@stratum-hq/mysql 0.1.0

package/README.md

@@ -0,0 +1,143 @@
+# @stratum-hq/mysql
+
+MySQL tenant isolation for [Stratum](https://github.com/stratum-hq/Stratum). Three isolation strategies, ORM integrations, and MySQL View utilities.
+
+## Isolation Strategies
+
+| Strategy | Mechanism | Security Level |
+|----------|-----------|----------------|
+| **Shared table** | Application-level `WHERE tenant_id = ?` on all queries | App-level |
+| **Table-per-tenant** | Separate tables named `{base}_{tenantSlug}` | Structural |
+| **Database-per-tenant** | Separate databases per tenant, LRU-managed pool | Full |
+
+## Quick Start
+
+```bash
+npm install @stratum-hq/mysql mysql2
+```
+
+### Shared Table (recommended for most apps)
+
+```typescript
+import mysql from "mysql2/promise";
+import { MysqlSharedAdapter } from "@stratum-hq/mysql";
+
+const pool = mysql.createPool(process.env.MYSQL_URL);
+const adapter = new MysqlSharedAdapter({ pool, databaseName: "myapp" });
+
+// Structured query methods auto-inject tenant_id
+const users = await adapter.scopedSelect("tenant-a", "users");
+await adapter.scopedInsert("tenant-a", "users", { name: "Alice" });
+await adapter.scopedUpdate("tenant-a", "users", { name: "Bob" }, { id: 1 });
+await adapter.scopedDelete("tenant-a", "users", { id: 1 });
+
+// Raw escape hatch (you own the WHERE clause)
+await adapter.scopedRawQuery("SELECT * FROM users WHERE tenant_id = ? AND active = ?", ["tenant-a", true]);
+
+// GDPR purge
+await adapter.purgeTenantData("tenant-a");
+```
+
+### Table-per-Tenant
+
+```typescript
+import { MysqlTableAdapter } from "@stratum-hq/mysql";
+
+const adapter = new MysqlTableAdapter({ pool, databaseName: "myapp" });
+
+// Returns escaped table name: `users_tenanta`
+const tableName = adapter.scopedTable("tenanta", "users");
+
+// Use the pool directly with the scoped table name
+const [rows] = await pool.query(`SELECT * FROM ${tableName}`);
+```
+
+### Database-per-Tenant
+
+```typescript
+import { MysqlDatabaseAdapter } from "@stratum-hq/mysql";
+
+const adapter = new MysqlDatabaseAdapter({
+  createPool: (uri) => mysql.createPool(uri),
+  baseUri: "mysql://root@localhost:3306/placeholder",
+  maxPools: 20,
+  idleTimeoutMs: 60000,
+});
+
+// Returns a pool connected to stratum_tenant_tenanta
+const tenantPool = await adapter.getPool("tenanta");
+const [rows] = await tenantPool.query("SELECT * FROM users");
+
+// Clean up on shutdown
+await adapter.closeAll();
+```
+
+## ORM Integrations
+
+### TypeORM Subscriber (writes only)
+
+```typescript
+import { StratumTypeOrmSubscriber } from "@stratum-hq/mysql";
+
+// Add to your TypeORM data source subscribers
+const dataSource = new DataSource({
+  subscribers: [StratumTypeOrmSubscriber],
+});
+```
+
+**Limitation:** TypeORM subscribers can intercept writes but not reads. Use the shared-table adapter's structured methods for tenant-scoped reads.
+
+### Knex Helper
+
+```typescript
+import { withTenantScope } from "@stratum-hq/mysql";
+
+const tenantKnex = withTenantScope(knex, "tenant-a");
+const users = await tenantKnex("users").select("*");
+// Automatically adds: WHERE tenant_id = 'tenant-a'
+```
+
+### Sequelize Adapter
+
+```typescript
+import { withMysqlTenantScope } from "@stratum-hq/mysql";
+
+await withMysqlTenantScope(sequelize, "tenant-a", async (scoped) => {
+  // Session variable @stratum_tenant_id is set for this scope
+  // Guaranteed cleanup via try/finally, even on errors
+  const users = await scoped.query("SELECT * FROM users_view");
+});
+```
+
+## MySQL Views (convenience layer)
+
+Views provide a convenient way to create tenant-scoped read access using MySQL session variables.
+
+```typescript
+import { createTenantView, setTenantSession } from "@stratum-hq/mysql";
+
+// Create a view that filters by @stratum_tenant_id
+await createTenantView(pool, "users");
+// Creates: CREATE OR REPLACE VIEW users_tenant_view AS
+//          SELECT * FROM users WHERE tenant_id = @stratum_tenant_id
+
+// Set the session variable, then query the view
+const conn = await pool.getConnection();
+await setTenantSession(conn, "tenant-a");
+const [rows] = await conn.query("SELECT * FROM users_tenant_view");
+conn.release();
+```
+
+**Important:** Views are NOT a security boundary (unlike Postgres RLS). Queries to underlying tables bypass isolation entirely. Views referencing session variables may not use indexes efficiently on large tables. Use the shared-table adapter's structured methods for high-performance workloads.
+
+## GDPR Compliance
+
+All three adapters implement `purgeTenantData(tenantSlug)`:
+
+- **Shared table**: discovers tenant tables via `INFORMATION_SCHEMA`, then `DELETE FROM table WHERE tenant_id = ?`
+- **Table-per-tenant**: discovers tables via `SHOW TABLES LIKE '%_slug'`, then `DROP TABLE`
+- **Database-per-tenant**: `DROP DATABASE stratum_tenant_slug`
+
+## License
+
+MIT

package/dist/adapters/database.d.ts

@@ -0,0 +1,19 @@
+import type { MysqlAdapter, MysqlDatabaseAdapterOptions, MysqlPoolLike, PurgeResult, AdapterStats } from "../types.js";
+/**
+ * Database-per-tenant adapter: each tenant gets a dedicated MySQL database.
+ * Connections are managed by MysqlPoolManager with LRU eviction.
+ */
+export declare class MysqlDatabaseAdapter implements MysqlAdapter {
+    private readonly poolManager;
+    constructor(options: MysqlDatabaseAdapterOptions);
+    /** Returns a MysqlPoolLike for the tenant's dedicated database. */
+    getPool(tenantSlug: string): Promise<MysqlPoolLike>;
+    /** Decrements the refCount for the pool associated with the given slug. */
+    releasePool(tenantSlug: string): void;
+    purgeTenantData(tenantSlug: string): Promise<PurgeResult>;
+    /** Closes all pooled connections. Call during application shutdown. */
+    closeAll(): Promise<void>;
+    /** Returns adapter statistics. */
+    getStats(): AdapterStats;
+}
+//# sourceMappingURL=database.d.ts.map

package/dist/adapters/database.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../src/adapters/database.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,YAAY,EACZ,2BAA2B,EAC3B,aAAa,EACb,WAAW,EACX,YAAY,EACb,MAAM,aAAa,CAAC;AAIrB;;;GAGG;AACH,qBAAa,oBAAqB,YAAW,YAAY;IACvD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmB;gBAEnC,OAAO,EAAE,2BAA2B;IAShD,mEAAmE;IAC7D,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAKzD,2EAA2E;IAC3E,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAI/B,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IA2B/D,uEAAuE;IACjE,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAI/B,kCAAkC;IAClC,QAAQ,IAAI,YAAY;CAMzB"}

package/dist/adapters/database.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MysqlDatabaseAdapter = void 0;
+const core_1 = require("@stratum-hq/core");
+const pool_manager_js_1 = require("../pool-manager.js");
+const utils_js_1 = require("../utils.js");
+/**
+ * Database-per-tenant adapter: each tenant gets a dedicated MySQL database.
+ * Connections are managed by MysqlPoolManager with LRU eviction.
+ */
+class MysqlDatabaseAdapter {
+    poolManager;
+    constructor(options) {
+        this.poolManager = new pool_manager_js_1.MysqlPoolManager({
+            createPool: options.createPool,
+            baseUri: options.baseUri,
+            maxPools: options.maxPools,
+            idleTimeoutMs: options.idleTimeoutMs,
+        });
+    }
+    /** Returns a MysqlPoolLike for the tenant's dedicated database. */
+    async getPool(tenantSlug) {
+        (0, core_1.validateSlug)(tenantSlug);
+        return this.poolManager.getPool(tenantSlug);
+    }
+    /** Decrements the refCount for the pool associated with the given slug. */
+    releasePool(tenantSlug) {
+        this.poolManager.releasePool(tenantSlug);
+    }
+    async purgeTenantData(tenantSlug) {
+        (0, core_1.validateSlug)(tenantSlug);
+        try {
+            const pool = await this.poolManager.getPool(tenantSlug);
+            const dbName = `stratum_tenant_${tenantSlug}`;
+            try {
+                await pool.query(`DROP DATABASE IF EXISTS ${(0, utils_js_1.escapeIdentifier)(dbName)}`);
+            }
+            finally {
+                this.poolManager.releasePool(tenantSlug);
+            }
+            await this.poolManager.closePool(tenantSlug);
+            return {
+                success: true,
+                tablesProcessed: 0,
+                rowsDeleted: 0,
+                errors: [],
+            };
+        }
+        catch (err) {
+            return {
+                success: false,
+                tablesProcessed: 0,
+                rowsDeleted: 0,
+                errors: [{ table: "*", error: err }],
+            };
+        }
+    }
+    /** Closes all pooled connections. Call during application shutdown. */
+    async closeAll() {
+        await this.poolManager.closeAll();
+    }
+    /** Returns adapter statistics. */
+    getStats() {
+        return {
+            strategy: "database-per-tenant",
+            ...this.poolManager.getStats(),
+        };
+    }
+}
+exports.MysqlDatabaseAdapter = MysqlDatabaseAdapter;
+//# sourceMappingURL=database.js.map

package/dist/adapters/database.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.js","sourceRoot":"","sources":["../../src/adapters/database.ts"],"names":[],"mappings":";;;AAAA,2CAAgD;AAQhD,wDAAsD;AACtD,0CAA+C;AAE/C;;;GAGG;AACH,MAAa,oBAAoB;IACd,WAAW,CAAmB;IAE/C,YAAY,OAAoC;QAC9C,IAAI,CAAC,WAAW,GAAG,IAAI,kCAAgB,CAAC;YACtC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;SACrC,CAAC,CAAC;IACL,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,OAAO,CAAC,UAAkB;QAC9B,IAAA,mBAAY,EAAC,UAAU,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC;IAED,2EAA2E;IAC3E,WAAW,CAAC,UAAkB;QAC5B,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,UAAkB;QACtC,IAAA,mBAAY,EAAC,UAAU,CAAC,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,kBAAkB,UAAU,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,CAAC,2BAA2B,IAAA,2BAAgB,EAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1E,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAC7C,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,eAAe,EAAE,CAAC;gBAClB,WAAW,EAAE,CAAC;gBACd,MAAM,EAAE,EAAE;aACX,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,eAAe,EAAE,CAAC;gBAClB,WAAW,EAAE,CAAC;gBACd,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAY,EAAE,CAAC;aAC9C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;IACpC,CAAC;IAED,kCAAkC;IAClC,QAAQ;QACN,OAAO;YACL,QAAQ,EAAE,qBAAqB;YAC/B,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;SAC/B,CAAC;IACJ,CAAC;CACF;AA9DD,oDA8DC"}

package/dist/adapters/shared.d.ts

@@ -0,0 +1,30 @@
+import type { MysqlAdapter, MysqlSharedAdapterOptions, PurgeResult, AdapterStats } from "../types.js";
+/**
+ * Shared-table adapter: all tenants share the same tables, isolated by a
+ * `tenant_id` column injected into every query via structured methods.
+ */
+export declare class MysqlSharedAdapter implements MysqlAdapter {
+    private readonly pool;
+    private readonly databaseName;
+    constructor(options: MysqlSharedAdapterOptions);
+    /**
+     * SELECT with WHERE tenant_id = ?. conditions is a Record turned into AND clauses.
+     * columns defaults to *.
+     */
+    scopedSelect(tenantId: string, table: string, conditions?: Record<string, unknown>, columns?: string[]): Promise<unknown[]>;
+    /** INSERT with tenant_id added to data. */
+    scopedInsert(tenantId: string, table: string, data: Record<string, unknown>): Promise<unknown>;
+    /** UPDATE SET ... WHERE tenant_id = ? AND conditions. */
+    scopedUpdate(tenantId: string, table: string, data: Record<string, unknown>, conditions: Record<string, unknown>): Promise<unknown>;
+    /** DELETE WHERE tenant_id = ? AND optional conditions. */
+    scopedDelete(tenantId: string, table: string, conditions?: Record<string, unknown>): Promise<unknown>;
+    /**
+     * Executes SQL as-is. Caller owns the WHERE clause and all tenant scoping.
+     * No tenant_id injection is performed.
+     */
+    scopedRawQuery(sql: string, params?: unknown[]): Promise<unknown>;
+    purgeTenantData(tenantId: string): Promise<PurgeResult>;
+    /** Returns adapter statistics. */
+    getStats(): AdapterStats;
+}
+//# sourceMappingURL=shared.d.ts.map

package/dist/adapters/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/adapters/shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,yBAAyB,EAEzB,WAAW,EACX,YAAY,EACb,MAAM,aAAa,CAAC;AAGrB;;;GAGG;AACH,qBAAa,kBAAmB,YAAW,YAAY;IACrD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgB;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;gBAE1B,OAAO,EAAE,yBAAyB;IAK9C;;;OAGG;IACG,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,OAAO,GAAE,MAAM,EAAU,GACxB,OAAO,CAAC,OAAO,EAAE,CAAC;IAqBrB,2CAA2C;IACrC,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,OAAO,CAAC;IAanB,yDAAyD;IACnD,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAClC,OAAO,CAAC,OAAO,CAAC;IAqBnB,0DAA0D;IACpD,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,OAAO,CAAC,OAAO,CAAC;IAkBnB;;;OAGG;IACG,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAIjE,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAuB7D,kCAAkC;IAClC,QAAQ,IAAI,YAAY;CAGzB"}

package/dist/adapters/shared.js

@@ -0,0 +1,103 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MysqlSharedAdapter = void 0;
+const utils_js_1 = require("../utils.js");
+/**
+ * Shared-table adapter: all tenants share the same tables, isolated by a
+ * `tenant_id` column injected into every query via structured methods.
+ */
+class MysqlSharedAdapter {
+    pool;
+    databaseName;
+    constructor(options) {
+        this.pool = options.pool;
+        this.databaseName = options.databaseName;
+    }
+    /**
+     * SELECT with WHERE tenant_id = ?. conditions is a Record turned into AND clauses.
+     * columns defaults to *.
+     */
+    async scopedSelect(tenantId, table, conditions, columns = ["*"]) {
+        (0, utils_js_1.assertTenantId)(tenantId);
+        const cols = columns.map((c) => (c === "*" ? "*" : (0, utils_js_1.escapeIdentifier)(c))).join(", ");
+        const qualifiedTable = `${(0, utils_js_1.escapeIdentifier)(this.databaseName)}.${(0, utils_js_1.escapeIdentifier)(table)}`;
+        const whereClauses = [`tenant_id = ?`];
+        const values = [tenantId];
+        if (conditions) {
+            for (const [col, val] of Object.entries(conditions)) {
+                whereClauses.push(`${(0, utils_js_1.escapeIdentifier)(col)} = ?`);
+                values.push(val);
+            }
+        }
+        const sql = `SELECT ${cols} FROM ${qualifiedTable} WHERE ${whereClauses.join(" AND ")}`;
+        const [rows] = await this.pool.query(sql, values);
+        return rows;
+    }
+    /** INSERT with tenant_id added to data. */
+    async scopedInsert(tenantId, table, data) {
+        (0, utils_js_1.assertTenantId)(tenantId);
+        const row = { ...data, tenant_id: tenantId };
+        const qualifiedTable = `${(0, utils_js_1.escapeIdentifier)(this.databaseName)}.${(0, utils_js_1.escapeIdentifier)(table)}`;
+        const cols = Object.keys(row).map(utils_js_1.escapeIdentifier).join(", ");
+        const placeholders = Object.keys(row).map(() => "?").join(", ");
+        const values = Object.values(row);
+        const sql = `INSERT INTO ${qualifiedTable} (${cols}) VALUES (${placeholders})`;
+        return this.pool.query(sql, values);
+    }
+    /** UPDATE SET ... WHERE tenant_id = ? AND conditions. */
+    async scopedUpdate(tenantId, table, data, conditions) {
+        (0, utils_js_1.assertTenantId)(tenantId);
+        const qualifiedTable = `${(0, utils_js_1.escapeIdentifier)(this.databaseName)}.${(0, utils_js_1.escapeIdentifier)(table)}`;
+        const setClauses = Object.keys(data)
+            .map((col) => `${(0, utils_js_1.escapeIdentifier)(col)} = ?`)
+            .join(", ");
+        const setValues = Object.values(data);
+        const whereClauses = [`tenant_id = ?`];
+        const whereValues = [tenantId];
+        for (const [col, val] of Object.entries(conditions)) {
+            whereClauses.push(`${(0, utils_js_1.escapeIdentifier)(col)} = ?`);
+            whereValues.push(val);
+        }
+        const sql = `UPDATE ${qualifiedTable} SET ${setClauses} WHERE ${whereClauses.join(" AND ")}`;
+        return this.pool.query(sql, [...setValues, ...whereValues]);
+    }
+    /** DELETE WHERE tenant_id = ? AND optional conditions. */
+    async scopedDelete(tenantId, table, conditions) {
+        (0, utils_js_1.assertTenantId)(tenantId);
+        const qualifiedTable = `${(0, utils_js_1.escapeIdentifier)(this.databaseName)}.${(0, utils_js_1.escapeIdentifier)(table)}`;
+        const whereClauses = [`tenant_id = ?`];
+        const values = [tenantId];
+        if (conditions) {
+            for (const [col, val] of Object.entries(conditions)) {
+                whereClauses.push(`${(0, utils_js_1.escapeIdentifier)(col)} = ?`);
+                values.push(val);
+            }
+        }
+        const sql = `DELETE FROM ${qualifiedTable} WHERE ${whereClauses.join(" AND ")}`;
+        return this.pool.query(sql, values);
+    }
+    /**
+     * Executes SQL as-is. Caller owns the WHERE clause and all tenant scoping.
+     * No tenant_id injection is performed.
+     */
+    async scopedRawQuery(sql, params) {
+        return this.pool.query(sql, params);
+    }
+    async purgeTenantData(tenantId) {
+        (0, utils_js_1.assertTenantId)(tenantId);
+        // Discover all tables that have a tenant_id column in this database.
+        const [tableRows] = await this.pool.query(`SELECT TABLE_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE COLUMN_NAME = 'tenant_id' AND TABLE_SCHEMA = ?`, [this.databaseName]);
+        const results = await Promise.allSettled(tableRows.map(async (row) => {
+            const qualifiedTable = `${(0, utils_js_1.escapeIdentifier)(this.databaseName)}.${(0, utils_js_1.escapeIdentifier)(row.TABLE_NAME)}`;
+            const [result] = await this.pool.query(`DELETE FROM ${qualifiedTable} WHERE tenant_id = ?`, [tenantId]);
+            return { table: row.TABLE_NAME, rowsDeleted: result.affectedRows ?? 0 };
+        }));
+        return (0, utils_js_1.aggregatePurgeResults)(results);
+    }
+    /** Returns adapter statistics. */
+    getStats() {
+        return { strategy: "shared" };
+    }
+}
+exports.MysqlSharedAdapter = MysqlSharedAdapter;
+//# sourceMappingURL=shared.js.map

package/dist/adapters/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/adapters/shared.ts"],"names":[],"mappings":";;;AAOA,0CAAsF;AAEtF;;;GAGG;AACH,MAAa,kBAAkB;IACZ,IAAI,CAAgB;IACpB,YAAY,CAAS;IAEtC,YAAY,OAAkC;QAC5C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,KAAa,EACb,UAAoC,EACpC,UAAoB,CAAC,GAAG,CAAC;QAEzB,IAAA,yBAAc,EAAC,QAAQ,CAAC,CAAC;QAEzB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAA,2BAAgB,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpF,MAAM,cAAc,GAAG,GAAG,IAAA,2BAAgB,EAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAA,2BAAgB,EAAC,KAAK,CAAC,EAAE,CAAC;QAE3F,MAAM,YAAY,GAAa,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,MAAM,GAAc,CAAC,QAAQ,CAAC,CAAC;QAErC,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpD,YAAY,CAAC,IAAI,CAAC,GAAG,IAAA,2BAAgB,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,UAAU,IAAI,SAAS,cAAc,UAAU,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxF,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAyB,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2CAA2C;IAC3C,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,KAAa,EACb,IAA6B;QAE7B,IAAA,yBAAc,EAAC,QAAQ,CAAC,CAAC;QAEzB,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QAC7C,MAAM,cAAc,GAAG,GAAG,IAAA,2BAAgB,EAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAA,2BAAgB,EAAC,KAAK,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,2BAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAElC,MAAM,GAAG,GAAG,eAAe,cAAc,KAAK,IAAI,aAAa,YAAY,GAAG,CAAC;QAC/E,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,KAAa,EACb,IAA6B,EAC7B,UAAmC;QAEnC,IAAA,yBAAc,EAAC,QAAQ,CAAC,CAAC;QAEzB,MAAM,cAAc,GAAG,GAAG,IAAA,2BAAgB,EAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAA,2BAAgB,EAAC,KAAK,CAAC,EAAE,CAAC;QAC3F,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;aACjC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAA,2BAAgB,EAAC,GAAG,CAAC,MAAM,CAAC;aAC5C,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEtC,MAAM,YAAY,GAAa,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,WAAW,GAAc,CAAC,QAAQ,CAAC,CAAC;QAE1C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACpD,YAAY,CAAC,IAAI,CAAC,GAAG,IAAA,2BAAgB,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClD,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAED,MAAM,GAAG,GAAG,UAAU,cAAc,QAAQ,UAAU,UAAU,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7F,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,SAAS,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,KAAa,EACb,UAAoC;QAEpC,IAAA,yBAAc,EAAC,QAAQ,CAAC,CAAC;QAEzB,MAAM,cAAc,GAAG,GAAG,IAAA,2BAAgB,EAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAA,2BAAgB,EAAC,KAAK,CAAC,EAAE,CAAC;QAC3F,MAAM,YAAY,GAAa,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,MAAM,GAAc,CAAC,QAAQ,CAAC,CAAC;QAErC,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpD,YAAY,CAAC,IAAI,CAAC,GAAG,IAAA,2BAAgB,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,eAAe,cAAc,UAAU,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChF,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,GAAW,EAAE,MAAkB;QAClD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,QAAgB;QACpC,IAAA,yBAAc,EAAC,QAAQ,CAAC,CAAC;QAEzB,qEAAqE;QACrE,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACvC,wGAAwG,EACxG,CAAC,IAAI,CAAC,YAAY,CAAC,CACwB,CAAC;QAE9C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC1B,MAAM,cAAc,GAAG,GAAG,IAAA,2BAAgB,EAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAA,2BAAgB,EAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACpG,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC,eAAe,cAAc,sBAAsB,EACnD,CAAC,QAAQ,CAAC,CAC6B,CAAC;YAC1C,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,YAAY,IAAI,CAAC,EAAE,CAAC;QAC1E,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,IAAA,gCAAqB,EAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,kCAAkC;IAClC,QAAQ;QACN,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC;CACF;AA9ID,gDA8IC"}

package/dist/adapters/table.d.ts

@@ -0,0 +1,23 @@
+import type { MysqlAdapter, MysqlTableAdapterOptions, MysqlPoolLike, PurgeResult, AdapterStats } from "../types.js";
+/**
+ * Table-per-tenant adapter: each tenant gets its own set of tables
+ * named `{baseTableName}_{tenantSlug}`.
+ *
+ * No filter injection needed -- isolation is structural.
+ */
+export declare class MysqlTableAdapter implements MysqlAdapter {
+    private readonly pool;
+    private readonly databaseName;
+    constructor(options: MysqlTableAdapterOptions);
+    /**
+     * Validates slug and returns the escaped tenant-scoped table name
+     * in the form `{baseTableName}_{tenantSlug}`.
+     */
+    scopedTable(tenantSlug: string, baseTableName: string): string;
+    /** Returns the underlying pool for raw queries against tenant tables. */
+    getPool(): MysqlPoolLike;
+    purgeTenantData(tenantSlug: string): Promise<PurgeResult>;
+    /** Returns adapter statistics. */
+    getStats(): AdapterStats;
+}
+//# sourceMappingURL=table.d.ts.map

package/dist/adapters/table.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"table.d.ts","sourceRoot":"","sources":["../../src/adapters/table.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,YAAY,EACZ,wBAAwB,EACxB,aAAa,EACb,WAAW,EACX,YAAY,EACb,MAAM,aAAa,CAAC;AAGrB;;;;;GAKG;AACH,qBAAa,iBAAkB,YAAW,YAAY;IACpD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgB;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;gBAE1B,OAAO,EAAE,wBAAwB;IAK7C;;;OAGG;IACH,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM;IAM9D,yEAAyE;IACzE,OAAO,IAAI,aAAa;IAIlB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAqC/D,kCAAkC;IAClC,QAAQ,IAAI,YAAY;CAGzB"}

package/dist/adapters/table.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MysqlTableAdapter = void 0;
+const core_1 = require("@stratum-hq/core");
+const utils_js_1 = require("../utils.js");
+/**
+ * Table-per-tenant adapter: each tenant gets its own set of tables
+ * named `{baseTableName}_{tenantSlug}`.
+ *
+ * No filter injection needed -- isolation is structural.
+ */
+class MysqlTableAdapter {
+    pool;
+    databaseName;
+    constructor(options) {
+        this.pool = options.pool;
+        this.databaseName = options.databaseName;
+    }
+    /**
+     * Validates slug and returns the escaped tenant-scoped table name
+     * in the form `{baseTableName}_{tenantSlug}`.
+     */
+    scopedTable(tenantSlug, baseTableName) {
+        (0, core_1.validateSlug)(tenantSlug);
+        const tableName = `${baseTableName}_${tenantSlug}`;
+        return (0, utils_js_1.escapeIdentifier)(tableName);
+    }
+    /** Returns the underlying pool for raw queries against tenant tables. */
+    getPool() {
+        return this.pool;
+    }
+    async purgeTenantData(tenantSlug) {
+        (0, utils_js_1.assertTenantId)(tenantSlug);
+        (0, core_1.validateSlug)(tenantSlug);
+        const escapedDb = (0, utils_js_1.escapeIdentifier)(this.databaseName);
+        // SHOW TABLES LIKE '%_tenantSlug' to find all tenant tables.
+        const pattern = `%_${tenantSlug}`;
+        const [tableRows] = await this.pool.query(`SHOW TABLES FROM ${escapedDb} LIKE ?`, [pattern]);
+        const errors = [];
+        let tablesProcessed = 0;
+        const exactSuffix = `_${tenantSlug}`;
+        for (const row of tableRows) {
+            const tableName = Object.values(row)[0];
+            if (!tableName)
+                continue;
+            // Post-filter: verify exact suffix match to prevent 'e' matching 'orders_acme'
+            if (!tableName.endsWith(exactSuffix))
+                continue;
+            try {
+                await this.pool.query(`DROP TABLE IF EXISTS ${escapedDb}.${(0, utils_js_1.escapeIdentifier)(tableName)}`);
+                tablesProcessed++;
+            }
+            catch (err) {
+                errors.push({ table: tableName, error: err });
+            }
+        }
+        return {
+            success: errors.length === 0,
+            tablesProcessed,
+            rowsDeleted: 0,
+            errors,
+        };
+    }
+    /** Returns adapter statistics. */
+    getStats() {
+        return { strategy: "table-per-tenant" };
+    }
+}
+exports.MysqlTableAdapter = MysqlTableAdapter;
+//# sourceMappingURL=table.js.map

package/dist/adapters/table.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"table.js","sourceRoot":"","sources":["../../src/adapters/table.ts"],"names":[],"mappings":";;;AAAA,2CAAgD;AAQhD,0CAA+D;AAE/D;;;;;GAKG;AACH,MAAa,iBAAiB;IACX,IAAI,CAAgB;IACpB,YAAY,CAAS;IAEtC,YAAY,OAAiC;QAC3C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,UAAkB,EAAE,aAAqB;QACnD,IAAA,mBAAY,EAAC,UAAU,CAAC,CAAC;QACzB,MAAM,SAAS,GAAG,GAAG,aAAa,IAAI,UAAU,EAAE,CAAC;QACnD,OAAO,IAAA,2BAAgB,EAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAED,yEAAyE;IACzE,OAAO;QACL,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,UAAkB;QACtC,IAAA,yBAAc,EAAC,UAAU,CAAC,CAAC;QAC3B,IAAA,mBAAY,EAAC,UAAU,CAAC,CAAC;QAEzB,MAAM,SAAS,GAAG,IAAA,2BAAgB,EAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtD,6DAA6D;QAC7D,MAAM,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACvC,oBAAoB,SAAS,SAAS,EACtC,CAAC,OAAO,CAAC,CACkC,CAAC;QAE9C,MAAM,MAAM,GAA0B,EAAE,CAAC;QACzC,IAAI,eAAe,GAAG,CAAC,CAAC;QAExB,MAAM,WAAW,GAAG,IAAI,UAAU,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,IAAI,CAAC,SAAS;gBAAE,SAAS;YACzB,+EAA+E;YAC/E,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAAE,SAAS;YAC/C,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,wBAAwB,SAAS,IAAI,IAAA,2BAAgB,EAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAC1F,eAAe,EAAE,CAAC;YACpB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAY,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC5B,eAAe;YACf,WAAW,EAAE,CAAC;YACd,MAAM;SACP,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,QAAQ;QACN,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC1C,CAAC;CACF;AAjED,8CAiEC"}

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+export type { MysqlConnectionLike, MysqlPoolLike, MysqlAdapter, PurgeResult, AdapterStats, MysqlSharedAdapterOptions, MysqlTableAdapterOptions, MysqlDatabaseAdapterOptions, MysqlPoolManagerOptions, } from "./types.js";
+export { MysqlSharedAdapter } from "./adapters/shared.js";
+export { MysqlTableAdapter } from "./adapters/table.js";
+export { MysqlDatabaseAdapter } from "./adapters/database.js";
+export { MysqlPoolManager } from "./pool-manager.js";
+export { createTenantView, dropTenantView, setTenantSession } from "./views/manager.js";
+export { StratumTypeOrmSubscriber } from "./integrations/typeorm-subscriber.js";
+export type { InsertEvent, EntitySubscriberInterface } from "./integrations/typeorm-subscriber.js";
+export { withTenantScope } from "./integrations/knex.js";
+export type { KnexLike, KnexQueryBuilderLike } from "./integrations/knex.js";
+export { withMysqlTenantScope } from "./integrations/sequelize.js";
+export type { SequelizeLike } from "./integrations/sequelize.js";
+export { assertTenantId, escapeIdentifier, aggregatePurgeResults } from "./utils.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,YAAY,EACV,mBAAmB,EACnB,aAAa,EACb,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAG9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGrD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAChF,YAAY,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACnG,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,YAAY,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAGjE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.aggregatePurgeResults = exports.escapeIdentifier = exports.assertTenantId = exports.withMysqlTenantScope = exports.withTenantScope = exports.StratumTypeOrmSubscriber = exports.setTenantSession = exports.dropTenantView = exports.createTenantView = exports.MysqlPoolManager = exports.MysqlDatabaseAdapter = exports.MysqlTableAdapter = exports.MysqlSharedAdapter = void 0;
+// Adapters
+var shared_js_1 = require("./adapters/shared.js");
+Object.defineProperty(exports, "MysqlSharedAdapter", { enumerable: true, get: function () { return shared_js_1.MysqlSharedAdapter; } });
+var table_js_1 = require("./adapters/table.js");
+Object.defineProperty(exports, "MysqlTableAdapter", { enumerable: true, get: function () { return table_js_1.MysqlTableAdapter; } });
+var database_js_1 = require("./adapters/database.js");
+Object.defineProperty(exports, "MysqlDatabaseAdapter", { enumerable: true, get: function () { return database_js_1.MysqlDatabaseAdapter; } });
+// Pool manager
+var pool_manager_js_1 = require("./pool-manager.js");
+Object.defineProperty(exports, "MysqlPoolManager", { enumerable: true, get: function () { return pool_manager_js_1.MysqlPoolManager; } });
+// Views
+var manager_js_1 = require("./views/manager.js");
+Object.defineProperty(exports, "createTenantView", { enumerable: true, get: function () { return manager_js_1.createTenantView; } });
+Object.defineProperty(exports, "dropTenantView", { enumerable: true, get: function () { return manager_js_1.dropTenantView; } });
+Object.defineProperty(exports, "setTenantSession", { enumerable: true, get: function () { return manager_js_1.setTenantSession; } });
+// Integrations
+var typeorm_subscriber_js_1 = require("./integrations/typeorm-subscriber.js");
+Object.defineProperty(exports, "StratumTypeOrmSubscriber", { enumerable: true, get: function () { return typeorm_subscriber_js_1.StratumTypeOrmSubscriber; } });
+var knex_js_1 = require("./integrations/knex.js");
+Object.defineProperty(exports, "withTenantScope", { enumerable: true, get: function () { return knex_js_1.withTenantScope; } });
+var sequelize_js_1 = require("./integrations/sequelize.js");
+Object.defineProperty(exports, "withMysqlTenantScope", { enumerable: true, get: function () { return sequelize_js_1.withMysqlTenantScope; } });
+// Utilities
+var utils_js_1 = require("./utils.js");
+Object.defineProperty(exports, "assertTenantId", { enumerable: true, get: function () { return utils_js_1.assertTenantId; } });
+Object.defineProperty(exports, "escapeIdentifier", { enumerable: true, get: function () { return utils_js_1.escapeIdentifier; } });
+Object.defineProperty(exports, "aggregatePurgeResults", { enumerable: true, get: function () { return utils_js_1.aggregatePurgeResults; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAaA,WAAW;AACX,kDAA0D;AAAjD,+GAAA,kBAAkB,OAAA;AAC3B,gDAAwD;AAA/C,6GAAA,iBAAiB,OAAA;AAC1B,sDAA8D;AAArD,mHAAA,oBAAoB,OAAA;AAE7B,eAAe;AACf,qDAAqD;AAA5C,mHAAA,gBAAgB,OAAA;AAEzB,QAAQ;AACR,iDAAwF;AAA/E,8GAAA,gBAAgB,OAAA;AAAE,4GAAA,cAAc,OAAA;AAAE,8GAAA,gBAAgB,OAAA;AAE3D,eAAe;AACf,8EAAgF;AAAvE,iIAAA,wBAAwB,OAAA;AAEjC,kDAAyD;AAAhD,0GAAA,eAAe,OAAA;AAExB,4DAAmE;AAA1D,oHAAA,oBAAoB,OAAA;AAG7B,YAAY;AACZ,uCAAqF;AAA5E,0GAAA,cAAc,OAAA;AAAE,4GAAA,gBAAgB,OAAA;AAAE,iHAAA,qBAAqB,OAAA"}

package/dist/integrations/knex.d.ts

@@ -0,0 +1,21 @@
+export interface KnexQueryBuilderLike {
+    where(col: string, val: unknown): this;
+    select(...cols: string[]): this;
+    insert(data: Record<string, unknown>): Promise<unknown>;
+    update(data: Record<string, unknown>): this;
+    delete(): this;
+    first(): Promise<unknown>;
+}
+export interface KnexLike {
+    (tableName: string): KnexQueryBuilderLike;
+}
+/**
+ * Returns a wrapper function that pre-scopes queries to the given tenant.
+ * Call the returned function with a table name to get a WHERE tenant_id = ? builder.
+ *
+ * Known limitation: the .where() clause is ignored by Knex on INSERT operations.
+ * You must include tenant_id in the data object yourself when inserting:
+ *   await scoped("users").insert({ tenant_id: tenantId, name: "Alice" });
+ */
+export declare function withTenantScope(knex: KnexLike, tenantId: string): (tableName: string) => KnexQueryBuilderLike;
+//# sourceMappingURL=knex.d.ts.map

package/dist/integrations/knex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"knex.d.ts","sourceRoot":"","sources":["../../src/integrations/knex.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;IACvC,MAAM,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAChC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5C,MAAM,IAAI,IAAI,CAAC;IACf,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,QAAQ;IACvB,CAAC,SAAS,EAAE,MAAM,GAAG,oBAAoB,CAAC;CAC3C;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,MAAM,GACf,CAAC,SAAS,EAAE,MAAM,KAAK,oBAAoB,CAE7C"}

package/dist/integrations/knex.js

@@ -0,0 +1,16 @@
+"use strict";
+// ─── Structural type for Knex (no hard dependency on knex) ───
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.withTenantScope = withTenantScope;
+/**
+ * Returns a wrapper function that pre-scopes queries to the given tenant.
+ * Call the returned function with a table name to get a WHERE tenant_id = ? builder.
+ *
+ * Known limitation: the .where() clause is ignored by Knex on INSERT operations.
+ * You must include tenant_id in the data object yourself when inserting:
+ *   await scoped("users").insert({ tenant_id: tenantId, name: "Alice" });
+ */
+function withTenantScope(knex, tenantId) {
+    return (tableName) => knex(tableName).where("tenant_id", tenantId);
+}
+//# sourceMappingURL=knex.js.map

package/dist/integrations/knex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"knex.js","sourceRoot":"","sources":["../../src/integrations/knex.ts"],"names":[],"mappings":";AAAA,gEAAgE;;AAuBhE,0CAKC;AAbD;;;;;;;GAOG;AACH,SAAgB,eAAe,CAC7B,IAAc,EACd,QAAgB;IAEhB,OAAO,CAAC,SAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;AAC7E,CAAC"}

package/dist/integrations/sequelize.d.ts

@@ -0,0 +1,12 @@
+export interface SequelizeLike {
+    query(sql: string, options?: unknown): Promise<unknown>;
+    transaction<T>(fn: (t: unknown) => Promise<T>): Promise<T>;
+}
+/**
+ * Runs fn inside a session-variable scope for MySQL tenant isolation.
+ * Uses a Sequelize transaction to guarantee all queries (SET, user queries,
+ * SET NULL) run on the same pooled connection. The finally block clears the
+ * session variable even if fn throws.
+ */
+export declare function withMysqlTenantScope<T>(sequelize: SequelizeLike, tenantId: string, fn: (sequelize: SequelizeLike) => Promise<T>): Promise<T>;
+//# sourceMappingURL=sequelize.d.ts.map

package/dist/integrations/sequelize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sequelize.d.ts","sourceRoot":"","sources":["../../src/integrations/sequelize.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAC5D;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,CAAC,EAC1C,SAAS,EAAE,aAAa,EACxB,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,CAAC,SAAS,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAC3C,OAAO,CAAC,CAAC,CAAC,CAYZ"}

package/dist/integrations/sequelize.js

@@ -0,0 +1,25 @@
+"use strict";
+// ─── Structural types (no hard dependency on sequelize) ───
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.withMysqlTenantScope = withMysqlTenantScope;
+/**
+ * Runs fn inside a session-variable scope for MySQL tenant isolation.
+ * Uses a Sequelize transaction to guarantee all queries (SET, user queries,
+ * SET NULL) run on the same pooled connection. The finally block clears the
+ * session variable even if fn throws.
+ */
+async function withMysqlTenantScope(sequelize, tenantId, fn) {
+    return sequelize.transaction(async (transaction) => {
+        await sequelize.query("SET @stratum_tenant_id = ?", {
+            replacements: [tenantId],
+            transaction,
+        });
+        try {
+            return await fn(sequelize);
+        }
+        finally {
+            await sequelize.query("SET @stratum_tenant_id = NULL", { transaction });
+        }
+    });
+}
+//# sourceMappingURL=sequelize.js.map

package/dist/integrations/sequelize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sequelize.js","sourceRoot":"","sources":["../../src/integrations/sequelize.ts"],"names":[],"mappings":";AAAA,6DAA6D;;AAa7D,oDAgBC;AAtBD;;;;;GAKG;AACI,KAAK,UAAU,oBAAoB,CACxC,SAAwB,EACxB,QAAgB,EAChB,EAA4C;IAE5C,OAAO,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE;QACjD,MAAM,SAAS,CAAC,KAAK,CAAC,4BAA4B,EAAE;YAClD,YAAY,EAAE,CAAC,QAAQ,CAAC;YACxB,WAAW;SACZ,CAAC,CAAC;QACH,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;gBAAS,CAAC;YACT,MAAM,SAAS,CAAC,KAAK,CAAC,+BAA+B,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/integrations/typeorm-subscriber.d.ts

@@ -0,0 +1,18 @@
+export interface InsertEvent {
+    entity: Record<string, unknown>;
+}
+export interface EntitySubscriberInterface {
+    beforeInsert?(event: InsertEvent): void | Promise<void>;
+}
+/**
+ * TypeORM subscriber that injects tenant_id into inserted entities via ALS.
+ *
+ * Known limitation: TypeORM subscribers cannot intercept query filtering.
+ * This subscriber handles writes only. Use the shared-table adapter's
+ * structured methods for tenant-scoped reads.
+ */
+export declare class StratumTypeOrmSubscriber implements EntitySubscriberInterface {
+    /** Injects the current tenant's ID into the entity before insert. */
+    beforeInsert(event: InsertEvent): void;
+}
+//# sourceMappingURL=typeorm-subscriber.d.ts.map

package/dist/integrations/typeorm-subscriber.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typeorm-subscriber.d.ts","sourceRoot":"","sources":["../../src/integrations/typeorm-subscriber.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,yBAAyB;IACxC,YAAY,CAAC,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzD;AAED;;;;;;GAMG;AACH,qBAAa,wBAAyB,YAAW,yBAAyB;IACxE,qEAAqE;IACrE,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;CAKvC"}

package/dist/integrations/typeorm-subscriber.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StratumTypeOrmSubscriber = void 0;
+const sdk_1 = require("@stratum-hq/sdk");
+const utils_js_1 = require("../utils.js");
+/**
+ * TypeORM subscriber that injects tenant_id into inserted entities via ALS.
+ *
+ * Known limitation: TypeORM subscribers cannot intercept query filtering.
+ * This subscriber handles writes only. Use the shared-table adapter's
+ * structured methods for tenant-scoped reads.
+ */
+class StratumTypeOrmSubscriber {
+    /** Injects the current tenant's ID into the entity before insert. */
+    beforeInsert(event) {
+        const context = (0, sdk_1.getTenantContext)();
+        (0, utils_js_1.assertTenantId)(context.tenant_id);
+        event.entity["tenant_id"] = context.tenant_id;
+    }
+}
+exports.StratumTypeOrmSubscriber = StratumTypeOrmSubscriber;
+//# sourceMappingURL=typeorm-subscriber.js.map

package/dist/integrations/typeorm-subscriber.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typeorm-subscriber.js","sourceRoot":"","sources":["../../src/integrations/typeorm-subscriber.ts"],"names":[],"mappings":";;;AAAA,yCAAmD;AACnD,0CAA6C;AAY7C;;;;;;GAMG;AACH,MAAa,wBAAwB;IACnC,qEAAqE;IACrE,YAAY,CAAC,KAAkB;QAC7B,MAAM,OAAO,GAAG,IAAA,sBAAgB,GAAE,CAAC;QACnC,IAAA,yBAAc,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IAChD,CAAC;CACF;AAPD,4DAOC"}

package/dist/pool-manager.d.ts

@@ -0,0 +1,48 @@
+import type { MysqlPoolLike, MysqlPoolManagerOptions } from "./types.js";
+/**
+ * Manages a collection of per-tenant MySQL connection pools with LRU eviction
+ * and active-query-aware reference counting.
+ *
+ * Pools are keyed by tenant slug and created on first access.
+ * When the pool count exceeds maxPools, the least-recently-used pool
+ * with refCount === 0 is evicted. A background timer closes pools
+ * that have been idle for longer than idleTimeoutMs.
+ */
+export declare class MysqlPoolManager {
+    private readonly pools;
+    private readonly pending;
+    private readonly createPool;
+    private readonly baseUri;
+    private readonly maxPools;
+    private readonly idleTimeoutMs;
+    private readonly idleTimer;
+    /** Exposed for testing: resolves when the last idle cleanup completes. */
+    _lastCleanup: Promise<void>;
+    constructor(options: MysqlPoolManagerOptions);
+    /**
+     * Returns a cached MysqlPoolLike for the given tenant slug, creating one if needed.
+     * Increments refCount for the pool. Caller must call releasePool() when done.
+     * Evicts the LRU pool (with refCount === 0) if the pool map is at capacity.
+     */
+    getPool(slug: string): Promise<MysqlPoolLike>;
+    /**
+     * Decrements the refCount for the pool associated with the given slug.
+     * No-op if the slug is not tracked.
+     */
+    releasePool(slug: string): void;
+    /** Closes and removes the pool for the given slug. No-op if not found. */
+    closePool(slug: string): Promise<void>;
+    /** Closes all managed pools and stops the idle timer. Call during application shutdown. */
+    closeAll(): Promise<void>;
+    /** Returns a snapshot of current pool statistics. */
+    getStats(): {
+        poolCount: number;
+    };
+    /** Evicts the pool that has been idle the longest and has no active references. */
+    private evictLRU;
+    /** Closes pools that have been idle longer than idleTimeoutMs and have no active references. */
+    private closeIdlePools;
+    /** Builds the MySQL connection URI with the given database name. */
+    private buildUri;
+}
+//# sourceMappingURL=pool-manager.d.ts.map

package/dist/pool-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pool-manager.d.ts","sourceRoot":"","sources":["../src/pool-manager.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AASzE;;;;;;;;GAQG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqC;IAC3D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkD;IAC1E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0D;IACrF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiC;IAC3D,0EAA0E;IAC1E,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,CAAqB;gBAEpC,OAAO,EAAE,uBAAuB;IAgB5C;;;;OAIG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAwCnD;;;OAGG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAQ/B,0EAA0E;IACpE,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO5C,2FAA2F;IACrF,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAO/B,qDAAqD;IACrD,QAAQ,IAAI;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE;IAIjC,mFAAmF;YACrE,QAAQ;IAgBtB,gGAAgG;YAClF,cAAc;IAa5B,oEAAoE;IACpE,OAAO,CAAC,QAAQ;CAYjB"}

package/dist/pool-manager.js

@@ -0,0 +1,149 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MysqlPoolManager = void 0;
+const core_1 = require("@stratum-hq/core");
+/**
+ * Manages a collection of per-tenant MySQL connection pools with LRU eviction
+ * and active-query-aware reference counting.
+ *
+ * Pools are keyed by tenant slug and created on first access.
+ * When the pool count exceeds maxPools, the least-recently-used pool
+ * with refCount === 0 is evicted. A background timer closes pools
+ * that have been idle for longer than idleTimeoutMs.
+ */
+class MysqlPoolManager {
+    pools = new Map();
+    pending = new Map();
+    createPool;
+    baseUri;
+    maxPools;
+    idleTimeoutMs;
+    idleTimer;
+    /** Exposed for testing: resolves when the last idle cleanup completes. */
+    _lastCleanup = Promise.resolve();
+    constructor(options) {
+        this.createPool = options.createPool;
+        this.baseUri = options.baseUri;
+        this.maxPools = options.maxPools ?? 20;
+        this.idleTimeoutMs = options.idleTimeoutMs ?? 60_000;
+        this.idleTimer = setInterval(() => {
+            this._lastCleanup = this.closeIdlePools();
+        }, this.idleTimeoutMs);
+        // Allow Node.js to exit even if the timer is still running.
+        if (typeof this.idleTimer.unref === "function") {
+            this.idleTimer.unref();
+        }
+    }
+    /**
+     * Returns a cached MysqlPoolLike for the given tenant slug, creating one if needed.
+     * Increments refCount for the pool. Caller must call releasePool() when done.
+     * Evicts the LRU pool (with refCount === 0) if the pool map is at capacity.
+     */
+    async getPool(slug) {
+        (0, core_1.validateSlug)(slug);
+        const existing = this.pools.get(slug);
+        if (existing) {
+            existing.lastUsed = Date.now();
+            existing.refCount++;
+            return existing.pool;
+        }
+        // Deduplicate concurrent creation requests for the same slug.
+        const inflight = this.pending.get(slug);
+        if (inflight) {
+            const pool = await inflight;
+            const entry = this.pools.get(slug);
+            if (entry) {
+                entry.refCount++;
+            }
+            return pool;
+        }
+        // Evict before adding so we never exceed maxPools.
+        if (this.pools.size >= this.maxPools) {
+            await this.evictLRU();
+        }
+        const dbName = `stratum_tenant_${slug}`;
+        const uri = this.buildUri(dbName);
+        const createPromise = Promise.resolve(this.createPool(uri));
+        this.pending.set(slug, createPromise);
+        try {
+            const pool = await createPromise;
+            this.pools.set(slug, { pool, lastUsed: Date.now(), refCount: 1 });
+            return pool;
+        }
+        finally {
+            this.pending.delete(slug);
+        }
+    }
+    /**
+     * Decrements the refCount for the pool associated with the given slug.
+     * No-op if the slug is not tracked.
+     */
+    releasePool(slug) {
+        const entry = this.pools.get(slug);
+        if (!entry)
+            return;
+        if (entry.refCount > 0) {
+            entry.refCount--;
+        }
+    }
+    /** Closes and removes the pool for the given slug. No-op if not found. */
+    async closePool(slug) {
+        const entry = this.pools.get(slug);
+        if (!entry)
+            return;
+        this.pools.delete(slug);
+        await entry.pool.end();
+    }
+    /** Closes all managed pools and stops the idle timer. Call during application shutdown. */
+    async closeAll() {
+        clearInterval(this.idleTimer);
+        const entries = Array.from(this.pools.entries());
+        this.pools.clear();
+        await Promise.all(entries.map(([, entry]) => entry.pool.end()));
+    }
+    /** Returns a snapshot of current pool statistics. */
+    getStats() {
+        return { poolCount: this.pools.size };
+    }
+    /** Evicts the pool that has been idle the longest and has no active references. */
+    async evictLRU() {
+        let oldestKey;
+        let oldestTime = Infinity;
+        for (const [key, entry] of this.pools.entries()) {
+            if (entry.refCount === 0 && entry.lastUsed < oldestTime) {
+                oldestTime = entry.lastUsed;
+                oldestKey = key;
+            }
+        }
+        if (oldestKey !== undefined) {
+            await this.closePool(oldestKey);
+        }
+    }
+    /** Closes pools that have been idle longer than idleTimeoutMs and have no active references. */
+    async closeIdlePools() {
+        const cutoff = Date.now() - this.idleTimeoutMs;
+        const toClose = [];
+        for (const [key, entry] of this.pools.entries()) {
+            if (entry.refCount === 0 && entry.lastUsed < cutoff) {
+                toClose.push(key);
+            }
+        }
+        await Promise.all(toClose.map((slug) => this.closePool(slug)));
+    }
+    /** Builds the MySQL connection URI with the given database name. */
+    buildUri(dbName) {
+        try {
+            const url = new URL(this.baseUri);
+            // MySQL URIs use the pathname as the database name: mysql://host/dbname
+            url.pathname = `/${dbName}`;
+            return url.toString();
+        }
+        catch {
+            // Fallback for non-standard URIs: replace trailing path segment.
+            const base = this.baseUri.replace(/\/[^/?]*(\?|$)/, `/${dbName}$1`);
+            return base;
+        }
+    }
+}
+exports.MysqlPoolManager = MysqlPoolManager;
+//# sourceMappingURL=pool-manager.js.map

package/dist/pool-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pool-manager.js","sourceRoot":"","sources":["../src/pool-manager.ts"],"names":[],"mappings":";;;AAAA,2CAAgD;AAUhD;;;;;;;;GAQG;AACH,MAAa,gBAAgB;IACV,KAAK,GAA2B,IAAI,GAAG,EAAE,CAAC;IAC1C,OAAO,GAAwC,IAAI,GAAG,EAAE,CAAC;IACzD,UAAU,CAA0D;IACpE,OAAO,CAAS;IAChB,QAAQ,CAAS;IACjB,aAAa,CAAS;IACtB,SAAS,CAAiC;IAC3D,0EAA0E;IAC1E,YAAY,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEhD,YAAY,OAAgC;QAC1C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC;QAErD,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;YAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5C,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAEvB,4DAA4D;QAC5D,IAAI,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC/C,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,IAAA,mBAAY,EAAC,IAAI,CAAC,CAAC;QAEnB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,QAAQ,CAAC,IAAI,CAAC;QACvB,CAAC;QAED,8DAA8D;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,mDAAmD;QACnD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxB,CAAC;QAED,MAAM,MAAM,GAAG,kBAAkB,IAAI,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,IAAY;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,SAAS,CAAC,IAAY;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,CAAC;IAED,2FAA2F;IAC3F,KAAK,CAAC,QAAQ;QACZ,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,qDAAqD;IACrD,QAAQ;QACN,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACxC,CAAC;IAED,mFAAmF;IAC3E,KAAK,CAAC,QAAQ;QACpB,IAAI,SAA6B,CAAC;QAClC,IAAI,UAAU,GAAG,QAAQ,CAAC;QAE1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAChD,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,UAAU,EAAE,CAAC;gBACxD,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC;gBAC5B,SAAS,GAAG,GAAG,CAAC;YAClB,CAAC;QACH,CAAC;QAED,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,gGAAgG;IACxF,KAAK,CAAC,cAAc;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC;QAC/C,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAChD,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,MAAM,EAAE,CAAC;gBACpD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,oEAAoE;IAC5D,QAAQ,CAAC,MAAc;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClC,wEAAwE;YACxE,GAAG,CAAC,QAAQ,GAAG,IAAI,MAAM,EAAE,CAAC;YAC5B,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;YACjE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,MAAM,IAAI,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF;AArJD,4CAqJC"}

package/dist/types.d.ts

@@ -0,0 +1,61 @@
+export interface MysqlConnectionLike {
+    query(sql: string, values?: unknown[]): Promise<unknown>;
+    execute(sql: string, values?: unknown[]): Promise<unknown>;
+    release(): void;
+    end(): Promise<void>;
+}
+export interface MysqlPoolLike {
+    getConnection(): Promise<MysqlConnectionLike>;
+    query(sql: string, values?: unknown[]): Promise<unknown>;
+    end(): Promise<void>;
+}
+export interface MysqlAdapter {
+    purgeTenantData(tenantSlug: string): Promise<PurgeResult>;
+    getStats(): AdapterStats;
+}
+export interface PurgeResult {
+    success: boolean;
+    tablesProcessed: number;
+    rowsDeleted: number;
+    errors: Array<{
+        table: string;
+        error: Error;
+    }>;
+}
+export interface AdapterStats {
+    strategy: string;
+    [key: string]: unknown;
+}
+export interface MysqlSharedAdapterOptions {
+    /** The MysqlPoolLike instance to use. */
+    pool: MysqlPoolLike;
+    /** The database name to use. */
+    databaseName: string;
+}
+export interface MysqlTableAdapterOptions {
+    /** The MysqlPoolLike instance to use. */
+    pool: MysqlPoolLike;
+    /** The database name to use. */
+    databaseName: string;
+}
+export interface MysqlDatabaseAdapterOptions {
+    /** Factory function to create a new pool for a connection URI. */
+    createPool: (uri: string) => MysqlPoolLike | Promise<MysqlPoolLike>;
+    /** Base connection URI (database name will be replaced per-tenant). */
+    baseUri: string;
+    /** Maximum number of cached pools. Default: 20. */
+    maxPools?: number;
+    /** Idle timeout in milliseconds. Default: 60000. */
+    idleTimeoutMs?: number;
+}
+export interface MysqlPoolManagerOptions {
+    /** Factory function to create a new pool for a connection URI. */
+    createPool: (uri: string) => MysqlPoolLike | Promise<MysqlPoolLike>;
+    /** Base connection URI. */
+    baseUri: string;
+    /** Maximum number of cached pools. Default: 20. */
+    maxPools?: number;
+    /** Idle timeout in milliseconds. Default: 60000. */
+    idleTimeoutMs?: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,OAAO,IAAI,IAAI,CAAC;IAChB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9C,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAID,MAAM,WAAW,YAAY;IAC3B,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1D,QAAQ,IAAI,YAAY,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAID,MAAM,WAAW,yBAAyB;IACxC,yCAAyC;IACzC,IAAI,EAAE,aAAa,CAAC;IACpB,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,yCAAyC;IACzC,IAAI,EAAE,aAAa,CAAC;IACpB,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,2BAA2B;IAC1C,kEAAkE;IAClE,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpE,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,kEAAkE;IAClE,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpE,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB"}

package/dist/types.js

@@ -0,0 +1,4 @@
+"use strict";
+// ─── Structural types for MySQL (no hard dependency on mysql2 driver) ───
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";AAAA,2EAA2E"}

package/dist/utils.d.ts

@@ -0,0 +1,16 @@
+import type { PurgeResult } from "./types.js";
+/** Validates that a tenantId is a non-empty string. */
+export declare function assertTenantId(tenantId: string): void;
+/**
+ * Backtick-escapes a MySQL identifier (table name, column name, database name).
+ * Any backticks inside the name are doubled as defense-in-depth.
+ * Note: validateSlug from @stratum-hq/core restricts slugs to [a-z][a-z0-9_]{0,62}
+ * so this escaping is an additional safety layer.
+ */
+export declare function escapeIdentifier(name: string): string;
+/** Aggregates Promise.allSettled results into a PurgeResult. */
+export declare function aggregatePurgeResults(results: PromiseSettledResult<{
+    table: string;
+    rowsDeleted: number;
+}>[]): PurgeResult;
+//# sourceMappingURL=utils.d.ts.map

package/dist/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,uDAAuD;AACvD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAMrD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,gEAAgE;AAChE,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,oBAAoB,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,EAAE,GACtE,WAAW,CA4Bb"}

package/dist/utils.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertTenantId = assertTenantId;
+exports.escapeIdentifier = escapeIdentifier;
+exports.aggregatePurgeResults = aggregatePurgeResults;
+/** Validates that a tenantId is a non-empty string. */
+function assertTenantId(tenantId) {
+    if (!tenantId || typeof tenantId !== "string") {
+        throw new Error(`Invalid tenantId: expected a non-empty string, got ${typeof tenantId === "string" ? '""' : String(tenantId)}`);
+    }
+}
+/**
+ * Backtick-escapes a MySQL identifier (table name, column name, database name).
+ * Any backticks inside the name are doubled as defense-in-depth.
+ * Note: validateSlug from @stratum-hq/core restricts slugs to [a-z][a-z0-9_]{0,62}
+ * so this escaping is an additional safety layer.
+ */
+function escapeIdentifier(name) {
+    return "`" + name.replace(/`/g, "``") + "`";
+}
+/** Aggregates Promise.allSettled results into a PurgeResult. */
+function aggregatePurgeResults(results) {
+    let rowsDeleted = 0;
+    let tablesProcessed = 0;
+    const errors = [];
+    for (const result of results) {
+        if (result.status === "fulfilled") {
+            tablesProcessed++;
+            rowsDeleted += result.value.rowsDeleted;
+        }
+        else {
+            const reason = result.reason;
+            if (reason instanceof Error) {
+                errors.push({ table: "unknown", error: reason });
+            }
+            else {
+                errors.push({
+                    table: reason.table ?? "unknown",
+                    error: reason.error ?? new Error(String(reason)),
+                });
+            }
+        }
+    }
+    return {
+        success: errors.length === 0,
+        tablesProcessed,
+        rowsDeleted,
+        errors,
+    };
+}
+//# sourceMappingURL=utils.js.map

package/dist/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":";;AAGA,wCAMC;AAQD,4CAEC;AAGD,sDA8BC;AAlDD,uDAAuD;AACvD,SAAgB,cAAc,CAAC,QAAgB;IAC7C,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,sDAAsD,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAC/G,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,OAAO,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC;AAC9C,CAAC;AAED,gEAAgE;AAChE,SAAgB,qBAAqB,CACnC,OAAuE;IAEvE,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,MAAM,MAAM,GAA0B,EAAE,CAAC;IAEzC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,eAAe,EAAE,CAAC;YAClB,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,MAAM,CAAC,MAAmD,CAAC;YAC1E,IAAI,MAAM,YAAY,KAAK,EAAE,CAAC;gBAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS;oBAChC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;iBACjD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC5B,eAAe;QACf,WAAW;QACX,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/views/manager.d.ts

@@ -0,0 +1,18 @@
+import type { MysqlPoolLike, MysqlConnectionLike } from "../types.js";
+/**
+ * Creates or replaces a tenant view that filters rows by a session variable.
+ *
+ * JSDoc caveat: Views are NOT a security boundary (unlike Postgres RLS).
+ * Queries to underlying tables bypass isolation. Views referencing session
+ * variables may not use indexes efficiently. Benchmark with >100k rows.
+ * Use the shared-table adapter for high-performance workloads.
+ */
+export declare function createTenantView(pool: MysqlPoolLike, tableName: string, viewName?: string): Promise<void>;
+/** Drops a tenant view if it exists. */
+export declare function dropTenantView(pool: MysqlPoolLike, viewName: string): Promise<void>;
+/**
+ * Sets the session variable used by tenant views.
+ * Pass null to clear the variable after a request completes.
+ */
+export declare function setTenantSession(connection: MysqlConnectionLike, tenantId: string | null): Promise<void>;
+//# sourceMappingURL=manager.d.ts.map

package/dist/views/manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/views/manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGtE;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,aAAa,EACnB,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED,wCAAwC;AACxC,wBAAsB,cAAc,CAClC,IAAI,EAAE,aAAa,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,mBAAmB,EAC/B,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,OAAO,CAAC,IAAI,CAAC,CAMf"}

package/dist/views/manager.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createTenantView = createTenantView;
+exports.dropTenantView = dropTenantView;
+exports.setTenantSession = setTenantSession;
+const utils_js_1 = require("../utils.js");
+/**
+ * Creates or replaces a tenant view that filters rows by a session variable.
+ *
+ * JSDoc caveat: Views are NOT a security boundary (unlike Postgres RLS).
+ * Queries to underlying tables bypass isolation. Views referencing session
+ * variables may not use indexes efficiently. Benchmark with >100k rows.
+ * Use the shared-table adapter for high-performance workloads.
+ */
+async function createTenantView(pool, tableName, viewName) {
+    const resolvedViewName = viewName ?? `${tableName}_tenant_view`;
+    const escapedView = (0, utils_js_1.escapeIdentifier)(resolvedViewName);
+    const escapedTable = (0, utils_js_1.escapeIdentifier)(tableName);
+    const sql = `CREATE OR REPLACE VIEW ${escapedView} AS ` +
+        `SELECT * FROM ${escapedTable} WHERE tenant_id = @stratum_tenant_id`;
+    await pool.query(sql);
+}
+/** Drops a tenant view if it exists. */
+async function dropTenantView(pool, viewName) {
+    const escapedView = (0, utils_js_1.escapeIdentifier)(viewName);
+    await pool.query(`DROP VIEW IF EXISTS ${escapedView}`);
+}
+/**
+ * Sets the session variable used by tenant views.
+ * Pass null to clear the variable after a request completes.
+ */
+async function setTenantSession(connection, tenantId) {
+    if (tenantId === null) {
+        await connection.execute(`SET @stratum_tenant_id = NULL`);
+    }
+    else {
+        await connection.execute(`SET @stratum_tenant_id = ?`, [tenantId]);
+    }
+}
+//# sourceMappingURL=manager.js.map

package/dist/views/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../src/views/manager.ts"],"names":[],"mappings":";;AAWA,4CAcC;AAGD,wCAMC;AAMD,4CASC;AAhDD,0CAA+C;AAE/C;;;;;;;GAOG;AACI,KAAK,UAAU,gBAAgB,CACpC,IAAmB,EACnB,SAAiB,EACjB,QAAiB;IAEjB,MAAM,gBAAgB,GAAG,QAAQ,IAAI,GAAG,SAAS,cAAc,CAAC;IAChE,MAAM,WAAW,GAAG,IAAA,2BAAgB,EAAC,gBAAgB,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,IAAA,2BAAgB,EAAC,SAAS,CAAC,CAAC;IAEjD,MAAM,GAAG,GACP,0BAA0B,WAAW,MAAM;QAC3C,iBAAiB,YAAY,uCAAuC,CAAC;IAEvE,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AAED,wCAAwC;AACjC,KAAK,UAAU,cAAc,CAClC,IAAmB,EACnB,QAAgB;IAEhB,MAAM,WAAW,GAAG,IAAA,2BAAgB,EAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,WAAW,EAAE,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,gBAAgB,CACpC,UAA+B,EAC/B,QAAuB;IAEvB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,UAAU,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAC5D,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,CAAC,OAAO,CAAC,4BAA4B,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@stratum-hq/mysql",
+  "version": "0.1.0",
+  "description": "MySQL tenant isolation for Stratum — shared table, table-per-tenant, and database-per-tenant strategies",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:integration": "vitest run --config vitest.integration.config.ts",
+    "lint": "tsc --noEmit",
+    "clean": "rm -rf dist"
+  },
+  "dependencies": {
+    "@stratum-hq/core": "*",
+    "@stratum-hq/sdk": "*"
+  },
+  "peerDependencies": {
+    "mysql2": "^3.0.0"
+  },
+  "peerDependenciesMeta": {
+    "typeorm": {
+      "optional": true
+    },
+    "knex": {
+      "optional": true
+    },
+    "sequelize": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "mysql2": "^3.12.0",
+    "typescript": "^5.9.0",
+    "vitest": "^1.6.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "license": "MIT"
+}