@getstrata/core 2.2.17 → 2.2.18

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # @getstrata/core changelog
 
+## 2.2.18
+
+Add optional typed guardMigrationRollback for application-owned rollback history predicates; skip history reads only during explicit development fresh resets, propagate predicate failures, and reuse the contract for encryption-checkpoint archival protection. Document guard placement and unchanged reset/rollback safety; cover type, runner and real SQLite history regressions.
+
 ## 2.2.17
 
 Add explicit development-only migration reset context while preserving guarded rollback and encryption archival; align generated fresh entries and reject production/staging or unsupported reset arguments before provisioning. Replace CSP-blocked error-page JavaScript navigation with safe same-origin links, and correct ambiguous Postgres/SQLite foreign-key messages without changing their HTTP status.

package/dist/core/database/migrations/rollbackGuard.d.ts

@@ -0,0 +1,10 @@
+import type { MigrationDownContext } from "./types.ts";
+interface MigrationRollbackGuard {
+    /** Application-owned history check. It is not evaluated during an explicit fresh reset. */
+    hasHistory(): boolean | Promise<boolean>;
+    message: string;
+}
+/** Await before destructive DDL. Predicate failures propagate; ordinary rollback remains guarded. */
+declare function guardMigrationRollback(context: MigrationDownContext | undefined, guard: MigrationRollbackGuard): Promise<void>;
+export type { MigrationRollbackGuard };
+export { guardMigrationRollback };

package/dist/core/database/migrations/runner.d.ts

@@ -23,4 +23,5 @@ declare function freshDatabase(db: MigrationDatabase, migrations: Migration[], o
     destructive?: boolean;
 }): Promise<void>;
 export { withMigrationLock } from "./advisoryLock.ts";
+export { guardMigrationRollback, type MigrationRollbackGuard } from "./rollbackGuard.ts";
 export { ensureMigrationsTable, freshDatabase, getAppliedMigrations, getMigrationStatus, loadMigrationsFromDirectory, migrateDatabase, rollbackDatabase, runPendingMigrations, };

package/dist/entries/database/migrations.js

@@ -265,6 +265,13 @@ async function withMigrationLock(db, callback, lockKey = MIGRATION_LOCK_KEY) {
     await db.unsafe("SELECT pg_advisory_unlock($1)", [lockKey]);
   }
 }
+// ../../src/core/database/migrations/rollbackGuard.ts
+async function guardMigrationRollback(context, guard) {
+  if (context?.operation === "fresh")
+    return;
+  if (await guard.hasHistory())
+    throw new Error(guard.message);
+}
 
 // ../../src/core/database/migrations/runner.ts
 var MIGRATIONS_TABLE = "framework_migrations";
@@ -398,6 +405,7 @@ export {
   freshDatabase,
   getAppliedMigrations,
   getMigrationStatus,
+  guardMigrationRollback,
   loadMigrationsFromDirectory,
   migrateDatabase,
   rollbackDatabase,

package/dist/index.js

@@ -6369,6 +6369,16 @@ var baseRepository_default = BaseRepository;
 
 // ../../src/core/crypto/fieldEncryptionRotation.ts
 init_boundConnection();
+
+// ../../src/core/database/migrations/rollbackGuard.ts
+async function guardMigrationRollback(context, guard) {
+  if (context?.operation === "fresh")
+    return;
+  if (await guard.hasHistory())
+    throw new Error(guard.message);
+}
+
+// ../../src/core/crypto/fieldEncryptionRotation.ts
 init_repositoryConnection();
 
 // ../../src/core/database/schema/columnDefinition.ts
@@ -7165,13 +7175,13 @@ function createFieldEncryptionRotationMigration(name, driver, options = {}) {
         await db.unsafe(enableTenantRlsSql(checkpointTable.name));
     },
     async down(db, context) {
-      if (context?.operation === "fresh") {
-        await Schema.run(db, driver, (schema) => {
-          schema.drop(checkpointTable.name);
-        });
-        return;
-      }
-      throw new Error("Encryption rotation checkpoints require explicit administrative archival.");
+      await guardMigrationRollback(context, {
+        hasHistory: () => true,
+        message: "Encryption rotation checkpoints require explicit administrative archival."
+      });
+      await Schema.run(db, driver, (schema) => {
+        schema.drop(checkpointTable.name);
+      });
     }
   };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getstrata/core",
-  "version": "2.2.17",
+  "version": "2.2.18",
   "description": "Strata Bun framework public API",
   "type": "module",
   "license": "MIT",