@xcelsior/auth-adapter-knex 1.1.2 → 1.1.3

package/dist/index.js

@@ -51,7 +51,8 @@ var KnexStorageProvider = class {
   // ==================== User Methods ====================
   async createUser(user) {
     const dbUser = this.toDbUser(user);
-    const [insertedId] = await this.table.insert(dbUser);
+    const result = await this.table.insert(dbUser).returning("id");
+    const insertedId = result?.[0]?.id ?? result?.[0] ?? user.id;
     const finalId = user.id ?? insertedId;
     return { ...user, id: finalId };
   }
@@ -131,7 +132,8 @@ var KnexStorageProvider = class {
   // ==================== Session Methods ====================
   async createSession(session) {
     const dbSession = this.toDbSession(session);
-    const [insertedId] = await this.sessionsTable.insert(dbSession);
+    const result = await this.sessionsTable.insert(dbSession).returning("id");
+    const insertedId = result?.[0]?.id ?? result?.[0] ?? session.id;
     const finalId = session.id ?? insertedId;
     return { ...session, id: finalId };
   }

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/knex.ts","../src/migration.ts"],"sourcesContent":["export { KnexStorageProvider, type KnexConfig } from './knex';\nexport { createUsersTableMigration, createSessionsTableMigration } from './migration';\n","import type { Knex } from 'knex';\nimport type {\n    CreateSessionInput,\n    CreateUserInput,\n    FindUsersOptions,\n    FindUsersResult,\n    IStorageProvider,\n    Session,\n    SessionId,\n    User,\n    UserFilter,\n    UserId,\n} from '@xcelsior/auth';\n\nexport interface KnexConfig {\n    /** Pre-configured Knex instance */\n    knex: Knex;\n    /** Table name for users */\n    tableName: string;\n    /** Table name for sessions */\n    sessionsTableName: string;\n    /** Optional schema (for PostgreSQL) */\n    schema?: string;\n}\n\nexport class KnexStorageProvider implements IStorageProvider {\n    private knex: Knex;\n    private tableName: string;\n    private sessionsTableName: string;\n    private schema?: string;\n\n    constructor(config: KnexConfig) {\n        this.knex = config.knex;\n        this.tableName = config.tableName;\n        this.sessionsTableName = config.sessionsTableName;\n        this.schema = config.schema;\n    }\n\n    private get table() {\n        const query = this.knex(this.tableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    private get sessionsTable() {\n        const query = this.knex(this.sessionsTableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    // ==================== User Methods ====================\n\n    async createUser(user: CreateUserInput): Promise<User> {\n        const dbUser = this.toDbUser(user);\n        const [insertedId] = await this.table.insert(dbUser);\n        // For auto-increment DBs, insertedId is the new ID\n        // For string PKs, it returns 0, so use the original id\n        const finalId = user.id ?? insertedId;\n        return { ...user, id: finalId } as User;\n    }\n\n    async getUserById(id: UserId): Promise<User | null> {\n        const row = await this.table.where({ id }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByEmail(email: string): Promise<User | null> {\n        const row = await this.table.where({ email }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null> {\n        const row = await this.table.where({ reset_password_token: resetPasswordToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null> {\n        const row = await this.table.where({ verification_token: verifyEmailToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async updateUser(id: UserId, updates: Partial<User>): Promise<void> {\n        const dbUpdates = this.toDbUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.table.where({ id }).update(dbUpdates);\n    }\n\n    async deleteUser(id: UserId): Promise<void> {\n        // Delete all user sessions first\n        await this.deleteAllUserSessions(id);\n        // Then delete the user\n        await this.table.where({ id }).delete();\n    }\n\n    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult> {\n        const limit = options.limit ?? 50;\n\n        let query = this.table.clone();\n\n        // Email exact match\n        if (filter.email) {\n            query = query.where('email', filter.email);\n        }\n\n        // Email contains (partial match)\n        if (filter.emailContains) {\n            query = query.where('email', 'like', `%${filter.emailContains}%`);\n        }\n\n        // Email verification status\n        if (filter.isEmailVerified !== undefined) {\n            query = query.where('is_email_verified', filter.isEmailVerified);\n        }\n\n        // Roles filtering - user must have ALL specified roles\n        if (filter.roles && filter.roles.length > 0) {\n            for (const role of filter.roles) {\n                // Use JSON contains - works for PostgreSQL (jsonb) and MySQL (json)\n                // For SQLite, we fall back to LIKE on the JSON string\n                query = query.whereRaw(\n                    this.knex.client.config.client === 'sqlite3' ? `roles LIKE ?` : `roles @> ?`,\n                    this.knex.client.config.client === 'sqlite3'\n                        ? [`%\"${role}\"%`]\n                        : [JSON.stringify([role])]\n                );\n            }\n        }\n\n        // HasAnyRole - user must have at least ONE of specified roles\n        if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {\n            query = query.where((builder: Knex.QueryBuilder) => {\n                for (const role of filter.hasAnyRole!) {\n                    builder.orWhereRaw(\n                        this.knex.client.config.client === 'sqlite3'\n                            ? `roles LIKE ?`\n                            : `roles @> ?`,\n                        this.knex.client.config.client === 'sqlite3'\n                            ? [`%\"${role}\"%`]\n                            : [JSON.stringify([role])]\n                    );\n                }\n            });\n        }\n\n        // Apply pagination\n        if (options.cursor) {\n            const cursorData = JSON.parse(Buffer.from(options.cursor, 'base64').toString());\n            query = query.where('id', '>', cursorData.lastId);\n        }\n\n        // Order by id for consistent pagination\n        query = query.orderBy('id', 'asc').limit(limit + 1);\n\n        const rows = await query;\n        const hasMore = rows.length > limit;\n        const resultRows = hasMore ? rows.slice(0, limit) : rows;\n        const users = resultRows.map((row: Record<string, unknown>) => this.fromDbUser(row));\n\n        let nextCursor: string | undefined;\n        if (hasMore && resultRows.length > 0) {\n            const lastUser = resultRows[resultRows.length - 1];\n            nextCursor = Buffer.from(JSON.stringify({ lastId: lastUser.id })).toString('base64');\n        }\n\n        return { users, nextCursor };\n    }\n\n    // ==================== Session Methods ====================\n\n    async createSession(session: CreateSessionInput): Promise<Session> {\n        const dbSession = this.toDbSession(session);\n        const [insertedId] = await this.sessionsTable.insert(dbSession);\n        const finalId = session.id ?? insertedId;\n        return { ...session, id: finalId } as Session;\n    }\n\n    async getSessionById(id: SessionId): Promise<Session | null> {\n        const row = await this.sessionsTable.where({ id }).first();\n        return row ? this.fromDbSession(row) : null;\n    }\n\n    async getSessionsByUserId(userId: UserId): Promise<Session[]> {\n        const rows = await this.sessionsTable.where({ user_id: userId });\n        return rows.map((row: Record<string, unknown>) => this.fromDbSession(row));\n    }\n\n    async updateSession(id: SessionId, updates: Partial<Session>): Promise<void> {\n        const dbUpdates = this.toDbSessionUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.sessionsTable.where({ id }).update(dbUpdates);\n    }\n\n    async deleteSession(id: SessionId): Promise<void> {\n        await this.sessionsTable.where({ id }).delete();\n    }\n\n    async deleteAllUserSessions(userId: UserId): Promise<void> {\n        await this.sessionsTable.where({ user_id: userId }).delete();\n    }\n\n    async deleteExpiredSessions(): Promise<void> {\n        const now = new Date().toISOString();\n        await this.sessionsTable.where('expires_at', '<', now).delete();\n    }\n\n    // ==================== User Mapping Helpers ====================\n\n    /**\n     * Safely convert a DB date value (Date object or string) to ISO 8601 string\n     */\n    private toDateString(value: unknown): string {\n        if (value instanceof Date) return value.toISOString();\n        return String(value);\n    }\n\n    /**\n     * Convert User object to database row format (snake_case)\n     */\n    private toDbUser(user: CreateUserInput): Record<string, unknown> {\n        const now = new Date().toISOString();\n        const row: Record<string, unknown> = {\n            email: user.email,\n            first_name: user.firstName ?? null,\n            last_name: user.lastName ?? null,\n            password_hash: user.passwordHash,\n            roles: JSON.stringify(user.roles),\n            is_email_verified: user.isEmailVerified ? 1 : 0,\n            verification_token: user.verificationToken ?? null,\n            reset_password_token: user.resetPasswordToken ?? null,\n            reset_password_expires: user.resetPasswordExpires ?? null,\n            created_at: user.createdAt ?? now,\n            updated_at: user.updatedAt ?? now,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (user.id !== undefined) {\n            row.id = user.id;\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to User object (camelCase)\n     */\n    private fromDbUser(row: Record<string, unknown>): User {\n        return {\n            id: row.id as string | number,\n            email: row.email as string,\n            firstName: row.first_name as string | undefined,\n            lastName: row.last_name as string | undefined,\n            passwordHash: row.password_hash as string,\n            roles: typeof row.roles === 'string' ? JSON.parse(row.roles) : row.roles,\n            isEmailVerified: Boolean(row.is_email_verified),\n            verificationToken: row.verification_token as string | undefined,\n            resetPasswordToken: row.reset_password_token as string | undefined,\n            resetPasswordExpires: row.reset_password_expires\n                ? this.toDateString(row.reset_password_expires)\n                : undefined,\n            createdAt: this.toDateString(row.created_at),\n            updatedAt: this.toDateString(row.updated_at),\n        };\n    }\n\n    /**\n     * Convert partial User updates to database format\n     */\n    private toDbUpdates(updates: Partial<User>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.email !== undefined) {\n            dbUpdates.email = updates.email;\n        }\n        if ('firstName' in updates) {\n            dbUpdates.first_name = updates.firstName ?? null;\n        }\n        if ('lastName' in updates) {\n            dbUpdates.last_name = updates.lastName ?? null;\n        }\n        if (updates.passwordHash !== undefined) {\n            dbUpdates.password_hash = updates.passwordHash;\n        }\n        if (updates.roles !== undefined) {\n            dbUpdates.roles = JSON.stringify(updates.roles);\n        }\n        if (updates.isEmailVerified !== undefined) {\n            dbUpdates.is_email_verified = updates.isEmailVerified ? 1 : 0;\n        }\n        if ('verificationToken' in updates) {\n            dbUpdates.verification_token = updates.verificationToken ?? null;\n        }\n        if ('resetPasswordToken' in updates) {\n            dbUpdates.reset_password_token = updates.resetPasswordToken ?? null;\n        }\n        if ('resetPasswordExpires' in updates) {\n            dbUpdates.reset_password_expires = updates.resetPasswordExpires ?? null;\n        }\n        if (updates.updatedAt !== undefined) {\n            dbUpdates.updated_at = updates.updatedAt;\n        }\n\n        return dbUpdates;\n    }\n\n    // ==================== Session Mapping Helpers ====================\n\n    /**\n     * Convert Session object to database row format (snake_case)\n     */\n    private toDbSession(session: CreateSessionInput): Record<string, unknown> {\n        const row: Record<string, unknown> = {\n            user_id: session.userId,\n            refresh_token_hash: session.refreshTokenHash,\n            user_agent: session.userAgent ?? null,\n            ip_address: session.ipAddress ?? null,\n            device_name: session.deviceName ?? null,\n            created_at: session.createdAt,\n            last_used_at: session.lastUsedAt,\n            expires_at: session.expiresAt,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (session.id !== undefined) {\n            row.id = session.id;\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to Session object (camelCase)\n     */\n    private fromDbSession(row: Record<string, unknown>): Session {\n        return {\n            id: row.id as string | number,\n            userId: row.user_id as string | number,\n            refreshTokenHash: row.refresh_token_hash as string,\n            userAgent: row.user_agent as string | undefined,\n            ipAddress: row.ip_address as string | undefined,\n            deviceName: row.device_name as string | undefined,\n            createdAt: this.toDateString(row.created_at),\n            lastUsedAt: this.toDateString(row.last_used_at),\n            expiresAt: this.toDateString(row.expires_at),\n        };\n    }\n\n    /**\n     * Convert partial Session updates to database format\n     */\n    private toDbSessionUpdates(updates: Partial<Session>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.refreshTokenHash !== undefined) {\n            dbUpdates.refresh_token_hash = updates.refreshTokenHash;\n        }\n        if ('userAgent' in updates) {\n            dbUpdates.user_agent = updates.userAgent ?? null;\n        }\n        if ('ipAddress' in updates) {\n            dbUpdates.ip_address = updates.ipAddress ?? null;\n        }\n        if ('deviceName' in updates) {\n            dbUpdates.device_name = updates.deviceName ?? null;\n        }\n        if (updates.lastUsedAt !== undefined) {\n            dbUpdates.last_used_at = updates.lastUsedAt;\n        }\n        if (updates.expiresAt !== undefined) {\n            dbUpdates.expires_at = updates.expiresAt;\n        }\n\n        return dbUpdates;\n    }\n}\n","import type { Knex } from 'knex';\n\n/**\n * SQL migration helper to create the users table\n * Can be used with Knex migrations\n *\n * @example\n * ```ts\n * // In your migration file\n * import { createUsersTableMigration, createSessionsTableMigration } from '@xcelsior/auth-adapter-knex';\n *\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users');\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * export async function down(knex: Knex): Promise<void> {\n *   await knex.schema.dropTableIfExists('sessions');\n *   await knex.schema.dropTableIfExists('users');\n * }\n * ```\n */\nexport async function createUsersTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('email').notNullable().unique();\n        table.string('first_name').nullable();\n        table.string('last_name').nullable();\n        table.string('password_hash').notNullable();\n        table.jsonb('roles').notNullable();\n        table.boolean('is_email_verified').notNullable().defaultTo(false);\n        table.string('verification_token').nullable();\n        table.string('reset_password_token').nullable();\n        table.timestamp('reset_password_expires', { useTz: true }).nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('updated_at', { useTz: true }).notNullable();\n\n        // Indexes for common lookups\n        table.index('email');\n        table.index('verification_token');\n        table.index('reset_password_token');\n    });\n}\n\n/**\n * SQL migration helper to create the sessions table\n * Can be used with Knex migrations\n */\nexport async function createSessionsTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('user_id').notNullable();\n        table.string('refresh_token_hash').notNullable();\n        table.string('user_agent').nullable();\n        table.string('ip_address').nullable();\n        table.string('device_name').nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('last_used_at', { useTz: true }).notNullable();\n        table.timestamp('expires_at', { useTz: true }).notNullable();\n\n        // Index for querying sessions by user\n        table.index('user_id');\n        // Index for cleaning up expired sessions\n        table.index('expires_at');\n    });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACyBO,IAAM,sBAAN,MAAsD;AAAA,EAMzD,YAAY,QAAoB;AAC5B,SAAK,OAAO,OAAO;AACnB,SAAK,YAAY,OAAO;AACxB,SAAK,oBAAoB,OAAO;AAChC,SAAK,SAAS,OAAO;AAAA,EACzB;AAAA,EAEA,IAAY,QAAQ;AAChB,UAAM,QAAQ,KAAK,KAAK,KAAK,SAAS;AACtC,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA,EAEA,IAAY,gBAAgB;AACxB,UAAM,QAAQ,KAAK,KAAK,KAAK,iBAAiB;AAC9C,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA;AAAA,EAIA,MAAM,WAAW,MAAsC;AACnD,UAAM,SAAS,KAAK,SAAS,IAAI;AACjC,UAAM,CAAC,UAAU,IAAI,MAAM,KAAK,MAAM,OAAO,MAAM;AAGnD,UAAM,UAAU,KAAK,MAAM;AAC3B,WAAO,EAAE,GAAG,MAAM,IAAI,QAAQ;AAAA,EAClC;AAAA,EAEA,MAAM,YAAY,IAAkC;AAChD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACjD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,eAAe,OAAqC;AACtD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;AACpD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,4BAA4B,oBAAkD;AAChF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,sBAAsB,mBAAmB,CAAC,EAAE,MAAM;AACvF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,0BAA0B,kBAAgD;AAC5E,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,oBAAoB,iBAAiB,CAAC,EAAE,MAAM;AACnF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,WAAW,IAAY,SAAuC;AAChE,UAAM,YAAY,KAAK,YAAY,OAAO;AAE1C,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EACnD;AAAA,EAEA,MAAM,WAAW,IAA2B;AAExC,UAAM,KAAK,sBAAsB,EAAE;AAEnC,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAC1C;AAAA,EAEA,MAAM,UAAU,QAAoB,UAA4B,CAAC,GAA6B;AAC1F,UAAM,QAAQ,QAAQ,SAAS;AAE/B,QAAI,QAAQ,KAAK,MAAM,MAAM;AAG7B,QAAI,OAAO,OAAO;AACd,cAAQ,MAAM,MAAM,SAAS,OAAO,KAAK;AAAA,IAC7C;AAGA,QAAI,OAAO,eAAe;AACtB,cAAQ,MAAM,MAAM,SAAS,QAAQ,IAAI,OAAO,aAAa,GAAG;AAAA,IACpE;AAGA,QAAI,OAAO,oBAAoB,QAAW;AACtC,cAAQ,MAAM,MAAM,qBAAqB,OAAO,eAAe;AAAA,IACnE;AAGA,QAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AACzC,iBAAW,QAAQ,OAAO,OAAO;AAG7B,gBAAQ,MAAM;AAAA,UACV,KAAK,KAAK,OAAO,OAAO,WAAW,YAAY,iBAAiB;AAAA,UAChE,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,QACjC;AAAA,MACJ;AAAA,IACJ;AAGA,QAAI,OAAO,cAAc,OAAO,WAAW,SAAS,GAAG;AACnD,cAAQ,MAAM,MAAM,CAAC,YAA+B;AAChD,mBAAW,QAAQ,OAAO,YAAa;AACnC,kBAAQ;AAAA,YACJ,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,iBACA;AAAA,YACN,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,UACjC;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAGA,QAAI,QAAQ,QAAQ;AAChB,YAAM,aAAa,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE,SAAS,CAAC;AAC9E,cAAQ,MAAM,MAAM,MAAM,KAAK,WAAW,MAAM;AAAA,IACpD;AAGA,YAAQ,MAAM,QAAQ,MAAM,KAAK,EAAE,MAAM,QAAQ,CAAC;AAElD,UAAM,OAAO,MAAM;AACnB,UAAM,UAAU,KAAK,SAAS;AAC9B,UAAM,aAAa,UAAU,KAAK,MAAM,GAAG,KAAK,IAAI;AACpD,UAAM,QAAQ,WAAW,IAAI,CAAC,QAAiC,KAAK,WAAW,GAAG,CAAC;AAEnF,QAAI;AACJ,QAAI,WAAW,WAAW,SAAS,GAAG;AAClC,YAAM,WAAW,WAAW,WAAW,SAAS,CAAC;AACjD,mBAAa,OAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,SAAS,GAAG,CAAC,CAAC,EAAE,SAAS,QAAQ;AAAA,IACvF;AAEA,WAAO,EAAE,OAAO,WAAW;AAAA,EAC/B;AAAA;AAAA,EAIA,MAAM,cAAc,SAA+C;AAC/D,UAAM,YAAY,KAAK,YAAY,OAAO;AAC1C,UAAM,CAAC,UAAU,IAAI,MAAM,KAAK,cAAc,OAAO,SAAS;AAC9D,UAAM,UAAU,QAAQ,MAAM;AAC9B,WAAO,EAAE,GAAG,SAAS,IAAI,QAAQ;AAAA,EACrC;AAAA,EAEA,MAAM,eAAe,IAAwC;AACzD,UAAM,MAAM,MAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACzD,WAAO,MAAM,KAAK,cAAc,GAAG,IAAI;AAAA,EAC3C;AAAA,EAEA,MAAM,oBAAoB,QAAoC;AAC1D,UAAM,OAAO,MAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC;AAC/D,WAAO,KAAK,IAAI,CAAC,QAAiC,KAAK,cAAc,GAAG,CAAC;AAAA,EAC7E;AAAA,EAEA,MAAM,cAAc,IAAe,SAA0C;AACzE,UAAM,YAAY,KAAK,mBAAmB,OAAO;AAEjD,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EAC3D;AAAA,EAEA,MAAM,cAAc,IAA8B;AAC9C,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAClD;AAAA,EAEA,MAAM,sBAAsB,QAA+B;AACvD,UAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC,EAAE,OAAO;AAAA,EAC/D;AAAA,EAEA,MAAM,wBAAuC;AACzC,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,KAAK,cAAc,MAAM,cAAc,KAAK,GAAG,EAAE,OAAO;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,aAAa,OAAwB;AACzC,QAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,WAAO,OAAO,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKQ,SAAS,MAAgD;AAC7D,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,MAA+B;AAAA,MACjC,OAAO,KAAK;AAAA,MACZ,YAAY,KAAK,aAAa;AAAA,MAC9B,WAAW,KAAK,YAAY;AAAA,MAC5B,eAAe,KAAK;AAAA,MACpB,OAAO,KAAK,UAAU,KAAK,KAAK;AAAA,MAChC,mBAAmB,KAAK,kBAAkB,IAAI;AAAA,MAC9C,oBAAoB,KAAK,qBAAqB;AAAA,MAC9C,sBAAsB,KAAK,sBAAsB;AAAA,MACjD,wBAAwB,KAAK,wBAAwB;AAAA,MACrD,YAAY,KAAK,aAAa;AAAA,MAC9B,YAAY,KAAK,aAAa;AAAA,IAClC;AAGA,QAAI,KAAK,OAAO,QAAW;AACvB,UAAI,KAAK,KAAK;AAAA,IAClB;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKQ,WAAW,KAAoC;AACnD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,OAAO,IAAI;AAAA,MACX,WAAW,IAAI;AAAA,MACf,UAAU,IAAI;AAAA,MACd,cAAc,IAAI;AAAA,MAClB,OAAO,OAAO,IAAI,UAAU,WAAW,KAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAAA,MACnE,iBAAiB,QAAQ,IAAI,iBAAiB;AAAA,MAC9C,mBAAmB,IAAI;AAAA,MACvB,oBAAoB,IAAI;AAAA,MACxB,sBAAsB,IAAI,yBACpB,KAAK,aAAa,IAAI,sBAAsB,IAC5C;AAAA,MACN,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,IAC/C;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,YAAY,SAAiD;AACjE,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,QAAQ;AAAA,IAC9B;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,cAAc,SAAS;AACvB,gBAAU,YAAY,QAAQ,YAAY;AAAA,IAC9C;AACA,QAAI,QAAQ,iBAAiB,QAAW;AACpC,gBAAU,gBAAgB,QAAQ;AAAA,IACtC;AACA,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,KAAK,UAAU,QAAQ,KAAK;AAAA,IAClD;AACA,QAAI,QAAQ,oBAAoB,QAAW;AACvC,gBAAU,oBAAoB,QAAQ,kBAAkB,IAAI;AAAA,IAChE;AACA,QAAI,uBAAuB,SAAS;AAChC,gBAAU,qBAAqB,QAAQ,qBAAqB;AAAA,IAChE;AACA,QAAI,wBAAwB,SAAS;AACjC,gBAAU,uBAAuB,QAAQ,sBAAsB;AAAA,IACnE;AACA,QAAI,0BAA0B,SAAS;AACnC,gBAAU,yBAAyB,QAAQ,wBAAwB;AAAA,IACvE;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,YAAY,SAAsD;AACtE,UAAM,MAA+B;AAAA,MACjC,SAAS,QAAQ;AAAA,MACjB,oBAAoB,QAAQ;AAAA,MAC5B,YAAY,QAAQ,aAAa;AAAA,MACjC,YAAY,QAAQ,aAAa;AAAA,MACjC,aAAa,QAAQ,cAAc;AAAA,MACnC,YAAY,QAAQ;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,IACxB;AAGA,QAAI,QAAQ,OAAO,QAAW;AAC1B,UAAI,KAAK,QAAQ;AAAA,IACrB;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAc,KAAuC;AACzD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,kBAAkB,IAAI;AAAA,MACtB,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,YAAY,KAAK,aAAa,IAAI,YAAY;AAAA,MAC9C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,IAC/C;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,mBAAmB,SAAoD;AAC3E,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,qBAAqB,QAAW;AACxC,gBAAU,qBAAqB,QAAQ;AAAA,IAC3C;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,gBAAgB,SAAS;AACzB,gBAAU,cAAc,QAAQ,cAAc;AAAA,IAClD;AACA,QAAI,QAAQ,eAAe,QAAW;AAClC,gBAAU,eAAe,QAAQ;AAAA,IACrC;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AACJ;;;ACzWA,eAAsB,0BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,OAAO,EAAE,YAAY,EAAE,OAAO;AAC3C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,WAAW,EAAE,SAAS;AACnC,UAAM,OAAO,eAAe,EAAE,YAAY;AAC1C,UAAM,MAAM,OAAO,EAAE,YAAY;AACjC,UAAM,QAAQ,mBAAmB,EAAE,YAAY,EAAE,UAAU,KAAK;AAChE,UAAM,OAAO,oBAAoB,EAAE,SAAS;AAC5C,UAAM,OAAO,sBAAsB,EAAE,SAAS;AAC9C,UAAM,UAAU,0BAA0B,EAAE,OAAO,KAAK,CAAC,EAAE,SAAS;AACpE,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,OAAO;AACnB,UAAM,MAAM,oBAAoB;AAChC,UAAM,MAAM,sBAAsB;AAAA,EACtC,CAAC;AACL;AAMA,eAAsB,6BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,SAAS,EAAE,YAAY;AACpC,UAAM,OAAO,oBAAoB,EAAE,YAAY;AAC/C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,aAAa,EAAE,SAAS;AACrC,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,gBAAgB,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC7D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,SAAS;AAErB,UAAM,MAAM,YAAY;AAAA,EAC5B,CAAC;AACL;","names":[]}
+{"version":3,"sources":["../src/index.ts","../src/knex.ts","../src/migration.ts"],"sourcesContent":["export { KnexStorageProvider, type KnexConfig } from './knex';\nexport { createUsersTableMigration, createSessionsTableMigration } from './migration';\n","import type { Knex } from 'knex';\nimport type {\n    CreateSessionInput,\n    CreateUserInput,\n    FindUsersOptions,\n    FindUsersResult,\n    IStorageProvider,\n    Session,\n    SessionId,\n    User,\n    UserFilter,\n    UserId,\n} from '@xcelsior/auth';\n\nexport interface KnexConfig {\n    /** Pre-configured Knex instance */\n    knex: Knex;\n    /** Table name for users */\n    tableName: string;\n    /** Table name for sessions */\n    sessionsTableName: string;\n    /** Optional schema (for PostgreSQL) */\n    schema?: string;\n}\n\nexport class KnexStorageProvider implements IStorageProvider {\n    private knex: Knex;\n    private tableName: string;\n    private sessionsTableName: string;\n    private schema?: string;\n\n    constructor(config: KnexConfig) {\n        this.knex = config.knex;\n        this.tableName = config.tableName;\n        this.sessionsTableName = config.sessionsTableName;\n        this.schema = config.schema;\n    }\n\n    private get table() {\n        const query = this.knex(this.tableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    private get sessionsTable() {\n        const query = this.knex(this.sessionsTableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    // ==================== User Methods ====================\n\n    async createUser(user: CreateUserInput): Promise<User> {\n        const dbUser = this.toDbUser(user);\n        const result = await this.table.insert(dbUser).returning('id');\n        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]\n        const insertedId = result?.[0]?.id ?? result?.[0] ?? user.id;\n        const finalId = user.id ?? insertedId;\n        return { ...user, id: finalId } as User;\n    }\n\n    async getUserById(id: UserId): Promise<User | null> {\n        const row = await this.table.where({ id }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByEmail(email: string): Promise<User | null> {\n        const row = await this.table.where({ email }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null> {\n        const row = await this.table.where({ reset_password_token: resetPasswordToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null> {\n        const row = await this.table.where({ verification_token: verifyEmailToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async updateUser(id: UserId, updates: Partial<User>): Promise<void> {\n        const dbUpdates = this.toDbUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.table.where({ id }).update(dbUpdates);\n    }\n\n    async deleteUser(id: UserId): Promise<void> {\n        // Delete all user sessions first\n        await this.deleteAllUserSessions(id);\n        // Then delete the user\n        await this.table.where({ id }).delete();\n    }\n\n    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult> {\n        const limit = options.limit ?? 50;\n\n        let query = this.table.clone();\n\n        // Email exact match\n        if (filter.email) {\n            query = query.where('email', filter.email);\n        }\n\n        // Email contains (partial match)\n        if (filter.emailContains) {\n            query = query.where('email', 'like', `%${filter.emailContains}%`);\n        }\n\n        // Email verification status\n        if (filter.isEmailVerified !== undefined) {\n            query = query.where('is_email_verified', filter.isEmailVerified);\n        }\n\n        // Roles filtering - user must have ALL specified roles\n        if (filter.roles && filter.roles.length > 0) {\n            for (const role of filter.roles) {\n                // Use JSON contains - works for PostgreSQL (jsonb) and MySQL (json)\n                // For SQLite, we fall back to LIKE on the JSON string\n                query = query.whereRaw(\n                    this.knex.client.config.client === 'sqlite3' ? `roles LIKE ?` : `roles @> ?`,\n                    this.knex.client.config.client === 'sqlite3'\n                        ? [`%\"${role}\"%`]\n                        : [JSON.stringify([role])]\n                );\n            }\n        }\n\n        // HasAnyRole - user must have at least ONE of specified roles\n        if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {\n            query = query.where((builder: Knex.QueryBuilder) => {\n                for (const role of filter.hasAnyRole!) {\n                    builder.orWhereRaw(\n                        this.knex.client.config.client === 'sqlite3'\n                            ? `roles LIKE ?`\n                            : `roles @> ?`,\n                        this.knex.client.config.client === 'sqlite3'\n                            ? [`%\"${role}\"%`]\n                            : [JSON.stringify([role])]\n                    );\n                }\n            });\n        }\n\n        // Apply pagination\n        if (options.cursor) {\n            const cursorData = JSON.parse(Buffer.from(options.cursor, 'base64').toString());\n            query = query.where('id', '>', cursorData.lastId);\n        }\n\n        // Order by id for consistent pagination\n        query = query.orderBy('id', 'asc').limit(limit + 1);\n\n        const rows = await query;\n        const hasMore = rows.length > limit;\n        const resultRows = hasMore ? rows.slice(0, limit) : rows;\n        const users = resultRows.map((row: Record<string, unknown>) => this.fromDbUser(row));\n\n        let nextCursor: string | undefined;\n        if (hasMore && resultRows.length > 0) {\n            const lastUser = resultRows[resultRows.length - 1];\n            nextCursor = Buffer.from(JSON.stringify({ lastId: lastUser.id })).toString('base64');\n        }\n\n        return { users, nextCursor };\n    }\n\n    // ==================== Session Methods ====================\n\n    async createSession(session: CreateSessionInput): Promise<Session> {\n        const dbSession = this.toDbSession(session);\n        const result = await this.sessionsTable.insert(dbSession).returning('id');\n        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]\n        const insertedId = result?.[0]?.id ?? result?.[0] ?? session.id;\n        const finalId = session.id ?? insertedId;\n        return { ...session, id: finalId } as Session;\n    }\n\n    async getSessionById(id: SessionId): Promise<Session | null> {\n        const row = await this.sessionsTable.where({ id }).first();\n        return row ? this.fromDbSession(row) : null;\n    }\n\n    async getSessionsByUserId(userId: UserId): Promise<Session[]> {\n        const rows = await this.sessionsTable.where({ user_id: userId });\n        return rows.map((row: Record<string, unknown>) => this.fromDbSession(row));\n    }\n\n    async updateSession(id: SessionId, updates: Partial<Session>): Promise<void> {\n        const dbUpdates = this.toDbSessionUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.sessionsTable.where({ id }).update(dbUpdates);\n    }\n\n    async deleteSession(id: SessionId): Promise<void> {\n        await this.sessionsTable.where({ id }).delete();\n    }\n\n    async deleteAllUserSessions(userId: UserId): Promise<void> {\n        await this.sessionsTable.where({ user_id: userId }).delete();\n    }\n\n    async deleteExpiredSessions(): Promise<void> {\n        const now = new Date().toISOString();\n        await this.sessionsTable.where('expires_at', '<', now).delete();\n    }\n\n    // ==================== User Mapping Helpers ====================\n\n    /**\n     * Safely convert a DB date value (Date object or string) to ISO 8601 string\n     */\n    private toDateString(value: unknown): string {\n        if (value instanceof Date) return value.toISOString();\n        return String(value);\n    }\n\n    /**\n     * Convert User object to database row format (snake_case)\n     */\n    private toDbUser(user: CreateUserInput): Record<string, unknown> {\n        const now = new Date().toISOString();\n        const row: Record<string, unknown> = {\n            email: user.email,\n            first_name: user.firstName ?? null,\n            last_name: user.lastName ?? null,\n            password_hash: user.passwordHash,\n            roles: JSON.stringify(user.roles),\n            is_email_verified: user.isEmailVerified ? 1 : 0,\n            verification_token: user.verificationToken ?? null,\n            reset_password_token: user.resetPasswordToken ?? null,\n            reset_password_expires: user.resetPasswordExpires ?? null,\n            created_at: user.createdAt ?? now,\n            updated_at: user.updatedAt ?? now,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (user.id !== undefined) {\n            row.id = user.id;\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to User object (camelCase)\n     */\n    private fromDbUser(row: Record<string, unknown>): User {\n        return {\n            id: row.id as string | number,\n            email: row.email as string,\n            firstName: row.first_name as string | undefined,\n            lastName: row.last_name as string | undefined,\n            passwordHash: row.password_hash as string,\n            roles: typeof row.roles === 'string' ? JSON.parse(row.roles) : row.roles,\n            isEmailVerified: Boolean(row.is_email_verified),\n            verificationToken: row.verification_token as string | undefined,\n            resetPasswordToken: row.reset_password_token as string | undefined,\n            resetPasswordExpires: row.reset_password_expires\n                ? this.toDateString(row.reset_password_expires)\n                : undefined,\n            createdAt: this.toDateString(row.created_at),\n            updatedAt: this.toDateString(row.updated_at),\n        };\n    }\n\n    /**\n     * Convert partial User updates to database format\n     */\n    private toDbUpdates(updates: Partial<User>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.email !== undefined) {\n            dbUpdates.email = updates.email;\n        }\n        if ('firstName' in updates) {\n            dbUpdates.first_name = updates.firstName ?? null;\n        }\n        if ('lastName' in updates) {\n            dbUpdates.last_name = updates.lastName ?? null;\n        }\n        if (updates.passwordHash !== undefined) {\n            dbUpdates.password_hash = updates.passwordHash;\n        }\n        if (updates.roles !== undefined) {\n            dbUpdates.roles = JSON.stringify(updates.roles);\n        }\n        if (updates.isEmailVerified !== undefined) {\n            dbUpdates.is_email_verified = updates.isEmailVerified ? 1 : 0;\n        }\n        if ('verificationToken' in updates) {\n            dbUpdates.verification_token = updates.verificationToken ?? null;\n        }\n        if ('resetPasswordToken' in updates) {\n            dbUpdates.reset_password_token = updates.resetPasswordToken ?? null;\n        }\n        if ('resetPasswordExpires' in updates) {\n            dbUpdates.reset_password_expires = updates.resetPasswordExpires ?? null;\n        }\n        if (updates.updatedAt !== undefined) {\n            dbUpdates.updated_at = updates.updatedAt;\n        }\n\n        return dbUpdates;\n    }\n\n    // ==================== Session Mapping Helpers ====================\n\n    /**\n     * Convert Session object to database row format (snake_case)\n     */\n    private toDbSession(session: CreateSessionInput): Record<string, unknown> {\n        const row: Record<string, unknown> = {\n            user_id: session.userId,\n            refresh_token_hash: session.refreshTokenHash,\n            user_agent: session.userAgent ?? null,\n            ip_address: session.ipAddress ?? null,\n            device_name: session.deviceName ?? null,\n            created_at: session.createdAt,\n            last_used_at: session.lastUsedAt,\n            expires_at: session.expiresAt,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (session.id !== undefined) {\n            row.id = session.id;\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to Session object (camelCase)\n     */\n    private fromDbSession(row: Record<string, unknown>): Session {\n        return {\n            id: row.id as string | number,\n            userId: row.user_id as string | number,\n            refreshTokenHash: row.refresh_token_hash as string,\n            userAgent: row.user_agent as string | undefined,\n            ipAddress: row.ip_address as string | undefined,\n            deviceName: row.device_name as string | undefined,\n            createdAt: this.toDateString(row.created_at),\n            lastUsedAt: this.toDateString(row.last_used_at),\n            expiresAt: this.toDateString(row.expires_at),\n        };\n    }\n\n    /**\n     * Convert partial Session updates to database format\n     */\n    private toDbSessionUpdates(updates: Partial<Session>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.refreshTokenHash !== undefined) {\n            dbUpdates.refresh_token_hash = updates.refreshTokenHash;\n        }\n        if ('userAgent' in updates) {\n            dbUpdates.user_agent = updates.userAgent ?? null;\n        }\n        if ('ipAddress' in updates) {\n            dbUpdates.ip_address = updates.ipAddress ?? null;\n        }\n        if ('deviceName' in updates) {\n            dbUpdates.device_name = updates.deviceName ?? null;\n        }\n        if (updates.lastUsedAt !== undefined) {\n            dbUpdates.last_used_at = updates.lastUsedAt;\n        }\n        if (updates.expiresAt !== undefined) {\n            dbUpdates.expires_at = updates.expiresAt;\n        }\n\n        return dbUpdates;\n    }\n}\n","import type { Knex } from 'knex';\n\n/**\n * SQL migration helper to create the users table\n * Can be used with Knex migrations\n *\n * @example\n * ```ts\n * // In your migration file\n * import { createUsersTableMigration, createSessionsTableMigration } from '@xcelsior/auth-adapter-knex';\n *\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users');\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * export async function down(knex: Knex): Promise<void> {\n *   await knex.schema.dropTableIfExists('sessions');\n *   await knex.schema.dropTableIfExists('users');\n * }\n * ```\n */\nexport async function createUsersTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('email').notNullable().unique();\n        table.string('first_name').nullable();\n        table.string('last_name').nullable();\n        table.string('password_hash').notNullable();\n        table.jsonb('roles').notNullable();\n        table.boolean('is_email_verified').notNullable().defaultTo(false);\n        table.string('verification_token').nullable();\n        table.string('reset_password_token').nullable();\n        table.timestamp('reset_password_expires', { useTz: true }).nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('updated_at', { useTz: true }).notNullable();\n\n        // Indexes for common lookups\n        table.index('email');\n        table.index('verification_token');\n        table.index('reset_password_token');\n    });\n}\n\n/**\n * SQL migration helper to create the sessions table\n * Can be used with Knex migrations\n */\nexport async function createSessionsTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('user_id').notNullable();\n        table.string('refresh_token_hash').notNullable();\n        table.string('user_agent').nullable();\n        table.string('ip_address').nullable();\n        table.string('device_name').nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('last_used_at', { useTz: true }).notNullable();\n        table.timestamp('expires_at', { useTz: true }).notNullable();\n\n        // Index for querying sessions by user\n        table.index('user_id');\n        // Index for cleaning up expired sessions\n        table.index('expires_at');\n    });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACyBO,IAAM,sBAAN,MAAsD;AAAA,EAMzD,YAAY,QAAoB;AAC5B,SAAK,OAAO,OAAO;AACnB,SAAK,YAAY,OAAO;AACxB,SAAK,oBAAoB,OAAO;AAChC,SAAK,SAAS,OAAO;AAAA,EACzB;AAAA,EAEA,IAAY,QAAQ;AAChB,UAAM,QAAQ,KAAK,KAAK,KAAK,SAAS;AACtC,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA,EAEA,IAAY,gBAAgB;AACxB,UAAM,QAAQ,KAAK,KAAK,KAAK,iBAAiB;AAC9C,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA;AAAA,EAIA,MAAM,WAAW,MAAsC;AACnD,UAAM,SAAS,KAAK,SAAS,IAAI;AACjC,UAAM,SAAS,MAAM,KAAK,MAAM,OAAO,MAAM,EAAE,UAAU,IAAI;AAE7D,UAAM,aAAa,SAAS,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,KAAK;AAC1D,UAAM,UAAU,KAAK,MAAM;AAC3B,WAAO,EAAE,GAAG,MAAM,IAAI,QAAQ;AAAA,EAClC;AAAA,EAEA,MAAM,YAAY,IAAkC;AAChD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACjD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,eAAe,OAAqC;AACtD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;AACpD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,4BAA4B,oBAAkD;AAChF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,sBAAsB,mBAAmB,CAAC,EAAE,MAAM;AACvF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,0BAA0B,kBAAgD;AAC5E,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,oBAAoB,iBAAiB,CAAC,EAAE,MAAM;AACnF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,WAAW,IAAY,SAAuC;AAChE,UAAM,YAAY,KAAK,YAAY,OAAO;AAE1C,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EACnD;AAAA,EAEA,MAAM,WAAW,IAA2B;AAExC,UAAM,KAAK,sBAAsB,EAAE;AAEnC,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAC1C;AAAA,EAEA,MAAM,UAAU,QAAoB,UAA4B,CAAC,GAA6B;AAC1F,UAAM,QAAQ,QAAQ,SAAS;AAE/B,QAAI,QAAQ,KAAK,MAAM,MAAM;AAG7B,QAAI,OAAO,OAAO;AACd,cAAQ,MAAM,MAAM,SAAS,OAAO,KAAK;AAAA,IAC7C;AAGA,QAAI,OAAO,eAAe;AACtB,cAAQ,MAAM,MAAM,SAAS,QAAQ,IAAI,OAAO,aAAa,GAAG;AAAA,IACpE;AAGA,QAAI,OAAO,oBAAoB,QAAW;AACtC,cAAQ,MAAM,MAAM,qBAAqB,OAAO,eAAe;AAAA,IACnE;AAGA,QAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AACzC,iBAAW,QAAQ,OAAO,OAAO;AAG7B,gBAAQ,MAAM;AAAA,UACV,KAAK,KAAK,OAAO,OAAO,WAAW,YAAY,iBAAiB;AAAA,UAChE,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,QACjC;AAAA,MACJ;AAAA,IACJ;AAGA,QAAI,OAAO,cAAc,OAAO,WAAW,SAAS,GAAG;AACnD,cAAQ,MAAM,MAAM,CAAC,YAA+B;AAChD,mBAAW,QAAQ,OAAO,YAAa;AACnC,kBAAQ;AAAA,YACJ,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,iBACA;AAAA,YACN,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,UACjC;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAGA,QAAI,QAAQ,QAAQ;AAChB,YAAM,aAAa,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE,SAAS,CAAC;AAC9E,cAAQ,MAAM,MAAM,MAAM,KAAK,WAAW,MAAM;AAAA,IACpD;AAGA,YAAQ,MAAM,QAAQ,MAAM,KAAK,EAAE,MAAM,QAAQ,CAAC;AAElD,UAAM,OAAO,MAAM;AACnB,UAAM,UAAU,KAAK,SAAS;AAC9B,UAAM,aAAa,UAAU,KAAK,MAAM,GAAG,KAAK,IAAI;AACpD,UAAM,QAAQ,WAAW,IAAI,CAAC,QAAiC,KAAK,WAAW,GAAG,CAAC;AAEnF,QAAI;AACJ,QAAI,WAAW,WAAW,SAAS,GAAG;AAClC,YAAM,WAAW,WAAW,WAAW,SAAS,CAAC;AACjD,mBAAa,OAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,SAAS,GAAG,CAAC,CAAC,EAAE,SAAS,QAAQ;AAAA,IACvF;AAEA,WAAO,EAAE,OAAO,WAAW;AAAA,EAC/B;AAAA;AAAA,EAIA,MAAM,cAAc,SAA+C;AAC/D,UAAM,YAAY,KAAK,YAAY,OAAO;AAC1C,UAAM,SAAS,MAAM,KAAK,cAAc,OAAO,SAAS,EAAE,UAAU,IAAI;AAExE,UAAM,aAAa,SAAS,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,QAAQ;AAC7D,UAAM,UAAU,QAAQ,MAAM;AAC9B,WAAO,EAAE,GAAG,SAAS,IAAI,QAAQ;AAAA,EACrC;AAAA,EAEA,MAAM,eAAe,IAAwC;AACzD,UAAM,MAAM,MAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACzD,WAAO,MAAM,KAAK,cAAc,GAAG,IAAI;AAAA,EAC3C;AAAA,EAEA,MAAM,oBAAoB,QAAoC;AAC1D,UAAM,OAAO,MAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC;AAC/D,WAAO,KAAK,IAAI,CAAC,QAAiC,KAAK,cAAc,GAAG,CAAC;AAAA,EAC7E;AAAA,EAEA,MAAM,cAAc,IAAe,SAA0C;AACzE,UAAM,YAAY,KAAK,mBAAmB,OAAO;AAEjD,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EAC3D;AAAA,EAEA,MAAM,cAAc,IAA8B;AAC9C,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAClD;AAAA,EAEA,MAAM,sBAAsB,QAA+B;AACvD,UAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC,EAAE,OAAO;AAAA,EAC/D;AAAA,EAEA,MAAM,wBAAuC;AACzC,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,KAAK,cAAc,MAAM,cAAc,KAAK,GAAG,EAAE,OAAO;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,aAAa,OAAwB;AACzC,QAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,WAAO,OAAO,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKQ,SAAS,MAAgD;AAC7D,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,MAA+B;AAAA,MACjC,OAAO,KAAK;AAAA,MACZ,YAAY,KAAK,aAAa;AAAA,MAC9B,WAAW,KAAK,YAAY;AAAA,MAC5B,eAAe,KAAK;AAAA,MACpB,OAAO,KAAK,UAAU,KAAK,KAAK;AAAA,MAChC,mBAAmB,KAAK,kBAAkB,IAAI;AAAA,MAC9C,oBAAoB,KAAK,qBAAqB;AAAA,MAC9C,sBAAsB,KAAK,sBAAsB;AAAA,MACjD,wBAAwB,KAAK,wBAAwB;AAAA,MACrD,YAAY,KAAK,aAAa;AAAA,MAC9B,YAAY,KAAK,aAAa;AAAA,IAClC;AAGA,QAAI,KAAK,OAAO,QAAW;AACvB,UAAI,KAAK,KAAK;AAAA,IAClB;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKQ,WAAW,KAAoC;AACnD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,OAAO,IAAI;AAAA,MACX,WAAW,IAAI;AAAA,MACf,UAAU,IAAI;AAAA,MACd,cAAc,IAAI;AAAA,MAClB,OAAO,OAAO,IAAI,UAAU,WAAW,KAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAAA,MACnE,iBAAiB,QAAQ,IAAI,iBAAiB;AAAA,MAC9C,mBAAmB,IAAI;AAAA,MACvB,oBAAoB,IAAI;AAAA,MACxB,sBAAsB,IAAI,yBACpB,KAAK,aAAa,IAAI,sBAAsB,IAC5C;AAAA,MACN,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,IAC/C;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,YAAY,SAAiD;AACjE,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,QAAQ;AAAA,IAC9B;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,cAAc,SAAS;AACvB,gBAAU,YAAY,QAAQ,YAAY;AAAA,IAC9C;AACA,QAAI,QAAQ,iBAAiB,QAAW;AACpC,gBAAU,gBAAgB,QAAQ;AAAA,IACtC;AACA,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,KAAK,UAAU,QAAQ,KAAK;AAAA,IAClD;AACA,QAAI,QAAQ,oBAAoB,QAAW;AACvC,gBAAU,oBAAoB,QAAQ,kBAAkB,IAAI;AAAA,IAChE;AACA,QAAI,uBAAuB,SAAS;AAChC,gBAAU,qBAAqB,QAAQ,qBAAqB;AAAA,IAChE;AACA,QAAI,wBAAwB,SAAS;AACjC,gBAAU,uBAAuB,QAAQ,sBAAsB;AAAA,IACnE;AACA,QAAI,0BAA0B,SAAS;AACnC,gBAAU,yBAAyB,QAAQ,wBAAwB;AAAA,IACvE;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,YAAY,SAAsD;AACtE,UAAM,MAA+B;AAAA,MACjC,SAAS,QAAQ;AAAA,MACjB,oBAAoB,QAAQ;AAAA,MAC5B,YAAY,QAAQ,aAAa;AAAA,MACjC,YAAY,QAAQ,aAAa;AAAA,MACjC,aAAa,QAAQ,cAAc;AAAA,MACnC,YAAY,QAAQ;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,IACxB;AAGA,QAAI,QAAQ,OAAO,QAAW;AAC1B,UAAI,KAAK,QAAQ;AAAA,IACrB;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAc,KAAuC;AACzD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,kBAAkB,IAAI;AAAA,MACtB,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,YAAY,KAAK,aAAa,IAAI,YAAY;AAAA,MAC9C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,IAC/C;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,mBAAmB,SAAoD;AAC3E,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,qBAAqB,QAAW;AACxC,gBAAU,qBAAqB,QAAQ;AAAA,IAC3C;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,gBAAgB,SAAS;AACzB,gBAAU,cAAc,QAAQ,cAAc;AAAA,IAClD;AACA,QAAI,QAAQ,eAAe,QAAW;AAClC,gBAAU,eAAe,QAAQ;AAAA,IACrC;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AACJ;;;AC3WA,eAAsB,0BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,OAAO,EAAE,YAAY,EAAE,OAAO;AAC3C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,WAAW,EAAE,SAAS;AACnC,UAAM,OAAO,eAAe,EAAE,YAAY;AAC1C,UAAM,MAAM,OAAO,EAAE,YAAY;AACjC,UAAM,QAAQ,mBAAmB,EAAE,YAAY,EAAE,UAAU,KAAK;AAChE,UAAM,OAAO,oBAAoB,EAAE,SAAS;AAC5C,UAAM,OAAO,sBAAsB,EAAE,SAAS;AAC9C,UAAM,UAAU,0BAA0B,EAAE,OAAO,KAAK,CAAC,EAAE,SAAS;AACpE,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,OAAO;AACnB,UAAM,MAAM,oBAAoB;AAChC,UAAM,MAAM,sBAAsB;AAAA,EACtC,CAAC;AACL;AAMA,eAAsB,6BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,SAAS,EAAE,YAAY;AACpC,UAAM,OAAO,oBAAoB,EAAE,YAAY;AAC/C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,aAAa,EAAE,SAAS;AACrC,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,gBAAgB,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC7D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,SAAS;AAErB,UAAM,MAAM,YAAY;AAAA,EAC5B,CAAC;AACL;","names":[]}

package/dist/index.mjs

@@ -23,7 +23,8 @@ var KnexStorageProvider = class {
   // ==================== User Methods ====================
   async createUser(user) {
     const dbUser = this.toDbUser(user);
-    const [insertedId] = await this.table.insert(dbUser);
+    const result = await this.table.insert(dbUser).returning("id");
+    const insertedId = result?.[0]?.id ?? result?.[0] ?? user.id;
     const finalId = user.id ?? insertedId;
     return { ...user, id: finalId };
   }
@@ -103,7 +104,8 @@ var KnexStorageProvider = class {
   // ==================== Session Methods ====================
   async createSession(session) {
     const dbSession = this.toDbSession(session);
-    const [insertedId] = await this.sessionsTable.insert(dbSession);
+    const result = await this.sessionsTable.insert(dbSession).returning("id");
+    const insertedId = result?.[0]?.id ?? result?.[0] ?? session.id;
     const finalId = session.id ?? insertedId;
     return { ...session, id: finalId };
   }

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/knex.ts","../src/migration.ts"],"sourcesContent":["import type { Knex } from 'knex';\nimport type {\n    CreateSessionInput,\n    CreateUserInput,\n    FindUsersOptions,\n    FindUsersResult,\n    IStorageProvider,\n    Session,\n    SessionId,\n    User,\n    UserFilter,\n    UserId,\n} from '@xcelsior/auth';\n\nexport interface KnexConfig {\n    /** Pre-configured Knex instance */\n    knex: Knex;\n    /** Table name for users */\n    tableName: string;\n    /** Table name for sessions */\n    sessionsTableName: string;\n    /** Optional schema (for PostgreSQL) */\n    schema?: string;\n}\n\nexport class KnexStorageProvider implements IStorageProvider {\n    private knex: Knex;\n    private tableName: string;\n    private sessionsTableName: string;\n    private schema?: string;\n\n    constructor(config: KnexConfig) {\n        this.knex = config.knex;\n        this.tableName = config.tableName;\n        this.sessionsTableName = config.sessionsTableName;\n        this.schema = config.schema;\n    }\n\n    private get table() {\n        const query = this.knex(this.tableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    private get sessionsTable() {\n        const query = this.knex(this.sessionsTableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    // ==================== User Methods ====================\n\n    async createUser(user: CreateUserInput): Promise<User> {\n        const dbUser = this.toDbUser(user);\n        const [insertedId] = await this.table.insert(dbUser);\n        // For auto-increment DBs, insertedId is the new ID\n        // For string PKs, it returns 0, so use the original id\n        const finalId = user.id ?? insertedId;\n        return { ...user, id: finalId } as User;\n    }\n\n    async getUserById(id: UserId): Promise<User | null> {\n        const row = await this.table.where({ id }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByEmail(email: string): Promise<User | null> {\n        const row = await this.table.where({ email }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null> {\n        const row = await this.table.where({ reset_password_token: resetPasswordToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null> {\n        const row = await this.table.where({ verification_token: verifyEmailToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async updateUser(id: UserId, updates: Partial<User>): Promise<void> {\n        const dbUpdates = this.toDbUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.table.where({ id }).update(dbUpdates);\n    }\n\n    async deleteUser(id: UserId): Promise<void> {\n        // Delete all user sessions first\n        await this.deleteAllUserSessions(id);\n        // Then delete the user\n        await this.table.where({ id }).delete();\n    }\n\n    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult> {\n        const limit = options.limit ?? 50;\n\n        let query = this.table.clone();\n\n        // Email exact match\n        if (filter.email) {\n            query = query.where('email', filter.email);\n        }\n\n        // Email contains (partial match)\n        if (filter.emailContains) {\n            query = query.where('email', 'like', `%${filter.emailContains}%`);\n        }\n\n        // Email verification status\n        if (filter.isEmailVerified !== undefined) {\n            query = query.where('is_email_verified', filter.isEmailVerified);\n        }\n\n        // Roles filtering - user must have ALL specified roles\n        if (filter.roles && filter.roles.length > 0) {\n            for (const role of filter.roles) {\n                // Use JSON contains - works for PostgreSQL (jsonb) and MySQL (json)\n                // For SQLite, we fall back to LIKE on the JSON string\n                query = query.whereRaw(\n                    this.knex.client.config.client === 'sqlite3' ? `roles LIKE ?` : `roles @> ?`,\n                    this.knex.client.config.client === 'sqlite3'\n                        ? [`%\"${role}\"%`]\n                        : [JSON.stringify([role])]\n                );\n            }\n        }\n\n        // HasAnyRole - user must have at least ONE of specified roles\n        if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {\n            query = query.where((builder: Knex.QueryBuilder) => {\n                for (const role of filter.hasAnyRole!) {\n                    builder.orWhereRaw(\n                        this.knex.client.config.client === 'sqlite3'\n                            ? `roles LIKE ?`\n                            : `roles @> ?`,\n                        this.knex.client.config.client === 'sqlite3'\n                            ? [`%\"${role}\"%`]\n                            : [JSON.stringify([role])]\n                    );\n                }\n            });\n        }\n\n        // Apply pagination\n        if (options.cursor) {\n            const cursorData = JSON.parse(Buffer.from(options.cursor, 'base64').toString());\n            query = query.where('id', '>', cursorData.lastId);\n        }\n\n        // Order by id for consistent pagination\n        query = query.orderBy('id', 'asc').limit(limit + 1);\n\n        const rows = await query;\n        const hasMore = rows.length > limit;\n        const resultRows = hasMore ? rows.slice(0, limit) : rows;\n        const users = resultRows.map((row: Record<string, unknown>) => this.fromDbUser(row));\n\n        let nextCursor: string | undefined;\n        if (hasMore && resultRows.length > 0) {\n            const lastUser = resultRows[resultRows.length - 1];\n            nextCursor = Buffer.from(JSON.stringify({ lastId: lastUser.id })).toString('base64');\n        }\n\n        return { users, nextCursor };\n    }\n\n    // ==================== Session Methods ====================\n\n    async createSession(session: CreateSessionInput): Promise<Session> {\n        const dbSession = this.toDbSession(session);\n        const [insertedId] = await this.sessionsTable.insert(dbSession);\n        const finalId = session.id ?? insertedId;\n        return { ...session, id: finalId } as Session;\n    }\n\n    async getSessionById(id: SessionId): Promise<Session | null> {\n        const row = await this.sessionsTable.where({ id }).first();\n        return row ? this.fromDbSession(row) : null;\n    }\n\n    async getSessionsByUserId(userId: UserId): Promise<Session[]> {\n        const rows = await this.sessionsTable.where({ user_id: userId });\n        return rows.map((row: Record<string, unknown>) => this.fromDbSession(row));\n    }\n\n    async updateSession(id: SessionId, updates: Partial<Session>): Promise<void> {\n        const dbUpdates = this.toDbSessionUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.sessionsTable.where({ id }).update(dbUpdates);\n    }\n\n    async deleteSession(id: SessionId): Promise<void> {\n        await this.sessionsTable.where({ id }).delete();\n    }\n\n    async deleteAllUserSessions(userId: UserId): Promise<void> {\n        await this.sessionsTable.where({ user_id: userId }).delete();\n    }\n\n    async deleteExpiredSessions(): Promise<void> {\n        const now = new Date().toISOString();\n        await this.sessionsTable.where('expires_at', '<', now).delete();\n    }\n\n    // ==================== User Mapping Helpers ====================\n\n    /**\n     * Safely convert a DB date value (Date object or string) to ISO 8601 string\n     */\n    private toDateString(value: unknown): string {\n        if (value instanceof Date) return value.toISOString();\n        return String(value);\n    }\n\n    /**\n     * Convert User object to database row format (snake_case)\n     */\n    private toDbUser(user: CreateUserInput): Record<string, unknown> {\n        const now = new Date().toISOString();\n        const row: Record<string, unknown> = {\n            email: user.email,\n            first_name: user.firstName ?? null,\n            last_name: user.lastName ?? null,\n            password_hash: user.passwordHash,\n            roles: JSON.stringify(user.roles),\n            is_email_verified: user.isEmailVerified ? 1 : 0,\n            verification_token: user.verificationToken ?? null,\n            reset_password_token: user.resetPasswordToken ?? null,\n            reset_password_expires: user.resetPasswordExpires ?? null,\n            created_at: user.createdAt ?? now,\n            updated_at: user.updatedAt ?? now,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (user.id !== undefined) {\n            row.id = user.id;\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to User object (camelCase)\n     */\n    private fromDbUser(row: Record<string, unknown>): User {\n        return {\n            id: row.id as string | number,\n            email: row.email as string,\n            firstName: row.first_name as string | undefined,\n            lastName: row.last_name as string | undefined,\n            passwordHash: row.password_hash as string,\n            roles: typeof row.roles === 'string' ? JSON.parse(row.roles) : row.roles,\n            isEmailVerified: Boolean(row.is_email_verified),\n            verificationToken: row.verification_token as string | undefined,\n            resetPasswordToken: row.reset_password_token as string | undefined,\n            resetPasswordExpires: row.reset_password_expires\n                ? this.toDateString(row.reset_password_expires)\n                : undefined,\n            createdAt: this.toDateString(row.created_at),\n            updatedAt: this.toDateString(row.updated_at),\n        };\n    }\n\n    /**\n     * Convert partial User updates to database format\n     */\n    private toDbUpdates(updates: Partial<User>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.email !== undefined) {\n            dbUpdates.email = updates.email;\n        }\n        if ('firstName' in updates) {\n            dbUpdates.first_name = updates.firstName ?? null;\n        }\n        if ('lastName' in updates) {\n            dbUpdates.last_name = updates.lastName ?? null;\n        }\n        if (updates.passwordHash !== undefined) {\n            dbUpdates.password_hash = updates.passwordHash;\n        }\n        if (updates.roles !== undefined) {\n            dbUpdates.roles = JSON.stringify(updates.roles);\n        }\n        if (updates.isEmailVerified !== undefined) {\n            dbUpdates.is_email_verified = updates.isEmailVerified ? 1 : 0;\n        }\n        if ('verificationToken' in updates) {\n            dbUpdates.verification_token = updates.verificationToken ?? null;\n        }\n        if ('resetPasswordToken' in updates) {\n            dbUpdates.reset_password_token = updates.resetPasswordToken ?? null;\n        }\n        if ('resetPasswordExpires' in updates) {\n            dbUpdates.reset_password_expires = updates.resetPasswordExpires ?? null;\n        }\n        if (updates.updatedAt !== undefined) {\n            dbUpdates.updated_at = updates.updatedAt;\n        }\n\n        return dbUpdates;\n    }\n\n    // ==================== Session Mapping Helpers ====================\n\n    /**\n     * Convert Session object to database row format (snake_case)\n     */\n    private toDbSession(session: CreateSessionInput): Record<string, unknown> {\n        const row: Record<string, unknown> = {\n            user_id: session.userId,\n            refresh_token_hash: session.refreshTokenHash,\n            user_agent: session.userAgent ?? null,\n            ip_address: session.ipAddress ?? null,\n            device_name: session.deviceName ?? null,\n            created_at: session.createdAt,\n            last_used_at: session.lastUsedAt,\n            expires_at: session.expiresAt,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (session.id !== undefined) {\n            row.id = session.id;\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to Session object (camelCase)\n     */\n    private fromDbSession(row: Record<string, unknown>): Session {\n        return {\n            id: row.id as string | number,\n            userId: row.user_id as string | number,\n            refreshTokenHash: row.refresh_token_hash as string,\n            userAgent: row.user_agent as string | undefined,\n            ipAddress: row.ip_address as string | undefined,\n            deviceName: row.device_name as string | undefined,\n            createdAt: this.toDateString(row.created_at),\n            lastUsedAt: this.toDateString(row.last_used_at),\n            expiresAt: this.toDateString(row.expires_at),\n        };\n    }\n\n    /**\n     * Convert partial Session updates to database format\n     */\n    private toDbSessionUpdates(updates: Partial<Session>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.refreshTokenHash !== undefined) {\n            dbUpdates.refresh_token_hash = updates.refreshTokenHash;\n        }\n        if ('userAgent' in updates) {\n            dbUpdates.user_agent = updates.userAgent ?? null;\n        }\n        if ('ipAddress' in updates) {\n            dbUpdates.ip_address = updates.ipAddress ?? null;\n        }\n        if ('deviceName' in updates) {\n            dbUpdates.device_name = updates.deviceName ?? null;\n        }\n        if (updates.lastUsedAt !== undefined) {\n            dbUpdates.last_used_at = updates.lastUsedAt;\n        }\n        if (updates.expiresAt !== undefined) {\n            dbUpdates.expires_at = updates.expiresAt;\n        }\n\n        return dbUpdates;\n    }\n}\n","import type { Knex } from 'knex';\n\n/**\n * SQL migration helper to create the users table\n * Can be used with Knex migrations\n *\n * @example\n * ```ts\n * // In your migration file\n * import { createUsersTableMigration, createSessionsTableMigration } from '@xcelsior/auth-adapter-knex';\n *\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users');\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * export async function down(knex: Knex): Promise<void> {\n *   await knex.schema.dropTableIfExists('sessions');\n *   await knex.schema.dropTableIfExists('users');\n * }\n * ```\n */\nexport async function createUsersTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('email').notNullable().unique();\n        table.string('first_name').nullable();\n        table.string('last_name').nullable();\n        table.string('password_hash').notNullable();\n        table.jsonb('roles').notNullable();\n        table.boolean('is_email_verified').notNullable().defaultTo(false);\n        table.string('verification_token').nullable();\n        table.string('reset_password_token').nullable();\n        table.timestamp('reset_password_expires', { useTz: true }).nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('updated_at', { useTz: true }).notNullable();\n\n        // Indexes for common lookups\n        table.index('email');\n        table.index('verification_token');\n        table.index('reset_password_token');\n    });\n}\n\n/**\n * SQL migration helper to create the sessions table\n * Can be used with Knex migrations\n */\nexport async function createSessionsTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('user_id').notNullable();\n        table.string('refresh_token_hash').notNullable();\n        table.string('user_agent').nullable();\n        table.string('ip_address').nullable();\n        table.string('device_name').nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('last_used_at', { useTz: true }).notNullable();\n        table.timestamp('expires_at', { useTz: true }).notNullable();\n\n        // Index for querying sessions by user\n        table.index('user_id');\n        // Index for cleaning up expired sessions\n        table.index('expires_at');\n    });\n}\n"],"mappings":";AAyBO,IAAM,sBAAN,MAAsD;AAAA,EAMzD,YAAY,QAAoB;AAC5B,SAAK,OAAO,OAAO;AACnB,SAAK,YAAY,OAAO;AACxB,SAAK,oBAAoB,OAAO;AAChC,SAAK,SAAS,OAAO;AAAA,EACzB;AAAA,EAEA,IAAY,QAAQ;AAChB,UAAM,QAAQ,KAAK,KAAK,KAAK,SAAS;AACtC,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA,EAEA,IAAY,gBAAgB;AACxB,UAAM,QAAQ,KAAK,KAAK,KAAK,iBAAiB;AAC9C,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA;AAAA,EAIA,MAAM,WAAW,MAAsC;AACnD,UAAM,SAAS,KAAK,SAAS,IAAI;AACjC,UAAM,CAAC,UAAU,IAAI,MAAM,KAAK,MAAM,OAAO,MAAM;AAGnD,UAAM,UAAU,KAAK,MAAM;AAC3B,WAAO,EAAE,GAAG,MAAM,IAAI,QAAQ;AAAA,EAClC;AAAA,EAEA,MAAM,YAAY,IAAkC;AAChD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACjD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,eAAe,OAAqC;AACtD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;AACpD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,4BAA4B,oBAAkD;AAChF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,sBAAsB,mBAAmB,CAAC,EAAE,MAAM;AACvF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,0BAA0B,kBAAgD;AAC5E,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,oBAAoB,iBAAiB,CAAC,EAAE,MAAM;AACnF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,WAAW,IAAY,SAAuC;AAChE,UAAM,YAAY,KAAK,YAAY,OAAO;AAE1C,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EACnD;AAAA,EAEA,MAAM,WAAW,IAA2B;AAExC,UAAM,KAAK,sBAAsB,EAAE;AAEnC,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAC1C;AAAA,EAEA,MAAM,UAAU,QAAoB,UAA4B,CAAC,GAA6B;AAC1F,UAAM,QAAQ,QAAQ,SAAS;AAE/B,QAAI,QAAQ,KAAK,MAAM,MAAM;AAG7B,QAAI,OAAO,OAAO;AACd,cAAQ,MAAM,MAAM,SAAS,OAAO,KAAK;AAAA,IAC7C;AAGA,QAAI,OAAO,eAAe;AACtB,cAAQ,MAAM,MAAM,SAAS,QAAQ,IAAI,OAAO,aAAa,GAAG;AAAA,IACpE;AAGA,QAAI,OAAO,oBAAoB,QAAW;AACtC,cAAQ,MAAM,MAAM,qBAAqB,OAAO,eAAe;AAAA,IACnE;AAGA,QAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AACzC,iBAAW,QAAQ,OAAO,OAAO;AAG7B,gBAAQ,MAAM;AAAA,UACV,KAAK,KAAK,OAAO,OAAO,WAAW,YAAY,iBAAiB;AAAA,UAChE,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,QACjC;AAAA,MACJ;AAAA,IACJ;AAGA,QAAI,OAAO,cAAc,OAAO,WAAW,SAAS,GAAG;AACnD,cAAQ,MAAM,MAAM,CAAC,YAA+B;AAChD,mBAAW,QAAQ,OAAO,YAAa;AACnC,kBAAQ;AAAA,YACJ,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,iBACA;AAAA,YACN,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,UACjC;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAGA,QAAI,QAAQ,QAAQ;AAChB,YAAM,aAAa,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE,SAAS,CAAC;AAC9E,cAAQ,MAAM,MAAM,MAAM,KAAK,WAAW,MAAM;AAAA,IACpD;AAGA,YAAQ,MAAM,QAAQ,MAAM,KAAK,EAAE,MAAM,QAAQ,CAAC;AAElD,UAAM,OAAO,MAAM;AACnB,UAAM,UAAU,KAAK,SAAS;AAC9B,UAAM,aAAa,UAAU,KAAK,MAAM,GAAG,KAAK,IAAI;AACpD,UAAM,QAAQ,WAAW,IAAI,CAAC,QAAiC,KAAK,WAAW,GAAG,CAAC;AAEnF,QAAI;AACJ,QAAI,WAAW,WAAW,SAAS,GAAG;AAClC,YAAM,WAAW,WAAW,WAAW,SAAS,CAAC;AACjD,mBAAa,OAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,SAAS,GAAG,CAAC,CAAC,EAAE,SAAS,QAAQ;AAAA,IACvF;AAEA,WAAO,EAAE,OAAO,WAAW;AAAA,EAC/B;AAAA;AAAA,EAIA,MAAM,cAAc,SAA+C;AAC/D,UAAM,YAAY,KAAK,YAAY,OAAO;AAC1C,UAAM,CAAC,UAAU,IAAI,MAAM,KAAK,cAAc,OAAO,SAAS;AAC9D,UAAM,UAAU,QAAQ,MAAM;AAC9B,WAAO,EAAE,GAAG,SAAS,IAAI,QAAQ;AAAA,EACrC;AAAA,EAEA,MAAM,eAAe,IAAwC;AACzD,UAAM,MAAM,MAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACzD,WAAO,MAAM,KAAK,cAAc,GAAG,IAAI;AAAA,EAC3C;AAAA,EAEA,MAAM,oBAAoB,QAAoC;AAC1D,UAAM,OAAO,MAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC;AAC/D,WAAO,KAAK,IAAI,CAAC,QAAiC,KAAK,cAAc,GAAG,CAAC;AAAA,EAC7E;AAAA,EAEA,MAAM,cAAc,IAAe,SAA0C;AACzE,UAAM,YAAY,KAAK,mBAAmB,OAAO;AAEjD,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EAC3D;AAAA,EAEA,MAAM,cAAc,IAA8B;AAC9C,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAClD;AAAA,EAEA,MAAM,sBAAsB,QAA+B;AACvD,UAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC,EAAE,OAAO;AAAA,EAC/D;AAAA,EAEA,MAAM,wBAAuC;AACzC,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,KAAK,cAAc,MAAM,cAAc,KAAK,GAAG,EAAE,OAAO;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,aAAa,OAAwB;AACzC,QAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,WAAO,OAAO,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKQ,SAAS,MAAgD;AAC7D,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,MAA+B;AAAA,MACjC,OAAO,KAAK;AAAA,MACZ,YAAY,KAAK,aAAa;AAAA,MAC9B,WAAW,KAAK,YAAY;AAAA,MAC5B,eAAe,KAAK;AAAA,MACpB,OAAO,KAAK,UAAU,KAAK,KAAK;AAAA,MAChC,mBAAmB,KAAK,kBAAkB,IAAI;AAAA,MAC9C,oBAAoB,KAAK,qBAAqB;AAAA,MAC9C,sBAAsB,KAAK,sBAAsB;AAAA,MACjD,wBAAwB,KAAK,wBAAwB;AAAA,MACrD,YAAY,KAAK,aAAa;AAAA,MAC9B,YAAY,KAAK,aAAa;AAAA,IAClC;AAGA,QAAI,KAAK,OAAO,QAAW;AACvB,UAAI,KAAK,KAAK;AAAA,IAClB;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKQ,WAAW,KAAoC;AACnD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,OAAO,IAAI;AAAA,MACX,WAAW,IAAI;AAAA,MACf,UAAU,IAAI;AAAA,MACd,cAAc,IAAI;AAAA,MAClB,OAAO,OAAO,IAAI,UAAU,WAAW,KAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAAA,MACnE,iBAAiB,QAAQ,IAAI,iBAAiB;AAAA,MAC9C,mBAAmB,IAAI;AAAA,MACvB,oBAAoB,IAAI;AAAA,MACxB,sBAAsB,IAAI,yBACpB,KAAK,aAAa,IAAI,sBAAsB,IAC5C;AAAA,MACN,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,IAC/C;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,YAAY,SAAiD;AACjE,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,QAAQ;AAAA,IAC9B;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,cAAc,SAAS;AACvB,gBAAU,YAAY,QAAQ,YAAY;AAAA,IAC9C;AACA,QAAI,QAAQ,iBAAiB,QAAW;AACpC,gBAAU,gBAAgB,QAAQ;AAAA,IACtC;AACA,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,KAAK,UAAU,QAAQ,KAAK;AAAA,IAClD;AACA,QAAI,QAAQ,oBAAoB,QAAW;AACvC,gBAAU,oBAAoB,QAAQ,kBAAkB,IAAI;AAAA,IAChE;AACA,QAAI,uBAAuB,SAAS;AAChC,gBAAU,qBAAqB,QAAQ,qBAAqB;AAAA,IAChE;AACA,QAAI,wBAAwB,SAAS;AACjC,gBAAU,uBAAuB,QAAQ,sBAAsB;AAAA,IACnE;AACA,QAAI,0BAA0B,SAAS;AACnC,gBAAU,yBAAyB,QAAQ,wBAAwB;AAAA,IACvE;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,YAAY,SAAsD;AACtE,UAAM,MAA+B;AAAA,MACjC,SAAS,QAAQ;AAAA,MACjB,oBAAoB,QAAQ;AAAA,MAC5B,YAAY,QAAQ,aAAa;AAAA,MACjC,YAAY,QAAQ,aAAa;AAAA,MACjC,aAAa,QAAQ,cAAc;AAAA,MACnC,YAAY,QAAQ;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,IACxB;AAGA,QAAI,QAAQ,OAAO,QAAW;AAC1B,UAAI,KAAK,QAAQ;AAAA,IACrB;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAc,KAAuC;AACzD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,kBAAkB,IAAI;AAAA,MACtB,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,YAAY,KAAK,aAAa,IAAI,YAAY;AAAA,MAC9C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,IAC/C;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,mBAAmB,SAAoD;AAC3E,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,qBAAqB,QAAW;AACxC,gBAAU,qBAAqB,QAAQ;AAAA,IAC3C;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,gBAAgB,SAAS;AACzB,gBAAU,cAAc,QAAQ,cAAc;AAAA,IAClD;AACA,QAAI,QAAQ,eAAe,QAAW;AAClC,gBAAU,eAAe,QAAQ;AAAA,IACrC;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AACJ;;;ACzWA,eAAsB,0BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,OAAO,EAAE,YAAY,EAAE,OAAO;AAC3C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,WAAW,EAAE,SAAS;AACnC,UAAM,OAAO,eAAe,EAAE,YAAY;AAC1C,UAAM,MAAM,OAAO,EAAE,YAAY;AACjC,UAAM,QAAQ,mBAAmB,EAAE,YAAY,EAAE,UAAU,KAAK;AAChE,UAAM,OAAO,oBAAoB,EAAE,SAAS;AAC5C,UAAM,OAAO,sBAAsB,EAAE,SAAS;AAC9C,UAAM,UAAU,0BAA0B,EAAE,OAAO,KAAK,CAAC,EAAE,SAAS;AACpE,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,OAAO;AACnB,UAAM,MAAM,oBAAoB;AAChC,UAAM,MAAM,sBAAsB;AAAA,EACtC,CAAC;AACL;AAMA,eAAsB,6BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,SAAS,EAAE,YAAY;AACpC,UAAM,OAAO,oBAAoB,EAAE,YAAY;AAC/C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,aAAa,EAAE,SAAS;AACrC,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,gBAAgB,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC7D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,SAAS;AAErB,UAAM,MAAM,YAAY;AAAA,EAC5B,CAAC;AACL;","names":[]}
+{"version":3,"sources":["../src/knex.ts","../src/migration.ts"],"sourcesContent":["import type { Knex } from 'knex';\nimport type {\n    CreateSessionInput,\n    CreateUserInput,\n    FindUsersOptions,\n    FindUsersResult,\n    IStorageProvider,\n    Session,\n    SessionId,\n    User,\n    UserFilter,\n    UserId,\n} from '@xcelsior/auth';\n\nexport interface KnexConfig {\n    /** Pre-configured Knex instance */\n    knex: Knex;\n    /** Table name for users */\n    tableName: string;\n    /** Table name for sessions */\n    sessionsTableName: string;\n    /** Optional schema (for PostgreSQL) */\n    schema?: string;\n}\n\nexport class KnexStorageProvider implements IStorageProvider {\n    private knex: Knex;\n    private tableName: string;\n    private sessionsTableName: string;\n    private schema?: string;\n\n    constructor(config: KnexConfig) {\n        this.knex = config.knex;\n        this.tableName = config.tableName;\n        this.sessionsTableName = config.sessionsTableName;\n        this.schema = config.schema;\n    }\n\n    private get table() {\n        const query = this.knex(this.tableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    private get sessionsTable() {\n        const query = this.knex(this.sessionsTableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    // ==================== User Methods ====================\n\n    async createUser(user: CreateUserInput): Promise<User> {\n        const dbUser = this.toDbUser(user);\n        const result = await this.table.insert(dbUser).returning('id');\n        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]\n        const insertedId = result?.[0]?.id ?? result?.[0] ?? user.id;\n        const finalId = user.id ?? insertedId;\n        return { ...user, id: finalId } as User;\n    }\n\n    async getUserById(id: UserId): Promise<User | null> {\n        const row = await this.table.where({ id }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByEmail(email: string): Promise<User | null> {\n        const row = await this.table.where({ email }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null> {\n        const row = await this.table.where({ reset_password_token: resetPasswordToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null> {\n        const row = await this.table.where({ verification_token: verifyEmailToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async updateUser(id: UserId, updates: Partial<User>): Promise<void> {\n        const dbUpdates = this.toDbUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.table.where({ id }).update(dbUpdates);\n    }\n\n    async deleteUser(id: UserId): Promise<void> {\n        // Delete all user sessions first\n        await this.deleteAllUserSessions(id);\n        // Then delete the user\n        await this.table.where({ id }).delete();\n    }\n\n    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult> {\n        const limit = options.limit ?? 50;\n\n        let query = this.table.clone();\n\n        // Email exact match\n        if (filter.email) {\n            query = query.where('email', filter.email);\n        }\n\n        // Email contains (partial match)\n        if (filter.emailContains) {\n            query = query.where('email', 'like', `%${filter.emailContains}%`);\n        }\n\n        // Email verification status\n        if (filter.isEmailVerified !== undefined) {\n            query = query.where('is_email_verified', filter.isEmailVerified);\n        }\n\n        // Roles filtering - user must have ALL specified roles\n        if (filter.roles && filter.roles.length > 0) {\n            for (const role of filter.roles) {\n                // Use JSON contains - works for PostgreSQL (jsonb) and MySQL (json)\n                // For SQLite, we fall back to LIKE on the JSON string\n                query = query.whereRaw(\n                    this.knex.client.config.client === 'sqlite3' ? `roles LIKE ?` : `roles @> ?`,\n                    this.knex.client.config.client === 'sqlite3'\n                        ? [`%\"${role}\"%`]\n                        : [JSON.stringify([role])]\n                );\n            }\n        }\n\n        // HasAnyRole - user must have at least ONE of specified roles\n        if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {\n            query = query.where((builder: Knex.QueryBuilder) => {\n                for (const role of filter.hasAnyRole!) {\n                    builder.orWhereRaw(\n                        this.knex.client.config.client === 'sqlite3'\n                            ? `roles LIKE ?`\n                            : `roles @> ?`,\n                        this.knex.client.config.client === 'sqlite3'\n                            ? [`%\"${role}\"%`]\n                            : [JSON.stringify([role])]\n                    );\n                }\n            });\n        }\n\n        // Apply pagination\n        if (options.cursor) {\n            const cursorData = JSON.parse(Buffer.from(options.cursor, 'base64').toString());\n            query = query.where('id', '>', cursorData.lastId);\n        }\n\n        // Order by id for consistent pagination\n        query = query.orderBy('id', 'asc').limit(limit + 1);\n\n        const rows = await query;\n        const hasMore = rows.length > limit;\n        const resultRows = hasMore ? rows.slice(0, limit) : rows;\n        const users = resultRows.map((row: Record<string, unknown>) => this.fromDbUser(row));\n\n        let nextCursor: string | undefined;\n        if (hasMore && resultRows.length > 0) {\n            const lastUser = resultRows[resultRows.length - 1];\n            nextCursor = Buffer.from(JSON.stringify({ lastId: lastUser.id })).toString('base64');\n        }\n\n        return { users, nextCursor };\n    }\n\n    // ==================== Session Methods ====================\n\n    async createSession(session: CreateSessionInput): Promise<Session> {\n        const dbSession = this.toDbSession(session);\n        const result = await this.sessionsTable.insert(dbSession).returning('id');\n        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]\n        const insertedId = result?.[0]?.id ?? result?.[0] ?? session.id;\n        const finalId = session.id ?? insertedId;\n        return { ...session, id: finalId } as Session;\n    }\n\n    async getSessionById(id: SessionId): Promise<Session | null> {\n        const row = await this.sessionsTable.where({ id }).first();\n        return row ? this.fromDbSession(row) : null;\n    }\n\n    async getSessionsByUserId(userId: UserId): Promise<Session[]> {\n        const rows = await this.sessionsTable.where({ user_id: userId });\n        return rows.map((row: Record<string, unknown>) => this.fromDbSession(row));\n    }\n\n    async updateSession(id: SessionId, updates: Partial<Session>): Promise<void> {\n        const dbUpdates = this.toDbSessionUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.sessionsTable.where({ id }).update(dbUpdates);\n    }\n\n    async deleteSession(id: SessionId): Promise<void> {\n        await this.sessionsTable.where({ id }).delete();\n    }\n\n    async deleteAllUserSessions(userId: UserId): Promise<void> {\n        await this.sessionsTable.where({ user_id: userId }).delete();\n    }\n\n    async deleteExpiredSessions(): Promise<void> {\n        const now = new Date().toISOString();\n        await this.sessionsTable.where('expires_at', '<', now).delete();\n    }\n\n    // ==================== User Mapping Helpers ====================\n\n    /**\n     * Safely convert a DB date value (Date object or string) to ISO 8601 string\n     */\n    private toDateString(value: unknown): string {\n        if (value instanceof Date) return value.toISOString();\n        return String(value);\n    }\n\n    /**\n     * Convert User object to database row format (snake_case)\n     */\n    private toDbUser(user: CreateUserInput): Record<string, unknown> {\n        const now = new Date().toISOString();\n        const row: Record<string, unknown> = {\n            email: user.email,\n            first_name: user.firstName ?? null,\n            last_name: user.lastName ?? null,\n            password_hash: user.passwordHash,\n            roles: JSON.stringify(user.roles),\n            is_email_verified: user.isEmailVerified ? 1 : 0,\n            verification_token: user.verificationToken ?? null,\n            reset_password_token: user.resetPasswordToken ?? null,\n            reset_password_expires: user.resetPasswordExpires ?? null,\n            created_at: user.createdAt ?? now,\n            updated_at: user.updatedAt ?? now,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (user.id !== undefined) {\n            row.id = user.id;\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to User object (camelCase)\n     */\n    private fromDbUser(row: Record<string, unknown>): User {\n        return {\n            id: row.id as string | number,\n            email: row.email as string,\n            firstName: row.first_name as string | undefined,\n            lastName: row.last_name as string | undefined,\n            passwordHash: row.password_hash as string,\n            roles: typeof row.roles === 'string' ? JSON.parse(row.roles) : row.roles,\n            isEmailVerified: Boolean(row.is_email_verified),\n            verificationToken: row.verification_token as string | undefined,\n            resetPasswordToken: row.reset_password_token as string | undefined,\n            resetPasswordExpires: row.reset_password_expires\n                ? this.toDateString(row.reset_password_expires)\n                : undefined,\n            createdAt: this.toDateString(row.created_at),\n            updatedAt: this.toDateString(row.updated_at),\n        };\n    }\n\n    /**\n     * Convert partial User updates to database format\n     */\n    private toDbUpdates(updates: Partial<User>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.email !== undefined) {\n            dbUpdates.email = updates.email;\n        }\n        if ('firstName' in updates) {\n            dbUpdates.first_name = updates.firstName ?? null;\n        }\n        if ('lastName' in updates) {\n            dbUpdates.last_name = updates.lastName ?? null;\n        }\n        if (updates.passwordHash !== undefined) {\n            dbUpdates.password_hash = updates.passwordHash;\n        }\n        if (updates.roles !== undefined) {\n            dbUpdates.roles = JSON.stringify(updates.roles);\n        }\n        if (updates.isEmailVerified !== undefined) {\n            dbUpdates.is_email_verified = updates.isEmailVerified ? 1 : 0;\n        }\n        if ('verificationToken' in updates) {\n            dbUpdates.verification_token = updates.verificationToken ?? null;\n        }\n        if ('resetPasswordToken' in updates) {\n            dbUpdates.reset_password_token = updates.resetPasswordToken ?? null;\n        }\n        if ('resetPasswordExpires' in updates) {\n            dbUpdates.reset_password_expires = updates.resetPasswordExpires ?? null;\n        }\n        if (updates.updatedAt !== undefined) {\n            dbUpdates.updated_at = updates.updatedAt;\n        }\n\n        return dbUpdates;\n    }\n\n    // ==================== Session Mapping Helpers ====================\n\n    /**\n     * Convert Session object to database row format (snake_case)\n     */\n    private toDbSession(session: CreateSessionInput): Record<string, unknown> {\n        const row: Record<string, unknown> = {\n            user_id: session.userId,\n            refresh_token_hash: session.refreshTokenHash,\n            user_agent: session.userAgent ?? null,\n            ip_address: session.ipAddress ?? null,\n            device_name: session.deviceName ?? null,\n            created_at: session.createdAt,\n            last_used_at: session.lastUsedAt,\n            expires_at: session.expiresAt,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (session.id !== undefined) {\n            row.id = session.id;\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to Session object (camelCase)\n     */\n    private fromDbSession(row: Record<string, unknown>): Session {\n        return {\n            id: row.id as string | number,\n            userId: row.user_id as string | number,\n            refreshTokenHash: row.refresh_token_hash as string,\n            userAgent: row.user_agent as string | undefined,\n            ipAddress: row.ip_address as string | undefined,\n            deviceName: row.device_name as string | undefined,\n            createdAt: this.toDateString(row.created_at),\n            lastUsedAt: this.toDateString(row.last_used_at),\n            expiresAt: this.toDateString(row.expires_at),\n        };\n    }\n\n    /**\n     * Convert partial Session updates to database format\n     */\n    private toDbSessionUpdates(updates: Partial<Session>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.refreshTokenHash !== undefined) {\n            dbUpdates.refresh_token_hash = updates.refreshTokenHash;\n        }\n        if ('userAgent' in updates) {\n            dbUpdates.user_agent = updates.userAgent ?? null;\n        }\n        if ('ipAddress' in updates) {\n            dbUpdates.ip_address = updates.ipAddress ?? null;\n        }\n        if ('deviceName' in updates) {\n            dbUpdates.device_name = updates.deviceName ?? null;\n        }\n        if (updates.lastUsedAt !== undefined) {\n            dbUpdates.last_used_at = updates.lastUsedAt;\n        }\n        if (updates.expiresAt !== undefined) {\n            dbUpdates.expires_at = updates.expiresAt;\n        }\n\n        return dbUpdates;\n    }\n}\n","import type { Knex } from 'knex';\n\n/**\n * SQL migration helper to create the users table\n * Can be used with Knex migrations\n *\n * @example\n * ```ts\n * // In your migration file\n * import { createUsersTableMigration, createSessionsTableMigration } from '@xcelsior/auth-adapter-knex';\n *\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users');\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * export async function down(knex: Knex): Promise<void> {\n *   await knex.schema.dropTableIfExists('sessions');\n *   await knex.schema.dropTableIfExists('users');\n * }\n * ```\n */\nexport async function createUsersTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('email').notNullable().unique();\n        table.string('first_name').nullable();\n        table.string('last_name').nullable();\n        table.string('password_hash').notNullable();\n        table.jsonb('roles').notNullable();\n        table.boolean('is_email_verified').notNullable().defaultTo(false);\n        table.string('verification_token').nullable();\n        table.string('reset_password_token').nullable();\n        table.timestamp('reset_password_expires', { useTz: true }).nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('updated_at', { useTz: true }).notNullable();\n\n        // Indexes for common lookups\n        table.index('email');\n        table.index('verification_token');\n        table.index('reset_password_token');\n    });\n}\n\n/**\n * SQL migration helper to create the sessions table\n * Can be used with Knex migrations\n */\nexport async function createSessionsTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('user_id').notNullable();\n        table.string('refresh_token_hash').notNullable();\n        table.string('user_agent').nullable();\n        table.string('ip_address').nullable();\n        table.string('device_name').nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('last_used_at', { useTz: true }).notNullable();\n        table.timestamp('expires_at', { useTz: true }).notNullable();\n\n        // Index for querying sessions by user\n        table.index('user_id');\n        // Index for cleaning up expired sessions\n        table.index('expires_at');\n    });\n}\n"],"mappings":";AAyBO,IAAM,sBAAN,MAAsD;AAAA,EAMzD,YAAY,QAAoB;AAC5B,SAAK,OAAO,OAAO;AACnB,SAAK,YAAY,OAAO;AACxB,SAAK,oBAAoB,OAAO;AAChC,SAAK,SAAS,OAAO;AAAA,EACzB;AAAA,EAEA,IAAY,QAAQ;AAChB,UAAM,QAAQ,KAAK,KAAK,KAAK,SAAS;AACtC,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA,EAEA,IAAY,gBAAgB;AACxB,UAAM,QAAQ,KAAK,KAAK,KAAK,iBAAiB;AAC9C,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA;AAAA,EAIA,MAAM,WAAW,MAAsC;AACnD,UAAM,SAAS,KAAK,SAAS,IAAI;AACjC,UAAM,SAAS,MAAM,KAAK,MAAM,OAAO,MAAM,EAAE,UAAU,IAAI;AAE7D,UAAM,aAAa,SAAS,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,KAAK;AAC1D,UAAM,UAAU,KAAK,MAAM;AAC3B,WAAO,EAAE,GAAG,MAAM,IAAI,QAAQ;AAAA,EAClC;AAAA,EAEA,MAAM,YAAY,IAAkC;AAChD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACjD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,eAAe,OAAqC;AACtD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;AACpD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,4BAA4B,oBAAkD;AAChF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,sBAAsB,mBAAmB,CAAC,EAAE,MAAM;AACvF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,0BAA0B,kBAAgD;AAC5E,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,oBAAoB,iBAAiB,CAAC,EAAE,MAAM;AACnF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,WAAW,IAAY,SAAuC;AAChE,UAAM,YAAY,KAAK,YAAY,OAAO;AAE1C,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EACnD;AAAA,EAEA,MAAM,WAAW,IAA2B;AAExC,UAAM,KAAK,sBAAsB,EAAE;AAEnC,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAC1C;AAAA,EAEA,MAAM,UAAU,QAAoB,UAA4B,CAAC,GAA6B;AAC1F,UAAM,QAAQ,QAAQ,SAAS;AAE/B,QAAI,QAAQ,KAAK,MAAM,MAAM;AAG7B,QAAI,OAAO,OAAO;AACd,cAAQ,MAAM,MAAM,SAAS,OAAO,KAAK;AAAA,IAC7C;AAGA,QAAI,OAAO,eAAe;AACtB,cAAQ,MAAM,MAAM,SAAS,QAAQ,IAAI,OAAO,aAAa,GAAG;AAAA,IACpE;AAGA,QAAI,OAAO,oBAAoB,QAAW;AACtC,cAAQ,MAAM,MAAM,qBAAqB,OAAO,eAAe;AAAA,IACnE;AAGA,QAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AACzC,iBAAW,QAAQ,OAAO,OAAO;AAG7B,gBAAQ,MAAM;AAAA,UACV,KAAK,KAAK,OAAO,OAAO,WAAW,YAAY,iBAAiB;AAAA,UAChE,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,QACjC;AAAA,MACJ;AAAA,IACJ;AAGA,QAAI,OAAO,cAAc,OAAO,WAAW,SAAS,GAAG;AACnD,cAAQ,MAAM,MAAM,CAAC,YAA+B;AAChD,mBAAW,QAAQ,OAAO,YAAa;AACnC,kBAAQ;AAAA,YACJ,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,iBACA;AAAA,YACN,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,UACjC;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAGA,QAAI,QAAQ,QAAQ;AAChB,YAAM,aAAa,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE,SAAS,CAAC;AAC9E,cAAQ,MAAM,MAAM,MAAM,KAAK,WAAW,MAAM;AAAA,IACpD;AAGA,YAAQ,MAAM,QAAQ,MAAM,KAAK,EAAE,MAAM,QAAQ,CAAC;AAElD,UAAM,OAAO,MAAM;AACnB,UAAM,UAAU,KAAK,SAAS;AAC9B,UAAM,aAAa,UAAU,KAAK,MAAM,GAAG,KAAK,IAAI;AACpD,UAAM,QAAQ,WAAW,IAAI,CAAC,QAAiC,KAAK,WAAW,GAAG,CAAC;AAEnF,QAAI;AACJ,QAAI,WAAW,WAAW,SAAS,GAAG;AAClC,YAAM,WAAW,WAAW,WAAW,SAAS,CAAC;AACjD,mBAAa,OAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,SAAS,GAAG,CAAC,CAAC,EAAE,SAAS,QAAQ;AAAA,IACvF;AAEA,WAAO,EAAE,OAAO,WAAW;AAAA,EAC/B;AAAA;AAAA,EAIA,MAAM,cAAc,SAA+C;AAC/D,UAAM,YAAY,KAAK,YAAY,OAAO;AAC1C,UAAM,SAAS,MAAM,KAAK,cAAc,OAAO,SAAS,EAAE,UAAU,IAAI;AAExE,UAAM,aAAa,SAAS,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,QAAQ;AAC7D,UAAM,UAAU,QAAQ,MAAM;AAC9B,WAAO,EAAE,GAAG,SAAS,IAAI,QAAQ;AAAA,EACrC;AAAA,EAEA,MAAM,eAAe,IAAwC;AACzD,UAAM,MAAM,MAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACzD,WAAO,MAAM,KAAK,cAAc,GAAG,IAAI;AAAA,EAC3C;AAAA,EAEA,MAAM,oBAAoB,QAAoC;AAC1D,UAAM,OAAO,MAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC;AAC/D,WAAO,KAAK,IAAI,CAAC,QAAiC,KAAK,cAAc,GAAG,CAAC;AAAA,EAC7E;AAAA,EAEA,MAAM,cAAc,IAAe,SAA0C;AACzE,UAAM,YAAY,KAAK,mBAAmB,OAAO;AAEjD,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EAC3D;AAAA,EAEA,MAAM,cAAc,IAA8B;AAC9C,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAClD;AAAA,EAEA,MAAM,sBAAsB,QAA+B;AACvD,UAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC,EAAE,OAAO;AAAA,EAC/D;AAAA,EAEA,MAAM,wBAAuC;AACzC,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,KAAK,cAAc,MAAM,cAAc,KAAK,GAAG,EAAE,OAAO;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,aAAa,OAAwB;AACzC,QAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,WAAO,OAAO,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKQ,SAAS,MAAgD;AAC7D,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,MAA+B;AAAA,MACjC,OAAO,KAAK;AAAA,MACZ,YAAY,KAAK,aAAa;AAAA,MAC9B,WAAW,KAAK,YAAY;AAAA,MAC5B,eAAe,KAAK;AAAA,MACpB,OAAO,KAAK,UAAU,KAAK,KAAK;AAAA,MAChC,mBAAmB,KAAK,kBAAkB,IAAI;AAAA,MAC9C,oBAAoB,KAAK,qBAAqB;AAAA,MAC9C,sBAAsB,KAAK,sBAAsB;AAAA,MACjD,wBAAwB,KAAK,wBAAwB;AAAA,MACrD,YAAY,KAAK,aAAa;AAAA,MAC9B,YAAY,KAAK,aAAa;AAAA,IAClC;AAGA,QAAI,KAAK,OAAO,QAAW;AACvB,UAAI,KAAK,KAAK;AAAA,IAClB;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKQ,WAAW,KAAoC;AACnD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,OAAO,IAAI;AAAA,MACX,WAAW,IAAI;AAAA,MACf,UAAU,IAAI;AAAA,MACd,cAAc,IAAI;AAAA,MAClB,OAAO,OAAO,IAAI,UAAU,WAAW,KAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAAA,MACnE,iBAAiB,QAAQ,IAAI,iBAAiB;AAAA,MAC9C,mBAAmB,IAAI;AAAA,MACvB,oBAAoB,IAAI;AAAA,MACxB,sBAAsB,IAAI,yBACpB,KAAK,aAAa,IAAI,sBAAsB,IAC5C;AAAA,MACN,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,IAC/C;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,YAAY,SAAiD;AACjE,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,QAAQ;AAAA,IAC9B;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,cAAc,SAAS;AACvB,gBAAU,YAAY,QAAQ,YAAY;AAAA,IAC9C;AACA,QAAI,QAAQ,iBAAiB,QAAW;AACpC,gBAAU,gBAAgB,QAAQ;AAAA,IACtC;AACA,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,KAAK,UAAU,QAAQ,KAAK;AAAA,IAClD;AACA,QAAI,QAAQ,oBAAoB,QAAW;AACvC,gBAAU,oBAAoB,QAAQ,kBAAkB,IAAI;AAAA,IAChE;AACA,QAAI,uBAAuB,SAAS;AAChC,gBAAU,qBAAqB,QAAQ,qBAAqB;AAAA,IAChE;AACA,QAAI,wBAAwB,SAAS;AACjC,gBAAU,uBAAuB,QAAQ,sBAAsB;AAAA,IACnE;AACA,QAAI,0BAA0B,SAAS;AACnC,gBAAU,yBAAyB,QAAQ,wBAAwB;AAAA,IACvE;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,YAAY,SAAsD;AACtE,UAAM,MAA+B;AAAA,MACjC,SAAS,QAAQ;AAAA,MACjB,oBAAoB,QAAQ;AAAA,MAC5B,YAAY,QAAQ,aAAa;AAAA,MACjC,YAAY,QAAQ,aAAa;AAAA,MACjC,aAAa,QAAQ,cAAc;AAAA,MACnC,YAAY,QAAQ;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,IACxB;AAGA,QAAI,QAAQ,OAAO,QAAW;AAC1B,UAAI,KAAK,QAAQ;AAAA,IACrB;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAc,KAAuC;AACzD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,kBAAkB,IAAI;AAAA,MACtB,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,YAAY,KAAK,aAAa,IAAI,YAAY;AAAA,MAC9C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,IAC/C;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,mBAAmB,SAAoD;AAC3E,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,qBAAqB,QAAW;AACxC,gBAAU,qBAAqB,QAAQ;AAAA,IAC3C;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,gBAAgB,SAAS;AACzB,gBAAU,cAAc,QAAQ,cAAc;AAAA,IAClD;AACA,QAAI,QAAQ,eAAe,QAAW;AAClC,gBAAU,eAAe,QAAQ;AAAA,IACrC;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AACJ;;;AC3WA,eAAsB,0BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,OAAO,EAAE,YAAY,EAAE,OAAO;AAC3C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,WAAW,EAAE,SAAS;AACnC,UAAM,OAAO,eAAe,EAAE,YAAY;AAC1C,UAAM,MAAM,OAAO,EAAE,YAAY;AACjC,UAAM,QAAQ,mBAAmB,EAAE,YAAY,EAAE,UAAU,KAAK;AAChE,UAAM,OAAO,oBAAoB,EAAE,SAAS;AAC5C,UAAM,OAAO,sBAAsB,EAAE,SAAS;AAC9C,UAAM,UAAU,0BAA0B,EAAE,OAAO,KAAK,CAAC,EAAE,SAAS;AACpE,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,OAAO;AACnB,UAAM,MAAM,oBAAoB;AAChC,UAAM,MAAM,sBAAsB;AAAA,EACtC,CAAC;AACL;AAMA,eAAsB,6BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,SAAS,EAAE,YAAY;AACpC,UAAM,OAAO,oBAAoB,EAAE,YAAY;AAC/C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,aAAa,EAAE,SAAS;AACrC,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,gBAAgB,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC7D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,SAAS;AAErB,UAAM,MAAM,YAAY;AAAA,EAC5B,CAAC;AACL;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xcelsior/auth-adapter-knex",
-  "version": "1.1.2",
+  "version": "1.1.3",
   "description": "Knex storage adapter for @xcelsior/auth (PostgreSQL, MySQL, SQLite, etc.)",
   "exports": {
     ".": {
@@ -15,7 +15,7 @@
   },
   "peerDependencies": {
     "knex": "^3.1.0",
-    "@xcelsior/auth": "1.1.2"
+    "@xcelsior/auth": "1.1.3"
   },
   "scripts": {
     "build": "tsup && tsc --noEmit",

package/src/knex.ts

@@ -56,9 +56,9 @@ export class KnexStorageProvider implements IStorageProvider {
 
     async createUser(user: CreateUserInput): Promise<User> {
         const dbUser = this.toDbUser(user);
-        const [insertedId] = await this.table.insert(dbUser);
-        // For auto-increment DBs, insertedId is the new ID
-        // For string PKs, it returns 0, so use the original id
+        const result = await this.table.insert(dbUser).returning('id');
+        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]
+        const insertedId = result?.[0]?.id ?? result?.[0] ?? user.id;
         const finalId = user.id ?? insertedId;
         return { ...user, id: finalId } as User;
     }
@@ -177,7 +177,9 @@ export class KnexStorageProvider implements IStorageProvider {
 
     async createSession(session: CreateSessionInput): Promise<Session> {
         const dbSession = this.toDbSession(session);
-        const [insertedId] = await this.sessionsTable.insert(dbSession);
+        const result = await this.sessionsTable.insert(dbSession).returning('id');
+        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]
+        const insertedId = result?.[0]?.id ?? result?.[0] ?? session.id;
         const finalId = session.id ?? insertedId;
         return { ...session, id: finalId } as Session;
     }