@brimble/models 3.8.43 → 3.8.44

package/dist/enum/index.d.ts

@@ -261,3 +261,11 @@ export declare enum StorageTokenStatus {
     Active = "active",
     Revoked = "revoked"
 }
+export declare enum StorageCredentialRole {
+    ReadOnly = "ReadOnly",
+    Editor = "Editor"
+}
+export declare enum StorageCredentialStatus {
+    Active = "active",
+    Revoked = "revoked"
+}

package/dist/enum/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.StorageTokenStatus = exports.StorageUploadStatus = exports.StorageBucketStatus = exports.SANDBOX_SNAPSHOT_STATUS = exports.SANDBOX_DESTROY_REASON = exports.SANDBOX_STATUS = exports.SANDBOX_TEMPLATE = exports.INVOICE_TYPE = exports.INVOICE_PAYMENT_STATUS = exports.INVOICE_STATUS = exports.COLLAB_TOOLBAR_POSITION = exports.COLLAB_THEME = exports.COLLAB_INTEGRATION_TYPE = exports.COLLAB_ANNOTATION_STATUS = exports.NomadDeploymentStatus = exports.DomainTransferStatus = exports.DomainTransferDirection = exports.DomainTransferProvider = exports.DomainRenewalStatus = exports.FrameworkApplicationType = exports.SCALING_METRIC = exports.SCALING_STRATEGY = exports.LicenseStatus = exports.JobStatus = exports.DatabaseEngine = exports.ServiceType = exports.REGION_CONTINENT = exports.PERMISSION_TYPE = exports.ROLES = exports.DNS_TYPE = exports.SERVER_STATUS = exports.OAUTH_PERMISSIONS = exports.SUBSCRIPTION_PLAN_TYPE = exports.SUBSCRIPTION_STATUS = exports.PROJECT_STATUS = exports.CARD_TYPES = exports.INTEGRATION_PROVIDERS = exports.INTEGRATION_TYPES = exports.ENVIRONMENT = exports.REQUEST_TYPE = exports.BUILD_DISABLED_BY = exports.SERVER_PROTOCOL = exports.GIT_TYPE = void 0;
+exports.StorageCredentialStatus = exports.StorageCredentialRole = exports.StorageTokenStatus = exports.StorageUploadStatus = exports.StorageBucketStatus = exports.SANDBOX_SNAPSHOT_STATUS = exports.SANDBOX_DESTROY_REASON = exports.SANDBOX_STATUS = exports.SANDBOX_TEMPLATE = exports.INVOICE_TYPE = exports.INVOICE_PAYMENT_STATUS = exports.INVOICE_STATUS = exports.COLLAB_TOOLBAR_POSITION = exports.COLLAB_THEME = exports.COLLAB_INTEGRATION_TYPE = exports.COLLAB_ANNOTATION_STATUS = exports.NomadDeploymentStatus = exports.DomainTransferStatus = exports.DomainTransferDirection = exports.DomainTransferProvider = exports.DomainRenewalStatus = exports.FrameworkApplicationType = exports.SCALING_METRIC = exports.SCALING_STRATEGY = exports.LicenseStatus = exports.JobStatus = exports.DatabaseEngine = exports.ServiceType = exports.REGION_CONTINENT = exports.PERMISSION_TYPE = exports.ROLES = exports.DNS_TYPE = exports.SERVER_STATUS = exports.OAUTH_PERMISSIONS = exports.SUBSCRIPTION_PLAN_TYPE = exports.SUBSCRIPTION_STATUS = exports.PROJECT_STATUS = exports.CARD_TYPES = exports.INTEGRATION_PROVIDERS = exports.INTEGRATION_TYPES = exports.ENVIRONMENT = exports.REQUEST_TYPE = exports.BUILD_DISABLED_BY = exports.SERVER_PROTOCOL = exports.GIT_TYPE = void 0;
 var GIT_TYPE;
 (function (GIT_TYPE) {
     GIT_TYPE["GITHUB"] = "GITHUB";
@@ -307,3 +307,13 @@ var StorageTokenStatus;
     StorageTokenStatus["Active"] = "active";
     StorageTokenStatus["Revoked"] = "revoked";
 })(StorageTokenStatus || (exports.StorageTokenStatus = StorageTokenStatus = {}));
+var StorageCredentialRole;
+(function (StorageCredentialRole) {
+    StorageCredentialRole["ReadOnly"] = "ReadOnly";
+    StorageCredentialRole["Editor"] = "Editor";
+})(StorageCredentialRole || (exports.StorageCredentialRole = StorageCredentialRole = {}));
+var StorageCredentialStatus;
+(function (StorageCredentialStatus) {
+    StorageCredentialStatus["Active"] = "active";
+    StorageCredentialStatus["Revoked"] = "revoked";
+})(StorageCredentialStatus || (exports.StorageCredentialStatus = StorageCredentialStatus = {}));

package/dist/index.d.ts

@@ -62,9 +62,9 @@ export { default as SandboxUsageSegment } from "./sandbox-usage-segment";
 export { default as VolumeUsageSegment } from "./volume-usage-segment";
 export { default as ObjectStorageUsageSegment } from "./object-storage-usage-segment";
 export { default as IdempotencyRecord } from "./idempotency";
-export { StorageBucket, StorageObject, StorageUpload, StorageToken } from "./storage";
-export { IUser, IGit, IProject, IProjectAnalytics, IPreview, IProjectConnection, IFollowing, IIntegration, IEnv, IServer, IDomain, IToken, IMember, ITeam, IInstalledIntegration, ILog, ISubscription, ICard, IDns, IRole, IPermission, IMemberPermission, IWallet, IDbImage, IJob, ILicense, IPlanConfiguration, IAutoScalingGroup, IComputeChange, IRegion, IVolume, IFramework, BrimbleFrameworkType, ISettings, ILoadBalancerPort, IDomainRenewal, IDomainTransfer, IWebhookCategory, IWebhookEvent, IWebhookSetting, IIntention, IProvider, ICollabAnnotation, ICollabComment, ICollabAttachment, ICollabIntegration, ICollabSettings, ICollabShareToken, ICollabPushSubscription, IAppMessage, IInvoice, ITag, IProjectTagAssignment, ICashierSubscription, ICashierSubscriptionItem, IProjectEnvironment, IEnvironmentVariable, IActivityLog, IOwnershipTransfer, ISandbox, ISandboxSpecs, ISandboxActivity, ISandboxImage, ISandboxSnapshot, ISandboxSnapshotUsageSegment, ISandboxSnapshotUsageSegmentCosts, ISandboxUsageSegment, ISandboxUsageSegmentCurrent, ISandboxUsageSegmentCosts, IVolumeUsageSegment, IVolumeUsageSegmentCosts, IObjectStorageUsageSegment, IObjectStorageUsageSegmentCosts, IObjectStorageUsageUnitsSummary, IIdempotencyRecord, IStorageBucket, IStorageObject, IStorageUpload, IStorageToken, StorageTokenPermission, } from "./types";
-export { GIT_TYPE, INTEGRATION_TYPES, INTEGRATION_PROVIDERS, OAUTH_PERMISSIONS, ENVIRONMENT, SERVER_STATUS, ROLES, SUBSCRIPTION_PLAN_TYPE, PROJECT_STATUS, SUBSCRIPTION_STATUS, CARD_TYPES, DNS_TYPE, PERMISSION_TYPE, REQUEST_TYPE, ServiceType, DatabaseEngine, JobStatus, LicenseStatus, REGION_CONTINENT, BUILD_DISABLED_BY, SERVER_PROTOCOL, FrameworkApplicationType, DomainRenewalStatus, DomainTransferProvider, DomainTransferDirection, DomainTransferStatus, NomadDeploymentStatus, COLLAB_ANNOTATION_STATUS, COLLAB_INTEGRATION_TYPE, COLLAB_THEME, COLLAB_TOOLBAR_POSITION, INVOICE_STATUS, INVOICE_PAYMENT_STATUS, INVOICE_TYPE, SANDBOX_TEMPLATE, SANDBOX_STATUS, SANDBOX_DESTROY_REASON, SANDBOX_SNAPSHOT_STATUS, StorageBucketStatus, StorageUploadStatus, StorageTokenStatus, } from "./enum";
+export { StorageBucket, StorageObject, StorageUpload, StorageToken, StorageCredential } from "./storage";
+export { IUser, IGit, IProject, IProjectAnalytics, IPreview, IProjectConnection, IFollowing, IIntegration, IEnv, IServer, IDomain, IToken, IMember, ITeam, IInstalledIntegration, ILog, ISubscription, ICard, IDns, IRole, IPermission, IMemberPermission, IWallet, IDbImage, IJob, ILicense, IPlanConfiguration, IAutoScalingGroup, IComputeChange, IRegion, IVolume, IFramework, BrimbleFrameworkType, ISettings, ILoadBalancerPort, IDomainRenewal, IDomainTransfer, IWebhookCategory, IWebhookEvent, IWebhookSetting, IIntention, IProvider, ICollabAnnotation, ICollabComment, ICollabAttachment, ICollabIntegration, ICollabSettings, ICollabShareToken, ICollabPushSubscription, IAppMessage, IInvoice, ITag, IProjectTagAssignment, ICashierSubscription, ICashierSubscriptionItem, IProjectEnvironment, IEnvironmentVariable, IActivityLog, IOwnershipTransfer, ISandbox, ISandboxSpecs, ISandboxActivity, ISandboxImage, ISandboxSnapshot, ISandboxSnapshotUsageSegment, ISandboxSnapshotUsageSegmentCosts, ISandboxUsageSegment, ISandboxUsageSegmentCurrent, ISandboxUsageSegmentCosts, IVolumeUsageSegment, IVolumeUsageSegmentCosts, IObjectStorageUsageSegment, IObjectStorageUsageSegmentCosts, IObjectStorageUsageUnitsSummary, IIdempotencyRecord, IStorageBucket, IStorageObject, IStorageUpload, IStorageToken, IStorageCredential, StorageTokenPermission, } from "./types";
+export { GIT_TYPE, INTEGRATION_TYPES, INTEGRATION_PROVIDERS, OAUTH_PERMISSIONS, ENVIRONMENT, SERVER_STATUS, ROLES, SUBSCRIPTION_PLAN_TYPE, PROJECT_STATUS, SUBSCRIPTION_STATUS, CARD_TYPES, DNS_TYPE, PERMISSION_TYPE, REQUEST_TYPE, ServiceType, DatabaseEngine, JobStatus, LicenseStatus, REGION_CONTINENT, BUILD_DISABLED_BY, SERVER_PROTOCOL, FrameworkApplicationType, DomainRenewalStatus, DomainTransferProvider, DomainTransferDirection, DomainTransferStatus, NomadDeploymentStatus, COLLAB_ANNOTATION_STATUS, COLLAB_INTEGRATION_TYPE, COLLAB_THEME, COLLAB_TOOLBAR_POSITION, INVOICE_STATUS, INVOICE_PAYMENT_STATUS, INVOICE_TYPE, SANDBOX_TEMPLATE, SANDBOX_STATUS, SANDBOX_DESTROY_REASON, SANDBOX_SNAPSHOT_STATUS, StorageBucketStatus, StorageUploadStatus, StorageTokenStatus, StorageCredentialRole, StorageCredentialStatus, } from "./enum";
 import mongoose from "mongoose";
 export declare const connectToMongo: (mongoUrl: string, config?: mongoose.ConnectOptions) => Promise<void>;
 export declare const db: mongoose.Connection;

package/dist/index.js

@@ -13,8 +13,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ProjectTagAssignment = exports.Tag = exports.Invoice = exports.AppMessage = exports.CollabPushSubscription = exports.CollabShareToken = exports.CollabSettings = exports.CollabIntegration = exports.CollabComment = exports.CollabAnnotation = exports.Provider = exports.Intention = exports.WebhookSetting = exports.WebhookEvent = exports.WebhookCategory = exports.DomainTransfer = exports.DomainRenewal = exports.LoadBalancerPort = exports.Settings = exports.Framework = exports.Volume = exports.Region = exports.ComputeChange = exports.AutoScalingGroup = exports.PlanConfiguration = exports.Liscense = exports.Job = exports.DbImage = exports.Wallet = exports.Server = exports.Card = exports.Subscription = exports.Log = exports.Role = exports.MemberPermission = exports.Permission = exports.Member = exports.Team = exports.Token = exports.Env = exports.Dns = exports.Domain = exports.Integration = exports.Following = exports.ProjectConnection = exports.Preview = exports.ProjectAnalytics = exports.DeletedProject = exports.Project = exports.User = void 0;
-exports.COLLAB_TOOLBAR_POSITION = exports.COLLAB_THEME = exports.COLLAB_INTEGRATION_TYPE = exports.COLLAB_ANNOTATION_STATUS = exports.NomadDeploymentStatus = exports.DomainTransferStatus = exports.DomainTransferDirection = exports.DomainTransferProvider = exports.DomainRenewalStatus = exports.FrameworkApplicationType = exports.SERVER_PROTOCOL = exports.BUILD_DISABLED_BY = exports.REGION_CONTINENT = exports.LicenseStatus = exports.JobStatus = exports.DatabaseEngine = exports.ServiceType = exports.REQUEST_TYPE = exports.PERMISSION_TYPE = exports.DNS_TYPE = exports.CARD_TYPES = exports.SUBSCRIPTION_STATUS = exports.PROJECT_STATUS = exports.SUBSCRIPTION_PLAN_TYPE = exports.ROLES = exports.SERVER_STATUS = exports.ENVIRONMENT = exports.OAUTH_PERMISSIONS = exports.INTEGRATION_PROVIDERS = exports.INTEGRATION_TYPES = exports.GIT_TYPE = exports.StorageToken = exports.StorageUpload = exports.StorageObject = exports.StorageBucket = exports.IdempotencyRecord = exports.ObjectStorageUsageSegment = exports.VolumeUsageSegment = exports.SandboxUsageSegment = exports.SandboxSnapshotUsageSegment = exports.SandboxSnapshot = exports.SandboxImage = exports.SandboxActivity = exports.Sandbox = exports.OwnershipTransfer = exports.ActivityLog = exports.EnvironmentVariable = exports.ProjectEnvironment = exports.CashierSubscriptionItem = exports.CashierSubscription = void 0;
-exports.healthCheckMongo = exports.closeMongo = exports.db = exports.connectToMongo = exports.StorageTokenStatus = exports.StorageUploadStatus = exports.StorageBucketStatus = exports.SANDBOX_SNAPSHOT_STATUS = exports.SANDBOX_DESTROY_REASON = exports.SANDBOX_STATUS = exports.SANDBOX_TEMPLATE = exports.INVOICE_TYPE = exports.INVOICE_PAYMENT_STATUS = exports.INVOICE_STATUS = void 0;
+exports.COLLAB_THEME = exports.COLLAB_INTEGRATION_TYPE = exports.COLLAB_ANNOTATION_STATUS = exports.NomadDeploymentStatus = exports.DomainTransferStatus = exports.DomainTransferDirection = exports.DomainTransferProvider = exports.DomainRenewalStatus = exports.FrameworkApplicationType = exports.SERVER_PROTOCOL = exports.BUILD_DISABLED_BY = exports.REGION_CONTINENT = exports.LicenseStatus = exports.JobStatus = exports.DatabaseEngine = exports.ServiceType = exports.REQUEST_TYPE = exports.PERMISSION_TYPE = exports.DNS_TYPE = exports.CARD_TYPES = exports.SUBSCRIPTION_STATUS = exports.PROJECT_STATUS = exports.SUBSCRIPTION_PLAN_TYPE = exports.ROLES = exports.SERVER_STATUS = exports.ENVIRONMENT = exports.OAUTH_PERMISSIONS = exports.INTEGRATION_PROVIDERS = exports.INTEGRATION_TYPES = exports.GIT_TYPE = exports.StorageCredential = exports.StorageToken = exports.StorageUpload = exports.StorageObject = exports.StorageBucket = exports.IdempotencyRecord = exports.ObjectStorageUsageSegment = exports.VolumeUsageSegment = exports.SandboxUsageSegment = exports.SandboxSnapshotUsageSegment = exports.SandboxSnapshot = exports.SandboxImage = exports.SandboxActivity = exports.Sandbox = exports.OwnershipTransfer = exports.ActivityLog = exports.EnvironmentVariable = exports.ProjectEnvironment = exports.CashierSubscriptionItem = exports.CashierSubscription = void 0;
+exports.healthCheckMongo = exports.closeMongo = exports.db = exports.connectToMongo = exports.StorageCredentialStatus = exports.StorageCredentialRole = exports.StorageTokenStatus = exports.StorageUploadStatus = exports.StorageBucketStatus = exports.SANDBOX_SNAPSHOT_STATUS = exports.SANDBOX_DESTROY_REASON = exports.SANDBOX_STATUS = exports.SANDBOX_TEMPLATE = exports.INVOICE_TYPE = exports.INVOICE_PAYMENT_STATUS = exports.INVOICE_STATUS = exports.COLLAB_TOOLBAR_POSITION = void 0;
 var user_1 = require("./user");
 Object.defineProperty(exports, "User", { enumerable: true, get: function () { return __importDefault(user_1).default; } });
 var project_1 = require("./project");
@@ -149,6 +149,7 @@ Object.defineProperty(exports, "StorageBucket", { enumerable: true, get: functio
 Object.defineProperty(exports, "StorageObject", { enumerable: true, get: function () { return storage_1.StorageObject; } });
 Object.defineProperty(exports, "StorageUpload", { enumerable: true, get: function () { return storage_1.StorageUpload; } });
 Object.defineProperty(exports, "StorageToken", { enumerable: true, get: function () { return storage_1.StorageToken; } });
+Object.defineProperty(exports, "StorageCredential", { enumerable: true, get: function () { return storage_1.StorageCredential; } });
 var enum_1 = require("./enum");
 Object.defineProperty(exports, "GIT_TYPE", { enumerable: true, get: function () { return enum_1.GIT_TYPE; } });
 Object.defineProperty(exports, "INTEGRATION_TYPES", { enumerable: true, get: function () { return enum_1.INTEGRATION_TYPES; } });
@@ -191,6 +192,8 @@ Object.defineProperty(exports, "SANDBOX_SNAPSHOT_STATUS", { enumerable: true, ge
 Object.defineProperty(exports, "StorageBucketStatus", { enumerable: true, get: function () { return enum_1.StorageBucketStatus; } });
 Object.defineProperty(exports, "StorageUploadStatus", { enumerable: true, get: function () { return enum_1.StorageUploadStatus; } });
 Object.defineProperty(exports, "StorageTokenStatus", { enumerable: true, get: function () { return enum_1.StorageTokenStatus; } });
+Object.defineProperty(exports, "StorageCredentialRole", { enumerable: true, get: function () { return enum_1.StorageCredentialRole; } });
+Object.defineProperty(exports, "StorageCredentialStatus", { enumerable: true, get: function () { return enum_1.StorageCredentialStatus; } });
 const mongoose_1 = __importDefault(require("mongoose"));
 const utils_1 = require("@brimble/utils");
 const connectToMongo = (mongoUrl, config) => __awaiter(void 0, void 0, void 0, function* () {

package/dist/storage.d.ts

@@ -1,4 +1,4 @@
-import { IStorageBucket, IStorageObject, IStorageToken, IStorageUpload } from "./types/storage";
+import { IStorageBucket, IStorageCredential, IStorageObject, IStorageToken, IStorageUpload } from "./types/storage";
 export declare const StorageBucket: import("mongoose").Model<IStorageBucket, {}, {}, {}, import("mongoose").Document<unknown, {}, IStorageBucket, {}, import("mongoose").DefaultSchemaOptions> & IStorageBucket & Required<{
     _id: import("mongoose").Types.ObjectId;
 }> & {
@@ -27,3 +27,10 @@ export declare const StorageToken: import("mongoose").Model<IStorageToken, {}, {
 } & {
     id: string;
 }, any, IStorageToken>;
+export declare const StorageCredential: import("mongoose").Model<IStorageCredential, {}, {}, {}, import("mongoose").Document<unknown, {}, IStorageCredential, {}, import("mongoose").DefaultSchemaOptions> & IStorageCredential & Required<{
+    _id: import("mongoose").Types.ObjectId;
+}> & {
+    __v: number;
+} & {
+    id: string;
+}, any, IStorageCredential>;

package/dist/storage.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.StorageToken = exports.StorageUpload = exports.StorageObject = exports.StorageBucket = void 0;
+exports.StorageCredential = exports.StorageToken = exports.StorageUpload = exports.StorageObject = exports.StorageBucket = void 0;
 const mongoose_1 = require("mongoose");
 const enum_1 = require("./enum");
 const storageBucketSchema = new mongoose_1.Schema({
@@ -59,7 +59,24 @@ const storageTokenSchema = new mongoose_1.Schema({
     expires_at: { type: Date },
 }, { timestamps: true });
 storageTokenSchema.index({ project: 1, status: 1 }, { name: "idx_storage_token_project_status" });
+const storageCredentialSchema = new mongoose_1.Schema({
+    name: { type: String, required: true, trim: true },
+    bucket: { type: mongoose_1.Schema.Types.ObjectId, ref: "StorageBucket", required: true, index: true },
+    project: { type: mongoose_1.Schema.Types.ObjectId, ref: "Project", required: false, index: true },
+    user_id: { type: mongoose_1.Schema.Types.ObjectId, ref: "User", required: false, index: true },
+    team: { type: mongoose_1.Schema.Types.ObjectId, ref: "Team", required: false, index: true },
+    provider: { type: String, default: "tigris" },
+    provider_org_id: { type: String, required: true },
+    access_key_id: { type: String, required: true, unique: true },
+    policy_names: [{ type: String }],
+    role: { type: String, enum: Object.values(enum_1.StorageCredentialRole), required: true },
+    status: { type: String, enum: Object.values(enum_1.StorageCredentialStatus), default: enum_1.StorageCredentialStatus.Active, index: true },
+    last_rotated_at: { type: Date },
+    revoked_at: { type: Date },
+}, { timestamps: true });
+storageCredentialSchema.index({ bucket: 1, status: 1, updatedAt: -1 }, { name: "idx_storage_credential_bucket_status_updated_at" });
 exports.StorageBucket = (0, mongoose_1.model)("StorageBucket", storageBucketSchema);
 exports.StorageObject = (0, mongoose_1.model)("StorageObject", storageObjectSchema);
 exports.StorageUpload = (0, mongoose_1.model)("StorageUpload", storageUploadSchema);
 exports.StorageToken = (0, mongoose_1.model)("StorageToken", storageTokenSchema);
+exports.StorageCredential = (0, mongoose_1.model)("StorageCredential", storageCredentialSchema);

package/dist/types/index.d.ts

@@ -63,4 +63,4 @@ export type { ISandboxUsageSegment, ISandboxUsageSegmentCurrent, ISandboxUsageSe
 export type { IVolumeUsageSegment, IVolumeUsageSegmentCosts, } from "./volume-usage-segment";
 export type { IObjectStorageUsageSegment, IObjectStorageUsageSegmentCosts, IObjectStorageUsageUnitsSummary, } from "./object-storage-usage-segment";
 export type { IIdempotencyRecord } from "./idempotency";
-export type { IStorageBucket, IStorageObject, IStorageUpload, IStorageToken, StorageTokenPermission, } from "./storage";
+export type { IStorageBucket, IStorageObject, IStorageUpload, IStorageToken, IStorageCredential, StorageTokenPermission, } from "./storage";

package/dist/types/storage.d.ts

@@ -1,5 +1,5 @@
 import { Document, Types } from "mongoose";
-import { StorageBucketStatus, StorageTokenStatus, StorageUploadStatus } from "../enum";
+import { StorageBucketStatus, StorageCredentialRole, StorageCredentialStatus, StorageTokenStatus, StorageUploadStatus } from "../enum";
 export type StorageTokenPermission = "read" | "write" | "delete" | "list" | "admin";
 export interface IStorageBucket extends Document {
     name: string;
@@ -60,3 +60,20 @@ export interface IStorageToken extends Document {
     createdAt: Date;
     updatedAt: Date;
 }
+export interface IStorageCredential extends Document {
+    name: string;
+    bucket: Types.ObjectId;
+    project?: Types.ObjectId;
+    user_id?: Types.ObjectId;
+    team?: Types.ObjectId;
+    provider: string;
+    provider_org_id: string;
+    access_key_id: string;
+    policy_names: string[];
+    role: StorageCredentialRole;
+    status: StorageCredentialStatus;
+    last_rotated_at?: Date;
+    revoked_at?: Date;
+    createdAt: Date;
+    updatedAt: Date;
+}

package/enum/index.ts

@@ -303,3 +303,13 @@ export enum StorageTokenStatus {
   Active = "active",
   Revoked = "revoked",
 }
+
+export enum StorageCredentialRole {
+  ReadOnly = "ReadOnly",
+  Editor = "Editor",
+}
+
+export enum StorageCredentialStatus {
+  Active = "active",
+  Revoked = "revoked",
+}

package/index.ts

@@ -62,7 +62,7 @@ export { default as SandboxUsageSegment } from "./sandbox-usage-segment";
 export { default as VolumeUsageSegment } from "./volume-usage-segment";
 export { default as ObjectStorageUsageSegment } from "./object-storage-usage-segment";
 export { default as IdempotencyRecord } from "./idempotency";
-export { StorageBucket, StorageObject, StorageUpload, StorageToken } from "./storage";
+export { StorageBucket, StorageObject, StorageUpload, StorageToken, StorageCredential } from "./storage";
 
 export {
   IUser,
@@ -144,6 +144,7 @@ export {
   IStorageObject,
   IStorageUpload,
   IStorageToken,
+  IStorageCredential,
   StorageTokenPermission,
 } from "./types";
 export {
@@ -188,6 +189,8 @@ export {
   StorageBucketStatus,
   StorageUploadStatus,
   StorageTokenStatus,
+  StorageCredentialRole,
+  StorageCredentialStatus,
 } from "./enum";
 
 import mongoose from "mongoose";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brimble/models",
-  "version": "3.8.43",
+  "version": "3.8.44",
   "description": "Brimble models",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/storage.ts

@@ -1,6 +1,18 @@
 import { model, Schema } from "mongoose";
-import { StorageBucketStatus, StorageTokenStatus, StorageUploadStatus } from "./enum";
-import { IStorageBucket, IStorageObject, IStorageToken, IStorageUpload } from "./types/storage";
+import {
+  StorageBucketStatus,
+  StorageCredentialRole,
+  StorageCredentialStatus,
+  StorageTokenStatus,
+  StorageUploadStatus,
+} from "./enum";
+import {
+  IStorageBucket,
+  IStorageCredential,
+  IStorageObject,
+  IStorageToken,
+  IStorageUpload,
+} from "./types/storage";
 
 const storageBucketSchema = new Schema(
   {
@@ -77,7 +89,29 @@ const storageTokenSchema = new Schema(
 
 storageTokenSchema.index({ project: 1, status: 1 }, { name: "idx_storage_token_project_status" });
 
+const storageCredentialSchema = new Schema(
+  {
+    name: { type: String, required: true, trim: true },
+    bucket: { type: Schema.Types.ObjectId, ref: "StorageBucket", required: true, index: true },
+    project: { type: Schema.Types.ObjectId, ref: "Project", required: false, index: true },
+    user_id: { type: Schema.Types.ObjectId, ref: "User", required: false, index: true },
+    team: { type: Schema.Types.ObjectId, ref: "Team", required: false, index: true },
+    provider: { type: String, default: "tigris" },
+    provider_org_id: { type: String, required: true },
+    access_key_id: { type: String, required: true, unique: true },
+    policy_names: [{ type: String }],
+    role: { type: String, enum: Object.values(StorageCredentialRole), required: true },
+    status: { type: String, enum: Object.values(StorageCredentialStatus), default: StorageCredentialStatus.Active, index: true },
+    last_rotated_at: { type: Date },
+    revoked_at: { type: Date },
+  },
+  { timestamps: true },
+);
+
+storageCredentialSchema.index({ bucket: 1, status: 1, updatedAt: -1 }, { name: "idx_storage_credential_bucket_status_updated_at" });
+
 export const StorageBucket = model<IStorageBucket>("StorageBucket", storageBucketSchema);
 export const StorageObject = model<IStorageObject>("StorageObject", storageObjectSchema);
 export const StorageUpload = model<IStorageUpload>("StorageUpload", storageUploadSchema);
 export const StorageToken = model<IStorageToken>("StorageToken", storageTokenSchema);
+export const StorageCredential = model<IStorageCredential>("StorageCredential", storageCredentialSchema);

package/types/index.ts

@@ -82,5 +82,6 @@ export type {
   IStorageObject,
   IStorageUpload,
   IStorageToken,
+  IStorageCredential,
   StorageTokenPermission,
 } from "./storage";

package/types/storage.ts

@@ -1,5 +1,11 @@
 import { Document, Types } from "mongoose";
-import { StorageBucketStatus, StorageTokenStatus, StorageUploadStatus } from "../enum";
+import {
+  StorageBucketStatus,
+  StorageCredentialRole,
+  StorageCredentialStatus,
+  StorageTokenStatus,
+  StorageUploadStatus,
+} from "../enum";
 
 export type StorageTokenPermission = "read" | "write" | "delete" | "list" | "admin";
 
@@ -65,3 +71,21 @@ export interface IStorageToken extends Document {
   createdAt: Date;
   updatedAt: Date;
 }
+
+export interface IStorageCredential extends Document {
+  name: string;
+  bucket: Types.ObjectId;
+  project?: Types.ObjectId;
+  user_id?: Types.ObjectId;
+  team?: Types.ObjectId;
+  provider: string;
+  provider_org_id: string;
+  access_key_id: string;
+  policy_names: string[];
+  role: StorageCredentialRole;
+  status: StorageCredentialStatus;
+  last_rotated_at?: Date;
+  revoked_at?: Date;
+  createdAt: Date;
+  updatedAt: Date;
+}