@vritti/api-sdk 0.2.7 → 0.2.9

package/dist/migrate.cjs

@@ -0,0 +1,88 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/migrate.ts
+var migrate_exports = {};
+__export(migrate_exports, {
+  runMigrationsAndGrants: () => runMigrationsAndGrants
+});
+module.exports = __toCommonJS(migrate_exports);
+
+// src/database/migrate-runner.ts
+var import_node_postgres = require("drizzle-orm/node-postgres");
+var import_migrator = require("drizzle-orm/node-postgres/migrator");
+var import_pg = require("pg");
+function quoteIdent(name) {
+  if (!/^[A-Za-z_][A-Za-z0-9_$]*$/.test(name)) {
+    throw new Error(`Unsafe SQL identifier: ${name}`);
+  }
+  return `"${name}"`;
+}
+__name(quoteIdent, "quoteIdent");
+function requiredEnv(name) {
+  const value = process.env[name];
+  if (!value) {
+    throw new Error(`${name} environment variable is required`);
+  }
+  return value;
+}
+__name(requiredEnv, "requiredEnv");
+async function runMigrationsAndGrants(options) {
+  const directUrl = requiredEnv("PRIMARY_DB_DATABASE_DIRECT_URL");
+  const dbSchema = requiredEnv("PRIMARY_DB_SCHEMA");
+  const migrationSchema = requiredEnv("PRIMARY_DB_MIGRATION_SCHEMA");
+  const appRole = requiredEnv("PRIMARY_DB_USERNAME");
+  const pool = new import_pg.Pool({
+    connectionString: directUrl,
+    max: 1
+  });
+  const db = (0, import_node_postgres.drizzle)({
+    client: pool
+  });
+  try {
+    console.log(`[migrate] applying migrations from ${options.migrationsFolder}`);
+    await (0, import_migrator.migrate)(db, {
+      migrationsFolder: options.migrationsFolder,
+      migrationsTable: options.migrationsTable,
+      migrationsSchema: migrationSchema
+    });
+    const schema = quoteIdent(dbSchema);
+    const role = quoteIdent(appRole);
+    console.log(`[migrate] granting ${dbSchema} privileges to ${appRole}`);
+    await pool.query(`
+      GRANT USAGE ON SCHEMA ${schema} TO ${role};
+      GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES   IN SCHEMA ${schema} TO ${role};
+      GRANT USAGE, SELECT                  ON ALL SEQUENCES IN SCHEMA ${schema} TO ${role};
+      GRANT EXECUTE                        ON ALL FUNCTIONS IN SCHEMA ${schema} TO ${role};
+      ALTER DEFAULT PRIVILEGES IN SCHEMA ${schema} GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES    TO ${role};
+      ALTER DEFAULT PRIVILEGES IN SCHEMA ${schema} GRANT USAGE, SELECT                  ON SEQUENCES TO ${role};
+      ALTER DEFAULT PRIVILEGES IN SCHEMA ${schema} GRANT EXECUTE                        ON FUNCTIONS TO ${role};
+    `);
+    console.log("[migrate] done");
+  } finally {
+    await pool.end();
+  }
+}
+__name(runMigrationsAndGrants, "runMigrationsAndGrants");
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  runMigrationsAndGrants
+});
+//# sourceMappingURL=migrate.cjs.map

package/dist/migrate.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/migrate.ts","../src/database/migrate-runner.ts"],"sourcesContent":["// Subpath entry: @vritti/api-sdk/migrate — DB migration + grants runner for release-phase one-shots.\nexport { type MigrateRunnerOptions, runMigrationsAndGrants } from './database/migrate-runner';\n","import { drizzle } from 'drizzle-orm/node-postgres';\nimport { migrate } from 'drizzle-orm/node-postgres/migrator';\nimport { Pool } from 'pg';\n\n// Options for runMigrationsAndGrants — supplied by each app's thin migrate entry.\nexport interface MigrateRunnerOptions {\n  // Absolute path to the Drizzle migrations folder (each app resolves this from its own dist).\n  migrationsFolder: string;\n  // Per-app migration bookkeeping table — must match the app's drizzle.config.ts.\n  migrationsTable: string;\n}\n\n// Validates and quotes a Postgres identifier (role/schema names can't be bound as query params).\nfunction quoteIdent(name: string): string {\n  if (!/^[A-Za-z_][A-Za-z0-9_$]*$/.test(name)) {\n    throw new Error(`Unsafe SQL identifier: ${name}`);\n  }\n  return `\"${name}\"`;\n}\n\n// Reads a required environment variable or throws.\nfunction requiredEnv(name: string): string {\n  const value = process.env[name];\n  if (!value) {\n    throw new Error(`${name} environment variable is required`);\n  }\n  return value;\n}\n\n// Applies Drizzle migrations as the owner (PRIMARY_DB_DATABASE_DIRECT_URL), then idempotently\n// grants the runtime app role (PRIMARY_DB_USERNAME) access to the schema. Intended to run as a\n// release-phase one-shot before the application containers roll.\nexport async function runMigrationsAndGrants(options: MigrateRunnerOptions): Promise<void> {\n  const directUrl = requiredEnv('PRIMARY_DB_DATABASE_DIRECT_URL');\n  const dbSchema = requiredEnv('PRIMARY_DB_SCHEMA');\n  const migrationSchema = requiredEnv('PRIMARY_DB_MIGRATION_SCHEMA');\n  const appRole = requiredEnv('PRIMARY_DB_USERNAME');\n\n  // Single connection as the owner role — runs both DDL and the grants below.\n  const pool = new Pool({ connectionString: directUrl, max: 1 });\n  const db = drizzle({ client: pool });\n\n  try {\n    console.log(`[migrate] applying migrations from ${options.migrationsFolder}`);\n    await migrate(db, {\n      migrationsFolder: options.migrationsFolder,\n      migrationsTable: options.migrationsTable,\n      migrationsSchema: migrationSchema,\n    });\n\n    const schema = quoteIdent(dbSchema);\n    const role = quoteIdent(appRole);\n    console.log(`[migrate] granting ${dbSchema} privileges to ${appRole}`);\n\n    // All statements are idempotent — safe on every deploy. ALTER DEFAULT PRIVILEGES auto-grants\n    // future tables/sequences/functions the owner creates. No-op when appRole equals the owner.\n    await pool.query(`\n      GRANT USAGE ON SCHEMA ${schema} TO ${role};\n      GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES   IN SCHEMA ${schema} TO ${role};\n      GRANT USAGE, SELECT                  ON ALL SEQUENCES IN SCHEMA ${schema} TO ${role};\n      GRANT EXECUTE                        ON ALL FUNCTIONS IN SCHEMA ${schema} TO ${role};\n      ALTER DEFAULT PRIVILEGES IN SCHEMA ${schema} GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES    TO ${role};\n      ALTER DEFAULT PRIVILEGES IN SCHEMA ${schema} GRANT USAGE, SELECT                  ON SEQUENCES TO ${role};\n      ALTER DEFAULT PRIVILEGES IN SCHEMA ${schema} GRANT EXECUTE                        ON FUNCTIONS TO ${role};\n    `);\n\n    console.log('[migrate] done');\n  } finally {\n    await pool.end();\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;ACAA,2BAAwB;AACxB,sBAAwB;AACxB,gBAAqB;AAWrB,SAASA,WAAWC,MAAY;AAC9B,MAAI,CAAC,4BAA4BC,KAAKD,IAAAA,GAAO;AAC3C,UAAM,IAAIE,MAAM,0BAA0BF,IAAAA,EAAM;EAClD;AACA,SAAO,IAAIA,IAAAA;AACb;AALSD;AAQT,SAASI,YAAYH,MAAY;AAC/B,QAAMI,QAAQC,QAAQC,IAAIN,IAAAA;AAC1B,MAAI,CAACI,OAAO;AACV,UAAM,IAAIF,MAAM,GAAGF,IAAAA,mCAAuC;EAC5D;AACA,SAAOI;AACT;AANSD;AAWT,eAAsBI,uBAAuBC,SAA6B;AACxE,QAAMC,YAAYN,YAAY,gCAAA;AAC9B,QAAMO,WAAWP,YAAY,mBAAA;AAC7B,QAAMQ,kBAAkBR,YAAY,6BAAA;AACpC,QAAMS,UAAUT,YAAY,qBAAA;AAG5B,QAAMU,OAAO,IAAIC,eAAK;IAAEC,kBAAkBN;IAAWO,KAAK;EAAE,CAAA;AAC5D,QAAMC,SAAKC,8BAAQ;IAAEC,QAAQN;EAAK,CAAA;AAElC,MAAI;AACFO,YAAQC,IAAI,sCAAsCb,QAAQc,gBAAgB,EAAE;AAC5E,cAAMC,yBAAQN,IAAI;MAChBK,kBAAkBd,QAAQc;MAC1BE,iBAAiBhB,QAAQgB;MACzBC,kBAAkBd;IACpB,CAAA;AAEA,UAAMe,SAAS3B,WAAWW,QAAAA;AAC1B,UAAMiB,OAAO5B,WAAWa,OAAAA;AACxBQ,YAAQC,IAAI,sBAAsBX,QAAAA,kBAA0BE,OAAAA,EAAS;AAIrE,UAAMC,KAAKe,MAAM;8BACSF,MAAAA,OAAaC,IAAAA;uEAC4BD,MAAAA,OAAaC,IAAAA;wEACZD,MAAAA,OAAaC,IAAAA;wEACbD,MAAAA,OAAaC,IAAAA;2CAC1CD,MAAAA,yDAA+DC,IAAAA;2CAC/DD,MAAAA,yDAA+DC,IAAAA;2CAC/DD,MAAAA,yDAA+DC,IAAAA;KACrG;AAEDP,YAAQC,IAAI,gBAAA;EACd,UAAA;AACE,UAAMR,KAAKgB,IAAG;EAChB;AACF;AAtCsBtB;","names":["quoteIdent","name","test","Error","requiredEnv","value","process","env","runMigrationsAndGrants","options","directUrl","dbSchema","migrationSchema","appRole","pool","Pool","connectionString","max","db","drizzle","client","console","log","migrationsFolder","migrate","migrationsTable","migrationsSchema","schema","role","query","end"]}

package/dist/migrate.d.cts

@@ -0,0 +1,7 @@
+interface MigrateRunnerOptions {
+    migrationsFolder: string;
+    migrationsTable: string;
+}
+declare function runMigrationsAndGrants(options: MigrateRunnerOptions): Promise<void>;
+
+export { type MigrateRunnerOptions, runMigrationsAndGrants };

package/dist/migrate.d.ts

@@ -0,0 +1,7 @@
+interface MigrateRunnerOptions {
+    migrationsFolder: string;
+    migrationsTable: string;
+}
+declare function runMigrationsAndGrants(options: MigrateRunnerOptions): Promise<void>;
+
+export { type MigrateRunnerOptions, runMigrationsAndGrants };

package/dist/migrate.js

@@ -0,0 +1,63 @@
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+
+// src/database/migrate-runner.ts
+import { drizzle } from "drizzle-orm/node-postgres";
+import { migrate } from "drizzle-orm/node-postgres/migrator";
+import { Pool } from "pg";
+function quoteIdent(name) {
+  if (!/^[A-Za-z_][A-Za-z0-9_$]*$/.test(name)) {
+    throw new Error(`Unsafe SQL identifier: ${name}`);
+  }
+  return `"${name}"`;
+}
+__name(quoteIdent, "quoteIdent");
+function requiredEnv(name) {
+  const value = process.env[name];
+  if (!value) {
+    throw new Error(`${name} environment variable is required`);
+  }
+  return value;
+}
+__name(requiredEnv, "requiredEnv");
+async function runMigrationsAndGrants(options) {
+  const directUrl = requiredEnv("PRIMARY_DB_DATABASE_DIRECT_URL");
+  const dbSchema = requiredEnv("PRIMARY_DB_SCHEMA");
+  const migrationSchema = requiredEnv("PRIMARY_DB_MIGRATION_SCHEMA");
+  const appRole = requiredEnv("PRIMARY_DB_USERNAME");
+  const pool = new Pool({
+    connectionString: directUrl,
+    max: 1
+  });
+  const db = drizzle({
+    client: pool
+  });
+  try {
+    console.log(`[migrate] applying migrations from ${options.migrationsFolder}`);
+    await migrate(db, {
+      migrationsFolder: options.migrationsFolder,
+      migrationsTable: options.migrationsTable,
+      migrationsSchema: migrationSchema
+    });
+    const schema = quoteIdent(dbSchema);
+    const role = quoteIdent(appRole);
+    console.log(`[migrate] granting ${dbSchema} privileges to ${appRole}`);
+    await pool.query(`
+      GRANT USAGE ON SCHEMA ${schema} TO ${role};
+      GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES   IN SCHEMA ${schema} TO ${role};
+      GRANT USAGE, SELECT                  ON ALL SEQUENCES IN SCHEMA ${schema} TO ${role};
+      GRANT EXECUTE                        ON ALL FUNCTIONS IN SCHEMA ${schema} TO ${role};
+      ALTER DEFAULT PRIVILEGES IN SCHEMA ${schema} GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES    TO ${role};
+      ALTER DEFAULT PRIVILEGES IN SCHEMA ${schema} GRANT USAGE, SELECT                  ON SEQUENCES TO ${role};
+      ALTER DEFAULT PRIVILEGES IN SCHEMA ${schema} GRANT EXECUTE                        ON FUNCTIONS TO ${role};
+    `);
+    console.log("[migrate] done");
+  } finally {
+    await pool.end();
+  }
+}
+__name(runMigrationsAndGrants, "runMigrationsAndGrants");
+export {
+  runMigrationsAndGrants
+};
+//# sourceMappingURL=migrate.js.map

package/dist/migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/database/migrate-runner.ts"],"sourcesContent":["import { drizzle } from 'drizzle-orm/node-postgres';\nimport { migrate } from 'drizzle-orm/node-postgres/migrator';\nimport { Pool } from 'pg';\n\n// Options for runMigrationsAndGrants — supplied by each app's thin migrate entry.\nexport interface MigrateRunnerOptions {\n  // Absolute path to the Drizzle migrations folder (each app resolves this from its own dist).\n  migrationsFolder: string;\n  // Per-app migration bookkeeping table — must match the app's drizzle.config.ts.\n  migrationsTable: string;\n}\n\n// Validates and quotes a Postgres identifier (role/schema names can't be bound as query params).\nfunction quoteIdent(name: string): string {\n  if (!/^[A-Za-z_][A-Za-z0-9_$]*$/.test(name)) {\n    throw new Error(`Unsafe SQL identifier: ${name}`);\n  }\n  return `\"${name}\"`;\n}\n\n// Reads a required environment variable or throws.\nfunction requiredEnv(name: string): string {\n  const value = process.env[name];\n  if (!value) {\n    throw new Error(`${name} environment variable is required`);\n  }\n  return value;\n}\n\n// Applies Drizzle migrations as the owner (PRIMARY_DB_DATABASE_DIRECT_URL), then idempotently\n// grants the runtime app role (PRIMARY_DB_USERNAME) access to the schema. Intended to run as a\n// release-phase one-shot before the application containers roll.\nexport async function runMigrationsAndGrants(options: MigrateRunnerOptions): Promise<void> {\n  const directUrl = requiredEnv('PRIMARY_DB_DATABASE_DIRECT_URL');\n  const dbSchema = requiredEnv('PRIMARY_DB_SCHEMA');\n  const migrationSchema = requiredEnv('PRIMARY_DB_MIGRATION_SCHEMA');\n  const appRole = requiredEnv('PRIMARY_DB_USERNAME');\n\n  // Single connection as the owner role — runs both DDL and the grants below.\n  const pool = new Pool({ connectionString: directUrl, max: 1 });\n  const db = drizzle({ client: pool });\n\n  try {\n    console.log(`[migrate] applying migrations from ${options.migrationsFolder}`);\n    await migrate(db, {\n      migrationsFolder: options.migrationsFolder,\n      migrationsTable: options.migrationsTable,\n      migrationsSchema: migrationSchema,\n    });\n\n    const schema = quoteIdent(dbSchema);\n    const role = quoteIdent(appRole);\n    console.log(`[migrate] granting ${dbSchema} privileges to ${appRole}`);\n\n    // All statements are idempotent — safe on every deploy. ALTER DEFAULT PRIVILEGES auto-grants\n    // future tables/sequences/functions the owner creates. No-op when appRole equals the owner.\n    await pool.query(`\n      GRANT USAGE ON SCHEMA ${schema} TO ${role};\n      GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES   IN SCHEMA ${schema} TO ${role};\n      GRANT USAGE, SELECT                  ON ALL SEQUENCES IN SCHEMA ${schema} TO ${role};\n      GRANT EXECUTE                        ON ALL FUNCTIONS IN SCHEMA ${schema} TO ${role};\n      ALTER DEFAULT PRIVILEGES IN SCHEMA ${schema} GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES    TO ${role};\n      ALTER DEFAULT PRIVILEGES IN SCHEMA ${schema} GRANT USAGE, SELECT                  ON SEQUENCES TO ${role};\n      ALTER DEFAULT PRIVILEGES IN SCHEMA ${schema} GRANT EXECUTE                        ON FUNCTIONS TO ${role};\n    `);\n\n    console.log('[migrate] done');\n  } finally {\n    await pool.end();\n  }\n}\n"],"mappings":";;;;AAAA,SAASA,eAAe;AACxB,SAASC,eAAe;AACxB,SAASC,YAAY;AAWrB,SAASC,WAAWC,MAAY;AAC9B,MAAI,CAAC,4BAA4BC,KAAKD,IAAAA,GAAO;AAC3C,UAAM,IAAIE,MAAM,0BAA0BF,IAAAA,EAAM;EAClD;AACA,SAAO,IAAIA,IAAAA;AACb;AALSD;AAQT,SAASI,YAAYH,MAAY;AAC/B,QAAMI,QAAQC,QAAQC,IAAIN,IAAAA;AAC1B,MAAI,CAACI,OAAO;AACV,UAAM,IAAIF,MAAM,GAAGF,IAAAA,mCAAuC;EAC5D;AACA,SAAOI;AACT;AANSD;AAWT,eAAsBI,uBAAuBC,SAA6B;AACxE,QAAMC,YAAYN,YAAY,gCAAA;AAC9B,QAAMO,WAAWP,YAAY,mBAAA;AAC7B,QAAMQ,kBAAkBR,YAAY,6BAAA;AACpC,QAAMS,UAAUT,YAAY,qBAAA;AAG5B,QAAMU,OAAO,IAAIC,KAAK;IAAEC,kBAAkBN;IAAWO,KAAK;EAAE,CAAA;AAC5D,QAAMC,KAAKC,QAAQ;IAAEC,QAAQN;EAAK,CAAA;AAElC,MAAI;AACFO,YAAQC,IAAI,sCAAsCb,QAAQc,gBAAgB,EAAE;AAC5E,UAAMC,QAAQN,IAAI;MAChBK,kBAAkBd,QAAQc;MAC1BE,iBAAiBhB,QAAQgB;MACzBC,kBAAkBd;IACpB,CAAA;AAEA,UAAMe,SAAS3B,WAAWW,QAAAA;AAC1B,UAAMiB,OAAO5B,WAAWa,OAAAA;AACxBQ,YAAQC,IAAI,sBAAsBX,QAAAA,kBAA0BE,OAAAA,EAAS;AAIrE,UAAMC,KAAKe,MAAM;8BACSF,MAAAA,OAAaC,IAAAA;uEAC4BD,MAAAA,OAAaC,IAAAA;wEACZD,MAAAA,OAAaC,IAAAA;wEACbD,MAAAA,OAAaC,IAAAA;2CAC1CD,MAAAA,yDAA+DC,IAAAA;2CAC/DD,MAAAA,yDAA+DC,IAAAA;2CAC/DD,MAAAA,yDAA+DC,IAAAA;KACrG;AAEDP,YAAQC,IAAI,gBAAA;EACd,UAAA;AACE,UAAMR,KAAKgB,IAAG;EAChB;AACF;AAtCsBtB;","names":["drizzle","migrate","Pool","quoteIdent","name","test","Error","requiredEnv","value","process","env","runMigrationsAndGrants","options","directUrl","dbSchema","migrationSchema","appRole","pool","Pool","connectionString","max","db","drizzle","client","console","log","migrationsFolder","migrate","migrationsTable","migrationsSchema","schema","role","query","end"]}