covara 0.0.1 → 0.6.0

package/dist/auth/scope.js

@@ -0,0 +1,166 @@
+import { allScope } from "./rsql.js";
+import { UnauthorizedError, ForbiddenError } from "../resource/error.js";
+export class ScopeResolver {
+    constructor(config, resourceName) {
+        this.config = config;
+        this.resourceName = resourceName;
+    }
+    isPublic(operation) {
+        if (!this.config.public)
+            return false;
+        if (typeof this.config.public === "boolean") {
+            return this.config.public && (operation === "read" || operation === "subscribe");
+        }
+        if (operation === "read") {
+            return this.config.public.read === true;
+        }
+        if (operation === "subscribe") {
+            return this.config.public.subscribe === true;
+        }
+        return false;
+    }
+    getScopeFunction(operation) {
+        switch (operation) {
+            case "read":
+                return this.config.read ?? this.config.scope;
+            case "create":
+                return this.config.create ?? this.config.scope;
+            case "update":
+                return this.config.update ?? this.config.scope;
+            case "delete":
+                return this.config.delete ?? this.config.scope;
+            case "subscribe":
+                return this.config.subscribe ?? this.config.read ?? this.config.scope;
+        }
+    }
+    async resolve(operation, user) {
+        if (this.isPublic(operation)) {
+            return allScope();
+        }
+        if (!user) {
+            throw new UnauthorizedError(`Authentication required for ${operation} on ${this.resourceName}`);
+        }
+        const scopeFn = this.getScopeFunction(operation);
+        if (!scopeFn) {
+            return allScope();
+        }
+        const scope = await scopeFn(user);
+        return scope;
+    }
+    async canPerform(operation, user) {
+        try {
+            const scope = await this.resolve(operation, user);
+            return !scope.isEmpty();
+        }
+        catch {
+            return false;
+        }
+    }
+    async requirePermission(operation, user) {
+        const scope = await this.resolve(operation, user);
+        if (scope.isEmpty()) {
+            throw new ForbiddenError(`Not authorized to ${operation} on ${this.resourceName}`);
+        }
+        return scope;
+    }
+}
+export const createScopeResolver = (config, resourceName) => {
+    return new ScopeResolver(config ?? {}, resourceName);
+};
+export const combineScopes = (userScope, additionalFilter) => {
+    if (!additionalFilter || additionalFilter.trim() === "") {
+        return userScope.toString();
+    }
+    if (userScope.isEmpty()) {
+        return additionalFilter;
+    }
+    const scopeStr = userScope.toString();
+    if (scopeStr === "*") {
+        return additionalFilter;
+    }
+    return `(${scopeStr});(${additionalFilter})`;
+};
+export const checkObjectAccess = async (resolver, operation, user, object, filterCompile) => {
+    try {
+        const scope = await resolver.resolve(operation, user);
+        if (scope.toString() === "*") {
+            return true;
+        }
+        if (scope.isEmpty()) {
+            return false;
+        }
+        const compiled = filterCompile(scope.toString());
+        return compiled.execute(object);
+    }
+    catch {
+        return false;
+    }
+};
+export const scopePatterns = {
+    ownerOnly: (ownerField = "userId") => ({
+        scope: async (user) => {
+            const { eq } = await import("./rsql.js");
+            return eq(ownerField, user.id);
+        },
+    }),
+    publicReadOwnerWrite: (ownerField = "userId") => ({
+        public: { read: true, subscribe: true },
+        create: async (user) => {
+            const { eq } = await import("./rsql.js");
+            return eq(ownerField, user.id);
+        },
+        update: async (user) => {
+            const { eq } = await import("./rsql.js");
+            return eq(ownerField, user.id);
+        },
+        delete: async (user) => {
+            const { eq } = await import("./rsql.js");
+            return eq(ownerField, user.id);
+        },
+    }),
+    ownerOrAdmin: (ownerField = "userId", isAdmin) => ({
+        scope: async (user) => {
+            const { eq, allScope } = await import("./rsql.js");
+            if (isAdmin(user)) {
+                return allScope();
+            }
+            return eq(ownerField, user.id);
+        },
+    }),
+    orgBased: (orgField = "organizationId") => ({
+        scope: async (user) => {
+            const { eq } = await import("./rsql.js");
+            const orgId = user.metadata?.organizationId;
+            if (!orgId) {
+                const { emptyScope } = await import("./rsql.js");
+                return emptyScope();
+            }
+            return eq(orgField, orgId);
+        },
+    }),
+    authenticatedFullAccess: () => ({
+        scope: async () => {
+            const { allScope } = await import("./rsql.js");
+            return allScope();
+        },
+    }),
+    fullyPublic: () => ({
+        public: {
+            read: true,
+            subscribe: true,
+        },
+        create: async () => {
+            const { allScope } = await import("./rsql.js");
+            return allScope();
+        },
+        update: async () => {
+            const { allScope } = await import("./rsql.js");
+            return allScope();
+        },
+        delete: async () => {
+            const { allScope } = await import("./rsql.js");
+            return allScope();
+        },
+    }),
+};
+//# sourceMappingURL=scope.js.map

package/dist/auth/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../src/auth/scope.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAIrE,MAAM,OAAO,aAAa;IACxB,YACU,MAAmB,EACnB,YAAoB;QADpB,WAAM,GAAN,MAAM,CAAa;QACnB,iBAAY,GAAZ,YAAY,CAAQ;IAC3B,CAAC;IAEJ,QAAQ,CAAC,SAAoB;QAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAEtC,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,WAAW,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC;QAC1C,CAAC;QAED,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC;QAC/C,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,gBAAgB,CAAC,SAAoB;QAC3C,QAAQ,SAAS,EAAE,CAAC;YAClB,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAC/C,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YACjD,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YACjD,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YACjD,KAAK,WAAW;gBACd,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAoB,EAAE,IAAwB;QAC1D,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,OAAO,QAAQ,EAAE,CAAC;QACpB,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,iBAAiB,CACzB,+BAA+B,SAAS,OAAO,IAAI,CAAC,YAAY,EAAE,CACnE,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,QAAQ,EAAE,CAAC;QACpB,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAoB,EAAE,IAAwB;QAC7D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAClD,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAoB,EAAE,IAAwB;QACpE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAElD,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,cAAc,CACtB,qBAAqB,SAAS,OAAO,IAAI,CAAC,YAAY,EAAE,CACzD,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,MAA+B,EAC/B,YAAoB,EACL,EAAE;IACjB,OAAO,IAAI,aAAa,CAAC,MAAM,IAAI,EAAE,EAAE,YAAY,CAAC,CAAC;AACvD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,SAAwB,EACxB,gBAAyB,EACjB,EAAE;IACV,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACxD,OAAO,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;QACxB,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;IACtC,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;QACrB,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,OAAO,IAAI,QAAQ,MAAM,gBAAgB,GAAG,CAAC;AAC/C,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,QAAuB,EACvB,SAAoB,EACpB,IAAwB,EACxB,MAA+B,EAC/B,aAAuE,EACrD,EAAE;IACpB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEtD,IAAI,KAAK,CAAC,QAAQ,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjD,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,SAAS,EAAE,CAAC,UAAU,GAAG,QAAQ,EAAe,EAAE,CAAC,CAAC;QAClD,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACpB,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACtC,OAAO,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC;KACF,CAAC;IAEF,oBAAoB,EAAE,CAAC,UAAU,GAAG,QAAQ,EAAe,EAAE,CAAC,CAAC;QAC7D,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;QACvC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACrB,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACtC,OAAO,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACrB,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACtC,OAAO,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACrB,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACtC,OAAO,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC;KACF,CAAC;IAEF,YAAY,EAAE,CACZ,UAAU,GAAG,QAAQ,EACrB,OAAuC,EAC1B,EAAE,CAAC,CAAC;QACjB,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACpB,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChD,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClB,OAAO,QAAQ,EAAE,CAAC;YACpB,CAAC;YACD,OAAO,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC;KACF,CAAC;IAEF,QAAQ,EAAE,CAAC,QAAQ,GAAG,gBAAgB,EAAe,EAAE,CAAC,CAAC;QACvD,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACpB,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC;YAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC9C,OAAO,UAAU,EAAE,CAAC;YACtB,CAAC;YACD,OAAO,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;IAEF,uBAAuB,EAAE,GAAgB,EAAE,CAAC,CAAC;QAC3C,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5C,OAAO,QAAQ,EAAE,CAAC;QACpB,CAAC;KACF,CAAC;IAEF,WAAW,EAAE,GAAgB,EAAE,CAAC,CAAC;QAC/B,MAAM,EAAE;YACN,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,IAAI;SAChB;QACD,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5C,OAAO,QAAQ,EAAE,CAAC;QACpB,CAAC;QACD,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5C,OAAO,QAAQ,EAAE,CAAC;QACpB,CAAC;QACD,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5C,OAAO,QAAQ,EAAE,CAAC;QACpB,CAAC;KACF,CAAC;CACH,CAAC"}

package/dist/auth/stores/drizzle.d.ts

@@ -0,0 +1,39 @@
+import { SessionData, SessionStore } from "../types.js";
+import { DrizzleDatabase } from "../../resource/types.js";
+export interface SessionsTableColumns {
+    id: unknown;
+    userId: unknown;
+    createdAt: unknown;
+    expiresAt: unknown;
+    data: unknown;
+}
+export interface DrizzleSessionStoreOptions {
+    db: DrizzleDatabase;
+    table: {
+        id: unknown;
+        userId: unknown;
+        createdAt: unknown;
+        expiresAt: unknown;
+        data: unknown;
+    } & Record<string, unknown>;
+    cleanupIntervalMs?: number;
+    onError?: (error: Error) => void;
+}
+export declare class DrizzleSessionStore implements SessionStore {
+    private db;
+    private table;
+    private cleanupInterval?;
+    private onError?;
+    constructor(options: DrizzleSessionStoreOptions);
+    get(sessionId: string): Promise<SessionData | null>;
+    set(sessionId: string, session: SessionData, _ttlMs: number): Promise<void>;
+    delete(sessionId: string): Promise<void>;
+    touch(sessionId: string, ttlMs: number): Promise<void>;
+    getAll(): Promise<SessionData[]>;
+    getByUser(userId: string): Promise<SessionData[]>;
+    deleteByUser(userId: string): Promise<number>;
+    cleanup(): Promise<number>;
+    destroy(): void;
+}
+export declare const createDrizzleSessionStore: (options: DrizzleSessionStoreOptions) => DrizzleSessionStore;
+//# sourceMappingURL=drizzle.d.ts.map

package/dist/auth/stores/drizzle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drizzle.d.ts","sourceRoot":"","sources":["../../../src/auth/stores/drizzle.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,eAAe,CAAC;IACpB,KAAK,EAAE;QACL,EAAE,EAAE,OAAO,CAAC;QACZ,MAAM,EAAE,OAAO,CAAC;QAChB,SAAS,EAAE,OAAO,CAAC;QACnB,SAAS,EAAE,OAAO,CAAC;QACnB,IAAI,EAAE,OAAO,CAAC;KACf,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAClC;AAED,qBAAa,mBAAoB,YAAW,YAAY;IACtD,OAAO,CAAC,EAAE,CAAkB;IAC5B,OAAO,CAAC,KAAK,CAAsC;IACnD,OAAO,CAAC,eAAe,CAAC,CAAiC;IACzD,OAAO,CAAC,OAAO,CAAC,CAAyB;gBAE7B,OAAO,EAAE,0BAA0B;IAazC,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAuCnD,GAAG,CACP,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC;IAkCV,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUxC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWtD,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAiChC,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAmCjD,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAa7C,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;IAahC,OAAO,IAAI,IAAI;CAKhB;AAED,eAAO,MAAM,yBAAyB,GACpC,SAAS,0BAA0B,KAClC,mBAEF,CAAC"}

package/dist/auth/stores/drizzle.js

@@ -0,0 +1,183 @@
+import { eq, and, gt, lt } from "drizzle-orm";
+export class DrizzleSessionStore {
+    constructor(options) {
+        this.db = options.db;
+        this.table = options.table;
+        this.onError = options.onError;
+        if (options.cleanupIntervalMs) {
+            this.cleanupInterval = setInterval(() => this.cleanup(), options.cleanupIntervalMs);
+        }
+    }
+    async get(sessionId) {
+        try {
+            const results = await this.db
+                .select()
+                .from(this.table)
+                .where(and(eq(this.table.id, sessionId), gt(this.table.expiresAt, new Date())))
+                .limit(1);
+            if (results.length === 0)
+                return null;
+            const row = results[0];
+            return {
+                id: row.id,
+                userId: row.userId,
+                createdAt: row.createdAt instanceof Date
+                    ? row.createdAt
+                    : new Date(row.createdAt),
+                expiresAt: row.expiresAt instanceof Date
+                    ? row.expiresAt
+                    : new Date(row.expiresAt),
+                data: row.data
+                    ? typeof row.data === "string"
+                        ? JSON.parse(row.data)
+                        : row.data
+                    : undefined,
+            };
+        }
+        catch (error) {
+            this.onError?.(error);
+            return null;
+        }
+    }
+    async set(sessionId, session, _ttlMs) {
+        try {
+            const existing = await this.db
+                .select({ id: this.table.id })
+                .from(this.table)
+                .where(eq(this.table.id, sessionId))
+                .limit(1);
+            const dataValue = session.data ? JSON.stringify(session.data) : null;
+            if (existing.length > 0) {
+                await this.db
+                    .update(this.table)
+                    .set({
+                    userId: session.userId,
+                    expiresAt: session.expiresAt,
+                    data: dataValue,
+                })
+                    .where(eq(this.table.id, sessionId));
+            }
+            else {
+                await this.db.insert(this.table).values({
+                    id: session.id,
+                    userId: session.userId,
+                    createdAt: session.createdAt,
+                    expiresAt: session.expiresAt,
+                    data: dataValue,
+                });
+            }
+        }
+        catch (error) {
+            this.onError?.(error);
+            throw error;
+        }
+    }
+    async delete(sessionId) {
+        try {
+            await this.db
+                .delete(this.table)
+                .where(eq(this.table.id, sessionId));
+        }
+        catch (error) {
+            this.onError?.(error);
+        }
+    }
+    async touch(sessionId, ttlMs) {
+        try {
+            await this.db
+                .update(this.table)
+                .set({ expiresAt: new Date(Date.now() + ttlMs) })
+                .where(eq(this.table.id, sessionId));
+        }
+        catch (error) {
+            this.onError?.(error);
+        }
+    }
+    async getAll() {
+        try {
+            const rows = (await this.db
+                .select()
+                .from(this.table)
+                .where(gt(this.table.expiresAt, new Date())));
+            return rows.map((row) => ({
+                id: row.id,
+                userId: row.userId,
+                createdAt: row.createdAt instanceof Date
+                    ? row.createdAt
+                    : new Date(row.createdAt),
+                expiresAt: row.expiresAt instanceof Date
+                    ? row.expiresAt
+                    : new Date(row.expiresAt),
+                data: row.data
+                    ? typeof row.data === "string"
+                        ? JSON.parse(row.data)
+                        : row.data
+                    : undefined,
+            }));
+        }
+        catch (error) {
+            this.onError?.(error);
+            return [];
+        }
+    }
+    async getByUser(userId) {
+        try {
+            const rows = (await this.db
+                .select()
+                .from(this.table)
+                .where(and(eq(this.table.userId, userId), gt(this.table.expiresAt, new Date()))));
+            return rows.map((row) => ({
+                id: row.id,
+                userId: row.userId,
+                createdAt: row.createdAt instanceof Date
+                    ? row.createdAt
+                    : new Date(row.createdAt),
+                expiresAt: row.expiresAt instanceof Date
+                    ? row.expiresAt
+                    : new Date(row.expiresAt),
+                data: row.data
+                    ? typeof row.data === "string"
+                        ? JSON.parse(row.data)
+                        : row.data
+                    : undefined,
+            }));
+        }
+        catch (error) {
+            this.onError?.(error);
+            return [];
+        }
+    }
+    async deleteByUser(userId) {
+        try {
+            const result = await this.db
+                .delete(this.table)
+                .where(eq(this.table.userId, userId));
+            return result.changes ?? 0;
+        }
+        catch (error) {
+            this.onError?.(error);
+            return 0;
+        }
+    }
+    async cleanup() {
+        try {
+            const result = await this.db
+                .delete(this.table)
+                .where(lt(this.table.expiresAt, new Date()));
+            return result.changes ?? 0;
+        }
+        catch (error) {
+            this.onError?.(error);
+            return 0;
+        }
+    }
+    destroy() {
+        if (this.cleanupInterval) {
+            clearInterval(this.cleanupInterval);
+        }
+    }
+}
+export const createDrizzleSessionStore = (options) => {
+    return new DrizzleSessionStore(options);
+};
+//# sourceMappingURL=drizzle.js.map

package/dist/auth/stores/drizzle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drizzle.js","sourceRoot":"","sources":["../../../src/auth/stores/drizzle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAyB9C,MAAM,OAAO,mBAAmB;IAM9B,YAAY,OAAmC;QAC7C,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAE/B,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC9B,IAAI,CAAC,eAAe,GAAG,WAAW,CAChC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EACpB,OAAO,CAAC,iBAAiB,CAC1B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE;iBAC1B,MAAM,EAAE;iBACR,IAAI,CAAC,IAAI,CAAC,KAAc,CAAC;iBACzB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAW,EAAE,SAAS,CAAC,EACrC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAkB,EAAE,IAAI,IAAI,EAAE,CAAC,CAC9C,CACF;iBACA,KAAK,CAAC,CAAC,CAAC,CAAC;YAEZ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAEtC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAA4B,CAAC;YAClD,OAAO;gBACL,EAAE,EAAE,GAAG,CAAC,EAAY;gBACpB,MAAM,EAAE,GAAG,CAAC,MAAgB;gBAC5B,SAAS,EACP,GAAG,CAAC,SAAS,YAAY,IAAI;oBAC3B,CAAC,CAAC,GAAG,CAAC,SAAS;oBACf,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAA4B,CAAC;gBAChD,SAAS,EACP,GAAG,CAAC,SAAS,YAAY,IAAI;oBAC3B,CAAC,CAAC,GAAG,CAAC,SAAS;oBACf,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAA4B,CAAC;gBAChD,IAAI,EAAE,GAAG,CAAC,IAAI;oBACZ,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;wBAC5B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;wBACtB,CAAC,CAAE,GAAG,CAAC,IAAgC;oBACzC,CAAC,CAAC,SAAS;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CACP,SAAiB,EACjB,OAAoB,EACpB,MAAc;QAEd,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE;iBAC3B,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EAAW,EAAE,CAAC;iBACtC,IAAI,CAAC,IAAI,CAAC,KAAc,CAAC;iBACzB,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAW,EAAE,SAAS,CAAC,CAAC;iBAC5C,KAAK,CAAC,CAAC,CAAC,CAAC;YAEZ,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAErE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,EAAE;qBACV,MAAM,CAAC,IAAI,CAAC,KAAc,CAAC;qBAC3B,GAAG,CAAC;oBACH,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,IAAI,EAAE,SAAS;iBACP,CAAC;qBACV,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAW,EAAE,SAAS,CAAC,CAAC,CAAC;YAClD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAc,CAAC,CAAC,MAAM,CAAC;oBAC/C,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,IAAI,EAAE,SAAS;iBACP,CAAC,CAAC;YACd,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC;YAC/B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,EAAE;iBACV,MAAM,CAAC,IAAI,CAAC,KAAc,CAAC;iBAC3B,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAW,EAAE,SAAS,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,KAAa;QAC1C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,EAAE;iBACV,MAAM,CAAC,IAAI,CAAC,KAAc,CAAC;iBAC3B,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EAAW,CAAC;iBACzD,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAW,EAAE,SAAS,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE;iBACxB,MAAM,EAAE;iBACR,IAAI,CAAC,IAAI,CAAC,KAAc,CAAC;iBACzB,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAkB,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAGpD,CAAC;YAEJ,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACxB,EAAE,EAAE,GAAG,CAAC,EAAY;gBACpB,MAAM,EAAE,GAAG,CAAC,MAAgB;gBAC5B,SAAS,EACP,GAAG,CAAC,SAAS,YAAY,IAAI;oBAC3B,CAAC,CAAC,GAAG,CAAC,SAAS;oBACf,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAA4B,CAAC;gBAChD,SAAS,EACP,GAAG,CAAC,SAAS,YAAY,IAAI;oBAC3B,CAAC,CAAC,GAAG,CAAC,SAAS;oBACf,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAA4B,CAAC;gBAChD,IAAI,EAAE,GAAG,CAAC,IAAI;oBACZ,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;wBAC5B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;wBACtB,CAAC,CAAE,GAAG,CAAC,IAAgC;oBACzC,CAAC,CAAC,SAAS;aACd,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC;YAC/B,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE;iBACxB,MAAM,EAAE;iBACR,IAAI,CAAC,IAAI,CAAC,KAAc,CAAC;iBACzB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAe,EAAE,MAAM,CAAC,EACtC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAkB,EAAE,IAAI,IAAI,EAAE,CAAC,CAC9C,CACF,CAA8B,CAAC;YAElC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACxB,EAAE,EAAE,GAAG,CAAC,EAAY;gBACpB,MAAM,EAAE,GAAG,CAAC,MAAgB;gBAC5B,SAAS,EACP,GAAG,CAAC,SAAS,YAAY,IAAI;oBAC3B,CAAC,CAAC,GAAG,CAAC,SAAS;oBACf,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAA4B,CAAC;gBAChD,SAAS,EACP,GAAG,CAAC,SAAS,YAAY,IAAI;oBAC3B,CAAC,CAAC,GAAG,CAAC,SAAS;oBACf,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAA4B,CAAC;gBAChD,IAAI,EAAE,GAAG,CAAC,IAAI;oBACZ,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;wBAC5B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;wBACtB,CAAC,CAAE,GAAG,CAAC,IAAgC;oBACzC,CAAC,CAAC,SAAS;aACd,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC;YAC/B,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;iBACzB,MAAM,CAAC,IAAI,CAAC,KAAc,CAAC;iBAC3B,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAe,EAAE,MAAM,CAAC,CAAC,CAAC;YAEjD,OAAQ,MAA+B,CAAC,OAAO,IAAI,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC;YAC/B,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;iBACzB,MAAM,CAAC,IAAI,CAAC,KAAc,CAAC;iBAC3B,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAkB,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;YAExD,OAAQ,MAA+B,CAAC,OAAO,IAAI,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC;YAC/B,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,OAAmC,EACd,EAAE;IACvB,OAAO,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC,CAAC"}

package/dist/auth/stores/index.d.ts

@@ -0,0 +1,6 @@
+export { RedisSessionStore, createRedisSessionStore } from "./redis.js";
+export type { RedisSessionStoreOptions } from "./redis.js";
+export { DrizzleSessionStore, createDrizzleSessionStore, } from "./drizzle.js";
+export type { DrizzleSessionStoreOptions, SessionsTableColumns } from "./drizzle.js";
+export { InMemorySessionStore } from "../types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/stores/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/stores/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AACrE,YAAY,EAAE,wBAAwB,EAAE,MAAM,SAAS,CAAC;AAExD,OAAO,EACL,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAElF,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC"}

package/dist/auth/stores/index.js

@@ -0,0 +1,4 @@
+export { RedisSessionStore, createRedisSessionStore } from "./redis.js";
+export { DrizzleSessionStore, createDrizzleSessionStore, } from "./drizzle.js";
+export { InMemorySessionStore } from "../types.js";
+//# sourceMappingURL=index.js.map

package/dist/auth/stores/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/stores/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAGrE,OAAO,EACL,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC"}

package/dist/auth/stores/redis.d.ts

@@ -0,0 +1,25 @@
+import { SessionData, SessionStore } from "../types.js";
+import { KVAdapter } from "../../kv/types.js";
+export interface RedisSessionStoreOptions {
+    kv: KVAdapter;
+    prefix?: string;
+    onError?: (error: Error) => void;
+}
+export declare class RedisSessionStore implements SessionStore {
+    private kv;
+    private prefix;
+    private onError?;
+    constructor(options: RedisSessionStoreOptions);
+    private key;
+    private userKey;
+    get(sessionId: string): Promise<SessionData | null>;
+    set(sessionId: string, session: SessionData, ttlMs: number): Promise<void>;
+    delete(sessionId: string): Promise<void>;
+    touch(sessionId: string, ttlMs: number): Promise<void>;
+    getAll(): Promise<SessionData[]>;
+    getByUser(userId: string): Promise<SessionData[]>;
+    deleteByUser(userId: string): Promise<number>;
+    count(): Promise<number>;
+}
+export declare const createRedisSessionStore: (options: RedisSessionStoreOptions) => RedisSessionStore;
+//# sourceMappingURL=redis.d.ts.map

package/dist/auth/stores/redis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.d.ts","sourceRoot":"","sources":["../../../src/auth/stores/redis.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,SAAS,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAClC;AAED,qBAAa,iBAAkB,YAAW,YAAY;IACpD,OAAO,CAAC,EAAE,CAAY;IACtB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAC,CAAyB;gBAE7B,OAAO,EAAE,wBAAwB;IAM7C,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,OAAO;IAIT,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAkBnD,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB1E,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYxC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBtD,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAsBhC,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAqBjD,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAkB7C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;CAS/B;AAED,eAAO,MAAM,uBAAuB,GAClC,SAAS,wBAAwB,KAChC,iBAEF,CAAC"}

package/dist/auth/stores/redis.js

@@ -0,0 +1,147 @@
+export class RedisSessionStore {
+    constructor(options) {
+        this.kv = options.kv;
+        this.prefix = options.prefix ?? "session";
+        this.onError = options.onError;
+    }
+    key(sessionId) {
+        return `${this.prefix}:${sessionId}`;
+    }
+    userKey(userId) {
+        return `${this.prefix}:user:${userId}`;
+    }
+    async get(sessionId) {
+        try {
+            const data = await this.kv.hgetall(this.key(sessionId));
+            if (!data || !data.id)
+                return null;
+            return {
+                id: data.id,
+                userId: data.userId,
+                createdAt: new Date(data.createdAt),
+                expiresAt: new Date(data.expiresAt),
+                data: data.data ? JSON.parse(data.data) : undefined,
+            };
+        }
+        catch (error) {
+            this.onError?.(error);
+            return null;
+        }
+    }
+    async set(sessionId, session, ttlMs) {
+        try {
+            const key = this.key(sessionId);
+            const data = {
+                id: session.id,
+                userId: session.userId,
+                createdAt: session.createdAt.toISOString(),
+                expiresAt: session.expiresAt.toISOString(),
+            };
+            if (session.data) {
+                data.data = JSON.stringify(session.data);
+            }
+            await this.kv.hmset(key, data);
+            await this.kv.expire(key, Math.ceil(ttlMs / 1000));
+            await this.kv.sadd(this.userKey(session.userId), sessionId);
+        }
+        catch (error) {
+            this.onError?.(error);
+            throw error;
+        }
+    }
+    async delete(sessionId) {
+        try {
+            const session = await this.get(sessionId);
+            if (session) {
+                await this.kv.srem(this.userKey(session.userId), sessionId);
+            }
+            await this.kv.del(this.key(sessionId));
+        }
+        catch (error) {
+            this.onError?.(error);
+        }
+    }
+    async touch(sessionId, ttlMs) {
+        try {
+            const key = this.key(sessionId);
+            const exists = await this.kv.exists(key);
+            if (exists) {
+                await this.kv.expire(key, Math.ceil(ttlMs / 1000));
+                await this.kv.hset(key, "expiresAt", new Date(Date.now() + ttlMs).toISOString());
+            }
+        }
+        catch (error) {
+            this.onError?.(error);
+        }
+    }
+    async getAll() {
+        try {
+            const keys = await this.kv.keys(`${this.prefix}:*`);
+            const sessions = [];
+            for (const key of keys) {
+                if (key.includes(":user:"))
+                    continue;
+                const sessionId = key.replace(`${this.prefix}:`, "");
+                const session = await this.get(sessionId);
+                if (session) {
+                    sessions.push(session);
+                }
+            }
+            return sessions;
+        }
+        catch (error) {
+            this.onError?.(error);
+            return [];
+        }
+    }
+    async getByUser(userId) {
+        try {
+            const sessionIds = await this.kv.smembers(this.userKey(userId));
+            const sessions = [];
+            for (const sessionId of sessionIds) {
+                const session = await this.get(sessionId);
+                if (session) {
+                    sessions.push(session);
+                }
+                else {
+                    await this.kv.srem(this.userKey(userId), sessionId);
+                }
+            }
+            return sessions;
+        }
+        catch (error) {
+            this.onError?.(error);
+            return [];
+        }
+    }
+    async deleteByUser(userId) {
+        try {
+            const sessionIds = await this.kv.smembers(this.userKey(userId));
+            let deleted = 0;
+            for (const sessionId of sessionIds) {
+                await this.kv.del(this.key(sessionId));
+                deleted++;
+            }
+            await this.kv.del(this.userKey(userId));
+            return deleted;
+        }
+        catch (error) {
+            this.onError?.(error);
+            return 0;
+        }
+    }
+    async count() {
+        try {
+            const keys = await this.kv.keys(`${this.prefix}:*`);
+            return keys.filter((k) => !k.includes(":user:")).length;
+        }
+        catch (error) {
+            this.onError?.(error);
+            return 0;
+        }
+    }
+}
+export const createRedisSessionStore = (options) => {
+    return new RedisSessionStore(options);
+};
+//# sourceMappingURL=redis.js.map

package/dist/auth/stores/redis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.js","sourceRoot":"","sources":["../../../src/auth/stores/redis.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,iBAAiB;IAK5B,YAAY,OAAiC;QAC3C,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,SAAS,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;IAEO,GAAG,CAAC,SAAiB;QAC3B,OAAO,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;IACvC,CAAC;IAEO,OAAO,CAAC,MAAc;QAC5B,OAAO,GAAG,IAAI,CAAC,MAAM,SAAS,MAAM,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YACxD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YAEnC,OAAO;gBACL,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;gBACnC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;gBACnC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;aACpD,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,OAAoB,EAAE,KAAa;QAC9D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,IAAI,GAA2B;gBACnC,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;gBAC1C,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;aAC3C,CAAC;YAEF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC3C,CAAC;YAED,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC/B,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;YACnD,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC;YAC/B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,KAAa;QAC1C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;gBACnD,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAChB,GAAG,EACH,WAAW,EACX,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAC3C,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACpD,MAAM,QAAQ,GAAkB,EAAE,CAAC;YAEnC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAAE,SAAS;gBAErC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC,CAAC;gBACrD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC1C,IAAI,OAAO,EAAE,CAAC;oBACZ,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YAED,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC;YAC/B,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc;QAC5B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAChE,MAAM,QAAQ,GAAkB,EAAE,CAAC;YAEnC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC1C,IAAI,OAAO,EAAE,CAAC;oBACZ,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACzB,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;YAED,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC;YAC/B,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAChE,IAAI,OAAO,GAAG,CAAC,CAAC;YAEhB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;gBACvC,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACxC,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC;YAC/B,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC;YAC/B,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,OAAiC,EACd,EAAE;IACrB,OAAO,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC,CAAC"}

package/dist/auth/totp.d.ts

@@ -0,0 +1,32 @@
+export declare const base32Encode: (buffer: Buffer) => string;
+export declare const base32Decode: (input: string) => Buffer;
+export interface TotpOptions {
+    step?: number;
+    digits?: number;
+    window?: number;
+}
+export declare const generateTotpSecret: (byteLength?: number) => string;
+export declare const generateTotp: (secret: string, options?: TotpOptions & {
+    timestampMs?: number;
+}) => string;
+export declare const verifyTotp: (secret: string, token: string, options?: TotpOptions & {
+    timestampMs?: number;
+}) => boolean;
+export interface TotpUriParams {
+    secret: string;
+    account: string;
+    issuer?: string;
+    digits?: number;
+    step?: number;
+}
+export declare const getTotpUri: (params: TotpUriParams) => string;
+export interface BackupCodesResult {
+    codes: string[];
+    hashes: string[];
+}
+export declare const generateBackupCodes: (count?: number) => Promise<BackupCodesResult>;
+export declare const verifyBackupCode: (code: string, hashes: string[]) => Promise<{
+    matched: boolean;
+    index: number;
+}>;
+//# sourceMappingURL=totp.d.ts.map

package/dist/auth/totp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp.d.ts","sourceRoot":"","sources":["../../src/auth/totp.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,YAAY,GAAI,QAAQ,MAAM,KAAG,MAmB7C,CAAC;AAEF,eAAO,MAAM,YAAY,GAAI,OAAO,MAAM,KAAG,MAoB5C,CAAC;AAEF,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAKD,eAAO,MAAM,kBAAkB,GAAI,mBAAe,KAAG,MAEpD,CAAC;AAoBF,eAAO,MAAM,YAAY,GACvB,QAAQ,MAAM,EACd,UAAS,WAAW,GAAG;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,KACnD,MAMF,CAAC;AAEF,eAAO,MAAM,UAAU,GACrB,QAAQ,MAAM,EACd,OAAO,MAAM,EACb,UAAS,WAAW,GAAG;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,KACnD,OAqBF,CAAC;AAEF,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,UAAU,GAAI,QAAQ,aAAa,KAAG,MAkBlD,CAAC;AAEF,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAOD,eAAO,MAAM,mBAAmB,GAAU,cAAU,KAAG,OAAO,CAAC,iBAAiB,CAO/E,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAC3B,MAAM,MAAM,EACZ,QAAQ,MAAM,EAAE,KACf,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAQ7C,CAAC"}