@stratum-hq/mysql 0.2.1 → 0.3.0

package/README.md

@@ -43,7 +43,12 @@ await adapter.purgeTenantData("tenant-a");
 ```typescript
 import { MysqlTableAdapter } from "@stratum-hq/mysql";
 
-const adapter = new MysqlTableAdapter({ pool, databaseName: "myapp" });
+const adapter = new MysqlTableAdapter({
+  pool,
+  databaseName: "myapp",
+  // Every base table that has a per-tenant copy. Required by purgeTenantData.
+  baseTables: ["users", "orders"],
+});
 
 // Returns escaped table name: `users_tenanta`
 const tableName = adapter.scopedTable("tenanta", "users");
@@ -79,12 +84,14 @@ await adapter.closeAll();
 ```typescript
 import { StratumTypeOrmSubscriber } from "@stratum-hq/mysql";
 
-// Add to your TypeORM data source subscribers
-const dataSource = new DataSource({
-  subscribers: [StratumTypeOrmSubscriber],
-});
+// Register an instance once the data source is initialized. (TypeORM's
+// `subscribers` option only loads @EventSubscriber()-decorated classes.)
+await dataSource.initialize();
+dataSource.subscribers.push(new StratumTypeOrmSubscriber());
 ```
 
+Inserts get the current tenant's `tenant_id`. Updates never change `tenant_id`: `save()` keeps the loaded value, and `update()` / query builder updates drop it from the SET values.
+
 **Limitation:** TypeORM subscribers can intercept writes but not reads. Use the shared-table adapter's structured methods for tenant-scoped reads.
 
 ### Knex Helper
@@ -93,49 +100,35 @@ const dataSource = new DataSource({
 import { withTenantScope } from "@stratum-hq/mysql";
 
 const tenantKnex = withTenantScope(knex, "tenant-a");
-const users = await tenantKnex("users").select("*");
-// Automatically adds: WHERE tenant_id = 'tenant-a'
+const users = await tenantKnex("users").where("name", "like", q).orWhere("email", "like", q);
+// Compiles to: WHERE tenant_id = 'tenant-a' AND (name LIKE ? OR email LIKE ?)
 ```
 
+Your where clauses are always grouped after the tenant filter, including on clones and when the builder is used as a subquery. `insert()` sets `tenant_id`, `update()` never changes it, and `onConflict().merge()`, `upsert()` and `truncate()` throw.
+
 ### Sequelize Adapter
 
 ```typescript
 import { withMysqlTenantScope } from "@stratum-hq/mysql";
 
-await withMysqlTenantScope(sequelize, "tenant-a", async (scoped) => {
-  // Session variable @stratum_tenant_id is set for this scope
+await withMysqlTenantScope(sequelize, "tenant-a", async (scoped, transaction) => {
+  // @stratum_tenant_id is set on the transaction's connection only.
+  // Pass the transaction to every query, or it runs on another connection.
   // Guaranteed cleanup via try/finally, even on errors
-  const users = await scoped.query("SELECT * FROM users_view");
+  const [rows] = await scoped.query("SELECT @stratum_tenant_id", { transaction });
 });
 ```
 
-## MySQL Views (convenience layer)
-
-Views provide a convenient way to create tenant-scoped read access using MySQL session variables.
-
-```typescript
-import { createTenantView, setTenantSession } from "@stratum-hq/mysql";
-
-// Create a view that filters by @stratum_tenant_id
-await createTenantView(pool, "users");
-// Creates: CREATE OR REPLACE VIEW users_tenant_view AS
-//          SELECT * FROM users WHERE tenant_id = @stratum_tenant_id
-
-// Set the session variable, then query the view
-const conn = await pool.getConnection();
-await setTenantSession(conn, "tenant-a");
-const [rows] = await conn.query("SELECT * FROM users_tenant_view");
-conn.release();
-```
+## MySQL Views (not supported)
 
-**Important:** Views are NOT a security boundary (unlike Postgres RLS). Queries to underlying tables bypass isolation entirely. Views referencing session variables may not use indexes efficiently on large tables. Use the shared-table adapter's structured methods for high-performance workloads.
+`createTenantView()` is deprecated and always throws. MySQL does not allow a view to read a session variable (`ER_VIEW_SELECT_VARIABLE`), so a view filtered on `@stratum_tenant_id` cannot be created. Use the shared-table adapter's scoped methods. `setTenantSession()` and `dropTenantView()` remain available.
 
 ## GDPR Compliance
 
 All three adapters implement `purgeTenantData(tenantSlug)`:
 
 - **Shared table**: discovers tenant tables via `INFORMATION_SCHEMA`, then `DELETE FROM table WHERE tenant_id = ?`
-- **Table-per-tenant**: discovers tables via `SHOW TABLES LIKE '%_slug'`, then `DROP TABLE`
+- **Table-per-tenant**: `DROP TABLE` for exactly `{base}_{slug}` for each entry in the `baseTables` option, which it requires
 - **Database-per-tenant**: `DROP DATABASE stratum_tenant_slug`
 
 ## License

package/dist/adapters/shared.d.ts

@@ -14,7 +14,11 @@ export declare class MysqlSharedAdapter implements MysqlAdapter {
     scopedSelect(tenantId: string, table: string, conditions?: Record<string, unknown>, columns?: string[]): Promise<unknown[]>;
     /** INSERT with tenant_id added to data. */
     scopedInsert(tenantId: string, table: string, data: Record<string, unknown>): Promise<unknown>;
-    /** UPDATE SET ... WHERE tenant_id = ? AND conditions. */
+    /**
+     * UPDATE SET ... WHERE tenant_id = ? AND conditions.
+     * tenant_id (in any letter case) is dropped from data, so an update can never
+     * move a row to another tenant.
+     */
     scopedUpdate(tenantId: string, table: string, data: Record<string, unknown>, conditions: Record<string, unknown>): Promise<unknown>;
     /** DELETE WHERE tenant_id = ? AND optional conditions. */
     scopedDelete(tenantId: string, table: string, conditions?: Record<string, unknown>): Promise<unknown>;

package/dist/adapters/shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/adapters/shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,yBAAyB,EAEzB,WAAW,EACX,YAAY,EACb,MAAM,aAAa,CAAC;AAGrB;;;GAGG;AACH,qBAAa,kBAAmB,YAAW,YAAY;IACrD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgB;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;gBAE1B,OAAO,EAAE,yBAAyB;IAK9C;;;OAGG;IACG,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,OAAO,GAAE,MAAM,EAAU,GACxB,OAAO,CAAC,OAAO,EAAE,CAAC;IAqBrB,2CAA2C;IACrC,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,OAAO,CAAC;IAanB,yDAAyD;IACnD,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAClC,OAAO,CAAC,OAAO,CAAC;IAqBnB,0DAA0D;IACpD,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,OAAO,CAAC,OAAO,CAAC;IAkBnB;;;;;;OAMG;IACG,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAInE,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAuB7D,kCAAkC;IAClC,QAAQ,IAAI,YAAY;CAGzB"}
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/adapters/shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,yBAAyB,EAEzB,WAAW,EACX,YAAY,EACb,MAAM,aAAa,CAAC;AAGrB;;;GAGG;AACH,qBAAa,kBAAmB,YAAW,YAAY;IACrD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgB;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;gBAE1B,OAAO,EAAE,yBAAyB;IAK9C;;;OAGG;IACG,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,OAAO,GAAE,MAAM,EAAU,GACxB,OAAO,CAAC,OAAO,EAAE,CAAC;IAqBrB,2CAA2C;IACrC,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,OAAO,CAAC;IAanB;;;;OAIG;IACG,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAClC,OAAO,CAAC,OAAO,CAAC;IA4BnB,0DAA0D;IACpD,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,OAAO,CAAC,OAAO,CAAC;IAkBnB;;;;;;OAMG;IACG,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAInE,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAuB7D,kCAAkC;IAClC,QAAQ,IAAI,YAAY;CAGzB"}

package/dist/adapters/shared.js

@@ -44,9 +44,17 @@ class MysqlSharedAdapter {
         const sql = `INSERT INTO ${qualifiedTable} (${cols}) VALUES (${placeholders})`;
         return this.pool.query(sql, values);
     }
-    /** UPDATE SET ... WHERE tenant_id = ? AND conditions. */
+    /**
+     * UPDATE SET ... WHERE tenant_id = ? AND conditions.
+     * tenant_id (in any letter case) is dropped from data, so an update can never
+     * move a row to another tenant.
+     */
     async scopedUpdate(tenantId, table, data, conditions) {
         (0, utils_js_1.assertTenantId)(tenantId);
+        data = Object.fromEntries(Object.entries(data).filter(([col]) => col.toLowerCase() !== "tenant_id"));
+        if (Object.keys(data).length === 0) {
+            throw new Error("scopedUpdate: data has no columns to update other than tenant_id");
+        }
         const qualifiedTable = `${(0, utils_js_1.escapeIdentifier)(this.databaseName)}.${(0, utils_js_1.escapeIdentifier)(table)}`;
         const setClauses = Object.keys(data)
             .map((col) => `${(0, utils_js_1.escapeIdentifier)(col)} = ?`)

package/dist/adapters/shared.js.map

@@ -1 +1 @@
-{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/adapters/shared.ts"],"names":[],"mappings":";;;AAOA,0CAAsF;AAEtF;;;GAGG;AACH,MAAa,kBAAkB;IACZ,IAAI,CAAgB;IACpB,YAAY,CAAS;IAEtC,YAAY,OAAkC;QAC5C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,KAAa,EACb,UAAoC,EACpC,UAAoB,CAAC,GAAG,CAAC;QAEzB,IAAA,yBAAc,EAAC,QAAQ,CAAC,CAAC;QAEzB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAA,2BAAgB,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpF,MAAM,cAAc,GAAG,GAAG,IAAA,2BAAgB,EAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAA,2BAAgB,EAAC,KAAK,CAAC,EAAE,CAAC;QAE3F,MAAM,YAAY,GAAa,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,MAAM,GAAc,CAAC,QAAQ,CAAC,CAAC;QAErC,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpD,YAAY,CAAC,IAAI,CAAC,GAAG,IAAA,2BAAgB,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,UAAU,IAAI,SAAS,cAAc,UAAU,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxF,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAyB,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2CAA2C;IAC3C,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,KAAa,EACb,IAA6B;QAE7B,IAAA,yBAAc,EAAC,QAAQ,CAAC,CAAC;QAEzB,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QAC7C,MAAM,cAAc,GAAG,GAAG,IAAA,2BAAgB,EAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAA,2BAAgB,EAAC,KAAK,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,2BAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAElC,MAAM,GAAG,GAAG,eAAe,cAAc,KAAK,IAAI,aAAa,YAAY,GAAG,CAAC;QAC/E,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,KAAa,EACb,IAA6B,EAC7B,UAAmC;QAEnC,IAAA,yBAAc,EAAC,QAAQ,CAAC,CAAC;QAEzB,MAAM,cAAc,GAAG,GAAG,IAAA,2BAAgB,EAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAA,2BAAgB,EAAC,KAAK,CAAC,EAAE,CAAC;QAC3F,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;aACjC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAA,2BAAgB,EAAC,GAAG,CAAC,MAAM,CAAC;aAC5C,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEtC,MAAM,YAAY,GAAa,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,WAAW,GAAc,CAAC,QAAQ,CAAC,CAAC;QAE1C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACpD,YAAY,CAAC,IAAI,CAAC,GAAG,IAAA,2BAAgB,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClD,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAED,MAAM,GAAG,GAAG,UAAU,cAAc,QAAQ,UAAU,UAAU,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7F,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,SAAS,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,KAAa,EACb,UAAoC;QAEpC,IAAA,yBAAc,EAAC,QAAQ,CAAC,CAAC;QAEzB,MAAM,cAAc,GAAG,GAAG,IAAA,2BAAgB,EAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAA,2BAAgB,EAAC,KAAK,CAAC,EAAE,CAAC;QAC3F,MAAM,YAAY,GAAa,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,MAAM,GAAc,CAAC,QAAQ,CAAC,CAAC;QAErC,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpD,YAAY,CAAC,IAAI,CAAC,GAAG,IAAA,2BAAgB,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,eAAe,cAAc,UAAU,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChF,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CAAC,GAAW,EAAE,MAAkB;QACpD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,QAAgB;QACpC,IAAA,yBAAc,EAAC,QAAQ,CAAC,CAAC;QAEzB,qEAAqE;QACrE,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACvC,wGAAwG,EACxG,CAAC,IAAI,CAAC,YAAY,CAAC,CACwB,CAAC;QAE9C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC1B,MAAM,cAAc,GAAG,GAAG,IAAA,2BAAgB,EAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAA,2BAAgB,EAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACpG,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC,eAAe,cAAc,sBAAsB,EACnD,CAAC,QAAQ,CAAC,CAC6B,CAAC;YAC1C,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,YAAY,IAAI,CAAC,EAAE,CAAC;QAC1E,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,IAAA,gCAAqB,EAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,kCAAkC;IAClC,QAAQ;QACN,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC;CACF;AAjJD,gDAiJC"}
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/adapters/shared.ts"],"names":[],"mappings":";;;AAOA,0CAAsF;AAEtF;;;GAGG;AACH,MAAa,kBAAkB;IACZ,IAAI,CAAgB;IACpB,YAAY,CAAS;IAEtC,YAAY,OAAkC;QAC5C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,KAAa,EACb,UAAoC,EACpC,UAAoB,CAAC,GAAG,CAAC;QAEzB,IAAA,yBAAc,EAAC,QAAQ,CAAC,CAAC;QAEzB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAA,2BAAgB,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpF,MAAM,cAAc,GAAG,GAAG,IAAA,2BAAgB,EAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAA,2BAAgB,EAAC,KAAK,CAAC,EAAE,CAAC;QAE3F,MAAM,YAAY,GAAa,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,MAAM,GAAc,CAAC,QAAQ,CAAC,CAAC;QAErC,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpD,YAAY,CAAC,IAAI,CAAC,GAAG,IAAA,2BAAgB,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,UAAU,IAAI,SAAS,cAAc,UAAU,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxF,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAyB,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2CAA2C;IAC3C,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,KAAa,EACb,IAA6B;QAE7B,IAAA,yBAAc,EAAC,QAAQ,CAAC,CAAC;QAEzB,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QAC7C,MAAM,cAAc,GAAG,GAAG,IAAA,2BAAgB,EAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAA,2BAAgB,EAAC,KAAK,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,2BAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAElC,MAAM,GAAG,GAAG,eAAe,cAAc,KAAK,IAAI,aAAa,YAAY,GAAG,CAAC;QAC/E,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,KAAa,EACb,IAA6B,EAC7B,UAAmC;QAEnC,IAAA,yBAAc,EAAC,QAAQ,CAAC,CAAC;QAEzB,IAAI,GAAG,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,CAC1E,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,cAAc,GAAG,GAAG,IAAA,2BAAgB,EAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAA,2BAAgB,EAAC,KAAK,CAAC,EAAE,CAAC;QAC3F,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;aACjC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAA,2BAAgB,EAAC,GAAG,CAAC,MAAM,CAAC;aAC5C,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEtC,MAAM,YAAY,GAAa,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,WAAW,GAAc,CAAC,QAAQ,CAAC,CAAC;QAE1C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACpD,YAAY,CAAC,IAAI,CAAC,GAAG,IAAA,2BAAgB,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClD,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAED,MAAM,GAAG,GAAG,UAAU,cAAc,QAAQ,UAAU,UAAU,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7F,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,SAAS,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,KAAa,EACb,UAAoC;QAEpC,IAAA,yBAAc,EAAC,QAAQ,CAAC,CAAC;QAEzB,MAAM,cAAc,GAAG,GAAG,IAAA,2BAAgB,EAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAA,2BAAgB,EAAC,KAAK,CAAC,EAAE,CAAC;QAC3F,MAAM,YAAY,GAAa,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,MAAM,GAAc,CAAC,QAAQ,CAAC,CAAC;QAErC,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpD,YAAY,CAAC,IAAI,CAAC,GAAG,IAAA,2BAAgB,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,eAAe,cAAc,UAAU,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChF,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CAAC,GAAW,EAAE,MAAkB;QACpD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,QAAgB;QACpC,IAAA,yBAAc,EAAC,QAAQ,CAAC,CAAC;QAEzB,qEAAqE;QACrE,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACvC,wGAAwG,EACxG,CAAC,IAAI,CAAC,YAAY,CAAC,CACwB,CAAC;QAE9C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC1B,MAAM,cAAc,GAAG,GAAG,IAAA,2BAAgB,EAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAA,2BAAgB,EAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACpG,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC,eAAe,cAAc,sBAAsB,EACnD,CAAC,QAAQ,CAAC,CAC6B,CAAC;YAC1C,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,YAAY,IAAI,CAAC,EAAE,CAAC;QAC1E,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,IAAA,gCAAqB,EAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,kCAAkC;IAClC,QAAQ;QACN,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC;CACF;AA5JD,gDA4JC"}

package/dist/adapters/table.d.ts

@@ -8,6 +8,7 @@ import type { MysqlAdapter, MysqlTableAdapterOptions, MysqlPoolLike, PurgeResult
 export declare class MysqlTableAdapter implements MysqlAdapter {
     private readonly pool;
     private readonly databaseName;
+    private readonly baseTables;
     constructor(options: MysqlTableAdapterOptions);
     /**
      * Validates slug and returns the escaped tenant-scoped table name
@@ -16,6 +17,11 @@ export declare class MysqlTableAdapter implements MysqlAdapter {
     scopedTable(tenantSlug: string, baseTableName: string): string;
     /** Returns the underlying pool for raw queries against tenant tables. */
     getPool(): MysqlPoolLike;
+    /**
+     * Drops `{base}_{tenantSlug}` for every base in the baseTables option.
+     * Throws when baseTables is not set: discovering tables by name suffix would
+     * also match other tenants whose slug ends with this one.
+     */
     purgeTenantData(tenantSlug: string): Promise<PurgeResult>;
     /** Returns adapter statistics. */
     getStats(): AdapterStats;

package/dist/adapters/table.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"table.d.ts","sourceRoot":"","sources":["../../src/adapters/table.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,YAAY,EACZ,wBAAwB,EACxB,aAAa,EACb,WAAW,EACX,YAAY,EACb,MAAM,aAAa,CAAC;AAGrB;;;;;GAKG;AACH,qBAAa,iBAAkB,YAAW,YAAY;IACpD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgB;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;gBAE1B,OAAO,EAAE,wBAAwB;IAK7C;;;OAGG;IACH,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM;IAM9D,yEAAyE;IACzE,OAAO,IAAI,aAAa;IAIlB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAqC/D,kCAAkC;IAClC,QAAQ,IAAI,YAAY;CAGzB"}
+{"version":3,"file":"table.d.ts","sourceRoot":"","sources":["../../src/adapters/table.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,YAAY,EACZ,wBAAwB,EACxB,aAAa,EACb,WAAW,EACX,YAAY,EACb,MAAM,aAAa,CAAC;AAGrB;;;;;GAKG;AACH,qBAAa,iBAAkB,YAAW,YAAY;IACpD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgB;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;gBAEtC,OAAO,EAAE,wBAAwB;IAkB7C;;;OAGG;IACH,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM;IAS9D,yEAAyE;IACzE,OAAO,IAAI,aAAa;IAIxB;;;;OAIG;IACG,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAgC/D,kCAAkC;IAClC,QAAQ,IAAI,YAAY;CAGzB"}

package/dist/adapters/table.js

@@ -12,9 +12,21 @@ const utils_js_1 = require("../utils.js");
 class MysqlTableAdapter {
     pool;
     databaseName;
+    baseTables;
     constructor(options) {
         this.pool = options.pool;
         this.databaseName = options.databaseName;
+        if (options.baseTables) {
+            for (const a of options.baseTables) {
+                for (const b of options.baseTables) {
+                    if (b.toLowerCase().startsWith(`${a.toLowerCase()}_`)) {
+                        throw new Error(`MysqlTableAdapter: base tables "${a}" and "${b}" are ambiguous, ` +
+                            `because "${b}_{slug}" can also be read as "${a}_{slug}"`);
+                    }
+                }
+            }
+            this.baseTables = [...options.baseTables];
+        }
     }
     /**
      * Validates slug and returns the escaped tenant-scoped table name
@@ -22,6 +34,9 @@ class MysqlTableAdapter {
      */
     scopedTable(tenantSlug, baseTableName) {
         (0, core_1.validateSlug)(tenantSlug);
+        if (this.baseTables && !this.baseTables.includes(baseTableName)) {
+            throw new Error(`MysqlTableAdapter: "${baseTableName}" is not in baseTables`);
+        }
         const tableName = `${baseTableName}_${tenantSlug}`;
         return (0, utils_js_1.escapeIdentifier)(tableName);
     }
@@ -29,23 +44,23 @@ class MysqlTableAdapter {
     getPool() {
         return this.pool;
     }
+    /**
+     * Drops `{base}_{tenantSlug}` for every base in the baseTables option.
+     * Throws when baseTables is not set: discovering tables by name suffix would
+     * also match other tenants whose slug ends with this one.
+     */
     async purgeTenantData(tenantSlug) {
         (0, utils_js_1.assertTenantId)(tenantSlug);
         (0, core_1.validateSlug)(tenantSlug);
+        if (!this.baseTables) {
+            throw new Error("MysqlTableAdapter: purgeTenantData requires the baseTables option, " +
+                "listing every base table name that has a per-tenant copy");
+        }
         const escapedDb = (0, utils_js_1.escapeIdentifier)(this.databaseName);
-        // SHOW TABLES LIKE '%_tenantSlug' to find all tenant tables.
-        const pattern = `%_${tenantSlug}`;
-        const [tableRows] = await this.pool.query(`SHOW TABLES FROM ${escapedDb} LIKE ?`, [pattern]);
         const errors = [];
         let tablesProcessed = 0;
-        const exactSuffix = `_${tenantSlug}`;
-        for (const row of tableRows) {
-            const tableName = Object.values(row)[0];
-            if (!tableName)
-                continue;
-            // Post-filter: verify exact suffix match to prevent 'e' matching 'orders_acme'
-            if (!tableName.endsWith(exactSuffix))
-                continue;
+        for (const base of this.baseTables) {
+            const tableName = `${base}_${tenantSlug}`;
             try {
                 await this.pool.query(`DROP TABLE IF EXISTS ${escapedDb}.${(0, utils_js_1.escapeIdentifier)(tableName)}`);
                 tablesProcessed++;

package/dist/adapters/table.js.map

@@ -1 +1 @@
-{"version":3,"file":"table.js","sourceRoot":"","sources":["../../src/adapters/table.ts"],"names":[],"mappings":";;;AAAA,2CAAgD;AAQhD,0CAA+D;AAE/D;;;;;GAKG;AACH,MAAa,iBAAiB;IACX,IAAI,CAAgB;IACpB,YAAY,CAAS;IAEtC,YAAY,OAAiC;QAC3C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,UAAkB,EAAE,aAAqB;QACnD,IAAA,mBAAY,EAAC,UAAU,CAAC,CAAC;QACzB,MAAM,SAAS,GAAG,GAAG,aAAa,IAAI,UAAU,EAAE,CAAC;QACnD,OAAO,IAAA,2BAAgB,EAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAED,yEAAyE;IACzE,OAAO;QACL,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,UAAkB;QACtC,IAAA,yBAAc,EAAC,UAAU,CAAC,CAAC;QAC3B,IAAA,mBAAY,EAAC,UAAU,CAAC,CAAC;QAEzB,MAAM,SAAS,GAAG,IAAA,2BAAgB,EAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtD,6DAA6D;QAC7D,MAAM,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACvC,oBAAoB,SAAS,SAAS,EACtC,CAAC,OAAO,CAAC,CACkC,CAAC;QAE9C,MAAM,MAAM,GAA0B,EAAE,CAAC;QACzC,IAAI,eAAe,GAAG,CAAC,CAAC;QAExB,MAAM,WAAW,GAAG,IAAI,UAAU,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,IAAI,CAAC,SAAS;gBAAE,SAAS;YACzB,+EAA+E;YAC/E,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAAE,SAAS;YAC/C,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,wBAAwB,SAAS,IAAI,IAAA,2BAAgB,EAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAC1F,eAAe,EAAE,CAAC;YACpB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAY,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC5B,eAAe;YACf,WAAW,EAAE,CAAC;YACd,MAAM;SACP,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,QAAQ;QACN,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC1C,CAAC;CACF;AAjED,8CAiEC"}
+{"version":3,"file":"table.js","sourceRoot":"","sources":["../../src/adapters/table.ts"],"names":[],"mappings":";;;AAAA,2CAAgD;AAQhD,0CAA+D;AAE/D;;;;;GAKG;AACH,MAAa,iBAAiB;IACX,IAAI,CAAgB;IACpB,YAAY,CAAS;IACrB,UAAU,CAAuB;IAElD,YAAY,OAAiC;QAC3C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBACnC,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;oBACnC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC;wBACtD,MAAM,IAAI,KAAK,CACb,mCAAmC,CAAC,UAAU,CAAC,mBAAmB;4BAChE,YAAY,CAAC,iCAAiC,CAAC,UAAU,CAC5D,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,CAAC,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,UAAkB,EAAE,aAAqB;QACnD,IAAA,mBAAY,EAAC,UAAU,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,uBAAuB,aAAa,wBAAwB,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,aAAa,IAAI,UAAU,EAAE,CAAC;QACnD,OAAO,IAAA,2BAAgB,EAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAED,yEAAyE;IACzE,OAAO;QACL,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CAAC,UAAkB;QACtC,IAAA,yBAAc,EAAC,UAAU,CAAC,CAAC;QAC3B,IAAA,mBAAY,EAAC,UAAU,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,qEAAqE;gBACnE,0DAA0D,CAC7D,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,IAAA,2BAAgB,EAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,MAAM,GAA0B,EAAE,CAAC;QACzC,IAAI,eAAe,GAAG,CAAC,CAAC;QAExB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,wBAAwB,SAAS,IAAI,IAAA,2BAAgB,EAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAC1F,eAAe,EAAE,CAAC;YACpB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAY,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC5B,eAAe;YACf,WAAW,EAAE,CAAC;YACd,MAAM;SACP,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,QAAQ;QACN,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC1C,CAAC;CACF;AAlFD,8CAkFC"}

package/dist/index.d.ts

@@ -5,7 +5,7 @@ export { MysqlDatabaseAdapter } from "./adapters/database.js";
 export { MysqlPoolManager } from "./pool-manager.js";
 export { createTenantView, dropTenantView, setTenantSession } from "./views/manager.js";
 export { StratumTypeOrmSubscriber } from "./integrations/typeorm-subscriber.js";
-export type { InsertEvent, EntitySubscriberInterface } from "./integrations/typeorm-subscriber.js";
+export type { InsertEvent, UpdateEvent, EntitySubscriberInterface } from "./integrations/typeorm-subscriber.js";
 export { withTenantScope } from "./integrations/knex.js";
 export type { KnexLike, KnexQueryBuilderLike } from "./integrations/knex.js";
 export { withMysqlTenantScope } from "./integrations/sequelize.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,YAAY,EACV,mBAAmB,EACnB,aAAa,EACb,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAG9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGrD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAChF,YAAY,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACnG,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,YAAY,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAGjE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,YAAY,EACV,mBAAmB,EACnB,aAAa,EACb,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAG9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGrD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAChF,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AAChH,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,YAAY,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAGjE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC"}

package/dist/integrations/knex.d.ts

@@ -11,11 +11,21 @@ export interface KnexLike {
 }
 /**
  * Returns a wrapper function that pre-scopes queries to the given tenant.
- * Call the returned function with a table name to get a WHERE tenant_id = ? builder.
+ * Call the returned function with a table name to get a builder whose query
+ * always compiles to `WHERE tenant_id = ? AND (<your where clauses>)`.
+ *
+ * The caller's where clauses (including orWhere, whereRaw and clearWhere) are
+ * kept together in one parenthesized group, so they cannot widen the query
+ * past the tenant. This also holds for clones and for the builder used as a
+ * subquery.
  *
  * INSERT operations automatically inject tenant_id into the data object, so
  * you do not need to include it yourself:
  *   await scoped("users").insert({ name: "Alice" });
+ *
+ * UPDATE never changes tenant_id: the column is dropped from the update data.
+ * onConflict().merge(), upsert() and truncate() throw, because MySQL applies
+ * none of them through the WHERE clause. onConflict().ignore() is allowed.
  */
 export declare function withTenantScope(knex: KnexLike, tenantId: string): (tableName: string) => KnexQueryBuilderLike;
 //# sourceMappingURL=knex.d.ts.map

package/dist/integrations/knex.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"knex.d.ts","sourceRoot":"","sources":["../../src/integrations/knex.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;IACvC,MAAM,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAChC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpF,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5C,MAAM,IAAI,IAAI,CAAC;IACf,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,QAAQ;IACvB,CAAC,SAAS,EAAE,MAAM,GAAG,oBAAoB,CAAC;CAC3C;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,MAAM,GACf,CAAC,SAAS,EAAE,MAAM,KAAK,oBAAoB,CAW7C"}
+{"version":3,"file":"knex.d.ts","sourceRoot":"","sources":["../../src/integrations/knex.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;IACvC,MAAM,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAChC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpF,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5C,MAAM,IAAI,IAAI,CAAC;IACf,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,QAAQ;IACvB,CAAC,SAAS,EAAE,MAAM,GAAG,oBAAoB,CAAC;CAC3C;AA8BD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,MAAM,GACf,CAAC,SAAS,EAAE,MAAM,KAAK,oBAAoB,CAwI7C"}

package/dist/integrations/knex.js

@@ -2,24 +2,162 @@
 // ─── Structural type for Knex (no hard dependency on knex) ───
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.withTenantScope = withTenantScope;
+const TENANT_COLUMN = "tenant_id";
+/** Builder methods that would write or destroy rows without the tenant filter. */
+const REFUSED_METHODS = new Set(["upsert", "truncate"]);
+function isTenantColumn(name) {
+    return name.toLowerCase() === TENANT_COLUMN;
+}
+function withoutTenantColumn(row) {
+    const copy = {};
+    for (const [key, value] of Object.entries(row)) {
+        if (!isTenantColumn(key))
+            copy[key] = value;
+    }
+    return copy;
+}
 /**
  * Returns a wrapper function that pre-scopes queries to the given tenant.
- * Call the returned function with a table name to get a WHERE tenant_id = ? builder.
+ * Call the returned function with a table name to get a builder whose query
+ * always compiles to `WHERE tenant_id = ? AND (<your where clauses>)`.
+ *
+ * The caller's where clauses (including orWhere, whereRaw and clearWhere) are
+ * kept together in one parenthesized group, so they cannot widen the query
+ * past the tenant. This also holds for clones and for the builder used as a
+ * subquery.
  *
  * INSERT operations automatically inject tenant_id into the data object, so
  * you do not need to include it yourself:
  *   await scoped("users").insert({ name: "Alice" });
+ *
+ * UPDATE never changes tenant_id: the column is dropped from the update data.
+ * onConflict().merge(), upsert() and truncate() throw, because MySQL applies
+ * none of them through the WHERE clause. onConflict().ignore() is allowed.
  */
 function withTenantScope(knex, tenantId) {
-    return (tableName) => {
-        const builder = knex(tableName).where("tenant_id", tenantId);
-        const originalInsert = builder.insert.bind(builder);
-        builder.insert = (data) => {
-            const inject = (row) => ({ ...row, tenant_id: tenantId });
-            const scoped = Array.isArray(data) ? data.map(inject) : inject(data);
-            return originalInsert(scoped);
+    // Statement objects this module created, so they can be recognized again on
+    // clones, which copy the statement array but share the statement objects.
+    const tenantStatements = new WeakSet();
+    const groupedStatements = new WeakMap();
+    function normalize(builder) {
+        const statements = builder._statements;
+        const others = [];
+        let userWheres = [];
+        for (const stmt of statements) {
+            if (stmt.grouping !== "where") {
+                others.push(stmt);
+            }
+            else if (tenantStatements.has(stmt)) {
+                continue;
+            }
+            else if (groupedStatements.has(stmt)) {
+                userWheres = [...userWheres, ...groupedStatements.get(stmt)];
+            }
+            else {
+                userWheres = [...userWheres, stmt];
+            }
+        }
+        const tenantStmt = {
+            grouping: "where",
+            type: "whereBasic",
+            column: TENANT_COLUMN,
+            operator: "=",
+            value: tenantId,
+            not: false,
+            bool: "and",
+            asColumn: false,
         };
-        return builder;
-    };
+        tenantStatements.add(tenantStmt);
+        const next = [...others, tenantStmt];
+        if (userWheres.length > 0) {
+            const captured = userWheres;
+            const groupStmt = {
+                grouping: "where",
+                type: "whereWrapped",
+                value: function () {
+                    this._statements.push(...captured);
+                },
+                not: false,
+                bool: "and",
+            };
+            groupedStatements.set(groupStmt, captured);
+            next.push(groupStmt);
+        }
+        builder._statements = next;
+    }
+    function scope(target) {
+        // Knex methods call other methods on `this`. Only the outermost call is
+        // intercepted and normalized, so a statement array is never swapped out
+        // while a Knex method is still writing to it.
+        let depth = 0;
+        const proxy = new Proxy(target, {
+            get(obj, prop, receiver) {
+                const value = Reflect.get(obj, prop, receiver);
+                if (typeof value !== "function" || typeof prop !== "string" || prop === "constructor") {
+                    return value;
+                }
+                if (REFUSED_METHODS.has(prop)) {
+                    return () => {
+                        throw new Error(`withTenantScope: ${prop}() is not allowed on a tenant-scoped builder, ` +
+                            `because MySQL does not apply the tenant filter to it`);
+                    };
+                }
+                if (depth > 0) {
+                    return (...args) => value.apply(proxy, args);
+                }
+                if (prop === "onConflict") {
+                    return (...args) => {
+                        const onConflict = value.apply(proxy, args);
+                        return {
+                            ignore: () => onConflict.ignore(),
+                            merge: () => {
+                                throw new Error("withTenantScope: onConflict().merge() is not allowed on a tenant-scoped builder, " +
+                                    "because MySQL does not apply the tenant filter to it");
+                            },
+                        };
+                    };
+                }
+                return (...args) => {
+                    if (prop === "insert") {
+                        const data = args[0];
+                        const inject = (row) => ({ ...row, tenant_id: tenantId });
+                        args[0] = Array.isArray(data) ? data.map(inject) : inject(data);
+                    }
+                    else if (prop === "update") {
+                        if (typeof args[0] === "string") {
+                            if (isTenantColumn(args[0])) {
+                                throw new Error(`withTenantScope: update() cannot change ${TENANT_COLUMN}`);
+                            }
+                        }
+                        else if (args[0] && typeof args[0] === "object") {
+                            args[0] = withoutTenantColumn(args[0]);
+                        }
+                    }
+                    else if (prop === "increment" || prop === "decrement") {
+                        const cols = typeof args[0] === "string" ? [args[0]] : Object.keys((args[0] ?? {}));
+                        if (cols.some(isTenantColumn)) {
+                            throw new Error(`withTenantScope: ${prop}() cannot change ${TENANT_COLUMN}`);
+                        }
+                    }
+                    normalize(obj);
+                    let result;
+                    depth++;
+                    try {
+                        result = value.apply(proxy, args);
+                    }
+                    finally {
+                        depth--;
+                    }
+                    normalize(obj);
+                    if (prop === "clone")
+                        return scope(result);
+                    return result === obj ? proxy : result;
+                };
+            },
+        });
+        normalize(target);
+        return proxy;
+    }
+    return (tableName) => scope(knex(tableName));
 }
 //# sourceMappingURL=knex.js.map

package/dist/integrations/knex.js.map

@@ -1 +1 @@
-{"version":3,"file":"knex.js","sourceRoot":"","sources":["../../src/integrations/knex.ts"],"names":[],"mappings":";AAAA,gEAAgE;;AAuBhE,0CAcC;AAtBD;;;;;;;GAOG;AACH,SAAgB,eAAe,CAC7B,IAAc,EACd,QAAgB;IAEhB,OAAO,CAAC,SAAiB,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC7D,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAyD,EAAE,EAAE;YAC7E,MAAM,MAAM,GAAG,CAAC,GAA4B,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnF,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACrE,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"knex.js","sourceRoot":"","sources":["../../src/integrations/knex.ts"],"names":[],"mappings":";AAAA,gEAAgE;;AA6DhE,0CA2IC;AA9KD,MAAM,aAAa,GAAG,WAAW,CAAC;AAElC,kFAAkF;AAClF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AAExD,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC;AAC9C,CAAC;AAED,SAAS,mBAAmB,CAAC,GAA4B;IACvD,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,eAAe,CAC7B,IAAc,EACd,QAAgB;IAEhB,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,gBAAgB,GAAG,IAAI,OAAO,EAAU,CAAC;IAC/C,MAAM,iBAAiB,GAAG,IAAI,OAAO,EAA2B,CAAC;IAEjE,SAAS,SAAS,CAAC,OAA6B;QAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,MAAM,MAAM,GAAoB,EAAE,CAAC;QACnC,IAAI,UAAU,GAAoB,EAAE,CAAC;QAErC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;iBAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtC,SAAS;YACX,CAAC;iBAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,UAAU,GAAG,CAAC,GAAG,UAAU,EAAE,GAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAqB,CAAC,CAAC;YACpF,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG,CAAC,GAAG,UAAU,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAkB;YAChC,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,aAAa;YACrB,QAAQ,EAAE,GAAG;YACb,KAAK,EAAE,QAAQ;YACf,GAAG,EAAE,KAAK;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,KAAK;SAChB,CAAC;QACF,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,CAAC,GAAG,MAAM,EAAE,UAAU,CAAC,CAAC;QAErC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,UAAU,CAAC;YAC5B,MAAM,SAAS,GAAkB;gBAC/B,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,cAAc;gBACpB,KAAK,EAAE;oBACL,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;gBACrC,CAAC;gBACD,GAAG,EAAE,KAAK;gBACV,IAAI,EAAE,KAAK;aACZ,CAAC;YACF,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvB,CAAC;QAED,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,SAAS,KAAK,CAAC,MAA4B;QACzC,wEAAwE;QACxE,wEAAwE;QACxE,8CAA8C;QAC9C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,KAAK,GAAyB,IAAI,KAAK,CAAC,MAAM,EAAE;YACpD,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ;gBACrB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC/C,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;oBACtF,OAAO,KAAK,CAAC;gBACf,CAAC;gBAED,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9B,OAAO,GAAG,EAAE;wBACV,MAAM,IAAI,KAAK,CACb,oBAAoB,IAAI,gDAAgD;4BACtE,sDAAsD,CACzD,CAAC;oBACJ,CAAC,CAAC;gBACJ,CAAC;gBAED,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;oBACd,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE,CAAE,KAAsC,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAC5F,CAAC;gBAED,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC1B,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE;wBAC5B,MAAM,UAAU,GAAI,KAAoD,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;wBAC5F,OAAO;4BACL,MAAM,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE;4BACjC,KAAK,EAAE,GAAG,EAAE;gCACV,MAAM,IAAI,KAAK,CACb,mFAAmF;oCACjF,sDAAsD,CACzD,CAAC;4BACJ,CAAC;yBACF,CAAC;oBACJ,CAAC,CAAC;gBACJ,CAAC;gBAED,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE;oBAC5B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACtB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAwD,CAAC;wBAC5E,MAAM,MAAM,GAAG,CAAC,GAA4B,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;wBACnF,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAClE,CAAC;yBAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC7B,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;4BAChC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gCAC5B,MAAM,IAAI,KAAK,CAAC,2CAA2C,aAAa,EAAE,CAAC,CAAC;4BAC9E,CAAC;wBACH,CAAC;6BAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;4BAClD,IAAI,CAAC,CAAC,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAA4B,CAAC,CAAC;wBACpE,CAAC;oBACH,CAAC;yBAAM,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;wBACxD,MAAM,IAAI,GACR,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAW,CAAC,CAAC;wBACnF,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;4BAC9B,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,oBAAoB,aAAa,EAAE,CAAC,CAAC;wBAC/E,CAAC;oBACH,CAAC;oBAED,SAAS,CAAC,GAAG,CAAC,CAAC;oBACf,IAAI,MAAe,CAAC;oBACpB,KAAK,EAAE,CAAC;oBACR,IAAI,CAAC;wBACH,MAAM,GAAI,KAAsC,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;oBACtE,CAAC;4BAAS,CAAC;wBACT,KAAK,EAAE,CAAC;oBACV,CAAC;oBACD,SAAS,CAAC,GAAG,CAAC,CAAC;oBAEf,IAAI,IAAI,KAAK,OAAO;wBAAE,OAAO,KAAK,CAAC,MAA8B,CAAC,CAAC;oBACnE,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;gBACzC,CAAC,CAAC;YACJ,CAAC;SACF,CAAC,CAAC;QACH,SAAS,CAAC,MAAM,CAAC,CAAC;QAClB,OAAO,KAAwC,CAAC;IAClD,CAAC;IAED,OAAO,CAAC,SAAiB,EAAE,EAAE,CAC3B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAoC,CAAC,CAAC;AAC9D,CAAC"}

package/dist/integrations/sequelize.d.ts

@@ -4,9 +4,13 @@ export interface SequelizeLike {
 }
 /**
  * Runs fn inside a session-variable scope for MySQL tenant isolation.
- * Uses a Sequelize transaction to guarantee all queries (SET, user queries,
- * SET NULL) run on the same pooled connection. The finally block clears the
- * session variable even if fn throws.
+ * Sets @stratum_tenant_id inside a Sequelize transaction and clears it in a
+ * finally block, even if fn throws.
+ *
+ * The variable exists only on the transaction's connection. fn receives that
+ * transaction as its second argument, and every query inside fn must pass it
+ * (`{ transaction }`); a query without it runs on another pooled connection
+ * where the variable is not set.
  */
-export declare function withMysqlTenantScope<T>(sequelize: SequelizeLike, tenantId: string, fn: (sequelize: SequelizeLike) => Promise<T>): Promise<T>;
+export declare function withMysqlTenantScope<T>(sequelize: SequelizeLike, tenantId: string, fn: (sequelize: SequelizeLike, transaction: unknown) => Promise<T>): Promise<T>;
 //# sourceMappingURL=sequelize.d.ts.map

package/dist/integrations/sequelize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sequelize.d.ts","sourceRoot":"","sources":["../../src/integrations/sequelize.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAC5D;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,CAAC,EAC1C,SAAS,EAAE,aAAa,EACxB,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,CAAC,SAAS,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAC3C,OAAO,CAAC,CAAC,CAAC,CAYZ"}
+{"version":3,"file":"sequelize.d.ts","sourceRoot":"","sources":["../../src/integrations/sequelize.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAC5D;AAED;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CAAC,CAAC,EAC1C,SAAS,EAAE,aAAa,EACxB,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,GACjE,OAAO,CAAC,CAAC,CAAC,CAYZ"}

package/dist/integrations/sequelize.js

@@ -4,9 +4,13 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.withMysqlTenantScope = withMysqlTenantScope;
 /**
  * Runs fn inside a session-variable scope for MySQL tenant isolation.
- * Uses a Sequelize transaction to guarantee all queries (SET, user queries,
- * SET NULL) run on the same pooled connection. The finally block clears the
- * session variable even if fn throws.
+ * Sets @stratum_tenant_id inside a Sequelize transaction and clears it in a
+ * finally block, even if fn throws.
+ *
+ * The variable exists only on the transaction's connection. fn receives that
+ * transaction as its second argument, and every query inside fn must pass it
+ * (`{ transaction }`); a query without it runs on another pooled connection
+ * where the variable is not set.
  */
 async function withMysqlTenantScope(sequelize, tenantId, fn) {
     return sequelize.transaction(async (transaction) => {
@@ -15,7 +19,7 @@ async function withMysqlTenantScope(sequelize, tenantId, fn) {
             transaction,
         });
         try {
-            return await fn(sequelize);
+            return await fn(sequelize, transaction);
         }
         finally {
             await sequelize.query("SET @stratum_tenant_id = NULL", { transaction });

package/dist/integrations/sequelize.js.map

@@ -1 +1 @@
-{"version":3,"file":"sequelize.js","sourceRoot":"","sources":["../../src/integrations/sequelize.ts"],"names":[],"mappings":";AAAA,6DAA6D;;AAa7D,oDAgBC;AAtBD;;;;;GAKG;AACI,KAAK,UAAU,oBAAoB,CACxC,SAAwB,EACxB,QAAgB,EAChB,EAA4C;IAE5C,OAAO,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE;QACjD,MAAM,SAAS,CAAC,KAAK,CAAC,4BAA4B,EAAE;YAClD,YAAY,EAAE,CAAC,QAAQ,CAAC;YACxB,WAAW;SACZ,CAAC,CAAC;QACH,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;gBAAS,CAAC;YACT,MAAM,SAAS,CAAC,KAAK,CAAC,+BAA+B,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"sequelize.js","sourceRoot":"","sources":["../../src/integrations/sequelize.ts"],"names":[],"mappings":";AAAA,6DAA6D;;AAiB7D,oDAgBC;AA1BD;;;;;;;;;GASG;AACI,KAAK,UAAU,oBAAoB,CACxC,SAAwB,EACxB,QAAgB,EAChB,EAAkE;IAElE,OAAO,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE;QACjD,MAAM,SAAS,CAAC,KAAK,CAAC,4BAA4B,EAAE;YAClD,YAAY,EAAE,CAAC,QAAQ,CAAC;YACxB,WAAW;SACZ,CAAC,CAAC;QACH,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC1C,CAAC;gBAAS,CAAC;YACT,MAAM,SAAS,CAAC,KAAK,CAAC,+BAA+B,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/integrations/typeorm-subscriber.d.ts

@@ -1,11 +1,29 @@
 export interface InsertEvent {
     entity: Record<string, unknown>;
 }
+export interface UpdateEvent {
+    /** The entity being saved, or the SET values of a query builder / repository update. */
+    entity?: Record<string, unknown> | null;
+    /** The row as loaded from the database, when TypeORM has it (save()). */
+    databaseEntity?: Record<string, unknown> | null;
+    metadata?: {
+        columns: {
+            propertyName: string;
+            databaseName: string;
+        }[];
+    };
+}
 export interface EntitySubscriberInterface {
     beforeInsert?(event: InsertEvent): void | Promise<void>;
+    beforeUpdate?(event: UpdateEvent): void | Promise<void>;
 }
 /**
- * TypeORM subscriber that injects tenant_id into inserted entities via ALS.
+ * TypeORM subscriber that injects tenant_id into inserted entities via ALS and
+ * never lets an update change tenant_id.
+ *
+ * Register an instance after the data source is initialized:
+ * `dataSource.subscribers.push(new StratumTypeOrmSubscriber())`. TypeORM's
+ * `subscribers` option only loads classes decorated with `@EventSubscriber()`.
  *
  * Known limitation: TypeORM subscribers cannot intercept query filtering.
  * This subscriber handles writes only. Use the shared-table adapter's
@@ -14,5 +32,12 @@ export interface EntitySubscriberInterface {
 export declare class StratumTypeOrmSubscriber implements EntitySubscriberInterface {
     /** Injects the current tenant's ID into the entity before insert. */
     beforeInsert(event: InsertEvent): void;
+    /**
+     * Keeps tenant_id out of an update. On save() the loaded value is restored,
+     * so the column is unchanged; on a repository or query builder update the
+     * column is dropped from the SET values (MySQL column names are
+     * case-insensitive, so any letter case is dropped).
+     */
+    beforeUpdate(event: UpdateEvent): void;
 }
 //# sourceMappingURL=typeorm-subscriber.d.ts.map

package/dist/integrations/typeorm-subscriber.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"typeorm-subscriber.d.ts","sourceRoot":"","sources":["../../src/integrations/typeorm-subscriber.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,yBAAyB;IACxC,YAAY,CAAC,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzD;AAED;;;;;;GAMG;AACH,qBAAa,wBAAyB,YAAW,yBAAyB;IACxE,qEAAqE;IACrE,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;CAKvC"}
+{"version":3,"file":"typeorm-subscriber.d.ts","sourceRoot":"","sources":["../../src/integrations/typeorm-subscriber.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,WAAW;IAC1B,wFAAwF;IACxF,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxC,yEAAyE;IACzE,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAChD,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE;YAAE,YAAY,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KAAE,CAAC;CAC1E;AAED,MAAM,WAAW,yBAAyB;IACxC,YAAY,CAAC,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,YAAY,CAAC,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzD;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,wBAAyB,YAAW,yBAAyB;IACxE,qEAAqE;IACrE,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;IAMtC;;;;;OAKG;IACH,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;CAsBvC"}

package/dist/integrations/typeorm-subscriber.js

@@ -4,7 +4,12 @@ exports.StratumTypeOrmSubscriber = void 0;
 const sdk_1 = require("@stratum-hq/sdk");
 const utils_js_1 = require("../utils.js");
 /**
- * TypeORM subscriber that injects tenant_id into inserted entities via ALS.
+ * TypeORM subscriber that injects tenant_id into inserted entities via ALS and
+ * never lets an update change tenant_id.
+ *
+ * Register an instance after the data source is initialized:
+ * `dataSource.subscribers.push(new StratumTypeOrmSubscriber())`. TypeORM's
+ * `subscribers` option only loads classes decorated with `@EventSubscriber()`.
  *
  * Known limitation: TypeORM subscribers cannot intercept query filtering.
  * This subscriber handles writes only. Use the shared-table adapter's
@@ -17,6 +22,32 @@ class StratumTypeOrmSubscriber {
         (0, utils_js_1.assertTenantId)(context.tenant_id);
         event.entity["tenant_id"] = context.tenant_id;
     }
+    /**
+     * Keeps tenant_id out of an update. On save() the loaded value is restored,
+     * so the column is unchanged; on a repository or query builder update the
+     * column is dropped from the SET values (MySQL column names are
+     * case-insensitive, so any letter case is dropped).
+     */
+    beforeUpdate(event) {
+        const entity = event.entity;
+        if (!entity)
+            return;
+        const tenantProps = new Set(Object.keys(entity).filter((key) => key.toLowerCase() === "tenant_id"));
+        for (const column of event.metadata?.columns ?? []) {
+            if (column.databaseName.toLowerCase() === "tenant_id" && column.propertyName in entity) {
+                tenantProps.add(column.propertyName);
+            }
+        }
+        for (const prop of tenantProps) {
+            const loaded = event.databaseEntity;
+            if (loaded && prop in loaded) {
+                entity[prop] = loaded[prop];
+            }
+            else {
+                delete entity[prop];
+            }
+        }
+    }
 }
 exports.StratumTypeOrmSubscriber = StratumTypeOrmSubscriber;
 //# sourceMappingURL=typeorm-subscriber.js.map

package/dist/integrations/typeorm-subscriber.js.map

@@ -1 +1 @@
-{"version":3,"file":"typeorm-subscriber.js","sourceRoot":"","sources":["../../src/integrations/typeorm-subscriber.ts"],"names":[],"mappings":";;;AAAA,yCAAmD;AACnD,0CAA6C;AAY7C;;;;;;GAMG;AACH,MAAa,wBAAwB;IACnC,qEAAqE;IACrE,YAAY,CAAC,KAAkB;QAC7B,MAAM,OAAO,GAAG,IAAA,sBAAgB,GAAE,CAAC;QACnC,IAAA,yBAAc,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IAChD,CAAC;CACF;AAPD,4DAOC"}
+{"version":3,"file":"typeorm-subscriber.js","sourceRoot":"","sources":["../../src/integrations/typeorm-subscriber.ts"],"names":[],"mappings":";;;AAAA,yCAAmD;AACnD,0CAA6C;AAqB7C;;;;;;;;;;;GAWG;AACH,MAAa,wBAAwB;IACnC,qEAAqE;IACrE,YAAY,CAAC,KAAkB;QAC7B,MAAM,OAAO,GAAG,IAAA,sBAAgB,GAAE,CAAC;QACnC,IAAA,yBAAc,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,KAAkB;QAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,CACvE,CAAC;QACF,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,WAAW,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,EAAE,CAAC;gBACvF,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC;YACpC,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;CACF;AApCD,4DAoCC"}

package/dist/types.d.ts

@@ -37,6 +37,14 @@ export interface MysqlTableAdapterOptions {
     pool: MysqlPoolLike;
     /** The database name to use. */
     databaseName: string;
+    /**
+     * Every base table name that has a per-tenant copy. Required by
+     * purgeTenantData, which drops exactly `{base}_{slug}` for each entry and
+     * nothing else. When set, scopedTable only accepts these base names.
+     * No entry may be another entry followed by `_`, since `{base}_{slug}` would
+     * then be ambiguous between two tenants.
+     */
+    baseTables?: string[];
 }
 export interface MysqlDatabaseAdapterOptions {
     /** Factory function to create a new pool for a connection URI. */

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,OAAO,IAAI,IAAI,CAAC;IAChB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9C,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAID,MAAM,WAAW,YAAY;IAC3B,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1D,QAAQ,IAAI,YAAY,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAID,MAAM,WAAW,yBAAyB;IACxC,yCAAyC;IACzC,IAAI,EAAE,aAAa,CAAC;IACpB,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,yCAAyC;IACzC,IAAI,EAAE,aAAa,CAAC;IACpB,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,2BAA2B;IAC1C,kEAAkE;IAClE,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpE,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,kEAAkE;IAClE,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpE,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,OAAO,IAAI,IAAI,CAAC;IAChB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9C,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAID,MAAM,WAAW,YAAY;IAC3B,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1D,QAAQ,IAAI,YAAY,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAID,MAAM,WAAW,yBAAyB;IACxC,yCAAyC;IACzC,IAAI,EAAE,aAAa,CAAC;IACpB,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,yCAAyC;IACzC,IAAI,EAAE,aAAa,CAAC;IACpB,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,2BAA2B;IAC1C,kEAAkE;IAClE,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpE,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,kEAAkE;IAClE,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpE,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB"}

package/dist/views/manager.d.ts

@@ -1,13 +1,12 @@
 import type { MysqlPoolLike, MysqlConnectionLike } from "../types.js";
 /**
- * Creates or replaces a tenant view that filters rows by a session variable.
+ * @deprecated Not supported on MySQL, and always throws.
  *
- * JSDoc caveat: Views are NOT a security boundary (unlike Postgres RLS).
- * Queries to underlying tables bypass isolation. Views referencing session
- * variables may not use indexes efficiently. Benchmark with >100k rows.
- * Use the shared-table adapter for high-performance workloads.
+ * MySQL rejects a view whose SELECT reads a user variable
+ * (ER_VIEW_SELECT_VARIABLE), so a view filtered on `@stratum_tenant_id` cannot
+ * be created. Use the shared-table adapter's scoped methods instead.
  */
-export declare function createTenantView(pool: MysqlPoolLike, tableName: string, viewName?: string): Promise<void>;
+export declare function createTenantView(_pool: MysqlPoolLike, _tableName: string, _viewName?: string): Promise<void>;
 /** Drops a tenant view if it exists. */
 export declare function dropTenantView(pool: MysqlPoolLike, viewName: string): Promise<void>;
 /**

package/dist/views/manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/views/manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGtE;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,aAAa,EACnB,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED,wCAAwC;AACxC,wBAAsB,cAAc,CAClC,IAAI,EAAE,aAAa,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,mBAAmB,EAC/B,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,OAAO,CAAC,IAAI,CAAC,CAMf"}
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/views/manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGtE;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,aAAa,EACpB,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wCAAwC;AACxC,wBAAsB,cAAc,CAClC,IAAI,EAAE,aAAa,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,mBAAmB,EAC/B,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,OAAO,CAAC,IAAI,CAAC,CAMf"}

package/dist/views/manager.js

@@ -5,20 +5,15 @@ exports.dropTenantView = dropTenantView;
 exports.setTenantSession = setTenantSession;
 const utils_js_1 = require("../utils.js");
 /**
- * Creates or replaces a tenant view that filters rows by a session variable.
+ * @deprecated Not supported on MySQL, and always throws.
  *
- * JSDoc caveat: Views are NOT a security boundary (unlike Postgres RLS).
- * Queries to underlying tables bypass isolation. Views referencing session
- * variables may not use indexes efficiently. Benchmark with >100k rows.
- * Use the shared-table adapter for high-performance workloads.
+ * MySQL rejects a view whose SELECT reads a user variable
+ * (ER_VIEW_SELECT_VARIABLE), so a view filtered on `@stratum_tenant_id` cannot
+ * be created. Use the shared-table adapter's scoped methods instead.
  */
-async function createTenantView(pool, tableName, viewName) {
-    const resolvedViewName = viewName ?? `${tableName}_tenant_view`;
-    const escapedView = (0, utils_js_1.escapeIdentifier)(resolvedViewName);
-    const escapedTable = (0, utils_js_1.escapeIdentifier)(tableName);
-    const sql = `CREATE OR REPLACE VIEW ${escapedView} AS ` +
-        `SELECT * FROM ${escapedTable} WHERE tenant_id = @stratum_tenant_id`;
-    await pool.query(sql);
+async function createTenantView(_pool, _tableName, _viewName) {
+    throw new Error("createTenantView is not supported: MySQL does not allow a view to read the " +
+        "@stratum_tenant_id session variable. Use MysqlSharedAdapter's scoped methods instead.");
 }
 /** Drops a tenant view if it exists. */
 async function dropTenantView(pool, viewName) {

package/dist/views/manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../src/views/manager.ts"],"names":[],"mappings":";;AAWA,4CAcC;AAGD,wCAMC;AAMD,4CASC;AAhDD,0CAA+C;AAE/C;;;;;;;GAOG;AACI,KAAK,UAAU,gBAAgB,CACpC,IAAmB,EACnB,SAAiB,EACjB,QAAiB;IAEjB,MAAM,gBAAgB,GAAG,QAAQ,IAAI,GAAG,SAAS,cAAc,CAAC;IAChE,MAAM,WAAW,GAAG,IAAA,2BAAgB,EAAC,gBAAgB,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,IAAA,2BAAgB,EAAC,SAAS,CAAC,CAAC;IAEjD,MAAM,GAAG,GACP,0BAA0B,WAAW,MAAM;QAC3C,iBAAiB,YAAY,uCAAuC,CAAC;IAEvE,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AAED,wCAAwC;AACjC,KAAK,UAAU,cAAc,CAClC,IAAmB,EACnB,QAAgB;IAEhB,MAAM,WAAW,GAAG,IAAA,2BAAgB,EAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,WAAW,EAAE,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,gBAAgB,CACpC,UAA+B,EAC/B,QAAuB;IAEvB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,UAAU,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAC5D,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,CAAC,OAAO,CAAC,4BAA4B,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,CAAC;AACH,CAAC"}
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../src/views/manager.ts"],"names":[],"mappings":";;AAUA,4CASC;AAGD,wCAMC;AAMD,4CASC;AA1CD,0CAA+C;AAE/C;;;;;;GAMG;AACI,KAAK,UAAU,gBAAgB,CACpC,KAAoB,EACpB,UAAkB,EAClB,SAAkB;IAElB,MAAM,IAAI,KAAK,CACb,6EAA6E;QAC3E,uFAAuF,CAC1F,CAAC;AACJ,CAAC;AAED,wCAAwC;AACjC,KAAK,UAAU,cAAc,CAClC,IAAmB,EACnB,QAAgB;IAEhB,MAAM,WAAW,GAAG,IAAA,2BAAgB,EAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,WAAW,EAAE,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,gBAAgB,CACpC,UAA+B,EAC/B,QAAuB;IAEvB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,UAAU,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAC5D,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,CAAC,OAAO,CAAC,4BAA4B,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stratum-hq/mysql",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "MySQL tenant isolation for Stratum — shared table, table-per-tenant, and database-per-tenant strategies",
   "keywords": [
     "multi-tenancy",
@@ -42,7 +42,8 @@
     "@stratum-hq/sdk": "*"
   },
   "peerDependencies": {
-    "mysql2": "^3.0.0"
+    "mysql2": "^3.0.0",
+    "knex": ">=3.0.0"
   },
   "peerDependenciesMeta": {
     "typeorm": {
@@ -56,9 +57,11 @@
     }
   },
   "devDependencies": {
-    "mysql2": "^3.12.0",
+    "knex": "^3.3.0",
+    "mysql2": "^3.24.4",
+    "typeorm": "^1.1.1",
     "typescript": "^5.9.0",
-    "vitest": "^1.6.0"
+    "vitest": "^4.1.11"
   },
   "publishConfig": {
     "access": "public"