@forklaunch/core 1.6.7 → 2.0.0

package/lib/persistence/index.mjs

@@ -175,15 +175,48 @@ var _tenantContext = new AsyncLocalStorage();
 function registerEncryptor(encryptor) {
   _encryptor = encryptor;
 }
+var EmptyTenantError = class extends Error {
+  constructor(api) {
+    super(
+      `${api}: '' is not a tenant id. It used to mean "global", which made a deliberate global row indistinguishable from a tenant nobody resolved. Bind an explicit constant (for example '_internal') for rows that genuinely belong to no organization.`
+    );
+    this.name = "EmptyTenantError";
+  }
+};
+var UnboundTenantError = class extends Error {
+  constructor(operation) {
+    super(
+      `Cannot ${operation} an encrypted column with no tenant bound. Wrap the work in withEncryptionContext(tenantId, fn), or take the entity manager from a factory that calls wrapEmWithTenantContext. A raw em.fork() (or wrap(entity).__em) escapes the tenant proxy.`
+    );
+    this.name = "UnboundTenantError";
+  }
+};
+function assertBindableTenantId(tenantId, api) {
+  if (tenantId === "") {
+    throw new EmptyTenantError(api);
+  }
+}
 function setEncryptionTenantId(tenantId) {
+  assertBindableTenantId(tenantId, "setEncryptionTenantId");
   _tenantContext.enterWith({ tenantId });
 }
 function withEncryptionContext(tenantId, fn) {
+  assertBindableTenantId(tenantId, "withEncryptionContext");
   return _tenantContext.run({ tenantId }, fn);
 }
 function getCurrentTenantId() {
   return _tenantContext.getStore()?.tenantId ?? "";
 }
+function getBoundTenantId() {
+  return _tenantContext.getStore()?.tenantId;
+}
+function requireBoundTenantId(operation) {
+  const tenantId = _tenantContext.getStore()?.tenantId;
+  if (tenantId === void 0 || tenantId === "") {
+    throw new UnboundTenantError(operation);
+  }
+  return tenantId;
+}
 function resolveTypeInstance(type) {
   if (type instanceof Type) return type;
   if (typeof type === "function") {
@@ -257,7 +290,7 @@ var EncryptedType = class extends Type {
       return value;
     }
     const serialized = this.serialize(value);
-    return _encryptor.encrypt(serialized, getCurrentTenantId()) ?? serialized;
+    return _encryptor.encrypt(serialized, requireBoundTenantId("write")) ?? serialized;
   }
   convertToJSValue(value, _platform) {
     if (value === null || value === void 0) return null;
@@ -271,7 +304,7 @@ var EncryptedType = class extends Type {
       );
     }
     let decrypted;
-    const tenantId = getCurrentTenantId();
+    const tenantId = requireBoundTenantId("read");
     try {
       decrypted = _encryptor.decrypt(value, tenantId);
     } catch (err) {
@@ -1197,9 +1230,8 @@ function wrapEmWithTenantContext(em, tenantId) {
   if (tenantId === void 0) {
     return em;
   }
-  if (tenantId) {
-    em.setFilterParams("tenant", { tenantId });
-  }
+  assertBindableTenantId(tenantId, "wrapEmWithTenantContext");
+  em.setFilterParams("tenant", { tenantId });
   const proxy = new Proxy(em, {
     get(target, prop, receiver) {
       const value = Reflect.get(target, prop, receiver);
@@ -1226,6 +1258,7 @@ export {
   ENCRYPTED_PREFIXES2 as ENCRYPTED_PREFIXES,
   ENCRYPTION_FORMAT_ENV,
   ENCRYPTION_KEY_ENV,
+  EmptyTenantError,
   EncryptedType,
   EncryptionRequiredError,
   FieldEncryptor,
@@ -1236,7 +1269,9 @@ export {
   RetentionDuration,
   RlsEventSubscriber,
   TENANT_FILTER_NAME,
+  UnboundTenantError,
   asEncryptionSafe,
+  assertBindableTenantId,
   classifyEncryptedValue,
   collectFallbackTenantIds,
   countValuesByKeyId,
@@ -1249,6 +1284,7 @@ export {
   fp,
   getAllRetentionPolicies,
   getAllUserIdFields,
+  getBoundTenantId,
   getComplianceMetadata,
   getCurrentTenantId,
   getEntityComplianceFields,