@byok-sdk/cloud-dataplane 0.10.1 → 0.11.0

package/dist/index.js

@@ -808,6 +808,18 @@ function toRecord(row) {
   };
 }
 var SELECT_COLUMNS = "tenant_id, device_id, product_id, device_name, device_public_key, proof_key_id, proof_key_epoch, revoked, machine_id, capabilities";
+var DEVICE_STATE_DELETES = [
+  "DELETE FROM device_presence WHERE tenant_id = $1 AND device_id = ANY($2::text[])",
+  "DELETE FROM auth_nonce WHERE tenant_id = $1 AND device_id = ANY($2::text[])",
+  "DELETE FROM inbound_dedup WHERE tenant_id = $1 AND device_id = ANY($2::text[])",
+  "DELETE FROM device_assertion_replay WHERE tenant_id = $1 AND device_id = ANY($2::text[])"
+];
+async function deleteDeviceState(client, tenant, deviceIds) {
+  if (deviceIds.length === 0) return;
+  for (const statement of DEVICE_STATE_DELETES) {
+    await client.query(statement, [tenant, [...deviceIds]]);
+  }
+}
 async function rollback(client) {
   try {
     await client.query("ROLLBACK");
@@ -826,11 +838,16 @@ var PostgresDeviceDirectory = class {
     try {
       await client.query("BEGIN");
       if (input.machineId !== void 0) {
-        await client.query(
-          `UPDATE device
-              SET revoked = true
-            WHERE tenant_id = $1 AND product_id = $2 AND machine_id = $3 AND NOT revoked`,
-          [tenant, input.productId, input.machineId]
+        const superseded = await client.query(
+          `DELETE FROM device
+            WHERE tenant_id = $1 AND product_id = $2 AND machine_id = $3 AND device_id <> $4
+          RETURNING device_id`,
+          [tenant, input.productId, input.machineId, input.deviceId]
+        );
+        await deleteDeviceState(
+          client,
+          tenant,
+          superseded.rows.map((row) => row.device_id)
         );
       }
       const result = await client.query(
@@ -877,11 +894,35 @@ var PostgresDeviceDirectory = class {
     const row = result.rows[0];
     return row === void 0 ? void 0 : toRecord(row);
   }
+  /**
+   * Revocation removes the registration and the device-scoped state that only
+   * existed to serve it, in one transaction: a half-applied revoke that left
+   * live presence or an unspent challenge nonce behind would be state for a
+   * device the directory can no longer name.
+   *
+   * A no-op for a device this tenant does not own: revoking what you cannot
+   * address deletes nothing and reports nothing back.
+   */
   async revoke(tenant, deviceId) {
-    await this.#pool.query("UPDATE device SET revoked = true WHERE tenant_id = $1 AND device_id = $2", [
-      tenant,
-      deviceId
-    ]);
+    const client = await this.#pool.connect();
+    try {
+      await client.query("BEGIN");
+      const removed = await client.query(
+        "DELETE FROM device WHERE tenant_id = $1 AND device_id = $2 RETURNING device_id",
+        [tenant, deviceId]
+      );
+      await deleteDeviceState(
+        client,
+        tenant,
+        removed.rows.map((row) => row.device_id)
+      );
+      await client.query("COMMIT");
+    } catch (cause) {
+      await rollback(client);
+      throw cause;
+    } finally {
+      client.release();
+    }
   }
   async recordCapabilities(tenant, input) {
     const result = await this.#pool.query(