graphile-bucket-provisioner-plugin 1.9.2 → 1.10.0

package/esm/index.d.ts

@@ -39,4 +39,4 @@
  */
 export { BucketProvisionerPlugin, createBucketProvisionerPlugin } from './plugin';
 export { BucketProvisionerPreset } from './preset';
-export type { BucketProvisionerPluginOptions, ConnectionConfigOrGetter, BucketNameResolver, ProvisionBucketInput, ProvisionBucketPayload, StorageConnectionConfig, StorageProvider, BucketAccessType, ProvisionResult, } from './types';
+export type { BucketAccessType, BucketNameResolver, BucketProvisionerPluginOptions, ConnectionConfigOrGetter, ProvisionBucketInput, ProvisionBucketPayload, ProvisionResult, StorageConnectionConfig, StorageProvider, } from './types';

package/esm/plugin.js

@@ -30,11 +30,11 @@
  * generated buckets table via a smart comment:
  *   COMMENT ON TABLE buckets IS E'@storageBuckets\nStorage buckets table';
  */
-import { context as grafastContext, lambda, object } from 'grafast';
-import { extendSchema, gql } from 'graphile-utils';
+import { BucketProvisioner, } from '@constructive-io/bucket-provisioner';
 import { Logger } from '@pgpmjs/logger';
 import { QuoteUtils } from '@pgsql/quotes';
-import { BucketProvisioner, } from '@constructive-io/bucket-provisioner';
+import { context as grafastContext, lambda, object } from 'grafast';
+import { extendSchema, gql } from 'graphile-utils';
 const log = new Logger('graphile-bucket-provisioner:plugin');
 // --- Storage module queries ---
 /**
@@ -105,6 +105,28 @@ async function resolveStorageModule(pgClient, databaseId, ownerId) {
     }
     return null;
 }
+/**
+ * Normalize the recorded physical coordinate at the DB boundary.
+ *
+ * A bucket row either carries a recorded coordinate or it does not; SQL nulls
+ * and absent columns both mean "never provisioned". Collapsing them here is
+ * the single place that shape is interpreted — callers branch on `string`
+ * vs `null` and never coalesce a bucket name into existence.
+ */
+function storedPhysicalName(row) {
+    return row.physical_name == null ? null : row.physical_name;
+}
+/**
+ * Record the physical S3 bucket name on the source bucket row.
+ *
+ * Runs in the system lane (`withPgClient(null, ...)`) — server bookkeeping,
+ * RLS-independent. Idempotent via the `physical_name IS NULL` guard so a
+ * re-provision never clobbers an already-recorded coordinate.
+ */
+async function recordPhysicalName(withPgClient, bucketsTable, bucketId, physicalName) {
+    await withPgClient(null, (client) => client.query(`UPDATE ${bucketsTable} SET physical_name = $1 WHERE id = $2 AND physical_name IS NULL`, [physicalName, bucketId]));
+    log.info(`Recorded physical_name="${physicalName}" on bucket ${bucketId}`);
+}
 // --- Helpers ---
 /**
  * Resolve the connection config from the options. If the option is a lazy
@@ -174,8 +196,7 @@ function buildProvisioner(options, storageModule, effectiveOrigins) {
  * Core provisioning logic shared by both the explicit mutation and the
  * auto-provisioning hook.
  */
-async function provisionBucketForRow(pgClient, databaseId, bucketKey, bucketType, bucketAllowedOrigins, options) {
-    const s3BucketName = resolveBucketName(bucketKey, databaseId, options);
+async function provisionBucketForRow(pgClient, databaseId, bucketKey, bucketType, bucketAllowedOrigins, options, s3BucketName) {
     const accessType = bucketType;
     // Read storage module config to check for endpoint/provider/CORS overrides
     const storageModule = await resolveStorageModule(pgClient, databaseId);
@@ -198,8 +219,7 @@ async function provisionBucketForRow(pgClient, databaseId, bucketKey, bucketType
 /**
  * Update CORS on an existing S3 bucket when allowed_origins changes.
  */
-async function updateBucketCors(pgClient, databaseId, bucketKey, bucketType, bucketAllowedOrigins, options) {
-    const s3BucketName = resolveBucketName(bucketKey, databaseId, options);
+async function updateBucketCors(pgClient, databaseId, bucketKey, bucketType, bucketAllowedOrigins, options, s3BucketName) {
     const accessType = bucketType;
     const storageModule = await resolveStorageModule(pgClient, databaseId);
     const effectiveOrigins = resolveAllowedOrigins(bucketAllowedOrigins, storageModule?.allowed_origins, options.allowedOrigins);
@@ -304,11 +324,11 @@ export function createBucketProvisionerPlugin(options) {
                             const hasOwner = ownerId && storageModule.scope !== 'app';
                             const bucketsTable = QuoteUtils.quoteQualifiedIdentifier(storageModule.buckets_schema, storageModule.buckets_table);
                             const bucketResult = await pgClient.query(hasOwner
-                                ? `SELECT id, key, type, is_public, allowed_origins
+                                ? `SELECT id, key, type, is_public, allowed_origins, physical_name
                      FROM ${bucketsTable}
                      WHERE key = $1 AND owner_id = $2
                      LIMIT 1`
-                                : `SELECT id, key, type, is_public, allowed_origins
+                                : `SELECT id, key, type, is_public, allowed_origins, physical_name
                      FROM ${bucketsTable}
                      WHERE key = $1
                      LIMIT 1`, hasOwner ? [bucketKey, ownerId] : [bucketKey]);
@@ -316,8 +336,16 @@ export function createBucketProvisionerPlugin(options) {
                                 throw new Error('BUCKET_NOT_FOUND');
                             }
                             const bucket = bucketResult.rows[0];
+                            // First provision mints a name; afterwards the stored coordinate
+                            // is authoritative and the naming hook is never consulted again.
+                            const recorded = storedPhysicalName(bucket);
+                            const s3BucketName = recorded === null
+                                ? resolveBucketName(bucket.key, databaseId, options)
+                                : recorded;
                             try {
-                                const result = await provisionBucketForRow(pgClient, databaseId, bucket.key, bucket.type, bucket.allowed_origins, options);
+                                const result = await provisionBucketForRow(pgClient, databaseId, bucket.key, bucket.type, bucket.allowed_origins, options, s3BucketName);
+                                // Record the exact provisioned name on the source row.
+                                await recordPhysicalName(withPgClient, bucketsTable, bucket.id, result.bucketName);
                                 return {
                                     success: true,
                                     bucketName: result.bucketName,
@@ -331,7 +359,7 @@ export function createBucketProvisionerPlugin(options) {
                                 log.error(`Failed to provision bucket "${bucketKey}": ${err.message}`);
                                 return {
                                     success: false,
-                                    bucketName: resolveBucketName(bucket.key, databaseId, options),
+                                    bucketName: s3BucketName,
                                     accessType: bucket.type,
                                     provider: resolveConnection(options).provider,
                                     endpoint: resolveConnection(options).endpoint ?? null,
@@ -417,7 +445,17 @@ export function createBucketProvisionerPlugin(options) {
                                             log.warn('Auto-provision skipped: could not resolve database_id');
                                             return;
                                         }
-                                        await provisionBucketForRow(pgClient, databaseId, bucketInput.key, bucketInput.type, bucketInput.allowedOrigins ?? bucketInput.allowed_origins ?? null, options);
+                                        // Newly-created row has no stored coordinate yet — mint on first provision.
+                                        const result = await provisionBucketForRow(pgClient, databaseId, bucketInput.key, bucketInput.type, bucketInput.allowedOrigins ?? bucketInput.allowed_origins ?? null, options, resolveBucketName(bucketInput.key, databaseId, options));
+                                        // Record the provisioned name on the just-created row.
+                                        const storageModule = await resolveStorageModule(pgClient, databaseId);
+                                        if (storageModule) {
+                                            const bucketsTable = QuoteUtils.quoteQualifiedIdentifier(storageModule.buckets_schema, storageModule.buckets_table);
+                                            const idResult = await pgClient.query(`SELECT id FROM ${bucketsTable} WHERE key = $1 LIMIT 1`, [bucketInput.key]);
+                                            const bucketId = idResult.rows[0]?.id;
+                                            if (bucketId)
+                                                await recordPhysicalName(withPgClient, bucketsTable, bucketId, result.bucketName);
+                                        }
                                     });
                                 }
                                 else {
@@ -451,7 +489,7 @@ export function createBucketProvisionerPlugin(options) {
                                         }
                                         // Read the full bucket row (post-update) to get type + origins
                                         const bucketsTable = QuoteUtils.quoteQualifiedIdentifier(storageModule.buckets_schema, storageModule.buckets_table);
-                                        const bucketResult = await pgClient.query(`SELECT id, key, type, is_public, allowed_origins
+                                        const bucketResult = await pgClient.query(`SELECT id, key, type, is_public, allowed_origins, physical_name
                        FROM ${bucketsTable}
                        WHERE key = $1
                        LIMIT 1`, [patchKey]);
@@ -460,7 +498,13 @@ export function createBucketProvisionerPlugin(options) {
                                             return;
                                         }
                                         const bucket = bucketResult.rows[0];
-                                        await updateBucketCors(pgClient, databaseId, bucket.key, bucket.type, bucket.allowed_origins, options);
+                                        // CORS applies to the recorded physical bucket; if the row was
+                                        // never provisioned there is nothing to update yet, so mint the
+                                        // conventional name the first provision would use.
+                                        const recorded = storedPhysicalName(bucket);
+                                        await updateBucketCors(pgClient, databaseId, bucket.key, bucket.type, bucket.allowed_origins, options, recorded === null
+                                            ? resolveBucketName(bucket.key, databaseId, options)
+                                            : recorded);
                                     });
                                 }
                             }

package/esm/types.d.ts

@@ -5,8 +5,8 @@
  * types used by the Graphile plugin to auto-provision S3 buckets when
  * bucket rows are created via GraphQL mutations.
  */
-import type { StorageConnectionConfig, StorageProvider, BucketAccessType, ProvisionResult } from '@constructive-io/bucket-provisioner';
-export type { StorageConnectionConfig, StorageProvider, BucketAccessType, ProvisionResult };
+import type { BucketAccessType, ProvisionResult, StorageConnectionConfig, StorageProvider } from '@constructive-io/bucket-provisioner';
+export type { BucketAccessType, ProvisionResult, StorageConnectionConfig, StorageProvider };
 /**
  * S3 connection configuration or a lazy getter that returns it on first use.
  *

package/index.d.ts

@@ -39,4 +39,4 @@
  */
 export { BucketProvisionerPlugin, createBucketProvisionerPlugin } from './plugin';
 export { BucketProvisionerPreset } from './preset';
-export type { BucketProvisionerPluginOptions, ConnectionConfigOrGetter, BucketNameResolver, ProvisionBucketInput, ProvisionBucketPayload, StorageConnectionConfig, StorageProvider, BucketAccessType, ProvisionResult, } from './types';
+export type { BucketAccessType, BucketNameResolver, BucketProvisionerPluginOptions, ConnectionConfigOrGetter, ProvisionBucketInput, ProvisionBucketPayload, ProvisionResult, StorageConnectionConfig, StorageProvider, } from './types';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "graphile-bucket-provisioner-plugin",
-  "version": "1.9.2",
+  "version": "1.10.0",
   "description": "Bucket provisioning plugin for PostGraphile v5 — auto-provisions S3 buckets on bucket table mutations",
   "author": "Constructive <developers@constructive.io>",
   "homepage": "https://github.com/constructive-io/constructive",
@@ -40,9 +40,9 @@
     "url": "https://github.com/constructive-io/constructive/issues"
   },
   "dependencies": {
-    "@constructive-io/bucket-provisioner": "^0.23.2",
-    "@pgpmjs/logger": "^2.23.2",
-    "@pgsql/quotes": "^18.1.0"
+    "@constructive-io/bucket-provisioner": "^0.23.3",
+    "@pgpmjs/logger": "^2.23.3",
+    "@pgsql/quotes": "^18.2.0"
   },
   "peerDependencies": {
     "grafast": "1.0.2",
@@ -57,5 +57,5 @@
     "@types/node": "^22.19.11",
     "makage": "^0.3.0"
   },
-  "gitHead": "90f447482b056a4949134565db2665f21d11aca3"
+  "gitHead": "c438821362ceaf70b2a20d74ecf25ad4191c1748"
 }

package/plugin.js

@@ -34,11 +34,11 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.BucketProvisionerPlugin = void 0;
 exports.createBucketProvisionerPlugin = createBucketProvisionerPlugin;
-const grafast_1 = require("grafast");
-const graphile_utils_1 = require("graphile-utils");
+const bucket_provisioner_1 = require("@constructive-io/bucket-provisioner");
 const logger_1 = require("@pgpmjs/logger");
 const quotes_1 = require("@pgsql/quotes");
-const bucket_provisioner_1 = require("@constructive-io/bucket-provisioner");
+const grafast_1 = require("grafast");
+const graphile_utils_1 = require("graphile-utils");
 const log = new logger_1.Logger('graphile-bucket-provisioner:plugin');
 // --- Storage module queries ---
 /**
@@ -109,6 +109,28 @@ async function resolveStorageModule(pgClient, databaseId, ownerId) {
     }
     return null;
 }
+/**
+ * Normalize the recorded physical coordinate at the DB boundary.
+ *
+ * A bucket row either carries a recorded coordinate or it does not; SQL nulls
+ * and absent columns both mean "never provisioned". Collapsing them here is
+ * the single place that shape is interpreted — callers branch on `string`
+ * vs `null` and never coalesce a bucket name into existence.
+ */
+function storedPhysicalName(row) {
+    return row.physical_name == null ? null : row.physical_name;
+}
+/**
+ * Record the physical S3 bucket name on the source bucket row.
+ *
+ * Runs in the system lane (`withPgClient(null, ...)`) — server bookkeeping,
+ * RLS-independent. Idempotent via the `physical_name IS NULL` guard so a
+ * re-provision never clobbers an already-recorded coordinate.
+ */
+async function recordPhysicalName(withPgClient, bucketsTable, bucketId, physicalName) {
+    await withPgClient(null, (client) => client.query(`UPDATE ${bucketsTable} SET physical_name = $1 WHERE id = $2 AND physical_name IS NULL`, [physicalName, bucketId]));
+    log.info(`Recorded physical_name="${physicalName}" on bucket ${bucketId}`);
+}
 // --- Helpers ---
 /**
  * Resolve the connection config from the options. If the option is a lazy
@@ -178,8 +200,7 @@ function buildProvisioner(options, storageModule, effectiveOrigins) {
  * Core provisioning logic shared by both the explicit mutation and the
  * auto-provisioning hook.
  */
-async function provisionBucketForRow(pgClient, databaseId, bucketKey, bucketType, bucketAllowedOrigins, options) {
-    const s3BucketName = resolveBucketName(bucketKey, databaseId, options);
+async function provisionBucketForRow(pgClient, databaseId, bucketKey, bucketType, bucketAllowedOrigins, options, s3BucketName) {
     const accessType = bucketType;
     // Read storage module config to check for endpoint/provider/CORS overrides
     const storageModule = await resolveStorageModule(pgClient, databaseId);
@@ -202,8 +223,7 @@ async function provisionBucketForRow(pgClient, databaseId, bucketKey, bucketType
 /**
  * Update CORS on an existing S3 bucket when allowed_origins changes.
  */
-async function updateBucketCors(pgClient, databaseId, bucketKey, bucketType, bucketAllowedOrigins, options) {
-    const s3BucketName = resolveBucketName(bucketKey, databaseId, options);
+async function updateBucketCors(pgClient, databaseId, bucketKey, bucketType, bucketAllowedOrigins, options, s3BucketName) {
     const accessType = bucketType;
     const storageModule = await resolveStorageModule(pgClient, databaseId);
     const effectiveOrigins = resolveAllowedOrigins(bucketAllowedOrigins, storageModule?.allowed_origins, options.allowedOrigins);
@@ -308,11 +328,11 @@ function createBucketProvisionerPlugin(options) {
                             const hasOwner = ownerId && storageModule.scope !== 'app';
                             const bucketsTable = quotes_1.QuoteUtils.quoteQualifiedIdentifier(storageModule.buckets_schema, storageModule.buckets_table);
                             const bucketResult = await pgClient.query(hasOwner
-                                ? `SELECT id, key, type, is_public, allowed_origins
+                                ? `SELECT id, key, type, is_public, allowed_origins, physical_name
                      FROM ${bucketsTable}
                      WHERE key = $1 AND owner_id = $2
                      LIMIT 1`
-                                : `SELECT id, key, type, is_public, allowed_origins
+                                : `SELECT id, key, type, is_public, allowed_origins, physical_name
                      FROM ${bucketsTable}
                      WHERE key = $1
                      LIMIT 1`, hasOwner ? [bucketKey, ownerId] : [bucketKey]);
@@ -320,8 +340,16 @@ function createBucketProvisionerPlugin(options) {
                                 throw new Error('BUCKET_NOT_FOUND');
                             }
                             const bucket = bucketResult.rows[0];
+                            // First provision mints a name; afterwards the stored coordinate
+                            // is authoritative and the naming hook is never consulted again.
+                            const recorded = storedPhysicalName(bucket);
+                            const s3BucketName = recorded === null
+                                ? resolveBucketName(bucket.key, databaseId, options)
+                                : recorded;
                             try {
-                                const result = await provisionBucketForRow(pgClient, databaseId, bucket.key, bucket.type, bucket.allowed_origins, options);
+                                const result = await provisionBucketForRow(pgClient, databaseId, bucket.key, bucket.type, bucket.allowed_origins, options, s3BucketName);
+                                // Record the exact provisioned name on the source row.
+                                await recordPhysicalName(withPgClient, bucketsTable, bucket.id, result.bucketName);
                                 return {
                                     success: true,
                                     bucketName: result.bucketName,
@@ -335,7 +363,7 @@ function createBucketProvisionerPlugin(options) {
                                 log.error(`Failed to provision bucket "${bucketKey}": ${err.message}`);
                                 return {
                                     success: false,
-                                    bucketName: resolveBucketName(bucket.key, databaseId, options),
+                                    bucketName: s3BucketName,
                                     accessType: bucket.type,
                                     provider: resolveConnection(options).provider,
                                     endpoint: resolveConnection(options).endpoint ?? null,
@@ -421,7 +449,17 @@ function createBucketProvisionerPlugin(options) {
                                             log.warn('Auto-provision skipped: could not resolve database_id');
                                             return;
                                         }
-                                        await provisionBucketForRow(pgClient, databaseId, bucketInput.key, bucketInput.type, bucketInput.allowedOrigins ?? bucketInput.allowed_origins ?? null, options);
+                                        // Newly-created row has no stored coordinate yet — mint on first provision.
+                                        const result = await provisionBucketForRow(pgClient, databaseId, bucketInput.key, bucketInput.type, bucketInput.allowedOrigins ?? bucketInput.allowed_origins ?? null, options, resolveBucketName(bucketInput.key, databaseId, options));
+                                        // Record the provisioned name on the just-created row.
+                                        const storageModule = await resolveStorageModule(pgClient, databaseId);
+                                        if (storageModule) {
+                                            const bucketsTable = quotes_1.QuoteUtils.quoteQualifiedIdentifier(storageModule.buckets_schema, storageModule.buckets_table);
+                                            const idResult = await pgClient.query(`SELECT id FROM ${bucketsTable} WHERE key = $1 LIMIT 1`, [bucketInput.key]);
+                                            const bucketId = idResult.rows[0]?.id;
+                                            if (bucketId)
+                                                await recordPhysicalName(withPgClient, bucketsTable, bucketId, result.bucketName);
+                                        }
                                     });
                                 }
                                 else {
@@ -455,7 +493,7 @@ function createBucketProvisionerPlugin(options) {
                                         }
                                         // Read the full bucket row (post-update) to get type + origins
                                         const bucketsTable = quotes_1.QuoteUtils.quoteQualifiedIdentifier(storageModule.buckets_schema, storageModule.buckets_table);
-                                        const bucketResult = await pgClient.query(`SELECT id, key, type, is_public, allowed_origins
+                                        const bucketResult = await pgClient.query(`SELECT id, key, type, is_public, allowed_origins, physical_name
                        FROM ${bucketsTable}
                        WHERE key = $1
                        LIMIT 1`, [patchKey]);
@@ -464,7 +502,13 @@ function createBucketProvisionerPlugin(options) {
                                             return;
                                         }
                                         const bucket = bucketResult.rows[0];
-                                        await updateBucketCors(pgClient, databaseId, bucket.key, bucket.type, bucket.allowed_origins, options);
+                                        // CORS applies to the recorded physical bucket; if the row was
+                                        // never provisioned there is nothing to update yet, so mint the
+                                        // conventional name the first provision would use.
+                                        const recorded = storedPhysicalName(bucket);
+                                        await updateBucketCors(pgClient, databaseId, bucket.key, bucket.type, bucket.allowed_origins, options, recorded === null
+                                            ? resolveBucketName(bucket.key, databaseId, options)
+                                            : recorded);
                                     });
                                 }
                             }

package/types.d.ts

@@ -5,8 +5,8 @@
  * types used by the Graphile plugin to auto-provision S3 buckets when
  * bucket rows are created via GraphQL mutations.
  */
-import type { StorageConnectionConfig, StorageProvider, BucketAccessType, ProvisionResult } from '@constructive-io/bucket-provisioner';
-export type { StorageConnectionConfig, StorageProvider, BucketAccessType, ProvisionResult };
+import type { BucketAccessType, ProvisionResult, StorageConnectionConfig, StorageProvider } from '@constructive-io/bucket-provisioner';
+export type { BucketAccessType, ProvisionResult, StorageConnectionConfig, StorageProvider };
 /**
  * S3 connection configuration or a lazy getter that returns it on first use.
  *