@vrplatform/kysely 1.3.45-stage.4896 → 1.3.45-stage.490

package/build/migrations-v2/0000000000047-public-audit-completion.ts

@@ -0,0 +1,77 @@
+import type { Kysely } from 'kysely';
+import { sql } from 'kysely';
+
+export async function up(db: Kysely<unknown>): Promise<void> {
+  await sql`
+    create type audit.actor_organization_type as enum (
+      'vrplatform', 'partner', 'team', 'system'
+    )
+  `.execute(db);
+  await sql`
+    alter type audit.source_type add value if not exists 'embedded'
+  `.execute(db);
+  await sql`
+    alter type webhook.subscription_event_type
+      add value if not exists 'audit.event.changed'
+  `.execute(db);
+  await sql`
+    alter type webhook.event_type
+      add value if not exists 'audit.event.changed'
+  `.execute(db);
+  await sql`
+    alter type webhook.resource_type
+      add value if not exists 'auditEvent'
+  `.execute(db);
+  await sql`
+    alter table audit.action
+      add column actor_organization_type audit.actor_organization_type,
+      add column actor_organization_id uuid,
+      add column actor_organization_name text
+  `.execute(db);
+  await sql`
+    alter table audit.mutation
+      add column public_outcome jsonb
+  `.execute(db);
+  await sql`
+    alter table audit.public_event
+      add column actor_organization_type audit.actor_organization_type,
+      add column actor_organization_id uuid,
+      add column actor_organization_name text,
+      add column attempted_entity_changes jsonb not null default '[]'::jsonb,
+      add column blocked_by jsonb not null default '[]'::jsonb,
+      add column recovery jsonb not null default '[]'::jsonb
+  `.execute(db);
+  await sql`
+    create index if not exists public_event_tenant_occurred_idx
+      on audit.public_event (tenant_id, occurred_at, updated_at, id)
+  `.execute(db);
+}
+
+export async function down(db: Kysely<unknown>): Promise<void> {
+  await sql`
+    drop index if exists audit.public_event_tenant_occurred_idx
+  `.execute(db);
+  await sql`
+    alter table audit.public_event
+      drop column if exists recovery,
+      drop column if exists blocked_by,
+      drop column if exists attempted_entity_changes,
+      drop column if exists actor_organization_name,
+      drop column if exists actor_organization_id,
+      drop column if exists actor_organization_type
+  `.execute(db);
+  await sql`
+    alter table audit.action
+      drop column if exists actor_organization_name,
+      drop column if exists actor_organization_id,
+      drop column if exists actor_organization_type
+  `.execute(db);
+  await sql`
+    alter table audit.mutation
+      drop column if exists public_outcome
+  `.execute(db);
+  await sql`
+    drop type if exists audit.actor_organization_type
+  `.execute(db);
+  // PostgreSQL enum values cannot be removed safely without rebuilding source_type.
+}

package/build/migrations-v2/0000000000048-reservation-journal-full-refresh-repair.ts

@@ -0,0 +1,136 @@
+import type { Kysely } from 'kysely';
+import { sql } from 'kysely';
+
+export async function up(db: Kysely<unknown>): Promise<void> {
+  await sql`
+    create temporary table reservation_journal_full_refresh_repair_scope (
+      invalidation_id uuid primary key,
+      tenant_id uuid not null,
+      reservation_id uuid not null,
+      applied_at timestamptz not null,
+      covering_effect_id uuid not null
+    ) on commit drop
+  `.execute(db);
+
+  await sql`
+    insert into reservation_journal_full_refresh_repair_scope (
+      invalidation_id,
+      tenant_id,
+      reservation_id,
+      applied_at,
+      covering_effect_id
+    )
+    select
+      pending.id,
+      pending.tenant_id,
+      pending.reservation_id,
+      covering.applied_at,
+      covering.effect_id
+    from accounting.reservation_journal_invalidation as pending
+    inner join lateral (
+      select
+        applied.applied_at,
+        applied.effect_id
+      from accounting.reservation_journal_invalidation as applied
+      inner join audit.effect as effect
+        on effect.tenant_id = applied.tenant_id
+        and effect.id = applied.effect_id
+      where applied.tenant_id = pending.tenant_id
+        and applied.reservation_id = pending.reservation_id
+        and applied.revision >= pending.revision
+        and applied.applied_at is not null
+        and applied.covered_by_effect_id = applied.effect_id
+        and effect.status = 'completed'
+        and coalesce(effect.payload ->> 'mode', 'full') = 'full'
+        and (
+          select attempt.status
+          from audit.effect_attempt as attempt
+          where attempt.tenant_id = effect.tenant_id
+            and attempt.effect_id = effect.id
+          order by attempt.attempt_num desc
+          limit 1
+        ) is distinct from 'skipped_locked'
+      order by applied.revision desc
+      limit 1
+    ) as covering on true
+    where pending.applied_at is null
+  `.execute(db);
+
+  await sql`
+    update accounting.reservation_journal_invalidation as invalidation
+    set
+      applied_at = scope.applied_at,
+      covered_by_effect_id = scope.covering_effect_id
+    from reservation_journal_full_refresh_repair_scope as scope
+    where invalidation.id = scope.invalidation_id
+      and invalidation.applied_at is null
+  `.execute(db);
+
+  await sql`
+    select state.tenant_id
+    from accounting.reservation_journal_state as state
+    inner join (
+      select distinct tenant_id, reservation_id
+      from reservation_journal_full_refresh_repair_scope
+    ) as scope
+      on scope.tenant_id = state.tenant_id
+      and scope.reservation_id = state.reservation_id
+    order by state.tenant_id, state.reservation_id
+    for update of state
+  `.execute(db);
+
+  await sql`
+    with advancement as (
+      select
+        state.tenant_id,
+        state.reservation_id,
+        coalesce(
+          min(invalidation.revision) filter (
+            where invalidation.applied_at is null
+          ) - 1,
+          max(invalidation.revision),
+          state.applied_revision
+        ) as applied_revision,
+        min(invalidation.created_at) filter (
+          where invalidation.applied_at is null
+        ) as stale_since,
+        max(invalidation.applied_at) as calculated_at
+      from accounting.reservation_journal_state as state
+      inner join (
+        select distinct tenant_id, reservation_id
+        from reservation_journal_full_refresh_repair_scope
+      ) as scope
+        on scope.tenant_id = state.tenant_id
+        and scope.reservation_id = state.reservation_id
+      left join accounting.reservation_journal_invalidation as invalidation
+        on invalidation.tenant_id = state.tenant_id
+        and invalidation.reservation_id = state.reservation_id
+      group by
+        state.tenant_id,
+        state.reservation_id,
+        state.applied_revision
+    )
+    update accounting.reservation_journal_state as state
+    set
+      applied_revision = greatest(
+        state.applied_revision,
+        advancement.applied_revision
+      ),
+      stale_since = advancement.stale_since,
+      calculated_at = case
+        when advancement.applied_revision > state.applied_revision
+          then greatest(state.calculated_at, advancement.calculated_at)
+        else state.calculated_at
+      end,
+      updated_at = now()
+    from advancement
+    where state.tenant_id = advancement.tenant_id
+      and state.reservation_id = advancement.reservation_id
+      and (
+        state.applied_revision < advancement.applied_revision
+        or state.stale_since is distinct from advancement.stale_since
+      )
+  `.execute(db);
+}
+
+export async function down(_db: Kysely<unknown>): Promise<void> {}

package/build/migrations-v2/0000000000049-queued-journal-operation-failures.ts

@@ -0,0 +1,60 @@
+import { type Kysely, sql } from 'kysely';
+
+export async function up(db: Kysely<unknown>): Promise<void> {
+  // Preserve the source lifecycle and failure precedence; ID format is not a failure policy.
+  await sql`
+    do $$
+    declare
+      definition text;
+    begin
+      definition := pg_get_functiondef('core.refresh_operation_state(uuid)'::regprocedure);
+      if position('and target_public_id_format = ''action''' in definition) = 0 then
+        raise exception 'Journal operation failure projection has an unexpected definition';
+      end if;
+      execute replace(definition, 'and target_public_id_format = ''action''', '');
+    end;
+    $$
+  `.execute(db);
+
+  await sql`
+    select core.refresh_operation_state(operation.id)
+    from core.operation as operation
+    where operation.type = 'reservation-journal-refresh'
+      and operation.public_id_format = 'legacy'
+      and operation.status = 'failed'
+      and exists (
+        select 1 from core.operation_source as source
+        where source.operation_id = operation.id
+          and source.source_type = 'audit-action'
+      )
+  `.execute(db);
+}
+
+export async function down(db: Kysely<unknown>): Promise<void> {
+  await sql`
+    do $$
+    declare
+      definition text;
+    begin
+      definition := pg_get_functiondef('core.refresh_operation_state(uuid)'::regprocedure);
+      if position('and target_public_id_format = ''action''' in definition) > 0
+        or position('and target_action_id is not null then' in definition) = 0 then
+        raise exception 'Journal operation failure projection has an unexpected definition';
+      end if;
+      execute replace(
+        definition,
+        'and target_action_id is not null then',
+        'and target_public_id_format = ''action'' and target_action_id is not null then'
+      );
+    end;
+    $$
+  `.execute(db);
+
+  await sql`
+    select core.refresh_operation_state(operation.id)
+    from core.operation as operation
+    where operation.type = 'reservation-journal-refresh'
+      and operation.public_id_format = 'legacy'
+      and operation.status = 'failed'
+  `.execute(db);
+}

package/build/migrations-v2/0000000000050-connection-oauth-state.ts

@@ -0,0 +1,43 @@
+import type { Kysely } from 'kysely';
+import { sql } from 'kysely';
+
+export async function up(db: Kysely<unknown>): Promise<void> {
+  await sql`set local lock_timeout = '5s'`.execute(db);
+  await sql`set local statement_timeout = '60s'`.execute(db);
+  await sql`
+    create table public.connection_oauth_state (
+      state_hash text primary key,
+      tenant_id uuid not null references public.tenant (id) on delete cascade,
+      user_id uuid not null,
+      app_id text not null,
+      connection_id uuid,
+      params jsonb not null,
+      redirect_uri text not null,
+      expires_at timestamptz not null,
+      constraint connection_oauth_state_hash_shape check (state_hash ~ '^[0-9a-f]{64}$'),
+      constraint connection_oauth_state_params_object check (jsonb_typeof(params) = 'object')
+    )
+  `.execute(db);
+  await sql`create index connection_oauth_state_expiry_idx on public.connection_oauth_state (expires_at)`.execute(
+    db
+  );
+  await sql`create index connection_oauth_state_tenant_idx on public.connection_oauth_state (tenant_id)`.execute(
+    db
+  );
+  await sql`
+    do $$
+    begin
+      if exists (select 1 from pg_roles where rolname = 'application') then
+        grant select, insert, delete on public.connection_oauth_state to application;
+        -- SELECT FOR UPDATE SKIP LOCKED needs UPDATE on at least one column.
+        -- State bindings, parameters, and expiry remain non-updatable at runtime.
+        grant update (state_hash) on public.connection_oauth_state to application;
+      end if;
+    end;
+    $$
+  `.execute(db);
+}
+
+export async function down(db: Kysely<unknown>): Promise<void> {
+  await sql`drop table public.connection_oauth_state`.execute(db);
+}

package/build/module/camel-case/index.js

@@ -34,7 +34,7 @@ export class CustomCasePlugin extends CamelCasePlugin {
             }
             if (!alias.name.includes('_'))
                 continue;
-            throw new KyselyError(`Alias ${alias.name} contains underscore`);
+            throw new KyselyError('Alias contains underscore', { name: alias.name });
         }
     }
     mapRow(row) {

package/build/module/camel-case/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"src/","sources":["camel-case/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAIhB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,MAAM,OAAO,gBAAiB,SAAQ,eAAe;IACnD,kDAAkD;IAClD;QACE,KAAK,CAAC;YACJ,wBAAwB,EAAE,IAAI;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,eAAe,CAAC,IAAI;QAClB,OAAO,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,cAAc,CAAC,IAAI;QACjB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,WAAW,CAAC,IAAqB;QAC/B,IAAI,CAAC,IAAI,EAAE,UAAU;YAAE,OAAO;QAE9B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YACtC,MAAM,SAAS,GAAG,CAAC,CAAC,SAAsB,CAAC;YAC3C,IAAI,CAAC,SAAS,CAAC,KAAK;gBAAE,SAAS;YAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAuB,CAAC;YAEhD,0CAA0C;YAC1C,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACtC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAe,CAAC;gBAC1C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;oBACzC,IAAI,CAAC,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;wBACjC,MAAM,eAAe,GAAG,CAAoB,CAAC;wBAC7C,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;oBACpC,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,SAAS;YAExC,MAAM,IAAI,WAAW,CAAC,SAAS,KAAK,CAAC,IAAI,sBAAsB,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAES,MAAM,CAAC,GAAG;QAClB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG;YAAE,OAAO,GAAG,CAAC;QAEhD,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,8GAA8G;QAC9G,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YACrB,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACpC,iEAAiE;YACjE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF","sourcesContent":["import {\n  type AliasNode,\n  CamelCasePlugin,\n  type IdentifierNode,\n  type RawNode,\n  type SelectQueryNode,\n} from 'kysely';\nimport { KyselyError } from '../error';\n\nexport class CustomCasePlugin extends CamelCasePlugin {\n  // _excludedColumns: Record<string, boolean> = {};\n  constructor() {\n    super({\n      maintainNestedObjectKeys: true,\n    });\n  }\n\n  transformResult(args) {\n    return super.transformResult(args);\n  }\n\n  transformQuery(args) {\n    this.verifyAlias(args.node);\n    return super.transformQuery(args);\n  }\n\n  verifyAlias(node: SelectQueryNode) {\n    if (!node?.selections) return;\n\n    for (const x of node.selections ?? []) {\n      const selection = x.selection as AliasNode;\n      if (!selection.alias) continue;\n      const alias = selection.alias as IdentifierNode;\n\n      // alias can be a raw node (jsonArrayFrom)\n      if (selection.node.kind === 'RawNode') {\n        const rawNode = selection.node as RawNode;\n        for (const x of rawNode.parameters ?? []) {\n          if (x.kind === 'SelectQueryNode') {\n            const selectQueryNode = x as SelectQueryNode;\n            this.verifyAlias(selectQueryNode);\n          }\n        }\n      }\n\n      if (!alias.name.includes('_')) continue;\n\n      throw new KyselyError(`Alias ${alias.name} contains underscore`);\n    }\n  }\n\n  protected mapRow(row) {\n    if (typeof row !== 'object' || !row) return row;\n\n    const newRow: Record<string, any> = {};\n    // we camel case on first layer, and nested ONLY if in an array (jsonArrayFrom), NOT if it's an object (jsonb)\n    for (const key of Object.keys(row)) {\n      let value = row[key];\n      const newKey = super.camelCase(key);\n      // array CAN be non object, so we need to check the first element\n      if (Array.isArray(value)) {\n        value = value.map((it) => this.mapRow(it));\n      }\n      newRow[newKey] = value;\n    }\n    return newRow;\n  }\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"src/","sources":["camel-case/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAIhB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,MAAM,OAAO,gBAAiB,SAAQ,eAAe;IACnD,kDAAkD;IAClD;QACE,KAAK,CAAC;YACJ,wBAAwB,EAAE,IAAI;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,eAAe,CAAC,IAAI;QAClB,OAAO,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,cAAc,CAAC,IAAI;QACjB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,WAAW,CAAC,IAAqB;QAC/B,IAAI,CAAC,IAAI,EAAE,UAAU;YAAE,OAAO;QAE9B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YACtC,MAAM,SAAS,GAAG,CAAC,CAAC,SAAsB,CAAC;YAC3C,IAAI,CAAC,SAAS,CAAC,KAAK;gBAAE,SAAS;YAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAuB,CAAC;YAEhD,0CAA0C;YAC1C,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACtC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAe,CAAC;gBAC1C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;oBACzC,IAAI,CAAC,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;wBACjC,MAAM,eAAe,GAAG,CAAoB,CAAC;wBAC7C,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;oBACpC,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,SAAS;YAExC,MAAM,IAAI,WAAW,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAES,MAAM,CAAC,GAAG;QAClB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG;YAAE,OAAO,GAAG,CAAC;QAEhD,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,8GAA8G;QAC9G,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YACrB,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACpC,iEAAiE;YACjE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF","sourcesContent":["import {\n  type AliasNode,\n  CamelCasePlugin,\n  type IdentifierNode,\n  type RawNode,\n  type SelectQueryNode,\n} from 'kysely';\nimport { KyselyError } from '../error';\n\nexport class CustomCasePlugin extends CamelCasePlugin {\n  // _excludedColumns: Record<string, boolean> = {};\n  constructor() {\n    super({\n      maintainNestedObjectKeys: true,\n    });\n  }\n\n  transformResult(args) {\n    return super.transformResult(args);\n  }\n\n  transformQuery(args) {\n    this.verifyAlias(args.node);\n    return super.transformQuery(args);\n  }\n\n  verifyAlias(node: SelectQueryNode) {\n    if (!node?.selections) return;\n\n    for (const x of node.selections ?? []) {\n      const selection = x.selection as AliasNode;\n      if (!selection.alias) continue;\n      const alias = selection.alias as IdentifierNode;\n\n      // alias can be a raw node (jsonArrayFrom)\n      if (selection.node.kind === 'RawNode') {\n        const rawNode = selection.node as RawNode;\n        for (const x of rawNode.parameters ?? []) {\n          if (x.kind === 'SelectQueryNode') {\n            const selectQueryNode = x as SelectQueryNode;\n            this.verifyAlias(selectQueryNode);\n          }\n        }\n      }\n\n      if (!alias.name.includes('_')) continue;\n\n      throw new KyselyError('Alias contains underscore', { name: alias.name });\n    }\n  }\n\n  protected mapRow(row) {\n    if (typeof row !== 'object' || !row) return row;\n\n    const newRow: Record<string, any> = {};\n    // we camel case on first layer, and nested ONLY if in an array (jsonArrayFrom), NOT if it's an object (jsonb)\n    for (const key of Object.keys(row)) {\n      let value = row[key];\n      const newKey = super.camelCase(key);\n      // array CAN be non object, so we need to check the first element\n      if (Array.isArray(value)) {\n        value = value.map((it) => this.mapRow(it));\n      }\n      newRow[newKey] = value;\n    }\n    return newRow;\n  }\n}\n"]}