@techelusive/nest-auth 0.0.0-stage → 0.2.0

package/dist/database/entities/audit-log.entity.js

@@ -0,0 +1,64 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditLogEntity = void 0;
+const typeorm_1 = require("typeorm");
+/** Security history: sign-ins, failures, password changes, admin actions. Never contains secrets. */
+let AuditLogEntity = class AuditLogEntity {
+    id;
+    userId;
+    /** Who did it, when not the user themself: "admin:<id>", "system". */
+    performedBy;
+    eventName;
+    ipAddress;
+    userAgent;
+    details;
+    createdAt;
+};
+exports.AuditLogEntity = AuditLogEntity;
+__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    __metadata("design:type", String)
+], AuditLogEntity.prototype, "id", void 0);
+__decorate([
+    (0, typeorm_1.Index)(),
+    (0, typeorm_1.Column)({ name: 'user_id', type: 'uuid', nullable: true }),
+    __metadata("design:type", Object)
+], AuditLogEntity.prototype, "userId", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'performed_by', type: 'text', nullable: true }),
+    __metadata("design:type", Object)
+], AuditLogEntity.prototype, "performedBy", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'event_name', type: 'text' }),
+    __metadata("design:type", String)
+], AuditLogEntity.prototype, "eventName", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'ip_address', type: 'text', nullable: true }),
+    __metadata("design:type", Object)
+], AuditLogEntity.prototype, "ipAddress", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'user_agent', type: 'text', nullable: true }),
+    __metadata("design:type", Object)
+], AuditLogEntity.prototype, "userAgent", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'jsonb', default: {} }),
+    __metadata("design:type", Object)
+], AuditLogEntity.prototype, "details", void 0);
+__decorate([
+    (0, typeorm_1.Index)(),
+    (0, typeorm_1.CreateDateColumn)({ name: 'created_at', type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], AuditLogEntity.prototype, "createdAt", void 0);
+exports.AuditLogEntity = AuditLogEntity = __decorate([
+    (0, typeorm_1.Entity)('auth_audit_logs')
+], AuditLogEntity);
+//# sourceMappingURL=audit-log.entity.js.map

package/dist/database/entities/audit-log.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.entity.js","sourceRoot":"","sources":["../../../src/database/entities/audit-log.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAA0F;AAG1F,qGAAqG;AAE9F,IAAM,cAAc,GAApB,MAAM,cAAc;IAEzB,EAAE,CAAS;IAIX,MAAM,CAAgB;IAEtB,sEAAsE;IAEtE,WAAW,CAAgB;IAG3B,SAAS,CAAS;IAGlB,SAAS,CAAgB;IAGzB,SAAS,CAAgB;IAGzB,OAAO,CAAa;IAIpB,SAAS,CAAO;CACjB,CAAA;AA3BY,wCAAc;AAEzB;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;0CACpB;AAIX;IAFC,IAAA,eAAK,GAAE;IACP,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;8CACpC;AAItB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;mDACpC;AAG3B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;iDAC3B;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;iDACpC;AAGzB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;iDACpC;AAGzB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;;+CACnB;AAIpB;IAFC,IAAA,eAAK,GAAE;IACP,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACnD,IAAI;iDAAC;yBA1BL,cAAc;IAD1B,IAAA,gBAAM,EAAC,iBAAiB,CAAC;GACb,cAAc,CA2B1B"}

package/dist/database/entities/backup-code.entity.d.ts

@@ -0,0 +1,9 @@
+/** One-time backup codes for when the user loses their authenticator app. Stored hashed. */
+export declare class BackupCodeEntity {
+    id: string;
+    userId: string;
+    codeHash: string;
+    salt: string;
+    usedAt: Date | null;
+    createdAt: Date;
+}

package/dist/database/entities/backup-code.entity.js

@@ -0,0 +1,52 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BackupCodeEntity = void 0;
+const typeorm_1 = require("typeorm");
+/** One-time backup codes for when the user loses their authenticator app. Stored hashed. */
+let BackupCodeEntity = class BackupCodeEntity {
+    id;
+    userId;
+    codeHash;
+    salt;
+    usedAt;
+    createdAt;
+};
+exports.BackupCodeEntity = BackupCodeEntity;
+__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    __metadata("design:type", String)
+], BackupCodeEntity.prototype, "id", void 0);
+__decorate([
+    (0, typeorm_1.Index)(),
+    (0, typeorm_1.Column)({ name: 'user_id', type: 'uuid' }),
+    __metadata("design:type", String)
+], BackupCodeEntity.prototype, "userId", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'code_hash', type: 'text' }),
+    __metadata("design:type", String)
+], BackupCodeEntity.prototype, "codeHash", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text' }),
+    __metadata("design:type", String)
+], BackupCodeEntity.prototype, "salt", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'used_at', type: 'timestamptz', nullable: true }),
+    __metadata("design:type", Object)
+], BackupCodeEntity.prototype, "usedAt", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)({ name: 'created_at', type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], BackupCodeEntity.prototype, "createdAt", void 0);
+exports.BackupCodeEntity = BackupCodeEntity = __decorate([
+    (0, typeorm_1.Entity)('auth_backup_codes')
+], BackupCodeEntity);
+//# sourceMappingURL=backup-code.entity.js.map

package/dist/database/entities/backup-code.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-code.entity.js","sourceRoot":"","sources":["../../../src/database/entities/backup-code.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAA0F;AAE1F,4FAA4F;AAErF,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAE3B,EAAE,CAAS;IAIX,MAAM,CAAS;IAGf,QAAQ,CAAS;IAGjB,IAAI,CAAS;IAGb,MAAM,CAAc;IAGpB,SAAS,CAAO;CACjB,CAAA;AAnBY,4CAAgB;AAE3B;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;4CACpB;AAIX;IAFC,IAAA,eAAK,GAAE;IACP,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;gDAC3B;AAGf;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;kDAC3B;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;8CACZ;AAGb;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;gDAC7C;AAGpB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACnD,IAAI;mDAAC;2BAlBL,gBAAgB;IAD5B,IAAA,gBAAM,EAAC,mBAAmB,CAAC;GACf,gBAAgB,CAmB5B"}

package/dist/database/entities/index.d.ts

@@ -0,0 +1,43 @@
+import { ApiKeyEntity } from './api-key.entity';
+import { AuditLogEntity } from './audit-log.entity';
+import { BackupCodeEntity } from './backup-code.entity';
+import { LinkTokenEntity } from './link-token.entity';
+import { OneTimeCodeEntity } from './one-time-code.entity';
+import { OrganizationInvitationEntity } from './organization-invitation.entity';
+import { OrganizationMemberEntity } from './organization-member.entity';
+import { OrganizationEntity } from './organization.entity';
+import { PasskeyEntity } from './passkey.entity';
+import { PasswordEntity } from './password.entity';
+import { RefreshTokenEntity } from './refresh-token.entity';
+import { SessionEntity } from './session.entity';
+import { SettingsEntity } from './settings.entity';
+import { SignInChallengeEntity } from './sign-in-challenge.entity';
+import { SigningKeyEntity } from './signing-key.entity';
+import { SocialAccountEntity } from './social-account.entity';
+import { TwoFactorSecretEntity } from './two-factor-secret.entity';
+import { UserEntity } from './user.entity';
+import { WebhookDeliveryEntity } from './webhook-delivery.entity';
+import { WebhookEntity } from './webhook.entity';
+export * from './api-key.entity';
+export * from './json-object';
+export * from './audit-log.entity';
+export * from './backup-code.entity';
+export * from './link-token.entity';
+export * from './one-time-code.entity';
+export * from './organization-invitation.entity';
+export * from './organization-member.entity';
+export * from './organization.entity';
+export * from './passkey.entity';
+export * from './password.entity';
+export * from './refresh-token.entity';
+export * from './session.entity';
+export * from './settings.entity';
+export * from './sign-in-challenge.entity';
+export * from './signing-key.entity';
+export * from './social-account.entity';
+export * from './two-factor-secret.entity';
+export * from './user.entity';
+export * from './webhook-delivery.entity';
+export * from './webhook.entity';
+/** Add these to your TypeORM DataSource `entities` list. */
+export declare const AUTH_ENTITIES: (typeof ApiKeyEntity | typeof AuditLogEntity | typeof BackupCodeEntity | typeof LinkTokenEntity | typeof OneTimeCodeEntity | typeof OrganizationInvitationEntity | typeof OrganizationMemberEntity | typeof OrganizationEntity | typeof PasskeyEntity | typeof PasswordEntity | typeof RefreshTokenEntity | typeof SessionEntity | typeof SettingsEntity | typeof SignInChallengeEntity | typeof SigningKeyEntity | typeof SocialAccountEntity | typeof TwoFactorSecretEntity | typeof UserEntity | typeof WebhookDeliveryEntity | typeof WebhookEntity)[];

package/dist/database/entities/index.js

@@ -0,0 +1,82 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUTH_ENTITIES = void 0;
+const api_key_entity_1 = require("./api-key.entity");
+const audit_log_entity_1 = require("./audit-log.entity");
+const backup_code_entity_1 = require("./backup-code.entity");
+const link_token_entity_1 = require("./link-token.entity");
+const one_time_code_entity_1 = require("./one-time-code.entity");
+const organization_invitation_entity_1 = require("./organization-invitation.entity");
+const organization_member_entity_1 = require("./organization-member.entity");
+const organization_entity_1 = require("./organization.entity");
+const passkey_entity_1 = require("./passkey.entity");
+const password_entity_1 = require("./password.entity");
+const refresh_token_entity_1 = require("./refresh-token.entity");
+const session_entity_1 = require("./session.entity");
+const settings_entity_1 = require("./settings.entity");
+const sign_in_challenge_entity_1 = require("./sign-in-challenge.entity");
+const signing_key_entity_1 = require("./signing-key.entity");
+const social_account_entity_1 = require("./social-account.entity");
+const two_factor_secret_entity_1 = require("./two-factor-secret.entity");
+const user_entity_1 = require("./user.entity");
+const webhook_delivery_entity_1 = require("./webhook-delivery.entity");
+const webhook_entity_1 = require("./webhook.entity");
+__exportStar(require("./api-key.entity"), exports);
+__exportStar(require("./json-object"), exports);
+__exportStar(require("./audit-log.entity"), exports);
+__exportStar(require("./backup-code.entity"), exports);
+__exportStar(require("./link-token.entity"), exports);
+__exportStar(require("./one-time-code.entity"), exports);
+__exportStar(require("./organization-invitation.entity"), exports);
+__exportStar(require("./organization-member.entity"), exports);
+__exportStar(require("./organization.entity"), exports);
+__exportStar(require("./passkey.entity"), exports);
+__exportStar(require("./password.entity"), exports);
+__exportStar(require("./refresh-token.entity"), exports);
+__exportStar(require("./session.entity"), exports);
+__exportStar(require("./settings.entity"), exports);
+__exportStar(require("./sign-in-challenge.entity"), exports);
+__exportStar(require("./signing-key.entity"), exports);
+__exportStar(require("./social-account.entity"), exports);
+__exportStar(require("./two-factor-secret.entity"), exports);
+__exportStar(require("./user.entity"), exports);
+__exportStar(require("./webhook-delivery.entity"), exports);
+__exportStar(require("./webhook.entity"), exports);
+/** Add these to your TypeORM DataSource `entities` list. */
+exports.AUTH_ENTITIES = [
+    user_entity_1.UserEntity,
+    password_entity_1.PasswordEntity,
+    social_account_entity_1.SocialAccountEntity,
+    passkey_entity_1.PasskeyEntity,
+    two_factor_secret_entity_1.TwoFactorSecretEntity,
+    backup_code_entity_1.BackupCodeEntity,
+    session_entity_1.SessionEntity,
+    refresh_token_entity_1.RefreshTokenEntity,
+    link_token_entity_1.LinkTokenEntity,
+    one_time_code_entity_1.OneTimeCodeEntity,
+    sign_in_challenge_entity_1.SignInChallengeEntity,
+    signing_key_entity_1.SigningKeyEntity,
+    settings_entity_1.SettingsEntity,
+    audit_log_entity_1.AuditLogEntity,
+    organization_entity_1.OrganizationEntity,
+    organization_member_entity_1.OrganizationMemberEntity,
+    organization_invitation_entity_1.OrganizationInvitationEntity,
+    api_key_entity_1.ApiKeyEntity,
+    webhook_entity_1.WebhookEntity,
+    webhook_delivery_entity_1.WebhookDeliveryEntity,
+];
+//# sourceMappingURL=index.js.map

package/dist/database/entities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/database/entities/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,qDAAgD;AAChD,yDAAoD;AACpD,6DAAwD;AACxD,2DAAsD;AACtD,iEAA2D;AAC3D,qFAAgF;AAChF,6EAAwE;AACxE,+DAA2D;AAC3D,qDAAiD;AACjD,uDAAmD;AACnD,iEAA4D;AAC5D,qDAAiD;AACjD,uDAAmD;AACnD,yEAAmE;AACnE,6DAAwD;AACxD,mEAA8D;AAC9D,yEAAmE;AACnE,+CAA2C;AAC3C,uEAAkE;AAClE,qDAAiD;AAEjD,mDAAiC;AACjC,gDAA8B;AAC9B,qDAAmC;AACnC,uDAAqC;AACrC,sDAAoC;AACpC,yDAAuC;AACvC,mEAAiD;AACjD,+DAA6C;AAC7C,wDAAsC;AACtC,mDAAiC;AACjC,oDAAkC;AAClC,yDAAuC;AACvC,mDAAiC;AACjC,oDAAkC;AAClC,6DAA2C;AAC3C,uDAAqC;AACrC,0DAAwC;AACxC,6DAA2C;AAC3C,gDAA8B;AAC9B,4DAA0C;AAC1C,mDAAiC;AAEjC,4DAA4D;AAC/C,QAAA,aAAa,GAAG;IAC3B,wBAAU;IACV,gCAAc;IACd,2CAAmB;IACnB,8BAAa;IACb,gDAAqB;IACrB,qCAAgB;IAChB,8BAAa;IACb,yCAAkB;IAClB,mCAAe;IACf,wCAAiB;IACjB,gDAAqB;IACrB,qCAAgB;IAChB,gCAAc;IACd,iCAAc;IACd,wCAAkB;IAClB,qDAAwB;IACxB,6DAA4B;IAC5B,6BAAY;IACZ,8BAAa;IACb,+CAAqB;CACtB,CAAC"}

package/dist/database/entities/json-object.d.ts

@@ -0,0 +1,12 @@
+/**
+ * The shape of a value stored in a jsonb column.
+ *
+ * Spelled out precisely (instead of Record<string, unknown>) for two reasons:
+ * - only JSON can be stored, so the compiler should reject Dates, functions or `undefined`;
+ * - TypeORM's insert()/update() typing (QueryDeepPartialEntity) accepts exactly these types,
+ *   but rejects `unknown` and `any` values.
+ */
+export type JsonValue = string | number | boolean | null | JsonValue[] | JsonObject;
+export interface JsonObject {
+    [key: string]: JsonValue;
+}

package/dist/database/entities/json-object.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=json-object.js.map

package/dist/database/entities/json-object.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-object.js","sourceRoot":"","sources":["../../../src/database/entities/json-object.ts"],"names":[],"mappings":""}

package/dist/database/entities/link-token.entity.d.ts

@@ -0,0 +1,15 @@
+import type { LinkTokenPurpose } from '../../constants.js';
+export type { LinkTokenPurpose };
+/** Tokens inside emailed links (verify email, reset password, magic sign-in). Single use. */
+export declare class LinkTokenEntity {
+    id: string;
+    purpose: LinkTokenPurpose;
+    /** Set when the link is for an existing user. */
+    userId: string | null;
+    /** The email the link was sent to (a magic link can create a new account for it). */
+    email: string;
+    tokenHash: string;
+    expiresAt: Date;
+    usedAt: Date | null;
+    createdAt: Date;
+}

package/dist/database/entities/link-token.entity.js

@@ -0,0 +1,64 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LinkTokenEntity = void 0;
+const typeorm_1 = require("typeorm");
+/** Tokens inside emailed links (verify email, reset password, magic sign-in). Single use. */
+let LinkTokenEntity = class LinkTokenEntity {
+    id;
+    purpose;
+    /** Set when the link is for an existing user. */
+    userId;
+    /** The email the link was sent to (a magic link can create a new account for it). */
+    email;
+    tokenHash;
+    expiresAt;
+    usedAt;
+    createdAt;
+};
+exports.LinkTokenEntity = LinkTokenEntity;
+__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    __metadata("design:type", String)
+], LinkTokenEntity.prototype, "id", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text' }),
+    __metadata("design:type", String)
+], LinkTokenEntity.prototype, "purpose", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'user_id', type: 'uuid', nullable: true }),
+    __metadata("design:type", Object)
+], LinkTokenEntity.prototype, "userId", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text' }),
+    __metadata("design:type", String)
+], LinkTokenEntity.prototype, "email", void 0);
+__decorate([
+    (0, typeorm_1.Index)({ unique: true }),
+    (0, typeorm_1.Column)({ name: 'token_hash', type: 'text' }),
+    __metadata("design:type", String)
+], LinkTokenEntity.prototype, "tokenHash", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'expires_at', type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], LinkTokenEntity.prototype, "expiresAt", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'used_at', type: 'timestamptz', nullable: true }),
+    __metadata("design:type", Object)
+], LinkTokenEntity.prototype, "usedAt", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)({ name: 'created_at', type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], LinkTokenEntity.prototype, "createdAt", void 0);
+exports.LinkTokenEntity = LinkTokenEntity = __decorate([
+    (0, typeorm_1.Entity)('auth_link_tokens')
+], LinkTokenEntity);
+//# sourceMappingURL=link-token.entity.js.map

package/dist/database/entities/link-token.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-token.entity.js","sourceRoot":"","sources":["../../../src/database/entities/link-token.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAA0F;AAK1F,6FAA6F;AAEtF,IAAM,eAAe,GAArB,MAAM,eAAe;IAE1B,EAAE,CAAS;IAGX,OAAO,CAAmB;IAE1B,iDAAiD;IAEjD,MAAM,CAAgB;IAEtB,qFAAqF;IAErF,KAAK,CAAS;IAId,SAAS,CAAS;IAGlB,SAAS,CAAO;IAGhB,MAAM,CAAc;IAGpB,SAAS,CAAO;CACjB,CAAA;AA3BY,0CAAe;AAE1B;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;2CACpB;AAGX;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;gDACC;AAI1B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+CACpC;AAItB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;8CACX;AAId;IAFC,IAAA,eAAK,EAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACvB,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;kDAC3B;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACzC,IAAI;kDAAC;AAGhB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+CAC7C;AAGpB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACnD,IAAI;kDAAC;0BA1BL,eAAe;IAD3B,IAAA,gBAAM,EAAC,kBAAkB,CAAC;GACd,eAAe,CA2B3B"}

package/dist/database/entities/one-time-code.entity.d.ts

@@ -0,0 +1,16 @@
+import type { CodeChannel } from '../../constants.js';
+export type { CodeChannel };
+/** Short numeric codes sent by email or SMS for passwordless sign-in. */
+export declare class OneTimeCodeEntity {
+    id: string;
+    channel: CodeChannel;
+    /** Email address or E.164 phone number the code was sent to. */
+    destination: string;
+    codeHash: string;
+    salt: string;
+    /** Wrong guesses so far; the code stops working after the maximum. */
+    failedAttempts: number;
+    expiresAt: Date;
+    usedAt: Date | null;
+    createdAt: Date;
+}

package/dist/database/entities/one-time-code.entity.js

@@ -0,0 +1,69 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OneTimeCodeEntity = void 0;
+const typeorm_1 = require("typeorm");
+/** Short numeric codes sent by email or SMS for passwordless sign-in. */
+let OneTimeCodeEntity = class OneTimeCodeEntity {
+    id;
+    channel;
+    /** Email address or E.164 phone number the code was sent to. */
+    destination;
+    codeHash;
+    salt;
+    /** Wrong guesses so far; the code stops working after the maximum. */
+    failedAttempts;
+    expiresAt;
+    usedAt;
+    createdAt;
+};
+exports.OneTimeCodeEntity = OneTimeCodeEntity;
+__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    __metadata("design:type", String)
+], OneTimeCodeEntity.prototype, "id", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text' }),
+    __metadata("design:type", String)
+], OneTimeCodeEntity.prototype, "channel", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text' }),
+    __metadata("design:type", String)
+], OneTimeCodeEntity.prototype, "destination", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'code_hash', type: 'text' }),
+    __metadata("design:type", String)
+], OneTimeCodeEntity.prototype, "codeHash", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text' }),
+    __metadata("design:type", String)
+], OneTimeCodeEntity.prototype, "salt", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'failed_attempts', type: 'int', default: 0 }),
+    __metadata("design:type", Number)
+], OneTimeCodeEntity.prototype, "failedAttempts", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'expires_at', type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], OneTimeCodeEntity.prototype, "expiresAt", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'used_at', type: 'timestamptz', nullable: true }),
+    __metadata("design:type", Object)
+], OneTimeCodeEntity.prototype, "usedAt", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)({ name: 'created_at', type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], OneTimeCodeEntity.prototype, "createdAt", void 0);
+exports.OneTimeCodeEntity = OneTimeCodeEntity = __decorate([
+    (0, typeorm_1.Entity)('auth_one_time_codes'),
+    (0, typeorm_1.Index)(['channel', 'destination'])
+], OneTimeCodeEntity);
+//# sourceMappingURL=one-time-code.entity.js.map

package/dist/database/entities/one-time-code.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"one-time-code.entity.js","sourceRoot":"","sources":["../../../src/database/entities/one-time-code.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAA0F;AAK1F,yEAAyE;AAGlE,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAE5B,EAAE,CAAS;IAGX,OAAO,CAAc;IAErB,gEAAgE;IAEhE,WAAW,CAAS;IAGpB,QAAQ,CAAS;IAGjB,IAAI,CAAS;IAEb,sEAAsE;IAEtE,cAAc,CAAS;IAGvB,SAAS,CAAO;IAGhB,MAAM,CAAc;IAGpB,SAAS,CAAO;CACjB,CAAA;AA7BY,8CAAiB;AAE5B;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;6CACpB;AAGX;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;kDACJ;AAIrB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;sDACL;AAGpB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;mDAC3B;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;+CACZ;AAIb;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;;yDACtC;AAGvB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACzC,IAAI;oDAAC;AAGhB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;iDAC7C;AAGpB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACnD,IAAI;oDAAC;4BA5BL,iBAAiB;IAF7B,IAAA,gBAAM,EAAC,qBAAqB,CAAC;IAC7B,IAAA,eAAK,EAAC,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;GACrB,iBAAiB,CA6B7B"}

package/dist/database/entities/organization-invitation.entity.d.ts

@@ -0,0 +1,14 @@
+import type { OrganizationRole } from '../../constants.js';
+/** An emailed invitation to join an organization. Single use. */
+export declare class OrganizationInvitationEntity {
+    id: string;
+    organizationId: string;
+    email: string;
+    role: OrganizationRole;
+    tokenHash: string;
+    invitedByUserId: string;
+    expiresAt: Date;
+    acceptedAt: Date | null;
+    revokedAt: Date | null;
+    createdAt: Date;
+}

package/dist/database/entities/organization-invitation.entity.js

@@ -0,0 +1,73 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrganizationInvitationEntity = void 0;
+const typeorm_1 = require("typeorm");
+/** An emailed invitation to join an organization. Single use. */
+let OrganizationInvitationEntity = class OrganizationInvitationEntity {
+    id;
+    organizationId;
+    email;
+    role;
+    tokenHash;
+    invitedByUserId;
+    expiresAt;
+    acceptedAt;
+    revokedAt;
+    createdAt;
+};
+exports.OrganizationInvitationEntity = OrganizationInvitationEntity;
+__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    __metadata("design:type", String)
+], OrganizationInvitationEntity.prototype, "id", void 0);
+__decorate([
+    (0, typeorm_1.Index)(),
+    (0, typeorm_1.Column)({ name: 'organization_id', type: 'uuid' }),
+    __metadata("design:type", String)
+], OrganizationInvitationEntity.prototype, "organizationId", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text' }),
+    __metadata("design:type", String)
+], OrganizationInvitationEntity.prototype, "email", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text' }),
+    __metadata("design:type", String)
+], OrganizationInvitationEntity.prototype, "role", void 0);
+__decorate([
+    (0, typeorm_1.Index)({ unique: true }),
+    (0, typeorm_1.Column)({ name: 'token_hash', type: 'text' }),
+    __metadata("design:type", String)
+], OrganizationInvitationEntity.prototype, "tokenHash", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'invited_by_user_id', type: 'uuid' }),
+    __metadata("design:type", String)
+], OrganizationInvitationEntity.prototype, "invitedByUserId", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'expires_at', type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], OrganizationInvitationEntity.prototype, "expiresAt", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'accepted_at', type: 'timestamptz', nullable: true }),
+    __metadata("design:type", Object)
+], OrganizationInvitationEntity.prototype, "acceptedAt", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'revoked_at', type: 'timestamptz', nullable: true }),
+    __metadata("design:type", Object)
+], OrganizationInvitationEntity.prototype, "revokedAt", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)({ name: 'created_at', type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], OrganizationInvitationEntity.prototype, "createdAt", void 0);
+exports.OrganizationInvitationEntity = OrganizationInvitationEntity = __decorate([
+    (0, typeorm_1.Entity)('auth_organization_invitations')
+], OrganizationInvitationEntity);
+//# sourceMappingURL=organization-invitation.entity.js.map

package/dist/database/entities/organization-invitation.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization-invitation.entity.js","sourceRoot":"","sources":["../../../src/database/entities/organization-invitation.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAA0F;AAI1F,iEAAiE;AAE1D,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IAEvC,EAAE,CAAS;IAIX,cAAc,CAAS;IAGvB,KAAK,CAAS;IAGd,IAAI,CAAmB;IAIvB,SAAS,CAAS;IAGlB,eAAe,CAAS;IAGxB,SAAS,CAAO;IAGhB,UAAU,CAAc;IAGxB,SAAS,CAAc;IAGvB,SAAS,CAAO;CACjB,CAAA;AAhCY,oEAA4B;AAEvC;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;wDACpB;AAIX;IAFC,IAAA,eAAK,GAAE;IACP,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;oEAC3B;AAGvB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;2DACX;AAGd;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;0DACF;AAIvB;IAFC,IAAA,eAAK,EAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACvB,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;+DAC3B;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;qEAC7B;AAGxB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACzC,IAAI;+DAAC;AAGhB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;gEAC7C;AAGxB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+DAC7C;AAGvB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACnD,IAAI;+DAAC;uCA/BL,4BAA4B;IADxC,IAAA,gBAAM,EAAC,+BAA+B,CAAC;GAC3B,4BAA4B,CAgCxC"}

package/dist/database/entities/organization-member.entity.d.ts

@@ -0,0 +1,9 @@
+import type { OrganizationRole } from '../../constants.js';
+/** A user's membership in an organization. */
+export declare class OrganizationMemberEntity {
+    id: string;
+    organizationId: string;
+    userId: string;
+    role: OrganizationRole;
+    createdAt: Date;
+}

package/dist/database/entities/organization-member.entity.js

@@ -0,0 +1,48 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrganizationMemberEntity = void 0;
+const typeorm_1 = require("typeorm");
+/** A user's membership in an organization. */
+let OrganizationMemberEntity = class OrganizationMemberEntity {
+    id;
+    organizationId;
+    userId;
+    role;
+    createdAt;
+};
+exports.OrganizationMemberEntity = OrganizationMemberEntity;
+__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    __metadata("design:type", String)
+], OrganizationMemberEntity.prototype, "id", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'organization_id', type: 'uuid' }),
+    __metadata("design:type", String)
+], OrganizationMemberEntity.prototype, "organizationId", void 0);
+__decorate([
+    (0, typeorm_1.Index)(),
+    (0, typeorm_1.Column)({ name: 'user_id', type: 'uuid' }),
+    __metadata("design:type", String)
+], OrganizationMemberEntity.prototype, "userId", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text' }),
+    __metadata("design:type", String)
+], OrganizationMemberEntity.prototype, "role", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)({ name: 'created_at', type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], OrganizationMemberEntity.prototype, "createdAt", void 0);
+exports.OrganizationMemberEntity = OrganizationMemberEntity = __decorate([
+    (0, typeorm_1.Entity)('auth_organization_members'),
+    (0, typeorm_1.Index)(['organizationId', 'userId'], { unique: true })
+], OrganizationMemberEntity);
+//# sourceMappingURL=organization-member.entity.js.map

package/dist/database/entities/organization-member.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization-member.entity.js","sourceRoot":"","sources":["../../../src/database/entities/organization-member.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAA0F;AAI1F,8CAA8C;AAGvC,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAEnC,EAAE,CAAS;IAGX,cAAc,CAAS;IAIvB,MAAM,CAAS;IAGf,IAAI,CAAmB;IAGvB,SAAS,CAAO;CACjB,CAAA;AAhBY,4DAAwB;AAEnC;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;oDACpB;AAGX;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;gEAC3B;AAIvB;IAFC,IAAA,eAAK,GAAE;IACP,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;wDAC3B;AAGf;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;sDACF;AAGvB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACnD,IAAI;2DAAC;mCAfL,wBAAwB;IAFpC,IAAA,gBAAM,EAAC,2BAA2B,CAAC;IACnC,IAAA,eAAK,EAAC,CAAC,gBAAgB,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;GACzC,wBAAwB,CAgBpC"}

package/dist/database/entities/organization.entity.d.ts

@@ -0,0 +1,12 @@
+import type { JsonObject } from './json-object';
+/** A company or team. Users join organizations with a role (owner, admin, member). */
+export declare class OrganizationEntity {
+    id: string;
+    name: string;
+    /** Unique handle, e.g. "acme-india". */
+    slug: string;
+    metadata: JsonObject;
+    createdByUserId: string | null;
+    createdAt: Date;
+    updatedAt: Date;
+}