@tinyrack/tinyauth-server 0.0.7

package/dist/repositories/user-oauth.repository.js

@@ -0,0 +1,94 @@
+import { EntityRepository, ref } from '@mikro-orm/core';
+import { UserEntity } from "../entities/user.entity.js";
+export class UserOAuthRepository extends EntityRepository {
+    /**
+     * Find OAuth account by provider name and provider user ID
+     *
+     * @param providerName - Name of the OAuth provider (e.g., "google", "github")
+     * @param providerUserId - Unique user ID from the OAuth provider
+     * @returns OAuth account entity or null if not found
+     */
+    async findByProviderUserId(providerName, providerUserId) {
+        return this.findOne({
+            provider_name: providerName,
+            provider_user_id: providerUserId,
+        });
+    }
+    /**
+     * Find OAuth account by provider name and user sub
+     *
+     * @param userSub - User sub
+     * @param providerName - Name of the OAuth provider
+     * @returns OAuth account entity or null if not found
+     */
+    async findByUserAndProvider(userSub, providerName) {
+        return this.findOne({
+            user: ref(UserEntity, userSub),
+            provider_name: providerName,
+        });
+    }
+    /**
+     * Find all OAuth accounts linked to a user
+     *
+     * @param userSub - User sub
+     * @returns Array of OAuth account entities
+     */
+    async findByUser(userSub) {
+        return this.find({ user: ref(UserEntity, userSub) });
+    }
+    /**
+     * Link an OAuth account to a user
+     *
+     * @param params - OAuth account data
+     * @returns Newly created OAuth account entity
+     */
+    async linkAccount(params) {
+        const oauthAccount = this.create({
+            user: params.userSub,
+            provider_name: params.providerName,
+            provider_user_id: params.providerUserId,
+            access_token: params.accessToken,
+            refresh_token: params.refreshToken,
+            expires_at: params.expiresAt,
+        });
+        await this.getEntityManager().persist(oauthAccount).flush();
+        return oauthAccount;
+    }
+    /**
+     * Update tokens for an existing OAuth account
+     *
+     * @param oauthAccount - OAuth account entity to update
+     * @param tokens - New token values
+     */
+    async updateTokens(oauthAccount, tokens) {
+        oauthAccount.access_token = tokens.accessToken;
+        oauthAccount.refresh_token = tokens.refreshToken;
+        oauthAccount.expires_at = tokens.expiresAt;
+        await this.getEntityManager().persist(oauthAccount).flush();
+    }
+    /**
+     * Unlink an OAuth account from a user
+     *
+     * @param userSub - User sub
+     * @param providerName - Name of the OAuth provider to unlink
+     * @returns True if account was unlinked, false if not found
+     */
+    async unlinkAccount(userSub, providerName) {
+        const oauthAccount = await this.findByUserAndProvider(userSub, providerName);
+        if (!oauthAccount) {
+            return false;
+        }
+        await this.nativeDelete({ id: oauthAccount.id });
+        return true;
+    }
+    /**
+     * Count the number of OAuth accounts linked to a user
+     *
+     * @param userSub - User sub
+     * @returns Number of linked OAuth accounts
+     */
+    async countByUser(userSub) {
+        return this.count({ user: ref(UserEntity, userSub) });
+    }
+}
+//# sourceMappingURL=user-oauth.repository.js.map

package/dist/repositories/user-oauth.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-oauth.repository.js","sourceRoot":"","sources":["../../src/repositories/user-oauth.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAGxD,MAAM,OAAO,mBAAoB,SAAQ,gBAAkC;IACzE;;;;;;OAMG;IACH,KAAK,CAAC,oBAAoB,CACxB,YAAoB,EACpB,cAAsB;QAEtB,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,aAAa,EAAE,YAAY;YAC3B,gBAAgB,EAAE,cAAc;SACjC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,qBAAqB,CACzB,OAAe,EACf,YAAoB;QAEpB,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC;YAC9B,aAAa,EAAE,YAAY;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,UAAU,CAAC,OAAe;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CAAC,MAOjB;QACC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC;YAC/B,IAAI,EAAE,MAAM,CAAC,OAAO;YACpB,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,gBAAgB,EAAE,MAAM,CAAC,cAAc;YACvC,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,UAAU,EAAE,MAAM,CAAC,SAAS;SAC7B,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC;QAC5D,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAChB,YAA8B,EAC9B,MAIC;QAED,YAAY,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC;QAC/C,YAAY,CAAC,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC;QACjD,YAAY,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC;QAE3C,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC;IAC9D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CAAC,OAAe,EAAE,YAAoB;QACvD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,qBAAqB,CACnD,OAAO,EACP,YAAY,CACb,CAAC;QACF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CAAC,OAAe;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;CACF"}

package/dist/repositories/user-passkey.repository.d.ts

@@ -0,0 +1,187 @@
+import { EntityRepository } from '@mikro-orm/core';
+import type { IUserPasskeyEntity } from '../entities/user-passkey.entity.ts';
+export declare class UserPasskeyRepository extends EntityRepository<IUserPasskeyEntity> {
+    /**
+     * Find all passkeys for a user
+     *
+     * @param userSub - User sub to lookup
+     * @returns Array of passkey entities
+     */
+    findByUserSub(userSub: string): Promise<import("@mikro-orm/core").Loaded<import("@mikro-orm/core").InferEntityFromProperties<{
+        readonly id: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<import("@mikro-orm/core").EmptyOptions, "primary"> & {
+            primary: true;
+        } & {
+            onCreate: (...args: any[]) => any;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly user: () => import("@mikro-orm/core").PropertyChain<import("../entities/user.entity.ts").UserEntity, Omit<import("@mikro-orm/core").EmptyOptions & {
+            kind: "m:1";
+        }, "ref"> & {
+            ref: true;
+        }>;
+        readonly credential_id: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly public_key: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<import("@mikro-orm/core").EmptyOptions, "hidden"> & {
+            hidden: true;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly counter: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<number, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
+            default: 0;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly device_type: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<"singleDevice" | "multiDevice", Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
+            default: "singleDevice";
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly backed_up: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<NonNullable<boolean | null | undefined>, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
+            default: false;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly transports: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<import("@simplewebauthn/server").AuthenticatorTransportFuture[] | null, Omit<Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+            nullable: true;
+        }, "default"> & {
+            default: null;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly name: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+            nullable: true;
+        }, "default"> & {
+            default: null;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly aaguid: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+            nullable: true;
+        }, "default"> & {
+            default: null;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    }, undefined, import("@mikro-orm/core").InferEntityFromProperties<{
+        readonly created_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions & {
+            onCreate: (...args: any[]) => any;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly updated_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions & {
+            onCreate: (...args: any[]) => any;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    }, undefined, never, never, false>, typeof UserPasskeyRepository, false>, never, never, never>[]>;
+    /**
+     * Find a passkey by credential ID
+     *
+     * @param credentialId - WebAuthn credential ID (base64url encoded)
+     * @returns Passkey entity or null if not found
+     */
+    findByCredentialId(credentialId: string): Promise<import("@mikro-orm/core").Loaded<import("@mikro-orm/core").InferEntityFromProperties<{
+        readonly id: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<import("@mikro-orm/core").EmptyOptions, "primary"> & {
+            primary: true;
+        } & {
+            onCreate: (...args: any[]) => any;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly user: () => import("@mikro-orm/core").PropertyChain<import("../entities/user.entity.ts").UserEntity, Omit<import("@mikro-orm/core").EmptyOptions & {
+            kind: "m:1";
+        }, "ref"> & {
+            ref: true;
+        }>;
+        readonly credential_id: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly public_key: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<import("@mikro-orm/core").EmptyOptions, "hidden"> & {
+            hidden: true;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly counter: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<number, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
+            default: 0;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly device_type: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<"singleDevice" | "multiDevice", Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
+            default: "singleDevice";
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly backed_up: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<NonNullable<boolean | null | undefined>, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
+            default: false;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly transports: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<import("@simplewebauthn/server").AuthenticatorTransportFuture[] | null, Omit<Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+            nullable: true;
+        }, "default"> & {
+            default: null;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly name: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+            nullable: true;
+        }, "default"> & {
+            default: null;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly aaguid: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+            nullable: true;
+        }, "default"> & {
+            default: null;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    }, undefined, import("@mikro-orm/core").InferEntityFromProperties<{
+        readonly created_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions & {
+            onCreate: (...args: any[]) => any;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly updated_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions & {
+            onCreate: (...args: any[]) => any;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    }, undefined, never, never, false>, typeof UserPasskeyRepository, false>, "user" | "public_key", never, never> | null>;
+    /**
+     * Find a passkey by ID and user sub
+     *
+     * @param userSub - User sub
+     * @param passkeyId - Passkey ID
+     * @returns Passkey entity or null if not found
+     */
+    findByUserSubAndId(userSub: string, passkeyId: string): Promise<import("@mikro-orm/core").Loaded<import("@mikro-orm/core").InferEntityFromProperties<{
+        readonly id: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<import("@mikro-orm/core").EmptyOptions, "primary"> & {
+            primary: true;
+        } & {
+            onCreate: (...args: any[]) => any;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly user: () => import("@mikro-orm/core").PropertyChain<import("../entities/user.entity.ts").UserEntity, Omit<import("@mikro-orm/core").EmptyOptions & {
+            kind: "m:1";
+        }, "ref"> & {
+            ref: true;
+        }>;
+        readonly credential_id: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly public_key: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<import("@mikro-orm/core").EmptyOptions, "hidden"> & {
+            hidden: true;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly counter: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<number, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
+            default: 0;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly device_type: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<"singleDevice" | "multiDevice", Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
+            default: "singleDevice";
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly backed_up: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<NonNullable<boolean | null | undefined>, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
+            default: false;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly transports: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<import("@simplewebauthn/server").AuthenticatorTransportFuture[] | null, Omit<Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+            nullable: true;
+        }, "default"> & {
+            default: null;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly name: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+            nullable: true;
+        }, "default"> & {
+            default: null;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly aaguid: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+            nullable: true;
+        }, "default"> & {
+            default: null;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    }, undefined, import("@mikro-orm/core").InferEntityFromProperties<{
+        readonly created_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions & {
+            onCreate: (...args: any[]) => any;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+        readonly updated_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions & {
+            onCreate: (...args: any[]) => any;
+        }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    }, undefined, never, never, false>, typeof UserPasskeyRepository, false>, never, never, never> | null>;
+    /**
+     * Count passkeys for a user
+     *
+     * @param userSub - User sub to count passkeys for
+     * @returns Number of passkeys
+     */
+    countByUserSub(userSub: string): Promise<number>;
+    /**
+     * Delete a passkey by user sub and passkey ID
+     *
+     * @param userSub - User sub
+     * @param passkeyId - Passkey ID
+     * @returns Number of deleted records
+     */
+    deleteByUserSubAndId(userSub: string, passkeyId: string): Promise<number>;
+    /**
+     * Check if a credential ID already exists
+     *
+     * @param credentialId - WebAuthn credential ID to check
+     * @returns True if the credential ID exists
+     */
+    existsByCredentialId(credentialId: string): Promise<boolean>;
+}
+//# sourceMappingURL=user-passkey.repository.d.ts.map

package/dist/repositories/user-passkey.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-passkey.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/user-passkey.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAE7E,qBAAa,qBAAsB,SAAQ,gBAAgB,CAAC,kBAAkB,CAAC;IAC7E;;;;;OAKG;IACG,aAAa,CAAC,OAAO,EAAE,MAAM;;;;uBA+Dywe,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;IAxD/ye;;;;;OAKG;IACG,kBAAkB,CAAC,YAAY,EAAE,MAAM;;;;uBAkD+ve,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;IA3C/ye;;;;;;OAMG;IACG,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;;;;uBAoCive,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;IAhC/ye;;;;;OAKG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM;IAIpC;;;;;;OAMG;IACG,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;IAI7D;;;;;OAKG;IACG,oBAAoB,CAAC,YAAY,EAAE,MAAM;CAIhD"}

package/dist/repositories/user-passkey.repository.js

@@ -0,0 +1,61 @@
+import { EntityRepository } from '@mikro-orm/core';
+export class UserPasskeyRepository extends EntityRepository {
+    /**
+     * Find all passkeys for a user
+     *
+     * @param userSub - User sub to lookup
+     * @returns Array of passkey entities
+     */
+    async findByUserSub(userSub) {
+        return this.find({ user: { sub: userSub } }, { orderBy: { created_at: 'DESC' } });
+    }
+    /**
+     * Find a passkey by credential ID
+     *
+     * @param credentialId - WebAuthn credential ID (base64url encoded)
+     * @returns Passkey entity or null if not found
+     */
+    async findByCredentialId(credentialId) {
+        return this.findOne({ credential_id: credentialId }, { populate: ['user', 'public_key'] });
+    }
+    /**
+     * Find a passkey by ID and user sub
+     *
+     * @param userSub - User sub
+     * @param passkeyId - Passkey ID
+     * @returns Passkey entity or null if not found
+     */
+    async findByUserSubAndId(userSub, passkeyId) {
+        return this.findOne({ user: { sub: userSub }, id: passkeyId });
+    }
+    /**
+     * Count passkeys for a user
+     *
+     * @param userSub - User sub to count passkeys for
+     * @returns Number of passkeys
+     */
+    async countByUserSub(userSub) {
+        return this.count({ user: { sub: userSub } });
+    }
+    /**
+     * Delete a passkey by user sub and passkey ID
+     *
+     * @param userSub - User sub
+     * @param passkeyId - Passkey ID
+     * @returns Number of deleted records
+     */
+    async deleteByUserSubAndId(userSub, passkeyId) {
+        return this.nativeDelete({ user: { sub: userSub }, id: passkeyId });
+    }
+    /**
+     * Check if a credential ID already exists
+     *
+     * @param credentialId - WebAuthn credential ID to check
+     * @returns True if the credential ID exists
+     */
+    async existsByCredentialId(credentialId) {
+        const count = await this.count({ credential_id: credentialId });
+        return count > 0;
+    }
+}
+//# sourceMappingURL=user-passkey.repository.js.map

package/dist/repositories/user-passkey.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-passkey.repository.js","sourceRoot":"","sources":["../../src/repositories/user-passkey.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGnD,MAAM,OAAO,qBAAsB,SAAQ,gBAAoC;IAC7E;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,OAAe;QACjC,OAAO,IAAI,CAAC,IAAI,CACd,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAC1B,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,CACpC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,kBAAkB,CAAC,YAAoB;QAC3C,OAAO,IAAI,CAAC,OAAO,CACjB,EAAE,aAAa,EAAE,YAAY,EAAE,EAC/B,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CACrC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,kBAAkB,CAAC,OAAe,EAAE,SAAiB;QACzD,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACjE,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,OAAe;QAClC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,oBAAoB,CAAC,OAAe,EAAE,SAAiB;QAC3D,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACtE,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,oBAAoB,CAAC,YAAoB;QAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC;QAChE,OAAO,KAAK,GAAG,CAAC,CAAC;IACnB,CAAC;CACF"}

package/dist/repositories/user-terms-consent.repository.d.ts

@@ -0,0 +1,38 @@
+import { EntityRepository } from '@mikro-orm/core';
+import type { UserTermsConsentEntity } from '../entities/user-terms-consent.entity.ts';
+export declare class UserTermsConsentRepository extends EntityRepository<UserTermsConsentEntity> {
+    /**
+     * Find the latest consent record for a user and specific term
+     */
+    findLatestConsent(userSub: string, termsId: string): Promise<UserTermsConsentEntity | null>;
+    /**
+     * Find all consent records for a user
+     */
+    findAllConsents(userSub: string): Promise<UserTermsConsentEntity[]>;
+    /**
+     * Find the latest consents for each term for a user
+     * Returns a map of termsId -> consent
+     */
+    findLatestConsentsMap(userSub: string): Promise<Map<string, UserTermsConsentEntity>>;
+    /**
+     * Record a new consent
+     */
+    recordConsent(params: {
+        userSub: string;
+        termsId: string;
+        termsVersion: string;
+        agreed: boolean;
+        consentType: 'explicit' | 'implicit';
+    }): Promise<UserTermsConsentEntity>;
+    /**
+     * Record multiple consents at once
+     */
+    recordConsents(params: Array<{
+        userSub: string;
+        termsId: string;
+        termsVersion: string;
+        agreed: boolean;
+        consentType: 'explicit' | 'implicit';
+    }>): Promise<UserTermsConsentEntity[]>;
+}
+//# sourceMappingURL=user-terms-consent.repository.d.ts.map

package/dist/repositories/user-terms-consent.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-terms-consent.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/user-terms-consent.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAO,MAAM,iBAAiB,CAAC;AAExD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAEvF,qBAAa,0BAA2B,SAAQ,gBAAgB,CAAC,sBAAsB,CAAC;IACtF;;OAEG;IACG,iBAAiB,CACrB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAYzC;;OAEG;IACG,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAWzE;;;OAGG;IACG,qBAAqB,CACzB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAc/C;;OAEG;IACG,aAAa,CAAC,MAAM,EAAE;QAC1B,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,OAAO,CAAC;QAChB,WAAW,EAAE,UAAU,GAAG,UAAU,CAAC;KACtC,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAcnC;;OAEG;IACG,cAAc,CAClB,MAAM,EAAE,KAAK,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,OAAO,CAAC;QAChB,WAAW,EAAE,UAAU,GAAG,UAAU,CAAC;KACtC,CAAC,GACD,OAAO,CAAC,sBAAsB,EAAE,CAAC;CAerC"}

package/dist/repositories/user-terms-consent.repository.js

@@ -0,0 +1,71 @@
+import { EntityRepository, ref } from '@mikro-orm/core';
+import { UserEntity } from "../entities/user.entity.js";
+export class UserTermsConsentRepository extends EntityRepository {
+    /**
+     * Find the latest consent record for a user and specific term
+     */
+    async findLatestConsent(userSub, termsId) {
+        return this.findOne({
+            user: ref(UserEntity, userSub),
+            terms: termsId,
+        }, {
+            orderBy: { agreedAt: 'DESC' },
+        });
+    }
+    /**
+     * Find all consent records for a user
+     */
+    async findAllConsents(userSub) {
+        return this.find({
+            user: ref(UserEntity, userSub),
+        }, {
+            orderBy: { agreedAt: 'DESC' },
+        });
+    }
+    /**
+     * Find the latest consents for each term for a user
+     * Returns a map of termsId -> consent
+     */
+    async findLatestConsentsMap(userSub) {
+        const consents = await this.findAllConsents(userSub);
+        const map = new Map();
+        // Since results are ordered by agreedAt DESC, first occurrence is the latest
+        for (const consent of consents) {
+            if (!map.has(consent.termsId)) {
+                map.set(consent.termsId, consent);
+            }
+        }
+        return map;
+    }
+    /**
+     * Record a new consent
+     */
+    async recordConsent(params) {
+        const consent = this.create({
+            user: params.userSub,
+            terms: params.termsId,
+            termsId: params.termsId,
+            termsVersion: params.termsVersion,
+            agreed: params.agreed,
+            consentType: params.consentType,
+        });
+        await this.getEntityManager().persist(consent).flush();
+        return consent;
+    }
+    /**
+     * Record multiple consents at once
+     */
+    async recordConsents(params) {
+        const consents = params.map((p) => this.create({
+            user: p.userSub,
+            terms: p.termsId,
+            termsId: p.termsId,
+            termsVersion: p.termsVersion,
+            agreed: p.agreed,
+            consentType: p.consentType,
+        }));
+        await this.getEntityManager().persist(consents).flush();
+        return consents;
+    }
+}
+//# sourceMappingURL=user-terms-consent.repository.js.map

package/dist/repositories/user-terms-consent.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-terms-consent.repository.js","sourceRoot":"","sources":["../../src/repositories/user-terms-consent.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAGxD,MAAM,OAAO,0BAA2B,SAAQ,gBAAwC;IACtF;;OAEG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAAe,EACf,OAAe;QAEf,OAAO,IAAI,CAAC,OAAO,CACjB;YACE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC;YAC9B,KAAK,EAAE,OAAO;SACf,EACD;YACE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;SAC9B,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,OAAe;QACnC,OAAO,IAAI,CAAC,IAAI,CACd;YACE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC;SAC/B,EACD;YACE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;SAC9B,CACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,qBAAqB,CACzB,OAAe;QAEf,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkC,CAAC;QAEtD,6EAA6E;QAC7E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,MAMnB;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;YAC1B,IAAI,EAAE,MAAM,CAAC,OAAO;YACpB,KAAK,EAAE,MAAM,CAAC,OAAO;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC;QACvD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,MAME;QAEF,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAChC,IAAI,CAAC,MAAM,CAAC;YACV,IAAI,EAAE,CAAC,CAAC,OAAO;YACf,KAAK,EAAE,CAAC,CAAC,OAAO;YAChB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CACH,CAAC;QAEF,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC;QACxD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}