@onivoro/server-aws-redshift 22.0.0

package/dist/cjs/index.d.ts

@@ -0,0 +1,3 @@
+export * from './lib/classes/server-aws-redshift-config.class';
+export * from './lib/services/redshift.service';
+export * from './lib/server-aws-redshift.module';

package/dist/cjs/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./lib/classes/server-aws-redshift-config.class"), exports);
+__exportStar(require("./lib/services/redshift.service"), exports);
+__exportStar(require("./lib/server-aws-redshift.module"), exports);

package/dist/cjs/lib/classes/server-aws-redshift-config.class.d.ts

@@ -0,0 +1,7 @@
+export declare class ServerAwsRedshiftDataConfig {
+    AWS_ACCESS_KEY_ID: string;
+    AWS_KINESIS_NAME: string;
+    AWS_REGION: string;
+    AWS_SECRET_ACCESS_KEY: string;
+    NODE_ENV: string;
+}

package/dist/cjs/lib/classes/server-aws-redshift-config.class.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServerAwsRedshiftDataConfig = void 0;
+class ServerAwsRedshiftDataConfig {
+    AWS_ACCESS_KEY_ID;
+    AWS_KINESIS_NAME;
+    AWS_REGION;
+    AWS_SECRET_ACCESS_KEY;
+    NODE_ENV;
+}
+exports.ServerAwsRedshiftDataConfig = ServerAwsRedshiftDataConfig;

package/dist/cjs/lib/server-aws-redshift.module.d.ts

@@ -0,0 +1,4 @@
+import { ServerAwsRedshiftDataConfig } from './classes/server-aws-redshift-config.class';
+export declare class ServerAwsRedshiftDataModule {
+    static configure(config: ServerAwsRedshiftDataConfig): any;
+}

package/dist/cjs/lib/server-aws-redshift.module.js

@@ -0,0 +1,63 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var ServerAwsRedshiftDataModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServerAwsRedshiftDataModule = void 0;
+const common_1 = require("@nestjs/common");
+const server_common_1 = require("@onivoro/server-common");
+const client_redshift_data_1 = require("@aws-sdk/client-redshift-data");
+const redshift_service_1 = require("./services/redshift.service");
+const server_aws_redshift_config_class_1 = require("./classes/server-aws-redshift-config.class");
+const client_redshift_serverless_1 = require("@aws-sdk/client-redshift-serverless");
+let redshiftClient = null;
+let redshiftServerlessClient = null;
+let ServerAwsRedshiftDataModule = ServerAwsRedshiftDataModule_1 = class ServerAwsRedshiftDataModule {
+    static configure(config) {
+        return (0, server_common_1.moduleFactory)({
+            module: ServerAwsRedshiftDataModule_1,
+            providers: [
+                {
+                    provide: client_redshift_data_1.RedshiftDataClient,
+                    useFactory: () => redshiftClient
+                        ? redshiftClient
+                        : redshiftClient = new client_redshift_data_1.RedshiftDataClient({
+                            region: config.AWS_REGION,
+                            logger: console,
+                            credentials: config.NODE_ENV === 'production'
+                                ? undefined
+                                : {
+                                    accessKeyId: config.AWS_ACCESS_KEY_ID,
+                                    secretAccessKey: config.AWS_SECRET_ACCESS_KEY
+                                }
+                        })
+                },
+                {
+                    provide: client_redshift_serverless_1.RedshiftServerlessClient,
+                    useFactory: () => redshiftClient
+                        ? redshiftServerlessClient
+                        : redshiftServerlessClient = new client_redshift_serverless_1.RedshiftServerlessClient({
+                            region: config.AWS_REGION,
+                            logger: console,
+                            credentials: config.NODE_ENV === 'production'
+                                ? undefined
+                                : {
+                                    accessKeyId: config.AWS_ACCESS_KEY_ID,
+                                    secretAccessKey: config.AWS_SECRET_ACCESS_KEY
+                                }
+                        })
+                },
+                { provide: server_aws_redshift_config_class_1.ServerAwsRedshiftDataConfig, useValue: config },
+                redshift_service_1.RedshiftDataService
+            ]
+        });
+    }
+};
+exports.ServerAwsRedshiftDataModule = ServerAwsRedshiftDataModule;
+exports.ServerAwsRedshiftDataModule = ServerAwsRedshiftDataModule = ServerAwsRedshiftDataModule_1 = __decorate([
+    (0, common_1.Module)({})
+], ServerAwsRedshiftDataModule);

package/dist/cjs/lib/services/redshift.service.d.ts

@@ -0,0 +1,34 @@
+import { RedshiftDataClient } from "@aws-sdk/client-redshift-data";
+import { ServerAwsRedshiftDataConfig } from '../classes/server-aws-redshift-config.class';
+import { RedshiftServerlessClient } from '@aws-sdk/client-redshift-serverless';
+export declare class RedshiftDataService {
+    private redshiftDataClient;
+    private redshiftServerlessClient;
+    private config;
+    constructor(redshiftDataClient: RedshiftDataClient, redshiftServerlessClient: RedshiftServerlessClient, config: ServerAwsRedshiftDataConfig);
+    waitForStatement(statementId: string): Promise<void>;
+    verifyEndpointAccess(workgroupName: string): Promise<import("@aws-sdk/client-redshift-serverless").GetWorkgroupCommandOutput>;
+    addIamUserToDatabaseGroup(params: {
+        Database: string;
+        WorkgroupName: string;
+        User: string;
+        Group: string;
+    }): Promise<void>;
+    createDatabaseUser(params: {
+        Database: string;
+        WorkgroupName: string;
+        User: string;
+    }): Promise<boolean>;
+    grantUsageOnSchema(params: {
+        GroupName: string;
+        Database: string;
+        WorkgroupName: string;
+        Schema: string;
+        Group: string;
+    }): Promise<void>;
+    createDbGroupFromIamGroupIfNotExists(params: {
+        iamGroup: string;
+        Database: string;
+        WorkgroupName: string;
+    }): Promise<any>;
+}

package/dist/cjs/lib/services/redshift.service.js

@@ -0,0 +1,188 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RedshiftDataService = void 0;
+const common_1 = require("@nestjs/common");
+const client_redshift_data_1 = require("@aws-sdk/client-redshift-data");
+const server_aws_redshift_config_class_1 = require("../classes/server-aws-redshift-config.class");
+const client_redshift_serverless_1 = require("@aws-sdk/client-redshift-serverless");
+const crypto_1 = require("crypto");
+let RedshiftDataService = class RedshiftDataService {
+    redshiftDataClient;
+    redshiftServerlessClient;
+    config;
+    constructor(redshiftDataClient, redshiftServerlessClient, config) {
+        this.redshiftDataClient = redshiftDataClient;
+        this.redshiftServerlessClient = redshiftServerlessClient;
+        this.config = config;
+    }
+    async waitForStatement(statementId) {
+        const maxAttempts = 10;
+        let attempts = 0;
+        while (attempts < maxAttempts) {
+            const describeStatementCommand = new client_redshift_data_1.DescribeStatementCommand({
+                Id: statementId
+            });
+            const status = await this.redshiftDataClient.send(describeStatementCommand);
+            if (status.Status === 'FINISHED') {
+                return;
+            }
+            if (status.Status === 'FAILED') {
+                throw new Error(`SQL statement failed: ${status.Error}`);
+            }
+            attempts++;
+            await new Promise(resolve => setTimeout(resolve, 1000));
+        }
+        throw new Error('Timeout waiting for SQL statement to complete');
+    }
+    async verifyEndpointAccess(workgroupName) {
+        const workgroupResponse = await this.redshiftServerlessClient.send(new client_redshift_serverless_1.GetWorkgroupCommand({ workgroupName }));
+        if (!workgroupResponse?.workgroup?.endpoint?.address) {
+            console.error(`Could not retrieve endpoint for workgroup "${workgroupName}"`);
+            return;
+        }
+        return workgroupResponse;
+    }
+    async addIamUserToDatabaseGroup(params) {
+        const { Database, WorkgroupName, User, Group } = params;
+        try {
+            const groupResult = await this.redshiftDataClient.send(new client_redshift_data_1.ExecuteStatementCommand({
+                Database,
+                Sql: `ALTER GROUP ${Group} ADD USER "${User}";`,
+                WorkgroupName
+            }));
+            await this.waitForStatement(groupResult.Id);
+            console.log(`Added user "${User}" to group "${Group}`);
+        }
+        catch (error) {
+            console.warn({ detail: `Warning adding ${User} to group:`, error });
+        }
+    }
+    async createDatabaseUser(params) {
+        const { Database, WorkgroupName, User } = params;
+        try {
+            const checkResult = await this.redshiftDataClient.send(new client_redshift_data_1.ExecuteStatementCommand({
+                Database,
+                Sql: `SELECT u.usename as username FROM pg_user u;`,
+                WorkgroupName
+            }));
+            await this.waitForStatement(checkResult.Id);
+            const describeCommand = new client_redshift_data_1.DescribeStatementCommand({ Id: checkResult.Id });
+            const checkStatus = await this.redshiftDataClient.send(describeCommand);
+            if (!checkStatus.ResultRows) {
+                const placeholderPassword = `IAM_${(0, crypto_1.randomUUID)().replace(/-/g, '_')}`;
+                const createUserCommand = new client_redshift_data_1.ExecuteStatementCommand({
+                    Database,
+                    Sql: `CREATE USER ${User} PASSWORD '${placeholderPassword}';`,
+                    WorkgroupName
+                });
+                const createResult = await this.redshiftDataClient.send(createUserCommand);
+                await this.waitForStatement(createResult.Id);
+                console.log(`Created user: ${User}`);
+            }
+            else {
+                console.log(`User "${User} already exists`);
+            }
+            return true;
+        }
+        catch (error) {
+            console.warn({ detail: `Warning creating user ${User}`, error });
+            return false;
+        }
+    }
+    async grantUsageOnSchema(params) {
+        const { GroupName, Database, WorkgroupName, Schema, Group } = params;
+        try {
+            const checkResult = await this.redshiftDataClient.send(new client_redshift_data_1.ExecuteStatementCommand({
+                Database,
+                Sql: `SELECT 1 FROM pg_group WHERE groname = '${Group}';`,
+                WorkgroupName
+            }));
+            await this.waitForStatement(checkResult.Id);
+            const describeCommand = new client_redshift_data_1.DescribeStatementCommand({ Id: checkResult.Id });
+            const checkStatus = await this.redshiftDataClient.send(describeCommand);
+            if (!checkStatus.ResultRows) {
+                const createGroupCommand = new client_redshift_data_1.ExecuteStatementCommand({
+                    Database,
+                    Sql: 'CREATE GROUP ${Group};',
+                    WorkgroupName
+                });
+                const createResult = await this.redshiftDataClient.send(createGroupCommand);
+                await this.waitForStatement(createResult.Id);
+                console.log('Created "${Group}" group');
+            }
+            else {
+                console.log('"${Group}" group already exists');
+            }
+            const setupStatements = [
+                `GRANT USAGE ON SCHEMA ${Schema} TO GROUP ${Group};`,
+                `GRANT SELECT ON ALL TABLES IN SCHEMA ${Schema} TO GROUP ${Group};`,
+                `ALTER DEFAULT PRIVILEGES IN SCHEMA ${Schema} GRANT SELECT ON TABLES TO GROUP ${Group};`,
+            ];
+            for (const Sql of setupStatements) {
+                const executeStatementCommand = new client_redshift_data_1.ExecuteStatementCommand({
+                    Database,
+                    Sql,
+                    WorkgroupName
+                });
+                try {
+                    const result = await this.redshiftDataClient.send(executeStatementCommand);
+                    await this.waitForStatement(result.Id);
+                    console.log(`Executed SQL: ${Sql}`);
+                }
+                catch (error) {
+                    console.warn(`Warning executing SQL: ${Sql}`, error.message);
+                }
+            }
+        }
+        catch (error) {
+            console.error({ detail: 'Error in grantUsageOnSchema:', error });
+            throw error;
+        }
+    }
+    async createDbGroupFromIamGroupIfNotExists(params) {
+        const { iamGroup, Database, WorkgroupName } = params;
+        try {
+            const checkResult = await this.redshiftDataClient.send(new client_redshift_data_1.ExecuteStatementCommand({
+                Database,
+                Sql: `SELECT 1 FROM pg_group WHERE groname = '${iamGroup}';`,
+                WorkgroupName
+            }));
+            await this.waitForStatement(checkResult.Id);
+            const describeCommand = new client_redshift_data_1.DescribeStatementCommand({ Id: checkResult.Id });
+            const checkStatus = await this.redshiftDataClient.send(describeCommand);
+            if (!checkStatus.ResultRows) {
+                const createGroupCommand = new client_redshift_data_1.ExecuteStatementCommand({
+                    Database,
+                    Sql: `CREATE GROUP ${iamGroup};`,
+                    WorkgroupName
+                });
+                const createResult = await this.redshiftDataClient.send(createGroupCommand);
+                await this.waitForStatement(createResult.Id);
+                console.log(`Created "${iamGroup}" group`);
+            }
+            else {
+                console.log(`"${iamGroup}" group already exists`);
+            }
+        }
+        catch (error) {
+            console.error({ error });
+            throw error;
+        }
+    }
+};
+exports.RedshiftDataService = RedshiftDataService;
+exports.RedshiftDataService = RedshiftDataService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [client_redshift_data_1.RedshiftDataClient,
+        client_redshift_serverless_1.RedshiftServerlessClient,
+        server_aws_redshift_config_class_1.ServerAwsRedshiftDataConfig])
+], RedshiftDataService);

package/dist/esm/index.d.ts

@@ -0,0 +1,3 @@
+export * from './lib/classes/server-aws-redshift-config.class';
+export * from './lib/services/redshift.service';
+export * from './lib/server-aws-redshift.module';

package/dist/esm/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./lib/classes/server-aws-redshift-config.class"), exports);
+__exportStar(require("./lib/services/redshift.service"), exports);
+__exportStar(require("./lib/server-aws-redshift.module"), exports);

package/dist/esm/lib/classes/server-aws-redshift-config.class.d.ts

@@ -0,0 +1,7 @@
+export declare class ServerAwsRedshiftDataConfig {
+    AWS_ACCESS_KEY_ID: string;
+    AWS_KINESIS_NAME: string;
+    AWS_REGION: string;
+    AWS_SECRET_ACCESS_KEY: string;
+    NODE_ENV: string;
+}

package/dist/esm/lib/classes/server-aws-redshift-config.class.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServerAwsRedshiftDataConfig = void 0;
+class ServerAwsRedshiftDataConfig {
+    AWS_ACCESS_KEY_ID;
+    AWS_KINESIS_NAME;
+    AWS_REGION;
+    AWS_SECRET_ACCESS_KEY;
+    NODE_ENV;
+}
+exports.ServerAwsRedshiftDataConfig = ServerAwsRedshiftDataConfig;

package/dist/esm/lib/server-aws-redshift.module.d.ts

@@ -0,0 +1,4 @@
+import { ServerAwsRedshiftDataConfig } from './classes/server-aws-redshift-config.class';
+export declare class ServerAwsRedshiftDataModule {
+    static configure(config: ServerAwsRedshiftDataConfig): any;
+}

package/dist/esm/lib/server-aws-redshift.module.js

@@ -0,0 +1,63 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var ServerAwsRedshiftDataModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServerAwsRedshiftDataModule = void 0;
+const common_1 = require("@nestjs/common");
+const server_common_1 = require("@onivoro/server-common");
+const client_redshift_data_1 = require("@aws-sdk/client-redshift-data");
+const redshift_service_1 = require("./services/redshift.service");
+const server_aws_redshift_config_class_1 = require("./classes/server-aws-redshift-config.class");
+const client_redshift_serverless_1 = require("@aws-sdk/client-redshift-serverless");
+let redshiftClient = null;
+let redshiftServerlessClient = null;
+let ServerAwsRedshiftDataModule = ServerAwsRedshiftDataModule_1 = class ServerAwsRedshiftDataModule {
+    static configure(config) {
+        return (0, server_common_1.moduleFactory)({
+            module: ServerAwsRedshiftDataModule_1,
+            providers: [
+                {
+                    provide: client_redshift_data_1.RedshiftDataClient,
+                    useFactory: () => redshiftClient
+                        ? redshiftClient
+                        : redshiftClient = new client_redshift_data_1.RedshiftDataClient({
+                            region: config.AWS_REGION,
+                            logger: console,
+                            credentials: config.NODE_ENV === 'production'
+                                ? undefined
+                                : {
+                                    accessKeyId: config.AWS_ACCESS_KEY_ID,
+                                    secretAccessKey: config.AWS_SECRET_ACCESS_KEY
+                                }
+                        })
+                },
+                {
+                    provide: client_redshift_serverless_1.RedshiftServerlessClient,
+                    useFactory: () => redshiftClient
+                        ? redshiftServerlessClient
+                        : redshiftServerlessClient = new client_redshift_serverless_1.RedshiftServerlessClient({
+                            region: config.AWS_REGION,
+                            logger: console,
+                            credentials: config.NODE_ENV === 'production'
+                                ? undefined
+                                : {
+                                    accessKeyId: config.AWS_ACCESS_KEY_ID,
+                                    secretAccessKey: config.AWS_SECRET_ACCESS_KEY
+                                }
+                        })
+                },
+                { provide: server_aws_redshift_config_class_1.ServerAwsRedshiftDataConfig, useValue: config },
+                redshift_service_1.RedshiftDataService
+            ]
+        });
+    }
+};
+exports.ServerAwsRedshiftDataModule = ServerAwsRedshiftDataModule;
+exports.ServerAwsRedshiftDataModule = ServerAwsRedshiftDataModule = ServerAwsRedshiftDataModule_1 = __decorate([
+    (0, common_1.Module)({})
+], ServerAwsRedshiftDataModule);

package/dist/esm/lib/services/redshift.service.d.ts

@@ -0,0 +1,34 @@
+import { RedshiftDataClient } from "@aws-sdk/client-redshift-data";
+import { ServerAwsRedshiftDataConfig } from '../classes/server-aws-redshift-config.class';
+import { RedshiftServerlessClient } from '@aws-sdk/client-redshift-serverless';
+export declare class RedshiftDataService {
+    private redshiftDataClient;
+    private redshiftServerlessClient;
+    private config;
+    constructor(redshiftDataClient: RedshiftDataClient, redshiftServerlessClient: RedshiftServerlessClient, config: ServerAwsRedshiftDataConfig);
+    waitForStatement(statementId: string): Promise<void>;
+    verifyEndpointAccess(workgroupName: string): Promise<import("@aws-sdk/client-redshift-serverless").GetWorkgroupCommandOutput>;
+    addIamUserToDatabaseGroup(params: {
+        Database: string;
+        WorkgroupName: string;
+        User: string;
+        Group: string;
+    }): Promise<void>;
+    createDatabaseUser(params: {
+        Database: string;
+        WorkgroupName: string;
+        User: string;
+    }): Promise<boolean>;
+    grantUsageOnSchema(params: {
+        GroupName: string;
+        Database: string;
+        WorkgroupName: string;
+        Schema: string;
+        Group: string;
+    }): Promise<void>;
+    createDbGroupFromIamGroupIfNotExists(params: {
+        iamGroup: string;
+        Database: string;
+        WorkgroupName: string;
+    }): Promise<any>;
+}

package/dist/esm/lib/services/redshift.service.js

@@ -0,0 +1,188 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RedshiftDataService = void 0;
+const common_1 = require("@nestjs/common");
+const client_redshift_data_1 = require("@aws-sdk/client-redshift-data");
+const server_aws_redshift_config_class_1 = require("../classes/server-aws-redshift-config.class");
+const client_redshift_serverless_1 = require("@aws-sdk/client-redshift-serverless");
+const crypto_1 = require("crypto");
+let RedshiftDataService = class RedshiftDataService {
+    redshiftDataClient;
+    redshiftServerlessClient;
+    config;
+    constructor(redshiftDataClient, redshiftServerlessClient, config) {
+        this.redshiftDataClient = redshiftDataClient;
+        this.redshiftServerlessClient = redshiftServerlessClient;
+        this.config = config;
+    }
+    async waitForStatement(statementId) {
+        const maxAttempts = 10;
+        let attempts = 0;
+        while (attempts < maxAttempts) {
+            const describeStatementCommand = new client_redshift_data_1.DescribeStatementCommand({
+                Id: statementId
+            });
+            const status = await this.redshiftDataClient.send(describeStatementCommand);
+            if (status.Status === 'FINISHED') {
+                return;
+            }
+            if (status.Status === 'FAILED') {
+                throw new Error(`SQL statement failed: ${status.Error}`);
+            }
+            attempts++;
+            await new Promise(resolve => setTimeout(resolve, 1000));
+        }
+        throw new Error('Timeout waiting for SQL statement to complete');
+    }
+    async verifyEndpointAccess(workgroupName) {
+        const workgroupResponse = await this.redshiftServerlessClient.send(new client_redshift_serverless_1.GetWorkgroupCommand({ workgroupName }));
+        if (!workgroupResponse?.workgroup?.endpoint?.address) {
+            console.error(`Could not retrieve endpoint for workgroup "${workgroupName}"`);
+            return;
+        }
+        return workgroupResponse;
+    }
+    async addIamUserToDatabaseGroup(params) {
+        const { Database, WorkgroupName, User, Group } = params;
+        try {
+            const groupResult = await this.redshiftDataClient.send(new client_redshift_data_1.ExecuteStatementCommand({
+                Database,
+                Sql: `ALTER GROUP ${Group} ADD USER "${User}";`,
+                WorkgroupName
+            }));
+            await this.waitForStatement(groupResult.Id);
+            console.log(`Added user "${User}" to group "${Group}`);
+        }
+        catch (error) {
+            console.warn({ detail: `Warning adding ${User} to group:`, error });
+        }
+    }
+    async createDatabaseUser(params) {
+        const { Database, WorkgroupName, User } = params;
+        try {
+            const checkResult = await this.redshiftDataClient.send(new client_redshift_data_1.ExecuteStatementCommand({
+                Database,
+                Sql: `SELECT u.usename as username FROM pg_user u;`,
+                WorkgroupName
+            }));
+            await this.waitForStatement(checkResult.Id);
+            const describeCommand = new client_redshift_data_1.DescribeStatementCommand({ Id: checkResult.Id });
+            const checkStatus = await this.redshiftDataClient.send(describeCommand);
+            if (!checkStatus.ResultRows) {
+                const placeholderPassword = `IAM_${(0, crypto_1.randomUUID)().replace(/-/g, '_')}`;
+                const createUserCommand = new client_redshift_data_1.ExecuteStatementCommand({
+                    Database,
+                    Sql: `CREATE USER ${User} PASSWORD '${placeholderPassword}';`,
+                    WorkgroupName
+                });
+                const createResult = await this.redshiftDataClient.send(createUserCommand);
+                await this.waitForStatement(createResult.Id);
+                console.log(`Created user: ${User}`);
+            }
+            else {
+                console.log(`User "${User} already exists`);
+            }
+            return true;
+        }
+        catch (error) {
+            console.warn({ detail: `Warning creating user ${User}`, error });
+            return false;
+        }
+    }
+    async grantUsageOnSchema(params) {
+        const { GroupName, Database, WorkgroupName, Schema, Group } = params;
+        try {
+            const checkResult = await this.redshiftDataClient.send(new client_redshift_data_1.ExecuteStatementCommand({
+                Database,
+                Sql: `SELECT 1 FROM pg_group WHERE groname = '${Group}';`,
+                WorkgroupName
+            }));
+            await this.waitForStatement(checkResult.Id);
+            const describeCommand = new client_redshift_data_1.DescribeStatementCommand({ Id: checkResult.Id });
+            const checkStatus = await this.redshiftDataClient.send(describeCommand);
+            if (!checkStatus.ResultRows) {
+                const createGroupCommand = new client_redshift_data_1.ExecuteStatementCommand({
+                    Database,
+                    Sql: 'CREATE GROUP ${Group};',
+                    WorkgroupName
+                });
+                const createResult = await this.redshiftDataClient.send(createGroupCommand);
+                await this.waitForStatement(createResult.Id);
+                console.log('Created "${Group}" group');
+            }
+            else {
+                console.log('"${Group}" group already exists');
+            }
+            const setupStatements = [
+                `GRANT USAGE ON SCHEMA ${Schema} TO GROUP ${Group};`,
+                `GRANT SELECT ON ALL TABLES IN SCHEMA ${Schema} TO GROUP ${Group};`,
+                `ALTER DEFAULT PRIVILEGES IN SCHEMA ${Schema} GRANT SELECT ON TABLES TO GROUP ${Group};`,
+            ];
+            for (const Sql of setupStatements) {
+                const executeStatementCommand = new client_redshift_data_1.ExecuteStatementCommand({
+                    Database,
+                    Sql,
+                    WorkgroupName
+                });
+                try {
+                    const result = await this.redshiftDataClient.send(executeStatementCommand);
+                    await this.waitForStatement(result.Id);
+                    console.log(`Executed SQL: ${Sql}`);
+                }
+                catch (error) {
+                    console.warn(`Warning executing SQL: ${Sql}`, error.message);
+                }
+            }
+        }
+        catch (error) {
+            console.error({ detail: 'Error in grantUsageOnSchema:', error });
+            throw error;
+        }
+    }
+    async createDbGroupFromIamGroupIfNotExists(params) {
+        const { iamGroup, Database, WorkgroupName } = params;
+        try {
+            const checkResult = await this.redshiftDataClient.send(new client_redshift_data_1.ExecuteStatementCommand({
+                Database,
+                Sql: `SELECT 1 FROM pg_group WHERE groname = '${iamGroup}';`,
+                WorkgroupName
+            }));
+            await this.waitForStatement(checkResult.Id);
+            const describeCommand = new client_redshift_data_1.DescribeStatementCommand({ Id: checkResult.Id });
+            const checkStatus = await this.redshiftDataClient.send(describeCommand);
+            if (!checkStatus.ResultRows) {
+                const createGroupCommand = new client_redshift_data_1.ExecuteStatementCommand({
+                    Database,
+                    Sql: `CREATE GROUP ${iamGroup};`,
+                    WorkgroupName
+                });
+                const createResult = await this.redshiftDataClient.send(createGroupCommand);
+                await this.waitForStatement(createResult.Id);
+                console.log(`Created "${iamGroup}" group`);
+            }
+            else {
+                console.log(`"${iamGroup}" group already exists`);
+            }
+        }
+        catch (error) {
+            console.error({ error });
+            throw error;
+        }
+    }
+};
+exports.RedshiftDataService = RedshiftDataService;
+exports.RedshiftDataService = RedshiftDataService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [client_redshift_data_1.RedshiftDataClient,
+        client_redshift_serverless_1.RedshiftServerlessClient,
+        server_aws_redshift_config_class_1.ServerAwsRedshiftDataConfig])
+], RedshiftDataService);

package/dist/types/index.d.ts

@@ -0,0 +1,3 @@
+export * from './lib/classes/server-aws-redshift-config.class';
+export * from './lib/services/redshift.service';
+export * from './lib/server-aws-redshift.module';

package/dist/types/lib/classes/server-aws-redshift-config.class.d.ts

@@ -0,0 +1,7 @@
+export declare class ServerAwsRedshiftDataConfig {
+    AWS_ACCESS_KEY_ID: string;
+    AWS_KINESIS_NAME: string;
+    AWS_REGION: string;
+    AWS_SECRET_ACCESS_KEY: string;
+    NODE_ENV: string;
+}

package/dist/types/lib/server-aws-redshift.module.d.ts

@@ -0,0 +1,4 @@
+import { ServerAwsRedshiftDataConfig } from './classes/server-aws-redshift-config.class';
+export declare class ServerAwsRedshiftDataModule {
+    static configure(config: ServerAwsRedshiftDataConfig): any;
+}

package/dist/types/lib/services/redshift.service.d.ts

@@ -0,0 +1,34 @@
+import { RedshiftDataClient } from "@aws-sdk/client-redshift-data";
+import { ServerAwsRedshiftDataConfig } from '../classes/server-aws-redshift-config.class';
+import { RedshiftServerlessClient } from '@aws-sdk/client-redshift-serverless';
+export declare class RedshiftDataService {
+    private redshiftDataClient;
+    private redshiftServerlessClient;
+    private config;
+    constructor(redshiftDataClient: RedshiftDataClient, redshiftServerlessClient: RedshiftServerlessClient, config: ServerAwsRedshiftDataConfig);
+    waitForStatement(statementId: string): Promise<void>;
+    verifyEndpointAccess(workgroupName: string): Promise<import("@aws-sdk/client-redshift-serverless").GetWorkgroupCommandOutput>;
+    addIamUserToDatabaseGroup(params: {
+        Database: string;
+        WorkgroupName: string;
+        User: string;
+        Group: string;
+    }): Promise<void>;
+    createDatabaseUser(params: {
+        Database: string;
+        WorkgroupName: string;
+        User: string;
+    }): Promise<boolean>;
+    grantUsageOnSchema(params: {
+        GroupName: string;
+        Database: string;
+        WorkgroupName: string;
+        Schema: string;
+        Group: string;
+    }): Promise<void>;
+    createDbGroupFromIamGroupIfNotExists(params: {
+        iamGroup: string;
+        Database: string;
+        WorkgroupName: string;
+    }): Promise<any>;
+}

package/package.json

@@ -0,0 +1,49 @@
+{
+    "name": "@onivoro/server-aws-redshift",
+    "version": "22.0.0",
+    "repository": {
+        "url": "git+https://github.com/onivoro/server-aws-redshift.git"
+    },
+    "main": "dist/cjs/index.js",
+    "module": "dist/esm/index.js",
+    "types": "dist/types/index.d.ts",
+    "files": [
+        "dist/*"
+    ],
+    "scripts": {
+        "onx": "onx",
+        "build": "onx Build",
+        "deploy": "onx Publish",
+        "test": "onx Test",
+        "update": "onx Update"
+    },
+    "exports": {
+        ".": {
+            "types": "./dist/types/index.d.ts",
+            "require": "./dist/cjs/index.js",
+            "import": "./dist/esm/index.js",
+            "default": "./dist/esm/lib.js"
+        }
+    },
+    "onx": {
+        "platform": "server",
+        "module": "commonjs"
+    },
+    "devDependencies": {
+        "@onivoro/cli": "^22.0.8",
+        "@types/jest": "*",
+        "@types/node": "22.8.1",
+        "typescript": "*"
+    },
+    "engines": {
+        "node": "22.10.0",
+        "npm": "10.9.0"
+    },
+    "dependencies": {
+        "@aws-sdk/client-redshift": "^3.699.0",
+        "@aws-sdk/client-redshift-data": "^3.709.0",
+        "@aws-sdk/client-redshift-serverless": "^3.709.0",
+        "@nestjs/common": "^10.4.6",
+        "@onivoro/server-common": "^22.0.3"
+    }
+}