@zhama/tego-plugin-sdk 0.0.0-stage → 1.36.0

package/sql/access.sql

@@ -0,0 +1,73 @@
+-- Generated by `pnpm -F @tego/plugin-sdk access:sql` from src/access/drizzle.ts. Do not edit.
+CREATE TABLE IF NOT EXISTS "tego_access_assignments" (
+	"id" text PRIMARY KEY NOT NULL,
+	"tenant_id" text NOT NULL,
+	"role_id" text NOT NULL,
+	"principal_kind" text NOT NULL,
+	"principal_id" text NOT NULL,
+	"include_descendants" boolean NOT NULL,
+	"unit_roles" text[],
+	"domain_type" text,
+	"domain_id" text,
+	"created_by" text NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "tego_access_assignments_domain_pair" CHECK (("tego_access_assignments"."domain_type" IS NULL) = ("tego_access_assignments"."domain_id" IS NULL))
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "tego_access_audit" (
+	"id" text PRIMARY KEY NOT NULL,
+	"tenant_id" text NOT NULL,
+	"actor_id" text,
+	"action" text NOT NULL,
+	"target_type" text NOT NULL,
+	"target_id" text NOT NULL,
+	"before" jsonb,
+	"after" jsonb,
+	"at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "tego_access_roles" (
+	"id" text PRIMARY KEY NOT NULL,
+	"tenant_id" text NOT NULL,
+	"key" text,
+	"builtin" boolean NOT NULL,
+	"domain_type" text,
+	"domain_id" text,
+	"name" text NOT NULL,
+	"description" text NOT NULL,
+	"grants" jsonb NOT NULL,
+	"catalog_version" integer NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_by" text,
+	CONSTRAINT "tego_access_roles_builtin_shape" CHECK (("tego_access_roles"."builtin" AND "tego_access_roles"."key" IS NOT NULL AND "tego_access_roles"."domain_type" IS NULL AND "tego_access_roles"."domain_id" IS NULL) OR (NOT "tego_access_roles"."builtin" AND "tego_access_roles"."key" IS NULL)),
+	CONSTRAINT "tego_access_roles_domain_pair" CHECK (("tego_access_roles"."domain_type" IS NULL) = ("tego_access_roles"."domain_id" IS NULL))
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "tego_access_settings" (
+	"tenant_id" text PRIMARY KEY NOT NULL,
+	"unassigned_role_id" text,
+	"version" integer NOT NULL,
+	"epoch" text NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_by" text
+);
+--> statement-breakpoint
+DO $$ BEGIN
+ ALTER TABLE "tego_access_assignments" ADD CONSTRAINT "tego_access_assignments_role_fk" FOREIGN KEY ("role_id") REFERENCES "tego_access_roles"("id") ON DELETE cascade ON UPDATE no action;
+EXCEPTION
+ WHEN duplicate_object THEN null;
+END $$;
+--> statement-breakpoint
+DO $$ BEGIN
+ ALTER TABLE "tego_access_settings" ADD CONSTRAINT "tego_access_settings_unassigned_role_fk" FOREIGN KEY ("unassigned_role_id") REFERENCES "tego_access_roles"("id") ON DELETE restrict ON UPDATE no action;
+EXCEPTION
+ WHEN duplicate_object THEN null;
+END $$;
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "tego_access_assignments_unique" ON "tego_access_assignments" USING btree ("tenant_id","role_id","principal_kind","principal_id",coalesce("domain_type", ''),coalesce("domain_id", ''));--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "tego_access_assignments_principal_idx" ON "tego_access_assignments" USING btree ("tenant_id","principal_kind","principal_id");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "tego_access_assignments_role_idx" ON "tego_access_assignments" USING btree ("role_id");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "tego_access_audit_tenant_at_idx" ON "tego_access_audit" USING btree ("tenant_id","at");--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "tego_access_roles_builtin_key_unique" ON "tego_access_roles" USING btree ("tenant_id","key") WHERE "tego_access_roles"."builtin";--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "tego_access_roles_tenant_idx" ON "tego_access_roles" USING btree ("tenant_id");