@ddd-ts-kit/knex 0.7.0 → 0.9.0

package/dist/tenancy/enable-tenant-isolation.d.ts

@@ -0,0 +1,8 @@
+import type { Knex } from 'knex';
+import type { TenantTableTarget } from './tenant-table-target.js';
+/**
+ * Row-level security on a table of tenant data, from the migration that creates it:
+ * `await enableTenantIsolation(knex, { schema: 'billing', table: 'invoices' })`. PostgreSQL only.
+ */
+export declare function enableTenantIsolation(knex: Knex, target: TenantTableTarget): Promise<void>;
+//# sourceMappingURL=enable-tenant-isolation.d.ts.map

package/dist/tenancy/enable-tenant-isolation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enable-tenant-isolation.d.ts","sourceRoot":"","sources":["../../src/tenancy/enable-tenant-isolation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAElE;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAIhG"}

package/dist/tenancy/enable-tenant-isolation.js

@@ -0,0 +1,11 @@
+import { tenantIsolationStatements } from './tenant-isolation-statements.js';
+/**
+ * Row-level security on a table of tenant data, from the migration that creates it:
+ * `await enableTenantIsolation(knex, { schema: 'billing', table: 'invoices' })`. PostgreSQL only.
+ */
+export async function enableTenantIsolation(knex, target) {
+    for (const statement of tenantIsolationStatements(target)) {
+        await knex.raw(statement);
+    }
+}
+//# sourceMappingURL=enable-tenant-isolation.js.map

package/dist/tenancy/enable-tenant-isolation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enable-tenant-isolation.js","sourceRoot":"","sources":["../../src/tenancy/enable-tenant-isolation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAG7E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAU,EAAE,MAAyB;IAC/E,KAAK,MAAM,SAAS,IAAI,yBAAyB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC"}

package/dist/tenancy/invalid-tenant-identifier-error.d.ts

@@ -0,0 +1,5 @@
+/** A tenant id that cannot name a schema: refused rather than escaped into an identifier. */
+export declare class InvalidTenantIdentifierError extends Error {
+    constructor(tenantId: string, reason: string);
+}
+//# sourceMappingURL=invalid-tenant-identifier-error.d.ts.map

package/dist/tenancy/invalid-tenant-identifier-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invalid-tenant-identifier-error.d.ts","sourceRoot":"","sources":["../../src/tenancy/invalid-tenant-identifier-error.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,YAAY,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAG3C;CACF"}

package/dist/tenancy/invalid-tenant-identifier-error.js

@@ -0,0 +1,8 @@
+/** A tenant id that cannot name a schema: refused rather than escaped into an identifier. */
+export class InvalidTenantIdentifierError extends Error {
+    constructor(tenantId, reason) {
+        super(`The tenant id "${tenantId}" cannot name a schema: ${reason}`);
+        this.name = 'InvalidTenantIdentifierError';
+    }
+}
+//# sourceMappingURL=invalid-tenant-identifier-error.js.map

package/dist/tenancy/invalid-tenant-identifier-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invalid-tenant-identifier-error.js","sourceRoot":"","sources":["../../src/tenancy/invalid-tenant-identifier-error.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,YAAY,QAAgB,EAAE,MAAc;QAC1C,KAAK,CAAC,kBAAkB,QAAQ,2BAA2B,MAAM,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF"}

package/dist/tenancy/migrate-every-tenant.d.ts

@@ -0,0 +1,10 @@
+import type { Knex } from 'knex';
+import type { TenantDirectory } from '@ddd-ts-kit/kernel';
+import type { TenantDatabases } from './tenant-databases.js';
+/**
+ * Applies `migrate` to the database of every tenant of the directory, one after the other, and
+ * stops at the first that fails, naming it: the tenants before it are migrated, the ones after
+ * are not, and running it again resumes. Provisioning a tenant is the same call for one tenant.
+ */
+export declare function migrateEveryTenant(databases: TenantDatabases, directory: TenantDirectory, migrate: (knex: Knex, tenantId: string) => Promise<void>): Promise<void>;
+//# sourceMappingURL=migrate-every-tenant.d.ts.map

package/dist/tenancy/migrate-every-tenant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-every-tenant.d.ts","sourceRoot":"","sources":["../../src/tenancy/migrate-every-tenant.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,eAAe,EAC1B,SAAS,EAAE,eAAe,EAC1B,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GACvD,OAAO,CAAC,IAAI,CAAC,CAQf"}

package/dist/tenancy/migrate-every-tenant.js

@@ -0,0 +1,16 @@
+/**
+ * Applies `migrate` to the database of every tenant of the directory, one after the other, and
+ * stops at the first that fails, naming it: the tenants before it are migrated, the ones after
+ * are not, and running it again resumes. Provisioning a tenant is the same call for one tenant.
+ */
+export async function migrateEveryTenant(databases, directory, migrate) {
+    for (const tenantId of await directory.tenants()) {
+        try {
+            await databases.lease(tenantId, (database) => migrate(database, tenantId));
+        }
+        catch (error) {
+            throw new Error(`The migration of tenant "${tenantId}" failed`, { cause: error });
+        }
+    }
+}
+//# sourceMappingURL=migrate-every-tenant.js.map

package/dist/tenancy/migrate-every-tenant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-every-tenant.js","sourceRoot":"","sources":["../../src/tenancy/migrate-every-tenant.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAA0B,EAC1B,SAA0B,EAC1B,OAAwD;IAExD,KAAK,MAAM,QAAQ,IAAI,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,UAAU,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/tenancy/migrate-tenant-schema.d.ts

@@ -0,0 +1,9 @@
+import type { Knex } from 'knex';
+/**
+ * Applies the migrations of `config` (the tenant migrations, a directory of their own) for one
+ * tenant: they read the tenant with `tenantOfMigration(knex)`, and the record of what was
+ * applied lives in the tenant's own schema, so every tenant moves forward on its own. This is
+ * also how a tenant is provisioned: its first run creates its schemas and tables.
+ */
+export declare function migrateTenantSchema(knex: Knex, tenantId: string, config: Knex.MigratorConfig): Promise<void>;
+//# sourceMappingURL=migrate-tenant-schema.d.ts.map

package/dist/tenancy/migrate-tenant-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-tenant-schema.d.ts","sourceRoot":"","sources":["../../src/tenancy/migrate-tenant-schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAMjC;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAKlH"}

package/dist/tenancy/migrate-tenant-schema.js

@@ -0,0 +1,15 @@
+import { tenantSchemaOf } from './tenant-schema-of.js';
+/** Where the migrations of each tenant are recorded: `migrations__<tenant>`. */
+const BOOKKEEPING_SCHEMA = 'migrations';
+/**
+ * Applies the migrations of `config` (the tenant migrations, a directory of their own) for one
+ * tenant: they read the tenant with `tenantOfMigration(knex)`, and the record of what was
+ * applied lives in the tenant's own schema, so every tenant moves forward on its own. This is
+ * also how a tenant is provisioned: its first run creates its schemas and tables.
+ */
+export async function migrateTenantSchema(knex, tenantId, config) {
+    const schemaName = tenantSchemaOf(BOOKKEEPING_SCHEMA, tenantId);
+    await knex.schema.createSchemaIfNotExists(schemaName);
+    await knex.withUserParams({ ...knex.userParams, tenantId }).migrate.latest({ ...config, schemaName });
+}
+//# sourceMappingURL=migrate-tenant-schema.js.map

package/dist/tenancy/migrate-tenant-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-tenant-schema.js","sourceRoot":"","sources":["../../src/tenancy/migrate-tenant-schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,gFAAgF;AAChF,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAExC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAU,EAAE,QAAgB,EAAE,MAA2B;IACjG,MAAM,UAAU,GAAG,cAAc,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IAEhE,MAAM,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;AACxG,CAAC"}

package/dist/tenancy/own-tenant-table.d.ts

@@ -0,0 +1,10 @@
+import type { Knex } from 'knex';
+import { type ExecutionScope } from '@ddd-ts-kit/kernel';
+import type { KnexContext } from '../unit-of-work/knex-context.js';
+import type { TenantTableTarget } from './tenant-table-target.js';
+/**
+ * The rows of the one tenant of the work in progress, for an update or a delete: an elevation
+ * widens reads, never writes. An insert spreads `tenantRow(tenantScopeOf(scope))` into its row.
+ */
+export declare function ownTenantTable<Row extends object>(context: KnexContext, scope: ExecutionScope, target: TenantTableTarget): Knex.QueryBuilder<Row, Row[]>;
+//# sourceMappingURL=own-tenant-table.d.ts.map

package/dist/tenancy/own-tenant-table.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"own-tenant-table.d.ts","sourceRoot":"","sources":["../../src/tenancy/own-tenant-table.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAEnE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAGlE;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,SAAS,MAAM,EAC/C,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,iBAAiB,GACxB,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAE/B"}

package/dist/tenancy/own-tenant-table.js

@@ -0,0 +1,11 @@
+import { tenantScopeOf } from '@ddd-ts-kit/kernel';
+import { tableIn } from './table-in.js';
+import { TENANT_COLUMN } from './where-tenant.js';
+/**
+ * The rows of the one tenant of the work in progress, for an update or a delete: an elevation
+ * widens reads, never writes. An insert spreads `tenantRow(tenantScopeOf(scope))` into its row.
+ */
+export function ownTenantTable(context, scope, target) {
+    return tableIn(context, target).where(target.column ?? TENANT_COLUMN, tenantScopeOf(scope).tenantId);
+}
+//# sourceMappingURL=own-tenant-table.js.map

package/dist/tenancy/own-tenant-table.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"own-tenant-table.js","sourceRoot":"","sources":["../../src/tenancy/own-tenant-table.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAuB,MAAM,oBAAoB,CAAC;AAExE,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAoB,EACpB,KAAqB,EACrB,MAAyB;IAEzB,OAAO,OAAO,CAAM,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC5G,CAAC"}

package/dist/tenancy/statement-outside-unit-of-work-error.d.ts

@@ -0,0 +1,5 @@
+/** A statement asked of the database-per-tenant unit of work outside of a transaction: it would hold no tenant's database. */
+export declare class StatementOutsideUnitOfWorkError extends Error {
+    constructor();
+}
+//# sourceMappingURL=statement-outside-unit-of-work-error.d.ts.map

package/dist/tenancy/statement-outside-unit-of-work-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"statement-outside-unit-of-work-error.d.ts","sourceRoot":"","sources":["../../src/tenancy/statement-outside-unit-of-work-error.ts"],"names":[],"mappings":"AAAA,8HAA8H;AAC9H,qBAAa,+BAAgC,SAAQ,KAAK;IACxD,cAGC;CACF"}

package/dist/tenancy/statement-outside-unit-of-work-error.js

@@ -0,0 +1,8 @@
+/** A statement asked of the database-per-tenant unit of work outside of a transaction: it would hold no tenant's database. */
+export class StatementOutsideUnitOfWorkError extends Error {
+    constructor() {
+        super('Under database per tenant, every statement runs inside the unit of work (run): none is open');
+        this.name = 'StatementOutsideUnitOfWorkError';
+    }
+}
+//# sourceMappingURL=statement-outside-unit-of-work-error.js.map

package/dist/tenancy/statement-outside-unit-of-work-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"statement-outside-unit-of-work-error.js","sourceRoot":"","sources":["../../src/tenancy/statement-outside-unit-of-work-error.ts"],"names":[],"mappings":"AAAA,8HAA8H;AAC9H,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IACxD;QACE,KAAK,CAAC,6FAA6F,CAAC,CAAC;QACrG,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF"}

package/dist/tenancy/table-in.d.ts

@@ -0,0 +1,6 @@
+import type { Knex } from 'knex';
+import type { KnexContext } from '../unit-of-work/knex-context.js';
+import type { TenantTableTarget } from './tenant-table-target.js';
+/** The table, in its schema, on the executor of the unit of work. */
+export declare function tableIn<Row extends object>(context: KnexContext, target: TenantTableTarget): Knex.QueryBuilder<Row, Row[]>;
+//# sourceMappingURL=table-in.d.ts.map

package/dist/tenancy/table-in.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"table-in.d.ts","sourceRoot":"","sources":["../../src/tenancy/table-in.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAElE,qEAAqE;AACrE,wBAAgB,OAAO,CAAC,GAAG,SAAS,MAAM,EACxC,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,iBAAiB,GACxB,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAI/B"}

package/dist/tenancy/table-in.js

@@ -0,0 +1,6 @@
+/** The table, in its schema, on the executor of the unit of work. */
+export function tableIn(context, target) {
+    const table = context.executor()(target.table);
+    return target.schema === undefined ? table : table.withSchema(target.schema);
+}
+//# sourceMappingURL=table-in.js.map

package/dist/tenancy/table-in.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"table-in.js","sourceRoot":"","sources":["../../src/tenancy/table-in.ts"],"names":[],"mappings":"AAIA,qEAAqE;AACrE,MAAM,UAAU,OAAO,CACrB,OAAoB,EACpB,MAAyB;IAEzB,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAa,MAAM,CAAC,KAAK,CAAC,CAAC;IAE3D,OAAO,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/E,CAAC"}

package/dist/tenancy/tenant-databases-options.d.ts

@@ -0,0 +1,15 @@
+import type { Knex } from 'knex';
+export interface TenantDatabasesOptions {
+    /** The connection of a tenant's database: its own configuration, pool included (keep `pool.max` small). */
+    readonly connectionOf: (tenantId: string) => Knex.Config;
+    /**
+     * How many tenants have an instance at once, those being closed included: an idle one, the
+     * least recently used, is closed when a new tenant needs one, and work waits when every
+     * instance is held. Default 20. The connections the server must accept are at most
+     * `maxTenants * pool.max` per instance of the application.
+     */
+    readonly maxTenants?: number;
+    /** Builds a knex instance; default `knex(config)`. */
+    readonly open?: (config: Knex.Config) => Knex;
+}
+//# sourceMappingURL=tenant-databases-options.d.ts.map

package/dist/tenancy/tenant-databases-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-databases-options.d.ts","sourceRoot":"","sources":["../../src/tenancy/tenant-databases-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAEjC,MAAM,WAAW,sBAAsB;IACrC,2GAA2G;IAC3G,QAAQ,CAAC,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC;IACzD;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,sDAAsD;IACtD,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;CAC/C"}

package/dist/tenancy/tenant-databases-options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=tenant-databases-options.js.map

package/dist/tenancy/tenant-databases-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-databases-options.js","sourceRoot":"","sources":["../../src/tenancy/tenant-databases-options.ts"],"names":[],"mappings":""}

package/dist/tenancy/tenant-databases.d.ts

@@ -0,0 +1,29 @@
+import { type Knex } from 'knex';
+import type { TenantDatabasesOptions } from './tenant-databases-options.js';
+/**
+ * One database per tenant: a knex instance (its own bounded pool) per tenant, opened on first
+ * use. At most `maxTenants` instances exist at once, those being closed included, so the
+ * connections stay within `maxTenants * pool.max`. A tenant's work holds its instance by a lease
+ * (`lease`): an instance is closed only when no work holds it, the least recently used first,
+ * and work for another tenant waits for a place rather than opening beyond the bound.
+ * `createTenantRoutedUnitOfWork` takes a lease for each transaction.
+ */
+export declare class TenantDatabases {
+    private readonly options;
+    private readonly pools;
+    private readonly draining;
+    private waiting;
+    constructor(options: TenantDatabasesOptions);
+    /** Runs `work` with the database of the tenant, held open until `work` settles. */
+    lease<T>(tenantId: string, work: (database: Knex) => Promise<T>): Promise<T>;
+    /** The tenants whose pool is open, least recently used first. */
+    tenants(): readonly string[];
+    close(): Promise<void>;
+    /** The instance of the tenant, most recently used now; once the bound has room for it when it has none. */
+    private acquire;
+    /** A new instance when the bound has room, after closing an idle one if it must; `undefined` to wait. */
+    private openedWithinBound;
+    private drain;
+    private wake;
+}
+//# sourceMappingURL=tenant-databases.d.ts.map

package/dist/tenancy/tenant-databases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-databases.d.ts","sourceRoot":"","sources":["../../src/tenancy/tenant-databases.ts"],"names":[],"mappings":"AAAA,OAAa,EAAE,KAAK,IAAI,EAAE,MAAM,MAAM,CAAC;AAEvC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAU5E;;;;;;;GAOG;AACH,qBAAa,eAAe;IAOd,OAAO,CAAC,QAAQ,CAAC,OAAO;IANpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;IAEvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;IAErD,OAAO,CAAC,OAAO,CAAsB;IAErC,YAA6B,OAAO,EAAE,sBAAsB,EAAI;IAEhE,mFAAmF;IAC7E,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CASjF;IAED,iEAAiE;IACjE,OAAO,IAAI,SAAS,MAAM,EAAE,CAE3B;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAK3B;IAED,2GAA2G;YAC7F,OAAO;IAgBrB,yGAAyG;IACzG,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,KAAK;IAWb,OAAO,CAAC,IAAI;CASb"}

package/dist/tenancy/tenant-databases.js

@@ -0,0 +1,80 @@
+import knex, {} from 'knex';
+import { assertTenantId } from '@ddd-ts-kit/kernel';
+const DEFAULT_MAX_TENANTS = 20;
+/**
+ * One database per tenant: a knex instance (its own bounded pool) per tenant, opened on first
+ * use. At most `maxTenants` instances exist at once, those being closed included, so the
+ * connections stay within `maxTenants * pool.max`. A tenant's work holds its instance by a lease
+ * (`lease`): an instance is closed only when no work holds it, the least recently used first,
+ * and work for another tenant waits for a place rather than opening beyond the bound.
+ * `createTenantRoutedUnitOfWork` takes a lease for each transaction.
+ */
+export class TenantDatabases {
+    options;
+    pools = new Map();
+    draining = new Set();
+    waiting = [];
+    constructor(options) {
+        this.options = options;
+    }
+    /** Runs `work` with the database of the tenant, held open until `work` settles. */
+    async lease(tenantId, work) {
+        const pool = await this.acquire(assertTenantId(tenantId));
+        try {
+            return await work(pool.knex);
+        }
+        finally {
+            pool.leases -= 1;
+            this.wake();
+        }
+    }
+    /** The tenants whose pool is open, least recently used first. */
+    tenants() {
+        return [...this.pools.keys()];
+    }
+    async close() {
+        const all = [...this.pools.values()];
+        this.pools.clear();
+        await Promise.all([...all.map((pool) => pool.knex.destroy()), ...this.draining]);
+    }
+    /** The instance of the tenant, most recently used now; once the bound has room for it when it has none. */
+    async acquire(tenantId) {
+        const pool = this.pools.get(tenantId) ?? this.openedWithinBound(tenantId);
+        if (pool === undefined) {
+            await new Promise((resolve) => this.waiting.push(resolve));
+            return this.acquire(tenantId);
+        }
+        this.pools.delete(tenantId);
+        this.pools.set(tenantId, pool);
+        pool.leases += 1;
+        return pool;
+    }
+    /** A new instance when the bound has room, after closing an idle one if it must; `undefined` to wait. */
+    openedWithinBound(tenantId) {
+        const limit = this.options.maxTenants ?? DEFAULT_MAX_TENANTS;
+        if (this.pools.size + this.draining.size < limit) {
+            return { knex: (this.options.open ?? knex)(this.options.connectionOf(tenantId)), leases: 0 };
+        }
+        const idle = [...this.pools].find(([, pool]) => pool.leases === 0);
+        if (idle !== undefined) {
+            this.drain(idle[0], idle[1]);
+        }
+        return undefined;
+    }
+    drain(tenantId, pool) {
+        this.pools.delete(tenantId);
+        const drained = pool.knex.destroy().finally(() => {
+            this.draining.delete(drained);
+            this.wake();
+        });
+        this.draining.add(drained);
+    }
+    wake() {
+        const waiting = this.waiting;
+        this.waiting = [];
+        for (const resolve of waiting) {
+            resolve();
+        }
+    }
+}
+//# sourceMappingURL=tenant-databases.js.map

package/dist/tenancy/tenant-databases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-databases.js","sourceRoot":"","sources":["../../src/tenancy/tenant-databases.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,EAAE,EAAa,MAAM,MAAM,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGpD,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAQ/B;;;;;;;GAOG;AACH,MAAM,OAAO,eAAe;IAOG,OAAO;IANnB,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEtC,QAAQ,GAAG,IAAI,GAAG,EAAiB,CAAC;IAE7C,OAAO,GAAmB,EAAE,CAAC;IAErC,YAA6B,OAA+B;uBAA/B,OAAO;IAA2B,CAAC;IAEhE,mFAAmF;IACnF,KAAK,CAAC,KAAK,CAAI,QAAgB,EAAE,IAAoC;QACnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE1D,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAErC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,2GAA2G;IACnG,KAAK,CAAC,OAAO,CAAC,QAAgB;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAE1E,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAEjE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QAEjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yGAAyG;IACjG,iBAAiB,CAAC,QAAgB;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAE7D,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC;YACjD,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC/F,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;QAEnE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,QAAgB,EAAE,IAAgB;QAC9C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE5B,MAAM,OAAO,GAAkB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAC9D,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAEO,IAAI;QACV,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAE7B,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAElB,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC9B,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/tenancy/tenant-isolation-statements.d.ts

@@ -0,0 +1,12 @@
+import type { TenantTableTarget } from './tenant-table-target.js';
+/**
+ * The PostgreSQL statements that make the database itself refuse a row of another tenant, the
+ * second line behind the tenant condition of every statement: row-level security enabled and
+ * forced (so that the owner of the table obeys it too), and one policy per command. A select
+ * sees the tenant of the work and the tenants an elevation reaches; an insert, an update and a
+ * delete only ever touch `ddd_ts_kit.tenant_id`, elevated or not, even without a condition of
+ * their own. Work that set nothing sees nothing and writes nothing. The role of the application
+ * must not be a superuser nor have `BYPASSRLS`: both ignore every policy.
+ */
+export declare function tenantIsolationStatements(target: TenantTableTarget): readonly string[];
+//# sourceMappingURL=tenant-isolation-statements.d.ts.map

package/dist/tenancy/tenant-isolation-statements.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-isolation-statements.d.ts","sourceRoot":"","sources":["../../src/tenancy/tenant-isolation-statements.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAGlE;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,iBAAiB,GAAG,SAAS,MAAM,EAAE,CAatF"}

package/dist/tenancy/tenant-isolation-statements.js

@@ -0,0 +1,31 @@
+import { TENANT_ISOLATION_POLICIES, tenantPolicyExpressions } from '@ddd-ts-kit/kernel';
+import { TENANT_COLUMN } from './where-tenant.js';
+/**
+ * The PostgreSQL statements that make the database itself refuse a row of another tenant, the
+ * second line behind the tenant condition of every statement: row-level security enabled and
+ * forced (so that the owner of the table obeys it too), and one policy per command. A select
+ * sees the tenant of the work and the tenants an elevation reaches; an insert, an update and a
+ * delete only ever touch `ddd_ts_kit.tenant_id`, elevated or not, even without a condition of
+ * their own. Work that set nothing sees nothing and writes nothing. The role of the application
+ * must not be a superuser nor have `BYPASSRLS`: both ignore every policy.
+ */
+export function tenantIsolationStatements(target) {
+    const table = qualified(target);
+    const { read, write } = tenantPolicyExpressions(quoted(target.column ?? TENANT_COLUMN));
+    const policy = (name, rest) => `create policy ${name} on ${table} ${rest}`;
+    return [
+        `alter table ${table} enable row level security`,
+        `alter table ${table} force row level security`,
+        policy(TENANT_ISOLATION_POLICIES.select, `for select using (${read})`),
+        policy(TENANT_ISOLATION_POLICIES.insert, `for insert with check (${write})`),
+        policy(TENANT_ISOLATION_POLICIES.update, `for update using (${write}) with check (${write})`),
+        policy(TENANT_ISOLATION_POLICIES.delete, `for delete using (${write})`),
+    ];
+}
+function qualified({ table, schema }) {
+    return schema === undefined ? quoted(table) : `${quoted(schema)}.${quoted(table)}`;
+}
+function quoted(identifier) {
+    return `"${identifier.replaceAll('"', '""')}"`;
+}
+//# sourceMappingURL=tenant-isolation-statements.js.map

package/dist/tenancy/tenant-isolation-statements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-isolation-statements.js","sourceRoot":"","sources":["../../src/tenancy/tenant-isolation-statements.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAExF,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAyB;IACjE,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,aAAa,CAAC,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE,CAAC,iBAAiB,IAAI,OAAO,KAAK,IAAI,IAAI,EAAE,CAAC;IAEnG,OAAO;QACL,eAAe,KAAK,4BAA4B;QAChD,eAAe,KAAK,2BAA2B;QAC/C,MAAM,CAAC,yBAAyB,CAAC,MAAM,EAAE,qBAAqB,IAAI,GAAG,CAAC;QACtE,MAAM,CAAC,yBAAyB,CAAC,MAAM,EAAE,0BAA0B,KAAK,GAAG,CAAC;QAC5E,MAAM,CAAC,yBAAyB,CAAC,MAAM,EAAE,qBAAqB,KAAK,iBAAiB,KAAK,GAAG,CAAC;QAC7F,MAAM,CAAC,yBAAyB,CAAC,MAAM,EAAE,qBAAqB,KAAK,GAAG,CAAC;KACxE,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAqB;IACrD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,SAAS,MAAM,CAAC,UAAkB;IAChC,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;AACjD,CAAC"}

package/dist/tenancy/tenant-of-migration.d.ts

@@ -0,0 +1,7 @@
+import type { Knex } from 'knex';
+/**
+ * In a migration run by `migrateTenantSchema`: the tenant it is applied for, to name its schemas
+ * with `tenantSchemaOf`. A migration run otherwise names none, and this throws.
+ */
+export declare function tenantOfMigration(knex: Knex): string;
+//# sourceMappingURL=tenant-of-migration.d.ts.map

package/dist/tenancy/tenant-of-migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-of-migration.d.ts","sourceRoot":"","sources":["../../src/tenancy/tenant-of-migration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAEjC;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAUpD"}

package/dist/tenancy/tenant-of-migration.js

@@ -0,0 +1,12 @@
+/**
+ * In a migration run by `migrateTenantSchema`: the tenant it is applied for, to name its schemas
+ * with `tenantSchemaOf`. A migration run otherwise names none, and this throws.
+ */
+export function tenantOfMigration(knex) {
+    const tenantId = knex.userParams['tenantId'];
+    if (typeof tenantId !== 'string') {
+        throw new TypeError('This migration is applied per tenant: run it with migrateTenantSchema(knex, tenantId, config).');
+    }
+    return tenantId;
+}
+//# sourceMappingURL=tenant-of-migration.js.map

package/dist/tenancy/tenant-of-migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-of-migration.js","sourceRoot":"","sources":["../../src/tenancy/tenant-of-migration.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAU;IAC1C,MAAM,QAAQ,GAAY,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAEtD,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CACjB,gGAAgG,CACjG,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/tenancy/tenant-schema-of.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The schema of a context for one tenant, under the schema-per-tenant strategy:
+ * `tenantSchemaOf('billing', 'acme')` is `billing__acme`. A tenant id that a schema name could
+ * not hold as it is (outside the grammar of `isTenantId`, or too long with the base) is refused, never altered: two tenants
+ * must never share a schema.
+ */
+export declare function tenantSchemaOf(base: string, tenantId: string): string;
+//# sourceMappingURL=tenant-schema-of.d.ts.map

package/dist/tenancy/tenant-schema-of.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-schema-of.d.ts","sourceRoot":"","sources":["../../src/tenancy/tenant-schema-of.ts"],"names":[],"mappings":"AAMA;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAYrE"}

package/dist/tenancy/tenant-schema-of.js

@@ -0,0 +1,21 @@
+import { isTenantId } from '@ddd-ts-kit/kernel';
+import { InvalidTenantIdentifierError } from './invalid-tenant-identifier-error.js';
+/** The longest identifier PostgreSQL keeps whole: a longer one is truncated, and two tenants could meet. */
+const LONGEST_IDENTIFIER = 63;
+/**
+ * The schema of a context for one tenant, under the schema-per-tenant strategy:
+ * `tenantSchemaOf('billing', 'acme')` is `billing__acme`. A tenant id that a schema name could
+ * not hold as it is (outside the grammar of `isTenantId`, or too long with the base) is refused, never altered: two tenants
+ * must never share a schema.
+ */
+export function tenantSchemaOf(base, tenantId) {
+    if (!isTenantId(tenantId)) {
+        throw new InvalidTenantIdentifierError(tenantId, 'it is outside the grammar of isTenantId');
+    }
+    const schema = `${base}__${tenantId}`;
+    if (schema.length > LONGEST_IDENTIFIER) {
+        throw new InvalidTenantIdentifierError(tenantId, `"${schema}" is longer than ${LONGEST_IDENTIFIER} characters`);
+    }
+    return schema;
+}
+//# sourceMappingURL=tenant-schema-of.js.map

package/dist/tenancy/tenant-schema-of.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-schema-of.js","sourceRoot":"","sources":["../../src/tenancy/tenant-schema-of.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAEpF,4GAA4G;AAC5G,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,QAAgB;IAC3D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,4BAA4B,CAAC,QAAQ,EAAE,yCAAyC,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,IAAI,KAAK,QAAQ,EAAE,CAAC;IAEtC,IAAI,MAAM,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACvC,MAAM,IAAI,4BAA4B,CAAC,QAAQ,EAAE,IAAI,MAAM,oBAAoB,kBAAkB,aAAa,CAAC,CAAC;IAClH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/tenancy/tenant-schema-table.d.ts

@@ -0,0 +1,11 @@
+import type { Knex } from 'knex';
+import { type ExecutionScope } from '@ddd-ts-kit/kernel';
+import type { KnexContext } from '../unit-of-work/knex-context.js';
+import type { TenantSchemaTarget } from './tenant-schema-target.js';
+/**
+ * The table in the schema of the tenant of the work in progress (`<schema>__<tenant>`): reads
+ * and writes reach that tenant's copy only. Work that names no tenant is refused, an elevation
+ * included: across tenants, staff read one tenant schema at a time.
+ */
+export declare function tenantSchemaTable<Row extends object>(context: KnexContext, scope: ExecutionScope, target: TenantSchemaTarget): Knex.QueryBuilder<Row, Row[]>;
+//# sourceMappingURL=tenant-schema-table.d.ts.map

package/dist/tenancy/tenant-schema-table.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-schema-table.d.ts","sourceRoot":"","sources":["../../src/tenancy/tenant-schema-table.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAGnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,SAAS,MAAM,EAClD,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,kBAAkB,GACzB,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAI/B"}

package/dist/tenancy/tenant-schema-table.js

@@ -0,0 +1,13 @@
+import { tenantScopeOf } from '@ddd-ts-kit/kernel';
+import { tableIn } from './table-in.js';
+import { tenantSchemaOf } from './tenant-schema-of.js';
+/**
+ * The table in the schema of the tenant of the work in progress (`<schema>__<tenant>`): reads
+ * and writes reach that tenant's copy only. Work that names no tenant is refused, an elevation
+ * included: across tenants, staff read one tenant schema at a time.
+ */
+export function tenantSchemaTable(context, scope, target) {
+    const schema = tenantSchemaOf(target.schema, tenantScopeOf(scope).tenantId);
+    return tableIn(context, { table: target.table, schema });
+}
+//# sourceMappingURL=tenant-schema-table.js.map

package/dist/tenancy/tenant-schema-table.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-schema-table.js","sourceRoot":"","sources":["../../src/tenancy/tenant-schema-table.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAuB,MAAM,oBAAoB,CAAC;AAExE,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAoB,EACpB,KAAqB,EACrB,MAA0B;IAE1B,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;IAE5E,OAAO,OAAO,CAAM,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AAChE,CAAC"}

package/dist/tenancy/tenant-schema-target.d.ts

@@ -0,0 +1,6 @@
+/** A table of a context under the schema-per-tenant strategy: its name and the schema of the context. */
+export interface TenantSchemaTarget {
+    readonly table: string;
+    readonly schema: string;
+}
+//# sourceMappingURL=tenant-schema-target.d.ts.map

package/dist/tenancy/tenant-schema-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-schema-target.d.ts","sourceRoot":"","sources":["../../src/tenancy/tenant-schema-target.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB"}

package/dist/tenancy/tenant-schema-target.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=tenant-schema-target.js.map

package/dist/tenancy/tenant-schema-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-schema-target.js","sourceRoot":"","sources":["../../src/tenancy/tenant-schema-target.ts"],"names":[],"mappings":""}

package/dist/tenancy/tenant-search-path.d.ts

@@ -0,0 +1,11 @@
+import type { Knex } from 'knex';
+import type { ExecutionScope } from '@ddd-ts-kit/kernel';
+/**
+ * The `begin` of a unit of work under the schema-per-tenant strategy, for SQL that names its
+ * tables without a schema: the search path of the transaction is the tenant's schemas of the
+ * contexts given, and nothing else, so that a missing table fails instead of falling through to
+ * another schema. Work without a tenant gets an empty search path. The kit's own adapters name
+ * their schema (`tenantSchemaTable`) and do not need it.
+ */
+export declare function tenantSearchPath(scope: ExecutionScope, schemas: readonly string[]): (transaction: Knex.Transaction) => Promise<void>;
+//# sourceMappingURL=tenant-search-path.d.ts.map

package/dist/tenancy/tenant-search-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-search-path.d.ts","sourceRoot":"","sources":["../../src/tenancy/tenant-search-path.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGzD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,cAAc,EACrB,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAOlD"}

package/dist/tenancy/tenant-search-path.js

@@ -0,0 +1,16 @@
+import { tenantSchemaOf } from './tenant-schema-of.js';
+/**
+ * The `begin` of a unit of work under the schema-per-tenant strategy, for SQL that names its
+ * tables without a schema: the search path of the transaction is the tenant's schemas of the
+ * contexts given, and nothing else, so that a missing table fails instead of falling through to
+ * another schema. Work without a tenant gets an empty search path. The kit's own adapters name
+ * their schema (`tenantSchemaTable`) and do not need it.
+ */
+export function tenantSearchPath(scope, schemas) {
+    return async (transaction) => {
+        const tenantId = scope.current()?.tenantId;
+        const path = tenantId === undefined ? [] : schemas.map((schema) => `"${tenantSchemaOf(schema, tenantId)}"`);
+        await transaction.raw('select set_config(?, ?, true)', ['search_path', path.length === 0 ? '""' : path.join(', ')]);
+    };
+}
+//# sourceMappingURL=tenant-search-path.js.map

package/dist/tenancy/tenant-search-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-search-path.js","sourceRoot":"","sources":["../../src/tenancy/tenant-search-path.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAqB,EACrB,OAA0B;IAE1B,OAAO,KAAK,EAAE,WAAW,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC;QAC3C,MAAM,IAAI,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;QAE5G,MAAM,WAAW,CAAC,GAAG,CAAC,+BAA+B,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tenancy/tenant-session.d.ts

@@ -0,0 +1,10 @@
+import type { Knex } from 'knex';
+import { type ExecutionScope } from '@ddd-ts-kit/kernel';
+/**
+ * The `begin` of a unit of work under row-level security: sets the tenant settings for the
+ * transaction only (`set_config(..., true)`), from the execution context of the work, so that a
+ * pooled connection never carries them to the next transaction. Work without a tenant sets them
+ * empty, and the policies then show it nothing.
+ */
+export declare function tenantSession(scope: ExecutionScope): (transaction: Knex.Transaction) => Promise<void>;
+//# sourceMappingURL=tenant-session.d.ts.map

package/dist/tenancy/tenant-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-session.d.ts","sourceRoot":"","sources":["../../src/tenancy/tenant-session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAwC,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAE/F;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,cAAc,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAarG"}