sync ext from launchql pg

Zetazzz · Zetazzz · commit dcb9757243b5 · 2025-12-08T18:49:27.000+08:00
diff --git a/packages/data-types/types/README.md b/packages/data-types/types/README.md
@@ -22,9 +22,10 @@ Core PostgreSQL data types with SQL scripts.
 
 - **email**: Case-insensitive email address validation
 - **url**: HTTP/HTTPS URL validation
+- **origin**: Origin URL validation (scheme + host)
 - **hostname**: Domain name validation
 - **image**: JSON-based image metadata with URL and MIME type
-- **attachment**: JSON-based file attachment metadata with URL and MIME type
+- **attachment**: File attachment metadata as a URL string or JSON with URL and MIME type
 - **upload**: File upload metadata
 - **single_select**: Single selection field
 - **multiple_select**: Multiple selection field
@@ -156,7 +157,7 @@ INSERT INTO customers (domain) VALUES
 
 ### Image and Attachment Domains
 
-The `image` and `attachment` domains store JSON objects with URL and MIME type information.
+The `image` domain stores JSON objects with URL and MIME type information. The `attachment` domain accepts either that JSON shape or a plain URL string.
 
 ```sql
 -- Valid image
@@ -166,19 +167,23 @@ INSERT INTO customers (profile_image) VALUES
 -- Valid attachment
 INSERT INTO customers (document) VALUES
   ('{"url": "https://storage.example.com/file.pdf", "mime": "application/pdf"}'::json);
+
+-- Valid attachment as plain URL
+INSERT INTO customers (document) VALUES ('https://storage.example.com/favicon.ico');
 ```
 
-**Structure**: Both domains expect JSON objects with `url` and `mime` properties.
+**Structure**: Image values and JSON-form attachments expect `url` and `mime` properties; attachments also allow a bare URL string.
 
 ## Domain Types Reference
 
 | Domain | Base Type | Description | Example |
 |--------|-----------|-------------|---------|
 | `email` | `citext` | Case-insensitive email address | `user@example.com` |
 | `url` | `text` | HTTP/HTTPS URL | `https://example.com/path` |
+| `origin` | `text` | Origin (scheme + host) | `https://example.com` |
 | `hostname` | `text` | Domain name without protocol | `example.com` |
 | `image` | `json` | Image metadata with URL and MIME | `{"url": "...", "mime": "image/jpeg"}` |
-| `attachment` | `json` | File attachment metadata | `{"url": "...", "mime": "application/pdf"}` |
+| `attachment` | `json` | File attachment URL or metadata | `{"url": "...", "mime": "application/pdf"}` or `https://example.com/favicon.ico` |
 | `upload` | `text` | File upload identifier | Various formats |
 | `single_select` | `text` | Single selection value | Text value |
 | `multiple_select` | `text[]` | Multiple selection values | Array of text values |
diff --git a/packages/data-types/types/deploy/schemas/public/domains/attachment.sql b/packages/data-types/types/deploy/schemas/public/domains/attachment.sql
@@ -3,10 +3,15 @@
 
 BEGIN;
 CREATE DOMAIN attachment AS jsonb CHECK (
-  value ?& ARRAY['url', 'mime']
-  AND
-  value->>'url' ~ '^(https?)://[^\s/$.?#].[^\s]*$'
+  (
+    jsonb_typeof(VALUE) = 'object'
+    AND VALUE ?& ARRAY['url', 'mime']
+    AND VALUE->>'url' ~ '^(https?)://[^\\s/$.?#].[^\\s]*$'
+  )
+  OR (
+    jsonb_typeof(VALUE) = 'string'
+    AND VALUE #>> '{}' ~ '^(https?)://[^\\s/$.?#].[^\\s]*$'
+  )
 );
 COMMENT ON DOMAIN attachment IS E'@name launchqlInternalTypeAttachment';
 COMMIT;
-
diff --git a/packages/data-types/types/pgpm.plan b/packages/data-types/types/pgpm.plan
@@ -8,6 +8,7 @@ schemas/public/domains/email [schemas/public/schema] 2017-08-11T08:11:51Z skitch
 schemas/public/domains/hostname [schemas/public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/public/domains/hostname
 schemas/public/domains/image [schemas/public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/public/domains/image
 schemas/public/domains/multiple_select [schemas/public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/public/domains/multiple_select
+schemas/public/domains/origin [schemas/public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/public/domains/origin
 schemas/public/domains/single_select [schemas/public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/public/domains/single_select
 schemas/public/domains/upload [schemas/public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/public/domains/upload
 schemas/public/domains/url [schemas/public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/public/domains/url
diff --git a/packages/security/defaults/deploy/defaults/public.sql b/packages/security/defaults/deploy/defaults/public.sql
@@ -13,5 +13,7 @@ $$;
 -- NOTE: don't alter this as new schemas inherit this behavior
 ALTER DEFAULT PRIVILEGES REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC;
 REVOKE CREATE ON SCHEMA public FROM PUBLIC;
+GRANT EXECUTE ON ALL FUNCTIONS IN SCHEMA public TO authenticated, anonymous, administrator;
+ALTER DEFAULT PRIVILEGES IN SCHEMA public
+GRANT EXECUTE ON FUNCTIONS TO authenticated, anonymous, administrator;
 COMMIT;
-
diff --git a/packages/security/jwt-claims/launchql-jwt-claims.control b/packages/security/jwt-claims/launchql-jwt-claims.control
@@ -2,7 +2,7 @@
 comment = 'launchql-jwt-claims extension'
 default_version = '0.9.0'
 module_pathname = '$libdir/launchql-jwt-claims'
-requires = 'plpgsql,uuid-ossp,launchql-verify'
+requires = 'plpgsql,uuid-ossp,launchql-types,launchql-verify'
 relocatable = false
 superuser = false
-  
+  
diff --git a/packages/security/jwt-claims/pgpm.plan b/packages/security/jwt-claims/pgpm.plan
@@ -2,10 +2,18 @@
 %project=launchql-jwt-claims
 %uri=launchql-jwt-claims
   
+schemas/ctx/schema 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/ctx/schema
+schemas/ctx/procedures/ip_address [schemas/ctx/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/ctx/procedures/ip_address
+schemas/ctx/procedures/origin [schemas/ctx/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/ctx/procedures/origin
+schemas/ctx/procedures/user_agent [schemas/ctx/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/ctx/procedures/user_agent
+schemas/ctx/procedures/user_id [schemas/ctx/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/ctx/procedures/user_id
+schemas/ctx/procedures/security_definer [schemas/ctx/schema] 2021-04-20T04:04:08Z Dan Lynch <dlynch@Dans-MBP-3> # add schemas/ctx/procedures/security_definer
 schemas/jwt_public/schema 2020-12-17T06:47:29Z Dan Lynch <dlynch@Dans-MBP-3> # add schemas/jwt_public/schema
-schemas/jwt_private/schema 2020-12-17T06:47:34Z Dan Lynch <dlynch@Dans-MBP-3> # add schemas/jwt_private/schema
 schemas/jwt_public/procedures/current_user_id [schemas/jwt_public/schema] 2020-12-17T06:48:56Z Dan Lynch <dlynch@Dans-MBP-3> # add schemas/jwt_public/procedures/current_user_id
 schemas/jwt_public/procedures/current_ip_address [schemas/jwt_public/schema] 2020-12-17T23:19:17Z Dan Lynch <dlynch@Dans-MBP-3> # add schemas/jwt_public/procedures/current_ip_address
 schemas/jwt_public/procedures/current_user_agent [schemas/jwt_public/schema] 2020-12-17T23:20:04Z Dan Lynch <dlynch@Dans-MBP-3> # add schemas/jwt_public/procedures/current_user_agent
-schemas/jwt_private/procedures/current_database_id [schemas/jwt_private/schema] 2020-12-17T23:22:28Z Dan Lynch <dlynch@Dans-MBP-3> # add schemas/jwt_private/procedures/current_database_id
+schemas/jwt_public/procedures/current_origin [schemas/jwt_public/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/jwt_public/procedures/current_origin
 schemas/jwt_public/procedures/current_group_ids [schemas/jwt_public/schema] 2020-12-17T23:30:50Z Dan Lynch <dlynch@Dans-MBP-3> # add schemas/jwt_public/procedures/current_group_ids
+schemas/jwt_private/schema 2020-12-17T06:47:34Z Dan Lynch <dlynch@Dans-MBP-3> # add schemas/jwt_private/schema
+schemas/jwt_private/procedures/current_database_id [schemas/jwt_private/schema] 2020-12-17T23:22:28Z Dan Lynch <dlynch@Dans-MBP-3> # add schemas/jwt_private/procedures/current_database_id
+schemas/jwt_private/procedures/current_token_id [schemas/jwt_private/schema] 2017-08-11T08:11:51Z skitch <skitch@5b0c196eeb62> # add schemas/jwt_private/procedures/current_token_id
diff --git a/packages/security/jwt-claims/revert/schemas/ctx/procedures/security_definer.sql b/packages/security/jwt-claims/revert/schemas/ctx/procedures/security_definer.sql
@@ -3,5 +3,6 @@
 BEGIN;
 
 DROP FUNCTION ctx.security_definer;
+DROP FUNCTION ctx.is_security_definer;
 
 COMMIT;
diff --git a/packages/security/jwt-claims/verify/schemas/ctx/procedures/security_definer.sql b/packages/security/jwt-claims/verify/schemas/ctx/procedures/security_definer.sql
@@ -3,5 +3,6 @@
 BEGIN;
 
 SELECT verify_function ('ctx.security_definer');
+SELECT verify_function ('ctx.is_security_definer');
 
 ROLLBACK;
diff --git a/packages/utils/inflection/deploy/schemas/inflection/procedures/underscore.sql b/packages/utils/inflection/deploy/schemas/inflection/procedures/underscore.sql
@@ -48,5 +48,12 @@ FROM
 $$
 LANGUAGE 'sql'
 IMMUTABLE;
-COMMIT;
 
+CREATE FUNCTION inflection.underscore (parts text[])
+  RETURNS text
+  AS $$
+  SELECT inflection.underscore( array_to_string(parts, '_') );
+$$
+LANGUAGE 'sql'
+IMMUTABLE;
+COMMIT;
diff --git a/packages/utils/inflection/revert/schemas/inflection/procedures/underscore.sql b/packages/utils/inflection/revert/schemas/inflection/procedures/underscore.sql
@@ -2,6 +2,7 @@
 
 BEGIN;
 
-DROP FUNCTION inflection.underscore;
+DROP FUNCTION inflection.underscore(text[]);
+DROP FUNCTION inflection.underscore(text);
 
 COMMIT;
diff --git a/packages/utils/inflection/verify/schemas/inflection/procedures/underscore.sql b/packages/utils/inflection/verify/schemas/inflection/procedures/underscore.sql
@@ -2,6 +2,7 @@
 
 BEGIN;
 
-SELECT verify_function ('inflection.underscore');
+SELECT verify_function ('inflection.underscore(text)');
+SELECT verify_function ('inflection.underscore(text[])');
 
 ROLLBACK;
