u

src/providers/mssql/queries/mcp.js

@@ -0,0 +1,90 @@
+export const INSERT_CLIENT = `
+INSERT INTO mcp_client (client_id, client_secret, client_name, redirect_uris, grant_types, response_types, scope)
+OUTPUT INSERTED.id, INSERTED.client_id, INSERTED.client_secret, INSERTED.client_name, INSERTED.redirect_uris, INSERTED.grant_types, INSERTED.response_types, INSERTED.scope, INSERTED.created_at
+VALUES (@clientId, @clientSecret, @clientName, @redirectUris, @grantTypes, @responseTypes, @scope)
+`;
+
+export const GET_CLIENT = `
+SELECT
+    id,
+    client_id AS clientId,
+    client_secret AS clientSecret,
+    client_name AS clientName,
+    redirect_uris AS redirectUris,
+    grant_types AS grantTypes,
+    response_types AS responseTypes,
+    scope,
+    created_at AS createdAt
+FROM mcp_client
+WHERE client_id = @clientId
+`;
+
+export const LIST_CLIENTS = `
+SELECT
+    id,
+    client_id AS clientId,
+    client_name AS clientName,
+    redirect_uris AS redirectUris,
+    grant_types AS grantTypes,
+    response_types AS responseTypes,
+    scope,
+    created_at AS createdAt
+FROM mcp_client
+ORDER BY created_at DESC
+`;
+
+export const DELETE_CLIENT = `
+DELETE FROM mcp_client
+WHERE client_id = @clientId
+`;
+
+export const INSERT_AUTH_CODE = `
+INSERT INTO mcp_auth_code (code, client_id, google_auth_id, redirect_uri, code_challenge, code_challenge_method, scope, expires_at)
+VALUES (@code, @clientId, @googleAuthId, @redirectUri, @codeChallenge, @codeChallengeMethod, @scope, @expiresAt)
+`;
+
+export const GET_AUTH_CODE = `
+SELECT
+    code,
+    client_id AS clientId,
+    google_auth_id AS googleAuthId,
+    redirect_uri AS redirectUri,
+    code_challenge AS codeChallenge,
+    code_challenge_method AS codeChallengeMethod,
+    scope,
+    expires_at AS expiresAt,
+    used
+FROM mcp_auth_code
+WHERE code = @code
+`;
+
+export const CONSUME_AUTH_CODE = `
+UPDATE mcp_auth_code
+SET used = 1
+WHERE code = @code
+`;
+
+export const INSERT_REFRESH_TOKEN = `
+INSERT INTO mcp_token (refresh_token, client_id, google_auth_id, scope, expires_at)
+OUTPUT INSERTED.id
+VALUES (@refreshToken, @clientId, @googleAuthId, @scope, @expiresAt)
+`;
+
+export const GET_REFRESH_TOKEN = `
+SELECT
+    id,
+    refresh_token AS refreshToken,
+    client_id AS clientId,
+    google_auth_id AS googleAuthId,
+    scope,
+    expires_at AS expiresAt,
+    revoked
+FROM mcp_token
+WHERE refresh_token = @refreshToken
+`;
+
+export const REVOKE_REFRESH_TOKEN = `
+UPDATE mcp_token
+SET revoked = 1
+WHERE refresh_token = @refreshToken
+`;

src/providers/mssql/schema.js

@@ -1177,6 +1177,61 @@ BEGIN
 END
 `;
 
+export const INIT_MCP_CLIENT = `
+IF NOT EXISTS (SELECT * FROM sys.tables WHERE name = 'mcp_client')
+BEGIN
+    CREATE TABLE mcp_client (
+        id INT IDENTITY(1,1) PRIMARY KEY,
+        client_id NVARCHAR(100) NOT NULL,
+        client_secret NVARCHAR(255) NULL,
+        client_name NVARCHAR(255) NOT NULL,
+        redirect_uris NVARCHAR(MAX) NOT NULL,
+        grant_types NVARCHAR(255) NULL,
+        response_types NVARCHAR(255) NULL,
+        scope NVARCHAR(255) NULL,
+        created_at DATETIME2 NOT NULL CONSTRAINT DF_mcp_client_created_at DEFAULT SYSUTCDATETIME(),
+        CONSTRAINT UQ_mcp_client_client_id UNIQUE (client_id)
+    );
+END
+`;
+
+export const INIT_MCP_AUTH_CODE = `
+IF NOT EXISTS (SELECT * FROM sys.tables WHERE name = 'mcp_auth_code')
+BEGIN
+    CREATE TABLE mcp_auth_code (
+        code NVARCHAR(128) PRIMARY KEY,
+        client_id NVARCHAR(100) NOT NULL,
+        google_auth_id INT NOT NULL,
+        redirect_uri NVARCHAR(2048) NOT NULL,
+        code_challenge NVARCHAR(255) NOT NULL,
+        code_challenge_method NVARCHAR(32) NOT NULL,
+        scope NVARCHAR(255) NULL,
+        expires_at DATETIME2 NOT NULL,
+        used TINYINT NOT NULL CONSTRAINT DF_mcp_auth_code_used DEFAULT 0,
+        created_at DATETIME2 NOT NULL CONSTRAINT DF_mcp_auth_code_created_at DEFAULT SYSUTCDATETIME(),
+        CONSTRAINT FK_mcp_auth_code_google_auth FOREIGN KEY (google_auth_id) REFERENCES google_auth(id) ON DELETE CASCADE
+    );
+END
+`;
+
+export const INIT_MCP_TOKEN = `
+IF NOT EXISTS (SELECT * FROM sys.tables WHERE name = 'mcp_token')
+BEGIN
+    CREATE TABLE mcp_token (
+        id INT IDENTITY(1,1) PRIMARY KEY,
+        refresh_token NVARCHAR(128) NOT NULL,
+        client_id NVARCHAR(100) NOT NULL,
+        google_auth_id INT NOT NULL,
+        scope NVARCHAR(255) NULL,
+        expires_at DATETIME2 NOT NULL,
+        revoked TINYINT NOT NULL CONSTRAINT DF_mcp_token_revoked DEFAULT 0,
+        created_at DATETIME2 NOT NULL CONSTRAINT DF_mcp_token_created_at DEFAULT SYSUTCDATETIME(),
+        CONSTRAINT UQ_mcp_token_refresh UNIQUE (refresh_token),
+        CONSTRAINT FK_mcp_token_google_auth FOREIGN KEY (google_auth_id) REFERENCES google_auth(id) ON DELETE CASCADE
+    );
+END
+`;
+
 /** DDL scripts in dependency order for schema init. */
 export const SCHEMA_SCRIPTS = [
     INIT_META,
@@ -1244,4 +1299,7 @@ export const SCHEMA_SCRIPTS = [
     INIT_PAYMENT,
     INIT_SHIPPING,
     INIT_PACKAGE,
+    INIT_MCP_CLIENT,
+    INIT_MCP_AUTH_CODE,
+    INIT_MCP_TOKEN,
 ];