@opensaas/stack-core 0.37.0 → 0.39.0

package/dist/context/apply-defaults.js

@@ -1,66 +1,37 @@
 /**
- * Apply field `defaultValue`s to omitted inputs on CREATE — the runtime half of
- * the resolve-then-validate ordering (Keystone 6 parity, issue #615).
+ * Fills a field's `defaultValue` into `resolvedData` for CREATE when the field
+ * was omitted, run after resolveInput hooks and before validation. Shared by
+ * the top-level create path (Hook Pipeline) and the nested-relation create path.
  *
- * A field's `defaultValue` is otherwise only realised as a Prisma `@default(...)`
- * applied by the database at write time, which is AFTER the write pipeline's
- * validation phase has already run. That ordering means a required-with-default
- * field (e.g. `select({ validation: { isRequired: true }, defaultValue: 'X' })`)
- * fails `isRequired` validation on an omitted input even though a default exists.
- *
- * This helper closes that gap: in the resolve phase (after `resolveInput` hooks,
- * before validation) it fills `resolvedData[field]` with the field's
- * `defaultValue` ONLY when the field was OMITTED (value is `undefined`). It is a
- * SINGLE shared mechanism used by both the top-level create path (Hook Pipeline)
- * and the nested-relation create path.
- *
- * Guard rails (each acceptance-criteria-driven):
- *   - CREATE only. Update never injects defaults for omitted fields (the caller
- *     only invokes this for `operation === 'create'`).
- *   - Explicitly-provided values are preserved. A key present in `resolvedData`
- *     — INCLUDING an explicit `null` — is left untouched; only `undefined`
- *     (omitted) keys are filled.
- *   - Virtual, system (`id`/`createdAt`/`updatedAt`) and relationship fields are
- *     skipped — they have no scalar `defaultValue` to inject and relationships
- *     carry connect/create payloads rather than literal defaults.
- *   - The timestamp `{ kind: 'now' }` sentinel is NOT injected: it is not a
- *     literal value but a request for the DB-level `@default(now())`, which still
- *     applies at write time. Injecting the sentinel object would corrupt the
- *     payload. (A concrete `Date` default is a real literal and IS injected.)
- *
- * The function mutates and returns `resolvedData` (consistent with the other
- * resolve-phase helpers that thread `resolvedData` through the pipeline).
+ * Prisma only realises `defaultValue` as `@default(...)` at the database write,
+ * which is after this pipeline's validation phase — so without this, a
+ * required field with a default (e.g. `select({ validation: { isRequired: true },
+ * defaultValue: 'X' })`) fails `isRequired` on an omitted input. See issue #615.
  */
 export function applyCreateDefaults(resolvedData, fieldConfigs) {
     for (const [fieldKey, fieldConfig] of Object.entries(fieldConfigs)) {
-        // Skip virtual fields — not stored in the database.
         if (fieldConfig.virtual)
             continue;
-        // Skip system fields — always managed by the framework/DB.
         if (fieldKey === 'id' || fieldKey === 'createdAt' || fieldKey === 'updatedAt')
             continue;
-        // Skip relationships — they carry connect/create payloads, not literal defaults.
+        // Relationships carry connect/create payloads, not literal defaults.
         if (fieldConfig.type === 'relationship')
             continue;
-        // No declared default → nothing to inject.
         if (!('defaultValue' in fieldConfig) || fieldConfig.defaultValue === undefined)
             continue;
-        // Only fill OMITTED keys. An explicitly-provided value (including explicit
-        // `null`) is preserved and must not be overwritten by the default.
+        // Only fill OMITTED (`undefined`) keys — an explicitly-provided value,
+        // including explicit `null`, must survive untouched.
         if (resolvedData[fieldKey] !== undefined)
             continue;
         const defaultValue = fieldConfig.defaultValue;
-        // The timestamp `{ kind: 'now' }` sentinel is a DB-level `@default(now())`
-        // request, not a literal — leave it for Prisma to apply at write time.
+        // `{ kind: 'now' }` requests the DB-level `@default(now())`, not a literal
+        // value — injecting the sentinel object itself would corrupt the payload.
         if (isNowSentinel(defaultValue))
             continue;
         resolvedData[fieldKey] = defaultValue;
     }
     return resolvedData;
 }
-/**
- * Detect the timestamp `{ kind: 'now' }` default sentinel.
- */
 function isNowSentinel(value) {
     return (typeof value === 'object' &&
         value !== null &&

package/dist/context/apply-defaults.js.map

@@ -1 +1 @@
-{"version":3,"file":"apply-defaults.js","sourceRoot":"","sources":["../../src/context/apply-defaults.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,UAAU,mBAAmB,CACjC,YAAqC,EACrC,YAAyC;IAEzC,KAAK,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACnE,oDAAoD;QACpD,IAAI,WAAW,CAAC,OAAO;YAAE,SAAQ;QAEjC,2DAA2D;QAC3D,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW;YAAE,SAAQ;QAEvF,iFAAiF;QACjF,IAAI,WAAW,CAAC,IAAI,KAAK,cAAc;YAAE,SAAQ;QAEjD,2CAA2C;QAC3C,IAAI,CAAC,CAAC,cAAc,IAAI,WAAW,CAAC,IAAI,WAAW,CAAC,YAAY,KAAK,SAAS;YAAE,SAAQ;QAExF,2EAA2E;QAC3E,mEAAmE;QACnE,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,SAAS;YAAE,SAAQ;QAElD,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,CAAA;QAE7C,2EAA2E;QAC3E,uEAAuE;QACvE,IAAI,aAAa,CAAC,YAAY,CAAC;YAAE,SAAQ;QAEzC,YAAY,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAA;IACvC,CAAC;IAED,OAAO,YAAY,CAAA;AACrB,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACd,KAA2B,CAAC,IAAI,KAAK,KAAK,CAC5C,CAAA;AACH,CAAC"}
+{"version":3,"file":"apply-defaults.js","sourceRoot":"","sources":["../../src/context/apply-defaults.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CACjC,YAAqC,EACrC,YAAyC;IAEzC,KAAK,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACnE,IAAI,WAAW,CAAC,OAAO;YAAE,SAAQ;QACjC,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW;YAAE,SAAQ;QACvF,qEAAqE;QACrE,IAAI,WAAW,CAAC,IAAI,KAAK,cAAc;YAAE,SAAQ;QACjD,IAAI,CAAC,CAAC,cAAc,IAAI,WAAW,CAAC,IAAI,WAAW,CAAC,YAAY,KAAK,SAAS;YAAE,SAAQ;QAExF,uEAAuE;QACvE,qDAAqD;QACrD,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,SAAS;YAAE,SAAQ;QAElD,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,CAAA;QAE7C,2EAA2E;QAC3E,0EAA0E;QAC1E,IAAI,aAAa,CAAC,YAAY,CAAC;YAAE,SAAQ;QAEzC,YAAY,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAA;IACvC,CAAC;IAED,OAAO,YAAY,CAAA;AACrB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACd,KAA2B,CAAC,IAAI,KAAK,KAAK,CAC5C,CAAA;AACH,CAAC"}

package/dist/context/hook-pipeline.d.ts

@@ -1,49 +1,24 @@
 import type { ListConfig } from '../config/types.js';
 import type { AccessContext } from '../access/types.js';
 /**
- * Hook Pipeline — the single module that runs the transform+validate span of a
- * write: list `resolveInput` → field `resolveInput` → list `validate` → field
- * `validate` → built-in field rules (`validateFieldRules`). It owns the order of
- * these phases and the threading of `resolvedData` through them, in one place.
- *
- * It is THE place where input is shaped and validated; it throws
- * {@link ValidationError} on failure exactly as before (validate hooks via
- * `addValidationError`, then `validateFieldRules`) — validation is never silent.
- *
- * Side-effect hooks (`beforeOperation`/`afterOperation`), operation-level access,
- * writable-field filtering, nested operations, persistence and Field Visibility
- * are deliberately OUT of this span — they stay in the Write Pipeline. See the
- * "Hook Pipeline" and "Write Pipeline" glossary terms in CONTEXT.md.
- */
-/**
- * Arguments for one transform+validate span. Only the create/update operations
- * run this span (delete skips the input-shaping phases entirely).
+ * The transform+validate span of a write. See the "Hook Pipeline" and "Write
+ * Pipeline" glossary terms in CONTEXT.md for the full phase order and the
+ * boundary with the Write Pipeline (which owns side-effect hooks, access,
+ * writable-field filtering, nested operations, persistence, Field Visibility).
  */
 export interface HookPipelineArgs {
     operation: 'create' | 'update';
     listName: string;
     listConfig: ListConfig<any>;
-    /** The original input data for the write. */
     inputData: Record<string, unknown>;
-    /** The existing row for update; `undefined` for create. */
     item: Record<string, unknown> | undefined;
     context: AccessContext;
 }
-/**
- * Result of a transform+validate span: the fully-resolved write data after the
- * resolveInput hooks have run and all validation has passed.
- */
 export interface HookPipelineResult {
     resolvedData: Record<string, unknown>;
 }
-/**
- * The transform+validate span, owning order + `resolvedData` threading.
- */
 export interface HookPipeline {
     run(args: HookPipelineArgs): Promise<HookPipelineResult>;
 }
-/**
- * The default Hook Pipeline instance used by the Write Pipeline.
- */
 export declare const hookPipeline: HookPipeline;
 //# sourceMappingURL=hook-pipeline.d.ts.map

package/dist/context/hook-pipeline.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hook-pipeline.d.ts","sourceRoot":"","sources":["../../src/context/hook-pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAYvD;;;;;;;;;;;;;;GAcG;AAEH;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,QAAQ,GAAG,QAAQ,CAAA;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAEhB,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAA;IAC3B,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;IACzC,OAAO,EAAE,aAAa,CAAA;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;CACzD;AA8HD;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,YAE1B,CAAA"}
+{"version":3,"file":"hook-pipeline.d.ts","sourceRoot":"","sources":["../../src/context/hook-pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAYvD;;;;;GAKG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,QAAQ,GAAG,QAAQ,CAAA;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAEhB,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAA;IAC3B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;IACzC,OAAO,EAAE,aAAa,CAAA;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;CACzD;AAgGD,eAAO,MAAM,YAAY,EAAE,YAE1B,CAAA"}

package/dist/context/hook-pipeline.js

@@ -1,30 +1,7 @@
 import { executeResolveInput, executeValidate, executeFieldResolveInputHooks, executeFieldValidateHooks, validateFieldRules, splitMultiColumnFields, ValidationError, } from '../hooks/index.js';
 import { applyCreateDefaults } from './apply-defaults.js';
-/**
- * Run the transform+validate span once.
- *
- * Phase order (owned here, in one place):
- *   list `resolveInput`
- *     → field `resolveInput`
- *     → list `validate`
- *     → field `validate`
- *     → built-in field rules (`validateFieldRules`)
- *     → split multi-column fields (`splitMultiColumnFields`)
- *
- * Contract preserved exactly:
- *   - `resolvedData` starts as `inputData` and is threaded through each phase;
- *   - validate hooks report failures via `addValidationError` → THROW
- *     `ValidationError` (never silent);
- *   - built-in field rule failures THROW `ValidationError`;
- *   - a multi-column field (e.g. storage image()/file() in Keystone-parity
- *     mode) is validated under its LOGICAL key BEFORE it is split into
- *     physical columns (#789) — an unrecognised value throws instead of being
- *     silently split into null/undefined columns;
- *   - on success returns the transformed `resolvedData`.
- */
 async function runHookPipeline(args) {
     const { operation, listName, listConfig, inputData, item, context } = args;
-    // ── Phase 1: list-level resolveInput ──────────────────────────────────────
     let resolvedData = await executeResolveInput(listConfig.hooks, operation === 'create'
         ? {
             listKey: listName,
@@ -42,18 +19,13 @@ async function runHookPipeline(args) {
             item,
             context,
         });
-    // ── Phase 1.5: field-level resolveInput (e.g. hash passwords) ──────────────
     resolvedData = await executeFieldResolveInputHooks(inputData, resolvedData, listConfig.fields, operation, context, listName, item);
-    // ── Phase 1.75: apply field defaults to omitted inputs (CREATE only) ───────
-    // Resolve-then-validate (Keystone parity, #615): a field declaring a
-    // `defaultValue` is filled into `resolvedData` here — AFTER resolveInput hooks
-    // and BEFORE validation — but only when the field was OMITTED, so a
-    // required-with-default field passes `isRequired` instead of failing it.
-    // Update is untouched (no default injection on update).
+    // Must run after resolveInput hooks and before validation, so a
+    // required-with-default field passes `isRequired` on an omitted input
+    // instead of failing it (see applyCreateDefaults, issue #615).
     if (operation === 'create') {
         resolvedData = applyCreateDefaults(resolvedData, listConfig.fields);
     }
-    // ── Phase 2: list-level validate ──────────────────────────────────────────
     await executeValidate(listConfig.hooks, operation === 'create'
         ? {
             listKey: listName,
@@ -71,24 +43,19 @@ async function runHookPipeline(args) {
             item,
             context,
         });
-    // ── Phase 2.5: field-level validate ───────────────────────────────────────
     await executeFieldValidateHooks(inputData, resolvedData, listConfig.fields, operation, context, listName, item);
-    // ── Phase 3: built-in field rules (isRequired, length, etc.) ──────────────
-    // Validation failures THROW (validation is not silent).
+    // Unlike an access-denied `context.db` operation, a validation failure
+    // throws rather than returning null/[] — validation is never silent.
     const validation = validateFieldRules(resolvedData, listConfig.fields, operation);
     if (validation.errors.length > 0) {
         throw new ValidationError(validation.errors, validation.fieldErrors);
     }
-    // ── Phase 4: split multi-column fields into physical columns ──────────────
-    // Only reached once the logical value has passed validation (#789). Replaces
-    // each multi-column field's logical key with its per-part columns, gated by
-    // the field's own write access (see `splitMultiColumnFields`).
+    // Runs only once the logical value has passed validation above (#789) — a
+    // multi-column field validated after splitting could see an unrecognised
+    // value silently become null/undefined columns instead of throwing.
     resolvedData = await splitMultiColumnFields(inputData, resolvedData, listConfig.fields, operation, context, item);
     return { resolvedData };
 }
-/**
- * The default Hook Pipeline instance used by the Write Pipeline.
- */
 export const hookPipeline = {
     run: runHookPipeline,
 };

package/dist/context/hook-pipeline.js.map

@@ -1 +1 @@
-{"version":3,"file":"hook-pipeline.js","sourceRoot":"","sources":["../../src/context/hook-pipeline.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,6BAA6B,EAC7B,yBAAyB,EACzB,kBAAkB,EAClB,sBAAsB,EACtB,eAAe,GAChB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAiDzD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,KAAK,UAAU,eAAe,CAAC,IAAsB;IACnD,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;IAE1E,6EAA6E;IAC7E,IAAI,YAAY,GAAG,MAAM,mBAAmB,CAC1C,UAAU,CAAC,KAAK,EAChB,SAAS,KAAK,QAAQ;QACpB,CAAC,CAAC;YACE,OAAO,EAAE,QAAQ;YACjB,SAAS,EAAE,QAAQ;YACnB,SAAS;YACT,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,SAAS;YACf,OAAO;SACR;QACH,CAAC,CAAC;YACE,OAAO,EAAE,QAAQ;YACjB,SAAS,EAAE,QAAQ;YACnB,SAAS;YACT,YAAY,EAAE,SAAS;YACvB,IAAI;YACJ,OAAO;SACR,CACN,CAAA;IAED,8EAA8E;IAC9E,YAAY,GAAG,MAAM,6BAA6B,CAChD,SAAS,EACT,YAAY,EACZ,UAAU,CAAC,MAAM,EACjB,SAAS,EACT,OAAO,EACP,QAAQ,EACR,IAAI,CACL,CAAA;IAED,8EAA8E;IAC9E,qEAAqE;IACrE,+EAA+E;IAC/E,oEAAoE;IACpE,yEAAyE;IACzE,wDAAwD;IACxD,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,YAAY,GAAG,mBAAmB,CAAC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,CAAA;IACrE,CAAC;IAED,6EAA6E;IAC7E,MAAM,eAAe,CACnB,UAAU,CAAC,KAAK,EAChB,SAAS,KAAK,QAAQ;QACpB,CAAC,CAAC;YACE,OAAO,EAAE,QAAQ;YACjB,SAAS,EAAE,QAAQ;YACnB,SAAS;YACT,YAAY;YACZ,IAAI,EAAE,SAAS;YACf,OAAO;SACR;QACH,CAAC,CAAC;YACE,OAAO,EAAE,QAAQ;YACjB,SAAS,EAAE,QAAQ;YACnB,SAAS;YACT,YAAY;YACZ,IAAI;YACJ,OAAO;SACR,CACN,CAAA;IAED,6EAA6E;IAC7E,MAAM,yBAAyB,CAC7B,SAAS,EACT,YAAY,EACZ,UAAU,CAAC,MAAM,EACjB,SAAS,EACT,OAAO,EACP,QAAQ,EACR,IAAI,CACL,CAAA;IAED,6EAA6E;IAC7E,wDAAwD;IACxD,MAAM,UAAU,GAAG,kBAAkB,CAAC,YAAY,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IACjF,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,eAAe,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC,CAAA;IACtE,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,+DAA+D;IAC/D,YAAY,GAAG,MAAM,sBAAsB,CACzC,SAAS,EACT,YAAY,EACZ,UAAU,CAAC,MAAM,EACjB,SAAS,EACT,OAAO,EACP,IAAI,CACL,CAAA;IAED,OAAO,EAAE,YAAY,EAAE,CAAA;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAiB;IACxC,GAAG,EAAE,eAAe;CACrB,CAAA"}
+{"version":3,"file":"hook-pipeline.js","sourceRoot":"","sources":["../../src/context/hook-pipeline.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,6BAA6B,EAC7B,yBAAyB,EACzB,kBAAkB,EAClB,sBAAsB,EACtB,eAAe,GAChB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AA2BzD,KAAK,UAAU,eAAe,CAAC,IAAsB;IACnD,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;IAE1E,IAAI,YAAY,GAAG,MAAM,mBAAmB,CAC1C,UAAU,CAAC,KAAK,EAChB,SAAS,KAAK,QAAQ;QACpB,CAAC,CAAC;YACE,OAAO,EAAE,QAAQ;YACjB,SAAS,EAAE,QAAQ;YACnB,SAAS;YACT,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,SAAS;YACf,OAAO;SACR;QACH,CAAC,CAAC;YACE,OAAO,EAAE,QAAQ;YACjB,SAAS,EAAE,QAAQ;YACnB,SAAS;YACT,YAAY,EAAE,SAAS;YACvB,IAAI;YACJ,OAAO;SACR,CACN,CAAA;IAED,YAAY,GAAG,MAAM,6BAA6B,CAChD,SAAS,EACT,YAAY,EACZ,UAAU,CAAC,MAAM,EACjB,SAAS,EACT,OAAO,EACP,QAAQ,EACR,IAAI,CACL,CAAA;IAED,gEAAgE;IAChE,sEAAsE;IACtE,+DAA+D;IAC/D,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,YAAY,GAAG,mBAAmB,CAAC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,CAAA;IACrE,CAAC;IAED,MAAM,eAAe,CACnB,UAAU,CAAC,KAAK,EAChB,SAAS,KAAK,QAAQ;QACpB,CAAC,CAAC;YACE,OAAO,EAAE,QAAQ;YACjB,SAAS,EAAE,QAAQ;YACnB,SAAS;YACT,YAAY;YACZ,IAAI,EAAE,SAAS;YACf,OAAO;SACR;QACH,CAAC,CAAC;YACE,OAAO,EAAE,QAAQ;YACjB,SAAS,EAAE,QAAQ;YACnB,SAAS;YACT,YAAY;YACZ,IAAI;YACJ,OAAO;SACR,CACN,CAAA;IAED,MAAM,yBAAyB,CAC7B,SAAS,EACT,YAAY,EACZ,UAAU,CAAC,MAAM,EACjB,SAAS,EACT,OAAO,EACP,QAAQ,EACR,IAAI,CACL,CAAA;IAED,uEAAuE;IACvE,qEAAqE;IACrE,MAAM,UAAU,GAAG,kBAAkB,CAAC,YAAY,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IACjF,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,eAAe,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC,CAAA;IACtE,CAAC;IAED,0EAA0E;IAC1E,yEAAyE;IACzE,oEAAoE;IACpE,YAAY,GAAG,MAAM,sBAAsB,CACzC,SAAS,EACT,YAAY,EACZ,UAAU,CAAC,MAAM,EACjB,SAAS,EACT,OAAO,EACP,IAAI,CACL,CAAA;IAED,OAAO,EAAE,YAAY,EAAE,CAAA;AACzB,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAiB;IACxC,GAAG,EAAE,eAAe;CACrB,CAAA"}

package/dist/context/index.d.ts

@@ -1,6 +1,7 @@
 import type { OpenSaasConfig } from '../config/types.js';
 import type { Session, AccessContext, AccessControlledDB, StorageUtils } from '../access/index.js';
 import type { PrismaClientLike } from '../access/types.js';
+import { TransactionRegistry } from '../access/transaction-registry.js';
 export type ServerActionProps = {
     listKey: string;
     action: 'create';
@@ -51,12 +52,8 @@ export type ServerActionProps = {
     selectedIds?: string[];
 };
 /**
- * Database transaction isolation levels.
- *
- * Mirrors Prisma's `TransactionIsolationLevel`. The level passed to
- * {@link StackContext.transaction} is forwarded to the underlying interactive
- * transaction; provider support varies (e.g. `Serializable` is supported by
- * PostgreSQL — required for the concurrency-sensitive capacity-gate pattern).
+ * Mirrors Prisma's `TransactionIsolationLevel`. Provider support varies —
+ * e.g. `Serializable` requires PostgreSQL.
  */
 export type TransactionIsolationLevel = 'ReadUncommitted' | 'ReadCommitted' | 'RepeatableRead' | 'Serializable' | 'Snapshot';
 /**
@@ -111,15 +108,7 @@ export interface StackContext<TPrisma extends PrismaClientLike = PrismaClientLik
     sudo: () => StackContext<TPrisma>;
     _isSudo: boolean;
 }
-/**
- * Create an access-controlled context
- *
- * @param config - OpenSaas configuration
- * @param prisma - Your Prisma client instance (pass as generic for type safety)
- * @param session - Current session object (or null if not authenticated)
- * @param storage - Optional storage utilities (uploadFile, uploadImage, deleteFile, deleteImage)
- */
-export declare function getContext<TConfig extends OpenSaasConfig, TPrisma extends PrismaClientLike = PrismaClientLike>(config: TConfig, prisma: TPrisma, session: Session | null, storage?: StorageUtils, _isSudo?: boolean, _sharedPlugins?: Record<string, unknown>): StackContext<TPrisma>;
+export declare function getContext<TConfig extends OpenSaasConfig, TPrisma extends PrismaClientLike = PrismaClientLike>(config: TConfig, prisma: TPrisma, session: Session | null, storage?: StorageUtils, _isSudo?: boolean, _sharedPlugins?: Record<string, unknown>, _transactionOwner?: TransactionRegistry): StackContext<TPrisma>;
 /**
  * Populate `target` with the access-controlled CRUD operations for every list,
  * each bound to `prisma` and `context`. Used both by {@link getContext} (at

package/dist/context/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/context/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,oBAAoB,CAAA;AACpE,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAalG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAW1D,MAAM,MAAM,iBAAiB,GACzB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACpE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAChF;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;IAAC,GAAG,EAAE,MAAM,EAAE,CAAA;CAAE,GAQxD;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,EAAE,CAAA;CAAE,GAUrE;IACE,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,eAAe,CAAA;IACvB,IAAI,EAAE,YAAY,GAAG,QAAQ,CAAA;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB,GAQD;IACE,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,eAAe,CAAA;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,OAAO,CAAA;CACf,GASD;IACE,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,eAAe,CAAA;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB,GACD;IACE,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,qBAAqB,CAAA;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CACvB,CAAA;AAiNL;;;;;;;GAOG;AACH,MAAM,MAAM,yBAAyB,GACnC,iBAAiB,GAAG,eAAe,GAAG,gBAAgB,GAAG,cAAc,GAAG,UAAU,CAAA;AAEtF;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,mEAAmE;IACnE,cAAc,CAAC,EAAE,yBAAyB,CAAA;CAC3C;AAeD;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY,CAAC,OAAO,SAAS,gBAAgB,GAAG,gBAAgB;IAC/E,EAAE,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAC/B,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;IACvB,MAAM,EAAE,OAAO,CAAA;IACf,OAAO,EAAE,YAAY,CAAA;IACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChC,YAAY,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5D;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,WAAW,EAAE,CAAC,CAAC,EACb,EAAE,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,EACpD,OAAO,CAAC,EAAE,kBAAkB,KACzB,OAAO,CAAC,CAAC,CAAC,CAAA;IACf,IAAI,EAAE,MAAM,YAAY,CAAC,OAAO,CAAC,CAAA;IACjC,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CACxB,OAAO,SAAS,cAAc,EAC9B,OAAO,SAAS,gBAAgB,GAAG,gBAAgB,EAEnD,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,OAAO,GAAG,IAAI,EACvB,OAAO,CAAC,EAAE,YAAY,EACtB,OAAO,GAAE,OAAe,EAGxB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACvC,YAAY,CAAC,OAAO,CAAC,CA4bvB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,SAAS,gBAAgB,EACjE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,GAC9B,IAAI,CAmCN;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,SAAS,gBAAgB,EAC9D,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,GAC9B,kBAAkB,CAAC,OAAO,CAAC,CAI7B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/context/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,oBAAoB,CAAA;AACpE,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAelG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAW1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAA;AAGvE,MAAM,MAAM,iBAAiB,GACzB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACpE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAChF;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;IAAC,GAAG,EAAE,MAAM,EAAE,CAAA;CAAE,GAOxD;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,EAAE,CAAA;CAAE,GAUrE;IACE,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,eAAe,CAAA;IACvB,IAAI,EAAE,YAAY,GAAG,QAAQ,CAAA;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB,GAKD;IACE,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,eAAe,CAAA;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,OAAO,CAAA;CACf,GAOD;IACE,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,eAAe,CAAA;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB,GACD;IACE,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,qBAAqB,CAAA;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CACvB,CAAA;AAuKL;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GACnC,iBAAiB,GAAG,eAAe,GAAG,gBAAgB,GAAG,cAAc,GAAG,UAAU,CAAA;AAEtF;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,mEAAmE;IACnE,cAAc,CAAC,EAAE,yBAAyB,CAAA;CAC3C;AAeD;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY,CAAC,OAAO,SAAS,gBAAgB,GAAG,gBAAgB;IAC/E,EAAE,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAC/B,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;IACvB,MAAM,EAAE,OAAO,CAAA;IACf,OAAO,EAAE,YAAY,CAAA;IACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChC,YAAY,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5D;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,WAAW,EAAE,CAAC,CAAC,EACb,EAAE,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,EACpD,OAAO,CAAC,EAAE,kBAAkB,KACzB,OAAO,CAAC,CAAC,CAAC,CAAA;IACf,IAAI,EAAE,MAAM,YAAY,CAAC,OAAO,CAAC,CAAA;IACjC,OAAO,EAAE,OAAO,CAAA;CACjB;AA+BD,wBAAgB,UAAU,CACxB,OAAO,SAAS,cAAc,EAC9B,OAAO,SAAS,gBAAgB,GAAG,gBAAgB,EAEnD,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,OAAO,GAAG,IAAI,EACvB,OAAO,CAAC,EAAE,YAAY,EACtB,OAAO,GAAE,OAAe,EAGxB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAIxC,iBAAiB,CAAC,EAAE,mBAAmB,GACtC,YAAY,CAAC,OAAO,CAAC,CA0cvB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,SAAS,gBAAgB,EACjE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,GAC9B,IAAI,CAiCN;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,SAAS,gBAAgB,EAC9D,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,GAC9B,kBAAkB,CAAC,OAAO,CAAC,CAI7B"}