@veloxts/orm 0.6.27 → 0.6.29

package/dist/tenant/schema/provisioner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioner.js","sourceRoot":"","sources":["../../../src/tenant/schema/provisioner.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAWtB,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD;;GAEG;AACH,SAAS,cAAc,CAAC,MAAqC;IAG3D,OAAO,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU,CAAC;AACvF,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CACzB,MAAqC;IAKrC,OAAO,OAAO,MAAM,CAAC,SAAS,KAAK,UAAU,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,UAAU,CAAC;AAC5F,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAwC;IAExC,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAE3D;;OAEG;IACH,SAAS,aAAa,CAAC,KAA2B;QAChD,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACtE,CAAC;QAED,wBAAwB;QACxB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,gBAAgB,CACxB,KAAK,CAAC,IAAI,EACV,sDAAsD,CACvD,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,kCAAkC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,YAAY,CAAC,IAAY;QACtC,IAAI,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3E,OAAO,QAAQ,KAAK,IAAI,CAAC;QAC3B,CAAC;QAED,IAAI,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAqB;2DACX,IAAI;OACxD,CAAC;YACF,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,KAAK,CAAC;QACpC,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,kBAAkB,CAC/B,KAA2B,EAC3B,UAAkB;QAElB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,IAAI,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;gBAChC,IAAI,EAAE;oBACJ,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,UAAU;oBACV,MAAM,EAAE,SAAS;iBAClB;aACF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAE/B,MAAM,YAAY,CAAC,WAAW,CAAA;;kBAElB,EAAE,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,UAAU,gBAAgB,GAAG,KAAK,GAAG;OACrF,CAAC;YAEF,OAAO;gBACL,EAAE;gBACF,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,UAAU;gBACV,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACf,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,kBAAkB,CAAC,QAAgB,EAAE,MAAoB;QACtE,IAAI,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,MAAM,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC/B,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;gBACvB,IAAI,EAAE,EAAE,MAAM,EAAE;aACjB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;YACrC,MAAM,YAAY,CAAC,WAAW,CAAA;sCACE,MAAM,kBAAkB,IAAI,IAAI,EAAE,eAAe,QAAQ;OACxF,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,kBAAkB,CAAC,QAAgB;QAChD,IAAI,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,MAAM,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,IAAI,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;YACrC,MAAM,YAAY,CAAC,WAAW,CAAA,kCAAkC,QAAQ,EAAE,CAAC;YAC3E,OAAO;QACT,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,SAAS,CAAC,QAAgB;QACvC,IAAI,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,OAAO,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAQ;2CACd,QAAQ;OAC5C,CAAC;YACF,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAC3B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,aAAa;QAC1B,IAAI,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,OAAO,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxC,CAAC;QAED,IAAI,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;YACrC,OAAO,YAAY,CAAC,SAAS,CAAQ,uBAAuB,CAAC;QAC/D,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL;;WAEG;QACH,KAAK,CAAC,SAAS,CAAC,KAA2B;YACzC,aAAa,CAAC,KAAK,CAAC,CAAC;YAErB,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,MAAM,GAAkB,IAAI,CAAC;YACjC,IAAI,aAAa,GAAG,KAAK,CAAC;YAE1B,IAAI,CAAC;gBACH,4BAA4B;gBAC5B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC9C,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,CAAC,IAAI,kBAAkB,CAAC,CAAC;gBACrE,CAAC;gBAED,4CAA4C;gBAC5C,MAAM,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;gBAErD,8BAA8B;gBAC9B,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAClE,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC;gBAErC,gCAAgC;gBAChC,MAAM,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;gBAEjD,oBAAoB;gBACpB,MAAM,aAAa,GAAG,MAAM,aAAa,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;gBAEpE,qCAAqC;gBACrC,MAAM,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACvC,UAAU,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;gBAErC,6BAA6B;gBAC7B,MAAM,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;gBAE9C,OAAO;oBACL,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;oBACvC,aAAa;oBACb,iBAAiB,EAAE,aAAa,CAAC,iBAAiB;iBACnD,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,sBAAsB;gBACtB,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,CAAC;wBACH,MAAM,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACtC,CAAC;oBAAC,MAAM,CAAC;wBACP,wBAAwB;oBAC1B,CAAC;gBACH,CAAC;gBAED,IAAI,aAAa,EAAE,CAAC;oBAClB,IAAI,CAAC;wBACH,MAAM,aAAa,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;oBAC/C,CAAC;oBAAC,MAAM,CAAC;wBACP,wBAAwB;oBAC1B,CAAC;gBACH,CAAC;gBAED,MAAM,IAAI,cAAc,CACtB,KAAK,CAAC,IAAI,EACV,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;YACJ,CAAC;QACH,CAAC;QAED;;WAEG;QACH,KAAK,CAAC,WAAW,CAAC,QAAgB;YAChC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;YAEzC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAC1C,CAAC;YAED,IAAI,CAAC;gBACH,sCAAsC;gBACtC,MAAM,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;gBAEhD,uBAAuB;gBACvB,IAAI,CAAC;oBACH,MAAM,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACtD,CAAC;gBAAC,MAAM,CAAC;oBACP,yDAAyD;gBAC3D,CAAC;gBAED,8BAA8B;gBAC9B,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;oBACzC,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,MAAM,IAAI,gBAAgB,CACxB,QAAQ,EACR,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;YACJ,CAAC;QACH,CAAC;QAED;;WAEG;QACH,KAAK,CAAC,UAAU;YACd,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAC;YACtC,MAAM,OAAO,GAA0B,EAAE,CAAC;YAE1C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC9D,SAAS,CAAC,mCAAmC;gBAC/C,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;oBACjD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;oBACpE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACrB,MAAM,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;gBAChD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,KAAK,CAAC,yCAAyC,MAAM,CAAC,UAAU,GAAG,EAAE,KAAK,CAAC,CAAC;oBACpF,8BAA8B;gBAChC,CAAC;YACH,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tenant/types.d.ts

@@ -0,0 +1,432 @@
+/**
+ * Multi-tenancy type definitions for @veloxts/orm/tenant
+ *
+ * Schema-per-tenant isolation with PostgreSQL schemas.
+ */
+import type { DatabaseClient } from '../types.js';
+/**
+ * Tenant status lifecycle states
+ */
+export type TenantStatus = 'active' | 'suspended' | 'pending' | 'migrating';
+/**
+ * Tenant entity representing a single tenant in the system
+ */
+export interface Tenant {
+    /** Unique tenant identifier (UUID) */
+    id: string;
+    /** URL-safe slug for the tenant (e.g., 'acme-corp') */
+    slug: string;
+    /** Human-readable tenant name */
+    name: string;
+    /** PostgreSQL schema name (e.g., 'tenant_acme_corp') */
+    schemaName: string;
+    /** Current tenant status */
+    status: TenantStatus;
+    /** ISO timestamp when tenant was created */
+    createdAt: Date;
+    /** ISO timestamp when tenant was last updated */
+    updatedAt: Date;
+}
+/**
+ * Configuration for tenant client pool
+ */
+export interface TenantClientPoolConfig<TClient extends DatabaseClient> {
+    /**
+     * Base database URL (without schema parameter)
+     * @example 'postgresql://user:pass@localhost:5432/mydb'
+     */
+    baseDatabaseUrl: string;
+    /**
+     * Factory function to create a new PrismaClient for a tenant schema
+     *
+     * @param schemaName - The PostgreSQL schema name to connect to
+     * @returns A new PrismaClient instance configured for the schema
+     *
+     * @example
+     * ```typescript
+     * createClient: (schemaName) => {
+     *   const url = `${baseUrl}?schema=${schemaName}`;
+     *   const adapter = new PrismaPg({ connectionString: url });
+     *   return new PrismaClient({ adapter });
+     * }
+     * ```
+     */
+    createClient: (schemaName: string) => TClient;
+    /**
+     * Maximum number of concurrent clients in the pool
+     * @default 50
+     */
+    maxClients?: number;
+    /**
+     * Idle timeout in milliseconds before evicting unused clients
+     * @default 300000 (5 minutes)
+     */
+    idleTimeoutMs?: number;
+}
+/**
+ * Cached client entry with metadata
+ */
+export interface CachedClient<TClient extends DatabaseClient> {
+    /** The database client instance */
+    client: TClient;
+    /** Schema this client is connected to */
+    schemaName: string;
+    /** Timestamp when client was last accessed */
+    lastAccessedAt: number;
+    /** Timestamp when client was created */
+    createdAt: number;
+}
+/**
+ * Configuration for tenant middleware
+ */
+export interface TenantMiddlewareConfig<TClient extends DatabaseClient> {
+    /**
+     * Function to load tenant from public schema by ID
+     *
+     * @param tenantId - The tenant ID from JWT claim
+     * @returns The tenant entity or null if not found
+     *
+     * @example
+     * ```typescript
+     * loadTenant: async (tenantId) => {
+     *   return publicDb.tenant.findUnique({ where: { id: tenantId } });
+     * }
+     * ```
+     */
+    loadTenant: (tenantId: string) => Promise<Tenant | null>;
+    /**
+     * Client pool for obtaining tenant-scoped database clients
+     */
+    clientPool: TenantClientPool<TClient>;
+    /**
+     * Optional: Public database client for shared data
+     * If provided, will be available as ctx.publicDb
+     */
+    publicClient?: TClient;
+    /**
+     * Extract tenant ID from context
+     * @default Extracts from ctx.auth.token.tenantId (JWT claim)
+     */
+    getTenantId?: (ctx: TenantContextInput) => string | undefined;
+    /**
+     * Allow requests without tenant context
+     * Useful for public endpoints that don't require tenant isolation
+     * @default false
+     */
+    allowNoTenant?: boolean;
+    /**
+     * SECURITY: Verify user has access to the requested tenant
+     *
+     * This callback is called AFTER the tenant is loaded but BEFORE
+     * granting access. Use it to verify the user actually belongs
+     * to the tenant they're trying to access.
+     *
+     * This prevents tenant isolation bypass attacks where a user
+     * might manipulate JWT claims to access another tenant's data.
+     *
+     * @param ctx - The request context containing user info
+     * @param tenant - The loaded tenant entity
+     * @returns true if access is allowed, false to deny
+     *
+     * @example
+     * ```typescript
+     * verifyTenantAccess: async (ctx, tenant) => {
+     *   // Check user's tenant memberships in database
+     *   const membership = await publicDb.tenantMember.findFirst({
+     *     where: { userId: ctx.user?.id, tenantId: tenant.id }
+     *   });
+     *   return membership !== null;
+     * }
+     * ```
+     */
+    verifyTenantAccess?: (ctx: TenantContextInput, tenant: Tenant) => Promise<boolean> | boolean;
+}
+/**
+ * Input context for tenant middleware (before tenant is resolved)
+ */
+export interface TenantContextInput {
+    /** User from auth middleware */
+    user?: {
+        id: string;
+        [key: string]: unknown;
+    };
+    /** Auth context with JWT token */
+    auth?: {
+        token?: {
+            tenantId?: string;
+            [key: string]: unknown;
+        };
+        [key: string]: unknown;
+    };
+    [key: string]: unknown;
+}
+/**
+ * Context extension added by tenant middleware
+ */
+export interface TenantContext<TClient extends DatabaseClient> {
+    /** Current tenant info */
+    tenant: Tenant;
+    /** Tenant-scoped database client */
+    db: TClient;
+    /** Public schema client (if configured) */
+    publicDb?: TClient;
+}
+/**
+ * Configuration for tenant schema manager
+ */
+export interface TenantSchemaManagerConfig {
+    /**
+     * Database URL for executing schema DDL
+     */
+    databaseUrl: string;
+    /**
+     * Prefix for tenant schema names
+     * @default 'tenant_'
+     */
+    schemaPrefix?: string;
+    /**
+     * Path to Prisma schema file for migrations
+     * @default './prisma/schema.prisma'
+     */
+    prismaSchemaPath?: string;
+}
+/**
+ * Result of schema creation
+ */
+export interface SchemaCreateResult {
+    /** The created schema name */
+    schemaName: string;
+    /** Whether the schema was newly created (false if already existed) */
+    created: boolean;
+}
+/**
+ * Result of schema migration
+ */
+export interface SchemaMigrateResult {
+    /** The migrated schema name */
+    schemaName: string;
+    /** Number of migrations applied */
+    migrationsApplied: number;
+}
+/**
+ * Extended database client interface for tenant operations
+ *
+ * This interface defines the Prisma-specific methods needed by the provisioner.
+ * It allows type-safe access to tenant CRUD operations without unsafe inline casting.
+ *
+ * @example
+ * ```typescript
+ * // Your Prisma client already satisfies this interface if you have a 'tenant' model
+ * const provisioner = createTenantProvisioner({
+ *   schemaManager,
+ *   publicClient: prismaClient as TenantDatabaseClient,
+ *   clientPool,
+ * });
+ * ```
+ */
+export interface TenantDatabaseClient extends DatabaseClient {
+    /**
+     * Prisma model delegate for tenant operations (optional)
+     * If not available, falls back to raw queries
+     */
+    tenant?: {
+        findUnique: (args: {
+            where: {
+                id?: string;
+                slug?: string;
+            };
+        }) => Promise<Tenant | null>;
+        findMany: (args?: {
+            where?: {
+                status?: TenantStatus;
+            };
+        }) => Promise<Tenant[]>;
+        create: (args: {
+            data: {
+                slug: string;
+                name: string;
+                schemaName: string;
+                status: TenantStatus;
+            };
+        }) => Promise<Tenant>;
+        update: (args: {
+            where: {
+                id: string;
+            };
+            data: {
+                status?: TenantStatus;
+                updatedAt?: Date;
+            };
+        }) => Promise<Tenant>;
+        delete: (args: {
+            where: {
+                id: string;
+            };
+        }) => Promise<Tenant>;
+    };
+    /**
+     * Prisma raw query execution (fallback when model delegate unavailable)
+     */
+    $queryRaw?: <T>(query: TemplateStringsArray, ...values: unknown[]) => Promise<T[]>;
+    /**
+     * Prisma raw execute for INSERT/UPDATE/DELETE
+     */
+    $executeRaw?: (query: TemplateStringsArray, ...values: unknown[]) => Promise<number>;
+}
+/**
+ * Configuration for tenant provisioner
+ */
+export interface TenantProvisionerConfig<TClient extends DatabaseClient> {
+    /** Schema manager for DDL operations */
+    schemaManager: TenantSchemaManager;
+    /**
+     * Public schema client for creating tenant records
+     *
+     * Must implement TenantDatabaseClient interface with either:
+     * - `tenant` model delegate (Prisma with tenant model)
+     * - `$queryRaw` and `$executeRaw` methods (raw query fallback)
+     */
+    publicClient: TClient & Partial<TenantDatabaseClient>;
+    /** Client pool for testing new tenant connections */
+    clientPool: TenantClientPool<TClient>;
+}
+/**
+ * Input for provisioning a new tenant
+ */
+export interface TenantProvisionInput {
+    /** URL-safe slug (will be sanitized) */
+    slug: string;
+    /** Human-readable name */
+    name: string;
+    /** Optional: Additional metadata */
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Result of tenant provisioning
+ */
+export interface TenantProvisionResult {
+    /** The created tenant */
+    tenant: Tenant;
+    /** Whether schema was newly created */
+    schemaCreated: boolean;
+    /** Number of migrations applied */
+    migrationsApplied: number;
+}
+/**
+ * Interface for tenant client pool
+ */
+export interface TenantClientPool<TClient extends DatabaseClient> {
+    /**
+     * Get or create a client for a tenant schema
+     */
+    getClient(schemaName: string): Promise<TClient>;
+    /**
+     * Release a client back to the pool
+     */
+    releaseClient(schemaName: string): void;
+    /**
+     * Check if a client exists in the pool without creating it
+     * Useful for health checks
+     */
+    hasClient(schemaName: string): boolean;
+    /**
+     * Disconnect all clients and clear the pool
+     *
+     * IMPORTANT: This also stops the cleanup timer.
+     * Always call this method during application shutdown.
+     */
+    disconnectAll(): Promise<void>;
+    /**
+     * Stop the cleanup timer without disconnecting clients
+     *
+     * Use this when you need to stop the timer but keep clients connected.
+     * For full cleanup, use `disconnectAll()` instead.
+     */
+    close(): void;
+    /**
+     * Get current pool statistics
+     */
+    getStats(): TenantPoolStats;
+}
+/**
+ * Pool statistics
+ */
+export interface TenantPoolStats {
+    /** Number of active clients */
+    activeClients: number;
+    /** Maximum allowed clients */
+    maxClients: number;
+    /** Total clients created since pool initialization */
+    totalCreated: number;
+    /** Total clients evicted due to idle timeout */
+    totalEvicted: number;
+}
+/**
+ * Interface for tenant schema manager
+ */
+export interface TenantSchemaManager {
+    /**
+     * Create a new PostgreSQL schema
+     */
+    createSchema(slug: string): Promise<SchemaCreateResult>;
+    /**
+     * Run Prisma migrations on a schema
+     */
+    migrateSchema(schemaName: string): Promise<SchemaMigrateResult>;
+    /**
+     * Delete a schema (DANGEROUS - drops all data)
+     */
+    deleteSchema(schemaName: string): Promise<void>;
+    /**
+     * List all tenant schemas
+     */
+    listSchemas(): Promise<string[]>;
+    /**
+     * Check if a schema exists
+     */
+    schemaExists(schemaName: string): Promise<boolean>;
+}
+/**
+ * Interface for tenant provisioner
+ */
+export interface TenantProvisioner {
+    /**
+     * Provision a new tenant (create record + schema + migrate)
+     */
+    provision(input: TenantProvisionInput): Promise<TenantProvisionResult>;
+    /**
+     * Deprovision a tenant (delete schema + record)
+     */
+    deprovision(tenantId: string): Promise<void>;
+    /**
+     * Migrate all tenant schemas
+     */
+    migrateAll(): Promise<SchemaMigrateResult[]>;
+}
+/**
+ * Extend @veloxts/core BaseContext with tenant fields
+ *
+ * Users should add this to their project:
+ * ```typescript
+ * declare module '@veloxts/core' {
+ *   interface BaseContext {
+ *     tenant?: Tenant;
+ *     db: PrismaClient;
+ *     publicDb?: PrismaClient;
+ *   }
+ * }
+ * ```
+ */
+/**
+ * Extend @veloxts/auth TokenPayload with tenantId
+ *
+ * Users should add this to their project:
+ * ```typescript
+ * declare module '@veloxts/auth' {
+ *   interface TokenPayload {
+ *     tenantId?: string;
+ *   }
+ * }
+ * ```
+ */
+//# sourceMappingURL=types.d.ts.map

package/dist/tenant/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/tenant/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAMlD;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,WAAW,CAAC;AAE5E;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,sCAAsC;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,4BAA4B;IAC5B,MAAM,EAAE,YAAY,CAAC;IACrB,4CAA4C;IAC5C,SAAS,EAAE,IAAI,CAAC;IAChB,iDAAiD;IACjD,SAAS,EAAE,IAAI,CAAC;CACjB;AAMD;;GAEG;AACH,MAAM,WAAW,sBAAsB,CAAC,OAAO,SAAS,cAAc;IACpE;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAC;IAExB;;;;;;;;;;;;;;OAcG;IACH,YAAY,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;IAE9C;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY,CAAC,OAAO,SAAS,cAAc;IAC1D,mCAAmC;IACnC,MAAM,EAAE,OAAO,CAAC;IAChB,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,cAAc,EAAE,MAAM,CAAC;IACvB,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD;;GAEG;AACH,MAAM,WAAW,sBAAsB,CAAC,OAAO,SAAS,cAAc;IACpE;;;;;;;;;;;;OAYG;IACH,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAEzD;;OAEG;IACH,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEtC;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,kBAAkB,KAAK,MAAM,GAAG,SAAS,CAAC;IAE9D;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAC9F;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,gCAAgC;IAChC,IAAI,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC9C,kCAAkC;IAClC,IAAI,CAAC,EAAE;QACL,KAAK,CAAC,EAAE;YACN,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;SACxB,CAAC;QACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa,CAAC,OAAO,SAAS,cAAc;IAC3D,0BAA0B;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAMD;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,8BAA8B;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,+BAA+B;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAMD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,oBAAqB,SAAQ,cAAc;IAC1D;;;OAGG;IACH,MAAM,CAAC,EAAE;QACP,UAAU,EAAE,CAAC,IAAI,EAAE;YAAE,KAAK,EAAE;gBAAE,EAAE,CAAC,EAAE,MAAM,CAAC;gBAAC,IAAI,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;QACxF,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE;gBAAE,MAAM,CAAC,EAAE,YAAY,CAAA;aAAE,CAAA;SAAE,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9E,MAAM,EAAE,CAAC,IAAI,EAAE;YACb,IAAI,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAC;gBAAC,UAAU,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,YAAY,CAAA;aAAE,CAAC;SAChF,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,EAAE,CAAC,IAAI,EAAE;YACb,KAAK,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAA;aAAE,CAAC;YACtB,IAAI,EAAE;gBAAE,MAAM,CAAC,EAAE,YAAY,CAAC;gBAAC,SAAS,CAAC,EAAE,IAAI,CAAA;aAAE,CAAC;SACnD,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,EAAE,CAAC,IAAI,EAAE;YAAE,KAAK,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;KAC9D,CAAC;IAEF;;OAEG;IACH,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAEnF;;OAEG;IACH,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACtF;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB,CAAC,OAAO,SAAS,cAAc;IACrE,wCAAwC;IACxC,aAAa,EAAE,mBAAmB,CAAC;IAEnC;;;;;;OAMG;IACH,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEtD,qDAAqD;IACrD,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,yBAAyB;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,aAAa,EAAE,OAAO,CAAC;IACvB,mCAAmC;IACnC,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAMD;;GAEG;AACH,MAAM,WAAW,gBAAgB,CAAC,OAAO,SAAS,cAAc;IAC9D;;OAEG;IACH,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEhD;;OAEG;IACH,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAExC;;;OAGG;IACH,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IAEvC;;;;;OAKG;IACH,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/B;;;;;OAKG;IACH,KAAK,IAAI,IAAI,CAAC;IAEd;;OAEG;IACH,QAAQ,IAAI,eAAe,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,+BAA+B;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,8BAA8B;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,YAAY,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAExD;;OAEG;IACH,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAEhE;;OAEG;IACH,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhD;;OAEG;IACH,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAEjC;;OAEG;IACH,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpD;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAEvE;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7C;;OAEG;IACH,UAAU,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;CAC9C;AAMD;;;;;;;;;;;;;GAaG;AAEH;;;;;;;;;;;GAWG"}

package/dist/tenant/types.js

@@ -0,0 +1,36 @@
+/**
+ * Multi-tenancy type definitions for @veloxts/orm/tenant
+ *
+ * Schema-per-tenant isolation with PostgreSQL schemas.
+ */
+export {};
+// ============================================================================
+// Declaration Merging
+// ============================================================================
+/**
+ * Extend @veloxts/core BaseContext with tenant fields
+ *
+ * Users should add this to their project:
+ * ```typescript
+ * declare module '@veloxts/core' {
+ *   interface BaseContext {
+ *     tenant?: Tenant;
+ *     db: PrismaClient;
+ *     publicDb?: PrismaClient;
+ *   }
+ * }
+ * ```
+ */
+/**
+ * Extend @veloxts/auth TokenPayload with tenantId
+ *
+ * Users should add this to their project:
+ * ```typescript
+ * declare module '@veloxts/auth' {
+ *   interface TokenPayload {
+ *     tenantId?: string;
+ *   }
+ * }
+ * ```
+ */
+//# sourceMappingURL=types.js.map

package/dist/tenant/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/tenant/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;AA4bH,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E;;;;;;;;;;;;;GAaG;AAEH;;;;;;;;;;;GAWG"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@veloxts/orm",
-  "version": "0.6.27",
+  "version": "0.6.29",
   "description": "Prisma wrapper with enhanced DX for VeloxTS framework",
   "type": "module",
   "main": "dist/index.js",
@@ -9,13 +9,21 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./tenant": {
+      "types": "./dist/tenant/index.d.ts",
+      "import": "./dist/tenant/index.js"
     }
   },
   "dependencies": {
     "fastify": "5.6.2",
-    "@veloxts/core": "0.6.27"
+    "pg": "8.16.0",
+    "pg-format": "1.0.4",
+    "@veloxts/core": "0.6.29"
   },
   "devDependencies": {
+    "@types/pg": "8.15.4",
+    "@types/pg-format": "1.0.5",
     "@vitest/coverage-v8": "4.0.16",
     "typescript": "5.9.3",
     "vitest": "4.0.16"