@headless-lms/adapter-db 0.1.0

package/dist/schema/content.js

@@ -0,0 +1,163 @@
+import { organizations } from "./organizations.js";
+import { assets } from "./assets.js";
+import { sql } from "drizzle-orm";
+import { check, foreignKey, integer, jsonb, pgTable, primaryKey, text, timestamp, unique } from "drizzle-orm/pg-core";
+import { genId } from "@headless-lms/core/shared/id";
+//#region src/schema/content.ts
+const contentItems = pgTable("content_items", {
+	orgId: text("org_id").notNull().references(() => organizations.id),
+	id: text("id").notNull(),
+	type: text("type", { enum: ["course", "download"] }).notNull(),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow()
+}, (t) => ({
+	pk: primaryKey({ columns: [t.orgId, t.id] }),
+	typeUq: unique().on(t.orgId, t.id, t.type),
+	typeCk: check("content_items_type_check", sql`${t.type} in ('course', 'download')`)
+}));
+const courses = pgTable("courses", {
+	orgId: text("org_id").notNull().references(() => organizations.id),
+	id: text("id").notNull().$defaultFn(() => genId("course")),
+	type: text("type").$type().notNull().generatedAlwaysAs(sql`'course'`),
+	title: text("title").notNull(),
+	slug: text("slug").notNull(),
+	description: text("description").notNull().default(""),
+	status: text("status", { enum: ["draft", "published"] }).notNull().default("draft"),
+	category: text("category").notNull().default(""),
+	thumbnailAssetId: text("thumbnail_asset_id"),
+	settings: jsonb("settings").$type().notNull().default({}),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow().$onUpdate(() => /* @__PURE__ */ new Date())
+}, (t) => ({
+	pk: primaryKey({ columns: [t.orgId, t.id] }),
+	slugUq: unique().on(t.orgId, t.slug),
+	contentItemFk: foreignKey({
+		columns: [
+			t.orgId,
+			t.id,
+			t.type
+		],
+		foreignColumns: [
+			contentItems.orgId,
+			contentItems.id,
+			contentItems.type
+		]
+	}).onDelete("cascade"),
+	thumbnailAssetFk: foreignKey({
+		columns: [t.orgId, t.thumbnailAssetId],
+		foreignColumns: [assets.orgId, assets.id]
+	})
+}));
+const modules = pgTable("modules", {
+	orgId: text("org_id").notNull().references(() => organizations.id),
+	id: text("id").notNull().$defaultFn(() => genId("module")),
+	courseId: text("course_id").notNull(),
+	title: text("title").notNull(),
+	seq: integer("seq").notNull(),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow().$onUpdate(() => /* @__PURE__ */ new Date())
+}, (t) => ({
+	pk: primaryKey({ columns: [t.orgId, t.id] }),
+	courseFk: foreignKey({
+		columns: [t.orgId, t.courseId],
+		foreignColumns: [courses.orgId, courses.id]
+	}).onDelete("cascade"),
+	courseUq: unique().on(t.orgId, t.id, t.courseId)
+}));
+const activities = pgTable("activities", {
+	orgId: text("org_id").notNull().references(() => organizations.id),
+	id: text("id").notNull().$defaultFn(() => genId("activity")),
+	moduleId: text("module_id").notNull(),
+	courseId: text("course_id").notNull(),
+	seq: integer("seq").notNull(),
+	settings: jsonb("settings").$type(),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow().$onUpdate(() => /* @__PURE__ */ new Date())
+}, (t) => ({
+	pk: primaryKey({ columns: [t.orgId, t.id] }),
+	moduleFk: foreignKey({
+		columns: [
+			t.orgId,
+			t.moduleId,
+			t.courseId
+		],
+		foreignColumns: [
+			modules.orgId,
+			modules.id,
+			modules.courseId
+		]
+	}).onDelete("cascade"),
+	seqUq: unique().on(t.orgId, t.moduleId, t.seq)
+}));
+const activityAssets = pgTable("activity_assets", {
+	orgId: text("org_id").notNull().references(() => organizations.id),
+	id: text("id").notNull().$defaultFn(() => genId("activityAsset")),
+	activityId: text("activity_id").notNull(),
+	assetId: text("asset_id").notNull(),
+	seq: integer("seq").notNull().default(0)
+}, (t) => ({
+	pk: primaryKey({ columns: [t.orgId, t.id] }),
+	activityFk: foreignKey({
+		columns: [t.orgId, t.activityId],
+		foreignColumns: [activities.orgId, activities.id]
+	}).onDelete("cascade"),
+	assetFk: foreignKey({
+		columns: [t.orgId, t.assetId],
+		foreignColumns: [assets.orgId, assets.id]
+	}),
+	activityAssetUq: unique().on(t.orgId, t.activityId, t.assetId)
+}));
+const downloads = pgTable("downloads", {
+	orgId: text("org_id").notNull().references(() => organizations.id),
+	id: text("id").notNull().$defaultFn(() => genId("download")),
+	type: text("type").$type().notNull().generatedAlwaysAs(sql`'download'`),
+	title: text("title").notNull(),
+	slug: text("slug").notNull(),
+	description: text("description").notNull().default(""),
+	status: text("status", { enum: ["draft", "published"] }).notNull().default("draft"),
+	category: text("category").notNull().default(""),
+	thumbnailAssetId: text("thumbnail_asset_id"),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow().$onUpdate(() => /* @__PURE__ */ new Date())
+}, (t) => ({
+	pk: primaryKey({ columns: [t.orgId, t.id] }),
+	slugUq: unique().on(t.orgId, t.slug),
+	contentItemFk: foreignKey({
+		columns: [
+			t.orgId,
+			t.id,
+			t.type
+		],
+		foreignColumns: [
+			contentItems.orgId,
+			contentItems.id,
+			contentItems.type
+		]
+	}).onDelete("cascade"),
+	thumbnailFk: foreignKey({
+		columns: [t.orgId, t.thumbnailAssetId],
+		foreignColumns: [assets.orgId, assets.id]
+	})
+}));
+const downloadAssets = pgTable("download_assets", {
+	orgId: text("org_id").notNull().references(() => organizations.id),
+	id: text("id").notNull().$defaultFn(() => genId("downloadAsset")),
+	downloadId: text("download_id").notNull(),
+	assetId: text("asset_id").notNull(),
+	seq: integer("seq").notNull().default(0),
+	displayName: text("display_name")
+}, (t) => ({
+	pk: primaryKey({ columns: [t.orgId, t.id] }),
+	downloadFk: foreignKey({
+		columns: [t.orgId, t.downloadId],
+		foreignColumns: [downloads.orgId, downloads.id]
+	}).onDelete("cascade"),
+	assetFk: foreignKey({
+		columns: [t.orgId, t.assetId],
+		foreignColumns: [assets.orgId, assets.id]
+	}),
+	downloadAssetUq: unique().on(t.orgId, t.downloadId, t.assetId)
+}));
+//#endregion
+export { activities, activityAssets, contentItems, courses, downloadAssets, downloads, modules };
+
+//# sourceMappingURL=content.js.map

package/dist/schema/content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.js","names":[],"sources":["../../src/schema/content.ts"],"sourcesContent":["// content tables — the content domain (owns all content types; today: course).\n// Course type: Course → Module → Activity, where an Activity is the leaf sitting\n// directly in a module. An Activity is UNIFORM content — the domain does not\n// categorise it: a `seq`, and an opaque `settings` jsonb blob holding whatever\n// that content needs (title, type, body, completion rule, …). Assets are the one\n// thing kept OUT of the blob (owned by the assets domain) and linked via the\n// many-to-many `activity_assets`. Org-scoped: composite (org_id, id) keys.\nimport {\n  pgTable,\n  text,\n  integer,\n  jsonb,\n  timestamp,\n  primaryKey,\n  foreignKey,\n  unique,\n  check,\n} from 'drizzle-orm/pg-core';\nimport { sql } from 'drizzle-orm';\nimport type {\n  Activity,\n  ActivityAsset,\n  ContentItem,\n  Course,\n  Download,\n  DownloadAsset,\n  Module,\n} from '@headless-lms/core/schemas';\nimport { genId } from '@headless-lms/core/shared/id';\nimport { organizations } from './organizations.js';\nimport { assets } from './assets.js';\nimport type { Expect, NoDrift } from './drift.js';\n\n// The content registry (supertype table): one row per piece of content, any\n// type. A concrete content table shares its PK with a registry row (same id)\n// and references it via a type-pinned composite FK; the generic entitlements\n// table FKs here, so it never changes when a content type is added. Deletes go\n// through this table (cascade to the concrete row and the grants).\nexport const contentItems = pgTable(\n  'content_items',\n  {\n    orgId: text('org_id')\n      .notNull()\n      .references(() => organizations.id),\n    id: text('id').notNull(),\n    type: text('type', { enum: ['course', 'download'] }).notNull(),\n    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),\n  },\n  (t) => ({\n    pk: primaryKey({ columns: [t.orgId, t.id] }),\n    // FK target for type-pinned references from concrete content tables.\n    typeUq: unique().on(t.orgId, t.id, t.type),\n    // Widened per new content type.\n    typeCk: check('content_items_type_check', sql`${t.type} in ('course', 'download')`),\n  }),\n);\n\nexport const courses = pgTable(\n  'courses',\n  {\n    orgId: text('org_id')\n      .notNull()\n      .references(() => organizations.id),\n    id: text('id')\n      .notNull()\n      .$defaultFn(() => genId('course')),\n    // Pinned to 'course' so the composite FK below cannot attach this row to a\n    // registry row of another content type.\n    type: text('type')\n      .$type<Course['type']>()\n      .notNull()\n      .generatedAlwaysAs(sql`'course'`),\n    title: text('title').notNull(),\n    slug: text('slug').notNull(),\n    description: text('description').notNull().default(''),\n    status: text('status', { enum: ['draft', 'published'] })\n      .notNull()\n      .default('draft'),\n    category: text('category').notNull().default(''),\n    // Media-library asset rendered as the course's cover. Null = no cover.\n    thumbnailAssetId: text('thumbnail_asset_id'),\n    // Course-wide delivery toggles (CourseSettings). Modelled, unlike the\n    // per-activity blob: a fixed surface the API validates.\n    settings: jsonb('settings').$type<Course['settings']>().notNull().default({}),\n    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),\n    updatedAt: timestamp('updated_at', { withTimezone: true })\n      .notNull()\n      .defaultNow()\n      .$onUpdate(() => new Date()),\n  },\n  (t) => ({\n    pk: primaryKey({ columns: [t.orgId, t.id] }),\n    slugUq: unique().on(t.orgId, t.slug),\n    contentItemFk: foreignKey({\n      columns: [t.orgId, t.id, t.type],\n      foreignColumns: [contentItems.orgId, contentItems.id, contentItems.type],\n    }).onDelete('cascade'),\n    // Restrictive, like `activity_assets.assetFk` — the asset is owned by the\n    // assets domain and must be unlinked before it can be deleted. MATCH SIMPLE\n    // means the constraint is skipped entirely while the thumbnail is null.\n    thumbnailAssetFk: foreignKey({\n      columns: [t.orgId, t.thumbnailAssetId],\n      foreignColumns: [assets.orgId, assets.id],\n    }),\n  }),\n);\n\nexport const modules = pgTable(\n  'modules',\n  {\n    orgId: text('org_id')\n      .notNull()\n      .references(() => organizations.id),\n    id: text('id')\n      .notNull()\n      .$defaultFn(() => genId('module')),\n    courseId: text('course_id').notNull(),\n    title: text('title').notNull(),\n    seq: integer('seq').notNull(),\n    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),\n    updatedAt: timestamp('updated_at', { withTimezone: true })\n      .notNull()\n      .defaultNow()\n      .$onUpdate(() => new Date()),\n  },\n  (t) => ({\n    pk: primaryKey({ columns: [t.orgId, t.id] }),\n    // Modules are part of the course aggregate: deleting the course deletes them.\n    courseFk: foreignKey({\n      columns: [t.orgId, t.courseId],\n      foreignColumns: [courses.orgId, courses.id],\n    }).onDelete('cascade'),\n    // FK target for the course-pinned reference from activities.\n    courseUq: unique().on(t.orgId, t.id, t.courseId),\n  }),\n);\n\n// The leaf, directly in a module. Uniform content: seq + opaque settings blob.\nexport const activities = pgTable(\n  'activities',\n  {\n    orgId: text('org_id')\n      .notNull()\n      .references(() => organizations.id),\n    id: text('id')\n      .notNull()\n      .$defaultFn(() => genId('activity')),\n    moduleId: text('module_id').notNull(),\n    // Denormalised from the module: the course an activity belongs to is asked\n    // for far more often than its module (progress, discussion, entitlements),\n    // and the FK below pins the pair, so it cannot disagree with the module.\n    courseId: text('course_id').notNull(),\n    seq: integer('seq').notNull(),\n    // Opaque per-activity blob: title, type, body, completion rule — whatever the\n    // content needs. Assets are the one thing kept out of the blob.\n    settings: jsonb('settings').$type<Activity['settings']>(),\n    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),\n    updatedAt: timestamp('updated_at', { withTimezone: true })\n      .notNull()\n      .defaultNow()\n      .$onUpdate(() => new Date()),\n  },\n  (t) => ({\n    pk: primaryKey({ columns: [t.orgId, t.id] }),\n    // Course-pinned, like `courses.contentItemFk`: the module reference carries\n    // `course_id`, so an activity whose stored course disagrees with its\n    // module's is rejected by the database rather than silently rotting.\n    moduleFk: foreignKey({\n      columns: [t.orgId, t.moduleId, t.courseId],\n      foreignColumns: [modules.orgId, modules.id, modules.courseId],\n    }).onDelete('cascade'),\n    seqUq: unique().on(t.orgId, t.moduleId, t.seq),\n  }),\n);\n\n// activity ↔ asset: many-to-many (an activity uses many assets; an asset can be\n// reused by many activities). Assets owned by the assets domain, tracked here.\nexport const activityAssets = pgTable(\n  'activity_assets',\n  {\n    orgId: text('org_id')\n      .notNull()\n      .references(() => organizations.id),\n    id: text('id')\n      .notNull()\n      .$defaultFn(() => genId('activityAsset')),\n    activityId: text('activity_id').notNull(),\n    assetId: text('asset_id').notNull(),\n    seq: integer('seq').notNull().default(0),\n  },\n  (t) => ({\n    pk: primaryKey({ columns: [t.orgId, t.id] }),\n    // The link cascades with its activity; the asset itself is owned by the\n    // assets domain and survives (assetFk stays restrictive).\n    activityFk: foreignKey({\n      columns: [t.orgId, t.activityId],\n      foreignColumns: [activities.orgId, activities.id],\n    }).onDelete('cascade'),\n    assetFk: foreignKey({\n      columns: [t.orgId, t.assetId],\n      foreignColumns: [assets.orgId, assets.id],\n    }),\n    activityAssetUq: unique().on(t.orgId, t.activityId, t.assetId),\n  }),\n);\n\n// A download: an ordered set of media-library assets. Shares its PK with a\n// registry row (same id) via the type-pinned composite FK, exactly like courses.\nexport const downloads = pgTable(\n  'downloads',\n  {\n    orgId: text('org_id')\n      .notNull()\n      .references(() => organizations.id),\n    id: text('id')\n      .notNull()\n      .$defaultFn(() => genId('download')),\n    // Pinned to 'download' so the composite FK below cannot attach this row to\n    // a registry row of another content type.\n    type: text('type')\n      .$type<Download['type']>()\n      .notNull()\n      .generatedAlwaysAs(sql`'download'`),\n    title: text('title').notNull(),\n    slug: text('slug').notNull(),\n    description: text('description').notNull().default(''),\n    status: text('status', { enum: ['draft', 'published'] })\n      .notNull()\n      .default('draft'),\n    category: text('category').notNull().default(''),\n    thumbnailAssetId: text('thumbnail_asset_id'),\n    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),\n    updatedAt: timestamp('updated_at', { withTimezone: true })\n      .notNull()\n      .defaultNow()\n      .$onUpdate(() => new Date()),\n  },\n  (t) => ({\n    pk: primaryKey({ columns: [t.orgId, t.id] }),\n    slugUq: unique().on(t.orgId, t.slug),\n    contentItemFk: foreignKey({\n      columns: [t.orgId, t.id, t.type],\n      foreignColumns: [contentItems.orgId, contentItems.id, contentItems.type],\n    }).onDelete('cascade'),\n    // Restrictive: a thumbnail in use blocks deleting the asset.\n    thumbnailFk: foreignKey({\n      columns: [t.orgId, t.thumbnailAssetId],\n      foreignColumns: [assets.orgId, assets.id],\n    }),\n  }),\n);\n\n// download ↔ asset: the ordered set. Mirrors activity_assets one level\n// shallower — a download has no intermediate structure.\nexport const downloadAssets = pgTable(\n  'download_assets',\n  {\n    orgId: text('org_id')\n      .notNull()\n      .references(() => organizations.id),\n    id: text('id')\n      .notNull()\n      .$defaultFn(() => genId('downloadAsset')),\n    downloadId: text('download_id').notNull(),\n    assetId: text('asset_id').notNull(),\n    seq: integer('seq').notNull().default(0),\n    // Author's label; null falls back to the asset's filename.\n    displayName: text('display_name'),\n  },\n  (t) => ({\n    pk: primaryKey({ columns: [t.orgId, t.id] }),\n    // The link cascades with its download; the asset is owned by the assets\n    // domain and survives (assetFk stays restrictive).\n    downloadFk: foreignKey({\n      columns: [t.orgId, t.downloadId],\n      foreignColumns: [downloads.orgId, downloads.id],\n    }).onDelete('cascade'),\n    assetFk: foreignKey({\n      columns: [t.orgId, t.assetId],\n      foreignColumns: [assets.orgId, assets.id],\n    }),\n    // Lets delivery key on asset_id rather than the link row id.\n    downloadAssetUq: unique().on(t.orgId, t.downloadId, t.assetId),\n  }),\n);\n\ntype _ContentItemsDrift = Expect<NoDrift<typeof contentItems.$inferSelect, ContentItem>>;\ntype _CoursesDrift = Expect<NoDrift<typeof courses.$inferSelect, Course>>;\ntype _ModulesDrift = Expect<NoDrift<typeof modules.$inferSelect, Module>>;\ntype _ActivitiesDrift = Expect<NoDrift<typeof activities.$inferSelect, Activity>>;\ntype _ActivityAssetsDrift = Expect<NoDrift<typeof activityAssets.$inferSelect, ActivityAsset>>;\ntype _DownloadsDrift = Expect<NoDrift<typeof downloads.$inferSelect, Download>>;\ntype _DownloadAssetsDrift = Expect<NoDrift<typeof downloadAssets.$inferSelect, DownloadAsset>>;\n"],"mappings":";;;;;;AAsCA,MAAa,eAAe,QAC1B,iBACA;CACE,OAAO,KAAK,QAAQ,CAAC,CAClB,QAAQ,CAAC,CACT,iBAAiB,cAAc,EAAE;CACpC,IAAI,KAAK,IAAI,CAAC,CAAC,QAAQ;CACvB,MAAM,KAAK,QAAQ,EAAE,MAAM,CAAC,UAAU,UAAU,EAAE,CAAC,CAAC,CAAC,QAAQ;CAC7D,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,WAAW;AAClF,IACC,OAAO;CACN,IAAI,WAAW,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;CAE3C,QAAQ,OAAO,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI;CAEzC,QAAQ,MAAM,4BAA4B,GAAG,GAAG,EAAE,KAAK,2BAA2B;AACpF,EACF;AAEA,MAAa,UAAU,QACrB,WACA;CACE,OAAO,KAAK,QAAQ,CAAC,CAClB,QAAQ,CAAC,CACT,iBAAiB,cAAc,EAAE;CACpC,IAAI,KAAK,IAAI,CAAC,CACX,QAAQ,CAAC,CACT,iBAAiB,MAAM,QAAQ,CAAC;CAGnC,MAAM,KAAK,MAAM,CAAC,CACf,MAAsB,CAAC,CACvB,QAAQ,CAAC,CACT,kBAAkB,GAAG,UAAU;CAClC,OAAO,KAAK,OAAO,CAAC,CAAC,QAAQ;CAC7B,MAAM,KAAK,MAAM,CAAC,CAAC,QAAQ;CAC3B,aAAa,KAAK,aAAa,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;CACrD,QAAQ,KAAK,UAAU,EAAE,MAAM,CAAC,SAAS,WAAW,EAAE,CAAC,CAAC,CACrD,QAAQ,CAAC,CACT,QAAQ,OAAO;CAClB,UAAU,KAAK,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;CAE/C,kBAAkB,KAAK,oBAAoB;CAG3C,UAAU,MAAM,UAAU,CAAC,CAAC,MAA0B,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC;CAC5E,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,WAAW;CAChF,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CACvD,QAAQ,CAAC,CACT,WAAW,CAAC,CACZ,gCAAgB,IAAI,KAAK,CAAC;AAC/B,IACC,OAAO;CACN,IAAI,WAAW,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;CAC3C,QAAQ,OAAO,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI;CACnC,eAAe,WAAW;EACxB,SAAS;GAAC,EAAE;GAAO,EAAE;GAAI,EAAE;EAAI;EAC/B,gBAAgB;GAAC,aAAa;GAAO,aAAa;GAAI,aAAa;EAAI;CACzE,CAAC,CAAC,CAAC,SAAS,SAAS;CAIrB,kBAAkB,WAAW;EAC3B,SAAS,CAAC,EAAE,OAAO,EAAE,gBAAgB;EACrC,gBAAgB,CAAC,OAAO,OAAO,OAAO,EAAE;CAC1C,CAAC;AACH,EACF;AAEA,MAAa,UAAU,QACrB,WACA;CACE,OAAO,KAAK,QAAQ,CAAC,CAClB,QAAQ,CAAC,CACT,iBAAiB,cAAc,EAAE;CACpC,IAAI,KAAK,IAAI,CAAC,CACX,QAAQ,CAAC,CACT,iBAAiB,MAAM,QAAQ,CAAC;CACnC,UAAU,KAAK,WAAW,CAAC,CAAC,QAAQ;CACpC,OAAO,KAAK,OAAO,CAAC,CAAC,QAAQ;CAC7B,KAAK,QAAQ,KAAK,CAAC,CAAC,QAAQ;CAC5B,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,WAAW;CAChF,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CACvD,QAAQ,CAAC,CACT,WAAW,CAAC,CACZ,gCAAgB,IAAI,KAAK,CAAC;AAC/B,IACC,OAAO;CACN,IAAI,WAAW,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;CAE3C,UAAU,WAAW;EACnB,SAAS,CAAC,EAAE,OAAO,EAAE,QAAQ;EAC7B,gBAAgB,CAAC,QAAQ,OAAO,QAAQ,EAAE;CAC5C,CAAC,CAAC,CAAC,SAAS,SAAS;CAErB,UAAU,OAAO,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ;AACjD,EACF;AAGA,MAAa,aAAa,QACxB,cACA;CACE,OAAO,KAAK,QAAQ,CAAC,CAClB,QAAQ,CAAC,CACT,iBAAiB,cAAc,EAAE;CACpC,IAAI,KAAK,IAAI,CAAC,CACX,QAAQ,CAAC,CACT,iBAAiB,MAAM,UAAU,CAAC;CACrC,UAAU,KAAK,WAAW,CAAC,CAAC,QAAQ;CAIpC,UAAU,KAAK,WAAW,CAAC,CAAC,QAAQ;CACpC,KAAK,QAAQ,KAAK,CAAC,CAAC,QAAQ;CAG5B,UAAU,MAAM,UAAU,CAAC,CAAC,MAA4B;CACxD,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,WAAW;CAChF,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CACvD,QAAQ,CAAC,CACT,WAAW,CAAC,CACZ,gCAAgB,IAAI,KAAK,CAAC;AAC/B,IACC,OAAO;CACN,IAAI,WAAW,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;CAI3C,UAAU,WAAW;EACnB,SAAS;GAAC,EAAE;GAAO,EAAE;GAAU,EAAE;EAAQ;EACzC,gBAAgB;GAAC,QAAQ;GAAO,QAAQ;GAAI,QAAQ;EAAQ;CAC9D,CAAC,CAAC,CAAC,SAAS,SAAS;CACrB,OAAO,OAAO,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG;AAC/C,EACF;AAIA,MAAa,iBAAiB,QAC5B,mBACA;CACE,OAAO,KAAK,QAAQ,CAAC,CAClB,QAAQ,CAAC,CACT,iBAAiB,cAAc,EAAE;CACpC,IAAI,KAAK,IAAI,CAAC,CACX,QAAQ,CAAC,CACT,iBAAiB,MAAM,eAAe,CAAC;CAC1C,YAAY,KAAK,aAAa,CAAC,CAAC,QAAQ;CACxC,SAAS,KAAK,UAAU,CAAC,CAAC,QAAQ;CAClC,KAAK,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC;AACzC,IACC,OAAO;CACN,IAAI,WAAW,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;CAG3C,YAAY,WAAW;EACrB,SAAS,CAAC,EAAE,OAAO,EAAE,UAAU;EAC/B,gBAAgB,CAAC,WAAW,OAAO,WAAW,EAAE;CAClD,CAAC,CAAC,CAAC,SAAS,SAAS;CACrB,SAAS,WAAW;EAClB,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO;EAC5B,gBAAgB,CAAC,OAAO,OAAO,OAAO,EAAE;CAC1C,CAAC;CACD,iBAAiB,OAAO,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO;AAC/D,EACF;AAIA,MAAa,YAAY,QACvB,aACA;CACE,OAAO,KAAK,QAAQ,CAAC,CAClB,QAAQ,CAAC,CACT,iBAAiB,cAAc,EAAE;CACpC,IAAI,KAAK,IAAI,CAAC,CACX,QAAQ,CAAC,CACT,iBAAiB,MAAM,UAAU,CAAC;CAGrC,MAAM,KAAK,MAAM,CAAC,CACf,MAAwB,CAAC,CACzB,QAAQ,CAAC,CACT,kBAAkB,GAAG,YAAY;CACpC,OAAO,KAAK,OAAO,CAAC,CAAC,QAAQ;CAC7B,MAAM,KAAK,MAAM,CAAC,CAAC,QAAQ;CAC3B,aAAa,KAAK,aAAa,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;CACrD,QAAQ,KAAK,UAAU,EAAE,MAAM,CAAC,SAAS,WAAW,EAAE,CAAC,CAAC,CACrD,QAAQ,CAAC,CACT,QAAQ,OAAO;CAClB,UAAU,KAAK,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;CAC/C,kBAAkB,KAAK,oBAAoB;CAC3C,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,WAAW;CAChF,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CACvD,QAAQ,CAAC,CACT,WAAW,CAAC,CACZ,gCAAgB,IAAI,KAAK,CAAC;AAC/B,IACC,OAAO;CACN,IAAI,WAAW,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;CAC3C,QAAQ,OAAO,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI;CACnC,eAAe,WAAW;EACxB,SAAS;GAAC,EAAE;GAAO,EAAE;GAAI,EAAE;EAAI;EAC/B,gBAAgB;GAAC,aAAa;GAAO,aAAa;GAAI,aAAa;EAAI;CACzE,CAAC,CAAC,CAAC,SAAS,SAAS;CAErB,aAAa,WAAW;EACtB,SAAS,CAAC,EAAE,OAAO,EAAE,gBAAgB;EACrC,gBAAgB,CAAC,OAAO,OAAO,OAAO,EAAE;CAC1C,CAAC;AACH,EACF;AAIA,MAAa,iBAAiB,QAC5B,mBACA;CACE,OAAO,KAAK,QAAQ,CAAC,CAClB,QAAQ,CAAC,CACT,iBAAiB,cAAc,EAAE;CACpC,IAAI,KAAK,IAAI,CAAC,CACX,QAAQ,CAAC,CACT,iBAAiB,MAAM,eAAe,CAAC;CAC1C,YAAY,KAAK,aAAa,CAAC,CAAC,QAAQ;CACxC,SAAS,KAAK,UAAU,CAAC,CAAC,QAAQ;CAClC,KAAK,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC;CAEvC,aAAa,KAAK,cAAc;AAClC,IACC,OAAO;CACN,IAAI,WAAW,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;CAG3C,YAAY,WAAW;EACrB,SAAS,CAAC,EAAE,OAAO,EAAE,UAAU;EAC/B,gBAAgB,CAAC,UAAU,OAAO,UAAU,EAAE;CAChD,CAAC,CAAC,CAAC,SAAS,SAAS;CACrB,SAAS,WAAW;EAClB,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO;EAC5B,gBAAgB,CAAC,OAAO,OAAO,OAAO,EAAE;CAC1C,CAAC;CAED,iBAAiB,OAAO,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO;AAC/D,EACF"}

package/dist/schema/credentials.d.ts

@@ -0,0 +1,113 @@
+//#region src/schema/credentials.d.ts
+declare const credentials: import("drizzle-orm/pg-core").PgTableWithColumns<{
+  name: "credentials";
+  schema: undefined;
+  columns: {
+    orgId: import("drizzle-orm/pg-core").PgColumn<{
+      name: "org_id";
+      tableName: "credentials";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    id: import("drizzle-orm/pg-core").PgColumn<{
+      name: "id";
+      tableName: "credentials";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    ciphertext: import("drizzle-orm/pg-core").PgColumn<{
+      name: "ciphertext";
+      tableName: "credentials";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    keyVersion: import("drizzle-orm/pg-core").PgColumn<{
+      name: "key_version";
+      tableName: "credentials";
+      dataType: "number";
+      columnType: "PgInteger";
+      data: number;
+      driverParam: string | number;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    createdAt: import("drizzle-orm/pg-core").PgColumn<{
+      name: "created_at";
+      tableName: "credentials";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    updatedAt: import("drizzle-orm/pg-core").PgColumn<{
+      name: "updated_at";
+      tableName: "credentials";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+  };
+  dialect: "pg";
+}>;
+//#endregion
+export { credentials };
+//# sourceMappingURL=credentials.d.ts.map

package/dist/schema/credentials.js

@@ -0,0 +1,15 @@
+import { organizations } from "./organizations.js";
+import { integer, pgTable, primaryKey, text, timestamp } from "drizzle-orm/pg-core";
+//#region src/schema/credentials.ts
+const credentials = pgTable("credentials", {
+	orgId: text("org_id").notNull().references(() => organizations.id),
+	id: text("id").notNull(),
+	ciphertext: text("ciphertext").notNull(),
+	keyVersion: integer("key_version").notNull().default(1),
+	createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
+}, (t) => ({ pk: primaryKey({ columns: [t.orgId, t.id] }) }));
+//#endregion
+export { credentials };
+
+//# sourceMappingURL=credentials.js.map

package/dist/schema/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","names":[],"sources":["../../src/schema/credentials.ts"],"sourcesContent":["// credentials — the shared secure credential store. One row per secret,\n// org-scoped with the standard composite (org_id, id) key. `ciphertext` is\n// base64(iv ‖ auth tag ‖ data), AES-256-GCM with AAD = `${orgId}:${id}`, so a\n// row's payload cannot be decrypted if copied to another row or org.\n// `key_version` names the encryption key used, enabling rotation later.\nimport { pgTable, text, integer, timestamp, primaryKey } from 'drizzle-orm/pg-core';\nimport type { Credential } from '@headless-lms/core/schemas';\nimport { organizations } from './organizations.js';\nimport type { Expect, NoDrift } from './drift.js';\n\nexport const credentials = pgTable(\n  'credentials',\n  {\n    orgId: text('org_id')\n      .notNull()\n      .references(() => organizations.id),\n    id: text('id').notNull(),\n    ciphertext: text('ciphertext').notNull(),\n    keyVersion: integer('key_version').notNull().default(1),\n    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),\n    updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),\n  },\n  (t) => ({ pk: primaryKey({ columns: [t.orgId, t.id] }) }),\n);\n\ntype _CredentialsDrift = Expect<NoDrift<typeof credentials.$inferSelect, Credential>>;\n"],"mappings":";;;AAUA,MAAa,cAAc,QACzB,eACA;CACE,OAAO,KAAK,QAAQ,CAAC,CAClB,QAAQ,CAAC,CACT,iBAAiB,cAAc,EAAE;CACpC,IAAI,KAAK,IAAI,CAAC,CAAC,QAAQ;CACvB,YAAY,KAAK,YAAY,CAAC,CAAC,QAAQ;CACvC,YAAY,QAAQ,aAAa,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC;CACtD,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,WAAW;CAChF,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,WAAW;AAClF,IACC,OAAO,EAAE,IAAI,WAAW,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,EACzD"}