@revealui/db 0.2.1 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (213) hide show
  1. package/dist/audit-store.d.ts.map +1 -1
  2. package/dist/audit-store.js.map +1 -1
  3. package/dist/cleanup/cross-db-cleanup.d.ts +63 -0
  4. package/dist/cleanup/cross-db-cleanup.d.ts.map +1 -0
  5. package/dist/cleanup/cross-db-cleanup.js +150 -0
  6. package/dist/cleanup/cross-db-cleanup.js.map +1 -0
  7. package/dist/cleanup/index.d.ts +10 -0
  8. package/dist/cleanup/index.d.ts.map +1 -0
  9. package/dist/cleanup/index.js +10 -0
  10. package/dist/cleanup/index.js.map +1 -0
  11. package/dist/cleanup/stale-tokens.d.ts +37 -0
  12. package/dist/cleanup/stale-tokens.d.ts.map +1 -0
  13. package/dist/cleanup/stale-tokens.js +113 -0
  14. package/dist/cleanup/stale-tokens.js.map +1 -0
  15. package/dist/client/index.d.ts +13 -0
  16. package/dist/client/index.d.ts.map +1 -1
  17. package/dist/client/index.js +46 -7
  18. package/dist/client/index.js.map +1 -1
  19. package/dist/client/types.d.ts.map +1 -1
  20. package/dist/crypto.js.map +1 -1
  21. package/dist/index.d.ts +2 -1
  22. package/dist/index.d.ts.map +1 -1
  23. package/dist/index.js +4 -2
  24. package/dist/index.js.map +1 -1
  25. package/dist/log-transport.d.ts.map +1 -1
  26. package/dist/log-transport.js +3 -1
  27. package/dist/log-transport.js.map +1 -1
  28. package/dist/pool.d.ts +0 -3
  29. package/dist/pool.d.ts.map +1 -1
  30. package/dist/pool.js +13 -5
  31. package/dist/pool.js.map +1 -1
  32. package/dist/queries/boards.d.ts +13 -1
  33. package/dist/queries/boards.d.ts.map +1 -1
  34. package/dist/queries/boards.js +5 -2
  35. package/dist/queries/boards.js.map +1 -1
  36. package/dist/queries/code-provenance.d.ts.map +1 -1
  37. package/dist/queries/code-provenance.js.map +1 -1
  38. package/dist/queries/media.d.ts +9 -0
  39. package/dist/queries/media.d.ts.map +1 -1
  40. package/dist/queries/media.js +23 -13
  41. package/dist/queries/media.js.map +1 -1
  42. package/dist/queries/pages.d.ts +10 -0
  43. package/dist/queries/pages.d.ts.map +1 -1
  44. package/dist/queries/pages.js +24 -5
  45. package/dist/queries/pages.js.map +1 -1
  46. package/dist/queries/posts.d.ts +10 -0
  47. package/dist/queries/posts.d.ts.map +1 -1
  48. package/dist/queries/posts.js +17 -5
  49. package/dist/queries/posts.js.map +1 -1
  50. package/dist/queries/sites.d.ts +36 -1
  51. package/dist/queries/sites.d.ts.map +1 -1
  52. package/dist/queries/sites.js +45 -5
  53. package/dist/queries/sites.js.map +1 -1
  54. package/dist/queries/ticket-comments.d.ts +9 -1
  55. package/dist/queries/ticket-comments.d.ts.map +1 -1
  56. package/dist/queries/ticket-comments.js +4 -0
  57. package/dist/queries/ticket-comments.js.map +1 -1
  58. package/dist/queries/ticket-labels.d.ts +10 -0
  59. package/dist/queries/ticket-labels.d.ts.map +1 -1
  60. package/dist/queries/ticket-labels.js +4 -0
  61. package/dist/queries/ticket-labels.js.map +1 -1
  62. package/dist/queries/tickets.d.ts +1 -1
  63. package/dist/queries/tickets.d.ts.map +1 -1
  64. package/dist/queries/tickets.js +4 -7
  65. package/dist/queries/tickets.js.map +1 -1
  66. package/dist/queries/users.d.ts +109 -0
  67. package/dist/queries/users.d.ts.map +1 -0
  68. package/dist/queries/users.js +44 -0
  69. package/dist/queries/users.js.map +1 -0
  70. package/dist/schema/accounts.d.ts +962 -0
  71. package/dist/schema/accounts.d.ts.map +1 -0
  72. package/dist/schema/accounts.js +115 -0
  73. package/dist/schema/accounts.js.map +1 -0
  74. package/dist/schema/agents.d.ts +165 -1
  75. package/dist/schema/agents.d.ts.map +1 -1
  76. package/dist/schema/agents.js +56 -5
  77. package/dist/schema/agents.js.map +1 -1
  78. package/dist/schema/api-keys.d.ts +17 -0
  79. package/dist/schema/api-keys.d.ts.map +1 -1
  80. package/dist/schema/api-keys.js +3 -0
  81. package/dist/schema/api-keys.js.map +1 -1
  82. package/dist/schema/app-logs.d.ts.map +1 -1
  83. package/dist/schema/app-logs.js.map +1 -1
  84. package/dist/schema/audit-log.d.ts.map +1 -1
  85. package/dist/schema/audit-log.js.map +1 -1
  86. package/dist/schema/cms.d.ts +68 -0
  87. package/dist/schema/cms.d.ts.map +1 -1
  88. package/dist/schema/cms.js +18 -4
  89. package/dist/schema/cms.js.map +1 -1
  90. package/dist/schema/code-provenance.d.ts.map +1 -1
  91. package/dist/schema/code-provenance.js.map +1 -1
  92. package/dist/schema/collab-edits.d.ts.map +1 -1
  93. package/dist/schema/collab-edits.js +2 -2
  94. package/dist/schema/collab-edits.js.map +1 -1
  95. package/dist/schema/coordination.d.ts +967 -0
  96. package/dist/schema/coordination.d.ts.map +1 -0
  97. package/dist/schema/coordination.js +109 -0
  98. package/dist/schema/coordination.js.map +1 -0
  99. package/dist/schema/crdt-operations.d.ts.map +1 -1
  100. package/dist/schema/crdt-operations.js.map +1 -1
  101. package/dist/schema/error-events.d.ts.map +1 -1
  102. package/dist/schema/error-events.js.map +1 -1
  103. package/dist/schema/gdpr.d.ts +529 -0
  104. package/dist/schema/gdpr.d.ts.map +1 -0
  105. package/dist/schema/gdpr.js +93 -0
  106. package/dist/schema/gdpr.js.map +1 -0
  107. package/dist/schema/index.d.ts +37 -1
  108. package/dist/schema/index.d.ts.map +1 -1
  109. package/dist/schema/index.js +73 -0
  110. package/dist/schema/index.js.map +1 -1
  111. package/dist/schema/jobs.d.ts +242 -0
  112. package/dist/schema/jobs.d.ts.map +1 -0
  113. package/dist/schema/jobs.js +48 -0
  114. package/dist/schema/jobs.js.map +1 -0
  115. package/dist/schema/licenses.d.ts +51 -0
  116. package/dist/schema/licenses.d.ts.map +1 -1
  117. package/dist/schema/licenses.js +8 -2
  118. package/dist/schema/licenses.js.map +1 -1
  119. package/dist/schema/magic-links.d.ts +136 -0
  120. package/dist/schema/magic-links.d.ts.map +1 -0
  121. package/dist/schema/magic-links.js +32 -0
  122. package/dist/schema/magic-links.js.map +1 -0
  123. package/dist/schema/marketplace.d.ts +496 -0
  124. package/dist/schema/marketplace.d.ts.map +1 -0
  125. package/dist/schema/marketplace.js +110 -0
  126. package/dist/schema/marketplace.js.map +1 -0
  127. package/dist/schema/node-ids.d.ts.map +1 -1
  128. package/dist/schema/node-ids.js.map +1 -1
  129. package/dist/schema/oauth-accounts.d.ts +34 -0
  130. package/dist/schema/oauth-accounts.d.ts.map +1 -1
  131. package/dist/schema/oauth-accounts.js +5 -0
  132. package/dist/schema/oauth-accounts.js.map +1 -1
  133. package/dist/schema/pages.d.ts +34 -0
  134. package/dist/schema/pages.d.ts.map +1 -1
  135. package/dist/schema/pages.js +14 -4
  136. package/dist/schema/pages.js.map +1 -1
  137. package/dist/schema/passkeys.d.ts +208 -0
  138. package/dist/schema/passkeys.d.ts.map +1 -0
  139. package/dist/schema/passkeys.js +47 -0
  140. package/dist/schema/passkeys.js.map +1 -0
  141. package/dist/schema/password-reset-tokens.d.ts.map +1 -1
  142. package/dist/schema/password-reset-tokens.js +5 -2
  143. package/dist/schema/password-reset-tokens.js.map +1 -1
  144. package/dist/schema/rag.d.ts.map +1 -1
  145. package/dist/schema/rag.js +5 -2
  146. package/dist/schema/rag.js.map +1 -1
  147. package/dist/schema/rate-limits.d.ts.map +1 -1
  148. package/dist/schema/rate-limits.js +5 -2
  149. package/dist/schema/rate-limits.js.map +1 -1
  150. package/dist/schema/rest.d.ts +9 -2
  151. package/dist/schema/rest.d.ts.map +1 -1
  152. package/dist/schema/rest.js +9 -2
  153. package/dist/schema/rest.js.map +1 -1
  154. package/dist/schema/sites.d.ts +34 -0
  155. package/dist/schema/sites.d.ts.map +1 -1
  156. package/dist/schema/sites.js +15 -3
  157. package/dist/schema/sites.js.map +1 -1
  158. package/dist/schema/tenants.d.ts +188 -0
  159. package/dist/schema/tenants.d.ts.map +1 -0
  160. package/dist/schema/tenants.js +15 -0
  161. package/dist/schema/tenants.js.map +1 -0
  162. package/dist/schema/tickets.d.ts.map +1 -1
  163. package/dist/schema/tickets.js +17 -5
  164. package/dist/schema/tickets.js.map +1 -1
  165. package/dist/schema/users.d.ts +174 -0
  166. package/dist/schema/users.d.ts.map +1 -1
  167. package/dist/schema/users.js +32 -3
  168. package/dist/schema/users.js.map +1 -1
  169. package/dist/schema/vector.d.ts.map +1 -1
  170. package/dist/schema/vector.js.map +1 -1
  171. package/dist/schema/waitlist.d.ts.map +1 -1
  172. package/dist/schema/waitlist.js.map +1 -1
  173. package/dist/schema/webhook-events.d.ts.map +1 -1
  174. package/dist/schema/webhook-events.js.map +1 -1
  175. package/dist/schema/yjs-documents.d.ts.map +1 -1
  176. package/dist/schema/yjs-documents.js.map +1 -1
  177. package/dist/scripts/cleanup-expired.d.ts +12 -0
  178. package/dist/scripts/cleanup-expired.d.ts.map +1 -0
  179. package/dist/scripts/cleanup-expired.js +50 -0
  180. package/dist/scripts/cleanup-expired.js.map +1 -0
  181. package/dist/security-audit-storage.d.ts +54 -0
  182. package/dist/security-audit-storage.d.ts.map +1 -0
  183. package/dist/security-audit-storage.js +100 -0
  184. package/dist/security-audit-storage.js.map +1 -0
  185. package/dist/types/database.d.ts +320 -2
  186. package/dist/types/database.d.ts.map +1 -1
  187. package/dist/types/database.js +66 -1
  188. package/dist/types/database.js.map +1 -1
  189. package/dist/types/discover.d.ts +2 -2
  190. package/dist/types/discover.d.ts.map +1 -1
  191. package/dist/types/discover.js +16 -16
  192. package/dist/types/discover.js.map +1 -1
  193. package/dist/types/extract-relationships.d.ts.map +1 -1
  194. package/dist/types/extract-relationships.js.map +1 -1
  195. package/dist/types/generate-contracts.js.map +1 -1
  196. package/dist/types/generate-zod-schemas.js.map +1 -1
  197. package/dist/types/generate.js.map +1 -1
  198. package/dist/types/index.d.ts.map +1 -1
  199. package/dist/types/introspect.d.ts.map +1 -1
  200. package/dist/types/introspect.js +0 -1
  201. package/dist/types/introspect.js.map +1 -1
  202. package/dist/types/stripe-schema.d.ts.map +1 -1
  203. package/dist/types/stripe-schema.js +7 -2
  204. package/dist/types/stripe-schema.js.map +1 -1
  205. package/dist/utils/soft-delete.d.ts +45 -0
  206. package/dist/utils/soft-delete.d.ts.map +1 -0
  207. package/dist/utils/soft-delete.js +45 -0
  208. package/dist/utils/soft-delete.js.map +1 -0
  209. package/dist/validation/cross-db.d.ts +60 -0
  210. package/dist/validation/cross-db.d.ts.map +1 -0
  211. package/dist/validation/cross-db.js +146 -0
  212. package/dist/validation/cross-db.js.map +1 -0
  213. package/package.json +25 -6
@@ -248,6 +248,23 @@ export declare const users: import("drizzle-orm/pg-core").PgTableWithColumns<{
248
248
  identity: undefined;
249
249
  generated: undefined;
250
250
  }, {}, {}>;
251
+ emailVerificationTokenExpiresAt: import("drizzle-orm/pg-core").PgColumn<{
252
+ name: "email_verification_token_expires_at";
253
+ tableName: "users";
254
+ dataType: "date";
255
+ columnType: "PgTimestamp";
256
+ data: Date;
257
+ driverParam: string;
258
+ notNull: false;
259
+ hasDefault: false;
260
+ isPrimaryKey: false;
261
+ isAutoincrement: false;
262
+ hasRuntimeDefault: false;
263
+ enumValues: undefined;
264
+ baseColumn: never;
265
+ identity: undefined;
266
+ generated: undefined;
267
+ }, {}, {}>;
251
268
  emailVerifiedAt: import("drizzle-orm/pg-core").PgColumn<{
252
269
  name: "email_verified_at";
253
270
  tableName: "users";
@@ -316,6 +333,93 @@ export declare const users: import("drizzle-orm/pg-core").PgTableWithColumns<{
316
333
  identity: undefined;
317
334
  generated: undefined;
318
335
  }, {}, {}>;
336
+ mfaEnabled: import("drizzle-orm/pg-core").PgColumn<{
337
+ name: "mfa_enabled";
338
+ tableName: "users";
339
+ dataType: "boolean";
340
+ columnType: "PgBoolean";
341
+ data: boolean;
342
+ driverParam: boolean;
343
+ notNull: true;
344
+ hasDefault: true;
345
+ isPrimaryKey: false;
346
+ isAutoincrement: false;
347
+ hasRuntimeDefault: false;
348
+ enumValues: undefined;
349
+ baseColumn: never;
350
+ identity: undefined;
351
+ generated: undefined;
352
+ }, {}, {}>;
353
+ mfaSecret: import("drizzle-orm/pg-core").PgColumn<{
354
+ name: "mfa_secret";
355
+ tableName: "users";
356
+ dataType: "string";
357
+ columnType: "PgText";
358
+ data: string;
359
+ driverParam: string;
360
+ notNull: false;
361
+ hasDefault: false;
362
+ isPrimaryKey: false;
363
+ isAutoincrement: false;
364
+ hasRuntimeDefault: false;
365
+ enumValues: [string, ...string[]];
366
+ baseColumn: never;
367
+ identity: undefined;
368
+ generated: undefined;
369
+ }, {}, {}>;
370
+ mfaBackupCodes: import("drizzle-orm/pg-core").PgColumn<{
371
+ name: "mfa_backup_codes";
372
+ tableName: "users";
373
+ dataType: "json";
374
+ columnType: "PgJsonb";
375
+ data: string[];
376
+ driverParam: unknown;
377
+ notNull: false;
378
+ hasDefault: false;
379
+ isPrimaryKey: false;
380
+ isAutoincrement: false;
381
+ hasRuntimeDefault: false;
382
+ enumValues: undefined;
383
+ baseColumn: never;
384
+ identity: undefined;
385
+ generated: undefined;
386
+ }, {}, {
387
+ $type: string[];
388
+ }>;
389
+ mfaVerifiedAt: import("drizzle-orm/pg-core").PgColumn<{
390
+ name: "mfa_verified_at";
391
+ tableName: "users";
392
+ dataType: "date";
393
+ columnType: "PgTimestamp";
394
+ data: Date;
395
+ driverParam: string;
396
+ notNull: false;
397
+ hasDefault: false;
398
+ isPrimaryKey: false;
399
+ isAutoincrement: false;
400
+ hasRuntimeDefault: false;
401
+ enumValues: undefined;
402
+ baseColumn: never;
403
+ identity: undefined;
404
+ generated: undefined;
405
+ }, {}, {}>;
406
+ sshKeyFingerprint: import("drizzle-orm/pg-core").PgColumn<{
407
+ name: "ssh_key_fingerprint";
408
+ tableName: "users";
409
+ dataType: "string";
410
+ columnType: "PgText";
411
+ data: string;
412
+ driverParam: string;
413
+ notNull: false;
414
+ hasDefault: false;
415
+ isPrimaryKey: false;
416
+ isAutoincrement: false;
417
+ hasRuntimeDefault: false;
418
+ enumValues: [string, ...string[]];
419
+ baseColumn: never;
420
+ identity: undefined;
421
+ generated: undefined;
422
+ }, {}, {}>;
319
423
  preferences: import("drizzle-orm/pg-core").PgColumn<{
320
424
  name: "preferences";
321
425
  tableName: "users";
@@ -384,6 +488,40 @@ export declare const users: import("drizzle-orm/pg-core").PgTableWithColumns<{
384
488
  identity: undefined;
385
489
  generated: undefined;
386
490
  }, {}, {}>;
491
+ deletedAt: import("drizzle-orm/pg-core").PgColumn<{
492
+ name: "deleted_at";
493
+ tableName: "users";
494
+ dataType: "date";
495
+ columnType: "PgTimestamp";
496
+ data: Date;
497
+ driverParam: string;
498
+ notNull: false;
499
+ hasDefault: false;
500
+ isPrimaryKey: false;
501
+ isAutoincrement: false;
502
+ hasRuntimeDefault: false;
503
+ enumValues: undefined;
504
+ baseColumn: never;
505
+ identity: undefined;
506
+ generated: undefined;
507
+ }, {}, {}>;
508
+ anonymizedAt: import("drizzle-orm/pg-core").PgColumn<{
509
+ name: "anonymized_at";
510
+ tableName: "users";
511
+ dataType: "date";
512
+ columnType: "PgTimestamp";
513
+ data: Date;
514
+ driverParam: string;
515
+ notNull: false;
516
+ hasDefault: false;
517
+ isPrimaryKey: false;
518
+ isAutoincrement: false;
519
+ hasRuntimeDefault: false;
520
+ enumValues: undefined;
521
+ baseColumn: never;
522
+ identity: undefined;
523
+ generated: undefined;
524
+ }, {}, {}>;
387
525
  _json: import("drizzle-orm/pg-core").PgColumn<{
388
526
  name: "_json";
389
527
  tableName: "users";
@@ -527,6 +665,25 @@ export declare const sessions: import("drizzle-orm/pg-core").PgTableWithColumns<
527
665
  identity: undefined;
528
666
  generated: undefined;
529
667
  }, {}, {}>;
668
+ metadata: import("drizzle-orm/pg-core").PgColumn<{
669
+ name: "metadata";
670
+ tableName: "sessions";
671
+ dataType: "json";
672
+ columnType: "PgJsonb";
673
+ data: Record<string, unknown>;
674
+ driverParam: unknown;
675
+ notNull: false;
676
+ hasDefault: false;
677
+ isPrimaryKey: false;
678
+ isAutoincrement: false;
679
+ hasRuntimeDefault: false;
680
+ enumValues: undefined;
681
+ baseColumn: never;
682
+ identity: undefined;
683
+ generated: undefined;
684
+ }, {}, {
685
+ $type: Record<string, unknown>;
686
+ }>;
530
687
  lastActivityAt: import("drizzle-orm/pg-core").PgColumn<{
531
688
  name: "last_activity_at";
532
689
  tableName: "sessions";
@@ -578,6 +735,23 @@ export declare const sessions: import("drizzle-orm/pg-core").PgTableWithColumns<
578
735
  identity: undefined;
579
736
  generated: undefined;
580
737
  }, {}, {}>;
738
+ deletedAt: import("drizzle-orm/pg-core").PgColumn<{
739
+ name: "deleted_at";
740
+ tableName: "sessions";
741
+ dataType: "date";
742
+ columnType: "PgTimestamp";
743
+ data: Date;
744
+ driverParam: string;
745
+ notNull: false;
746
+ hasDefault: false;
747
+ isPrimaryKey: false;
748
+ isAutoincrement: false;
749
+ hasRuntimeDefault: false;
750
+ enumValues: undefined;
751
+ baseColumn: never;
752
+ identity: undefined;
753
+ generated: undefined;
754
+ }, {}, {}>;
581
755
  };
582
756
  dialect: "pg";
583
757
  }>;
@@ -1 +1 @@
1
- {"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../src/schema/users.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0DjB,CAAA;AAMD,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkCpB,CAAA;AAMD,MAAM,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,YAAY,CAAA;AAC5C,MAAM,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,YAAY,CAAA;AAC/C,MAAM,MAAM,OAAO,GAAG,OAAO,QAAQ,CAAC,YAAY,CAAA;AAClD,MAAM,MAAM,UAAU,GAAG,OAAO,QAAQ,CAAC,YAAY,CAAA"}
1
+ {"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../src/schema/users.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmFjB,CAAC;AAMF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2CpB,CAAC;AAMF,MAAM,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,YAAY,CAAC;AAC7C,MAAM,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,YAAY,CAAC;AAChD,MAAM,MAAM,OAAO,GAAG,OAAO,QAAQ,CAAC,YAAY,CAAC;AACnD,MAAM,MAAM,UAAU,GAAG,OAAO,QAAQ,CAAC,YAAY,CAAC"}
@@ -4,7 +4,8 @@
4
4
  * These tables store user accounts and authentication sessions.
5
5
  * The schema structure mirrors the Zod schemas in @revealui/contracts/entities.
6
6
  */
7
- import { boolean, index, jsonb, pgTable, text, timestamp } from 'drizzle-orm/pg-core';
7
+ import { sql } from 'drizzle-orm';
8
+ import { boolean, index, jsonb, pgTable, text, timestamp, uniqueIndex } from 'drizzle-orm/pg-core';
8
9
  // =============================================================================
9
10
  // Users Table
10
11
  // =============================================================================
@@ -30,26 +31,47 @@ export const users = pgTable('users', {
30
31
  agentConfig: jsonb('agent_config'),
31
32
  // Email verification (grace period — login allowed, reminders shown)
32
33
  emailVerified: boolean('email_verified').default(false).notNull(),
34
+ // SHA-256 hash of the raw verification token sent in the email link
33
35
  emailVerificationToken: text('email_verification_token'),
36
+ emailVerificationTokenExpiresAt: timestamp('email_verification_token_expires_at', {
37
+ withTimezone: true,
38
+ }),
34
39
  emailVerifiedAt: timestamp('email_verified_at', { withTimezone: true }),
35
40
  // Terms of Service acceptance (required for legal compliance)
36
41
  tosAcceptedAt: timestamp('tos_accepted_at', { withTimezone: true }),
37
42
  tosVersion: text('tos_version'), // e.g. '2026-03-01' — version accepted at signup
38
43
  // Stripe integration
39
44
  stripeCustomerId: text('stripe_customer_id'),
45
+ // MFA/2FA (TOTP-based)
46
+ mfaEnabled: boolean('mfa_enabled').default(false).notNull(),
47
+ mfaSecret: text('mfa_secret'), // Base32-encoded TOTP secret (encrypted at rest via DB-level encryption)
48
+ mfaBackupCodes: jsonb('mfa_backup_codes').$type(), // Bcrypt-hashed one-time recovery codes
49
+ mfaVerifiedAt: timestamp('mfa_verified_at', { withTimezone: true }),
50
+ // SSH terminal auth (Phase E — `ssh terminal.revealui.com`)
51
+ sshKeyFingerprint: text('ssh_key_fingerprint'),
40
52
  // User preferences (JSON blob)
41
53
  preferences: jsonb('preferences'),
42
54
  // Timestamps
43
55
  createdAt: timestamp('created_at', { withTimezone: true }).defaultNow().notNull(),
44
56
  updatedAt: timestamp('updated_at', { withTimezone: true }).defaultNow().notNull(),
45
57
  lastActiveAt: timestamp('last_active_at', { withTimezone: true }),
46
- // RevealUI/PayloadCMS compatibility - stores additional collection data
58
+ // Soft-delete: null = active, timestamp = when deleted
59
+ deletedAt: timestamp('deleted_at', { withTimezone: true }),
60
+ // GDPR anonymization: null = not anonymized, timestamp = when PII was wiped
61
+ anonymizedAt: timestamp('anonymized_at', { withTimezone: true }),
62
+ // biome-ignore lint/style/useNamingConvention: RevealUI document metadata field
47
63
  _json: jsonb('_json').default('{}'),
48
64
  }, (table) => [
49
- index('users_email_idx').on(table.email),
65
+ uniqueIndex('users_email_idx').on(table.email),
50
66
  index('users_type_idx').on(table.type),
51
67
  index('users_status_idx').on(table.status),
68
+ index('users_deleted_at_idx').on(table.deletedAt),
69
+ index('users_status_deleted_at_idx').on(table.status, table.deletedAt),
70
+ index('users_active_email_idx').on(table.email).where(sql `deleted_at IS NULL`),
71
+ index('users_active_status_idx').on(table.status).where(sql `deleted_at IS NULL`),
52
72
  index('users_stripe_customer_id_idx').on(table.stripeCustomerId),
73
+ index('users_ssh_key_fingerprint_idx').on(table.sshKeyFingerprint),
74
+ index('users_email_verified_idx').on(table.emailVerified),
53
75
  ]);
54
76
  // =============================================================================
55
77
  // Sessions Table
@@ -69,14 +91,21 @@ export const sessions = pgTable('sessions', {
69
91
  userAgent: text('user_agent'),
70
92
  ipAddress: text('ip_address'),
71
93
  persistent: boolean('persistent').default(false),
94
+ // Extensible metadata (e.g., 2FA method used, passkey credential ID)
95
+ metadata: jsonb('metadata').$type(),
72
96
  // Activity tracking
73
97
  lastActivityAt: timestamp('last_activity_at', { withTimezone: true }).defaultNow().notNull(),
74
98
  // Timestamps
75
99
  createdAt: timestamp('created_at', { withTimezone: true }).defaultNow().notNull(),
76
100
  expiresAt: timestamp('expires_at', { withTimezone: true }).notNull(),
101
+ // Soft-delete: null = active, timestamp = when explicitly revoked
102
+ deletedAt: timestamp('deleted_at', { withTimezone: true }),
77
103
  }, (table) => [
78
104
  index('sessions_user_id_idx').on(table.userId),
79
105
  index('sessions_token_hash_idx').on(table.tokenHash),
80
106
  index('sessions_expires_at_idx').on(table.expiresAt),
107
+ // R5-H6: Composite index for logout-all and session cleanup queries
108
+ index('sessions_user_expires_idx').on(table.userId, table.expiresAt),
109
+ index('sessions_deleted_at_idx').on(table.deletedAt),
81
110
  ]);
82
111
  //# sourceMappingURL=users.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"users.js","sourceRoot":"","sources":["../../src/schema/users.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAErF,gFAAgF;AAChF,cAAc;AACd,gFAAgF;AAEhF,MAAM,CAAC,MAAM,KAAK,GAAG,OAAO,CAC1B,OAAO,EACP;IACE,qBAAqB;IACrB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAE3B,mCAAmC;IACnC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAE5D,qCAAqC;IACrC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IAE7C,aAAa;IACb,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAE7B,iBAAiB;IACjB,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,qDAAqD;IAEjF,kBAAkB;IAClB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC9C,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IAElD,mDAAmD;IACnD,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,iBAAiB,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC,KAAK,EAAY;IAChE,WAAW,EAAE,KAAK,CAAC,cAAc,CAAC;IAElC,qEAAqE;IACrE,aAAa,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE;IACjE,sBAAsB,EAAE,IAAI,CAAC,0BAA0B,CAAC;IACxD,eAAe,EAAE,SAAS,CAAC,mBAAmB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAEvE,8DAA8D;IAC9D,aAAa,EAAE,SAAS,CAAC,iBAAiB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACnE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,iDAAiD;IAElF,qBAAqB;IACrB,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,CAAC;IAE5C,+BAA+B;IAC/B,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC;IAEjC,aAAa;IACb,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACjF,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACjF,YAAY,EAAE,SAAS,CAAC,gBAAgB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAEjE,wEAAwE;IACxE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CACpC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;IACxC,KAAK,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;IACtC,KAAK,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;IAC1C,KAAK,CAAC,8BAA8B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACjE,CACF,CAAA;AAED,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,QAAQ,GAAG,OAAO,CAC7B,UAAU,EACV;IACE,qBAAqB;IACrB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAE3B,oBAAoB;IACpB,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAE5D,wBAAwB;IACxB,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;SACpB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAEtD,wCAAwC;IACxC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAEvC,mBAAmB;IACnB,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAEhD,oBAAoB;IACpB,cAAc,EAAE,SAAS,CAAC,kBAAkB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IAE5F,aAAa;IACb,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACjF,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;CACrE,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;IAC9C,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACpD,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CACrD,CACF,CAAA"}
1
+ {"version":3,"file":"users.js","sourceRoot":"","sources":["../../src/schema/users.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEnG,gFAAgF;AAChF,cAAc;AACd,gFAAgF;AAEhF,MAAM,CAAC,MAAM,KAAK,GAAG,OAAO,CAC1B,OAAO,EACP;IACE,qBAAqB;IACrB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAE3B,mCAAmC;IACnC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAE5D,qCAAqC;IACrC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IAE7C,aAAa;IACb,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAE7B,iBAAiB;IACjB,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,qDAAqD;IAEjF,kBAAkB;IAClB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC9C,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IAElD,mDAAmD;IACnD,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,iBAAiB,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC,KAAK,EAAY;IAChE,WAAW,EAAE,KAAK,CAAC,cAAc,CAAC;IAElC,qEAAqE;IACrE,aAAa,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE;IACjE,oEAAoE;IACpE,sBAAsB,EAAE,IAAI,CAAC,0BAA0B,CAAC;IACxD,+BAA+B,EAAE,SAAS,CAAC,qCAAqC,EAAE;QAChF,YAAY,EAAE,IAAI;KACnB,CAAC;IACF,eAAe,EAAE,SAAS,CAAC,mBAAmB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAEvE,8DAA8D;IAC9D,aAAa,EAAE,SAAS,CAAC,iBAAiB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACnE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,iDAAiD;IAElF,qBAAqB;IACrB,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,CAAC;IAE5C,uBAAuB;IACvB,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE;IAC3D,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,yEAAyE;IACxG,cAAc,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC,KAAK,EAAY,EAAE,wCAAwC;IACrG,aAAa,EAAE,SAAS,CAAC,iBAAiB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAEnE,4DAA4D;IAC5D,iBAAiB,EAAE,IAAI,CAAC,qBAAqB,CAAC;IAE9C,+BAA+B;IAC/B,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC;IAEjC,aAAa;IACb,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACjF,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACjF,YAAY,EAAE,SAAS,CAAC,gBAAgB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAEjE,uDAAuD;IACvD,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAE1D,4EAA4E;IAC5E,YAAY,EAAE,SAAS,CAAC,eAAe,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAEhE,gFAAgF;IAChF,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CACpC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,WAAW,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;IAC9C,KAAK,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;IACtC,KAAK,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;IAC1C,KAAK,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACjD,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;IACtE,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAA,oBAAoB,CAAC;IAC9E,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAA,oBAAoB,CAAC;IAChF,KAAK,CAAC,8BAA8B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAChE,KAAK,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAClE,KAAK,CAAC,0BAA0B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC;CAC1D,CACF,CAAC;AAEF,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,QAAQ,GAAG,OAAO,CAC7B,UAAU,EACV;IACE,qBAAqB;IACrB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAE3B,oBAAoB;IACpB,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAE5D,wBAAwB;IACxB,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;SACpB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAEtD,wCAAwC;IACxC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAEvC,mBAAmB;IACnB,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAEhD,qEAAqE;IACrE,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,EAA2B;IAE5D,oBAAoB;IACpB,cAAc,EAAE,SAAS,CAAC,kBAAkB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IAE5F,aAAa;IACb,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACjF,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IAEpE,kEAAkE;IAClE,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;CAC3D,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;IAC9C,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACpD,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACpD,oEAAoE;IACpE,KAAK,CAAC,2BAA2B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;IACpE,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CACrD,CACF,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"vector.d.ts","sourceRoot":"","sources":["../../src/schema/vector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,YAAY,EACV,WAAW,EACX,WAAW,IAAI,eAAe,EAC9B,cAAc,EACd,cAAc,IAAI,kBAAkB,GACrC,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE3C,cAAc,UAAU,CAAA"}
1
+ {"version":3,"file":"vector.d.ts","sourceRoot":"","sources":["../../src/schema/vector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,YAAY,EACV,WAAW,EACX,WAAW,IAAI,eAAe,EAC9B,cAAc,EACd,cAAc,IAAI,kBAAkB,GACrC,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,cAAc,UAAU,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"vector.js","sourceRoot":"","sources":["../../src/schema/vector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,8BAA8B;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,mDAAmD;AACnD,cAAc,UAAU,CAAA"}
1
+ {"version":3,"file":"vector.js","sourceRoot":"","sources":["../../src/schema/vector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,8BAA8B;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,mDAAmD;AACnD,cAAc,UAAU,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"waitlist.d.ts","sourceRoot":"","sources":["../../src/schema/waitlist.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASnB,CAAA;AAEF,MAAM,MAAM,aAAa,GAAG,OAAO,QAAQ,CAAC,YAAY,CAAA;AACxD,MAAM,MAAM,gBAAgB,GAAG,OAAO,QAAQ,CAAC,YAAY,CAAA"}
1
+ {"version":3,"file":"waitlist.d.ts","sourceRoot":"","sources":["../../src/schema/waitlist.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASnB,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,OAAO,QAAQ,CAAC,YAAY,CAAC;AACzD,MAAM,MAAM,gBAAgB,GAAG,OAAO,QAAQ,CAAC,YAAY,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"waitlist.js","sourceRoot":"","sources":["../../src/schema/waitlist.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAA;AAEpE,MAAM,CAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,EAAE;IAC1C,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IAC3C,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IACvC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,2CAA2C;IACnE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,gBAAgB;IAC5C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,gBAAgB;IAC/C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,wCAAwC;IACvE,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACjF,UAAU,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,uCAAuC;CACtG,CAAC,CAAA"}
1
+ {"version":3,"file":"waitlist.js","sourceRoot":"","sources":["../../src/schema/waitlist.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAErE,MAAM,CAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,EAAE;IAC1C,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IAC3C,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IACvC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,2CAA2C;IACnE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,gBAAgB;IAC5C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,gBAAgB;IAC/C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,wCAAwC;IACvE,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACjF,UAAU,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,uCAAuC;CACtG,CAAC,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"webhook-events.d.ts","sourceRoot":"","sources":["../../src/schema/webhook-events.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAalC,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG,OAAO,sBAAsB,CAAC,YAAY,CAAA;AACjF,MAAM,MAAM,2BAA2B,GAAG,OAAO,sBAAsB,CAAC,YAAY,CAAA"}
1
+ {"version":3,"file":"webhook-events.d.ts","sourceRoot":"","sources":["../../src/schema/webhook-events.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAalC,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG,OAAO,sBAAsB,CAAC,YAAY,CAAC;AAClF,MAAM,MAAM,2BAA2B,GAAG,OAAO,sBAAsB,CAAC,YAAY,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"webhook-events.js","sourceRoot":"","sources":["../../src/schema/webhook-events.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAErE,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAC3C,0BAA0B,EAC1B;IACE,wEAAwE;IACxE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAE3B,0DAA0D;IAC1D,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAEvC,mCAAmC;IACnC,WAAW,EAAE,SAAS,CAAC,cAAc,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;CACtF,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAC5E,CAAA"}
1
+ {"version":3,"file":"webhook-events.js","sourceRoot":"","sources":["../../src/schema/webhook-events.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAC3C,0BAA0B,EAC1B;IACE,wEAAwE;IACxE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAE3B,0DAA0D;IAC1D,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAEvC,mCAAmC;IACnC,WAAW,EAAE,SAAS,CAAC,cAAc,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;CACtF,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAC5E,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"yjs-documents.d.ts","sourceRoot":"","sources":["../../src/schema/yjs-documents.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOvB,CAAA;AAEF,MAAM,MAAM,WAAW,GAAG,OAAO,YAAY,CAAC,YAAY,CAAA;AAC1D,MAAM,MAAM,cAAc,GAAG,OAAO,YAAY,CAAC,YAAY,CAAA"}
1
+ {"version":3,"file":"yjs-documents.d.ts","sourceRoot":"","sources":["../../src/schema/yjs-documents.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOvB,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,OAAO,YAAY,CAAC,YAAY,CAAC;AAC3D,MAAM,MAAM,cAAc,GAAG,OAAO,YAAY,CAAC,YAAY,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"yjs-documents.js","sourceRoot":"","sources":["../../src/schema/yjs-documents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAEnF,MAAM,KAAK,GAAG,UAAU,CAAuC;IAC7D,QAAQ;QACN,OAAO,OAAO,CAAA;IAChB,CAAC;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,EAAE;IACnD,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC/B,WAAW,EAAE,KAAK,CAAC,cAAc,CAAC;IAClC,gBAAgB,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACjF,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;CAClF,CAAC,CAAA"}
1
+ {"version":3,"file":"yjs-documents.js","sourceRoot":"","sources":["../../src/schema/yjs-documents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEpF,MAAM,KAAK,GAAG,UAAU,CAAuC;IAC7D,QAAQ;QACN,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,EAAE;IACnD,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC/B,WAAW,EAAE,KAAK,CAAC,cAAc,CAAC;IAClC,gBAAgB,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACjF,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;CAClF,CAAC,CAAC"}
@@ -0,0 +1,12 @@
1
+ #!/usr/bin/env tsx
2
+ /**
3
+ * Standalone cleanup script.
4
+ * Called by `revealui db cleanup` via `pnpm --filter @revealui/db db:cleanup`.
5
+ *
6
+ * Environment:
7
+ * POSTGRES_URL or DATABASE_URL — target database
8
+ * DRY_RUN=true — count rows without deleting
9
+ * TABLES=sessions,rateLimits — comma-separated subset (optional)
10
+ */
11
+ export {};
12
+ //# sourceMappingURL=cleanup-expired.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cleanup-expired.d.ts","sourceRoot":"","sources":["../../src/scripts/cleanup-expired.ts"],"names":[],"mappings":";AAEA;;;;;;;;GAQG"}
@@ -0,0 +1,50 @@
1
+ #!/usr/bin/env tsx
2
+ /**
3
+ * Standalone cleanup script.
4
+ * Called by `revealui db cleanup` via `pnpm --filter @revealui/db db:cleanup`.
5
+ *
6
+ * Environment:
7
+ * POSTGRES_URL or DATABASE_URL — target database
8
+ * DRY_RUN=true — count rows without deleting
9
+ * TABLES=sessions,rateLimits — comma-separated subset (optional)
10
+ */
11
+ import { cleanupStaleTokens } from '../cleanup/stale-tokens.js';
12
+ import { closeAllPools } from '../client/index.js';
13
+ const ALL_TABLES = [
14
+ 'sessions',
15
+ 'rateLimits',
16
+ 'passwordResetTokens',
17
+ 'magicLinks',
18
+ 'scheduledPages',
19
+ ];
20
+ const dryRun = process.env.DRY_RUN === 'true';
21
+ const tablesEnv = process.env.TABLES;
22
+ const tables = tablesEnv
23
+ ? tablesEnv.split(',').map((t) => t.trim())
24
+ : ALL_TABLES;
25
+ try {
26
+ const result = await cleanupStaleTokens({ dryRun, tables });
27
+ const verb = dryRun ? 'would delete' : 'deleted';
28
+ console.log(`\nDB cleanup${dryRun ? ' (dry run)' : ''}:`);
29
+ if (tables.includes('sessions'))
30
+ console.log(` sessions ${verb} ${result.sessions}`);
31
+ if (tables.includes('rateLimits'))
32
+ console.log(` rate_limits ${verb} ${result.rateLimits}`);
33
+ if (tables.includes('passwordResetTokens'))
34
+ console.log(` password_reset_tokens ${verb} ${result.passwordResetTokens}`);
35
+ if (tables.includes('magicLinks'))
36
+ console.log(` magic_links ${verb} ${result.magicLinks}`);
37
+ if (tables.includes('scheduledPages'))
38
+ console.log(` pages (scheduled) published ${result.scheduledPages}`);
39
+ console.log('');
40
+ await closeAllPools();
41
+ process.exit(0);
42
+ }
43
+ catch (error) {
44
+ console.error('Cleanup failed:', error instanceof Error ? error.message : String(error));
45
+ await closeAllPools().catch((_e) => {
46
+ // best-effort — already in error path
47
+ });
48
+ process.exit(1);
49
+ }
50
+ //# sourceMappingURL=cleanup-expired.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cleanup-expired.js","sourceRoot":"","sources":["../../src/scripts/cleanup-expired.ts"],"names":[],"mappings":";AAEA;;;;;;;;GAQG;AAEH,OAAO,EAAqB,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,MAAM,UAAU,GAAmB;IACjC,UAAU;IACV,YAAY;IACZ,qBAAqB;IACrB,YAAY;IACZ,gBAAgB;CACjB,CAAC;AAEF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,MAAM,CAAC;AAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;AACrC,MAAM,MAAM,GAAmB,SAAS;IACtC,CAAC,CAAE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAoB;IAC/D,CAAC,CAAC,UAAU,CAAC;AAEf,IAAI,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAE5D,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1D,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClG,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAC/E,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,oCAAoC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,aAAa,EAAE,CAAC;IACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACzF,MAAM,aAAa,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE;QACjC,sCAAsC;IACxC,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}
@@ -0,0 +1,54 @@
1
+ /**
2
+ * DrizzleSecurityAuditStorage — DB-backed implementation of @revealui/core's AuditStorage.
3
+ *
4
+ * Adapts the core security audit interface to the shared `audit_log` table.
5
+ * Maps AuditEvent.actor.id → agentId, and stores the full event in payload.
6
+ */
7
+ import type { NeonHttpDatabase } from 'drizzle-orm/neon-http';
8
+ import type { NodePgDatabase } from 'drizzle-orm/node-postgres';
9
+ interface AuditEvent {
10
+ id: string;
11
+ timestamp: string;
12
+ type: string;
13
+ severity: string;
14
+ actor: {
15
+ id: string;
16
+ type: 'user' | 'system' | 'api';
17
+ ip?: string;
18
+ userAgent?: string;
19
+ };
20
+ resource?: {
21
+ type: string;
22
+ id: string;
23
+ name?: string;
24
+ };
25
+ action: string;
26
+ result: 'success' | 'failure' | 'partial';
27
+ changes?: {
28
+ before?: Record<string, unknown>;
29
+ after?: Record<string, unknown>;
30
+ };
31
+ metadata?: Record<string, unknown>;
32
+ }
33
+ interface AuditQuery {
34
+ types?: string[];
35
+ actorId?: string;
36
+ resourceType?: string;
37
+ resourceId?: string;
38
+ startDate?: Date;
39
+ endDate?: Date;
40
+ severity?: string[];
41
+ result?: string[];
42
+ limit?: number;
43
+ offset?: number;
44
+ }
45
+ type DrizzleDb = NeonHttpDatabase | NodePgDatabase;
46
+ export declare class DrizzleSecurityAuditStorage {
47
+ private db;
48
+ constructor(db: DrizzleDb);
49
+ write(event: AuditEvent): Promise<void>;
50
+ query(query: AuditQuery): Promise<AuditEvent[]>;
51
+ count(query: AuditQuery): Promise<number>;
52
+ }
53
+ export {};
54
+ //# sourceMappingURL=security-audit-storage.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"security-audit-storage.d.ts","sourceRoot":"","sources":["../src/security-audit-storage.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAG/D,UAAU,UAAU;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE;QACL,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAA;QAC/B,EAAE,CAAC,EAAE,MAAM,CAAA;QACX,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,CAAA;IACD,QAAQ,CAAC,EAAE;QACT,IAAI,EAAE,MAAM,CAAA;QACZ,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,CAAC,EAAE,MAAM,CAAA;KACd,CAAA;IACD,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAA;IACzC,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAChC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAChC,CAAA;IACD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED,UAAU,UAAU;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,IAAI,CAAA;IAChB,OAAO,CAAC,EAAE,IAAI,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,KAAK,SAAS,GAAG,gBAAgB,GAAG,cAAc,CAAA;AAElD,qBAAa,2BAA2B;IAC1B,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,SAAS;IAE3B,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBvC,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAiD/C,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;CAyBhD"}
@@ -0,0 +1,100 @@
1
+ /**
2
+ * DrizzleSecurityAuditStorage — DB-backed implementation of @revealui/core's AuditStorage.
3
+ *
4
+ * Adapts the core security audit interface to the shared `audit_log` table.
5
+ * Maps AuditEvent.actor.id → agentId, and stores the full event in payload.
6
+ */
7
+ import { and, count, desc, eq, gte, inArray, lte } from 'drizzle-orm';
8
+ import { auditLog } from './schema/audit-log.js';
9
+ export class DrizzleSecurityAuditStorage {
10
+ db;
11
+ constructor(db) {
12
+ this.db = db;
13
+ }
14
+ async write(event) {
15
+ await this.db.insert(auditLog).values({
16
+ id: event.id,
17
+ timestamp: new Date(event.timestamp),
18
+ eventType: event.type,
19
+ severity: event.severity,
20
+ agentId: event.actor.id,
21
+ taskId: event.resource?.id ?? null,
22
+ sessionId: null,
23
+ payload: {
24
+ actor: event.actor,
25
+ resource: event.resource,
26
+ action: event.action,
27
+ result: event.result,
28
+ changes: event.changes,
29
+ metadata: event.metadata,
30
+ },
31
+ policyViolations: [],
32
+ });
33
+ }
34
+ async query(query) {
35
+ const conditions = [];
36
+ if (query.types?.length) {
37
+ conditions.push(inArray(auditLog.eventType, query.types));
38
+ }
39
+ if (query.actorId) {
40
+ conditions.push(eq(auditLog.agentId, query.actorId));
41
+ }
42
+ if (query.startDate) {
43
+ conditions.push(gte(auditLog.timestamp, query.startDate));
44
+ }
45
+ if (query.endDate) {
46
+ conditions.push(lte(auditLog.timestamp, query.endDate));
47
+ }
48
+ if (query.severity?.length) {
49
+ conditions.push(inArray(auditLog.severity, query.severity));
50
+ }
51
+ const where = conditions.length > 0 ? and(...conditions) : undefined;
52
+ const rows = await this.db
53
+ .select()
54
+ .from(auditLog)
55
+ .where(where)
56
+ .orderBy(desc(auditLog.timestamp))
57
+ .limit(query.limit ?? 100)
58
+ .offset(query.offset ?? 0);
59
+ return rows.map((row) => {
60
+ const payload = (row.payload ?? {});
61
+ return {
62
+ id: row.id,
63
+ timestamp: row.timestamp.toISOString(),
64
+ type: row.eventType,
65
+ severity: row.severity,
66
+ actor: payload.actor ?? {
67
+ id: row.agentId,
68
+ type: 'system',
69
+ },
70
+ resource: payload.resource,
71
+ action: payload.action ?? row.eventType,
72
+ result: payload.result ?? 'success',
73
+ changes: payload.changes,
74
+ metadata: payload.metadata,
75
+ };
76
+ });
77
+ }
78
+ async count(query) {
79
+ const conditions = [];
80
+ if (query.types?.length) {
81
+ conditions.push(inArray(auditLog.eventType, query.types));
82
+ }
83
+ if (query.actorId) {
84
+ conditions.push(eq(auditLog.agentId, query.actorId));
85
+ }
86
+ if (query.startDate) {
87
+ conditions.push(gte(auditLog.timestamp, query.startDate));
88
+ }
89
+ if (query.endDate) {
90
+ conditions.push(lte(auditLog.timestamp, query.endDate));
91
+ }
92
+ const where = conditions.length > 0 ? and(...conditions) : undefined;
93
+ const [result] = await this.db
94
+ .select({ total: count() })
95
+ .from(auditLog)
96
+ .where(where);
97
+ return result?.total ?? 0;
98
+ }
99
+ }
100
+ //# sourceMappingURL=security-audit-storage.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"security-audit-storage.js","sourceRoot":"","sources":["../src/security-audit-storage.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAGrE,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AA0ChD,MAAM,OAAO,2BAA2B;IAClB;IAApB,YAAoB,EAAa;QAAb,OAAE,GAAF,EAAE,CAAW;IAAG,CAAC;IAErC,KAAK,CAAC,KAAK,CAAC,KAAiB;QAC3B,MAAO,IAAI,CAAC,EAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;YAC1D,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YACpC,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;YACvB,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,IAAI;YAClC,SAAS,EAAE,IAAI;YACf,OAAO,EAAE;gBACP,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB;YACD,gBAAgB,EAAE,EAAE;SACrB,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAiB;QAC3B,MAAM,UAAU,GAAG,EAAE,CAAA;QAErB,IAAI,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YACxB,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;QAC3D,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;QACtD,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;QAC3D,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC7D,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAEpE,MAAM,IAAI,GAAG,MAAO,IAAI,CAAC,EAAuB;aAC7C,MAAM,EAAE;aACR,IAAI,CAAC,QAAQ,CAAC;aACd,KAAK,CAAC,KAAK,CAAC;aACZ,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;aACjC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC;aACzB,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAA;QAE5B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACtB,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAA4B,CAAA;YAC9D,OAAO;gBACL,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;gBACtC,IAAI,EAAE,GAAG,CAAC,SAAS;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAG,OAAO,CAAC,KAA6B,IAAI;oBAC/C,EAAE,EAAE,GAAG,CAAC,OAAO;oBACf,IAAI,EAAE,QAAiB;iBACxB;gBACD,QAAQ,EAAE,OAAO,CAAC,QAAkC;gBACpD,MAAM,EAAG,OAAO,CAAC,MAAiB,IAAI,GAAG,CAAC,SAAS;gBACnD,MAAM,EAAG,OAAO,CAAC,MAA+B,IAAI,SAAS;gBAC7D,OAAO,EAAE,OAAO,CAAC,OAAgC;gBACjD,QAAQ,EAAE,OAAO,CAAC,QAAmC;aACtD,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAiB;QAC3B,MAAM,UAAU,GAAG,EAAE,CAAA;QAErB,IAAI,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YACxB,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;QAC3D,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;QACtD,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;QAC3D,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;QACzD,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAEpE,MAAM,CAAC,MAAM,CAAC,GAAG,MAAO,IAAI,CAAC,EAAuB;aACjD,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;aAC1B,IAAI,CAAC,QAAQ,CAAC;aACd,KAAK,CAAC,KAAK,CAAC,CAAA;QAEf,OAAO,MAAM,EAAE,KAAK,IAAI,CAAC,CAAA;IAC3B,CAAC;CACF"}