@xcelsior/auth-adapter-knex 1.1.4 → 1.1.5

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import { Knex } from 'knex';
-import { UserMeta, IStorageProvider, CreateUserInput, User, UserId, UserFilter, FindUsersOptions, FindUsersResult, CreateSessionInput, Session, SessionId } from '@xcelsior/auth';
+import { UserMeta, SessionMeta, IStorageProvider, CreateUserInput, User, UserId, UserFilter, FindUsersOptions, FindUsersResult, CreateSessionInput, Session, SessionId } from '@xcelsior/auth';
 
 interface KnexConfig {
     /** Pre-configured Knex instance */
@@ -11,7 +11,7 @@ interface KnexConfig {
     /** Optional schema (for PostgreSQL) */
     schema?: string;
 }
-declare class KnexStorageProvider<Meta extends UserMeta = Record<string, never>> implements IStorageProvider<Meta> {
+declare class KnexStorageProvider<Meta extends UserMeta = Record<string, any>, SMeta extends SessionMeta = Record<string, any>> implements IStorageProvider<Meta, SMeta> {
     private knex;
     private tableName;
     private sessionsTableName;
@@ -27,10 +27,10 @@ declare class KnexStorageProvider<Meta extends UserMeta = Record<string, never>>
     updateUser(id: UserId, updates: Partial<User<Meta>>): Promise<void>;
     deleteUser(id: UserId): Promise<void>;
     findUsers(filter: UserFilter, options?: FindUsersOptions): Promise<FindUsersResult<Meta>>;
-    createSession(session: CreateSessionInput): Promise<Session>;
-    getSessionById(id: SessionId): Promise<Session | null>;
-    getSessionsByUserId(userId: UserId): Promise<Session[]>;
-    updateSession(id: SessionId, updates: Partial<Session>): Promise<void>;
+    createSession(session: CreateSessionInput<SMeta>): Promise<Session<SMeta>>;
+    getSessionById(id: SessionId): Promise<Session<SMeta> | null>;
+    getSessionsByUserId(userId: UserId): Promise<Session<SMeta>[]>;
+    updateSession(id: SessionId, updates: Partial<Session<SMeta>> & Record<string, unknown>): Promise<void>;
     deleteSession(id: SessionId): Promise<void>;
     deleteAllUserSessions(userId: UserId): Promise<void>;
     deleteExpiredSessions(): Promise<void>;
@@ -54,15 +54,18 @@ declare class KnexStorageProvider<Meta extends UserMeta = Record<string, never>>
      */
     private toDbUpdates;
     /**
-     * Convert Session object to database row format (snake_case)
+     * Convert Session object to database row format (snake_case).
+     * Meta fields are flattened as individual snake_case columns.
      */
     private toDbSession;
     /**
-     * Convert database row to Session object (camelCase)
+     * Convert database row to Session object (camelCase).
+     * Non-core columns are gathered into the typed `meta` object.
      */
     private fromDbSession;
     /**
-     * Convert partial Session updates to database format
+     * Convert partial Session updates to database format.
+     * Meta fields in updates are flattened as individual snake_case columns.
      */
     private toDbSessionUpdates;
 }
@@ -113,7 +116,25 @@ declare function createUsersTableMigration(knex: Knex, tableName: string, schema
 /**
  * SQL migration helper to create the sessions table
  * Can be used with Knex migrations
+ *
+ * @param knex - Knex instance
+ * @param tableName - Table name for sessions
+ * @param schemaOrCustomColumns - Optional schema name (for PostgreSQL) or callback to add custom columns
+ * @param customColumns - Optional callback to add custom columns to the table (when schema is provided)
+ *
+ * @example
+ * ```ts
+ * // With custom meta columns
+ * await createSessionsTableMigration(knex, 'sessions', (table) => {
+ *   table.string('organization_id').nullable();
+ * });
+ *
+ * // With schema and custom meta columns
+ * await createSessionsTableMigration(knex, 'sessions', 'my_schema', (table) => {
+ *   table.string('organization_id').nullable();
+ * });
+ * ```
  */
-declare function createSessionsTableMigration(knex: Knex, tableName: string, schema?: string): Promise<void>;
+declare function createSessionsTableMigration(knex: Knex, tableName: string, schemaOrCustomColumns?: string | ((table: Knex.CreateTableBuilder) => void), customColumns?: (table: Knex.CreateTableBuilder) => void): Promise<void>;
 
 export { type KnexConfig, KnexStorageProvider, createSessionsTableMigration, createUsersTableMigration };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { Knex } from 'knex';
-import { UserMeta, IStorageProvider, CreateUserInput, User, UserId, UserFilter, FindUsersOptions, FindUsersResult, CreateSessionInput, Session, SessionId } from '@xcelsior/auth';
+import { UserMeta, SessionMeta, IStorageProvider, CreateUserInput, User, UserId, UserFilter, FindUsersOptions, FindUsersResult, CreateSessionInput, Session, SessionId } from '@xcelsior/auth';
 
 interface KnexConfig {
     /** Pre-configured Knex instance */
@@ -11,7 +11,7 @@ interface KnexConfig {
     /** Optional schema (for PostgreSQL) */
     schema?: string;
 }
-declare class KnexStorageProvider<Meta extends UserMeta = Record<string, never>> implements IStorageProvider<Meta> {
+declare class KnexStorageProvider<Meta extends UserMeta = Record<string, any>, SMeta extends SessionMeta = Record<string, any>> implements IStorageProvider<Meta, SMeta> {
     private knex;
     private tableName;
     private sessionsTableName;
@@ -27,10 +27,10 @@ declare class KnexStorageProvider<Meta extends UserMeta = Record<string, never>>
     updateUser(id: UserId, updates: Partial<User<Meta>>): Promise<void>;
     deleteUser(id: UserId): Promise<void>;
     findUsers(filter: UserFilter, options?: FindUsersOptions): Promise<FindUsersResult<Meta>>;
-    createSession(session: CreateSessionInput): Promise<Session>;
-    getSessionById(id: SessionId): Promise<Session | null>;
-    getSessionsByUserId(userId: UserId): Promise<Session[]>;
-    updateSession(id: SessionId, updates: Partial<Session>): Promise<void>;
+    createSession(session: CreateSessionInput<SMeta>): Promise<Session<SMeta>>;
+    getSessionById(id: SessionId): Promise<Session<SMeta> | null>;
+    getSessionsByUserId(userId: UserId): Promise<Session<SMeta>[]>;
+    updateSession(id: SessionId, updates: Partial<Session<SMeta>> & Record<string, unknown>): Promise<void>;
     deleteSession(id: SessionId): Promise<void>;
     deleteAllUserSessions(userId: UserId): Promise<void>;
     deleteExpiredSessions(): Promise<void>;
@@ -54,15 +54,18 @@ declare class KnexStorageProvider<Meta extends UserMeta = Record<string, never>>
      */
     private toDbUpdates;
     /**
-     * Convert Session object to database row format (snake_case)
+     * Convert Session object to database row format (snake_case).
+     * Meta fields are flattened as individual snake_case columns.
      */
     private toDbSession;
     /**
-     * Convert database row to Session object (camelCase)
+     * Convert database row to Session object (camelCase).
+     * Non-core columns are gathered into the typed `meta` object.
      */
     private fromDbSession;
     /**
-     * Convert partial Session updates to database format
+     * Convert partial Session updates to database format.
+     * Meta fields in updates are flattened as individual snake_case columns.
      */
     private toDbSessionUpdates;
 }
@@ -113,7 +116,25 @@ declare function createUsersTableMigration(knex: Knex, tableName: string, schema
 /**
  * SQL migration helper to create the sessions table
  * Can be used with Knex migrations
+ *
+ * @param knex - Knex instance
+ * @param tableName - Table name for sessions
+ * @param schemaOrCustomColumns - Optional schema name (for PostgreSQL) or callback to add custom columns
+ * @param customColumns - Optional callback to add custom columns to the table (when schema is provided)
+ *
+ * @example
+ * ```ts
+ * // With custom meta columns
+ * await createSessionsTableMigration(knex, 'sessions', (table) => {
+ *   table.string('organization_id').nullable();
+ * });
+ *
+ * // With schema and custom meta columns
+ * await createSessionsTableMigration(knex, 'sessions', 'my_schema', (table) => {
+ *   table.string('organization_id').nullable();
+ * });
+ * ```
  */
-declare function createSessionsTableMigration(knex: Knex, tableName: string, schema?: string): Promise<void>;
+declare function createSessionsTableMigration(knex: Knex, tableName: string, schemaOrCustomColumns?: string | ((table: Knex.CreateTableBuilder) => void), customColumns?: (table: Knex.CreateTableBuilder) => void): Promise<void>;
 
 export { type KnexConfig, KnexStorageProvider, createSessionsTableMigration, createUsersTableMigration };

package/dist/index.js

@@ -47,6 +47,17 @@ var CORE_USER_DB_FIELDS = /* @__PURE__ */ new Set([
   "created_at",
   "updated_at"
 ]);
+var CORE_SESSION_DB_FIELDS = /* @__PURE__ */ new Set([
+  "id",
+  "user_id",
+  "refresh_token_hash",
+  "user_agent",
+  "ip_address",
+  "device_name",
+  "created_at",
+  "last_used_at",
+  "expires_at"
+]);
 var KnexStorageProvider = class {
   constructor(config) {
     this.knex = config.knex;
@@ -291,7 +302,8 @@ var KnexStorageProvider = class {
   }
   // ==================== Session Mapping Helpers ====================
   /**
-   * Convert Session object to database row format (snake_case)
+   * Convert Session object to database row format (snake_case).
+   * Meta fields are flattened as individual snake_case columns.
    */
   toDbSession(session) {
     const row = {
@@ -307,12 +319,24 @@ var KnexStorageProvider = class {
     if (session.id !== void 0) {
       row.id = session.id;
     }
+    if (session.meta) {
+      for (const [key, value] of Object.entries(session.meta)) {
+        row[camelToSnake(key)] = value;
+      }
+    }
     return row;
   }
   /**
-   * Convert database row to Session object (camelCase)
+   * Convert database row to Session object (camelCase).
+   * Non-core columns are gathered into the typed `meta` object.
    */
   fromDbSession(row) {
+    const meta = {};
+    for (const [key, value] of Object.entries(row)) {
+      if (!CORE_SESSION_DB_FIELDS.has(key)) {
+        meta[snakeToCamel(key)] = value;
+      }
+    }
     return {
       id: row.id,
       userId: row.user_id,
@@ -322,11 +346,13 @@ var KnexStorageProvider = class {
       deviceName: row.device_name,
       createdAt: this.toDateString(row.created_at),
       lastUsedAt: this.toDateString(row.last_used_at),
-      expiresAt: this.toDateString(row.expires_at)
+      expiresAt: this.toDateString(row.expires_at),
+      ...Object.keys(meta).length > 0 ? { meta } : {}
     };
   }
   /**
-   * Convert partial Session updates to database format
+   * Convert partial Session updates to database format.
+   * Meta fields in updates are flattened as individual snake_case columns.
    */
   toDbSessionUpdates(updates) {
     const dbUpdates = {};
@@ -348,6 +374,11 @@ var KnexStorageProvider = class {
     if (updates.expiresAt !== void 0) {
       dbUpdates.expires_at = updates.expiresAt;
     }
+    if (updates.meta) {
+      for (const [key, value] of Object.entries(updates.meta)) {
+        dbUpdates[camelToSnake(key)] = value;
+      }
+    }
     return dbUpdates;
   }
 };
@@ -378,7 +409,9 @@ async function createUsersTableMigration(knex, tableName, schemaOrCustomColumns,
     }
   });
 }
-async function createSessionsTableMigration(knex, tableName, schema) {
+async function createSessionsTableMigration(knex, tableName, schemaOrCustomColumns, customColumns) {
+  const schema = typeof schemaOrCustomColumns === "string" ? schemaOrCustomColumns : void 0;
+  const addCustomColumns = typeof schemaOrCustomColumns === "function" ? schemaOrCustomColumns : customColumns;
   const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;
   await schemaBuilder.createTable(tableName, (table) => {
     table.string("id").primary();
@@ -392,6 +425,9 @@ async function createSessionsTableMigration(knex, tableName, schema) {
     table.timestamp("expires_at", { useTz: true }).notNullable();
     table.index("user_id");
     table.index("expires_at");
+    if (addCustomColumns) {
+      addCustomColumns(table);
+    }
   });
 }
 // Annotate the CommonJS export names for ESM import in node:

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/knex.ts","../src/migration.ts"],"sourcesContent":["export { KnexStorageProvider, type KnexConfig } from './knex';\nexport { createUsersTableMigration, createSessionsTableMigration } from './migration';\n","import type { Knex } from 'knex';\nimport type {\n    CreateSessionInput,\n    CreateUserInput,\n    FindUsersOptions,\n    FindUsersResult,\n    IStorageProvider,\n    Session,\n    SessionId,\n    User,\n    UserFilter,\n    UserId,\n    UserMeta,\n} from '@xcelsior/auth';\n\n/** Convert camelCase string to snake_case */\nfunction camelToSnake(str: string): string {\n    return str.replace(/[A-Z]/g, (letter) => `_${letter.toLowerCase()}`);\n}\n\n/** Convert snake_case string to camelCase */\nfunction snakeToCamel(str: string): string {\n    return str.replace(/_([a-z])/g, (_, letter) => letter.toUpperCase());\n}\n\n/** Core user DB columns that are not part of meta */\nconst CORE_USER_DB_FIELDS = new Set([\n    'id',\n    'email',\n    'first_name',\n    'last_name',\n    'password_hash',\n    'roles',\n    'is_email_verified',\n    'verification_token',\n    'reset_password_token',\n    'reset_password_expires',\n    'created_at',\n    'updated_at',\n]);\n\nexport interface KnexConfig {\n    /** Pre-configured Knex instance */\n    knex: Knex;\n    /** Table name for users */\n    tableName: string;\n    /** Table name for sessions */\n    sessionsTableName: string;\n    /** Optional schema (for PostgreSQL) */\n    schema?: string;\n}\n\nexport class KnexStorageProvider<Meta extends UserMeta = Record<string, never>>\n    implements IStorageProvider<Meta>\n{\n    private knex: Knex;\n    private tableName: string;\n    private sessionsTableName: string;\n    private schema?: string;\n\n    constructor(config: KnexConfig) {\n        this.knex = config.knex;\n        this.tableName = config.tableName;\n        this.sessionsTableName = config.sessionsTableName;\n        this.schema = config.schema;\n    }\n\n    private get table() {\n        const query = this.knex(this.tableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    private get sessionsTable() {\n        const query = this.knex(this.sessionsTableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    // ==================== User Methods ====================\n\n    async createUser(user: CreateUserInput<Meta>): Promise<User<Meta>> {\n        const dbUser = this.toDbUser(user);\n        const result = await this.table.insert(dbUser).returning('id');\n        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]\n        const insertedId = result?.[0]?.id ?? result?.[0] ?? user.id;\n        const finalId = user.id ?? insertedId;\n        return { ...user, id: finalId } as User<Meta>;\n    }\n\n    async getUserById(id: UserId): Promise<User<Meta> | null> {\n        const row = await this.table.where({ id }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByEmail(email: string): Promise<User<Meta> | null> {\n        const row = await this.table.where({ email }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User<Meta> | null> {\n        const row = await this.table.where({ reset_password_token: resetPasswordToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User<Meta> | null> {\n        const row = await this.table.where({ verification_token: verifyEmailToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async updateUser(id: UserId, updates: Partial<User<Meta>>): Promise<void> {\n        const dbUpdates = this.toDbUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.table.where({ id }).update(dbUpdates);\n    }\n\n    async deleteUser(id: UserId): Promise<void> {\n        // Delete all user sessions first\n        await this.deleteAllUserSessions(id);\n        // Then delete the user\n        await this.table.where({ id }).delete();\n    }\n\n    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult<Meta>> {\n        const limit = options.limit ?? 50;\n\n        let query = this.table.clone();\n\n        // Email exact match\n        if (filter.email) {\n            query = query.where('email', filter.email);\n        }\n\n        // Email contains (partial match)\n        if (filter.emailContains) {\n            query = query.where('email', 'like', `%${filter.emailContains}%`);\n        }\n\n        // Email verification status\n        if (filter.isEmailVerified !== undefined) {\n            query = query.where('is_email_verified', filter.isEmailVerified);\n        }\n\n        // Roles filtering - user must have ALL specified roles\n        if (filter.roles && filter.roles.length > 0) {\n            for (const role of filter.roles) {\n                // Use JSON contains - works for PostgreSQL (jsonb) and MySQL (json)\n                // For SQLite, we fall back to LIKE on the JSON string\n                query = query.whereRaw(\n                    this.knex.client.config.client === 'sqlite3' ? `roles LIKE ?` : `roles @> ?`,\n                    this.knex.client.config.client === 'sqlite3'\n                        ? [`%\"${role}\"%`]\n                        : [JSON.stringify([role])]\n                );\n            }\n        }\n\n        // HasAnyRole - user must have at least ONE of specified roles\n        if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {\n            query = query.where((builder: Knex.QueryBuilder) => {\n                for (const role of filter.hasAnyRole!) {\n                    builder.orWhereRaw(\n                        this.knex.client.config.client === 'sqlite3'\n                            ? `roles LIKE ?`\n                            : `roles @> ?`,\n                        this.knex.client.config.client === 'sqlite3'\n                            ? [`%\"${role}\"%`]\n                            : [JSON.stringify([role])]\n                    );\n                }\n            });\n        }\n\n        // Apply pagination\n        if (options.cursor) {\n            const cursorData = JSON.parse(Buffer.from(options.cursor, 'base64').toString());\n            query = query.where('id', '>', cursorData.lastId);\n        }\n\n        // Order by id for consistent pagination\n        query = query.orderBy('id', 'asc').limit(limit + 1);\n\n        const rows = await query;\n        const hasMore = rows.length > limit;\n        const resultRows = hasMore ? rows.slice(0, limit) : rows;\n        const users = resultRows.map((row: Record<string, unknown>) => this.fromDbUser(row));\n\n        let nextCursor: string | undefined;\n        if (hasMore && resultRows.length > 0) {\n            const lastUser = resultRows[resultRows.length - 1];\n            nextCursor = Buffer.from(JSON.stringify({ lastId: lastUser.id })).toString('base64');\n        }\n\n        return { users, nextCursor } as FindUsersResult<Meta>;\n    }\n\n    // ==================== Session Methods ====================\n\n    async createSession(session: CreateSessionInput): Promise<Session> {\n        const dbSession = this.toDbSession(session);\n        const result = await this.sessionsTable.insert(dbSession).returning('id');\n        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]\n        const insertedId = result?.[0]?.id ?? result?.[0] ?? session.id;\n        const finalId = session.id ?? insertedId;\n        return { ...session, id: finalId } as Session;\n    }\n\n    async getSessionById(id: SessionId): Promise<Session | null> {\n        const row = await this.sessionsTable.where({ id }).first();\n        return row ? this.fromDbSession(row) : null;\n    }\n\n    async getSessionsByUserId(userId: UserId): Promise<Session[]> {\n        const rows = await this.sessionsTable.where({ user_id: userId });\n        return rows.map((row: Record<string, unknown>) => this.fromDbSession(row));\n    }\n\n    async updateSession(id: SessionId, updates: Partial<Session>): Promise<void> {\n        const dbUpdates = this.toDbSessionUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.sessionsTable.where({ id }).update(dbUpdates);\n    }\n\n    async deleteSession(id: SessionId): Promise<void> {\n        await this.sessionsTable.where({ id }).delete();\n    }\n\n    async deleteAllUserSessions(userId: UserId): Promise<void> {\n        await this.sessionsTable.where({ user_id: userId }).delete();\n    }\n\n    async deleteExpiredSessions(): Promise<void> {\n        const now = new Date().toISOString();\n        await this.sessionsTable.where('expires_at', '<', now).delete();\n    }\n\n    // ==================== User Mapping Helpers ====================\n\n    /**\n     * Safely convert a DB date value (Date object or string) to ISO 8601 string\n     */\n    private toDateString(value: unknown): string {\n        if (value instanceof Date) return value.toISOString();\n        return String(value);\n    }\n\n    /**\n     * Convert User object to database row format (snake_case).\n     * Meta fields are flattened as individual snake_case columns.\n     */\n    private toDbUser(user: CreateUserInput<Meta>): Record<string, unknown> {\n        const now = new Date().toISOString();\n        const row: Record<string, unknown> = {\n\n            email: user.email,\n            first_name: user.firstName ?? null,\n            last_name: user.lastName ?? null,\n            password_hash: user.passwordHash,\n            roles: JSON.stringify(user.roles),\n            is_email_verified: user.isEmailVerified ? 1 : 0,\n            verification_token: user.verificationToken ?? null,\n            reset_password_token: user.resetPasswordToken ?? null,\n            reset_password_expires: user.resetPasswordExpires ?? null,\n            created_at: user.createdAt ?? now,\n            updated_at: user.updatedAt ?? now,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (user.id !== undefined) {\n            row.id = user.id;\n        }\n        // Flatten meta fields as individual snake_case columns\n        if (user.meta) {\n            for (const [key, value] of Object.entries(user.meta)) {\n                row[camelToSnake(key)] = value;\n            }\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to User object (camelCase).\n     * Non-core columns are gathered into the typed `meta` object.\n     */\n    private fromDbUser(row: Record<string, unknown>): User<Meta> {\n        const meta: Record<string, unknown> = {};\n        for (const [key, value] of Object.entries(row)) {\n            if (!CORE_USER_DB_FIELDS.has(key)) {\n                meta[snakeToCamel(key)] = value;\n            }\n        }\n\n        return {\n            id: row.id as string | number,\n            email: row.email as string,\n            firstName: row.first_name as string | undefined,\n            lastName: row.last_name as string | undefined,\n            passwordHash: row.password_hash as string,\n            roles: typeof row.roles === 'string' ? JSON.parse(row.roles) : row.roles,\n            isEmailVerified: Boolean(row.is_email_verified),\n            verificationToken: row.verification_token as string | undefined,\n            resetPasswordToken: row.reset_password_token as string | undefined,\n            resetPasswordExpires: row.reset_password_expires\n                ? this.toDateString(row.reset_password_expires)\n                : undefined,\n            createdAt: this.toDateString(row.created_at),\n            updatedAt: this.toDateString(row.updated_at),\n            ...(Object.keys(meta).length > 0 ? { meta: meta as Meta } : {}),\n        } as User<Meta>;\n    }\n\n    /**\n     * Convert partial User updates to database format.\n     * Meta fields in updates are flattened as individual snake_case columns.\n     */\n    private toDbUpdates(updates: Partial<User<Meta>>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.email !== undefined) {\n            dbUpdates.email = updates.email;\n        }\n        if ('firstName' in updates) {\n            dbUpdates.first_name = updates.firstName ?? null;\n        }\n        if ('lastName' in updates) {\n            dbUpdates.last_name = updates.lastName ?? null;\n        }\n        if (updates.passwordHash !== undefined) {\n            dbUpdates.password_hash = updates.passwordHash;\n        }\n        if (updates.roles !== undefined) {\n            dbUpdates.roles = JSON.stringify(updates.roles);\n        }\n        if (updates.isEmailVerified !== undefined) {\n            dbUpdates.is_email_verified = updates.isEmailVerified ? 1 : 0;\n        }\n        if ('verificationToken' in updates) {\n            dbUpdates.verification_token = updates.verificationToken ?? null;\n        }\n        if ('resetPasswordToken' in updates) {\n            dbUpdates.reset_password_token = updates.resetPasswordToken ?? null;\n        }\n        if ('resetPasswordExpires' in updates) {\n            dbUpdates.reset_password_expires = updates.resetPasswordExpires ?? null;\n        }\n        if (updates.updatedAt !== undefined) {\n            dbUpdates.updated_at = updates.updatedAt;\n        }\n        // Flatten meta fields as individual snake_case columns\n        if (updates.meta) {\n            for (const [key, value] of Object.entries(updates.meta)) {\n                dbUpdates[camelToSnake(key)] = value;\n            }\n        }\n\n        return dbUpdates;\n    }\n\n    // ==================== Session Mapping Helpers ====================\n\n    /**\n     * Convert Session object to database row format (snake_case)\n     */\n    private toDbSession(session: CreateSessionInput): Record<string, unknown> {\n        const row: Record<string, unknown> = {\n            user_id: session.userId,\n            refresh_token_hash: session.refreshTokenHash,\n            user_agent: session.userAgent ?? null,\n            ip_address: session.ipAddress ?? null,\n            device_name: session.deviceName ?? null,\n            created_at: session.createdAt,\n            last_used_at: session.lastUsedAt,\n            expires_at: session.expiresAt,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (session.id !== undefined) {\n            row.id = session.id;\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to Session object (camelCase)\n     */\n    private fromDbSession(row: Record<string, unknown>): Session {\n        return {\n            id: row.id as string | number,\n            userId: row.user_id as string | number,\n            refreshTokenHash: row.refresh_token_hash as string,\n            userAgent: row.user_agent as string | undefined,\n            ipAddress: row.ip_address as string | undefined,\n            deviceName: row.device_name as string | undefined,\n            createdAt: this.toDateString(row.created_at),\n            lastUsedAt: this.toDateString(row.last_used_at),\n            expiresAt: this.toDateString(row.expires_at),\n        };\n    }\n\n    /**\n     * Convert partial Session updates to database format\n     */\n    private toDbSessionUpdates(updates: Partial<Session>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.refreshTokenHash !== undefined) {\n            dbUpdates.refresh_token_hash = updates.refreshTokenHash;\n        }\n        if ('userAgent' in updates) {\n            dbUpdates.user_agent = updates.userAgent ?? null;\n        }\n        if ('ipAddress' in updates) {\n            dbUpdates.ip_address = updates.ipAddress ?? null;\n        }\n        if ('deviceName' in updates) {\n            dbUpdates.device_name = updates.deviceName ?? null;\n        }\n        if (updates.lastUsedAt !== undefined) {\n            dbUpdates.last_used_at = updates.lastUsedAt;\n        }\n        if (updates.expiresAt !== undefined) {\n            dbUpdates.expires_at = updates.expiresAt;\n        }\n\n        return dbUpdates;\n    }\n}\n","import type { Knex } from 'knex';\n\n/**\n * SQL migration helper to create the users table\n * Can be used with Knex migrations\n *\n * @param knex - Knex instance\n * @param tableName - Table name for users\n * @param schemaOrCustomColumns - Optional schema name (for PostgreSQL) or callback to add custom columns\n * @param customColumns - Optional callback to add custom columns to the table (when schema is provided)\n *\n * @example\n * ```ts\n * // In your migration file\n * import { createUsersTableMigration, createSessionsTableMigration } from '@xcelsior/auth-adapter-knex';\n *\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users');\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * // With custom meta columns\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users', (table) => {\n *     table.string('phone').nullable();\n *     table.string('company').nullable();\n *   });\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * // With schema and custom meta columns\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users', 'my_schema', (table) => {\n *     table.string('phone').nullable();\n *     table.string('company').nullable();\n *   });\n * }\n *\n * export async function down(knex: Knex): Promise<void> {\n *   await knex.schema.dropTableIfExists('sessions');\n *   await knex.schema.dropTableIfExists('users');\n * }\n * ```\n */\nexport async function createUsersTableMigration(\n    knex: Knex,\n    tableName: string,\n    schemaOrCustomColumns?: string | ((table: Knex.CreateTableBuilder) => void),\n    customColumns?: (table: Knex.CreateTableBuilder) => void\n): Promise<void> {\n    const schema = typeof schemaOrCustomColumns === 'string' ? schemaOrCustomColumns : undefined;\n    const addCustomColumns =\n        typeof schemaOrCustomColumns === 'function' ? schemaOrCustomColumns : customColumns;\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('email').notNullable().unique();\n        table.string('first_name').nullable();\n        table.string('last_name').nullable();\n        table.string('password_hash').notNullable();\n        table.jsonb('roles').notNullable();\n        table.boolean('is_email_verified').notNullable().defaultTo(false);\n        table.string('verification_token').nullable();\n        table.string('reset_password_token').nullable();\n        table.timestamp('reset_password_expires', { useTz: true }).nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('updated_at', { useTz: true }).notNullable();\n\n        // Indexes for common lookups\n        table.index('email');\n        table.index('verification_token');\n        table.index('reset_password_token');\n\n        // Add custom meta columns if provided\n        if (addCustomColumns) {\n            addCustomColumns(table);\n        }\n    });\n}\n\n/**\n * SQL migration helper to create the sessions table\n * Can be used with Knex migrations\n */\nexport async function createSessionsTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('user_id').notNullable();\n        table.string('refresh_token_hash').notNullable();\n        table.string('user_agent').nullable();\n        table.string('ip_address').nullable();\n        table.string('device_name').nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('last_used_at', { useTz: true }).notNullable();\n        table.timestamp('expires_at', { useTz: true }).notNullable();\n\n        // Index for querying sessions by user\n        table.index('user_id');\n        // Index for cleaning up expired sessions\n        table.index('expires_at');\n    });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACgBA,SAAS,aAAa,KAAqB;AACvC,SAAO,IAAI,QAAQ,UAAU,CAAC,WAAW,IAAI,OAAO,YAAY,CAAC,EAAE;AACvE;AAGA,SAAS,aAAa,KAAqB;AACvC,SAAO,IAAI,QAAQ,aAAa,CAAC,GAAG,WAAW,OAAO,YAAY,CAAC;AACvE;AAGA,IAAM,sBAAsB,oBAAI,IAAI;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACJ,CAAC;AAaM,IAAM,sBAAN,MAEP;AAAA,EAMI,YAAY,QAAoB;AAC5B,SAAK,OAAO,OAAO;AACnB,SAAK,YAAY,OAAO;AACxB,SAAK,oBAAoB,OAAO;AAChC,SAAK,SAAS,OAAO;AAAA,EACzB;AAAA,EAEA,IAAY,QAAQ;AAChB,UAAM,QAAQ,KAAK,KAAK,KAAK,SAAS;AACtC,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA,EAEA,IAAY,gBAAgB;AACxB,UAAM,QAAQ,KAAK,KAAK,KAAK,iBAAiB;AAC9C,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA;AAAA,EAIA,MAAM,WAAW,MAAkD;AAC/D,UAAM,SAAS,KAAK,SAAS,IAAI;AACjC,UAAM,SAAS,MAAM,KAAK,MAAM,OAAO,MAAM,EAAE,UAAU,IAAI;AAE7D,UAAM,aAAa,SAAS,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,KAAK;AAC1D,UAAM,UAAU,KAAK,MAAM;AAC3B,WAAO,EAAE,GAAG,MAAM,IAAI,QAAQ;AAAA,EAClC;AAAA,EAEA,MAAM,YAAY,IAAwC;AACtD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACjD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,eAAe,OAA2C;AAC5D,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;AACpD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,4BAA4B,oBAAwD;AACtF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,sBAAsB,mBAAmB,CAAC,EAAE,MAAM;AACvF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,0BAA0B,kBAAsD;AAClF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,oBAAoB,iBAAiB,CAAC,EAAE,MAAM;AACnF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,WAAW,IAAY,SAA6C;AACtE,UAAM,YAAY,KAAK,YAAY,OAAO;AAE1C,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EACnD;AAAA,EAEA,MAAM,WAAW,IAA2B;AAExC,UAAM,KAAK,sBAAsB,EAAE;AAEnC,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAC1C;AAAA,EAEA,MAAM,UAAU,QAAoB,UAA4B,CAAC,GAAmC;AAChG,UAAM,QAAQ,QAAQ,SAAS;AAE/B,QAAI,QAAQ,KAAK,MAAM,MAAM;AAG7B,QAAI,OAAO,OAAO;AACd,cAAQ,MAAM,MAAM,SAAS,OAAO,KAAK;AAAA,IAC7C;AAGA,QAAI,OAAO,eAAe;AACtB,cAAQ,MAAM,MAAM,SAAS,QAAQ,IAAI,OAAO,aAAa,GAAG;AAAA,IACpE;AAGA,QAAI,OAAO,oBAAoB,QAAW;AACtC,cAAQ,MAAM,MAAM,qBAAqB,OAAO,eAAe;AAAA,IACnE;AAGA,QAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AACzC,iBAAW,QAAQ,OAAO,OAAO;AAG7B,gBAAQ,MAAM;AAAA,UACV,KAAK,KAAK,OAAO,OAAO,WAAW,YAAY,iBAAiB;AAAA,UAChE,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,QACjC;AAAA,MACJ;AAAA,IACJ;AAGA,QAAI,OAAO,cAAc,OAAO,WAAW,SAAS,GAAG;AACnD,cAAQ,MAAM,MAAM,CAAC,YAA+B;AAChD,mBAAW,QAAQ,OAAO,YAAa;AACnC,kBAAQ;AAAA,YACJ,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,iBACA;AAAA,YACN,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,UACjC;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAGA,QAAI,QAAQ,QAAQ;AAChB,YAAM,aAAa,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE,SAAS,CAAC;AAC9E,cAAQ,MAAM,MAAM,MAAM,KAAK,WAAW,MAAM;AAAA,IACpD;AAGA,YAAQ,MAAM,QAAQ,MAAM,KAAK,EAAE,MAAM,QAAQ,CAAC;AAElD,UAAM,OAAO,MAAM;AACnB,UAAM,UAAU,KAAK,SAAS;AAC9B,UAAM,aAAa,UAAU,KAAK,MAAM,GAAG,KAAK,IAAI;AACpD,UAAM,QAAQ,WAAW,IAAI,CAAC,QAAiC,KAAK,WAAW,GAAG,CAAC;AAEnF,QAAI;AACJ,QAAI,WAAW,WAAW,SAAS,GAAG;AAClC,YAAM,WAAW,WAAW,WAAW,SAAS,CAAC;AACjD,mBAAa,OAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,SAAS,GAAG,CAAC,CAAC,EAAE,SAAS,QAAQ;AAAA,IACvF;AAEA,WAAO,EAAE,OAAO,WAAW;AAAA,EAC/B;AAAA;AAAA,EAIA,MAAM,cAAc,SAA+C;AAC/D,UAAM,YAAY,KAAK,YAAY,OAAO;AAC1C,UAAM,SAAS,MAAM,KAAK,cAAc,OAAO,SAAS,EAAE,UAAU,IAAI;AAExE,UAAM,aAAa,SAAS,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,QAAQ;AAC7D,UAAM,UAAU,QAAQ,MAAM;AAC9B,WAAO,EAAE,GAAG,SAAS,IAAI,QAAQ;AAAA,EACrC;AAAA,EAEA,MAAM,eAAe,IAAwC;AACzD,UAAM,MAAM,MAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACzD,WAAO,MAAM,KAAK,cAAc,GAAG,IAAI;AAAA,EAC3C;AAAA,EAEA,MAAM,oBAAoB,QAAoC;AAC1D,UAAM,OAAO,MAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC;AAC/D,WAAO,KAAK,IAAI,CAAC,QAAiC,KAAK,cAAc,GAAG,CAAC;AAAA,EAC7E;AAAA,EAEA,MAAM,cAAc,IAAe,SAA0C;AACzE,UAAM,YAAY,KAAK,mBAAmB,OAAO;AAEjD,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EAC3D;AAAA,EAEA,MAAM,cAAc,IAA8B;AAC9C,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAClD;AAAA,EAEA,MAAM,sBAAsB,QAA+B;AACvD,UAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC,EAAE,OAAO;AAAA,EAC/D;AAAA,EAEA,MAAM,wBAAuC;AACzC,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,KAAK,cAAc,MAAM,cAAc,KAAK,GAAG,EAAE,OAAO;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,aAAa,OAAwB;AACzC,QAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,WAAO,OAAO,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,SAAS,MAAsD;AACnE,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,MAA+B;AAAA,MAEjC,OAAO,KAAK;AAAA,MACZ,YAAY,KAAK,aAAa;AAAA,MAC9B,WAAW,KAAK,YAAY;AAAA,MAC5B,eAAe,KAAK;AAAA,MACpB,OAAO,KAAK,UAAU,KAAK,KAAK;AAAA,MAChC,mBAAmB,KAAK,kBAAkB,IAAI;AAAA,MAC9C,oBAAoB,KAAK,qBAAqB;AAAA,MAC9C,sBAAsB,KAAK,sBAAsB;AAAA,MACjD,wBAAwB,KAAK,wBAAwB;AAAA,MACrD,YAAY,KAAK,aAAa;AAAA,MAC9B,YAAY,KAAK,aAAa;AAAA,IAClC;AAGA,QAAI,KAAK,OAAO,QAAW;AACvB,UAAI,KAAK,KAAK;AAAA,IAClB;AAEA,QAAI,KAAK,MAAM;AACX,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,IAAI,GAAG;AAClD,YAAI,aAAa,GAAG,CAAC,IAAI;AAAA,MAC7B;AAAA,IACJ;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,WAAW,KAA0C;AACzD,UAAM,OAAgC,CAAC;AACvC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC5C,UAAI,CAAC,oBAAoB,IAAI,GAAG,GAAG;AAC/B,aAAK,aAAa,GAAG,CAAC,IAAI;AAAA,MAC9B;AAAA,IACJ;AAEA,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,OAAO,IAAI;AAAA,MACX,WAAW,IAAI;AAAA,MACf,UAAU,IAAI;AAAA,MACd,cAAc,IAAI;AAAA,MAClB,OAAO,OAAO,IAAI,UAAU,WAAW,KAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAAA,MACnE,iBAAiB,QAAQ,IAAI,iBAAiB;AAAA,MAC9C,mBAAmB,IAAI;AAAA,MACvB,oBAAoB,IAAI;AAAA,MACxB,sBAAsB,IAAI,yBACpB,KAAK,aAAa,IAAI,sBAAsB,IAC5C;AAAA,MACN,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,GAAI,OAAO,KAAK,IAAI,EAAE,SAAS,IAAI,EAAE,KAAmB,IAAI,CAAC;AAAA,IACjE;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,YAAY,SAAuD;AACvE,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,QAAQ;AAAA,IAC9B;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,cAAc,SAAS;AACvB,gBAAU,YAAY,QAAQ,YAAY;AAAA,IAC9C;AACA,QAAI,QAAQ,iBAAiB,QAAW;AACpC,gBAAU,gBAAgB,QAAQ;AAAA,IACtC;AACA,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,KAAK,UAAU,QAAQ,KAAK;AAAA,IAClD;AACA,QAAI,QAAQ,oBAAoB,QAAW;AACvC,gBAAU,oBAAoB,QAAQ,kBAAkB,IAAI;AAAA,IAChE;AACA,QAAI,uBAAuB,SAAS;AAChC,gBAAU,qBAAqB,QAAQ,qBAAqB;AAAA,IAChE;AACA,QAAI,wBAAwB,SAAS;AACjC,gBAAU,uBAAuB,QAAQ,sBAAsB;AAAA,IACnE;AACA,QAAI,0BAA0B,SAAS;AACnC,gBAAU,yBAAyB,QAAQ,wBAAwB;AAAA,IACvE;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,QAAI,QAAQ,MAAM;AACd,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,IAAI,GAAG;AACrD,kBAAU,aAAa,GAAG,CAAC,IAAI;AAAA,MACnC;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,YAAY,SAAsD;AACtE,UAAM,MAA+B;AAAA,MACjC,SAAS,QAAQ;AAAA,MACjB,oBAAoB,QAAQ;AAAA,MAC5B,YAAY,QAAQ,aAAa;AAAA,MACjC,YAAY,QAAQ,aAAa;AAAA,MACjC,aAAa,QAAQ,cAAc;AAAA,MACnC,YAAY,QAAQ;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,IACxB;AAGA,QAAI,QAAQ,OAAO,QAAW;AAC1B,UAAI,KAAK,QAAQ;AAAA,IACrB;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAc,KAAuC;AACzD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,kBAAkB,IAAI;AAAA,MACtB,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,YAAY,KAAK,aAAa,IAAI,YAAY;AAAA,MAC9C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,IAC/C;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,mBAAmB,SAAoD;AAC3E,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,qBAAqB,QAAW;AACxC,gBAAU,qBAAqB,QAAQ;AAAA,IAC3C;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,gBAAgB,SAAS;AACzB,gBAAU,cAAc,QAAQ,cAAc;AAAA,IAClD;AACA,QAAI,QAAQ,eAAe,QAAW;AAClC,gBAAU,eAAe,QAAQ;AAAA,IACrC;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AACJ;;;AC1YA,eAAsB,0BAClB,MACA,WACA,uBACA,eACa;AACb,QAAM,SAAS,OAAO,0BAA0B,WAAW,wBAAwB;AACnF,QAAM,mBACF,OAAO,0BAA0B,aAAa,wBAAwB;AAC1E,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,OAAO,EAAE,YAAY,EAAE,OAAO;AAC3C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,WAAW,EAAE,SAAS;AACnC,UAAM,OAAO,eAAe,EAAE,YAAY;AAC1C,UAAM,MAAM,OAAO,EAAE,YAAY;AACjC,UAAM,QAAQ,mBAAmB,EAAE,YAAY,EAAE,UAAU,KAAK;AAChE,UAAM,OAAO,oBAAoB,EAAE,SAAS;AAC5C,UAAM,OAAO,sBAAsB,EAAE,SAAS;AAC9C,UAAM,UAAU,0BAA0B,EAAE,OAAO,KAAK,CAAC,EAAE,SAAS;AACpE,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,OAAO;AACnB,UAAM,MAAM,oBAAoB;AAChC,UAAM,MAAM,sBAAsB;AAGlC,QAAI,kBAAkB;AAClB,uBAAiB,KAAK;AAAA,IAC1B;AAAA,EACJ,CAAC;AACL;AAMA,eAAsB,6BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,SAAS,EAAE,YAAY;AACpC,UAAM,OAAO,oBAAoB,EAAE,YAAY;AAC/C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,aAAa,EAAE,SAAS;AACrC,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,gBAAgB,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC7D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,SAAS;AAErB,UAAM,MAAM,YAAY;AAAA,EAC5B,CAAC;AACL;","names":[]}
+{"version":3,"sources":["../src/index.ts","../src/knex.ts","../src/migration.ts"],"sourcesContent":["export { KnexStorageProvider, type KnexConfig } from './knex';\nexport { createUsersTableMigration, createSessionsTableMigration } from './migration';\n","import type { Knex } from 'knex';\nimport type {\n    CreateSessionInput,\n    CreateUserInput,\n    FindUsersOptions,\n    FindUsersResult,\n    IStorageProvider,\n    Session,\n    SessionId,\n    User,\n    UserFilter,\n    UserId,\n    UserMeta,\n    SessionMeta,\n} from '@xcelsior/auth';\n\n/** Convert camelCase string to snake_case */\nfunction camelToSnake(str: string): string {\n    return str.replace(/[A-Z]/g, (letter) => `_${letter.toLowerCase()}`);\n}\n\n/** Convert snake_case string to camelCase */\nfunction snakeToCamel(str: string): string {\n    return str.replace(/_([a-z])/g, (_, letter) => letter.toUpperCase());\n}\n\n/** Core user DB columns that are not part of meta */\nconst CORE_USER_DB_FIELDS = new Set([\n    'id',\n    'email',\n    'first_name',\n    'last_name',\n    'password_hash',\n    'roles',\n    'is_email_verified',\n    'verification_token',\n    'reset_password_token',\n    'reset_password_expires',\n    'created_at',\n    'updated_at',\n]);\n\n/** Core session DB columns that are not part of meta */\nconst CORE_SESSION_DB_FIELDS = new Set([\n    'id',\n    'user_id',\n    'refresh_token_hash',\n    'user_agent',\n    'ip_address',\n    'device_name',\n    'created_at',\n    'last_used_at',\n    'expires_at',\n]);\n\nexport interface KnexConfig {\n    /** Pre-configured Knex instance */\n    knex: Knex;\n    /** Table name for users */\n    tableName: string;\n    /** Table name for sessions */\n    sessionsTableName: string;\n    /** Optional schema (for PostgreSQL) */\n    schema?: string;\n}\n\nexport class KnexStorageProvider<\n    Meta extends UserMeta = Record<string, any>,\n    SMeta extends SessionMeta = Record<string, any>,\n> implements IStorageProvider<Meta, SMeta>\n{\n    private knex: Knex;\n    private tableName: string;\n    private sessionsTableName: string;\n    private schema?: string;\n\n    constructor(config: KnexConfig) {\n        this.knex = config.knex;\n        this.tableName = config.tableName;\n        this.sessionsTableName = config.sessionsTableName;\n        this.schema = config.schema;\n    }\n\n    private get table() {\n        const query = this.knex(this.tableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    private get sessionsTable() {\n        const query = this.knex(this.sessionsTableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    // ==================== User Methods ====================\n\n    async createUser(user: CreateUserInput<Meta>): Promise<User<Meta>> {\n        const dbUser = this.toDbUser(user);\n        const result = await this.table.insert(dbUser).returning('id');\n        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]\n        const insertedId = result?.[0]?.id ?? result?.[0] ?? user.id;\n        const finalId = user.id ?? insertedId;\n        return { ...user, id: finalId } as User<Meta>;\n    }\n\n    async getUserById(id: UserId): Promise<User<Meta> | null> {\n        const row = await this.table.where({ id }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByEmail(email: string): Promise<User<Meta> | null> {\n        const row = await this.table.where({ email }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User<Meta> | null> {\n        const row = await this.table.where({ reset_password_token: resetPasswordToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User<Meta> | null> {\n        const row = await this.table.where({ verification_token: verifyEmailToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async updateUser(id: UserId, updates: Partial<User<Meta>>): Promise<void> {\n        const dbUpdates = this.toDbUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.table.where({ id }).update(dbUpdates);\n    }\n\n    async deleteUser(id: UserId): Promise<void> {\n        // Delete all user sessions first\n        await this.deleteAllUserSessions(id);\n        // Then delete the user\n        await this.table.where({ id }).delete();\n    }\n\n    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult<Meta>> {\n        const limit = options.limit ?? 50;\n\n        let query = this.table.clone();\n\n        // Email exact match\n        if (filter.email) {\n            query = query.where('email', filter.email);\n        }\n\n        // Email contains (partial match)\n        if (filter.emailContains) {\n            query = query.where('email', 'like', `%${filter.emailContains}%`);\n        }\n\n        // Email verification status\n        if (filter.isEmailVerified !== undefined) {\n            query = query.where('is_email_verified', filter.isEmailVerified);\n        }\n\n        // Roles filtering - user must have ALL specified roles\n        if (filter.roles && filter.roles.length > 0) {\n            for (const role of filter.roles) {\n                // Use JSON contains - works for PostgreSQL (jsonb) and MySQL (json)\n                // For SQLite, we fall back to LIKE on the JSON string\n                query = query.whereRaw(\n                    this.knex.client.config.client === 'sqlite3' ? `roles LIKE ?` : `roles @> ?`,\n                    this.knex.client.config.client === 'sqlite3'\n                        ? [`%\"${role}\"%`]\n                        : [JSON.stringify([role])]\n                );\n            }\n        }\n\n        // HasAnyRole - user must have at least ONE of specified roles\n        if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {\n            query = query.where((builder: Knex.QueryBuilder) => {\n                for (const role of filter.hasAnyRole!) {\n                    builder.orWhereRaw(\n                        this.knex.client.config.client === 'sqlite3'\n                            ? `roles LIKE ?`\n                            : `roles @> ?`,\n                        this.knex.client.config.client === 'sqlite3'\n                            ? [`%\"${role}\"%`]\n                            : [JSON.stringify([role])]\n                    );\n                }\n            });\n        }\n\n        // Apply pagination\n        if (options.cursor) {\n            const cursorData = JSON.parse(Buffer.from(options.cursor, 'base64').toString());\n            query = query.where('id', '>', cursorData.lastId);\n        }\n\n        // Order by id for consistent pagination\n        query = query.orderBy('id', 'asc').limit(limit + 1);\n\n        const rows = await query;\n        const hasMore = rows.length > limit;\n        const resultRows = hasMore ? rows.slice(0, limit) : rows;\n        const users = resultRows.map((row: Record<string, unknown>) => this.fromDbUser(row));\n\n        let nextCursor: string | undefined;\n        if (hasMore && resultRows.length > 0) {\n            const lastUser = resultRows[resultRows.length - 1];\n            nextCursor = Buffer.from(JSON.stringify({ lastId: lastUser.id })).toString('base64');\n        }\n\n        return { users, nextCursor } as FindUsersResult<Meta>;\n    }\n\n    // ==================== Session Methods ====================\n\n    async createSession(session: CreateSessionInput<SMeta>): Promise<Session<SMeta>> {\n        const dbSession = this.toDbSession(session);\n        const result = await this.sessionsTable.insert(dbSession).returning('id');\n        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]\n        const insertedId = result?.[0]?.id ?? result?.[0] ?? session.id;\n        const finalId = session.id ?? insertedId;\n        return { ...session, id: finalId } as Session<SMeta>;\n    }\n\n    async getSessionById(id: SessionId): Promise<Session<SMeta> | null> {\n        const row = await this.sessionsTable.where({ id }).first();\n        return row ? this.fromDbSession(row) : null;\n    }\n\n    async getSessionsByUserId(userId: UserId): Promise<Session<SMeta>[]> {\n        const rows = await this.sessionsTable.where({ user_id: userId });\n        return rows.map((row: Record<string, unknown>) => this.fromDbSession(row));\n    }\n\n    async updateSession(id: SessionId, updates: Partial<Session<SMeta>> & Record<string, unknown>): Promise<void> {\n        const dbUpdates = this.toDbSessionUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.sessionsTable.where({ id }).update(dbUpdates);\n    }\n\n    async deleteSession(id: SessionId): Promise<void> {\n        await this.sessionsTable.where({ id }).delete();\n    }\n\n    async deleteAllUserSessions(userId: UserId): Promise<void> {\n        await this.sessionsTable.where({ user_id: userId }).delete();\n    }\n\n    async deleteExpiredSessions(): Promise<void> {\n        const now = new Date().toISOString();\n        await this.sessionsTable.where('expires_at', '<', now).delete();\n    }\n\n    // ==================== User Mapping Helpers ====================\n\n    /**\n     * Safely convert a DB date value (Date object or string) to ISO 8601 string\n     */\n    private toDateString(value: unknown): string {\n        if (value instanceof Date) return value.toISOString();\n        return String(value);\n    }\n\n    /**\n     * Convert User object to database row format (snake_case).\n     * Meta fields are flattened as individual snake_case columns.\n     */\n    private toDbUser(user: CreateUserInput<Meta>): Record<string, unknown> {\n        const now = new Date().toISOString();\n        const row: Record<string, unknown> = {\n\n            email: user.email,\n            first_name: user.firstName ?? null,\n            last_name: user.lastName ?? null,\n            password_hash: user.passwordHash,\n            roles: JSON.stringify(user.roles),\n            is_email_verified: user.isEmailVerified ? 1 : 0,\n            verification_token: user.verificationToken ?? null,\n            reset_password_token: user.resetPasswordToken ?? null,\n            reset_password_expires: user.resetPasswordExpires ?? null,\n            created_at: user.createdAt ?? now,\n            updated_at: user.updatedAt ?? now,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (user.id !== undefined) {\n            row.id = user.id;\n        }\n        // Flatten meta fields as individual snake_case columns\n        if (user.meta) {\n            for (const [key, value] of Object.entries(user.meta)) {\n                row[camelToSnake(key)] = value;\n            }\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to User object (camelCase).\n     * Non-core columns are gathered into the typed `meta` object.\n     */\n    private fromDbUser(row: Record<string, unknown>): User<Meta> {\n        const meta: Record<string, unknown> = {};\n        for (const [key, value] of Object.entries(row)) {\n            if (!CORE_USER_DB_FIELDS.has(key)) {\n                meta[snakeToCamel(key)] = value;\n            }\n        }\n\n        return {\n            id: row.id as string | number,\n            email: row.email as string,\n            firstName: row.first_name as string | undefined,\n            lastName: row.last_name as string | undefined,\n            passwordHash: row.password_hash as string,\n            roles: typeof row.roles === 'string' ? JSON.parse(row.roles) : row.roles,\n            isEmailVerified: Boolean(row.is_email_verified),\n            verificationToken: row.verification_token as string | undefined,\n            resetPasswordToken: row.reset_password_token as string | undefined,\n            resetPasswordExpires: row.reset_password_expires\n                ? this.toDateString(row.reset_password_expires)\n                : undefined,\n            createdAt: this.toDateString(row.created_at),\n            updatedAt: this.toDateString(row.updated_at),\n            ...(Object.keys(meta).length > 0 ? { meta: meta as Meta } : {}),\n        } as User<Meta>;\n    }\n\n    /**\n     * Convert partial User updates to database format.\n     * Meta fields in updates are flattened as individual snake_case columns.\n     */\n    private toDbUpdates(updates: Partial<User<Meta>>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.email !== undefined) {\n            dbUpdates.email = updates.email;\n        }\n        if ('firstName' in updates) {\n            dbUpdates.first_name = updates.firstName ?? null;\n        }\n        if ('lastName' in updates) {\n            dbUpdates.last_name = updates.lastName ?? null;\n        }\n        if (updates.passwordHash !== undefined) {\n            dbUpdates.password_hash = updates.passwordHash;\n        }\n        if (updates.roles !== undefined) {\n            dbUpdates.roles = JSON.stringify(updates.roles);\n        }\n        if (updates.isEmailVerified !== undefined) {\n            dbUpdates.is_email_verified = updates.isEmailVerified ? 1 : 0;\n        }\n        if ('verificationToken' in updates) {\n            dbUpdates.verification_token = updates.verificationToken ?? null;\n        }\n        if ('resetPasswordToken' in updates) {\n            dbUpdates.reset_password_token = updates.resetPasswordToken ?? null;\n        }\n        if ('resetPasswordExpires' in updates) {\n            dbUpdates.reset_password_expires = updates.resetPasswordExpires ?? null;\n        }\n        if (updates.updatedAt !== undefined) {\n            dbUpdates.updated_at = updates.updatedAt;\n        }\n        // Flatten meta fields as individual snake_case columns\n        if (updates.meta) {\n            for (const [key, value] of Object.entries(updates.meta)) {\n                dbUpdates[camelToSnake(key)] = value;\n            }\n        }\n\n        return dbUpdates;\n    }\n\n    // ==================== Session Mapping Helpers ====================\n\n    /**\n     * Convert Session object to database row format (snake_case).\n     * Meta fields are flattened as individual snake_case columns.\n     */\n    private toDbSession(session: CreateSessionInput<SMeta>): Record<string, unknown> {\n        const row: Record<string, unknown> = {\n            user_id: session.userId,\n            refresh_token_hash: session.refreshTokenHash,\n            user_agent: session.userAgent ?? null,\n            ip_address: session.ipAddress ?? null,\n            device_name: session.deviceName ?? null,\n            created_at: session.createdAt,\n            last_used_at: session.lastUsedAt,\n            expires_at: session.expiresAt,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (session.id !== undefined) {\n            row.id = session.id;\n        }\n        // Flatten meta fields as individual snake_case columns\n        if (session.meta) {\n            for (const [key, value] of Object.entries(session.meta)) {\n                row[camelToSnake(key)] = value;\n            }\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to Session object (camelCase).\n     * Non-core columns are gathered into the typed `meta` object.\n     */\n    private fromDbSession(row: Record<string, unknown>): Session<SMeta> {\n        const meta: Record<string, unknown> = {};\n        for (const [key, value] of Object.entries(row)) {\n            if (!CORE_SESSION_DB_FIELDS.has(key)) {\n                meta[snakeToCamel(key)] = value;\n            }\n        }\n\n        return {\n            id: row.id as string | number,\n            userId: row.user_id as string | number,\n            refreshTokenHash: row.refresh_token_hash as string,\n            userAgent: row.user_agent as string | undefined,\n            ipAddress: row.ip_address as string | undefined,\n            deviceName: row.device_name as string | undefined,\n            createdAt: this.toDateString(row.created_at),\n            lastUsedAt: this.toDateString(row.last_used_at),\n            expiresAt: this.toDateString(row.expires_at),\n            ...(Object.keys(meta).length > 0 ? { meta: meta as SMeta } : {}),\n        } as Session<SMeta>;\n    }\n\n    /**\n     * Convert partial Session updates to database format.\n     * Meta fields in updates are flattened as individual snake_case columns.\n     */\n    private toDbSessionUpdates(updates: Partial<Session<SMeta>> & Record<string, unknown>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.refreshTokenHash !== undefined) {\n            dbUpdates.refresh_token_hash = updates.refreshTokenHash;\n        }\n        if ('userAgent' in updates) {\n            dbUpdates.user_agent = updates.userAgent ?? null;\n        }\n        if ('ipAddress' in updates) {\n            dbUpdates.ip_address = updates.ipAddress ?? null;\n        }\n        if ('deviceName' in updates) {\n            dbUpdates.device_name = updates.deviceName ?? null;\n        }\n        if (updates.lastUsedAt !== undefined) {\n            dbUpdates.last_used_at = updates.lastUsedAt;\n        }\n        if (updates.expiresAt !== undefined) {\n            dbUpdates.expires_at = updates.expiresAt;\n        }\n        // Flatten meta fields as individual snake_case columns\n        if (updates.meta) {\n            for (const [key, value] of Object.entries(updates.meta)) {\n                dbUpdates[camelToSnake(key)] = value;\n            }\n        }\n\n        return dbUpdates;\n    }\n}\n","import type { Knex } from 'knex';\n\n/**\n * SQL migration helper to create the users table\n * Can be used with Knex migrations\n *\n * @param knex - Knex instance\n * @param tableName - Table name for users\n * @param schemaOrCustomColumns - Optional schema name (for PostgreSQL) or callback to add custom columns\n * @param customColumns - Optional callback to add custom columns to the table (when schema is provided)\n *\n * @example\n * ```ts\n * // In your migration file\n * import { createUsersTableMigration, createSessionsTableMigration } from '@xcelsior/auth-adapter-knex';\n *\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users');\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * // With custom meta columns\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users', (table) => {\n *     table.string('phone').nullable();\n *     table.string('company').nullable();\n *   });\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * // With schema and custom meta columns\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users', 'my_schema', (table) => {\n *     table.string('phone').nullable();\n *     table.string('company').nullable();\n *   });\n * }\n *\n * export async function down(knex: Knex): Promise<void> {\n *   await knex.schema.dropTableIfExists('sessions');\n *   await knex.schema.dropTableIfExists('users');\n * }\n * ```\n */\nexport async function createUsersTableMigration(\n    knex: Knex,\n    tableName: string,\n    schemaOrCustomColumns?: string | ((table: Knex.CreateTableBuilder) => void),\n    customColumns?: (table: Knex.CreateTableBuilder) => void\n): Promise<void> {\n    const schema = typeof schemaOrCustomColumns === 'string' ? schemaOrCustomColumns : undefined;\n    const addCustomColumns =\n        typeof schemaOrCustomColumns === 'function' ? schemaOrCustomColumns : customColumns;\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('email').notNullable().unique();\n        table.string('first_name').nullable();\n        table.string('last_name').nullable();\n        table.string('password_hash').notNullable();\n        table.jsonb('roles').notNullable();\n        table.boolean('is_email_verified').notNullable().defaultTo(false);\n        table.string('verification_token').nullable();\n        table.string('reset_password_token').nullable();\n        table.timestamp('reset_password_expires', { useTz: true }).nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('updated_at', { useTz: true }).notNullable();\n\n        // Indexes for common lookups\n        table.index('email');\n        table.index('verification_token');\n        table.index('reset_password_token');\n\n        // Add custom meta columns if provided\n        if (addCustomColumns) {\n            addCustomColumns(table);\n        }\n    });\n}\n\n/**\n * SQL migration helper to create the sessions table\n * Can be used with Knex migrations\n *\n * @param knex - Knex instance\n * @param tableName - Table name for sessions\n * @param schemaOrCustomColumns - Optional schema name (for PostgreSQL) or callback to add custom columns\n * @param customColumns - Optional callback to add custom columns to the table (when schema is provided)\n *\n * @example\n * ```ts\n * // With custom meta columns\n * await createSessionsTableMigration(knex, 'sessions', (table) => {\n *   table.string('organization_id').nullable();\n * });\n *\n * // With schema and custom meta columns\n * await createSessionsTableMigration(knex, 'sessions', 'my_schema', (table) => {\n *   table.string('organization_id').nullable();\n * });\n * ```\n */\nexport async function createSessionsTableMigration(\n    knex: Knex,\n    tableName: string,\n    schemaOrCustomColumns?: string | ((table: Knex.CreateTableBuilder) => void),\n    customColumns?: (table: Knex.CreateTableBuilder) => void\n): Promise<void> {\n    const schema = typeof schemaOrCustomColumns === 'string' ? schemaOrCustomColumns : undefined;\n    const addCustomColumns =\n        typeof schemaOrCustomColumns === 'function' ? schemaOrCustomColumns : customColumns;\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('user_id').notNullable();\n        table.string('refresh_token_hash').notNullable();\n        table.string('user_agent').nullable();\n        table.string('ip_address').nullable();\n        table.string('device_name').nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('last_used_at', { useTz: true }).notNullable();\n        table.timestamp('expires_at', { useTz: true }).notNullable();\n\n        // Index for querying sessions by user\n        table.index('user_id');\n        // Index for cleaning up expired sessions\n        table.index('expires_at');\n\n        // Add custom meta columns if provided\n        if (addCustomColumns) {\n            addCustomColumns(table);\n        }\n    });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACiBA,SAAS,aAAa,KAAqB;AACvC,SAAO,IAAI,QAAQ,UAAU,CAAC,WAAW,IAAI,OAAO,YAAY,CAAC,EAAE;AACvE;AAGA,SAAS,aAAa,KAAqB;AACvC,SAAO,IAAI,QAAQ,aAAa,CAAC,GAAG,WAAW,OAAO,YAAY,CAAC;AACvE;AAGA,IAAM,sBAAsB,oBAAI,IAAI;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACJ,CAAC;AAGD,IAAM,yBAAyB,oBAAI,IAAI;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACJ,CAAC;AAaM,IAAM,sBAAN,MAIP;AAAA,EAMI,YAAY,QAAoB;AAC5B,SAAK,OAAO,OAAO;AACnB,SAAK,YAAY,OAAO;AACxB,SAAK,oBAAoB,OAAO;AAChC,SAAK,SAAS,OAAO;AAAA,EACzB;AAAA,EAEA,IAAY,QAAQ;AAChB,UAAM,QAAQ,KAAK,KAAK,KAAK,SAAS;AACtC,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA,EAEA,IAAY,gBAAgB;AACxB,UAAM,QAAQ,KAAK,KAAK,KAAK,iBAAiB;AAC9C,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA;AAAA,EAIA,MAAM,WAAW,MAAkD;AAC/D,UAAM,SAAS,KAAK,SAAS,IAAI;AACjC,UAAM,SAAS,MAAM,KAAK,MAAM,OAAO,MAAM,EAAE,UAAU,IAAI;AAE7D,UAAM,aAAa,SAAS,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,KAAK;AAC1D,UAAM,UAAU,KAAK,MAAM;AAC3B,WAAO,EAAE,GAAG,MAAM,IAAI,QAAQ;AAAA,EAClC;AAAA,EAEA,MAAM,YAAY,IAAwC;AACtD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACjD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,eAAe,OAA2C;AAC5D,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;AACpD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,4BAA4B,oBAAwD;AACtF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,sBAAsB,mBAAmB,CAAC,EAAE,MAAM;AACvF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,0BAA0B,kBAAsD;AAClF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,oBAAoB,iBAAiB,CAAC,EAAE,MAAM;AACnF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,WAAW,IAAY,SAA6C;AACtE,UAAM,YAAY,KAAK,YAAY,OAAO;AAE1C,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EACnD;AAAA,EAEA,MAAM,WAAW,IAA2B;AAExC,UAAM,KAAK,sBAAsB,EAAE;AAEnC,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAC1C;AAAA,EAEA,MAAM,UAAU,QAAoB,UAA4B,CAAC,GAAmC;AAChG,UAAM,QAAQ,QAAQ,SAAS;AAE/B,QAAI,QAAQ,KAAK,MAAM,MAAM;AAG7B,QAAI,OAAO,OAAO;AACd,cAAQ,MAAM,MAAM,SAAS,OAAO,KAAK;AAAA,IAC7C;AAGA,QAAI,OAAO,eAAe;AACtB,cAAQ,MAAM,MAAM,SAAS,QAAQ,IAAI,OAAO,aAAa,GAAG;AAAA,IACpE;AAGA,QAAI,OAAO,oBAAoB,QAAW;AACtC,cAAQ,MAAM,MAAM,qBAAqB,OAAO,eAAe;AAAA,IACnE;AAGA,QAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AACzC,iBAAW,QAAQ,OAAO,OAAO;AAG7B,gBAAQ,MAAM;AAAA,UACV,KAAK,KAAK,OAAO,OAAO,WAAW,YAAY,iBAAiB;AAAA,UAChE,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,QACjC;AAAA,MACJ;AAAA,IACJ;AAGA,QAAI,OAAO,cAAc,OAAO,WAAW,SAAS,GAAG;AACnD,cAAQ,MAAM,MAAM,CAAC,YAA+B;AAChD,mBAAW,QAAQ,OAAO,YAAa;AACnC,kBAAQ;AAAA,YACJ,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,iBACA;AAAA,YACN,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,UACjC;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAGA,QAAI,QAAQ,QAAQ;AAChB,YAAM,aAAa,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE,SAAS,CAAC;AAC9E,cAAQ,MAAM,MAAM,MAAM,KAAK,WAAW,MAAM;AAAA,IACpD;AAGA,YAAQ,MAAM,QAAQ,MAAM,KAAK,EAAE,MAAM,QAAQ,CAAC;AAElD,UAAM,OAAO,MAAM;AACnB,UAAM,UAAU,KAAK,SAAS;AAC9B,UAAM,aAAa,UAAU,KAAK,MAAM,GAAG,KAAK,IAAI;AACpD,UAAM,QAAQ,WAAW,IAAI,CAAC,QAAiC,KAAK,WAAW,GAAG,CAAC;AAEnF,QAAI;AACJ,QAAI,WAAW,WAAW,SAAS,GAAG;AAClC,YAAM,WAAW,WAAW,WAAW,SAAS,CAAC;AACjD,mBAAa,OAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,SAAS,GAAG,CAAC,CAAC,EAAE,SAAS,QAAQ;AAAA,IACvF;AAEA,WAAO,EAAE,OAAO,WAAW;AAAA,EAC/B;AAAA;AAAA,EAIA,MAAM,cAAc,SAA6D;AAC7E,UAAM,YAAY,KAAK,YAAY,OAAO;AAC1C,UAAM,SAAS,MAAM,KAAK,cAAc,OAAO,SAAS,EAAE,UAAU,IAAI;AAExE,UAAM,aAAa,SAAS,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,QAAQ;AAC7D,UAAM,UAAU,QAAQ,MAAM;AAC9B,WAAO,EAAE,GAAG,SAAS,IAAI,QAAQ;AAAA,EACrC;AAAA,EAEA,MAAM,eAAe,IAA+C;AAChE,UAAM,MAAM,MAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACzD,WAAO,MAAM,KAAK,cAAc,GAAG,IAAI;AAAA,EAC3C;AAAA,EAEA,MAAM,oBAAoB,QAA2C;AACjE,UAAM,OAAO,MAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC;AAC/D,WAAO,KAAK,IAAI,CAAC,QAAiC,KAAK,cAAc,GAAG,CAAC;AAAA,EAC7E;AAAA,EAEA,MAAM,cAAc,IAAe,SAA2E;AAC1G,UAAM,YAAY,KAAK,mBAAmB,OAAO;AAEjD,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EAC3D;AAAA,EAEA,MAAM,cAAc,IAA8B;AAC9C,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAClD;AAAA,EAEA,MAAM,sBAAsB,QAA+B;AACvD,UAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC,EAAE,OAAO;AAAA,EAC/D;AAAA,EAEA,MAAM,wBAAuC;AACzC,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,KAAK,cAAc,MAAM,cAAc,KAAK,GAAG,EAAE,OAAO;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,aAAa,OAAwB;AACzC,QAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,WAAO,OAAO,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,SAAS,MAAsD;AACnE,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,MAA+B;AAAA,MAEjC,OAAO,KAAK;AAAA,MACZ,YAAY,KAAK,aAAa;AAAA,MAC9B,WAAW,KAAK,YAAY;AAAA,MAC5B,eAAe,KAAK;AAAA,MACpB,OAAO,KAAK,UAAU,KAAK,KAAK;AAAA,MAChC,mBAAmB,KAAK,kBAAkB,IAAI;AAAA,MAC9C,oBAAoB,KAAK,qBAAqB;AAAA,MAC9C,sBAAsB,KAAK,sBAAsB;AAAA,MACjD,wBAAwB,KAAK,wBAAwB;AAAA,MACrD,YAAY,KAAK,aAAa;AAAA,MAC9B,YAAY,KAAK,aAAa;AAAA,IAClC;AAGA,QAAI,KAAK,OAAO,QAAW;AACvB,UAAI,KAAK,KAAK;AAAA,IAClB;AAEA,QAAI,KAAK,MAAM;AACX,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,IAAI,GAAG;AAClD,YAAI,aAAa,GAAG,CAAC,IAAI;AAAA,MAC7B;AAAA,IACJ;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,WAAW,KAA0C;AACzD,UAAM,OAAgC,CAAC;AACvC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC5C,UAAI,CAAC,oBAAoB,IAAI,GAAG,GAAG;AAC/B,aAAK,aAAa,GAAG,CAAC,IAAI;AAAA,MAC9B;AAAA,IACJ;AAEA,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,OAAO,IAAI;AAAA,MACX,WAAW,IAAI;AAAA,MACf,UAAU,IAAI;AAAA,MACd,cAAc,IAAI;AAAA,MAClB,OAAO,OAAO,IAAI,UAAU,WAAW,KAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAAA,MACnE,iBAAiB,QAAQ,IAAI,iBAAiB;AAAA,MAC9C,mBAAmB,IAAI;AAAA,MACvB,oBAAoB,IAAI;AAAA,MACxB,sBAAsB,IAAI,yBACpB,KAAK,aAAa,IAAI,sBAAsB,IAC5C;AAAA,MACN,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,GAAI,OAAO,KAAK,IAAI,EAAE,SAAS,IAAI,EAAE,KAAmB,IAAI,CAAC;AAAA,IACjE;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,YAAY,SAAuD;AACvE,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,QAAQ;AAAA,IAC9B;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,cAAc,SAAS;AACvB,gBAAU,YAAY,QAAQ,YAAY;AAAA,IAC9C;AACA,QAAI,QAAQ,iBAAiB,QAAW;AACpC,gBAAU,gBAAgB,QAAQ;AAAA,IACtC;AACA,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,KAAK,UAAU,QAAQ,KAAK;AAAA,IAClD;AACA,QAAI,QAAQ,oBAAoB,QAAW;AACvC,gBAAU,oBAAoB,QAAQ,kBAAkB,IAAI;AAAA,IAChE;AACA,QAAI,uBAAuB,SAAS;AAChC,gBAAU,qBAAqB,QAAQ,qBAAqB;AAAA,IAChE;AACA,QAAI,wBAAwB,SAAS;AACjC,gBAAU,uBAAuB,QAAQ,sBAAsB;AAAA,IACnE;AACA,QAAI,0BAA0B,SAAS;AACnC,gBAAU,yBAAyB,QAAQ,wBAAwB;AAAA,IACvE;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,QAAI,QAAQ,MAAM;AACd,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,IAAI,GAAG;AACrD,kBAAU,aAAa,GAAG,CAAC,IAAI;AAAA,MACnC;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,YAAY,SAA6D;AAC7E,UAAM,MAA+B;AAAA,MACjC,SAAS,QAAQ;AAAA,MACjB,oBAAoB,QAAQ;AAAA,MAC5B,YAAY,QAAQ,aAAa;AAAA,MACjC,YAAY,QAAQ,aAAa;AAAA,MACjC,aAAa,QAAQ,cAAc;AAAA,MACnC,YAAY,QAAQ;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,IACxB;AAGA,QAAI,QAAQ,OAAO,QAAW;AAC1B,UAAI,KAAK,QAAQ;AAAA,IACrB;AAEA,QAAI,QAAQ,MAAM;AACd,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,IAAI,GAAG;AACrD,YAAI,aAAa,GAAG,CAAC,IAAI;AAAA,MAC7B;AAAA,IACJ;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,cAAc,KAA8C;AAChE,UAAM,OAAgC,CAAC;AACvC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC5C,UAAI,CAAC,uBAAuB,IAAI,GAAG,GAAG;AAClC,aAAK,aAAa,GAAG,CAAC,IAAI;AAAA,MAC9B;AAAA,IACJ;AAEA,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,kBAAkB,IAAI;AAAA,MACtB,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,YAAY,KAAK,aAAa,IAAI,YAAY;AAAA,MAC9C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,GAAI,OAAO,KAAK,IAAI,EAAE,SAAS,IAAI,EAAE,KAAoB,IAAI,CAAC;AAAA,IAClE;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,mBAAmB,SAAqF;AAC5G,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,qBAAqB,QAAW;AACxC,gBAAU,qBAAqB,QAAQ;AAAA,IAC3C;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,gBAAgB,SAAS;AACzB,gBAAU,cAAc,QAAQ,cAAc;AAAA,IAClD;AACA,QAAI,QAAQ,eAAe,QAAW;AAClC,gBAAU,eAAe,QAAQ;AAAA,IACrC;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,QAAI,QAAQ,MAAM;AACd,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,IAAI,GAAG;AACrD,kBAAU,aAAa,GAAG,CAAC,IAAI;AAAA,MACnC;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AACJ;;;ACjbA,eAAsB,0BAClB,MACA,WACA,uBACA,eACa;AACb,QAAM,SAAS,OAAO,0BAA0B,WAAW,wBAAwB;AACnF,QAAM,mBACF,OAAO,0BAA0B,aAAa,wBAAwB;AAC1E,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,OAAO,EAAE,YAAY,EAAE,OAAO;AAC3C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,WAAW,EAAE,SAAS;AACnC,UAAM,OAAO,eAAe,EAAE,YAAY;AAC1C,UAAM,MAAM,OAAO,EAAE,YAAY;AACjC,UAAM,QAAQ,mBAAmB,EAAE,YAAY,EAAE,UAAU,KAAK;AAChE,UAAM,OAAO,oBAAoB,EAAE,SAAS;AAC5C,UAAM,OAAO,sBAAsB,EAAE,SAAS;AAC9C,UAAM,UAAU,0BAA0B,EAAE,OAAO,KAAK,CAAC,EAAE,SAAS;AACpE,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,OAAO;AACnB,UAAM,MAAM,oBAAoB;AAChC,UAAM,MAAM,sBAAsB;AAGlC,QAAI,kBAAkB;AAClB,uBAAiB,KAAK;AAAA,IAC1B;AAAA,EACJ,CAAC;AACL;AAwBA,eAAsB,6BAClB,MACA,WACA,uBACA,eACa;AACb,QAAM,SAAS,OAAO,0BAA0B,WAAW,wBAAwB;AACnF,QAAM,mBACF,OAAO,0BAA0B,aAAa,wBAAwB;AAC1E,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,SAAS,EAAE,YAAY;AACpC,UAAM,OAAO,oBAAoB,EAAE,YAAY;AAC/C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,aAAa,EAAE,SAAS;AACrC,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,gBAAgB,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC7D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,SAAS;AAErB,UAAM,MAAM,YAAY;AAGxB,QAAI,kBAAkB;AAClB,uBAAiB,KAAK;AAAA,IAC1B;AAAA,EACJ,CAAC;AACL;","names":[]}

package/dist/index.mjs

@@ -19,6 +19,17 @@ var CORE_USER_DB_FIELDS = /* @__PURE__ */ new Set([
   "created_at",
   "updated_at"
 ]);
+var CORE_SESSION_DB_FIELDS = /* @__PURE__ */ new Set([
+  "id",
+  "user_id",
+  "refresh_token_hash",
+  "user_agent",
+  "ip_address",
+  "device_name",
+  "created_at",
+  "last_used_at",
+  "expires_at"
+]);
 var KnexStorageProvider = class {
   constructor(config) {
     this.knex = config.knex;
@@ -263,7 +274,8 @@ var KnexStorageProvider = class {
   }
   // ==================== Session Mapping Helpers ====================
   /**
-   * Convert Session object to database row format (snake_case)
+   * Convert Session object to database row format (snake_case).
+   * Meta fields are flattened as individual snake_case columns.
    */
   toDbSession(session) {
     const row = {
@@ -279,12 +291,24 @@ var KnexStorageProvider = class {
     if (session.id !== void 0) {
       row.id = session.id;
     }
+    if (session.meta) {
+      for (const [key, value] of Object.entries(session.meta)) {
+        row[camelToSnake(key)] = value;
+      }
+    }
     return row;
   }
   /**
-   * Convert database row to Session object (camelCase)
+   * Convert database row to Session object (camelCase).
+   * Non-core columns are gathered into the typed `meta` object.
    */
   fromDbSession(row) {
+    const meta = {};
+    for (const [key, value] of Object.entries(row)) {
+      if (!CORE_SESSION_DB_FIELDS.has(key)) {
+        meta[snakeToCamel(key)] = value;
+      }
+    }
     return {
       id: row.id,
       userId: row.user_id,
@@ -294,11 +318,13 @@ var KnexStorageProvider = class {
       deviceName: row.device_name,
       createdAt: this.toDateString(row.created_at),
       lastUsedAt: this.toDateString(row.last_used_at),
-      expiresAt: this.toDateString(row.expires_at)
+      expiresAt: this.toDateString(row.expires_at),
+      ...Object.keys(meta).length > 0 ? { meta } : {}
     };
   }
   /**
-   * Convert partial Session updates to database format
+   * Convert partial Session updates to database format.
+   * Meta fields in updates are flattened as individual snake_case columns.
    */
   toDbSessionUpdates(updates) {
     const dbUpdates = {};
@@ -320,6 +346,11 @@ var KnexStorageProvider = class {
     if (updates.expiresAt !== void 0) {
       dbUpdates.expires_at = updates.expiresAt;
     }
+    if (updates.meta) {
+      for (const [key, value] of Object.entries(updates.meta)) {
+        dbUpdates[camelToSnake(key)] = value;
+      }
+    }
     return dbUpdates;
   }
 };
@@ -350,7 +381,9 @@ async function createUsersTableMigration(knex, tableName, schemaOrCustomColumns,
     }
   });
 }
-async function createSessionsTableMigration(knex, tableName, schema) {
+async function createSessionsTableMigration(knex, tableName, schemaOrCustomColumns, customColumns) {
+  const schema = typeof schemaOrCustomColumns === "string" ? schemaOrCustomColumns : void 0;
+  const addCustomColumns = typeof schemaOrCustomColumns === "function" ? schemaOrCustomColumns : customColumns;
   const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;
   await schemaBuilder.createTable(tableName, (table) => {
     table.string("id").primary();
@@ -364,6 +397,9 @@ async function createSessionsTableMigration(knex, tableName, schema) {
     table.timestamp("expires_at", { useTz: true }).notNullable();
     table.index("user_id");
     table.index("expires_at");
+    if (addCustomColumns) {
+      addCustomColumns(table);
+    }
   });
 }
 export {

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/knex.ts","../src/migration.ts"],"sourcesContent":["import type { Knex } from 'knex';\nimport type {\n    CreateSessionInput,\n    CreateUserInput,\n    FindUsersOptions,\n    FindUsersResult,\n    IStorageProvider,\n    Session,\n    SessionId,\n    User,\n    UserFilter,\n    UserId,\n    UserMeta,\n} from '@xcelsior/auth';\n\n/** Convert camelCase string to snake_case */\nfunction camelToSnake(str: string): string {\n    return str.replace(/[A-Z]/g, (letter) => `_${letter.toLowerCase()}`);\n}\n\n/** Convert snake_case string to camelCase */\nfunction snakeToCamel(str: string): string {\n    return str.replace(/_([a-z])/g, (_, letter) => letter.toUpperCase());\n}\n\n/** Core user DB columns that are not part of meta */\nconst CORE_USER_DB_FIELDS = new Set([\n    'id',\n    'email',\n    'first_name',\n    'last_name',\n    'password_hash',\n    'roles',\n    'is_email_verified',\n    'verification_token',\n    'reset_password_token',\n    'reset_password_expires',\n    'created_at',\n    'updated_at',\n]);\n\nexport interface KnexConfig {\n    /** Pre-configured Knex instance */\n    knex: Knex;\n    /** Table name for users */\n    tableName: string;\n    /** Table name for sessions */\n    sessionsTableName: string;\n    /** Optional schema (for PostgreSQL) */\n    schema?: string;\n}\n\nexport class KnexStorageProvider<Meta extends UserMeta = Record<string, never>>\n    implements IStorageProvider<Meta>\n{\n    private knex: Knex;\n    private tableName: string;\n    private sessionsTableName: string;\n    private schema?: string;\n\n    constructor(config: KnexConfig) {\n        this.knex = config.knex;\n        this.tableName = config.tableName;\n        this.sessionsTableName = config.sessionsTableName;\n        this.schema = config.schema;\n    }\n\n    private get table() {\n        const query = this.knex(this.tableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    private get sessionsTable() {\n        const query = this.knex(this.sessionsTableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    // ==================== User Methods ====================\n\n    async createUser(user: CreateUserInput<Meta>): Promise<User<Meta>> {\n        const dbUser = this.toDbUser(user);\n        const result = await this.table.insert(dbUser).returning('id');\n        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]\n        const insertedId = result?.[0]?.id ?? result?.[0] ?? user.id;\n        const finalId = user.id ?? insertedId;\n        return { ...user, id: finalId } as User<Meta>;\n    }\n\n    async getUserById(id: UserId): Promise<User<Meta> | null> {\n        const row = await this.table.where({ id }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByEmail(email: string): Promise<User<Meta> | null> {\n        const row = await this.table.where({ email }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User<Meta> | null> {\n        const row = await this.table.where({ reset_password_token: resetPasswordToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User<Meta> | null> {\n        const row = await this.table.where({ verification_token: verifyEmailToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async updateUser(id: UserId, updates: Partial<User<Meta>>): Promise<void> {\n        const dbUpdates = this.toDbUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.table.where({ id }).update(dbUpdates);\n    }\n\n    async deleteUser(id: UserId): Promise<void> {\n        // Delete all user sessions first\n        await this.deleteAllUserSessions(id);\n        // Then delete the user\n        await this.table.where({ id }).delete();\n    }\n\n    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult<Meta>> {\n        const limit = options.limit ?? 50;\n\n        let query = this.table.clone();\n\n        // Email exact match\n        if (filter.email) {\n            query = query.where('email', filter.email);\n        }\n\n        // Email contains (partial match)\n        if (filter.emailContains) {\n            query = query.where('email', 'like', `%${filter.emailContains}%`);\n        }\n\n        // Email verification status\n        if (filter.isEmailVerified !== undefined) {\n            query = query.where('is_email_verified', filter.isEmailVerified);\n        }\n\n        // Roles filtering - user must have ALL specified roles\n        if (filter.roles && filter.roles.length > 0) {\n            for (const role of filter.roles) {\n                // Use JSON contains - works for PostgreSQL (jsonb) and MySQL (json)\n                // For SQLite, we fall back to LIKE on the JSON string\n                query = query.whereRaw(\n                    this.knex.client.config.client === 'sqlite3' ? `roles LIKE ?` : `roles @> ?`,\n                    this.knex.client.config.client === 'sqlite3'\n                        ? [`%\"${role}\"%`]\n                        : [JSON.stringify([role])]\n                );\n            }\n        }\n\n        // HasAnyRole - user must have at least ONE of specified roles\n        if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {\n            query = query.where((builder: Knex.QueryBuilder) => {\n                for (const role of filter.hasAnyRole!) {\n                    builder.orWhereRaw(\n                        this.knex.client.config.client === 'sqlite3'\n                            ? `roles LIKE ?`\n                            : `roles @> ?`,\n                        this.knex.client.config.client === 'sqlite3'\n                            ? [`%\"${role}\"%`]\n                            : [JSON.stringify([role])]\n                    );\n                }\n            });\n        }\n\n        // Apply pagination\n        if (options.cursor) {\n            const cursorData = JSON.parse(Buffer.from(options.cursor, 'base64').toString());\n            query = query.where('id', '>', cursorData.lastId);\n        }\n\n        // Order by id for consistent pagination\n        query = query.orderBy('id', 'asc').limit(limit + 1);\n\n        const rows = await query;\n        const hasMore = rows.length > limit;\n        const resultRows = hasMore ? rows.slice(0, limit) : rows;\n        const users = resultRows.map((row: Record<string, unknown>) => this.fromDbUser(row));\n\n        let nextCursor: string | undefined;\n        if (hasMore && resultRows.length > 0) {\n            const lastUser = resultRows[resultRows.length - 1];\n            nextCursor = Buffer.from(JSON.stringify({ lastId: lastUser.id })).toString('base64');\n        }\n\n        return { users, nextCursor } as FindUsersResult<Meta>;\n    }\n\n    // ==================== Session Methods ====================\n\n    async createSession(session: CreateSessionInput): Promise<Session> {\n        const dbSession = this.toDbSession(session);\n        const result = await this.sessionsTable.insert(dbSession).returning('id');\n        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]\n        const insertedId = result?.[0]?.id ?? result?.[0] ?? session.id;\n        const finalId = session.id ?? insertedId;\n        return { ...session, id: finalId } as Session;\n    }\n\n    async getSessionById(id: SessionId): Promise<Session | null> {\n        const row = await this.sessionsTable.where({ id }).first();\n        return row ? this.fromDbSession(row) : null;\n    }\n\n    async getSessionsByUserId(userId: UserId): Promise<Session[]> {\n        const rows = await this.sessionsTable.where({ user_id: userId });\n        return rows.map((row: Record<string, unknown>) => this.fromDbSession(row));\n    }\n\n    async updateSession(id: SessionId, updates: Partial<Session>): Promise<void> {\n        const dbUpdates = this.toDbSessionUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.sessionsTable.where({ id }).update(dbUpdates);\n    }\n\n    async deleteSession(id: SessionId): Promise<void> {\n        await this.sessionsTable.where({ id }).delete();\n    }\n\n    async deleteAllUserSessions(userId: UserId): Promise<void> {\n        await this.sessionsTable.where({ user_id: userId }).delete();\n    }\n\n    async deleteExpiredSessions(): Promise<void> {\n        const now = new Date().toISOString();\n        await this.sessionsTable.where('expires_at', '<', now).delete();\n    }\n\n    // ==================== User Mapping Helpers ====================\n\n    /**\n     * Safely convert a DB date value (Date object or string) to ISO 8601 string\n     */\n    private toDateString(value: unknown): string {\n        if (value instanceof Date) return value.toISOString();\n        return String(value);\n    }\n\n    /**\n     * Convert User object to database row format (snake_case).\n     * Meta fields are flattened as individual snake_case columns.\n     */\n    private toDbUser(user: CreateUserInput<Meta>): Record<string, unknown> {\n        const now = new Date().toISOString();\n        const row: Record<string, unknown> = {\n\n            email: user.email,\n            first_name: user.firstName ?? null,\n            last_name: user.lastName ?? null,\n            password_hash: user.passwordHash,\n            roles: JSON.stringify(user.roles),\n            is_email_verified: user.isEmailVerified ? 1 : 0,\n            verification_token: user.verificationToken ?? null,\n            reset_password_token: user.resetPasswordToken ?? null,\n            reset_password_expires: user.resetPasswordExpires ?? null,\n            created_at: user.createdAt ?? now,\n            updated_at: user.updatedAt ?? now,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (user.id !== undefined) {\n            row.id = user.id;\n        }\n        // Flatten meta fields as individual snake_case columns\n        if (user.meta) {\n            for (const [key, value] of Object.entries(user.meta)) {\n                row[camelToSnake(key)] = value;\n            }\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to User object (camelCase).\n     * Non-core columns are gathered into the typed `meta` object.\n     */\n    private fromDbUser(row: Record<string, unknown>): User<Meta> {\n        const meta: Record<string, unknown> = {};\n        for (const [key, value] of Object.entries(row)) {\n            if (!CORE_USER_DB_FIELDS.has(key)) {\n                meta[snakeToCamel(key)] = value;\n            }\n        }\n\n        return {\n            id: row.id as string | number,\n            email: row.email as string,\n            firstName: row.first_name as string | undefined,\n            lastName: row.last_name as string | undefined,\n            passwordHash: row.password_hash as string,\n            roles: typeof row.roles === 'string' ? JSON.parse(row.roles) : row.roles,\n            isEmailVerified: Boolean(row.is_email_verified),\n            verificationToken: row.verification_token as string | undefined,\n            resetPasswordToken: row.reset_password_token as string | undefined,\n            resetPasswordExpires: row.reset_password_expires\n                ? this.toDateString(row.reset_password_expires)\n                : undefined,\n            createdAt: this.toDateString(row.created_at),\n            updatedAt: this.toDateString(row.updated_at),\n            ...(Object.keys(meta).length > 0 ? { meta: meta as Meta } : {}),\n        } as User<Meta>;\n    }\n\n    /**\n     * Convert partial User updates to database format.\n     * Meta fields in updates are flattened as individual snake_case columns.\n     */\n    private toDbUpdates(updates: Partial<User<Meta>>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.email !== undefined) {\n            dbUpdates.email = updates.email;\n        }\n        if ('firstName' in updates) {\n            dbUpdates.first_name = updates.firstName ?? null;\n        }\n        if ('lastName' in updates) {\n            dbUpdates.last_name = updates.lastName ?? null;\n        }\n        if (updates.passwordHash !== undefined) {\n            dbUpdates.password_hash = updates.passwordHash;\n        }\n        if (updates.roles !== undefined) {\n            dbUpdates.roles = JSON.stringify(updates.roles);\n        }\n        if (updates.isEmailVerified !== undefined) {\n            dbUpdates.is_email_verified = updates.isEmailVerified ? 1 : 0;\n        }\n        if ('verificationToken' in updates) {\n            dbUpdates.verification_token = updates.verificationToken ?? null;\n        }\n        if ('resetPasswordToken' in updates) {\n            dbUpdates.reset_password_token = updates.resetPasswordToken ?? null;\n        }\n        if ('resetPasswordExpires' in updates) {\n            dbUpdates.reset_password_expires = updates.resetPasswordExpires ?? null;\n        }\n        if (updates.updatedAt !== undefined) {\n            dbUpdates.updated_at = updates.updatedAt;\n        }\n        // Flatten meta fields as individual snake_case columns\n        if (updates.meta) {\n            for (const [key, value] of Object.entries(updates.meta)) {\n                dbUpdates[camelToSnake(key)] = value;\n            }\n        }\n\n        return dbUpdates;\n    }\n\n    // ==================== Session Mapping Helpers ====================\n\n    /**\n     * Convert Session object to database row format (snake_case)\n     */\n    private toDbSession(session: CreateSessionInput): Record<string, unknown> {\n        const row: Record<string, unknown> = {\n            user_id: session.userId,\n            refresh_token_hash: session.refreshTokenHash,\n            user_agent: session.userAgent ?? null,\n            ip_address: session.ipAddress ?? null,\n            device_name: session.deviceName ?? null,\n            created_at: session.createdAt,\n            last_used_at: session.lastUsedAt,\n            expires_at: session.expiresAt,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (session.id !== undefined) {\n            row.id = session.id;\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to Session object (camelCase)\n     */\n    private fromDbSession(row: Record<string, unknown>): Session {\n        return {\n            id: row.id as string | number,\n            userId: row.user_id as string | number,\n            refreshTokenHash: row.refresh_token_hash as string,\n            userAgent: row.user_agent as string | undefined,\n            ipAddress: row.ip_address as string | undefined,\n            deviceName: row.device_name as string | undefined,\n            createdAt: this.toDateString(row.created_at),\n            lastUsedAt: this.toDateString(row.last_used_at),\n            expiresAt: this.toDateString(row.expires_at),\n        };\n    }\n\n    /**\n     * Convert partial Session updates to database format\n     */\n    private toDbSessionUpdates(updates: Partial<Session>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.refreshTokenHash !== undefined) {\n            dbUpdates.refresh_token_hash = updates.refreshTokenHash;\n        }\n        if ('userAgent' in updates) {\n            dbUpdates.user_agent = updates.userAgent ?? null;\n        }\n        if ('ipAddress' in updates) {\n            dbUpdates.ip_address = updates.ipAddress ?? null;\n        }\n        if ('deviceName' in updates) {\n            dbUpdates.device_name = updates.deviceName ?? null;\n        }\n        if (updates.lastUsedAt !== undefined) {\n            dbUpdates.last_used_at = updates.lastUsedAt;\n        }\n        if (updates.expiresAt !== undefined) {\n            dbUpdates.expires_at = updates.expiresAt;\n        }\n\n        return dbUpdates;\n    }\n}\n","import type { Knex } from 'knex';\n\n/**\n * SQL migration helper to create the users table\n * Can be used with Knex migrations\n *\n * @param knex - Knex instance\n * @param tableName - Table name for users\n * @param schemaOrCustomColumns - Optional schema name (for PostgreSQL) or callback to add custom columns\n * @param customColumns - Optional callback to add custom columns to the table (when schema is provided)\n *\n * @example\n * ```ts\n * // In your migration file\n * import { createUsersTableMigration, createSessionsTableMigration } from '@xcelsior/auth-adapter-knex';\n *\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users');\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * // With custom meta columns\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users', (table) => {\n *     table.string('phone').nullable();\n *     table.string('company').nullable();\n *   });\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * // With schema and custom meta columns\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users', 'my_schema', (table) => {\n *     table.string('phone').nullable();\n *     table.string('company').nullable();\n *   });\n * }\n *\n * export async function down(knex: Knex): Promise<void> {\n *   await knex.schema.dropTableIfExists('sessions');\n *   await knex.schema.dropTableIfExists('users');\n * }\n * ```\n */\nexport async function createUsersTableMigration(\n    knex: Knex,\n    tableName: string,\n    schemaOrCustomColumns?: string | ((table: Knex.CreateTableBuilder) => void),\n    customColumns?: (table: Knex.CreateTableBuilder) => void\n): Promise<void> {\n    const schema = typeof schemaOrCustomColumns === 'string' ? schemaOrCustomColumns : undefined;\n    const addCustomColumns =\n        typeof schemaOrCustomColumns === 'function' ? schemaOrCustomColumns : customColumns;\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('email').notNullable().unique();\n        table.string('first_name').nullable();\n        table.string('last_name').nullable();\n        table.string('password_hash').notNullable();\n        table.jsonb('roles').notNullable();\n        table.boolean('is_email_verified').notNullable().defaultTo(false);\n        table.string('verification_token').nullable();\n        table.string('reset_password_token').nullable();\n        table.timestamp('reset_password_expires', { useTz: true }).nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('updated_at', { useTz: true }).notNullable();\n\n        // Indexes for common lookups\n        table.index('email');\n        table.index('verification_token');\n        table.index('reset_password_token');\n\n        // Add custom meta columns if provided\n        if (addCustomColumns) {\n            addCustomColumns(table);\n        }\n    });\n}\n\n/**\n * SQL migration helper to create the sessions table\n * Can be used with Knex migrations\n */\nexport async function createSessionsTableMigration(\n    knex: Knex,\n    tableName: string,\n    schema?: string\n): Promise<void> {\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('user_id').notNullable();\n        table.string('refresh_token_hash').notNullable();\n        table.string('user_agent').nullable();\n        table.string('ip_address').nullable();\n        table.string('device_name').nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('last_used_at', { useTz: true }).notNullable();\n        table.timestamp('expires_at', { useTz: true }).notNullable();\n\n        // Index for querying sessions by user\n        table.index('user_id');\n        // Index for cleaning up expired sessions\n        table.index('expires_at');\n    });\n}\n"],"mappings":";AAgBA,SAAS,aAAa,KAAqB;AACvC,SAAO,IAAI,QAAQ,UAAU,CAAC,WAAW,IAAI,OAAO,YAAY,CAAC,EAAE;AACvE;AAGA,SAAS,aAAa,KAAqB;AACvC,SAAO,IAAI,QAAQ,aAAa,CAAC,GAAG,WAAW,OAAO,YAAY,CAAC;AACvE;AAGA,IAAM,sBAAsB,oBAAI,IAAI;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACJ,CAAC;AAaM,IAAM,sBAAN,MAEP;AAAA,EAMI,YAAY,QAAoB;AAC5B,SAAK,OAAO,OAAO;AACnB,SAAK,YAAY,OAAO;AACxB,SAAK,oBAAoB,OAAO;AAChC,SAAK,SAAS,OAAO;AAAA,EACzB;AAAA,EAEA,IAAY,QAAQ;AAChB,UAAM,QAAQ,KAAK,KAAK,KAAK,SAAS;AACtC,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA,EAEA,IAAY,gBAAgB;AACxB,UAAM,QAAQ,KAAK,KAAK,KAAK,iBAAiB;AAC9C,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA;AAAA,EAIA,MAAM,WAAW,MAAkD;AAC/D,UAAM,SAAS,KAAK,SAAS,IAAI;AACjC,UAAM,SAAS,MAAM,KAAK,MAAM,OAAO,MAAM,EAAE,UAAU,IAAI;AAE7D,UAAM,aAAa,SAAS,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,KAAK;AAC1D,UAAM,UAAU,KAAK,MAAM;AAC3B,WAAO,EAAE,GAAG,MAAM,IAAI,QAAQ;AAAA,EAClC;AAAA,EAEA,MAAM,YAAY,IAAwC;AACtD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACjD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,eAAe,OAA2C;AAC5D,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;AACpD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,4BAA4B,oBAAwD;AACtF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,sBAAsB,mBAAmB,CAAC,EAAE,MAAM;AACvF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,0BAA0B,kBAAsD;AAClF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,oBAAoB,iBAAiB,CAAC,EAAE,MAAM;AACnF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,WAAW,IAAY,SAA6C;AACtE,UAAM,YAAY,KAAK,YAAY,OAAO;AAE1C,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EACnD;AAAA,EAEA,MAAM,WAAW,IAA2B;AAExC,UAAM,KAAK,sBAAsB,EAAE;AAEnC,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAC1C;AAAA,EAEA,MAAM,UAAU,QAAoB,UAA4B,CAAC,GAAmC;AAChG,UAAM,QAAQ,QAAQ,SAAS;AAE/B,QAAI,QAAQ,KAAK,MAAM,MAAM;AAG7B,QAAI,OAAO,OAAO;AACd,cAAQ,MAAM,MAAM,SAAS,OAAO,KAAK;AAAA,IAC7C;AAGA,QAAI,OAAO,eAAe;AACtB,cAAQ,MAAM,MAAM,SAAS,QAAQ,IAAI,OAAO,aAAa,GAAG;AAAA,IACpE;AAGA,QAAI,OAAO,oBAAoB,QAAW;AACtC,cAAQ,MAAM,MAAM,qBAAqB,OAAO,eAAe;AAAA,IACnE;AAGA,QAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AACzC,iBAAW,QAAQ,OAAO,OAAO;AAG7B,gBAAQ,MAAM;AAAA,UACV,KAAK,KAAK,OAAO,OAAO,WAAW,YAAY,iBAAiB;AAAA,UAChE,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,QACjC;AAAA,MACJ;AAAA,IACJ;AAGA,QAAI,OAAO,cAAc,OAAO,WAAW,SAAS,GAAG;AACnD,cAAQ,MAAM,MAAM,CAAC,YAA+B;AAChD,mBAAW,QAAQ,OAAO,YAAa;AACnC,kBAAQ;AAAA,YACJ,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,iBACA;AAAA,YACN,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,UACjC;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAGA,QAAI,QAAQ,QAAQ;AAChB,YAAM,aAAa,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE,SAAS,CAAC;AAC9E,cAAQ,MAAM,MAAM,MAAM,KAAK,WAAW,MAAM;AAAA,IACpD;AAGA,YAAQ,MAAM,QAAQ,MAAM,KAAK,EAAE,MAAM,QAAQ,CAAC;AAElD,UAAM,OAAO,MAAM;AACnB,UAAM,UAAU,KAAK,SAAS;AAC9B,UAAM,aAAa,UAAU,KAAK,MAAM,GAAG,KAAK,IAAI;AACpD,UAAM,QAAQ,WAAW,IAAI,CAAC,QAAiC,KAAK,WAAW,GAAG,CAAC;AAEnF,QAAI;AACJ,QAAI,WAAW,WAAW,SAAS,GAAG;AAClC,YAAM,WAAW,WAAW,WAAW,SAAS,CAAC;AACjD,mBAAa,OAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,SAAS,GAAG,CAAC,CAAC,EAAE,SAAS,QAAQ;AAAA,IACvF;AAEA,WAAO,EAAE,OAAO,WAAW;AAAA,EAC/B;AAAA;AAAA,EAIA,MAAM,cAAc,SAA+C;AAC/D,UAAM,YAAY,KAAK,YAAY,OAAO;AAC1C,UAAM,SAAS,MAAM,KAAK,cAAc,OAAO,SAAS,EAAE,UAAU,IAAI;AAExE,UAAM,aAAa,SAAS,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,QAAQ;AAC7D,UAAM,UAAU,QAAQ,MAAM;AAC9B,WAAO,EAAE,GAAG,SAAS,IAAI,QAAQ;AAAA,EACrC;AAAA,EAEA,MAAM,eAAe,IAAwC;AACzD,UAAM,MAAM,MAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACzD,WAAO,MAAM,KAAK,cAAc,GAAG,IAAI;AAAA,EAC3C;AAAA,EAEA,MAAM,oBAAoB,QAAoC;AAC1D,UAAM,OAAO,MAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC;AAC/D,WAAO,KAAK,IAAI,CAAC,QAAiC,KAAK,cAAc,GAAG,CAAC;AAAA,EAC7E;AAAA,EAEA,MAAM,cAAc,IAAe,SAA0C;AACzE,UAAM,YAAY,KAAK,mBAAmB,OAAO;AAEjD,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EAC3D;AAAA,EAEA,MAAM,cAAc,IAA8B;AAC9C,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAClD;AAAA,EAEA,MAAM,sBAAsB,QAA+B;AACvD,UAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC,EAAE,OAAO;AAAA,EAC/D;AAAA,EAEA,MAAM,wBAAuC;AACzC,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,KAAK,cAAc,MAAM,cAAc,KAAK,GAAG,EAAE,OAAO;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,aAAa,OAAwB;AACzC,QAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,WAAO,OAAO,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,SAAS,MAAsD;AACnE,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,MAA+B;AAAA,MAEjC,OAAO,KAAK;AAAA,MACZ,YAAY,KAAK,aAAa;AAAA,MAC9B,WAAW,KAAK,YAAY;AAAA,MAC5B,eAAe,KAAK;AAAA,MACpB,OAAO,KAAK,UAAU,KAAK,KAAK;AAAA,MAChC,mBAAmB,KAAK,kBAAkB,IAAI;AAAA,MAC9C,oBAAoB,KAAK,qBAAqB;AAAA,MAC9C,sBAAsB,KAAK,sBAAsB;AAAA,MACjD,wBAAwB,KAAK,wBAAwB;AAAA,MACrD,YAAY,KAAK,aAAa;AAAA,MAC9B,YAAY,KAAK,aAAa;AAAA,IAClC;AAGA,QAAI,KAAK,OAAO,QAAW;AACvB,UAAI,KAAK,KAAK;AAAA,IAClB;AAEA,QAAI,KAAK,MAAM;AACX,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,IAAI,GAAG;AAClD,YAAI,aAAa,GAAG,CAAC,IAAI;AAAA,MAC7B;AAAA,IACJ;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,WAAW,KAA0C;AACzD,UAAM,OAAgC,CAAC;AACvC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC5C,UAAI,CAAC,oBAAoB,IAAI,GAAG,GAAG;AAC/B,aAAK,aAAa,GAAG,CAAC,IAAI;AAAA,MAC9B;AAAA,IACJ;AAEA,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,OAAO,IAAI;AAAA,MACX,WAAW,IAAI;AAAA,MACf,UAAU,IAAI;AAAA,MACd,cAAc,IAAI;AAAA,MAClB,OAAO,OAAO,IAAI,UAAU,WAAW,KAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAAA,MACnE,iBAAiB,QAAQ,IAAI,iBAAiB;AAAA,MAC9C,mBAAmB,IAAI;AAAA,MACvB,oBAAoB,IAAI;AAAA,MACxB,sBAAsB,IAAI,yBACpB,KAAK,aAAa,IAAI,sBAAsB,IAC5C;AAAA,MACN,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,GAAI,OAAO,KAAK,IAAI,EAAE,SAAS,IAAI,EAAE,KAAmB,IAAI,CAAC;AAAA,IACjE;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,YAAY,SAAuD;AACvE,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,QAAQ;AAAA,IAC9B;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,cAAc,SAAS;AACvB,gBAAU,YAAY,QAAQ,YAAY;AAAA,IAC9C;AACA,QAAI,QAAQ,iBAAiB,QAAW;AACpC,gBAAU,gBAAgB,QAAQ;AAAA,IACtC;AACA,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,KAAK,UAAU,QAAQ,KAAK;AAAA,IAClD;AACA,QAAI,QAAQ,oBAAoB,QAAW;AACvC,gBAAU,oBAAoB,QAAQ,kBAAkB,IAAI;AAAA,IAChE;AACA,QAAI,uBAAuB,SAAS;AAChC,gBAAU,qBAAqB,QAAQ,qBAAqB;AAAA,IAChE;AACA,QAAI,wBAAwB,SAAS;AACjC,gBAAU,uBAAuB,QAAQ,sBAAsB;AAAA,IACnE;AACA,QAAI,0BAA0B,SAAS;AACnC,gBAAU,yBAAyB,QAAQ,wBAAwB;AAAA,IACvE;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,QAAI,QAAQ,MAAM;AACd,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,IAAI,GAAG;AACrD,kBAAU,aAAa,GAAG,CAAC,IAAI;AAAA,MACnC;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,YAAY,SAAsD;AACtE,UAAM,MAA+B;AAAA,MACjC,SAAS,QAAQ;AAAA,MACjB,oBAAoB,QAAQ;AAAA,MAC5B,YAAY,QAAQ,aAAa;AAAA,MACjC,YAAY,QAAQ,aAAa;AAAA,MACjC,aAAa,QAAQ,cAAc;AAAA,MACnC,YAAY,QAAQ;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,IACxB;AAGA,QAAI,QAAQ,OAAO,QAAW;AAC1B,UAAI,KAAK,QAAQ;AAAA,IACrB;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAc,KAAuC;AACzD,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,kBAAkB,IAAI;AAAA,MACtB,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,YAAY,KAAK,aAAa,IAAI,YAAY;AAAA,MAC9C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,IAC/C;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,mBAAmB,SAAoD;AAC3E,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,qBAAqB,QAAW;AACxC,gBAAU,qBAAqB,QAAQ;AAAA,IAC3C;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,gBAAgB,SAAS;AACzB,gBAAU,cAAc,QAAQ,cAAc;AAAA,IAClD;AACA,QAAI,QAAQ,eAAe,QAAW;AAClC,gBAAU,eAAe,QAAQ;AAAA,IACrC;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,WAAO;AAAA,EACX;AACJ;;;AC1YA,eAAsB,0BAClB,MACA,WACA,uBACA,eACa;AACb,QAAM,SAAS,OAAO,0BAA0B,WAAW,wBAAwB;AACnF,QAAM,mBACF,OAAO,0BAA0B,aAAa,wBAAwB;AAC1E,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,OAAO,EAAE,YAAY,EAAE,OAAO;AAC3C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,WAAW,EAAE,SAAS;AACnC,UAAM,OAAO,eAAe,EAAE,YAAY;AAC1C,UAAM,MAAM,OAAO,EAAE,YAAY;AACjC,UAAM,QAAQ,mBAAmB,EAAE,YAAY,EAAE,UAAU,KAAK;AAChE,UAAM,OAAO,oBAAoB,EAAE,SAAS;AAC5C,UAAM,OAAO,sBAAsB,EAAE,SAAS;AAC9C,UAAM,UAAU,0BAA0B,EAAE,OAAO,KAAK,CAAC,EAAE,SAAS;AACpE,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,OAAO;AACnB,UAAM,MAAM,oBAAoB;AAChC,UAAM,MAAM,sBAAsB;AAGlC,QAAI,kBAAkB;AAClB,uBAAiB,KAAK;AAAA,IAC1B;AAAA,EACJ,CAAC;AACL;AAMA,eAAsB,6BAClB,MACA,WACA,QACa;AACb,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,SAAS,EAAE,YAAY;AACpC,UAAM,OAAO,oBAAoB,EAAE,YAAY;AAC/C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,aAAa,EAAE,SAAS;AACrC,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,gBAAgB,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC7D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,SAAS;AAErB,UAAM,MAAM,YAAY;AAAA,EAC5B,CAAC;AACL;","names":[]}
+{"version":3,"sources":["../src/knex.ts","../src/migration.ts"],"sourcesContent":["import type { Knex } from 'knex';\nimport type {\n    CreateSessionInput,\n    CreateUserInput,\n    FindUsersOptions,\n    FindUsersResult,\n    IStorageProvider,\n    Session,\n    SessionId,\n    User,\n    UserFilter,\n    UserId,\n    UserMeta,\n    SessionMeta,\n} from '@xcelsior/auth';\n\n/** Convert camelCase string to snake_case */\nfunction camelToSnake(str: string): string {\n    return str.replace(/[A-Z]/g, (letter) => `_${letter.toLowerCase()}`);\n}\n\n/** Convert snake_case string to camelCase */\nfunction snakeToCamel(str: string): string {\n    return str.replace(/_([a-z])/g, (_, letter) => letter.toUpperCase());\n}\n\n/** Core user DB columns that are not part of meta */\nconst CORE_USER_DB_FIELDS = new Set([\n    'id',\n    'email',\n    'first_name',\n    'last_name',\n    'password_hash',\n    'roles',\n    'is_email_verified',\n    'verification_token',\n    'reset_password_token',\n    'reset_password_expires',\n    'created_at',\n    'updated_at',\n]);\n\n/** Core session DB columns that are not part of meta */\nconst CORE_SESSION_DB_FIELDS = new Set([\n    'id',\n    'user_id',\n    'refresh_token_hash',\n    'user_agent',\n    'ip_address',\n    'device_name',\n    'created_at',\n    'last_used_at',\n    'expires_at',\n]);\n\nexport interface KnexConfig {\n    /** Pre-configured Knex instance */\n    knex: Knex;\n    /** Table name for users */\n    tableName: string;\n    /** Table name for sessions */\n    sessionsTableName: string;\n    /** Optional schema (for PostgreSQL) */\n    schema?: string;\n}\n\nexport class KnexStorageProvider<\n    Meta extends UserMeta = Record<string, any>,\n    SMeta extends SessionMeta = Record<string, any>,\n> implements IStorageProvider<Meta, SMeta>\n{\n    private knex: Knex;\n    private tableName: string;\n    private sessionsTableName: string;\n    private schema?: string;\n\n    constructor(config: KnexConfig) {\n        this.knex = config.knex;\n        this.tableName = config.tableName;\n        this.sessionsTableName = config.sessionsTableName;\n        this.schema = config.schema;\n    }\n\n    private get table() {\n        const query = this.knex(this.tableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    private get sessionsTable() {\n        const query = this.knex(this.sessionsTableName);\n        if (this.schema) {\n            return query.withSchema(this.schema);\n        }\n        return query;\n    }\n\n    // ==================== User Methods ====================\n\n    async createUser(user: CreateUserInput<Meta>): Promise<User<Meta>> {\n        const dbUser = this.toDbUser(user);\n        const result = await this.table.insert(dbUser).returning('id');\n        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]\n        const insertedId = result?.[0]?.id ?? result?.[0] ?? user.id;\n        const finalId = user.id ?? insertedId;\n        return { ...user, id: finalId } as User<Meta>;\n    }\n\n    async getUserById(id: UserId): Promise<User<Meta> | null> {\n        const row = await this.table.where({ id }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByEmail(email: string): Promise<User<Meta> | null> {\n        const row = await this.table.where({ email }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User<Meta> | null> {\n        const row = await this.table.where({ reset_password_token: resetPasswordToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User<Meta> | null> {\n        const row = await this.table.where({ verification_token: verifyEmailToken }).first();\n        return row ? this.fromDbUser(row) : null;\n    }\n\n    async updateUser(id: UserId, updates: Partial<User<Meta>>): Promise<void> {\n        const dbUpdates = this.toDbUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.table.where({ id }).update(dbUpdates);\n    }\n\n    async deleteUser(id: UserId): Promise<void> {\n        // Delete all user sessions first\n        await this.deleteAllUserSessions(id);\n        // Then delete the user\n        await this.table.where({ id }).delete();\n    }\n\n    async findUsers(filter: UserFilter, options: FindUsersOptions = {}): Promise<FindUsersResult<Meta>> {\n        const limit = options.limit ?? 50;\n\n        let query = this.table.clone();\n\n        // Email exact match\n        if (filter.email) {\n            query = query.where('email', filter.email);\n        }\n\n        // Email contains (partial match)\n        if (filter.emailContains) {\n            query = query.where('email', 'like', `%${filter.emailContains}%`);\n        }\n\n        // Email verification status\n        if (filter.isEmailVerified !== undefined) {\n            query = query.where('is_email_verified', filter.isEmailVerified);\n        }\n\n        // Roles filtering - user must have ALL specified roles\n        if (filter.roles && filter.roles.length > 0) {\n            for (const role of filter.roles) {\n                // Use JSON contains - works for PostgreSQL (jsonb) and MySQL (json)\n                // For SQLite, we fall back to LIKE on the JSON string\n                query = query.whereRaw(\n                    this.knex.client.config.client === 'sqlite3' ? `roles LIKE ?` : `roles @> ?`,\n                    this.knex.client.config.client === 'sqlite3'\n                        ? [`%\"${role}\"%`]\n                        : [JSON.stringify([role])]\n                );\n            }\n        }\n\n        // HasAnyRole - user must have at least ONE of specified roles\n        if (filter.hasAnyRole && filter.hasAnyRole.length > 0) {\n            query = query.where((builder: Knex.QueryBuilder) => {\n                for (const role of filter.hasAnyRole!) {\n                    builder.orWhereRaw(\n                        this.knex.client.config.client === 'sqlite3'\n                            ? `roles LIKE ?`\n                            : `roles @> ?`,\n                        this.knex.client.config.client === 'sqlite3'\n                            ? [`%\"${role}\"%`]\n                            : [JSON.stringify([role])]\n                    );\n                }\n            });\n        }\n\n        // Apply pagination\n        if (options.cursor) {\n            const cursorData = JSON.parse(Buffer.from(options.cursor, 'base64').toString());\n            query = query.where('id', '>', cursorData.lastId);\n        }\n\n        // Order by id for consistent pagination\n        query = query.orderBy('id', 'asc').limit(limit + 1);\n\n        const rows = await query;\n        const hasMore = rows.length > limit;\n        const resultRows = hasMore ? rows.slice(0, limit) : rows;\n        const users = resultRows.map((row: Record<string, unknown>) => this.fromDbUser(row));\n\n        let nextCursor: string | undefined;\n        if (hasMore && resultRows.length > 0) {\n            const lastUser = resultRows[resultRows.length - 1];\n            nextCursor = Buffer.from(JSON.stringify({ lastId: lastUser.id })).toString('base64');\n        }\n\n        return { users, nextCursor } as FindUsersResult<Meta>;\n    }\n\n    // ==================== Session Methods ====================\n\n    async createSession(session: CreateSessionInput<SMeta>): Promise<Session<SMeta>> {\n        const dbSession = this.toDbSession(session);\n        const result = await this.sessionsTable.insert(dbSession).returning('id');\n        // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]\n        const insertedId = result?.[0]?.id ?? result?.[0] ?? session.id;\n        const finalId = session.id ?? insertedId;\n        return { ...session, id: finalId } as Session<SMeta>;\n    }\n\n    async getSessionById(id: SessionId): Promise<Session<SMeta> | null> {\n        const row = await this.sessionsTable.where({ id }).first();\n        return row ? this.fromDbSession(row) : null;\n    }\n\n    async getSessionsByUserId(userId: UserId): Promise<Session<SMeta>[]> {\n        const rows = await this.sessionsTable.where({ user_id: userId });\n        return rows.map((row: Record<string, unknown>) => this.fromDbSession(row));\n    }\n\n    async updateSession(id: SessionId, updates: Partial<Session<SMeta>> & Record<string, unknown>): Promise<void> {\n        const dbUpdates = this.toDbSessionUpdates(updates);\n\n        if (Object.keys(dbUpdates).length === 0) {\n            return;\n        }\n\n        await this.sessionsTable.where({ id }).update(dbUpdates);\n    }\n\n    async deleteSession(id: SessionId): Promise<void> {\n        await this.sessionsTable.where({ id }).delete();\n    }\n\n    async deleteAllUserSessions(userId: UserId): Promise<void> {\n        await this.sessionsTable.where({ user_id: userId }).delete();\n    }\n\n    async deleteExpiredSessions(): Promise<void> {\n        const now = new Date().toISOString();\n        await this.sessionsTable.where('expires_at', '<', now).delete();\n    }\n\n    // ==================== User Mapping Helpers ====================\n\n    /**\n     * Safely convert a DB date value (Date object or string) to ISO 8601 string\n     */\n    private toDateString(value: unknown): string {\n        if (value instanceof Date) return value.toISOString();\n        return String(value);\n    }\n\n    /**\n     * Convert User object to database row format (snake_case).\n     * Meta fields are flattened as individual snake_case columns.\n     */\n    private toDbUser(user: CreateUserInput<Meta>): Record<string, unknown> {\n        const now = new Date().toISOString();\n        const row: Record<string, unknown> = {\n\n            email: user.email,\n            first_name: user.firstName ?? null,\n            last_name: user.lastName ?? null,\n            password_hash: user.passwordHash,\n            roles: JSON.stringify(user.roles),\n            is_email_verified: user.isEmailVerified ? 1 : 0,\n            verification_token: user.verificationToken ?? null,\n            reset_password_token: user.resetPasswordToken ?? null,\n            reset_password_expires: user.resetPasswordExpires ?? null,\n            created_at: user.createdAt ?? now,\n            updated_at: user.updatedAt ?? now,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (user.id !== undefined) {\n            row.id = user.id;\n        }\n        // Flatten meta fields as individual snake_case columns\n        if (user.meta) {\n            for (const [key, value] of Object.entries(user.meta)) {\n                row[camelToSnake(key)] = value;\n            }\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to User object (camelCase).\n     * Non-core columns are gathered into the typed `meta` object.\n     */\n    private fromDbUser(row: Record<string, unknown>): User<Meta> {\n        const meta: Record<string, unknown> = {};\n        for (const [key, value] of Object.entries(row)) {\n            if (!CORE_USER_DB_FIELDS.has(key)) {\n                meta[snakeToCamel(key)] = value;\n            }\n        }\n\n        return {\n            id: row.id as string | number,\n            email: row.email as string,\n            firstName: row.first_name as string | undefined,\n            lastName: row.last_name as string | undefined,\n            passwordHash: row.password_hash as string,\n            roles: typeof row.roles === 'string' ? JSON.parse(row.roles) : row.roles,\n            isEmailVerified: Boolean(row.is_email_verified),\n            verificationToken: row.verification_token as string | undefined,\n            resetPasswordToken: row.reset_password_token as string | undefined,\n            resetPasswordExpires: row.reset_password_expires\n                ? this.toDateString(row.reset_password_expires)\n                : undefined,\n            createdAt: this.toDateString(row.created_at),\n            updatedAt: this.toDateString(row.updated_at),\n            ...(Object.keys(meta).length > 0 ? { meta: meta as Meta } : {}),\n        } as User<Meta>;\n    }\n\n    /**\n     * Convert partial User updates to database format.\n     * Meta fields in updates are flattened as individual snake_case columns.\n     */\n    private toDbUpdates(updates: Partial<User<Meta>>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.email !== undefined) {\n            dbUpdates.email = updates.email;\n        }\n        if ('firstName' in updates) {\n            dbUpdates.first_name = updates.firstName ?? null;\n        }\n        if ('lastName' in updates) {\n            dbUpdates.last_name = updates.lastName ?? null;\n        }\n        if (updates.passwordHash !== undefined) {\n            dbUpdates.password_hash = updates.passwordHash;\n        }\n        if (updates.roles !== undefined) {\n            dbUpdates.roles = JSON.stringify(updates.roles);\n        }\n        if (updates.isEmailVerified !== undefined) {\n            dbUpdates.is_email_verified = updates.isEmailVerified ? 1 : 0;\n        }\n        if ('verificationToken' in updates) {\n            dbUpdates.verification_token = updates.verificationToken ?? null;\n        }\n        if ('resetPasswordToken' in updates) {\n            dbUpdates.reset_password_token = updates.resetPasswordToken ?? null;\n        }\n        if ('resetPasswordExpires' in updates) {\n            dbUpdates.reset_password_expires = updates.resetPasswordExpires ?? null;\n        }\n        if (updates.updatedAt !== undefined) {\n            dbUpdates.updated_at = updates.updatedAt;\n        }\n        // Flatten meta fields as individual snake_case columns\n        if (updates.meta) {\n            for (const [key, value] of Object.entries(updates.meta)) {\n                dbUpdates[camelToSnake(key)] = value;\n            }\n        }\n\n        return dbUpdates;\n    }\n\n    // ==================== Session Mapping Helpers ====================\n\n    /**\n     * Convert Session object to database row format (snake_case).\n     * Meta fields are flattened as individual snake_case columns.\n     */\n    private toDbSession(session: CreateSessionInput<SMeta>): Record<string, unknown> {\n        const row: Record<string, unknown> = {\n            user_id: session.userId,\n            refresh_token_hash: session.refreshTokenHash,\n            user_agent: session.userAgent ?? null,\n            ip_address: session.ipAddress ?? null,\n            device_name: session.deviceName ?? null,\n            created_at: session.createdAt,\n            last_used_at: session.lastUsedAt,\n            expires_at: session.expiresAt,\n        };\n        // Only include id if provided (for string UUIDs)\n        // Omit for auto-increment DBs\n        if (session.id !== undefined) {\n            row.id = session.id;\n        }\n        // Flatten meta fields as individual snake_case columns\n        if (session.meta) {\n            for (const [key, value] of Object.entries(session.meta)) {\n                row[camelToSnake(key)] = value;\n            }\n        }\n        return row;\n    }\n\n    /**\n     * Convert database row to Session object (camelCase).\n     * Non-core columns are gathered into the typed `meta` object.\n     */\n    private fromDbSession(row: Record<string, unknown>): Session<SMeta> {\n        const meta: Record<string, unknown> = {};\n        for (const [key, value] of Object.entries(row)) {\n            if (!CORE_SESSION_DB_FIELDS.has(key)) {\n                meta[snakeToCamel(key)] = value;\n            }\n        }\n\n        return {\n            id: row.id as string | number,\n            userId: row.user_id as string | number,\n            refreshTokenHash: row.refresh_token_hash as string,\n            userAgent: row.user_agent as string | undefined,\n            ipAddress: row.ip_address as string | undefined,\n            deviceName: row.device_name as string | undefined,\n            createdAt: this.toDateString(row.created_at),\n            lastUsedAt: this.toDateString(row.last_used_at),\n            expiresAt: this.toDateString(row.expires_at),\n            ...(Object.keys(meta).length > 0 ? { meta: meta as SMeta } : {}),\n        } as Session<SMeta>;\n    }\n\n    /**\n     * Convert partial Session updates to database format.\n     * Meta fields in updates are flattened as individual snake_case columns.\n     */\n    private toDbSessionUpdates(updates: Partial<Session<SMeta>> & Record<string, unknown>): Record<string, unknown> {\n        const dbUpdates: Record<string, unknown> = {};\n\n        if (updates.refreshTokenHash !== undefined) {\n            dbUpdates.refresh_token_hash = updates.refreshTokenHash;\n        }\n        if ('userAgent' in updates) {\n            dbUpdates.user_agent = updates.userAgent ?? null;\n        }\n        if ('ipAddress' in updates) {\n            dbUpdates.ip_address = updates.ipAddress ?? null;\n        }\n        if ('deviceName' in updates) {\n            dbUpdates.device_name = updates.deviceName ?? null;\n        }\n        if (updates.lastUsedAt !== undefined) {\n            dbUpdates.last_used_at = updates.lastUsedAt;\n        }\n        if (updates.expiresAt !== undefined) {\n            dbUpdates.expires_at = updates.expiresAt;\n        }\n        // Flatten meta fields as individual snake_case columns\n        if (updates.meta) {\n            for (const [key, value] of Object.entries(updates.meta)) {\n                dbUpdates[camelToSnake(key)] = value;\n            }\n        }\n\n        return dbUpdates;\n    }\n}\n","import type { Knex } from 'knex';\n\n/**\n * SQL migration helper to create the users table\n * Can be used with Knex migrations\n *\n * @param knex - Knex instance\n * @param tableName - Table name for users\n * @param schemaOrCustomColumns - Optional schema name (for PostgreSQL) or callback to add custom columns\n * @param customColumns - Optional callback to add custom columns to the table (when schema is provided)\n *\n * @example\n * ```ts\n * // In your migration file\n * import { createUsersTableMigration, createSessionsTableMigration } from '@xcelsior/auth-adapter-knex';\n *\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users');\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * // With custom meta columns\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users', (table) => {\n *     table.string('phone').nullable();\n *     table.string('company').nullable();\n *   });\n *   await createSessionsTableMigration(knex, 'sessions');\n * }\n *\n * // With schema and custom meta columns\n * export async function up(knex: Knex): Promise<void> {\n *   await createUsersTableMigration(knex, 'users', 'my_schema', (table) => {\n *     table.string('phone').nullable();\n *     table.string('company').nullable();\n *   });\n * }\n *\n * export async function down(knex: Knex): Promise<void> {\n *   await knex.schema.dropTableIfExists('sessions');\n *   await knex.schema.dropTableIfExists('users');\n * }\n * ```\n */\nexport async function createUsersTableMigration(\n    knex: Knex,\n    tableName: string,\n    schemaOrCustomColumns?: string | ((table: Knex.CreateTableBuilder) => void),\n    customColumns?: (table: Knex.CreateTableBuilder) => void\n): Promise<void> {\n    const schema = typeof schemaOrCustomColumns === 'string' ? schemaOrCustomColumns : undefined;\n    const addCustomColumns =\n        typeof schemaOrCustomColumns === 'function' ? schemaOrCustomColumns : customColumns;\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('email').notNullable().unique();\n        table.string('first_name').nullable();\n        table.string('last_name').nullable();\n        table.string('password_hash').notNullable();\n        table.jsonb('roles').notNullable();\n        table.boolean('is_email_verified').notNullable().defaultTo(false);\n        table.string('verification_token').nullable();\n        table.string('reset_password_token').nullable();\n        table.timestamp('reset_password_expires', { useTz: true }).nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('updated_at', { useTz: true }).notNullable();\n\n        // Indexes for common lookups\n        table.index('email');\n        table.index('verification_token');\n        table.index('reset_password_token');\n\n        // Add custom meta columns if provided\n        if (addCustomColumns) {\n            addCustomColumns(table);\n        }\n    });\n}\n\n/**\n * SQL migration helper to create the sessions table\n * Can be used with Knex migrations\n *\n * @param knex - Knex instance\n * @param tableName - Table name for sessions\n * @param schemaOrCustomColumns - Optional schema name (for PostgreSQL) or callback to add custom columns\n * @param customColumns - Optional callback to add custom columns to the table (when schema is provided)\n *\n * @example\n * ```ts\n * // With custom meta columns\n * await createSessionsTableMigration(knex, 'sessions', (table) => {\n *   table.string('organization_id').nullable();\n * });\n *\n * // With schema and custom meta columns\n * await createSessionsTableMigration(knex, 'sessions', 'my_schema', (table) => {\n *   table.string('organization_id').nullable();\n * });\n * ```\n */\nexport async function createSessionsTableMigration(\n    knex: Knex,\n    tableName: string,\n    schemaOrCustomColumns?: string | ((table: Knex.CreateTableBuilder) => void),\n    customColumns?: (table: Knex.CreateTableBuilder) => void\n): Promise<void> {\n    const schema = typeof schemaOrCustomColumns === 'string' ? schemaOrCustomColumns : undefined;\n    const addCustomColumns =\n        typeof schemaOrCustomColumns === 'function' ? schemaOrCustomColumns : customColumns;\n    const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;\n\n    await schemaBuilder.createTable(tableName, (table) => {\n        table.string('id').primary();\n        table.string('user_id').notNullable();\n        table.string('refresh_token_hash').notNullable();\n        table.string('user_agent').nullable();\n        table.string('ip_address').nullable();\n        table.string('device_name').nullable();\n        table.timestamp('created_at', { useTz: true }).notNullable();\n        table.timestamp('last_used_at', { useTz: true }).notNullable();\n        table.timestamp('expires_at', { useTz: true }).notNullable();\n\n        // Index for querying sessions by user\n        table.index('user_id');\n        // Index for cleaning up expired sessions\n        table.index('expires_at');\n\n        // Add custom meta columns if provided\n        if (addCustomColumns) {\n            addCustomColumns(table);\n        }\n    });\n}\n"],"mappings":";AAiBA,SAAS,aAAa,KAAqB;AACvC,SAAO,IAAI,QAAQ,UAAU,CAAC,WAAW,IAAI,OAAO,YAAY,CAAC,EAAE;AACvE;AAGA,SAAS,aAAa,KAAqB;AACvC,SAAO,IAAI,QAAQ,aAAa,CAAC,GAAG,WAAW,OAAO,YAAY,CAAC;AACvE;AAGA,IAAM,sBAAsB,oBAAI,IAAI;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACJ,CAAC;AAGD,IAAM,yBAAyB,oBAAI,IAAI;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACJ,CAAC;AAaM,IAAM,sBAAN,MAIP;AAAA,EAMI,YAAY,QAAoB;AAC5B,SAAK,OAAO,OAAO;AACnB,SAAK,YAAY,OAAO;AACxB,SAAK,oBAAoB,OAAO;AAChC,SAAK,SAAS,OAAO;AAAA,EACzB;AAAA,EAEA,IAAY,QAAQ;AAChB,UAAM,QAAQ,KAAK,KAAK,KAAK,SAAS;AACtC,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA,EAEA,IAAY,gBAAgB;AACxB,UAAM,QAAQ,KAAK,KAAK,KAAK,iBAAiB;AAC9C,QAAI,KAAK,QAAQ;AACb,aAAO,MAAM,WAAW,KAAK,MAAM;AAAA,IACvC;AACA,WAAO;AAAA,EACX;AAAA;AAAA,EAIA,MAAM,WAAW,MAAkD;AAC/D,UAAM,SAAS,KAAK,SAAS,IAAI;AACjC,UAAM,SAAS,MAAM,KAAK,MAAM,OAAO,MAAM,EAAE,UAAU,IAAI;AAE7D,UAAM,aAAa,SAAS,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,KAAK;AAC1D,UAAM,UAAU,KAAK,MAAM;AAC3B,WAAO,EAAE,GAAG,MAAM,IAAI,QAAQ;AAAA,EAClC;AAAA,EAEA,MAAM,YAAY,IAAwC;AACtD,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACjD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,eAAe,OAA2C;AAC5D,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;AACpD,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,4BAA4B,oBAAwD;AACtF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,sBAAsB,mBAAmB,CAAC,EAAE,MAAM;AACvF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,0BAA0B,kBAAsD;AAClF,UAAM,MAAM,MAAM,KAAK,MAAM,MAAM,EAAE,oBAAoB,iBAAiB,CAAC,EAAE,MAAM;AACnF,WAAO,MAAM,KAAK,WAAW,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,WAAW,IAAY,SAA6C;AACtE,UAAM,YAAY,KAAK,YAAY,OAAO;AAE1C,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EACnD;AAAA,EAEA,MAAM,WAAW,IAA2B;AAExC,UAAM,KAAK,sBAAsB,EAAE;AAEnC,UAAM,KAAK,MAAM,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAC1C;AAAA,EAEA,MAAM,UAAU,QAAoB,UAA4B,CAAC,GAAmC;AAChG,UAAM,QAAQ,QAAQ,SAAS;AAE/B,QAAI,QAAQ,KAAK,MAAM,MAAM;AAG7B,QAAI,OAAO,OAAO;AACd,cAAQ,MAAM,MAAM,SAAS,OAAO,KAAK;AAAA,IAC7C;AAGA,QAAI,OAAO,eAAe;AACtB,cAAQ,MAAM,MAAM,SAAS,QAAQ,IAAI,OAAO,aAAa,GAAG;AAAA,IACpE;AAGA,QAAI,OAAO,oBAAoB,QAAW;AACtC,cAAQ,MAAM,MAAM,qBAAqB,OAAO,eAAe;AAAA,IACnE;AAGA,QAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AACzC,iBAAW,QAAQ,OAAO,OAAO;AAG7B,gBAAQ,MAAM;AAAA,UACV,KAAK,KAAK,OAAO,OAAO,WAAW,YAAY,iBAAiB;AAAA,UAChE,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,QACjC;AAAA,MACJ;AAAA,IACJ;AAGA,QAAI,OAAO,cAAc,OAAO,WAAW,SAAS,GAAG;AACnD,cAAQ,MAAM,MAAM,CAAC,YAA+B;AAChD,mBAAW,QAAQ,OAAO,YAAa;AACnC,kBAAQ;AAAA,YACJ,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,iBACA;AAAA,YACN,KAAK,KAAK,OAAO,OAAO,WAAW,YAC7B,CAAC,KAAK,IAAI,IAAI,IACd,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AAAA,UACjC;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAGA,QAAI,QAAQ,QAAQ;AAChB,YAAM,aAAa,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE,SAAS,CAAC;AAC9E,cAAQ,MAAM,MAAM,MAAM,KAAK,WAAW,MAAM;AAAA,IACpD;AAGA,YAAQ,MAAM,QAAQ,MAAM,KAAK,EAAE,MAAM,QAAQ,CAAC;AAElD,UAAM,OAAO,MAAM;AACnB,UAAM,UAAU,KAAK,SAAS;AAC9B,UAAM,aAAa,UAAU,KAAK,MAAM,GAAG,KAAK,IAAI;AACpD,UAAM,QAAQ,WAAW,IAAI,CAAC,QAAiC,KAAK,WAAW,GAAG,CAAC;AAEnF,QAAI;AACJ,QAAI,WAAW,WAAW,SAAS,GAAG;AAClC,YAAM,WAAW,WAAW,WAAW,SAAS,CAAC;AACjD,mBAAa,OAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,SAAS,GAAG,CAAC,CAAC,EAAE,SAAS,QAAQ;AAAA,IACvF;AAEA,WAAO,EAAE,OAAO,WAAW;AAAA,EAC/B;AAAA;AAAA,EAIA,MAAM,cAAc,SAA6D;AAC7E,UAAM,YAAY,KAAK,YAAY,OAAO;AAC1C,UAAM,SAAS,MAAM,KAAK,cAAc,OAAO,SAAS,EAAE,UAAU,IAAI;AAExE,UAAM,aAAa,SAAS,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,QAAQ;AAC7D,UAAM,UAAU,QAAQ,MAAM;AAC9B,WAAO,EAAE,GAAG,SAAS,IAAI,QAAQ;AAAA,EACrC;AAAA,EAEA,MAAM,eAAe,IAA+C;AAChE,UAAM,MAAM,MAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;AACzD,WAAO,MAAM,KAAK,cAAc,GAAG,IAAI;AAAA,EAC3C;AAAA,EAEA,MAAM,oBAAoB,QAA2C;AACjE,UAAM,OAAO,MAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC;AAC/D,WAAO,KAAK,IAAI,CAAC,QAAiC,KAAK,cAAc,GAAG,CAAC;AAAA,EAC7E;AAAA,EAEA,MAAM,cAAc,IAAe,SAA2E;AAC1G,UAAM,YAAY,KAAK,mBAAmB,OAAO;AAEjD,QAAI,OAAO,KAAK,SAAS,EAAE,WAAW,GAAG;AACrC;AAAA,IACJ;AAEA,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,SAAS;AAAA,EAC3D;AAAA,EAEA,MAAM,cAAc,IAA8B;AAC9C,UAAM,KAAK,cAAc,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO;AAAA,EAClD;AAAA,EAEA,MAAM,sBAAsB,QAA+B;AACvD,UAAM,KAAK,cAAc,MAAM,EAAE,SAAS,OAAO,CAAC,EAAE,OAAO;AAAA,EAC/D;AAAA,EAEA,MAAM,wBAAuC;AACzC,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,KAAK,cAAc,MAAM,cAAc,KAAK,GAAG,EAAE,OAAO;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,aAAa,OAAwB;AACzC,QAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,WAAO,OAAO,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,SAAS,MAAsD;AACnE,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,MAA+B;AAAA,MAEjC,OAAO,KAAK;AAAA,MACZ,YAAY,KAAK,aAAa;AAAA,MAC9B,WAAW,KAAK,YAAY;AAAA,MAC5B,eAAe,KAAK;AAAA,MACpB,OAAO,KAAK,UAAU,KAAK,KAAK;AAAA,MAChC,mBAAmB,KAAK,kBAAkB,IAAI;AAAA,MAC9C,oBAAoB,KAAK,qBAAqB;AAAA,MAC9C,sBAAsB,KAAK,sBAAsB;AAAA,MACjD,wBAAwB,KAAK,wBAAwB;AAAA,MACrD,YAAY,KAAK,aAAa;AAAA,MAC9B,YAAY,KAAK,aAAa;AAAA,IAClC;AAGA,QAAI,KAAK,OAAO,QAAW;AACvB,UAAI,KAAK,KAAK;AAAA,IAClB;AAEA,QAAI,KAAK,MAAM;AACX,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,IAAI,GAAG;AAClD,YAAI,aAAa,GAAG,CAAC,IAAI;AAAA,MAC7B;AAAA,IACJ;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,WAAW,KAA0C;AACzD,UAAM,OAAgC,CAAC;AACvC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC5C,UAAI,CAAC,oBAAoB,IAAI,GAAG,GAAG;AAC/B,aAAK,aAAa,GAAG,CAAC,IAAI;AAAA,MAC9B;AAAA,IACJ;AAEA,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,OAAO,IAAI;AAAA,MACX,WAAW,IAAI;AAAA,MACf,UAAU,IAAI;AAAA,MACd,cAAc,IAAI;AAAA,MAClB,OAAO,OAAO,IAAI,UAAU,WAAW,KAAK,MAAM,IAAI,KAAK,IAAI,IAAI;AAAA,MACnE,iBAAiB,QAAQ,IAAI,iBAAiB;AAAA,MAC9C,mBAAmB,IAAI;AAAA,MACvB,oBAAoB,IAAI;AAAA,MACxB,sBAAsB,IAAI,yBACpB,KAAK,aAAa,IAAI,sBAAsB,IAC5C;AAAA,MACN,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,GAAI,OAAO,KAAK,IAAI,EAAE,SAAS,IAAI,EAAE,KAAmB,IAAI,CAAC;AAAA,IACjE;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,YAAY,SAAuD;AACvE,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,QAAQ;AAAA,IAC9B;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,cAAc,SAAS;AACvB,gBAAU,YAAY,QAAQ,YAAY;AAAA,IAC9C;AACA,QAAI,QAAQ,iBAAiB,QAAW;AACpC,gBAAU,gBAAgB,QAAQ;AAAA,IACtC;AACA,QAAI,QAAQ,UAAU,QAAW;AAC7B,gBAAU,QAAQ,KAAK,UAAU,QAAQ,KAAK;AAAA,IAClD;AACA,QAAI,QAAQ,oBAAoB,QAAW;AACvC,gBAAU,oBAAoB,QAAQ,kBAAkB,IAAI;AAAA,IAChE;AACA,QAAI,uBAAuB,SAAS;AAChC,gBAAU,qBAAqB,QAAQ,qBAAqB;AAAA,IAChE;AACA,QAAI,wBAAwB,SAAS;AACjC,gBAAU,uBAAuB,QAAQ,sBAAsB;AAAA,IACnE;AACA,QAAI,0BAA0B,SAAS;AACnC,gBAAU,yBAAyB,QAAQ,wBAAwB;AAAA,IACvE;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,QAAI,QAAQ,MAAM;AACd,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,IAAI,GAAG;AACrD,kBAAU,aAAa,GAAG,CAAC,IAAI;AAAA,MACnC;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,YAAY,SAA6D;AAC7E,UAAM,MAA+B;AAAA,MACjC,SAAS,QAAQ;AAAA,MACjB,oBAAoB,QAAQ;AAAA,MAC5B,YAAY,QAAQ,aAAa;AAAA,MACjC,YAAY,QAAQ,aAAa;AAAA,MACjC,aAAa,QAAQ,cAAc;AAAA,MACnC,YAAY,QAAQ;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,IACxB;AAGA,QAAI,QAAQ,OAAO,QAAW;AAC1B,UAAI,KAAK,QAAQ;AAAA,IACrB;AAEA,QAAI,QAAQ,MAAM;AACd,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,IAAI,GAAG;AACrD,YAAI,aAAa,GAAG,CAAC,IAAI;AAAA,MAC7B;AAAA,IACJ;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,cAAc,KAA8C;AAChE,UAAM,OAAgC,CAAC;AACvC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC5C,UAAI,CAAC,uBAAuB,IAAI,GAAG,GAAG;AAClC,aAAK,aAAa,GAAG,CAAC,IAAI;AAAA,MAC9B;AAAA,IACJ;AAEA,WAAO;AAAA,MACH,IAAI,IAAI;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,kBAAkB,IAAI;AAAA,MACtB,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,YAAY,KAAK,aAAa,IAAI,YAAY;AAAA,MAC9C,WAAW,KAAK,aAAa,IAAI,UAAU;AAAA,MAC3C,GAAI,OAAO,KAAK,IAAI,EAAE,SAAS,IAAI,EAAE,KAAoB,IAAI,CAAC;AAAA,IAClE;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,mBAAmB,SAAqF;AAC5G,UAAM,YAAqC,CAAC;AAE5C,QAAI,QAAQ,qBAAqB,QAAW;AACxC,gBAAU,qBAAqB,QAAQ;AAAA,IAC3C;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,eAAe,SAAS;AACxB,gBAAU,aAAa,QAAQ,aAAa;AAAA,IAChD;AACA,QAAI,gBAAgB,SAAS;AACzB,gBAAU,cAAc,QAAQ,cAAc;AAAA,IAClD;AACA,QAAI,QAAQ,eAAe,QAAW;AAClC,gBAAU,eAAe,QAAQ;AAAA,IACrC;AACA,QAAI,QAAQ,cAAc,QAAW;AACjC,gBAAU,aAAa,QAAQ;AAAA,IACnC;AAEA,QAAI,QAAQ,MAAM;AACd,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,IAAI,GAAG;AACrD,kBAAU,aAAa,GAAG,CAAC,IAAI;AAAA,MACnC;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AACJ;;;ACjbA,eAAsB,0BAClB,MACA,WACA,uBACA,eACa;AACb,QAAM,SAAS,OAAO,0BAA0B,WAAW,wBAAwB;AACnF,QAAM,mBACF,OAAO,0BAA0B,aAAa,wBAAwB;AAC1E,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,OAAO,EAAE,YAAY,EAAE,OAAO;AAC3C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,WAAW,EAAE,SAAS;AACnC,UAAM,OAAO,eAAe,EAAE,YAAY;AAC1C,UAAM,MAAM,OAAO,EAAE,YAAY;AACjC,UAAM,QAAQ,mBAAmB,EAAE,YAAY,EAAE,UAAU,KAAK;AAChE,UAAM,OAAO,oBAAoB,EAAE,SAAS;AAC5C,UAAM,OAAO,sBAAsB,EAAE,SAAS;AAC9C,UAAM,UAAU,0BAA0B,EAAE,OAAO,KAAK,CAAC,EAAE,SAAS;AACpE,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,OAAO;AACnB,UAAM,MAAM,oBAAoB;AAChC,UAAM,MAAM,sBAAsB;AAGlC,QAAI,kBAAkB;AAClB,uBAAiB,KAAK;AAAA,IAC1B;AAAA,EACJ,CAAC;AACL;AAwBA,eAAsB,6BAClB,MACA,WACA,uBACA,eACa;AACb,QAAM,SAAS,OAAO,0BAA0B,WAAW,wBAAwB;AACnF,QAAM,mBACF,OAAO,0BAA0B,aAAa,wBAAwB;AAC1E,QAAM,gBAAgB,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,KAAK;AAErE,QAAM,cAAc,YAAY,WAAW,CAAC,UAAU;AAClD,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,UAAM,OAAO,SAAS,EAAE,YAAY;AACpC,UAAM,OAAO,oBAAoB,EAAE,YAAY;AAC/C,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,YAAY,EAAE,SAAS;AACpC,UAAM,OAAO,aAAa,EAAE,SAAS;AACrC,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC3D,UAAM,UAAU,gBAAgB,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAC7D,UAAM,UAAU,cAAc,EAAE,OAAO,KAAK,CAAC,EAAE,YAAY;AAG3D,UAAM,MAAM,SAAS;AAErB,UAAM,MAAM,YAAY;AAGxB,QAAI,kBAAkB;AAClB,uBAAiB,KAAK;AAAA,IAC1B;AAAA,EACJ,CAAC;AACL;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xcelsior/auth-adapter-knex",
-  "version": "1.1.4",
+  "version": "1.1.5",
   "description": "Knex storage adapter for @xcelsior/auth (PostgreSQL, MySQL, SQLite, etc.)",
   "exports": {
     ".": {
@@ -16,7 +16,7 @@
   },
   "peerDependencies": {
     "knex": "^3.1.0",
-    "@xcelsior/auth": "1.1.5"
+    "@xcelsior/auth": "1.1.7"
   },
   "scripts": {
     "build": "tsup && tsc --noEmit",

package/src/knex.ts

@@ -11,6 +11,7 @@ import type {
     UserFilter,
     UserId,
     UserMeta,
+    SessionMeta,
 } from '@xcelsior/auth';
 
 /** Convert camelCase string to snake_case */
@@ -39,6 +40,19 @@ const CORE_USER_DB_FIELDS = new Set([
     'updated_at',
 ]);
 
+/** Core session DB columns that are not part of meta */
+const CORE_SESSION_DB_FIELDS = new Set([
+    'id',
+    'user_id',
+    'refresh_token_hash',
+    'user_agent',
+    'ip_address',
+    'device_name',
+    'created_at',
+    'last_used_at',
+    'expires_at',
+]);
+
 export interface KnexConfig {
     /** Pre-configured Knex instance */
     knex: Knex;
@@ -50,8 +64,10 @@ export interface KnexConfig {
     schema?: string;
 }
 
-export class KnexStorageProvider<Meta extends UserMeta = Record<string, never>>
-    implements IStorageProvider<Meta>
+export class KnexStorageProvider<
+    Meta extends UserMeta = Record<string, any>,
+    SMeta extends SessionMeta = Record<string, any>,
+> implements IStorageProvider<Meta, SMeta>
 {
     private knex: Knex;
     private tableName: string;
@@ -204,26 +220,26 @@ export class KnexStorageProvider<Meta extends UserMeta = Record<string, never>>
 
     // ==================== Session Methods ====================
 
-    async createSession(session: CreateSessionInput): Promise<Session> {
+    async createSession(session: CreateSessionInput<SMeta>): Promise<Session<SMeta>> {
         const dbSession = this.toDbSession(session);
         const result = await this.sessionsTable.insert(dbSession).returning('id');
         // PostgreSQL returns [{ id }] from .returning(), SQLite returns [insertedId]
         const insertedId = result?.[0]?.id ?? result?.[0] ?? session.id;
         const finalId = session.id ?? insertedId;
-        return { ...session, id: finalId } as Session;
+        return { ...session, id: finalId } as Session<SMeta>;
     }
 
-    async getSessionById(id: SessionId): Promise<Session | null> {
+    async getSessionById(id: SessionId): Promise<Session<SMeta> | null> {
         const row = await this.sessionsTable.where({ id }).first();
         return row ? this.fromDbSession(row) : null;
     }
 
-    async getSessionsByUserId(userId: UserId): Promise<Session[]> {
+    async getSessionsByUserId(userId: UserId): Promise<Session<SMeta>[]> {
         const rows = await this.sessionsTable.where({ user_id: userId });
         return rows.map((row: Record<string, unknown>) => this.fromDbSession(row));
     }
 
-    async updateSession(id: SessionId, updates: Partial<Session>): Promise<void> {
+    async updateSession(id: SessionId, updates: Partial<Session<SMeta>> & Record<string, unknown>): Promise<void> {
         const dbUpdates = this.toDbSessionUpdates(updates);
 
         if (Object.keys(dbUpdates).length === 0) {
@@ -371,9 +387,10 @@ export class KnexStorageProvider<Meta extends UserMeta = Record<string, never>>
     // ==================== Session Mapping Helpers ====================
 
     /**
-     * Convert Session object to database row format (snake_case)
+     * Convert Session object to database row format (snake_case).
+     * Meta fields are flattened as individual snake_case columns.
      */
-    private toDbSession(session: CreateSessionInput): Record<string, unknown> {
+    private toDbSession(session: CreateSessionInput<SMeta>): Record<string, unknown> {
         const row: Record<string, unknown> = {
             user_id: session.userId,
             refresh_token_hash: session.refreshTokenHash,
@@ -389,13 +406,27 @@ export class KnexStorageProvider<Meta extends UserMeta = Record<string, never>>
         if (session.id !== undefined) {
             row.id = session.id;
         }
+        // Flatten meta fields as individual snake_case columns
+        if (session.meta) {
+            for (const [key, value] of Object.entries(session.meta)) {
+                row[camelToSnake(key)] = value;
+            }
+        }
         return row;
     }
 
     /**
-     * Convert database row to Session object (camelCase)
+     * Convert database row to Session object (camelCase).
+     * Non-core columns are gathered into the typed `meta` object.
      */
-    private fromDbSession(row: Record<string, unknown>): Session {
+    private fromDbSession(row: Record<string, unknown>): Session<SMeta> {
+        const meta: Record<string, unknown> = {};
+        for (const [key, value] of Object.entries(row)) {
+            if (!CORE_SESSION_DB_FIELDS.has(key)) {
+                meta[snakeToCamel(key)] = value;
+            }
+        }
+
         return {
             id: row.id as string | number,
             userId: row.user_id as string | number,
@@ -406,13 +437,15 @@ export class KnexStorageProvider<Meta extends UserMeta = Record<string, never>>
             createdAt: this.toDateString(row.created_at),
             lastUsedAt: this.toDateString(row.last_used_at),
             expiresAt: this.toDateString(row.expires_at),
-        };
+            ...(Object.keys(meta).length > 0 ? { meta: meta as SMeta } : {}),
+        } as Session<SMeta>;
     }
 
     /**
-     * Convert partial Session updates to database format
+     * Convert partial Session updates to database format.
+     * Meta fields in updates are flattened as individual snake_case columns.
      */
-    private toDbSessionUpdates(updates: Partial<Session>): Record<string, unknown> {
+    private toDbSessionUpdates(updates: Partial<Session<SMeta>> & Record<string, unknown>): Record<string, unknown> {
         const dbUpdates: Record<string, unknown> = {};
 
         if (updates.refreshTokenHash !== undefined) {
@@ -433,6 +466,12 @@ export class KnexStorageProvider<Meta extends UserMeta = Record<string, never>>
         if (updates.expiresAt !== undefined) {
             dbUpdates.expires_at = updates.expiresAt;
         }
+        // Flatten meta fields as individual snake_case columns
+        if (updates.meta) {
+            for (const [key, value] of Object.entries(updates.meta)) {
+                dbUpdates[camelToSnake(key)] = value;
+            }
+        }
 
         return dbUpdates;
     }

package/src/migration.ts

@@ -82,12 +82,34 @@ export async function createUsersTableMigration(
 /**
  * SQL migration helper to create the sessions table
  * Can be used with Knex migrations
+ *
+ * @param knex - Knex instance
+ * @param tableName - Table name for sessions
+ * @param schemaOrCustomColumns - Optional schema name (for PostgreSQL) or callback to add custom columns
+ * @param customColumns - Optional callback to add custom columns to the table (when schema is provided)
+ *
+ * @example
+ * ```ts
+ * // With custom meta columns
+ * await createSessionsTableMigration(knex, 'sessions', (table) => {
+ *   table.string('organization_id').nullable();
+ * });
+ *
+ * // With schema and custom meta columns
+ * await createSessionsTableMigration(knex, 'sessions', 'my_schema', (table) => {
+ *   table.string('organization_id').nullable();
+ * });
+ * ```
  */
 export async function createSessionsTableMigration(
     knex: Knex,
     tableName: string,
-    schema?: string
+    schemaOrCustomColumns?: string | ((table: Knex.CreateTableBuilder) => void),
+    customColumns?: (table: Knex.CreateTableBuilder) => void
 ): Promise<void> {
+    const schema = typeof schemaOrCustomColumns === 'string' ? schemaOrCustomColumns : undefined;
+    const addCustomColumns =
+        typeof schemaOrCustomColumns === 'function' ? schemaOrCustomColumns : customColumns;
     const schemaBuilder = schema ? knex.schema.withSchema(schema) : knex.schema;
 
     await schemaBuilder.createTable(tableName, (table) => {
@@ -105,5 +127,10 @@ export async function createSessionsTableMigration(
         table.index('user_id');
         // Index for cleaning up expired sessions
         table.index('expires_at');
+
+        // Add custom meta columns if provided
+        if (addCustomColumns) {
+            addCustomColumns(table);
+        }
     });
 }