@hilbras/keystone 1.6.0 → 2.5.0

package/src/db/index.ts

@@ -1,53 +0,0 @@
-import { drizzle } from "drizzle-orm/postgres-js";
-import postgres from "postgres";
-import type { PostgresJsDatabase } from "drizzle-orm/postgres-js";
-import { config } from "../config.js";
-import * as schema from "./schema.js";
-
-let dbClient: postgres.Sql | null = null;
-
-/**
- * Live binding for the Drizzle database client. Re-assigned by `initDb()` once
- * DATABASE_URL is known. ES module imports see the updated value, so existing
- * code that imports `db` continues to work after configuration changes.
- */
-export let db: PostgresJsDatabase<typeof schema>;
-
-export function initDb(): void {
-  const databaseUrl = config.DATABASE_URL;
-  if (!databaseUrl) {
-    throw new Error("DATABASE_URL is not configured");
-  }
-  if (dbClient) {
-    dbClient.end().catch(() => {});
-  }
-  dbClient = postgres(databaseUrl, { max: 10 });
-  db = drizzle(dbClient, { schema });
-}
-
-export function getDb(): PostgresJsDatabase<typeof schema> {
-  if (!db) {
-    initDb();
-  }
-  return db;
-}
-
-/**
- * Close the underlying connection pool. Used on graceful shutdown and in tests
- * so pooled sockets do not keep the Node process alive after work is done.
- */
-export async function closeDb(): Promise<void> {
-  if (dbClient) {
-    const client = dbClient;
-    dbClient = null;
-    await client.end({ timeout: 5 });
-  }
-}
-
-export { schema };
-
-// Initialize immediately when DATABASE_URL is available so existing code paths
-// keep working without an explicit initDb() call.
-if (config.DATABASE_URL) {
-  initDb();
-}

package/src/db/migrations/0000_skinny_ben_parker.sql

@@ -1,553 +0,0 @@
-CREATE TABLE IF NOT EXISTS "api_keys" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"user_id" uuid,
-	"service_account_id" uuid,
-	"org_id" uuid,
-	"app_id" uuid,
-	"name" text,
-	"prefix" text NOT NULL,
-	"key_hash" text NOT NULL,
-	"scopes" text[] DEFAULT '{"api:read"}'::text[] NOT NULL,
-	"last_used_at" timestamp with time zone,
-	"expires_at" timestamp with time zone,
-	"revoked_at" timestamp with time zone,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "applications" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"org_id" uuid NOT NULL,
-	"client_id" text NOT NULL,
-	"client_secret_hash" text NOT NULL,
-	"name" text NOT NULL,
-	"redirect_uris" text[] DEFAULT '{}'::text[] NOT NULL,
-	"allowed_origins" text[] DEFAULT '{}'::text[] NOT NULL,
-	"branding" jsonb DEFAULT '{}'::jsonb NOT NULL,
-	"is_active" boolean DEFAULT true NOT NULL,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
-	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
-	CONSTRAINT "applications_client_id_unique" UNIQUE("client_id")
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "audit_log" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"user_id" uuid,
-	"org_id" uuid,
-	"app_id" uuid,
-	"request_id" text,
-	"event" varchar(64) NOT NULL,
-	"ip_address" text,
-	"user_agent" text,
-	"metadata" jsonb,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "identity_providers" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"org_id" uuid NOT NULL,
-	"provider_type" text NOT NULL,
-	"name" text NOT NULL,
-	"issuer" text,
-	"authorization_endpoint" text,
-	"token_endpoint" text,
-	"userinfo_endpoint" text,
-	"jwks_uri" text,
-	"client_id" text,
-	"client_secret_encrypted" text,
-	"scopes" text[] DEFAULT '{"openid","profile","email"}'::text[] NOT NULL,
-	"attribute_mapping" jsonb DEFAULT '{}'::jsonb NOT NULL,
-	"is_active" boolean DEFAULT true NOT NULL,
-	"is_federation" boolean DEFAULT true NOT NULL,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
-	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "magic_links" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"user_id" uuid NOT NULL,
-	"token_hash" text NOT NULL,
-	"used_at" timestamp with time zone,
-	"expires_at" timestamp with time zone NOT NULL,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "oauth2_authorization_codes" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"app_id" uuid NOT NULL,
-	"user_id" uuid NOT NULL,
-	"code_hash" text NOT NULL,
-	"challenge" text,
-	"challenge_method" text,
-	"redirect_uri" text,
-	"scopes" text[] DEFAULT '{}'::text[] NOT NULL,
-	"nonce" text,
-	"expires_at" timestamp with time zone NOT NULL,
-	"used_at" timestamp with time zone,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "oauth2_consents" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"app_id" uuid NOT NULL,
-	"user_id" uuid NOT NULL,
-	"scopes" text[] DEFAULT '{}'::text[] NOT NULL,
-	"granted_at" timestamp with time zone DEFAULT now() NOT NULL,
-	"revoked_at" timestamp with time zone,
-	CONSTRAINT "oauth2_consents_unique" UNIQUE("app_id","user_id")
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "oidc_connections" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"org_id" uuid NOT NULL,
-	"name" text NOT NULL,
-	"issuer" text NOT NULL,
-	"authorization_endpoint" text NOT NULL,
-	"token_endpoint" text NOT NULL,
-	"userinfo_endpoint" text,
-	"jwks_uri" text,
-	"client_id" text NOT NULL,
-	"client_secret" text NOT NULL,
-	"scopes" text[] DEFAULT '{"openid","profile","email"}'::text[] NOT NULL,
-	"attribute_mapping" jsonb DEFAULT '{}'::jsonb NOT NULL,
-	"is_active" boolean DEFAULT true NOT NULL,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
-	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "org_memberships" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"org_id" uuid NOT NULL,
-	"user_id" uuid NOT NULL,
-	"role" text DEFAULT 'member' NOT NULL,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
-	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
-	CONSTRAINT "org_memberships_unique" UNIQUE("org_id","user_id")
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "organizations" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"name" text NOT NULL,
-	"slug" text NOT NULL,
-	"plan" text DEFAULT 'free' NOT NULL,
-	"branding" jsonb DEFAULT '{}'::jsonb NOT NULL,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
-	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
-	CONSTRAINT "organizations_slug_unique" UNIQUE("slug")
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "password_reset_tokens" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"user_id" uuid NOT NULL,
-	"token_hash" text NOT NULL,
-	"used_at" timestamp with time zone,
-	"expires_at" timestamp with time zone NOT NULL,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "permissions" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"resource" text NOT NULL,
-	"action" text NOT NULL,
-	"description" text,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
-	CONSTRAINT "permissions_resource_action_idx" UNIQUE("resource","action")
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "refresh_tokens" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"user_id" uuid NOT NULL,
-	"app_id" uuid,
-	"token_hash" text NOT NULL,
-	"expires_at" timestamp with time zone NOT NULL,
-	"revoked_at" timestamp with time zone,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
-	"ip_address" text,
-	"user_agent" text,
-	"device_fingerprint" text
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "role_permissions" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"role" text NOT NULL,
-	"permission_id" uuid NOT NULL,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
-	CONSTRAINT "role_permissions_idx" UNIQUE("role","permission_id")
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "saml_connections" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"org_id" uuid NOT NULL,
-	"name" text NOT NULL,
-	"idp_entity_id" text,
-	"idp_sso_url" text,
-	"idp_certificate" text,
-	"sp_entity_id" text NOT NULL,
-	"sp_acs_url" text NOT NULL,
-	"attribute_mapping" jsonb DEFAULT '{}'::jsonb NOT NULL,
-	"is_active" boolean DEFAULT true NOT NULL,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
-	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "secrets" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"key_id" text NOT NULL,
-	"type" text NOT NULL,
-	"value" text NOT NULL,
-	"algorithm" text,
-	"is_active" boolean DEFAULT true NOT NULL,
-	"rotated_at" timestamp with time zone,
-	"expires_at" timestamp with time zone,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
-	CONSTRAINT "secrets_key_id_unique" UNIQUE("key_id")
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "service_accounts" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"org_id" uuid NOT NULL,
-	"name" text NOT NULL,
-	"description" text,
-	"is_active" boolean DEFAULT true NOT NULL,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
-	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "sms_otp_codes" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"user_id" uuid NOT NULL,
-	"phone_number" text NOT NULL,
-	"code_hash" text NOT NULL,
-	"used_at" timestamp with time zone,
-	"expires_at" timestamp with time zone NOT NULL,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "totp_backup_codes" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"user_id" uuid NOT NULL,
-	"code_hash" text NOT NULL,
-	"used_at" timestamp with time zone,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "user_devices" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"user_id" uuid NOT NULL,
-	"fingerprint_hash" text NOT NULL,
-	"ip_address" text,
-	"user_agent" text,
-	"first_seen_at" timestamp with time zone DEFAULT now() NOT NULL,
-	"last_seen_at" timestamp with time zone DEFAULT now() NOT NULL,
-	"trust_score" smallint DEFAULT 50 NOT NULL,
-	"new_device_alert_sent" boolean DEFAULT false NOT NULL,
-	CONSTRAINT "user_devices_unique" UNIQUE("user_id","fingerprint_hash")
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "user_identities" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"user_id" uuid NOT NULL,
-	"provider_id" uuid NOT NULL,
-	"provider_type" text NOT NULL,
-	"external_sub" text NOT NULL,
-	"email" text,
-	"profile" jsonb DEFAULT '{}'::jsonb NOT NULL,
-	"linked_at" timestamp with time zone DEFAULT now() NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "users" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"zitadel_user_id" text,
-	"email" text NOT NULL,
-	"username" text NOT NULL,
-	"name" text,
-	"avatar_url" text,
-	"email_verified" boolean DEFAULT false NOT NULL,
-	"email_verified_token" text,
-	"provider" text DEFAULT 'password' NOT NULL,
-	"plan" text DEFAULT 'free' NOT NULL,
-	"role" text DEFAULT 'user' NOT NULL,
-	"default_org_id" uuid,
-	"phone_number" text,
-	"phone_verified" boolean DEFAULT false NOT NULL,
-	"password_hash" text,
-	"totp_secret" text,
-	"totp_enabled" boolean DEFAULT false NOT NULL,
-	"totp_verified_at" timestamp with time zone,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
-	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
-	CONSTRAINT "users_zitadel_user_id_unique" UNIQUE("zitadel_user_id"),
-	CONSTRAINT "users_email_unique" UNIQUE("email"),
-	CONSTRAINT "users_username_unique" UNIQUE("username")
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "webauthn_credentials" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"user_id" uuid NOT NULL,
-	"credential_id" text NOT NULL,
-	"public_key" text NOT NULL,
-	"counter" integer DEFAULT 0 NOT NULL,
-	"transports" text[] DEFAULT '{}'::text[] NOT NULL,
-	"aaguid" text,
-	"device_name" text,
-	"last_used_at" timestamp with time zone,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
-	CONSTRAINT "webauthn_credentials_credential_id_unique" UNIQUE("credential_id")
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "workflow_runs" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"workflow_id" uuid NOT NULL,
-	"trigger_event" text NOT NULL,
-	"payload" jsonb DEFAULT '{}'::jsonb NOT NULL,
-	"status" text DEFAULT 'pending' NOT NULL,
-	"started_at" timestamp with time zone,
-	"finished_at" timestamp with time zone,
-	"log" jsonb DEFAULT '[]'::jsonb NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "workflows" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"org_id" uuid,
-	"name" text NOT NULL,
-	"trigger" text NOT NULL,
-	"definition" jsonb DEFAULT '{}'::jsonb NOT NULL,
-	"is_active" boolean DEFAULT true NOT NULL,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
-	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
-);
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "api_keys" ADD CONSTRAINT "api_keys_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "api_keys" ADD CONSTRAINT "api_keys_service_account_id_service_accounts_id_fk" FOREIGN KEY ("service_account_id") REFERENCES "public"."service_accounts"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "api_keys" ADD CONSTRAINT "api_keys_org_id_organizations_id_fk" FOREIGN KEY ("org_id") REFERENCES "public"."organizations"("id") ON DELETE set null ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "api_keys" ADD CONSTRAINT "api_keys_app_id_applications_id_fk" FOREIGN KEY ("app_id") REFERENCES "public"."applications"("id") ON DELETE set null ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "applications" ADD CONSTRAINT "applications_org_id_organizations_id_fk" FOREIGN KEY ("org_id") REFERENCES "public"."organizations"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "audit_log" ADD CONSTRAINT "audit_log_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE set null ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "audit_log" ADD CONSTRAINT "audit_log_org_id_organizations_id_fk" FOREIGN KEY ("org_id") REFERENCES "public"."organizations"("id") ON DELETE set null ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "audit_log" ADD CONSTRAINT "audit_log_app_id_applications_id_fk" FOREIGN KEY ("app_id") REFERENCES "public"."applications"("id") ON DELETE set null ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "identity_providers" ADD CONSTRAINT "identity_providers_org_id_organizations_id_fk" FOREIGN KEY ("org_id") REFERENCES "public"."organizations"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "magic_links" ADD CONSTRAINT "magic_links_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "oauth2_authorization_codes" ADD CONSTRAINT "oauth2_authorization_codes_app_id_applications_id_fk" FOREIGN KEY ("app_id") REFERENCES "public"."applications"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "oauth2_authorization_codes" ADD CONSTRAINT "oauth2_authorization_codes_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "oauth2_consents" ADD CONSTRAINT "oauth2_consents_app_id_applications_id_fk" FOREIGN KEY ("app_id") REFERENCES "public"."applications"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "oauth2_consents" ADD CONSTRAINT "oauth2_consents_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "oidc_connections" ADD CONSTRAINT "oidc_connections_org_id_organizations_id_fk" FOREIGN KEY ("org_id") REFERENCES "public"."organizations"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "org_memberships" ADD CONSTRAINT "org_memberships_org_id_organizations_id_fk" FOREIGN KEY ("org_id") REFERENCES "public"."organizations"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "org_memberships" ADD CONSTRAINT "org_memberships_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "password_reset_tokens" ADD CONSTRAINT "password_reset_tokens_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "refresh_tokens" ADD CONSTRAINT "refresh_tokens_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "refresh_tokens" ADD CONSTRAINT "refresh_tokens_app_id_applications_id_fk" FOREIGN KEY ("app_id") REFERENCES "public"."applications"("id") ON DELETE set null ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "role_permissions" ADD CONSTRAINT "role_permissions_permission_id_permissions_id_fk" FOREIGN KEY ("permission_id") REFERENCES "public"."permissions"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "saml_connections" ADD CONSTRAINT "saml_connections_org_id_organizations_id_fk" FOREIGN KEY ("org_id") REFERENCES "public"."organizations"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "service_accounts" ADD CONSTRAINT "service_accounts_org_id_organizations_id_fk" FOREIGN KEY ("org_id") REFERENCES "public"."organizations"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "sms_otp_codes" ADD CONSTRAINT "sms_otp_codes_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "totp_backup_codes" ADD CONSTRAINT "totp_backup_codes_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "user_devices" ADD CONSTRAINT "user_devices_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "user_identities" ADD CONSTRAINT "user_identities_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "user_identities" ADD CONSTRAINT "user_identities_provider_id_identity_providers_id_fk" FOREIGN KEY ("provider_id") REFERENCES "public"."identity_providers"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "users" ADD CONSTRAINT "users_default_org_id_organizations_id_fk" FOREIGN KEY ("default_org_id") REFERENCES "public"."organizations"("id") ON DELETE set null ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "webauthn_credentials" ADD CONSTRAINT "webauthn_credentials_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "workflow_runs" ADD CONSTRAINT "workflow_runs_workflow_id_workflows_id_fk" FOREIGN KEY ("workflow_id") REFERENCES "public"."workflows"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "workflows" ADD CONSTRAINT "workflows_org_id_organizations_id_fk" FOREIGN KEY ("org_id") REFERENCES "public"."organizations"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "api_keys_user_idx" ON "api_keys" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "api_keys_service_account_idx" ON "api_keys" USING btree ("service_account_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "api_keys_prefix_idx" ON "api_keys" USING btree ("prefix");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "applications_org_idx" ON "applications" USING btree ("org_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "applications_client_id_idx" ON "applications" USING btree ("client_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "audit_log_user_idx" ON "audit_log" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "audit_log_event_idx" ON "audit_log" USING btree ("event");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "audit_log_created_at_idx" ON "audit_log" USING btree ("created_at");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "audit_log_org_idx" ON "audit_log" USING btree ("org_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "audit_log_app_idx" ON "audit_log" USING btree ("app_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "identity_providers_org_idx" ON "identity_providers" USING btree ("org_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "identity_providers_type_idx" ON "identity_providers" USING btree ("provider_type");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "magic_links_user_idx" ON "magic_links" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "magic_links_hash_idx" ON "magic_links" USING btree ("token_hash");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "oauth2_authorization_codes_app_idx" ON "oauth2_authorization_codes" USING btree ("app_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "oauth2_authorization_codes_user_idx" ON "oauth2_authorization_codes" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "oauth2_authorization_codes_hash_idx" ON "oauth2_authorization_codes" USING btree ("code_hash");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "oauth2_consents_app_idx" ON "oauth2_consents" USING btree ("app_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "oauth2_consents_user_idx" ON "oauth2_consents" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "oidc_connections_org_idx" ON "oidc_connections" USING btree ("org_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "org_memberships_org_idx" ON "org_memberships" USING btree ("org_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "org_memberships_user_idx" ON "org_memberships" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "organizations_slug_idx" ON "organizations" USING btree ("slug");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "password_reset_tokens_user_idx" ON "password_reset_tokens" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "password_reset_tokens_hash_idx" ON "password_reset_tokens" USING btree ("token_hash");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "refresh_tokens_user_idx" ON "refresh_tokens" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "refresh_tokens_app_idx" ON "refresh_tokens" USING btree ("app_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "refresh_tokens_hash_idx" ON "refresh_tokens" USING btree ("token_hash");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "saml_connections_org_idx" ON "saml_connections" USING btree ("org_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "secrets_type_active_idx" ON "secrets" USING btree ("type","is_active");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "service_accounts_org_idx" ON "service_accounts" USING btree ("org_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "sms_otp_codes_user_idx" ON "sms_otp_codes" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "totp_backup_codes_user_idx" ON "totp_backup_codes" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "totp_backup_codes_hash_idx" ON "totp_backup_codes" USING btree ("code_hash");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "user_devices_user_idx" ON "user_devices" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "user_identities_user_idx" ON "user_identities" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "user_identities_provider_sub_idx" ON "user_identities" USING btree ("provider_id","external_sub");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "users_email_idx" ON "users" USING btree ("email");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "users_zitadel_idx" ON "users" USING btree ("zitadel_user_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "users_default_org_idx" ON "users" USING btree ("default_org_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "webauthn_credentials_user_idx" ON "webauthn_credentials" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "workflow_runs_workflow_idx" ON "workflow_runs" USING btree ("workflow_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "workflows_trigger_idx" ON "workflows" USING btree ("trigger");

package/src/db/migrations/0001_brief_joseph.sql

@@ -1,10 +0,0 @@
-CREATE TABLE IF NOT EXISTS "feature_flags" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"key" text NOT NULL,
-	"enabled" boolean DEFAULT false NOT NULL,
-	"description" text,
-	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
-	CONSTRAINT "feature_flags_key_unique" UNIQUE("key")
-);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "feature_flags_key_idx" ON "feature_flags" USING btree ("key");

package/src/db/migrations/0002_add_account_lockout.sql

@@ -1,3 +0,0 @@
-ALTER TABLE "users" ADD COLUMN IF NOT EXISTS "failed_login_attempts" integer DEFAULT 0 NOT NULL;
---> statement-breakpoint
-ALTER TABLE "users" ADD COLUMN IF NOT EXISTS "locked_until" timestamp with time zone;

package/src/db/migrations/0003_steep_rachel_grey.sql

@@ -1 +0,0 @@
-ALTER TABLE "users" ADD COLUMN IF NOT EXISTS "metadata" jsonb DEFAULT '{}'::jsonb NOT NULL;

package/src/db/migrations/0004_clever_bill_hollister.sql

@@ -1,20 +0,0 @@
-CREATE TABLE IF NOT EXISTS "user_sessions" (
-	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
-	"user_id" uuid NOT NULL,
-	"refresh_token_id" text NOT NULL,
-	"device_fingerprint" text,
-	"ip_address" text,
-	"user_agent" text,
-	"last_seen_at" timestamp with time zone DEFAULT now() NOT NULL,
-	"expires_at" timestamp with time zone NOT NULL,
-	"created_at" timestamp with time zone DEFAULT now() NOT NULL
-);
---> statement-breakpoint
-DO $$ BEGIN
- ALTER TABLE "user_sessions" ADD CONSTRAINT "user_sessions_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;
-EXCEPTION
- WHEN duplicate_object THEN null;
-END $$;
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "user_sessions_user_idx" ON "user_sessions" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "user_sessions_refresh_token_idx" ON "user_sessions" USING btree ("refresh_token_id");

package/src/db/migrations/0005_steep_the_call.sql

@@ -1,2 +0,0 @@
-ALTER TABLE "applications" ADD COLUMN "allowed_ips" text[] DEFAULT '{}'::text[] NOT NULL;--> statement-breakpoint
-ALTER TABLE "applications" ADD COLUMN "blocked_ips" text[] DEFAULT '{}'::text[] NOT NULL;