@fastybird/smart-panel-backend 1.0.0-beta.3 → 1.1.0-alpha.0

package/dist/migrations/1000000000008-AddMcpClients.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AddMcpClients1000000000008 = void 0;
+class AddMcpClients1000000000008 {
+    constructor() {
+        this.name = 'AddMcpClients1000000000008';
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`CREATE TABLE "mcp_module_installation" (` +
+            `"key" varchar PRIMARY KEY NOT NULL, ` +
+            `"installationId" varchar NOT NULL, ` +
+            `"createdAt" datetime NOT NULL DEFAULT (CURRENT_TIMESTAMP), ` +
+            `CONSTRAINT "UQ_mcp_installation_id" UNIQUE ("installationId"))`);
+        await queryRunner.query(`CREATE TABLE "mcp_module_clients" (` +
+            `"id" varchar PRIMARY KEY NOT NULL, ` +
+            `"createdAt" datetime NOT NULL DEFAULT (CURRENT_TIMESTAMP), ` +
+            `"updatedAt" datetime, ` +
+            `"name" varchar NOT NULL, ` +
+            `"description" varchar, ` +
+            `"enabled" boolean NOT NULL DEFAULT (1), ` +
+            `"capabilities" text NOT NULL, ` +
+            `"createdById" varchar, ` +
+            `"tokenId" varchar, ` +
+            `CONSTRAINT "UQ_mcp_client_token" UNIQUE ("tokenId"), ` +
+            `CONSTRAINT "FK_mcp_client_creator" FOREIGN KEY ("createdById") ` +
+            `REFERENCES "users_module_users" ("id") ON DELETE SET NULL, ` +
+            `CONSTRAINT "FK_mcp_client_token" FOREIGN KEY ("tokenId") ` +
+            `REFERENCES "auth_module_tokens" ("id") ON DELETE SET NULL)`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_client_enabled" ON "mcp_module_clients" ("enabled")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_client_creator" ON "mcp_module_clients" ("createdById")`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`DELETE FROM "auth_module_tokens" WHERE "ownerType" = 'mcp'`);
+        await queryRunner.query(`DROP INDEX IF EXISTS "IDX_mcp_client_creator"`);
+        await queryRunner.query(`DROP INDEX IF EXISTS "IDX_mcp_client_enabled"`);
+        await queryRunner.query(`DROP TABLE "mcp_module_clients"`);
+        await queryRunner.query(`DROP TABLE "mcp_module_installation"`);
+    }
+}
+exports.AddMcpClients1000000000008 = AddMcpClients1000000000008;
+//# sourceMappingURL=1000000000008-AddMcpClients.js.map

package/dist/migrations/1000000000008-AddMcpClients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1000000000008-AddMcpClients.js","sourceRoot":"","sources":["../../src/migrations/1000000000008-AddMcpClients.ts"],"names":[],"mappings":";;;AAEA,MAAa,0BAA0B;IAAvC;QACC,SAAI,GAAG,4BAA4B,CAAC;IAwCrC,CAAC;IAtCO,KAAK,CAAC,EAAE,CAAC,WAAwB;QACvC,MAAM,WAAW,CAAC,KAAK,CACtB,0CAA0C;YACzC,sCAAsC;YACtC,qCAAqC;YACrC,6DAA6D;YAC7D,gEAAgE,CACjE,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,qCAAqC;YACpC,qCAAqC;YACrC,6DAA6D;YAC7D,wBAAwB;YACxB,2BAA2B;YAC3B,yBAAyB;YACzB,0CAA0C;YAC1C,gCAAgC;YAChC,yBAAyB;YACzB,qBAAqB;YACrB,uDAAuD;YACvD,iEAAiE;YACjE,6DAA6D;YAC7D,2DAA2D;YAC3D,4DAA4D,CAC7D,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;QACrG,MAAM,WAAW,CAAC,KAAK,CAAC,+EAA+E,CAAC,CAAC;IAC1G,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,WAAwB;QAGzC,MAAM,WAAW,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QACtF,MAAM,WAAW,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACzE,MAAM,WAAW,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACzE,MAAM,WAAW,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC3D,MAAM,WAAW,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACjE,CAAC;CACD;AAzCD,gEAyCC"}

package/dist/migrations/1000000000009-AddDeviceHiddenBy.d.ts

@@ -0,0 +1,6 @@
+import { MigrationInterface, QueryRunner } from 'typeorm';
+export declare class AddDeviceHiddenBy1000000000009 implements MigrationInterface {
+    name: string;
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}

package/dist/migrations/1000000000009-AddDeviceHiddenBy.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AddDeviceHiddenBy1000000000009 = void 0;
+class AddDeviceHiddenBy1000000000009 {
+    constructor() {
+        this.name = 'AddDeviceHiddenBy1000000000009';
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "devices_module_devices" ADD COLUMN "hiddenBy" varchar`);
+        await queryRunner.query(`CREATE INDEX "IDX_devices_hiddenBy" ON "devices_module_devices" ("hiddenBy")`);
+        await queryRunner.query(`UPDATE "devices_module_devices" SET "hiddenBy" = 'user' WHERE "hidden" = 1`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`DROP INDEX IF EXISTS "IDX_devices_hiddenBy"`);
+        await queryRunner.query(`ALTER TABLE "devices_module_devices" DROP COLUMN "hiddenBy"`);
+    }
+}
+exports.AddDeviceHiddenBy1000000000009 = AddDeviceHiddenBy1000000000009;
+//# sourceMappingURL=1000000000009-AddDeviceHiddenBy.js.map

package/dist/migrations/1000000000009-AddDeviceHiddenBy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1000000000009-AddDeviceHiddenBy.js","sourceRoot":"","sources":["../../src/migrations/1000000000009-AddDeviceHiddenBy.ts"],"names":[],"mappings":";;;AAEA,MAAa,8BAA8B;IAA3C;QACC,SAAI,GAAG,gCAAgC,CAAC;IAgBzC,CAAC;IAdO,KAAK,CAAC,EAAE,CAAC,WAAwB;QACvC,MAAM,WAAW,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;QAC9F,MAAM,WAAW,CAAC,KAAK,CAAC,8EAA8E,CAAC,CAAC;QAKxG,MAAM,WAAW,CAAC,KAAK,CAAC,4EAA4E,CAAC,CAAC;IACvG,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,WAAwB;QACzC,MAAM,WAAW,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACvE,MAAM,WAAW,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACxF,CAAC;CACD;AAjBD,wEAiBC"}

package/dist/migrations/1000000000010-AddEnergyClaimToProjections.d.ts

@@ -0,0 +1,7 @@
+import { MigrationInterface, QueryRunner } from 'typeorm';
+export declare class AddEnergyClaimToProjections1000000000010 implements MigrationInterface {
+    name: string;
+    private static readonly SOURCE_TYPE;
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}

package/dist/migrations/1000000000010-AddEnergyClaimToProjections.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AddEnergyClaimToProjections1000000000010 = void 0;
+class AddEnergyClaimToProjections1000000000010 {
+    constructor() {
+        this.name = 'AddEnergyClaimToProjections1000000000010';
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "devices_module_channels_properties" ADD COLUMN "energyClaimPropertyId" varchar ` +
+            `REFERENCES "devices_module_channels_properties" ("id") ON DELETE SET NULL`);
+        await queryRunner.query(`CREATE UNIQUE INDEX "UQ_channels_properties_energyClaim" ` +
+            `ON "devices_module_channels_properties" ("energyClaimPropertyId") ` +
+            `WHERE "energyClaimPropertyId" IS NOT NULL`);
+        const destinationType = AddEnergyClaimToProjections1000000000010.SOURCE_TYPE('destination_channel."category"', 'projection."category"');
+        const sourceType = AddEnergyClaimToProjections1000000000010.SOURCE_TYPE('source_channel."category"', 'source."category"');
+        await queryRunner.query(`
+			WITH admissible AS (
+				SELECT projection."id" AS "projectionId",
+				       projection."sourcePropertyId" AS "meterId",
+				       ROW_NUMBER() OVER (
+				           PARTITION BY projection."sourcePropertyId"
+				           ORDER BY projection."createdAt" ASC, projection."id" ASC
+				       ) AS "rank"
+				FROM "devices_module_channels_properties" projection
+				INNER JOIN "devices_module_channels" destination_channel
+				        ON destination_channel."id" = projection."channelId"
+				INNER JOIN "devices_module_channels_properties" source
+				        ON source."id" = projection."sourcePropertyId"
+				INNER JOIN "devices_module_channels" source_channel
+				        ON source_channel."id" = source."channelId"
+				WHERE projection."type" = 'virtual'
+				  AND projection."sourcePropertyId" IS NOT NULL
+				  AND (${destinationType}) IS NOT NULL
+				  AND ((${sourceType}) IS NULL OR (${sourceType}) = (${destinationType}))
+			)
+			UPDATE "devices_module_channels_properties"
+			   SET "energyClaimPropertyId" = (
+			       SELECT "meterId" FROM admissible
+			        WHERE admissible."projectionId" = "devices_module_channels_properties"."id"
+			          AND admissible."rank" = 1
+			   )
+			 WHERE "id" IN (SELECT "projectionId" FROM admissible WHERE "rank" = 1)
+		`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`DROP INDEX IF EXISTS "UQ_channels_properties_energyClaim"`);
+        await queryRunner.query(`ALTER TABLE "devices_module_channels_properties" DROP COLUMN "energyClaimPropertyId"`);
+    }
+}
+exports.AddEnergyClaimToProjections1000000000010 = AddEnergyClaimToProjections1000000000010;
+AddEnergyClaimToProjections1000000000010.SOURCE_TYPE = (channel, property) => `
+		CASE
+			WHEN ${channel} = 'electrical_energy' AND ${property} = 'consumption' THEN 'consumption_import'
+			WHEN ${channel} = 'electrical_generation' AND ${property} = 'production' THEN 'generation_production'
+			WHEN ${channel} = 'electrical_energy' AND ${property} = 'grid_import' THEN 'grid_import'
+			WHEN ${channel} = 'electrical_energy' AND ${property} = 'grid_export' THEN 'grid_export'
+			ELSE NULL
+		END`;
+//# sourceMappingURL=1000000000010-AddEnergyClaimToProjections.js.map

package/dist/migrations/1000000000010-AddEnergyClaimToProjections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1000000000010-AddEnergyClaimToProjections.js","sourceRoot":"","sources":["../../src/migrations/1000000000010-AddEnergyClaimToProjections.ts"],"names":[],"mappings":";;;AA2BA,MAAa,wCAAwC;IAArD;QACC,SAAI,GAAG,0CAA0C,CAAC;IA8EnD,CAAC;IA7DO,KAAK,CAAC,EAAE,CAAC,WAAwB;QACvC,MAAM,WAAW,CAAC,KAAK,CACtB,8FAA8F;YAC7F,2EAA2E,CAC5E,CAAC;QAKF,MAAM,WAAW,CAAC,KAAK,CACtB,2DAA2D;YAC1D,oEAAoE;YACpE,2CAA2C,CAC5C,CAAC;QAEF,MAAM,eAAe,GAAG,wCAAwC,CAAC,WAAW,CAC3E,gCAAgC,EAChC,uBAAuB,CACvB,CAAC;QACF,MAAM,UAAU,GAAG,wCAAwC,CAAC,WAAW,CACtE,2BAA2B,EAC3B,mBAAmB,CACnB,CAAC;QAKF,MAAM,WAAW,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;aAiBb,eAAe;cACd,UAAU,iBAAiB,UAAU,QAAQ,eAAe;;;;;;;;;GASvE,CAAC,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,WAAwB;QACzC,MAAM,WAAW,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACrF,MAAM,WAAW,CAAC,KAAK,CAAC,sFAAsF,CAAC,CAAC;IACjH,CAAC;;AA9EF,4FA+EC;AAtEwB,oDAAW,GAAG,CAAC,OAAe,EAAE,QAAgB,EAAU,EAAE,CAAC;;UAE5E,OAAO,8BAA8B,QAAQ;UAC7C,OAAO,kCAAkC,QAAQ;UACjD,OAAO,8BAA8B,QAAQ;UAC7C,OAAO,8BAA8B,QAAQ;;MAEjD,AAP8B,CAO7B"}

package/dist/migrations/1000000000010-AddMcpOAuthFoundation.d.ts

@@ -0,0 +1,6 @@
+import { MigrationInterface, QueryRunner } from 'typeorm';
+export declare class AddMcpOAuthFoundation1000000000010 implements MigrationInterface {
+    name: string;
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}

package/dist/migrations/1000000000010-AddMcpOAuthFoundation.js

@@ -0,0 +1,124 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AddMcpOAuthFoundation1000000000010 = void 0;
+class AddMcpOAuthFoundation1000000000010 {
+    constructor() {
+        this.name = 'AddMcpOAuthFoundation1000000000010';
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`CREATE TABLE "mcp_module_oauth_clients" (` +
+            `"id" varchar PRIMARY KEY NOT NULL, "createdAt" datetime NOT NULL DEFAULT (CURRENT_TIMESTAMP), ` +
+            `"updatedAt" datetime, "clientIdentifier" varchar NOT NULL, "name" varchar NOT NULL, ` +
+            `"redirectUris" text NOT NULL, "maximumScopes" text NOT NULL, "enabled" boolean NOT NULL DEFAULT (1), ` +
+            `"generation" integer NOT NULL DEFAULT (0), "createdById" varchar, ` +
+            `CONSTRAINT "UQ_mcp_oauth_client_identifier" UNIQUE ("clientIdentifier"), ` +
+            `CONSTRAINT "FK_mcp_oauth_client_creator" FOREIGN KEY ("createdById") ` +
+            `REFERENCES "users_module_users" ("id") ON DELETE SET NULL)`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_client_enabled" ON "mcp_module_oauth_clients" ("enabled")`);
+        await queryRunner.query(`CREATE TABLE "mcp_module_oauth_grants" (` +
+            `"id" varchar PRIMARY KEY NOT NULL, "createdAt" datetime NOT NULL DEFAULT (CURRENT_TIMESTAMP), ` +
+            `"updatedAt" datetime, "clientId" varchar NOT NULL, "approvedById" varchar, ` +
+            `"installationId" varchar NOT NULL, "issuer" varchar NOT NULL, "resource" varchar NOT NULL, ` +
+            `"approvedScopes" text NOT NULL, "expiresAt" datetime NOT NULL, "revokedAt" datetime, ` +
+            `"generation" integer NOT NULL DEFAULT (0), "approverAuthorityGeneration" integer NOT NULL DEFAULT (0), ` +
+            `CONSTRAINT "FK_mcp_oauth_grant_client" FOREIGN KEY ("clientId") ` +
+            `REFERENCES "mcp_module_oauth_clients" ("id") ON DELETE CASCADE, ` +
+            `CONSTRAINT "FK_mcp_oauth_grant_approver" FOREIGN KEY ("approvedById") ` +
+            `REFERENCES "users_module_users" ("id") ON DELETE SET NULL)`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_grant_client" ON "mcp_module_oauth_grants" ("clientId")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_grant_approver" ON "mcp_module_oauth_grants" ("approvedById")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_grant_expiry" ON "mcp_module_oauth_grants" ("expiresAt")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_grant_revoked" ON "mcp_module_oauth_grants" ("revokedAt")`);
+        await queryRunner.query(`CREATE TABLE "mcp_module_oauth_interactions" (` +
+            `"id" varchar PRIMARY KEY NOT NULL, "createdAt" datetime NOT NULL DEFAULT (CURRENT_TIMESTAMP), ` +
+            `"updatedAt" datetime, "uidHash" varchar NOT NULL, "clientId" varchar NOT NULL, ` +
+            `"authenticatedUserId" varchar, "redirectUri" varchar NOT NULL, "requestedScopes" text NOT NULL, ` +
+            `"expiresAt" datetime NOT NULL, "consumedAt" datetime, ` +
+            `CONSTRAINT "UQ_mcp_oauth_interaction_hash" UNIQUE ("uidHash"), ` +
+            `CONSTRAINT "FK_mcp_oauth_interaction_client" FOREIGN KEY ("clientId") ` +
+            `REFERENCES "mcp_module_oauth_clients" ("id") ON DELETE CASCADE, ` +
+            `CONSTRAINT "FK_mcp_oauth_interaction_user" FOREIGN KEY ("authenticatedUserId") ` +
+            `REFERENCES "users_module_users" ("id") ON DELETE SET NULL)`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_interaction_client" ON "mcp_module_oauth_interactions" ("clientId")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_interaction_expiry" ON "mcp_module_oauth_interactions" ("expiresAt")`);
+        await queryRunner.query(`CREATE TABLE "mcp_module_oauth_refresh_families" (` +
+            `"id" varchar PRIMARY KEY NOT NULL, "createdAt" datetime NOT NULL DEFAULT (CURRENT_TIMESTAMP), ` +
+            `"updatedAt" datetime, "clientId" varchar NOT NULL, "grantId" varchar NOT NULL, ` +
+            `"installationId" varchar NOT NULL, "expiresAt" datetime NOT NULL, "revokedAt" datetime, ` +
+            `"revocationReason" varchar, "generation" integer NOT NULL DEFAULT (0), ` +
+            `CONSTRAINT "FK_mcp_oauth_family_client" FOREIGN KEY ("clientId") ` +
+            `REFERENCES "mcp_module_oauth_clients" ("id") ON DELETE CASCADE, ` +
+            `CONSTRAINT "FK_mcp_oauth_family_grant" FOREIGN KEY ("grantId") ` +
+            `REFERENCES "mcp_module_oauth_grants" ("id") ON DELETE CASCADE)`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_family_client" ON "mcp_module_oauth_refresh_families" ("clientId")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_family_grant" ON "mcp_module_oauth_refresh_families" ("grantId")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_family_expiry" ON "mcp_module_oauth_refresh_families" ("expiresAt")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_family_revoked" ON "mcp_module_oauth_refresh_families" ("revokedAt")`);
+        await queryRunner.query(`CREATE TABLE "mcp_module_oauth_refresh_tokens" (` +
+            `"id" varchar PRIMARY KEY NOT NULL, "createdAt" datetime NOT NULL DEFAULT (CURRENT_TIMESTAMP), ` +
+            `"updatedAt" datetime, "tokenHash" varchar NOT NULL, "familyId" varchar NOT NULL, ` +
+            `"predecessorId" varchar, "expiresAt" datetime NOT NULL, "consumedAt" datetime, "revokedAt" datetime, ` +
+            `CONSTRAINT "UQ_mcp_oauth_refresh_hash" UNIQUE ("tokenHash"), ` +
+            `CONSTRAINT "UQ_mcp_oauth_refresh_predecessor" UNIQUE ("predecessorId"), ` +
+            `CONSTRAINT "FK_mcp_oauth_refresh_family" FOREIGN KEY ("familyId") ` +
+            `REFERENCES "mcp_module_oauth_refresh_families" ("id") ON DELETE CASCADE, ` +
+            `CONSTRAINT "FK_mcp_oauth_refresh_predecessor" FOREIGN KEY ("predecessorId") ` +
+            `REFERENCES "mcp_module_oauth_refresh_tokens" ("id") ON DELETE SET NULL)`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_refresh_family" ON "mcp_module_oauth_refresh_tokens" ("familyId")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_refresh_expiry" ON "mcp_module_oauth_refresh_tokens" ("expiresAt")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_refresh_consumed" ON "mcp_module_oauth_refresh_tokens" ("consumedAt")`);
+        await queryRunner.query(`CREATE TABLE "mcp_module_oauth_authorization_codes" (` +
+            `"id" varchar PRIMARY KEY NOT NULL, "createdAt" datetime NOT NULL DEFAULT (CURRENT_TIMESTAMP), ` +
+            `"updatedAt" datetime, "codeHash" varchar NOT NULL, "clientId" varchar NOT NULL, ` +
+            `"grantId" varchar NOT NULL, "interactionId" varchar NOT NULL, "installationId" varchar NOT NULL, ` +
+            `"issuer" varchar NOT NULL, "resource" varchar NOT NULL, "redirectUri" varchar NOT NULL, ` +
+            `"scopes" text NOT NULL, "codeChallenge" varchar NOT NULL, "expiresAt" datetime NOT NULL, "consumedAt" datetime, ` +
+            `CONSTRAINT "UQ_mcp_oauth_code_hash" UNIQUE ("codeHash"), ` +
+            `CONSTRAINT "UQ_mcp_oauth_code_interaction" UNIQUE ("interactionId"), ` +
+            `CONSTRAINT "FK_mcp_oauth_code_client" FOREIGN KEY ("clientId") ` +
+            `REFERENCES "mcp_module_oauth_clients" ("id") ON DELETE CASCADE, ` +
+            `CONSTRAINT "FK_mcp_oauth_code_grant" FOREIGN KEY ("grantId") ` +
+            `REFERENCES "mcp_module_oauth_grants" ("id") ON DELETE CASCADE, ` +
+            `CONSTRAINT "FK_mcp_oauth_code_interaction" FOREIGN KEY ("interactionId") ` +
+            `REFERENCES "mcp_module_oauth_interactions" ("id") ON DELETE CASCADE)`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_code_client" ON "mcp_module_oauth_authorization_codes" ("clientId")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_code_grant" ON "mcp_module_oauth_authorization_codes" ("grantId")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_code_expiry" ON "mcp_module_oauth_authorization_codes" ("expiresAt")`);
+        await queryRunner.query(`CREATE TABLE "mcp_module_oauth_access_tokens" (` +
+            `"id" varchar PRIMARY KEY NOT NULL, "createdAt" datetime NOT NULL DEFAULT (CURRENT_TIMESTAMP), ` +
+            `"updatedAt" datetime, "tokenHash" varchar NOT NULL, "clientId" varchar NOT NULL, ` +
+            `"grantId" varchar NOT NULL, "refreshFamilyId" varchar, "installationId" varchar NOT NULL, ` +
+            `"issuer" varchar NOT NULL, "resource" varchar NOT NULL, "scopes" text NOT NULL, ` +
+            `"expiresAt" datetime NOT NULL, "revokedAt" datetime, ` +
+            `CONSTRAINT "UQ_mcp_oauth_access_hash" UNIQUE ("tokenHash"), ` +
+            `CONSTRAINT "FK_mcp_oauth_access_client" FOREIGN KEY ("clientId") ` +
+            `REFERENCES "mcp_module_oauth_clients" ("id") ON DELETE CASCADE, ` +
+            `CONSTRAINT "FK_mcp_oauth_access_grant" FOREIGN KEY ("grantId") ` +
+            `REFERENCES "mcp_module_oauth_grants" ("id") ON DELETE CASCADE, ` +
+            `CONSTRAINT "FK_mcp_oauth_access_family" FOREIGN KEY ("refreshFamilyId") ` +
+            `REFERENCES "mcp_module_oauth_refresh_families" ("id") ON DELETE CASCADE)`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_access_client" ON "mcp_module_oauth_access_tokens" ("clientId")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_access_grant" ON "mcp_module_oauth_access_tokens" ("grantId")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_access_family" ON "mcp_module_oauth_access_tokens" ("refreshFamilyId")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_access_expiry" ON "mcp_module_oauth_access_tokens" ("expiresAt")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_access_revoked" ON "mcp_module_oauth_access_tokens" ("revokedAt")`);
+        await queryRunner.query(`CREATE TABLE "mcp_module_oauth_server_state" (` +
+            `"key" varchar PRIMARY KEY NOT NULL, "serverSecretVersion" integer NOT NULL DEFAULT (1), ` +
+            `"keyVersion" integer NOT NULL DEFAULT (1), "publicIdentityGeneration" integer NOT NULL DEFAULT (0), ` +
+            `"oauthEnabledGeneration" integer NOT NULL DEFAULT (0), "modulePolicyGeneration" integer NOT NULL DEFAULT (0), ` +
+            `"createdAt" datetime NOT NULL DEFAULT (CURRENT_TIMESTAMP), "updatedAt" datetime)`);
+        await queryRunner.query(`INSERT INTO "mcp_module_oauth_server_state" ("key") VALUES ('primary')`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`DROP TABLE "mcp_module_oauth_server_state"`);
+        await queryRunner.query(`DROP TABLE "mcp_module_oauth_access_tokens"`);
+        await queryRunner.query(`DROP TABLE "mcp_module_oauth_authorization_codes"`);
+        await queryRunner.query(`DROP TABLE "mcp_module_oauth_refresh_tokens"`);
+        await queryRunner.query(`DROP TABLE "mcp_module_oauth_refresh_families"`);
+        await queryRunner.query(`DROP TABLE "mcp_module_oauth_interactions"`);
+        await queryRunner.query(`DROP TABLE "mcp_module_oauth_grants"`);
+        await queryRunner.query(`DROP TABLE "mcp_module_oauth_clients"`);
+    }
+}
+exports.AddMcpOAuthFoundation1000000000010 = AddMcpOAuthFoundation1000000000010;
+//# sourceMappingURL=1000000000010-AddMcpOAuthFoundation.js.map

package/dist/migrations/1000000000010-AddMcpOAuthFoundation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1000000000010-AddMcpOAuthFoundation.js","sourceRoot":"","sources":["../../src/migrations/1000000000010-AddMcpOAuthFoundation.ts"],"names":[],"mappings":";;;AAEA,MAAa,kCAAkC;IAA/C;QACC,SAAI,GAAG,oCAAoC,CAAC;IAgL7C,CAAC;IA9KO,KAAK,CAAC,EAAE,CAAC,WAAwB;QACvC,MAAM,WAAW,CAAC,KAAK,CACtB,2CAA2C;YAC1C,gGAAgG;YAChG,sFAAsF;YACtF,uGAAuG;YACvG,oEAAoE;YACpE,2EAA2E;YAC3E,uEAAuE;YACvE,4DAA4D,CAC7D,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CAAC,uFAAuF,CAAC,CAAC;QAEjH,MAAM,WAAW,CAAC,KAAK,CACtB,0CAA0C;YACzC,gGAAgG;YAChG,6EAA6E;YAC7E,6FAA6F;YAC7F,uFAAuF;YACvF,yGAAyG;YACzG,kEAAkE;YAClE,kEAAkE;YAClE,wEAAwE;YACxE,4DAA4D,CAC7D,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CAAC,qFAAqF,CAAC,CAAC;QAC/G,MAAM,WAAW,CAAC,KAAK,CACtB,2FAA2F,CAC3F,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CAAC,sFAAsF,CAAC,CAAC;QAChH,MAAM,WAAW,CAAC,KAAK,CAAC,uFAAuF,CAAC,CAAC;QAEjH,MAAM,WAAW,CAAC,KAAK,CACtB,gDAAgD;YAC/C,gGAAgG;YAChG,iFAAiF;YACjF,kGAAkG;YAClG,wDAAwD;YACxD,iEAAiE;YACjE,wEAAwE;YACxE,kEAAkE;YAClE,iFAAiF;YACjF,4DAA4D,CAC7D,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,iGAAiG,CACjG,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,kGAAkG,CAClG,CAAC;QAEF,MAAM,WAAW,CAAC,KAAK,CACtB,oDAAoD;YACnD,gGAAgG;YAChG,iFAAiF;YACjF,0FAA0F;YAC1F,yEAAyE;YACzE,mEAAmE;YACnE,kEAAkE;YAClE,iEAAiE;YACjE,gEAAgE,CACjE,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,gGAAgG,CAChG,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,8FAA8F,CAC9F,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,iGAAiG,CACjG,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,kGAAkG,CAClG,CAAC;QAEF,MAAM,WAAW,CAAC,KAAK,CACtB,kDAAkD;YACjD,gGAAgG;YAChG,mFAAmF;YACnF,uGAAuG;YACvG,+DAA+D;YAC/D,0EAA0E;YAC1E,oEAAoE;YACpE,2EAA2E;YAC3E,8EAA8E;YAC9E,yEAAyE,CAC1E,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,+FAA+F,CAC/F,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,gGAAgG,CAChG,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,mGAAmG,CACnG,CAAC;QAEF,MAAM,WAAW,CAAC,KAAK,CACtB,uDAAuD;YACtD,gGAAgG;YAChG,kFAAkF;YAClF,mGAAmG;YACnG,0FAA0F;YAC1F,kHAAkH;YAClH,2DAA2D;YAC3D,uEAAuE;YACvE,iEAAiE;YACjE,kEAAkE;YAClE,+DAA+D;YAC/D,iEAAiE;YACjE,2EAA2E;YAC3E,sEAAsE,CACvE,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,iGAAiG,CACjG,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,+FAA+F,CAC/F,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,kGAAkG,CAClG,CAAC;QAEF,MAAM,WAAW,CAAC,KAAK,CACtB,iDAAiD;YAChD,gGAAgG;YAChG,mFAAmF;YACnF,4FAA4F;YAC5F,kFAAkF;YAClF,uDAAuD;YACvD,8DAA8D;YAC9D,mEAAmE;YACnE,kEAAkE;YAClE,iEAAiE;YACjE,iEAAiE;YACjE,0EAA0E;YAC1E,0EAA0E,CAC3E,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,6FAA6F,CAC7F,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,2FAA2F,CAC3F,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,oGAAoG,CACpG,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,8FAA8F,CAC9F,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,+FAA+F,CAC/F,CAAC;QAEF,MAAM,WAAW,CAAC,KAAK,CACtB,gDAAgD;YAC/C,0FAA0F;YAC1F,sGAAsG;YACtG,gHAAgH;YAChH,kFAAkF,CACnF,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;IACnG,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,WAAwB;QACzC,MAAM,WAAW,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACtE,MAAM,WAAW,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACvE,MAAM,WAAW,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAC7E,MAAM,WAAW,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACxE,MAAM,WAAW,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAC1E,MAAM,WAAW,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACtE,MAAM,WAAW,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAChE,MAAM,WAAW,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAClE,CAAC;CACD;AAjLD,gFAiLC"}

package/dist/migrations/1000000000011-AddMcpOAuthProviderArtifacts.d.ts

@@ -0,0 +1,6 @@
+import { MigrationInterface, QueryRunner } from 'typeorm';
+export declare class AddMcpOAuthProviderArtifacts1000000000011 implements MigrationInterface {
+    name: string;
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}

package/dist/migrations/1000000000011-AddMcpOAuthProviderArtifacts.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AddMcpOAuthProviderArtifacts1000000000011 = void 0;
+class AddMcpOAuthProviderArtifacts1000000000011 {
+    constructor() {
+        this.name = 'AddMcpOAuthProviderArtifacts1000000000011';
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`CREATE TABLE "mcp_module_oauth_provider_artifacts" (` +
+            `"model" varchar NOT NULL, ` +
+            `"idHash" varchar NOT NULL, ` +
+            `"payload" text NOT NULL, ` +
+            `"grantIdHash" varchar, ` +
+            `"userCodeHash" varchar, ` +
+            `"uidHash" varchar, ` +
+            `"consumedAt" integer, ` +
+            `"expiresAt" integer, ` +
+            `CONSTRAINT "PK_mcp_oauth_provider_artifact" PRIMARY KEY ("model", "idHash"))`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_provider_artifact_grant" ON "mcp_module_oauth_provider_artifacts" ("grantIdHash")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_provider_artifact_user_code" ON "mcp_module_oauth_provider_artifacts" ("userCodeHash")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_provider_artifact_uid" ON "mcp_module_oauth_provider_artifacts" ("uidHash")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_provider_artifact_expiry" ON "mcp_module_oauth_provider_artifacts" ("expiresAt")`);
+        await queryRunner.query(`CREATE TABLE "mcp_module_oauth_provider_revoked_grants" (` +
+            `"grantIdHash" varchar PRIMARY KEY NOT NULL, ` +
+            `"revokedAt" integer NOT NULL)`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`DROP TABLE "mcp_module_oauth_provider_revoked_grants"`);
+        await queryRunner.query(`DROP TABLE "mcp_module_oauth_provider_artifacts"`);
+    }
+}
+exports.AddMcpOAuthProviderArtifacts1000000000011 = AddMcpOAuthProviderArtifacts1000000000011;
+//# sourceMappingURL=1000000000011-AddMcpOAuthProviderArtifacts.js.map

package/dist/migrations/1000000000011-AddMcpOAuthProviderArtifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1000000000011-AddMcpOAuthProviderArtifacts.js","sourceRoot":"","sources":["../../src/migrations/1000000000011-AddMcpOAuthProviderArtifacts.ts"],"names":[],"mappings":";;;AAEA,MAAa,yCAAyC;IAAtD;QACC,SAAI,GAAG,2CAA2C,CAAC;IAuCpD,CAAC;IArCA,KAAK,CAAC,EAAE,CAAC,WAAwB;QAChC,MAAM,WAAW,CAAC,KAAK,CACtB,sDAAsD;YACrD,4BAA4B;YAC5B,6BAA6B;YAC7B,2BAA2B;YAC3B,yBAAyB;YACzB,0BAA0B;YAC1B,qBAAqB;YACrB,wBAAwB;YACxB,uBAAuB;YACvB,8EAA8E,CAC/E,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,+GAA+G,CAC/G,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,oHAAoH,CACpH,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,yGAAyG,CACzG,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,8GAA8G,CAC9G,CAAC;QAEF,MAAM,WAAW,CAAC,KAAK,CACtB,2DAA2D;YAC1D,8CAA8C;YAC9C,+BAA+B,CAChC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,WAAwB;QAClC,MAAM,WAAW,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACjF,MAAM,WAAW,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC7E,CAAC;CACD;AAxCD,8FAwCC"}

package/dist/migrations/1000000000012-LinkMcpOAuthProviderGrants.d.ts

@@ -0,0 +1,6 @@
+import { MigrationInterface, QueryRunner } from 'typeorm';
+export declare class LinkMcpOAuthProviderGrants1000000000012 implements MigrationInterface {
+    name: string;
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}

package/dist/migrations/1000000000012-LinkMcpOAuthProviderGrants.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LinkMcpOAuthProviderGrants1000000000012 = void 0;
+class LinkMcpOAuthProviderGrants1000000000012 {
+    constructor() {
+        this.name = 'LinkMcpOAuthProviderGrants1000000000012';
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "mcp_module_oauth_grants" ADD "providerGrantIdHash" varchar`);
+        await queryRunner.query(`CREATE UNIQUE INDEX "IDX_mcp_oauth_grant_provider" ON "mcp_module_oauth_grants" ("providerGrantIdHash")`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`DROP INDEX "IDX_mcp_oauth_grant_provider"`);
+        await queryRunner.query(`ALTER TABLE "mcp_module_oauth_grants" DROP COLUMN "providerGrantIdHash"`);
+    }
+}
+exports.LinkMcpOAuthProviderGrants1000000000012 = LinkMcpOAuthProviderGrants1000000000012;
+//# sourceMappingURL=1000000000012-LinkMcpOAuthProviderGrants.js.map

package/dist/migrations/1000000000012-LinkMcpOAuthProviderGrants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1000000000012-LinkMcpOAuthProviderGrants.js","sourceRoot":"","sources":["../../src/migrations/1000000000012-LinkMcpOAuthProviderGrants.ts"],"names":[],"mappings":";;;AAEA,MAAa,uCAAuC;IAApD;QACC,SAAI,GAAG,yCAAyC,CAAC;IAalD,CAAC;IAXA,KAAK,CAAC,EAAE,CAAC,WAAwB;QAChC,MAAM,WAAW,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;QACnG,MAAM,WAAW,CAAC,KAAK,CACtB,yGAAyG,CACzG,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,WAAwB;QAClC,MAAM,WAAW,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACrE,MAAM,WAAW,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;IACpG,CAAC;CACD;AAdD,0FAcC"}

package/dist/migrations/1000000000013-AddMcpOAuthProviderManagementIds.d.ts

@@ -0,0 +1,8 @@
+import { MigrationInterface, QueryRunner } from 'typeorm';
+export declare class AddMcpOAuthProviderManagementIds1000000000013 implements MigrationInterface {
+    name: string;
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+    private createIndexes;
+    private createLegacyIndexes;
+}

package/dist/migrations/1000000000013-AddMcpOAuthProviderManagementIds.js

@@ -0,0 +1,80 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AddMcpOAuthProviderManagementIds1000000000013 = void 0;
+const managementIdExpression = `lower(hex(randomblob(4)) || '-' || hex(randomblob(2)) || '-4' || ` +
+    `substr(hex(randomblob(2)), 2) || '-' || substr('89ab', abs(random()) % 4 + 1, 1) || ` +
+    `substr(hex(randomblob(2)), 2) || '-' || hex(randomblob(6)))`;
+class AddMcpOAuthProviderManagementIds1000000000013 {
+    constructor() {
+        this.name = 'AddMcpOAuthProviderManagementIds1000000000013';
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`CREATE TABLE "temporary_mcp_module_oauth_provider_artifacts" (` +
+            `"model" varchar NOT NULL, ` +
+            `"idHash" varchar NOT NULL, ` +
+            `"managementId" varchar NOT NULL, ` +
+            `"payload" text NOT NULL, ` +
+            `"grantIdHash" varchar, ` +
+            `"refreshFamilyId" varchar, ` +
+            `"userCodeHash" varchar, ` +
+            `"uidHash" varchar, ` +
+            `"consumedAt" integer, ` +
+            `"expiresAt" integer, ` +
+            `CONSTRAINT "PK_mcp_oauth_provider_artifact" PRIMARY KEY ("model", "idHash"))`);
+        await queryRunner.query(`INSERT INTO "temporary_mcp_module_oauth_provider_artifacts" (` +
+            `"model", "idHash", "managementId", "payload", "grantIdHash", "refreshFamilyId", ` +
+            `"userCodeHash", "uidHash", "consumedAt", "expiresAt") ` +
+            `SELECT "model", "idHash", ${managementIdExpression}, "payload", "grantIdHash", NULL, ` +
+            `"userCodeHash", "uidHash", "consumedAt", "expiresAt" ` +
+            `FROM "mcp_module_oauth_provider_artifacts"`);
+        await queryRunner.query(`UPDATE "temporary_mcp_module_oauth_provider_artifacts" AS "artifact" ` +
+            `SET "refreshFamilyId" = (` +
+            `SELECT MIN("family"."managementId") ` +
+            `FROM "temporary_mcp_module_oauth_provider_artifacts" AS "family" ` +
+            `WHERE "family"."model" = 'RefreshToken' ` +
+            `AND "family"."grantIdHash" = "artifact"."grantIdHash") ` +
+            `WHERE "artifact"."model" IN ('AccessToken', 'RefreshToken') ` +
+            `AND "artifact"."grantIdHash" IS NOT NULL`);
+        await queryRunner.query(`DROP TABLE "mcp_module_oauth_provider_artifacts"`);
+        await queryRunner.query(`ALTER TABLE "temporary_mcp_module_oauth_provider_artifacts" RENAME TO "mcp_module_oauth_provider_artifacts"`);
+        await this.createIndexes(queryRunner);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`CREATE TABLE "temporary_mcp_module_oauth_provider_artifacts" (` +
+            `"model" varchar NOT NULL, ` +
+            `"idHash" varchar NOT NULL, ` +
+            `"payload" text NOT NULL, ` +
+            `"grantIdHash" varchar, ` +
+            `"userCodeHash" varchar, ` +
+            `"uidHash" varchar, ` +
+            `"consumedAt" integer, ` +
+            `"expiresAt" integer, ` +
+            `CONSTRAINT "PK_mcp_oauth_provider_artifact" PRIMARY KEY ("model", "idHash"))`);
+        await queryRunner.query(`INSERT INTO "temporary_mcp_module_oauth_provider_artifacts" (` +
+            `"model", "idHash", "payload", "grantIdHash", "userCodeHash", "uidHash", "consumedAt", "expiresAt") ` +
+            `SELECT "model", "idHash", "payload", "grantIdHash", "userCodeHash", "uidHash", "consumedAt", "expiresAt" ` +
+            `FROM "mcp_module_oauth_provider_artifacts"`);
+        await queryRunner.query(`DROP TABLE "mcp_module_oauth_provider_artifacts"`);
+        await queryRunner.query(`ALTER TABLE "temporary_mcp_module_oauth_provider_artifacts" RENAME TO "mcp_module_oauth_provider_artifacts"`);
+        await this.createLegacyIndexes(queryRunner);
+    }
+    async createIndexes(queryRunner) {
+        await this.createLegacyIndexes(queryRunner);
+        await queryRunner.query(`CREATE UNIQUE INDEX "IDX_mcp_oauth_provider_artifact_management" ` +
+            `ON "mcp_module_oauth_provider_artifacts" ("managementId")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_provider_artifact_family" ` +
+            `ON "mcp_module_oauth_provider_artifacts" ("refreshFamilyId")`);
+    }
+    async createLegacyIndexes(queryRunner) {
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_provider_artifact_grant" ` +
+            `ON "mcp_module_oauth_provider_artifacts" ("grantIdHash")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_provider_artifact_user_code" ` +
+            `ON "mcp_module_oauth_provider_artifacts" ("userCodeHash")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_provider_artifact_uid" ` +
+            `ON "mcp_module_oauth_provider_artifacts" ("uidHash")`);
+        await queryRunner.query(`CREATE INDEX "IDX_mcp_oauth_provider_artifact_expiry" ` +
+            `ON "mcp_module_oauth_provider_artifacts" ("expiresAt")`);
+    }
+}
+exports.AddMcpOAuthProviderManagementIds1000000000013 = AddMcpOAuthProviderManagementIds1000000000013;
+//# sourceMappingURL=1000000000013-AddMcpOAuthProviderManagementIds.js.map

package/dist/migrations/1000000000013-AddMcpOAuthProviderManagementIds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1000000000013-AddMcpOAuthProviderManagementIds.js","sourceRoot":"","sources":["../../src/migrations/1000000000013-AddMcpOAuthProviderManagementIds.ts"],"names":[],"mappings":";;;AAEA,MAAM,sBAAsB,GAC3B,mEAAmE;IACnE,sFAAsF;IACtF,6DAA6D,CAAC;AAE/D,MAAa,6CAA6C;IAA1D;QACC,SAAI,GAAG,+CAA+C,CAAC;IAkGxD,CAAC;IAhGA,KAAK,CAAC,EAAE,CAAC,WAAwB;QAChC,MAAM,WAAW,CAAC,KAAK,CACtB,gEAAgE;YAC/D,4BAA4B;YAC5B,6BAA6B;YAC7B,mCAAmC;YACnC,2BAA2B;YAC3B,yBAAyB;YACzB,6BAA6B;YAC7B,0BAA0B;YAC1B,qBAAqB;YACrB,wBAAwB;YACxB,uBAAuB;YACvB,8EAA8E,CAC/E,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,+DAA+D;YAC9D,kFAAkF;YAClF,wDAAwD;YACxD,6BAA6B,sBAAsB,oCAAoC;YACvF,uDAAuD;YACvD,4CAA4C,CAC7C,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,uEAAuE;YACtE,2BAA2B;YAC1B,sCAAsC;YACtC,mEAAmE;YACnE,0CAA0C;YAC1C,yDAAyD;YAC1D,8DAA8D;YAC9D,0CAA0C,CAC3C,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAC5E,MAAM,WAAW,CAAC,KAAK,CACtB,6GAA6G,CAC7G,CAAC;QACF,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,WAAwB;QAClC,MAAM,WAAW,CAAC,KAAK,CACtB,gEAAgE;YAC/D,4BAA4B;YAC5B,6BAA6B;YAC7B,2BAA2B;YAC3B,yBAAyB;YACzB,0BAA0B;YAC1B,qBAAqB;YACrB,wBAAwB;YACxB,uBAAuB;YACvB,8EAA8E,CAC/E,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,+DAA+D;YAC9D,qGAAqG;YACrG,2GAA2G;YAC3G,4CAA4C,CAC7C,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAC5E,MAAM,WAAW,CAAC,KAAK,CACtB,6GAA6G,CAC7G,CAAC;QACF,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,WAAwB;QACnD,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,WAAW,CAAC,KAAK,CACtB,mEAAmE;YAClE,2DAA2D,CAC5D,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,wDAAwD;YACvD,8DAA8D,CAC/D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,WAAwB;QACzD,MAAM,WAAW,CAAC,KAAK,CACtB,uDAAuD;YACtD,0DAA0D,CAC3D,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,2DAA2D;YAC1D,2DAA2D,CAC5D,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,qDAAqD;YACpD,sDAAsD,CACvD,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,wDAAwD;YACvD,wDAAwD,CACzD,CAAC;IACH,CAAC;CACD;AAnGD,sGAmGC"}

package/dist/migrations/1000000000014-AddMcpOAuthProviderRefreshFamilyRevocations.d.ts

@@ -0,0 +1,6 @@
+import { MigrationInterface, QueryRunner } from 'typeorm';
+export declare class AddMcpOAuthProviderRefreshFamilyRevocations1000000000014 implements MigrationInterface {
+    name: string;
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}

package/dist/migrations/1000000000014-AddMcpOAuthProviderRefreshFamilyRevocations.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AddMcpOAuthProviderRefreshFamilyRevocations1000000000014 = void 0;
+class AddMcpOAuthProviderRefreshFamilyRevocations1000000000014 {
+    constructor() {
+        this.name = 'AddMcpOAuthProviderRefreshFamilyRevocations1000000000014';
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`CREATE TABLE "mcp_module_oauth_provider_revoked_refresh_families" (` +
+            `"refreshFamilyId" varchar PRIMARY KEY NOT NULL, ` +
+            `"revokedAt" integer NOT NULL)`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`DROP TABLE "mcp_module_oauth_provider_revoked_refresh_families"`);
+    }
+}
+exports.AddMcpOAuthProviderRefreshFamilyRevocations1000000000014 = AddMcpOAuthProviderRefreshFamilyRevocations1000000000014;
+//# sourceMappingURL=1000000000014-AddMcpOAuthProviderRefreshFamilyRevocations.js.map

package/dist/migrations/1000000000014-AddMcpOAuthProviderRefreshFamilyRevocations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1000000000014-AddMcpOAuthProviderRefreshFamilyRevocations.js","sourceRoot":"","sources":["../../src/migrations/1000000000014-AddMcpOAuthProviderRefreshFamilyRevocations.ts"],"names":[],"mappings":";;;AAEA,MAAa,wDAAwD;IAArE;QACC,SAAI,GAAG,0DAA0D,CAAC;IAanE,CAAC;IAXA,KAAK,CAAC,EAAE,CAAC,WAAwB;QAChC,MAAM,WAAW,CAAC,KAAK,CACtB,qEAAqE;YACpE,kDAAkD;YAClD,+BAA+B,CAChC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,WAAwB;QAClC,MAAM,WAAW,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;IAC5F,CAAC;CACD;AAdD,4HAcC"}

package/dist/migrations/1000000000015-AddMcpOAuthProviderRefreshFamilyLineage.d.ts

@@ -0,0 +1,6 @@
+import { MigrationInterface, QueryRunner } from 'typeorm';
+export declare class AddMcpOAuthProviderRefreshFamilyLineage1000000000015 implements MigrationInterface {
+    name: string;
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}

package/dist/migrations/1000000000015-AddMcpOAuthProviderRefreshFamilyLineage.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AddMcpOAuthProviderRefreshFamilyLineage1000000000015 = void 0;
+class AddMcpOAuthProviderRefreshFamilyLineage1000000000015 {
+    constructor() {
+        this.name = 'AddMcpOAuthProviderRefreshFamilyLineage1000000000015';
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`CREATE TABLE "mcp_module_oauth_provider_refresh_family_lineage" (` +
+            `"grantIdHash" varchar PRIMARY KEY NOT NULL, ` +
+            `"refreshFamilyId" varchar NOT NULL)`);
+        await queryRunner.query(`CREATE UNIQUE INDEX "IDX_mcp_oauth_provider_refresh_family_lineage_family" ` +
+            `ON "mcp_module_oauth_provider_refresh_family_lineage" ("refreshFamilyId")`);
+        await queryRunner.query(`INSERT OR IGNORE INTO "mcp_module_oauth_provider_refresh_family_lineage" ` +
+            `("grantIdHash", "refreshFamilyId") ` +
+            `SELECT "grantIdHash", MIN("refreshFamilyId") ` +
+            `FROM "mcp_module_oauth_provider_artifacts" ` +
+            `WHERE "model" = 'RefreshToken' AND "grantIdHash" IS NOT NULL AND "refreshFamilyId" IS NOT NULL ` +
+            `GROUP BY "grantIdHash"`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`DROP TABLE "mcp_module_oauth_provider_refresh_family_lineage"`);
+    }
+}
+exports.AddMcpOAuthProviderRefreshFamilyLineage1000000000015 = AddMcpOAuthProviderRefreshFamilyLineage1000000000015;
+//# sourceMappingURL=1000000000015-AddMcpOAuthProviderRefreshFamilyLineage.js.map

package/dist/migrations/1000000000015-AddMcpOAuthProviderRefreshFamilyLineage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1000000000015-AddMcpOAuthProviderRefreshFamilyLineage.js","sourceRoot":"","sources":["../../src/migrations/1000000000015-AddMcpOAuthProviderRefreshFamilyLineage.ts"],"names":[],"mappings":";;;AAEA,MAAa,oDAAoD;IAAjE;QACC,SAAI,GAAG,sDAAsD,CAAC;IAyB/D,CAAC;IAvBA,KAAK,CAAC,EAAE,CAAC,WAAwB;QAChC,MAAM,WAAW,CAAC,KAAK,CACtB,mEAAmE;YAClE,8CAA8C;YAC9C,qCAAqC,CACtC,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,6EAA6E;YAC5E,2EAA2E,CAC5E,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,2EAA2E;YAC1E,qCAAqC;YACrC,+CAA+C;YAC/C,6CAA6C;YAC7C,iGAAiG;YACjG,wBAAwB,CACzB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,WAAwB;QAClC,MAAM,WAAW,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAC1F,CAAC;CACD;AA1BD,oHA0BC"}

package/dist/migrations/1000000000016-AddMcpOAuthApproverAuthorities.d.ts

@@ -0,0 +1,6 @@
+import { MigrationInterface, QueryRunner } from 'typeorm';
+export declare class AddMcpOAuthApproverAuthorities1000000000016 implements MigrationInterface {
+    name: string;
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}

package/dist/migrations/1000000000016-AddMcpOAuthApproverAuthorities.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AddMcpOAuthApproverAuthorities1000000000016 = void 0;
+class AddMcpOAuthApproverAuthorities1000000000016 {
+    constructor() {
+        this.name = 'AddMcpOAuthApproverAuthorities1000000000016';
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`CREATE TABLE "mcp_module_oauth_approver_authorities" (` +
+            `"approverId" varchar PRIMARY KEY NOT NULL, "generation" integer NOT NULL DEFAULT (0))`);
+        await queryRunner.query(`INSERT INTO "mcp_module_oauth_approver_authorities" ("approverId", "generation") ` +
+            `SELECT "approvedById", MAX("approverAuthorityGeneration") FROM "mcp_module_oauth_grants" ` +
+            `WHERE "approvedById" IS NOT NULL GROUP BY "approvedById"`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`DROP TABLE "mcp_module_oauth_approver_authorities"`);
+    }
+}
+exports.AddMcpOAuthApproverAuthorities1000000000016 = AddMcpOAuthApproverAuthorities1000000000016;
+//# sourceMappingURL=1000000000016-AddMcpOAuthApproverAuthorities.js.map

package/dist/migrations/1000000000016-AddMcpOAuthApproverAuthorities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1000000000016-AddMcpOAuthApproverAuthorities.js","sourceRoot":"","sources":["../../src/migrations/1000000000016-AddMcpOAuthApproverAuthorities.ts"],"names":[],"mappings":";;;AAEA,MAAa,2CAA2C;IAAxD;QACC,SAAI,GAAG,6CAA6C,CAAC;IAiBtD,CAAC;IAfO,KAAK,CAAC,EAAE,CAAC,WAAwB;QACvC,MAAM,WAAW,CAAC,KAAK,CACtB,wDAAwD;YACvD,uFAAuF,CACxF,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACtB,mFAAmF;YAClF,2FAA2F;YAC3F,0DAA0D,CAC3D,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,WAAwB;QACzC,MAAM,WAAW,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC/E,CAAC;CACD;AAlBD,kGAkBC"}

package/dist/migrations/1000000000017-AddMcpOAuthAuthorizationSnapshots.d.ts

@@ -0,0 +1,6 @@
+import { MigrationInterface, QueryRunner } from 'typeorm';
+export declare class AddMcpOAuthAuthorizationSnapshots1000000000017 implements MigrationInterface {
+    name: string;
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}