@tempoxyz/id 0.0.0-stage → 0.0.1

package/src/app/db/migrations/0001_oauth_provider.sql

@@ -0,0 +1,162 @@
+CREATE TABLE "jwks" (
+	"id" text PRIMARY KEY NOT NULL,
+	"public_key" text NOT NULL,
+	"private_key" text NOT NULL,
+	"created_at" timestamp NOT NULL,
+	"expires_at" timestamp,
+	"alg" text,
+	"crv" text
+);
+--> statement-breakpoint
+CREATE TABLE "oauth_access_token" (
+	"id" text PRIMARY KEY NOT NULL,
+	"token" text NOT NULL,
+	"client_id" text NOT NULL,
+	"session_id" text,
+	"user_id" text,
+	"reference_id" text,
+	"authorization_code_id" text,
+	"resources" text[],
+	"requested_user_info_claims" text[],
+	"refresh_id" text,
+	"expires_at" timestamp NOT NULL,
+	"created_at" timestamp NOT NULL,
+	"revoked" timestamp,
+	"confirmation" jsonb,
+	"scopes" text[] NOT NULL,
+	CONSTRAINT "oauth_access_token_token_unique" UNIQUE("token")
+);
+--> statement-breakpoint
+CREATE TABLE "oauth_client" (
+	"id" text PRIMARY KEY NOT NULL,
+	"client_id" text NOT NULL,
+	"client_secret" text,
+	"client_discovery_id" text,
+	"disabled" boolean DEFAULT false,
+	"skip_consent" boolean,
+	"enable_end_session" boolean,
+	"subject_type" text,
+	"scopes" text[],
+	"client_credentials_scopes" text[] DEFAULT '{}',
+	"user_id" text,
+	"created_at" timestamp,
+	"updated_at" timestamp,
+	"name" text,
+	"uri" text,
+	"icon" text,
+	"contacts" text[],
+	"tos" text,
+	"policy" text,
+	"software_id" text,
+	"software_version" text,
+	"software_statement" text,
+	"redirect_uris" text[] NOT NULL,
+	"post_logout_redirect_uris" text[],
+	"backchannel_logout_uri" text,
+	"backchannel_logout_session_required" boolean,
+	"token_endpoint_auth_method" text,
+	"application_type" text,
+	"jwks" text,
+	"jwks_uri" text,
+	"grant_types" text[],
+	"response_types" text[],
+	"require_pkce" boolean,
+	"dpop_bound_access_tokens" boolean DEFAULT false,
+	"reference_id" text,
+	"metadata" jsonb,
+	CONSTRAINT "oauth_client_client_id_unique" UNIQUE("client_id")
+);
+--> statement-breakpoint
+CREATE TABLE "oauth_client_assertion" (
+	"id" text PRIMARY KEY NOT NULL,
+	"expires_at" timestamp NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "oauth_client_resource" (
+	"id" text PRIMARY KEY NOT NULL,
+	"client_id" text NOT NULL,
+	"resource_id" text NOT NULL,
+	"metadata" jsonb,
+	"created_at" timestamp
+);
+--> statement-breakpoint
+CREATE TABLE "oauth_consent" (
+	"id" text PRIMARY KEY NOT NULL,
+	"client_id" text NOT NULL,
+	"user_id" text,
+	"reference_id" text,
+	"resources" text[],
+	"requested_user_info_claims" text[],
+	"scopes" text[] NOT NULL,
+	"created_at" timestamp NOT NULL,
+	"updated_at" timestamp NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "oauth_refresh_token" (
+	"id" text PRIMARY KEY NOT NULL,
+	"token" text NOT NULL,
+	"client_id" text NOT NULL,
+	"session_id" text,
+	"user_id" text NOT NULL,
+	"reference_id" text,
+	"authorization_code_id" text,
+	"resources" text[],
+	"requested_user_info_claims" text[],
+	"expires_at" timestamp NOT NULL,
+	"created_at" timestamp NOT NULL,
+	"revoked" timestamp,
+	"rotated_at" timestamp,
+	"rotation_replay_response" text,
+	"rotation_replay_expires_at" timestamp,
+	"auth_time" timestamp,
+	"confirmation" jsonb,
+	"scopes" text[] NOT NULL,
+	CONSTRAINT "oauth_refresh_token_token_unique" UNIQUE("token")
+);
+--> statement-breakpoint
+CREATE TABLE "oauth_resource" (
+	"id" text PRIMARY KEY NOT NULL,
+	"identifier" text NOT NULL,
+	"name" text NOT NULL,
+	"access_token_ttl" integer,
+	"refresh_token_ttl" integer,
+	"signing_algorithm" text,
+	"signing_key_id" text,
+	"allowed_scopes" text[],
+	"custom_claims" jsonb,
+	"dpop_bound_access_tokens_required" boolean DEFAULT false,
+	"disabled" boolean DEFAULT false,
+	"created_at" timestamp,
+	"updated_at" timestamp,
+	"policy_version" integer DEFAULT 1,
+	"metadata" jsonb,
+	CONSTRAINT "oauth_resource_identifier_unique" UNIQUE("identifier")
+);
+--> statement-breakpoint
+ALTER TABLE "oauth_access_token" ADD CONSTRAINT "oauth_access_token_client_id_oauth_client_client_id_fk" FOREIGN KEY ("client_id") REFERENCES "public"."oauth_client"("client_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "oauth_access_token" ADD CONSTRAINT "oauth_access_token_session_id_session_id_fk" FOREIGN KEY ("session_id") REFERENCES "public"."session"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "oauth_access_token" ADD CONSTRAINT "oauth_access_token_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "oauth_access_token" ADD CONSTRAINT "oauth_access_token_refresh_id_oauth_refresh_token_id_fk" FOREIGN KEY ("refresh_id") REFERENCES "public"."oauth_refresh_token"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "oauth_client" ADD CONSTRAINT "oauth_client_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "oauth_client_resource" ADD CONSTRAINT "oauth_client_resource_client_id_oauth_client_client_id_fk" FOREIGN KEY ("client_id") REFERENCES "public"."oauth_client"("client_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "oauth_client_resource" ADD CONSTRAINT "oauth_client_resource_resource_id_oauth_resource_identifier_fk" FOREIGN KEY ("resource_id") REFERENCES "public"."oauth_resource"("identifier") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "oauth_consent" ADD CONSTRAINT "oauth_consent_client_id_oauth_client_client_id_fk" FOREIGN KEY ("client_id") REFERENCES "public"."oauth_client"("client_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "oauth_consent" ADD CONSTRAINT "oauth_consent_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "oauth_refresh_token" ADD CONSTRAINT "oauth_refresh_token_client_id_oauth_client_client_id_fk" FOREIGN KEY ("client_id") REFERENCES "public"."oauth_client"("client_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "oauth_refresh_token" ADD CONSTRAINT "oauth_refresh_token_session_id_session_id_fk" FOREIGN KEY ("session_id") REFERENCES "public"."session"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "oauth_refresh_token" ADD CONSTRAINT "oauth_refresh_token_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "oauthAccessToken_clientId_idx" ON "oauth_access_token" USING btree ("client_id");--> statement-breakpoint
+CREATE INDEX "oauthAccessToken_sessionId_idx" ON "oauth_access_token" USING btree ("session_id");--> statement-breakpoint
+CREATE INDEX "oauthAccessToken_userId_idx" ON "oauth_access_token" USING btree ("user_id");--> statement-breakpoint
+CREATE INDEX "oauthAccessToken_authorizationCodeId_idx" ON "oauth_access_token" USING btree ("authorization_code_id");--> statement-breakpoint
+CREATE INDEX "oauthAccessToken_refreshId_idx" ON "oauth_access_token" USING btree ("refresh_id");--> statement-breakpoint
+CREATE INDEX "oauthClient_userId_idx" ON "oauth_client" USING btree ("user_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "oauthClientResource_clientId_resourceId_uidx" ON "oauth_client_resource" USING btree ("client_id","resource_id");--> statement-breakpoint
+CREATE INDEX "oauthClientResource_clientId_idx" ON "oauth_client_resource" USING btree ("client_id");--> statement-breakpoint
+CREATE INDEX "oauthClientResource_resourceId_idx" ON "oauth_client_resource" USING btree ("resource_id");--> statement-breakpoint
+CREATE INDEX "oauthConsent_clientId_idx" ON "oauth_consent" USING btree ("client_id");--> statement-breakpoint
+CREATE INDEX "oauthConsent_userId_idx" ON "oauth_consent" USING btree ("user_id");--> statement-breakpoint
+CREATE INDEX "oauthRefreshToken_clientId_idx" ON "oauth_refresh_token" USING btree ("client_id");--> statement-breakpoint
+CREATE INDEX "oauthRefreshToken_sessionId_idx" ON "oauth_refresh_token" USING btree ("session_id");--> statement-breakpoint
+CREATE INDEX "oauthRefreshToken_userId_idx" ON "oauth_refresh_token" USING btree ("user_id");--> statement-breakpoint
+CREATE INDEX "oauthRefreshToken_authorizationCodeId_idx" ON "oauth_refresh_token" USING btree ("authorization_code_id");

package/src/app/db/migrations/0002_device_code.sql

@@ -0,0 +1,17 @@
+CREATE TABLE "device_code" (
+	"id" text PRIMARY KEY NOT NULL,
+	"device_code" text NOT NULL,
+	"user_code" text NOT NULL,
+	"user_id" text,
+	"expires_at" timestamp NOT NULL,
+	"status" text NOT NULL,
+	"last_polled_at" timestamp,
+	"polling_interval" integer,
+	"client_id" text,
+	"scope" text,
+	"resources" text[],
+	"oauth_client_id" text
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX "deviceCode_deviceCode_uidx" ON "device_code" USING btree ("device_code");--> statement-breakpoint
+CREATE UNIQUE INDEX "deviceCode_userCode_uidx" ON "device_code" USING btree ("user_code");

package/src/app/db/migrations/0003_realms.sql

@@ -0,0 +1,27 @@
+CREATE TABLE "app_realms" (
+	"client_id" text NOT NULL,
+	"position" integer NOT NULL,
+	"realm_id" text NOT NULL,
+	CONSTRAINT "app_realms_client_id_position_pk" PRIMARY KEY("client_id","position"),
+	CONSTRAINT "app_realms_client_id_realm_id_unique" UNIQUE("client_id","realm_id"),
+	CONSTRAINT "app_realms_position_check" CHECK ("app_realms"."position" >= 0)
+);
+--> statement-breakpoint
+CREATE TABLE "realm_privy" (
+	"app_id" text NOT NULL,
+	"app_secret" text NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"realm_id" text PRIMARY KEY NOT NULL,
+	CONSTRAINT "realm_privy_app_id_unique" UNIQUE("app_id")
+);
+--> statement-breakpoint
+CREATE TABLE "realms" (
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"id" text PRIMARY KEY NOT NULL,
+	"name" text NOT NULL,
+	CONSTRAINT "realms_id_check" CHECK ("realms"."id" ~ '^[a-z0-9]+(-[a-z0-9]+)*$')
+);
+--> statement-breakpoint
+ALTER TABLE "app_realms" ADD CONSTRAINT "app_realms_client_id_oauth_client_client_id_fk" FOREIGN KEY ("client_id") REFERENCES "public"."oauth_client"("client_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "app_realms" ADD CONSTRAINT "app_realms_realm_id_realms_id_fk" FOREIGN KEY ("realm_id") REFERENCES "public"."realms"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "realm_privy" ADD CONSTRAINT "realm_privy_realm_id_realms_id_fk" FOREIGN KEY ("realm_id") REFERENCES "public"."realms"("id") ON DELETE cascade ON UPDATE no action;

package/src/app/db/migrations/0004_default_realm.sql

@@ -0,0 +1,2 @@
+-- Every app without `app_realms` rows reaches the `default` realm.
+INSERT INTO "realms" ("id", "name") VALUES ('default', 'Tempo') ON CONFLICT ("id") DO NOTHING;

package/src/app/db/migrations/0005_passkeys.sql

@@ -0,0 +1,30 @@
+-- Development's database holds the `keys` table of the earlier deploy, whose rows name WorkOS user
+-- IDs that no `user` row has. It moves aside with its index names, so the new table takes them.
+ALTER TABLE IF EXISTS "keys" RENAME TO "legacy_keys";--> statement-breakpoint
+ALTER INDEX IF EXISTS "keys_pkey" RENAME TO "legacy_keys_pkey";--> statement-breakpoint
+ALTER INDEX IF EXISTS "keys_address_unique" RENAME TO "legacy_keys_address_unique";--> statement-breakpoint
+ALTER INDEX IF EXISTS "keys_user_id_index" RENAME TO "legacy_keys_user_id_index";--> statement-breakpoint
+CREATE TABLE "keys" (
+	"address" text NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"id" text PRIMARY KEY NOT NULL,
+	"public_key" text NOT NULL,
+	"rp_id" text NOT NULL,
+	"source" text NOT NULL,
+	"type" text NOT NULL,
+	"user_id" text NOT NULL,
+	CONSTRAINT "keys_address_unique" UNIQUE("address"),
+	CONSTRAINT "keys_source_check" CHECK ("keys"."source" in ('tempo-id', 'wallet')),
+	CONSTRAINT "keys_type_check" CHECK ("keys"."type" = 'passkey')
+);
+--> statement-breakpoint
+CREATE TABLE "realm_passkeys" (
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"realm_id" text PRIMARY KEY NOT NULL,
+	"rp_id" text NOT NULL,
+	CONSTRAINT "realm_passkeys_rp_id_unique" UNIQUE("rp_id")
+);
+--> statement-breakpoint
+ALTER TABLE "keys" ADD CONSTRAINT "keys_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "realm_passkeys" ADD CONSTRAINT "realm_passkeys_realm_id_realms_id_fk" FOREIGN KEY ("realm_id") REFERENCES "public"."realms"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "keys_user_id_idx" ON "keys" USING btree ("user_id");

package/src/app/db/migrations/0006_first_accounts.sql

@@ -0,0 +1,9 @@
+CREATE TABLE "first_accounts" (
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"realm_id" text NOT NULL,
+	"user_id" text NOT NULL,
+	CONSTRAINT "first_accounts_user_id_realm_id_pk" PRIMARY KEY("user_id","realm_id")
+);
+--> statement-breakpoint
+ALTER TABLE "first_accounts" ADD CONSTRAINT "first_accounts_realm_id_realms_id_fk" FOREIGN KEY ("realm_id") REFERENCES "public"."realms"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "first_accounts" ADD CONSTRAINT "first_accounts_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;

package/src/app/db/migrations/0007_pending_keys.sql

@@ -0,0 +1,13 @@
+CREATE TABLE "pending_keys" (
+	"account" text NOT NULL,
+	"client_id" text NOT NULL,
+	"code_challenge" text NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"expires_at" timestamp NOT NULL,
+	"key_authorization" jsonb NOT NULL,
+	"user_id" text NOT NULL,
+	CONSTRAINT "pending_keys_client_id_code_challenge_pk" PRIMARY KEY("client_id","code_challenge")
+);
+--> statement-breakpoint
+ALTER TABLE "pending_keys" ADD CONSTRAINT "pending_keys_client_id_oauth_client_client_id_fk" FOREIGN KEY ("client_id") REFERENCES "public"."oauth_client"("client_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "pending_keys" ADD CONSTRAINT "pending_keys_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;

package/src/app/db/migrations/0008_secp256k1_owners.sql

@@ -0,0 +1,18 @@
+CREATE TABLE "realm_secp256k1" (
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"realm_id" text PRIMARY KEY NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "secp256k1_owners" (
+	"address" text NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"private_key" text NOT NULL,
+	"realm_id" text NOT NULL,
+	"user_id" text NOT NULL,
+	CONSTRAINT "secp256k1_owners_user_id_realm_id_pk" PRIMARY KEY("user_id","realm_id"),
+	CONSTRAINT "secp256k1_owners_address_unique" UNIQUE("address")
+);
+--> statement-breakpoint
+ALTER TABLE "realm_secp256k1" ADD CONSTRAINT "realm_secp256k1_realm_id_realms_id_fk" FOREIGN KEY ("realm_id") REFERENCES "public"."realms"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "secp256k1_owners" ADD CONSTRAINT "secp256k1_owners_realm_id_realms_id_fk" FOREIGN KEY ("realm_id") REFERENCES "public"."realms"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "secp256k1_owners" ADD CONSTRAINT "secp256k1_owners_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;

package/src/app/db/migrations/0009_device_requests.sql

@@ -0,0 +1,8 @@
+CREATE TABLE "device_requests" (
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"device" text,
+	"expires_at" timestamp NOT NULL,
+	"id" text PRIMARY KEY NOT NULL,
+	"ip" text,
+	"location" text
+);

package/src/app/db/migrations/0010_device_keys.sql

@@ -0,0 +1,4 @@
+ALTER TABLE "device_requests" ADD COLUMN "account" text;--> statement-breakpoint
+ALTER TABLE "device_requests" ADD COLUMN "challenge" text;--> statement-breakpoint
+ALTER TABLE "device_requests" ADD COLUMN "key" jsonb;--> statement-breakpoint
+ALTER TABLE "device_requests" ADD COLUMN "key_authorization" jsonb;

package/src/app/db/migrations/0011_registered_passkeys.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "keys" DROP CONSTRAINT "keys_source_check";--> statement-breakpoint
+ALTER TABLE "keys" ADD CONSTRAINT "keys_source_check" CHECK ("keys"."source" in ('registered', 'tempo-id', 'wallet'));

package/src/app/db/migrations/0012_passkey_accounts.sql

@@ -0,0 +1,7 @@
+ALTER TABLE "keys" DROP CONSTRAINT "keys_source_check";--> statement-breakpoint
+ALTER TABLE "keys" ALTER COLUMN "address" DROP NOT NULL;--> statement-breakpoint
+-- A `tempo-id` passkey is a sign-in passkey, which owns no account, so it keeps no address. The
+-- Worker that is live while this runs reads no address of such a row. `wallet` and `registered`
+-- rows keep their names, which that Worker still reads and writes.
+UPDATE "keys" SET "address" = NULL WHERE "source" = 'tempo-id';--> statement-breakpoint
+ALTER TABLE "keys" ADD CONSTRAINT "keys_source_check" CHECK ("keys"."source" in ('registered', 'tempo-id', 'tempo-wallet', 'wallet'));

package/src/app/db/migrations/0013_first_party_apps.sql

@@ -0,0 +1,4 @@
+-- Every app that `tempo-id admin apps` registered is a first-party app, which skips consent. The
+-- Worker that is live while this runs treats each such app as first-party at once. A third-party
+-- app, which a metadata document describes, holds a `client_discovery_id`, and never skips consent.
+UPDATE "oauth_client" SET "skip_consent" = true WHERE "client_discovery_id" IS NULL;

package/src/app/db/migrations/0014_logout_revokes_tokens.sql

@@ -0,0 +1,17 @@
+-- `Logout.end` deletes a session and revokes its tokens in one statement, whose snapshot misses the
+-- tokens that a concurrent refresh inserts. Their foreign key makes the delete wait for the refresh,
+-- and then sets their `session_id` to null. This trigger revokes each such token. It acts only on a
+-- statement that sets `tempo_id.logout`, since a session that expires keeps its `offline_access`
+-- refresh tokens.
+CREATE FUNCTION "revoke_logged_out_token"() RETURNS trigger LANGUAGE plpgsql AS $$
+BEGIN
+  IF current_setting('tempo_id.logout', true) = 'on' THEN
+    NEW."revoked" := coalesce(NEW."revoked", now());
+  END IF;
+  RETURN NEW;
+END
+$$;
+--> statement-breakpoint
+CREATE TRIGGER "oauth_access_token_logout" BEFORE UPDATE OF "session_id" ON "oauth_access_token" FOR EACH ROW WHEN (OLD."session_id" IS NOT NULL AND NEW."session_id" IS NULL) EXECUTE FUNCTION "revoke_logged_out_token"();
+--> statement-breakpoint
+CREATE TRIGGER "oauth_refresh_token_logout" BEFORE UPDATE OF "session_id" ON "oauth_refresh_token" FOR EACH ROW WHEN (OLD."session_id" IS NOT NULL AND NEW."session_id" IS NULL) EXECUTE FUNCTION "revoke_logged_out_token"();

package/src/app/db/migrations/0015_expiry_indexes.sql

@@ -0,0 +1,9 @@
+CREATE INDEX "device_requests_expires_at_idx" ON "device_requests" USING btree ("expires_at");--> statement-breakpoint
+CREATE INDEX "pending_keys_expires_at_idx" ON "pending_keys" USING btree ("expires_at");--> statement-breakpoint
+CREATE INDEX "account_providerId_accountId_idx" ON "account" USING btree ("provider_id","account_id");--> statement-breakpoint
+CREATE INDEX "deviceCode_expiresAt_idx" ON "device_code" USING btree ("expires_at");--> statement-breakpoint
+CREATE INDEX "oauthAccessToken_expiresAt_idx" ON "oauth_access_token" USING btree ("expires_at");--> statement-breakpoint
+CREATE INDEX "oauthClientAssertion_expiresAt_idx" ON "oauth_client_assertion" USING btree ("expires_at");--> statement-breakpoint
+CREATE INDEX "oauthRefreshToken_expiresAt_idx" ON "oauth_refresh_token" USING btree ("expires_at");--> statement-breakpoint
+CREATE INDEX "session_expiresAt_idx" ON "session" USING btree ("expires_at");--> statement-breakpoint
+CREATE INDEX "verification_expiresAt_idx" ON "verification" USING btree ("expires_at");

package/src/app/db/migrations/0016_configurable_accounts.sql

@@ -0,0 +1,15 @@
+CREATE TABLE "account_configs" (
+	"address" text NOT NULL,
+	"chain_id" integer NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"owners" jsonb NOT NULL,
+	"salt" text NOT NULL,
+	"threshold" integer NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL,
+	"user_id" text NOT NULL,
+	"version" text NOT NULL,
+	CONSTRAINT "account_configs_chain_id_address_pk" PRIMARY KEY("chain_id","address")
+);
+--> statement-breakpoint
+ALTER TABLE "account_configs" ADD CONSTRAINT "account_configs_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "account_configs_user_id_idx" ON "account_configs" USING btree ("user_id");

package/src/app/db/migrations/0017_account_config_keys.sql

@@ -0,0 +1,3 @@
+ALTER TABLE "account_configs" ADD COLUMN "key" text;--> statement-breakpoint
+UPDATE "account_configs" SET "key" = "address";--> statement-breakpoint
+ALTER TABLE "account_configs" ALTER COLUMN "key" SET NOT NULL;

package/src/app/db/migrations/0018_better_auth_1_8.sql

@@ -0,0 +1,9 @@
+ALTER TABLE "device_code" ADD COLUMN "acr" text;--> statement-breakpoint
+ALTER TABLE "device_code" ADD COLUMN "amr" text[];--> statement-breakpoint
+ALTER TABLE "device_code" ADD COLUMN "auth_time" timestamp;--> statement-breakpoint
+ALTER TABLE "device_code" ADD COLUMN "reference_id" text;--> statement-breakpoint
+ALTER TABLE "oauth_client" ADD COLUMN "frontchannel_logout_session_required" boolean;--> statement-breakpoint
+ALTER TABLE "oauth_client" ADD COLUMN "frontchannel_logout_uri" text;--> statement-breakpoint
+ALTER TABLE "oauth_client" ADD COLUMN "sector_identifier" text;--> statement-breakpoint
+ALTER TABLE "oauth_refresh_token" ADD COLUMN "acr" text;--> statement-breakpoint
+ALTER TABLE "oauth_refresh_token" ADD COLUMN "amr" text[];

package/src/app/db/migrations/0019_drop_provider_account_index.sql

@@ -0,0 +1 @@
+DROP INDEX "account_providerId_accountId_idx";