graphile-bucket-provisioner-plugin 1.9.3 → 1.10.0

package/esm/plugin.js

@@ -105,6 +105,28 @@ async function resolveStorageModule(pgClient, databaseId, ownerId) {
     }
     return null;
 }
+/**
+ * Normalize the recorded physical coordinate at the DB boundary.
+ *
+ * A bucket row either carries a recorded coordinate or it does not; SQL nulls
+ * and absent columns both mean "never provisioned". Collapsing them here is
+ * the single place that shape is interpreted — callers branch on `string`
+ * vs `null` and never coalesce a bucket name into existence.
+ */
+function storedPhysicalName(row) {
+    return row.physical_name == null ? null : row.physical_name;
+}
+/**
+ * Record the physical S3 bucket name on the source bucket row.
+ *
+ * Runs in the system lane (`withPgClient(null, ...)`) — server bookkeeping,
+ * RLS-independent. Idempotent via the `physical_name IS NULL` guard so a
+ * re-provision never clobbers an already-recorded coordinate.
+ */
+async function recordPhysicalName(withPgClient, bucketsTable, bucketId, physicalName) {
+    await withPgClient(null, (client) => client.query(`UPDATE ${bucketsTable} SET physical_name = $1 WHERE id = $2 AND physical_name IS NULL`, [physicalName, bucketId]));
+    log.info(`Recorded physical_name="${physicalName}" on bucket ${bucketId}`);
+}
 // --- Helpers ---
 /**
  * Resolve the connection config from the options. If the option is a lazy
@@ -174,8 +196,7 @@ function buildProvisioner(options, storageModule, effectiveOrigins) {
  * Core provisioning logic shared by both the explicit mutation and the
  * auto-provisioning hook.
  */
-async function provisionBucketForRow(pgClient, databaseId, bucketKey, bucketType, bucketAllowedOrigins, options) {
-    const s3BucketName = resolveBucketName(bucketKey, databaseId, options);
+async function provisionBucketForRow(pgClient, databaseId, bucketKey, bucketType, bucketAllowedOrigins, options, s3BucketName) {
     const accessType = bucketType;
     // Read storage module config to check for endpoint/provider/CORS overrides
     const storageModule = await resolveStorageModule(pgClient, databaseId);
@@ -198,8 +219,7 @@ async function provisionBucketForRow(pgClient, databaseId, bucketKey, bucketType
 /**
  * Update CORS on an existing S3 bucket when allowed_origins changes.
  */
-async function updateBucketCors(pgClient, databaseId, bucketKey, bucketType, bucketAllowedOrigins, options) {
-    const s3BucketName = resolveBucketName(bucketKey, databaseId, options);
+async function updateBucketCors(pgClient, databaseId, bucketKey, bucketType, bucketAllowedOrigins, options, s3BucketName) {
     const accessType = bucketType;
     const storageModule = await resolveStorageModule(pgClient, databaseId);
     const effectiveOrigins = resolveAllowedOrigins(bucketAllowedOrigins, storageModule?.allowed_origins, options.allowedOrigins);
@@ -304,11 +324,11 @@ export function createBucketProvisionerPlugin(options) {
                             const hasOwner = ownerId && storageModule.scope !== 'app';
                             const bucketsTable = QuoteUtils.quoteQualifiedIdentifier(storageModule.buckets_schema, storageModule.buckets_table);
                             const bucketResult = await pgClient.query(hasOwner
-                                ? `SELECT id, key, type, is_public, allowed_origins
+                                ? `SELECT id, key, type, is_public, allowed_origins, physical_name
                      FROM ${bucketsTable}
                      WHERE key = $1 AND owner_id = $2
                      LIMIT 1`
-                                : `SELECT id, key, type, is_public, allowed_origins
+                                : `SELECT id, key, type, is_public, allowed_origins, physical_name
                      FROM ${bucketsTable}
                      WHERE key = $1
                      LIMIT 1`, hasOwner ? [bucketKey, ownerId] : [bucketKey]);
@@ -316,8 +336,16 @@ export function createBucketProvisionerPlugin(options) {
                                 throw new Error('BUCKET_NOT_FOUND');
                             }
                             const bucket = bucketResult.rows[0];
+                            // First provision mints a name; afterwards the stored coordinate
+                            // is authoritative and the naming hook is never consulted again.
+                            const recorded = storedPhysicalName(bucket);
+                            const s3BucketName = recorded === null
+                                ? resolveBucketName(bucket.key, databaseId, options)
+                                : recorded;
                             try {
-                                const result = await provisionBucketForRow(pgClient, databaseId, bucket.key, bucket.type, bucket.allowed_origins, options);
+                                const result = await provisionBucketForRow(pgClient, databaseId, bucket.key, bucket.type, bucket.allowed_origins, options, s3BucketName);
+                                // Record the exact provisioned name on the source row.
+                                await recordPhysicalName(withPgClient, bucketsTable, bucket.id, result.bucketName);
                                 return {
                                     success: true,
                                     bucketName: result.bucketName,
@@ -331,7 +359,7 @@ export function createBucketProvisionerPlugin(options) {
                                 log.error(`Failed to provision bucket "${bucketKey}": ${err.message}`);
                                 return {
                                     success: false,
-                                    bucketName: resolveBucketName(bucket.key, databaseId, options),
+                                    bucketName: s3BucketName,
                                     accessType: bucket.type,
                                     provider: resolveConnection(options).provider,
                                     endpoint: resolveConnection(options).endpoint ?? null,
@@ -417,7 +445,17 @@ export function createBucketProvisionerPlugin(options) {
                                             log.warn('Auto-provision skipped: could not resolve database_id');
                                             return;
                                         }
-                                        await provisionBucketForRow(pgClient, databaseId, bucketInput.key, bucketInput.type, bucketInput.allowedOrigins ?? bucketInput.allowed_origins ?? null, options);
+                                        // Newly-created row has no stored coordinate yet — mint on first provision.
+                                        const result = await provisionBucketForRow(pgClient, databaseId, bucketInput.key, bucketInput.type, bucketInput.allowedOrigins ?? bucketInput.allowed_origins ?? null, options, resolveBucketName(bucketInput.key, databaseId, options));
+                                        // Record the provisioned name on the just-created row.
+                                        const storageModule = await resolveStorageModule(pgClient, databaseId);
+                                        if (storageModule) {
+                                            const bucketsTable = QuoteUtils.quoteQualifiedIdentifier(storageModule.buckets_schema, storageModule.buckets_table);
+                                            const idResult = await pgClient.query(`SELECT id FROM ${bucketsTable} WHERE key = $1 LIMIT 1`, [bucketInput.key]);
+                                            const bucketId = idResult.rows[0]?.id;
+                                            if (bucketId)
+                                                await recordPhysicalName(withPgClient, bucketsTable, bucketId, result.bucketName);
+                                        }
                                     });
                                 }
                                 else {
@@ -451,7 +489,7 @@ export function createBucketProvisionerPlugin(options) {
                                         }
                                         // Read the full bucket row (post-update) to get type + origins
                                         const bucketsTable = QuoteUtils.quoteQualifiedIdentifier(storageModule.buckets_schema, storageModule.buckets_table);
-                                        const bucketResult = await pgClient.query(`SELECT id, key, type, is_public, allowed_origins
+                                        const bucketResult = await pgClient.query(`SELECT id, key, type, is_public, allowed_origins, physical_name
                        FROM ${bucketsTable}
                        WHERE key = $1
                        LIMIT 1`, [patchKey]);
@@ -460,7 +498,13 @@ export function createBucketProvisionerPlugin(options) {
                                             return;
                                         }
                                         const bucket = bucketResult.rows[0];
-                                        await updateBucketCors(pgClient, databaseId, bucket.key, bucket.type, bucket.allowed_origins, options);
+                                        // CORS applies to the recorded physical bucket; if the row was
+                                        // never provisioned there is nothing to update yet, so mint the
+                                        // conventional name the first provision would use.
+                                        const recorded = storedPhysicalName(bucket);
+                                        await updateBucketCors(pgClient, databaseId, bucket.key, bucket.type, bucket.allowed_origins, options, recorded === null
+                                            ? resolveBucketName(bucket.key, databaseId, options)
+                                            : recorded);
                                     });
                                 }
                             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "graphile-bucket-provisioner-plugin",
-  "version": "1.9.3",
+  "version": "1.10.0",
   "description": "Bucket provisioning plugin for PostGraphile v5 — auto-provisions S3 buckets on bucket table mutations",
   "author": "Constructive <developers@constructive.io>",
   "homepage": "https://github.com/constructive-io/constructive",
@@ -57,5 +57,5 @@
     "@types/node": "^22.19.11",
     "makage": "^0.3.0"
   },
-  "gitHead": "c20b6be96b39bf71c0e2df0f4b51e05deacd006b"
+  "gitHead": "c438821362ceaf70b2a20d74ecf25ad4191c1748"
 }

package/plugin.js

@@ -109,6 +109,28 @@ async function resolveStorageModule(pgClient, databaseId, ownerId) {
     }
     return null;
 }
+/**
+ * Normalize the recorded physical coordinate at the DB boundary.
+ *
+ * A bucket row either carries a recorded coordinate or it does not; SQL nulls
+ * and absent columns both mean "never provisioned". Collapsing them here is
+ * the single place that shape is interpreted — callers branch on `string`
+ * vs `null` and never coalesce a bucket name into existence.
+ */
+function storedPhysicalName(row) {
+    return row.physical_name == null ? null : row.physical_name;
+}
+/**
+ * Record the physical S3 bucket name on the source bucket row.
+ *
+ * Runs in the system lane (`withPgClient(null, ...)`) — server bookkeeping,
+ * RLS-independent. Idempotent via the `physical_name IS NULL` guard so a
+ * re-provision never clobbers an already-recorded coordinate.
+ */
+async function recordPhysicalName(withPgClient, bucketsTable, bucketId, physicalName) {
+    await withPgClient(null, (client) => client.query(`UPDATE ${bucketsTable} SET physical_name = $1 WHERE id = $2 AND physical_name IS NULL`, [physicalName, bucketId]));
+    log.info(`Recorded physical_name="${physicalName}" on bucket ${bucketId}`);
+}
 // --- Helpers ---
 /**
  * Resolve the connection config from the options. If the option is a lazy
@@ -178,8 +200,7 @@ function buildProvisioner(options, storageModule, effectiveOrigins) {
  * Core provisioning logic shared by both the explicit mutation and the
  * auto-provisioning hook.
  */
-async function provisionBucketForRow(pgClient, databaseId, bucketKey, bucketType, bucketAllowedOrigins, options) {
-    const s3BucketName = resolveBucketName(bucketKey, databaseId, options);
+async function provisionBucketForRow(pgClient, databaseId, bucketKey, bucketType, bucketAllowedOrigins, options, s3BucketName) {
     const accessType = bucketType;
     // Read storage module config to check for endpoint/provider/CORS overrides
     const storageModule = await resolveStorageModule(pgClient, databaseId);
@@ -202,8 +223,7 @@ async function provisionBucketForRow(pgClient, databaseId, bucketKey, bucketType
 /**
  * Update CORS on an existing S3 bucket when allowed_origins changes.
  */
-async function updateBucketCors(pgClient, databaseId, bucketKey, bucketType, bucketAllowedOrigins, options) {
-    const s3BucketName = resolveBucketName(bucketKey, databaseId, options);
+async function updateBucketCors(pgClient, databaseId, bucketKey, bucketType, bucketAllowedOrigins, options, s3BucketName) {
     const accessType = bucketType;
     const storageModule = await resolveStorageModule(pgClient, databaseId);
     const effectiveOrigins = resolveAllowedOrigins(bucketAllowedOrigins, storageModule?.allowed_origins, options.allowedOrigins);
@@ -308,11 +328,11 @@ function createBucketProvisionerPlugin(options) {
                             const hasOwner = ownerId && storageModule.scope !== 'app';
                             const bucketsTable = quotes_1.QuoteUtils.quoteQualifiedIdentifier(storageModule.buckets_schema, storageModule.buckets_table);
                             const bucketResult = await pgClient.query(hasOwner
-                                ? `SELECT id, key, type, is_public, allowed_origins
+                                ? `SELECT id, key, type, is_public, allowed_origins, physical_name
                      FROM ${bucketsTable}
                      WHERE key = $1 AND owner_id = $2
                      LIMIT 1`
-                                : `SELECT id, key, type, is_public, allowed_origins
+                                : `SELECT id, key, type, is_public, allowed_origins, physical_name
                      FROM ${bucketsTable}
                      WHERE key = $1
                      LIMIT 1`, hasOwner ? [bucketKey, ownerId] : [bucketKey]);
@@ -320,8 +340,16 @@ function createBucketProvisionerPlugin(options) {
                                 throw new Error('BUCKET_NOT_FOUND');
                             }
                             const bucket = bucketResult.rows[0];
+                            // First provision mints a name; afterwards the stored coordinate
+                            // is authoritative and the naming hook is never consulted again.
+                            const recorded = storedPhysicalName(bucket);
+                            const s3BucketName = recorded === null
+                                ? resolveBucketName(bucket.key, databaseId, options)
+                                : recorded;
                             try {
-                                const result = await provisionBucketForRow(pgClient, databaseId, bucket.key, bucket.type, bucket.allowed_origins, options);
+                                const result = await provisionBucketForRow(pgClient, databaseId, bucket.key, bucket.type, bucket.allowed_origins, options, s3BucketName);
+                                // Record the exact provisioned name on the source row.
+                                await recordPhysicalName(withPgClient, bucketsTable, bucket.id, result.bucketName);
                                 return {
                                     success: true,
                                     bucketName: result.bucketName,
@@ -335,7 +363,7 @@ function createBucketProvisionerPlugin(options) {
                                 log.error(`Failed to provision bucket "${bucketKey}": ${err.message}`);
                                 return {
                                     success: false,
-                                    bucketName: resolveBucketName(bucket.key, databaseId, options),
+                                    bucketName: s3BucketName,
                                     accessType: bucket.type,
                                     provider: resolveConnection(options).provider,
                                     endpoint: resolveConnection(options).endpoint ?? null,
@@ -421,7 +449,17 @@ function createBucketProvisionerPlugin(options) {
                                             log.warn('Auto-provision skipped: could not resolve database_id');
                                             return;
                                         }
-                                        await provisionBucketForRow(pgClient, databaseId, bucketInput.key, bucketInput.type, bucketInput.allowedOrigins ?? bucketInput.allowed_origins ?? null, options);
+                                        // Newly-created row has no stored coordinate yet — mint on first provision.
+                                        const result = await provisionBucketForRow(pgClient, databaseId, bucketInput.key, bucketInput.type, bucketInput.allowedOrigins ?? bucketInput.allowed_origins ?? null, options, resolveBucketName(bucketInput.key, databaseId, options));
+                                        // Record the provisioned name on the just-created row.
+                                        const storageModule = await resolveStorageModule(pgClient, databaseId);
+                                        if (storageModule) {
+                                            const bucketsTable = quotes_1.QuoteUtils.quoteQualifiedIdentifier(storageModule.buckets_schema, storageModule.buckets_table);
+                                            const idResult = await pgClient.query(`SELECT id FROM ${bucketsTable} WHERE key = $1 LIMIT 1`, [bucketInput.key]);
+                                            const bucketId = idResult.rows[0]?.id;
+                                            if (bucketId)
+                                                await recordPhysicalName(withPgClient, bucketsTable, bucketId, result.bucketName);
+                                        }
                                     });
                                 }
                                 else {
@@ -455,7 +493,7 @@ function createBucketProvisionerPlugin(options) {
                                         }
                                         // Read the full bucket row (post-update) to get type + origins
                                         const bucketsTable = quotes_1.QuoteUtils.quoteQualifiedIdentifier(storageModule.buckets_schema, storageModule.buckets_table);
-                                        const bucketResult = await pgClient.query(`SELECT id, key, type, is_public, allowed_origins
+                                        const bucketResult = await pgClient.query(`SELECT id, key, type, is_public, allowed_origins, physical_name
                        FROM ${bucketsTable}
                        WHERE key = $1
                        LIMIT 1`, [patchKey]);
@@ -464,7 +502,13 @@ function createBucketProvisionerPlugin(options) {
                                             return;
                                         }
                                         const bucket = bucketResult.rows[0];
-                                        await updateBucketCors(pgClient, databaseId, bucket.key, bucket.type, bucket.allowed_origins, options);
+                                        // CORS applies to the recorded physical bucket; if the row was
+                                        // never provisioned there is nothing to update yet, so mint the
+                                        // conventional name the first provision would use.
+                                        const recorded = storedPhysicalName(bucket);
+                                        await updateBucketCors(pgClient, databaseId, bucket.key, bucket.type, bucket.allowed_origins, options, recorded === null
+                                            ? resolveBucketName(bucket.key, databaseId, options)
+                                            : recorded);
                                     });
                                 }
                             }