Some checks are pending
Bidi Control Character Guard / bidi-control-guard (push) Waiting to run
Circular Dependency Check / Check for new circular dependencies (push) Waiting to run
Citus Migration Smoke / Combined migrations on single-node Citus (push) Waiting to run
E2E Fresh Install Tests / fresh-install-e2e (push) Waiting to run
ext-v2 guardrails / Run ext-v2 guard and ESLint (push) Waiting to run
Integration Tests / Check for relevant changes (push) Waiting to run
Integration Tests / ${{ (github.event_name == 'schedule' || github.event.inputs.suite == 'full') && 'Full integration suite' || 'Tier-1 integration subset' }} (push) Blocked by required conditions
Mobile checks / Mobile lint + typecheck (push) Waiting to run
Mobile checks / Mobile unit tests (push) Waiting to run
Mobile checks / Mobile dependency audit (report) (push) Waiting to run
Mobile checks / Mobile reproducibility checks (push) Waiting to run
Secrets guard (env backups) / Ensure no tracked env backup files (push) Waiting to run
Temporal Readiness / fast-readiness (push) Waiting to run
Temporal Readiness / docker-parity (push) Waiting to run
TypeScript Type Check / Nx affected typecheck (push) Waiting to run
Unit Tests / Skipped-test budget (push) Waiting to run
Unit Tests / Nx affected unit tests (push) Waiting to run
Unit Tests / Server unit coverage (informational) (push) Waiting to run
Validate Tenant Management Schema / Check for relevant changes (push) Waiting to run
Validate Tenant Management Schema / Validate Tenant Management Schema (push) Blocked by required conditions
EE Workflows Build Guard / ee-workflows-build-guard (push) Waiting to run
Excluded: .git, node_modules, secrets/, compose.env, assemblyscript tgz Source: /opt/alga-psa on psa.joliet.tech
57 lines
1.7 KiB
TypeScript
57 lines
1.7 KiB
TypeScript
#!/usr/bin/env tsx
|
|
|
|
import knex from 'knex';
|
|
import { createRequire } from 'module';
|
|
|
|
const require = createRequire(import.meta.url);
|
|
const knexConfig = require('../knexfile.cjs');
|
|
|
|
type TenantRecord = { tenant: string };
|
|
|
|
type ProvenanceAuditRow = {
|
|
client_contract_id: string;
|
|
contract_id: string;
|
|
template_contract_id: string | null;
|
|
};
|
|
|
|
async function auditTenant(knexInstance: ReturnType<typeof knex>, tenant: string) {
|
|
const rows = await knexInstance<ProvenanceAuditRow>('client_contracts')
|
|
.where({ tenant })
|
|
.select('client_contract_id', 'contract_id', 'template_contract_id');
|
|
|
|
const missingTemplateProvenance = rows.filter((row) => !row.template_contract_id).length;
|
|
|
|
return {
|
|
totalAssignments: rows.length,
|
|
missingTemplateProvenance,
|
|
};
|
|
}
|
|
|
|
async function run() {
|
|
const environment = process.env.NODE_ENV || 'development';
|
|
const knexInstance = knex(knexConfig[environment]);
|
|
|
|
try {
|
|
const tenants = await knexInstance<TenantRecord>('tenants').select('tenant');
|
|
|
|
console.log(
|
|
`contract-template-decoupling.ts is now audit-only. No data backfill or template/runtime fallback mutation will be performed.`,
|
|
);
|
|
console.log(`Scanning ${tenants.length} tenant(s) for missing template provenance metadata.`);
|
|
|
|
for (const record of tenants) {
|
|
const result = await auditTenant(knexInstance, record.tenant);
|
|
console.log(
|
|
`[tenant=${record.tenant}] assignments=${result.totalAssignments} missing_template_contract_id=${result.missingTemplateProvenance}`,
|
|
);
|
|
}
|
|
} catch (error) {
|
|
console.error('Template provenance audit failed:', error);
|
|
process.exitCode = 1;
|
|
} finally {
|
|
await knexInstance.destroy();
|
|
}
|
|
}
|
|
|
|
run();
|