@usebetterdev/tenant-prisma 0.2.0-beta.16

package/README.md

@@ -0,0 +1,57 @@
+# @usebetterdev/tenant-prisma
+
+Prisma adapter for [@usebetterdev/tenant](https://github.com/usebetter-dev/usebetter). Runs each tenant scope in an interactive transaction with `SET LOCAL app.current_tenant = '<uuid>'` so Postgres RLS applies.
+
+## Install
+
+```bash
+pnpm add @usebetterdev/tenant @prisma/client
+```
+
+## Usage
+
+```ts
+import { PrismaClient } from "@prisma/client";
+import { betterTenant } from "@usebetterdev/tenant";
+import { prismaDatabase } from "@usebetterdev/tenant/prisma";
+
+const prisma = new PrismaClient();
+
+const tenant = betterTenant({
+  database: prismaDatabase(prisma),
+  tenantResolver: { header: "x-tenant-id" },
+});
+
+// tenant.api.createTenant, updateTenant, listTenants, deleteTenant now work (via runAsSystem).
+// In handlers: tenant.getDatabase() returns the Prisma transaction client.
+```
+
+`prismaDatabase(prisma)` bundles the adapter and tenant repository into a single `database` provider. If you use a custom table name, pass it via the `tableName` option:
+
+```ts
+import { prismaDatabase } from "@usebetterdev/tenant/prisma";
+
+const tenant = betterTenant({
+  database: prismaDatabase(prisma, { tableName: "my_tenants" }),
+  tenantResolver: { header: "x-tenant-id" },
+});
+```
+
+The tenants table must match the CLI-generated schema: `id` (UUID), `name`, `slug`, `created_at`.
+
+## Behaviour
+
+- **runWithTenant(tenantId, fn)** — Opens an interactive `$transaction`, runs `SELECT set_config('app.current_tenant', tenantId, true)`, then calls `fn(tx)`. The `tx` handle is the Prisma transaction client; use only this for tenant-scoped tables so RLS sees the tenant.
+- **runAsSystem(fn)** — Opens an interactive `$transaction`, runs `SELECT set_config('app.bypass_rls', 'true', true)`, then calls `fn(tx)`. Use for admin/cron only (e.g. tenant.api.\*). RLS policies must allow rows when `current_setting('app.bypass_rls', true) = 'true'` (CLI generates this bypass policy).
+- **loadTenant** — The full Tenant row is loaded by default into `getContext().tenant`. Set `loadTenant: false` to opt out (saves one query per request).
+- The handle passed to `fn` is the Prisma interactive transaction client — all generated model methods (`db.user.findMany()`, etc.) are available on it.
+
+## Testing
+
+Integration tests use [@testcontainers/postgresql](https://www.npmjs.com/package/@testcontainers/postgresql): a Postgres container is started automatically when you run tests (Docker required). If Docker is unavailable, the tests are skipped. You can instead set `DATABASE_URL` to run the same tests against an existing database.
+
+**Run integration tests:** From the repo root, run `pnpm run test:integration` or `pnpm run test --filter @usebetterdev/tenant-prisma`.
+
+## Peer dependency
+
+Requires `@prisma/client` (>= 5.0.0). Install it in your app when using this adapter.

package/dist/index.cjs

@@ -0,0 +1,170 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  prismaDatabase: () => prismaDatabase
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/adapter.ts
+function prismaAdapter(prisma) {
+  return {
+    async runWithTenant(tenantId, fn) {
+      return prisma.$transaction(async (tx) => {
+        await tx.$executeRaw`SELECT set_config('app.current_tenant', ${tenantId}, true)`;
+        return fn(tx);
+      });
+    },
+    async runAsSystem(fn) {
+      return prisma.$transaction(async (tx) => {
+        await tx.$executeRaw`SELECT set_config('app.bypass_rls', 'true', true)`;
+        return fn(tx);
+      });
+    }
+  };
+}
+
+// src/repository.ts
+function rowToTenant(row) {
+  const createdAt = row.created_at ?? row.createdAt;
+  if (createdAt === void 0 || createdAt === null) {
+    throw new Error("better-tenant: row missing created_at / createdAt");
+  }
+  return {
+    id: String(row.id),
+    name: String(row.name),
+    slug: String(row.slug),
+    createdAt,
+    ...row
+  };
+}
+function assertSafeIdentifier(name) {
+  if (!/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(name)) {
+    throw new Error(
+      `better-tenant: invalid table name "${name}" \u2014 must be [a-zA-Z_][a-zA-Z0-9_]*`
+    );
+  }
+}
+function createGetTenantRepository(tableName = "tenants") {
+  assertSafeIdentifier(tableName);
+  return (database) => {
+    const tx = database;
+    return {
+      async create(data) {
+        const rows = await tx.$queryRawUnsafe(
+          `INSERT INTO ${tableName} (name, slug) VALUES ($1, $2) RETURNING *`,
+          data.name,
+          data.slug
+        );
+        const row = rows[0];
+        if (!row || typeof row !== "object") {
+          throw new Error("better-tenant: createTenant failed to return row");
+        }
+        return rowToTenant(row);
+      },
+      async getById(tenantId) {
+        const rows = await tx.$queryRawUnsafe(
+          `SELECT * FROM ${tableName} WHERE id = $1::uuid LIMIT 1`,
+          tenantId
+        );
+        const row = rows[0];
+        if (!row || typeof row !== "object") {
+          return null;
+        }
+        return rowToTenant(row);
+      },
+      async getBySlug(slug) {
+        const rows = await tx.$queryRawUnsafe(
+          `SELECT * FROM ${tableName} WHERE slug = $1 LIMIT 1`,
+          slug
+        );
+        const row = rows[0];
+        if (!row || typeof row !== "object") {
+          return null;
+        }
+        return rowToTenant(row);
+      },
+      async update(tenantId, data) {
+        const setClauses = [];
+        const values = [];
+        if (data.name !== void 0) {
+          values.push(data.name);
+          setClauses.push(`name = $${String(values.length)}`);
+        }
+        if (data.slug !== void 0) {
+          values.push(data.slug);
+          setClauses.push(`slug = $${String(values.length)}`);
+        }
+        if (setClauses.length === 0) {
+          const rows2 = await tx.$queryRawUnsafe(
+            `SELECT * FROM ${tableName} WHERE id = $1::uuid LIMIT 1`,
+            tenantId
+          );
+          const row2 = rows2[0];
+          if (!row2 || typeof row2 !== "object") {
+            throw new Error("better-tenant: tenant not found");
+          }
+          return rowToTenant(row2);
+        }
+        values.push(tenantId);
+        const query = `UPDATE ${tableName} SET ${setClauses.join(", ")} WHERE id = $${String(values.length)}::uuid RETURNING *`;
+        const rows = await tx.$queryRawUnsafe(
+          query,
+          ...values
+        );
+        const row = rows[0];
+        if (!row || typeof row !== "object") {
+          throw new Error("better-tenant: tenant not found");
+        }
+        return rowToTenant(row);
+      },
+      async list(options = {}) {
+        const limit = options.limit ?? 50;
+        const offset = Math.max(0, options.offset ?? 0);
+        const rows = await tx.$queryRawUnsafe(
+          `SELECT * FROM ${tableName} ORDER BY created_at ASC LIMIT $1 OFFSET $2`,
+          limit,
+          offset
+        );
+        return rows.map(rowToTenant);
+      },
+      async delete(tenantId) {
+        await tx.$executeRawUnsafe(
+          `DELETE FROM ${tableName} WHERE id = $1::uuid`,
+          tenantId
+        );
+      }
+    };
+  };
+}
+
+// src/database.ts
+function prismaDatabase(prisma, options) {
+  return {
+    adapter: prismaAdapter(prisma),
+    getTenantRepository: createGetTenantRepository(options?.tableName)
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  prismaDatabase
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/adapter.ts","../src/repository.ts","../src/database.ts"],"sourcesContent":["export { prismaDatabase } from \"./database.js\";\nexport type { PrismaClientLike, PrismaTransactionClient } from \"./types.js\";\n","import type { TenantAdapter } from \"@usebetterdev/tenant-core\";\nimport type { PrismaClientLike, PrismaTransactionClient } from \"./types.js\";\n\n/**\n * Creates a TenantAdapter for Prisma (PostgreSQL).\n *\n * Uses an interactive transaction per runWithTenant:\n *   BEGIN → SET LOCAL app.current_tenant = tenantId → fn(tx) → COMMIT.\n *\n * The handle passed to fn is the Prisma transaction client; use only this\n * handle for tenant-scoped queries so RLS applies.\n *\n * runAsSystem runs in a transaction with SET LOCAL app.bypass_rls = 'true'\n * so RLS policies that allow when current_setting('app.bypass_rls', true) = 'true'\n * permit access (CLI generates this bypass policy).\n *\n * @param prisma - PrismaClient instance (or anything matching PrismaClientLike)\n * @returns TenantAdapter implementation\n */\nexport function prismaAdapter(\n  prisma: PrismaClientLike,\n): TenantAdapter<PrismaTransactionClient, PrismaTransactionClient> {\n  return {\n    async runWithTenant<T>(\n      tenantId: string,\n      fn: (database: PrismaTransactionClient) => Promise<T>,\n    ): Promise<T> {\n      return prisma.$transaction(async (tx: PrismaTransactionClient) => {\n        await tx.$executeRaw`SELECT set_config('app.current_tenant', ${tenantId}, true)`;\n        return fn(tx);\n      });\n    },\n\n    async runAsSystem<T>(\n      fn: (database: PrismaTransactionClient) => Promise<T>,\n    ): Promise<T> {\n      return prisma.$transaction(async (tx: PrismaTransactionClient) => {\n        await tx.$executeRaw`SELECT set_config('app.bypass_rls', 'true', true)`;\n        return fn(tx);\n      });\n    },\n  };\n}\n","import type { Tenant, TenantRepository } from \"@usebetterdev/tenant-core\";\nimport type { PrismaTransactionClient } from \"./types.js\";\n\n/**\n * Converts a raw DB row to the Tenant shape expected by core.\n */\nfunction rowToTenant(row: Record<string, unknown>): Tenant {\n  const createdAt = row.created_at ?? row.createdAt;\n  if (createdAt === undefined || createdAt === null) {\n    throw new Error(\"better-tenant: row missing created_at / createdAt\");\n  }\n  return {\n    id: String(row.id),\n    name: String(row.name),\n    slug: String(row.slug),\n    createdAt: createdAt as Date | string,\n    ...row,\n  };\n}\n\n/**\n * Validate table name to prevent SQL injection. Only allows [a-zA-Z_][a-zA-Z0-9_]*.\n */\nfunction assertSafeIdentifier(name: string): void {\n  if (!/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(name)) {\n    throw new Error(\n      `better-tenant: invalid table name \"${name}\" — must be [a-zA-Z_][a-zA-Z0-9_]*`,\n    );\n  }\n}\n\n/**\n * Creates getTenantRepository for use with betterTenant({ getTenantRepository }).\n *\n * Uses raw SQL ($queryRawUnsafe / $executeRawUnsafe) on the Prisma transaction\n * client so the adapter works without requiring a generated `Tenant` model in\n * the user's Prisma schema. The tenants table must match the CLI-generated shape\n * (id UUID, name TEXT, slug TEXT, created_at TIMESTAMPTZ).\n *\n * Table name is validated at creation time to prevent injection — only\n * alphanumeric + underscore identifiers are accepted.\n *\n * @param tableName - SQL table name (default: \"tenants\")\n */\nexport function createGetTenantRepository(\n  tableName = \"tenants\",\n): (database: PrismaTransactionClient) => TenantRepository {\n  assertSafeIdentifier(tableName);\n\n  return (database: PrismaTransactionClient) => {\n    const tx = database;\n\n    return {\n      async create(data) {\n        const rows = await tx.$queryRawUnsafe<Record<string, unknown>[]>(\n          `INSERT INTO ${tableName} (name, slug) VALUES ($1, $2) RETURNING *`,\n          data.name,\n          data.slug,\n        );\n        const row = rows[0];\n        if (!row || typeof row !== \"object\") {\n          throw new Error(\"better-tenant: createTenant failed to return row\");\n        }\n        return rowToTenant(row);\n      },\n\n      async getById(tenantId: string) {\n        const rows = await tx.$queryRawUnsafe<Record<string, unknown>[]>(\n          `SELECT * FROM ${tableName} WHERE id = $1::uuid LIMIT 1`,\n          tenantId,\n        );\n        const row = rows[0];\n        if (!row || typeof row !== \"object\") {\n          return null;\n        }\n        return rowToTenant(row);\n      },\n\n      async getBySlug(slug: string) {\n        const rows = await tx.$queryRawUnsafe<Record<string, unknown>[]>(\n          `SELECT * FROM ${tableName} WHERE slug = $1 LIMIT 1`,\n          slug,\n        );\n        const row = rows[0];\n        if (!row || typeof row !== \"object\") {\n          return null;\n        }\n        return rowToTenant(row);\n      },\n\n      async update(tenantId, data) {\n        const setClauses: string[] = [];\n        const values: unknown[] = [];\n\n        if (data.name !== undefined) {\n          values.push(data.name);\n          setClauses.push(`name = $${String(values.length)}`);\n        }\n        if (data.slug !== undefined) {\n          values.push(data.slug);\n          setClauses.push(`slug = $${String(values.length)}`);\n        }\n\n        if (setClauses.length === 0) {\n          const rows = await tx.$queryRawUnsafe<Record<string, unknown>[]>(\n            `SELECT * FROM ${tableName} WHERE id = $1::uuid LIMIT 1`,\n            tenantId,\n          );\n          const row = rows[0];\n          if (!row || typeof row !== \"object\") {\n            throw new Error(\"better-tenant: tenant not found\");\n          }\n          return rowToTenant(row);\n        }\n\n        values.push(tenantId);\n        const query = `UPDATE ${tableName} SET ${setClauses.join(\", \")} WHERE id = $${String(values.length)}::uuid RETURNING *`;\n\n        const rows = await tx.$queryRawUnsafe<Record<string, unknown>[]>(\n          query,\n          ...values,\n        );\n        const row = rows[0];\n        if (!row || typeof row !== \"object\") {\n          throw new Error(\"better-tenant: tenant not found\");\n        }\n        return rowToTenant(row);\n      },\n\n      async list(options = {}) {\n        const limit = options.limit ?? 50;\n        const offset = Math.max(0, options.offset ?? 0);\n        const rows = await tx.$queryRawUnsafe<Record<string, unknown>[]>(\n          `SELECT * FROM ${tableName} ORDER BY created_at ASC LIMIT $1 OFFSET $2`,\n          limit,\n          offset,\n        );\n        return rows.map(rowToTenant);\n      },\n\n      async delete(tenantId) {\n        await tx.$executeRawUnsafe(\n          `DELETE FROM ${tableName} WHERE id = $1::uuid`,\n          tenantId,\n        );\n      },\n    };\n  };\n}\n","import type { DatabaseProvider } from \"@usebetterdev/tenant-core\";\nimport { prismaAdapter } from \"./adapter.js\";\nimport type { PrismaClientLike, PrismaTransactionClient } from \"./types.js\";\nimport { createGetTenantRepository } from \"./repository.js\";\n\n/**\n * Creates a DatabaseProvider for Prisma (PostgreSQL).\n *\n * Bundles prismaAdapter + createGetTenantRepository into a single config value\n * for use with `betterTenant({ database: prismaDatabase(prisma) })`.\n *\n * @param prisma - PrismaClient instance (or anything matching PrismaClientLike)\n * @param options - Optional: custom table name (default: \"tenants\")\n */\nexport function prismaDatabase(\n  prisma: PrismaClientLike,\n  options?: { tableName?: string },\n): DatabaseProvider<PrismaTransactionClient, PrismaTransactionClient> {\n  return {\n    adapter: prismaAdapter(prisma),\n    getTenantRepository: createGetTenantRepository(options?.tableName),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACmBO,SAAS,cACd,QACiE;AACjE,SAAO;AAAA,IACL,MAAM,cACJ,UACA,IACY;AACZ,aAAO,OAAO,aAAa,OAAO,OAAgC;AAChE,cAAM,GAAG,sDAAsD,QAAQ;AACvE,eAAO,GAAG,EAAE;AAAA,MACd,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,YACJ,IACY;AACZ,aAAO,OAAO,aAAa,OAAO,OAAgC;AAChE,cAAM,GAAG;AACT,eAAO,GAAG,EAAE;AAAA,MACd,CAAC;AAAA,IACH;AAAA,EACF;AACF;;;ACpCA,SAAS,YAAY,KAAsC;AACzD,QAAM,YAAY,IAAI,cAAc,IAAI;AACxC,MAAI,cAAc,UAAa,cAAc,MAAM;AACjD,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AACA,SAAO;AAAA,IACL,IAAI,OAAO,IAAI,EAAE;AAAA,IACjB,MAAM,OAAO,IAAI,IAAI;AAAA,IACrB,MAAM,OAAO,IAAI,IAAI;AAAA,IACrB;AAAA,IACA,GAAG;AAAA,EACL;AACF;AAKA,SAAS,qBAAqB,MAAoB;AAChD,MAAI,CAAC,2BAA2B,KAAK,IAAI,GAAG;AAC1C,UAAM,IAAI;AAAA,MACR,sCAAsC,IAAI;AAAA,IAC5C;AAAA,EACF;AACF;AAeO,SAAS,0BACd,YAAY,WAC6C;AACzD,uBAAqB,SAAS;AAE9B,SAAO,CAAC,aAAsC;AAC5C,UAAM,KAAK;AAEX,WAAO;AAAA,MACL,MAAM,OAAO,MAAM;AACjB,cAAM,OAAO,MAAM,GAAG;AAAA,UACpB,eAAe,SAAS;AAAA,UACxB,KAAK;AAAA,UACL,KAAK;AAAA,QACP;AACA,cAAM,MAAM,KAAK,CAAC;AAClB,YAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,gBAAM,IAAI,MAAM,kDAAkD;AAAA,QACpE;AACA,eAAO,YAAY,GAAG;AAAA,MACxB;AAAA,MAEA,MAAM,QAAQ,UAAkB;AAC9B,cAAM,OAAO,MAAM,GAAG;AAAA,UACpB,iBAAiB,SAAS;AAAA,UAC1B;AAAA,QACF;AACA,cAAM,MAAM,KAAK,CAAC;AAClB,YAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,iBAAO;AAAA,QACT;AACA,eAAO,YAAY,GAAG;AAAA,MACxB;AAAA,MAEA,MAAM,UAAU,MAAc;AAC5B,cAAM,OAAO,MAAM,GAAG;AAAA,UACpB,iBAAiB,SAAS;AAAA,UAC1B;AAAA,QACF;AACA,cAAM,MAAM,KAAK,CAAC;AAClB,YAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,iBAAO;AAAA,QACT;AACA,eAAO,YAAY,GAAG;AAAA,MACxB;AAAA,MAEA,MAAM,OAAO,UAAU,MAAM;AAC3B,cAAM,aAAuB,CAAC;AAC9B,cAAM,SAAoB,CAAC;AAE3B,YAAI,KAAK,SAAS,QAAW;AAC3B,iBAAO,KAAK,KAAK,IAAI;AACrB,qBAAW,KAAK,WAAW,OAAO,OAAO,MAAM,CAAC,EAAE;AAAA,QACpD;AACA,YAAI,KAAK,SAAS,QAAW;AAC3B,iBAAO,KAAK,KAAK,IAAI;AACrB,qBAAW,KAAK,WAAW,OAAO,OAAO,MAAM,CAAC,EAAE;AAAA,QACpD;AAEA,YAAI,WAAW,WAAW,GAAG;AAC3B,gBAAMA,QAAO,MAAM,GAAG;AAAA,YACpB,iBAAiB,SAAS;AAAA,YAC1B;AAAA,UACF;AACA,gBAAMC,OAAMD,MAAK,CAAC;AAClB,cAAI,CAACC,QAAO,OAAOA,SAAQ,UAAU;AACnC,kBAAM,IAAI,MAAM,iCAAiC;AAAA,UACnD;AACA,iBAAO,YAAYA,IAAG;AAAA,QACxB;AAEA,eAAO,KAAK,QAAQ;AACpB,cAAM,QAAQ,UAAU,SAAS,QAAQ,WAAW,KAAK,IAAI,CAAC,gBAAgB,OAAO,OAAO,MAAM,CAAC;AAEnG,cAAM,OAAO,MAAM,GAAG;AAAA,UACpB;AAAA,UACA,GAAG;AAAA,QACL;AACA,cAAM,MAAM,KAAK,CAAC;AAClB,YAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,gBAAM,IAAI,MAAM,iCAAiC;AAAA,QACnD;AACA,eAAO,YAAY,GAAG;AAAA,MACxB;AAAA,MAEA,MAAM,KAAK,UAAU,CAAC,GAAG;AACvB,cAAM,QAAQ,QAAQ,SAAS;AAC/B,cAAM,SAAS,KAAK,IAAI,GAAG,QAAQ,UAAU,CAAC;AAC9C,cAAM,OAAO,MAAM,GAAG;AAAA,UACpB,iBAAiB,SAAS;AAAA,UAC1B;AAAA,UACA;AAAA,QACF;AACA,eAAO,KAAK,IAAI,WAAW;AAAA,MAC7B;AAAA,MAEA,MAAM,OAAO,UAAU;AACrB,cAAM,GAAG;AAAA,UACP,eAAe,SAAS;AAAA,UACxB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ACtIO,SAAS,eACd,QACA,SACoE;AACpE,SAAO;AAAA,IACL,SAAS,cAAc,MAAM;AAAA,IAC7B,qBAAqB,0BAA0B,SAAS,SAAS;AAAA,EACnE;AACF;","names":["rows","row"]}

package/dist/index.d.cts

@@ -0,0 +1,40 @@
+import { DatabaseProvider } from '@usebetterdev/tenant-core';
+
+/**
+ * Minimal Prisma transaction client shape.
+ *
+ * This is the handle passed into `$transaction(async (tx) => ...)`.
+ * We define our own interface to avoid a hard dependency on a generated `@prisma/client`.
+ */
+type PrismaTransactionClient = {
+    $executeRaw(query: TemplateStringsArray, ...values: unknown[]): Promise<number>;
+    $queryRaw<T = unknown>(query: TemplateStringsArray, ...values: unknown[]): Promise<T>;
+    $queryRawUnsafe<T = unknown>(query: string, ...values: unknown[]): Promise<T>;
+    $executeRawUnsafe(query: string, ...values: unknown[]): Promise<number>;
+};
+/**
+ * Minimal PrismaClient shape: must support interactive `$transaction`.
+ *
+ * Matches `new PrismaClient()` — no generated model types required at build time.
+ */
+type PrismaClientLike = PrismaTransactionClient & {
+    $transaction<T>(fn: (tx: PrismaTransactionClient) => Promise<T>, options?: {
+        maxWait?: number;
+        timeout?: number;
+    }): Promise<T>;
+};
+
+/**
+ * Creates a DatabaseProvider for Prisma (PostgreSQL).
+ *
+ * Bundles prismaAdapter + createGetTenantRepository into a single config value
+ * for use with `betterTenant({ database: prismaDatabase(prisma) })`.
+ *
+ * @param prisma - PrismaClient instance (or anything matching PrismaClientLike)
+ * @param options - Optional: custom table name (default: "tenants")
+ */
+declare function prismaDatabase(prisma: PrismaClientLike, options?: {
+    tableName?: string;
+}): DatabaseProvider<PrismaTransactionClient, PrismaTransactionClient>;
+
+export { type PrismaClientLike, type PrismaTransactionClient, prismaDatabase };

package/dist/index.d.ts

@@ -0,0 +1,40 @@
+import { DatabaseProvider } from '@usebetterdev/tenant-core';
+
+/**
+ * Minimal Prisma transaction client shape.
+ *
+ * This is the handle passed into `$transaction(async (tx) => ...)`.
+ * We define our own interface to avoid a hard dependency on a generated `@prisma/client`.
+ */
+type PrismaTransactionClient = {
+    $executeRaw(query: TemplateStringsArray, ...values: unknown[]): Promise<number>;
+    $queryRaw<T = unknown>(query: TemplateStringsArray, ...values: unknown[]): Promise<T>;
+    $queryRawUnsafe<T = unknown>(query: string, ...values: unknown[]): Promise<T>;
+    $executeRawUnsafe(query: string, ...values: unknown[]): Promise<number>;
+};
+/**
+ * Minimal PrismaClient shape: must support interactive `$transaction`.
+ *
+ * Matches `new PrismaClient()` — no generated model types required at build time.
+ */
+type PrismaClientLike = PrismaTransactionClient & {
+    $transaction<T>(fn: (tx: PrismaTransactionClient) => Promise<T>, options?: {
+        maxWait?: number;
+        timeout?: number;
+    }): Promise<T>;
+};
+
+/**
+ * Creates a DatabaseProvider for Prisma (PostgreSQL).
+ *
+ * Bundles prismaAdapter + createGetTenantRepository into a single config value
+ * for use with `betterTenant({ database: prismaDatabase(prisma) })`.
+ *
+ * @param prisma - PrismaClient instance (or anything matching PrismaClientLike)
+ * @param options - Optional: custom table name (default: "tenants")
+ */
+declare function prismaDatabase(prisma: PrismaClientLike, options?: {
+    tableName?: string;
+}): DatabaseProvider<PrismaTransactionClient, PrismaTransactionClient>;
+
+export { type PrismaClientLike, type PrismaTransactionClient, prismaDatabase };

package/dist/index.js

@@ -0,0 +1,143 @@
+// src/adapter.ts
+function prismaAdapter(prisma) {
+  return {
+    async runWithTenant(tenantId, fn) {
+      return prisma.$transaction(async (tx) => {
+        await tx.$executeRaw`SELECT set_config('app.current_tenant', ${tenantId}, true)`;
+        return fn(tx);
+      });
+    },
+    async runAsSystem(fn) {
+      return prisma.$transaction(async (tx) => {
+        await tx.$executeRaw`SELECT set_config('app.bypass_rls', 'true', true)`;
+        return fn(tx);
+      });
+    }
+  };
+}
+
+// src/repository.ts
+function rowToTenant(row) {
+  const createdAt = row.created_at ?? row.createdAt;
+  if (createdAt === void 0 || createdAt === null) {
+    throw new Error("better-tenant: row missing created_at / createdAt");
+  }
+  return {
+    id: String(row.id),
+    name: String(row.name),
+    slug: String(row.slug),
+    createdAt,
+    ...row
+  };
+}
+function assertSafeIdentifier(name) {
+  if (!/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(name)) {
+    throw new Error(
+      `better-tenant: invalid table name "${name}" \u2014 must be [a-zA-Z_][a-zA-Z0-9_]*`
+    );
+  }
+}
+function createGetTenantRepository(tableName = "tenants") {
+  assertSafeIdentifier(tableName);
+  return (database) => {
+    const tx = database;
+    return {
+      async create(data) {
+        const rows = await tx.$queryRawUnsafe(
+          `INSERT INTO ${tableName} (name, slug) VALUES ($1, $2) RETURNING *`,
+          data.name,
+          data.slug
+        );
+        const row = rows[0];
+        if (!row || typeof row !== "object") {
+          throw new Error("better-tenant: createTenant failed to return row");
+        }
+        return rowToTenant(row);
+      },
+      async getById(tenantId) {
+        const rows = await tx.$queryRawUnsafe(
+          `SELECT * FROM ${tableName} WHERE id = $1::uuid LIMIT 1`,
+          tenantId
+        );
+        const row = rows[0];
+        if (!row || typeof row !== "object") {
+          return null;
+        }
+        return rowToTenant(row);
+      },
+      async getBySlug(slug) {
+        const rows = await tx.$queryRawUnsafe(
+          `SELECT * FROM ${tableName} WHERE slug = $1 LIMIT 1`,
+          slug
+        );
+        const row = rows[0];
+        if (!row || typeof row !== "object") {
+          return null;
+        }
+        return rowToTenant(row);
+      },
+      async update(tenantId, data) {
+        const setClauses = [];
+        const values = [];
+        if (data.name !== void 0) {
+          values.push(data.name);
+          setClauses.push(`name = $${String(values.length)}`);
+        }
+        if (data.slug !== void 0) {
+          values.push(data.slug);
+          setClauses.push(`slug = $${String(values.length)}`);
+        }
+        if (setClauses.length === 0) {
+          const rows2 = await tx.$queryRawUnsafe(
+            `SELECT * FROM ${tableName} WHERE id = $1::uuid LIMIT 1`,
+            tenantId
+          );
+          const row2 = rows2[0];
+          if (!row2 || typeof row2 !== "object") {
+            throw new Error("better-tenant: tenant not found");
+          }
+          return rowToTenant(row2);
+        }
+        values.push(tenantId);
+        const query = `UPDATE ${tableName} SET ${setClauses.join(", ")} WHERE id = $${String(values.length)}::uuid RETURNING *`;
+        const rows = await tx.$queryRawUnsafe(
+          query,
+          ...values
+        );
+        const row = rows[0];
+        if (!row || typeof row !== "object") {
+          throw new Error("better-tenant: tenant not found");
+        }
+        return rowToTenant(row);
+      },
+      async list(options = {}) {
+        const limit = options.limit ?? 50;
+        const offset = Math.max(0, options.offset ?? 0);
+        const rows = await tx.$queryRawUnsafe(
+          `SELECT * FROM ${tableName} ORDER BY created_at ASC LIMIT $1 OFFSET $2`,
+          limit,
+          offset
+        );
+        return rows.map(rowToTenant);
+      },
+      async delete(tenantId) {
+        await tx.$executeRawUnsafe(
+          `DELETE FROM ${tableName} WHERE id = $1::uuid`,
+          tenantId
+        );
+      }
+    };
+  };
+}
+
+// src/database.ts
+function prismaDatabase(prisma, options) {
+  return {
+    adapter: prismaAdapter(prisma),
+    getTenantRepository: createGetTenantRepository(options?.tableName)
+  };
+}
+export {
+  prismaDatabase
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/adapter.ts","../src/repository.ts","../src/database.ts"],"sourcesContent":["import type { TenantAdapter } from \"@usebetterdev/tenant-core\";\nimport type { PrismaClientLike, PrismaTransactionClient } from \"./types.js\";\n\n/**\n * Creates a TenantAdapter for Prisma (PostgreSQL).\n *\n * Uses an interactive transaction per runWithTenant:\n *   BEGIN → SET LOCAL app.current_tenant = tenantId → fn(tx) → COMMIT.\n *\n * The handle passed to fn is the Prisma transaction client; use only this\n * handle for tenant-scoped queries so RLS applies.\n *\n * runAsSystem runs in a transaction with SET LOCAL app.bypass_rls = 'true'\n * so RLS policies that allow when current_setting('app.bypass_rls', true) = 'true'\n * permit access (CLI generates this bypass policy).\n *\n * @param prisma - PrismaClient instance (or anything matching PrismaClientLike)\n * @returns TenantAdapter implementation\n */\nexport function prismaAdapter(\n  prisma: PrismaClientLike,\n): TenantAdapter<PrismaTransactionClient, PrismaTransactionClient> {\n  return {\n    async runWithTenant<T>(\n      tenantId: string,\n      fn: (database: PrismaTransactionClient) => Promise<T>,\n    ): Promise<T> {\n      return prisma.$transaction(async (tx: PrismaTransactionClient) => {\n        await tx.$executeRaw`SELECT set_config('app.current_tenant', ${tenantId}, true)`;\n        return fn(tx);\n      });\n    },\n\n    async runAsSystem<T>(\n      fn: (database: PrismaTransactionClient) => Promise<T>,\n    ): Promise<T> {\n      return prisma.$transaction(async (tx: PrismaTransactionClient) => {\n        await tx.$executeRaw`SELECT set_config('app.bypass_rls', 'true', true)`;\n        return fn(tx);\n      });\n    },\n  };\n}\n","import type { Tenant, TenantRepository } from \"@usebetterdev/tenant-core\";\nimport type { PrismaTransactionClient } from \"./types.js\";\n\n/**\n * Converts a raw DB row to the Tenant shape expected by core.\n */\nfunction rowToTenant(row: Record<string, unknown>): Tenant {\n  const createdAt = row.created_at ?? row.createdAt;\n  if (createdAt === undefined || createdAt === null) {\n    throw new Error(\"better-tenant: row missing created_at / createdAt\");\n  }\n  return {\n    id: String(row.id),\n    name: String(row.name),\n    slug: String(row.slug),\n    createdAt: createdAt as Date | string,\n    ...row,\n  };\n}\n\n/**\n * Validate table name to prevent SQL injection. Only allows [a-zA-Z_][a-zA-Z0-9_]*.\n */\nfunction assertSafeIdentifier(name: string): void {\n  if (!/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(name)) {\n    throw new Error(\n      `better-tenant: invalid table name \"${name}\" — must be [a-zA-Z_][a-zA-Z0-9_]*`,\n    );\n  }\n}\n\n/**\n * Creates getTenantRepository for use with betterTenant({ getTenantRepository }).\n *\n * Uses raw SQL ($queryRawUnsafe / $executeRawUnsafe) on the Prisma transaction\n * client so the adapter works without requiring a generated `Tenant` model in\n * the user's Prisma schema. The tenants table must match the CLI-generated shape\n * (id UUID, name TEXT, slug TEXT, created_at TIMESTAMPTZ).\n *\n * Table name is validated at creation time to prevent injection — only\n * alphanumeric + underscore identifiers are accepted.\n *\n * @param tableName - SQL table name (default: \"tenants\")\n */\nexport function createGetTenantRepository(\n  tableName = \"tenants\",\n): (database: PrismaTransactionClient) => TenantRepository {\n  assertSafeIdentifier(tableName);\n\n  return (database: PrismaTransactionClient) => {\n    const tx = database;\n\n    return {\n      async create(data) {\n        const rows = await tx.$queryRawUnsafe<Record<string, unknown>[]>(\n          `INSERT INTO ${tableName} (name, slug) VALUES ($1, $2) RETURNING *`,\n          data.name,\n          data.slug,\n        );\n        const row = rows[0];\n        if (!row || typeof row !== \"object\") {\n          throw new Error(\"better-tenant: createTenant failed to return row\");\n        }\n        return rowToTenant(row);\n      },\n\n      async getById(tenantId: string) {\n        const rows = await tx.$queryRawUnsafe<Record<string, unknown>[]>(\n          `SELECT * FROM ${tableName} WHERE id = $1::uuid LIMIT 1`,\n          tenantId,\n        );\n        const row = rows[0];\n        if (!row || typeof row !== \"object\") {\n          return null;\n        }\n        return rowToTenant(row);\n      },\n\n      async getBySlug(slug: string) {\n        const rows = await tx.$queryRawUnsafe<Record<string, unknown>[]>(\n          `SELECT * FROM ${tableName} WHERE slug = $1 LIMIT 1`,\n          slug,\n        );\n        const row = rows[0];\n        if (!row || typeof row !== \"object\") {\n          return null;\n        }\n        return rowToTenant(row);\n      },\n\n      async update(tenantId, data) {\n        const setClauses: string[] = [];\n        const values: unknown[] = [];\n\n        if (data.name !== undefined) {\n          values.push(data.name);\n          setClauses.push(`name = $${String(values.length)}`);\n        }\n        if (data.slug !== undefined) {\n          values.push(data.slug);\n          setClauses.push(`slug = $${String(values.length)}`);\n        }\n\n        if (setClauses.length === 0) {\n          const rows = await tx.$queryRawUnsafe<Record<string, unknown>[]>(\n            `SELECT * FROM ${tableName} WHERE id = $1::uuid LIMIT 1`,\n            tenantId,\n          );\n          const row = rows[0];\n          if (!row || typeof row !== \"object\") {\n            throw new Error(\"better-tenant: tenant not found\");\n          }\n          return rowToTenant(row);\n        }\n\n        values.push(tenantId);\n        const query = `UPDATE ${tableName} SET ${setClauses.join(\", \")} WHERE id = $${String(values.length)}::uuid RETURNING *`;\n\n        const rows = await tx.$queryRawUnsafe<Record<string, unknown>[]>(\n          query,\n          ...values,\n        );\n        const row = rows[0];\n        if (!row || typeof row !== \"object\") {\n          throw new Error(\"better-tenant: tenant not found\");\n        }\n        return rowToTenant(row);\n      },\n\n      async list(options = {}) {\n        const limit = options.limit ?? 50;\n        const offset = Math.max(0, options.offset ?? 0);\n        const rows = await tx.$queryRawUnsafe<Record<string, unknown>[]>(\n          `SELECT * FROM ${tableName} ORDER BY created_at ASC LIMIT $1 OFFSET $2`,\n          limit,\n          offset,\n        );\n        return rows.map(rowToTenant);\n      },\n\n      async delete(tenantId) {\n        await tx.$executeRawUnsafe(\n          `DELETE FROM ${tableName} WHERE id = $1::uuid`,\n          tenantId,\n        );\n      },\n    };\n  };\n}\n","import type { DatabaseProvider } from \"@usebetterdev/tenant-core\";\nimport { prismaAdapter } from \"./adapter.js\";\nimport type { PrismaClientLike, PrismaTransactionClient } from \"./types.js\";\nimport { createGetTenantRepository } from \"./repository.js\";\n\n/**\n * Creates a DatabaseProvider for Prisma (PostgreSQL).\n *\n * Bundles prismaAdapter + createGetTenantRepository into a single config value\n * for use with `betterTenant({ database: prismaDatabase(prisma) })`.\n *\n * @param prisma - PrismaClient instance (or anything matching PrismaClientLike)\n * @param options - Optional: custom table name (default: \"tenants\")\n */\nexport function prismaDatabase(\n  prisma: PrismaClientLike,\n  options?: { tableName?: string },\n): DatabaseProvider<PrismaTransactionClient, PrismaTransactionClient> {\n  return {\n    adapter: prismaAdapter(prisma),\n    getTenantRepository: createGetTenantRepository(options?.tableName),\n  };\n}\n"],"mappings":";AAmBO,SAAS,cACd,QACiE;AACjE,SAAO;AAAA,IACL,MAAM,cACJ,UACA,IACY;AACZ,aAAO,OAAO,aAAa,OAAO,OAAgC;AAChE,cAAM,GAAG,sDAAsD,QAAQ;AACvE,eAAO,GAAG,EAAE;AAAA,MACd,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,YACJ,IACY;AACZ,aAAO,OAAO,aAAa,OAAO,OAAgC;AAChE,cAAM,GAAG;AACT,eAAO,GAAG,EAAE;AAAA,MACd,CAAC;AAAA,IACH;AAAA,EACF;AACF;;;ACpCA,SAAS,YAAY,KAAsC;AACzD,QAAM,YAAY,IAAI,cAAc,IAAI;AACxC,MAAI,cAAc,UAAa,cAAc,MAAM;AACjD,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AACA,SAAO;AAAA,IACL,IAAI,OAAO,IAAI,EAAE;AAAA,IACjB,MAAM,OAAO,IAAI,IAAI;AAAA,IACrB,MAAM,OAAO,IAAI,IAAI;AAAA,IACrB;AAAA,IACA,GAAG;AAAA,EACL;AACF;AAKA,SAAS,qBAAqB,MAAoB;AAChD,MAAI,CAAC,2BAA2B,KAAK,IAAI,GAAG;AAC1C,UAAM,IAAI;AAAA,MACR,sCAAsC,IAAI;AAAA,IAC5C;AAAA,EACF;AACF;AAeO,SAAS,0BACd,YAAY,WAC6C;AACzD,uBAAqB,SAAS;AAE9B,SAAO,CAAC,aAAsC;AAC5C,UAAM,KAAK;AAEX,WAAO;AAAA,MACL,MAAM,OAAO,MAAM;AACjB,cAAM,OAAO,MAAM,GAAG;AAAA,UACpB,eAAe,SAAS;AAAA,UACxB,KAAK;AAAA,UACL,KAAK;AAAA,QACP;AACA,cAAM,MAAM,KAAK,CAAC;AAClB,YAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,gBAAM,IAAI,MAAM,kDAAkD;AAAA,QACpE;AACA,eAAO,YAAY,GAAG;AAAA,MACxB;AAAA,MAEA,MAAM,QAAQ,UAAkB;AAC9B,cAAM,OAAO,MAAM,GAAG;AAAA,UACpB,iBAAiB,SAAS;AAAA,UAC1B;AAAA,QACF;AACA,cAAM,MAAM,KAAK,CAAC;AAClB,YAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,iBAAO;AAAA,QACT;AACA,eAAO,YAAY,GAAG;AAAA,MACxB;AAAA,MAEA,MAAM,UAAU,MAAc;AAC5B,cAAM,OAAO,MAAM,GAAG;AAAA,UACpB,iBAAiB,SAAS;AAAA,UAC1B;AAAA,QACF;AACA,cAAM,MAAM,KAAK,CAAC;AAClB,YAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,iBAAO;AAAA,QACT;AACA,eAAO,YAAY,GAAG;AAAA,MACxB;AAAA,MAEA,MAAM,OAAO,UAAU,MAAM;AAC3B,cAAM,aAAuB,CAAC;AAC9B,cAAM,SAAoB,CAAC;AAE3B,YAAI,KAAK,SAAS,QAAW;AAC3B,iBAAO,KAAK,KAAK,IAAI;AACrB,qBAAW,KAAK,WAAW,OAAO,OAAO,MAAM,CAAC,EAAE;AAAA,QACpD;AACA,YAAI,KAAK,SAAS,QAAW;AAC3B,iBAAO,KAAK,KAAK,IAAI;AACrB,qBAAW,KAAK,WAAW,OAAO,OAAO,MAAM,CAAC,EAAE;AAAA,QACpD;AAEA,YAAI,WAAW,WAAW,GAAG;AAC3B,gBAAMA,QAAO,MAAM,GAAG;AAAA,YACpB,iBAAiB,SAAS;AAAA,YAC1B;AAAA,UACF;AACA,gBAAMC,OAAMD,MAAK,CAAC;AAClB,cAAI,CAACC,QAAO,OAAOA,SAAQ,UAAU;AACnC,kBAAM,IAAI,MAAM,iCAAiC;AAAA,UACnD;AACA,iBAAO,YAAYA,IAAG;AAAA,QACxB;AAEA,eAAO,KAAK,QAAQ;AACpB,cAAM,QAAQ,UAAU,SAAS,QAAQ,WAAW,KAAK,IAAI,CAAC,gBAAgB,OAAO,OAAO,MAAM,CAAC;AAEnG,cAAM,OAAO,MAAM,GAAG;AAAA,UACpB;AAAA,UACA,GAAG;AAAA,QACL;AACA,cAAM,MAAM,KAAK,CAAC;AAClB,YAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,gBAAM,IAAI,MAAM,iCAAiC;AAAA,QACnD;AACA,eAAO,YAAY,GAAG;AAAA,MACxB;AAAA,MAEA,MAAM,KAAK,UAAU,CAAC,GAAG;AACvB,cAAM,QAAQ,QAAQ,SAAS;AAC/B,cAAM,SAAS,KAAK,IAAI,GAAG,QAAQ,UAAU,CAAC;AAC9C,cAAM,OAAO,MAAM,GAAG;AAAA,UACpB,iBAAiB,SAAS;AAAA,UAC1B;AAAA,UACA;AAAA,QACF;AACA,eAAO,KAAK,IAAI,WAAW;AAAA,MAC7B;AAAA,MAEA,MAAM,OAAO,UAAU;AACrB,cAAM,GAAG;AAAA,UACP,eAAe,SAAS;AAAA,UACxB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ACtIO,SAAS,eACd,QACA,SACoE;AACpE,SAAO;AAAA,IACL,SAAS,cAAc,MAAM;AAAA,IAC7B,qBAAqB,0BAA0B,SAAS,SAAS;AAAA,EACnE;AACF;","names":["rows","row"]}

package/package.json

@@ -0,0 +1,57 @@
+{
+  "name": "@usebetterdev/tenant-prisma",
+  "version": "0.2.0-beta.16",
+  "repository": "github:usebetter-dev/usebetter",
+  "bugs": "https://github.com/usebetter-dev/usebetter/issues",
+  "homepage": "https://github.com/usebetter-dev/usebetter#readme",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "lint": "oxlint",
+    "test": "vitest run",
+    "test:integration": "vitest run -c vitest.integration.config.ts",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@usebetterdev/tenant-core": "workspace:*"
+  },
+  "peerDependencies": {
+    "@prisma/client": ">=5.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@prisma/client": {
+      "optional": false
+    }
+  },
+  "devDependencies": {
+    "@usebetterdev/test-utils": "workspace:*",
+    "@testcontainers/postgresql": "^11.11.0",
+    "@types/node": "^22.10.0",
+    "@types/pg": "^8.11.0",
+    "pg": "^8.13.0",
+    "tsup": "^8.3.5",
+    "typescript": "~5.7.2",
+    "vitest": "^2.1.6"
+  },
+  "engines": {
+    "node": ">=22"
+  }
+}