@weifuwujs/auth 0.9.0

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,159 @@
+#!/usr/bin/env node
+import { randomBytes } from 'node:crypto';
+import { resolve } from 'node:path';
+function parseArgs(argv) {
+    const command = argv[0] ?? 'help';
+    let root = process.cwd();
+    let store;
+    let password;
+    const rest = [];
+    for (let index = 1; index < argv.length; index++) {
+        const arg = argv[index];
+        if (arg === '--root' || arg.startsWith('--root=')) {
+            const value = arg.includes('=') ? arg.slice(arg.indexOf('=') + 1) : argv[++index];
+            if (!value)
+                throw new Error('--root 需要提供一个值');
+            root = resolve(value);
+        }
+        else if (arg === '--store' || arg.startsWith('--store=')) {
+            const value = arg.includes('=') ? arg.slice(arg.indexOf('=') + 1) : argv[++index];
+            if (!value)
+                throw new Error('--store 需要提供一个值');
+            store = value;
+        }
+        else if (arg === '--password' || arg.startsWith('--password=')) {
+            const value = arg.includes('=') ? arg.slice(arg.indexOf('=') + 1) : argv[++index];
+            if (!value)
+                throw new Error('--password 需要提供一个值');
+            password = value;
+        }
+        else {
+            rest.push(arg);
+        }
+    }
+    return { command, root, store, password, rest };
+}
+/** `weifuwu-auth migrate [--store sqlite:<path>|postgres://…]`（CLI 不加载用户代码） */
+function openStore(options) {
+    const spec = options.store ?? 'sqlite:data/auth.db';
+    if (spec.startsWith('sqlite:')) {
+        const path = resolve(options.root, spec.slice('sqlite:'.length));
+        return import("./stores/sqlite.js").then(({ sqliteAuthStore }) => {
+            const authStore = sqliteAuthStore(path);
+            return { store: authStore, close: async () => authStore.close() };
+        });
+    }
+    if (spec.startsWith('postgres://') || spec.startsWith('postgresql://')) {
+        return import("./postgres.js").then(({ postgresAuthStore }) => {
+            const authStore = postgresAuthStore(spec);
+            return { store: authStore, close: () => authStore.close() };
+        });
+    }
+    return Promise.reject(new Error(`无法识别的 --store：${spec}（支持 sqlite:<path> 与 postgres://…）`));
+}
+async function authMigrate(options) {
+    const { store, close } = await openStore(options);
+    try {
+        await store.migrate?.();
+        console.log(`auth 迁移完成：${options.store ?? 'sqlite:data/auth.db'}`);
+    }
+    finally {
+        await close();
+    }
+}
+/** `user:list` / `user:disable <email>` / `user:reset-password <email> [--password <plain>]` */
+async function userCommand(options) {
+    const { store, close } = await openStore(options);
+    try {
+        const email = options.rest[0] ?? '';
+        switch (options.command) {
+            case 'user:list': {
+                if (!store.listUsers) {
+                    throw new Error('当前 store 未实现 listUsers()');
+                }
+                const users = await store.listUsers();
+                if (users.length === 0) {
+                    console.log('（无用户）');
+                    return;
+                }
+                for (const user of users) {
+                    console.log([
+                        user.id,
+                        user.email,
+                        user.role,
+                        user.disabledAt
+                            ? `disabled(${user.disabledAt.toISOString()})`
+                            : 'active',
+                        user.createdAt.toISOString(),
+                    ].join('\t'));
+                }
+                return;
+            }
+            case 'user:disable': {
+                const { normalizeEmail } = await import("./password.js");
+                const normalized = normalizeEmail(email);
+                if (!normalized)
+                    throw new Error('user:disable 需要 <email>');
+                const user = await store.findUserByEmail(normalized);
+                if (!user)
+                    throw new Error(`用户不存在：${normalized}`);
+                await store.setUserDisabled(user.id, new Date());
+                console.log(`已禁用：${normalized}`);
+                return;
+            }
+            case 'user:reset-password': {
+                const { normalizeEmail, scryptHasher } = await import("./password.js");
+                const normalized = normalizeEmail(email);
+                if (!normalized)
+                    throw new Error('user:reset-password 需要 <email>');
+                const user = await store.findUserByEmail(normalized);
+                if (!user)
+                    throw new Error(`用户不存在：${normalized}`);
+                const password = options.password ?? randomBytes(24).toString('base64url');
+                await store.updateUserPassword(user.id, await scryptHasher.hash(password));
+                console.log(`已重置密码：${normalized}`);
+                if (!options.password)
+                    console.log(`新密码（仅显示一次）：${password}`);
+                return;
+            }
+        }
+    }
+    finally {
+        await close();
+    }
+}
+function printHelp() {
+    console.log(`用法：weifuwu-auth <命令> [选项]
+
+命令：
+  migrate                       迁移 auth 数据表（sqlite/postgres）
+  user:list                     列出用户
+  user:disable <email>          禁用用户
+  user:reset-password <email>   重置密码（省略明文则随机生成并打印一次）
+
+选项：
+  --root <dir>       项目根目录，默认当前目录
+  --store <url>      数据源，默认 sqlite:data/auth.db（支持 sqlite:<path> 与 postgres://…）
+  --password <plain> user:reset-password 的明文新密码（省略则随机生成）
+`);
+}
+const options = parseArgs(process.argv.slice(2));
+try {
+    switch (options.command) {
+        case 'migrate':
+            await authMigrate(options);
+            break;
+        case 'user:list':
+        case 'user:disable':
+        case 'user:reset-password':
+            await userCommand(options);
+            break;
+        default:
+            printHelp();
+    }
+}
+catch (error) {
+    console.error(error instanceof Error ? error.message : error);
+    process.exit(1);
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAWnC,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAA;IACjC,IAAI,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAA;IACxB,IAAI,KAAyB,CAAA;IAC7B,IAAI,QAA4B,CAAA;IAChC,MAAM,IAAI,GAAa,EAAE,CAAA;IAEzB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAE,CAAA;QACxB,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAA;YACjF,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;YAC7C,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;QACvB,CAAC;aAAM,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAA;YACjF,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;YAC9C,KAAK,GAAG,KAAK,CAAA;QACf,CAAC;aAAM,IAAI,GAAG,KAAK,YAAY,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACjE,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAA;YACjF,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;YACjD,QAAQ,GAAG,KAAK,CAAA;QAClB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAChB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;AACjD,CAAC;AAED,+EAA+E;AAC/E,SAAS,SAAS,CAChB,OAAmB;IAEnB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,IAAI,qBAAqB,CAAA;IACnD,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;QAChE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE;YAC/D,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;YACvC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAA;QACnE,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACvE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE;YAC5D,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;YACzC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAA;QAC7D,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CAAC,iBAAiB,IAAI,mCAAmC,CAAC,CACpE,CAAA;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAAmB;IAC5C,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAA;IACjD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,CAAA;QACvB,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,KAAK,IAAI,qBAAqB,EAAE,CAAC,CAAA;IACpE,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,EAAE,CAAA;IACf,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,KAAK,UAAU,WAAW,CAAC,OAAmB;IAC5C,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAA;IACjD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACnC,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;oBACrB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;gBAC7C,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAA;gBACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;oBACpB,OAAM;gBACR,CAAC;gBACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,OAAO,CAAC,GAAG,CACT;wBACE,IAAI,CAAC,EAAE;wBACP,IAAI,CAAC,KAAK;wBACV,IAAI,CAAC,IAAI;wBACT,IAAI,CAAC,UAAU;4BACb,CAAC,CAAC,YAAY,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,GAAG;4BAC9C,CAAC,CAAC,QAAQ;wBACZ,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;qBAC7B,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAA;gBACH,CAAC;gBACD,OAAM;YACR,CAAC;YACD,KAAK,cAAc,CAAC,CAAC,CAAC;gBACpB,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAA;gBACxD,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;gBACxC,IAAI,CAAC,UAAU;oBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;gBAC3D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,UAAU,CAAC,CAAA;gBACpD,IAAI,CAAC,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,UAAU,EAAE,CAAC,CAAA;gBACjD,MAAM,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAA;gBAChD,OAAO,CAAC,GAAG,CAAC,OAAO,UAAU,EAAE,CAAC,CAAA;gBAChC,OAAM;YACR,CAAC;YACD,KAAK,qBAAqB,CAAC,CAAC,CAAC;gBAC3B,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAA;gBACtE,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;gBACxC,IAAI,CAAC,UAAU;oBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;gBAClE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,UAAU,CAAC,CAAA;gBACpD,IAAI,CAAC,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,UAAU,EAAE,CAAC,CAAA;gBACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;gBAC1E,MAAM,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;gBAC1E,OAAO,CAAC,GAAG,CAAC,SAAS,UAAU,EAAE,CAAC,CAAA;gBAClC,IAAI,CAAC,OAAO,CAAC,QAAQ;oBAAE,OAAO,CAAC,GAAG,CAAC,cAAc,QAAQ,EAAE,CAAC,CAAA;gBAC5D,OAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,EAAE,CAAA;IACf,CAAC;AACH,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;CAYb,CAAC,CAAA;AACF,CAAC;AAED,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;AAEhD,IAAI,CAAC;IACH,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,KAAK,SAAS;YACZ,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YAC1B,MAAK;QACP,KAAK,WAAW,CAAC;QACjB,KAAK,cAAc,CAAC;QACpB,KAAK,qBAAqB;YACxB,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YAC1B,MAAK;QACP;YACE,SAAS,EAAE,CAAA;IACf,CAAC;AACH,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { createAuth } from './auth.ts';
+export { memoryAuthStore } from './stores/memory.ts';
+export { scryptHasher, scryptHash, scryptVerify, normalizeEmail, isValidEmail, validatePassword, SCRYPT_DEFAULTS, } from './password.ts';
+export type { ScryptParams } from './password.ts';
+export type { Auth, AuthCheck, AuthContext, AuthErrorCode, AuthHooks, AuthOptions, AuthResult, AuthRole, AuthSession, AuthStore, AuthUser, PasswordHasher, PublicUser, RateLimitOptions, RateLimitStore, ResetTokenStore, SessionOptions, SessionStore, UserStore, } from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EACL,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,eAAe,GAChB,MAAM,eAAe,CAAA;AACtB,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AACjD,YAAY,EACV,IAAI,EACJ,SAAS,EACT,WAAW,EACX,aAAa,EACb,SAAS,EACT,WAAW,EACX,UAAU,EACV,QAAQ,EACR,WAAW,EACX,SAAS,EACT,QAAQ,EACR,cAAc,EACd,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,cAAc,EACd,YAAY,EACZ,SAAS,GACV,MAAM,YAAY,CAAA"}

package/dist/index.js

@@ -0,0 +1,4 @@
+export { createAuth } from "./auth.js";
+export { memoryAuthStore } from "./stores/memory.js";
+export { scryptHasher, scryptHash, scryptVerify, normalizeEmail, isValidEmail, validatePassword, SCRYPT_DEFAULTS, } from "./password.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EACL,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,eAAe,GAChB,MAAM,eAAe,CAAA"}

package/dist/password.d.ts

@@ -0,0 +1,21 @@
+import type { PasswordHasher } from './types.ts';
+export interface ScryptParams {
+    N: number;
+    r: number;
+    p: number;
+    keylen: number;
+}
+export declare const SCRYPT_DEFAULTS: ScryptParams;
+/**
+ * 哈希格式：`scrypt$N$r$p$salt$hash`（base64url）。
+ * 参数随哈希入库，调参不需要迁移旧数据。
+ */
+export declare function scryptHash(plain: string, params?: ScryptParams): Promise<string>;
+export declare function scryptVerify(plain: string, stored: string): Promise<boolean>;
+/** 默认 hasher：scrypt + 参数变化时惰性重算 */
+export declare const scryptHasher: PasswordHasher;
+/** 校验密码策略：返回错误码或 null */
+export declare function validatePassword(password: string, minLength?: number): 'weak_password' | null;
+export declare function normalizeEmail(email: string): string;
+export declare function isValidEmail(email: string): boolean;
+//# sourceMappingURL=password.d.ts.map

package/dist/password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../src/password.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAgBhD,MAAM,WAAW,YAAY;IAC3B,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;IACT,MAAM,EAAE,MAAM,CAAA;CACf;AAED,eAAO,MAAM,eAAe,EAAE,YAAmD,CAAA;AAEjF;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,KAAK,EAAE,MAAM,EACb,MAAM,GAAE,YAA8B,GACrC,OAAO,CAAC,MAAM,CAAC,CAejB;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAalF;AAED,mCAAmC;AACnC,eAAO,MAAM,YAAY,EAAE,cAY1B,CAAA;AAED,yBAAyB;AACzB,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,SAAS,SAAI,GACZ,eAAe,GAAG,IAAI,CAIxB;AAID,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEnD"}

package/dist/password.js

@@ -0,0 +1,75 @@
+import { randomBytes, scrypt as scryptCallback, timingSafeEqual } from 'node:crypto';
+function deriveKey(plain, salt, keylen, options) {
+    return new Promise((resolve, reject) => {
+        scryptCallback(plain, salt, keylen, options, (error, derived) => {
+            if (error)
+                reject(error);
+            else
+                resolve(derived);
+        });
+    });
+}
+export const SCRYPT_DEFAULTS = { N: 16384, r: 8, p: 1, keylen: 64 };
+/**
+ * 哈希格式：`scrypt$N$r$p$salt$hash`（base64url）。
+ * 参数随哈希入库，调参不需要迁移旧数据。
+ */
+export async function scryptHash(plain, params = SCRYPT_DEFAULTS) {
+    const salt = randomBytes(16);
+    const derived = await deriveKey(plain, salt, params.keylen, {
+        N: params.N,
+        r: params.r,
+        p: params.p,
+    });
+    return [
+        'scrypt',
+        params.N,
+        params.r,
+        params.p,
+        salt.toString('base64url'),
+        derived.toString('base64url'),
+    ].join('$');
+}
+export async function scryptVerify(plain, stored) {
+    const parts = stored.split('$');
+    if (parts.length !== 6 || parts[0] !== 'scrypt')
+        return false;
+    const N = Number(parts[1]);
+    const r = Number(parts[2]);
+    const p = Number(parts[3]);
+    if (!Number.isInteger(N) || !Number.isInteger(r) || !Number.isInteger(p)) {
+        return false;
+    }
+    const salt = Buffer.from(parts[4], 'base64url');
+    const expected = Buffer.from(parts[5], 'base64url');
+    const derived = await deriveKey(plain, salt, expected.length, { N, r, p });
+    return derived.length === expected.length && timingSafeEqual(derived, expected);
+}
+/** 默认 hasher：scrypt + 参数变化时惰性重算 */
+export const scryptHasher = {
+    hash: (plain) => scryptHash(plain),
+    verify: (plain, stored) => scryptVerify(plain, stored),
+    needsRehash: (stored) => {
+        const params = stored.split('$');
+        return (params[0] !== 'scrypt' ||
+            Number(params[1]) !== SCRYPT_DEFAULTS.N ||
+            Number(params[2]) !== SCRYPT_DEFAULTS.r ||
+            Number(params[3]) !== SCRYPT_DEFAULTS.p);
+    },
+};
+/** 校验密码策略：返回错误码或 null */
+export function validatePassword(password, minLength = 8) {
+    if (typeof password !== 'string')
+        return 'weak_password';
+    if (password.length < minLength || password.length > 200)
+        return 'weak_password';
+    return null;
+}
+const EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+export function normalizeEmail(email) {
+    return typeof email === 'string' ? email.trim().toLowerCase() : '';
+}
+export function isValidEmail(email) {
+    return email.length <= 254 && EMAIL_RE.test(email);
+}
+//# sourceMappingURL=password.js.map

package/dist/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../src/password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,IAAI,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAGpF,SAAS,SAAS,CAChB,KAAa,EACb,IAAY,EACZ,MAAc,EACd,OAA4C;IAE5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAC9D,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAA;;gBACnB,OAAO,CAAC,OAAiB,CAAC,CAAA;QACjC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AASD,MAAM,CAAC,MAAM,eAAe,GAAiB,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;AAEjF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAa,EACb,SAAuB,eAAe;IAEtC,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAA;IAC5B,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE;QAC1D,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,CAAC,EAAE,MAAM,CAAC,CAAC;KACZ,CAAC,CAAA;IACF,OAAO;QACL,QAAQ;QACR,MAAM,CAAC,CAAC;QACR,MAAM,CAAC,CAAC;QACR,MAAM,CAAC,CAAC;QACR,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;KAC9B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAa,EAAE,MAAc;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC7D,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,WAAW,CAAC,CAAA;IAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,WAAW,CAAC,CAAA;IACpD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAC1E,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;AACjF,CAAC;AAED,mCAAmC;AACnC,MAAM,CAAC,MAAM,YAAY,GAAmB;IAC1C,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;IAClC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC;IACtD,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE;QACtB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAChC,OAAO,CACL,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ;YACtB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,eAAe,CAAC,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,eAAe,CAAC,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,eAAe,CAAC,CAAC,CACxC,CAAA;IACH,CAAC;CACF,CAAA;AAED,yBAAyB;AACzB,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,SAAS,GAAG,CAAC;IAEb,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAA;IACxD,IAAI,QAAQ,CAAC,MAAM,GAAG,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,eAAe,CAAA;IAChF,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,QAAQ,GAAG,4BAA4B,CAAA;AAE7C,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AACpE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACpD,CAAC"}

package/dist/postgres.d.ts

@@ -0,0 +1,22 @@
+import type postgresJs from 'postgres';
+import type { AuthStore } from './types.ts';
+export interface PostgresAuthStore extends AuthStore {
+    migrate(): Promise<void>;
+    close(): Promise<void>;
+}
+/** postgres.js 的 options（其泛型无默认值，同 `./postgres`） */
+type PostgresOptions = NonNullable<Parameters<typeof postgresJs>[1]>;
+/**
+ * postgres 实现（复用 `postgres.js`，与 `./postgres` 的 `ctx.sql` 同一客户端）。
+ *
+ * ```ts
+ * postgresAuthStore('postgres://…')     // 连接串
+ * postgresAuthStore(process.env.DATABASE_URL)
+ * postgresAuthStore(ctx.sql)            // 注入已有客户端（不负责 close）
+ * ```
+ *
+ * 表结构与 sqlite 对齐；`migrate()` 幂等（`auth_migrations` 版本记录）。
+ */
+export declare function postgresAuthStore(urlOrSql?: string | postgresJs.Sql, options?: PostgresOptions): PostgresAuthStore;
+export {};
+//# sourceMappingURL=postgres.d.ts.map

package/dist/postgres.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres.d.ts","sourceRoot":"","sources":["../src/postgres.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,UAAU,MAAM,UAAU,CAAA;AACtC,OAAO,KAAK,EAAe,SAAS,EAAY,MAAM,YAAY,CAAA;AAoFlE,MAAM,WAAW,iBAAkB,SAAQ,SAAS;IAClD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACxB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAED,oDAAoD;AACpD,KAAK,eAAe,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAEpE;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC,GAAG,EAClC,OAAO,CAAC,EAAE,eAAe,GACxB,iBAAiB,CAyLnB"}

package/dist/postgres.js

@@ -0,0 +1,240 @@
+import { randomUUID } from 'node:crypto';
+const SCHEMA = [
+    `
+CREATE TABLE IF NOT EXISTS users (
+  id TEXT PRIMARY KEY,
+  email TEXT NOT NULL UNIQUE,
+  password_hash TEXT NOT NULL,
+  role TEXT NOT NULL DEFAULT 'user',
+  disabled_at TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+)`,
+    `
+CREATE TABLE IF NOT EXISTS sessions (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  token_hash TEXT NOT NULL UNIQUE,
+  created_at TEXT NOT NULL,
+  expires_at TEXT NOT NULL,
+  last_seen_at TEXT NOT NULL
+)`,
+    'CREATE INDEX IF NOT EXISTS sessions_user_id_idx ON sessions(user_id)',
+    `
+CREATE TABLE IF NOT EXISTS password_resets (
+  token_hash TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  expires_at TEXT NOT NULL,
+  used_at TEXT
+)`,
+];
+function uniqueViolation(error, code) {
+    if (error.code === '23505') {
+        throw Object.assign(new Error(code), { code });
+    }
+    throw error;
+}
+function toUser(row) {
+    return {
+        id: row.id,
+        email: row.email,
+        passwordHash: row.password_hash,
+        role: row.role === 'admin' ? 'admin' : 'user',
+        disabledAt: row.disabled_at ? new Date(row.disabled_at) : null,
+        createdAt: new Date(row.created_at),
+        updatedAt: new Date(row.updated_at),
+    };
+}
+function toSession(row) {
+    return {
+        id: row.id,
+        userId: row.user_id,
+        tokenHash: row.token_hash,
+        createdAt: new Date(row.created_at),
+        expiresAt: new Date(row.expires_at),
+        lastSeenAt: new Date(row.last_seen_at),
+    };
+}
+/**
+ * postgres 实现（复用 `postgres.js`，与 `./postgres` 的 `ctx.sql` 同一客户端）。
+ *
+ * ```ts
+ * postgresAuthStore('postgres://…')     // 连接串
+ * postgresAuthStore(process.env.DATABASE_URL)
+ * postgresAuthStore(ctx.sql)            // 注入已有客户端（不负责 close）
+ * ```
+ *
+ * 表结构与 sqlite 对齐；`migrate()` 幂等（`auth_migrations` 版本记录）。
+ */
+export function postgresAuthStore(urlOrSql, options) {
+    const injected = typeof urlOrSql === 'function' ? urlOrSql : null;
+    let client = injected
+        ? Promise.resolve(injected)
+        : null;
+    const sql = () => {
+        client ??= (async () => {
+            const { default: createPostgres } = (await import('postgres'));
+            if (typeof urlOrSql === 'string')
+                return createPostgres(urlOrSql, options);
+            const url = process.env.DATABASE_URL;
+            if (url)
+                return createPostgres(url, options);
+            return createPostgres(options);
+        })();
+        return client;
+    };
+    const applyMigrations = async (db) => {
+        await db `
+      CREATE TABLE IF NOT EXISTS auth_migrations (
+        version INTEGER PRIMARY KEY,
+        applied_at TEXT NOT NULL
+      )`;
+        const applied = await db `SELECT version FROM auth_migrations WHERE version = 1`;
+        if (applied.length > 0)
+            return;
+        await db.begin(async (tx) => {
+            for (const statement of SCHEMA)
+                await tx.unsafe(statement);
+            await tx `INSERT INTO auth_migrations (version, applied_at) VALUES (1, ${new Date().toISOString()})`;
+        });
+    };
+    return {
+        async migrate() {
+            await applyMigrations(await sql());
+        },
+        async close() {
+            if (!client || injected)
+                return;
+            const db = await client;
+            client = null;
+            await db.end({ timeout: 5 });
+        },
+        async createUser({ email, passwordHash, role = 'user' }) {
+            const db = await sql();
+            const timestamp = new Date().toISOString();
+            const id = randomUUID();
+            try {
+                await db `
+          INSERT INTO users (id, email, password_hash, role, disabled_at, created_at, updated_at)
+          VALUES (${id}, ${email}, ${passwordHash}, ${role}, NULL, ${timestamp}, ${timestamp})`;
+            }
+            catch (error) {
+                uniqueViolation(error, 'email_taken');
+            }
+            return {
+                id,
+                email,
+                passwordHash,
+                role,
+                disabledAt: null,
+                createdAt: new Date(timestamp),
+                updatedAt: new Date(timestamp),
+            };
+        },
+        async findUserByEmail(email) {
+            const db = await sql();
+            const rows = (await db `SELECT * FROM users WHERE email = ${email} LIMIT 1`);
+            return rows[0] ? toUser(rows[0]) : null;
+        },
+        async findUserById(id) {
+            const db = await sql();
+            const rows = (await db `SELECT * FROM users WHERE id = ${id} LIMIT 1`);
+            return rows[0] ? toUser(rows[0]) : null;
+        },
+        async listUsers() {
+            const db = await sql();
+            const rows = (await db `SELECT * FROM users ORDER BY created_at`);
+            return rows.map(toUser);
+        },
+        async updateUserEmail(id, email) {
+            const db = await sql();
+            try {
+                await db `UPDATE users SET email = ${email}, updated_at = ${new Date().toISOString()} WHERE id = ${id}`;
+            }
+            catch (error) {
+                uniqueViolation(error, 'email_taken');
+            }
+        },
+        async updateUserPassword(id, passwordHash) {
+            const db = await sql();
+            await db `UPDATE users SET password_hash = ${passwordHash}, updated_at = ${new Date().toISOString()} WHERE id = ${id}`;
+        },
+        async setUserRole(id, role) {
+            const db = await sql();
+            await db `UPDATE users SET role = ${role}, updated_at = ${new Date().toISOString()} WHERE id = ${id}`;
+        },
+        async setUserDisabled(id, disabledAt) {
+            const db = await sql();
+            await db `UPDATE users SET disabled_at = ${disabledAt ? disabledAt.toISOString() : null}, updated_at = ${new Date().toISOString()} WHERE id = ${id}`;
+        },
+        async createSession({ userId, tokenHash, expiresAt }) {
+            const db = await sql();
+            const timestamp = new Date().toISOString();
+            const session = {
+                id: randomUUID(),
+                userId,
+                tokenHash,
+                createdAt: new Date(timestamp),
+                expiresAt,
+                lastSeenAt: new Date(timestamp),
+            };
+            await db `
+        INSERT INTO sessions (id, user_id, token_hash, created_at, expires_at, last_seen_at)
+        VALUES (${session.id}, ${userId}, ${tokenHash}, ${timestamp}, ${expiresAt.toISOString()}, ${timestamp})`;
+            return session;
+        },
+        async findSessionByTokenHash(tokenHash) {
+            const db = await sql();
+            const rows = (await db `SELECT * FROM sessions WHERE token_hash = ${tokenHash} LIMIT 1`);
+            return rows[0] ? toSession(rows[0]) : null;
+        },
+        async touchSession(id, lastSeenAt) {
+            const db = await sql();
+            await db `UPDATE sessions SET last_seen_at = ${lastSeenAt.toISOString()} WHERE id = ${id}`;
+        },
+        async deleteSession(id) {
+            const db = await sql();
+            await db `DELETE FROM sessions WHERE id = ${id}`;
+        },
+        async deleteUserSessions(userId, exceptId) {
+            const db = await sql();
+            if (exceptId) {
+                await db `DELETE FROM sessions WHERE user_id = ${userId} AND id <> ${exceptId}`;
+            }
+            else {
+                await db `DELETE FROM sessions WHERE user_id = ${userId}`;
+            }
+        },
+        async deleteExpiredSessions(now) {
+            const db = await sql();
+            const rows = (await db `DELETE FROM sessions WHERE expires_at <= ${now.toISOString()} RETURNING id`);
+            return rows.length;
+        },
+        async createResetToken({ userId, tokenHash, expiresAt }) {
+            const db = await sql();
+            try {
+                await db `
+          INSERT INTO password_resets (token_hash, user_id, expires_at, used_at)
+          VALUES (${tokenHash}, ${userId}, ${expiresAt.toISOString()}, NULL)`;
+            }
+            catch (error) {
+                uniqueViolation(error, 'invalid_token');
+            }
+        },
+        async consumeResetToken(tokenHash, now) {
+            const db = await sql();
+            const timestamp = now.toISOString();
+            const rows = (await db `
+        UPDATE password_resets SET used_at = ${timestamp}
+        WHERE token_hash = ${tokenHash} AND used_at IS NULL AND expires_at > ${timestamp}
+        RETURNING user_id`);
+            return rows[0]?.user_id ?? null;
+        },
+        async deleteExpiredResetTokens(now) {
+            const db = await sql();
+            const rows = (await db `DELETE FROM password_resets WHERE expires_at <= ${now.toISOString()} RETURNING token_hash`);
+            return rows.length;
+        },
+    };
+}
+//# sourceMappingURL=postgres.js.map

package/dist/postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres.js","sourceRoot":"","sources":["../src/postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAuBxC,MAAM,MAAM,GAAa;IACvB;;;;;;;;;EASA;IACA;;;;;;;;EAQA;IACA,sEAAsE;IACtE;;;;;;EAMA;CACD,CAAA;AAED,SAAS,eAAe,CACtB,KAAc,EACd,IAAqC;IAErC,IAAK,KAA2B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAClD,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IAChD,CAAC;IACD,MAAM,KAAK,CAAA;AACb,CAAC;AAED,SAAS,MAAM,CAAC,GAAY;IAC1B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;QAC7C,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;QAC9D,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QACnC,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;KACpC,CAAA;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAe;IAChC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QACnC,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QACnC,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;KACvC,CAAA;AACH,CAAC;AAUD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAkC,EAClC,OAAyB;IAEzB,MAAM,QAAQ,GACZ,OAAO,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAE,QAA2B,CAAC,CAAC,CAAC,IAAI,CAAA;IACtE,IAAI,MAAM,GAAmC,QAAQ;QACnD,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC3B,CAAC,CAAC,IAAI,CAAA;IAER,MAAM,GAAG,GAAG,GAA4B,EAAE;QACxC,MAAM,KAAK,CAAC,KAAK,IAAI,EAAE;YACrB,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,CAE5D,CAAA;YACD,IAAI,OAAO,QAAQ,KAAK,QAAQ;gBAAE,OAAO,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;YAC1E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAA;YACpC,IAAI,GAAG;gBAAE,OAAO,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;YAC5C,OAAO,cAAc,CAAC,OAAO,CAAC,CAAA;QAChC,CAAC,CAAC,EAAE,CAAA;QACJ,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IAED,MAAM,eAAe,GAAG,KAAK,EAAE,EAAkB,EAAiB,EAAE;QAClE,MAAM,EAAE,CAAA;;;;QAIJ,CAAA;QACJ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAA,uDAAuD,CAAA;QAC/E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAM;QAC9B,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAC1B,KAAK,MAAM,SAAS,IAAI,MAAM;gBAAE,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YAC1D,MAAM,EAAE,CAAA,gEAAgE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,GAAG,CAAA;QACrG,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,OAAO;QACL,KAAK,CAAC,OAAO;YACX,MAAM,eAAe,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;QACpC,CAAC;QAED,KAAK,CAAC,KAAK;YACT,IAAI,CAAC,MAAM,IAAI,QAAQ;gBAAE,OAAM;YAC/B,MAAM,EAAE,GAAG,MAAM,MAAM,CAAA;YACvB,MAAM,GAAG,IAAI,CAAA;YACb,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAA;QAC9B,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,GAAG,MAAM,EAAE;YACrD,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE,CAAA;YACtB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;YAC1C,MAAM,EAAE,GAAG,UAAU,EAAE,CAAA;YACvB,IAAI,CAAC;gBACH,MAAM,EAAE,CAAA;;oBAEI,EAAE,KAAK,KAAK,KAAK,YAAY,KAAK,IAAI,WAAW,SAAS,KAAK,SAAS,GAAG,CAAA;YACzF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,eAAe,CAAC,KAAK,EAAE,aAAa,CAAC,CAAA;YACvC,CAAC;YACD,OAAO;gBACL,EAAE;gBACF,KAAK;gBACL,YAAY;gBACZ,IAAI;gBACJ,UAAU,EAAE,IAAI;gBAChB,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC;gBAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC;aAC/B,CAAA;QACH,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,KAAK;YACzB,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE,CAAA;YACtB,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAA,qCAAqC,KAAK,UAAU,CAAc,CAAA;YACxF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACzC,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,EAAE;YACnB,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE,CAAA;YACtB,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAA,kCAAkC,EAAE,UAAU,CAAc,CAAA;YAClF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACzC,CAAC;QAED,KAAK,CAAC,SAAS;YACb,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE,CAAA;YACtB,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAA,yCAAyC,CAAc,CAAA;YAC7E,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzB,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,EAAE,EAAE,KAAK;YAC7B,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE,CAAA;YACtB,IAAI,CAAC;gBACH,MAAM,EAAE,CAAA,4BAA4B,KAAK,kBAAkB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,eAAe,EAAE,EAAE,CAAA;YACxG,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,eAAe,CAAC,KAAK,EAAE,aAAa,CAAC,CAAA;YACvC,CAAC;QACH,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,EAAE,EAAE,YAAY;YACvC,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE,CAAA;YACtB,MAAM,EAAE,CAAA,oCAAoC,YAAY,kBAAkB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,eAAe,EAAE,EAAE,CAAA;QACvH,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI;YACxB,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE,CAAA;YACtB,MAAM,EAAE,CAAA,2BAA2B,IAAI,kBAAkB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,eAAe,EAAE,EAAE,CAAA;QACtG,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,EAAE,EAAE,UAAU;YAClC,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE,CAAA;YACtB,MAAM,EAAE,CAAA,kCAAkC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,kBAAkB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,eAAe,EAAE,EAAE,CAAA;QACrJ,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE;YAClD,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE,CAAA;YACtB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;YAC1C,MAAM,OAAO,GAAgB;gBAC3B,EAAE,EAAE,UAAU,EAAE;gBAChB,MAAM;gBACN,SAAS;gBACT,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC;gBAC9B,SAAS;gBACT,UAAU,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC;aAChC,CAAA;YACD,MAAM,EAAE,CAAA;;kBAEI,OAAO,CAAC,EAAE,KAAK,MAAM,KAAK,SAAS,KAAK,SAAS,KAAK,SAAS,CAAC,WAAW,EAAE,KAAK,SAAS,GAAG,CAAA;YAC1G,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,KAAK,CAAC,sBAAsB,CAAC,SAAS;YACpC,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE,CAAA;YACtB,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAA,6CAA6C,SAAS,UAAU,CAAiB,CAAA;YACvG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC5C,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,UAAU;YAC/B,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE,CAAA;YACtB,MAAM,EAAE,CAAA,sCAAsC,UAAU,CAAC,WAAW,EAAE,eAAe,EAAE,EAAE,CAAA;QAC3F,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,EAAE;YACpB,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE,CAAA;YACtB,MAAM,EAAE,CAAA,mCAAmC,EAAE,EAAE,CAAA;QACjD,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ;YACvC,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE,CAAA;YACtB,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,EAAE,CAAA,wCAAwC,MAAM,cAAc,QAAQ,EAAE,CAAA;YAChF,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,CAAA,wCAAwC,MAAM,EAAE,CAAA;YAC1D,CAAC;QACH,CAAC;QAED,KAAK,CAAC,qBAAqB,CAAC,GAAG;YAC7B,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE,CAAA;YACtB,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAA,4CAA4C,GAAG,CAAC,WAAW,EAAE,eAAe,CAA0B,CAAA;YAC5H,OAAO,IAAI,CAAC,MAAM,CAAA;QACpB,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE;YACrD,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE,CAAA;YACtB,IAAI,CAAC;gBACH,MAAM,EAAE,CAAA;;oBAEI,SAAS,KAAK,MAAM,KAAK,SAAS,CAAC,WAAW,EAAE,SAAS,CAAA;YACvE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,eAAe,CAAC,KAAK,EAAE,eAAe,CAAC,CAAA;YACzC,CAAC;QACH,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG;YACpC,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE,CAAA;YACtB,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;YACnC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAA;+CACmB,SAAS;6BAC3B,SAAS,yCAAyC,SAAS;0BAC9D,CAA+B,CAAA;YACnD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,IAAI,CAAA;QACjC,CAAC;QAED,KAAK,CAAC,wBAAwB,CAAC,GAAG;YAChC,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE,CAAA;YACtB,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAA,mDAAmD,GAAG,CAAC,WAAW,EAAE,uBAAuB,CAAkC,CAAA;YACnJ,OAAO,IAAI,CAAC,MAAM,CAAA;QACpB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/sqlite.d.ts

@@ -0,0 +1,3 @@
+export { sqliteAuthStore } from './stores/sqlite.ts';
+export type { SqliteAuthStore } from './stores/sqlite.ts';
+//# sourceMappingURL=sqlite.d.ts.map

package/dist/sqlite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.d.ts","sourceRoot":"","sources":["../src/sqlite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/sqlite.js

@@ -0,0 +1,2 @@
+export { sqliteAuthStore } from "./stores/sqlite.js";
+//# sourceMappingURL=sqlite.js.map

package/dist/sqlite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../src/sqlite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/stores/memory.d.ts

@@ -0,0 +1,4 @@
+import type { AuthStore } from '../types.ts';
+/** 内存实现：测试默认，也可用于单进程开发 */
+export declare function memoryAuthStore(): AuthStore;
+//# sourceMappingURL=memory.d.ts.map

package/dist/stores/memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../src/stores/memory.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAe,SAAS,EAAY,MAAM,aAAa,CAAA;AAcnE,0BAA0B;AAC1B,wBAAgB,eAAe,IAAI,SAAS,CAkJ3C"}