@rebasepro/server-postgres 0.25.1 → 0.26.0

package/dist/{migrate-policy-stamps-3eqfhes6.js → migrate-policy-stamps-BQtFHApx.js}

@@ -1,12 +1,12 @@
 import { createRequire as __createRequire } from "module";
 __createRequire(import.meta.url);
 import { c as pinSearchPath } from "./connection-czvI7TZL.js";
-import { B as withAppClient } from "./cli-errors-DiA0XFIS.js";
+import { B as withAppClient } from "./cli-errors-DsYyNYzd.js";
 import { a as outWarn, r as out, t as chalk } from "./source-fZb92pN8.js";
 import { s as planCollectionPolicies } from "./generate-postgres-ddl-logic-DPl1oH_z.js";
-import { n as loadCollections } from "./doctor-BT--1kq3.js";
-import { policyStampSql, probeRenderedPolicies, readPolicyStamps } from "./ensure-collection-policies-BnGOURpG.js";
-import { underSearchPath } from "./push-policy-plan-D2gpQsdv.js";
+import { n as loadCollections } from "./doctor-DW_mlTzz.js";
+import { policyStampSql, probeRenderedPolicies, readPolicyStamps } from "./ensure-collection-policies-DLWgabQ2.js";
+import { underSearchPath } from "./push-policy-plan-DQ2tWceD.js";
 import path from "path";
 //#region src/schema/migrate-policy-stamps.ts
 /**
@@ -86,4 +86,4 @@ async function stampPoliciesStoredAsRendered(client, collections, options = {})
 //#endregion
 export { stampMigratedPolicies };
 
-//# sourceMappingURL=migrate-policy-stamps-3eqfhes6.js.map
+//# sourceMappingURL=migrate-policy-stamps-BQtFHApx.js.map

package/dist/{migrate-policy-stamps-3eqfhes6.js.map → migrate-policy-stamps-BQtFHApx.js.map}

@@ -1 +1 @@
-{"version":3,"file":"migrate-policy-stamps-3eqfhes6.js","names":[],"sources":["../src/schema/migrate-policy-stamps.ts"],"sourcesContent":["/**\n * The stamps `rebase db migrate` leaves on the policies it applied.\n *\n * A boot leaves a table's policies alone only when each carries the stamp a\n * boot or a push writes (`COMMENT ON POLICY … IS 'rebase:<hash>'`, see\n * `policyStampSql`). `db push` stamps what `policies.sql` just created. A\n * migration runs the same statements — `db generate` appends `policies.sql` to\n * it — and stamped nothing, so the first boot after every migrate dropped and\n * re-created every policy once, an ACCESS EXCLUSIVE lock per table: 44 on the\n * blog scaffold.\n *\n * Migrate cannot stamp what the files hold, the way push stamps what it just\n * ran: a migration was written from the collections of its day, and the\n * database may hold something a later one, or a hand, made since. A stamp\n * there would tell the boot a policy is what the rule makes when it is not, and\n * the boot would never put it right. So each declared policy without a current\n * stamp is asked of Postgres instead, as `db push --dry-run` asks it\n * (`probeRenderedPolicies`): made again from its rule under a probe name, in a\n * transaction that is rolled back, and compared. Only a policy whose stored\n * definition is exactly what its rule makes is stamped. Any other keeps no\n * stamp, and the boot re-applies its table, as before.\n */\nimport path from \"path\";\nimport chalk from \"chalk\";\nimport type { CollectionConfig } from \"@rebasepro/types\";\nimport type { Queryable } from \"../security/policy-drift\";\nimport { withAppClient } from \"../cli-helpers\";\nimport { out, outWarn } from \"../cli-output\";\nimport { pinSearchPath } from \"../connection\";\nimport { planCollectionPolicies } from \"./generate-postgres-ddl-logic\";\nimport { policyStampSql, probeRenderedPolicies, readPolicyStamps } from \"./ensure-collection-policies\";\nimport { underSearchPath } from \"./push-policy-plan\";\nimport { loadCollections } from \"./doctor\";\n\n/**\n * `rebase db migrate`'s last step: stamp what the migration left as its rules\n * make it, on this process's connection. Never fatal — a policy left\n * unstamped costs the next boot a re-apply of its table, which is what every\n * boot after a migrate did before this.\n */\nexport async function stampMigratedPolicies(databaseUrl: string, collectionsPath: string): Promise<void> {\n    try {\n        const collections = await loadCollections(path.resolve(process.cwd(), collectionsPath));\n        // The rule the boot's connections follow: `search_path=public` unless\n        // the URL pins one of its own, in which case this connection has it too.\n        const searchPath = pinSearchPath(databaseUrl) === databaseUrl ? undefined : \"public\";\n        const { stamped } = await withAppClient(databaseUrl, client => stampPoliciesStoredAsRendered(\n            { query: async (text, values) => ({ rows: (await client.query(text, values)).rows }) },\n            collections,\n            { searchPath }\n        ));\n        if (stamped > 0) {\n            out(chalk.gray(`  ✓ Stamped ${stamped} RLS ${stamped === 1 ? \"policy\" : \"policies\"} as their rules make them, so the next boot leaves ${stamped === 1 ? \"it\" : \"them\"} alone.`));\n        }\n    } catch (err) {\n        outWarn(chalk.yellow(`  ⚠️  The policies could not be stamped (${err instanceof Error ? err.message : String(err)}); the next boot applies them again.`));\n    }\n}\n\n/**\n * Stamp every declared policy whose stored definition its rule would store\n * as it is, and none other.\n *\n * @param options.searchPath the `search_path` a boot reads policies under,\n *        when the connection's own differs — the stamp hashes `pg_get_expr`,\n *        whose spelling depends on it. See `PolicyStamping.searchPath`.\n * @returns how many policies were stamped.\n */\nexport async function stampPoliciesStoredAsRendered(\n    client: Queryable,\n    collections: CollectionConfig[],\n    options: { searchPath?: string } = {}\n): Promise<{ stamped: number }> {\n    const plans = planCollectionPolicies(collections);\n    if (plans.length === 0) return { stamped: 0 };\n\n    const states = await underSearchPath(client, options.searchPath, () => readPolicyStamps(client, collections));\n    const unsure: { schema: string; table: string; name: string }[] = [];\n    for (const plan of plans) {\n        for (const [name, state] of states.get(plan.qualified) ?? []) {\n            if (state !== \"current\") unsure.push({ schema: plan.schema, table: plan.table, name });\n        }\n    }\n    if (unsure.length === 0) return { stamped: 0 };\n\n    const confirmed = await probeRenderedPolicies(client, collections, unsure, { searchPath: options.searchPath });\n    const statements: string[] = [];\n    let stamped = 0;\n    for (const plan of plans) {\n        const names = new Set(unsure\n            .filter(p => p.schema === plan.schema && p.table === plan.table\n                && confirmed.get(`${p.schema}.${p.table}.${p.name}`) === true)\n            .map(p => p.name));\n        const statement = names.size > 0 ? policyStampSql(plan, names) : undefined;\n        if (!statement) continue;\n        statements.push(statement);\n        stamped += names.size;\n    }\n    if (statements.length === 0) return { stamped: 0 };\n\n    await underSearchPath(client, options.searchPath, async () => {\n        for (const statement of statements) await client.query(statement);\n    });\n    return { stamped };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,eAAsB,sBAAsB,aAAqB,iBAAwC;CACrG,IAAI;EACA,MAAM,cAAc,MAAM,gBAAgB,KAAK,QAAQ,QAAQ,IAAI,GAAG,eAAe,CAAC;EAGtF,MAAM,aAAa,cAAc,WAAW,MAAM,cAAc,KAAA,IAAY;EAC5E,MAAM,EAAE,YAAY,MAAM,cAAc,cAAa,WAAU,8BAC3D,EAAE,OAAO,OAAO,MAAM,YAAY,EAAE,OAAO,MAAM,OAAO,MAAM,MAAM,MAAM,EAAA,CAAG,KAAK,GAAG,GACrF,aACA,EAAE,WAAW,CACjB,CAAC;EACD,IAAI,UAAU,GACV,IAAI,MAAM,KAAK,eAAe,QAAQ,OAAO,YAAY,IAAI,WAAW,WAAW,qDAAqD,YAAY,IAAI,OAAO,OAAO,QAAQ,CAAC;CAEvL,SAAS,KAAK;EACV,QAAQ,MAAM,OAAO,4CAA4C,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE,qCAAqC,CAAC;CAC5J;AACJ;;;;;;;;;;AAWA,eAAsB,8BAClB,QACA,aACA,UAAmC,CAAC,GACR;CAC5B,MAAM,QAAQ,uBAAuB,WAAW;CAChD,IAAI,MAAM,WAAW,GAAG,OAAO,EAAE,SAAS,EAAE;CAE5C,MAAM,SAAS,MAAM,gBAAgB,QAAQ,QAAQ,kBAAkB,iBAAiB,QAAQ,WAAW,CAAC;CAC5G,MAAM,SAA4D,CAAC;CACnE,KAAK,MAAM,QAAQ,OACf,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,IAAI,KAAK,SAAS,KAAK,CAAC,GACvD,IAAI,UAAU,WAAW,OAAO,KAAK;EAAE,QAAQ,KAAK;EAAQ,OAAO,KAAK;EAAO;CAAK,CAAC;CAG7F,IAAI,OAAO,WAAW,GAAG,OAAO,EAAE,SAAS,EAAE;CAE7C,MAAM,YAAY,MAAM,sBAAsB,QAAQ,aAAa,QAAQ,EAAE,YAAY,QAAQ,WAAW,CAAC;CAC7G,MAAM,aAAuB,CAAC;CAC9B,IAAI,UAAU;CACd,KAAK,MAAM,QAAQ,OAAO;EACtB,MAAM,QAAQ,IAAI,IAAI,OACjB,QAAO,MAAK,EAAE,WAAW,KAAK,UAAU,EAAE,UAAU,KAAK,SACnD,UAAU,IAAI,GAAG,EAAE,OAAO,GAAG,EAAE,MAAM,GAAG,EAAE,MAAM,MAAM,IAAI,CAAC,CACjE,KAAI,MAAK,EAAE,IAAI,CAAC;EACrB,MAAM,YAAY,MAAM,OAAO,IAAI,eAAe,MAAM,KAAK,IAAI,KAAA;EACjE,IAAI,CAAC,WAAW;EAChB,WAAW,KAAK,SAAS;EACzB,WAAW,MAAM;CACrB;CACA,IAAI,WAAW,WAAW,GAAG,OAAO,EAAE,SAAS,EAAE;CAEjD,MAAM,gBAAgB,QAAQ,QAAQ,YAAY,YAAY;EAC1D,KAAK,MAAM,aAAa,YAAY,MAAM,OAAO,MAAM,SAAS;CACpE,CAAC;CACD,OAAO,EAAE,QAAQ;AACrB"}
+{"version":3,"file":"migrate-policy-stamps-BQtFHApx.js","names":[],"sources":["../src/schema/migrate-policy-stamps.ts"],"sourcesContent":["/**\n * The stamps `rebase db migrate` leaves on the policies it applied.\n *\n * A boot leaves a table's policies alone only when each carries the stamp a\n * boot or a push writes (`COMMENT ON POLICY … IS 'rebase:<hash>'`, see\n * `policyStampSql`). `db push` stamps what `policies.sql` just created. A\n * migration runs the same statements — `db generate` appends `policies.sql` to\n * it — and stamped nothing, so the first boot after every migrate dropped and\n * re-created every policy once, an ACCESS EXCLUSIVE lock per table: 44 on the\n * blog scaffold.\n *\n * Migrate cannot stamp what the files hold, the way push stamps what it just\n * ran: a migration was written from the collections of its day, and the\n * database may hold something a later one, or a hand, made since. A stamp\n * there would tell the boot a policy is what the rule makes when it is not, and\n * the boot would never put it right. So each declared policy without a current\n * stamp is asked of Postgres instead, as `db push --dry-run` asks it\n * (`probeRenderedPolicies`): made again from its rule under a probe name, in a\n * transaction that is rolled back, and compared. Only a policy whose stored\n * definition is exactly what its rule makes is stamped. Any other keeps no\n * stamp, and the boot re-applies its table, as before.\n */\nimport path from \"path\";\nimport chalk from \"chalk\";\nimport type { CollectionConfig } from \"@rebasepro/types\";\nimport type { Queryable } from \"../security/policy-drift\";\nimport { withAppClient } from \"../cli-helpers\";\nimport { out, outWarn } from \"../cli-output\";\nimport { pinSearchPath } from \"../connection\";\nimport { planCollectionPolicies } from \"./generate-postgres-ddl-logic\";\nimport { policyStampSql, probeRenderedPolicies, readPolicyStamps } from \"./ensure-collection-policies\";\nimport { underSearchPath } from \"./push-policy-plan\";\nimport { loadCollections } from \"./doctor\";\n\n/**\n * `rebase db migrate`'s last step: stamp what the migration left as its rules\n * make it, on this process's connection. Never fatal — a policy left\n * unstamped costs the next boot a re-apply of its table, which is what every\n * boot after a migrate did before this.\n */\nexport async function stampMigratedPolicies(databaseUrl: string, collectionsPath: string): Promise<void> {\n    try {\n        const collections = await loadCollections(path.resolve(process.cwd(), collectionsPath));\n        // The rule the boot's connections follow: `search_path=public` unless\n        // the URL pins one of its own, in which case this connection has it too.\n        const searchPath = pinSearchPath(databaseUrl) === databaseUrl ? undefined : \"public\";\n        const { stamped } = await withAppClient(databaseUrl, client => stampPoliciesStoredAsRendered(\n            { query: async (text, values) => ({ rows: (await client.query(text, values)).rows }) },\n            collections,\n            { searchPath }\n        ));\n        if (stamped > 0) {\n            out(chalk.gray(`  ✓ Stamped ${stamped} RLS ${stamped === 1 ? \"policy\" : \"policies\"} as their rules make them, so the next boot leaves ${stamped === 1 ? \"it\" : \"them\"} alone.`));\n        }\n    } catch (err) {\n        outWarn(chalk.yellow(`  ⚠️  The policies could not be stamped (${err instanceof Error ? err.message : String(err)}); the next boot applies them again.`));\n    }\n}\n\n/**\n * Stamp every declared policy whose stored definition its rule would store\n * as it is, and none other.\n *\n * @param options.searchPath the `search_path` a boot reads policies under,\n *        when the connection's own differs — the stamp hashes `pg_get_expr`,\n *        whose spelling depends on it. See `PolicyStamping.searchPath`.\n * @returns how many policies were stamped.\n */\nexport async function stampPoliciesStoredAsRendered(\n    client: Queryable,\n    collections: CollectionConfig[],\n    options: { searchPath?: string } = {}\n): Promise<{ stamped: number }> {\n    const plans = planCollectionPolicies(collections);\n    if (plans.length === 0) return { stamped: 0 };\n\n    const states = await underSearchPath(client, options.searchPath, () => readPolicyStamps(client, collections));\n    const unsure: { schema: string; table: string; name: string }[] = [];\n    for (const plan of plans) {\n        for (const [name, state] of states.get(plan.qualified) ?? []) {\n            if (state !== \"current\") unsure.push({ schema: plan.schema, table: plan.table, name });\n        }\n    }\n    if (unsure.length === 0) return { stamped: 0 };\n\n    const confirmed = await probeRenderedPolicies(client, collections, unsure, { searchPath: options.searchPath });\n    const statements: string[] = [];\n    let stamped = 0;\n    for (const plan of plans) {\n        const names = new Set(unsure\n            .filter(p => p.schema === plan.schema && p.table === plan.table\n                && confirmed.get(`${p.schema}.${p.table}.${p.name}`) === true)\n            .map(p => p.name));\n        const statement = names.size > 0 ? policyStampSql(plan, names) : undefined;\n        if (!statement) continue;\n        statements.push(statement);\n        stamped += names.size;\n    }\n    if (statements.length === 0) return { stamped: 0 };\n\n    await underSearchPath(client, options.searchPath, async () => {\n        for (const statement of statements) await client.query(statement);\n    });\n    return { stamped };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,eAAsB,sBAAsB,aAAqB,iBAAwC;CACrG,IAAI;EACA,MAAM,cAAc,MAAM,gBAAgB,KAAK,QAAQ,QAAQ,IAAI,GAAG,eAAe,CAAC;EAGtF,MAAM,aAAa,cAAc,WAAW,MAAM,cAAc,KAAA,IAAY;EAC5E,MAAM,EAAE,YAAY,MAAM,cAAc,cAAa,WAAU,8BAC3D,EAAE,OAAO,OAAO,MAAM,YAAY,EAAE,OAAO,MAAM,OAAO,MAAM,MAAM,MAAM,EAAA,CAAG,KAAK,GAAG,GACrF,aACA,EAAE,WAAW,CACjB,CAAC;EACD,IAAI,UAAU,GACV,IAAI,MAAM,KAAK,eAAe,QAAQ,OAAO,YAAY,IAAI,WAAW,WAAW,qDAAqD,YAAY,IAAI,OAAO,OAAO,QAAQ,CAAC;CAEvL,SAAS,KAAK;EACV,QAAQ,MAAM,OAAO,4CAA4C,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE,qCAAqC,CAAC;CAC5J;AACJ;;;;;;;;;;AAWA,eAAsB,8BAClB,QACA,aACA,UAAmC,CAAC,GACR;CAC5B,MAAM,QAAQ,uBAAuB,WAAW;CAChD,IAAI,MAAM,WAAW,GAAG,OAAO,EAAE,SAAS,EAAE;CAE5C,MAAM,SAAS,MAAM,gBAAgB,QAAQ,QAAQ,kBAAkB,iBAAiB,QAAQ,WAAW,CAAC;CAC5G,MAAM,SAA4D,CAAC;CACnE,KAAK,MAAM,QAAQ,OACf,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,IAAI,KAAK,SAAS,KAAK,CAAC,GACvD,IAAI,UAAU,WAAW,OAAO,KAAK;EAAE,QAAQ,KAAK;EAAQ,OAAO,KAAK;EAAO;CAAK,CAAC;CAG7F,IAAI,OAAO,WAAW,GAAG,OAAO,EAAE,SAAS,EAAE;CAE7C,MAAM,YAAY,MAAM,sBAAsB,QAAQ,aAAa,QAAQ,EAAE,YAAY,QAAQ,WAAW,CAAC;CAC7G,MAAM,aAAuB,CAAC;CAC9B,IAAI,UAAU;CACd,KAAK,MAAM,QAAQ,OAAO;EACtB,MAAM,QAAQ,IAAI,IAAI,OACjB,QAAO,MAAK,EAAE,WAAW,KAAK,UAAU,EAAE,UAAU,KAAK,SACnD,UAAU,IAAI,GAAG,EAAE,OAAO,GAAG,EAAE,MAAM,GAAG,EAAE,MAAM,MAAM,IAAI,CAAC,CACjE,KAAI,MAAK,EAAE,IAAI,CAAC;EACrB,MAAM,YAAY,MAAM,OAAO,IAAI,eAAe,MAAM,KAAK,IAAI,KAAA;EACjE,IAAI,CAAC,WAAW;EAChB,WAAW,KAAK,SAAS;EACzB,WAAW,MAAM;CACrB;CACA,IAAI,WAAW,WAAW,GAAG,OAAO,EAAE,SAAS,EAAE;CAEjD,MAAM,gBAAgB,QAAQ,QAAQ,YAAY,YAAY;EAC1D,KAAK,MAAM,aAAa,YAAY,MAAM,OAAO,MAAM,SAAS;CACpE,CAAC;CACD,OAAO,EAAE,QAAQ;AACrB"}