@pgpm/database-jobs 0.26.1 → 0.26.3

package/Makefile

@@ -1,5 +1,5 @@
 EXTENSION = pgpm-database-jobs
-DATA = sql/pgpm-database-jobs--0.26.0.sql
+DATA = sql/pgpm-database-jobs--0.26.2.sql
 
 PG_CONFIG = pg_config
 PGXS := $(shell $(PG_CONFIG) --pgxs)

package/deploy/schemas/app_jobs/procedures/add_job.sql

@@ -14,7 +14,9 @@ CREATE FUNCTION app_jobs.add_job (
   run_at timestamptz DEFAULT now(),
   max_attempts integer DEFAULT 25,
   priority integer DEFAULT 0,
-  entity_id uuid DEFAULT NULL
+  entity_id uuid DEFAULT NULL,
+  organization_id uuid DEFAULT NULL,
+  entity_type text DEFAULT NULL
 )
   RETURNS app_jobs.jobs
   AS $$
@@ -33,6 +35,8 @@ BEGIN
       database_id,
       actor_id,
       entity_id,
+      organization_id,
+      entity_type,
       task_identifier,
       payload,
       queue_name,
@@ -44,6 +48,8 @@ BEGIN
         v_database_id,
         v_actor_id,
         add_job.entity_id,
+        add_job.organization_id,
+        add_job.entity_type,
         identifier,
         coalesce(payload, '{}'::json),
         queue_name,
@@ -88,6 +94,8 @@ BEGIN
     database_id,
     actor_id,
     entity_id,
+    organization_id,
+    entity_type,
     task_identifier,
     payload,
     queue_name,
@@ -98,6 +106,8 @@ BEGIN
     v_database_id,
     v_actor_id,
     add_job.entity_id,
+    add_job.organization_id,
+    add_job.entity_type,
     identifier,
     payload,
     queue_name,

package/deploy/schemas/app_jobs/procedures/grants/grant_execute_add_job_to_authenticated.sql

@@ -0,0 +1,10 @@
+-- Deploy schemas/app_jobs/procedures/grants/grant_execute_add_job_to_authenticated to pg
+
+-- requires: schemas/app_jobs/schema
+-- requires: schemas/app_jobs/procedures/add_job
+
+BEGIN;
+
+GRANT EXECUTE ON FUNCTION app_jobs.add_job(text, json, text, text, timestamptz, integer, integer, uuid, uuid, text) TO authenticated;
+
+COMMIT;

package/deploy/schemas/app_jobs/schema.sql

@@ -2,6 +2,7 @@
 BEGIN;
 CREATE SCHEMA IF NOT EXISTS app_jobs;
 GRANT USAGE ON SCHEMA app_jobs TO administrator;
+GRANT USAGE ON SCHEMA app_jobs TO authenticated;
 ALTER DEFAULT PRIVILEGES IN SCHEMA app_jobs GRANT EXECUTE ON FUNCTIONS TO administrator;
 COMMIT;
 

package/deploy/schemas/app_jobs/tables/jobs/table.sql

@@ -7,6 +7,8 @@ CREATE TABLE app_jobs.jobs (
   database_id uuid,
   actor_id uuid,
   entity_id uuid,
+  organization_id uuid,
+  entity_type text,
   queue_name text DEFAULT NULL,
   task_identifier text NOT NULL,
   payload json DEFAULT '{}' ::json NOT NULL,
@@ -32,6 +34,8 @@ COMMENT ON COLUMN app_jobs.jobs.id IS 'Auto-incrementing job identifier';
 COMMENT ON COLUMN app_jobs.jobs.database_id IS 'Database this job belongs to (nullable for system-level jobs without tenant context)';
 COMMENT ON COLUMN app_jobs.jobs.actor_id IS 'User who triggered this job, read from JWT claims at enqueue time';
 COMMENT ON COLUMN app_jobs.jobs.entity_id IS 'Entity (org/team) this job is scoped to for billing; NULL means platform-level (resolved via database_id → owner_id)';
+COMMENT ON COLUMN app_jobs.jobs.organization_id IS 'Top-level organization for this entity; resolved at enqueue time via get_organization_id(entity_type, entity_id)';
+COMMENT ON COLUMN app_jobs.jobs.entity_type IS 'Entity type prefix (org, team, app, etc.) for interpreting entity_id';
 COMMENT ON COLUMN app_jobs.jobs.queue_name IS 'Name of the queue this job belongs to; used for worker routing and concurrency control';
 COMMENT ON COLUMN app_jobs.jobs.task_identifier IS 'Identifier for the task type (maps to a worker handler function)';
 COMMENT ON COLUMN app_jobs.jobs.payload IS 'JSON payload of arguments passed to the task handler';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pgpm/database-jobs",
-  "version": "0.26.1",
+  "version": "0.26.3",
   "description": "Database-specific job handling and queue management",
   "author": "Dan Lynch <pyramation@gmail.com>",
   "contributors": [
@@ -35,5 +35,5 @@
   "bugs": {
     "url": "https://github.com/constructive-io/pgpm-modules/issues"
   },
-  "gitHead": "e1f2e9bec1c91d0751ebe49e9193459191d3c464"
+  "gitHead": "fc269eb5f9521c96a0a618cdbcc99c451830d002"
 }

package/pgpm-database-jobs.control

@@ -1,6 +1,6 @@
 # pgpm-database-jobs extension
 comment = 'pgpm-database-jobs extension'
-default_version = '0.26.0'
+default_version = '0.26.2'
 module_pathname = '$libdir/pgpm-database-jobs'
 requires = 'plpgsql,pgcrypto,pgpm-verify,pgpm-jwt-claims'
 relocatable = false

package/pgpm.plan

@@ -36,5 +36,6 @@ schemas/app_jobs/procedures/complete_jobs [schemas/app_jobs/schema schemas/app_j
 schemas/app_jobs/procedures/complete_job [schemas/app_jobs/schema schemas/app_jobs/tables/jobs/table schemas/app_jobs/tables/job_queues/table] 2025-08-26T23:57:41Z pgpm <pgpm@5b0c196eeb62> # add schemas/app_jobs/procedures/complete_job
 schemas/app_jobs/procedures/add_scheduled_job [schemas/app_jobs/schema schemas/app_jobs/tables/scheduled_jobs/table pgpm-jwt-claims:schemas/jwt_private/procedures/current_database_id] 2025-08-26T23:57:41Z pgpm <pgpm@5b0c196eeb62> # add schemas/app_jobs/procedures/add_scheduled_job
 schemas/app_jobs/procedures/add_job [schemas/app_jobs/schema schemas/app_jobs/tables/jobs/table schemas/app_jobs/tables/job_queues/table pgpm-jwt-claims:schemas/jwt_private/procedures/current_database_id pgpm-jwt-claims:schemas/jwt_public/procedures/current_user_id] 2025-08-26T23:57:41Z pgpm <pgpm@5b0c196eeb62> # add schemas/app_jobs/procedures/add_job
+schemas/app_jobs/procedures/grants/grant_execute_add_job_to_authenticated [schemas/app_jobs/schema schemas/app_jobs/procedures/add_job] 2026-06-03T01:15:00Z pgpm <pgpm@localhost> # grant authenticated EXECUTE on add_job for INVOKER trigger support
 schemas/app_jobs/procedures/remove_job [schemas/app_jobs/schema schemas/app_jobs/tables/jobs/table] 2025-08-26T23:57:41Z pgpm <pgpm@5b0c196eeb62> # add schemas/app_jobs/procedures/remove_job
 schemas/app_jobs/procedures/force_unlock_workers [schemas/app_jobs/schema schemas/app_jobs/tables/jobs/table schemas/app_jobs/tables/job_queues/table] 2025-08-26T23:57:41Z pgpm <pgpm@5b0c196eeb62> # add schemas/app_jobs/procedures/force_unlock_workers

package/revert/schemas/app_jobs/procedures/grants/grant_execute_add_job_to_authenticated.sql

@@ -0,0 +1,7 @@
+-- Revert schemas/app_jobs/procedures/grants/grant_execute_add_job_to_authenticated from pg
+
+BEGIN;
+
+REVOKE EXECUTE ON FUNCTION app_jobs.add_job(text, json, text, text, timestamptz, integer, integer, uuid, uuid, text) FROM authenticated;
+
+COMMIT;

package/sql/{pgpm-database-jobs--0.26.0.sql → pgpm-database-jobs--0.26.2.sql}

@@ -3,6 +3,8 @@ CREATE SCHEMA IF NOT EXISTS app_jobs;
 
 GRANT USAGE ON SCHEMA app_jobs TO administrator;
 
+GRANT USAGE ON SCHEMA app_jobs TO authenticated;
+
 ALTER DEFAULT PRIVILEGES IN SCHEMA app_jobs
   GRANT EXECUTE ON FUNCTIONS TO administrator;
 
@@ -53,9 +55,7 @@ $EOFCODE$ LANGUAGE plpgsql VOLATILE SECURITY DEFINER;
 
 COMMENT ON FUNCTION app_jobs.tg_add_job_with_row IS 'Useful shortcut to create a job on insert or update. Pass the task name as the trigger argument, and the record data will automatically be available on the JSON payload.';
 
-CREATE FUNCTION app_jobs.json_build_object_apply(
-  arguments text[]
-) RETURNS pg_catalog.json AS $EOFCODE$
+CREATE FUNCTION app_jobs.json_build_object_apply(arguments text[]) RETURNS pg_catalog.json AS $EOFCODE$
 DECLARE
   arg text;
   _sql text;
@@ -195,6 +195,8 @@ CREATE TABLE app_jobs.jobs (
   database_id uuid,
   actor_id uuid,
   entity_id uuid,
+  organization_id uuid,
+  entity_type text,
   queue_name text DEFAULT NULL,
   task_identifier text NOT NULL,
   payload pg_catalog.json DEFAULT '{}'::json NOT NULL,
@@ -226,6 +228,10 @@ COMMENT ON COLUMN app_jobs.jobs.actor_id IS 'User who triggered this job, read f
 
 COMMENT ON COLUMN app_jobs.jobs.entity_id IS 'Entity (org/team) this job is scoped to for billing; NULL means platform-level (resolved via database_id → owner_id)';
 
+COMMENT ON COLUMN app_jobs.jobs.organization_id IS 'Top-level organization for this entity; resolved at enqueue time via get_organization_id(entity_type, entity_id)';
+
+COMMENT ON COLUMN app_jobs.jobs.entity_type IS 'Entity type prefix (org, team, app, etc.) for interpreting entity_id';
+
 COMMENT ON COLUMN app_jobs.jobs.queue_name IS 'Name of the queue this job belongs to; used for worker routing and concurrency control';
 
 COMMENT ON COLUMN app_jobs.jobs.task_identifier IS 'Identifier for the task type (maps to a worker handler function)';
@@ -374,10 +380,7 @@ CREATE INDEX job_queues_locked_by_idx ON app_jobs.job_queues (locked_by);
 
 GRANT SELECT, INSERT, UPDATE, DELETE ON app_jobs.job_queues TO administrator;
 
-CREATE FUNCTION app_jobs.run_scheduled_job(
-  id bigint,
-  job_expiry interval DEFAULT '1 hours'
-) RETURNS app_jobs.jobs AS $EOFCODE$
+CREATE FUNCTION app_jobs.run_scheduled_job(id bigint, job_expiry interval DEFAULT '1 hours') RETURNS app_jobs.jobs AS $EOFCODE$
 DECLARE
   j app_jobs.jobs;
   last_id bigint;
@@ -448,13 +451,7 @@ BEGIN
 END;
 $EOFCODE$ LANGUAGE plpgsql VOLATILE;
 
-CREATE FUNCTION app_jobs.reschedule_jobs(
-  job_ids bigint[],
-  run_at timestamptz DEFAULT NULL,
-  priority int DEFAULT NULL,
-  attempts int DEFAULT NULL,
-  max_attempts int DEFAULT NULL
-) RETURNS SETOF app_jobs.jobs LANGUAGE sql AS $EOFCODE$
+CREATE FUNCTION app_jobs.reschedule_jobs(job_ids bigint[], run_at timestamptz DEFAULT NULL, priority int DEFAULT NULL, attempts int DEFAULT NULL, max_attempts int DEFAULT NULL) RETURNS SETOF app_jobs.jobs LANGUAGE sql AS $EOFCODE$
   UPDATE
     app_jobs.jobs
   SET
@@ -470,10 +467,7 @@ CREATE FUNCTION app_jobs.reschedule_jobs(
     *;
 $EOFCODE$;
 
-CREATE FUNCTION app_jobs.release_scheduled_jobs(
-  worker_id text,
-  ids bigint[] DEFAULT NULL
-) RETURNS void AS $EOFCODE$
+CREATE FUNCTION app_jobs.release_scheduled_jobs(worker_id text, ids bigint[] DEFAULT NULL) RETURNS void AS $EOFCODE$
 DECLARE
 BEGIN
   -- clear the scheduled job
@@ -489,9 +483,7 @@ BEGIN
 END;
 $EOFCODE$ LANGUAGE plpgsql VOLATILE;
 
-CREATE FUNCTION app_jobs.release_jobs(
-  worker_id text
-) RETURNS void AS $EOFCODE$
+CREATE FUNCTION app_jobs.release_jobs(worker_id text) RETURNS void AS $EOFCODE$
 DECLARE
 BEGIN
   -- clear the job
@@ -514,10 +506,7 @@ BEGIN
 END;
 $EOFCODE$ LANGUAGE plpgsql VOLATILE;
 
-CREATE FUNCTION app_jobs.permanently_fail_jobs(
-  job_ids bigint[],
-  error_message text DEFAULT NULL
-) RETURNS SETOF app_jobs.jobs LANGUAGE sql AS $EOFCODE$
+CREATE FUNCTION app_jobs.permanently_fail_jobs(job_ids bigint[], error_message text DEFAULT NULL) RETURNS SETOF app_jobs.jobs LANGUAGE sql AS $EOFCODE$
   UPDATE
     app_jobs.jobs
   SET
@@ -531,10 +520,7 @@ CREATE FUNCTION app_jobs.permanently_fail_jobs(
     *;
 $EOFCODE$;
 
-CREATE FUNCTION app_jobs.get_scheduled_job(
-  worker_id text,
-  task_identifiers text[] DEFAULT NULL
-) RETURNS app_jobs.scheduled_jobs LANGUAGE plpgsql AS $EOFCODE$
+CREATE FUNCTION app_jobs.get_scheduled_job(worker_id text, task_identifiers text[] DEFAULT NULL) RETURNS app_jobs.scheduled_jobs LANGUAGE plpgsql AS $EOFCODE$
 DECLARE
   v_job_id bigint;
   v_row app_jobs.scheduled_jobs;
@@ -586,11 +572,7 @@ BEGIN
 END;
 $EOFCODE$;
 
-CREATE FUNCTION app_jobs.get_job(
-  worker_id text,
-  task_identifiers text[] DEFAULT NULL,
-  job_expiry interval DEFAULT '4 hours'
-) RETURNS app_jobs.jobs LANGUAGE plpgsql AS $EOFCODE$
+CREATE FUNCTION app_jobs.get_job(worker_id text, task_identifiers text[] DEFAULT NULL, job_expiry interval DEFAULT '4 hours') RETURNS app_jobs.jobs LANGUAGE plpgsql AS $EOFCODE$
 DECLARE
   v_job_id bigint;
   v_queue_name text;
@@ -645,11 +627,7 @@ BEGIN
 END;
 $EOFCODE$;
 
-CREATE FUNCTION app_jobs.fail_job(
-  worker_id text,
-  job_id bigint,
-  error_message text
-) RETURNS app_jobs.jobs LANGUAGE plpgsql STRICT AS $EOFCODE$
+CREATE FUNCTION app_jobs.fail_job(worker_id text, job_id bigint, error_message text) RETURNS app_jobs.jobs LANGUAGE plpgsql STRICT AS $EOFCODE$
 DECLARE
   v_row app_jobs.jobs;
 BEGIN
@@ -679,9 +657,7 @@ BEGIN
 END;
 $EOFCODE$;
 
-CREATE FUNCTION app_jobs.complete_jobs(
-  job_ids bigint[]
-) RETURNS SETOF app_jobs.jobs LANGUAGE sql AS $EOFCODE$
+CREATE FUNCTION app_jobs.complete_jobs(job_ids bigint[]) RETURNS SETOF app_jobs.jobs LANGUAGE sql AS $EOFCODE$
   DELETE FROM app_jobs.jobs
   WHERE id = ANY (job_ids)
     AND (locked_by IS NULL
@@ -690,10 +666,7 @@ CREATE FUNCTION app_jobs.complete_jobs(
     *;
 $EOFCODE$;
 
-CREATE FUNCTION app_jobs.complete_job(
-  worker_id text,
-  job_id bigint
-) RETURNS app_jobs.jobs LANGUAGE plpgsql AS $EOFCODE$
+CREATE FUNCTION app_jobs.complete_job(worker_id text, job_id bigint) RETURNS app_jobs.jobs LANGUAGE plpgsql AS $EOFCODE$
 DECLARE
   v_row app_jobs.jobs;
 BEGIN
@@ -715,16 +688,7 @@ BEGIN
 END;
 $EOFCODE$;
 
-CREATE FUNCTION app_jobs.add_scheduled_job(
-  identifier text,
-  payload pg_catalog.json DEFAULT '{}'::json,
-  schedule_info pg_catalog.json DEFAULT '{}'::json,
-  job_key text DEFAULT NULL,
-  queue_name text DEFAULT NULL,
-  max_attempts int DEFAULT 25,
-  priority int DEFAULT 0,
-  entity_id uuid DEFAULT NULL
-) RETURNS app_jobs.scheduled_jobs AS $EOFCODE$
+CREATE FUNCTION app_jobs.add_scheduled_job(identifier text, payload pg_catalog.json DEFAULT '{}'::json, schedule_info pg_catalog.json DEFAULT '{}'::json, job_key text DEFAULT NULL, queue_name text DEFAULT NULL, max_attempts int DEFAULT 25, priority int DEFAULT 0, entity_id uuid DEFAULT NULL) RETURNS app_jobs.scheduled_jobs AS $EOFCODE$
 DECLARE
   v_job app_jobs.scheduled_jobs;
   v_database_id uuid;
@@ -812,16 +776,7 @@ BEGIN
 END;
 $EOFCODE$ LANGUAGE plpgsql VOLATILE SECURITY DEFINER;
 
-CREATE FUNCTION app_jobs.add_job(
-  identifier text,
-  payload pg_catalog.json DEFAULT '{}'::json,
-  job_key text DEFAULT NULL,
-  queue_name text DEFAULT NULL,
-  run_at timestamptz DEFAULT now(),
-  max_attempts int DEFAULT 25,
-  priority int DEFAULT 0,
-  entity_id uuid DEFAULT NULL
-) RETURNS app_jobs.jobs AS $EOFCODE$
+CREATE FUNCTION app_jobs.add_job(identifier text, payload pg_catalog.json DEFAULT '{}'::json, job_key text DEFAULT NULL, queue_name text DEFAULT NULL, run_at timestamptz DEFAULT now(), max_attempts int DEFAULT 25, priority int DEFAULT 0, entity_id uuid DEFAULT NULL, organization_id uuid DEFAULT NULL, entity_type text DEFAULT NULL) RETURNS app_jobs.jobs AS $EOFCODE$
 DECLARE
   v_job app_jobs.jobs;
   v_database_id uuid;
@@ -837,6 +792,8 @@ BEGIN
       database_id,
       actor_id,
       entity_id,
+      organization_id,
+      entity_type,
       task_identifier,
       payload,
       queue_name,
@@ -848,6 +805,8 @@ BEGIN
         v_database_id,
         v_actor_id,
         add_job.entity_id,
+        add_job.organization_id,
+        add_job.entity_type,
         identifier,
         coalesce(payload, '{}'::json),
         queue_name,
@@ -892,6 +851,8 @@ BEGIN
     database_id,
     actor_id,
     entity_id,
+    organization_id,
+    entity_type,
     task_identifier,
     payload,
     queue_name,
@@ -902,6 +863,8 @@ BEGIN
     v_database_id,
     v_actor_id,
     add_job.entity_id,
+    add_job.organization_id,
+    add_job.entity_type,
     identifier,
     payload,
     queue_name,
@@ -915,9 +878,9 @@ BEGIN
 END;
 $EOFCODE$ LANGUAGE plpgsql VOLATILE SECURITY DEFINER;
 
-CREATE FUNCTION app_jobs.remove_job(
-  job_key text
-) RETURNS app_jobs.jobs LANGUAGE plpgsql STRICT AS $EOFCODE$
+GRANT EXECUTE ON FUNCTION app_jobs.add_job(text, pg_catalog.json, text, text, timestamptz, int, int, uuid, uuid, text) TO authenticated;
+
+CREATE FUNCTION app_jobs.remove_job(job_key text) RETURNS app_jobs.jobs LANGUAGE plpgsql STRICT AS $EOFCODE$
 DECLARE
   v_job app_jobs.jobs;
 BEGIN
@@ -942,9 +905,7 @@ BEGIN
 END;
 $EOFCODE$;
 
-CREATE FUNCTION app_jobs.force_unlock_workers(
-  worker_ids text[]
-) RETURNS void LANGUAGE sql VOLATILE AS $EOFCODE$
+CREATE FUNCTION app_jobs.force_unlock_workers(worker_ids text[]) RETURNS void LANGUAGE sql VOLATILE AS $EOFCODE$
   UPDATE app_jobs.jobs
   SET locked_at = NULL, locked_by = NULL
   WHERE locked_by = ANY (worker_ids);

package/verify/schemas/app_jobs/procedures/grants/grant_execute_add_job_to_authenticated.sql

@@ -0,0 +1,7 @@
+-- Verify schemas/app_jobs/procedures/grants/grant_execute_add_job_to_authenticated on pg
+
+BEGIN;
+
+SELECT has_function_privilege('authenticated', 'app_jobs.add_job(text, json, text, text, timestamptz, integer, integer, uuid, uuid, text)', 'EXECUTE');
+
+ROLLBACK;