@proteinjs/db 1.47.3 → 1.49.0

package/dist/src/transaction/TransactionRunner.js

@@ -37,12 +37,30 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TransactionRunner = exports.getTransactionRunner = void 0;
+var logger_1 = require("@proteinjs/logger");
 var Db_1 = require("../Db");
+var Table_1 = require("../Table");
+var TransactionContextFactory_1 = require("./TransactionContextFactory");
 var TransactionRunnerService_1 = require("../services/TransactionRunnerService");
 var getTransactionRunner = function () {
     return typeof self === 'undefined' ? new TransactionRunner() : (0, TransactionRunnerService_1.getTransactionRunnerService)();
 };
 exports.getTransactionRunner = getTransactionRunner;
+/**
+ * Runs a client `Transaction`'s operations as one server-side transaction.
+ *
+ * A write may DECLARE the rows it depends on (`options.afterRows`): rows its operations
+ * reference whose own insert may still be in flight when this request arrives — a text update
+ * released by a page that was going away while its row's insert was still being served, a child
+ * row's insert whose root (its permission source, and the owner grant that commits with the
+ * root) is still landing. Without the declaration such a write ran to completion inside the
+ * insert's window and matched nothing, silently, or was refused at the door for a grant that was
+ * a moment from existing — and the page that could have retried was gone. The server outlives
+ * the page: it waits, bounded by the db driver's per-operation deadline, for every declared row to
+ * exist AND be visible to the caller (a read as the caller sees a row exactly when the caller's
+ * grant on its scope has committed), then runs the operations. A row that never appears fails the
+ * request with a plain clause.
+ */
 var TransactionRunner = /** @class */ (function () {
     function TransactionRunner() {
         this.serviceMetadata = {
@@ -50,43 +68,226 @@ var TransactionRunner = /** @class */ (function () {
                 allUsers: true,
             },
         };
+        this.logger = new logger_1.Logger({ name: this.constructor.name });
     }
-    TransactionRunner.prototype.run = function (ops) {
+    TransactionRunner.prototype.run = function (ops, options) {
+        var _a;
         return __awaiter(this, void 0, void 0, function () {
-            var db;
+            var db, afterRows;
             var _this = this;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
+            return __generator(this, function (_b) {
+                switch (_b.label) {
                     case 0:
                         db = (0, Db_1.getDb)();
-                        return [4 /*yield*/, db.runTransaction(function () { return __awaiter(_this, void 0, void 0, function () {
-                                var _i, ops_1, op;
-                                return __generator(this, function (_a) {
-                                    switch (_a.label) {
-                                        case 0:
-                                            _i = 0, ops_1 = ops;
-                                            _a.label = 1;
-                                        case 1:
-                                            if (!(_i < ops_1.length)) return [3 /*break*/, 4];
-                                            op = ops_1[_i];
-                                            return [4 /*yield*/, db[op.name].apply(db, op.args)];
-                                        case 2:
-                                            _a.sent();
-                                            _a.label = 3;
-                                        case 3:
-                                            _i++;
-                                            return [3 /*break*/, 1];
-                                        case 4: return [2 /*return*/];
-                                    }
-                                });
-                            }); })];
+                        afterRows = (_a = options === null || options === void 0 ? void 0 : options.afterRows) !== null && _a !== void 0 ? _a : [];
+                        if (!(afterRows.length > 0)) return [3 /*break*/, 2];
+                        return [4 /*yield*/, this.awaitRows(ops, afterRows)];
                     case 1:
-                        _a.sent();
+                        _b.sent();
+                        _b.label = 2;
+                    case 2: return [4 /*yield*/, db.runTransaction(function () { return __awaiter(_this, void 0, void 0, function () {
+                            var _i, ops_1, op;
+                            return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0:
+                                        _i = 0, ops_1 = ops;
+                                        _a.label = 1;
+                                    case 1:
+                                        if (!(_i < ops_1.length)) return [3 /*break*/, 4];
+                                        op = ops_1[_i];
+                                        return [4 /*yield*/, db[op.name].apply(db, op.args)];
+                                    case 2:
+                                        _a.sent();
+                                        _a.label = 3;
+                                    case 3:
+                                        _i++;
+                                        return [3 /*break*/, 1];
+                                    case 4: return [2 /*return*/];
+                                }
+                            });
+                        }); })];
+                    case 3:
+                        _b.sent();
                         return [2 /*return*/];
                 }
             });
         });
     };
+    /**
+     * Wait until every declared row exists and is visible to the caller, bounded by the db driver's
+     * per-operation deadline (`DbDriver.getOperationDeadlineMs`), read when the write waits. The
+     * bound is the ceiling for a row that NEVER comes — the named failure, never a hang. A
+     * dependency's insert lands in hundreds of milliseconds on a healthy link and in seconds on a
+     * degraded one (a root's birth of a few dozen sequential statements has taken 13 s), and the
+     * writes released behind it by a page that is gone have no second chance. The driver's deadline
+     * is how long the deployment lets one statement of that insert run before failing it: the wait
+     * takes its measure from there — one owner for the number, configured with the database — not
+     * from a number of its own. A write that waits here holds one request and a poll, nothing else.
+     *
+     * Each poll is a single-use strong read outside any transaction, so a commit is seen the moment
+     * it lands; the interval starts short and backs off so a dependency landing in hundreds of
+     * milliseconds is caught within tens.
+     */
+    TransactionRunner.prototype.awaitRows = function (ops, afterRows) {
+        var _a;
+        return __awaiter(this, void 0, void 0, function () {
+            var tablesById, unknown, db, boundMs, started, deadline, waiting, interval, polls, _loop_1, this_1, state_1;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0:
+                        if ((_a = (0, TransactionContextFactory_1.getDefaultTransactionContextFactory)()) === null || _a === void 0 ? void 0 : _a.getTransactionContext().currentTransaction) {
+                            throw new Error("TransactionRunner: afterRows cannot be honoured inside an ambient transaction \u2014 its reads would see the transaction's own snapshot, never a row committed after it began");
+                        }
+                        tablesById = TransactionRunner.rowsTheOperationsReference(ops);
+                        unknown = afterRows.filter(function (id) { return !tablesById.has(id); });
+                        if (unknown.length > 0) {
+                            throw new Error("TransactionRunner: afterRows names rows none of the operations reference (".concat(unknown.join(', '), ") \u2014 the write was not run"));
+                        }
+                        db = (0, Db_1.getDb)();
+                        boundMs = Db_1.Db.getDefaultDbDriver().getOperationDeadlineMs();
+                        started = Date.now();
+                        deadline = started + boundMs;
+                        waiting = afterRows
+                            .filter(function (id, index) { return afterRows.indexOf(id) === index; })
+                            .map(function (id) { return ({ id: id, tables: tablesById.get(id).slice() }); });
+                        interval = TransactionRunner.FIRST_POLL_INTERVAL_MS;
+                        polls = 0;
+                        _loop_1 = function () {
+                            var _i, waiting_1, row, stillAbsent, _c, _d, table, waitedMs, line, now, absent;
+                            return __generator(this, function (_e) {
+                                switch (_e.label) {
+                                    case 0:
+                                        polls += 1;
+                                        _i = 0, waiting_1 = waiting;
+                                        _e.label = 1;
+                                    case 1:
+                                        if (!(_i < waiting_1.length)) return [3 /*break*/, 7];
+                                        row = waiting_1[_i];
+                                        stillAbsent = [];
+                                        _c = 0, _d = row.tables;
+                                        _e.label = 2;
+                                    case 2:
+                                        if (!(_c < _d.length)) return [3 /*break*/, 5];
+                                        table = _d[_c];
+                                        return [4 /*yield*/, db.get(table, { id: row.id })];
+                                    case 3:
+                                        if (!(_e.sent())) {
+                                            stillAbsent.push(table);
+                                        }
+                                        _e.label = 4;
+                                    case 4:
+                                        _c++;
+                                        return [3 /*break*/, 2];
+                                    case 5:
+                                        row.tables = stillAbsent;
+                                        _e.label = 6;
+                                    case 6:
+                                        _i++;
+                                        return [3 /*break*/, 1];
+                                    case 7:
+                                        waiting = waiting.filter(function (row) { return row.tables.length > 0; });
+                                        if (waiting.length === 0) {
+                                            waitedMs = Date.now() - started;
+                                            line = { message: "Declared rows present", obj: { afterRows: afterRows, waitedMs: waitedMs, polls: polls } };
+                                            if (polls > 1) {
+                                                this_1.logger.info(line);
+                                            }
+                                            else {
+                                                this_1.logger.debug(line);
+                                            }
+                                            return [2 /*return*/, { value: void 0 }];
+                                        }
+                                        now = Date.now();
+                                        if (now >= deadline) {
+                                            absent = waiting.map(function (row) { return row.tables.map(function (table) { return "".concat(table.name, ":").concat(row.id); }).join(', '); }).join(', ');
+                                            this_1.logger.warn({
+                                                message: "Declared rows absent at the bound \u2014 the write was not run",
+                                                obj: { absent: absent, boundMs: boundMs, waitedMs: now - started, polls: polls },
+                                            });
+                                            throw new Error("TransactionRunner: waited ".concat(boundMs, " ms for rows this write depends on to exist and be visible to the caller; still absent: ").concat(absent, " \u2014 the write was not run (the bound is the db driver's per-operation deadline)"));
+                                        }
+                                        return [4 /*yield*/, new Promise(function (resolve) { return setTimeout(resolve, Math.min(interval, deadline - now)); })];
+                                    case 8:
+                                        _e.sent();
+                                        interval = Math.min(interval * 2, TransactionRunner.MAX_POLL_INTERVAL_MS);
+                                        return [2 /*return*/];
+                                }
+                            });
+                        };
+                        this_1 = this;
+                        _b.label = 1;
+                    case 1: return [5 /*yield**/, _loop_1()];
+                    case 2:
+                        state_1 = _b.sent();
+                        if (typeof state_1 === "object")
+                            return [2 /*return*/, state_1.value];
+                        _b.label = 3;
+                    case 3: return [3 /*break*/, 1];
+                    case 4: return [2 /*return*/];
+                }
+            });
+        });
+    };
+    /**
+     * The rows the operations reference, by id → the table(s) they are read from: the permission
+     * source a row attaches to (an insert whose `permissionSource` is another row), the row an
+     * update / preserving update / membership update / delete targets. The rows the operations
+     * insert themselves are not dependencies.
+     */
+    TransactionRunner.rowsTheOperationsReference = function (ops) {
+        var _a, _b, _c;
+        var inserted = [];
+        var referenced = new Map();
+        var reference = function (table, id) {
+            if (!table || typeof id !== 'string') {
+                return;
+            }
+            var tables = referenced.get(id);
+            if (!tables) {
+                tables = [];
+                referenced.set(id, tables);
+            }
+            if (tables.indexOf(table) === -1) {
+                tables.push(table);
+            }
+        };
+        for (var _i = 0, ops_2 = ops; _i < ops_2.length; _i++) {
+            var op = ops_2[_i];
+            var args = op.args;
+            var table = args[0];
+            if (op.name === 'insert') {
+                var record = args[1];
+                if (record === null || record === void 0 ? void 0 : record.id) {
+                    inserted.push(record.id);
+                }
+                var source = record === null || record === void 0 ? void 0 : record.permissionSource;
+                if ((source === null || source === void 0 ? void 0 : source._id) && source._id !== (record === null || record === void 0 ? void 0 : record.id)) {
+                    var sourceTableName = (_a = record === null || record === void 0 ? void 0 : record.permissionSourceTable) !== null && _a !== void 0 ? _a : source._table;
+                    reference(sourceTableName ? TransactionRunner.tableNamed(sourceTableName, table) : table, source._id);
+                }
+            }
+            else if (op.name === 'update' || op.name === 'updatePreserving') {
+                var record = args[1];
+                var query = args[2];
+                reference(table, (_b = record === null || record === void 0 ? void 0 : record.id) !== null && _b !== void 0 ? _b : (query && typeof query === 'object' && 'id' in query ? query.id : undefined));
+            }
+            else if (op.name === 'updateArrayMembership') {
+                reference(table, (_c = args[1]) === null || _c === void 0 ? void 0 : _c.recordId);
+            }
+            else if (op.name === 'delete') {
+                var query = args[1];
+                reference(table, query && typeof query === 'object' ? query.id : undefined);
+            }
+        }
+        inserted.forEach(function (id) { return referenced.delete(id); });
+        return referenced;
+    };
+    /** The table a permission source lives in: the insert's own table when it names the same one. */
+    TransactionRunner.tableNamed = function (tableName, inserting) {
+        return inserting && inserting.name === tableName ? inserting : (0, Table_1.tableByName)(tableName);
+    };
+    TransactionRunner.FIRST_POLL_INTERVAL_MS = 25;
+    TransactionRunner.MAX_POLL_INTERVAL_MS = 250;
     return TransactionRunner;
 }());
 exports.TransactionRunner = TransactionRunner;

package/dist/src/transaction/TransactionRunner.js.map

@@ -1 +1 @@
-{"version":3,"file":"TransactionRunner.js","sourceRoot":"","sources":["../../../src/transaction/TransactionRunner.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4BAA8B;AAC9B,iFAA6G;AAGtG,IAAM,oBAAoB,GAAG;IAClC,OAAA,OAAO,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,iBAAiB,EAAE,CAAC,CAAC,CAAE,IAAA,sDAA2B,GAAwB;AAA5G,CAA4G,CAAC;AADlG,QAAA,oBAAoB,wBAC8E;AAE/G;IAAA;QACS,oBAAe,GAAG;YACvB,IAAI,EAAE;gBACJ,QAAQ,EAAE,IAAI;aACf;SACF,CAAC;IAWJ,CAAC;IATO,+BAAG,GAAT,UAAU,GAAqB;;;;;;;wBACvB,EAAE,GAAG,IAAA,UAAK,GAAE,CAAC;wBAEnB,qBAAM,EAAE,CAAC,cAAc,CAAC;;;;;kDACF,EAAH,WAAG;;;iDAAH,CAAA,iBAAG,CAAA;4CAAT,EAAE;4CACX,qBAAO,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAX,EAAE,EAA0B,EAAE,CAAC,IAAI,GAAC;;4CAA3C,SAA2C,CAAC;;;4CAD7B,IAAG,CAAA;;;;;iCAGrB,CAAC,EAAA;;wBAJF,SAIE,CAAC;;;;;KACJ;IACH,wBAAC;AAAD,CAAC,AAhBD,IAgBC;AAhBY,8CAAiB"}
+{"version":3,"file":"TransactionRunner.js","sourceRoot":"","sources":["../../../src/transaction/TransactionRunner.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAA2C;AAC3C,4BAAkC;AAClC,kCAA8C;AAC9C,yEAAkF;AAClF,iFAI8C;AAGvC,IAAM,oBAAoB,GAAG;IAClC,OAAA,OAAO,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,iBAAiB,EAAE,CAAC,CAAC,CAAE,IAAA,sDAA2B,GAAwB;AAA5G,CAA4G,CAAC;AADlG,QAAA,oBAAoB,wBAC8E;AAE/G;;;;;;;;;;;;;;GAcG;AACH;IAAA;QACS,oBAAe,GAAG;YACvB,IAAI,EAAE;gBACJ,QAAQ,EAAE,IAAI;aACf;SACF,CAAC;QAKM,WAAM,GAAG,IAAI,eAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IA2J/D,CAAC;IAzJO,+BAAG,GAAT,UAAU,GAAqB,EAAE,OAA+B;;;;;;;;wBACxD,EAAE,GAAG,IAAA,UAAK,GAAE,CAAC;wBACb,SAAS,GAAG,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS,mCAAI,EAAE,CAAC;6BACvC,CAAA,SAAS,CAAC,MAAM,GAAG,CAAC,CAAA,EAApB,wBAAoB;wBACtB,qBAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,EAAA;;wBAApC,SAAoC,CAAC;;4BAGvC,qBAAM,EAAE,CAAC,cAAc,CAAC;;;;;8CACF,EAAH,WAAG;;;6CAAH,CAAA,iBAAG,CAAA;wCAAT,EAAE;wCACX,qBAAO,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAX,EAAE,EAA0B,EAAE,CAAC,IAAI,GAAC;;wCAA3C,SAA2C,CAAC;;;wCAD7B,IAAG,CAAA;;;;;6BAGrB,CAAC,EAAA;;wBAJF,SAIE,CAAC;;;;;KACJ;IAED;;;;;;;;;;;;;;OAcG;IACW,qCAAS,GAAvB,UAAwB,GAAqB,EAAE,SAAmB;;;;;;;wBAChE,IAAI,MAAA,IAAA,+DAAmC,GAAE,0CAAE,qBAAqB,GAAG,kBAAkB,EAAE;4BACrF,MAAM,IAAI,KAAK,CACb,+KAA0K,CAC3K,CAAC;yBACH;wBAEK,UAAU,GAAG,iBAAiB,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC;wBAC/D,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,UAAC,EAAE,IAAK,OAAA,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAnB,CAAmB,CAAC,CAAC;wBAC9D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;4BACtB,MAAM,IAAI,KAAK,CACb,oFAA6E,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,mCAA2B,CAC3H,CAAC;yBACH;wBAEK,EAAE,GAAG,IAAA,UAAK,GAAE,CAAC;wBACb,OAAO,GAAG,OAAE,CAAC,kBAAkB,EAAE,CAAC,sBAAsB,EAAE,CAAC;wBAC3D,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;wBACrB,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;wBAE/B,OAAO,GAA2C,SAAS;6BAC5D,MAAM,CAAC,UAAC,EAAE,EAAE,KAAK,IAAK,OAAA,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,KAAK,EAA/B,CAA+B,CAAC;6BACtD,GAAG,CAAC,UAAC,EAAE,IAAK,OAAA,CAAC,EAAE,EAAE,IAAA,EAAE,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,KAAK,EAAE,EAAE,CAAC,EAA7C,CAA6C,CAAC,CAAC;wBAC1D,QAAQ,GAAG,iBAAiB,CAAC,sBAAsB,CAAC;wBACpD,KAAK,GAAG,CAAC,CAAC;;;;;;wCAEZ,KAAK,IAAI,CAAC,CAAC;8CACc,EAAP,mBAAO;;;6CAAP,CAAA,qBAAO,CAAA;wCAAd,GAAG;wCACN,WAAW,GAAiB,EAAE,CAAC;8CACP,EAAV,KAAA,GAAG,CAAC,MAAM;;;6CAAV,CAAA,cAAU,CAAA;wCAAnB,KAAK;wCACR,qBAAM,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAS,CAAC,EAAA;;wCAAhD,IAAI,CAAC,CAAC,SAA0C,CAAC,EAAE;4CACjD,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;yCACzB;;;wCAHiB,IAAU,CAAA;;;wCAK9B,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC;;;wCAPT,IAAO,CAAA;;;wCASzB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,UAAC,GAAG,IAAK,OAAA,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAArB,CAAqB,CAAC,CAAC;wCACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE;4CAClB,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;4CAGhC,IAAI,GAAG,EAAE,OAAO,EAAE,uBAAuB,EAAE,GAAG,EAAE,EAAE,SAAS,WAAA,EAAE,QAAQ,UAAA,EAAE,KAAK,OAAA,EAAE,EAAE,CAAC;4CACvF,IAAI,KAAK,GAAG,CAAC,EAAE;gDACb,OAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;6CACxB;iDAAM;gDACL,OAAK,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;6CACzB;;yCAEF;wCAEK,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;wCACvB,IAAI,GAAG,IAAI,QAAQ,EAAE;4CACb,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAC,GAAG,IAAK,OAAA,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAC,KAAK,IAAK,OAAA,UAAG,KAAK,CAAC,IAAI,cAAI,GAAG,CAAC,EAAE,CAAE,EAAzB,CAAyB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAA/D,CAA+D,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;4CAChH,OAAK,MAAM,CAAC,IAAI,CAAC;gDACf,OAAO,EAAE,gEAA2D;gDACpE,GAAG,EAAE,EAAE,MAAM,QAAA,EAAE,OAAO,SAAA,EAAE,QAAQ,EAAE,GAAG,GAAG,OAAO,EAAE,KAAK,OAAA,EAAE;6CACzD,CAAC,CAAC;4CACH,MAAM,IAAI,KAAK,CACb,oCAA6B,OAAO,qGAA2F,MAAM,wFAAgF,CACtN,CAAC;yCACH;wCACD,qBAAM,IAAI,OAAO,CAAC,UAAC,OAAO,IAAK,OAAA,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,GAAG,GAAG,CAAC,CAAC,EAAvD,CAAuD,CAAC,EAAA;;wCAAvF,SAAuF,CAAC;wCACxF,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;;;;;;;;;;;;;;;;;;KAE7E;IAED;;;;;OAKG;IACY,4CAA0B,GAAzC,UAA0C,GAAqB;;QAC7D,IAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAM,UAAU,GAAG,IAAI,GAAG,EAAwB,CAAC;QACnD,IAAM,SAAS,GAAG,UAAC,KAA6B,EAAE,EAAW;YAC3D,IAAI,CAAC,KAAK,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE;gBACpC,OAAO;aACR;YACD,IAAI,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM,EAAE;gBACX,MAAM,GAAG,EAAE,CAAC;gBACZ,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;aAC5B;YACD,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE;gBAChC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aACpB;QACH,CAAC,CAAC;QAEF,KAAiB,UAAG,EAAH,WAAG,EAAH,iBAAG,EAAH,IAAG,EAAE;YAAjB,IAAM,EAAE,YAAA;YACX,IAAM,IAAI,GAAG,EAAE,CAAC,IAAiB,CAAC;YAClC,IAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAA2B,CAAC;YAChD,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ,EAAE;gBACxB,IAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAER,CAAC;gBACd,IAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,EAAE,EAAE;oBACd,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;iBAC1B;gBACD,IAAM,MAAM,GAAG,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,gBAAgB,CAAC;gBACxC,IAAI,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,GAAG,KAAI,MAAM,CAAC,GAAG,MAAK,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,EAAE,CAAA,EAAE;oBAC5C,IAAM,eAAe,GAAG,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,qBAAqB,mCAAI,MAAM,CAAC,MAAM,CAAC;oBACvE,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;iBACvG;aACF;iBAAM,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,KAAK,kBAAkB,EAAE;gBACjE,IAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAgC,CAAC;gBACtD,IAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAiC,CAAC;gBACtD,SAAS,CAAC,KAAK,EAAE,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,EAAE,mCAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;aAC9G;iBAAM,IAAI,EAAE,CAAC,IAAI,KAAK,uBAAuB,EAAE;gBAC9C,SAAS,CAAC,KAAK,EAAE,MAAC,IAAI,CAAC,CAAC,CAAuC,0CAAE,QAAQ,CAAC,CAAC;aAC5E;iBAAM,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ,EAAE;gBAC/B,IAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAiC,CAAC;gBACtD,SAAS,CAAC,KAAK,EAAE,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;aAC7E;SACF;QAED,QAAQ,CAAC,OAAO,CAAC,UAAC,EAAE,IAAK,OAAA,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAArB,CAAqB,CAAC,CAAC;QAChD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,iGAAiG;IAClF,4BAAU,GAAzB,UAA0B,SAAiB,EAAE,SAAiC;QAC5E,OAAO,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAA,mBAAW,EAAC,SAAS,CAAC,CAAC;IACxF,CAAC;IA7JuB,wCAAsB,GAAG,EAAE,AAAL,CAAM;IAC5B,sCAAoB,GAAG,GAAG,AAAN,CAAO;IA6JrD,wBAAC;CAAA,AArKD,IAqKC;AArKY,8CAAiB"}

package/dist/test/DurableTable.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=DurableTable.test.d.ts.map

package/dist/test/DurableTable.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DurableTable.test.d.ts","sourceRoot":"","sources":["../../test/DurableTable.test.ts"],"names":[],"mappings":""}

package/dist/test/DurableTable.test.js

@@ -0,0 +1,172 @@
+"use strict";
+var __extends = (this && this.__extends) || (function () {
+    var extendStatics = function (d, b) {
+        extendStatics = Object.setPrototypeOf ||
+            ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||
+            function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };
+        return extendStatics(d, b);
+    };
+    return function (d, b) {
+        if (typeof b !== "function" && b !== null)
+            throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");
+        extendStatics(d, b);
+        function __() { this.constructor = d; }
+        d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+var user_auth_1 = require("@proteinjs/user-auth");
+var Table_1 = require("../src/Table");
+var Record_1 = require("../src/Record");
+var Columns_1 = require("../src/Columns");
+var TableAuth_1 = require("../src/auth/TableAuth");
+var TableServiceAuth_1 = require("../src/auth/TableServiceAuth");
+var MigrationTable_1 = require("../src/tables/MigrationTable");
+var setUser = function (roles) {
+    user_auth_1.UserAuth.userRepo = {
+        getUser: function () { return ({ email: 'user@test.local', roles: roles }); },
+    };
+};
+var setMapping = function (mapping) {
+    user_auth_1.UserAuth.permissionRolesMapping = {
+        getRoles: function (permission) { return mapping[permission]; },
+    };
+};
+/** Every door open to the 'ledger' permission — the delete door included. */
+var OpenLedgerTable = /** @class */ (function (_super) {
+    __extends(OpenLedgerTable, _super);
+    function OpenLedgerTable() {
+        var _this = _super !== null && _super.apply(this, arguments) || this;
+        _this.name = 'open_ledger_test';
+        _this.auth = {
+            db: { all: { permission: 'ledger' } },
+            service: { all: { permission: 'ledger' } },
+        };
+        _this.columns = (0, Record_1.withRecordColumns)({
+            title: new Columns_1.StringColumn('title'),
+        });
+        return _this;
+    }
+    return OpenLedgerTable;
+}(Table_1.Table));
+/** The same doors, declared durable: the declared delete doors do not reopen what durability closes. */
+var DurableLedgerTable = /** @class */ (function (_super) {
+    __extends(DurableLedgerTable, _super);
+    function DurableLedgerTable() {
+        var _this = _super !== null && _super.apply(this, arguments) || this;
+        _this.name = 'durable_ledger_test';
+        _this.durable = true;
+        return _this;
+    }
+    return DurableLedgerTable;
+}(OpenLedgerTable));
+/** Durable with no auth block at all: admin's break-glass default does not reach delete either. */
+var DurableNoAuthTable = /** @class */ (function (_super) {
+    __extends(DurableNoAuthTable, _super);
+    function DurableNoAuthTable() {
+        var _this = _super !== null && _super.apply(this, arguments) || this;
+        _this.name = 'durable_no_auth_test';
+        _this.durable = true;
+        _this.columns = (0, Record_1.withRecordColumns)({
+            title: new Columns_1.StringColumn('title'),
+        });
+        return _this;
+    }
+    return DurableNoAuthTable;
+}(Table_1.Table));
+/** What the refusal is, read by shape (the router reads a `ServiceRefusal` the same way). */
+var refusalOf = function (act) {
+    try {
+        act();
+    }
+    catch (error) {
+        return { name: error === null || error === void 0 ? void 0 : error.name, status: error === null || error === void 0 ? void 0 : error.status, message: error === null || error === void 0 ? void 0 : error.message };
+    }
+    return undefined;
+};
+describe('a durable table keeps its rows', function () {
+    beforeEach(function () {
+        setMapping({ ledger: ['ledger-keeper'] });
+    });
+    afterEach(function () {
+        user_auth_1.UserAuth.userRepo = undefined;
+        user_auth_1.UserAuth.permissionRolesMapping = undefined;
+    });
+    it('the delete door refuses every caller on both apis — a 403 refusal naming the table, whatever auth declares', function () {
+        var auth = new TableAuth_1.TableAuth();
+        var _loop_1 = function (table) {
+            for (var _b = 0, _c = [['ledger-keeper'], ['admin']]; _b < _c.length; _b++) {
+                var roles = _c[_b];
+                setUser(roles);
+                var _loop_2 = function (api) {
+                    var refusal = refusalOf(function () { return auth.canDelete(table, api); });
+                    expect(refusal).toEqual({
+                        name: 'ServiceRefusal',
+                        status: 403,
+                        message: "Table ".concat(table.name, " is durable: its rows are never deleted"),
+                    });
+                    // The capability read the record surfaces derive their acts from agrees with the door.
+                    expect(auth.canPerform(table, 'delete', api)).toBe(false);
+                };
+                for (var _d = 0, _e = ['db', 'service']; _d < _e.length; _d++) {
+                    var api = _e[_d];
+                    _loop_2(api);
+                }
+            }
+        };
+        for (var _i = 0, _a = [new DurableLedgerTable(), new DurableNoAuthTable()]; _i < _a.length; _i++) {
+            var table = _a[_i];
+            _loop_1(table);
+        }
+    });
+    it('the service door passes the refusal to the caller as it is — not a generic denial, not a failure', function () {
+        setUser(['admin']);
+        var table = new DurableLedgerTable();
+        var refusal = refusalOf(function () { return new TableServiceAuth_1.TableServiceAuth().canAccess('delete', [table, { id: 'entry-1' }]); });
+        expect(refusal).toEqual({
+            name: 'ServiceRefusal',
+            status: 403,
+            message: 'Table durable_ledger_test is durable: its rows are never deleted',
+        });
+    });
+    it('the durable table keeps every other door it declares', function () {
+        setUser(['ledger-keeper']);
+        var auth = new TableAuth_1.TableAuth();
+        var table = new DurableLedgerTable();
+        var _loop_3 = function (api) {
+            expect(function () { return auth.canQuery(table, api); }).not.toThrow();
+            expect(function () { return auth.canInsert(table, api); }).not.toThrow();
+            expect(function () { return auth.canUpdate(table, api); }).not.toThrow();
+        };
+        for (var _i = 0, _a = ['db', 'service']; _i < _a.length; _i++) {
+            var api = _a[_i];
+            _loop_3(api);
+        }
+        expect(new TableServiceAuth_1.TableServiceAuth().canAccess('query', [table, {}])).toBe(true);
+        expect(new TableServiceAuth_1.TableServiceAuth().canAccess('update', [table, { id: 'entry-1', title: 't' }])).toBe(true);
+    });
+    it('a table that does not declare it keeps its delete doors exactly as declared', function () {
+        var auth = new TableAuth_1.TableAuth();
+        var table = new OpenLedgerTable();
+        setUser(['ledger-keeper']);
+        var _loop_4 = function (api) {
+            expect(function () { return auth.canDelete(table, api); }).not.toThrow();
+            expect(auth.canPerform(table, 'delete', api)).toBe(true);
+        };
+        for (var _i = 0, _a = ['db', 'service']; _i < _a.length; _i++) {
+            var api = _a[_i];
+            _loop_4(api);
+        }
+        expect(new TableServiceAuth_1.TableServiceAuth().canAccess('delete', [table, { id: 'entry-1' }])).toBe(true);
+        setUser(['someone-else']);
+        expect(function () { return auth.canDelete(table, 'service'); }).toThrow('User is not authorized to delete records from table: open_ledger_test');
+    });
+    it('the migration ledger is durable', function () {
+        setUser(['admin']);
+        var table = new MigrationTable_1.MigrationTable();
+        var refusal = refusalOf(function () { return new TableServiceAuth_1.TableServiceAuth().canAccess('delete', [table, { id: 'migration-1' }]); });
+        expect(refusal === null || refusal === void 0 ? void 0 : refusal.status).toBe(403);
+        expect(refusal === null || refusal === void 0 ? void 0 : refusal.message).toBe('Table migration is durable: its rows are never deleted');
+    });
+});
+//# sourceMappingURL=DurableTable.test.js.map

package/dist/test/DurableTable.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DurableTable.test.js","sourceRoot":"","sources":["../../test/DurableTable.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,kDAAgD;AAChD,sCAAqC;AACrC,wCAA0D;AAC1D,0CAA8C;AAC9C,mDAAkD;AAClD,iEAAgE;AAChE,+DAA8D;AAmB9D,IAAM,OAAO,GAAG,UAAC,KAAe;IAC7B,oBAAyC,CAAC,QAAQ,GAAG;QACpD,OAAO,EAAE,cAAM,OAAA,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,OAAA,EAAE,CAAC,EAArC,CAAqC;KACrD,CAAC;AACJ,CAAC,CAAC;AAEF,IAAM,UAAU,GAAG,UAAC,OAA2C;IAC5D,oBAAyC,CAAC,sBAAsB,GAAG;QAClE,QAAQ,EAAE,UAAC,UAAkB,IAAK,OAAA,OAAO,CAAC,UAAU,CAAC,EAAnB,CAAmB;KACtD,CAAC;AACJ,CAAC,CAAC;AAMF,6EAA6E;AAC7E;IAA8B,mCAAY;IAA1C;QAAA,qEASC;QARQ,UAAI,GAAG,kBAAkB,CAAC;QAC1B,UAAI,GAAyB;YAClC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE;YACrC,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE;SAC3C,CAAC;QACK,aAAO,GAAG,IAAA,0BAAiB,EAAQ;YACxC,KAAK,EAAE,IAAI,sBAAY,CAAC,OAAO,CAAC;SACjC,CAAC,CAAC;;IACL,CAAC;IAAD,sBAAC;AAAD,CAAC,AATD,CAA8B,aAAK,GASlC;AAED,wGAAwG;AACxG;IAAiC,sCAAe;IAAhD;QAAA,qEAGC;QAFQ,UAAI,GAAG,qBAAqB,CAAC;QAC7B,aAAO,GAAG,IAAI,CAAC;;IACxB,CAAC;IAAD,yBAAC;AAAD,CAAC,AAHD,CAAiC,eAAe,GAG/C;AAED,mGAAmG;AACnG;IAAiC,sCAAY;IAA7C;QAAA,qEAMC;QALQ,UAAI,GAAG,sBAAsB,CAAC;QAC9B,aAAO,GAAG,IAAI,CAAC;QACf,aAAO,GAAG,IAAA,0BAAiB,EAAQ;YACxC,KAAK,EAAE,IAAI,sBAAY,CAAC,OAAO,CAAC;SACjC,CAAC,CAAC;;IACL,CAAC;IAAD,yBAAC;AAAD,CAAC,AAND,CAAiC,aAAK,GAMrC;AAED,6FAA6F;AAC7F,IAAM,SAAS,GAAG,UAAC,GAAkB;IACnC,IAAI;QACF,GAAG,EAAE,CAAC;KACP;IAAC,OAAO,KAAU,EAAE;QACnB,OAAO,EAAE,IAAI,EAAE,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,EAAE,MAAM,EAAE,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,MAAM,EAAE,OAAO,EAAE,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,OAAO,EAAE,CAAC;KAC9E;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,QAAQ,CAAC,gCAAgC,EAAE;IACzC,UAAU,CAAC;QACT,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC;QACP,oBAAyC,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC/D,oBAAyC,CAAC,sBAAsB,GAAG,SAAS,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4GAA4G,EAAE;QAC/G,IAAM,IAAI,GAAG,IAAI,qBAAS,EAAE,CAAC;gCAClB,KAAK;YACd,KAAoB,UAA8B,EAA9B,MAAC,CAAC,eAAe,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAA9B,cAA8B,EAA9B,IAA8B,EAAE;gBAA/C,IAAM,KAAK,SAAA;gBACd,OAAO,CAAC,KAAK,CAAC,CAAC;wCACJ,GAAG;oBACZ,IAAM,OAAO,GAAG,SAAS,CAAC,cAAM,OAAA,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,EAA1B,CAA0B,CAAC,CAAC;oBAC5D,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;wBACtB,IAAI,EAAE,gBAAgB;wBACtB,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,gBAAS,KAAK,CAAC,IAAI,4CAAyC;qBACtE,CAAC,CAAC;oBACH,uFAAuF;oBACvF,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;gBAR5D,KAAkB,UAA0B,EAA1B,KAAA,CAAC,IAAI,EAAE,SAAS,CAAU,EAA1B,cAA0B,EAA1B,IAA0B;oBAAvC,IAAM,GAAG,SAAA;4BAAH,GAAG;iBASb;aACF;;QAbH,KAAoB,UAAoD,EAApD,MAAC,IAAI,kBAAkB,EAAE,EAAE,IAAI,kBAAkB,EAAE,CAAC,EAApD,cAAoD,EAApD,IAAoD;YAAnE,IAAM,KAAK,SAAA;oBAAL,KAAK;SAcf;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kGAAkG,EAAE;QACrG,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACnB,IAAM,KAAK,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACvC,IAAM,OAAO,GAAG,SAAS,CAAC,cAAM,OAAA,IAAI,mCAAgB,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,EAAtE,CAAsE,CAAC,CAAC;QACxG,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;YACtB,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,kEAAkE;SAC5E,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE;QACzD,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QAC3B,IAAM,IAAI,GAAG,IAAI,qBAAS,EAAE,CAAC;QAC7B,IAAM,KAAK,GAAG,IAAI,kBAAkB,EAAE,CAAC;gCAC5B,GAAG;YACZ,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,EAAzB,CAAyB,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACtD,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,EAA1B,CAA0B,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACvD,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,EAA1B,CAA0B,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;;QAHzD,KAAkB,UAA0B,EAA1B,KAAA,CAAC,IAAI,EAAE,SAAS,CAAU,EAA1B,cAA0B,EAA1B,IAA0B;YAAvC,IAAM,GAAG,SAAA;oBAAH,GAAG;SAIb;QACD,MAAM,CAAC,IAAI,mCAAgB,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,CAAC,IAAI,mCAAgB,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE;QAChF,IAAM,IAAI,GAAG,IAAI,qBAAS,EAAE,CAAC;QAC7B,IAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QAEpC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;gCAChB,GAAG;YACZ,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,EAA1B,CAA0B,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;QAF3D,KAAkB,UAA0B,EAA1B,KAAA,CAAC,IAAI,EAAE,SAAS,CAAU,EAA1B,cAA0B,EAA1B,IAA0B;YAAvC,IAAM,GAAG,SAAA;oBAAH,GAAG;SAGb;QACD,MAAM,CAAC,IAAI,mCAAgB,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE1F,OAAO,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QAC1B,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,EAAhC,CAAgC,CAAC,CAAC,OAAO,CACpD,uEAAuE,CACxE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE;QACpC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACnB,IAAM,KAAK,GAAG,IAAI,+BAAc,EAAE,CAAC;QACnC,IAAM,OAAO,GAAG,SAAS,CAAC,cAAM,OAAA,IAAI,mCAAgB,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,EAA1E,CAA0E,CAAC,CAAC;QAC5G,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,CAAC,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/MigrationAuth.test.js

@@ -90,17 +90,20 @@ describe('migrations ride the dev permission', function () {
             }
         }
     });
-    it('delete keeps its dev door (ledger hygiene stays possible)', function () {
-        setUser(['dev-crew']);
+    it('delete has no door — for anyone, break-glass included: the ledger is durable', function () {
         var auth = new TableAuth_1.TableAuth();
         var table = new MigrationTable_1.MigrationTable();
-        var _loop_5 = function (api) {
-            expect(function () { return auth.canDelete(table, api); }).not.toThrow();
-            expect(auth.canPerform(table, 'delete', api)).toBe(true);
-        };
-        for (var _i = 0, _a = ['db', 'service']; _i < _a.length; _i++) {
-            var api = _a[_i];
-            _loop_5(api);
+        for (var _i = 0, _a = [['dev-crew'], ['admin']]; _i < _a.length; _i++) {
+            var roles = _a[_i];
+            setUser(roles);
+            var _loop_5 = function (api) {
+                expect(function () { return auth.canDelete(table, api); }).toThrow('Table migration is durable: its rows are never deleted');
+                expect(auth.canPerform(table, 'delete', api)).toBe(false);
+            };
+            for (var _b = 0, _c = ['db', 'service']; _b < _c.length; _b++) {
+                var api = _c[_b];
+                _loop_5(api);
+            }
         }
     });
 });

package/dist/test/MigrationAuth.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"MigrationAuth.test.js","sourceRoot":"","sources":["../../test/MigrationAuth.test.ts"],"names":[],"mappings":";;AAAA,kDAAgD;AAChD,6FAA6F;AAC7F,6FAA6F;AAC7F,uEAAsE;AACtE,oDAA+C;AAC/C,0DAAyD;AACzD,+DAA8D;AAC9D,mDAAkD;AAgBlD,IAAM,OAAO,GAAG,UAAC,KAAe;IAC7B,oBAAyC,CAAC,QAAQ,GAAG;QACpD,OAAO,EAAE,cAAM,OAAA,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,OAAA,EAAE,CAAC,EAArC,CAAqC;KACrD,CAAC;AACJ,CAAC,CAAC;AAEF,IAAM,UAAU,GAAG,UAAC,OAA2C;IAC5D,oBAAyC,CAAC,sBAAsB,GAAG;QAClE,QAAQ,EAAE,UAAC,UAAkB,IAAK,OAAA,OAAO,CAAC,UAAU,CAAC,EAAnB,CAAmB;KACtD,CAAC;AACJ,CAAC,CAAC;AAEF,IAAM,gBAAgB,GAAG;IACvB,IAAM,MAAM,GAAG,IAAI,mBAAM,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC9F,OAAO,yBAAW,CAAC,aAAa,CAAC,IAAI,iCAAe,EAAE,EAAE,MAAM,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;AACzF,CAAC,CAAC;AAEF,QAAQ,CAAC,oCAAoC,EAAE;IAC7C,UAAU,CAAC;QACT,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC;QACP,oBAAyC,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC/D,oBAAyC,CAAC,sBAAsB,GAAG,SAAS,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0FAA0F,EAAE;QAC7F,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QACtB,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEtC,IAAM,IAAI,GAAG,IAAI,qBAAS,EAAE,CAAC;QAC7B,IAAM,KAAK,GAAG,IAAI,+BAAc,EAAE,CAAC;gCAExB,GAAG;YACZ,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,EAAzB,CAAyB,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACtD,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,EAA1B,CAA0B,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;;QAHzD,sFAAsF;QACtF,KAAkB,UAA0B,EAA1B,KAAA,CAAC,IAAI,EAAE,SAAS,CAAU,EAA1B,cAA0B,EAA1B,IAA0B;YAAvC,IAAM,GAAG,SAAA;oBAAH,GAAG;SAGb;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE;QACrE,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QACtB,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEvC,IAAM,IAAI,GAAG,IAAI,qBAAS,EAAE,CAAC;QAC7B,IAAM,KAAK,GAAG,IAAI,+BAAc,EAAE,CAAC;gCACxB,GAAG;YACZ,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,EAAzB,CAAyB,CAAC,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC;YACpG,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,EAA1B,CAA0B,CAAC,CAAC,OAAO,CAAC,8DAA8D,CAAC,CAAC;;QAFnH,KAAkB,UAA0B,EAA1B,KAAA,CAAC,IAAI,EAAE,SAAS,CAAU,EAA1B,cAA0B,EAA1B,IAA0B;YAAvC,IAAM,GAAG,SAAA;oBAAH,GAAG;SAGb;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE;QAC3C,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACnB,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEtC,IAAM,IAAI,GAAG,IAAI,qBAAS,EAAE,CAAC;QAC7B,IAAM,KAAK,GAAG,IAAI,+BAAc,EAAE,CAAC;gCACxB,GAAG;YACZ,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,EAAzB,CAAyB,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACtD,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,EAA1B,CAA0B,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;;QAFzD,KAAkB,UAA0B,EAA1B,KAAA,CAAC,IAAI,EAAE,SAAS,CAAU,EAA1B,cAA0B,EAA1B,IAA0B;YAAvC,IAAM,GAAG,SAAA;oBAAH,GAAG;SAGb;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2GAA2G,EAAE;QAC9G,IAAM,IAAI,GAAG,IAAI,qBAAS,EAAE,CAAC;QAC7B,IAAM,KAAK,GAAG,IAAI,+BAAc,EAAE,CAAC;QACnC,KAAoB,UAAyB,EAAzB,MAAC,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAzB,cAAyB,EAAzB,IAAyB,EAAE;YAA1C,IAAM,KAAK,SAAA;YACd,OAAO,CAAC,KAAK,CAAC,CAAC;oCACJ,GAAG;gBACZ,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,EAA1B,CAA0B,CAAC,CAAC,OAAO,CAC9C,gEAAgE,CACjE,CAAC;gBACF,wFAAwF;gBACxF,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;YAL5D,KAAkB,UAA0B,EAA1B,KAAA,CAAC,IAAI,EAAE,SAAS,CAAU,EAA1B,cAA0B,EAA1B,IAA0B;gBAAvC,IAAM,GAAG,SAAA;wBAAH,GAAG;aAMb;SACF;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE;QAC9D,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QACtB,IAAM,IAAI,GAAG,IAAI,qBAAS,EAAE,CAAC;QAC7B,IAAM,KAAK,GAAG,IAAI,+BAAc,EAAE,CAAC;gCACxB,GAAG;YACZ,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,EAA1B,CAA0B,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;QAF3D,KAAkB,UAA0B,EAA1B,KAAA,CAAC,IAAI,EAAE,SAAS,CAAU,EAA1B,cAA0B,EAA1B,IAA0B;YAAvC,IAAM,GAAG,SAAA;oBAAH,GAAG;SAGb;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"MigrationAuth.test.js","sourceRoot":"","sources":["../../test/MigrationAuth.test.ts"],"names":[],"mappings":";;AAAA,kDAAgD;AAChD,6FAA6F;AAC7F,6FAA6F;AAC7F,uEAAsE;AACtE,oDAA+C;AAC/C,0DAAyD;AACzD,+DAA8D;AAC9D,mDAAkD;AAgBlD,IAAM,OAAO,GAAG,UAAC,KAAe;IAC7B,oBAAyC,CAAC,QAAQ,GAAG;QACpD,OAAO,EAAE,cAAM,OAAA,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,OAAA,EAAE,CAAC,EAArC,CAAqC;KACrD,CAAC;AACJ,CAAC,CAAC;AAEF,IAAM,UAAU,GAAG,UAAC,OAA2C;IAC5D,oBAAyC,CAAC,sBAAsB,GAAG;QAClE,QAAQ,EAAE,UAAC,UAAkB,IAAK,OAAA,OAAO,CAAC,UAAU,CAAC,EAAnB,CAAmB;KACtD,CAAC;AACJ,CAAC,CAAC;AAEF,IAAM,gBAAgB,GAAG;IACvB,IAAM,MAAM,GAAG,IAAI,mBAAM,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC9F,OAAO,yBAAW,CAAC,aAAa,CAAC,IAAI,iCAAe,EAAE,EAAE,MAAM,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;AACzF,CAAC,CAAC;AAEF,QAAQ,CAAC,oCAAoC,EAAE;IAC7C,UAAU,CAAC;QACT,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC;QACP,oBAAyC,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC/D,oBAAyC,CAAC,sBAAsB,GAAG,SAAS,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0FAA0F,EAAE;QAC7F,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QACtB,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEtC,IAAM,IAAI,GAAG,IAAI,qBAAS,EAAE,CAAC;QAC7B,IAAM,KAAK,GAAG,IAAI,+BAAc,EAAE,CAAC;gCAExB,GAAG;YACZ,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,EAAzB,CAAyB,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACtD,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,EAA1B,CAA0B,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;;QAHzD,sFAAsF;QACtF,KAAkB,UAA0B,EAA1B,KAAA,CAAC,IAAI,EAAE,SAAS,CAAU,EAA1B,cAA0B,EAA1B,IAA0B;YAAvC,IAAM,GAAG,SAAA;oBAAH,GAAG;SAGb;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE;QACrE,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QACtB,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEvC,IAAM,IAAI,GAAG,IAAI,qBAAS,EAAE,CAAC;QAC7B,IAAM,KAAK,GAAG,IAAI,+BAAc,EAAE,CAAC;gCACxB,GAAG;YACZ,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,EAAzB,CAAyB,CAAC,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC;YACpG,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,EAA1B,CAA0B,CAAC,CAAC,OAAO,CAAC,8DAA8D,CAAC,CAAC;;QAFnH,KAAkB,UAA0B,EAA1B,KAAA,CAAC,IAAI,EAAE,SAAS,CAAU,EAA1B,cAA0B,EAA1B,IAA0B;YAAvC,IAAM,GAAG,SAAA;oBAAH,GAAG;SAGb;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE;QAC3C,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACnB,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEtC,IAAM,IAAI,GAAG,IAAI,qBAAS,EAAE,CAAC;QAC7B,IAAM,KAAK,GAAG,IAAI,+BAAc,EAAE,CAAC;gCACxB,GAAG;YACZ,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,EAAzB,CAAyB,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACtD,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,EAA1B,CAA0B,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;;QAFzD,KAAkB,UAA0B,EAA1B,KAAA,CAAC,IAAI,EAAE,SAAS,CAAU,EAA1B,cAA0B,EAA1B,IAA0B;YAAvC,IAAM,GAAG,SAAA;oBAAH,GAAG;SAGb;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2GAA2G,EAAE;QAC9G,IAAM,IAAI,GAAG,IAAI,qBAAS,EAAE,CAAC;QAC7B,IAAM,KAAK,GAAG,IAAI,+BAAc,EAAE,CAAC;QACnC,KAAoB,UAAyB,EAAzB,MAAC,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAzB,cAAyB,EAAzB,IAAyB,EAAE;YAA1C,IAAM,KAAK,SAAA;YACd,OAAO,CAAC,KAAK,CAAC,CAAC;oCACJ,GAAG;gBACZ,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,EAA1B,CAA0B,CAAC,CAAC,OAAO,CAC9C,gEAAgE,CACjE,CAAC;gBACF,wFAAwF;gBACxF,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;YAL5D,KAAkB,UAA0B,EAA1B,KAAA,CAAC,IAAI,EAAE,SAAS,CAAU,EAA1B,cAA0B,EAA1B,IAA0B;gBAAvC,IAAM,GAAG,SAAA;wBAAH,GAAG;aAMb;SACF;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE;QACjF,IAAM,IAAI,GAAG,IAAI,qBAAS,EAAE,CAAC;QAC7B,IAAM,KAAK,GAAG,IAAI,+BAAc,EAAE,CAAC;QACnC,KAAoB,UAAyB,EAAzB,MAAC,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAzB,cAAyB,EAAzB,IAAyB,EAAE;YAA1C,IAAM,KAAK,SAAA;YACd,OAAO,CAAC,KAAK,CAAC,CAAC;oCACJ,GAAG;gBACZ,MAAM,CAAC,cAAM,OAAA,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,EAA1B,CAA0B,CAAC,CAAC,OAAO,CAAC,wDAAwD,CAAC,CAAC;gBAC3G,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;YAF5D,KAAkB,UAA0B,EAA1B,KAAA,CAAC,IAAI,EAAE,SAAS,CAAU,EAA1B,cAA0B,EAA1B,IAA0B;gBAAvC,IAAM,GAAG,SAAA;wBAAH,GAAG;aAGb;SACF;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/SchemaReconcileLines.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=SchemaReconcileLines.test.d.ts.map

package/dist/test/SchemaReconcileLines.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SchemaReconcileLines.test.d.ts","sourceRoot":"","sources":["../../test/SchemaReconcileLines.test.ts"],"names":[],"mappings":""}