@vrplatform/kysely 1.3.45-stage.392 → 1.3.45-stage.39244141260

package/build/.data.tar

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
 name: package/build/.data.tar
-size: 50941952 bytes
-sha256: dc736c159970f20a56de35a3ec6afe8ab91d7062228f85a853d3d44268cf76b1
+size: 53013504 bytes
+sha256: 05225dbcc383368fb13f184cae63976919b6d626c57aa39195d54a97a5945471

package/build/main/camel-case/index.d.ts

@@ -1,8 +1,8 @@
-import { CamelCasePlugin, type SelectQueryNode } from 'kysely';
+import { CamelCasePlugin, type PluginTransformQueryArgs, type PluginTransformResultArgs, SelectQueryNode, type UnknownRow } from 'kysely';
 export declare class CustomCasePlugin extends CamelCasePlugin {
     constructor();
-    transformResult(args: any): Promise<import("kysely").QueryResult<import("kysely").UnknownRow>>;
-    transformQuery(args: any): import("kysely").RootOperationNode;
+    transformResult(args: PluginTransformResultArgs): Promise<import("kysely").QueryResult<UnknownRow>>;
+    transformQuery(args: PluginTransformQueryArgs): import("kysely").RootOperationNode;
     verifyAlias(node: SelectQueryNode): void;
-    protected mapRow(row: any): any;
+    protected mapRow(row: UnknownRow): Record<string, any>;
 }

package/build/main/camel-case/index.js

@@ -14,7 +14,8 @@ class CustomCasePlugin extends kysely_1.CamelCasePlugin {
         return super.transformResult(args);
     }
     transformQuery(args) {
-        this.verifyAlias(args.node);
+        if (kysely_1.SelectQueryNode.is(args.node))
+            this.verifyAlias(args.node);
         return super.transformQuery(args);
     }
     verifyAlias(node) {

package/build/main/camel-case/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"src/","sources":["camel-case/index.ts"],"names":[],"mappings":";;;AAAA,mCAMgB;AAChB,oCAAuC;AAEvC,MAAa,gBAAiB,SAAQ,wBAAe;IACnD,kDAAkD;IAClD;QACE,KAAK,CAAC;YACJ,wBAAwB,EAAE,IAAI;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,eAAe,CAAC,IAAI;QAClB,OAAO,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,cAAc,CAAC,IAAI;QACjB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,WAAW,CAAC,IAAqB;QAC/B,IAAI,CAAC,IAAI,EAAE,UAAU;YAAE,OAAO;QAE9B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YACtC,MAAM,SAAS,GAAG,CAAC,CAAC,SAAsB,CAAC;YAC3C,IAAI,CAAC,SAAS,CAAC,KAAK;gBAAE,SAAS;YAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAuB,CAAC;YAEhD,0CAA0C;YAC1C,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACtC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAe,CAAC;gBAC1C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;oBACzC,IAAI,CAAC,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;wBACjC,MAAM,eAAe,GAAG,CAAoB,CAAC;wBAC7C,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;oBACpC,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,SAAS;YAExC,MAAM,IAAI,mBAAW,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAES,MAAM,CAAC,GAAG;QAClB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG;YAAE,OAAO,GAAG,CAAC;QAEhD,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,8GAA8G;QAC9G,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YACrB,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACpC,iEAAiE;YACjE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AA1DD,4CA0DC","sourcesContent":["import {\n  type AliasNode,\n  CamelCasePlugin,\n  type IdentifierNode,\n  type RawNode,\n  type SelectQueryNode,\n} from 'kysely';\nimport { KyselyError } from '../error';\n\nexport class CustomCasePlugin extends CamelCasePlugin {\n  // _excludedColumns: Record<string, boolean> = {};\n  constructor() {\n    super({\n      maintainNestedObjectKeys: true,\n    });\n  }\n\n  transformResult(args) {\n    return super.transformResult(args);\n  }\n\n  transformQuery(args) {\n    this.verifyAlias(args.node);\n    return super.transformQuery(args);\n  }\n\n  verifyAlias(node: SelectQueryNode) {\n    if (!node?.selections) return;\n\n    for (const x of node.selections ?? []) {\n      const selection = x.selection as AliasNode;\n      if (!selection.alias) continue;\n      const alias = selection.alias as IdentifierNode;\n\n      // alias can be a raw node (jsonArrayFrom)\n      if (selection.node.kind === 'RawNode') {\n        const rawNode = selection.node as RawNode;\n        for (const x of rawNode.parameters ?? []) {\n          if (x.kind === 'SelectQueryNode') {\n            const selectQueryNode = x as SelectQueryNode;\n            this.verifyAlias(selectQueryNode);\n          }\n        }\n      }\n\n      if (!alias.name.includes('_')) continue;\n\n      throw new KyselyError('Alias contains underscore', { name: alias.name });\n    }\n  }\n\n  protected mapRow(row) {\n    if (typeof row !== 'object' || !row) return row;\n\n    const newRow: Record<string, any> = {};\n    // we camel case on first layer, and nested ONLY if in an array (jsonArrayFrom), NOT if it's an object (jsonb)\n    for (const key of Object.keys(row)) {\n      let value = row[key];\n      const newKey = super.camelCase(key);\n      // array CAN be non object, so we need to check the first element\n      if (Array.isArray(value)) {\n        value = value.map((it) => this.mapRow(it));\n      }\n      newRow[newKey] = value;\n    }\n    return newRow;\n  }\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"src/","sources":["camel-case/index.ts"],"names":[],"mappings":";;;AAAA,mCASgB;AAChB,oCAAuC;AAEvC,MAAa,gBAAiB,SAAQ,wBAAe;IACnD,kDAAkD;IAClD;QACE,KAAK,CAAC;YACJ,wBAAwB,EAAE,IAAI;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,eAAe,CAAC,IAA+B;QAC7C,OAAO,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,cAAc,CAAC,IAA8B;QAC3C,IAAI,wBAAe,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,OAAO,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,WAAW,CAAC,IAAqB;QAC/B,IAAI,CAAC,IAAI,EAAE,UAAU;YAAE,OAAO;QAE9B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YACtC,MAAM,SAAS,GAAG,CAAC,CAAC,SAAsB,CAAC;YAC3C,IAAI,CAAC,SAAS,CAAC,KAAK;gBAAE,SAAS;YAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAuB,CAAC;YAEhD,0CAA0C;YAC1C,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACtC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAe,CAAC;gBAC1C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;oBACzC,IAAI,CAAC,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;wBACjC,MAAM,eAAe,GAAG,CAAoB,CAAC;wBAC7C,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;oBACpC,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,SAAS;YAExC,MAAM,IAAI,mBAAW,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAES,MAAM,CAAC,GAAe;QAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG;YAAE,OAAO,GAAG,CAAC;QAEhD,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,8GAA8G;QAC9G,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YACrB,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACpC,iEAAiE;YACjE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AA1DD,4CA0DC","sourcesContent":["import {\n  type AliasNode,\n  CamelCasePlugin,\n  type IdentifierNode,\n  type PluginTransformQueryArgs,\n  type PluginTransformResultArgs,\n  type RawNode,\n  SelectQueryNode,\n  type UnknownRow,\n} from 'kysely';\nimport { KyselyError } from '../error';\n\nexport class CustomCasePlugin extends CamelCasePlugin {\n  // _excludedColumns: Record<string, boolean> = {};\n  constructor() {\n    super({\n      maintainNestedObjectKeys: true,\n    });\n  }\n\n  transformResult(args: PluginTransformResultArgs) {\n    return super.transformResult(args);\n  }\n\n  transformQuery(args: PluginTransformQueryArgs) {\n    if (SelectQueryNode.is(args.node)) this.verifyAlias(args.node);\n    return super.transformQuery(args);\n  }\n\n  verifyAlias(node: SelectQueryNode) {\n    if (!node?.selections) return;\n\n    for (const x of node.selections ?? []) {\n      const selection = x.selection as AliasNode;\n      if (!selection.alias) continue;\n      const alias = selection.alias as IdentifierNode;\n\n      // alias can be a raw node (jsonArrayFrom)\n      if (selection.node.kind === 'RawNode') {\n        const rawNode = selection.node as RawNode;\n        for (const x of rawNode.parameters ?? []) {\n          if (x.kind === 'SelectQueryNode') {\n            const selectQueryNode = x as SelectQueryNode;\n            this.verifyAlias(selectQueryNode);\n          }\n        }\n      }\n\n      if (!alias.name.includes('_')) continue;\n\n      throw new KyselyError('Alias contains underscore', { name: alias.name });\n    }\n  }\n\n  protected mapRow(row: UnknownRow) {\n    if (typeof row !== 'object' || !row) return row;\n\n    const newRow: Record<string, any> = {};\n    // we camel case on first layer, and nested ONLY if in an array (jsonArrayFrom), NOT if it's an object (jsonb)\n    for (const key of Object.keys(row)) {\n      let value = row[key];\n      const newKey = super.camelCase(key);\n      // array CAN be non object, so we need to check the first element\n      if (Array.isArray(value)) {\n        value = value.map((it) => this.mapRow(it));\n      }\n      newRow[newKey] = value;\n    }\n    return newRow;\n  }\n}\n"]}

package/build/main/connect-handoff.d.ts

@@ -0,0 +1,12 @@
+import type { Kysely } from './index';
+import type { JsonObject } from './v1.generated';
+/**
+ * Passes secrets between the API and Trigger.dev tasks through the tenant's
+ * database, so connect credentials never enter Trigger.dev payloads or outputs.
+ * Rows expire after one hour, the lifetime of a reused connect run. Reads do not
+ * consume the row: a retried or reused run must still find it.
+ */
+export declare function useConnectHandoff(kysely: Kysely, tenantId: string): {
+    put(appId: string, value: JsonObject): Promise<string>;
+    get(ref: string, appId: string): Promise<JsonObject | undefined>;
+};

package/build/main/connect-handoff.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.useConnectHandoff = useConnectHandoff;
+const kysely_1 = require("kysely");
+// Rows never belong to a user, so no authenticated user can claim one through
+// the OAuth state flow that shares the table.
+const handoffUserId = '00000000-0000-0000-0000-000000000000';
+const handoffRefPattern = /^handoff_[A-Za-z0-9_-]{22}$/;
+async function hashRef(ref) {
+    const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(ref));
+    return [...new Uint8Array(digest)]
+        .map((byte) => byte.toString(16).padStart(2, '0'))
+        .join('');
+}
+/**
+ * Passes secrets between the API and Trigger.dev tasks through the tenant's
+ * database, so connect credentials never enter Trigger.dev payloads or outputs.
+ * Rows expire after one hour, the lifetime of a reused connect run. Reads do not
+ * consume the row: a retried or reused run must still find it.
+ */
+function useConnectHandoff(kysely, tenantId) {
+    return {
+        async put(appId, value) {
+            const bytes = crypto.getRandomValues(new Uint8Array(16));
+            const ref = `handoff_${btoa(String.fromCharCode(...bytes))
+                .replaceAll('+', '-')
+                .replaceAll('/', '_')
+                .replaceAll('=', '')}`;
+            await kysely
+                .deleteFrom('public.connectionOauthState')
+                .where('stateHash', 'in', kysely
+                .selectFrom('public.connectionOauthState')
+                .select('stateHash')
+                .where('expiresAt', '<=', (0, kysely_1.sql) `clock_timestamp()`)
+                .orderBy('expiresAt')
+                .limit(100)
+                .forUpdate()
+                .skipLocked())
+                .execute();
+            // Transient authentication coordination is excluded from business audit:
+            // references, setup parameters and credentials must never be audited.
+            await kysely
+                .insertInto('public.connectionOauthState')
+                .values({
+                stateHash: await hashRef(ref),
+                tenantId,
+                userId: handoffUserId,
+                appId,
+                connectionId: null,
+                params: value,
+                redirectUri: '',
+                expiresAt: (0, kysely_1.sql) `clock_timestamp() + interval '1 hour'`,
+            })
+                .execute();
+            return ref;
+        },
+        async get(ref, appId) {
+            if (!handoffRefPattern.test(ref))
+                return undefined;
+            const row = await kysely
+                .selectFrom('public.connectionOauthState')
+                .select('params')
+                .where('stateHash', '=', await hashRef(ref))
+                .where('tenantId', '=', tenantId)
+                .where('appId', '=', appId)
+                .where('userId', '=', handoffUserId)
+                .where('expiresAt', '>', (0, kysely_1.sql) `clock_timestamp()`)
+                .executeTakeFirst();
+            return row?.params;
+        },
+    };
+}
+//# sourceMappingURL=connect-handoff.js.map

package/build/main/connect-handoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-handoff.js","sourceRoot":"src/","sources":["connect-handoff.ts"],"names":[],"mappings":";;AAyBA,8CAsDC;AA/ED,mCAA6B;AAI7B,8EAA8E;AAC9E,8CAA8C;AAC9C,MAAM,aAAa,GAAG,sCAAsC,CAAC;AAC7D,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;AAExD,KAAK,UAAU,OAAO,CAAC,GAAW;IAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACvC,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAC9B,CAAC;IACF,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;SAC/B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACjD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,MAAc,EAAE,QAAgB;IAChE,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,KAAiB;YACxC,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,WAAW,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC;iBACvD,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;iBACpB,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;iBACpB,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;YACzB,MAAM,MAAM;iBACT,UAAU,CAAC,6BAA6B,CAAC;iBACzC,KAAK,CACJ,WAAW,EACX,IAAI,EACJ,MAAM;iBACH,UAAU,CAAC,6BAA6B,CAAC;iBACzC,MAAM,CAAC,WAAW,CAAC;iBACnB,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAA,YAAG,EAAQ,mBAAmB,CAAC;iBACxD,OAAO,CAAC,WAAW,CAAC;iBACpB,KAAK,CAAC,GAAG,CAAC;iBACV,SAAS,EAAE;iBACX,UAAU,EAAE,CAChB;iBACA,OAAO,EAAE,CAAC;YACb,yEAAyE;YACzE,sEAAsE;YACtE,MAAM,MAAM;iBACT,UAAU,CAAC,6BAA6B,CAAC;iBACzC,MAAM,CAAC;gBACN,SAAS,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC7B,QAAQ;gBACR,MAAM,EAAE,aAAa;gBACrB,KAAK;gBACL,YAAY,EAAE,IAAI;gBAClB,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,EAAE;gBACf,SAAS,EAAE,IAAA,YAAG,EAAA,uCAAuC;aACtD,CAAC;iBACD,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;YAClC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YACnD,MAAM,GAAG,GAAG,MAAM,MAAM;iBACrB,UAAU,CAAC,6BAA6B,CAAC;iBACzC,MAAM,CAAC,QAAQ,CAAC;iBAChB,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;iBAC3C,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,QAAQ,CAAC;iBAChC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;iBAC1B,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,aAAa,CAAC;iBACnC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAA,YAAG,EAAQ,mBAAmB,CAAC;iBACvD,gBAAgB,EAAE,CAAC;YACtB,OAAO,GAAG,EAAE,MAAM,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { sql } from 'kysely';\nimport type { Kysely } from './index';\nimport type { JsonObject } from './v1.generated';\n\n// Rows never belong to a user, so no authenticated user can claim one through\n// the OAuth state flow that shares the table.\nconst handoffUserId = '00000000-0000-0000-0000-000000000000';\nconst handoffRefPattern = /^handoff_[A-Za-z0-9_-]{22}$/;\n\nasync function hashRef(ref: string) {\n  const digest = await crypto.subtle.digest(\n    'SHA-256',\n    new TextEncoder().encode(ref)\n  );\n  return [...new Uint8Array(digest)]\n    .map((byte) => byte.toString(16).padStart(2, '0'))\n    .join('');\n}\n\n/**\n * Passes secrets between the API and Trigger.dev tasks through the tenant's\n * database, so connect credentials never enter Trigger.dev payloads or outputs.\n * Rows expire after one hour, the lifetime of a reused connect run. Reads do not\n * consume the row: a retried or reused run must still find it.\n */\nexport function useConnectHandoff(kysely: Kysely, tenantId: string) {\n  return {\n    async put(appId: string, value: JsonObject) {\n      const bytes = crypto.getRandomValues(new Uint8Array(16));\n      const ref = `handoff_${btoa(String.fromCharCode(...bytes))\n        .replaceAll('+', '-')\n        .replaceAll('/', '_')\n        .replaceAll('=', '')}`;\n      await kysely\n        .deleteFrom('public.connectionOauthState')\n        .where(\n          'stateHash',\n          'in',\n          kysely\n            .selectFrom('public.connectionOauthState')\n            .select('stateHash')\n            .where('expiresAt', '<=', sql<string>`clock_timestamp()`)\n            .orderBy('expiresAt')\n            .limit(100)\n            .forUpdate()\n            .skipLocked()\n        )\n        .execute();\n      // Transient authentication coordination is excluded from business audit:\n      // references, setup parameters and credentials must never be audited.\n      await kysely\n        .insertInto('public.connectionOauthState')\n        .values({\n          stateHash: await hashRef(ref),\n          tenantId,\n          userId: handoffUserId,\n          appId,\n          connectionId: null,\n          params: value,\n          redirectUri: '',\n          expiresAt: sql`clock_timestamp() + interval '1 hour'`,\n        })\n        .execute();\n      return ref;\n    },\n    async get(ref: string, appId: string) {\n      if (!handoffRefPattern.test(ref)) return undefined;\n      const row = await kysely\n        .selectFrom('public.connectionOauthState')\n        .select('params')\n        .where('stateHash', '=', await hashRef(ref))\n        .where('tenantId', '=', tenantId)\n        .where('appId', '=', appId)\n        .where('userId', '=', handoffUserId)\n        .where('expiresAt', '>', sql<string>`clock_timestamp()`)\n        .executeTakeFirst();\n      return row?.params;\n    },\n  };\n}\n"]}

package/build/main/control-plane/index.d.ts

@@ -11,7 +11,7 @@ export type JsonValue = JsonArray | JsonObject | JsonPrimitive;
 export type Int8 = ColumnType<string, number | string | bigint, number | string | bigint>;
 export type Timestamp = ColumnType<Date | string, Date | string, Date | string>;
 export type ControlPlaneOperationStatus = 'completed' | 'failed' | 'queued' | 'running';
-export type ControlPlaneOperationType = 'ach-verification' | 'bank-rule-run' | 'calendar-block' | 'calendar-unblock' | 'connection-archive' | 'connection-connect' | 'connection-extract' | 'connection-sync' | 'csv-import' | 'csv-import-preview' | 'export' | 'flow-run' | 'historical-gl-import' | 'historical-statement-import' | 'listing-journal-refresh' | 'plaid-initial-sync' | 'pms-cutover' | 'pms-cutover-preview' | 'provider-payment' | 'provider-payment-recovery' | 'recurring-transaction-run' | 'reservation-journal-refresh' | 'team-delete' | 'team-demo-data' | 'team-duplicate' | 'team-initialize' | 'transaction-journal-refresh' | 'vri-statement-import' | 'vri-team-migration' | 'webhook-test';
+export type ControlPlaneOperationType = 'ach-verification' | 'bank-rule-run' | 'calendar-block' | 'calendar-unblock' | 'connection-archive' | 'connection-connect' | 'connection-extract' | 'connection-sync' | 'csv-import' | 'csv-import-preview' | 'export' | 'flow-run' | 'historical-gl-import' | 'historical-statement-import' | 'listing-journal-refresh' | 'plaid-initial-sync' | 'pms-cutover' | 'pms-cutover-preview' | 'provider-payment' | 'provider-payment-recovery' | 'recurring-transaction-run' | 'reservation-journal-refresh' | 'statement-payout' | 'statement-payout-preview' | 'team-delete' | 'team-demo-data' | 'team-duplicate' | 'team-initialize' | 'transaction-journal-refresh' | 'vri-statement-import' | 'vri-team-migration' | 'webhook-test';
 export type ControlPlaneOperationResourceRole = 'result' | 'source' | 'target';
 export type ControlPlaneOperationResourceType = 'bank-rule' | 'connection' | 'contact' | 'file' | 'flow' | 'listing' | 'recurring-fee' | 'recurring-transaction-template' | 'reservation' | 'statement' | 'team' | 'transaction' | 'webhook';
 export type ControlPlaneOperationSourceType = 'destructive-job' | 'regional-operation';
@@ -356,6 +356,7 @@ export interface ControlPlaneGeneralLedgerDefaultVersion {
     sourceTenantId: string;
     version: number;
 }
+export declare const CONTROL_PLANE_OUTBOX_MAX_ATTEMPTS = 25;
 export interface ControlPlaneOutbox {
     aggregateId: string;
     aggregateType: string;
@@ -375,6 +376,22 @@ export interface ControlPlanePartnerManagedTeamAssignment {
     partnerTenantId: string;
     userId: string;
 }
+export interface ControlPlaneOwnerPortal {
+    hostname: string;
+    tenantId: string;
+    status: Generated<'pending' | 'active' | 'disabled'>;
+    name: string;
+    logo: string | null;
+    colorPrimary: string;
+    showPlatformBranding: Generated<boolean>;
+    linksEnabled: Generated<boolean>;
+    sender: {
+        from: string;
+        replyTo: string;
+    } | null;
+    revision: Generated<number>;
+    updatedAt: Generated<Timestamp>;
+}
 export interface ControlPlaneTenant {
     billingPartnerId: string | null;
     billingPlan: string | null;
@@ -475,6 +492,7 @@ export interface ControlPlaneDB {
     'controlPlane.partnerManagedTeamAssignment': ControlPlanePartnerManagedTeamAssignment;
     'controlPlane.reservationLineDefault': ControlPlaneReservationLineDefault;
     'controlPlane.rolloutMonitorSnapshot': ControlPlaneRolloutMonitorSnapshot;
+    'controlPlane.ownerPortal': ControlPlaneOwnerPortal;
     'controlPlane.tenant': ControlPlaneTenant;
     'controlPlane.tenantRegionMigration': ControlPlaneTenantRegionMigration;
     'controlPlane.tenantUser': ControlPlaneTenantUser;

package/build/main/control-plane/index.js

@@ -12,8 +12,18 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
 };
 var _ControlPlaneSchemaPlugin_transformer;
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.CONTROL_PLANE_OUTBOX_MAX_ATTEMPTS = void 0;
 exports.withControlPlaneSchema = withControlPlaneSchema;
 const kysely_1 = require("kysely");
+// A poison event (e.g. a user.deleted blocked by a regional foreign key) can
+// never succeed; without a cap it retries every drain tick forever. After this
+// many attempts we stop reprocessing it, leave it unpublished for a human to
+// resolve, and keep it blocking newer versions of the same aggregate. A later
+// terminal delete is an automatic exception because it makes the older event
+// obsolete without repairing regional data. So is a user or membership upsert
+// that exhausted its attempts after the control plane stopped holding the
+// aggregate, and an older feature snapshot that a newer snapshot replaces.
+exports.CONTROL_PLANE_OUTBOX_MAX_ATTEMPTS = 25;
 class ControlPlaneSchemaTransformer extends kysely_1.OperationNodeTransformer {
     constructor(schema, issueMessageOverwriteSchema) {
         super();

package/build/main/control-plane/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"src/","sources":["control-plane/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AA0qBA,wDAQC;AAlrBD,mCAcgB;AA0lBhB,MAAM,6BAA8B,SAAQ,iCAAwB;IAClE,YACW,MAAc,EACd,2BAAmC;QAE5C,KAAK,EAAE,CAAC;QAHC,WAAM,GAAN,MAAM,CAAQ;QACd,gCAA2B,GAA3B,2BAA2B,CAAQ;IAG9C,CAAC;IAEkB,4BAA4B,CAC7C,IAA6B,EAC7B,OAAgB;QAEhB,MAAM,WAAW,GAAG,KAAK,CAAC,4BAA4B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtE,IACE,WAAW,CAAC,MAAM,EAAE,IAAI,KAAK,cAAc;YAC3C,WAAW,CAAC,MAAM,EAAE,IAAI,KAAK,eAAe,EAC5C,CAAC;YACD,OAAO,EAAE,GAAG,WAAW,EAAE,MAAM,EAAE,uBAAc,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACxE,CAAC;QACD,IACE,WAAW,CAAC,MAAM,EAAE,IAAI,KAAK,kBAAkB;YAC/C,WAAW,CAAC,MAAM,EAAE,IAAI,KAAK,oBAAoB,EACjD,CAAC;YACD,OAAO;gBACL,GAAG,WAAW;gBACd,MAAM,EAAE,uBAAc,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC;aAChE,CAAC;QACJ,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAEkB,iBAAiB,CAClC,IAAkB,EAClB,OAAgB;QAEhB,MAAM,WAAW,GAAG,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;YAC1C,CAAC,CAAC;gBACE,GAAG,WAAW;gBACd,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE;aACzE;YACH,CAAC,CAAC,WAAW,CAAC;IAClB,CAAC;CACF;AAED,MAAM,wBAAwB;IAG5B,YAAY,MAAc,EAAE,2BAAmC;QAFtD,wDAA4C;QAGnD,uBAAA,IAAI,yCAAgB,IAAI,6BAA6B,CACnD,MAAM,EACN,2BAA2B,CAC5B,MAAA,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,IAA8B;QAC3C,OAAO,uBAAA,IAAI,6CAAa,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,IAA+B;QAE/B,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF;;AAED,SAAgB,sBAAsB,CACpC,MAA8B,EAC9B,MAAc,EACd,2BAA2B,GAAG,MAAM;IAEpC,OAAO,MAAM,CAAC,UAAU,CACtB,IAAI,wBAAwB,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAClE,CAAC;AACJ,CAAC","sourcesContent":["import {\n  type ColumnType,\n  type FunctionNode,\n  IdentifierNode,\n  type Kysely,\n  type KyselyPlugin,\n  OperationNodeTransformer,\n  type PluginTransformQueryArgs,\n  type PluginTransformResultArgs,\n  type QueryId,\n  type QueryResult,\n  type RootOperationNode,\n  type SchemableIdentifierNode,\n  type UnknownRow,\n} from 'kysely';\nimport type { TenantDataRegion } from '../regional';\n\nexport type Generated<T> =\n  T extends ColumnType<infer S, infer I, infer U>\n    ? ColumnType<S, I | undefined, U>\n    : ColumnType<T, T | undefined, T>;\n\nexport type Json = JsonValue;\n\nexport type JsonArray = JsonValue[];\n\nexport type JsonObject = {\n  [x: string]: JsonValue | undefined;\n};\n\nexport type JsonPrimitive = boolean | number | string | null;\n\nexport type JsonValue = JsonArray | JsonObject | JsonPrimitive;\n\nexport type Int8 = ColumnType<\n  string,\n  number | string | bigint,\n  number | string | bigint\n>;\n\nexport type Timestamp = ColumnType<Date | string, Date | string, Date | string>;\n\nexport type ControlPlaneOperationStatus =\n  | 'completed'\n  | 'failed'\n  | 'queued'\n  | 'running';\n\nexport type ControlPlaneOperationType =\n  | 'ach-verification'\n  | 'bank-rule-run'\n  | 'calendar-block'\n  | 'calendar-unblock'\n  | 'connection-archive'\n  | 'connection-connect'\n  | 'connection-extract'\n  | 'connection-sync'\n  | 'csv-import'\n  | 'csv-import-preview'\n  | 'export'\n  | 'flow-run'\n  | 'historical-gl-import'\n  | 'historical-statement-import'\n  | 'listing-journal-refresh'\n  | 'plaid-initial-sync'\n  | 'pms-cutover'\n  | 'pms-cutover-preview'\n  | 'provider-payment'\n  | 'provider-payment-recovery'\n  | 'recurring-transaction-run'\n  | 'reservation-journal-refresh'\n  | 'team-delete'\n  | 'team-demo-data'\n  | 'team-duplicate'\n  | 'team-initialize'\n  | 'transaction-journal-refresh'\n  | 'vri-statement-import'\n  | 'vri-team-migration'\n  | 'webhook-test';\n\nexport type ControlPlaneOperationResourceRole = 'result' | 'source' | 'target';\n\nexport type ControlPlaneOperationResourceType =\n  | 'bank-rule'\n  | 'connection'\n  | 'contact'\n  | 'file'\n  | 'flow'\n  | 'listing'\n  | 'recurring-fee'\n  | 'recurring-transaction-template'\n  | 'reservation'\n  | 'statement'\n  | 'team'\n  | 'transaction'\n  | 'webhook';\n\nexport type ControlPlaneOperationSourceType =\n  | 'destructive-job'\n  | 'regional-operation';\n\nexport interface ControlPlaneApp {\n  authentication: Generated<Json>;\n  category: string | null;\n  color: string | null;\n  createdAt: Generated<Timestamp>;\n  icon: string | null;\n  iconRound: string | null;\n  id: Generated<string>;\n  info: Json | null;\n  name: string;\n  type: string;\n  version: Generated<number>;\n}\n\nexport interface ControlPlaneAccountingIntegrityEvaluation {\n  caseCount: Generated<Int8>;\n  completedAt: Timestamp | null;\n  completedRunCount: Generated<number>;\n  createdAt: Generated<Timestamp>;\n  environment: string;\n  error: Json | null;\n  expectedRunCount: number;\n  failedRunCount: Generated<number>;\n  findingRowCount: Generated<Int8>;\n  gitRevision: string;\n  id: string;\n  results: Generated<Json>;\n  rowsScanned: Generated<Int8>;\n  skippedRunCount: Generated<number>;\n  source: string;\n  startedAt: Timestamp;\n  status: string;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneAccountingIntegrityDefinitionDraft {\n  artifact: Json;\n  artifactHash: string;\n  code: string;\n  createdAt: Generated<Timestamp>;\n  id: Generated<string>;\n  ownerId: string;\n  previewResult: Json | null;\n  rationale: string;\n  revision: Generated<number>;\n  status: string;\n  templateId: string;\n  templateVersion: number;\n  title: string;\n  updatedAt: Generated<Timestamp>;\n  validationResult: Json | null;\n}\n\nexport interface ControlPlaneAccountingIntegrityDefinitionVersion {\n  artifact: Json;\n  artifactHash: string;\n  code: string;\n  draftId: string;\n  id: Generated<string>;\n  publishedAt: Generated<Timestamp>;\n  publishedBy: string;\n  rollout: string;\n  templateId: string;\n  templateVersion: number;\n  version: number;\n}\n\nexport interface ControlPlaneBookingChannel {\n  channelRef: string | null;\n  color: string | null;\n  createdAt: Generated<Timestamp>;\n  icon: string | null;\n  iconProvider: string | null;\n  id: Generated<string>;\n  lastGenerateRun: Timestamp | null;\n  logo: string | null;\n  logoProvider: string | null;\n  selectedBookingChannelIconCandidateId: string | null;\n  selectedBookingChannelLogoCandidateId: string | null;\n  uniqueRef: string;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneBookingChannelIconCandidate {\n  bookingChannelId: string;\n  cloudflareImageId: string | null;\n  color: string | null;\n  comment: string | null;\n  createdAt: Generated<Timestamp>;\n  externalIcon: string | null;\n  height: number | null;\n  id: Generated<string>;\n  provider: Generated<string>;\n  source: string | null;\n  updatedAt: Generated<Timestamp>;\n  width: number | null;\n}\n\nexport interface ControlPlaneCurrency {\n  name: string;\n}\n\nexport type DestructiveJobStep =\n  | 'completed'\n  | 'completion_effects'\n  | 'control_plane_deleted'\n  | 'control_plane_deleting'\n  | 'queued'\n  | 'regional_deleted'\n  | 'regional_deleting'\n  | 'validated';\n\nexport interface ControlPlaneDestructiveJob {\n  attempts: Generated<number>;\n  authorizedByTenantId: string;\n  availableAt: Generated<Timestamp>;\n  claimedAt: Timestamp | null;\n  claimedBy: string | null;\n  completedAt: Timestamp | null;\n  completionData: Json | null;\n  completionWarningCode: string | null;\n  completionWarningDetails: Json | null;\n  createdAt: Generated<Timestamp>;\n  dataRegion: TenantDataRegion;\n  failureCode: string | null;\n  failureDetails: Json | null;\n  force: Generated<boolean>;\n  id: Generated<string>;\n  jobType: 'tenant.delete';\n  maxAttempts: Generated<number>;\n  requestId: string | null;\n  requestedByActorType: 'api_key' | 'system' | 'user';\n  requestedByTenantId: string;\n  requestedByUserId: string | null;\n  startedAt: Timestamp | null;\n  status: Generated<'canceled' | 'completed' | 'failed' | 'queued' | 'running'>;\n  step: Generated<DestructiveJobStep>;\n  targetId: string;\n  triggerRunId: string | null;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneDestructiveJobAttempt {\n  attemptNumber: number;\n  failureCode: string | null;\n  failureDetails: Json | null;\n  finishedAt: Timestamp | null;\n  id: Generated<string>;\n  jobId: string;\n  startedAt: Generated<Timestamp>;\n  status: Generated<'completed' | 'failed' | 'running' | 'superseded'>;\n  step: DestructiveJobStep;\n  triggerRunId: string | null;\n}\n\nexport interface ControlPlaneDestructiveJobOperation {\n  action: 'abandon' | 'cancel' | 'retry';\n  actor: string;\n  createdAt: Generated<Timestamp>;\n  id: Generated<string>;\n  jobId: string;\n  previousStatus: string;\n  previousStep: string;\n  reasonCode: string;\n}\n\nexport interface ControlPlaneOperation {\n  createdAt: Generated<Timestamp>;\n  failureCode: string | null;\n  failureMessage: string | null;\n  finishedAt: Timestamp | null;\n  id: Generated<string>;\n  initiatedByUserId: string | null;\n  requesterTenantId: string;\n  retainUntil: Timestamp | null;\n  sourceRegion: TenantDataRegion | null;\n  sourceVersion: Generated<number>;\n  startedAt: Timestamp | null;\n  status: Generated<ControlPlaneOperationStatus>;\n  type: ControlPlaneOperationType;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneOperationResource {\n  createdAt: Generated<Timestamp>;\n  isPrimary: Generated<boolean>;\n  operationId: string;\n  resourceId: string;\n  resourceType: ControlPlaneOperationResourceType;\n  role: ControlPlaneOperationResourceRole;\n}\n\nexport interface ControlPlaneOperationSource {\n  finishedAt: Timestamp | null;\n  operationId: string;\n  required: Generated<boolean>;\n  sourceId: string;\n  sourceType: ControlPlaneOperationSourceType;\n  sourceVersion: Generated<number>;\n  startedAt: Timestamp | null;\n  status: Generated<ControlPlaneOperationStatus>;\n}\n\nexport interface ControlPlaneEvent {\n  createdAt: Generated<Timestamp>;\n  id: Generated<string>;\n  name: string;\n  packageName: string;\n  props: Json;\n  tenantId: string | null;\n  timestamp: Generated<Timestamp>;\n  trackedAt: Generated<Timestamp | null>;\n  userId: string | null;\n}\n\nexport interface ControlPlaneTrackingQueueFailure {\n  bodyFingerprint: string | null;\n  capturedAt: Generated<Timestamp>;\n  dispositionAt: Timestamp | null;\n  dispositionHistory: Generated<Json[]>;\n  dispositionReasonCode: string | null;\n  dispositionActor: string | null;\n  environment: 'production' | 'staging';\n  event: Json | null;\n  eventId: string | null;\n  expiresAt: Timestamp;\n  failureCode: string;\n  id: Generated<string>;\n  lastReplayedAt: Timestamp | null;\n  queueMessageId: string;\n  replayCount: Generated<number>;\n  recurrenceCount: Generated<number>;\n  status: Generated<'captured' | 'discarded' | 'replayed'>;\n  updatedAt: Generated<Timestamp>;\n  validationIssues: Json | null;\n}\n\nexport interface ControlPlaneConnectionRoute {\n  connectionId: string;\n  createdAt: Generated<Timestamp>;\n  tenantId: string;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneFeature {\n  createdAt: Generated<Timestamp>;\n  description: string | null;\n  id: Generated<string>;\n  issueUrl: string | null;\n  requiredApprovals: Generated<Json | null>;\n  status: Generated<string | null>;\n  tenantId: string | null;\n  title: string;\n  updatedAt: Generated<Timestamp>;\n  url: string | null;\n}\n\nexport interface ControlPlaneFeatureEnabledTeam {\n  createdAt: Generated<Timestamp>;\n  featureId: string;\n  id: Generated<string>;\n  status: Generated<string | null>;\n  tenantId: string;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneFeatureApproval {\n  createdAt: Generated<Timestamp>;\n  featureId: string;\n  id: Generated<string>;\n  status: Generated<string | null>;\n  updatedAt: Generated<Timestamp>;\n  userId: string;\n}\n\nexport interface ControlPlaneFlow {\n  appId: string;\n  createdAt: Generated<Timestamp>;\n  description: string | null;\n  eventListening: Generated<Json>;\n  id: Generated<string>;\n  isPublic: Generated<boolean>;\n  leftType: string | null;\n  mappingSchema: Generated<Json>;\n  revision: Generated<number>;\n  rightType: string | null;\n  runSchema: Generated<Json>;\n  settingSchema: Generated<Json>;\n  title: string;\n  type: 'pull' | 'push' | null;\n  uniqueRef: string;\n  updatedAt: Generated<Timestamp>;\n  useGlobalMapping: Generated<boolean>;\n}\n\nexport interface ControlPlaneIssueMessageOverwrite {\n  createdAt: Generated<Timestamp>;\n  id: Generated<string>;\n  message: string;\n  pattern: string;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneLineClassification {\n  appConflict: Generated<boolean>;\n  appId: string | null;\n  createdAt: Generated<Timestamp>;\n  firstSeenAt: Timestamp;\n  id: Generated<string>;\n  kind: string;\n  lastSeenAt: Timestamp;\n  name: string;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneLineClassificationTeamUsage {\n  classificationId: string;\n  createdAt: Generated<Timestamp>;\n  dataRegion: string;\n  firstSeenAt: Timestamp;\n  lastSeenAt: Timestamp;\n  mappingStatus: string | null;\n  revision: number;\n  tenantId: string;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneReservationLineDefault {\n  accountKey: string | null;\n  bookingChannel: string | null;\n  bookingChannelKey: Generated<string>;\n  classificationId: string;\n  createdAt: Generated<Timestamp>;\n  id: Generated<string>;\n  partnerTenantId: string | null;\n  revenueRecognition: string | null;\n  revision: Generated<number>;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneRolloutMonitorSnapshot {\n  monitorName: string;\n  result: Json;\n  snapshotDate: Timestamp;\n}\n\nexport interface ControlPlaneTransactionLineMapping {\n  accountAssignmentType: string | null;\n  createdAt: Generated<Timestamp>;\n  deletedAt: Timestamp | null;\n  id: Generated<string>;\n  lineType: string;\n  revision: Generated<number>;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneGeneralLedgerDefaultSet {\n  createdAt: Generated<Timestamp>;\n  id: Generated<string>;\n  partnerTenantId: string | null;\n  publishedVersion: number | null;\n  sourceDataRegion: string;\n  sourceDigest: string | null;\n  sourceTenantId: string;\n  templateKey: string;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneGeneralLedgerDefaultVersion {\n  dataJson: Json;\n  defaultSetId: string;\n  id: Generated<string>;\n  publishedAt: Generated<Timestamp>;\n  sourceDigest: string;\n  sourceTenantId: string;\n  version: number;\n}\n\nexport interface ControlPlaneOutbox {\n  aggregateId: string;\n  aggregateType: string;\n  attempts: Generated<number>;\n  createdAt: Generated<Timestamp>;\n  dataRegion: string | null;\n  eventType: string;\n  eventVersion: number;\n  id: Generated<string>;\n  lastError: string | null;\n  payload: Generated<Json>;\n  publishedAt: Timestamp | null;\n}\n\nexport interface ControlPlanePartnerManagedTeamAssignment {\n  createdAt: Generated<Timestamp>;\n  managedTeamId: string;\n  partnerTenantId: string;\n  userId: string;\n}\n\nexport interface ControlPlaneTenant {\n  billingPartnerId: string | null;\n  billingPlan: string | null;\n  createdAt: Generated<Timestamp>;\n  dataRegion: Generated<string>;\n  id: Generated<string>;\n  migrationStatus: Generated<string>;\n  name: string;\n  partnerId: string | null;\n  partnerDeniedPermissions: Generated<string[]>;\n  slug: string;\n  status: Generated<string | null>;\n  storageRealm: Generated<string>;\n  type: Generated<string | null>;\n  uniqueRef: string | null;\n  updatedAt: Generated<Timestamp | null>;\n}\n\nexport interface ControlPlaneTenantRegionMigration {\n  actor: string;\n  completedAt: Timestamp | null;\n  error: Json | null;\n  id: string;\n  reason: string;\n  sourceManifest: Json | null;\n  sourceRegion: string;\n  startedAt: Generated<Timestamp>;\n  status: Generated<string>;\n  targetManifest: Json | null;\n  targetRegion: string;\n  tenantId: string;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneTenantUser {\n  createdAt: Generated<Timestamp | null>;\n  id: Generated<string>;\n  lastInvitedAt: Timestamp | null;\n  managedTeamAccess: Generated<'all' | 'assigned'>;\n  permissionBundles: Generated<string[]>;\n  role: Generated<string | null>;\n  status: Generated<string | null>;\n  tenantId: string;\n  updatedAt: Generated<Timestamp | null>;\n  userId: string;\n}\n\nexport interface ControlPlaneToken {\n  createdAt: Generated<Timestamp>;\n  expiresAt: Timestamp | null;\n  id: Generated<string>;\n  nanoId: Generated<string>;\n  payload: Generated<Json>;\n  tenantId: string | null;\n  type: string | null;\n  userId: string | null;\n}\n\nexport interface ControlPlaneUser {\n  clerkId: string | null;\n  createdAt: Generated<Timestamp | null>;\n  email: string | null;\n  firstName: string | null;\n  id: Generated<string>;\n  internalOperationGrants: Generated<string[]>;\n  isAdmin: Generated<boolean>;\n  lastName: string | null;\n  lastSeen: Timestamp | null;\n  name: string | null;\n  partnerId: string | null;\n  phone: string | null;\n  secondaryEmails: Generated<Json>;\n  status: Generated<string | null>;\n  sub: string | null;\n  type: Generated<string | null>;\n  updatedAt: Generated<Timestamp | null>;\n}\n\nexport interface ControlPlaneDB {\n  'controlPlane.accountingIntegrityDefinitionDraft': ControlPlaneAccountingIntegrityDefinitionDraft;\n  'controlPlane.accountingIntegrityDefinitionVersion': ControlPlaneAccountingIntegrityDefinitionVersion;\n  'controlPlane.accountingIntegrityEvaluation': ControlPlaneAccountingIntegrityEvaluation;\n  'controlPlane.app': ControlPlaneApp;\n  'controlPlane.bookingChannel': ControlPlaneBookingChannel;\n  'controlPlane.bookingChannelIconCandidate': ControlPlaneBookingChannelIconCandidate;\n  'controlPlane.connectionRoute': ControlPlaneConnectionRoute;\n  'controlPlane.controlPlaneOutbox': ControlPlaneOutbox;\n  'controlPlane.currency': ControlPlaneCurrency;\n  'controlPlane.destructiveJob': ControlPlaneDestructiveJob;\n  'controlPlane.destructiveJobAttempt': ControlPlaneDestructiveJobAttempt;\n  'controlPlane.destructiveJobOperation': ControlPlaneDestructiveJobOperation;\n  'controlPlane.events': ControlPlaneEvent;\n  'controlPlane.feature': ControlPlaneFeature;\n  'controlPlane.featureApproval': ControlPlaneFeatureApproval;\n  'controlPlane.featureEnabledTeam': ControlPlaneFeatureEnabledTeam;\n  'controlPlane.generalLedgerDefaultSet': ControlPlaneGeneralLedgerDefaultSet;\n  'controlPlane.generalLedgerDefaultVersion': ControlPlaneGeneralLedgerDefaultVersion;\n  'controlPlane.lineClassification': ControlPlaneLineClassification;\n  'controlPlane.lineClassificationTeamUsage': ControlPlaneLineClassificationTeamUsage;\n  'controlPlane.operation': ControlPlaneOperation;\n  'controlPlane.operationResource': ControlPlaneOperationResource;\n  'controlPlane.operationSource': ControlPlaneOperationSource;\n  'controlPlane.partnerManagedTeamAssignment': ControlPlanePartnerManagedTeamAssignment;\n  'controlPlane.reservationLineDefault': ControlPlaneReservationLineDefault;\n  'controlPlane.rolloutMonitorSnapshot': ControlPlaneRolloutMonitorSnapshot;\n  'controlPlane.tenant': ControlPlaneTenant;\n  'controlPlane.tenantRegionMigration': ControlPlaneTenantRegionMigration;\n  'controlPlane.tenantUser': ControlPlaneTenantUser;\n  'controlPlane.trackingQueueFailure': ControlPlaneTrackingQueueFailure;\n  'controlPlane.token': ControlPlaneToken;\n  'controlPlane.transactionLineMapping': ControlPlaneTransactionLineMapping;\n  'controlPlane.user': ControlPlaneUser;\n  'controlPlaneCore.flow': ControlPlaneFlow;\n  'controlPlaneCore.issueMessageOverwrite': ControlPlaneIssueMessageOverwrite;\n}\n\nclass ControlPlaneSchemaTransformer extends OperationNodeTransformer {\n  constructor(\n    readonly schema: string,\n    readonly issueMessageOverwriteSchema: string\n  ) {\n    super();\n  }\n\n  protected override transformSchemableIdentifier(\n    node: SchemableIdentifierNode,\n    queryId: QueryId\n  ): SchemableIdentifierNode {\n    const transformed = super.transformSchemableIdentifier(node, queryId);\n    if (\n      transformed.schema?.name === 'controlPlane' ||\n      transformed.schema?.name === 'control_plane'\n    ) {\n      return { ...transformed, schema: IdentifierNode.create(this.schema) };\n    }\n    if (\n      transformed.schema?.name === 'controlPlaneCore' ||\n      transformed.schema?.name === 'control_plane_core'\n    ) {\n      return {\n        ...transformed,\n        schema: IdentifierNode.create(this.issueMessageOverwriteSchema),\n      };\n    }\n    return transformed;\n  }\n\n  protected override transformFunction(\n    node: FunctionNode,\n    queryId: QueryId\n  ): FunctionNode {\n    const transformed = super.transformFunction(node, queryId);\n    return node.func.startsWith('controlPlane.')\n      ? {\n          ...transformed,\n          func: `${this.schema}.${transformed.func.slice('controlPlane.'.length)}`,\n        }\n      : transformed;\n  }\n}\n\nclass ControlPlaneSchemaPlugin implements KyselyPlugin {\n  readonly #transformer: ControlPlaneSchemaTransformer;\n\n  constructor(schema: string, issueMessageOverwriteSchema: string) {\n    this.#transformer = new ControlPlaneSchemaTransformer(\n      schema,\n      issueMessageOverwriteSchema\n    );\n  }\n\n  transformQuery(args: PluginTransformQueryArgs): RootOperationNode {\n    return this.#transformer.transformNode(args.node, args.queryId);\n  }\n\n  async transformResult(\n    args: PluginTransformResultArgs\n  ): Promise<QueryResult<UnknownRow>> {\n    return args.result;\n  }\n}\n\nexport function withControlPlaneSchema(\n  kysely: Kysely<ControlPlaneDB>,\n  schema: string,\n  issueMessageOverwriteSchema = 'core'\n) {\n  return kysely.withPlugin(\n    new ControlPlaneSchemaPlugin(schema, issueMessageOverwriteSchema)\n  );\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"src/","sources":["control-plane/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAqsBA,wDAQC;AA7sBD,mCAcgB;AAmdhB,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,0EAA0E;AAC1E,2EAA2E;AAC9D,QAAA,iCAAiC,GAAG,EAAE,CAAC;AA0JpD,MAAM,6BAA8B,SAAQ,iCAAwB;IAClE,YACW,MAAc,EACd,2BAAmC;QAE5C,KAAK,EAAE,CAAC;QAHC,WAAM,GAAN,MAAM,CAAQ;QACd,gCAA2B,GAA3B,2BAA2B,CAAQ;IAG9C,CAAC;IAEkB,4BAA4B,CAC7C,IAA6B,EAC7B,OAAgB;QAEhB,MAAM,WAAW,GAAG,KAAK,CAAC,4BAA4B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtE,IACE,WAAW,CAAC,MAAM,EAAE,IAAI,KAAK,cAAc;YAC3C,WAAW,CAAC,MAAM,EAAE,IAAI,KAAK,eAAe,EAC5C,CAAC;YACD,OAAO,EAAE,GAAG,WAAW,EAAE,MAAM,EAAE,uBAAc,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACxE,CAAC;QACD,IACE,WAAW,CAAC,MAAM,EAAE,IAAI,KAAK,kBAAkB;YAC/C,WAAW,CAAC,MAAM,EAAE,IAAI,KAAK,oBAAoB,EACjD,CAAC;YACD,OAAO;gBACL,GAAG,WAAW;gBACd,MAAM,EAAE,uBAAc,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC;aAChE,CAAC;QACJ,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAEkB,iBAAiB,CAClC,IAAkB,EAClB,OAAgB;QAEhB,MAAM,WAAW,GAAG,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;YAC1C,CAAC,CAAC;gBACE,GAAG,WAAW;gBACd,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE;aACzE;YACH,CAAC,CAAC,WAAW,CAAC;IAClB,CAAC;CACF;AAED,MAAM,wBAAwB;IAG5B,YAAY,MAAc,EAAE,2BAAmC;QAFtD,wDAA4C;QAGnD,uBAAA,IAAI,yCAAgB,IAAI,6BAA6B,CACnD,MAAM,EACN,2BAA2B,CAC5B,MAAA,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,IAA8B;QAC3C,OAAO,uBAAA,IAAI,6CAAa,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,IAA+B;QAE/B,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF;;AAED,SAAgB,sBAAsB,CACpC,MAA8B,EAC9B,MAAc,EACd,2BAA2B,GAAG,MAAM;IAEpC,OAAO,MAAM,CAAC,UAAU,CACtB,IAAI,wBAAwB,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAClE,CAAC;AACJ,CAAC","sourcesContent":["import {\n  type ColumnType,\n  type FunctionNode,\n  IdentifierNode,\n  type Kysely,\n  type KyselyPlugin,\n  OperationNodeTransformer,\n  type PluginTransformQueryArgs,\n  type PluginTransformResultArgs,\n  type QueryId,\n  type QueryResult,\n  type RootOperationNode,\n  type SchemableIdentifierNode,\n  type UnknownRow,\n} from 'kysely';\nimport type { TenantDataRegion } from '../regional';\n\nexport type Generated<T> =\n  T extends ColumnType<infer S, infer I, infer U>\n    ? ColumnType<S, I | undefined, U>\n    : ColumnType<T, T | undefined, T>;\n\nexport type Json = JsonValue;\n\nexport type JsonArray = JsonValue[];\n\nexport type JsonObject = {\n  [x: string]: JsonValue | undefined;\n};\n\nexport type JsonPrimitive = boolean | number | string | null;\n\nexport type JsonValue = JsonArray | JsonObject | JsonPrimitive;\n\nexport type Int8 = ColumnType<\n  string,\n  number | string | bigint,\n  number | string | bigint\n>;\n\nexport type Timestamp = ColumnType<Date | string, Date | string, Date | string>;\n\nexport type ControlPlaneOperationStatus =\n  | 'completed'\n  | 'failed'\n  | 'queued'\n  | 'running';\n\nexport type ControlPlaneOperationType =\n  | 'ach-verification'\n  | 'bank-rule-run'\n  | 'calendar-block'\n  | 'calendar-unblock'\n  | 'connection-archive'\n  | 'connection-connect'\n  | 'connection-extract'\n  | 'connection-sync'\n  | 'csv-import'\n  | 'csv-import-preview'\n  | 'export'\n  | 'flow-run'\n  | 'historical-gl-import'\n  | 'historical-statement-import'\n  | 'listing-journal-refresh'\n  | 'plaid-initial-sync'\n  | 'pms-cutover'\n  | 'pms-cutover-preview'\n  | 'provider-payment'\n  | 'provider-payment-recovery'\n  | 'recurring-transaction-run'\n  | 'reservation-journal-refresh'\n  | 'statement-payout'\n  | 'statement-payout-preview'\n  | 'team-delete'\n  | 'team-demo-data'\n  | 'team-duplicate'\n  | 'team-initialize'\n  | 'transaction-journal-refresh'\n  | 'vri-statement-import'\n  | 'vri-team-migration'\n  | 'webhook-test';\n\nexport type ControlPlaneOperationResourceRole = 'result' | 'source' | 'target';\n\nexport type ControlPlaneOperationResourceType =\n  | 'bank-rule'\n  | 'connection'\n  | 'contact'\n  | 'file'\n  | 'flow'\n  | 'listing'\n  | 'recurring-fee'\n  | 'recurring-transaction-template'\n  | 'reservation'\n  | 'statement'\n  | 'team'\n  | 'transaction'\n  | 'webhook';\n\nexport type ControlPlaneOperationSourceType =\n  | 'destructive-job'\n  | 'regional-operation';\n\nexport interface ControlPlaneApp {\n  authentication: Generated<Json>;\n  category: string | null;\n  color: string | null;\n  createdAt: Generated<Timestamp>;\n  icon: string | null;\n  iconRound: string | null;\n  id: Generated<string>;\n  info: Json | null;\n  name: string;\n  type: string;\n  version: Generated<number>;\n}\n\nexport interface ControlPlaneAccountingIntegrityEvaluation {\n  caseCount: Generated<Int8>;\n  completedAt: Timestamp | null;\n  completedRunCount: Generated<number>;\n  createdAt: Generated<Timestamp>;\n  environment: string;\n  error: Json | null;\n  expectedRunCount: number;\n  failedRunCount: Generated<number>;\n  findingRowCount: Generated<Int8>;\n  gitRevision: string;\n  id: string;\n  results: Generated<Json>;\n  rowsScanned: Generated<Int8>;\n  skippedRunCount: Generated<number>;\n  source: string;\n  startedAt: Timestamp;\n  status: string;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneAccountingIntegrityDefinitionDraft {\n  artifact: Json;\n  artifactHash: string;\n  code: string;\n  createdAt: Generated<Timestamp>;\n  id: Generated<string>;\n  ownerId: string;\n  previewResult: Json | null;\n  rationale: string;\n  revision: Generated<number>;\n  status: string;\n  templateId: string;\n  templateVersion: number;\n  title: string;\n  updatedAt: Generated<Timestamp>;\n  validationResult: Json | null;\n}\n\nexport interface ControlPlaneAccountingIntegrityDefinitionVersion {\n  artifact: Json;\n  artifactHash: string;\n  code: string;\n  draftId: string;\n  id: Generated<string>;\n  publishedAt: Generated<Timestamp>;\n  publishedBy: string;\n  rollout: string;\n  templateId: string;\n  templateVersion: number;\n  version: number;\n}\n\nexport interface ControlPlaneBookingChannel {\n  channelRef: string | null;\n  color: string | null;\n  createdAt: Generated<Timestamp>;\n  icon: string | null;\n  iconProvider: string | null;\n  id: Generated<string>;\n  lastGenerateRun: Timestamp | null;\n  logo: string | null;\n  logoProvider: string | null;\n  selectedBookingChannelIconCandidateId: string | null;\n  selectedBookingChannelLogoCandidateId: string | null;\n  uniqueRef: string;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneBookingChannelIconCandidate {\n  bookingChannelId: string;\n  cloudflareImageId: string | null;\n  color: string | null;\n  comment: string | null;\n  createdAt: Generated<Timestamp>;\n  externalIcon: string | null;\n  height: number | null;\n  id: Generated<string>;\n  provider: Generated<string>;\n  source: string | null;\n  updatedAt: Generated<Timestamp>;\n  width: number | null;\n}\n\nexport interface ControlPlaneCurrency {\n  name: string;\n}\n\nexport type DestructiveJobStep =\n  | 'completed'\n  | 'completion_effects'\n  | 'control_plane_deleted'\n  | 'control_plane_deleting'\n  | 'queued'\n  | 'regional_deleted'\n  | 'regional_deleting'\n  | 'validated';\n\nexport interface ControlPlaneDestructiveJob {\n  attempts: Generated<number>;\n  authorizedByTenantId: string;\n  availableAt: Generated<Timestamp>;\n  claimedAt: Timestamp | null;\n  claimedBy: string | null;\n  completedAt: Timestamp | null;\n  completionData: Json | null;\n  completionWarningCode: string | null;\n  completionWarningDetails: Json | null;\n  createdAt: Generated<Timestamp>;\n  dataRegion: TenantDataRegion;\n  failureCode: string | null;\n  failureDetails: Json | null;\n  force: Generated<boolean>;\n  id: Generated<string>;\n  jobType: 'tenant.delete';\n  maxAttempts: Generated<number>;\n  requestId: string | null;\n  requestedByActorType: 'api_key' | 'system' | 'user';\n  requestedByTenantId: string;\n  requestedByUserId: string | null;\n  startedAt: Timestamp | null;\n  status: Generated<'canceled' | 'completed' | 'failed' | 'queued' | 'running'>;\n  step: Generated<DestructiveJobStep>;\n  targetId: string;\n  triggerRunId: string | null;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneDestructiveJobAttempt {\n  attemptNumber: number;\n  failureCode: string | null;\n  failureDetails: Json | null;\n  finishedAt: Timestamp | null;\n  id: Generated<string>;\n  jobId: string;\n  startedAt: Generated<Timestamp>;\n  status: Generated<'completed' | 'failed' | 'running' | 'superseded'>;\n  step: DestructiveJobStep;\n  triggerRunId: string | null;\n}\n\nexport interface ControlPlaneDestructiveJobOperation {\n  action: 'abandon' | 'cancel' | 'retry';\n  actor: string;\n  createdAt: Generated<Timestamp>;\n  id: Generated<string>;\n  jobId: string;\n  previousStatus: string;\n  previousStep: string;\n  reasonCode: string;\n}\n\nexport interface ControlPlaneOperation {\n  createdAt: Generated<Timestamp>;\n  failureCode: string | null;\n  failureMessage: string | null;\n  finishedAt: Timestamp | null;\n  id: Generated<string>;\n  initiatedByUserId: string | null;\n  requesterTenantId: string;\n  retainUntil: Timestamp | null;\n  sourceRegion: TenantDataRegion | null;\n  sourceVersion: Generated<number>;\n  startedAt: Timestamp | null;\n  status: Generated<ControlPlaneOperationStatus>;\n  type: ControlPlaneOperationType;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneOperationResource {\n  createdAt: Generated<Timestamp>;\n  isPrimary: Generated<boolean>;\n  operationId: string;\n  resourceId: string;\n  resourceType: ControlPlaneOperationResourceType;\n  role: ControlPlaneOperationResourceRole;\n}\n\nexport interface ControlPlaneOperationSource {\n  finishedAt: Timestamp | null;\n  operationId: string;\n  required: Generated<boolean>;\n  sourceId: string;\n  sourceType: ControlPlaneOperationSourceType;\n  sourceVersion: Generated<number>;\n  startedAt: Timestamp | null;\n  status: Generated<ControlPlaneOperationStatus>;\n}\n\nexport interface ControlPlaneEvent {\n  createdAt: Generated<Timestamp>;\n  id: Generated<string>;\n  name: string;\n  packageName: string;\n  props: Json;\n  tenantId: string | null;\n  timestamp: Generated<Timestamp>;\n  trackedAt: Generated<Timestamp | null>;\n  userId: string | null;\n}\n\nexport interface ControlPlaneTrackingQueueFailure {\n  bodyFingerprint: string | null;\n  capturedAt: Generated<Timestamp>;\n  dispositionAt: Timestamp | null;\n  dispositionHistory: Generated<Json[]>;\n  dispositionReasonCode: string | null;\n  dispositionActor: string | null;\n  environment: 'production' | 'staging';\n  event: Json | null;\n  eventId: string | null;\n  expiresAt: Timestamp;\n  failureCode: string;\n  id: Generated<string>;\n  lastReplayedAt: Timestamp | null;\n  queueMessageId: string;\n  replayCount: Generated<number>;\n  recurrenceCount: Generated<number>;\n  status: Generated<'captured' | 'discarded' | 'replayed'>;\n  updatedAt: Generated<Timestamp>;\n  validationIssues: Json | null;\n}\n\nexport interface ControlPlaneConnectionRoute {\n  connectionId: string;\n  createdAt: Generated<Timestamp>;\n  tenantId: string;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneFeature {\n  createdAt: Generated<Timestamp>;\n  description: string | null;\n  id: Generated<string>;\n  issueUrl: string | null;\n  requiredApprovals: Generated<Json | null>;\n  status: Generated<string | null>;\n  tenantId: string | null;\n  title: string;\n  updatedAt: Generated<Timestamp>;\n  url: string | null;\n}\n\nexport interface ControlPlaneFeatureEnabledTeam {\n  createdAt: Generated<Timestamp>;\n  featureId: string;\n  id: Generated<string>;\n  status: Generated<string | null>;\n  tenantId: string;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneFeatureApproval {\n  createdAt: Generated<Timestamp>;\n  featureId: string;\n  id: Generated<string>;\n  status: Generated<string | null>;\n  updatedAt: Generated<Timestamp>;\n  userId: string;\n}\n\nexport interface ControlPlaneFlow {\n  appId: string;\n  createdAt: Generated<Timestamp>;\n  description: string | null;\n  eventListening: Generated<Json>;\n  id: Generated<string>;\n  isPublic: Generated<boolean>;\n  leftType: string | null;\n  mappingSchema: Generated<Json>;\n  revision: Generated<number>;\n  rightType: string | null;\n  runSchema: Generated<Json>;\n  settingSchema: Generated<Json>;\n  title: string;\n  type: 'pull' | 'push' | null;\n  uniqueRef: string;\n  updatedAt: Generated<Timestamp>;\n  useGlobalMapping: Generated<boolean>;\n}\n\nexport interface ControlPlaneIssueMessageOverwrite {\n  createdAt: Generated<Timestamp>;\n  id: Generated<string>;\n  message: string;\n  pattern: string;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneLineClassification {\n  appConflict: Generated<boolean>;\n  appId: string | null;\n  createdAt: Generated<Timestamp>;\n  firstSeenAt: Timestamp;\n  id: Generated<string>;\n  kind: string;\n  lastSeenAt: Timestamp;\n  name: string;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneLineClassificationTeamUsage {\n  classificationId: string;\n  createdAt: Generated<Timestamp>;\n  dataRegion: string;\n  firstSeenAt: Timestamp;\n  lastSeenAt: Timestamp;\n  mappingStatus: string | null;\n  revision: number;\n  tenantId: string;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneReservationLineDefault {\n  accountKey: string | null;\n  bookingChannel: string | null;\n  bookingChannelKey: Generated<string>;\n  classificationId: string;\n  createdAt: Generated<Timestamp>;\n  id: Generated<string>;\n  partnerTenantId: string | null;\n  revenueRecognition: string | null;\n  revision: Generated<number>;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneRolloutMonitorSnapshot {\n  monitorName: string;\n  result: Json;\n  snapshotDate: Timestamp;\n}\n\nexport interface ControlPlaneTransactionLineMapping {\n  accountAssignmentType: string | null;\n  createdAt: Generated<Timestamp>;\n  deletedAt: Timestamp | null;\n  id: Generated<string>;\n  lineType: string;\n  revision: Generated<number>;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneGeneralLedgerDefaultSet {\n  createdAt: Generated<Timestamp>;\n  id: Generated<string>;\n  partnerTenantId: string | null;\n  publishedVersion: number | null;\n  sourceDataRegion: string;\n  sourceDigest: string | null;\n  sourceTenantId: string;\n  templateKey: string;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneGeneralLedgerDefaultVersion {\n  dataJson: Json;\n  defaultSetId: string;\n  id: Generated<string>;\n  publishedAt: Generated<Timestamp>;\n  sourceDigest: string;\n  sourceTenantId: string;\n  version: number;\n}\n\n// A poison event (e.g. a user.deleted blocked by a regional foreign key) can\n// never succeed; without a cap it retries every drain tick forever. After this\n// many attempts we stop reprocessing it, leave it unpublished for a human to\n// resolve, and keep it blocking newer versions of the same aggregate. A later\n// terminal delete is an automatic exception because it makes the older event\n// obsolete without repairing regional data. So is a user or membership upsert\n// that exhausted its attempts after the control plane stopped holding the\n// aggregate, and an older feature snapshot that a newer snapshot replaces.\nexport const CONTROL_PLANE_OUTBOX_MAX_ATTEMPTS = 25;\n\nexport interface ControlPlaneOutbox {\n  aggregateId: string;\n  aggregateType: string;\n  attempts: Generated<number>;\n  createdAt: Generated<Timestamp>;\n  dataRegion: string | null;\n  eventType: string;\n  eventVersion: number;\n  id: Generated<string>;\n  lastError: string | null;\n  payload: Generated<Json>;\n  publishedAt: Timestamp | null;\n}\n\nexport interface ControlPlanePartnerManagedTeamAssignment {\n  createdAt: Generated<Timestamp>;\n  managedTeamId: string;\n  partnerTenantId: string;\n  userId: string;\n}\n\nexport interface ControlPlaneOwnerPortal {\n  hostname: string;\n  tenantId: string;\n  status: Generated<'pending' | 'active' | 'disabled'>;\n  name: string;\n  logo: string | null;\n  colorPrimary: string;\n  showPlatformBranding: Generated<boolean>;\n  linksEnabled: Generated<boolean>;\n  sender: { from: string; replyTo: string } | null;\n  revision: Generated<number>;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneTenant {\n  billingPartnerId: string | null;\n  billingPlan: string | null;\n  createdAt: Generated<Timestamp>;\n  dataRegion: Generated<string>;\n  id: Generated<string>;\n  migrationStatus: Generated<string>;\n  name: string;\n  partnerId: string | null;\n  partnerDeniedPermissions: Generated<string[]>;\n  slug: string;\n  status: Generated<string | null>;\n  storageRealm: Generated<string>;\n  type: Generated<string | null>;\n  uniqueRef: string | null;\n  updatedAt: Generated<Timestamp | null>;\n}\n\nexport interface ControlPlaneTenantRegionMigration {\n  actor: string;\n  completedAt: Timestamp | null;\n  error: Json | null;\n  id: string;\n  reason: string;\n  sourceManifest: Json | null;\n  sourceRegion: string;\n  startedAt: Generated<Timestamp>;\n  status: Generated<string>;\n  targetManifest: Json | null;\n  targetRegion: string;\n  tenantId: string;\n  updatedAt: Generated<Timestamp>;\n}\n\nexport interface ControlPlaneTenantUser {\n  createdAt: Generated<Timestamp | null>;\n  id: Generated<string>;\n  lastInvitedAt: Timestamp | null;\n  managedTeamAccess: Generated<'all' | 'assigned'>;\n  permissionBundles: Generated<string[]>;\n  role: Generated<string | null>;\n  status: Generated<string | null>;\n  tenantId: string;\n  updatedAt: Generated<Timestamp | null>;\n  userId: string;\n}\n\nexport interface ControlPlaneToken {\n  createdAt: Generated<Timestamp>;\n  expiresAt: Timestamp | null;\n  id: Generated<string>;\n  nanoId: Generated<string>;\n  payload: Generated<Json>;\n  tenantId: string | null;\n  type: string | null;\n  userId: string | null;\n}\n\nexport interface ControlPlaneUser {\n  clerkId: string | null;\n  createdAt: Generated<Timestamp | null>;\n  email: string | null;\n  firstName: string | null;\n  id: Generated<string>;\n  internalOperationGrants: Generated<string[]>;\n  isAdmin: Generated<boolean>;\n  lastName: string | null;\n  lastSeen: Timestamp | null;\n  name: string | null;\n  partnerId: string | null;\n  phone: string | null;\n  secondaryEmails: Generated<Json>;\n  status: Generated<string | null>;\n  sub: string | null;\n  type: Generated<string | null>;\n  updatedAt: Generated<Timestamp | null>;\n}\n\nexport interface ControlPlaneDB {\n  'controlPlane.accountingIntegrityDefinitionDraft': ControlPlaneAccountingIntegrityDefinitionDraft;\n  'controlPlane.accountingIntegrityDefinitionVersion': ControlPlaneAccountingIntegrityDefinitionVersion;\n  'controlPlane.accountingIntegrityEvaluation': ControlPlaneAccountingIntegrityEvaluation;\n  'controlPlane.app': ControlPlaneApp;\n  'controlPlane.bookingChannel': ControlPlaneBookingChannel;\n  'controlPlane.bookingChannelIconCandidate': ControlPlaneBookingChannelIconCandidate;\n  'controlPlane.connectionRoute': ControlPlaneConnectionRoute;\n  'controlPlane.controlPlaneOutbox': ControlPlaneOutbox;\n  'controlPlane.currency': ControlPlaneCurrency;\n  'controlPlane.destructiveJob': ControlPlaneDestructiveJob;\n  'controlPlane.destructiveJobAttempt': ControlPlaneDestructiveJobAttempt;\n  'controlPlane.destructiveJobOperation': ControlPlaneDestructiveJobOperation;\n  'controlPlane.events': ControlPlaneEvent;\n  'controlPlane.feature': ControlPlaneFeature;\n  'controlPlane.featureApproval': ControlPlaneFeatureApproval;\n  'controlPlane.featureEnabledTeam': ControlPlaneFeatureEnabledTeam;\n  'controlPlane.generalLedgerDefaultSet': ControlPlaneGeneralLedgerDefaultSet;\n  'controlPlane.generalLedgerDefaultVersion': ControlPlaneGeneralLedgerDefaultVersion;\n  'controlPlane.lineClassification': ControlPlaneLineClassification;\n  'controlPlane.lineClassificationTeamUsage': ControlPlaneLineClassificationTeamUsage;\n  'controlPlane.operation': ControlPlaneOperation;\n  'controlPlane.operationResource': ControlPlaneOperationResource;\n  'controlPlane.operationSource': ControlPlaneOperationSource;\n  'controlPlane.partnerManagedTeamAssignment': ControlPlanePartnerManagedTeamAssignment;\n  'controlPlane.reservationLineDefault': ControlPlaneReservationLineDefault;\n  'controlPlane.rolloutMonitorSnapshot': ControlPlaneRolloutMonitorSnapshot;\n  'controlPlane.ownerPortal': ControlPlaneOwnerPortal;\n  'controlPlane.tenant': ControlPlaneTenant;\n  'controlPlane.tenantRegionMigration': ControlPlaneTenantRegionMigration;\n  'controlPlane.tenantUser': ControlPlaneTenantUser;\n  'controlPlane.trackingQueueFailure': ControlPlaneTrackingQueueFailure;\n  'controlPlane.token': ControlPlaneToken;\n  'controlPlane.transactionLineMapping': ControlPlaneTransactionLineMapping;\n  'controlPlane.user': ControlPlaneUser;\n  'controlPlaneCore.flow': ControlPlaneFlow;\n  'controlPlaneCore.issueMessageOverwrite': ControlPlaneIssueMessageOverwrite;\n}\n\nclass ControlPlaneSchemaTransformer extends OperationNodeTransformer {\n  constructor(\n    readonly schema: string,\n    readonly issueMessageOverwriteSchema: string\n  ) {\n    super();\n  }\n\n  protected override transformSchemableIdentifier(\n    node: SchemableIdentifierNode,\n    queryId: QueryId\n  ): SchemableIdentifierNode {\n    const transformed = super.transformSchemableIdentifier(node, queryId);\n    if (\n      transformed.schema?.name === 'controlPlane' ||\n      transformed.schema?.name === 'control_plane'\n    ) {\n      return { ...transformed, schema: IdentifierNode.create(this.schema) };\n    }\n    if (\n      transformed.schema?.name === 'controlPlaneCore' ||\n      transformed.schema?.name === 'control_plane_core'\n    ) {\n      return {\n        ...transformed,\n        schema: IdentifierNode.create(this.issueMessageOverwriteSchema),\n      };\n    }\n    return transformed;\n  }\n\n  protected override transformFunction(\n    node: FunctionNode,\n    queryId: QueryId\n  ): FunctionNode {\n    const transformed = super.transformFunction(node, queryId);\n    return node.func.startsWith('controlPlane.')\n      ? {\n          ...transformed,\n          func: `${this.schema}.${transformed.func.slice('controlPlane.'.length)}`,\n        }\n      : transformed;\n  }\n}\n\nclass ControlPlaneSchemaPlugin implements KyselyPlugin {\n  readonly #transformer: ControlPlaneSchemaTransformer;\n\n  constructor(schema: string, issueMessageOverwriteSchema: string) {\n    this.#transformer = new ControlPlaneSchemaTransformer(\n      schema,\n      issueMessageOverwriteSchema\n    );\n  }\n\n  transformQuery(args: PluginTransformQueryArgs): RootOperationNode {\n    return this.#transformer.transformNode(args.node, args.queryId);\n  }\n\n  async transformResult(\n    args: PluginTransformResultArgs\n  ): Promise<QueryResult<UnknownRow>> {\n    return args.result;\n  }\n}\n\nexport function withControlPlaneSchema(\n  kysely: Kysely<ControlPlaneDB>,\n  schema: string,\n  issueMessageOverwriteSchema = 'core'\n) {\n  return kysely.withPlugin(\n    new ControlPlaneSchemaPlugin(schema, issueMessageOverwriteSchema)\n  );\n}\n"]}

package/build/main/index.d.ts

@@ -2,29 +2,66 @@ import type { Kysely as K, LogConfig, Transaction as T } from 'kysely';
 import postgres, { type Sql } from 'postgres';
 import { type ControlPlaneDB } from './control-plane';
 export type { Insertable, LogEvent } from 'kysely';
+export * from './connect-handoff';
 export * from './error';
 export * from './isomorphic';
 export * from './postgres-error';
 export * from './query';
 export * from './regional';
 export * from './transaction';
+import type { TenantDataRegion } from './regional';
 import type { DB } from './v1.generated';
+/** The database a Worker reaches through its Hyperdrive binding. */
+type HyperdriveDatabase = 'controlPlane' | 'regional';
 type KyselyOpts = {
-    hyperdrive?: true;
+    dataRegion?: TenantDataRegion;
+    hyperdrive?: HyperdriveDatabase;
+    /** Called after every connection reservation, including the startup probe. */
+    onReserve?: (timing: {
+        durationMs: number;
+        startedAtEpochMs: number;
+    }) => void;
+    onRetryDiagnostic?: (diagnostic: PostgresRetryDiagnostic) => void;
     repositoryName?: string;
     log?: true | LogConfig;
+    /**
+     * Scripts and repairs (PRO-19037). Probes an idle TCP connection after 10 s.
+     * A query, commit, begin, rollback or savepoint with no answer for an hour,
+     * longer than any statement timeout a script sets, fails the run and closes
+     * the Postgres client that issued it. Backstop for a connection the kernel
+     * keeps open while the peer never answers.
+     */
+    script?: true;
+};
+type PostgresRetryDiagnostic = {
+    attemptCount: number;
+    dataRegion?: TenantDataRegion;
+    errorClass: string;
+    operationKind: 'acquisition' | 'mutation' | 'select' | 'transaction';
+    outcome: 'exhausted' | 'notRetryable' | 'retrying';
+    repositoryName?: string;
 };
 type PgOpt = {
     forceDisableSSL?: boolean;
     probe?: true;
     retries?: false | number;
-} & Pick<KyselyOpts, 'hyperdrive'>;
+} & Pick<KyselyOpts, 'hyperdrive' | 'onReserve' | 'script'>;
+/**
+ * Replays a complete database operation after a PostgreSQL deadlock (40P01)
+ * or lock timeout (55P03), using the same three-attempt jittered budget as
+ * connection retries. The operation must own its transaction and must not
+ * contain external side effects such as partner API writes.
+ */
+export declare function retryPostgresLockFailure<T>(operation: () => Promise<T>): Promise<T>;
 export type Kysely = K<DB>;
+export type { ControlPlaneDB };
 export type ControlPlaneKysely = K<ControlPlaneDB>;
 export type ControlPlaneTransaction = T<ControlPlaneDB>;
 export declare function useKysely<Database = DB>(postgres: Sql, options?: KyselyOpts): K<Database>;
+export declare function usePostgres(connectionString: string, opt?: Pick<PgOpt, 'forceDisableSSL' | 'hyperdrive' | 'onReserve' | 'script'>): postgres.Sql<{}>;
 export declare function useAsyncPostgres(connectionString: string, opt?: PgOpt): Promise<postgres.Sql<{}>>;
 export declare function useAsyncKysely(connectionString: string, opt?: PgOpt & KyselyOpts): Promise<K<DB>>;
 export declare function useAsyncNeonWebSocketKysely(connectionString: string, opt?: Pick<PgOpt, 'probe'> & KyselyOpts): Promise<K<DB>>;
+export declare function useControlPlaneKysely(postgres: Sql, options?: KyselyOpts): K<ControlPlaneDB>;
 export declare function useAsyncControlPlaneKysely(connectionString: string, opt?: PgOpt & KyselyOpts): Promise<K<ControlPlaneDB>>;
 export declare function forceCloseAllPostgres(timeoutMs?: number): Promise<void>;