@pikku/kysely 0.12.18 → 0.13.0

package/CHANGELOG.md

@@ -1,3 +1,18 @@
+## 0.13.0
+
+### Minor Changes
+
+- 241e6cf: Add `KyselyAuditService` — a durable `AuditService` that persists AuditEvents to an `audit` table via Kysely (the companion sink to `createAuditedKysely`). Its column mapping matches Fabric's platform audit-queue consumer, so a locally-run project and a deployed stage produce identical rows. Use it as the local/dev audit sink so audit events persist and are queryable without the platform queue.
+
+### Patch Changes
+
+- 41ce2cb: Upgrade to TypeScript 6 and raise the minimum Node.js version to 22.
+
+  All packages now build against `typescript@^6.0.3` and declare `engines.node >= 22`. Internal tooling (`ts-json-schema-generator`, `zod-to-ts`) was bumped to TypeScript 6-compatible releases.
+
+- Updated dependencies [41ce2cb]
+  - @pikku/core@0.12.44
+
 ## 0.12.18
 
 ### Patch Changes

package/dist/src/index.d.ts

@@ -13,6 +13,7 @@ export { KyselyCredentialService } from './kysely-credential-service.js';
 export type { KyselyCredentialServiceConfig } from './kysely-credential-service.js';
 export { KyselySessionStore } from './kysely-session-store.js';
 export { createAuditedKysely, type CreateAuditedKyselyOptions, } from './create-audited-kysely.js';
+export { KyselyAuditService } from './kysely-audit-service.js';
 export { SerializePlugin, SqliteSerializePlugin, BaseSerializePlugin, defaultSerializer, defaultDeserializer, maybeJson, skipTransform, dateRegex, type Serializer, type Deserializer, type SerializePluginOptions, } from './serialize-plugin.js';
 export type { KyselyPikkuDB } from './kysely-tables.js';
 export type { WorkflowRunService } from '@pikku/core/workflow';

package/dist/src/index.js

@@ -11,4 +11,5 @@ export { KyselySecretService } from './kysely-secret-service.js';
 export { KyselyCredentialService } from './kysely-credential-service.js';
 export { KyselySessionStore } from './kysely-session-store.js';
 export { createAuditedKysely, } from './create-audited-kysely.js';
+export { KyselyAuditService } from './kysely-audit-service.js';
 export { SerializePlugin, SqliteSerializePlugin, BaseSerializePlugin, defaultSerializer, defaultDeserializer, maybeJson, skipTransform, dateRegex, } from './serialize-plugin.js';

package/dist/src/kysely-audit-service.d.ts

@@ -0,0 +1,19 @@
+import type { AuditEvent, AuditEventBatch, AuditService } from '@pikku/core';
+import type { Kysely } from 'kysely';
+/**
+ * Durable {@link AuditService} that persists AuditEvents to an `audit` table
+ * via Kysely — the companion sink to {@link createAuditedKysely}.
+ *
+ * The column mapping matches a platform audit-queue consumer, so a locally-run
+ * project and a deployed stage write identical rows (the read side relies only
+ * on `type`, `occurred_at`, `actor_user_id`, and the `data` JSON that holds
+ * `metadata`). The `audit` table is an optional per-project migration (not in
+ * the generated schema), so rows are inserted untyped; all columns are TEXT on
+ * every engine and ON CONFLICT DO NOTHING keeps writes idempotent on retries.
+ */
+export declare class KyselyAuditService implements AuditService {
+    private db;
+    constructor(db: Kysely<any>);
+    audit(event: AuditEvent): Promise<void>;
+    write(batch: AuditEventBatch): Promise<void>;
+}

package/dist/src/kysely-audit-service.js

@@ -0,0 +1,55 @@
+const jsonOrNull = (v) => v != null ? JSON.stringify(v) : null;
+// No global `crypto` is guaranteed across every runtime, and audit_id is the
+// PK — any collision is dropped by ON CONFLICT DO NOTHING.
+const fallbackId = () => `evt_${Date.now().toString(36)}${Math.random().toString(36).slice(2, 10)}`;
+/**
+ * Durable {@link AuditService} that persists AuditEvents to an `audit` table
+ * via Kysely — the companion sink to {@link createAuditedKysely}.
+ *
+ * The column mapping matches a platform audit-queue consumer, so a locally-run
+ * project and a deployed stage write identical rows (the read side relies only
+ * on `type`, `occurred_at`, `actor_user_id`, and the `data` JSON that holds
+ * `metadata`). The `audit` table is an optional per-project migration (not in
+ * the generated schema), so rows are inserted untyped; all columns are TEXT on
+ * every engine and ON CONFLICT DO NOTHING keeps writes idempotent on retries.
+ */
+export class KyselyAuditService {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async audit(event) {
+        await this.write([event]);
+    }
+    async write(batch) {
+        if (!batch.length)
+            return;
+        const rows = batch.map((e) => {
+            const metadata = e.metadata;
+            return {
+                audit_id: e.eventId ?? e.queryId ?? fallbackId(),
+                occurred_at: e.occurredAt ?? new Date().toISOString(),
+                type: e.type ?? 'unknown',
+                source: e.source ?? 'auto',
+                outcome: e.outcome ?? null,
+                function_id: e.functionId ?? null,
+                wire_type: e.wireType ?? null,
+                trace_id: e.traceId ?? null,
+                transaction_id: e.transactionId ?? null,
+                query_id: e.queryId ?? null,
+                actor_user_id: e.actor?.userId ?? null,
+                actor_org_id: e.actor?.orgId ?? null,
+                tables: jsonOrNull(metadata?.tables),
+                changed_cols: jsonOrNull(metadata?.changedColumns),
+                event: e.eventId ?? null,
+                old: null,
+                data: jsonOrNull(e.metadata),
+            };
+        });
+        await this.db
+            .insertInto('audit')
+            .values(rows)
+            .onConflict((oc) => oc.doNothing())
+            .execute();
+    }
+}

package/dist/src/kysely-workflow-service.js

@@ -308,7 +308,11 @@ export class KyselyWorkflowService extends PikkuWorkflowService {
         if (latestHistory) {
             await this.db
                 .updateTable('workflowStepHistory')
-                .set({ status: 'succeeded', result: resultJson, succeededAt: new Date() })
+                .set({
+                status: 'succeeded',
+                result: resultJson,
+                succeededAt: new Date(),
+            })
                 .where('historyId', '=', latestHistory.historyId)
                 .execute();
         }

package/dist/tsconfig.tsbuildinfo

@@ -1 +1 @@
-{"root":["../src/create-audited-kysely.ts","../src/index.ts","../src/kysely-ai-agent-run-service.ts","../src/kysely-ai-run-state-service.ts","../src/kysely-ai-storage-service.ts","../src/kysely-channel-store.ts","../src/kysely-credential-service.ts","../src/kysely-deployment-service.ts","../src/kysely-eventhub-store.ts","../src/kysely-json.ts","../src/kysely-secret-service.ts","../src/kysely-session-store.ts","../src/kysely-tables.ts","../src/kysely-workflow-mirror.ts","../src/kysely-workflow-run-service.ts","../src/kysely-workflow-service.ts","../src/serialize-plugin.ts","../bin/pikku-kysely-pure.ts"],"version":"5.9.3"}
+{"root":["../src/create-audited-kysely.ts","../src/index.ts","../src/kysely-ai-agent-run-service.ts","../src/kysely-ai-run-state-service.ts","../src/kysely-ai-storage-service.ts","../src/kysely-audit-service.ts","../src/kysely-channel-store.ts","../src/kysely-credential-service.ts","../src/kysely-deployment-service.ts","../src/kysely-eventhub-store.ts","../src/kysely-json.ts","../src/kysely-secret-service.ts","../src/kysely-session-store.ts","../src/kysely-tables.ts","../src/kysely-workflow-mirror.ts","../src/kysely-workflow-run-service.ts","../src/kysely-workflow-service.ts","../src/serialize-plugin.ts","../bin/pikku-kysely-pure.ts"],"version":"6.0.3"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/kysely",
-  "version": "0.12.18",
+  "version": "0.13.0",
   "author": "yasser.fadl@gmail.com",
   "license": "MIT",
   "module": "dist/src/index.js",
@@ -20,7 +20,7 @@
     "prepublishOnly": "yarn build"
   },
   "peerDependencies": {
-    "@pikku/core": "^0.12.39"
+    "@pikku/core": "^0.12.44"
   },
   "dependencies": {
     "kysely": "^0.29.0"
@@ -31,7 +31,7 @@
     "kysely-codegen": "^0.20.0",
     "kysely-postgres-js": "^3.0.0",
     "postgres": "^3.4.8",
-    "typescript": "^5.9"
+    "typescript": "^6.0.3"
   },
   "exports": {
     ".": "./dist/src/index.js"

package/src/index.ts

@@ -16,6 +16,7 @@ export {
   createAuditedKysely,
   type CreateAuditedKyselyOptions,
 } from './create-audited-kysely.js'
+export { KyselyAuditService } from './kysely-audit-service.js'
 
 export {
   SerializePlugin,

package/src/kysely-audit-service.ts

@@ -0,0 +1,62 @@
+import type { AuditEvent, AuditEventBatch, AuditService } from '@pikku/core'
+import type { Kysely } from 'kysely'
+
+const jsonOrNull = (v: unknown): string | null =>
+  v != null ? JSON.stringify(v) : null
+
+// No global `crypto` is guaranteed across every runtime, and audit_id is the
+// PK — any collision is dropped by ON CONFLICT DO NOTHING.
+const fallbackId = (): string =>
+  `evt_${Date.now().toString(36)}${Math.random().toString(36).slice(2, 10)}`
+
+/**
+ * Durable {@link AuditService} that persists AuditEvents to an `audit` table
+ * via Kysely — the companion sink to {@link createAuditedKysely}.
+ *
+ * The column mapping matches a platform audit-queue consumer, so a locally-run
+ * project and a deployed stage write identical rows (the read side relies only
+ * on `type`, `occurred_at`, `actor_user_id`, and the `data` JSON that holds
+ * `metadata`). The `audit` table is an optional per-project migration (not in
+ * the generated schema), so rows are inserted untyped; all columns are TEXT on
+ * every engine and ON CONFLICT DO NOTHING keeps writes idempotent on retries.
+ */
+export class KyselyAuditService implements AuditService {
+  constructor(private db: Kysely<any>) {}
+
+  async audit(event: AuditEvent): Promise<void> {
+    await this.write([event])
+  }
+
+  async write(batch: AuditEventBatch): Promise<void> {
+    if (!batch.length) return
+    const rows = batch.map((e) => {
+      const metadata = e.metadata as
+        | { tables?: unknown; changedColumns?: unknown }
+        | undefined
+      return {
+        audit_id: e.eventId ?? e.queryId ?? fallbackId(),
+        occurred_at: e.occurredAt ?? new Date().toISOString(),
+        type: e.type ?? 'unknown',
+        source: e.source ?? 'auto',
+        outcome: e.outcome ?? null,
+        function_id: e.functionId ?? null,
+        wire_type: e.wireType ?? null,
+        trace_id: e.traceId ?? null,
+        transaction_id: e.transactionId ?? null,
+        query_id: e.queryId ?? null,
+        actor_user_id: e.actor?.userId ?? null,
+        actor_org_id: e.actor?.orgId ?? null,
+        tables: jsonOrNull(metadata?.tables),
+        changed_cols: jsonOrNull(metadata?.changedColumns),
+        event: e.eventId ?? null,
+        old: null,
+        data: jsonOrNull(e.metadata),
+      }
+    })
+    await (this.db as any)
+      .insertInto('audit')
+      .values(rows)
+      .onConflict((oc: any) => oc.doNothing())
+      .execute()
+  }
+}