@opengeni/db 0.14.3 → 0.17.1

package/dist/provision-roles.js

@@ -1,6 +1,6 @@
 import {
   provisionRoles
-} from "./chunk-ELMUCYZF.js";
+} from "./chunk-T6RSJT6C.js";
 import "./chunk-PZ5AY32C.js";
 export {
   provisionRoles

package/dist/role-relationships.d.ts

@@ -0,0 +1,35 @@
+export type RoleRelationshipDirection = "inherits" | "member";
+export type RoleRelationshipCatalogRow = {
+    relationship: string;
+    direction: RoleRelationshipDirection;
+    server_version_num: number;
+    admin_option: boolean | null;
+    inherit_option: boolean | null;
+    set_option: boolean | null;
+    member_is_superuser: boolean | null;
+    member_can_create_role: boolean | null;
+    grantor_role: string | null;
+    grantor_is_superuser: boolean | null;
+};
+export type ClassifiedRoleRelationships = {
+    relationships: string[];
+    managementOnlyRelationships: string[];
+    unsafeRelationships: string[];
+};
+type RoleTargetExpression = "current_user" | "$1";
+/**
+ * One PostgreSQL 15-compatible catalog query for both provisioning and runtime
+ * posture. PostgreSQL 16 added per-membership INHERIT and SET columns; reading
+ * the catalog row through to_jsonb keeps this statement parseable on 15 while
+ * leaving the missing options null and therefore fail-closed.
+ */
+export declare function roleRelationshipsCatalogQuery(targetRole: RoleTargetExpression): string;
+/**
+ * PostgreSQL 16+ automatically gives a non-superuser CREATEROLE principal an
+ * ADMIN-only grant on a role it creates. The exact edge below permits role
+ * management but cannot inherit the app role's privileges or SET ROLE into it.
+ */
+export declare function isManagementOnlyRoleRelationship(row: RoleRelationshipCatalogRow): boolean;
+/** Classify exact management-only reverse grants while rejecting every other edge. */
+export declare function classifyRoleRelationships(rows: readonly RoleRelationshipCatalogRow[]): ClassifiedRoleRelationships;
+export {};

package/dist/runtime-posture-cli.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/runtime-posture.d.ts

@@ -0,0 +1,103 @@
+import type { Database, RlsStrategy } from "./index";
+/**
+ * The complete standalone tenant-table contract. Adding or removing a
+ * FORCE-RLS table is an architectural change: update this list in the same
+ * commit as the migration so startup cannot silently accept an unreviewed gap.
+ */
+export declare const FORCE_RLS_TABLES: readonly ["agent_run_states", "api_keys", "audit_events", "billing_customers", "capability_catalog_items", "capability_installations", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "composer_drafts", "connections", "credit_ledger_entries", "device_enrollment_requests", "document_bases", "document_chunks", "documents", "enrollments", "file_uploads", "files", "github_installation_repositories", "github_installations", "host_export_config", "host_export_consumers", "host_export_cursor_state", "host_export_dead_letters", "host_export_outbox", "import_batches", "integration_oauth_state_nonces", "knowledge_memories", "machine_metrics_latest", "machine_metrics_series", "model_call_facts", "new_session_drafts", "pack_installations", "preference_registry_events", "preference_registry_preferences", "preference_registry_revisions", "preference_registry_snapshots", "rig_changes", "rig_versions", "rigs", "sandbox_checkpoint_artifacts", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_runs", "scheduled_tasks", "session_attempt_interruptions", "session_command_receipts", "session_events", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_recordings", "session_spawn_denials", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_turn_attempts", "session_turns", "session_workflow_wake_outbox", "sessions", "slack_bot_delete_operations", "slack_bot_post_operations", "slack_bot_user_links", "slack_interaction_inbox", "slack_interaction_progress_deliveries", "slack_interactions", "social_connections", "social_posts", "usage_events", "workspace_artifact_events", "workspace_artifact_versions", "workspace_artifacts", "workspace_captures", "workspace_control_events", "workspace_inference_controls", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_heads", "workspace_instruction_policy_revisions", "workspace_model_policies", "workspace_packs", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets"];
+/**
+ * Deployment-global and authentication tables used by ordinary API/worker
+ * traffic. They intentionally do not carry workspace RLS: their access model
+ * is implemented by the authentication/access layer or by exact global keys.
+ */
+export declare const NON_RLS_RUNTIME_TABLES: readonly ["auth_identities", "auth_rate_limits", "auth_sessions", "auth_users", "auth_verifications", "integration_oauth_clients", "managed_accounts", "nested_agent_depth_configuration", "stripe_webhook_events", "workspace_memberships", "workspaces"];
+/**
+ * Exact full-CRUD class for the standalone runtime role. This is deliberately
+ * explicit instead of being derived from FORCE_RLS_TABLES: adding a protected
+ * table must not silently grant it broader DML than its migration intended.
+ */
+export declare const RUNTIME_FULL_DML_TABLES: readonly ["agent_run_states", "api_keys", "audit_events", "auth_identities", "auth_rate_limits", "auth_sessions", "auth_users", "auth_verifications", "billing_customers", "capability_catalog_items", "capability_installations", "codex_capacity_waiters", "codex_credential_leases", "codex_reset_redemption_attempts", "codex_rotation_settings", "codex_subscription_credentials", "composer_drafts", "connections", "credit_ledger_entries", "device_enrollment_requests", "document_bases", "document_chunks", "documents", "enrollments", "file_uploads", "files", "github_installation_repositories", "github_installations", "import_batches", "integration_oauth_clients", "integration_oauth_state_nonces", "knowledge_memories", "machine_metrics_latest", "machine_metrics_series", "managed_accounts", "model_call_facts", "new_session_drafts", "pack_installations", "rig_changes", "rig_versions", "rigs", "sandbox_checkpoint_artifacts", "sandbox_lease_holders", "sandbox_leases", "sandbox_pty_sessions", "sandbox_retained_processes", "sandbox_session_envelopes", "sandbox_workspace_mutation_admissions", "sandboxes", "scheduled_task_runs", "scheduled_tasks", "session_attempt_interruptions", "session_command_receipts", "session_events", "session_goals", "session_history_items", "session_human_input_requests", "session_list_snapshots", "session_mcp_servers", "session_pending_tool_calls", "session_pins", "session_recordings", "session_stream_acknowledgments", "session_system_update_outbox", "session_system_updates", "session_turn_attempts", "session_turns", "session_workflow_wake_outbox", "sessions", "slack_bot_delete_operations", "slack_bot_post_operations", "slack_bot_user_links", "slack_interaction_inbox", "slack_interaction_progress_deliveries", "slack_interactions", "social_connections", "social_posts", "stripe_webhook_events", "usage_events", "workspace_artifacts", "workspace_captures", "workspace_control_events", "workspace_inference_controls", "workspace_instruction_policy_heads", "workspace_memberships", "workspace_model_policies", "workspace_packs", "workspace_session_activity_revisions", "workspace_variable_set_variables", "workspace_variable_sets", "workspaces"];
+/** Configuration and lifecycle-owned audit rows are read-only at runtime. */
+export declare const RUNTIME_READ_ONLY_TABLES: readonly ["nested_agent_depth_configuration", "preference_registry_events", "preference_registry_snapshots"];
+/** Append-only evidence/revision tables are insertable and queryable, never mutable. */
+export declare const RUNTIME_READ_INSERT_TABLES: readonly ["preference_registry_preferences", "preference_registry_revisions", "session_spawn_denials", "workspace_artifact_events", "workspace_artifact_versions", "workspace_instruction_policy_activation_events", "workspace_instruction_policy_revisions"];
+/**
+ * These FORCE-RLS tables are owned by security-definer host-export routines.
+ * The ordinary application role must have no direct table privileges on them.
+ */
+export declare const PROTECTED_NO_DIRECT_DML_TABLES: readonly ["host_export_config", "host_export_consumers", "host_export_cursor_state", "host_export_dead_letters", "host_export_outbox"];
+export type RuntimeTableDmlPrivilege = "SELECT" | "INSERT" | "UPDATE" | "DELETE";
+export type RuntimeTablePrivilegeContract = Readonly<Record<string, readonly RuntimeTableDmlPrivilege[]>>;
+/** Exact per-table DML contract. Absence means no direct table privileges. */
+export declare const RUNTIME_TABLE_PRIVILEGES: RuntimeTablePrivilegeContract;
+/** All tables with any direct runtime DML; retained as the aggregate public contract. */
+export declare const RUNTIME_DML_TABLES: readonly string[];
+export type RuntimeDatabasePostureOptions = {
+    rlsStrategy: RlsStrategy;
+    expectedRole?: string;
+    targetSchema?: string;
+    protectedTables?: readonly string[];
+    tablePrivileges?: RuntimeTablePrivilegeContract;
+    protectedNoDirectDmlTables?: readonly string[];
+};
+export type RuntimeDatabaseIdentity = {
+    currentUser: string;
+    sessionUser: string;
+    databaseOwner: string;
+    canConnectDatabase: boolean;
+    canCreateInDatabase: boolean;
+    rowSecurity: string;
+    canLogin: boolean;
+    superuser: boolean;
+    inherit: boolean;
+    createRole: boolean;
+    createDatabase: boolean;
+    replication: boolean;
+    bypassRls: boolean;
+};
+export type RuntimeSchemaPosture = {
+    name: string;
+    owner: string;
+    usage: boolean;
+    create: boolean;
+};
+export type RuntimeTablePosture = {
+    name: string;
+    owner: string;
+    rlsEnabled: boolean;
+    rlsForced: boolean;
+    rlsActive: boolean;
+    policyCount: number;
+    select: boolean;
+    insert: boolean;
+    update: boolean;
+    delete: boolean;
+    truncate: boolean;
+    references: boolean;
+    trigger: boolean;
+};
+export type RuntimeRoutinePosture = {
+    name: string;
+    owner: string;
+    execute: boolean;
+};
+export type RuntimeDatabasePosture = {
+    identity: RuntimeDatabaseIdentity;
+    /** Privilege-bearing role relationships; exact PG16+ management-only grants are excluded. */
+    memberships: string[];
+    schemas: RuntimeSchemaPosture[];
+    ownedSchemas: string[];
+    ownedRelations: string[];
+    tables: RuntimeTablePosture[];
+    privateRoutines: RuntimeRoutinePosture[];
+};
+export declare class RuntimeDatabasePostureError extends Error {
+    readonly violations: readonly string[];
+    constructor(violations: readonly string[]);
+}
+/** Inspect only PostgreSQL catalogs and privilege functions; no tenant rows. */
+export declare function inspectRuntimeDatabasePosture(db: Database, options: RuntimeDatabasePostureOptions): Promise<RuntimeDatabasePosture>;
+/** Pure deterministic evaluator used by startup/readiness and unit tests. */
+export declare function evaluateRuntimeDatabasePosture(posture: RuntimeDatabasePosture, options: RuntimeDatabasePostureOptions): string[];
+export declare function assertRuntimeDatabasePosture(db: Database, options: RuntimeDatabasePostureOptions): Promise<RuntimeDatabasePosture>;
+export declare function runtimeDatabaseReadyCheck(db: Database, options: RuntimeDatabasePostureOptions): () => Promise<void>;