@authhero/kysely-adapter 10.33.0 → 10.35.0

package/dist/kysely-adapter.d.ts

@@ -5540,62 +5540,41 @@ declare const resourceServerInsertSchema: z.ZodObject<{
 		}, {
 			bound_access_tokens?: boolean | undefined;
 		}>>;
-	}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-		token_dialect: z.ZodOptional<z.ZodEnum<[
-			"access_token",
-			"access_token_authz"
-		]>>;
-		enforce_policies: z.ZodOptional<z.ZodBoolean>;
-		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
-		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
-		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
-		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
-		mtls: z.ZodOptional<z.ZodObject<{
-			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
-		}, "strip", z.ZodTypeAny, {
-			bound_access_tokens?: boolean | undefined;
-		}, {
-			bound_access_tokens?: boolean | undefined;
-		}>>;
-	}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-		token_dialect: z.ZodOptional<z.ZodEnum<[
-			"access_token",
-			"access_token_authz"
-		]>>;
-		enforce_policies: z.ZodOptional<z.ZodBoolean>;
-		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
-		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
-		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
-		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
-		mtls: z.ZodOptional<z.ZodObject<{
-			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
-		}, "strip", z.ZodTypeAny, {
+	}, "strip", z.ZodTypeAny, {
+		token_dialect?: "access_token" | "access_token_authz" | undefined;
+		enforce_policies?: boolean | undefined;
+		allow_skipping_userinfo?: boolean | undefined;
+		skip_userinfo?: boolean | undefined;
+		persist_client_authorization?: boolean | undefined;
+		enable_introspection_endpoint?: boolean | undefined;
+		mtls?: {
 			bound_access_tokens?: boolean | undefined;
-		}, {
+		} | undefined;
+	}, {
+		token_dialect?: "access_token" | "access_token_authz" | undefined;
+		enforce_policies?: boolean | undefined;
+		allow_skipping_userinfo?: boolean | undefined;
+		skip_userinfo?: boolean | undefined;
+		persist_client_authorization?: boolean | undefined;
+		enable_introspection_endpoint?: boolean | undefined;
+		mtls?: {
 			bound_access_tokens?: boolean | undefined;
-		}>>;
-	}, z.ZodTypeAny, "passthrough">>>;
+		} | undefined;
+	}>>;
 }, "strip", z.ZodTypeAny, {
 	name: string;
 	identifier: string;
-	options?: z.objectOutputType<{
-		token_dialect: z.ZodOptional<z.ZodEnum<[
-			"access_token",
-			"access_token_authz"
-		]>>;
-		enforce_policies: z.ZodOptional<z.ZodBoolean>;
-		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
-		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
-		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
-		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
-		mtls: z.ZodOptional<z.ZodObject<{
-			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
-		}, "strip", z.ZodTypeAny, {
-			bound_access_tokens?: boolean | undefined;
-		}, {
+	options?: {
+		token_dialect?: "access_token" | "access_token_authz" | undefined;
+		enforce_policies?: boolean | undefined;
+		allow_skipping_userinfo?: boolean | undefined;
+		skip_userinfo?: boolean | undefined;
+		persist_client_authorization?: boolean | undefined;
+		enable_introspection_endpoint?: boolean | undefined;
+		mtls?: {
 			bound_access_tokens?: boolean | undefined;
-		}>>;
-	}, z.ZodTypeAny, "passthrough"> | undefined;
+		} | undefined;
+	} | undefined;
 	scopes?: {
 		value: string;
 		description?: string | undefined;
@@ -5610,24 +5589,17 @@ declare const resourceServerInsertSchema: z.ZodObject<{
 }, {
 	name: string;
 	identifier: string;
-	options?: z.objectInputType<{
-		token_dialect: z.ZodOptional<z.ZodEnum<[
-			"access_token",
-			"access_token_authz"
-		]>>;
-		enforce_policies: z.ZodOptional<z.ZodBoolean>;
-		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
-		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
-		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
-		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
-		mtls: z.ZodOptional<z.ZodObject<{
-			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
-		}, "strip", z.ZodTypeAny, {
-			bound_access_tokens?: boolean | undefined;
-		}, {
+	options?: {
+		token_dialect?: "access_token" | "access_token_authz" | undefined;
+		enforce_policies?: boolean | undefined;
+		allow_skipping_userinfo?: boolean | undefined;
+		skip_userinfo?: boolean | undefined;
+		persist_client_authorization?: boolean | undefined;
+		enable_introspection_endpoint?: boolean | undefined;
+		mtls?: {
 			bound_access_tokens?: boolean | undefined;
-		}>>;
-	}, z.ZodTypeAny, "passthrough"> | undefined;
+		} | undefined;
+	} | undefined;
 	scopes?: {
 		value: string;
 		description?: string | undefined;
@@ -5680,63 +5652,42 @@ declare const resourceServerSchema: z.ZodObject<{
 		}, {
 			bound_access_tokens?: boolean | undefined;
 		}>>;
-	}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-		token_dialect: z.ZodOptional<z.ZodEnum<[
-			"access_token",
-			"access_token_authz"
-		]>>;
-		enforce_policies: z.ZodOptional<z.ZodBoolean>;
-		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
-		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
-		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
-		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
-		mtls: z.ZodOptional<z.ZodObject<{
-			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
-		}, "strip", z.ZodTypeAny, {
-			bound_access_tokens?: boolean | undefined;
-		}, {
-			bound_access_tokens?: boolean | undefined;
-		}>>;
-	}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-		token_dialect: z.ZodOptional<z.ZodEnum<[
-			"access_token",
-			"access_token_authz"
-		]>>;
-		enforce_policies: z.ZodOptional<z.ZodBoolean>;
-		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
-		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
-		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
-		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
-		mtls: z.ZodOptional<z.ZodObject<{
-			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
-		}, "strip", z.ZodTypeAny, {
+	}, "strip", z.ZodTypeAny, {
+		token_dialect?: "access_token" | "access_token_authz" | undefined;
+		enforce_policies?: boolean | undefined;
+		allow_skipping_userinfo?: boolean | undefined;
+		skip_userinfo?: boolean | undefined;
+		persist_client_authorization?: boolean | undefined;
+		enable_introspection_endpoint?: boolean | undefined;
+		mtls?: {
 			bound_access_tokens?: boolean | undefined;
-		}, {
+		} | undefined;
+	}, {
+		token_dialect?: "access_token" | "access_token_authz" | undefined;
+		enforce_policies?: boolean | undefined;
+		allow_skipping_userinfo?: boolean | undefined;
+		skip_userinfo?: boolean | undefined;
+		persist_client_authorization?: boolean | undefined;
+		enable_introspection_endpoint?: boolean | undefined;
+		mtls?: {
 			bound_access_tokens?: boolean | undefined;
-		}>>;
-	}, z.ZodTypeAny, "passthrough">>>;
+		} | undefined;
+	}>>;
 	id: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
 	name: string;
 	identifier: string;
-	options?: z.objectOutputType<{
-		token_dialect: z.ZodOptional<z.ZodEnum<[
-			"access_token",
-			"access_token_authz"
-		]>>;
-		enforce_policies: z.ZodOptional<z.ZodBoolean>;
-		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
-		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
-		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
-		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
-		mtls: z.ZodOptional<z.ZodObject<{
-			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
-		}, "strip", z.ZodTypeAny, {
-			bound_access_tokens?: boolean | undefined;
-		}, {
+	options?: {
+		token_dialect?: "access_token" | "access_token_authz" | undefined;
+		enforce_policies?: boolean | undefined;
+		allow_skipping_userinfo?: boolean | undefined;
+		skip_userinfo?: boolean | undefined;
+		persist_client_authorization?: boolean | undefined;
+		enable_introspection_endpoint?: boolean | undefined;
+		mtls?: {
 			bound_access_tokens?: boolean | undefined;
-		}>>;
-	}, z.ZodTypeAny, "passthrough"> | undefined;
+		} | undefined;
+	} | undefined;
 	created_at?: string | undefined;
 	updated_at?: string | undefined;
 	id?: string | undefined;
@@ -5754,24 +5705,17 @@ declare const resourceServerSchema: z.ZodObject<{
 }, {
 	name: string;
 	identifier: string;
-	options?: z.objectInputType<{
-		token_dialect: z.ZodOptional<z.ZodEnum<[
-			"access_token",
-			"access_token_authz"
-		]>>;
-		enforce_policies: z.ZodOptional<z.ZodBoolean>;
-		allow_skipping_userinfo: z.ZodOptional<z.ZodBoolean>;
-		skip_userinfo: z.ZodOptional<z.ZodBoolean>;
-		persist_client_authorization: z.ZodOptional<z.ZodBoolean>;
-		enable_introspection_endpoint: z.ZodOptional<z.ZodBoolean>;
-		mtls: z.ZodOptional<z.ZodObject<{
-			bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
-		}, "strip", z.ZodTypeAny, {
-			bound_access_tokens?: boolean | undefined;
-		}, {
+	options?: {
+		token_dialect?: "access_token" | "access_token_authz" | undefined;
+		enforce_policies?: boolean | undefined;
+		allow_skipping_userinfo?: boolean | undefined;
+		skip_userinfo?: boolean | undefined;
+		persist_client_authorization?: boolean | undefined;
+		enable_introspection_endpoint?: boolean | undefined;
+		mtls?: {
 			bound_access_tokens?: boolean | undefined;
-		}>>;
-	}, z.ZodTypeAny, "passthrough"> | undefined;
+		} | undefined;
+	} | undefined;
 	created_at?: string | undefined;
 	updated_at?: string | undefined;
 	id?: string | undefined;
@@ -5788,69 +5732,80 @@ declare const resourceServerSchema: z.ZodObject<{
 	verificationKey?: string | undefined;
 }>;
 export type ResourceServer = z.infer<typeof resourceServerSchema>;
-declare const permissionSchema: z.ZodObject<{
+declare const rolePermissionInsertSchema: z.ZodObject<{
+	role_id: z.ZodString;
+	resource_server_identifier: z.ZodString;
 	permission_name: z.ZodString;
-	description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+	role_id: string;
+	resource_server_identifier: string;
+	permission_name: string;
+}, {
+	role_id: string;
+	resource_server_identifier: string;
+	permission_name: string;
+}>;
+export type RolePermissionInsert = z.infer<typeof rolePermissionInsertSchema>;
+declare const rolePermissionWithDetailsListSchema: z.ZodArray<z.ZodObject<{
+	role_id: z.ZodString;
 	resource_server_identifier: z.ZodString;
 	resource_server_name: z.ZodString;
-	sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
-		source_id: z.ZodOptional<z.ZodString>;
-		source_name: z.ZodOptional<z.ZodString>;
-		source_type: z.ZodOptional<z.ZodString>;
-	}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-		source_id: z.ZodOptional<z.ZodString>;
-		source_name: z.ZodOptional<z.ZodString>;
-		source_type: z.ZodOptional<z.ZodString>;
-	}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-		source_id: z.ZodOptional<z.ZodString>;
-		source_name: z.ZodOptional<z.ZodString>;
-		source_type: z.ZodOptional<z.ZodString>;
-	}, z.ZodTypeAny, "passthrough">>, "many">>;
-	created_at: z.ZodOptional<z.ZodString>;
-	updated_at: z.ZodOptional<z.ZodString>;
-}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
 	permission_name: z.ZodString;
 	description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-	resource_server_identifier: z.ZodString;
-	resource_server_name: z.ZodString;
-	sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
-		source_id: z.ZodOptional<z.ZodString>;
-		source_name: z.ZodOptional<z.ZodString>;
-		source_type: z.ZodOptional<z.ZodString>;
-	}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-		source_id: z.ZodOptional<z.ZodString>;
-		source_name: z.ZodOptional<z.ZodString>;
-		source_type: z.ZodOptional<z.ZodString>;
-	}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-		source_id: z.ZodOptional<z.ZodString>;
-		source_name: z.ZodOptional<z.ZodString>;
-		source_type: z.ZodOptional<z.ZodString>;
-	}, z.ZodTypeAny, "passthrough">>, "many">>;
 	created_at: z.ZodOptional<z.ZodString>;
-	updated_at: z.ZodOptional<z.ZodString>;
-}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+}, "strip", z.ZodTypeAny, {
+	role_id: string;
+	resource_server_identifier: string;
+	permission_name: string;
+	resource_server_name: string;
+	description?: string | null | undefined;
+	created_at?: string | undefined;
+}, {
+	role_id: string;
+	resource_server_identifier: string;
+	permission_name: string;
+	resource_server_name: string;
+	description?: string | null | undefined;
+	created_at?: string | undefined;
+}>, "many">;
+export type RolePermissionWithDetailsList = z.infer<typeof rolePermissionWithDetailsListSchema>;
+declare const userPermissionInsertSchema: z.ZodObject<{
+	user_id: z.ZodString;
+	resource_server_identifier: z.ZodString;
 	permission_name: z.ZodString;
-	description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+	user_id: string;
+	resource_server_identifier: string;
+	permission_name: string;
+}, {
+	user_id: string;
+	resource_server_identifier: string;
+	permission_name: string;
+}>;
+export type UserPermissionInsert = z.infer<typeof userPermissionInsertSchema>;
+declare const userPermissionWithDetailsListSchema: z.ZodArray<z.ZodObject<{
+	user_id: z.ZodString;
 	resource_server_identifier: z.ZodString;
 	resource_server_name: z.ZodString;
-	sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
-		source_id: z.ZodOptional<z.ZodString>;
-		source_name: z.ZodOptional<z.ZodString>;
-		source_type: z.ZodOptional<z.ZodString>;
-	}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-		source_id: z.ZodOptional<z.ZodString>;
-		source_name: z.ZodOptional<z.ZodString>;
-		source_type: z.ZodOptional<z.ZodString>;
-	}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-		source_id: z.ZodOptional<z.ZodString>;
-		source_name: z.ZodOptional<z.ZodString>;
-		source_type: z.ZodOptional<z.ZodString>;
-	}, z.ZodTypeAny, "passthrough">>, "many">>;
+	permission_name: z.ZodString;
+	description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 	created_at: z.ZodOptional<z.ZodString>;
-	updated_at: z.ZodOptional<z.ZodString>;
-}, z.ZodTypeAny, "passthrough">>;
-export type Permission = z.infer<typeof permissionSchema>;
-export type PermissionInsert = z.input<typeof permissionSchema>;
+}, "strip", z.ZodTypeAny, {
+	user_id: string;
+	resource_server_identifier: string;
+	permission_name: string;
+	resource_server_name: string;
+	description?: string | null | undefined;
+	created_at?: string | undefined;
+}, {
+	user_id: string;
+	resource_server_identifier: string;
+	permission_name: string;
+	resource_server_name: string;
+	description?: string | null | undefined;
+	created_at?: string | undefined;
+}>, "many">;
+export type UserPermissionWithDetailsList = z.infer<typeof userPermissionWithDetailsListSchema>;
 declare const roleInsertSchema: z.ZodObject<{
 	name: z.ZodString;
 	description: z.ZodOptional<z.ZodString>;
@@ -6044,15 +5999,15 @@ export interface ResourceServersAdapter {
 	update(tenant_id: string, id: string, resourceServer: Partial<ResourceServerInsert>): Promise<boolean>;
 	remove(tenant_id: string, id: string): Promise<boolean>;
 }
-export interface ListPermissionsResponse extends Totals {
-	permissions: Permission[];
+export interface RolePermissionsAdapter {
+	assign(tenant_id: string, role_id: string, permissions: RolePermissionInsert[]): Promise<boolean>;
+	remove(tenant_id: string, role_id: string, permissions: Pick<RolePermissionInsert, "resource_server_identifier" | "permission_name">[]): Promise<boolean>;
+	list(tenant_id: string, role_id: string, params?: ListParams): Promise<RolePermissionWithDetailsList>;
 }
-export interface PermissionsAdapter {
-	create(tenant_id: string, permission: PermissionInsert): Promise<Permission>;
-	get(tenant_id: string, permission_id: string): Promise<Permission | null>;
-	list(tenant_id: string, params?: ListParams): Promise<ListPermissionsResponse>;
-	update(tenant_id: string, permission_id: string, permission: Partial<PermissionInsert>): Promise<boolean>;
-	remove(tenant_id: string, permission_id: string): Promise<boolean>;
+export interface UserPermissionsAdapter {
+	assign(tenant_id: string, user_id: string, permissions: UserPermissionInsert[]): Promise<boolean>;
+	remove(tenant_id: string, user_id: string, permissions: Pick<UserPermissionInsert, "resource_server_identifier" | "permission_name">[]): Promise<boolean>;
+	list(tenant_id: string, user_id: string, params?: ListParams): Promise<UserPermissionWithDetailsList>;
 }
 export interface ListRolesResponse {
 	roles: Role[];
@@ -6085,7 +6040,8 @@ export interface DataAdapters {
 	promptSettings: PromptSettingsAdapter;
 	refreshTokens: RefreshTokensAdapter;
 	resourceServers: ResourceServersAdapter;
-	permissions: PermissionsAdapter;
+	rolePermissions: RolePermissionsAdapter;
+	userPermissions: UserPermissionsAdapter;
 	roles: RolesAdapter;
 	sessions: SessionsAdapter;
 	tenants: TenantsDataAdapter;
@@ -6806,58 +6762,65 @@ declare const sqlResourceServerSchema: z.ZodObject<Omit<{
 	token_lifetime?: number | undefined;
 	token_lifetime_for_web?: number | undefined;
 }>;
-declare const sqlPermissionSchema: z.ZodObject<{
+declare const sqlRoleSchema: z.ZodObject<{
 	tenant_id: z.ZodString;
-	sources: z.ZodOptional<z.ZodString>;
 	created_at: z.ZodString;
 	updated_at: z.ZodString;
-	permission_name: z.ZodString;
-	description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-	resource_server_identifier: z.ZodString;
-	resource_server_name: z.ZodString;
+	name: z.ZodString;
+	description: z.ZodOptional<z.ZodString>;
 	id: z.ZodString;
 }, "strip", z.ZodTypeAny, {
 	tenant_id: string;
 	id: string;
+	name: string;
 	created_at: string;
 	updated_at: string;
-	permission_name: string;
-	resource_server_identifier: string;
-	resource_server_name: string;
-	description?: string | null | undefined;
-	sources?: string | undefined;
+	description?: string | undefined;
 }, {
 	tenant_id: string;
 	id: string;
+	name: string;
 	created_at: string;
 	updated_at: string;
+	description?: string | undefined;
+}>;
+declare const sqlRolePermissionSchema: z.ZodObject<{
+	tenant_id: z.ZodString;
+	role_id: z.ZodString;
+	resource_server_identifier: z.ZodString;
+	permission_name: z.ZodString;
+	created_at: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+	tenant_id: string;
+	created_at: string;
+	role_id: string;
+	resource_server_identifier: string;
 	permission_name: string;
+}, {
+	tenant_id: string;
+	created_at: string;
+	role_id: string;
 	resource_server_identifier: string;
-	resource_server_name: string;
-	description?: string | null | undefined;
-	sources?: string | undefined;
+	permission_name: string;
 }>;
-declare const sqlRoleSchema: z.ZodObject<{
+declare const sqlUserPermissionSchema: z.ZodObject<{
 	tenant_id: z.ZodString;
+	user_id: z.ZodString;
+	resource_server_identifier: z.ZodString;
+	permission_name: z.ZodString;
 	created_at: z.ZodString;
-	updated_at: z.ZodString;
-	name: z.ZodString;
-	description: z.ZodOptional<z.ZodString>;
-	id: z.ZodString;
 }, "strip", z.ZodTypeAny, {
 	tenant_id: string;
-	id: string;
-	name: string;
 	created_at: string;
-	updated_at: string;
-	description?: string | undefined;
+	user_id: string;
+	resource_server_identifier: string;
+	permission_name: string;
 }, {
 	tenant_id: string;
-	id: string;
-	name: string;
 	created_at: string;
-	updated_at: string;
-	description?: string | undefined;
+	user_id: string;
+	resource_server_identifier: string;
+	permission_name: string;
 }>;
 export interface Database {
 	applications: z.infer<typeof sqlApplicationSchema>;
@@ -6885,7 +6848,8 @@ export interface Database {
 	tenants: Tenant;
 	themes: z.infer<typeof sqlThemeSchema>;
 	resource_servers: z.infer<typeof sqlResourceServerSchema>;
-	permissions: z.infer<typeof sqlPermissionSchema>;
+	role_permissions: z.infer<typeof sqlRolePermissionSchema>;
+	user_permissions: z.infer<typeof sqlUserPermissionSchema>;
 	roles: z.infer<typeof sqlRoleSchema>;
 }
 export declare function migrateToLatest(db: Kysely<Database>, debug?: boolean): Promise<void>;