@adaptic/backend-legacy 0.0.47 → 0.0.49

package/esm/middleware/query-complexity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-complexity.js","sourceRoot":"","sources":["../../../src/middleware/query-complexity.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,eAAe,EACf,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzC;;;GAGG;AACH,MAAM,oCAAoC,GAAG,IAAI,CAAC;AAClD,MAAM,sCAAsC,GAAG,GAAG,CAAC;AACnD,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,eAAwB;IAChD,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;QACzD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;gBAAE,OAAO,MAAM,CAAC;QAClD,CAAC;QACD,OAAO,oCAAoC,CAAC;IAC9C,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;IAC3D,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC;IAClD,CAAC;IACD,OAAO,sCAAsC,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,SAAS,WAAW;IAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC/C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC;IAClD,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAcD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAqB,EACrB,QAAsB,EACtB,SAAkC,EAClC,eAAwB;IAExB,MAAM,aAAa,GAAG,gBAAgB,CAAC,eAAe,CAAC,CAAC;IAExD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,aAAa,CAAC;YAC/B,MAAM;YACN,KAAK,EAAE,QAAQ;YACf,SAAS;YACT,UAAU,EAAE;gBACV,wBAAwB,EAAE;gBAC1B,eAAe,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;aAC1C;SACF,CAAC,CAAC;QAEH,OAAO;YACL,UAAU;YACV,QAAQ,EAAE,UAAU,GAAG,aAAa;YACpC,aAAa;SACd,CAAC;IACJ,CAAC;IAAC,OAAO,eAAe,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;YACjD,KAAK,EAAE,eAAe,YAAY,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;SAC5F,CAAC,CAAC;QACH,+EAA+E;QAC/E,OAAO;YACL,UAAU,EAAE,CAAC;YACb,QAAQ,EAAE,KAAK;YACf,aAAa;SACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,QAAsB;IAC/C,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,SAAS,QAAQ,CAAC,IAAkF,EAAE,KAAa;QACjH,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;YACrB,QAAQ,GAAG,KAAK,CAAC;QACnB,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;gBACrD,QAAQ,CAAC,SAAyF,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACjH,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC9C,QAAQ,CAAC,UAA0F,EAAE,CAAC,CAAC,CAAC;IAC1G,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAqB;IAS/D,MAAM,SAAS,GAAG,GAAY,EAAE;QAC9B,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAC/D,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,eAAe,KAAK,MAAM,IAAI,eAAe,KAAK,GAAG,CAAC;QAC/D,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa,CAAC;QAClD,OAAO,GAAG,KAAK,YAAY,IAAI,GAAG,KAAK,SAAS,CAAC;IACnD,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,eAAe;YACnB,OAAO;gBACL,KAAK,CAAC,mBAAmB,CAAC,cAAc;oBACtC,IAAI,CAAC,SAAS,EAAE;wBAAE,OAAO;oBAEzB,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC;oBAC3D,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAA4B,CAAC;oBACvE,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;oBAEnD,oBAAoB;oBACpB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;oBAC/B,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;oBAC1C,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;wBACrB,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE;4BAClC,KAAK;4BACL,QAAQ;4BACR,eAAe;yBAChB,CAAC,CAAC;wBACH,MAAM,IAAI,KAAK,CACb,kBAAkB,KAAK,qCAAqC,QAAQ,EAAE,CACvE,CAAC;oBACJ,CAAC;oBAED,yBAAyB;oBACzB,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;oBAClF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;wBACpB,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;4BACvC,UAAU,EAAE,MAAM,CAAC,UAAU;4BAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;4BACnC,eAAe;yBAChB,CAAC,CAAC;wBACH,MAAM,IAAI,KAAK,CACb,uBAAuB,MAAM,CAAC,UAAU,0CAA0C,MAAM,CAAC,aAAa,EAAE,CACzG,CAAC;oBACJ,CAAC;oBAED,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE;wBAC5C,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;wBACnC,KAAK;qBACN,CAAC,CAAC;gBACL,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/esm/middleware/query-complexity.mjs

@@ -0,0 +1,176 @@
+import { getComplexity, simpleEstimator, fieldExtensionsEstimator, } from 'graphql-query-complexity';
+import { logger } from '../utils/logger.mjs';
+/**
+ * Default query complexity limits per authentication level.
+ * These can be overridden via environment variables.
+ */
+const DEFAULT_MAX_COMPLEXITY_AUTHENTICATED = 1000;
+const DEFAULT_MAX_COMPLEXITY_UNAUTHENTICATED = 200;
+const DEFAULT_MAX_DEPTH = 10;
+/**
+ * Resolves the maximum allowed query complexity from environment variables or defaults.
+ *
+ * @param isAuthenticated - Whether the request is from an authenticated user
+ * @returns The maximum allowed complexity score
+ */
+function getMaxComplexity(isAuthenticated) {
+    if (isAuthenticated) {
+        const envValue = process.env.GRAPHQL_MAX_COMPLEXITY_AUTH;
+        if (envValue) {
+            const parsed = parseInt(envValue, 10);
+            if (!isNaN(parsed) && parsed > 0)
+                return parsed;
+        }
+        return DEFAULT_MAX_COMPLEXITY_AUTHENTICATED;
+    }
+    const envValue = process.env.GRAPHQL_MAX_COMPLEXITY_UNAUTH;
+    if (envValue) {
+        const parsed = parseInt(envValue, 10);
+        if (!isNaN(parsed) && parsed > 0)
+            return parsed;
+    }
+    return DEFAULT_MAX_COMPLEXITY_UNAUTHENTICATED;
+}
+/**
+ * Resolves the maximum allowed query depth.
+ */
+function getMaxDepth() {
+    const envValue = process.env.GRAPHQL_MAX_DEPTH;
+    if (envValue) {
+        const parsed = parseInt(envValue, 10);
+        if (!isNaN(parsed) && parsed > 0)
+            return parsed;
+    }
+    return DEFAULT_MAX_DEPTH;
+}
+/**
+ * Computes the complexity of a GraphQL document against a schema.
+ *
+ * Uses two estimators:
+ * 1. fieldExtensionsEstimator: Reads complexity from field extensions (set via schema directives)
+ * 2. simpleEstimator: Assigns a default cost of 1 per field as fallback
+ *
+ * @param schema - The GraphQL schema
+ * @param document - The parsed GraphQL document (AST)
+ * @param variables - Query variables (used for list size estimation)
+ * @param isAuthenticated - Whether the request is authenticated (affects limits)
+ * @returns The complexity check result
+ */
+export function checkQueryComplexity(schema, document, variables, isAuthenticated) {
+    const maxComplexity = getMaxComplexity(isAuthenticated);
+    try {
+        const complexity = getComplexity({
+            schema,
+            query: document,
+            variables,
+            estimators: [
+                fieldExtensionsEstimator(),
+                simpleEstimator({ defaultComplexity: 1 }),
+            ],
+        });
+        return {
+            complexity,
+            exceeded: complexity > maxComplexity,
+            maxComplexity,
+        };
+    }
+    catch (estimationError) {
+        logger.warn('Failed to estimate query complexity', {
+            error: estimationError instanceof Error ? estimationError.message : String(estimationError),
+        });
+        // On failure, allow the query to proceed to avoid blocking legitimate requests
+        return {
+            complexity: 0,
+            exceeded: false,
+            maxComplexity,
+        };
+    }
+}
+/**
+ * Checks query depth by counting nested selections.
+ *
+ * @param document - The parsed GraphQL document (AST)
+ * @returns The maximum depth found in the query
+ */
+function computeQueryDepth(document) {
+    let maxDepth = 0;
+    function traverse(node, depth) {
+        if (depth > maxDepth) {
+            maxDepth = depth;
+        }
+        if (node.selectionSet) {
+            for (const selection of node.selectionSet.selections) {
+                traverse(selection, depth + 1);
+            }
+        }
+    }
+    for (const definition of document.definitions) {
+        traverse(definition, 0);
+    }
+    return maxDepth;
+}
+/**
+ * Creates an Apollo Server plugin that enforces query complexity and depth limits.
+ *
+ * The plugin runs before query execution and rejects queries that exceed
+ * configured complexity or depth thresholds.
+ *
+ * Environment variables:
+ * - GRAPHQL_MAX_COMPLEXITY_AUTH: Max complexity for authenticated users (default: 1000)
+ * - GRAPHQL_MAX_COMPLEXITY_UNAUTH: Max complexity for unauthenticated users (default: 200)
+ * - GRAPHQL_MAX_DEPTH: Max query depth (default: 10)
+ * - GRAPHQL_COMPLEXITY_ENABLED: Explicit on/off ('true'/'false'). Defaults to on in production/staging.
+ *
+ * @param schema - The GraphQL schema to validate against
+ * @returns Apollo Server plugin configuration
+ */
+export function createQueryComplexityPlugin(schema) {
+    const isEnabled = () => {
+        const explicitSetting = process.env.GRAPHQL_COMPLEXITY_ENABLED;
+        if (explicitSetting !== undefined) {
+            return explicitSetting === 'true' || explicitSetting === '1';
+        }
+        const env = process.env.NODE_ENV || 'development';
+        return env === 'production' || env === 'staging';
+    };
+    return {
+        async requestDidStart() {
+            return {
+                async didResolveOperation(requestContext) {
+                    if (!isEnabled())
+                        return;
+                    const { document, request, contextValue } = requestContext;
+                    const variables = (request.variables || {});
+                    const isAuthenticated = Boolean(contextValue.user);
+                    // Check depth limit
+                    const maxDepth = getMaxDepth();
+                    const depth = computeQueryDepth(document);
+                    if (depth > maxDepth) {
+                        logger.warn('Query depth exceeded', {
+                            depth,
+                            maxDepth,
+                            isAuthenticated,
+                        });
+                        throw new Error(`Query depth of ${depth} exceeds maximum allowed depth of ${maxDepth}`);
+                    }
+                    // Check complexity limit
+                    const result = checkQueryComplexity(schema, document, variables, isAuthenticated);
+                    if (result.exceeded) {
+                        logger.warn('Query complexity exceeded', {
+                            complexity: result.complexity,
+                            maxComplexity: result.maxComplexity,
+                            isAuthenticated,
+                        });
+                        throw new Error(`Query complexity of ${result.complexity} exceeds maximum allowed complexity of ${result.maxComplexity}`);
+                    }
+                    logger.debug('Query complexity check passed', {
+                        complexity: result.complexity,
+                        maxComplexity: result.maxComplexity,
+                        depth,
+                    });
+                },
+            };
+        },
+    };
+}
+//# sourceMappingURL=query-complexity.js.map

package/esm/middleware/soft-delete.d.ts

@@ -0,0 +1,146 @@
+/**
+ * Soft Delete Utilities
+ *
+ * Provides utilities for soft-delete behavior on critical models.
+ * Instead of removing records from the database, a `deletedAt` timestamp
+ * is set, and query helpers filter out soft-deleted records by default.
+ *
+ * Models with soft delete support: User, AlpacaAccount, Trade, Action
+ *
+ * Usage patterns:
+ * 1. Use `softDeleteFilter()` in where clauses to exclude deleted records
+ * 2. Use `softDeleteRecord()` to soft-delete a record (set deletedAt)
+ * 3. Use `hardDelete()` for permanent administrative deletion
+ * 4. Pass `includeDeleted: true` to admin queries to see all records
+ *
+ * Note: Prisma 6 removed the $use() middleware API. Soft delete behavior
+ * is implemented via utility functions called from resolvers and services.
+ */
+/**
+ * Models that support soft deletion via the deletedAt field.
+ * Only these models have the deletedAt column in the database.
+ */
+declare const SOFT_DELETE_MODELS: Set<string>;
+/**
+ * Returns a where clause filter that excludes soft-deleted records.
+ * Can be spread into any Prisma where clause for soft-delete-aware queries.
+ *
+ * @param includeDeleted - When true, returns an empty filter (includes deleted records)
+ * @returns An object to spread into a Prisma where clause
+ *
+ * @example
+ * ```typescript
+ * // Exclude soft-deleted users (default)
+ * const users = await prisma.user.findMany({
+ *   where: { role: 'USER', ...softDeleteFilter() },
+ * });
+ *
+ * // Include soft-deleted users (admin query)
+ * const allUsers = await prisma.user.findMany({
+ *   where: { role: 'USER', ...softDeleteFilter(true) },
+ * });
+ * ```
+ */
+declare function softDeleteFilter(includeDeleted?: boolean): {
+    deletedAt?: null;
+};
+/**
+ * Returns a where clause filter for finding only soft-deleted records.
+ * Useful for admin interfaces that need to list deleted records for restoration.
+ *
+ * @returns An object to spread into a Prisma where clause
+ *
+ * @example
+ * ```typescript
+ * // Find only soft-deleted users
+ * const deletedUsers = await prisma.user.findMany({
+ *   where: { ...deletedOnlyFilter() },
+ * });
+ * ```
+ */
+declare function deletedOnlyFilter(): {
+    deletedAt: {
+        not: null;
+    };
+};
+/**
+ * Checks whether a given model supports soft deletion.
+ *
+ * @param modelName - The Prisma model name (PascalCase)
+ * @returns True if the model has a deletedAt field
+ */
+declare function isSoftDeleteModel(modelName: string): boolean;
+/** Minimal Prisma delegate interface for soft-delete operations */
+interface PrismaModelDelegate {
+    update: (args: {
+        where: {
+            id: string;
+        };
+        data: {
+            deletedAt: Date;
+        };
+    }) => Promise<unknown>;
+}
+/**
+ * Soft-deletes a record by setting its deletedAt timestamp.
+ * This is the recommended way to "delete" records in soft-delete-enabled models.
+ *
+ * @param delegate - The Prisma model delegate (e.g., prisma.user)
+ * @param id - The record ID to soft-delete
+ * @param modelName - The model name for logging purposes
+ * @returns The updated record
+ *
+ * @example
+ * ```typescript
+ * // Soft-delete a user
+ * await softDeleteRecord(prisma.user, 'user-123', 'User');
+ * ```
+ */
+declare function softDeleteRecord(delegate: PrismaModelDelegate, id: string, modelName: string): Promise<unknown>;
+/** Minimal Prisma delegate interface for restore operations */
+interface PrismaRestoreDelegate {
+    update: (args: {
+        where: {
+            id: string;
+        };
+        data: {
+            deletedAt: null;
+        };
+    }) => Promise<unknown>;
+}
+/**
+ * Restores a soft-deleted record by clearing its deletedAt timestamp.
+ *
+ * @param delegate - The Prisma model delegate (e.g., prisma.user)
+ * @param id - The record ID to restore
+ * @param modelName - The model name for logging purposes
+ * @returns The updated record
+ *
+ * @example
+ * ```typescript
+ * // Restore a soft-deleted user
+ * await restoreRecord(prisma.user, 'user-123', 'User');
+ * ```
+ */
+declare function restoreRecord(delegate: PrismaRestoreDelegate, id: string, modelName: string): Promise<unknown>;
+/**
+ * Permanently deletes a record from the database.
+ * This bypasses soft delete and removes the row entirely.
+ * Should only be used for administrative cleanup operations.
+ *
+ * @param prisma - The Prisma client instance (with $executeRawUnsafe)
+ * @param model - The model name (PascalCase)
+ * @param id - The record ID to permanently delete
+ * @returns The number of rows deleted
+ *
+ * @example
+ * ```typescript
+ * // Permanently delete a soft-deleted user
+ * const deleted = await hardDelete(prisma, 'User', 'user-123');
+ * ```
+ */
+declare function hardDelete(prisma: {
+    $executeRawUnsafe: (query: string, ...values: unknown[]) => Promise<number>;
+}, model: string, id: string): Promise<number>;
+export { SOFT_DELETE_MODELS, softDeleteFilter, deletedOnlyFilter, isSoftDeleteModel, softDeleteRecord, restoreRecord, hardDelete, };
+//# sourceMappingURL=soft-delete.d.ts.map

package/esm/middleware/soft-delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"soft-delete.d.ts","sourceRoot":"","sources":["../../../src/middleware/soft-delete.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH;;;GAGG;AACH,QAAA,MAAM,kBAAkB,aAKtB,CAAC;AAEH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,iBAAS,gBAAgB,CAAC,cAAc,UAAQ,GAAG;IAAE,SAAS,CAAC,EAAE,IAAI,CAAA;CAAE,CAKtE;AAED;;;;;;;;;;;;;GAaG;AACH,iBAAS,iBAAiB,IAAI;IAAE,SAAS,EAAE;QAAE,GAAG,EAAE,IAAI,CAAA;KAAE,CAAA;CAAE,CAEzD;AAED;;;;;GAKG;AACH,iBAAS,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAErD;AAED,mEAAmE;AACnE,UAAU,mBAAmB;IAC3B,MAAM,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,IAAI,EAAE;YAAE,SAAS,EAAE,IAAI,CAAA;SAAE,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1F;AAED;;;;;;;;;;;;;;GAcG;AACH,iBAAe,gBAAgB,CAC7B,QAAQ,EAAE,mBAAmB,EAC7B,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED,+DAA+D;AAC/D,UAAU,qBAAqB;IAC7B,MAAM,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,IAAI,EAAE;YAAE,SAAS,EAAE,IAAI,CAAA;SAAE,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1F;AAED;;;;;;;;;;;;;GAaG;AACH,iBAAe,aAAa,CAC1B,QAAQ,EAAE,qBAAqB,EAC/B,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CAMlB;AAaD;;;;;;;;;;;;;;;GAeG;AACH,iBAAe,UAAU,CACvB,MAAM,EAAE;IAAE,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;CAAE,EACvF,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,MAAM,CAAC,CAWjB;AAED,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,UAAU,GACX,CAAC"}

package/esm/middleware/soft-delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"soft-delete.js","sourceRoot":"","sources":["../../../src/middleware/soft-delete.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzC;;;GAGG;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,MAAM;IACN,eAAe;IACf,OAAO;IACP,QAAQ;CACT,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAS,gBAAgB,CAAC,cAAc,GAAG,KAAK;IAC9C,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,iBAAiB;IACxB,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,OAAO,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AAC3C,CAAC;AAOD;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,gBAAgB,CAC7B,QAA6B,EAC7B,EAAU,EACV,SAAiB;IAEjB,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,OAAO,QAAQ,CAAC,MAAM,CAAC;QACrB,KAAK,EAAE,EAAE,EAAE,EAAE;QACb,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE;KAChC,CAAC,CAAC;AACL,CAAC;AAOD;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,aAAa,CAC1B,QAA+B,EAC/B,EAAU,EACV,SAAiB;IAEjB,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5F,OAAO,QAAQ,CAAC,MAAM,CAAC;QACrB,KAAK,EAAE,EAAE,EAAE,EAAE;QACb,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;KAC1B,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,cAAc,GAA2B;IAC7C,IAAI,EAAE,OAAO;IACb,aAAa,EAAE,iBAAiB;IAChC,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,SAAS;CAClB,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,UAAU,CACvB,MAAuF,EACvF,KAAa,EACb,EAAU;IAEV,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,gCAAgC,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,iBAAiB,CAC7B,gBAAgB,SAAS,mBAAmB,EAC5C,EAAE,CACH,CAAC;AACJ,CAAC;AAED,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,UAAU,GACX,CAAC"}

package/esm/middleware/soft-delete.mjs

@@ -0,0 +1,160 @@
+/**
+ * Soft Delete Utilities
+ *
+ * Provides utilities for soft-delete behavior on critical models.
+ * Instead of removing records from the database, a `deletedAt` timestamp
+ * is set, and query helpers filter out soft-deleted records by default.
+ *
+ * Models with soft delete support: User, AlpacaAccount, Trade, Action
+ *
+ * Usage patterns:
+ * 1. Use `softDeleteFilter()` in where clauses to exclude deleted records
+ * 2. Use `softDeleteRecord()` to soft-delete a record (set deletedAt)
+ * 3. Use `hardDelete()` for permanent administrative deletion
+ * 4. Pass `includeDeleted: true` to admin queries to see all records
+ *
+ * Note: Prisma 6 removed the $use() middleware API. Soft delete behavior
+ * is implemented via utility functions called from resolvers and services.
+ */
+import { logger } from '../utils/logger.mjs';
+/**
+ * Models that support soft deletion via the deletedAt field.
+ * Only these models have the deletedAt column in the database.
+ */
+const SOFT_DELETE_MODELS = new Set([
+    'User',
+    'AlpacaAccount',
+    'Trade',
+    'Action',
+]);
+/**
+ * Returns a where clause filter that excludes soft-deleted records.
+ * Can be spread into any Prisma where clause for soft-delete-aware queries.
+ *
+ * @param includeDeleted - When true, returns an empty filter (includes deleted records)
+ * @returns An object to spread into a Prisma where clause
+ *
+ * @example
+ * ```typescript
+ * // Exclude soft-deleted users (default)
+ * const users = await prisma.user.findMany({
+ *   where: { role: 'USER', ...softDeleteFilter() },
+ * });
+ *
+ * // Include soft-deleted users (admin query)
+ * const allUsers = await prisma.user.findMany({
+ *   where: { role: 'USER', ...softDeleteFilter(true) },
+ * });
+ * ```
+ */
+function softDeleteFilter(includeDeleted = false) {
+    if (includeDeleted) {
+        return {};
+    }
+    return { deletedAt: null };
+}
+/**
+ * Returns a where clause filter for finding only soft-deleted records.
+ * Useful for admin interfaces that need to list deleted records for restoration.
+ *
+ * @returns An object to spread into a Prisma where clause
+ *
+ * @example
+ * ```typescript
+ * // Find only soft-deleted users
+ * const deletedUsers = await prisma.user.findMany({
+ *   where: { ...deletedOnlyFilter() },
+ * });
+ * ```
+ */
+function deletedOnlyFilter() {
+    return { deletedAt: { not: null } };
+}
+/**
+ * Checks whether a given model supports soft deletion.
+ *
+ * @param modelName - The Prisma model name (PascalCase)
+ * @returns True if the model has a deletedAt field
+ */
+function isSoftDeleteModel(modelName) {
+    return SOFT_DELETE_MODELS.has(modelName);
+}
+/**
+ * Soft-deletes a record by setting its deletedAt timestamp.
+ * This is the recommended way to "delete" records in soft-delete-enabled models.
+ *
+ * @param delegate - The Prisma model delegate (e.g., prisma.user)
+ * @param id - The record ID to soft-delete
+ * @param modelName - The model name for logging purposes
+ * @returns The updated record
+ *
+ * @example
+ * ```typescript
+ * // Soft-delete a user
+ * await softDeleteRecord(prisma.user, 'user-123', 'User');
+ * ```
+ */
+async function softDeleteRecord(delegate, id, modelName) {
+    logger.info('Soft delete: Setting deletedAt on record', { model: modelName, id });
+    return delegate.update({
+        where: { id },
+        data: { deletedAt: new Date() },
+    });
+}
+/**
+ * Restores a soft-deleted record by clearing its deletedAt timestamp.
+ *
+ * @param delegate - The Prisma model delegate (e.g., prisma.user)
+ * @param id - The record ID to restore
+ * @param modelName - The model name for logging purposes
+ * @returns The updated record
+ *
+ * @example
+ * ```typescript
+ * // Restore a soft-deleted user
+ * await restoreRecord(prisma.user, 'user-123', 'User');
+ * ```
+ */
+async function restoreRecord(delegate, id, modelName) {
+    logger.info('Soft delete: Restoring record (clearing deletedAt)', { model: modelName, id });
+    return delegate.update({
+        where: { id },
+        data: { deletedAt: null },
+    });
+}
+/**
+ * Mapping from model names to their database table names.
+ * Used for raw SQL hard-delete operations.
+ */
+const TABLE_NAME_MAP = {
+    User: 'users',
+    AlpacaAccount: 'alpaca_accounts',
+    Trade: 'trades',
+    Action: 'actions',
+};
+/**
+ * Permanently deletes a record from the database.
+ * This bypasses soft delete and removes the row entirely.
+ * Should only be used for administrative cleanup operations.
+ *
+ * @param prisma - The Prisma client instance (with $executeRawUnsafe)
+ * @param model - The model name (PascalCase)
+ * @param id - The record ID to permanently delete
+ * @returns The number of rows deleted
+ *
+ * @example
+ * ```typescript
+ * // Permanently delete a soft-deleted user
+ * const deleted = await hardDelete(prisma, 'User', 'user-123');
+ * ```
+ */
+async function hardDelete(prisma, model, id) {
+    const tableName = TABLE_NAME_MAP[model];
+    if (!tableName) {
+        throw new Error(`Model "${model}" does not support hard delete`);
+    }
+    logger.warn('Hard delete: Permanently removing record', { model, id });
+    return prisma.$executeRawUnsafe(`DELETE FROM "${tableName}" WHERE "id" = $1`, id);
+}
+export { SOFT_DELETE_MODELS, softDeleteFilter, deletedOnlyFilter, isSoftDeleteModel, softDeleteRecord, restoreRecord, hardDelete, };
+//# sourceMappingURL=soft-delete.js.map

package/esm/prismaClient.d.ts

@@ -5,6 +5,6 @@ import { PrismaClient } from "@prisma/client";
 declare global {
     var prisma: PrismaClient | undefined;
 }
-declare let prisma: PrismaClient;
+declare const prisma: PrismaClient;
 export default prisma;
 //# sourceMappingURL=prismaClient.d.ts.map

package/esm/prismaClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prismaClient.d.ts","sourceRoot":"","sources":["../../src/prismaClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG9C;;GAEG;AACH,OAAO,CAAC,MAAM,CAAC;IAEb,IAAI,MAAM,EAAE,YAAY,GAAG,SAAS,CAAC;CACtC;AAKD,QAAA,IAAI,MAAM,EAAE,YAAY,CAAC;AAiBzB,eAAe,MAAM,CAAC"}
+{"version":3,"file":"prismaClient.d.ts","sourceRoot":"","sources":["../../src/prismaClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAI9C;;GAEG;AACH,OAAO,CAAC,MAAM,CAAC;IAEb,IAAI,MAAM,EAAE,YAAY,GAAG,SAAS,CAAC;CACtC;AAsID,QAAA,MAAM,MAAM,EAAE,YAA4B,CAAC;AAE3C,eAAe,MAAM,CAAC"}

package/esm/prismaClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"prismaClient.js","sourceRoot":"","sources":["../../src/prismaClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAU9D,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AAE3D,2FAA2F;AAC3F,IAAI,MAAoB,CAAC;AAEzB,oDAAoD;AACpD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IACnB,MAAM,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC;QAC/B,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;QACtB,mEAAmE;QACnE,WAAW,EAAE;YACX,EAAE,EAAE;gBACF,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;aAC9B;SACF;KACF,CAAC,CAAC,QAAQ,CAAC,cAAc,EAAE,CAA4B,CAAC;AAC3D,CAAC;AAED,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;AAEvB,eAAe,MAAM,CAAC"}
+{"version":3,"file":"prismaClient.js","sourceRoot":"","sources":["../../src/prismaClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAUxC;;;GAGG;AACH,MAAM,kBAAkB,GAA2B;IACjD,WAAW,EAAE,CAAC;IACd,OAAO,EAAE,EAAE;IACX,UAAU,EAAE,EAAE;CACf,CAAC;AAEF,0FAA0F;AAC1F,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAEtC;;;;;;;;GAQG;AACH,SAAS,eAAe;IACtB,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACnD,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,gEAAgE,EAAE;YAC5E,KAAK,EAAE,WAAW;SACnB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa,CAAC;IACtD,OAAO,kBAAkB,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,WAAW,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB;IACzB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IACxD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,iEAAiE,EAAE;YAC7E,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,gBAAgB;IACvB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,WAAW,GAAG,kBAAkB,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAEpD,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;QACjD,QAAQ;QACR,aAAa,EAAE,WAAW;QAC1B,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa;KACnD,CAAC,CAAC;IAEH,OAAO,GAAG,OAAO,GAAG,SAAS,oBAAoB,QAAQ,iBAAiB,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED,oDAAoD;AACpD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IACnB,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IAEnC,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;QAC9B,GAAG,EAAE;YACH,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;YACjC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;SACjC;QACD,WAAW,EAAE;YACX,EAAE,EAAE;gBACF,GAAG,EAAE,gBAAgB,EAAE;aACxB;SACF;KACF,CAAC,CAAC;IAEH,kEAAkE;IAClE,MAAM,CAAC,GAAG,CAAC,OAAgB,EAAE,CAAC,CAAsB,EAAE,EAAE;QACtD,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;QAChC,IACE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;YACxB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAC3B,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE;gBAC3D,QAAQ;gBACR,YAAY,EAAE,OAAO;aACtB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,MAAe,EAAE,CAAC,CAAsB,EAAE,EAAE;QACrD,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,sEAAsE;IACtE,iEAAiE;IAEjE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,CAA4B,CAAC;AAC/E,CAAC;AAED,2FAA2F;AAC3F,MAAM,MAAM,GAAiB,MAAM,CAAC,MAAM,CAAC;AAE3C,eAAe,MAAM,CAAC"}

package/esm/prismaClient.mjs

@@ -1,20 +1,122 @@
 import { PrismaClient } from "@prisma/client";
 import { withAccelerate } from "@prisma/extension-accelerate";
-const isProduction = process.env.NODE_ENV === "production";
-// Initialize a singleton PrismaClient with a connection pool that persists across requests
-let prisma;
+import { logger } from './utils/logger';
+/**
+ * Connection pool size defaults per deployment tier.
+ * Can be overridden via the DATABASE_POOL_SIZE environment variable.
+ */
+const POOL_SIZE_DEFAULTS = {
+    development: 5,
+    staging: 10,
+    production: 20,
+};
+/** Connection pool timeout in milliseconds. Configurable via DATABASE_POOL_TIMEOUT_MS. */
+const DEFAULT_POOL_TIMEOUT_MS = 10000;
+/**
+ * Resolves the connection pool size from environment variables or tier defaults.
+ *
+ * Priority:
+ * 1. DATABASE_POOL_SIZE environment variable (explicit override)
+ * 2. Tier default based on NODE_ENV (development: 5, staging: 10, production: 20)
+ *
+ * @returns The resolved connection pool size
+ */
+function resolvePoolSize() {
+    const envPoolSize = process.env.DATABASE_POOL_SIZE;
+    if (envPoolSize) {
+        const parsed = parseInt(envPoolSize, 10);
+        if (!isNaN(parsed) && parsed > 0) {
+            return parsed;
+        }
+        logger.warn('Invalid DATABASE_POOL_SIZE value, falling back to tier default', {
+            value: envPoolSize,
+        });
+    }
+    const nodeEnv = process.env.NODE_ENV || 'development';
+    return POOL_SIZE_DEFAULTS[nodeEnv] || POOL_SIZE_DEFAULTS.development;
+}
+/**
+ * Resolves the connection pool timeout from environment variables.
+ *
+ * @returns The resolved pool timeout in milliseconds
+ */
+function resolvePoolTimeout() {
+    const envTimeout = process.env.DATABASE_POOL_TIMEOUT_MS;
+    if (envTimeout) {
+        const parsed = parseInt(envTimeout, 10);
+        if (!isNaN(parsed) && parsed > 0) {
+            return parsed;
+        }
+        logger.warn('Invalid DATABASE_POOL_TIMEOUT_MS value, falling back to default', {
+            value: envTimeout,
+        });
+    }
+    return DEFAULT_POOL_TIMEOUT_MS;
+}
+/**
+ * Constructs a DATABASE_URL with connection pool parameters appended.
+ * Prisma uses URL query parameters for pool configuration when using
+ * the data proxy / Accelerate.
+ *
+ * For direct connections (non-Accelerate), pool settings are managed
+ * via the connection_limit and pool_timeout query parameters on the
+ * database URL.
+ *
+ * @returns The database URL with pool parameters
+ */
+function buildDatabaseUrl() {
+    const baseUrl = process.env.DATABASE_URL || '';
+    if (!baseUrl) {
+        return baseUrl;
+    }
+    const poolSize = resolvePoolSize();
+    const poolTimeout = resolvePoolTimeout();
+    const separator = baseUrl.includes('?') ? '&' : '?';
+    logger.info('Database connection pool configured', {
+        poolSize,
+        poolTimeoutMs: poolTimeout,
+        environment: process.env.NODE_ENV || 'development',
+    });
+    return `${baseUrl}${separator}connection_limit=${poolSize}&pool_timeout=${Math.floor(poolTimeout / 1000)}`;
+}
 // Create a singleton that works in all environments
 if (!global.prisma) {
-    global.prisma = new PrismaClient({
-        log: ['error', 'warn'],
-        // Increase connection timeout and pool size for better reliability
+    const poolSize = resolvePoolSize();
+    const client = new PrismaClient({
+        log: [
+            { level: 'error', emit: 'event' },
+            { level: 'warn', emit: 'event' },
+        ],
         datasources: {
             db: {
-                url: process.env.DATABASE_URL,
+                url: buildDatabaseUrl(),
             },
         },
-    }).$extends(withAccelerate());
+    });
+    // Register event-based log handlers for pool exhaustion detection
+    client.$on('error', (e) => {
+        const message = e.message || '';
+        if (message.includes('pool') ||
+            message.includes('connection') ||
+            message.includes('timeout')) {
+            logger.error('Database connection pool exhaustion detected', {
+                poolSize,
+                errorMessage: message,
+            });
+        }
+        else {
+            logger.error('Prisma client error', { errorMessage: message });
+        }
+    });
+    client.$on('warn', (e) => {
+        logger.warn('Prisma client warning', { message: e.message });
+    });
+    // Soft-delete filtering is handled at the application/middleware level
+    // via the soft-delete middleware (see src/middleware/soft-delete.ts).
+    // Prisma 6 uses client extensions rather than $use() middleware.
+    global.prisma = client.$extends(withAccelerate());
 }
-prisma = global.prisma;
+// Initialize a singleton PrismaClient with a connection pool that persists across requests
+const prisma = global.prisma;
 export default prisma;
 //# sourceMappingURL=prismaClient.js.map