@intx/db 0.3.0 → 0.4.0

package/dist/workflow-run-dispatch-store.d.ts

@@ -8,6 +8,7 @@ export type EnqueueWorkflowRunDispatchArgs = {
     readonly id: string;
     readonly anchorRunId: string;
     readonly messageId: string;
+    readonly senderAddress: string;
     readonly rawMessage: Uint8Array;
     readonly stepGrants: RunGrantsFrameType["stepGrants"];
     readonly now?: Date;
@@ -28,6 +29,7 @@ type InsertOrReconcileDispatchArgs = {
     readonly anchorRunId: string;
     readonly messageId: string;
     readonly kind: ParsedDispatch["kind"];
+    readonly senderAddress: string | null;
     readonly rawMessage: Uint8Array;
     readonly stepGrants: RunGrantsFrameType["stepGrants"];
     readonly now?: Date;
@@ -38,6 +40,7 @@ export declare class WorkflowRunDispatchPayloadConflictError extends Error {
     constructor(messageId: string, payloadKind: "message" | "signal", operation: InsertOrReconcileDispatchArgs["operation"]);
 }
 export type ClaimWorkflowRunDispatchArgs = {
+    readonly excludedDispatchIds?: readonly string[];
     readonly leaseId: string;
     readonly leaseDurationMs: number;
 };

package/dist/workflow-run-dispatch-store.js

@@ -1,5 +1,5 @@
 import { isDeepStrictEqual } from "node:util";
-import { and, asc, eq, inArray, isNull, lte, or, sql, } from "drizzle-orm";
+import { and, asc, eq, inArray, isNull, lte, notInArray, or, sql, } from "drizzle-orm";
 import { RunGrantsFrame, SignalDeliverFrame, } from "@intx/types/sidecar";
 import { parseWorkflowRunDispatchRow } from "./parse-row.js";
 import { sidecarAllocation, workflowRun, workflowRunDispatch } from "./schema/index.js";
@@ -54,6 +54,7 @@ async function insertOrReconcileDispatch(executor, args) {
         anchorRunId: args.anchorRunId,
         messageId: args.messageId,
         kind: args.kind,
+        senderAddress: args.senderAddress,
         rawMessage: args.rawMessage,
         stepGrants: args.stepGrants,
         status: "pending",
@@ -116,6 +117,7 @@ export function createWorkflowRunDispatchStore(db) {
                 anchorRunId: args.anchorRunId,
                 messageId: args.messageId,
                 kind: "mail",
+                senderAddress: args.senderAddress,
                 rawMessage: args.rawMessage,
                 stepGrants,
                 ...(args.now !== undefined ? { now: args.now } : {}),
@@ -133,6 +135,7 @@ export function createWorkflowRunDispatchStore(db) {
                 anchorRunId: args.anchorRunId,
                 messageId: signal.signalId,
                 kind: "signal",
+                senderAddress: null,
                 rawMessage: encoded,
                 stepGrants: [],
                 ...(args.now !== undefined ? { now: args.now } : {}),
@@ -143,7 +146,14 @@ export function createWorkflowRunDispatchStore(db) {
                 const [candidate] = await tx
                     .select({ id: workflowRunDispatch.id })
                     .from(workflowRunDispatch)
-                    .where(and(eq(workflowRunDispatch.status, "pending"), lte(workflowRunDispatch.nextAttemptAt, sql `now()`), or(isNull(workflowRunDispatch.deliveryLeaseExpiresAt), lte(workflowRunDispatch.deliveryLeaseExpiresAt, sql `now()`))))
+                    .where(and(eq(workflowRunDispatch.status, "pending"), lte(workflowRunDispatch.nextAttemptAt, sql `now()`), ...(args.excludedDispatchIds !== undefined &&
+                    args.excludedDispatchIds.length > 0
+                    ? [
+                        notInArray(workflowRunDispatch.id, [
+                            ...args.excludedDispatchIds,
+                        ]),
+                    ]
+                    : []), or(isNull(workflowRunDispatch.deliveryLeaseExpiresAt), lte(workflowRunDispatch.deliveryLeaseExpiresAt, sql `now()`))))
                     .orderBy(asc(workflowRunDispatch.nextAttemptAt), asc(workflowRunDispatch.createdAt))
                     .limit(1)
                     .for("update", { skipLocked: true });

package/migrations/0085_add_approval_run_idx.sql

@@ -0,0 +1 @@
+CREATE INDEX "approval_run_idx" ON "approval" USING btree ("run_id");

package/migrations/0086_cool_human_cannonball.sql

@@ -0,0 +1 @@
+ALTER TABLE "workflow_run" ADD COLUMN "credential_refs" jsonb;

package/migrations/0087_drop_sidecar_placement.sql

@@ -0,0 +1,3 @@
+ALTER TABLE "sidecar_allocation" DROP CONSTRAINT "sidecar_allocation_placement_check";--> statement-breakpoint
+ALTER TABLE "sidecar_allocation" DROP COLUMN "placement_sharing";--> statement-breakpoint
+ALTER TABLE "sidecar_allocation" DROP COLUMN "sidecar_reuse";

package/migrations/0088_thick_sprite.sql

@@ -0,0 +1,32 @@
+CREATE TABLE "workflow_probe" (
+	"id" text PRIMARY KEY NOT NULL,
+	"tenant_id" text NOT NULL,
+	"definition_asset_id" text NOT NULL,
+	"source" jsonb NOT NULL,
+	"entry" text NOT NULL,
+	"pin" text,
+	"status" text DEFAULT 'pending' NOT NULL,
+	"provisioner_id" text NOT NULL,
+	"provisioner_api_version" integer NOT NULL,
+	"provisioner_binding_fingerprint" text NOT NULL,
+	"sidecar_id" text,
+	"generation" integer DEFAULT 0 NOT NULL,
+	"external_ref" text,
+	"result" jsonb,
+	"failure_code" text,
+	"failure_message" text,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "workflow_probe_status_check" CHECK ("workflow_probe"."status" in ('pending', 'provisioning', 'probing', 'releasing', 'succeeded', 'failed')),
+	CONSTRAINT "workflow_probe_succeeded_result_check" CHECK ("workflow_probe"."status" <> 'succeeded' or "workflow_probe"."result" is not null),
+	CONSTRAINT "workflow_probe_generation_check" CHECK ("workflow_probe"."generation" >= 0)
+);
+--> statement-breakpoint
+DELETE FROM "sidecar" WHERE "credential_scope" = 'shared';--> statement-breakpoint
+ALTER TABLE "sidecar" DROP CONSTRAINT "sidecar_credential_scope_check";--> statement-breakpoint
+ALTER TABLE "workflow_probe" ADD CONSTRAINT "workflow_probe_tenant_id_tenant_id_fk" FOREIGN KEY ("tenant_id") REFERENCES "public"."tenant"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "workflow_probe" ADD CONSTRAINT "workflow_probe_definition_asset_id_asset_id_fk" FOREIGN KEY ("definition_asset_id") REFERENCES "public"."asset"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "workflow_probe" ADD CONSTRAINT "workflow_probe_sidecar_id_sidecar_id_fk" FOREIGN KEY ("sidecar_id") REFERENCES "public"."sidecar"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "workflow_probe_active_idx" ON "workflow_probe" USING btree ("created_at") WHERE "workflow_probe"."status" in ('pending', 'provisioning', 'probing', 'releasing');--> statement-breakpoint
+CREATE INDEX "workflow_probe_sidecar_idx" ON "workflow_probe" USING btree ("sidecar_id");--> statement-breakpoint
+ALTER TABLE "sidecar" DROP COLUMN "credential_scope";

package/migrations/0089_tense_selene.sql

@@ -0,0 +1,13 @@
+CREATE TABLE "principal_key" (
+	"id" text PRIMARY KEY NOT NULL,
+	"principal_id" text NOT NULL,
+	"public_key" text NOT NULL,
+	"private_key" text NOT NULL,
+	"status" text NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "principal_key_public_key_unique" UNIQUE("public_key")
+);
+--> statement-breakpoint
+ALTER TABLE "principal_key" ADD CONSTRAINT "principal_key_principal_id_principal_id_fk" FOREIGN KEY ("principal_id") REFERENCES "public"."principal"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "principal_key_one_active" ON "principal_key" USING btree ("principal_id") WHERE "principal_key"."status" = 'active';

package/migrations/0090_tenant_domain_lower_unique.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "tenant" DROP CONSTRAINT "tenant_domain_unique";--> statement-breakpoint
+CREATE UNIQUE INDEX "tenant_domain_lower_idx" ON "tenant" USING btree (lower("domain"));

package/migrations/0091_workflow_run_dispatch_sender_address.sql

@@ -0,0 +1,21 @@
+ALTER TABLE "workflow_run_dispatch" ADD COLUMN "sender_address" text;--> statement-breakpoint
+-- Fail in-flight mail dispatches that predate the authenticated-sender
+-- requirement. They carry no persisted hub-verified sender, and neither
+-- fabricating one nor re-reading the signed From is permitted, so they are
+-- failed in place rather than delivered unauthenticated. Only unsettled
+-- (pending/acknowledged) mail rows are ever re-dispatched and reconstruct a
+-- mail.inbound frame; terminal (settled/failed) mail rows never do, so they
+-- keep their NULL sender under the status-scoped check below. On a fresh
+-- database this affects zero rows.
+UPDATE "workflow_run_dispatch"
+SET "status" = 'failed',
+	"failure_code" = 'sender_address_migration',
+	"failure_message" = 'in-flight mail dispatch predates the authenticated-sender requirement and carries no hub-verified sender',
+	"next_attempt_at" = NULL,
+	"delivery_lease_id" = NULL,
+	"delivery_lease_expires_at" = NULL,
+	"updated_at" = now()
+WHERE "kind" = 'mail'
+	AND "status" IN ('pending', 'acknowledged')
+	AND "sender_address" IS NULL;--> statement-breakpoint
+ALTER TABLE "workflow_run_dispatch" ADD CONSTRAINT "workflow_run_dispatch_mail_sender_check" CHECK ("workflow_run_dispatch"."kind" <> 'mail' or "workflow_run_dispatch"."status" in ('settled', 'failed') or "workflow_run_dispatch"."sender_address" is not null);

package/migrations/0092_sidecar_destroy_failed.sql

@@ -0,0 +1,4 @@
+ALTER TABLE "sidecar_allocation" DROP CONSTRAINT "sidecar_allocation_status_check";--> statement-breakpoint
+DROP INDEX "sidecar_allocation_active_sidecar_idx";--> statement-breakpoint
+CREATE UNIQUE INDEX "sidecar_allocation_active_sidecar_idx" ON "sidecar_allocation" USING btree ("sidecar_id") WHERE "sidecar_allocation"."status" in ('provisioning', 'allocated', 'replacing', 'releasing', 'destroy_failed');--> statement-breakpoint
+ALTER TABLE "sidecar_allocation" ADD CONSTRAINT "sidecar_allocation_status_check" CHECK ("sidecar_allocation"."status" in ('pending', 'provisioning', 'allocated', 'replacing', 'releasing', 'destroy_failed', 'released', 'failed'));

package/migrations/0093_sidecar_initialization.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "sidecar_allocation" ADD COLUMN "initialization_lease_id" text;--> statement-breakpoint
+ALTER TABLE "sidecar_allocation" ADD CONSTRAINT "sidecar_allocation_initialization_check" CHECK ("sidecar_allocation"."initialization_lease_id" is null or ("sidecar_allocation"."status" = 'allocated' and "sidecar_allocation"."ensure_accepted_generation" is not null and "sidecar_allocation"."ensure_accepted_generation" = "sidecar_allocation"."generation"));