agrs-sequelize-sdk 1.4.31 → 1.4.32

package/models/TiktokIdentities.js

@@ -11,8 +11,7 @@ module.exports = (sequelize, DataTypes) => {
         type: DataTypes.STRING(64),
         allowNull: false,
         unique: true,
-        comment:
-          "TikTok identity_id (creative owner). ONE row per identity — mirrors FB Pages.code.",
+        comment: "TikTok identity_id (CUSTOMIZED_USER) used as creative owner",
       },
       identity_type: {
         type: DataTypes.STRING(32),
@@ -23,21 +22,21 @@ module.exports = (sequelize, DataTypes) => {
         type: DataTypes.STRING(255),
         allowNull: true,
       },
-      // Identities are scoped by business_center_id (mirrors FB Pages, tagged by
-      // BM with no ad-account binding) and selected at creation time (UI lets the
-      // user pick; the AI/feed flow random-picks via the resolver, which queries
-      // by the advertiser's BC and IGNORES ad_account_id). ad_account_id is kept
-      // NOT NULL (no schema mutation) and holds a representative advertiser.
       ad_account_id: {
         type: DataTypes.STRING(64),
         allowNull: false,
-        comment: "Representative advertiser (informational). Identity scope/selection is by business_center_id.",
+        comment:
+          "Representative TikTok advertiser_id (legacy). Selection is by " +
+          "business_center_id; the resolver ignores this. Kept NOT NULL so the " +
+          "column add stays additive.",
       },
       business_center_id: {
         type: DataTypes.STRING(64),
         allowNull: true,
         comment:
-          "TikTok Business Center the identity is authorized to. The resolver picks an identity whose BC matches the advertiser's owner BC (mirrors FB Pages.BusinessManager).",
+          "Business Center this identity is authorized to. Mirrors FB Pages " +
+          "(tagged by BM, no ad-account binding). The asset resolver scopes " +
+          "identity selection by this, NOT by ad_account_id.",
       },
       status: {
         type: DataTypes.STRING(16),

package/models/Users.js

@@ -40,6 +40,16 @@ module.exports = (sequelize, DataTypes) => {
         allowNull: true,
         defaultValue: [],
       },
+      // Public API token scope preference. Admin sets it on the User
+      // Management screen (Features → API & Docs → Read / Read & Write).
+      // The token-issue route reads this when a user mints/regenerates so
+      // the new token gets the admin-granted scope, without polluting the
+      // Features array.
+      api_scope: {
+        type: DataTypes.STRING,
+        allowNull: false,
+        defaultValue: "read",
+      },
       Accounts: {
         type: DataTypes.ARRAY(DataTypes.STRING), // Array of account IDs
         allowNull: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agrs-sequelize-sdk",
-  "version": "1.4.31",
+  "version": "1.4.32",
   "main": "index.js",
   "scripts": {
     "start": "node index.js",

package/models/MineWebhookEvent.js

@@ -1,53 +0,0 @@
-module.exports = (sequelize, DataTypes) => {
-  /**
-   * Durable audit log of every inbound Mine webhook call (article-ready / policy-decision).
-   * Purpose: observability, security audit (signature failures), idempotency, replay/reconcile.
-   * Correlation is by string ids (provider_id / adset_id / ad_id) — no FK, to stay decoupled
-   * from the article/ad lifecycle and tolerate webhooks that arrive before the local row exists.
-   */
-  const MineWebhookEvent = sequelize.define(
-    "MineWebhookEvent",
-    {
-      id: {
-        type: DataTypes.INTEGER,
-        primaryKey: true,
-        autoIncrement: true,
-      },
-      event_id: { type: DataTypes.STRING, allowNull: true },        // Mine's unique id (idempotency)
-      event_type: { type: DataTypes.STRING, allowNull: false },     // 'article-ready' | 'policy-decision'
-      endpoint: { type: DataTypes.STRING, allowNull: true },
-      source_ip: { type: DataTypes.STRING, allowNull: true },
-
-      signature_valid: { type: DataTypes.BOOLEAN, allowNull: true },
-      http_status: { type: DataTypes.INTEGER, allowNull: true },
-
-      payload: { type: DataTypes.JSONB, allowNull: true },
-
-      provider_id: { type: DataTypes.STRING, allowNull: true },
-      adset_id: { type: DataTypes.STRING, allowNull: true },
-      ad_id: { type: DataTypes.STRING, allowNull: true },
-      matched_agrsaid: { type: DataTypes.STRING, allowNull: true },
-
-      // received | processed | skipped | duplicate | rejected_signature | rejected_validation | failed
-      outcome: { type: DataTypes.STRING, allowNull: false, defaultValue: "received" },
-      outcome_reason: { type: DataTypes.TEXT, allowNull: true },
-
-      received_at: { type: DataTypes.DATE, allowNull: false, defaultValue: DataTypes.NOW },
-      processed_at: { type: DataTypes.DATE, allowNull: true },
-      duration_ms: { type: DataTypes.INTEGER, allowNull: true },
-    },
-    {
-      tableName: "mine_webhook_events",
-      indexes: [
-        { fields: ["event_id"] },
-        { fields: ["event_type"] },
-        { fields: ["outcome"] },
-        { fields: ["provider_id"] },
-        { fields: ["adset_id"] },
-        { fields: [{ name: "received_at", order: "DESC" }] },
-      ],
-    }
-  );
-
-  return MineWebhookEvent;
-};