npm - @authup/server-core - Versions diffs - 1.0.0-beta.63 → 1.0.0-beta.64 - Mend

@authup/server-core 1.0.0-beta.63 → 1.0.0-beta.64

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (710) hide show

package/dist/app/modules/database/migration.mjs ADDED Viewed

@@ -0,0 +1,52 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { AuthupError } from "@authup/errors";
+import { synchronizeDatabaseSchema } from "typeorm-extension";
+//#region src/app/modules/database/migration.ts
+/**
+* Verify the database schema is current without running any DDL.
+*
+* Resolves `false` when the resolved data-source options carry no
+* migrations at all. That is the sqlite shape: nothing can be pending, and
+* the schema still has to be created, so the caller falls through to a
+* schema synchronize. The predicate is the options, never a dialect
+* compare.
+*
+* Resolves `true` when migrations are configured and none of them are
+* pending. Throws when any are pending, so a process can never silently
+* serve against an older schema.
+*/ async function assertNoPendingMigrations(dataSource) {
+	const { migrations } = dataSource.options;
+	if (!(Array.isArray(migrations) ? migrations.length > 0 : !!migrations && Object.keys(migrations).length > 0)) return false;
+	if (await dataSource.showMigrations()) throw new AuthupError("The database has pending migrations, and this process applies no schema changes. Run the migration CLI command (authup migration run) and start again.");
+	return true;
+}
+/**
+* Bring a process up against a schema another process owns: verify it, and
+* create it only where there is nothing to verify.
+*
+* `assertNoPendingMigrations` throws when the chain is behind, so a verified
+* return is the only way past it. Its `false` return means the data source
+* carries no migrations at all (the sqlite shape), where nothing can be
+* pending and the schema still has to be created, so that branch falls
+* through to a synchronize. Dropping the fall-through would leave a sqlite
+* process with no schema.
+*
+* Both callers that must not migrate share this: `DatabaseModule.migrate`
+* under `migrationEnabled: false`, and the worker preset, which never
+* migrates whatever the flag says.
+*/ async function verifySchemaOrSynchronize(logger, dataSource) {
+	logger.debug("Verifying database schema...");
+	if (await assertNoPendingMigrations(dataSource)) {
+		logger.debug("Verified database schema.");
+		return;
+	}
+	logger.debug("Migrating database...");
+	await synchronizeDatabaseSchema(dataSource);
+	logger.debug("Migrated database");
+}
+//#endregion
+export { assertNoPendingMigrations, verifySchemaOrSynchronize };
+//# sourceMappingURL=migration.mjs.map

package/dist/app/modules/database/migration.mjs.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"migration.mjs","names":["AuthupError","synchronizeDatabaseSchema","assertNoPendingMigrations","dataSource","migrations","options","configured","Array","isArray","length","Object","keys","pending","showMigrations","verifySchemaOrSynchronize","logger","debug","verified"],"sources":["../../../../src/app/modules/database/migration.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { AuthupError } from '@authup/errors';\nimport type { Logger } from '@authup/server-kit';\nimport type { DataSource } from 'typeorm';\nimport { synchronizeDatabaseSchema } from 'typeorm-extension';\n\n/**\n * Verify the database schema is current without running any DDL.\n *\n * Resolves `false` when the resolved data-source options carry no\n * migrations at all. That is the sqlite shape: nothing can be pending, and\n * the schema still has to be created, so the caller falls through to a\n * schema synchronize. The predicate is the options, never a dialect\n * compare.\n *\n * Resolves `true` when migrations are configured and none of them are\n * pending. Throws when any are pending, so a process can never silently\n * serve against an older schema.\n */\nexport async function assertNoPendingMigrations(dataSource: DataSource) : Promise<boolean> {\n const { migrations } = dataSource.options;\n\n const configured = Array.isArray(migrations) ?\n migrations.length > 0 :\n !!migrations && Object.keys(migrations).length > 0;\n\n if (!configured) {\n return false;\n }\n\n // typeorm: true means pending migrations exist.\n const pending = await dataSource.showMigrations();\n if (pending) {\n throw new AuthupError('The database has pending migrations, and this process applies no schema changes. Run the migration CLI command (authup migration run) and start again.');\n }\n\n return true;\n}\n\n/**\n * Bring a process up against a schema another process owns: verify it, and\n * create it only where there is nothing to verify.\n *\n * `assertNoPendingMigrations` throws when the chain is behind, so a verified\n * return is the only way past it. Its `false` return means the data source\n * carries no migrations at all (the sqlite shape), where nothing can be\n * pending and the schema still has to be created, so that branch falls\n * through to a synchronize. Dropping the fall-through would leave a sqlite\n * process with no schema.\n *\n * Both callers that must not migrate share this: `DatabaseModule.migrate`\n * under `migrationEnabled: false`, and the worker preset, which never\n * migrates whatever the flag says.\n */\nexport async function verifySchemaOrSynchronize(\n logger: Logger,\n dataSource: DataSource,\n): Promise<void> {\n logger.debug('Verifying database schema...');\n\n const verified = await assertNoPendingMigrations(dataSource);\n if (verified) {\n logger.debug('Verified database schema.');\n return;\n }\n\n logger.debug('Migrating database...');\n await synchronizeDatabaseSchema(dataSource);\n logger.debug('Migrated database');\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;GAyBA,eAAsBE,0BAA0BC,YAAsB;CAClE,MAAM,EAAEC,eAAeD,WAAWE;CAMlC,IAAI,EAJeE,MAAMC,QAAQJ,UAAAA,IAC7BA,WAAWK,SAAS,IACpB,CAAC,CAACL,cAAcM,OAAOC,KAAKP,UAAAA,CAAAA,CAAYK,SAAS,IAGjD,OAAO;CAKX,IAAIG,MADkBT,WAAWU,eAAc,GAE3C,MAAM,IAAIb,YAAY,wJAAA;CAG1B,OAAO;AACX;;;;;;;;;;;;;;;GAiBA,eAAsBc,0BAClBC,QACAZ,YAAsB;CAEtBY,OAAOC,MAAM,8BAAA;CAGb,IAAIC,MADmBf,0BAA0BC,UAAAA,GACnC;EACVY,OAAOC,MAAM,2BAAA;EACb;CACJ;CAEAD,OAAOC,MAAM,uBAAA;CACb,MAAMf,0BAA0BE,UAAAA;CAChCY,OAAOC,MAAM,mBAAA;AACjB"}

package/dist/app/modules/database/module.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/database/module.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,oBAAoB,EAIvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,UAAU,EAAmB,MAAM,SAAS,CAAC;AAMtD,OAAO,EACH,wBAAwB,EAM3B,MAAM,qCAAqC,CAAC;~~AAO7C~~,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAIrC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAGxC,MAAM,MAAM,qBAAqB,GAAG;IAChC,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9E,CAAC;AAEF,qBAAa,cAAe,YAAW,OAAO;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAEhC,SAAS,CAAC,cAAc,EAAG,wBAAwB,CAAC;IAEpD,SAAS,CAAC,OAAO,EAAE,qBAAqB,CAAC;IAEzC,SAAS,CAAC,gBAAgB,CAAC,EAAG,WAAW,CAAC;IAE1C,SAAS,CAAC,cAAc,CAAC,EAAG,oBAAoB,CAAC;gBAErC,OAAO,GAAE,qBAA0B;IAQzC,KAAK,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAsD3C,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;cAiBpC,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC;cActC,aAAa,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;cAgB/E,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;~~IAUrF~~;;;;OAIG;cACa,sBAAsB,CAAC,SAAS,EAAE,UAAU,GAAI,OAAO,CAAC,iBAAiB,CAAC;~~IAgC1F~~,SAAS,CAAC,oBAAoB,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,GAAI,IAAI;IAiBpF,SAAS,CAAC,sBAAsB,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;~~IAkC9E~~,SAAS,CAAC,cAAc,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;CAmBzE"}
1	+ {"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/database/module.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,oBAAoB,EAIvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,UAAU,EAAmB,MAAM,SAAS,CAAC;AAMtD,OAAO,EACH,wBAAwB,EAM3B,MAAM,qCAAqC,CAAC;AAQ7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAIrC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAGxC,MAAM,MAAM,qBAAqB,GAAG;IAChC,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9E,CAAC;AAEF,qBAAa,cAAe,YAAW,OAAO;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAEhC,SAAS,CAAC,cAAc,EAAG,wBAAwB,CAAC;IAEpD,SAAS,CAAC,OAAO,EAAE,qBAAqB,CAAC;IAEzC,SAAS,CAAC,gBAAgB,CAAC,EAAG,WAAW,CAAC;IAE1C,SAAS,CAAC,cAAc,CAAC,EAAG,oBAAoB,CAAC;gBAErC,OAAO,GAAE,qBAA0B;IAQzC,KAAK,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAsD3C,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;cAiBpC,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC;cActC,aAAa,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;cAgB/E,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBrF;;;;OAIG;cACa,sBAAsB,CAAC,SAAS,EAAE,UAAU,GAAI,OAAO,CAAC,iBAAiB,CAAC;IAmC1F,SAAS,CAAC,oBAAoB,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,GAAI,IAAI;IAiBpF,SAAS,CAAC,sBAAsB,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAoC9E,SAAS,CAAC,cAAc,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;CAmBzE"}

package/dist/app/modules/database/module.mjs CHANGED Viewed

@@ -10,19 +10,20 @@ import "../../../core/index.mjs";
 import { CacheInjectionKey } from "../cache/constants.mjs";
 import { ModuleName } from "../constants.mjs";
 import { ConfigInjectionKey } from "../config/constants.mjs";
-import { useRequestEventContext } from "../../../adapters/http/request/event-context.mjs";
-import "../../../adapters/http/request/index.mjs";
 import "../config/index.mjs";
 import "../cache/index.mjs";
+import { LoggerInjectionKey } from "../logger/constants.mjs";
+import "../logger/index.mjs";
 import { DatabaseQueryResultCache } from "../../../adapters/database/cache/module.mjs";
 import { DataSourceOptionsBuilder } from "../../../adapters/database/data-source/options/module.mjs";
 import "../../../adapters/database/index.mjs";
 import { EventRepositoryAdapter } from "./repositories/event/repository.mjs";
 import "./repositories/index.mjs";
 import { DatabaseInjectionKey } from "./constants.mjs";
+import { verifySchemaOrSynchronize } from "./migration.mjs";
+import { useRequestEventContext } from "../../../adapters/http/request/event-context.mjs";
+import "../../../adapters/http/request/index.mjs";
 import { validateEntitySchemas } from "./repositories/schema-validation.mjs";
-import { LoggerInjectionKey } from "../logger/constants.mjs";
-import "../logger/index.mjs";
 import { DataSource, InstanceChecker } from "typeorm";
 import { DomainEventPublisher, DomainEventRedisHandler, DomainEventSocketHandler, createRedisClient } from "@authup/server-kit";
 import { AuthupError } from "@authup/errors";
@@ -103,7 +104,12 @@ var DatabaseModule = class {
 		}
 	}
 	async migrate(container, dataSource) {
+		const config = container.resolve(ConfigInjectionKey);
 		const logger = container.resolve(LoggerInjectionKey);
+		if (!config.migrationEnabled) {
+			await verifySchemaOrSynchronize(logger, dataSource);
+			return;
+		}
 		logger.debug("Migrating database...");
 		await synchronizeDatabaseSchema(dataSource);
 		logger.debug("Migrated database");
@@ -116,9 +122,9 @@ var DatabaseModule = class {
 		const config = container.resolve(ConfigInjectionKey);
 		let options;
 		if (config.db) options = this.optionsBuilder.buildWith(config.db);
-		else options = this.optionsBuilder.buildWithEnv();
+		else options = this.optionsBuilder.buildWithEnvOrDefault();
 		if (!isDatabaseTypeSupported(options.type)) throw new AuthupError(`Database type ${options.type} is not supported (only: mysql, better-sqlite3 and postgres).`);
-		if (!isDatabaseTypeSupportedForEnvironment(options.type, config.env)) throw new AuthupError(`Database type ${options.type} is not supported for ${config.env}.`);
+		if (!isDatabaseTypeSupportedForEnvironment(options.type, config.env)) throw new AuthupError(`Database type "${options.type}" is not supported in the ${config.env} environment. Set DB_TYPE to "postgres" or "mysql" together with DB_HOST, DB_PORT, DB_USERNAME, DB_PASSWORD and DB_DATABASE, or declare "db" in authup.yml. With no database configured at all, "better-sqlite3" is the fallback.`);
 		const cacheResult = container.tryResolve(CacheInjectionKey);
 		if (cacheResult.success) Object.assign(options, { cache: { provider() {
 			return new DatabaseQueryResultCache(cacheResult.data);

package/dist/app/modules/database/module.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.mjs","names":["DomainEventPublisher","DomainEventRedisHandler","DomainEventSocketHandler","createRedisClient","AuthupError","DataSource","InstanceChecker","checkDatabase","createDatabase","synchronizeDatabaseSchema","DataSourceOptionsBuilder","DatabaseQueryResultCache","EntitySubscriber","EventEntity","isDatabaseTypeSupported","isDatabaseTypeSupportedForEnvironment","EntityEventHandler","EventService","useRequestEventContext","EventRepositoryAdapter","validateEntitySchemas","CacheInjectionKey","ModuleName","DatabaseInjectionKey","ConfigInjectionKey","LoggerInjectionKey","DatabaseModule","name","dependencies","optionsBuilder","options","eventRedisClient","eventPublisher","DATABASE","CONFIG","LOGGER","setup","container","logger","resolve","prepareBuild","dataSourceOptions","buildDataSourceOptions","setupDatabase","dataSource","debug","initialize","migrate","registerRepositories","registerEvents","registerEventPublisher","register","useValue","e","isInitialized","destroy","disposeEventPublisher","cleanupError","warn","teardown","tryResolve","success","data","unregister","EventRepository","dispose","undefined","disconnect","check","exists","synchronize","ifNotExist","config","db","buildWith","buildWithEnv","type","env","cacheResult","Object","assign","cache","provider","entities","Array","isArray","entity","isEntitySchema","useFactory","getRepository","publisher","redis","client","eventLogEnabled","eventLogEntityEnabled","eventService","requestContext","retentionDays","eventLogEntityRetentionDays","i","subscribers","length","subscriber","setPublisher","repository","service","enabled","eventLogRetentionDays"],"sources":["../../../../src/app/modules/database/module.ts"],"sourcesContent":["/\n Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n /\n\nimport {\n DomainEventPublisher,\n DomainEventRedisHandler,\n DomainEventSocketHandler,\n createRedisClient,\n} from '@authup/server-kit';\nimport type { RedisClient } from '@authup/server-kit';\nimport { AuthupError } from '@authup/errors';\nimport type { DataSourceOptions } from 'typeorm';\nimport { DataSource, InstanceChecker } from 'typeorm';\nimport {\n checkDatabase,\n createDatabase,\n synchronizeDatabaseSchema,\n} from 'typeorm-extension';\nimport {\n DataSourceOptionsBuilder,\n DatabaseQueryResultCache,\n EntitySubscriber,\n EventEntity,\n isDatabaseTypeSupported,\n isDatabaseTypeSupportedForEnvironment,\n} from '../../../adapters/database/index.ts';\nimport type { Event } from '@authup/core-kit';\nimport { EntityEventHandler, EventService } from '../../../core/index.ts';\nimport { useRequestEventContext } from '../../../adapters/http/request/index.ts';\nimport { EventRepositoryAdapter } from './repositories/index.ts';\nimport { validateEntitySchemas } from './repositories/schema-validation.ts';\nimport { CacheInjectionKey } from '../cache/index.ts';\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { DatabaseInjectionKey } from './constants.ts';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport type { IContainer } from 'eldin';\nimport { LoggerInjectionKey } from '../logger/index.ts';\n\nexport type DatabaseModuleOptions = {\n prepareBuild?: (container: IContainer) => Promise<void>;\n setup?: (container: IContainer, options: DataSourceOptions) => Promise<void>;\n migrate?: (container: IContainer, dataSource: DataSource) => Promise<void>;\n};\n\nexport class DatabaseModule implements IModule {\n readonly name: string;\n\n readonly dependencies: string[];\n\n protected optionsBuilder : DataSourceOptionsBuilder;\n\n protected options: DatabaseModuleOptions;\n\n protected eventRedisClient? : RedisClient;\n\n protected eventPublisher? : DomainEventPublisher;\n\n constructor(options: DatabaseModuleOptions = {}) {\n this.name = ModuleName.DATABASE;\n this.dependencies = [ModuleName.CONFIG, ModuleName.LOGGER];\n\n this.optionsBuilder = new DataSourceOptionsBuilder();\n this.options = options;\n }\n\n async setup(container: IContainer): Promise<void> {\n const logger = container.resolve(LoggerInjectionKey);\n\n if (this.options.prepareBuild) {\n await this.options.prepareBuild(container);\n }\n\n const dataSourceOptions = await this.buildDataSourceOptions(container);\n\n if (this.options.setup) {\n await this.options.setup(container, dataSourceOptions);\n } else {\n await this.setupDatabase(container, dataSourceOptions);\n }\n\n const dataSource = new DataSource(dataSourceOptions);\n\n logger.debug('Establishing database connection...');\n await dataSource.initialize();\n logger.debug('Established database connection.');\n\n try {\n if (this.options.migrate) {\n await this.options.migrate(container, dataSource);\n } else {\n await this.migrate(container, dataSource);\n }\n\n validateEntitySchemas(dataSource);\n this.registerRepositories(container, dataSource);\n // the event service must exist before the publisher wiring — the\n // entity-CRUD bridge handler resolves it from the container.\n this.registerEvents(container, dataSource);\n this.registerEventPublisher(container, dataSource);\n\n container.register(DatabaseInjectionKey.DataSource, { useValue: dataSource });\n } catch (e) {\n // teardown() is skipped for a module that fails its own setup(),\n // so release the connection pool and any event-publisher handles\n // here. Guard cleanup so it can never mask the original error.\n try {\n if (dataSource.isInitialized) {\n await dataSource.destroy();\n }\n\n await this.disposeEventPublisher();\n } catch (cleanupError) {\n logger.warn(`Failed to clean up database resources after setup error: ${cleanupError}`);\n }\n\n throw e;\n }\n }\n\n async teardown(container: IContainer): Promise<void> {\n const dataSource = container.tryResolve(DatabaseInjectionKey.DataSource);\n if (dataSource.success) {\n if (dataSource.data.isInitialized) {\n await dataSource.data.destroy();\n }\n\n container.unregister(DatabaseInjectionKey.DataSource);\n }\n\n container.unregister(DatabaseInjectionKey.DomainEventPublisher);\n container.unregister(DatabaseInjectionKey.EventRepository);\n container.unregister(DatabaseInjectionKey.EventService);\n\n await this.disposeEventPublisher();\n }\n\n protected async disposeEventPublisher(): Promise<void> {\n if (this.eventPublisher) {\n await this.eventPublisher.dispose();\n this.eventPublisher = undefined;\n }\n\n if (this.eventRedisClient) {\n this.eventRedisClient.disconnect();\n this.eventRedisClient = undefined;\n }\n }\n\n // ----------------------------------------------------\n\n protected async setupDatabase(container: IContainer, options: DataSourceOptions): Promise<void> {\n const logger = container.resolve(LoggerInjectionKey);\n\n const check = await checkDatabase({ options });\n\n if (!check.exists) {\n logger.debug('Creating database...');\n await createDatabase({\n options,\n synchronize: false,\n ifNotExist: true, \n });\n logger.debug('Created database');\n }\n }\n\n protected async migrate(container: IContainer, dataSource: DataSource): Promise<void> {\n const logger = container.resolve(LoggerInjectionKey);\n\n logger.debug('Migrating database...');\n await synchronizeDatabaseSchema(dataSource);\n logger.debug('Migrated database');\n }\n\n // ----------------------------------------------------\n\n /\n Load data source options for connection.\n \n @protected\n */\n protected async buildDataSourceOptions(container: IContainer) : Promise<DataSourceOptions> {\n const config = container.resolve(ConfigInjectionKey);\n\n let options : DataSourceOptions \| undefined;\n if (config.db) {\n options = this.optionsBuilder.buildWith(config.db);\n } else {\n options = this.optionsBuilder.buildWithEnv();\n }\n\n if (!isDatabaseTypeSupported(options.type)) {\n throw new AuthupError(`Database type ${options.type} is not supported (only: mysql, better-sqlite3 and postgres).`);\n }\n\n if (!isDatabaseTypeSupportedForEnvironment(options.type, config.env)) {\n throw new AuthupError(`Database type ${options.type} is not supported for ${config.env}.`);\n }\n\n const cacheResult = container.tryResolve(CacheInjectionKey);\n if (cacheResult.success) {\n Object.assign(options, {\n cache: {\n provider() {\n return new DatabaseQueryResultCache(cacheResult.data);\n },\n },\n } satisfies Partial<DataSourceOptions>);\n }\n\n return options;\n }\n\n protected registerRepositories(container: IContainer, dataSource: DataSource) : void {\n const entities = dataSource.options.entities \|\| [];\n if (!Array.isArray(entities)) {\n return;\n }\n\n for (const entity of entities) {\n if (InstanceChecker.isEntitySchema(entity)) {\n continue;\n }\n\n // eslint-disable-next-line @typescript-eslint/ban-ts-comment\n // @ts-expect-error\n container.register(entity, { useFactory: () => dataSource.getRepository(entity) });\n }\n }\n\n protected registerEventPublisher(container: IContainer, dataSource: DataSource) {\n const config = container.resolve(ConfigInjectionKey);\n const logger = container.resolve(LoggerInjectionKey);\n\n const publisher = new DomainEventPublisher({ logger });\n this.eventPublisher = publisher;\n if (config.redis) {\n const client = createRedisClient(config.redis);\n if (client !== config.redis) {\n this.eventRedisClient = client;\n }\n\n publisher.register(new DomainEventRedisHandler(client));\n publisher.register(new DomainEventSocketHandler(client));\n }\n\n if (config.eventLogEnabled && config.eventLogEntityEnabled) {\n publisher.register(new EntityEventHandler({\n eventService: container.resolve(DatabaseInjectionKey.EventService),\n requestContext: useRequestEventContext,\n options: { retentionDays: config.eventLogEntityRetentionDays },\n }));\n }\n\n container.register(DatabaseInjectionKey.DomainEventPublisher, { useValue: publisher });\n\n for (let i = 0; i < dataSource.subscribers.length; i++) {\n const subscriber = dataSource.subscribers[i];\n if (subscriber instanceof EntitySubscriber) {\n subscriber.setPublisher(publisher);\n }\n }\n }\n\n protected registerEvents(container: IContainer, dataSource: DataSource) {\n const config = container.resolve(ConfigInjectionKey);\n const logger = container.resolve(LoggerInjectionKey);\n\n const repository = new EventRepositoryAdapter(\n dataSource.getRepository<Event>(EventEntity),\n );\n container.register(DatabaseInjectionKey.EventRepository, { useValue: repository });\n\n const service = new EventService({\n repository,\n options: {\n enabled: config.eventLogEnabled,\n retentionDays: config.eventLogRetentionDays,\n },\n logger,\n });\n container.register(DatabaseInjectionKey.EventService, { useValue: service });\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,IAAa0B,iBAAb,MAAaA;CACAC;CAEAC;CAECC;CAEAC;CAEAC;CAEAC;CAEV,YAAYF,UAAiC,CAAC,GAAG;EAC7C,KAAKH,OAAOL,WAAWW;EACvB,KAAKL,eAAe,CAACN,WAAWY,QAAQZ,WAAWa,MAAO;EAE1D,KAAKN,iBAAiB,IAAInB,yBAAAA;EAC1B,KAAKoB,UAAUA;CACnB;CAEA,MAAMM,MAAMC,WAAsC;EAC9C,MAAMC,SAASD,UAAUE,QAAQd,kBAAAA;EAEjC,IAAI,KAAKK,QAAQU,cACb,MAAM,KAAKV,QAAQU,aAAaH,SAAAA;EAGpC,MAAMI,oBAAoB,MAAM,KAAKC,uBAAuBL,SAAAA;EAE5D,IAAI,KAAKP,QAAQM,OACb,MAAM,KAAKN,QAAQM,MAAMC,WAAWI,iBAAAA;OAEpC,MAAM,KAAKE,cAAcN,WAAWI,iBAAAA;EAGxC,MAAMG,aAAa,IAAIvC,WAAWoC,iBAAAA;EAElCH,OAAOO,MAAM,qCAAA;EACb,MAAMD,WAAWE,WAAU;EAC3BR,OAAOO,MAAM,kCAAA;EAEb,IAAI;GACA,IAAI,KAAKf,QAAQiB,SACb,MAAM,KAAKjB,QAAQiB,QAAQV,WAAWO,UAAAA;QAEtC,MAAM,KAAKG,QAAQV,WAAWO,UAAAA;GAGlCxB,sBAAsBwB,UAAAA;GACtB,KAAKI,qBAAqBX,WAAWO,UAAAA;GAGrC,KAAKK,eAAeZ,WAAWO,UAAAA;GAC/B,KAAKM,uBAAuBb,WAAWO,UAAAA;GAEvCP,UAAUc,SAAS5B,qBAAqBlB,YAAY,EAAE+C,UAAUR,WAAW,CAAA;EAC/E,SAASS,GAAG;GAIR,IAAI;IACA,IAAIT,WAAWU,eACX,MAAMV,WAAWW,QAAO;IAG5B,MAAM,KAAKC,sBAAqB;GACpC,SAASC,cAAc;IACnBnB,OAAOoB,KAAK,4DAA4DD,cAAc;GAC1F;GAEA,MAAMJ;EACV;CACJ;CAEA,MAAMM,SAAStB,WAAsC;EACjD,MAAMO,aAAaP,UAAUuB,WAAWrC,qBAAqBlB,UAAU;EACvE,IAAIuC,WAAWiB,SAAS;GACpB,IAAIjB,WAAWkB,KAAKR,eAChB,MAAMV,WAAWkB,KAAKP,QAAO;GAGjClB,UAAU0B,WAAWxC,qBAAqBlB,UAAU;EACxD;EAEAgC,UAAU0B,WAAWxC,qBAAqBvB,oBAAoB;EAC9DqC,UAAU0B,WAAWxC,qBAAqByC,eAAe;EACzD3B,UAAU0B,WAAWxC,qBAAqBN,YAAY;EAEtD,MAAM,KAAKuC,sBAAqB;CACpC;CAEA,MAAgBA,wBAAuC;EACnD,IAAI,KAAKxB,gBAAgB;GACrB,MAAM,KAAKA,eAAeiC,QAAO;GACjC,KAAKjC,iBAAiBkC,KAAAA;EAC1B;EAEA,IAAI,KAAKnC,kBAAkB;GACvB,KAAKA,iBAAiBoC,WAAU;GAChC,KAAKpC,mBAAmBmC,KAAAA;EAC5B;CACJ;CAIA,MAAgBvB,cAAcN,WAAuBP,SAA2C;EAC5F,MAAMQ,SAASD,UAAUE,QAAQd,kBAAAA;EAIjC,IAAI,EAAC2C,MAFe7D,cAAc,EAAEuB,QAAQ,CAAA,EAAA,CAEjCuC,QAAQ;GACf/B,OAAOO,MAAM,sBAAA;GACb,MAAMrC,eAAe;IACjBsB;IACAwC,aAAa;IACbC,YAAY;GAChB,CAAA;GACAjC,OAAOO,MAAM,kBAAA;EACjB;CACJ;CAEA,MAAgBE,QAAQV,WAAuBO,YAAuC;EAClF,MAAMN,SAASD,UAAUE,QAAQd,kBAAAA;EAEjCa,OAAOO,MAAM,uBAAA;EACb,MAAMpC,0BAA0BmC,UAAAA;EAChCN,OAAOO,MAAM,mBAAA;CACjB;;;;;IASA,MAAgBH,uBAAuBL,WAAoD;EACvF,MAAMmC,SAASnC,UAAUE,QAAQf,kBAAAA;EAEjC,IAAIM;EACJ,IAAI0C,OAAOC,IACP3C,UAAU,KAAKD,eAAe6C,UAAUF,OAAOC,EAAE;OAEjD3C,UAAU,KAAKD,eAAe8C,aAAY;EAG9C,IAAI,CAAC7D,wBAAwBgB,QAAQ8C,IAAI,GACrC,MAAM,IAAIxE,YAAY,iBAAiB0B,QAAQ8C,KAAK,8DAA8D;EAGtH,IAAI,CAAC7D,sCAAsCe,QAAQ8C,MAAMJ,OAAOK,GAAG,GAC/D,MAAM,IAAIzE,YAAY,iBAAiB0B,QAAQ8C,KAAK,wBAAwBJ,OAAOK,IAAI,EAAE;EAG7F,MAAMC,cAAczC,UAAUuB,WAAWvC,iBAAAA;EACzC,IAAIyD,YAAYjB,SACZkB,OAAOC,OAAOlD,SAAS,EACnBmD,OAAO,EACHC,WAAAA;GACI,OAAO,IAAIvE,yBAAyBmE,YAAYhB,IAAI;EACxD,EACJ,EACJ,CAAA;EAGJ,OAAOhC;CACX;CAEUkB,qBAAqBX,WAAuBO,YAA+B;EACjF,MAAMuC,WAAWvC,WAAWd,QAAQqD,YAAY,CAAA;EAChD,IAAI,CAACC,MAAMC,QAAQF,QAAAA,GACf;EAGJ,KAAK,MAAMG,UAAUH,UAAU;GAC3B,IAAI7E,gBAAgBiF,eAAeD,MAAAA,GAC/B;GAKJjD,UAAUc,SAASmC,QAAQ,EAAEE,kBAAkB5C,WAAW6C,cAAcH,MAAAA,EAAQ,CAAA;EACpF;CACJ;CAEUpC,uBAAuBb,WAAuBO,YAAwB;EAC5E,MAAM4B,SAASnC,UAAUE,QAAQf,kBAAAA;EACjC,MAAMc,SAASD,UAAUE,QAAQd,kBAAAA;EAEjC,MAAMiE,YAAY,IAAI1F,qBAAqB,EAAEsC,OAAO,CAAA;EACpD,KAAKN,iBAAiB0D;EACtB,IAAIlB,OAAOmB,OAAO;GACd,MAAMC,SAASzF,kBAAkBqE,OAAOmB,KAAK;GAC7C,IAAIC,WAAWpB,OAAOmB,OAClB,KAAK5D,mBAAmB6D;GAG5BF,UAAUvC,SAAS,IAAIlD,wBAAwB2F,MAAAA,CAAAA;GAC/CF,UAAUvC,SAAS,IAAIjD,yBAAyB0F,MAAAA,CAAAA;EACpD;EAEA,IAAIpB,OAAOqB,mBAAmBrB,OAAOsB,uBACjCJ,UAAUvC,SAAS,IAAInC,mBAAmB;GACtC+E,cAAc1D,UAAUE,QAAQhB,qBAAqBN,YAAY;GACjE+E,gBAAgB9E;GAChBY,SAAS,EAAEmE,eAAezB,OAAO0B,4BAA4B;EACjE,CAAA,CAAA;EAGJ7D,UAAUc,SAAS5B,qBAAqBvB,sBAAsB,EAAEoD,UAAUsC,UAAU,CAAA;EAEpF,KAAK,IAAIS,IAAI,GAAGA,IAAIvD,WAAWwD,YAAYC,QAAQF,KAAK;GACpD,MAAMG,aAAa1D,WAAWwD,YAAYD;GAC1C,IAAIG,sBAAsB1F,kBACtB0F,WAAWC,aAAab,SAAAA;EAEhC;CACJ;CAEUzC,eAAeZ,WAAuBO,YAAwB;EACpE,MAAM4B,SAASnC,UAAUE,QAAQf,kBAAAA;EACjC,MAAMc,SAASD,UAAUE,QAAQd,kBAAAA;EAEjC,MAAM+E,aAAa,IAAIrF,uBACnByB,WAAW6C,cAAqB5E,WAAAA,CAAAA;EAEpCwB,UAAUc,SAAS5B,qBAAqByC,iBAAiB,EAAEZ,UAAUoD,WAAW,CAAA;EAEhF,MAAMC,UAAU,IAAIxF,aAAa;GAC7BuF;GACA1E,SAAS;IACL4E,SAASlC,OAAOqB;IAChBI,eAAezB,OAAOmC;GAC1B;GACArE;EACJ,CAAA;EACAD,UAAUc,SAAS5B,qBAAqBN,cAAc,EAAEmC,UAAUqD,QAAQ,CAAA;CAC9E;AACJ"}
1	+ {"version":3,"file":"module.mjs","names":["DomainEventPublisher","DomainEventRedisHandler","DomainEventSocketHandler","createRedisClient","AuthupError","DataSource","InstanceChecker","checkDatabase","createDatabase","synchronizeDatabaseSchema","DataSourceOptionsBuilder","DatabaseQueryResultCache","EntitySubscriber","EventEntity","isDatabaseTypeSupported","isDatabaseTypeSupportedForEnvironment","EntityEventHandler","EventService","useRequestEventContext","EventRepositoryAdapter","validateEntitySchemas","verifySchemaOrSynchronize","CacheInjectionKey","ModuleName","DatabaseInjectionKey","ConfigInjectionKey","LoggerInjectionKey","DatabaseModule","name","dependencies","optionsBuilder","options","eventRedisClient","eventPublisher","DATABASE","CONFIG","LOGGER","setup","container","logger","resolve","prepareBuild","dataSourceOptions","buildDataSourceOptions","setupDatabase","dataSource","debug","initialize","migrate","registerRepositories","registerEvents","registerEventPublisher","register","useValue","e","isInitialized","destroy","disposeEventPublisher","cleanupError","warn","teardown","tryResolve","success","data","unregister","EventRepository","dispose","undefined","disconnect","check","exists","synchronize","ifNotExist","config","migrationEnabled","db","buildWith","buildWithEnvOrDefault","type","env","cacheResult","Object","assign","cache","provider","entities","Array","isArray","entity","isEntitySchema","useFactory","getRepository","publisher","redis","client","eventLogEnabled","eventLogEntityEnabled","eventService","requestContext","retentionDays","eventLogEntityRetentionDays","i","subscribers","length","subscriber","setPublisher","repository","service","enabled","eventLogRetentionDays"],"sources":["../../../../src/app/modules/database/module.ts"],"sourcesContent":["/\n Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n /\n\nimport {\n DomainEventPublisher,\n DomainEventRedisHandler,\n DomainEventSocketHandler,\n createRedisClient,\n} from '@authup/server-kit';\nimport type { RedisClient } from '@authup/server-kit';\nimport { AuthupError } from '@authup/errors';\nimport type { DataSourceOptions } from 'typeorm';\nimport { DataSource, InstanceChecker } from 'typeorm';\nimport {\n checkDatabase,\n createDatabase,\n synchronizeDatabaseSchema,\n} from 'typeorm-extension';\nimport {\n DataSourceOptionsBuilder,\n DatabaseQueryResultCache,\n EntitySubscriber,\n EventEntity,\n isDatabaseTypeSupported,\n isDatabaseTypeSupportedForEnvironment,\n} from '../../../adapters/database/index.ts';\nimport type { Event } from '@authup/core-kit';\nimport { EntityEventHandler, EventService } from '../../../core/index.ts';\nimport { useRequestEventContext } from '../../../adapters/http/request/index.ts';\nimport { EventRepositoryAdapter } from './repositories/index.ts';\nimport { validateEntitySchemas } from './repositories/schema-validation.ts';\nimport { verifySchemaOrSynchronize } from './migration.ts';\nimport { CacheInjectionKey } from '../cache/index.ts';\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { DatabaseInjectionKey } from './constants.ts';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport type { IContainer } from 'eldin';\nimport { LoggerInjectionKey } from '../logger/index.ts';\n\nexport type DatabaseModuleOptions = {\n prepareBuild?: (container: IContainer) => Promise<void>;\n setup?: (container: IContainer, options: DataSourceOptions) => Promise<void>;\n migrate?: (container: IContainer, dataSource: DataSource) => Promise<void>;\n};\n\nexport class DatabaseModule implements IModule {\n readonly name: string;\n\n readonly dependencies: string[];\n\n protected optionsBuilder : DataSourceOptionsBuilder;\n\n protected options: DatabaseModuleOptions;\n\n protected eventRedisClient? : RedisClient;\n\n protected eventPublisher? : DomainEventPublisher;\n\n constructor(options: DatabaseModuleOptions = {}) {\n this.name = ModuleName.DATABASE;\n this.dependencies = [ModuleName.CONFIG, ModuleName.LOGGER];\n\n this.optionsBuilder = new DataSourceOptionsBuilder();\n this.options = options;\n }\n\n async setup(container: IContainer): Promise<void> {\n const logger = container.resolve(LoggerInjectionKey);\n\n if (this.options.prepareBuild) {\n await this.options.prepareBuild(container);\n }\n\n const dataSourceOptions = await this.buildDataSourceOptions(container);\n\n if (this.options.setup) {\n await this.options.setup(container, dataSourceOptions);\n } else {\n await this.setupDatabase(container, dataSourceOptions);\n }\n\n const dataSource = new DataSource(dataSourceOptions);\n\n logger.debug('Establishing database connection...');\n await dataSource.initialize();\n logger.debug('Established database connection.');\n\n try {\n if (this.options.migrate) {\n await this.options.migrate(container, dataSource);\n } else {\n await this.migrate(container, dataSource);\n }\n\n validateEntitySchemas(dataSource);\n this.registerRepositories(container, dataSource);\n // the event service must exist before the publisher wiring — the\n // entity-CRUD bridge handler resolves it from the container.\n this.registerEvents(container, dataSource);\n this.registerEventPublisher(container, dataSource);\n\n container.register(DatabaseInjectionKey.DataSource, { useValue: dataSource });\n } catch (e) {\n // teardown() is skipped for a module that fails its own setup(),\n // so release the connection pool and any event-publisher handles\n // here. Guard cleanup so it can never mask the original error.\n try {\n if (dataSource.isInitialized) {\n await dataSource.destroy();\n }\n\n await this.disposeEventPublisher();\n } catch (cleanupError) {\n logger.warn(`Failed to clean up database resources after setup error: ${cleanupError}`);\n }\n\n throw e;\n }\n }\n\n async teardown(container: IContainer): Promise<void> {\n const dataSource = container.tryResolve(DatabaseInjectionKey.DataSource);\n if (dataSource.success) {\n if (dataSource.data.isInitialized) {\n await dataSource.data.destroy();\n }\n\n container.unregister(DatabaseInjectionKey.DataSource);\n }\n\n container.unregister(DatabaseInjectionKey.DomainEventPublisher);\n container.unregister(DatabaseInjectionKey.EventRepository);\n container.unregister(DatabaseInjectionKey.EventService);\n\n await this.disposeEventPublisher();\n }\n\n protected async disposeEventPublisher(): Promise<void> {\n if (this.eventPublisher) {\n await this.eventPublisher.dispose();\n this.eventPublisher = undefined;\n }\n\n if (this.eventRedisClient) {\n this.eventRedisClient.disconnect();\n this.eventRedisClient = undefined;\n }\n }\n\n // ----------------------------------------------------\n\n protected async setupDatabase(container: IContainer, options: DataSourceOptions): Promise<void> {\n const logger = container.resolve(LoggerInjectionKey);\n\n const check = await checkDatabase({ options });\n\n if (!check.exists) {\n logger.debug('Creating database...');\n await createDatabase({\n options,\n synchronize: false,\n ifNotExist: true, \n });\n logger.debug('Created database');\n }\n }\n\n protected async migrate(container: IContainer, dataSource: DataSource): Promise<void> {\n const config = container.resolve(ConfigInjectionKey);\n const logger = container.resolve(LoggerInjectionKey);\n\n if (!config.migrationEnabled) {\n await verifySchemaOrSynchronize(logger, dataSource);\n return;\n }\n\n logger.debug('Migrating database...');\n await synchronizeDatabaseSchema(dataSource);\n logger.debug('Migrated database');\n }\n\n // ----------------------------------------------------\n\n /\n Load data source options for connection.\n \n @protected\n */\n protected async buildDataSourceOptions(container: IContainer) : Promise<DataSourceOptions> {\n const config = container.resolve(ConfigInjectionKey);\n\n let options : DataSourceOptions \| undefined;\n if (config.db) {\n // the configuration surface is deliberately untyped: `db` is\n // authup's own loose shape, and the supported-dialect assertion\n // below is what narrows it.\n options = this.optionsBuilder.buildWith(config.db as DataSourceOptions);\n } else {\n options = this.optionsBuilder.buildWithEnvOrDefault();\n }\n\n if (!isDatabaseTypeSupported(options.type)) {\n throw new AuthupError(`Database type ${options.type} is not supported (only: mysql, better-sqlite3 and postgres).`);\n }\n\n if (!isDatabaseTypeSupportedForEnvironment(options.type, config.env)) {\n throw new AuthupError(`Database type \"${options.type}\" is not supported in the ${config.env} environment. Set DB_TYPE to \"postgres\" or \"mysql\" together with DB_HOST, DB_PORT, DB_USERNAME, DB_PASSWORD and DB_DATABASE, or declare \"db\" in authup.yml. With no database configured at all, \"better-sqlite3\" is the fallback.`);\n }\n\n const cacheResult = container.tryResolve(CacheInjectionKey);\n if (cacheResult.success) {\n Object.assign(options, {\n cache: {\n provider() {\n return new DatabaseQueryResultCache(cacheResult.data);\n },\n },\n } satisfies Partial<DataSourceOptions>);\n }\n\n return options;\n }\n\n protected registerRepositories(container: IContainer, dataSource: DataSource) : void {\n const entities = dataSource.options.entities \|\| [];\n if (!Array.isArray(entities)) {\n return;\n }\n\n for (const entity of entities) {\n if (InstanceChecker.isEntitySchema(entity)) {\n continue;\n }\n\n // eslint-disable-next-line @typescript-eslint/ban-ts-comment\n // @ts-expect-error\n container.register(entity, { useFactory: () => dataSource.getRepository(entity) });\n }\n }\n\n protected registerEventPublisher(container: IContainer, dataSource: DataSource) {\n const config = container.resolve(ConfigInjectionKey);\n const logger = container.resolve(LoggerInjectionKey);\n\n const publisher = new DomainEventPublisher({ logger });\n this.eventPublisher = publisher;\n if (config.redis) {\n // the configuration surface is deliberately untyped: the object\n // arm of `redis` is opaque, and the client owns its real shape.\n const client = createRedisClient(config.redis);\n if (client !== config.redis) {\n this.eventRedisClient = client;\n }\n\n publisher.register(new DomainEventRedisHandler(client));\n publisher.register(new DomainEventSocketHandler(client));\n }\n\n if (config.eventLogEnabled && config.eventLogEntityEnabled) {\n publisher.register(new EntityEventHandler({\n eventService: container.resolve(DatabaseInjectionKey.EventService),\n requestContext: useRequestEventContext,\n options: { retentionDays: config.eventLogEntityRetentionDays },\n }));\n }\n\n container.register(DatabaseInjectionKey.DomainEventPublisher, { useValue: publisher });\n\n for (let i = 0; i < dataSource.subscribers.length; i++) {\n const subscriber = dataSource.subscribers[i];\n if (subscriber instanceof EntitySubscriber) {\n subscriber.setPublisher(publisher);\n }\n }\n }\n\n protected registerEvents(container: IContainer, dataSource: DataSource) {\n const config = container.resolve(ConfigInjectionKey);\n const logger = container.resolve(LoggerInjectionKey);\n\n const repository = new EventRepositoryAdapter(\n dataSource.getRepository<Event>(EventEntity),\n );\n container.register(DatabaseInjectionKey.EventRepository, { useValue: repository });\n\n const service = new EventService({\n repository,\n options: {\n enabled: config.eventLogEnabled,\n retentionDays: config.eventLogRetentionDays,\n },\n logger,\n });\n container.register(DatabaseInjectionKey.EventService, { useValue: service });\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkDA,IAAa2B,iBAAb,MAAaA;CACAC;CAEAC;CAECC;CAEAC;CAEAC;CAEAC;CAEV,YAAYF,UAAiC,CAAC,GAAG;EAC7C,KAAKH,OAAOL,WAAWW;EACvB,KAAKL,eAAe,CAACN,WAAWY,QAAQZ,WAAWa,MAAO;EAE1D,KAAKN,iBAAiB,IAAIpB,yBAAAA;EAC1B,KAAKqB,UAAUA;CACnB;CAEA,MAAMM,MAAMC,WAAsC;EAC9C,MAAMC,SAASD,UAAUE,QAAQd,kBAAAA;EAEjC,IAAI,KAAKK,QAAQU,cACb,MAAM,KAAKV,QAAQU,aAAaH,SAAAA;EAGpC,MAAMI,oBAAoB,MAAM,KAAKC,uBAAuBL,SAAAA;EAE5D,IAAI,KAAKP,QAAQM,OACb,MAAM,KAAKN,QAAQM,MAAMC,WAAWI,iBAAAA;OAEpC,MAAM,KAAKE,cAAcN,WAAWI,iBAAAA;EAGxC,MAAMG,aAAa,IAAIxC,WAAWqC,iBAAAA;EAElCH,OAAOO,MAAM,qCAAA;EACb,MAAMD,WAAWE,WAAU;EAC3BR,OAAOO,MAAM,kCAAA;EAEb,IAAI;GACA,IAAI,KAAKf,QAAQiB,SACb,MAAM,KAAKjB,QAAQiB,QAAQV,WAAWO,UAAAA;QAEtC,MAAM,KAAKG,QAAQV,WAAWO,UAAAA;GAGlCzB,sBAAsByB,UAAAA;GACtB,KAAKI,qBAAqBX,WAAWO,UAAAA;GAGrC,KAAKK,eAAeZ,WAAWO,UAAAA;GAC/B,KAAKM,uBAAuBb,WAAWO,UAAAA;GAEvCP,UAAUc,SAAS5B,qBAAqBnB,YAAY,EAAEgD,UAAUR,WAAW,CAAA;EAC/E,SAASS,GAAG;GAIR,IAAI;IACA,IAAIT,WAAWU,eACX,MAAMV,WAAWW,QAAO;IAG5B,MAAM,KAAKC,sBAAqB;GACpC,SAASC,cAAc;IACnBnB,OAAOoB,KAAK,4DAA4DD,cAAc;GAC1F;GAEA,MAAMJ;EACV;CACJ;CAEA,MAAMM,SAAStB,WAAsC;EACjD,MAAMO,aAAaP,UAAUuB,WAAWrC,qBAAqBnB,UAAU;EACvE,IAAIwC,WAAWiB,SAAS;GACpB,IAAIjB,WAAWkB,KAAKR,eAChB,MAAMV,WAAWkB,KAAKP,QAAO;GAGjClB,UAAU0B,WAAWxC,qBAAqBnB,UAAU;EACxD;EAEAiC,UAAU0B,WAAWxC,qBAAqBxB,oBAAoB;EAC9DsC,UAAU0B,WAAWxC,qBAAqByC,eAAe;EACzD3B,UAAU0B,WAAWxC,qBAAqBP,YAAY;EAEtD,MAAM,KAAKwC,sBAAqB;CACpC;CAEA,MAAgBA,wBAAuC;EACnD,IAAI,KAAKxB,gBAAgB;GACrB,MAAM,KAAKA,eAAeiC,QAAO;GACjC,KAAKjC,iBAAiBkC,KAAAA;EAC1B;EAEA,IAAI,KAAKnC,kBAAkB;GACvB,KAAKA,iBAAiBoC,WAAU;GAChC,KAAKpC,mBAAmBmC,KAAAA;EAC5B;CACJ;CAIA,MAAgBvB,cAAcN,WAAuBP,SAA2C;EAC5F,MAAMQ,SAASD,UAAUE,QAAQd,kBAAAA;EAIjC,IAAI,EAAC2C,MAFe9D,cAAc,EAAEwB,QAAQ,CAAA,EAAA,CAEjCuC,QAAQ;GACf/B,OAAOO,MAAM,sBAAA;GACb,MAAMtC,eAAe;IACjBuB;IACAwC,aAAa;IACbC,YAAY;GAChB,CAAA;GACAjC,OAAOO,MAAM,kBAAA;EACjB;CACJ;CAEA,MAAgBE,QAAQV,WAAuBO,YAAuC;EAClF,MAAM4B,SAASnC,UAAUE,QAAQf,kBAAAA;EACjC,MAAMc,SAASD,UAAUE,QAAQd,kBAAAA;EAEjC,IAAI,CAAC+C,OAAOC,kBAAkB;GAC1B,MAAMrD,0BAA0BkB,QAAQM,UAAAA;GACxC;EACJ;EAEAN,OAAOO,MAAM,uBAAA;EACb,MAAMrC,0BAA0BoC,UAAAA;EAChCN,OAAOO,MAAM,mBAAA;CACjB;;;;;IASA,MAAgBH,uBAAuBL,WAAoD;EACvF,MAAMmC,SAASnC,UAAUE,QAAQf,kBAAAA;EAEjC,IAAIM;EACJ,IAAI0C,OAAOE,IAIP5C,UAAU,KAAKD,eAAe8C,UAAUH,OAAOE,EAAE;OAEjD5C,UAAU,KAAKD,eAAe+C,sBAAqB;EAGvD,IAAI,CAAC/D,wBAAwBiB,QAAQ+C,IAAI,GACrC,MAAM,IAAI1E,YAAY,iBAAiB2B,QAAQ+C,KAAK,8DAA8D;EAGtH,IAAI,CAAC/D,sCAAsCgB,QAAQ+C,MAAML,OAAOM,GAAG,GAC/D,MAAM,IAAI3E,YAAY,kBAAkB2B,QAAQ+C,KAAK,4BAA4BL,OAAOM,IAAI,kOAAkO;EAGlU,MAAMC,cAAc1C,UAAUuB,WAAWvC,iBAAAA;EACzC,IAAI0D,YAAYlB,SACZmB,OAAOC,OAAOnD,SAAS,EACnBoD,OAAO,EACHC,WAAAA;GACI,OAAO,IAAIzE,yBAAyBqE,YAAYjB,IAAI;EACxD,EACJ,EACJ,CAAA;EAGJ,OAAOhC;CACX;CAEUkB,qBAAqBX,WAAuBO,YAA+B;EACjF,MAAMwC,WAAWxC,WAAWd,QAAQsD,YAAY,CAAA;EAChD,IAAI,CAACC,MAAMC,QAAQF,QAAAA,GACf;EAGJ,KAAK,MAAMG,UAAUH,UAAU;GAC3B,IAAI/E,gBAAgBmF,eAAeD,MAAAA,GAC/B;GAKJlD,UAAUc,SAASoC,QAAQ,EAAEE,kBAAkB7C,WAAW8C,cAAcH,MAAAA,EAAQ,CAAA;EACpF;CACJ;CAEUrC,uBAAuBb,WAAuBO,YAAwB;EAC5E,MAAM4B,SAASnC,UAAUE,QAAQf,kBAAAA;EACjC,MAAMc,SAASD,UAAUE,QAAQd,kBAAAA;EAEjC,MAAMkE,YAAY,IAAI5F,qBAAqB,EAAEuC,OAAO,CAAA;EACpD,KAAKN,iBAAiB2D;EACtB,IAAInB,OAAOoB,OAAO;GAGd,MAAMC,SAAS3F,kBAAkBsE,OAAOoB,KAAK;GAC7C,IAAIC,WAAWrB,OAAOoB,OAClB,KAAK7D,mBAAmB8D;GAG5BF,UAAUxC,SAAS,IAAInD,wBAAwB6F,MAAAA,CAAAA;GAC/CF,UAAUxC,SAAS,IAAIlD,yBAAyB4F,MAAAA,CAAAA;EACpD;EAEA,IAAIrB,OAAOsB,mBAAmBtB,OAAOuB,uBACjCJ,UAAUxC,SAAS,IAAIpC,mBAAmB;GACtCiF,cAAc3D,UAAUE,QAAQhB,qBAAqBP,YAAY;GACjEiF,gBAAgBhF;GAChBa,SAAS,EAAEoE,eAAe1B,OAAO2B,4BAA4B;EACjE,CAAA,CAAA;EAGJ9D,UAAUc,SAAS5B,qBAAqBxB,sBAAsB,EAAEqD,UAAUuC,UAAU,CAAA;EAEpF,KAAK,IAAIS,IAAI,GAAGA,IAAIxD,WAAWyD,YAAYC,QAAQF,KAAK;GACpD,MAAMG,aAAa3D,WAAWyD,YAAYD;GAC1C,IAAIG,sBAAsB5F,kBACtB4F,WAAWC,aAAab,SAAAA;EAEhC;CACJ;CAEU1C,eAAeZ,WAAuBO,YAAwB;EACpE,MAAM4B,SAASnC,UAAUE,QAAQf,kBAAAA;EACjC,MAAMc,SAASD,UAAUE,QAAQd,kBAAAA;EAEjC,MAAMgF,aAAa,IAAIvF,uBACnB0B,WAAW8C,cAAqB9E,WAAAA,CAAAA;EAEpCyB,UAAUc,SAAS5B,qBAAqByC,iBAAiB,EAAEZ,UAAUqD,WAAW,CAAA;EAEhF,MAAMC,UAAU,IAAI1F,aAAa;GAC7ByF;GACA3E,SAAS;IACL6E,SAASnC,OAAOsB;IAChBI,eAAe1B,OAAOoC;GAC1B;GACAtE;EACJ,CAAA;EACAD,UAAUc,SAAS5B,qBAAqBP,cAAc,EAAEoC,UAAUsD,QAAQ,CAAA;CAC9E;AACJ"}

package/dist/app/modules/database/repositories/client/repository.d.ts CHANGED Viewed

@@ -8,10 +8,14 @@ export type ClientRepositoryAdapterContext = {
     repository: Repository<Client>;
     realmRepository: Repository<Realm>;
 };
+export type ClientRepositoryAdapterOptions = {
+    lockRows?: boolean;
+};
 export declare class ClientRepositoryAdapter implements IClientRepository {
     private readonly repository;
     private readonly realmRepository;
-    constructor(ctx: ClientRepositoryAdapterContext);
+    private readonly lockRows;
+    constructor(ctx: ClientRepositoryAdapterContext, options?: ClientRepositoryAdapterOptions);
     findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<Client>>;
     findOneById(id: string): Promise<Client | null>;
     findOneByName(name: string, realmKey?: string): Promise<Client | null>;
@@ -24,6 +28,7 @@ export declare class ClientRepositoryAdapter implements IClientRepository {
     merge(entity: Client, data: Partial<Client>): Client;
     save(entity: Client): Promise<Client>;
     remove(entity: Client): Promise<void>;
+    transaction<R>(fn: (repository: IClientRepository) => Promise<R>): Promise<R>;
     validateJoinColumns(data: Partial<Client>): Promise<void>;
     checkUniqueness(data: Partial<Client>, existing?: Client): Promise<void>;
     getBoundRoles(entity: string | Client): Promise<Role[]>;

package/dist/app/modules/database/repositories/client/repository.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/client/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAG9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,iBAAiB,EAAoB,MAAM,8BAA8B,CAAC;~~AAYxF~~,MAAM,MAAM,8BAA8B,GAAG;IACzC,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/B,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;CACtC,CAAC;AAEF,qBAAa,uBAAwB,YAAW,iBAAiB;IAC7D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAEhD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;~~gBAEvC~~,GAAG,EAAE,8BAA8B;~~IAKzC~~,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAiB9E,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAIzC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAetE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAsB9E,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAM3E,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIzD,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;~~IAI7D~~,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;~~IAY3E~~,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM;IAIrC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM;IAI9C,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIrC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOzD,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAaxE,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAmBvD,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC;CAUzF"}
1	+ {"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/client/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAG9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,iBAAiB,EAAoB,MAAM,8BAA8B,CAAC;AAcxF,MAAM,MAAM,8BAA8B,GAAG;IACzC,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/B,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IACzC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,qBAAa,uBAAwB,YAAW,iBAAiB;IAC7D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAEhD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;IAEnD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;gBAEvB,GAAG,EAAE,8BAA8B,EAAE,OAAO,GAAE,8BAAmC;IAMvF,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAiB9E,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAIzC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAetE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAsB9E,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAM3E,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIzD,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAO7D,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAgB3E,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM;IAIrC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM;IAI9C,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIrC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,EAAE,iBAAiB,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAmB7E,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOzD,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAaxE,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAmBvD,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC;CAUzF"}

package/dist/app/modules/database/repositories/client/repository.mjs CHANGED Viewed

@@ -1,14 +1,17 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { isDatabaseTypeRowLockable } from "../../../../../adapters/database/helpers/is-supported.mjs";
+import "../../../../../adapters/database/helpers/index.mjs";
+import { RealmEntity } from "../../../../../adapters/database/domains/realm/entity.mjs";
 import { CachePrefix } from "../../../../../adapters/database/domains/constants.mjs";
 import { ClientEntity } from "../../../../../adapters/database/domains/client/entity.mjs";
 import { ClientRoleEntity } from "../../../../../adapters/database/domains/client-role/entity.mjs";
 import { ClientPermissionEntity } from "../../../../../adapters/database/domains/client-permission/entity.mjs";
 import "../../../../../adapters/database/domains/index.mjs";
 import { applyQuery, redactFieldConditions } from "../query.mjs";
-import { isEntityUnique, translateWhereConditions } from "../helpers.mjs";
 import { DatabaseConflictError } from "../../../../../adapters/database/errors/conflict.mjs";
+import { isEntityUnique, translateWhereConditions } from "../helpers.mjs";
 import "../../../../../adapters/database/index.mjs";
 import { loadBoundPermissions } from "../bindings.mjs";
 import { RealmRepositoryAdapter } from "../realm/repository.mjs";
@@ -16,12 +19,14 @@ import { isUUID } from "@authup/kit";
 import { buildRedisKeyPath } from "@authup/server-kit";
 import { validateEntityJoinColumns } from "typeorm-extension";
 //#region src/app/modules/database/repositories/client/repository.ts
-var ClientRepositoryAdapter = class {
+var ClientRepositoryAdapter = class ClientRepositoryAdapter {
 	repository;
 	realmRepository;
-	constructor(ctx) {
+	lockRows;
+	constructor(ctx, options = {}) {
 		this.repository = ctx.repository;
 		this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);
+		this.lockRows = options.lockRows ?? false;
 	}
 	async findMany(query) {
 		const qb = this.repository.createQueryBuilder("client");
@@ -70,7 +75,10 @@ var ClientRepositoryAdapter = class {
 		return this.repository.findBy(translateWhereConditions(where));
 	}
 	async findOneBy(where) {
-		return this.repository.findOneBy(translateWhereConditions(where));
+		return this.repository.findOne({
+			where: translateWhereConditions(where),
+			...this.lockRows ? { lock: { mode: "pessimistic_write" } } : {}
+		});
 	}
 	async findOneWithSecret(where) {
 		const qb = this.repository.createQueryBuilder("client");
@@ -78,6 +86,7 @@ var ClientRepositoryAdapter = class {
 			qb.andWhere(`client.${key} = :${key}`, { [key]: value });
 		});
 		qb.addSelect("client.secret");
+		if (this.lockRows) qb.setLock("pessimistic_write");
 		return qb.getOne();
 	}
 	create(data) {
@@ -92,6 +101,14 @@ var ClientRepositoryAdapter = class {
 	async remove(entity) {
 		await this.repository.remove(entity);
 	}
+	async transaction(fn) {
+		const dataSource = this.repository.manager.connection;
+		if (!isDatabaseTypeRowLockable(dataSource.options.type)) return fn(this);
+		return dataSource.transaction((manager) => fn(new ClientRepositoryAdapter({
+			repository: manager.getRepository(ClientEntity),
+			realmRepository: manager.getRepository(RealmEntity)
+		}, { lockRows: true })));
+	}
 	async validateJoinColumns(data) {
 		await validateEntityJoinColumns(data, {
 			dataSource: this.repository.manager.connection,

package/dist/app/modules/database/repositories/client/repository.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"repository.mjs","names":["buildRedisKeyPath","isUUID","validateEntityJoinColumns","applyQuery","redactFieldConditions","DatabaseConflictError","isEntityUnique","translateWhereConditions","loadBoundPermissions","CachePrefix","ClientEntity","ClientPermissionEntity","ClientRoleEntity","RealmRepositoryAdapter","ClientRepositoryAdapter","repository","realmRepository","ctx","findMany","query","qb","createQueryBuilder","groupBy","pagination","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","name","realmKey","where","realmId","resolveId","andWhere","getOne","findOne","findOneByIdOrName","idOrName","realm","findManyBy","findBy","findOneWithSecret","Object","entries","forEach","key","value","addSelect","create","merge","entity","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget","checkUniqueness","existing","isUnique","entityExisting","getBoundRoles","getRepository","find","clientId","relations","role","cache","prefix","CLIENT_OWNED_ROLES","milliseconds","map","entry","getBoundPermissions","junctionTarget","cachePrefix","CLIENT_OWNED_PERMISSIONS","cacheKey"],"sources":["../../../../../../src/app/modules/database/repositories/client/repository.ts"],"sourcesContent":["/\n Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Client, Realm, Role } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport type { PermissionPolicyBinding } from '@authup/access';\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { validateEntityJoinColumns } from 'typeorm-extension';\nimport { applyQuery, redactFieldConditions } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IClientRepository, IRealmRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport { isEntityUnique, translateWhereConditions } from '../helpers.ts';\nimport { loadBoundPermissions } from '../bindings.ts';\nimport {\n CachePrefix,\n ClientEntity,\n ClientPermissionEntity,\n ClientRoleEntity,\n} from '../../../../../adapters/database/domains/index.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type ClientRepositoryAdapterContext = {\n repository: Repository<Client>,\n realmRepository: Repository<Realm>,\n};\n\nexport class ClientRepositoryAdapter implements IClientRepository {\n private readonly repository: Repository<Client>;\n\n private readonly realmRepository: IRealmRepository;\n\n constructor(ctx: ClientRepositoryAdapterContext) {\n this.repository = ctx.repository;\n this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n }\n\n async findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<Client>> {\n const qb = this.repository.createQueryBuilder('client');\n qb.groupBy('client.id');\n\n const { pagination } = applyQuery(qb, query);\n\n const [entities, total] = await qb.getManyAndCount();\n\n return {\n data: redactFieldConditions(query, entities),\n meta: {\n total,\n ...pagination,\n },\n };\n }\n\n findOneById(id: string): Promise<Client \| null> {\n return this.findOneBy({ id });\n }\n\n async findOneByName(name: string, realmKey?: string): Promise<Client \| null> {\n const qb = this.repository.createQueryBuilder('client');\n qb.where('client.name = :name', { name });\n\n if (realmKey) {\n const realmId = await this.realmRepository.resolveId(realmKey);\n if (!realmId) {\n return null;\n }\n qb.andWhere('client.realmId = :realmId', { realmId });\n }\n\n return qb.getOne();\n }\n\n async findOne(id: string, query?: IQuery, realmKey?: string): Promise<Client \| null> {\n const qb = this.repository.createQueryBuilder('client');\n\n if (isUUID(id)) {\n qb.where('client.id = :id', { id });\n } else {\n qb.where('client.name = :name', { name: id });\n\n if (realmKey) {\n const realmId = await this.realmRepository.resolveId(realmKey);\n if (!realmId) {\n return null;\n }\n qb.andWhere('client.realmId = :realmId', { realmId });\n }\n }\n\n applyQuery(qb, query);\n\n return qb.getOne();\n }\n\n async findOneByIdOrName(idOrName: string, realm?: string): Promise<Client \| null> {\n return isUUID(idOrName) ?\n this.findOneById(idOrName) :\n this.findOneByName(idOrName, realm);\n }\n\n async findManyBy(where: Record<string, any>): Promise<Client[]> {\n return this.repository.findBy(translateWhereConditions(where));\n }\n\n async findOneBy(where: Record<string, any>): Promise<Client \| null> {\n return this.repository.findOneBy(translateWhereConditions(where));\n }\n\n async findOneWithSecret(where: Record<string, any>): Promise<Client \| null> {\n const qb = this.repository.createQueryBuilder('client');\n\n Object.entries(where).forEach(([key, value]) => {\n qb.andWhere(`client.${key} = :${key}`, { [key]: value });\n });\n\n qb.addSelect('client.secret');\n\n return qb.getOne();\n }\n\n create(data: Partial<Client>): Client {\n return this.repository.create(data);\n }\n\n merge(entity: Client, data: Partial<Client>): Client {\n return this.repository.merge(entity, data);\n }\n\n async save(entity: Client): Promise<Client> {\n return this.repository.save(entity);\n }\n\n async remove(entity: Client): Promise<void> {\n await this.repository.remove(entity);\n }\n\n async validateJoinColumns(data: Partial<Client>): Promise<void> {\n await validateEntityJoinColumns(data, {\n dataSource: this.repository.manager.connection,\n entityTarget: ClientEntity,\n });\n }\n\n async checkUniqueness(data: Partial<Client>, existing?: Client): Promise<void> {\n const isUnique = await isEntityUnique({\n dataSource: this.repository.manager.connection,\n entityTarget: ClientEntity,\n entity: data,\n entityExisting: existing,\n });\n\n if (!isUnique) {\n throw new DatabaseConflictError();\n }\n }\n\n async getBoundRoles(entity: string \| Client): Promise<Role[]> {\n const id = typeof entity === 'string' ? entity : entity.id;\n const entries = await this.repository.manager\n .getRepository(ClientRoleEntity)\n .find({\n where: { clientId: id },\n relations: { role: true },\n cache: {\n id: buildRedisKeyPath({\n prefix: CachePrefix.CLIENT_OWNED_ROLES,\n key: id,\n }),\n milliseconds: 60_000,\n },\n });\n\n return entries.map((entry) => entry.role);\n }\n\n async getBoundPermissions(entity: string \| Client): Promise<PermissionPolicyBinding[]> {\n const id = typeof entity === 'string' ? entity : entity.id;\n return loadBoundPermissions({\n manager: this.repository.manager,\n junctionTarget: ClientPermissionEntity,\n where: { clientId: id },\n cachePrefix: CachePrefix.CLIENT_OWNED_PERMISSIONS,\n cacheKey: id,\n });\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAiCA,IAAac,0BAAb,MAAaA;CACQC;CAEAC;CAEjB,YAAYC,KAAqC;EAC7C,KAAKF,aAAaE,IAAIF;EACtB,KAAKC,kBAAkB,IAAIH,uBAAuBI,IAAID,eAAe;CACzE;CAEA,MAAME,SAASC,OAAgE;EAC3E,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,QAAA;EAC9CD,GAAGE,QAAQ,WAAA;EAEX,MAAM,EAAEC,eAAepB,WAAWiB,IAAID,KAAAA;EAEtC,MAAM,CAACK,UAAUC,SAAS,MAAML,GAAGM,gBAAe;EAElD,OAAO;GACHC,MAAMvB,sBAAsBe,OAAOK,QAAAA;GACnCI,MAAM;IACFH;IACA,GAAGF;GACP;EACJ;CACJ;CAEAM,YAAYC,IAAoC;EAC5C,OAAO,KAAKC,UAAU,EAAED,GAAG,CAAA;CAC/B;CAEA,MAAME,cAAcC,MAAcC,UAA2C;EACzE,MAAMd,KAAK,KAAKL,WAAWM,mBAAmB,QAAA;EAC9CD,GAAGe,MAAM,uBAAuB,EAAEF,KAAK,CAAA;EAEvC,IAAIC,UAAU;GACV,MAAME,UAAU,MAAM,KAAKpB,gBAAgBqB,UAAUH,QAAAA;GACrD,IAAI,CAACE,SACD,OAAO;GAEXhB,GAAGkB,SAAS,6BAA6B,EAAEF,QAAQ,CAAA;EACvD;EAEA,OAAOhB,GAAGmB,OAAM;CACpB;CAEA,MAAMC,QAAQV,IAAYX,OAAgBe,UAA2C;EACjF,MAAMd,KAAK,KAAKL,WAAWM,mBAAmB,QAAA;EAE9C,IAAIpB,OAAO6B,EAAAA,GACPV,GAAGe,MAAM,mBAAmB,EAAEL,GAAG,CAAA;OAC9B;GACHV,GAAGe,MAAM,uBAAuB,EAAEF,MAAMH,GAAG,CAAA;GAE3C,IAAII,UAAU;IACV,MAAME,UAAU,MAAM,KAAKpB,gBAAgBqB,UAAUH,QAAAA;IACrD,IAAI,CAACE,SACD,OAAO;IAEXhB,GAAGkB,SAAS,6BAA6B,EAAEF,QAAQ,CAAA;GACvD;EACJ;EAEAjC,WAAWiB,IAAID,KAAAA;EAEf,OAAOC,GAAGmB,OAAM;CACpB;CAEA,MAAME,kBAAkBC,UAAkBC,OAAwC;EAC9E,OAAO1C,OAAOyC,QAAAA,IACV,KAAKb,YAAYa,QAAAA,IACjB,KAAKV,cAAcU,UAAUC,KAAAA;CACrC;CAEA,MAAMC,WAAWT,OAA+C;EAC5D,OAAO,KAAKpB,WAAW8B,OAAOtC,yBAAyB4B,KAAAA,CAAAA;CAC3D;CAEA,MAAMJ,UAAUI,OAAoD;EAChE,OAAO,KAAKpB,WAAWgB,UAAUxB,yBAAyB4B,KAAAA,CAAAA;CAC9D;CAEA,MAAMW,kBAAkBX,OAAoD;EACxE,MAAMf,KAAK,KAAKL,WAAWM,mBAAmB,QAAA;EAE9C0B,OAAOC,QAAQb,KAAAA,CAAAA,CAAOc,SAAS,CAACC,KAAKC,WAAM;GACvC/B,GAAGkB,SAAS,UAAUY,IAAI,MAAMA,OAAO,GAAGA,MAAMC,MAAM,CAAA;EAC1D,CAAA;EAEA/B,GAAGgC,UAAU,eAAA;EAEb,OAAOhC,GAAGmB,OAAM;CACpB;CAEAc,OAAO1B,MAA+B;EAClC,OAAO,KAAKZ,WAAWsC,OAAO1B,IAAAA;CAClC;CAEA2B,MAAMC,QAAgB5B,MAA+B;EACjD,OAAO,KAAKZ,WAAWuC,MAAMC,QAAQ5B,IAAAA;CACzC;CAEA,MAAM6B,KAAKD,QAAiC;EACxC,OAAO,KAAKxC,WAAWyC,KAAKD,MAAAA;CAChC;CAEA,MAAME,OAAOF,QAA+B;EACxC,MAAM,KAAKxC,WAAW0C,OAAOF,MAAAA;CACjC;CAEA,MAAMG,oBAAoB/B,MAAsC;EAC5D,MAAMzB,0BAA0ByB,MAAM;GAClCgC,YAAY,KAAK5C,WAAW6C,QAAQC;GACpCC,cAAcpD;EAClB,CAAA;CACJ;CAEA,MAAMqD,gBAAgBpC,MAAuBqC,UAAkC;EAQ3E,IAAI,CAACC,MAPkB3D,eAAe;GAClCqD,YAAY,KAAK5C,WAAW6C,QAAQC;GACpCC,cAAcpD;GACd6C,QAAQ5B;GACRuC,gBAAgBF;EACpB,CAAA,GAGI,MAAM,IAAI3D,sBAAAA;CAElB;CAEA,MAAM8D,cAAcZ,QAA0C;EAC1D,MAAMzB,KAAK,OAAOyB,WAAW,WAAWA,SAASA,OAAOzB;EAexD,QAAOkB,MAde,KAAKjC,WAAW6C,QACjCQ,cAAcxD,gBAAAA,CAAAA,CACdyD,KAAK;GACFlC,OAAO,EAAEmC,UAAUxC,GAAG;GACtByC,WAAW,EAAEC,MAAM,KAAK;GACxBC,OAAO;IACH3C,IAAI9B,kBAAkB;KAClB0E,QAAQjE,YAAYkE;KACpBzB,KAAKpB;IACT,CAAA;IACA8C,cAAc;GAClB;EACJ,CAAA,EAAA,CAEWC,KAAKC,UAAUA,MAAMN,IAAI;CAC5C;CAEA,MAAMO,oBAAoBxB,QAA6D;EACnF,MAAMzB,KAAK,OAAOyB,WAAW,WAAWA,SAASA,OAAOzB;EACxD,OAAOtB,qBAAqB;GACxBoD,SAAS,KAAK7C,WAAW6C;GACzBoB,gBAAgBrE;GAChBwB,OAAO,EAAEmC,UAAUxC,GAAG;GACtBmD,aAAaxE,YAAYyE;GACzBC,UAAUrD;EACd,CAAA;CACJ;AACJ"}
1	+ {"version":3,"file":"repository.mjs","names":["buildRedisKeyPath","isUUID","validateEntityJoinColumns","applyQuery","redactFieldConditions","DatabaseConflictError","isDatabaseTypeRowLockable","isEntityUnique","translateWhereConditions","loadBoundPermissions","CachePrefix","ClientEntity","ClientPermissionEntity","ClientRoleEntity","RealmEntity","RealmRepositoryAdapter","ClientRepositoryAdapter","repository","realmRepository","lockRows","ctx","options","findMany","query","qb","createQueryBuilder","groupBy","pagination","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","name","realmKey","where","realmId","resolveId","andWhere","getOne","findOne","findOneByIdOrName","idOrName","realm","findManyBy","findBy","lock","mode","findOneWithSecret","Object","entries","forEach","key","value","addSelect","setLock","create","merge","entity","save","remove","transaction","fn","dataSource","manager","connection","type","getRepository","validateJoinColumns","entityTarget","checkUniqueness","existing","isUnique","entityExisting","getBoundRoles","find","clientId","relations","role","cache","prefix","CLIENT_OWNED_ROLES","milliseconds","map","entry","getBoundPermissions","junctionTarget","cachePrefix","CLIENT_OWNED_PERMISSIONS","cacheKey"],"sources":["../../../../../../src/app/modules/database/repositories/client/repository.ts"],"sourcesContent":["/\n Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Client, Realm, Role } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport type { PermissionPolicyBinding } from '@authup/access';\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { validateEntityJoinColumns } from 'typeorm-extension';\nimport { applyQuery, redactFieldConditions } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IClientRepository, IRealmRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport { isDatabaseTypeRowLockable } from '../../../../../adapters/database/helpers/index.ts';\nimport { isEntityUnique, translateWhereConditions } from '../helpers.ts';\nimport { loadBoundPermissions } from '../bindings.ts';\nimport {\n CachePrefix,\n ClientEntity,\n ClientPermissionEntity,\n ClientRoleEntity,\n RealmEntity,\n} from '../../../../../adapters/database/domains/index.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type ClientRepositoryAdapterContext = {\n repository: Repository<Client>,\n realmRepository: Repository<Realm>,\n};\n\nexport type ClientRepositoryAdapterOptions = {\n lockRows?: boolean,\n};\n\nexport class ClientRepositoryAdapter implements IClientRepository {\n private readonly repository: Repository<Client>;\n\n private readonly realmRepository: IRealmRepository;\n\n private readonly lockRows: boolean;\n\n constructor(ctx: ClientRepositoryAdapterContext, options: ClientRepositoryAdapterOptions = {}) {\n this.repository = ctx.repository;\n this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n this.lockRows = options.lockRows ?? false;\n }\n\n async findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<Client>> {\n const qb = this.repository.createQueryBuilder('client');\n qb.groupBy('client.id');\n\n const { pagination } = applyQuery(qb, query);\n\n const [entities, total] = await qb.getManyAndCount();\n\n return {\n data: redactFieldConditions(query, entities),\n meta: {\n total,\n ...pagination,\n },\n };\n }\n\n findOneById(id: string): Promise<Client \| null> {\n return this.findOneBy({ id });\n }\n\n async findOneByName(name: string, realmKey?: string): Promise<Client \| null> {\n const qb = this.repository.createQueryBuilder('client');\n qb.where('client.name = :name', { name });\n\n if (realmKey) {\n const realmId = await this.realmRepository.resolveId(realmKey);\n if (!realmId) {\n return null;\n }\n qb.andWhere('client.realmId = :realmId', { realmId });\n }\n\n return qb.getOne();\n }\n\n async findOne(id: string, query?: IQuery, realmKey?: string): Promise<Client \| null> {\n const qb = this.repository.createQueryBuilder('client');\n\n if (isUUID(id)) {\n qb.where('client.id = :id', { id });\n } else {\n qb.where('client.name = :name', { name: id });\n\n if (realmKey) {\n const realmId = await this.realmRepository.resolveId(realmKey);\n if (!realmId) {\n return null;\n }\n qb.andWhere('client.realmId = :realmId', { realmId });\n }\n }\n\n applyQuery(qb, query);\n\n return qb.getOne();\n }\n\n async findOneByIdOrName(idOrName: string, realm?: string): Promise<Client \| null> {\n return isUUID(idOrName) ?\n this.findOneById(idOrName) :\n this.findOneByName(idOrName, realm);\n }\n\n async findManyBy(where: Record<string, any>): Promise<Client[]> {\n return this.repository.findBy(translateWhereConditions(where));\n }\n\n async findOneBy(where: Record<string, any>): Promise<Client \| null> {\n return this.repository.findOne({\n where: translateWhereConditions(where),\n ...(this.lockRows ? { lock: { mode: 'pessimistic_write' } } : {}),\n });\n }\n\n async findOneWithSecret(where: Record<string, any>): Promise<Client \| null> {\n const qb = this.repository.createQueryBuilder('client');\n\n Object.entries(where).forEach(([key, value]) => {\n qb.andWhere(`client.${key} = :${key}`, { [key]: value });\n });\n\n qb.addSelect('client.secret');\n\n if (this.lockRows) {\n qb.setLock('pessimistic_write');\n }\n\n return qb.getOne();\n }\n\n create(data: Partial<Client>): Client {\n return this.repository.create(data);\n }\n\n merge(entity: Client, data: Partial<Client>): Client {\n return this.repository.merge(entity, data);\n }\n\n async save(entity: Client): Promise<Client> {\n return this.repository.save(entity);\n }\n\n async remove(entity: Client): Promise<void> {\n await this.repository.remove(entity);\n }\n\n async transaction<R>(fn: (repository: IClientRepository) => Promise<R>): Promise<R> {\n const dataSource = this.repository.manager.connection;\n if (!isDatabaseTypeRowLockable(dataSource.options.type)) {\n // better-sqlite3: no FOR UPDATE, and the driver shares ONE query\n // runner, so a transaction here would nest as a savepoint inside\n // whatever else is running on it. Plain unlocked passthrough,\n // exactly as the un-guarded path did (the removeGuarded rule).\n return fn(this);\n }\n\n // mysql / postgres: real concurrency. Hand the callback an adapter\n // bound to the transaction's manager whose single-row reads lock,\n // so the row loaded by save() cannot change under the merge.\n return dataSource.transaction((manager) => fn(new ClientRepositoryAdapter({\n repository: manager.getRepository(ClientEntity),\n realmRepository: manager.getRepository(RealmEntity),\n }, { lockRows: true })));\n }\n\n async validateJoinColumns(data: Partial<Client>): Promise<void> {\n await validateEntityJoinColumns(data, {\n dataSource: this.repository.manager.connection,\n entityTarget: ClientEntity,\n });\n }\n\n async checkUniqueness(data: Partial<Client>, existing?: Client): Promise<void> {\n const isUnique = await isEntityUnique({\n dataSource: this.repository.manager.connection,\n entityTarget: ClientEntity,\n entity: data,\n entityExisting: existing,\n });\n\n if (!isUnique) {\n throw new DatabaseConflictError();\n }\n }\n\n async getBoundRoles(entity: string \| Client): Promise<Role[]> {\n const id = typeof entity === 'string' ? entity : entity.id;\n const entries = await this.repository.manager\n .getRepository(ClientRoleEntity)\n .find({\n where: { clientId: id },\n relations: { role: true },\n cache: {\n id: buildRedisKeyPath({\n prefix: CachePrefix.CLIENT_OWNED_ROLES,\n key: id,\n }),\n milliseconds: 60_000,\n },\n });\n\n return entries.map((entry) => entry.role);\n }\n\n async getBoundPermissions(entity: string \| Client): Promise<PermissionPolicyBinding[]> {\n const id = typeof entity === 'string' ? entity : entity.id;\n return loadBoundPermissions({\n manager: this.repository.manager,\n junctionTarget: ClientPermissionEntity,\n where: { clientId: id },\n cachePrefix: CachePrefix.CLIENT_OWNED_PERMISSIONS,\n cacheKey: id,\n });\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAuCA,IAAagB,0BAAb,MAAaA,wBAAAA;CACQC;CAEAC;CAEAC;CAEjB,YAAYC,KAAqCC,UAA0C,CAAC,GAAG;EAC3F,KAAKJ,aAAaG,IAAIH;EACtB,KAAKC,kBAAkB,IAAIH,uBAAuBK,IAAIF,eAAe;EACrE,KAAKC,WAAWE,QAAQF,YAAY;CACxC;CAEA,MAAMG,SAASC,OAAgE;EAC3E,MAAMC,KAAK,KAAKP,WAAWQ,mBAAmB,QAAA;EAC9CD,GAAGE,QAAQ,WAAA;EAEX,MAAM,EAAEC,eAAexB,WAAWqB,IAAID,KAAAA;EAEtC,MAAM,CAACK,UAAUC,SAAS,MAAML,GAAGM,gBAAe;EAElD,OAAO;GACHC,MAAM3B,sBAAsBmB,OAAOK,QAAAA;GACnCI,MAAM;IACFH;IACA,GAAGF;GACP;EACJ;CACJ;CAEAM,YAAYC,IAAoC;EAC5C,OAAO,KAAKC,UAAU,EAAED,GAAG,CAAA;CAC/B;CAEA,MAAME,cAAcC,MAAcC,UAA2C;EACzE,MAAMd,KAAK,KAAKP,WAAWQ,mBAAmB,QAAA;EAC9CD,GAAGe,MAAM,uBAAuB,EAAEF,KAAK,CAAA;EAEvC,IAAIC,UAAU;GACV,MAAME,UAAU,MAAM,KAAKtB,gBAAgBuB,UAAUH,QAAAA;GACrD,IAAI,CAACE,SACD,OAAO;GAEXhB,GAAGkB,SAAS,6BAA6B,EAAEF,QAAQ,CAAA;EACvD;EAEA,OAAOhB,GAAGmB,OAAM;CACpB;CAEA,MAAMC,QAAQV,IAAYX,OAAgBe,UAA2C;EACjF,MAAMd,KAAK,KAAKP,WAAWQ,mBAAmB,QAAA;EAE9C,IAAIxB,OAAOiC,EAAAA,GACPV,GAAGe,MAAM,mBAAmB,EAAEL,GAAG,CAAA;OAC9B;GACHV,GAAGe,MAAM,uBAAuB,EAAEF,MAAMH,GAAG,CAAA;GAE3C,IAAII,UAAU;IACV,MAAME,UAAU,MAAM,KAAKtB,gBAAgBuB,UAAUH,QAAAA;IACrD,IAAI,CAACE,SACD,OAAO;IAEXhB,GAAGkB,SAAS,6BAA6B,EAAEF,QAAQ,CAAA;GACvD;EACJ;EAEArC,WAAWqB,IAAID,KAAAA;EAEf,OAAOC,GAAGmB,OAAM;CACpB;CAEA,MAAME,kBAAkBC,UAAkBC,OAAwC;EAC9E,OAAO9C,OAAO6C,QAAAA,IACV,KAAKb,YAAYa,QAAAA,IACjB,KAAKV,cAAcU,UAAUC,KAAAA;CACrC;CAEA,MAAMC,WAAWT,OAA+C;EAC5D,OAAO,KAAKtB,WAAWgC,OAAOzC,yBAAyB+B,KAAAA,CAAAA;CAC3D;CAEA,MAAMJ,UAAUI,OAAoD;EAChE,OAAO,KAAKtB,WAAW2B,QAAQ;GAC3BL,OAAO/B,yBAAyB+B,KAAAA;GAChC,GAAI,KAAKpB,WAAW,EAAE+B,MAAM,EAAEC,MAAM,oBAAoB,EAAE,IAAI,CAAC;EACnE,CAAA;CACJ;CAEA,MAAMC,kBAAkBb,OAAoD;EACxE,MAAMf,KAAK,KAAKP,WAAWQ,mBAAmB,QAAA;EAE9C4B,OAAOC,QAAQf,KAAAA,CAAAA,CAAOgB,SAAS,CAACC,KAAKC,WAAM;GACvCjC,GAAGkB,SAAS,UAAUc,IAAI,MAAMA,OAAO,GAAGA,MAAMC,MAAM,CAAA;EAC1D,CAAA;EAEAjC,GAAGkC,UAAU,eAAA;EAEb,IAAI,KAAKvC,UACLK,GAAGmC,QAAQ,mBAAA;EAGf,OAAOnC,GAAGmB,OAAM;CACpB;CAEAiB,OAAO7B,MAA+B;EAClC,OAAO,KAAKd,WAAW2C,OAAO7B,IAAAA;CAClC;CAEA8B,MAAMC,QAAgB/B,MAA+B;EACjD,OAAO,KAAKd,WAAW4C,MAAMC,QAAQ/B,IAAAA;CACzC;CAEA,MAAMgC,KAAKD,QAAiC;EACxC,OAAO,KAAK7C,WAAW8C,KAAKD,MAAAA;CAChC;CAEA,MAAME,OAAOF,QAA+B;EACxC,MAAM,KAAK7C,WAAW+C,OAAOF,MAAAA;CACjC;CAEA,MAAMG,YAAeC,IAA+D;EAChF,MAAMC,aAAa,KAAKlD,WAAWmD,QAAQC;EAC3C,IAAI,CAAC/D,0BAA0B6D,WAAW9C,QAAQiD,IAAI,GAKlD,OAAOJ,GAAG,IAAI;EAMlB,OAAOC,WAAWF,aAAaG,YAAYF,GAAG,IAAIlD,wBAAwB;GACtEC,YAAYmD,QAAQG,cAAc5D,YAAAA;GAClCO,iBAAiBkD,QAAQG,cAAczD,WAAAA;EAC3C,GAAG,EAAEK,UAAU,KAAK,CAAA,CAAA,CAAA;CACxB;CAEA,MAAMqD,oBAAoBzC,MAAsC;EAC5D,MAAM7B,0BAA0B6B,MAAM;GAClCoC,YAAY,KAAKlD,WAAWmD,QAAQC;GACpCI,cAAc9D;EAClB,CAAA;CACJ;CAEA,MAAM+D,gBAAgB3C,MAAuB4C,UAAkC;EAQ3E,IAAI,CAACC,MAPkBrE,eAAe;GAClC4D,YAAY,KAAKlD,WAAWmD,QAAQC;GACpCI,cAAc9D;GACdmD,QAAQ/B;GACR8C,gBAAgBF;EACpB,CAAA,GAGI,MAAM,IAAItE,sBAAAA;CAElB;CAEA,MAAMyE,cAAchB,QAA0C;EAC1D,MAAM5B,KAAK,OAAO4B,WAAW,WAAWA,SAASA,OAAO5B;EAexD,QAAOoB,MAde,KAAKrC,WAAWmD,QACjCG,cAAc1D,gBAAAA,CAAAA,CACdkE,KAAK;GACFxC,OAAO,EAAEyC,UAAU9C,GAAG;GACtB+C,WAAW,EAAEC,MAAM,KAAK;GACxBC,OAAO;IACHjD,IAAIlC,kBAAkB;KAClBoF,QAAQ1E,YAAY2E;KACpB7B,KAAKtB;IACT,CAAA;IACAoD,cAAc;GAClB;EACJ,CAAA,EAAA,CAEWC,KAAKC,UAAUA,MAAMN,IAAI;CAC5C;CAEA,MAAMO,oBAAoB3B,QAA6D;EACnF,MAAM5B,KAAK,OAAO4B,WAAW,WAAWA,SAASA,OAAO5B;EACxD,OAAOzB,qBAAqB;GACxB2D,SAAS,KAAKnD,WAAWmD;GACzBsB,gBAAgB9E;GAChB2B,OAAO,EAAEyC,UAAU9C,GAAG;GACtByD,aAAajF,YAAYkF;GACzBC,UAAU3D;EACd,CAAA;CACJ;AACJ"}

package/dist/app/modules/database/repositories/event/repository.d.ts CHANGED Viewed

@@ -2,12 +2,39 @@ import type { Event } from '@authup/core-kit';
 import type { IQuery } from '@rapiq/core';
 import type { Repository } from 'typeorm';
 import type { EntityRepositoryFindManyResult } from '@authup/server-kit';
-import type { EventCountRecentFilter, EventDeleteExpiredOptions, EventFindManyOptions, IEventRepository } from '../../../../../core/index.ts';
+import type { EventCountRecentFilter, EventDeleteExpiredOptions, EventFindManyOptions, EventSaveOptions, IEventRepository } from '../../../../../core/index.ts';
 export declare class EventRepositoryAdapter implements IEventRepository {
     private readonly repository;
+    /**
+     * One pending audit save per caller connection, keyed by the manager the
+     * hook handed over (every hook of one broadcast gets the same object).
+     */
+    private readonly transactionQueue;
     constructor(repository: Repository<Event>);
     create(data: Partial<Event>): Event;
-    save(entity: Event): Promise<Event>;
+    save(entity: Event, options?: EventSaveOptions): Promise<Event>;
+    /**
+     * Writes the row on the connection the caller already holds.
+     *
+     * Serialized per connection, because the after-hooks of one array save run
+     * concurrently (typeorm awaits them with Promise.all) and would otherwise
+     * put several statements in flight on one client. pg deprecates that in
+     * 8.22 and removes it in 9, and typeorm avoids it everywhere it controls
+     * the fan-out.
+     *
+     * `transaction: false` keeps the nested save from opening a transaction of
+     * its own. Inside a persist transaction it would not have, but a
+     * query-builder insert (the extra-attribute add path) broadcasts its hooks
+     * on a runner carrying no transaction, and there each save would otherwise
+     * BEGIN and COMMIT one.
+     *
+     * Deliberately no savepoint: savepoints are a stack per connection, and
+     * `startTransaction` issues `SAVEPOINT typeorm_<depth>` and awaits it
+     * before incrementing the depth, so concurrent hooks raced it and a
+     * RELEASE named a savepoint that was never created. The residual is
+     * postgres-only and stated in .agents/architecture.md.
+     */
+    private saveOnCallerConnection;
     findOneById(id: string): Promise<Event | null>;
     findMany(query: IQuery, options?: EventFindManyOptions): Promise<EntityRepositoryFindManyResult<Event>>;
     countRecent(filter: EventCountRecentFilter): Promise<number>;

package/dist/app/modules/database/repositories/event/repository.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/event/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EACR,sBAAsB,EACtB,yBAAyB,EACzB,oBAAoB,EACpB,gBAAgB,EACnB,MAAM,8BAA8B,CAAC;AAItC,qBAAa,sBAAuB,YAAW,gBAAgB;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;~~gBAEnC~~,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC;~~IAIzC~~,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK;IAI7B,IAAI,CAAC,MAAM,EAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;~~IAInC~~,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAI9C,QAAQ,CACV,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,oBAAyB,GACnC,OAAO,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC;IAoD3C,WAAW,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC;IAmC5D,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,yBAA8B,GAAG,OAAO,CAAC,MAAM,CAAC;~~CA+C7F~~"}
1	+ {"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/event/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EACR,sBAAsB,EACtB,yBAAyB,EACzB,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EACnB,MAAM,8BAA8B,CAAC;AAItC,qBAAa,sBAAuB,YAAW,gBAAgB;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAE/C;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA2C;gBAEhE,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC;IAKzC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK;IAI7B,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,KAAK,CAAC;IAYzE;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,sBAAsB;IAexB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAI9C,QAAQ,CACV,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,oBAAyB,GACnC,OAAO,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC;IAoD3C,WAAW,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC;IAmC5D,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,yBAA8B,GAAG,OAAO,CAAC,MAAM,CAAC;CAU7F"}

package/dist/app/modules/database/repositories/event/repository.mjs CHANGED Viewed

@@ -4,20 +4,51 @@ import.meta.url;
 import { EVENT_RETENTION_SWEEP_BATCH_SIZE } from "../../../../../core/entities/event/constants.mjs";
 import "../../../../../core/index.mjs";
 import { applyQuery, redactFieldConditions } from "../query.mjs";
-import { applyRealmScopeSelect } from "../helpers.mjs";
-import { In, LessThan } from "typeorm";
+import { applyRealmScopeSelect, deleteInBatches, resolveSweepBatchSize } from "../helpers.mjs";
+import { EntityManager, LessThan } from "typeorm";
 //#region src/app/modules/database/repositories/event/repository.ts
 var EventRepositoryAdapter = class {
 	repository;
+	/**
+	* One pending audit save per caller connection, keyed by the manager the
+	* hook handed over (every hook of one broadcast gets the same object).
+	*/ transactionQueue;
 	constructor(repository) {
 		this.repository = repository;
+		this.transactionQueue = /* @__PURE__ */ new WeakMap();
 	}
 	create(data) {
 		return this.repository.create(data);
 	}
-	async save(entity) {
+	async save(entity, options = {}) {
+		if (options.transaction instanceof EntityManager) return this.saveOnCallerConnection(options.transaction, entity);
 		return this.repository.save(entity);
 	}
+	/**
+	* Writes the row on the connection the caller already holds.
+	*
+	* Serialized per connection, because the after-hooks of one array save run
+	* concurrently (typeorm awaits them with Promise.all) and would otherwise
+	* put several statements in flight on one client. pg deprecates that in
+	* 8.22 and removes it in 9, and typeorm avoids it everywhere it controls
+	* the fan-out.
+	*
+	* `transaction: false` keeps the nested save from opening a transaction of
+	* its own. Inside a persist transaction it would not have, but a
+	* query-builder insert (the extra-attribute add path) broadcasts its hooks
+	* on a runner carrying no transaction, and there each save would otherwise
+	* BEGIN and COMMIT one.
+	*
+	* Deliberately no savepoint: savepoints are a stack per connection, and
+	* `startTransaction` issues `SAVEPOINT typeorm_<depth>` and awaits it
+	* before incrementing the depth, so concurrent hooks raced it and a
+	* RELEASE named a savepoint that was never created. The residual is
+	* postgres-only and stated in .agents/architecture.md.
+	*/ saveOnCallerConnection(manager, entity) {
+		const next = (this.transactionQueue.get(manager) || Promise.resolve()).catch(() => void 0).then(() => manager.withRepository(this.repository).save(entity, { transaction: false }));
+		this.transactionQueue.set(manager, next.catch(() => void 0));
+		return next;
+	}
 	async findOneById(id) {
 		return this.repository.findOneBy({ id });
 	}
@@ -60,30 +91,17 @@ var EventRepositoryAdapter = class {
 		const qb = this.repository.createQueryBuilder("event").where("event.name = :name", { name: filter.name }).andWhere("event.createdAt > :since", { since });
 		if (filter.actorName) qb.andWhere("event.actorName = :actorName", { actorName: filter.actorName });
 		if (filter.requestIpAddress) qb.andWhere("event.requestIpAddress = :requestIpAddress", { requestIpAddress: filter.requestIpAddress });
-		if (typeof filter.realmId !== "undefined") if (filter.realmId === null) qb.andWhere("event.realmId IS NULL");
-		else qb.andWhere("event.realmId = :realmId", { realmId: filter.realmId });
+		if (typeof filter.realmId !== "undefined") {
+			if (filter.realmId === null) qb.andWhere("event.realmId IS NULL");
+			else qb.andWhere("event.realmId = :realmId", { realmId: filter.realmId });
+		}
 		return qb.getCount();
 	}
 	async deleteExpired(now, options = {}) {
-		const requested = options.batchSize;
-		const batchSize = typeof requested === "number" && Number.isSafeInteger(requested) && requested > 0 ? requested : EVENT_RETENTION_SWEEP_BATCH_SIZE;
-		let total = 0;
-		for (;;) {
-			const rows = await this.repository.find({
-				select: { id: true },
-				where: {
-					expiring: true,
-					expiresAt: LessThan(now)
-				},
-				take: batchSize
-			});
-			if (rows.length === 0) break;
-			const result = await this.repository.delete({ id: In(rows.map((row) => row.id)) });
-			total += result.affected ?? rows.length;
-			if (result.affected === 0) break;
-			if (rows.length < batchSize) break;
-		}
-		return total;
+		return deleteInBatches(this.repository, {
+			expiring: true,
+			expiresAt: LessThan(now)
+		}, resolveSweepBatchSize(options.batchSize, EVENT_RETENTION_SWEEP_BATCH_SIZE));
 	}
 };
 //#endregion

package/dist/app/modules/database/repositories/event/repository.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"repository.mjs","names":["In","LessThan","applyQuery","redactFieldConditions","EVENT_RETENTION_SWEEP_BATCH_SIZE","applyRealmScopeSelect","EventRepositoryAdapter","repository","create","data","save","entity","findOneById","id","findOneBy","findMany","query","options","qb","createQueryBuilder","pagination","owner","andWhere","ownerActorId","actorId","ownerActorType","actorType","realmId","routeRealmId","visibility","constraints","parameters","realmIds","filter","length","push","visibleRealmIds","includes","visibleActorId","visibleActorType","join","entities","total","getManyAndCount","meta","countRecent","since","Date","toISOString","replace","where","name","actorName","requestIpAddress","getCount","deleteExpired","now","requested","batchSize","Number","isSafeInteger","rows","find","select","expiring","expiresAt","take","result","delete","map","row","affected"],"sources":["../../../../../../src/app/modules/database/repositories/event/repository.ts"],"sourcesContent":["/\n Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Event } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport type { Repository } from 'typeorm';\nimport { In, LessThan } from 'typeorm';\nimport { applyQuery, redactFieldConditions } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type {\n EventCountRecentFilter,\n EventDeleteExpiredOptions,\n EventFindManyOptions,\n IEventRepository,\n} from '../../../../../core/index.ts';\nimport { EVENT_RETENTION_SWEEP_BATCH_SIZE } from '../../../../../core/index.ts';\nimport { applyRealmScopeSelect } from '../helpers.ts';\n\nexport class EventRepositoryAdapter implements IEventRepository {\n private readonly repository: Repository<Event>;\n\n constructor(repository: Repository<Event>) {\n this.repository = repository;\n }\n\n create(data: Partial<Event>): Event {\n return this.repository.create(data);\n }\n\n async save(entity: Event): Promise<Event> {\n return this.repository.save(entity);\n }\n\n async findOneById(id: string): Promise<Event \| null> {\n return this.repository.findOneBy({ id });\n }\n\n async findMany(\n query: IQuery,\n options: EventFindManyOptions = {},\n ): Promise<EntityRepositoryFindManyResult<Event>> {\n const qb = this.repository.createQueryBuilder('event');\n\n const { pagination } = applyQuery(qb, query);\n\n applyRealmScopeSelect(qb, 'event', ['actorId', 'actorType']);\n\n if (options.owner) {\n // mandatory constraint — not overridable by a rapiq filter\n qb.andWhere('event.actorId = :ownerActorId AND event.actorType = :ownerActorType', {\n ownerActorId: options.owner.actorId,\n ownerActorType: options.owner.actorType,\n });\n }\n\n if (options.realmId) {\n qb.andWhere('event.realmId = :routeRealmId', { routeRealmId: options.realmId });\n }\n\n if (options.visibility) {\n const constraints: string[] = [];\n const parameters: Record<string, unknown> = {};\n const realmIds = options.visibility.realmIds\n .filter((realmId): realmId is string => realmId !== null);\n\n if (realmIds.length > 0) {\n constraints.push('event.realmId IN (:...visibleRealmIds)');\n parameters.visibleRealmIds = realmIds;\n }\n if (options.visibility.realmIds.includes(null)) {\n constraints.push('event.realmId IS NULL');\n }\n if (options.visibility.owner) {\n constraints.push('(event.actorId = :visibleActorId AND event.actorType = :visibleActorType)');\n parameters.visibleActorId = options.visibility.owner.actorId;\n parameters.visibleActorType = options.visibility.owner.actorType;\n }\n\n qb.andWhere(`(${constraints.length > 0 ? constraints.join(' OR ') : '1 = 0'})`, parameters);\n }\n\n const [entities, total] = await qb.getManyAndCount();\n\n return {\n data: redactFieldConditions(query, entities),\n meta: {\n total,\n ...pagination,\n },\n };\n }\n\n async countRecent(filter: EventCountRecentFilter): Promise<number> {\n // created_at is stamped by the DATABASE server's clock (assumed UTC —\n // the shipped compose files and deployment posture; a non-UTC DB\n // server shifts the window regardless of what we bind), while a bound\n // Date object is serialized by the pg/mysql drivers in the HOST's\n // local timezone — on a non-UTC host that shifts the window by the\n // UTC offset (postgres: `timestamp without time zone` discards the\n // offset marker entirely). Bind a UTC wall-clock literal instead:\n // pg/mysql cast it as a wall-clock timestamp, sqlite compares it\n // lexicographically against the same format `datetime('now')` stores.\n const since = new Date(filter.since).toISOString().replace('T', ' ').replace('Z', '');\n\n const qb = this.repository.createQueryBuilder('event')\n .where('event.name = :name', { name: filter.name })\n .andWhere('event.createdAt > :since', { since });\n\n if (filter.actorName) {\n qb.andWhere('event.actorName = :actorName', { actorName: filter.actorName });\n }\n\n if (filter.requestIpAddress) {\n qb.andWhere('event.requestIpAddress = :requestIpAddress', { requestIpAddress: filter.requestIpAddress });\n }\n\n if (typeof filter.realmId !== 'undefined') {\n if (filter.realmId === null) {\n qb.andWhere('event.realmId IS NULL');\n } else {\n qb.andWhere('event.realmId = :realmId', { realmId: filter.realmId });\n }\n }\n\n return qb.getCount();\n }\n\n async deleteExpired(now: string, options: EventDeleteExpiredOptions = {}): Promise<number> {\n // A non-positive or non-integral size must never reach `take`: typeorm\n // ignores a falsy one, which would silently restore the single\n // unbounded DELETE this batching exists to prevent, and the rest reach\n // the driver as invalid SQL. Fall back to the default instead.\n const requested = options.batchSize;\n const batchSize = typeof requested === 'number' &&\n Number.isSafeInteger(requested) &&\n requested > 0 ?\n requested :\n EVENT_RETENTION_SWEEP_BATCH_SIZE;\n\n let total = 0;\n\n for (;;) {\n const rows = await this.repository.find({\n select: { id: true },\n where: {\n expiring: true,\n expiresAt: LessThan(now),\n },\n take: batchSize,\n });\n\n if (rows.length === 0) {\n break;\n }\n\n const result = await this.repository.delete({ id: In(rows.map((row) => row.id)) });\n\n // A driver that does not report affected rows still made\n // progress, so count the batch rather than returning 0.\n total += result.affected ?? rows.length;\n\n // Another replica's sweep already owns these rows. Stop rather\n // than re-selecting them; the next tick picks up whatever is left.\n if (result.affected === 0) {\n break;\n }\n\n if (rows.length < batchSize) {\n break;\n }\n }\n\n return total;\n }\n}\n"],"mappings":";;;;;;;;;AAsBA,IAAaM,yBAAb,MAAaA;CACQC;CAEjB,YAAYA,YAA+B;EACvC,KAAKA,aAAaA;CACtB;CAEAC,OAAOC,MAA6B;EAChC,OAAO,KAAKF,WAAWC,OAAOC,IAAAA;CAClC;CAEA,MAAMC,KAAKC,QAA+B;EACtC,OAAO,KAAKJ,WAAWG,KAAKC,MAAAA;CAChC;CAEA,MAAMC,YAAYC,IAAmC;EACjD,OAAO,KAAKN,WAAWO,UAAU,EAAED,GAAG,CAAA;CAC1C;CAEA,MAAME,SACFC,OACAC,UAAgC,CAAC,GACa;EAC9C,MAAMC,KAAK,KAAKX,WAAWY,mBAAmB,OAAA;EAE9C,MAAM,EAAEC,eAAelB,WAAWgB,IAAIF,KAAAA;EAEtCX,sBAAsBa,IAAI,SAAS,CAAC,WAAW,WAAY,CAAA;EAE3D,IAAID,QAAQI,OAERH,GAAGI,SAAS,uEAAuE;GAC/EC,cAAcN,QAAQI,MAAMG;GAC5BC,gBAAgBR,QAAQI,MAAMK;EAClC,CAAA;EAGJ,IAAIT,QAAQU,SACRT,GAAGI,SAAS,iCAAiC,EAAEM,cAAcX,QAAQU,QAAQ,CAAA;EAGjF,IAAIV,QAAQY,YAAY;GACpB,MAAMC,cAAwB,CAAA;GAC9B,MAAMC,aAAsC,CAAC;GAC7C,MAAMC,WAAWf,QAAQY,WAAWG,SAC/BC,QAAQN,YAA+BA,YAAY,IAAA;GAExD,IAAIK,SAASE,SAAS,GAAG;IACrBJ,YAAYK,KAAK,wCAAA;IACjBJ,WAAWK,kBAAkBJ;GACjC;GACA,IAAIf,QAAQY,WAAWG,SAASK,SAAS,IAAA,GACrCP,YAAYK,KAAK,uBAAA;GAErB,IAAIlB,QAAQY,WAAWR,OAAO;IAC1BS,YAAYK,KAAK,2EAAA;IACjBJ,WAAWO,iBAAiBrB,QAAQY,WAAWR,MAAMG;IACrDO,WAAWQ,mBAAmBtB,QAAQY,WAAWR,MAAMK;GAC3D;GAEAR,GAAGI,SAAS,IAAIQ,YAAYI,SAAS,IAAIJ,YAAYU,KAAK,MAAA,IAAU,QAAQ,IAAIT,UAAAA;EACpF;EAEA,MAAM,CAACU,UAAUC,SAAS,MAAMxB,GAAGyB,gBAAe;EAElD,OAAO;GACHlC,MAAMN,sBAAsBa,OAAOyB,QAAAA;GACnCG,MAAM;IACFF;IACA,GAAGtB;GACP;EACJ;CACJ;CAEA,MAAMyB,YAAYZ,QAAiD;EAU/D,MAAMa,QAAQ,IAAIC,KAAKd,OAAOa,KAAK,CAAA,CAAEE,YAAW,CAAA,CAAGC,QAAQ,KAAK,GAAA,CAAA,CAAKA,QAAQ,KAAK,EAAA;EAElF,MAAM/B,KAAK,KAAKX,WAAWY,mBAAmB,OAAA,CAAA,CACzC+B,MAAM,sBAAsB,EAAEC,MAAMlB,OAAOkB,KAAK,CAAA,CAAA,CAChD7B,SAAS,4BAA4B,EAAEwB,MAAM,CAAA;EAElD,IAAIb,OAAOmB,WACPlC,GAAGI,SAAS,gCAAgC,EAAE8B,WAAWnB,OAAOmB,UAAU,CAAA;EAG9E,IAAInB,OAAOoB,kBACPnC,GAAGI,SAAS,8CAA8C,EAAE+B,kBAAkBpB,OAAOoB,iBAAiB,CAAA;EAG1G,IAAI,OAAOpB,OAAON,YAAY,aAC1B,IAAIM,OAAON,YAAY,MACnBT,GAAGI,SAAS,uBAAA;OAEZJ,GAAGI,SAAS,4BAA4B,EAAEK,SAASM,OAAON,QAAQ,CAAA;EAI1E,OAAOT,GAAGoC,SAAQ;CACtB;CAEA,MAAMC,cAAcC,KAAavC,UAAqC,CAAC,GAAoB;EAKvF,MAAMwC,YAAYxC,QAAQyC;EAC1B,MAAMA,YAAY,OAAOD,cAAc,YACnCE,OAAOC,cAAcH,SAAAA,KACrBA,YAAY,IACZA,YACArD;EAEJ,IAAIsC,QAAQ;EAEZ,SAAS;GACL,MAAMmB,OAAO,MAAM,KAAKtD,WAAWuD,KAAK;IACpCC,QAAQ,EAAElD,IAAI,KAAK;IACnBqC,OAAO;KACHc,UAAU;KACVC,WAAWhE,SAASuD,GAAAA;IACxB;IACAU,MAAMR;GACV,CAAA;GAEA,IAAIG,KAAK3B,WAAW,GAChB;GAGJ,MAAMiC,SAAS,MAAM,KAAK5D,WAAW6D,OAAO,EAAEvD,IAAIb,GAAG6D,KAAKQ,KAAKC,QAAQA,IAAIzD,EAAE,CAAA,EAAG,CAAA;GAIhF6B,SAASyB,OAAOI,YAAYV,KAAK3B;GAIjC,IAAIiC,OAAOI,aAAa,GACpB;GAGJ,IAAIV,KAAK3B,SAASwB,WACd;EAER;EAEA,OAAOhB;CACX;AACJ"}
1	+ {"version":3,"file":"repository.mjs","names":["EntityManager","LessThan","applyQuery","redactFieldConditions","EVENT_RETENTION_SWEEP_BATCH_SIZE","applyRealmScopeSelect","deleteInBatches","resolveSweepBatchSize","EventRepositoryAdapter","repository","transactionQueue","WeakMap","create","data","save","entity","options","transaction","saveOnCallerConnection","manager","pending","get","Promise","resolve","next","catch","undefined","then","withRepository","set","findOneById","id","findOneBy","findMany","query","qb","createQueryBuilder","pagination","owner","andWhere","ownerActorId","actorId","ownerActorType","actorType","realmId","routeRealmId","visibility","constraints","parameters","realmIds","filter","length","push","visibleRealmIds","includes","visibleActorId","visibleActorType","join","entities","total","getManyAndCount","meta","countRecent","since","Date","toISOString","replace","where","name","actorName","requestIpAddress","getCount","deleteExpired","now","expiring","expiresAt","batchSize"],"sources":["../../../../../../src/app/modules/database/repositories/event/repository.ts"],"sourcesContent":["/\n Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n /\n\nimport type { Event } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport type { Repository } from 'typeorm';\nimport { EntityManager, LessThan } from 'typeorm';\nimport { applyQuery, redactFieldConditions } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type {\n EventCountRecentFilter,\n EventDeleteExpiredOptions,\n EventFindManyOptions,\n EventSaveOptions,\n IEventRepository,\n} from '../../../../../core/index.ts';\nimport { EVENT_RETENTION_SWEEP_BATCH_SIZE } from '../../../../../core/index.ts';\nimport { applyRealmScopeSelect, deleteInBatches, resolveSweepBatchSize } from '../helpers.ts';\n\nexport class EventRepositoryAdapter implements IEventRepository {\n private readonly repository: Repository<Event>;\n\n /\n One pending audit save per caller connection, keyed by the manager the\n * hook handed over (every hook of one broadcast gets the same object).\n /\n private readonly transactionQueue: WeakMap<EntityManager, Promise<unknown>>;\n\n constructor(repository: Repository<Event>) {\n this.repository = repository;\n this.transactionQueue = new WeakMap();\n }\n\n create(data: Partial<Event>): Event {\n return this.repository.create(data);\n }\n\n async save(entity: Event, options: EventSaveOptions = {}): Promise<Event> {\n // An audit row written from inside a persist transaction rides it: the\n // connection behind the write is still held while the subscriber hooks\n // run, so a save through the DataSource would wait for a second pooled\n // connection and ten concurrent writes deadlock (#3539).\n if (options.transaction instanceof EntityManager) {\n return this.saveOnCallerConnection(options.transaction, entity);\n }\n\n return this.repository.save(entity);\n }\n\n /\n Writes the row on the connection the caller already holds.\n \n Serialized per connection, because the after-hooks of one array save run\n * concurrently (typeorm awaits them with Promise.all) and would otherwise\n * put several statements in flight on one client. pg deprecates that in\n * 8.22 and removes it in 9, and typeorm avoids it everywhere it controls\n * the fan-out.\n \n `transaction: false` keeps the nested save from opening a transaction of\n * its own. Inside a persist transaction it would not have, but a\n * query-builder insert (the extra-attribute add path) broadcasts its hooks\n * on a runner carrying no transaction, and there each save would otherwise\n * BEGIN and COMMIT one.\n \n Deliberately no savepoint: savepoints are a stack per connection, and\n * `startTransaction` issues `SAVEPOINT typeorm_<depth>` and awaits it\n * before incrementing the depth, so concurrent hooks raced it and a\n * RELEASE named a savepoint that was never created. The residual is\n * postgres-only and stated in .agents/architecture.md.\n */\n private saveOnCallerConnection(manager: EntityManager, entity: Event): Promise<Event> {\n const pending = this.transactionQueue.get(manager) \|\| Promise.resolve();\n const next = pending\n .catch(() => undefined)\n .then(() => manager\n .withRepository(this.repository)\n .save(entity, { transaction: false }));\n\n // the queue tail must never stay rejected, or it would fail every\n // later row on this connection\n this.transactionQueue.set(manager, next.catch(() => undefined));\n\n return next;\n }\n\n async findOneById(id: string): Promise<Event \| null> {\n return this.repository.findOneBy({ id });\n }\n\n async findMany(\n query: IQuery,\n options: EventFindManyOptions = {},\n ): Promise<EntityRepositoryFindManyResult<Event>> {\n const qb = this.repository.createQueryBuilder('event');\n\n const { pagination } = applyQuery(qb, query);\n\n applyRealmScopeSelect(qb, 'event', ['actorId', 'actorType']);\n\n if (options.owner) {\n // mandatory constraint — not overridable by a rapiq filter\n qb.andWhere('event.actorId = :ownerActorId AND event.actorType = :ownerActorType', {\n ownerActorId: options.owner.actorId,\n ownerActorType: options.owner.actorType,\n });\n }\n\n if (options.realmId) {\n qb.andWhere('event.realmId = :routeRealmId', { routeRealmId: options.realmId });\n }\n\n if (options.visibility) {\n const constraints: string[] = [];\n const parameters: Record<string, unknown> = {};\n const realmIds = options.visibility.realmIds\n .filter((realmId): realmId is string => realmId !== null);\n\n if (realmIds.length > 0) {\n constraints.push('event.realmId IN (:...visibleRealmIds)');\n parameters.visibleRealmIds = realmIds;\n }\n if (options.visibility.realmIds.includes(null)) {\n constraints.push('event.realmId IS NULL');\n }\n if (options.visibility.owner) {\n constraints.push('(event.actorId = :visibleActorId AND event.actorType = :visibleActorType)');\n parameters.visibleActorId = options.visibility.owner.actorId;\n parameters.visibleActorType = options.visibility.owner.actorType;\n }\n\n qb.andWhere(`(${constraints.length > 0 ? constraints.join(' OR ') : '1 = 0'})`, parameters);\n }\n\n const [entities, total] = await qb.getManyAndCount();\n\n return {\n data: redactFieldConditions(query, entities),\n meta: {\n total,\n ...pagination,\n },\n };\n }\n\n async countRecent(filter: EventCountRecentFilter): Promise<number> {\n // created_at is stamped by the DATABASE server's clock (assumed UTC —\n // the shipped compose files and deployment posture; a non-UTC DB\n // server shifts the window regardless of what we bind), while a bound\n // Date object is serialized by the pg/mysql drivers in the HOST's\n // local timezone — on a non-UTC host that shifts the window by the\n // UTC offset (postgres: `timestamp without time zone` discards the\n // offset marker entirely). Bind a UTC wall-clock literal instead:\n // pg/mysql cast it as a wall-clock timestamp, sqlite compares it\n // lexicographically against the same format `datetime('now')` stores.\n const since = new Date(filter.since).toISOString().replace('T', ' ').replace('Z', '');\n\n const qb = this.repository.createQueryBuilder('event')\n .where('event.name = :name', { name: filter.name })\n .andWhere('event.createdAt > :since', { since });\n\n if (filter.actorName) {\n qb.andWhere('event.actorName = :actorName', { actorName: filter.actorName });\n }\n\n if (filter.requestIpAddress) {\n qb.andWhere('event.requestIpAddress = :requestIpAddress', { requestIpAddress: filter.requestIpAddress });\n }\n\n if (typeof filter.realmId !== 'undefined') {\n if (filter.realmId === null) {\n qb.andWhere('event.realmId IS NULL');\n } else {\n qb.andWhere('event.realmId = :realmId', { realmId: filter.realmId });\n }\n }\n\n return qb.getCount();\n }\n\n async deleteExpired(now: string, options: EventDeleteExpiredOptions = {}): Promise<number> {\n return deleteInBatches(\n this.repository,\n {\n expiring: true,\n expiresAt: LessThan(now),\n },\n resolveSweepBatchSize(options.batchSize, EVENT_RETENTION_SWEEP_BATCH_SIZE),\n );\n }\n}\n"],"mappings":";;;;;;;;;AAuBA,IAAaQ,yBAAb,MAAaA;CACQC;;;;IAMjB;CAEA,YAAYA,YAA+B;EACvC,KAAKA,aAAaA;EAClB,KAAKC,mCAAmB,IAAIC,QAAAA;CAChC;CAEAC,OAAOC,MAA6B;EAChC,OAAO,KAAKJ,WAAWG,OAAOC,IAAAA;CAClC;CAEA,MAAMC,KAAKC,QAAeC,UAA4B,CAAC,GAAmB;EAKtE,IAAIA,QAAQC,uBAAuBjB,eAC/B,OAAO,KAAKkB,uBAAuBF,QAAQC,aAAaF,MAAAA;EAG5D,OAAO,KAAKN,WAAWK,KAAKC,MAAAA;CAChC;;;;;;;;;;;;;;;;;;;;;IAuBA,uBAA+BI,SAAwBJ,QAA+B;EAElF,MAAMS,QADU,KAAKd,iBAAiBW,IAAIF,OAAAA,KAAYG,QAAQC,QAAO,EAAA,CAEhEE,YAAYC,KAAAA,CAAAA,CAAAA,CACZC,WAAWR,QACPS,eAAe,KAAKnB,UAAU,CAAA,CAC9BK,KAAKC,QAAQ,EAAEE,aAAa,MAAM,CAAA,CAAA;EAI3C,KAAKP,iBAAiBmB,IAAIV,SAASK,KAAKC,YAAYC,KAAAA,CAAAA,CAAAA;EAEpD,OAAOF;CACX;CAEA,MAAMM,YAAYC,IAAmC;EACjD,OAAO,KAAKtB,WAAWuB,UAAU,EAAED,GAAG,CAAA;CAC1C;CAEA,MAAME,SACFC,OACAlB,UAAgC,CAAC,GACa;EAC9C,MAAMmB,KAAK,KAAK1B,WAAW2B,mBAAmB,OAAA;EAE9C,MAAM,EAAEC,eAAenC,WAAWiC,IAAID,KAAAA;EAEtC7B,sBAAsB8B,IAAI,SAAS,CAAC,WAAW,WAAY,CAAA;EAE3D,IAAInB,QAAQsB,OAERH,GAAGI,SAAS,uEAAuE;GAC/EC,cAAcxB,QAAQsB,MAAMG;GAC5BC,gBAAgB1B,QAAQsB,MAAMK;EAClC,CAAA;EAGJ,IAAI3B,QAAQ4B,SACRT,GAAGI,SAAS,iCAAiC,EAAEM,cAAc7B,QAAQ4B,QAAQ,CAAA;EAGjF,IAAI5B,QAAQ8B,YAAY;GACpB,MAAMC,cAAwB,CAAA;GAC9B,MAAMC,aAAsC,CAAC;GAC7C,MAAMC,WAAWjC,QAAQ8B,WAAWG,SAC/BC,QAAQN,YAA+BA,YAAY,IAAA;GAExD,IAAIK,SAASE,SAAS,GAAG;IACrBJ,YAAYK,KAAK,wCAAA;IACjBJ,WAAWK,kBAAkBJ;GACjC;GACA,IAAIjC,QAAQ8B,WAAWG,SAASK,SAAS,IAAA,GACrCP,YAAYK,KAAK,uBAAA;GAErB,IAAIpC,QAAQ8B,WAAWR,OAAO;IAC1BS,YAAYK,KAAK,2EAAA;IACjBJ,WAAWO,iBAAiBvC,QAAQ8B,WAAWR,MAAMG;IACrDO,WAAWQ,mBAAmBxC,QAAQ8B,WAAWR,MAAMK;GAC3D;GAEAR,GAAGI,SAAS,IAAIQ,YAAYI,SAAS,IAAIJ,YAAYU,KAAK,MAAA,IAAU,QAAQ,IAAIT,UAAAA;EACpF;EAEA,MAAM,CAACU,UAAUC,SAAS,MAAMxB,GAAGyB,gBAAe;EAElD,OAAO;GACH/C,MAAMV,sBAAsB+B,OAAOwB,QAAAA;GACnCG,MAAM;IACFF;IACA,GAAGtB;GACP;EACJ;CACJ;CAEA,MAAMyB,YAAYZ,QAAiD;EAU/D,MAAMa,QAAQ,IAAIC,KAAKd,OAAOa,KAAK,CAAA,CAAEE,YAAW,CAAA,CAAGC,QAAQ,KAAK,GAAA,CAAA,CAAKA,QAAQ,KAAK,EAAA;EAElF,MAAM/B,KAAK,KAAK1B,WAAW2B,mBAAmB,OAAA,CAAA,CACzC+B,MAAM,sBAAsB,EAAEC,MAAMlB,OAAOkB,KAAK,CAAA,CAAA,CAChD7B,SAAS,4BAA4B,EAAEwB,MAAM,CAAA;EAElD,IAAIb,OAAOmB,WACPlC,GAAGI,SAAS,gCAAgC,EAAE8B,WAAWnB,OAAOmB,UAAU,CAAA;EAG9E,IAAInB,OAAOoB,kBACPnC,GAAGI,SAAS,8CAA8C,EAAE+B,kBAAkBpB,OAAOoB,iBAAiB,CAAA;EAG1G,IAAI,OAAOpB,OAAON,YAAY,aAAa;GACvC,IAAIM,OAAON,YAAY,MACnBT,GAAGI,SAAS,uBAAA;QAEZJ,GAAGI,SAAS,4BAA4B,EAAEK,SAASM,OAAON,QAAQ,CAAA;EAE1E;EAEA,OAAOT,GAAGoC,SAAQ;CACtB;CAEA,MAAMC,cAAcC,KAAazD,UAAqC,CAAC,GAAoB;EACvF,OAAOV,gBACH,KAAKG,YACL;GACIiE,UAAU;GACVC,WAAW1E,SAASwE,GAAAA;EACxB,GACAlE,sBAAsBS,QAAQ4D,WAAWxE,gCAAAA,CAAAA;CAEjD;AACJ"}