@xcelsior/auth-adapter-knex 1.0.0 → 1.1.0

package/.turbo/turbo-build.log

@@ -1,22 +1,22 @@
 
-> @xcelsior/auth-adapter-knex@1.0.0 build /home/circleci/repo/packages/services/auth-adapter-knex
+> @xcelsior/auth-adapter-knex@1.0.0 build /Users/tuannguyen/Work/xcelsior-packages/packages/services/auth-adapter-knex
 > tsup && tsc --noEmit
 
 CLI Building entry: src/index.ts
 CLI Using tsconfig: tsconfig.json
 CLI tsup v8.5.1
-CLI Using tsup config: /home/circleci/repo/packages/services/auth-adapter-knex/tsup.config.ts
+CLI Using tsup config: /Users/tuannguyen/Work/xcelsior-packages/packages/services/auth-adapter-knex/tsup.config.ts
 CLI Target: es2020
 CLI Cleaning output folder
 CJS Build start
 ESM Build start
 CJS dist/index.js     11.45 KB
 CJS dist/index.js.map 22.55 KB
-CJS ⚡️ Build success in 159ms
+CJS ⚡️ Build success in 119ms
 ESM dist/index.mjs     10.31 KB
 ESM dist/index.mjs.map 22.33 KB
-ESM ⚡️ Build success in 161ms
-DTS Build start
-DTS ⚡️ Build success in 20081ms
-DTS dist/index.d.ts  3.13 KB
-DTS dist/index.d.mts 3.13 KB
+ESM ⚡️ Build success in 134ms
+DTS Build start
+DTS ⚡️ Build success in 2709ms
+DTS dist/index.d.ts  3.13 KB
+DTS dist/index.d.mts 3.13 KB

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import { Knex } from 'knex';
-import { IStorageProvider, User, UserFilter, FindUsersOptions, FindUsersResult, Session } from '@xcelsior/auth';
+import { IStorageProvider, CreateUserInput, User, UserId, UserFilter, FindUsersOptions, FindUsersResult, CreateSessionInput, Session, SessionId } from '@xcelsior/auth';
 
 interface KnexConfig {
     /** Pre-configured Knex instance */
@@ -19,20 +19,20 @@ declare class KnexStorageProvider implements IStorageProvider {
     constructor(config: KnexConfig);
     private get table();
     private get sessionsTable();
-    createUser(user: User): Promise<void>;
-    getUserById(id: string): Promise<User | null>;
+    createUser(user: CreateUserInput): Promise<User>;
+    getUserById(id: UserId): Promise<User | null>;
     getUserByEmail(email: string): Promise<User | null>;
     getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null>;
     getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null>;
-    updateUser(id: string, updates: Partial<User>): Promise<void>;
-    deleteUser(id: string): Promise<void>;
+    updateUser(id: UserId, updates: Partial<User>): Promise<void>;
+    deleteUser(id: UserId): Promise<void>;
     findUsers(filter: UserFilter, options?: FindUsersOptions): Promise<FindUsersResult>;
-    createSession(session: Session): Promise<void>;
-    getSessionById(id: string): Promise<Session | null>;
-    getSessionsByUserId(userId: string): Promise<Session[]>;
-    updateSession(id: string, updates: Partial<Session>): Promise<void>;
-    deleteSession(id: string): Promise<void>;
-    deleteAllUserSessions(userId: string): Promise<void>;
+    createSession(session: CreateSessionInput): Promise<Session>;
+    getSessionById(id: SessionId): Promise<Session | null>;
+    getSessionsByUserId(userId: UserId): Promise<Session[]>;
+    updateSession(id: SessionId, updates: Partial<Session>): Promise<void>;
+    deleteSession(id: SessionId): Promise<void>;
+    deleteAllUserSessions(userId: UserId): Promise<void>;
     deleteExpiredSessions(): Promise<void>;
     /**
      * Convert User object to database row format (snake_case)

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { Knex } from 'knex';
-import { IStorageProvider, User, UserFilter, FindUsersOptions, FindUsersResult, Session } from '@xcelsior/auth';
+import { IStorageProvider, CreateUserInput, User, UserId, UserFilter, FindUsersOptions, FindUsersResult, CreateSessionInput, Session, SessionId } from '@xcelsior/auth';
 
 interface KnexConfig {
     /** Pre-configured Knex instance */
@@ -19,20 +19,20 @@ declare class KnexStorageProvider implements IStorageProvider {
     constructor(config: KnexConfig);
     private get table();
     private get sessionsTable();
-    createUser(user: User): Promise<void>;
-    getUserById(id: string): Promise<User | null>;
+    createUser(user: CreateUserInput): Promise<User>;
+    getUserById(id: UserId): Promise<User | null>;
     getUserByEmail(email: string): Promise<User | null>;
     getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null>;
     getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null>;
-    updateUser(id: string, updates: Partial<User>): Promise<void>;
-    deleteUser(id: string): Promise<void>;
+    updateUser(id: UserId, updates: Partial<User>): Promise<void>;
+    deleteUser(id: UserId): Promise<void>;
     findUsers(filter: UserFilter, options?: FindUsersOptions): Promise<FindUsersResult>;
-    createSession(session: Session): Promise<void>;
-    getSessionById(id: string): Promise<Session | null>;
-    getSessionsByUserId(userId: string): Promise<Session[]>;
-    updateSession(id: string, updates: Partial<Session>): Promise<void>;
-    deleteSession(id: string): Promise<void>;
-    deleteAllUserSessions(userId: string): Promise<void>;
+    createSession(session: CreateSessionInput): Promise<Session>;
+    getSessionById(id: SessionId): Promise<Session | null>;
+    getSessionsByUserId(userId: UserId): Promise<Session[]>;
+    updateSession(id: SessionId, updates: Partial<Session>): Promise<void>;
+    deleteSession(id: SessionId): Promise<void>;
+    deleteAllUserSessions(userId: UserId): Promise<void>;
     deleteExpiredSessions(): Promise<void>;
     /**
      * Convert User object to database row format (snake_case)

package/dist/index.js

@@ -50,7 +50,10 @@ var KnexStorageProvider = class {
   }
   // ==================== User Methods ====================
   async createUser(user) {
-    await this.table.insert(this.toDbUser(user));
+    const dbUser = this.toDbUser(user);
+    const [insertedId] = await this.table.insert(dbUser);
+    const finalId = user.id ?? insertedId;
+    return { ...user, id: finalId };
   }
   async getUserById(id) {
     const row = await this.table.where({ id }).first();
@@ -127,7 +130,10 @@ var KnexStorageProvider = class {
   }
   // ==================== Session Methods ====================
   async createSession(session) {
-    await this.sessionsTable.insert(this.toDbSession(session));
+    const dbSession = this.toDbSession(session);
+    const [insertedId] = await this.sessionsTable.insert(dbSession);
+    const finalId = session.id ?? insertedId;
+    return { ...session, id: finalId };
   }
   async getSessionById(id) {
     const row = await this.sessionsTable.where({ id }).first();
@@ -159,20 +165,23 @@ var KnexStorageProvider = class {
    * Convert User object to database row format (snake_case)
    */
   toDbUser(user) {
-    return {
-      id: user.id,
+    const row = {
       email: user.email,
       first_name: user.firstName ?? null,
       last_name: user.lastName ?? null,
       password_hash: user.passwordHash,
       roles: JSON.stringify(user.roles),
-      is_email_verified: user.isEmailVerified,
+      is_email_verified: user.isEmailVerified ? 1 : 0,
       verification_token: user.verificationToken ?? null,
       reset_password_token: user.resetPasswordToken ?? null,
       reset_password_expires: user.resetPasswordExpires ?? null,
-      created_at: user.createdAt,
-      updated_at: user.updatedAt
+      created_at: user.createdAt ?? Date.now(),
+      updated_at: user.updatedAt ?? Date.now()
     };
+    if (user.id !== void 0) {
+      row.id = user.id;
+    }
+    return row;
   }
   /**
    * Convert database row to User object (camelCase)
@@ -214,7 +223,7 @@ var KnexStorageProvider = class {
       dbUpdates.roles = JSON.stringify(updates.roles);
     }
     if (updates.isEmailVerified !== void 0) {
-      dbUpdates.is_email_verified = updates.isEmailVerified;
+      dbUpdates.is_email_verified = updates.isEmailVerified ? 1 : 0;
     }
     if ("verificationToken" in updates) {
       dbUpdates.verification_token = updates.verificationToken ?? null;
@@ -235,8 +244,7 @@ var KnexStorageProvider = class {
    * Convert Session object to database row format (snake_case)
    */
   toDbSession(session) {
-    return {
-      id: session.id,
+    const row = {
       user_id: session.userId,
       refresh_token_hash: session.refreshTokenHash,
       user_agent: session.userAgent ?? null,
@@ -246,6 +254,10 @@ var KnexStorageProvider = class {
       last_used_at: session.lastUsedAt,
       expires_at: session.expiresAt
     };
+    if (session.id !== void 0) {
+      row.id = session.id;
+    }
+    return row;
   }
   /**
    * Convert database row to Session object (camelCase)

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/knex.ts","../src/migration.ts"],"sourcesContent":["export { KnexStorageProvider, type KnexConfig } from './knex';\nexport { createUsersTableMigration, createSessionsTableMigration } from './migration';\n","import type { Knex } from 'knex';\nimport type {\n    IStorageProvider,\n    User,\n    Session,\n    UserFilter,\n    FindUsersOptions,\n    FindUsersResult,\n} from '@xcelsior/auth';\n\nexport interface KnexConfig {\n    /** Pre-configured Knex instance */\n    knex: Knex;\n    /** Table name for users */\n    tableName: string;\n    /** Table name for sessions */\n    sessionsTableName: string;\n    /** Optional schema (for PostgreSQL) */\n    schema?: string;\n}\n\nexport class KnexStorageProvider implements IStorageProvider {\n    private knex: Knex;\n    private tableName: string;\n    private sessionsTableName: string;\n    private schema?: string;\n\n    constructor(config: KnexConfig) {\n        this.knex = config.knex;\n        this.tableName = config.tableName;\n        this.sessionsTableName = config.sessionsTableName;\n        this.schema = config.schema;\n    }\n\n    private get table() {\n        const query = this.knex(this.tableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    private get sessionsTable() {\n        const query = this.knex(this.sessionsTableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    // ==================== User Methods ====================\n\n    async createUser(user: User): Promise<void> {\n        await this.table.insert(this.toDbUser(user));\n    }\n\n    async getUserById(id: string): Promise<User | null> {\n        const row = await this.table.where({ id }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByEmail(email: string): Promise<User | null> {\n        const row = await this.table.where({ email }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null> {\n        const row = await this.table.where({ reset_password_token: resetPasswordToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null> {\n        const row = await this.table.where({ verification_token: verifyEmailToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async updateUser(id: string, updates: Partial<User>): Promise<void> {\n        const dbUpdates = this.toDbUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.table.where({ id }).update(dbUpdates);\n    }\n\n    async deleteUser(id: string): Promise<void> {\n        // Delete all user sessions first\n        await this.deleteAllUserSessions(id);\n        // Then delete the user\n        await this.table.where({ id }).delete();\n    }\n\n    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult> {\n        const limit = options.limit ?? 50;\n\n        let query = this.table.clone();\n\n        // Email exact match\n        if (filter.email) {\n            query = query.where('email', filter.email);\n        }\n\n        // Email contains (partial match)\n        if (filter.emailContains) {\n            query = query.where('email', 'like', `%${filter.emailContains}%`);\n        }\n\n        // Email verification status\n        if (filter.isEmailVerified !== undefined) {\n            query = query.where('is_email_verified', filter.isEmailVerified);\n        }\n\n        // Roles filtering - user must have ALL specified roles\n        if (filter.roles && filter.roles.length > 0) {\n            for (const role of filter.roles) {\n                // Use JSON contains - works for PostgreSQL (jsonb) and MySQL (json)\n                // For SQLite, we fall back to LIKE on the JSON string\n                query = query.whereRaw(\n                    this.knex.client.config.client === 'sqlite3' ? `roles LIKE ?` : `roles @> ?`,\n                    this.knex.client.config.client === 'sqlite3'\n                        ? [`%\"${role}\"%`]\n                        : [JSON.stringify([role])]\n                );\n            }\n        }\n\n        // HasAnyRole - user must have at least ONE of specified roles\n        if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {\n            query = query.where((builder: Knex.QueryBuilder) => {\n                for (const role of filter.hasAnyRole!) {\n                    builder.orWhereRaw(\n                        this.knex.client.config.client === 'sqlite3'\n                            ? `roles LIKE ?`\n                            : `roles @> ?`,\n                        this.knex.client.config.client === 'sqlite3'\n                            ? [`%\"${role}\"%`]\n                            : [JSON.stringify([role])]\n                    );\n                }\n            });\n        }\n\n        // Apply pagination\n        if (options.cursor) {\n            const cursorData = JSON.parse(Buffer.from(options.cursor, 'base64').toString());\n            query = query.where('id', '>', cursorData.lastId);\n        }\n\n        // Order by id for consistent pagination\n        query = query.orderBy('id', 'asc').limit(limit + 1);\n\n        const rows = await query;\n        const hasMore = rows.length > limit;\n        const resultRows = hasMore ? rows.slice(0, limit) : rows;\n        const users = resultRows.map((row: Record<string, unknown>) => this.fromDbUser(row));\n\n        let nextCursor: string | undefined;\n        if (hasMore && resultRows.length > 0) {\n            const lastUser = resultRows[resultRows.length - 1];\n            nextCursor = Buffer.from(JSON.stringify({ lastId: lastUser.id })).toString('base64');\n        }\n\n        return { users, nextCursor };\n    }\n\n    // ==================== Session Methods ====================\n\n    async createSession(session: Session): Promise<void> {\n        await this.sessionsTable.insert(this.toDbSession(session));\n    }\n\n    async getSessionById(id: string): Promise<Session | null> {\n        const row = await this.sessionsTable.where({ id }).first();\n        return row ? this.fromDbSession(row) : null;\n    }\n\n    async getSessionsByUserId(userId: string): Promise<Session[]> {\n        const rows = await this.sessionsTable.where({ user_id: userId });\n        return rows.map((row: Record<string, unknown>) => this.fromDbSession(row));\n    }\n\n    async updateSession(id: string, updates: Partial<Session>): Promise<void> {\n        const dbUpdates = this.toDbSessionUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.sessionsTable.where({ id }).update(dbUpdates);\n    }\n\n    async deleteSession(id: string): Promise<void> {\n        await this.sessionsTable.where({ id }).delete();\n    }\n\n    async deleteAllUserSessions(userId: string): Promise<void> {\n        await this.sessionsTable.where({ user_id: userId }).delete();\n    }\n\n    async deleteExpiredSessions(): Promise<void> {\n        const now = Date.now();\n        await this.sessionsTable.where('expires_at', '<', now).delete();\n    }\n\n    // ==================== User Mapping Helpers ====================\n\n    /**\n     * Convert User object to database row format (snake_case)\n     */\n    private toDbUser(user: User): Record<string, unknown> {\n        return {\n            id: user.id,\n            email: user.email,\n            first_name: user.firstName ?? null,\n            last_name: user.lastName ?? null,\n            password_hash: user.passwordHash,\n            roles: JSON.stringify(user.roles),\n            is_email_verified: user.isEmailVerified,\n            verification_token: user.verificationToken ?? null,\n            reset_password_token: user.resetPasswordToken ?? null,\n            reset_password_expires: user.resetPasswordExpires ?? null,\n            created_at: user.createdAt,\n            updated_at: user.updatedAt,\n        };\n    }\n\n    /**\n     * Convert database row to User object (camelCase)\n     */\n    private fromDbUser(row: Record<string, unknown>): User {\n        return {\n            id: row.id as string,\n            email: row.email as string,\n            firstName: row.first_name as string | undefined,\n            lastName: row.last_name as string | undefined,\n            passwordHash: row.password_hash as string,\n            roles: typeof row.roles === 'string' ? JSON.parse(row.roles) : row.roles,\n            isEmailVerified: Boolean(row.is_email_verified),\n            verificationToken: row.verification_token as string | undefined,\n            resetPasswordToken: row.reset_password_token as string | undefined,\n            resetPasswordExpires: row.reset_password_expires as number | undefined,\n            createdAt: row.created_at as number,\n            updatedAt: row.updated_at as number,\n        };\n    }\n\n    /**\n     * Convert partial User updates to database format\n     */\n    private toDbUpdates(updates: Partial<User>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.email !== undefined) {\n            dbUpdates.email = updates.email;\n        }\n        if ('firstName' in updates) {\n            dbUpdates.first_name = updates.firstName ?? null;\n        }\n        if ('lastName' in updates) {\n            dbUpdates.last_name = updates.lastName ?? null;\n        }\n        if (updates.passwordHash !== undefined) {\n            dbUpdates.password_hash = updates.passwordHash;\n        }\n        if (updates.roles !== undefined) {\n            dbUpdates.roles = JSON.stringify(updates.roles);\n        }\n        if (updates.isEmailVerified !== undefined) {\n            dbUpdates.is_email_verified = updates.isEmailVerified;\n        }\n        if ('verificationToken' in updates) {\n            dbUpdates.verification_token = updates.verificationToken ?? null;\n        }\n        if ('resetPasswordToken' in updates) {\n            dbUpdates.reset_password_token = updates.resetPasswordToken ?? null;\n        }\n        if ('resetPasswordExpires' in updates) {\n            dbUpdates.reset_password_expires = updates.resetPasswordExpires ?? null;\n        }\n        if (updates.updatedAt !== undefined) {\n            dbUpdates.updated_at = updates.updatedAt;\n        }\n\n        return dbUpdates;\n    }\n\n    // ==================== Session Mapping Helpers ====================\n\n    /**\n     * Convert Session object to database row format (snake_case)\n     */\n    private toDbSession(session: Session): Record<string, unknown> {\n        return {\n            id: session.id,\n            user_id: session.userId,\n            refresh_token_hash: session.refreshTokenHash,\n            user_agent: session.userAgent ?? null,\n            ip_address: session.ipAddress ?? null,\n            device_name: session.deviceName ?? null,\n            created_at: session.createdAt,\n            last_used_at: session.lastUsedAt,\n            expires_at: session.expiresAt,\n        };\n    }\n\n    /**\n     * Convert database row to Session object (camelCase)\n     */\n    private fromDbSession(row: Record<string, unknown>): Session {\n        return {\n            id: row.id as string,\n            userId: row.user_id as string,\n            refreshTokenHash: row.refresh_token_hash as string,\n            userAgent: row.user_agent as string | undefined,\n            ipAddress: row.ip_address as string | undefined,\n            deviceName: row.device_name as string | undefined,\n            createdAt: row.created_at as number,\n            lastUsedAt: row.last_used_at as number,\n            expiresAt: row.expires_at as number,\n        };\n    }\n\n    /**\n     * Convert partial Session updates to database format\n     */\n    private toDbSessionUpdates(updates: Partial<Session>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.refreshTokenHash !== undefined) {\n            dbUpdates.refresh_token_hash = updates.refreshTokenHash;\n        }\n        if ('userAgent' in updates) {\n            dbUpdates.user_agent = updates.userAgent ?? null;\n        }\n        if ('ipAddress' in updates) {\n            dbUpdates.ip_address = updates.ipAddress ?? null;\n        }\n        if ('deviceName' in updates) {\n            dbUpdates.device_name = updates.deviceName ?? null;\n        }\n        if (updates.lastUsedAt !== undefined) {\n            dbUpdates.last_used_at = updates.lastUsedAt;\n        }\n        if (updates.expiresAt !== undefined) {\n            dbUpdates.expires_at = updates.expiresAt;\n        }\n\n        return dbUpdates;\n    }\n}\n","import type { Knex } from 'knex';\n\n/**\n * SQL migration helper to create the users table\n * Can be used with Knex migrations\n *\n * @example\n * ```ts\n * // In your migration file\n * import { createUsersTableMigration, createSessionsTableMigration } from '@xcelsior/auth-adapter-knex';\n *\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users');\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * export async function down(knex: Knex): Promise<void> {\n *   await knex.schema.dropTableIfExists('sessions');\n *   await knex.schema.dropTableIfExists('users');\n * }\n * ```\n */\nexport async function createUsersTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('email').notNullable().unique();\n        table.string('first_name').nullable();\n        table.string('last_name').nullable();\n        table.string('password_hash').notNullable();\n        table.jsonb('roles').notNullable();\n        table.boolean('is_email_verified').notNullable().defaultTo(false);\n        table.string('verification_token').nullable();\n        table.string('reset_password_token').nullable();\n        table.bigInteger('reset_password_expires').nullable();\n        table.bigInteger('created_at').notNullable();\n        table.bigInteger('updated_at').notNullable();\n\n        // Indexes for common lookups\n        table.index('email');\n        table.index('verification_token');\n        table.index('reset_password_token');\n    });\n}\n\n/**\n * SQL migration helper to create the sessions table\n * Can be used with Knex migrations\n */\nexport async function createSessionsTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('user_id').notNullable();\n        table.string('refresh_token_hash').notNullable();\n        table.string('user_agent').nullable();\n        table.string('ip_address').nullable();\n        table.string('device_name').nullable();\n        table.bigInteger('created_at').notNullable();\n        table.bigInteger('last_used_at').notNullable();\n        table.bigInteger('expires_at').notNullable();\n\n        // Index for querying sessions by user\n        table.index('user_id');\n        // Index for cleaning up expired sessions\n        table.index('expires_at');\n    });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACqBO,IAAM,sBAAN,MAAsD;AAAA,EAMzD,YAAY,QAAoB;AAC5B,SAAK,OAAO,OAAO;AACnB,SAAK,YAAY,OAAO;AACxB,SAAK,oBAAoB,OAAO;AAChC,SAAK,SAAS,OAAO;AAAA,EACzB;AAAA,EAEA,IAAY,QAAQ;AAChB,UAAM,QAAQ,KAAK,KAAK,KAAK,SAAS;AACtC,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA,EAEA,IAAY,gBAAgB;AACxB,UAAM,QAAQ,KAAK,KAAK,KAAK,iBAAiB;AAC9C,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA;AAAA,EAIA,MAAM,WAAW,MAA2B;AACxC,UAAM,KAAK,MAAM,OAAO,KAAK,SAAS,IAAI,CAAC;AAAA,EAC/C;AAAA,EAEA,MAAM,YAAY,IAAkC;AAChD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACjD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,eAAe,OAAqC;AACtD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;AACpD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,4BAA4B,oBAAkD;AAChF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,sBAAsB,mBAAmB,CAAC,EAAE,MAAM;AACvF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,0BAA0B,kBAAgD;AAC5E,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,oBAAoB,iBAAiB,CAAC,EAAE,MAAM;AACnF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,WAAW,IAAY,SAAuC;AAChE,UAAM,YAAY,KAAK,YAAY,OAAO;AAE1C,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EACnD;AAAA,EAEA,MAAM,WAAW,IAA2B;AAExC,UAAM,KAAK,sBAAsB,EAAE;AAEnC,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAC1C;AAAA,EAEA,MAAM,UAAU,QAAoB,UAA4B,CAAC,GAA6B;AAC1F,UAAM,QAAQ,QAAQ,SAAS;AAE/B,QAAI,QAAQ,KAAK,MAAM,MAAM;AAG7B,QAAI,OAAO,OAAO;AACd,cAAQ,MAAM,MAAM,SAAS,OAAO,KAAK;AAAA,IAC7C;AAGA,QAAI,OAAO,eAAe;AACtB,cAAQ,MAAM,MAAM,SAAS,QAAQ,IAAI,OAAO,aAAa,GAAG;AAAA,IACpE;AAGA,QAAI,OAAO,oBAAoB,QAAW;AACtC,cAAQ,MAAM,MAAM,qBAAqB,OAAO,eAAe;AAAA,IACnE;AAGA,QAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AACzC,iBAAW,QAAQ,OAAO,OAAO;AAG7B,gBAAQ,MAAM;AAAA,UACV,KAAK,KAAK,OAAO,OAAO,WAAW,YAAY,iBAAiB;AAAA,UAChE,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,QACjC;AAAA,MACJ;AAAA,IACJ;AAGA,QAAI,OAAO,cAAc,OAAO,WAAW,SAAS,GAAG;AACnD,cAAQ,MAAM,MAAM,CAAC,YAA+B;AAChD,mBAAW,QAAQ,OAAO,YAAa;AACnC,kBAAQ;AAAA,YACJ,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,iBACA;AAAA,YACN,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,UACjC;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAGA,QAAI,QAAQ,QAAQ;AAChB,YAAM,aAAa,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE,SAAS,CAAC;AAC9E,cAAQ,MAAM,MAAM,MAAM,KAAK,WAAW,MAAM;AAAA,IACpD;AAGA,YAAQ,MAAM,QAAQ,MAAM,KAAK,EAAE,MAAM,QAAQ,CAAC;AAElD,UAAM,OAAO,MAAM;AACnB,UAAM,UAAU,KAAK,SAAS;AAC9B,UAAM,aAAa,UAAU,KAAK,MAAM,GAAG,KAAK,IAAI;AACpD,UAAM,QAAQ,WAAW,IAAI,CAAC,QAAiC,KAAK,WAAW,GAAG,CAAC;AAEnF,QAAI;AACJ,QAAI,WAAW,WAAW,SAAS,GAAG;AAClC,YAAM,WAAW,WAAW,WAAW,SAAS,CAAC;AACjD,mBAAa,OAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,SAAS,GAAG,CAAC,CAAC,EAAE,SAAS,QAAQ;AAAA,IACvF;AAEA,WAAO,EAAE,OAAO,WAAW;AAAA,EAC/B;AAAA;AAAA,EAIA,MAAM,cAAc,SAAiC;AACjD,UAAM,KAAK,cAAc,OAAO,KAAK,YAAY,OAAO,CAAC;AAAA,EAC7D;AAAA,EAEA,MAAM,eAAe,IAAqC;AACtD,UAAM,MAAM,MAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACzD,WAAO,MAAM,KAAK,cAAc,GAAG,IAAI;AAAA,EAC3C;AAAA,EAEA,MAAM,oBAAoB,QAAoC;AAC1D,UAAM,OAAO,MAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC;AAC/D,WAAO,KAAK,IAAI,CAAC,QAAiC,KAAK,cAAc,GAAG,CAAC;AAAA,EAC7E;AAAA,EAEA,MAAM,cAAc,IAAY,SAA0C;AACtE,UAAM,YAAY,KAAK,mBAAmB,OAAO;AAEjD,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EAC3D;AAAA,EAEA,MAAM,cAAc,IAA2B;AAC3C,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAClD;AAAA,EAEA,MAAM,sBAAsB,QAA+B;AACvD,UAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC,EAAE,OAAO;AAAA,EAC/D;AAAA,EAEA,MAAM,wBAAuC;AACzC,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,KAAK,cAAc,MAAM,cAAc,KAAK,GAAG,EAAE,OAAO;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,SAAS,MAAqC;AAClD,WAAO;AAAA,MACH,IAAI,KAAK;AAAA,MACT,OAAO,KAAK;AAAA,MACZ,YAAY,KAAK,aAAa;AAAA,MAC9B,WAAW,KAAK,YAAY;AAAA,MAC5B,eAAe,KAAK;AAAA,MACpB,OAAO,KAAK,UAAU,KAAK,KAAK;AAAA,MAChC,mBAAmB,KAAK;AAAA,MACxB,oBAAoB,KAAK,qBAAqB;AAAA,MAC9C,sBAAsB,KAAK,sBAAsB;AAAA,MACjD,wBAAwB,KAAK,wBAAwB;AAAA,MACrD,YAAY,KAAK;AAAA,MACjB,YAAY,KAAK;AAAA,IACrB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,WAAW,KAAoC;AACnD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,OAAO,IAAI;AAAA,MACX,WAAW,IAAI;AAAA,MACf,UAAU,IAAI;AAAA,MACd,cAAc,IAAI;AAAA,MAClB,OAAO,OAAO,IAAI,UAAU,WAAW,KAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAAA,MACnE,iBAAiB,QAAQ,IAAI,iBAAiB;AAAA,MAC9C,mBAAmB,IAAI;AAAA,MACvB,oBAAoB,IAAI;AAAA,MACxB,sBAAsB,IAAI;AAAA,MAC1B,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,IACnB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,YAAY,SAAiD;AACjE,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,QAAQ;AAAA,IAC9B;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,cAAc,SAAS;AACvB,gBAAU,YAAY,QAAQ,YAAY;AAAA,IAC9C;AACA,QAAI,QAAQ,iBAAiB,QAAW;AACpC,gBAAU,gBAAgB,QAAQ;AAAA,IACtC;AACA,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,KAAK,UAAU,QAAQ,KAAK;AAAA,IAClD;AACA,QAAI,QAAQ,oBAAoB,QAAW;AACvC,gBAAU,oBAAoB,QAAQ;AAAA,IAC1C;AACA,QAAI,uBAAuB,SAAS;AAChC,gBAAU,qBAAqB,QAAQ,qBAAqB;AAAA,IAChE;AACA,QAAI,wBAAwB,SAAS;AACjC,gBAAU,uBAAuB,QAAQ,sBAAsB;AAAA,IACnE;AACA,QAAI,0BAA0B,SAAS;AACnC,gBAAU,yBAAyB,QAAQ,wBAAwB;AAAA,IACvE;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,YAAY,SAA2C;AAC3D,WAAO;AAAA,MACH,IAAI,QAAQ;AAAA,MACZ,SAAS,QAAQ;AAAA,MACjB,oBAAoB,QAAQ;AAAA,MAC5B,YAAY,QAAQ,aAAa;AAAA,MACjC,YAAY,QAAQ,aAAa;AAAA,MACjC,aAAa,QAAQ,cAAc;AAAA,MACnC,YAAY,QAAQ;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,IACxB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAc,KAAuC;AACzD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,kBAAkB,IAAI;AAAA,MACtB,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,WAAW,IAAI;AAAA,IACnB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,mBAAmB,SAAoD;AAC3E,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,qBAAqB,QAAW;AACxC,gBAAU,qBAAqB,QAAQ;AAAA,IAC3C;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,gBAAgB,SAAS;AACzB,gBAAU,cAAc,QAAQ,cAAc;AAAA,IAClD;AACA,QAAI,QAAQ,eAAe,QAAW;AAClC,gBAAU,eAAe,QAAQ;AAAA,IACrC;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AACJ;;;ACxUA,eAAsB,0BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,OAAO,EAAE,YAAY,EAAE,OAAO;AAC3C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,WAAW,EAAE,SAAS;AACnC,UAAM,OAAO,eAAe,EAAE,YAAY;AAC1C,UAAM,MAAM,OAAO,EAAE,YAAY;AACjC,UAAM,QAAQ,mBAAmB,EAAE,YAAY,EAAE,UAAU,KAAK;AAChE,UAAM,OAAO,oBAAoB,EAAE,SAAS;AAC5C,UAAM,OAAO,sBAAsB,EAAE,SAAS;AAC9C,UAAM,WAAW,wBAAwB,EAAE,SAAS;AACpD,UAAM,WAAW,YAAY,EAAE,YAAY;AAC3C,UAAM,WAAW,YAAY,EAAE,YAAY;AAG3C,UAAM,MAAM,OAAO;AACnB,UAAM,MAAM,oBAAoB;AAChC,UAAM,MAAM,sBAAsB;AAAA,EACtC,CAAC;AACL;AAMA,eAAsB,6BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,SAAS,EAAE,YAAY;AACpC,UAAM,OAAO,oBAAoB,EAAE,YAAY;AAC/C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,aAAa,EAAE,SAAS;AACrC,UAAM,WAAW,YAAY,EAAE,YAAY;AAC3C,UAAM,WAAW,cAAc,EAAE,YAAY;AAC7C,UAAM,WAAW,YAAY,EAAE,YAAY;AAG3C,UAAM,MAAM,SAAS;AAErB,UAAM,MAAM,YAAY;AAAA,EAC5B,CAAC;AACL;","names":[]}
+{"version":3,"sources":["../src/index.ts","../src/knex.ts","../src/migration.ts"],"sourcesContent":["export { KnexStorageProvider, type KnexConfig } from './knex';\nexport { createUsersTableMigration, createSessionsTableMigration } from './migration';\n","import type { Knex } from 'knex';\nimport type {\n    CreateSessionInput,\n    CreateUserInput,\n    FindUsersOptions,\n    FindUsersResult,\n    IStorageProvider,\n    Session,\n    SessionId,\n    User,\n    UserFilter,\n    UserId,\n} from '@xcelsior/auth';\n\nexport interface KnexConfig {\n    /** Pre-configured Knex instance */\n    knex: Knex;\n    /** Table name for users */\n    tableName: string;\n    /** Table name for sessions */\n    sessionsTableName: string;\n    /** Optional schema (for PostgreSQL) */\n    schema?: string;\n}\n\nexport class KnexStorageProvider implements IStorageProvider {\n    private knex: Knex;\n    private tableName: string;\n    private sessionsTableName: string;\n    private schema?: string;\n\n    constructor(config: KnexConfig) {\n        this.knex = config.knex;\n        this.tableName = config.tableName;\n        this.sessionsTableName = config.sessionsTableName;\n        this.schema = config.schema;\n    }\n\n    private get table() {\n        const query = this.knex(this.tableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    private get sessionsTable() {\n        const query = this.knex(this.sessionsTableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    // ==================== User Methods ====================\n\n    async createUser(user: CreateUserInput): Promise<User> {\n        const dbUser = this.toDbUser(user);\n        const [insertedId] = await this.table.insert(dbUser);\n        // For auto-increment DBs, insertedId is the new ID\n        // For string PKs, it returns 0, so use the original id\n        const finalId = user.id ?? insertedId;\n        return { ...user, id: finalId } as User;\n    }\n\n    async getUserById(id: UserId): Promise<User | null> {\n        const row = await this.table.where({ id }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByEmail(email: string): Promise<User | null> {\n        const row = await this.table.where({ email }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null> {\n        const row = await this.table.where({ reset_password_token: resetPasswordToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null> {\n        const row = await this.table.where({ verification_token: verifyEmailToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async updateUser(id: UserId, updates: Partial<User>): Promise<void> {\n        const dbUpdates = this.toDbUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.table.where({ id }).update(dbUpdates);\n    }\n\n    async deleteUser(id: UserId): Promise<void> {\n        // Delete all user sessions first\n        await this.deleteAllUserSessions(id);\n        // Then delete the user\n        await this.table.where({ id }).delete();\n    }\n\n    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult> {\n        const limit = options.limit ?? 50;\n\n        let query = this.table.clone();\n\n        // Email exact match\n        if (filter.email) {\n            query = query.where('email', filter.email);\n        }\n\n        // Email contains (partial match)\n        if (filter.emailContains) {\n            query = query.where('email', 'like', `%${filter.emailContains}%`);\n        }\n\n        // Email verification status\n        if (filter.isEmailVerified !== undefined) {\n            query = query.where('is_email_verified', filter.isEmailVerified);\n        }\n\n        // Roles filtering - user must have ALL specified roles\n        if (filter.roles && filter.roles.length > 0) {\n            for (const role of filter.roles) {\n                // Use JSON contains - works for PostgreSQL (jsonb) and MySQL (json)\n                // For SQLite, we fall back to LIKE on the JSON string\n                query = query.whereRaw(\n                    this.knex.client.config.client === 'sqlite3' ? `roles LIKE ?` : `roles @> ?`,\n                    this.knex.client.config.client === 'sqlite3'\n                        ? [`%\"${role}\"%`]\n                        : [JSON.stringify([role])]\n                );\n            }\n        }\n\n        // HasAnyRole - user must have at least ONE of specified roles\n        if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {\n            query = query.where((builder: Knex.QueryBuilder) => {\n                for (const role of filter.hasAnyRole!) {\n                    builder.orWhereRaw(\n                        this.knex.client.config.client === 'sqlite3'\n                            ? `roles LIKE ?`\n                            : `roles @> ?`,\n                        this.knex.client.config.client === 'sqlite3'\n                            ? [`%\"${role}\"%`]\n                            : [JSON.stringify([role])]\n                    );\n                }\n            });\n        }\n\n        // Apply pagination\n        if (options.cursor) {\n            const cursorData = JSON.parse(Buffer.from(options.cursor, 'base64').toString());\n            query = query.where('id', '>', cursorData.lastId);\n        }\n\n        // Order by id for consistent pagination\n        query = query.orderBy('id', 'asc').limit(limit + 1);\n\n        const rows = await query;\n        const hasMore = rows.length > limit;\n        const resultRows = hasMore ? rows.slice(0, limit) : rows;\n        const users = resultRows.map((row: Record<string, unknown>) => this.fromDbUser(row));\n\n        let nextCursor: string | undefined;\n        if (hasMore && resultRows.length > 0) {\n            const lastUser = resultRows[resultRows.length - 1];\n            nextCursor = Buffer.from(JSON.stringify({ lastId: lastUser.id })).toString('base64');\n        }\n\n        return { users, nextCursor };\n    }\n\n    // ==================== Session Methods ====================\n\n    async createSession(session: CreateSessionInput): Promise<Session> {\n        const dbSession = this.toDbSession(session);\n        const [insertedId] = await this.sessionsTable.insert(dbSession);\n        const finalId = session.id ?? insertedId;\n        return { ...session, id: finalId } as Session;\n    }\n\n    async getSessionById(id: SessionId): Promise<Session | null> {\n        const row = await this.sessionsTable.where({ id }).first();\n        return row ? this.fromDbSession(row) : null;\n    }\n\n    async getSessionsByUserId(userId: UserId): Promise<Session[]> {\n        const rows = await this.sessionsTable.where({ user_id: userId });\n        return rows.map((row: Record<string, unknown>) => this.fromDbSession(row));\n    }\n\n    async updateSession(id: SessionId, updates: Partial<Session>): Promise<void> {\n        const dbUpdates = this.toDbSessionUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.sessionsTable.where({ id }).update(dbUpdates);\n    }\n\n    async deleteSession(id: SessionId): Promise<void> {\n        await this.sessionsTable.where({ id }).delete();\n    }\n\n    async deleteAllUserSessions(userId: UserId): Promise<void> {\n        await this.sessionsTable.where({ user_id: userId }).delete();\n    }\n\n    async deleteExpiredSessions(): Promise<void> {\n        const now = Date.now();\n        await this.sessionsTable.where('expires_at', '<', now).delete();\n    }\n\n    // ==================== User Mapping Helpers ====================\n\n    /**\n     * Convert User object to database row format (snake_case)\n     */\n    private toDbUser(user: CreateUserInput): Record<string, unknown> {\n        const row: Record<string, unknown> = {\n            email: user.email,\n            first_name: user.firstName ?? null,\n            last_name: user.lastName ?? null,\n            password_hash: user.passwordHash,\n            roles: JSON.stringify(user.roles),\n            is_email_verified: user.isEmailVerified ? 1 : 0,\n            verification_token: user.verificationToken ?? null,\n            reset_password_token: user.resetPasswordToken ?? null,\n            reset_password_expires: user.resetPasswordExpires ?? null,\n            created_at: user.createdAt ?? Date.now(),\n            updated_at: user.updatedAt ?? Date.now(),\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (user.id !== undefined) {\n            row.id = user.id;\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to User object (camelCase)\n     */\n    private fromDbUser(row: Record<string, unknown>): User {\n        return {\n            id: row.id as string | number,\n            email: row.email as string,\n            firstName: row.first_name as string | undefined,\n            lastName: row.last_name as string | undefined,\n            passwordHash: row.password_hash as string,\n            roles: typeof row.roles === 'string' ? JSON.parse(row.roles) : row.roles,\n            isEmailVerified: Boolean(row.is_email_verified),\n            verificationToken: row.verification_token as string | undefined,\n            resetPasswordToken: row.reset_password_token as string | undefined,\n            resetPasswordExpires: row.reset_password_expires as number | undefined,\n            createdAt: row.created_at as number,\n            updatedAt: row.updated_at as number,\n        };\n    }\n\n    /**\n     * Convert partial User updates to database format\n     */\n    private toDbUpdates(updates: Partial<User>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.email !== undefined) {\n            dbUpdates.email = updates.email;\n        }\n        if ('firstName' in updates) {\n            dbUpdates.first_name = updates.firstName ?? null;\n        }\n        if ('lastName' in updates) {\n            dbUpdates.last_name = updates.lastName ?? null;\n        }\n        if (updates.passwordHash !== undefined) {\n            dbUpdates.password_hash = updates.passwordHash;\n        }\n        if (updates.roles !== undefined) {\n            dbUpdates.roles = JSON.stringify(updates.roles);\n        }\n        if (updates.isEmailVerified !== undefined) {\n            dbUpdates.is_email_verified = updates.isEmailVerified ? 1 : 0;\n        }\n        if ('verificationToken' in updates) {\n            dbUpdates.verification_token = updates.verificationToken ?? null;\n        }\n        if ('resetPasswordToken' in updates) {\n            dbUpdates.reset_password_token = updates.resetPasswordToken ?? null;\n        }\n        if ('resetPasswordExpires' in updates) {\n            dbUpdates.reset_password_expires = updates.resetPasswordExpires ?? null;\n        }\n        if (updates.updatedAt !== undefined) {\n            dbUpdates.updated_at = updates.updatedAt;\n        }\n\n        return dbUpdates;\n    }\n\n    // ==================== Session Mapping Helpers ====================\n\n    /**\n     * Convert Session object to database row format (snake_case)\n     */\n    private toDbSession(session: CreateSessionInput): Record<string, unknown> {\n        const row: Record<string, unknown> = {\n            user_id: session.userId,\n            refresh_token_hash: session.refreshTokenHash,\n            user_agent: session.userAgent ?? null,\n            ip_address: session.ipAddress ?? null,\n            device_name: session.deviceName ?? null,\n            created_at: session.createdAt,\n            last_used_at: session.lastUsedAt,\n            expires_at: session.expiresAt,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (session.id !== undefined) {\n            row.id = session.id;\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to Session object (camelCase)\n     */\n    private fromDbSession(row: Record<string, unknown>): Session {\n        return {\n            id: row.id as string | number,\n            userId: row.user_id as string | number,\n            refreshTokenHash: row.refresh_token_hash as string,\n            userAgent: row.user_agent as string | undefined,\n            ipAddress: row.ip_address as string | undefined,\n            deviceName: row.device_name as string | undefined,\n            createdAt: row.created_at as number,\n            lastUsedAt: row.last_used_at as number,\n            expiresAt: row.expires_at as number,\n        };\n    }\n\n    /**\n     * Convert partial Session updates to database format\n     */\n    private toDbSessionUpdates(updates: Partial<Session>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.refreshTokenHash !== undefined) {\n            dbUpdates.refresh_token_hash = updates.refreshTokenHash;\n        }\n        if ('userAgent' in updates) {\n            dbUpdates.user_agent = updates.userAgent ?? null;\n        }\n        if ('ipAddress' in updates) {\n            dbUpdates.ip_address = updates.ipAddress ?? null;\n        }\n        if ('deviceName' in updates) {\n            dbUpdates.device_name = updates.deviceName ?? null;\n        }\n        if (updates.lastUsedAt !== undefined) {\n            dbUpdates.last_used_at = updates.lastUsedAt;\n        }\n        if (updates.expiresAt !== undefined) {\n            dbUpdates.expires_at = updates.expiresAt;\n        }\n\n        return dbUpdates;\n    }\n}\n","import type { Knex } from 'knex';\n\n/**\n * SQL migration helper to create the users table\n * Can be used with Knex migrations\n *\n * @example\n * ```ts\n * // In your migration file\n * import { createUsersTableMigration, createSessionsTableMigration } from '@xcelsior/auth-adapter-knex';\n *\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users');\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * export async function down(knex: Knex): Promise<void> {\n *   await knex.schema.dropTableIfExists('sessions');\n *   await knex.schema.dropTableIfExists('users');\n * }\n * ```\n */\nexport async function createUsersTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('email').notNullable().unique();\n        table.string('first_name').nullable();\n        table.string('last_name').nullable();\n        table.string('password_hash').notNullable();\n        table.jsonb('roles').notNullable();\n        table.boolean('is_email_verified').notNullable().defaultTo(false);\n        table.string('verification_token').nullable();\n        table.string('reset_password_token').nullable();\n        table.bigInteger('reset_password_expires').nullable();\n        table.bigInteger('created_at').notNullable();\n        table.bigInteger('updated_at').notNullable();\n\n        // Indexes for common lookups\n        table.index('email');\n        table.index('verification_token');\n        table.index('reset_password_token');\n    });\n}\n\n/**\n * SQL migration helper to create the sessions table\n * Can be used with Knex migrations\n */\nexport async function createSessionsTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('user_id').notNullable();\n        table.string('refresh_token_hash').notNullable();\n        table.string('user_agent').nullable();\n        table.string('ip_address').nullable();\n        table.string('device_name').nullable();\n        table.bigInteger('created_at').notNullable();\n        table.bigInteger('last_used_at').notNullable();\n        table.bigInteger('expires_at').notNullable();\n\n        // Index for querying sessions by user\n        table.index('user_id');\n        // Index for cleaning up expired sessions\n        table.index('expires_at');\n    });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACyBO,IAAM,sBAAN,MAAsD;AAAA,EAMzD,YAAY,QAAoB;AAC5B,SAAK,OAAO,OAAO;AACnB,SAAK,YAAY,OAAO;AACxB,SAAK,oBAAoB,OAAO;AAChC,SAAK,SAAS,OAAO;AAAA,EACzB;AAAA,EAEA,IAAY,QAAQ;AAChB,UAAM,QAAQ,KAAK,KAAK,KAAK,SAAS;AACtC,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA,EAEA,IAAY,gBAAgB;AACxB,UAAM,QAAQ,KAAK,KAAK,KAAK,iBAAiB;AAC9C,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA;AAAA,EAIA,MAAM,WAAW,MAAsC;AACnD,UAAM,SAAS,KAAK,SAAS,IAAI;AACjC,UAAM,CAAC,UAAU,IAAI,MAAM,KAAK,MAAM,OAAO,MAAM;AAGnD,UAAM,UAAU,KAAK,MAAM;AAC3B,WAAO,EAAE,GAAG,MAAM,IAAI,QAAQ;AAAA,EAClC;AAAA,EAEA,MAAM,YAAY,IAAkC;AAChD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACjD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,eAAe,OAAqC;AACtD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;AACpD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,4BAA4B,oBAAkD;AAChF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,sBAAsB,mBAAmB,CAAC,EAAE,MAAM;AACvF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,0BAA0B,kBAAgD;AAC5E,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,oBAAoB,iBAAiB,CAAC,EAAE,MAAM;AACnF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,WAAW,IAAY,SAAuC;AAChE,UAAM,YAAY,KAAK,YAAY,OAAO;AAE1C,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EACnD;AAAA,EAEA,MAAM,WAAW,IAA2B;AAExC,UAAM,KAAK,sBAAsB,EAAE;AAEnC,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAC1C;AAAA,EAEA,MAAM,UAAU,QAAoB,UAA4B,CAAC,GAA6B;AAC1F,UAAM,QAAQ,QAAQ,SAAS;AAE/B,QAAI,QAAQ,KAAK,MAAM,MAAM;AAG7B,QAAI,OAAO,OAAO;AACd,cAAQ,MAAM,MAAM,SAAS,OAAO,KAAK;AAAA,IAC7C;AAGA,QAAI,OAAO,eAAe;AACtB,cAAQ,MAAM,MAAM,SAAS,QAAQ,IAAI,OAAO,aAAa,GAAG;AAAA,IACpE;AAGA,QAAI,OAAO,oBAAoB,QAAW;AACtC,cAAQ,MAAM,MAAM,qBAAqB,OAAO,eAAe;AAAA,IACnE;AAGA,QAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AACzC,iBAAW,QAAQ,OAAO,OAAO;AAG7B,gBAAQ,MAAM;AAAA,UACV,KAAK,KAAK,OAAO,OAAO,WAAW,YAAY,iBAAiB;AAAA,UAChE,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,QACjC;AAAA,MACJ;AAAA,IACJ;AAGA,QAAI,OAAO,cAAc,OAAO,WAAW,SAAS,GAAG;AACnD,cAAQ,MAAM,MAAM,CAAC,YAA+B;AAChD,mBAAW,QAAQ,OAAO,YAAa;AACnC,kBAAQ;AAAA,YACJ,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,iBACA;AAAA,YACN,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,UACjC;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAGA,QAAI,QAAQ,QAAQ;AAChB,YAAM,aAAa,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE,SAAS,CAAC;AAC9E,cAAQ,MAAM,MAAM,MAAM,KAAK,WAAW,MAAM;AAAA,IACpD;AAGA,YAAQ,MAAM,QAAQ,MAAM,KAAK,EAAE,MAAM,QAAQ,CAAC;AAElD,UAAM,OAAO,MAAM;AACnB,UAAM,UAAU,KAAK,SAAS;AAC9B,UAAM,aAAa,UAAU,KAAK,MAAM,GAAG,KAAK,IAAI;AACpD,UAAM,QAAQ,WAAW,IAAI,CAAC,QAAiC,KAAK,WAAW,GAAG,CAAC;AAEnF,QAAI;AACJ,QAAI,WAAW,WAAW,SAAS,GAAG;AAClC,YAAM,WAAW,WAAW,WAAW,SAAS,CAAC;AACjD,mBAAa,OAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,SAAS,GAAG,CAAC,CAAC,EAAE,SAAS,QAAQ;AAAA,IACvF;AAEA,WAAO,EAAE,OAAO,WAAW;AAAA,EAC/B;AAAA;AAAA,EAIA,MAAM,cAAc,SAA+C;AAC/D,UAAM,YAAY,KAAK,YAAY,OAAO;AAC1C,UAAM,CAAC,UAAU,IAAI,MAAM,KAAK,cAAc,OAAO,SAAS;AAC9D,UAAM,UAAU,QAAQ,MAAM;AAC9B,WAAO,EAAE,GAAG,SAAS,IAAI,QAAQ;AAAA,EACrC;AAAA,EAEA,MAAM,eAAe,IAAwC;AACzD,UAAM,MAAM,MAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACzD,WAAO,MAAM,KAAK,cAAc,GAAG,IAAI;AAAA,EAC3C;AAAA,EAEA,MAAM,oBAAoB,QAAoC;AAC1D,UAAM,OAAO,MAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC;AAC/D,WAAO,KAAK,IAAI,CAAC,QAAiC,KAAK,cAAc,GAAG,CAAC;AAAA,EAC7E;AAAA,EAEA,MAAM,cAAc,IAAe,SAA0C;AACzE,UAAM,YAAY,KAAK,mBAAmB,OAAO;AAEjD,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EAC3D;AAAA,EAEA,MAAM,cAAc,IAA8B;AAC9C,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAClD;AAAA,EAEA,MAAM,sBAAsB,QAA+B;AACvD,UAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC,EAAE,OAAO;AAAA,EAC/D;AAAA,EAEA,MAAM,wBAAuC;AACzC,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,KAAK,cAAc,MAAM,cAAc,KAAK,GAAG,EAAE,OAAO;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,SAAS,MAAgD;AAC7D,UAAM,MAA+B;AAAA,MACjC,OAAO,KAAK;AAAA,MACZ,YAAY,KAAK,aAAa;AAAA,MAC9B,WAAW,KAAK,YAAY;AAAA,MAC5B,eAAe,KAAK;AAAA,MACpB,OAAO,KAAK,UAAU,KAAK,KAAK;AAAA,MAChC,mBAAmB,KAAK,kBAAkB,IAAI;AAAA,MAC9C,oBAAoB,KAAK,qBAAqB;AAAA,MAC9C,sBAAsB,KAAK,sBAAsB;AAAA,MACjD,wBAAwB,KAAK,wBAAwB;AAAA,MACrD,YAAY,KAAK,aAAa,KAAK,IAAI;AAAA,MACvC,YAAY,KAAK,aAAa,KAAK,IAAI;AAAA,IAC3C;AAGA,QAAI,KAAK,OAAO,QAAW;AACvB,UAAI,KAAK,KAAK;AAAA,IAClB;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKQ,WAAW,KAAoC;AACnD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,OAAO,IAAI;AAAA,MACX,WAAW,IAAI;AAAA,MACf,UAAU,IAAI;AAAA,MACd,cAAc,IAAI;AAAA,MAClB,OAAO,OAAO,IAAI,UAAU,WAAW,KAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAAA,MACnE,iBAAiB,QAAQ,IAAI,iBAAiB;AAAA,MAC9C,mBAAmB,IAAI;AAAA,MACvB,oBAAoB,IAAI;AAAA,MACxB,sBAAsB,IAAI;AAAA,MAC1B,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,IACnB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,YAAY,SAAiD;AACjE,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,QAAQ;AAAA,IAC9B;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,cAAc,SAAS;AACvB,gBAAU,YAAY,QAAQ,YAAY;AAAA,IAC9C;AACA,QAAI,QAAQ,iBAAiB,QAAW;AACpC,gBAAU,gBAAgB,QAAQ;AAAA,IACtC;AACA,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,KAAK,UAAU,QAAQ,KAAK;AAAA,IAClD;AACA,QAAI,QAAQ,oBAAoB,QAAW;AACvC,gBAAU,oBAAoB,QAAQ,kBAAkB,IAAI;AAAA,IAChE;AACA,QAAI,uBAAuB,SAAS;AAChC,gBAAU,qBAAqB,QAAQ,qBAAqB;AAAA,IAChE;AACA,QAAI,wBAAwB,SAAS;AACjC,gBAAU,uBAAuB,QAAQ,sBAAsB;AAAA,IACnE;AACA,QAAI,0BAA0B,SAAS;AACnC,gBAAU,yBAAyB,QAAQ,wBAAwB;AAAA,IACvE;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,YAAY,SAAsD;AACtE,UAAM,MAA+B;AAAA,MACjC,SAAS,QAAQ;AAAA,MACjB,oBAAoB,QAAQ;AAAA,MAC5B,YAAY,QAAQ,aAAa;AAAA,MACjC,YAAY,QAAQ,aAAa;AAAA,MACjC,aAAa,QAAQ,cAAc;AAAA,MACnC,YAAY,QAAQ;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,IACxB;AAGA,QAAI,QAAQ,OAAO,QAAW;AAC1B,UAAI,KAAK,QAAQ;AAAA,IACrB;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAc,KAAuC;AACzD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,kBAAkB,IAAI;AAAA,MACtB,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,WAAW,IAAI;AAAA,IACnB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,mBAAmB,SAAoD;AAC3E,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,qBAAqB,QAAW;AACxC,gBAAU,qBAAqB,QAAQ;AAAA,IAC3C;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,gBAAgB,SAAS;AACzB,gBAAU,cAAc,QAAQ,cAAc;AAAA,IAClD;AACA,QAAI,QAAQ,eAAe,QAAW;AAClC,gBAAU,eAAe,QAAQ;AAAA,IACrC;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AACJ;;;AC9VA,eAAsB,0BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,OAAO,EAAE,YAAY,EAAE,OAAO;AAC3C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,WAAW,EAAE,SAAS;AACnC,UAAM,OAAO,eAAe,EAAE,YAAY;AAC1C,UAAM,MAAM,OAAO,EAAE,YAAY;AACjC,UAAM,QAAQ,mBAAmB,EAAE,YAAY,EAAE,UAAU,KAAK;AAChE,UAAM,OAAO,oBAAoB,EAAE,SAAS;AAC5C,UAAM,OAAO,sBAAsB,EAAE,SAAS;AAC9C,UAAM,WAAW,wBAAwB,EAAE,SAAS;AACpD,UAAM,WAAW,YAAY,EAAE,YAAY;AAC3C,UAAM,WAAW,YAAY,EAAE,YAAY;AAG3C,UAAM,MAAM,OAAO;AACnB,UAAM,MAAM,oBAAoB;AAChC,UAAM,MAAM,sBAAsB;AAAA,EACtC,CAAC;AACL;AAMA,eAAsB,6BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,SAAS,EAAE,YAAY;AACpC,UAAM,OAAO,oBAAoB,EAAE,YAAY;AAC/C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,aAAa,EAAE,SAAS;AACrC,UAAM,WAAW,YAAY,EAAE,YAAY;AAC3C,UAAM,WAAW,cAAc,EAAE,YAAY;AAC7C,UAAM,WAAW,YAAY,EAAE,YAAY;AAG3C,UAAM,MAAM,SAAS;AAErB,UAAM,MAAM,YAAY;AAAA,EAC5B,CAAC;AACL;","names":[]}

package/dist/index.mjs

@@ -22,7 +22,10 @@ var KnexStorageProvider = class {
   }
   // ==================== User Methods ====================
   async createUser(user) {
-    await this.table.insert(this.toDbUser(user));
+    const dbUser = this.toDbUser(user);
+    const [insertedId] = await this.table.insert(dbUser);
+    const finalId = user.id ?? insertedId;
+    return { ...user, id: finalId };
   }
   async getUserById(id) {
     const row = await this.table.where({ id }).first();
@@ -99,7 +102,10 @@ var KnexStorageProvider = class {
   }
   // ==================== Session Methods ====================
   async createSession(session) {
-    await this.sessionsTable.insert(this.toDbSession(session));
+    const dbSession = this.toDbSession(session);
+    const [insertedId] = await this.sessionsTable.insert(dbSession);
+    const finalId = session.id ?? insertedId;
+    return { ...session, id: finalId };
   }
   async getSessionById(id) {
     const row = await this.sessionsTable.where({ id }).first();
@@ -131,20 +137,23 @@ var KnexStorageProvider = class {
    * Convert User object to database row format (snake_case)
    */
   toDbUser(user) {
-    return {
-      id: user.id,
+    const row = {
       email: user.email,
       first_name: user.firstName ?? null,
       last_name: user.lastName ?? null,
       password_hash: user.passwordHash,
       roles: JSON.stringify(user.roles),
-      is_email_verified: user.isEmailVerified,
+      is_email_verified: user.isEmailVerified ? 1 : 0,
       verification_token: user.verificationToken ?? null,
       reset_password_token: user.resetPasswordToken ?? null,
       reset_password_expires: user.resetPasswordExpires ?? null,
-      created_at: user.createdAt,
-      updated_at: user.updatedAt
+      created_at: user.createdAt ?? Date.now(),
+      updated_at: user.updatedAt ?? Date.now()
     };
+    if (user.id !== void 0) {
+      row.id = user.id;
+    }
+    return row;
   }
   /**
    * Convert database row to User object (camelCase)
@@ -186,7 +195,7 @@ var KnexStorageProvider = class {
       dbUpdates.roles = JSON.stringify(updates.roles);
     }
     if (updates.isEmailVerified !== void 0) {
-      dbUpdates.is_email_verified = updates.isEmailVerified;
+      dbUpdates.is_email_verified = updates.isEmailVerified ? 1 : 0;
     }
     if ("verificationToken" in updates) {
       dbUpdates.verification_token = updates.verificationToken ?? null;
@@ -207,8 +216,7 @@ var KnexStorageProvider = class {
    * Convert Session object to database row format (snake_case)
    */
   toDbSession(session) {
-    return {
-      id: session.id,
+    const row = {
       user_id: session.userId,
       refresh_token_hash: session.refreshTokenHash,
       user_agent: session.userAgent ?? null,
@@ -218,6 +226,10 @@ var KnexStorageProvider = class {
       last_used_at: session.lastUsedAt,
       expires_at: session.expiresAt
     };
+    if (session.id !== void 0) {
+      row.id = session.id;
+    }
+    return row;
   }
   /**
    * Convert database row to Session object (camelCase)

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/knex.ts","../src/migration.ts"],"sourcesContent":["import type { Knex } from 'knex';\nimport type {\n    IStorageProvider,\n    User,\n    Session,\n    UserFilter,\n    FindUsersOptions,\n    FindUsersResult,\n} from '@xcelsior/auth';\n\nexport interface KnexConfig {\n    /** Pre-configured Knex instance */\n    knex: Knex;\n    /** Table name for users */\n    tableName: string;\n    /** Table name for sessions */\n    sessionsTableName: string;\n    /** Optional schema (for PostgreSQL) */\n    schema?: string;\n}\n\nexport class KnexStorageProvider implements IStorageProvider {\n    private knex: Knex;\n    private tableName: string;\n    private sessionsTableName: string;\n    private schema?: string;\n\n    constructor(config: KnexConfig) {\n        this.knex = config.knex;\n        this.tableName = config.tableName;\n        this.sessionsTableName = config.sessionsTableName;\n        this.schema = config.schema;\n    }\n\n    private get table() {\n        const query = this.knex(this.tableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    private get sessionsTable() {\n        const query = this.knex(this.sessionsTableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    // ==================== User Methods ====================\n\n    async createUser(user: User): Promise<void> {\n        await this.table.insert(this.toDbUser(user));\n    }\n\n    async getUserById(id: string): Promise<User | null> {\n        const row = await this.table.where({ id }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByEmail(email: string): Promise<User | null> {\n        const row = await this.table.where({ email }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null> {\n        const row = await this.table.where({ reset_password_token: resetPasswordToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null> {\n        const row = await this.table.where({ verification_token: verifyEmailToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async updateUser(id: string, updates: Partial<User>): Promise<void> {\n        const dbUpdates = this.toDbUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.table.where({ id }).update(dbUpdates);\n    }\n\n    async deleteUser(id: string): Promise<void> {\n        // Delete all user sessions first\n        await this.deleteAllUserSessions(id);\n        // Then delete the user\n        await this.table.where({ id }).delete();\n    }\n\n    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult> {\n        const limit = options.limit ?? 50;\n\n        let query = this.table.clone();\n\n        // Email exact match\n        if (filter.email) {\n            query = query.where('email', filter.email);\n        }\n\n        // Email contains (partial match)\n        if (filter.emailContains) {\n            query = query.where('email', 'like', `%${filter.emailContains}%`);\n        }\n\n        // Email verification status\n        if (filter.isEmailVerified !== undefined) {\n            query = query.where('is_email_verified', filter.isEmailVerified);\n        }\n\n        // Roles filtering - user must have ALL specified roles\n        if (filter.roles && filter.roles.length > 0) {\n            for (const role of filter.roles) {\n                // Use JSON contains - works for PostgreSQL (jsonb) and MySQL (json)\n                // For SQLite, we fall back to LIKE on the JSON string\n                query = query.whereRaw(\n                    this.knex.client.config.client === 'sqlite3' ? `roles LIKE ?` : `roles @> ?`,\n                    this.knex.client.config.client === 'sqlite3'\n                        ? [`%\"${role}\"%`]\n                        : [JSON.stringify([role])]\n                );\n            }\n        }\n\n        // HasAnyRole - user must have at least ONE of specified roles\n        if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {\n            query = query.where((builder: Knex.QueryBuilder) => {\n                for (const role of filter.hasAnyRole!) {\n                    builder.orWhereRaw(\n                        this.knex.client.config.client === 'sqlite3'\n                            ? `roles LIKE ?`\n                            : `roles @> ?`,\n                        this.knex.client.config.client === 'sqlite3'\n                            ? [`%\"${role}\"%`]\n                            : [JSON.stringify([role])]\n                    );\n                }\n            });\n        }\n\n        // Apply pagination\n        if (options.cursor) {\n            const cursorData = JSON.parse(Buffer.from(options.cursor, 'base64').toString());\n            query = query.where('id', '>', cursorData.lastId);\n        }\n\n        // Order by id for consistent pagination\n        query = query.orderBy('id', 'asc').limit(limit + 1);\n\n        const rows = await query;\n        const hasMore = rows.length > limit;\n        const resultRows = hasMore ? rows.slice(0, limit) : rows;\n        const users = resultRows.map((row: Record<string, unknown>) => this.fromDbUser(row));\n\n        let nextCursor: string | undefined;\n        if (hasMore && resultRows.length > 0) {\n            const lastUser = resultRows[resultRows.length - 1];\n            nextCursor = Buffer.from(JSON.stringify({ lastId: lastUser.id })).toString('base64');\n        }\n\n        return { users, nextCursor };\n    }\n\n    // ==================== Session Methods ====================\n\n    async createSession(session: Session): Promise<void> {\n        await this.sessionsTable.insert(this.toDbSession(session));\n    }\n\n    async getSessionById(id: string): Promise<Session | null> {\n        const row = await this.sessionsTable.where({ id }).first();\n        return row ? this.fromDbSession(row) : null;\n    }\n\n    async getSessionsByUserId(userId: string): Promise<Session[]> {\n        const rows = await this.sessionsTable.where({ user_id: userId });\n        return rows.map((row: Record<string, unknown>) => this.fromDbSession(row));\n    }\n\n    async updateSession(id: string, updates: Partial<Session>): Promise<void> {\n        const dbUpdates = this.toDbSessionUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.sessionsTable.where({ id }).update(dbUpdates);\n    }\n\n    async deleteSession(id: string): Promise<void> {\n        await this.sessionsTable.where({ id }).delete();\n    }\n\n    async deleteAllUserSessions(userId: string): Promise<void> {\n        await this.sessionsTable.where({ user_id: userId }).delete();\n    }\n\n    async deleteExpiredSessions(): Promise<void> {\n        const now = Date.now();\n        await this.sessionsTable.where('expires_at', '<', now).delete();\n    }\n\n    // ==================== User Mapping Helpers ====================\n\n    /**\n     * Convert User object to database row format (snake_case)\n     */\n    private toDbUser(user: User): Record<string, unknown> {\n        return {\n            id: user.id,\n            email: user.email,\n            first_name: user.firstName ?? null,\n            last_name: user.lastName ?? null,\n            password_hash: user.passwordHash,\n            roles: JSON.stringify(user.roles),\n            is_email_verified: user.isEmailVerified,\n            verification_token: user.verificationToken ?? null,\n            reset_password_token: user.resetPasswordToken ?? null,\n            reset_password_expires: user.resetPasswordExpires ?? null,\n            created_at: user.createdAt,\n            updated_at: user.updatedAt,\n        };\n    }\n\n    /**\n     * Convert database row to User object (camelCase)\n     */\n    private fromDbUser(row: Record<string, unknown>): User {\n        return {\n            id: row.id as string,\n            email: row.email as string,\n            firstName: row.first_name as string | undefined,\n            lastName: row.last_name as string | undefined,\n            passwordHash: row.password_hash as string,\n            roles: typeof row.roles === 'string' ? JSON.parse(row.roles) : row.roles,\n            isEmailVerified: Boolean(row.is_email_verified),\n            verificationToken: row.verification_token as string | undefined,\n            resetPasswordToken: row.reset_password_token as string | undefined,\n            resetPasswordExpires: row.reset_password_expires as number | undefined,\n            createdAt: row.created_at as number,\n            updatedAt: row.updated_at as number,\n        };\n    }\n\n    /**\n     * Convert partial User updates to database format\n     */\n    private toDbUpdates(updates: Partial<User>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.email !== undefined) {\n            dbUpdates.email = updates.email;\n        }\n        if ('firstName' in updates) {\n            dbUpdates.first_name = updates.firstName ?? null;\n        }\n        if ('lastName' in updates) {\n            dbUpdates.last_name = updates.lastName ?? null;\n        }\n        if (updates.passwordHash !== undefined) {\n            dbUpdates.password_hash = updates.passwordHash;\n        }\n        if (updates.roles !== undefined) {\n            dbUpdates.roles = JSON.stringify(updates.roles);\n        }\n        if (updates.isEmailVerified !== undefined) {\n            dbUpdates.is_email_verified = updates.isEmailVerified;\n        }\n        if ('verificationToken' in updates) {\n            dbUpdates.verification_token = updates.verificationToken ?? null;\n        }\n        if ('resetPasswordToken' in updates) {\n            dbUpdates.reset_password_token = updates.resetPasswordToken ?? null;\n        }\n        if ('resetPasswordExpires' in updates) {\n            dbUpdates.reset_password_expires = updates.resetPasswordExpires ?? null;\n        }\n        if (updates.updatedAt !== undefined) {\n            dbUpdates.updated_at = updates.updatedAt;\n        }\n\n        return dbUpdates;\n    }\n\n    // ==================== Session Mapping Helpers ====================\n\n    /**\n     * Convert Session object to database row format (snake_case)\n     */\n    private toDbSession(session: Session): Record<string, unknown> {\n        return {\n            id: session.id,\n            user_id: session.userId,\n            refresh_token_hash: session.refreshTokenHash,\n            user_agent: session.userAgent ?? null,\n            ip_address: session.ipAddress ?? null,\n            device_name: session.deviceName ?? null,\n            created_at: session.createdAt,\n            last_used_at: session.lastUsedAt,\n            expires_at: session.expiresAt,\n        };\n    }\n\n    /**\n     * Convert database row to Session object (camelCase)\n     */\n    private fromDbSession(row: Record<string, unknown>): Session {\n        return {\n            id: row.id as string,\n            userId: row.user_id as string,\n            refreshTokenHash: row.refresh_token_hash as string,\n            userAgent: row.user_agent as string | undefined,\n            ipAddress: row.ip_address as string | undefined,\n            deviceName: row.device_name as string | undefined,\n            createdAt: row.created_at as number,\n            lastUsedAt: row.last_used_at as number,\n            expiresAt: row.expires_at as number,\n        };\n    }\n\n    /**\n     * Convert partial Session updates to database format\n     */\n    private toDbSessionUpdates(updates: Partial<Session>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.refreshTokenHash !== undefined) {\n            dbUpdates.refresh_token_hash = updates.refreshTokenHash;\n        }\n        if ('userAgent' in updates) {\n            dbUpdates.user_agent = updates.userAgent ?? null;\n        }\n        if ('ipAddress' in updates) {\n            dbUpdates.ip_address = updates.ipAddress ?? null;\n        }\n        if ('deviceName' in updates) {\n            dbUpdates.device_name = updates.deviceName ?? null;\n        }\n        if (updates.lastUsedAt !== undefined) {\n            dbUpdates.last_used_at = updates.lastUsedAt;\n        }\n        if (updates.expiresAt !== undefined) {\n            dbUpdates.expires_at = updates.expiresAt;\n        }\n\n        return dbUpdates;\n    }\n}\n","import type { Knex } from 'knex';\n\n/**\n * SQL migration helper to create the users table\n * Can be used with Knex migrations\n *\n * @example\n * ```ts\n * // In your migration file\n * import { createUsersTableMigration, createSessionsTableMigration } from '@xcelsior/auth-adapter-knex';\n *\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users');\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * export async function down(knex: Knex): Promise<void> {\n *   await knex.schema.dropTableIfExists('sessions');\n *   await knex.schema.dropTableIfExists('users');\n * }\n * ```\n */\nexport async function createUsersTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('email').notNullable().unique();\n        table.string('first_name').nullable();\n        table.string('last_name').nullable();\n        table.string('password_hash').notNullable();\n        table.jsonb('roles').notNullable();\n        table.boolean('is_email_verified').notNullable().defaultTo(false);\n        table.string('verification_token').nullable();\n        table.string('reset_password_token').nullable();\n        table.bigInteger('reset_password_expires').nullable();\n        table.bigInteger('created_at').notNullable();\n        table.bigInteger('updated_at').notNullable();\n\n        // Indexes for common lookups\n        table.index('email');\n        table.index('verification_token');\n        table.index('reset_password_token');\n    });\n}\n\n/**\n * SQL migration helper to create the sessions table\n * Can be used with Knex migrations\n */\nexport async function createSessionsTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('user_id').notNullable();\n        table.string('refresh_token_hash').notNullable();\n        table.string('user_agent').nullable();\n        table.string('ip_address').nullable();\n        table.string('device_name').nullable();\n        table.bigInteger('created_at').notNullable();\n        table.bigInteger('last_used_at').notNullable();\n        table.bigInteger('expires_at').notNullable();\n\n        // Index for querying sessions by user\n        table.index('user_id');\n        // Index for cleaning up expired sessions\n        table.index('expires_at');\n    });\n}\n"],"mappings":";AAqBO,IAAM,sBAAN,MAAsD;AAAA,EAMzD,YAAY,QAAoB;AAC5B,SAAK,OAAO,OAAO;AACnB,SAAK,YAAY,OAAO;AACxB,SAAK,oBAAoB,OAAO;AAChC,SAAK,SAAS,OAAO;AAAA,EACzB;AAAA,EAEA,IAAY,QAAQ;AAChB,UAAM,QAAQ,KAAK,KAAK,KAAK,SAAS;AACtC,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA,EAEA,IAAY,gBAAgB;AACxB,UAAM,QAAQ,KAAK,KAAK,KAAK,iBAAiB;AAC9C,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA;AAAA,EAIA,MAAM,WAAW,MAA2B;AACxC,UAAM,KAAK,MAAM,OAAO,KAAK,SAAS,IAAI,CAAC;AAAA,EAC/C;AAAA,EAEA,MAAM,YAAY,IAAkC;AAChD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACjD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,eAAe,OAAqC;AACtD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;AACpD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,4BAA4B,oBAAkD;AAChF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,sBAAsB,mBAAmB,CAAC,EAAE,MAAM;AACvF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,0BAA0B,kBAAgD;AAC5E,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,oBAAoB,iBAAiB,CAAC,EAAE,MAAM;AACnF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,WAAW,IAAY,SAAuC;AAChE,UAAM,YAAY,KAAK,YAAY,OAAO;AAE1C,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EACnD;AAAA,EAEA,MAAM,WAAW,IAA2B;AAExC,UAAM,KAAK,sBAAsB,EAAE;AAEnC,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAC1C;AAAA,EAEA,MAAM,UAAU,QAAoB,UAA4B,CAAC,GAA6B;AAC1F,UAAM,QAAQ,QAAQ,SAAS;AAE/B,QAAI,QAAQ,KAAK,MAAM,MAAM;AAG7B,QAAI,OAAO,OAAO;AACd,cAAQ,MAAM,MAAM,SAAS,OAAO,KAAK;AAAA,IAC7C;AAGA,QAAI,OAAO,eAAe;AACtB,cAAQ,MAAM,MAAM,SAAS,QAAQ,IAAI,OAAO,aAAa,GAAG;AAAA,IACpE;AAGA,QAAI,OAAO,oBAAoB,QAAW;AACtC,cAAQ,MAAM,MAAM,qBAAqB,OAAO,eAAe;AAAA,IACnE;AAGA,QAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AACzC,iBAAW,QAAQ,OAAO,OAAO;AAG7B,gBAAQ,MAAM;AAAA,UACV,KAAK,KAAK,OAAO,OAAO,WAAW,YAAY,iBAAiB;AAAA,UAChE,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,QACjC;AAAA,MACJ;AAAA,IACJ;AAGA,QAAI,OAAO,cAAc,OAAO,WAAW,SAAS,GAAG;AACnD,cAAQ,MAAM,MAAM,CAAC,YAA+B;AAChD,mBAAW,QAAQ,OAAO,YAAa;AACnC,kBAAQ;AAAA,YACJ,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,iBACA;AAAA,YACN,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,UACjC;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAGA,QAAI,QAAQ,QAAQ;AAChB,YAAM,aAAa,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE,SAAS,CAAC;AAC9E,cAAQ,MAAM,MAAM,MAAM,KAAK,WAAW,MAAM;AAAA,IACpD;AAGA,YAAQ,MAAM,QAAQ,MAAM,KAAK,EAAE,MAAM,QAAQ,CAAC;AAElD,UAAM,OAAO,MAAM;AACnB,UAAM,UAAU,KAAK,SAAS;AAC9B,UAAM,aAAa,UAAU,KAAK,MAAM,GAAG,KAAK,IAAI;AACpD,UAAM,QAAQ,WAAW,IAAI,CAAC,QAAiC,KAAK,WAAW,GAAG,CAAC;AAEnF,QAAI;AACJ,QAAI,WAAW,WAAW,SAAS,GAAG;AAClC,YAAM,WAAW,WAAW,WAAW,SAAS,CAAC;AACjD,mBAAa,OAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,SAAS,GAAG,CAAC,CAAC,EAAE,SAAS,QAAQ;AAAA,IACvF;AAEA,WAAO,EAAE,OAAO,WAAW;AAAA,EAC/B;AAAA;AAAA,EAIA,MAAM,cAAc,SAAiC;AACjD,UAAM,KAAK,cAAc,OAAO,KAAK,YAAY,OAAO,CAAC;AAAA,EAC7D;AAAA,EAEA,MAAM,eAAe,IAAqC;AACtD,UAAM,MAAM,MAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACzD,WAAO,MAAM,KAAK,cAAc,GAAG,IAAI;AAAA,EAC3C;AAAA,EAEA,MAAM,oBAAoB,QAAoC;AAC1D,UAAM,OAAO,MAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC;AAC/D,WAAO,KAAK,IAAI,CAAC,QAAiC,KAAK,cAAc,GAAG,CAAC;AAAA,EAC7E;AAAA,EAEA,MAAM,cAAc,IAAY,SAA0C;AACtE,UAAM,YAAY,KAAK,mBAAmB,OAAO;AAEjD,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EAC3D;AAAA,EAEA,MAAM,cAAc,IAA2B;AAC3C,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAClD;AAAA,EAEA,MAAM,sBAAsB,QAA+B;AACvD,UAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC,EAAE,OAAO;AAAA,EAC/D;AAAA,EAEA,MAAM,wBAAuC;AACzC,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,KAAK,cAAc,MAAM,cAAc,KAAK,GAAG,EAAE,OAAO;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,SAAS,MAAqC;AAClD,WAAO;AAAA,MACH,IAAI,KAAK;AAAA,MACT,OAAO,KAAK;AAAA,MACZ,YAAY,KAAK,aAAa;AAAA,MAC9B,WAAW,KAAK,YAAY;AAAA,MAC5B,eAAe,KAAK;AAAA,MACpB,OAAO,KAAK,UAAU,KAAK,KAAK;AAAA,MAChC,mBAAmB,KAAK;AAAA,MACxB,oBAAoB,KAAK,qBAAqB;AAAA,MAC9C,sBAAsB,KAAK,sBAAsB;AAAA,MACjD,wBAAwB,KAAK,wBAAwB;AAAA,MACrD,YAAY,KAAK;AAAA,MACjB,YAAY,KAAK;AAAA,IACrB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,WAAW,KAAoC;AACnD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,OAAO,IAAI;AAAA,MACX,WAAW,IAAI;AAAA,MACf,UAAU,IAAI;AAAA,MACd,cAAc,IAAI;AAAA,MAClB,OAAO,OAAO,IAAI,UAAU,WAAW,KAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAAA,MACnE,iBAAiB,QAAQ,IAAI,iBAAiB;AAAA,MAC9C,mBAAmB,IAAI;AAAA,MACvB,oBAAoB,IAAI;AAAA,MACxB,sBAAsB,IAAI;AAAA,MAC1B,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,IACnB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,YAAY,SAAiD;AACjE,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,QAAQ;AAAA,IAC9B;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,cAAc,SAAS;AACvB,gBAAU,YAAY,QAAQ,YAAY;AAAA,IAC9C;AACA,QAAI,QAAQ,iBAAiB,QAAW;AACpC,gBAAU,gBAAgB,QAAQ;AAAA,IACtC;AACA,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,KAAK,UAAU,QAAQ,KAAK;AAAA,IAClD;AACA,QAAI,QAAQ,oBAAoB,QAAW;AACvC,gBAAU,oBAAoB,QAAQ;AAAA,IAC1C;AACA,QAAI,uBAAuB,SAAS;AAChC,gBAAU,qBAAqB,QAAQ,qBAAqB;AAAA,IAChE;AACA,QAAI,wBAAwB,SAAS;AACjC,gBAAU,uBAAuB,QAAQ,sBAAsB;AAAA,IACnE;AACA,QAAI,0BAA0B,SAAS;AACnC,gBAAU,yBAAyB,QAAQ,wBAAwB;AAAA,IACvE;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,YAAY,SAA2C;AAC3D,WAAO;AAAA,MACH,IAAI,QAAQ;AAAA,MACZ,SAAS,QAAQ;AAAA,MACjB,oBAAoB,QAAQ;AAAA,MAC5B,YAAY,QAAQ,aAAa;AAAA,MACjC,YAAY,QAAQ,aAAa;AAAA,MACjC,aAAa,QAAQ,cAAc;AAAA,MACnC,YAAY,QAAQ;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,IACxB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAc,KAAuC;AACzD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,kBAAkB,IAAI;AAAA,MACtB,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,WAAW,IAAI;AAAA,IACnB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,mBAAmB,SAAoD;AAC3E,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,qBAAqB,QAAW;AACxC,gBAAU,qBAAqB,QAAQ;AAAA,IAC3C;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,gBAAgB,SAAS;AACzB,gBAAU,cAAc,QAAQ,cAAc;AAAA,IAClD;AACA,QAAI,QAAQ,eAAe,QAAW;AAClC,gBAAU,eAAe,QAAQ;AAAA,IACrC;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AACJ;;;ACxUA,eAAsB,0BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,OAAO,EAAE,YAAY,EAAE,OAAO;AAC3C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,WAAW,EAAE,SAAS;AACnC,UAAM,OAAO,eAAe,EAAE,YAAY;AAC1C,UAAM,MAAM,OAAO,EAAE,YAAY;AACjC,UAAM,QAAQ,mBAAmB,EAAE,YAAY,EAAE,UAAU,KAAK;AAChE,UAAM,OAAO,oBAAoB,EAAE,SAAS;AAC5C,UAAM,OAAO,sBAAsB,EAAE,SAAS;AAC9C,UAAM,WAAW,wBAAwB,EAAE,SAAS;AACpD,UAAM,WAAW,YAAY,EAAE,YAAY;AAC3C,UAAM,WAAW,YAAY,EAAE,YAAY;AAG3C,UAAM,MAAM,OAAO;AACnB,UAAM,MAAM,oBAAoB;AAChC,UAAM,MAAM,sBAAsB;AAAA,EACtC,CAAC;AACL;AAMA,eAAsB,6BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,SAAS,EAAE,YAAY;AACpC,UAAM,OAAO,oBAAoB,EAAE,YAAY;AAC/C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,aAAa,EAAE,SAAS;AACrC,UAAM,WAAW,YAAY,EAAE,YAAY;AAC3C,UAAM,WAAW,cAAc,EAAE,YAAY;AAC7C,UAAM,WAAW,YAAY,EAAE,YAAY;AAG3C,UAAM,MAAM,SAAS;AAErB,UAAM,MAAM,YAAY;AAAA,EAC5B,CAAC;AACL;","names":[]}
+{"version":3,"sources":["../src/knex.ts","../src/migration.ts"],"sourcesContent":["import type { Knex } from 'knex';\nimport type {\n    CreateSessionInput,\n    CreateUserInput,\n    FindUsersOptions,\n    FindUsersResult,\n    IStorageProvider,\n    Session,\n    SessionId,\n    User,\n    UserFilter,\n    UserId,\n} from '@xcelsior/auth';\n\nexport interface KnexConfig {\n    /** Pre-configured Knex instance */\n    knex: Knex;\n    /** Table name for users */\n    tableName: string;\n    /** Table name for sessions */\n    sessionsTableName: string;\n    /** Optional schema (for PostgreSQL) */\n    schema?: string;\n}\n\nexport class KnexStorageProvider implements IStorageProvider {\n    private knex: Knex;\n    private tableName: string;\n    private sessionsTableName: string;\n    private schema?: string;\n\n    constructor(config: KnexConfig) {\n        this.knex = config.knex;\n        this.tableName = config.tableName;\n        this.sessionsTableName = config.sessionsTableName;\n        this.schema = config.schema;\n    }\n\n    private get table() {\n        const query = this.knex(this.tableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    private get sessionsTable() {\n        const query = this.knex(this.sessionsTableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    // ==================== User Methods ====================\n\n    async createUser(user: CreateUserInput): Promise<User> {\n        const dbUser = this.toDbUser(user);\n        const [insertedId] = await this.table.insert(dbUser);\n        // For auto-increment DBs, insertedId is the new ID\n        // For string PKs, it returns 0, so use the original id\n        const finalId = user.id ?? insertedId;\n        return { ...user, id: finalId } as User;\n    }\n\n    async getUserById(id: UserId): Promise<User | null> {\n        const row = await this.table.where({ id }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByEmail(email: string): Promise<User | null> {\n        const row = await this.table.where({ email }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null> {\n        const row = await this.table.where({ reset_password_token: resetPasswordToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null> {\n        const row = await this.table.where({ verification_token: verifyEmailToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async updateUser(id: UserId, updates: Partial<User>): Promise<void> {\n        const dbUpdates = this.toDbUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.table.where({ id }).update(dbUpdates);\n    }\n\n    async deleteUser(id: UserId): Promise<void> {\n        // Delete all user sessions first\n        await this.deleteAllUserSessions(id);\n        // Then delete the user\n        await this.table.where({ id }).delete();\n    }\n\n    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult> {\n        const limit = options.limit ?? 50;\n\n        let query = this.table.clone();\n\n        // Email exact match\n        if (filter.email) {\n            query = query.where('email', filter.email);\n        }\n\n        // Email contains (partial match)\n        if (filter.emailContains) {\n            query = query.where('email', 'like', `%${filter.emailContains}%`);\n        }\n\n        // Email verification status\n        if (filter.isEmailVerified !== undefined) {\n            query = query.where('is_email_verified', filter.isEmailVerified);\n        }\n\n        // Roles filtering - user must have ALL specified roles\n        if (filter.roles && filter.roles.length > 0) {\n            for (const role of filter.roles) {\n                // Use JSON contains - works for PostgreSQL (jsonb) and MySQL (json)\n                // For SQLite, we fall back to LIKE on the JSON string\n                query = query.whereRaw(\n                    this.knex.client.config.client === 'sqlite3' ? `roles LIKE ?` : `roles @> ?`,\n                    this.knex.client.config.client === 'sqlite3'\n                        ? [`%\"${role}\"%`]\n                        : [JSON.stringify([role])]\n                );\n            }\n        }\n\n        // HasAnyRole - user must have at least ONE of specified roles\n        if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {\n            query = query.where((builder: Knex.QueryBuilder) => {\n                for (const role of filter.hasAnyRole!) {\n                    builder.orWhereRaw(\n                        this.knex.client.config.client === 'sqlite3'\n                            ? `roles LIKE ?`\n                            : `roles @> ?`,\n                        this.knex.client.config.client === 'sqlite3'\n                            ? [`%\"${role}\"%`]\n                            : [JSON.stringify([role])]\n                    );\n                }\n            });\n        }\n\n        // Apply pagination\n        if (options.cursor) {\n            const cursorData = JSON.parse(Buffer.from(options.cursor, 'base64').toString());\n            query = query.where('id', '>', cursorData.lastId);\n        }\n\n        // Order by id for consistent pagination\n        query = query.orderBy('id', 'asc').limit(limit + 1);\n\n        const rows = await query;\n        const hasMore = rows.length > limit;\n        const resultRows = hasMore ? rows.slice(0, limit) : rows;\n        const users = resultRows.map((row: Record<string, unknown>) => this.fromDbUser(row));\n\n        let nextCursor: string | undefined;\n        if (hasMore && resultRows.length > 0) {\n            const lastUser = resultRows[resultRows.length - 1];\n            nextCursor = Buffer.from(JSON.stringify({ lastId: lastUser.id })).toString('base64');\n        }\n\n        return { users, nextCursor };\n    }\n\n    // ==================== Session Methods ====================\n\n    async createSession(session: CreateSessionInput): Promise<Session> {\n        const dbSession = this.toDbSession(session);\n        const [insertedId] = await this.sessionsTable.insert(dbSession);\n        const finalId = session.id ?? insertedId;\n        return { ...session, id: finalId } as Session;\n    }\n\n    async getSessionById(id: SessionId): Promise<Session | null> {\n        const row = await this.sessionsTable.where({ id }).first();\n        return row ? this.fromDbSession(row) : null;\n    }\n\n    async getSessionsByUserId(userId: UserId): Promise<Session[]> {\n        const rows = await this.sessionsTable.where({ user_id: userId });\n        return rows.map((row: Record<string, unknown>) => this.fromDbSession(row));\n    }\n\n    async updateSession(id: SessionId, updates: Partial<Session>): Promise<void> {\n        const dbUpdates = this.toDbSessionUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.sessionsTable.where({ id }).update(dbUpdates);\n    }\n\n    async deleteSession(id: SessionId): Promise<void> {\n        await this.sessionsTable.where({ id }).delete();\n    }\n\n    async deleteAllUserSessions(userId: UserId): Promise<void> {\n        await this.sessionsTable.where({ user_id: userId }).delete();\n    }\n\n    async deleteExpiredSessions(): Promise<void> {\n        const now = Date.now();\n        await this.sessionsTable.where('expires_at', '<', now).delete();\n    }\n\n    // ==================== User Mapping Helpers ====================\n\n    /**\n     * Convert User object to database row format (snake_case)\n     */\n    private toDbUser(user: CreateUserInput): Record<string, unknown> {\n        const row: Record<string, unknown> = {\n            email: user.email,\n            first_name: user.firstName ?? null,\n            last_name: user.lastName ?? null,\n            password_hash: user.passwordHash,\n            roles: JSON.stringify(user.roles),\n            is_email_verified: user.isEmailVerified ? 1 : 0,\n            verification_token: user.verificationToken ?? null,\n            reset_password_token: user.resetPasswordToken ?? null,\n            reset_password_expires: user.resetPasswordExpires ?? null,\n            created_at: user.createdAt ?? Date.now(),\n            updated_at: user.updatedAt ?? Date.now(),\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (user.id !== undefined) {\n            row.id = user.id;\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to User object (camelCase)\n     */\n    private fromDbUser(row: Record<string, unknown>): User {\n        return {\n            id: row.id as string | number,\n            email: row.email as string,\n            firstName: row.first_name as string | undefined,\n            lastName: row.last_name as string | undefined,\n            passwordHash: row.password_hash as string,\n            roles: typeof row.roles === 'string' ? JSON.parse(row.roles) : row.roles,\n            isEmailVerified: Boolean(row.is_email_verified),\n            verificationToken: row.verification_token as string | undefined,\n            resetPasswordToken: row.reset_password_token as string | undefined,\n            resetPasswordExpires: row.reset_password_expires as number | undefined,\n            createdAt: row.created_at as number,\n            updatedAt: row.updated_at as number,\n        };\n    }\n\n    /**\n     * Convert partial User updates to database format\n     */\n    private toDbUpdates(updates: Partial<User>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.email !== undefined) {\n            dbUpdates.email = updates.email;\n        }\n        if ('firstName' in updates) {\n            dbUpdates.first_name = updates.firstName ?? null;\n        }\n        if ('lastName' in updates) {\n            dbUpdates.last_name = updates.lastName ?? null;\n        }\n        if (updates.passwordHash !== undefined) {\n            dbUpdates.password_hash = updates.passwordHash;\n        }\n        if (updates.roles !== undefined) {\n            dbUpdates.roles = JSON.stringify(updates.roles);\n        }\n        if (updates.isEmailVerified !== undefined) {\n            dbUpdates.is_email_verified = updates.isEmailVerified ? 1 : 0;\n        }\n        if ('verificationToken' in updates) {\n            dbUpdates.verification_token = updates.verificationToken ?? null;\n        }\n        if ('resetPasswordToken' in updates) {\n            dbUpdates.reset_password_token = updates.resetPasswordToken ?? null;\n        }\n        if ('resetPasswordExpires' in updates) {\n            dbUpdates.reset_password_expires = updates.resetPasswordExpires ?? null;\n        }\n        if (updates.updatedAt !== undefined) {\n            dbUpdates.updated_at = updates.updatedAt;\n        }\n\n        return dbUpdates;\n    }\n\n    // ==================== Session Mapping Helpers ====================\n\n    /**\n     * Convert Session object to database row format (snake_case)\n     */\n    private toDbSession(session: CreateSessionInput): Record<string, unknown> {\n        const row: Record<string, unknown> = {\n            user_id: session.userId,\n            refresh_token_hash: session.refreshTokenHash,\n            user_agent: session.userAgent ?? null,\n            ip_address: session.ipAddress ?? null,\n            device_name: session.deviceName ?? null,\n            created_at: session.createdAt,\n            last_used_at: session.lastUsedAt,\n            expires_at: session.expiresAt,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (session.id !== undefined) {\n            row.id = session.id;\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to Session object (camelCase)\n     */\n    private fromDbSession(row: Record<string, unknown>): Session {\n        return {\n            id: row.id as string | number,\n            userId: row.user_id as string | number,\n            refreshTokenHash: row.refresh_token_hash as string,\n            userAgent: row.user_agent as string | undefined,\n            ipAddress: row.ip_address as string | undefined,\n            deviceName: row.device_name as string | undefined,\n            createdAt: row.created_at as number,\n            lastUsedAt: row.last_used_at as number,\n            expiresAt: row.expires_at as number,\n        };\n    }\n\n    /**\n     * Convert partial Session updates to database format\n     */\n    private toDbSessionUpdates(updates: Partial<Session>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.refreshTokenHash !== undefined) {\n            dbUpdates.refresh_token_hash = updates.refreshTokenHash;\n        }\n        if ('userAgent' in updates) {\n            dbUpdates.user_agent = updates.userAgent ?? null;\n        }\n        if ('ipAddress' in updates) {\n            dbUpdates.ip_address = updates.ipAddress ?? null;\n        }\n        if ('deviceName' in updates) {\n            dbUpdates.device_name = updates.deviceName ?? null;\n        }\n        if (updates.lastUsedAt !== undefined) {\n            dbUpdates.last_used_at = updates.lastUsedAt;\n        }\n        if (updates.expiresAt !== undefined) {\n            dbUpdates.expires_at = updates.expiresAt;\n        }\n\n        return dbUpdates;\n    }\n}\n","import type { Knex } from 'knex';\n\n/**\n * SQL migration helper to create the users table\n * Can be used with Knex migrations\n *\n * @example\n * ```ts\n * // In your migration file\n * import { createUsersTableMigration, createSessionsTableMigration } from '@xcelsior/auth-adapter-knex';\n *\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users');\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * export async function down(knex: Knex): Promise<void> {\n *   await knex.schema.dropTableIfExists('sessions');\n *   await knex.schema.dropTableIfExists('users');\n * }\n * ```\n */\nexport async function createUsersTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('email').notNullable().unique();\n        table.string('first_name').nullable();\n        table.string('last_name').nullable();\n        table.string('password_hash').notNullable();\n        table.jsonb('roles').notNullable();\n        table.boolean('is_email_verified').notNullable().defaultTo(false);\n        table.string('verification_token').nullable();\n        table.string('reset_password_token').nullable();\n        table.bigInteger('reset_password_expires').nullable();\n        table.bigInteger('created_at').notNullable();\n        table.bigInteger('updated_at').notNullable();\n\n        // Indexes for common lookups\n        table.index('email');\n        table.index('verification_token');\n        table.index('reset_password_token');\n    });\n}\n\n/**\n * SQL migration helper to create the sessions table\n * Can be used with Knex migrations\n */\nexport async function createSessionsTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('user_id').notNullable();\n        table.string('refresh_token_hash').notNullable();\n        table.string('user_agent').nullable();\n        table.string('ip_address').nullable();\n        table.string('device_name').nullable();\n        table.bigInteger('created_at').notNullable();\n        table.bigInteger('last_used_at').notNullable();\n        table.bigInteger('expires_at').notNullable();\n\n        // Index for querying sessions by user\n        table.index('user_id');\n        // Index for cleaning up expired sessions\n        table.index('expires_at');\n    });\n}\n"],"mappings":";AAyBO,IAAM,sBAAN,MAAsD;AAAA,EAMzD,YAAY,QAAoB;AAC5B,SAAK,OAAO,OAAO;AACnB,SAAK,YAAY,OAAO;AACxB,SAAK,oBAAoB,OAAO;AAChC,SAAK,SAAS,OAAO;AAAA,EACzB;AAAA,EAEA,IAAY,QAAQ;AAChB,UAAM,QAAQ,KAAK,KAAK,KAAK,SAAS;AACtC,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA,EAEA,IAAY,gBAAgB;AACxB,UAAM,QAAQ,KAAK,KAAK,KAAK,iBAAiB;AAC9C,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA;AAAA,EAIA,MAAM,WAAW,MAAsC;AACnD,UAAM,SAAS,KAAK,SAAS,IAAI;AACjC,UAAM,CAAC,UAAU,IAAI,MAAM,KAAK,MAAM,OAAO,MAAM;AAGnD,UAAM,UAAU,KAAK,MAAM;AAC3B,WAAO,EAAE,GAAG,MAAM,IAAI,QAAQ;AAAA,EAClC;AAAA,EAEA,MAAM,YAAY,IAAkC;AAChD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACjD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,eAAe,OAAqC;AACtD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;AACpD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,4BAA4B,oBAAkD;AAChF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,sBAAsB,mBAAmB,CAAC,EAAE,MAAM;AACvF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,0BAA0B,kBAAgD;AAC5E,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,oBAAoB,iBAAiB,CAAC,EAAE,MAAM;AACnF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,WAAW,IAAY,SAAuC;AAChE,UAAM,YAAY,KAAK,YAAY,OAAO;AAE1C,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EACnD;AAAA,EAEA,MAAM,WAAW,IAA2B;AAExC,UAAM,KAAK,sBAAsB,EAAE;AAEnC,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAC1C;AAAA,EAEA,MAAM,UAAU,QAAoB,UAA4B,CAAC,GAA6B;AAC1F,UAAM,QAAQ,QAAQ,SAAS;AAE/B,QAAI,QAAQ,KAAK,MAAM,MAAM;AAG7B,QAAI,OAAO,OAAO;AACd,cAAQ,MAAM,MAAM,SAAS,OAAO,KAAK;AAAA,IAC7C;AAGA,QAAI,OAAO,eAAe;AACtB,cAAQ,MAAM,MAAM,SAAS,QAAQ,IAAI,OAAO,aAAa,GAAG;AAAA,IACpE;AAGA,QAAI,OAAO,oBAAoB,QAAW;AACtC,cAAQ,MAAM,MAAM,qBAAqB,OAAO,eAAe;AAAA,IACnE;AAGA,QAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AACzC,iBAAW,QAAQ,OAAO,OAAO;AAG7B,gBAAQ,MAAM;AAAA,UACV,KAAK,KAAK,OAAO,OAAO,WAAW,YAAY,iBAAiB;AAAA,UAChE,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,QACjC;AAAA,MACJ;AAAA,IACJ;AAGA,QAAI,OAAO,cAAc,OAAO,WAAW,SAAS,GAAG;AACnD,cAAQ,MAAM,MAAM,CAAC,YAA+B;AAChD,mBAAW,QAAQ,OAAO,YAAa;AACnC,kBAAQ;AAAA,YACJ,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,iBACA;AAAA,YACN,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,UACjC;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAGA,QAAI,QAAQ,QAAQ;AAChB,YAAM,aAAa,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE,SAAS,CAAC;AAC9E,cAAQ,MAAM,MAAM,MAAM,KAAK,WAAW,MAAM;AAAA,IACpD;AAGA,YAAQ,MAAM,QAAQ,MAAM,KAAK,EAAE,MAAM,QAAQ,CAAC;AAElD,UAAM,OAAO,MAAM;AACnB,UAAM,UAAU,KAAK,SAAS;AAC9B,UAAM,aAAa,UAAU,KAAK,MAAM,GAAG,KAAK,IAAI;AACpD,UAAM,QAAQ,WAAW,IAAI,CAAC,QAAiC,KAAK,WAAW,GAAG,CAAC;AAEnF,QAAI;AACJ,QAAI,WAAW,WAAW,SAAS,GAAG;AAClC,YAAM,WAAW,WAAW,WAAW,SAAS,CAAC;AACjD,mBAAa,OAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,SAAS,GAAG,CAAC,CAAC,EAAE,SAAS,QAAQ;AAAA,IACvF;AAEA,WAAO,EAAE,OAAO,WAAW;AAAA,EAC/B;AAAA;AAAA,EAIA,MAAM,cAAc,SAA+C;AAC/D,UAAM,YAAY,KAAK,YAAY,OAAO;AAC1C,UAAM,CAAC,UAAU,IAAI,MAAM,KAAK,cAAc,OAAO,SAAS;AAC9D,UAAM,UAAU,QAAQ,MAAM;AAC9B,WAAO,EAAE,GAAG,SAAS,IAAI,QAAQ;AAAA,EACrC;AAAA,EAEA,MAAM,eAAe,IAAwC;AACzD,UAAM,MAAM,MAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACzD,WAAO,MAAM,KAAK,cAAc,GAAG,IAAI;AAAA,EAC3C;AAAA,EAEA,MAAM,oBAAoB,QAAoC;AAC1D,UAAM,OAAO,MAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC;AAC/D,WAAO,KAAK,IAAI,CAAC,QAAiC,KAAK,cAAc,GAAG,CAAC;AAAA,EAC7E;AAAA,EAEA,MAAM,cAAc,IAAe,SAA0C;AACzE,UAAM,YAAY,KAAK,mBAAmB,OAAO;AAEjD,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EAC3D;AAAA,EAEA,MAAM,cAAc,IAA8B;AAC9C,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAClD;AAAA,EAEA,MAAM,sBAAsB,QAA+B;AACvD,UAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC,EAAE,OAAO;AAAA,EAC/D;AAAA,EAEA,MAAM,wBAAuC;AACzC,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,KAAK,cAAc,MAAM,cAAc,KAAK,GAAG,EAAE,OAAO;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,SAAS,MAAgD;AAC7D,UAAM,MAA+B;AAAA,MACjC,OAAO,KAAK;AAAA,MACZ,YAAY,KAAK,aAAa;AAAA,MAC9B,WAAW,KAAK,YAAY;AAAA,MAC5B,eAAe,KAAK;AAAA,MACpB,OAAO,KAAK,UAAU,KAAK,KAAK;AAAA,MAChC,mBAAmB,KAAK,kBAAkB,IAAI;AAAA,MAC9C,oBAAoB,KAAK,qBAAqB;AAAA,MAC9C,sBAAsB,KAAK,sBAAsB;AAAA,MACjD,wBAAwB,KAAK,wBAAwB;AAAA,MACrD,YAAY,KAAK,aAAa,KAAK,IAAI;AAAA,MACvC,YAAY,KAAK,aAAa,KAAK,IAAI;AAAA,IAC3C;AAGA,QAAI,KAAK,OAAO,QAAW;AACvB,UAAI,KAAK,KAAK;AAAA,IAClB;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKQ,WAAW,KAAoC;AACnD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,OAAO,IAAI;AAAA,MACX,WAAW,IAAI;AAAA,MACf,UAAU,IAAI;AAAA,MACd,cAAc,IAAI;AAAA,MAClB,OAAO,OAAO,IAAI,UAAU,WAAW,KAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAAA,MACnE,iBAAiB,QAAQ,IAAI,iBAAiB;AAAA,MAC9C,mBAAmB,IAAI;AAAA,MACvB,oBAAoB,IAAI;AAAA,MACxB,sBAAsB,IAAI;AAAA,MAC1B,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,IACnB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,YAAY,SAAiD;AACjE,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,QAAQ;AAAA,IAC9B;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,cAAc,SAAS;AACvB,gBAAU,YAAY,QAAQ,YAAY;AAAA,IAC9C;AACA,QAAI,QAAQ,iBAAiB,QAAW;AACpC,gBAAU,gBAAgB,QAAQ;AAAA,IACtC;AACA,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,KAAK,UAAU,QAAQ,KAAK;AAAA,IAClD;AACA,QAAI,QAAQ,oBAAoB,QAAW;AACvC,gBAAU,oBAAoB,QAAQ,kBAAkB,IAAI;AAAA,IAChE;AACA,QAAI,uBAAuB,SAAS;AAChC,gBAAU,qBAAqB,QAAQ,qBAAqB;AAAA,IAChE;AACA,QAAI,wBAAwB,SAAS;AACjC,gBAAU,uBAAuB,QAAQ,sBAAsB;AAAA,IACnE;AACA,QAAI,0BAA0B,SAAS;AACnC,gBAAU,yBAAyB,QAAQ,wBAAwB;AAAA,IACvE;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,YAAY,SAAsD;AACtE,UAAM,MAA+B;AAAA,MACjC,SAAS,QAAQ;AAAA,MACjB,oBAAoB,QAAQ;AAAA,MAC5B,YAAY,QAAQ,aAAa;AAAA,MACjC,YAAY,QAAQ,aAAa;AAAA,MACjC,aAAa,QAAQ,cAAc;AAAA,MACnC,YAAY,QAAQ;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,IACxB;AAGA,QAAI,QAAQ,OAAO,QAAW;AAC1B,UAAI,KAAK,QAAQ;AAAA,IACrB;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAc,KAAuC;AACzD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,kBAAkB,IAAI;AAAA,MACtB,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,WAAW,IAAI;AAAA,IACnB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,mBAAmB,SAAoD;AAC3E,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,qBAAqB,QAAW;AACxC,gBAAU,qBAAqB,QAAQ;AAAA,IAC3C;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,gBAAgB,SAAS;AACzB,gBAAU,cAAc,QAAQ,cAAc;AAAA,IAClD;AACA,QAAI,QAAQ,eAAe,QAAW;AAClC,gBAAU,eAAe,QAAQ;AAAA,IACrC;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AACJ;;;AC9VA,eAAsB,0BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,OAAO,EAAE,YAAY,EAAE,OAAO;AAC3C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,WAAW,EAAE,SAAS;AACnC,UAAM,OAAO,eAAe,EAAE,YAAY;AAC1C,UAAM,MAAM,OAAO,EAAE,YAAY;AACjC,UAAM,QAAQ,mBAAmB,EAAE,YAAY,EAAE,UAAU,KAAK;AAChE,UAAM,OAAO,oBAAoB,EAAE,SAAS;AAC5C,UAAM,OAAO,sBAAsB,EAAE,SAAS;AAC9C,UAAM,WAAW,wBAAwB,EAAE,SAAS;AACpD,UAAM,WAAW,YAAY,EAAE,YAAY;AAC3C,UAAM,WAAW,YAAY,EAAE,YAAY;AAG3C,UAAM,MAAM,OAAO;AACnB,UAAM,MAAM,oBAAoB;AAChC,UAAM,MAAM,sBAAsB;AAAA,EACtC,CAAC;AACL;AAMA,eAAsB,6BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,SAAS,EAAE,YAAY;AACpC,UAAM,OAAO,oBAAoB,EAAE,YAAY;AAC/C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,aAAa,EAAE,SAAS;AACrC,UAAM,WAAW,YAAY,EAAE,YAAY;AAC3C,UAAM,WAAW,cAAc,EAAE,YAAY;AAC7C,UAAM,WAAW,YAAY,EAAE,YAAY;AAG3C,UAAM,MAAM,SAAS;AAErB,UAAM,MAAM,YAAY;AAAA,EAC5B,CAAC;AACL;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xcelsior/auth-adapter-knex",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "Knex storage adapter for @xcelsior/auth (PostgreSQL, MySQL, SQLite, etc.)",
   "exports": {
     ".": {
@@ -15,7 +15,7 @@
   },
   "peerDependencies": {
     "knex": "^3.1.0",
-    "@xcelsior/auth": "1.0.0"
+    "@xcelsior/auth": "1.1.0"
   },
   "scripts": {
     "build": "tsup && tsc --noEmit",

package/src/knex.ts

@@ -1,11 +1,15 @@
 import type { Knex } from 'knex';
 import type {
+    CreateSessionInput,
+    CreateUserInput,
+    FindUsersOptions,
+    FindUsersResult,
     IStorageProvider,
-    User,
     Session,
+    SessionId,
+    User,
     UserFilter,
-    FindUsersOptions,
-    FindUsersResult,
+    UserId,
 } from '@xcelsior/auth';
 
 export interface KnexConfig {
@@ -50,11 +54,16 @@ export class KnexStorageProvider implements IStorageProvider {
 
     // ==================== User Methods ====================
 
-    async createUser(user: User): Promise<void> {
-        await this.table.insert(this.toDbUser(user));
+    async createUser(user: CreateUserInput): Promise<User> {
+        const dbUser = this.toDbUser(user);
+        const [insertedId] = await this.table.insert(dbUser);
+        // For auto-increment DBs, insertedId is the new ID
+        // For string PKs, it returns 0, so use the original id
+        const finalId = user.id ?? insertedId;
+        return { ...user, id: finalId } as User;
     }
 
-    async getUserById(id: string): Promise<User | null> {
+    async getUserById(id: UserId): Promise<User | null> {
         const row = await this.table.where({ id }).first();
         return row ? this.fromDbUser(row) : null;
     }
@@ -74,7 +83,7 @@ export class KnexStorageProvider implements IStorageProvider {
         return row ? this.fromDbUser(row) : null;
     }
 
-    async updateUser(id: string, updates: Partial<User>): Promise<void> {
+    async updateUser(id: UserId, updates: Partial<User>): Promise<void> {
         const dbUpdates = this.toDbUpdates(updates);
 
         if (Object.keys(dbUpdates).length === 0) {
@@ -84,7 +93,7 @@ export class KnexStorageProvider implements IStorageProvider {
         await this.table.where({ id }).update(dbUpdates);
     }
 
-    async deleteUser(id: string): Promise<void> {
+    async deleteUser(id: UserId): Promise<void> {
         // Delete all user sessions first
         await this.deleteAllUserSessions(id);
         // Then delete the user
@@ -166,21 +175,24 @@ export class KnexStorageProvider implements IStorageProvider {
 
     // ==================== Session Methods ====================
 
-    async createSession(session: Session): Promise<void> {
-        await this.sessionsTable.insert(this.toDbSession(session));
+    async createSession(session: CreateSessionInput): Promise<Session> {
+        const dbSession = this.toDbSession(session);
+        const [insertedId] = await this.sessionsTable.insert(dbSession);
+        const finalId = session.id ?? insertedId;
+        return { ...session, id: finalId } as Session;
     }
 
-    async getSessionById(id: string): Promise<Session | null> {
+    async getSessionById(id: SessionId): Promise<Session | null> {
         const row = await this.sessionsTable.where({ id }).first();
         return row ? this.fromDbSession(row) : null;
     }
 
-    async getSessionsByUserId(userId: string): Promise<Session[]> {
+    async getSessionsByUserId(userId: UserId): Promise<Session[]> {
         const rows = await this.sessionsTable.where({ user_id: userId });
         return rows.map((row: Record<string, unknown>) => this.fromDbSession(row));
     }
 
-    async updateSession(id: string, updates: Partial<Session>): Promise<void> {
+    async updateSession(id: SessionId, updates: Partial<Session>): Promise<void> {
         const dbUpdates = this.toDbSessionUpdates(updates);
 
         if (Object.keys(dbUpdates).length === 0) {
@@ -190,11 +202,11 @@ export class KnexStorageProvider implements IStorageProvider {
         await this.sessionsTable.where({ id }).update(dbUpdates);
     }
 
-    async deleteSession(id: string): Promise<void> {
+    async deleteSession(id: SessionId): Promise<void> {
         await this.sessionsTable.where({ id }).delete();
     }
 
-    async deleteAllUserSessions(userId: string): Promise<void> {
+    async deleteAllUserSessions(userId: UserId): Promise<void> {
         await this.sessionsTable.where({ user_id: userId }).delete();
     }
 
@@ -208,21 +220,26 @@ export class KnexStorageProvider implements IStorageProvider {
     /**
      * Convert User object to database row format (snake_case)
      */
-    private toDbUser(user: User): Record<string, unknown> {
-        return {
-            id: user.id,
+    private toDbUser(user: CreateUserInput): Record<string, unknown> {
+        const row: Record<string, unknown> = {
             email: user.email,
             first_name: user.firstName ?? null,
             last_name: user.lastName ?? null,
             password_hash: user.passwordHash,
             roles: JSON.stringify(user.roles),
-            is_email_verified: user.isEmailVerified,
+            is_email_verified: user.isEmailVerified ? 1 : 0,
             verification_token: user.verificationToken ?? null,
             reset_password_token: user.resetPasswordToken ?? null,
             reset_password_expires: user.resetPasswordExpires ?? null,
-            created_at: user.createdAt,
-            updated_at: user.updatedAt,
+            created_at: user.createdAt ?? Date.now(),
+            updated_at: user.updatedAt ?? Date.now(),
         };
+        // Only include id if provided (for string UUIDs)
+        // Omit for auto-increment DBs
+        if (user.id !== undefined) {
+            row.id = user.id;
+        }
+        return row;
     }
 
     /**
@@ -230,7 +247,7 @@ export class KnexStorageProvider implements IStorageProvider {
      */
     private fromDbUser(row: Record<string, unknown>): User {
         return {
-            id: row.id as string,
+            id: row.id as string | number,
             email: row.email as string,
             firstName: row.first_name as string | undefined,
             lastName: row.last_name as string | undefined,
@@ -267,7 +284,7 @@ export class KnexStorageProvider implements IStorageProvider {
             dbUpdates.roles = JSON.stringify(updates.roles);
         }
         if (updates.isEmailVerified !== undefined) {
-            dbUpdates.is_email_verified = updates.isEmailVerified;
+            dbUpdates.is_email_verified = updates.isEmailVerified ? 1 : 0;
         }
         if ('verificationToken' in updates) {
             dbUpdates.verification_token = updates.verificationToken ?? null;
@@ -290,9 +307,8 @@ export class KnexStorageProvider implements IStorageProvider {
     /**
      * Convert Session object to database row format (snake_case)
      */
-    private toDbSession(session: Session): Record<string, unknown> {
-        return {
-            id: session.id,
+    private toDbSession(session: CreateSessionInput): Record<string, unknown> {
+        const row: Record<string, unknown> = {
             user_id: session.userId,
             refresh_token_hash: session.refreshTokenHash,
             user_agent: session.userAgent ?? null,
@@ -302,6 +318,12 @@ export class KnexStorageProvider implements IStorageProvider {
             last_used_at: session.lastUsedAt,
             expires_at: session.expiresAt,
         };
+        // Only include id if provided (for string UUIDs)
+        // Omit for auto-increment DBs
+        if (session.id !== undefined) {
+            row.id = session.id;
+        }
+        return row;
     }
 
     /**
@@ -309,8 +331,8 @@ export class KnexStorageProvider implements IStorageProvider {
      */
     private fromDbSession(row: Record<string, unknown>): Session {
         return {
-            id: row.id as string,
-            userId: row.user_id as string,
+            id: row.id as string | number,
+            userId: row.user_id as string | number,
             refreshTokenHash: row.refresh_token_hash as string,
             userAgent: row.user_agent as string | undefined,
             ipAddress: row.ip_address as string | undefined,