@burdenoff/be-sdk 2026.1005.1 → 2026.1008.1

package/dist/{chunk-FA5ROGTS.js → chunk-CYY4VIRK.js}

@@ -185,6 +185,105 @@ async function runOperationWithRlsGuc(rootClient, wsCtx, model, operation, args)
   });
 }
 __name(runOperationWithRlsGuc, "runOperationWithRlsGuc");
+function getCallerTransaction(internalParams) {
+  const transaction = internalParams?.transaction;
+  if (transaction === void 0 || transaction === null) return void 0;
+  if (typeof transaction === "object") {
+    const { kind, id } = transaction;
+    if (kind === "itx" && typeof id === "string" && id.length > 0) {
+      return {
+        kind: "itx",
+        id,
+        descriptor: transaction
+      };
+    }
+    if (kind === "batch") return {
+      kind: "batch"
+    };
+  }
+  throw new Error("[WorkspaceExtension] Unrecognised Prisma transaction descriptor on __internalParams.transaction; refusing to run the operation outside the caller transaction. This Prisma version is not supported by the be-sdk RLS transaction integration (BOFF-8874).");
+}
+__name(getCallerTransaction, "getCallerTransaction");
+function sanitizeWorkspaceId(workspaceId) {
+  return (workspaceId ?? "").replace(/[^a-zA-Z0-9\-_]/g, "");
+}
+__name(sanitizeWorkspaceId, "sanitizeWorkspaceId");
+function buildApplicationNameTag(wsCtx) {
+  const safeSvc = (process.env["SERVICE_NAME"] ?? "svc").replace(/[^a-zA-Z0-9\-_]/g, "");
+  return `svc=${safeSvc};ws=${sanitizeWorkspaceId(wsCtx.workspaceId)}`;
+}
+__name(buildApplicationNameTag, "buildApplicationNameTag");
+function buildTransactionContextStatement(wsCtx, config) {
+  const settings = [];
+  const params = [];
+  if (config.enableRlsGucTagging) {
+    params.push(sanitizeWorkspaceId(wsCtx.workspaceId));
+    settings.push(`set_config('app.workspace_id', $${params.length}, true)`);
+  }
+  if (config.enableApplicationNameTagging) {
+    params.push(buildApplicationNameTag(wsCtx));
+    settings.push(`set_config('application_name', $${params.length}, true)`);
+  }
+  if (settings.length === 0) return void 0;
+  return {
+    sql: `SELECT ${settings.join(", ")}`,
+    params,
+    key: params.join("\0")
+  };
+}
+__name(buildTransactionContextStatement, "buildTransactionContextStatement");
+var MAX_TRACKED_CALLER_TRANSACTIONS = 4096;
+var callerTransactionStates = /* @__PURE__ */ new Map();
+function rememberCallerTransaction(id, state) {
+  callerTransactionStates.delete(id);
+  callerTransactionStates.set(id, state);
+  if (callerTransactionStates.size > MAX_TRACKED_CALLER_TRANSACTIONS) {
+    const oldest = callerTransactionStates.keys().next().value;
+    if (oldest !== void 0) callerTransactionStates.delete(oldest);
+  }
+}
+__name(rememberCallerTransaction, "rememberCallerTransaction");
+async function applyCallerTransactionContext(rawPrisma, descriptor, statement) {
+  const pending = rawPrisma.$executeRawUnsafe(statement.sql, ...statement.params);
+  if (typeof pending.requestTransaction !== "function") {
+    throw new Error("[WorkspaceExtension] Cannot bind the RLS context statement to the caller transaction (PrismaPromise.requestTransaction is unavailable); refusing to run it on another connection (BOFF-8874).");
+  }
+  await pending.requestTransaction(descriptor);
+}
+__name(applyCallerTransactionContext, "applyCallerTransactionContext");
+async function runOperationInCallerTransaction(rawPrisma, transaction, wsCtx, config, run) {
+  const statement = buildTransactionContextStatement(wsCtx, config);
+  if (!statement) return run();
+  let state = callerTransactionStates.get(transaction.id);
+  if (!state || state.descriptor !== transaction.descriptor || state.key !== statement.key) {
+    if (state && state.inflight > 0 && state.key !== statement.key) {
+      throw new Error("[WorkspaceExtension] Concurrent operations for different workspaces inside one transaction are not supported: the RLS context is per transaction. Await the other workspace\u2019s operations first.");
+    }
+    const next = {
+      descriptor: transaction.descriptor,
+      key: statement.key,
+      ready: applyCallerTransactionContext(rawPrisma, transaction.descriptor, statement),
+      inflight: 0
+    };
+    next.ready.catch(() => {
+      if (callerTransactionStates.get(transaction.id) === next) callerTransactionStates.delete(transaction.id);
+    });
+    rememberCallerTransaction(transaction.id, next);
+    state = next;
+  }
+  state.inflight += 1;
+  try {
+    await state.ready;
+    return await run();
+  } finally {
+    state.inflight -= 1;
+  }
+}
+__name(runOperationInCallerTransaction, "runOperationInCallerTransaction");
+function resetCallerTransactionStateForTests() {
+  callerTransactionStates.clear();
+}
+__name(resetCallerTransactionStateForTests, "resetCallerTransactionStateForTests");
 function addWorkspaceExtension(baseClient, config) {
   const fullConfig = {
     ...defaultWorkspaceExtensionConfig,
@@ -196,6 +295,33 @@ function addWorkspaceExtension(baseClient, config) {
   }
   const rawPrisma = baseClient;
   const rawPrismaForTransactions = baseClient;
+  const rawPrismaForCallerTransactions = baseClient;
+  const tagsTransactions = fullConfig.enableRlsGucTagging || fullConfig.enableApplicationNameTagging;
+  const dispatch = /* @__PURE__ */ __name(async (params, wsCtx, operation, finalArgs) => {
+    if (!tagsTransactions) return params.query(finalArgs);
+    const callerTransaction = getCallerTransaction(params.__internalParams);
+    if (callerTransaction?.kind === "itx") {
+      return runOperationInCallerTransaction(rawPrismaForCallerTransactions, callerTransaction, wsCtx, fullConfig, () => params.query(finalArgs));
+    }
+    if (callerTransaction?.kind === "batch") {
+      return params.query(finalArgs);
+    }
+    if (fullConfig.enableApplicationNameTagging) {
+      await maybeTagConnection(rawPrisma, wsCtx);
+    }
+    if (fullConfig.enableRlsGucTagging) {
+      return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, params.model, operation, finalArgs);
+    }
+    return params.query(finalArgs);
+  }, "dispatch");
+  const rawOperation = /* @__PURE__ */ __name(async ({ args, query, __internalParams }) => {
+    if (!tagsTransactions) return query(args);
+    const callerTransaction = getCallerTransaction(__internalParams);
+    if (callerTransaction?.kind !== "itx") return query(args);
+    const wsCtx = getWorkspaceContext();
+    if (!wsCtx?.workspaceId) return query(args);
+    return runOperationInCallerTransaction(rawPrismaForCallerTransactions, callerTransaction, wsCtx, fullConfig, () => query(args));
+  }, "rawOperation");
   const prismaClient = baseClient;
   logger.info("[WorkspaceExtension] Workspace extension enabled", {
     populateContextJson: fullConfig.populateContextJson,
@@ -212,13 +338,21 @@ function addWorkspaceExtension(baseClient, config) {
     enableApplicationNameTagging: fullConfig.enableApplicationNameTagging,
     enableRlsGucTagging: fullConfig.enableRlsGucTagging
   });
-  return prismaClient.$extends({
+  const rawOperationHooks = tagsTransactions ? {
+    $queryRaw: rawOperation,
+    $executeRaw: rawOperation,
+    $queryRawUnsafe: rawOperation,
+    $executeRawUnsafe: rawOperation,
+    $queryRawTyped: rawOperation
+  } : {};
+  const withQueryHooks = prismaClient.$extends({
     query: {
+      ...rawOperationHooks,
       $allModels: {
         // ================================================================
         // WRITE OPERATIONS - inject workspaceId into data
         // ================================================================
-        async create({ model, args, query }) {
+        async create({ model, args, query, __internalParams }) {
           if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {
             return query(stripSkipFlag(args));
           }
@@ -227,9 +361,6 @@ function addWorkspaceExtension(baseClient, config) {
           if (!wsCtx?.workspaceId) {
             return query(args);
           }
-          if (fullConfig.enableApplicationNameTagging) {
-            await maybeTagConnection(rawPrisma, wsCtx);
-          }
           const injectedData = injectCreateFields(args.data, wsCtx, fullConfig);
           if (fullConfig.debug) {
             const injectedKeys = Object.keys(injectedData).filter((k) => !(k in args.data));
@@ -244,12 +375,13 @@ function addWorkspaceExtension(baseClient, config) {
             ...stripSkipFlag(args),
             data: injectedData
           };
-          if (fullConfig.enableRlsGucTagging) {
-            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, "create", finalArgs);
-          }
-          return query(finalArgs);
+          return dispatch({
+            model,
+            query,
+            __internalParams
+          }, wsCtx, "create", finalArgs);
         },
-        async createMany({ model, args, query }) {
+        async createMany({ model, args, query, __internalParams }) {
           if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {
             return query(stripSkipFlag(args));
           }
@@ -258,9 +390,6 @@ function addWorkspaceExtension(baseClient, config) {
           if (!wsCtx?.workspaceId) {
             return query(args);
           }
-          if (fullConfig.enableApplicationNameTagging) {
-            await maybeTagConnection(rawPrisma, wsCtx);
-          }
           const dataArray = Array.isArray(args.data) ? args.data : [
             args.data
           ];
@@ -269,12 +398,13 @@ function addWorkspaceExtension(baseClient, config) {
             ...stripSkipFlag(args),
             data: Array.isArray(args.data) ? injectedData : injectedData[0]
           };
-          if (fullConfig.enableRlsGucTagging) {
-            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, "createMany", finalArgs);
-          }
-          return query(finalArgs);
+          return dispatch({
+            model,
+            query,
+            __internalParams
+          }, wsCtx, "createMany", finalArgs);
         },
-        async createManyAndReturn({ model, args, query }) {
+        async createManyAndReturn({ model, args, query, __internalParams }) {
           if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {
             return query(stripSkipFlag(args));
           }
@@ -283,9 +413,6 @@ function addWorkspaceExtension(baseClient, config) {
           if (!wsCtx?.workspaceId) {
             return query(args);
           }
-          if (fullConfig.enableApplicationNameTagging) {
-            await maybeTagConnection(rawPrisma, wsCtx);
-          }
           const dataArray = Array.isArray(args.data) ? args.data : [
             args.data
           ];
@@ -294,15 +421,16 @@ function addWorkspaceExtension(baseClient, config) {
             ...stripSkipFlag(args),
             data: Array.isArray(args.data) ? injectedData : injectedData[0]
           };
-          if (fullConfig.enableRlsGucTagging) {
-            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, "createManyAndReturn", finalArgs);
-          }
-          return query(finalArgs);
+          return dispatch({
+            model,
+            query,
+            __internalParams
+          }, wsCtx, "createManyAndReturn", finalArgs);
         },
         // ================================================================
         // UPDATE OPERATIONS - inject updatedBy into data + workspaceId into where
         // ================================================================
-        async update({ model, args, query }) {
+        async update({ model, args, query, __internalParams }) {
           if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {
             return query(stripSkipFlag(args));
           }
@@ -311,9 +439,6 @@ function addWorkspaceExtension(baseClient, config) {
           if (!wsCtx?.workspaceId) {
             return query(args);
           }
-          if (fullConfig.enableApplicationNameTagging) {
-            await maybeTagConnection(rawPrisma, wsCtx);
-          }
           const injectedData = injectUpdateFields(args.data, wsCtx, fullConfig);
           let injectedWhere = args.where;
           if (fullConfig.enableUpdateWhereIsolation && !isExcludedFromReadIsolation(model, fullConfig)) {
@@ -331,12 +456,13 @@ function addWorkspaceExtension(baseClient, config) {
             data: injectedData,
             where: injectedWhere
           };
-          if (fullConfig.enableRlsGucTagging) {
-            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, "update", finalArgs);
-          }
-          return query(finalArgs);
+          return dispatch({
+            model,
+            query,
+            __internalParams
+          }, wsCtx, "update", finalArgs);
         },
-        async updateMany({ model, args, query }) {
+        async updateMany({ model, args, query, __internalParams }) {
           if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {
             return query(stripSkipFlag(args));
           }
@@ -345,9 +471,6 @@ function addWorkspaceExtension(baseClient, config) {
           if (!wsCtx?.workspaceId) {
             return query(args);
           }
-          if (fullConfig.enableApplicationNameTagging) {
-            await maybeTagConnection(rawPrisma, wsCtx);
-          }
           const injectedData = injectUpdateFields(args.data, wsCtx, fullConfig);
           let injectedWhere = args.where;
           if (fullConfig.enableUpdateWhereIsolation && !isExcludedFromReadIsolation(model, fullConfig)) {
@@ -358,12 +481,13 @@ function addWorkspaceExtension(baseClient, config) {
             data: injectedData,
             where: injectedWhere
           };
-          if (fullConfig.enableRlsGucTagging) {
-            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, "updateMany", finalArgs);
-          }
-          return query(finalArgs);
+          return dispatch({
+            model,
+            query,
+            __internalParams
+          }, wsCtx, "updateMany", finalArgs);
         },
-        async upsert({ model, args, query }) {
+        async upsert({ model, args, query, __internalParams }) {
           if (fullConfig.excludeModels.includes(model) || args._skipWorkspaceInjection) {
             return query(stripSkipFlag(args));
           }
@@ -372,9 +496,6 @@ function addWorkspaceExtension(baseClient, config) {
           if (!wsCtx?.workspaceId) {
             return query(args);
           }
-          if (fullConfig.enableApplicationNameTagging) {
-            await maybeTagConnection(rawPrisma, wsCtx);
-          }
           const injectedCreate = injectCreateFields(args.create, wsCtx, fullConfig);
           const injectedUpdate = injectUpdateFields(args.update, wsCtx, fullConfig);
           let injectedWhere = args.where;
@@ -387,15 +508,16 @@ function addWorkspaceExtension(baseClient, config) {
             update: injectedUpdate,
             where: injectedWhere
           };
-          if (fullConfig.enableRlsGucTagging) {
-            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, "upsert", finalArgs);
-          }
-          return query(finalArgs);
+          return dispatch({
+            model,
+            query,
+            __internalParams
+          }, wsCtx, "upsert", finalArgs);
         },
         // ================================================================
         // READ OPERATIONS - inject workspaceId into where clause
         // ================================================================
-        async findMany({ model, args, query }) {
+        async findMany({ model, args, query, __internalParams }) {
           if (!fullConfig.enableReadIsolation || isExcludedFromReadIsolation(model, fullConfig) || args._skipWorkspaceInjection) {
             return query(stripSkipFlag(args));
           }
@@ -404,9 +526,6 @@ function addWorkspaceExtension(baseClient, config) {
           if (!wsCtx?.workspaceId) {
             return query(args);
           }
-          if (fullConfig.enableApplicationNameTagging) {
-            await maybeTagConnection(rawPrisma, wsCtx);
-          }
           const injectedWhere = injectWhereClause(args.where, wsCtx);
           if (fullConfig.debug) {
             logger.debug(`[WorkspaceExtension] ${model}.findMany - injected workspaceId into where`, {
@@ -417,12 +536,13 @@ function addWorkspaceExtension(baseClient, config) {
             ...stripSkipFlag(args),
             where: injectedWhere
           };
-          if (fullConfig.enableRlsGucTagging) {
-            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, "findMany", finalArgs);
-          }
-          return query(finalArgs);
+          return dispatch({
+            model,
+            query,
+            __internalParams
+          }, wsCtx, "findMany", finalArgs);
         },
-        async findFirst({ model, args, query }) {
+        async findFirst({ model, args, query, __internalParams }) {
           if (!fullConfig.enableReadIsolation || isExcludedFromReadIsolation(model, fullConfig) || args._skipWorkspaceInjection) {
             return query(stripSkipFlag(args));
           }
@@ -431,9 +551,6 @@ function addWorkspaceExtension(baseClient, config) {
           if (!wsCtx?.workspaceId) {
             return query(args);
           }
-          if (fullConfig.enableApplicationNameTagging) {
-            await maybeTagConnection(rawPrisma, wsCtx);
-          }
           const injectedWhere = injectWhereClause(args.where, wsCtx);
           if (fullConfig.debug) {
             logger.debug(`[WorkspaceExtension] ${model}.findFirst - injected workspaceId into where`, {
@@ -444,12 +561,13 @@ function addWorkspaceExtension(baseClient, config) {
             ...stripSkipFlag(args),
             where: injectedWhere
           };
-          if (fullConfig.enableRlsGucTagging) {
-            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, "findFirst", finalArgs);
-          }
-          return query(finalArgs);
+          return dispatch({
+            model,
+            query,
+            __internalParams
+          }, wsCtx, "findFirst", finalArgs);
         },
-        async findFirstOrThrow({ model, args, query }) {
+        async findFirstOrThrow({ model, args, query, __internalParams }) {
           if (!fullConfig.enableReadIsolation || isExcludedFromReadIsolation(model, fullConfig) || args._skipWorkspaceInjection) {
             return query(stripSkipFlag(args));
           }
@@ -458,9 +576,6 @@ function addWorkspaceExtension(baseClient, config) {
           if (!wsCtx?.workspaceId) {
             return query(args);
           }
-          if (fullConfig.enableApplicationNameTagging) {
-            await maybeTagConnection(rawPrisma, wsCtx);
-          }
           const injectedWhere = injectWhereClause(args.where, wsCtx);
           if (fullConfig.debug) {
             logger.debug(`[WorkspaceExtension] ${model}.findFirstOrThrow - injected workspaceId into where`, {
@@ -471,12 +586,13 @@ function addWorkspaceExtension(baseClient, config) {
             ...stripSkipFlag(args),
             where: injectedWhere
           };
-          if (fullConfig.enableRlsGucTagging) {
-            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, "findFirstOrThrow", finalArgs);
-          }
-          return query(finalArgs);
+          return dispatch({
+            model,
+            query,
+            __internalParams
+          }, wsCtx, "findFirstOrThrow", finalArgs);
         },
-        async findUnique({ model, args, query }) {
+        async findUnique({ model, args, query, __internalParams }) {
           if (!fullConfig.enableReadIsolation || isExcludedFromReadIsolation(model, fullConfig) || args._skipWorkspaceInjection) {
             return query(stripSkipFlag(args));
           }
@@ -485,9 +601,6 @@ function addWorkspaceExtension(baseClient, config) {
           if (!wsCtx?.workspaceId) {
             return query(args);
           }
-          if (fullConfig.enableApplicationNameTagging) {
-            await maybeTagConnection(rawPrisma, wsCtx);
-          }
           const injectedWhere = injectWhereClause(args.where, wsCtx);
           if (fullConfig.debug) {
             logger.debug(`[WorkspaceExtension] ${model}.findUnique - injected workspaceId into where`, {
@@ -498,12 +611,13 @@ function addWorkspaceExtension(baseClient, config) {
             ...stripSkipFlag(args),
             where: injectedWhere
           };
-          if (fullConfig.enableRlsGucTagging) {
-            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, "findUnique", finalArgs);
-          }
-          return query(finalArgs);
+          return dispatch({
+            model,
+            query,
+            __internalParams
+          }, wsCtx, "findUnique", finalArgs);
         },
-        async findUniqueOrThrow({ model, args, query }) {
+        async findUniqueOrThrow({ model, args, query, __internalParams }) {
           if (!fullConfig.enableReadIsolation || isExcludedFromReadIsolation(model, fullConfig) || args._skipWorkspaceInjection) {
             return query(stripSkipFlag(args));
           }
@@ -512,9 +626,6 @@ function addWorkspaceExtension(baseClient, config) {
           if (!wsCtx?.workspaceId) {
             return query(args);
           }
-          if (fullConfig.enableApplicationNameTagging) {
-            await maybeTagConnection(rawPrisma, wsCtx);
-          }
           const injectedWhere = injectWhereClause(args.where, wsCtx);
           if (fullConfig.debug) {
             logger.debug(`[WorkspaceExtension] ${model}.findUniqueOrThrow - injected workspaceId into where`, {
@@ -525,12 +636,13 @@ function addWorkspaceExtension(baseClient, config) {
             ...stripSkipFlag(args),
             where: injectedWhere
           };
-          if (fullConfig.enableRlsGucTagging) {
-            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, "findUniqueOrThrow", finalArgs);
-          }
-          return query(finalArgs);
+          return dispatch({
+            model,
+            query,
+            __internalParams
+          }, wsCtx, "findUniqueOrThrow", finalArgs);
         },
-        async count({ model, args, query }) {
+        async count({ model, args, query, __internalParams }) {
           if (!fullConfig.enableReadIsolation || isExcludedFromReadIsolation(model, fullConfig) || args._skipWorkspaceInjection) {
             return query(stripSkipFlag(args));
           }
@@ -539,9 +651,6 @@ function addWorkspaceExtension(baseClient, config) {
           if (!wsCtx?.workspaceId) {
             return query(args);
           }
-          if (fullConfig.enableApplicationNameTagging) {
-            await maybeTagConnection(rawPrisma, wsCtx);
-          }
           const injectedWhere = injectWhereClause(args.where, wsCtx);
           if (fullConfig.debug) {
             logger.debug(`[WorkspaceExtension] ${model}.count - injected workspaceId into where`, {
@@ -552,12 +661,13 @@ function addWorkspaceExtension(baseClient, config) {
             ...stripSkipFlag(args),
             where: injectedWhere
           };
-          if (fullConfig.enableRlsGucTagging) {
-            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, "count", finalArgs);
-          }
-          return query(finalArgs);
+          return dispatch({
+            model,
+            query,
+            __internalParams
+          }, wsCtx, "count", finalArgs);
         },
-        async aggregate({ model, args, query }) {
+        async aggregate({ model, args, query, __internalParams }) {
           if (!fullConfig.enableReadIsolation || isExcludedFromReadIsolation(model, fullConfig) || args._skipWorkspaceInjection) {
             return query(stripSkipFlag(args));
           }
@@ -566,9 +676,6 @@ function addWorkspaceExtension(baseClient, config) {
           if (!wsCtx?.workspaceId) {
             return query(args);
           }
-          if (fullConfig.enableApplicationNameTagging) {
-            await maybeTagConnection(rawPrisma, wsCtx);
-          }
           const injectedWhere = injectWhereClause(args.where, wsCtx);
           if (fullConfig.debug) {
             logger.debug(`[WorkspaceExtension] ${model}.aggregate - injected workspaceId into where`, {
@@ -579,12 +686,13 @@ function addWorkspaceExtension(baseClient, config) {
             ...stripSkipFlag(args),
             where: injectedWhere
           };
-          if (fullConfig.enableRlsGucTagging) {
-            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, "aggregate", finalArgs);
-          }
-          return query(finalArgs);
+          return dispatch({
+            model,
+            query,
+            __internalParams
+          }, wsCtx, "aggregate", finalArgs);
         },
-        async groupBy({ model, args, query }) {
+        async groupBy({ model, args, query, __internalParams }) {
           if (!fullConfig.enableReadIsolation || isExcludedFromReadIsolation(model, fullConfig) || args._skipWorkspaceInjection) {
             return query(stripSkipFlag(args));
           }
@@ -593,9 +701,6 @@ function addWorkspaceExtension(baseClient, config) {
           if (!wsCtx?.workspaceId) {
             return query(args);
           }
-          if (fullConfig.enableApplicationNameTagging) {
-            await maybeTagConnection(rawPrisma, wsCtx);
-          }
           const injectedWhere = injectWhereClause(args.where, wsCtx);
           if (fullConfig.debug) {
             logger.debug(`[WorkspaceExtension] ${model}.groupBy - injected workspaceId into where`, {
@@ -606,15 +711,16 @@ function addWorkspaceExtension(baseClient, config) {
             ...stripSkipFlag(args),
             where: injectedWhere
           };
-          if (fullConfig.enableRlsGucTagging) {
-            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, "groupBy", finalArgs);
-          }
-          return query(finalArgs);
+          return dispatch({
+            model,
+            query,
+            __internalParams
+          }, wsCtx, "groupBy", finalArgs);
         },
         // ================================================================
         // DELETE OPERATIONS - inject workspaceId into where clause
         // ================================================================
-        async delete({ model, args, query }) {
+        async delete({ model, args, query, __internalParams }) {
           if (!fullConfig.enableDeleteIsolation || isExcludedFromReadIsolation(model, fullConfig) || args._skipWorkspaceInjection) {
             return query(stripSkipFlag(args));
           }
@@ -623,9 +729,6 @@ function addWorkspaceExtension(baseClient, config) {
           if (!wsCtx?.workspaceId) {
             return query(args);
           }
-          if (fullConfig.enableApplicationNameTagging) {
-            await maybeTagConnection(rawPrisma, wsCtx);
-          }
           const injectedWhere = injectWhereClause(args.where, wsCtx);
           if (fullConfig.debug) {
             logger.debug(`[WorkspaceExtension] ${model}.delete - injected workspaceId into where`, {
@@ -636,12 +739,13 @@ function addWorkspaceExtension(baseClient, config) {
             ...stripSkipFlag(args),
             where: injectedWhere
           };
-          if (fullConfig.enableRlsGucTagging) {
-            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, "delete", finalArgs);
-          }
-          return query(finalArgs);
+          return dispatch({
+            model,
+            query,
+            __internalParams
+          }, wsCtx, "delete", finalArgs);
         },
-        async deleteMany({ model, args, query }) {
+        async deleteMany({ model, args, query, __internalParams }) {
           if (!fullConfig.enableDeleteIsolation || isExcludedFromReadIsolation(model, fullConfig) || args._skipWorkspaceInjection) {
             return query(stripSkipFlag(args));
           }
@@ -650,9 +754,6 @@ function addWorkspaceExtension(baseClient, config) {
           if (!wsCtx?.workspaceId) {
             return query(args);
           }
-          if (fullConfig.enableApplicationNameTagging) {
-            await maybeTagConnection(rawPrisma, wsCtx);
-          }
           const injectedWhere = injectWhereClause(args.where, wsCtx);
           if (fullConfig.debug) {
             logger.debug(`[WorkspaceExtension] ${model}.deleteMany - injected workspaceId into where`, {
@@ -663,17 +764,42 @@ function addWorkspaceExtension(baseClient, config) {
             ...stripSkipFlag(args),
             where: injectedWhere
           };
-          if (fullConfig.enableRlsGucTagging) {
-            return runOperationWithRlsGuc(rawPrismaForTransactions, wsCtx, model, "deleteMany", finalArgs);
+          return dispatch({
+            model,
+            query,
+            __internalParams
+          }, wsCtx, "deleteMany", finalArgs);
+        }
+      }
+    }
+  });
+  if (!tagsTransactions) return withQueryHooks;
+  const wrapped = withQueryHooks;
+  return wrapped.$extends({
+    client: {
+      $transaction(input, options) {
+        const parent = this.$parent;
+        if (!parent) {
+          throw new Error("[WorkspaceExtension] $transaction wrapper could not resolve its parent client.");
+        }
+        if (Array.isArray(input)) {
+          const wsCtx = getWorkspaceContext();
+          const statement = wsCtx?.workspaceId ? buildTransactionContextStatement(wsCtx, fullConfig) : void 0;
+          if (statement) {
+            const setContext = rawPrismaForCallerTransactions.$executeRawUnsafe(statement.sql, ...statement.params);
+            return parent.$transaction([
+              setContext,
+              ...input
+            ], options).then((results) => Array.isArray(results) ? results.slice(1) : results);
           }
-          return query(finalArgs);
         }
+        return parent.$transaction(input, options);
       }
     }
   });
 }
 __name(addWorkspaceExtension, "addWorkspaceExtension");
 
-export { addWorkspaceExtension, defaultWorkspaceExtensionConfig, getWorkspaceContext, injectCreateFields, injectWhereWorkspaceId, maybeSetRlsGuc, maybeTagConnection, runOperationWithRlsGuc, setWorkspaceContext, withWorkspaceContext, withWorkspaceContextSync };
-//# sourceMappingURL=chunk-FA5ROGTS.js.map
-//# sourceMappingURL=chunk-FA5ROGTS.js.map
+export { addWorkspaceExtension, buildTransactionContextStatement, defaultWorkspaceExtensionConfig, getCallerTransaction, getWorkspaceContext, injectCreateFields, injectWhereWorkspaceId, maybeSetRlsGuc, maybeTagConnection, resetCallerTransactionStateForTests, runOperationInCallerTransaction, runOperationWithRlsGuc, setWorkspaceContext, withWorkspaceContext, withWorkspaceContextSync };
+//# sourceMappingURL=chunk-CYY4VIRK.js.map
+//# sourceMappingURL=chunk-CYY4VIRK.js.map