@astram/identity 0.11.0 → 0.13.0

package/migrations/1710000000100-SeedDevTenantBAndRoot.cjs

@@ -50,9 +50,13 @@
  * expansion for admin-b's accept authority.
  */
 
-const APP = 'shield_app';
-const IDENT = 'shield_identity';
-const AUTHZ = 'shield_authz';
+const { frameworkSchemasForMigration } = require('@astram/core');
+
+// Database names come from `ctx.schemas` (SHIELD_DB_NAMESPACE, ADR-0037); under an older
+// @astram/migrate without it, the default names apply only while the namespace is unset.
+// replacesChecksums: every checksum this file had in a published release (git release tags), so
+// an existing ledger row is accepted and updated, not reported as drift (ADR-0037).
+const replacesChecksums = ['4444a96f5690c434ada14ba0df70641f983625bbb956070425b5ba6867a49199'];
 
 // --- Part A: tenant-b ---
 const COMPANY_B = 'Astram Tenant B';
@@ -76,7 +80,9 @@ function seedEnabled() {
   return process.env.NODE_ENV === 'development' || process.env.ASTRAM_SEED_DEV === '1';
 }
 
-async function up({ query }) {
+async function up(ctx) {
+  const { query } = ctx;
+  const { app: APP, identity: IDENT, authz: AUTHZ } = frameworkSchemasForMigration(ctx, process.env);
   if (!seedEnabled()) return; // production / non-dev → no-op
 
   // ── PART A: tenant-b ────────────────────────────────────────────────────────────────────
@@ -183,7 +189,9 @@ async function up({ query }) {
   );
 }
 
-async function down({ query }) {
+async function down(ctx) {
+  const { query } = ctx;
+  const { app: APP, identity: IDENT, authz: AUTHZ } = frameworkSchemasForMigration(ctx, process.env);
   // Reverse PART A (dependents first) — this migration's OWN 'Administrator B' role (+ its
   // identity:* grant) is reversed too; the shared 'Administrator' role + tenant-a (from `...099`)
   // are left untouched.
@@ -209,4 +217,4 @@ async function down({ query }) {
   await query(`DELETE FROM \`${APP}\`.\`users\` WHERE u_username = ?`, [ROOT_USERNAME]);
 }
 
-module.exports = { up, down };
+module.exports = { up, down, replacesChecksums };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astram/identity",
-  "version": "0.11.0",
+  "version": "0.13.0",
   "license": "MIT",
   "description": "Astram framework — the framework-owned identity + tenancy model. Hosts the identity @ObjectType classes (user, company, membership, posting), framework-authored identity migrations, and the identity resolver. Top of the dependency graph: depends on @astram/engine (for @ObjectType/@Field decorators) + @astram/guard / @astram/core (for the auth ports).",
   "type": "commonjs",
@@ -36,9 +36,9 @@
   },
   "dependencies": {
     "mariadb": "^3.5.4",
-    "@astram/core": "1.6.0",
-    "@astram/guard": "0.14.0",
-    "@astram/engine": "0.7.0"
+    "@astram/core": "1.8.0",
+    "@astram/guard": "0.16.0",
+    "@astram/engine": "0.9.0"
   },
   "peerDependencies": {
     "@nestjs/common": "^11",