@forklaunch/core 1.6.0 → 1.6.2

package/lib/persistence/tenantEm.d.ts

@@ -48,13 +48,26 @@ import type { EntityManager } from '@mikro-orm/core';
  * }
  * ```
  *
- * If `tenantId` is `undefined` or empty, the original EM is returned
- * unwrapped — useful for super-admin / lookup paths that need an
- * unscoped query before they know the tenant.
+ * # The empty tenant is a tenant
+ *
+ * Global rows (a billing plan, a trial, a template) are encrypted under the
+ * empty tenant `''`. A caller that passes `''` means "bind the no-tenant
+ * key", and gets a Proxy that runs every EM call inside
+ * `withEncryptionContext('', …)`. Only `undefined` means "do not wrap": the
+ * EM is returned as is and inherits whatever context is already bound,
+ * which is right for a super-admin lookup that has not resolved a tenant
+ * yet, and wrong for anything that writes.
+ *
+ * Earlier versions treated `''` like `undefined` and also seeded the ALS
+ * with `enterWith`, which mutates the *calling* async resource. Together
+ * those meant: after one org-scoped EM was created on a request, a later
+ * "no-tenant" EM on the same resource silently read and wrote under that
+ * org's key. Global rows then came out unreadable ("Failed to decrypt
+ * encrypted column value") depending on what had run before on the worker.
  *
  * @param em        a freshly forked `EntityManager` from `orm.em.fork(...)`
- * @param tenantId  the org/tenant id to bind for filter params + ALS;
- *                  pass `undefined` to skip wrapping entirely
+ * @param tenantId  the org/tenant id to bind; `''` binds the no-tenant key;
+ *                  `undefined` skips wrapping entirely
  */
 export declare function wrapEmWithTenantContext(em: EntityManager, tenantId: string | undefined): EntityManager;
 //# sourceMappingURL=tenantEm.d.ts.map

package/lib/persistence/tenantEm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenantEm.d.ts","sourceRoot":"","sources":["../../src/persistence/tenantEm.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGrD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,aAAa,EACjB,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,aAAa,CA0Bf"}
+{"version":3,"file":"tenantEm.d.ts","sourceRoot":"","sources":["../../src/persistence/tenantEm.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGrD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqEG;AACH,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,aAAa,EACjB,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,aAAa,CA4Bf"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forklaunch/core",
-  "version": "1.6.0",
+  "version": "1.6.2",
   "description": "forklaunch-js core package. Contains useful building blocks.",
   "homepage": "https://github.com/forklaunch/forklaunch-js#readme",
   "bugs": {
@@ -81,8 +81,8 @@
   "dependencies": {
     "@asyncapi/parser": "^3.6.3",
     "@forklaunch/opentelemetry-instrumentation-hyper-express": "0.0.5",
-    "@mikro-orm/core": "7.1.15",
-    "@mikro-orm/mongodb": "7.1.15",
+    "@mikro-orm/core": "7.2.1",
+    "@mikro-orm/mongodb": "7.2.1",
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/api-logs": "^0.222.0",
     "@opentelemetry/exporter-logs-otlp-http": "^0.222.0",
@@ -98,8 +98,8 @@
     "@opentelemetry/sdk-trace-node": "^2.11.0",
     "@opentelemetry/semantic-conventions": "^1.43.0",
     "cors": "^2.8.6",
-    "dotenv": "^17.4.2",
-    "fastmcp": "^4.20.11",
+    "dotenv": "^18.0.1",
+    "fastmcp": "^4.20.14",
     "jose": "6.2.12",
     "openapi3-ts": "^4.6.1",
     "pino": "^10.3.1",
@@ -107,21 +107,21 @@
     "pino-pretty": "^13.1.3",
     "redis": "^6.2.1",
     "uuid": "^14.0.2",
-    "zod": "^4.6.4",
-    "@forklaunch/common": "^1.2.26",
-    "@forklaunch/validator": "^1.2.27"
+    "zod": "^4.6.5",
+    "@forklaunch/common": "^1.2.27",
+    "@forklaunch/validator": "^1.2.28"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
-    "@scalar/express-api-reference": "^0.10.18",
+    "@scalar/express-api-reference": "^0.10.19",
     "@types/cors": "^2.8.19",
     "@types/jest": "^30.0.0",
     "@types/qs": "^6.15.1",
     "@types/uuid": "^11.0.0",
     "globals": "^17.12.0",
-    "jest": "^30.5.1",
+    "jest": "^30.5.2",
     "jose": "6.1.3",
-    "prettier": "^3.9.6",
+    "prettier": "^3.9.8",
     "testcontainers": "^12.1.0",
     "ts-jest": "^29.4.12",
     "ts-node": "^10.9.2",