weave-typescript 0.51.3 → 0.53.0

package/dist/weavesql/weavedb/authorization_outbox_sql.js

@@ -0,0 +1,445 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.revokeAuthorizationGrantByTupleQuery = exports.revokeAuthorizationGrantQuery = exports.listAuthorizationGrantsForObjectQuery = exports.listAuthorizationGrantsForSubjectQuery = exports.getAuthorizationGrantQuery = exports.createAuthorizationGrantQuery = exports.requeueStaleAuthorizationOutboxEntriesQuery = exports.failAuthorizationOutboxEntryQuery = exports.completeAuthorizationOutboxEntryQuery = exports.claimAuthorizationOutboxEntriesByIDQuery = exports.claimAuthorizationOutboxEntriesQuery = exports.createAuthorizationOutboxEntryQuery = void 0;
+exports.createAuthorizationOutboxEntry = createAuthorizationOutboxEntry;
+exports.claimAuthorizationOutboxEntries = claimAuthorizationOutboxEntries;
+exports.claimAuthorizationOutboxEntriesByID = claimAuthorizationOutboxEntriesByID;
+exports.completeAuthorizationOutboxEntry = completeAuthorizationOutboxEntry;
+exports.failAuthorizationOutboxEntry = failAuthorizationOutboxEntry;
+exports.requeueStaleAuthorizationOutboxEntries = requeueStaleAuthorizationOutboxEntries;
+exports.createAuthorizationGrant = createAuthorizationGrant;
+exports.getAuthorizationGrant = getAuthorizationGrant;
+exports.listAuthorizationGrantsForSubject = listAuthorizationGrantsForSubject;
+exports.listAuthorizationGrantsForObject = listAuthorizationGrantsForObject;
+exports.revokeAuthorizationGrant = revokeAuthorizationGrant;
+exports.revokeAuthorizationGrantByTuple = revokeAuthorizationGrantByTuple;
+exports.createAuthorizationOutboxEntryQuery = `-- name: CreateAuthorizationOutboxEntry :one
+INSERT INTO weave.authorization_outbox (
+    organization_id,
+    operation,
+    tuple_user,
+    tuple_relation,
+    tuple_object
+) VALUES (
+    $1,
+    $2,
+    $3,
+    $4,
+    $5
+)
+RETURNING id, organization_id, operation, tuple_user, tuple_relation, tuple_object, status, attempt_count, next_attempt_at, last_error, processed_at, created_at, updated_at`;
+async function createAuthorizationOutboxEntry(client, args) {
+    const result = await client.query({
+        text: exports.createAuthorizationOutboxEntryQuery,
+        values: [args.organizationId, args.operation, args.tupleUser, args.tupleRelation, args.tupleObject],
+        rowMode: "array"
+    });
+    if (result.rows.length !== 1) {
+        return null;
+    }
+    const row = result.rows[0];
+    return {
+        id: row[0],
+        organizationId: row[1],
+        operation: row[2],
+        tupleUser: row[3],
+        tupleRelation: row[4],
+        tupleObject: row[5],
+        status: row[6],
+        attemptCount: row[7],
+        nextAttemptAt: row[8],
+        lastError: row[9],
+        processedAt: row[10],
+        createdAt: row[11],
+        updatedAt: row[12]
+    };
+}
+exports.claimAuthorizationOutboxEntriesQuery = `-- name: ClaimAuthorizationOutboxEntries :many
+WITH claimable AS (
+    SELECT id
+    FROM weave.authorization_outbox
+    WHERE status IN ('pending', 'failed')
+      AND next_attempt_at <= now()
+    ORDER BY next_attempt_at ASC, created_at ASC, id ASC
+    LIMIT $1
+    FOR UPDATE SKIP LOCKED
+)
+UPDATE weave.authorization_outbox ao
+SET status = 'processing',
+    attempt_count = ao.attempt_count + 1,
+    last_error = ''
+FROM claimable
+WHERE ao.id = claimable.id
+RETURNING ao.id, ao.organization_id, ao.operation, ao.tuple_user, ao.tuple_relation, ao.tuple_object, ao.status, ao.attempt_count, ao.next_attempt_at, ao.last_error, ao.processed_at, ao.created_at, ao.updated_at`;
+async function claimAuthorizationOutboxEntries(client, args) {
+    const result = await client.query({
+        text: exports.claimAuthorizationOutboxEntriesQuery,
+        values: [args.limitCount],
+        rowMode: "array"
+    });
+    return result.rows.map(row => {
+        return {
+            id: row[0],
+            organizationId: row[1],
+            operation: row[2],
+            tupleUser: row[3],
+            tupleRelation: row[4],
+            tupleObject: row[5],
+            status: row[6],
+            attemptCount: row[7],
+            nextAttemptAt: row[8],
+            lastError: row[9],
+            processedAt: row[10],
+            createdAt: row[11],
+            updatedAt: row[12]
+        };
+    });
+}
+exports.claimAuthorizationOutboxEntriesByIDQuery = `-- name: ClaimAuthorizationOutboxEntriesByID :many
+WITH claimable AS (
+    SELECT id
+    FROM weave.authorization_outbox
+    WHERE id = ANY($1::uuid[])
+      AND status IN ('pending', 'failed')
+      AND next_attempt_at <= now()
+    ORDER BY created_at ASC, id ASC
+    FOR UPDATE SKIP LOCKED
+)
+UPDATE weave.authorization_outbox ao
+SET status = 'processing',
+    attempt_count = ao.attempt_count + 1,
+    last_error = ''
+FROM claimable
+WHERE ao.id = claimable.id
+RETURNING ao.id, ao.organization_id, ao.operation, ao.tuple_user, ao.tuple_relation, ao.tuple_object, ao.status, ao.attempt_count, ao.next_attempt_at, ao.last_error, ao.processed_at, ao.created_at, ao.updated_at`;
+async function claimAuthorizationOutboxEntriesByID(client, args) {
+    const result = await client.query({
+        text: exports.claimAuthorizationOutboxEntriesByIDQuery,
+        values: [args.authorizationOutboxIds],
+        rowMode: "array"
+    });
+    return result.rows.map(row => {
+        return {
+            id: row[0],
+            organizationId: row[1],
+            operation: row[2],
+            tupleUser: row[3],
+            tupleRelation: row[4],
+            tupleObject: row[5],
+            status: row[6],
+            attemptCount: row[7],
+            nextAttemptAt: row[8],
+            lastError: row[9],
+            processedAt: row[10],
+            createdAt: row[11],
+            updatedAt: row[12]
+        };
+    });
+}
+exports.completeAuthorizationOutboxEntryQuery = `-- name: CompleteAuthorizationOutboxEntry :one
+UPDATE weave.authorization_outbox
+SET status = 'completed',
+    last_error = '',
+    processed_at = now()
+WHERE id = $1
+  AND status = 'processing'
+RETURNING id, organization_id, operation, tuple_user, tuple_relation, tuple_object, status, attempt_count, next_attempt_at, last_error, processed_at, created_at, updated_at`;
+async function completeAuthorizationOutboxEntry(client, args) {
+    const result = await client.query({
+        text: exports.completeAuthorizationOutboxEntryQuery,
+        values: [args.authorizationOutboxId],
+        rowMode: "array"
+    });
+    if (result.rows.length !== 1) {
+        return null;
+    }
+    const row = result.rows[0];
+    return {
+        id: row[0],
+        organizationId: row[1],
+        operation: row[2],
+        tupleUser: row[3],
+        tupleRelation: row[4],
+        tupleObject: row[5],
+        status: row[6],
+        attemptCount: row[7],
+        nextAttemptAt: row[8],
+        lastError: row[9],
+        processedAt: row[10],
+        createdAt: row[11],
+        updatedAt: row[12]
+    };
+}
+exports.failAuthorizationOutboxEntryQuery = `-- name: FailAuthorizationOutboxEntry :one
+UPDATE weave.authorization_outbox
+SET status = 'failed',
+    last_error = $1,
+    next_attempt_at = $2,
+    processed_at = NULL
+WHERE id = $3
+  AND status = 'processing'
+RETURNING id, organization_id, operation, tuple_user, tuple_relation, tuple_object, status, attempt_count, next_attempt_at, last_error, processed_at, created_at, updated_at`;
+async function failAuthorizationOutboxEntry(client, args) {
+    const result = await client.query({
+        text: exports.failAuthorizationOutboxEntryQuery,
+        values: [args.lastError, args.nextAttemptAt, args.authorizationOutboxId],
+        rowMode: "array"
+    });
+    if (result.rows.length !== 1) {
+        return null;
+    }
+    const row = result.rows[0];
+    return {
+        id: row[0],
+        organizationId: row[1],
+        operation: row[2],
+        tupleUser: row[3],
+        tupleRelation: row[4],
+        tupleObject: row[5],
+        status: row[6],
+        attemptCount: row[7],
+        nextAttemptAt: row[8],
+        lastError: row[9],
+        processedAt: row[10],
+        createdAt: row[11],
+        updatedAt: row[12]
+    };
+}
+exports.requeueStaleAuthorizationOutboxEntriesQuery = `-- name: RequeueStaleAuthorizationOutboxEntries :many
+UPDATE weave.authorization_outbox
+SET status = 'failed',
+    last_error = COALESCE($1::text, last_error),
+    next_attempt_at = now(),
+    processed_at = NULL
+WHERE status = 'processing'
+  AND updated_at < $2
+RETURNING id, organization_id, operation, tuple_user, tuple_relation, tuple_object, status, attempt_count, next_attempt_at, last_error, processed_at, created_at, updated_at`;
+async function requeueStaleAuthorizationOutboxEntries(client, args) {
+    const result = await client.query({
+        text: exports.requeueStaleAuthorizationOutboxEntriesQuery,
+        values: [args.lastError, args.processingBefore],
+        rowMode: "array"
+    });
+    return result.rows.map(row => {
+        return {
+            id: row[0],
+            organizationId: row[1],
+            operation: row[2],
+            tupleUser: row[3],
+            tupleRelation: row[4],
+            tupleObject: row[5],
+            status: row[6],
+            attemptCount: row[7],
+            nextAttemptAt: row[8],
+            lastError: row[9],
+            processedAt: row[10],
+            createdAt: row[11],
+            updatedAt: row[12]
+        };
+    });
+}
+exports.createAuthorizationGrantQuery = `-- name: CreateAuthorizationGrant :one
+INSERT INTO weave.authorization_grant (
+    organization_id,
+    subject_kind,
+    subject_id,
+    object_kind,
+    object_id,
+    relation,
+    created_by_user_id
+) VALUES (
+    $1,
+    $2,
+    $3,
+    $4,
+    $5,
+    $6,
+    $7
+)
+ON CONFLICT (organization_id, subject_kind, subject_id, object_kind, object_id, relation, revoked_at)
+    DO UPDATE SET
+        updated_at = now()
+RETURNING id, organization_id, subject_kind, subject_id, object_kind, object_id, relation, created_by_user_id, revoked_at, created_at, updated_at`;
+async function createAuthorizationGrant(client, args) {
+    const result = await client.query({
+        text: exports.createAuthorizationGrantQuery,
+        values: [args.organizationId, args.subjectKind, args.subjectId, args.objectKind, args.objectId, args.relation, args.createdByUserId],
+        rowMode: "array"
+    });
+    if (result.rows.length !== 1) {
+        return null;
+    }
+    const row = result.rows[0];
+    return {
+        id: row[0],
+        organizationId: row[1],
+        subjectKind: row[2],
+        subjectId: row[3],
+        objectKind: row[4],
+        objectId: row[5],
+        relation: row[6],
+        createdByUserId: row[7],
+        revokedAt: row[8],
+        createdAt: row[9],
+        updatedAt: row[10]
+    };
+}
+exports.getAuthorizationGrantQuery = `-- name: GetAuthorizationGrant :one
+SELECT id, organization_id, subject_kind, subject_id, object_kind, object_id, relation, created_by_user_id, revoked_at, created_at, updated_at
+FROM weave.authorization_grant
+WHERE id = $1
+  AND organization_id = $2`;
+async function getAuthorizationGrant(client, args) {
+    const result = await client.query({
+        text: exports.getAuthorizationGrantQuery,
+        values: [args.authorizationGrantId, args.organizationId],
+        rowMode: "array"
+    });
+    if (result.rows.length !== 1) {
+        return null;
+    }
+    const row = result.rows[0];
+    return {
+        id: row[0],
+        organizationId: row[1],
+        subjectKind: row[2],
+        subjectId: row[3],
+        objectKind: row[4],
+        objectId: row[5],
+        relation: row[6],
+        createdByUserId: row[7],
+        revokedAt: row[8],
+        createdAt: row[9],
+        updatedAt: row[10]
+    };
+}
+exports.listAuthorizationGrantsForSubjectQuery = `-- name: ListAuthorizationGrantsForSubject :many
+SELECT id, organization_id, subject_kind, subject_id, object_kind, object_id, relation, created_by_user_id, revoked_at, created_at, updated_at
+FROM weave.authorization_grant
+WHERE organization_id = $1
+  AND subject_kind = $2
+  AND subject_id = $3
+  AND revoked_at IS NULL
+ORDER BY created_at DESC, id DESC
+LIMIT $5
+OFFSET $4`;
+async function listAuthorizationGrantsForSubject(client, args) {
+    const result = await client.query({
+        text: exports.listAuthorizationGrantsForSubjectQuery,
+        values: [args.organizationId, args.subjectKind, args.subjectId, args.offsetCount, args.limitCount],
+        rowMode: "array"
+    });
+    return result.rows.map(row => {
+        return {
+            id: row[0],
+            organizationId: row[1],
+            subjectKind: row[2],
+            subjectId: row[3],
+            objectKind: row[4],
+            objectId: row[5],
+            relation: row[6],
+            createdByUserId: row[7],
+            revokedAt: row[8],
+            createdAt: row[9],
+            updatedAt: row[10]
+        };
+    });
+}
+exports.listAuthorizationGrantsForObjectQuery = `-- name: ListAuthorizationGrantsForObject :many
+SELECT id, organization_id, subject_kind, subject_id, object_kind, object_id, relation, created_by_user_id, revoked_at, created_at, updated_at
+FROM weave.authorization_grant
+WHERE organization_id = $1
+  AND object_kind = $2
+  AND object_id = $3
+  AND revoked_at IS NULL
+ORDER BY created_at DESC, id DESC
+LIMIT $5
+OFFSET $4`;
+async function listAuthorizationGrantsForObject(client, args) {
+    const result = await client.query({
+        text: exports.listAuthorizationGrantsForObjectQuery,
+        values: [args.organizationId, args.objectKind, args.objectId, args.offsetCount, args.limitCount],
+        rowMode: "array"
+    });
+    return result.rows.map(row => {
+        return {
+            id: row[0],
+            organizationId: row[1],
+            subjectKind: row[2],
+            subjectId: row[3],
+            objectKind: row[4],
+            objectId: row[5],
+            relation: row[6],
+            createdByUserId: row[7],
+            revokedAt: row[8],
+            createdAt: row[9],
+            updatedAt: row[10]
+        };
+    });
+}
+exports.revokeAuthorizationGrantQuery = `-- name: RevokeAuthorizationGrant :one
+UPDATE weave.authorization_grant
+SET revoked_at = now()
+WHERE id = $1
+  AND organization_id = $2
+  AND revoked_at IS NULL
+RETURNING id, organization_id, subject_kind, subject_id, object_kind, object_id, relation, created_by_user_id, revoked_at, created_at, updated_at`;
+async function revokeAuthorizationGrant(client, args) {
+    const result = await client.query({
+        text: exports.revokeAuthorizationGrantQuery,
+        values: [args.authorizationGrantId, args.organizationId],
+        rowMode: "array"
+    });
+    if (result.rows.length !== 1) {
+        return null;
+    }
+    const row = result.rows[0];
+    return {
+        id: row[0],
+        organizationId: row[1],
+        subjectKind: row[2],
+        subjectId: row[3],
+        objectKind: row[4],
+        objectId: row[5],
+        relation: row[6],
+        createdByUserId: row[7],
+        revokedAt: row[8],
+        createdAt: row[9],
+        updatedAt: row[10]
+    };
+}
+exports.revokeAuthorizationGrantByTupleQuery = `-- name: RevokeAuthorizationGrantByTuple :one
+UPDATE weave.authorization_grant
+SET revoked_at = now()
+WHERE organization_id = $1
+  AND subject_kind = $2
+  AND subject_id = $3
+  AND object_kind = $4
+  AND object_id = $5
+  AND relation = $6
+  AND revoked_at IS NULL
+RETURNING id, organization_id, subject_kind, subject_id, object_kind, object_id, relation, created_by_user_id, revoked_at, created_at, updated_at`;
+async function revokeAuthorizationGrantByTuple(client, args) {
+    const result = await client.query({
+        text: exports.revokeAuthorizationGrantByTupleQuery,
+        values: [args.organizationId, args.subjectKind, args.subjectId, args.objectKind, args.objectId, args.relation],
+        rowMode: "array"
+    });
+    if (result.rows.length !== 1) {
+        return null;
+    }
+    const row = result.rows[0];
+    return {
+        id: row[0],
+        organizationId: row[1],
+        subjectKind: row[2],
+        subjectId: row[3],
+        objectKind: row[4],
+        objectId: row[5],
+        relation: row[6],
+        createdByUserId: row[7],
+        revokedAt: row[8],
+        createdAt: row[9],
+        updatedAt: row[10]
+    };
+}