@stratal/framework 0.0.0-canary-d717e8a → 0.0.0-canary-3489cfd

package/dist/auth-context-DXSTlnQH.d.mts

@@ -0,0 +1,85 @@
+import { BaseUser } from "@better-auth/core/db";
+
+//#region src/context/auth-context.d.ts
+/**
+ * Authenticated user shape stored in {@link AuthContext}.
+ *
+ * Inherits Better Auth's base user fields. Apps whose schema stores
+ * `firstName`/`lastName` instead of a `name` column should expose a `name`
+ * via a ZenStack result extension (see
+ * https://zenstack.dev/docs/orm/plugins/extending-orm-client#adding-fields-to-query-results)
+ * so reads return a populated `name` for free.
+ *
+ * Augment via TypeScript module declaration to add app-specific fields. Match
+ * the augmentation to whatever your Better Auth `user.additionalFields` /
+ * plugins are configured to return:
+ *
+ * @example
+ * ```ts
+ * declare module '@stratal/framework/context' {
+ *   interface AuthUser {
+ *     role: string
+ *     locale: string
+ *   }
+ * }
+ * ```
+ */
+interface AuthUser extends BaseUser {}
+interface AuthInfo {
+  user: AuthUser;
+}
+declare class AuthContext {
+  protected user?: AuthUser;
+  /**
+   * Set authentication context.
+   * This should be called once per request with the authenticated user.
+   */
+  setAuthContext(info: AuthInfo): void;
+  /**
+   * Get the authenticated user if available.
+   * Returns undefined if no user is authenticated.
+   */
+  getUser(): AuthUser | undefined;
+  /**
+   * Get the authenticated user or throw if not authenticated.
+   */
+  requireUser(): AuthUser;
+  /**
+   * Get user ID if available.
+   * Returns undefined if no user is authenticated.
+   */
+  getUserId(): string | undefined;
+  /**
+   * Get user ID or throw if not authenticated.
+   * Use this when authentication is required.
+   */
+  requireUserId(): string;
+  /**
+   * Get full authentication context or throw if not initialized.
+   */
+  getAuthInfo(): AuthInfo;
+  /**
+   * Get the raw role string from the authenticated user.
+   *
+   * Reads from `user.role` — apps that use roles should augment {@link AuthUser}
+   * with `role: string` (or similar) so this returns a typed value.
+   */
+  getRole(): string | undefined;
+  /**
+   * Get the user's roles as an array.
+   * Returns an empty array if no role is set or user is not authenticated.
+   */
+  getRoles(): string[];
+  /**
+   * Check if user is authenticated.
+   */
+  isAuthenticated(): boolean;
+  /**
+   * Clear authentication context.
+   * Useful for testing or cleanup.
+   */
+  clearAuthContext(): void;
+}
+//#endregion
+export { AuthInfo as n, AuthUser as r, AuthContext as t };
+//# sourceMappingURL=auth-context-DXSTlnQH.d.mts.map

package/dist/auth-context-DXSTlnQH.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-context-DXSTlnQH.d.mts","names":[],"sources":["../src/context/auth-context.ts"],"mappings":";;;;;AA8BA;;;;;AAEA;;;;;AAIA;;;;;;;;;;;UANiB,QAAA,SAAiB,QAAA;AAAA,UAEjB,QAAA;EACf,IAAA,EAAM,QAAA;AAAA;AAAA,cAIK,WAAA;EAAA,UACD,IAAA,GAAO,QAAA;EAqBF;;;;EAff,cAAA,CAAe,IAAA,EAAM,QAAA;EAsDrB;;;;EA9CA,OAAA,CAAA,GAAW,QAAA;EAuEK;;;EAhEhB,WAAA,CAAA,GAAe,QAAA;;;;;EAWf,SAAA,CAAA;;;;;EAQA,aAAA,CAAA;;;;EAOA,WAAA,CAAA,GAAe,QAAA;;;;;;;EAaf,OAAA,CAAA;;;;;EAQA,QAAA,CAAA;;;;EASA,eAAA,CAAA;;;;;EAQA,gBAAA,CAAA;AAAA"}

package/dist/auth-context-HLwuOl51.mjs

@@ -0,0 +1,85 @@
+import { t as __decorate } from "./decorate-DViXs-0l.mjs";
+import { n as UserNotAuthenticatedError, r as ContextNotInitializedError } from "./errors-B1vVXc1T.mjs";
+import { DI_TOKENS, Transient } from "stratal/di";
+//#region src/context/auth-context.ts
+let AuthContext = class AuthContext {
+	user;
+	/**
+	* Set authentication context.
+	* This should be called once per request with the authenticated user.
+	*/
+	setAuthContext(info) {
+		this.user = info.user;
+	}
+	/**
+	* Get the authenticated user if available.
+	* Returns undefined if no user is authenticated.
+	*/
+	getUser() {
+		return this.user;
+	}
+	/**
+	* Get the authenticated user or throw if not authenticated.
+	*/
+	requireUser() {
+		if (!this.user) throw new UserNotAuthenticatedError();
+		return this.user;
+	}
+	/**
+	* Get user ID if available.
+	* Returns undefined if no user is authenticated.
+	*/
+	getUserId() {
+		return this.user?.id;
+	}
+	/**
+	* Get user ID or throw if not authenticated.
+	* Use this when authentication is required.
+	*/
+	requireUserId() {
+		return this.requireUser().id;
+	}
+	/**
+	* Get full authentication context or throw if not initialized.
+	*/
+	getAuthInfo() {
+		if (!this.user) throw new ContextNotInitializedError("Authentication");
+		return { user: this.user };
+	}
+	/**
+	* Get the raw role string from the authenticated user.
+	*
+	* Reads from `user.role` — apps that use roles should augment {@link AuthUser}
+	* with `role: string` (or similar) so this returns a typed value.
+	*/
+	getRole() {
+		return this.user?.role;
+	}
+	/**
+	* Get the user's roles as an array.
+	* Returns an empty array if no role is set or user is not authenticated.
+	*/
+	getRoles() {
+		const role = this.getRole();
+		if (!role) return [];
+		return role.split(",").map((r) => r.trim()).filter(Boolean);
+	}
+	/**
+	* Check if user is authenticated.
+	*/
+	isAuthenticated() {
+		return !!this.user;
+	}
+	/**
+	* Clear authentication context.
+	* Useful for testing or cleanup.
+	*/
+	clearAuthContext() {
+		this.user = void 0;
+	}
+};
+AuthContext = __decorate([Transient(DI_TOKENS.AuthContext)], AuthContext);
+//#endregion
+export { AuthContext as t };
+
+//# sourceMappingURL=auth-context-HLwuOl51.mjs.map

package/dist/auth-context-HLwuOl51.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-context-HLwuOl51.mjs","names":[],"sources":["../src/context/auth-context.ts"],"sourcesContent":["import type { BaseUser } from '@better-auth/core/db'\nimport { Transient, DI_TOKENS } from 'stratal/di'\nimport {\n  ContextNotInitializedError,\n  UserNotAuthenticatedError\n} from './errors'\n\n/**\n * Authenticated user shape stored in {@link AuthContext}.\n *\n * Inherits Better Auth's base user fields. Apps whose schema stores\n * `firstName`/`lastName` instead of a `name` column should expose a `name`\n * via a ZenStack result extension (see\n * https://zenstack.dev/docs/orm/plugins/extending-orm-client#adding-fields-to-query-results)\n * so reads return a populated `name` for free.\n *\n * Augment via TypeScript module declaration to add app-specific fields. Match\n * the augmentation to whatever your Better Auth `user.additionalFields` /\n * plugins are configured to return:\n *\n * @example\n * ```ts\n * declare module '@stratal/framework/context' {\n *   interface AuthUser {\n *     role: string\n *     locale: string\n *   }\n * }\n * ```\n */\nexport interface AuthUser extends BaseUser {}\n\nexport interface AuthInfo {\n  user: AuthUser\n}\n\n@Transient(DI_TOKENS.AuthContext)\nexport class AuthContext {\n  protected user?: AuthUser\n\n  /**\n   * Set authentication context.\n   * This should be called once per request with the authenticated user.\n   */\n  setAuthContext(info: AuthInfo): void {\n    this.user = info.user\n  }\n\n  /**\n   * Get the authenticated user if available.\n   * Returns undefined if no user is authenticated.\n   */\n  getUser(): AuthUser | undefined {\n    return this.user\n  }\n\n  /**\n   * Get the authenticated user or throw if not authenticated.\n   */\n  requireUser(): AuthUser {\n    if (!this.user) {\n      throw new UserNotAuthenticatedError()\n    }\n    return this.user\n  }\n\n  /**\n   * Get user ID if available.\n   * Returns undefined if no user is authenticated.\n   */\n  getUserId(): string | undefined {\n    return this.user?.id\n  }\n\n  /**\n   * Get user ID or throw if not authenticated.\n   * Use this when authentication is required.\n   */\n  requireUserId(): string {\n    return this.requireUser().id\n  }\n\n  /**\n   * Get full authentication context or throw if not initialized.\n   */\n  getAuthInfo(): AuthInfo {\n    if (!this.user) {\n      throw new ContextNotInitializedError('Authentication')\n    }\n    return { user: this.user }\n  }\n\n  /**\n   * Get the raw role string from the authenticated user.\n   *\n   * Reads from `user.role` — apps that use roles should augment {@link AuthUser}\n   * with `role: string` (or similar) so this returns a typed value.\n   */\n  getRole(): string | undefined {\n    return (this.user as { role?: string } | undefined)?.role\n  }\n\n  /**\n   * Get the user's roles as an array.\n   * Returns an empty array if no role is set or user is not authenticated.\n   */\n  getRoles(): string[] {\n    const role = this.getRole()\n    if (!role) return []\n    return role.split(',').map(r => r.trim()).filter(Boolean)\n  }\n\n  /**\n   * Check if user is authenticated.\n   */\n  isAuthenticated(): boolean {\n    return !!this.user\n  }\n\n  /**\n   * Clear authentication context.\n   * Useful for testing or cleanup.\n   */\n  clearAuthContext(): void {\n    this.user = undefined\n  }\n}\n"],"mappings":";;;;AAqCO,IAAA,cAAA,MAAM,YAAY;CACvB;;;;;CAMA,eAAe,MAAsB;EACnC,KAAK,OAAO,KAAK;;;;;;CAOnB,UAAgC;EAC9B,OAAO,KAAK;;;;;CAMd,cAAwB;EACtB,IAAI,CAAC,KAAK,MACR,MAAM,IAAI,2BAA2B;EAEvC,OAAO,KAAK;;;;;;CAOd,YAAgC;EAC9B,OAAO,KAAK,MAAM;;;;;;CAOpB,gBAAwB;EACtB,OAAO,KAAK,aAAa,CAAC;;;;;CAM5B,cAAwB;EACtB,IAAI,CAAC,KAAK,MACR,MAAM,IAAI,2BAA2B,iBAAiB;EAExD,OAAO,EAAE,MAAM,KAAK,MAAM;;;;;;;;CAS5B,UAA8B;EAC5B,OAAQ,KAAK,MAAwC;;;;;;CAOvD,WAAqB;EACnB,MAAM,OAAO,KAAK,SAAS;EAC3B,IAAI,CAAC,MAAM,OAAO,EAAE;EACpB,OAAO,KAAK,MAAM,IAAI,CAAC,KAAI,MAAK,EAAE,MAAM,CAAC,CAAC,OAAO,QAAQ;;;;;CAM3D,kBAA2B;EACzB,OAAO,CAAC,CAAC,KAAK;;;;;;CAOhB,mBAAyB;EACvB,KAAK,OAAO,KAAA;;;0BAxFf,UAAU,UAAU,YAAY,CAAA,EAAA,YAAA"}

package/dist/context/index.d.mts

@@ -1,4 +1,4 @@
-import { n as AuthInfo, t as AuthContext } from "../auth-context-BXSkiJ56.mjs";
+import { n as AuthInfo, r as AuthUser, t as AuthContext } from "../auth-context-DXSTlnQH.mjs";
 import { ApplicationError } from "stratal/errors";
 
 //#region src/context/errors/context-not-initialized.error.d.ts
@@ -16,5 +16,5 @@ declare class UserNotAuthorizedError extends ApplicationError {
   constructor();
 }
 //#endregion
-export { AuthContext, AuthInfo, ContextNotInitializedError, UserNotAuthenticatedError, UserNotAuthorizedError };
+export { AuthContext, AuthInfo, AuthUser, ContextNotInitializedError, UserNotAuthenticatedError, UserNotAuthorizedError };
 //# sourceMappingURL=index.d.mts.map

package/dist/context/index.mjs

@@ -1,3 +1,3 @@
 import { n as UserNotAuthenticatedError, r as ContextNotInitializedError, t as UserNotAuthorizedError } from "../errors-B1vVXc1T.mjs";
-import { t as AuthContext } from "../auth-context-BberoPal.mjs";
+import { t as AuthContext } from "../auth-context-HLwuOl51.mjs";
 export { AuthContext, ContextNotInitializedError, UserNotAuthenticatedError, UserNotAuthorizedError };

package/dist/database/index.d.mts

@@ -1,3 +1,3 @@
 import { a as InferConnectionSchema, i as InferConnectionExtensions, n as DefaultConnectionName, o as InternalDatabaseEventContext, r as InferAnySchema, s as StratalDatabase, t as ConnectionName } from "../types-BZlcRR2M.mjs";
-import { A as DATABASE_TOKENS, C as UniqueConstraintError, D as DatabaseConfigError, E as ForeignKeyConstraintError, F as DatabaseModuleConfig, M as DatabaseService, N as DatabaseConnectionConfig, O as DatabaseError, P as DatabaseModule, S as fromZenStackError, T as InvalidErrorCodeRangeError, _ as EventPhase, a as DbPushCommand, b as ModelName, c as ZenStackCommand, d as EventEmitterPluginOptions, f as ErrorHandlerPlugin, g as DatabaseOperation, h as DatabaseEvents, i as MigrateDeployCommand, j as connectionSymbol, k as InjectDB, l as SchemaSwitcher, m as DatabaseEventName, n as MigrateResetCommand, o as DbPullCommand, p as databaseMessages, r as MigrateDevCommand, s as DbGenerateCommand, t as MigrateStatusCommand, u as EventEmitterPlugin, v as GetData, w as RecordNotFoundError, x as ParseEvent, y as GetResult } from "../index-CpFBG0Ws.mjs";
+import { A as DATABASE_TOKENS, C as UniqueConstraintError, D as DatabaseConfigError, E as ForeignKeyConstraintError, F as DatabaseModuleConfig, M as DatabaseService, N as DatabaseConnectionConfig, O as DatabaseError, P as DatabaseModule, S as fromZenStackError, T as InvalidErrorCodeRangeError, _ as EventPhase, a as DbPushCommand, b as ModelName, c as ZenStackCommand, d as EventEmitterPluginOptions, f as ErrorHandlerPlugin, g as DatabaseOperation, h as DatabaseEvents, i as MigrateDeployCommand, j as connectionSymbol, k as InjectDB, l as SchemaSwitcher, m as DatabaseEventName, n as MigrateResetCommand, o as DbPullCommand, p as databaseMessages, r as MigrateDevCommand, s as DbGenerateCommand, t as MigrateStatusCommand, u as EventEmitterPlugin, v as GetData, w as RecordNotFoundError, x as ParseEvent, y as GetResult } from "../index-CCDPF-1Y.mjs";
 export { ConnectionName, DATABASE_TOKENS, DatabaseConfigError, DatabaseConnectionConfig, DatabaseError, DatabaseEventName, DatabaseEvents, DatabaseModule, DatabaseModuleConfig, DatabaseOperation, DatabaseService, DbGenerateCommand, DbPullCommand, DbPushCommand, DefaultConnectionName, ErrorHandlerPlugin, EventEmitterPlugin, EventEmitterPluginOptions, EventPhase, ForeignKeyConstraintError, GetData, GetResult, InferAnySchema, InferConnectionExtensions, InferConnectionSchema, InjectDB, InternalDatabaseEventContext, InvalidErrorCodeRangeError, MigrateDeployCommand, MigrateDevCommand, MigrateResetCommand, MigrateStatusCommand, ModelName, ParseEvent, RecordNotFoundError, SchemaSwitcher, StratalDatabase, UniqueConstraintError, ZenStackCommand, connectionSymbol, databaseMessages, fromZenStackError };

package/dist/database/index.mjs

@@ -1,8 +1,8 @@
-import { t as __decorateMetadata } from "../decorateMetadata-CqtSx3_1.mjs";
-import { t as __decorate } from "../decorate-CdfCRvAc.mjs";
+import { t as __decorateMetadata } from "../decorateMetadata-D5WUsc6Y.mjs";
+import { t as __decorate } from "../decorate-DViXs-0l.mjs";
+import { DI_TOKENS, Scope, Transient, delay } from "stratal/di";
 import { I18nModule } from "stratal/i18n";
 import { Module } from "stratal/module";
-import { DI_TOKENS, Scope, Transient, delay } from "stratal/di";
 import { ApplicationError, ERROR_CODES } from "stratal/errors";
 import { inject as inject$1 } from "tsyringe";
 import { Command } from "stratal/quarry";
@@ -349,6 +349,7 @@ var ErrorHandlerPlugin = class {
 * ```
 */
 var EventEmitterPlugin = class {
+	options;
 	id = "event-emitter";
 	constructor(options) {
 		this.options = options;
@@ -399,7 +400,8 @@ const databaseConnectionSchema = z.object({
 	name: z.string().min(1, withI18n("database.connectionNameRequired")),
 	schema: z.object({}).loose(),
 	dialect: z.function(),
-	plugins: z.array(z.object({}).loose()).optional()
+	plugins: z.array(z.object({}).loose()).optional(),
+	computedFields: z.object({}).loose().optional()
 });
 z.object({
 	default: z.string().min(1, withI18n("database.defaultConnectionRequired")),
@@ -419,7 +421,8 @@ function createDatabaseService(conn, eventRegistry) {
 			const dialect = conn.dialect();
 			super(conn.schema, {
 				dialect,
-				plugins
+				plugins,
+				computedFields: conn.computedFields
 			});
 		}
 	};

package/dist/database/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["inject"],"sources":["../../src/database/commands/zenstack.command.ts","../../src/database/commands/db-generate.command.ts","../../src/database/commands/db-pull.command.ts","../../src/database/commands/db-push.command.ts","../../src/database/commands/migrate-deploy.command.ts","../../src/database/commands/migrate-dev.command.ts","../../src/database/commands/migrate-reset.command.ts","../../src/database/commands/migrate-status.command.ts","../../src/database/errors/invalid-error-code-range.error.ts","../../src/database/errors/database-error.ts","../../src/database/errors/database-config.error.ts","../../src/database/errors/foreign-key-constraint.error.ts","../../src/database/errors/record-not-found.error.ts","../../src/database/errors/unique-constraint.error.ts","../../src/database/errors/from-zenstack-error.ts","../../src/database/plugins/error-handler.plugin.ts","../../src/database/plugins/event-emitter.plugin.ts","../../src/database/plugins/schema-switcher.ts","../../src/database/database.helpers.ts","../../src/database/database.tokens.ts","../../src/database/i18n/en.ts","../../src/database/database.module.ts","../../src/database/decorators/inject-db.decorator.ts"],"sourcesContent":["import { Command } from 'stratal/quarry'\n\n/**\n * Base command for ZenStack CLI wrappers.\n * Uses execFileSync with array arguments to prevent shell injection.\n */\nexport abstract class ZenStackCommand extends Command {\n  protected async zenstack(args: string[]): Promise<number> {\n    // Dynamic import — node:child_process is only available in the Quarry CLI (Node) context\n    const { execFileSync } = await import('node:child_process')\n\n    try {\n      const output = execFileSync('npx', ['zenstack', ...args], {\n        encoding: 'utf-8',\n        stdio: 'pipe',\n      })\n      if (output) this.info(output.trim())\n      return 0\n    } catch (err) {\n      const error = err as { stderr?: string; stdout?: string; status?: number }\n      if (error.stderr) this.error(error.stderr.trim())\n      if (error.stdout) this.info(error.stdout.trim())\n      return error.status ?? 1\n    }\n  }\n}\n","import { ZenStackCommand } from './zenstack.command'\n\nexport class DbGenerateCommand extends ZenStackCommand {\n  static command = 'db:generate {--schema= : Path to schema file} {--watch : Enable watch mode}'\n  static description = 'Generate ZenStack ORM client'\n\n  async handle(): Promise<number> {\n    const args = ['generate']\n    const schema = this.string('schema')\n\n    if (schema) args.push('--schema', schema)\n    if (this.boolean('watch')) args.push('--watch')\n\n    return this.zenstack(args)\n  }\n}\n","import { ZenStackCommand } from './zenstack.command'\n\nexport class DbPullCommand extends ZenStackCommand {\n  static command = 'db:pull {--schema= : Path to schema file}'\n  static description = 'Introspect database and generate schema'\n\n  async handle(): Promise<number> {\n    const args = ['db', 'pull']\n    const schema = this.string('schema')\n\n    if (schema) args.push('--schema', schema)\n\n    return this.zenstack(args)\n  }\n}\n","import { ZenStackCommand } from './zenstack.command'\n\nexport class DbPushCommand extends ZenStackCommand {\n  static command = 'db:push {--schema= : Path to schema file} {--accept-data-loss : Accept data loss} {--force-reset : Force reset database}'\n  static description = 'Push database schema changes'\n\n  async handle(): Promise<number> {\n    const args = ['db', 'push']\n    const schema = this.string('schema')\n\n    if (schema) args.push('--schema', schema)\n    if (this.boolean('accept-data-loss')) args.push('--accept-data-loss')\n    if (this.boolean('force-reset')) args.push('--force-reset')\n\n    return this.zenstack(args)\n  }\n}\n","import { ZenStackCommand } from './zenstack.command'\n\nexport class MigrateDeployCommand extends ZenStackCommand {\n  static command = 'migrate:deploy {--schema= : Path to schema file}'\n  static description = 'Deploy pending migrations'\n\n  async handle(): Promise<number> {\n    const args = ['migrate', 'deploy']\n    const schema = this.string('schema')\n\n    if (schema) args.push('--schema', schema)\n\n    return this.zenstack(args)\n  }\n}\n","import { ZenStackCommand } from './zenstack.command'\n\nexport class MigrateDevCommand extends ZenStackCommand {\n  static command = 'migrate:dev {--schema= : Path to schema file} {--name= : Migration name} {--create-only : Create without applying}'\n  static description = 'Create and apply migration'\n\n  async handle(): Promise<number> {\n    const args = ['migrate', 'dev']\n    const schema = this.string('schema')\n    const name = this.string('name')\n\n    if (schema) args.push('--schema', schema)\n    if (name) args.push('--name', name)\n    if (this.boolean('create-only')) args.push('--create-only')\n\n    return this.zenstack(args)\n  }\n}\n","import { ZenStackCommand } from './zenstack.command'\n\nexport class MigrateResetCommand extends ZenStackCommand {\n  static command = 'migrate:reset {--schema= : Path to schema file} {--force : Skip confirmation} {--skip-seed : Skip seeding}'\n  static description = 'Reset database'\n\n  async handle(): Promise<number> {\n    const args = ['migrate', 'reset']\n    const schema = this.string('schema')\n\n    if (schema) args.push('--schema', schema)\n    if (this.boolean('force')) args.push('--force')\n    if (this.boolean('skip-seed')) args.push('--skip-seed')\n\n    return this.zenstack(args)\n  }\n}\n","import { ZenStackCommand } from './zenstack.command'\n\nexport class MigrateStatusCommand extends ZenStackCommand {\n  static command = 'migrate:status {--schema= : Path to schema file}'\n  static description = 'Check migration status'\n\n  async handle(): Promise<number> {\n    const args = ['migrate', 'status']\n    const schema = this.string('schema')\n\n    if (schema) args.push('--schema', schema)\n\n    return this.zenstack(args)\n  }\n}\n","import { ApplicationError, ERROR_CODES } from 'stratal/errors'\n\n/**\n * InvalidErrorCodeRangeError\n *\n * Thrown when a DatabaseError subclass is constructed with an error code\n * outside the valid database error range (2000-2999).\n * This is a developer-facing error to enforce error code conventions.\n */\nexport class InvalidErrorCodeRangeError extends ApplicationError {\n  constructor(code: number, expectedRange: string) {\n    super(\n      'errors.invalidErrorCodeRange',\n      ERROR_CODES.SYSTEM.INVALID_ERROR_CODE_RANGE,\n      { code, expectedRange }\n    )\n  }\n}\n","import type { MessageKeys } from 'stratal/i18n'\nimport { ApplicationError, ERROR_CODES, type ErrorCode } from 'stratal/errors'\nimport { InvalidErrorCodeRangeError } from './invalid-error-code-range.error'\n\n/**\n * DatabaseError\n *\n * Generic database error thrown when a database operation fails\n * and doesn't fit into a more specific error category.\n *\n * This is the base class for all database-related errors.\n */\nexport class DatabaseError extends ApplicationError {\n  constructor(\n    messageKey: MessageKeys = 'errors.databaseGeneric',\n    code: ErrorCode = ERROR_CODES.DATABASE.GENERIC,\n    metadata?: Record<string, unknown>\n  ) {\n    // Validate that code is in the database error range\n    if (code < 2000 || code >= 3000) {\n      throw new InvalidErrorCodeRangeError(code, '2000-2999')\n    }\n\n    super(messageKey, code, metadata)\n  }\n}\n","import { ERROR_CODES } from 'stratal/errors'\nimport { DatabaseError } from './database-error'\n\nexport class DatabaseConfigError extends DatabaseError {\n  constructor(details: string) {\n    super('errors.databaseGeneric', ERROR_CODES.DATABASE.GENERIC, { details })\n  }\n}\n","import { ERROR_CODES } from 'stratal/errors'\nimport { DatabaseError } from './database-error'\n\n/**\n * ForeignKeyConstraintError\n *\n * Thrown when a database foreign key constraint is violated.\n * This typically occurs when:\n * - Trying to insert a record with a foreign key that doesn't exist\n * - Trying to delete a record that is referenced by other records\n * - Trying to update a foreign key to a non-existent value\n */\nexport class ForeignKeyConstraintError extends DatabaseError {\n  constructor(field?: string) {\n    super('errors.databaseForeignKeyConstraint', ERROR_CODES.DATABASE.FOREIGN_KEY_CONSTRAINT, {\n      field,\n    })\n  }\n}\n","import { ERROR_CODES } from 'stratal/errors'\nimport { DatabaseError } from './database-error'\n\n/**\n * RecordNotFoundError\n *\n * Generic error thrown when a database record is not found.\n * This is typically thrown when a findUnique or findFirst operation\n * returns null, or when a required record doesn't exist.\n *\n * Services should catch this and optionally refine it to a more specific\n * domain error (e.g., NoteNotFoundError, UserNotFoundError).\n */\nexport class RecordNotFoundError extends DatabaseError {\n  constructor(details?: string) {\n    super('errors.databaseRecordNotFound', ERROR_CODES.DATABASE.RECORD_NOT_FOUND, {\n      details,\n    })\n  }\n}\n","import { ERROR_CODES } from 'stratal/errors'\nimport { DatabaseError } from './database-error'\n\n/**\n * UniqueConstraintError\n *\n * Thrown when a database unique constraint is violated.\n * This typically occurs when trying to insert or update a record\n * with a value that already exists in a unique column.\n *\n * Services should catch this and optionally refine it to a more specific\n * domain error (e.g., UserEmailAlreadyExistsError).\n */\nexport class UniqueConstraintError extends DatabaseError {\n  constructor(fields?: string[]) {\n    super('errors.databaseUniqueConstraint', ERROR_CODES.DATABASE.UNIQUE_CONSTRAINT, {\n      fields,\n    })\n  }\n}\n","import { ORMError, ORMErrorReason } from '@zenstackhq/orm'\nimport { ERROR_CODES } from 'stratal/errors'\nimport { DatabaseError } from './database-error'\nimport { ForeignKeyConstraintError } from './foreign-key-constraint.error'\nimport { RecordNotFoundError } from './record-not-found.error'\nimport { UniqueConstraintError } from './unique-constraint.error'\n\n/**\n * Transform ZenStack ORM errors into ApplicationError instances\n *\n * This function maps ORMError codes to generic database error classes.\n * Services can catch these generic errors and optionally refine them to\n * more specific domain errors if needed.\n *\n * @param error - The error thrown by ZenStack ORM\n * @returns An ApplicationError instance\n *\n * @example\n * ```typescript\n * try {\n *   await db.user.create({ data: { email: 'existing@example.com' } })\n * } catch (error) {\n *   throw fromZenStackError(error) // Becomes UniqueConstraintError or other\n * }\n * ```\n */\nexport function fromZenStackError(error: unknown): DatabaseError {\n  // Handle ZenStack ORM Errors\n  if (error instanceof ORMError) {\n    const ormError = error\n\n    switch (ormError.reason) {\n      case ORMErrorReason.NOT_FOUND:\n        return new RecordNotFoundError(ormError.model)\n\n      case ORMErrorReason.DB_QUERY_ERROR:\n        // Parse database-specific error codes\n        return parseDatabaseError(ormError)\n\n      case ORMErrorReason.INVALID_INPUT:\n        return new DatabaseError(\n          'errors.databaseInvalidQuery',\n          ERROR_CODES.DATABASE.GENERIC,\n          { message: ormError.message }\n        )\n\n      case ORMErrorReason.CONFIG_ERROR:\n        return new DatabaseError(\n          'errors.databaseConnectionFailed',\n          ERROR_CODES.DATABASE.CONNECTION_FAILED,\n          { message: ormError.message }\n        )\n\n      case ORMErrorReason.NOT_SUPPORTED:\n        return new DatabaseError(\n          'errors.databaseGeneric',\n          ERROR_CODES.DATABASE.GENERIC,\n          { message: ormError.message, reason: 'Operation not supported' }\n        )\n\n      case ORMErrorReason.INTERNAL_ERROR:\n        return new DatabaseError(\n          'errors.databaseGeneric',\n          ERROR_CODES.DATABASE.GENERIC,\n          { message: ormError.message }\n        )\n\n      default:\n        return new DatabaseError(\n          'errors.databaseGeneric',\n          ERROR_CODES.DATABASE.GENERIC,\n          { message: ormError.message, reason: ormError.reason }\n        )\n    }\n  }\n\n  // Handle unknown errors\n  return new DatabaseError(\n    'errors.databaseGeneric',\n    ERROR_CODES.DATABASE.GENERIC,\n    { originalError: String(error) }\n  )\n}\n\n/**\n * Parse database-specific errors from the dbErrorCode field\n */\nfunction parseDatabaseError(error: ORMError): DatabaseError {\n  // Cast dbErrorCode to string since ZenStack types it loosely\n  const dbErrorCode = error.dbErrorCode as string | undefined\n\n  // PostgreSQL error codes\n  // https://www.postgresql.org/docs/current/errcodes-appendix.html\n  if (dbErrorCode) {\n    // Class 23 - Integrity Constraint Violation\n    if (dbErrorCode === '23505') {\n      // Unique violation\n      return new UniqueConstraintError([error.model ?? 'unknown'])\n    }\n\n    if (dbErrorCode === '23503') {\n      // Foreign key violation\n      return new ForeignKeyConstraintError(error.model ?? 'unknown')\n    }\n\n    if (dbErrorCode === '23502') {\n      // Not null violation\n      return new DatabaseError(\n        'errors.databaseNullConstraint',\n        ERROR_CODES.DATABASE.NULL_CONSTRAINT,\n        { dbErrorCode, message: error.dbErrorMessage }\n      )\n    }\n\n    if (dbErrorCode === '23514') {\n      // Check constraint violation\n      return new DatabaseError(\n        'errors.databaseConstraintFailed',\n        ERROR_CODES.DATABASE.GENERIC,\n        { dbErrorCode, message: error.dbErrorMessage }\n      )\n    }\n\n    // Class 42 - Syntax Error or Access Rule Violation\n    if (dbErrorCode.startsWith('42')) {\n      if (dbErrorCode === '42P01') {\n        // Undefined table\n        return new DatabaseError(\n          'errors.databaseTableNotFound',\n          ERROR_CODES.DATABASE.GENERIC,\n          { dbErrorCode, message: error.dbErrorMessage }\n        )\n      }\n\n      if (dbErrorCode === '42703') {\n        // Undefined column\n        return new DatabaseError(\n          'errors.databaseColumnNotFound',\n          ERROR_CODES.DATABASE.GENERIC,\n          { dbErrorCode, message: error.dbErrorMessage }\n        )\n      }\n    }\n\n    // Class 08 - Connection Exception\n    if (dbErrorCode.startsWith('08')) {\n      return new DatabaseError(\n        'errors.databaseConnectionFailed',\n        ERROR_CODES.DATABASE.CONNECTION_FAILED,\n        { dbErrorCode, message: error.dbErrorMessage }\n      )\n    }\n\n    // Class 57 - Operator Intervention\n    if (dbErrorCode === '57014') {\n      // Query cancelled\n      return new DatabaseError(\n        'errors.databaseTimeout',\n        ERROR_CODES.DATABASE.TIMEOUT,\n        { dbErrorCode, message: error.dbErrorMessage }\n      )\n    }\n\n    // Class 40 - Transaction Rollback\n    if (dbErrorCode.startsWith('40')) {\n      return new DatabaseError(\n        'errors.databaseTransactionConflict',\n        ERROR_CODES.DATABASE.TRANSACTION_CONFLICT,\n        { dbErrorCode, message: error.dbErrorMessage }\n      )\n    }\n\n    // Class 53 - Insufficient Resources\n    if (dbErrorCode === '53300') {\n      // Too many connections\n      return new DatabaseError(\n        'errors.databaseTooManyConnections',\n        ERROR_CODES.DATABASE.TOO_MANY_CONNECTIONS,\n        { dbErrorCode, message: error.dbErrorMessage }\n      )\n    }\n  }\n\n  // Default database error\n  return new DatabaseError(\n    'errors.databaseGeneric',\n    ERROR_CODES.DATABASE.GENERIC,\n    {\n      dbErrorCode,\n      dbErrorMessage: error.dbErrorMessage,\n      sql: error.sql,\n    }\n  )\n}\n","import { type RuntimePlugin } from '@zenstackhq/orm'\nimport { type SchemaDef } from '@zenstackhq/orm/schema'\nimport { fromZenStackError } from '../errors'\n\n/**\n * ZenStack runtime plugin that transforms ORM errors into ApplicationError instances.\n *\n * @example\n * ```typescript\n * super(schema, {\n *   dialect: new PostgresDialect({ pool }),\n *   plugins: [new ErrorHandlerPlugin()]\n * })\n * ```\n */\nexport class ErrorHandlerPlugin implements RuntimePlugin<SchemaDef, Record<string, unknown>, Record<string, unknown>, {}> {\n  readonly id = 'error-handler'\n\n  onQuery = async ({ args, proceed }: {\n    args: Record<string, unknown> | undefined\n    proceed: (args: Record<string, unknown> | undefined) => Promise<unknown>\n  }): Promise<unknown> => {\n    try {\n      return await proceed(args)\n    } catch (error) {\n      throw fromZenStackError(error)\n    }\n  }\n}\n","import { type RuntimePlugin } from '@zenstackhq/orm'\nimport { type SchemaDef } from '@zenstackhq/orm/schema'\nimport type { EventName, IEventRegistry } from 'stratal/events'\n\nexport interface EventEmitterPluginOptions {\n  eventRegistry: IEventRegistry\n}\n\n/**\n * ZenStack runtime plugin that emits before/after events for database operations.\n *\n * Emits events in the format:\n * - `before.{Model}.{operation}` - Before the database operation\n * - `after.{Model}.{operation}` - After the database operation\n *\n * @example\n * ```typescript\n * super(schema, {\n *   dialect: new PostgresDialect({ pool }),\n *   plugins: [\n *     new EventEmitterPlugin({\n *       eventRegistry,\n *     })\n *   ]\n * })\n * ```\n */\nexport class EventEmitterPlugin implements RuntimePlugin<SchemaDef, Record<string, unknown>, Record<string, unknown>, {}> {\n  readonly id = 'event-emitter'\n\n  constructor(private options: EventEmitterPluginOptions) { }\n\n  onQuery = async ({ model, operation, args, proceed }: {\n    model: string\n    operation: string\n    args: Record<string, unknown> | undefined\n    proceed: (args: Record<string, unknown> | undefined) => Promise<unknown>\n  }): Promise<unknown> => {\n    const { eventRegistry } = this.options\n    const eventBase = `${model}.${operation}`\n\n    // Emit BEFORE event\n    await eventRegistry.emit(`before.${eventBase}` as EventName, {\n      data: args,\n    })\n\n    // Execute the actual database operation\n    const result = await proceed(args)\n\n    // Emit AFTER event\n    await eventRegistry.emit(`after.${eventBase}` as EventName, {\n      data: args,\n      result,\n    })\n\n    return result\n  }\n}\n","interface SwitchableClient {\n  $schema: { provider: { defaultSchema: string } } & Record<string, unknown>\n  schema: unknown\n}\n\n/**\n * Switches the active schema on a ZenStack/Kysely database client by mutating\n * `$schema.provider.defaultSchema`. This causes ZenStack's QueryNameMapper to\n * generate fully-qualified table references (e.g. `\"tenant_123\".\"User\"`).\n *\n * Must be called BEFORE any queries are made on the client.\n *\n * Note: The ZenStack RuntimePlugin `onQuery` hook fires after table names are\n * already resolved, so a plugin-based approach cannot set the schema prefix.\n * Direct client mutation is the only supported method.\n */\nexport class SchemaSwitcher {\n  static apply<T>(client: T, schemaName: string): T {\n    const c = client as unknown as SwitchableClient\n    const switched = {\n      ...c.$schema,\n      provider: { ...c.$schema.provider, defaultSchema: schemaName },\n    }\n    c.$schema = switched\n    c.schema = switched\n    return client\n  }\n}\n","import { ZenStackClient, type AnyPlugin } from '@zenstackhq/orm'\nimport { Transient } from 'stratal/di'\nimport type { IEventRegistry } from 'stratal/events'\nimport { withI18n, z } from 'stratal/validation'\nimport type { DatabaseConnectionConfig } from './database.module'\nimport { ErrorHandlerPlugin, EventEmitterPlugin } from './plugins'\n\nconst databaseConnectionSchema = z.object({\n  name: z.string().min(1, withI18n('database.connectionNameRequired')),\n  schema: z.object({}).loose(),\n  dialect: z.function(),\n  plugins: z.array(z.object({}).loose()).optional(),\n})\n\nexport const databaseModuleConfigSchema = z.object({\n  default: z.string().min(1, withI18n('database.defaultConnectionRequired')),\n  connections: z.array(databaseConnectionSchema).min(1, withI18n('database.connectionRequired')),\n}).refine(\n  (config) => {\n    const names = config.connections.map(c => c.name)\n    return new Set(names).size === names.length\n  },\n  withI18n('database.duplicateConnections')\n).refine(\n  (config) => config.connections.some(c => c.name === config.default),\n  withI18n('database.defaultConnectionNotFound')\n)\n\nexport function createDatabaseService(\n  conn: DatabaseConnectionConfig,\n  eventRegistry: IEventRegistry,\n): new () => InstanceType<typeof ZenStackClient> {\n  const plugins: AnyPlugin[] = [\n    new ErrorHandlerPlugin(),\n    new EventEmitterPlugin({\n      eventRegistry,\n    }),\n    ...(conn.plugins ?? []),\n  ]\n\n  @Transient()\n  class DatabaseClient extends ZenStackClient<typeof conn.schema> {\n    constructor() {\n      const dialect = conn.dialect()\n      super(conn.schema, { dialect, plugins })\n    }\n  }\n\n  return DatabaseClient\n}\n","export const DATABASE_TOKENS = {\n  Options: Symbol.for('stratal:database:options'),\n  Services: Symbol.for('stratal:database:services'),\n} as const\n\nimport type { ConnectionName } from './types'\n\nexport function connectionSymbol(name: ConnectionName): symbol {\n  return Symbol.for(`stratal:database:connection:${name}`)\n}\n","export const databaseMessages = {\n  en: {\n    connectionNameRequired: 'Connection name is required',\n    defaultConnectionRequired: 'Default connection name is required',\n    connectionRequired: 'At least one connection is required',\n    duplicateConnections: 'Duplicate connection names found',\n    defaultConnectionNotFound: 'Default connection not found in connections',\n  },\n} as const\n\ndeclare module 'stratal/i18n' {\n  interface AppMessageNamespaces {\n    database: typeof databaseMessages['en']\n  }\n}\n","import type { AnyPlugin, ClientOptions } from '@zenstackhq/orm'\nimport type { SchemaDef } from '@zenstackhq/schema'\nimport { delay, DI_TOKENS, Scope } from 'stratal/di'\nimport type { IEventRegistry } from 'stratal/events'\nimport { I18nModule } from 'stratal/i18n'\nimport {\n  Module,\n  type AsyncModuleOptions,\n  type DynamicModule,\n  type InjectionToken,\n  type ModuleContext,\n  type OnInitialize,\n  type OnShutdown,\n} from 'stratal/module'\nimport { DbGenerateCommand } from './commands/db-generate.command'\nimport { DbPullCommand } from './commands/db-pull.command'\nimport { DbPushCommand } from './commands/db-push.command'\nimport { MigrateDeployCommand } from './commands/migrate-deploy.command'\nimport { MigrateDevCommand } from './commands/migrate-dev.command'\nimport { MigrateResetCommand } from './commands/migrate-reset.command'\nimport { MigrateStatusCommand } from './commands/migrate-status.command'\nimport { createDatabaseService } from './database.helpers'\nimport { connectionSymbol, DATABASE_TOKENS } from './database.tokens'\nimport { databaseMessages } from './i18n'\nimport type { ConnectionName, DefaultConnectionName } from './types'\n\nexport interface DatabaseConnectionConfig<\n  Schema extends SchemaDef = SchemaDef,\n  Name extends ConnectionName = ConnectionName,\n> {\n  name: Name\n  schema: Schema\n  dialect: () => ClientOptions<SchemaDef>['dialect']\n  plugins?: AnyPlugin[]\n}\n\nexport interface DatabaseModuleConfig {\n  default: DefaultConnectionName\n  connections: DatabaseConnectionConfig[]\n}\n\n@Module({\n  imports: [\n    I18nModule.registerMessages({ en: { database: databaseMessages.en } }),\n  ],\n  providers: [\n    DbGenerateCommand,\n    DbPushCommand,\n    DbPullCommand,\n    MigrateDevCommand,\n    MigrateDeployCommand,\n    MigrateStatusCommand,\n    MigrateResetCommand,\n  ],\n})\nexport class DatabaseModule implements OnInitialize, OnShutdown {\n  static forRoot(config: DatabaseModuleConfig): DynamicModule {\n    return {\n      module: DatabaseModule,\n      providers: [\n        { provide: DATABASE_TOKENS.Options, useValue: config as unknown as object },\n      ],\n    }\n  }\n\n  static forRootAsync(options: AsyncModuleOptions<DatabaseModuleConfig>): DynamicModule {\n    return {\n      module: DatabaseModule,\n      providers: [\n        {\n          provide: DATABASE_TOKENS.Options,\n          useFactory: options.useFactory,\n          inject: options.inject,\n        },\n      ],\n    }\n  }\n\n  onInitialize(context: ModuleContext): void {\n    const config = context.container.resolve<DatabaseModuleConfig>(DATABASE_TOKENS.Options)\n    const eventRegistry = context.container.resolve<IEventRegistry>(DI_TOKENS.EventRegistry)\n    const container = context.container.getTsyringeContainer();\n\n    for (const conn of config.connections) {\n      const Service = createDatabaseService(conn, eventRegistry);\n\n      container.register(connectionSymbol(conn.name) as InjectionToken<symbol>,\n        // @ts-expect-error Dynamic class type mismatch\n        delay(() => Service),\n        { lifecycle: Scope.Request })\n    }\n\n    context.container.registerExisting(DI_TOKENS.Database, connectionSymbol(config.default))\n\n    context.logger.info('DatabaseModule initialized')\n  }\n\n  onShutdown(context: ModuleContext): void {\n    context.logger.info('DatabaseModule shutdown')\n  }\n}\n","import { inject } from 'tsyringe'\nimport type { ConnectionName } from '../types'\nimport { connectionSymbol } from '../database.tokens'\n\nexport function InjectDB(name: ConnectionName): ParameterDecorator {\n  return inject(connectionSymbol(name))\n}\n"],"mappings":";;;;;;;;;;;;;;;AAMA,IAAsB,kBAAtB,cAA8C,QAAQ;CACpD,MAAgB,SAAS,MAAiC;EAExD,MAAM,EAAE,iBAAiB,MAAM,OAAO;AAEtC,MAAI;GACF,MAAM,SAAS,aAAa,OAAO,CAAC,YAAY,GAAG,KAAK,EAAE;IACxD,UAAU;IACV,OAAO;IACR,CAAC;AACF,OAAI,OAAQ,MAAK,KAAK,OAAO,MAAM,CAAC;AACpC,UAAO;WACA,KAAK;GACZ,MAAM,QAAQ;AACd,OAAI,MAAM,OAAQ,MAAK,MAAM,MAAM,OAAO,MAAM,CAAC;AACjD,OAAI,MAAM,OAAQ,MAAK,KAAK,MAAM,OAAO,MAAM,CAAC;AAChD,UAAO,MAAM,UAAU;;;;;;ACpB7B,IAAa,oBAAb,cAAuC,gBAAgB;CACrD,OAAO,UAAU;CACjB,OAAO,cAAc;CAErB,MAAM,SAA0B;EAC9B,MAAM,OAAO,CAAC,WAAW;EACzB,MAAM,SAAS,KAAK,OAAO,SAAS;AAEpC,MAAI,OAAQ,MAAK,KAAK,YAAY,OAAO;AACzC,MAAI,KAAK,QAAQ,QAAQ,CAAE,MAAK,KAAK,UAAU;AAE/C,SAAO,KAAK,SAAS,KAAK;;;;;ACX9B,IAAa,gBAAb,cAAmC,gBAAgB;CACjD,OAAO,UAAU;CACjB,OAAO,cAAc;CAErB,MAAM,SAA0B;EAC9B,MAAM,OAAO,CAAC,MAAM,OAAO;EAC3B,MAAM,SAAS,KAAK,OAAO,SAAS;AAEpC,MAAI,OAAQ,MAAK,KAAK,YAAY,OAAO;AAEzC,SAAO,KAAK,SAAS,KAAK;;;;;ACV9B,IAAa,gBAAb,cAAmC,gBAAgB;CACjD,OAAO,UAAU;CACjB,OAAO,cAAc;CAErB,MAAM,SAA0B;EAC9B,MAAM,OAAO,CAAC,MAAM,OAAO;EAC3B,MAAM,SAAS,KAAK,OAAO,SAAS;AAEpC,MAAI,OAAQ,MAAK,KAAK,YAAY,OAAO;AACzC,MAAI,KAAK,QAAQ,mBAAmB,CAAE,MAAK,KAAK,qBAAqB;AACrE,MAAI,KAAK,QAAQ,cAAc,CAAE,MAAK,KAAK,gBAAgB;AAE3D,SAAO,KAAK,SAAS,KAAK;;;;;ACZ9B,IAAa,uBAAb,cAA0C,gBAAgB;CACxD,OAAO,UAAU;CACjB,OAAO,cAAc;CAErB,MAAM,SAA0B;EAC9B,MAAM,OAAO,CAAC,WAAW,SAAS;EAClC,MAAM,SAAS,KAAK,OAAO,SAAS;AAEpC,MAAI,OAAQ,MAAK,KAAK,YAAY,OAAO;AAEzC,SAAO,KAAK,SAAS,KAAK;;;;;ACV9B,IAAa,oBAAb,cAAuC,gBAAgB;CACrD,OAAO,UAAU;CACjB,OAAO,cAAc;CAErB,MAAM,SAA0B;EAC9B,MAAM,OAAO,CAAC,WAAW,MAAM;EAC/B,MAAM,SAAS,KAAK,OAAO,SAAS;EACpC,MAAM,OAAO,KAAK,OAAO,OAAO;AAEhC,MAAI,OAAQ,MAAK,KAAK,YAAY,OAAO;AACzC,MAAI,KAAM,MAAK,KAAK,UAAU,KAAK;AACnC,MAAI,KAAK,QAAQ,cAAc,CAAE,MAAK,KAAK,gBAAgB;AAE3D,SAAO,KAAK,SAAS,KAAK;;;;;ACb9B,IAAa,sBAAb,cAAyC,gBAAgB;CACvD,OAAO,UAAU;CACjB,OAAO,cAAc;CAErB,MAAM,SAA0B;EAC9B,MAAM,OAAO,CAAC,WAAW,QAAQ;EACjC,MAAM,SAAS,KAAK,OAAO,SAAS;AAEpC,MAAI,OAAQ,MAAK,KAAK,YAAY,OAAO;AACzC,MAAI,KAAK,QAAQ,QAAQ,CAAE,MAAK,KAAK,UAAU;AAC/C,MAAI,KAAK,QAAQ,YAAY,CAAE,MAAK,KAAK,cAAc;AAEvD,SAAO,KAAK,SAAS,KAAK;;;;;ACZ9B,IAAa,uBAAb,cAA0C,gBAAgB;CACxD,OAAO,UAAU;CACjB,OAAO,cAAc;CAErB,MAAM,SAA0B;EAC9B,MAAM,OAAO,CAAC,WAAW,SAAS;EAClC,MAAM,SAAS,KAAK,OAAO,SAAS;AAEpC,MAAI,OAAQ,MAAK,KAAK,YAAY,OAAO;AAEzC,SAAO,KAAK,SAAS,KAAK;;;;;;;;;;;;ACH9B,IAAa,6BAAb,cAAgD,iBAAiB;CAC/D,YAAY,MAAc,eAAuB;AAC/C,QACE,gCACA,YAAY,OAAO,0BACnB;GAAE;GAAM;GAAe,CACxB;;;;;;;;;;;;;ACHL,IAAa,gBAAb,cAAmC,iBAAiB;CAClD,YACE,aAA0B,0BAC1B,OAAkB,YAAY,SAAS,SACvC,UACA;AAEA,MAAI,OAAO,OAAQ,QAAQ,IACzB,OAAM,IAAI,2BAA2B,MAAM,YAAY;AAGzD,QAAM,YAAY,MAAM,SAAS;;;;;ACpBrC,IAAa,sBAAb,cAAyC,cAAc;CACrD,YAAY,SAAiB;AAC3B,QAAM,0BAA0B,YAAY,SAAS,SAAS,EAAE,SAAS,CAAC;;;;;;;;;;;;;;ACO9E,IAAa,4BAAb,cAA+C,cAAc;CAC3D,YAAY,OAAgB;AAC1B,QAAM,uCAAuC,YAAY,SAAS,wBAAwB,EACxF,OACD,CAAC;;;;;;;;;;;;;;;ACHN,IAAa,sBAAb,cAAyC,cAAc;CACrD,YAAY,SAAkB;AAC5B,QAAM,iCAAiC,YAAY,SAAS,kBAAkB,EAC5E,SACD,CAAC;;;;;;;;;;;;;;;ACJN,IAAa,wBAAb,cAA2C,cAAc;CACvD,YAAY,QAAmB;AAC7B,QAAM,mCAAmC,YAAY,SAAS,mBAAmB,EAC/E,QACD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;ACSN,SAAgB,kBAAkB,OAA+B;AAE/D,KAAI,iBAAiB,UAAU;EAC7B,MAAM,WAAW;AAEjB,UAAQ,SAAS,QAAjB;GACE,KAAK,eAAe,UAClB,QAAO,IAAI,oBAAoB,SAAS,MAAM;GAEhD,KAAK,eAAe,eAElB,QAAO,mBAAmB,SAAS;GAErC,KAAK,eAAe,cAClB,QAAO,IAAI,cACT,+BACA,YAAY,SAAS,SACrB,EAAE,SAAS,SAAS,SAAS,CAC9B;GAEH,KAAK,eAAe,aAClB,QAAO,IAAI,cACT,mCACA,YAAY,SAAS,mBACrB,EAAE,SAAS,SAAS,SAAS,CAC9B;GAEH,KAAK,eAAe,cAClB,QAAO,IAAI,cACT,0BACA,YAAY,SAAS,SACrB;IAAE,SAAS,SAAS;IAAS,QAAQ;IAA2B,CACjE;GAEH,KAAK,eAAe,eAClB,QAAO,IAAI,cACT,0BACA,YAAY,SAAS,SACrB,EAAE,SAAS,SAAS,SAAS,CAC9B;GAEH,QACE,QAAO,IAAI,cACT,0BACA,YAAY,SAAS,SACrB;IAAE,SAAS,SAAS;IAAS,QAAQ,SAAS;IAAQ,CACvD;;;AAKP,QAAO,IAAI,cACT,0BACA,YAAY,SAAS,SACrB,EAAE,eAAe,OAAO,MAAM,EAAE,CACjC;;;;;AAMH,SAAS,mBAAmB,OAAgC;CAE1D,MAAM,cAAc,MAAM;AAI1B,KAAI,aAAa;AAEf,MAAI,gBAAgB,QAElB,QAAO,IAAI,sBAAsB,CAAC,MAAM,SAAS,UAAU,CAAC;AAG9D,MAAI,gBAAgB,QAElB,QAAO,IAAI,0BAA0B,MAAM,SAAS,UAAU;AAGhE,MAAI,gBAAgB,QAElB,QAAO,IAAI,cACT,iCACA,YAAY,SAAS,iBACrB;GAAE;GAAa,SAAS,MAAM;GAAgB,CAC/C;AAGH,MAAI,gBAAgB,QAElB,QAAO,IAAI,cACT,mCACA,YAAY,SAAS,SACrB;GAAE;GAAa,SAAS,MAAM;GAAgB,CAC/C;AAIH,MAAI,YAAY,WAAW,KAAK,EAAE;AAChC,OAAI,gBAAgB,QAElB,QAAO,IAAI,cACT,gCACA,YAAY,SAAS,SACrB;IAAE;IAAa,SAAS,MAAM;IAAgB,CAC/C;AAGH,OAAI,gBAAgB,QAElB,QAAO,IAAI,cACT,iCACA,YAAY,SAAS,SACrB;IAAE;IAAa,SAAS,MAAM;IAAgB,CAC/C;;AAKL,MAAI,YAAY,WAAW,KAAK,CAC9B,QAAO,IAAI,cACT,mCACA,YAAY,SAAS,mBACrB;GAAE;GAAa,SAAS,MAAM;GAAgB,CAC/C;AAIH,MAAI,gBAAgB,QAElB,QAAO,IAAI,cACT,0BACA,YAAY,SAAS,SACrB;GAAE;GAAa,SAAS,MAAM;GAAgB,CAC/C;AAIH,MAAI,YAAY,WAAW,KAAK,CAC9B,QAAO,IAAI,cACT,sCACA,YAAY,SAAS,sBACrB;GAAE;GAAa,SAAS,MAAM;GAAgB,CAC/C;AAIH,MAAI,gBAAgB,QAElB,QAAO,IAAI,cACT,qCACA,YAAY,SAAS,sBACrB;GAAE;GAAa,SAAS,MAAM;GAAgB,CAC/C;;AAKL,QAAO,IAAI,cACT,0BACA,YAAY,SAAS,SACrB;EACE;EACA,gBAAgB,MAAM;EACtB,KAAK,MAAM;EACZ,CACF;;;;;;;;;;;;;;;ACjLH,IAAa,qBAAb,MAA0H;CACxH,KAAc;CAEd,UAAU,OAAO,EAAE,MAAM,cAGD;AACtB,MAAI;AACF,UAAO,MAAM,QAAQ,KAAK;WACnB,OAAO;AACd,SAAM,kBAAkB,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;ACEpC,IAAa,qBAAb,MAA0H;CACxH,KAAc;CAEd,YAAY,SAA4C;AAApC,OAAA,UAAA;;CAEpB,UAAU,OAAO,EAAE,OAAO,WAAW,MAAM,cAKnB;EACtB,MAAM,EAAE,kBAAkB,KAAK;EAC/B,MAAM,YAAY,GAAG,MAAM,GAAG;AAG9B,QAAM,cAAc,KAAK,UAAU,aAA0B,EAC3D,MAAM,MACP,CAAC;EAGF,MAAM,SAAS,MAAM,QAAQ,KAAK;AAGlC,QAAM,cAAc,KAAK,SAAS,aAA0B;GAC1D,MAAM;GACN;GACD,CAAC;AAEF,SAAO;;;;;;;;;;;;;;;;ACvCX,IAAa,iBAAb,MAA4B;CAC1B,OAAO,MAAS,QAAW,YAAuB;EAChD,MAAM,IAAI;EACV,MAAM,WAAW;GACf,GAAG,EAAE;GACL,UAAU;IAAE,GAAG,EAAE,QAAQ;IAAU,eAAe;IAAY;GAC/D;AACD,IAAE,UAAU;AACZ,IAAE,SAAS;AACX,SAAO;;;;;AClBX,MAAM,2BAA2B,EAAE,OAAO;CACxC,MAAM,EAAE,QAAQ,CAAC,IAAI,GAAG,SAAS,kCAAkC,CAAC;CACpE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO;CAC5B,SAAS,EAAE,UAAU;CACrB,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU;CAClD,CAAC;AAEwC,EAAE,OAAO;CACjD,SAAS,EAAE,QAAQ,CAAC,IAAI,GAAG,SAAS,qCAAqC,CAAC;CAC1E,aAAa,EAAE,MAAM,yBAAyB,CAAC,IAAI,GAAG,SAAS,8BAA8B,CAAC;CAC/F,CAAC,CAAC,QACA,WAAW;CACV,MAAM,QAAQ,OAAO,YAAY,KAAI,MAAK,EAAE,KAAK;AACjD,QAAO,IAAI,IAAI,MAAM,CAAC,SAAS,MAAM;GAEvC,SAAS,gCAAgC,CAC1C,CAAC,QACC,WAAW,OAAO,YAAY,MAAK,MAAK,EAAE,SAAS,OAAO,QAAQ,EACnE,SAAS,qCAAqC,CAC/C;AAED,SAAgB,sBACd,MACA,eAC+C;CAC/C,MAAM,UAAuB;EAC3B,IAAI,oBAAoB;EACxB,IAAI,mBAAmB,EACrB,eACD,CAAC;EACF,GAAI,KAAK,WAAW,EAAE;EACvB;CAED,IAAA,iBAAA,MACM,uBAAuB,eAAmC;EAC9D,cAAc;GACZ,MAAM,UAAU,KAAK,SAAS;AAC9B,SAAM,KAAK,QAAQ;IAAE;IAAS;IAAS,CAAC;;;8BAJ3C,WAAW,EAAA,mBAAA,qBAAA,EAAA,CAAA,CAAA,EAAA,eAAA;AAQZ,QAAO;;;;AChDT,MAAa,kBAAkB;CAC7B,SAAS,OAAO,IAAI,2BAA2B;CAC/C,UAAU,OAAO,IAAI,4BAA4B;CAClD;AAID,SAAgB,iBAAiB,MAA8B;AAC7D,QAAO,OAAO,IAAI,+BAA+B,OAAO;;;;ACR1D,MAAa,mBAAmB,EAC9B,IAAI;CACF,wBAAwB;CACxB,2BAA2B;CAC3B,oBAAoB;CACpB,sBAAsB;CACtB,2BAA2B;CAC5B,EACF;;;;AC+CM,IAAA,iBAAA,kBAAA,MAAM,eAAmD;CAC9D,OAAO,QAAQ,QAA6C;AAC1D,SAAO;GACL,QAAA;GACA,WAAW,CACT;IAAE,SAAS,gBAAgB;IAAS,UAAU;IAA6B,CAC5E;GACF;;CAGH,OAAO,aAAa,SAAkE;AACpF,SAAO;GACL,QAAA;GACA,WAAW,CACT;IACE,SAAS,gBAAgB;IACzB,YAAY,QAAQ;IACpB,QAAQ,QAAQ;IACjB,CACF;GACF;;CAGH,aAAa,SAA8B;EACzC,MAAM,SAAS,QAAQ,UAAU,QAA8B,gBAAgB,QAAQ;EACvF,MAAM,gBAAgB,QAAQ,UAAU,QAAwB,UAAU,cAAc;EACxF,MAAM,YAAY,QAAQ,UAAU,sBAAsB;AAE1D,OAAK,MAAM,QAAQ,OAAO,aAAa;GACrC,MAAM,UAAU,sBAAsB,MAAM,cAAc;AAE1D,aAAU,SAAS,iBAAiB,KAAK,KAAK,EAE5C,YAAY,QAAQ,EACpB,EAAE,WAAW,MAAM,SAAS,CAAC;;AAGjC,UAAQ,UAAU,iBAAiB,UAAU,UAAU,iBAAiB,OAAO,QAAQ,CAAC;AAExF,UAAQ,OAAO,KAAK,6BAA6B;;CAGnD,WAAW,SAA8B;AACvC,UAAQ,OAAO,KAAK,0BAA0B;;;+CAzDjD,OAAO;CACN,SAAS,CACP,WAAW,iBAAiB,EAAE,IAAI,EAAE,UAAU,iBAAiB,IAAI,EAAE,CAAC,CACvE;CACD,WAAW;EACT;EACA;EACA;EACA;EACA;EACA;EACA;EACD;CACF,CAAC,CAAA,EAAA,eAAA;;;AClDF,SAAgB,SAAS,MAA0C;AACjE,QAAOA,SAAO,iBAAiB,KAAK,CAAC"}
+{"version":3,"file":"index.mjs","names":["inject"],"sources":["../../src/database/commands/zenstack.command.ts","../../src/database/commands/db-generate.command.ts","../../src/database/commands/db-pull.command.ts","../../src/database/commands/db-push.command.ts","../../src/database/commands/migrate-deploy.command.ts","../../src/database/commands/migrate-dev.command.ts","../../src/database/commands/migrate-reset.command.ts","../../src/database/commands/migrate-status.command.ts","../../src/database/errors/invalid-error-code-range.error.ts","../../src/database/errors/database-error.ts","../../src/database/errors/database-config.error.ts","../../src/database/errors/foreign-key-constraint.error.ts","../../src/database/errors/record-not-found.error.ts","../../src/database/errors/unique-constraint.error.ts","../../src/database/errors/from-zenstack-error.ts","../../src/database/plugins/error-handler.plugin.ts","../../src/database/plugins/event-emitter.plugin.ts","../../src/database/plugins/schema-switcher.ts","../../src/database/database.helpers.ts","../../src/database/database.tokens.ts","../../src/database/i18n/en.ts","../../src/database/database.module.ts","../../src/database/decorators/inject-db.decorator.ts"],"sourcesContent":["import { Command } from 'stratal/quarry'\n\n/**\n * Base command for ZenStack CLI wrappers.\n * Uses execFileSync with array arguments to prevent shell injection.\n */\nexport abstract class ZenStackCommand extends Command {\n  protected async zenstack(args: string[]): Promise<number> {\n    // Dynamic import — node:child_process is only available in the Quarry CLI (Node) context\n    const { execFileSync } = await import('node:child_process')\n\n    try {\n      const output = execFileSync('npx', ['zenstack', ...args], {\n        encoding: 'utf-8',\n        stdio: 'pipe',\n      })\n      if (output) this.info(output.trim())\n      return 0\n    } catch (err) {\n      const error = err as { stderr?: string; stdout?: string; status?: number }\n      if (error.stderr) this.error(error.stderr.trim())\n      if (error.stdout) this.info(error.stdout.trim())\n      return error.status ?? 1\n    }\n  }\n}\n","import { ZenStackCommand } from './zenstack.command'\n\nexport class DbGenerateCommand extends ZenStackCommand {\n  static command = 'db:generate {--schema= : Path to schema file} {--watch : Enable watch mode}'\n  static description = 'Generate ZenStack ORM client'\n\n  async handle(): Promise<number> {\n    const args = ['generate']\n    const schema = this.string('schema')\n\n    if (schema) args.push('--schema', schema)\n    if (this.boolean('watch')) args.push('--watch')\n\n    return this.zenstack(args)\n  }\n}\n","import { ZenStackCommand } from './zenstack.command'\n\nexport class DbPullCommand extends ZenStackCommand {\n  static command = 'db:pull {--schema= : Path to schema file}'\n  static description = 'Introspect database and generate schema'\n\n  async handle(): Promise<number> {\n    const args = ['db', 'pull']\n    const schema = this.string('schema')\n\n    if (schema) args.push('--schema', schema)\n\n    return this.zenstack(args)\n  }\n}\n","import { ZenStackCommand } from './zenstack.command'\n\nexport class DbPushCommand extends ZenStackCommand {\n  static command = 'db:push {--schema= : Path to schema file} {--accept-data-loss : Accept data loss} {--force-reset : Force reset database}'\n  static description = 'Push database schema changes'\n\n  async handle(): Promise<number> {\n    const args = ['db', 'push']\n    const schema = this.string('schema')\n\n    if (schema) args.push('--schema', schema)\n    if (this.boolean('accept-data-loss')) args.push('--accept-data-loss')\n    if (this.boolean('force-reset')) args.push('--force-reset')\n\n    return this.zenstack(args)\n  }\n}\n","import { ZenStackCommand } from './zenstack.command'\n\nexport class MigrateDeployCommand extends ZenStackCommand {\n  static command = 'migrate:deploy {--schema= : Path to schema file}'\n  static description = 'Deploy pending migrations'\n\n  async handle(): Promise<number> {\n    const args = ['migrate', 'deploy']\n    const schema = this.string('schema')\n\n    if (schema) args.push('--schema', schema)\n\n    return this.zenstack(args)\n  }\n}\n","import { ZenStackCommand } from './zenstack.command'\n\nexport class MigrateDevCommand extends ZenStackCommand {\n  static command = 'migrate:dev {--schema= : Path to schema file} {--name= : Migration name} {--create-only : Create without applying}'\n  static description = 'Create and apply migration'\n\n  async handle(): Promise<number> {\n    const args = ['migrate', 'dev']\n    const schema = this.string('schema')\n    const name = this.string('name')\n\n    if (schema) args.push('--schema', schema)\n    if (name) args.push('--name', name)\n    if (this.boolean('create-only')) args.push('--create-only')\n\n    return this.zenstack(args)\n  }\n}\n","import { ZenStackCommand } from './zenstack.command'\n\nexport class MigrateResetCommand extends ZenStackCommand {\n  static command = 'migrate:reset {--schema= : Path to schema file} {--force : Skip confirmation} {--skip-seed : Skip seeding}'\n  static description = 'Reset database'\n\n  async handle(): Promise<number> {\n    const args = ['migrate', 'reset']\n    const schema = this.string('schema')\n\n    if (schema) args.push('--schema', schema)\n    if (this.boolean('force')) args.push('--force')\n    if (this.boolean('skip-seed')) args.push('--skip-seed')\n\n    return this.zenstack(args)\n  }\n}\n","import { ZenStackCommand } from './zenstack.command'\n\nexport class MigrateStatusCommand extends ZenStackCommand {\n  static command = 'migrate:status {--schema= : Path to schema file}'\n  static description = 'Check migration status'\n\n  async handle(): Promise<number> {\n    const args = ['migrate', 'status']\n    const schema = this.string('schema')\n\n    if (schema) args.push('--schema', schema)\n\n    return this.zenstack(args)\n  }\n}\n","import { ApplicationError, ERROR_CODES } from 'stratal/errors'\n\n/**\n * InvalidErrorCodeRangeError\n *\n * Thrown when a DatabaseError subclass is constructed with an error code\n * outside the valid database error range (2000-2999).\n * This is a developer-facing error to enforce error code conventions.\n */\nexport class InvalidErrorCodeRangeError extends ApplicationError {\n  constructor(code: number, expectedRange: string) {\n    super(\n      'errors.invalidErrorCodeRange',\n      ERROR_CODES.SYSTEM.INVALID_ERROR_CODE_RANGE,\n      { code, expectedRange }\n    )\n  }\n}\n","import type { MessageKeys } from 'stratal/i18n'\nimport { ApplicationError, ERROR_CODES, type ErrorCode } from 'stratal/errors'\nimport { InvalidErrorCodeRangeError } from './invalid-error-code-range.error'\n\n/**\n * DatabaseError\n *\n * Generic database error thrown when a database operation fails\n * and doesn't fit into a more specific error category.\n *\n * This is the base class for all database-related errors.\n */\nexport class DatabaseError extends ApplicationError {\n  constructor(\n    messageKey: MessageKeys = 'errors.databaseGeneric',\n    code: ErrorCode = ERROR_CODES.DATABASE.GENERIC,\n    metadata?: Record<string, unknown>\n  ) {\n    // Validate that code is in the database error range\n    if (code < 2000 || code >= 3000) {\n      throw new InvalidErrorCodeRangeError(code, '2000-2999')\n    }\n\n    super(messageKey, code, metadata)\n  }\n}\n","import { ERROR_CODES } from 'stratal/errors'\nimport { DatabaseError } from './database-error'\n\nexport class DatabaseConfigError extends DatabaseError {\n  constructor(details: string) {\n    super('errors.databaseGeneric', ERROR_CODES.DATABASE.GENERIC, { details })\n  }\n}\n","import { ERROR_CODES } from 'stratal/errors'\nimport { DatabaseError } from './database-error'\n\n/**\n * ForeignKeyConstraintError\n *\n * Thrown when a database foreign key constraint is violated.\n * This typically occurs when:\n * - Trying to insert a record with a foreign key that doesn't exist\n * - Trying to delete a record that is referenced by other records\n * - Trying to update a foreign key to a non-existent value\n */\nexport class ForeignKeyConstraintError extends DatabaseError {\n  constructor(field?: string) {\n    super('errors.databaseForeignKeyConstraint', ERROR_CODES.DATABASE.FOREIGN_KEY_CONSTRAINT, {\n      field,\n    })\n  }\n}\n","import { ERROR_CODES } from 'stratal/errors'\nimport { DatabaseError } from './database-error'\n\n/**\n * RecordNotFoundError\n *\n * Generic error thrown when a database record is not found.\n * This is typically thrown when a findUnique or findFirst operation\n * returns null, or when a required record doesn't exist.\n *\n * Services should catch this and optionally refine it to a more specific\n * domain error (e.g., NoteNotFoundError, UserNotFoundError).\n */\nexport class RecordNotFoundError extends DatabaseError {\n  constructor(details?: string) {\n    super('errors.databaseRecordNotFound', ERROR_CODES.DATABASE.RECORD_NOT_FOUND, {\n      details,\n    })\n  }\n}\n","import { ERROR_CODES } from 'stratal/errors'\nimport { DatabaseError } from './database-error'\n\n/**\n * UniqueConstraintError\n *\n * Thrown when a database unique constraint is violated.\n * This typically occurs when trying to insert or update a record\n * with a value that already exists in a unique column.\n *\n * Services should catch this and optionally refine it to a more specific\n * domain error (e.g., UserEmailAlreadyExistsError).\n */\nexport class UniqueConstraintError extends DatabaseError {\n  constructor(fields?: string[]) {\n    super('errors.databaseUniqueConstraint', ERROR_CODES.DATABASE.UNIQUE_CONSTRAINT, {\n      fields,\n    })\n  }\n}\n","import { ORMError, ORMErrorReason } from '@zenstackhq/orm'\nimport { ERROR_CODES } from 'stratal/errors'\nimport { DatabaseError } from './database-error'\nimport { ForeignKeyConstraintError } from './foreign-key-constraint.error'\nimport { RecordNotFoundError } from './record-not-found.error'\nimport { UniqueConstraintError } from './unique-constraint.error'\n\n/**\n * Transform ZenStack ORM errors into ApplicationError instances\n *\n * This function maps ORMError codes to generic database error classes.\n * Services can catch these generic errors and optionally refine them to\n * more specific domain errors if needed.\n *\n * @param error - The error thrown by ZenStack ORM\n * @returns An ApplicationError instance\n *\n * @example\n * ```typescript\n * try {\n *   await db.user.create({ data: { email: 'existing@example.com' } })\n * } catch (error) {\n *   throw fromZenStackError(error) // Becomes UniqueConstraintError or other\n * }\n * ```\n */\nexport function fromZenStackError(error: unknown): DatabaseError {\n  // Handle ZenStack ORM Errors\n  if (error instanceof ORMError) {\n    const ormError = error\n\n    switch (ormError.reason) {\n      case ORMErrorReason.NOT_FOUND:\n        return new RecordNotFoundError(ormError.model)\n\n      case ORMErrorReason.DB_QUERY_ERROR:\n        // Parse database-specific error codes\n        return parseDatabaseError(ormError)\n\n      case ORMErrorReason.INVALID_INPUT:\n        return new DatabaseError(\n          'errors.databaseInvalidQuery',\n          ERROR_CODES.DATABASE.GENERIC,\n          { message: ormError.message }\n        )\n\n      case ORMErrorReason.CONFIG_ERROR:\n        return new DatabaseError(\n          'errors.databaseConnectionFailed',\n          ERROR_CODES.DATABASE.CONNECTION_FAILED,\n          { message: ormError.message }\n        )\n\n      case ORMErrorReason.NOT_SUPPORTED:\n        return new DatabaseError(\n          'errors.databaseGeneric',\n          ERROR_CODES.DATABASE.GENERIC,\n          { message: ormError.message, reason: 'Operation not supported' }\n        )\n\n      case ORMErrorReason.INTERNAL_ERROR:\n        return new DatabaseError(\n          'errors.databaseGeneric',\n          ERROR_CODES.DATABASE.GENERIC,\n          { message: ormError.message }\n        )\n\n      default:\n        return new DatabaseError(\n          'errors.databaseGeneric',\n          ERROR_CODES.DATABASE.GENERIC,\n          { message: ormError.message, reason: ormError.reason }\n        )\n    }\n  }\n\n  // Handle unknown errors\n  return new DatabaseError(\n    'errors.databaseGeneric',\n    ERROR_CODES.DATABASE.GENERIC,\n    { originalError: String(error) }\n  )\n}\n\n/**\n * Parse database-specific errors from the dbErrorCode field\n */\nfunction parseDatabaseError(error: ORMError): DatabaseError {\n  // Cast dbErrorCode to string since ZenStack types it loosely\n  const dbErrorCode = error.dbErrorCode as string | undefined\n\n  // PostgreSQL error codes\n  // https://www.postgresql.org/docs/current/errcodes-appendix.html\n  if (dbErrorCode) {\n    // Class 23 - Integrity Constraint Violation\n    if (dbErrorCode === '23505') {\n      // Unique violation\n      return new UniqueConstraintError([error.model ?? 'unknown'])\n    }\n\n    if (dbErrorCode === '23503') {\n      // Foreign key violation\n      return new ForeignKeyConstraintError(error.model ?? 'unknown')\n    }\n\n    if (dbErrorCode === '23502') {\n      // Not null violation\n      return new DatabaseError(\n        'errors.databaseNullConstraint',\n        ERROR_CODES.DATABASE.NULL_CONSTRAINT,\n        { dbErrorCode, message: error.dbErrorMessage }\n      )\n    }\n\n    if (dbErrorCode === '23514') {\n      // Check constraint violation\n      return new DatabaseError(\n        'errors.databaseConstraintFailed',\n        ERROR_CODES.DATABASE.GENERIC,\n        { dbErrorCode, message: error.dbErrorMessage }\n      )\n    }\n\n    // Class 42 - Syntax Error or Access Rule Violation\n    if (dbErrorCode.startsWith('42')) {\n      if (dbErrorCode === '42P01') {\n        // Undefined table\n        return new DatabaseError(\n          'errors.databaseTableNotFound',\n          ERROR_CODES.DATABASE.GENERIC,\n          { dbErrorCode, message: error.dbErrorMessage }\n        )\n      }\n\n      if (dbErrorCode === '42703') {\n        // Undefined column\n        return new DatabaseError(\n          'errors.databaseColumnNotFound',\n          ERROR_CODES.DATABASE.GENERIC,\n          { dbErrorCode, message: error.dbErrorMessage }\n        )\n      }\n    }\n\n    // Class 08 - Connection Exception\n    if (dbErrorCode.startsWith('08')) {\n      return new DatabaseError(\n        'errors.databaseConnectionFailed',\n        ERROR_CODES.DATABASE.CONNECTION_FAILED,\n        { dbErrorCode, message: error.dbErrorMessage }\n      )\n    }\n\n    // Class 57 - Operator Intervention\n    if (dbErrorCode === '57014') {\n      // Query cancelled\n      return new DatabaseError(\n        'errors.databaseTimeout',\n        ERROR_CODES.DATABASE.TIMEOUT,\n        { dbErrorCode, message: error.dbErrorMessage }\n      )\n    }\n\n    // Class 40 - Transaction Rollback\n    if (dbErrorCode.startsWith('40')) {\n      return new DatabaseError(\n        'errors.databaseTransactionConflict',\n        ERROR_CODES.DATABASE.TRANSACTION_CONFLICT,\n        { dbErrorCode, message: error.dbErrorMessage }\n      )\n    }\n\n    // Class 53 - Insufficient Resources\n    if (dbErrorCode === '53300') {\n      // Too many connections\n      return new DatabaseError(\n        'errors.databaseTooManyConnections',\n        ERROR_CODES.DATABASE.TOO_MANY_CONNECTIONS,\n        { dbErrorCode, message: error.dbErrorMessage }\n      )\n    }\n  }\n\n  // Default database error\n  return new DatabaseError(\n    'errors.databaseGeneric',\n    ERROR_CODES.DATABASE.GENERIC,\n    {\n      dbErrorCode,\n      dbErrorMessage: error.dbErrorMessage,\n      sql: error.sql,\n    }\n  )\n}\n","import { type RuntimePlugin } from '@zenstackhq/orm'\nimport { type SchemaDef } from '@zenstackhq/orm/schema'\nimport { fromZenStackError } from '../errors'\n\n/**\n * ZenStack runtime plugin that transforms ORM errors into ApplicationError instances.\n *\n * @example\n * ```typescript\n * super(schema, {\n *   dialect: new PostgresDialect({ pool }),\n *   plugins: [new ErrorHandlerPlugin()]\n * })\n * ```\n */\nexport class ErrorHandlerPlugin implements RuntimePlugin<SchemaDef, Record<string, unknown>, Record<string, unknown>, {}> {\n  readonly id = 'error-handler'\n\n  onQuery = async ({ args, proceed }: {\n    args: Record<string, unknown> | undefined\n    proceed: (args: Record<string, unknown> | undefined) => Promise<unknown>\n  }): Promise<unknown> => {\n    try {\n      return await proceed(args)\n    } catch (error) {\n      throw fromZenStackError(error)\n    }\n  }\n}\n","import { type RuntimePlugin } from '@zenstackhq/orm'\nimport { type SchemaDef } from '@zenstackhq/orm/schema'\nimport type { EventName, IEventRegistry } from 'stratal/events'\n\nexport interface EventEmitterPluginOptions {\n  eventRegistry: IEventRegistry\n}\n\n/**\n * ZenStack runtime plugin that emits before/after events for database operations.\n *\n * Emits events in the format:\n * - `before.{Model}.{operation}` - Before the database operation\n * - `after.{Model}.{operation}` - After the database operation\n *\n * @example\n * ```typescript\n * super(schema, {\n *   dialect: new PostgresDialect({ pool }),\n *   plugins: [\n *     new EventEmitterPlugin({\n *       eventRegistry,\n *     })\n *   ]\n * })\n * ```\n */\nexport class EventEmitterPlugin implements RuntimePlugin<SchemaDef, Record<string, unknown>, Record<string, unknown>, {}> {\n  readonly id = 'event-emitter'\n\n  constructor(private options: EventEmitterPluginOptions) { }\n\n  onQuery = async ({ model, operation, args, proceed }: {\n    model: string\n    operation: string\n    args: Record<string, unknown> | undefined\n    proceed: (args: Record<string, unknown> | undefined) => Promise<unknown>\n  }): Promise<unknown> => {\n    const { eventRegistry } = this.options\n    const eventBase = `${model}.${operation}`\n\n    // Emit BEFORE event\n    await eventRegistry.emit(`before.${eventBase}` as EventName, {\n      data: args,\n    })\n\n    // Execute the actual database operation\n    const result = await proceed(args)\n\n    // Emit AFTER event\n    await eventRegistry.emit(`after.${eventBase}` as EventName, {\n      data: args,\n      result,\n    })\n\n    return result\n  }\n}\n","interface SwitchableClient {\n  $schema: { provider: { defaultSchema: string } } & Record<string, unknown>\n  schema: unknown\n}\n\n/**\n * Switches the active schema on a ZenStack/Kysely database client by mutating\n * `$schema.provider.defaultSchema`. This causes ZenStack's QueryNameMapper to\n * generate fully-qualified table references (e.g. `\"tenant_123\".\"User\"`).\n *\n * Must be called BEFORE any queries are made on the client.\n *\n * Note: The ZenStack RuntimePlugin `onQuery` hook fires after table names are\n * already resolved, so a plugin-based approach cannot set the schema prefix.\n * Direct client mutation is the only supported method.\n */\nexport class SchemaSwitcher {\n  static apply<T>(client: T, schemaName: string): T {\n    const c = client as unknown as SwitchableClient\n    const switched = {\n      ...c.$schema,\n      provider: { ...c.$schema.provider, defaultSchema: schemaName },\n    }\n    c.$schema = switched\n    c.schema = switched\n    return client\n  }\n}\n","import { ZenStackClient, type AnyPlugin } from '@zenstackhq/orm'\nimport { Transient } from 'stratal/di'\nimport type { IEventRegistry } from 'stratal/events'\nimport { withI18n, z } from 'stratal/validation'\nimport type { DatabaseConnectionConfig } from './database.module'\nimport { ErrorHandlerPlugin, EventEmitterPlugin } from './plugins'\n\nconst databaseConnectionSchema = z.object({\n  name: z.string().min(1, withI18n('database.connectionNameRequired')),\n  schema: z.object({}).loose(),\n  dialect: z.function(),\n  plugins: z.array(z.object({}).loose()).optional(),\n  computedFields: z.object({}).loose().optional(),\n})\n\nexport const databaseModuleConfigSchema = z.object({\n  default: z.string().min(1, withI18n('database.defaultConnectionRequired')),\n  connections: z.array(databaseConnectionSchema).min(1, withI18n('database.connectionRequired')),\n}).refine(\n  (config) => {\n    const names = config.connections.map(c => c.name)\n    return new Set(names).size === names.length\n  },\n  withI18n('database.duplicateConnections')\n).refine(\n  (config) => config.connections.some(c => c.name === config.default),\n  withI18n('database.defaultConnectionNotFound')\n)\n\nexport function createDatabaseService(\n  conn: DatabaseConnectionConfig,\n  eventRegistry: IEventRegistry,\n): new () => InstanceType<typeof ZenStackClient> {\n  const plugins: AnyPlugin[] = [\n    new ErrorHandlerPlugin(),\n    new EventEmitterPlugin({\n      eventRegistry,\n    }),\n    ...(conn.plugins ?? []),\n  ]\n\n  @Transient()\n  class DatabaseClient extends ZenStackClient<typeof conn.schema> {\n    constructor() {\n      const dialect = conn.dialect()\n      // ZenStack 3+ requires `computedFields` whenever the schema declares any\n      // `@computed` fields, so pass them through when the consumer provides them.\n      super(conn.schema, {\n        dialect,\n        plugins,\n        // @ts-expect-error - ZenStack 3+ requires `computedFields` whenever the schema declares any `@computed` fields, so pass them through when the consumer provides them.\n        computedFields: conn.computedFields\n      })\n    }\n  }\n\n  return DatabaseClient\n}\n","export const DATABASE_TOKENS = {\n  Options: Symbol.for('stratal:database:options'),\n  Services: Symbol.for('stratal:database:services'),\n} as const\n\nimport type { ConnectionName } from './types'\n\nexport function connectionSymbol(name: ConnectionName): symbol {\n  return Symbol.for(`stratal:database:connection:${name}`)\n}\n","export const databaseMessages = {\n  en: {\n    connectionNameRequired: 'Connection name is required',\n    defaultConnectionRequired: 'Default connection name is required',\n    connectionRequired: 'At least one connection is required',\n    duplicateConnections: 'Duplicate connection names found',\n    defaultConnectionNotFound: 'Default connection not found in connections',\n  },\n} as const\n\ndeclare module 'stratal/i18n' {\n  interface AppMessageNamespaces {\n    database: typeof databaseMessages['en']\n  }\n}\n","import type { AnyPlugin, ClientOptions, ComputedFieldsOptions } from '@zenstackhq/orm'\nimport type { SchemaDef } from '@zenstackhq/schema'\nimport { delay, DI_TOKENS, Scope } from 'stratal/di'\nimport type { IEventRegistry } from 'stratal/events'\nimport { I18nModule } from 'stratal/i18n'\nimport {\n  Module,\n  type AsyncModuleOptions,\n  type DynamicModule,\n  type InjectionToken,\n  type ModuleContext,\n  type OnInitialize,\n  type OnShutdown,\n} from 'stratal/module'\nimport { DbGenerateCommand } from './commands/db-generate.command'\nimport { DbPullCommand } from './commands/db-pull.command'\nimport { DbPushCommand } from './commands/db-push.command'\nimport { MigrateDeployCommand } from './commands/migrate-deploy.command'\nimport { MigrateDevCommand } from './commands/migrate-dev.command'\nimport { MigrateResetCommand } from './commands/migrate-reset.command'\nimport { MigrateStatusCommand } from './commands/migrate-status.command'\nimport { createDatabaseService } from './database.helpers'\nimport { connectionSymbol, DATABASE_TOKENS } from './database.tokens'\nimport { databaseMessages } from './i18n'\nimport type { ConnectionName, DefaultConnectionName } from './types'\n\nexport interface DatabaseConnectionConfig<\n  Schema extends SchemaDef = SchemaDef,\n  Name extends ConnectionName = ConnectionName,\n> {\n  name: Name\n  schema: Schema\n  dialect: () => ClientOptions<SchemaDef>['dialect']\n  plugins?: AnyPlugin[]\n  /**\n   * Schema-level @computed field implementations. Required when the schema\n   * declares any `@computed` fields. Keyed by uncapitalized model name; values\n   * map field name to a Kysely-expression compute callback.\n   */\n  computedFields?: ComputedFieldsOptions<Schema>\n}\n\nexport interface DatabaseModuleConfig {\n  default: DefaultConnectionName\n  connections: DatabaseConnectionConfig[]\n}\n\n@Module({\n  imports: [\n    I18nModule.registerMessages({ en: { database: databaseMessages.en } }),\n  ],\n  providers: [\n    DbGenerateCommand,\n    DbPushCommand,\n    DbPullCommand,\n    MigrateDevCommand,\n    MigrateDeployCommand,\n    MigrateStatusCommand,\n    MigrateResetCommand,\n  ],\n})\nexport class DatabaseModule implements OnInitialize, OnShutdown {\n  static forRoot(config: DatabaseModuleConfig): DynamicModule {\n    return {\n      module: DatabaseModule,\n      providers: [\n        { provide: DATABASE_TOKENS.Options, useValue: config as unknown as object },\n      ],\n    }\n  }\n\n  static forRootAsync(options: AsyncModuleOptions<DatabaseModuleConfig>): DynamicModule {\n    return {\n      module: DatabaseModule,\n      providers: [\n        {\n          provide: DATABASE_TOKENS.Options,\n          useFactory: options.useFactory,\n          inject: options.inject,\n        },\n      ],\n    }\n  }\n\n  onInitialize(context: ModuleContext): void {\n    const config = context.container.resolve<DatabaseModuleConfig>(DATABASE_TOKENS.Options)\n    const eventRegistry = context.container.resolve<IEventRegistry>(DI_TOKENS.EventRegistry)\n    const container = context.container.getTsyringeContainer();\n\n    for (const conn of config.connections) {\n      const Service = createDatabaseService(conn, eventRegistry);\n\n      container.register(connectionSymbol(conn.name) as InjectionToken<symbol>,\n        // @ts-expect-error Dynamic class type mismatch\n        delay(() => Service),\n        { lifecycle: Scope.Request })\n    }\n\n    context.container.registerExisting(DI_TOKENS.Database, connectionSymbol(config.default))\n\n    context.logger.info('DatabaseModule initialized')\n  }\n\n  onShutdown(context: ModuleContext): void {\n    context.logger.info('DatabaseModule shutdown')\n  }\n}\n","import { inject } from 'tsyringe'\nimport type { ConnectionName } from '../types'\nimport { connectionSymbol } from '../database.tokens'\n\nexport function InjectDB(name: ConnectionName): ParameterDecorator {\n  return inject(connectionSymbol(name))\n}\n"],"mappings":";;;;;;;;;;;;;;;AAMA,IAAsB,kBAAtB,cAA8C,QAAQ;CACpD,MAAgB,SAAS,MAAiC;EAExD,MAAM,EAAE,iBAAiB,MAAM,OAAO;EAEtC,IAAI;GACF,MAAM,SAAS,aAAa,OAAO,CAAC,YAAY,GAAG,KAAK,EAAE;IACxD,UAAU;IACV,OAAO;IACR,CAAC;GACF,IAAI,QAAQ,KAAK,KAAK,OAAO,MAAM,CAAC;GACpC,OAAO;WACA,KAAK;GACZ,MAAM,QAAQ;GACd,IAAI,MAAM,QAAQ,KAAK,MAAM,MAAM,OAAO,MAAM,CAAC;GACjD,IAAI,MAAM,QAAQ,KAAK,KAAK,MAAM,OAAO,MAAM,CAAC;GAChD,OAAO,MAAM,UAAU;;;;;;ACpB7B,IAAa,oBAAb,cAAuC,gBAAgB;CACrD,OAAO,UAAU;CACjB,OAAO,cAAc;CAErB,MAAM,SAA0B;EAC9B,MAAM,OAAO,CAAC,WAAW;EACzB,MAAM,SAAS,KAAK,OAAO,SAAS;EAEpC,IAAI,QAAQ,KAAK,KAAK,YAAY,OAAO;EACzC,IAAI,KAAK,QAAQ,QAAQ,EAAE,KAAK,KAAK,UAAU;EAE/C,OAAO,KAAK,SAAS,KAAK;;;;;ACX9B,IAAa,gBAAb,cAAmC,gBAAgB;CACjD,OAAO,UAAU;CACjB,OAAO,cAAc;CAErB,MAAM,SAA0B;EAC9B,MAAM,OAAO,CAAC,MAAM,OAAO;EAC3B,MAAM,SAAS,KAAK,OAAO,SAAS;EAEpC,IAAI,QAAQ,KAAK,KAAK,YAAY,OAAO;EAEzC,OAAO,KAAK,SAAS,KAAK;;;;;ACV9B,IAAa,gBAAb,cAAmC,gBAAgB;CACjD,OAAO,UAAU;CACjB,OAAO,cAAc;CAErB,MAAM,SAA0B;EAC9B,MAAM,OAAO,CAAC,MAAM,OAAO;EAC3B,MAAM,SAAS,KAAK,OAAO,SAAS;EAEpC,IAAI,QAAQ,KAAK,KAAK,YAAY,OAAO;EACzC,IAAI,KAAK,QAAQ,mBAAmB,EAAE,KAAK,KAAK,qBAAqB;EACrE,IAAI,KAAK,QAAQ,cAAc,EAAE,KAAK,KAAK,gBAAgB;EAE3D,OAAO,KAAK,SAAS,KAAK;;;;;ACZ9B,IAAa,uBAAb,cAA0C,gBAAgB;CACxD,OAAO,UAAU;CACjB,OAAO,cAAc;CAErB,MAAM,SAA0B;EAC9B,MAAM,OAAO,CAAC,WAAW,SAAS;EAClC,MAAM,SAAS,KAAK,OAAO,SAAS;EAEpC,IAAI,QAAQ,KAAK,KAAK,YAAY,OAAO;EAEzC,OAAO,KAAK,SAAS,KAAK;;;;;ACV9B,IAAa,oBAAb,cAAuC,gBAAgB;CACrD,OAAO,UAAU;CACjB,OAAO,cAAc;CAErB,MAAM,SAA0B;EAC9B,MAAM,OAAO,CAAC,WAAW,MAAM;EAC/B,MAAM,SAAS,KAAK,OAAO,SAAS;EACpC,MAAM,OAAO,KAAK,OAAO,OAAO;EAEhC,IAAI,QAAQ,KAAK,KAAK,YAAY,OAAO;EACzC,IAAI,MAAM,KAAK,KAAK,UAAU,KAAK;EACnC,IAAI,KAAK,QAAQ,cAAc,EAAE,KAAK,KAAK,gBAAgB;EAE3D,OAAO,KAAK,SAAS,KAAK;;;;;ACb9B,IAAa,sBAAb,cAAyC,gBAAgB;CACvD,OAAO,UAAU;CACjB,OAAO,cAAc;CAErB,MAAM,SAA0B;EAC9B,MAAM,OAAO,CAAC,WAAW,QAAQ;EACjC,MAAM,SAAS,KAAK,OAAO,SAAS;EAEpC,IAAI,QAAQ,KAAK,KAAK,YAAY,OAAO;EACzC,IAAI,KAAK,QAAQ,QAAQ,EAAE,KAAK,KAAK,UAAU;EAC/C,IAAI,KAAK,QAAQ,YAAY,EAAE,KAAK,KAAK,cAAc;EAEvD,OAAO,KAAK,SAAS,KAAK;;;;;ACZ9B,IAAa,uBAAb,cAA0C,gBAAgB;CACxD,OAAO,UAAU;CACjB,OAAO,cAAc;CAErB,MAAM,SAA0B;EAC9B,MAAM,OAAO,CAAC,WAAW,SAAS;EAClC,MAAM,SAAS,KAAK,OAAO,SAAS;EAEpC,IAAI,QAAQ,KAAK,KAAK,YAAY,OAAO;EAEzC,OAAO,KAAK,SAAS,KAAK;;;;;;;;;;;;ACH9B,IAAa,6BAAb,cAAgD,iBAAiB;CAC/D,YAAY,MAAc,eAAuB;EAC/C,MACE,gCACA,YAAY,OAAO,0BACnB;GAAE;GAAM;GAAe,CACxB;;;;;;;;;;;;;ACHL,IAAa,gBAAb,cAAmC,iBAAiB;CAClD,YACE,aAA0B,0BAC1B,OAAkB,YAAY,SAAS,SACvC,UACA;EAEA,IAAI,OAAO,OAAQ,QAAQ,KACzB,MAAM,IAAI,2BAA2B,MAAM,YAAY;EAGzD,MAAM,YAAY,MAAM,SAAS;;;;;ACpBrC,IAAa,sBAAb,cAAyC,cAAc;CACrD,YAAY,SAAiB;EAC3B,MAAM,0BAA0B,YAAY,SAAS,SAAS,EAAE,SAAS,CAAC;;;;;;;;;;;;;;ACO9E,IAAa,4BAAb,cAA+C,cAAc;CAC3D,YAAY,OAAgB;EAC1B,MAAM,uCAAuC,YAAY,SAAS,wBAAwB,EACxF,OACD,CAAC;;;;;;;;;;;;;;;ACHN,IAAa,sBAAb,cAAyC,cAAc;CACrD,YAAY,SAAkB;EAC5B,MAAM,iCAAiC,YAAY,SAAS,kBAAkB,EAC5E,SACD,CAAC;;;;;;;;;;;;;;;ACJN,IAAa,wBAAb,cAA2C,cAAc;CACvD,YAAY,QAAmB;EAC7B,MAAM,mCAAmC,YAAY,SAAS,mBAAmB,EAC/E,QACD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;ACSN,SAAgB,kBAAkB,OAA+B;CAE/D,IAAI,iBAAiB,UAAU;EAC7B,MAAM,WAAW;EAEjB,QAAQ,SAAS,QAAjB;GACE,KAAK,eAAe,WAClB,OAAO,IAAI,oBAAoB,SAAS,MAAM;GAEhD,KAAK,eAAe,gBAElB,OAAO,mBAAmB,SAAS;GAErC,KAAK,eAAe,eAClB,OAAO,IAAI,cACT,+BACA,YAAY,SAAS,SACrB,EAAE,SAAS,SAAS,SAAS,CAC9B;GAEH,KAAK,eAAe,cAClB,OAAO,IAAI,cACT,mCACA,YAAY,SAAS,mBACrB,EAAE,SAAS,SAAS,SAAS,CAC9B;GAEH,KAAK,eAAe,eAClB,OAAO,IAAI,cACT,0BACA,YAAY,SAAS,SACrB;IAAE,SAAS,SAAS;IAAS,QAAQ;IAA2B,CACjE;GAEH,KAAK,eAAe,gBAClB,OAAO,IAAI,cACT,0BACA,YAAY,SAAS,SACrB,EAAE,SAAS,SAAS,SAAS,CAC9B;GAEH,SACE,OAAO,IAAI,cACT,0BACA,YAAY,SAAS,SACrB;IAAE,SAAS,SAAS;IAAS,QAAQ,SAAS;IAAQ,CACvD;;;CAKP,OAAO,IAAI,cACT,0BACA,YAAY,SAAS,SACrB,EAAE,eAAe,OAAO,MAAM,EAAE,CACjC;;;;;AAMH,SAAS,mBAAmB,OAAgC;CAE1D,MAAM,cAAc,MAAM;CAI1B,IAAI,aAAa;EAEf,IAAI,gBAAgB,SAElB,OAAO,IAAI,sBAAsB,CAAC,MAAM,SAAS,UAAU,CAAC;EAG9D,IAAI,gBAAgB,SAElB,OAAO,IAAI,0BAA0B,MAAM,SAAS,UAAU;EAGhE,IAAI,gBAAgB,SAElB,OAAO,IAAI,cACT,iCACA,YAAY,SAAS,iBACrB;GAAE;GAAa,SAAS,MAAM;GAAgB,CAC/C;EAGH,IAAI,gBAAgB,SAElB,OAAO,IAAI,cACT,mCACA,YAAY,SAAS,SACrB;GAAE;GAAa,SAAS,MAAM;GAAgB,CAC/C;EAIH,IAAI,YAAY,WAAW,KAAK,EAAE;GAChC,IAAI,gBAAgB,SAElB,OAAO,IAAI,cACT,gCACA,YAAY,SAAS,SACrB;IAAE;IAAa,SAAS,MAAM;IAAgB,CAC/C;GAGH,IAAI,gBAAgB,SAElB,OAAO,IAAI,cACT,iCACA,YAAY,SAAS,SACrB;IAAE;IAAa,SAAS,MAAM;IAAgB,CAC/C;;EAKL,IAAI,YAAY,WAAW,KAAK,EAC9B,OAAO,IAAI,cACT,mCACA,YAAY,SAAS,mBACrB;GAAE;GAAa,SAAS,MAAM;GAAgB,CAC/C;EAIH,IAAI,gBAAgB,SAElB,OAAO,IAAI,cACT,0BACA,YAAY,SAAS,SACrB;GAAE;GAAa,SAAS,MAAM;GAAgB,CAC/C;EAIH,IAAI,YAAY,WAAW,KAAK,EAC9B,OAAO,IAAI,cACT,sCACA,YAAY,SAAS,sBACrB;GAAE;GAAa,SAAS,MAAM;GAAgB,CAC/C;EAIH,IAAI,gBAAgB,SAElB,OAAO,IAAI,cACT,qCACA,YAAY,SAAS,sBACrB;GAAE;GAAa,SAAS,MAAM;GAAgB,CAC/C;;CAKL,OAAO,IAAI,cACT,0BACA,YAAY,SAAS,SACrB;EACE;EACA,gBAAgB,MAAM;EACtB,KAAK,MAAM;EACZ,CACF;;;;;;;;;;;;;;;ACjLH,IAAa,qBAAb,MAA0H;CACxH,KAAc;CAEd,UAAU,OAAO,EAAE,MAAM,cAGD;EACtB,IAAI;GACF,OAAO,MAAM,QAAQ,KAAK;WACnB,OAAO;GACd,MAAM,kBAAkB,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;ACEpC,IAAa,qBAAb,MAA0H;CAGpG;CAFpB,KAAc;CAEd,YAAY,SAA4C;EAApC,KAAA,UAAA;;CAEpB,UAAU,OAAO,EAAE,OAAO,WAAW,MAAM,cAKnB;EACtB,MAAM,EAAE,kBAAkB,KAAK;EAC/B,MAAM,YAAY,GAAG,MAAM,GAAG;EAG9B,MAAM,cAAc,KAAK,UAAU,aAA0B,EAC3D,MAAM,MACP,CAAC;EAGF,MAAM,SAAS,MAAM,QAAQ,KAAK;EAGlC,MAAM,cAAc,KAAK,SAAS,aAA0B;GAC1D,MAAM;GACN;GACD,CAAC;EAEF,OAAO;;;;;;;;;;;;;;;;ACvCX,IAAa,iBAAb,MAA4B;CAC1B,OAAO,MAAS,QAAW,YAAuB;EAChD,MAAM,IAAI;EACV,MAAM,WAAW;GACf,GAAG,EAAE;GACL,UAAU;IAAE,GAAG,EAAE,QAAQ;IAAU,eAAe;IAAY;GAC/D;EACD,EAAE,UAAU;EACZ,EAAE,SAAS;EACX,OAAO;;;;;AClBX,MAAM,2BAA2B,EAAE,OAAO;CACxC,MAAM,EAAE,QAAQ,CAAC,IAAI,GAAG,SAAS,kCAAkC,CAAC;CACpE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO;CAC5B,SAAS,EAAE,UAAU;CACrB,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU;CACjD,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU;CAChD,CAAC;AAEwC,EAAE,OAAO;CACjD,SAAS,EAAE,QAAQ,CAAC,IAAI,GAAG,SAAS,qCAAqC,CAAC;CAC1E,aAAa,EAAE,MAAM,yBAAyB,CAAC,IAAI,GAAG,SAAS,8BAA8B,CAAC;CAC/F,CAAC,CAAC,QACA,WAAW;CACV,MAAM,QAAQ,OAAO,YAAY,KAAI,MAAK,EAAE,KAAK;CACjD,OAAO,IAAI,IAAI,MAAM,CAAC,SAAS,MAAM;GAEvC,SAAS,gCAAgC,CAC1C,CAAC,QACC,WAAW,OAAO,YAAY,MAAK,MAAK,EAAE,SAAS,OAAO,QAAQ,EACnE,SAAS,qCAAqC,CAC/C;AAED,SAAgB,sBACd,MACA,eAC+C;CAC/C,MAAM,UAAuB;EAC3B,IAAI,oBAAoB;EACxB,IAAI,mBAAmB,EACrB,eACD,CAAC;EACF,GAAI,KAAK,WAAW,EAAE;EACvB;CAED,IAAA,iBAAA,MACM,uBAAuB,eAAmC;EAC9D,cAAc;GACZ,MAAM,UAAU,KAAK,SAAS;GAG9B,MAAM,KAAK,QAAQ;IACjB;IACA;IAEA,gBAAgB,KAAK;IACtB,CAAC;;;8BAXL,WAAW,EAAA,mBAAA,qBAAA,EAAA,CAAA,CAAA,EAAA,eAAA;CAeZ,OAAO;;;;ACxDT,MAAa,kBAAkB;CAC7B,SAAS,OAAO,IAAI,2BAA2B;CAC/C,UAAU,OAAO,IAAI,4BAA4B;CAClD;AAID,SAAgB,iBAAiB,MAA8B;CAC7D,OAAO,OAAO,IAAI,+BAA+B,OAAO;;;;ACR1D,MAAa,mBAAmB,EAC9B,IAAI;CACF,wBAAwB;CACxB,2BAA2B;CAC3B,oBAAoB;CACpB,sBAAsB;CACtB,2BAA2B;CAC5B,EACF;;;;ACqDM,IAAA,iBAAA,kBAAA,MAAM,eAAmD;CAC9D,OAAO,QAAQ,QAA6C;EAC1D,OAAO;GACL,QAAA;GACA,WAAW,CACT;IAAE,SAAS,gBAAgB;IAAS,UAAU;IAA6B,CAC5E;GACF;;CAGH,OAAO,aAAa,SAAkE;EACpF,OAAO;GACL,QAAA;GACA,WAAW,CACT;IACE,SAAS,gBAAgB;IACzB,YAAY,QAAQ;IACpB,QAAQ,QAAQ;IACjB,CACF;GACF;;CAGH,aAAa,SAA8B;EACzC,MAAM,SAAS,QAAQ,UAAU,QAA8B,gBAAgB,QAAQ;EACvF,MAAM,gBAAgB,QAAQ,UAAU,QAAwB,UAAU,cAAc;EACxF,MAAM,YAAY,QAAQ,UAAU,sBAAsB;EAE1D,KAAK,MAAM,QAAQ,OAAO,aAAa;GACrC,MAAM,UAAU,sBAAsB,MAAM,cAAc;GAE1D,UAAU,SAAS,iBAAiB,KAAK,KAAK,EAE5C,YAAY,QAAQ,EACpB,EAAE,WAAW,MAAM,SAAS,CAAC;;EAGjC,QAAQ,UAAU,iBAAiB,UAAU,UAAU,iBAAiB,OAAO,QAAQ,CAAC;EAExF,QAAQ,OAAO,KAAK,6BAA6B;;CAGnD,WAAW,SAA8B;EACvC,QAAQ,OAAO,KAAK,0BAA0B;;;+CAzDjD,OAAO;CACN,SAAS,CACP,WAAW,iBAAiB,EAAE,IAAI,EAAE,UAAU,iBAAiB,IAAI,EAAE,CAAC,CACvE;CACD,WAAW;EACT;EACA;EACA;EACA;EACA;EACA;EACA;EACD;CACF,CAAC,CAAA,EAAA,eAAA;;;ACxDF,SAAgB,SAAS,MAA0C;CACjE,OAAOA,SAAO,iBAAiB,KAAK,CAAC"}

package/dist/{decorate-CdfCRvAc.mjs → decorate-DViXs-0l.mjs}

@@ -1,4 +1,4 @@
-//#region \0@oxc-project+runtime@0.127.0/helpers/decorate.js
+//#region \0@oxc-project+runtime@0.129.0/helpers/decorate.js
 function __decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
 	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);

package/dist/{decorateMetadata-CqtSx3_1.mjs → decorateMetadata-D5WUsc6Y.mjs}

@@ -1,4 +1,4 @@
-//#region \0@oxc-project+runtime@0.127.0/helpers/decorateMetadata.js
+//#region \0@oxc-project+runtime@0.129.0/helpers/decorateMetadata.js
 function __decorateMetadata(k, v) {
 	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }

package/dist/{decorateParam-Dc5DGEpb.mjs → decorateParam-C_dJ_dIO.mjs}

@@ -6,7 +6,7 @@ const AC_TOKENS = {
 	Options: Symbol.for("stratal:ac:options")
 };
 //#endregion
-//#region \0@oxc-project+runtime@0.127.0/helpers/decorateParam.js
+//#region \0@oxc-project+runtime@0.129.0/helpers/decorateParam.js
 function __decorateParam(paramIndex, decorator) {
 	return function(target, key) {
 		decorator(target, key, paramIndex);
@@ -15,4 +15,4 @@ function __decorateParam(paramIndex, decorator) {
 //#endregion
 export { AC_TOKENS as n, __decorateParam as t };
 
-//# sourceMappingURL=decorateParam-Dc5DGEpb.mjs.map
+//# sourceMappingURL=decorateParam-C_dJ_dIO.mjs.map

package/dist/{decorateParam-Dc5DGEpb.mjs.map → decorateParam-C_dJ_dIO.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"decorateParam-Dc5DGEpb.mjs","names":[],"sources":["../src/access-control/tokens.ts"],"sourcesContent":["export const AC_TOKENS = {\n  /** Request-scoped access service */\n  AccessService: Symbol.for('stratal:ac:service'),\n  /** Access control module options (ac, roles) */\n  Options: Symbol.for('stratal:ac:options'),\n} as const\n"],"mappings":";AAAA,MAAa,YAAY;;CAEvB,eAAe,OAAO,IAAI,qBAAqB;;CAE/C,SAAS,OAAO,IAAI,qBAAqB;CAC1C"}
+{"version":3,"file":"decorateParam-C_dJ_dIO.mjs","names":[],"sources":["../src/access-control/tokens.ts"],"sourcesContent":["export const AC_TOKENS = {\n  /** Request-scoped access service */\n  AccessService: Symbol.for('stratal:ac:service'),\n  /** Access control module options (ac, roles) */\n  Options: Symbol.for('stratal:ac:options'),\n} as const\n"],"mappings":";AAAA,MAAa,YAAY;;CAEvB,eAAe,OAAO,IAAI,qBAAqB;;CAE/C,SAAS,OAAO,IAAI,qBAAqB;CAC1C"}

package/dist/errors-B1vVXc1T.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"errors-B1vVXc1T.mjs","names":[],"sources":["../src/context/errors/context-not-initialized.error.ts","../src/context/errors/user-not-authenticated.error.ts","../src/context/errors/user-not-authorized.error.ts"],"sourcesContent":["import { ApplicationError, ERROR_CODES } from 'stratal/errors'\n\nexport class ContextNotInitializedError extends ApplicationError {\n  constructor(contextType = 'Context') {\n    super(\n      'errors.contextNotInitialized',\n      ERROR_CODES.AUTH.CONTEXT_NOT_INITIALIZED,\n      { contextType }\n    )\n  }\n}\n","import { ApplicationError, ERROR_CODES } from 'stratal/errors'\n\nexport class UserNotAuthenticatedError extends ApplicationError {\n  constructor() {\n    super(\n      'errors.userNotAuthenticated',\n      ERROR_CODES.AUTH.USER_NOT_AUTHENTICATED\n    )\n  }\n}\n","import { ApplicationError, ERROR_CODES } from 'stratal/errors'\n\nexport class UserNotAuthorizedError extends ApplicationError {\n  constructor() {\n    super(\n      'errors.unauthorized',\n      ERROR_CODES.AUTHZ.FORBIDDEN\n    )\n  }\n}\n"],"mappings":";;AAEA,IAAa,6BAAb,cAAgD,iBAAiB;CAC/D,YAAY,cAAc,WAAW;AACnC,QACE,gCACA,YAAY,KAAK,yBACjB,EAAE,aAAa,CAChB;;;;;ACNL,IAAa,4BAAb,cAA+C,iBAAiB;CAC9D,cAAc;AACZ,QACE,+BACA,YAAY,KAAK,uBAClB;;;;;ACLL,IAAa,yBAAb,cAA4C,iBAAiB;CAC3D,cAAc;AACZ,QACE,uBACA,YAAY,MAAM,UACnB"}
+{"version":3,"file":"errors-B1vVXc1T.mjs","names":[],"sources":["../src/context/errors/context-not-initialized.error.ts","../src/context/errors/user-not-authenticated.error.ts","../src/context/errors/user-not-authorized.error.ts"],"sourcesContent":["import { ApplicationError, ERROR_CODES } from 'stratal/errors'\n\nexport class ContextNotInitializedError extends ApplicationError {\n  constructor(contextType = 'Context') {\n    super(\n      'errors.contextNotInitialized',\n      ERROR_CODES.AUTH.CONTEXT_NOT_INITIALIZED,\n      { contextType }\n    )\n  }\n}\n","import { ApplicationError, ERROR_CODES } from 'stratal/errors'\n\nexport class UserNotAuthenticatedError extends ApplicationError {\n  constructor() {\n    super(\n      'errors.userNotAuthenticated',\n      ERROR_CODES.AUTH.USER_NOT_AUTHENTICATED\n    )\n  }\n}\n","import { ApplicationError, ERROR_CODES } from 'stratal/errors'\n\nexport class UserNotAuthorizedError extends ApplicationError {\n  constructor() {\n    super(\n      'errors.unauthorized',\n      ERROR_CODES.AUTHZ.FORBIDDEN\n    )\n  }\n}\n"],"mappings":";;AAEA,IAAa,6BAAb,cAAgD,iBAAiB;CAC/D,YAAY,cAAc,WAAW;EACnC,MACE,gCACA,YAAY,KAAK,yBACjB,EAAE,aAAa,CAChB;;;;;ACNL,IAAa,4BAAb,cAA+C,iBAAiB;CAC9D,cAAc;EACZ,MACE,+BACA,YAAY,KAAK,uBAClB;;;;;ACLL,IAAa,yBAAb,cAA4C,iBAAiB;CAC3D,cAAc;EACZ,MACE,uBACA,YAAY,MAAM,UACnB"}

package/dist/factory/index.d.mts

@@ -1,4 +1,4 @@
-import { M as DatabaseService } from "../index-CpFBG0Ws.mjs";
+import { M as DatabaseService } from "../index-CCDPF-1Y.mjs";
 import { Faker } from "@faker-js/faker";
 
 //#region src/factory/factory.d.ts

package/dist/factory/index.mjs

@@ -114,6 +114,7 @@ var Factory = class {
 * ```
 */
 var Sequence = class {
+	generator;
 	current = 0;
 	constructor(generator) {
 		this.generator = generator;

package/dist/factory/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../src/factory/factory.ts","../../src/factory/sequence.ts"],"sourcesContent":["import { faker, type Faker } from '@faker-js/faker'\nimport type { DatabaseService } from '../database'\n\n/**\n * Factory\n *\n * Abstract base class for creating test data.\n * Integrates with Faker.js for data generation.\n *\n * @example Define a factory\n * ```typescript\n * import { Factory } from '@stratal/framework/factory'\n * import type { User, UserCreateInput } from '@your-app/db'\n *\n * export class UserFactory extends Factory<User, UserCreateInput> {\n *   protected model = 'user'\n *\n *   protected definition(): UserCreateInput {\n *     return {\n *       email: this.faker.internet.email(),\n *       firstName: this.faker.person.firstName(),\n *       lastName: this.faker.person.lastName(),\n *       emailVerified: true,\n *     }\n *   }\n *\n *   admin() {\n *     return this.state(attrs => ({ ...attrs, role: 'admin' }))\n *   }\n * }\n * ```\n *\n * @example Usage\n * ```typescript\n * const user = await new UserFactory().create(ctx.db)\n * const admin = await new UserFactory().admin().create(ctx.db)\n * const users = await new UserFactory().count(10).createManyAndReturn(ctx.db)\n * ```\n */\nexport abstract class Factory<TModel, TCreateInput> {\n  protected readonly faker: Faker = faker\n  protected abstract model: string\n  protected abstract definition(): TCreateInput\n\n  private states: ((attrs: TCreateInput) => Partial<TCreateInput>)[] = []\n  private _count = 1\n\n  state(modifier: (attrs: TCreateInput) => Partial<TCreateInput>): this {\n    const clone = this.clone()\n    clone.states.push(modifier)\n    return clone\n  }\n\n  count(n: number): this {\n    const clone = this.clone()\n    clone._count = n\n    return clone\n  }\n\n  make(): TCreateInput {\n    let attrs = this.definition()\n    for (const modifier of this.states) {\n      attrs = { ...attrs, ...modifier(attrs) }\n    }\n    return attrs\n  }\n\n  makeMany(count?: number): TCreateInput[] {\n    const n = count ?? this._count\n    return Array.from({ length: n }, () => this.make())\n  }\n\n  async create(db: DatabaseService): Promise<TModel> {\n    const data = this.make()\n    const model = (db as unknown as Record<string, { create: (args: { data: TCreateInput }) => Promise<TModel> }>)[this.model]\n    return model.create({ data })\n  }\n\n  async createMany(db: DatabaseService, count?: number): Promise<{ count: number }> {\n    const data = this.makeMany(count)\n    const model = (db as unknown as Record<string, { createMany: (args: { data: TCreateInput[] }) => Promise<{ count: number }> }>)[this.model]\n    return model.createMany({ data })\n  }\n\n  async createManyAndReturn(db: DatabaseService, count?: number): Promise<TModel[]> {\n    const data = this.makeMany(count)\n    const model = (db as unknown as Record<string, { createManyAndReturn: (args: { data: TCreateInput[] }) => Promise<TModel[]> }>)[this.model]\n    return model.createManyAndReturn({ data })\n  }\n\n  protected clone(): this {\n    const FactoryClass = this.constructor as new () => this\n    const clone = new FactoryClass()\n    clone.states = [...this.states]\n    clone._count = this._count\n    return clone\n  }\n}\n","/**\n * Sequence\n *\n * Auto-incrementing sequence generator for creating unique values.\n *\n * @example Basic usage\n * ```typescript\n * const emailSeq = new Sequence((n) => `user${n}@example.com`)\n *\n * emailSeq.next() // 'user1@example.com'\n * emailSeq.next() // 'user2@example.com'\n * emailSeq.reset()\n * emailSeq.next() // 'user1@example.com'\n * ```\n *\n * @example With factory\n * ```typescript\n * const orderSeq = new Sequence((n) => `ORD-${String(n).padStart(6, '0')}`)\n *\n * export class OrderFactory extends Factory<Order, OrderCreateInput> {\n *   protected definition() {\n *     return {\n *       orderNumber: orderSeq.next(),\n *       // ...\n *     }\n *   }\n * }\n * ```\n */\nexport class Sequence<T = number> {\n  private current = 0\n\n  constructor(private readonly generator?: (n: number) => T) {}\n\n  next(): T {\n    this.current++\n    if (this.generator) {\n      return this.generator(this.current)\n    }\n    return this.current as T\n  }\n\n  peek(): T {\n    const value = this.current + 1\n    if (this.generator) {\n      return this.generator(value)\n    }\n    return value as T\n  }\n\n  reset(): void {\n    this.current = 0\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,IAAsB,UAAtB,MAAoD;CAClD,QAAkC;CAIlC,SAAqE,EAAE;CACvE,SAAiB;CAEjB,MAAM,UAAgE;EACpE,MAAM,QAAQ,KAAK,OAAO;AAC1B,QAAM,OAAO,KAAK,SAAS;AAC3B,SAAO;;CAGT,MAAM,GAAiB;EACrB,MAAM,QAAQ,KAAK,OAAO;AAC1B,QAAM,SAAS;AACf,SAAO;;CAGT,OAAqB;EACnB,IAAI,QAAQ,KAAK,YAAY;AAC7B,OAAK,MAAM,YAAY,KAAK,OAC1B,SAAQ;GAAE,GAAG;GAAO,GAAG,SAAS,MAAM;GAAE;AAE1C,SAAO;;CAGT,SAAS,OAAgC;EACvC,MAAM,IAAI,SAAS,KAAK;AACxB,SAAO,MAAM,KAAK,EAAE,QAAQ,GAAG,QAAQ,KAAK,MAAM,CAAC;;CAGrD,MAAM,OAAO,IAAsC;EACjD,MAAM,OAAO,KAAK,MAAM;AAExB,SADe,GAAgG,KAAK,OACvG,OAAO,EAAE,MAAM,CAAC;;CAG/B,MAAM,WAAW,IAAqB,OAA4C;EAChF,MAAM,OAAO,KAAK,SAAS,MAAM;AAEjC,SADe,GAAiH,KAAK,OACxH,WAAW,EAAE,MAAM,CAAC;;CAGnC,MAAM,oBAAoB,IAAqB,OAAmC;EAChF,MAAM,OAAO,KAAK,SAAS,MAAM;AAEjC,SADe,GAAiH,KAAK,OACxH,oBAAoB,EAAE,MAAM,CAAC;;CAG5C,QAAwB;EACtB,MAAM,eAAe,KAAK;EAC1B,MAAM,QAAQ,IAAI,cAAc;AAChC,QAAM,SAAS,CAAC,GAAG,KAAK,OAAO;AAC/B,QAAM,SAAS,KAAK;AACpB,SAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AClEX,IAAa,WAAb,MAAkC;CAChC,UAAkB;CAElB,YAAY,WAA+C;AAA9B,OAAA,YAAA;;CAE7B,OAAU;AACR,OAAK;AACL,MAAI,KAAK,UACP,QAAO,KAAK,UAAU,KAAK,QAAQ;AAErC,SAAO,KAAK;;CAGd,OAAU;EACR,MAAM,QAAQ,KAAK,UAAU;AAC7B,MAAI,KAAK,UACP,QAAO,KAAK,UAAU,MAAM;AAE9B,SAAO;;CAGT,QAAc;AACZ,OAAK,UAAU"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/factory/factory.ts","../../src/factory/sequence.ts"],"sourcesContent":["import { faker, type Faker } from '@faker-js/faker'\nimport type { DatabaseService } from '../database'\n\n/**\n * Factory\n *\n * Abstract base class for creating test data.\n * Integrates with Faker.js for data generation.\n *\n * @example Define a factory\n * ```typescript\n * import { Factory } from '@stratal/framework/factory'\n * import type { User, UserCreateInput } from '@your-app/db'\n *\n * export class UserFactory extends Factory<User, UserCreateInput> {\n *   protected model = 'user'\n *\n *   protected definition(): UserCreateInput {\n *     return {\n *       email: this.faker.internet.email(),\n *       firstName: this.faker.person.firstName(),\n *       lastName: this.faker.person.lastName(),\n *       emailVerified: true,\n *     }\n *   }\n *\n *   admin() {\n *     return this.state(attrs => ({ ...attrs, role: 'admin' }))\n *   }\n * }\n * ```\n *\n * @example Usage\n * ```typescript\n * const user = await new UserFactory().create(ctx.db)\n * const admin = await new UserFactory().admin().create(ctx.db)\n * const users = await new UserFactory().count(10).createManyAndReturn(ctx.db)\n * ```\n */\nexport abstract class Factory<TModel, TCreateInput> {\n  protected readonly faker: Faker = faker\n  protected abstract model: string\n  protected abstract definition(): TCreateInput\n\n  private states: ((attrs: TCreateInput) => Partial<TCreateInput>)[] = []\n  private _count = 1\n\n  state(modifier: (attrs: TCreateInput) => Partial<TCreateInput>): this {\n    const clone = this.clone()\n    clone.states.push(modifier)\n    return clone\n  }\n\n  count(n: number): this {\n    const clone = this.clone()\n    clone._count = n\n    return clone\n  }\n\n  make(): TCreateInput {\n    let attrs = this.definition()\n    for (const modifier of this.states) {\n      attrs = { ...attrs, ...modifier(attrs) }\n    }\n    return attrs\n  }\n\n  makeMany(count?: number): TCreateInput[] {\n    const n = count ?? this._count\n    return Array.from({ length: n }, () => this.make())\n  }\n\n  async create(db: DatabaseService): Promise<TModel> {\n    const data = this.make()\n    const model = (db as unknown as Record<string, { create: (args: { data: TCreateInput }) => Promise<TModel> }>)[this.model]\n    return model.create({ data })\n  }\n\n  async createMany(db: DatabaseService, count?: number): Promise<{ count: number }> {\n    const data = this.makeMany(count)\n    const model = (db as unknown as Record<string, { createMany: (args: { data: TCreateInput[] }) => Promise<{ count: number }> }>)[this.model]\n    return model.createMany({ data })\n  }\n\n  async createManyAndReturn(db: DatabaseService, count?: number): Promise<TModel[]> {\n    const data = this.makeMany(count)\n    const model = (db as unknown as Record<string, { createManyAndReturn: (args: { data: TCreateInput[] }) => Promise<TModel[]> }>)[this.model]\n    return model.createManyAndReturn({ data })\n  }\n\n  protected clone(): this {\n    const FactoryClass = this.constructor as new () => this\n    const clone = new FactoryClass()\n    clone.states = [...this.states]\n    clone._count = this._count\n    return clone\n  }\n}\n","/**\n * Sequence\n *\n * Auto-incrementing sequence generator for creating unique values.\n *\n * @example Basic usage\n * ```typescript\n * const emailSeq = new Sequence((n) => `user${n}@example.com`)\n *\n * emailSeq.next() // 'user1@example.com'\n * emailSeq.next() // 'user2@example.com'\n * emailSeq.reset()\n * emailSeq.next() // 'user1@example.com'\n * ```\n *\n * @example With factory\n * ```typescript\n * const orderSeq = new Sequence((n) => `ORD-${String(n).padStart(6, '0')}`)\n *\n * export class OrderFactory extends Factory<Order, OrderCreateInput> {\n *   protected definition() {\n *     return {\n *       orderNumber: orderSeq.next(),\n *       // ...\n *     }\n *   }\n * }\n * ```\n */\nexport class Sequence<T = number> {\n  private current = 0\n\n  constructor(private readonly generator?: (n: number) => T) {}\n\n  next(): T {\n    this.current++\n    if (this.generator) {\n      return this.generator(this.current)\n    }\n    return this.current as T\n  }\n\n  peek(): T {\n    const value = this.current + 1\n    if (this.generator) {\n      return this.generator(value)\n    }\n    return value as T\n  }\n\n  reset(): void {\n    this.current = 0\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,IAAsB,UAAtB,MAAoD;CAClD,QAAkC;CAIlC,SAAqE,EAAE;CACvE,SAAiB;CAEjB,MAAM,UAAgE;EACpE,MAAM,QAAQ,KAAK,OAAO;EAC1B,MAAM,OAAO,KAAK,SAAS;EAC3B,OAAO;;CAGT,MAAM,GAAiB;EACrB,MAAM,QAAQ,KAAK,OAAO;EAC1B,MAAM,SAAS;EACf,OAAO;;CAGT,OAAqB;EACnB,IAAI,QAAQ,KAAK,YAAY;EAC7B,KAAK,MAAM,YAAY,KAAK,QAC1B,QAAQ;GAAE,GAAG;GAAO,GAAG,SAAS,MAAM;GAAE;EAE1C,OAAO;;CAGT,SAAS,OAAgC;EACvC,MAAM,IAAI,SAAS,KAAK;EACxB,OAAO,MAAM,KAAK,EAAE,QAAQ,GAAG,QAAQ,KAAK,MAAM,CAAC;;CAGrD,MAAM,OAAO,IAAsC;EACjD,MAAM,OAAO,KAAK,MAAM;EAExB,OADe,GAAgG,KAAK,OACvG,OAAO,EAAE,MAAM,CAAC;;CAG/B,MAAM,WAAW,IAAqB,OAA4C;EAChF,MAAM,OAAO,KAAK,SAAS,MAAM;EAEjC,OADe,GAAiH,KAAK,OACxH,WAAW,EAAE,MAAM,CAAC;;CAGnC,MAAM,oBAAoB,IAAqB,OAAmC;EAChF,MAAM,OAAO,KAAK,SAAS,MAAM;EAEjC,OADe,GAAiH,KAAK,OACxH,oBAAoB,EAAE,MAAM,CAAC;;CAG5C,QAAwB;EACtB,MAAM,eAAe,KAAK;EAC1B,MAAM,QAAQ,IAAI,cAAc;EAChC,MAAM,SAAS,CAAC,GAAG,KAAK,OAAO;EAC/B,MAAM,SAAS,KAAK;EACpB,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AClEX,IAAa,WAAb,MAAkC;CAGH;CAF7B,UAAkB;CAElB,YAAY,WAA+C;EAA9B,KAAA,YAAA;;CAE7B,OAAU;EACR,KAAK;EACL,IAAI,KAAK,WACP,OAAO,KAAK,UAAU,KAAK,QAAQ;EAErC,OAAO,KAAK;;CAGd,OAAU;EACR,MAAM,QAAQ,KAAK,UAAU;EAC7B,IAAI,KAAK,WACP,OAAO,KAAK,UAAU,MAAM;EAE9B,OAAO;;CAGT,QAAc;EACZ,KAAK,UAAU"}

package/dist/guards/index.mjs

@@ -1,6 +1,6 @@
-import { n as AC_TOKENS, t as __decorateParam } from "../decorateParam-Dc5DGEpb.mjs";
-import { t as __decorateMetadata } from "../decorateMetadata-CqtSx3_1.mjs";
-import { t as __decorate } from "../decorate-CdfCRvAc.mjs";
+import { n as AC_TOKENS, t as __decorateParam } from "../decorateParam-C_dJ_dIO.mjs";
+import { t as __decorateMetadata } from "../decorateMetadata-D5WUsc6Y.mjs";
+import { t as __decorate } from "../decorate-DViXs-0l.mjs";
 import { n as UserNotAuthenticatedError } from "../errors-B1vVXc1T.mjs";
 import { t as InsufficientPermissionsError } from "../insufficient-permissions.error-CRnOHYvq.mjs";
 import { DI_TOKENS, Transient } from "stratal/di";
@@ -52,6 +52,9 @@ function AuthGuard(options) {
 	const rawPermissions = options?.permissions;
 	const permissions = rawPermissions ? parsePermissions(rawPermissions) : void 0;
 	let ConfiguredAuthGuard = class ConfiguredAuthGuard {
+		authContext;
+		logger;
+		accessService;
 		constructor(authContext, logger, accessService) {
 			this.authContext = authContext;
 			this.logger = logger;

package/dist/guards/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["inject"],"sources":["../../src/guards/auth.guard.ts"],"sourcesContent":["import { DI_TOKENS, Transient } from 'stratal/di'\nimport type { AuthGuardOptions, CanActivate, GuardClass } from 'stratal/guards'\nimport { LOGGER_TOKENS, type LoggerService } from 'stratal/logger'\nimport type { RouterContext } from 'stratal/router'\nimport { inject } from 'tsyringe'\nimport { InsufficientPermissionsError } from '../access-control/errors/insufficient-permissions.error'\nimport type { AccessService } from '../access-control/services/access.service'\nimport { AC_TOKENS } from '../access-control/tokens'\nimport type { AuthContext } from '../context/auth-context'\nimport { UserNotAuthenticatedError } from '../context/errors'\n\nfunction parsePermissions(raw: string | string[]): Record<string, string[]> {\n  const list = Array.isArray(raw) ? raw : [raw]\n  return list.reduce<Record<string, string[]>>((acc, perm) => {\n    const colon = perm.indexOf(':')\n    const resource = colon === -1 ? perm : perm.slice(0, colon)\n    const action = colon === -1 ? '*' : perm.slice(colon + 1)\n    ;(acc[resource] ??= []).push(action)\n    return acc\n  }, {})\n}\n\n\n/**\n * AuthGuard Factory\n *\n * Creates a guard class that enforces authentication and optional authorization.\n *\n * **Authentication (no permissions):**\n * - Checks if user is authenticated via AuthContext.isAuthenticated()\n * - Throws UserNotAuthenticatedError (401) if not authenticated\n *\n * **Authorization (with permissions):**\n * - First verifies authentication\n * - Then checks permissions via AccessService (reads from AuthContext — no DB hit)\n * - Throws InsufficientPermissionsError (403) if unauthorized\n *\n * @param options - Configuration options\n * @param options.permissions - Required permissions keyed by resource\n * @returns Guard class for use with @UseGuards decorator\n *\n * @example Authentication only\n * ```typescript\n * @UseGuards(AuthGuard())\n * export class ProfileController { }\n * ```\n *\n * @example Authentication with permissions\n * ```typescript\n * @UseGuards(AuthGuard({ permissions: 'posts:update' }))\n * @UseGuards(AuthGuard({ permissions: ['posts:update', 'posts:delete'] }))\n * export class PostsController { }\n * ```\n */\nexport function AuthGuard(options?: AuthGuardOptions): GuardClass {\n  const rawPermissions = options?.permissions\n  const permissions = rawPermissions ? parsePermissions(rawPermissions) : undefined\n\n  @Transient()\n  class ConfiguredAuthGuard implements CanActivate {\n    constructor(\n      @inject(DI_TOKENS.AuthContext) private readonly authContext: AuthContext,\n      @inject(LOGGER_TOKENS.LoggerService) private readonly logger: LoggerService,\n      @inject(AC_TOKENS.AccessService, { isOptional: true }) private readonly accessService?: AccessService\n    ) { }\n\n    async canActivate(_context: RouterContext): Promise<boolean> {\n      if (!this.authContext.isAuthenticated()) {\n        this.logger.debug('Auth guard: User not authenticated')\n        throw new UserNotAuthenticatedError()\n      }\n\n      if (!permissions || Object.keys(permissions).length === 0) {\n        this.logger.debug('Auth guard: Authentication passed (no permissions required)')\n        return true\n      }\n\n      const userId = this.authContext.getUserId()\n      if (!userId) {\n        this.logger.debug('Auth guard: No user ID in context')\n        throw new InsufficientPermissionsError(rawPermissions!, undefined)\n      }\n\n      if (this.accessService) {\n        const allowed = await this.accessService.hasPermission(userId, permissions)\n\n        this.logger.debug('Auth guard: Authorization check', {\n          userId,\n          permissions,\n          allowed,\n        })\n\n        if (!allowed) {\n          throw new InsufficientPermissionsError(rawPermissions!, userId)\n        }\n      }\n\n      return true\n    }\n  }\n\n  return ConfiguredAuthGuard\n}\n"],"mappings":";;;;;;;;;;AAWA,SAAS,iBAAiB,KAAkD;AAE1E,SADa,MAAM,QAAQ,IAAI,GAAG,MAAM,CAAC,IAAI,EACjC,QAAkC,KAAK,SAAS;EAC1D,MAAM,QAAQ,KAAK,QAAQ,IAAI;EAC/B,MAAM,WAAW,UAAU,KAAK,OAAO,KAAK,MAAM,GAAG,MAAM;EAC3D,MAAM,SAAS,UAAU,KAAK,MAAM,KAAK,MAAM,QAAQ,EAAE;AACxD,GAAC,IAAI,cAAc,EAAE,EAAE,KAAK,OAAO;AACpC,SAAO;IACN,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCR,SAAgB,UAAU,SAAwC;CAChE,MAAM,iBAAiB,SAAS;CAChC,MAAM,cAAc,iBAAiB,iBAAiB,eAAe,GAAG,KAAA;CAExE,IAAA,sBAAA,MACM,oBAA2C;EAC/C,YACE,aACA,QACA,eACA;AAHgD,QAAA,cAAA;AACM,QAAA,SAAA;AACkB,QAAA,gBAAA;;EAG1E,MAAM,YAAY,UAA2C;AAC3D,OAAI,CAAC,KAAK,YAAY,iBAAiB,EAAE;AACvC,SAAK,OAAO,MAAM,qCAAqC;AACvD,UAAM,IAAI,2BAA2B;;AAGvC,OAAI,CAAC,eAAe,OAAO,KAAK,YAAY,CAAC,WAAW,GAAG;AACzD,SAAK,OAAO,MAAM,8DAA8D;AAChF,WAAO;;GAGT,MAAM,SAAS,KAAK,YAAY,WAAW;AAC3C,OAAI,CAAC,QAAQ;AACX,SAAK,OAAO,MAAM,oCAAoC;AACtD,UAAM,IAAI,6BAA6B,gBAAiB,KAAA,EAAU;;AAGpE,OAAI,KAAK,eAAe;IACtB,MAAM,UAAU,MAAM,KAAK,cAAc,cAAc,QAAQ,YAAY;AAE3E,SAAK,OAAO,MAAM,mCAAmC;KACnD;KACA;KACA;KACD,CAAC;AAEF,QAAI,CAAC,QACH,OAAM,IAAI,6BAA6B,gBAAiB,OAAO;;AAInE,UAAO;;;;EAvCV,WAAW;qBAGPA,SAAO,UAAU,YAAY,CAAA;qBAC7BA,SAAO,cAAc,cAAc,CAAA;qBACnCA,SAAO,UAAU,eAAe,EAAE,YAAY,MAAM,CAAC,CAAA;;;;;;;AAsC1D,QAAO"}
+{"version":3,"file":"index.mjs","names":["inject"],"sources":["../../src/guards/auth.guard.ts"],"sourcesContent":["import { DI_TOKENS, Transient } from 'stratal/di'\nimport type { AuthGuardOptions, CanActivate, GuardClass } from 'stratal/guards'\nimport { LOGGER_TOKENS, type LoggerService } from 'stratal/logger'\nimport type { RouterContext } from 'stratal/router'\nimport { inject } from 'tsyringe'\nimport { InsufficientPermissionsError } from '../access-control/errors/insufficient-permissions.error'\nimport type { AccessService } from '../access-control/services/access.service'\nimport { AC_TOKENS } from '../access-control/tokens'\nimport type { AuthContext } from '../context/auth-context'\nimport { UserNotAuthenticatedError } from '../context/errors'\n\nfunction parsePermissions(raw: string | string[]): Record<string, string[]> {\n  const list = Array.isArray(raw) ? raw : [raw]\n  return list.reduce<Record<string, string[]>>((acc, perm) => {\n    const colon = perm.indexOf(':')\n    const resource = colon === -1 ? perm : perm.slice(0, colon)\n    const action = colon === -1 ? '*' : perm.slice(colon + 1)\n    ;(acc[resource] ??= []).push(action)\n    return acc\n  }, {})\n}\n\n\n/**\n * AuthGuard Factory\n *\n * Creates a guard class that enforces authentication and optional authorization.\n *\n * **Authentication (no permissions):**\n * - Checks if user is authenticated via AuthContext.isAuthenticated()\n * - Throws UserNotAuthenticatedError (401) if not authenticated\n *\n * **Authorization (with permissions):**\n * - First verifies authentication\n * - Then checks permissions via AccessService (reads from AuthContext — no DB hit)\n * - Throws InsufficientPermissionsError (403) if unauthorized\n *\n * @param options - Configuration options\n * @param options.permissions - Required permissions keyed by resource\n * @returns Guard class for use with @UseGuards decorator\n *\n * @example Authentication only\n * ```typescript\n * @UseGuards(AuthGuard())\n * export class ProfileController { }\n * ```\n *\n * @example Authentication with permissions\n * ```typescript\n * @UseGuards(AuthGuard({ permissions: 'posts:update' }))\n * @UseGuards(AuthGuard({ permissions: ['posts:update', 'posts:delete'] }))\n * export class PostsController { }\n * ```\n */\nexport function AuthGuard(options?: AuthGuardOptions): GuardClass {\n  const rawPermissions = options?.permissions\n  const permissions = rawPermissions ? parsePermissions(rawPermissions) : undefined\n\n  @Transient()\n  class ConfiguredAuthGuard implements CanActivate {\n    constructor(\n      @inject(DI_TOKENS.AuthContext) private readonly authContext: AuthContext,\n      @inject(LOGGER_TOKENS.LoggerService) private readonly logger: LoggerService,\n      @inject(AC_TOKENS.AccessService, { isOptional: true }) private readonly accessService?: AccessService\n    ) { }\n\n    async canActivate(_context: RouterContext): Promise<boolean> {\n      if (!this.authContext.isAuthenticated()) {\n        this.logger.debug('Auth guard: User not authenticated')\n        throw new UserNotAuthenticatedError()\n      }\n\n      if (!permissions || Object.keys(permissions).length === 0) {\n        this.logger.debug('Auth guard: Authentication passed (no permissions required)')\n        return true\n      }\n\n      const userId = this.authContext.getUserId()\n      if (!userId) {\n        this.logger.debug('Auth guard: No user ID in context')\n        throw new InsufficientPermissionsError(rawPermissions!, undefined)\n      }\n\n      if (this.accessService) {\n        const allowed = await this.accessService.hasPermission(userId, permissions)\n\n        this.logger.debug('Auth guard: Authorization check', {\n          userId,\n          permissions,\n          allowed,\n        })\n\n        if (!allowed) {\n          throw new InsufficientPermissionsError(rawPermissions!, userId)\n        }\n      }\n\n      return true\n    }\n  }\n\n  return ConfiguredAuthGuard\n}\n"],"mappings":";;;;;;;;;;AAWA,SAAS,iBAAiB,KAAkD;CAE1E,QADa,MAAM,QAAQ,IAAI,GAAG,MAAM,CAAC,IAAI,EACjC,QAAkC,KAAK,SAAS;EAC1D,MAAM,QAAQ,KAAK,QAAQ,IAAI;EAC/B,MAAM,WAAW,UAAU,KAAK,OAAO,KAAK,MAAM,GAAG,MAAM;EAC3D,MAAM,SAAS,UAAU,KAAK,MAAM,KAAK,MAAM,QAAQ,EAAE;EACxD,CAAC,IAAI,cAAc,EAAE,EAAE,KAAK,OAAO;EACpC,OAAO;IACN,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCR,SAAgB,UAAU,SAAwC;CAChE,MAAM,iBAAiB,SAAS;CAChC,MAAM,cAAc,iBAAiB,iBAAiB,eAAe,GAAG,KAAA;CAExE,IAAA,sBAAA,MACM,oBAA2C;EAEG;EACM;EACkB;EAH1E,YACE,aACA,QACA,eACA;GAHgD,KAAA,cAAA;GACM,KAAA,SAAA;GACkB,KAAA,gBAAA;;EAG1E,MAAM,YAAY,UAA2C;GAC3D,IAAI,CAAC,KAAK,YAAY,iBAAiB,EAAE;IACvC,KAAK,OAAO,MAAM,qCAAqC;IACvD,MAAM,IAAI,2BAA2B;;GAGvC,IAAI,CAAC,eAAe,OAAO,KAAK,YAAY,CAAC,WAAW,GAAG;IACzD,KAAK,OAAO,MAAM,8DAA8D;IAChF,OAAO;;GAGT,MAAM,SAAS,KAAK,YAAY,WAAW;GAC3C,IAAI,CAAC,QAAQ;IACX,KAAK,OAAO,MAAM,oCAAoC;IACtD,MAAM,IAAI,6BAA6B,gBAAiB,KAAA,EAAU;;GAGpE,IAAI,KAAK,eAAe;IACtB,MAAM,UAAU,MAAM,KAAK,cAAc,cAAc,QAAQ,YAAY;IAE3E,KAAK,OAAO,MAAM,mCAAmC;KACnD;KACA;KACA;KACD,CAAC;IAEF,IAAI,CAAC,SACH,MAAM,IAAI,6BAA6B,gBAAiB,OAAO;;GAInE,OAAO;;;;EAvCV,WAAW;qBAGPA,SAAO,UAAU,YAAY,CAAA;qBAC7BA,SAAO,cAAc,cAAc,CAAA;qBACnCA,SAAO,UAAU,eAAe,EAAE,YAAY,MAAM,CAAC,CAAA;;;;;;;CAsC1D,OAAO"}

package/dist/{index-CpFBG0Ws.d.mts → index-CCDPF-1Y.d.mts}

@@ -3,7 +3,7 @@ import { MessageKeys } from "stratal/i18n";
 import { AsyncModuleOptions, DynamicModule, ModuleContext, OnInitialize, OnShutdown } from "stratal/module";
 import { ApplicationError, ErrorCode } from "stratal/errors";
 import { Command } from "stratal/quarry";
-import { AggregateArgs, AllCrudOperations, AnyPlugin, ClientContract, ClientOptions, CountArgs, CreateArgs, CreateManyArgs, DeleteArgs, DeleteManyArgs, FindFirstArgs, FindManyArgs, FindUniqueArgs, GroupByArgs, ModelResult, RuntimePlugin, UpdateArgs, UpdateManyArgs, UpsertArgs } from "@zenstackhq/orm";
+import { AggregateArgs, AllCrudOperations, AnyPlugin, ClientContract, ClientOptions, ComputedFieldsOptions, CountArgs, CreateArgs, CreateManyArgs, DeleteArgs, DeleteManyArgs, FindFirstArgs, FindManyArgs, FindUniqueArgs, GroupByArgs, ModelResult, RuntimePlugin, UpdateArgs, UpdateManyArgs, UpsertArgs } from "@zenstackhq/orm";
 import { SchemaDef } from "@zenstackhq/schema";
 import { SchemaDef as SchemaDef$1 } from "@zenstackhq/orm/schema";
 import { IEventRegistry } from "stratal/events";
@@ -14,6 +14,12 @@ interface DatabaseConnectionConfig<Schema extends SchemaDef = SchemaDef, Name ex
   schema: Schema;
   dialect: () => ClientOptions<SchemaDef>['dialect'];
   plugins?: AnyPlugin[];
+  /**
+   * Schema-level @computed field implementations. Required when the schema
+   * declares any `@computed` fields. Keyed by uncapitalized model name; values
+   * map field name to a Kysely-expression compute callback.
+   */
+  computedFields?: ComputedFieldsOptions<Schema>;
 }
 interface DatabaseModuleConfig {
   default: DefaultConnectionName;
@@ -439,4 +445,4 @@ declare class MigrateStatusCommand extends ZenStackCommand {
 }
 //#endregion
 export { DATABASE_TOKENS as A, UniqueConstraintError as C, DatabaseConfigError as D, ForeignKeyConstraintError as E, DatabaseModuleConfig as F, DatabaseService as M, DatabaseConnectionConfig as N, DatabaseError as O, DatabaseModule as P, fromZenStackError as S, InvalidErrorCodeRangeError as T, EventPhase as _, DbPushCommand as a, ModelName as b, ZenStackCommand as c, EventEmitterPluginOptions as d, ErrorHandlerPlugin as f, DatabaseOperation as g, DatabaseEvents as h, MigrateDeployCommand as i, connectionSymbol as j, InjectDB as k, SchemaSwitcher as l, DatabaseEventName as m, MigrateResetCommand as n, DbPullCommand as o, databaseMessages as p, MigrateDevCommand as r, DbGenerateCommand as s, MigrateStatusCommand as t, EventEmitterPlugin as u, GetData as v, RecordNotFoundError as w, ParseEvent as x, GetResult as y };
-//# sourceMappingURL=index-CpFBG0Ws.d.mts.map
+//# sourceMappingURL=index-CCDPF-1Y.d.mts.map