@authhero/drizzle 1.14.1 → 1.15.0

package/drizzle/meta/_journal.json

@@ -85,6 +85,13 @@
       "when": 1792056769015,
       "tag": "0011_org_connections_log_streams_migration_sources",
       "breakpoints": true
+    },
+    {
+      "idx": 12,
+      "version": "6",
+      "when": 1792582732883,
+      "tag": "0012_config_inheritance",
+      "breakpoints": true
     }
   ]
 }

package/package.json

@@ -11,7 +11,7 @@
     "type": "git",
     "url": "https://github.com/sesamyab/authhero"
   },
-  "version": "1.14.1",
+  "version": "1.15.0",
   "files": [
     "dist",
     "src/schema",
@@ -35,8 +35,8 @@
   "dependencies": {
     "drizzle-orm": "^0.45.2",
     "nanoid": "^5.1.11",
-    "@authhero/adapter-interfaces": "4.21.0",
-    "@authhero/proxy": "0.11.7"
+    "@authhero/adapter-interfaces": "4.22.0",
+    "@authhero/proxy": "0.11.8"
   },
   "devDependencies": {
     "@hono/zod-openapi": "^1.4.0",

package/src/schema/sqlite/actions.ts

@@ -7,6 +7,7 @@ import {
   uniqueIndex,
 } from "drizzle-orm/sqlite-core";
 import { tenants } from "./tenants";
+import { configInheritanceColumns } from "./configInheritance";
 
 // Mirrors the kysely `actions` table. Dates are stored as epoch-millisecond
 // integers (`_ts` suffix) and surfaced as ISO strings by the adapter, matching
@@ -29,6 +30,7 @@ export const actions = sqliteTable(
     deployed_at_ts: integer("deployed_at_ts"),
     is_system: integer("is_system"),
     inherit: integer("inherit"),
+    ...configInheritanceColumns(),
     created_at_ts: integer("created_at_ts").notNull(),
     updated_at_ts: integer("updated_at_ts").notNull(),
   },

package/src/schema/sqlite/branding.ts

@@ -7,11 +7,13 @@ import {
 } from "drizzle-orm/sqlite-core";
 import { tenants } from "./tenants";
 import { connections } from "./connections";
+import { configInheritanceColumns } from "./configInheritance";
 
 export const branding = sqliteTable("branding", {
   tenant_id: text("tenant_id", { length: 191 })
     .primaryKey()
     .references(() => tenants.id, { onDelete: "cascade" }),
+  ...configInheritanceColumns(),
   logo_url: text("logo_url", { length: 512 }),
   favicon_url: text("favicon_url", { length: 512 }),
   font_url: text("font_url", { length: 512 }),
@@ -211,6 +213,7 @@ export const flows = sqliteTable(
 
 export const promptSettings = sqliteTable("prompt_settings", {
   tenant_id: text("tenant_id", { length: 191 }).primaryKey(),
+  ...configInheritanceColumns(),
   universal_login_experience: text("universal_login_experience", { length: 16 })
     .notNull()
     .default("new"),
@@ -234,6 +237,7 @@ export const promptSettings = sqliteTable("prompt_settings", {
 
 export const emailProviders = sqliteTable("email_providers", {
   tenant_id: text("tenant_id", { length: 191 }).primaryKey(),
+  ...configInheritanceColumns(),
   name: text("name", { length: 255 }).notNull(),
   enabled: integer("enabled", { mode: "boolean" }).notNull(),
   default_from_address: text("default_from_address", { length: 255 }),
@@ -290,6 +294,7 @@ export const hooks = sqliteTable(
     page_id: text("page_id", { length: 64 }), // only required for page type hooks
     permission_required: text("permission_required", { length: 255 }), // optional gate for page type hooks
     metadata: text("metadata"), // JSON property bag (inheritable flag, template options)
+    ...configInheritanceColumns(),
   },
   (table) => [index("hooks_tenant_id_idx").on(table.tenant_id)],
 );

package/src/schema/sqlite/configInheritance.ts

@@ -0,0 +1,18 @@
+import { integer, text } from "drizzle-orm/sqlite-core";
+
+/**
+ * Publishing properties for tenant config inheritance
+ * (docs/design/tenant-config-inheritance.md, section 3.2). All nullable: unset
+ * reads as scope `local`, override `none`, enforce false.
+ *
+ * A function, not a constant, because column builders are stateful and must
+ * not be shared between tables.
+ */
+export const configInheritanceColumns = () => ({
+  scope: text("scope", { length: 16, enum: ["local", "shared", "platform"] }),
+  override: text("override", {
+    length: 16,
+    enum: ["none", "secrets", "fields"],
+  }),
+  enforce: integer("enforce", { mode: "boolean" }),
+});

package/src/schema/sqlite/connections.ts

@@ -7,6 +7,7 @@ import {
   uniqueIndex,
 } from "drizzle-orm/sqlite-core";
 import { tenants } from "./tenants";
+import { configInheritanceColumns } from "./configInheritance";
 
 export const connections = sqliteTable(
   "connections",
@@ -26,6 +27,7 @@ export const connections = sqliteTable(
     is_domain_connection: integer("is_domain_connection"),
     show_as_button: integer("show_as_button"),
     is_system: integer("is_system").notNull().default(0),
+    ...configInheritanceColumns(),
     metadata: text("metadata", { length: 4096 }),
   },
   (table) => [

package/src/schema/sqlite/roles.ts

@@ -5,6 +5,7 @@ import {
   primaryKey,
   index,
 } from "drizzle-orm/sqlite-core";
+import { configInheritanceColumns } from "./configInheritance";
 
 export const roles = sqliteTable(
   "roles",
@@ -134,6 +135,7 @@ export const resourceServers = sqliteTable(
     verification_key: text("verification_key", { length: 4096 }),
     options: text("options", { length: 4096 }),
     is_system: integer("is_system").notNull().default(0),
+    ...configInheritanceColumns(),
     metadata: text("metadata", { length: 4096 }),
     created_at: text("created_at", { length: 35 }).notNull(),
     updated_at: text("updated_at", { length: 35 }).notNull(),

package/src/schema/sqlite/tenants.ts

@@ -2,6 +2,7 @@ import { sqliteTable, text, integer } from "drizzle-orm/sqlite-core";
 
 export const tenants = sqliteTable("tenants", {
   id: text("id", { length: 191 }).primaryKey(),
+  parent_tenant_id: text("parent_tenant_id", { length: 191 }),
   name: text("name", { length: 255 }),
   audience: text("audience", { length: 255 }),
   sender_email: text("sender_email", { length: 255 }),