pilotswarm-sdk 0.2.0 → 0.2.2

package/dist/duroxide-schema-migration.js

@@ -0,0 +1,122 @@
+const DEFAULT_LOCK_KEY = 0x50534458; // P S D X
+function quoteIdent(identifier) {
+    return `"${identifier.replace(/"/g, "\"\"")}"`;
+}
+function quoteLiteral(value) {
+    return `'${value.replace(/'/g, "''")}'`;
+}
+function assertSafeSchemaName(name, label) {
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name)) {
+        throw new Error(`${label} must be a simple PostgreSQL identifier, got ${JSON.stringify(name)}`);
+    }
+}
+async function schemaExists(client, schema) {
+    const { rows } = await client.query("SELECT EXISTS (SELECT 1 FROM pg_namespace WHERE nspname = $1) AS exists", [schema]);
+    return Boolean(rows[0]?.exists);
+}
+async function installLegacySchemaGuard(client, opts) {
+    const target = quoteIdent(opts.targetSchema);
+    const guardFunction = quoteIdent(`${opts.guardName}_fn`);
+    const guardName = quoteIdent(opts.guardName);
+    const blockedRole = opts.blockedRole;
+    if (!blockedRole) {
+        throw new Error("Cannot install legacy schema guard without blockedRole (PilotSwarm runtime DB role)");
+    }
+    const blockedRoleClause = `AND current_user = ${quoteLiteral(blockedRole)}`;
+    await client.query(`
+CREATE OR REPLACE FUNCTION ${target}.${guardFunction}()
+RETURNS event_trigger
+LANGUAGE plpgsql
+AS $$
+DECLARE
+    cmd record;
+BEGIN
+    FOR cmd IN SELECT * FROM pg_event_trigger_ddl_commands() LOOP
+        IF cmd.command_tag = 'CREATE SCHEMA'
+           AND cmd.object_type = 'schema'
+           AND cmd.object_identity = ${quoteLiteral(opts.legacySchema)}
+           ${blockedRoleClause}
+        THEN
+            RAISE EXCEPTION 'PilotSwarm legacy duroxide schema % is blocked; use ${opts.targetSchema}', cmd.object_identity;
+        END IF;
+    END LOOP;
+END;
+$$;
+`);
+    await client.query(`DROP EVENT TRIGGER IF EXISTS ${guardName}`);
+    await client.query(`
+CREATE EVENT TRIGGER ${guardName}
+ON ddl_command_end
+WHEN TAG IN ('CREATE SCHEMA')
+EXECUTE FUNCTION ${target}.${guardFunction}();
+`);
+}
+export async function migrateLegacyDuroxideSchema(pool, options = {}) {
+    const legacySchema = options.legacySchema ?? "duroxide";
+    const targetSchema = options.targetSchema ?? "ps_duroxide";
+    const guardName = options.guardName ?? "pilotswarm_block_legacy_duroxide_schema";
+    const lockKey = options.lockKey ?? DEFAULT_LOCK_KEY;
+    assertSafeSchemaName(legacySchema, "legacySchema");
+    assertSafeSchemaName(targetSchema, "targetSchema");
+    assertSafeSchemaName(guardName, "guardName");
+    if (legacySchema === targetSchema) {
+        throw new Error("legacySchema and targetSchema must differ");
+    }
+    const client = await pool.connect();
+    let shouldInstallGuard = false;
+    let result;
+    try {
+        await client.query("BEGIN");
+        await client.query("SELECT pg_advisory_xact_lock($1)", [lockKey]);
+        const legacyExists = await schemaExists(client, legacySchema);
+        const targetExists = await schemaExists(client, targetSchema);
+        if (!legacyExists && targetExists) {
+            await client.query("COMMIT");
+            shouldInstallGuard = Boolean(options.installCreateSchemaGuard);
+            result = { migrated: false, skippedReason: "already-migrated", legacySchema, targetSchema, guardInstalled: false };
+            return await maybeInstallGuard(client, result, shouldInstallGuard, options, guardName);
+        }
+        if (!legacyExists) {
+            await client.query("COMMIT");
+            return { migrated: false, skippedReason: "legacy-missing", legacySchema, targetSchema, guardInstalled: false };
+        }
+        if (targetExists) {
+            throw new Error(`Cannot migrate ${legacySchema} to ${targetSchema}: target schema already exists`);
+        }
+        await client.query(`ALTER SCHEMA ${quoteIdent(legacySchema)} RENAME TO ${quoteIdent(targetSchema)}`);
+        await client.query("COMMIT");
+        shouldInstallGuard = Boolean(options.installCreateSchemaGuard);
+        result = { migrated: true, legacySchema, targetSchema, guardInstalled: false };
+        return await maybeInstallGuard(client, result, shouldInstallGuard, options, guardName);
+    }
+    catch (err) {
+        await client.query("ROLLBACK").catch(() => { });
+        throw err;
+    }
+    finally {
+        client.release();
+    }
+}
+async function maybeInstallGuard(client, result, shouldInstallGuard, options, guardName) {
+    if (!shouldInstallGuard || result.skippedReason === "legacy-missing")
+        return result;
+    try {
+        await client.query("BEGIN");
+        await installLegacySchemaGuard(client, {
+            legacySchema: result.legacySchema,
+            targetSchema: result.targetSchema,
+            guardName,
+            blockedRole: options.blockedRole,
+        });
+        await client.query("COMMIT");
+        return { ...result, guardInstalled: true };
+    }
+    catch (err) {
+        await client.query("ROLLBACK").catch(() => { });
+        if (options.requireCreateSchemaGuard) {
+            throw new Error(`Duroxide schema migration completed but legacy schema guard installation failed: ${err?.message ?? String(err)}`);
+        }
+        return { ...result, guardInstalled: false, guardError: err?.message ?? String(err) };
+    }
+}
+//# sourceMappingURL=duroxide-schema-migration.js.map

package/dist/duroxide-schema-migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"duroxide-schema-migration.js","sourceRoot":"","sources":["../src/duroxide-schema-migration.ts"],"names":[],"mappings":"AAmBA,MAAM,gBAAgB,GAAG,UAAU,CAAC,CAAC,UAAU;AAE/C,SAAS,UAAU,CAAC,UAAkB;IAClC,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC;AACnD,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AAC5C,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAE,KAAa;IACrD,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gDAAgD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpG,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,MAAW,EAAE,MAAc;IACnD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,yEAAyE,EACzE,CAAC,MAAM,CAAC,CACX,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,MAAW,EAAE,IAKpD;IACG,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,IAAI,CAAC,SAAS,KAAK,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACrC,IAAI,CAAC,WAAW,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,iBAAiB,GAAG,sBAAsB,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;IAE5E,MAAM,MAAM,CAAC,KAAK,CAAC;6BACM,MAAM,IAAI,aAAa;;;;;;;;;;uCAUb,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC;aACzD,iBAAiB;;mFAEqD,IAAI,CAAC,YAAY;;;;;CAKnG,CAAC,CAAC;IACC,MAAM,MAAM,CAAC,KAAK,CAAC,gCAAgC,SAAS,EAAE,CAAC,CAAC;IAChE,MAAM,MAAM,CAAC,KAAK,CAAC;uBACA,SAAS;;;mBAGb,MAAM,IAAI,aAAa;CACzC,CAAC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAAS,EAAE,UAA0C,EAAE;IACrG,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,UAAU,CAAC;IACxD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,aAAa,CAAC;IAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,yCAAyC,CAAC;IACjF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC;IAEpD,oBAAoB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACnD,oBAAoB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACnD,oBAAoB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC7C,IAAI,YAAY,KAAK,YAAY,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,IAAI,MAAiD,CAAC;IACtD,IAAI,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAElE,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAE9D,IAAI,CAAC,YAAY,IAAI,YAAY,EAAE,CAAC;YAChC,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;YAC/D,MAAM,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;YACnH,OAAO,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;QACnH,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,kBAAkB,YAAY,OAAO,YAAY,gCAAgC,CAAC,CAAC;QACvG,CAAC;QAED,MAAM,MAAM,CAAC,KAAK,CAAC,gBAAgB,UAAU,CAAC,YAAY,CAAC,cAAc,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAErG,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7B,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QAC/D,MAAM,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;QAC/E,OAAO,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC3F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,GAAG,CAAC;IACd,CAAC;YAAS,CAAC;QACP,MAAM,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC5B,MAAW,EACX,MAAqC,EACrC,kBAA2B,EAC3B,OAAuC,EACvC,SAAiB;IAEjB,IAAI,CAAC,kBAAkB,IAAI,MAAM,CAAC,aAAa,KAAK,gBAAgB;QAAE,OAAO,MAAM,CAAC;IACpF,IAAI,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,wBAAwB,CAAC,MAAM,EAAE;YACnC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,SAAS;YACT,WAAW,EAAE,OAAO,CAAC,WAAW;SACnC,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC/C,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACX,oFAAoF,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CACpH,CAAC;QACN,CAAC;QACD,OAAO,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACzF,CAAC;AACL,CAAC"}

package/dist/facts-migrations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"facts-migrations.d.ts","sourceRoot":"","sources":["../src/facts-migrations.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEvD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,EAAE,CAuBjE"}
+{"version":3,"file":"facts-migrations.d.ts","sourceRoot":"","sources":["../src/facts-migrations.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEvD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,EAAE,CAqDjE"}