@getstrata/core 1.1.9 → 2.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (36) hide show
  1. package/CHANGELOG.md +15 -0
  2. package/dist/core/database/transaction.d.ts +2 -1
  3. package/dist/core/database/transactionControl.d.ts +5 -0
  4. package/dist/core/http/loginThrottleMiddleware.d.ts +3 -0
  5. package/dist/core/http/metricsMiddleware.d.ts +1 -2
  6. package/dist/core/http/requestMetaContext.d.ts +2 -0
  7. package/dist/core/http/throttleMiddleware.d.ts +11 -2
  8. package/dist/core/metrics/prometheus.d.ts +11 -1
  9. package/dist/core/queue/jobRunner.d.ts +3 -1
  10. package/dist/core/queue/redisQueue.d.ts +20 -3
  11. package/dist/core/tenant/databaseTenantContext.d.ts +5 -1
  12. package/dist/entries/audit/exportAuditLogs.js +522 -62
  13. package/dist/entries/auth/basicAuthGuard.js +245 -219
  14. package/dist/entries/auth/oauth/samlProvider.js +185 -161
  15. package/dist/entries/auth/oneTimeToken.js +130 -127
  16. package/dist/entries/auth/passwordLogin.js +185 -180
  17. package/dist/entries/auth/saml/samlServiceProvider.js +185 -161
  18. package/dist/entries/auth/scimAuthMiddleware.js +525 -11
  19. package/dist/entries/database/migrations.js +132 -129
  20. package/dist/entries/database/schema.js +58 -39
  21. package/dist/entries/http/metricsMiddleware.js +124 -27
  22. package/dist/entries/http/response.js +107 -0
  23. package/dist/entries/http/routeMiddleware.js +40 -0
  24. package/dist/entries/http/throttleMiddleware.js +124 -11
  25. package/dist/entries/jobs/exportAuditLogsJob.js +522 -62
  26. package/dist/entries/metrics/prometheus.js +71 -11
  27. package/dist/entries/queue/createAppQueue.js +215 -21
  28. package/dist/entries/queue/jobRunner.js +3 -2
  29. package/dist/entries/queue/publicQueue.js +215 -21
  30. package/dist/entries/queue/queueMetrics.js +215 -21
  31. package/dist/entries/queue/redisQueue.js +223 -22
  32. package/dist/entries/tenant/databaseTenantContext.js +477 -16
  33. package/dist/entries/tenant/tenantDatabaseScope.js +523 -9
  34. package/dist/framework/public-api.d.ts +2 -2
  35. package/dist/index.js +954 -457
  36. package/package.json +1 -1
@@ -26,6 +26,189 @@ function createAsyncContextStore(key) {
26
26
  }
27
27
  var init_asyncContextStore = () => {};
28
28
 
29
+ // ../../src/core/database/schema/driver.ts
30
+ function normalizeConnectionName(connection) {
31
+ const normalized = connection.trim().toLowerCase();
32
+ if (normalized === "pgsql" || normalized === "postgres" || normalized === "postgresql") {
33
+ return "pgsql";
34
+ }
35
+ if (normalized === "mysql" || normalized === "mariadb") {
36
+ return "mysql";
37
+ }
38
+ if (normalized === "sqlite") {
39
+ return "sqlite";
40
+ }
41
+ throw new Error(`Unsupported DB_CONNECTION: ${connection}`);
42
+ }
43
+ function resolveDriverFromUrl(url) {
44
+ const normalized = url.trim().toLowerCase();
45
+ if (normalized.startsWith("postgres://") || normalized.startsWith("postgresql://") || normalized.startsWith("postgres:")) {
46
+ return "pgsql";
47
+ }
48
+ if (normalized.startsWith("mysql://") || normalized.startsWith("mysql:")) {
49
+ return "mysql";
50
+ }
51
+ if (normalized.startsWith("sqlite:")) {
52
+ return "sqlite";
53
+ }
54
+ return null;
55
+ }
56
+ function resolveDatabaseDriver(options = {}) {
57
+ const connection = options.connection ?? process.env.DB_CONNECTION;
58
+ if (connection) {
59
+ return normalizeConnectionName(connection);
60
+ }
61
+ const url = options.url ?? process.env.DATABASE_URL ?? "";
62
+ const fromUrl = resolveDriverFromUrl(url);
63
+ if (fromUrl) {
64
+ return fromUrl;
65
+ }
66
+ return "pgsql";
67
+ }
68
+ var init_driver = () => {};
69
+
70
+ // ../../src/core/database/dialect.ts
71
+ function assertSafeIdentifier(identifier) {
72
+ if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(identifier)) {
73
+ throw new Error(`Invalid SQL identifier: ${identifier}`);
74
+ }
75
+ return identifier;
76
+ }
77
+ function quoteIdentifierFor(dialect, column) {
78
+ return dialect.quoteIdentifier(column);
79
+ }
80
+ function dialectFor(driver) {
81
+ return dialects[driver];
82
+ }
83
+ function currentSqlDialect() {
84
+ return dialectContext.getStore() ?? dialectOverride ?? dialectFor(resolveDatabaseDriver());
85
+ }
86
+ var postgresDialect, mysqlDialect, sqliteDialect, dialects, dialectContext, dialectOverride = null;
87
+ var init_dialect = __esm(() => {
88
+ init_asyncContextStore();
89
+ init_driver();
90
+ postgresDialect = {
91
+ driver: "pgsql",
92
+ placeholder(index) {
93
+ return `$${index}`;
94
+ },
95
+ quoteIdentifier(identifier) {
96
+ return `"${assertSafeIdentifier(identifier)}"`;
97
+ },
98
+ nowExpression() {
99
+ return "NOW()";
100
+ },
101
+ timestampValue(value) {
102
+ return value.toISOString();
103
+ },
104
+ returningClause(columns) {
105
+ return ` RETURNING ${columns}`;
106
+ },
107
+ ilikeOperator() {
108
+ return "ILIKE";
109
+ },
110
+ nullsLastSuffix() {
111
+ return " NULLS LAST";
112
+ },
113
+ castToText(expression) {
114
+ return `${expression}::text`;
115
+ },
116
+ upsertSuffix(conflictColumns, updateColumns) {
117
+ const target = conflictColumns.map((column) => quoteIdentifierFor(this, column)).join(", ");
118
+ if (updateColumns.length === 0) {
119
+ return ` ON CONFLICT (${target}) DO NOTHING`;
120
+ }
121
+ const assignments = updateColumns.map((column) => {
122
+ const quoted = quoteIdentifierFor(this, column);
123
+ return `${quoted} = excluded.${quoted}`;
124
+ }).join(", ");
125
+ return ` ON CONFLICT (${target}) DO UPDATE SET ${assignments}`;
126
+ }
127
+ };
128
+ mysqlDialect = {
129
+ driver: "mysql",
130
+ placeholder() {
131
+ return "?";
132
+ },
133
+ quoteIdentifier(identifier) {
134
+ return `\`${assertSafeIdentifier(identifier)}\``;
135
+ },
136
+ nowExpression() {
137
+ return "CURRENT_TIMESTAMP";
138
+ },
139
+ timestampValue(value) {
140
+ return value.toISOString().slice(0, 19).replace("T", " ");
141
+ },
142
+ returningClause() {
143
+ return "";
144
+ },
145
+ ilikeOperator() {
146
+ return "LIKE";
147
+ },
148
+ nullsLastSuffix() {
149
+ return "";
150
+ },
151
+ castToText(expression) {
152
+ return `CAST(${expression} AS CHAR)`;
153
+ },
154
+ upsertSuffix(conflictColumns, updateColumns) {
155
+ if (updateColumns.length === 0) {
156
+ const anchor = quoteIdentifierFor(this, conflictColumns[0] ?? "");
157
+ return ` ON DUPLICATE KEY UPDATE ${anchor} = ${anchor}`;
158
+ }
159
+ const assignments = updateColumns.map((column) => {
160
+ const quoted = quoteIdentifierFor(this, column);
161
+ return `${quoted} = VALUES(${quoted})`;
162
+ }).join(", ");
163
+ return ` ON DUPLICATE KEY UPDATE ${assignments}`;
164
+ }
165
+ };
166
+ sqliteDialect = {
167
+ driver: "sqlite",
168
+ placeholder() {
169
+ return "?";
170
+ },
171
+ quoteIdentifier(identifier) {
172
+ return `"${assertSafeIdentifier(identifier)}"`;
173
+ },
174
+ nowExpression() {
175
+ return "strftime('%Y-%m-%dT%H:%M:%fZ', 'now')";
176
+ },
177
+ timestampValue(value) {
178
+ return value.toISOString();
179
+ },
180
+ returningClause(columns) {
181
+ return ` RETURNING ${columns}`;
182
+ },
183
+ ilikeOperator() {
184
+ return "LIKE";
185
+ },
186
+ nullsLastSuffix() {
187
+ return "";
188
+ },
189
+ castToText(expression) {
190
+ return `CAST(${expression} AS TEXT)`;
191
+ },
192
+ upsertSuffix(conflictColumns, updateColumns) {
193
+ const target = conflictColumns.map((column) => quoteIdentifierFor(this, column)).join(", ");
194
+ if (updateColumns.length === 0) {
195
+ return ` ON CONFLICT (${target}) DO NOTHING`;
196
+ }
197
+ const assignments = updateColumns.map((column) => {
198
+ const quoted = quoteIdentifierFor(this, column);
199
+ return `${quoted} = excluded.${quoted}`;
200
+ }).join(", ");
201
+ return ` ON CONFLICT (${target}) DO UPDATE SET ${assignments}`;
202
+ }
203
+ };
204
+ dialects = {
205
+ pgsql: postgresDialect,
206
+ mysql: mysqlDialect,
207
+ sqlite: sqliteDialect
208
+ };
209
+ dialectContext = createAsyncContextStore("@getstrata/sqlDialect");
210
+ });
211
+
29
212
  // ../../src/core/runtime/appEnv.ts
30
213
  var NON_PRODUCTION_APP_ENVS = new Set(["local", "development", "dev", "test", "testing", "ci"]);
31
214
  function normalizeEnvValue(value) {
@@ -153,186 +336,8 @@ function revealMfaSecret(stored) {
153
336
  return decryptField(stored, key);
154
337
  }
155
338
 
156
- // ../../src/core/database/dialect.ts
157
- init_asyncContextStore();
158
-
159
- // ../../src/core/database/schema/driver.ts
160
- function normalizeConnectionName(connection) {
161
- const normalized = connection.trim().toLowerCase();
162
- if (normalized === "pgsql" || normalized === "postgres" || normalized === "postgresql") {
163
- return "pgsql";
164
- }
165
- if (normalized === "mysql" || normalized === "mariadb") {
166
- return "mysql";
167
- }
168
- if (normalized === "sqlite") {
169
- return "sqlite";
170
- }
171
- throw new Error(`Unsupported DB_CONNECTION: ${connection}`);
172
- }
173
- function resolveDriverFromUrl(url) {
174
- const normalized = url.trim().toLowerCase();
175
- if (normalized.startsWith("postgres://") || normalized.startsWith("postgresql://") || normalized.startsWith("postgres:")) {
176
- return "pgsql";
177
- }
178
- if (normalized.startsWith("mysql://") || normalized.startsWith("mysql:")) {
179
- return "mysql";
180
- }
181
- if (normalized.startsWith("sqlite:")) {
182
- return "sqlite";
183
- }
184
- return null;
185
- }
186
- function resolveDatabaseDriver(options = {}) {
187
- const connection = options.connection ?? process.env.DB_CONNECTION;
188
- if (connection) {
189
- return normalizeConnectionName(connection);
190
- }
191
- const url = options.url ?? process.env.DATABASE_URL ?? "";
192
- const fromUrl = resolveDriverFromUrl(url);
193
- if (fromUrl) {
194
- return fromUrl;
195
- }
196
- return "pgsql";
197
- }
198
-
199
- // ../../src/core/database/dialect.ts
200
- function assertSafeIdentifier(identifier) {
201
- if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(identifier)) {
202
- throw new Error(`Invalid SQL identifier: ${identifier}`);
203
- }
204
- return identifier;
205
- }
206
- function quoteIdentifierFor(dialect, column) {
207
- return dialect.quoteIdentifier(column);
208
- }
209
- var postgresDialect = {
210
- driver: "pgsql",
211
- placeholder(index) {
212
- return `$${index}`;
213
- },
214
- quoteIdentifier(identifier) {
215
- return `"${assertSafeIdentifier(identifier)}"`;
216
- },
217
- nowExpression() {
218
- return "NOW()";
219
- },
220
- timestampValue(value) {
221
- return value.toISOString();
222
- },
223
- returningClause(columns) {
224
- return ` RETURNING ${columns}`;
225
- },
226
- ilikeOperator() {
227
- return "ILIKE";
228
- },
229
- nullsLastSuffix() {
230
- return " NULLS LAST";
231
- },
232
- castToText(expression) {
233
- return `${expression}::text`;
234
- },
235
- upsertSuffix(conflictColumns, updateColumns) {
236
- const target = conflictColumns.map((column) => quoteIdentifierFor(this, column)).join(", ");
237
- if (updateColumns.length === 0) {
238
- return ` ON CONFLICT (${target}) DO NOTHING`;
239
- }
240
- const assignments = updateColumns.map((column) => {
241
- const quoted = quoteIdentifierFor(this, column);
242
- return `${quoted} = excluded.${quoted}`;
243
- }).join(", ");
244
- return ` ON CONFLICT (${target}) DO UPDATE SET ${assignments}`;
245
- }
246
- };
247
- var mysqlDialect = {
248
- driver: "mysql",
249
- placeholder() {
250
- return "?";
251
- },
252
- quoteIdentifier(identifier) {
253
- return `\`${assertSafeIdentifier(identifier)}\``;
254
- },
255
- nowExpression() {
256
- return "CURRENT_TIMESTAMP";
257
- },
258
- timestampValue(value) {
259
- return value.toISOString().slice(0, 19).replace("T", " ");
260
- },
261
- returningClause() {
262
- return "";
263
- },
264
- ilikeOperator() {
265
- return "LIKE";
266
- },
267
- nullsLastSuffix() {
268
- return "";
269
- },
270
- castToText(expression) {
271
- return `CAST(${expression} AS CHAR)`;
272
- },
273
- upsertSuffix(conflictColumns, updateColumns) {
274
- if (updateColumns.length === 0) {
275
- const anchor = quoteIdentifierFor(this, conflictColumns[0] ?? "");
276
- return ` ON DUPLICATE KEY UPDATE ${anchor} = ${anchor}`;
277
- }
278
- const assignments = updateColumns.map((column) => {
279
- const quoted = quoteIdentifierFor(this, column);
280
- return `${quoted} = VALUES(${quoted})`;
281
- }).join(", ");
282
- return ` ON DUPLICATE KEY UPDATE ${assignments}`;
283
- }
284
- };
285
- var sqliteDialect = {
286
- driver: "sqlite",
287
- placeholder() {
288
- return "?";
289
- },
290
- quoteIdentifier(identifier) {
291
- return `"${assertSafeIdentifier(identifier)}"`;
292
- },
293
- nowExpression() {
294
- return "strftime('%Y-%m-%dT%H:%M:%fZ', 'now')";
295
- },
296
- timestampValue(value) {
297
- return value.toISOString();
298
- },
299
- returningClause(columns) {
300
- return ` RETURNING ${columns}`;
301
- },
302
- ilikeOperator() {
303
- return "LIKE";
304
- },
305
- nullsLastSuffix() {
306
- return "";
307
- },
308
- castToText(expression) {
309
- return `CAST(${expression} AS TEXT)`;
310
- },
311
- upsertSuffix(conflictColumns, updateColumns) {
312
- const target = conflictColumns.map((column) => quoteIdentifierFor(this, column)).join(", ");
313
- if (updateColumns.length === 0) {
314
- return ` ON CONFLICT (${target}) DO NOTHING`;
315
- }
316
- const assignments = updateColumns.map((column) => {
317
- const quoted = quoteIdentifierFor(this, column);
318
- return `${quoted} = excluded.${quoted}`;
319
- }).join(", ");
320
- return ` ON CONFLICT (${target}) DO UPDATE SET ${assignments}`;
321
- }
322
- };
323
- var dialects = {
324
- pgsql: postgresDialect,
325
- mysql: mysqlDialect,
326
- sqlite: sqliteDialect
327
- };
328
- var dialectContext = createAsyncContextStore("@getstrata/sqlDialect");
329
- var dialectOverride = null;
330
- function dialectFor(driver) {
331
- return dialects[driver];
332
- }
333
- function currentSqlDialect() {
334
- return dialectContext.getStore() ?? dialectOverride ?? dialectFor(resolveDatabaseDriver());
335
- }
339
+ // ../../src/core/auth/passwordLogin.ts
340
+ init_dialect();
336
341
 
337
342
  // ../../src/core/security/recoveryCodes.ts
338
343
  import { randomBytes as randomBytes2 } from "crypto";