@opengeni/db 0.18.1 → 0.21.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/chunk-NK2A36KP.js +5822 -0
- package/dist/chunk-NK2A36KP.js.map +1 -0
- package/dist/{chunk-T6RSJT6C.js → chunk-OTJHD33E.js} +109 -1
- package/dist/chunk-OTJHD33E.js.map +1 -0
- package/dist/index.d.ts +25 -1
- package/dist/index.js +5761 -2827
- package/dist/index.js.map +1 -1
- package/dist/memory-domain.d.ts +110 -1
- package/dist/memory-governance-schema.d.ts +562 -0
- package/dist/memory-governance.d.ts +41 -0
- package/dist/provision-roles.js +1 -1
- package/dist/runtime-posture.d.ts +3 -3
- package/dist/schema.d.ts +425 -0
- package/dist/schema.js +37 -1
- package/dist/scoped-knowledge-schema.d.ts +5341 -0
- package/dist/scoped-knowledge.d.ts +208 -0
- package/dist/session-queue-commands.d.ts +2 -1
- package/drizzle/0152_hierarchical_memory_foundation.sql +1589 -0
- package/drizzle/0153_mcp_personal_connection_delegations.sql +181 -0
- package/drizzle/0154_scoped_knowledge_foundation.sql +2292 -0
- package/package.json +3 -3
- package/src/connection-token-resolver.ts +3 -0
- package/src/index.ts +351 -12
- package/src/memory-domain.ts +360 -1
- package/src/memory-governance-schema.ts +162 -0
- package/src/memory-governance.ts +317 -0
- package/src/provision-roles.ts +72 -0
- package/src/runtime-posture.ts +36 -0
- package/src/schema.ts +87 -4
- package/src/scoped-knowledge-schema.ts +603 -0
- package/src/scoped-knowledge.ts +2891 -0
- package/src/session-queue-commands.ts +48 -0
- package/dist/chunk-T6RSJT6C.js.map +0 -1
- package/dist/chunk-YKWJ7QJ2.js +0 -5000
- package/dist/chunk-YKWJ7QJ2.js.map +0 -1
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@opengeni/db",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.21.0",
|
|
4
4
|
"description": "OpenGeni persistence: Drizzle schema, RLS-scoped query layer, the SQL migration runner, and role provisioning.",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"repository": {
|
|
@@ -51,8 +51,8 @@
|
|
|
51
51
|
},
|
|
52
52
|
"dependencies": {
|
|
53
53
|
"@opengeni/codex": "^0.2.9",
|
|
54
|
-
"@opengeni/config": "^0.9.
|
|
55
|
-
"@opengeni/contracts": "^0.
|
|
54
|
+
"@opengeni/config": "^0.9.3",
|
|
55
|
+
"@opengeni/contracts": "^0.30.0",
|
|
56
56
|
"@opengeni/network": "^0.1.1",
|
|
57
57
|
"drizzle-orm": "^0.45.2",
|
|
58
58
|
"postgres": "^3.4.7"
|
|
@@ -506,6 +506,9 @@ export function buildConnectionTokenResolver(
|
|
|
506
506
|
|
|
507
507
|
return async (input) => {
|
|
508
508
|
const ref = input.connectionRef;
|
|
509
|
+
if (ref.subjectScope === "subject" && !input.subjectId) {
|
|
510
|
+
return authNeeded(ref, "personal_authority_unavailable", ref.connectionId);
|
|
511
|
+
}
|
|
509
512
|
// Repository-scoped provider bindings require a broker that can prove the
|
|
510
513
|
// selected-resource boundary. The generic standalone credential store has
|
|
511
514
|
// no provider-specific containment adapter, so it must fail closed instead
|