@getstrata/core 1.1.9 → 2.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +15 -0
- package/dist/core/database/transaction.d.ts +2 -1
- package/dist/core/database/transactionControl.d.ts +5 -0
- package/dist/core/http/loginThrottleMiddleware.d.ts +3 -0
- package/dist/core/http/metricsMiddleware.d.ts +1 -2
- package/dist/core/http/requestMetaContext.d.ts +2 -0
- package/dist/core/http/throttleMiddleware.d.ts +11 -2
- package/dist/core/metrics/prometheus.d.ts +11 -1
- package/dist/core/queue/jobRunner.d.ts +3 -1
- package/dist/core/queue/redisQueue.d.ts +20 -3
- package/dist/core/tenant/databaseTenantContext.d.ts +5 -1
- package/dist/entries/audit/exportAuditLogs.js +522 -62
- package/dist/entries/auth/basicAuthGuard.js +245 -219
- package/dist/entries/auth/oauth/samlProvider.js +185 -161
- package/dist/entries/auth/oneTimeToken.js +130 -127
- package/dist/entries/auth/passwordLogin.js +185 -180
- package/dist/entries/auth/saml/samlServiceProvider.js +185 -161
- package/dist/entries/auth/scimAuthMiddleware.js +525 -11
- package/dist/entries/database/migrations.js +132 -129
- package/dist/entries/database/schema.js +58 -39
- package/dist/entries/http/metricsMiddleware.js +124 -27
- package/dist/entries/http/response.js +107 -0
- package/dist/entries/http/routeMiddleware.js +40 -0
- package/dist/entries/http/throttleMiddleware.js +124 -11
- package/dist/entries/jobs/exportAuditLogsJob.js +522 -62
- package/dist/entries/metrics/prometheus.js +71 -11
- package/dist/entries/queue/createAppQueue.js +215 -21
- package/dist/entries/queue/jobRunner.js +3 -2
- package/dist/entries/queue/publicQueue.js +215 -21
- package/dist/entries/queue/queueMetrics.js +215 -21
- package/dist/entries/queue/redisQueue.js +223 -22
- package/dist/entries/tenant/databaseTenantContext.js +477 -16
- package/dist/entries/tenant/tenantDatabaseScope.js +523 -9
- package/dist/framework/public-api.d.ts +2 -2
- package/dist/index.js +954 -457
- package/package.json +1 -1
|
@@ -26,6 +26,189 @@ function createAsyncContextStore(key) {
|
|
|
26
26
|
}
|
|
27
27
|
var init_asyncContextStore = () => {};
|
|
28
28
|
|
|
29
|
+
// ../../src/core/database/schema/driver.ts
|
|
30
|
+
function normalizeConnectionName(connection) {
|
|
31
|
+
const normalized = connection.trim().toLowerCase();
|
|
32
|
+
if (normalized === "pgsql" || normalized === "postgres" || normalized === "postgresql") {
|
|
33
|
+
return "pgsql";
|
|
34
|
+
}
|
|
35
|
+
if (normalized === "mysql" || normalized === "mariadb") {
|
|
36
|
+
return "mysql";
|
|
37
|
+
}
|
|
38
|
+
if (normalized === "sqlite") {
|
|
39
|
+
return "sqlite";
|
|
40
|
+
}
|
|
41
|
+
throw new Error(`Unsupported DB_CONNECTION: ${connection}`);
|
|
42
|
+
}
|
|
43
|
+
function resolveDriverFromUrl(url) {
|
|
44
|
+
const normalized = url.trim().toLowerCase();
|
|
45
|
+
if (normalized.startsWith("postgres://") || normalized.startsWith("postgresql://") || normalized.startsWith("postgres:")) {
|
|
46
|
+
return "pgsql";
|
|
47
|
+
}
|
|
48
|
+
if (normalized.startsWith("mysql://") || normalized.startsWith("mysql:")) {
|
|
49
|
+
return "mysql";
|
|
50
|
+
}
|
|
51
|
+
if (normalized.startsWith("sqlite:")) {
|
|
52
|
+
return "sqlite";
|
|
53
|
+
}
|
|
54
|
+
return null;
|
|
55
|
+
}
|
|
56
|
+
function resolveDatabaseDriver(options = {}) {
|
|
57
|
+
const connection = options.connection ?? process.env.DB_CONNECTION;
|
|
58
|
+
if (connection) {
|
|
59
|
+
return normalizeConnectionName(connection);
|
|
60
|
+
}
|
|
61
|
+
const url = options.url ?? process.env.DATABASE_URL ?? "";
|
|
62
|
+
const fromUrl = resolveDriverFromUrl(url);
|
|
63
|
+
if (fromUrl) {
|
|
64
|
+
return fromUrl;
|
|
65
|
+
}
|
|
66
|
+
return "pgsql";
|
|
67
|
+
}
|
|
68
|
+
var init_driver = () => {};
|
|
69
|
+
|
|
70
|
+
// ../../src/core/database/dialect.ts
|
|
71
|
+
function assertSafeIdentifier(identifier) {
|
|
72
|
+
if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(identifier)) {
|
|
73
|
+
throw new Error(`Invalid SQL identifier: ${identifier}`);
|
|
74
|
+
}
|
|
75
|
+
return identifier;
|
|
76
|
+
}
|
|
77
|
+
function quoteIdentifierFor(dialect, column) {
|
|
78
|
+
return dialect.quoteIdentifier(column);
|
|
79
|
+
}
|
|
80
|
+
function dialectFor(driver) {
|
|
81
|
+
return dialects[driver];
|
|
82
|
+
}
|
|
83
|
+
function currentSqlDialect() {
|
|
84
|
+
return dialectContext.getStore() ?? dialectOverride ?? dialectFor(resolveDatabaseDriver());
|
|
85
|
+
}
|
|
86
|
+
var postgresDialect, mysqlDialect, sqliteDialect, dialects, dialectContext, dialectOverride = null;
|
|
87
|
+
var init_dialect = __esm(() => {
|
|
88
|
+
init_asyncContextStore();
|
|
89
|
+
init_driver();
|
|
90
|
+
postgresDialect = {
|
|
91
|
+
driver: "pgsql",
|
|
92
|
+
placeholder(index) {
|
|
93
|
+
return `$${index}`;
|
|
94
|
+
},
|
|
95
|
+
quoteIdentifier(identifier) {
|
|
96
|
+
return `"${assertSafeIdentifier(identifier)}"`;
|
|
97
|
+
},
|
|
98
|
+
nowExpression() {
|
|
99
|
+
return "NOW()";
|
|
100
|
+
},
|
|
101
|
+
timestampValue(value) {
|
|
102
|
+
return value.toISOString();
|
|
103
|
+
},
|
|
104
|
+
returningClause(columns) {
|
|
105
|
+
return ` RETURNING ${columns}`;
|
|
106
|
+
},
|
|
107
|
+
ilikeOperator() {
|
|
108
|
+
return "ILIKE";
|
|
109
|
+
},
|
|
110
|
+
nullsLastSuffix() {
|
|
111
|
+
return " NULLS LAST";
|
|
112
|
+
},
|
|
113
|
+
castToText(expression) {
|
|
114
|
+
return `${expression}::text`;
|
|
115
|
+
},
|
|
116
|
+
upsertSuffix(conflictColumns, updateColumns) {
|
|
117
|
+
const target = conflictColumns.map((column) => quoteIdentifierFor(this, column)).join(", ");
|
|
118
|
+
if (updateColumns.length === 0) {
|
|
119
|
+
return ` ON CONFLICT (${target}) DO NOTHING`;
|
|
120
|
+
}
|
|
121
|
+
const assignments = updateColumns.map((column) => {
|
|
122
|
+
const quoted = quoteIdentifierFor(this, column);
|
|
123
|
+
return `${quoted} = excluded.${quoted}`;
|
|
124
|
+
}).join(", ");
|
|
125
|
+
return ` ON CONFLICT (${target}) DO UPDATE SET ${assignments}`;
|
|
126
|
+
}
|
|
127
|
+
};
|
|
128
|
+
mysqlDialect = {
|
|
129
|
+
driver: "mysql",
|
|
130
|
+
placeholder() {
|
|
131
|
+
return "?";
|
|
132
|
+
},
|
|
133
|
+
quoteIdentifier(identifier) {
|
|
134
|
+
return `\`${assertSafeIdentifier(identifier)}\``;
|
|
135
|
+
},
|
|
136
|
+
nowExpression() {
|
|
137
|
+
return "CURRENT_TIMESTAMP";
|
|
138
|
+
},
|
|
139
|
+
timestampValue(value) {
|
|
140
|
+
return value.toISOString().slice(0, 19).replace("T", " ");
|
|
141
|
+
},
|
|
142
|
+
returningClause() {
|
|
143
|
+
return "";
|
|
144
|
+
},
|
|
145
|
+
ilikeOperator() {
|
|
146
|
+
return "LIKE";
|
|
147
|
+
},
|
|
148
|
+
nullsLastSuffix() {
|
|
149
|
+
return "";
|
|
150
|
+
},
|
|
151
|
+
castToText(expression) {
|
|
152
|
+
return `CAST(${expression} AS CHAR)`;
|
|
153
|
+
},
|
|
154
|
+
upsertSuffix(conflictColumns, updateColumns) {
|
|
155
|
+
if (updateColumns.length === 0) {
|
|
156
|
+
const anchor = quoteIdentifierFor(this, conflictColumns[0] ?? "");
|
|
157
|
+
return ` ON DUPLICATE KEY UPDATE ${anchor} = ${anchor}`;
|
|
158
|
+
}
|
|
159
|
+
const assignments = updateColumns.map((column) => {
|
|
160
|
+
const quoted = quoteIdentifierFor(this, column);
|
|
161
|
+
return `${quoted} = VALUES(${quoted})`;
|
|
162
|
+
}).join(", ");
|
|
163
|
+
return ` ON DUPLICATE KEY UPDATE ${assignments}`;
|
|
164
|
+
}
|
|
165
|
+
};
|
|
166
|
+
sqliteDialect = {
|
|
167
|
+
driver: "sqlite",
|
|
168
|
+
placeholder() {
|
|
169
|
+
return "?";
|
|
170
|
+
},
|
|
171
|
+
quoteIdentifier(identifier) {
|
|
172
|
+
return `"${assertSafeIdentifier(identifier)}"`;
|
|
173
|
+
},
|
|
174
|
+
nowExpression() {
|
|
175
|
+
return "strftime('%Y-%m-%dT%H:%M:%fZ', 'now')";
|
|
176
|
+
},
|
|
177
|
+
timestampValue(value) {
|
|
178
|
+
return value.toISOString();
|
|
179
|
+
},
|
|
180
|
+
returningClause(columns) {
|
|
181
|
+
return ` RETURNING ${columns}`;
|
|
182
|
+
},
|
|
183
|
+
ilikeOperator() {
|
|
184
|
+
return "LIKE";
|
|
185
|
+
},
|
|
186
|
+
nullsLastSuffix() {
|
|
187
|
+
return "";
|
|
188
|
+
},
|
|
189
|
+
castToText(expression) {
|
|
190
|
+
return `CAST(${expression} AS TEXT)`;
|
|
191
|
+
},
|
|
192
|
+
upsertSuffix(conflictColumns, updateColumns) {
|
|
193
|
+
const target = conflictColumns.map((column) => quoteIdentifierFor(this, column)).join(", ");
|
|
194
|
+
if (updateColumns.length === 0) {
|
|
195
|
+
return ` ON CONFLICT (${target}) DO NOTHING`;
|
|
196
|
+
}
|
|
197
|
+
const assignments = updateColumns.map((column) => {
|
|
198
|
+
const quoted = quoteIdentifierFor(this, column);
|
|
199
|
+
return `${quoted} = excluded.${quoted}`;
|
|
200
|
+
}).join(", ");
|
|
201
|
+
return ` ON CONFLICT (${target}) DO UPDATE SET ${assignments}`;
|
|
202
|
+
}
|
|
203
|
+
};
|
|
204
|
+
dialects = {
|
|
205
|
+
pgsql: postgresDialect,
|
|
206
|
+
mysql: mysqlDialect,
|
|
207
|
+
sqlite: sqliteDialect
|
|
208
|
+
};
|
|
209
|
+
dialectContext = createAsyncContextStore("@getstrata/sqlDialect");
|
|
210
|
+
});
|
|
211
|
+
|
|
29
212
|
// ../../src/core/runtime/appEnv.ts
|
|
30
213
|
var NON_PRODUCTION_APP_ENVS = new Set(["local", "development", "dev", "test", "testing", "ci"]);
|
|
31
214
|
function normalizeEnvValue(value) {
|
|
@@ -153,186 +336,8 @@ function revealMfaSecret(stored) {
|
|
|
153
336
|
return decryptField(stored, key);
|
|
154
337
|
}
|
|
155
338
|
|
|
156
|
-
// ../../src/core/
|
|
157
|
-
|
|
158
|
-
|
|
159
|
-
// ../../src/core/database/schema/driver.ts
|
|
160
|
-
function normalizeConnectionName(connection) {
|
|
161
|
-
const normalized = connection.trim().toLowerCase();
|
|
162
|
-
if (normalized === "pgsql" || normalized === "postgres" || normalized === "postgresql") {
|
|
163
|
-
return "pgsql";
|
|
164
|
-
}
|
|
165
|
-
if (normalized === "mysql" || normalized === "mariadb") {
|
|
166
|
-
return "mysql";
|
|
167
|
-
}
|
|
168
|
-
if (normalized === "sqlite") {
|
|
169
|
-
return "sqlite";
|
|
170
|
-
}
|
|
171
|
-
throw new Error(`Unsupported DB_CONNECTION: ${connection}`);
|
|
172
|
-
}
|
|
173
|
-
function resolveDriverFromUrl(url) {
|
|
174
|
-
const normalized = url.trim().toLowerCase();
|
|
175
|
-
if (normalized.startsWith("postgres://") || normalized.startsWith("postgresql://") || normalized.startsWith("postgres:")) {
|
|
176
|
-
return "pgsql";
|
|
177
|
-
}
|
|
178
|
-
if (normalized.startsWith("mysql://") || normalized.startsWith("mysql:")) {
|
|
179
|
-
return "mysql";
|
|
180
|
-
}
|
|
181
|
-
if (normalized.startsWith("sqlite:")) {
|
|
182
|
-
return "sqlite";
|
|
183
|
-
}
|
|
184
|
-
return null;
|
|
185
|
-
}
|
|
186
|
-
function resolveDatabaseDriver(options = {}) {
|
|
187
|
-
const connection = options.connection ?? process.env.DB_CONNECTION;
|
|
188
|
-
if (connection) {
|
|
189
|
-
return normalizeConnectionName(connection);
|
|
190
|
-
}
|
|
191
|
-
const url = options.url ?? process.env.DATABASE_URL ?? "";
|
|
192
|
-
const fromUrl = resolveDriverFromUrl(url);
|
|
193
|
-
if (fromUrl) {
|
|
194
|
-
return fromUrl;
|
|
195
|
-
}
|
|
196
|
-
return "pgsql";
|
|
197
|
-
}
|
|
198
|
-
|
|
199
|
-
// ../../src/core/database/dialect.ts
|
|
200
|
-
function assertSafeIdentifier(identifier) {
|
|
201
|
-
if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(identifier)) {
|
|
202
|
-
throw new Error(`Invalid SQL identifier: ${identifier}`);
|
|
203
|
-
}
|
|
204
|
-
return identifier;
|
|
205
|
-
}
|
|
206
|
-
function quoteIdentifierFor(dialect, column) {
|
|
207
|
-
return dialect.quoteIdentifier(column);
|
|
208
|
-
}
|
|
209
|
-
var postgresDialect = {
|
|
210
|
-
driver: "pgsql",
|
|
211
|
-
placeholder(index) {
|
|
212
|
-
return `$${index}`;
|
|
213
|
-
},
|
|
214
|
-
quoteIdentifier(identifier) {
|
|
215
|
-
return `"${assertSafeIdentifier(identifier)}"`;
|
|
216
|
-
},
|
|
217
|
-
nowExpression() {
|
|
218
|
-
return "NOW()";
|
|
219
|
-
},
|
|
220
|
-
timestampValue(value) {
|
|
221
|
-
return value.toISOString();
|
|
222
|
-
},
|
|
223
|
-
returningClause(columns) {
|
|
224
|
-
return ` RETURNING ${columns}`;
|
|
225
|
-
},
|
|
226
|
-
ilikeOperator() {
|
|
227
|
-
return "ILIKE";
|
|
228
|
-
},
|
|
229
|
-
nullsLastSuffix() {
|
|
230
|
-
return " NULLS LAST";
|
|
231
|
-
},
|
|
232
|
-
castToText(expression) {
|
|
233
|
-
return `${expression}::text`;
|
|
234
|
-
},
|
|
235
|
-
upsertSuffix(conflictColumns, updateColumns) {
|
|
236
|
-
const target = conflictColumns.map((column) => quoteIdentifierFor(this, column)).join(", ");
|
|
237
|
-
if (updateColumns.length === 0) {
|
|
238
|
-
return ` ON CONFLICT (${target}) DO NOTHING`;
|
|
239
|
-
}
|
|
240
|
-
const assignments = updateColumns.map((column) => {
|
|
241
|
-
const quoted = quoteIdentifierFor(this, column);
|
|
242
|
-
return `${quoted} = excluded.${quoted}`;
|
|
243
|
-
}).join(", ");
|
|
244
|
-
return ` ON CONFLICT (${target}) DO UPDATE SET ${assignments}`;
|
|
245
|
-
}
|
|
246
|
-
};
|
|
247
|
-
var mysqlDialect = {
|
|
248
|
-
driver: "mysql",
|
|
249
|
-
placeholder() {
|
|
250
|
-
return "?";
|
|
251
|
-
},
|
|
252
|
-
quoteIdentifier(identifier) {
|
|
253
|
-
return `\`${assertSafeIdentifier(identifier)}\``;
|
|
254
|
-
},
|
|
255
|
-
nowExpression() {
|
|
256
|
-
return "CURRENT_TIMESTAMP";
|
|
257
|
-
},
|
|
258
|
-
timestampValue(value) {
|
|
259
|
-
return value.toISOString().slice(0, 19).replace("T", " ");
|
|
260
|
-
},
|
|
261
|
-
returningClause() {
|
|
262
|
-
return "";
|
|
263
|
-
},
|
|
264
|
-
ilikeOperator() {
|
|
265
|
-
return "LIKE";
|
|
266
|
-
},
|
|
267
|
-
nullsLastSuffix() {
|
|
268
|
-
return "";
|
|
269
|
-
},
|
|
270
|
-
castToText(expression) {
|
|
271
|
-
return `CAST(${expression} AS CHAR)`;
|
|
272
|
-
},
|
|
273
|
-
upsertSuffix(conflictColumns, updateColumns) {
|
|
274
|
-
if (updateColumns.length === 0) {
|
|
275
|
-
const anchor = quoteIdentifierFor(this, conflictColumns[0] ?? "");
|
|
276
|
-
return ` ON DUPLICATE KEY UPDATE ${anchor} = ${anchor}`;
|
|
277
|
-
}
|
|
278
|
-
const assignments = updateColumns.map((column) => {
|
|
279
|
-
const quoted = quoteIdentifierFor(this, column);
|
|
280
|
-
return `${quoted} = VALUES(${quoted})`;
|
|
281
|
-
}).join(", ");
|
|
282
|
-
return ` ON DUPLICATE KEY UPDATE ${assignments}`;
|
|
283
|
-
}
|
|
284
|
-
};
|
|
285
|
-
var sqliteDialect = {
|
|
286
|
-
driver: "sqlite",
|
|
287
|
-
placeholder() {
|
|
288
|
-
return "?";
|
|
289
|
-
},
|
|
290
|
-
quoteIdentifier(identifier) {
|
|
291
|
-
return `"${assertSafeIdentifier(identifier)}"`;
|
|
292
|
-
},
|
|
293
|
-
nowExpression() {
|
|
294
|
-
return "strftime('%Y-%m-%dT%H:%M:%fZ', 'now')";
|
|
295
|
-
},
|
|
296
|
-
timestampValue(value) {
|
|
297
|
-
return value.toISOString();
|
|
298
|
-
},
|
|
299
|
-
returningClause(columns) {
|
|
300
|
-
return ` RETURNING ${columns}`;
|
|
301
|
-
},
|
|
302
|
-
ilikeOperator() {
|
|
303
|
-
return "LIKE";
|
|
304
|
-
},
|
|
305
|
-
nullsLastSuffix() {
|
|
306
|
-
return "";
|
|
307
|
-
},
|
|
308
|
-
castToText(expression) {
|
|
309
|
-
return `CAST(${expression} AS TEXT)`;
|
|
310
|
-
},
|
|
311
|
-
upsertSuffix(conflictColumns, updateColumns) {
|
|
312
|
-
const target = conflictColumns.map((column) => quoteIdentifierFor(this, column)).join(", ");
|
|
313
|
-
if (updateColumns.length === 0) {
|
|
314
|
-
return ` ON CONFLICT (${target}) DO NOTHING`;
|
|
315
|
-
}
|
|
316
|
-
const assignments = updateColumns.map((column) => {
|
|
317
|
-
const quoted = quoteIdentifierFor(this, column);
|
|
318
|
-
return `${quoted} = excluded.${quoted}`;
|
|
319
|
-
}).join(", ");
|
|
320
|
-
return ` ON CONFLICT (${target}) DO UPDATE SET ${assignments}`;
|
|
321
|
-
}
|
|
322
|
-
};
|
|
323
|
-
var dialects = {
|
|
324
|
-
pgsql: postgresDialect,
|
|
325
|
-
mysql: mysqlDialect,
|
|
326
|
-
sqlite: sqliteDialect
|
|
327
|
-
};
|
|
328
|
-
var dialectContext = createAsyncContextStore("@getstrata/sqlDialect");
|
|
329
|
-
var dialectOverride = null;
|
|
330
|
-
function dialectFor(driver) {
|
|
331
|
-
return dialects[driver];
|
|
332
|
-
}
|
|
333
|
-
function currentSqlDialect() {
|
|
334
|
-
return dialectContext.getStore() ?? dialectOverride ?? dialectFor(resolveDatabaseDriver());
|
|
335
|
-
}
|
|
339
|
+
// ../../src/core/auth/passwordLogin.ts
|
|
340
|
+
init_dialect();
|
|
336
341
|
|
|
337
342
|
// ../../src/core/security/recoveryCodes.ts
|
|
338
343
|
import { randomBytes as randomBytes2 } from "crypto";
|