@semiont/gateway 0.5.28

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "@semiont/gateway",
+  "version": "0.5.28",
+  "type": "module",
+  "description": "Semiont gateway server - pre-built for npm consumption",
+  "main": "dist/index.js",
+  "bin": {
+    "semiont-gateway": "dist/index.js",
+    "semiont-useradd": "dist/cli/useradd.js"
+  },
+  "files": [
+    "dist",
+    "prisma",
+    "prisma.config.ts"
+  ],
+  "scripts": {
+    "start": "node dist/index.js"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/The-AI-Alliance/semiont.git",
+    "directory": "apps/gateway"
+  },
+  "license": "Apache-2.0",
+  "dependencies": {
+    "@hono/node-server": "^2.1.1",
+    "@hono/swagger-ui": "^0.6.1",
+    "@prisma/adapter-pg": "^7.10.0",
+    "@prisma/client": "^7.10.0",
+    "@semiont/core": "0.5.28",
+    "@semiont/make-meaning": "0.5.28",
+    "@semiont/observability": "0.5.28",
+    "ajv": "^8.20.0",
+    "ajv-formats": "^3.0.1",
+    "argon2": "^0.45.1",
+    "hono": "^4.13.5",
+    "jsonwebtoken": "^9.0.2",
+    "prisma": "^7.10.0",
+    "winston": "^3.19.0",
+    "zod": "^4.4.3"
+  }
+}

package/prisma/migrations/20250910180513_init/migration.sql

@@ -0,0 +1,24 @@
+-- CreateTable
+CREATE TABLE "public"."users" (
+    "id" TEXT NOT NULL,
+    "email" TEXT NOT NULL,
+    "name" TEXT,
+    "image" TEXT,
+    "provider" TEXT NOT NULL,
+    "providerId" TEXT NOT NULL,
+    "domain" TEXT NOT NULL,
+    "isActive" BOOLEAN NOT NULL DEFAULT true,
+    "isAdmin" BOOLEAN NOT NULL DEFAULT false,
+    "termsAcceptedAt" TIMESTAMP(3),
+    "lastLogin" TIMESTAMP(3),
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "users_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "users_email_key" ON "public"."users"("email");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "users_provider_providerId_key" ON "public"."users"("provider", "providerId");

package/prisma/migrations/20250912124942_add_moderator_role/migration.sql

@@ -0,0 +1,2 @@
+-- AlterTable
+ALTER TABLE "public"."users" ADD COLUMN "isModerator" BOOLEAN NOT NULL DEFAULT false;

package/prisma/migrations/20251129131237_add_password_auth/migration.sql

@@ -0,0 +1,2 @@
+-- AlterTable
+ALTER TABLE "public"."users" ADD COLUMN "passwordHash" TEXT;

package/prisma/migrations/20260619120000_add_token_version/migration.sql

@@ -0,0 +1,3 @@
+-- AlterTable: per-user token revocation epoch (SDK-AUTH-CORS Phase 2).
+-- Bumped on logout to invalidate every outstanding token for the user.
+ALTER TABLE "users" ADD COLUMN "tokenVersion" INTEGER NOT NULL DEFAULT 0;

package/prisma/migrations/migration_lock.toml

@@ -0,0 +1,3 @@
+# Please do not edit this file manually
+# It should be added in your version-control system (e.g., Git)
+provider = "postgresql"

package/prisma/schema.prisma

@@ -0,0 +1,41 @@
+// This is your Prisma schema file,
+// learn more about it in the docs: https://pris.ly/d/prisma-schema
+
+generator client {
+  provider = "prisma-client-js"
+}
+
+datasource db {
+  provider = "postgresql"
+}
+
+// User model for OAuth and password authentication
+model User {
+  id              String    @id @default(cuid())
+  email           String    @unique
+  name            String?
+  image           String? // Profile picture from OAuth provider
+  provider        String // 'password', 'google', 'github', etc.
+  providerId      String // OAuth provider's user ID (or email for password users)
+  passwordHash    String? // bcrypt hash - NULL for OAuth users, required for password provider
+  domain          String // Email domain for access control
+  isActive        Boolean   @default(true)
+  isAdmin         Boolean   @default(false) // Admin role for administrative access
+  isModerator     Boolean   @default(false) // Moderator role for content governance
+  termsAcceptedAt DateTime? // When user accepted terms of service
+  lastLogin       DateTime?
+  tokenVersion    Int       @default(0) // bumped on logout to revoke all of this user's tokens (SDK-AUTH-CORS Phase 2)
+  createdAt       DateTime  @default(now())
+  updatedAt       DateTime  @updatedAt
+
+  @@unique([provider, providerId])
+  @@map("users")
+}
+
+// Documents, References, and their relationships are stored in the graph database
+// PostgreSQL is used only for user management and authentication
+
+// Future models will be added here as we implement features:
+// - Permission (may be in graph or SQL depending on requirements)
+// - Role (likely in SQL for user roles)
+// - Asset metadata (graph for relationships, filesystem for content)

package/prisma.config.ts

@@ -0,0 +1,7 @@
+import { defineConfig } from '@prisma/config';
+
+export default defineConfig({
+  datasource: {
+    url: process.env.DATABASE_URL,
+  },
+});