@secondlayer/shared 1.0.0 → 2.0.0

package/migrations/0041_subgraphs_drop_api_key_id.ts

@@ -0,0 +1,49 @@
+import { type Kysely, sql } from "kysely";
+
+/**
+ * Post-cutover cleanup: drop `subgraphs.api_key_id` and the partial unique
+ * index that went with nullable-api-key-id handling. Every subgraph lives in
+ * a tenant DB now; tenants authenticate via JWT (TENANT_JWT_SECRET), not
+ * per-account API keys — so this column has been dead weight since migration
+ * 0037 made it nullable.
+ *
+ * Runs against BOTH the platform DB and every tenant DB (migrations share
+ * the same list). The platform DB's `subgraphs` table is manually dropped
+ * as a one-off operation AFTER this migration (see Phase 2 cutover notes).
+ *
+ * Restores the simple `UNIQUE (name)` constraint the table started with —
+ * tenant subgraphs were always name-unique within a tenant.
+ */
+export async function up(db: Kysely<unknown>): Promise<void> {
+	await sql`SET lock_timeout = '30s'`.execute(db);
+
+	await sql`DROP INDEX IF EXISTS subgraphs_name_unique_no_key`.execute(db);
+	await sql`ALTER TABLE subgraphs DROP COLUMN IF EXISTS api_key_id`.execute(db);
+	// Re-add the simple name-unique constraint if it's not already there
+	// (noop if it was never dropped in a prior migration).
+	await sql`
+		DO $$
+		BEGIN
+			IF NOT EXISTS (
+				SELECT 1 FROM pg_constraint
+				WHERE conname = 'subgraphs_name_unique'
+			) THEN
+				ALTER TABLE subgraphs ADD CONSTRAINT subgraphs_name_unique UNIQUE (name);
+			END IF;
+		END$$
+	`.execute(db);
+}
+
+export async function down(db: Kysely<unknown>): Promise<void> {
+	await sql`ALTER TABLE subgraphs DROP CONSTRAINT IF EXISTS subgraphs_name_unique`.execute(
+		db,
+	);
+	await sql`ALTER TABLE subgraphs ADD COLUMN IF NOT EXISTS api_key_id text`.execute(
+		db,
+	);
+	await sql`
+		CREATE UNIQUE INDEX IF NOT EXISTS subgraphs_name_unique_no_key
+		ON subgraphs (name)
+		WHERE api_key_id IS NULL
+	`.execute(db);
+}

package/migrations/0042_tenant_project_id.ts

@@ -0,0 +1,25 @@
+import { type Kysely, sql } from "kysely";
+
+/**
+ * Link tenants to projects (1:1 enforced at application layer today;
+ * schema supports 1:N for future branching).
+ *
+ * `ON DELETE SET NULL` so a project delete doesn't cascade into tenant
+ * teardown — the tenant row stays (with project_id = NULL) until explicit
+ * teardown via the provisioner.
+ */
+export async function up(db: Kysely<unknown>): Promise<void> {
+	await sql`SET lock_timeout = '30s'`.execute(db);
+	await sql`
+		ALTER TABLE tenants
+			ADD COLUMN project_id uuid REFERENCES projects(id) ON DELETE SET NULL
+	`.execute(db);
+	await sql`CREATE INDEX IF NOT EXISTS tenants_project_idx ON tenants (project_id)`.execute(
+		db,
+	);
+}
+
+export async function down(db: Kysely<unknown>): Promise<void> {
+	await sql`DROP INDEX IF EXISTS tenants_project_idx`.execute(db);
+	await sql`ALTER TABLE tenants DROP COLUMN IF EXISTS project_id`.execute(db);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@secondlayer/shared",
-	"version": "1.0.0",
+	"version": "2.0.0",
 	"type": "module",
 	"main": "./dist/src/index.js",
 	"types": "./dist/src/index.d.ts",
@@ -73,6 +73,10 @@
 			"types": "./dist/src/db/queries/workflows.d.ts",
 			"import": "./dist/src/db/queries/workflows.js"
 		},
+		"./db/queries/tenants": {
+			"types": "./dist/src/db/queries/tenants.d.ts",
+			"import": "./dist/src/db/queries/tenants.js"
+		},
 		"./db/queries/marketplace": {
 			"types": "./dist/src/db/queries/marketplace.d.ts",
 			"import": "./dist/src/db/queries/marketplace.js"
@@ -89,6 +93,10 @@
 			"types": "./dist/src/env.d.ts",
 			"import": "./dist/src/env.js"
 		},
+		"./mode": {
+			"types": "./dist/src/mode.d.ts",
+			"import": "./dist/src/mode.js"
+		},
 		"./logger": {
 			"types": "./dist/src/logger.d.ts",
 			"import": "./dist/src/logger.js"
@@ -101,6 +109,10 @@
 			"types": "./dist/src/constants.d.ts",
 			"import": "./dist/src/constants.js"
 		},
+		"./pricing": {
+			"types": "./dist/src/pricing.d.ts",
+			"import": "./dist/src/pricing.js"
+		},
 		"./crypto": {
 			"types": "./dist/src/crypto/hmac.d.ts",
 			"import": "./dist/src/crypto/hmac.js"
@@ -109,6 +121,10 @@
 			"types": "./dist/src/crypto/hmac.d.ts",
 			"import": "./dist/src/crypto/hmac.js"
 		},
+		"./crypto/secrets": {
+			"types": "./dist/src/crypto/secrets.d.ts",
+			"import": "./dist/src/crypto/secrets.js"
+		},
 		"./node": {
 			"types": "./dist/src/node/client.d.ts",
 			"import": "./dist/src/node/client.js"
@@ -148,7 +164,7 @@
 		"prepublishOnly": "bun run build"
 	},
 	"dependencies": {
-		"@secondlayer/stacks": "^0.2.2",
+		"@secondlayer/stacks": "^0.3.0",
 		"kysely": "0.28.15",
 		"kysely-postgres-js": "3.0.0",
 		"postgres": "^3.4.6",