@getstrata/core 2.0.2 → 2.0.3

package/dist/entries/auth/oauth/providers.js

@@ -325,50 +325,133 @@ async function resolveSafeOutboundTarget(rawUrl, options = {}) {
 
 // ../../src/core/security/safeFetch.ts
 var DEFAULT_FETCH_TIMEOUT_MS = 1e4;
+function untilAborted(work, signal) {
+  signal.throwIfAborted();
+  return new Promise((resolve, reject) => {
+    const onAbort = () => reject(signal.reason);
+    signal.addEventListener("abort", onAbort, { once: true });
+    work.then(resolve, reject).finally(() => signal.removeEventListener("abort", onAbort));
+  });
+}
+function preserveResponseMetadata(response, original) {
+  Object.defineProperties(response, {
+    url: { value: original.url },
+    redirected: { value: original.redirected },
+    type: { value: original.type }
+  });
+  const clone = response.clone.bind(response);
+  response.clone = () => preserveResponseMetadata(clone(), original);
+  return response;
+}
+function withBodyDeadline(response, signal, release) {
+  if (!response.body) {
+    release();
+    return response;
+  }
+  const reader = response.body.getReader();
+  let stopped = false;
+  let bodyController;
+  const stop = (reason, errorBody) => {
+    if (stopped)
+      return;
+    stopped = true;
+    release();
+    signal.removeEventListener("abort", onAbort);
+    if (errorBody)
+      bodyController.error(reason);
+    reader.cancel(reason).catch(() => {}).finally(() => reader.releaseLock());
+  };
+  const onAbort = () => stop(signal.reason, true);
+  const body = new ReadableStream({
+    start(controller) {
+      bodyController = controller;
+      signal.addEventListener("abort", onAbort, { once: true });
+      if (signal.aborted)
+        onAbort();
+    },
+    async pull(controller) {
+      try {
+        const result = await untilAborted(reader.read(), signal);
+        if (stopped)
+          return;
+        if (result.done) {
+          stopped = true;
+          release();
+          signal.removeEventListener("abort", onAbort);
+          reader.releaseLock();
+          controller.close();
+        } else {
+          controller.enqueue(result.value);
+        }
+      } catch (error) {
+        stop(error, true);
+      }
+    },
+    cancel(reason) {
+      stop(reason, false);
+    }
+  }, { highWaterMark: 0 });
+  return preserveResponseMetadata(new Response(body, {
+    status: response.status,
+    statusText: response.statusText,
+    headers: response.headers
+  }), response);
+}
 async function safeFetch(input, init = {}, options = {}) {
+  init.signal?.throwIfAborted();
   const timeoutMs = options.timeoutMs ?? DEFAULT_FETCH_TIMEOUT_MS;
+  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
+    throw new RangeError("safeFetch timeoutMs must be a positive finite number.");
+  }
   const maxRedirects = options.maxRedirects ?? 0;
-  const resolveDns = options.resolveDns ?? true;
   const urlOptions = {
     allowHttp: options.allowHttp,
-    resolveDns,
+    resolveDns: options.resolveDns ?? true,
     allowPrivate: options.allowPrivate
   };
   const controller = new AbortController;
-  const timeout = setTimeout(() => controller.abort(), timeoutMs);
+  const forwardAbort = () => controller.abort(init.signal?.reason);
+  init.signal?.addEventListener("abort", forwardAbort, { once: true });
+  const timeout = setTimeout(() => controller.abort(new DOMException("The operation timed out.", "TimeoutError")), timeoutMs);
+  const release = () => {
+    clearTimeout(timeout);
+    init.signal?.removeEventListener("abort", forwardAbort);
+  };
   try {
-    let current = await resolveSafeOutboundTarget(input, urlOptions);
+    let current = await untilAborted(resolveSafeOutboundTarget(input, urlOptions), controller.signal);
     let redirectCount = 0;
     while (true) {
+      controller.signal.throwIfAborted();
       const address = current.addresses[0];
       const fetchUrl = address ? pinUrlToAddress(current.url, address).toString() : current.url.toString();
       const headers = new Headers(init.headers);
-      if (address && !headers.has("host")) {
+      if (address && !headers.has("host"))
         headers.set("Host", current.url.host);
-      }
       const fetchInit = {
         ...init,
         headers,
         signal: controller.signal,
         redirect: "manual"
       };
-      if (address) {
+      if (address)
         fetchInit.tls = { serverName: current.url.hostname };
-      }
-      const response = await fetch(fetchUrl, fetchInit);
+      const response = await untilAborted(fetch(fetchUrl, fetchInit), controller.signal);
       if (response.status >= 300 && response.status < 400) {
         const location = response.headers.get("location");
-        if (!location || redirectCount >= maxRedirects) {
-          return response;
+        if (location && redirectCount < maxRedirects) {
+          if (response.body)
+            await untilAborted(response.body.cancel(), controller.signal);
+          current = await untilAborted(resolveSafeOutboundTarget(new URL(location, current.url).toString(), urlOptions), controller.signal);
+          redirectCount++;
+          continue;
         }
-        current = await resolveSafeOutboundTarget(new URL(location, current.url).toString(), urlOptions);
-        redirectCount += 1;
-        continue;
       }
-      return response;
+      return withBodyDeadline(response, controller.signal, release);
     }
-  } finally {
-    clearTimeout(timeout);
+  } catch (error) {
+    controller.abort(error);
+    release();
+    throw error;
   }
 }
 

package/dist/entries/auth/oauth/samlProvider.js

@@ -171,6 +171,12 @@ var init_dialect = __esm(() => {
     nowExpression() {
       return "NOW()";
     },
+    epochMillisecondsExpression() {
+      return "CAST(EXTRACT(EPOCH FROM clock_timestamp()) * 1000 AS BIGINT)";
+    },
+    rowLockClause(skipLocked = false) {
+      return ` FOR UPDATE${skipLocked ? " SKIP LOCKED" : ""}`;
+    },
     timestampValue(value) {
       return value.toISOString();
     },
@@ -209,6 +215,12 @@ var init_dialect = __esm(() => {
     nowExpression() {
       return "CURRENT_TIMESTAMP";
     },
+    epochMillisecondsExpression() {
+      return "CAST(UNIX_TIMESTAMP(CURRENT_TIMESTAMP(3)) * 1000 AS UNSIGNED)";
+    },
+    rowLockClause(skipLocked = false) {
+      return ` FOR UPDATE${skipLocked ? " SKIP LOCKED" : ""}`;
+    },
     timestampValue(value) {
       return value.toISOString().slice(0, 19).replace("T", " ");
     },
@@ -247,6 +259,12 @@ var init_dialect = __esm(() => {
     nowExpression() {
       return "strftime('%Y-%m-%dT%H:%M:%fZ', 'now')";
     },
+    epochMillisecondsExpression() {
+      return "CAST((julianday('now') - 2440587.5) * 86400000 AS INTEGER)";
+    },
+    rowLockClause() {
+      return "";
+    },
     timestampValue(value) {
       return value.toISOString();
     },

package/dist/entries/auth/oneTimeToken.js

@@ -98,6 +98,12 @@ var init_dialect = __esm(() => {
     nowExpression() {
       return "NOW()";
     },
+    epochMillisecondsExpression() {
+      return "CAST(EXTRACT(EPOCH FROM clock_timestamp()) * 1000 AS BIGINT)";
+    },
+    rowLockClause(skipLocked = false) {
+      return ` FOR UPDATE${skipLocked ? " SKIP LOCKED" : ""}`;
+    },
     timestampValue(value) {
       return value.toISOString();
     },
@@ -136,6 +142,12 @@ var init_dialect = __esm(() => {
     nowExpression() {
       return "CURRENT_TIMESTAMP";
     },
+    epochMillisecondsExpression() {
+      return "CAST(UNIX_TIMESTAMP(CURRENT_TIMESTAMP(3)) * 1000 AS UNSIGNED)";
+    },
+    rowLockClause(skipLocked = false) {
+      return ` FOR UPDATE${skipLocked ? " SKIP LOCKED" : ""}`;
+    },
     timestampValue(value) {
       return value.toISOString().slice(0, 19).replace("T", " ");
     },
@@ -174,6 +186,12 @@ var init_dialect = __esm(() => {
     nowExpression() {
       return "strftime('%Y-%m-%dT%H:%M:%fZ', 'now')";
     },
+    epochMillisecondsExpression() {
+      return "CAST((julianday('now') - 2440587.5) * 86400000 AS INTEGER)";
+    },
+    rowLockClause() {
+      return "";
+    },
     timestampValue(value) {
       return value.toISOString();
     },

package/dist/entries/auth/passwordLogin.js

@@ -98,6 +98,12 @@ var init_dialect = __esm(() => {
     nowExpression() {
       return "NOW()";
     },
+    epochMillisecondsExpression() {
+      return "CAST(EXTRACT(EPOCH FROM clock_timestamp()) * 1000 AS BIGINT)";
+    },
+    rowLockClause(skipLocked = false) {
+      return ` FOR UPDATE${skipLocked ? " SKIP LOCKED" : ""}`;
+    },
     timestampValue(value) {
       return value.toISOString();
     },
@@ -136,6 +142,12 @@ var init_dialect = __esm(() => {
     nowExpression() {
       return "CURRENT_TIMESTAMP";
     },
+    epochMillisecondsExpression() {
+      return "CAST(UNIX_TIMESTAMP(CURRENT_TIMESTAMP(3)) * 1000 AS UNSIGNED)";
+    },
+    rowLockClause(skipLocked = false) {
+      return ` FOR UPDATE${skipLocked ? " SKIP LOCKED" : ""}`;
+    },
     timestampValue(value) {
       return value.toISOString().slice(0, 19).replace("T", " ");
     },
@@ -174,6 +186,12 @@ var init_dialect = __esm(() => {
     nowExpression() {
       return "strftime('%Y-%m-%dT%H:%M:%fZ', 'now')";
     },
+    epochMillisecondsExpression() {
+      return "CAST((julianday('now') - 2440587.5) * 86400000 AS INTEGER)";
+    },
+    rowLockClause() {
+      return "";
+    },
     timestampValue(value) {
       return value.toISOString();
     },

package/dist/entries/auth/saml/samlServiceProvider.js

@@ -171,6 +171,12 @@ var init_dialect = __esm(() => {
     nowExpression() {
       return "NOW()";
     },
+    epochMillisecondsExpression() {
+      return "CAST(EXTRACT(EPOCH FROM clock_timestamp()) * 1000 AS BIGINT)";
+    },
+    rowLockClause(skipLocked = false) {
+      return ` FOR UPDATE${skipLocked ? " SKIP LOCKED" : ""}`;
+    },
     timestampValue(value) {
       return value.toISOString();
     },
@@ -209,6 +215,12 @@ var init_dialect = __esm(() => {
     nowExpression() {
       return "CURRENT_TIMESTAMP";
     },
+    epochMillisecondsExpression() {
+      return "CAST(UNIX_TIMESTAMP(CURRENT_TIMESTAMP(3)) * 1000 AS UNSIGNED)";
+    },
+    rowLockClause(skipLocked = false) {
+      return ` FOR UPDATE${skipLocked ? " SKIP LOCKED" : ""}`;
+    },
     timestampValue(value) {
       return value.toISOString().slice(0, 19).replace("T", " ");
     },
@@ -247,6 +259,12 @@ var init_dialect = __esm(() => {
     nowExpression() {
       return "strftime('%Y-%m-%dT%H:%M:%fZ', 'now')";
     },
+    epochMillisecondsExpression() {
+      return "CAST((julianday('now') - 2440587.5) * 86400000 AS INTEGER)";
+    },
+    rowLockClause() {
+      return "";
+    },
     timestampValue(value) {
       return value.toISOString();
     },

package/dist/entries/auth/scimAuthMiddleware.js

@@ -127,6 +127,7 @@ async function runWithTransactionScope(callback) {
 var TransactionRollback, transactionScopes;
 var init_transactionControl = __esm(() => {
   init_asyncContextStore();
+  init_connectionContext();
   TransactionRollback = class TransactionRollback extends Error {
     result;
     constructor(result) {
@@ -408,6 +409,12 @@ var init_dialect = __esm(() => {
     nowExpression() {
       return "NOW()";
     },
+    epochMillisecondsExpression() {
+      return "CAST(EXTRACT(EPOCH FROM clock_timestamp()) * 1000 AS BIGINT)";
+    },
+    rowLockClause(skipLocked = false) {
+      return ` FOR UPDATE${skipLocked ? " SKIP LOCKED" : ""}`;
+    },
     timestampValue(value) {
       return value.toISOString();
     },
@@ -446,6 +453,12 @@ var init_dialect = __esm(() => {
     nowExpression() {
       return "CURRENT_TIMESTAMP";
     },
+    epochMillisecondsExpression() {
+      return "CAST(UNIX_TIMESTAMP(CURRENT_TIMESTAMP(3)) * 1000 AS UNSIGNED)";
+    },
+    rowLockClause(skipLocked = false) {
+      return ` FOR UPDATE${skipLocked ? " SKIP LOCKED" : ""}`;
+    },
     timestampValue(value) {
       return value.toISOString().slice(0, 19).replace("T", " ");
     },
@@ -484,6 +497,12 @@ var init_dialect = __esm(() => {
     nowExpression() {
       return "strftime('%Y-%m-%dT%H:%M:%fZ', 'now')";
     },
+    epochMillisecondsExpression() {
+      return "CAST((julianday('now') - 2440587.5) * 86400000 AS INTEGER)";
+    },
+    rowLockClause() {
+      return "";
+    },
     timestampValue(value) {
       return value.toISOString();
     },

package/dist/entries/database/migrations.js

@@ -98,6 +98,12 @@ var init_dialect = __esm(() => {
     nowExpression() {
       return "NOW()";
     },
+    epochMillisecondsExpression() {
+      return "CAST(EXTRACT(EPOCH FROM clock_timestamp()) * 1000 AS BIGINT)";
+    },
+    rowLockClause(skipLocked = false) {
+      return ` FOR UPDATE${skipLocked ? " SKIP LOCKED" : ""}`;
+    },
     timestampValue(value) {
       return value.toISOString();
     },
@@ -136,6 +142,12 @@ var init_dialect = __esm(() => {
     nowExpression() {
       return "CURRENT_TIMESTAMP";
     },
+    epochMillisecondsExpression() {
+      return "CAST(UNIX_TIMESTAMP(CURRENT_TIMESTAMP(3)) * 1000 AS UNSIGNED)";
+    },
+    rowLockClause(skipLocked = false) {
+      return ` FOR UPDATE${skipLocked ? " SKIP LOCKED" : ""}`;
+    },
     timestampValue(value) {
       return value.toISOString().slice(0, 19).replace("T", " ");
     },
@@ -174,6 +186,12 @@ var init_dialect = __esm(() => {
     nowExpression() {
       return "strftime('%Y-%m-%dT%H:%M:%fZ', 'now')";
     },
+    epochMillisecondsExpression() {
+      return "CAST((julianday('now') - 2440587.5) * 86400000 AS INTEGER)";
+    },
+    rowLockClause() {
+      return "";
+    },
     timestampValue(value) {
       return value.toISOString();
     },

package/dist/entries/database/sqliteConnection.js

@@ -1,5 +1,49 @@
 // @bun
+var __esm = (fn, res, err) => () => {
+  if (fn)
+    try {
+      res = fn(fn = 0);
+    } catch (e) {
+      err = [e];
+    }
+  if (err)
+    throw err[0];
+  return res;
+};
+
+// ../../src/core/runtime/asyncContextStore.ts
+import { AsyncLocalStorage } from "async_hooks";
+function createAsyncContextStore(key) {
+  const symbol = Symbol.for(key);
+  const globalRecord = globalThis;
+  const existing = globalRecord[symbol];
+  if (existing) {
+    return existing;
+  }
+  const store = new AsyncLocalStorage;
+  globalRecord[symbol] = store;
+  return store;
+}
+var init_asyncContextStore = () => {};
+
+// ../../src/core/database/connectionContext.ts
+function runWithDatabaseConnection(connection, callback) {
+  return activeConnection.run(connection, callback);
+}
+function getActiveDatabaseConnection(fallback) {
+  return activeConnection.getStore() ?? fallback;
+}
+function hasActiveDatabaseConnection() {
+  return activeConnection.getStore() !== undefined;
+}
+var activeConnection;
+var init_connectionContext = __esm(() => {
+  init_asyncContextStore();
+  activeConnection = createAsyncContextStore("@getstrata/databaseConnectionContext");
+});
+
 // ../../src/core/database/sqliteConnection.ts
+init_connectionContext();
 import { Database } from "bun:sqlite";
 function isRowReturning(sql) {
   const upper = sql.replace(/\s+/g, " ").trim().toUpperCase();
@@ -19,20 +63,70 @@ function createSqliteConnection(filename) {
     db.exec("PRAGMA journal_mode = WAL");
     db.exec("PRAGMA synchronous = NORMAL");
   }
-  return {
+  let tail = Promise.resolve();
+  let pending = 0;
+  let closed = false;
+  const transactions = new WeakSet;
+  function execute(query, params) {
+    const statement = db.query(query);
+    const args = [...params];
+    if (isRowReturning(query))
+      return statement.all(...args);
+    statement.run(...args);
+    return [];
+  }
+  function enqueue(operation) {
+    if (closed)
+      return Promise.reject(new Error("SQLite connection is closed."));
+    pending++;
+    const result = tail.then(operation).finally(() => {
+      pending--;
+    });
+    tail = result.then(() => {}, () => {});
+    return result;
+  }
+  const connection = {
     async unsafe(query, params = []) {
-      const statement = db.query(query);
-      const args = [...params];
-      if (isRowReturning(query)) {
-        return statement.all(...args);
+      const active = getActiveDatabaseConnection(connection);
+      if (transactions.has(active))
+        return active.unsafe(query, params);
+      return enqueue(() => execute(query, params));
+    },
+    async begin(callback) {
+      if (transactions.has(getActiveDatabaseConnection(connection))) {
+        throw new Error("Use runInTransaction for nested SQLite transactions.");
       }
-      statement.run(...args);
-      return [];
+      return enqueue(async () => {
+        db.exec("BEGIN IMMEDIATE");
+        let open = true;
+        const transaction = {
+          async unsafe(query, params = []) {
+            if (!open)
+              throw new Error("SQLite transaction is no longer active.");
+            return execute(query, params);
+          }
+        };
+        transactions.add(transaction);
+        try {
+          const result = await runWithDatabaseConnection(transaction, () => callback(transaction));
+          db.exec("COMMIT");
+          return result;
+        } catch (error) {
+          db.exec("ROLLBACK");
+          throw error;
+        } finally {
+          open = false;
+        }
+      });
     },
     close() {
+      if (pending > 0)
+        throw new Error("Drain SQLite operations before closing the connection.");
+      closed = true;
       db.close();
     }
   };
+  return connection;
 }
 export {
   createSqliteConnection

package/dist/entries/events/outbox.js

@@ -0,0 +1 @@
+export * from "../../index.js";

package/dist/entries/http/response.js

@@ -26,6 +26,22 @@ function createAsyncContextStore(key) {
 }
 var init_asyncContextStore = () => {};
 
+// ../../src/core/database/connectionContext.ts
+function runWithDatabaseConnection(connection, callback) {
+  return activeConnection.run(connection, callback);
+}
+function getActiveDatabaseConnection(fallback) {
+  return activeConnection.getStore() ?? fallback;
+}
+function hasActiveDatabaseConnection() {
+  return activeConnection.getStore() !== undefined;
+}
+var activeConnection;
+var init_connectionContext = __esm(() => {
+  init_asyncContextStore();
+  activeConnection = createAsyncContextStore("@getstrata/databaseConnectionContext");
+});
+
 // ../../src/core/database/transactionControl.ts
 function unwrapTransactionRollback(error, depth = 0) {
   if (error instanceof TransactionRollback) {
@@ -89,6 +105,7 @@ async function runWithTransactionScope(callback) {
 var TransactionRollback, transactionScopes;
 var init_transactionControl = __esm(() => {
   init_asyncContextStore();
+  init_connectionContext();
   TransactionRollback = class TransactionRollback extends Error {
     result;
     constructor(result) {
@@ -225,6 +242,19 @@ function isUniqueConstraintError(error) {
 // ../../src/core/http/response.ts
 init_transactionControl();
 
+// ../../src/core/http/requestMetaContext.ts
+init_asyncContextStore();
+var requestMetaContext = createAsyncContextStore("@getstrata/requestMetaContext");
+function runWithRequestMeta(meta, callback) {
+  return requestMetaContext.run(meta, callback);
+}
+function currentRequestMeta() {
+  return requestMetaContext.getStore() ?? {
+    ipAddress: null,
+    userAgent: null
+  };
+}
+
 // ../../src/core/http/webErrorResponse.ts
 import { toHttpError as toHttpError2, ValidationError } from "@getstrata/core/errors/http";
 import { appLogger } from "@getstrata/core/logging/logger";
@@ -289,7 +319,7 @@ function readSpaPrefix() {
 }
 
 // ../../src/core/view/webErrorView.ts
-import { currentRequestMeta } from "@getstrata/core/http/requestMetaContext";
+import { currentRequestMeta as currentRequestMeta2 } from "@getstrata/core/http/requestMetaContext";
 
 // ../../src/core/http/safeInternalPath.ts
 var NESTED_REDIRECT_KEYS = new Set(["redirect", "next", "return", "returnTo", "return_to"]);
@@ -408,7 +438,7 @@ async function renderWebErrorHtml(input) {
   try {
     return await render({
       ...input,
-      request: input.request ?? currentRequestMeta().request
+      request: input.request ?? currentRequestMeta2().request
     });
   } catch {
     return renderKernelErrorChrome(input);
@@ -490,7 +520,7 @@ function logServerError(error, mappedError) {
   });
 }
 async function webErrorResponse(error, request) {
-  if (!request || !isViewsEnabled() || requestPrefersJson(request)) {
+  if (currentRequestMeta().errorFormat === "json" || !request || !isViewsEnabled() || requestPrefersJson(request)) {
     return null;
   }
   const mappedError = toHttpError2(error) ?? mapDatabaseError(error);
@@ -555,17 +585,21 @@ function withJsonErrorHandling(handler) {
   };
 }
 function createJsonErrorMiddleware() {
-  return async (_request, next) => {
+  return async (_request, next) => await runWithRequestMeta({ ...currentRequestMeta(), errorFormat: "json" }, async () => {
     try {
       return await next();
     } catch (error) {
       requestTransactionRollback();
       return errorResponse(error);
     }
-  };
+  });
+}
+function createWebErrorMiddleware() {
+  return async (request, next) => await withErrorHandling(async (_request) => next())(request);
 }
 export {
   createJsonErrorMiddleware,
+  createWebErrorMiddleware,
   createdResponse,
   errorResponse,
   jsonResponse,