@authhero/kysely-adapter 12.0.0 → 12.2.0

package/dist/types/migrate/migrations/2026-08-04T12:00:00_scim_inbound_provisioning.d.ts

@@ -0,0 +1,21 @@
+import { Kysely } from "kysely";
+import { Database } from "../../src/db";
+/**
+ * SCIM 2.0 inbound provisioning (#1191). Three tenant-scoped tables:
+ *
+ *   - scim_configurations: one config per connection.
+ *   - scim_tokens: hashed long-lived bearer tokens for /scim/v2.
+ *   - scim_external_ids: IdP externalId -> AuthHero user_id lookup.
+ *
+ * Every primary/unique key leads with `tenant_id`: connection ids, token ids
+ * and IdP external ids are only unique within a tenant, so a tenant-less key
+ * would let one tenant's row block another's.
+ *
+ * No foreign keys, mirroring `proxy_routes`: connections have a composite
+ * (tenant_id, id) primary key, so a real FK would be composite and awkward,
+ * and these tables are always queried tenant-scoped anyway. `mapping` and
+ * `scopes` are JSON text with no DB-level default (MySQL forbids defaults on
+ * TEXT); the adapter always writes a value.
+ */
+export declare function up(db: Kysely<Database>): Promise<void>;
+export declare function down(db: Kysely<Database>): Promise<void>;

package/dist/types/migrate/migrations/2026-08-05T12:00:00_user_blocked.d.ts

@@ -0,0 +1,4 @@
+import { Kysely } from "kysely";
+import { Database } from "../../src/db";
+export declare function up(db: Kysely<Database>): Promise<void>;
+export declare function down(db: Kysely<Database>): Promise<void>;

package/dist/types/migrate/migrations/2026-08-09T12:00:00_prompt_settings_last_used.d.ts

@@ -0,0 +1,4 @@
+import { Kysely } from "kysely";
+import { Database } from "../../src/db";
+export declare function up(db: Kysely<Database>): Promise<void>;
+export declare function down(db: Kysely<Database>): Promise<void>;

package/dist/types/migrate/migrations/2026-08-10T12:00:00_action_executions_created_at_index.d.ts

@@ -0,0 +1,4 @@
+import { Kysely } from "kysely";
+import { Database } from "../../src/db";
+export declare function up(db: Kysely<Database>): Promise<void>;
+export declare function down(db: Kysely<Database>): Promise<void>;

package/dist/types/migrate/migrations/index.d.ts

@@ -1,5 +1,9 @@
 import * as baseline from "./2026-07-16T14:00:00_baseline";
 import * as codesExpiresAtTs from "./2026-07-16T15:00:00_codes_expires_at_ts";
+import * as scimInboundProvisioning from "./2026-08-04T12:00:00_scim_inbound_provisioning";
+import * as userBlocked from "./2026-08-05T12:00:00_user_blocked";
+import * as promptSettingsLastUsed from "./2026-08-09T12:00:00_prompt_settings_last_used";
+import * as actionExecutionsCreatedAtIndex from "./2026-08-10T12:00:00_action_executions_created_at_index";
 /**
  * Kysely runs these in key order and refuses to start if an already-executed
  * migration sorts after a pending one, so the keys must sort in execution
@@ -18,5 +22,9 @@ import * as codesExpiresAtTs from "./2026-07-16T15:00:00_codes_expires_at_ts";
 declare const _default: {
     "2026-07-16T14:00:00_baseline": typeof baseline;
     "2026-07-16T15:00:00_codes_expires_at_ts": typeof codesExpiresAtTs;
+    "2026-08-04T12:00:00_scim_inbound_provisioning": typeof scimInboundProvisioning;
+    "2026-08-05T12:00:00_user_blocked": typeof userBlocked;
+    "2026-08-09T12:00:00_prompt_settings_last_used": typeof promptSettingsLastUsed;
+    "2026-08-10T12:00:00_action_executions_created_at_index": typeof actionExecutionsCreatedAtIndex;
 };
 export default _default;

package/dist/types/src/actionExecutions/cleanup.d.ts

@@ -0,0 +1,3 @@
+import { Kysely } from "kysely";
+import { Database } from "../db";
+export declare function cleanup(db: Kysely<Database>): (olderThan: string) => Promise<number>;

package/dist/types/src/db.d.ts

@@ -56,6 +56,7 @@ declare const sqlPromptSettingSchema: z.ZodObject<{
     identifier_first: z.ZodNumber;
     password_first: z.ZodNumber;
     webauthn_platform_first_factor: z.ZodNumber;
+    show_last_used_connection: z.ZodNullable<z.ZodNumber>;
     tenant_id: z.ZodString;
 }, z.core.$strip>;
 declare const sqlPasswordSchema: z.ZodObject<{
@@ -124,6 +125,7 @@ export declare const sqlUserSchema: z.ZodObject<{
     email_verified: z.ZodNumber;
     phone_verified: z.ZodNullable<z.ZodOptional<z.ZodNumber>>;
     is_social: z.ZodNumber;
+    blocked: z.ZodNullable<z.ZodOptional<z.ZodNumber>>;
     app_metadata: z.ZodString;
     user_metadata: z.ZodString;
     address: z.ZodNullable<z.ZodOptional<z.ZodString>>;
@@ -939,6 +941,31 @@ export interface Database {
         created_at: string;
         updated_at: string;
     };
+    scim_configurations: {
+        connection_id: string;
+        tenant_id: string;
+        user_id_attribute: string;
+        mapping: string;
+        created_at: string;
+        updated_at: string;
+    };
+    scim_tokens: {
+        token_id: string;
+        tenant_id: string;
+        connection_id: string;
+        token_hash: string;
+        scopes: string;
+        valid_until: string | null;
+        created_at: string;
+        last_used_at: string | null;
+    };
+    scim_external_ids: {
+        tenant_id: string;
+        connection_id: string;
+        external_id: string;
+        user_id: string;
+        created_at: string;
+    };
     tenant_operations: {
         id: string;
         tenant_id: string | null;

package/dist/types/src/scim/adapter.d.ts

@@ -0,0 +1,6 @@
+import { Kysely } from "kysely";
+import { ScimConfigurationsAdapter, ScimTokensAdapter, ScimExternalIdsAdapter } from "@authhero/adapter-interfaces";
+import { Database } from "../db";
+export declare function createScimConfigurationsAdapter(db: Kysely<Database>): ScimConfigurationsAdapter;
+export declare function createScimTokensAdapter(db: Kysely<Database>): ScimTokensAdapter;
+export declare function createScimExternalIdsAdapter(db: Kysely<Database>): ScimExternalIdsAdapter;

package/dist/types/src/scim/index.d.ts

@@ -0,0 +1 @@
+export { createScimConfigurationsAdapter, createScimTokensAdapter, createScimExternalIdsAdapter, } from "./adapter";