@willyim/idp 0.1.0

package/dist/src/drizzle/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/drizzle/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,OAAO,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACpD,OAAO,KAAK,EAAiB,YAAY,EAAE,MAAM,aAAa,CAAA;AAE9D,eAAO,MAAM,iBAAiB,gBAAgB,CAAA;AAE9C;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,GAAE,MAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkBrE;AAED,uDAAuD;AACvD,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,MAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkBjE;AAED,0EAA0E;AAC1E,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAA0B,CAAA;AAEjD;;;;GAIG;AACH,KAAK,eAAe,GAAG;IACrB,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;IAC/B,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;IAC/B,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;IAC/B,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;CAChC,CAAA;AAED,KAAK,eAAe,GAChB,UAAU,CAAC,OAAO,qBAAqB,CAAC,GACxC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAExC,mFAAmF;AACnF,wBAAgB,eAAe,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,GAAG,YAAY,CA8BzF"}

package/dist/src/drizzle/index.js

@@ -0,0 +1,130 @@
+/**
+ * @willyim/idp/drizzle — the one table a consumer app owns.
+ *
+ * Import the table into your schema, run `drizzle-kit generate`, and hand the
+ * pair to `createIdp({ sessions: drizzleSessions(db, schema.idpSession) })`.
+ * That is the whole migration story: one table, no user table, no account
+ * table, no verification table.
+ *
+ * `drizzle-orm` is an optional peer dependency of this subpath only — core
+ * never imports it.
+ */
+import { eq } from "drizzle-orm";
+import { integer, sqliteTable, text } from "drizzle-orm/sqlite-core";
+import { jsonb, pgTable, text as pgText, timestamp } from "drizzle-orm/pg-core";
+export const IDP_SESSION_TABLE = "idp_session";
+/**
+ * SQLite / Cloudflare D1. Timestamps are epoch-millisecond integers and the
+ * claim columns are JSON text — both are what drizzle's own modes produce, so
+ * `drizzle-kit generate` needs no help.
+ */
+export function idpSessionSqliteTable(name = IDP_SESSION_TABLE) {
+    return sqliteTable(name, {
+        id: text("id").primaryKey(),
+        sub: text("sub").notNull(),
+        email: text("email").notNull(),
+        name: text("name"),
+        image: text("image"),
+        permissions: text("permissions", { mode: "json" }).$type().notNull(),
+        workspaces: text("workspaces", { mode: "json" }).$type().notNull(),
+        actor: text("actor", { mode: "json" }).$type(),
+        accessToken: text("access_token").notNull(),
+        refreshToken: text("refresh_token"),
+        idToken: text("id_token"),
+        accessTokenExpiresAt: integer("access_token_expires_at", { mode: "timestamp_ms" }),
+        syncedAt: integer("synced_at", { mode: "timestamp_ms" }).notNull(),
+        expiresAt: integer("expires_at", { mode: "timestamp_ms" }).notNull(),
+        createdAt: integer("created_at", { mode: "timestamp_ms" }).notNull(),
+    });
+}
+/** Postgres. Same columns, `jsonb` + `timestamptz`. */
+export function idpSessionPgTable(name = IDP_SESSION_TABLE) {
+    return pgTable(name, {
+        id: pgText("id").primaryKey(),
+        sub: pgText("sub").notNull(),
+        email: pgText("email").notNull(),
+        name: pgText("name"),
+        image: pgText("image"),
+        permissions: jsonb("permissions").$type().notNull(),
+        workspaces: jsonb("workspaces").$type().notNull(),
+        actor: jsonb("actor").$type(),
+        accessToken: pgText("access_token").notNull(),
+        refreshToken: pgText("refresh_token"),
+        idToken: pgText("id_token"),
+        accessTokenExpiresAt: timestamp("access_token_expires_at", { withTimezone: true }),
+        syncedAt: timestamp("synced_at", { withTimezone: true }).notNull(),
+        expiresAt: timestamp("expires_at", { withTimezone: true }).notNull(),
+        createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+    });
+}
+/** The SQLite/D1 table under its default name — what most apps import. */
+export const idpSession = idpSessionSqliteTable();
+/** A `SessionStore` backed by drizzle. Works with D1/SQLite and Postgres alike. */
+export function drizzleSessions(db, table) {
+    const t = table;
+    async function get(id) {
+        const rows = await db.select().from(t).where(eq(t.id, id)).limit(1);
+        return rows[0] ? toRecord(rows[0]) : null;
+    }
+    return {
+        get,
+        async create(record) {
+            await db.insert(t).values(record);
+            return record;
+        },
+        async update(id, patch) {
+            const values = Object.fromEntries(Object.entries(patch).filter(([key, value]) => key !== "id" && value !== undefined));
+            if (Object.keys(values).length > 0) {
+                await db.update(t).set(values).where(eq(t.id, id));
+            }
+            return get(id);
+        },
+        async delete(id) {
+            await db.delete(t).where(eq(t.id, id));
+        },
+        async deleteBySub(sub) {
+            await db.delete(t).where(eq(t.sub, sub));
+        },
+    };
+}
+/**
+ * Drivers disagree about how faithfully they round-trip a `Date`, so coerce on
+ * the way out rather than trusting the dialect.
+ */
+function toRecord(row) {
+    return {
+        ...row,
+        permissions: asArray(row.permissions),
+        workspaces: asArray(row.workspaces),
+        actor: parseJson(row.actor) ?? null,
+        accessTokenExpiresAt: asDate(row.accessTokenExpiresAt),
+        syncedAt: asDate(row.syncedAt) ?? new Date(0),
+        expiresAt: asDate(row.expiresAt) ?? new Date(0),
+        createdAt: asDate(row.createdAt) ?? new Date(0),
+    };
+}
+function parseJson(value) {
+    if (typeof value !== "string")
+        return value;
+    try {
+        return JSON.parse(value);
+    }
+    catch {
+        return null;
+    }
+}
+function asArray(value) {
+    const parsed = parseJson(value);
+    return Array.isArray(parsed) ? parsed : [];
+}
+function asDate(value) {
+    if (value === null || value === undefined)
+        return null;
+    if (value instanceof Date)
+        return value;
+    if (typeof value === "number" || typeof value === "string") {
+        const date = new Date(value);
+        return Number.isNaN(date.getTime()) ? null : date;
+    }
+    return null;
+}

package/dist/src/duration.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `"7d"` -> milliseconds. Config reads better as a duration string than as a
+ * number of milliseconds nobody can eyeball; numbers are still accepted and
+ * treated as milliseconds.
+ */
+export type Duration = number | `${number}${"ms" | "s" | "m" | "h" | "d" | "w"}`;
+export declare function parseDuration(value: Duration): number;
+//# sourceMappingURL=duration.d.ts.map

package/dist/src/duration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"duration.d.ts","sourceRoot":"","sources":["../../src/duration.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,GAAG,MAAM,GAAG,IAAI,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,EAAE,CAAA;AAWhF,wBAAgB,aAAa,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAQrD"}

package/dist/src/duration.js

@@ -0,0 +1,24 @@
+/**
+ * `"7d"` -> milliseconds. Config reads better as a duration string than as a
+ * number of milliseconds nobody can eyeball; numbers are still accepted and
+ * treated as milliseconds.
+ */
+const UNITS = {
+    ms: 1,
+    s: 1000,
+    m: 60_000,
+    h: 3_600_000,
+    d: 86_400_000,
+    w: 604_800_000,
+};
+export function parseDuration(value) {
+    if (typeof value === "number") {
+        if (!Number.isFinite(value) || value < 0)
+            throw new Error(`invalid duration: ${value}`);
+        return value;
+    }
+    const match = /^(\d+(?:\.\d+)?)(ms|s|m|h|d|w)$/.exec(value.trim());
+    if (!match)
+        throw new Error(`invalid duration: ${value}`);
+    return Number(match[1]) * UNITS[match[2]];
+}