@stratum-hq/db-adapters 0.1.0

package/dist/index.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DatabasePrismaAdapter = exports.DatabaseRawAdapter = exports.DatabasePoolManager = exports.dropDatabase = exports.createDatabase = exports.databaseExists = exports.getDatabaseName = exports.migrateTable = exports.createIsolationPolicy = exports.enableRLSMigration = exports.addTenantColumn = exports.getCurrentSearchPath = exports.resetSearchPath = exports.setSchemaSearchPath = exports.tenantSchemaName = exports.replicateTableToSchema = exports.listTenantSchemas = exports.schemaExists = exports.dropSchema = exports.createSchema = exports.getCurrentTenantId = exports.resetTenantContext = exports.setTenantContext = exports.isRLSEnabled = exports.disableRLS = exports.enableRLS = exports.dropPolicy = exports.createPolicy = exports.withSchemaTenant = exports.SchemaPrismaAdapter = exports.createSchemaTenantPool = exports.SchemaRawAdapter = exports.withTenant = exports.PrismaAdapter = exports.createTenantPool = exports.RawAdapter = exports.BaseAdapter = void 0;
+var base_adapter_js_1 = require("./base-adapter.js");
+Object.defineProperty(exports, "BaseAdapter", { enumerable: true, get: function () { return base_adapter_js_1.BaseAdapter; } });
+var raw_js_1 = require("./adapters/raw.js");
+Object.defineProperty(exports, "RawAdapter", { enumerable: true, get: function () { return raw_js_1.RawAdapter; } });
+Object.defineProperty(exports, "createTenantPool", { enumerable: true, get: function () { return raw_js_1.createTenantPool; } });
+var prisma_js_1 = require("./adapters/prisma.js");
+Object.defineProperty(exports, "PrismaAdapter", { enumerable: true, get: function () { return prisma_js_1.PrismaAdapter; } });
+Object.defineProperty(exports, "withTenant", { enumerable: true, get: function () { return prisma_js_1.withTenant; } });
+var schema_raw_js_1 = require("./adapters/schema-raw.js");
+Object.defineProperty(exports, "SchemaRawAdapter", { enumerable: true, get: function () { return schema_raw_js_1.SchemaRawAdapter; } });
+Object.defineProperty(exports, "createSchemaTenantPool", { enumerable: true, get: function () { return schema_raw_js_1.createSchemaTenantPool; } });
+var schema_prisma_js_1 = require("./adapters/schema-prisma.js");
+Object.defineProperty(exports, "SchemaPrismaAdapter", { enumerable: true, get: function () { return schema_prisma_js_1.SchemaPrismaAdapter; } });
+Object.defineProperty(exports, "withSchemaTenant", { enumerable: true, get: function () { return schema_prisma_js_1.withSchemaTenant; } });
+var manager_js_1 = require("./rls/manager.js");
+Object.defineProperty(exports, "createPolicy", { enumerable: true, get: function () { return manager_js_1.createPolicy; } });
+Object.defineProperty(exports, "dropPolicy", { enumerable: true, get: function () { return manager_js_1.dropPolicy; } });
+Object.defineProperty(exports, "enableRLS", { enumerable: true, get: function () { return manager_js_1.enableRLS; } });
+Object.defineProperty(exports, "disableRLS", { enumerable: true, get: function () { return manager_js_1.disableRLS; } });
+Object.defineProperty(exports, "isRLSEnabled", { enumerable: true, get: function () { return manager_js_1.isRLSEnabled; } });
+var session_js_1 = require("./rls/session.js");
+Object.defineProperty(exports, "setTenantContext", { enumerable: true, get: function () { return session_js_1.setTenantContext; } });
+Object.defineProperty(exports, "resetTenantContext", { enumerable: true, get: function () { return session_js_1.resetTenantContext; } });
+Object.defineProperty(exports, "getCurrentTenantId", { enumerable: true, get: function () { return session_js_1.getCurrentTenantId; } });
+var manager_js_2 = require("./schema/manager.js");
+Object.defineProperty(exports, "createSchema", { enumerable: true, get: function () { return manager_js_2.createSchema; } });
+Object.defineProperty(exports, "dropSchema", { enumerable: true, get: function () { return manager_js_2.dropSchema; } });
+Object.defineProperty(exports, "schemaExists", { enumerable: true, get: function () { return manager_js_2.schemaExists; } });
+Object.defineProperty(exports, "listTenantSchemas", { enumerable: true, get: function () { return manager_js_2.listTenantSchemas; } });
+Object.defineProperty(exports, "replicateTableToSchema", { enumerable: true, get: function () { return manager_js_2.replicateTableToSchema; } });
+Object.defineProperty(exports, "tenantSchemaName", { enumerable: true, get: function () { return manager_js_2.tenantSchemaName; } });
+var session_js_2 = require("./schema/session.js");
+Object.defineProperty(exports, "setSchemaSearchPath", { enumerable: true, get: function () { return session_js_2.setSchemaSearchPath; } });
+Object.defineProperty(exports, "resetSearchPath", { enumerable: true, get: function () { return session_js_2.resetSearchPath; } });
+Object.defineProperty(exports, "getCurrentSearchPath", { enumerable: true, get: function () { return session_js_2.getCurrentSearchPath; } });
+var migration_helpers_js_1 = require("./migration-helpers.js");
+Object.defineProperty(exports, "addTenantColumn", { enumerable: true, get: function () { return migration_helpers_js_1.addTenantColumn; } });
+Object.defineProperty(exports, "enableRLSMigration", { enumerable: true, get: function () { return migration_helpers_js_1.enableRLS; } });
+Object.defineProperty(exports, "createIsolationPolicy", { enumerable: true, get: function () { return migration_helpers_js_1.createIsolationPolicy; } });
+Object.defineProperty(exports, "migrateTable", { enumerable: true, get: function () { return migration_helpers_js_1.migrateTable; } });
+// DB_PER_TENANT isolation
+var manager_js_3 = require("./database/manager.js");
+Object.defineProperty(exports, "getDatabaseName", { enumerable: true, get: function () { return manager_js_3.getDatabaseName; } });
+Object.defineProperty(exports, "databaseExists", { enumerable: true, get: function () { return manager_js_3.databaseExists; } });
+Object.defineProperty(exports, "createDatabase", { enumerable: true, get: function () { return manager_js_3.createDatabase; } });
+Object.defineProperty(exports, "dropDatabase", { enumerable: true, get: function () { return manager_js_3.dropDatabase; } });
+var pool_manager_js_1 = require("./database/pool-manager.js");
+Object.defineProperty(exports, "DatabasePoolManager", { enumerable: true, get: function () { return pool_manager_js_1.DatabasePoolManager; } });
+var database_raw_js_1 = require("./adapters/database-raw.js");
+Object.defineProperty(exports, "DatabaseRawAdapter", { enumerable: true, get: function () { return database_raw_js_1.DatabaseRawAdapter; } });
+var database_prisma_js_1 = require("./adapters/database-prisma.js");
+Object.defineProperty(exports, "DatabasePrismaAdapter", { enumerable: true, get: function () { return database_prisma_js_1.DatabasePrismaAdapter; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,qDAAgD;AAAvC,8GAAA,WAAW,OAAA;AAEpB,4CAAiE;AAAxD,oGAAA,UAAU,OAAA;AAAE,0GAAA,gBAAgB,OAAA;AACrC,kDAAiE;AAAxD,0GAAA,aAAa,OAAA;AAAE,uGAAA,UAAU,OAAA;AAClC,0DAGkC;AAFhC,iHAAA,gBAAgB,OAAA;AAChB,uHAAA,sBAAsB,OAAA;AAExB,gEAGqC;AAFnC,uHAAA,mBAAmB,OAAA;AACnB,oHAAA,gBAAgB,OAAA;AAGlB,+CAM0B;AALxB,0GAAA,YAAY,OAAA;AACZ,wGAAA,UAAU,OAAA;AACV,uGAAA,SAAS,OAAA;AACT,wGAAA,UAAU,OAAA;AACV,0GAAA,YAAY,OAAA;AAGd,+CAI0B;AAHxB,8GAAA,gBAAgB,OAAA;AAChB,gHAAA,kBAAkB,OAAA;AAClB,gHAAA,kBAAkB,OAAA;AAGpB,kDAO6B;AAN3B,0GAAA,YAAY,OAAA;AACZ,wGAAA,UAAU,OAAA;AACV,0GAAA,YAAY,OAAA;AACZ,+GAAA,iBAAiB,OAAA;AACjB,oHAAA,sBAAsB,OAAA;AACtB,8GAAA,gBAAgB,OAAA;AAGlB,kDAI6B;AAH3B,iHAAA,mBAAmB,OAAA;AACnB,6GAAA,eAAe,OAAA;AACf,kHAAA,oBAAoB,OAAA;AAGtB,+DAKgC;AAJ9B,uHAAA,eAAe,OAAA;AACf,0HAAA,SAAS,OAAsB;AAC/B,6HAAA,qBAAqB,OAAA;AACrB,oHAAA,YAAY,OAAA;AAGd,0BAA0B;AAC1B,oDAK+B;AAJ7B,6GAAA,eAAe,OAAA;AACf,4GAAA,cAAc,OAAA;AACd,4GAAA,cAAc,OAAA;AACd,0GAAA,YAAY,OAAA;AAGd,8DAAiE;AAAxD,sHAAA,mBAAmB,OAAA;AAG5B,8DAAgE;AAAvD,qHAAA,kBAAkB,OAAA;AAC3B,oEAAsE;AAA7D,2HAAA,qBAAqB,OAAA"}

package/dist/migration-helpers.d.ts

@@ -0,0 +1,6 @@
+import pg from "pg";
+export declare function addTenantColumn(client: pg.PoolClient, tableName: string): Promise<void>;
+export declare function enableRLS(client: pg.PoolClient, tableName: string): Promise<void>;
+export declare function createIsolationPolicy(client: pg.PoolClient, tableName: string): Promise<void>;
+export declare function migrateTable(client: pg.PoolClient, tableName: string): Promise<void>;
+//# sourceMappingURL=migration-helpers.d.ts.map

package/dist/migration-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-helpers.d.ts","sourceRoot":"","sources":["../src/migration-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAUpB,wBAAsB,eAAe,CACnC,MAAM,EAAE,EAAE,CAAC,UAAU,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,SAAS,CAC7B,MAAM,EAAE,EAAE,CAAC,UAAU,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,EAAE,CAAC,UAAU,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,wBAAsB,YAAY,CAChC,MAAM,EAAE,EAAE,CAAC,UAAU,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAIf"}

package/dist/migration-helpers.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.migrateTable = exports.createIsolationPolicy = exports.enableRLS = exports.addTenantColumn = void 0;
+// Validate table name to prevent SQL injection (only allows alphanumeric + underscores)
+function validateTableName(name) {
+    if (!/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(name)) {
+        throw new Error(`Invalid table name: ${name}`);
+    }
+    return name;
+}
+async function addTenantColumn(client, tableName) {
+    const safe = validateTableName(tableName);
+    await client.query(`ALTER TABLE ${safe} ADD COLUMN tenant_id UUID NOT NULL`);
+}
+exports.addTenantColumn = addTenantColumn;
+async function enableRLS(client, tableName) {
+    const safe = validateTableName(tableName);
+    await client.query(`ALTER TABLE ${safe} ENABLE ROW LEVEL SECURITY`);
+    await client.query(`ALTER TABLE ${safe} FORCE ROW LEVEL SECURITY`);
+}
+exports.enableRLS = enableRLS;
+async function createIsolationPolicy(client, tableName) {
+    const safe = validateTableName(tableName);
+    await client.query(`CREATE POLICY tenant_isolation ON ${safe}
+     USING (tenant_id = current_setting('app.current_tenant_id')::uuid)`);
+}
+exports.createIsolationPolicy = createIsolationPolicy;
+async function migrateTable(client, tableName) {
+    await addTenantColumn(client, tableName);
+    await enableRLS(client, tableName);
+    await createIsolationPolicy(client, tableName);
+}
+exports.migrateTable = migrateTable;
+//# sourceMappingURL=migration-helpers.js.map

package/dist/migration-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-helpers.js","sourceRoot":"","sources":["../src/migration-helpers.ts"],"names":[],"mappings":";;;AAEA,wFAAwF;AACxF,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAEM,KAAK,UAAU,eAAe,CACnC,MAAqB,EACrB,SAAiB;IAEjB,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,MAAM,CAAC,KAAK,CAChB,eAAe,IAAI,qCAAqC,CACzD,CAAC;AACJ,CAAC;AARD,0CAQC;AAEM,KAAK,UAAU,SAAS,CAC7B,MAAqB,EACrB,SAAiB;IAEjB,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,4BAA4B,CAAC,CAAC;IACpE,MAAM,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,2BAA2B,CAAC,CAAC;AACrE,CAAC;AAPD,8BAOC;AAEM,KAAK,UAAU,qBAAqB,CACzC,MAAqB,EACrB,SAAiB;IAEjB,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,MAAM,CAAC,KAAK,CAChB,qCAAqC,IAAI;wEAC2B,CACrE,CAAC;AACJ,CAAC;AATD,sDASC;AAEM,KAAK,UAAU,YAAY,CAChC,MAAqB,EACrB,SAAiB;IAEjB,MAAM,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACzC,MAAM,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACnC,MAAM,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AACjD,CAAC;AAPD,oCAOC"}

package/dist/rls/manager.d.ts

@@ -0,0 +1,7 @@
+import pg from "pg";
+export declare function createPolicy(client: pg.PoolClient, tableName: string): Promise<void>;
+export declare function dropPolicy(client: pg.PoolClient, tableName: string): Promise<void>;
+export declare function enableRLS(client: pg.PoolClient, tableName: string): Promise<void>;
+export declare function disableRLS(client: pg.PoolClient, tableName: string): Promise<void>;
+export declare function isRLSEnabled(client: pg.PoolClient, tableName: string): Promise<boolean>;
+//# sourceMappingURL=manager.d.ts.map

package/dist/rls/manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/rls/manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAUpB,wBAAsB,YAAY,CAChC,MAAM,EAAE,EAAE,CAAC,UAAU,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAaf;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,EAAE,CAAC,UAAU,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAGf;AAED,wBAAsB,SAAS,CAC7B,MAAM,EAAE,EAAE,CAAC,UAAU,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,EAAE,CAAC,UAAU,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,wBAAsB,YAAY,CAChC,MAAM,EAAE,EAAE,CAAC,UAAU,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CASlB"}

package/dist/rls/manager.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isRLSEnabled = exports.disableRLS = exports.enableRLS = exports.dropPolicy = exports.createPolicy = void 0;
+// Validate table name to prevent SQL injection (only allows alphanumeric + underscores)
+function validateTableName(tableName) {
+    if (!/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(tableName)) {
+        throw new Error(`Invalid table name: ${tableName}`);
+    }
+    return tableName;
+}
+async function createPolicy(client, tableName) {
+    const safe = validateTableName(tableName);
+    // Cannot use parameterized queries inside DO blocks or for DDL identifiers.
+    // Table name is validated via allowlist regex above.
+    const exists = await client.query(`SELECT count(*) FROM pg_policies WHERE tablename = $1 AND policyname = 'tenant_isolation'`, [safe]);
+    if (parseInt(exists.rows[0].count, 10) === 0) {
+        await client.query(`CREATE POLICY tenant_isolation ON ${safe} USING (tenant_id = current_setting('app.current_tenant_id')::uuid)`);
+    }
+}
+exports.createPolicy = createPolicy;
+async function dropPolicy(client, tableName) {
+    const safe = validateTableName(tableName);
+    await client.query(`DROP POLICY IF EXISTS tenant_isolation ON ${safe}`);
+}
+exports.dropPolicy = dropPolicy;
+async function enableRLS(client, tableName) {
+    const safe = validateTableName(tableName);
+    await client.query(`ALTER TABLE ${safe} ENABLE ROW LEVEL SECURITY`);
+    await client.query(`ALTER TABLE ${safe} FORCE ROW LEVEL SECURITY`);
+}
+exports.enableRLS = enableRLS;
+async function disableRLS(client, tableName) {
+    const safe = validateTableName(tableName);
+    await client.query(`ALTER TABLE ${safe} NO FORCE ROW LEVEL SECURITY`);
+    await client.query(`ALTER TABLE ${safe} DISABLE ROW LEVEL SECURITY`);
+}
+exports.disableRLS = disableRLS;
+async function isRLSEnabled(client, tableName) {
+    const res = await client.query(`SELECT relrowsecurity FROM pg_class WHERE relname = $1`, [tableName]);
+    if (res.rows.length === 0) {
+        return false;
+    }
+    return res.rows[0].relrowsecurity;
+}
+exports.isRLSEnabled = isRLSEnabled;
+//# sourceMappingURL=manager.js.map

package/dist/rls/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../src/rls/manager.ts"],"names":[],"mappings":";;;AAEA,wFAAwF;AACxF,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAEM,KAAK,UAAU,YAAY,CAChC,MAAqB,EACrB,SAAiB;IAEjB,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC1C,4EAA4E;IAC5E,qDAAqD;IACrD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,2FAA2F,EAC3F,CAAC,IAAI,CAAC,CACP,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,MAAM,CAAC,KAAK,CAChB,qCAAqC,IAAI,qEAAqE,CAC/G,CAAC;IACJ,CAAC;AACH,CAAC;AAhBD,oCAgBC;AAEM,KAAK,UAAU,UAAU,CAC9B,MAAqB,EACrB,SAAiB;IAEjB,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,MAAM,CAAC,KAAK,CAAC,6CAA6C,IAAI,EAAE,CAAC,CAAC;AAC1E,CAAC;AAND,gCAMC;AAEM,KAAK,UAAU,SAAS,CAC7B,MAAqB,EACrB,SAAiB;IAEjB,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,4BAA4B,CAAC,CAAC;IACpE,MAAM,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,2BAA2B,CAAC,CAAC;AACrE,CAAC;AAPD,8BAOC;AAEM,KAAK,UAAU,UAAU,CAC9B,MAAqB,EACrB,SAAiB;IAEjB,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,8BAA8B,CAAC,CAAC;IACtE,MAAM,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,6BAA6B,CAAC,CAAC;AACvE,CAAC;AAPD,gCAOC;AAEM,KAAK,UAAU,YAAY,CAChC,MAAqB,EACrB,SAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B,wDAAwD,EACxD,CAAC,SAAS,CAAC,CACZ,CAAC;IACF,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;AACpC,CAAC;AAZD,oCAYC"}

package/dist/rls/session.d.ts

@@ -0,0 +1,5 @@
+import pg from "pg";
+export declare function setTenantContext(client: pg.PoolClient, tenantId: string): Promise<void>;
+export declare function resetTenantContext(client: pg.PoolClient): Promise<void>;
+export declare function getCurrentTenantId(client: pg.PoolClient): Promise<string | null>;
+//# sourceMappingURL=session.d.ts.map

package/dist/rls/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/rls/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,EAAE,CAAC,UAAU,EACrB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7E;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,EAAE,CAAC,UAAU,GACpB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAMxB"}

package/dist/rls/session.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCurrentTenantId = exports.resetTenantContext = exports.setTenantContext = void 0;
+async function setTenantContext(client, tenantId) {
+    await client.query("SELECT set_config('app.current_tenant_id', $1, true)", [tenantId]);
+}
+exports.setTenantContext = setTenantContext;
+async function resetTenantContext(client) {
+    await client.query("RESET app.current_tenant_id");
+}
+exports.resetTenantContext = resetTenantContext;
+async function getCurrentTenantId(client) {
+    const res = await client.query(`SELECT current_setting('app.current_tenant_id', true) AS current_setting`);
+    const value = res.rows[0]?.current_setting;
+    return value || null;
+}
+exports.getCurrentTenantId = getCurrentTenantId;
+//# sourceMappingURL=session.js.map

package/dist/rls/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/rls/session.ts"],"names":[],"mappings":";;;AAEO,KAAK,UAAU,gBAAgB,CACpC,MAAqB,EACrB,QAAgB;IAEhB,MAAM,MAAM,CAAC,KAAK,CAAC,sDAAsD,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzF,CAAC;AALD,4CAKC;AAEM,KAAK,UAAU,kBAAkB,CAAC,MAAqB;IAC5D,MAAM,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;AACpD,CAAC;AAFD,gDAEC;AAEM,KAAK,UAAU,kBAAkB,CACtC,MAAqB;IAErB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B,0EAA0E,CAC3E,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC;IAC3C,OAAO,KAAK,IAAI,IAAI,CAAC;AACvB,CAAC;AARD,gDAQC"}

package/dist/schema/manager.d.ts

@@ -0,0 +1,8 @@
+import pg from "pg";
+export declare function tenantSchemaName(tenantSlug: string): string;
+export declare function createSchema(client: pg.PoolClient, tenantSlug: string): Promise<void>;
+export declare function dropSchema(client: pg.PoolClient, tenantSlug: string): Promise<void>;
+export declare function schemaExists(client: pg.PoolClient, tenantSlug: string): Promise<boolean>;
+export declare function listTenantSchemas(client: pg.PoolClient): Promise<string[]>;
+export declare function replicateTableToSchema(client: pg.PoolClient, tableName: string, schemaName: string): Promise<void>;
+//# sourceMappingURL=manager.d.ts.map

package/dist/schema/manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/schema/manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAkBpB,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAsB,YAAY,CAChC,MAAM,EAAE,EAAE,CAAC,UAAU,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAGf;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,EAAE,CAAC,UAAU,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAGf;AAED,wBAAsB,YAAY,CAChC,MAAM,EAAE,EAAE,CAAC,UAAU,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,EAAE,CAAC,UAAU,GACpB,OAAO,CAAC,MAAM,EAAE,CAAC,CAKnB;AAED,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,EAAE,CAAC,UAAU,EACrB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAMf"}

package/dist/schema/manager.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.replicateTableToSchema = exports.listTenantSchemas = exports.schemaExists = exports.dropSchema = exports.createSchema = exports.tenantSchemaName = void 0;
+// Validate schema name to prevent SQL injection (only allows alphanumeric + underscores)
+function validateSchemaName(schemaName) {
+    if (!/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(schemaName)) {
+        throw new Error(`Invalid schema name: ${schemaName}`);
+    }
+    return schemaName;
+}
+// Validate table name to prevent SQL injection (only allows alphanumeric + underscores)
+function validateTableName(tableName) {
+    if (!/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(tableName)) {
+        throw new Error(`Invalid table name: ${tableName}`);
+    }
+    return tableName;
+}
+function tenantSchemaName(tenantSlug) {
+    return `tenant_${tenantSlug}`;
+}
+exports.tenantSchemaName = tenantSchemaName;
+async function createSchema(client, tenantSlug) {
+    const schemaName = validateSchemaName(tenantSchemaName(tenantSlug));
+    await client.query(`CREATE SCHEMA IF NOT EXISTS ${schemaName}`);
+}
+exports.createSchema = createSchema;
+async function dropSchema(client, tenantSlug) {
+    const schemaName = validateSchemaName(tenantSchemaName(tenantSlug));
+    await client.query(`DROP SCHEMA IF EXISTS ${schemaName} CASCADE`);
+}
+exports.dropSchema = dropSchema;
+async function schemaExists(client, tenantSlug) {
+    const schemaName = tenantSchemaName(tenantSlug);
+    const res = await client.query(`SELECT count(*) FROM pg_namespace WHERE nspname = $1`, [schemaName]);
+    return parseInt(res.rows[0].count, 10) > 0;
+}
+exports.schemaExists = schemaExists;
+async function listTenantSchemas(client) {
+    const res = await client.query(`SELECT nspname FROM pg_namespace WHERE nspname LIKE 'tenant_%' ORDER BY nspname`);
+    return res.rows.map((r) => r.nspname);
+}
+exports.listTenantSchemas = listTenantSchemas;
+async function replicateTableToSchema(client, tableName, schemaName) {
+    const safeTable = validateTableName(tableName);
+    const safeSchema = validateSchemaName(schemaName);
+    await client.query(`CREATE TABLE IF NOT EXISTS ${safeSchema}.${safeTable} (LIKE public.${safeTable} INCLUDING ALL)`);
+}
+exports.replicateTableToSchema = replicateTableToSchema;
+//# sourceMappingURL=manager.js.map

package/dist/schema/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../src/schema/manager.ts"],"names":[],"mappings":";;;AAEA,yFAAyF;AACzF,SAAS,kBAAkB,CAAC,UAAkB;IAC5C,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,wBAAwB,UAAU,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,wFAAwF;AACxF,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,gBAAgB,CAAC,UAAkB;IACjD,OAAO,UAAU,UAAU,EAAE,CAAC;AAChC,CAAC;AAFD,4CAEC;AAEM,KAAK,UAAU,YAAY,CAChC,MAAqB,EACrB,UAAkB;IAElB,MAAM,UAAU,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,CAAC,KAAK,CAAC,+BAA+B,UAAU,EAAE,CAAC,CAAC;AAClE,CAAC;AAND,oCAMC;AAEM,KAAK,UAAU,UAAU,CAC9B,MAAqB,EACrB,UAAkB;IAElB,MAAM,UAAU,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,CAAC,KAAK,CAAC,yBAAyB,UAAU,UAAU,CAAC,CAAC;AACpE,CAAC;AAND,gCAMC;AAEM,KAAK,UAAU,YAAY,CAChC,MAAqB,EACrB,UAAkB;IAElB,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B,sDAAsD,EACtD,CAAC,UAAU,CAAC,CACb,CAAC;IACF,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;AAC7C,CAAC;AAVD,oCAUC;AAEM,KAAK,UAAU,iBAAiB,CACrC,MAAqB;IAErB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B,iFAAiF,CAClF,CAAC;IACF,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAPD,8CAOC;AAEM,KAAK,UAAU,sBAAsB,CAC1C,MAAqB,EACrB,SAAiB,EACjB,UAAkB;IAElB,MAAM,SAAS,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,MAAM,CAAC,KAAK,CAChB,8BAA8B,UAAU,IAAI,SAAS,iBAAiB,SAAS,iBAAiB,CACjG,CAAC;AACJ,CAAC;AAVD,wDAUC"}

package/dist/schema/session.d.ts

@@ -0,0 +1,5 @@
+import pg from "pg";
+export declare function setSchemaSearchPath(client: pg.PoolClient, tenantSlug: string): Promise<void>;
+export declare function resetSearchPath(client: pg.PoolClient): Promise<void>;
+export declare function getCurrentSearchPath(client: pg.PoolClient): Promise<string>;
+//# sourceMappingURL=session.d.ts.map

package/dist/schema/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/schema/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAGpB,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,EAAE,CAAC,UAAU,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1E;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,EAAE,CAAC,UAAU,GACpB,OAAO,CAAC,MAAM,CAAC,CAGjB"}

package/dist/schema/session.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCurrentSearchPath = exports.resetSearchPath = exports.setSchemaSearchPath = void 0;
+const manager_js_1 = require("./manager.js");
+async function setSchemaSearchPath(client, tenantSlug) {
+    const schemaName = (0, manager_js_1.tenantSchemaName)(tenantSlug);
+    // Schema name is derived from a validated slug — safe for interpolation.
+    // SET LOCAL only takes effect for the current transaction.
+    await client.query(`SET LOCAL search_path TO ${schemaName}, public`);
+}
+exports.setSchemaSearchPath = setSchemaSearchPath;
+async function resetSearchPath(client) {
+    await client.query("RESET search_path");
+}
+exports.resetSearchPath = resetSearchPath;
+async function getCurrentSearchPath(client) {
+    const res = await client.query("SHOW search_path");
+    return res.rows[0].search_path;
+}
+exports.getCurrentSearchPath = getCurrentSearchPath;
+//# sourceMappingURL=session.js.map

package/dist/schema/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/schema/session.ts"],"names":[],"mappings":";;;AACA,6CAAgD;AAEzC,KAAK,UAAU,mBAAmB,CACvC,MAAqB,EACrB,UAAkB;IAElB,MAAM,UAAU,GAAG,IAAA,6BAAgB,EAAC,UAAU,CAAC,CAAC;IAChD,yEAAyE;IACzE,2DAA2D;IAC3D,MAAM,MAAM,CAAC,KAAK,CAAC,4BAA4B,UAAU,UAAU,CAAC,CAAC;AACvE,CAAC;AARD,kDAQC;AAEM,KAAK,UAAU,eAAe,CAAC,MAAqB;IACzD,MAAM,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAC1C,CAAC;AAFD,0CAEC;AAEM,KAAK,UAAU,oBAAoB,CACxC,MAAqB;IAErB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAA0B,kBAAkB,CAAC,CAAC;IAC5E,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;AACjC,CAAC;AALD,oDAKC"}

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@stratum-hq/db-adapters",
+  "version": "0.1.0",
+  "description": "Stratum PostgreSQL adapters for tenant-scoped query isolation",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "lint": "tsc --noEmit",
+    "clean": "rm -rf dist"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "dependencies": {
+    "@stratum-hq/core": "*",
+    "pg": "^8.11.0"
+  },
+  "devDependencies": {
+    "@prisma/client": "^5.10.0",
+    "@types/pg": "^8.11.0",
+    "typescript": "^5.4.0",
+    "vitest": "^1.6.0"
+  }
+}