@inkeep/agents-core 0.67.4 → 0.68.1

package/dist/auth/auth-schema.js

@@ -1,5 +1,5 @@
 import { relations } from "drizzle-orm";
-import { boolean, index, integer, pgTable, text, timestamp, uniqueIndex } from "drizzle-orm/pg-core";
+import { boolean, index, integer, jsonb, pgTable, text, timestamp, uniqueIndex } from "drizzle-orm/pg-core";
 
 //#region src/auth/auth-schema.ts
 const user = pgTable("user", {
@@ -45,6 +45,79 @@ const verification = pgTable("verification", {
 	createdAt: timestamp("created_at").defaultNow().notNull(),
 	updatedAt: timestamp("updated_at").defaultNow().$onUpdate(() => /* @__PURE__ */ new Date()).notNull()
 }, (table) => [index("verification_identifier_idx").on(table.identifier)]);
+const jwks = pgTable("jwks", {
+	id: text("id").primaryKey(),
+	publicKey: text("public_key").notNull(),
+	privateKey: text("private_key").notNull(),
+	createdAt: timestamp("created_at").notNull(),
+	expiresAt: timestamp("expires_at")
+});
+const oauthClient = pgTable("oauth_client", {
+	id: text("id").primaryKey(),
+	clientId: text("client_id").notNull().unique(),
+	clientSecret: text("client_secret"),
+	disabled: boolean("disabled").default(false),
+	skipConsent: boolean("skip_consent"),
+	enableEndSession: boolean("enable_end_session"),
+	subjectType: text("subject_type"),
+	scopes: text("scopes").array(),
+	userId: text("user_id").references(() => user.id, { onDelete: "cascade" }),
+	createdAt: timestamp("created_at"),
+	updatedAt: timestamp("updated_at"),
+	name: text("name"),
+	uri: text("uri"),
+	icon: text("icon"),
+	contacts: text("contacts").array(),
+	tos: text("tos"),
+	policy: text("policy"),
+	softwareId: text("software_id"),
+	softwareVersion: text("software_version"),
+	softwareStatement: text("software_statement"),
+	redirectUris: text("redirect_uris").array().notNull(),
+	postLogoutRedirectUris: text("post_logout_redirect_uris").array(),
+	tokenEndpointAuthMethod: text("token_endpoint_auth_method"),
+	grantTypes: text("grant_types").array(),
+	responseTypes: text("response_types").array(),
+	public: boolean("public"),
+	type: text("type"),
+	requirePKCE: boolean("require_pkce"),
+	referenceId: text("reference_id"),
+	metadata: jsonb("metadata")
+});
+const oauthRefreshToken = pgTable("oauth_refresh_token", {
+	id: text("id").primaryKey(),
+	token: text("token").notNull(),
+	clientId: text("client_id").notNull().references(() => oauthClient.clientId, { onDelete: "cascade" }),
+	sessionId: text("session_id").references(() => session.id, { onDelete: "set null" }),
+	userId: text("user_id").notNull().references(() => user.id, { onDelete: "cascade" }),
+	referenceId: text("reference_id"),
+	expiresAt: timestamp("expires_at"),
+	createdAt: timestamp("created_at"),
+	revoked: timestamp("revoked"),
+	authTime: timestamp("auth_time"),
+	scopes: text("scopes").array().notNull()
+});
+const oauthAccessToken = pgTable("oauth_access_token", {
+	id: text("id").primaryKey(),
+	token: text("token").unique(),
+	clientId: text("client_id").notNull().references(() => oauthClient.clientId, { onDelete: "cascade" }),
+	sessionId: text("session_id").references(() => session.id, { onDelete: "set null" }),
+	userId: text("user_id").references(() => user.id, { onDelete: "cascade" }),
+	referenceId: text("reference_id"),
+	refreshId: text("refresh_id").references(() => oauthRefreshToken.id, { onDelete: "cascade" }),
+	expiresAt: timestamp("expires_at"),
+	createdAt: timestamp("created_at"),
+	scopes: text("scopes").array().notNull()
+});
+const oauthConsent = pgTable("oauth_consent", {
+	id: text("id").primaryKey(),
+	clientId: text("client_id").notNull().references(() => oauthClient.clientId, { onDelete: "cascade" }),
+	userId: text("user_id").references(() => user.id, { onDelete: "cascade" }),
+	referenceId: text("reference_id"),
+	scopes: text("scopes").array().notNull(),
+	createdAt: timestamp("created_at"),
+	updatedAt: timestamp("updated_at")
+});
 const ssoProvider = pgTable("sso_provider", {
 	id: text("id").primaryKey(),
 	issuer: text("issuer").notNull(),
@@ -99,18 +172,78 @@ const deviceCode = pgTable("device_code", {
 const userRelations = relations(user, ({ many }) => ({
 	sessions: many(session),
 	accounts: many(account),
+	oauthClients: many(oauthClient),
+	oauthRefreshTokens: many(oauthRefreshToken),
+	oauthAccessTokens: many(oauthAccessToken),
+	oauthConsents: many(oauthConsent),
 	ssoProviders: many(ssoProvider),
 	members: many(member),
 	invitations: many(invitation)
 }));
-const sessionRelations = relations(session, ({ one }) => ({ user: one(user, {
-	fields: [session.userId],
-	references: [user.id]
-}) }));
+const sessionRelations = relations(session, ({ one, many }) => ({
+	user: one(user, {
+		fields: [session.userId],
+		references: [user.id]
+	}),
+	oauthRefreshTokens: many(oauthRefreshToken),
+	oauthAccessTokens: many(oauthAccessToken)
+}));
 const accountRelations = relations(account, ({ one }) => ({ user: one(user, {
 	fields: [account.userId],
 	references: [user.id]
 }) }));
+const oauthClientRelations = relations(oauthClient, ({ one, many }) => ({
+	user: one(user, {
+		fields: [oauthClient.userId],
+		references: [user.id]
+	}),
+	oauthRefreshTokens: many(oauthRefreshToken),
+	oauthAccessTokens: many(oauthAccessToken),
+	oauthConsents: many(oauthConsent)
+}));
+const oauthRefreshTokenRelations = relations(oauthRefreshToken, ({ one, many }) => ({
+	oauthClient: one(oauthClient, {
+		fields: [oauthRefreshToken.clientId],
+		references: [oauthClient.clientId]
+	}),
+	session: one(session, {
+		fields: [oauthRefreshToken.sessionId],
+		references: [session.id]
+	}),
+	user: one(user, {
+		fields: [oauthRefreshToken.userId],
+		references: [user.id]
+	}),
+	oauthAccessTokens: many(oauthAccessToken)
+}));
+const oauthAccessTokenRelations = relations(oauthAccessToken, ({ one }) => ({
+	oauthClient: one(oauthClient, {
+		fields: [oauthAccessToken.clientId],
+		references: [oauthClient.clientId]
+	}),
+	session: one(session, {
+		fields: [oauthAccessToken.sessionId],
+		references: [session.id]
+	}),
+	user: one(user, {
+		fields: [oauthAccessToken.userId],
+		references: [user.id]
+	}),
+	oauthRefreshToken: one(oauthRefreshToken, {
+		fields: [oauthAccessToken.refreshId],
+		references: [oauthRefreshToken.id]
+	})
+}));
+const oauthConsentRelations = relations(oauthConsent, ({ one }) => ({
+	oauthClient: one(oauthClient, {
+		fields: [oauthConsent.clientId],
+		references: [oauthClient.clientId]
+	}),
+	user: one(user, {
+		fields: [oauthConsent.userId],
+		references: [user.id]
+	})
+}));
 const ssoProviderRelations = relations(ssoProvider, ({ one }) => ({ user: one(user, {
 	fields: [ssoProvider.userId],
 	references: [user.id]
@@ -141,4 +274,4 @@ const invitationRelations = relations(invitation, ({ one }) => ({
 }));
 
 //#endregion
-export { account, accountRelations, deviceCode, invitation, invitationRelations, member, memberRelations, organization, organizationRelations, session, sessionRelations, ssoProvider, ssoProviderRelations, user, userRelations, verification };
+export { account, accountRelations, deviceCode, invitation, invitationRelations, jwks, member, memberRelations, oauthAccessToken, oauthAccessTokenRelations, oauthClient, oauthClientRelations, oauthConsent, oauthConsentRelations, oauthRefreshToken, oauthRefreshTokenRelations, organization, organizationRelations, session, sessionRelations, ssoProvider, ssoProviderRelations, user, userRelations, verification };