.env.AUTH_COOKIE_NAME ?? 'session';\n\nexport const AUTH_INVITE_EXPIRY_HOURS = process.env.AUTH_INVITE_EXPIRY_HOURS\n    ? Number(process.env.AUTH_INVITE_EXPIRY_HOURS)\n    : 24;\n\nexport const AUTH_RESET_EXPIRY_HOURS = process.env.AUTH_RESET_EXPIRY_HOURS\n    ? Number(process.env.AUTH_RESET_EXPIRY_HOURS)\n    : 2;\n","import { cookies as cookieFn } from 'next/headers';\nimport { NextRequest } from 'next/server';\n\nimport { AUTH_COOKIE_NAME } from '../../utility/config';\n\nimport type { AuthSessionCookie } from './interfaces';\n\nasync function getSessionCookie(\n    cookies?: NextRequest['cookies']\n): Promise<AuthSessionCookie | null> {\n    const cookie = (cookies ?? (await cookieFn())).get(AUTH_COOKIE_NAME)?.value;\n\n    if (!cookie) {\n        return null;\n    }\n\n    const parts = cookie.split('.');\n\n    if (parts.length !== 2) {\n        return null;\n    }\n\n    const [id, secret] = parts;\n    return { id, secret };\n}\n\nexport default getSessionCookie;\n","import type { AuthSession } from './interfaces';\n\nfunction parseSession(session: Record<string, unknown>): AuthSession | null {\n    const { expires, secret, userID } = session;\n\n    if (typeof expires !== 'string' || typeof secret !== 'string' || typeof userID !== 'string') {\n        return null;\n    }\n\n    const expiresDate = new Date(expires);\n\n    if (isNaN(expiresDate.getTime())) {\n        return null;\n    }\n\n    return {\n        expires: expiresDate,\n        secret,\n        userID,\n    };\n}\n\nexport default parseSession;\n","import bcrypt from 'bcryptjs';\nimport { NextRequest } from 'next/server';\nimport { cache } from 'react';\n\nimport serverStorage from '../../storage';\n\nimport ensureRole from '../utility/ensure-role';\nimport getSessionCookie from './utility/get-session-cookie';\nimport type { AuthSession } from './utility/interfaces';\nimport parseSession from './utility/parse-session';\n\nasync function uncached_validateSession(\n    cookies?: NextRequest['cookies']\n): Promise<AuthSession | null> {\n    const cookie = await getSessionCookie(cookies);\n\n    if (!cookie) {\n        return null;\n    }\n\n    const role = ensureRole();\n    const session = await serverStorage.getItem('session', cookie.id);\n\n    if(session?.role !== role) {\n        return null;\n    }\n\n    if (typeof session?.secret !== 'string') {\n        return null;\n    }\n\n    if (!(await bcrypt.compare(cookie.secret, session.secret))) {\n        return null;\n    }\n\n    return parseSession(session);\n}\n\nconst validateSession = cache(uncached_validateSession);\n\nexport default validateSession;\n","import { drizzle } from 'drizzle-orm/node-postgres';\n\nexport default drizzle(process.env.DATABASE_URL ?? '');\n","import { and, eq, isNull } from 'drizzle-orm';\n\nimport db from '../../../utility/db';\n\nimport ensureRole from '../../utility/ensure-role';\nimport { authUserTable } from '../../utility/schema';\nimport type { AuthUserTable } from '../../utility/schema';\n\nimport type { AuthUser } from './interfaces';\n\nasync function getUserBy(key: keyof AuthUserTable, value: string): Promise<AuthUser | null> {\n    const role = ensureRole();\n\n    const results = await db\n        .select()\n        .from(authUserTable)\n        .where(\n            and(\n                eq(authUserTable[key], value),\n                eq(authUserTable.role, role),\n                isNull(authUserTable.deletedAt)\n            )\n        )\n        .limit(1);\n\n    return results[0] ?? null;\n}\n\nexport default getUserBy;\n","import getUserBy from './get-user-by';\nimport type { AuthUser } from './interfaces';\n\nasync function getUserByID(id: string): Promise<AuthUser | null> {\n    return getUserBy('id', id);\n}\n\nexport default getUserByID;\n","import { cache } from 'react';\n\nimport validateSession from '../sessions/validate-session';\n\nimport getUserByID from './utility/get-user-by-id';\nimport type { User } from './utility/interfaces';\n\nasync function uncached_getSessionUser(): Promise<User | null> {\n    const session = await validateSession();\n\n    if (!session) {\n        return null;\n    }\n\n    const authUser = await getUserByID(session.userID);\n\n    if (!authUser) {\n        return null;\n    }\n\n    return {\n        email: authUser.email,\n        id: authUser.id,\n    };\n}\n\nasync function getSessionUser(): ReturnType<typeof uncached_getSessionUser> {\n    return cache(uncached_getSessionUser)();\n}\n\nexport default getSessionUser;\n","import getSessionUser from './get-session-user';\nimport type { User } from './utility/interfaces';\n\nasync function ensureSessionUser(): Promise<User> {\n    const user = await getSessionUser();\n\n    if (!user) {\n        throw new Error('Could not ensure session user. No session user found.');\n    }\n\n    return user;\n}\n\nexport default ensureSessionUser;\n"]}

package/dist/chunk-XSJ4OEIH.js

@@ -1,2 +0,0 @@
-import {randomBytes}from'crypto';function u(r,n){let t=Array.isArray(r)?r[0]:r;return t?.startsWith(n)?t:null}var s=u;function a(r,n){let t=s(r,n);if(!t)throw new Error(`Could not ensure ID. '${r}' is not a valid ID with prefix '${n}'.`);return t}var m=a;var l=16;function d(r,n=l){let t="abcdefghijklmnopqrstuvwxyz0123456789",i=randomBytes(n),e="";for(let o=0;o<n;o++)e+=t[i[o]%t.length];return `${r?r+"_":""}${e}`}var I=d;async function f(r,n,t){if(!t)throw new Error("");let i=await t,e=s(i[r],n);if(!e)throw new Error("");return e}var p=f;export{s as a,m as b,I as c,p as d};//# sourceMappingURL=chunk-XSJ4OEIH.js.map
-//# sourceMappingURL=chunk-XSJ4OEIH.js.map