@authhero/drizzle 0.52.5 → 0.53.0

package/dist/drizzle-adapter.mjs

@@ -1048,7 +1048,16 @@ var Lt = class {
 	acr_values_supported: _("acr_values_supported"),
 	mtls: _("mtls"),
 	pushed_authorization_requests_supported: g("pushed_authorization_requests_supported"),
-	authorization_response_iss_parameter_supported: g("authorization_response_iss_parameter_supported")
+	authorization_response_iss_parameter_supported: g("authorization_response_iss_parameter_supported"),
+	deployment_type: _("deployment_type", { length: 16 }).notNull().default("shared"),
+	provisioning_state: _("provisioning_state", { length: 16 }).notNull().default("ready"),
+	provisioning_error: _("provisioning_error"),
+	provisioning_state_changed_at: _("provisioning_state_changed_at", { length: 35 }),
+	bundle_configuration: _("bundle_configuration", { length: 64 }),
+	worker_version: _("worker_version", { length: 64 }),
+	worker_script_name: _("worker_script_name", { length: 255 }),
+	storage_kind: _("storage_kind", { length: 32 }),
+	d1_database_id: _("d1_database_id", { length: 64 })
 }), x = v("users", {
 	user_id: _("user_id", { length: 255 }).notNull(),
 	tenant_id: _("tenant_id", { length: 191 }).notNull().references(() => b.id, { onDelete: "cascade" }),
@@ -14949,7 +14958,7 @@ J({
 		"HS384",
 		"HS512"
 	]),
-	kid: H(),
+	kid: H().optional(),
 	kty: X([
 		"RSA",
 		"EC",
@@ -15073,6 +15082,7 @@ var $ = {
 	FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN: "fercft",
 	FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN: "ferrt",
 	FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN: "fertft",
+	FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN: "festft",
 	FAILED_HOOK: "fh",
 	FAILED_IMPERSONATION: "fimp",
 	FAILED_INVITE_ACCEPT: "fi",
@@ -15166,6 +15176,7 @@ var $ = {
 	SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN: "sepkrcft",
 	SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN: "sercft",
 	SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN: "sertft",
+	SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN: "sestft",
 	SUCCESS_IMPERSONATION: "simp",
 	SUCCESSFULLY_ACCEPTED_USER_INVITE: "si",
 	BREACHED_PASSWORD_ON_SIGNUP: "signup_pwd_leak",
@@ -15190,7 +15201,7 @@ var $ = {
 	WARNING_SENDING_NOTIFICATION: "wn",
 	WARNING_USER_MANAGEMENT: "wum"
 }, dy = H().refine((e) => Object.values($).includes(e), { message: "Invalid log type" });
-$.ACLS_SUMMARY, $.ACTIONS_EXECUTION_FAILED, $.API_LIMIT, $.API_LIMIT_WARNING, $.APPI, $.CIBA_EXCHANGE_FAILED, $.CIBA_EXCHANGE_SUCCEEDED, $.CIBA_START_FAILED, $.CIBA_START_SUCCEEDED, $.CODE_LINK_SENT, $.CODE_SENT, $.DEPRECATION_NOTICE, $.FAILED_LOGIN, $.FAILED_BY_CONNECTOR, $.FAILED_CHANGE_EMAIL, $.FAILED_BY_CORS, $.FAILED_CROSS_ORIGIN_AUTHENTICATION, $.FAILED_CHANGE_PASSWORD, $.FAILED_POST_CHANGE_PASSWORD_HOOK, $.FAILED_CHANGE_PHONE_NUMBER, $.FAILED_CHANGE_PASSWORD_REQUEST, $.FAILED_CONNECTOR_PROVISIONING, $.FAILED_CHANGE_USERNAME, $.FAILED_DELEGATION, $.FAILED_DEVICE_ACTIVATION, $.FAILED_DEVICE_AUTHORIZATION_REQUEST, $.USER_CANCELED_DEVICE_CONFIRMATION, $.FAILED_USER_DELETION, $.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, $.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, $.FAILED_EXCHANGE_CUSTOM_TOKEN, $.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, $.FAILED_FEDERATED_LOGOUT, $.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN, $.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, $.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, $.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, $.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, $.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, $.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN, $.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, $.FAILED_HOOK, $.FAILED_IMPERSONATION, $.FAILED_INVITE_ACCEPT, $.FAILED_LOGOUT, $.FLOWS_EXECUTION_COMPLETED, $.FLOWS_EXECUTION_FAILED, $.FAILED_SENDING_NOTIFICATION, $.FORMS_SUBMISSION_FAILED, $.FORMS_SUBMISSION_SUCCEEDED, $.FAILED_LOGIN_INCORRECT_PASSWORD, $.FAILED_PUSHED_AUTHORIZATION_REQUEST, $.FAILED_POST_USER_REGISTRATION_HOOK, $.FAILED_SIGNUP, $.FAILED_SILENT_AUTH, $.FAILED_LOGIN_INVALID_EMAIL_USERNAME, $.FAILED_USERS_IMPORT, $.FAILED_VERIFICATION_EMAIL, $.FAILED_VERIFICATION_EMAIL_REQUEST, $.EMAIL_VERIFICATION_CONFIRMED, $.EMAIL_VERIFICATION_FAILED, $.MFA_AUTH_FAILED, $.MFA_AUTH_REJECTED, $.MFA_AUTH_SUCCESS, $.MFA_ENROLLMENT_COMPLETE, $.TOO_MANY_MFA_FAILURES, $.MFA_RECOVERY_FAILED, $.MFA_RECOVERY_RATE_LIMIT_EXCEED, $.MFA_RECOVERY_SUCCESS, $.MFA_EMAIL_SENT, $.EMAIL_VERIFICATION_SENT, $.EMAIL_VERIFICATION_SEND_FAILURE, $.PUSH_NOTIFICATION_SENT, $.ERROR_SENDING_MFA_PUSH_NOTIFICATION, $.MFA_SMS_SENT, $.ERROR_SENDING_MFA_SMS, $.MFA_VOICE_CALL_SUCCESS, $.MFA_VOICE_CALL_FAILED, $.SECOND_FACTOR_STARTED, $.MFA_ENROLL_STARTED, $.MFA_ENROLLMENT_FAILED, $.GUARDIAN_TENANT_UPDATE, $.UNENROLL_DEVICE_ACCOUNT, $.UPDATE_DEVICE_ACCOUNT, $.WEBAUTHN_CHALLENGE_FAILED, $.WEBAUTHN_ENROLLMENT_FAILED, $.FAILED_KMS_API_OPERATION, $.SUCCESS_KMS_API_OPERATION, $.KMS_KEY_STATE_CHANGED, $.TOO_MANY_CALLS_TO_DELEGATION, $.BLOCKED_IP_ADDRESS, $.BLOCKED_ACCOUNT_IP, $.BLOCKED_ACCOUNT_EMAIL, $.INFORMATION, $.MFA_REQUIRED, $.MANAGEMENT_API_READ_OPERATION, $.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, $.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, $.FAILED_OIDC_BACKCHANNEL_LOGOUT, $.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT, $.ORGANIZATION_MEMBER_ADDED, $.PASSKEY_CHALLENGE_FAILED, $.PASSKEY_CHALLENGE_STARTED, $.PRE_LOGIN_ASSESSMENT, $.BREACHED_PASSWORD, $.BREACHED_PASSWORD_ON_RESET, $.SUCCESS_RESOURCE_CLEANUP, $.RICH_CONSENTS_ACCESS_ERROR, $.SUCCESS_LOGIN, $.SUCCESS_API_OPERATION, $.FAILED_API_OPERATION, $.SUCCESS_CHANGE_EMAIL, $.SUCCESS_CROSS_ORIGIN_AUTHENTICATION, $.SUCCESS_CHANGE_PASSWORD, $.SUCCESS_CHANGE_PHONE_NUMBER, $.SUCCESS_CHANGE_PASSWORD_REQUEST, $.SUCCESS_CHANGE_USERNAME, $.SUCCESS_CREDENTIAL_VALIDATION, $.SUCCESS_DELEGATION, $.SUCCESS_USER_DELETION, $.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, $.SUCCESS_EXCHANGE_CUSTOM_TOKEN, $.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN, $.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, $.SUCCESS_IMPERSONATION, $.SUCCESSFULLY_ACCEPTED_USER_INVITE, $.BREACHED_PASSWORD_ON_SIGNUP, $.SUCCESS_LOGOUT, $.SUCCESS_HOOK, $.SUCCESS_PASSWORD_MIGRATION, $.SUCCESS_REVOCATION, $.SUCCESS_SIGNUP, $.FAILED_SS_SSO_OPERATION, $.INFORMATION_FROM_SS_SSO_OPERATION, $.SUCCESS_SS_SSO_OPERATION, $.SUCCESS_SILENT_AUTH, $.SUCCESSFUL_SCIM_OPERATION, $.SUCCESSFULLY_IMPORTED_USERS, $.SUCCESS_VERIFICATION_EMAIL, $.SUCCESS_VERIFICATION_EMAIL_REQUEST, $.MAX_AMOUNT_OF_AUTHENTICATORS, $.USER_LOGIN_BLOCK_RELEASED, $.FAILED_UNIVERSAL_LOGOUT, $.SUCCESSFUL_UNIVERSAL_LOGOUT, $.WARNING_DURING_LOGIN, $.WARNING_SENDING_NOTIFICATION, $.WARNING_USER_MANAGEMENT, (() => {
+$.ACLS_SUMMARY, $.ACTIONS_EXECUTION_FAILED, $.API_LIMIT, $.API_LIMIT_WARNING, $.APPI, $.CIBA_EXCHANGE_FAILED, $.CIBA_EXCHANGE_SUCCEEDED, $.CIBA_START_FAILED, $.CIBA_START_SUCCEEDED, $.CODE_LINK_SENT, $.CODE_SENT, $.DEPRECATION_NOTICE, $.FAILED_LOGIN, $.FAILED_BY_CONNECTOR, $.FAILED_CHANGE_EMAIL, $.FAILED_BY_CORS, $.FAILED_CROSS_ORIGIN_AUTHENTICATION, $.FAILED_CHANGE_PASSWORD, $.FAILED_POST_CHANGE_PASSWORD_HOOK, $.FAILED_CHANGE_PHONE_NUMBER, $.FAILED_CHANGE_PASSWORD_REQUEST, $.FAILED_CONNECTOR_PROVISIONING, $.FAILED_CHANGE_USERNAME, $.FAILED_DELEGATION, $.FAILED_DEVICE_ACTIVATION, $.FAILED_DEVICE_AUTHORIZATION_REQUEST, $.USER_CANCELED_DEVICE_CONFIRMATION, $.FAILED_USER_DELETION, $.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, $.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, $.FAILED_EXCHANGE_CUSTOM_TOKEN, $.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, $.FAILED_FEDERATED_LOGOUT, $.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN, $.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, $.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, $.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, $.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, $.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, $.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN, $.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, $.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, $.FAILED_HOOK, $.FAILED_IMPERSONATION, $.FAILED_INVITE_ACCEPT, $.FAILED_LOGOUT, $.FLOWS_EXECUTION_COMPLETED, $.FLOWS_EXECUTION_FAILED, $.FAILED_SENDING_NOTIFICATION, $.FORMS_SUBMISSION_FAILED, $.FORMS_SUBMISSION_SUCCEEDED, $.FAILED_LOGIN_INCORRECT_PASSWORD, $.FAILED_PUSHED_AUTHORIZATION_REQUEST, $.FAILED_POST_USER_REGISTRATION_HOOK, $.FAILED_SIGNUP, $.FAILED_SILENT_AUTH, $.FAILED_LOGIN_INVALID_EMAIL_USERNAME, $.FAILED_USERS_IMPORT, $.FAILED_VERIFICATION_EMAIL, $.FAILED_VERIFICATION_EMAIL_REQUEST, $.EMAIL_VERIFICATION_CONFIRMED, $.EMAIL_VERIFICATION_FAILED, $.MFA_AUTH_FAILED, $.MFA_AUTH_REJECTED, $.MFA_AUTH_SUCCESS, $.MFA_ENROLLMENT_COMPLETE, $.TOO_MANY_MFA_FAILURES, $.MFA_RECOVERY_FAILED, $.MFA_RECOVERY_RATE_LIMIT_EXCEED, $.MFA_RECOVERY_SUCCESS, $.MFA_EMAIL_SENT, $.EMAIL_VERIFICATION_SENT, $.EMAIL_VERIFICATION_SEND_FAILURE, $.PUSH_NOTIFICATION_SENT, $.ERROR_SENDING_MFA_PUSH_NOTIFICATION, $.MFA_SMS_SENT, $.ERROR_SENDING_MFA_SMS, $.MFA_VOICE_CALL_SUCCESS, $.MFA_VOICE_CALL_FAILED, $.SECOND_FACTOR_STARTED, $.MFA_ENROLL_STARTED, $.MFA_ENROLLMENT_FAILED, $.GUARDIAN_TENANT_UPDATE, $.UNENROLL_DEVICE_ACCOUNT, $.UPDATE_DEVICE_ACCOUNT, $.WEBAUTHN_CHALLENGE_FAILED, $.WEBAUTHN_ENROLLMENT_FAILED, $.FAILED_KMS_API_OPERATION, $.SUCCESS_KMS_API_OPERATION, $.KMS_KEY_STATE_CHANGED, $.TOO_MANY_CALLS_TO_DELEGATION, $.BLOCKED_IP_ADDRESS, $.BLOCKED_ACCOUNT_IP, $.BLOCKED_ACCOUNT_EMAIL, $.INFORMATION, $.MFA_REQUIRED, $.MANAGEMENT_API_READ_OPERATION, $.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, $.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, $.FAILED_OIDC_BACKCHANNEL_LOGOUT, $.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT, $.ORGANIZATION_MEMBER_ADDED, $.PASSKEY_CHALLENGE_FAILED, $.PASSKEY_CHALLENGE_STARTED, $.PRE_LOGIN_ASSESSMENT, $.BREACHED_PASSWORD, $.BREACHED_PASSWORD_ON_RESET, $.SUCCESS_RESOURCE_CLEANUP, $.RICH_CONSENTS_ACCESS_ERROR, $.SUCCESS_LOGIN, $.SUCCESS_API_OPERATION, $.FAILED_API_OPERATION, $.SUCCESS_CHANGE_EMAIL, $.SUCCESS_CROSS_ORIGIN_AUTHENTICATION, $.SUCCESS_CHANGE_PASSWORD, $.SUCCESS_CHANGE_PHONE_NUMBER, $.SUCCESS_CHANGE_PASSWORD_REQUEST, $.SUCCESS_CHANGE_USERNAME, $.SUCCESS_CREDENTIAL_VALIDATION, $.SUCCESS_DELEGATION, $.SUCCESS_USER_DELETION, $.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, $.SUCCESS_EXCHANGE_CUSTOM_TOKEN, $.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN, $.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, $.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, $.SUCCESS_IMPERSONATION, $.SUCCESSFULLY_ACCEPTED_USER_INVITE, $.BREACHED_PASSWORD_ON_SIGNUP, $.SUCCESS_LOGOUT, $.SUCCESS_HOOK, $.SUCCESS_PASSWORD_MIGRATION, $.SUCCESS_REVOCATION, $.SUCCESS_SIGNUP, $.FAILED_SS_SSO_OPERATION, $.INFORMATION_FROM_SS_SSO_OPERATION, $.SUCCESS_SS_SSO_OPERATION, $.SUCCESS_SILENT_AUTH, $.SUCCESSFUL_SCIM_OPERATION, $.SUCCESSFULLY_IMPORTED_USERS, $.SUCCESS_VERIFICATION_EMAIL, $.SUCCESS_VERIFICATION_EMAIL_REQUEST, $.MAX_AMOUNT_OF_AUTHENTICATORS, $.USER_LOGIN_BLOCK_RELEASED, $.FAILED_UNIVERSAL_LOGOUT, $.SUCCESSFUL_UNIVERSAL_LOGOUT, $.WARNING_DURING_LOGIN, $.WARNING_SENDING_NOTIFICATION, $.WARNING_USER_MANAGEMENT, (() => {
 	let e = {};
 	for (let [t, n] of Object.entries($)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
 	return e;
@@ -15467,6 +15478,23 @@ var Ey = J({
 	mtls: J({ enable_endpoint_aliases: G().optional() }).nullish(),
 	pushed_authorization_requests_supported: G().optional(),
 	authorization_response_iss_parameter_supported: G().optional(),
+	deployment_type: X(["shared", "wfp"]).default("shared").optional(),
+	provisioning_state: X([
+		"pending",
+		"ready",
+		"failed"
+	]).default("ready").optional(),
+	provisioning_error: H().max(2048).optional(),
+	provisioning_state_changed_at: H().optional(),
+	bundle_configuration: H().max(64).optional(),
+	worker_version: H().max(64).optional(),
+	worker_script_name: H().max(255).optional(),
+	storage_kind: X([
+		"own_d1",
+		"existing_d1",
+		"shared_planetscale"
+	]).optional(),
+	d1_database_id: H().max(64).optional(),
 	attack_protection: Cy.optional(),
 	mfa: J({
 		policy: X(["never", "always"]).default("never").optional(),

package/drizzle/0006_tenant_deployment_fields.sql

@@ -0,0 +1,9 @@
+ALTER TABLE `tenants` ADD `deployment_type` text(16) DEFAULT 'shared' NOT NULL;--> statement-breakpoint
+ALTER TABLE `tenants` ADD `provisioning_state` text(16) DEFAULT 'ready' NOT NULL;--> statement-breakpoint
+ALTER TABLE `tenants` ADD `provisioning_error` text;--> statement-breakpoint
+ALTER TABLE `tenants` ADD `provisioning_state_changed_at` text(35);--> statement-breakpoint
+ALTER TABLE `tenants` ADD `bundle_configuration` text(64);--> statement-breakpoint
+ALTER TABLE `tenants` ADD `worker_version` text(64);--> statement-breakpoint
+ALTER TABLE `tenants` ADD `worker_script_name` text(255);--> statement-breakpoint
+ALTER TABLE `tenants` ADD `storage_kind` text(32);--> statement-breakpoint
+ALTER TABLE `tenants` ADD `d1_database_id` text(64);

package/drizzle/meta/_journal.json

@@ -43,6 +43,13 @@
       "when": 1779200000000,
       "tag": "0005_proxy_routes_v2",
       "breakpoints": true
+    },
+    {
+      "idx": 6,
+      "version": "6",
+      "when": 1780000000000,
+      "tag": "0006_tenant_deployment_fields",
+      "breakpoints": true
     }
   ]
 }

package/package.json

@@ -11,7 +11,7 @@
     "type": "git",
     "url": "https://github.com/markusahlstrand/authhero"
   },
-  "version": "0.52.5",
+  "version": "0.53.0",
   "files": [
     "dist",
     "src/schema",
@@ -34,8 +34,8 @@
   "dependencies": {
     "drizzle-orm": "^0.44.2",
     "nanoid": "^5.1.11",
-    "@authhero/adapter-interfaces": "2.11.0",
-    "@authhero/proxy": "0.4.1"
+    "@authhero/adapter-interfaces": "2.13.0",
+    "@authhero/proxy": "0.4.3"
   },
   "devDependencies": {
     "@hono/zod-openapi": "^1.4.0",

package/src/schema/sqlite/tenants.ts

@@ -53,4 +53,19 @@ export const tenants = sqliteTable("tenants", {
   authorization_response_iss_parameter_supported: integer(
     "authorization_response_iss_parameter_supported",
   ),
+  deployment_type: text("deployment_type", { length: 16 })
+    .notNull()
+    .default("shared"),
+  provisioning_state: text("provisioning_state", { length: 16 })
+    .notNull()
+    .default("ready"),
+  provisioning_error: text("provisioning_error"),
+  provisioning_state_changed_at: text("provisioning_state_changed_at", {
+    length: 35,
+  }),
+  bundle_configuration: text("bundle_configuration", { length: 64 }),
+  worker_version: text("worker_version", { length: 64 }),
+  worker_script_name: text("worker_script_name", { length: 255 }),
+  storage_kind: text("storage_kind", { length: 32 }),
+  d1_database_id: text("d1_database_id", { length: 64 }),
 });