alepha 0.20.2 → 0.20.4

package/dist/api/verifications/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/api/verifications/entities/verifications.ts","../../../src/api/verifications/schemas/verificationSettingsSchema.ts","../../../src/api/verifications/parameters/VerificationParameters.ts","../../../src/api/verifications/schemas/requestVerificationCodeResponseSchema.ts","../../../src/api/verifications/schemas/validateVerificationCodeResponseSchema.ts","../../../src/api/verifications/schemas/verificationTypeEnumSchema.ts","../../../src/api/verifications/services/VerificationService.ts","../../../src/api/verifications/controllers/VerificationController.ts","../../../src/api/verifications/jobs/VerificationJobs.ts","../../../src/api/verifications/index.ts"],"mappings":";;;;;;;;;cAKa,aAAA,EAAa,aAAA,CAAA,eAAA,UAAA,OAAA;gDAwCxB,QAAA,CAAA,OAAA;;;;;;;;;;cAEW,wBAAA,WAAwB,OAAA;gDAAuB,QAAA,CAAA,OAAA;;;;;;;;;;cAC/C,8BAAA,EAA8B,aAAA,CAAA,aAAA,UAAA,OAAA;gDAA6B,QAAA,CAAA,OAAA;;;;;;;;;;KAC5D,kBAAA,GAAqB,MAAA,QAAc,aAAA,CAAc,MAAA;;;cC9ChD,0BAAA,WAA0B,OAAA;;iBAsErC,QAAA,CAAA,QAAA;;;;;;;;;;;;;;KAEU,oBAAA,GAAuB,MAAA,QAAc,0BAAA;;;;;;cChEpC,mBAAA,EAAmB,QAAA,CAAA,IAAA,UAAA,OAAA;;iBAmB9B,QAAA,CAAA,QAAA;;;;;;;;;;;;;;KAEU,mBAAA,GAAsB,MAAA,QAAc,mBAAA,CAAoB,MAAA;AAAA;EAAA,UAGxD,KAAA;IAAA,CACP,mBAAA,CAAoB,GAAA,GAAM,mBAAA;EAAA;AAAA;AAAA,cAMlB,sBAAA;EAAA,mBACQ,OAAA,EAAO,QAAA;;;;;;;;;;;;;;;;EAEnB,GAAA,iBAAoB,oBAAA,CAAA,CACzB,GAAA,EAAK,CAAA,GACJ,oBAAA,CAAqB,CAAA;AAAA;;;cC5Cb,qCAAA,WAAqC,OAAA;SAgBhD,QAAA,CAAA,OAAA;;;;;KAEU,2BAAA,GAA8B,MAAA,QACjC,qCAAA;;;cCnBI,sCAAA,WAAsC,OAAA;MASjD,QAAA,CAAA,QAAA;;;KAEU,gCAAA,GAAmC,MAAA,QACtC,sCAAA;;;cCZI,0BAAA,EAAqD,QAAA,CAA3B,OAAA;AAAA,KAC3B,oBAAA,GAAuB,MAAA,QAAc,0BAAA;;;cCWpC,mBAAA;EAAA,mBACQ,GAAA,EADW,gBAAA,CACR,MAAA;EAAA,mBACH,gBAAA,EAAgB,gBAAA;EAAA,mBAChB,sBAAA,EAAsB,sBAAA;EAAA,mBACtB,sBAAA,EAAsB,aAAA,CAAA,UAAA,UAAA,OAAA;kDADA,QAAA,CAAA,OAAA;;;;;;;;;;EAG5B,WAAA,CACX,KAAA,EAAO,iBAAA,GACN,OAAA,CAAQ,kBAAA;EAmCJ,kBAAA,CAAmB,KAAA,EAAO,iBAAA,GAAiB,OAAA,eAAA,QAAA,UAAA,OAAA;kDAAA,QAAA,CAAA,OAAA;;;;;;;;;;kDAAA,QAAA,CAAA,OAAA;;;;;;;;;;ENrD1B;;;;;EM+EX,kBAAA,CACX,KAAA,EAAO,iBAAA,GACN,OAAA,CAAQ,2BAAA;EAmEE,UAAA,CACX,KAAA,EAAO,iBAAA,EACP,IAAA,WACC,OAAA,CAAQ,gCAAA;EA+EJ,QAAA,CAAS,IAAA;EAIT,aAAA,CAAc,IAAA,EAAM,oBAAA;AAAA;AAAA,UAcZ,iBAAA;EACf,IAAA,EAAM,oBAAA;EACN,MAAA;AAAA;;;cCxPW,sBAAA;EAAA,mBACQ,mBAAA,EAAmB,mBAAA;EAAA,SAEtB,GAAA;EAAA,SACA,KAAA;EAAA,SAEA,uBAAA,mBAAuB,iBAAA;;YALD,QAAA,CAAA,OAAA;IAAA;;;;;;;;;;;WA0BtB,wBAAA,mBAAwB,iBAAA;;YArBD,QAAA,CAAA,OAAA;IAAA;;;;;;;;;;;;;cCN5B,gBAAA;EAAA,mBACQ,sBAAA,EAAsB,aAAA,CAAA,UAAA,UAAA,OAAA;kDADd,QAAA,CAAA,OAAA;;;;;;;;;;qBAER,sBAAA,EAAsB,sBAAA;EAAA,mBACtB,gBAAA,EAAgB,gBAAA;EAAA,SAEnB,YAAA,EAFmB,mBAAA,CAEP,kBAAA;AAAA;;;;ARP9B;;;;;;;;;;cSyBa,qBAAA,EAAqB,QAAA,CAAA,OAAA,CAQhC,QAAA,CARgC,MAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/api/verifications/entities/verifications.ts","../../../src/api/verifications/schemas/verificationSettingsSchema.ts","../../../src/api/verifications/parameters/VerificationParameters.ts","../../../src/api/verifications/schemas/requestVerificationCodeResponseSchema.ts","../../../src/api/verifications/schemas/validateVerificationCodeResponseSchema.ts","../../../src/api/verifications/schemas/verificationTypeEnumSchema.ts","../../../src/api/verifications/services/VerificationService.ts","../../../src/api/verifications/controllers/VerificationController.ts","../../../src/api/verifications/jobs/VerificationJobs.ts","../../../src/api/verifications/index.ts"],"mappings":";;;;;;;;;cAKa,aAAA,EAAa,aAAA,CAAA,eAAA,UAAA,OAAA;gDAwCxB,QAAA,CAAA,OAAA;;;;;;;;;;cAEW,wBAAA,WAAwB,OAAA;gDAAuB,QAAA,CAAA,OAAA;;;;;;;;;;cAC/C,8BAAA,EAA8B,aAAA,CAAA,aAAA,UAAA,OAAA;gDAA6B,QAAA,CAAA,OAAA;;;;;;;;;;KAC5D,kBAAA,GAAqB,MAAA,QAAc,aAAA,CAAc,MAAA;;;cC9ChD,0BAAA,WAA0B,OAAA;;iBAsErC,QAAA,CAAA,QAAA;;;;;;;;;;;;;;KAEU,oBAAA,GAAuB,MAAA,QAAc,0BAAA;;;;;;cChEpC,mBAAA,EAAmB,QAAA,CAAA,IAAA,UAAA,OAAA;;iBAmB9B,QAAA,CAAA,QAAA;;;;;;;;;;;;;;KAEU,mBAAA,GAAsB,MAAA,QAAc,mBAAA,CAAoB,MAAA;AAAA;EAAA,UAGxD,KAAA;IAAA,CACP,mBAAA,CAAoB,GAAA,GAAM,mBAAA;EAAA;AAAA;AAAA,cAMlB,sBAAA;EAAA,mBACQ,OAAA,EAAO,QAAA;;;;;;;;;;;;;;;;EAEnB,GAAA,iBAAoB,oBAAA,CAAA,CACzB,GAAA,EAAK,CAAA,GACJ,oBAAA,CAAqB,CAAA;AAAA;;;cC5Cb,qCAAA,WAAqC,OAAA;SAgBhD,QAAA,CAAA,OAAA;;;;;KAEU,2BAAA,GAA8B,MAAA,QACjC,qCAAA;;;cCnBI,sCAAA,WAAsC,OAAA;MASjD,QAAA,CAAA,QAAA;;;KAEU,gCAAA,GAAmC,MAAA,QACtC,sCAAA;;;cCZI,0BAAA,EAAqD,QAAA,CAA3B,OAAA;AAAA,KAC3B,oBAAA,GAAuB,MAAA,QAAc,0BAAA;;;cCWpC,mBAAA;EAAA,mBACQ,GAAA,EADW,gBAAA,CACR,MAAA;EAAA,mBACH,gBAAA,EAAgB,gBAAA;EAAA,mBAChB,sBAAA,EAAsB,sBAAA;EAAA,mBACtB,sBAAA,EAAsB,aAAA,CAAA,UAAA,UAAA,OAAA;kDADA,QAAA,CAAA,OAAA;;;;;;;;;;EAG5B,WAAA,CACX,KAAA,EAAO,iBAAA,GACN,OAAA,CAAQ,kBAAA;EAmCJ,kBAAA,CAAmB,KAAA,EAAO,iBAAA,GAAiB,OAAA,eAAA,QAAA,UAAA,OAAA;kDAAA,QAAA,CAAA,OAAA;;;;;;;;;;kDAAA,QAAA,CAAA,OAAA;;;;;;;;;;ENrD1B;;;;;EM+EX,kBAAA,CACX,KAAA,EAAO,iBAAA,GACN,OAAA,CAAQ,2BAAA;EAoEE,UAAA,CACX,KAAA,EAAO,iBAAA,EACP,IAAA,WACC,OAAA,CAAQ,gCAAA;EA+EJ,QAAA,CAAS,IAAA;EAIT,aAAA,CAAc,IAAA,EAAM,oBAAA;AAAA;AAAA,UAcZ,iBAAA;EACf,IAAA,EAAM,oBAAA;EACN,MAAA;AAAA;;;cCzPW,sBAAA;EAAA,mBACQ,mBAAA,EAAmB,mBAAA;EAAA,SAEtB,GAAA;EAAA,SACA,KAAA;EAAA,SAEA,uBAAA,mBAAuB,iBAAA;;YALD,QAAA,CAAA,OAAA;IAAA;;;;;;;;;;;WA0BtB,wBAAA,mBAAwB,iBAAA;;YArBD,QAAA,CAAA,OAAA;IAAA;;;;;;;;;;;;;cCN5B,gBAAA;EAAA,mBACQ,sBAAA,EAAsB,aAAA,CAAA,UAAA,UAAA,OAAA;kDADd,QAAA,CAAA,OAAA;;;;;;;;;;qBAER,sBAAA,EAAsB,sBAAA;EAAA,mBACtB,gBAAA,EAAgB,gBAAA;EAAA,SAEnB,YAAA,EAFmB,mBAAA,CAEP,kBAAA;AAAA;;;;ARP9B;;;;;;;;;;cSyBa,qBAAA,EAAqB,QAAA,CAAA,OAAA,CAQhC,QAAA,CARgC,MAAA"}

package/dist/api/verifications/index.js

@@ -218,7 +218,8 @@ var VerificationService = class {
 		const verification = await this.verificationRepository.create({
 			type: entry.type,
 			target: entry.target,
-			code: this.hashCode(token)
+			code: this.hashCode(token),
+			createdAt: this.dateTimeProvider.nowISOString()
 		});
 		this.log.info("Verification created", {
 			id: verification.id,

package/dist/api/verifications/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/api/verifications/schemas/requestVerificationCodeResponseSchema.ts","../../../src/api/verifications/schemas/validateVerificationCodeResponseSchema.ts","../../../src/api/verifications/schemas/verificationTypeEnumSchema.ts","../../../src/api/verifications/entities/verifications.ts","../../../src/api/verifications/schemas/verificationSettingsSchema.ts","../../../src/api/verifications/parameters/VerificationParameters.ts","../../../src/api/verifications/services/VerificationService.ts","../../../src/api/verifications/controllers/VerificationController.ts","../../../src/api/verifications/jobs/VerificationJobs.ts","../../../src/api/verifications/index.ts"],"sourcesContent":["import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const requestVerificationCodeResponseSchema = t.object({\n  token: t.string({\n    description:\n      \"The verification token (6-digit code for phone, UUID for email). The caller should send this to the user via their preferred notification method.\",\n  }),\n  codeExpiration: t.integer({\n    description: \"Time in seconds before your verification token expires.\",\n  }),\n  verificationCooldown: t.integer({\n    description:\n      \"Cooldown period in seconds before you can request another verification.\",\n  }),\n  maxVerificationAttempts: t.integer({\n    description:\n      \"Maximum number of verification attempts allowed before the token is locked.\",\n  }),\n});\n\nexport type RequestVerificationResponse = Static<\n  typeof requestVerificationCodeResponseSchema\n>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const validateVerificationCodeResponseSchema = t.object({\n  ok: t.boolean({\n    description: \"Indicates whether the verification was successful.\",\n  }),\n  alreadyVerified: t.optional(\n    t.boolean({\n      description: \"Indicates whether the target was already verified.\",\n    }),\n  ),\n});\n\nexport type ValidateVerificationCodeResponse = Static<\n  typeof validateVerificationCodeResponseSchema\n>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const verificationTypeEnumSchema = t.enum([\"code\", \"link\"]);\nexport type VerificationTypeEnum = Static<typeof verificationTypeEnumSchema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\nimport { verificationTypeEnumSchema } from \"../schemas/verificationTypeEnumSchema.ts\";\n\nexport const verifications = $entity({\n  name: \"verification\",\n  schema: t.object({\n    id: db.primaryKey(t.bigint()),\n\n    createdAt: db.createdAt(),\n\n    updatedAt: db.updatedAt(),\n\n    version: db.version(),\n\n    type: verificationTypeEnumSchema,\n\n    target: t.text({\n      description: \"Can be a phone (E.164 format) or email address\",\n    }),\n\n    code: t.text({\n      description: \"Hashed verification token (n-digit code or UUID)\",\n    }),\n\n    verifiedAt: t.optional(\n      t.datetime({\n        description: \"When it was successfully verified\",\n      }),\n    ),\n\n    attempts: db.default(\n      t.integer({\n        description: \"Number of failed attempts (to prevent brute-force)\",\n      }),\n      0,\n    ),\n  }),\n  indexes: [\n    \"createdAt\",\n    {\n      columns: [\"target\", \"code\"],\n    },\n  ],\n});\n\nexport const verificationEntitySchema = verifications.schema;\nexport const verificationEntityInsertSchema = verifications.insertSchema;\nexport type VerificationEntity = Static<typeof verifications.schema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const verificationSettingsSchema = t.object({\n  code: t.object(\n    {\n      maxAttempts: t.integer({\n        description:\n          \"Maximum number of attempts before locking the verification.\",\n        minimum: 1,\n        maximum: 10,\n      }),\n      codeLength: t.integer({\n        description: \"Length of the verification code.\",\n        minimum: 4,\n        maximum: 12,\n      }),\n      codeExpiration: t.integer({\n        description: \"Time in seconds before the verification code expires.\",\n        minimum: 60, // 1 minute\n        maximum: 3600, // 1 hour\n      }),\n      verificationCooldown: t.integer({\n        description: \"Cooldown period in seconds after a request verification.\",\n        minimum: 0,\n        maximum: 3600, // 1 hour\n      }),\n      limitPerDay: t.integer({\n        description:\n          \"Maximum number of verification requests per day for one entry.\",\n        minimum: 1,\n        maximum: 100,\n      }),\n    },\n    {\n      description: \"Settings specific to code verifications.\",\n    },\n  ),\n  link: t.object(\n    {\n      maxAttempts: t.integer({\n        description:\n          \"Maximum number of attempts before locking the verification.\",\n        minimum: 1,\n        maximum: 10,\n      }),\n      codeExpiration: t.integer({\n        description: \"Time in seconds before the verification token expires.\",\n        minimum: 60, // 1 minute\n        maximum: 7200, // 2 hours\n      }),\n      verificationCooldown: t.integer({\n        description: \"Cooldown period in seconds after a request verification.\",\n        minimum: 0,\n        maximum: 3600, // 1 hour\n      }),\n      limitPerDay: t.integer({\n        description:\n          \"Maximum number of verification requests per day for one entry.\",\n        minimum: 1,\n        maximum: 100,\n      }),\n    },\n    {\n      description: \"Settings specific to link verifications.\",\n    },\n  ),\n  purgeDays: t.integer({\n    description:\n      \"Number of days after which expired verifications are automatically deleted. Set to 0 to disable auto-deletion.\",\n    minimum: 0,\n    maximum: 365,\n  }),\n});\n\nexport type VerificationSettings = Static<typeof verificationSettingsSchema>;\n","import { $atom, $state, type Static } from \"alepha\";\nimport {\n  type VerificationSettings,\n  verificationSettingsSchema,\n} from \"../schemas/verificationSettingsSchema.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Verification settings configuration atom\n */\nexport const verificationOptions = $atom({\n  name: \"alepha.api.verifications.options\",\n  schema: verificationSettingsSchema,\n  default: {\n    code: {\n      maxAttempts: 5,\n      codeLength: 6,\n      codeExpiration: 300, // 5 minutes\n      verificationCooldown: 90,\n      limitPerDay: 10,\n    },\n    link: {\n      maxAttempts: 3, // Lower since UUIDs are harder to guess\n      codeExpiration: 1800, // 30 minutes\n      verificationCooldown: 90,\n      limitPerDay: 10,\n    },\n    purgeDays: 1,\n  },\n});\n\nexport type VerificationOptions = Static<typeof verificationOptions.schema>;\n\ndeclare module \"alepha\" {\n  interface State {\n    [verificationOptions.key]: VerificationOptions;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport class VerificationParameters {\n  protected readonly options = $state(verificationOptions);\n\n  public get<K extends keyof VerificationSettings>(\n    key: K,\n  ): VerificationSettings[K] {\n    return this.options[key];\n  }\n}\n","import { createHash, randomInt, randomUUID } from \"node:crypto\";\nimport { $inject } from \"alepha\";\nimport { DateTimeProvider } from \"alepha/datetime\";\nimport { $logger } from \"alepha/logger\";\nimport { $repository } from \"alepha/orm\";\nimport { BadRequestError, NotFoundError } from \"alepha/server\";\nimport {\n  type VerificationEntity,\n  verifications,\n} from \"../entities/verifications.ts\";\nimport { VerificationParameters } from \"../parameters/VerificationParameters.ts\";\nimport type { RequestVerificationResponse } from \"../schemas/requestVerificationCodeResponseSchema.ts\";\nimport type { ValidateVerificationCodeResponse } from \"../schemas/validateVerificationCodeResponseSchema.ts\";\nimport type { VerificationTypeEnum } from \"../schemas/verificationTypeEnumSchema.ts\";\n\nexport class VerificationService {\n  protected readonly log = $logger();\n  protected readonly dateTimeProvider = $inject(DateTimeProvider);\n  protected readonly verificationParameters = $inject(VerificationParameters);\n  protected readonly verificationRepository = $repository(verifications);\n\n  public async findByEntry(\n    entry: VerificationEntry,\n  ): Promise<VerificationEntity> {\n    this.log.trace(\"Finding verification by entry\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    const results = await this.verificationRepository.findMany({\n      limit: 1, // only need the most recent entry\n      orderBy: {\n        column: \"createdAt\",\n        direction: \"desc\",\n      },\n      where: {\n        type: { eq: entry.type },\n        target: { eq: entry.target },\n      },\n    });\n\n    if (results.length === 0) {\n      this.log.debug(\"Verification entry not found\", {\n        type: entry.type,\n        target: entry.target,\n      });\n      throw new NotFoundError(\"Verification entry not found\");\n    }\n\n    this.log.debug(\"Verification entry found\", {\n      id: results[0].id,\n      type: entry.type,\n      target: entry.target,\n    });\n\n    return results[0];\n  }\n\n  public findRecentsByEntry(entry: VerificationEntry) {\n    this.log.trace(\"Finding recent verifications by entry\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    return this.verificationRepository.findMany({\n      orderBy: {\n        column: \"createdAt\",\n        direction: \"desc\",\n      },\n      where: {\n        type: { eq: entry.type },\n        target: { eq: entry.target },\n        createdAt: {\n          gte: this.dateTimeProvider.now().startOf(\"day\").toISOString(),\n        },\n      },\n    });\n  }\n\n  /**\n   * Creates a verification entry and returns the token.\n   * The caller is responsible for sending notifications with the token.\n   * This allows for context-specific notifications (e.g., password reset vs email verification).\n   */\n  public async createVerification(\n    entry: VerificationEntry,\n  ): Promise<RequestVerificationResponse> {\n    this.log.trace(\"Creating verification\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    const settings = this.verificationParameters.get(entry.type);\n\n    const recents = await this.findRecentsByEntry(entry);\n    if (recents.length >= settings.limitPerDay) {\n      this.log.warn(\"Daily verification limit reached\", {\n        type: entry.type,\n        target: entry.target,\n        limit: settings.limitPerDay,\n        count: recents.length,\n      });\n      throw new BadRequestError(\n        `Maximum number of verification requests per day reached (${settings.limitPerDay})`,\n      );\n    }\n\n    const existingVerification = recents[0];\n    if (existingVerification) {\n      const nowSec = this.dateTimeProvider.now().unix();\n      const createdAtSec = this.dateTimeProvider\n        .of(existingVerification.createdAt)\n        .unix();\n\n      const diffSec = nowSec - createdAtSec;\n      if (diffSec < settings.verificationCooldown) {\n        const remainingCooldown = Math.floor(\n          settings.verificationCooldown - diffSec,\n        );\n        this.log.debug(\"Verification on cooldown\", {\n          type: entry.type,\n          target: entry.target,\n          remainingSeconds: remainingCooldown,\n        });\n        throw new BadRequestError(\n          `Verification is on cooldown for ${remainingCooldown} seconds`,\n        );\n      }\n    }\n\n    const token = this.generateToken(entry.type);\n\n    const verification = await this.verificationRepository.create({\n      type: entry.type,\n      target: entry.target,\n      code: this.hashCode(token),\n    });\n\n    this.log.info(\"Verification created\", {\n      id: verification.id,\n      type: entry.type,\n      target: entry.target,\n      expiresInSeconds: settings.codeExpiration,\n    });\n\n    return {\n      token,\n      codeExpiration: settings.codeExpiration,\n      verificationCooldown: settings.verificationCooldown,\n      maxVerificationAttempts: settings.maxAttempts,\n    };\n  }\n\n  public async verifyCode(\n    entry: VerificationEntry,\n    code: string,\n  ): Promise<ValidateVerificationCodeResponse> {\n    this.log.trace(\"Verifying code\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    const settings = this.verificationParameters.get(entry.type);\n\n    const verification = await this.findByEntry(entry);\n    if (verification.verifiedAt) {\n      this.log.debug(\"Verification already verified\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        verifiedAt: verification.verifiedAt,\n      });\n      return { ok: true, alreadyVerified: true };\n    }\n\n    // DO NOT DELETE THE VERIFICATION WHEN IT IS REJECTED,\n    // or we won't be able to cooldown the verification\n\n    const now = this.dateTimeProvider.now();\n    const expirationDate = this.dateTimeProvider\n      .of(verification.createdAt)\n      .add(settings.codeExpiration, \"seconds\");\n\n    if (now > expirationDate) {\n      this.log.warn(\"Verification code expired\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        createdAt: verification.createdAt,\n        expiredAt: expirationDate.toISOString(),\n      });\n      throw new BadRequestError(\"Verification code has expired\");\n    }\n\n    if (verification.attempts >= settings.maxAttempts) {\n      this.log.warn(\"Verification locked due to max attempts\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        attempts: verification.attempts,\n        maxAttempts: settings.maxAttempts,\n      });\n      throw new BadRequestError(\n        \"Maximum number of attempts reached - verification is locked\",\n      );\n    }\n\n    if (verification.code !== this.hashCode(code)) {\n      const newAttempts = verification.attempts + 1;\n      this.log.warn(\"Invalid verification code\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        attempts: newAttempts,\n        maxAttempts: settings.maxAttempts,\n      });\n      await this.verificationRepository.updateById(verification.id, {\n        attempts: newAttempts,\n      });\n      throw new BadRequestError(\"Invalid verification code\");\n    }\n\n    await this.verificationRepository.updateById(verification.id, {\n      verifiedAt: this.dateTimeProvider.nowISOString(),\n    });\n\n    this.log.info(\"Verification code verified\", {\n      id: verification.id,\n      type: entry.type,\n      target: entry.target,\n    });\n\n    return { ok: true };\n  }\n\n  public hashCode(code: string): string {\n    return createHash(\"sha256\").update(code).digest(\"hex\");\n  }\n\n  public generateToken(type: VerificationTypeEnum): string {\n    if (type === \"code\") {\n      const settings = this.verificationParameters.get(\"code\");\n      return randomInt(0, 1_000_000)\n        .toString()\n        .padStart(settings.codeLength, \"0\");\n    } else if (type === \"link\") {\n      return randomUUID();\n    }\n\n    throw new BadRequestError(`Invalid verification type: ${type}`);\n  }\n}\n\nexport interface VerificationEntry {\n  type: VerificationTypeEnum;\n  target: string;\n}\n","import { $inject, t } from \"alepha\";\nimport { $action } from \"alepha/server\";\nimport { requestVerificationCodeResponseSchema } from \"../schemas/requestVerificationCodeResponseSchema.ts\";\nimport { validateVerificationCodeResponseSchema } from \"../schemas/validateVerificationCodeResponseSchema.ts\";\nimport { verificationTypeEnumSchema } from \"../schemas/verificationTypeEnumSchema.ts\";\nimport { VerificationService } from \"../services/VerificationService.ts\";\n\nexport class VerificationController {\n  protected readonly verificationService = $inject(VerificationService);\n\n  public readonly url = \"/verifications\";\n  public readonly group = \"verifications\";\n\n  public readonly requestVerificationCode = $action({\n    path: `${this.url}/:type`,\n    group: this.group,\n    method: \"POST\",\n    schema: {\n      params: t.object({\n        type: verificationTypeEnumSchema,\n      }),\n      body: t.object({\n        target: t.text(),\n      }),\n      response: requestVerificationCodeResponseSchema,\n    },\n    handler: async ({ body, params }) => {\n      return await this.verificationService.createVerification({\n        type: params.type,\n        target: body.target,\n      });\n    },\n  });\n\n  public readonly validateVerificationCode = $action({\n    path: `${this.url}/:type/validate`,\n    group: this.group,\n    method: \"POST\",\n    schema: {\n      params: t.object({\n        type: verificationTypeEnumSchema,\n      }),\n      body: t.object({\n        target: t.text(),\n        token: t.text({\n          description:\n            \"The verification token (6-digit code for phone, UUID for email).\",\n        }),\n      }),\n      response: validateVerificationCodeResponseSchema,\n    },\n    handler: async ({ body, params }) => {\n      return this.verificationService.verifyCode(\n        {\n          type: params.type,\n          target: body.target,\n        },\n        body.token,\n      );\n    },\n  });\n}\n","import { $inject } from \"alepha\";\nimport { DateTimeProvider } from \"alepha/datetime\";\nimport { $repository } from \"alepha/orm\";\nimport { $scheduler } from \"alepha/scheduler\";\nimport { verifications } from \"../entities/verifications.ts\";\nimport { VerificationParameters } from \"../parameters/VerificationParameters.ts\";\n\nexport class VerificationJobs {\n  protected readonly verificationRepository = $repository(verifications);\n  protected readonly verificationParameters = $inject(VerificationParameters);\n  protected readonly dateTimeProvider = $inject(DateTimeProvider);\n\n  public readonly cleanExpired = $scheduler({\n    name: \"api:verifications:cleanExpired\",\n    cron: \"0 * * * *\", // Hourly at minute 0\n    description: \"Clean expired verifications\",\n    handler: async () => {\n      const purgeDays = this.verificationParameters.get(\"purgeDays\");\n      if (purgeDays <= 0) {\n        return; // Auto deletion is disabled\n      }\n\n      const dayMs = 24 * 60 * 60 * 1000;\n      const purgeThreshold =\n        this.dateTimeProvider.nowMillis() - purgeDays * dayMs;\n\n      await this.verificationRepository.deleteMany({\n        createdAt: {\n          lt: this.dateTimeProvider.of(purgeThreshold).toISOString(),\n        },\n      });\n    },\n  });\n}\n","import { $module } from \"alepha\";\nimport { VerificationController } from \"./controllers/VerificationController.ts\";\nimport { VerificationJobs } from \"./jobs/VerificationJobs.ts\";\nimport { VerificationParameters } from \"./parameters/VerificationParameters.ts\";\nimport { VerificationService } from \"./services/VerificationService.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./controllers/VerificationController.ts\";\nexport * from \"./entities/verifications.ts\";\nexport * from \"./jobs/VerificationJobs.ts\";\nexport * from \"./parameters/VerificationParameters.ts\";\nexport * from \"./schemas/requestVerificationCodeResponseSchema.ts\";\nexport * from \"./schemas/validateVerificationCodeResponseSchema.ts\";\nexport * from \"./schemas/verificationTypeEnumSchema.ts\";\nexport * from \"./services/VerificationService.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Email and phone verification workflows.\n *\n * **Features:**\n * - Verification token generation\n * - Verification code sending\n * - Verification completion tracking\n * - Resend functionality\n *\n * @module alepha.api.verifications\n */\nexport const AlephaApiVerification = $module({\n  name: \"alepha.api.verifications\",\n  services: [\n    VerificationController,\n    VerificationJobs,\n    VerificationService,\n    VerificationParameters,\n  ],\n});\n"],"mappings":";;;;;;;;AAGA,MAAa,wCAAwC,EAAE,OAAO;CAC5D,OAAO,EAAE,OAAO,EACd,aACE,qJACH,CAAC;CACF,gBAAgB,EAAE,QAAQ,EACxB,aAAa,2DACd,CAAC;CACF,sBAAsB,EAAE,QAAQ,EAC9B,aACE,2EACH,CAAC;CACF,yBAAyB,EAAE,QAAQ,EACjC,aACE,+EACH,CAAC;CACH,CAAC;;;AChBF,MAAa,yCAAyC,EAAE,OAAO;CAC7D,IAAI,EAAE,QAAQ,EACZ,aAAa,sDACd,CAAC;CACF,iBAAiB,EAAE,SACjB,EAAE,QAAQ,EACR,aAAa,sDACd,CAAC,CACH;CACF,CAAC;;;ACTF,MAAa,6BAA6B,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC;;;ACElE,MAAa,gBAAgB,QAAQ;CACnC,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,QAAQ,CAAC;EAE7B,WAAW,GAAG,WAAW;EAEzB,WAAW,GAAG,WAAW;EAEzB,SAAS,GAAG,SAAS;EAErB,MAAM;EAEN,QAAQ,EAAE,KAAK,EACb,aAAa,kDACd,CAAC;EAEF,MAAM,EAAE,KAAK,EACX,aAAa,oDACd,CAAC;EAEF,YAAY,EAAE,SACZ,EAAE,SAAS,EACT,aAAa,qCACd,CAAC,CACH;EAED,UAAU,GAAG,QACX,EAAE,QAAQ,EACR,aAAa,sDACd,CAAC,EACF,EACD;EACF,CAAC;CACF,SAAS,CACP,aACA,EACE,SAAS,CAAC,UAAU,OAAO,EAC5B,CACF;CACF,CAAC;AAEF,MAAa,2BAA2B,cAAc;AACtD,MAAa,iCAAiC,cAAc;;;;;;AErC5D,MAAa,sBAAsB,MAAM;CACvC,MAAM;CACN,QDVwC,EAAE,OAAO;EACjD,MAAM,EAAE,OACN;GACE,aAAa,EAAE,QAAQ;IACrB,aACE;IACF,SAAS;IACT,SAAS;IACV,CAAC;GACF,YAAY,EAAE,QAAQ;IACpB,aAAa;IACb,SAAS;IACT,SAAS;IACV,CAAC;GACF,gBAAgB,EAAE,QAAQ;IACxB,aAAa;IACb,SAAS;IACT,SAAS;IACV,CAAC;GACF,sBAAsB,EAAE,QAAQ;IAC9B,aAAa;IACb,SAAS;IACT,SAAS;IACV,CAAC;GACF,aAAa,EAAE,QAAQ;IACrB,aACE;IACF,SAAS;IACT,SAAS;IACV,CAAC;GACH,EACD,EACE,aAAa,4CACd,CACF;EACD,MAAM,EAAE,OACN;GACE,aAAa,EAAE,QAAQ;IACrB,aACE;IACF,SAAS;IACT,SAAS;IACV,CAAC;GACF,gBAAgB,EAAE,QAAQ;IACxB,aAAa;IACb,SAAS;IACT,SAAS;IACV,CAAC;GACF,sBAAsB,EAAE,QAAQ;IAC9B,aAAa;IACb,SAAS;IACT,SAAS;IACV,CAAC;GACF,aAAa,EAAE,QAAQ;IACrB,aACE;IACF,SAAS;IACT,SAAS;IACV,CAAC;GACH,EACD,EACE,aAAa,4CACd,CACF;EACD,WAAW,EAAE,QAAQ;GACnB,aACE;GACF,SAAS;GACT,SAAS;GACV,CAAC;EACH,CAAC;CC3DA,SAAS;EACP,MAAM;GACJ,aAAa;GACb,YAAY;GACZ,gBAAgB;GAChB,sBAAsB;GACtB,aAAa;GACd;EACD,MAAM;GACJ,aAAa;GACb,gBAAgB;GAChB,sBAAsB;GACtB,aAAa;GACd;EACD,WAAW;EACZ;CACF,CAAC;AAYF,IAAa,yBAAb,MAAoC;CAClC,UAA6B,OAAO,oBAAoB;CAExD,IACE,KACyB;AACzB,SAAO,KAAK,QAAQ;;;;;ACjCxB,IAAa,sBAAb,MAAiC;CAC/B,MAAyB,SAAS;CAClC,mBAAsC,QAAQ,iBAAiB;CAC/D,yBAA4C,QAAQ,uBAAuB;CAC3E,yBAA4C,YAAY,cAAc;CAEtE,MAAa,YACX,OAC6B;AAC7B,OAAK,IAAI,MAAM,iCAAiC;GAC9C,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;EAEF,MAAM,UAAU,MAAM,KAAK,uBAAuB,SAAS;GACzD,OAAO;GACP,SAAS;IACP,QAAQ;IACR,WAAW;IACZ;GACD,OAAO;IACL,MAAM,EAAE,IAAI,MAAM,MAAM;IACxB,QAAQ,EAAE,IAAI,MAAM,QAAQ;IAC7B;GACF,CAAC;AAEF,MAAI,QAAQ,WAAW,GAAG;AACxB,QAAK,IAAI,MAAM,gCAAgC;IAC7C,MAAM,MAAM;IACZ,QAAQ,MAAM;IACf,CAAC;AACF,SAAM,IAAI,cAAc,+BAA+B;;AAGzD,OAAK,IAAI,MAAM,4BAA4B;GACzC,IAAI,QAAQ,GAAG;GACf,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;AAEF,SAAO,QAAQ;;CAGjB,mBAA0B,OAA0B;AAClD,OAAK,IAAI,MAAM,yCAAyC;GACtD,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;AAEF,SAAO,KAAK,uBAAuB,SAAS;GAC1C,SAAS;IACP,QAAQ;IACR,WAAW;IACZ;GACD,OAAO;IACL,MAAM,EAAE,IAAI,MAAM,MAAM;IACxB,QAAQ,EAAE,IAAI,MAAM,QAAQ;IAC5B,WAAW,EACT,KAAK,KAAK,iBAAiB,KAAK,CAAC,QAAQ,MAAM,CAAC,aAAa,EAC9D;IACF;GACF,CAAC;;;;;;;CAQJ,MAAa,mBACX,OACsC;AACtC,OAAK,IAAI,MAAM,yBAAyB;GACtC,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;EAEF,MAAM,WAAW,KAAK,uBAAuB,IAAI,MAAM,KAAK;EAE5D,MAAM,UAAU,MAAM,KAAK,mBAAmB,MAAM;AACpD,MAAI,QAAQ,UAAU,SAAS,aAAa;AAC1C,QAAK,IAAI,KAAK,oCAAoC;IAChD,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,OAAO,SAAS;IAChB,OAAO,QAAQ;IAChB,CAAC;AACF,SAAM,IAAI,gBACR,4DAA4D,SAAS,YAAY,GAClF;;EAGH,MAAM,uBAAuB,QAAQ;AACrC,MAAI,sBAAsB;GAMxB,MAAM,UALS,KAAK,iBAAiB,KAAK,CAAC,MAAM,GAC5B,KAAK,iBACvB,GAAG,qBAAqB,UAAU,CAClC,MAAM;AAGT,OAAI,UAAU,SAAS,sBAAsB;IAC3C,MAAM,oBAAoB,KAAK,MAC7B,SAAS,uBAAuB,QACjC;AACD,SAAK,IAAI,MAAM,4BAA4B;KACzC,MAAM,MAAM;KACZ,QAAQ,MAAM;KACd,kBAAkB;KACnB,CAAC;AACF,UAAM,IAAI,gBACR,mCAAmC,kBAAkB,UACtD;;;EAIL,MAAM,QAAQ,KAAK,cAAc,MAAM,KAAK;EAE5C,MAAM,eAAe,MAAM,KAAK,uBAAuB,OAAO;GAC5D,MAAM,MAAM;GACZ,QAAQ,MAAM;GACd,MAAM,KAAK,SAAS,MAAM;GAC3B,CAAC;AAEF,OAAK,IAAI,KAAK,wBAAwB;GACpC,IAAI,aAAa;GACjB,MAAM,MAAM;GACZ,QAAQ,MAAM;GACd,kBAAkB,SAAS;GAC5B,CAAC;AAEF,SAAO;GACL;GACA,gBAAgB,SAAS;GACzB,sBAAsB,SAAS;GAC/B,yBAAyB,SAAS;GACnC;;CAGH,MAAa,WACX,OACA,MAC2C;AAC3C,OAAK,IAAI,MAAM,kBAAkB;GAC/B,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;EAEF,MAAM,WAAW,KAAK,uBAAuB,IAAI,MAAM,KAAK;EAE5D,MAAM,eAAe,MAAM,KAAK,YAAY,MAAM;AAClD,MAAI,aAAa,YAAY;AAC3B,QAAK,IAAI,MAAM,iCAAiC;IAC9C,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,YAAY,aAAa;IAC1B,CAAC;AACF,UAAO;IAAE,IAAI;IAAM,iBAAiB;IAAM;;EAM5C,MAAM,MAAM,KAAK,iBAAiB,KAAK;EACvC,MAAM,iBAAiB,KAAK,iBACzB,GAAG,aAAa,UAAU,CAC1B,IAAI,SAAS,gBAAgB,UAAU;AAE1C,MAAI,MAAM,gBAAgB;AACxB,QAAK,IAAI,KAAK,6BAA6B;IACzC,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,WAAW,aAAa;IACxB,WAAW,eAAe,aAAa;IACxC,CAAC;AACF,SAAM,IAAI,gBAAgB,gCAAgC;;AAG5D,MAAI,aAAa,YAAY,SAAS,aAAa;AACjD,QAAK,IAAI,KAAK,2CAA2C;IACvD,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,UAAU,aAAa;IACvB,aAAa,SAAS;IACvB,CAAC;AACF,SAAM,IAAI,gBACR,8DACD;;AAGH,MAAI,aAAa,SAAS,KAAK,SAAS,KAAK,EAAE;GAC7C,MAAM,cAAc,aAAa,WAAW;AAC5C,QAAK,IAAI,KAAK,6BAA6B;IACzC,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,UAAU;IACV,aAAa,SAAS;IACvB,CAAC;AACF,SAAM,KAAK,uBAAuB,WAAW,aAAa,IAAI,EAC5D,UAAU,aACX,CAAC;AACF,SAAM,IAAI,gBAAgB,4BAA4B;;AAGxD,QAAM,KAAK,uBAAuB,WAAW,aAAa,IAAI,EAC5D,YAAY,KAAK,iBAAiB,cAAc,EACjD,CAAC;AAEF,OAAK,IAAI,KAAK,8BAA8B;GAC1C,IAAI,aAAa;GACjB,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;AAEF,SAAO,EAAE,IAAI,MAAM;;CAGrB,SAAgB,MAAsB;AACpC,SAAO,WAAW,SAAS,CAAC,OAAO,KAAK,CAAC,OAAO,MAAM;;CAGxD,cAAqB,MAAoC;AACvD,MAAI,SAAS,QAAQ;GACnB,MAAM,WAAW,KAAK,uBAAuB,IAAI,OAAO;AACxD,UAAO,UAAU,GAAG,IAAU,CAC3B,UAAU,CACV,SAAS,SAAS,YAAY,IAAI;aAC5B,SAAS,OAClB,QAAO,YAAY;AAGrB,QAAM,IAAI,gBAAgB,8BAA8B,OAAO;;;;;AClPnE,IAAa,yBAAb,MAAoC;CAClC,sBAAyC,QAAQ,oBAAoB;CAErE,MAAsB;CACtB,QAAwB;CAExB,0BAA0C,QAAQ;EAChD,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,QAAQ;EACR,QAAQ;GACN,QAAQ,EAAE,OAAO,EACf,MAAM,4BACP,CAAC;GACF,MAAM,EAAE,OAAO,EACb,QAAQ,EAAE,MAAM,EACjB,CAAC;GACF,UAAU;GACX;EACD,SAAS,OAAO,EAAE,MAAM,aAAa;AACnC,UAAO,MAAM,KAAK,oBAAoB,mBAAmB;IACvD,MAAM,OAAO;IACb,QAAQ,KAAK;IACd,CAAC;;EAEL,CAAC;CAEF,2BAA2C,QAAQ;EACjD,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,QAAQ;EACR,QAAQ;GACN,QAAQ,EAAE,OAAO,EACf,MAAM,4BACP,CAAC;GACF,MAAM,EAAE,OAAO;IACb,QAAQ,EAAE,MAAM;IAChB,OAAO,EAAE,KAAK,EACZ,aACE,oEACH,CAAC;IACH,CAAC;GACF,UAAU;GACX;EACD,SAAS,OAAO,EAAE,MAAM,aAAa;AACnC,UAAO,KAAK,oBAAoB,WAC9B;IACE,MAAM,OAAO;IACb,QAAQ,KAAK;IACd,EACD,KAAK,MACN;;EAEJ,CAAC;;;;ACrDJ,IAAa,mBAAb,MAA8B;CAC5B,yBAA4C,YAAY,cAAc;CACtE,yBAA4C,QAAQ,uBAAuB;CAC3E,mBAAsC,QAAQ,iBAAiB;CAE/D,eAA+B,WAAW;EACxC,MAAM;EACN,MAAM;EACN,aAAa;EACb,SAAS,YAAY;GACnB,MAAM,YAAY,KAAK,uBAAuB,IAAI,YAAY;AAC9D,OAAI,aAAa,EACf;GAIF,MAAM,iBACJ,KAAK,iBAAiB,WAAW,GAAG,aAFxB,OAAU,KAAK;AAI7B,SAAM,KAAK,uBAAuB,WAAW,EAC3C,WAAW,EACT,IAAI,KAAK,iBAAiB,GAAG,eAAe,CAAC,aAAa,EAC3D,EACF,CAAC;;EAEL,CAAC;;;;;;;;;;;;;;;ACFJ,MAAa,wBAAwB,QAAQ;CAC3C,MAAM;CACN,UAAU;EACR;EACA;EACA;EACA;EACD;CACF,CAAC"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/api/verifications/schemas/requestVerificationCodeResponseSchema.ts","../../../src/api/verifications/schemas/validateVerificationCodeResponseSchema.ts","../../../src/api/verifications/schemas/verificationTypeEnumSchema.ts","../../../src/api/verifications/entities/verifications.ts","../../../src/api/verifications/schemas/verificationSettingsSchema.ts","../../../src/api/verifications/parameters/VerificationParameters.ts","../../../src/api/verifications/services/VerificationService.ts","../../../src/api/verifications/controllers/VerificationController.ts","../../../src/api/verifications/jobs/VerificationJobs.ts","../../../src/api/verifications/index.ts"],"sourcesContent":["import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const requestVerificationCodeResponseSchema = t.object({\n  token: t.string({\n    description:\n      \"The verification token (6-digit code for phone, UUID for email). The caller should send this to the user via their preferred notification method.\",\n  }),\n  codeExpiration: t.integer({\n    description: \"Time in seconds before your verification token expires.\",\n  }),\n  verificationCooldown: t.integer({\n    description:\n      \"Cooldown period in seconds before you can request another verification.\",\n  }),\n  maxVerificationAttempts: t.integer({\n    description:\n      \"Maximum number of verification attempts allowed before the token is locked.\",\n  }),\n});\n\nexport type RequestVerificationResponse = Static<\n  typeof requestVerificationCodeResponseSchema\n>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const validateVerificationCodeResponseSchema = t.object({\n  ok: t.boolean({\n    description: \"Indicates whether the verification was successful.\",\n  }),\n  alreadyVerified: t.optional(\n    t.boolean({\n      description: \"Indicates whether the target was already verified.\",\n    }),\n  ),\n});\n\nexport type ValidateVerificationCodeResponse = Static<\n  typeof validateVerificationCodeResponseSchema\n>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const verificationTypeEnumSchema = t.enum([\"code\", \"link\"]);\nexport type VerificationTypeEnum = Static<typeof verificationTypeEnumSchema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\nimport { verificationTypeEnumSchema } from \"../schemas/verificationTypeEnumSchema.ts\";\n\nexport const verifications = $entity({\n  name: \"verification\",\n  schema: t.object({\n    id: db.primaryKey(t.bigint()),\n\n    createdAt: db.createdAt(),\n\n    updatedAt: db.updatedAt(),\n\n    version: db.version(),\n\n    type: verificationTypeEnumSchema,\n\n    target: t.text({\n      description: \"Can be a phone (E.164 format) or email address\",\n    }),\n\n    code: t.text({\n      description: \"Hashed verification token (n-digit code or UUID)\",\n    }),\n\n    verifiedAt: t.optional(\n      t.datetime({\n        description: \"When it was successfully verified\",\n      }),\n    ),\n\n    attempts: db.default(\n      t.integer({\n        description: \"Number of failed attempts (to prevent brute-force)\",\n      }),\n      0,\n    ),\n  }),\n  indexes: [\n    \"createdAt\",\n    {\n      columns: [\"target\", \"code\"],\n    },\n  ],\n});\n\nexport const verificationEntitySchema = verifications.schema;\nexport const verificationEntityInsertSchema = verifications.insertSchema;\nexport type VerificationEntity = Static<typeof verifications.schema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const verificationSettingsSchema = t.object({\n  code: t.object(\n    {\n      maxAttempts: t.integer({\n        description:\n          \"Maximum number of attempts before locking the verification.\",\n        minimum: 1,\n        maximum: 10,\n      }),\n      codeLength: t.integer({\n        description: \"Length of the verification code.\",\n        minimum: 4,\n        maximum: 12,\n      }),\n      codeExpiration: t.integer({\n        description: \"Time in seconds before the verification code expires.\",\n        minimum: 60, // 1 minute\n        maximum: 3600, // 1 hour\n      }),\n      verificationCooldown: t.integer({\n        description: \"Cooldown period in seconds after a request verification.\",\n        minimum: 0,\n        maximum: 3600, // 1 hour\n      }),\n      limitPerDay: t.integer({\n        description:\n          \"Maximum number of verification requests per day for one entry.\",\n        minimum: 1,\n        maximum: 100,\n      }),\n    },\n    {\n      description: \"Settings specific to code verifications.\",\n    },\n  ),\n  link: t.object(\n    {\n      maxAttempts: t.integer({\n        description:\n          \"Maximum number of attempts before locking the verification.\",\n        minimum: 1,\n        maximum: 10,\n      }),\n      codeExpiration: t.integer({\n        description: \"Time in seconds before the verification token expires.\",\n        minimum: 60, // 1 minute\n        maximum: 7200, // 2 hours\n      }),\n      verificationCooldown: t.integer({\n        description: \"Cooldown period in seconds after a request verification.\",\n        minimum: 0,\n        maximum: 3600, // 1 hour\n      }),\n      limitPerDay: t.integer({\n        description:\n          \"Maximum number of verification requests per day for one entry.\",\n        minimum: 1,\n        maximum: 100,\n      }),\n    },\n    {\n      description: \"Settings specific to link verifications.\",\n    },\n  ),\n  purgeDays: t.integer({\n    description:\n      \"Number of days after which expired verifications are automatically deleted. Set to 0 to disable auto-deletion.\",\n    minimum: 0,\n    maximum: 365,\n  }),\n});\n\nexport type VerificationSettings = Static<typeof verificationSettingsSchema>;\n","import { $atom, $state, type Static } from \"alepha\";\nimport {\n  type VerificationSettings,\n  verificationSettingsSchema,\n} from \"../schemas/verificationSettingsSchema.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Verification settings configuration atom\n */\nexport const verificationOptions = $atom({\n  name: \"alepha.api.verifications.options\",\n  schema: verificationSettingsSchema,\n  default: {\n    code: {\n      maxAttempts: 5,\n      codeLength: 6,\n      codeExpiration: 300, // 5 minutes\n      verificationCooldown: 90,\n      limitPerDay: 10,\n    },\n    link: {\n      maxAttempts: 3, // Lower since UUIDs are harder to guess\n      codeExpiration: 1800, // 30 minutes\n      verificationCooldown: 90,\n      limitPerDay: 10,\n    },\n    purgeDays: 1,\n  },\n});\n\nexport type VerificationOptions = Static<typeof verificationOptions.schema>;\n\ndeclare module \"alepha\" {\n  interface State {\n    [verificationOptions.key]: VerificationOptions;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport class VerificationParameters {\n  protected readonly options = $state(verificationOptions);\n\n  public get<K extends keyof VerificationSettings>(\n    key: K,\n  ): VerificationSettings[K] {\n    return this.options[key];\n  }\n}\n","import { createHash, randomInt, randomUUID } from \"node:crypto\";\nimport { $inject } from \"alepha\";\nimport { DateTimeProvider } from \"alepha/datetime\";\nimport { $logger } from \"alepha/logger\";\nimport { $repository } from \"alepha/orm\";\nimport { BadRequestError, NotFoundError } from \"alepha/server\";\nimport {\n  type VerificationEntity,\n  verifications,\n} from \"../entities/verifications.ts\";\nimport { VerificationParameters } from \"../parameters/VerificationParameters.ts\";\nimport type { RequestVerificationResponse } from \"../schemas/requestVerificationCodeResponseSchema.ts\";\nimport type { ValidateVerificationCodeResponse } from \"../schemas/validateVerificationCodeResponseSchema.ts\";\nimport type { VerificationTypeEnum } from \"../schemas/verificationTypeEnumSchema.ts\";\n\nexport class VerificationService {\n  protected readonly log = $logger();\n  protected readonly dateTimeProvider = $inject(DateTimeProvider);\n  protected readonly verificationParameters = $inject(VerificationParameters);\n  protected readonly verificationRepository = $repository(verifications);\n\n  public async findByEntry(\n    entry: VerificationEntry,\n  ): Promise<VerificationEntity> {\n    this.log.trace(\"Finding verification by entry\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    const results = await this.verificationRepository.findMany({\n      limit: 1, // only need the most recent entry\n      orderBy: {\n        column: \"createdAt\",\n        direction: \"desc\",\n      },\n      where: {\n        type: { eq: entry.type },\n        target: { eq: entry.target },\n      },\n    });\n\n    if (results.length === 0) {\n      this.log.debug(\"Verification entry not found\", {\n        type: entry.type,\n        target: entry.target,\n      });\n      throw new NotFoundError(\"Verification entry not found\");\n    }\n\n    this.log.debug(\"Verification entry found\", {\n      id: results[0].id,\n      type: entry.type,\n      target: entry.target,\n    });\n\n    return results[0];\n  }\n\n  public findRecentsByEntry(entry: VerificationEntry) {\n    this.log.trace(\"Finding recent verifications by entry\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    return this.verificationRepository.findMany({\n      orderBy: {\n        column: \"createdAt\",\n        direction: \"desc\",\n      },\n      where: {\n        type: { eq: entry.type },\n        target: { eq: entry.target },\n        createdAt: {\n          gte: this.dateTimeProvider.now().startOf(\"day\").toISOString(),\n        },\n      },\n    });\n  }\n\n  /**\n   * Creates a verification entry and returns the token.\n   * The caller is responsible for sending notifications with the token.\n   * This allows for context-specific notifications (e.g., password reset vs email verification).\n   */\n  public async createVerification(\n    entry: VerificationEntry,\n  ): Promise<RequestVerificationResponse> {\n    this.log.trace(\"Creating verification\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    const settings = this.verificationParameters.get(entry.type);\n\n    const recents = await this.findRecentsByEntry(entry);\n    if (recents.length >= settings.limitPerDay) {\n      this.log.warn(\"Daily verification limit reached\", {\n        type: entry.type,\n        target: entry.target,\n        limit: settings.limitPerDay,\n        count: recents.length,\n      });\n      throw new BadRequestError(\n        `Maximum number of verification requests per day reached (${settings.limitPerDay})`,\n      );\n    }\n\n    const existingVerification = recents[0];\n    if (existingVerification) {\n      const nowSec = this.dateTimeProvider.now().unix();\n      const createdAtSec = this.dateTimeProvider\n        .of(existingVerification.createdAt)\n        .unix();\n\n      const diffSec = nowSec - createdAtSec;\n      if (diffSec < settings.verificationCooldown) {\n        const remainingCooldown = Math.floor(\n          settings.verificationCooldown - diffSec,\n        );\n        this.log.debug(\"Verification on cooldown\", {\n          type: entry.type,\n          target: entry.target,\n          remainingSeconds: remainingCooldown,\n        });\n        throw new BadRequestError(\n          `Verification is on cooldown for ${remainingCooldown} seconds`,\n        );\n      }\n    }\n\n    const token = this.generateToken(entry.type);\n\n    const verification = await this.verificationRepository.create({\n      type: entry.type,\n      target: entry.target,\n      code: this.hashCode(token),\n      createdAt: this.dateTimeProvider.nowISOString(),\n    });\n\n    this.log.info(\"Verification created\", {\n      id: verification.id,\n      type: entry.type,\n      target: entry.target,\n      expiresInSeconds: settings.codeExpiration,\n    });\n\n    return {\n      token,\n      codeExpiration: settings.codeExpiration,\n      verificationCooldown: settings.verificationCooldown,\n      maxVerificationAttempts: settings.maxAttempts,\n    };\n  }\n\n  public async verifyCode(\n    entry: VerificationEntry,\n    code: string,\n  ): Promise<ValidateVerificationCodeResponse> {\n    this.log.trace(\"Verifying code\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    const settings = this.verificationParameters.get(entry.type);\n\n    const verification = await this.findByEntry(entry);\n    if (verification.verifiedAt) {\n      this.log.debug(\"Verification already verified\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        verifiedAt: verification.verifiedAt,\n      });\n      return { ok: true, alreadyVerified: true };\n    }\n\n    // DO NOT DELETE THE VERIFICATION WHEN IT IS REJECTED,\n    // or we won't be able to cooldown the verification\n\n    const now = this.dateTimeProvider.now();\n    const expirationDate = this.dateTimeProvider\n      .of(verification.createdAt)\n      .add(settings.codeExpiration, \"seconds\");\n\n    if (now > expirationDate) {\n      this.log.warn(\"Verification code expired\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        createdAt: verification.createdAt,\n        expiredAt: expirationDate.toISOString(),\n      });\n      throw new BadRequestError(\"Verification code has expired\");\n    }\n\n    if (verification.attempts >= settings.maxAttempts) {\n      this.log.warn(\"Verification locked due to max attempts\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        attempts: verification.attempts,\n        maxAttempts: settings.maxAttempts,\n      });\n      throw new BadRequestError(\n        \"Maximum number of attempts reached - verification is locked\",\n      );\n    }\n\n    if (verification.code !== this.hashCode(code)) {\n      const newAttempts = verification.attempts + 1;\n      this.log.warn(\"Invalid verification code\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        attempts: newAttempts,\n        maxAttempts: settings.maxAttempts,\n      });\n      await this.verificationRepository.updateById(verification.id, {\n        attempts: newAttempts,\n      });\n      throw new BadRequestError(\"Invalid verification code\");\n    }\n\n    await this.verificationRepository.updateById(verification.id, {\n      verifiedAt: this.dateTimeProvider.nowISOString(),\n    });\n\n    this.log.info(\"Verification code verified\", {\n      id: verification.id,\n      type: entry.type,\n      target: entry.target,\n    });\n\n    return { ok: true };\n  }\n\n  public hashCode(code: string): string {\n    return createHash(\"sha256\").update(code).digest(\"hex\");\n  }\n\n  public generateToken(type: VerificationTypeEnum): string {\n    if (type === \"code\") {\n      const settings = this.verificationParameters.get(\"code\");\n      return randomInt(0, 1_000_000)\n        .toString()\n        .padStart(settings.codeLength, \"0\");\n    } else if (type === \"link\") {\n      return randomUUID();\n    }\n\n    throw new BadRequestError(`Invalid verification type: ${type}`);\n  }\n}\n\nexport interface VerificationEntry {\n  type: VerificationTypeEnum;\n  target: string;\n}\n","import { $inject, t } from \"alepha\";\nimport { $action } from \"alepha/server\";\nimport { requestVerificationCodeResponseSchema } from \"../schemas/requestVerificationCodeResponseSchema.ts\";\nimport { validateVerificationCodeResponseSchema } from \"../schemas/validateVerificationCodeResponseSchema.ts\";\nimport { verificationTypeEnumSchema } from \"../schemas/verificationTypeEnumSchema.ts\";\nimport { VerificationService } from \"../services/VerificationService.ts\";\n\nexport class VerificationController {\n  protected readonly verificationService = $inject(VerificationService);\n\n  public readonly url = \"/verifications\";\n  public readonly group = \"verifications\";\n\n  public readonly requestVerificationCode = $action({\n    path: `${this.url}/:type`,\n    group: this.group,\n    method: \"POST\",\n    schema: {\n      params: t.object({\n        type: verificationTypeEnumSchema,\n      }),\n      body: t.object({\n        target: t.text(),\n      }),\n      response: requestVerificationCodeResponseSchema,\n    },\n    handler: async ({ body, params }) => {\n      return await this.verificationService.createVerification({\n        type: params.type,\n        target: body.target,\n      });\n    },\n  });\n\n  public readonly validateVerificationCode = $action({\n    path: `${this.url}/:type/validate`,\n    group: this.group,\n    method: \"POST\",\n    schema: {\n      params: t.object({\n        type: verificationTypeEnumSchema,\n      }),\n      body: t.object({\n        target: t.text(),\n        token: t.text({\n          description:\n            \"The verification token (6-digit code for phone, UUID for email).\",\n        }),\n      }),\n      response: validateVerificationCodeResponseSchema,\n    },\n    handler: async ({ body, params }) => {\n      return this.verificationService.verifyCode(\n        {\n          type: params.type,\n          target: body.target,\n        },\n        body.token,\n      );\n    },\n  });\n}\n","import { $inject } from \"alepha\";\nimport { DateTimeProvider } from \"alepha/datetime\";\nimport { $repository } from \"alepha/orm\";\nimport { $scheduler } from \"alepha/scheduler\";\nimport { verifications } from \"../entities/verifications.ts\";\nimport { VerificationParameters } from \"../parameters/VerificationParameters.ts\";\n\nexport class VerificationJobs {\n  protected readonly verificationRepository = $repository(verifications);\n  protected readonly verificationParameters = $inject(VerificationParameters);\n  protected readonly dateTimeProvider = $inject(DateTimeProvider);\n\n  public readonly cleanExpired = $scheduler({\n    name: \"api:verifications:cleanExpired\",\n    cron: \"0 * * * *\", // Hourly at minute 0\n    description: \"Clean expired verifications\",\n    handler: async () => {\n      const purgeDays = this.verificationParameters.get(\"purgeDays\");\n      if (purgeDays <= 0) {\n        return; // Auto deletion is disabled\n      }\n\n      const dayMs = 24 * 60 * 60 * 1000;\n      const purgeThreshold =\n        this.dateTimeProvider.nowMillis() - purgeDays * dayMs;\n\n      await this.verificationRepository.deleteMany({\n        createdAt: {\n          lt: this.dateTimeProvider.of(purgeThreshold).toISOString(),\n        },\n      });\n    },\n  });\n}\n","import { $module } from \"alepha\";\nimport { VerificationController } from \"./controllers/VerificationController.ts\";\nimport { VerificationJobs } from \"./jobs/VerificationJobs.ts\";\nimport { VerificationParameters } from \"./parameters/VerificationParameters.ts\";\nimport { VerificationService } from \"./services/VerificationService.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./controllers/VerificationController.ts\";\nexport * from \"./entities/verifications.ts\";\nexport * from \"./jobs/VerificationJobs.ts\";\nexport * from \"./parameters/VerificationParameters.ts\";\nexport * from \"./schemas/requestVerificationCodeResponseSchema.ts\";\nexport * from \"./schemas/validateVerificationCodeResponseSchema.ts\";\nexport * from \"./schemas/verificationTypeEnumSchema.ts\";\nexport * from \"./services/VerificationService.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Email and phone verification workflows.\n *\n * **Features:**\n * - Verification token generation\n * - Verification code sending\n * - Verification completion tracking\n * - Resend functionality\n *\n * @module alepha.api.verifications\n */\nexport const AlephaApiVerification = $module({\n  name: \"alepha.api.verifications\",\n  services: [\n    VerificationController,\n    VerificationJobs,\n    VerificationService,\n    VerificationParameters,\n  ],\n});\n"],"mappings":";;;;;;;;AAGA,MAAa,wCAAwC,EAAE,OAAO;CAC5D,OAAO,EAAE,OAAO,EACd,aACE,qJACH,CAAC;CACF,gBAAgB,EAAE,QAAQ,EACxB,aAAa,2DACd,CAAC;CACF,sBAAsB,EAAE,QAAQ,EAC9B,aACE,2EACH,CAAC;CACF,yBAAyB,EAAE,QAAQ,EACjC,aACE,+EACH,CAAC;CACH,CAAC;;;AChBF,MAAa,yCAAyC,EAAE,OAAO;CAC7D,IAAI,EAAE,QAAQ,EACZ,aAAa,sDACd,CAAC;CACF,iBAAiB,EAAE,SACjB,EAAE,QAAQ,EACR,aAAa,sDACd,CAAC,CACH;CACF,CAAC;;;ACTF,MAAa,6BAA6B,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC;;;ACElE,MAAa,gBAAgB,QAAQ;CACnC,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,QAAQ,CAAC;EAE7B,WAAW,GAAG,WAAW;EAEzB,WAAW,GAAG,WAAW;EAEzB,SAAS,GAAG,SAAS;EAErB,MAAM;EAEN,QAAQ,EAAE,KAAK,EACb,aAAa,kDACd,CAAC;EAEF,MAAM,EAAE,KAAK,EACX,aAAa,oDACd,CAAC;EAEF,YAAY,EAAE,SACZ,EAAE,SAAS,EACT,aAAa,qCACd,CAAC,CACH;EAED,UAAU,GAAG,QACX,EAAE,QAAQ,EACR,aAAa,sDACd,CAAC,EACF,EACD;EACF,CAAC;CACF,SAAS,CACP,aACA,EACE,SAAS,CAAC,UAAU,OAAO,EAC5B,CACF;CACF,CAAC;AAEF,MAAa,2BAA2B,cAAc;AACtD,MAAa,iCAAiC,cAAc;;;;;;AErC5D,MAAa,sBAAsB,MAAM;CACvC,MAAM;CACN,QDVwC,EAAE,OAAO;EACjD,MAAM,EAAE,OACN;GACE,aAAa,EAAE,QAAQ;IACrB,aACE;IACF,SAAS;IACT,SAAS;IACV,CAAC;GACF,YAAY,EAAE,QAAQ;IACpB,aAAa;IACb,SAAS;IACT,SAAS;IACV,CAAC;GACF,gBAAgB,EAAE,QAAQ;IACxB,aAAa;IACb,SAAS;IACT,SAAS;IACV,CAAC;GACF,sBAAsB,EAAE,QAAQ;IAC9B,aAAa;IACb,SAAS;IACT,SAAS;IACV,CAAC;GACF,aAAa,EAAE,QAAQ;IACrB,aACE;IACF,SAAS;IACT,SAAS;IACV,CAAC;GACH,EACD,EACE,aAAa,4CACd,CACF;EACD,MAAM,EAAE,OACN;GACE,aAAa,EAAE,QAAQ;IACrB,aACE;IACF,SAAS;IACT,SAAS;IACV,CAAC;GACF,gBAAgB,EAAE,QAAQ;IACxB,aAAa;IACb,SAAS;IACT,SAAS;IACV,CAAC;GACF,sBAAsB,EAAE,QAAQ;IAC9B,aAAa;IACb,SAAS;IACT,SAAS;IACV,CAAC;GACF,aAAa,EAAE,QAAQ;IACrB,aACE;IACF,SAAS;IACT,SAAS;IACV,CAAC;GACH,EACD,EACE,aAAa,4CACd,CACF;EACD,WAAW,EAAE,QAAQ;GACnB,aACE;GACF,SAAS;GACT,SAAS;GACV,CAAC;EACH,CC5DS;CACR,SAAS;EACP,MAAM;GACJ,aAAa;GACb,YAAY;GACZ,gBAAgB;GAChB,sBAAsB;GACtB,aAAa;GACd;EACD,MAAM;GACJ,aAAa;GACb,gBAAgB;GAChB,sBAAsB;GACtB,aAAa;GACd;EACD,WAAW;EACZ;CACF,CAAC;AAYF,IAAa,yBAAb,MAAoC;CAClC,UAA6B,OAAO,oBAAoB;CAExD,IACE,KACyB;AACzB,SAAO,KAAK,QAAQ;;;;;ACjCxB,IAAa,sBAAb,MAAiC;CAC/B,MAAyB,SAAS;CAClC,mBAAsC,QAAQ,iBAAiB;CAC/D,yBAA4C,QAAQ,uBAAuB;CAC3E,yBAA4C,YAAY,cAAc;CAEtE,MAAa,YACX,OAC6B;AAC7B,OAAK,IAAI,MAAM,iCAAiC;GAC9C,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;EAEF,MAAM,UAAU,MAAM,KAAK,uBAAuB,SAAS;GACzD,OAAO;GACP,SAAS;IACP,QAAQ;IACR,WAAW;IACZ;GACD,OAAO;IACL,MAAM,EAAE,IAAI,MAAM,MAAM;IACxB,QAAQ,EAAE,IAAI,MAAM,QAAQ;IAC7B;GACF,CAAC;AAEF,MAAI,QAAQ,WAAW,GAAG;AACxB,QAAK,IAAI,MAAM,gCAAgC;IAC7C,MAAM,MAAM;IACZ,QAAQ,MAAM;IACf,CAAC;AACF,SAAM,IAAI,cAAc,+BAA+B;;AAGzD,OAAK,IAAI,MAAM,4BAA4B;GACzC,IAAI,QAAQ,GAAG;GACf,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;AAEF,SAAO,QAAQ;;CAGjB,mBAA0B,OAA0B;AAClD,OAAK,IAAI,MAAM,yCAAyC;GACtD,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;AAEF,SAAO,KAAK,uBAAuB,SAAS;GAC1C,SAAS;IACP,QAAQ;IACR,WAAW;IACZ;GACD,OAAO;IACL,MAAM,EAAE,IAAI,MAAM,MAAM;IACxB,QAAQ,EAAE,IAAI,MAAM,QAAQ;IAC5B,WAAW,EACT,KAAK,KAAK,iBAAiB,KAAK,CAAC,QAAQ,MAAM,CAAC,aAAa,EAC9D;IACF;GACF,CAAC;;;;;;;CAQJ,MAAa,mBACX,OACsC;AACtC,OAAK,IAAI,MAAM,yBAAyB;GACtC,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;EAEF,MAAM,WAAW,KAAK,uBAAuB,IAAI,MAAM,KAAK;EAE5D,MAAM,UAAU,MAAM,KAAK,mBAAmB,MAAM;AACpD,MAAI,QAAQ,UAAU,SAAS,aAAa;AAC1C,QAAK,IAAI,KAAK,oCAAoC;IAChD,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,OAAO,SAAS;IAChB,OAAO,QAAQ;IAChB,CAAC;AACF,SAAM,IAAI,gBACR,4DAA4D,SAAS,YAAY,GAClF;;EAGH,MAAM,uBAAuB,QAAQ;AACrC,MAAI,sBAAsB;GAMxB,MAAM,UALS,KAAK,iBAAiB,KAAK,CAAC,MAKrB,GAJD,KAAK,iBACvB,GAAG,qBAAqB,UAAU,CAClC,MAEkC;AACrC,OAAI,UAAU,SAAS,sBAAsB;IAC3C,MAAM,oBAAoB,KAAK,MAC7B,SAAS,uBAAuB,QACjC;AACD,SAAK,IAAI,MAAM,4BAA4B;KACzC,MAAM,MAAM;KACZ,QAAQ,MAAM;KACd,kBAAkB;KACnB,CAAC;AACF,UAAM,IAAI,gBACR,mCAAmC,kBAAkB,UACtD;;;EAIL,MAAM,QAAQ,KAAK,cAAc,MAAM,KAAK;EAE5C,MAAM,eAAe,MAAM,KAAK,uBAAuB,OAAO;GAC5D,MAAM,MAAM;GACZ,QAAQ,MAAM;GACd,MAAM,KAAK,SAAS,MAAM;GAC1B,WAAW,KAAK,iBAAiB,cAAc;GAChD,CAAC;AAEF,OAAK,IAAI,KAAK,wBAAwB;GACpC,IAAI,aAAa;GACjB,MAAM,MAAM;GACZ,QAAQ,MAAM;GACd,kBAAkB,SAAS;GAC5B,CAAC;AAEF,SAAO;GACL;GACA,gBAAgB,SAAS;GACzB,sBAAsB,SAAS;GAC/B,yBAAyB,SAAS;GACnC;;CAGH,MAAa,WACX,OACA,MAC2C;AAC3C,OAAK,IAAI,MAAM,kBAAkB;GAC/B,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;EAEF,MAAM,WAAW,KAAK,uBAAuB,IAAI,MAAM,KAAK;EAE5D,MAAM,eAAe,MAAM,KAAK,YAAY,MAAM;AAClD,MAAI,aAAa,YAAY;AAC3B,QAAK,IAAI,MAAM,iCAAiC;IAC9C,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,YAAY,aAAa;IAC1B,CAAC;AACF,UAAO;IAAE,IAAI;IAAM,iBAAiB;IAAM;;EAM5C,MAAM,MAAM,KAAK,iBAAiB,KAAK;EACvC,MAAM,iBAAiB,KAAK,iBACzB,GAAG,aAAa,UAAU,CAC1B,IAAI,SAAS,gBAAgB,UAAU;AAE1C,MAAI,MAAM,gBAAgB;AACxB,QAAK,IAAI,KAAK,6BAA6B;IACzC,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,WAAW,aAAa;IACxB,WAAW,eAAe,aAAa;IACxC,CAAC;AACF,SAAM,IAAI,gBAAgB,gCAAgC;;AAG5D,MAAI,aAAa,YAAY,SAAS,aAAa;AACjD,QAAK,IAAI,KAAK,2CAA2C;IACvD,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,UAAU,aAAa;IACvB,aAAa,SAAS;IACvB,CAAC;AACF,SAAM,IAAI,gBACR,8DACD;;AAGH,MAAI,aAAa,SAAS,KAAK,SAAS,KAAK,EAAE;GAC7C,MAAM,cAAc,aAAa,WAAW;AAC5C,QAAK,IAAI,KAAK,6BAA6B;IACzC,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,UAAU;IACV,aAAa,SAAS;IACvB,CAAC;AACF,SAAM,KAAK,uBAAuB,WAAW,aAAa,IAAI,EAC5D,UAAU,aACX,CAAC;AACF,SAAM,IAAI,gBAAgB,4BAA4B;;AAGxD,QAAM,KAAK,uBAAuB,WAAW,aAAa,IAAI,EAC5D,YAAY,KAAK,iBAAiB,cAAc,EACjD,CAAC;AAEF,OAAK,IAAI,KAAK,8BAA8B;GAC1C,IAAI,aAAa;GACjB,MAAM,MAAM;GACZ,QAAQ,MAAM;GACf,CAAC;AAEF,SAAO,EAAE,IAAI,MAAM;;CAGrB,SAAgB,MAAsB;AACpC,SAAO,WAAW,SAAS,CAAC,OAAO,KAAK,CAAC,OAAO,MAAM;;CAGxD,cAAqB,MAAoC;AACvD,MAAI,SAAS,QAAQ;GACnB,MAAM,WAAW,KAAK,uBAAuB,IAAI,OAAO;AACxD,UAAO,UAAU,GAAG,IAAU,CAC3B,UAAU,CACV,SAAS,SAAS,YAAY,IAAI;aAC5B,SAAS,OAClB,QAAO,YAAY;AAGrB,QAAM,IAAI,gBAAgB,8BAA8B,OAAO;;;;;ACnPnE,IAAa,yBAAb,MAAoC;CAClC,sBAAyC,QAAQ,oBAAoB;CAErE,MAAsB;CACtB,QAAwB;CAExB,0BAA0C,QAAQ;EAChD,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,QAAQ;EACR,QAAQ;GACN,QAAQ,EAAE,OAAO,EACf,MAAM,4BACP,CAAC;GACF,MAAM,EAAE,OAAO,EACb,QAAQ,EAAE,MAAM,EACjB,CAAC;GACF,UAAU;GACX;EACD,SAAS,OAAO,EAAE,MAAM,aAAa;AACnC,UAAO,MAAM,KAAK,oBAAoB,mBAAmB;IACvD,MAAM,OAAO;IACb,QAAQ,KAAK;IACd,CAAC;;EAEL,CAAC;CAEF,2BAA2C,QAAQ;EACjD,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,QAAQ;EACR,QAAQ;GACN,QAAQ,EAAE,OAAO,EACf,MAAM,4BACP,CAAC;GACF,MAAM,EAAE,OAAO;IACb,QAAQ,EAAE,MAAM;IAChB,OAAO,EAAE,KAAK,EACZ,aACE,oEACH,CAAC;IACH,CAAC;GACF,UAAU;GACX;EACD,SAAS,OAAO,EAAE,MAAM,aAAa;AACnC,UAAO,KAAK,oBAAoB,WAC9B;IACE,MAAM,OAAO;IACb,QAAQ,KAAK;IACd,EACD,KAAK,MACN;;EAEJ,CAAC;;;;ACrDJ,IAAa,mBAAb,MAA8B;CAC5B,yBAA4C,YAAY,cAAc;CACtE,yBAA4C,QAAQ,uBAAuB;CAC3E,mBAAsC,QAAQ,iBAAiB;CAE/D,eAA+B,WAAW;EACxC,MAAM;EACN,MAAM;EACN,aAAa;EACb,SAAS,YAAY;GACnB,MAAM,YAAY,KAAK,uBAAuB,IAAI,YAAY;AAC9D,OAAI,aAAa,EACf;GAIF,MAAM,iBACJ,KAAK,iBAAiB,WAAW,GAAG,aAFxB,OAAU,KAAK;AAI7B,SAAM,KAAK,uBAAuB,WAAW,EAC3C,WAAW,EACT,IAAI,KAAK,iBAAiB,GAAG,eAAe,CAAC,aAAa,EAC3D,EACF,CAAC;;EAEL,CAAC;;;;;;;;;;;;;;;ACFJ,MAAa,wBAAwB,QAAQ;CAC3C,MAAM;CACN,UAAU;EACR;EACA;EACA;EACA;EACD;CACF,CAAC"}

package/dist/bucket/index.d.ts

@@ -3,6 +3,8 @@ import { Alepha, AlephaError, FileLike, KIND, Primitive, Service, Static } from
 import { FileDetector, FileSystemProvider } from "alepha/system";
 import * as fs from "node:fs";
 import * as _$alepha_logger0 from "alepha/logger";
+import { S3mini } from "s3mini";
+import { R2Bucket } from "@cloudflare/workers-types";
 
 //#region ../../src/bucket/providers/FileStorageProvider.d.ts
 declare abstract class FileStorageProvider {
@@ -245,7 +247,7 @@ interface BucketFileOptions {
   maxSize?: number;
 }
 declare class BucketPrimitive extends Primitive<BucketPrimitiveOptions> {
-  readonly provider: MemoryFileStorageProvider | FileStorageProvider;
+  readonly provider: FileStorageProvider | MemoryFileStorageProvider;
   protected readonly fileSystem: FileSystemProvider;
   get name(): string;
   /**
@@ -264,7 +266,7 @@ declare class BucketPrimitive extends Primitive<BucketPrimitiveOptions> {
    * Downloads a file from the bucket.
    */
   download(fileId: string): Promise<FileLike>;
-  protected $provider(): MemoryFileStorageProvider | FileStorageProvider;
+  protected $provider(): FileStorageProvider | MemoryFileStorageProvider;
 }
 interface BucketFileOptions {
   /**
@@ -289,110 +291,6 @@ declare class FileNotFoundError extends AlephaError {
 }
 //#endregion
 //#region ../../src/bucket/providers/CloudflareR2Provider.d.ts
-/**
- * R2Bucket interface matching Cloudflare's R2 API.
- */
-interface R2Bucket {
-  put(key: string, value: ReadableStream | ArrayBuffer | ArrayBufferView | string | Blob | null, options?: R2PutOptions): Promise<R2Object | null>;
-  get(key: string, options?: R2GetOptions): Promise<R2ObjectBody | null>;
-  head(key: string): Promise<R2Object | null>;
-  delete(keys: string | string[]): Promise<void>;
-  list(options?: R2ListOptions): Promise<R2Objects>;
-  createMultipartUpload(key: string, options?: R2MultipartOptions): Promise<R2MultipartUpload>;
-}
-interface R2Object {
-  key: string;
-  version: string;
-  size: number;
-  etag: string;
-  httpEtag: string;
-  checksums: R2Checksums;
-  uploaded: Date;
-  httpMetadata?: R2HTTPMetadata;
-  customMetadata?: Record<string, string>;
-  range?: R2Range;
-  storageClass: string;
-}
-interface R2ObjectBody extends R2Object {
-  body: ReadableStream;
-  bodyUsed: boolean;
-  arrayBuffer(): Promise<ArrayBuffer>;
-  text(): Promise<string>;
-  json<T>(): Promise<T>;
-  blob(): Promise<Blob>;
-}
-interface R2PutOptions {
-  onlyIf?: R2Conditional;
-  httpMetadata?: R2HTTPMetadata;
-  customMetadata?: Record<string, string>;
-  md5?: ArrayBuffer | string;
-  sha1?: ArrayBuffer | string;
-  sha256?: ArrayBuffer | string;
-  sha384?: ArrayBuffer | string;
-  sha512?: ArrayBuffer | string;
-  storageClass?: string;
-}
-interface R2GetOptions {
-  onlyIf?: R2Conditional;
-  range?: R2Range;
-}
-interface R2ListOptions {
-  limit?: number;
-  prefix?: string;
-  cursor?: string;
-  delimiter?: string;
-  startAfter?: string;
-  include?: ("httpMetadata" | "customMetadata")[];
-}
-interface R2Objects {
-  objects: R2Object[];
-  truncated: boolean;
-  cursor?: string;
-  delimitedPrefixes: string[];
-}
-interface R2Checksums {
-  md5?: ArrayBuffer;
-  sha1?: ArrayBuffer;
-  sha256?: ArrayBuffer;
-  sha384?: ArrayBuffer;
-  sha512?: ArrayBuffer;
-}
-interface R2HTTPMetadata {
-  contentType?: string;
-  contentLanguage?: string;
-  contentDisposition?: string;
-  contentEncoding?: string;
-  cacheControl?: string;
-  cacheExpiry?: Date;
-}
-interface R2Conditional {
-  etagMatches?: string;
-  etagDoesNotMatch?: string;
-  uploadedBefore?: Date;
-  uploadedAfter?: Date;
-  secondsGranularity?: boolean;
-}
-interface R2Range {
-  offset?: number;
-  length?: number;
-  suffix?: number;
-}
-interface R2MultipartOptions {
-  httpMetadata?: R2HTTPMetadata;
-  customMetadata?: Record<string, string>;
-  storageClass?: string;
-}
-interface R2MultipartUpload {
-  key: string;
-  uploadId: string;
-  uploadPart(partNumber: number, value: ReadableStream | ArrayBuffer | ArrayBufferView | string | Blob): Promise<R2UploadedPart>;
-  abort(): Promise<void>;
-  complete(uploadedParts: R2UploadedPart[]): Promise<R2Object>;
-}
-interface R2UploadedPart {
-  partNumber: number;
-  etag: string;
-}
 /**
  * Cloudflare R2 storage provider.
  *
@@ -501,6 +399,70 @@ declare class LocalFileStorageProvider implements FileStorageProvider {
   protected isErrorNoEntry(error: unknown): boolean;
 }
 //#endregion
+//#region ../../src/bucket/providers/NodeS3BucketProvider.d.ts
+declare const envSchema: _$alepha.TObject<{
+  /**
+   * S3 endpoint URL. The bucket name is appended (path-style) per request.
+   *
+   * Examples:
+   * - AWS S3: `https://s3.us-east-1.amazonaws.com`
+   * - Cloudflare R2: `https://<account-id>.r2.cloudflarestorage.com`
+   * - MinIO: `http://localhost:9000`
+   * - DigitalOcean Spaces: `https://<region>.digitaloceanspaces.com`
+   */
+  S3_ENDPOINT: _$alepha.TString;
+  /**
+   * AWS region or "auto" for R2.
+   *
+   * @default "auto"
+   */
+  S3_REGION: _$alepha.TOptional<_$alepha.TString>;
+  /**
+   * Access key ID for S3 authentication.
+   */
+  S3_ACCESS_KEY_ID: _$alepha.TString;
+  /**
+   * Secret access key for S3 authentication.
+   */
+  S3_SECRET_ACCESS_KEY: _$alepha.TString;
+}>;
+declare module "alepha" {
+  interface Env extends Partial<Static<typeof envSchema>> {}
+}
+/**
+ * S3-compatible file storage provider for Node.js.
+ *
+ * Backed by `s3mini` (zero-dep, ~20 KB). Works with AWS S3, Cloudflare R2,
+ * MinIO, DigitalOcean Spaces, Backblaze B2, and any other S3-compatible service.
+ *
+ * Uses path-style addressing (`<endpoint>/<bucket>`).
+ */
+declare class NodeS3BucketProvider implements FileStorageProvider {
+  protected readonly log: _$alepha_logger0.Logger;
+  protected readonly env: {
+    S3_REGION?: string | undefined;
+    S3_ENDPOINT: string;
+    S3_ACCESS_KEY_ID: string;
+    S3_SECRET_ACCESS_KEY: string;
+  };
+  protected readonly alepha: Alepha;
+  protected readonly fileSystem: FileSystemProvider;
+  protected readonly fileDetector: FileDetector;
+  protected readonly clients: Map<string, S3mini>;
+  /**
+   * Convert bucket name to S3-compatible format.
+   * S3 bucket names must be lowercase, 3-63 characters, no underscores.
+   */
+  convertName(name: string): string;
+  protected getClient(bucketName: string): S3mini;
+  protected readonly onStart: _$alepha.HookPrimitive<"start">;
+  protected createId(mimeType: string): string;
+  upload(bucketName: string, file: FileLike, fileId?: string): Promise<string>;
+  download(bucketName: string, fileId: string): Promise<FileLike>;
+  exists(bucketName: string, fileId: string): Promise<boolean>;
+  delete(bucketName: string, fileId: string): Promise<void>;
+}
+//#endregion
 //#region ../../src/bucket/index.d.ts
 declare module "alepha" {
   interface Hooks {
@@ -521,6 +483,14 @@ declare module "alepha" {
       id: string;
       bucket: BucketPrimitive;
     };
+    /**
+     * Triggered when a file is downloaded from a bucket.
+     */
+    "bucket:file:downloaded": {
+      id: string;
+      file: FileLike;
+      bucket: BucketPrimitive;
+    };
   }
 }
 /**
@@ -539,5 +509,5 @@ declare module "alepha" {
  */
 declare const AlephaBucket: _$alepha.Service<_$alepha.Module>;
 //#endregion
-export { $bucket, AlephaBucket, BucketFileOptions, BucketPrimitive, BucketPrimitiveOptions, CloudflareR2Provider, FileNotFoundError, FileStorageProvider, LocalFileStorageProvider, LocalFileStorageProviderOptions, MemoryFileStorageProvider, R2Bucket, R2Checksums, R2Conditional, R2GetOptions, R2HTTPMetadata, R2ListOptions, R2MultipartOptions, R2MultipartUpload, R2Object, R2ObjectBody, R2Objects, R2PutOptions, R2Range, R2UploadedPart, localFileStorageOptions };
+export { $bucket, AlephaBucket, BucketFileOptions, BucketPrimitive, BucketPrimitiveOptions, CloudflareR2Provider, FileNotFoundError, FileStorageProvider, LocalFileStorageProvider, LocalFileStorageProviderOptions, MemoryFileStorageProvider, NodeS3BucketProvider, localFileStorageOptions };
 //# sourceMappingURL=index.d.ts.map

package/dist/bucket/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/bucket/providers/FileStorageProvider.ts","../../src/bucket/providers/MemoryFileStorageProvider.ts","../../src/bucket/primitives/$bucket.ts","../../src/bucket/errors/FileNotFoundError.ts","../../src/bucket/providers/CloudflareR2Provider.ts","../../src/bucket/providers/LocalFileStorageProvider.ts","../../src/bucket/index.ts"],"mappings":";;;;;;;uBAEsB,mBAAA;;;;;;AAAtB;;;WASW,MAAA,CACP,UAAA,UACA,IAAA,EAAM,QAAA,EACN,MAAA,YACC,OAAA;EAAA;;;;;;;EAAA,SASM,QAAA,CAAS,UAAA,UAAoB,MAAA,WAAiB,OAAA,CAAQ,QAAA;EAZ7D;;;;;;;EAAA,SAqBO,MAAA,CAAO,UAAA,UAAoB,MAAA,WAAiB,OAAA;EATE;;;;;;EAAA,SAiB9C,MAAA,CAAO,UAAA,UAAoB,MAAA,WAAiB,OAAA;AAAA;;;UCnC7C,UAAA;EACR,MAAA,EAAQ,MAAA;EACR,IAAA;EACA,IAAA;EACA,IAAA;AAAA;AAAA,cAGW,yBAAA,YAAqC,mBAAA;EAAA,SAChC,KAAA,EAAO,MAAA,SAAe,UAAA;EAAA,mBACnB,UAAA,EAAU,kBAAA;EAAA,mBACV,YAAA,EAAY,YAAA;EAElB,MAAA,CACX,UAAA,UACA,IAAA,EAAM,QAAA,EACN,MAAA,YACC,OAAA;EAoBU,QAAA,CAAS,UAAA,UAAoB,MAAA,WAAiB,OAAA,CAAQ,QAAA;EAiBtD,MAAA,CAAO,UAAA,UAAoB,MAAA,WAAiB,OAAA;EAI5C,MAAA,CAAO,UAAA,UAAoB,MAAA,WAAiB,OAAA;EAAA,UAS/C,QAAA,CAAA;AAAA;;;;;;ADtEZ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACEoE;;;;;;;;;;;cC0DvD,OAAA;EAAA,UAAoB,sBAAA,GAAsB,eAAA;EAAA;;UAGtC,sBAAA,SAA+B,iBAAA;EDlDjB;;;;;;;;;;;;;;;;;;;;;;;;;;EC6E7B,QAAA,GAAW,OAAA,CAAQ,mBAAA;EDlDuB;;;;;;;;;;;;;;;;;ACoB5C;;;;;;EAuDE,IAAA;AAAA;AAAA,UAKe,iBAAA;EA5DgB;;;;;;;AAGjC;;;;;;;;;;;;;EA8EE,WAAA;EA1BI;AAKN;;;;;;;;;AAoFA;;;;;;;;;;;;;;;EApCE,SAAA;EAoCmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EALnC,OAAA;AAAA;AAAA,cAKW,eAAA,SAAwB,SAAA,CAAU,sBAAA;EAAA,SAC7B,QAAA,EAAQ,yBAAA,GAAA,mBAAA;EAAA,mBACL,UAAA,EAAU,kBAAA;EAAA,IAElB,IAAA,CAAA;;;;EAOE,MAAA,CACX,IAAA,EAAM,QAAA,EACN,OAAA,GAAU,iBAAA,GACT,OAAA;EAwGH;;;EA1Da,MAAA,CAAO,MAAA,UAAgB,QAAA,aAAmB,OAAA;;;ACxQzD;EDwRe,MAAA,CAAO,MAAA,WAAiB,OAAA;;;;EAOxB,QAAA,CAAS,MAAA,WAAiB,OAAA,CAAQ,QAAA;EAAA,UAIrC,SAAA,CAAA,GAAS,yBAAA,GAAA,mBAAA;AAAA;AAAA,UAeJ,iBAAA;EEjSQ;;;EFqSvB,WAAA;EE/RM;;;EFoSN,SAAA;EE/RG;;;;;EFsSH,OAAA;AAAA;;;cClUW,iBAAA,SAA0B,WAAA;EAAA,SACrB,MAAA;AAAA;;;;;;UCgBD,QAAA;EACf,GAAA,CACE,GAAA,UACA,KAAA,EACI,cAAA,GACA,WAAA,GACA,eAAA,YAEA,IAAA,SAEJ,OAAA,GAAU,YAAA,GACT,OAAA,CAAQ,QAAA;EACX,GAAA,CAAI,GAAA,UAAa,OAAA,GAAU,YAAA,GAAe,OAAA,CAAQ,YAAA;EAClD,IAAA,CAAK,GAAA,WAAc,OAAA,CAAQ,QAAA;EAC3B,MAAA,CAAO,IAAA,sBAA0B,OAAA;EACjC,IAAA,CAAK,OAAA,GAAU,aAAA,GAAgB,OAAA,CAAQ,SAAA;EACvC,qBAAA,CACE,GAAA,UACA,OAAA,GAAU,kBAAA,GACT,OAAA,CAAQ,iBAAA;AAAA;AAAA,UAGI,QAAA;EACf,GAAA;EACA,OAAA;EACA,IAAA;EACA,IAAA;EACA,QAAA;EACA,SAAA,EAAW,WAAA;EACX,QAAA,EAAU,IAAA;EACV,YAAA,GAAe,cAAA;EACf,cAAA,GAAiB,MAAA;EACjB,KAAA,GAAQ,OAAA;EACR,YAAA;AAAA;AAAA,UAGe,YAAA,SAAqB,QAAA;EACpC,IAAA,EAAM,cAAA;EACN,QAAA;EACA,WAAA,IAAe,OAAA,CAAQ,WAAA;EACvB,IAAA,IAAQ,OAAA;EACR,IAAA,OAAW,OAAA,CAAQ,CAAA;EACnB,IAAA,IAAQ,OAAA,CAAQ,IAAA;AAAA;AAAA,UAGD,YAAA;EACf,MAAA,GAAS,aAAA;EACT,YAAA,GAAe,cAAA;EACf,cAAA,GAAiB,MAAA;EACjB,GAAA,GAAM,WAAA;EACN,IAAA,GAAO,WAAA;EACP,MAAA,GAAS,WAAA;EACT,MAAA,GAAS,WAAA;EACT,MAAA,GAAS,WAAA;EACT,YAAA;AAAA;AAAA,UAGe,YAAA;EACf,MAAA,GAAS,aAAA;EACT,KAAA,GAAQ,OAAA;AAAA;AAAA,UAGO,aAAA;EACf,KAAA;EACA,MAAA;EACA,MAAA;EACA,SAAA;EACA,UAAA;EACA,OAAA;AAAA;AAAA,UAGe,SAAA;EACf,OAAA,EAAS,QAAA;EACT,SAAA;EACA,MAAA;EACA,iBAAA;AAAA;AAAA,UAGe,WAAA;EACf,GAAA,GAAM,WAAA;EACN,IAAA,GAAO,WAAA;EACP,MAAA,GAAS,WAAA;EACT,MAAA,GAAS,WAAA;EACT,MAAA,GAAS,WAAA;AAAA;AAAA,UAGM,cAAA;EACf,WAAA;EACA,eAAA;EACA,kBAAA;EACA,eAAA;EACA,YAAA;EACA,WAAA,GAAc,IAAA;AAAA;AAAA,UAGC,aAAA;EACf,WAAA;EACA,gBAAA;EACA,cAAA,GAAiB,IAAA;EACjB,aAAA,GAAgB,IAAA;EAChB,kBAAA;AAAA;AAAA,UAGe,OAAA;EACf,MAAA;EACA,MAAA;EACA,MAAA;AAAA;AAAA,UAGe,kBAAA;EACf,YAAA,GAAe,cAAA;EACf,cAAA,GAAiB,MAAA;EACjB,YAAA;AAAA;AAAA,UAGe,iBAAA;EACf,GAAA;EACA,QAAA;EACA,UAAA,CACE,UAAA,UACA,KAAA,EAAO,cAAA,GAAiB,WAAA,GAAc,eAAA,YAA2B,IAAA,GAChE,OAAA,CAAQ,cAAA;EACX,KAAA,IAAS,OAAA;EACT,QAAA,CAAS,aAAA,EAAe,cAAA,KAAmB,OAAA,CAAQ,QAAA;AAAA;AAAA,UAGpC,cAAA;EACf,UAAA;EACA,IAAA;AAAA;;;;;;;;;;;;;AFlFF;;;;;;;;;;;;;;;AAyDA;;;;;;;;;AAoFA;;;;;;;;;cETa,oBAAA,YAAgC,mBAAA;EAAA,mBACxB,MAAA,EAAM,MAAA;EAAA,mBACN,GAAA,EADM,gBAAA,CACH,MAAA;EAAA,mBACH,GAAA;;;YAWT,EAAA,GAAK,QAAA;EFLoB;;;EAAA,IEUxB,UAAA,CAAA;EFVkC;;;;EAAA,IEkBlC,MAAA,CAAA;EAAA,mBAIQ,OAAA,EAjBI,QAAA,CAiBG,aAAA;EAqCb,MAAA,CACX,UAAA,UACA,IAAA,EAAM,QAAA,EACN,MAAA,YACC,OAAA;EAsBU,QAAA,CAAS,UAAA,UAAoB,MAAA,WAAiB,OAAA,CAAQ,QAAA;EA4BtD,MAAA,CAAO,UAAA,UAAoB,MAAA,WAAiB,OAAA;EAU5C,MAAA,CAAO,UAAA,UAAoB,MAAA,WAAiB,OAAA;EF9G7C;;;EAAA,UEmIF,GAAA,CAAI,UAAA,UAAoB,MAAA;EAAA,UAQxB,KAAA,CAAA,GAAS,QAAA;EAAA,UAOT,QAAA,CAAS,QAAA;AAAA;;;;;;cCjVR,uBAAA,EAAuB,QAAA,CAAA,IAAA,UAAA,OAAA;eAUlC,QAAA,CAAA,OAAA;AAAA;AAAA,KAEU,+BAAA,GAAkC,MAAA,QACrC,uBAAA,CAAwB,MAAA;AAAA;EAAA,UAIrB,KAAA;IAAA,CACP,uBAAA,CAAwB,GAAA,GAAM,+BAAA;EAAA;AAAA;AAAA,cAMtB,wBAAA,YAAoC,mBAAA;EAAA,mBAC5B,MAAA,EAAM,MAAA;EAAA,mBACN,GAAA,EADM,gBAAA,CACH,MAAA;EAAA,mBACH,YAAA,EAAY,YAAA;EAAA,mBACZ,kBAAA,EAAkB,kBAAA;EAAA,mBAClB,OAAA,EAAO,QAAA;;;gBAEZ,WAAA,CAAA;EAAA,mBAIK,WAAA,EANO,QAAA,CAMI,aAAA;EAAA,mBAcX,OAAA,EAdW,QAAA,CAcJ,aAAA;EAqBb,MAAA,CACX,UAAA,UACA,IAAA,EAAM,QAAA,EACN,MAAA,YACC,OAAA;EAaU,QAAA,CAAS,UAAA,UAAoB,MAAA,WAAiB,OAAA,CAAQ,QAAA;EAqBtD,MAAA,CAAO,UAAA,UAAoB,MAAA,WAAiB,OAAA;EAY5C,MAAA,CAAO,UAAA,UAAoB,MAAA,WAAiB,OAAA;EAAA,UAW/C,IAAA,CAAK,MAAA,UAAgB,MAAA,WAAiB,OAAA,CAAQ,EAAA,CAAG,KAAA;EAAA,UAIjD,QAAA,CAAS,QAAA;EAAA,UAKT,IAAA,CAAK,MAAA,UAAgB,MAAA;EAAA,UAIrB,cAAA,CAAe,KAAA;AAAA;;;;YCtJf,KAAA;INTF;;;;IMcN,sBAAA;MACE,EAAA;MACA,IAAA,EAAM,QAAA;MACN,MAAA,EAAQ,eAAA;MACR,OAAA,EAAS,iBAAA;IAAA;INlBL;;;IMuBN,qBAAA;MACE,EAAA;MACA,MAAA,EAAQ,eAAA;IAAA;EAAA;AAAA;;;;;;;;;;;;;;ALlCsD;cKuDvD,YAAA,EAAY,QAAA,CAAA,OAAA,CAevB,QAAA,CAfuB,MAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/bucket/providers/FileStorageProvider.ts","../../src/bucket/providers/MemoryFileStorageProvider.ts","../../src/bucket/primitives/$bucket.ts","../../src/bucket/errors/FileNotFoundError.ts","../../src/bucket/providers/CloudflareR2Provider.ts","../../src/bucket/providers/LocalFileStorageProvider.ts","../../src/bucket/providers/NodeS3BucketProvider.ts","../../src/bucket/index.ts"],"mappings":";;;;;;;;;uBAEsB,mBAAA;;;;;;;;AAAtB;WASW,MAAA,CACP,UAAA,UACA,IAAA,EAAM,QAAA,EACN,MAAA,YACC,OAAA;;;;;;;;WASM,QAAA,CAAS,UAAA,UAAoB,MAAA,WAAiB,OAAA,CAAQ,QAAA;EAiBH;;;;;;;EAAA,SARnD,MAAA,CAAO,UAAA,UAAoB,MAAA,WAAiB,OAAA;EATnC;;;;;;EAAA,SAiBT,MAAA,CAAO,UAAA,UAAoB,MAAA,WAAiB,OAAA;AAAA;;;UCnC7C,UAAA;EACR,MAAA,EAAQ,MAAA;EACR,IAAA;EACA,IAAA;EACA,IAAA;AAAA;AAAA,cAGW,yBAAA,YAAqC,mBAAA;EAAA,SAChC,KAAA,EAAO,MAAA,SAAe,UAAA;EAAA,mBACnB,UAAA,EAAU,kBAAA;EAAA,mBACV,YAAA,EAAY,YAAA;EAElB,MAAA,CACX,UAAA,UACA,IAAA,EAAM,QAAA,EACN,MAAA,YACC,OAAA;EAoBU,QAAA,CAAS,UAAA,UAAoB,MAAA,WAAiB,OAAA,CAAQ,QAAA;EAiBtD,MAAA,CAAO,UAAA,UAAoB,MAAA,WAAiB,OAAA;EAI5C,MAAA,CAAO,UAAA,UAAoB,MAAA,WAAiB,OAAA;EAAA,UAS/C,QAAA,CAAA;AAAA;;;;;;;;ADtEZ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACEoE;;;;;;;;;cC0DvD,OAAA;EAAA,UAAoB,sBAAA,GAAsB,eAAA;EAAA;;UAGtC,sBAAA,SAA+B,iBAAA;EDnDR;;;;;;;;;;;;;;;;;;;;;;;;;;EC8EtC,QAAA,GAAW,OAAA,CAAQ,mBAAA;EDlDN;;;;;;;;;;;;;;;;;;;ACoBf;;;;EAuDE,IAAA;AAAA;AAAA,UAKe,iBAAA;;;;;;;;;;AAzDjB;;;;;;;;;;;EA8EE,WAAA;EA1BA;;;AAKF;;;;;;;;;AAoFA;;;;;;;;;;;;;EApCE,SAAA;EAmImB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EApGnB,OAAA;AAAA;AAAA,cAKW,eAAA,SAAwB,SAAA,CAAU,sBAAA;EAAA,SAC7B,QAAA,EAAQ,mBAAA,GAAA,yBAAA;EAAA,mBACL,UAAA,EAAU,kBAAA;EAAA,IAElB,IAAA,CAAA;EA0GI;;;EAnGF,MAAA,CACX,IAAA,EAAM,QAAA,EACN,OAAA,GAAU,iBAAA,GACT,OAAA;EAoGH;;;EAtDa,MAAA,CAAO,MAAA,UAAgB,QAAA,aAAmB,OAAA;EAkEhD;;;EAlDM,MAAA,CAAO,MAAA,WAAiB,OAAA;ECxR1B;;;ED+RE,QAAA,CAAS,MAAA,WAAiB,OAAA,CAAQ,QAAA;EAAA,UAYrC,SAAA,CAAA,GAAS,mBAAA,GAAA,yBAAA;AAAA;AAAA,UAeJ,iBAAA;;AE9PjB;;EFkQE,WAAA;EEjQyB;;;EFsQzB,SAAA;EEjMQ;;;;;EFwMR,OAAA;AAAA;;;cC1UW,iBAAA,SAA0B,WAAA;EAAA,SACrB,MAAA;AAAA;;;;;;;;;AHDlB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACEoE;;;;cG0DvD,oBAAA,YAAgC,mBAAA;EAAA,mBACxB,MAAA,EAAM,MAAA;EAAA,mBACN,GAAA,EADM,gBAAA,CACH,MAAA;EAAA,mBACH,GAAA;;;YAWT,EAAA,GAAK,QAAA;EH/DJ;;;EAAA,IGoEA,UAAA,CAAA;EHnEY;;;;EAAA,IG2EZ,MAAA,CAAA;EAAA,mBAIQ,OAAA,EAjBI,QAAA,CAiBG,aAAA;EAqCb,MAAA,CACX,UAAA,UACA,IAAA,EAAM,QAAA,EACN,MAAA,YACC,OAAA;EAsBU,QAAA,CAAS,UAAA,UAAoB,MAAA,WAAiB,OAAA,CAAQ,QAAA;EA4BtD,MAAA,CAAO,UAAA,UAAoB,MAAA,WAAiB,OAAA;EAU5C,MAAA,CAAO,UAAA,UAAoB,MAAA,WAAiB,OAAA;EHrLU;;;EAAA,UG0MzD,GAAA,CAAI,UAAA,UAAoB,MAAA;EAAA,UAQxB,KAAA,CAAA,GAAS,QAAA;EAAA,UAOT,QAAA,CAAS,QAAA;AAAA;;;;;;cC1MR,uBAAA,EAAuB,QAAA,CAAA,IAAA,UAAA,OAAA;eAUlC,QAAA,CAAA,OAAA;AAAA;AAAA,KAEU,+BAAA,GAAkC,MAAA,QACrC,uBAAA,CAAwB,MAAA;AAAA;EAAA,UAIrB,KAAA;IAAA,CACP,uBAAA,CAAwB,GAAA,GAAM,+BAAA;EAAA;AAAA;AAAA,cAMtB,wBAAA,YAAoC,mBAAA;EAAA,mBAC5B,MAAA,EAAM,MAAA;EAAA,mBACN,GAAA,EADM,gBAAA,CACH,MAAA;EAAA,mBACH,YAAA,EAAY,YAAA;EAAA,mBACZ,kBAAA,EAAkB,kBAAA;EAAA,mBAClB,OAAA,EAAO,QAAA;;;gBAEZ,WAAA,CAAA;EAAA,mBAIK,WAAA,EANO,QAAA,CAMI,aAAA;EAAA,mBAcX,OAAA,EAdW,QAAA,CAcJ,aAAA;EAqBb,MAAA,CACX,UAAA,UACA,IAAA,EAAM,QAAA,EACN,MAAA,YACC,OAAA;EAaU,QAAA,CAAS,UAAA,UAAoB,MAAA,WAAiB,OAAA,CAAQ,QAAA;EAqBtD,MAAA,CAAO,UAAA,UAAoB,MAAA,WAAiB,OAAA;EAY5C,MAAA,CAAO,UAAA,UAAoB,MAAA,WAAiB,OAAA;EAAA,UAW/C,IAAA,CAAK,MAAA,UAAgB,MAAA,WAAiB,OAAA,CAAQ,EAAA,CAAG,KAAA;EAAA,UAIjD,QAAA,CAAS,QAAA;EAAA,UAKT,IAAA,CAAK,MAAA,UAAgB,MAAA;EAAA,UAIrB,cAAA,CAAe,KAAA;AAAA;;;cC1JrB,SAAA,WAAS,OAAA;;;;;ANhBf;;;;;eM4CE,QAAA,CAAA,OAAA;ENtBuD;;;;;;EAZrD;;;;EAGC;;;;;;YMkCO,GAAA,SAAY,OAAA,CAAQ,MAAA,QAAc,SAAA;AAAA;;;;;;;;;cAWjC,oBAAA,YAAgC,mBAAA;EAAA,mBACxB,GAAA,EADa,gBAAA,CACV,MAAA;EAAA,mBACH,GAAA;;;;;;qBACA,MAAA,EAAM,MAAA;EAAA,mBACN,UAAA,EAAU,kBAAA;EAAA,mBACV,YAAA,EAAY,YAAA;EAAA,mBACZ,OAAA,EAAS,GAAA,SAAY,MAAA;ELxDpC;AAGN;;;EK2DS,WAAA,CAAY,IAAA;EAAA,UAIT,SAAA,CAAU,UAAA,WAAqB,MAAA;EAAA,mBAgBtB,OAAA,EAhB4B,QAAA,CAgBrB,aAAA;EAAA,UA2BhB,QAAA,CAAS,QAAA;EAKN,MAAA,CACX,UAAA,UACA,IAAA,EAAM,QAAA,EACN,MAAA,YACC,OAAA;EAiCU,QAAA,CAAS,UAAA,UAAoB,MAAA,WAAiB,OAAA,CAAQ,QAAA;EA+BtD,MAAA,CAAO,UAAA,UAAoB,MAAA,WAAiB,OAAA;EAU5C,MAAA,CAAO,UAAA,UAAoB,MAAA,WAAiB,OAAA;AAAA;;;;YClL/C,KAAA;IPtB6B;;;;IO2BrC,sBAAA;MACE,EAAA;MACA,IAAA,EAAM,QAAA;MACN,MAAA,EAAQ,eAAA;MACR,OAAA,EAAS,iBAAA;IAAA;IPrBX;;;IO0BA,qBAAA;MACE,EAAA;MACA,MAAA,EAAQ,eAAA;IAAA;IPhB0B;;;IOqBpC,wBAAA;MACE,EAAA;MACA,IAAA,EAAM,QAAA;MACN,MAAA,EAAQ,eAAA;IAAA;EAAA;AAAA;;;;;;;AN5CsD;;;;;;;;cMiEvD,YAAA,EAAY,QAAA,CAAA,OAAA,CAsBvB,QAAA,CAtBuB,MAAA"}

package/dist/bucket/index.js

@@ -6,6 +6,8 @@ import { mkdir, stat, unlink } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { $logger } from "alepha/logger";
+import { Buffer as Buffer$1 } from "node:buffer";
+import { S3mini } from "s3mini";
 //#region ../../src/bucket/errors/InvalidFileError.ts
 var InvalidFileError = class extends AlephaError {
 	status = 400;
@@ -164,7 +166,13 @@ var BucketPrimitive = class extends Primitive {
 	* Downloads a file from the bucket.
 	*/
 	async download(fileId) {
-		return this.provider.download(this.name, fileId);
+		const file = await this.provider.download(this.name, fileId);
+		await this.alepha.events.emit("bucket:file:downloaded", {
+			id: fileId,
+			bucket: this,
+			file
+		});
+		return file;
 	}
 	$provider() {
 		if (!this.options.provider) return this.alepha.inject(FileStorageProvider);
@@ -265,6 +273,137 @@ var LocalFileStorageProvider = class {
 	}
 };
 //#endregion
+//#region ../../src/bucket/providers/NodeS3BucketProvider.ts
+const envSchema = t.object({
+	/**
+	* S3 endpoint URL. The bucket name is appended (path-style) per request.
+	*
+	* Examples:
+	* - AWS S3: `https://s3.us-east-1.amazonaws.com`
+	* - Cloudflare R2: `https://<account-id>.r2.cloudflarestorage.com`
+	* - MinIO: `http://localhost:9000`
+	* - DigitalOcean Spaces: `https://<region>.digitaloceanspaces.com`
+	*/
+	S3_ENDPOINT: t.string(),
+	/**
+	* AWS region or "auto" for R2.
+	*
+	* @default "auto"
+	*/
+	S3_REGION: t.optional(t.string()),
+	/**
+	* Access key ID for S3 authentication.
+	*/
+	S3_ACCESS_KEY_ID: t.string(),
+	/**
+	* Secret access key for S3 authentication.
+	*/
+	S3_SECRET_ACCESS_KEY: t.string()
+});
+/**
+* S3-compatible file storage provider for Node.js.
+*
+* Backed by `s3mini` (zero-dep, ~20 KB). Works with AWS S3, Cloudflare R2,
+* MinIO, DigitalOcean Spaces, Backblaze B2, and any other S3-compatible service.
+*
+* Uses path-style addressing (`<endpoint>/<bucket>`).
+*/
+var NodeS3BucketProvider = class {
+	log = $logger();
+	env = $env(envSchema);
+	alepha = $inject(Alepha);
+	fileSystem = $inject(FileSystemProvider);
+	fileDetector = $inject(FileDetector);
+	clients = /* @__PURE__ */ new Map();
+	/**
+	* Convert bucket name to S3-compatible format.
+	* S3 bucket names must be lowercase, 3-63 characters, no underscores.
+	*/
+	convertName(name) {
+		return name.replaceAll("/", "-").replaceAll("_", "-").toLowerCase();
+	}
+	getClient(bucketName) {
+		const name = this.convertName(bucketName);
+		let client = this.clients.get(name);
+		if (!client) {
+			const endpoint = this.env.S3_ENDPOINT.replace(/\/+$/, "");
+			client = new S3mini({
+				accessKeyId: this.env.S3_ACCESS_KEY_ID,
+				secretAccessKey: this.env.S3_SECRET_ACCESS_KEY,
+				region: this.env.S3_REGION || "auto",
+				endpoint: `${endpoint}/${name}`
+			});
+			this.clients.set(name, client);
+		}
+		return client;
+	}
+	onStart = $hook({
+		on: "start",
+		handler: async () => {
+			for (const bucket of this.alepha.primitives($bucket)) {
+				if (bucket.provider !== this) continue;
+				const name = this.convertName(bucket.name);
+				const client = this.getClient(bucket.name);
+				this.log.debug(`Preparing S3 bucket '${name}'...`);
+				if (!await client.bucketExists()) {
+					this.log.debug(`Creating S3 bucket '${name}'...`);
+					if (!await client.createBucket()) throw new AlephaError(`Failed to create S3 bucket '${name}'`);
+				}
+				this.log.info(`S3 bucket '${bucket.name}' OK`);
+			}
+		}
+	});
+	createId(mimeType) {
+		const ext = this.fileDetector.getExtensionFromMimeType(mimeType);
+		return `${crypto.randomUUID()}.${ext}`;
+	}
+	async upload(bucketName, file, fileId) {
+		fileId ??= this.createId(file.type);
+		this.log.trace(`Uploading file '${file.name}' to bucket '${bucketName}' with id '${fileId}'...`);
+		const client = this.getClient(bucketName);
+		try {
+			const buffer = new Uint8Array(await file.arrayBuffer());
+			await client.putObject(fileId, buffer, file.type || "application/octet-stream", void 0, { "x-amz-meta-name": encodeURIComponent(file.name) }, file.size);
+			this.log.trace(`File uploaded successfully: ${fileId}`);
+			return fileId;
+		} catch (error) {
+			this.log.error(`Failed to upload file: ${error}`);
+			if (error instanceof Error) throw new AlephaError(`Upload failed: ${error.message}`, { cause: error });
+			throw error;
+		}
+	}
+	async download(bucketName, fileId) {
+		this.log.trace(`Downloading file '${fileId}' from bucket '${bucketName}'...`);
+		const response = await this.getClient(bucketName).getObjectResponse(fileId);
+		if (!response) throw new FileNotFoundError(`File '${fileId}' not found in bucket '${bucketName}'`);
+		const buffer = Buffer$1.from(await response.arrayBuffer());
+		const mimeType = response.headers.get("content-type") || this.fileDetector.getContentType(fileId);
+		const metaName = response.headers.get("x-amz-meta-name");
+		const name = metaName ? decodeURIComponent(metaName) : fileId;
+		return this.fileSystem.createFile({
+			buffer,
+			name,
+			type: mimeType,
+			size: buffer.length
+		});
+	}
+	async exists(bucketName, fileId) {
+		this.log.trace(`Checking existence of file '${fileId}' in bucket '${bucketName}'...`);
+		return await this.getClient(bucketName).objectExists(fileId) === true;
+	}
+	async delete(bucketName, fileId) {
+		this.log.trace(`Deleting file '${fileId}' from bucket '${bucketName}'...`);
+		const client = this.getClient(bucketName);
+		try {
+			await client.deleteObject(fileId);
+		} catch (error) {
+			this.log.error(`Failed to delete file: ${error}`);
+			if (error instanceof Error) throw new FileNotFoundError("Error deleting file", { cause: error });
+			throw error;
+		}
+	}
+};
+//#endregion
 //#region ../../src/bucket/providers/CloudflareR2Provider.ts
 /**
 * Cloudflare R2 storage provider.
@@ -314,7 +453,11 @@ var LocalFileStorageProvider = class {
 var CloudflareR2Provider = class {
 	alepha = $inject(Alepha);
 	log = $logger();
-	env = $env(t.object({ R2_BUCKET_NAME: t.string({ description: "R2 bucket name in Cloudflare" }) }));
+	env = $env(t.object({ 
+	/**
+	* The actual R2 bucket name in Cloudflare.
+	*/
+R2_BUCKET_NAME: t.string({ description: "R2 bucket name in Cloudflare" }) }));
 	r2;
 	/**
 	* Get the R2 bucket name from environment.
@@ -427,16 +570,21 @@ const AlephaBucket = $module({
 	name: "alepha.bucket",
 	primitives: [$bucket],
 	services: [FileStorageProvider],
-	variants: [MemoryFileStorageProvider, LocalFileStorageProvider],
+	variants: [
+		MemoryFileStorageProvider,
+		LocalFileStorageProvider,
+		NodeS3BucketProvider
+	],
 	register: (alepha) => {
+		const useS3 = !!alepha.env.S3_ENDPOINT;
 		alepha.with({
 			optional: true,
 			provide: FileStorageProvider,
-			use: alepha.isTest() || alepha.isServerless() ? MemoryFileStorageProvider : LocalFileStorageProvider
+			use: alepha.isTest() || alepha.isServerless() ? MemoryFileStorageProvider : useS3 ? NodeS3BucketProvider : LocalFileStorageProvider
 		});
 	}
 });
 //#endregion
-export { $bucket, AlephaBucket, BucketPrimitive, CloudflareR2Provider, FileNotFoundError, FileStorageProvider, LocalFileStorageProvider, MemoryFileStorageProvider, localFileStorageOptions };
+export { $bucket, AlephaBucket, BucketPrimitive, CloudflareR2Provider, FileNotFoundError, FileStorageProvider, LocalFileStorageProvider, MemoryFileStorageProvider, NodeS3BucketProvider, localFileStorageOptions };
 
 //# sourceMappingURL=index.js.map