@adaptware/eagles-db 0.6.10 → 0.6.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adaptware/eagles-db",
-  "version": "0.6.10",
+  "version": "0.6.12",
   "description": "A Prisma client package for Treadspace database operations",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/prisma/schema/mcpOAuth.prisma

@@ -0,0 +1,69 @@
+/// MCP OAuth clients, authorize requests, auth codes, and refresh tokens.
+/// user_id is a plain string. These models do not add a relation on User.
+
+model McpOAuthClient {
+  id              String   @id @default(uuid())
+  client_id       String   @unique
+  name            String?
+  redirect_uris   String
+  organisation_id String
+  is_active       Boolean  @default(true)
+  created_at      DateTime @default(now())
+
+  @@index([organisation_id])
+  @@schema("public")
+}
+
+model McpOAuthRequest {
+  id              String    @id @default(uuid())
+  organisation_id String
+  client_id       String
+  redirect_uri    String
+  code_challenge  String
+  state           String?
+  resource        String
+  csrf_hash       String?
+  session_hash    String?
+  ticket_hash     String?
+  user_id         String?
+  expires_at      DateTime
+  used_at         DateTime?
+  created_at      DateTime  @default(now())
+
+  @@index([organisation_id, expires_at])
+  @@schema("public")
+}
+
+model McpOAuthCode {
+  id              String    @id @default(uuid())
+  code_hash       String    @unique
+  organisation_id String
+  client_id       String
+  user_id         String
+  redirect_uri    String
+  code_challenge  String
+  resource        String
+  expires_at      DateTime
+  used_at         DateTime?
+  created_at      DateTime  @default(now())
+
+  @@index([organisation_id, expires_at])
+  @@schema("public")
+}
+
+model McpOAuthRefreshToken {
+  id              String    @id @default(uuid())
+  token_hash      String    @unique
+  family_id       String
+  organisation_id String
+  client_id       String
+  user_id         String
+  resource        String
+  expires_at      DateTime
+  revoked_at      DateTime?
+  created_at      DateTime  @default(now())
+
+  @@index([family_id])
+  @@index([expires_at])
+  @@schema("public")
+}

package/prisma/schema/migrations/20261015120000_mcp_oauth/migration.sql

@@ -0,0 +1,84 @@
+-- Additive MCP OAuth tables. No foreign key to "User"; user_id is a plain string.
+-- Existing tables are not altered.
+
+CREATE TABLE IF NOT EXISTS "public"."McpOAuthClient" (
+  "id" TEXT NOT NULL,
+  "client_id" TEXT NOT NULL,
+  "name" TEXT,
+  "redirect_uris" TEXT NOT NULL,
+  "organisation_id" TEXT NOT NULL,
+  "is_active" BOOLEAN NOT NULL DEFAULT true,
+  "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "McpOAuthClient_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "McpOAuthClient_client_id_key"
+  ON "public"."McpOAuthClient"("client_id");
+
+CREATE INDEX IF NOT EXISTS "McpOAuthClient_organisation_id_idx"
+  ON "public"."McpOAuthClient"("organisation_id");
+
+CREATE TABLE IF NOT EXISTS "public"."McpOAuthRequest" (
+  "id" TEXT NOT NULL,
+  "organisation_id" TEXT NOT NULL,
+  "client_id" TEXT NOT NULL,
+  "redirect_uri" TEXT NOT NULL,
+  "code_challenge" TEXT NOT NULL,
+  "state" TEXT,
+  "resource" TEXT NOT NULL,
+  "csrf_hash" TEXT,
+  "session_hash" TEXT,
+  "ticket_hash" TEXT,
+  "user_id" TEXT,
+  "expires_at" TIMESTAMP(3) NOT NULL,
+  "used_at" TIMESTAMP(3),
+  "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "McpOAuthRequest_pkey" PRIMARY KEY ("id")
+);
+
+CREATE INDEX IF NOT EXISTS "McpOAuthRequest_organisation_id_expires_at_idx"
+  ON "public"."McpOAuthRequest"("organisation_id", "expires_at");
+
+CREATE TABLE IF NOT EXISTS "public"."McpOAuthCode" (
+  "id" TEXT NOT NULL,
+  "code_hash" TEXT NOT NULL,
+  "organisation_id" TEXT NOT NULL,
+  "client_id" TEXT NOT NULL,
+  "user_id" TEXT NOT NULL,
+  "redirect_uri" TEXT NOT NULL,
+  "code_challenge" TEXT NOT NULL,
+  "resource" TEXT NOT NULL,
+  "expires_at" TIMESTAMP(3) NOT NULL,
+  "used_at" TIMESTAMP(3),
+  "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "McpOAuthCode_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "McpOAuthCode_code_hash_key"
+  ON "public"."McpOAuthCode"("code_hash");
+
+CREATE INDEX IF NOT EXISTS "McpOAuthCode_organisation_id_expires_at_idx"
+  ON "public"."McpOAuthCode"("organisation_id", "expires_at");
+
+CREATE TABLE IF NOT EXISTS "public"."McpOAuthRefreshToken" (
+  "id" TEXT NOT NULL,
+  "token_hash" TEXT NOT NULL,
+  "family_id" TEXT NOT NULL,
+  "organisation_id" TEXT NOT NULL,
+  "client_id" TEXT NOT NULL,
+  "user_id" TEXT NOT NULL,
+  "resource" TEXT NOT NULL,
+  "expires_at" TIMESTAMP(3) NOT NULL,
+  "revoked_at" TIMESTAMP(3),
+  "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "McpOAuthRefreshToken_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "McpOAuthRefreshToken_token_hash_key"
+  ON "public"."McpOAuthRefreshToken"("token_hash");
+
+CREATE INDEX IF NOT EXISTS "McpOAuthRefreshToken_family_id_idx"
+  ON "public"."McpOAuthRefreshToken"("family_id");
+
+CREATE INDEX IF NOT EXISTS "McpOAuthRefreshToken_expires_at_idx"
+  ON "public"."McpOAuthRefreshToken"("expires_at");