@opengeni/db 0.36.1 → 3.1.0-canary.0

package/dist/chunk-FPVAD4CO.js

@@ -1,117 +0,0 @@
-import {
-  rawRows,
-  rlsContextForWorkspace,
-  withWorkspaceSubjectRls,
-  withWorkspaceSubjectSessionActivityRls
-} from "./chunk-Z7VYMNPZ.js";
-
-// src/session-tenancy.ts
-import { createHash } from "crypto";
-import { sql } from "drizzle-orm";
-function canonicalSessionVisibilityTransitionHash(input) {
-  return createHash("sha256").update(
-    JSON.stringify({
-      version: 1,
-      sessionId: input.sessionId,
-      targetVisibility: input.targetVisibility,
-      expectedAuthorityEpoch: input.expectedAuthorityEpoch
-    })
-  ).digest("hex");
-}
-function canonicalSessionForkHash(input) {
-  return createHash("sha256").update(
-    JSON.stringify({
-      version: 1,
-      sourceSessionId: input.sourceSessionId,
-      destinationWorkspaceId: input.destinationWorkspaceId,
-      destinationVisibility: input.destinationVisibility
-    })
-  ).digest("hex");
-}
-async function transitionSessionVisibility(db, input) {
-  if (!Number.isSafeInteger(input.expectedAuthorityEpoch) || input.expectedAuthorityEpoch < 1) {
-    throw new Error("expectedAuthorityEpoch must be a positive safe integer");
-  }
-  if (!input.operationKey.trim()) throw new Error("operationKey must not be empty");
-  const requestHash = canonicalSessionVisibilityTransitionHash(input);
-  const { accountId } = await rlsContextForWorkspace(db, input.workspaceId);
-  return await withWorkspaceSubjectSessionActivityRls(
-    db,
-    input.workspaceId,
-    input.actorSubjectId,
-    async (scopedDb) => {
-      const rows = await rawRows(
-        scopedDb,
-        sql`select
-          operation_id as "operationId",
-          visibility,
-          authority_epoch as "authorityEpoch",
-          owner_organization_membership_id as "ownerOrganizationMembershipId",
-          changed,
-          replay,
-          interrupted_attempt_count as "interruptedAttemptCount",
-          cancelled_turn_count as "cancelledTurnCount",
-          cancelled_update_count as "cancelledUpdateCount",
-          paused_goal_count as "pausedGoalCount",
-          revoked_grant_count as "revokedGrantCount"
-        from transition_session_visibility(
-          ${accountId}::uuid,
-          ${input.workspaceId}::uuid,
-          ${input.sessionId}::uuid,
-          ${input.actorSubjectId},
-          ${input.targetVisibility},
-          ${input.expectedAuthorityEpoch},
-          ${input.operationKey},
-          ${requestHash}
-        )`
-      );
-      const result = rows[0];
-      if (!result) throw new Error("Session visibility transition returned no result");
-      return result;
-    }
-  );
-}
-async function forkSessionContent(db, input) {
-  if (!input.operationKey.trim()) throw new Error("operationKey must not be empty");
-  const { accountId } = await rlsContextForWorkspace(db, input.sourceWorkspaceId);
-  const requestHash = canonicalSessionForkHash(input);
-  return await withWorkspaceSubjectRls(
-    db,
-    input.sourceWorkspaceId,
-    input.actorSubjectId,
-    async (scopedDb) => {
-      const rows = await rawRows(
-        scopedDb,
-        sql`select
-          operation_id as "operationId",
-          session_id as "sessionId",
-          workspace_id as "workspaceId",
-          visibility,
-          authority_epoch as "authorityEpoch",
-          copied_history_item_count as "copiedHistoryItemCount",
-          replay
-        from fork_session_content(
-          ${accountId}::uuid,
-          ${input.sourceWorkspaceId}::uuid,
-          ${input.sourceSessionId}::uuid,
-          ${input.actorSubjectId},
-          ${input.destinationWorkspaceId}::uuid,
-          ${input.destinationVisibility},
-          ${input.operationKey},
-          ${requestHash}
-        )`
-      );
-      const result = rows[0];
-      if (!result) throw new Error("Session fork returned no result");
-      return result;
-    }
-  );
-}
-
-export {
-  canonicalSessionVisibilityTransitionHash,
-  canonicalSessionForkHash,
-  transitionSessionVisibility,
-  forkSessionContent
-};
-//# sourceMappingURL=chunk-FPVAD4CO.js.map

package/dist/chunk-FPVAD4CO.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/session-tenancy.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { sql } from \"drizzle-orm\";\nimport {\n  rawRows,\n  type Database,\n  rlsContextForWorkspace,\n  withWorkspaceSubjectRls,\n  withWorkspaceSubjectSessionActivityRls,\n} from \"./database\";\n\nexport type SessionTenancyVisibility = \"user_private\" | \"workspace_shared\";\n\nexport type TransitionSessionVisibilityInput = {\n  workspaceId: string;\n  sessionId: string;\n  actorSubjectId: string;\n  targetVisibility: SessionTenancyVisibility;\n  expectedAuthorityEpoch: number;\n  operationKey: string;\n};\n\nexport type TransitionSessionVisibilityResult = {\n  operationId: string;\n  visibility: SessionTenancyVisibility;\n  authorityEpoch: number;\n  ownerOrganizationMembershipId: string | null;\n  changed: boolean;\n  replay: boolean;\n  interruptedAttemptCount: number;\n  cancelledTurnCount: number;\n  cancelledUpdateCount: number;\n  pausedGoalCount: number;\n  revokedGrantCount: number;\n};\n\nexport type ForkSessionContentInput = {\n  sourceWorkspaceId: string;\n  sourceSessionId: string;\n  actorSubjectId: string;\n  destinationWorkspaceId: string;\n  destinationVisibility: SessionTenancyVisibility;\n  operationKey: string;\n};\n\nexport type ForkSessionContentResult = {\n  operationId: string;\n  sessionId: string;\n  workspaceId: string;\n  visibility: SessionTenancyVisibility;\n  authorityEpoch: number;\n  copiedHistoryItemCount: number;\n  replay: boolean;\n};\n\nexport function canonicalSessionVisibilityTransitionHash(\n  input: Pick<\n    TransitionSessionVisibilityInput,\n    \"sessionId\" | \"targetVisibility\" | \"expectedAuthorityEpoch\"\n  >,\n): string {\n  return createHash(\"sha256\")\n    .update(\n      JSON.stringify({\n        version: 1,\n        sessionId: input.sessionId,\n        targetVisibility: input.targetVisibility,\n        expectedAuthorityEpoch: input.expectedAuthorityEpoch,\n      }),\n    )\n    .digest(\"hex\");\n}\n\nexport function canonicalSessionForkHash(\n  input: Pick<\n    ForkSessionContentInput,\n    \"sourceSessionId\" | \"destinationWorkspaceId\" | \"destinationVisibility\"\n  >,\n): string {\n  return createHash(\"sha256\")\n    .update(\n      JSON.stringify({\n        version: 1,\n        sourceSessionId: input.sourceSessionId,\n        destinationWorkspaceId: input.destinationWorkspaceId,\n        destinationVisibility: input.destinationVisibility,\n      }),\n    )\n    .digest(\"hex\");\n}\n\nexport async function transitionSessionVisibility(\n  db: Database,\n  input: TransitionSessionVisibilityInput,\n): Promise<TransitionSessionVisibilityResult> {\n  if (!Number.isSafeInteger(input.expectedAuthorityEpoch) || input.expectedAuthorityEpoch < 1) {\n    throw new Error(\"expectedAuthorityEpoch must be a positive safe integer\");\n  }\n  if (!input.operationKey.trim()) throw new Error(\"operationKey must not be empty\");\n  const requestHash = canonicalSessionVisibilityTransitionHash(input);\n  const { accountId } = await rlsContextForWorkspace(db, input.workspaceId);\n  return await withWorkspaceSubjectSessionActivityRls(\n    db,\n    input.workspaceId,\n    input.actorSubjectId,\n    async (scopedDb) => {\n      const rows = await rawRows<{\n        operationId: string;\n        visibility: SessionTenancyVisibility;\n        authorityEpoch: number;\n        ownerOrganizationMembershipId: string | null;\n        changed: boolean;\n        replay: boolean;\n        interruptedAttemptCount: number;\n        cancelledTurnCount: number;\n        cancelledUpdateCount: number;\n        pausedGoalCount: number;\n        revokedGrantCount: number;\n      }>(\n        scopedDb,\n        sql`select\n          operation_id as \"operationId\",\n          visibility,\n          authority_epoch as \"authorityEpoch\",\n          owner_organization_membership_id as \"ownerOrganizationMembershipId\",\n          changed,\n          replay,\n          interrupted_attempt_count as \"interruptedAttemptCount\",\n          cancelled_turn_count as \"cancelledTurnCount\",\n          cancelled_update_count as \"cancelledUpdateCount\",\n          paused_goal_count as \"pausedGoalCount\",\n          revoked_grant_count as \"revokedGrantCount\"\n        from transition_session_visibility(\n          ${accountId}::uuid,\n          ${input.workspaceId}::uuid,\n          ${input.sessionId}::uuid,\n          ${input.actorSubjectId},\n          ${input.targetVisibility},\n          ${input.expectedAuthorityEpoch},\n          ${input.operationKey},\n          ${requestHash}\n        )`,\n      );\n      const result = rows[0];\n      if (!result) throw new Error(\"Session visibility transition returned no result\");\n      return result;\n    },\n  );\n}\n\nexport async function forkSessionContent(\n  db: Database,\n  input: ForkSessionContentInput,\n): Promise<ForkSessionContentResult> {\n  if (!input.operationKey.trim()) throw new Error(\"operationKey must not be empty\");\n  const { accountId } = await rlsContextForWorkspace(db, input.sourceWorkspaceId);\n  const requestHash = canonicalSessionForkHash(input);\n  return await withWorkspaceSubjectRls(\n    db,\n    input.sourceWorkspaceId,\n    input.actorSubjectId,\n    async (scopedDb) => {\n      const rows = await rawRows<ForkSessionContentResult>(\n        scopedDb,\n        sql`select\n          operation_id as \"operationId\",\n          session_id as \"sessionId\",\n          workspace_id as \"workspaceId\",\n          visibility,\n          authority_epoch as \"authorityEpoch\",\n          copied_history_item_count as \"copiedHistoryItemCount\",\n          replay\n        from fork_session_content(\n          ${accountId}::uuid,\n          ${input.sourceWorkspaceId}::uuid,\n          ${input.sourceSessionId}::uuid,\n          ${input.actorSubjectId},\n          ${input.destinationWorkspaceId}::uuid,\n          ${input.destinationVisibility},\n          ${input.operationKey},\n          ${requestHash}\n        )`,\n      );\n      const result = rows[0];\n      if (!result) throw new Error(\"Session fork returned no result\");\n      return result;\n    },\n  );\n}\n"],"mappings":";;;;;;;;AAAA,SAAS,kBAAkB;AAC3B,SAAS,WAAW;AAqDb,SAAS,yCACd,OAIQ;AACR,SAAO,WAAW,QAAQ,EACvB;AAAA,IACC,KAAK,UAAU;AAAA,MACb,SAAS;AAAA,MACT,WAAW,MAAM;AAAA,MACjB,kBAAkB,MAAM;AAAA,MACxB,wBAAwB,MAAM;AAAA,IAChC,CAAC;AAAA,EACH,EACC,OAAO,KAAK;AACjB;AAEO,SAAS,yBACd,OAIQ;AACR,SAAO,WAAW,QAAQ,EACvB;AAAA,IACC,KAAK,UAAU;AAAA,MACb,SAAS;AAAA,MACT,iBAAiB,MAAM;AAAA,MACvB,wBAAwB,MAAM;AAAA,MAC9B,uBAAuB,MAAM;AAAA,IAC/B,CAAC;AAAA,EACH,EACC,OAAO,KAAK;AACjB;AAEA,eAAsB,4BACpB,IACA,OAC4C;AAC5C,MAAI,CAAC,OAAO,cAAc,MAAM,sBAAsB,KAAK,MAAM,yBAAyB,GAAG;AAC3F,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AACA,MAAI,CAAC,MAAM,aAAa,KAAK,EAAG,OAAM,IAAI,MAAM,gCAAgC;AAChF,QAAM,cAAc,yCAAyC,KAAK;AAClE,QAAM,EAAE,UAAU,IAAI,MAAM,uBAAuB,IAAI,MAAM,WAAW;AACxE,SAAO,MAAM;AAAA,IACX;AAAA,IACA,MAAM;AAAA,IACN,MAAM;AAAA,IACN,OAAO,aAAa;AAClB,YAAM,OAAO,MAAM;AAAA,QAajB;AAAA,QACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,YAaI,SAAS;AAAA,YACT,MAAM,WAAW;AAAA,YACjB,MAAM,SAAS;AAAA,YACf,MAAM,cAAc;AAAA,YACpB,MAAM,gBAAgB;AAAA,YACtB,MAAM,sBAAsB;AAAA,YAC5B,MAAM,YAAY;AAAA,YAClB,WAAW;AAAA;AAAA,MAEjB;AACA,YAAM,SAAS,KAAK,CAAC;AACrB,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,kDAAkD;AAC/E,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,eAAsB,mBACpB,IACA,OACmC;AACnC,MAAI,CAAC,MAAM,aAAa,KAAK,EAAG,OAAM,IAAI,MAAM,gCAAgC;AAChF,QAAM,EAAE,UAAU,IAAI,MAAM,uBAAuB,IAAI,MAAM,iBAAiB;AAC9E,QAAM,cAAc,yBAAyB,KAAK;AAClD,SAAO,MAAM;AAAA,IACX;AAAA,IACA,MAAM;AAAA,IACN,MAAM;AAAA,IACN,OAAO,aAAa;AAClB,YAAM,OAAO,MAAM;AAAA,QACjB;AAAA,QACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,YASI,SAAS;AAAA,YACT,MAAM,iBAAiB;AAAA,YACvB,MAAM,eAAe;AAAA,YACrB,MAAM,cAAc;AAAA,YACpB,MAAM,sBAAsB;AAAA,YAC5B,MAAM,qBAAqB;AAAA,YAC3B,MAAM,YAAY;AAAA,YAClB,WAAW;AAAA;AAAA,MAEjB;AACA,YAAM,SAAS,KAAK,CAAC;AACrB,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,iCAAiC;AAC9D,aAAO;AAAA,IACT;AAAA,EACF;AACF;","names":[]}