@donkeylabs/cli 1.1.16 → 1.1.18

package/templates/sveltekit-app/src/server/plugins/permissions/migrations/001_create_tenants.ts

@@ -0,0 +1,63 @@
+import type { Kysely } from "kysely";
+
+export async function up(db: Kysely<any>): Promise<void> {
+  // Tenants table
+  await db.schema
+    .createTable("tenants")
+    .ifNotExists()
+    .addColumn("id", "text", (col) => col.primaryKey())
+    .addColumn("name", "text", (col) => col.notNull())
+    .addColumn("slug", "text", (col) => col.notNull().unique())
+    .addColumn("settings", "text") // JSON
+    .addColumn("created_at", "text", (col) => col.notNull().defaultTo("CURRENT_TIMESTAMP"))
+    .addColumn("updated_at", "text", (col) => col.notNull())
+    .execute();
+
+  await db.schema
+    .createIndex("idx_tenants_slug")
+    .ifNotExists()
+    .on("tenants")
+    .column("slug")
+    .execute();
+
+  // Tenant members table
+  await db.schema
+    .createTable("tenant_members")
+    .ifNotExists()
+    .addColumn("id", "text", (col) => col.primaryKey())
+    .addColumn("tenant_id", "text", (col) =>
+      col.notNull().references("tenants.id").onDelete("cascade")
+    )
+    .addColumn("user_id", "text", (col) =>
+      col.notNull().references("users.id").onDelete("cascade")
+    )
+    .addColumn("created_at", "text", (col) => col.notNull().defaultTo("CURRENT_TIMESTAMP"))
+    .execute();
+
+  await db.schema
+    .createIndex("idx_tenant_members_tenant_id")
+    .ifNotExists()
+    .on("tenant_members")
+    .column("tenant_id")
+    .execute();
+
+  await db.schema
+    .createIndex("idx_tenant_members_user_id")
+    .ifNotExists()
+    .on("tenant_members")
+    .column("user_id")
+    .execute();
+
+  await db.schema
+    .createIndex("idx_tenant_members_unique")
+    .ifNotExists()
+    .on("tenant_members")
+    .columns(["tenant_id", "user_id"])
+    .unique()
+    .execute();
+}
+
+export async function down(db: Kysely<any>): Promise<void> {
+  await db.schema.dropTable("tenant_members").ifExists().execute();
+  await db.schema.dropTable("tenants").ifExists().execute();
+}

package/templates/sveltekit-app/src/server/plugins/permissions/migrations/002_create_roles.ts

@@ -0,0 +1,90 @@
+import type { Kysely } from "kysely";
+
+export async function up(db: Kysely<any>): Promise<void> {
+  // Roles table
+  await db.schema
+    .createTable("roles")
+    .ifNotExists()
+    .addColumn("id", "text", (col) => col.primaryKey())
+    .addColumn("tenant_id", "text", (col) =>
+      col.references("tenants.id").onDelete("cascade")
+    ) // null = global role
+    .addColumn("name", "text", (col) => col.notNull())
+    .addColumn("description", "text")
+    .addColumn("permissions", "text", (col) => col.notNull().defaultTo("[]")) // JSON array
+    .addColumn("inherits_from", "text", (col) =>
+      col.references("roles.id").onDelete("set null")
+    )
+    .addColumn("is_default", "integer", (col) => col.notNull().defaultTo(0))
+    .addColumn("created_at", "text", (col) => col.notNull().defaultTo("CURRENT_TIMESTAMP"))
+    .addColumn("updated_at", "text", (col) => col.notNull())
+    .execute();
+
+  await db.schema
+    .createIndex("idx_roles_tenant_id")
+    .ifNotExists()
+    .on("roles")
+    .column("tenant_id")
+    .execute();
+
+  await db.schema
+    .createIndex("idx_roles_name_tenant")
+    .ifNotExists()
+    .on("roles")
+    .columns(["tenant_id", "name"])
+    .execute();
+
+  // User roles table
+  await db.schema
+    .createTable("user_roles")
+    .ifNotExists()
+    .addColumn("id", "text", (col) => col.primaryKey())
+    .addColumn("user_id", "text", (col) =>
+      col.notNull().references("users.id").onDelete("cascade")
+    )
+    .addColumn("role_id", "text", (col) =>
+      col.notNull().references("roles.id").onDelete("cascade")
+    )
+    .addColumn("tenant_id", "text", (col) =>
+      col.notNull().references("tenants.id").onDelete("cascade")
+    )
+    .addColumn("assigned_by", "text", (col) =>
+      col.references("users.id").onDelete("set null")
+    )
+    .addColumn("created_at", "text", (col) => col.notNull().defaultTo("CURRENT_TIMESTAMP"))
+    .execute();
+
+  await db.schema
+    .createIndex("idx_user_roles_user_id")
+    .ifNotExists()
+    .on("user_roles")
+    .column("user_id")
+    .execute();
+
+  await db.schema
+    .createIndex("idx_user_roles_role_id")
+    .ifNotExists()
+    .on("user_roles")
+    .column("role_id")
+    .execute();
+
+  await db.schema
+    .createIndex("idx_user_roles_tenant_id")
+    .ifNotExists()
+    .on("user_roles")
+    .column("tenant_id")
+    .execute();
+
+  await db.schema
+    .createIndex("idx_user_roles_unique")
+    .ifNotExists()
+    .on("user_roles")
+    .columns(["user_id", "role_id", "tenant_id"])
+    .unique()
+    .execute();
+}
+
+export async function down(db: Kysely<any>): Promise<void> {
+  await db.schema.dropTable("user_roles").ifExists().execute();
+  await db.schema.dropTable("roles").ifExists().execute();
+}

package/templates/sveltekit-app/src/server/plugins/permissions/migrations/003_create_resource_grants.ts

@@ -0,0 +1,50 @@
+import type { Kysely } from "kysely";
+
+export async function up(db: Kysely<any>): Promise<void> {
+  await db.schema
+    .createTable("resource_grants")
+    .ifNotExists()
+    .addColumn("id", "text", (col) => col.primaryKey())
+    .addColumn("tenant_id", "text", (col) =>
+      col.notNull().references("tenants.id").onDelete("cascade")
+    )
+    .addColumn("resource_type", "text", (col) => col.notNull())
+    .addColumn("resource_id", "text", (col) => col.notNull())
+    .addColumn("grantee_type", "text", (col) => col.notNull()) // "user" | "role"
+    .addColumn("grantee_id", "text", (col) => col.notNull())
+    .addColumn("permissions", "text", (col) => col.notNull().defaultTo("[]")) // JSON array
+    .addColumn("granted_by", "text", (col) =>
+      col.references("users.id").onDelete("set null")
+    )
+    .addColumn("created_at", "text", (col) => col.notNull().defaultTo("CURRENT_TIMESTAMP"))
+    .execute();
+
+  // Index for looking up grants by resource
+  await db.schema
+    .createIndex("idx_resource_grants_resource")
+    .ifNotExists()
+    .on("resource_grants")
+    .columns(["tenant_id", "resource_type", "resource_id"])
+    .execute();
+
+  // Index for looking up grants by grantee
+  await db.schema
+    .createIndex("idx_resource_grants_grantee")
+    .ifNotExists()
+    .on("resource_grants")
+    .columns(["tenant_id", "grantee_type", "grantee_id"])
+    .execute();
+
+  // Unique constraint: one grant per resource+grantee combination
+  await db.schema
+    .createIndex("idx_resource_grants_unique")
+    .ifNotExists()
+    .on("resource_grants")
+    .columns(["tenant_id", "resource_type", "resource_id", "grantee_type", "grantee_id"])
+    .unique()
+    .execute();
+}
+
+export async function down(db: Kysely<any>): Promise<void> {
+  await db.schema.dropTable("resource_grants").ifExists().execute();
+}