projectdavid-orm 1.9.1__tar.gz → 1.11.0__tar.gz

{projectdavid_orm-1.9.1 → projectdavid_orm-1.11.0}/CHANGELOG.md

@@ -1,3 +1,17 @@
+# [1.11.0](https://github.com/project-david-ai/projectdavid-orm/compare/v1.10.0...v1.11.0) (2026-09-27)
+
+
+### Features
+
+* add tenant credential persistence ([d222bc0](https://github.com/project-david-ai/projectdavid-orm/commit/d222bc0764dfb10ced00006b68a06c6a55d1b508))
+
+# [1.10.0](https://github.com/project-david-ai/projectdavid-orm/compare/v1.9.1...v1.10.0) (2026-09-26)
+
+
+### Features
+
+* add MCP registration persistence models ([61867c1](https://github.com/project-david-ai/projectdavid-orm/commit/61867c139ed1fa2ca1de3d263a5a77dabf0242dd))
+
 ## [1.9.1](https://github.com/project-david-ai/projectdavid-orm/compare/v1.9.0...v1.9.1) (2026-08-27)
 
 

{projectdavid_orm-1.9.1/src/projectdavid_orm.egg-info → projectdavid_orm-1.11.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: projectdavid-orm
-Version: 1.9.1
+Version: 1.11.0
 Summary: Shared SQLAlchemy ORM models for ProjectDavid services
 Author-email: "Francis N." <engineering@projectdavid.co.uk>
 License: PolyForm Noncommercial License 1.0.0

{projectdavid_orm-1.9.1 → projectdavid_orm-1.11.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "projectdavid-orm"
-version = "1.9.1"
+version = "1.11.0"
 description = "Shared SQLAlchemy ORM models for ProjectDavid services"
 readme = "README.md"
 authors = [

{projectdavid_orm-1.9.1 → projectdavid_orm-1.11.0}/src/projectdavid_orm/projectdavid_orm/models.py

@@ -180,6 +180,20 @@ class User(Base):
 
     audit_logs = relationship("AuditLog", back_populates="user", lazy="dynamic")
 
+    credentials = relationship(
+        "Credential",
+        back_populates="owner",
+        cascade="all, delete-orphan",
+        lazy="select",
+    )
+
+    mcp_server_registrations = relationship(
+        "McpServerRegistration",
+        back_populates="owner",
+        cascade="all, delete-orphan",
+        lazy="select",
+    )
+
     __table_args__ = (
         UniqueConstraint(
             "oauth_provider", "provider_user_id", name="uq_user_oauth_provider_id"
@@ -489,6 +503,199 @@ class Assistant(Base):
         lazy="select",
     )
 
+    mcp_tools = relationship(
+        "AssistantMcpTool",
+        back_populates="assistant",
+        cascade="all, delete-orphan",
+        lazy="select",
+    )
+
+
+class Credential(Base):
+    """Tenant-owned encrypted credential material.
+
+    Plaintext credentials are never persisted. Decryption is owned by
+    the application credential service and requires deployment-supplied
+    root key material.
+    """
+
+    __tablename__ = "credentials"
+
+    id = Column(String(64), primary_key=True, index=True)
+
+    owner_id = Column(
+        String(64),
+        ForeignKey("users.id", ondelete="CASCADE"),
+        nullable=False,
+        index=True,
+    )
+
+    kind = Column(String(32), nullable=False)
+    encrypted_payload = Column(Text, nullable=False)
+    encryption_version = Column(
+        Integer,
+        nullable=False,
+        default=1,
+        server_default="1",
+    )
+
+    created_at = Column(DateTime, nullable=False, default=datetime.utcnow)
+    updated_at = Column(
+        DateTime,
+        nullable=False,
+        default=datetime.utcnow,
+        onupdate=datetime.utcnow,
+    )
+
+    owner = relationship("User", back_populates="credentials")
+
+    mcp_server_registrations = relationship(
+        "McpServerRegistration",
+        back_populates="credential",
+        lazy="select",
+    )
+
+    __table_args__ = (Index("idx_credentials_owner_kind", "owner_id", "kind"),)
+
+
+class McpServerRegistration(Base):
+    """A user-owned remote MCP server registration.
+
+    Authentication references generic tenant-owned encrypted credentials.
+    Raw credential material is never persisted on the registration itself.
+    """
+
+    __tablename__ = "mcp_server_registrations"
+
+    id = Column(String(64), primary_key=True, index=True)
+
+    owner_id = Column(
+        String(64),
+        ForeignKey("users.id", ondelete="CASCADE"),
+        nullable=False,
+        index=True,
+    )
+
+    name = Column(String(128), nullable=False)
+
+    url = Column(Text, nullable=False)
+    normalized_url = Column(Text, nullable=False)
+
+    identity_key = Column(
+        String(64),
+        nullable=False,
+        comment=(
+            "Stable SHA-256 identity derived from transport + normalized URL. "
+            "Combined with owner_id to make registration idempotent."
+        ),
+    )
+
+    transport = Column(
+        String(32),
+        nullable=False,
+        default="streamable_http",
+        server_default="streamable_http",
+    )
+
+    auth_type = Column(
+        String(32),
+        nullable=False,
+        default="none",
+        server_default="none",
+    )
+
+    credential_id = Column(
+        String(64),
+        ForeignKey("credentials.id", ondelete="RESTRICT"),
+        nullable=True,
+        index=True,
+    )
+
+    timeout_seconds = Column(Float, nullable=False, default=30.0, server_default="30")
+
+    enabled = Column(Boolean, nullable=False, default=True, server_default="1")
+
+    created_at = Column(DateTime, nullable=False, default=datetime.utcnow)
+    updated_at = Column(
+        DateTime,
+        nullable=False,
+        default=datetime.utcnow,
+        onupdate=datetime.utcnow,
+    )
+
+    owner = relationship("User", back_populates="mcp_server_registrations")
+
+    credential = relationship(
+        "Credential",
+        back_populates="mcp_server_registrations",
+    )
+
+    assistant_tools = relationship(
+        "AssistantMcpTool",
+        back_populates="registration",
+        cascade="all, delete-orphan",
+        lazy="select",
+    )
+
+    __table_args__ = (
+        UniqueConstraint(
+            "owner_id",
+            "identity_key",
+            name="uq_mcp_registration_owner_identity",
+        ),
+        Index("idx_mcp_registration_owner_enabled", "owner_id", "enabled"),
+    )
+
+
+class AssistantMcpTool(Base):
+    """Assistant-specific provenance for one discovered MCP tool."""
+
+    __tablename__ = "assistant_mcp_tools"
+
+    id = Column(String(64), primary_key=True, index=True)
+
+    assistant_id = Column(
+        String(64),
+        ForeignKey("assistants.id", ondelete="CASCADE"),
+        nullable=False,
+        index=True,
+    )
+
+    registration_id = Column(
+        String(64),
+        ForeignKey("mcp_server_registrations.id", ondelete="CASCADE"),
+        nullable=False,
+        index=True,
+    )
+
+    remote_name = Column(String(255), nullable=False)
+    canonical_id = Column(String(512), nullable=False)
+    provider_name = Column(String(64), nullable=False)
+
+    enabled = Column(Boolean, nullable=False, default=True, server_default="1")
+    created_at = Column(DateTime, nullable=False, default=datetime.utcnow)
+
+    assistant = relationship("Assistant", back_populates="mcp_tools")
+    registration = relationship(
+        "McpServerRegistration",
+        back_populates="assistant_tools",
+    )
+
+    __table_args__ = (
+        UniqueConstraint(
+            "assistant_id",
+            "registration_id",
+            "remote_name",
+            name="uq_assistant_mcp_remote_tool",
+        ),
+        UniqueConstraint(
+            "assistant_id",
+            "provider_name",
+            name="uq_assistant_mcp_provider_name",
+        ),
+        Index("idx_assistant_mcp_registration", "registration_id"),
+    )
+
 
 class Action(Base):
     __tablename__ = "actions"

{projectdavid_orm-1.9.1 → projectdavid_orm-1.11.0/src/projectdavid_orm.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: projectdavid-orm
-Version: 1.9.1
+Version: 1.11.0
 Summary: Shared SQLAlchemy ORM models for ProjectDavid services
 Author-email: "Francis N." <engineering@projectdavid.co.uk>
 License: PolyForm Noncommercial License 1.0.0