feat: ops improvements (#243)

* feat: ops improvements

* fix: tighten import validation

* fix: tighten pull tag validation

Author: filo87

package.json

@@ -1,7 +1,8 @@
 {
   "name": "@centrifuge/api-v3",
   "version": "2.1.0",
-  "private": true,
+  "repository": "https://github.com/centrifuge/api-v3",
+  "private": false,
   "type": "module",
   "scripts": {
     "predev": "pnpm update-registry && docker compose up -d",
@@ -23,9 +24,10 @@
     "prepare": "husky",
     "update-registry": "node scripts/fetch-registry.mjs",
     "evgrep": "scripts/evgrep.sh",
+    "sync": "node scripts/cache.mjs",
     "compare-schema": "graphql-inspector diff https://api.centrifuge.io generated/schema.graphql --rule safeUnreachable --rule ignoreDescriptionChanges | grep 'Field.*removed'",
-    "sync:export": "docker compose exec -T db sh -lc 'pg_dump --dbname=postgresql://$POSTGRES_USER:$POSTGRES_PASSWORD@localhost:5432/$POSTGRES_DB --schema=ponder_sync --no-owner --no-privileges --clean --if-exists' | gzip > $(date +%Y%m%d)_ponder_sync.sql.gz",
-    "sync:restore": "LATEST=$(ls -t *_ponder_sync.sql.gz 2>/dev/null | head -n 1) && [ -n \"$LATEST\" ] && gzip -dc \"$LATEST\" | docker compose exec -T db sh -lc 'psql --dbname=postgresql://$POSTGRES_USER:$POSTGRES_PASSWORD@localhost:5432/$POSTGRES_DB'"
+    "sync:export": "mkdir -p .ponder && docker compose exec -T db sh -lc 'pg_dump --dbname=postgresql://$POSTGRES_USER:$POSTGRES_PASSWORD@localhost:5432/$POSTGRES_DB --schema=ponder_sync --no-owner --no-privileges --clean --if-exists' | gzip > .ponder/$(date +%Y%m%d)_ponder_sync.sql.gz",
+    "sync:push": "LATEST=$(ls -t .ponder/*_ponder_sync.sql.gz 2>/dev/null | head -n 1); TAG=$(basename \"$LATEST\" | sed 's/_ponder_sync.sql.gz$//'); cp \"$LATEST\" ponder_sync.sql.gz; REPO=$(node -p \"(() => { const repo=require('./package.json').repository; const url=typeof repo==='string'?repo:repo?.url; return new URL(url).pathname.replace(/^\\\\//,'').replace(/\\\\.git$/,''); })()\"); USER=$(gh api user -q .login); gh auth token | oras login ghcr.io -u \"$USER\" --password-stdin; oras push ghcr.io/$REPO/ponder-sync:$TAG ponder_sync.sql.gz:application/gzip; oras tag ghcr.io/$REPO/ponder-sync:$TAG latest; rm -f ponder_sync.sql.gz"
   },
   "dependencies": {
     "@ponder/utils": "^0.2.17",
@@ -34,6 +36,8 @@
     "drizzle-orm": "~0.41.0",
     "hono": "^4.9.12",
     "node-fetch": "^3.3.2",
+    "pg": "^8.11.3",
+    "pg-copy-streams": "^6.0.6",
     "picocolors": "^1.1.1",
     "pino": "^8.21.0",
     "pino-pretty": "^13.1.3",
@@ -43,9 +47,12 @@
   "devDependencies": {
     "@commitlint/cli": "^19.8.1",
     "@commitlint/config-conventional": "^19.8.1",
+    "@dfatwork-pkgs/oras-client": "^0.1.0",
     "@graphql-inspector/cli": "^6.0.5",
     "@types/bn.js": "^5.2.0",
     "@types/node": "^22.19.2",
+    "@types/pg": "^8.11.3",
+    "@types/pg-copy-streams": "^1.2.5",
     "@typescript-eslint/eslint-plugin": "^6.21.0",
     "@typescript-eslint/parser": "^6.21.0",
     "@typescript/native-preview": "7.0.0-dev.20251124.1",