@hilbras/keystone 1.6.0 → 2.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (604) hide show
  1. package/CHANGELOG.md +625 -0
  2. package/README.md +198 -50
  3. package/dist/cli.js +25 -27
  4. package/dist/cli.js.map +1 -1
  5. package/dist/config.d.ts +23 -1
  6. package/dist/config.d.ts.map +1 -1
  7. package/dist/config.js +53 -8
  8. package/dist/config.js.map +1 -1
  9. package/dist/container.d.ts +4 -1
  10. package/dist/container.d.ts.map +1 -1
  11. package/dist/container.js.map +1 -1
  12. package/dist/db/migrations/0008_flashy_firestar.sql +5 -0
  13. package/dist/db/migrations/0009_daffy_changeling.sql +1 -0
  14. package/dist/db/migrations/0010_wealthy_shadow_king.sql +37 -0
  15. package/dist/db/migrations/0011_overrated_vector.sql +18 -0
  16. package/dist/db/migrations/0012_brave_darkhawk.sql +28 -0
  17. package/dist/db/migrations/0013_wonderful_chimera.sql +5 -0
  18. package/dist/db/migrations/0014_magical_morph.sql +48 -0
  19. package/dist/db/migrations/0015_chief_vargas.sql +7 -0
  20. package/dist/db/migrations/0016_gorgeous_charles_xavier.sql +5 -0
  21. package/dist/db/migrations/0017_flashy_nekra.sql +1 -0
  22. package/{src/db/migrations/meta/0007_snapshot.json → dist/db/migrations/meta/0008_snapshot.json} +136 -32
  23. package/{src/db/migrations/meta/0006_snapshot.json → dist/db/migrations/meta/0009_snapshot.json} +359 -30
  24. package/{src/db/migrations/meta/0005_snapshot.json → dist/db/migrations/meta/0010_snapshot.json} +459 -29
  25. package/{src/db/migrations/meta/0004_snapshot.json → dist/db/migrations/meta/0011_snapshot.json} +594 -30
  26. package/dist/db/migrations/meta/0012_snapshot.json +3891 -0
  27. package/dist/db/migrations/meta/0013_snapshot.json +3919 -0
  28. package/dist/db/migrations/meta/0014_snapshot.json +4311 -0
  29. package/dist/db/migrations/meta/0015_snapshot.json +4340 -0
  30. package/dist/db/migrations/meta/0016_snapshot.json +4363 -0
  31. package/dist/db/migrations/meta/0017_snapshot.json +4370 -0
  32. package/dist/db/migrations/meta/_journal.json +70 -0
  33. package/dist/db/reencryptOidcSecrets.d.ts +2 -0
  34. package/dist/db/reencryptOidcSecrets.d.ts.map +1 -0
  35. package/dist/db/reencryptOidcSecrets.js +41 -0
  36. package/dist/db/reencryptOidcSecrets.js.map +1 -0
  37. package/dist/db/schema.d.ts +2693 -88
  38. package/dist/db/schema.d.ts.map +1 -1
  39. package/dist/db/schema.js +157 -4
  40. package/dist/db/schema.js.map +1 -1
  41. package/dist/db/seed.js +67 -40
  42. package/dist/db/seed.js.map +1 -1
  43. package/dist/di.d.ts.map +1 -1
  44. package/dist/di.js +11 -3
  45. package/dist/di.js.map +1 -1
  46. package/dist/index.d.ts +2 -2
  47. package/dist/index.d.ts.map +1 -1
  48. package/dist/index.js +34 -3
  49. package/dist/index.js.map +1 -1
  50. package/dist/lib/errors.d.ts +2 -1
  51. package/dist/lib/errors.d.ts.map +1 -1
  52. package/dist/lib/errors.js +10 -0
  53. package/dist/lib/errors.js.map +1 -1
  54. package/dist/plugins/appContext.d.ts.map +1 -1
  55. package/dist/plugins/appContext.js +3 -12
  56. package/dist/plugins/appContext.js.map +1 -1
  57. package/dist/plugins/audit.d.ts.map +1 -1
  58. package/dist/plugins/audit.js +26 -6
  59. package/dist/plugins/audit.js.map +1 -1
  60. package/dist/plugins/auth.d.ts.map +1 -1
  61. package/dist/plugins/auth.js +32 -7
  62. package/dist/plugins/auth.js.map +1 -1
  63. package/dist/plugins/headerSanitization.d.ts +15 -0
  64. package/dist/plugins/headerSanitization.d.ts.map +1 -0
  65. package/dist/plugins/headerSanitization.js +39 -0
  66. package/dist/plugins/headerSanitization.js.map +1 -0
  67. package/dist/plugins/metrics.d.ts.map +1 -1
  68. package/dist/plugins/mtls.d.ts +21 -2
  69. package/dist/plugins/mtls.d.ts.map +1 -1
  70. package/dist/plugins/mtls.js +94 -47
  71. package/dist/plugins/mtls.js.map +1 -1
  72. package/dist/plugins/permissions.d.ts.map +1 -1
  73. package/dist/plugins/permissions.js +29 -9
  74. package/dist/plugins/permissions.js.map +1 -1
  75. package/dist/plugins/rateLimit.d.ts +16 -0
  76. package/dist/plugins/rateLimit.d.ts.map +1 -1
  77. package/dist/plugins/rateLimit.js +16 -3
  78. package/dist/plugins/rateLimit.js.map +1 -1
  79. package/dist/plugins/requestLogger.d.ts.map +1 -1
  80. package/dist/repositories/apiKey.d.ts.map +1 -1
  81. package/dist/repositories/application.d.ts +1 -1
  82. package/dist/repositories/application.d.ts.map +1 -1
  83. package/dist/repositories/application.js +9 -3
  84. package/dist/repositories/application.js.map +1 -1
  85. package/dist/repositories/audit.d.ts.map +1 -1
  86. package/dist/repositories/index.d.ts +3 -0
  87. package/dist/repositories/index.d.ts.map +1 -1
  88. package/dist/repositories/index.js +3 -0
  89. package/dist/repositories/index.js.map +1 -1
  90. package/dist/repositories/mfaChallenge.d.ts +23 -0
  91. package/dist/repositories/mfaChallenge.d.ts.map +1 -0
  92. package/dist/repositories/mfaChallenge.js +71 -0
  93. package/dist/repositories/mfaChallenge.js.map +1 -0
  94. package/dist/repositories/oidcConnection.d.ts +27 -43
  95. package/dist/repositories/oidcConnection.d.ts.map +1 -1
  96. package/dist/repositories/oidcConnection.js +15 -6
  97. package/dist/repositories/oidcConnection.js.map +1 -1
  98. package/dist/repositories/organization.d.ts +9 -9
  99. package/dist/repositories/organization.d.ts.map +1 -1
  100. package/dist/repositories/organization.js +91 -37
  101. package/dist/repositories/organization.js.map +1 -1
  102. package/dist/repositories/permission.d.ts.map +1 -1
  103. package/dist/repositories/permission.js +27 -5
  104. package/dist/repositories/permission.js.map +1 -1
  105. package/dist/repositories/samlConnection.d.ts +28 -28
  106. package/dist/repositories/samlConnection.d.ts.map +1 -1
  107. package/dist/repositories/samlConnection.js +12 -4
  108. package/dist/repositories/samlConnection.js.map +1 -1
  109. package/dist/repositories/scimConnection.d.ts +38 -0
  110. package/dist/repositories/scimConnection.d.ts.map +1 -0
  111. package/dist/repositories/scimConnection.js +123 -0
  112. package/dist/repositories/scimConnection.js.map +1 -0
  113. package/dist/repositories/scimGroup.d.ts +36 -0
  114. package/dist/repositories/scimGroup.d.ts.map +1 -0
  115. package/dist/repositories/scimGroup.js +113 -0
  116. package/dist/repositories/scimGroup.js.map +1 -0
  117. package/dist/repositories/session.d.ts +24 -13
  118. package/dist/repositories/session.d.ts.map +1 -1
  119. package/dist/repositories/session.js +13 -1
  120. package/dist/repositories/session.js.map +1 -1
  121. package/dist/repositories/types.d.ts +117 -6
  122. package/dist/repositories/types.d.ts.map +1 -1
  123. package/dist/repositories/types.js +7 -1
  124. package/dist/repositories/types.js.map +1 -1
  125. package/dist/repositories/user.d.ts +23 -1
  126. package/dist/repositories/user.d.ts.map +1 -1
  127. package/dist/repositories/user.js +180 -4
  128. package/dist/repositories/user.js.map +1 -1
  129. package/dist/routes/admin/billing.js +4 -4
  130. package/dist/routes/admin/billing.js.map +1 -1
  131. package/dist/routes/admin/helpers.d.ts +16 -20
  132. package/dist/routes/admin/helpers.d.ts.map +1 -1
  133. package/dist/routes/admin/helpers.js +53 -10
  134. package/dist/routes/admin/helpers.js.map +1 -1
  135. package/dist/routes/admin/organizations.d.ts.map +1 -1
  136. package/dist/routes/admin/organizations.js +105 -69
  137. package/dist/routes/admin/organizations.js.map +1 -1
  138. package/dist/routes/admin/permissions.d.ts.map +1 -1
  139. package/dist/routes/admin/permissions.js +48 -14
  140. package/dist/routes/admin/permissions.js.map +1 -1
  141. package/dist/routes/admin/platform.d.ts.map +1 -1
  142. package/dist/routes/admin/platform.js +86 -35
  143. package/dist/routes/admin/platform.js.map +1 -1
  144. package/dist/routes/admin/sso.d.ts.map +1 -1
  145. package/dist/routes/admin/sso.js +143 -12
  146. package/dist/routes/admin/sso.js.map +1 -1
  147. package/dist/routes/admin/webhooks.js +8 -8
  148. package/dist/routes/admin/webhooks.js.map +1 -1
  149. package/dist/routes/apiKeys.d.ts.map +1 -1
  150. package/dist/routes/apiKeys.js +23 -5
  151. package/dist/routes/apiKeys.js.map +1 -1
  152. package/dist/routes/auth.d.ts.map +1 -1
  153. package/dist/routes/auth.js +112 -22
  154. package/dist/routes/auth.js.map +1 -1
  155. package/dist/routes/authz.d.ts.map +1 -1
  156. package/dist/routes/authz.js +16 -4
  157. package/dist/routes/authz.js.map +1 -1
  158. package/dist/routes/config.d.ts.map +1 -1
  159. package/dist/routes/config.js +16 -14
  160. package/dist/routes/config.js.map +1 -1
  161. package/dist/routes/federation.d.ts.map +1 -1
  162. package/dist/routes/federation.js +17 -3
  163. package/dist/routes/federation.js.map +1 -1
  164. package/dist/routes/magicLinks.d.ts.map +1 -1
  165. package/dist/routes/magicLinks.js +15 -3
  166. package/dist/routes/magicLinks.js.map +1 -1
  167. package/dist/routes/oauth.d.ts.map +1 -1
  168. package/dist/routes/oauth.js +60 -5
  169. package/dist/routes/oauth.js.map +1 -1
  170. package/dist/routes/oauth2.d.ts.map +1 -1
  171. package/dist/routes/oauth2.js +188 -22
  172. package/dist/routes/oauth2.js.map +1 -1
  173. package/dist/routes/oidcEnterprise.d.ts.map +1 -1
  174. package/dist/routes/oidcEnterprise.js +67 -21
  175. package/dist/routes/oidcEnterprise.js.map +1 -1
  176. package/dist/routes/password.d.ts.map +1 -1
  177. package/dist/routes/password.js.map +1 -1
  178. package/dist/routes/profile.js +4 -4
  179. package/dist/routes/profile.js.map +1 -1
  180. package/dist/routes/saml.d.ts +33 -0
  181. package/dist/routes/saml.d.ts.map +1 -1
  182. package/dist/routes/saml.js +217 -12
  183. package/dist/routes/saml.js.map +1 -1
  184. package/dist/routes/scim.d.ts +13 -0
  185. package/dist/routes/scim.d.ts.map +1 -1
  186. package/dist/routes/scim.js +885 -110
  187. package/dist/routes/scim.js.map +1 -1
  188. package/dist/routes/sdk.d.ts.map +1 -1
  189. package/dist/routes/sdk.js +24 -8
  190. package/dist/routes/sdk.js.map +1 -1
  191. package/dist/routes/serviceAccounts.d.ts.map +1 -1
  192. package/dist/routes/serviceAccounts.js +63 -2
  193. package/dist/routes/serviceAccounts.js.map +1 -1
  194. package/dist/routes/setup.d.ts.map +1 -1
  195. package/dist/routes/setup.js +15 -16
  196. package/dist/routes/setup.js.map +1 -1
  197. package/dist/routes/smsOtp.js +1 -1
  198. package/dist/routes/smsOtp.js.map +1 -1
  199. package/dist/routes/totp.d.ts.map +1 -1
  200. package/dist/routes/totp.js +112 -23
  201. package/dist/routes/totp.js.map +1 -1
  202. package/dist/routes/webauthn.d.ts.map +1 -1
  203. package/dist/routes/webauthn.js +44 -8
  204. package/dist/routes/webauthn.js.map +1 -1
  205. package/dist/routes/workflows.d.ts.map +1 -1
  206. package/dist/routes/workflows.js +58 -25
  207. package/dist/routes/workflows.js.map +1 -1
  208. package/dist/sdk/index.d.ts.map +1 -1
  209. package/dist/sdk/index.js +141 -40
  210. package/dist/sdk/index.js.map +1 -1
  211. package/dist/sdk/types.d.ts +64 -30
  212. package/dist/sdk/types.d.ts.map +1 -1
  213. package/dist/services/application/authentication.d.ts +39 -1
  214. package/dist/services/application/authentication.d.ts.map +1 -1
  215. package/dist/services/application/authentication.js +43 -1
  216. package/dist/services/application/authentication.js.map +1 -1
  217. package/dist/services/application/identity.d.ts +10 -7
  218. package/dist/services/application/identity.d.ts.map +1 -1
  219. package/dist/services/application/identity.js +13 -10
  220. package/dist/services/application/identity.js.map +1 -1
  221. package/dist/services/application/organization.d.ts +16 -8
  222. package/dist/services/application/organization.d.ts.map +1 -1
  223. package/dist/services/application/organization.js +160 -12
  224. package/dist/services/application/organization.js.map +1 -1
  225. package/dist/services/applications.js +2 -2
  226. package/dist/services/applications.js.map +1 -1
  227. package/dist/services/audit.d.ts +1 -0
  228. package/dist/services/audit.d.ts.map +1 -1
  229. package/dist/services/audit.js +13 -0
  230. package/dist/services/audit.js.map +1 -1
  231. package/dist/services/cache.d.ts.map +1 -1
  232. package/dist/services/configuration/profiles.d.ts +4 -0
  233. package/dist/services/configuration/profiles.d.ts.map +1 -1
  234. package/dist/services/configuration/profiles.js +50 -0
  235. package/dist/services/configuration/profiles.js.map +1 -1
  236. package/dist/services/configuration.d.ts.map +1 -1
  237. package/dist/services/configuration.js.map +1 -1
  238. package/dist/services/connectors/google.d.ts +18 -1
  239. package/dist/services/connectors/google.d.ts.map +1 -1
  240. package/dist/services/connectors/google.js +27 -4
  241. package/dist/services/connectors/google.js.map +1 -1
  242. package/dist/services/connectors/oidc.d.ts +14 -2
  243. package/dist/services/connectors/oidc.d.ts.map +1 -1
  244. package/dist/services/connectors/oidc.js +35 -6
  245. package/dist/services/connectors/oidc.js.map +1 -1
  246. package/dist/services/connectors/types.d.ts +13 -1
  247. package/dist/services/connectors/types.d.ts.map +1 -1
  248. package/dist/services/connectors/zitadel.d.ts.map +1 -1
  249. package/dist/services/connectors/zitadel.js +4 -3
  250. package/dist/services/connectors/zitadel.js.map +1 -1
  251. package/dist/services/domain/authentication.d.ts +43 -4
  252. package/dist/services/domain/authentication.d.ts.map +1 -1
  253. package/dist/services/domain/authentication.js +119 -40
  254. package/dist/services/domain/authentication.js.map +1 -1
  255. package/dist/services/domain/authorization.d.ts +11 -0
  256. package/dist/services/domain/authorization.d.ts.map +1 -1
  257. package/dist/services/domain/authorization.js +36 -1
  258. package/dist/services/domain/authorization.js.map +1 -1
  259. package/dist/services/domain/identity.d.ts +21 -9
  260. package/dist/services/domain/identity.d.ts.map +1 -1
  261. package/dist/services/domain/identity.js +187 -10
  262. package/dist/services/domain/identity.js.map +1 -1
  263. package/dist/services/domain/organization.d.ts +11 -10
  264. package/dist/services/domain/organization.d.ts.map +1 -1
  265. package/dist/services/domain/organization.js +48 -30
  266. package/dist/services/domain/organization.js.map +1 -1
  267. package/dist/services/emailVerification.d.ts +2 -2
  268. package/dist/services/enterpriseSso.d.ts +13 -6
  269. package/dist/services/enterpriseSso.d.ts.map +1 -1
  270. package/dist/services/enterpriseSso.js +75 -6
  271. package/dist/services/enterpriseSso.js.map +1 -1
  272. package/dist/services/events/subscribers/auditLog.js +1 -1
  273. package/dist/services/events/subscribers/auditLog.js.map +1 -1
  274. package/dist/services/events/types.d.ts +7 -1
  275. package/dist/services/events/types.d.ts.map +1 -1
  276. package/dist/services/events/types.js.map +1 -1
  277. package/dist/services/events/validate.d.ts.map +1 -1
  278. package/dist/services/events/validate.js +33 -0
  279. package/dist/services/events/validate.js.map +1 -1
  280. package/dist/services/features.d.ts.map +1 -1
  281. package/dist/services/features.js.map +1 -1
  282. package/dist/services/federation.d.ts +6 -1
  283. package/dist/services/federation.d.ts.map +1 -1
  284. package/dist/services/federation.js +31 -4
  285. package/dist/services/federation.js.map +1 -1
  286. package/dist/services/ipControls.js +2 -2
  287. package/dist/services/ipControls.js.map +1 -1
  288. package/dist/services/magicLinks.d.ts +2 -2
  289. package/dist/services/magicLinks.d.ts.map +1 -1
  290. package/dist/services/magicLinks.js +13 -9
  291. package/dist/services/magicLinks.js.map +1 -1
  292. package/dist/services/mfa.d.ts +53 -0
  293. package/dist/services/mfa.d.ts.map +1 -0
  294. package/dist/services/mfa.js +157 -0
  295. package/dist/services/mfa.js.map +1 -0
  296. package/dist/services/oauth2.d.ts +88 -14
  297. package/dist/services/oauth2.d.ts.map +1 -1
  298. package/dist/services/oauth2.js +125 -16
  299. package/dist/services/oauth2.js.map +1 -1
  300. package/dist/services/oidcSecretFormat.d.ts +3 -0
  301. package/dist/services/oidcSecretFormat.d.ts.map +1 -0
  302. package/dist/services/oidcSecretFormat.js +5 -0
  303. package/dist/services/oidcSecretFormat.js.map +1 -0
  304. package/dist/services/organizations.d.ts +4 -16
  305. package/dist/services/organizations.d.ts.map +1 -1
  306. package/dist/services/organizations.js +0 -62
  307. package/dist/services/organizations.js.map +1 -1
  308. package/dist/services/permissions.d.ts.map +1 -1
  309. package/dist/services/permissions.js +9 -1
  310. package/dist/services/permissions.js.map +1 -1
  311. package/dist/services/plugins/registry.d.ts.map +1 -1
  312. package/dist/services/plugins/registry.js.map +1 -1
  313. package/dist/services/plugins/types.d.ts.map +1 -1
  314. package/dist/services/queue/bullmq.d.ts.map +1 -1
  315. package/dist/services/queue/inProcess.d.ts.map +1 -1
  316. package/dist/services/redirectUri.d.ts +56 -0
  317. package/dist/services/redirectUri.d.ts.map +1 -0
  318. package/dist/services/redirectUri.js +129 -0
  319. package/dist/services/redirectUri.js.map +1 -0
  320. package/dist/services/redis.d.ts +1 -1
  321. package/dist/services/redis.d.ts.map +1 -1
  322. package/dist/services/scimCredentials.d.ts +46 -0
  323. package/dist/services/scimCredentials.d.ts.map +1 -0
  324. package/dist/services/scimCredentials.js +123 -0
  325. package/dist/services/scimCredentials.js.map +1 -0
  326. package/dist/services/scimLegacyMigration.d.ts +12 -0
  327. package/dist/services/scimLegacyMigration.d.ts.map +1 -0
  328. package/dist/services/scimLegacyMigration.js +44 -0
  329. package/dist/services/scimLegacyMigration.js.map +1 -0
  330. package/dist/services/secrets/awsKms.d.ts +2 -2
  331. package/dist/services/secrets/awsKms.d.ts.map +1 -1
  332. package/dist/services/secrets/awsKms.js +3 -5
  333. package/dist/services/secrets/awsKms.js.map +1 -1
  334. package/dist/services/secrets/azureKeyVault.d.ts.map +1 -1
  335. package/dist/services/secrets/database.d.ts.map +1 -1
  336. package/dist/services/secrets/database.js.map +1 -1
  337. package/dist/services/secrets/environment.d.ts.map +1 -1
  338. package/dist/services/secrets/environment.js.map +1 -1
  339. package/dist/services/secrets/index.d.ts.map +1 -1
  340. package/dist/services/secrets/password.d.ts.map +1 -1
  341. package/dist/services/secrets/password.js +0 -4
  342. package/dist/services/secrets/password.js.map +1 -1
  343. package/dist/services/secrets/provider.d.ts +2 -3
  344. package/dist/services/secrets/provider.d.ts.map +1 -1
  345. package/dist/services/secrets/vault.d.ts.map +1 -1
  346. package/dist/services/serviceAccounts.d.ts +20 -0
  347. package/dist/services/serviceAccounts.d.ts.map +1 -1
  348. package/dist/services/serviceAccounts.js +47 -1
  349. package/dist/services/serviceAccounts.js.map +1 -1
  350. package/dist/services/sessionRevocation.d.ts +76 -0
  351. package/dist/services/sessionRevocation.d.ts.map +1 -0
  352. package/dist/services/sessionRevocation.js +86 -0
  353. package/dist/services/sessionRevocation.js.map +1 -0
  354. package/dist/services/setup/configWriter.d.ts.map +1 -1
  355. package/dist/services/setup/configWriter.js.map +1 -1
  356. package/dist/services/singleUse.d.ts +68 -0
  357. package/dist/services/singleUse.d.ts.map +1 -0
  358. package/dist/services/singleUse.js +54 -0
  359. package/dist/services/singleUse.js.map +1 -0
  360. package/dist/services/smsOtp.d.ts.map +1 -1
  361. package/dist/services/smsOtp.js +12 -8
  362. package/dist/services/smsOtp.js.map +1 -1
  363. package/dist/services/ssoEndpointPolicy.d.ts +8 -0
  364. package/dist/services/ssoEndpointPolicy.d.ts.map +1 -0
  365. package/dist/services/ssoEndpointPolicy.js +136 -0
  366. package/dist/services/ssoEndpointPolicy.js.map +1 -0
  367. package/dist/services/stepUp.d.ts +35 -0
  368. package/dist/services/stepUp.d.ts.map +1 -0
  369. package/dist/services/stepUp.js +65 -0
  370. package/dist/services/stepUp.js.map +1 -0
  371. package/dist/services/tokens.d.ts +39 -11
  372. package/dist/services/tokens.d.ts.map +1 -1
  373. package/dist/services/tokens.js +80 -14
  374. package/dist/services/tokens.js.map +1 -1
  375. package/dist/services/totp.d.ts +46 -0
  376. package/dist/services/totp.d.ts.map +1 -1
  377. package/dist/services/totp.js +178 -41
  378. package/dist/services/totp.js.map +1 -1
  379. package/dist/services/trustedProxies.d.ts +90 -0
  380. package/dist/services/trustedProxies.d.ts.map +1 -0
  381. package/dist/services/trustedProxies.js +283 -0
  382. package/dist/services/trustedProxies.js.map +1 -0
  383. package/dist/services/users.d.ts +20 -12
  384. package/dist/services/users.d.ts.map +1 -1
  385. package/dist/services/users.js +24 -51
  386. package/dist/services/users.js.map +1 -1
  387. package/dist/services/webauthn.d.ts +8 -4
  388. package/dist/services/webauthn.d.ts.map +1 -1
  389. package/dist/services/webauthn.js +4 -4
  390. package/dist/services/webauthn.js.map +1 -1
  391. package/dist/services/webhooks.d.ts +20 -20
  392. package/dist/services/workflows/engine.d.ts +4 -2
  393. package/dist/services/workflows/engine.d.ts.map +1 -1
  394. package/dist/services/workflows/engine.js +181 -12
  395. package/dist/services/workflows/engine.js.map +1 -1
  396. package/dist/services/workflows/steps.d.ts +2 -0
  397. package/dist/services/workflows/steps.d.ts.map +1 -1
  398. package/dist/services/workflows/steps.js +8 -75
  399. package/dist/services/workflows/steps.js.map +1 -1
  400. package/dist/setup-server.js +2 -1
  401. package/dist/setup-server.js.map +1 -1
  402. package/dist/types.d.ts +33 -4
  403. package/dist/types.d.ts.map +1 -1
  404. package/dist/types.js +26 -2
  405. package/dist/types.js.map +1 -1
  406. package/package.json +25 -3
  407. package/dist/tests/errors.test.d.ts +0 -2
  408. package/dist/tests/errors.test.d.ts.map +0 -1
  409. package/dist/tests/errors.test.js +0 -64
  410. package/dist/tests/errors.test.js.map +0 -1
  411. package/dist/tests/events.test.d.ts +0 -2
  412. package/dist/tests/events.test.d.ts.map +0 -1
  413. package/dist/tests/events.test.js +0 -45
  414. package/dist/tests/events.test.js.map +0 -1
  415. package/dist/tests/featureFlags.test.d.ts +0 -2
  416. package/dist/tests/featureFlags.test.d.ts.map +0 -1
  417. package/dist/tests/featureFlags.test.js +0 -24
  418. package/dist/tests/featureFlags.test.js.map +0 -1
  419. package/dist/tests/integration/queue.test.d.ts +0 -2
  420. package/dist/tests/integration/queue.test.d.ts.map +0 -1
  421. package/dist/tests/integration/queue.test.js +0 -49
  422. package/dist/tests/integration/queue.test.js.map +0 -1
  423. package/dist/tests/plugins.test.d.ts +0 -2
  424. package/dist/tests/plugins.test.d.ts.map +0 -1
  425. package/dist/tests/plugins.test.js +0 -56
  426. package/dist/tests/plugins.test.js.map +0 -1
  427. package/dist/tests/result.test.d.ts +0 -2
  428. package/dist/tests/result.test.d.ts.map +0 -1
  429. package/dist/tests/result.test.js +0 -46
  430. package/dist/tests/result.test.js.map +0 -1
  431. package/dist/tests/setup/configWriter.test.d.ts +0 -2
  432. package/dist/tests/setup/configWriter.test.d.ts.map +0 -1
  433. package/dist/tests/setup/configWriter.test.js +0 -55
  434. package/dist/tests/setup/configWriter.test.js.map +0 -1
  435. package/dist/tests/setup/validation.test.d.ts +0 -2
  436. package/dist/tests/setup/validation.test.d.ts.map +0 -1
  437. package/dist/tests/setup/validation.test.js +0 -26
  438. package/dist/tests/setup/validation.test.js.map +0 -1
  439. package/dist/tests/smoke.test.d.ts +0 -2
  440. package/dist/tests/smoke.test.d.ts.map +0 -1
  441. package/dist/tests/smoke.test.js +0 -124
  442. package/dist/tests/smoke.test.js.map +0 -1
  443. package/src/cli.ts +0 -172
  444. package/src/config.ts +0 -143
  445. package/src/container.ts +0 -48
  446. package/src/db/index.ts +0 -53
  447. package/src/db/migrations/0000_skinny_ben_parker.sql +0 -553
  448. package/src/db/migrations/0001_brief_joseph.sql +0 -10
  449. package/src/db/migrations/0002_add_account_lockout.sql +0 -3
  450. package/src/db/migrations/0003_steep_rachel_grey.sql +0 -1
  451. package/src/db/migrations/0004_clever_bill_hollister.sql +0 -20
  452. package/src/db/migrations/0005_steep_the_call.sql +0 -2
  453. package/src/db/migrations/0006_ambitious_boomer.sql +0 -17
  454. package/src/db/migrations/0007_greedy_vindicator.sql +0 -40
  455. package/src/db/migrations/meta/0000_snapshot.json +0 -2964
  456. package/src/db/migrations/meta/0001_snapshot.json +0 -3031
  457. package/src/db/migrations/meta/0003_snapshot.json +0 -3051
  458. package/src/db/migrations/meta/_journal.json +0 -62
  459. package/src/db/schema.ts +0 -676
  460. package/src/db/seed.ts +0 -146
  461. package/src/di.ts +0 -81
  462. package/src/index.ts +0 -326
  463. package/src/lib/errors.ts +0 -139
  464. package/src/lib/result.ts +0 -44
  465. package/src/lib/webhookSignature.ts +0 -41
  466. package/src/plugins/appContext.ts +0 -76
  467. package/src/plugins/audit.ts +0 -42
  468. package/src/plugins/auth.ts +0 -230
  469. package/src/plugins/metrics.ts +0 -41
  470. package/src/plugins/mtls.ts +0 -94
  471. package/src/plugins/permissions.ts +0 -29
  472. package/src/plugins/rateLimit.ts +0 -133
  473. package/src/plugins/requestLogger.ts +0 -25
  474. package/src/plugins/tracing.ts +0 -22
  475. package/src/repositories/apiKey.ts +0 -158
  476. package/src/repositories/application.ts +0 -70
  477. package/src/repositories/audit.ts +0 -32
  478. package/src/repositories/index.ts +0 -9
  479. package/src/repositories/oidcConnection.ts +0 -111
  480. package/src/repositories/organization.ts +0 -167
  481. package/src/repositories/permission.ts +0 -153
  482. package/src/repositories/samlConnection.ts +0 -96
  483. package/src/repositories/session.ts +0 -86
  484. package/src/repositories/types.ts +0 -134
  485. package/src/repositories/user.ts +0 -161
  486. package/src/routes/admin/billing.ts +0 -48
  487. package/src/routes/admin/helpers.ts +0 -50
  488. package/src/routes/admin/index.ts +0 -16
  489. package/src/routes/admin/organizations.ts +0 -299
  490. package/src/routes/admin/permissions.ts +0 -80
  491. package/src/routes/admin/platform.ts +0 -335
  492. package/src/routes/admin/sso.ts +0 -138
  493. package/src/routes/admin/webhooks.ts +0 -73
  494. package/src/routes/admin.ts +0 -1
  495. package/src/routes/apiKeys.ts +0 -60
  496. package/src/routes/auth.ts +0 -214
  497. package/src/routes/authz.ts +0 -38
  498. package/src/routes/config.ts +0 -67
  499. package/src/routes/emailVerification.ts +0 -73
  500. package/src/routes/federation.ts +0 -156
  501. package/src/routes/helpers.ts +0 -17
  502. package/src/routes/magicLinks.ts +0 -107
  503. package/src/routes/oauth.ts +0 -167
  504. package/src/routes/oauth2.ts +0 -284
  505. package/src/routes/oidcEnterprise.ts +0 -166
  506. package/src/routes/password.ts +0 -90
  507. package/src/routes/profile.ts +0 -44
  508. package/src/routes/saml.ts +0 -209
  509. package/src/routes/scim.ts +0 -199
  510. package/src/routes/sdk.ts +0 -141
  511. package/src/routes/serviceAccounts.ts +0 -124
  512. package/src/routes/sessions.ts +0 -62
  513. package/src/routes/setup.ts +0 -315
  514. package/src/routes/smsOtp.ts +0 -67
  515. package/src/routes/totp.ts +0 -122
  516. package/src/routes/webauthn.ts +0 -147
  517. package/src/routes/workflows.ts +0 -157
  518. package/src/sdk/index.ts +0 -152
  519. package/src/sdk/types.ts +0 -54
  520. package/src/services/anomalyDetection.ts +0 -73
  521. package/src/services/application/authentication.ts +0 -75
  522. package/src/services/application/identity.ts +0 -56
  523. package/src/services/application/index.ts +0 -3
  524. package/src/services/application/organization.ts +0 -77
  525. package/src/services/applications.ts +0 -89
  526. package/src/services/audit.ts +0 -41
  527. package/src/services/auditExport.ts +0 -59
  528. package/src/services/billing.ts +0 -87
  529. package/src/services/cache.ts +0 -131
  530. package/src/services/configuration/profiles.ts +0 -115
  531. package/src/services/configuration.ts +0 -120
  532. package/src/services/connectors/google.ts +0 -92
  533. package/src/services/connectors/oidc.ts +0 -111
  534. package/src/services/connectors/registry.ts +0 -124
  535. package/src/services/connectors/types.ts +0 -38
  536. package/src/services/connectors/zitadel.ts +0 -77
  537. package/src/services/devices.ts +0 -76
  538. package/src/services/domain/authentication.ts +0 -279
  539. package/src/services/domain/authorization.ts +0 -49
  540. package/src/services/domain/identity.ts +0 -108
  541. package/src/services/domain/index.ts +0 -4
  542. package/src/services/domain/organization.ts +0 -114
  543. package/src/services/email.ts +0 -167
  544. package/src/services/emailVerification.ts +0 -75
  545. package/src/services/enterpriseSso.ts +0 -58
  546. package/src/services/events/bus.ts +0 -43
  547. package/src/services/events/subscribers/anomaly.ts +0 -13
  548. package/src/services/events/subscribers/auditLog.ts +0 -21
  549. package/src/services/events/subscribers/webhook.ts +0 -39
  550. package/src/services/events/subscribers/webhookDispatch.ts +0 -14
  551. package/src/services/events/types.ts +0 -106
  552. package/src/services/events/validate.ts +0 -118
  553. package/src/services/featureFlags.ts +0 -90
  554. package/src/services/features.ts +0 -22
  555. package/src/services/federation.ts +0 -30
  556. package/src/services/hibp.ts +0 -28
  557. package/src/services/ipControls.ts +0 -99
  558. package/src/services/magicLinks.ts +0 -51
  559. package/src/services/oauth2.ts +0 -216
  560. package/src/services/organizations.ts +0 -171
  561. package/src/services/permissions.ts +0 -146
  562. package/src/services/plugins/registry.ts +0 -242
  563. package/src/services/plugins/types.ts +0 -98
  564. package/src/services/queue/bullmq.ts +0 -104
  565. package/src/services/queue/inProcess.ts +0 -75
  566. package/src/services/queue/index.ts +0 -19
  567. package/src/services/queue/types.ts +0 -26
  568. package/src/services/redis.ts +0 -16
  569. package/src/services/secrets/awsKms.ts +0 -97
  570. package/src/services/secrets/azureKeyVault.ts +0 -171
  571. package/src/services/secrets/database.ts +0 -166
  572. package/src/services/secrets/environment.ts +0 -117
  573. package/src/services/secrets/index.ts +0 -50
  574. package/src/services/secrets/password.ts +0 -73
  575. package/src/services/secrets/provider.ts +0 -36
  576. package/src/services/secrets/vault.ts +0 -149
  577. package/src/services/secrets.ts +0 -2
  578. package/src/services/serviceAccounts.ts +0 -74
  579. package/src/services/setup/configWriter.ts +0 -200
  580. package/src/services/setup/diagnostics.ts +0 -76
  581. package/src/services/setup/token.ts +0 -42
  582. package/src/services/setup/types.ts +0 -40
  583. package/src/services/setup/validation.ts +0 -205
  584. package/src/services/sms.ts +0 -81
  585. package/src/services/smsOtp.ts +0 -74
  586. package/src/services/tokens.ts +0 -287
  587. package/src/services/totp.ts +0 -113
  588. package/src/services/users.ts +0 -239
  589. package/src/services/webauthn.ts +0 -193
  590. package/src/services/webhooks.ts +0 -190
  591. package/src/services/workflows/engine.ts +0 -125
  592. package/src/services/workflows/steps.ts +0 -129
  593. package/src/services/zitadel.ts +0 -277
  594. package/src/setup-server.ts +0 -71
  595. package/src/tests/errors.test.ts +0 -74
  596. package/src/tests/events.test.ts +0 -52
  597. package/src/tests/featureFlags.test.ts +0 -26
  598. package/src/tests/integration/queue.test.ts +0 -54
  599. package/src/tests/plugins.test.ts +0 -73
  600. package/src/tests/result.test.ts +0 -52
  601. package/src/tests/setup/configWriter.test.ts +0 -69
  602. package/src/tests/setup/validation.test.ts +0 -29
  603. package/src/tests/smoke.test.ts +0 -136
  604. package/src/types.ts +0 -70
@@ -1,6 +1,6 @@
1
1
  {
2
- "id": "20b44128-6b21-4b7c-8d19-27b67f81cc13",
3
- "prevId": "957dc892-e65e-435b-876c-4a09aa034ed7",
2
+ "id": "fc6875a6-31ab-4607-bda7-9b5666a28860",
3
+ "prevId": "6e994071-f35c-42f7-a16e-042751de3174",
4
4
  "version": "7",
5
5
  "dialect": "postgresql",
6
6
  "tables": {
@@ -192,7 +192,10 @@
192
192
  }
193
193
  },
194
194
  "compositePrimaryKeys": {},
195
- "uniqueConstraints": {}
195
+ "uniqueConstraints": {},
196
+ "policies": {},
197
+ "checkConstraints": {},
198
+ "isRLSEnabled": false
196
199
  },
197
200
  "public.applications": {
198
201
  "name": "applications",
@@ -243,6 +246,20 @@
243
246
  "notNull": true,
244
247
  "default": "'{}'::text[]"
245
248
  },
249
+ "allowed_ips": {
250
+ "name": "allowed_ips",
251
+ "type": "text[]",
252
+ "primaryKey": false,
253
+ "notNull": true,
254
+ "default": "'{}'::text[]"
255
+ },
256
+ "blocked_ips": {
257
+ "name": "blocked_ips",
258
+ "type": "text[]",
259
+ "primaryKey": false,
260
+ "notNull": true,
261
+ "default": "'{}'::text[]"
262
+ },
246
263
  "branding": {
247
264
  "name": "branding",
248
265
  "type": "jsonb",
@@ -328,7 +345,10 @@
328
345
  "client_id"
329
346
  ]
330
347
  }
331
- }
348
+ },
349
+ "policies": {},
350
+ "checkConstraints": {},
351
+ "isRLSEnabled": false
332
352
  },
333
353
  "public.audit_log": {
334
354
  "name": "audit_log",
@@ -516,7 +536,106 @@
516
536
  }
517
537
  },
518
538
  "compositePrimaryKeys": {},
519
- "uniqueConstraints": {}
539
+ "uniqueConstraints": {},
540
+ "policies": {},
541
+ "checkConstraints": {},
542
+ "isRLSEnabled": false
543
+ },
544
+ "public.email_verification_tokens": {
545
+ "name": "email_verification_tokens",
546
+ "schema": "",
547
+ "columns": {
548
+ "id": {
549
+ "name": "id",
550
+ "type": "uuid",
551
+ "primaryKey": true,
552
+ "notNull": true,
553
+ "default": "gen_random_uuid()"
554
+ },
555
+ "user_id": {
556
+ "name": "user_id",
557
+ "type": "uuid",
558
+ "primaryKey": false,
559
+ "notNull": true
560
+ },
561
+ "token_hash": {
562
+ "name": "token_hash",
563
+ "type": "text",
564
+ "primaryKey": false,
565
+ "notNull": true
566
+ },
567
+ "used_at": {
568
+ "name": "used_at",
569
+ "type": "timestamp with time zone",
570
+ "primaryKey": false,
571
+ "notNull": false
572
+ },
573
+ "expires_at": {
574
+ "name": "expires_at",
575
+ "type": "timestamp with time zone",
576
+ "primaryKey": false,
577
+ "notNull": true
578
+ },
579
+ "created_at": {
580
+ "name": "created_at",
581
+ "type": "timestamp with time zone",
582
+ "primaryKey": false,
583
+ "notNull": true,
584
+ "default": "now()"
585
+ }
586
+ },
587
+ "indexes": {
588
+ "email_verification_user_idx": {
589
+ "name": "email_verification_user_idx",
590
+ "columns": [
591
+ {
592
+ "expression": "user_id",
593
+ "isExpression": false,
594
+ "asc": true,
595
+ "nulls": "last"
596
+ }
597
+ ],
598
+ "isUnique": false,
599
+ "concurrently": false,
600
+ "method": "btree",
601
+ "with": {}
602
+ },
603
+ "email_verification_hash_idx": {
604
+ "name": "email_verification_hash_idx",
605
+ "columns": [
606
+ {
607
+ "expression": "token_hash",
608
+ "isExpression": false,
609
+ "asc": true,
610
+ "nulls": "last"
611
+ }
612
+ ],
613
+ "isUnique": false,
614
+ "concurrently": false,
615
+ "method": "btree",
616
+ "with": {}
617
+ }
618
+ },
619
+ "foreignKeys": {
620
+ "email_verification_tokens_user_id_users_id_fk": {
621
+ "name": "email_verification_tokens_user_id_users_id_fk",
622
+ "tableFrom": "email_verification_tokens",
623
+ "tableTo": "users",
624
+ "columnsFrom": [
625
+ "user_id"
626
+ ],
627
+ "columnsTo": [
628
+ "id"
629
+ ],
630
+ "onDelete": "cascade",
631
+ "onUpdate": "no action"
632
+ }
633
+ },
634
+ "compositePrimaryKeys": {},
635
+ "uniqueConstraints": {},
636
+ "policies": {},
637
+ "checkConstraints": {},
638
+ "isRLSEnabled": false
520
639
  },
521
640
  "public.feature_flags": {
522
641
  "name": "feature_flags",
@@ -583,7 +702,10 @@
583
702
  "key"
584
703
  ]
585
704
  }
586
- }
705
+ },
706
+ "policies": {},
707
+ "checkConstraints": {},
708
+ "isRLSEnabled": false
587
709
  },
588
710
  "public.identity_providers": {
589
711
  "name": "identity_providers",
@@ -747,7 +869,10 @@
747
869
  }
748
870
  },
749
871
  "compositePrimaryKeys": {},
750
- "uniqueConstraints": {}
872
+ "uniqueConstraints": {},
873
+ "policies": {},
874
+ "checkConstraints": {},
875
+ "isRLSEnabled": false
751
876
  },
752
877
  "public.magic_links": {
753
878
  "name": "magic_links",
@@ -840,7 +965,10 @@
840
965
  }
841
966
  },
842
967
  "compositePrimaryKeys": {},
843
- "uniqueConstraints": {}
968
+ "uniqueConstraints": {},
969
+ "policies": {},
970
+ "checkConstraints": {},
971
+ "isRLSEnabled": false
844
972
  },
845
973
  "public.oauth2_authorization_codes": {
846
974
  "name": "oauth2_authorization_codes",
@@ -998,7 +1126,10 @@
998
1126
  }
999
1127
  },
1000
1128
  "compositePrimaryKeys": {},
1001
- "uniqueConstraints": {}
1129
+ "uniqueConstraints": {},
1130
+ "policies": {},
1131
+ "checkConstraints": {},
1132
+ "isRLSEnabled": false
1002
1133
  },
1003
1134
  "public.oauth2_consents": {
1004
1135
  "name": "oauth2_consents",
@@ -1114,7 +1245,10 @@
1114
1245
  "user_id"
1115
1246
  ]
1116
1247
  }
1117
- }
1248
+ },
1249
+ "policies": {},
1250
+ "checkConstraints": {},
1251
+ "isRLSEnabled": false
1118
1252
  },
1119
1253
  "public.oidc_connections": {
1120
1254
  "name": "oidc_connections",
@@ -1250,7 +1384,10 @@
1250
1384
  }
1251
1385
  },
1252
1386
  "compositePrimaryKeys": {},
1253
- "uniqueConstraints": {}
1387
+ "uniqueConstraints": {},
1388
+ "policies": {},
1389
+ "checkConstraints": {},
1390
+ "isRLSEnabled": false
1254
1391
  },
1255
1392
  "public.org_memberships": {
1256
1393
  "name": "org_memberships",
@@ -1367,7 +1504,15 @@
1367
1504
  "user_id"
1368
1505
  ]
1369
1506
  }
1370
- }
1507
+ },
1508
+ "policies": {},
1509
+ "checkConstraints": {
1510
+ "org_memberships_role_check": {
1511
+ "name": "org_memberships_role_check",
1512
+ "value": "role in ('owner', 'admin', 'member')"
1513
+ }
1514
+ },
1515
+ "isRLSEnabled": false
1371
1516
  },
1372
1517
  "public.organizations": {
1373
1518
  "name": "organizations",
@@ -1448,7 +1593,10 @@
1448
1593
  "slug"
1449
1594
  ]
1450
1595
  }
1451
- }
1596
+ },
1597
+ "policies": {},
1598
+ "checkConstraints": {},
1599
+ "isRLSEnabled": false
1452
1600
  },
1453
1601
  "public.password_reset_tokens": {
1454
1602
  "name": "password_reset_tokens",
@@ -1541,7 +1689,10 @@
1541
1689
  }
1542
1690
  },
1543
1691
  "compositePrimaryKeys": {},
1544
- "uniqueConstraints": {}
1692
+ "uniqueConstraints": {},
1693
+ "policies": {},
1694
+ "checkConstraints": {},
1695
+ "isRLSEnabled": false
1545
1696
  },
1546
1697
  "public.permissions": {
1547
1698
  "name": "permissions",
@@ -1592,7 +1743,10 @@
1592
1743
  "action"
1593
1744
  ]
1594
1745
  }
1595
- }
1746
+ },
1747
+ "policies": {},
1748
+ "checkConstraints": {},
1749
+ "isRLSEnabled": false
1596
1750
  },
1597
1751
  "public.refresh_tokens": {
1598
1752
  "name": "refresh_tokens",
@@ -1732,12 +1886,15 @@
1732
1886
  "columnsTo": [
1733
1887
  "id"
1734
1888
  ],
1735
- "onDelete": "set null",
1889
+ "onDelete": "restrict",
1736
1890
  "onUpdate": "no action"
1737
1891
  }
1738
1892
  },
1739
1893
  "compositePrimaryKeys": {},
1740
- "uniqueConstraints": {}
1894
+ "uniqueConstraints": {},
1895
+ "policies": {},
1896
+ "checkConstraints": {},
1897
+ "isRLSEnabled": false
1741
1898
  },
1742
1899
  "public.role_permissions": {
1743
1900
  "name": "role_permissions",
@@ -1796,7 +1953,10 @@
1796
1953
  "permission_id"
1797
1954
  ]
1798
1955
  }
1799
- }
1956
+ },
1957
+ "policies": {},
1958
+ "checkConstraints": {},
1959
+ "isRLSEnabled": false
1800
1960
  },
1801
1961
  "public.saml_connections": {
1802
1962
  "name": "saml_connections",
@@ -1913,7 +2073,10 @@
1913
2073
  }
1914
2074
  },
1915
2075
  "compositePrimaryKeys": {},
1916
- "uniqueConstraints": {}
2076
+ "uniqueConstraints": {},
2077
+ "policies": {},
2078
+ "checkConstraints": {},
2079
+ "isRLSEnabled": false
1917
2080
  },
1918
2081
  "public.secrets": {
1919
2082
  "name": "secrets",
@@ -2010,7 +2173,10 @@
2010
2173
  "key_id"
2011
2174
  ]
2012
2175
  }
2013
- }
2176
+ },
2177
+ "policies": {},
2178
+ "checkConstraints": {},
2179
+ "isRLSEnabled": false
2014
2180
  },
2015
2181
  "public.service_accounts": {
2016
2182
  "name": "service_accounts",
@@ -2096,7 +2262,10 @@
2096
2262
  }
2097
2263
  },
2098
2264
  "compositePrimaryKeys": {},
2099
- "uniqueConstraints": {}
2265
+ "uniqueConstraints": {},
2266
+ "policies": {},
2267
+ "checkConstraints": {},
2268
+ "isRLSEnabled": false
2100
2269
  },
2101
2270
  "public.sms_otp_codes": {
2102
2271
  "name": "sms_otp_codes",
@@ -2180,7 +2349,130 @@
2180
2349
  }
2181
2350
  },
2182
2351
  "compositePrimaryKeys": {},
2183
- "uniqueConstraints": {}
2352
+ "uniqueConstraints": {},
2353
+ "policies": {},
2354
+ "checkConstraints": {},
2355
+ "isRLSEnabled": false
2356
+ },
2357
+ "public.sso_identity_links": {
2358
+ "name": "sso_identity_links",
2359
+ "schema": "",
2360
+ "columns": {
2361
+ "id": {
2362
+ "name": "id",
2363
+ "type": "uuid",
2364
+ "primaryKey": true,
2365
+ "notNull": true,
2366
+ "default": "gen_random_uuid()"
2367
+ },
2368
+ "connection_type": {
2369
+ "name": "connection_type",
2370
+ "type": "text",
2371
+ "primaryKey": false,
2372
+ "notNull": true
2373
+ },
2374
+ "connection_id": {
2375
+ "name": "connection_id",
2376
+ "type": "uuid",
2377
+ "primaryKey": false,
2378
+ "notNull": true
2379
+ },
2380
+ "org_id": {
2381
+ "name": "org_id",
2382
+ "type": "uuid",
2383
+ "primaryKey": false,
2384
+ "notNull": true
2385
+ },
2386
+ "user_id": {
2387
+ "name": "user_id",
2388
+ "type": "uuid",
2389
+ "primaryKey": false,
2390
+ "notNull": true
2391
+ },
2392
+ "external_sub": {
2393
+ "name": "external_sub",
2394
+ "type": "text",
2395
+ "primaryKey": false,
2396
+ "notNull": true
2397
+ },
2398
+ "created_at": {
2399
+ "name": "created_at",
2400
+ "type": "timestamp with time zone",
2401
+ "primaryKey": false,
2402
+ "notNull": true,
2403
+ "default": "now()"
2404
+ }
2405
+ },
2406
+ "indexes": {
2407
+ "sso_identity_links_user_idx": {
2408
+ "name": "sso_identity_links_user_idx",
2409
+ "columns": [
2410
+ {
2411
+ "expression": "user_id",
2412
+ "isExpression": false,
2413
+ "asc": true,
2414
+ "nulls": "last"
2415
+ }
2416
+ ],
2417
+ "isUnique": false,
2418
+ "concurrently": false,
2419
+ "method": "btree",
2420
+ "with": {}
2421
+ }
2422
+ },
2423
+ "foreignKeys": {
2424
+ "sso_identity_links_org_id_organizations_id_fk": {
2425
+ "name": "sso_identity_links_org_id_organizations_id_fk",
2426
+ "tableFrom": "sso_identity_links",
2427
+ "tableTo": "organizations",
2428
+ "columnsFrom": [
2429
+ "org_id"
2430
+ ],
2431
+ "columnsTo": [
2432
+ "id"
2433
+ ],
2434
+ "onDelete": "cascade",
2435
+ "onUpdate": "no action"
2436
+ },
2437
+ "sso_identity_links_user_id_users_id_fk": {
2438
+ "name": "sso_identity_links_user_id_users_id_fk",
2439
+ "tableFrom": "sso_identity_links",
2440
+ "tableTo": "users",
2441
+ "columnsFrom": [
2442
+ "user_id"
2443
+ ],
2444
+ "columnsTo": [
2445
+ "id"
2446
+ ],
2447
+ "onDelete": "cascade",
2448
+ "onUpdate": "no action"
2449
+ }
2450
+ },
2451
+ "compositePrimaryKeys": {},
2452
+ "uniqueConstraints": {
2453
+ "sso_identity_links_connection_sub_unique": {
2454
+ "name": "sso_identity_links_connection_sub_unique",
2455
+ "nullsNotDistinct": false,
2456
+ "columns": [
2457
+ "connection_type",
2458
+ "connection_id",
2459
+ "external_sub"
2460
+ ]
2461
+ },
2462
+ "sso_identity_links_user_connection_unique": {
2463
+ "name": "sso_identity_links_user_connection_unique",
2464
+ "nullsNotDistinct": false,
2465
+ "columns": [
2466
+ "org_id",
2467
+ "user_id",
2468
+ "connection_type",
2469
+ "connection_id"
2470
+ ]
2471
+ }
2472
+ },
2473
+ "policies": {},
2474
+ "checkConstraints": {},
2475
+ "isRLSEnabled": false
2184
2476
  },
2185
2477
  "public.totp_backup_codes": {
2186
2478
  "name": "totp_backup_codes",
@@ -2267,7 +2559,10 @@
2267
2559
  }
2268
2560
  },
2269
2561
  "compositePrimaryKeys": {},
2270
- "uniqueConstraints": {}
2562
+ "uniqueConstraints": {},
2563
+ "policies": {},
2564
+ "checkConstraints": {},
2565
+ "isRLSEnabled": false
2271
2566
  },
2272
2567
  "public.user_devices": {
2273
2568
  "name": "user_devices",
@@ -2375,7 +2670,10 @@
2375
2670
  "fingerprint_hash"
2376
2671
  ]
2377
2672
  }
2378
- }
2673
+ },
2674
+ "policies": {},
2675
+ "checkConstraints": {},
2676
+ "isRLSEnabled": false
2379
2677
  },
2380
2678
  "public.user_identities": {
2381
2679
  "name": "user_identities",
@@ -2500,7 +2798,10 @@
2500
2798
  }
2501
2799
  },
2502
2800
  "compositePrimaryKeys": {},
2503
- "uniqueConstraints": {}
2801
+ "uniqueConstraints": {},
2802
+ "policies": {},
2803
+ "checkConstraints": {},
2804
+ "isRLSEnabled": false
2504
2805
  },
2505
2806
  "public.user_sessions": {
2506
2807
  "name": "user_sessions",
@@ -2612,7 +2913,10 @@
2612
2913
  }
2613
2914
  },
2614
2915
  "compositePrimaryKeys": {},
2615
- "uniqueConstraints": {}
2916
+ "uniqueConstraints": {},
2917
+ "policies": {},
2918
+ "checkConstraints": {},
2919
+ "isRLSEnabled": false
2616
2920
  },
2617
2921
  "public.users": {
2618
2922
  "name": "users",
@@ -2689,6 +2993,20 @@
2689
2993
  "notNull": true,
2690
2994
  "default": "'user'"
2691
2995
  },
2996
+ "is_active": {
2997
+ "name": "is_active",
2998
+ "type": "boolean",
2999
+ "primaryKey": false,
3000
+ "notNull": true,
3001
+ "default": true
3002
+ },
3003
+ "account_review_required": {
3004
+ "name": "account_review_required",
3005
+ "type": "boolean",
3006
+ "primaryKey": false,
3007
+ "notNull": true,
3008
+ "default": false
3009
+ },
2692
3010
  "default_org_id": {
2693
3011
  "name": "default_org_id",
2694
3012
  "type": "uuid",
@@ -2853,7 +3171,15 @@
2853
3171
  "username"
2854
3172
  ]
2855
3173
  }
2856
- }
3174
+ },
3175
+ "policies": {},
3176
+ "checkConstraints": {
3177
+ "users_platform_role_check": {
3178
+ "name": "users_platform_role_check",
3179
+ "value": "role in ('owner', 'user')"
3180
+ }
3181
+ },
3182
+ "isRLSEnabled": false
2857
3183
  },
2858
3184
  "public.webauthn_credentials": {
2859
3185
  "name": "webauthn_credentials",
@@ -2965,7 +3291,235 @@
2965
3291
  "credential_id"
2966
3292
  ]
2967
3293
  }
2968
- }
3294
+ },
3295
+ "policies": {},
3296
+ "checkConstraints": {},
3297
+ "isRLSEnabled": false
3298
+ },
3299
+ "public.webhook_deliveries": {
3300
+ "name": "webhook_deliveries",
3301
+ "schema": "",
3302
+ "columns": {
3303
+ "id": {
3304
+ "name": "id",
3305
+ "type": "uuid",
3306
+ "primaryKey": true,
3307
+ "notNull": true,
3308
+ "default": "gen_random_uuid()"
3309
+ },
3310
+ "endpoint_id": {
3311
+ "name": "endpoint_id",
3312
+ "type": "uuid",
3313
+ "primaryKey": false,
3314
+ "notNull": true
3315
+ },
3316
+ "event_type": {
3317
+ "name": "event_type",
3318
+ "type": "text",
3319
+ "primaryKey": false,
3320
+ "notNull": true
3321
+ },
3322
+ "payload": {
3323
+ "name": "payload",
3324
+ "type": "jsonb",
3325
+ "primaryKey": false,
3326
+ "notNull": true,
3327
+ "default": "'{}'::jsonb"
3328
+ },
3329
+ "status": {
3330
+ "name": "status",
3331
+ "type": "text",
3332
+ "primaryKey": false,
3333
+ "notNull": true,
3334
+ "default": "'pending'"
3335
+ },
3336
+ "attempts": {
3337
+ "name": "attempts",
3338
+ "type": "integer",
3339
+ "primaryKey": false,
3340
+ "notNull": true,
3341
+ "default": 0
3342
+ },
3343
+ "response_status": {
3344
+ "name": "response_status",
3345
+ "type": "integer",
3346
+ "primaryKey": false,
3347
+ "notNull": false
3348
+ },
3349
+ "response_body": {
3350
+ "name": "response_body",
3351
+ "type": "text",
3352
+ "primaryKey": false,
3353
+ "notNull": false
3354
+ },
3355
+ "last_attempt_at": {
3356
+ "name": "last_attempt_at",
3357
+ "type": "timestamp with time zone",
3358
+ "primaryKey": false,
3359
+ "notNull": false
3360
+ },
3361
+ "created_at": {
3362
+ "name": "created_at",
3363
+ "type": "timestamp with time zone",
3364
+ "primaryKey": false,
3365
+ "notNull": true,
3366
+ "default": "now()"
3367
+ }
3368
+ },
3369
+ "indexes": {
3370
+ "webhook_deliveries_endpoint_idx": {
3371
+ "name": "webhook_deliveries_endpoint_idx",
3372
+ "columns": [
3373
+ {
3374
+ "expression": "endpoint_id",
3375
+ "isExpression": false,
3376
+ "asc": true,
3377
+ "nulls": "last"
3378
+ }
3379
+ ],
3380
+ "isUnique": false,
3381
+ "concurrently": false,
3382
+ "method": "btree",
3383
+ "with": {}
3384
+ },
3385
+ "webhook_deliveries_status_idx": {
3386
+ "name": "webhook_deliveries_status_idx",
3387
+ "columns": [
3388
+ {
3389
+ "expression": "status",
3390
+ "isExpression": false,
3391
+ "asc": true,
3392
+ "nulls": "last"
3393
+ }
3394
+ ],
3395
+ "isUnique": false,
3396
+ "concurrently": false,
3397
+ "method": "btree",
3398
+ "with": {}
3399
+ }
3400
+ },
3401
+ "foreignKeys": {
3402
+ "webhook_deliveries_endpoint_id_webhook_endpoints_id_fk": {
3403
+ "name": "webhook_deliveries_endpoint_id_webhook_endpoints_id_fk",
3404
+ "tableFrom": "webhook_deliveries",
3405
+ "tableTo": "webhook_endpoints",
3406
+ "columnsFrom": [
3407
+ "endpoint_id"
3408
+ ],
3409
+ "columnsTo": [
3410
+ "id"
3411
+ ],
3412
+ "onDelete": "cascade",
3413
+ "onUpdate": "no action"
3414
+ }
3415
+ },
3416
+ "compositePrimaryKeys": {},
3417
+ "uniqueConstraints": {},
3418
+ "policies": {},
3419
+ "checkConstraints": {},
3420
+ "isRLSEnabled": false
3421
+ },
3422
+ "public.webhook_endpoints": {
3423
+ "name": "webhook_endpoints",
3424
+ "schema": "",
3425
+ "columns": {
3426
+ "id": {
3427
+ "name": "id",
3428
+ "type": "uuid",
3429
+ "primaryKey": true,
3430
+ "notNull": true,
3431
+ "default": "gen_random_uuid()"
3432
+ },
3433
+ "app_id": {
3434
+ "name": "app_id",
3435
+ "type": "uuid",
3436
+ "primaryKey": false,
3437
+ "notNull": false
3438
+ },
3439
+ "url": {
3440
+ "name": "url",
3441
+ "type": "text",
3442
+ "primaryKey": false,
3443
+ "notNull": true
3444
+ },
3445
+ "description": {
3446
+ "name": "description",
3447
+ "type": "text",
3448
+ "primaryKey": false,
3449
+ "notNull": false
3450
+ },
3451
+ "events": {
3452
+ "name": "events",
3453
+ "type": "text[]",
3454
+ "primaryKey": false,
3455
+ "notNull": true,
3456
+ "default": "'{}'::text[]"
3457
+ },
3458
+ "secret": {
3459
+ "name": "secret",
3460
+ "type": "text",
3461
+ "primaryKey": false,
3462
+ "notNull": true
3463
+ },
3464
+ "is_active": {
3465
+ "name": "is_active",
3466
+ "type": "boolean",
3467
+ "primaryKey": false,
3468
+ "notNull": true,
3469
+ "default": true
3470
+ },
3471
+ "created_at": {
3472
+ "name": "created_at",
3473
+ "type": "timestamp with time zone",
3474
+ "primaryKey": false,
3475
+ "notNull": true,
3476
+ "default": "now()"
3477
+ },
3478
+ "updated_at": {
3479
+ "name": "updated_at",
3480
+ "type": "timestamp with time zone",
3481
+ "primaryKey": false,
3482
+ "notNull": true,
3483
+ "default": "now()"
3484
+ }
3485
+ },
3486
+ "indexes": {
3487
+ "webhook_endpoints_app_idx": {
3488
+ "name": "webhook_endpoints_app_idx",
3489
+ "columns": [
3490
+ {
3491
+ "expression": "app_id",
3492
+ "isExpression": false,
3493
+ "asc": true,
3494
+ "nulls": "last"
3495
+ }
3496
+ ],
3497
+ "isUnique": false,
3498
+ "concurrently": false,
3499
+ "method": "btree",
3500
+ "with": {}
3501
+ }
3502
+ },
3503
+ "foreignKeys": {
3504
+ "webhook_endpoints_app_id_applications_id_fk": {
3505
+ "name": "webhook_endpoints_app_id_applications_id_fk",
3506
+ "tableFrom": "webhook_endpoints",
3507
+ "tableTo": "applications",
3508
+ "columnsFrom": [
3509
+ "app_id"
3510
+ ],
3511
+ "columnsTo": [
3512
+ "id"
3513
+ ],
3514
+ "onDelete": "cascade",
3515
+ "onUpdate": "no action"
3516
+ }
3517
+ },
3518
+ "compositePrimaryKeys": {},
3519
+ "uniqueConstraints": {},
3520
+ "policies": {},
3521
+ "checkConstraints": {},
3522
+ "isRLSEnabled": false
2969
3523
  },
2970
3524
  "public.workflow_runs": {
2971
3525
  "name": "workflow_runs",
@@ -3057,7 +3611,10 @@
3057
3611
  }
3058
3612
  },
3059
3613
  "compositePrimaryKeys": {},
3060
- "uniqueConstraints": {}
3614
+ "uniqueConstraints": {},
3615
+ "policies": {},
3616
+ "checkConstraints": {},
3617
+ "isRLSEnabled": false
3061
3618
  },
3062
3619
  "public.workflows": {
3063
3620
  "name": "workflows",
@@ -3150,11 +3707,18 @@
3150
3707
  }
3151
3708
  },
3152
3709
  "compositePrimaryKeys": {},
3153
- "uniqueConstraints": {}
3710
+ "uniqueConstraints": {},
3711
+ "policies": {},
3712
+ "checkConstraints": {},
3713
+ "isRLSEnabled": false
3154
3714
  }
3155
3715
  },
3156
3716
  "enums": {},
3157
3717
  "schemas": {},
3718
+ "sequences": {},
3719
+ "roles": {},
3720
+ "policies": {},
3721
+ "views": {},
3158
3722
  "_meta": {
3159
3723
  "columns": {},
3160
3724
  "schemas": {},