@happyvertical/smrt-tenancy 0.30.0

package/dist/fields.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Tenancy Field Types and Utilities
+ *
+ * This module provides types and utility functions for tenant ID fields.
+ * The actual field decorator is in decorators.ts.
+ *
+ * @see https://github.com/happyvertical/smrt/issues/675
+ * @see https://github.com/happyvertical/smrt/issues/829
+ */
+/**
+ * Options for the `@tenantId()` property decorator.
+ *
+ * Controls how the decorated field interacts with the tenancy interceptor.
+ * All options default to the strictest safe values: auto-filter on, required,
+ * auto-populate on, not nullable.
+ *
+ * @see tenantId
+ * @see TenantScopedOptions
+ */
+export interface TenantIdFieldOptions {
+    /**
+     * Auto-filter queries by this field
+     * @default true
+     */
+    autoFilter?: boolean;
+    /**
+     * Require this field to have a value on save
+     * @default true
+     */
+    required?: boolean;
+    /**
+     * Auto-populate from context on create if not set
+     * @default true
+     */
+    autoPopulate?: boolean;
+    /**
+     * Allow null values (for global resources)
+     * @default false
+     */
+    nullable?: boolean;
+}
+export declare const TENANT_ID_SYMBOL: unique symbol;
+/**
+ * Internal field descriptor stored in `ObjectRegistry` when `@tenantId()` is
+ * applied to a property.
+ *
+ * Consumers should use `isTenantIdField()` and `getTenantIdFieldOptions()`
+ * to inspect these descriptors rather than reading the raw properties directly.
+ *
+ * @see isTenantIdField
+ * @see getTenantIdFieldOptions
+ */
+export interface TenantIdFieldDefinition {
+    /** Field type marker */
+    type: 'foreignKey';
+    /** Reference to Tenant class (placeholder - actual class resolved at runtime) */
+    reference: 'Tenant';
+    /** SQL type */
+    sqlType: 'UUID';
+    /** Field is required */
+    required: boolean;
+    /** Field allows null */
+    nullable: boolean;
+    /** Tenancy-specific options */
+    __tenancy: TenantIdFieldOptions & {
+        isTenantIdField: true;
+    };
+}
+/**
+ * Return `true` if the given field definition was produced by the `@tenantId()`
+ * decorator (i.e., it has an `__tenancy.isTenantIdField` marker).
+ *
+ * Used internally by the interceptor and code generators to locate the tenant
+ * ID field on a class without knowing its property name in advance.
+ *
+ * @param field - A raw field definition object, typically from `ObjectRegistry`.
+ * @returns `true` if `field` is a tenant ID field definition, `false` otherwise.
+ *
+ * @example
+ * ```typescript
+ * const fields = ObjectRegistry.getFields('Document');
+ * const tenantField = Object.entries(fields).find(([, def]) => isTenantIdField(def));
+ * ```
+ *
+ * @see getTenantIdFieldOptions
+ * @see TenantIdFieldDefinition
+ */
+export declare function isTenantIdField(field: unknown): boolean;
+/**
+ * Extract the `TenantIdFieldOptions` from a field definition.
+ *
+ * Returns the tenancy-specific options (autoFilter, required, autoPopulate,
+ * nullable) stored inside the field descriptor's `__tenancy` property.
+ * Returns `null` if the field was not produced by `@tenantId()`.
+ *
+ * @param field - A raw field definition object, typically from `ObjectRegistry`.
+ * @returns The `TenantIdFieldOptions` if the field is a tenant ID field,
+ *   `null` otherwise.
+ *
+ * @see isTenantIdField
+ * @see TenantIdFieldOptions
+ */
+export declare function getTenantIdFieldOptions(field: unknown): TenantIdFieldOptions | null;
+//# sourceMappingURL=fields.d.ts.map

package/dist/fields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fields.d.ts","sourceRoot":"","sources":["../src/fields.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;;;;;;GASG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IAEnB;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAGD,eAAO,MAAM,gBAAgB,eAAqB,CAAC;AAEnD;;;;;;;;;GASG;AACH,MAAM,WAAW,uBAAuB;IACtC,wBAAwB;IACxB,IAAI,EAAE,YAAY,CAAC;IACnB,iFAAiF;IACjF,SAAS,EAAE,QAAQ,CAAC;IACpB,eAAe;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,wBAAwB;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,wBAAwB;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,+BAA+B;IAC/B,SAAS,EAAE,oBAAoB,GAAG;QAAE,eAAe,EAAE,IAAI,CAAA;KAAE,CAAC;CAC7D;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAOvD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,GACb,oBAAoB,GAAG,IAAI,CAM7B"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export { type CliContextOptions, createCliContext, createExpressMiddleware, createSvelteKitHandle, type ExpressMiddlewareOptions, type SvelteKitHandleOptions, } from './adapters/index.js';
+export { enterTenantContext, getCurrentTenant, getTenantId, hasTenantContext, isSuperAdminBypass, isSystemContext, type MinimalTenantContext, requireTenant, requireTenantId, TenantContext, type TenantContextData, TenantContextError, TenantIsolationError, withSuperAdminBypass, withSystemContext, withTenant, withTenantSync, } from './context.js';
+export { TenantScoped, type TenantScopedOptions, tenantId, } from './decorators.js';
+export { runTenantScopedEntryPoint, type TenantEntryPointOptions, } from './entry-point.js';
+export { getTenantIdFieldOptions, isTenantIdField, type TenantIdFieldDefinition, type TenantIdFieldOptions, } from './fields.js';
+export { createTenantInterceptor, disableTenancy, enableTenancy, isTenancyEnabled, type RawQueryPolicy, type TenantInterceptorOptions, } from './interceptor.js';
+export { clearTenantScopedRegistry, getAllTenantScopedClasses, getTenantScopedConfig, isTenantScopedClass, registerTenantScopedClass, type TenantScopedConfig, unregisterTenantScopedClass, } from './registry.js';
+export { assertTenantContextRequired, assertTenantIsolationViolation, createTestTenantContext, resetTenancy, type SetupTestTenancyOptions, setupTestTenancy, testTenantIsolation, } from './testing.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAKH,OAAO,wBAAwB,CAAC;AAKhC,OAAO,EACL,KAAK,iBAAiB,EAEtB,gBAAgB,EAEhB,uBAAuB,EAEvB,qBAAqB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,GAC5B,MAAM,qBAAqB,CAAC;AAI7B,OAAO,EACL,kBAAkB,EAElB,gBAAgB,EAChB,WAAW,EACX,gBAAgB,EAChB,kBAAkB,EAElB,eAAe,EACf,KAAK,oBAAoB,EACzB,aAAa,EACb,eAAe,EAEf,aAAa,EAEb,KAAK,iBAAiB,EAEtB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EAEjB,UAAU,EACV,cAAc,GACf,MAAM,cAAc,CAAC;AAKtB,OAAO,EAEL,YAAY,EACZ,KAAK,mBAAmB,EAExB,QAAQ,GACT,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EACL,yBAAyB,EACzB,KAAK,uBAAuB,GAC7B,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,GAC1B,MAAM,aAAa,CAAC;AAIrB,OAAO,EAEL,uBAAuB,EACvB,cAAc,EAEd,aAAa,EACb,gBAAgB,EAChB,KAAK,cAAc,EAEnB,KAAK,wBAAwB,GAC9B,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,yBAAyB,EACzB,KAAK,kBAAkB,EACvB,2BAA2B,GAC5B,MAAM,eAAe,CAAC;AAKvB,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,EAC9B,uBAAuB,EACvB,YAAY,EACZ,KAAK,uBAAuB,EAC5B,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,108 @@
+import { ObjectRegistry, applyPendingDecoratorRegistrations, registerCompatibleFieldDecorator } from "@happyvertical/smrt-core";
+import { c, a, b } from "./chunks/sveltekit-9eRH1RLw.js";
+import { T, a as a2, b as b2, e, g, c as c2, h, i, d, r, f, w, j, k, l } from "./chunks/context-B5CKsmMi.js";
+import { r as registerTenantScopedClass } from "./chunks/testing-C_tV23JW.js";
+import { a as a3, b as b3, c as c3, d as d2, e as e2, f as f2, g as g2, h as h2, i as i2, j as j2, k as k2, l as l2, m, s, t, u } from "./chunks/testing-C_tV23JW.js";
+ObjectRegistry.registerPackageManifest(
+  new URL("./manifest.json", import.meta.url)
+);
+function TenantScoped(options = {}) {
+  return (target, decoratorContext) => {
+    applyPendingDecoratorRegistrations(target, decoratorContext);
+    const className = target.name;
+    const config = {
+      mode: options.mode ?? "required",
+      field: options.field ?? "tenantId",
+      autoFilter: options.autoFilter ?? true,
+      autoPopulate: options.autoPopulate ?? true,
+      allowSuperAdminBypass: options.allowSuperAdminBypass ?? false
+    };
+    registerTenantScopedClass(className, config);
+    return target;
+  };
+}
+function tenantId(options = {}) {
+  const opts = {
+    autoFilter: true,
+    required: true,
+    autoPopulate: true,
+    nullable: false,
+    ...options
+  };
+  return ((targetOrValue, propertyKeyOrContext) => {
+    registerCompatibleFieldDecorator(
+      targetOrValue,
+      propertyKeyOrContext,
+      (className, propertyKey) => {
+        ObjectRegistry.registerFieldDecorator(className, propertyKey, {
+          type: "foreignKey",
+          related: "Tenant",
+          sqlType: "UUID",
+          required: opts.required,
+          nullable: opts.nullable,
+          __tenancy: {
+            ...opts,
+            isTenantIdField: true
+          }
+        });
+      }
+    );
+  });
+}
+function isTenantIdField(field) {
+  if (!field || typeof field !== "object") {
+    return false;
+  }
+  const def = field;
+  const tenancy = def.__tenancy;
+  return tenancy?.isTenantIdField === true;
+}
+function getTenantIdFieldOptions(field) {
+  if (!isTenantIdField(field)) {
+    return null;
+  }
+  const def = field;
+  return def.__tenancy;
+}
+export {
+  T as TenantContext,
+  a2 as TenantContextError,
+  b2 as TenantIsolationError,
+  TenantScoped,
+  a3 as assertTenantContextRequired,
+  b3 as assertTenantIsolationViolation,
+  c3 as clearTenantScopedRegistry,
+  c as createCliContext,
+  a as createExpressMiddleware,
+  b as createSvelteKitHandle,
+  d2 as createTenantInterceptor,
+  e2 as createTestTenantContext,
+  f2 as disableTenancy,
+  g2 as enableTenancy,
+  e as enterTenantContext,
+  h2 as getAllTenantScopedClasses,
+  g as getCurrentTenant,
+  c2 as getTenantId,
+  getTenantIdFieldOptions,
+  i2 as getTenantScopedConfig,
+  h as hasTenantContext,
+  i as isSuperAdminBypass,
+  d as isSystemContext,
+  j2 as isTenancyEnabled,
+  isTenantIdField,
+  k2 as isTenantScopedClass,
+  registerTenantScopedClass,
+  r as requireTenant,
+  f as requireTenantId,
+  l2 as resetTenancy,
+  m as runTenantScopedEntryPoint,
+  s as setupTestTenancy,
+  tenantId,
+  t as testTenantIsolation,
+  u as unregisterTenantScopedClass,
+  w as withSuperAdminBypass,
+  j as withSystemContext,
+  k as withTenant,
+  l as withTenantSync
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../src/__smrt-register__.ts","../src/decorators.ts","../src/fields.ts"],"sourcesContent":["/**\n * Self-registers this package's build-time manifest before any @smrt() decorator\n * in the package fires. Fixes issue #1132: in consumer runtimes (tsx, SvelteKit\n * SSR, plain `vite dev`) the decorator's synchronous manifest lookup previously\n * missed because no step populated the global manifest cache — classes got\n * registered with zero fields and `save()` / `toJSON()` silently dropped every\n * declared property.\n *\n * Import this module as the first statement in `src/index.ts` so its top-level\n * side effect runs ahead of any class module's @smrt() decorator.\n *\n * Silent no-op in dev/test, where the vitest plugin already populates manifests\n * via a different path. Only needs to succeed in the published dist output.\n *\n * @see https://github.com/happyvertical/smrt/issues/1132\n */\nimport { ObjectRegistry } from '@happyvertical/smrt-core';\n\n// `new URL('./manifest.json', import.meta.url)` resolves at runtime to the\n// manifest sitting next to this module's compiled output. Vite warns at build\n// time that it cannot pre-resolve the URL; that is the intended behavior —\n// the URL must resolve to dist/manifest.json at runtime, not be inlined.\nObjectRegistry.registerPackageManifest(\n  new URL('./manifest.json', import.meta.url),\n);\n","/**\n * Tenancy Decorators\n *\n * Provides class and property decorators for tenant-scoped SMRT objects.\n *\n * @example\n * ```typescript\n * import { smrt, SmrtObject } from '@happyvertical/smrt-core';\n * import { TenantScoped, tenantId } from '@happyvertical/smrt-tenancy';\n *\n * @smrt()\n * @TenantScoped({ mode: 'optional' })\n * class Document extends SmrtObject {\n *   @tenantId({ nullable: true })\n *   tenantId: string | null = null;  // null = global document\n *\n *   title: string = '';\n * }\n * ```\n *\n * @see https://github.com/happyvertical/smrt/issues/675\n * @see https://github.com/happyvertical/smrt/issues/829\n */\n\nimport {\n  applyPendingDecoratorRegistrations,\n  type CompatiblePropertyDecorator,\n  type CompatiblePropertyDecoratorContext,\n  type LegacyPropertyDecoratorTarget,\n  ObjectRegistry,\n  registerCompatibleFieldDecorator,\n} from '@happyvertical/smrt-core';\nimport type { TenantIdFieldOptions } from './fields.js';\nimport {\n  registerTenantScopedClass,\n  type TenantScopedConfig,\n} from './registry.js';\n\n/**\n * Options accepted by the `@TenantScoped()` class decorator.\n *\n * All fields are optional; defaults match the most restrictive safe behaviour\n * (required mode, auto-filter and auto-populate enabled, no super-admin bypass).\n *\n * @see TenantScoped\n * @see TenantScopedConfig\n */\nexport interface TenantScopedOptions {\n  /**\n   * Tenancy mode for this class\n   * - 'required': Must have tenant context for all operations (default)\n   * - 'optional': Works with or without tenant context\n   */\n  mode?: 'required' | 'optional';\n\n  /**\n   * Field name containing tenant ID\n   * @default 'tenantId'\n   */\n  field?: string;\n\n  /**\n   * Auto-filter all queries by tenant\n   * @default true\n   */\n  autoFilter?: boolean;\n\n  /**\n   * Auto-populate tenant ID from context on create\n   * @default true\n   */\n  autoPopulate?: boolean;\n\n  /**\n   * Allow super admin bypass for this class\n   * @default false - must be explicitly enabled\n   */\n  allowSuperAdminBypass?: boolean;\n}\n\n/**\n * Mark a class as tenant-scoped\n *\n * This decorator registers the class with the tenancy system so that:\n * - list()/get() queries are automatically filtered by tenant\n * - save() validates tenant ID matches current context\n * - delete() validates tenant ownership\n * - Raw SQL queries trigger policy enforcement\n *\n * @param options - Configuration options\n *\n * @example Basic usage (required tenancy)\n * ```typescript\n * @smrt()\n * @TenantScoped()\n * class Document extends SmrtObject {\n *   @tenantId()\n *   tenantId: string = '';\n *\n *   title: string = '';\n * }\n * ```\n *\n * @example With super admin bypass enabled\n * ```typescript\n * @smrt()\n * @TenantScoped({ allowSuperAdminBypass: true })\n * class AuditLog extends SmrtObject {\n *   @tenantId()\n *   tenantId: string = '';\n *\n *   action: string = '';\n * }\n * ```\n *\n * @example Optional tenancy (works with or without context)\n * ```typescript\n * @smrt()\n * @TenantScoped({ mode: 'optional' })\n * class GlobalConfig extends SmrtObject {\n *   @tenantId({ nullable: true })\n *   tenantId: string | null = null;  // null = global, string = tenant-specific\n *\n *   key: string = '';\n *   value: string = '';\n * }\n * ```\n */\nexport function TenantScoped(options: TenantScopedOptions = {}) {\n  return <T extends Function>(\n    target: T,\n    decoratorContext?: ClassDecoratorContext,\n  ): T => {\n    applyPendingDecoratorRegistrations(target, decoratorContext);\n\n    const className = target.name;\n\n    // Merge with defaults\n    const config: Partial<TenantScopedConfig> = {\n      mode: options.mode ?? 'required',\n      field: options.field ?? 'tenantId',\n      autoFilter: options.autoFilter ?? true,\n      autoPopulate: options.autoPopulate ?? true,\n      allowSuperAdminBypass: options.allowSuperAdminBypass ?? false,\n    };\n\n    // Register with the tenancy system\n    registerTenantScopedClass(className, config);\n\n    // Return the class unchanged\n    return target;\n  };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Property Decorator: @tenantId\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * Tenant ID property decorator\n *\n * Marks a property as the tenant identifier field. This decorator registers\n * the field metadata with ObjectRegistry, keeping the property value clean\n * (no descriptor objects that could be accidentally saved to the database).\n *\n * @param options - Field options (nullable, autoFilter, autoPopulate, etc.)\n * @returns Property decorator\n *\n * @example Basic usage (required tenancy)\n * ```typescript\n * @smrt()\n * @TenantScoped()\n * class Document extends SmrtObject {\n *   @tenantId()\n *   tenantId: string = '';\n *\n *   title: string = '';\n * }\n * ```\n *\n * @example Nullable tenant ID (for global resources)\n * ```typescript\n * @smrt()\n * @TenantScoped({ mode: 'optional' })\n * class GlobalConfig extends SmrtObject {\n *   @tenantId({ nullable: true })\n *   tenantId: string | null = null;  // null = global, string = tenant-specific\n *\n *   key: string = '';\n * }\n * ```\n *\n * @see https://github.com/happyvertical/smrt/issues/829 - Why decorators over field helpers\n */\nexport function tenantId(options: TenantIdFieldOptions = {}) {\n  const opts = {\n    autoFilter: true,\n    required: true,\n    autoPopulate: true,\n    nullable: false,\n    ...options,\n  };\n\n  return ((\n    targetOrValue: LegacyPropertyDecoratorTarget | undefined,\n    propertyKeyOrContext: CompatiblePropertyDecoratorContext<any, any>,\n  ) => {\n    registerCompatibleFieldDecorator(\n      targetOrValue,\n      propertyKeyOrContext,\n      (className, propertyKey) => {\n        ObjectRegistry.registerFieldDecorator(className, propertyKey, {\n          type: 'foreignKey',\n          related: 'Tenant',\n          sqlType: 'UUID',\n          required: opts.required,\n          nullable: opts.nullable,\n          __tenancy: {\n            ...opts,\n            isTenantIdField: true,\n          },\n        });\n      },\n    );\n  }) as CompatiblePropertyDecorator;\n}\n","/**\n * Tenancy Field Types and Utilities\n *\n * This module provides types and utility functions for tenant ID fields.\n * The actual field decorator is in decorators.ts.\n *\n * @see https://github.com/happyvertical/smrt/issues/675\n * @see https://github.com/happyvertical/smrt/issues/829\n */\n\n/**\n * Options for the `@tenantId()` property decorator.\n *\n * Controls how the decorated field interacts with the tenancy interceptor.\n * All options default to the strictest safe values: auto-filter on, required,\n * auto-populate on, not nullable.\n *\n * @see tenantId\n * @see TenantScopedOptions\n */\nexport interface TenantIdFieldOptions {\n  /**\n   * Auto-filter queries by this field\n   * @default true\n   */\n  autoFilter?: boolean;\n\n  /**\n   * Require this field to have a value on save\n   * @default true\n   */\n  required?: boolean;\n\n  /**\n   * Auto-populate from context on create if not set\n   * @default true\n   */\n  autoPopulate?: boolean;\n\n  /**\n   * Allow null values (for global resources)\n   * @default false\n   */\n  nullable?: boolean;\n}\n\n// Symbol to identify tenantId fields\nexport const TENANT_ID_SYMBOL = Symbol('tenantId');\n\n/**\n * Internal field descriptor stored in `ObjectRegistry` when `@tenantId()` is\n * applied to a property.\n *\n * Consumers should use `isTenantIdField()` and `getTenantIdFieldOptions()`\n * to inspect these descriptors rather than reading the raw properties directly.\n *\n * @see isTenantIdField\n * @see getTenantIdFieldOptions\n */\nexport interface TenantIdFieldDefinition {\n  /** Field type marker */\n  type: 'foreignKey';\n  /** Reference to Tenant class (placeholder - actual class resolved at runtime) */\n  reference: 'Tenant';\n  /** SQL type */\n  sqlType: 'UUID';\n  /** Field is required */\n  required: boolean;\n  /** Field allows null */\n  nullable: boolean;\n  /** Tenancy-specific options */\n  __tenancy: TenantIdFieldOptions & { isTenantIdField: true };\n}\n\n/**\n * Return `true` if the given field definition was produced by the `@tenantId()`\n * decorator (i.e., it has an `__tenancy.isTenantIdField` marker).\n *\n * Used internally by the interceptor and code generators to locate the tenant\n * ID field on a class without knowing its property name in advance.\n *\n * @param field - A raw field definition object, typically from `ObjectRegistry`.\n * @returns `true` if `field` is a tenant ID field definition, `false` otherwise.\n *\n * @example\n * ```typescript\n * const fields = ObjectRegistry.getFields('Document');\n * const tenantField = Object.entries(fields).find(([, def]) => isTenantIdField(def));\n * ```\n *\n * @see getTenantIdFieldOptions\n * @see TenantIdFieldDefinition\n */\nexport function isTenantIdField(field: unknown): boolean {\n  if (!field || typeof field !== 'object') {\n    return false;\n  }\n  const def = field as Record<string, unknown>;\n  const tenancy = def.__tenancy as Record<string, unknown> | undefined;\n  return tenancy?.isTenantIdField === true;\n}\n\n/**\n * Extract the `TenantIdFieldOptions` from a field definition.\n *\n * Returns the tenancy-specific options (autoFilter, required, autoPopulate,\n * nullable) stored inside the field descriptor's `__tenancy` property.\n * Returns `null` if the field was not produced by `@tenantId()`.\n *\n * @param field - A raw field definition object, typically from `ObjectRegistry`.\n * @returns The `TenantIdFieldOptions` if the field is a tenant ID field,\n *   `null` otherwise.\n *\n * @see isTenantIdField\n * @see TenantIdFieldOptions\n */\nexport function getTenantIdFieldOptions(\n  field: unknown,\n): TenantIdFieldOptions | null {\n  if (!isTenantIdField(field)) {\n    return null;\n  }\n  const def = field as { __tenancy: TenantIdFieldOptions };\n  return def.__tenancy;\n}\n"],"names":[],"mappings":";;;;;AAsBA,eAAe;AAAA,EACb,IAAA,IAAA,mBAAA,YAAA,GAAA;AACF;ACwGO,SAAS,aAAa,UAA+B,IAAI;AAC9D,SAAO,CACL,QACA,qBACM;AACN,uCAAmC,QAAQ,gBAAgB;AAE3D,UAAM,YAAY,OAAO;AAGzB,UAAM,SAAsC;AAAA,MAC1C,MAAM,QAAQ,QAAQ;AAAA,MACtB,OAAO,QAAQ,SAAS;AAAA,MACxB,YAAY,QAAQ,cAAc;AAAA,MAClC,cAAc,QAAQ,gBAAgB;AAAA,MACtC,uBAAuB,QAAQ,yBAAyB;AAAA,IAAA;AAI1D,8BAA0B,WAAW,MAAM;AAG3C,WAAO;AAAA,EACT;AACF;AA0CO,SAAS,SAAS,UAAgC,IAAI;AAC3D,QAAM,OAAO;AAAA,IACX,YAAY;AAAA,IACZ,UAAU;AAAA,IACV,cAAc;AAAA,IACd,UAAU;AAAA,IACV,GAAG;AAAA,EAAA;AAGL,UAAQ,CACN,eACA,yBACG;AACH;AAAA,MACE;AAAA,MACA;AAAA,MACA,CAAC,WAAW,gBAAgB;AAC1B,uBAAe,uBAAuB,WAAW,aAAa;AAAA,UAC5D,MAAM;AAAA,UACN,SAAS;AAAA,UACT,SAAS;AAAA,UACT,UAAU,KAAK;AAAA,UACf,UAAU,KAAK;AAAA,UACf,WAAW;AAAA,YACT,GAAG;AAAA,YACH,iBAAiB;AAAA,UAAA;AAAA,QACnB,CACD;AAAA,MACH;AAAA,IAAA;AAAA,EAEJ;AACF;ACpIO,SAAS,gBAAgB,OAAyB;AACvD,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,WAAO;AAAA,EACT;AACA,QAAM,MAAM;AACZ,QAAM,UAAU,IAAI;AACpB,SAAO,SAAS,oBAAoB;AACtC;AAgBO,SAAS,wBACd,OAC6B;AAC7B,MAAI,CAAC,gBAAgB,KAAK,GAAG;AAC3B,WAAO;AAAA,EACT;AACA,QAAM,MAAM;AACZ,SAAO,IAAI;AACb;"}

package/dist/interceptor.d.ts

@@ -0,0 +1,156 @@
+import { CollectionInterceptor, DispatchBus, InterceptorContext } from '@happyvertical/smrt-core';
+import { isTenancyEnabled } from './enabled-state.js';
+/**
+ * Policy controlling what happens when raw SQL is executed against a
+ * tenant-scoped class without an explicit bypass.
+ *
+ * - `'throw'` — Raises a `TenantIsolationError` (most secure; default).
+ * - `'warn'`  — Logs a `console.warn` but allows the query to proceed (useful
+ *               during migration periods).
+ * - `'allow'` — Silently allows the query; not recommended for production.
+ *
+ * @see TenantInterceptorOptions.rawQueryPolicy
+ * @see enableTenancy
+ */
+export type RawQueryPolicy = 'throw' | 'warn' | 'allow';
+/**
+ * Configuration options accepted by `createTenantInterceptor()` and
+ * `enableTenancy()`.
+ *
+ * All options are optional; reasonable defaults are applied.  The callback
+ * hooks (`onRawQuery`, `onMissingContext`, `onIsolationViolation`) are useful
+ * for logging and alerting without altering the enforcement behaviour.
+ *
+ * @see createTenantInterceptor
+ * @see enableTenancy
+ */
+export interface TenantInterceptorOptions {
+    /**
+     * Policy for raw SQL queries on tenant-scoped classes
+     * - 'throw': Throw error (most secure, default)
+     * - 'warn': Log warning but allow (for migration)
+     * - 'allow': Silently allow (not recommended for production)
+     * @default 'throw'
+     */
+    rawQueryPolicy?: RawQueryPolicy;
+    /**
+     * Called when a raw query is attempted on a tenant-scoped class
+     * Useful for logging/auditing
+     */
+    onRawQuery?: (className: string, sql: string, context: InterceptorContext) => void;
+    /**
+     * Called when tenant context is missing for a tenant-scoped operation
+     */
+    onMissingContext?: (className: string, operation: string, context: InterceptorContext) => void;
+    /**
+     * Called when an isolation violation is detected
+     */
+    onIsolationViolation?: (className: string, expectedTenantId: string, actualTenantId: string, context: InterceptorContext) => void;
+    /**
+     * DispatchBus instance for emitting provisioning events on lifecycle changes.
+     * When provided along with directoryClasses, afterSave/afterDelete hooks
+     * emit dispatches like `directory.membership.created`.
+     */
+    dispatchBus?: DispatchBus;
+    /**
+     * Class names to emit directory dispatches for on save/delete lifecycle events.
+     * Only classes listed here will trigger dispatch emissions.
+     * @example ['Tenant', 'Membership', 'User']
+     */
+    directoryClasses?: string[];
+}
+/**
+ * Create a `CollectionInterceptor` that enforces tenant isolation on all
+ * `SmrtCollection` operations.
+ *
+ * The returned interceptor hooks into the smrt-core `GlobalInterceptors`
+ * pipeline at priority 100 (runs before all other interceptors) and
+ * handles the following lifecycle hooks:
+ *
+ * | Hook          | Behaviour |
+ * |---------------|-----------|
+ * | `beforeList`  | Injects tenant filter into `WHERE`; validates explicit filters. |
+ * | `beforeGet`   | Converts ID lookups to `{ id, tenantId }` filter objects. |
+ * | `beforeSave`  | Auto-populates `tenantId`; validates existing values. |
+ * | `beforeDelete`| Validates the instance's `tenantId` matches context. |
+ * | `beforeQuery` | Enforces `rawQueryPolicy` on raw SQL calls. |
+ * | `afterSave`   | Emits `directory.<class>.created/updated` via `dispatchBus`. |
+ * | `afterDelete` | Emits `directory.<class>.deleted` via `dispatchBus`. |
+ *
+ * Use `enableTenancy()` to register the interceptor globally.  Call this
+ * directly only when you need multiple interceptor instances (e.g., for
+ * isolated tests or feature flags).
+ *
+ * @param options - Configuration for the interceptor.
+ * @returns A `CollectionInterceptor` ready to be registered with
+ *   `GlobalInterceptors.register()`.
+ *
+ * @example
+ * ```typescript
+ * import { createTenantInterceptor } from '@happyvertical/smrt-tenancy';
+ * import { GlobalInterceptors } from '@happyvertical/smrt-core';
+ *
+ * const interceptor = createTenantInterceptor({ rawQueryPolicy: 'warn' });
+ * GlobalInterceptors.register(interceptor);
+ * ```
+ *
+ * @see enableTenancy
+ * @see TenantInterceptorOptions
+ */
+export declare function createTenantInterceptor(options?: TenantInterceptorOptions): CollectionInterceptor;
+/**
+ * Enable tenant enforcement globally
+ *
+ * Call this once at application startup to enable automatic tenant isolation.
+ *
+ * @param options - Configuration options
+ *
+ * @example
+ * ```typescript
+ * // In your app initialization
+ * import { enableTenancy } from '@happyvertical/smrt-tenancy';
+ *
+ * enableTenancy({
+ *   rawQueryPolicy: 'throw',
+ *   onMissingContext: (className, operation) => {
+ *     console.error(`Missing tenant context for ${operation} on ${className}`);
+ *   }
+ * });
+ * ```
+ */
+export declare function enableTenancy(options?: TenantInterceptorOptions): void;
+/**
+ * Disable global tenant enforcement.
+ *
+ * Unregisters the interceptor previously installed by `enableTenancy()` and
+ * resets the internal enabled flag so `enableTenancy()` can be called again.
+ * Idempotent — safe to call even when tenancy was never enabled.
+ *
+ * Common use-cases:
+ * - Test teardown (via `resetTenancy()`).
+ * - Temporarily disabling tenancy before reconfiguring with new options.
+ *
+ * @example
+ * ```typescript
+ * afterAll(() => {
+ *   disableTenancy();
+ * });
+ * ```
+ *
+ * @see enableTenancy
+ * @see isTenancyEnabled
+ * @see resetTenancy
+ */
+export declare function disableTenancy(): void;
+/**
+ * Return `true` if tenant enforcement is currently active.
+ *
+ * Reflects whether `enableTenancy()` has been called and the interceptor has not
+ * yet been removed by `disableTenancy()`. Re-exported from `enabled-state.ts`
+ * (the shared leaf module) so the public API surface is unchanged.
+ *
+ * @see enableTenancy
+ * @see disableTenancy
+ */
+export { isTenancyEnabled };
+//# sourceMappingURL=interceptor.d.ts.map

package/dist/interceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interceptor.d.ts","sourceRoot":"","sources":["../src/interceptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAEhB,KAAK,kBAAkB,EAMxB,MAAM,0BAA0B,CAAC;AASlC,OAAO,EAAE,gBAAgB,EAAqB,MAAM,oBAAoB,CAAC;AAMzE;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;AAExD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAEhC;;;OAGG;IACH,UAAU,CAAC,EAAE,CACX,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,kBAAkB,KACxB,IAAI,CAAC;IAEV;;OAEG;IACH,gBAAgB,CAAC,EAAE,CACjB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,kBAAkB,KACxB,IAAI,CAAC;IAEV;;OAEG;IACH,oBAAoB,CAAC,EAAE,CACrB,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,kBAAkB,KACxB,IAAI,CAAC;IAEV;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAE1B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AA2CD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,GAAE,wBAA6B,GACrC,qBAAqB,CA6ZvB;AAWD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,aAAa,CAAC,OAAO,GAAE,wBAA6B,GAAG,IAAI,CAuB1E;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,cAAc,IAAI,IAAI,CAarC;AAED;;;;;;;;;GASG;AACH,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/manifest.json

@@ -0,0 +1,11 @@
+{
+  "version": "1.0.0",
+  "timestamp": 1782177071262,
+  "packageName": "@happyvertical/smrt-tenancy",
+  "packageVersion": "0.30.0",
+  "objects": {},
+  "moduleType": "smrt",
+  "smrtDependencies": [
+    "@happyvertical/smrt-core"
+  ]
+}

package/dist/playground.d.ts

@@ -0,0 +1,2 @@
+export { default } from './svelte/playground.js';
+//# sourceMappingURL=playground.d.ts.map

package/dist/playground.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"playground.d.ts","sourceRoot":"","sources":["../src/playground.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/playground.js

@@ -0,0 +1,80 @@
+import { TENANCY_MODULE_META } from "./ui.js";
+const noop = () => {
+};
+const sampleTenants = [
+  {
+    id: "tenant-riverstone",
+    name: "Riverstone Newsroom",
+    slug: "riverstone-newsroom",
+    status: "active"
+  },
+  {
+    id: "tenant-harbor",
+    name: "Harbor Labs",
+    slug: "harbor-labs",
+    status: "suspended"
+  }
+];
+const sampleMemberships = [
+  {
+    id: "membership-riverstone",
+    tenantId: "tenant-riverstone"
+  },
+  {
+    id: "membership-harbor",
+    tenantId: "tenant-harbor"
+  }
+];
+const loadTenantCard = () => import("./svelte/components/TenantCard.svelte");
+const loadTenantSwitcher = () => import("./svelte/components/TenantSwitcher.svelte");
+const playground = {
+  packageName: "@happyvertical/smrt-tenancy",
+  displayName: TENANCY_MODULE_META.displayName,
+  description: TENANCY_MODULE_META.description,
+  moduleMeta: TENANCY_MODULE_META,
+  entries: [
+    {
+      id: "tenant-card",
+      title: "Tenant Card",
+      description: "Tenant identity and status card with optional membership count and actions.",
+      loadComponent: loadTenantCard,
+      order: 1,
+      props: {
+        tenant: sampleTenants[0],
+        memberCount: 18,
+        selected: true,
+        actions: true,
+        onclick: noop,
+        onedit: noop,
+        ondelete: noop
+      },
+      modes: {
+        mock: {
+          label: "Mock"
+        }
+      }
+    },
+    {
+      id: "tenant-switcher",
+      title: "Tenant Switcher",
+      description: "Membership-aware tenant selector used for multi-tenant application shells.",
+      loadComponent: loadTenantSwitcher,
+      order: 2,
+      props: {
+        memberships: sampleMemberships,
+        tenants: new Map(sampleTenants.map((tenant) => [tenant.id, tenant])),
+        currentTenantId: "tenant-riverstone",
+        onchange: noop
+      },
+      modes: {
+        mock: {
+          label: "Mock"
+        }
+      }
+    }
+  ]
+};
+export {
+  playground as default
+};
+//# sourceMappingURL=playground.js.map

package/dist/playground.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"playground.js","sources":["../src/svelte/playground.ts"],"sourcesContent":["import { TENANCY_MODULE_META } from '../ui.js';\n\nconst noop = () => {};\n\nconst sampleTenants = [\n  {\n    id: 'tenant-riverstone',\n    name: 'Riverstone Newsroom',\n    slug: 'riverstone-newsroom',\n    status: 'active',\n  },\n  {\n    id: 'tenant-harbor',\n    name: 'Harbor Labs',\n    slug: 'harbor-labs',\n    status: 'suspended',\n  },\n];\n\nconst sampleMemberships = [\n  {\n    id: 'membership-riverstone',\n    tenantId: 'tenant-riverstone',\n  },\n  {\n    id: 'membership-harbor',\n    tenantId: 'tenant-harbor',\n  },\n];\n\nconst loadTenantCard = () => import('./components/TenantCard.svelte');\nconst loadTenantSwitcher = () => import('./components/TenantSwitcher.svelte');\n\nexport default {\n  packageName: '@happyvertical/smrt-tenancy',\n  displayName: TENANCY_MODULE_META.displayName,\n  description: TENANCY_MODULE_META.description,\n  moduleMeta: TENANCY_MODULE_META,\n  entries: [\n    {\n      id: 'tenant-card',\n      title: 'Tenant Card',\n      description:\n        'Tenant identity and status card with optional membership count and actions.',\n      loadComponent: loadTenantCard,\n      order: 1,\n      props: {\n        tenant: sampleTenants[0],\n        memberCount: 18,\n        selected: true,\n        actions: true,\n        onclick: noop,\n        onedit: noop,\n        ondelete: noop,\n      },\n      modes: {\n        mock: {\n          label: 'Mock',\n        },\n      },\n    },\n    {\n      id: 'tenant-switcher',\n      title: 'Tenant Switcher',\n      description:\n        'Membership-aware tenant selector used for multi-tenant application shells.',\n      loadComponent: loadTenantSwitcher,\n      order: 2,\n      props: {\n        memberships: sampleMemberships,\n        tenants: new Map(sampleTenants.map((tenant) => [tenant.id, tenant])),\n        currentTenantId: 'tenant-riverstone',\n        onchange: noop,\n      },\n      modes: {\n        mock: {\n          label: 'Mock',\n        },\n      },\n    },\n  ],\n};\n"],"names":[],"mappings":";AAEA,MAAM,OAAO,MAAM;AAAC;AAEpB,MAAM,gBAAgB;AAAA,EACpB;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,EAAA;AAAA,EAEV;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,EAAA;AAEZ;AAEA,MAAM,oBAAoB;AAAA,EACxB;AAAA,IACE,IAAI;AAAA,IACJ,UAAU;AAAA,EAAA;AAAA,EAEZ;AAAA,IACE,IAAI;AAAA,IACJ,UAAU;AAAA,EAAA;AAEd;AAEA,MAAM,iBAAiB,MAAM,OAAO,uCAAgC;AACpE,MAAM,qBAAqB,MAAM,OAAO,2CAAoC;AAE5E,MAAA,aAAe;AAAA,EACb,aAAa;AAAA,EACb,aAAa,oBAAoB;AAAA,EACjC,aAAa,oBAAoB;AAAA,EACjC,YAAY;AAAA,EACZ,SAAS;AAAA,IACP;AAAA,MACE,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,aACE;AAAA,MACF,eAAe;AAAA,MACf,OAAO;AAAA,MACP,OAAO;AAAA,QACL,QAAQ,cAAc,CAAC;AAAA,QACvB,aAAa;AAAA,QACb,UAAU;AAAA,QACV,SAAS;AAAA,QACT,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,UAAU;AAAA,MAAA;AAAA,MAEZ,OAAO;AAAA,QACL,MAAM;AAAA,UACJ,OAAO;AAAA,QAAA;AAAA,MACT;AAAA,IACF;AAAA,IAEF;AAAA,MACE,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,aACE;AAAA,MACF,eAAe;AAAA,MACf,OAAO;AAAA,MACP,OAAO;AAAA,QACL,aAAa;AAAA,QACb,SAAS,IAAI,IAAI,cAAc,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC;AAAA,QACnE,iBAAiB;AAAA,QACjB,UAAU;AAAA,MAAA;AAAA,MAEZ,OAAO;AAAA,QACL,MAAM;AAAA,UACJ,OAAO;AAAA,QAAA;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEJ;"}