@techelusive/nest-auth 0.0.0-stage → 0.2.0

package/dist/database/entities/social-account.entity.d.ts

@@ -0,0 +1,13 @@
+import type { SocialProvider } from '../../constants.js';
+export type { SocialProvider };
+/** A Google, Apple or Facebook account linked to a user. One user can link several. */
+export declare class SocialAccountEntity {
+    id: string;
+    userId: string;
+    provider: SocialProvider;
+    /** The provider's id for this person (Google "sub", Apple "sub", Facebook user id). Never changes. */
+    providerUserId: string;
+    /** Email the provider reported when linked (for display only). */
+    email: string | null;
+    createdAt: Date;
+}

package/dist/database/entities/social-account.entity.js

@@ -0,0 +1,54 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SocialAccountEntity = void 0;
+const typeorm_1 = require("typeorm");
+/** A Google, Apple or Facebook account linked to a user. One user can link several. */
+let SocialAccountEntity = class SocialAccountEntity {
+    id;
+    userId;
+    provider;
+    /** The provider's id for this person (Google "sub", Apple "sub", Facebook user id). Never changes. */
+    providerUserId;
+    /** Email the provider reported when linked (for display only). */
+    email;
+    createdAt;
+};
+exports.SocialAccountEntity = SocialAccountEntity;
+__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    __metadata("design:type", String)
+], SocialAccountEntity.prototype, "id", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'user_id', type: 'uuid' }),
+    __metadata("design:type", String)
+], SocialAccountEntity.prototype, "userId", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text' }),
+    __metadata("design:type", String)
+], SocialAccountEntity.prototype, "provider", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'provider_user_id', type: 'text' }),
+    __metadata("design:type", String)
+], SocialAccountEntity.prototype, "providerUserId", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text', nullable: true }),
+    __metadata("design:type", Object)
+], SocialAccountEntity.prototype, "email", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)({ name: 'created_at', type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], SocialAccountEntity.prototype, "createdAt", void 0);
+exports.SocialAccountEntity = SocialAccountEntity = __decorate([
+    (0, typeorm_1.Entity)('auth_social_accounts'),
+    (0, typeorm_1.Index)(['provider', 'providerUserId'], { unique: true })
+], SocialAccountEntity);
+//# sourceMappingURL=social-account.entity.js.map

package/dist/database/entities/social-account.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"social-account.entity.js","sourceRoot":"","sources":["../../../src/database/entities/social-account.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAA0F;AAI1F,uFAAuF;AAGhF,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAE9B,EAAE,CAAS;IAGX,MAAM,CAAS;IAGf,QAAQ,CAAiB;IAEzB,sGAAsG;IAEtG,cAAc,CAAS;IAEvB,kEAAkE;IAElE,KAAK,CAAgB;IAGrB,SAAS,CAAO;CACjB,CAAA;AApBY,kDAAmB;AAE9B;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;+CACpB;AAGX;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;mDAC3B;AAGf;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;qDACA;AAIzB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;2DAC5B;AAIvB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kDACpB;AAGrB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACnD,IAAI;sDAAC;8BAnBL,mBAAmB;IAF/B,IAAA,gBAAM,EAAC,sBAAsB,CAAC;IAC9B,IAAA,eAAK,EAAC,CAAC,UAAU,EAAE,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;GAC3C,mBAAmB,CAoB/B"}

package/dist/database/entities/two-factor-secret.entity.d.ts

@@ -0,0 +1,10 @@
+/** The secret shared with a user's authenticator app. Encrypted, because we must read it to check codes. */
+export declare class TwoFactorSecretEntity {
+    userId: string;
+    encryptedSecret: string;
+    /** Null while the user is still setting up (has not typed a first code). */
+    confirmedAt: Date | null;
+    /** The last 30-second step a code was accepted for; older codes are refused (no replay). */
+    lastUsedTimeStep: number | null;
+    createdAt: Date;
+}

package/dist/database/entities/two-factor-secret.entity.js

@@ -0,0 +1,48 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TwoFactorSecretEntity = void 0;
+const typeorm_1 = require("typeorm");
+/** The secret shared with a user's authenticator app. Encrypted, because we must read it to check codes. */
+let TwoFactorSecretEntity = class TwoFactorSecretEntity {
+    userId;
+    encryptedSecret;
+    /** Null while the user is still setting up (has not typed a first code). */
+    confirmedAt;
+    /** The last 30-second step a code was accepted for; older codes are refused (no replay). */
+    lastUsedTimeStep;
+    createdAt;
+};
+exports.TwoFactorSecretEntity = TwoFactorSecretEntity;
+__decorate([
+    (0, typeorm_1.PrimaryColumn)({ name: 'user_id', type: 'uuid' }),
+    __metadata("design:type", String)
+], TwoFactorSecretEntity.prototype, "userId", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'encrypted_secret', type: 'text' }),
+    __metadata("design:type", String)
+], TwoFactorSecretEntity.prototype, "encryptedSecret", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'confirmed_at', type: 'timestamptz', nullable: true }),
+    __metadata("design:type", Object)
+], TwoFactorSecretEntity.prototype, "confirmedAt", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'last_used_time_step', type: 'bigint', nullable: true, transformer: { to: (v) => v, from: (v) => (v === null ? null : Number(v)) } }),
+    __metadata("design:type", Object)
+], TwoFactorSecretEntity.prototype, "lastUsedTimeStep", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)({ name: 'created_at', type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], TwoFactorSecretEntity.prototype, "createdAt", void 0);
+exports.TwoFactorSecretEntity = TwoFactorSecretEntity = __decorate([
+    (0, typeorm_1.Entity)('auth_two_factor_secrets')
+], TwoFactorSecretEntity);
+//# sourceMappingURL=two-factor-secret.entity.js.map

package/dist/database/entities/two-factor-secret.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"two-factor-secret.entity.js","sourceRoot":"","sources":["../../../src/database/entities/two-factor-secret.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAA0E;AAE1E,4GAA4G;AAErG,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAEhC,MAAM,CAAS;IAGf,eAAe,CAAS;IAExB,4EAA4E;IAE5E,WAAW,CAAc;IAEzB,4FAA4F;IAE5F,gBAAgB,CAAgB;IAGhC,SAAS,CAAO;CACjB,CAAA;AAjBY,sDAAqB;AAEhC;IADC,IAAA,uBAAa,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;qDAClC;AAGf;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;8DAC3B;AAIxB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;0DAC7C;AAIzB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAgB,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;;+DACnJ;AAGhC;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACnD,IAAI;wDAAC;gCAhBL,qBAAqB;IADjC,IAAA,gBAAM,EAAC,yBAAyB,CAAC;GACrB,qBAAqB,CAiBjC"}

package/dist/database/entities/user.entity.d.ts

@@ -0,0 +1,34 @@
+import { type AccountStatus } from '../../constants.js';
+import type { JsonObject } from './json-object';
+/**
+ * A person who can sign in. Every way of signing in (password, phone, Google, passkey...) points here.
+ * Your app keeps its own profile data in its own tables, linked by `UserEntity.id` (the token's "sub").
+ */
+export declare class UserEntity {
+    id: string;
+    /** Stored in lower case. Null for users who only signed up with a phone number, or after deletion. */
+    email: string | null;
+    isEmailVerified: boolean;
+    /** E.164 format, e.g. +919876543210. */
+    phoneNumber: string | null;
+    isPhoneVerified: boolean;
+    firstName: string | null;
+    lastName: string | null;
+    /** App-wide roles, copied into every access token, e.g. ["user"]. */
+    roles: string[];
+    /** PENDING_VERIFICATION, ACTIVE, SUSPENDED, DEACTIVATED or DELETED. Only the backend changes it. */
+    status: AccountStatus;
+    /** Why an admin suspended the account (internal; never shown to the user). */
+    suspensionReason: string | null;
+    statusChangedAt: Date | null;
+    termsAcceptedAt: Date | null;
+    privacyPolicyAcceptedAt: Date | null;
+    /** Set by your app (AuthService.markOnboardingComplete) once the profile setup is done. */
+    onboardingCompletedAt: Date | null;
+    isTwoFactorEnabled: boolean;
+    /** Free-form data your app wants to keep with the user (shown to admins, never put secrets here). */
+    metadata: JsonObject;
+    lastSignedInAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+}

package/dist/database/entities/user.entity.js

@@ -0,0 +1,129 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserEntity = void 0;
+const typeorm_1 = require("typeorm");
+const constants_1 = require("../../constants.js");
+/**
+ * A person who can sign in. Every way of signing in (password, phone, Google, passkey...) points here.
+ * Your app keeps its own profile data in its own tables, linked by `UserEntity.id` (the token's "sub").
+ */
+let UserEntity = class UserEntity {
+    id;
+    /** Stored in lower case. Null for users who only signed up with a phone number, or after deletion. */
+    email;
+    isEmailVerified;
+    /** E.164 format, e.g. +919876543210. */
+    phoneNumber;
+    isPhoneVerified;
+    firstName;
+    lastName;
+    /** App-wide roles, copied into every access token, e.g. ["user"]. */
+    roles;
+    /** PENDING_VERIFICATION, ACTIVE, SUSPENDED, DEACTIVATED or DELETED. Only the backend changes it. */
+    status;
+    /** Why an admin suspended the account (internal; never shown to the user). */
+    suspensionReason;
+    statusChangedAt;
+    termsAcceptedAt;
+    privacyPolicyAcceptedAt;
+    /** Set by your app (AuthService.markOnboardingComplete) once the profile setup is done. */
+    onboardingCompletedAt;
+    isTwoFactorEnabled;
+    /** Free-form data your app wants to keep with the user (shown to admins, never put secrets here). */
+    metadata;
+    lastSignedInAt;
+    createdAt;
+    updatedAt;
+};
+exports.UserEntity = UserEntity;
+__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    __metadata("design:type", String)
+], UserEntity.prototype, "id", void 0);
+__decorate([
+    (0, typeorm_1.Index)({ unique: true, where: 'email IS NOT NULL' }),
+    (0, typeorm_1.Column)({ type: 'text', nullable: true }),
+    __metadata("design:type", Object)
+], UserEntity.prototype, "email", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'email_verified', type: 'boolean', default: false }),
+    __metadata("design:type", Boolean)
+], UserEntity.prototype, "isEmailVerified", void 0);
+__decorate([
+    (0, typeorm_1.Index)({ unique: true, where: 'phone_number IS NOT NULL' }),
+    (0, typeorm_1.Column)({ name: 'phone_number', type: 'text', nullable: true }),
+    __metadata("design:type", Object)
+], UserEntity.prototype, "phoneNumber", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'phone_verified', type: 'boolean', default: false }),
+    __metadata("design:type", Boolean)
+], UserEntity.prototype, "isPhoneVerified", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'first_name', type: 'text', nullable: true }),
+    __metadata("design:type", Object)
+], UserEntity.prototype, "firstName", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'last_name', type: 'text', nullable: true }),
+    __metadata("design:type", Object)
+], UserEntity.prototype, "lastName", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text', array: true, default: '{}' }),
+    __metadata("design:type", Array)
+], UserEntity.prototype, "roles", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text', default: constants_1.ACCOUNT_STATUS.pendingVerification }),
+    __metadata("design:type", String)
+], UserEntity.prototype, "status", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'suspension_reason', type: 'text', nullable: true }),
+    __metadata("design:type", Object)
+], UserEntity.prototype, "suspensionReason", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'status_changed_at', type: 'timestamptz', nullable: true }),
+    __metadata("design:type", Object)
+], UserEntity.prototype, "statusChangedAt", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'terms_accepted_at', type: 'timestamptz', nullable: true }),
+    __metadata("design:type", Object)
+], UserEntity.prototype, "termsAcceptedAt", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'privacy_policy_accepted_at', type: 'timestamptz', nullable: true }),
+    __metadata("design:type", Object)
+], UserEntity.prototype, "privacyPolicyAcceptedAt", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'onboarding_completed_at', type: 'timestamptz', nullable: true }),
+    __metadata("design:type", Object)
+], UserEntity.prototype, "onboardingCompletedAt", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'two_factor_enabled', type: 'boolean', default: false }),
+    __metadata("design:type", Boolean)
+], UserEntity.prototype, "isTwoFactorEnabled", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'jsonb', default: {} }),
+    __metadata("design:type", Object)
+], UserEntity.prototype, "metadata", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'last_signed_in_at', type: 'timestamptz', nullable: true }),
+    __metadata("design:type", Object)
+], UserEntity.prototype, "lastSignedInAt", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)({ name: 'created_at', type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], UserEntity.prototype, "createdAt", void 0);
+__decorate([
+    (0, typeorm_1.UpdateDateColumn)({ name: 'updated_at', type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], UserEntity.prototype, "updatedAt", void 0);
+exports.UserEntity = UserEntity = __decorate([
+    (0, typeorm_1.Entity)('auth_users')
+], UserEntity);
+//# sourceMappingURL=user.entity.js.map

package/dist/database/entities/user.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.entity.js","sourceRoot":"","sources":["../../../src/database/entities/user.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAA4G;AAC5G,2CAAiE;AAGjE;;;GAGG;AAEI,IAAM,UAAU,GAAhB,MAAM,UAAU;IAErB,EAAE,CAAS;IAEX,sGAAsG;IAGtG,KAAK,CAAgB;IAGrB,eAAe,CAAU;IAEzB,wCAAwC;IAGxC,WAAW,CAAgB;IAG3B,eAAe,CAAU;IAGzB,SAAS,CAAgB;IAGzB,QAAQ,CAAgB;IAExB,qEAAqE;IAErE,KAAK,CAAW;IAEhB,oGAAoG;IAEpG,MAAM,CAAgB;IAEtB,8EAA8E;IAE9E,gBAAgB,CAAgB;IAGhC,eAAe,CAAc;IAG7B,eAAe,CAAc;IAG7B,uBAAuB,CAAc;IAErC,2FAA2F;IAE3F,qBAAqB,CAAc;IAGnC,kBAAkB,CAAU;IAE5B,qGAAqG;IAErG,QAAQ,CAAa;IAGrB,cAAc,CAAc;IAG5B,SAAS,CAAO;IAGhB,SAAS,CAAO;CACjB,CAAA;AAlEY,gCAAU;AAErB;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;sCACpB;AAKX;IAFC,IAAA,eAAK,EAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IACnD,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yCACpB;AAGrB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;;mDAC3C;AAKzB;IAFC,IAAA,eAAK,EAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IAC1D,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+CACpC;AAG3B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;;mDAC3C;AAGzB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;6CACpC;AAGzB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;4CACpC;AAIxB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;;yCACrC;AAIhB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,0BAAc,CAAC,mBAAmB,EAAE,CAAC;;0CAChD;AAItB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oDACpC;AAGhC;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;mDAC9C;AAG7B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;mDAC9C;AAG7B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;2DAC/C;AAIrC;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yDAC9C;AAGnC;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;;sDAC5C;AAI5B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;;4CAClB;AAGrB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kDAC/C;AAG5B;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACnD,IAAI;6CAAC;AAGhB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACnD,IAAI;6CAAC;qBAjEL,UAAU;IADtB,IAAA,gBAAM,EAAC,YAAY,CAAC;GACR,UAAU,CAkEtB"}

package/dist/database/entities/webhook-delivery.entity.d.ts

@@ -0,0 +1,17 @@
+import { type WebhookDeliveryStatus } from '../../constants.js';
+import type { JsonObject } from './json-object';
+export type { WebhookDeliveryStatus };
+/** One event to send to one webhook, with its retry state. */
+export declare class WebhookDeliveryEntity {
+    id: string;
+    webhookId: string;
+    eventName: string;
+    payload: JsonObject;
+    status: WebhookDeliveryStatus;
+    attemptCount: number;
+    nextAttemptAt: Date;
+    lastResponseStatus: number | null;
+    lastError: string | null;
+    createdAt: Date;
+    deliveredAt: Date | null;
+}

package/dist/database/entities/webhook-delivery.entity.js

@@ -0,0 +1,79 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebhookDeliveryEntity = void 0;
+const typeorm_1 = require("typeorm");
+const constants_1 = require("../../constants.js");
+/** One event to send to one webhook, with its retry state. */
+let WebhookDeliveryEntity = class WebhookDeliveryEntity {
+    id;
+    webhookId;
+    eventName;
+    payload;
+    status;
+    attemptCount;
+    nextAttemptAt;
+    lastResponseStatus;
+    lastError;
+    createdAt;
+    deliveredAt;
+};
+exports.WebhookDeliveryEntity = WebhookDeliveryEntity;
+__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    __metadata("design:type", String)
+], WebhookDeliveryEntity.prototype, "id", void 0);
+__decorate([
+    (0, typeorm_1.Index)(),
+    (0, typeorm_1.Column)({ name: 'webhook_id', type: 'uuid' }),
+    __metadata("design:type", String)
+], WebhookDeliveryEntity.prototype, "webhookId", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'event_name', type: 'text' }),
+    __metadata("design:type", String)
+], WebhookDeliveryEntity.prototype, "eventName", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'jsonb' }),
+    __metadata("design:type", Object)
+], WebhookDeliveryEntity.prototype, "payload", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text', default: constants_1.WEBHOOK_DELIVERY_STATUS.pending }),
+    __metadata("design:type", String)
+], WebhookDeliveryEntity.prototype, "status", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'attempt_count', type: 'int', default: 0 }),
+    __metadata("design:type", Number)
+], WebhookDeliveryEntity.prototype, "attemptCount", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'next_attempt_at', type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], WebhookDeliveryEntity.prototype, "nextAttemptAt", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'last_response_status', type: 'int', nullable: true }),
+    __metadata("design:type", Object)
+], WebhookDeliveryEntity.prototype, "lastResponseStatus", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'last_error', type: 'text', nullable: true }),
+    __metadata("design:type", Object)
+], WebhookDeliveryEntity.prototype, "lastError", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)({ name: 'created_at', type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], WebhookDeliveryEntity.prototype, "createdAt", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'delivered_at', type: 'timestamptz', nullable: true }),
+    __metadata("design:type", Object)
+], WebhookDeliveryEntity.prototype, "deliveredAt", void 0);
+exports.WebhookDeliveryEntity = WebhookDeliveryEntity = __decorate([
+    (0, typeorm_1.Entity)('auth_webhook_deliveries'),
+    (0, typeorm_1.Index)(['status', 'nextAttemptAt'])
+], WebhookDeliveryEntity);
+//# sourceMappingURL=webhook-delivery.entity.js.map

package/dist/database/entities/webhook-delivery.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-delivery.entity.js","sourceRoot":"","sources":["../../../src/database/entities/webhook-delivery.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAA0F;AAE1F,2CAAkF;AAIlF,8DAA8D;AAGvD,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAEhC,EAAE,CAAS;IAIX,SAAS,CAAS;IAGlB,SAAS,CAAS;IAGlB,OAAO,CAAa;IAGpB,MAAM,CAAwB;IAG9B,YAAY,CAAS;IAGrB,aAAa,CAAO;IAGpB,kBAAkB,CAAgB;IAGlC,SAAS,CAAgB;IAGzB,SAAS,CAAO;IAGhB,WAAW,CAAc;CAC1B,CAAA;AAlCY,sDAAqB;AAEhC;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;iDACpB;AAIX;IAFC,IAAA,eAAK,GAAE;IACP,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;wDAC3B;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;wDAC3B;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;;sDACN;AAGpB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,mCAAuB,CAAC,OAAO,EAAE,CAAC;;qDACrC;AAG9B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;;2DACtC;AAGrB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BAC1C,IAAI;4DAAC;AAGpB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;iEACpC;AAGlC;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;wDACpC;AAGzB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACnD,IAAI;wDAAC;AAGhB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;0DAC7C;gCAjCd,qBAAqB;IAFjC,IAAA,gBAAM,EAAC,yBAAyB,CAAC;IACjC,IAAA,eAAK,EAAC,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;GACtB,qBAAqB,CAkCjC"}

package/dist/database/entities/webhook.entity.d.ts

@@ -0,0 +1,12 @@
+/** An address that receives events (user.created, user.signed_in...). */
+export declare class WebhookEntity {
+    id: string;
+    url: string;
+    /** Events to send; empty means all events. */
+    eventNames: string[];
+    /** Secret used to sign each delivery so the receiver can trust it. Encrypted at rest. */
+    encryptedSigningSecret: string;
+    isEnabled: boolean;
+    description: string | null;
+    createdAt: Date;
+}

package/dist/database/entities/webhook.entity.js

@@ -0,0 +1,58 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebhookEntity = void 0;
+const typeorm_1 = require("typeorm");
+/** An address that receives events (user.created, user.signed_in...). */
+let WebhookEntity = class WebhookEntity {
+    id;
+    url;
+    /** Events to send; empty means all events. */
+    eventNames;
+    /** Secret used to sign each delivery so the receiver can trust it. Encrypted at rest. */
+    encryptedSigningSecret;
+    isEnabled;
+    description;
+    createdAt;
+};
+exports.WebhookEntity = WebhookEntity;
+__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    __metadata("design:type", String)
+], WebhookEntity.prototype, "id", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text' }),
+    __metadata("design:type", String)
+], WebhookEntity.prototype, "url", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'event_names', type: 'text', array: true, default: '{}' }),
+    __metadata("design:type", Array)
+], WebhookEntity.prototype, "eventNames", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'encrypted_signing_secret', type: 'text' }),
+    __metadata("design:type", String)
+], WebhookEntity.prototype, "encryptedSigningSecret", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'is_enabled', type: 'boolean', default: true }),
+    __metadata("design:type", Boolean)
+], WebhookEntity.prototype, "isEnabled", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text', nullable: true }),
+    __metadata("design:type", Object)
+], WebhookEntity.prototype, "description", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)({ name: 'created_at', type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], WebhookEntity.prototype, "createdAt", void 0);
+exports.WebhookEntity = WebhookEntity = __decorate([
+    (0, typeorm_1.Entity)('auth_webhooks')
+], WebhookEntity);
+//# sourceMappingURL=webhook.entity.js.map

package/dist/database/entities/webhook.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.entity.js","sourceRoot":"","sources":["../../../src/database/entities/webhook.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAAmF;AAEnF,yEAAyE;AAElE,IAAM,aAAa,GAAnB,MAAM,aAAa;IAExB,EAAE,CAAS;IAGX,GAAG,CAAS;IAEZ,8CAA8C;IAE9C,UAAU,CAAW;IAErB,yFAAyF;IAEzF,sBAAsB,CAAS;IAG/B,SAAS,CAAU;IAGnB,WAAW,CAAgB;IAG3B,SAAS,CAAO;CACjB,CAAA;AAvBY,sCAAa;AAExB;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;yCACpB;AAGX;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;0CACb;AAIZ;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;;iDACrD;AAIrB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;6DAC5B;AAG/B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;;gDAC5C;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kDACd;AAG3B;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACnD,IAAI;gDAAC;wBAtBL,aAAa;IADzB,IAAA,gBAAM,EAAC,eAAe,CAAC;GACX,aAAa,CAuBzB"}

package/dist/database/typeorm-row.d.ts

@@ -0,0 +1,21 @@
+import type { QueryDeepPartialEntity } from 'typeorm';
+/**
+ * Hands a row to TypeORM's insert() / update().
+ *
+ * Their parameter type (QueryDeepPartialEntity) recurses into every column, which fails for jsonb
+ * columns holding free-form JSON ("type instantiation is excessively deep"). The row is still
+ * checked here as Partial<Entity>, so a wrong column name or type is caught by the compiler.
+ *
+ * @param row - The columns to write.
+ * @returns The same object, typed for TypeORM.
+ * @example
+ * await repository.update({ id }, typeormRow<UserEntity>({ status, statusChangedAt: new Date() }));
+ */
+export declare function typeormRow<Entity>(row: Partial<Entity>): QueryDeepPartialEntity<Entity>;
+/**
+ * Same as `typeormRow`, for inserting several rows at once.
+ *
+ * @param rows - The rows to insert.
+ * @returns The same array, typed for TypeORM.
+ */
+export declare function typeormRows<Entity>(rows: Partial<Entity>[]): QueryDeepPartialEntity<Entity>[];

package/dist/database/typeorm-row.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.typeormRow = typeormRow;
+exports.typeormRows = typeormRows;
+/**
+ * Hands a row to TypeORM's insert() / update().
+ *
+ * Their parameter type (QueryDeepPartialEntity) recurses into every column, which fails for jsonb
+ * columns holding free-form JSON ("type instantiation is excessively deep"). The row is still
+ * checked here as Partial<Entity>, so a wrong column name or type is caught by the compiler.
+ *
+ * @param row - The columns to write.
+ * @returns The same object, typed for TypeORM.
+ * @example
+ * await repository.update({ id }, typeormRow<UserEntity>({ status, statusChangedAt: new Date() }));
+ */
+function typeormRow(row) {
+    return row;
+}
+/**
+ * Same as `typeormRow`, for inserting several rows at once.
+ *
+ * @param rows - The rows to insert.
+ * @returns The same array, typed for TypeORM.
+ */
+function typeormRows(rows) {
+    return rows;
+}
+//# sourceMappingURL=typeorm-row.js.map

package/dist/database/typeorm-row.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typeorm-row.js","sourceRoot":"","sources":["../../src/database/typeorm-row.ts"],"names":[],"mappings":";;AAcA,gCAEC;AAQD,kCAEC;AAxBD;;;;;;;;;;;GAWG;AACH,SAAgB,UAAU,CAAS,GAAoB;IACrD,OAAO,GAAqC,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,SAAgB,WAAW,CAAS,IAAuB;IACzD,OAAO,IAAwC,CAAC;AAClD,CAAC"}