@stratum-hq/mysql 0.4.0 → 0.6.0

package/dist/integrations/typeorm-subscriber.js

@@ -2,12 +2,40 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.StratumTypeOrmSubscriber = void 0;
 exports.registerStratumSubscriber = registerStratumSubscriber;
+const node_async_hooks_1 = require("node:async_hooks");
 const sdk_1 = require("@stratum-hq/sdk");
 const utils_js_1 = require("../utils.js");
 // TypeORM writes an upsert on MySQL as INSERT ... ON DUPLICATE KEY UPDATE and
 // quotes each column with backticks.
 const UPSERT_CLAUSE = /\bON\s+DUPLICATE\s+KEY\s+UPDATE\b/i;
 const TENANT_ASSIGNMENT = /`tenant_id`\s*=/i;
+// The target of an INSERT, as TypeORM writes it: `table` or `schema`.`table`.
+const INSERT_TARGET = /^\s*INSERT\s+(?:IGNORE\s+)?INTO\s+(?:`((?:[^`]|``)+)`\.)?`((?:[^`]|``)+)`/i;
+const UPDATE_OR_DELETE = /^\s*(?:UPDATE|DELETE)\b/i;
+// The target of a TRUNCATE, as TypeORM writes it: `table` or `schema`.`table`.
+const TRUNCATE_TARGET = /^\s*TRUNCATE\s+(?:TABLE\s+)?(?:`((?:[^`]|``)+)`\.)?`?((?:[^`\s;]|``)+)`?/i;
+const TENANT_COLUMN_SQL = "SELECT COUNT(*) AS n FROM information_schema.COLUMNS " +
+    "WHERE TABLE_SCHEMA = COALESCE(?, DATABASE()) AND TABLE_NAME = ? AND LOWER(COLUMN_NAME) = 'tenant_id'";
+const TENANT_PARAMETER = "stratumTenantId";
+const SCOPED_EXECUTE = Symbol("stratum.tenantScopedExecute");
+const SCOPED_GET_QUERY = Symbol("stratum.tenantScopedGetQuery");
+const SCOPED_INSERT = Symbol("stratum.tenantScopedInsert");
+const EXEMPT_VIEW_EXPRESSION = Symbol("stratum.exemptViewExpression");
+/** Inserted values whose primary key was already checked. */
+const keyChecked = new WeakSet();
+/** Values of an upsert while its builder runs; their keys are checked in beforeQuery instead. */
+const upsertValues = new WeakSet();
+/** True while a view entity's query builder expression is being built. */
+const buildingViewExpression = new node_async_hooks_1.AsyncLocalStorage();
+/** Select query builders returned by a view entity's expression. */
+const viewExpressionBuilders = new WeakSet();
+/** The WHERE addition that addTenantCondition set on each write builder's expression map. */
+const scopedWriteConditions = new WeakMap();
+/** Data sources whose update and delete query builders are tenant-scoped. */
+const scopedDataSources = new WeakSet();
+const UNIQUE_KEYS_SQL = "SELECT INDEX_NAME AS index_name, COLUMN_NAME AS column_name " +
+    "FROM information_schema.STATISTICS " +
+    "WHERE TABLE_SCHEMA = COALESCE(?, DATABASE()) AND TABLE_NAME = ? AND NON_UNIQUE = 0";
 /**
  * TypeORM subscriber that injects tenant_id into inserted entities via ALS and
  * never lets an update change tenant_id.
@@ -15,34 +43,94 @@ const TENANT_ASSIGNMENT = /`tenant_id`\s*=/i;
  * Register it with `registerStratumSubscriber(dataSource)` after
  * `dataSource.initialize()`. TypeORM's `subscribers` option only loads classes
  * decorated with `@EventSubscriber()`, so it does not load this class.
+ * Registration also scopes TypeORM's update, delete and soft-delete query
+ * builders (repository update(), delete(), save() of an existing row, remove(),
+ * softDelete(), restore()) to the current tenant: `tenant_id = <tenant>` is
+ * ANDed to their WHERE clause, and they are refused outside a tenant context.
  *
- * Known limitation: TypeORM subscribers cannot intercept query filtering.
- * This subscriber handles writes only. Use the shared-table adapter's
- * structured methods for tenant-scoped reads.
+ * Registration scopes reads the same way. Every SQL statement that TypeORM's
+ * select query builder produces (repository find*, findOne*, count*, exists*,
+ * sum/average/min/max, preload(), query builder getMany/getOne/getRawMany/
+ * getRawOne/getCount/getManyAndCount/getExists/stream, relation loading, the
+ * row that save() loads, and the count and pagination queries TypeORM builds
+ * internally) ANDs `tenant_id = <tenant>` for the FROM entity to its WHERE
+ * clause and adds it to the ON condition of each joined entity, so a LEFT JOIN
+ * still returns the parent row. Reads of an entity with a tenant_id column are
+ * refused outside a tenant context.
+ *
+ * Not scoped: raw SQL (`dataSource.query()`, `queryRunner.query()`), SQL taken
+ * from a builder's getQuery() / getQueryAndParameters() and run by hand, reads
+ * from a table that has no entity on the data source, and many-to-many junction
+ * tables. Add the tenant condition to those yourself, or use the shared-table
+ * adapter's structured methods.
  */
 class StratumTypeOrmSubscriber {
-    /** Injects the current tenant's ID into the entity before insert. */
+    /**
+     * Injects the current tenant's ID into the entity before insert, into the
+     * property mapped to the tenant_id column.
+     *
+     * When the entity supplies its whole primary key and the insert builder has
+     * not checked it yet (save() runs this hook before the builder), the key is
+     * checked against the table first, so a save() with another tenant's key is
+     * refused rather than inserted. See checkKeyIsFree.
+     *
+     * @returns A promise that rejects when the key belongs to another tenant's row.
+     */
     beforeInsert(event) {
         const context = (0, sdk_1.getTenantContext)();
         (0, utils_js_1.assertTenantId)(context.tenant_id);
-        event.entity["tenant_id"] = context.tenant_id;
+        let key;
+        if (event.metadata && !keyChecked.has(event.entity) && !upsertValues.has(event.entity)) {
+            keyChecked.add(event.entity);
+            key = primaryKeyOf(event.metadata, event.entity);
+        }
+        setTenant(event.entity, event.metadata, context.tenant_id);
+        if (key && event.metadata && event.queryRunner) {
+            return checkKeyIsFree(event.queryRunner, event.metadata, key, context.tenant_id);
+        }
     }
     /**
      * Keeps tenant_id out of an update. On save() the loaded value is restored,
      * so the column is unchanged; on a repository or query builder update the
      * column is dropped from the SET values (MySQL column names are
      * case-insensitive, so any letter case is dropped).
+     *
+     * @throws Error when save() loaded a row whose tenant_id is not the current
+     *   tenant's. The loaded tenant_id is not copied onto the entity.
      */
     beforeUpdate(event) {
         const entity = event.entity;
         if (!entity)
             return;
+        const loaded = event.databaseEntity;
+        if (loaded) {
+            const loadedProps = new Set(Object.keys(loaded).filter((key) => key.toLowerCase() === "tenant_id"));
+            for (const column of event.metadata?.columns ?? []) {
+                if (column.databaseName.toLowerCase() === "tenant_id" && column.propertyName in loaded) {
+                    loadedProps.add(column.propertyName);
+                }
+            }
+            if (loadedProps.size > 0) {
+                const context = (0, sdk_1.getTenantContext)();
+                (0, utils_js_1.assertTenantId)(context.tenant_id);
+                for (const prop of loadedProps) {
+                    if (loaded[prop] !== context.tenant_id) {
+                        throw new Error("Stratum: save() refused, because the row belongs to another tenant.");
+                    }
+                }
+            }
+        }
         const tenantProps = new Set(Object.keys(entity).filter((key) => key.toLowerCase() === "tenant_id"));
         for (const column of event.metadata?.columns ?? []) {
             if (column.databaseName.toLowerCase() === "tenant_id" && column.propertyName in entity) {
                 tenantProps.add(column.propertyName);
             }
         }
+        // A relation whose join column is tenant_id writes that column too.
+        for (const prop of tenantRelationProps(event.metadata)) {
+            if (prop in entity)
+                tenantProps.add(prop);
+        }
         for (const prop of tenantProps) {
             const loaded = event.databaseEntity;
             if (loaded && prop in loaded) {
@@ -54,29 +142,401 @@ class StratumTypeOrmSubscriber {
         }
     }
     /**
-     * Rejects an upsert that writes tenant_id on a key conflict.
+     * Rejects an upsert that could update another tenant's row.
      *
      * A conflict update must never change the tenant of an existing row. A
      * subscriber cannot remove one column from the conflict update, so the
      * statement fails before it runs.
      *
+     * MySQL runs ON DUPLICATE KEY UPDATE on a conflict with any unique key of
+     * the table, whatever conflict columns were passed to upsert() or
+     * orUpdate(). The upsert is therefore allowed only when every unique key
+     * (including the primary key) of the target table contains tenant_id, so a
+     * conflict can only ever be with a row of the same tenant. The keys are read
+     * from information_schema through the same query runner.
+     *
      * @throws Error when the ON DUPLICATE KEY UPDATE clause assigns tenant_id.
+     * @returns A promise that rejects when a unique key of the table does not
+     *   include tenant_id, or when the table cannot be determined.
      */
     beforeQuery(event) {
+        if (event.dataSource &&
+            !scopedDataSources.has(event.dataSource) &&
+            UPDATE_OR_DELETE.test(event.query)) {
+            throw new Error("Stratum: register the subscriber with registerStratumSubscriber(dataSource), " +
+                "which scopes updates and deletes to the current tenant.");
+        }
+        if (/^\s*TRUNCATE\b/i.test(event.query))
+            return assertNotTenantTable(event);
         const clause = event.query.split(UPSERT_CLAUSE)[1];
-        if (clause !== undefined && TENANT_ASSIGNMENT.test(clause)) {
+        if (clause === undefined)
+            return;
+        if (TENANT_ASSIGNMENT.test(clause)) {
             throw new Error("Stratum: an upsert must not update tenant_id on conflict. " +
                 "Remove tenant_id from the entity values or from the orUpdate() columns.");
         }
+        return assertUniqueKeysIncludeTenant(event);
     }
 }
 exports.StratumTypeOrmSubscriber = StratumTypeOrmSubscriber;
+/**
+ * ANDs `tenant_id = <current tenant>` to the WHERE clause of an update, delete
+ * or soft-delete builder whose data source has the subscriber. Entities without
+ * a tenant_id column are left alone; a target without metadata (a table name)
+ * is treated as a tenant table.
+ */
+function addTenantCondition(builder) {
+    if (!builder.connection.subscribers.some((s) => s instanceof StratumTypeOrmSubscriber))
+        return;
+    const alias = builder.expressionMap.mainAlias;
+    let column = "tenant_id";
+    if (alias?.hasMetadata) {
+        const tenantColumn = alias.metadata.columns.find((c) => c.databaseName.toLowerCase() === "tenant_id");
+        if (!tenantColumn)
+            return;
+        column = tenantColumn.databaseName;
+    }
+    const context = (0, sdk_1.getTenantContext)();
+    (0, utils_js_1.assertTenantId)(context.tenant_id);
+    stripTenantFromUpdateValues(builder);
+    const qualified = builder.expressionMap.aliasNamePrefixingEnabled && alias
+        ? `${builder.escape(alias.name)}.${builder.escape(column)}`
+        : builder.escape(column);
+    const condition = `${qualified} = :${TENANT_PARAMETER}`;
+    const existing = builder.expressionMap.extraAppendedAndWhereCondition;
+    // A builder that is executed again already carries the condition set here.
+    if (scopedWriteConditions.get(builder.expressionMap) !== existing) {
+        // TypeORM ANDs this condition, in its own parentheses, to the caller's
+        // WHERE clause, so an orWhere() cannot widen the statement past the tenant.
+        builder.expressionMap.extraAppendedAndWhereCondition = existing
+            ? `(${existing}) AND ${condition}`
+            : condition;
+        scopedWriteConditions.set(builder.expressionMap, builder.expressionMap.extraAppendedAndWhereCondition);
+    }
+    builder.setParameter(TENANT_PARAMETER, context.tenant_id);
+}
+/**
+ * Drops tenant_id from the SET values of an update builder, so an update never
+ * moves a row to another tenant, with or without listeners (beforeUpdate).
+ */
+function stripTenantFromUpdateValues(builder) {
+    const map = builder.expressionMap;
+    const values = map.valuesSet;
+    if (map.queryType !== "update" || !values || typeof values !== "object")
+        return;
+    const alias = map.mainAlias;
+    const metadata = alias?.hasMetadata ? alias.metadata : undefined;
+    const tenantProps = new Set([
+        ...(metadata?.columns ?? []).filter((c) => c.databaseName.toLowerCase() === "tenant_id").map((c) => c.propertyName),
+        ...tenantRelationProps(metadata),
+    ]);
+    const keys = Object.keys(values);
+    const isTenantKey = (key) => key.toLowerCase() === "tenant_id" || tenantProps.has(key);
+    if (!keys.some(isTenantKey))
+        return;
+    map.valuesSet = Object.fromEntries(keys.filter((key) => !isTenantKey(key)).map((key) => [key, values[key]]));
+}
+/** Wraps execute() of TypeORM's update, delete and soft-delete query builder classes, once. */
+function scopeWriteBuilders(dataSource) {
+    const builders = [
+        dataSource.createQueryBuilder().update(),
+        dataSource.createQueryBuilder().delete(),
+        dataSource.createQueryBuilder().softDelete(),
+    ];
+    for (const builder of builders) {
+        const proto = Object.getPrototypeOf(builder);
+        if (proto[SCOPED_EXECUTE])
+            continue;
+        const original = proto.execute;
+        proto.execute = function () {
+            addTenantCondition(this);
+            return original.call(this);
+        };
+        proto[SCOPED_EXECUTE] = true;
+    }
+    scopedDataSources.add(dataSource);
+}
+/** Returns the tenant_id column of an entity's metadata, if it has one. */
+function tenantColumnIn(metadata) {
+    return metadata?.columns.find((c) => c.databaseName.toLowerCase() === "tenant_id");
+}
+/** Returns the properties of relations whose join columns include tenant_id. */
+function tenantRelationProps(metadata) {
+    return (metadata?.relations ?? [])
+        .filter((r) => (r.joinColumns ?? []).some((c) => c.databaseName.toLowerCase() === "tenant_id"))
+        .map((r) => r.propertyName);
+}
+/**
+ * Writes the tenant into the property mapped to the tenant_id column, and
+ * removes any relation whose join column is tenant_id, because TypeORM reads
+ * the column's value from such a relation first.
+ */
+function setTenant(entity, metadata, tenantId) {
+    for (const prop of tenantRelationProps(metadata))
+        delete entity[prop];
+    const column = tenantColumnIn(metadata);
+    if (!column) {
+        entity["tenant_id"] = tenantId;
+    }
+    else if (column.setEntityValue) {
+        column.setEntityValue(entity, tenantId);
+    }
+    else {
+        entity[column.propertyName] = tenantId;
+    }
+}
+/**
+ * Returns the primary key values that an entity supplies, keyed by column
+ * name. Returns undefined when the entity has no tenant_id column or any part
+ * of its primary key is missing or computed by SQL.
+ */
+function primaryKeyOf(metadata, entity) {
+    if (metadata.primaryColumns.length === 0 || !tenantColumnIn(metadata))
+        return undefined;
+    const key = new Map();
+    for (const column of metadata.primaryColumns) {
+        const value = column.getEntityValue ? column.getEntityValue(entity) : entity[column.propertyName];
+        if (value === undefined || value === null || typeof value === "function")
+            return undefined;
+        key.set(column.databaseName, value);
+    }
+    return key;
+}
+/**
+ * Refuses an insert whose primary key belongs to another tenant's row. The
+ * lookup is raw SQL, so it is not tenant-scoped, and its result is used only
+ * for this decision.
+ */
+async function checkKeyIsFree(runner, metadata, key, tenantId) {
+    const quote = (name) => "`" + name.replace(/`/g, "``") + "`";
+    const tenantColumn = tenantColumnIn(metadata);
+    const table = metadata.tablePath.split(".").map(quote).join(".");
+    const where = [...key.keys()].map((column) => `${quote(column)} = ?`).join(" AND ");
+    const rows = (await runner.query(`SELECT ${quote(tenantColumn.databaseName)} AS tenant_id FROM ${table} WHERE ${where} LIMIT 1`, [...key.values()]));
+    if (rows.length > 0 && rows[0].tenant_id !== tenantId) {
+        throw new Error("Stratum: insert refused, because a row with this primary key belongs to another tenant.");
+    }
+}
+/**
+ * Prepares an insert builder whose data source has the subscriber.
+ *
+ * - INSERT ... SELECT into a tenant entity is refused, because the tenant of
+ *   the selected rows cannot be set. Into other tables, the tenant parameter
+ *   of a scoped SELECT is copied to the insert.
+ * - Each value of a tenant entity gets the current tenant, whether or not
+ *   listeners (beforeInsert) run.
+ * - A plain insert whose value supplies its whole primary key is refused when
+ *   a row with that key belongs to another tenant. The lookup is raw SQL, so it
+ *   is not tenant-scoped, and its result is used only for this decision.
+ *   Upserts are checked in beforeQuery against the table's unique keys.
+ */
+async function prepareInsert(builder) {
+    if (!builder.connection.subscribers.some((s) => s instanceof StratumTypeOrmSubscriber))
+        return [];
+    const map = builder.expressionMap;
+    const metadata = map.mainAlias?.hasMetadata ? map.mainAlias.metadata : undefined;
+    const tenantColumn = tenantColumnIn(metadata);
+    if (map.insertFromSelect) {
+        if (tenantColumn) {
+            throw new Error("Stratum: INSERT ... SELECT into a tenant table is refused, because the tenant of the selected rows " +
+                "cannot be set. Load the rows and insert them as entities instead.");
+        }
+        if (map.insertFromSelect.getQuery().includes(`:${TENANT_PARAMETER}`)) {
+            const context = (0, sdk_1.getTenantContext)();
+            (0, utils_js_1.assertTenantId)(context.tenant_id);
+            builder.setParameter(TENANT_PARAMETER, context.tenant_id);
+        }
+        return [];
+    }
+    if (!metadata || !tenantColumn)
+        return [];
+    const context = (0, sdk_1.getTenantContext)();
+    (0, utils_js_1.assertTenantId)(context.tenant_id);
+    const values = (Array.isArray(map.valuesSet) ? map.valuesSet : [map.valuesSet]).filter((value) => !!value && typeof value === "object");
+    const runner = builder.queryRunner ?? builder.connection;
+    for (const value of values) {
+        if (map.onUpdate || map.onIgnore) {
+            upsertValues.add(value);
+        }
+        else if (!keyChecked.has(value)) {
+            keyChecked.add(value);
+            const key = primaryKeyOf(metadata, value);
+            if (key)
+                await checkKeyIsFree(runner, metadata, key, context.tenant_id);
+        }
+        setTenant(value, metadata, context.tenant_id);
+    }
+    return values;
+}
+/** Returns the tenant_id column of an entity alias, or undefined when it has none. */
+function tenantColumnOf(alias) {
+    if (!alias || alias.subQuery || !alias.hasMetadata)
+        return undefined;
+    return alias.metadata.columns.find((c) => c.databaseName.toLowerCase() === "tenant_id")?.databaseName;
+}
+/**
+ * Builds the SQL of a select query builder whose data source has the
+ * subscriber, with `tenant_id = <current tenant>` ANDed to the WHERE clause for
+ * the FROM entity and to the ON condition of each joined entity that has a
+ * tenant_id column. The conditions are added only while the SQL is built and
+ * removed afterwards, so a builder that is built again, cloned, or used as a
+ * subquery never carries the condition twice.
+ */
+function buildScopedSelect(builder, build) {
+    if (!builder.connection.subscribers.some((s) => s instanceof StratumTypeOrmSubscriber))
+        return build();
+    // A view's definition is a schema object, built by synchronize() outside any
+    // tenant context. Reads from the view entity are scoped like any entity.
+    if (buildingViewExpression.getStore() || viewExpressionBuilders.has(builder))
+        return build();
+    const map = builder.expressionMap;
+    const condition = (alias, column) => `${builder.escape(alias.name)}.${builder.escape(column)} = :${TENANT_PARAMETER}`;
+    const mainColumn = tenantColumnOf(map.mainAlias);
+    const joins = map.joinAttributes
+        .map((join) => ({ join, column: tenantColumnOf(join.alias) }))
+        .filter((entry) => entry.column !== undefined);
+    const setTenantParameter = () => {
+        const context = (0, sdk_1.getTenantContext)();
+        (0, utils_js_1.assertTenantId)(context.tenant_id);
+        builder.setParameter(TENANT_PARAMETER, context.tenant_id);
+    };
+    if (mainColumn === undefined && joins.length === 0) {
+        const sql = build();
+        // SQL built by another scoped builder can be embedded here, for example
+        // TypeORM's pagination query, which selects from a clone of the builder.
+        if (sql.includes(`:${TENANT_PARAMETER}`))
+            setTenantParameter();
+        return sql;
+    }
+    setTenantParameter();
+    const extra = map.extraAppendedAndWhereCondition;
+    const joinConditions = joins.map(({ join }) => join.condition);
+    try {
+        if (mainColumn !== undefined) {
+            const main = condition(map.mainAlias, mainColumn);
+            // TypeORM ANDs this condition, in its own parentheses, to the caller's
+            // WHERE clause, so an orWhere() cannot widen the read past the tenant.
+            map.extraAppendedAndWhereCondition = extra ? `(${extra}) AND ${main}` : main;
+        }
+        for (const { join, column } of joins) {
+            // In the ON condition rather than the WHERE clause, so a LEFT JOIN keeps
+            // the parent row and only drops the other tenant's joined row.
+            const own = condition(join.alias, column);
+            join.condition = join.condition ? `(${join.condition}) AND ${own}` : own;
+        }
+        return build();
+    }
+    finally {
+        map.extraAppendedAndWhereCondition = extra;
+        joins.forEach(({ join }, i) => {
+            join.condition = joinConditions[i];
+        });
+    }
+}
+/**
+ * Wraps getQuery() of TypeORM's select query builder class, once. Every read
+ * the builder runs (loadRawResults, stream, the count, exists and pagination
+ * queries, and subqueries) builds its SQL through getQuery().
+ */
+function scopeSelectBuilder(dataSource) {
+    const proto = Object.getPrototypeOf(dataSource.createQueryBuilder());
+    if (proto[SCOPED_GET_QUERY])
+        return;
+    if (!Object.prototype.hasOwnProperty.call(proto, "getQuery") || typeof proto.getQuery !== "function") {
+        throw new Error("Stratum: this TypeORM version's select query builder is not supported, so reads cannot be tenant-scoped.");
+    }
+    const original = proto.getQuery;
+    proto.getQuery = function () {
+        return buildScopedSelect(this, () => original.call(this));
+    };
+    proto[SCOPED_GET_QUERY] = true;
+}
+/** Wraps execute() of TypeORM's insert query builder class, once (see prepareInsert). */
+function scopeInsertBuilder(dataSource) {
+    const proto = Object.getPrototypeOf(dataSource.createQueryBuilder().insert());
+    if (proto[SCOPED_INSERT])
+        return;
+    const original = proto.execute;
+    proto.execute = async function () {
+        const values = await prepareInsert(this);
+        try {
+            return await original.call(this);
+        }
+        finally {
+            // An upsert's values are exempt from the key check only while it runs.
+            for (const value of values)
+                upsertValues.delete(value);
+        }
+    };
+    proto[SCOPED_INSERT] = true;
+}
+/**
+ * Marks the query builders that view entity expressions return, so that
+ * synchronize() can build the view definition without the read scope.
+ */
+function exemptViewExpressions(dataSource) {
+    for (const metadata of dataSource.entityMetadatas ?? []) {
+        const expression = metadata.expression;
+        if (typeof expression !== "function" || expression[EXEMPT_VIEW_EXPRESSION])
+            continue;
+        const exempt = Object.assign((source) => buildingViewExpression.run(true, () => {
+            const builder = expression(source);
+            viewExpressionBuilders.add(builder);
+            return builder;
+        }), { [EXEMPT_VIEW_EXPRESSION]: true });
+        metadata.expression = exempt;
+    }
+}
+/**
+ * Refuses a TRUNCATE (Repository.clear(), QueryRunner.clearTable()) of a table
+ * with a tenant_id column, because it would empty the table for every tenant.
+ * A TRUNCATE whose table cannot be checked is refused too.
+ */
+async function assertNotTenantTable(event) {
+    const target = TRUNCATE_TARGET.exec(event.query);
+    const unquote = (name) => (name === undefined ? null : name.replace(/``/g, "`"));
+    const table = target ? unquote(target[2]) : null;
+    let isTenantTable = true;
+    if (table && event.queryRunner) {
+        const rows = (await event.queryRunner.query(TENANT_COLUMN_SQL, [unquote(target?.[1]), table]));
+        isTenantTable = Number(rows[0]?.n ?? 1) > 0;
+    }
+    if (isTenantTable) {
+        throw new Error(`Stratum: TRUNCATE of "${table ?? "unknown table"}" is refused, because it would remove every tenant's rows. ` +
+            "Delete the current tenant's rows instead.");
+    }
+}
+async function assertUniqueKeysIncludeTenant(event) {
+    const target = INSERT_TARGET.exec(event.query);
+    if (!target || !event.queryRunner) {
+        throw new Error("Stratum: an upsert is refused because its table's unique keys cannot be checked for tenant_id.");
+    }
+    const unquote = (name) => (name === undefined ? null : name.replace(/``/g, "`"));
+    const table = unquote(target[2]);
+    const rows = (await event.queryRunner.query(UNIQUE_KEYS_SQL, [unquote(target[1]), table]));
+    const keys = new Map();
+    for (const row of rows) {
+        const hasTenant = row.column_name.toLowerCase() === "tenant_id";
+        keys.set(row.index_name, (keys.get(row.index_name) ?? false) || hasTenant);
+    }
+    for (const [key, hasTenant] of keys) {
+        if (!hasTenant) {
+            throw new Error(`Stratum: an upsert on "${table}" is refused, because its unique key "${key}" does not include tenant_id, ` +
+                "so a conflict could update another tenant's row. Add tenant_id to every unique key of the table, " +
+                "or look the row up by tenant before writing it.");
+        }
+    }
+}
 /**
  * Returns the one StratumTypeOrmSubscriber on the data source, and adds it first when it is missing.
  *
  * A second call returns the subscriber that the first call added, so the
  * data source never runs the subscriber twice.
  *
+ * It also scopes TypeORM's select, update, delete and soft-delete query
+ * builders to the current tenant (see StratumTypeOrmSubscriber). The subscriber refuses an
+ * UPDATE or DELETE on a data source that was not registered this way.
+ *
  * @param dataSource - An initialized TypeORM `DataSource`.
  * @throws Error when the data source is not initialized. `initialize()` replaces
  *   the subscriber list, so an earlier registration has no effect.
@@ -86,6 +546,10 @@ function registerStratumSubscriber(dataSource) {
         throw new Error("Stratum: call registerStratumSubscriber() after dataSource.initialize(). " +
             "initialize() replaces the subscriber list.");
     }
+    scopeSelectBuilder(dataSource);
+    scopeWriteBuilders(dataSource);
+    scopeInsertBuilder(dataSource);
+    exemptViewExpressions(dataSource);
     const existing = dataSource.subscribers.find((subscriber) => subscriber instanceof StratumTypeOrmSubscriber);
     if (existing)
         return existing;

package/dist/integrations/typeorm-subscriber.js.map

@@ -1 +1 @@
-{"version":3,"file":"typeorm-subscriber.js","sourceRoot":"","sources":["../../src/integrations/typeorm-subscriber.ts"],"names":[],"mappings":";;;AAsHA,8DAkBC;AAxID,yCAAmD;AACnD,0CAA6C;AAiC7C,8EAA8E;AAC9E,qCAAqC;AACrC,MAAM,aAAa,GAAG,oCAAoC,CAAC;AAC3D,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAE7C;;;;;;;;;;;GAWG;AACH,MAAa,wBAAwB;IACnC,qEAAqE;IACrE,YAAY,CAAC,KAAkB;QAC7B,MAAM,OAAO,GAAG,IAAA,sBAAgB,GAAE,CAAC;QACnC,IAAA,yBAAc,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,KAAkB;QAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,CACvE,CAAC;QACF,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,WAAW,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,EAAE,CAAC;gBACvF,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC;YACpC,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,WAAW,CAAC,KAAuB;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,IAAI,MAAM,KAAK,SAAS,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CACb,4DAA4D;gBAC1D,yEAAyE,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAvDD,4DAuDC;AAED;;;;;;;;;GASG;AACH,SAAgB,yBAAyB,CACvC,UAAiC;IAEjC,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,2EAA2E;YACzE,4CAA4C,CAC/C,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,CAC1C,CAAC,UAAU,EAA0C,EAAE,CACrD,UAAU,YAAY,wBAAwB,CACjD,CAAC;IACF,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,UAAU,GAAG,IAAI,wBAAwB,EAAE,CAAC;IAClD,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxC,OAAO,UAAU,CAAC;AACpB,CAAC"}
+{"version":3,"file":"typeorm-subscriber.js","sourceRoot":"","sources":["../../src/integrations/typeorm-subscriber.ts"],"names":[],"mappings":";;;AAitBA,8DAsBC;AAvuBD,uDAAqD;AACrD,yCAAmD;AACnD,0CAA6C;AA+H7C,8EAA8E;AAC9E,qCAAqC;AACrC,MAAM,aAAa,GAAG,oCAAoC,CAAC;AAC3D,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAC7C,8EAA8E;AAC9E,MAAM,aAAa,GAAG,4EAA4E,CAAC;AAEnG,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;AACpD,+EAA+E;AAC/E,MAAM,eAAe,GAAG,2EAA2E,CAAC;AACpG,MAAM,iBAAiB,GACrB,uDAAuD;IACvD,sGAAsG,CAAC;AACzG,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAC3C,MAAM,cAAc,GAAG,MAAM,CAAC,6BAA6B,CAAC,CAAC;AAC7D,MAAM,gBAAgB,GAAG,MAAM,CAAC,8BAA8B,CAAC,CAAC;AAChE,MAAM,aAAa,GAAG,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAC3D,MAAM,sBAAsB,GAAG,MAAM,CAAC,8BAA8B,CAAC,CAAC;AACtE,6DAA6D;AAC7D,MAAM,UAAU,GAAG,IAAI,OAAO,EAAU,CAAC;AACzC,iGAAiG;AACjG,MAAM,YAAY,GAAG,IAAI,OAAO,EAAU,CAAC;AAC3C,0EAA0E;AAC1E,MAAM,sBAAsB,GAAG,IAAI,oCAAiB,EAAW,CAAC;AAChE,oEAAoE;AACpE,MAAM,sBAAsB,GAAG,IAAI,OAAO,EAAU,CAAC;AACrD,6FAA6F;AAC7F,MAAM,qBAAqB,GAAG,IAAI,OAAO,EAAkB,CAAC;AAC5D,6EAA6E;AAC7E,MAAM,iBAAiB,GAAG,IAAI,OAAO,EAAU,CAAC;AAEhD,MAAM,eAAe,GACnB,8DAA8D;IAC9D,qCAAqC;IACrC,oFAAoF,CAAC;AAEvF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAa,wBAAwB;IACnC;;;;;;;;;;OAUG;IACH,YAAY,CAAC,KAAkB;QAC7B,MAAM,OAAO,GAAG,IAAA,sBAAgB,GAAE,CAAC;QACnC,IAAA,yBAAc,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,GAAqC,CAAC;QAC1C,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACvF,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC7B,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC;QACD,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,GAAG,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YAC/C,OAAO,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,YAAY,CAAC,KAAkB;QAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,MAAM,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC;QACpC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,CACvE,CAAC;YACF,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;gBACnD,IAAI,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,WAAW,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,EAAE,CAAC;oBACvF,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;YACD,IAAI,WAAW,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,IAAA,sBAAgB,GAAE,CAAC;gBACnC,IAAA,yBAAc,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAClC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;oBAC/B,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;wBACvC,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;oBACzF,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,CACvE,CAAC;QACF,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,WAAW,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,EAAE,CAAC;gBACvF,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QACD,oEAAoE;QACpE,KAAK,MAAM,IAAI,IAAI,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvD,IAAI,IAAI,IAAI,MAAM;gBAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC;YACpC,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,WAAW,CAAC,KAAuB;QACjC,IACE,KAAK,CAAC,UAAU;YAChB,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;YACxC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAClC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,+EAA+E;gBAC7E,yDAAyD,CAC5D,CAAC;QACJ,CAAC;QACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,4DAA4D;gBAC1D,yEAAyE,CAC5E,CAAC;QACJ,CAAC;QACD,OAAO,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;CACF;AA3HD,4DA2HC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,OAA8B;IACxD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,wBAAwB,CAAC;QAAE,OAAO;IAE/F,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC;IAC9C,IAAI,MAAM,GAAG,WAAW,CAAC;IACzB,IAAI,KAAK,EAAE,WAAW,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAC9C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,WAAW,CACpD,CAAC;QACF,IAAI,CAAC,YAAY;YAAE,OAAO;QAC1B,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC;IACrC,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,sBAAgB,GAAE,CAAC;IACnC,IAAA,yBAAc,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClC,2BAA2B,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,SAAS,GACb,OAAO,CAAC,aAAa,CAAC,yBAAyB,IAAI,KAAK;QACtD,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;QAC3D,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,SAAS,GAAG,GAAG,SAAS,OAAO,gBAAgB,EAAE,CAAC;IACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,8BAA8B,CAAC;IACtE,2EAA2E;IAC3E,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,QAAQ,EAAE,CAAC;QAClE,uEAAuE;QACvE,4EAA4E;QAC5E,OAAO,CAAC,aAAa,CAAC,8BAA8B,GAAG,QAAQ;YAC7D,CAAC,CAAC,IAAI,QAAQ,SAAS,SAAS,EAAE;YAClC,CAAC,CAAC,SAAS,CAAC;QACd,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,aAAa,CAAC,8BAA8B,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,SAAS,2BAA2B,CAAC,OAA8B;IACjE,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC;IAClC,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC;IAC7B,IAAI,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO;IAChF,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC;IAC5B,MAAM,QAAQ,GAAG,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;QAC1B,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;QACnH,GAAG,mBAAmB,CAAC,QAAQ,CAAC;KACjC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,WAAW,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/F,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,OAAO;IACpC,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC,WAAW,CAChC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAG,MAAkC,CAAC,GAAG,CAAC,CAAC,CAAC,CACtG,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,SAAS,kBAAkB,CAAC,UAAiC;IAC3D,MAAM,QAAQ,GAAG;QACf,UAAU,CAAC,kBAAkB,EAAE,CAAC,MAAM,EAAE;QACxC,UAAU,CAAC,kBAAkB,EAAE,CAAC,MAAM,EAAE;QACxC,UAAU,CAAC,kBAAkB,EAAE,CAAC,UAAU,EAAE;KAC7C,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAiC,CAAC;QAC7E,IAAI,KAAK,CAAC,cAAc,CAAC;YAAE,SAAS;QACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAA4D,CAAC;QACpF,KAAK,CAAC,OAAO,GAAG;YACd,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACzB,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC;QACF,KAAK,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC;IAC/B,CAAC;IACD,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AACpC,CAAC;AAED,2EAA2E;AAC3E,SAAS,cAAc,CAAC,QAA+C;IACrE,OAAO,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,CAAC;AACrF,CAAC;AAED,gFAAgF;AAChF,SAAS,mBAAmB,CAAC,QAAoD;IAC/E,OAAO,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,CAAC;SAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,CAAC;SAC9F,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,MAA+B,EAAE,QAAwC,EAAE,QAAgB;IAC5G,KAAK,MAAM,IAAI,IAAI,mBAAmB,CAAC,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAC;IACjC,CAAC;SAAM,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QACjC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,QAAQ,CAAC;IACzC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,QAA4B,EAAE,MAA+B;IACjF,IAAI,QAAQ,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACxF,MAAM,GAAG,GAAG,IAAI,GAAG,EAAmB,CAAC;IACvC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAClG,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,UAAU;YAAE,OAAO,SAAS,CAAC;QAC3F,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAC3B,MAAuB,EACvB,QAA4B,EAC5B,GAAyB,EACzB,QAAgB;IAEhB,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC;IACrE,MAAM,YAAY,GAAG,cAAc,CAAC,QAAQ,CAAe,CAAC;IAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,KAAK,CAC9B,UAAU,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,sBAAsB,KAAK,UAAU,KAAK,UAAU,EAC9F,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAClB,CAA6B,CAAC;IAC/B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;IAC7G,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,aAAa,CAAC,OAA+B;IAC1D,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,wBAAwB,CAAC;QAAE,OAAO,EAAE,CAAC;IAClG,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC;IAClC,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,MAAM,YAAY,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAE9C,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACzB,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,qGAAqG;gBACnG,mEAAmE,CACtE,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,IAAI,gBAAgB,EAAE,CAAC,EAAE,CAAC;YACrE,MAAM,OAAO,GAAG,IAAA,sBAAgB,GAAE,CAAC;YACnC,IAAA,yBAAc,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAClC,OAAO,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAE1C,MAAM,OAAO,GAAG,IAAA,sBAAgB,GAAE,CAAC;IACnC,IAAA,yBAAc,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CACpF,CAAC,KAAK,EAAoC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAClF,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,UAAU,CAAC;IACzD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACtB,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC1C,IAAI,GAAG;gBAAE,MAAM,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1E,CAAC;QACD,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sFAAsF;AACtF,SAAS,cAAc,CAAC,KAA4B;IAClD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACrE,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,EAAE,YAAY,CAAC;AACxG,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,OAA+B,EAAE,KAAmB;IAC7E,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,wBAAwB,CAAC;QAAE,OAAO,KAAK,EAAE,CAAC;IACvG,6EAA6E;IAC7E,yEAAyE;IACzE,IAAI,sBAAsB,CAAC,QAAQ,EAAE,IAAI,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,EAAE,CAAC;IAE7F,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC;IAClC,MAAM,SAAS,GAAG,CAAC,KAAgB,EAAE,MAAc,EAAE,EAAE,CACrD,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,gBAAgB,EAAE,CAAC;IAEnF,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,GAAG,CAAC,cAAc;SAC7B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;SAC7D,MAAM,CAAC,CAAC,KAAK,EAA0E,EAAE,CACxF,KAAK,CAAC,MAAM,KAAK,SAAS,CAC3B,CAAC;IACJ,MAAM,kBAAkB,GAAG,GAAG,EAAE;QAC9B,MAAM,OAAO,GAAG,IAAA,sBAAgB,GAAE,CAAC;QACnC,IAAA,yBAAc,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,OAAO,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC,CAAC;IACF,IAAI,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;QACpB,wEAAwE;QACxE,yEAAyE;QACzE,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,gBAAgB,EAAE,CAAC;YAAE,kBAAkB,EAAE,CAAC;QAC/D,OAAO,GAAG,CAAC;IACb,CAAC;IAED,kBAAkB,EAAE,CAAC;IAErB,MAAM,KAAK,GAAG,GAAG,CAAC,8BAA8B,CAAC;IACjD,MAAM,cAAc,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,SAAsB,EAAE,UAAU,CAAC,CAAC;YAC/D,uEAAuE;YACvE,uEAAuE;YACvE,GAAG,CAAC,8BAA8B,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/E,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;YACrC,yEAAyE;YACzE,+DAA+D;YAC/D,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,KAAkB,EAAE,MAAM,CAAC,CAAC;YACvD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC3E,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;IACjB,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,8BAA8B,GAAG,KAAK,CAAC;QAC3C,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;YAC5B,IAAI,CAAC,SAAS,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,UAAiC;IAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAiC,CAAC;IACrG,IAAI,KAAK,CAAC,gBAAgB,CAAC;QAAE,OAAO;IACpC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QACrG,MAAM,IAAI,KAAK,CACb,0GAA0G,CAC3G,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAoD,CAAC;IAC5E,KAAK,CAAC,QAAQ,GAAG;QACf,OAAO,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC;IACF,KAAK,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED,yFAAyF;AACzF,SAAS,kBAAkB,CAAC,UAAiC;IAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC,MAAM,EAAE,CAAiC,CAAC;IAC9G,IAAI,KAAK,CAAC,aAAa,CAAC;QAAE,OAAO;IACjC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAA6D,CAAC;IACrF,KAAK,CAAC,OAAO,GAAG,KAAK;QACnB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,uEAAuE;YACvE,KAAK,MAAM,KAAK,IAAI,MAAM;gBAAE,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,UAAiC;IAC9D,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QACxD,MAAM,UAAU,GAAG,QAAQ,CAAC,UAGf,CAAC;QACd,IAAI,OAAO,UAAU,KAAK,UAAU,IAAI,UAAU,CAAC,sBAAsB,CAAC;YAAE,SAAS;QACrF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAC1B,CAAC,MAAe,EAAE,EAAE,CAClB,sBAAsB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE;YACpC,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YACnC,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACpC,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,EACJ,EAAE,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,CACnC,CAAC;QACD,QAAqC,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,oBAAoB,CAAC,KAAuB;IACzD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,CAAC,IAAwB,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACrG,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,IAAI,aAAa,GAAG,IAAI,CAAC;IACzB,IAAI,KAAK,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAE1F,CAAC;QACJ,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,yBAAyB,KAAK,IAAI,eAAe,6DAA6D;YAC5G,2CAA2C,CAC9C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,6BAA6B,CAAC,KAAuB;IAClE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,gGAAgG,CACjG,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,IAAwB,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACrG,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAW,CAAC;IAC3C,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAGtF,CAAC;IAEJ,MAAM,IAAI,GAAG,IAAI,GAAG,EAAmB,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC;QAChE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC;IAC7E,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,0BAA0B,KAAK,yCAAyC,GAAG,gCAAgC;gBACzG,mGAAmG;gBACnG,iDAAiD,CACpD,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAgB,yBAAyB,CACvC,UAAiC;IAEjC,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,2EAA2E;YACzE,4CAA4C,CAC/C,CAAC;IACJ,CAAC;IACD,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC/B,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC/B,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC/B,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,CAC1C,CAAC,UAAU,EAA0C,EAAE,CACrD,UAAU,YAAY,wBAAwB,CACjD,CAAC;IACF,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,UAAU,GAAG,IAAI,wBAAwB,EAAE,CAAC;IAClD,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxC,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/types.d.ts

@@ -39,8 +39,9 @@ export interface MysqlTableAdapterOptions {
     databaseName: string;
     /**
      * Every base table name that has a per-tenant copy. Required by
+     * scopedTable, which only accepts these base names, and by
      * purgeTenantData, which drops exactly `{base}_{slug}` for each entry and
-     * nothing else. When set, scopedTable only accepts these base names.
+     * nothing else.
      * No entry may be another entry followed by `_`, since `{base}_{slug}` would
      * then be ambiguous between two tenants.
      */

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,OAAO,IAAI,IAAI,CAAC;IAChB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9C,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAID,MAAM,WAAW,YAAY;IAC3B,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1D,QAAQ,IAAI,YAAY,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAID,MAAM,WAAW,yBAAyB;IACxC,yCAAyC;IACzC,IAAI,EAAE,aAAa,CAAC;IACpB,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,yCAAyC;IACzC,IAAI,EAAE,aAAa,CAAC;IACpB,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,2BAA2B;IAC1C,kEAAkE;IAClE,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpE,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,kEAAkE;IAClE,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpE,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,OAAO,IAAI,IAAI,CAAC;IAChB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9C,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAID,MAAM,WAAW,YAAY;IAC3B,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1D,QAAQ,IAAI,YAAY,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAID,MAAM,WAAW,yBAAyB;IACxC,yCAAyC;IACzC,IAAI,EAAE,aAAa,CAAC;IACpB,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,yCAAyC;IACzC,IAAI,EAAE,aAAa,CAAC;IACpB,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,2BAA2B;IAC1C,kEAAkE;IAClE,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpE,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,kEAAkE;IAClE,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpE,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stratum-hq/mysql",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "description": "MySQL tenant isolation for Stratum — shared table, table-per-tenant, and database-per-tenant strategies",
   "keywords": [
     "multi-tenancy",
@@ -38,8 +38,8 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@stratum-hq/core": "^1.4.0",
-    "@stratum-hq/sdk": "^1.2.0"
+    "@stratum-hq/core": "^1.5.0",
+    "@stratum-hq/sdk": "^1.3.0"
   },
   "peerDependencies": {
     "mysql2": "^3.0.0",
@@ -61,6 +61,7 @@
   "devDependencies": {
     "knex": "^3.3.0",
     "mysql2": "^3.24.4",
+    "sequelize": "^6.37.8",
     "typeorm": "^1.1.1",
     "typescript": "^5.9.0",
     "vitest": "^4.1.11"