okmodel 0.5.0 → 0.6.0

package/dist/shared/{8bwbwy8h.js → qq3899ht.js}

@@ -1,22 +1,25 @@
+import {
+  policyObject
+} from "./bdk4sty6.js";
 import {
   functionObject,
   triggerObject
-} from "./9x25fxhc.js";
+} from "./y34a8714.js";
 import {
   viewObject,
   materializedViewObject,
   materializedViewIndex
-} from "./y005b761.js";
+} from "./zy8r7qvz.js";
 import {
   extensionObject
-} from "./8ktwd3rh.js";
+} from "./r3j8s5y0.js";
 import {
   dependencyOrder,
   catalog,
   enumType,
   domainType,
   isDomain
-} from "./g7ez901n.js";
+} from "./ywspezzx.js";
 import {
   canonicalJson,
   staticNamespace2,
@@ -35,7 +38,7 @@ import {
   normaliseEdges,
   compareText,
   assertProvenance
-} from "./t4tbsy9h.js";
+} from "./358zsv4r.js";
 import {
   OWNERS2,
   BUILT_KINDS2,
@@ -230,9 +233,28 @@ function catalogHash2(source) {
   return hash;
 }
 function startupCatalog2(source) {
-  if (!source.objects.some(isPrivilege))
+  let privileges = false;
+  let foreign = false;
+  for (const object of source.objects) {
+    if (isPrivilege(object))
+      privileges = true;
+    else if (object.owner !== "managed")
+      foreign = true;
+    if (privileges && foreign)
+      break;
+  }
+  if (!privileges && !foreign)
     return source;
-  return { version: source.version, objects: source.objects.filter((item) => !isPrivilege(item)) };
+  return {
+    version: source.version,
+    objects: source.objects.flatMap((item) => {
+      if (isPrivilege(item))
+        return [];
+      if (item.owner === "managed")
+        return [item];
+      return [{ ...item, owner: "managed" }];
+    })
+  };
 }
 function startupHash2(source) {
   return catalogHash2(startupCatalog2(source));
@@ -241,12 +263,13 @@ function isPrivilege(object) {
   return object.kind === "role" || object.kind === "grant" || object.kind === "defaultPrivilege";
 }
 function loadTrustedCatalog2(text, hash) {
-  if (sha2562(text) !== hash) {
+  const canonical = catalogFileText2(text);
+  if (sha2562(canonical) !== hash) {
     catalogError2("OKM1027", "Catalog hash does not match the build artifact.");
   }
   let parsed;
   try {
-    parsed = JSON.parse(text);
+    parsed = JSON.parse(canonical);
   } catch {
     catalogError2("OKM1027", "Catalog text is not valid JSON.");
   }
@@ -260,14 +283,25 @@ function loadTrustedCatalog2(text, hash) {
     version: CATALOG_VERSION2,
     objects: parsed.objects
   };
-  serializedText.set(loaded, text);
+  serializedText.set(loaded, canonical);
   serializedHash.set(loaded, hash);
   return loaded;
 }
+function catalogFileText2(text, label = "Catalog text") {
+  if (text.includes("\x00")) {
+    catalogError2("OKM1027", `${label} is UTF-16. Save the file as UTF-8.`, {
+      fieldReason: "utf16",
+      fix: { summary: "Save the file as UTF-8. This version does not read UTF-16." }
+    });
+  }
+  const withoutBom = text.charCodeAt(0) === 65279 ? text.slice(1) : text;
+  return withoutBom.replaceAll("\r", "");
+}
 function parseCatalog2(text) {
+  const canonical = catalogFileText2(text);
   let parsed;
   try {
-    parsed = JSON.parse(text);
+    parsed = JSON.parse(canonical);
   } catch {
     catalogError2("OKM1027", "Catalog text is not valid JSON.");
   }
@@ -331,6 +365,8 @@ function rewriteRenamed(object, change, fromKey, toIdentity) {
     case "grant":
     case "defaultPrivilege":
       return retargeted(object, dependencies);
+    case "policy":
+      return rewritePolicyColumn(object, change, dependencies);
     case "trigger": {
       const local = sameRef2(object.identity.parent, change.parent);
       return triggerObject({
@@ -476,7 +512,23 @@ function rewriteView(object, dependencies, query) {
       ...object.definition.refresh !== undefined ? { refresh: object.definition.refresh } : {}
     });
   }
-  return viewObject(input);
+  return viewObject({
+    ...input,
+    ...object.definition.securityInvoker === true ? { securityInvoker: true } : {}
+  });
+}
+function rewritePolicyColumn(object, change, dependencies) {
+  const local = sameRef2(object.identity.parent, change.parent);
+  return policyObject({
+    parent: object.identity.parent,
+    name: object.identity.name,
+    command: object.definition.command,
+    expression: rewriteExpr(object.definition.expression, change, local),
+    force: object.definition.force,
+    owner: object.owner,
+    provenance: object.provenance,
+    dependencies
+  });
 }
 function rewriteExpr(text, change, active) {
   if (!active)
@@ -619,6 +671,20 @@ function rewriteTableName(object, change, fromKey, toIdentity, source) {
       ...object.definition.when !== undefined ? { when: rewriteExpr(object.definition.when, { from: change.from, to: change.to }, local) } : {}
     });
   }
+  if (object.kind === "policy") {
+    const parent = movedParent(object.identity.parent, change);
+    const local = parent.name !== object.identity.parent.name;
+    return policyObject({
+      parent,
+      name: object.identity.name,
+      command: object.definition.command,
+      expression: rewriteExpr(object.definition.expression, { from: change.from, to: change.to }, local),
+      force: object.definition.force,
+      owner: object.owner,
+      provenance: object.provenance,
+      dependencies
+    });
+  }
   return assertNever(object);
 }
 function movedParent(parent, change) {
@@ -837,7 +903,14 @@ function definitionToJson(object) {
           dataType: column.dataType,
           name: column.name
         })),
-        query: object.definition.query
+        query: object.definition.query,
+        ...object.definition.securityInvoker === true ? { securityInvoker: true } : {}
+      };
+    case "policy":
+      return {
+        command: object.definition.command,
+        expression: object.definition.expression,
+        force: object.definition.force
       };
     case "materializedView":
       return {
@@ -861,6 +934,8 @@ function parseObject(value) {
   const record = requireRecord(value, "catalog object");
   rejectUnknown(record, ["definition", "dependencies", "identity", "kind", "owner", "provenance"], "catalog object");
   const kind = requireString(record.kind, "kind");
+  if (kind === "policy")
+    return parsePolicy(record);
   if (!isBuiltKind(kind)) {
     catalogError2("OKM1020", `Kind ${kind} is not built yet. Built kinds are ${BUILT_KINDS2.join(", ")}.`);
   }
@@ -945,7 +1020,7 @@ function parseIndex(identity, definition, owner, provenance, dependencies) {
     catalogError2("OKM1020", `Index object identity is ${identity.kind}, not an index.`);
   }
   rejectUnknown(definition, ["columns", "expression", "nameKey", "predicate", "unique"], "index definition");
-  return index3({
+  const shared = {
     parent: identity.parent,
     name: identity.name,
     nameKey: requireString(definition.nameKey, "name key"),
@@ -956,7 +1031,11 @@ function parseIndex(identity, definition, owner, provenance, dependencies) {
     dependencies,
     ...definition.predicate === undefined ? {} : { predicate: requireString(definition.predicate, "predicate") },
     ...definition.expression === undefined ? {} : { expression: requireString(definition.expression, "expression") }
-  });
+  };
+  const onView = dependencies.some((edge) => edge.kind === "view" || edge.kind === "materializedView");
+  if (onView)
+    return materializedViewIndex(shared);
+  return index3(shared);
 }
 function parseConstraint(identity, definition, owner, provenance, dependencies) {
   if (identity.kind !== "constraint") {
@@ -1140,7 +1219,7 @@ function parseView(kind, identity, definition, owner, provenance, dependencies)
   if (identity.kind !== kind) {
     catalogError2("OKM1020", `View object identity is ${identity.kind}, not a ${kind}.`);
   }
-  const fields = kind === "view" ? ["columns", "query"] : ["columns", "query", "refresh"];
+  const fields = kind === "view" ? ["columns", "query", "securityInvoker"] : ["columns", "query", "refresh"];
   rejectUnknown(definition, fields, "view definition");
   const columns = parseViewColumns(definition.columns);
   const query = requireString(definition.query, "view query");
@@ -1163,7 +1242,38 @@ function parseView(kind, identity, definition, owner, provenance, dependencies)
       ...refresh === "concurrently" ? { refresh: "concurrently" } : {}
     });
   }
-  return viewObject(input);
+  if (definition.securityInvoker !== undefined && definition.securityInvoker !== true) {
+    catalogError2("OKM1020", `View ${identity.name} securityInvoker must be true when set.`);
+  }
+  return viewObject({
+    ...input,
+    ...definition.securityInvoker === true ? { securityInvoker: true } : {}
+  });
+}
+function parsePolicy(record) {
+  const identity = parseIdentity(record.identity);
+  if (identity.kind !== "policy") {
+    catalogError2("OKM1020", `Policy object identity is ${identity.kind}, not a policy.`);
+  }
+  const owner = parseOwner(record.owner);
+  const provenance = parseProvenance(record.provenance);
+  const dependencies = parseDependencies(record.dependencies);
+  const definition = requireRecord(record.definition, "definition");
+  rejectUnknown(definition, ["command", "expression", "force"], "policy definition");
+  const command = requireString(definition.command, "policy command");
+  if (command !== "all" && command !== "select") {
+    catalogError2("OKM1020", `Policy ${identity.name} command is not supported.`);
+  }
+  return policyObject({
+    parent: identity.parent,
+    name: identity.name,
+    command,
+    expression: requireString(definition.expression, "policy expression"),
+    force: requireBoolean(definition.force, "policy force"),
+    owner,
+    provenance,
+    dependencies
+  });
 }
 function parseViewColumns(value) {
   if (!Array.isArray(value))
@@ -1455,4 +1565,4 @@ function assertNeverKind(value) {
   return catalogError2("OKM1020", `Unexpected kind ${JSON.stringify(value)}.`);
 }
 
-export { roleObject, grantObject, defaultPrivilegeObject, creationOrder2, renameColumn2, renameTable2, serializeCatalog2, catalogHash2, startupCatalog2, startupHash2, loadTrustedCatalog2, parseCatalog2 };
+export { roleObject, grantObject, defaultPrivilegeObject, creationOrder2, renameColumn2, renameTable2, serializeCatalog2, catalogHash2, startupCatalog2, startupHash2, loadTrustedCatalog2, catalogFileText2, parseCatalog2 };

package/dist/shared/{dxjp14rk.js → r11n8grd.js}

@@ -3,10 +3,10 @@ import {
   readHandle,
   readCall,
   attachHttp
-} from "./bt9sfq0z.js";
+} from "./j60w0dvr.js";
 import {
   fail
-} from "./qgvt8nx1.js";
+} from "./2z7wv5tj.js";
 import {
   OkmError2,
   throwNamed2

package/dist/shared/r1fdd0f6.js

@@ -0,0 +1,19 @@
+import {
+  checkout2,
+  describe2,
+  stream2,
+  watchReserved2,
+  holdCheckout2,
+  holdListener2,
+  watchQuery2
+} from "./q3j1tq7a.js";
+import"./wkme6tep.js";
+export {
+  checkout2 as checkout,
+  describe2 as describe,
+  holdCheckout2 as holdCheckout,
+  holdListener2 as holdListener,
+  stream2 as stream,
+  watchQuery2 as watchQuery,
+  watchReserved2 as watchReserved
+};

package/dist/shared/{8ktwd3rh.js → r3j8s5y0.js}

@@ -1,7 +1,7 @@
 import {
   normaliseEdges,
   assertProvenance
-} from "./t4tbsy9h.js";
+} from "./358zsv4r.js";
 import {
   assertIdentifier2
 } from "./nfzc5z0w.js";

package/dist/shared/rhs3xe4k.js

@@ -0,0 +1,7 @@
+// src/dialects/pg/path-endpoint.ts
+var pathEndpoint = Symbol("okmodel.pathEndpoint");
+function markPathEndpoint(table) {
+  return Object.assign(table, { [pathEndpoint]: true });
+}
+
+export { pathEndpoint, markPathEndpoint };

package/dist/shared/{jsd07prz.js → rpycarcr.js}

@@ -1,11 +1,11 @@
-import {
-  callerLocation,
-  withLocation
-} from "./k7dwkhvq.js";
 import {
   definition,
   unavailable
 } from "./tmbdywx0.js";
+import {
+  callerLocation,
+  withLocation
+} from "./y6jdds7g.js";
 import {
   OkmError2,
   throwNamed2
@@ -29,7 +29,7 @@ function openFilters(table, relations, spec, hiddenFields) {
   }
   return {
     parse(query) {
-      return import("./0v1g424p.js").then((mod) => mod.parseQuery(allow, sort, query));
+      return import("./pz6rj8ay.js").then((mod) => mod.parseQuery(allow, sort, query, nested));
     }
   };
 }
@@ -38,7 +38,7 @@ function deny(hiddenFields, table, field) {
     return;
   throw new OkmError2("OKM1123", `Field ${table}.${field} is hidden.`, {
     fix: {
-      summary: "Remove the hidden field from the allowlist. Hidden fields stay out of caller filters and sorts."
+      summary: "Remove this hidden field from the allowlist. Hidden fields stay out of caller filter or sort."
     }
   });
 }

package/dist/shared/{xsq7v6wp.js → sbdme3vy.js}

@@ -1,15 +1,18 @@
 import {
   runWrite
 } from "./n4jqhpqz.js";
+import {
+  refuseUncancellableTimeout
+} from "./b4v57v3x.js";
 import {
   withHttp,
   settleCall
-} from "./bt9sfq0z.js";
+} from "./j60w0dvr.js";
 import {
   rejectKeys,
   isRecord,
   fail
-} from "./qgvt8nx1.js";
+} from "./2z7wv5tj.js";
 import {
   OkmError2
 } from "./52szzakm.js";
@@ -28,6 +31,12 @@ async function batch(session, ops, options, replica) {
     if (!isRecord(record))
       fail("OKM1121", "batch options must be an object.");
     rejectKeys(record, ["signal", "timeout"], "batch");
+    await refuseUncancellableTimeout(session.pool, typeof record["timeout"] === "number" ? record["timeout"] : undefined);
+    for (const op of ops) {
+      if (typeof op === "object" && op !== null && op["~refresh"] === true) {
+        fail("OKM1121", "batch does not take refresh(). Await refresh() on its own. It is one statement and cannot share the batch.");
+      }
+    }
     const prepared = [];
     for (const op of ops) {
       const plan = typeof op === "object" && op !== null ? op["~plan"] : undefined;
@@ -35,6 +44,9 @@ async function batch(session, ops, options, replica) {
         fail("OKM1121", "batch takes write operations: insert, update, delete, and archive. Pass them without awaiting.");
       }
       const item = await plan();
+      if (item.checked === "parent") {
+        throw new OkmError2("OKM1705", "batch does not take an update that sets a path column. The parent is checked in the statement, and a batch cannot report that after it commits. Use update({ where, set }) inside tx().", { fix: { summary: "Use update({ where, set }) inside tx()." } });
+      }
       if (item.checked !== undefined) {
         fail("OKM1121", item.checked === "restore" ? "batch does not take restore: it is refused while its parent is archived, and a batch cannot report that after it commits. Use tx()." : "batch does not take a write with expect: the count is checked after the statement ran, and a batch cannot report that after it commits. Use tx().");
       }