e2c5b6698c
Add secure claim secret flow for agent join requests with timing-safe comparison, expiry, and one-time use. Expose machine-readable onboarding manifests and skill index API endpoints. Add company brand color with hex validation, pattern icon generation, and settings page integration. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
42 lines
1.9 KiB
TypeScript
42 lines
1.9 KiB
TypeScript
import { pgTable, uuid, text, timestamp, jsonb, index, uniqueIndex } from "drizzle-orm/pg-core";
|
|
import { companies } from "./companies.js";
|
|
import { invites } from "./invites.js";
|
|
import { agents } from "./agents.js";
|
|
|
|
export const joinRequests = pgTable(
|
|
"join_requests",
|
|
{
|
|
id: uuid("id").primaryKey().defaultRandom(),
|
|
inviteId: uuid("invite_id").notNull().references(() => invites.id),
|
|
companyId: uuid("company_id").notNull().references(() => companies.id),
|
|
requestType: text("request_type").notNull(),
|
|
status: text("status").notNull().default("pending_approval"),
|
|
requestIp: text("request_ip").notNull(),
|
|
requestingUserId: text("requesting_user_id"),
|
|
requestEmailSnapshot: text("request_email_snapshot"),
|
|
agentName: text("agent_name"),
|
|
adapterType: text("adapter_type"),
|
|
capabilities: text("capabilities"),
|
|
agentDefaultsPayload: jsonb("agent_defaults_payload").$type<Record<string, unknown> | null>(),
|
|
claimSecretHash: text("claim_secret_hash"),
|
|
claimSecretExpiresAt: timestamp("claim_secret_expires_at", { withTimezone: true }),
|
|
claimSecretConsumedAt: timestamp("claim_secret_consumed_at", { withTimezone: true }),
|
|
createdAgentId: uuid("created_agent_id").references(() => agents.id),
|
|
approvedByUserId: text("approved_by_user_id"),
|
|
approvedAt: timestamp("approved_at", { withTimezone: true }),
|
|
rejectedByUserId: text("rejected_by_user_id"),
|
|
rejectedAt: timestamp("rejected_at", { withTimezone: true }),
|
|
createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
|
|
updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow(),
|
|
},
|
|
(table) => ({
|
|
inviteUniqueIdx: uniqueIndex("join_requests_invite_unique_idx").on(table.inviteId),
|
|
companyStatusTypeCreatedIdx: index("join_requests_company_status_type_created_idx").on(
|
|
table.companyId,
|
|
table.status,
|
|
table.requestType,
|
|
table.createdAt,
|
|
),
|
|
}),
|
|
);
|