@xcelsior/auth-adapter-knex 1.1.3 → 1.1.4

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import { Knex } from 'knex';
-import { IStorageProvider, CreateUserInput, User, UserId, UserFilter, FindUsersOptions, FindUsersResult, CreateSessionInput, Session, SessionId } from '@xcelsior/auth';
+import { UserMeta, IStorageProvider, CreateUserInput, User, UserId, UserFilter, FindUsersOptions, FindUsersResult, CreateSessionInput, Session, SessionId } from '@xcelsior/auth';
 
 interface KnexConfig {
     /** Pre-configured Knex instance */
@@ -11,7 +11,7 @@ interface KnexConfig {
     /** Optional schema (for PostgreSQL) */
     schema?: string;
 }
-declare class KnexStorageProvider implements IStorageProvider {
+declare class KnexStorageProvider<Meta extends UserMeta = Record<string, never>> implements IStorageProvider<Meta> {
     private knex;
     private tableName;
     private sessionsTableName;
@@ -19,14 +19,14 @@ declare class KnexStorageProvider implements IStorageProvider {
     constructor(config: KnexConfig);
     private get table();
     private get sessionsTable();
-    createUser(user: CreateUserInput): Promise<User>;
-    getUserById(id: UserId): Promise<User | null>;
-    getUserByEmail(email: string): Promise<User | null>;
-    getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null>;
-    getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null>;
-    updateUser(id: UserId, updates: Partial<User>): Promise<void>;
+    createUser(user: CreateUserInput<Meta>): Promise<User<Meta>>;
+    getUserById(id: UserId): Promise<User<Meta> | null>;
+    getUserByEmail(email: string): Promise<User<Meta> | null>;
+    getUserByResetPasswordToken(resetPasswordToken: string): Promise<User<Meta> | null>;
+    getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User<Meta> | null>;
+    updateUser(id: UserId, updates: Partial<User<Meta>>): Promise<void>;
     deleteUser(id: UserId): Promise<void>;
-    findUsers(filter: UserFilter, options?: FindUsersOptions): Promise<FindUsersResult>;
+    findUsers(filter: UserFilter, options?: FindUsersOptions): Promise<FindUsersResult<Meta>>;
     createSession(session: CreateSessionInput): Promise<Session>;
     getSessionById(id: SessionId): Promise<Session | null>;
     getSessionsByUserId(userId: UserId): Promise<Session[]>;
@@ -39,15 +39,18 @@ declare class KnexStorageProvider implements IStorageProvider {
      */
     private toDateString;
     /**
-     * Convert User object to database row format (snake_case)
+     * Convert User object to database row format (snake_case).
+     * Meta fields are flattened as individual snake_case columns.
      */
     private toDbUser;
     /**
-     * Convert database row to User object (camelCase)
+     * Convert database row to User object (camelCase).
+     * Non-core columns are gathered into the typed `meta` object.
      */
     private fromDbUser;
     /**
-     * Convert partial User updates to database format
+     * Convert partial User updates to database format.
+     * Meta fields in updates are flattened as individual snake_case columns.
      */
     private toDbUpdates;
     /**
@@ -68,6 +71,11 @@ declare class KnexStorageProvider implements IStorageProvider {
  * SQL migration helper to create the users table
  * Can be used with Knex migrations
  *
+ * @param knex - Knex instance
+ * @param tableName - Table name for users
+ * @param schemaOrCustomColumns - Optional schema name (for PostgreSQL) or callback to add custom columns
+ * @param customColumns - Optional callback to add custom columns to the table (when schema is provided)
+ *
  * @example
  * ```ts
  * // In your migration file
@@ -78,13 +86,30 @@ declare class KnexStorageProvider implements IStorageProvider {
  *   await createSessionsTableMigration(knex, 'sessions');
  * }
  *
+ * // With custom meta columns
+ * export async function up(knex: Knex): Promise<void> {
+ *   await createUsersTableMigration(knex, 'users', (table) => {
+ *     table.string('phone').nullable();
+ *     table.string('company').nullable();
+ *   });
+ *   await createSessionsTableMigration(knex, 'sessions');
+ * }
+ *
+ * // With schema and custom meta columns
+ * export async function up(knex: Knex): Promise<void> {
+ *   await createUsersTableMigration(knex, 'users', 'my_schema', (table) => {
+ *     table.string('phone').nullable();
+ *     table.string('company').nullable();
+ *   });
+ * }
+ *
  * export async function down(knex: Knex): Promise<void> {
  *   await knex.schema.dropTableIfExists('sessions');
  *   await knex.schema.dropTableIfExists('users');
  * }
  * ```
  */
-declare function createUsersTableMigration(knex: Knex, tableName: string, schema?: string): Promise<void>;
+declare function createUsersTableMigration(knex: Knex, tableName: string, schemaOrCustomColumns?: string | ((table: Knex.CreateTableBuilder) => void), customColumns?: (table: Knex.CreateTableBuilder) => void): Promise<void>;
 /**
  * SQL migration helper to create the sessions table
  * Can be used with Knex migrations

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { Knex } from 'knex';
-import { IStorageProvider, CreateUserInput, User, UserId, UserFilter, FindUsersOptions, FindUsersResult, CreateSessionInput, Session, SessionId } from '@xcelsior/auth';
+import { UserMeta, IStorageProvider, CreateUserInput, User, UserId, UserFilter, FindUsersOptions, FindUsersResult, CreateSessionInput, Session, SessionId } from '@xcelsior/auth';
 
 interface KnexConfig {
     /** Pre-configured Knex instance */
@@ -11,7 +11,7 @@ interface KnexConfig {
     /** Optional schema (for PostgreSQL) */
     schema?: string;
 }
-declare class KnexStorageProvider implements IStorageProvider {
+declare class KnexStorageProvider<Meta extends UserMeta = Record<string, never>> implements IStorageProvider<Meta> {
     private knex;
     private tableName;
     private sessionsTableName;
@@ -19,14 +19,14 @@ declare class KnexStorageProvider implements IStorageProvider {
     constructor(config: KnexConfig);
     private get table();
     private get sessionsTable();
-    createUser(user: CreateUserInput): Promise<User>;
-    getUserById(id: UserId): Promise<User | null>;
-    getUserByEmail(email: string): Promise<User | null>;
-    getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null>;
-    getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null>;
-    updateUser(id: UserId, updates: Partial<User>): Promise<void>;
+    createUser(user: CreateUserInput<Meta>): Promise<User<Meta>>;
+    getUserById(id: UserId): Promise<User<Meta> | null>;
+    getUserByEmail(email: string): Promise<User<Meta> | null>;
+    getUserByResetPasswordToken(resetPasswordToken: string): Promise<User<Meta> | null>;
+    getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User<Meta> | null>;
+    updateUser(id: UserId, updates: Partial<User<Meta>>): Promise<void>;
     deleteUser(id: UserId): Promise<void>;
-    findUsers(filter: UserFilter, options?: FindUsersOptions): Promise<FindUsersResult>;
+    findUsers(filter: UserFilter, options?: FindUsersOptions): Promise<FindUsersResult<Meta>>;
     createSession(session: CreateSessionInput): Promise<Session>;
     getSessionById(id: SessionId): Promise<Session | null>;
     getSessionsByUserId(userId: UserId): Promise<Session[]>;
@@ -39,15 +39,18 @@ declare class KnexStorageProvider implements IStorageProvider {
      */
     private toDateString;
     /**
-     * Convert User object to database row format (snake_case)
+     * Convert User object to database row format (snake_case).
+     * Meta fields are flattened as individual snake_case columns.
      */
     private toDbUser;
     /**
-     * Convert database row to User object (camelCase)
+     * Convert database row to User object (camelCase).
+     * Non-core columns are gathered into the typed `meta` object.
      */
     private fromDbUser;
     /**
-     * Convert partial User updates to database format
+     * Convert partial User updates to database format.
+     * Meta fields in updates are flattened as individual snake_case columns.
      */
     private toDbUpdates;
     /**
@@ -68,6 +71,11 @@ declare class KnexStorageProvider implements IStorageProvider {
  * SQL migration helper to create the users table
  * Can be used with Knex migrations
  *
+ * @param knex - Knex instance
+ * @param tableName - Table name for users
+ * @param schemaOrCustomColumns - Optional schema name (for PostgreSQL) or callback to add custom columns
+ * @param customColumns - Optional callback to add custom columns to the table (when schema is provided)
+ *
  * @example
  * ```ts
  * // In your migration file
@@ -78,13 +86,30 @@ declare class KnexStorageProvider implements IStorageProvider {
  *   await createSessionsTableMigration(knex, 'sessions');
  * }
  *
+ * // With custom meta columns
+ * export async function up(knex: Knex): Promise<void> {
+ *   await createUsersTableMigration(knex, 'users', (table) => {
+ *     table.string('phone').nullable();
+ *     table.string('company').nullable();
+ *   });
+ *   await createSessionsTableMigration(knex, 'sessions');
+ * }
+ *
+ * // With schema and custom meta columns
+ * export async function up(knex: Knex): Promise<void> {
+ *   await createUsersTableMigration(knex, 'users', 'my_schema', (table) => {
+ *     table.string('phone').nullable();
+ *     table.string('company').nullable();
+ *   });
+ * }
+ *
  * export async function down(knex: Knex): Promise<void> {
  *   await knex.schema.dropTableIfExists('sessions');
  *   await knex.schema.dropTableIfExists('users');
  * }
  * ```
  */
-declare function createUsersTableMigration(knex: Knex, tableName: string, schema?: string): Promise<void>;
+declare function createUsersTableMigration(knex: Knex, tableName: string, schemaOrCustomColumns?: string | ((table: Knex.CreateTableBuilder) => void), customColumns?: (table: Knex.CreateTableBuilder) => void): Promise<void>;
 /**
  * SQL migration helper to create the sessions table
  * Can be used with Knex migrations

package/dist/index.js

@@ -27,6 +27,26 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // src/knex.ts
+function camelToSnake(str) {
+  return str.replace(/[A-Z]/g, (letter) => `_${letter.toLowerCase()}`);
+}
+function snakeToCamel(str) {
+  return str.replace(/_([a-z])/g, (_, letter) => letter.toUpperCase());
+}
+var CORE_USER_DB_FIELDS = /* @__PURE__ */ new Set([
+  "id",
+  "email",
+  "first_name",
+  "last_name",
+  "password_hash",
+  "roles",
+  "is_email_verified",
+  "verification_token",
+  "reset_password_token",
+  "reset_password_expires",
+  "created_at",
+  "updated_at"
+]);
 var KnexStorageProvider = class {
   constructor(config) {
     this.knex = config.knex;
@@ -171,7 +191,8 @@ var KnexStorageProvider = class {
     return String(value);
   }
   /**
-   * Convert User object to database row format (snake_case)
+   * Convert User object to database row format (snake_case).
+   * Meta fields are flattened as individual snake_case columns.
    */
   toDbUser(user) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -191,12 +212,24 @@ var KnexStorageProvider = class {
     if (user.id !== void 0) {
       row.id = user.id;
     }
+    if (user.meta) {
+      for (const [key, value] of Object.entries(user.meta)) {
+        row[camelToSnake(key)] = value;
+      }
+    }
     return row;
   }
   /**
-   * Convert database row to User object (camelCase)
+   * Convert database row to User object (camelCase).
+   * Non-core columns are gathered into the typed `meta` object.
    */
   fromDbUser(row) {
+    const meta = {};
+    for (const [key, value] of Object.entries(row)) {
+      if (!CORE_USER_DB_FIELDS.has(key)) {
+        meta[snakeToCamel(key)] = value;
+      }
+    }
     return {
       id: row.id,
       email: row.email,
@@ -209,11 +242,13 @@ var KnexStorageProvider = class {
       resetPasswordToken: row.reset_password_token,
       resetPasswordExpires: row.reset_password_expires ? this.toDateString(row.reset_password_expires) : void 0,
       createdAt: this.toDateString(row.created_at),
-      updatedAt: this.toDateString(row.updated_at)
+      updatedAt: this.toDateString(row.updated_at),
+      ...Object.keys(meta).length > 0 ? { meta } : {}
     };
   }
   /**
-   * Convert partial User updates to database format
+   * Convert partial User updates to database format.
+   * Meta fields in updates are flattened as individual snake_case columns.
    */
   toDbUpdates(updates) {
     const dbUpdates = {};
@@ -247,6 +282,11 @@ var KnexStorageProvider = class {
     if (updates.updatedAt !== void 0) {
       dbUpdates.updated_at = updates.updatedAt;
     }
+    if (updates.meta) {
+      for (const [key, value] of Object.entries(updates.meta)) {
+        dbUpdates[camelToSnake(key)] = value;
+      }
+    }
     return dbUpdates;
   }
   // ==================== Session Mapping Helpers ====================
@@ -313,7 +353,9 @@ var KnexStorageProvider = class {
 };
 
 // src/migration.ts
-async function createUsersTableMigration(knex, tableName, schema) {
+async function createUsersTableMigration(knex, tableName, schemaOrCustomColumns, customColumns) {
+  const schema = typeof schemaOrCustomColumns === "string" ? schemaOrCustomColumns : void 0;
+  const addCustomColumns = typeof schemaOrCustomColumns === "function" ? schemaOrCustomColumns : customColumns;
   const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;
   await schemaBuilder.createTable(tableName, (table) => {
     table.string("id").primary();
@@ -331,6 +373,9 @@ async function createUsersTableMigration(knex, tableName, schema) {
     table.index("email");
     table.index("verification_token");
     table.index("reset_password_token");
+    if (addCustomColumns) {
+      addCustomColumns(table);
+    }
   });
 }
 async function createSessionsTableMigration(knex, tableName, schema) {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/knex.ts","../src/migration.ts"],"sourcesContent":["export { KnexStorageProvider, type KnexConfig } from './knex';\nexport { createUsersTableMigration, createSessionsTableMigration } from './migration';\n","import type { Knex } from 'knex';\nimport type {\n    CreateSessionInput,\n    CreateUserInput,\n    FindUsersOptions,\n    FindUsersResult,\n    IStorageProvider,\n    Session,\n    SessionId,\n    User,\n    UserFilter,\n    UserId,\n} from '@xcelsior/auth';\n\nexport interface KnexConfig {\n    /** Pre-configured Knex instance */\n    knex: Knex;\n    /** Table name for users */\n    tableName: string;\n    /** Table name for sessions */\n    sessionsTableName: string;\n    /** Optional schema (for PostgreSQL) */\n    schema?: string;\n}\n\nexport class KnexStorageProvider implements IStorageProvider {\n    private knex: Knex;\n    private tableName: string;\n    private sessionsTableName: string;\n    private schema?: string;\n\n    constructor(config: KnexConfig) {\n        this.knex = config.knex;\n        this.tableName = config.tableName;\n        this.sessionsTableName = config.sessionsTableName;\n        this.schema = config.schema;\n    }\n\n    private get table() {\n        const query = this.knex(this.tableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    private get sessionsTable() {\n        const query = this.knex(this.sessionsTableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    // ==================== User Methods ====================\n\n    async createUser(user: CreateUserInput): Promise<User> {\n        const dbUser = this.toDbUser(user);\n        const result = await this.table.insert(dbUser).returning('id');\n        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]\n        const insertedId = result?.[0]?.id ?? result?.[0] ?? user.id;\n        const finalId = user.id ?? insertedId;\n        return { ...user, id: finalId } as User;\n    }\n\n    async getUserById(id: UserId): Promise<User | null> {\n        const row = await this.table.where({ id }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByEmail(email: string): Promise<User | null> {\n        const row = await this.table.where({ email }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null> {\n        const row = await this.table.where({ reset_password_token: resetPasswordToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null> {\n        const row = await this.table.where({ verification_token: verifyEmailToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async updateUser(id: UserId, updates: Partial<User>): Promise<void> {\n        const dbUpdates = this.toDbUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.table.where({ id }).update(dbUpdates);\n    }\n\n    async deleteUser(id: UserId): Promise<void> {\n        // Delete all user sessions first\n        await this.deleteAllUserSessions(id);\n        // Then delete the user\n        await this.table.where({ id }).delete();\n    }\n\n    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult> {\n        const limit = options.limit ?? 50;\n\n        let query = this.table.clone();\n\n        // Email exact match\n        if (filter.email) {\n            query = query.where('email', filter.email);\n        }\n\n        // Email contains (partial match)\n        if (filter.emailContains) {\n            query = query.where('email', 'like', `%${filter.emailContains}%`);\n        }\n\n        // Email verification status\n        if (filter.isEmailVerified !== undefined) {\n            query = query.where('is_email_verified', filter.isEmailVerified);\n        }\n\n        // Roles filtering - user must have ALL specified roles\n        if (filter.roles && filter.roles.length > 0) {\n            for (const role of filter.roles) {\n                // Use JSON contains - works for PostgreSQL (jsonb) and MySQL (json)\n                // For SQLite, we fall back to LIKE on the JSON string\n                query = query.whereRaw(\n                    this.knex.client.config.client === 'sqlite3' ? `roles LIKE ?` : `roles @> ?`,\n                    this.knex.client.config.client === 'sqlite3'\n                        ? [`%\"${role}\"%`]\n                        : [JSON.stringify([role])]\n                );\n            }\n        }\n\n        // HasAnyRole - user must have at least ONE of specified roles\n        if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {\n            query = query.where((builder: Knex.QueryBuilder) => {\n                for (const role of filter.hasAnyRole!) {\n                    builder.orWhereRaw(\n                        this.knex.client.config.client === 'sqlite3'\n                            ? `roles LIKE ?`\n                            : `roles @> ?`,\n                        this.knex.client.config.client === 'sqlite3'\n                            ? [`%\"${role}\"%`]\n                            : [JSON.stringify([role])]\n                    );\n                }\n            });\n        }\n\n        // Apply pagination\n        if (options.cursor) {\n            const cursorData = JSON.parse(Buffer.from(options.cursor, 'base64').toString());\n            query = query.where('id', '>', cursorData.lastId);\n        }\n\n        // Order by id for consistent pagination\n        query = query.orderBy('id', 'asc').limit(limit + 1);\n\n        const rows = await query;\n        const hasMore = rows.length > limit;\n        const resultRows = hasMore ? rows.slice(0, limit) : rows;\n        const users = resultRows.map((row: Record<string, unknown>) => this.fromDbUser(row));\n\n        let nextCursor: string | undefined;\n        if (hasMore && resultRows.length > 0) {\n            const lastUser = resultRows[resultRows.length - 1];\n            nextCursor = Buffer.from(JSON.stringify({ lastId: lastUser.id })).toString('base64');\n        }\n\n        return { users, nextCursor };\n    }\n\n    // ==================== Session Methods ====================\n\n    async createSession(session: CreateSessionInput): Promise<Session> {\n        const dbSession = this.toDbSession(session);\n        const result = await this.sessionsTable.insert(dbSession).returning('id');\n        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]\n        const insertedId = result?.[0]?.id ?? result?.[0] ?? session.id;\n        const finalId = session.id ?? insertedId;\n        return { ...session, id: finalId } as Session;\n    }\n\n    async getSessionById(id: SessionId): Promise<Session | null> {\n        const row = await this.sessionsTable.where({ id }).first();\n        return row ? this.fromDbSession(row) : null;\n    }\n\n    async getSessionsByUserId(userId: UserId): Promise<Session[]> {\n        const rows = await this.sessionsTable.where({ user_id: userId });\n        return rows.map((row: Record<string, unknown>) => this.fromDbSession(row));\n    }\n\n    async updateSession(id: SessionId, updates: Partial<Session>): Promise<void> {\n        const dbUpdates = this.toDbSessionUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.sessionsTable.where({ id }).update(dbUpdates);\n    }\n\n    async deleteSession(id: SessionId): Promise<void> {\n        await this.sessionsTable.where({ id }).delete();\n    }\n\n    async deleteAllUserSessions(userId: UserId): Promise<void> {\n        await this.sessionsTable.where({ user_id: userId }).delete();\n    }\n\n    async deleteExpiredSessions(): Promise<void> {\n        const now = new Date().toISOString();\n        await this.sessionsTable.where('expires_at', '<', now).delete();\n    }\n\n    // ==================== User Mapping Helpers ====================\n\n    /**\n     * Safely convert a DB date value (Date object or string) to ISO 8601 string\n     */\n    private toDateString(value: unknown): string {\n        if (value instanceof Date) return value.toISOString();\n        return String(value);\n    }\n\n    /**\n     * Convert User object to database row format (snake_case)\n     */\n    private toDbUser(user: CreateUserInput): Record<string, unknown> {\n        const now = new Date().toISOString();\n        const row: Record<string, unknown> = {\n            email: user.email,\n            first_name: user.firstName ?? null,\n            last_name: user.lastName ?? null,\n            password_hash: user.passwordHash,\n            roles: JSON.stringify(user.roles),\n            is_email_verified: user.isEmailVerified ? 1 : 0,\n            verification_token: user.verificationToken ?? null,\n            reset_password_token: user.resetPasswordToken ?? null,\n            reset_password_expires: user.resetPasswordExpires ?? null,\n            created_at: user.createdAt ?? now,\n            updated_at: user.updatedAt ?? now,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (user.id !== undefined) {\n            row.id = user.id;\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to User object (camelCase)\n     */\n    private fromDbUser(row: Record<string, unknown>): User {\n        return {\n            id: row.id as string | number,\n            email: row.email as string,\n            firstName: row.first_name as string | undefined,\n            lastName: row.last_name as string | undefined,\n            passwordHash: row.password_hash as string,\n            roles: typeof row.roles === 'string' ? JSON.parse(row.roles) : row.roles,\n            isEmailVerified: Boolean(row.is_email_verified),\n            verificationToken: row.verification_token as string | undefined,\n            resetPasswordToken: row.reset_password_token as string | undefined,\n            resetPasswordExpires: row.reset_password_expires\n                ? this.toDateString(row.reset_password_expires)\n                : undefined,\n            createdAt: this.toDateString(row.created_at),\n            updatedAt: this.toDateString(row.updated_at),\n        };\n    }\n\n    /**\n     * Convert partial User updates to database format\n     */\n    private toDbUpdates(updates: Partial<User>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.email !== undefined) {\n            dbUpdates.email = updates.email;\n        }\n        if ('firstName' in updates) {\n            dbUpdates.first_name = updates.firstName ?? null;\n        }\n        if ('lastName' in updates) {\n            dbUpdates.last_name = updates.lastName ?? null;\n        }\n        if (updates.passwordHash !== undefined) {\n            dbUpdates.password_hash = updates.passwordHash;\n        }\n        if (updates.roles !== undefined) {\n            dbUpdates.roles = JSON.stringify(updates.roles);\n        }\n        if (updates.isEmailVerified !== undefined) {\n            dbUpdates.is_email_verified = updates.isEmailVerified ? 1 : 0;\n        }\n        if ('verificationToken' in updates) {\n            dbUpdates.verification_token = updates.verificationToken ?? null;\n        }\n        if ('resetPasswordToken' in updates) {\n            dbUpdates.reset_password_token = updates.resetPasswordToken ?? null;\n        }\n        if ('resetPasswordExpires' in updates) {\n            dbUpdates.reset_password_expires = updates.resetPasswordExpires ?? null;\n        }\n        if (updates.updatedAt !== undefined) {\n            dbUpdates.updated_at = updates.updatedAt;\n        }\n\n        return dbUpdates;\n    }\n\n    // ==================== Session Mapping Helpers ====================\n\n    /**\n     * Convert Session object to database row format (snake_case)\n     */\n    private toDbSession(session: CreateSessionInput): Record<string, unknown> {\n        const row: Record<string, unknown> = {\n            user_id: session.userId,\n            refresh_token_hash: session.refreshTokenHash,\n            user_agent: session.userAgent ?? null,\n            ip_address: session.ipAddress ?? null,\n            device_name: session.deviceName ?? null,\n            created_at: session.createdAt,\n            last_used_at: session.lastUsedAt,\n            expires_at: session.expiresAt,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (session.id !== undefined) {\n            row.id = session.id;\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to Session object (camelCase)\n     */\n    private fromDbSession(row: Record<string, unknown>): Session {\n        return {\n            id: row.id as string | number,\n            userId: row.user_id as string | number,\n            refreshTokenHash: row.refresh_token_hash as string,\n            userAgent: row.user_agent as string | undefined,\n            ipAddress: row.ip_address as string | undefined,\n            deviceName: row.device_name as string | undefined,\n            createdAt: this.toDateString(row.created_at),\n            lastUsedAt: this.toDateString(row.last_used_at),\n            expiresAt: this.toDateString(row.expires_at),\n        };\n    }\n\n    /**\n     * Convert partial Session updates to database format\n     */\n    private toDbSessionUpdates(updates: Partial<Session>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.refreshTokenHash !== undefined) {\n            dbUpdates.refresh_token_hash = updates.refreshTokenHash;\n        }\n        if ('userAgent' in updates) {\n            dbUpdates.user_agent = updates.userAgent ?? null;\n        }\n        if ('ipAddress' in updates) {\n            dbUpdates.ip_address = updates.ipAddress ?? null;\n        }\n        if ('deviceName' in updates) {\n            dbUpdates.device_name = updates.deviceName ?? null;\n        }\n        if (updates.lastUsedAt !== undefined) {\n            dbUpdates.last_used_at = updates.lastUsedAt;\n        }\n        if (updates.expiresAt !== undefined) {\n            dbUpdates.expires_at = updates.expiresAt;\n        }\n\n        return dbUpdates;\n    }\n}\n","import type { Knex } from 'knex';\n\n/**\n * SQL migration helper to create the users table\n * Can be used with Knex migrations\n *\n * @example\n * ```ts\n * // In your migration file\n * import { createUsersTableMigration, createSessionsTableMigration } from '@xcelsior/auth-adapter-knex';\n *\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users');\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * export async function down(knex: Knex): Promise<void> {\n *   await knex.schema.dropTableIfExists('sessions');\n *   await knex.schema.dropTableIfExists('users');\n * }\n * ```\n */\nexport async function createUsersTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('email').notNullable().unique();\n        table.string('first_name').nullable();\n        table.string('last_name').nullable();\n        table.string('password_hash').notNullable();\n        table.jsonb('roles').notNullable();\n        table.boolean('is_email_verified').notNullable().defaultTo(false);\n        table.string('verification_token').nullable();\n        table.string('reset_password_token').nullable();\n        table.timestamp('reset_password_expires', { useTz: true }).nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('updated_at', { useTz: true }).notNullable();\n\n        // Indexes for common lookups\n        table.index('email');\n        table.index('verification_token');\n        table.index('reset_password_token');\n    });\n}\n\n/**\n * SQL migration helper to create the sessions table\n * Can be used with Knex migrations\n */\nexport async function createSessionsTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('user_id').notNullable();\n        table.string('refresh_token_hash').notNullable();\n        table.string('user_agent').nullable();\n        table.string('ip_address').nullable();\n        table.string('device_name').nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('last_used_at', { useTz: true }).notNullable();\n        table.timestamp('expires_at', { useTz: true }).notNullable();\n\n        // Index for querying sessions by user\n        table.index('user_id');\n        // Index for cleaning up expired sessions\n        table.index('expires_at');\n    });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACyBO,IAAM,sBAAN,MAAsD;AAAA,EAMzD,YAAY,QAAoB;AAC5B,SAAK,OAAO,OAAO;AACnB,SAAK,YAAY,OAAO;AACxB,SAAK,oBAAoB,OAAO;AAChC,SAAK,SAAS,OAAO;AAAA,EACzB;AAAA,EAEA,IAAY,QAAQ;AAChB,UAAM,QAAQ,KAAK,KAAK,KAAK,SAAS;AACtC,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA,EAEA,IAAY,gBAAgB;AACxB,UAAM,QAAQ,KAAK,KAAK,KAAK,iBAAiB;AAC9C,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA;AAAA,EAIA,MAAM,WAAW,MAAsC;AACnD,UAAM,SAAS,KAAK,SAAS,IAAI;AACjC,UAAM,SAAS,MAAM,KAAK,MAAM,OAAO,MAAM,EAAE,UAAU,IAAI;AAE7D,UAAM,aAAa,SAAS,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,KAAK;AAC1D,UAAM,UAAU,KAAK,MAAM;AAC3B,WAAO,EAAE,GAAG,MAAM,IAAI,QAAQ;AAAA,EAClC;AAAA,EAEA,MAAM,YAAY,IAAkC;AAChD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACjD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,eAAe,OAAqC;AACtD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;AACpD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,4BAA4B,oBAAkD;AAChF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,sBAAsB,mBAAmB,CAAC,EAAE,MAAM;AACvF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,0BAA0B,kBAAgD;AAC5E,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,oBAAoB,iBAAiB,CAAC,EAAE,MAAM;AACnF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,WAAW,IAAY,SAAuC;AAChE,UAAM,YAAY,KAAK,YAAY,OAAO;AAE1C,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EACnD;AAAA,EAEA,MAAM,WAAW,IAA2B;AAExC,UAAM,KAAK,sBAAsB,EAAE;AAEnC,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAC1C;AAAA,EAEA,MAAM,UAAU,QAAoB,UAA4B,CAAC,GAA6B;AAC1F,UAAM,QAAQ,QAAQ,SAAS;AAE/B,QAAI,QAAQ,KAAK,MAAM,MAAM;AAG7B,QAAI,OAAO,OAAO;AACd,cAAQ,MAAM,MAAM,SAAS,OAAO,KAAK;AAAA,IAC7C;AAGA,QAAI,OAAO,eAAe;AACtB,cAAQ,MAAM,MAAM,SAAS,QAAQ,IAAI,OAAO,aAAa,GAAG;AAAA,IACpE;AAGA,QAAI,OAAO,oBAAoB,QAAW;AACtC,cAAQ,MAAM,MAAM,qBAAqB,OAAO,eAAe;AAAA,IACnE;AAGA,QAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AACzC,iBAAW,QAAQ,OAAO,OAAO;AAG7B,gBAAQ,MAAM;AAAA,UACV,KAAK,KAAK,OAAO,OAAO,WAAW,YAAY,iBAAiB;AAAA,UAChE,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,QACjC;AAAA,MACJ;AAAA,IACJ;AAGA,QAAI,OAAO,cAAc,OAAO,WAAW,SAAS,GAAG;AACnD,cAAQ,MAAM,MAAM,CAAC,YAA+B;AAChD,mBAAW,QAAQ,OAAO,YAAa;AACnC,kBAAQ;AAAA,YACJ,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,iBACA;AAAA,YACN,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,UACjC;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAGA,QAAI,QAAQ,QAAQ;AAChB,YAAM,aAAa,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE,SAAS,CAAC;AAC9E,cAAQ,MAAM,MAAM,MAAM,KAAK,WAAW,MAAM;AAAA,IACpD;AAGA,YAAQ,MAAM,QAAQ,MAAM,KAAK,EAAE,MAAM,QAAQ,CAAC;AAElD,UAAM,OAAO,MAAM;AACnB,UAAM,UAAU,KAAK,SAAS;AAC9B,UAAM,aAAa,UAAU,KAAK,MAAM,GAAG,KAAK,IAAI;AACpD,UAAM,QAAQ,WAAW,IAAI,CAAC,QAAiC,KAAK,WAAW,GAAG,CAAC;AAEnF,QAAI;AACJ,QAAI,WAAW,WAAW,SAAS,GAAG;AAClC,YAAM,WAAW,WAAW,WAAW,SAAS,CAAC;AACjD,mBAAa,OAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,SAAS,GAAG,CAAC,CAAC,EAAE,SAAS,QAAQ;AAAA,IACvF;AAEA,WAAO,EAAE,OAAO,WAAW;AAAA,EAC/B;AAAA;AAAA,EAIA,MAAM,cAAc,SAA+C;AAC/D,UAAM,YAAY,KAAK,YAAY,OAAO;AAC1C,UAAM,SAAS,MAAM,KAAK,cAAc,OAAO,SAAS,EAAE,UAAU,IAAI;AAExE,UAAM,aAAa,SAAS,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,QAAQ;AAC7D,UAAM,UAAU,QAAQ,MAAM;AAC9B,WAAO,EAAE,GAAG,SAAS,IAAI,QAAQ;AAAA,EACrC;AAAA,EAEA,MAAM,eAAe,IAAwC;AACzD,UAAM,MAAM,MAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACzD,WAAO,MAAM,KAAK,cAAc,GAAG,IAAI;AAAA,EAC3C;AAAA,EAEA,MAAM,oBAAoB,QAAoC;AAC1D,UAAM,OAAO,MAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC;AAC/D,WAAO,KAAK,IAAI,CAAC,QAAiC,KAAK,cAAc,GAAG,CAAC;AAAA,EAC7E;AAAA,EAEA,MAAM,cAAc,IAAe,SAA0C;AACzE,UAAM,YAAY,KAAK,mBAAmB,OAAO;AAEjD,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EAC3D;AAAA,EAEA,MAAM,cAAc,IAA8B;AAC9C,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAClD;AAAA,EAEA,MAAM,sBAAsB,QAA+B;AACvD,UAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC,EAAE,OAAO;AAAA,EAC/D;AAAA,EAEA,MAAM,wBAAuC;AACzC,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,KAAK,cAAc,MAAM,cAAc,KAAK,GAAG,EAAE,OAAO;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,aAAa,OAAwB;AACzC,QAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,WAAO,OAAO,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKQ,SAAS,MAAgD;AAC7D,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,MAA+B;AAAA,MACjC,OAAO,KAAK;AAAA,MACZ,YAAY,KAAK,aAAa;AAAA,MAC9B,WAAW,KAAK,YAAY;AAAA,MAC5B,eAAe,KAAK;AAAA,MACpB,OAAO,KAAK,UAAU,KAAK,KAAK;AAAA,MAChC,mBAAmB,KAAK,kBAAkB,IAAI;AAAA,MAC9C,oBAAoB,KAAK,qBAAqB;AAAA,MAC9C,sBAAsB,KAAK,sBAAsB;AAAA,MACjD,wBAAwB,KAAK,wBAAwB;AAAA,MACrD,YAAY,KAAK,aAAa;AAAA,MAC9B,YAAY,KAAK,aAAa;AAAA,IAClC;AAGA,QAAI,KAAK,OAAO,QAAW;AACvB,UAAI,KAAK,KAAK;AAAA,IAClB;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKQ,WAAW,KAAoC;AACnD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,OAAO,IAAI;AAAA,MACX,WAAW,IAAI;AAAA,MACf,UAAU,IAAI;AAAA,MACd,cAAc,IAAI;AAAA,MAClB,OAAO,OAAO,IAAI,UAAU,WAAW,KAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAAA,MACnE,iBAAiB,QAAQ,IAAI,iBAAiB;AAAA,MAC9C,mBAAmB,IAAI;AAAA,MACvB,oBAAoB,IAAI;AAAA,MACxB,sBAAsB,IAAI,yBACpB,KAAK,aAAa,IAAI,sBAAsB,IAC5C;AAAA,MACN,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,IAC/C;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,YAAY,SAAiD;AACjE,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,QAAQ;AAAA,IAC9B;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,cAAc,SAAS;AACvB,gBAAU,YAAY,QAAQ,YAAY;AAAA,IAC9C;AACA,QAAI,QAAQ,iBAAiB,QAAW;AACpC,gBAAU,gBAAgB,QAAQ;AAAA,IACtC;AACA,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,KAAK,UAAU,QAAQ,KAAK;AAAA,IAClD;AACA,QAAI,QAAQ,oBAAoB,QAAW;AACvC,gBAAU,oBAAoB,QAAQ,kBAAkB,IAAI;AAAA,IAChE;AACA,QAAI,uBAAuB,SAAS;AAChC,gBAAU,qBAAqB,QAAQ,qBAAqB;AAAA,IAChE;AACA,QAAI,wBAAwB,SAAS;AACjC,gBAAU,uBAAuB,QAAQ,sBAAsB;AAAA,IACnE;AACA,QAAI,0BAA0B,SAAS;AACnC,gBAAU,yBAAyB,QAAQ,wBAAwB;AAAA,IACvE;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,YAAY,SAAsD;AACtE,UAAM,MAA+B;AAAA,MACjC,SAAS,QAAQ;AAAA,MACjB,oBAAoB,QAAQ;AAAA,MAC5B,YAAY,QAAQ,aAAa;AAAA,MACjC,YAAY,QAAQ,aAAa;AAAA,MACjC,aAAa,QAAQ,cAAc;AAAA,MACnC,YAAY,QAAQ;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,IACxB;AAGA,QAAI,QAAQ,OAAO,QAAW;AAC1B,UAAI,KAAK,QAAQ;AAAA,IACrB;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAc,KAAuC;AACzD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,kBAAkB,IAAI;AAAA,MACtB,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,YAAY,KAAK,aAAa,IAAI,YAAY;AAAA,MAC9C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,IAC/C;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,mBAAmB,SAAoD;AAC3E,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,qBAAqB,QAAW;AACxC,gBAAU,qBAAqB,QAAQ;AAAA,IAC3C;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,gBAAgB,SAAS;AACzB,gBAAU,cAAc,QAAQ,cAAc;AAAA,IAClD;AACA,QAAI,QAAQ,eAAe,QAAW;AAClC,gBAAU,eAAe,QAAQ;AAAA,IACrC;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AACJ;;;AC3WA,eAAsB,0BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,OAAO,EAAE,YAAY,EAAE,OAAO;AAC3C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,WAAW,EAAE,SAAS;AACnC,UAAM,OAAO,eAAe,EAAE,YAAY;AAC1C,UAAM,MAAM,OAAO,EAAE,YAAY;AACjC,UAAM,QAAQ,mBAAmB,EAAE,YAAY,EAAE,UAAU,KAAK;AAChE,UAAM,OAAO,oBAAoB,EAAE,SAAS;AAC5C,UAAM,OAAO,sBAAsB,EAAE,SAAS;AAC9C,UAAM,UAAU,0BAA0B,EAAE,OAAO,KAAK,CAAC,EAAE,SAAS;AACpE,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,OAAO;AACnB,UAAM,MAAM,oBAAoB;AAChC,UAAM,MAAM,sBAAsB;AAAA,EACtC,CAAC;AACL;AAMA,eAAsB,6BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,SAAS,EAAE,YAAY;AACpC,UAAM,OAAO,oBAAoB,EAAE,YAAY;AAC/C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,aAAa,EAAE,SAAS;AACrC,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,gBAAgB,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC7D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,SAAS;AAErB,UAAM,MAAM,YAAY;AAAA,EAC5B,CAAC;AACL;","names":[]}
+{"version":3,"sources":["../src/index.ts","../src/knex.ts","../src/migration.ts"],"sourcesContent":["export { KnexStorageProvider, type KnexConfig } from './knex';\nexport { createUsersTableMigration, createSessionsTableMigration } from './migration';\n","import type { Knex } from 'knex';\nimport type {\n    CreateSessionInput,\n    CreateUserInput,\n    FindUsersOptions,\n    FindUsersResult,\n    IStorageProvider,\n    Session,\n    SessionId,\n    User,\n    UserFilter,\n    UserId,\n    UserMeta,\n} from '@xcelsior/auth';\n\n/** Convert camelCase string to snake_case */\nfunction camelToSnake(str: string): string {\n    return str.replace(/[A-Z]/g, (letter) => `_${letter.toLowerCase()}`);\n}\n\n/** Convert snake_case string to camelCase */\nfunction snakeToCamel(str: string): string {\n    return str.replace(/_([a-z])/g, (_, letter) => letter.toUpperCase());\n}\n\n/** Core user DB columns that are not part of meta */\nconst CORE_USER_DB_FIELDS = new Set([\n    'id',\n    'email',\n    'first_name',\n    'last_name',\n    'password_hash',\n    'roles',\n    'is_email_verified',\n    'verification_token',\n    'reset_password_token',\n    'reset_password_expires',\n    'created_at',\n    'updated_at',\n]);\n\nexport interface KnexConfig {\n    /** Pre-configured Knex instance */\n    knex: Knex;\n    /** Table name for users */\n    tableName: string;\n    /** Table name for sessions */\n    sessionsTableName: string;\n    /** Optional schema (for PostgreSQL) */\n    schema?: string;\n}\n\nexport class KnexStorageProvider<Meta extends UserMeta = Record<string, never>>\n    implements IStorageProvider<Meta>\n{\n    private knex: Knex;\n    private tableName: string;\n    private sessionsTableName: string;\n    private schema?: string;\n\n    constructor(config: KnexConfig) {\n        this.knex = config.knex;\n        this.tableName = config.tableName;\n        this.sessionsTableName = config.sessionsTableName;\n        this.schema = config.schema;\n    }\n\n    private get table() {\n        const query = this.knex(this.tableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    private get sessionsTable() {\n        const query = this.knex(this.sessionsTableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    // ==================== User Methods ====================\n\n    async createUser(user: CreateUserInput<Meta>): Promise<User<Meta>> {\n        const dbUser = this.toDbUser(user);\n        const result = await this.table.insert(dbUser).returning('id');\n        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]\n        const insertedId = result?.[0]?.id ?? result?.[0] ?? user.id;\n        const finalId = user.id ?? insertedId;\n        return { ...user, id: finalId } as User<Meta>;\n    }\n\n    async getUserById(id: UserId): Promise<User<Meta> | null> {\n        const row = await this.table.where({ id }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByEmail(email: string): Promise<User<Meta> | null> {\n        const row = await this.table.where({ email }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User<Meta> | null> {\n        const row = await this.table.where({ reset_password_token: resetPasswordToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User<Meta> | null> {\n        const row = await this.table.where({ verification_token: verifyEmailToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async updateUser(id: UserId, updates: Partial<User<Meta>>): Promise<void> {\n        const dbUpdates = this.toDbUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.table.where({ id }).update(dbUpdates);\n    }\n\n    async deleteUser(id: UserId): Promise<void> {\n        // Delete all user sessions first\n        await this.deleteAllUserSessions(id);\n        // Then delete the user\n        await this.table.where({ id }).delete();\n    }\n\n    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult<Meta>> {\n        const limit = options.limit ?? 50;\n\n        let query = this.table.clone();\n\n        // Email exact match\n        if (filter.email) {\n            query = query.where('email', filter.email);\n        }\n\n        // Email contains (partial match)\n        if (filter.emailContains) {\n            query = query.where('email', 'like', `%${filter.emailContains}%`);\n        }\n\n        // Email verification status\n        if (filter.isEmailVerified !== undefined) {\n            query = query.where('is_email_verified', filter.isEmailVerified);\n        }\n\n        // Roles filtering - user must have ALL specified roles\n        if (filter.roles && filter.roles.length > 0) {\n            for (const role of filter.roles) {\n                // Use JSON contains - works for PostgreSQL (jsonb) and MySQL (json)\n                // For SQLite, we fall back to LIKE on the JSON string\n                query = query.whereRaw(\n                    this.knex.client.config.client === 'sqlite3' ? `roles LIKE ?` : `roles @> ?`,\n                    this.knex.client.config.client === 'sqlite3'\n                        ? [`%\"${role}\"%`]\n                        : [JSON.stringify([role])]\n                );\n            }\n        }\n\n        // HasAnyRole - user must have at least ONE of specified roles\n        if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {\n            query = query.where((builder: Knex.QueryBuilder) => {\n                for (const role of filter.hasAnyRole!) {\n                    builder.orWhereRaw(\n                        this.knex.client.config.client === 'sqlite3'\n                            ? `roles LIKE ?`\n                            : `roles @> ?`,\n                        this.knex.client.config.client === 'sqlite3'\n                            ? [`%\"${role}\"%`]\n                            : [JSON.stringify([role])]\n                    );\n                }\n            });\n        }\n\n        // Apply pagination\n        if (options.cursor) {\n            const cursorData = JSON.parse(Buffer.from(options.cursor, 'base64').toString());\n            query = query.where('id', '>', cursorData.lastId);\n        }\n\n        // Order by id for consistent pagination\n        query = query.orderBy('id', 'asc').limit(limit + 1);\n\n        const rows = await query;\n        const hasMore = rows.length > limit;\n        const resultRows = hasMore ? rows.slice(0, limit) : rows;\n        const users = resultRows.map((row: Record<string, unknown>) => this.fromDbUser(row));\n\n        let nextCursor: string | undefined;\n        if (hasMore && resultRows.length > 0) {\n            const lastUser = resultRows[resultRows.length - 1];\n            nextCursor = Buffer.from(JSON.stringify({ lastId: lastUser.id })).toString('base64');\n        }\n\n        return { users, nextCursor } as FindUsersResult<Meta>;\n    }\n\n    // ==================== Session Methods ====================\n\n    async createSession(session: CreateSessionInput): Promise<Session> {\n        const dbSession = this.toDbSession(session);\n        const result = await this.sessionsTable.insert(dbSession).returning('id');\n        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]\n        const insertedId = result?.[0]?.id ?? result?.[0] ?? session.id;\n        const finalId = session.id ?? insertedId;\n        return { ...session, id: finalId } as Session;\n    }\n\n    async getSessionById(id: SessionId): Promise<Session | null> {\n        const row = await this.sessionsTable.where({ id }).first();\n        return row ? this.fromDbSession(row) : null;\n    }\n\n    async getSessionsByUserId(userId: UserId): Promise<Session[]> {\n        const rows = await this.sessionsTable.where({ user_id: userId });\n        return rows.map((row: Record<string, unknown>) => this.fromDbSession(row));\n    }\n\n    async updateSession(id: SessionId, updates: Partial<Session>): Promise<void> {\n        const dbUpdates = this.toDbSessionUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.sessionsTable.where({ id }).update(dbUpdates);\n    }\n\n    async deleteSession(id: SessionId): Promise<void> {\n        await this.sessionsTable.where({ id }).delete();\n    }\n\n    async deleteAllUserSessions(userId: UserId): Promise<void> {\n        await this.sessionsTable.where({ user_id: userId }).delete();\n    }\n\n    async deleteExpiredSessions(): Promise<void> {\n        const now = new Date().toISOString();\n        await this.sessionsTable.where('expires_at', '<', now).delete();\n    }\n\n    // ==================== User Mapping Helpers ====================\n\n    /**\n     * Safely convert a DB date value (Date object or string) to ISO 8601 string\n     */\n    private toDateString(value: unknown): string {\n        if (value instanceof Date) return value.toISOString();\n        return String(value);\n    }\n\n    /**\n     * Convert User object to database row format (snake_case).\n     * Meta fields are flattened as individual snake_case columns.\n     */\n    private toDbUser(user: CreateUserInput<Meta>): Record<string, unknown> {\n        const now = new Date().toISOString();\n        const row: Record<string, unknown> = {\n\n            email: user.email,\n            first_name: user.firstName ?? null,\n            last_name: user.lastName ?? null,\n            password_hash: user.passwordHash,\n            roles: JSON.stringify(user.roles),\n            is_email_verified: user.isEmailVerified ? 1 : 0,\n            verification_token: user.verificationToken ?? null,\n            reset_password_token: user.resetPasswordToken ?? null,\n            reset_password_expires: user.resetPasswordExpires ?? null,\n            created_at: user.createdAt ?? now,\n            updated_at: user.updatedAt ?? now,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (user.id !== undefined) {\n            row.id = user.id;\n        }\n        // Flatten meta fields as individual snake_case columns\n        if (user.meta) {\n            for (const [key, value] of Object.entries(user.meta)) {\n                row[camelToSnake(key)] = value;\n            }\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to User object (camelCase).\n     * Non-core columns are gathered into the typed `meta` object.\n     */\n    private fromDbUser(row: Record<string, unknown>): User<Meta> {\n        const meta: Record<string, unknown> = {};\n        for (const [key, value] of Object.entries(row)) {\n            if (!CORE_USER_DB_FIELDS.has(key)) {\n                meta[snakeToCamel(key)] = value;\n            }\n        }\n\n        return {\n            id: row.id as string | number,\n            email: row.email as string,\n            firstName: row.first_name as string | undefined,\n            lastName: row.last_name as string | undefined,\n            passwordHash: row.password_hash as string,\n            roles: typeof row.roles === 'string' ? JSON.parse(row.roles) : row.roles,\n            isEmailVerified: Boolean(row.is_email_verified),\n            verificationToken: row.verification_token as string | undefined,\n            resetPasswordToken: row.reset_password_token as string | undefined,\n            resetPasswordExpires: row.reset_password_expires\n                ? this.toDateString(row.reset_password_expires)\n                : undefined,\n            createdAt: this.toDateString(row.created_at),\n            updatedAt: this.toDateString(row.updated_at),\n            ...(Object.keys(meta).length > 0 ? { meta: meta as Meta } : {}),\n        } as User<Meta>;\n    }\n\n    /**\n     * Convert partial User updates to database format.\n     * Meta fields in updates are flattened as individual snake_case columns.\n     */\n    private toDbUpdates(updates: Partial<User<Meta>>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.email !== undefined) {\n            dbUpdates.email = updates.email;\n        }\n        if ('firstName' in updates) {\n            dbUpdates.first_name = updates.firstName ?? null;\n        }\n        if ('lastName' in updates) {\n            dbUpdates.last_name = updates.lastName ?? null;\n        }\n        if (updates.passwordHash !== undefined) {\n            dbUpdates.password_hash = updates.passwordHash;\n        }\n        if (updates.roles !== undefined) {\n            dbUpdates.roles = JSON.stringify(updates.roles);\n        }\n        if (updates.isEmailVerified !== undefined) {\n            dbUpdates.is_email_verified = updates.isEmailVerified ? 1 : 0;\n        }\n        if ('verificationToken' in updates) {\n            dbUpdates.verification_token = updates.verificationToken ?? null;\n        }\n        if ('resetPasswordToken' in updates) {\n            dbUpdates.reset_password_token = updates.resetPasswordToken ?? null;\n        }\n        if ('resetPasswordExpires' in updates) {\n            dbUpdates.reset_password_expires = updates.resetPasswordExpires ?? null;\n        }\n        if (updates.updatedAt !== undefined) {\n            dbUpdates.updated_at = updates.updatedAt;\n        }\n        // Flatten meta fields as individual snake_case columns\n        if (updates.meta) {\n            for (const [key, value] of Object.entries(updates.meta)) {\n                dbUpdates[camelToSnake(key)] = value;\n            }\n        }\n\n        return dbUpdates;\n    }\n\n    // ==================== Session Mapping Helpers ====================\n\n    /**\n     * Convert Session object to database row format (snake_case)\n     */\n    private toDbSession(session: CreateSessionInput): Record<string, unknown> {\n        const row: Record<string, unknown> = {\n            user_id: session.userId,\n            refresh_token_hash: session.refreshTokenHash,\n            user_agent: session.userAgent ?? null,\n            ip_address: session.ipAddress ?? null,\n            device_name: session.deviceName ?? null,\n            created_at: session.createdAt,\n            last_used_at: session.lastUsedAt,\n            expires_at: session.expiresAt,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (session.id !== undefined) {\n            row.id = session.id;\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to Session object (camelCase)\n     */\n    private fromDbSession(row: Record<string, unknown>): Session {\n        return {\n            id: row.id as string | number,\n            userId: row.user_id as string | number,\n            refreshTokenHash: row.refresh_token_hash as string,\n            userAgent: row.user_agent as string | undefined,\n            ipAddress: row.ip_address as string | undefined,\n            deviceName: row.device_name as string | undefined,\n            createdAt: this.toDateString(row.created_at),\n            lastUsedAt: this.toDateString(row.last_used_at),\n            expiresAt: this.toDateString(row.expires_at),\n        };\n    }\n\n    /**\n     * Convert partial Session updates to database format\n     */\n    private toDbSessionUpdates(updates: Partial<Session>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.refreshTokenHash !== undefined) {\n            dbUpdates.refresh_token_hash = updates.refreshTokenHash;\n        }\n        if ('userAgent' in updates) {\n            dbUpdates.user_agent = updates.userAgent ?? null;\n        }\n        if ('ipAddress' in updates) {\n            dbUpdates.ip_address = updates.ipAddress ?? null;\n        }\n        if ('deviceName' in updates) {\n            dbUpdates.device_name = updates.deviceName ?? null;\n        }\n        if (updates.lastUsedAt !== undefined) {\n            dbUpdates.last_used_at = updates.lastUsedAt;\n        }\n        if (updates.expiresAt !== undefined) {\n            dbUpdates.expires_at = updates.expiresAt;\n        }\n\n        return dbUpdates;\n    }\n}\n","import type { Knex } from 'knex';\n\n/**\n * SQL migration helper to create the users table\n * Can be used with Knex migrations\n *\n * @param knex - Knex instance\n * @param tableName - Table name for users\n * @param schemaOrCustomColumns - Optional schema name (for PostgreSQL) or callback to add custom columns\n * @param customColumns - Optional callback to add custom columns to the table (when schema is provided)\n *\n * @example\n * ```ts\n * // In your migration file\n * import { createUsersTableMigration, createSessionsTableMigration } from '@xcelsior/auth-adapter-knex';\n *\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users');\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * // With custom meta columns\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users', (table) => {\n *     table.string('phone').nullable();\n *     table.string('company').nullable();\n *   });\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * // With schema and custom meta columns\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users', 'my_schema', (table) => {\n *     table.string('phone').nullable();\n *     table.string('company').nullable();\n *   });\n * }\n *\n * export async function down(knex: Knex): Promise<void> {\n *   await knex.schema.dropTableIfExists('sessions');\n *   await knex.schema.dropTableIfExists('users');\n * }\n * ```\n */\nexport async function createUsersTableMigration(\n    knex: Knex,\n    tableName: string,\n    schemaOrCustomColumns?: string | ((table: Knex.CreateTableBuilder) => void),\n    customColumns?: (table: Knex.CreateTableBuilder) => void\n): Promise<void> {\n    const schema = typeof schemaOrCustomColumns === 'string' ? schemaOrCustomColumns : undefined;\n    const addCustomColumns =\n        typeof schemaOrCustomColumns === 'function' ? schemaOrCustomColumns : customColumns;\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('email').notNullable().unique();\n        table.string('first_name').nullable();\n        table.string('last_name').nullable();\n        table.string('password_hash').notNullable();\n        table.jsonb('roles').notNullable();\n        table.boolean('is_email_verified').notNullable().defaultTo(false);\n        table.string('verification_token').nullable();\n        table.string('reset_password_token').nullable();\n        table.timestamp('reset_password_expires', { useTz: true }).nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('updated_at', { useTz: true }).notNullable();\n\n        // Indexes for common lookups\n        table.index('email');\n        table.index('verification_token');\n        table.index('reset_password_token');\n\n        // Add custom meta columns if provided\n        if (addCustomColumns) {\n            addCustomColumns(table);\n        }\n    });\n}\n\n/**\n * SQL migration helper to create the sessions table\n * Can be used with Knex migrations\n */\nexport async function createSessionsTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('user_id').notNullable();\n        table.string('refresh_token_hash').notNullable();\n        table.string('user_agent').nullable();\n        table.string('ip_address').nullable();\n        table.string('device_name').nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('last_used_at', { useTz: true }).notNullable();\n        table.timestamp('expires_at', { useTz: true }).notNullable();\n\n        // Index for querying sessions by user\n        table.index('user_id');\n        // Index for cleaning up expired sessions\n        table.index('expires_at');\n    });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACgBA,SAAS,aAAa,KAAqB;AACvC,SAAO,IAAI,QAAQ,UAAU,CAAC,WAAW,IAAI,OAAO,YAAY,CAAC,EAAE;AACvE;AAGA,SAAS,aAAa,KAAqB;AACvC,SAAO,IAAI,QAAQ,aAAa,CAAC,GAAG,WAAW,OAAO,YAAY,CAAC;AACvE;AAGA,IAAM,sBAAsB,oBAAI,IAAI;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACJ,CAAC;AAaM,IAAM,sBAAN,MAEP;AAAA,EAMI,YAAY,QAAoB;AAC5B,SAAK,OAAO,OAAO;AACnB,SAAK,YAAY,OAAO;AACxB,SAAK,oBAAoB,OAAO;AAChC,SAAK,SAAS,OAAO;AAAA,EACzB;AAAA,EAEA,IAAY,QAAQ;AAChB,UAAM,QAAQ,KAAK,KAAK,KAAK,SAAS;AACtC,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA,EAEA,IAAY,gBAAgB;AACxB,UAAM,QAAQ,KAAK,KAAK,KAAK,iBAAiB;AAC9C,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA;AAAA,EAIA,MAAM,WAAW,MAAkD;AAC/D,UAAM,SAAS,KAAK,SAAS,IAAI;AACjC,UAAM,SAAS,MAAM,KAAK,MAAM,OAAO,MAAM,EAAE,UAAU,IAAI;AAE7D,UAAM,aAAa,SAAS,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,KAAK;AAC1D,UAAM,UAAU,KAAK,MAAM;AAC3B,WAAO,EAAE,GAAG,MAAM,IAAI,QAAQ;AAAA,EAClC;AAAA,EAEA,MAAM,YAAY,IAAwC;AACtD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACjD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,eAAe,OAA2C;AAC5D,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;AACpD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,4BAA4B,oBAAwD;AACtF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,sBAAsB,mBAAmB,CAAC,EAAE,MAAM;AACvF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,0BAA0B,kBAAsD;AAClF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,oBAAoB,iBAAiB,CAAC,EAAE,MAAM;AACnF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,WAAW,IAAY,SAA6C;AACtE,UAAM,YAAY,KAAK,YAAY,OAAO;AAE1C,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EACnD;AAAA,EAEA,MAAM,WAAW,IAA2B;AAExC,UAAM,KAAK,sBAAsB,EAAE;AAEnC,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAC1C;AAAA,EAEA,MAAM,UAAU,QAAoB,UAA4B,CAAC,GAAmC;AAChG,UAAM,QAAQ,QAAQ,SAAS;AAE/B,QAAI,QAAQ,KAAK,MAAM,MAAM;AAG7B,QAAI,OAAO,OAAO;AACd,cAAQ,MAAM,MAAM,SAAS,OAAO,KAAK;AAAA,IAC7C;AAGA,QAAI,OAAO,eAAe;AACtB,cAAQ,MAAM,MAAM,SAAS,QAAQ,IAAI,OAAO,aAAa,GAAG;AAAA,IACpE;AAGA,QAAI,OAAO,oBAAoB,QAAW;AACtC,cAAQ,MAAM,MAAM,qBAAqB,OAAO,eAAe;AAAA,IACnE;AAGA,QAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AACzC,iBAAW,QAAQ,OAAO,OAAO;AAG7B,gBAAQ,MAAM;AAAA,UACV,KAAK,KAAK,OAAO,OAAO,WAAW,YAAY,iBAAiB;AAAA,UAChE,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,QACjC;AAAA,MACJ;AAAA,IACJ;AAGA,QAAI,OAAO,cAAc,OAAO,WAAW,SAAS,GAAG;AACnD,cAAQ,MAAM,MAAM,CAAC,YAA+B;AAChD,mBAAW,QAAQ,OAAO,YAAa;AACnC,kBAAQ;AAAA,YACJ,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,iBACA;AAAA,YACN,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,UACjC;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAGA,QAAI,QAAQ,QAAQ;AAChB,YAAM,aAAa,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE,SAAS,CAAC;AAC9E,cAAQ,MAAM,MAAM,MAAM,KAAK,WAAW,MAAM;AAAA,IACpD;AAGA,YAAQ,MAAM,QAAQ,MAAM,KAAK,EAAE,MAAM,QAAQ,CAAC;AAElD,UAAM,OAAO,MAAM;AACnB,UAAM,UAAU,KAAK,SAAS;AAC9B,UAAM,aAAa,UAAU,KAAK,MAAM,GAAG,KAAK,IAAI;AACpD,UAAM,QAAQ,WAAW,IAAI,CAAC,QAAiC,KAAK,WAAW,GAAG,CAAC;AAEnF,QAAI;AACJ,QAAI,WAAW,WAAW,SAAS,GAAG;AAClC,YAAM,WAAW,WAAW,WAAW,SAAS,CAAC;AACjD,mBAAa,OAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,SAAS,GAAG,CAAC,CAAC,EAAE,SAAS,QAAQ;AAAA,IACvF;AAEA,WAAO,EAAE,OAAO,WAAW;AAAA,EAC/B;AAAA;AAAA,EAIA,MAAM,cAAc,SAA+C;AAC/D,UAAM,YAAY,KAAK,YAAY,OAAO;AAC1C,UAAM,SAAS,MAAM,KAAK,cAAc,OAAO,SAAS,EAAE,UAAU,IAAI;AAExE,UAAM,aAAa,SAAS,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,QAAQ;AAC7D,UAAM,UAAU,QAAQ,MAAM;AAC9B,WAAO,EAAE,GAAG,SAAS,IAAI,QAAQ;AAAA,EACrC;AAAA,EAEA,MAAM,eAAe,IAAwC;AACzD,UAAM,MAAM,MAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACzD,WAAO,MAAM,KAAK,cAAc,GAAG,IAAI;AAAA,EAC3C;AAAA,EAEA,MAAM,oBAAoB,QAAoC;AAC1D,UAAM,OAAO,MAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC;AAC/D,WAAO,KAAK,IAAI,CAAC,QAAiC,KAAK,cAAc,GAAG,CAAC;AAAA,EAC7E;AAAA,EAEA,MAAM,cAAc,IAAe,SAA0C;AACzE,UAAM,YAAY,KAAK,mBAAmB,OAAO;AAEjD,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EAC3D;AAAA,EAEA,MAAM,cAAc,IAA8B;AAC9C,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAClD;AAAA,EAEA,MAAM,sBAAsB,QAA+B;AACvD,UAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC,EAAE,OAAO;AAAA,EAC/D;AAAA,EAEA,MAAM,wBAAuC;AACzC,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,KAAK,cAAc,MAAM,cAAc,KAAK,GAAG,EAAE,OAAO;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,aAAa,OAAwB;AACzC,QAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,WAAO,OAAO,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,SAAS,MAAsD;AACnE,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,MAA+B;AAAA,MAEjC,OAAO,KAAK;AAAA,MACZ,YAAY,KAAK,aAAa;AAAA,MAC9B,WAAW,KAAK,YAAY;AAAA,MAC5B,eAAe,KAAK;AAAA,MACpB,OAAO,KAAK,UAAU,KAAK,KAAK;AAAA,MAChC,mBAAmB,KAAK,kBAAkB,IAAI;AAAA,MAC9C,oBAAoB,KAAK,qBAAqB;AAAA,MAC9C,sBAAsB,KAAK,sBAAsB;AAAA,MACjD,wBAAwB,KAAK,wBAAwB;AAAA,MACrD,YAAY,KAAK,aAAa;AAAA,MAC9B,YAAY,KAAK,aAAa;AAAA,IAClC;AAGA,QAAI,KAAK,OAAO,QAAW;AACvB,UAAI,KAAK,KAAK;AAAA,IAClB;AAEA,QAAI,KAAK,MAAM;AACX,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,IAAI,GAAG;AAClD,YAAI,aAAa,GAAG,CAAC,IAAI;AAAA,MAC7B;AAAA,IACJ;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,WAAW,KAA0C;AACzD,UAAM,OAAgC,CAAC;AACvC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC5C,UAAI,CAAC,oBAAoB,IAAI,GAAG,GAAG;AAC/B,aAAK,aAAa,GAAG,CAAC,IAAI;AAAA,MAC9B;AAAA,IACJ;AAEA,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,OAAO,IAAI;AAAA,MACX,WAAW,IAAI;AAAA,MACf,UAAU,IAAI;AAAA,MACd,cAAc,IAAI;AAAA,MAClB,OAAO,OAAO,IAAI,UAAU,WAAW,KAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAAA,MACnE,iBAAiB,QAAQ,IAAI,iBAAiB;AAAA,MAC9C,mBAAmB,IAAI;AAAA,MACvB,oBAAoB,IAAI;AAAA,MACxB,sBAAsB,IAAI,yBACpB,KAAK,aAAa,IAAI,sBAAsB,IAC5C;AAAA,MACN,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,GAAI,OAAO,KAAK,IAAI,EAAE,SAAS,IAAI,EAAE,KAAmB,IAAI,CAAC;AAAA,IACjE;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,YAAY,SAAuD;AACvE,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,QAAQ;AAAA,IAC9B;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,cAAc,SAAS;AACvB,gBAAU,YAAY,QAAQ,YAAY;AAAA,IAC9C;AACA,QAAI,QAAQ,iBAAiB,QAAW;AACpC,gBAAU,gBAAgB,QAAQ;AAAA,IACtC;AACA,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,KAAK,UAAU,QAAQ,KAAK;AAAA,IAClD;AACA,QAAI,QAAQ,oBAAoB,QAAW;AACvC,gBAAU,oBAAoB,QAAQ,kBAAkB,IAAI;AAAA,IAChE;AACA,QAAI,uBAAuB,SAAS;AAChC,gBAAU,qBAAqB,QAAQ,qBAAqB;AAAA,IAChE;AACA,QAAI,wBAAwB,SAAS;AACjC,gBAAU,uBAAuB,QAAQ,sBAAsB;AAAA,IACnE;AACA,QAAI,0BAA0B,SAAS;AACnC,gBAAU,yBAAyB,QAAQ,wBAAwB;AAAA,IACvE;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,QAAI,QAAQ,MAAM;AACd,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,IAAI,GAAG;AACrD,kBAAU,aAAa,GAAG,CAAC,IAAI;AAAA,MACnC;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,YAAY,SAAsD;AACtE,UAAM,MAA+B;AAAA,MACjC,SAAS,QAAQ;AAAA,MACjB,oBAAoB,QAAQ;AAAA,MAC5B,YAAY,QAAQ,aAAa;AAAA,MACjC,YAAY,QAAQ,aAAa;AAAA,MACjC,aAAa,QAAQ,cAAc;AAAA,MACnC,YAAY,QAAQ;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,IACxB;AAGA,QAAI,QAAQ,OAAO,QAAW;AAC1B,UAAI,KAAK,QAAQ;AAAA,IACrB;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAc,KAAuC;AACzD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,kBAAkB,IAAI;AAAA,MACtB,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,YAAY,KAAK,aAAa,IAAI,YAAY;AAAA,MAC9C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,IAC/C;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,mBAAmB,SAAoD;AAC3E,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,qBAAqB,QAAW;AACxC,gBAAU,qBAAqB,QAAQ;AAAA,IAC3C;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,gBAAgB,SAAS;AACzB,gBAAU,cAAc,QAAQ,cAAc;AAAA,IAClD;AACA,QAAI,QAAQ,eAAe,QAAW;AAClC,gBAAU,eAAe,QAAQ;AAAA,IACrC;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AACJ;;;AC1YA,eAAsB,0BAClB,MACA,WACA,uBACA,eACa;AACb,QAAM,SAAS,OAAO,0BAA0B,WAAW,wBAAwB;AACnF,QAAM,mBACF,OAAO,0BAA0B,aAAa,wBAAwB;AAC1E,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,OAAO,EAAE,YAAY,EAAE,OAAO;AAC3C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,WAAW,EAAE,SAAS;AACnC,UAAM,OAAO,eAAe,EAAE,YAAY;AAC1C,UAAM,MAAM,OAAO,EAAE,YAAY;AACjC,UAAM,QAAQ,mBAAmB,EAAE,YAAY,EAAE,UAAU,KAAK;AAChE,UAAM,OAAO,oBAAoB,EAAE,SAAS;AAC5C,UAAM,OAAO,sBAAsB,EAAE,SAAS;AAC9C,UAAM,UAAU,0BAA0B,EAAE,OAAO,KAAK,CAAC,EAAE,SAAS;AACpE,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,OAAO;AACnB,UAAM,MAAM,oBAAoB;AAChC,UAAM,MAAM,sBAAsB;AAGlC,QAAI,kBAAkB;AAClB,uBAAiB,KAAK;AAAA,IAC1B;AAAA,EACJ,CAAC;AACL;AAMA,eAAsB,6BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,SAAS,EAAE,YAAY;AACpC,UAAM,OAAO,oBAAoB,EAAE,YAAY;AAC/C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,aAAa,EAAE,SAAS;AACrC,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,gBAAgB,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC7D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,SAAS;AAErB,UAAM,MAAM,YAAY;AAAA,EAC5B,CAAC;AACL;","names":[]}

package/dist/index.mjs

@@ -1,4 +1,24 @@
 // src/knex.ts
+function camelToSnake(str) {
+  return str.replace(/[A-Z]/g, (letter) => `_${letter.toLowerCase()}`);
+}
+function snakeToCamel(str) {
+  return str.replace(/_([a-z])/g, (_, letter) => letter.toUpperCase());
+}
+var CORE_USER_DB_FIELDS = /* @__PURE__ */ new Set([
+  "id",
+  "email",
+  "first_name",
+  "last_name",
+  "password_hash",
+  "roles",
+  "is_email_verified",
+  "verification_token",
+  "reset_password_token",
+  "reset_password_expires",
+  "created_at",
+  "updated_at"
+]);
 var KnexStorageProvider = class {
   constructor(config) {
     this.knex = config.knex;
@@ -143,7 +163,8 @@ var KnexStorageProvider = class {
     return String(value);
   }
   /**
-   * Convert User object to database row format (snake_case)
+   * Convert User object to database row format (snake_case).
+   * Meta fields are flattened as individual snake_case columns.
    */
   toDbUser(user) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -163,12 +184,24 @@ var KnexStorageProvider = class {
     if (user.id !== void 0) {
       row.id = user.id;
     }
+    if (user.meta) {
+      for (const [key, value] of Object.entries(user.meta)) {
+        row[camelToSnake(key)] = value;
+      }
+    }
     return row;
   }
   /**
-   * Convert database row to User object (camelCase)
+   * Convert database row to User object (camelCase).
+   * Non-core columns are gathered into the typed `meta` object.
    */
   fromDbUser(row) {
+    const meta = {};
+    for (const [key, value] of Object.entries(row)) {
+      if (!CORE_USER_DB_FIELDS.has(key)) {
+        meta[snakeToCamel(key)] = value;
+      }
+    }
     return {
       id: row.id,
       email: row.email,
@@ -181,11 +214,13 @@ var KnexStorageProvider = class {
       resetPasswordToken: row.reset_password_token,
       resetPasswordExpires: row.reset_password_expires ? this.toDateString(row.reset_password_expires) : void 0,
       createdAt: this.toDateString(row.created_at),
-      updatedAt: this.toDateString(row.updated_at)
+      updatedAt: this.toDateString(row.updated_at),
+      ...Object.keys(meta).length > 0 ? { meta } : {}
     };
   }
   /**
-   * Convert partial User updates to database format
+   * Convert partial User updates to database format.
+   * Meta fields in updates are flattened as individual snake_case columns.
    */
   toDbUpdates(updates) {
     const dbUpdates = {};
@@ -219,6 +254,11 @@ var KnexStorageProvider = class {
     if (updates.updatedAt !== void 0) {
       dbUpdates.updated_at = updates.updatedAt;
     }
+    if (updates.meta) {
+      for (const [key, value] of Object.entries(updates.meta)) {
+        dbUpdates[camelToSnake(key)] = value;
+      }
+    }
     return dbUpdates;
   }
   // ==================== Session Mapping Helpers ====================
@@ -285,7 +325,9 @@ var KnexStorageProvider = class {
 };
 
 // src/migration.ts
-async function createUsersTableMigration(knex, tableName, schema) {
+async function createUsersTableMigration(knex, tableName, schemaOrCustomColumns, customColumns) {
+  const schema = typeof schemaOrCustomColumns === "string" ? schemaOrCustomColumns : void 0;
+  const addCustomColumns = typeof schemaOrCustomColumns === "function" ? schemaOrCustomColumns : customColumns;
   const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;
   await schemaBuilder.createTable(tableName, (table) => {
     table.string("id").primary();
@@ -303,6 +345,9 @@ async function createUsersTableMigration(knex, tableName, schema) {
     table.index("email");
     table.index("verification_token");
     table.index("reset_password_token");
+    if (addCustomColumns) {
+      addCustomColumns(table);
+    }
   });
 }
 async function createSessionsTableMigration(knex, tableName, schema) {

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/knex.ts","../src/migration.ts"],"sourcesContent":["import type { Knex } from 'knex';\nimport type {\n    CreateSessionInput,\n    CreateUserInput,\n    FindUsersOptions,\n    FindUsersResult,\n    IStorageProvider,\n    Session,\n    SessionId,\n    User,\n    UserFilter,\n    UserId,\n} from '@xcelsior/auth';\n\nexport interface KnexConfig {\n    /** Pre-configured Knex instance */\n    knex: Knex;\n    /** Table name for users */\n    tableName: string;\n    /** Table name for sessions */\n    sessionsTableName: string;\n    /** Optional schema (for PostgreSQL) */\n    schema?: string;\n}\n\nexport class KnexStorageProvider implements IStorageProvider {\n    private knex: Knex;\n    private tableName: string;\n    private sessionsTableName: string;\n    private schema?: string;\n\n    constructor(config: KnexConfig) {\n        this.knex = config.knex;\n        this.tableName = config.tableName;\n        this.sessionsTableName = config.sessionsTableName;\n        this.schema = config.schema;\n    }\n\n    private get table() {\n        const query = this.knex(this.tableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    private get sessionsTable() {\n        const query = this.knex(this.sessionsTableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    // ==================== User Methods ====================\n\n    async createUser(user: CreateUserInput): Promise<User> {\n        const dbUser = this.toDbUser(user);\n        const result = await this.table.insert(dbUser).returning('id');\n        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]\n        const insertedId = result?.[0]?.id ?? result?.[0] ?? user.id;\n        const finalId = user.id ?? insertedId;\n        return { ...user, id: finalId } as User;\n    }\n\n    async getUserById(id: UserId): Promise<User | null> {\n        const row = await this.table.where({ id }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByEmail(email: string): Promise<User | null> {\n        const row = await this.table.where({ email }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null> {\n        const row = await this.table.where({ reset_password_token: resetPasswordToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null> {\n        const row = await this.table.where({ verification_token: verifyEmailToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async updateUser(id: UserId, updates: Partial<User>): Promise<void> {\n        const dbUpdates = this.toDbUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.table.where({ id }).update(dbUpdates);\n    }\n\n    async deleteUser(id: UserId): Promise<void> {\n        // Delete all user sessions first\n        await this.deleteAllUserSessions(id);\n        // Then delete the user\n        await this.table.where({ id }).delete();\n    }\n\n    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult> {\n        const limit = options.limit ?? 50;\n\n        let query = this.table.clone();\n\n        // Email exact match\n        if (filter.email) {\n            query = query.where('email', filter.email);\n        }\n\n        // Email contains (partial match)\n        if (filter.emailContains) {\n            query = query.where('email', 'like', `%${filter.emailContains}%`);\n        }\n\n        // Email verification status\n        if (filter.isEmailVerified !== undefined) {\n            query = query.where('is_email_verified', filter.isEmailVerified);\n        }\n\n        // Roles filtering - user must have ALL specified roles\n        if (filter.roles && filter.roles.length > 0) {\n            for (const role of filter.roles) {\n                // Use JSON contains - works for PostgreSQL (jsonb) and MySQL (json)\n                // For SQLite, we fall back to LIKE on the JSON string\n                query = query.whereRaw(\n                    this.knex.client.config.client === 'sqlite3' ? `roles LIKE ?` : `roles @> ?`,\n                    this.knex.client.config.client === 'sqlite3'\n                        ? [`%\"${role}\"%`]\n                        : [JSON.stringify([role])]\n                );\n            }\n        }\n\n        // HasAnyRole - user must have at least ONE of specified roles\n        if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {\n            query = query.where((builder: Knex.QueryBuilder) => {\n                for (const role of filter.hasAnyRole!) {\n                    builder.orWhereRaw(\n                        this.knex.client.config.client === 'sqlite3'\n                            ? `roles LIKE ?`\n                            : `roles @> ?`,\n                        this.knex.client.config.client === 'sqlite3'\n                            ? [`%\"${role}\"%`]\n                            : [JSON.stringify([role])]\n                    );\n                }\n            });\n        }\n\n        // Apply pagination\n        if (options.cursor) {\n            const cursorData = JSON.parse(Buffer.from(options.cursor, 'base64').toString());\n            query = query.where('id', '>', cursorData.lastId);\n        }\n\n        // Order by id for consistent pagination\n        query = query.orderBy('id', 'asc').limit(limit + 1);\n\n        const rows = await query;\n        const hasMore = rows.length > limit;\n        const resultRows = hasMore ? rows.slice(0, limit) : rows;\n        const users = resultRows.map((row: Record<string, unknown>) => this.fromDbUser(row));\n\n        let nextCursor: string | undefined;\n        if (hasMore && resultRows.length > 0) {\n            const lastUser = resultRows[resultRows.length - 1];\n            nextCursor = Buffer.from(JSON.stringify({ lastId: lastUser.id })).toString('base64');\n        }\n\n        return { users, nextCursor };\n    }\n\n    // ==================== Session Methods ====================\n\n    async createSession(session: CreateSessionInput): Promise<Session> {\n        const dbSession = this.toDbSession(session);\n        const result = await this.sessionsTable.insert(dbSession).returning('id');\n        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]\n        const insertedId = result?.[0]?.id ?? result?.[0] ?? session.id;\n        const finalId = session.id ?? insertedId;\n        return { ...session, id: finalId } as Session;\n    }\n\n    async getSessionById(id: SessionId): Promise<Session | null> {\n        const row = await this.sessionsTable.where({ id }).first();\n        return row ? this.fromDbSession(row) : null;\n    }\n\n    async getSessionsByUserId(userId: UserId): Promise<Session[]> {\n        const rows = await this.sessionsTable.where({ user_id: userId });\n        return rows.map((row: Record<string, unknown>) => this.fromDbSession(row));\n    }\n\n    async updateSession(id: SessionId, updates: Partial<Session>): Promise<void> {\n        const dbUpdates = this.toDbSessionUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.sessionsTable.where({ id }).update(dbUpdates);\n    }\n\n    async deleteSession(id: SessionId): Promise<void> {\n        await this.sessionsTable.where({ id }).delete();\n    }\n\n    async deleteAllUserSessions(userId: UserId): Promise<void> {\n        await this.sessionsTable.where({ user_id: userId }).delete();\n    }\n\n    async deleteExpiredSessions(): Promise<void> {\n        const now = new Date().toISOString();\n        await this.sessionsTable.where('expires_at', '<', now).delete();\n    }\n\n    // ==================== User Mapping Helpers ====================\n\n    /**\n     * Safely convert a DB date value (Date object or string) to ISO 8601 string\n     */\n    private toDateString(value: unknown): string {\n        if (value instanceof Date) return value.toISOString();\n        return String(value);\n    }\n\n    /**\n     * Convert User object to database row format (snake_case)\n     */\n    private toDbUser(user: CreateUserInput): Record<string, unknown> {\n        const now = new Date().toISOString();\n        const row: Record<string, unknown> = {\n            email: user.email,\n            first_name: user.firstName ?? null,\n            last_name: user.lastName ?? null,\n            password_hash: user.passwordHash,\n            roles: JSON.stringify(user.roles),\n            is_email_verified: user.isEmailVerified ? 1 : 0,\n            verification_token: user.verificationToken ?? null,\n            reset_password_token: user.resetPasswordToken ?? null,\n            reset_password_expires: user.resetPasswordExpires ?? null,\n            created_at: user.createdAt ?? now,\n            updated_at: user.updatedAt ?? now,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (user.id !== undefined) {\n            row.id = user.id;\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to User object (camelCase)\n     */\n    private fromDbUser(row: Record<string, unknown>): User {\n        return {\n            id: row.id as string | number,\n            email: row.email as string,\n            firstName: row.first_name as string | undefined,\n            lastName: row.last_name as string | undefined,\n            passwordHash: row.password_hash as string,\n            roles: typeof row.roles === 'string' ? JSON.parse(row.roles) : row.roles,\n            isEmailVerified: Boolean(row.is_email_verified),\n            verificationToken: row.verification_token as string | undefined,\n            resetPasswordToken: row.reset_password_token as string | undefined,\n            resetPasswordExpires: row.reset_password_expires\n                ? this.toDateString(row.reset_password_expires)\n                : undefined,\n            createdAt: this.toDateString(row.created_at),\n            updatedAt: this.toDateString(row.updated_at),\n        };\n    }\n\n    /**\n     * Convert partial User updates to database format\n     */\n    private toDbUpdates(updates: Partial<User>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.email !== undefined) {\n            dbUpdates.email = updates.email;\n        }\n        if ('firstName' in updates) {\n            dbUpdates.first_name = updates.firstName ?? null;\n        }\n        if ('lastName' in updates) {\n            dbUpdates.last_name = updates.lastName ?? null;\n        }\n        if (updates.passwordHash !== undefined) {\n            dbUpdates.password_hash = updates.passwordHash;\n        }\n        if (updates.roles !== undefined) {\n            dbUpdates.roles = JSON.stringify(updates.roles);\n        }\n        if (updates.isEmailVerified !== undefined) {\n            dbUpdates.is_email_verified = updates.isEmailVerified ? 1 : 0;\n        }\n        if ('verificationToken' in updates) {\n            dbUpdates.verification_token = updates.verificationToken ?? null;\n        }\n        if ('resetPasswordToken' in updates) {\n            dbUpdates.reset_password_token = updates.resetPasswordToken ?? null;\n        }\n        if ('resetPasswordExpires' in updates) {\n            dbUpdates.reset_password_expires = updates.resetPasswordExpires ?? null;\n        }\n        if (updates.updatedAt !== undefined) {\n            dbUpdates.updated_at = updates.updatedAt;\n        }\n\n        return dbUpdates;\n    }\n\n    // ==================== Session Mapping Helpers ====================\n\n    /**\n     * Convert Session object to database row format (snake_case)\n     */\n    private toDbSession(session: CreateSessionInput): Record<string, unknown> {\n        const row: Record<string, unknown> = {\n            user_id: session.userId,\n            refresh_token_hash: session.refreshTokenHash,\n            user_agent: session.userAgent ?? null,\n            ip_address: session.ipAddress ?? null,\n            device_name: session.deviceName ?? null,\n            created_at: session.createdAt,\n            last_used_at: session.lastUsedAt,\n            expires_at: session.expiresAt,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (session.id !== undefined) {\n            row.id = session.id;\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to Session object (camelCase)\n     */\n    private fromDbSession(row: Record<string, unknown>): Session {\n        return {\n            id: row.id as string | number,\n            userId: row.user_id as string | number,\n            refreshTokenHash: row.refresh_token_hash as string,\n            userAgent: row.user_agent as string | undefined,\n            ipAddress: row.ip_address as string | undefined,\n            deviceName: row.device_name as string | undefined,\n            createdAt: this.toDateString(row.created_at),\n            lastUsedAt: this.toDateString(row.last_used_at),\n            expiresAt: this.toDateString(row.expires_at),\n        };\n    }\n\n    /**\n     * Convert partial Session updates to database format\n     */\n    private toDbSessionUpdates(updates: Partial<Session>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.refreshTokenHash !== undefined) {\n            dbUpdates.refresh_token_hash = updates.refreshTokenHash;\n        }\n        if ('userAgent' in updates) {\n            dbUpdates.user_agent = updates.userAgent ?? null;\n        }\n        if ('ipAddress' in updates) {\n            dbUpdates.ip_address = updates.ipAddress ?? null;\n        }\n        if ('deviceName' in updates) {\n            dbUpdates.device_name = updates.deviceName ?? null;\n        }\n        if (updates.lastUsedAt !== undefined) {\n            dbUpdates.last_used_at = updates.lastUsedAt;\n        }\n        if (updates.expiresAt !== undefined) {\n            dbUpdates.expires_at = updates.expiresAt;\n        }\n\n        return dbUpdates;\n    }\n}\n","import type { Knex } from 'knex';\n\n/**\n * SQL migration helper to create the users table\n * Can be used with Knex migrations\n *\n * @example\n * ```ts\n * // In your migration file\n * import { createUsersTableMigration, createSessionsTableMigration } from '@xcelsior/auth-adapter-knex';\n *\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users');\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * export async function down(knex: Knex): Promise<void> {\n *   await knex.schema.dropTableIfExists('sessions');\n *   await knex.schema.dropTableIfExists('users');\n * }\n * ```\n */\nexport async function createUsersTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('email').notNullable().unique();\n        table.string('first_name').nullable();\n        table.string('last_name').nullable();\n        table.string('password_hash').notNullable();\n        table.jsonb('roles').notNullable();\n        table.boolean('is_email_verified').notNullable().defaultTo(false);\n        table.string('verification_token').nullable();\n        table.string('reset_password_token').nullable();\n        table.timestamp('reset_password_expires', { useTz: true }).nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('updated_at', { useTz: true }).notNullable();\n\n        // Indexes for common lookups\n        table.index('email');\n        table.index('verification_token');\n        table.index('reset_password_token');\n    });\n}\n\n/**\n * SQL migration helper to create the sessions table\n * Can be used with Knex migrations\n */\nexport async function createSessionsTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('user_id').notNullable();\n        table.string('refresh_token_hash').notNullable();\n        table.string('user_agent').nullable();\n        table.string('ip_address').nullable();\n        table.string('device_name').nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('last_used_at', { useTz: true }).notNullable();\n        table.timestamp('expires_at', { useTz: true }).notNullable();\n\n        // Index for querying sessions by user\n        table.index('user_id');\n        // Index for cleaning up expired sessions\n        table.index('expires_at');\n    });\n}\n"],"mappings":";AAyBO,IAAM,sBAAN,MAAsD;AAAA,EAMzD,YAAY,QAAoB;AAC5B,SAAK,OAAO,OAAO;AACnB,SAAK,YAAY,OAAO;AACxB,SAAK,oBAAoB,OAAO;AAChC,SAAK,SAAS,OAAO;AAAA,EACzB;AAAA,EAEA,IAAY,QAAQ;AAChB,UAAM,QAAQ,KAAK,KAAK,KAAK,SAAS;AACtC,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA,EAEA,IAAY,gBAAgB;AACxB,UAAM,QAAQ,KAAK,KAAK,KAAK,iBAAiB;AAC9C,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA;AAAA,EAIA,MAAM,WAAW,MAAsC;AACnD,UAAM,SAAS,KAAK,SAAS,IAAI;AACjC,UAAM,SAAS,MAAM,KAAK,MAAM,OAAO,MAAM,EAAE,UAAU,IAAI;AAE7D,UAAM,aAAa,SAAS,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,KAAK;AAC1D,UAAM,UAAU,KAAK,MAAM;AAC3B,WAAO,EAAE,GAAG,MAAM,IAAI,QAAQ;AAAA,EAClC;AAAA,EAEA,MAAM,YAAY,IAAkC;AAChD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACjD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,eAAe,OAAqC;AACtD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;AACpD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,4BAA4B,oBAAkD;AAChF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,sBAAsB,mBAAmB,CAAC,EAAE,MAAM;AACvF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,0BAA0B,kBAAgD;AAC5E,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,oBAAoB,iBAAiB,CAAC,EAAE,MAAM;AACnF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,WAAW,IAAY,SAAuC;AAChE,UAAM,YAAY,KAAK,YAAY,OAAO;AAE1C,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EACnD;AAAA,EAEA,MAAM,WAAW,IAA2B;AAExC,UAAM,KAAK,sBAAsB,EAAE;AAEnC,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAC1C;AAAA,EAEA,MAAM,UAAU,QAAoB,UAA4B,CAAC,GAA6B;AAC1F,UAAM,QAAQ,QAAQ,SAAS;AAE/B,QAAI,QAAQ,KAAK,MAAM,MAAM;AAG7B,QAAI,OAAO,OAAO;AACd,cAAQ,MAAM,MAAM,SAAS,OAAO,KAAK;AAAA,IAC7C;AAGA,QAAI,OAAO,eAAe;AACtB,cAAQ,MAAM,MAAM,SAAS,QAAQ,IAAI,OAAO,aAAa,GAAG;AAAA,IACpE;AAGA,QAAI,OAAO,oBAAoB,QAAW;AACtC,cAAQ,MAAM,MAAM,qBAAqB,OAAO,eAAe;AAAA,IACnE;AAGA,QAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AACzC,iBAAW,QAAQ,OAAO,OAAO;AAG7B,gBAAQ,MAAM;AAAA,UACV,KAAK,KAAK,OAAO,OAAO,WAAW,YAAY,iBAAiB;AAAA,UAChE,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,QACjC;AAAA,MACJ;AAAA,IACJ;AAGA,QAAI,OAAO,cAAc,OAAO,WAAW,SAAS,GAAG;AACnD,cAAQ,MAAM,MAAM,CAAC,YAA+B;AAChD,mBAAW,QAAQ,OAAO,YAAa;AACnC,kBAAQ;AAAA,YACJ,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,iBACA;AAAA,YACN,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,UACjC;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAGA,QAAI,QAAQ,QAAQ;AAChB,YAAM,aAAa,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE,SAAS,CAAC;AAC9E,cAAQ,MAAM,MAAM,MAAM,KAAK,WAAW,MAAM;AAAA,IACpD;AAGA,YAAQ,MAAM,QAAQ,MAAM,KAAK,EAAE,MAAM,QAAQ,CAAC;AAElD,UAAM,OAAO,MAAM;AACnB,UAAM,UAAU,KAAK,SAAS;AAC9B,UAAM,aAAa,UAAU,KAAK,MAAM,GAAG,KAAK,IAAI;AACpD,UAAM,QAAQ,WAAW,IAAI,CAAC,QAAiC,KAAK,WAAW,GAAG,CAAC;AAEnF,QAAI;AACJ,QAAI,WAAW,WAAW,SAAS,GAAG;AAClC,YAAM,WAAW,WAAW,WAAW,SAAS,CAAC;AACjD,mBAAa,OAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,SAAS,GAAG,CAAC,CAAC,EAAE,SAAS,QAAQ;AAAA,IACvF;AAEA,WAAO,EAAE,OAAO,WAAW;AAAA,EAC/B;AAAA;AAAA,EAIA,MAAM,cAAc,SAA+C;AAC/D,UAAM,YAAY,KAAK,YAAY,OAAO;AAC1C,UAAM,SAAS,MAAM,KAAK,cAAc,OAAO,SAAS,EAAE,UAAU,IAAI;AAExE,UAAM,aAAa,SAAS,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,QAAQ;AAC7D,UAAM,UAAU,QAAQ,MAAM;AAC9B,WAAO,EAAE,GAAG,SAAS,IAAI,QAAQ;AAAA,EACrC;AAAA,EAEA,MAAM,eAAe,IAAwC;AACzD,UAAM,MAAM,MAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACzD,WAAO,MAAM,KAAK,cAAc,GAAG,IAAI;AAAA,EAC3C;AAAA,EAEA,MAAM,oBAAoB,QAAoC;AAC1D,UAAM,OAAO,MAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC;AAC/D,WAAO,KAAK,IAAI,CAAC,QAAiC,KAAK,cAAc,GAAG,CAAC;AAAA,EAC7E;AAAA,EAEA,MAAM,cAAc,IAAe,SAA0C;AACzE,UAAM,YAAY,KAAK,mBAAmB,OAAO;AAEjD,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EAC3D;AAAA,EAEA,MAAM,cAAc,IAA8B;AAC9C,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAClD;AAAA,EAEA,MAAM,sBAAsB,QAA+B;AACvD,UAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC,EAAE,OAAO;AAAA,EAC/D;AAAA,EAEA,MAAM,wBAAuC;AACzC,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,KAAK,cAAc,MAAM,cAAc,KAAK,GAAG,EAAE,OAAO;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,aAAa,OAAwB;AACzC,QAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,WAAO,OAAO,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKQ,SAAS,MAAgD;AAC7D,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,MAA+B;AAAA,MACjC,OAAO,KAAK;AAAA,MACZ,YAAY,KAAK,aAAa;AAAA,MAC9B,WAAW,KAAK,YAAY;AAAA,MAC5B,eAAe,KAAK;AAAA,MACpB,OAAO,KAAK,UAAU,KAAK,KAAK;AAAA,MAChC,mBAAmB,KAAK,kBAAkB,IAAI;AAAA,MAC9C,oBAAoB,KAAK,qBAAqB;AAAA,MAC9C,sBAAsB,KAAK,sBAAsB;AAAA,MACjD,wBAAwB,KAAK,wBAAwB;AAAA,MACrD,YAAY,KAAK,aAAa;AAAA,MAC9B,YAAY,KAAK,aAAa;AAAA,IAClC;AAGA,QAAI,KAAK,OAAO,QAAW;AACvB,UAAI,KAAK,KAAK;AAAA,IAClB;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKQ,WAAW,KAAoC;AACnD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,OAAO,IAAI;AAAA,MACX,WAAW,IAAI;AAAA,MACf,UAAU,IAAI;AAAA,MACd,cAAc,IAAI;AAAA,MAClB,OAAO,OAAO,IAAI,UAAU,WAAW,KAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAAA,MACnE,iBAAiB,QAAQ,IAAI,iBAAiB;AAAA,MAC9C,mBAAmB,IAAI;AAAA,MACvB,oBAAoB,IAAI;AAAA,MACxB,sBAAsB,IAAI,yBACpB,KAAK,aAAa,IAAI,sBAAsB,IAC5C;AAAA,MACN,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,IAC/C;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,YAAY,SAAiD;AACjE,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,QAAQ;AAAA,IAC9B;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,cAAc,SAAS;AACvB,gBAAU,YAAY,QAAQ,YAAY;AAAA,IAC9C;AACA,QAAI,QAAQ,iBAAiB,QAAW;AACpC,gBAAU,gBAAgB,QAAQ;AAAA,IACtC;AACA,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,KAAK,UAAU,QAAQ,KAAK;AAAA,IAClD;AACA,QAAI,QAAQ,oBAAoB,QAAW;AACvC,gBAAU,oBAAoB,QAAQ,kBAAkB,IAAI;AAAA,IAChE;AACA,QAAI,uBAAuB,SAAS;AAChC,gBAAU,qBAAqB,QAAQ,qBAAqB;AAAA,IAChE;AACA,QAAI,wBAAwB,SAAS;AACjC,gBAAU,uBAAuB,QAAQ,sBAAsB;AAAA,IACnE;AACA,QAAI,0BAA0B,SAAS;AACnC,gBAAU,yBAAyB,QAAQ,wBAAwB;AAAA,IACvE;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,YAAY,SAAsD;AACtE,UAAM,MAA+B;AAAA,MACjC,SAAS,QAAQ;AAAA,MACjB,oBAAoB,QAAQ;AAAA,MAC5B,YAAY,QAAQ,aAAa;AAAA,MACjC,YAAY,QAAQ,aAAa;AAAA,MACjC,aAAa,QAAQ,cAAc;AAAA,MACnC,YAAY,QAAQ;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,IACxB;AAGA,QAAI,QAAQ,OAAO,QAAW;AAC1B,UAAI,KAAK,QAAQ;AAAA,IACrB;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAc,KAAuC;AACzD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,kBAAkB,IAAI;AAAA,MACtB,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,YAAY,KAAK,aAAa,IAAI,YAAY;AAAA,MAC9C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,IAC/C;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,mBAAmB,SAAoD;AAC3E,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,qBAAqB,QAAW;AACxC,gBAAU,qBAAqB,QAAQ;AAAA,IAC3C;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,gBAAgB,SAAS;AACzB,gBAAU,cAAc,QAAQ,cAAc;AAAA,IAClD;AACA,QAAI,QAAQ,eAAe,QAAW;AAClC,gBAAU,eAAe,QAAQ;AAAA,IACrC;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AACJ;;;AC3WA,eAAsB,0BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,OAAO,EAAE,YAAY,EAAE,OAAO;AAC3C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,WAAW,EAAE,SAAS;AACnC,UAAM,OAAO,eAAe,EAAE,YAAY;AAC1C,UAAM,MAAM,OAAO,EAAE,YAAY;AACjC,UAAM,QAAQ,mBAAmB,EAAE,YAAY,EAAE,UAAU,KAAK;AAChE,UAAM,OAAO,oBAAoB,EAAE,SAAS;AAC5C,UAAM,OAAO,sBAAsB,EAAE,SAAS;AAC9C,UAAM,UAAU,0BAA0B,EAAE,OAAO,KAAK,CAAC,EAAE,SAAS;AACpE,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,OAAO;AACnB,UAAM,MAAM,oBAAoB;AAChC,UAAM,MAAM,sBAAsB;AAAA,EACtC,CAAC;AACL;AAMA,eAAsB,6BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,SAAS,EAAE,YAAY;AACpC,UAAM,OAAO,oBAAoB,EAAE,YAAY;AAC/C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,aAAa,EAAE,SAAS;AACrC,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,gBAAgB,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC7D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,SAAS;AAErB,UAAM,MAAM,YAAY;AAAA,EAC5B,CAAC;AACL;","names":[]}
+{"version":3,"sources":["../src/knex.ts","../src/migration.ts"],"sourcesContent":["import type { Knex } from 'knex';\nimport type {\n    CreateSessionInput,\n    CreateUserInput,\n    FindUsersOptions,\n    FindUsersResult,\n    IStorageProvider,\n    Session,\n    SessionId,\n    User,\n    UserFilter,\n    UserId,\n    UserMeta,\n} from '@xcelsior/auth';\n\n/** Convert camelCase string to snake_case */\nfunction camelToSnake(str: string): string {\n    return str.replace(/[A-Z]/g, (letter) => `_${letter.toLowerCase()}`);\n}\n\n/** Convert snake_case string to camelCase */\nfunction snakeToCamel(str: string): string {\n    return str.replace(/_([a-z])/g, (_, letter) => letter.toUpperCase());\n}\n\n/** Core user DB columns that are not part of meta */\nconst CORE_USER_DB_FIELDS = new Set([\n    'id',\n    'email',\n    'first_name',\n    'last_name',\n    'password_hash',\n    'roles',\n    'is_email_verified',\n    'verification_token',\n    'reset_password_token',\n    'reset_password_expires',\n    'created_at',\n    'updated_at',\n]);\n\nexport interface KnexConfig {\n    /** Pre-configured Knex instance */\n    knex: Knex;\n    /** Table name for users */\n    tableName: string;\n    /** Table name for sessions */\n    sessionsTableName: string;\n    /** Optional schema (for PostgreSQL) */\n    schema?: string;\n}\n\nexport class KnexStorageProvider<Meta extends UserMeta = Record<string, never>>\n    implements IStorageProvider<Meta>\n{\n    private knex: Knex;\n    private tableName: string;\n    private sessionsTableName: string;\n    private schema?: string;\n\n    constructor(config: KnexConfig) {\n        this.knex = config.knex;\n        this.tableName = config.tableName;\n        this.sessionsTableName = config.sessionsTableName;\n        this.schema = config.schema;\n    }\n\n    private get table() {\n        const query = this.knex(this.tableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    private get sessionsTable() {\n        const query = this.knex(this.sessionsTableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    // ==================== User Methods ====================\n\n    async createUser(user: CreateUserInput<Meta>): Promise<User<Meta>> {\n        const dbUser = this.toDbUser(user);\n        const result = await this.table.insert(dbUser).returning('id');\n        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]\n        const insertedId = result?.[0]?.id ?? result?.[0] ?? user.id;\n        const finalId = user.id ?? insertedId;\n        return { ...user, id: finalId } as User<Meta>;\n    }\n\n    async getUserById(id: UserId): Promise<User<Meta> | null> {\n        const row = await this.table.where({ id }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByEmail(email: string): Promise<User<Meta> | null> {\n        const row = await this.table.where({ email }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User<Meta> | null> {\n        const row = await this.table.where({ reset_password_token: resetPasswordToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User<Meta> | null> {\n        const row = await this.table.where({ verification_token: verifyEmailToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async updateUser(id: UserId, updates: Partial<User<Meta>>): Promise<void> {\n        const dbUpdates = this.toDbUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.table.where({ id }).update(dbUpdates);\n    }\n\n    async deleteUser(id: UserId): Promise<void> {\n        // Delete all user sessions first\n        await this.deleteAllUserSessions(id);\n        // Then delete the user\n        await this.table.where({ id }).delete();\n    }\n\n    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult<Meta>> {\n        const limit = options.limit ?? 50;\n\n        let query = this.table.clone();\n\n        // Email exact match\n        if (filter.email) {\n            query = query.where('email', filter.email);\n        }\n\n        // Email contains (partial match)\n        if (filter.emailContains) {\n            query = query.where('email', 'like', `%${filter.emailContains}%`);\n        }\n\n        // Email verification status\n        if (filter.isEmailVerified !== undefined) {\n            query = query.where('is_email_verified', filter.isEmailVerified);\n        }\n\n        // Roles filtering - user must have ALL specified roles\n        if (filter.roles && filter.roles.length > 0) {\n            for (const role of filter.roles) {\n                // Use JSON contains - works for PostgreSQL (jsonb) and MySQL (json)\n                // For SQLite, we fall back to LIKE on the JSON string\n                query = query.whereRaw(\n                    this.knex.client.config.client === 'sqlite3' ? `roles LIKE ?` : `roles @> ?`,\n                    this.knex.client.config.client === 'sqlite3'\n                        ? [`%\"${role}\"%`]\n                        : [JSON.stringify([role])]\n                );\n            }\n        }\n\n        // HasAnyRole - user must have at least ONE of specified roles\n        if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {\n            query = query.where((builder: Knex.QueryBuilder) => {\n                for (const role of filter.hasAnyRole!) {\n                    builder.orWhereRaw(\n                        this.knex.client.config.client === 'sqlite3'\n                            ? `roles LIKE ?`\n                            : `roles @> ?`,\n                        this.knex.client.config.client === 'sqlite3'\n                            ? [`%\"${role}\"%`]\n                            : [JSON.stringify([role])]\n                    );\n                }\n            });\n        }\n\n        // Apply pagination\n        if (options.cursor) {\n            const cursorData = JSON.parse(Buffer.from(options.cursor, 'base64').toString());\n            query = query.where('id', '>', cursorData.lastId);\n        }\n\n        // Order by id for consistent pagination\n        query = query.orderBy('id', 'asc').limit(limit + 1);\n\n        const rows = await query;\n        const hasMore = rows.length > limit;\n        const resultRows = hasMore ? rows.slice(0, limit) : rows;\n        const users = resultRows.map((row: Record<string, unknown>) => this.fromDbUser(row));\n\n        let nextCursor: string | undefined;\n        if (hasMore && resultRows.length > 0) {\n            const lastUser = resultRows[resultRows.length - 1];\n            nextCursor = Buffer.from(JSON.stringify({ lastId: lastUser.id })).toString('base64');\n        }\n\n        return { users, nextCursor } as FindUsersResult<Meta>;\n    }\n\n    // ==================== Session Methods ====================\n\n    async createSession(session: CreateSessionInput): Promise<Session> {\n        const dbSession = this.toDbSession(session);\n        const result = await this.sessionsTable.insert(dbSession).returning('id');\n        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]\n        const insertedId = result?.[0]?.id ?? result?.[0] ?? session.id;\n        const finalId = session.id ?? insertedId;\n        return { ...session, id: finalId } as Session;\n    }\n\n    async getSessionById(id: SessionId): Promise<Session | null> {\n        const row = await this.sessionsTable.where({ id }).first();\n        return row ? this.fromDbSession(row) : null;\n    }\n\n    async getSessionsByUserId(userId: UserId): Promise<Session[]> {\n        const rows = await this.sessionsTable.where({ user_id: userId });\n        return rows.map((row: Record<string, unknown>) => this.fromDbSession(row));\n    }\n\n    async updateSession(id: SessionId, updates: Partial<Session>): Promise<void> {\n        const dbUpdates = this.toDbSessionUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.sessionsTable.where({ id }).update(dbUpdates);\n    }\n\n    async deleteSession(id: SessionId): Promise<void> {\n        await this.sessionsTable.where({ id }).delete();\n    }\n\n    async deleteAllUserSessions(userId: UserId): Promise<void> {\n        await this.sessionsTable.where({ user_id: userId }).delete();\n    }\n\n    async deleteExpiredSessions(): Promise<void> {\n        const now = new Date().toISOString();\n        await this.sessionsTable.where('expires_at', '<', now).delete();\n    }\n\n    // ==================== User Mapping Helpers ====================\n\n    /**\n     * Safely convert a DB date value (Date object or string) to ISO 8601 string\n     */\n    private toDateString(value: unknown): string {\n        if (value instanceof Date) return value.toISOString();\n        return String(value);\n    }\n\n    /**\n     * Convert User object to database row format (snake_case).\n     * Meta fields are flattened as individual snake_case columns.\n     */\n    private toDbUser(user: CreateUserInput<Meta>): Record<string, unknown> {\n        const now = new Date().toISOString();\n        const row: Record<string, unknown> = {\n\n            email: user.email,\n            first_name: user.firstName ?? null,\n            last_name: user.lastName ?? null,\n            password_hash: user.passwordHash,\n            roles: JSON.stringify(user.roles),\n            is_email_verified: user.isEmailVerified ? 1 : 0,\n            verification_token: user.verificationToken ?? null,\n            reset_password_token: user.resetPasswordToken ?? null,\n            reset_password_expires: user.resetPasswordExpires ?? null,\n            created_at: user.createdAt ?? now,\n            updated_at: user.updatedAt ?? now,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (user.id !== undefined) {\n            row.id = user.id;\n        }\n        // Flatten meta fields as individual snake_case columns\n        if (user.meta) {\n            for (const [key, value] of Object.entries(user.meta)) {\n                row[camelToSnake(key)] = value;\n            }\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to User object (camelCase).\n     * Non-core columns are gathered into the typed `meta` object.\n     */\n    private fromDbUser(row: Record<string, unknown>): User<Meta> {\n        const meta: Record<string, unknown> = {};\n        for (const [key, value] of Object.entries(row)) {\n            if (!CORE_USER_DB_FIELDS.has(key)) {\n                meta[snakeToCamel(key)] = value;\n            }\n        }\n\n        return {\n            id: row.id as string | number,\n            email: row.email as string,\n            firstName: row.first_name as string | undefined,\n            lastName: row.last_name as string | undefined,\n            passwordHash: row.password_hash as string,\n            roles: typeof row.roles === 'string' ? JSON.parse(row.roles) : row.roles,\n            isEmailVerified: Boolean(row.is_email_verified),\n            verificationToken: row.verification_token as string | undefined,\n            resetPasswordToken: row.reset_password_token as string | undefined,\n            resetPasswordExpires: row.reset_password_expires\n                ? this.toDateString(row.reset_password_expires)\n                : undefined,\n            createdAt: this.toDateString(row.created_at),\n            updatedAt: this.toDateString(row.updated_at),\n            ...(Object.keys(meta).length > 0 ? { meta: meta as Meta } : {}),\n        } as User<Meta>;\n    }\n\n    /**\n     * Convert partial User updates to database format.\n     * Meta fields in updates are flattened as individual snake_case columns.\n     */\n    private toDbUpdates(updates: Partial<User<Meta>>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.email !== undefined) {\n            dbUpdates.email = updates.email;\n        }\n        if ('firstName' in updates) {\n            dbUpdates.first_name = updates.firstName ?? null;\n        }\n        if ('lastName' in updates) {\n            dbUpdates.last_name = updates.lastName ?? null;\n        }\n        if (updates.passwordHash !== undefined) {\n            dbUpdates.password_hash = updates.passwordHash;\n        }\n        if (updates.roles !== undefined) {\n            dbUpdates.roles = JSON.stringify(updates.roles);\n        }\n        if (updates.isEmailVerified !== undefined) {\n            dbUpdates.is_email_verified = updates.isEmailVerified ? 1 : 0;\n        }\n        if ('verificationToken' in updates) {\n            dbUpdates.verification_token = updates.verificationToken ?? null;\n        }\n        if ('resetPasswordToken' in updates) {\n            dbUpdates.reset_password_token = updates.resetPasswordToken ?? null;\n        }\n        if ('resetPasswordExpires' in updates) {\n            dbUpdates.reset_password_expires = updates.resetPasswordExpires ?? null;\n        }\n        if (updates.updatedAt !== undefined) {\n            dbUpdates.updated_at = updates.updatedAt;\n        }\n        // Flatten meta fields as individual snake_case columns\n        if (updates.meta) {\n            for (const [key, value] of Object.entries(updates.meta)) {\n                dbUpdates[camelToSnake(key)] = value;\n            }\n        }\n\n        return dbUpdates;\n    }\n\n    // ==================== Session Mapping Helpers ====================\n\n    /**\n     * Convert Session object to database row format (snake_case)\n     */\n    private toDbSession(session: CreateSessionInput): Record<string, unknown> {\n        const row: Record<string, unknown> = {\n            user_id: session.userId,\n            refresh_token_hash: session.refreshTokenHash,\n            user_agent: session.userAgent ?? null,\n            ip_address: session.ipAddress ?? null,\n            device_name: session.deviceName ?? null,\n            created_at: session.createdAt,\n            last_used_at: session.lastUsedAt,\n            expires_at: session.expiresAt,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (session.id !== undefined) {\n            row.id = session.id;\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to Session object (camelCase)\n     */\n    private fromDbSession(row: Record<string, unknown>): Session {\n        return {\n            id: row.id as string | number,\n            userId: row.user_id as string | number,\n            refreshTokenHash: row.refresh_token_hash as string,\n            userAgent: row.user_agent as string | undefined,\n            ipAddress: row.ip_address as string | undefined,\n            deviceName: row.device_name as string | undefined,\n            createdAt: this.toDateString(row.created_at),\n            lastUsedAt: this.toDateString(row.last_used_at),\n            expiresAt: this.toDateString(row.expires_at),\n        };\n    }\n\n    /**\n     * Convert partial Session updates to database format\n     */\n    private toDbSessionUpdates(updates: Partial<Session>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.refreshTokenHash !== undefined) {\n            dbUpdates.refresh_token_hash = updates.refreshTokenHash;\n        }\n        if ('userAgent' in updates) {\n            dbUpdates.user_agent = updates.userAgent ?? null;\n        }\n        if ('ipAddress' in updates) {\n            dbUpdates.ip_address = updates.ipAddress ?? null;\n        }\n        if ('deviceName' in updates) {\n            dbUpdates.device_name = updates.deviceName ?? null;\n        }\n        if (updates.lastUsedAt !== undefined) {\n            dbUpdates.last_used_at = updates.lastUsedAt;\n        }\n        if (updates.expiresAt !== undefined) {\n            dbUpdates.expires_at = updates.expiresAt;\n        }\n\n        return dbUpdates;\n    }\n}\n","import type { Knex } from 'knex';\n\n/**\n * SQL migration helper to create the users table\n * Can be used with Knex migrations\n *\n * @param knex - Knex instance\n * @param tableName - Table name for users\n * @param schemaOrCustomColumns - Optional schema name (for PostgreSQL) or callback to add custom columns\n * @param customColumns - Optional callback to add custom columns to the table (when schema is provided)\n *\n * @example\n * ```ts\n * // In your migration file\n * import { createUsersTableMigration, createSessionsTableMigration } from '@xcelsior/auth-adapter-knex';\n *\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users');\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * // With custom meta columns\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users', (table) => {\n *     table.string('phone').nullable();\n *     table.string('company').nullable();\n *   });\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * // With schema and custom meta columns\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users', 'my_schema', (table) => {\n *     table.string('phone').nullable();\n *     table.string('company').nullable();\n *   });\n * }\n *\n * export async function down(knex: Knex): Promise<void> {\n *   await knex.schema.dropTableIfExists('sessions');\n *   await knex.schema.dropTableIfExists('users');\n * }\n * ```\n */\nexport async function createUsersTableMigration(\n    knex: Knex,\n    tableName: string,\n    schemaOrCustomColumns?: string | ((table: Knex.CreateTableBuilder) => void),\n    customColumns?: (table: Knex.CreateTableBuilder) => void\n): Promise<void> {\n    const schema = typeof schemaOrCustomColumns === 'string' ? schemaOrCustomColumns : undefined;\n    const addCustomColumns =\n        typeof schemaOrCustomColumns === 'function' ? schemaOrCustomColumns : customColumns;\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('email').notNullable().unique();\n        table.string('first_name').nullable();\n        table.string('last_name').nullable();\n        table.string('password_hash').notNullable();\n        table.jsonb('roles').notNullable();\n        table.boolean('is_email_verified').notNullable().defaultTo(false);\n        table.string('verification_token').nullable();\n        table.string('reset_password_token').nullable();\n        table.timestamp('reset_password_expires', { useTz: true }).nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('updated_at', { useTz: true }).notNullable();\n\n        // Indexes for common lookups\n        table.index('email');\n        table.index('verification_token');\n        table.index('reset_password_token');\n\n        // Add custom meta columns if provided\n        if (addCustomColumns) {\n            addCustomColumns(table);\n        }\n    });\n}\n\n/**\n * SQL migration helper to create the sessions table\n * Can be used with Knex migrations\n */\nexport async function createSessionsTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('user_id').notNullable();\n        table.string('refresh_token_hash').notNullable();\n        table.string('user_agent').nullable();\n        table.string('ip_address').nullable();\n        table.string('device_name').nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('last_used_at', { useTz: true }).notNullable();\n        table.timestamp('expires_at', { useTz: true }).notNullable();\n\n        // Index for querying sessions by user\n        table.index('user_id');\n        // Index for cleaning up expired sessions\n        table.index('expires_at');\n    });\n}\n"],"mappings":";AAgBA,SAAS,aAAa,KAAqB;AACvC,SAAO,IAAI,QAAQ,UAAU,CAAC,WAAW,IAAI,OAAO,YAAY,CAAC,EAAE;AACvE;AAGA,SAAS,aAAa,KAAqB;AACvC,SAAO,IAAI,QAAQ,aAAa,CAAC,GAAG,WAAW,OAAO,YAAY,CAAC;AACvE;AAGA,IAAM,sBAAsB,oBAAI,IAAI;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACJ,CAAC;AAaM,IAAM,sBAAN,MAEP;AAAA,EAMI,YAAY,QAAoB;AAC5B,SAAK,OAAO,OAAO;AACnB,SAAK,YAAY,OAAO;AACxB,SAAK,oBAAoB,OAAO;AAChC,SAAK,SAAS,OAAO;AAAA,EACzB;AAAA,EAEA,IAAY,QAAQ;AAChB,UAAM,QAAQ,KAAK,KAAK,KAAK,SAAS;AACtC,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA,EAEA,IAAY,gBAAgB;AACxB,UAAM,QAAQ,KAAK,KAAK,KAAK,iBAAiB;AAC9C,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA;AAAA,EAIA,MAAM,WAAW,MAAkD;AAC/D,UAAM,SAAS,KAAK,SAAS,IAAI;AACjC,UAAM,SAAS,MAAM,KAAK,MAAM,OAAO,MAAM,EAAE,UAAU,IAAI;AAE7D,UAAM,aAAa,SAAS,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,KAAK;AAC1D,UAAM,UAAU,KAAK,MAAM;AAC3B,WAAO,EAAE,GAAG,MAAM,IAAI,QAAQ;AAAA,EAClC;AAAA,EAEA,MAAM,YAAY,IAAwC;AACtD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACjD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,eAAe,OAA2C;AAC5D,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;AACpD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,4BAA4B,oBAAwD;AACtF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,sBAAsB,mBAAmB,CAAC,EAAE,MAAM;AACvF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,0BAA0B,kBAAsD;AAClF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,oBAAoB,iBAAiB,CAAC,EAAE,MAAM;AACnF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,WAAW,IAAY,SAA6C;AACtE,UAAM,YAAY,KAAK,YAAY,OAAO;AAE1C,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EACnD;AAAA,EAEA,MAAM,WAAW,IAA2B;AAExC,UAAM,KAAK,sBAAsB,EAAE;AAEnC,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAC1C;AAAA,EAEA,MAAM,UAAU,QAAoB,UAA4B,CAAC,GAAmC;AAChG,UAAM,QAAQ,QAAQ,SAAS;AAE/B,QAAI,QAAQ,KAAK,MAAM,MAAM;AAG7B,QAAI,OAAO,OAAO;AACd,cAAQ,MAAM,MAAM,SAAS,OAAO,KAAK;AAAA,IAC7C;AAGA,QAAI,OAAO,eAAe;AACtB,cAAQ,MAAM,MAAM,SAAS,QAAQ,IAAI,OAAO,aAAa,GAAG;AAAA,IACpE;AAGA,QAAI,OAAO,oBAAoB,QAAW;AACtC,cAAQ,MAAM,MAAM,qBAAqB,OAAO,eAAe;AAAA,IACnE;AAGA,QAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AACzC,iBAAW,QAAQ,OAAO,OAAO;AAG7B,gBAAQ,MAAM;AAAA,UACV,KAAK,KAAK,OAAO,OAAO,WAAW,YAAY,iBAAiB;AAAA,UAChE,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,QACjC;AAAA,MACJ;AAAA,IACJ;AAGA,QAAI,OAAO,cAAc,OAAO,WAAW,SAAS,GAAG;AACnD,cAAQ,MAAM,MAAM,CAAC,YAA+B;AAChD,mBAAW,QAAQ,OAAO,YAAa;AACnC,kBAAQ;AAAA,YACJ,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,iBACA;AAAA,YACN,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,UACjC;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAGA,QAAI,QAAQ,QAAQ;AAChB,YAAM,aAAa,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE,SAAS,CAAC;AAC9E,cAAQ,MAAM,MAAM,MAAM,KAAK,WAAW,MAAM;AAAA,IACpD;AAGA,YAAQ,MAAM,QAAQ,MAAM,KAAK,EAAE,MAAM,QAAQ,CAAC;AAElD,UAAM,OAAO,MAAM;AACnB,UAAM,UAAU,KAAK,SAAS;AAC9B,UAAM,aAAa,UAAU,KAAK,MAAM,GAAG,KAAK,IAAI;AACpD,UAAM,QAAQ,WAAW,IAAI,CAAC,QAAiC,KAAK,WAAW,GAAG,CAAC;AAEnF,QAAI;AACJ,QAAI,WAAW,WAAW,SAAS,GAAG;AAClC,YAAM,WAAW,WAAW,WAAW,SAAS,CAAC;AACjD,mBAAa,OAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,SAAS,GAAG,CAAC,CAAC,EAAE,SAAS,QAAQ;AAAA,IACvF;AAEA,WAAO,EAAE,OAAO,WAAW;AAAA,EAC/B;AAAA;AAAA,EAIA,MAAM,cAAc,SAA+C;AAC/D,UAAM,YAAY,KAAK,YAAY,OAAO;AAC1C,UAAM,SAAS,MAAM,KAAK,cAAc,OAAO,SAAS,EAAE,UAAU,IAAI;AAExE,UAAM,aAAa,SAAS,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,QAAQ;AAC7D,UAAM,UAAU,QAAQ,MAAM;AAC9B,WAAO,EAAE,GAAG,SAAS,IAAI,QAAQ;AAAA,EACrC;AAAA,EAEA,MAAM,eAAe,IAAwC;AACzD,UAAM,MAAM,MAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACzD,WAAO,MAAM,KAAK,cAAc,GAAG,IAAI;AAAA,EAC3C;AAAA,EAEA,MAAM,oBAAoB,QAAoC;AAC1D,UAAM,OAAO,MAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC;AAC/D,WAAO,KAAK,IAAI,CAAC,QAAiC,KAAK,cAAc,GAAG,CAAC;AAAA,EAC7E;AAAA,EAEA,MAAM,cAAc,IAAe,SAA0C;AACzE,UAAM,YAAY,KAAK,mBAAmB,OAAO;AAEjD,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EAC3D;AAAA,EAEA,MAAM,cAAc,IAA8B;AAC9C,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAClD;AAAA,EAEA,MAAM,sBAAsB,QAA+B;AACvD,UAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC,EAAE,OAAO;AAAA,EAC/D;AAAA,EAEA,MAAM,wBAAuC;AACzC,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,KAAK,cAAc,MAAM,cAAc,KAAK,GAAG,EAAE,OAAO;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,aAAa,OAAwB;AACzC,QAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,WAAO,OAAO,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,SAAS,MAAsD;AACnE,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,MAA+B;AAAA,MAEjC,OAAO,KAAK;AAAA,MACZ,YAAY,KAAK,aAAa;AAAA,MAC9B,WAAW,KAAK,YAAY;AAAA,MAC5B,eAAe,KAAK;AAAA,MACpB,OAAO,KAAK,UAAU,KAAK,KAAK;AAAA,MAChC,mBAAmB,KAAK,kBAAkB,IAAI;AAAA,MAC9C,oBAAoB,KAAK,qBAAqB;AAAA,MAC9C,sBAAsB,KAAK,sBAAsB;AAAA,MACjD,wBAAwB,KAAK,wBAAwB;AAAA,MACrD,YAAY,KAAK,aAAa;AAAA,MAC9B,YAAY,KAAK,aAAa;AAAA,IAClC;AAGA,QAAI,KAAK,OAAO,QAAW;AACvB,UAAI,KAAK,KAAK;AAAA,IAClB;AAEA,QAAI,KAAK,MAAM;AACX,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,IAAI,GAAG;AAClD,YAAI,aAAa,GAAG,CAAC,IAAI;AAAA,MAC7B;AAAA,IACJ;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,WAAW,KAA0C;AACzD,UAAM,OAAgC,CAAC;AACvC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC5C,UAAI,CAAC,oBAAoB,IAAI,GAAG,GAAG;AAC/B,aAAK,aAAa,GAAG,CAAC,IAAI;AAAA,MAC9B;AAAA,IACJ;AAEA,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,OAAO,IAAI;AAAA,MACX,WAAW,IAAI;AAAA,MACf,UAAU,IAAI;AAAA,MACd,cAAc,IAAI;AAAA,MAClB,OAAO,OAAO,IAAI,UAAU,WAAW,KAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAAA,MACnE,iBAAiB,QAAQ,IAAI,iBAAiB;AAAA,MAC9C,mBAAmB,IAAI;AAAA,MACvB,oBAAoB,IAAI;AAAA,MACxB,sBAAsB,IAAI,yBACpB,KAAK,aAAa,IAAI,sBAAsB,IAC5C;AAAA,MACN,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,GAAI,OAAO,KAAK,IAAI,EAAE,SAAS,IAAI,EAAE,KAAmB,IAAI,CAAC;AAAA,IACjE;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,YAAY,SAAuD;AACvE,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,QAAQ;AAAA,IAC9B;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,cAAc,SAAS;AACvB,gBAAU,YAAY,QAAQ,YAAY;AAAA,IAC9C;AACA,QAAI,QAAQ,iBAAiB,QAAW;AACpC,gBAAU,gBAAgB,QAAQ;AAAA,IACtC;AACA,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,KAAK,UAAU,QAAQ,KAAK;AAAA,IAClD;AACA,QAAI,QAAQ,oBAAoB,QAAW;AACvC,gBAAU,oBAAoB,QAAQ,kBAAkB,IAAI;AAAA,IAChE;AACA,QAAI,uBAAuB,SAAS;AAChC,gBAAU,qBAAqB,QAAQ,qBAAqB;AAAA,IAChE;AACA,QAAI,wBAAwB,SAAS;AACjC,gBAAU,uBAAuB,QAAQ,sBAAsB;AAAA,IACnE;AACA,QAAI,0BAA0B,SAAS;AACnC,gBAAU,yBAAyB,QAAQ,wBAAwB;AAAA,IACvE;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,QAAI,QAAQ,MAAM;AACd,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,IAAI,GAAG;AACrD,kBAAU,aAAa,GAAG,CAAC,IAAI;AAAA,MACnC;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,YAAY,SAAsD;AACtE,UAAM,MAA+B;AAAA,MACjC,SAAS,QAAQ;AAAA,MACjB,oBAAoB,QAAQ;AAAA,MAC5B,YAAY,QAAQ,aAAa;AAAA,MACjC,YAAY,QAAQ,aAAa;AAAA,MACjC,aAAa,QAAQ,cAAc;AAAA,MACnC,YAAY,QAAQ;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,IACxB;AAGA,QAAI,QAAQ,OAAO,QAAW;AAC1B,UAAI,KAAK,QAAQ;AAAA,IACrB;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAc,KAAuC;AACzD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,kBAAkB,IAAI;AAAA,MACtB,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,YAAY,KAAK,aAAa,IAAI,YAAY;AAAA,MAC9C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,IAC/C;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,mBAAmB,SAAoD;AAC3E,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,qBAAqB,QAAW;AACxC,gBAAU,qBAAqB,QAAQ;AAAA,IAC3C;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,gBAAgB,SAAS;AACzB,gBAAU,cAAc,QAAQ,cAAc;AAAA,IAClD;AACA,QAAI,QAAQ,eAAe,QAAW;AAClC,gBAAU,eAAe,QAAQ;AAAA,IACrC;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AACJ;;;AC1YA,eAAsB,0BAClB,MACA,WACA,uBACA,eACa;AACb,QAAM,SAAS,OAAO,0BAA0B,WAAW,wBAAwB;AACnF,QAAM,mBACF,OAAO,0BAA0B,aAAa,wBAAwB;AAC1E,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,OAAO,EAAE,YAAY,EAAE,OAAO;AAC3C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,WAAW,EAAE,SAAS;AACnC,UAAM,OAAO,eAAe,EAAE,YAAY;AAC1C,UAAM,MAAM,OAAO,EAAE,YAAY;AACjC,UAAM,QAAQ,mBAAmB,EAAE,YAAY,EAAE,UAAU,KAAK;AAChE,UAAM,OAAO,oBAAoB,EAAE,SAAS;AAC5C,UAAM,OAAO,sBAAsB,EAAE,SAAS;AAC9C,UAAM,UAAU,0BAA0B,EAAE,OAAO,KAAK,CAAC,EAAE,SAAS;AACpE,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,OAAO;AACnB,UAAM,MAAM,oBAAoB;AAChC,UAAM,MAAM,sBAAsB;AAGlC,QAAI,kBAAkB;AAClB,uBAAiB,KAAK;AAAA,IAC1B;AAAA,EACJ,CAAC;AACL;AAMA,eAAsB,6BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,SAAS,EAAE,YAAY;AACpC,UAAM,OAAO,oBAAoB,EAAE,YAAY;AAC/C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,aAAa,EAAE,SAAS;AACrC,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,gBAAgB,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC7D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,SAAS;AAErB,UAAM,MAAM,YAAY;AAAA,EAC5B,CAAC;AACL;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xcelsior/auth-adapter-knex",
-  "version": "1.1.3",
+  "version": "1.1.4",
   "description": "Knex storage adapter for @xcelsior/auth (PostgreSQL, MySQL, SQLite, etc.)",
   "exports": {
     ".": {
@@ -11,11 +11,12 @@
   "main": "src/index.ts",
   "devDependencies": {
     "@types/node": "^20.0.0",
-    "knex": "^3.1.0"
+    "knex": "^3.1.0",
+    "@xcelsior/utils": "1.0.1"
   },
   "peerDependencies": {
     "knex": "^3.1.0",
-    "@xcelsior/auth": "1.1.3"
+    "@xcelsior/auth": "1.1.5"
   },
   "scripts": {
     "build": "tsup && tsc --noEmit",

package/src/knex.ts

@@ -10,8 +10,35 @@ import type {
     User,
     UserFilter,
     UserId,
+    UserMeta,
 } from '@xcelsior/auth';
 
+/** Convert camelCase string to snake_case */
+function camelToSnake(str: string): string {
+    return str.replace(/[A-Z]/g, (letter) => `_${letter.toLowerCase()}`);
+}
+
+/** Convert snake_case string to camelCase */
+function snakeToCamel(str: string): string {
+    return str.replace(/_([a-z])/g, (_, letter) => letter.toUpperCase());
+}
+
+/** Core user DB columns that are not part of meta */
+const CORE_USER_DB_FIELDS = new Set([
+    'id',
+    'email',
+    'first_name',
+    'last_name',
+    'password_hash',
+    'roles',
+    'is_email_verified',
+    'verification_token',
+    'reset_password_token',
+    'reset_password_expires',
+    'created_at',
+    'updated_at',
+]);
+
 export interface KnexConfig {
     /** Pre-configured Knex instance */
     knex: Knex;
@@ -23,7 +50,9 @@ export interface KnexConfig {
     schema?: string;
 }
 
-export class KnexStorageProvider implements IStorageProvider {
+export class KnexStorageProvider<Meta extends UserMeta = Record<string, never>>
+    implements IStorageProvider<Meta>
+{
     private knex: Knex;
     private tableName: string;
     private sessionsTableName: string;
@@ -54,36 +83,36 @@ export class KnexStorageProvider implements IStorageProvider {
 
     // ==================== User Methods ====================
 
-    async createUser(user: CreateUserInput): Promise<User> {
+    async createUser(user: CreateUserInput<Meta>): Promise<User<Meta>> {
         const dbUser = this.toDbUser(user);
         const result = await this.table.insert(dbUser).returning('id');
         // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]
         const insertedId = result?.[0]?.id ?? result?.[0] ?? user.id;
         const finalId = user.id ?? insertedId;
-        return { ...user, id: finalId } as User;
+        return { ...user, id: finalId } as User<Meta>;
     }
 
-    async getUserById(id: UserId): Promise<User | null> {
+    async getUserById(id: UserId): Promise<User<Meta> | null> {
         const row = await this.table.where({ id }).first();
         return row ? this.fromDbUser(row) : null;
     }
 
-    async getUserByEmail(email: string): Promise<User | null> {
+    async getUserByEmail(email: string): Promise<User<Meta> | null> {
         const row = await this.table.where({ email }).first();
         return row ? this.fromDbUser(row) : null;
     }
 
-    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null> {
+    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User<Meta> | null> {
         const row = await this.table.where({ reset_password_token: resetPasswordToken }).first();
         return row ? this.fromDbUser(row) : null;
     }
 
-    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null> {
+    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User<Meta> | null> {
         const row = await this.table.where({ verification_token: verifyEmailToken }).first();
         return row ? this.fromDbUser(row) : null;
     }
 
-    async updateUser(id: UserId, updates: Partial<User>): Promise<void> {
+    async updateUser(id: UserId, updates: Partial<User<Meta>>): Promise<void> {
         const dbUpdates = this.toDbUpdates(updates);
 
         if (Object.keys(dbUpdates).length === 0) {
@@ -100,7 +129,7 @@ export class KnexStorageProvider implements IStorageProvider {
         await this.table.where({ id }).delete();
     }
 
-    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult> {
+    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult<Meta>> {
         const limit = options.limit ?? 50;
 
         let query = this.table.clone();
@@ -170,7 +199,7 @@ export class KnexStorageProvider implements IStorageProvider {
             nextCursor = Buffer.from(JSON.stringify({ lastId: lastUser.id })).toString('base64');
         }
 
-        return { users, nextCursor };
+        return { users, nextCursor } as FindUsersResult<Meta>;
     }
 
     // ==================== Session Methods ====================
@@ -228,11 +257,13 @@ export class KnexStorageProvider implements IStorageProvider {
     }
 
     /**
-     * Convert User object to database row format (snake_case)
+     * Convert User object to database row format (snake_case).
+     * Meta fields are flattened as individual snake_case columns.
      */
-    private toDbUser(user: CreateUserInput): Record<string, unknown> {
+    private toDbUser(user: CreateUserInput<Meta>): Record<string, unknown> {
         const now = new Date().toISOString();
         const row: Record<string, unknown> = {
+
             email: user.email,
             first_name: user.firstName ?? null,
             last_name: user.lastName ?? null,
@@ -250,13 +281,27 @@ export class KnexStorageProvider implements IStorageProvider {
         if (user.id !== undefined) {
             row.id = user.id;
         }
+        // Flatten meta fields as individual snake_case columns
+        if (user.meta) {
+            for (const [key, value] of Object.entries(user.meta)) {
+                row[camelToSnake(key)] = value;
+            }
+        }
         return row;
     }
 
     /**
-     * Convert database row to User object (camelCase)
+     * Convert database row to User object (camelCase).
+     * Non-core columns are gathered into the typed `meta` object.
      */
-    private fromDbUser(row: Record<string, unknown>): User {
+    private fromDbUser(row: Record<string, unknown>): User<Meta> {
+        const meta: Record<string, unknown> = {};
+        for (const [key, value] of Object.entries(row)) {
+            if (!CORE_USER_DB_FIELDS.has(key)) {
+                meta[snakeToCamel(key)] = value;
+            }
+        }
+
         return {
             id: row.id as string | number,
             email: row.email as string,
@@ -272,13 +317,15 @@ export class KnexStorageProvider implements IStorageProvider {
                 : undefined,
             createdAt: this.toDateString(row.created_at),
             updatedAt: this.toDateString(row.updated_at),
-        };
+            ...(Object.keys(meta).length > 0 ? { meta: meta as Meta } : {}),
+        } as User<Meta>;
     }
 
     /**
-     * Convert partial User updates to database format
+     * Convert partial User updates to database format.
+     * Meta fields in updates are flattened as individual snake_case columns.
      */
-    private toDbUpdates(updates: Partial<User>): Record<string, unknown> {
+    private toDbUpdates(updates: Partial<User<Meta>>): Record<string, unknown> {
         const dbUpdates: Record<string, unknown> = {};
 
         if (updates.email !== undefined) {
@@ -311,6 +358,12 @@ export class KnexStorageProvider implements IStorageProvider {
         if (updates.updatedAt !== undefined) {
             dbUpdates.updated_at = updates.updatedAt;
         }
+        // Flatten meta fields as individual snake_case columns
+        if (updates.meta) {
+            for (const [key, value] of Object.entries(updates.meta)) {
+                dbUpdates[camelToSnake(key)] = value;
+            }
+        }
 
         return dbUpdates;
     }

package/src/migration.ts

@@ -4,6 +4,11 @@ import type { Knex } from 'knex';
  * SQL migration helper to create the users table
  * Can be used with Knex migrations
  *
+ * @param knex - Knex instance
+ * @param tableName - Table name for users
+ * @param schemaOrCustomColumns - Optional schema name (for PostgreSQL) or callback to add custom columns
+ * @param customColumns - Optional callback to add custom columns to the table (when schema is provided)
+ *
  * @example
  * ```ts
  * // In your migration file
@@ -14,6 +19,23 @@ import type { Knex } from 'knex';
  *   await createSessionsTableMigration(knex, 'sessions');
  * }
  *
+ * // With custom meta columns
+ * export async function up(knex: Knex): Promise<void> {
+ *   await createUsersTableMigration(knex, 'users', (table) => {
+ *     table.string('phone').nullable();
+ *     table.string('company').nullable();
+ *   });
+ *   await createSessionsTableMigration(knex, 'sessions');
+ * }
+ *
+ * // With schema and custom meta columns
+ * export async function up(knex: Knex): Promise<void> {
+ *   await createUsersTableMigration(knex, 'users', 'my_schema', (table) => {
+ *     table.string('phone').nullable();
+ *     table.string('company').nullable();
+ *   });
+ * }
+ *
  * export async function down(knex: Knex): Promise<void> {
  *   await knex.schema.dropTableIfExists('sessions');
  *   await knex.schema.dropTableIfExists('users');
@@ -23,8 +45,12 @@ import type { Knex } from 'knex';
 export async function createUsersTableMigration(
     knex: Knex,
     tableName: string,
-    schema?: string
+    schemaOrCustomColumns?: string | ((table: Knex.CreateTableBuilder) => void),
+    customColumns?: (table: Knex.CreateTableBuilder) => void
 ): Promise<void> {
+    const schema = typeof schemaOrCustomColumns === 'string' ? schemaOrCustomColumns : undefined;
+    const addCustomColumns =
+        typeof schemaOrCustomColumns === 'function' ? schemaOrCustomColumns : customColumns;
     const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;
 
     await schemaBuilder.createTable(tableName, (table) => {
@@ -45,6 +71,11 @@ export async function createUsersTableMigration(
         table.index('email');
         table.index('verification_token');
         table.index('reset_password_token');
+
+        // Add custom meta columns if provided
+        if (addCustomColumns) {
+            addCustomColumns(table);
+        }
     });
 }