@dudousxd/nestjs-durable-store-mikro-orm 0.16.2 → 0.18.0

package/dist/index.js

@@ -84,11 +84,28 @@ var BufferedSignalEntity = class {
   token;
   payload;
 };
+function namespaceFilterCond(args) {
+  if (args.namespace === void 0) return {};
+  return {
+    namespace: args.namespace
+  };
+}
+__name(namespaceFilterCond, "namespaceFilterCond");
 function durableEntities(options = {}) {
   const col = columnNamer(options.naming ?? "snake_case");
   const workflowRuns = new EntitySchema({
     class: WorkflowRunEntity,
     tableName: "durable_workflow_runs",
+    // Global filter: confines every read to the tenant's namespace when the store is scoped.
+    // The `cond` returns `{}` (no-op) when the `namespace` arg is `undefined`, so an unscoped
+    // (operator / control-plane) store sees all rows unchanged — existing behaviour is preserved.
+    filters: {
+      namespace: {
+        name: "namespace",
+        cond: namespaceFilterCond,
+        default: true
+      }
+    },
     // Indexes mirror the Prisma adapter so a store swap keeps the same plan. The poller hits these
     // every tick: `(status, wakeAt)` serves both the due-timer scan (status='suspended' AND wakeAt<=now)
     // and, via its `status` prefix, the pending/incomplete status lookups; `(workflow, status)` serves
@@ -404,6 +421,7 @@ var ENTITIES = durableEntities();
 import { attributeColumnFor, attributeOperand, normalizeAttributeRows, parseDuration, sqlComparator } from "@dudousxd/nestjs-durable-core";
 
 // src/schema.ts
+import { createHash } from "node:crypto";
 var DURABLE_TABLE_NAMES = /* @__PURE__ */ new Set([
   "durable_workflow_runs",
   "durable_step_checkpoints",
@@ -411,6 +429,14 @@ var DURABLE_TABLE_NAMES = /* @__PURE__ */ new Set([
   "durable_signal_waiters",
   "durable_buffered_signals"
 ]);
+var MARKER_TABLE = "durable_schema_meta";
+var MARKER_ROW_ID = "durable";
+var SCHEMA_LOCK_NAME = "durable_schema";
+var SCHEMA_REVISION = 1;
+function compareStrings(a, b) {
+  return a < b ? -1 : a > b ? 1 : 0;
+}
+__name(compareStrings, "compareStrings");
 function targetTable(statement) {
   const match = statement.match(/^(?:create\s+(?:unique\s+)?index\s+.+?\s+on\s+|(?:create|alter)\s+table\s+(?:if\s+not\s+exists\s+)?)[`"']?([\w$]+)[`"']?/i);
   return match?.[1]?.toLowerCase();
@@ -420,7 +446,132 @@ function isRequiredStructure(statement) {
   return /\b(?:create\s+table|create\s+(?:unique\s+)?index|add\s+(?:column|index|constraint|key|unique|fulltext))\b/i.test(statement);
 }
 __name(isRequiredStructure, "isRequiredStructure");
+function detectSqlDialect(orm) {
+  const platform = String(orm.em.getPlatform().constructor.name).toLowerCase();
+  if (platform.includes("mysql") || platform.includes("maria")) return "mysql";
+  if (platform.includes("postgre")) return "postgres";
+  if (platform.includes("sqlite") || platform.includes("libsql")) return "sqlite";
+  return "unknown";
+}
+__name(detectSqlDialect, "detectSqlDialect");
+function normalizeIndexProperties(properties) {
+  if (properties === void 0) return [];
+  if (Array.isArray(properties)) return properties.map((property) => String(property));
+  return [
+    String(properties)
+  ];
+}
+__name(normalizeIndexProperties, "normalizeIndexProperties");
+function computeExpectedFingerprint(orm, ownedTableNames) {
+  const ownedMetadata = [
+    ...orm.getMetadata().getAll().values()
+  ].filter((meta) => ownedTableNames.has(meta.tableName)).sort((a, b) => compareStrings(a.tableName, b.tableName));
+  const tables = ownedMetadata.map((meta) => {
+    const columns = [
+      ...meta.props
+    ].map((prop) => ({
+      prop,
+      columnName: prop.fieldNames[0] ?? String(prop.name)
+    })).sort((a, b) => compareStrings(a.columnName, b.columnName)).map(({ prop, columnName }) => ({
+      name: columnName,
+      type: prop.columnTypes[0] ?? String(prop.type),
+      nullable: prop.nullable === true,
+      primary: prop.primary === true,
+      default: prop.default ?? null,
+      autoincrement: prop.autoincrement === true
+    }));
+    const indexes = [
+      ...meta.indexes
+    ].map((index) => ({
+      name: index.name ?? "",
+      properties: normalizeIndexProperties(index.properties)
+    })).sort((a, b) => compareStrings(a.name, b.name));
+    return {
+      tableName: meta.tableName,
+      columns,
+      indexes
+    };
+  });
+  const canonical = `${canonicalize(tables)}|collate=${String(orm.config.get("collate") ?? "")}|rev=${SCHEMA_REVISION}`;
+  return createHash("sha256").update(canonical).digest("hex");
+}
+__name(computeExpectedFingerprint, "computeExpectedFingerprint");
+function canonicalize(value) {
+  if (Array.isArray(value)) {
+    return `[${value.map(canonicalize).join(",")}]`;
+  }
+  if (value !== null && typeof value === "object") {
+    const entries = Object.entries(value).sort(([a], [b]) => compareStrings(a, b));
+    return `{${entries.map(([key, val]) => `${JSON.stringify(key)}:${canonicalize(val)}`).join(",")}}`;
+  }
+  return JSON.stringify(value);
+}
+__name(canonicalize, "canonicalize");
+function createMarkerTableSql() {
+  return `create table if not exists ${MARKER_TABLE} (id varchar(32) not null primary key, fingerprint varchar(64) not null, applied_at bigint not null)`;
+}
+__name(createMarkerTableSql, "createMarkerTableSql");
+async function readStoredFingerprint(orm) {
+  const rows = await orm.em.getConnection().execute(`select fingerprint from ${MARKER_TABLE} where id = ?`, [
+    MARKER_ROW_ID
+  ]);
+  return rows[0]?.fingerprint ?? void 0;
+}
+__name(readStoredFingerprint, "readStoredFingerprint");
+async function writeFingerprint(orm, dialect, fingerprint) {
+  const upsert = dialect === "mysql" ? `insert into ${MARKER_TABLE} (id, fingerprint, applied_at) values (?, ?, ?) on duplicate key update fingerprint = values(fingerprint), applied_at = values(applied_at)` : `insert into ${MARKER_TABLE} (id, fingerprint, applied_at) values (?, ?, ?) on conflict (id) do update set fingerprint = excluded.fingerprint, applied_at = excluded.applied_at`;
+  await orm.em.getConnection().execute(upsert, [
+    MARKER_ROW_ID,
+    fingerprint,
+    Date.now()
+  ]);
+}
+__name(writeFingerprint, "writeFingerprint");
+async function acquireSchemaLock(orm, dialect) {
+  try {
+    if (dialect === "mysql") {
+      await orm.em.getConnection().execute(`select get_lock('${SCHEMA_LOCK_NAME}', 10)`);
+    } else if (dialect === "postgres") {
+      await orm.em.getConnection().execute(`select pg_advisory_lock(hashtext('${SCHEMA_LOCK_NAME}'))`);
+    }
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    console.warn(`[nestjs-durable-store-mikro-orm] could not acquire the durable-schema advisory lock (proceeding without it): ${message}`);
+  }
+}
+__name(acquireSchemaLock, "acquireSchemaLock");
+async function releaseSchemaLock(orm, dialect) {
+  try {
+    if (dialect === "mysql") {
+      await orm.em.getConnection().execute(`select release_lock('${SCHEMA_LOCK_NAME}')`);
+    } else if (dialect === "postgres") {
+      await orm.em.getConnection().execute(`select pg_advisory_unlock(hashtext('${SCHEMA_LOCK_NAME}'))`);
+    }
+  } catch {
+  }
+}
+__name(releaseSchemaLock, "releaseSchemaLock");
 async function ensureMikroOrmDurableSchema(orm) {
+  const dialect = detectSqlDialect(orm);
+  await orm.em.getConnection().execute(createMarkerTableSql());
+  const expected = computeExpectedFingerprint(orm, DURABLE_TABLE_NAMES);
+  const stored = await readStoredFingerprint(orm);
+  if (stored === expected) {
+    return;
+  }
+  await acquireSchemaLock(orm, dialect);
+  try {
+    if (await readStoredFingerprint(orm) === expected) {
+      return;
+    }
+    await healDurableSchema(orm);
+    await writeFingerprint(orm, dialect, expected);
+  } finally {
+    await releaseSchemaLock(orm, dialect);
+  }
+}
+__name(ensureMikroOrmDurableSchema, "ensureMikroOrmDurableSchema");
+async function healDurableSchema(orm) {
   const sql = await orm.schema.getUpdateSchemaSQL({
     safe: true
   });
@@ -442,7 +593,7 @@ async function ensureMikroOrmDurableSchema(orm) {
   }
   await alignDurableCollation(orm);
 }
-__name(ensureMikroOrmDurableSchema, "ensureMikroOrmDurableSchema");
+__name(healDurableSchema, "healDurableSchema");
 function isSafeSqlIdentifier(value) {
   return /^[A-Za-z0-9_]+$/.test(value);
 }
@@ -480,25 +631,51 @@ async function alignDurableCollation(orm) {
 __name(alignDurableCollation, "alignDurableCollation");
 
 // src/mikro-orm-state-store.ts
-var MikroOrmStateStore = class {
+var MikroOrmStateStore = class _MikroOrmStateStore {
   static {
     __name(this, "MikroOrmStateStore");
   }
   orm;
-  constructor(orm) {
+  scopeNamespace;
+  constructor(orm, opts) {
     this.orm = orm;
+    this.scopeNamespace = opts?.scope?.namespace;
+  }
+  /**
+  * Derive a store confined to a single tenant `scope.namespace`, sharing this store's ORM (no new
+  * connection). Turns the operator (unscoped) store into a tenant-boundary view at wiring time —
+  * used by the NestJS module's `scopeReads` option, which receives a pre-built store and can't
+  * reconstruct it. Pass `{ namespace: undefined }` for the unscoped operator view.
+  */
+  withScope(scope) {
+    return new _MikroOrmStateStore(this.orm, {
+      scope
+    });
+  }
+  /**
+  * Create a forked EntityManager and activate the `namespace` global filter with the store's
+  * scope (if any). All read operations go through this so the tenant boundary is applied
+  * uniformly. Write operations (nativeDelete, nativeUpdate, upsert, insertMany) bypass global
+  * filters in MikroORM and are unaffected.
+  */
+  fork() {
+    const em = this.orm.em.fork();
+    em.setFilterParams("namespace", {
+      namespace: this.scopeNamespace
+    });
+    return em;
   }
   async ensureSchema() {
     await ensureMikroOrmDurableSchema(this.orm);
   }
   async createRun(run) {
-    const em = this.orm.em.fork();
+    const em = this.fork();
     em.create(WorkflowRunEntity, toRunEntity(run));
     await em.flush();
     await this.reindexAttributes(run.id, run.searchAttributes);
   }
   async updateRun(runId, patch) {
-    const em = this.orm.em.fork();
+    const em = this.fork();
     const entity = await em.findOneOrFail(WorkflowRunEntity, {
       id: runId
     });
@@ -512,7 +689,7 @@ var MikroOrmStateStore = class {
   /** Rewrite a run's normalized attribute rows: delete the old set, insert the current one. Mirrors
   *  the in-memory store's reindex so the side-table always reflects the run's live searchAttributes. */
   async reindexAttributes(runId, attributes, forked) {
-    const em = forked ?? this.orm.em.fork();
+    const em = forked ?? this.fork();
     await em.nativeDelete(RunAttributeEntity, {
       runId
     });
@@ -520,14 +697,14 @@ var MikroOrmStateStore = class {
     if (rows.length) await em.insertMany(RunAttributeEntity, rows);
   }
   async getRun(runId) {
-    const em = this.orm.em.fork();
+    const em = this.fork();
     const entity = await em.findOne(WorkflowRunEntity, {
       id: runId
     });
     return entity ? fromRunEntity(entity) : null;
   }
   async deleteRun(runId) {
-    const em = this.orm.em.fork();
+    const em = this.fork();
     await em.nativeDelete(StepCheckpointEntity, {
       runId
     });
@@ -543,7 +720,7 @@ var MikroOrmStateStore = class {
   }
   async pruneTerminalRuns(policy, nowMs, limit) {
     if (policy.statuses.length === 0 || limit <= 0) return 0;
-    const em = this.orm.em.fork();
+    const em = this.fork();
     const status = {
       $in: policy.statuses
     };
@@ -609,7 +786,7 @@ var MikroOrmStateStore = class {
     return idList.length;
   }
   async getCheckpoint(runId, seq) {
-    const em = this.orm.em.fork();
+    const em = this.fork();
     const entity = await em.findOne(StepCheckpointEntity, {
       runId,
       seq
@@ -617,12 +794,12 @@ var MikroOrmStateStore = class {
     return entity ? fromCheckpointEntity(entity) : null;
   }
   async saveCheckpoint(checkpoint) {
-    const em = this.orm.em.fork();
+    const em = this.fork();
     await em.upsert(StepCheckpointEntity, toCheckpointEntity(checkpoint));
     await em.flush();
   }
   async transaction(work) {
-    return this.orm.em.fork().transactional(async (em) => work({
+    return this.fork().transactional(async (em) => work({
       raw: em,
       saveCheckpoint: /* @__PURE__ */ __name(async (cp) => {
         await em.upsert(StepCheckpointEntity, toCheckpointEntity(cp));
@@ -630,7 +807,7 @@ var MikroOrmStateStore = class {
     }));
   }
   async listIncompleteRuns(namespace) {
-    const em = this.orm.em.fork();
+    const em = this.fork();
     const rows = await em.find(WorkflowRunEntity, {
       status: {
         $in: [
@@ -645,7 +822,7 @@ var MikroOrmStateStore = class {
     return rows.map(fromRunEntity);
   }
   async listPendingRuns(limit, namespace) {
-    const em = this.orm.em.fork();
+    const em = this.fork();
     const rows = await em.find(WorkflowRunEntity, {
       status: "pending",
       ...namespace !== void 0 ? {
@@ -660,7 +837,7 @@ var MikroOrmStateStore = class {
     return rows.map(fromRunEntity);
   }
   async listDueTimers(nowMs, namespace) {
-    const em = this.orm.em.fork();
+    const em = this.fork();
     const rows = await em.find(WorkflowRunEntity, {
       status: "suspended",
       wakeAt: {
@@ -674,7 +851,7 @@ var MikroOrmStateStore = class {
     return rows.map(fromRunEntity);
   }
   async tryLockRun(runId, owner, leaseUntilMs, nowMs) {
-    const em = this.orm.em.fork();
+    const em = this.fork();
     const affected = await em.nativeUpdate(WorkflowRunEntity, {
       id: runId,
       $or: [
@@ -694,7 +871,7 @@ var MikroOrmStateStore = class {
     return affected === 1;
   }
   async releaseRunLock(runId) {
-    const em = this.orm.em.fork();
+    const em = this.fork();
     await em.nativeUpdate(WorkflowRunEntity, {
       id: runId
     }, {
@@ -703,7 +880,7 @@ var MikroOrmStateStore = class {
     });
   }
   async renewRunLock(runId, owner, leaseUntilMs) {
-    const em = this.orm.em.fork();
+    const em = this.fork();
     const affected = await em.nativeUpdate(WorkflowRunEntity, {
       id: runId,
       lockedBy: owner
@@ -713,7 +890,7 @@ var MikroOrmStateStore = class {
     return affected === 1;
   }
   async listRuns(query) {
-    const em = this.orm.em.fork();
+    const em = this.fork();
     const where = {};
     if (query.workflow) where.workflow = query.workflow;
     if (query.namespace !== void 0) where.namespace = query.namespace;
@@ -739,6 +916,7 @@ var MikroOrmStateStore = class {
       createdAt: "desc"
     };
     if (query.tag || query.attributes?.length) {
+      if (this.scopeNamespace !== void 0) where.namespace = this.scopeNamespace;
       const quote = this.idQuote(em);
       const cols = this.attributeColumns(em);
       const qb = em.createQueryBuilder(WorkflowRunEntity, "r").where(where).orderBy(orderBy);
@@ -821,7 +999,7 @@ var MikroOrmStateStore = class {
     return (id) => `${ch}${id}${ch}`;
   }
   async listCheckpoints(runId) {
-    const em = this.orm.em.fork();
+    const em = this.fork();
     const rows = await em.find(StepCheckpointEntity, {
       runId
     }, {
@@ -832,7 +1010,7 @@ var MikroOrmStateStore = class {
     return rows.map(fromCheckpointEntity);
   }
   async getLatestCheckpointByName(runId, name) {
-    const em = this.orm.em.fork();
+    const em = this.fork();
     const entity = await em.findOne(StepCheckpointEntity, {
       runId,
       name
@@ -845,7 +1023,7 @@ var MikroOrmStateStore = class {
   }
   async listCheckpointsByNamePrefix(runId, prefixes) {
     if (prefixes.length === 0) return [];
-    const em = this.orm.em.fork();
+    const em = this.fork();
     const rows = await em.find(StepCheckpointEntity, {
       runId,
       $or: prefixes.map((p) => ({
@@ -861,7 +1039,7 @@ var MikroOrmStateStore = class {
     return rows.map(fromCheckpointEntity);
   }
   async putSignalWaiter(waiter) {
-    const em = this.orm.em.fork();
+    const em = this.fork();
     await em.upsert(SignalWaiterEntity, {
       token: waiter.token,
       runId: waiter.runId,
@@ -871,7 +1049,7 @@ var MikroOrmStateStore = class {
     await em.flush();
   }
   async takeSignalWaiter(token) {
-    const em = this.orm.em.fork();
+    const em = this.fork();
     const entity = await em.findOne(SignalWaiterEntity, {
       token
     });
@@ -886,7 +1064,7 @@ var MikroOrmStateStore = class {
     return waiter;
   }
   async listSignalWaiters(prefix) {
-    const em = this.orm.em.fork();
+    const em = this.fork();
     const rows = await em.find(SignalWaiterEntity, {
       token: {
         $like: `${prefix}%`
@@ -900,7 +1078,7 @@ var MikroOrmStateStore = class {
     }));
   }
   async bufferSignal(token, payload) {
-    const em = this.orm.em.fork();
+    const em = this.fork();
     const e = new BufferedSignalEntity();
     e.token = token;
     e.payload = payload ?? null;
@@ -908,7 +1086,7 @@ var MikroOrmStateStore = class {
     await em.flush();
   }
   async takeBufferedSignal(token) {
-    const em = this.orm.em.fork();
+    const em = this.fork();
     const entity = await em.findOne(BufferedSignalEntity, {
       token
     }, {