@getstrata/core 2.2.16 → 2.2.18

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @getstrata/core changelog
 
+## 2.2.18
+
+Add optional typed guardMigrationRollback for application-owned rollback history predicates; skip history reads only during explicit development fresh resets, propagate predicate failures, and reuse the contract for encryption-checkpoint archival protection. Document guard placement and unchanged reset/rollback safety; cover type, runner and real SQLite history regressions.
+
+## 2.2.17
+
+Add explicit development-only migration reset context while preserving guarded rollback and encryption archival; align generated fresh entries and reject production/staging or unsupported reset arguments before provisioning. Replace CSP-blocked error-page JavaScript navigation with safe same-origin links, and correct ambiguous Postgres/SQLite foreign-key messages without changing their HTTP status.
+
 ## 2.2.16
 
 Allow managed outbox workers to reuse a configured instance, preserving application tenant resolution, listener registration and delivery settings. Keep generated listeners-only defaults compatible, reject ambiguous worker sources, and cover configured SQL delivery, cancellation, cleanup and TypeScript contracts.

package/dist/core/database/migrations/rollbackGuard.d.ts

@@ -0,0 +1,10 @@
+import type { MigrationDownContext } from "./types.ts";
+interface MigrationRollbackGuard {
+    /** Application-owned history check. It is not evaluated during an explicit fresh reset. */
+    hasHistory(): boolean | Promise<boolean>;
+    message: string;
+}
+/** Await before destructive DDL. Predicate failures propagate; ordinary rollback remains guarded. */
+declare function guardMigrationRollback(context: MigrationDownContext | undefined, guard: MigrationRollbackGuard): Promise<void>;
+export type { MigrationRollbackGuard };
+export { guardMigrationRollback };

package/dist/core/database/migrations/runner.d.ts

@@ -20,6 +20,8 @@ declare function rollbackDatabase(db: MigrationDatabase, migrations: Migration[]
 declare function freshDatabase(db: MigrationDatabase, migrations: Migration[], options?: {
     advisoryLock?: boolean;
     onMigration?: (name: string) => void;
+    destructive?: boolean;
 }): Promise<void>;
 export { withMigrationLock } from "./advisoryLock.ts";
+export { guardMigrationRollback, type MigrationRollbackGuard } from "./rollbackGuard.ts";
 export { ensureMigrationsTable, freshDatabase, getAppliedMigrations, getMigrationStatus, loadMigrationsFromDirectory, migrateDatabase, rollbackDatabase, runPendingMigrations, };

package/dist/core/database/migrations/types.d.ts

@@ -2,14 +2,18 @@ interface MigrationDatabase {
     unsafe<T = unknown>(query: string, params?: readonly unknown[]): Promise<T[]>;
     schema?: import("../schema/schema.ts").SchemaBuilder;
 }
+/** Explicit destructive reset is distinct from an ordinary rollback. */
+interface MigrationDownContext {
+    operation: "fresh";
+}
 interface Migration {
     name: string;
     up(db: MigrationDatabase): Promise<void>;
-    down(db: MigrationDatabase): Promise<void>;
+    down(db: MigrationDatabase, context?: MigrationDownContext): Promise<void>;
 }
 type MigrationStatus = {
     name: string;
     status: "up" | "pending";
     batch: number | null;
 };
-export type { Migration, MigrationDatabase, MigrationStatus };
+export type { Migration, MigrationDatabase, MigrationDownContext, MigrationStatus };

package/dist/entries/auth/oauth/samlProvider.js

@@ -362,7 +362,7 @@ function mapSqliteError(error) {
     return new ConflictError("A record with these values already exists.");
   }
   if (code === "SQLITE_CONSTRAINT_FOREIGNKEY") {
-    return new UnprocessableEntityError("Referenced record does not exist.");
+    return new UnprocessableEntityError("Operation conflicts with related records.");
   }
   if (code === "SQLITE_CONSTRAINT_NOTNULL") {
     return new BadRequestError("Required field is missing.");
@@ -407,7 +407,7 @@ function mapDatabaseError(error) {
       if (error.detail) {
         console.error("[database] foreign-key violation", error.detail);
       }
-      return new UnprocessableEntityError("Referenced record does not exist.");
+      return new UnprocessableEntityError("Operation conflicts with related records.");
     case "23502":
       if (error.detail) {
         console.error("[database] not-null violation", error.detail);

package/dist/entries/auth/saml/samlServiceProvider.js

@@ -362,7 +362,7 @@ function mapSqliteError(error) {
     return new ConflictError("A record with these values already exists.");
   }
   if (code === "SQLITE_CONSTRAINT_FOREIGNKEY") {
-    return new UnprocessableEntityError("Referenced record does not exist.");
+    return new UnprocessableEntityError("Operation conflicts with related records.");
   }
   if (code === "SQLITE_CONSTRAINT_NOTNULL") {
     return new BadRequestError("Required field is missing.");
@@ -407,7 +407,7 @@ function mapDatabaseError(error) {
       if (error.detail) {
         console.error("[database] foreign-key violation", error.detail);
       }
-      return new UnprocessableEntityError("Referenced record does not exist.");
+      return new UnprocessableEntityError("Operation conflicts with related records.");
     case "23502":
       if (error.detail) {
         console.error("[database] not-null violation", error.detail);

package/dist/entries/database/errors.js

@@ -38,7 +38,7 @@ function mapSqliteError(error) {
     return new ConflictError("A record with these values already exists.");
   }
   if (code === "SQLITE_CONSTRAINT_FOREIGNKEY") {
-    return new UnprocessableEntityError("Referenced record does not exist.");
+    return new UnprocessableEntityError("Operation conflicts with related records.");
   }
   if (code === "SQLITE_CONSTRAINT_NOTNULL") {
     return new BadRequestError("Required field is missing.");
@@ -83,7 +83,7 @@ function mapDatabaseError(error) {
       if (error.detail) {
         console.error("[database] foreign-key violation", error.detail);
       }
-      return new UnprocessableEntityError("Referenced record does not exist.");
+      return new UnprocessableEntityError("Operation conflicts with related records.");
     case "23502":
       if (error.detail) {
         console.error("[database] not-null violation", error.detail);

package/dist/entries/database/migrations.js

@@ -228,11 +228,33 @@ var init_dialect = __esm(() => {
 });
 
 // ../../src/core/database/migrations/runner.ts
-init_dialect();
 import { readdir } from "fs/promises";
 import { join } from "path";
 import { pathToFileURL } from "url";
 
+// ../../src/core/runtime/appEnv.ts
+var NON_PRODUCTION_APP_ENVS = new Set(["local", "development", "dev", "test", "testing", "ci"]);
+function normalizeEnvValue(value) {
+  return (value ?? "").trim().toLowerCase();
+}
+function isProductionEnv(env = process.env) {
+  const appEnv = normalizeEnvValue(env.APP_ENV);
+  const nodeEnv = normalizeEnvValue(env.NODE_ENV);
+  if (appEnv === "production" || nodeEnv === "production") {
+    return true;
+  }
+  if (appEnv === "") {
+    return false;
+  }
+  return !NON_PRODUCTION_APP_ENVS.has(appEnv);
+}
+function envFlagEnabled(value) {
+  return value === "true";
+}
+
+// ../../src/core/database/migrations/runner.ts
+init_dialect();
+
 // ../../src/core/database/migrations/advisoryLock.ts
 var MIGRATION_LOCK_KEY = 42424242;
 async function withMigrationLock(db, callback, lockKey = MIGRATION_LOCK_KEY) {
@@ -243,6 +265,13 @@ async function withMigrationLock(db, callback, lockKey = MIGRATION_LOCK_KEY) {
     await db.unsafe("SELECT pg_advisory_unlock($1)", [lockKey]);
   }
 }
+// ../../src/core/database/migrations/rollbackGuard.ts
+async function guardMigrationRollback(context, guard) {
+  if (context?.operation === "fresh")
+    return;
+  if (await guard.hasHistory())
+    throw new Error(guard.message);
+}
 
 // ../../src/core/database/migrations/runner.ts
 var MIGRATIONS_TABLE = "framework_migrations";
@@ -346,13 +375,19 @@ async function rollbackDatabase(db, migrations, options = {}) {
   return rolledBack;
 }
 async function freshDatabase(db, migrations, options = {}) {
+  if (options.destructive && isProductionEnv()) {
+    throw new Error("Destructive migration reset is only available in development/test environments.");
+  }
   const runFresh = async () => {
     const applied = await getAppliedMigrations(db);
     const appliedNames = new Set(applied.map(({ name }) => name));
     const appliedMigrations = migrations.filter(({ name }) => appliedNames.has(name));
     for (const migration of [...appliedMigrations].reverse()) {
       options.onMigration?.(migration.name);
-      await migration.down(db);
+      if (options.destructive)
+        await migration.down(db, { operation: "fresh" });
+      else
+        await migration.down(db);
     }
     if (appliedMigrations.length > 0) {
       await db.unsafe(`DELETE FROM ${MIGRATIONS_TABLE}`);
@@ -370,6 +405,7 @@ export {
   freshDatabase,
   getAppliedMigrations,
   getMigrationStatus,
+  guardMigrationRollback,
   loadMigrationsFromDirectory,
   migrateDatabase,
   rollbackDatabase,

package/dist/entries/http/memoryThrottleMiddleware.js

@@ -345,12 +345,25 @@ var configuredErrorView = {};
 function escapeHtml(value) {
   return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;");
 }
+function errorReturnPath(request) {
+  if (!request)
+    return "/";
+  try {
+    const current = new URL(request.url);
+    const previous = new URL(request.headers.get("referer") ?? "");
+    if (previous.origin !== current.origin || (request.method === "GET" || request.method === "HEAD") && previous.pathname === current.pathname)
+      return "/";
+    return sanitizeInternalPath(previous.pathname, "/");
+  } catch {
+    return "/";
+  }
+}
 function renderKernelErrorChrome(input) {
   const title = escapeHtml(input.title);
   const message = escapeHtml(input.message);
   const errorLines = Object.entries(input.errors ?? {}).flatMap(([field, messages]) => messages.map((item) => `${field}: ${item}`)).map((line) => `<li>${escapeHtml(line)}</li>`).join("");
   const details = errorLines ? `<ul class="error-list">${errorLines}</ul>` : "";
-  const goBack = input.status === 422 ? `<p><a href="javascript:history.back()">Go back</a></p>` : "";
+  const goBack = input.status === 422 ? `<p><a href="${escapeHtml(errorReturnPath(input.request ?? currentRequestMeta3().request))}">Go back</a></p>` : "";
   return `<!doctype html>
 <html lang="en">
   <head>

package/dist/entries/http/response.js

@@ -162,7 +162,7 @@ function mapSqliteError(error) {
     return new ConflictError("A record with these values already exists.");
   }
   if (code === "SQLITE_CONSTRAINT_FOREIGNKEY") {
-    return new UnprocessableEntityError("Referenced record does not exist.");
+    return new UnprocessableEntityError("Operation conflicts with related records.");
   }
   if (code === "SQLITE_CONSTRAINT_NOTNULL") {
     return new BadRequestError("Required field is missing.");
@@ -207,7 +207,7 @@ function mapDatabaseError(error) {
       if (error.detail) {
         console.error("[database] foreign-key violation", error.detail);
       }
-      return new UnprocessableEntityError("Referenced record does not exist.");
+      return new UnprocessableEntityError("Operation conflicts with related records.");
     case "23502":
       if (error.detail) {
         console.error("[database] not-null violation", error.detail);
@@ -403,12 +403,25 @@ var configuredErrorView = {};
 function escapeHtml(value) {
   return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;");
 }
+function errorReturnPath(request) {
+  if (!request)
+    return "/";
+  try {
+    const current = new URL(request.url);
+    const previous = new URL(request.headers.get("referer") ?? "");
+    if (previous.origin !== current.origin || (request.method === "GET" || request.method === "HEAD") && previous.pathname === current.pathname)
+      return "/";
+    return sanitizeInternalPath(previous.pathname, "/");
+  } catch {
+    return "/";
+  }
+}
 function renderKernelErrorChrome(input) {
   const title = escapeHtml(input.title);
   const message = escapeHtml(input.message);
   const errorLines = Object.entries(input.errors ?? {}).flatMap(([field, messages]) => messages.map((item) => `${field}: ${item}`)).map((line) => `<li>${escapeHtml(line)}</li>`).join("");
   const details = errorLines ? `<ul class="error-list">${errorLines}</ul>` : "";
-  const goBack = input.status === 422 ? `<p><a href="javascript:history.back()">Go back</a></p>` : "";
+  const goBack = input.status === 422 ? `<p><a href="${escapeHtml(errorReturnPath(input.request ?? currentRequestMeta2().request))}">Go back</a></p>` : "";
   return `<!doctype html>
 <html lang="en">
   <head>

package/dist/entries/http/scimThrottleMiddleware.js

@@ -399,12 +399,25 @@ var configuredErrorView = {};
 function escapeHtml(value) {
   return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;");
 }
+function errorReturnPath(request) {
+  if (!request)
+    return "/";
+  try {
+    const current = new URL(request.url);
+    const previous = new URL(request.headers.get("referer") ?? "");
+    if (previous.origin !== current.origin || (request.method === "GET" || request.method === "HEAD") && previous.pathname === current.pathname)
+      return "/";
+    return sanitizeInternalPath(previous.pathname, "/");
+  } catch {
+    return "/";
+  }
+}
 function renderKernelErrorChrome(input) {
   const title = escapeHtml(input.title);
   const message = escapeHtml(input.message);
   const errorLines = Object.entries(input.errors ?? {}).flatMap(([field, messages]) => messages.map((item) => `${field}: ${item}`)).map((line) => `<li>${escapeHtml(line)}</li>`).join("");
   const details = errorLines ? `<ul class="error-list">${errorLines}</ul>` : "";
-  const goBack = input.status === 422 ? `<p><a href="javascript:history.back()">Go back</a></p>` : "";
+  const goBack = input.status === 422 ? `<p><a href="${escapeHtml(errorReturnPath(input.request ?? currentRequestMeta3().request))}">Go back</a></p>` : "";
   return `<!doctype html>
 <html lang="en">
   <head>

package/dist/entries/http/throttleMiddleware.js

@@ -284,12 +284,25 @@ var configuredErrorView = {};
 function escapeHtml(value) {
   return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;");
 }
+function errorReturnPath(request) {
+  if (!request)
+    return "/";
+  try {
+    const current = new URL(request.url);
+    const previous = new URL(request.headers.get("referer") ?? "");
+    if (previous.origin !== current.origin || (request.method === "GET" || request.method === "HEAD") && previous.pathname === current.pathname)
+      return "/";
+    return sanitizeInternalPath(previous.pathname, "/");
+  } catch {
+    return "/";
+  }
+}
 function renderKernelErrorChrome(input) {
   const title = escapeHtml(input.title);
   const message = escapeHtml(input.message);
   const errorLines = Object.entries(input.errors ?? {}).flatMap(([field, messages]) => messages.map((item) => `${field}: ${item}`)).map((line) => `<li>${escapeHtml(line)}</li>`).join("");
   const details = errorLines ? `<ul class="error-list">${errorLines}</ul>` : "";
-  const goBack = input.status === 422 ? `<p><a href="javascript:history.back()">Go back</a></p>` : "";
+  const goBack = input.status === 422 ? `<p><a href="${escapeHtml(errorReturnPath(input.request ?? currentRequestMeta3().request))}">Go back</a></p>` : "";
   return `<!doctype html>
 <html lang="en">
   <head>

package/dist/index.js

@@ -3215,7 +3215,7 @@ function mapSqliteError(error) {
     return new ConflictError("A record with these values already exists.");
   }
   if (code === "SQLITE_CONSTRAINT_FOREIGNKEY") {
-    return new UnprocessableEntityError("Referenced record does not exist.");
+    return new UnprocessableEntityError("Operation conflicts with related records.");
   }
   if (code === "SQLITE_CONSTRAINT_NOTNULL") {
     return new BadRequestError("Required field is missing.");
@@ -3260,7 +3260,7 @@ function mapDatabaseError(error) {
       if (error.detail) {
         console.error("[database] foreign-key violation", error.detail);
       }
-      return new UnprocessableEntityError("Referenced record does not exist.");
+      return new UnprocessableEntityError("Operation conflicts with related records.");
     case "23502":
       if (error.detail) {
         console.error("[database] not-null violation", error.detail);
@@ -6369,6 +6369,16 @@ var baseRepository_default = BaseRepository;
 
 // ../../src/core/crypto/fieldEncryptionRotation.ts
 init_boundConnection();
+
+// ../../src/core/database/migrations/rollbackGuard.ts
+async function guardMigrationRollback(context, guard) {
+  if (context?.operation === "fresh")
+    return;
+  if (await guard.hasHistory())
+    throw new Error(guard.message);
+}
+
+// ../../src/core/crypto/fieldEncryptionRotation.ts
 init_repositoryConnection();
 
 // ../../src/core/database/schema/columnDefinition.ts
@@ -7164,8 +7174,14 @@ function createFieldEncryptionRotationMigration(name, driver, options = {}) {
       if (options.rls)
         await db.unsafe(enableTenantRlsSql(checkpointTable.name));
     },
-    async down() {
-      throw new Error("Encryption rotation checkpoints require explicit administrative archival.");
+    async down(db, context) {
+      await guardMigrationRollback(context, {
+        hasHistory: () => true,
+        message: "Encryption rotation checkpoints require explicit administrative archival."
+      });
+      await Schema.run(db, driver, (schema) => {
+        schema.drop(checkpointTable.name);
+      });
     }
   };
 }
@@ -7520,10 +7536,10 @@ async function withMigrationLock(db, callback, lockKey = MIGRATION_LOCK_KEY) {
   }
 }
 // ../../src/core/database/migrations/runner.ts
-init_dialect();
 import { readdir } from "fs/promises";
 import { join } from "path";
 import { pathToFileURL } from "url";
+init_dialect();
 var MIGRATIONS_TABLE = "framework_migrations";
 function migrationsNameColumn() {
   return currentSqlDialect().driver === "mysql" ? "VARCHAR(255) PRIMARY KEY" : "TEXT PRIMARY KEY";
@@ -7625,13 +7641,19 @@ async function rollbackDatabase(db, migrations, options = {}) {
   return rolledBack;
 }
 async function freshDatabase(db, migrations, options = {}) {
+  if (options.destructive && isProductionEnv()) {
+    throw new Error("Destructive migration reset is only available in development/test environments.");
+  }
   const runFresh = async () => {
     const applied = await getAppliedMigrations(db);
     const appliedNames = new Set(applied.map(({ name }) => name));
     const appliedMigrations = migrations.filter(({ name }) => appliedNames.has(name));
     for (const migration of [...appliedMigrations].reverse()) {
       options.onMigration?.(migration.name);
-      await migration.down(db);
+      if (options.destructive)
+        await migration.down(db, { operation: "fresh" });
+      else
+        await migration.down(db);
     }
     if (appliedMigrations.length > 0) {
       await db.unsafe(`DELETE FROM ${MIGRATIONS_TABLE}`);
@@ -12339,12 +12361,25 @@ function configureWebErrorView(options) {
 function escapeHtml(value) {
   return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;");
 }
+function errorReturnPath(request) {
+  if (!request)
+    return "/";
+  try {
+    const current = new URL(request.url);
+    const previous = new URL(request.headers.get("referer") ?? "");
+    if (previous.origin !== current.origin || (request.method === "GET" || request.method === "HEAD") && previous.pathname === current.pathname)
+      return "/";
+    return sanitizeInternalPath(previous.pathname, "/");
+  } catch {
+    return "/";
+  }
+}
 function renderKernelErrorChrome(input) {
   const title = escapeHtml(input.title);
   const message = escapeHtml(input.message);
   const errorLines = Object.entries(input.errors ?? {}).flatMap(([field, messages]) => messages.map((item) => `${field}: ${item}`)).map((line) => `<li>${escapeHtml(line)}</li>`).join("");
   const details = errorLines ? `<ul class="error-list">${errorLines}</ul>` : "";
-  const goBack = input.status === 422 ? `<p><a href="javascript:history.back()">Go back</a></p>` : "";
+  const goBack = input.status === 422 ? `<p><a href="${escapeHtml(errorReturnPath(input.request ?? currentRequestMeta().request))}">Go back</a></p>` : "";
   return `<!doctype html>
 <html lang="en">
   <head>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getstrata/core",
-  "version": "2.2.16",
+  "version": "2.2.18",
   "description": "Strata Bun framework public API",
   "type": "module",
   "license": "MIT",