najm-auth 2.0.14 → 3.0.0

package/dist/schema/sqlite.d.ts

@@ -1089,6 +1089,149 @@ declare const credentialSetupSessionsTable: drizzle_orm_sqlite_core.SQLiteTableW
     };
     dialect: "sqlite";
 }>;
+/**
+ * Durable record that a user still owes a credential-setup purpose. Survives
+ * browser sessions, unlike credential_setup_sessions — the composite key lets
+ * one user owe more than one purpose at a time.
+ */
+declare const credentialSetupRequirementsTable: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
+    name: "credential_setup_requirements";
+    schema: undefined;
+    columns: {
+        userId: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: "user_id";
+            tableName: "credential_setup_requirements";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number;
+        }>;
+        purpose: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: "purpose";
+            tableName: "credential_setup_requirements";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number;
+        }>;
+        temporaryCredentialKind: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: "temporary_credential_kind";
+            tableName: "credential_setup_requirements";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number;
+        }>;
+        required: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: "required";
+            tableName: "credential_setup_requirements";
+            dataType: "boolean";
+            columnType: "SQLiteBoolean";
+            data: boolean;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        completedAt: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: "completed_at";
+            tableName: "credential_setup_requirements";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number;
+        }>;
+        createdAt: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: "created_at";
+            tableName: "credential_setup_requirements";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: true;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number;
+        }>;
+        updatedAt: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: "updated_at";
+            tableName: "credential_setup_requirements";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: true;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number;
+        }>;
+    };
+    dialect: "sqlite";
+}>;
 /**
  * Junction table for many-to-many relationship between roles and permissions
  */
@@ -2018,6 +2161,144 @@ declare const authSchema: {
         };
         dialect: "sqlite";
     }>;
+    readonly credentialSetupRequirements: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
+        name: "credential_setup_requirements";
+        schema: undefined;
+        columns: {
+            userId: drizzle_orm_sqlite_core.SQLiteColumn<{
+                name: "user_id";
+                tableName: "credential_setup_requirements";
+                dataType: "string";
+                columnType: "SQLiteText";
+                data: string;
+                driverParam: string;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {
+                length: number;
+            }>;
+            purpose: drizzle_orm_sqlite_core.SQLiteColumn<{
+                name: "purpose";
+                tableName: "credential_setup_requirements";
+                dataType: "string";
+                columnType: "SQLiteText";
+                data: string;
+                driverParam: string;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {
+                length: number;
+            }>;
+            temporaryCredentialKind: drizzle_orm_sqlite_core.SQLiteColumn<{
+                name: "temporary_credential_kind";
+                tableName: "credential_setup_requirements";
+                dataType: "string";
+                columnType: "SQLiteText";
+                data: string;
+                driverParam: string;
+                notNull: false;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {
+                length: number;
+            }>;
+            required: drizzle_orm_sqlite_core.SQLiteColumn<{
+                name: "required";
+                tableName: "credential_setup_requirements";
+                dataType: "boolean";
+                columnType: "SQLiteBoolean";
+                data: boolean;
+                driverParam: number;
+                notNull: true;
+                hasDefault: true;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: undefined;
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {}>;
+            completedAt: drizzle_orm_sqlite_core.SQLiteColumn<{
+                name: "completed_at";
+                tableName: "credential_setup_requirements";
+                dataType: "string";
+                columnType: "SQLiteText";
+                data: string;
+                driverParam: string;
+                notNull: false;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {
+                length: number;
+            }>;
+            createdAt: drizzle_orm_sqlite_core.SQLiteColumn<{
+                name: "created_at";
+                tableName: "credential_setup_requirements";
+                dataType: "string";
+                columnType: "SQLiteText";
+                data: string;
+                driverParam: string;
+                notNull: false;
+                hasDefault: true;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: true;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {
+                length: number;
+            }>;
+            updatedAt: drizzle_orm_sqlite_core.SQLiteColumn<{
+                name: "updated_at";
+                tableName: "credential_setup_requirements";
+                dataType: "string";
+                columnType: "SQLiteText";
+                data: string;
+                driverParam: string;
+                notNull: false;
+                hasDefault: true;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: true;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {
+                length: number;
+            }>;
+        };
+        dialect: "sqlite";
+    }>;
     readonly roles: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
         name: "roles";
         schema: undefined;
@@ -2375,7 +2656,9 @@ type Token = typeof tokensTable.$inferSelect;
 type NewToken = typeof tokensTable.$inferInsert;
 type CredentialSetupSession = typeof credentialSetupSessionsTable.$inferSelect;
 type NewCredentialSetupSession = typeof credentialSetupSessionsTable.$inferInsert;
+type CredentialSetupRequirement = typeof credentialSetupRequirementsTable.$inferSelect;
+type NewCredentialSetupRequirement = typeof credentialSetupRequirementsTable.$inferInsert;
 type RolePermission = typeof rolePermissionsTable.$inferSelect;
 type NewRolePermission = typeof rolePermissionsTable.$inferInsert;
 
-export { type CredentialSetupSession, type NewCredentialSetupSession, type NewOAuthAccount, type NewPermission, type NewRoleEntity, type NewRolePermission, type NewToken, type NewUser, type OAuthAccount, type Permission, type RoleEntity, type RolePermission, type Token, type User, authSchema, baseFields, credentialSetupSessionsTable, oauthAccountsTable, permissionsTable, rolePermissionsTable, rolesTable, tokensTable, usersTable };
+export { type CredentialSetupRequirement, type CredentialSetupSession, type NewCredentialSetupRequirement, type NewCredentialSetupSession, type NewOAuthAccount, type NewPermission, type NewRoleEntity, type NewRolePermission, type NewToken, type NewUser, type OAuthAccount, type Permission, type RoleEntity, type RolePermission, type Token, type User, authSchema, baseFields, credentialSetupRequirementsTable, credentialSetupSessionsTable, oauthAccountsTable, permissionsTable, rolePermissionsTable, rolesTable, tokensTable, usersTable };

package/dist/schema/sqlite.js

@@ -2,7 +2,7 @@ var __defProp = Object.defineProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 
 // src/schema/sqlite.ts
-import { sqliteTable, text, integer, uniqueIndex, index } from "drizzle-orm/sqlite-core";
+import { sqliteTable, text, integer, primaryKey, uniqueIndex, index } from "drizzle-orm/sqlite-core";
 import { sql } from "drizzle-orm";
 import { nanoid } from "nanoid";
 var baseFields = /* @__PURE__ */ __name((idLength = 5) => ({
@@ -76,6 +76,17 @@ var credentialSetupSessionsTable = sqliteTable("credential_setup_sessions", {
   userPurposeIdx: index("credential_setup_sessions_user_purpose_idx").on(table.userId, table.purpose),
   expiresAtIdx: index("credential_setup_sessions_expires_at_idx").on(table.expiresAt)
 }));
+var credentialSetupRequirementsTable = sqliteTable("credential_setup_requirements", {
+  userId: text("user_id").references(() => usersTable.id, { onDelete: "cascade" }).notNull(),
+  purpose: text("purpose").notNull(),
+  temporaryCredentialKind: text("temporary_credential_kind"),
+  required: integer("required", { mode: "boolean" }).default(true).notNull(),
+  completedAt: text("completed_at"),
+  createdAt: text("created_at").$defaultFn(() => (/* @__PURE__ */ new Date()).toISOString()),
+  updatedAt: text("updated_at").$defaultFn(() => (/* @__PURE__ */ new Date()).toISOString()).$onUpdate(() => sql`(datetime('now'))`)
+}, (table) => ({
+  pk: primaryKey({ columns: [table.userId, table.purpose] })
+}));
 var rolePermissionsTable = sqliteTable("role_permissions", {
   ...baseFields(10),
   roleId: text("role_id").notNull().references(() => rolesTable.id, { onDelete: "cascade" }),
@@ -88,6 +99,7 @@ var authSchema = {
   oauthAccounts: oauthAccountsTable,
   tokens: tokensTable,
   credentialSetupSessions: credentialSetupSessionsTable,
+  credentialSetupRequirements: credentialSetupRequirementsTable,
   roles: rolesTable,
   permissions: permissionsTable,
   rolePermissions: rolePermissionsTable
@@ -95,6 +107,7 @@ var authSchema = {
 export {
   authSchema,
   baseFields,
+  credentialSetupRequirementsTable,
   credentialSetupSessionsTable,
   oauthAccountsTable,
   permissionsTable,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "najm-auth",
-  "version": "2.0.14",
+  "version": "3.0.0",
   "description": "Authentication and authorization library for najm framework",
   "type": "module",
   "files": [
@@ -34,6 +34,11 @@
       "import": "./dist/client/server/index.js",
       "default": "./dist/client/server/index.js"
     },
+    "./identity/ma": {
+      "types": "./dist/identity/ma.d.ts",
+      "import": "./dist/identity/ma.js",
+      "default": "./dist/identity/ma.js"
+    },
     "./pg": {
       "types": "./dist/schema/pg.d.ts",
       "import": "./dist/schema/pg.js",