@keystrokehq/snowflake 0.0.16 → 0.0.18

package/dist/events/index.mjs

@@ -1,291 +0,0 @@
-import { o as snowflakeObjectRowSchema, t as columnMetaSchema } from "../common-DfpCwJx5.mjs";
-import { z } from "zod";
-
-//#region src/events/index.ts
-/**
-* Trigger event contracts — Zod schemas for the payload shapes that
-* `src/triggers.ts` emits. Every polling trigger returns exactly one of
-* these events per poll; webhook triggers return the mapped payload
-* shapes defined alongside them.
-*
-* Design notes:
-*  - Events are flat, serialisable objects — no class instances, no
-*    dates (ISO-8601 strings instead), no BigInts.
-*  - Row lists are returned verbatim as `HydratedRow` / column metadata
-*    pairs so downstream workflows can pick columns dynamically without
-*    the schema needing to know the shape ahead of time.
-*  - `.catchall(unknown)` on object-history events — Snowflake adds
-*    columns over time (e.g., `ACTIVITY_NAME` → `FIRST_ERROR_CODE`) and
-*    we never want a new column to hard-fail an in-flight workflow.
-*/
-/**
-* Row batch shape used by the SQL-emitting polling triggers.
-*
-* `rows` is the hydrated row list (column-name keyed record) straight
-* from `executeSql`. `columns` preserves the `resultSetMetaData.rowType`
-* entries so downstream workflows can introspect nullability / type
-* without a round-trip. `fetchedAt` is the ISO-8601 timestamp we
-* captured the result at.
-*/
-const snowflakeRowBatchSchema = z.object({
-	rows: z.array(snowflakeObjectRowSchema),
-	columns: z.array(columnMetaSchema),
-	rowCount: z.number().int().nonnegative(),
-	fetchedAt: z.string()
-}).catchall(z.unknown());
-const streamHasDataEventSchema = z.object({
-	streamName: z.string(),
-	hasData: z.boolean(),
-	checkedAt: z.string()
-}).catchall(z.unknown());
-const streamAppendOnlyEventSchema = snowflakeRowBatchSchema.extend({ streamName: z.string() });
-const scheduledSqlEventSchema = snowflakeRowBatchSchema.extend({ statementDigest: z.string() });
-const scheduledDeltaEventSchema = snowflakeRowBatchSchema.extend({
-	table: z.string(),
-	cursorColumn: z.string(),
-	highWaterValue: z.string().nullable()
-});
-const taskRunEventSchema = z.object({
-	name: z.string(),
-	databaseName: z.string().optional(),
-	schemaName: z.string().optional(),
-	state: z.string(),
-	queryId: z.string().optional(),
-	scheduledTime: z.string().optional(),
-	completedTime: z.string().optional(),
-	errorCode: z.string().nullable().optional(),
-	errorMessage: z.string().nullable().optional(),
-	attemptNumber: z.number().int().optional(),
-	runId: z.string().optional(),
-	row: snowflakeObjectRowSchema
-}).catchall(z.unknown());
-const statementCompletedEventSchema = z.object({
-	queryId: z.string(),
-	executionStatus: z.string(),
-	queryText: z.string().optional(),
-	errorCode: z.string().nullable().optional(),
-	errorMessage: z.string().nullable().optional(),
-	startTime: z.string().optional(),
-	endTime: z.string().optional(),
-	warehouseName: z.string().optional(),
-	databaseName: z.string().optional(),
-	schemaName: z.string().optional(),
-	userName: z.string().optional(),
-	roleName: z.string().optional(),
-	totalElapsedTimeMs: z.number().nullable().optional(),
-	row: snowflakeObjectRowSchema
-}).catchall(z.unknown());
-const pipeLoadEventSchema = z.object({
-	pipeName: z.string(),
-	filePath: z.string(),
-	status: z.string(),
-	loadTime: z.string().optional(),
-	rowCount: z.number().int().nullable().optional(),
-	rowParsed: z.number().int().nullable().optional(),
-	errorLimit: z.number().int().nullable().optional(),
-	errorsSeen: z.number().int().nullable().optional(),
-	firstErrorMessage: z.string().nullable().optional(),
-	firstErrorLineNumber: z.number().int().nullable().optional(),
-	firstErrorColumnName: z.string().nullable().optional(),
-	fileSize: z.number().int().nullable().optional(),
-	stageLocation: z.string().nullable().optional(),
-	row: snowflakeObjectRowSchema
-}).catchall(z.unknown());
-/**
-* Kinds of Snowflake objects the SHOW-diff polling triggers can surface.
-* Kept open-ended (`z.string()`) via the enum's `catch` so new kinds can
-* be added without bumping the schema — callers rarely want to pattern
-* match on the kind, they just want the row.
-*/
-const snowflakeObjectKindSchema = z.enum([
-	"USER",
-	"ROLE",
-	"DATABASE",
-	"SCHEMA",
-	"TABLE",
-	"VIEW",
-	"STAGE",
-	"PIPE",
-	"TASK",
-	"STREAM",
-	"SHARE",
-	"WAREHOUSE",
-	"FUNCTION",
-	"PROCEDURE",
-	"FILE_FORMAT"
-]);
-const snowflakeObjectLifecycleEventSchema = z.object({
-	kind: z.string(),
-	name: z.string(),
-	change: z.enum(["created", "dropped"]),
-	identity: z.string(),
-	owner: z.string().optional(),
-	createdOn: z.string().optional(),
-	detectedAt: z.string(),
-	row: snowflakeObjectRowSchema
-}).catchall(z.unknown());
-const shareChangedEventSchema = z.object({
-	name: z.string(),
-	kind: z.string().optional(),
-	change: z.enum([
-		"created",
-		"dropped",
-		"modified"
-	]),
-	identity: z.string(),
-	detectedAt: z.string(),
-	previousRow: snowflakeObjectRowSchema.optional(),
-	currentRow: snowflakeObjectRowSchema.optional()
-}).catchall(z.unknown());
-const grantChangedEventSchema = z.object({
-	privilege: z.string(),
-	grantedOn: z.string(),
-	objectName: z.string(),
-	granteeName: z.string(),
-	granteeType: z.string().optional(),
-	change: z.enum(["granted", "revoked"]),
-	identity: z.string(),
-	detectedAt: z.string(),
-	row: snowflakeObjectRowSchema
-}).catchall(z.unknown());
-const warehouseCreditsEventSchema = z.object({
-	warehouseName: z.string(),
-	startTime: z.string().optional(),
-	endTime: z.string().optional(),
-	creditsUsed: z.number().nullable().optional(),
-	creditsUsedCompute: z.number().nullable().optional(),
-	creditsUsedCloudServices: z.number().nullable().optional(),
-	row: snowflakeObjectRowSchema
-}).catchall(z.unknown());
-const warehouseQueueEventSchema = z.object({
-	warehouseName: z.string(),
-	startTime: z.string().optional(),
-	endTime: z.string().optional(),
-	avgRunning: z.number().nullable().optional(),
-	avgQueuedLoad: z.number().nullable().optional(),
-	avgQueuedProvisioning: z.number().nullable().optional(),
-	avgBlocked: z.number().nullable().optional(),
-	row: snowflakeObjectRowSchema
-}).catchall(z.unknown());
-const statusPageIncidentEventSchema = z.object({
-	id: z.string(),
-	name: z.string(),
-	status: z.string(),
-	impact: z.string().optional(),
-	createdAt: z.string().optional(),
-	updatedAt: z.string().optional(),
-	resolvedAt: z.string().nullable().optional(),
-	shortlink: z.string().optional(),
-	detectedAt: z.string(),
-	raw: z.record(z.string(), z.unknown())
-}).catchall(z.unknown());
-const statusPageComponentChangeEventSchema = z.object({
-	id: z.string(),
-	name: z.string(),
-	previousStatus: z.string().nullable(),
-	currentStatus: z.string(),
-	description: z.string().optional(),
-	changedAt: z.string(),
-	detectedAt: z.string(),
-	raw: z.record(z.string(), z.unknown())
-}).catchall(z.unknown());
-const snowflakeDiffSnapshotEntrySchema = z.object({
-	identity: z.string(),
-	signature: z.string().optional()
-}).catchall(z.unknown());
-/**
-* Canonical object-storage event shape emitted by the three auto-ingest
-* webhook triggers. Each cloud's native payload is normalised to this
-* shape; the raw envelope is preserved under `raw` for callers that
-* need provider-specific fields (etag, metageneration, blob tier, ...).
-*/
-const snowpipeObjectEventSchema = z.object({
-	provider: z.enum([
-		"aws-s3",
-		"gcp-gcs",
-		"azure-blob"
-	]),
-	eventType: z.string(),
-	eventTime: z.string(),
-	bucket: z.string(),
-	key: z.string(),
-	size: z.number().int().nonnegative().nullable().optional(),
-	etag: z.string().nullable().optional(),
-	region: z.string().nullable().optional(),
-	sourceIp: z.string().nullable().optional(),
-	messageId: z.string().nullable().optional(),
-	receivedAt: z.string(),
-	raw: z.record(z.string(), z.unknown())
-}).catchall(z.unknown());
-/**
-* Batch envelope used by auto-ingest webhook triggers — a single SNS
-* notification, Pub/Sub push, or Event Grid batch can carry multiple
-* object events, so the trigger emits `{ events, receivedAt, messageId }`.
-*/
-const snowpipeObjectBatchSchema = z.object({
-	events: z.array(snowpipeObjectEventSchema),
-	provider: z.enum([
-		"aws-s3",
-		"gcp-gcs",
-		"azure-blob"
-	]),
-	receivedAt: z.string(),
-	messageId: z.string().nullable().optional(),
-	topic: z.string().nullable().optional(),
-	raw: z.record(z.string(), z.unknown())
-}).catchall(z.unknown());
-/**
-* Raw SNS "Notification" envelope. The outer webhook payload we accept
-* from `autoIngestS3Sns` matches this shape — fields per the AWS SNS
-* HTTP(S) delivery spec.
-*/
-const snsNotificationSchema = z.object({
-	Type: z.enum([
-		"Notification",
-		"SubscriptionConfirmation",
-		"UnsubscribeConfirmation"
-	]),
-	MessageId: z.string(),
-	TopicArn: z.string(),
-	Message: z.string(),
-	Timestamp: z.string(),
-	SignatureVersion: z.string(),
-	Signature: z.string(),
-	SigningCertURL: z.string(),
-	Subject: z.string().optional(),
-	Token: z.string().optional(),
-	SubscribeURL: z.string().optional(),
-	UnsubscribeURL: z.string().optional()
-}).catchall(z.unknown());
-/**
-* GCP Pub/Sub push envelope. The push subscription wraps the Pub/Sub
-* message in `{message, subscription}`; `message.data` is base64 and
-* decodes to the GCS object-change notification.
-*/
-const gcsPubSubPushSchema = z.object({
-	message: z.object({
-		messageId: z.string().optional(),
-		publishTime: z.string().optional(),
-		data: z.string().optional(),
-		attributes: z.record(z.string(), z.string()).optional()
-	}).catchall(z.unknown()),
-	subscription: z.string().optional()
-}).catchall(z.unknown());
-/**
-* Azure Event Grid event (Event Grid schema v1.0). The wire format is
-* always a JSON array; we schema-validate a single envelope and the
-* trigger unwraps the array at the boundary.
-*/
-const azureEventGridEventSchema = z.object({
-	id: z.string(),
-	eventType: z.string(),
-	subject: z.string(),
-	eventTime: z.string(),
-	dataVersion: z.string().optional(),
-	metadataVersion: z.string().optional(),
-	topic: z.string().optional(),
-	data: z.record(z.string(), z.unknown())
-}).catchall(z.unknown());
-
-//#endregion
-export { azureEventGridEventSchema, gcsPubSubPushSchema, grantChangedEventSchema, pipeLoadEventSchema, scheduledDeltaEventSchema, scheduledSqlEventSchema, shareChangedEventSchema, snowflakeDiffSnapshotEntrySchema, snowflakeObjectKindSchema, snowflakeObjectLifecycleEventSchema, snowflakeRowBatchSchema, snowpipeObjectBatchSchema, snowpipeObjectEventSchema, snsNotificationSchema, statementCompletedEventSchema, statusPageComponentChangeEventSchema, statusPageIncidentEventSchema, streamAppendOnlyEventSchema, streamHasDataEventSchema, taskRunEventSchema, warehouseCreditsEventSchema, warehouseQueueEventSchema };

package/dist/file-formats/index.d.mts

@@ -1,39 +0,0 @@
-import { SnowflakeClient } from "../client/index.mjs";
-import { d as HydratedRow } from "../statements-DJL0qVNA.mjs";
-import { t as OptionMap } from "../sql-options-2k5xQ-oS.mjs";
-import { CatalogResult, ShowScopedOptions, showFileFormats } from "../catalog/index.mjs";
-
-//#region src/file-formats/index.d.ts
-interface FileFormatRef {
-  readonly database?: string;
-  readonly schema?: string;
-  readonly name: string;
-}
-interface FileFormatContext {
-  readonly warehouse?: string;
-  readonly role?: string;
-}
-interface CreateFileFormatOptions extends FileFormatRef, FileFormatContext {
-  readonly orReplace?: boolean;
-  readonly ifNotExists?: boolean;
-  readonly temporary?: boolean;
-  /** `TYPE = 'CSV'`, `FIELD_DELIMITER = '|'`, `SKIP_HEADER = 1`, etc. */
-  readonly options: OptionMap;
-  readonly comment?: string;
-}
-declare function createFileFormat(client: SnowflakeClient, options: CreateFileFormatOptions): Promise<void>;
-interface AlterFileFormatOptions extends FileFormatRef, FileFormatContext {
-  readonly rename?: FileFormatRef;
-  readonly set?: OptionMap;
-  readonly unset?: readonly string[];
-  readonly comment?: string;
-}
-declare function alterFileFormat(client: SnowflakeClient, options: AlterFileFormatOptions): Promise<void>;
-interface DropFileFormatOptions extends FileFormatRef, FileFormatContext {
-  readonly ifExists?: boolean;
-}
-declare function dropFileFormat(client: SnowflakeClient, options: DropFileFormatOptions): Promise<void>;
-interface DescribeFileFormatOptions extends FileFormatRef, FileFormatContext {}
-declare function describeFileFormat(client: SnowflakeClient, options: DescribeFileFormatOptions): Promise<readonly HydratedRow[]>;
-//#endregion
-export { AlterFileFormatOptions, type CatalogResult, CreateFileFormatOptions, DescribeFileFormatOptions, DropFileFormatOptions, FileFormatContext, FileFormatRef, type ShowScopedOptions, alterFileFormat, createFileFormat, describeFileFormat, dropFileFormat, showFileFormats };

package/dist/file-formats/index.mjs

@@ -1,48 +0,0 @@
-import { executeSql } from "../sql/index.mjs";
-import { a as quoteLiteral, t as buildFqn } from "../sql-safety-BZpAPsq6.mjs";
-import { t as formatOptions } from "../sql-options-D6GEa21F.mjs";
-import { showFileFormats } from "../catalog/index.mjs";
-
-//#region src/file-formats/index.ts
-function fileFormatFqn(ref) {
-	return buildFqn(ref.database, ref.schema, ref.name);
-}
-async function createFileFormat(client, options) {
-	const prefix = `CREATE${options.orReplace ? " OR REPLACE" : ""}${options.temporary ? " TEMPORARY" : ""} FILE FORMAT${options.ifNotExists ? " IF NOT EXISTS" : ""}`;
-	const body = formatOptions(options.options);
-	await executeSql(client, {
-		statement: `${prefix} ${fileFormatFqn(options)} ${body}` + (options.comment ? ` COMMENT = ${quoteLiteral(options.comment)}` : ""),
-		warehouse: options.warehouse,
-		role: options.role
-	});
-}
-async function alterFileFormat(client, options) {
-	let tail;
-	if (options.rename) tail = `RENAME TO ${fileFormatFqn(options.rename)}`;
-	else if (options.set && Object.keys(options.set).length > 0) tail = `SET ${formatOptions(options.set)}`;
-	else if (options.unset && options.unset.length > 0) tail = `UNSET ${options.unset.map((k) => k.toUpperCase()).join(", ")}`;
-	else if (options.comment !== void 0) tail = `SET COMMENT = ${quoteLiteral(options.comment)}`;
-	else throw new Error("alterFileFormat requires one of: rename / set / unset / comment");
-	await executeSql(client, {
-		statement: `ALTER FILE FORMAT ${fileFormatFqn(options)} ${tail}`,
-		warehouse: options.warehouse,
-		role: options.role
-	});
-}
-async function dropFileFormat(client, options) {
-	await executeSql(client, {
-		statement: `DROP FILE FORMAT${options.ifExists ? " IF EXISTS" : ""} ${fileFormatFqn(options)}`,
-		warehouse: options.warehouse,
-		role: options.role
-	});
-}
-async function describeFileFormat(client, options) {
-	return (await executeSql(client, {
-		statement: `DESCRIBE FILE FORMAT ${fileFormatFqn(options)}`,
-		warehouse: options.warehouse,
-		role: options.role
-	})).rows;
-}
-
-//#endregion
-export { alterFileFormat, createFileFormat, describeFileFormat, dropFileFormat, showFileFormats };

package/dist/functions/index.d.mts

@@ -1,53 +0,0 @@
-import { SnowflakeClient } from "../client/index.mjs";
-import { d as HydratedRow } from "../statements-DJL0qVNA.mjs";
-import { t as OptionMap } from "../sql-options-2k5xQ-oS.mjs";
-import { CatalogResult, ShowScopedOptions, showFunctions } from "../catalog/index.mjs";
-
-//#region src/functions/index.d.ts
-interface FunctionRef {
-  readonly database?: string;
-  readonly schema?: string;
-  readonly name: string;
-}
-interface FunctionContext {
-  readonly warehouse?: string;
-  readonly role?: string;
-}
-interface FunctionArgument {
-  readonly name: string;
-  /** Snowflake type keyword (NUMBER, VARCHAR, DATE, VARIANT, ...). */
-  readonly type: string;
-  readonly defaultExpression?: string;
-}
-type FunctionLanguage = 'SQL' | 'JAVASCRIPT' | 'PYTHON' | 'JAVA' | 'SCALA';
-interface CreateFunctionOptions extends FunctionRef, FunctionContext {
-  readonly orReplace?: boolean;
-  readonly ifNotExists?: boolean;
-  readonly secure?: boolean;
-  readonly temporary?: boolean;
-  readonly arguments?: readonly FunctionArgument[];
-  /** Return type keyword, e.g. `NUMBER`, `VARCHAR`, `TABLE (col1 NUMBER, col2 VARCHAR)`. */
-  readonly returns: string;
-  readonly language?: FunctionLanguage;
-  /** `STRICT`, `IMMUTABLE`, `VOLATILE`, `MEMOIZABLE`, `RETURNS NULL ON NULL INPUT`. Raw keywords joined with spaces. */
-  readonly modifiers?: readonly string[];
-  /** Language-specific options: `RUNTIME_VERSION = '3.10'`, `PACKAGES = ('snowflake-snowpark-python')`, `HANDLER = 'main'`, `IMPORTS = (@STG/pkg.zip)`. */
-  readonly options?: OptionMap;
-  readonly comment?: string;
-  /** Function body (SQL expression, JS, Python, Java). `$$...$$` wrapping is applied automatically for non-SQL languages. */
-  readonly as: string;
-  /** Force `$$...$$` (dollar-quoted) body delimiter even for SQL. */
-  readonly dollarQuotedBody?: boolean;
-}
-declare function createFunction(client: SnowflakeClient, options: CreateFunctionOptions): Promise<void>;
-interface DropFunctionOptions extends FunctionRef, FunctionContext {
-  readonly ifExists?: boolean;
-  readonly arguments?: readonly FunctionArgument[];
-}
-declare function dropFunction(client: SnowflakeClient, options: DropFunctionOptions): Promise<void>;
-interface DescribeFunctionOptions extends FunctionRef, FunctionContext {
-  readonly arguments?: readonly FunctionArgument[];
-}
-declare function describeFunction(client: SnowflakeClient, options: DescribeFunctionOptions): Promise<readonly HydratedRow[]>;
-//#endregion
-export { type CatalogResult, CreateFunctionOptions, DescribeFunctionOptions, DropFunctionOptions, FunctionArgument, FunctionContext, FunctionLanguage, FunctionRef, type ShowScopedOptions, createFunction, describeFunction, dropFunction, showFunctions };

package/dist/functions/index.mjs

@@ -1,56 +0,0 @@
-import { executeSql } from "../sql/index.mjs";
-import { a as quoteLiteral, t as buildFqn } from "../sql-safety-BZpAPsq6.mjs";
-import { t as formatOptions } from "../sql-options-D6GEa21F.mjs";
-import { showFunctions } from "../catalog/index.mjs";
-
-//#region src/functions/index.ts
-function renderArguments(args) {
-	if (!args || args.length === 0) return "()";
-	return `(${args.map((a) => {
-		const suffix = a.defaultExpression ? ` DEFAULT ${a.defaultExpression}` : "";
-		return `${a.name} ${a.type.toUpperCase()}${suffix}`;
-	}).join(", ")})`;
-}
-function renderArgumentTypes(args) {
-	if (!args || args.length === 0) return "()";
-	return `(${args.map((a) => a.type.toUpperCase()).join(", ")})`;
-}
-function renderBody(body, forceDollarQuoted, language) {
-	if (forceDollarQuoted ?? (language !== void 0 && language !== "SQL")) {
-		if (body.includes("$$")) throw new Error("Function body contains \"$$\"; cannot safely dollar-quote. Use quoteLiteral-style body or a custom delimiter.");
-		return `$$${body}$$`;
-	}
-	return body;
-}
-async function createFunction(client, options) {
-	const prefix = `CREATE${options.orReplace ? " OR REPLACE" : ""}${options.secure ? " SECURE" : ""}${options.temporary ? " TEMPORARY" : ""} FUNCTION${options.ifNotExists ? " IF NOT EXISTS" : ""}`;
-	const args = renderArguments(options.arguments);
-	const language = options.language ? ` LANGUAGE ${options.language}` : "";
-	const modifiers = options.modifiers && options.modifiers.length > 0 ? ` ${options.modifiers.map((m) => m.toUpperCase()).join(" ")}` : "";
-	const body = options.options && Object.keys(options.options).length > 0 ? ` ${formatOptions(options.options)}` : "";
-	const comment = options.comment ? ` COMMENT = ${quoteLiteral(options.comment)}` : "";
-	const rendered = renderBody(options.as, options.dollarQuotedBody, options.language);
-	await executeSql(client, {
-		statement: `${prefix} ${buildFqn(options.database, options.schema, options.name)}${args} RETURNS ${options.returns}${language}${modifiers}${body}${comment} AS ${rendered}`,
-		warehouse: options.warehouse,
-		role: options.role
-	});
-}
-async function dropFunction(client, options) {
-	const fqn = buildFqn(options.database, options.schema, options.name);
-	await executeSql(client, {
-		statement: `DROP FUNCTION${options.ifExists ? " IF EXISTS" : ""} ${fqn}${renderArgumentTypes(options.arguments)}`,
-		warehouse: options.warehouse,
-		role: options.role
-	});
-}
-async function describeFunction(client, options) {
-	return (await executeSql(client, {
-		statement: `DESCRIBE FUNCTION ${buildFqn(options.database, options.schema, options.name)}${renderArgumentTypes(options.arguments)}`,
-		warehouse: options.warehouse,
-		role: options.role
-	})).rows;
-}
-
-//#endregion
-export { createFunction, describeFunction, dropFunction, showFunctions };

package/dist/grants/index.d.mts

@@ -1,93 +0,0 @@
-import { SnowflakeClient } from "../client/index.mjs";
-import { CatalogResult, ShowOptions, showGrants } from "../catalog/index.mjs";
-
-//#region src/grants/index.d.ts
-interface GrantContext {
-  readonly warehouse?: string;
-  readonly role?: string;
-}
-/**
- * What a privilege is being granted on. `kind: 'object'` covers the
- * vast majority of cases (TABLE / VIEW / STAGE / FILE FORMAT / FUNCTION /
- * PROCEDURE / STREAM / TASK / PIPE / ...). Scope-level variants
- * (`database` / `schema` / `warehouse` / `role` / `integration` / `account`)
- * cover grants that apply to whole containers. `allIn` / `futureIn`
- * produce `GRANT ... ON ALL|FUTURE <PLURAL> IN ...` statements.
- */
-type GrantOn = {
-  readonly kind: 'object'; /** Snowflake object keyword, e.g., `TABLE`, `VIEW`, `STAGE`. */
-  readonly objectType: string;
-  readonly database?: string;
-  readonly schema?: string;
-  readonly name: string;
-} | {
-  readonly kind: 'database' | 'warehouse' | 'role' | 'integration';
-  readonly name: string;
-} | {
-  readonly kind: 'schema';
-  readonly database?: string;
-  readonly name: string;
-} | {
-  readonly kind: 'account';
-} | {
-  readonly kind: 'allIn' | 'futureIn'; /** Plural keyword, e.g., `TABLES`, `VIEWS`, `SCHEMAS`. */
-  readonly pluralType: string;
-  readonly inDatabase?: string;
-  readonly inSchema?: {
-    readonly database?: string;
-    readonly name: string;
-  };
-};
-type GrantTarget = {
-  readonly role: string;
-} | {
-  readonly user: string;
-} | {
-  readonly share: string;
-};
-interface GrantPrivilegesOptions extends GrantContext {
-  readonly privileges: 'ALL' | 'ALL PRIVILEGES' | readonly string[];
-  readonly on: GrantOn;
-  readonly to: GrantTarget;
-  readonly withGrantOption?: boolean;
-}
-declare function grantPrivileges(client: SnowflakeClient, options: GrantPrivilegesOptions): Promise<void>;
-interface RevokePrivilegesOptions extends GrantContext {
-  readonly privileges: 'ALL' | 'ALL PRIVILEGES' | readonly string[];
-  readonly on: GrantOn;
-  readonly from: GrantTarget;
-  /** Only revoke the grant option, not the underlying privilege. */
-  readonly grantOptionFor?: boolean;
-  readonly cascade?: boolean;
-  readonly restrict?: boolean;
-}
-declare function revokePrivileges(client: SnowflakeClient, options: RevokePrivilegesOptions): Promise<void>;
-interface ShowGrantsToRoleOptions extends ShowOptions {
-  readonly role: string;
-}
-declare function showGrantsToRole(client: SnowflakeClient, options: ShowGrantsToRoleOptions): Promise<CatalogResult>;
-interface ShowGrantsToUserOptions extends ShowOptions {
-  readonly user: string;
-}
-declare function showGrantsToUser(client: SnowflakeClient, options: ShowGrantsToUserOptions): Promise<CatalogResult>;
-interface ShowGrantsOnObjectOptions extends ShowOptions {
-  readonly objectType: string;
-  readonly database?: string;
-  readonly schema?: string;
-  readonly name: string;
-}
-declare function showGrantsOnObject(client: SnowflakeClient, options: ShowGrantsOnObjectOptions): Promise<CatalogResult>;
-interface ShowGrantsOfRoleOptions extends ShowOptions {
-  readonly role: string;
-}
-declare function showGrantsOfRole(client: SnowflakeClient, options: ShowGrantsOfRoleOptions): Promise<CatalogResult>;
-interface ShowFutureGrantsOptions extends ShowOptions {
-  readonly inDatabase?: string;
-  readonly inSchema?: {
-    readonly database?: string;
-    readonly name: string;
-  };
-}
-declare function showFutureGrants(client: SnowflakeClient, options: ShowFutureGrantsOptions): Promise<CatalogResult>;
-//#endregion
-export { type CatalogResult, GrantContext, GrantOn, GrantPrivilegesOptions, GrantTarget, RevokePrivilegesOptions, ShowFutureGrantsOptions, ShowGrantsOfRoleOptions, ShowGrantsOnObjectOptions, ShowGrantsToRoleOptions, ShowGrantsToUserOptions, grantPrivileges, revokePrivileges, showFutureGrants, showGrants, showGrantsOfRole, showGrantsOnObject, showGrantsToRole, showGrantsToUser };

package/dist/grants/index.mjs

@@ -1,102 +0,0 @@
-import { executeSql } from "../sql/index.mjs";
-import { i as quoteIdentifier, t as buildFqn } from "../sql-safety-BZpAPsq6.mjs";
-import { showGrants } from "../catalog/index.mjs";
-
-//#region src/grants/index.ts
-/**
-* Grants / privileges: GRANT, REVOKE, and five SHOW GRANTS convenience
-* wrappers plus SHOW FUTURE GRANTS.
-*
-* Covers PLAN §6.15 (7 actions).
-*/
-function renderScope(on) {
-	switch (on.kind) {
-		case "object": return `${on.objectType.toUpperCase()} ${buildFqn(on.database, on.schema, on.name)}`;
-		case "schema": return `SCHEMA ${buildFqn(on.database, on.name)}`;
-		case "database": return `DATABASE ${quoteIdentifier(on.name)}`;
-		case "warehouse": return `WAREHOUSE ${quoteIdentifier(on.name)}`;
-		case "role": return `ROLE ${quoteIdentifier(on.name)}`;
-		case "integration": return `INTEGRATION ${quoteIdentifier(on.name)}`;
-		case "account": return "ACCOUNT";
-		case "allIn":
-		case "futureIn": {
-			const modifier = on.kind === "allIn" ? "ALL" : "FUTURE";
-			const plural = on.pluralType.toUpperCase();
-			if (on.inDatabase) return `${modifier} ${plural} IN DATABASE ${quoteIdentifier(on.inDatabase)}`;
-			if (on.inSchema) return `${modifier} ${plural} IN SCHEMA ${buildFqn(on.inSchema.database, on.inSchema.name)}`;
-			throw new Error(`${on.kind} requires inDatabase or inSchema`);
-		}
-	}
-}
-function renderTarget(target) {
-	if ("role" in target) return `ROLE ${quoteIdentifier(target.role)}`;
-	if ("user" in target) return `USER ${quoteIdentifier(target.user)}`;
-	return `SHARE ${quoteIdentifier(target.share)}`;
-}
-function renderPrivileges(privileges) {
-	if (privileges === "ALL" || privileges === "ALL PRIVILEGES") return "ALL PRIVILEGES";
-	if (privileges.length === 0) throw new Error("privileges must be non-empty (or \"ALL\" / \"ALL PRIVILEGES\")");
-	return privileges.map((p) => p.toUpperCase()).join(", ");
-}
-async function grantPrivileges(client, options) {
-	await executeSql(client, {
-		statement: `GRANT ${renderPrivileges(options.privileges)} ON ${renderScope(options.on)} TO ${renderTarget(options.to)}${options.withGrantOption ? " WITH GRANT OPTION" : ""}`,
-		warehouse: options.warehouse,
-		role: options.role
-	});
-}
-async function revokePrivileges(client, options) {
-	if (options.cascade && options.restrict) throw new Error("revokePrivileges: cascade and restrict are mutually exclusive");
-	await executeSql(client, {
-		statement: `${options.grantOptionFor ? "REVOKE GRANT OPTION FOR" : "REVOKE"} ${renderPrivileges(options.privileges)} ON ${renderScope(options.on)} FROM ${renderTarget(options.from)}${options.cascade ? " CASCADE" : options.restrict ? " RESTRICT" : ""}`,
-		warehouse: options.warehouse,
-		role: options.role
-	});
-}
-async function showGrantsToRole(client, options) {
-	return showGrants(client, {
-		...options,
-		toRole: options.role
-	});
-}
-async function showGrantsToUser(client, options) {
-	return showGrants(client, {
-		...options,
-		toUser: options.user
-	});
-}
-async function showGrantsOnObject(client, options) {
-	return showGrants(client, {
-		...options,
-		on: {
-			objectType: options.objectType,
-			database: options.database,
-			schema: options.schema,
-			name: options.name
-		}
-	});
-}
-async function showGrantsOfRole(client, options) {
-	return showGrants(client, {
-		...options,
-		ofRole: options.role
-	});
-}
-async function showFutureGrants(client, options) {
-	let scope;
-	if (options.inDatabase) scope = `DATABASE ${quoteIdentifier(options.inDatabase)}`;
-	else if (options.inSchema) scope = `SCHEMA ${buildFqn(options.inSchema.database, options.inSchema.name)}`;
-	else throw new Error("showFutureGrants requires inDatabase or inSchema");
-	const result = await executeSql(client, {
-		statement: `SHOW FUTURE GRANTS IN ${scope}`,
-		warehouse: options.warehouse,
-		role: options.role
-	});
-	return {
-		rows: result.rows,
-		columns: result.columns
-	};
-}
-
-//#endregion
-export { grantPrivileges, revokePrivileges, showFutureGrants, showGrants, showGrantsOfRole, showGrantsOnObject, showGrantsToRole, showGrantsToUser };