@byok-sdk/cloud-dataplane 0.9.1 → 0.10.0

package/dist/index.js

@@ -803,10 +803,17 @@ function toRecord(row) {
     proofKeyId: row.proof_key_id,
     proofKeyEpoch: row.proof_key_epoch,
     revoked: row.revoked,
+    ...row.machine_id == null ? {} : { machineId: row.machine_id },
     ...row.capabilities == null ? {} : { capabilities: Object.freeze([...row.capabilities]) }
   };
 }
-var SELECT_COLUMNS = "tenant_id, device_id, product_id, device_name, device_public_key, proof_key_id, proof_key_epoch, revoked, capabilities";
+var SELECT_COLUMNS = "tenant_id, device_id, product_id, device_name, device_public_key, proof_key_id, proof_key_epoch, revoked, machine_id, capabilities";
+async function rollback(client) {
+  try {
+    await client.query("ROLLBACK");
+  } catch {
+  }
+}
 var PostgresDeviceDirectory = class {
   #pool;
   #clock;
@@ -815,32 +822,52 @@ var PostgresDeviceDirectory = class {
     this.#clock = clock;
   }
   async register(tenant, input) {
-    const result = await this.#pool.query(
-      `INSERT INTO device (
-         tenant_id, device_id, product_id, device_name, device_public_key,
-         proof_key_id, proof_key_epoch, revoked
-       )
-       VALUES ($1, $2, $3, $4, $5, $6, $7, false)
-       ON CONFLICT (tenant_id, device_id) DO UPDATE
-         SET product_id = EXCLUDED.product_id,
-             device_name = EXCLUDED.device_name,
-             device_public_key = EXCLUDED.device_public_key,
-             proof_key_id = EXCLUDED.proof_key_id,
-             proof_key_epoch = EXCLUDED.proof_key_epoch,
-             revoked = false,
-             capabilities = NULL
-       RETURNING ${SELECT_COLUMNS}`,
-      [
-        tenant,
-        input.deviceId,
-        input.productId,
-        input.deviceName,
-        input.devicePublicKey,
-        input.proofKeyId,
-        input.proofKeyEpoch
-      ]
-    );
-    return toRecord(result.rows[0]);
+    const client = await this.#pool.connect();
+    try {
+      await client.query("BEGIN");
+      if (input.machineId !== void 0) {
+        await client.query(
+          `UPDATE device
+              SET revoked = true
+            WHERE tenant_id = $1 AND product_id = $2 AND machine_id = $3 AND NOT revoked`,
+          [tenant, input.productId, input.machineId]
+        );
+      }
+      const result = await client.query(
+        `INSERT INTO device (
+           tenant_id, device_id, product_id, device_name, device_public_key,
+           proof_key_id, proof_key_epoch, revoked, machine_id
+         )
+         VALUES ($1, $2, $3, $4, $5, $6, $7, false, $8)
+         ON CONFLICT (tenant_id, device_id) DO UPDATE
+           SET product_id = EXCLUDED.product_id,
+               device_name = EXCLUDED.device_name,
+               device_public_key = EXCLUDED.device_public_key,
+               proof_key_id = EXCLUDED.proof_key_id,
+               proof_key_epoch = EXCLUDED.proof_key_epoch,
+               revoked = false,
+               machine_id = EXCLUDED.machine_id,
+               capabilities = NULL
+         RETURNING ${SELECT_COLUMNS}`,
+        [
+          tenant,
+          input.deviceId,
+          input.productId,
+          input.deviceName,
+          input.devicePublicKey,
+          input.proofKeyId,
+          input.proofKeyEpoch,
+          input.machineId ?? null
+        ]
+      );
+      await client.query("COMMIT");
+      return toRecord(result.rows[0]);
+    } catch (cause) {
+      await rollback(client);
+      throw cause;
+    } finally {
+      client.release();
+    }
   }
   async get(tenant, deviceId) {
     const result = await this.#pool.query(
@@ -2083,7 +2110,7 @@ var PostgresAgentMemoryProjectionStore = class {
         }
       });
     } catch (cause) {
-      await rollback(client);
+      await rollback2(client);
       throw cause;
     } finally {
       client.release();
@@ -2120,7 +2147,7 @@ var PostgresAgentMemoryProjectionStore = class {
       await client.query("COMMIT");
       return AgentMemoryProjectionEraseResultSchema.parse({ nextWriterEpoch });
     } catch (cause) {
-      await rollback(client);
+      await rollback2(client);
       throw cause;
     } finally {
       client.release();
@@ -2257,7 +2284,7 @@ function toBase64(bytes) {
 function toBase64Url(bytes) {
   return toBase64(bytes).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/u, "");
 }
-async function rollback(client) {
+async function rollback2(client) {
   try {
     await client.query("ROLLBACK");
   } catch {