slotlock 0.3.0 → 0.5.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (46) hide show
  1. package/CHANGELOG.md +265 -0
  2. package/README.md +226 -17
  3. package/agent-server.d.ts +51 -8
  4. package/agent-server.js +478 -36
  5. package/agent-store-backend.d.ts +6 -0
  6. package/agent-store-backend.js +771 -30
  7. package/application-api.d.ts +22 -1
  8. package/application-api.js +412 -3
  9. package/booking-rules.d.ts +84 -0
  10. package/booking-rules.js +149 -0
  11. package/config.d.ts +20 -1
  12. package/config.js +33 -0
  13. package/dashboard.d.ts +61 -5
  14. package/dashboard.js +995 -139
  15. package/ddl.d.ts +5 -5
  16. package/ddl.js +591 -5
  17. package/engine.d.ts +5 -0
  18. package/engine.js +7 -4
  19. package/event-feed.d.ts +178 -0
  20. package/event-feed.js +447 -0
  21. package/index.d.ts +8 -2
  22. package/index.js +6 -1
  23. package/interop.d.ts +117 -0
  24. package/interop.js +356 -0
  25. package/maintenance.d.ts +14 -2
  26. package/maintenance.js +35 -3
  27. package/mcp-app.d.ts +7 -1
  28. package/mcp-app.js +259 -40
  29. package/metrics.d.ts +24 -0
  30. package/metrics.js +167 -0
  31. package/openapi.json +8346 -3400
  32. package/package.json +1 -1
  33. package/rate-limit.d.ts +10 -1
  34. package/rate-limit.js +25 -2
  35. package/rest-api.d.ts +22 -0
  36. package/rest-api.js +160 -15
  37. package/self-host.d.ts +26 -3
  38. package/self-host.js +316 -19
  39. package/slotlock-manifest.schema.json +1 -0
  40. package/slotlock.manifest.json +2 -1
  41. package/store.d.ts +317 -8
  42. package/store.js +1005 -89
  43. package/types.d.ts +87 -0
  44. package/types.js +0 -2
  45. package/webhooks.d.ts +91 -0
  46. package/webhooks.js +300 -0
package/ddl.d.ts CHANGED
@@ -41,21 +41,21 @@ export declare const SLOTLOCK_SCHEMA_TABLES: readonly ["schema_version"];
41
41
  /** The SECURITY DEFINER function through which a server reads the version it is serving. */
42
42
  export declare const SLOTLOCK_SCHEMA_FUNCTIONS: readonly ["slotlock.installed_schema_version()"];
43
43
  /** The table of suspended tenants: they may read, and write nothing (store.ts withTenant). */
44
- export declare const SLOTLOCK_TENANT_ADMIN_TABLES: readonly ["tenant_suspensions"];
44
+ export declare const SLOTLOCK_TENANT_ADMIN_TABLES: readonly ["tenant_suspensions", "webhook_tenants", "rate_buckets"];
45
45
  /**
46
46
  * The SECURITY DEFINER functions through which a server checks a tenant's suspension and erases a
47
47
  * tenant, by signature.
48
48
  */
49
- export declare const SLOTLOCK_TENANT_ADMIN_FUNCTIONS: readonly ["slotlock.tenant_suspended(text)", "slotlock.erase_tenant(text)"];
49
+ export declare const SLOTLOCK_TENANT_ADMIN_FUNCTIONS: readonly ["slotlock.tenant_suspended(text)", "slotlock.erase_tenant(text)", "slotlock.register_webhook_tenant(text)", "slotlock.webhook_tenants(text)", "slotlock.unregister_webhook_tenant(text)", "slotlock.take_rate_token(text, double precision, double precision)"];
50
50
  /**
51
51
  * Functions only the deployment role runs: suspending and lifting a suspension. No other role is
52
52
  * granted them, so a serving role cannot lift a suspension.
53
53
  */
54
54
  export declare const SLOTLOCK_OPERATOR_FUNCTIONS: readonly ["slotlock.suspend_tenant(text, text)", "slotlock.unsuspend_tenant(text)"];
55
55
  /** Every SECURITY DEFINER function the serving role may execute, by signature. */
56
- export declare const SLOTLOCK_DEFINER_FUNCTIONS: readonly ("slotlock.authenticate_api_key(bytea)" | "slotlock.create_api_key(text, text, text, bytea, text[], timestamptz, text)" | "slotlock.dashboard_session_ended(bytea, timestamptz)" | "slotlock.erase_api_keys(text)" | "slotlock.erase_tenant(text)" | "slotlock.installed_schema_version()" | "slotlock.list_api_keys(text)" | "slotlock.revoke_api_key(text, uuid)" | "slotlock.rotate_api_key(text, uuid, text, bytea)" | "slotlock.tenant_suspended(text)" | "slotlock.use_dashboard_token(text, bytea, timestamptz, bytea)")[];
56
+ export declare const SLOTLOCK_DEFINER_FUNCTIONS: readonly ("slotlock.authenticate_api_key(bytea)" | "slotlock.create_api_key(text, text, text, bytea, text[], timestamptz, text)" | "slotlock.dashboard_session_ended(bytea, timestamptz)" | "slotlock.erase_api_keys(text)" | "slotlock.erase_tenant(text)" | "slotlock.installed_schema_version()" | "slotlock.list_api_keys(text)" | "slotlock.register_webhook_tenant(text)" | "slotlock.revoke_api_key(text, uuid)" | "slotlock.rotate_api_key(text, uuid, text, bytea)" | "slotlock.take_rate_token(text, double precision, double precision)" | "slotlock.tenant_suspended(text)" | "slotlock.unregister_webhook_tenant(text)" | "slotlock.use_dashboard_token(text, bytea, timestamptz, bytea)" | "slotlock.webhook_tenants(text)")[];
57
57
  /** Tables no role but their owner reads or writes, reached only through SLOTLOCK_DEFINER_FUNCTIONS. */
58
- export declare const SLOTLOCK_DEFINER_TABLES: readonly ("api_key_retired_digests" | "api_keys" | "dashboard_tokens" | "schema_version" | "tenant_suspensions")[];
58
+ export declare const SLOTLOCK_DEFINER_TABLES: readonly ("api_key_retired_digests" | "api_keys" | "dashboard_tokens" | "rate_buckets" | "schema_version" | "tenant_suspensions" | "webhook_tenants")[];
59
59
  /**
60
60
  * The advisory lock every server transaction for a tenant holds shared (store.ts withTenant), and
61
61
  * suspension and erasure take exclusively, keyed by this text's hashtextextended(…, 0).
@@ -76,7 +76,7 @@ export declare const SLOTLOCK_TENANT_CONTEXT_SETTING = "slotlock.tenant_ref";
76
76
  * `slotlock.rls_policy_contracts` and `slotlock.deployment_lifted_row_security` are
77
77
  * deployment-only and deliberately absent.
78
78
  */
79
- export declare const SLOTLOCK_TENANT_TABLES: readonly ["resources", "reservations", "reservation_tombstones", "reservation_conflict_archive", "calendar_events", "calendar_event_attendees", "calendar_event_reminders", "calendar_event_exceptions", "calendar_event_occurrences", "calendar_event_tombstones", "calendar_event_commands", "calendar_coverage", "hold_commands"];
79
+ export declare const SLOTLOCK_TENANT_TABLES: readonly ["resources", "reservations", "reservation_tombstones", "reservation_conflict_archive", "calendar_events", "calendar_event_attendees", "calendar_event_reminders", "calendar_event_exceptions", "calendar_event_occurrences", "calendar_event_tombstones", "calendar_event_commands", "calendar_coverage", "hold_commands", "outbox", "outbox_pruned", "webhook_endpoints", "waitlist_entries"];
80
80
  /**
81
81
  * Build the grants for the application role: USAGE on the `slotlock` schema, DML on the store's
82
82
  * tables and EXECUTE on the API key and dashboard functions. Nothing else: no ownership, DDL,