@noodleseed/one 0.83.0 → 0.84.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli.d.ts.map +1 -1
- package/dist/cli.js +4 -1
- package/dist/cli.js.map +1 -1
- package/dist/commands/author-loop.d.ts.map +1 -1
- package/dist/commands/author-loop.js +7 -7
- package/dist/commands/author-loop.js.map +1 -1
- package/dist/commands/catalog-data-platform-auth.d.ts.map +1 -1
- package/dist/commands/catalog-data-platform-auth.js +70 -2
- package/dist/commands/catalog-data-platform-auth.js.map +1 -1
- package/dist/commands/platform-account-reset-args.d.ts +40 -0
- package/dist/commands/platform-account-reset-args.d.ts.map +1 -0
- package/dist/commands/platform-account-reset-args.js +181 -0
- package/dist/commands/platform-account-reset-args.js.map +1 -0
- package/dist/commands/platform-account-reset-files.d.ts +9 -0
- package/dist/commands/platform-account-reset-files.d.ts.map +1 -0
- package/dist/commands/platform-account-reset-files.js +45 -0
- package/dist/commands/platform-account-reset-files.js.map +1 -0
- package/dist/commands/platform-account-reset-ops.d.ts +3 -0
- package/dist/commands/platform-account-reset-ops.d.ts.map +1 -0
- package/dist/commands/platform-account-reset-ops.js +162 -0
- package/dist/commands/platform-account-reset-ops.js.map +1 -0
- package/dist/plugin-mode/build-readiness-recorder.d.ts.map +1 -1
- package/dist/plugin-mode/build-readiness-recorder.js +3 -1
- package/dist/plugin-mode/build-readiness-recorder.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.js +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.js +3 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-embedded-assistant-ref.js +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-embedded-assistant-ref.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-operations-refs.js +2 -2
- package/node_modules/@noodle-borg/agent-kit/dist/skill-operations-refs.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/package.json +1 -1
- package/node_modules/@noodle-borg/service/dist/billing/enforcement-activation.d.ts +4 -4
- package/node_modules/@noodle-borg/service/dist/billing/read-contract.d.ts +6 -6
- package/node_modules/@noodle-borg/service/dist/index.d.ts +4 -1
- package/node_modules/@noodle-borg/service/dist/index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/index.js +2 -0
- package/node_modules/@noodle-borg/service/dist/index.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/main.js +5 -0
- package/node_modules/@noodle-borg/service/dist/main.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-flow.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-flow.js +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-flow.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/provider.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/provider.js +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/provider.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres-schema.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres-schema.js +17 -0
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres-schema.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres.d.ts +2 -2
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres.js +25 -5
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/store.d.ts +5 -3
- package/node_modules/@noodle-borg/service/dist/oauth/store.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/store.js +5 -5
- package/node_modules/@noodle-borg/service/dist/oauth/store.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-handler.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-handler.js +7 -2
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-handler.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-support.d.ts +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-support.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-support.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-consent.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-consent.js +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-consent.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-federation.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-federation.js +6 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-federation.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/options.d.ts +13 -0
- package/node_modules/@noodle-borg/service/dist/options.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-config.d.ts +9 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-config.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-config.js +24 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-config.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-dispatch-lock-postgres.d.ts +12 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-dispatch-lock-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-dispatch-lock-postgres.js +110 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-dispatch-lock-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-fingerprint.d.ts +9 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-fingerprint.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-fingerprint.js +46 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-fingerprint.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-operation-postgres.d.ts +77 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-operation-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-operation-postgres.js +144 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-operation-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-operator.d.ts +29 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-operator.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-operator.js +59 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-operator.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-ownership-helpers.d.ts +11 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-ownership-helpers.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-ownership-helpers.js +22 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-ownership-helpers.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-ownership-postgres.d.ts +41 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-ownership-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-ownership-postgres.js +314 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-ownership-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-ownership-resources-postgres.d.ts +14 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-ownership-resources-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-ownership-resources-postgres.js +210 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-ownership-resources-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-ownership-rollback-postgres.d.ts +11 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-ownership-rollback-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-ownership-rollback-postgres.js +71 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-ownership-rollback-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-ports.d.ts +12 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-ports.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-ports.js +2 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-ports.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-evidence-postgres.d.ts +22 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-evidence-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-evidence-postgres.js +177 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-evidence-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-local-postgres.d.ts +35 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-local-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-local-postgres.js +184 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-local-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-persistence-postgres.d.ts +11 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-persistence-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-persistence-postgres.js +120 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-persistence-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-postgres.d.ts +79 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-postgres.js +286 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-result.d.ts +21 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-result.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-result.js +81 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-result.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-quarantine-postgres.d.ts +46 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-quarantine-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-quarantine-postgres.js +283 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-quarantine-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-rollback-eligibility-postgres.d.ts +13 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-rollback-eligibility-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-rollback-eligibility-postgres.js +81 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-rollback-eligibility-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-rollback-local-postgres.d.ts +30 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-rollback-local-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-rollback-local-postgres.js +248 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-rollback-local-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-rollback-postgres.d.ts +29 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-rollback-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-rollback-postgres.js +281 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-rollback-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-rollback-preview-postgres.d.ts +55 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-rollback-preview-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-rollback-preview-postgres.js +262 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-rollback-preview-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-schema-postgres.d.ts +7 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-schema-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-schema-postgres.js +439 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset-schema-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset.d.ts +276 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset.js +141 -0
- package/node_modules/@noodle-borg/service/dist/platform-account-reset.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-configuration.d.ts +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-legacy-sources-postgres.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-legacy-sources-postgres.js +5 -1
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-legacy-sources-postgres.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-local-subjects-postgres.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-local-subjects-postgres.js +10 -1
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-local-subjects-postgres.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-postgres.d.ts +5 -10
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-postgres.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-postgres.js +86 -47
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-postgres.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-transaction-postgres.d.ts +17 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-transaction-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-transaction-postgres.js +240 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-transaction-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator.d.ts +63 -63
- package/node_modules/@noodle-borg/service/dist/platform-auth-rollout-support.d.ts +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-auth-runtime.d.ts +18 -1
- package/node_modules/@noodle-borg/service/dist/platform-auth-runtime.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-auth-runtime.js +97 -2
- package/node_modules/@noodle-borg/service/dist/platform-auth-runtime.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-auth-service-bootstrap.d.ts +4 -1
- package/node_modules/@noodle-borg/service/dist/platform-auth-service-bootstrap.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-auth-service-bootstrap.js +4 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-service-bootstrap.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-identity-postgres.d.ts +7 -2
- package/node_modules/@noodle-borg/service/dist/platform-identity-postgres.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-identity-postgres.js +24 -2
- package/node_modules/@noodle-borg/service/dist/platform-identity-postgres.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-identity-schema-postgres.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-identity-schema-postgres.js +4 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-schema-postgres.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-postgres.d.ts +7 -1
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-postgres.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-postgres.js +121 -8
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-postgres.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-recovery-postgres.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-recovery-postgres.js +11 -1
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-recovery-postgres.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync.d.ts +5 -3
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync.js +15 -1
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-identity.d.ts +23 -2
- package/node_modules/@noodle-borg/service/dist/platform-identity.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-identity.js +21 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/registry-state.d.ts +8 -0
- package/node_modules/@noodle-borg/service/dist/registry-state.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/registry-state.js +15 -2
- package/node_modules/@noodle-borg/service/dist/registry-state.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/registry.d.ts +2 -0
- package/node_modules/@noodle-borg/service/dist/registry.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/registry.js +4 -1
- package/node_modules/@noodle-borg/service/dist/registry.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/platform-account-reset-dispatch.d.ts +8 -0
- package/node_modules/@noodle-borg/service/dist/routes/platform-account-reset-dispatch.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/platform-account-reset-dispatch.js +36 -0
- package/node_modules/@noodle-borg/service/dist/routes/platform-account-reset-dispatch.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/platform-account-reset.d.ts +22 -0
- package/node_modules/@noodle-borg/service/dist/routes/platform-account-reset.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/platform-account-reset.js +201 -0
- package/node_modules/@noodle-borg/service/dist/routes/platform-account-reset.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/private-platform-auth-dispatch.d.ts +18 -0
- package/node_modules/@noodle-borg/service/dist/routes/private-platform-auth-dispatch.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/private-platform-auth-dispatch.js +36 -0
- package/node_modules/@noodle-borg/service/dist/routes/private-platform-auth-dispatch.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/serve-options.d.ts +2 -1
- package/node_modules/@noodle-borg/service/dist/serve-options.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/serve.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/serve.js +16 -1
- package/node_modules/@noodle-borg/service/dist/serve.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/service.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/service.js +4 -5
- package/node_modules/@noodle-borg/service/dist/service.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/workos-directory.d.ts +22 -3
- package/node_modules/@noodle-borg/service/dist/workos-directory.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/workos-directory.js +56 -5
- package/node_modules/@noodle-borg/service/dist/workos-directory.js.map +1 -1
- package/package.json +1 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"platform-auth-runtime.js","sourceRoot":"","sources":["../src/platform-auth-runtime.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gCAAgC,EAChC,oBAAoB,EAEpB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,+BAA+B,EAE/B,kCAAkC,GACnC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAEL,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,kCAAkC,EAAE,MAAM,uCAAuC,CAAC;AAC3F,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,uCAAuC,EAAE,MAAM,wCAAwC,CAAC;AACjG,OAAO,EAAE,2CAA2C,EAAE,MAAM,iDAAiD,CAAC;AAC9G,OAAO,EAAE,gCAAgC,EAAE,MAAM,qCAAqC,CAAC;AACvF,OAAO,EAEL,6BAA6B,GAC9B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,iCAAiC,EAAE,MAAM,sCAAsC,CAAC;AACzF,OAAO,EAAE,yCAAyC,EAAE,MAAM,+CAA+C,CAAC;AAC1G,OAAO,
|
|
1
|
+
{"version":3,"file":"platform-auth-runtime.js","sourceRoot":"","sources":["../src/platform-auth-runtime.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gCAAgC,EAChC,oBAAoB,EAEpB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,mCAAmC,GACpC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,gDAAgD,EAAE,MAAM,yCAAyC,CAAC;AAE3G,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAEpF,OAAO,EAAE,wCAAwC,EAAE,MAAM,8CAA8C,CAAC;AACxG,OAAO,EAAE,2CAA2C,EAAE,MAAM,iDAAiD,CAAC;AAC9G,OAAO,EAAE,yCAAyC,EAAE,MAAM,+CAA+C,CAAC;AAC1G,OAAO,EAAE,gDAAgD,EAAE,MAAM,uDAAuD,CAAC;AACzH,OAAO,EACL,+BAA+B,EAE/B,kCAAkC,GACnC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,oCAAoC,EAAE,MAAM,oDAAoD,CAAC;AAC1G,OAAO,EAEL,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,kCAAkC,EAAE,MAAM,uCAAuC,CAAC;AAC3F,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,uCAAuC,EAAE,MAAM,wCAAwC,CAAC;AACjG,OAAO,EAAE,2CAA2C,EAAE,MAAM,iDAAiD,CAAC;AAC9G,OAAO,EAAE,gCAAgC,EAAE,MAAM,qCAAqC,CAAC;AACvF,OAAO,EAEL,6BAA6B,GAC9B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,iCAAiC,EAAE,MAAM,sCAAsC,CAAC;AACzF,OAAO,EAAE,yCAAyC,EAAE,MAAM,+CAA+C,CAAC;AAC1G,OAAO,EAAsC,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAuBnG,8FAA8F;AAC9F,MAAM,UAAU,2CAA2C,CAAC,KAY3D;IACC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IACzB,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChG,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,iCAAiC,CAAC;QACvC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;QACjF,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,EAAE;QAC9C,GAAG,CAAC,KAAK,CAAC,6BAA6B,KAAK,SAAS;YACnD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,6BAA6B,EAAE,KAAK,CAAC,6BAA6B,EAAE,CAAC;KAC5E,CAAC,CAAC;AACL,CAAC;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,KAWvD;IACC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,gCAAgC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,SAAS,GACb,KAAK,CAAC,SAAS;QACf,sBAAsB,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,IAAI,iCAAiC,CAAC,KAAK,CAAC,IAAI,EAAE;QAClE,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;KAChC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,IAAI,6BAA6B,CAAC;QACxD,KAAK,EAAE,SAAS;QAChB,SAAS;KACV,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,IAAI,oBAAoB,CAAC;QAC/C,MAAM,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;QAC5E,KAAK,EAAE,IAAI,gCAAgC,CAAC,KAAK,CAAC,IAAI,CAAC;QACvD,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;KAC1B,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,IAAI,kCAAkC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,uBAAuB,GAAG,IAAI,2CAA2C,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5F,MAAM,wBAAwB,GAAG,IAAI,uCAAuC,CAC1E,uBAAuB,EACvB,SAAS,CACV,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,4BAA4B,CAAC;QAChD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,cAAc,EAAE,IAAI,kCAAkC,CAAC,KAAK,CAAC,IAAI,EAAE;YACjE,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;YAC/B,gBAAgB,EAAE;gBAChB,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;oBACvB,IAAI,SAAS,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;wBAC9C,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;oBACjF,CAAC;oBACD,OAAO,SAAS,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBAC3C,CAAC;aACF;YACD,kBAAkB,EAAE,0BAA0B,EAAE;YAChD,gBAAgB,EAAE;gBAChB,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBAClD,OAAO;oBACP,IAAI,EAAE,UAAmB;iBAC1B,CAAC,CAAC;gBACH,GAAG,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBACnD,OAAO;oBACP,IAAI,EAAE,WAAoB;iBAC3B,CAAC,CAAC;aACJ;SACF,CAAC;QACF,cAAc;QACd,aAAa,EAAE,IAAI,yBAAyB,CAAC,cAAc,EAAE,SAAS,CAAC;QACvE,YAAY,EAAE,IAAI,gCAAgC,CAAC,KAAK,CAAC,IAAI,EAAE;YAC7D,SAAS,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE;YACjF,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE;YACtE,uBAAuB;SACxB,CAAC;QACF,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;QAC/B,eAAe;QACf,mBAAmB,EAAE,IAAI,yCAAyC,CAAC,KAAK,CAAC,IAAI,EAAE;YAC7E,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;SAChC,CAAC;QACF,eAAe;QACf,wBAAwB;QACxB,uBAAuB;KACxB,CAAC,CAAC;IACH,MAAM,kBAAkB,GAAG,0BAA0B,EAAE,CAAC;IACxD,MAAM,gBAAgB,GAAG;QACvB,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAClD,OAAO;YACP,IAAI,EAAE,UAAmB;SAC1B,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACnD,OAAO;YACP,IAAI,EAAE,WAAoB;SAC3B,CAAC,CAAC;KACJ,CAAC;IACF,MAAM,iBAAiB,GACrB,KAAK,CAAC,6BAA6B,KAAK,SAAS;QAC/C,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,mCAAmC,CAAC,KAAK,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACrF,MAAM,4BAA4B,GAChC,iBAAiB,KAAK,SAAS;QAC7B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,gDAAgD,CAAC,iBAAiB,CAAC,CAAC;IAC1E,MAAM,YAAY,GAChB,iBAAiB,KAAK,SAAS,IAAI,4BAA4B,KAAK,SAAS;QAC3E,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACE,iBAAiB;YACjB,QAAQ,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,EAAE;gBAChD,MAAM,OAAO,GAAG,IAAI,wCAAwC,CAAC,KAAK,CAAC,IAAI,EAAE;oBACvE,SAAS;oBACT,kBAAkB;oBAClB,WAAW,EAAE,qBAAqB;oBAClC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;oBAC/B,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,gBAAgB;oBAChB,4BAA4B;oBAC5B,gBAAgB;iBACjB,CAAC,CAAC;gBACH,MAAM,eAAe,GAAG,IAAI,gDAAgD,CAC1E,KAAK,CAAC,IAAI,EACV;oBACE,SAAS;oBACT,kBAAkB;oBAClB,WAAW,EAAE,qBAAqB;oBAClC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;oBAC/B,UAAU,EAAE,KAAK,CAAC,UAAU;iBAC7B,CACF,CAAC;gBACF,OAAO,IAAI,4BAA4B,CAAC;oBACtC,OAAO;oBACP,eAAe;oBACf,UAAU,EAAE,IAAI,2CAA2C,CAAC,KAAK,CAAC,IAAI,EAAE;wBACtE,OAAO;wBACP,kBAAkB;wBAClB,UAAU,EAAE,KAAK,CAAC,UAAU;wBAC5B,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;wBAC/B,4BAA4B;wBAC5B,gBAAgB;qBACjB,CAAC;oBACF,QAAQ,EAAE,IAAI,yCAAyC,CAAC,KAAK,CAAC,IAAI,EAAE;wBAClE,OAAO,EAAE,eAAe;wBACxB,kBAAkB;wBAClB,UAAU,EAAE,KAAK,CAAC,UAAU;wBAC5B,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;wBAC/B,4BAA4B;wBAC5B,gBAAgB;qBACjB,CAAC;oBACF,WAAW,EAAE,KAAK,CAAC,IAAI;oBACvB,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC;iBAClE,CAAC,CAAC;YACL,CAAC;YACD,cAAc,EAAE,KAAK,IAAI,EAAE;gBACzB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CACpC,2EAA2E,CAC5E,CAAC;gBACF,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;gBAC/D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;oBACxE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;gBAC9E,CAAC;gBACD,OAAO;oBACL,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,kBAAkB;oBAClB,WAAW,EAAE,MAAM,CAAC,MAAM,oCAAoC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC3E,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;iBAChC,CAAC;YACJ,CAAC;SACF,CAAC;IACR,OAAO;QACL,QAAQ;QACR,eAAe;QACf,eAAe;QACf,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B;IACjC,OAAO,MAAM,CAAC,WAAW,CACvB,+BAA+B,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,CAAU,CAAC,CAC1C,CAAC;AAC3C,CAAC"}
|
|
@@ -1,10 +1,12 @@
|
|
|
1
1
|
import type { Pool } from 'pg';
|
|
2
2
|
import { type DurableUpstreamHumanRollout, type UpstreamHumanRolloutStore } from './oauth/upstream-rollout-store.js';
|
|
3
|
+
import type { PlatformAccountResetTargetSet } from './platform-account-reset.js';
|
|
3
4
|
import type { PlatformAuthOperator } from './platform-auth-operator.js';
|
|
4
|
-
import { type PostgresPlatformAuthRuntime } from './platform-auth-runtime.js';
|
|
5
|
+
import { type PostgresPlatformAccountResetRuntime, type PostgresPlatformAuthRuntime } from './platform-auth-runtime.js';
|
|
5
6
|
export interface PlatformAuthServiceBootstrap {
|
|
6
7
|
readonly operator?: PlatformAuthOperator;
|
|
7
8
|
readonly runtime?: PostgresPlatformAuthRuntime;
|
|
9
|
+
readonly accountReset?: PostgresPlatformAccountResetRuntime;
|
|
8
10
|
readonly rolloutStore?: UpstreamHumanRolloutStore;
|
|
9
11
|
readonly assertContinuity?: () => Promise<void>;
|
|
10
12
|
}
|
|
@@ -25,6 +27,7 @@ export declare function resolvePlatformAuthServiceBootstrap(input: {
|
|
|
25
27
|
readonly realm?: string;
|
|
26
28
|
} | undefined;
|
|
27
29
|
readonly workloadSubjects: readonly string[] | undefined;
|
|
30
|
+
readonly approvedAccountResetTargetSet?: PlatformAccountResetTargetSet;
|
|
28
31
|
readonly googleHumanAuthAvailable: boolean;
|
|
29
32
|
readonly durablePlatformIdentityAvailable: boolean;
|
|
30
33
|
readonly configuredOperator?: PlatformAuthOperator;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"platform-auth-service-bootstrap.d.ts","sourceRoot":"","sources":["../src/platform-auth-service-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EACL,KAAK,2BAA2B,EAEhC,KAAK,yBAAyB,EAC/B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAExE,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,4BAA4B,CAAC;AAEpC,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,2BAA2B,CAAC;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,yBAAyB,CAAC;IAClD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD;AAED,0GAA0G;AAC1G,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,gCAAgC,EAAE,OAAO,CAAC;IACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,2BAA2B,CAAC;CAChD,GAAG,IAAI,CAQP;AAED,4FAA4F;AAC5F,wBAAsB,mCAAmC,CAAC,KAAK,EAAE;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EACX;QACE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;KACzB,GACD,SAAS,CAAC;IACd,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,gCAAgC,EAAE,OAAO,CAAC;IACnD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,oBAAoB,CAAC;CACpD,GAAG,OAAO,CAAC,4BAA4B,CAAC,
|
|
1
|
+
{"version":3,"file":"platform-auth-service-bootstrap.d.ts","sourceRoot":"","sources":["../src/platform-auth-service-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EACL,KAAK,2BAA2B,EAEhC,KAAK,yBAAyB,EAC/B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAExE,OAAO,EAEL,KAAK,mCAAmC,EACxC,KAAK,2BAA2B,EACjC,MAAM,4BAA4B,CAAC;AAEpC,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,2BAA2B,CAAC;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,mCAAmC,CAAC;IAC5D,QAAQ,CAAC,YAAY,CAAC,EAAE,yBAAyB,CAAC;IAClD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD;AAED,0GAA0G;AAC1G,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,gCAAgC,EAAE,OAAO,CAAC;IACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,2BAA2B,CAAC;CAChD,GAAG,IAAI,CAQP;AAED,4FAA4F;AAC5F,wBAAsB,mCAAmC,CAAC,KAAK,EAAE;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EACX;QACE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;KACzB,GACD,SAAS,CAAC;IACd,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,6BAA6B,CAAC,EAAE,6BAA6B,CAAC;IACvE,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,gCAAgC,EAAE,OAAO,CAAC;IACnD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,oBAAoB,CAAC;CACpD,GAAG,OAAO,CAAC,4BAA4B,CAAC,CA2DxC"}
|
|
@@ -36,6 +36,7 @@ export async function resolvePlatformAuthServiceBootstrap(input) {
|
|
|
36
36
|
releaseSha: input.releaseSha,
|
|
37
37
|
workos: input.workos,
|
|
38
38
|
workloadSubjects: input.workloadSubjects,
|
|
39
|
+
approvedAccountResetTargetSet: input.approvedAccountResetTargetSet,
|
|
39
40
|
});
|
|
40
41
|
const rolloutStore = new PostgresUpstreamHumanRolloutStore(input.pool, {
|
|
41
42
|
...(workosComplete
|
|
@@ -63,6 +64,9 @@ export async function resolvePlatformAuthServiceBootstrap(input) {
|
|
|
63
64
|
assertContinuity,
|
|
64
65
|
...(operator === undefined ? {} : { operator }),
|
|
65
66
|
...(runtime === undefined ? {} : { runtime }),
|
|
67
|
+
...(runtime?.accountReset === undefined || !input.durablePlatformIdentityAvailable
|
|
68
|
+
? {}
|
|
69
|
+
: { accountReset: runtime.accountReset }),
|
|
66
70
|
};
|
|
67
71
|
}
|
|
68
72
|
//# sourceMappingURL=platform-auth-service-bootstrap.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"platform-auth-service-bootstrap.js","sourceRoot":"","sources":["../src/platform-auth-service-bootstrap.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,iCAAiC,GAElC,MAAM,mCAAmC,CAAC;
|
|
1
|
+
{"version":3,"file":"platform-auth-service-bootstrap.js","sourceRoot":"","sources":["../src/platform-auth-service-bootstrap.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,iCAAiC,GAElC,MAAM,mCAAmC,CAAC;AAG3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EACL,2CAA2C,GAG5C,MAAM,4BAA4B,CAAC;AAUpC,0GAA0G;AAC1G,MAAM,UAAU,0BAA0B,CAAC,KAK1C;IACC,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,KAAK,CAAC,wBAAwB;QAAE,OAAO;IAC9E,IAAI,CAAC,KAAK,CAAC,gCAAgC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,EAAE,gBAAgB,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,KAezD;IACC,MAAM,cAAc,GAClB,KAAK,CAAC,MAAM,EAAE,MAAM,KAAK,SAAS;QAClC,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;QACnC,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC;IACnC,IACE,cAAc;QACd,CAAC,KAAK,CAAC,wBAAwB;QAC/B,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,gCAAgC,CAAC,EACrE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,kBAAkB,KAAK,SAAS;YAC3C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,QAAQ,EAAE,yBAAyB,CAAC,KAAK,CAAC,kBAAkB,EAAE;oBAC5D,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;iBACzD,CAAC;aACH,CAAC;IACR,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,2CAA2C,CAAC;QAChE,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,6BAA6B,EAAE,KAAK,CAAC,6BAA6B;KACnE,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,IAAI,iCAAiC,CAAC,KAAK,CAAC,IAAI,EAAE;QACrE,GAAG,CAAC,cAAc;YAChB,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE;YAC5E,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,KAAK,IAAI,EAAE;QAClC,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC;QACzC,0BAA0B,CAAC;YACzB,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,wBAAwB,EAAE,cAAc;YACxC,gCAAgC,EAAE,KAAK,CAAC,gCAAgC;YACxE,OAAO;SACR,CAAC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,gBAAgB,EAAE,CAAC;IACzB,MAAM,gBAAgB,GAAG,KAAK,CAAC,kBAAkB,IAAI,OAAO,EAAE,QAAQ,CAAC;IACvE,MAAM,QAAQ,GACZ,gBAAgB,KAAK,SAAS;QAC5B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,yBAAyB,CAAC,gBAAgB,EAAE;YAC1C,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;SACzD,CAAC,CAAC;IACT,OAAO;QACL,YAAY;QACZ,gBAAgB;QAChB,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QAC7C,GAAG,CAAC,OAAO,EAAE,YAAY,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,gCAAgC;YAChF,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC"}
|
|
@@ -1,8 +1,8 @@
|
|
|
1
|
-
import { type PlatformIdentityLink, type PlatformIdentityStore, type ResolvedPlatformIdentity, type UpstreamHumanIdentity, type VerifiedEmailLookup } from './platform-identity.js';
|
|
1
|
+
import { type PlatformIdentityLink, type PlatformIdentityStore, type PlatformSignupReservationStore, type ResolvedPlatformIdentity, type UpstreamHumanIdentity, type VerifiedEmailLookup } from './platform-identity.js';
|
|
2
2
|
import { type PlatformIdentityQueryable } from './platform-identity-schema-postgres.js';
|
|
3
3
|
export { ensurePlatformIdentitySchema, type PlatformIdentityQueryable, } from './platform-identity-schema-postgres.js';
|
|
4
4
|
/** Durable Postgres implementation. It serializes link/email decisions inside one short transaction. */
|
|
5
|
-
export declare class PostgresPlatformIdentityStore implements PlatformIdentityStore {
|
|
5
|
+
export declare class PostgresPlatformIdentityStore implements PlatformIdentityStore, PlatformSignupReservationStore {
|
|
6
6
|
#private;
|
|
7
7
|
constructor(pool: PlatformIdentityQueryable & {
|
|
8
8
|
connect?: () => Promise<PlatformIdentityQueryable & {
|
|
@@ -15,6 +15,11 @@ export declare class PostgresPlatformIdentityStore implements PlatformIdentitySt
|
|
|
15
15
|
resolve(input: UpstreamHumanIdentity): Promise<ResolvedPlatformIdentity>;
|
|
16
16
|
resolveLinked(input: UpstreamHumanIdentity): Promise<ResolvedPlatformIdentity | undefined>;
|
|
17
17
|
hasVerifiedEmailEvidence(email: string): Promise<boolean>;
|
|
18
|
+
assertEmailAvailable(input: {
|
|
19
|
+
readonly provider: string;
|
|
20
|
+
readonly realm: string;
|
|
21
|
+
readonly normalizedEmail: string;
|
|
22
|
+
}): Promise<void>;
|
|
18
23
|
/**
|
|
19
24
|
* Current verified addresses for one principal. The LEFT JOIN keeps "no principal row" (`unknown`)
|
|
20
25
|
* distinct from "principal with no active address" (`known`, empty) so an authorization decision can
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"platform-identity-postgres.d.ts","sourceRoot":"","sources":["../src/platform-identity-postgres.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAE1B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,wCAAwC,CAAC;AAOhD,OAAO,EACL,4BAA4B,EAC5B,KAAK,yBAAyB,GAC/B,MAAM,wCAAwC,CAAC;AAEhD,wGAAwG;AACxG,qBAAa,
|
|
1
|
+
{"version":3,"file":"platform-identity-postgres.d.ts","sourceRoot":"","sources":["../src/platform-identity-postgres.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAE1B,KAAK,8BAA8B,EAEnC,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,wCAAwC,CAAC;AAOhD,OAAO,EACL,4BAA4B,EAC5B,KAAK,yBAAyB,GAC/B,MAAM,wCAAwC,CAAC;AAEhD,wGAAwG;AACxG,qBAAa,6BACX,YAAW,qBAAqB,EAAE,8BAA8B;;gBAQ9D,IAAI,EAAE,yBAAyB,GAAG;QAChC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,yBAAyB,GAAG;YAAE,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;SAAE,CAAC,CAAC;KAC/E,EACD,OAAO,GAAE;QAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;KAAO;IAM7C,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAIvB,OAAO,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAgHxE,aAAa,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC;IAqB1F,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQzD,oBAAoB,CAAC,KAAK,EAAE;QAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;KAClC,GAAG,OAAO,CAAC,IAAI,CAAC;IAejB;;;;OAIG;IACG,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAiB7E,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqCpD,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAShD,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC;IAanF,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,oBAAoB,EAAE,CAAC;CAkEvF"}
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
import { randomUUID } from 'node:crypto';
|
|
2
|
-
import { GOOGLE_PLATFORM_IDENTITY_ISSUER, normalizePlatformIdentityEmail, PLATFORM_PRINCIPAL_BILLING_ISSUER, PlatformIdentityError, } from './platform-identity.js';
|
|
2
|
+
import { GOOGLE_PLATFORM_IDENTITY_ISSUER, normalizePlatformIdentityEmail, PLATFORM_PRINCIPAL_BILLING_ISSUER, PlatformIdentityError, platformSignupEmailLockKey, } from './platform-identity.js';
|
|
3
3
|
import { ensurePlatformIdentitySchema, } from './platform-identity-schema-postgres.js';
|
|
4
4
|
import { enqueueGoogleIdentitySync, enqueueVerifiedEmailChanged, enqueueWorkOSExternalIdReconcile, } from './platform-identity-sync-enqueue.js';
|
|
5
5
|
export { ensurePlatformIdentitySchema, } from './platform-identity-schema-postgres.js';
|
|
@@ -29,7 +29,7 @@ export class PostgresPlatformIdentityStore {
|
|
|
29
29
|
`platform-identity:${JSON.stringify([provider, realm, externalId])}`,
|
|
30
30
|
]);
|
|
31
31
|
await connection.query('SELECT pg_advisory_xact_lock(hashtextextended($1, 0))', [
|
|
32
|
-
|
|
32
|
+
platformSignupEmailLockKey(realm, email),
|
|
33
33
|
]);
|
|
34
34
|
const existing = await connection.query(`SELECT p.principal_id, p.status, p.billing_identity_issuer, p.billing_subject, p.created_at,
|
|
35
35
|
l.disabled_at
|
|
@@ -69,6 +69,7 @@ export class PostgresPlatformIdentityStore {
|
|
|
69
69
|
if (collision.rows.length > 0)
|
|
70
70
|
throw new PlatformIdentityError('identity_link_required');
|
|
71
71
|
}
|
|
72
|
+
await this.#assertEmailAvailable(connection, { provider, realm, normalizedEmail: email });
|
|
72
73
|
const id = provider === 'google' ? externalId : `usr_${randomUUID()}`;
|
|
73
74
|
const billingIdentity = provider === 'google'
|
|
74
75
|
? { identityIssuer: GOOGLE_PLATFORM_IDENTITY_ISSUER, subject: externalId }
|
|
@@ -133,6 +134,21 @@ export class PostgresPlatformIdentityStore {
|
|
|
133
134
|
const result = await this.#pool.query('SELECT 1 FROM platform_verified_emails WHERE normalized_email = $1 LIMIT 1', [normalizePlatformIdentityEmail(email)]);
|
|
134
135
|
return result.rows.length > 0;
|
|
135
136
|
}
|
|
137
|
+
async assertEmailAvailable(input) {
|
|
138
|
+
const connection = this.#pool.connect === undefined ? this.#pool : await this.#pool.connect();
|
|
139
|
+
try {
|
|
140
|
+
await connection.query('BEGIN');
|
|
141
|
+
await this.#assertEmailAvailable(connection, input);
|
|
142
|
+
await connection.query('COMMIT');
|
|
143
|
+
}
|
|
144
|
+
catch (error) {
|
|
145
|
+
await connection.query('ROLLBACK').catch(() => undefined);
|
|
146
|
+
throw error;
|
|
147
|
+
}
|
|
148
|
+
finally {
|
|
149
|
+
connection.release?.();
|
|
150
|
+
}
|
|
151
|
+
}
|
|
136
152
|
/**
|
|
137
153
|
* Current verified addresses for one principal. The LEFT JOIN keeps "no principal row" (`unknown`)
|
|
138
154
|
* distinct from "principal with no active address" (`known`, empty) so an authorization decision can
|
|
@@ -226,6 +242,12 @@ export class PostgresPlatformIdentityStore {
|
|
|
226
242
|
observed_at = EXCLUDED.observed_at`, [principalId, originalEmail, normalizedEmail, provider, realm, this.#now().toISOString()]);
|
|
227
243
|
return changed;
|
|
228
244
|
}
|
|
245
|
+
async #assertEmailAvailable(pool, input) {
|
|
246
|
+
const reservation = await pool.query(`SELECT 1 FROM platform_account_reset_email_reservations
|
|
247
|
+
WHERE realm = $1 AND normalized_email = $2 AND released_at IS NULL FOR UPDATE`, [input.realm, normalizePlatformIdentityEmail(input.normalizedEmail)]);
|
|
248
|
+
if (reservation.rows.length > 0)
|
|
249
|
+
throw new PlatformIdentityError('identity_signup_reserved');
|
|
250
|
+
}
|
|
229
251
|
}
|
|
230
252
|
function principalFromRow(row) {
|
|
231
253
|
return {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"platform-identity-postgres.js","sourceRoot":"","sources":["../src/platform-identity-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,iCAAiC,EACjC,qBAAqB,GAOtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,4BAA4B,GAE7B,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,gCAAgC,GACjC,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EACL,4BAA4B,GAE7B,MAAM,wCAAwC,CAAC;AAEhD,wGAAwG;AACxG,MAAM,OAAO,6BAA6B;IAC/B,KAAK,CAEZ;IACO,IAAI,CAAa;IAE1B,YACE,IAEC,EACD,UAAyC,EAAE;QAE3C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,YAAY;QACV,OAAO,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA4B;QACxC,IAAI,CAAC,KAAK,CAAC,aAAa;YAAE,MAAM,IAAI,qBAAqB,CAAC,2BAA2B,CAAC,CAAC;QACvF,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC;QAClC,MAAM,KAAK,GAAG,8BAA8B,CAAC,aAAa,CAAC,CAAC;QAC5D,MAAM,UAAU,GACd,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,UAAU,CAAC,KAAK,CAAC,uDAAuD,EAAE;gBAC9E,qBAAqB,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,EAAE;aACrE,CAAC,CAAC;YACH,MAAM,UAAU,CAAC,KAAK,CAAC,uDAAuD,EAAE;gBAC9E,kBAAkB,KAAK,EAAE;aAC1B,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CACrC;;;;uEAI+D,EAC/D,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAC9B,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;oBAC1C,MAAM,IAAI,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;gBAC5D,CAAC;gBACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrD,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ;oBAAE,MAAM,IAAI,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;gBAC1F,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,YAAY,CAC1C,UAAU,EACV,SAAS,CAAC,EAAE,EACZ,aAAa,EACb,KAAK,EACL,QAAQ,EACR,KAAK,CACN,CAAC;gBACF,+FAA+F;gBAC/F,oGAAoG;gBACpG,+CAA+C;gBAC/C,IAAI,YAAY,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAC1C,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;oBAClC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;oBAC5C,MAAM,yBAAyB,CAAC,UAAU,EAAE;wBAC1C,WAAW,EAAE,SAAS,CAAC,EAAE;wBACzB,YAAY;wBACZ,SAAS;qBACV,CAAC,CAAC;oBACH,MAAM,2BAA2B,CAAC,UAAU,EAAE;wBAC5C,WAAW,EAAE,SAAS,CAAC,EAAE;wBACzB,YAAY;wBACZ,SAAS;qBACV,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACjC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,eAAe,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC;YAC/E,CAAC;YACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,KAAK,CACtC,4EAA4E,EAC5E,CAAC,KAAK,CAAC,CACR,CAAC;gBACF,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,IAAI,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,EAAE,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,UAAU,EAAE,EAAE,CAAC;YACtE,MAAM,eAAe,GACnB,QAAQ,KAAK,QAAQ;gBACnB,CAAC,CAAC,EAAE,cAAc,EAAE,+BAA+B,EAAE,OAAO,EAAE,UAAU,EAAE;gBAC1E,CAAC,CAAC,EAAE,cAAc,EAAE,iCAAiC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YACzE,MAAM,UAAU,CAAC,KAAK,CACpB;;;+CAGuC,EACvC,CAAC,EAAE,EAAE,eAAe,CAAC,cAAc,EAAE,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CACzF,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CACrC;;;gCAGwB,EACxB,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAC7D,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,qBAAqB,CAAC,+BAA+B,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC/E,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,yBAAyB,CAAC,UAAU,EAAE;oBAC1C,WAAW,EAAE,EAAE;oBACf,YAAY,EAAE,UAAU,EAAE;oBAC1B,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;iBACrC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,gCAAgC,CAAC,UAAU,EAAE;gBACjD,WAAW,EAAE,EAAE;gBACf,QAAQ;gBACR,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC,CAAC;YACH,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1D,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAA4B;QAC9C,IAAI,CAAC,KAAK,CAAC,aAAa;YAAE,MAAM,IAAI,qBAAqB,CAAC,2BAA2B,CAAC,CAAC;QACvF,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACnC;;;;qEAI+D,EAC/D,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAC9B,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACxC,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI;YAAE,MAAM,IAAI,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;QACxF,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;QAC1F,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,eAAe,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,KAAa;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACnC,4EAA4E,EAC5E,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC,CACxC,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAChC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,0BAA0B,CAAC,WAAmB;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACnC;;;;iCAI2B,EAC3B,CAAC,WAAW,CAAC,CACd,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI;aACvB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC;aAClC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC;aAClD,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,WAAmB;QACxC,MAAM,UAAU,GACd,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,UAAU,CAAC,KAAK,CAAC,uDAAuD,EAAE;gBAC9E,sBAAsB,WAAW,EAAE;aACpC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CACpC;;;gCAGwB,EACxB,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CACzC,CAAC;YACF,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,iGAAiG;gBACjG,wFAAwF;gBACxF,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CACrC,8DAA8D,CAC/D,CAAC;gBACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;oBACxC,MAAM,UAAU,CAAC,KAAK,CACpB,yGAAyG,EACzG,CAAC,WAAW,CAAC,CACd,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1D,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,WAAmB;QACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACjC,gEAAgE,EAChE,CAAC,WAAW,CAAC,CACd,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,WAAW;YACtC,MAAM,IAAI,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACjC;wDACkD,EAClD,CAAC,WAAW,CAAC,CACd,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW;YAAE,MAAM,IAAI,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;QAC7F,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,eAAe,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,WAAmB;QACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACjC;gFAC0E,EAC1E,CAAC,WAAW,CAAC,CACd,CAAC;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC7B,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,OAAO,EAAE,GAAG,CAAC,WAAW;YACxB,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC;YACzC,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;SACrF,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,IAA+B,EAC/B,WAAmB,EACnB,aAAqB,EACrB,eAAuB,EACvB,QAAgB,EAChB,KAAa;QAEb,sGAAsG;QACtG,oGAAoG;QACpG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAC9B;sFACgF,EAChF,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAC/B,CAAC;QACF,MAAM,OAAO,GACX,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,KAAK,eAAe,CAAC;QACrF,MAAM,IAAI,CAAC,KAAK,CACd;;0DAEoD,EACpD,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAC3E,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CACd;;;;;0DAKoD,EACpD,CAAC,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAC1F,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAoBD,SAAS,gBAAgB,CAAC,GAAiB;IACzC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,YAAY;QACpB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,eAAe,EAAE;YACf,cAAc,EAAE,GAAG,CAAC,uBAAuB;YAC3C,OAAO,EAAE,GAAG,CAAC,eAAe;SAC7B;QACD,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAoB;IAC1C,OAAO,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7D,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,KAAa;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG;QACpD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;IAC/C,OAAO,UAAU,CAAC;AACpB,CAAC"}
|
|
1
|
+
{"version":3,"file":"platform-identity-postgres.js","sourceRoot":"","sources":["../src/platform-identity-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,iCAAiC,EACjC,qBAAqB,EAKrB,0BAA0B,GAI3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,4BAA4B,GAE7B,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,gCAAgC,GACjC,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EACL,4BAA4B,GAE7B,MAAM,wCAAwC,CAAC;AAEhD,wGAAwG;AACxG,MAAM,OAAO,6BAA6B;IAG/B,KAAK,CAEZ;IACO,IAAI,CAAa;IAE1B,YACE,IAEC,EACD,UAAyC,EAAE;QAE3C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,YAAY;QACV,OAAO,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA4B;QACxC,IAAI,CAAC,KAAK,CAAC,aAAa;YAAE,MAAM,IAAI,qBAAqB,CAAC,2BAA2B,CAAC,CAAC;QACvF,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC;QAClC,MAAM,KAAK,GAAG,8BAA8B,CAAC,aAAa,CAAC,CAAC;QAC5D,MAAM,UAAU,GACd,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,UAAU,CAAC,KAAK,CAAC,uDAAuD,EAAE;gBAC9E,qBAAqB,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,EAAE;aACrE,CAAC,CAAC;YACH,MAAM,UAAU,CAAC,KAAK,CAAC,uDAAuD,EAAE;gBAC9E,0BAA0B,CAAC,KAAK,EAAE,KAAK,CAAC;aACzC,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CACrC;;;;uEAI+D,EAC/D,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAC9B,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;oBAC1C,MAAM,IAAI,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;gBAC5D,CAAC;gBACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrD,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ;oBAAE,MAAM,IAAI,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;gBAC1F,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,YAAY,CAC1C,UAAU,EACV,SAAS,CAAC,EAAE,EACZ,aAAa,EACb,KAAK,EACL,QAAQ,EACR,KAAK,CACN,CAAC;gBACF,+FAA+F;gBAC/F,oGAAoG;gBACpG,+CAA+C;gBAC/C,IAAI,YAAY,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAC1C,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;oBAClC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;oBAC5C,MAAM,yBAAyB,CAAC,UAAU,EAAE;wBAC1C,WAAW,EAAE,SAAS,CAAC,EAAE;wBACzB,YAAY;wBACZ,SAAS;qBACV,CAAC,CAAC;oBACH,MAAM,2BAA2B,CAAC,UAAU,EAAE;wBAC5C,WAAW,EAAE,SAAS,CAAC,EAAE;wBACzB,YAAY;wBACZ,SAAS;qBACV,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACjC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,eAAe,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC;YAC/E,CAAC;YACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,KAAK,CACtC,4EAA4E,EAC5E,CAAC,KAAK,CAAC,CACR,CAAC;gBACF,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,IAAI,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1F,MAAM,EAAE,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,UAAU,EAAE,EAAE,CAAC;YACtE,MAAM,eAAe,GACnB,QAAQ,KAAK,QAAQ;gBACnB,CAAC,CAAC,EAAE,cAAc,EAAE,+BAA+B,EAAE,OAAO,EAAE,UAAU,EAAE;gBAC1E,CAAC,CAAC,EAAE,cAAc,EAAE,iCAAiC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YACzE,MAAM,UAAU,CAAC,KAAK,CACpB;;;+CAGuC,EACvC,CAAC,EAAE,EAAE,eAAe,CAAC,cAAc,EAAE,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CACzF,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CACrC;;;gCAGwB,EACxB,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAC7D,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,qBAAqB,CAAC,+BAA+B,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC/E,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,yBAAyB,CAAC,UAAU,EAAE;oBAC1C,WAAW,EAAE,EAAE;oBACf,YAAY,EAAE,UAAU,EAAE;oBAC1B,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;iBACrC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,gCAAgC,CAAC,UAAU,EAAE;gBACjD,WAAW,EAAE,EAAE;gBACf,QAAQ;gBACR,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC,CAAC;YACH,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1D,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAA4B;QAC9C,IAAI,CAAC,KAAK,CAAC,aAAa;YAAE,MAAM,IAAI,qBAAqB,CAAC,2BAA2B,CAAC,CAAC;QACvF,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACnC;;;;qEAI+D,EAC/D,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAC9B,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACxC,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI;YAAE,MAAM,IAAI,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;QACxF,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;QAC1F,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,eAAe,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,KAAa;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACnC,4EAA4E,EAC5E,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC,CACxC,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,KAI1B;QACC,MAAM,UAAU,GACd,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACpD,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1D,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,0BAA0B,CAAC,WAAmB;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACnC;;;;iCAI2B,EAC3B,CAAC,WAAW,CAAC,CACd,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI;aACvB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC;aAClC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC;aAClD,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,WAAmB;QACxC,MAAM,UAAU,GACd,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,UAAU,CAAC,KAAK,CAAC,uDAAuD,EAAE;gBAC9E,sBAAsB,WAAW,EAAE;aACpC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CACpC;;;gCAGwB,EACxB,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CACzC,CAAC;YACF,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,iGAAiG;gBACjG,wFAAwF;gBACxF,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CACrC,8DAA8D,CAC/D,CAAC;gBACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;oBACxC,MAAM,UAAU,CAAC,KAAK,CACpB,yGAAyG,EACzG,CAAC,WAAW,CAAC,CACd,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1D,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,WAAmB;QACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACjC,gEAAgE,EAChE,CAAC,WAAW,CAAC,CACd,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,WAAW;YACtC,MAAM,IAAI,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACjC;wDACkD,EAClD,CAAC,WAAW,CAAC,CACd,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW;YAAE,MAAM,IAAI,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;QAC7F,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,eAAe,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,WAAmB;QACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACjC;gFAC0E,EAC1E,CAAC,WAAW,CAAC,CACd,CAAC;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC7B,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,OAAO,EAAE,GAAG,CAAC,WAAW;YACxB,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC;YACzC,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;SACrF,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,IAA+B,EAC/B,WAAmB,EACnB,aAAqB,EACrB,eAAuB,EACvB,QAAgB,EAChB,KAAa;QAEb,sGAAsG;QACtG,oGAAoG;QACpG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAC9B;sFACgF,EAChF,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAC/B,CAAC;QACF,MAAM,OAAO,GACX,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,KAAK,eAAe,CAAC;QACrF,MAAM,IAAI,CAAC,KAAK,CACd;;0DAEoD,EACpD,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAC3E,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CACd;;;;;0DAKoD,EACpD,CAAC,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAC1F,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,IAA+B,EAC/B,KAIC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAClC;qFAC+E,EAC/E,CAAC,KAAK,CAAC,KAAK,EAAE,8BAA8B,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CACrE,CAAC;QACF,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,qBAAqB,CAAC,0BAA0B,CAAC,CAAC;IAC/F,CAAC;CACF;AAoBD,SAAS,gBAAgB,CAAC,GAAiB;IACzC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,YAAY;QACpB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,eAAe,EAAE;YACf,cAAc,EAAE,GAAG,CAAC,uBAAuB;YAC3C,OAAO,EAAE,GAAG,CAAC,eAAe;SAC7B;QACD,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAoB;IAC1C,OAAO,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7D,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,KAAa;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG;QACpD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;IAC/C,OAAO,UAAU,CAAC;AACpB,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"platform-identity-schema-postgres.d.ts","sourceRoot":"","sources":["../src/platform-identity-schema-postgres.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"platform-identity-schema-postgres.d.ts","sourceRoot":"","sources":["../src/platform-identity-schema-postgres.ts"],"names":[],"mappings":"AAOA,sEAAsE;AACtE,MAAM,WAAW,yBAAyB;IACxC,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,GAC1B,OAAO,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAA;KAAE,CAAC,CAAC;CAC7C;AAED;;;;GAIG;AACH,wBAAsB,4BAA4B,CAAC,IAAI,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAucjG"}
|
|
@@ -1,3 +1,4 @@
|
|
|
1
|
+
import { ensurePlatformAccountResetSchema } from './platform-account-reset-schema-postgres.js';
|
|
1
2
|
import { ensurePlatformAuthMigrationSchema, upgradePlatformAuthMigrationSchema, } from './platform-auth-migration-schema.js';
|
|
2
3
|
import { ensurePlatformIdentitySyncOutboxSchema } from './platform-identity-sync-postgres.js';
|
|
3
4
|
/**
|
|
@@ -17,6 +18,9 @@ export async function ensurePlatformIdentitySchema(pool) {
|
|
|
17
18
|
UNIQUE (billing_identity_issuer, billing_subject)
|
|
18
19
|
)
|
|
19
20
|
`);
|
|
21
|
+
// Reset reservations refer to immutable principals, so install their additive tables before any resolver
|
|
22
|
+
// can begin querying them in a later release.
|
|
23
|
+
await ensurePlatformAccountResetSchema(pool);
|
|
20
24
|
await pool.query(`
|
|
21
25
|
CREATE TABLE IF NOT EXISTS platform_identity_links (
|
|
22
26
|
provider text NOT NULL,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"platform-identity-schema-postgres.js","sourceRoot":"","sources":["../src/platform-identity-schema-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EACjC,kCAAkC,GACnC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,sCAAsC,EAAE,MAAM,sCAAsC,CAAC;AAU9F;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,IAA+B;IAChF,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;GAUhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;GAWhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;GAYhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;GAuBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;GAahB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;GAoBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;GAShB,CAAC,CAAC;IACH,MAAM,sCAAsC,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;GAahB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;GAIhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;GAQhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;GAahB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CACd,gIAAgI,CACjI,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;GAQhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;GAQhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;GAgBhB,CAAC,CAAC;IACH,MAAM,iCAAiC,CAAC,IAAI,CAAC,CAAC;IAC9C,0GAA0G;IAC1G,MAAM,IAAI,CAAC,KAAK,CACd,oGAAoG,CACrG,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,6tBAA6tB,CAC9tB,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,mNAAmN,CACpN,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,qfAAqf,CACtf,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,6FAA6F,CAC9F,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,yIAAyI,CAC1I,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC7F,MAAM,IAAI,CAAC,KAAK,CACd,8KAA8K,CAC/K,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,mGAAmG,CACpG,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,yIAAyI,CAC1I,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,8VAA8V,CAC/V,CAAC;IACF,MAAM,kCAAkC,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,IAAI,CAAC,KAAK,CACd,+RAA+R,CAChS,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CAAC;;;;GAIhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;GAShB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CACd,gKAAgK,CACjK,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,uFAAuF,CACxF,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,6FAA6F,CAC9F,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,8LAA8L,CAC/L,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,kGAAkG,CACnG,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,kKAAkK,CACnK,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,mGAAmG,CACpG,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,iKAAiK,CAClK,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,oGAAoG,CACrG,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,oNAAoN,CACrN,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,wHAAwH,CACzH,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,gNAAgN,CACjN,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,+GAA+G,CAChH,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,qKAAqK,CACtK,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,4FAA4F,CAC7F,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,6FAA6F,CAC9F,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,8FAA8F,CAC/F,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,kHAAkH,CACnH,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,yGAAyG,CAC1G,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;GAehB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;GAMhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;GAUhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;GAMhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;GAMhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;GAuBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;GAahB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;GAMhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDhB,CAAC,CAAC;AACL,CAAC"}
|
|
1
|
+
{"version":3,"file":"platform-identity-schema-postgres.js","sourceRoot":"","sources":["../src/platform-identity-schema-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,6CAA6C,CAAC;AAC/F,OAAO,EACL,iCAAiC,EACjC,kCAAkC,GACnC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,sCAAsC,EAAE,MAAM,sCAAsC,CAAC;AAU9F;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,IAA+B;IAChF,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;GAUhB,CAAC,CAAC;IACH,yGAAyG;IACzG,8CAA8C;IAC9C,MAAM,gCAAgC,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;GAWhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;GAYhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;GAuBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;GAahB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;GAoBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;GAShB,CAAC,CAAC;IACH,MAAM,sCAAsC,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;GAahB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;GAIhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;GAQhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;GAahB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CACd,gIAAgI,CACjI,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;GAQhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;GAQhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;GAgBhB,CAAC,CAAC;IACH,MAAM,iCAAiC,CAAC,IAAI,CAAC,CAAC;IAC9C,0GAA0G;IAC1G,MAAM,IAAI,CAAC,KAAK,CACd,oGAAoG,CACrG,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,6tBAA6tB,CAC9tB,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,mNAAmN,CACpN,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,qfAAqf,CACtf,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,6FAA6F,CAC9F,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,yIAAyI,CAC1I,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC7F,MAAM,IAAI,CAAC,KAAK,CACd,8KAA8K,CAC/K,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,mGAAmG,CACpG,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,yIAAyI,CAC1I,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,8VAA8V,CAC/V,CAAC;IACF,MAAM,kCAAkC,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,IAAI,CAAC,KAAK,CACd,+RAA+R,CAChS,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CAAC;;;;GAIhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;GAShB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CACd,gKAAgK,CACjK,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,uFAAuF,CACxF,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,6FAA6F,CAC9F,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,8LAA8L,CAC/L,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,kGAAkG,CACnG,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,kKAAkK,CACnK,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,mGAAmG,CACpG,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,iKAAiK,CAClK,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,oGAAoG,CACrG,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,oNAAoN,CACrN,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,wHAAwH,CACzH,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,gNAAgN,CACjN,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,+GAA+G,CAChH,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,qKAAqK,CACtK,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,4FAA4F,CAC7F,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,6FAA6F,CAC9F,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,8FAA8F,CAC/F,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,kHAAkH,CACnH,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,yGAAyG,CAC1G,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;GAehB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;GAMhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;GAUhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;GAMhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;GAMhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;GAuBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;GAahB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;GAMhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDhB,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -1,10 +1,11 @@
|
|
|
1
1
|
import type { Pool } from 'pg';
|
|
2
|
+
import { type PlatformSignupReservationStore } from './platform-identity.js';
|
|
2
3
|
import type { PlatformIdentityQueryable } from './platform-identity-schema-postgres.js';
|
|
3
4
|
import type { PlatformIdentitySyncLease, PlatformIdentitySyncStore } from './platform-identity-sync.js';
|
|
4
5
|
/** Additive upgrade kept separate so the already-large canonical identity schema stays reviewable. */
|
|
5
6
|
export declare function ensurePlatformIdentitySyncOutboxSchema(pool: PlatformIdentityQueryable): Promise<void>;
|
|
6
7
|
/** Durable, lease-fenced outbox adapter. Remote calls occur only after the claim transaction commits. */
|
|
7
|
-
export declare class PostgresPlatformIdentitySyncStore implements PlatformIdentitySyncStore {
|
|
8
|
+
export declare class PostgresPlatformIdentitySyncStore implements PlatformIdentitySyncStore, PlatformSignupReservationStore {
|
|
8
9
|
#private;
|
|
9
10
|
constructor(pool: Pool, input: {
|
|
10
11
|
readonly workosRealm: string;
|
|
@@ -15,5 +16,10 @@ export declare class PostgresPlatformIdentitySyncStore implements PlatformIdenti
|
|
|
15
16
|
readonly leaseSeconds: number;
|
|
16
17
|
}): Promise<readonly PlatformIdentitySyncLease[]>;
|
|
17
18
|
finish(lease: PlatformIdentitySyncLease, result: Parameters<PlatformIdentitySyncStore['finish']>[1]): Promise<void>;
|
|
19
|
+
assertEmailAvailable(input: {
|
|
20
|
+
readonly provider: string;
|
|
21
|
+
readonly realm: string;
|
|
22
|
+
readonly normalizedEmail: string;
|
|
23
|
+
}): Promise<void>;
|
|
18
24
|
}
|
|
19
25
|
//# sourceMappingURL=platform-identity-sync-postgres.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"platform-identity-sync-postgres.d.ts","sourceRoot":"","sources":["../src/platform-identity-sync-postgres.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,IAAI,CAAC;AAC3C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,KAAK,EAEV,yBAAyB,EAEzB,yBAAyB,EAC1B,MAAM,6BAA6B,CAAC;AAYrC,sGAAsG;AACtG,wBAAsB,sCAAsC,CAC1D,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,IAAI,CAAC,
|
|
1
|
+
{"version":3,"file":"platform-identity-sync-postgres.d.ts","sourceRoot":"","sources":["../src/platform-identity-sync-postgres.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,IAAI,CAAC;AAC3C,OAAO,EAGL,KAAK,8BAA8B,EAEpC,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,KAAK,EAEV,yBAAyB,EAEzB,yBAAyB,EAC1B,MAAM,6BAA6B,CAAC;AAYrC,sGAAsG;AACtG,wBAAsB,sCAAsC,CAC1D,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,IAAI,CAAC,CA+Hf;AAED,yGAAyG;AACzG,qBAAa,iCACX,YAAW,yBAAyB,EAAE,8BAA8B;;gBAMxD,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE;IAMxF,UAAU,CAAC,KAAK,EAAE;QACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;KAC/B,GAAG,OAAO,CAAC,SAAS,yBAAyB,EAAE,CAAC;IAqF3C,MAAM,CACV,KAAK,EAAE,yBAAyB,EAChC,MAAM,EAAE,UAAU,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GACzD,OAAO,CAAC,IAAI,CAAC;IA8FV,oBAAoB,CAAC,KAAK,EAAE;QAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;KAClC,GAAG,OAAO,CAAC,IAAI,CAAC;CA6BlB"}
|
|
@@ -1,11 +1,63 @@
|
|
|
1
1
|
import { createHash, randomUUID } from 'node:crypto';
|
|
2
|
+
import { normalizePlatformIdentityEmail, PlatformIdentityError, platformSignupEmailLockKey, } from './platform-identity.js';
|
|
2
3
|
import { PlatformIdentitySyncError } from './platform-identity-sync.js';
|
|
3
4
|
import { isValidPlatformIdentitySyncEvidence, loadPlatformIdentitySyncEvidence, platformIdentitySyncEmail, } from './platform-identity-sync-evidence-postgres.js';
|
|
4
5
|
import { ensurePlatformIdentitySyncRecoverySchema } from './platform-identity-sync-recovery-postgres.js';
|
|
5
6
|
const GOOGLE_REALM = 'accounts.google.com';
|
|
6
7
|
/** Additive upgrade kept separate so the already-large canonical identity schema stays reviewable. */
|
|
7
8
|
export async function ensurePlatformIdentitySyncOutboxSchema(pool) {
|
|
8
|
-
await pool.query('ALTER TABLE platform_identity_sync_outbox ADD COLUMN IF NOT EXISTS lease_token text, ADD COLUMN IF NOT EXISTS lease_expires_at timestamptz, ADD COLUMN IF NOT EXISTS next_attempt_at timestamptz, ADD COLUMN IF NOT EXISTS failed_at timestamptz, ADD COLUMN IF NOT EXISTS outcome_code text, ADD COLUMN IF NOT EXISTS remote_user_id text');
|
|
9
|
+
await pool.query('ALTER TABLE platform_identity_sync_outbox ADD COLUMN IF NOT EXISTS lease_token text, ADD COLUMN IF NOT EXISTS lease_expires_at timestamptz, ADD COLUMN IF NOT EXISTS lease_workos_realm text, ADD COLUMN IF NOT EXISTS lease_normalized_email text, ADD COLUMN IF NOT EXISTS lease_mode text, ADD COLUMN IF NOT EXISTS next_attempt_at timestamptz, ADD COLUMN IF NOT EXISTS failed_at timestamptz, ADD COLUMN IF NOT EXISTS outcome_code text, ADD COLUMN IF NOT EXISTS remote_user_id text');
|
|
10
|
+
await pool.query('ALTER TABLE platform_identity_sync_outbox DROP CONSTRAINT IF EXISTS platform_identity_sync_outbox_lease_mode_check');
|
|
11
|
+
await pool.query("ALTER TABLE platform_identity_sync_outbox ADD CONSTRAINT platform_identity_sync_outbox_lease_mode_check CHECK (lease_mode IS NULL OR lease_mode IN ('unlinked_create', 'linked_reconcile')) NOT VALID");
|
|
12
|
+
await pool.query('ALTER TABLE platform_identity_sync_outbox VALIDATE CONSTRAINT platform_identity_sync_outbox_lease_mode_check');
|
|
13
|
+
await pool.query(`
|
|
14
|
+
DO $platform_identity_sync_lease_snapshot_shape$
|
|
15
|
+
BEGIN
|
|
16
|
+
IF NOT EXISTS (
|
|
17
|
+
SELECT 1
|
|
18
|
+
FROM pg_constraint
|
|
19
|
+
WHERE conname = 'platform_identity_sync_outbox_lease_snapshot_shape_check'
|
|
20
|
+
AND conrelid = 'platform_identity_sync_outbox'::regclass
|
|
21
|
+
) THEN
|
|
22
|
+
ALTER TABLE platform_identity_sync_outbox
|
|
23
|
+
ADD CONSTRAINT platform_identity_sync_outbox_lease_snapshot_shape_check
|
|
24
|
+
CHECK (
|
|
25
|
+
(
|
|
26
|
+
lease_workos_realm IS NULL
|
|
27
|
+
AND lease_normalized_email IS NULL
|
|
28
|
+
AND lease_mode IS NULL
|
|
29
|
+
)
|
|
30
|
+
OR (
|
|
31
|
+
lease_token IS NOT NULL
|
|
32
|
+
AND lease_workos_realm IS NOT NULL
|
|
33
|
+
AND lease_normalized_email IS NOT NULL
|
|
34
|
+
AND lease_mode IS NOT NULL
|
|
35
|
+
)
|
|
36
|
+
) NOT VALID;
|
|
37
|
+
END IF;
|
|
38
|
+
IF NOT EXISTS (
|
|
39
|
+
SELECT 1
|
|
40
|
+
FROM platform_identity_sync_outbox
|
|
41
|
+
WHERE NOT (
|
|
42
|
+
(
|
|
43
|
+
lease_workos_realm IS NULL
|
|
44
|
+
AND lease_normalized_email IS NULL
|
|
45
|
+
AND lease_mode IS NULL
|
|
46
|
+
)
|
|
47
|
+
OR (
|
|
48
|
+
lease_token IS NOT NULL
|
|
49
|
+
AND lease_workos_realm IS NOT NULL
|
|
50
|
+
AND lease_normalized_email IS NOT NULL
|
|
51
|
+
AND lease_mode IS NOT NULL
|
|
52
|
+
)
|
|
53
|
+
)
|
|
54
|
+
) THEN
|
|
55
|
+
ALTER TABLE platform_identity_sync_outbox
|
|
56
|
+
VALIDATE CONSTRAINT platform_identity_sync_outbox_lease_snapshot_shape_check;
|
|
57
|
+
END IF;
|
|
58
|
+
END
|
|
59
|
+
$platform_identity_sync_lease_snapshot_shape$
|
|
60
|
+
`);
|
|
9
61
|
await pool.query('UPDATE platform_identity_sync_outbox SET next_attempt_at = created_at WHERE next_attempt_at IS NULL');
|
|
10
62
|
await pool.query('ALTER TABLE platform_identity_sync_outbox ALTER COLUMN next_attempt_at SET DEFAULT now(), ALTER COLUMN next_attempt_at SET NOT NULL');
|
|
11
63
|
await pool.query('ALTER TABLE platform_identity_sync_outbox DROP CONSTRAINT IF EXISTS platform_identity_sync_outbox_event_type_check');
|
|
@@ -99,13 +151,27 @@ export class PostgresPlatformIdentitySyncStore {
|
|
|
99
151
|
await markLocalEvidenceConflict(client, candidate);
|
|
100
152
|
continue;
|
|
101
153
|
}
|
|
154
|
+
if (evidence.workosUserIds.length === 0) {
|
|
155
|
+
await lockSignupEmail(client, this.#workosRealm, normalizedEmail);
|
|
156
|
+
}
|
|
157
|
+
const mode = workosLeaseMode(evidence.workosUserIds[0]);
|
|
102
158
|
const leaseToken = randomUUID();
|
|
103
159
|
const claimed = await client.query(`UPDATE platform_identity_sync_outbox
|
|
104
160
|
SET lease_token = $2,
|
|
105
161
|
lease_expires_at = now() + ($3 * interval '1 second'),
|
|
162
|
+
lease_workos_realm = $4,
|
|
163
|
+
lease_normalized_email = $5,
|
|
164
|
+
lease_mode = $6,
|
|
106
165
|
attempt_count = attempt_count + 1
|
|
107
166
|
WHERE idempotency_key = $1 AND delivered_at IS NULL AND failed_at IS NULL
|
|
108
|
-
RETURNING attempt_count`, [
|
|
167
|
+
RETURNING attempt_count`, [
|
|
168
|
+
candidate.idempotency_key,
|
|
169
|
+
leaseToken,
|
|
170
|
+
input.leaseSeconds,
|
|
171
|
+
this.#workosRealm,
|
|
172
|
+
normalizedEmail,
|
|
173
|
+
mode,
|
|
174
|
+
]);
|
|
109
175
|
const attempt = claimed.rows[0]?.attempt_count;
|
|
110
176
|
if (attempt === undefined)
|
|
111
177
|
continue;
|
|
@@ -113,6 +179,7 @@ export class PostgresPlatformIdentitySyncStore {
|
|
|
113
179
|
idempotencyKey: candidate.idempotency_key,
|
|
114
180
|
principalId: candidate.principal_id,
|
|
115
181
|
eventType: candidate.event_type,
|
|
182
|
+
realm: this.#workosRealm,
|
|
116
183
|
normalizedEmail,
|
|
117
184
|
workosUserId: evidence.workosUserIds[0],
|
|
118
185
|
leaseToken,
|
|
@@ -134,14 +201,18 @@ export class PostgresPlatformIdentitySyncStore {
|
|
|
134
201
|
const client = await this.#pool.connect();
|
|
135
202
|
try {
|
|
136
203
|
await client.query('BEGIN');
|
|
137
|
-
const row = await client.query(`SELECT idempotency_key, principal_id, event_type, attempt_count, lease_token
|
|
204
|
+
const row = await client.query(`SELECT idempotency_key, principal_id, event_type, attempt_count, lease_token,
|
|
205
|
+
lease_workos_realm, lease_normalized_email, lease_mode
|
|
138
206
|
FROM platform_identity_sync_outbox WHERE idempotency_key = $1 FOR UPDATE`, [lease.idempotencyKey]);
|
|
139
207
|
const current = row.rows[0];
|
|
140
208
|
if (current === undefined ||
|
|
141
209
|
current.lease_token !== lease.leaseToken ||
|
|
142
210
|
current.attempt_count !== lease.attempt ||
|
|
143
211
|
current.principal_id !== lease.principalId ||
|
|
144
|
-
current.event_type !== lease.eventType
|
|
212
|
+
current.event_type !== lease.eventType ||
|
|
213
|
+
current.lease_workos_realm !== lease.realm ||
|
|
214
|
+
current.lease_normalized_email !== lease.normalizedEmail ||
|
|
215
|
+
current.lease_mode !== workosLeaseMode(lease.workosUserId))
|
|
145
216
|
throw new PlatformIdentitySyncError('stale_lease');
|
|
146
217
|
const evidence = await loadPlatformIdentitySyncEvidence(client, lease.principalId, this.#googleRealm, this.#workosRealm);
|
|
147
218
|
const normalizedEmail = platformIdentitySyncEmail(lease.eventType, evidence);
|
|
@@ -151,10 +222,19 @@ export class PostgresPlatformIdentitySyncStore {
|
|
|
151
222
|
!workosEvidenceStillMatches(lease, result, evidence))
|
|
152
223
|
throw new PlatformIdentitySyncError('identity_sync_drift');
|
|
153
224
|
if (result.state === 'delivered') {
|
|
225
|
+
if (lease.workosUserId === undefined) {
|
|
226
|
+
await lockSignupEmail(client, this.#workosRealm, lease.normalizedEmail);
|
|
227
|
+
await this.#assertEmailAvailable(client, {
|
|
228
|
+
provider: 'workos',
|
|
229
|
+
realm: this.#workosRealm,
|
|
230
|
+
normalizedEmail: lease.normalizedEmail,
|
|
231
|
+
});
|
|
232
|
+
}
|
|
154
233
|
await linkWorkOSIdentity(client, this.#workosRealm, lease.principalId, result.remoteUserId);
|
|
155
234
|
await client.query(`UPDATE platform_identity_sync_outbox
|
|
156
235
|
SET delivered_at = now(), failed_at = NULL, outcome_code = $3,
|
|
157
|
-
remote_user_id = $4, lease_token = NULL, lease_expires_at = NULL
|
|
236
|
+
remote_user_id = $4, lease_token = NULL, lease_expires_at = NULL,
|
|
237
|
+
lease_workos_realm = NULL, lease_normalized_email = NULL, lease_mode = NULL
|
|
158
238
|
WHERE idempotency_key = $1 AND lease_token = $2`, [lease.idempotencyKey, lease.leaseToken, result.outcomeCode, result.remoteUserId]);
|
|
159
239
|
}
|
|
160
240
|
else if (result.state === 'retry') {
|
|
@@ -163,13 +243,15 @@ export class PostgresPlatformIdentitySyncStore {
|
|
|
163
243
|
throw new Error('identity sync retry must be in the future');
|
|
164
244
|
await client.query(`UPDATE platform_identity_sync_outbox
|
|
165
245
|
SET next_attempt_at = $3::timestamptz, outcome_code = $4,
|
|
166
|
-
lease_token = NULL, lease_expires_at = NULL
|
|
246
|
+
lease_token = NULL, lease_expires_at = NULL,
|
|
247
|
+
lease_workos_realm = NULL, lease_normalized_email = NULL, lease_mode = NULL
|
|
167
248
|
WHERE idempotency_key = $1 AND lease_token = $2`, [lease.idempotencyKey, lease.leaseToken, result.retryAt, result.outcomeCode]);
|
|
168
249
|
}
|
|
169
250
|
else {
|
|
170
251
|
await client.query(`UPDATE platform_identity_sync_outbox
|
|
171
252
|
SET failed_at = now(), outcome_code = $3,
|
|
172
|
-
lease_token = NULL, lease_expires_at = NULL
|
|
253
|
+
lease_token = NULL, lease_expires_at = NULL,
|
|
254
|
+
lease_workos_realm = NULL, lease_normalized_email = NULL, lease_mode = NULL
|
|
173
255
|
WHERE idempotency_key = $1 AND lease_token = $2`, [lease.idempotencyKey, lease.leaseToken, result.outcomeCode]);
|
|
174
256
|
}
|
|
175
257
|
await recordEvidence(client, lease, result);
|
|
@@ -183,6 +265,30 @@ export class PostgresPlatformIdentitySyncStore {
|
|
|
183
265
|
client.release();
|
|
184
266
|
}
|
|
185
267
|
}
|
|
268
|
+
async assertEmailAvailable(input) {
|
|
269
|
+
const client = await this.#pool.connect();
|
|
270
|
+
try {
|
|
271
|
+
await client.query('BEGIN');
|
|
272
|
+
await this.#assertEmailAvailable(client, input);
|
|
273
|
+
await client.query('COMMIT');
|
|
274
|
+
}
|
|
275
|
+
catch (error) {
|
|
276
|
+
await client.query('ROLLBACK').catch(() => undefined);
|
|
277
|
+
throw error;
|
|
278
|
+
}
|
|
279
|
+
finally {
|
|
280
|
+
client.release();
|
|
281
|
+
}
|
|
282
|
+
}
|
|
283
|
+
async #assertEmailAvailable(client, input) {
|
|
284
|
+
const reservation = await client.query(`SELECT 1 FROM platform_account_reset_email_reservations
|
|
285
|
+
WHERE realm = $1 AND normalized_email = $2 AND released_at IS NULL FOR UPDATE`, [input.realm, normalizePlatformIdentityEmail(input.normalizedEmail)]);
|
|
286
|
+
if (reservation.rows.length > 0)
|
|
287
|
+
throw new PlatformIdentityError('identity_signup_reserved');
|
|
288
|
+
}
|
|
289
|
+
}
|
|
290
|
+
function workosLeaseMode(workosUserId) {
|
|
291
|
+
return workosUserId === undefined ? 'unlinked_create' : 'linked_reconcile';
|
|
186
292
|
}
|
|
187
293
|
function workosEvidenceStillMatches(lease, result, evidence) {
|
|
188
294
|
if (lease.workosUserId !== undefined)
|
|
@@ -205,12 +311,18 @@ async function linkWorkOSIdentity(client, realm, principalId, remoteUserId) {
|
|
|
205
311
|
async function markLocalEvidenceConflict(client, row) {
|
|
206
312
|
await client.query(`UPDATE platform_identity_sync_outbox
|
|
207
313
|
SET failed_at = now(), outcome_code = 'local_evidence_conflict',
|
|
208
|
-
lease_token = NULL, lease_expires_at = NULL
|
|
314
|
+
lease_token = NULL, lease_expires_at = NULL,
|
|
315
|
+
lease_workos_realm = NULL, lease_normalized_email = NULL, lease_mode = NULL
|
|
209
316
|
WHERE idempotency_key = $1`, [row.idempotency_key]);
|
|
210
317
|
await client.query(`INSERT INTO platform_identity_sync_attempt_evidence
|
|
211
318
|
(idempotency_key_fingerprint, principal_fingerprint, attempt, outcome_code)
|
|
212
319
|
VALUES ($1, $2, $3, 'local_evidence_conflict')`, [fingerprint(row.idempotency_key), fingerprint(row.principal_id), row.attempt_count + 1]);
|
|
213
320
|
}
|
|
321
|
+
function lockSignupEmail(client, realm, normalizedEmail) {
|
|
322
|
+
return client.query('SELECT pg_advisory_xact_lock(hashtextextended($1, 0))', [
|
|
323
|
+
platformSignupEmailLockKey(realm, normalizedEmail),
|
|
324
|
+
]);
|
|
325
|
+
}
|
|
214
326
|
async function recordEvidence(client, lease, result) {
|
|
215
327
|
const remoteUserId = result.state === 'delivered' ? result.remoteUserId : undefined;
|
|
216
328
|
const retryAt = result.state === 'retry' ? result.retryAt : undefined;
|
|
@@ -238,6 +350,7 @@ function bounded(value, name) {
|
|
|
238
350
|
// Compile-time assertion that every persisted processor outcome remains intentionally enumerated.
|
|
239
351
|
const _outcomes = [
|
|
240
352
|
'delivered',
|
|
353
|
+
'identity_signup_reserved',
|
|
241
354
|
'remote_identity_conflict',
|
|
242
355
|
'provider_conflict',
|
|
243
356
|
'provider_rate_limited',
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"platform-identity-sync-postgres.js","sourceRoot":"","sources":["../src/platform-identity-sync-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;
|
|
1
|
+
{"version":3,"file":"platform-identity-sync-postgres.js","sourceRoot":"","sources":["../src/platform-identity-sync-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EACL,8BAA8B,EAC9B,qBAAqB,EAErB,0BAA0B,GAC3B,MAAM,wBAAwB,CAAC;AAQhC,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EACL,mCAAmC,EACnC,gCAAgC,EAEhC,yBAAyB,GAC1B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,wCAAwC,EAAE,MAAM,+CAA+C,CAAC;AAEzG,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAE3C,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,IAA+B;IAE/B,MAAM,IAAI,CAAC,KAAK,CACd,8dAA8d,CAC/d,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,oHAAoH,CACrH,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,uMAAuM,CACxM,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,8GAA8G,CAC/G,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+ChB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CACd,qGAAqG,CACtG,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,qIAAqI,CACtI,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,oHAAoH,CACrH,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,8NAA8N,CAC/N,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,8GAA8G,CAC/G,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CAAC;;;;GAIhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;GAWhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;GAOhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;GAwBhB,CAAC,CAAC;IACH,MAAM,wCAAwC,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,yGAAyG;AACzG,MAAM,OAAO,iCAAiC;IAGnC,KAAK,CAAO;IACZ,YAAY,CAAS;IACrB,YAAY,CAAS;IAE9B,YAAY,IAAU,EAAE,KAAsE;QAC5F,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;QAC/D,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,IAAI,YAAY,EAAE,cAAc,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAGhB;QACC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,GAAG;YACxE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC;YACrC,KAAK,CAAC,YAAY,GAAG,EAAE;YACvB,KAAK,CAAC,YAAY,GAAG,GAAG;YAExB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,KAAK,CACnC;;;;;;0CAMkC,EAClC,CAAC,KAAK,CAAC,KAAK,CAAC,CACd,CAAC;YACF,MAAM,MAAM,GAAgC,EAAE,CAAC;YAC/C,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;gBACxC,MAAM,QAAQ,GAAG,MAAM,gCAAgC,CACrD,MAAM,EACN,SAAS,CAAC,YAAY,EACtB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,YAAY,CAClB,CAAC;gBACF,MAAM,eAAe,GAAG,yBAAyB,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBAClF,IACE,eAAe,KAAK,SAAS;oBAC7B,CAAC,mCAAmC,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,EACpE,CAAC;oBACD,MAAM,yBAAyB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;oBACnD,SAAS;gBACX,CAAC;gBACD,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACxC,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;gBACpE,CAAC;gBACD,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxD,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;gBAChC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,CAChC;;;;;;;;oCAQ0B,EAC1B;oBACE,SAAS,CAAC,eAAe;oBACzB,UAAU;oBACV,KAAK,CAAC,YAAY;oBAClB,IAAI,CAAC,YAAY;oBACjB,eAAe;oBACf,IAAI;iBACL,CACF,CAAC;gBACF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC;gBAC/C,IAAI,OAAO,KAAK,SAAS;oBAAE,SAAS;gBACpC,MAAM,CAAC,IAAI,CAAC;oBACV,cAAc,EAAE,SAAS,CAAC,eAAe;oBACzC,WAAW,EAAE,SAAS,CAAC,YAAY;oBACnC,SAAS,EAAE,SAAS,CAAC,UAAU;oBAC/B,KAAK,EAAE,IAAI,CAAC,YAAY;oBACxB,eAAe;oBACf,YAAY,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;oBACvC,UAAU;oBACV,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;YACD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAAgC,EAChC,MAA0D;QAE1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAQ5B;;oFAE4E,EAC5E,CAAC,KAAK,CAAC,cAAc,CAAC,CACvB,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,IACE,OAAO,KAAK,SAAS;gBACrB,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,UAAU;gBACxC,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,OAAO;gBACvC,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,WAAW;gBAC1C,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,SAAS;gBACtC,OAAO,CAAC,kBAAkB,KAAK,KAAK,CAAC,KAAK;gBAC1C,OAAO,CAAC,sBAAsB,KAAK,KAAK,CAAC,eAAe;gBACxD,OAAO,CAAC,UAAU,KAAK,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC;gBAE1D,MAAM,IAAI,yBAAyB,CAAC,aAAa,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,MAAM,gCAAgC,CACrD,MAAM,EACN,KAAK,CAAC,WAAW,EACjB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,YAAY,CAClB,CAAC;YACF,MAAM,eAAe,GAAG,yBAAyB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC7E,IACE,eAAe,KAAK,SAAS;gBAC7B,CAAC,mCAAmC,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC;gBAC/D,eAAe,KAAK,KAAK,CAAC,eAAe;gBACzC,CAAC,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC;gBAEpD,MAAM,IAAI,yBAAyB,CAAC,qBAAqB,CAAC,CAAC;YAE7D,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBACjC,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBACrC,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;oBACxE,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE;wBACvC,QAAQ,EAAE,QAAQ;wBAClB,KAAK,EAAE,IAAI,CAAC,YAAY;wBACxB,eAAe,EAAE,KAAK,CAAC,eAAe;qBACvC,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;gBAC5F,MAAM,MAAM,CAAC,KAAK,CAChB;;;;4DAIkD,EAClD,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,CAClF,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACzC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;oBACpE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAC/D,MAAM,MAAM,CAAC,KAAK,CAChB;;;;4DAIkD,EAClD,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAC7E,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,CAAC,KAAK,CAChB;;;;4DAIkD,EAClD,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,CAC7D,CAAC;YACJ,CAAC;YACD,MAAM,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAC5C,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,KAI1B;QACC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAChD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,MAAkB,EAClB,KAIC;QAED,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,KAAK,CACpC;qFAC+E,EAC/E,CAAC,KAAK,CAAC,KAAK,EAAE,8BAA8B,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CACrE,CAAC;QACF,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,qBAAqB,CAAC,0BAA0B,CAAC,CAAC;IAC/F,CAAC;CACF;AAWD,SAAS,eAAe,CAAC,YAAgC;IACvD,OAAO,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,CAAC;AAC7E,CAAC;AAED,SAAS,0BAA0B,CACjC,KAAgC,EAChC,MAA0D,EAC1D,QAAsC;IAEtC,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,YAAY,CAAC;IAC9F,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;AAC3F,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,MAAkB,EAClB,KAAa,EACb,WAAmB,EACnB,YAAoB;IAEpB,MAAM,MAAM,CAAC,KAAK,CAChB;yFACqF,EACrF,CAAC,KAAK,EAAE,YAAY,EAAE,WAAW,CAAC,CACnC,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAC9B;4FACwF,EACxF,CAAC,KAAK,EAAE,YAAY,CAAC,CACtB,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,CAClC;6FACyF,EACzF,CAAC,KAAK,EAAE,WAAW,CAAC,CACrB,CAAC;IACF,IACE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,KAAK,WAAW;QAC3C,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,KAAK,YAAY;QAE/C,MAAM,IAAI,yBAAyB,CAAC,qBAAqB,CAAC,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,MAAkB,EAAE,GAAc;IACzE,MAAM,MAAM,CAAC,KAAK,CAChB;;;;iCAI6B,EAC7B,CAAC,GAAG,CAAC,eAAe,CAAC,CACtB,CAAC;IACF,MAAM,MAAM,CAAC,KAAK,CAChB;;oDAEgD,EAChD,CAAC,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,CACzF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,MAAkB,EAClB,KAAa,EACb,eAAuB;IAEvB,OAAO,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE;QAC3E,0BAA0B,CAAC,KAAK,EAAE,eAAe,CAAC;KACnD,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,MAAkB,EAClB,KAAgC,EAChC,MAA0D;IAE1D,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,MAAM,MAAM,CAAC,KAAK,CAChB;;;kDAG8C,EAC9C;QACE,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC;QACjC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC;QAC9B,KAAK,CAAC,OAAO;QACb,MAAM,CAAC,WAAW;QAClB,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC;QAC7D,OAAO,IAAI,IAAI;KAChB,CACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,IAAY;IAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC;IAC9F,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,kGAAkG;AAClG,MAAM,SAAS,GAA+C;IAC5D,WAAW;IACX,0BAA0B;IAC1B,0BAA0B;IAC1B,mBAAmB;IACnB,uBAAuB;IACvB,oBAAoB;IACpB,oBAAoB;IACpB,uBAAuB;CACxB,CAAC;AACF,KAAK,SAAS,CAAC"}
|
package/node_modules/@noodle-borg/service/dist/platform-identity-sync-recovery-postgres.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"platform-identity-sync-recovery-postgres.d.ts","sourceRoot":"","sources":["../src/platform-identity-sync-recovery-postgres.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,IAAI,CAAC;AAC3C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,EAGL,KAAK,kCAAkC,EACvC,KAAK,iCAAiC,EACvC,MAAM,6BAA6B,CAAC;AASrC,wBAAsB,wCAAwC,CAC5D,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAkEf;AAED,gGAAgG;AAChG,qBAAa,yCACX,YAAW,iCAAiC;;gBAMhC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE;IAMxF,uBAAuB,CAAC,KAAK,EAAE;QACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAsB/D,sBAAsB,CAAC,KAAK,EAAE;QAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;QACtC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QACpC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;KACpC,GAAG,OAAO,CAAC,kCAAkC,GAAG,SAAS,CAAC;IAWrD,eAAe,CAAC,KAAK,EAAE;QAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;QACtC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QACpC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;KACpC,GAAG,OAAO,CAAC,kCAAkC,CAAC;
|
|
1
|
+
{"version":3,"file":"platform-identity-sync-recovery-postgres.d.ts","sourceRoot":"","sources":["../src/platform-identity-sync-recovery-postgres.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,IAAI,CAAC;AAC3C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,EAGL,KAAK,kCAAkC,EACvC,KAAK,iCAAiC,EACvC,MAAM,6BAA6B,CAAC;AASrC,wBAAsB,wCAAwC,CAC5D,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAkEf;AAED,gGAAgG;AAChG,qBAAa,yCACX,YAAW,iCAAiC;;gBAMhC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE;IAMxF,uBAAuB,CAAC,KAAK,EAAE;QACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAsB/D,sBAAsB,CAAC,KAAK,EAAE;QAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;QACtC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QACpC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;KACpC,GAAG,OAAO,CAAC,kCAAkC,GAAG,SAAS,CAAC;IAWrD,eAAe,CAAC,KAAK,EAAE;QAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;QACtC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QACpC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;KACpC,GAAG,OAAO,CAAC,kCAAkC,CAAC;CAqGhD"}
|
|
@@ -132,12 +132,22 @@ export class PostgresPlatformIdentitySyncRecoveryStore {
|
|
|
132
132
|
if (outcome === 'recovered') {
|
|
133
133
|
const recovered = await client.query(`UPDATE platform_identity_sync_outbox
|
|
134
134
|
SET failed_at = NULL, outcome_code = 'operator_recovered',
|
|
135
|
-
next_attempt_at = now(), lease_token = NULL, lease_expires_at = NULL
|
|
135
|
+
next_attempt_at = now(), lease_token = NULL, lease_expires_at = NULL,
|
|
136
|
+
lease_workos_realm = NULL, lease_normalized_email = NULL, lease_mode = NULL
|
|
136
137
|
WHERE idempotency_key = $1 AND delivered_at IS NULL AND failed_at IS NOT NULL
|
|
137
138
|
RETURNING idempotency_key`, [entry.row.idempotency_key]);
|
|
138
139
|
if (recovered.rows[0] === undefined)
|
|
139
140
|
throw new PlatformIdentitySyncError('identity_sync_recovery_drift');
|
|
140
141
|
}
|
|
142
|
+
else {
|
|
143
|
+
const retained = await client.query(`UPDATE platform_identity_sync_outbox
|
|
144
|
+
SET lease_token = NULL, lease_expires_at = NULL,
|
|
145
|
+
lease_workos_realm = NULL, lease_normalized_email = NULL, lease_mode = NULL
|
|
146
|
+
WHERE idempotency_key = $1 AND delivered_at IS NULL AND failed_at IS NOT NULL
|
|
147
|
+
RETURNING idempotency_key`, [entry.row.idempotency_key]);
|
|
148
|
+
if (retained.rows[0] === undefined)
|
|
149
|
+
throw new PlatformIdentitySyncError('identity_sync_recovery_drift');
|
|
150
|
+
}
|
|
141
151
|
outcomes.push(outcome);
|
|
142
152
|
}
|
|
143
153
|
const recovered = outcomes.filter((outcome) => outcome === 'recovered').length;
|