@heavybit/shared-lib 2.1.0 → 2.7.0

package/dist/cjs/config/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/config/index.ts"],"names":[],"mappings":";;;AAoDA,wCAIC;AAGD,gCAYC;AAKD,0BAQC;AApFD,qCAAmD;AACnD,yCAAoC;AACpC,6BAAwB;AAExB;;;;GAIG;AACU,QAAA,UAAU,GAAG,OAAC,CAAC,MAAM,CAAC;IACjC,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACzF,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,mFAAmF;IACnF,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC1C,SAAS,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxE,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACpC,gDAAgD;IAChD,qBAAqB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IACzC,4DAA4D;IAC5D,uBAAuB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;CAC5C,CAAC,CAAC;AAEU,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAClC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IACxC,OAAO,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACzD,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IACnC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACnC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,WAAW,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CAC5D,CAAC,CAAC;AAEU,QAAA,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC;IACnC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IAC9C,aAAa,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC/D,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IAC1C,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IAC9C,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IACvC,kFAAkF;IAClF,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,gBAAgB,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC;CAC3F,CAAC,CAAC;AAEU,QAAA,QAAQ,GAAG,OAAC,CAAC,MAAM,CAAC;IAC/B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,kFAAkF;IAClF,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACrC,CAAC,CAAC;AAEH,oFAAoF;AACpF,SAAgB,cAAc,CAAC,GAAiC;IAC9D,IAAI,GAAG,CAAC,YAAY;QAAE,OAAO,GAAG,CAAC,YAAY,CAAC;IAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,cAAc,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7G,OAAO,UAAU,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,aAAa,IAAI,KAAK,EAAE,CAAC;AAC3J,CAAC;AAED,iGAAiG;AACjG,SAAgB,UAAU,CAAC,IAAI,GAAG,IAAA,mBAAO,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC;IAC9D,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC;QAAE,OAAO;IAC9B,KAAK,MAAM,IAAI,IAAI,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACxB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjI,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,MAAa,WAAY,SAAQ,KAAK;CAAG;AAAzC,kCAAyC;AAEzC,qGAAqG;AACrG,SAAgB,OAAO,CAAyB,MAAS,EAAE,SAA4B,OAAO,CAAC,GAAG,EAAE,UAAgC,EAAE;IACpI,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO,CAAC,GAAG;QAAE,UAAU,EAAE,CAAC;IACrE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/F,MAAM,IAAI,WAAW,CAAC,uCAAuC,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,2DAA2D;AACpD,MAAM,WAAW,GAAG,CAAC,KAAyB,EAAY,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAArH,QAAA,WAAW,eAA0G"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/config/index.ts"],"names":[],"mappings":";;;AAmFA,wCAIC;AAQD,gCAYC;AAuBD,8CAEC;AAiCD,8CAEC;AAqBD,4BAOC;AAwBD,0BAaC;AAxOD,qCAAmD;AACnD,yCAAoC;AACpC,6BAAwB;AACxB,2EAAuG;AAEvG;;;;;GAKG;AAEH,sEAAsE;AACzD,QAAA,UAAU,GAAG,OAAC,CAAC,MAAM,CAAC;IACjC,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACzF,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,mFAAmF;IACnF,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC1C,SAAS,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxE,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACpC,0HAA0H;IAC1H,sBAAsB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;CAC3C,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,yFAAyF;IACzF,qBAAqB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4CAAoB,CAAC,CAAC,QAAQ,EAAE;IACxE,yFAAyF;IACzF,2BAA2B,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,sDAA8B,CAAC,CAAC,QAAQ,EAAE;IACtF,8EAA8E;IAC9E,4BAA4B,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAEH,qDAAqD;AACxC,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAClC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IACxC,OAAO,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACzD,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IACnC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACnC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,WAAW,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CAC5D,CAAC,CAAC;AAEH,qDAAqD;AACxC,QAAA,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC;IACnC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IAC9C,aAAa,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC/D,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IAC1C,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IAC9C,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IACvC,kFAAkF;IAClF,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,gBAAgB,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC;CAC3F,CAAC,CAAC;AAEH,iHAAiH;AACpG,QAAA,QAAQ,GAAG,OAAC,CAAC,MAAM,CAAC;IAC/B,kEAAkE;IAClE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IAC3C,UAAU,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC5D,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD;;;OAGG;IACH,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,QAAQ,EAAE;CAC5E,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,SAAgB,cAAc,CAAC,GAAiC;IAC9D,IAAI,GAAG,CAAC,YAAY;QAAE,OAAO,GAAG,CAAC,YAAY,CAAC;IAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,cAAc,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7G,OAAO,UAAU,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,aAAa,IAAI,KAAK,EAAE,CAAC;AAC3J,CAAC;AAED;;;;;GAKG;AACH,SAAgB,UAAU,CAAC,IAAI,GAAG,IAAA,mBAAO,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC;IAC9D,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC;QAAE,OAAO;IAC9B,KAAK,MAAM,IAAI,IAAI,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACxB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjI,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,MAAa,WAAY,SAAQ,KAAK;CAAG;AAAzC,kCAAyC;AAEzC;;;GAGG;AACU,QAAA,OAAO,GAAG,kBAAU,CAAC,KAAK,CAAC,mBAAW,CAAC,CAAC,KAAK,CAAC,gBAAQ,CAAC,CAAC,KAAK,CAAC,oBAAY,CAAC,CAAC,KAAK,CAAC,0BAAkB,CAAC,CAAC;AAEnH,sGAAsG;AACzF,QAAA,qBAAqB,GAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC,CAAC;AAE5G,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAEnF;;;;;;GAMG;AACH,SAAgB,iBAAiB,CAAC,UAA8B,OAAO,CAAC,GAAG,CAAC,QAAQ;IAClF,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACxD,CAAC;AAUD,SAAS,eAAe,CAAC,MAAoB,EAAE,MAAiB;IAC9D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAiB,EAAE,QAA2B;IACtE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACnD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAkB,EAAE,CAAC,CAAC,CAAC;AACjH,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,iBAAiB,CAAC,QAAsB;IACtD,OAAO,uCAAuC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC9G,CAAC;AAUD;;;;;;;;;;GAUG;AACH,SAAgB,QAAQ,CAAyB,MAAS,EAAE,SAAoB,OAAO,CAAC,GAAG,EAAE,UAA2B,EAAE;IACxH,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO,CAAC,GAAG;QAAE,UAAU,EAAE,CAAC;IACrE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,gBAAgB,IAAI,6BAAqB,CAAC,CAAC,CAAC;IAC3K,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;IACvF,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAcD;;;;;;;;;GASG;AACH,SAAgB,OAAO,CACrB,MAAU,EACV,UAAyC,EAAE;IAE3C,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,eAAO,CAAM,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,OAAO,CAA4B,CAAC;IAC7F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC;YAAE,MAAM,KAAK,CAAC;QACjD,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;QACxF,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACI,MAAM,WAAW,GAAG,CAAC,KAAyB,EAAY,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAArH,QAAA,WAAW,eAA0G"}

package/dist/cjs/contracts/notification-dispatch.js

@@ -47,7 +47,7 @@ exports.dispatchValueSchema = zod_1.z.union([zod_1.z.string().max(exports.DISPAT
  * Who receives a dispatch. `userId` is needed for per-user channels such as an in-app feed;
  * addresses with no account behind them carry only `email`.
  *
- * @example { email: 'wanjiru@example.com', name: 'Wanjiru', userId: '01J…', timezone: 'Africa/Nairobi' }
+ * @example { email: 'ada@example.com', name: 'Ada', userId: '01J…', timezone: 'Europe/Lisbon' }
  */
 exports.dispatchRecipientSchema = zod_1.z.object({
     email: zod_1.z.string().trim().email().max(exports.DISPATCH_LIMITS.email),

package/dist/cjs/database/db.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createDb = createDb;
+exports.knexConfig = knexConfig;
+exports.connectionOptions = connectionOptions;
+const mysql2_1 = require("drizzle-orm/mysql2");
+const pool_js_1 = require("./pool.js");
+/**
+ * Creates the service's Drizzle database. There is no module-level singleton: call it once in
+ * `container.ts` and inject `db` into repositories.
+ *
+ * @example const { db, ping, close } = createDb({ env: config, schema });
+ */
+function createDb(options) {
+    const { env, schema } = options;
+    const pool = options.pool ?? (0, pool_js_1.createMysqlPool)(connectionOptions(env));
+    const db = (0, mysql2_1.drizzle)(pool, { schema, mode: 'default' });
+    return {
+        db,
+        ping: () => (0, pool_js_1.pingMysql)(pool),
+        close: () => pool.end(),
+    };
+}
+/**
+ * Knex config for a service's `knexfile.js`. Knex runs **migrations and seeds only** (`.cjs` files
+ * in `./migrations` and `./seeds`); repositories use Drizzle.
+ *
+ * @example module.exports = knexConfig(config);
+ */
+function knexConfig(env) {
+    return (0, pool_js_1.createKnexConfig)(connectionOptions(env));
+}
+/** Maps the validated `DB_*` env to connection options. */
+function connectionOptions(env) {
+    return { host: env.DB_HOST, port: env.DB_PORT, user: env.DB_USER, password: env.DB_PASSWORD, database: env.DB_NAME, poolMax: env.DB_POOL_MAX };
+}
+//# sourceMappingURL=db.js.map

package/dist/cjs/database/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../../src/database/db.ts"],"names":[],"mappings":";;AAyCA,4BASC;AAQD,gCAEC;AAGD,8CAEC;AAhED,+CAAkE;AAIlE,uCAAsG;AA8BtG;;;;;GAKG;AACH,SAAgB,QAAQ,CAA0C,OAAiC;IACjG,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAA,yBAAe,EAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;IACrE,MAAM,EAAE,GAAG,IAAA,gBAAO,EAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAsB,CAAC;IAC3E,OAAO;QACL,EAAE;QACF,IAAI,EAAE,GAAG,EAAE,CAAC,IAAA,mBAAS,EAAC,IAAI,CAAC;QAC3B,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;KACxB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,UAAU,CAAC,GAAgB;IACzC,OAAO,IAAA,0BAAgB,EAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,2DAA2D;AAC3D,SAAgB,iBAAiB,CAAC,GAAgB;IAChD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;AACjJ,CAAC"}

package/dist/cjs/database/index.js

@@ -1,57 +1,28 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createMysqlPool = createMysqlPool;
-exports.createKnexConfig = createKnexConfig;
-exports.pingMysql = pingMysql;
-exports.escapeLike = escapeLike;
-const promise_1 = __importDefault(require("mysql2/promise"));
 /**
- * mysql2 pool for Drizzle. Sessions run in UTC and utf8mb4 so timestamps and emoji round-trip
- * unchanged regardless of server defaults.
+ * `@heavybit/shared-lib/database`: Drizzle data access for services. Repositories use Drizzle
+ * through {@link ScopedRepository} and the scopes in `scopes.ts`; raw scoped queries and Knex in
+ * `src/` are forbidden. Knex is for migrations and seeds only (`knexConfig`, `@heavybit/shared-lib/knex`).
  */
-function createMysqlPool(options) {
-    return promise_1.default.createPool({
-        host: options.host,
-        port: options.port,
-        user: options.user,
-        password: options.password,
-        database: options.database,
-        connectionLimit: options.poolMax ?? 10,
-        waitForConnections: true,
-        enableKeepAlive: true,
-        timezone: 'Z',
-        charset: 'utf8mb4_unicode_ci',
-        dateStrings: false,
-        supportBigNumbers: true,
-    });
-}
-/** Knex config for migrations/seeds and query-builder use (same session settings as the pool). */
-function createKnexConfig(options) {
-    return {
-        client: 'mysql2',
-        connection: {
-            host: options.host,
-            port: options.port,
-            user: options.user,
-            password: options.password,
-            database: options.database,
-            timezone: 'Z',
-            charset: 'utf8mb4',
-        },
-        pool: { min: 0, max: options.poolMax ?? 10 },
-        migrations: { directory: options.migrationsDir ?? './migrations', tableName: 'knex_migrations', loadExtensions: ['.cjs', '.js'] },
-        seeds: { directory: options.seedsDir ?? './seeds', loadExtensions: ['.cjs', '.js'] },
-    };
-}
-/** Readiness probe helper. */
-async function pingMysql(pool) {
-    await pool.query('SELECT 1');
-}
-/** Escapes `%`, `_` and `\` for use inside a LIKE pattern. */
-function escapeLike(value) {
-    return value.replace(/[\\%_]/g, (ch) => `\\${ch}`);
-}
+__exportStar(require("./pool.js"), exports);
+__exportStar(require("./db.js"), exports);
+__exportStar(require("./scopes.js"), exports);
+__exportStar(require("./scoped-repository.js"), exports);
+__exportStar(require("./pagination.js"), exports);
+__exportStar(require("./tables.js"), exports);
 //# sourceMappingURL=index.js.map

package/dist/cjs/database/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/database/index.ts"],"names":[],"mappings":";;;;;AAgBA,0CAeC;AAGD,4CAgBC;AAGD,8BAEC;AAGD,gCAEC;AA3DD,6DAAmC;AAWnC;;;GAGG;AACH,SAAgB,eAAe,CAAC,OAA+B;IAC7D,OAAO,iBAAK,CAAC,UAAU,CAAC;QACtB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,eAAe,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;QACtC,kBAAkB,EAAE,IAAI;QACxB,eAAe,EAAE,IAAI;QACrB,QAAQ,EAAE,GAAG;QACb,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EAAE,KAAK;QAClB,iBAAiB,EAAE,IAAI;KACxB,CAAC,CAAC;AACL,CAAC;AAED,kGAAkG;AAClG,SAAgB,gBAAgB,CAAC,OAA+E;IAC9G,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE;YACV,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,GAAG;YACb,OAAO,EAAE,SAAS;SACnB;QACD,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE;QAC5C,UAAU,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,aAAa,IAAI,cAAc,EAAE,SAAS,EAAE,iBAAiB,EAAE,cAAc,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;QACjI,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,IAAI,SAAS,EAAE,cAAc,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;KACrF,CAAC;AACJ,CAAC;AAED,8BAA8B;AACvB,KAAK,UAAU,SAAS,CAAC,IAAgB;IAC9C,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAC/B,CAAC;AAED,8DAA8D;AAC9D,SAAgB,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/database/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA;;;;GAIG;AACH,4CAA0B;AAC1B,0CAAwB;AACxB,8CAA4B;AAC5B,yDAAuC;AACvC,kDAAgC;AAChC,8CAA4B"}

package/dist/cjs/database/pagination.js

@@ -0,0 +1,88 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cursorQuerySchema = exports.DEFAULT_PAGE_LIMIT = exports.MAX_PAGE_LIMIT = void 0;
+exports.parseCursorQuery = parseCursorQuery;
+exports.encodeCursor = encodeCursor;
+exports.decodeCursor = decodeCursor;
+exports.buildCursorPage = buildCursorPage;
+const zod_1 = require("zod");
+const errors_js_1 = require("../common/errors.js");
+const response_js_1 = require("../common/response.js");
+const index_js_1 = require("../validation/index.js");
+/**
+ * Cursor (keyset) pagination (D6). Clients send `?cursor=&limit=`; the cursor is an opaque
+ * base64url token of `{ sortKey, id }` (the last row's sort value plus an id tie-breaker).
+ * Dependency-light: usable from controllers without the database subpath.
+ */
+/** Largest page size a client may ask for. */
+exports.MAX_PAGE_LIMIT = 100;
+/** Page size when the client sends none. */
+exports.DEFAULT_PAGE_LIMIT = 20;
+const MAX_CURSOR_LENGTH = 512;
+/** `{ cursor?, limit }` query schema: limit 1–100, default 20; unknown keys are stripped. */
+exports.cursorQuerySchema = zod_1.z.object({
+    cursor: zod_1.z.string().trim().min(1).max(MAX_CURSOR_LENGTH).optional(),
+    limit: zod_1.z.coerce.number().int().min(1).max(exports.MAX_PAGE_LIMIT).default(exports.DEFAULT_PAGE_LIMIT),
+});
+/**
+ * Validates `{ cursor, limit }` from a query string.
+ *
+ * @throws ValidationError (422) with field errors when invalid.
+ * @example const { cursor, limit } = parseCursorQuery(req.query);
+ */
+function parseCursorQuery(input) {
+    const result = exports.cursorQuerySchema.safeParse({ cursor: emptyToUndefined(input?.cursor), limit: emptyToUndefined(input?.limit) });
+    if (result.success)
+        return result.data;
+    throw new errors_js_1.ValidationError((0, index_js_1.zodIssuesToErrors)(result.error), 'Invalid pagination parameters');
+}
+function emptyToUndefined(value) {
+    return value === '' || value === null ? undefined : value;
+}
+/**
+ * Encodes a cursor. Date sort keys become ISO strings.
+ *
+ * @example encodeCursor({ sortKey: row.createdAt, id: row.id })
+ */
+function encodeCursor(cursor) {
+    const sortKey = cursor.sortKey instanceof Date ? cursor.sortKey.toISOString() : cursor.sortKey;
+    return Buffer.from(JSON.stringify({ k: sortKey, i: cursor.id }), 'utf8').toString('base64url');
+}
+/**
+ * Decodes a cursor produced by {@link encodeCursor}.
+ *
+ * @throws ValidationError (422, field `cursor`) for anything malformed or tampered with.
+ */
+function decodeCursor(token) {
+    const invalid = () => new errors_js_1.ValidationError({ cursor: ['Invalid cursor'] }, 'Invalid cursor');
+    if (typeof token !== 'string' || token.length === 0 || token.length > MAX_CURSOR_LENGTH || !/^[A-Za-z0-9_-]+$/.test(token))
+        throw invalid();
+    let parsed;
+    try {
+        parsed = JSON.parse(Buffer.from(token, 'base64url').toString('utf8'));
+    }
+    catch {
+        throw invalid();
+    }
+    if (!parsed || typeof parsed !== 'object')
+        throw invalid();
+    const { k, i } = parsed;
+    const validKey = k === null || typeof k === 'string' || (typeof k === 'number' && Number.isFinite(k));
+    if (!validKey || typeof i !== 'string' || i.length === 0 || i.length > 64)
+        throw invalid();
+    return { sortKey: k, id: i };
+}
+/**
+ * Builds a page from `limit + 1` fetched rows: the extra row only signals that more exist.
+ *
+ * @param rows Rows fetched with `limit + 1`.
+ * @param limit The page size.
+ * @param cursorOf Extracts `{ sortKey, id }` from a row for the next cursor.
+ */
+function buildCursorPage(rows, limit, cursorOf) {
+    const data = rows.slice(0, limit);
+    const hasMore = rows.length > limit && data.length > 0;
+    const nextCursor = hasMore ? encodeCursor(cursorOf(data[data.length - 1])) : null;
+    return { data, meta: (0, response_js_1.buildCursorPageMeta)(limit, nextCursor) };
+}
+//# sourceMappingURL=pagination.js.map

package/dist/cjs/database/pagination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.js","sourceRoot":"","sources":["../../../src/database/pagination.ts"],"names":[],"mappings":";;;AA0CA,4CAIC;AAWD,oCAGC;AAOD,oCAcC;AASD,0CAKC;AA/FD,6BAAwB;AACxB,mDAAsD;AACtD,uDAA4D;AAE5D,qDAA2D;AAE3D;;;;GAIG;AAEH,8CAA8C;AACjC,QAAA,cAAc,GAAG,GAAG,CAAC;AAClC,4CAA4C;AAC/B,QAAA,kBAAkB,GAAG,EAAE,CAAC;AACrC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,6FAA6F;AAChF,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;IAClE,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAc,CAAC,CAAC,OAAO,CAAC,0BAAkB,CAAC;CACtF,CAAC,CAAC;AAcH;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAC,KAAwD;IACvF,MAAM,MAAM,GAAG,yBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/H,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACvC,MAAM,IAAI,2BAAe,CAAC,IAAA,4BAAiB,EAAC,MAAM,CAAC,KAAK,CAAC,EAAE,+BAA+B,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAAC,MAAqD;IAChF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,YAAY,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;IAC/F,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACjG,CAAC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAAC,KAAa;IACxC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,2BAAe,CAAC,EAAE,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAC5F,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IAC5I,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,MAAM,OAAO,EAAE,CAAC;IAC3D,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,MAAsC,CAAC;IACxD,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACtG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,OAAO,EAAE,CAAC;IAC3F,OAAO,EAAE,OAAO,EAAE,CAAkB,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,eAAe,CAAI,IAAS,EAAE,KAAa,EAAE,QAAmE;IAC9H,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAA,iCAAmB,EAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;AAChE,CAAC"}

package/dist/cjs/database/pool.js

@@ -0,0 +1,60 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createMysqlPool = createMysqlPool;
+exports.createKnexConfig = createKnexConfig;
+exports.pingMysql = pingMysql;
+exports.escapeLike = escapeLike;
+const promise_1 = __importDefault(require("mysql2/promise"));
+/**
+ * mysql2 pool for Drizzle. Sessions run in UTC and utf8mb4 so timestamps and emoji round-trip
+ * unchanged regardless of server defaults.
+ */
+function createMysqlPool(options) {
+    return promise_1.default.createPool({
+        host: options.host,
+        port: options.port,
+        user: options.user,
+        password: options.password,
+        database: options.database,
+        connectionLimit: options.poolMax ?? 10,
+        waitForConnections: true,
+        enableKeepAlive: true,
+        timezone: '+00:00',
+        charset: 'utf8mb4_unicode_ci',
+        dateStrings: false,
+        supportBigNumbers: true,
+    });
+}
+/**
+ * Knex config for migrations and seeds: mysql2, utf8mb4, UTC, `.cjs` files only. Services call it
+ * through `knexConfig(env)` in their `knexfile.js`.
+ */
+function createKnexConfig(options) {
+    return {
+        client: 'mysql2',
+        connection: {
+            host: options.host,
+            port: options.port,
+            user: options.user,
+            password: options.password,
+            database: options.database,
+            timezone: '+00:00',
+            charset: 'utf8mb4',
+        },
+        pool: { min: 0, max: options.poolMax ?? 10 },
+        migrations: { directory: options.migrationsDir ?? './migrations', tableName: 'knex_migrations', extension: 'cjs', loadExtensions: ['.cjs'] },
+        seeds: { directory: options.seedsDir ?? './seeds', extension: 'cjs', loadExtensions: ['.cjs'] },
+    };
+}
+/** Readiness probe helper. */
+async function pingMysql(pool) {
+    await pool.query('SELECT 1');
+}
+/** Escapes `%`, `_` and `\` for use inside a LIKE pattern. */
+function escapeLike(value) {
+    return value.replace(/[\\%_]/g, (ch) => `\\${ch}`);
+}
+//# sourceMappingURL=pool.js.map

package/dist/cjs/database/pool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pool.js","sourceRoot":"","sources":["../../../src/database/pool.ts"],"names":[],"mappings":";;;;;AA+BA,0CAeC;AAMD,4CAgBC;AAGD,8BAEC;AAGD,gCAEC;AA7ED,6DAAmC;AA0BnC;;;GAGG;AACH,SAAgB,eAAe,CAAC,OAA+B;IAC7D,OAAO,iBAAK,CAAC,UAAU,CAAC;QACtB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,eAAe,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;QACtC,kBAAkB,EAAE,IAAI;QACxB,eAAe,EAAE,IAAI;QACrB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EAAE,KAAK;QAClB,iBAAiB,EAAE,IAAI;KACxB,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,OAA0B;IACzD,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE;YACV,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,SAAS;SACnB;QACD,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE;QAC5C,UAAU,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,aAAa,IAAI,cAAc,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,MAAM,CAAC,EAAE;QAC5I,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,IAAI,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,MAAM,CAAC,EAAE;KAChG,CAAC;AACJ,CAAC;AAED,8BAA8B;AACvB,KAAK,UAAU,SAAS,CAAC,IAAgB;IAC9C,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAC/B,CAAC;AAED,8DAA8D;AAC9D,SAAgB,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC"}

package/dist/cjs/database/scoped-repository.js

@@ -0,0 +1,132 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopedRepository = void 0;
+const drizzle_orm_1 = require("drizzle-orm");
+const errors_js_1 = require("../common/errors.js");
+const pagination_js_1 = require("./pagination.js");
+const scopes_js_1 = require("./scopes.js");
+/**
+ * Base for every repository over scoped data (Drizzle). Every read, count, update and delete is
+ * AND-ed with the scope's condition, and every insert is stamped with the scope value; there is no
+ * method that returns an unscoped query. Subclasses add queries only through {@link scoped} and
+ * {@link executor}.
+ *
+ * @example
+ * class NoteRepository extends ScopedRepository<typeof notes, ScopeContext<'workspaceId'>> {
+ *   findByTitle(ctx: ScopeContext<'workspaceId'>, title: string) {
+ *     return this.executor().select().from(this.table).where(this.scoped(ctx, eq(this.table.title, title)));
+ *   }
+ * }
+ * const repo = new NoteRepository(db, notes, workspaceScope);
+ */
+class ScopedRepository {
+    #db;
+    table;
+    scope;
+    idColumn;
+    constructor(db, table, scope, options = {}) {
+        this.#db = db;
+        this.table = table;
+        this.scope = scope;
+        this.idColumn = (0, scopes_js_1.resolveColumn)(table, options.idColumn ?? 'id').column;
+        (0, scopes_js_1.resolveColumn)(table, scope.column); // fail fast when the table lacks the scope column
+    }
+    /** The row with `id` inside the caller's scope, or null (absent and out-of-scope look the same). */
+    async findById(ctx, id, options = {}) {
+        const rows = await this.executor(options.tx).select().from(this.table)
+            .where(this.scoped(ctx, (0, drizzle_orm_1.eq)(this.idColumn, id))).limit(1);
+        return rows[0] ?? null;
+    }
+    /** Rows inside the caller's scope, keyset-paginated by `orderBy` then id. */
+    async findMany(ctx, options = {}) {
+        return this.selectPage(ctx, options, clampLimit(options.limit));
+    }
+    /** Like {@link findMany}, returning `{ data, meta: { limit, nextCursor, hasMore } }`. */
+    async findPage(ctx, options = {}) {
+        const limit = clampLimit(options.limit);
+        const rows = await this.selectPage(ctx, options, limit + 1);
+        const { key: sortKey } = (0, scopes_js_1.resolveColumn)(this.table, options.orderBy?.column ?? this.idColumn.name);
+        const { key: idKey } = (0, scopes_js_1.resolveColumn)(this.table, this.idColumn.name);
+        return (0, pagination_js_1.buildCursorPage)(rows, limit, (row) => {
+            const record = row;
+            return { sortKey: record[sortKey], id: String(record[idKey]) };
+        });
+    }
+    /** Number of rows inside the caller's scope matching `where`. */
+    async count(ctx, where, options = {}) {
+        const rows = await this.executor(options.tx).select({ n: (0, drizzle_orm_1.count)() }).from(this.table).where(this.scoped(ctx, where));
+        return Number(rows[0]?.n ?? 0);
+    }
+    /**
+     * Inserts rows stamped with the caller's scope value.
+     *
+     * @throws ForbiddenError (`SCOPE_MISMATCH`) when a row names another scope.
+     * @returns The stamped rows as written.
+     */
+    async insert(ctx, rows, options = {}) {
+        const list = (Array.isArray(rows) ? rows : [rows]).map((row) => this.scope.stamp(this.table, row, ctx));
+        if (list.length === 0)
+            return [];
+        await this.executor(options.tx).insert(this.table).values(list);
+        return list;
+    }
+    /**
+     * Updates rows inside the caller's scope. Rows never move between scopes.
+     *
+     * @throws ForbiddenError (`SCOPE_IMMUTABLE`) when `values` sets the scope column.
+     * @returns Number of rows changed.
+     */
+    async update(ctx, where, values, options = {}) {
+        if ((0, scopes_js_1.resolveColumn)(this.table, this.scope.column).key in values) {
+            throw new errors_js_1.ForbiddenError(`The ${this.scope.name} of a row cannot be changed`, { code: 'SCOPE_IMMUTABLE' });
+        }
+        const result = await this.executor(options.tx).update(this.table).set(values).where(this.scoped(ctx, where));
+        return affectedRows(result);
+    }
+    /**
+     * Deletes rows inside the caller's scope.
+     *
+     * @returns Number of rows deleted.
+     */
+    async delete(ctx, where, options = {}) {
+        const result = await this.executor(options.tx).delete(this.table).where(this.scoped(ctx, where));
+        return affectedRows(result);
+    }
+    /** The scope condition AND-ed with `conditions`. The only way subclasses may build a WHERE. */
+    scoped(ctx, ...conditions) {
+        return (0, drizzle_orm_1.and)(this.scope.condition(this.table, ctx), ...conditions);
+    }
+    /** The executor for a call: `tx` when given, otherwise the pool. Always pair with {@link scoped}. */
+    executor(tx) {
+        return tx ?? this.#db;
+    }
+    async selectPage(ctx, options, take) {
+        const sort = (0, scopes_js_1.resolveColumn)(this.table, options.orderBy?.column ?? this.idColumn.name).column;
+        const descending = (options.orderBy?.direction ?? 'desc') === 'desc';
+        const after = options.cursor ? this.afterCursor(options.cursor, sort, descending) : undefined;
+        const order = descending ? [(0, drizzle_orm_1.desc)(sort), (0, drizzle_orm_1.desc)(this.idColumn)] : [(0, drizzle_orm_1.asc)(sort), (0, drizzle_orm_1.asc)(this.idColumn)];
+        const rows = await this.executor(options.tx).select().from(this.table)
+            .where(this.scoped(ctx, options.where, after)).orderBy(...order).limit(take);
+        return rows;
+    }
+    /** Keyset condition: rows strictly after the cursor's (sortKey, id) in the sort direction. */
+    afterCursor(token, sort, descending) {
+        const { sortKey, id } = (0, pagination_js_1.decodeCursor)(token);
+        const past = descending ? drizzle_orm_1.lt : drizzle_orm_1.gt;
+        if (sort === this.idColumn)
+            return past(this.idColumn, id);
+        const value = sort.dataType === 'date' && typeof sortKey === 'string' ? new Date(sortKey) : sortKey;
+        return (0, drizzle_orm_1.or)(past(sort, value), (0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(sort, value), past(this.idColumn, id)));
+    }
+}
+exports.ScopedRepository = ScopedRepository;
+function clampLimit(limit) {
+    if (limit === undefined || !Number.isFinite(limit))
+        return pagination_js_1.DEFAULT_PAGE_LIMIT;
+    return Math.min(pagination_js_1.MAX_PAGE_LIMIT, Math.max(1, Math.trunc(limit)));
+}
+function affectedRows(result) {
+    const header = (Array.isArray(result) ? result[0] : result);
+    return Number(header?.affectedRows ?? 0);
+}
+//# sourceMappingURL=scoped-repository.js.map

package/dist/cjs/database/scoped-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoped-repository.js","sourceRoot":"","sources":["../../../src/database/scoped-repository.ts"],"names":[],"mappings":";;;AAAA,6CAA4H;AAE5H,mDAAqD;AAErD,mDAAwH;AACxH,2CAA2D;AA2C3D;;;;;;;;;;;;;GAaG;AACH,MAAa,gBAAgB;IAClB,GAAG,CAAa;IACN,KAAK,CAAS;IACd,KAAK,CAAiB;IACtB,QAAQ,CAAc;IAEzC,YAAY,EAAc,EAAE,KAAa,EAAE,KAAqB,EAAE,UAAmC,EAAE;QACrG,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,QAAQ,GAAG,IAAA,yBAAa,EAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC;QACtE,IAAA,yBAAa,EAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,kDAAkD;IACxF,CAAC;IAED,oGAAoG;IACpG,KAAK,CAAC,QAAQ,CAAC,GAAS,EAAE,EAAU,EAAE,UAAoB,EAAE;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAmB,CAAC;aACjF,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAA,gBAAE,EAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAQ,IAAI,CAAC,CAAC,CAA0C,IAAI,IAAI,CAAC;IACnE,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,QAAQ,CAAC,GAAS,EAAE,UAA2B,EAAE;QACrD,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,yFAAyF;IACzF,KAAK,CAAC,QAAQ,CAAC,GAAS,EAAE,UAA2B,EAAE;QACrD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,IAAA,yBAAa,EAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClG,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAA,yBAAa,EAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrE,OAAO,IAAA,+BAAe,EAAC,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,GAA8B,CAAC;YAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAyB,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACzF,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,KAAK,CAAC,GAAS,EAAE,KAAW,EAAE,UAAoB,EAAE;QACxD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAA,mBAAK,GAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QAClI,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,GAAS,EAAE,IAA2D,EAAE,UAAoB,EAAE;QACzG,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,GAA8B,EAAE,GAAG,CAAC,CAAC,CAAC;QACnI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAkC,CAAC,CAAC;QAC9F,OAAO,IAAkC,CAAC;IAC5C,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,GAAS,EAAE,KAAU,EAAE,MAAyC,EAAE,UAAoB,EAAE;QACnG,IAAI,IAAA,yBAAa,EAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,MAAM,EAAE,CAAC;YAC/D,MAAM,IAAI,0BAAc,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,6BAA6B,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC7G,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,MAAe,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QACtH,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,GAAS,EAAE,KAAU,EAAE,UAAoB,EAAE;QACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QACjG,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,+FAA+F;IACrF,MAAM,CAAC,GAAS,EAAE,GAAG,UAAkC;QAC/D,OAAO,IAAA,iBAAG,EAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,GAAG,UAAU,CAAE,CAAC;IACpE,CAAC;IAED,qGAAqG;IAC3F,QAAQ,CAAC,EAAe;QAChC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,GAAS,EAAE,OAAwB,EAAE,IAAY;QACxE,MAAM,IAAI,GAAG,IAAA,yBAAa,EAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QAC7F,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,IAAI,MAAM,CAAC,KAAK,MAAM,CAAC;QACrE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9F,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,IAAA,kBAAI,EAAC,IAAI,CAAC,EAAE,IAAA,kBAAI,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAG,EAAC,IAAI,CAAC,EAAE,IAAA,iBAAG,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAmB,CAAC;aACjF,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/E,OAAO,IAAkC,CAAC;IAC5C,CAAC;IAED,8FAA8F;IACtF,WAAW,CAAC,KAAa,EAAE,IAAiB,EAAE,UAAmB;QACvE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,IAAA,4BAAY,EAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,gBAAE,CAAC,CAAC,CAAC,gBAAE,CAAC;QAClC,IAAI,IAAI,KAAK,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACpG,OAAO,IAAA,gBAAE,EAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAA,iBAAG,EAAC,IAAA,gBAAE,EAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAE,CAAC;IAC/E,CAAC;CACF;AA7GD,4CA6GC;AAED,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,kCAAkB,CAAC;IAC9E,OAAO,IAAI,CAAC,GAAG,CAAC,8BAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,YAAY,CAAC,MAAe;IACnC,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAA+B,CAAC;IAC1F,OAAO,MAAM,CAAC,MAAM,EAAE,YAAY,IAAI,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/cjs/database/scopes.js

@@ -0,0 +1,166 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PlatformScopeDefinition = exports.PlatformScope = exports.OwnerScope = void 0;
+exports.resolveColumn = resolveColumn;
+exports.defineScope = defineScope;
+exports.definePlatformScope = definePlatformScope;
+const drizzle_orm_1 = require("drizzle-orm");
+const errors_js_1 = require("../common/errors.js");
+/**
+ * Finds a table column by its database name.
+ *
+ * @throws Error when the table has no such column (a wiring bug, caught at startup or in tests).
+ */
+function resolveColumn(table, dbName) {
+    const columns = (0, drizzle_orm_1.getTableColumns)(table);
+    for (const [key, column] of Object.entries(columns)) {
+        if (column.name === dbName)
+            return { key, column };
+    }
+    throw new Error(`Table has no column "${dbName}"`);
+}
+function requireValue(value, scopeName, code) {
+    if (typeof value !== 'string' || value.trim() === '') {
+        throw new errors_js_1.ForbiddenError(`A ${scopeName} scope is required`, { code });
+    }
+    return value;
+}
+/** Sets `column` on `row` to `value`; refuses a row that carries a different value. */
+function stampColumn(table, row, dbName, value, scopeName) {
+    const { key } = resolveColumn(table, dbName);
+    const current = row[key];
+    if (current !== undefined && current !== null && current !== value) {
+        throw new errors_js_1.ForbiddenError(`Row belongs to another ${scopeName}`, { code: 'SCOPE_MISMATCH' });
+    }
+    return { ...row, [key]: value };
+}
+/**
+ * Defines a scope whose value comes from the request context (the gateway-signed identity, never a
+ * request body).
+ *
+ * @example const workspaceScope = defineScope({ name: 'workspace', column: 'workspace_id', contextKey: 'workspaceId' });
+ */
+function defineScope(options) {
+    const { name, column, contextKey } = options;
+    const valueOf = (ctx) => requireValue(ctx?.[contextKey], name, 'SCOPE_REQUIRED');
+    return Object.freeze({
+        name,
+        column,
+        contextKey,
+        valueOf,
+        condition: (table, ctx) => (0, drizzle_orm_1.eq)(resolveColumn(table, column).column, valueOf(ctx)),
+        stamp: (table, row, ctx) => stampColumn(table, row, column, valueOf(ctx), name),
+    });
+}
+/**
+ * Rows owned by one principal (e.g. a user's own records). Refuses a missing owner id, so an
+ * anonymous call can never fall through to "all owners".
+ *
+ * @example const ownerScope = new OwnerScope({ name: 'owner', column: 'user_id' });
+ */
+class OwnerScope {
+    /** Readable name (e.g. `owner`). */
+    name;
+    /** Database name of the owner column (e.g. `user_id`). */
+    column;
+    /** @param options `name` for messages, `column` = database name of the owner column. */
+    constructor(options) {
+        this.name = options.name;
+        this.column = options.column;
+    }
+    /** The owner id from `ctx`; throws ForbiddenError (`OWNER_REQUIRED`) when it is missing. */
+    ownerIdOf(ctx) {
+        return requireValue(ctx?.ownerId, this.name, 'OWNER_REQUIRED');
+    }
+    /** `owner column = ownerId`. @throws ForbiddenError (`OWNER_REQUIRED`) without an owner id. */
+    condition(table, ctx) {
+        return (0, drizzle_orm_1.eq)(resolveColumn(table, this.column).column, this.ownerIdOf(ctx));
+    }
+    /** Sets the owner column. @throws ForbiddenError (`OWNER_REQUIRED`, `SCOPE_MISMATCH`). */
+    stamp(table, row, ctx) {
+        return stampColumn(table, row, this.column, this.ownerIdOf(ctx), this.name);
+    }
+}
+exports.OwnerScope = OwnerScope;
+const ISSUE = Symbol('PlatformScope.issue');
+/**
+ * Proof that an identity may act across scopes. Only {@link PlatformScopeDefinition.authorize} can
+ * create one, and only when the definition's predicate approves the identity.
+ */
+class PlatformScope {
+    #definition;
+    /** @internal Use `definePlatformScope(...).authorize(identity)`. */
+    constructor(token, definition) {
+        if (token !== ISSUE)
+            throw new errors_js_1.ForbiddenError('Platform scope must be authorized', { code: 'PLATFORM_SCOPE_REQUIRED' });
+        this.#definition = definition;
+    }
+    /** True when this grant was issued by `definition`. */
+    issuedBy(definition) {
+        return this.#definition === definition;
+    }
+}
+exports.PlatformScope = PlatformScope;
+/**
+ * Cross-scope access for platform operators. Rows of every scope are reachable, but the query still
+ * filters on the scope column (`IS NOT NULL`) and inserts must name their scope explicitly.
+ */
+class PlatformScopeDefinition {
+    /** Readable name (e.g. `platform`). */
+    name;
+    /** Database name of the scope column the platform scope spans. */
+    column;
+    #predicate;
+    /** Prefer {@link definePlatformScope}. */
+    constructor(options) {
+        this.name = options.name;
+        this.column = options.column;
+        this.#predicate = options.predicate;
+    }
+    /**
+     * Issues a {@link PlatformScope} for `identity`.
+     *
+     * @throws ForbiddenError (`PLATFORM_SCOPE_DENIED`) when the predicate refuses (or throws).
+     */
+    authorize(identity) {
+        let allowed = false;
+        try {
+            allowed = identity != null && this.#predicate(identity);
+        }
+        catch {
+            allowed = false;
+        }
+        if (!allowed)
+            throw new errors_js_1.ForbiddenError('Platform access is required', { code: 'PLATFORM_SCOPE_DENIED' });
+        return new PlatformScope(ISSUE, this);
+    }
+    /** `scope column IS NOT NULL`. @throws ForbiddenError (`PLATFORM_SCOPE_REQUIRED`) without a grant from this scope. */
+    condition(table, ctx) {
+        this.assertGrant(ctx);
+        return (0, drizzle_orm_1.isNotNull)(resolveColumn(table, this.column).column);
+    }
+    /** Requires the row to name its scope. @throws ForbiddenError (`PLATFORM_SCOPE_REQUIRED`, `SCOPE_REQUIRED`). */
+    stamp(table, row, ctx) {
+        this.assertGrant(ctx);
+        const { key } = resolveColumn(table, this.column);
+        requireValue(row[key], this.name, 'SCOPE_REQUIRED');
+        return row;
+    }
+    assertGrant(ctx) {
+        if (!(ctx instanceof PlatformScope) || !ctx.issuedBy(this)) {
+            throw new errors_js_1.ForbiddenError('Platform access is required', { code: 'PLATFORM_SCOPE_REQUIRED' });
+        }
+    }
+}
+exports.PlatformScopeDefinition = PlatformScopeDefinition;
+/**
+ * Defines the platform (cross-scope) scope.
+ *
+ * @example
+ * const platformScope = definePlatformScope({ name: 'platform', column: 'workspace_id', predicate: (u: AuthUser) => u.isSuperAdmin });
+ * const grant = platformScope.authorize(req.user); // throws 403 for anyone else
+ */
+function definePlatformScope(options) {
+    return new PlatformScopeDefinition(options);
+}
+//# sourceMappingURL=scopes.js.map