@opengeni/db 4.4.0-canary.2 → 5.0.0-canary.1

package/dist/{chunk-6V3HDEMR.js → chunk-HQDVI2DB.js}

@@ -1,7 +1,7 @@
 import {
   rawRows,
   withRlsContext
-} from "./chunk-WFU6PS54.js";
+} from "./chunk-DPONPYJD.js";
 
 // src/editable-artifacts.ts
 import { createHash } from "crypto";
@@ -3540,4 +3540,4 @@ export {
   PostgresEditableArtifactStore,
   PostgresEditableArtifactLiveReadStore
 };
-//# sourceMappingURL=chunk-6V3HDEMR.js.map
+//# sourceMappingURL=chunk-HQDVI2DB.js.map

package/dist/{chunk-UOXWVP3T.js → chunk-MWMXWHJD.js}

@@ -1,7 +1,7 @@
 import {
   nestedPostgresSqlState,
   rawRows
-} from "./chunk-WFU6PS54.js";
+} from "./chunk-DPONPYJD.js";
 
 // src/managed-auth-session-sets.ts
 import {
@@ -296,4 +296,4 @@ export {
   reapManagedAuthIsolatedSessions,
   reapExpiredManagedAuthSessionSets
 };
-//# sourceMappingURL=chunk-UOXWVP3T.js.map
+//# sourceMappingURL=chunk-MWMXWHJD.js.map

package/dist/{chunk-CHBLBEU6.js → chunk-T6BWIGWJ.js}

@@ -5,7 +5,7 @@ import {
   withWorkspaceRls,
   withWorkspaceSubjectRls,
   withWorkspaceSubjectSessionActivityRls
-} from "./chunk-WFU6PS54.js";
+} from "./chunk-DPONPYJD.js";
 
 // src/session-tenancy.ts
 import { createHash } from "crypto";
@@ -502,4 +502,4 @@ export {
   forkSessionContent,
   replayAppliedSessionFork
 };
-//# sourceMappingURL=chunk-CHBLBEU6.js.map
+//# sourceMappingURL=chunk-T6BWIGWJ.js.map

package/dist/{chunk-XJP7KJ6U.js → chunk-T6YLHJLS.js}

@@ -122,6 +122,11 @@ var AUTOMATIC_SESSION_TITLE_FANOUT_RUNTIME_ROUTINES = [
 var AUTOMATIC_SESSION_TITLE_FANOUT_MIGRATION_ROUTINE = "enqueue_automatic_session_title_fanout_v1(uuid, uuid, uuid, uuid)";
 var AUTOMATIC_SESSION_TITLE_POLICY_TRIGGER_ROUTINE = "enforce_automatic_session_title_policy_v1()";
 var AUTOMATIC_SESSION_TITLE_FANOUT_OUTBOX_TABLE = "automatic_session_title_fanout_outbox_v1";
+var SANDBOX_FILE_PUBLICATION_RUNTIME_ROUTINES = [
+  "record_sandbox_file_publication(uuid, uuid, uuid, uuid)",
+  "list_sandbox_file_publications(uuid, uuid, jsonb)"
+];
+var SANDBOX_FILE_PUBLICATIONS_TABLE = "sandbox_file_publications";
 var AUTOMATIC_SESSION_TITLE_QUARANTINE_FENCE_ROUTINE = "acquire_automatic_session_title_quarantine_fences_v1(integer)";
 var MCP_OPERATION_CAPABILITY_ROUTINE = "mcp_operation_command(jsonb, text, jsonb)";
 var MCP_OPERATION_AUTHORITY_TABLES = [
@@ -1767,6 +1772,7 @@ async function inspectRuntimeDatabasePosture(db, options) {
               ${DOCUMENT_MIGRATION_CAPABILITY_TABLE},
               ${SCOPED_COMPUTE_CAPABILITY_TABLE},
               ${CONNECTION_TENANCY_BACKFILL_CAPABILITY_TABLE},
+              ${SANDBOX_FILE_PUBLICATIONS_TABLE},
               ${AUTOMATIC_SESSION_TITLE_FANOUT_OUTBOX_TABLE}
             )
         `)
@@ -1828,7 +1834,8 @@ async function inspectRuntimeDatabasePosture(db, options) {
               from aclexplode(coalesce(p.proacl, acldefault('f', p.proowner))) acl
               where acl.grantee = 0 and acl.privilege_type = 'EXECUTE'
             ) as public_execute,
-            p.prosecdef as security_definer
+            p.prosecdef as security_definer,
+            p.proconfig as configuration
           from pg_proc p
           join pg_namespace n on n.oid = p.pronamespace
           where n.nspname = 'opengeni_private'
@@ -1840,7 +1847,8 @@ async function inspectRuntimeDatabasePosture(db, options) {
         owner: row.owner,
         execute: row.can_execute,
         publicExecute: row.public_execute,
-        securityDefiner: row.security_definer
+        securityDefiner: row.security_definer,
+        configuration: row.configuration
       }));
       return {
         identity: mappedIdentity,
@@ -3205,6 +3213,35 @@ function evaluateRuntimeDatabasePosture(posture, options) {
       );
     }
   }
+  const publicationTables = posture.privateTables.filter(
+    (table) => table.name === SANDBOX_FILE_PUBLICATIONS_TABLE
+  );
+  if (publicationTables.length !== 1) {
+    if (!options.protectedTables)
+      violations.push("sandbox file publication private relation is missing or ambiguous");
+  } else {
+    const table = publicationTables[0];
+    if (!table.rlsEnabled || !table.rlsForced || !table.rlsActive || (table.policyCount ?? 0) < 2) {
+      violations.push("sandbox file publication relation lacks active FORCE-RLS file isolation");
+    }
+    if (table.select || table.insert || table.update || table.delete || table.owner === expectedRole) {
+      violations.push("runtime role has forbidden direct sandbox file publication authority");
+    }
+    const filesOwner = tableByName.get("files")?.owner;
+    if (filesOwner && table.owner !== filesOwner)
+      violations.push("sandbox file publication owner does not match file authority");
+    for (const name of SANDBOX_FILE_PUBLICATION_RUNTIME_ROUTINES) {
+      const routines = posture.privateRoutines.filter((routine) => routine.name === name);
+      const quotedSchema = `"${targetSchema.replaceAll('"', '""')}"`;
+      const searchPaths = /* @__PURE__ */ new Set([
+        `search_path=pg_catalog, ${quotedSchema}, pg_temp`,
+        `search_path=pg_catalog, ${/^[a-z_][a-z0-9_]*$/.test(targetSchema) ? targetSchema : quotedSchema}, pg_temp`
+      ]);
+      if (routines.length !== 1 || !routines[0].execute || routines[0].publicExecute || !routines[0].securityDefiner || routines[0].owner !== table.owner || !routines[0].configuration?.some((configuration) => searchPaths.has(configuration))) {
+        violations.push(`sandbox file publication capability ${name} is missing or unsafe`);
+      }
+    }
+  }
   for (const routine of posture.privateRoutines) {
     if (routine.owner === expectedRole) {
       violations.push(`runtime role owns private routine ${routine.name}`);
@@ -5151,6 +5188,12 @@ BEGIN
     EXECUTE format('GRANT USAGE ON SCHEMA opengeni_private TO %I', ${literal(role)});
     EXECUTE format('REVOKE CREATE ON SCHEMA opengeni_private FROM %I', ${literal(role)});
     EXECUTE format('GRANT EXECUTE ON ALL FUNCTIONS IN SCHEMA opengeni_private TO %I', ${literal(role)});
+    IF to_regclass('opengeni_private.sandbox_file_publications') IS NOT NULL THEN
+      EXECUTE format('REVOKE ALL ON TABLE opengeni_private.sandbox_file_publications FROM %I', ${literal(role)});
+      REVOKE ALL ON TABLE opengeni_private.sandbox_file_publications FROM PUBLIC;
+      REVOKE ALL ON FUNCTION opengeni_private.record_sandbox_file_publication(uuid,uuid,uuid,uuid) FROM PUBLIC;
+      REVOKE ALL ON FUNCTION opengeni_private.list_sandbox_file_publications(uuid,uuid,jsonb) FROM PUBLIC;
+    END IF;
     FOREACH routine_signature IN ARRAY ARRAY[
       'guard_mcp_operation_immutable()',
       'mcp_operation_command_scoped(jsonb,text,jsonb)',
@@ -5367,6 +5410,7 @@ if (import.meta.main) {
 }
 
 export {
+  SANDBOX_FILE_PUBLICATION_RUNTIME_ROUTINES,
   WORK_CLAIM_CAPABILITY_ROUTINES,
   RUNTIME_TARGET_SCHEMA_CAPABILITY_ROUTINES,
   RUNTIME_TARGET_SCHEMA_PUBLIC_POLICY_PREDICATE_ROUTINES,
@@ -5389,4 +5433,4 @@ export {
   runtimeDatabaseReadyCheck,
   provisionRoles
 };
-//# sourceMappingURL=chunk-XJP7KJ6U.js.map
+//# sourceMappingURL=chunk-T6YLHJLS.js.map