@noodleseed/one 0.82.0 → 0.84.0

package/node_modules/@noodle-borg/service/dist/platform-account-reset-schema-postgres.js

@@ -0,0 +1,439 @@
+/**
+ * Additive, service-only persistence for the exact-three account reset. Sensitive reservation and locator
+ * fields never appear in the append-only event table or the public result contract.
+ */
+export async function ensurePlatformAccountResetSchema(pool) {
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS platform_account_reset_operations (
+      operation_id text PRIMARY KEY,
+      lifecycle text NOT NULL CHECK (lifecycle IN (
+        'previewed', 'quarantined', 'rolled_back',
+        'finalizing', 'finalization_blocked', 'finalized'
+      )),
+      release_sha text NOT NULL CHECK (release_sha ~ '^[0-9a-f]{40}$'),
+      rollout_generation bigint NOT NULL CHECK (rollout_generation >= 0),
+      workos_realm text NOT NULL,
+      source_epoch bigint NOT NULL CHECK (source_epoch >= 0),
+      preview_checksum text NOT NULL CHECK (preview_checksum ~ '^[0-9a-f]{64}$'),
+      target_set_fingerprint text NOT NULL CHECK (target_set_fingerprint ~ '^[0-9a-f]{64}$'),
+      approved_target_set_fingerprint text NOT NULL
+        CHECK (approved_target_set_fingerprint ~ '^[0-9a-f]{64}$'),
+      request_fingerprint text NOT NULL CHECK (request_fingerprint ~ '^[0-9a-f]{64}$'),
+      idempotency_key_hash text CHECK (idempotency_key_hash IS NULL OR idempotency_key_hash ~ '^[0-9a-f]{64}$'),
+      actor_fingerprint text NOT NULL CHECK (actor_fingerprint ~ '^[0-9a-f]{64}$'),
+      reason_fingerprint text CHECK (reason_fingerprint IS NULL OR reason_fingerprint ~ '^[0-9a-f]{64}$'),
+      safe_result jsonb NOT NULL,
+      preview_expires_at timestamptz NOT NULL,
+      quarantined_at timestamptz,
+      finalize_after timestamptz,
+      finalized_at timestamptz,
+      created_at timestamptz NOT NULL DEFAULT now(),
+      updated_at timestamptz NOT NULL DEFAULT now()
+    )
+  `);
+    await pool.query('ALTER TABLE platform_account_reset_operations ADD COLUMN IF NOT EXISTS idempotency_key_hash text, ADD COLUMN IF NOT EXISTS actor_fingerprint text, ADD COLUMN IF NOT EXISTS reason_fingerprint text, ADD COLUMN IF NOT EXISTS safe_result jsonb, ADD COLUMN IF NOT EXISTS preview_expires_at timestamptz, ADD COLUMN IF NOT EXISTS quarantined_at timestamptz, ADD COLUMN IF NOT EXISTS finalize_after timestamptz, ADD COLUMN IF NOT EXISTS finalized_at timestamptz, ADD COLUMN IF NOT EXISTS updated_at timestamptz NOT NULL DEFAULT now()');
+    await pool.query(`
+    ALTER TABLE platform_account_reset_operations
+      ADD COLUMN IF NOT EXISTS quarantine_idempotency_key_hash text
+        CHECK (quarantine_idempotency_key_hash IS NULL
+          OR quarantine_idempotency_key_hash ~ '^[0-9a-f]{64}$'),
+      ADD COLUMN IF NOT EXISTS quarantine_request_fingerprint text
+        CHECK (quarantine_request_fingerprint IS NULL
+          OR quarantine_request_fingerprint ~ '^[0-9a-f]{64}$'),
+      ADD COLUMN IF NOT EXISTS quarantine_reason_fingerprint text
+        CHECK (quarantine_reason_fingerprint IS NULL
+          OR quarantine_reason_fingerprint ~ '^[0-9a-f]{64}$'),
+      ADD COLUMN IF NOT EXISTS quarantine_actor_fingerprint text
+        CHECK (quarantine_actor_fingerprint IS NULL
+          OR quarantine_actor_fingerprint ~ '^[0-9a-f]{64}$'),
+      ADD COLUMN IF NOT EXISTS quarantine_safe_result jsonb,
+      ADD COLUMN IF NOT EXISTS rollback_idempotency_key_hash text
+        CHECK (rollback_idempotency_key_hash IS NULL
+          OR rollback_idempotency_key_hash ~ '^[0-9a-f]{64}$'),
+      ADD COLUMN IF NOT EXISTS rollback_request_fingerprint text
+        CHECK (rollback_request_fingerprint IS NULL
+          OR rollback_request_fingerprint ~ '^[0-9a-f]{64}$'),
+      ADD COLUMN IF NOT EXISTS rollback_reason_fingerprint text
+        CHECK (rollback_reason_fingerprint IS NULL
+          OR rollback_reason_fingerprint ~ '^[0-9a-f]{64}$'),
+      ADD COLUMN IF NOT EXISTS rollback_actor_fingerprint text
+        CHECK (rollback_actor_fingerprint IS NULL
+          OR rollback_actor_fingerprint ~ '^[0-9a-f]{64}$'),
+      ADD COLUMN IF NOT EXISTS rollback_safe_result jsonb
+  `);
+    await pool.query(`
+    ALTER TABLE platform_account_reset_operations
+      ADD COLUMN IF NOT EXISTS approved_target_set_fingerprint text
+        CHECK (approved_target_set_fingerprint IS NULL
+          OR approved_target_set_fingerprint ~ '^[0-9a-f]{64}$')
+  `);
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS platform_account_reset_targets (
+      operation_id text NOT NULL REFERENCES platform_account_reset_operations(operation_id) ON DELETE RESTRICT,
+      principal_id text NOT NULL REFERENCES platform_principals(principal_id) ON DELETE RESTRICT,
+      target_fingerprint text NOT NULL CHECK (target_fingerprint ~ '^[0-9a-f]{64}$'),
+      source_snapshot_fingerprint text NOT NULL CHECK (source_snapshot_fingerprint ~ '^[0-9a-f]{64}$'),
+      lifecycle text NOT NULL CHECK (lifecycle IN (
+        'previewed', 'quarantined', 'rolled_back',
+        'finalizing', 'finalization_blocked', 'finalized'
+      )),
+      created_at timestamptz NOT NULL DEFAULT now(),
+      updated_at timestamptz NOT NULL DEFAULT now(),
+      PRIMARY KEY (operation_id, principal_id)
+    )
+  `);
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS platform_account_reset_email_reservations (
+      operation_id text NOT NULL REFERENCES platform_account_reset_operations(operation_id) ON DELETE RESTRICT,
+      realm text NOT NULL,
+      normalized_email text NOT NULL,
+      principal_id text NOT NULL REFERENCES platform_principals(principal_id) ON DELETE RESTRICT,
+      expires_at timestamptz NOT NULL,
+      released_at timestamptz,
+      created_at timestamptz NOT NULL DEFAULT now(),
+      PRIMARY KEY (operation_id, realm, normalized_email)
+    )
+  `);
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS platform_account_reset_cleanup_ledger (
+      ledger_id bigserial PRIMARY KEY,
+      operation_id text NOT NULL REFERENCES platform_account_reset_operations(operation_id) ON DELETE RESTRICT,
+      provider text NOT NULL,
+      resource_kind text NOT NULL,
+      provider_locator text NOT NULL,
+      locator_fingerprint text NOT NULL CHECK (locator_fingerprint ~ '^[0-9a-f]{64}$'),
+      state text NOT NULL DEFAULT 'pending' CHECK (state IN ('pending', 'leased', 'completed', 'blocked', 'failed')),
+      lease_token_hash text CHECK (lease_token_hash IS NULL OR lease_token_hash ~ '^[0-9a-f]{64}$'),
+      lease_expires_at timestamptz,
+      attempt_count integer NOT NULL DEFAULT 0 CHECK (attempt_count >= 0),
+      retry_at timestamptz,
+      outcome_code text,
+      created_at timestamptz NOT NULL DEFAULT now(),
+      updated_at timestamptz NOT NULL DEFAULT now(),
+      UNIQUE (operation_id, provider, resource_kind, locator_fingerprint)
+    )
+  `);
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS platform_account_reset_events (
+      event_id bigserial PRIMARY KEY,
+      operation_id text NOT NULL REFERENCES platform_account_reset_operations(operation_id) ON DELETE RESTRICT,
+      event_type text NOT NULL CHECK (event_type IN (
+        'previewed', 'quarantined', 'provider_attempt', 'rolled_back',
+        'finalizing', 'finalization_blocked', 'finalized'
+      )),
+      target_set_fingerprint text NOT NULL CHECK (target_set_fingerprint ~ '^[0-9a-f]{64}$'),
+      event_fingerprint text NOT NULL CHECK (event_fingerprint ~ '^[0-9a-f]{64}$'),
+      target_count integer NOT NULL CHECK (target_count >= 0),
+      resource_count integer NOT NULL CHECK (resource_count >= 0),
+      blocker_count integer NOT NULL CHECK (blocker_count >= 0),
+      created_at timestamptz NOT NULL DEFAULT now()
+    )
+  `);
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS platform_account_reset_rollback_previews (
+      operation_id text NOT NULL
+        REFERENCES platform_account_reset_operations(operation_id) ON DELETE RESTRICT,
+      preview_checksum text NOT NULL CHECK (preview_checksum ~ '^[0-9a-f]{64}$'),
+      source_epoch bigint NOT NULL CHECK (source_epoch >= 0),
+      release_sha text NOT NULL CHECK (release_sha ~ '^[0-9a-f]{40}$'),
+      rollout_generation bigint NOT NULL CHECK (rollout_generation >= 0),
+      source_manifest_fingerprint text NOT NULL
+        CHECK (source_manifest_fingerprint ~ '^[0-9a-f]{64}$'),
+      evidence_fingerprint text NOT NULL CHECK (evidence_fingerprint ~ '^[0-9a-f]{64}$'),
+      safe_result jsonb NOT NULL,
+      preview_expires_at timestamptz NOT NULL,
+      created_at timestamptz NOT NULL DEFAULT now(),
+      PRIMARY KEY (operation_id, preview_checksum)
+    )
+  `);
+    await pool.query(`
+    ALTER TABLE platform_account_reset_cleanup_ledger
+      ADD COLUMN IF NOT EXISTS quarantine_archive_at timestamptz
+  `);
+    await pool.query(`
+    DROP INDEX IF EXISTS platform_account_reset_active_principal_unique;
+    CREATE UNIQUE INDEX platform_account_reset_active_principal_unique
+      ON platform_account_reset_targets (principal_id)
+      WHERE lifecycle IN ('quarantined', 'finalizing', 'finalization_blocked')
+  `);
+    await pool.query(`
+    CREATE UNIQUE INDEX IF NOT EXISTS platform_account_reset_active_email_reservation_unique
+      ON platform_account_reset_email_reservations (realm, normalized_email)
+      WHERE released_at IS NULL
+  `);
+    await pool.query(`
+    CREATE OR REPLACE FUNCTION platform_account_reset_transition_allowed(
+      prior_lifecycle text, next_lifecycle text
+    ) RETURNS boolean AS $$
+      SELECT prior_lifecycle = next_lifecycle OR (prior_lifecycle, next_lifecycle) IN (
+        ('previewed', 'quarantined'),
+        ('quarantined', 'rolled_back'),
+        ('quarantined', 'finalizing'),
+        ('finalizing', 'finalization_blocked'),
+        ('finalizing', 'finalized'),
+        ('finalization_blocked', 'finalizing')
+      )
+    $$ LANGUAGE sql IMMUTABLE
+  `);
+    await pool.query(`
+    CREATE OR REPLACE FUNCTION platform_account_reset_operation_guard() RETURNS trigger AS $$
+    BEGIN
+      IF TG_OP = 'DELETE' THEN
+        RAISE EXCEPTION 'platform account reset operations cannot be deleted';
+      END IF;
+      IF OLD.operation_id IS DISTINCT FROM NEW.operation_id
+        OR OLD.release_sha IS DISTINCT FROM NEW.release_sha
+        OR OLD.rollout_generation IS DISTINCT FROM NEW.rollout_generation
+        OR OLD.workos_realm IS DISTINCT FROM NEW.workos_realm
+        OR OLD.source_epoch IS DISTINCT FROM NEW.source_epoch
+        OR OLD.preview_checksum IS DISTINCT FROM NEW.preview_checksum
+        OR OLD.target_set_fingerprint IS DISTINCT FROM NEW.target_set_fingerprint
+        OR OLD.approved_target_set_fingerprint
+          IS DISTINCT FROM NEW.approved_target_set_fingerprint
+        OR OLD.request_fingerprint IS DISTINCT FROM NEW.request_fingerprint
+        OR OLD.idempotency_key_hash IS DISTINCT FROM NEW.idempotency_key_hash
+        OR OLD.actor_fingerprint IS DISTINCT FROM NEW.actor_fingerprint
+        OR OLD.reason_fingerprint IS DISTINCT FROM NEW.reason_fingerprint
+        OR OLD.safe_result IS DISTINCT FROM NEW.safe_result
+        OR OLD.preview_expires_at IS DISTINCT FROM NEW.preview_expires_at
+        OR (OLD.quarantine_idempotency_key_hash IS NOT NULL
+          AND OLD.quarantine_idempotency_key_hash IS DISTINCT FROM NEW.quarantine_idempotency_key_hash)
+        OR (OLD.quarantine_request_fingerprint IS NOT NULL
+          AND OLD.quarantine_request_fingerprint IS DISTINCT FROM NEW.quarantine_request_fingerprint)
+        OR (OLD.quarantine_reason_fingerprint IS NOT NULL
+          AND OLD.quarantine_reason_fingerprint IS DISTINCT FROM NEW.quarantine_reason_fingerprint)
+        OR (OLD.quarantine_actor_fingerprint IS NOT NULL
+          AND OLD.quarantine_actor_fingerprint IS DISTINCT FROM NEW.quarantine_actor_fingerprint)
+        OR (OLD.quarantine_safe_result IS NOT NULL
+          AND OLD.quarantine_safe_result IS DISTINCT FROM NEW.quarantine_safe_result)
+        OR (OLD.rollback_idempotency_key_hash IS NOT NULL
+          AND OLD.rollback_idempotency_key_hash IS DISTINCT FROM NEW.rollback_idempotency_key_hash)
+        OR (OLD.rollback_request_fingerprint IS NOT NULL
+          AND OLD.rollback_request_fingerprint IS DISTINCT FROM NEW.rollback_request_fingerprint)
+        OR (OLD.rollback_reason_fingerprint IS NOT NULL
+          AND OLD.rollback_reason_fingerprint IS DISTINCT FROM NEW.rollback_reason_fingerprint)
+        OR (OLD.rollback_actor_fingerprint IS NOT NULL
+          AND OLD.rollback_actor_fingerprint IS DISTINCT FROM NEW.rollback_actor_fingerprint)
+        OR (OLD.rollback_safe_result IS NOT NULL
+          AND OLD.rollback_safe_result IS DISTINCT FROM NEW.rollback_safe_result) THEN
+        RAISE EXCEPTION 'platform account reset operation evidence is immutable';
+      END IF;
+      IF NOT platform_account_reset_transition_allowed(OLD.lifecycle, NEW.lifecycle) THEN
+        RAISE EXCEPTION 'platform account reset lifecycle transition is invalid';
+      END IF;
+      RETURN NEW;
+    END;
+    $$ LANGUAGE plpgsql
+  `);
+    await pool.query(`
+    CREATE OR REPLACE FUNCTION platform_account_reset_cleanup_guard() RETURNS trigger AS $$
+    BEGIN
+      IF TG_OP = 'DELETE' THEN
+        RAISE EXCEPTION 'platform account reset cleanup identity is immutable';
+      END IF;
+      IF OLD.ledger_id IS DISTINCT FROM NEW.ledger_id
+        OR OLD.operation_id IS DISTINCT FROM NEW.operation_id
+        OR OLD.provider IS DISTINCT FROM NEW.provider
+        OR OLD.resource_kind IS DISTINCT FROM NEW.resource_kind
+        OR OLD.provider_locator IS DISTINCT FROM NEW.provider_locator
+        OR OLD.locator_fingerprint IS DISTINCT FROM NEW.locator_fingerprint
+        OR OLD.created_at IS DISTINCT FROM NEW.created_at
+        OR (OLD.quarantine_archive_at IS NOT NULL
+          AND OLD.quarantine_archive_at IS DISTINCT FROM NEW.quarantine_archive_at) THEN
+        RAISE EXCEPTION 'platform account reset cleanup identity is immutable';
+      END IF;
+      RETURN NEW;
+    END;
+    $$ LANGUAGE plpgsql
+  `);
+    await pool.query(`
+    CREATE OR REPLACE FUNCTION platform_account_reset_action_evidence_guard_v1()
+      RETURNS trigger AS $$
+    BEGIN
+      IF (OLD.quarantine_idempotency_key_hash IS NOT NULL
+          AND OLD.quarantine_idempotency_key_hash IS DISTINCT FROM NEW.quarantine_idempotency_key_hash)
+        OR (OLD.quarantine_request_fingerprint IS NOT NULL
+          AND OLD.quarantine_request_fingerprint IS DISTINCT FROM NEW.quarantine_request_fingerprint)
+        OR (OLD.quarantine_reason_fingerprint IS NOT NULL
+          AND OLD.quarantine_reason_fingerprint IS DISTINCT FROM NEW.quarantine_reason_fingerprint)
+        OR (OLD.quarantine_actor_fingerprint IS NOT NULL
+          AND OLD.quarantine_actor_fingerprint IS DISTINCT FROM NEW.quarantine_actor_fingerprint)
+        OR (OLD.quarantine_safe_result IS NOT NULL
+          AND OLD.quarantine_safe_result IS DISTINCT FROM NEW.quarantine_safe_result)
+        OR (OLD.rollback_idempotency_key_hash IS NOT NULL
+          AND OLD.rollback_idempotency_key_hash IS DISTINCT FROM NEW.rollback_idempotency_key_hash)
+        OR (OLD.rollback_request_fingerprint IS NOT NULL
+          AND OLD.rollback_request_fingerprint IS DISTINCT FROM NEW.rollback_request_fingerprint)
+        OR (OLD.rollback_reason_fingerprint IS NOT NULL
+          AND OLD.rollback_reason_fingerprint IS DISTINCT FROM NEW.rollback_reason_fingerprint)
+        OR (OLD.rollback_actor_fingerprint IS NOT NULL
+          AND OLD.rollback_actor_fingerprint IS DISTINCT FROM NEW.rollback_actor_fingerprint)
+        OR (OLD.rollback_safe_result IS NOT NULL
+          AND OLD.rollback_safe_result IS DISTINCT FROM NEW.rollback_safe_result) THEN
+        RAISE EXCEPTION 'platform account reset action evidence is immutable';
+      END IF;
+      RETURN NEW;
+    END;
+    $$ LANGUAGE plpgsql
+  `);
+    await pool.query(`
+    CREATE OR REPLACE FUNCTION platform_account_reset_archive_stamp_guard_v1()
+      RETURNS trigger AS $$
+    BEGIN
+      IF OLD.quarantine_archive_at IS NOT NULL
+        AND OLD.quarantine_archive_at IS DISTINCT FROM NEW.quarantine_archive_at THEN
+        RAISE EXCEPTION 'platform account reset archive stamp is immutable';
+      END IF;
+      RETURN NEW;
+    END;
+    $$ LANGUAGE plpgsql
+  `);
+    await pool.query(`
+    CREATE OR REPLACE FUNCTION platform_account_reset_rollback_preview_append_only_v1()
+      RETURNS trigger AS $$
+    BEGIN
+      RAISE EXCEPTION 'platform account reset rollback previews are append-only';
+    END;
+    $$ LANGUAGE plpgsql
+  `);
+    await pool.query(`
+    CREATE OR REPLACE FUNCTION platform_account_reset_target_guard() RETURNS trigger AS $$
+    BEGIN
+      IF TG_OP = 'DELETE' THEN
+        RAISE EXCEPTION 'platform account reset targets cannot be deleted';
+      END IF;
+      IF OLD.operation_id IS DISTINCT FROM NEW.operation_id
+        OR OLD.principal_id IS DISTINCT FROM NEW.principal_id
+        OR OLD.target_fingerprint IS DISTINCT FROM NEW.target_fingerprint
+        OR OLD.source_snapshot_fingerprint IS DISTINCT FROM NEW.source_snapshot_fingerprint THEN
+        RAISE EXCEPTION 'platform account reset target identity is immutable';
+      END IF;
+      IF NOT platform_account_reset_transition_allowed(OLD.lifecycle, NEW.lifecycle) THEN
+        RAISE EXCEPTION 'platform account reset target lifecycle transition is invalid';
+      END IF;
+      RETURN NEW;
+    END;
+    $$ LANGUAGE plpgsql
+  `);
+    await pool.query(`
+    CREATE OR REPLACE FUNCTION platform_account_reset_event_append_only() RETURNS trigger AS $$
+    BEGIN
+      RAISE EXCEPTION 'platform account reset events are append-only';
+    END;
+    $$ LANGUAGE plpgsql
+  `);
+    await pool.query(`
+    CREATE OR REPLACE FUNCTION platform_signup_email_lock_key(
+      realm text, normalized_email text
+    ) RETURNS text AS $$
+      SELECT 'platform-email:'
+        || octet_length(convert_to(realm, 'UTF8'))::text
+        || ':' || realm || ':' || normalized_email
+    $$ LANGUAGE sql IMMUTABLE STRICT
+  `);
+    await pool.query(`
+    CREATE OR REPLACE FUNCTION platform_account_reset_reservation_fence() RETURNS trigger AS $$
+    BEGIN
+      PERFORM pg_advisory_xact_lock(
+        hashtextextended(platform_signup_email_lock_key(NEW.realm, NEW.normalized_email), 0)
+      );
+      IF to_regclass('platform_identity_sync_outbox') IS NOT NULL
+         AND EXISTS (
+           SELECT 1
+             FROM platform_identity_sync_outbox o
+            WHERE o.delivered_at IS NULL
+              AND o.failed_at IS NULL
+              AND o.lease_token IS NOT NULL
+              AND (
+                o.lease_workos_realm IS NULL
+                OR o.lease_normalized_email IS NULL
+                OR o.lease_mode IS NULL
+                OR (
+                  o.lease_mode = 'unlinked_create'
+                  AND o.lease_workos_realm = NEW.realm
+                  AND o.lease_normalized_email = NEW.normalized_email
+                )
+              )
+         ) THEN
+        RAISE EXCEPTION 'identity sync create is in flight';
+      END IF;
+      IF to_regclass('platform_identity_links') IS NOT NULL
+         AND to_regclass('platform_verified_emails') IS NOT NULL
+         AND (
+           EXISTS (
+             SELECT 1
+               FROM platform_identity_links l
+              WHERE l.principal_id = NEW.principal_id
+                AND l.provider = 'workos'
+                AND l.realm = NEW.realm
+                AND l.disabled_at IS NULL
+           )
+           OR EXISTS (
+             SELECT 1
+               FROM platform_identity_links l
+               JOIN platform_verified_emails e ON e.principal_id = l.principal_id
+              WHERE l.provider = 'workos'
+                AND l.realm = NEW.realm
+                AND l.disabled_at IS NULL
+                AND e.normalized_email = NEW.normalized_email
+                AND e.status = 'active'
+           )
+         ) THEN
+        RAISE EXCEPTION 'platform account reset reservation identity drift';
+      END IF;
+      RETURN NEW;
+    END;
+    $$ LANGUAGE plpgsql
+  `);
+    await pool.query(`
+    DROP TRIGGER IF EXISTS platform_account_reset_operation_guard_trigger
+      ON platform_account_reset_operations;
+    CREATE TRIGGER platform_account_reset_operation_guard_trigger
+      BEFORE UPDATE OR DELETE ON platform_account_reset_operations
+      FOR EACH ROW EXECUTE FUNCTION platform_account_reset_operation_guard();
+    DROP TRIGGER IF EXISTS platform_account_reset_target_guard_trigger
+      ON platform_account_reset_targets;
+    CREATE TRIGGER platform_account_reset_target_guard_trigger
+      BEFORE UPDATE OR DELETE ON platform_account_reset_targets
+      FOR EACH ROW EXECUTE FUNCTION platform_account_reset_target_guard();
+    DROP TRIGGER IF EXISTS platform_account_reset_cleanup_guard_trigger
+      ON platform_account_reset_cleanup_ledger;
+    CREATE TRIGGER platform_account_reset_cleanup_guard_trigger
+      BEFORE UPDATE OR DELETE ON platform_account_reset_cleanup_ledger
+      FOR EACH ROW EXECUTE FUNCTION platform_account_reset_cleanup_guard();
+    DROP TRIGGER IF EXISTS platform_account_reset_action_evidence_guard_v1_trigger
+      ON platform_account_reset_operations;
+    CREATE TRIGGER platform_account_reset_action_evidence_guard_v1_trigger
+      BEFORE UPDATE ON platform_account_reset_operations
+      FOR EACH ROW EXECUTE FUNCTION platform_account_reset_action_evidence_guard_v1();
+    DROP TRIGGER IF EXISTS platform_account_reset_archive_stamp_guard_v1_trigger
+      ON platform_account_reset_cleanup_ledger;
+    CREATE TRIGGER platform_account_reset_archive_stamp_guard_v1_trigger
+      BEFORE UPDATE ON platform_account_reset_cleanup_ledger
+      FOR EACH ROW EXECUTE FUNCTION platform_account_reset_archive_stamp_guard_v1();
+    DROP TRIGGER IF EXISTS platform_account_reset_rollback_preview_append_only_v1_trigger
+      ON platform_account_reset_rollback_previews;
+    CREATE TRIGGER platform_account_reset_rollback_preview_append_only_v1_trigger
+      BEFORE UPDATE OR DELETE ON platform_account_reset_rollback_previews
+      FOR EACH ROW EXECUTE FUNCTION platform_account_reset_rollback_preview_append_only_v1();
+    DROP TRIGGER IF EXISTS platform_account_reset_event_append_only_trigger
+      ON platform_account_reset_events;
+    CREATE TRIGGER platform_account_reset_event_append_only_trigger
+      BEFORE UPDATE OR DELETE ON platform_account_reset_events
+      FOR EACH ROW EXECUTE FUNCTION platform_account_reset_event_append_only();
+    DROP TRIGGER IF EXISTS platform_account_reset_reservation_fence_trigger
+      ON platform_account_reset_email_reservations;
+    CREATE TRIGGER platform_account_reset_reservation_fence_trigger
+      BEFORE INSERT ON platform_account_reset_email_reservations
+      FOR EACH ROW EXECUTE FUNCTION platform_account_reset_reservation_fence()
+  `);
+    await pool.query(`
+    REVOKE ALL ON platform_account_reset_operations,
+      platform_account_reset_targets,
+      platform_account_reset_email_reservations,
+      platform_account_reset_cleanup_ledger,
+      platform_account_reset_events,
+      platform_account_reset_rollback_previews FROM PUBLIC
+  `);
+}
+//# sourceMappingURL=platform-account-reset-schema-postgres.js.map

package/node_modules/@noodle-borg/service/dist/platform-account-reset-schema-postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-account-reset-schema-postgres.js","sourceRoot":"","sources":["../src/platform-account-reset-schema-postgres.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,IAA+B;IAE/B,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CACd,+gBAA+gB,CAChhB,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;GAKhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;GAchB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;GAWhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;GAkBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;GAehB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;GAgBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;GAKhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;GAIhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;GAahB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;GAoBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;GAWhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;GAOhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;GAkBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;GAMhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;GAQhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyChB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;GAOhB,CAAC,CAAC;AACL,CAAC"}