@trokky/trokky 3.1.0 → 3.3.0

package/dist/adapters/cloudflare-d1/cloudflare-d1-adapter.d.ts

@@ -0,0 +1,140 @@
+/**
+ * Cloudflare D1 data storage adapter.
+ *
+ * D1 is SQLite, which differs from Postgres in ways that are invisible until a
+ * conformance test fails, so the choices below are deliberate:
+ *
+ *  - **Timestamps are generated in JS, never by SQL.** SQLite's `CURRENT_TIMESTAMP`
+ *    has one-second resolution; the suite orders fixtures 20ms apart, so rows would
+ *    tie and sort arbitrarily.
+ *  - **Document payloads are one JSON TEXT blob.** Shredding fields into columns
+ *    loses the distinction between `0`, `false`, `''`, `null` and absent, all of
+ *    which must round-trip byte-identically.
+ *  - **Filters compare value *and* `json_type`.** `json_extract` collapses JSON
+ *    booleans to 0/1, so a naive equality makes `false` match a stored `0`.
+ *  - **Sorts use `json_extract`**, which yields real SQL numbers; the text
+ *    accessors would sort 13 before 2.
+ *  - **There is no `beginTransaction`.** D1 has no interactive transactions, and
+ *    the interface allows omitting it. The three places that need atomicity each
+ *    do it in one statement: the document upsert, `saveUserIf`'s conditional
+ *    UPDATE, and `consumeAuthFlowState`'s `DELETE … RETURNING`.
+ */
+import type { AppToken, AuditContext, CreateAppTokenData, CreateUserData, Document, DocumentData, ListOptions, UpdateUserData, User } from '../../core/types/index.js';
+import type { AuthFlowState, DataStorageAdapter, SettingsConfig } from '../../core/types/storage-adapters.js';
+import type { CloudflareD1AdapterConfig } from './types.js';
+export declare class CloudflareD1Adapter implements DataStorageAdapter {
+    private readonly db;
+    private readonly tablePrefix;
+    private readonly autoMigrate;
+    private readonly logger;
+    private migrated;
+    private migrationPromise;
+    /** D1 rejects a single value over ~2MB, well below the 10MB other adapters allow. */
+    private readonly MAX_DOCUMENT_SIZE;
+    private readonly MAX_LIST_LIMIT;
+    constructor(config: CloudflareD1AdapterConfig);
+    private table;
+    private now;
+    /** Migrations run once; concurrent callers await the same promise. */
+    private ready;
+    /**
+     * Create the schema. No DEFAULTs on the JSON columns: a default of '{}' would
+     * turn an absent value into an empty object on read, where `undefined` is
+     * required.
+     */
+    migrate(): Promise<void>;
+    close(): Promise<void>;
+    healthCheck(): Promise<boolean>;
+    private mapRowToDocument;
+    getDocument(collection: string, id: string): Promise<Document | null>;
+    saveDocument(collection: string, id: string, data: DocumentData, auditContext?: AuditContext): Promise<Document>;
+    deleteDocument(collection: string, id: string): Promise<void>;
+    /**
+     * Filter clauses shared by listDocuments and countDocuments so the two can
+     * never disagree. A data-field comparison checks `json_type` as well as the
+     * value: json_extract turns JSON true/false into 1/0, so value alone would
+     * make `false` match a stored `0`.
+     */
+    private buildFilterClauses;
+    /**
+     * ORDER BY terms. Data fields go through json_extract, which yields a real SQL
+     * number, so 2 sorts before 13; the text accessors would not.
+     */
+    private buildSortClause;
+    listDocuments(collection: string, options?: ListOptions): Promise<Document[]>;
+    countDocuments(collection: string, filter?: Record<string, unknown>): Promise<number>;
+    documentExists(collection: string, id: string): Promise<boolean>;
+    private mapRowToUser;
+    getUser(id: string): Promise<User | null>;
+    /**
+     * Build the SET list from the keys actually present. A key holding `null`
+     * clears the column; a key that is absent, or present as `undefined`, leaves
+     * it alone. COALESCE cannot express that difference.
+     */
+    private buildUserAssignments;
+    saveUser(id: string, userData: CreateUserData | Partial<UpdateUserData>): Promise<User>;
+    /** The bind list for a user INSERT, shared so the two insert paths cannot drift. */
+    private userInsertValues;
+    /**
+     * Create the first user, atomically. SQLite serialises writers, so a single
+     * `INSERT ... SELECT ... WHERE NOT EXISTS` is the check and the write under one
+     * lock: of two concurrent calls, exactly one inserts and the other gets no row.
+     */
+    createFirstUser(id: string, userData: CreateUserData): Promise<User | null>;
+    /**
+     * Compare-and-swap in one statement. SQLite makes a single UPDATE atomic, so
+     * no transaction is needed: the WHERE clause is the comparison, and RETURNING
+     * proves whether it matched.
+     */
+    saveUserIf(id: string, userData: Partial<UpdateUserData>, condition: {
+        passwordHash: string;
+    }): Promise<User | null>;
+    listUsers(options?: {
+        role?: string;
+        isActive?: boolean;
+        limit?: number;
+        offset?: number;
+    }): Promise<User[]>;
+    deleteUser(id: string): Promise<void>;
+    private findUserBy;
+    getUserByUsername(username: string): Promise<User | null>;
+    getUserByEmail(email: string): Promise<User | null>;
+    isUsernameAvailable(username: string): Promise<boolean>;
+    isEmailAvailable(email: string): Promise<boolean>;
+    getUserByOAuthProvider(provider: string, providerId: string): Promise<User | null>;
+    getUserByPasskeyCredentialId(credentialId: string): Promise<User | null>;
+    private mapRowToAppToken;
+    getAppToken(id: string): Promise<AppToken | null>;
+    getAppTokenByHash(hash: string): Promise<AppToken | null>;
+    saveAppToken(id: string, data: CreateAppTokenData | Partial<AppToken>): Promise<AppToken>;
+    listAppTokens(options?: {
+        createdBy?: string;
+        isActive?: boolean;
+        limit?: number;
+        offset?: number;
+    }): Promise<AppToken[]>;
+    deleteAppToken(id: string): Promise<void>;
+    saveAuthFlowState(state: AuthFlowState): Promise<void>;
+    /**
+     * One statement, so two concurrent callers cannot both win. Kind and expiry
+     * are part of the WHERE clause: presenting another flow's id neither returns
+     * it nor destroys it.
+     */
+    consumeAuthFlowState(id: string, kind: AuthFlowState['kind']): Promise<AuthFlowState | null>;
+    deleteExpiredAuthFlowStates(): Promise<number>;
+    getSettings(): Promise<SettingsConfig | null>;
+    saveSettings(settings: SettingsConfig): Promise<void>;
+    getStorageInfo(): Promise<{
+        [key: string]: unknown;
+        collections: string[];
+        documentCount: number;
+        userCount: number;
+        tokenCount: number;
+        storageSize?: number;
+    }>;
+    /** Not implemented: D1 has no interactive transactions. */
+    readonly beginTransaction: undefined;
+    /** Escape hatch for callers that need raw SQL, e.g. migrations. */
+    execute<T = unknown>(sql: string, params?: unknown[]): Promise<T[]>;
+}
+//# sourceMappingURL=cloudflare-d1-adapter.d.ts.map

package/dist/adapters/cloudflare-d1/cloudflare-d1-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare-d1-adapter.d.ts","sourceRoot":"","sources":["../../../src/adapters/cloudflare-d1/cloudflare-d1-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,KAAK,EACV,QAAQ,EACR,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,cAAc,EACd,IAAI,EACL,MAAM,2BAA2B,CAAA;AAClC,OAAO,KAAK,EACV,aAAa,EACb,kBAAkB,EAClB,cAAc,EACf,MAAM,sCAAsC,CAAA;AAC7C,OAAO,KAAK,EACV,yBAAyB,EAK1B,MAAM,YAAY,CAAA;AA0FnB,qBAAa,mBAAoB,YAAW,kBAAkB;IAC5D,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAC/B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAQ;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IACjE,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,gBAAgB,CAA6B;IAErD,qFAAqF;IACrF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAY;IAC9C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAO;gBAE1B,MAAM,EAAE,yBAAyB;IAW7C,OAAO,CAAC,KAAK;IAIb,OAAO,CAAC,GAAG;IAIX,sEAAsE;YACxD,KAAK;IAoBnB;;;;OAIG;IACU,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAyExB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAItB,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAa5C,OAAO,CAAC,gBAAgB;IAqBX,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAarE,YAAY,CACvB,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,YAAY,EAClB,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,QAAQ,CAAC;IA+CP,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAe1E;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IAkC1B;;;OAGG;IACH,OAAO,CAAC,eAAe;IAmCV,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAoBjF,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAarF,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAe7E,OAAO,CAAC,YAAY;IAwBP,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAStD;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAuBf,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAkCpG,oFAAoF;IACpF,OAAO,CAAC,gBAAgB;IAsBxB;;;;OAIG;IACU,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAmBxF;;;;OAIG;IACU,UAAU,CACrB,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,EACjC,SAAS,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,GAClC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAiBV,SAAS,CACpB,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GACnF,OAAO,CAAC,IAAI,EAAE,CAAC;IA0BL,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAQpC,UAAU;IAYX,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAIzD,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAInD,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIvD,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIjD,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAelF,4BAA4B,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAoBrF,OAAO,CAAC,gBAAgB;IAmBX,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IASjD,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAmBzD,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IA4DzF,aAAa,CACxB,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GACxF,OAAO,CAAC,QAAQ,EAAE,CAAC;IAuBT,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUzC,iBAAiB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAcnE;;;;OAIG;IACU,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAoB5F,2BAA2B,IAAI,OAAO,CAAC,MAAM,CAAC;IAW9C,WAAW,IAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAQ7C,YAAY,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAWrD,cAAc,IAAI,OAAO,CAAC;QACrC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;QACtB,WAAW,EAAE,MAAM,EAAE,CAAA;QACrB,aAAa,EAAE,MAAM,CAAA;QACrB,SAAS,EAAE,MAAM,CAAA;QACjB,UAAU,EAAE,MAAM,CAAA;QAClB,WAAW,CAAC,EAAE,MAAM,CAAA;KACrB,CAAC;IAqBF,2DAA2D;IAC3D,SAAgB,gBAAgB,YAAY;IAE5C,mEAAmE;IACtD,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,OAAO,EAAO,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;CAQrF"}