@coffre/db 0.6.2 → 0.8.0

package/src/migrations/postgres/0008_recipes.sql

@@ -0,0 +1,19 @@
+ALTER TABLE "secret_versions" ADD COLUMN "recipe" text;--> statement-breakpoint
+ALTER TABLE "secret_versions" ADD COLUMN "pair_id" uuid;--> statement-breakpoint
+ALTER TABLE "secret_versions" ADD COLUMN "pair_half" text;--> statement-breakpoint
+-- A version is still only ever erased: its recipe and its pair with it.
+CREATE OR REPLACE FUNCTION secret_versions_erase_only() RETURNS trigger LANGUAGE plpgsql AS $$
+BEGIN
+    IF octet_length(NEW.ciphertext) <> 0 OR octet_length(NEW.wrapped_dek) <> 0
+       OR (NEW.id, NEW.secret_id, NEW.version, NEW.envelope_version, NEW.iv, NEW.auth_tag,
+           NEW.kek_provider, NEW.kek_id, NEW.kek_version, NEW.created_at, NEW.created_by,
+           NEW.recipe, NEW.pair_id, NEW.pair_half)
+          IS DISTINCT FROM
+          (OLD.id, OLD.secret_id, OLD.version, OLD.envelope_version, OLD.iv, OLD.auth_tag,
+           OLD.kek_provider, OLD.kek_id, OLD.kek_version, OLD.created_at, OLD.created_by,
+           OLD.recipe, OLD.pair_id, OLD.pair_half) THEN
+        RAISE EXCEPTION 'a secret version is only ever erased' USING ERRCODE = 'insufficient_privilege';
+    END IF;
+    RETURN NEW;
+END
+$$;

package/src/migrations/postgres/0009_handles.sql

@@ -0,0 +1,3 @@
+-- Handles (0.8): the stand-ins a person's app holds, which reach only the credential proxy. The check widens to their kind: the release before makes none, and refuses one, whose prefix, coffre_use_, it does not take for a token.
+ALTER TABLE "credentials" DROP CONSTRAINT "credentials_kind_check";--> statement-breakpoint
+ALTER TABLE "credentials" ADD CONSTRAINT "credentials_kind_check" CHECK ("credentials"."kind" IN ('browser', 'cli', 'service', 'personal', 'handle'));