@krantho/persistence-postgres 0.0.0-stage → 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Descoped
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/auth-adapter.d.ts

@@ -0,0 +1,23 @@
+import type { CreateUserData, IAuthAdapter, RefreshTokenRecord, Role, UpdateUserData, UserPermission, UserRecord } from '@krantho/persistence';
+import type { Sql } from 'postgres';
+/** Postgres implementation of the auth adapter */
+export declare class PostgresAuthAdapter implements IAuthAdapter {
+    private readonly sql;
+    constructor(sql: Sql);
+    createUser(data: CreateUserData): Promise<UserRecord>;
+    getUser(id: string): Promise<UserRecord | null>;
+    getUserByEmail(email: string): Promise<UserRecord | null>;
+    getUserByOidc(issuer: string, subject: string): Promise<UserRecord | null>;
+    listUsers(): Promise<UserRecord[]>;
+    updateUser(id: string, data: UpdateUserData): Promise<UserRecord | null>;
+    deleteUser(id: string): Promise<boolean>;
+    createRefreshToken(userId: string, tokenHash: string, expiresAt: string): Promise<string>;
+    getRefreshTokenByHash(tokenHash: string): Promise<RefreshTokenRecord | null>;
+    deleteRefreshToken(id: string): Promise<void>;
+    deleteUserRefreshTokens(userId: string): Promise<void>;
+    deleteExpiredRefreshTokens(): Promise<number>;
+    getUserPermissions(userId: string): Promise<UserPermission[]>;
+    setUserPermission(userId: string, collection: string, role: Role): Promise<void>;
+    deleteUserPermission(userId: string, collection: string): Promise<boolean>;
+}
+//# sourceMappingURL=auth-adapter.d.ts.map

package/dist/auth-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-adapter.d.ts","sourceRoot":"","sources":["../src/auth-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,IAAI,EACJ,cAAc,EACd,cAAc,EACd,UAAU,EACX,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AAEnC,kDAAkD;AAClD,qBAAa,mBAAoB,YAAW,YAAY;IACtD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAK;gBAEb,GAAG,EAAE,GAAG;IAMd,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC;IAarD,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAK/C,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAKzD,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAM1E,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAKlC,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAmDxE,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAOxC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAUzF,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAiB5E,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7C,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAItD,0BAA0B,IAAI,OAAO,CAAC,MAAM,CAAC;IAO7C,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAW7D,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAOhF,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAKjF"}

package/dist/auth-adapter.js

@@ -0,0 +1,159 @@
+/** Postgres implementation of the auth adapter */
+export class PostgresAuthAdapter {
+    sql;
+    constructor(sql) {
+        this.sql = sql;
+    }
+    // --- Users ---
+    async createUser(data) {
+        // postgres.js handles JS arrays natively in tagged templates — no manual
+        // string-join needed. The driver serialises string[] to a Postgres text[].
+        const rows = await this.sql `
+      INSERT INTO users (email, name, roles, oidc_subject, oidc_issuer)
+      VALUES (${data.email}, ${data.name}, ${data.roles}::text[], ${data.oidcSubject ?? null}, ${data.oidcIssuer ?? null})
+      RETURNING *`;
+        const row = rows[0];
+        if (!row)
+            throw new Error('INSERT RETURNING produced no row');
+        return rowToUser(row);
+    }
+    async getUser(id) {
+        const rows = await this.sql `SELECT * FROM users WHERE id = ${id}::uuid`;
+        return rows[0] ? rowToUser(rows[0]) : null;
+    }
+    async getUserByEmail(email) {
+        const rows = await this.sql `SELECT * FROM users WHERE email = ${email}`;
+        return rows[0] ? rowToUser(rows[0]) : null;
+    }
+    async getUserByOidc(issuer, subject) {
+        const rows = await this.sql `
+      SELECT * FROM users WHERE oidc_issuer = ${issuer} AND oidc_subject = ${subject}`;
+        return rows[0] ? rowToUser(rows[0]) : null;
+    }
+    async listUsers() {
+        const rows = await this.sql `SELECT * FROM users ORDER BY created_at DESC`;
+        return rows.map(rowToUser);
+    }
+    async updateUser(id, data) {
+        const sets = ['updated_at = NOW()'];
+        const params = [];
+        let idx = 1;
+        if (data.email !== undefined) {
+            sets.push(`email = $${idx}`);
+            params.push(data.email);
+            idx++;
+        }
+        if (data.name !== undefined) {
+            sets.push(`name = $${idx}`);
+            params.push(data.name);
+            idx++;
+        }
+        if (data.roles !== undefined) {
+            sets.push(`roles = $${idx}::text[]`);
+            // sql.unsafe receives raw params — use Postgres array literal syntax
+            // because there's no tagged-template array serialisation in unsafe mode.
+            // Roles are code-controlled enum values, not user input.
+            params.push(`{${data.roles.join(',')}}`);
+            idx++;
+        }
+        if (data.isActive !== undefined) {
+            sets.push(`is_active = $${idx}`);
+            params.push(data.isActive);
+            idx++;
+        }
+        if (data.oidcSubject !== undefined) {
+            sets.push(`oidc_subject = $${idx}`);
+            params.push(data.oidcSubject);
+            idx++;
+        }
+        if (data.oidcIssuer !== undefined) {
+            sets.push(`oidc_issuer = $${idx}`);
+            params.push(data.oidcIssuer);
+            idx++;
+        }
+        params.push(id);
+        const query = `UPDATE users SET ${sets.join(', ')} WHERE id = $${idx}::uuid RETURNING *`;
+        // sql.unsafe is intentional: the dynamic column set requires it, but column
+        // names are code-controlled (never from user input), so this is safe.
+        const rows = (await this.sql.unsafe(query, params));
+        return rows[0] ? rowToUser(rows[0]) : null;
+    }
+    async deleteUser(id) {
+        const result = await this.sql `DELETE FROM users WHERE id = ${id}::uuid`;
+        return affectedCount(result) > 0;
+    }
+    // --- Refresh Tokens ---
+    async createRefreshToken(userId, tokenHash, expiresAt) {
+        const rows = await this.sql `
+      INSERT INTO refresh_tokens (user_id, token_hash, expires_at)
+      VALUES (${userId}::uuid, ${tokenHash}, ${expiresAt}::timestamptz)
+      RETURNING id`;
+        const row = rows[0];
+        if (!row)
+            throw new Error('INSERT RETURNING produced no row');
+        return row.id;
+    }
+    async getRefreshTokenByHash(tokenHash) {
+        const rows = await this.sql `
+      SELECT * FROM refresh_tokens WHERE token_hash = ${tokenHash}`;
+        const row = rows[0];
+        if (!row)
+            return null;
+        return {
+            id: row.id,
+            userId: row.user_id,
+            tokenHash: row.token_hash,
+            expiresAt: row.expires_at instanceof Date ? row.expires_at.toISOString() : String(row.expires_at),
+            createdAt: row.created_at instanceof Date ? row.created_at.toISOString() : String(row.created_at),
+        };
+    }
+    async deleteRefreshToken(id) {
+        await this.sql `DELETE FROM refresh_tokens WHERE id = ${id}::uuid`;
+    }
+    async deleteUserRefreshTokens(userId) {
+        await this.sql `DELETE FROM refresh_tokens WHERE user_id = ${userId}::uuid`;
+    }
+    async deleteExpiredRefreshTokens() {
+        const result = await this.sql `DELETE FROM refresh_tokens WHERE expires_at < NOW()`;
+        return affectedCount(result);
+    }
+    // --- Per-Collection Permissions ---
+    async getUserPermissions(userId) {
+        const rows = await this.sql `
+      SELECT user_id, collection, role FROM user_permissions WHERE user_id = ${userId}::uuid`;
+        return rows.map((r) => ({
+            userId: r.user_id,
+            collection: r.collection,
+            role: r.role,
+        }));
+    }
+    async setUserPermission(userId, collection, role) {
+        await this.sql `
+      INSERT INTO user_permissions (user_id, collection, role)
+      VALUES (${userId}::uuid, ${collection}, ${role})
+      ON CONFLICT (user_id, collection) DO UPDATE SET role = ${role}`;
+    }
+    async deleteUserPermission(userId, collection) {
+        const result = await this.sql `
+      DELETE FROM user_permissions WHERE user_id = ${userId}::uuid AND collection = ${collection}`;
+        return affectedCount(result) > 0;
+    }
+}
+/** Extract affected row count from a postgres.js query result */
+function affectedCount(result) {
+    return result.count;
+}
+function rowToUser(row) {
+    return {
+        id: row.id,
+        email: row.email,
+        name: row.name,
+        roles: row.roles,
+        oidcSubject: row.oidc_subject,
+        oidcIssuer: row.oidc_issuer,
+        isActive: row.is_active,
+        createdAt: row.created_at instanceof Date ? row.created_at.toISOString() : String(row.created_at),
+        updatedAt: row.updated_at instanceof Date ? row.updated_at.toISOString() : String(row.updated_at),
+    };
+}
+//# sourceMappingURL=auth-adapter.js.map

package/dist/auth-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-adapter.js","sourceRoot":"","sources":["../src/auth-adapter.ts"],"names":[],"mappings":"AAWA,kDAAkD;AAClD,MAAM,OAAO,mBAAmB;IACb,GAAG,CAAK;IAEzB,YAAY,GAAQ;QAClB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;IAChB,CAAC;IAED,gBAAgB;IAEhB,KAAK,CAAC,UAAU,CAAC,IAAoB;QACnC,yEAAyE;QACzE,2EAA2E;QAC3E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAwB;;gBAEvC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,aAAa,IAAI,CAAC,WAAW,IAAI,IAAI,KAAK,IAAI,CAAC,UAAU,IAAI,IAAI;kBACtG,CAAA;QAEd,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QAC7D,OAAO,SAAS,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAmB,kCAAkC,EAAE,QAAQ,CAAA;QAC1F,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC5C,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAa;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAmB,qCAAqC,KAAK,EAAE,CAAA;QAC1F,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC5C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,OAAe;QACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAmB;gDACF,MAAM,uBAAuB,OAAO,EAAE,CAAA;QAClF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC5C,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAmB,8CAA8C,CAAA;QAC5F,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAC5B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,IAAoB;QAC/C,MAAM,IAAI,GAAa,CAAC,oBAAoB,CAAC,CAAA;QAC7C,MAAM,MAAM,GAAc,EAAE,CAAA;QAC5B,IAAI,GAAG,GAAG,CAAC,CAAA;QAEX,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC,CAAA;YAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACvB,GAAG,EAAE,CAAA;QACP,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC,CAAA;YAC3B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACtB,GAAG,EAAE,CAAA;QACP,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,CAAA;YACpC,qEAAqE;YACrE,yEAAyE;YACzE,yDAAyD;YACzD,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACxC,GAAG,EAAE,CAAA;QACP,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAA;YAChC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YAC1B,GAAG,EAAE,CAAA;QACP,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAA;YACnC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;YAC7B,GAAG,EAAE,CAAA;QACP,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,kBAAkB,GAAG,EAAE,CAAC,CAAA;YAClC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAC5B,GAAG,EAAE,CAAA;QACP,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACf,MAAM,KAAK,GAAG,oBAAoB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,GAAG,oBAAoB,CAAA;QACxF,4EAA4E;QAC5E,sEAAsE;QACtE,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CACjC,KAAK,EACL,MAA8C,CAC/C,CAAsB,CAAA;QAEvB,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC5C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAA,gCAAgC,EAAE,QAAQ,CAAA;QACvE,OAAO,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAClC,CAAC;IAED,yBAAyB;IAEzB,KAAK,CAAC,kBAAkB,CAAC,MAAc,EAAE,SAAiB,EAAE,SAAiB;QAC3E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAuB;;gBAEtC,MAAM,WAAW,SAAS,KAAK,SAAS;mBACrC,CAAA;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QAC7D,OAAO,GAAG,CAAC,EAAE,CAAA;IACf,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,SAAiB;QAC3C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAsB;wDACG,SAAS,EAAE,CAAA;QAE/D,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACrB,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EACP,GAAG,CAAC,UAAU,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;YACxF,SAAS,EACP,GAAG,CAAC,UAAU,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;SACzF,CAAA;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,EAAU;QACjC,MAAM,IAAI,CAAC,GAAG,CAAA,yCAAyC,EAAE,QAAQ,CAAA;IACnE,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,MAAc;QAC1C,MAAM,IAAI,CAAC,GAAG,CAAA,8CAA8C,MAAM,QAAQ,CAAA;IAC5E,CAAC;IAED,KAAK,CAAC,0BAA0B;QAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAA,qDAAqD,CAAA;QAClF,OAAO,aAAa,CAAC,MAAM,CAAC,CAAA;IAC9B,CAAC;IAED,qCAAqC;IAErC,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAA8D;+EACd,MAAM,QAAQ,CAAA;QAEzF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,MAAM,EAAE,CAAC,CAAC,OAAO;YACjB,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,IAAI,EAAE,CAAC,CAAC,IAAY;SACrB,CAAC,CAAC,CAAA;IACL,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,UAAkB,EAAE,IAAU;QACpE,MAAM,IAAI,CAAC,GAAG,CAAA;;gBAEF,MAAM,WAAW,UAAU,KAAK,IAAI;+DACW,IAAI,EAAE,CAAA;IACnE,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,MAAc,EAAE,UAAkB;QAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAA;qDACoB,MAAM,2BAA2B,UAAU,EAAE,CAAA;QAC9F,OAAO,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAClC,CAAC;CACF;AAED,iEAAiE;AACjE,SAAS,aAAa,CAAC,MAAe;IACpC,OAAQ,MAA4B,CAAC,KAAK,CAAA;AAC5C,CAAC;AAwBD,SAAS,SAAS,CAAC,GAAoB;IACrC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,KAAK,EAAE,GAAG,CAAC,KAAe;QAC1B,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,SAAS,EACP,GAAG,CAAC,UAAU,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACxF,SAAS,EACP,GAAG,CAAC,UAAU,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;KACzF,CAAA;AACH,CAAC"}

package/dist/content-migration.d.ts

@@ -0,0 +1,14 @@
+import type { ConflictResolution, ContentConflict, ContentManifestRecord, IContentMigrationAdapter } from '@krantho/persistence';
+import type { Sql } from 'postgres';
+/** Postgres content migration adapter */
+export declare class PostgresContentMigrationAdapter implements IContentMigrationAdapter {
+    private readonly sql;
+    constructor(sql: Sql);
+    getContentManifestVersion(): Promise<number | null>;
+    getContentManifest(): Promise<ContentManifestRecord | null>;
+    saveContentManifest(manifest: ContentManifestRecord): Promise<void>;
+    listConflicts(): Promise<ContentConflict[]>;
+    resolveConflict(conflictId: number, resolution: ConflictResolution): Promise<boolean>;
+    recordConflict(conflict: Omit<ContentConflict, 'id' | 'resolved' | 'resolvedAt' | 'resolution'>): Promise<void>;
+}
+//# sourceMappingURL=content-migration.d.ts.map

package/dist/content-migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-migration.d.ts","sourceRoot":"","sources":["../src/content-migration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,eAAe,EACf,qBAAqB,EACrB,wBAAwB,EACzB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AAEnC,yCAAyC;AACzC,qBAAa,+BAAgC,YAAW,wBAAwB;IAC9E,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAK;gBAEb,GAAG,EAAE,GAAG;IAId,yBAAyB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAQnD,kBAAkB,IAAI,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAwB3D,mBAAmB,CAAC,QAAQ,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IAanE,aAAa,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IA8B3C,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC;IAQrF,cAAc,CAClB,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,GAAG,UAAU,GAAG,YAAY,GAAG,YAAY,CAAC,GAC/E,OAAO,CAAC,IAAI,CAAC;CAajB"}

package/dist/content-migration.js

@@ -0,0 +1,64 @@
+/** Postgres content migration adapter */
+export class PostgresContentMigrationAdapter {
+    sql;
+    constructor(sql) {
+        this.sql = sql;
+    }
+    async getContentManifestVersion() {
+        const rows = (await this.sql.unsafe('SELECT MAX(repo_version) as max_version FROM content_manifest'));
+        return rows[0]?.max_version ?? null;
+    }
+    async getContentManifest() {
+        const rows = (await this.sql.unsafe('SELECT id, repo_version, repo_commit, imported_at, file_checksums FROM content_manifest ORDER BY id DESC LIMIT 1'));
+        const row = rows[0];
+        if (!row)
+            return null;
+        return {
+            id: row.id,
+            repoVersion: row.repo_version,
+            repoCommit: row.repo_commit,
+            importedAt: row.imported_at instanceof Date ? row.imported_at.toISOString() : String(row.imported_at),
+            fileChecksums: row.file_checksums,
+        };
+    }
+    async saveContentManifest(manifest) {
+        await this.sql.unsafe('INSERT INTO content_manifest (repo_version, repo_commit, imported_at, file_checksums) VALUES ($1, $2, $3, $4)', 
+        // sql.json binds the object as JSONB; a JSON string would be stored as a string
+        [
+            manifest.repoVersion,
+            manifest.repoCommit,
+            manifest.importedAt,
+            this.sql.json(manifest.fileChecksums),
+        ]);
+    }
+    async listConflicts() {
+        const rows = (await this.sql.unsafe('SELECT id, migration_id, collection, slug, locale, repo_checksum, db_checksum, resolved, resolved_at, resolution FROM content_migration_conflicts WHERE resolved = FALSE ORDER BY id DESC'));
+        return rows.map((r) => ({
+            id: r.id,
+            migrationId: r.migration_id,
+            collection: r.collection,
+            slug: r.slug,
+            locale: r.locale,
+            repoChecksum: r.repo_checksum,
+            dbChecksum: r.db_checksum,
+            resolved: r.resolved,
+            resolvedAt: r.resolved_at instanceof Date ? r.resolved_at.toISOString() : r.resolved_at,
+            resolution: r.resolution,
+        }));
+    }
+    async resolveConflict(conflictId, resolution) {
+        const result = await this.sql.unsafe('UPDATE content_migration_conflicts SET resolved = TRUE, resolved_at = NOW(), resolution = $1 WHERE id = $2 AND resolved = FALSE', [resolution, conflictId]);
+        return result.count > 0;
+    }
+    async recordConflict(conflict) {
+        await this.sql.unsafe('INSERT INTO content_migration_conflicts (migration_id, collection, slug, locale, repo_checksum, db_checksum) VALUES ($1, $2, $3, $4, $5, $6)', [
+            conflict.migrationId,
+            conflict.collection,
+            conflict.slug,
+            conflict.locale,
+            conflict.repoChecksum,
+            conflict.dbChecksum,
+        ]);
+    }
+}
+//# sourceMappingURL=content-migration.js.map

package/dist/content-migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-migration.js","sourceRoot":"","sources":["../src/content-migration.ts"],"names":[],"mappings":"AAQA,yCAAyC;AACzC,MAAM,OAAO,+BAA+B;IACzB,GAAG,CAAK;IAEzB,YAAY,GAAQ;QAClB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;IAChB,CAAC;IAED,KAAK,CAAC,yBAAyB;QAC7B,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CACjC,+DAA+D,CAChE,CAA0C,CAAA;QAE3C,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,IAAI,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CACjC,kHAAkH,CACnH,CAMC,CAAA;QAEF,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QAErB,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,UAAU,EACR,GAAG,CAAC,WAAW,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;YAC3F,aAAa,EAAE,GAAG,CAAC,cAAc;SAClC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,QAA+B;QACvD,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CACnB,+GAA+G;QAC/G,gFAAgF;QAChF;YACE,QAAQ,CAAC,WAAW;YACpB,QAAQ,CAAC,UAAU;YACnB,QAAQ,CAAC,UAAU;YACnB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;SACtC,CACF,CAAA;IACH,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CACjC,2LAA2L,CAC5L,CAWC,CAAA;QAEF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,WAAW,EAAE,CAAC,CAAC,YAAY;YAC3B,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,YAAY,EAAE,CAAC,CAAC,aAAa;YAC7B,UAAU,EAAE,CAAC,CAAC,WAAW;YACzB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,UAAU,EAAE,CAAC,CAAC,WAAW,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW;YACvF,UAAU,EAAE,CAAC,CAAC,UAAuC;SACtD,CAAC,CAAC,CAAA;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,UAAkB,EAAE,UAA8B;QACtE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAClC,iIAAiI,EACjI,CAAC,UAAU,EAAE,UAAU,CAAC,CACzB,CAAA;QACD,OAAQ,MAAuC,CAAC,KAAK,GAAG,CAAC,CAAA;IAC3D,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,QAAgF;QAEhF,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CACnB,8IAA8I,EAC9I;YACE,QAAQ,CAAC,WAAW;YACpB,QAAQ,CAAC,UAAU;YACnB,QAAQ,CAAC,IAAI;YACb,QAAQ,CAAC,MAAM;YACf,QAAQ,CAAC,YAAY;YACrB,QAAQ,CAAC,UAAU;SACpB,CACF,CAAA;IACH,CAAC;CACF"}

package/dist/content-query.d.ts

@@ -0,0 +1,23 @@
+import type { ContentQuery, QueryPage, QueryProjection } from '@krantho/persistence';
+import type { Sql } from 'postgres';
+import type { SqlParam } from './row-mapping.js';
+/**
+ * The ORDER BY of a query: the requested sort, then `collection, slug, locale` so paging is stable.
+ *
+ * Exported for unit testing — consumers of this package should not call it.
+ */
+export declare function orderByClause(sort: string | undefined): string;
+/**
+ * Build the one statement a content query runs: the projection's columns, the rows of
+ * its state, the text match, the order and a page of `limit + 1` rows.
+ *
+ * Every name in the SQL is a whitelisted column; collections, locale, match text and
+ * paging are parameters.
+ */
+export declare function buildContentQuery(spec: ContentQuery): {
+    sql: string;
+    params: SqlParam[];
+};
+/** Run a content query: one statement, one page */
+export declare function runContentQuery<P extends QueryProjection>(sql: Sql, spec: ContentQuery<P>): Promise<QueryPage<P>>;
+//# sourceMappingURL=content-query.d.ts.map

package/dist/content-query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-query.d.ts","sourceRoot":"","sources":["../src/content-query.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EAGZ,SAAS,EACT,eAAe,EAChB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AACnC,OAAO,KAAK,EAAuB,QAAQ,EAAc,MAAM,kBAAkB,CAAA;AA2DjF;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAQ9D;AAyDD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,QAAQ,EAAE,CAAA;CAAE,CAwBzF;AAaD,mDAAmD;AACnD,wBAAsB,eAAe,CAAC,CAAC,SAAS,eAAe,EAC7D,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,GACpB,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAWvB"}

package/dist/content-query.js

@@ -0,0 +1,170 @@
+import { isDirectSortColumn, isSafeSortField, statusCondition } from '@krantho/persistence';
+import { META_COLUMNS, rowToContentDocument, rowToDocumentMeta, rowToSummary, SUMMARY_COLUMNS, } from './row-mapping.js';
+/** Characters of a snippet before the match, and from the match on */
+const SNIPPET_BEFORE = 80;
+const SNIPPET_LENGTH = 200;
+/** The column set a projection reads; `full` reads the whole row */
+const PROJECTION_COLUMNS = {
+    meta: META_COLUMNS,
+    summary: SUMMARY_COLUMNS,
+    full: '*',
+};
+/** The SQL expression of the text each match target searches */
+const MATCH_COLUMNS = {
+    slug: 'slug',
+    fields: 'fields::text',
+    body: 'body',
+};
+/** Escape LIKE wildcards (and the escape character) so the text matches literally */
+function escapeLike(text) {
+    return text.replace(/[\\%_]/g, (char) => `\\${char}`);
+}
+/** Collects the parameters of one statement and hands out their `$n` placeholders */
+class Parameters {
+    values = [];
+    bind(value) {
+        this.values.push(value);
+        return `$${this.values.length}`;
+    }
+}
+/**
+ * The sort keys of a field, ordered as SQLite orders `json_extract`: a missing value first,
+ * then numbers numerically, then the rest as text. `fields->>` alone is text, which would
+ * put `10` before `9`.
+ */
+function fieldSortKeys(field, dir) {
+    const value = `fields->'${field}'`;
+    const text = `fields->>'${field}'`;
+    const isNumber = `jsonb_typeof(${value}) = 'number'`;
+    return [
+        `${text} IS NOT NULL ${dir}`,
+        `NOT ${isNumber} ${dir}`,
+        `CASE WHEN ${isNumber} THEN (${text})::numeric END ${dir}`,
+        `${text} ${dir}`,
+    ].join(', ');
+}
+/**
+ * The ORDER BY of a query: the requested sort, then `collection, slug, locale` so paging is stable.
+ *
+ * Exported for unit testing — consumers of this package should not call it.
+ */
+export function orderByClause(sort) {
+    const [field, direction] = sort ? sort.split(':') : [];
+    const tieBreak = 'collection, slug, locale';
+    if (!field)
+        return ` ORDER BY ${tieBreak}`;
+    const dir = direction === 'desc' ? 'DESC' : 'ASC';
+    if (isDirectSortColumn(field))
+        return ` ORDER BY ${field} ${dir}, ${tieBreak}`;
+    if (isSafeSortField(field))
+        return ` ORDER BY ${fieldSortKeys(field, dir)}, ${tieBreak}`;
+    return ` ORDER BY ${tieBreak}`;
+}
+/** The condition that a document matches the text in any of the targets */
+function matchCondition(targets, pattern) {
+    const likes = targets.map((target) => `lower(${MATCH_COLUMNS[target]}) LIKE ${pattern} ESCAPE '\\'`);
+    return `(${likes.join(' OR ')})`;
+}
+/**
+ * The substring of the first match: from the body when it matches there, else from
+ * the fields' JSON. `strpos` and `substr` count characters, so the position found in
+ * the folded text applies to the original.
+ */
+function snippetColumn(targets, needle) {
+    const cases = ['body', 'fields']
+        .filter((target) => targets.includes(target))
+        .map((target) => {
+        const column = MATCH_COLUMNS[target];
+        const position = `strpos(lower(${column}), ${needle})`;
+        return `WHEN ${position} > 0 THEN substr(${column}, greatest(1, ${position} - ${SNIPPET_BEFORE}), ${SNIPPET_LENGTH})`;
+    });
+    return `, CASE ${cases.join(' ')} END AS snippet`;
+}
+/** The conditions that narrow rows to the query's collections and locale; `prefix` qualifies the columns */
+function scopeConditions(spec, params, prefix) {
+    const conditions = [];
+    if (spec.collections) {
+        const list = spec.collections.map((collection) => params.bind(collection)).join(', ');
+        conditions.push(spec.collections.length > 0 ? `${prefix}collection IN (${list})` : 'FALSE');
+    }
+    if (spec.locale)
+        conditions.push(`${prefix}locale = ${params.bind(spec.locale)}`);
+    return conditions;
+}
+/**
+ * The WHERE conditions of the rows the query reads. `current` is the current, not
+ * deleted rows; `published` the live row of each current, not deleted document, found
+ * in a subquery over the same table so the outer columns stay those of the live row.
+ */
+function sourceConditions(spec, params) {
+    if (spec.state === 'current') {
+        const where = ['is_current = TRUE', 'deleted_at IS NULL', ...scopeConditions(spec, params, '')];
+        if (spec.status)
+            where.push(statusCondition(spec.status));
+        return where;
+    }
+    const inner = ['cur.is_current = TRUE', 'cur.deleted_at IS NULL'];
+    inner.push(...scopeConditions(spec, params, 'cur.'));
+    const liveIds = `SELECT live.id FROM content cur
+    JOIN content live ON live.collection = cur.collection AND live.slug = cur.slug
+      AND live.locale = cur.locale AND live.version = cur.live_version
+    WHERE ${inner.join(' AND ')}`;
+    return [`id IN (${liveIds})`];
+}
+/**
+ * Build the one statement a content query runs: the projection's columns, the rows of
+ * its state, the text match, the order and a page of `limit + 1` rows.
+ *
+ * Every name in the SQL is a whitelisted column; collections, locale, match text and
+ * paging are parameters.
+ */
+export function buildContentQuery(spec) {
+    const params = new Parameters();
+    const where = sourceConditions(spec, params);
+    let snippet = '';
+    if (spec.match) {
+        // A parameter no expression references fails in Postgres ("could not determine
+        // data type"), so each is bound only when its expression is written.
+        const needle = spec.match.text.toLowerCase();
+        const targets = spec.match.in;
+        where.push(targets.length > 0
+            ? matchCondition(targets, params.bind(`%${escapeLike(needle)}%`))
+            : 'FALSE');
+        if (targets.includes('body') || targets.includes('fields')) {
+            snippet = snippetColumn(targets, params.bind(needle));
+        }
+    }
+    let sql = `SELECT ${PROJECTION_COLUMNS[spec.projection]}${snippet} FROM content WHERE ${where.join(' AND ')}`;
+    sql += orderByClause(spec.sort);
+    if (spec.limit !== undefined)
+        sql += ` LIMIT ${params.bind(spec.limit + 1)}`;
+    if (spec.offset !== undefined)
+        sql += ` OFFSET ${params.bind(spec.offset)}`;
+    return { sql, params: params.values };
+}
+/** A snippet is the matched text with its whitespace runs collapsed to one space */
+function collapseWhitespace(text) {
+    return text.replace(/\s+/g, ' ');
+}
+function rowItem(projection, row) {
+    if (projection === 'meta')
+        return rowToDocumentMeta(row);
+    if (projection === 'summary')
+        return rowToSummary(row);
+    return rowToContentDocument(row);
+}
+/** Run a content query: one statement, one page */
+export async function runContentQuery(sql, spec) {
+    const built = buildContentQuery(spec);
+    const rows = (await sql.unsafe(built.sql, built.params));
+    const hasMore = spec.limit !== undefined && rows.length > spec.limit;
+    const page = hasMore ? rows.slice(0, spec.limit) : rows;
+    const items = page.map((row) => {
+        const item = rowItem(spec.projection, row);
+        if (typeof row['snippet'] === 'string')
+            item.snippet = collapseWhitespace(row['snippet']);
+        return item;
+    });
+    return { items, hasMore };
+}
+//# sourceMappingURL=content-query.js.map

package/dist/content-query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-query.js","sourceRoot":"","sources":["../src/content-query.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAG3F,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,EACZ,eAAe,GAChB,MAAM,kBAAkB,CAAA;AAEzB,sEAAsE;AACtE,MAAM,cAAc,GAAG,EAAE,CAAA;AACzB,MAAM,cAAc,GAAG,GAAG,CAAA;AAE1B,oEAAoE;AACpE,MAAM,kBAAkB,GAAoC;IAC1D,IAAI,EAAE,YAAY;IAClB,OAAO,EAAE,eAAe;IACxB,IAAI,EAAE,GAAG;CACV,CAAA;AAED,gEAAgE;AAChE,MAAM,aAAa,GAAgC;IACjD,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,cAAc;IACtB,IAAI,EAAE,MAAM;CACb,CAAA;AAED,qFAAqF;AACrF,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;AACvD,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU;IACL,MAAM,GAAe,EAAE,CAAA;IAEhC,IAAI,CAAC,KAAe;QAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACvB,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAA;IACjC,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAAa,EAAE,GAAW;IAC/C,MAAM,KAAK,GAAG,YAAY,KAAK,GAAG,CAAA;IAClC,MAAM,IAAI,GAAG,aAAa,KAAK,GAAG,CAAA;IAClC,MAAM,QAAQ,GAAG,gBAAgB,KAAK,cAAc,CAAA;IACpD,OAAO;QACL,GAAG,IAAI,gBAAgB,GAAG,EAAE;QAC5B,OAAO,QAAQ,IAAI,GAAG,EAAE;QACxB,aAAa,QAAQ,UAAU,IAAI,kBAAkB,GAAG,EAAE;QAC1D,GAAG,IAAI,IAAI,GAAG,EAAE;KACjB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAwB;IACpD,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACtD,MAAM,QAAQ,GAAG,0BAA0B,CAAA;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,aAAa,QAAQ,EAAE,CAAA;IAC1C,MAAM,GAAG,GAAG,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAA;IACjD,IAAI,kBAAkB,CAAC,KAAK,CAAC;QAAE,OAAO,aAAa,KAAK,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAA;IAC9E,IAAI,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO,aAAa,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAA;IACxF,OAAO,aAAa,QAAQ,EAAE,CAAA;AAChC,CAAC;AAED,2EAA2E;AAC3E,SAAS,cAAc,CAAC,OAA+B,EAAE,OAAe;IACtE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CACvB,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,aAAa,CAAC,MAAM,CAAC,UAAU,OAAO,cAAc,CAC1E,CAAA;IACD,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAA;AAClC,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,OAA+B,EAAE,MAAc;IACpE,MAAM,KAAK,GAAI,CAAC,MAAM,EAAE,QAAQ,CAAW;SACxC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SAC5C,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACd,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;QACpC,MAAM,QAAQ,GAAG,gBAAgB,MAAM,MAAM,MAAM,GAAG,CAAA;QACtD,OAAO,QAAQ,QAAQ,oBAAoB,MAAM,iBAAiB,QAAQ,MAAM,cAAc,MAAM,cAAc,GAAG,CAAA;IACvH,CAAC,CAAC,CAAA;IACJ,OAAO,UAAU,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAA;AACnD,CAAC;AAED,4GAA4G;AAC5G,SAAS,eAAe,CAAC,IAAkB,EAAE,MAAkB,EAAE,MAAc;IAC7E,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrF,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,kBAAkB,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAC7F,CAAC;IACD,IAAI,IAAI,CAAC,MAAM;QAAE,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,YAAY,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACjF,OAAO,UAAU,CAAA;AACnB,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,IAAkB,EAAE,MAAkB;IAC9D,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,CAAC,mBAAmB,EAAE,oBAAoB,EAAE,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;QAC/F,IAAI,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;QACzD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,uBAAuB,EAAE,wBAAwB,CAAC,CAAA;IACjE,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACpD,MAAM,OAAO,GAAG;;;YAGN,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAA;IAC/B,OAAO,CAAC,UAAU,OAAO,GAAG,CAAC,CAAA;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAkB;IAClD,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAA;IAC/B,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC5C,IAAI,OAAO,GAAG,EAAE,CAAA;IAChB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,+EAA+E;QAC/E,qEAAqE;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAA;QAC7B,KAAK,CAAC,IAAI,CACR,OAAO,CAAC,MAAM,GAAG,CAAC;YAChB,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,CAAC,CAAC,OAAO,CACZ,CAAA;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;QACvD,CAAC;IACH,CAAC;IAED,IAAI,GAAG,GAAG,UAAU,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,OAAO,uBAAuB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAA;IAC7G,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,GAAG,IAAI,UAAU,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAA;IAC5E,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,IAAI,WAAW,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAA;IAC3E,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAA;AACvC,CAAC;AAED,oFAAoF;AACpF,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AAClC,CAAC;AAED,SAAS,OAAO,CAAC,UAA2B,EAAE,GAA4B;IACxE,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,iBAAiB,CAAC,GAAyB,CAAC,CAAA;IAC9E,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC,GAA4B,CAAC,CAAA;IAC/E,OAAO,oBAAoB,CAAC,GAA4B,CAAC,CAAA;AAC3D,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAQ,EACR,IAAqB;IAErB,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;IACrC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAmC,CAAA;IAC1F,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAA;IACpE,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAoD,CAAA;QAC7F,IAAI,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ;YAAE,IAAI,CAAC,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAA;QACzF,OAAO,IAAI,CAAA;IACb,CAAC,CAAC,CAAA;IACF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;AAC3B,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+export { PostgresAuthAdapter } from './auth-adapter.js';
+export { PostgresContentMigrationAdapter } from './content-migration.js';
+export type { PostgresMigration } from './migration-runner.js';
+export { getAppliedMigrations, getSchemaVersion, runMigrations } from './migration-runner.js';
+export { postgresMigrations } from './migrations/index.js';
+export type { PostgresAdapterOptions, PostgresDefaultStatus } from './postgres-adapter.js';
+export { DEFAULT_POSTGRES_STATUS, PostgresAdapter } from './postgres-adapter.js';
+export { PostgresCheckpointAdapter } from './postgres-checkpoints.js';
+export { PostgresLockAdapter } from './postgres-lock-adapter.js';
+export { PostgresMediaAdapter } from './postgres-media-adapter.js';
+export { PostgresMediaFolderAdapter } from './postgres-media-folder-adapter.js';
+export { PostgresPageCacheStore } from './postgres-page-cache-store.js';
+export { PostgresRetentionAdapter } from './postgres-retention-adapter.js';
+export { PostgresSeoConfigAdapter } from './postgres-seo-config-adapter.js';
+export { PostgresSiteSettingsAdapter } from './postgres-site-settings-adapter.js';
+export { PostgresWebhookDeliveryAdapter } from './postgres-webhook-delivery-adapter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAA;AACxE,YAAY,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAC7F,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC1D,YAAY,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC1F,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAA;AAC/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAA;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAA;AAC3E,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAA;AACjF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAA"}

package/dist/index.js

@@ -0,0 +1,15 @@
+export { PostgresAuthAdapter } from './auth-adapter.js';
+export { PostgresContentMigrationAdapter } from './content-migration.js';
+export { getAppliedMigrations, getSchemaVersion, runMigrations } from './migration-runner.js';
+export { postgresMigrations } from './migrations/index.js';
+export { DEFAULT_POSTGRES_STATUS, PostgresAdapter } from './postgres-adapter.js';
+export { PostgresCheckpointAdapter } from './postgres-checkpoints.js';
+export { PostgresLockAdapter } from './postgres-lock-adapter.js';
+export { PostgresMediaAdapter } from './postgres-media-adapter.js';
+export { PostgresMediaFolderAdapter } from './postgres-media-folder-adapter.js';
+export { PostgresPageCacheStore } from './postgres-page-cache-store.js';
+export { PostgresRetentionAdapter } from './postgres-retention-adapter.js';
+export { PostgresSeoConfigAdapter } from './postgres-seo-config-adapter.js';
+export { PostgresSiteSettingsAdapter } from './postgres-site-settings-adapter.js';
+export { PostgresWebhookDeliveryAdapter } from './postgres-webhook-delivery-adapter.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAA;AAExE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAC7F,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE1D,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAA;AAC/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAA;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAA;AAC3E,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAA;AACjF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAA"}

package/dist/migration-runner.d.ts

@@ -0,0 +1,29 @@
+import type { AppliedMigration, MigrationResult } from '@krantho/persistence';
+import type { Sql, TransactionSql } from 'postgres';
+/** A Postgres migration with async apply function */
+export interface PostgresMigration {
+    version: number;
+    name: string;
+    apply: (sql: TransactionSql) => Promise<void>;
+}
+/**
+ * Run pending migrations on a Postgres database.
+ *
+ * Self-bootstrapping: creates the schema_migrations table if it doesn't exist.
+ * All pending migrations run in one transaction. Halts on first failure, which
+ * rolls back the whole run.
+ *
+ * Deciding what is pending and applying it is a check-then-act, so it runs while
+ * holding a transaction-scoped advisory lock: the lock is taken before the ledger
+ * is read and released when the last migration commits. Serverless platforms
+ * cold-start several instances against the same database at once, and without
+ * the lock they all read an empty ledger and race to create the same tables. A
+ * losing instance waits on the lock and then re-reads the ledger inside it,
+ * finding the work already done.
+ */
+export declare function runMigrations(sql: Sql, migrations: readonly PostgresMigration[]): Promise<MigrationResult>;
+/** Get the current schema version from the database */
+export declare function getSchemaVersion(sql: Sql): Promise<number>;
+/** Get all applied migrations */
+export declare function getAppliedMigrations(sql: Sql): Promise<AppliedMigration[]>;
+//# sourceMappingURL=migration-runner.d.ts.map

package/dist/migration-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-runner.d.ts","sourceRoot":"","sources":["../src/migration-runner.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAqB,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAMhG,OAAO,KAAK,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAEnD,qDAAqD;AACrD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9C;AAuED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,GAAG,EACR,UAAU,EAAE,SAAS,iBAAiB,EAAE,GACvC,OAAO,CAAC,eAAe,CAAC,CAgB1B;AAED,uDAAuD;AACvD,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAUhE;AAED,iCAAiC;AACjC,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAUhF"}