fix(slack): retain custom app credential constraints

Author: TheodoreSpeaks

packages/db/migrations/0340_slack_shared_app_env.sql

@@ -1,3 +1,4 @@
 ALTER TABLE "slack_app" ALTER COLUMN "client_id" DROP NOT NULL;--> statement-breakpoint
 ALTER TABLE "slack_app" ALTER COLUMN "encrypted_client_secret" DROP NOT NULL;--> statement-breakpoint
-ALTER TABLE "slack_app" ALTER COLUMN "encrypted_signing_secret" DROP NOT NULL;
+ALTER TABLE "slack_app" ALTER COLUMN "encrypted_signing_secret" DROP NOT NULL;--> statement-breakpoint
+ALTER TABLE "slack_app" ADD CONSTRAINT "slack_app_custom_credentials_check" CHECK ("slack_app"."kind" = 'shared' OR ("slack_app"."client_id" IS NOT NULL AND "slack_app"."encrypted_client_secret" IS NOT NULL AND "slack_app"."encrypted_signing_secret" IS NOT NULL)) NOT VALID;

packages/db/migrations/meta/0340_snapshot.json

@@ -1,5 +1,5 @@
 {
-  "id": "50aacfdd-df65-4309-8f8b-3b94bbe4a92c",
+  "id": "ae1f15e2-2725-434a-a1ac-9ea8a857868d",
   "prevId": "1bdee29d-c55a-4de9-a0a3-03a6c6aa68aa",
   "version": "7",
   "dialect": "postgresql",
@@ -17053,6 +17053,10 @@
         "slack_app_owner_check": {
           "name": "slack_app_owner_check",
           "value": "(\"slack_app\".\"kind\" = 'custom' AND \"slack_app\".\"organization_id\" IS NOT NULL) OR (\"slack_app\".\"kind\" = 'shared' AND \"slack_app\".\"organization_id\" IS NULL)"
+        },
+        "slack_app_custom_credentials_check": {
+          "name": "slack_app_custom_credentials_check",
+          "value": "\"slack_app\".\"kind\" = 'shared' OR (\"slack_app\".\"client_id\" IS NOT NULL AND \"slack_app\".\"encrypted_client_secret\" IS NOT NULL AND \"slack_app\".\"encrypted_signing_secret\" IS NOT NULL)"
         }
       },
       "isRLSEnabled": false

packages/db/migrations/meta/_journal.json

@@ -2378,7 +2378,7 @@
     {
       "idx": 340,
       "version": "7",
-      "when": 1789149621029,
+      "when": 1789150173739,
       "tag": "0340_slack_shared_app_env",
       "breakpoints": true
     }

packages/db/schema.ts

@@ -4979,6 +4979,10 @@ export const slackApp = pgTable(
       'slack_app_owner_check',
       sql`(${table.kind} = 'custom' AND ${table.organizationId} IS NOT NULL) OR (${table.kind} = 'shared' AND ${table.organizationId} IS NULL)`
     ),
+    customCredentialsCheck: check(
+      'slack_app_custom_credentials_check',
+      sql`${table.kind} = 'shared' OR (${table.clientId} IS NOT NULL AND ${table.encryptedClientSecret} IS NOT NULL AND ${table.encryptedSigningSecret} IS NOT NULL)`
+    ),
   })
 )