@getstrata/core 1.1.8 → 1.1.9

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @getstrata/core changelog
 
+## 1.1.9
+
+- Defer model events until the surrounding transaction commits
+
+## Unreleased
+
+- Model events from `BaseRepository` writes wait for the surrounding `runInTransaction` / `runWithTenantDatabase` / `runWithMigrationBypass` callback to commit. A rollback drops the queued events. Nested transactions promote to the outer commit. Listeners run with the tenant that was active when the write happened.
+
 ## 1.1.8
 
 - Exclude HTML and SPA routes from generated OpenAPI specs

package/dist/core/events/deferredModelEvents.d.ts

@@ -0,0 +1,3 @@
+declare function dispatchModelEvent(event: string, payload: unknown): Promise<void>;
+declare function runWithDeferredModelEvents<T>(callback: () => T | Promise<T>): Promise<T>;
+export { dispatchModelEvent, runWithDeferredModelEvents };

package/dist/core/events/index.d.ts

@@ -1,3 +1,4 @@
+export { dispatchModelEvent, runWithDeferredModelEvents } from "./deferredModelEvents";
 export type { EventListener } from "./eventBus";
 export { EventBus, eventBus, readSharedEventBus } from "./eventBus";
 declare function modelEventName(tableName: string, action: string): string;

package/dist/entries/audit/exportAuditLogs.js

@@ -1,4 +1,239 @@
 // @bun
+var __esm = (fn, res, err) => () => {
+  if (fn)
+    try {
+      res = fn(fn = 0);
+    } catch (e) {
+      err = [e];
+    }
+  if (err)
+    throw err[0];
+  return res;
+};
+
+// ../../src/core/runtime/asyncContextStore.ts
+import { AsyncLocalStorage } from "async_hooks";
+function createAsyncContextStore(key) {
+  const symbol = Symbol.for(key);
+  const globalRecord = globalThis;
+  const existing = globalRecord[symbol];
+  if (existing) {
+    return existing;
+  }
+  const store = new AsyncLocalStorage;
+  globalRecord[symbol] = store;
+  return store;
+}
+var init_asyncContextStore = () => {};
+
+// ../../src/core/database/connectionContext.ts
+function runWithDatabaseConnection(connection, callback) {
+  return activeConnection.run(connection, callback);
+}
+function getActiveDatabaseConnection(fallback) {
+  return activeConnection.getStore() ?? fallback;
+}
+function hasActiveDatabaseConnection() {
+  return activeConnection.getStore() !== undefined;
+}
+var activeConnection;
+var init_connectionContext = __esm(() => {
+  init_asyncContextStore();
+  activeConnection = createAsyncContextStore("@getstrata/databaseConnectionContext");
+});
+
+// ../../src/core/tenant/tenantContext.ts
+function runWithTenant(tenant, callback) {
+  return tenantContext.run(tenant, callback);
+}
+function currentTenant() {
+  return tenantContext.getStore() ?? null;
+}
+var tenantContext;
+var init_tenantContext = __esm(() => {
+  init_asyncContextStore();
+  tenantContext = createAsyncContextStore("@getstrata/tenantContext");
+});
+
+// ../../src/core/events/eventBus.ts
+class EventBus {
+  constructor() {}
+  listeners = new Map;
+  on(event, listener) {
+    return this.listen(event, listener);
+  }
+  listen(event, listener) {
+    const handlers = this.listeners.get(event) ?? new Set;
+    handlers.add(listener);
+    this.listeners.set(event, handlers);
+    return () => {
+      handlers.delete(listener);
+      if (handlers.size === 0) {
+        this.listeners.delete(event);
+      }
+    };
+  }
+  async emit(event, payload) {
+    await this.dispatch(event, payload);
+  }
+  async dispatch(event, payload) {
+    const handlers = this.listeners.get(event);
+    if (!handlers || handlers.size === 0) {
+      return;
+    }
+    for (const handler of handlers) {
+      await handler(payload);
+    }
+  }
+}
+function readSharedEventBus() {
+  const globalBus = globalThis[EVENT_BUS_KEY];
+  if (globalBus) {
+    return globalBus;
+  }
+  const bus = new EventBus;
+  globalThis[EVENT_BUS_KEY] = bus;
+  return bus;
+}
+var EVENT_BUS_KEY, eventBus;
+var init_eventBus = __esm(() => {
+  EVENT_BUS_KEY = Symbol.for("@getstrata/eventBus");
+  eventBus = readSharedEventBus();
+});
+
+// ../../src/core/tenant/tenancyConfig.ts
+function readTenancyDriver(env = process.env) {
+  const raw = env.TENANCY_DRIVER?.trim();
+  if (raw === undefined || raw === "") {
+    return "rls";
+  }
+  if (TENANCY_DRIVERS.includes(raw)) {
+    return raw;
+  }
+  throw new Error(`TENANCY_DRIVER must be one of ${TENANCY_DRIVERS.join(", ")}; received "${raw}".`);
+}
+function isTenancyEnabled(env = process.env) {
+  return readTenancyDriver(env) !== "none";
+}
+function isRlsTenancy(env = process.env) {
+  return readTenancyDriver(env) === "rls";
+}
+var TENANCY_DRIVERS;
+var init_tenancyConfig = __esm(() => {
+  TENANCY_DRIVERS = ["rls", "column", "none"];
+});
+
+// ../../src/core/tenant/tenantDatabaseScope.ts
+import { getDefaultDatabasePool } from "@getstrata/core/database/defaultConnection";
+async function applyTenantContextToTransaction(transaction, tenantId) {
+  await transaction.unsafe(`SELECT set_config('app.tenant_id', $1, true)`, [String(tenantId)]);
+  await transaction.unsafe(`SELECT set_config('app.bypass_rls', $1, true)`, ["false"]);
+}
+async function runWithTenantDatabase(tenant, callback) {
+  if (!isTenancyEnabled() || !isRlsTenancy()) {
+    return await runWithTenant(tenant, callback);
+  }
+  if (hasActiveDatabaseConnection()) {
+    const activeConnection = getActiveDatabaseConnection(getDefaultDatabasePool());
+    await applyTenantContextToTransaction(activeConnection, tenant.id);
+    return await runWithTenant(tenant, callback);
+  }
+  const pool = getDefaultDatabasePool();
+  const begin = pool.begin;
+  if (typeof begin !== "function") {
+    throw new Error("RLS tenant scope requires a pool that supports begin(). Session-scoped set_config is not used on pooled connections.");
+  }
+  return await runWithDeferredModelEvents(async () => {
+    return await begin(async (transaction) => {
+      await applyTenantContextToTransaction(transaction, tenant.id);
+      return await runWithDatabaseConnection(transaction, async () => {
+        return await runWithTenant(tenant, callback);
+      });
+    });
+  });
+}
+function isInsideTenantDatabaseScope(tenantId = currentTenant()?.id) {
+  return hasActiveDatabaseConnection() && currentTenant()?.id === tenantId;
+}
+var init_tenantDatabaseScope = __esm(() => {
+  init_connectionContext();
+  init_deferredModelEvents();
+  init_tenancyConfig();
+  init_tenantContext();
+});
+
+// ../../src/core/events/deferredModelEvents.ts
+function sameTenant(left, right) {
+  if (left === null && right === null) {
+    return true;
+  }
+  if (left === null || right === null) {
+    return false;
+  }
+  return left.id === right.id;
+}
+function groupQueuedModelEvents(queued) {
+  const groups = [];
+  for (const item of queued) {
+    const lastGroup = groups[groups.length - 1];
+    const last = lastGroup?.[lastGroup.length - 1];
+    if (!lastGroup || !last || !sameTenant(last.tenant, item.tenant)) {
+      groups.push([item]);
+    } else {
+      lastGroup.push(item);
+    }
+  }
+  return groups;
+}
+async function dispatchEventBatch(batch) {
+  for (const item of batch) {
+    await eventBus.dispatch(item.event, item.payload);
+  }
+}
+async function dispatchQueuedModelEvents(queued) {
+  if (queued.length === 0) {
+    return;
+  }
+  await Promise.resolve().then(() => init_tenantDatabaseScope());
+  for (const batch of groupQueuedModelEvents(queued)) {
+    const tenant = batch[0]?.tenant ?? null;
+    if (tenant) {
+      await runWithTenantDatabase(tenant, () => dispatchEventBatch(batch));
+    } else {
+      await dispatchEventBatch(batch);
+    }
+  }
+}
+async function runWithDeferredModelEvents(callback) {
+  const existing = deferredModelEvents.getStore();
+  if (existing) {
+    existing.frames.push([]);
+    try {
+      const result = await callback();
+      const nested = existing.frames.pop() ?? [];
+      const parent = existing.frames[existing.frames.length - 1];
+      if (parent) {
+        parent.push(...nested);
+      }
+      return result;
+    } catch (error) {
+      existing.frames.pop();
+      throw error;
+    }
+  }
+  const state = { frames: [[]] };
+  const result = await deferredModelEvents.run(state, callback);
+  await dispatchQueuedModelEvents(state.frames[0] ?? []);
+  return result;
+}
+var deferredModelEvents;
+var init_deferredModelEvents = __esm(() => {
+  init_asyncContextStore();
+  init_tenantContext();
+  init_eventBus();
+  deferredModelEvents = createAsyncContextStore("@getstrata/deferredModelEvents");
+});
+
 // ../../src/core/audit/exportAuditLogs.ts
 import { repositoryConnection as db } from "@getstrata/core/database/repositoryConnection";
 
@@ -376,54 +611,10 @@ async function safeFetch(input, init = {}, options = {}) {
 }
 
 // ../../src/core/tenant/databaseTenantContext.ts
-import { getDefaultDatabasePool } from "@getstrata/core/database/defaultConnection";
-
-// ../../src/core/runtime/asyncContextStore.ts
-import { AsyncLocalStorage } from "async_hooks";
-function createAsyncContextStore(key) {
-  const symbol = Symbol.for(key);
-  const globalRecord = globalThis;
-  const existing = globalRecord[symbol];
-  if (existing) {
-    return existing;
-  }
-  const store = new AsyncLocalStorage;
-  globalRecord[symbol] = store;
-  return store;
-}
-
-// ../../src/core/database/connectionContext.ts
-var activeConnection = createAsyncContextStore("@getstrata/databaseConnectionContext");
-function runWithDatabaseConnection(connection, callback) {
-  return activeConnection.run(connection, callback);
-}
-function getActiveDatabaseConnection(fallback) {
-  return activeConnection.getStore() ?? fallback;
-}
-function hasActiveDatabaseConnection() {
-  return activeConnection.getStore() !== undefined;
-}
-
-// ../../src/core/tenant/tenancyConfig.ts
-var TENANCY_DRIVERS = ["rls", "column", "none"];
-function readTenancyDriver(env = process.env) {
-  const raw = env.TENANCY_DRIVER?.trim();
-  if (raw === undefined || raw === "") {
-    return "rls";
-  }
-  if (TENANCY_DRIVERS.includes(raw)) {
-    return raw;
-  }
-  throw new Error(`TENANCY_DRIVER must be one of ${TENANCY_DRIVERS.join(", ")}; received "${raw}".`);
-}
-function isTenancyEnabled(env = process.env) {
-  return readTenancyDriver(env) !== "none";
-}
-function isRlsTenancy(env = process.env) {
-  return readTenancyDriver(env) === "rls";
-}
-
-// ../../src/core/tenant/databaseTenantContext.ts
+init_connectionContext();
+init_deferredModelEvents();
+init_tenancyConfig();
+import { getDefaultDatabasePool as getDefaultDatabasePool2 } from "@getstrata/core/database/defaultConnection";
 async function applyBypassToTransaction(transaction, bypass) {
   await transaction.unsafe(`SELECT set_config('app.bypass_rls', $1, true)`, [
     bypass ? "true" : "false"
@@ -456,13 +647,16 @@ async function runWithScopedTenantTransaction(apply, callback) {
   if (!isRlsTenancy()) {
     return await callback();
   }
-  const pool = getDefaultDatabasePool();
-  if (typeof pool.begin !== "function") {
+  const pool = getDefaultDatabasePool2();
+  const begin = pool.begin;
+  if (typeof begin !== "function") {
     throw new Error("RLS migration bypass requires a pool that supports begin(). Session-scoped set_config is not used on pooled connections.");
   }
-  return await pool.begin(async (transaction) => {
-    await apply(transaction);
-    return await runWithDatabaseConnection(transaction, callback);
+  return await runWithDeferredModelEvents(async () => {
+    return await begin(async (transaction) => {
+      await apply(transaction);
+      return await runWithDatabaseConnection(transaction, callback);
+    });
   });
 }
 async function runWithMigrationBypass(callback) {

package/dist/entries/auth/accessControl.js

@@ -1,6 +1,15 @@
 // @bun
-// ../../src/core/auth/accessControl.ts
-import { ForbiddenError } from "@getstrata/core/errors/http";
+var __esm = (fn, res, err) => () => {
+  if (fn)
+    try {
+      res = fn(fn = 0);
+    } catch (e) {
+      err = [e];
+    }
+  if (err)
+    throw err[0];
+  return res;
+};
 
 // ../../src/core/runtime/asyncContextStore.ts
 import { AsyncLocalStorage } from "async_hooks";
@@ -15,8 +24,13 @@ function createAsyncContextStore(key) {
   globalRecord[symbol] = store;
   return store;
 }
+var init_asyncContextStore = () => {};
+
+// ../../src/core/auth/accessControl.ts
+import { ForbiddenError } from "@getstrata/core/errors/http";
 
 // ../../src/core/auth/authContext.ts
+init_asyncContextStore();
 var authContext = createAsyncContextStore("@getstrata/authContext");
 var credentialSourceContext = createAsyncContextStore("@getstrata/credentialSource");
 function currentAuthUser() {

package/dist/entries/auth/basicAuthGuard.js

@@ -1,4 +1,47 @@
 // @bun
+var __esm = (fn, res, err) => () => {
+  if (fn)
+    try {
+      res = fn(fn = 0);
+    } catch (e) {
+      err = [e];
+    }
+  if (err)
+    throw err[0];
+  return res;
+};
+
+// ../../src/core/runtime/asyncContextStore.ts
+import { AsyncLocalStorage } from "async_hooks";
+function createAsyncContextStore(key) {
+  const symbol = Symbol.for(key);
+  const globalRecord = globalThis;
+  const existing = globalRecord[symbol];
+  if (existing) {
+    return existing;
+  }
+  const store = new AsyncLocalStorage;
+  globalRecord[symbol] = store;
+  return store;
+}
+var init_asyncContextStore = () => {};
+
+// ../../src/core/database/connectionContext.ts
+function runWithDatabaseConnection(connection, callback) {
+  return activeConnection.run(connection, callback);
+}
+function getActiveDatabaseConnection(fallback) {
+  return activeConnection.getStore() ?? fallback;
+}
+function hasActiveDatabaseConnection() {
+  return activeConnection.getStore() !== undefined;
+}
+var activeConnection;
+var init_connectionContext = __esm(() => {
+  init_asyncContextStore();
+  activeConnection = createAsyncContextStore("@getstrata/databaseConnectionContext");
+});
+
 // ../../src/core/contracts/serviceTokens.ts
 var CORE_CONFIG_TOKEN = "core.config";
 var CORE_CACHE_TOKEN = "core.cache";
@@ -60,33 +103,8 @@ function getBoundDatabaseConnection() {
   return boundConnectionState().connection;
 }
 
-// ../../src/core/runtime/asyncContextStore.ts
-import { AsyncLocalStorage } from "async_hooks";
-function createAsyncContextStore(key) {
-  const symbol = Symbol.for(key);
-  const globalRecord = globalThis;
-  const existing = globalRecord[symbol];
-  if (existing) {
-    return existing;
-  }
-  const store = new AsyncLocalStorage;
-  globalRecord[symbol] = store;
-  return store;
-}
-
-// ../../src/core/database/connectionContext.ts
-var activeConnection = createAsyncContextStore("@getstrata/databaseConnectionContext");
-function runWithDatabaseConnection(connection, callback) {
-  return activeConnection.run(connection, callback);
-}
-function getActiveDatabaseConnection(fallback) {
-  return activeConnection.getStore() ?? fallback;
-}
-function hasActiveDatabaseConnection() {
-  return activeConnection.getStore() !== undefined;
-}
-
 // ../../src/core/database/queryProxy.ts
+init_connectionContext();
 var POOL_CONNECTION_METHODS = new Set(["begin", "close", "connect"]);
 
 // ../../src/core/database/defaultConnection.ts
@@ -289,6 +307,9 @@ function revealMfaSecret(stored) {
   return decryptField(stored, key);
 }
 
+// ../../src/core/database/dialect.ts
+init_asyncContextStore();
+
 // ../../src/core/database/schema/driver.ts
 function normalizeConnectionName(connection) {
   const normalized = connection.trim().toLowerCase();

package/dist/entries/auth/membershipMiddleware.js

@@ -1,4 +1,16 @@
 // @bun
+var __esm = (fn, res, err) => () => {
+  if (fn)
+    try {
+      res = fn(fn = 0);
+    } catch (e) {
+      err = [e];
+    }
+  if (err)
+    throw err[0];
+  return res;
+};
+
 // ../../src/core/runtime/asyncContextStore.ts
 import { AsyncLocalStorage } from "async_hooks";
 function createAsyncContextStore(key) {
@@ -12,11 +24,16 @@ function createAsyncContextStore(key) {
   globalRecord[symbol] = store;
   return store;
 }
+var init_asyncContextStore = () => {};
+
+// ../../src/core/auth/membershipContext.ts
+init_asyncContextStore();
 
 // ../../src/core/auth/accessControl.ts
 import { ForbiddenError } from "@getstrata/core/errors/http";
 
 // ../../src/core/auth/authContext.ts
+init_asyncContextStore();
 var authContext = createAsyncContextStore("@getstrata/authContext");
 var credentialSourceContext = createAsyncContextStore("@getstrata/credentialSource");
 function currentAuthUser() {

package/dist/entries/auth/membershipScope.js

@@ -1,10 +1,15 @@
 // @bun
-// ../../src/core/auth/membershipScope.ts
-import { NotFoundError } from "@getstrata/core/errors/http";
-import { currentTenantId } from "@getstrata/core/tenant/tenantContext";
-
-// ../../src/core/auth/accessControl.ts
-import { ForbiddenError } from "@getstrata/core/errors/http";
+var __esm = (fn, res, err) => () => {
+  if (fn)
+    try {
+      res = fn(fn = 0);
+    } catch (e) {
+      err = [e];
+    }
+  if (err)
+    throw err[0];
+  return res;
+};
 
 // ../../src/core/runtime/asyncContextStore.ts
 import { AsyncLocalStorage } from "async_hooks";
@@ -19,8 +24,17 @@ function createAsyncContextStore(key) {
   globalRecord[symbol] = store;
   return store;
 }
+var init_asyncContextStore = () => {};
+
+// ../../src/core/auth/membershipScope.ts
+import { NotFoundError } from "@getstrata/core/errors/http";
+import { currentTenantId } from "@getstrata/core/tenant/tenantContext";
+
+// ../../src/core/auth/accessControl.ts
+import { ForbiddenError } from "@getstrata/core/errors/http";
 
 // ../../src/core/auth/authContext.ts
+init_asyncContextStore();
 var authContext = createAsyncContextStore("@getstrata/authContext");
 var credentialSourceContext = createAsyncContextStore("@getstrata/credentialSource");
 function currentAuthUser() {
@@ -58,6 +72,7 @@ function resolveUserId(user) {
 }
 
 // ../../src/core/auth/membershipContext.ts
+init_asyncContextStore();
 var membershipContext = createAsyncContextStore("@getstrata/membershipContext");
 var uninitializedMembershipLookup = {
   async listForUser() {

package/dist/entries/auth/membershipService.js

@@ -1,9 +1,15 @@
 // @bun
-// ../../src/core/auth/membershipService.ts
-import { ForbiddenError as ForbiddenError2 } from "@getstrata/core/errors/http";
-
-// ../../src/core/auth/accessControl.ts
-import { ForbiddenError } from "@getstrata/core/errors/http";
+var __esm = (fn, res, err) => () => {
+  if (fn)
+    try {
+      res = fn(fn = 0);
+    } catch (e) {
+      err = [e];
+    }
+  if (err)
+    throw err[0];
+  return res;
+};
 
 // ../../src/core/runtime/asyncContextStore.ts
 import { AsyncLocalStorage } from "async_hooks";
@@ -18,8 +24,16 @@ function createAsyncContextStore(key) {
   globalRecord[symbol] = store;
   return store;
 }
+var init_asyncContextStore = () => {};
+
+// ../../src/core/auth/membershipService.ts
+import { ForbiddenError as ForbiddenError2 } from "@getstrata/core/errors/http";
+
+// ../../src/core/auth/accessControl.ts
+import { ForbiddenError } from "@getstrata/core/errors/http";
 
 // ../../src/core/auth/authContext.ts
+init_asyncContextStore();
 var authContext = createAsyncContextStore("@getstrata/authContext");
 var credentialSourceContext = createAsyncContextStore("@getstrata/credentialSource");
 function currentAuthUser() {
@@ -57,6 +71,7 @@ function resolveUserId(user) {
 }
 
 // ../../src/core/auth/membershipContext.ts
+init_asyncContextStore();
 var membershipContext = createAsyncContextStore("@getstrata/membershipContext");
 var uninitializedMembershipLookup = {
   async listForUser() {

package/dist/entries/auth/oauth/samlProvider.js

@@ -1,4 +1,47 @@
 // @bun
+var __esm = (fn, res, err) => () => {
+  if (fn)
+    try {
+      res = fn(fn = 0);
+    } catch (e) {
+      err = [e];
+    }
+  if (err)
+    throw err[0];
+  return res;
+};
+
+// ../../src/core/runtime/asyncContextStore.ts
+import { AsyncLocalStorage } from "async_hooks";
+function createAsyncContextStore(key) {
+  const symbol = Symbol.for(key);
+  const globalRecord = globalThis;
+  const existing = globalRecord[symbol];
+  if (existing) {
+    return existing;
+  }
+  const store = new AsyncLocalStorage;
+  globalRecord[symbol] = store;
+  return store;
+}
+var init_asyncContextStore = () => {};
+
+// ../../src/core/database/connectionContext.ts
+function runWithDatabaseConnection(connection, callback) {
+  return activeConnection.run(connection, callback);
+}
+function getActiveDatabaseConnection(fallback) {
+  return activeConnection.getStore() ?? fallback;
+}
+function hasActiveDatabaseConnection() {
+  return activeConnection.getStore() !== undefined;
+}
+var activeConnection;
+var init_connectionContext = __esm(() => {
+  init_asyncContextStore();
+  activeConnection = createAsyncContextStore("@getstrata/databaseConnectionContext");
+});
+
 // ../../src/core/runtime/optionalPeer.ts
 function missingOptionalPeer(packageName, reason, error) {
   return new Error(`Install ${packageName} ${reason} (\`bun add ${packageName}\`).`, {
@@ -33,33 +76,8 @@ function getBoundDatabaseConnection() {
   return boundConnectionState().connection;
 }
 
-// ../../src/core/runtime/asyncContextStore.ts
-import { AsyncLocalStorage } from "async_hooks";
-function createAsyncContextStore(key) {
-  const symbol = Symbol.for(key);
-  const globalRecord = globalThis;
-  const existing = globalRecord[symbol];
-  if (existing) {
-    return existing;
-  }
-  const store = new AsyncLocalStorage;
-  globalRecord[symbol] = store;
-  return store;
-}
-
-// ../../src/core/database/connectionContext.ts
-var activeConnection = createAsyncContextStore("@getstrata/databaseConnectionContext");
-function runWithDatabaseConnection(connection, callback) {
-  return activeConnection.run(connection, callback);
-}
-function getActiveDatabaseConnection(fallback) {
-  return activeConnection.getStore() ?? fallback;
-}
-function hasActiveDatabaseConnection() {
-  return activeConnection.getStore() !== undefined;
-}
-
 // ../../src/core/database/queryProxy.ts
+init_connectionContext();
 var POOL_CONNECTION_METHODS = new Set(["begin", "close", "connect"]);
 
 // ../../src/core/database/defaultConnection.ts
@@ -82,6 +100,9 @@ function getDefaultDatabasePool() {
   return pool;
 }
 
+// ../../src/core/database/dialect.ts
+init_asyncContextStore();
+
 // ../../src/core/database/schema/driver.ts
 function normalizeConnectionName(connection) {
   const normalized = connection.trim().toLowerCase();