@xcelsior/auth-adapter-dynamodb 1.0.0

package/.turbo/turbo-build.log

@@ -0,0 +1,22 @@
+
+> @xcelsior/auth-adapter-dynamodb@1.0.0 build /home/circleci/repo/packages/services/auth-adapter-dynamodb
+> tsup && tsc --noEmit
+
+CLI Building entry: src/index.ts
+CLI Using tsconfig: tsconfig.json
+CLI tsup v8.5.1
+CLI Using tsup config: /home/circleci/repo/packages/services/auth-adapter-dynamodb/tsup.config.ts
+CLI Target: es2020
+CLI Cleaning output folder
+CJS Build start
+ESM Build start
+ESM dist/index.mjs     9.94 KB
+ESM dist/index.mjs.map 21.64 KB
+ESM ⚡️ Build success in 198ms
+CJS dist/index.js     11.23 KB
+CJS dist/index.js.map 21.71 KB
+CJS ⚡️ Build success in 199ms
+DTS Build start
+DTS ⚡️ Build success in 20379ms
+DTS dist/index.d.ts  1.33 KB
+DTS dist/index.d.mts 1.33 KB

package/biome.json

@@ -0,0 +1,3 @@
+{
+    "extends": "//"
+}

package/dist/index.d.mts

@@ -0,0 +1,30 @@
+import { IStorageProvider, User, UserFilter, FindUsersOptions, FindUsersResult, Session } from '@xcelsior/auth';
+
+interface DynamoDBConfig {
+    tableName: string;
+    sessionsTableName: string;
+    region: string;
+}
+declare class DynamoDBStorageProvider implements IStorageProvider {
+    private client;
+    private tableName;
+    private sessionsTableName;
+    constructor(config: DynamoDBConfig);
+    createUser(user: User): Promise<void>;
+    getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null>;
+    getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null>;
+    getUserById(id: string): Promise<User | null>;
+    getUserByEmail(email: string): Promise<User | null>;
+    updateUser(id: string, updates: Partial<User>): Promise<void>;
+    deleteUser(id: string): Promise<void>;
+    findUsers(filter: UserFilter, options?: FindUsersOptions): Promise<FindUsersResult>;
+    createSession(session: Session): Promise<void>;
+    getSessionById(id: string): Promise<Session | null>;
+    getSessionsByUserId(userId: string): Promise<Session[]>;
+    updateSession(id: string, updates: Partial<Session>): Promise<void>;
+    deleteSession(id: string): Promise<void>;
+    deleteAllUserSessions(userId: string): Promise<void>;
+    deleteExpiredSessions(): Promise<void>;
+}
+
+export { type DynamoDBConfig, DynamoDBStorageProvider };

package/dist/index.d.ts

@@ -0,0 +1,30 @@
+import { IStorageProvider, User, UserFilter, FindUsersOptions, FindUsersResult, Session } from '@xcelsior/auth';
+
+interface DynamoDBConfig {
+    tableName: string;
+    sessionsTableName: string;
+    region: string;
+}
+declare class DynamoDBStorageProvider implements IStorageProvider {
+    private client;
+    private tableName;
+    private sessionsTableName;
+    constructor(config: DynamoDBConfig);
+    createUser(user: User): Promise<void>;
+    getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null>;
+    getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null>;
+    getUserById(id: string): Promise<User | null>;
+    getUserByEmail(email: string): Promise<User | null>;
+    updateUser(id: string, updates: Partial<User>): Promise<void>;
+    deleteUser(id: string): Promise<void>;
+    findUsers(filter: UserFilter, options?: FindUsersOptions): Promise<FindUsersResult>;
+    createSession(session: Session): Promise<void>;
+    getSessionById(id: string): Promise<Session | null>;
+    getSessionsByUserId(userId: string): Promise<Session[]>;
+    updateSession(id: string, updates: Partial<Session>): Promise<void>;
+    deleteSession(id: string): Promise<void>;
+    deleteAllUserSessions(userId: string): Promise<void>;
+    deleteExpiredSessions(): Promise<void>;
+}
+
+export { type DynamoDBConfig, DynamoDBStorageProvider };

package/dist/index.js

@@ -0,0 +1,336 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  DynamoDBStorageProvider: () => DynamoDBStorageProvider
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/dynamodb.ts
+var import_client_dynamodb = require("@aws-sdk/client-dynamodb");
+var import_lib_dynamodb = require("@aws-sdk/lib-dynamodb");
+var DynamoDBStorageProvider = class {
+  constructor(config) {
+    const dbClient = new import_client_dynamodb.DynamoDBClient({ region: config.region });
+    this.client = import_lib_dynamodb.DynamoDBDocumentClient.from(dbClient, {});
+    this.tableName = config.tableName;
+    this.sessionsTableName = config.sessionsTableName;
+  }
+  // ==================== User Methods ====================
+  async createUser(user) {
+    await this.client.send(
+      new import_lib_dynamodb.PutCommand({
+        TableName: this.tableName,
+        Item: user,
+        ConditionExpression: "attribute_not_exists(email)"
+      })
+    );
+  }
+  async getUserByResetPasswordToken(resetPasswordToken) {
+    const response = await this.client.send(
+      new import_lib_dynamodb.QueryCommand({
+        TableName: this.tableName,
+        IndexName: "ResetPasswordTokenIndex",
+        KeyConditionExpression: "resetPasswordToken = :token",
+        ExpressionAttributeValues: {
+          ":token": resetPasswordToken
+        }
+      })
+    );
+    return response.Items?.[0];
+  }
+  async getUserByVerifyEmailToken(verifyEmailToken) {
+    const response = await this.client.send(
+      new import_lib_dynamodb.QueryCommand({
+        TableName: this.tableName,
+        IndexName: "VerifyEmailTokenIndex",
+        KeyConditionExpression: "verificationToken = :token",
+        ExpressionAttributeValues: {
+          ":token": verifyEmailToken
+        }
+      })
+    );
+    return response.Items?.[0];
+  }
+  async getUserById(id) {
+    const response = await this.client.send(
+      new import_lib_dynamodb.GetCommand({
+        TableName: this.tableName,
+        Key: { id }
+      })
+    );
+    return response.Item;
+  }
+  async getUserByEmail(email) {
+    const response = await this.client.send(
+      new import_lib_dynamodb.QueryCommand({
+        TableName: this.tableName,
+        IndexName: "EmailIndex",
+        KeyConditionExpression: "email = :email",
+        ExpressionAttributeValues: {
+          ":email": email
+        }
+      })
+    );
+    return response.Items?.[0];
+  }
+  async updateUser(id, updates) {
+    const toSet = {};
+    const toRemove = [];
+    Object.entries(updates).forEach(([key, value]) => {
+      if (value === void 0) {
+        toRemove.push(key);
+      } else {
+        toSet[key] = value;
+      }
+    });
+    if (Object.keys(toSet).length === 0 && toRemove.length === 0) {
+      return;
+    }
+    const setPart = Object.keys(toSet).length > 0 ? `SET ${Object.keys(toSet).map((key) => `#${key} = :${key}`).join(", ")}` : "";
+    const removePart = toRemove.length > 0 ? `REMOVE ${toRemove.map((key) => `#${key}`).join(", ")}` : "";
+    const updateExpression = [setPart, removePart].filter(Boolean).join(" ");
+    const expressionAttributeNames = [...Object.keys(toSet), ...toRemove].reduce(
+      (acc, key) => ({ ...acc, [`#${key}`]: key }),
+      {}
+    );
+    const expressionAttributeValues = Object.entries(toSet).reduce(
+      (acc, [key, value]) => ({ ...acc, [`:${key}`]: value }),
+      {}
+    );
+    await this.client.send(
+      new import_lib_dynamodb.UpdateCommand({
+        TableName: this.tableName,
+        Key: { id },
+        UpdateExpression: updateExpression,
+        ExpressionAttributeNames: expressionAttributeNames,
+        ...Object.keys(expressionAttributeValues).length > 0 && {
+          ExpressionAttributeValues: expressionAttributeValues
+        }
+      })
+    );
+  }
+  async deleteUser(id) {
+    await this.deleteAllUserSessions(id);
+    await this.client.send(
+      new import_lib_dynamodb.DeleteCommand({
+        TableName: this.tableName,
+        Key: { id }
+      })
+    );
+  }
+  async findUsers(filter, options = {}) {
+    const limit = options.limit ?? 50;
+    const exclusiveStartKey = options.cursor ? JSON.parse(Buffer.from(options.cursor, "base64").toString()) : void 0;
+    if (filter.email && !filter.emailContains && !filter.roles && !filter.hasAnyRole && filter.isEmailVerified === void 0) {
+      const response2 = await this.client.send(
+        new import_lib_dynamodb.QueryCommand({
+          TableName: this.tableName,
+          IndexName: "EmailIndex",
+          KeyConditionExpression: "email = :email",
+          ExpressionAttributeValues: { ":email": filter.email },
+          Limit: limit,
+          ExclusiveStartKey: exclusiveStartKey
+        })
+      );
+      return {
+        users: response2.Items || [],
+        nextCursor: response2.LastEvaluatedKey ? Buffer.from(JSON.stringify(response2.LastEvaluatedKey)).toString("base64") : void 0
+      };
+    }
+    const filterExpressions = [];
+    const expressionAttributeNames = {};
+    const expressionAttributeValues = {};
+    if (filter.email) {
+      filterExpressions.push("email = :email");
+      expressionAttributeValues[":email"] = filter.email;
+    }
+    if (filter.emailContains) {
+      filterExpressions.push("contains(email, :emailContains)");
+      expressionAttributeValues[":emailContains"] = filter.emailContains;
+    }
+    if (filter.isEmailVerified !== void 0) {
+      filterExpressions.push("isEmailVerified = :isEmailVerified");
+      expressionAttributeValues[":isEmailVerified"] = filter.isEmailVerified;
+    }
+    if (filter.roles && filter.roles.length > 0) {
+      filter.roles.forEach((role, index) => {
+        filterExpressions.push(`contains(#roles, :role${index})`);
+        expressionAttributeValues[`:role${index}`] = role;
+      });
+      expressionAttributeNames["#roles"] = "roles";
+    }
+    if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {
+      const anyRoleConditions = filter.hasAnyRole.map((role, index) => {
+        expressionAttributeValues[`:anyRole${index}`] = role;
+        return `contains(#roles, :anyRole${index})`;
+      });
+      filterExpressions.push(`(${anyRoleConditions.join(" OR ")})`);
+      if (!expressionAttributeNames["#roles"]) {
+        expressionAttributeNames["#roles"] = "roles";
+      }
+    }
+    const response = await this.client.send(
+      new import_lib_dynamodb.ScanCommand({
+        TableName: this.tableName,
+        FilterExpression: filterExpressions.length > 0 ? filterExpressions.join(" AND ") : void 0,
+        ExpressionAttributeNames: Object.keys(expressionAttributeNames).length > 0 ? expressionAttributeNames : void 0,
+        ExpressionAttributeValues: Object.keys(expressionAttributeValues).length > 0 ? expressionAttributeValues : void 0,
+        Limit: limit,
+        ExclusiveStartKey: exclusiveStartKey
+      })
+    );
+    return {
+      users: response.Items || [],
+      nextCursor: response.LastEvaluatedKey ? Buffer.from(JSON.stringify(response.LastEvaluatedKey)).toString("base64") : void 0
+    };
+  }
+  // ==================== Session Methods ====================
+  async createSession(session) {
+    await this.client.send(
+      new import_lib_dynamodb.PutCommand({
+        TableName: this.sessionsTableName,
+        Item: session
+      })
+    );
+  }
+  async getSessionById(id) {
+    const response = await this.client.send(
+      new import_lib_dynamodb.GetCommand({
+        TableName: this.sessionsTableName,
+        Key: { id }
+      })
+    );
+    return response.Item;
+  }
+  async getSessionsByUserId(userId) {
+    const response = await this.client.send(
+      new import_lib_dynamodb.QueryCommand({
+        TableName: this.sessionsTableName,
+        IndexName: "UserIdIndex",
+        KeyConditionExpression: "userId = :userId",
+        ExpressionAttributeValues: {
+          ":userId": userId
+        }
+      })
+    );
+    return response.Items || [];
+  }
+  async updateSession(id, updates) {
+    const toSet = {};
+    Object.entries(updates).forEach(([key, value]) => {
+      if (value !== void 0) {
+        toSet[key] = value;
+      }
+    });
+    if (Object.keys(toSet).length === 0) {
+      return;
+    }
+    const updateExpression = `SET ${Object.keys(toSet).map((key) => `#${key} = :${key}`).join(", ")}`;
+    const expressionAttributeNames = Object.keys(toSet).reduce(
+      (acc, key) => ({ ...acc, [`#${key}`]: key }),
+      {}
+    );
+    const expressionAttributeValues = Object.entries(toSet).reduce(
+      (acc, [key, value]) => ({ ...acc, [`:${key}`]: value }),
+      {}
+    );
+    await this.client.send(
+      new import_lib_dynamodb.UpdateCommand({
+        TableName: this.sessionsTableName,
+        Key: { id },
+        UpdateExpression: updateExpression,
+        ExpressionAttributeNames: expressionAttributeNames,
+        ExpressionAttributeValues: expressionAttributeValues
+      })
+    );
+  }
+  async deleteSession(id) {
+    await this.client.send(
+      new import_lib_dynamodb.DeleteCommand({
+        TableName: this.sessionsTableName,
+        Key: { id }
+      })
+    );
+  }
+  async deleteAllUserSessions(userId) {
+    const sessions = await this.getSessionsByUserId(userId);
+    if (sessions.length === 0) {
+      return;
+    }
+    const chunks = [];
+    for (let i = 0; i < sessions.length; i += 25) {
+      chunks.push(sessions.slice(i, i + 25));
+    }
+    for (const chunk of chunks) {
+      await this.client.send(
+        new import_lib_dynamodb.BatchWriteCommand({
+          RequestItems: {
+            [this.sessionsTableName]: chunk.map((session) => ({
+              DeleteRequest: {
+                Key: { id: session.id }
+              }
+            }))
+          }
+        })
+      );
+    }
+  }
+  async deleteExpiredSessions() {
+    const now = Date.now();
+    const response = await this.client.send(
+      new import_lib_dynamodb.QueryCommand({
+        TableName: this.sessionsTableName,
+        IndexName: "ExpiresAtIndex",
+        KeyConditionExpression: "expiresAt < :now",
+        ExpressionAttributeValues: {
+          ":now": now
+        }
+      })
+    );
+    const expiredSessions = response.Items || [];
+    if (expiredSessions.length === 0) {
+      return;
+    }
+    const chunks = [];
+    for (let i = 0; i < expiredSessions.length; i += 25) {
+      chunks.push(expiredSessions.slice(i, i + 25));
+    }
+    for (const chunk of chunks) {
+      await this.client.send(
+        new import_lib_dynamodb.BatchWriteCommand({
+          RequestItems: {
+            [this.sessionsTableName]: chunk.map((session) => ({
+              DeleteRequest: {
+                Key: { id: session.id }
+              }
+            }))
+          }
+        })
+      );
+    }
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  DynamoDBStorageProvider
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/dynamodb.ts"],"sourcesContent":["export { DynamoDBStorageProvider, type DynamoDBConfig } from './dynamodb';\n","import { DynamoDBClient } from '@aws-sdk/client-dynamodb';\nimport {\n    DynamoDBDocumentClient,\n    PutCommand,\n    GetCommand,\n    UpdateCommand,\n    DeleteCommand,\n    QueryCommand,\n    ScanCommand,\n    BatchWriteCommand,\n} from '@aws-sdk/lib-dynamodb';\nimport type {\n    IStorageProvider,\n    User,\n    Session,\n    UserFilter,\n    FindUsersOptions,\n    FindUsersResult,\n    UserRole,\n} from '@xcelsior/auth';\n\nexport interface DynamoDBConfig {\n    tableName: string;\n    sessionsTableName: string;\n    region: string;\n}\n\nexport class DynamoDBStorageProvider implements IStorageProvider {\n    private client: DynamoDBDocumentClient;\n    private tableName: string;\n    private sessionsTableName: string;\n\n    constructor(config: DynamoDBConfig) {\n        const dbClient = new DynamoDBClient({ region: config.region });\n        this.client = DynamoDBDocumentClient.from(dbClient, {});\n        this.tableName = config.tableName;\n        this.sessionsTableName = config.sessionsTableName;\n    }\n\n    // ==================== User Methods ====================\n\n    async createUser(user: User): Promise<void> {\n        await this.client.send(\n            new PutCommand({\n                TableName: this.tableName,\n                Item: user,\n                ConditionExpression: 'attribute_not_exists(email)',\n            })\n        );\n    }\n\n    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null> {\n        const response = await this.client.send(\n            new QueryCommand({\n                TableName: this.tableName,\n                IndexName: 'ResetPasswordTokenIndex',\n                KeyConditionExpression: 'resetPasswordToken = :token',\n                ExpressionAttributeValues: {\n                    ':token': resetPasswordToken,\n                },\n            })\n        );\n\n        return response.Items?.[0] as User | null;\n    }\n\n    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null> {\n        const response = await this.client.send(\n            new QueryCommand({\n                TableName: this.tableName,\n                IndexName: 'VerifyEmailTokenIndex',\n                KeyConditionExpression: 'verificationToken = :token',\n                ExpressionAttributeValues: {\n                    ':token': verifyEmailToken,\n                },\n            })\n        );\n\n        return response.Items?.[0] as User | null;\n    }\n\n    async getUserById(id: string): Promise<User | null> {\n        const response = await this.client.send(\n            new GetCommand({\n                TableName: this.tableName,\n                Key: { id },\n            })\n        );\n\n        return response.Item as User | null;\n    }\n\n    async getUserByEmail(email: string): Promise<User | null> {\n        const response = await this.client.send(\n            new QueryCommand({\n                TableName: this.tableName,\n                IndexName: 'EmailIndex',\n                KeyConditionExpression: 'email = :email',\n                ExpressionAttributeValues: {\n                    ':email': email,\n                },\n            })\n        );\n\n        return response.Items?.[0] as User | null;\n    }\n\n    async updateUser(id: string, updates: Partial<User>): Promise<void> {\n        const toSet: Record<string, unknown> = {};\n        const toRemove: string[] = [];\n\n        // Separate attributes to set and remove\n        Object.entries(updates).forEach(([key, value]) => {\n            if (value === undefined) {\n                toRemove.push(key);\n            } else {\n                toSet[key] = value;\n            }\n        });\n\n        // If no updates at all, return early\n        if (Object.keys(toSet).length === 0 && toRemove.length === 0) {\n            return;\n        }\n\n        // Build the update expression\n        const setPart =\n            Object.keys(toSet).length > 0\n                ? `SET ${Object.keys(toSet)\n                      .map((key) => `#${key} = :${key}`)\n                      .join(', ')}`\n                : '';\n\n        const removePart =\n            toRemove.length > 0 ? `REMOVE ${toRemove.map((key) => `#${key}`).join(', ')}` : '';\n\n        const updateExpression = [setPart, removePart].filter(Boolean).join(' ');\n\n        // Build expression attribute names (needed for both SET and REMOVE)\n        const expressionAttributeNames = [...Object.keys(toSet), ...toRemove].reduce(\n            (acc, key) => ({ ...acc, [`#${key}`]: key }),\n            {}\n        );\n\n        // Build expression attribute values (only needed for SET)\n        const expressionAttributeValues = Object.entries(toSet).reduce(\n            (acc, [key, value]) => ({ ...acc, [`:${key}`]: value }),\n            {}\n        );\n\n        await this.client.send(\n            new UpdateCommand({\n                TableName: this.tableName,\n                Key: { id },\n                UpdateExpression: updateExpression,\n                ExpressionAttributeNames: expressionAttributeNames,\n                ...(Object.keys(expressionAttributeValues).length > 0 && {\n                    ExpressionAttributeValues: expressionAttributeValues,\n                }),\n            })\n        );\n    }\n\n    async deleteUser(id: string): Promise<void> {\n        // Delete all user sessions first\n        await this.deleteAllUserSessions(id);\n\n        await this.client.send(\n            new DeleteCommand({\n                TableName: this.tableName,\n                Key: { id },\n            })\n        );\n    }\n\n    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult> {\n        const limit = options.limit ?? 50;\n        const exclusiveStartKey = options.cursor\n            ? JSON.parse(Buffer.from(options.cursor, 'base64').toString())\n            : undefined;\n\n        // If filtering by exact email only, use the EmailIndex (most performant)\n        if (\n            filter.email &&\n            !filter.emailContains &&\n            !filter.roles &&\n            !filter.hasAnyRole &&\n            filter.isEmailVerified === undefined\n        ) {\n            const response = await this.client.send(\n                new QueryCommand({\n                    TableName: this.tableName,\n                    IndexName: 'EmailIndex',\n                    KeyConditionExpression: 'email = :email',\n                    ExpressionAttributeValues: { ':email': filter.email },\n                    Limit: limit,\n                    ExclusiveStartKey: exclusiveStartKey,\n                })\n            );\n\n            return {\n                users: (response.Items || []) as User[],\n                nextCursor: response.LastEvaluatedKey\n                    ? Buffer.from(JSON.stringify(response.LastEvaluatedKey)).toString('base64')\n                    : undefined,\n            };\n        }\n\n        // For other filters, use Scan with FilterExpression\n        const filterExpressions: string[] = [];\n        const expressionAttributeNames: Record<string, string> = {};\n        const expressionAttributeValues: Record<string, unknown> = {};\n\n        if (filter.email) {\n            filterExpressions.push('email = :email');\n            expressionAttributeValues[':email'] = filter.email;\n        }\n\n        if (filter.emailContains) {\n            filterExpressions.push('contains(email, :emailContains)');\n            expressionAttributeValues[':emailContains'] = filter.emailContains;\n        }\n\n        if (filter.isEmailVerified !== undefined) {\n            filterExpressions.push('isEmailVerified = :isEmailVerified');\n            expressionAttributeValues[':isEmailVerified'] = filter.isEmailVerified;\n        }\n\n        // For roles (user must have ALL specified roles)\n        if (filter.roles && filter.roles.length > 0) {\n            filter.roles.forEach((role: UserRole, index: number) => {\n                filterExpressions.push(`contains(#roles, :role${index})`);\n                expressionAttributeValues[`:role${index}`] = role;\n            });\n            expressionAttributeNames['#roles'] = 'roles';\n        }\n\n        // For hasAnyRole (user must have at least ONE)\n        if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {\n            const anyRoleConditions = filter.hasAnyRole.map((role: UserRole, index: number) => {\n                expressionAttributeValues[`:anyRole${index}`] = role;\n                return `contains(#roles, :anyRole${index})`;\n            });\n            filterExpressions.push(`(${anyRoleConditions.join(' OR ')})`);\n            if (!expressionAttributeNames['#roles']) {\n                expressionAttributeNames['#roles'] = 'roles';\n            }\n        }\n\n        const response = await this.client.send(\n            new ScanCommand({\n                TableName: this.tableName,\n                FilterExpression:\n                    filterExpressions.length > 0 ? filterExpressions.join(' AND ') : undefined,\n                ExpressionAttributeNames:\n                    Object.keys(expressionAttributeNames).length > 0\n                        ? expressionAttributeNames\n                        : undefined,\n                ExpressionAttributeValues:\n                    Object.keys(expressionAttributeValues).length > 0\n                        ? expressionAttributeValues\n                        : undefined,\n                Limit: limit,\n                ExclusiveStartKey: exclusiveStartKey,\n            })\n        );\n\n        return {\n            users: (response.Items || []) as User[],\n            nextCursor: response.LastEvaluatedKey\n                ? Buffer.from(JSON.stringify(response.LastEvaluatedKey)).toString('base64')\n                : undefined,\n        };\n    }\n\n    // ==================== Session Methods ====================\n\n    async createSession(session: Session): Promise<void> {\n        await this.client.send(\n            new PutCommand({\n                TableName: this.sessionsTableName,\n                Item: session,\n            })\n        );\n    }\n\n    async getSessionById(id: string): Promise<Session | null> {\n        const response = await this.client.send(\n            new GetCommand({\n                TableName: this.sessionsTableName,\n                Key: { id },\n            })\n        );\n\n        return response.Item as Session | null;\n    }\n\n    async getSessionsByUserId(userId: string): Promise<Session[]> {\n        const response = await this.client.send(\n            new QueryCommand({\n                TableName: this.sessionsTableName,\n                IndexName: 'UserIdIndex',\n                KeyConditionExpression: 'userId = :userId',\n                ExpressionAttributeValues: {\n                    ':userId': userId,\n                },\n            })\n        );\n\n        return (response.Items || []) as Session[];\n    }\n\n    async updateSession(id: string, updates: Partial<Session>): Promise<void> {\n        const toSet: Record<string, unknown> = {};\n\n        Object.entries(updates).forEach(([key, value]) => {\n            if (value !== undefined) {\n                toSet[key] = value;\n            }\n        });\n\n        if (Object.keys(toSet).length === 0) {\n            return;\n        }\n\n        const updateExpression = `SET ${Object.keys(toSet)\n            .map((key) => `#${key} = :${key}`)\n            .join(', ')}`;\n\n        const expressionAttributeNames = Object.keys(toSet).reduce(\n            (acc, key) => ({ ...acc, [`#${key}`]: key }),\n            {}\n        );\n\n        const expressionAttributeValues = Object.entries(toSet).reduce(\n            (acc, [key, value]) => ({ ...acc, [`:${key}`]: value }),\n            {}\n        );\n\n        await this.client.send(\n            new UpdateCommand({\n                TableName: this.sessionsTableName,\n                Key: { id },\n                UpdateExpression: updateExpression,\n                ExpressionAttributeNames: expressionAttributeNames,\n                ExpressionAttributeValues: expressionAttributeValues,\n            })\n        );\n    }\n\n    async deleteSession(id: string): Promise<void> {\n        await this.client.send(\n            new DeleteCommand({\n                TableName: this.sessionsTableName,\n                Key: { id },\n            })\n        );\n    }\n\n    async deleteAllUserSessions(userId: string): Promise<void> {\n        const sessions = await this.getSessionsByUserId(userId);\n\n        if (sessions.length === 0) {\n            return;\n        }\n\n        // Batch delete in chunks of 25 (DynamoDB limit)\n        const chunks = [];\n        for (let i = 0; i < sessions.length; i += 25) {\n            chunks.push(sessions.slice(i, i + 25));\n        }\n\n        for (const chunk of chunks) {\n            await this.client.send(\n                new BatchWriteCommand({\n                    RequestItems: {\n                        [this.sessionsTableName]: chunk.map((session) => ({\n                            DeleteRequest: {\n                                Key: { id: session.id },\n                            },\n                        })),\n                    },\n                })\n            );\n        }\n    }\n\n    async deleteExpiredSessions(): Promise<void> {\n        // Note: This requires a full table scan which is expensive.\n        // Consider using DynamoDB TTL instead for automatic expiration.\n        // This method is provided for manual cleanup if needed.\n        const now = Date.now();\n\n        const response = await this.client.send(\n            new QueryCommand({\n                TableName: this.sessionsTableName,\n                IndexName: 'ExpiresAtIndex',\n                KeyConditionExpression: 'expiresAt < :now',\n                ExpressionAttributeValues: {\n                    ':now': now,\n                },\n            })\n        );\n\n        const expiredSessions = (response.Items || []) as Session[];\n\n        if (expiredSessions.length === 0) {\n            return;\n        }\n\n        const chunks = [];\n        for (let i = 0; i < expiredSessions.length; i += 25) {\n            chunks.push(expiredSessions.slice(i, i + 25));\n        }\n\n        for (const chunk of chunks) {\n            await this.client.send(\n                new BatchWriteCommand({\n                    RequestItems: {\n                        [this.sessionsTableName]: chunk.map((session) => ({\n                            DeleteRequest: {\n                                Key: { id: session.id },\n                            },\n                        })),\n                    },\n                })\n            );\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,6BAA+B;AAC/B,0BASO;AAiBA,IAAM,0BAAN,MAA0D;AAAA,EAK7D,YAAY,QAAwB;AAChC,UAAM,WAAW,IAAI,sCAAe,EAAE,QAAQ,OAAO,OAAO,CAAC;AAC7D,SAAK,SAAS,2CAAuB,KAAK,UAAU,CAAC,CAAC;AACtD,SAAK,YAAY,OAAO;AACxB,SAAK,oBAAoB,OAAO;AAAA,EACpC;AAAA;AAAA,EAIA,MAAM,WAAW,MAA2B;AACxC,UAAM,KAAK,OAAO;AAAA,MACd,IAAI,+BAAW;AAAA,QACX,WAAW,KAAK;AAAA,QAChB,MAAM;AAAA,QACN,qBAAqB;AAAA,MACzB,CAAC;AAAA,IACL;AAAA,EACJ;AAAA,EAEA,MAAM,4BAA4B,oBAAkD;AAChF,UAAM,WAAW,MAAM,KAAK,OAAO;AAAA,MAC/B,IAAI,iCAAa;AAAA,QACb,WAAW,KAAK;AAAA,QAChB,WAAW;AAAA,QACX,wBAAwB;AAAA,QACxB,2BAA2B;AAAA,UACvB,UAAU;AAAA,QACd;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,WAAO,SAAS,QAAQ,CAAC;AAAA,EAC7B;AAAA,EAEA,MAAM,0BAA0B,kBAAgD;AAC5E,UAAM,WAAW,MAAM,KAAK,OAAO;AAAA,MAC/B,IAAI,iCAAa;AAAA,QACb,WAAW,KAAK;AAAA,QAChB,WAAW;AAAA,QACX,wBAAwB;AAAA,QACxB,2BAA2B;AAAA,UACvB,UAAU;AAAA,QACd;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,WAAO,SAAS,QAAQ,CAAC;AAAA,EAC7B;AAAA,EAEA,MAAM,YAAY,IAAkC;AAChD,UAAM,WAAW,MAAM,KAAK,OAAO;AAAA,MAC/B,IAAI,+BAAW;AAAA,QACX,WAAW,KAAK;AAAA,QAChB,KAAK,EAAE,GAAG;AAAA,MACd,CAAC;AAAA,IACL;AAEA,WAAO,SAAS;AAAA,EACpB;AAAA,EAEA,MAAM,eAAe,OAAqC;AACtD,UAAM,WAAW,MAAM,KAAK,OAAO;AAAA,MAC/B,IAAI,iCAAa;AAAA,QACb,WAAW,KAAK;AAAA,QAChB,WAAW;AAAA,QACX,wBAAwB;AAAA,QACxB,2BAA2B;AAAA,UACvB,UAAU;AAAA,QACd;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,WAAO,SAAS,QAAQ,CAAC;AAAA,EAC7B;AAAA,EAEA,MAAM,WAAW,IAAY,SAAuC;AAChE,UAAM,QAAiC,CAAC;AACxC,UAAM,WAAqB,CAAC;AAG5B,WAAO,QAAQ,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAC9C,UAAI,UAAU,QAAW;AACrB,iBAAS,KAAK,GAAG;AAAA,MACrB,OAAO;AACH,cAAM,GAAG,IAAI;AAAA,MACjB;AAAA,IACJ,CAAC;AAGD,QAAI,OAAO,KAAK,KAAK,EAAE,WAAW,KAAK,SAAS,WAAW,GAAG;AAC1D;AAAA,IACJ;AAGA,UAAM,UACF,OAAO,KAAK,KAAK,EAAE,SAAS,IACtB,OAAO,OAAO,KAAK,KAAK,EACnB,IAAI,CAAC,QAAQ,IAAI,GAAG,OAAO,GAAG,EAAE,EAChC,KAAK,IAAI,CAAC,KACf;AAEV,UAAM,aACF,SAAS,SAAS,IAAI,UAAU,SAAS,IAAI,CAAC,QAAQ,IAAI,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,KAAK;AAEpF,UAAM,mBAAmB,CAAC,SAAS,UAAU,EAAE,OAAO,OAAO,EAAE,KAAK,GAAG;AAGvE,UAAM,2BAA2B,CAAC,GAAG,OAAO,KAAK,KAAK,GAAG,GAAG,QAAQ,EAAE;AAAA,MAClE,CAAC,KAAK,SAAS,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI;AAAA,MAC1C,CAAC;AAAA,IACL;AAGA,UAAM,4BAA4B,OAAO,QAAQ,KAAK,EAAE;AAAA,MACpD,CAAC,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,MAAM;AAAA,MACrD,CAAC;AAAA,IACL;AAEA,UAAM,KAAK,OAAO;AAAA,MACd,IAAI,kCAAc;AAAA,QACd,WAAW,KAAK;AAAA,QAChB,KAAK,EAAE,GAAG;AAAA,QACV,kBAAkB;AAAA,QAClB,0BAA0B;AAAA,QAC1B,GAAI,OAAO,KAAK,yBAAyB,EAAE,SAAS,KAAK;AAAA,UACrD,2BAA2B;AAAA,QAC/B;AAAA,MACJ,CAAC;AAAA,IACL;AAAA,EACJ;AAAA,EAEA,MAAM,WAAW,IAA2B;AAExC,UAAM,KAAK,sBAAsB,EAAE;AAEnC,UAAM,KAAK,OAAO;AAAA,MACd,IAAI,kCAAc;AAAA,QACd,WAAW,KAAK;AAAA,QAChB,KAAK,EAAE,GAAG;AAAA,MACd,CAAC;AAAA,IACL;AAAA,EACJ;AAAA,EAEA,MAAM,UAAU,QAAoB,UAA4B,CAAC,GAA6B;AAC1F,UAAM,QAAQ,QAAQ,SAAS;AAC/B,UAAM,oBAAoB,QAAQ,SAC5B,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE,SAAS,CAAC,IAC3D;AAGN,QACI,OAAO,SACP,CAAC,OAAO,iBACR,CAAC,OAAO,SACR,CAAC,OAAO,cACR,OAAO,oBAAoB,QAC7B;AACE,YAAMA,YAAW,MAAM,KAAK,OAAO;AAAA,QAC/B,IAAI,iCAAa;AAAA,UACb,WAAW,KAAK;AAAA,UAChB,WAAW;AAAA,UACX,wBAAwB;AAAA,UACxB,2BAA2B,EAAE,UAAU,OAAO,MAAM;AAAA,UACpD,OAAO;AAAA,UACP,mBAAmB;AAAA,QACvB,CAAC;AAAA,MACL;AAEA,aAAO;AAAA,QACH,OAAQA,UAAS,SAAS,CAAC;AAAA,QAC3B,YAAYA,UAAS,mBACf,OAAO,KAAK,KAAK,UAAUA,UAAS,gBAAgB,CAAC,EAAE,SAAS,QAAQ,IACxE;AAAA,MACV;AAAA,IACJ;AAGA,UAAM,oBAA8B,CAAC;AACrC,UAAM,2BAAmD,CAAC;AAC1D,UAAM,4BAAqD,CAAC;AAE5D,QAAI,OAAO,OAAO;AACd,wBAAkB,KAAK,gBAAgB;AACvC,gCAA0B,QAAQ,IAAI,OAAO;AAAA,IACjD;AAEA,QAAI,OAAO,eAAe;AACtB,wBAAkB,KAAK,iCAAiC;AACxD,gCAA0B,gBAAgB,IAAI,OAAO;AAAA,IACzD;AAEA,QAAI,OAAO,oBAAoB,QAAW;AACtC,wBAAkB,KAAK,oCAAoC;AAC3D,gCAA0B,kBAAkB,IAAI,OAAO;AAAA,IAC3D;AAGA,QAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AACzC,aAAO,MAAM,QAAQ,CAAC,MAAgB,UAAkB;AACpD,0BAAkB,KAAK,yBAAyB,KAAK,GAAG;AACxD,kCAA0B,QAAQ,KAAK,EAAE,IAAI;AAAA,MACjD,CAAC;AACD,+BAAyB,QAAQ,IAAI;AAAA,IACzC;AAGA,QAAI,OAAO,cAAc,OAAO,WAAW,SAAS,GAAG;AACnD,YAAM,oBAAoB,OAAO,WAAW,IAAI,CAAC,MAAgB,UAAkB;AAC/E,kCAA0B,WAAW,KAAK,EAAE,IAAI;AAChD,eAAO,4BAA4B,KAAK;AAAA,MAC5C,CAAC;AACD,wBAAkB,KAAK,IAAI,kBAAkB,KAAK,MAAM,CAAC,GAAG;AAC5D,UAAI,CAAC,yBAAyB,QAAQ,GAAG;AACrC,iCAAyB,QAAQ,IAAI;AAAA,MACzC;AAAA,IACJ;AAEA,UAAM,WAAW,MAAM,KAAK,OAAO;AAAA,MAC/B,IAAI,gCAAY;AAAA,QACZ,WAAW,KAAK;AAAA,QAChB,kBACI,kBAAkB,SAAS,IAAI,kBAAkB,KAAK,OAAO,IAAI;AAAA,QACrE,0BACI,OAAO,KAAK,wBAAwB,EAAE,SAAS,IACzC,2BACA;AAAA,QACV,2BACI,OAAO,KAAK,yBAAyB,EAAE,SAAS,IAC1C,4BACA;AAAA,QACV,OAAO;AAAA,QACP,mBAAmB;AAAA,MACvB,CAAC;AAAA,IACL;AAEA,WAAO;AAAA,MACH,OAAQ,SAAS,SAAS,CAAC;AAAA,MAC3B,YAAY,SAAS,mBACf,OAAO,KAAK,KAAK,UAAU,SAAS,gBAAgB,CAAC,EAAE,SAAS,QAAQ,IACxE;AAAA,IACV;AAAA,EACJ;AAAA;AAAA,EAIA,MAAM,cAAc,SAAiC;AACjD,UAAM,KAAK,OAAO;AAAA,MACd,IAAI,+BAAW;AAAA,QACX,WAAW,KAAK;AAAA,QAChB,MAAM;AAAA,MACV,CAAC;AAAA,IACL;AAAA,EACJ;AAAA,EAEA,MAAM,eAAe,IAAqC;AACtD,UAAM,WAAW,MAAM,KAAK,OAAO;AAAA,MAC/B,IAAI,+BAAW;AAAA,QACX,WAAW,KAAK;AAAA,QAChB,KAAK,EAAE,GAAG;AAAA,MACd,CAAC;AAAA,IACL;AAEA,WAAO,SAAS;AAAA,EACpB;AAAA,EAEA,MAAM,oBAAoB,QAAoC;AAC1D,UAAM,WAAW,MAAM,KAAK,OAAO;AAAA,MAC/B,IAAI,iCAAa;AAAA,QACb,WAAW,KAAK;AAAA,QAChB,WAAW;AAAA,QACX,wBAAwB;AAAA,QACxB,2BAA2B;AAAA,UACvB,WAAW;AAAA,QACf;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,WAAQ,SAAS,SAAS,CAAC;AAAA,EAC/B;AAAA,EAEA,MAAM,cAAc,IAAY,SAA0C;AACtE,UAAM,QAAiC,CAAC;AAExC,WAAO,QAAQ,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAC9C,UAAI,UAAU,QAAW;AACrB,cAAM,GAAG,IAAI;AAAA,MACjB;AAAA,IACJ,CAAC;AAED,QAAI,OAAO,KAAK,KAAK,EAAE,WAAW,GAAG;AACjC;AAAA,IACJ;AAEA,UAAM,mBAAmB,OAAO,OAAO,KAAK,KAAK,EAC5C,IAAI,CAAC,QAAQ,IAAI,GAAG,OAAO,GAAG,EAAE,EAChC,KAAK,IAAI,CAAC;AAEf,UAAM,2BAA2B,OAAO,KAAK,KAAK,EAAE;AAAA,MAChD,CAAC,KAAK,SAAS,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI;AAAA,MAC1C,CAAC;AAAA,IACL;AAEA,UAAM,4BAA4B,OAAO,QAAQ,KAAK,EAAE;AAAA,MACpD,CAAC,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,MAAM;AAAA,MACrD,CAAC;AAAA,IACL;AAEA,UAAM,KAAK,OAAO;AAAA,MACd,IAAI,kCAAc;AAAA,QACd,WAAW,KAAK;AAAA,QAChB,KAAK,EAAE,GAAG;AAAA,QACV,kBAAkB;AAAA,QAClB,0BAA0B;AAAA,QAC1B,2BAA2B;AAAA,MAC/B,CAAC;AAAA,IACL;AAAA,EACJ;AAAA,EAEA,MAAM,cAAc,IAA2B;AAC3C,UAAM,KAAK,OAAO;AAAA,MACd,IAAI,kCAAc;AAAA,QACd,WAAW,KAAK;AAAA,QAChB,KAAK,EAAE,GAAG;AAAA,MACd,CAAC;AAAA,IACL;AAAA,EACJ;AAAA,EAEA,MAAM,sBAAsB,QAA+B;AACvD,UAAM,WAAW,MAAM,KAAK,oBAAoB,MAAM;AAEtD,QAAI,SAAS,WAAW,GAAG;AACvB;AAAA,IACJ;AAGA,UAAM,SAAS,CAAC;AAChB,aAAS,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK,IAAI;AAC1C,aAAO,KAAK,SAAS,MAAM,GAAG,IAAI,EAAE,CAAC;AAAA,IACzC;AAEA,eAAW,SAAS,QAAQ;AACxB,YAAM,KAAK,OAAO;AAAA,QACd,IAAI,sCAAkB;AAAA,UAClB,cAAc;AAAA,YACV,CAAC,KAAK,iBAAiB,GAAG,MAAM,IAAI,CAAC,aAAa;AAAA,cAC9C,eAAe;AAAA,gBACX,KAAK,EAAE,IAAI,QAAQ,GAAG;AAAA,cAC1B;AAAA,YACJ,EAAE;AAAA,UACN;AAAA,QACJ,CAAC;AAAA,MACL;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,MAAM,wBAAuC;AAIzC,UAAM,MAAM,KAAK,IAAI;AAErB,UAAM,WAAW,MAAM,KAAK,OAAO;AAAA,MAC/B,IAAI,iCAAa;AAAA,QACb,WAAW,KAAK;AAAA,QAChB,WAAW;AAAA,QACX,wBAAwB;AAAA,QACxB,2BAA2B;AAAA,UACvB,QAAQ;AAAA,QACZ;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,UAAM,kBAAmB,SAAS,SAAS,CAAC;AAE5C,QAAI,gBAAgB,WAAW,GAAG;AAC9B;AAAA,IACJ;AAEA,UAAM,SAAS,CAAC;AAChB,aAAS,IAAI,GAAG,IAAI,gBAAgB,QAAQ,KAAK,IAAI;AACjD,aAAO,KAAK,gBAAgB,MAAM,GAAG,IAAI,EAAE,CAAC;AAAA,IAChD;AAEA,eAAW,SAAS,QAAQ;AACxB,YAAM,KAAK,OAAO;AAAA,QACd,IAAI,sCAAkB;AAAA,UAClB,cAAc;AAAA,YACV,CAAC,KAAK,iBAAiB,GAAG,MAAM,IAAI,CAAC,aAAa;AAAA,cAC9C,eAAe;AAAA,gBACX,KAAK,EAAE,IAAI,QAAQ,GAAG;AAAA,cAC1B;AAAA,YACJ,EAAE;AAAA,UACN;AAAA,QACJ,CAAC;AAAA,MACL;AAAA,IACJ;AAAA,EACJ;AACJ;","names":["response"]}

package/dist/index.mjs

@@ -0,0 +1,318 @@
+// src/dynamodb.ts
+import { DynamoDBClient } from "@aws-sdk/client-dynamodb";
+import {
+  DynamoDBDocumentClient,
+  PutCommand,
+  GetCommand,
+  UpdateCommand,
+  DeleteCommand,
+  QueryCommand,
+  ScanCommand,
+  BatchWriteCommand
+} from "@aws-sdk/lib-dynamodb";
+var DynamoDBStorageProvider = class {
+  constructor(config) {
+    const dbClient = new DynamoDBClient({ region: config.region });
+    this.client = DynamoDBDocumentClient.from(dbClient, {});
+    this.tableName = config.tableName;
+    this.sessionsTableName = config.sessionsTableName;
+  }
+  // ==================== User Methods ====================
+  async createUser(user) {
+    await this.client.send(
+      new PutCommand({
+        TableName: this.tableName,
+        Item: user,
+        ConditionExpression: "attribute_not_exists(email)"
+      })
+    );
+  }
+  async getUserByResetPasswordToken(resetPasswordToken) {
+    const response = await this.client.send(
+      new QueryCommand({
+        TableName: this.tableName,
+        IndexName: "ResetPasswordTokenIndex",
+        KeyConditionExpression: "resetPasswordToken = :token",
+        ExpressionAttributeValues: {
+          ":token": resetPasswordToken
+        }
+      })
+    );
+    return response.Items?.[0];
+  }
+  async getUserByVerifyEmailToken(verifyEmailToken) {
+    const response = await this.client.send(
+      new QueryCommand({
+        TableName: this.tableName,
+        IndexName: "VerifyEmailTokenIndex",
+        KeyConditionExpression: "verificationToken = :token",
+        ExpressionAttributeValues: {
+          ":token": verifyEmailToken
+        }
+      })
+    );
+    return response.Items?.[0];
+  }
+  async getUserById(id) {
+    const response = await this.client.send(
+      new GetCommand({
+        TableName: this.tableName,
+        Key: { id }
+      })
+    );
+    return response.Item;
+  }
+  async getUserByEmail(email) {
+    const response = await this.client.send(
+      new QueryCommand({
+        TableName: this.tableName,
+        IndexName: "EmailIndex",
+        KeyConditionExpression: "email = :email",
+        ExpressionAttributeValues: {
+          ":email": email
+        }
+      })
+    );
+    return response.Items?.[0];
+  }
+  async updateUser(id, updates) {
+    const toSet = {};
+    const toRemove = [];
+    Object.entries(updates).forEach(([key, value]) => {
+      if (value === void 0) {
+        toRemove.push(key);
+      } else {
+        toSet[key] = value;
+      }
+    });
+    if (Object.keys(toSet).length === 0 && toRemove.length === 0) {
+      return;
+    }
+    const setPart = Object.keys(toSet).length > 0 ? `SET ${Object.keys(toSet).map((key) => `#${key} = :${key}`).join(", ")}` : "";
+    const removePart = toRemove.length > 0 ? `REMOVE ${toRemove.map((key) => `#${key}`).join(", ")}` : "";
+    const updateExpression = [setPart, removePart].filter(Boolean).join(" ");
+    const expressionAttributeNames = [...Object.keys(toSet), ...toRemove].reduce(
+      (acc, key) => ({ ...acc, [`#${key}`]: key }),
+      {}
+    );
+    const expressionAttributeValues = Object.entries(toSet).reduce(
+      (acc, [key, value]) => ({ ...acc, [`:${key}`]: value }),
+      {}
+    );
+    await this.client.send(
+      new UpdateCommand({
+        TableName: this.tableName,
+        Key: { id },
+        UpdateExpression: updateExpression,
+        ExpressionAttributeNames: expressionAttributeNames,
+        ...Object.keys(expressionAttributeValues).length > 0 && {
+          ExpressionAttributeValues: expressionAttributeValues
+        }
+      })
+    );
+  }
+  async deleteUser(id) {
+    await this.deleteAllUserSessions(id);
+    await this.client.send(
+      new DeleteCommand({
+        TableName: this.tableName,
+        Key: { id }
+      })
+    );
+  }
+  async findUsers(filter, options = {}) {
+    const limit = options.limit ?? 50;
+    const exclusiveStartKey = options.cursor ? JSON.parse(Buffer.from(options.cursor, "base64").toString()) : void 0;
+    if (filter.email && !filter.emailContains && !filter.roles && !filter.hasAnyRole && filter.isEmailVerified === void 0) {
+      const response2 = await this.client.send(
+        new QueryCommand({
+          TableName: this.tableName,
+          IndexName: "EmailIndex",
+          KeyConditionExpression: "email = :email",
+          ExpressionAttributeValues: { ":email": filter.email },
+          Limit: limit,
+          ExclusiveStartKey: exclusiveStartKey
+        })
+      );
+      return {
+        users: response2.Items || [],
+        nextCursor: response2.LastEvaluatedKey ? Buffer.from(JSON.stringify(response2.LastEvaluatedKey)).toString("base64") : void 0
+      };
+    }
+    const filterExpressions = [];
+    const expressionAttributeNames = {};
+    const expressionAttributeValues = {};
+    if (filter.email) {
+      filterExpressions.push("email = :email");
+      expressionAttributeValues[":email"] = filter.email;
+    }
+    if (filter.emailContains) {
+      filterExpressions.push("contains(email, :emailContains)");
+      expressionAttributeValues[":emailContains"] = filter.emailContains;
+    }
+    if (filter.isEmailVerified !== void 0) {
+      filterExpressions.push("isEmailVerified = :isEmailVerified");
+      expressionAttributeValues[":isEmailVerified"] = filter.isEmailVerified;
+    }
+    if (filter.roles && filter.roles.length > 0) {
+      filter.roles.forEach((role, index) => {
+        filterExpressions.push(`contains(#roles, :role${index})`);
+        expressionAttributeValues[`:role${index}`] = role;
+      });
+      expressionAttributeNames["#roles"] = "roles";
+    }
+    if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {
+      const anyRoleConditions = filter.hasAnyRole.map((role, index) => {
+        expressionAttributeValues[`:anyRole${index}`] = role;
+        return `contains(#roles, :anyRole${index})`;
+      });
+      filterExpressions.push(`(${anyRoleConditions.join(" OR ")})`);
+      if (!expressionAttributeNames["#roles"]) {
+        expressionAttributeNames["#roles"] = "roles";
+      }
+    }
+    const response = await this.client.send(
+      new ScanCommand({
+        TableName: this.tableName,
+        FilterExpression: filterExpressions.length > 0 ? filterExpressions.join(" AND ") : void 0,
+        ExpressionAttributeNames: Object.keys(expressionAttributeNames).length > 0 ? expressionAttributeNames : void 0,
+        ExpressionAttributeValues: Object.keys(expressionAttributeValues).length > 0 ? expressionAttributeValues : void 0,
+        Limit: limit,
+        ExclusiveStartKey: exclusiveStartKey
+      })
+    );
+    return {
+      users: response.Items || [],
+      nextCursor: response.LastEvaluatedKey ? Buffer.from(JSON.stringify(response.LastEvaluatedKey)).toString("base64") : void 0
+    };
+  }
+  // ==================== Session Methods ====================
+  async createSession(session) {
+    await this.client.send(
+      new PutCommand({
+        TableName: this.sessionsTableName,
+        Item: session
+      })
+    );
+  }
+  async getSessionById(id) {
+    const response = await this.client.send(
+      new GetCommand({
+        TableName: this.sessionsTableName,
+        Key: { id }
+      })
+    );
+    return response.Item;
+  }
+  async getSessionsByUserId(userId) {
+    const response = await this.client.send(
+      new QueryCommand({
+        TableName: this.sessionsTableName,
+        IndexName: "UserIdIndex",
+        KeyConditionExpression: "userId = :userId",
+        ExpressionAttributeValues: {
+          ":userId": userId
+        }
+      })
+    );
+    return response.Items || [];
+  }
+  async updateSession(id, updates) {
+    const toSet = {};
+    Object.entries(updates).forEach(([key, value]) => {
+      if (value !== void 0) {
+        toSet[key] = value;
+      }
+    });
+    if (Object.keys(toSet).length === 0) {
+      return;
+    }
+    const updateExpression = `SET ${Object.keys(toSet).map((key) => `#${key} = :${key}`).join(", ")}`;
+    const expressionAttributeNames = Object.keys(toSet).reduce(
+      (acc, key) => ({ ...acc, [`#${key}`]: key }),
+      {}
+    );
+    const expressionAttributeValues = Object.entries(toSet).reduce(
+      (acc, [key, value]) => ({ ...acc, [`:${key}`]: value }),
+      {}
+    );
+    await this.client.send(
+      new UpdateCommand({
+        TableName: this.sessionsTableName,
+        Key: { id },
+        UpdateExpression: updateExpression,
+        ExpressionAttributeNames: expressionAttributeNames,
+        ExpressionAttributeValues: expressionAttributeValues
+      })
+    );
+  }
+  async deleteSession(id) {
+    await this.client.send(
+      new DeleteCommand({
+        TableName: this.sessionsTableName,
+        Key: { id }
+      })
+    );
+  }
+  async deleteAllUserSessions(userId) {
+    const sessions = await this.getSessionsByUserId(userId);
+    if (sessions.length === 0) {
+      return;
+    }
+    const chunks = [];
+    for (let i = 0; i < sessions.length; i += 25) {
+      chunks.push(sessions.slice(i, i + 25));
+    }
+    for (const chunk of chunks) {
+      await this.client.send(
+        new BatchWriteCommand({
+          RequestItems: {
+            [this.sessionsTableName]: chunk.map((session) => ({
+              DeleteRequest: {
+                Key: { id: session.id }
+              }
+            }))
+          }
+        })
+      );
+    }
+  }
+  async deleteExpiredSessions() {
+    const now = Date.now();
+    const response = await this.client.send(
+      new QueryCommand({
+        TableName: this.sessionsTableName,
+        IndexName: "ExpiresAtIndex",
+        KeyConditionExpression: "expiresAt < :now",
+        ExpressionAttributeValues: {
+          ":now": now
+        }
+      })
+    );
+    const expiredSessions = response.Items || [];
+    if (expiredSessions.length === 0) {
+      return;
+    }
+    const chunks = [];
+    for (let i = 0; i < expiredSessions.length; i += 25) {
+      chunks.push(expiredSessions.slice(i, i + 25));
+    }
+    for (const chunk of chunks) {
+      await this.client.send(
+        new BatchWriteCommand({
+          RequestItems: {
+            [this.sessionsTableName]: chunk.map((session) => ({
+              DeleteRequest: {
+                Key: { id: session.id }
+              }
+            }))
+          }
+        })
+      );
+    }
+  }
+};
+export {
+  DynamoDBStorageProvider
+};
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/dynamodb.ts"],"sourcesContent":["import { DynamoDBClient } from '@aws-sdk/client-dynamodb';\nimport {\n    DynamoDBDocumentClient,\n    PutCommand,\n    GetCommand,\n    UpdateCommand,\n    DeleteCommand,\n    QueryCommand,\n    ScanCommand,\n    BatchWriteCommand,\n} from '@aws-sdk/lib-dynamodb';\nimport type {\n    IStorageProvider,\n    User,\n    Session,\n    UserFilter,\n    FindUsersOptions,\n    FindUsersResult,\n    UserRole,\n} from '@xcelsior/auth';\n\nexport interface DynamoDBConfig {\n    tableName: string;\n    sessionsTableName: string;\n    region: string;\n}\n\nexport class DynamoDBStorageProvider implements IStorageProvider {\n    private client: DynamoDBDocumentClient;\n    private tableName: string;\n    private sessionsTableName: string;\n\n    constructor(config: DynamoDBConfig) {\n        const dbClient = new DynamoDBClient({ region: config.region });\n        this.client = DynamoDBDocumentClient.from(dbClient, {});\n        this.tableName = config.tableName;\n        this.sessionsTableName = config.sessionsTableName;\n    }\n\n    // ==================== User Methods ====================\n\n    async createUser(user: User): Promise<void> {\n        await this.client.send(\n            new PutCommand({\n                TableName: this.tableName,\n                Item: user,\n                ConditionExpression: 'attribute_not_exists(email)',\n            })\n        );\n    }\n\n    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null> {\n        const response = await this.client.send(\n            new QueryCommand({\n                TableName: this.tableName,\n                IndexName: 'ResetPasswordTokenIndex',\n                KeyConditionExpression: 'resetPasswordToken = :token',\n                ExpressionAttributeValues: {\n                    ':token': resetPasswordToken,\n                },\n            })\n        );\n\n        return response.Items?.[0] as User | null;\n    }\n\n    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null> {\n        const response = await this.client.send(\n            new QueryCommand({\n                TableName: this.tableName,\n                IndexName: 'VerifyEmailTokenIndex',\n                KeyConditionExpression: 'verificationToken = :token',\n                ExpressionAttributeValues: {\n                    ':token': verifyEmailToken,\n                },\n            })\n        );\n\n        return response.Items?.[0] as User | null;\n    }\n\n    async getUserById(id: string): Promise<User | null> {\n        const response = await this.client.send(\n            new GetCommand({\n                TableName: this.tableName,\n                Key: { id },\n            })\n        );\n\n        return response.Item as User | null;\n    }\n\n    async getUserByEmail(email: string): Promise<User | null> {\n        const response = await this.client.send(\n            new QueryCommand({\n                TableName: this.tableName,\n                IndexName: 'EmailIndex',\n                KeyConditionExpression: 'email = :email',\n                ExpressionAttributeValues: {\n                    ':email': email,\n                },\n            })\n        );\n\n        return response.Items?.[0] as User | null;\n    }\n\n    async updateUser(id: string, updates: Partial<User>): Promise<void> {\n        const toSet: Record<string, unknown> = {};\n        const toRemove: string[] = [];\n\n        // Separate attributes to set and remove\n        Object.entries(updates).forEach(([key, value]) => {\n            if (value === undefined) {\n                toRemove.push(key);\n            } else {\n                toSet[key] = value;\n            }\n        });\n\n        // If no updates at all, return early\n        if (Object.keys(toSet).length === 0 && toRemove.length === 0) {\n            return;\n        }\n\n        // Build the update expression\n        const setPart =\n            Object.keys(toSet).length > 0\n                ? `SET ${Object.keys(toSet)\n                      .map((key) => `#${key} = :${key}`)\n                      .join(', ')}`\n                : '';\n\n        const removePart =\n            toRemove.length > 0 ? `REMOVE ${toRemove.map((key) => `#${key}`).join(', ')}` : '';\n\n        const updateExpression = [setPart, removePart].filter(Boolean).join(' ');\n\n        // Build expression attribute names (needed for both SET and REMOVE)\n        const expressionAttributeNames = [...Object.keys(toSet), ...toRemove].reduce(\n            (acc, key) => ({ ...acc, [`#${key}`]: key }),\n            {}\n        );\n\n        // Build expression attribute values (only needed for SET)\n        const expressionAttributeValues = Object.entries(toSet).reduce(\n            (acc, [key, value]) => ({ ...acc, [`:${key}`]: value }),\n            {}\n        );\n\n        await this.client.send(\n            new UpdateCommand({\n                TableName: this.tableName,\n                Key: { id },\n                UpdateExpression: updateExpression,\n                ExpressionAttributeNames: expressionAttributeNames,\n                ...(Object.keys(expressionAttributeValues).length > 0 && {\n                    ExpressionAttributeValues: expressionAttributeValues,\n                }),\n            })\n        );\n    }\n\n    async deleteUser(id: string): Promise<void> {\n        // Delete all user sessions first\n        await this.deleteAllUserSessions(id);\n\n        await this.client.send(\n            new DeleteCommand({\n                TableName: this.tableName,\n                Key: { id },\n            })\n        );\n    }\n\n    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult> {\n        const limit = options.limit ?? 50;\n        const exclusiveStartKey = options.cursor\n            ? JSON.parse(Buffer.from(options.cursor, 'base64').toString())\n            : undefined;\n\n        // If filtering by exact email only, use the EmailIndex (most performant)\n        if (\n            filter.email &&\n            !filter.emailContains &&\n            !filter.roles &&\n            !filter.hasAnyRole &&\n            filter.isEmailVerified === undefined\n        ) {\n            const response = await this.client.send(\n                new QueryCommand({\n                    TableName: this.tableName,\n                    IndexName: 'EmailIndex',\n                    KeyConditionExpression: 'email = :email',\n                    ExpressionAttributeValues: { ':email': filter.email },\n                    Limit: limit,\n                    ExclusiveStartKey: exclusiveStartKey,\n                })\n            );\n\n            return {\n                users: (response.Items || []) as User[],\n                nextCursor: response.LastEvaluatedKey\n                    ? Buffer.from(JSON.stringify(response.LastEvaluatedKey)).toString('base64')\n                    : undefined,\n            };\n        }\n\n        // For other filters, use Scan with FilterExpression\n        const filterExpressions: string[] = [];\n        const expressionAttributeNames: Record<string, string> = {};\n        const expressionAttributeValues: Record<string, unknown> = {};\n\n        if (filter.email) {\n            filterExpressions.push('email = :email');\n            expressionAttributeValues[':email'] = filter.email;\n        }\n\n        if (filter.emailContains) {\n            filterExpressions.push('contains(email, :emailContains)');\n            expressionAttributeValues[':emailContains'] = filter.emailContains;\n        }\n\n        if (filter.isEmailVerified !== undefined) {\n            filterExpressions.push('isEmailVerified = :isEmailVerified');\n            expressionAttributeValues[':isEmailVerified'] = filter.isEmailVerified;\n        }\n\n        // For roles (user must have ALL specified roles)\n        if (filter.roles && filter.roles.length > 0) {\n            filter.roles.forEach((role: UserRole, index: number) => {\n                filterExpressions.push(`contains(#roles, :role${index})`);\n                expressionAttributeValues[`:role${index}`] = role;\n            });\n            expressionAttributeNames['#roles'] = 'roles';\n        }\n\n        // For hasAnyRole (user must have at least ONE)\n        if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {\n            const anyRoleConditions = filter.hasAnyRole.map((role: UserRole, index: number) => {\n                expressionAttributeValues[`:anyRole${index}`] = role;\n                return `contains(#roles, :anyRole${index})`;\n            });\n            filterExpressions.push(`(${anyRoleConditions.join(' OR ')})`);\n            if (!expressionAttributeNames['#roles']) {\n                expressionAttributeNames['#roles'] = 'roles';\n            }\n        }\n\n        const response = await this.client.send(\n            new ScanCommand({\n                TableName: this.tableName,\n                FilterExpression:\n                    filterExpressions.length > 0 ? filterExpressions.join(' AND ') : undefined,\n                ExpressionAttributeNames:\n                    Object.keys(expressionAttributeNames).length > 0\n                        ? expressionAttributeNames\n                        : undefined,\n                ExpressionAttributeValues:\n                    Object.keys(expressionAttributeValues).length > 0\n                        ? expressionAttributeValues\n                        : undefined,\n                Limit: limit,\n                ExclusiveStartKey: exclusiveStartKey,\n            })\n        );\n\n        return {\n            users: (response.Items || []) as User[],\n            nextCursor: response.LastEvaluatedKey\n                ? Buffer.from(JSON.stringify(response.LastEvaluatedKey)).toString('base64')\n                : undefined,\n        };\n    }\n\n    // ==================== Session Methods ====================\n\n    async createSession(session: Session): Promise<void> {\n        await this.client.send(\n            new PutCommand({\n                TableName: this.sessionsTableName,\n                Item: session,\n            })\n        );\n    }\n\n    async getSessionById(id: string): Promise<Session | null> {\n        const response = await this.client.send(\n            new GetCommand({\n                TableName: this.sessionsTableName,\n                Key: { id },\n            })\n        );\n\n        return response.Item as Session | null;\n    }\n\n    async getSessionsByUserId(userId: string): Promise<Session[]> {\n        const response = await this.client.send(\n            new QueryCommand({\n                TableName: this.sessionsTableName,\n                IndexName: 'UserIdIndex',\n                KeyConditionExpression: 'userId = :userId',\n                ExpressionAttributeValues: {\n                    ':userId': userId,\n                },\n            })\n        );\n\n        return (response.Items || []) as Session[];\n    }\n\n    async updateSession(id: string, updates: Partial<Session>): Promise<void> {\n        const toSet: Record<string, unknown> = {};\n\n        Object.entries(updates).forEach(([key, value]) => {\n            if (value !== undefined) {\n                toSet[key] = value;\n            }\n        });\n\n        if (Object.keys(toSet).length === 0) {\n            return;\n        }\n\n        const updateExpression = `SET ${Object.keys(toSet)\n            .map((key) => `#${key} = :${key}`)\n            .join(', ')}`;\n\n        const expressionAttributeNames = Object.keys(toSet).reduce(\n            (acc, key) => ({ ...acc, [`#${key}`]: key }),\n            {}\n        );\n\n        const expressionAttributeValues = Object.entries(toSet).reduce(\n            (acc, [key, value]) => ({ ...acc, [`:${key}`]: value }),\n            {}\n        );\n\n        await this.client.send(\n            new UpdateCommand({\n                TableName: this.sessionsTableName,\n                Key: { id },\n                UpdateExpression: updateExpression,\n                ExpressionAttributeNames: expressionAttributeNames,\n                ExpressionAttributeValues: expressionAttributeValues,\n            })\n        );\n    }\n\n    async deleteSession(id: string): Promise<void> {\n        await this.client.send(\n            new DeleteCommand({\n                TableName: this.sessionsTableName,\n                Key: { id },\n            })\n        );\n    }\n\n    async deleteAllUserSessions(userId: string): Promise<void> {\n        const sessions = await this.getSessionsByUserId(userId);\n\n        if (sessions.length === 0) {\n            return;\n        }\n\n        // Batch delete in chunks of 25 (DynamoDB limit)\n        const chunks = [];\n        for (let i = 0; i < sessions.length; i += 25) {\n            chunks.push(sessions.slice(i, i + 25));\n        }\n\n        for (const chunk of chunks) {\n            await this.client.send(\n                new BatchWriteCommand({\n                    RequestItems: {\n                        [this.sessionsTableName]: chunk.map((session) => ({\n                            DeleteRequest: {\n                                Key: { id: session.id },\n                            },\n                        })),\n                    },\n                })\n            );\n        }\n    }\n\n    async deleteExpiredSessions(): Promise<void> {\n        // Note: This requires a full table scan which is expensive.\n        // Consider using DynamoDB TTL instead for automatic expiration.\n        // This method is provided for manual cleanup if needed.\n        const now = Date.now();\n\n        const response = await this.client.send(\n            new QueryCommand({\n                TableName: this.sessionsTableName,\n                IndexName: 'ExpiresAtIndex',\n                KeyConditionExpression: 'expiresAt < :now',\n                ExpressionAttributeValues: {\n                    ':now': now,\n                },\n            })\n        );\n\n        const expiredSessions = (response.Items || []) as Session[];\n\n        if (expiredSessions.length === 0) {\n            return;\n        }\n\n        const chunks = [];\n        for (let i = 0; i < expiredSessions.length; i += 25) {\n            chunks.push(expiredSessions.slice(i, i + 25));\n        }\n\n        for (const chunk of chunks) {\n            await this.client.send(\n                new BatchWriteCommand({\n                    RequestItems: {\n                        [this.sessionsTableName]: chunk.map((session) => ({\n                            DeleteRequest: {\n                                Key: { id: session.id },\n                            },\n                        })),\n                    },\n                })\n            );\n        }\n    }\n}\n"],"mappings":";AAAA,SAAS,sBAAsB;AAC/B;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACG;AAiBA,IAAM,0BAAN,MAA0D;AAAA,EAK7D,YAAY,QAAwB;AAChC,UAAM,WAAW,IAAI,eAAe,EAAE,QAAQ,OAAO,OAAO,CAAC;AAC7D,SAAK,SAAS,uBAAuB,KAAK,UAAU,CAAC,CAAC;AACtD,SAAK,YAAY,OAAO;AACxB,SAAK,oBAAoB,OAAO;AAAA,EACpC;AAAA;AAAA,EAIA,MAAM,WAAW,MAA2B;AACxC,UAAM,KAAK,OAAO;AAAA,MACd,IAAI,WAAW;AAAA,QACX,WAAW,KAAK;AAAA,QAChB,MAAM;AAAA,QACN,qBAAqB;AAAA,MACzB,CAAC;AAAA,IACL;AAAA,EACJ;AAAA,EAEA,MAAM,4BAA4B,oBAAkD;AAChF,UAAM,WAAW,MAAM,KAAK,OAAO;AAAA,MAC/B,IAAI,aAAa;AAAA,QACb,WAAW,KAAK;AAAA,QAChB,WAAW;AAAA,QACX,wBAAwB;AAAA,QACxB,2BAA2B;AAAA,UACvB,UAAU;AAAA,QACd;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,WAAO,SAAS,QAAQ,CAAC;AAAA,EAC7B;AAAA,EAEA,MAAM,0BAA0B,kBAAgD;AAC5E,UAAM,WAAW,MAAM,KAAK,OAAO;AAAA,MAC/B,IAAI,aAAa;AAAA,QACb,WAAW,KAAK;AAAA,QAChB,WAAW;AAAA,QACX,wBAAwB;AAAA,QACxB,2BAA2B;AAAA,UACvB,UAAU;AAAA,QACd;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,WAAO,SAAS,QAAQ,CAAC;AAAA,EAC7B;AAAA,EAEA,MAAM,YAAY,IAAkC;AAChD,UAAM,WAAW,MAAM,KAAK,OAAO;AAAA,MAC/B,IAAI,WAAW;AAAA,QACX,WAAW,KAAK;AAAA,QAChB,KAAK,EAAE,GAAG;AAAA,MACd,CAAC;AAAA,IACL;AAEA,WAAO,SAAS;AAAA,EACpB;AAAA,EAEA,MAAM,eAAe,OAAqC;AACtD,UAAM,WAAW,MAAM,KAAK,OAAO;AAAA,MAC/B,IAAI,aAAa;AAAA,QACb,WAAW,KAAK;AAAA,QAChB,WAAW;AAAA,QACX,wBAAwB;AAAA,QACxB,2BAA2B;AAAA,UACvB,UAAU;AAAA,QACd;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,WAAO,SAAS,QAAQ,CAAC;AAAA,EAC7B;AAAA,EAEA,MAAM,WAAW,IAAY,SAAuC;AAChE,UAAM,QAAiC,CAAC;AACxC,UAAM,WAAqB,CAAC;AAG5B,WAAO,QAAQ,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAC9C,UAAI,UAAU,QAAW;AACrB,iBAAS,KAAK,GAAG;AAAA,MACrB,OAAO;AACH,cAAM,GAAG,IAAI;AAAA,MACjB;AAAA,IACJ,CAAC;AAGD,QAAI,OAAO,KAAK,KAAK,EAAE,WAAW,KAAK,SAAS,WAAW,GAAG;AAC1D;AAAA,IACJ;AAGA,UAAM,UACF,OAAO,KAAK,KAAK,EAAE,SAAS,IACtB,OAAO,OAAO,KAAK,KAAK,EACnB,IAAI,CAAC,QAAQ,IAAI,GAAG,OAAO,GAAG,EAAE,EAChC,KAAK,IAAI,CAAC,KACf;AAEV,UAAM,aACF,SAAS,SAAS,IAAI,UAAU,SAAS,IAAI,CAAC,QAAQ,IAAI,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,KAAK;AAEpF,UAAM,mBAAmB,CAAC,SAAS,UAAU,EAAE,OAAO,OAAO,EAAE,KAAK,GAAG;AAGvE,UAAM,2BAA2B,CAAC,GAAG,OAAO,KAAK,KAAK,GAAG,GAAG,QAAQ,EAAE;AAAA,MAClE,CAAC,KAAK,SAAS,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI;AAAA,MAC1C,CAAC;AAAA,IACL;AAGA,UAAM,4BAA4B,OAAO,QAAQ,KAAK,EAAE;AAAA,MACpD,CAAC,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,MAAM;AAAA,MACrD,CAAC;AAAA,IACL;AAEA,UAAM,KAAK,OAAO;AAAA,MACd,IAAI,cAAc;AAAA,QACd,WAAW,KAAK;AAAA,QAChB,KAAK,EAAE,GAAG;AAAA,QACV,kBAAkB;AAAA,QAClB,0BAA0B;AAAA,QAC1B,GAAI,OAAO,KAAK,yBAAyB,EAAE,SAAS,KAAK;AAAA,UACrD,2BAA2B;AAAA,QAC/B;AAAA,MACJ,CAAC;AAAA,IACL;AAAA,EACJ;AAAA,EAEA,MAAM,WAAW,IAA2B;AAExC,UAAM,KAAK,sBAAsB,EAAE;AAEnC,UAAM,KAAK,OAAO;AAAA,MACd,IAAI,cAAc;AAAA,QACd,WAAW,KAAK;AAAA,QAChB,KAAK,EAAE,GAAG;AAAA,MACd,CAAC;AAAA,IACL;AAAA,EACJ;AAAA,EAEA,MAAM,UAAU,QAAoB,UAA4B,CAAC,GAA6B;AAC1F,UAAM,QAAQ,QAAQ,SAAS;AAC/B,UAAM,oBAAoB,QAAQ,SAC5B,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE,SAAS,CAAC,IAC3D;AAGN,QACI,OAAO,SACP,CAAC,OAAO,iBACR,CAAC,OAAO,SACR,CAAC,OAAO,cACR,OAAO,oBAAoB,QAC7B;AACE,YAAMA,YAAW,MAAM,KAAK,OAAO;AAAA,QAC/B,IAAI,aAAa;AAAA,UACb,WAAW,KAAK;AAAA,UAChB,WAAW;AAAA,UACX,wBAAwB;AAAA,UACxB,2BAA2B,EAAE,UAAU,OAAO,MAAM;AAAA,UACpD,OAAO;AAAA,UACP,mBAAmB;AAAA,QACvB,CAAC;AAAA,MACL;AAEA,aAAO;AAAA,QACH,OAAQA,UAAS,SAAS,CAAC;AAAA,QAC3B,YAAYA,UAAS,mBACf,OAAO,KAAK,KAAK,UAAUA,UAAS,gBAAgB,CAAC,EAAE,SAAS,QAAQ,IACxE;AAAA,MACV;AAAA,IACJ;AAGA,UAAM,oBAA8B,CAAC;AACrC,UAAM,2BAAmD,CAAC;AAC1D,UAAM,4BAAqD,CAAC;AAE5D,QAAI,OAAO,OAAO;AACd,wBAAkB,KAAK,gBAAgB;AACvC,gCAA0B,QAAQ,IAAI,OAAO;AAAA,IACjD;AAEA,QAAI,OAAO,eAAe;AACtB,wBAAkB,KAAK,iCAAiC;AACxD,gCAA0B,gBAAgB,IAAI,OAAO;AAAA,IACzD;AAEA,QAAI,OAAO,oBAAoB,QAAW;AACtC,wBAAkB,KAAK,oCAAoC;AAC3D,gCAA0B,kBAAkB,IAAI,OAAO;AAAA,IAC3D;AAGA,QAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AACzC,aAAO,MAAM,QAAQ,CAAC,MAAgB,UAAkB;AACpD,0BAAkB,KAAK,yBAAyB,KAAK,GAAG;AACxD,kCAA0B,QAAQ,KAAK,EAAE,IAAI;AAAA,MACjD,CAAC;AACD,+BAAyB,QAAQ,IAAI;AAAA,IACzC;AAGA,QAAI,OAAO,cAAc,OAAO,WAAW,SAAS,GAAG;AACnD,YAAM,oBAAoB,OAAO,WAAW,IAAI,CAAC,MAAgB,UAAkB;AAC/E,kCAA0B,WAAW,KAAK,EAAE,IAAI;AAChD,eAAO,4BAA4B,KAAK;AAAA,MAC5C,CAAC;AACD,wBAAkB,KAAK,IAAI,kBAAkB,KAAK,MAAM,CAAC,GAAG;AAC5D,UAAI,CAAC,yBAAyB,QAAQ,GAAG;AACrC,iCAAyB,QAAQ,IAAI;AAAA,MACzC;AAAA,IACJ;AAEA,UAAM,WAAW,MAAM,KAAK,OAAO;AAAA,MAC/B,IAAI,YAAY;AAAA,QACZ,WAAW,KAAK;AAAA,QAChB,kBACI,kBAAkB,SAAS,IAAI,kBAAkB,KAAK,OAAO,IAAI;AAAA,QACrE,0BACI,OAAO,KAAK,wBAAwB,EAAE,SAAS,IACzC,2BACA;AAAA,QACV,2BACI,OAAO,KAAK,yBAAyB,EAAE,SAAS,IAC1C,4BACA;AAAA,QACV,OAAO;AAAA,QACP,mBAAmB;AAAA,MACvB,CAAC;AAAA,IACL;AAEA,WAAO;AAAA,MACH,OAAQ,SAAS,SAAS,CAAC;AAAA,MAC3B,YAAY,SAAS,mBACf,OAAO,KAAK,KAAK,UAAU,SAAS,gBAAgB,CAAC,EAAE,SAAS,QAAQ,IACxE;AAAA,IACV;AAAA,EACJ;AAAA;AAAA,EAIA,MAAM,cAAc,SAAiC;AACjD,UAAM,KAAK,OAAO;AAAA,MACd,IAAI,WAAW;AAAA,QACX,WAAW,KAAK;AAAA,QAChB,MAAM;AAAA,MACV,CAAC;AAAA,IACL;AAAA,EACJ;AAAA,EAEA,MAAM,eAAe,IAAqC;AACtD,UAAM,WAAW,MAAM,KAAK,OAAO;AAAA,MAC/B,IAAI,WAAW;AAAA,QACX,WAAW,KAAK;AAAA,QAChB,KAAK,EAAE,GAAG;AAAA,MACd,CAAC;AAAA,IACL;AAEA,WAAO,SAAS;AAAA,EACpB;AAAA,EAEA,MAAM,oBAAoB,QAAoC;AAC1D,UAAM,WAAW,MAAM,KAAK,OAAO;AAAA,MAC/B,IAAI,aAAa;AAAA,QACb,WAAW,KAAK;AAAA,QAChB,WAAW;AAAA,QACX,wBAAwB;AAAA,QACxB,2BAA2B;AAAA,UACvB,WAAW;AAAA,QACf;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,WAAQ,SAAS,SAAS,CAAC;AAAA,EAC/B;AAAA,EAEA,MAAM,cAAc,IAAY,SAA0C;AACtE,UAAM,QAAiC,CAAC;AAExC,WAAO,QAAQ,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAC9C,UAAI,UAAU,QAAW;AACrB,cAAM,GAAG,IAAI;AAAA,MACjB;AAAA,IACJ,CAAC;AAED,QAAI,OAAO,KAAK,KAAK,EAAE,WAAW,GAAG;AACjC;AAAA,IACJ;AAEA,UAAM,mBAAmB,OAAO,OAAO,KAAK,KAAK,EAC5C,IAAI,CAAC,QAAQ,IAAI,GAAG,OAAO,GAAG,EAAE,EAChC,KAAK,IAAI,CAAC;AAEf,UAAM,2BAA2B,OAAO,KAAK,KAAK,EAAE;AAAA,MAChD,CAAC,KAAK,SAAS,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI;AAAA,MAC1C,CAAC;AAAA,IACL;AAEA,UAAM,4BAA4B,OAAO,QAAQ,KAAK,EAAE;AAAA,MACpD,CAAC,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,MAAM;AAAA,MACrD,CAAC;AAAA,IACL;AAEA,UAAM,KAAK,OAAO;AAAA,MACd,IAAI,cAAc;AAAA,QACd,WAAW,KAAK;AAAA,QAChB,KAAK,EAAE,GAAG;AAAA,QACV,kBAAkB;AAAA,QAClB,0BAA0B;AAAA,QAC1B,2BAA2B;AAAA,MAC/B,CAAC;AAAA,IACL;AAAA,EACJ;AAAA,EAEA,MAAM,cAAc,IAA2B;AAC3C,UAAM,KAAK,OAAO;AAAA,MACd,IAAI,cAAc;AAAA,QACd,WAAW,KAAK;AAAA,QAChB,KAAK,EAAE,GAAG;AAAA,MACd,CAAC;AAAA,IACL;AAAA,EACJ;AAAA,EAEA,MAAM,sBAAsB,QAA+B;AACvD,UAAM,WAAW,MAAM,KAAK,oBAAoB,MAAM;AAEtD,QAAI,SAAS,WAAW,GAAG;AACvB;AAAA,IACJ;AAGA,UAAM,SAAS,CAAC;AAChB,aAAS,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK,IAAI;AAC1C,aAAO,KAAK,SAAS,MAAM,GAAG,IAAI,EAAE,CAAC;AAAA,IACzC;AAEA,eAAW,SAAS,QAAQ;AACxB,YAAM,KAAK,OAAO;AAAA,QACd,IAAI,kBAAkB;AAAA,UAClB,cAAc;AAAA,YACV,CAAC,KAAK,iBAAiB,GAAG,MAAM,IAAI,CAAC,aAAa;AAAA,cAC9C,eAAe;AAAA,gBACX,KAAK,EAAE,IAAI,QAAQ,GAAG;AAAA,cAC1B;AAAA,YACJ,EAAE;AAAA,UACN;AAAA,QACJ,CAAC;AAAA,MACL;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,MAAM,wBAAuC;AAIzC,UAAM,MAAM,KAAK,IAAI;AAErB,UAAM,WAAW,MAAM,KAAK,OAAO;AAAA,MAC/B,IAAI,aAAa;AAAA,QACb,WAAW,KAAK;AAAA,QAChB,WAAW;AAAA,QACX,wBAAwB;AAAA,QACxB,2BAA2B;AAAA,UACvB,QAAQ;AAAA,QACZ;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,UAAM,kBAAmB,SAAS,SAAS,CAAC;AAE5C,QAAI,gBAAgB,WAAW,GAAG;AAC9B;AAAA,IACJ;AAEA,UAAM,SAAS,CAAC;AAChB,aAAS,IAAI,GAAG,IAAI,gBAAgB,QAAQ,KAAK,IAAI;AACjD,aAAO,KAAK,gBAAgB,MAAM,GAAG,IAAI,EAAE,CAAC;AAAA,IAChD;AAEA,eAAW,SAAS,QAAQ;AACxB,YAAM,KAAK,OAAO;AAAA,QACd,IAAI,kBAAkB;AAAA,UAClB,cAAc;AAAA,YACV,CAAC,KAAK,iBAAiB,GAAG,MAAM,IAAI,CAAC,aAAa;AAAA,cAC9C,eAAe;AAAA,gBACX,KAAK,EAAE,IAAI,QAAQ,GAAG;AAAA,cAC1B;AAAA,YACJ,EAAE;AAAA,UACN;AAAA,QACJ,CAAC;AAAA,MACL;AAAA,IACJ;AAAA,EACJ;AACJ;","names":["response"]}

package/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "@xcelsior/auth-adapter-dynamodb",
+  "version": "1.0.0",
+  "description": "DynamoDB storage adapter for @xcelsior/auth",
+  "exports": {
+    ".": {
+      "import": "./src/index.ts",
+      "require": "./dist/index.js"
+    }
+  },
+  "main": "src/index.ts",
+  "dependencies": {
+    "@aws-sdk/client-dynamodb": "^3.0.0",
+    "@aws-sdk/lib-dynamodb": "^3.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0"
+  },
+  "peerDependencies": {
+    "@xcelsior/auth": "1.0.0"
+  },
+  "scripts": {
+    "build": "tsup && tsc --noEmit",
+    "dev": "tsup --watch",
+    "prepublish": "npm run build",
+    "test": "jest --passWithNoTests",
+    "lint": "biome check ."
+  }
+}

package/src/dynamodb.ts

@@ -0,0 +1,430 @@
+import { DynamoDBClient } from '@aws-sdk/client-dynamodb';
+import {
+    DynamoDBDocumentClient,
+    PutCommand,
+    GetCommand,
+    UpdateCommand,
+    DeleteCommand,
+    QueryCommand,
+    ScanCommand,
+    BatchWriteCommand,
+} from '@aws-sdk/lib-dynamodb';
+import type {
+    IStorageProvider,
+    User,
+    Session,
+    UserFilter,
+    FindUsersOptions,
+    FindUsersResult,
+    UserRole,
+} from '@xcelsior/auth';
+
+export interface DynamoDBConfig {
+    tableName: string;
+    sessionsTableName: string;
+    region: string;
+}
+
+export class DynamoDBStorageProvider implements IStorageProvider {
+    private client: DynamoDBDocumentClient;
+    private tableName: string;
+    private sessionsTableName: string;
+
+    constructor(config: DynamoDBConfig) {
+        const dbClient = new DynamoDBClient({ region: config.region });
+        this.client = DynamoDBDocumentClient.from(dbClient, {});
+        this.tableName = config.tableName;
+        this.sessionsTableName = config.sessionsTableName;
+    }
+
+    // ==================== User Methods ====================
+
+    async createUser(user: User): Promise<void> {
+        await this.client.send(
+            new PutCommand({
+                TableName: this.tableName,
+                Item: user,
+                ConditionExpression: 'attribute_not_exists(email)',
+            })
+        );
+    }
+
+    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null> {
+        const response = await this.client.send(
+            new QueryCommand({
+                TableName: this.tableName,
+                IndexName: 'ResetPasswordTokenIndex',
+                KeyConditionExpression: 'resetPasswordToken = :token',
+                ExpressionAttributeValues: {
+                    ':token': resetPasswordToken,
+                },
+            })
+        );
+
+        return response.Items?.[0] as User | null;
+    }
+
+    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null> {
+        const response = await this.client.send(
+            new QueryCommand({
+                TableName: this.tableName,
+                IndexName: 'VerifyEmailTokenIndex',
+                KeyConditionExpression: 'verificationToken = :token',
+                ExpressionAttributeValues: {
+                    ':token': verifyEmailToken,
+                },
+            })
+        );
+
+        return response.Items?.[0] as User | null;
+    }
+
+    async getUserById(id: string): Promise<User | null> {
+        const response = await this.client.send(
+            new GetCommand({
+                TableName: this.tableName,
+                Key: { id },
+            })
+        );
+
+        return response.Item as User | null;
+    }
+
+    async getUserByEmail(email: string): Promise<User | null> {
+        const response = await this.client.send(
+            new QueryCommand({
+                TableName: this.tableName,
+                IndexName: 'EmailIndex',
+                KeyConditionExpression: 'email = :email',
+                ExpressionAttributeValues: {
+                    ':email': email,
+                },
+            })
+        );
+
+        return response.Items?.[0] as User | null;
+    }
+
+    async updateUser(id: string, updates: Partial<User>): Promise<void> {
+        const toSet: Record<string, unknown> = {};
+        const toRemove: string[] = [];
+
+        // Separate attributes to set and remove
+        Object.entries(updates).forEach(([key, value]) => {
+            if (value === undefined) {
+                toRemove.push(key);
+            } else {
+                toSet[key] = value;
+            }
+        });
+
+        // If no updates at all, return early
+        if (Object.keys(toSet).length === 0 && toRemove.length === 0) {
+            return;
+        }
+
+        // Build the update expression
+        const setPart =
+            Object.keys(toSet).length > 0
+                ? `SET ${Object.keys(toSet)
+                      .map((key) => `#${key} = :${key}`)
+                      .join(', ')}`
+                : '';
+
+        const removePart =
+            toRemove.length > 0 ? `REMOVE ${toRemove.map((key) => `#${key}`).join(', ')}` : '';
+
+        const updateExpression = [setPart, removePart].filter(Boolean).join(' ');
+
+        // Build expression attribute names (needed for both SET and REMOVE)
+        const expressionAttributeNames = [...Object.keys(toSet), ...toRemove].reduce(
+            (acc, key) => ({ ...acc, [`#${key}`]: key }),
+            {}
+        );
+
+        // Build expression attribute values (only needed for SET)
+        const expressionAttributeValues = Object.entries(toSet).reduce(
+            (acc, [key, value]) => ({ ...acc, [`:${key}`]: value }),
+            {}
+        );
+
+        await this.client.send(
+            new UpdateCommand({
+                TableName: this.tableName,
+                Key: { id },
+                UpdateExpression: updateExpression,
+                ExpressionAttributeNames: expressionAttributeNames,
+                ...(Object.keys(expressionAttributeValues).length > 0 && {
+                    ExpressionAttributeValues: expressionAttributeValues,
+                }),
+            })
+        );
+    }
+
+    async deleteUser(id: string): Promise<void> {
+        // Delete all user sessions first
+        await this.deleteAllUserSessions(id);
+
+        await this.client.send(
+            new DeleteCommand({
+                TableName: this.tableName,
+                Key: { id },
+            })
+        );
+    }
+
+    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult> {
+        const limit = options.limit ?? 50;
+        const exclusiveStartKey = options.cursor
+            ? JSON.parse(Buffer.from(options.cursor, 'base64').toString())
+            : undefined;
+
+        // If filtering by exact email only, use the EmailIndex (most performant)
+        if (
+            filter.email &&
+            !filter.emailContains &&
+            !filter.roles &&
+            !filter.hasAnyRole &&
+            filter.isEmailVerified === undefined
+        ) {
+            const response = await this.client.send(
+                new QueryCommand({
+                    TableName: this.tableName,
+                    IndexName: 'EmailIndex',
+                    KeyConditionExpression: 'email = :email',
+                    ExpressionAttributeValues: { ':email': filter.email },
+                    Limit: limit,
+                    ExclusiveStartKey: exclusiveStartKey,
+                })
+            );
+
+            return {
+                users: (response.Items || []) as User[],
+                nextCursor: response.LastEvaluatedKey
+                    ? Buffer.from(JSON.stringify(response.LastEvaluatedKey)).toString('base64')
+                    : undefined,
+            };
+        }
+
+        // For other filters, use Scan with FilterExpression
+        const filterExpressions: string[] = [];
+        const expressionAttributeNames: Record<string, string> = {};
+        const expressionAttributeValues: Record<string, unknown> = {};
+
+        if (filter.email) {
+            filterExpressions.push('email = :email');
+            expressionAttributeValues[':email'] = filter.email;
+        }
+
+        if (filter.emailContains) {
+            filterExpressions.push('contains(email, :emailContains)');
+            expressionAttributeValues[':emailContains'] = filter.emailContains;
+        }
+
+        if (filter.isEmailVerified !== undefined) {
+            filterExpressions.push('isEmailVerified = :isEmailVerified');
+            expressionAttributeValues[':isEmailVerified'] = filter.isEmailVerified;
+        }
+
+        // For roles (user must have ALL specified roles)
+        if (filter.roles && filter.roles.length > 0) {
+            filter.roles.forEach((role: UserRole, index: number) => {
+                filterExpressions.push(`contains(#roles, :role${index})`);
+                expressionAttributeValues[`:role${index}`] = role;
+            });
+            expressionAttributeNames['#roles'] = 'roles';
+        }
+
+        // For hasAnyRole (user must have at least ONE)
+        if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {
+            const anyRoleConditions = filter.hasAnyRole.map((role: UserRole, index: number) => {
+                expressionAttributeValues[`:anyRole${index}`] = role;
+                return `contains(#roles, :anyRole${index})`;
+            });
+            filterExpressions.push(`(${anyRoleConditions.join(' OR ')})`);
+            if (!expressionAttributeNames['#roles']) {
+                expressionAttributeNames['#roles'] = 'roles';
+            }
+        }
+
+        const response = await this.client.send(
+            new ScanCommand({
+                TableName: this.tableName,
+                FilterExpression:
+                    filterExpressions.length > 0 ? filterExpressions.join(' AND ') : undefined,
+                ExpressionAttributeNames:
+                    Object.keys(expressionAttributeNames).length > 0
+                        ? expressionAttributeNames
+                        : undefined,
+                ExpressionAttributeValues:
+                    Object.keys(expressionAttributeValues).length > 0
+                        ? expressionAttributeValues
+                        : undefined,
+                Limit: limit,
+                ExclusiveStartKey: exclusiveStartKey,
+            })
+        );
+
+        return {
+            users: (response.Items || []) as User[],
+            nextCursor: response.LastEvaluatedKey
+                ? Buffer.from(JSON.stringify(response.LastEvaluatedKey)).toString('base64')
+                : undefined,
+        };
+    }
+
+    // ==================== Session Methods ====================
+
+    async createSession(session: Session): Promise<void> {
+        await this.client.send(
+            new PutCommand({
+                TableName: this.sessionsTableName,
+                Item: session,
+            })
+        );
+    }
+
+    async getSessionById(id: string): Promise<Session | null> {
+        const response = await this.client.send(
+            new GetCommand({
+                TableName: this.sessionsTableName,
+                Key: { id },
+            })
+        );
+
+        return response.Item as Session | null;
+    }
+
+    async getSessionsByUserId(userId: string): Promise<Session[]> {
+        const response = await this.client.send(
+            new QueryCommand({
+                TableName: this.sessionsTableName,
+                IndexName: 'UserIdIndex',
+                KeyConditionExpression: 'userId = :userId',
+                ExpressionAttributeValues: {
+                    ':userId': userId,
+                },
+            })
+        );
+
+        return (response.Items || []) as Session[];
+    }
+
+    async updateSession(id: string, updates: Partial<Session>): Promise<void> {
+        const toSet: Record<string, unknown> = {};
+
+        Object.entries(updates).forEach(([key, value]) => {
+            if (value !== undefined) {
+                toSet[key] = value;
+            }
+        });
+
+        if (Object.keys(toSet).length === 0) {
+            return;
+        }
+
+        const updateExpression = `SET ${Object.keys(toSet)
+            .map((key) => `#${key} = :${key}`)
+            .join(', ')}`;
+
+        const expressionAttributeNames = Object.keys(toSet).reduce(
+            (acc, key) => ({ ...acc, [`#${key}`]: key }),
+            {}
+        );
+
+        const expressionAttributeValues = Object.entries(toSet).reduce(
+            (acc, [key, value]) => ({ ...acc, [`:${key}`]: value }),
+            {}
+        );
+
+        await this.client.send(
+            new UpdateCommand({
+                TableName: this.sessionsTableName,
+                Key: { id },
+                UpdateExpression: updateExpression,
+                ExpressionAttributeNames: expressionAttributeNames,
+                ExpressionAttributeValues: expressionAttributeValues,
+            })
+        );
+    }
+
+    async deleteSession(id: string): Promise<void> {
+        await this.client.send(
+            new DeleteCommand({
+                TableName: this.sessionsTableName,
+                Key: { id },
+            })
+        );
+    }
+
+    async deleteAllUserSessions(userId: string): Promise<void> {
+        const sessions = await this.getSessionsByUserId(userId);
+
+        if (sessions.length === 0) {
+            return;
+        }
+
+        // Batch delete in chunks of 25 (DynamoDB limit)
+        const chunks = [];
+        for (let i = 0; i < sessions.length; i += 25) {
+            chunks.push(sessions.slice(i, i + 25));
+        }
+
+        for (const chunk of chunks) {
+            await this.client.send(
+                new BatchWriteCommand({
+                    RequestItems: {
+                        [this.sessionsTableName]: chunk.map((session) => ({
+                            DeleteRequest: {
+                                Key: { id: session.id },
+                            },
+                        })),
+                    },
+                })
+            );
+        }
+    }
+
+    async deleteExpiredSessions(): Promise<void> {
+        // Note: This requires a full table scan which is expensive.
+        // Consider using DynamoDB TTL instead for automatic expiration.
+        // This method is provided for manual cleanup if needed.
+        const now = Date.now();
+
+        const response = await this.client.send(
+            new QueryCommand({
+                TableName: this.sessionsTableName,
+                IndexName: 'ExpiresAtIndex',
+                KeyConditionExpression: 'expiresAt < :now',
+                ExpressionAttributeValues: {
+                    ':now': now,
+                },
+            })
+        );
+
+        const expiredSessions = (response.Items || []) as Session[];
+
+        if (expiredSessions.length === 0) {
+            return;
+        }
+
+        const chunks = [];
+        for (let i = 0; i < expiredSessions.length; i += 25) {
+            chunks.push(expiredSessions.slice(i, i + 25));
+        }
+
+        for (const chunk of chunks) {
+            await this.client.send(
+                new BatchWriteCommand({
+                    RequestItems: {
+                        [this.sessionsTableName]: chunk.map((session) => ({
+                            DeleteRequest: {
+                                Key: { id: session.id },
+                            },
+                        })),
+                    },
+                })
+            );
+        }
+    }
+}

package/src/index.ts

@@ -0,0 +1 @@
+export { DynamoDBStorageProvider, type DynamoDBConfig } from './dynamodb';

package/tsconfig.json

@@ -0,0 +1,8 @@
+{
+    "extends": "../../../tsconfig.json",
+    "compilerOptions": {
+        "outDir": "dist",
+        "rootDir": "src"
+    },
+    "include": ["src"]
+}

package/tsup.config.ts

@@ -0,0 +1,10 @@
+import { defineConfig } from 'tsup';
+
+export default defineConfig({
+    entry: ['src/index.ts'],
+    format: ['cjs', 'esm'],
+    dts: true,
+    splitting: false,
+    sourcemap: true,
+    clean: true,
+});