kavachos 0.1.1 → 0.1.4

package/dist/index.js

@@ -5682,7 +5682,7 @@ function createOAuthModule(db, config) {
       throw new Error("OAuth callback: state has expired. Restart the authorization flow.");
     }
     await db.delete(oauthStates).where(eq(oauthStates.state, state));
-    const tokens = await provider.exchangeCode(stateRow.codeVerifier, code2, redirectUri);
+    const tokens = await provider.exchangeCode(code2, stateRow.codeVerifier, redirectUri);
     const userInfo = await provider.getUserInfo(tokens.accessToken);
     const existingRows = await db.select().from(oauthAccounts).where(
       and(
@@ -15631,6 +15631,31 @@ function buildStatements(provider) {
   resource               TEXT,
   expires_at             ${ts} NOT NULL,
   created_at             ${ts} NOT NULL
+)`,
+    // ------------------------------------------------------------------
+    // kavach_oauth_accounts (provider account linking)
+    // ------------------------------------------------------------------
+    `CREATE TABLE ${ifne} kavach_oauth_accounts (
+  id                   TEXT NOT NULL PRIMARY KEY,
+  user_id              TEXT NOT NULL,
+  provider             TEXT NOT NULL,
+  provider_account_id  TEXT NOT NULL,
+  access_token         TEXT NOT NULL,
+  refresh_token        TEXT,
+  expires_at           ${tsNull},
+  created_at           ${ts} NOT NULL,
+  updated_at           ${ts} NOT NULL
+)`,
+    // ------------------------------------------------------------------
+    // kavach_oauth_states (PKCE state for CSRF protection)
+    // ------------------------------------------------------------------
+    `CREATE TABLE ${ifne} kavach_oauth_states (
+  state          TEXT NOT NULL PRIMARY KEY,
+  code_verifier  TEXT NOT NULL,
+  redirect_uri   TEXT NOT NULL,
+  provider       TEXT NOT NULL,
+  expires_at     ${ts} NOT NULL,
+  created_at     ${ts} NOT NULL
 )`,
     // ------------------------------------------------------------------
     // kavach_budget_policies