@xemahq/biome-database-nest 0.4.0 → 0.5.1

package/README.md

@@ -50,6 +50,73 @@ no DB boilerplate. It provides:
 - **Boot-time bootstrap.** `bootstrapBiomeDatabases` resolves config, writes an
   inline CA cert if supplied, creates the schema under an advisory lock, runs
   `prisma migrate deploy`, and exports the resolved connection into the env.
+- **Systematic org-tenant isolation.** `createBiomePrismaService` detects
+  org-scoped models (any model with an `orgId` column) from the client's
+  runtime data model and scopes every query on them to the request's org via a
+  Prisma client extension — no hand-written `where: { orgId }` per service.
+
+## Tenant isolation
+
+Org-scoped access is pushed down into the client so it is systematic instead of
+hand-written. Any model declaring the org column (default `orgId`; configurable
+via `tenantIsolation.orgField`, opt-outs via `tenantIsolation.exemptModels`) is
+detected at client construction and covered by the isolation extension.
+
+### Modes
+
+Resolution: `tenantIsolation.mode` option > `XEMA_TENANT_ISOLATION_MODE` env
+var > default `observe`. An invalid env value fails the boot — it never
+silently weakens the mode.
+
+| Mode | Behavior of the default injected client |
+| --- | --- |
+| `observe` (default) | NO query is rewritten. Every violation `enforce` would reject (org mismatch in a write payload, org-model access with no org context) is logged as a structured warning. |
+| `enforce` | `where` clauses are AND-ed with `{ orgId }` (unique wheres included — a cross-org `findUnique` returns `null`, a cross-org `update`/`delete` raises P2025); create payloads are stamped with the org; violations throw a typed `TenantIsolationError`. |
+| `off` | Passthrough kill switch. `forOrg()` still enforces — explicit scoping is never silently degraded. |
+
+The **rollout story** is deliberate: everything ships in `observe` (zero
+behavior change across ~60 services), each service burns down its warnings,
+then flips itself to `enforce` via `XEMA_TENANT_ISOLATION_MODE=enforce` (or the
+module option). `enforce` is the target state; `off` exists only as an
+emergency kill switch.
+
+### Where the org comes from
+
+Inside a request, the org is the `RequestContext.orgId` that
+`RequestContextMiddleware` resolved. `AmbientOrgContextMiddleware`
+(`@xemahq/platform-common`) runs right after it and lifts the org into the
+ambient async scope the extension reads. Services wired through
+`configureAuthMiddleware` / `applyXemaServiceMiddleware` get BOTH middlewares
+automatically — no per-service wiring is needed.
+
+### The boot-path rule
+
+Outside a request (boot, migrations, seeding, contribution sync, Temporal
+activities, background workers) there is NO ambient org. In `enforce` mode,
+touching an org-scoped model there throws. Scope explicitly:
+
+```ts
+// Jobs/workers acting for one org — hard-bound, always enforced:
+const scoped = prisma.forOrg(orgId);
+await scoped.artifact.findMany();           // implicitly WHERE orgId = <orgId>
+
+// Legitimate cross-org system paths (boot backfills, platform admin):
+const system = prisma.asSystem();           // unscoped; debug-logged per call site
+
+// Non-HTTP entrypoints that DO have an org (queue consumers, activities):
+// runWithAmbientOrg comes from @xemahq/platform-common.
+await runWithAmbientOrg(orgId, () => handler());
+```
+
+`forOrg(orgId)` always enforces, in every mode. `asSystem()` returns the raw
+client and logs each distinct call site once at debug level.
+
+### Conformance testing
+
+`@xemahq/biome-test-utils` exports `assertTenantIsolation(client, { orgA,
+orgB, models })` — given the wrapped client and a list of org-scoped model
+probes, it verifies cross-org reads return empty/null, cross-org writes throw,
+and `asSystem()` sees both orgs, cleaning up after itself.
 
 ## When to use it
 

package/dist/index.d.ts

@@ -1,8 +1,13 @@
-export { DEFAULT_BIOME_DB_KEY, deriveBiomeSchemaName, } from './lib/schema-name';
+export { DEFAULT_BIOME_DB_KEY, deriveBiomeSchemaName } from './lib/schema-name';
 export { resolveBiomeDatabaseConfigFromEnv, type BiomeDatabaseConfig, } from './lib/config';
 export { createBiomePrismaAdapter, createBiomePrismaAdapterFromEnv, } from './lib/adapter';
-export { fetchSystemDatabaseConfig, resolveControlPlaneBaseUrl, ORG_DATABASE_POOL_API_URL_ENV, type SystemDatabaseConfigRequest, } from './lib/control-plane-client';
+export { fetchSystemDatabaseConfig, type SystemDatabaseConfigRequest, } from './lib/control-plane-client';
+export { resolveControlPlaneBaseUrl, ORG_DATABASE_POOL_SERVICE_NAME, type ControlPlaneDiscoveryOptions, } from './lib/control-plane-discovery';
 export { bootstrapBiomeDatabases, type BiomeDatabaseDeclaration, type BootstrapBiomeDatabasesOptions, } from './lib/bootstrap';
 export { BiomeDatabaseModule, BIOME_DATABASE_READY, type BiomeDatabaseModuleOptions, } from './lib/nest/biome-database.module';
-export { createBiomePrismaService, type BiomePrismaClient, type BiomePrismaClientCtor, } from './lib/nest/prisma-service-factory';
+export { createBiomePrismaService, type BiomePrismaClient, type BiomePrismaClientCtor, type BiomePrismaServiceInstance, type CreateBiomePrismaServiceOptions, type TenantIsolationServiceOptions, type TenantScopedApi, } from './lib/nest/prisma-service-factory';
+export { TenantIsolationMode, TENANT_ISOLATION_MODE_ENV_VAR, resolveTenantIsolationMode, } from './lib/tenant-isolation/tenant-isolation-mode';
+export { TenantIsolationError, TenantIsolationViolationKind, formatTenantIsolationViolation, type TenantIsolationViolation, } from './lib/tenant-isolation/tenant-isolation-error';
+export { PrismaModelOperation, scopeArgsToOrg, type OrgScopeOutcome, type OrgScopeRequest, } from './lib/tenant-isolation/org-scope';
+export { DEFAULT_ORG_FIELD, collectOrgScopedModels, createTenantIsolationExtension, type CreateTenantIsolationExtensionOptions, type TenantIsolationExtensionDefinition, type TenantIsolationLogger, type TenantIsolationQueryContext, } from './lib/tenant-isolation/tenant-isolation.extension';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,iCAAiC,EACjC,KAAK,mBAAmB,GACzB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,wBAAwB,EACxB,+BAA+B,GAChC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,6BAA6B,EAC7B,KAAK,2BAA2B,GACjC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,uBAAuB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,8BAA8B,GACpC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,0BAA0B,GAChC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,wBAAwB,EACxB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,mCAAmC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EACL,iCAAiC,EACjC,KAAK,mBAAmB,GACzB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,wBAAwB,EACxB,+BAA+B,GAChC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,yBAAyB,EACzB,KAAK,2BAA2B,GACjC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,KAAK,4BAA4B,GAClC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,uBAAuB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,8BAA8B,GACpC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,0BAA0B,GAChC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,wBAAwB,EACxB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAC/B,KAAK,+BAA+B,EACpC,KAAK,6BAA6B,EAClC,KAAK,eAAe,GACrB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,mBAAmB,EACnB,6BAA6B,EAC7B,0BAA0B,GAC3B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,8BAA8B,EAC9B,KAAK,wBAAwB,GAC9B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,8BAA8B,EAC9B,KAAK,qCAAqC,EAC1C,KAAK,kCAAkC,EACvC,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,GACjC,MAAM,mDAAmD,CAAC"}

package/dist/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createBiomePrismaService = exports.BIOME_DATABASE_READY = exports.BiomeDatabaseModule = exports.bootstrapBiomeDatabases = exports.ORG_DATABASE_POOL_API_URL_ENV = exports.resolveControlPlaneBaseUrl = exports.fetchSystemDatabaseConfig = exports.createBiomePrismaAdapterFromEnv = exports.createBiomePrismaAdapter = exports.resolveBiomeDatabaseConfigFromEnv = exports.deriveBiomeSchemaName = exports.DEFAULT_BIOME_DB_KEY = void 0;
+exports.createTenantIsolationExtension = exports.collectOrgScopedModels = exports.DEFAULT_ORG_FIELD = exports.scopeArgsToOrg = exports.PrismaModelOperation = exports.formatTenantIsolationViolation = exports.TenantIsolationViolationKind = exports.TenantIsolationError = exports.resolveTenantIsolationMode = exports.TENANT_ISOLATION_MODE_ENV_VAR = exports.TenantIsolationMode = exports.createBiomePrismaService = exports.BIOME_DATABASE_READY = exports.BiomeDatabaseModule = exports.bootstrapBiomeDatabases = exports.ORG_DATABASE_POOL_SERVICE_NAME = exports.resolveControlPlaneBaseUrl = exports.fetchSystemDatabaseConfig = exports.createBiomePrismaAdapterFromEnv = exports.createBiomePrismaAdapter = exports.resolveBiomeDatabaseConfigFromEnv = exports.deriveBiomeSchemaName = exports.DEFAULT_BIOME_DB_KEY = void 0;
 var schema_name_1 = require("./lib/schema-name");
 Object.defineProperty(exports, "DEFAULT_BIOME_DB_KEY", { enumerable: true, get: function () { return schema_name_1.DEFAULT_BIOME_DB_KEY; } });
 Object.defineProperty(exports, "deriveBiomeSchemaName", { enumerable: true, get: function () { return schema_name_1.deriveBiomeSchemaName; } });
@@ -11,8 +11,9 @@ Object.defineProperty(exports, "createBiomePrismaAdapter", { enumerable: true, g
 Object.defineProperty(exports, "createBiomePrismaAdapterFromEnv", { enumerable: true, get: function () { return adapter_1.createBiomePrismaAdapterFromEnv; } });
 var control_plane_client_1 = require("./lib/control-plane-client");
 Object.defineProperty(exports, "fetchSystemDatabaseConfig", { enumerable: true, get: function () { return control_plane_client_1.fetchSystemDatabaseConfig; } });
-Object.defineProperty(exports, "resolveControlPlaneBaseUrl", { enumerable: true, get: function () { return control_plane_client_1.resolveControlPlaneBaseUrl; } });
-Object.defineProperty(exports, "ORG_DATABASE_POOL_API_URL_ENV", { enumerable: true, get: function () { return control_plane_client_1.ORG_DATABASE_POOL_API_URL_ENV; } });
+var control_plane_discovery_1 = require("./lib/control-plane-discovery");
+Object.defineProperty(exports, "resolveControlPlaneBaseUrl", { enumerable: true, get: function () { return control_plane_discovery_1.resolveControlPlaneBaseUrl; } });
+Object.defineProperty(exports, "ORG_DATABASE_POOL_SERVICE_NAME", { enumerable: true, get: function () { return control_plane_discovery_1.ORG_DATABASE_POOL_SERVICE_NAME; } });
 var bootstrap_1 = require("./lib/bootstrap");
 Object.defineProperty(exports, "bootstrapBiomeDatabases", { enumerable: true, get: function () { return bootstrap_1.bootstrapBiomeDatabases; } });
 var biome_database_module_1 = require("./lib/nest/biome-database.module");
@@ -20,4 +21,19 @@ Object.defineProperty(exports, "BiomeDatabaseModule", { enumerable: true, get: f
 Object.defineProperty(exports, "BIOME_DATABASE_READY", { enumerable: true, get: function () { return biome_database_module_1.BIOME_DATABASE_READY; } });
 var prisma_service_factory_1 = require("./lib/nest/prisma-service-factory");
 Object.defineProperty(exports, "createBiomePrismaService", { enumerable: true, get: function () { return prisma_service_factory_1.createBiomePrismaService; } });
+var tenant_isolation_mode_1 = require("./lib/tenant-isolation/tenant-isolation-mode");
+Object.defineProperty(exports, "TenantIsolationMode", { enumerable: true, get: function () { return tenant_isolation_mode_1.TenantIsolationMode; } });
+Object.defineProperty(exports, "TENANT_ISOLATION_MODE_ENV_VAR", { enumerable: true, get: function () { return tenant_isolation_mode_1.TENANT_ISOLATION_MODE_ENV_VAR; } });
+Object.defineProperty(exports, "resolveTenantIsolationMode", { enumerable: true, get: function () { return tenant_isolation_mode_1.resolveTenantIsolationMode; } });
+var tenant_isolation_error_1 = require("./lib/tenant-isolation/tenant-isolation-error");
+Object.defineProperty(exports, "TenantIsolationError", { enumerable: true, get: function () { return tenant_isolation_error_1.TenantIsolationError; } });
+Object.defineProperty(exports, "TenantIsolationViolationKind", { enumerable: true, get: function () { return tenant_isolation_error_1.TenantIsolationViolationKind; } });
+Object.defineProperty(exports, "formatTenantIsolationViolation", { enumerable: true, get: function () { return tenant_isolation_error_1.formatTenantIsolationViolation; } });
+var org_scope_1 = require("./lib/tenant-isolation/org-scope");
+Object.defineProperty(exports, "PrismaModelOperation", { enumerable: true, get: function () { return org_scope_1.PrismaModelOperation; } });
+Object.defineProperty(exports, "scopeArgsToOrg", { enumerable: true, get: function () { return org_scope_1.scopeArgsToOrg; } });
+var tenant_isolation_extension_1 = require("./lib/tenant-isolation/tenant-isolation.extension");
+Object.defineProperty(exports, "DEFAULT_ORG_FIELD", { enumerable: true, get: function () { return tenant_isolation_extension_1.DEFAULT_ORG_FIELD; } });
+Object.defineProperty(exports, "collectOrgScopedModels", { enumerable: true, get: function () { return tenant_isolation_extension_1.collectOrgScopedModels; } });
+Object.defineProperty(exports, "createTenantIsolationExtension", { enumerable: true, get: function () { return tenant_isolation_extension_1.createTenantIsolationExtension; } });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,iDAG2B;AAFzB,mHAAA,oBAAoB,OAAA;AACpB,oHAAA,qBAAqB,OAAA;AAEvB,uCAGsB;AAFpB,2HAAA,iCAAiC,OAAA;AAGnC,yCAGuB;AAFrB,mHAAA,wBAAwB,OAAA;AACxB,0HAAA,+BAA+B,OAAA;AAEjC,mEAKoC;AAJlC,iIAAA,yBAAyB,OAAA;AACzB,kIAAA,0BAA0B,OAAA;AAC1B,qIAAA,6BAA6B,OAAA;AAG/B,6CAIyB;AAHvB,oHAAA,uBAAuB,OAAA;AAIzB,0EAI0C;AAHxC,4HAAA,mBAAmB,OAAA;AACnB,6HAAA,oBAAoB,OAAA;AAGtB,4EAI2C;AAHzC,kIAAA,wBAAwB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,iDAAgF;AAAvE,mHAAA,oBAAoB,OAAA;AAAE,oHAAA,qBAAqB,OAAA;AACpD,uCAGsB;AAFpB,2HAAA,iCAAiC,OAAA;AAGnC,yCAGuB;AAFrB,mHAAA,wBAAwB,OAAA;AACxB,0HAAA,+BAA+B,OAAA;AAEjC,mEAGoC;AAFlC,iIAAA,yBAAyB,OAAA;AAG3B,yEAIuC;AAHrC,qIAAA,0BAA0B,OAAA;AAC1B,yIAAA,8BAA8B,OAAA;AAGhC,6CAIyB;AAHvB,oHAAA,uBAAuB,OAAA;AAIzB,0EAI0C;AAHxC,4HAAA,mBAAmB,OAAA;AACnB,6HAAA,oBAAoB,OAAA;AAGtB,4EAQ2C;AAPzC,kIAAA,wBAAwB,OAAA;AAQ1B,sFAIsD;AAHpD,4HAAA,mBAAmB,OAAA;AACnB,sIAAA,6BAA6B,OAAA;AAC7B,mIAAA,0BAA0B,OAAA;AAE5B,wFAKuD;AAJrD,8HAAA,oBAAoB,OAAA;AACpB,sIAAA,4BAA4B,OAAA;AAC5B,wIAAA,8BAA8B,OAAA;AAGhC,8DAK0C;AAJxC,iHAAA,oBAAoB,OAAA;AACpB,2GAAA,cAAc,OAAA;AAIhB,gGAQ2D;AAPzD,+HAAA,iBAAiB,OAAA;AACjB,oIAAA,sBAAsB,OAAA;AACtB,4IAAA,8BAA8B,OAAA"}

package/dist/lib/bootstrap.d.ts

@@ -1,3 +1,5 @@
+import type { KernelState } from '@xemahq/kernel-contracts/kernel-state';
+import { type ControlPlaneDiscoveryOptions } from './control-plane-discovery';
 export interface BiomeDatabaseDeclaration {
     readonly key?: string;
     readonly workspaceDir: string;
@@ -6,6 +8,8 @@ export interface BootstrapBiomeDatabasesOptions {
     readonly biomeId: string;
     readonly databases: readonly BiomeDatabaseDeclaration[];
     readonly serviceToken?: string | (() => Promise<string>);
+    readonly kernelState: KernelState;
+    readonly controlPlaneDiscovery?: ControlPlaneDiscoveryOptions;
     readonly requiredExtensions?: readonly string[];
 }
 export declare function bootstrapBiomeDatabases(opts: BootstrapBiomeDatabasesOptions): Promise<void>;

package/dist/lib/bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../src/lib/bootstrap.ts"],"names":[],"mappings":"AAsBA,MAAM,WAAW,wBAAwB;IAEvC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAOxD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAWzD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACjD;AAgPD,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,8BAA8B,GACnC,OAAO,CAAC,IAAI,CAAC,CAgCf"}
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../src/lib/bootstrap.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AAWzE,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,2BAA2B,CAAC;AAInC,MAAM,WAAW,wBAAwB;IAEvC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAQxD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAQzD,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAElC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,4BAA4B,CAAC;IAW9D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACjD;AAoPD,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,8BAA8B,GACnC,OAAO,CAAC,IAAI,CAAC,CAiDf"}

package/dist/lib/bootstrap.js

@@ -11,6 +11,7 @@ const migration_runner_prisma_1 = require("@xemahq/migration-runner-prisma");
 const pg_1 = require("pg");
 const config_1 = require("./config");
 const control_plane_client_1 = require("./control-plane-client");
+const control_plane_discovery_1 = require("./control-plane-discovery");
 const schema_name_1 = require("./schema-name");
 const LOG_PREFIX = '[biome-database]';
 function upperKeySuffix(key) {
@@ -25,12 +26,12 @@ async function resolveServiceToken(serviceToken) {
     }
     return typeof serviceToken === 'function' ? serviceToken() : serviceToken;
 }
-async function resolveDatabaseConfig(opts, key) {
+async function resolveDatabaseConfig(opts, key, getControlPlaneBaseUrl) {
     const local = (0, config_1.resolveBiomeDatabaseConfigFromEnv)(process.env, key);
     if (local !== null) {
         return local;
     }
-    const baseUrl = (0, control_plane_client_1.resolveControlPlaneBaseUrl)();
+    const baseUrl = await getControlPlaneBaseUrl();
     const token = await resolveServiceToken(opts.serviceToken);
     return (0, control_plane_client_1.fetchSystemDatabaseConfig)(baseUrl, token, {
         biomeId: opts.biomeId,
@@ -143,10 +144,17 @@ function exportResolvedEnv(key, config, runtimeUrl) {
     }
 }
 async function bootstrapBiomeDatabases(opts) {
+    let cachedBaseUrl;
+    const getControlPlaneBaseUrl = async () => {
+        if (cachedBaseUrl === undefined) {
+            cachedBaseUrl = await (0, control_plane_discovery_1.resolveControlPlaneBaseUrl)(opts.kernelState, opts.controlPlaneDiscovery);
+        }
+        return cachedBaseUrl;
+    };
     for (const decl of opts.databases) {
         const key = decl.key ?? schema_name_1.DEFAULT_BIOME_DB_KEY;
         console.log(`${LOG_PREFIX} biome=${opts.biomeId} key=${key}: resolving config`);
-        const rawConfig = await resolveDatabaseConfig(opts, key);
+        const rawConfig = await resolveDatabaseConfig(opts, key, getControlPlaneBaseUrl);
         const config = await materializeInlineCaCert(opts.biomeId, key, rawConfig);
         await ensureSchemaExists(opts.biomeId, key, config, opts.requiredExtensions ?? []);
         const migrateUrl = await runMigrations(opts.biomeId, key, decl.workspaceDir, config);

package/dist/lib/bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/lib/bootstrap.ts"],"names":[],"mappings":";;AAkSA,0DAkCC;AApUD,6CAAyC;AACzC,qCAAuC;AACvC,+CAA6C;AAC7C,qCAAiC;AACjC,yCAAiC;AAEjC,6DAGiC;AACjC,6EAAwE;AACxE,2BAA4B;AAG5B,qCAA6D;AAC7D,iEAGgC;AAChC,+CAAqD;AAiCrD,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAEtC,SAAS,cAAc,CAAC,GAAW;IACjC,OAAO,GAAG,KAAK,kCAAoB;QACjC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,YAA0D;IAE1D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,yDAAyD;YACpE,2CAA2C,CAC9C,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;AAC5E,CAAC;AAMD,KAAK,UAAU,qBAAqB,CAClC,IAAoC,EACpC,GAAW;IAEX,MAAM,KAAK,GAAG,IAAA,0CAAiC,EAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,IAAA,iDAA0B,GAAE,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3D,OAAO,IAAA,gDAAyB,EAAC,OAAO,EAAE,KAAK,EAAE;QAC/C,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,GAAG,KAAK,kCAAoB,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC,CAAC;AACL,CAAC;AAQD,KAAK,UAAU,uBAAuB,CACpC,OAAe,EACf,GAAW,EACX,MAA2B;IAE3B,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QAC9D,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC;SAC9B,MAAM,CAAC,GAAG,OAAO,IAAI,GAAG,EAAE,CAAC;SAC3B,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,oBAAoB,IAAI,MAAM,CAAC,CAAC;IAChE,MAAM,IAAA,oBAAS,EAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,GAAG,CACT,GAAG,UAAU,UAAU,OAAO,QAAQ,GAAG,6BAA6B,QAAQ,EAAE,CACjF,CAAC;IACF,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AACrD,CAAC;AAiBD,SAAS,UAAU,CACjB,MAA2B;IAE3B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,aAAa,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACzC,MAAM,EAAE,GACN,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAA,sBAAY,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1E,OAAO;QACL,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,kBAAkB,EAAE,MAAM;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,OAAe,EACf,GAAW,EACX,MAA2B,EAC3B,kBAAqC;IAErC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,SAAS,GAAG,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE,CAAC;IACxD,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,WAAM,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,MAAM,CAAC,QAAQ;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC;KACxB,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IACvB,IAAI,CAAC;QAKH,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACrC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,UAAU,OAAO,6BAA6B,GAAG,IAAI,CACnE,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,CAAC,KAAK,CAAC,mCAAmC,GAAG,iBAAiB,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,CACT,GAAG,UAAU,UAAU,OAAO,QAAQ,GAAG,wBAAwB,GAAG,aAAa,CAClF,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3E,MAAM,MAAM,CAAC,KAAK,CAAC,gCAAgC,MAAM,GAAG,CAAC,CAAC;YAC9D,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,CAAC,GAAG,CACT,GAAG,UAAU,UAAU,OAAO,QAAQ,GAAG,qBAAqB,MAAM,UAAU,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAMD,KAAK,UAAU,aAAa,CAC1B,OAAe,EACf,GAAW,EACX,YAAoB,EACpB,MAA2B;IAE3B,MAAM,UAAU,GAAG,IAAA,yCAAuB,EAAC;QACzC,IAAI,EAAE,MAAM,CAAC,QAAQ;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC,CAAC;IACH,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,UAAU,OAAO,QAAQ,GAAG,kDAAkD,CAC5F,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CACT,GAAG,UAAU,UAAU,OAAO,QAAQ,GAAG,wCAAwC,YAAY,GAAG,CACjG,CAAC;IAUF,MAAM,MAAM,GAAG,MAAM,IAAI,+CAAqB,EAAE,CAAC,GAAG,CAAC;QACnD,YAAY;QACZ,aAAa,EAAE,IAAA,yCAAuB,EAAC,UAAU,CAAC;QAClD,GAAG,EAAE,EAAE;KACR,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,UAAU,OAAO,QAAQ,GAAG,6BAA6B,MAAM,CAAC,QAAQ,OAAO,MAAM,CAAC,MAAM,EAAE,CAC5G,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAOD,SAAS,iBAAiB,CACxB,GAAW,EACX,MAA2B,EAC3B,UAAkB;IAElB,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,EAAE,CAAC,GAAG,UAAU,CAAC;IAClD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IACpD,CAAC;AACH,CAAC;AAWM,KAAK,UAAU,uBAAuB,CAC3C,IAAoC;IAEpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,kCAAoB,CAAC;QAE7C,OAAO,CAAC,GAAG,CACT,GAAG,UAAU,UAAU,IAAI,CAAC,OAAO,QAAQ,GAAG,oBAAoB,CACnE,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QAE3E,MAAM,kBAAkB,CACtB,IAAI,CAAC,OAAO,EACZ,GAAG,EACH,MAAM,EACN,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAC9B,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,aAAa,CACpC,IAAI,CAAC,OAAO,EACZ,GAAG,EACH,IAAI,CAAC,YAAY,EACjB,MAAM,CACP,CAAC;QAIF,MAAM,UAAU,GAAG,IAAA,yCAAuB,EAAC,UAAU,CAAC,CAAC;QACvD,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAE3C,OAAO,CAAC,GAAG,CACT,GAAG,UAAU,UAAU,IAAI,CAAC,OAAO,QAAQ,GAAG,sBAAsB,CACrE,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/lib/bootstrap.ts"],"names":[],"mappings":";;AAmTA,0DAmDC;AAtWD,6CAAyC;AACzC,qCAAuC;AACvC,+CAA6C;AAC7C,qCAAiC;AACjC,yCAAiC;AAGjC,6DAGiC;AACjC,6EAAwE;AACxE,2BAA4B;AAG5B,qCAA6D;AAC7D,iEAAmE;AACnE,uEAGmC;AACnC,+CAAqD;AA4CrD,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAEtC,SAAS,cAAc,CAAC,GAAW;IACjC,OAAO,GAAG,KAAK,kCAAoB;QACjC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,YAA0D;IAE1D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,yDAAyD;YACpE,2CAA2C,CAC9C,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;AAC5E,CAAC;AASD,KAAK,UAAU,qBAAqB,CAClC,IAAoC,EACpC,GAAW,EACX,sBAA6C;IAE7C,MAAM,KAAK,GAAG,IAAA,0CAAiC,EAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,sBAAsB,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3D,OAAO,IAAA,gDAAyB,EAAC,OAAO,EAAE,KAAK,EAAE;QAC/C,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,GAAG,KAAK,kCAAoB,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC,CAAC;AACL,CAAC;AAQD,KAAK,UAAU,uBAAuB,CACpC,OAAe,EACf,GAAW,EACX,MAA2B;IAE3B,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QAC9D,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC;SAC9B,MAAM,CAAC,GAAG,OAAO,IAAI,GAAG,EAAE,CAAC;SAC3B,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,oBAAoB,IAAI,MAAM,CAAC,CAAC;IAChE,MAAM,IAAA,oBAAS,EAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,GAAG,CACT,GAAG,UAAU,UAAU,OAAO,QAAQ,GAAG,6BAA6B,QAAQ,EAAE,CACjF,CAAC;IACF,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AACrD,CAAC;AAiBD,SAAS,UAAU,CACjB,MAA2B;IAE3B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,aAAa,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACzC,MAAM,EAAE,GACN,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAA,sBAAY,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1E,OAAO;QACL,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,kBAAkB,EAAE,MAAM;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,OAAe,EACf,GAAW,EACX,MAA2B,EAC3B,kBAAqC;IAErC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,SAAS,GAAG,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE,CAAC;IACxD,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,WAAM,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,MAAM,CAAC,QAAQ;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC;KACxB,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IACvB,IAAI,CAAC;QAKH,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACrC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,UAAU,OAAO,6BAA6B,GAAG,IAAI,CACnE,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,CAAC,KAAK,CAAC,mCAAmC,GAAG,iBAAiB,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,CACT,GAAG,UAAU,UAAU,OAAO,QAAQ,GAAG,wBAAwB,GAAG,aAAa,CAClF,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3E,MAAM,MAAM,CAAC,KAAK,CAAC,gCAAgC,MAAM,GAAG,CAAC,CAAC;YAC9D,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,CAAC,GAAG,CACT,GAAG,UAAU,UAAU,OAAO,QAAQ,GAAG,qBAAqB,MAAM,UAAU,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAMD,KAAK,UAAU,aAAa,CAC1B,OAAe,EACf,GAAW,EACX,YAAoB,EACpB,MAA2B;IAE3B,MAAM,UAAU,GAAG,IAAA,yCAAuB,EAAC;QACzC,IAAI,EAAE,MAAM,CAAC,QAAQ;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC,CAAC;IACH,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,UAAU,OAAO,QAAQ,GAAG,kDAAkD,CAC5F,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CACT,GAAG,UAAU,UAAU,OAAO,QAAQ,GAAG,wCAAwC,YAAY,GAAG,CACjG,CAAC;IAUF,MAAM,MAAM,GAAG,MAAM,IAAI,+CAAqB,EAAE,CAAC,GAAG,CAAC;QACnD,YAAY;QACZ,aAAa,EAAE,IAAA,yCAAuB,EAAC,UAAU,CAAC;QAClD,GAAG,EAAE,EAAE;KACR,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,UAAU,OAAO,QAAQ,GAAG,6BAA6B,MAAM,CAAC,QAAQ,OAAO,MAAM,CAAC,MAAM,EAAE,CAC5G,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAOD,SAAS,iBAAiB,CACxB,GAAW,EACX,MAA2B,EAC3B,UAAkB;IAElB,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,EAAE,CAAC,GAAG,UAAU,CAAC;IAClD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IACpD,CAAC;AACH,CAAC;AAWM,KAAK,UAAU,uBAAuB,CAC3C,IAAoC;IAIpC,IAAI,aAAiC,CAAC;IACtC,MAAM,sBAAsB,GAAG,KAAK,IAAqB,EAAE;QACzD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,aAAa,GAAG,MAAM,IAAA,oDAA0B,EAC9C,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,qBAAqB,CAC3B,CAAC;QACJ,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,kCAAoB,CAAC;QAE7C,OAAO,CAAC,GAAG,CACT,GAAG,UAAU,UAAU,IAAI,CAAC,OAAO,QAAQ,GAAG,oBAAoB,CACnE,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAC3C,IAAI,EACJ,GAAG,EACH,sBAAsB,CACvB,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QAE3E,MAAM,kBAAkB,CACtB,IAAI,CAAC,OAAO,EACZ,GAAG,EACH,MAAM,EACN,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAC9B,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,aAAa,CACpC,IAAI,CAAC,OAAO,EACZ,GAAG,EACH,IAAI,CAAC,YAAY,EACjB,MAAM,CACP,CAAC;QAIF,MAAM,UAAU,GAAG,IAAA,yCAAuB,EAAC,UAAU,CAAC,CAAC;QACvD,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAE3C,OAAO,CAAC,GAAG,CACT,GAAG,UAAU,UAAU,IAAI,CAAC,OAAO,QAAQ,GAAG,sBAAsB,CACrE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/lib/control-plane-client.d.ts

@@ -3,7 +3,5 @@ export interface SystemDatabaseConfigRequest {
     readonly biomeId: string;
     readonly dbKey?: string;
 }
-export declare const ORG_DATABASE_POOL_API_URL_ENV = "ORG_DATABASE_POOL_API_URL";
-export declare function resolveControlPlaneBaseUrl(env?: NodeJS.ProcessEnv): string;
 export declare function fetchSystemDatabaseConfig(baseUrl: string, serviceToken: string, req: SystemDatabaseConfigRequest): Promise<BiomeDatabaseConfig>;
 //# sourceMappingURL=control-plane-client.d.ts.map

package/dist/lib/control-plane-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control-plane-client.d.ts","sourceRoot":"","sources":["../../src/lib/control-plane-client.ts"],"names":[],"mappings":"AA8CA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAEpD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAGD,eAAO,MAAM,6BAA6B,8BAA8B,CAAC;AAOzE,wBAAgB,0BAA0B,CACxC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAWR;AAYD,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE,2BAA2B,GAC/B,OAAO,CAAC,mBAAmB,CAAC,CA0B9B"}
+{"version":3,"file":"control-plane-client.d.ts","sourceRoot":"","sources":["../../src/lib/control-plane-client.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAEpD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAYD,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE,2BAA2B,GAC/B,OAAO,CAAC,mBAAmB,CAAC,CA0B9B"}

package/dist/lib/control-plane-client.js

@@ -1,19 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ORG_DATABASE_POOL_API_URL_ENV = void 0;
-exports.resolveControlPlaneBaseUrl = resolveControlPlaneBaseUrl;
 exports.fetchSystemDatabaseConfig = fetchSystemDatabaseConfig;
-exports.ORG_DATABASE_POOL_API_URL_ENV = 'ORG_DATABASE_POOL_API_URL';
-function resolveControlPlaneBaseUrl(env = process.env) {
-    const raw = env[exports.ORG_DATABASE_POOL_API_URL_ENV];
-    if (raw === undefined || raw.trim() === '') {
-        throw new Error(`[biome-database] ${exports.ORG_DATABASE_POOL_API_URL_ENV} is not set — cannot ` +
-            'reach the org-database-pool control plane. Set it to the control-plane ' +
-            'base URL (e.g. http://org-database-pool-api.<namespace>.svc.cluster.local), ' +
-            'or supply a local DB_* override to bypass the control plane entirely.');
-    }
-    return raw.trim();
-}
 async function fetchSystemDatabaseConfig(baseUrl, serviceToken, req) {
     const url = `${baseUrl.replace(/\/$/, '')}/system-databases/config`;
     const response = await fetch(url, {

package/dist/lib/control-plane-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"control-plane-client.js","sourceRoot":"","sources":["../../src/lib/control-plane-client.ts"],"names":[],"mappings":";;;AA6DA,gEAaC;AAYD,8DA8BC;AA9DY,QAAA,6BAA6B,GAAG,2BAA2B,CAAC;AAOzE,SAAgB,0BAA0B,CACxC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,GAAG,CAAC,qCAA6B,CAAC,CAAC;IAC/C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,oBAAoB,qCAA6B,uBAAuB;YACtE,yEAAyE;YACzE,8EAA8E;YAC9E,uEAAuE,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAYM,KAAK,UAAU,yBAAyB,CAC7C,OAAe,EACf,YAAoB,EACpB,GAAgC;IAEhC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC;IAEpE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,YAAY,EAAE;YACvC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,CAAC;QACpE,MAAM,IAAI,KAAK,CACb,8BAA8B,GAAG,cAAc,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI,EAAE,CACjG,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAY,CAAC;IACnD,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACvC,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,sBAAsB,GAAG;IAC7B,MAAM;IACN,MAAM;IACN,UAAU;IACV,UAAU;IACV,UAAU;CACF,CAAC;AAQX,SAAS,cAAc,CAAC,OAAgB;IACtC,IACE,OAAO,KAAK,IAAI;QAChB,OAAO,OAAO,KAAK,QAAQ;QAC3B,MAAM,IAAI,OAAO;QAChB,OAA6B,CAAC,IAAI,KAAK,IAAI;QAC5C,OAAQ,OAA6B,CAAC,IAAI,KAAK,QAAQ,EACvD,CAAC;QACD,OAAQ,OAAyC,CAAC,IAAI,CAAC;IACzD,CAAC;IACD,OAAO,OAA8B,CAAC;AACxC,CAAC;AASD,SAAS,oBAAoB,CAC3B,MAA2B,EAC3B,GAAW;IAIX,MAAM,MAAM,GACV,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;QAC3C,CAAC,CAAE,MAA6C;QAChD,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,8BAA8B,GAAG,sCAAsC;YACrE,aAAa,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB;YACjD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mCAAmC;YACrE,gDAAgD,CACnD,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"control-plane-client.js","sourceRoot":"","sources":["../../src/lib/control-plane-client.ts"],"names":[],"mappings":";;AAiDA,8DA8BC;AA9BM,KAAK,UAAU,yBAAyB,CAC7C,OAAe,EACf,YAAoB,EACpB,GAAgC;IAEhC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC;IAEpE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,YAAY,EAAE;YACvC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,CAAC;QACpE,MAAM,IAAI,KAAK,CACb,8BAA8B,GAAG,cAAc,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI,EAAE,CACjG,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAY,CAAC;IACnD,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACvC,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,sBAAsB,GAAG;IAC7B,MAAM;IACN,MAAM;IACN,UAAU;IACV,UAAU;IACV,UAAU;CACF,CAAC;AAQX,SAAS,cAAc,CAAC,OAAgB;IACtC,IACE,OAAO,KAAK,IAAI;QAChB,OAAO,OAAO,KAAK,QAAQ;QAC3B,MAAM,IAAI,OAAO;QAChB,OAA6B,CAAC,IAAI,KAAK,IAAI;QAC5C,OAAQ,OAA6B,CAAC,IAAI,KAAK,QAAQ,EACvD,CAAC;QACD,OAAQ,OAAyC,CAAC,IAAI,CAAC;IACzD,CAAC;IACD,OAAO,OAA8B,CAAC;AACxC,CAAC;AASD,SAAS,oBAAoB,CAC3B,MAA2B,EAC3B,GAAW;IAIX,MAAM,MAAM,GACV,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;QAC3C,CAAC,CAAE,MAA6C;QAChD,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,8BAA8B,GAAG,sCAAsC;YACrE,aAAa,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB;YACjD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mCAAmC;YACrE,gDAAgD,CACnD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/lib/control-plane-discovery.d.ts

@@ -0,0 +1,6 @@
+import type { KernelState } from '@xemahq/kernel-contracts/kernel-state';
+import { type EagerResolveOptions } from '@xemahq/service-registry-nest';
+export declare const ORG_DATABASE_POOL_SERVICE_NAME = "org-database-pool-api";
+export type ControlPlaneDiscoveryOptions = EagerResolveOptions;
+export declare function resolveControlPlaneBaseUrl(kernelState: KernelState, options?: ControlPlaneDiscoveryOptions): Promise<string>;
+//# sourceMappingURL=control-plane-discovery.d.ts.map

package/dist/lib/control-plane-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane-discovery.d.ts","sourceRoot":"","sources":["../../src/lib/control-plane-discovery.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AACzE,OAAO,EAAyB,KAAK,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAGhG,eAAO,MAAM,8BAA8B,0BAA0B,CAAC;AAGtE,MAAM,MAAM,4BAA4B,GAAG,mBAAmB,CAAC;AAQ/D,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,WAAW,EACxB,OAAO,CAAC,EAAE,4BAA4B,GACrC,OAAO,CAAC,MAAM,CAAC,CAEjB"}

package/dist/lib/control-plane-discovery.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ORG_DATABASE_POOL_SERVICE_NAME = void 0;
+exports.resolveControlPlaneBaseUrl = resolveControlPlaneBaseUrl;
+const service_registry_nest_1 = require("@xemahq/service-registry-nest");
+exports.ORG_DATABASE_POOL_SERVICE_NAME = 'org-database-pool-api';
+function resolveControlPlaneBaseUrl(kernelState, options) {
+    return (0, service_registry_nest_1.resolveHttpUrlEagerly)(kernelState, exports.ORG_DATABASE_POOL_SERVICE_NAME, options);
+}
+//# sourceMappingURL=control-plane-discovery.js.map

package/dist/lib/control-plane-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane-discovery.js","sourceRoot":"","sources":["../../src/lib/control-plane-discovery.ts"],"names":[],"mappings":";;;AA4BA,gEAKC;AAnBD,yEAAgG;AAGnF,QAAA,8BAA8B,GAAG,uBAAuB,CAAC;AAWtE,SAAgB,0BAA0B,CACxC,WAAwB,EACxB,OAAsC;IAEtC,OAAO,IAAA,6CAAqB,EAAC,WAAW,EAAE,sCAA8B,EAAE,OAAO,CAAC,CAAC;AACrF,CAAC"}

package/dist/lib/nest/biome-database.module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"biome-database.module.d.ts","sourceRoot":"","sources":["../../../src/lib/nest/biome-database.module.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAKpD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAY7D,eAAO,MAAM,oBAAoB,eAEhC,CAAC;AAGF,MAAM,WAAW,0BAA0B;IAEzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAKzB,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAMzD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACjD;AAoCD,qBACa,mBAAmB;IAC9B,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,0BAA0B,GAAG,aAAa;CA+BhE"}
+{"version":3,"file":"biome-database.module.d.ts","sourceRoot":"","sources":["../../../src/lib/nest/biome-database.module.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAOpD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAY7D,eAAO,MAAM,oBAAoB,eAEhC,CAAC;AAGF,MAAM,WAAW,0BAA0B;IAEzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAKzB,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAMzD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACjD;AA6CD,qBACa,mBAAmB;IAC9B,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,0BAA0B,GAAG,aAAa;CAiChE"}

package/dist/lib/nest/biome-database.module.js

@@ -10,6 +10,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.BiomeDatabaseModule = exports.BIOME_DATABASE_READY = void 0;
 const common_1 = require("@nestjs/common");
 const identity_client_1 = require("@xemahq/identity-client");
+const service_registry_nest_1 = require("@xemahq/service-registry-nest");
 const bootstrap_1 = require("../bootstrap");
 const schema_name_1 = require("../schema-name");
 exports.BIOME_DATABASE_READY = Symbol.for('@xemahq/biome-database-nest:ready');
@@ -24,7 +25,7 @@ let BiomeDatabaseModule = BiomeDatabaseModule_1 = class BiomeDatabaseModule {
             providers: [
                 {
                     provide: exports.BIOME_DATABASE_READY,
-                    useFactory: async (identityBootstrap) => {
+                    useFactory: async (identityBootstrap, kernelState) => {
                         await (0, bootstrap_1.bootstrapBiomeDatabases)({
                             biomeId: opts.biomeId,
                             databases,
@@ -32,10 +33,11 @@ let BiomeDatabaseModule = BiomeDatabaseModule_1 = class BiomeDatabaseModule {
                                 ? { requiredExtensions: opts.requiredExtensions }
                                 : {}),
                             serviceToken: () => identityBootstrap.getAccessToken(),
+                            kernelState,
                         });
                         return true;
                     },
-                    inject: [identity_client_1.IdentityBootstrapService],
+                    inject: [identity_client_1.IdentityBootstrapService, service_registry_nest_1.KERNEL_STATE_TOKEN],
                 },
             ],
             exports: [exports.BIOME_DATABASE_READY],

package/dist/lib/nest/biome-database.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"biome-database.module.js","sourceRoot":"","sources":["../../../src/lib/nest/biome-database.module.ts"],"names":[],"mappings":";;;;;;;;;;AACA,2CAAwC;AACxC,6DAAmE;AAEnE,4CAAuD;AAEvD,gDAAsD;AAWzC,QAAA,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAC5C,mCAAmC,CACpC,CAAC;AAsDK,IAAM,mBAAmB,2BAAzB,MAAM,mBAAmB;IAC9B,MAAM,CAAC,OAAO,CAAC,IAAgC;QAC7C,MAAM,SAAS,GACb,IAAI,CAAC,SAAS,IAAI;YAChB,EAAE,GAAG,EAAE,kCAAoB,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE;SAC3D,CAAC;QAEJ,OAAO;YACL,MAAM,EAAE,qBAAmB;YAC3B,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,4BAAoB;oBAC7B,UAAU,EAAE,KAAK,EACf,iBAA2C,EAC5B,EAAE;wBACjB,MAAM,IAAA,mCAAuB,EAAC;4BAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;4BACrB,SAAS;4BACT,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS;gCACvC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE;gCACjD,CAAC,CAAC,EAAE,CAAC;4BACP,YAAY,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,cAAc,EAAE;yBACvD,CAAC,CAAC;wBACH,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,MAAM,EAAE,CAAC,0CAAwB,CAAC;iBACnC;aACF;YACD,OAAO,EAAE,CAAC,4BAAoB,CAAC;SAChC,CAAC;IACJ,CAAC;CACF,CAAA;AAhCY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,mBAAmB,CAgC/B"}
+{"version":3,"file":"biome-database.module.js","sourceRoot":"","sources":["../../../src/lib/nest/biome-database.module.ts"],"names":[],"mappings":";;;;;;;;;;AACA,2CAAwC;AACxC,6DAAmE;AAEnE,yEAAmE;AAEnE,4CAAuD;AAEvD,gDAAsD;AAWzC,QAAA,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAC5C,mCAAmC,CACpC,CAAC;AA+DK,IAAM,mBAAmB,2BAAzB,MAAM,mBAAmB;IAC9B,MAAM,CAAC,OAAO,CAAC,IAAgC;QAC7C,MAAM,SAAS,GACb,IAAI,CAAC,SAAS,IAAI;YAChB,EAAE,GAAG,EAAE,kCAAoB,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE;SAC3D,CAAC;QAEJ,OAAO;YACL,MAAM,EAAE,qBAAmB;YAC3B,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,4BAAoB;oBAC7B,UAAU,EAAE,KAAK,EACf,iBAA2C,EAC3C,WAAwB,EACT,EAAE;wBACjB,MAAM,IAAA,mCAAuB,EAAC;4BAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;4BACrB,SAAS;4BACT,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS;gCACvC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE;gCACjD,CAAC,CAAC,EAAE,CAAC;4BACP,YAAY,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,cAAc,EAAE;4BACtD,WAAW;yBACZ,CAAC,CAAC;wBACH,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,MAAM,EAAE,CAAC,0CAAwB,EAAE,0CAAkB,CAAC;iBACvD;aACF;YACD,OAAO,EAAE,CAAC,4BAAoB,CAAC;SAChC,CAAC;IACJ,CAAC;CACF,CAAA;AAlCY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,mBAAmB,CAkC/B"}

package/dist/lib/nest/prisma-service-factory.d.ts

@@ -1,8 +1,23 @@
 import type { OnModuleDestroy, OnModuleInit, Type } from '@nestjs/common';
+import { TenantIsolationMode } from '../tenant-isolation/tenant-isolation-mode';
 export type BiomePrismaClientCtor<TClient extends BiomePrismaClient> = new (...args: any[]) => TClient;
 export interface BiomePrismaClient {
     $connect(): Promise<void>;
     $disconnect(): Promise<void>;
 }
-export declare function createBiomePrismaService<TClient extends BiomePrismaClient>(PrismaClientCtor: BiomePrismaClientCtor<TClient>, loggerContext?: string): Type<TClient & OnModuleInit & OnModuleDestroy>;
+export interface TenantIsolationServiceOptions {
+    readonly mode?: TenantIsolationMode;
+    readonly orgField?: string;
+    readonly exemptModels?: readonly string[];
+}
+export interface CreateBiomePrismaServiceOptions {
+    readonly loggerContext?: string;
+    readonly tenantIsolation?: TenantIsolationServiceOptions;
+}
+export interface TenantScopedApi<TClient> {
+    forOrg(orgId: string): TClient;
+    asSystem(): TClient;
+}
+export type BiomePrismaServiceInstance<TClient> = TClient & TenantScopedApi<TClient> & OnModuleInit & OnModuleDestroy;
+export declare function createBiomePrismaService<TClient extends BiomePrismaClient>(PrismaClientCtor: BiomePrismaClientCtor<TClient>, optionsOrLoggerContext?: string | CreateBiomePrismaServiceOptions): Type<BiomePrismaServiceInstance<TClient>>;
 //# sourceMappingURL=prisma-service-factory.d.ts.map

package/dist/lib/nest/prisma-service-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prisma-service-factory.d.ts","sourceRoot":"","sources":["../../../src/lib/nest/prisma-service-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAe1E,MAAM,MAAM,qBAAqB,CAAC,OAAO,SAAS,iBAAiB,IAAI,KAIrE,GAAG,IAAI,EAAE,GAAG,EAAE,KACX,OAAO,CAAC;AAGb,MAAM,WAAW,iBAAiB;IAChC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAsCD,wBAAgB,wBAAwB,CAAC,OAAO,SAAS,iBAAiB,EACxE,gBAAgB,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAChD,aAAa,SAAkB,GAC9B,IAAI,CAAC,OAAO,GAAG,YAAY,GAAG,eAAe,CAAC,CAsChD"}
+{"version":3,"file":"prisma-service-factory.d.ts","sourceRoot":"","sources":["../../../src/lib/nest/prisma-service-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAK1E,OAAO,EACL,mBAAmB,EAEpB,MAAM,2CAA2C,CAAC;AAkBnD,MAAM,MAAM,qBAAqB,CAAC,OAAO,SAAS,iBAAiB,IAAI,KAIrE,GAAG,IAAI,EAAE,GAAG,EAAE,KACX,OAAO,CAAC;AAGb,MAAM,WAAW,iBAAiB;IAChC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAGD,MAAM,WAAW,6BAA6B;IAK5C,QAAQ,CAAC,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAEpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAK3B,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAGD,MAAM,WAAW,+BAA+B;IAE9C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,6BAA6B,CAAC;CAC1D;AAMD,MAAM,WAAW,eAAe,CAAC,OAAO;IAOtC,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAM/B,QAAQ,IAAI,OAAO,CAAC;CACrB;AAGD,MAAM,MAAM,0BAA0B,CAAC,OAAO,IAAI,OAAO,GACvD,eAAe,CAAC,OAAO,CAAC,GACxB,YAAY,GACZ,eAAe,CAAC;AA2ElB,wBAAgB,wBAAwB,CAAC,OAAO,SAAS,iBAAiB,EACxE,gBAAgB,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAChD,sBAAsB,CAAC,EAAE,MAAM,GAAG,+BAA+B,GAChE,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAmK3C"}

package/dist/lib/nest/prisma-service-factory.js

@@ -11,12 +11,116 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createBiomePrismaService = createBiomePrismaService;
 const common_1 = require("@nestjs/common");
+const platform_common_1 = require("@xemahq/platform-common");
 const adapter_1 = require("../adapter");
-function createBiomePrismaService(PrismaClientCtor, loggerContext = 'PrismaService') {
+const tenant_isolation_mode_1 = require("../tenant-isolation/tenant-isolation-mode");
+const tenant_isolation_extension_1 = require("../tenant-isolation/tenant-isolation.extension");
+function lowerFirst(name) {
+    return name.length === 0
+        ? name
+        : name.charAt(0).toLowerCase() + name.slice(1);
+}
+function normalizeOptions(optionsOrLoggerContext) {
+    if (optionsOrLoggerContext === undefined) {
+        return {};
+    }
+    if (typeof optionsOrLoggerContext === 'string') {
+        return { loggerContext: optionsOrLoggerContext };
+    }
+    return optionsOrLoggerContext;
+}
+function createBiomePrismaService(PrismaClientCtor, optionsOrLoggerContext) {
+    const options = normalizeOptions(optionsOrLoggerContext);
+    const loggerContext = options.loggerContext ?? 'PrismaService';
+    const tenantOptions = options.tenantIsolation ?? {};
+    const orgField = tenantOptions.orgField ?? tenant_isolation_extension_1.DEFAULT_ORG_FIELD;
+    const exemptModels = tenantOptions.exemptModels ?? [];
     let BiomePrismaService = class BiomePrismaService extends PrismaClientCtor {
         biomePrismaLogger = new common_1.Logger(loggerContext);
         constructor() {
             super({ adapter: (0, adapter_1.createBiomePrismaAdapterFromEnv)() });
+            const mode = (0, tenant_isolation_mode_1.resolveTenantIsolationMode)(tenantOptions.mode);
+            const raw = this;
+            const tenantLogger = new common_1.Logger(`${loggerContext}:tenant-isolation`);
+            const requireExtends = () => {
+                const extendsFn = raw.$extends;
+                if (typeof extendsFn !== 'function') {
+                    throw new Error('[tenant-isolation] the Prisma client has no $extends — tenant ' +
+                        'isolation requires a generated @prisma/client >= 5 (this SDK peers on ^7).');
+                }
+                return extendsFn.bind(raw);
+            };
+            let scopedModelsCache;
+            const getScopedModels = () => {
+                scopedModelsCache ??= (0, tenant_isolation_extension_1.collectOrgScopedModels)(raw, orgField, exemptModels);
+                return scopedModelsCache;
+            };
+            const forOrg = (orgId) => {
+                if (typeof orgId !== 'string' || orgId === '') {
+                    throw new Error('[tenant-isolation] forOrg requires a non-empty orgId. For a ' +
+                        'legitimate cross-org system path use asSystem().');
+                }
+                const orgScopedModels = getScopedModels();
+                return requireExtends()((0, tenant_isolation_extension_1.createTenantIsolationExtension)({
+                    orgScopedModels,
+                    orgField,
+                    mode: tenant_isolation_mode_1.TenantIsolationMode.Enforce,
+                    orgIdSource: () => orgId,
+                    logger: tenantLogger,
+                }));
+            };
+            const seenSystemCallSites = new Set();
+            const asSystem = () => {
+                const callSite = new Error().stack?.split('\n')[2]?.trim();
+                if (callSite !== undefined && !seenSystemCallSites.has(callSite)) {
+                    seenSystemCallSites.add(callSite);
+                    tenantLogger.debug(`[tenant-isolation] asSystem() unscoped access from ${callSite}`);
+                }
+                return raw;
+            };
+            if (mode === tenant_isolation_mode_1.TenantIsolationMode.Off) {
+                return new Proxy(raw, {
+                    get(target, prop, _receiver) {
+                        if (prop === 'forOrg') {
+                            return forOrg;
+                        }
+                        if (prop === 'asSystem') {
+                            return asSystem;
+                        }
+                        const value = Reflect.get(target, prop, target);
+                        return typeof value === 'function' ? value.bind(target) : value;
+                    },
+                });
+            }
+            const ambientClient = requireExtends()((0, tenant_isolation_extension_1.createTenantIsolationExtension)({
+                orgScopedModels: getScopedModels(),
+                orgField,
+                mode,
+                orgIdSource: platform_common_1.getAmbientOrgId,
+                logger: tenantLogger,
+            }));
+            const routedProps = new Set(['$transaction']);
+            for (const modelName of getScopedModels()) {
+                routedProps.add(lowerFirst(modelName));
+            }
+            return new Proxy(raw, {
+                get(target, prop, _receiver) {
+                    if (prop === 'forOrg') {
+                        return forOrg;
+                    }
+                    if (prop === 'asSystem') {
+                        return asSystem;
+                    }
+                    if (typeof prop === 'string' && routedProps.has(prop)) {
+                        const value = ambientClient[prop];
+                        return typeof value === 'function'
+                            ? value.bind(ambientClient)
+                            : value;
+                    }
+                    const value = Reflect.get(target, prop, target);
+                    return typeof value === 'function' ? value.bind(target) : value;
+                },
+            });
         }
         async onModuleInit() {
             try {

package/dist/lib/nest/prisma-service-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"prisma-service-factory.js","sourceRoot":"","sources":["../../../src/lib/nest/prisma-service-factory.ts"],"names":[],"mappings":";;;;;;;;;;;AAgEA,4DAyCC;AAxGD,2CAAoD;AAEpD,wCAA6D;AA6D7D,SAAgB,wBAAwB,CACtC,gBAAgD,EAChD,aAAa,GAAG,eAAe;IAE/B,IACM,kBAAkB,GADxB,MACM,kBACJ,SAAS,gBAA6D;QAGrD,iBAAiB,GAAG,IAAI,eAAM,CAAC,aAAa,CAAC,CAAC;QAE/D;YACE,KAAK,CAAC,EAAE,OAAO,EAAE,IAAA,yCAA+B,GAAE,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,KAAK,CAAC,YAAY;YAChB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACtB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;gBACrE,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,KAAK,CAAC,eAAe;YACnB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;gBACzB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAC1B,mCAAmC,EACnC,KAAK,CACN,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAA;IA/BK,kBAAkB;QADvB,IAAA,mBAAU,GAAE;;OACP,kBAAkB,CA+BvB;IAED,OAAO,kBAEN,CAAC;AACJ,CAAC"}
+{"version":3,"file":"prisma-service-factory.js","sourceRoot":"","sources":["../../../src/lib/nest/prisma-service-factory.ts"],"names":[],"mappings":";;;;;;;;;;;AAiKA,4DAsKC;AAtUD,2CAAoD;AACpD,6DAA0D;AAE1D,wCAA6D;AAC7D,qFAGmD;AACnD,+FAKwD;AA8ExD,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC;QACtB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,gBAAgB,CACvB,sBAA4E;IAE5E,IAAI,sBAAsB,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,sBAAsB,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAqDD,SAAgB,wBAAwB,CACtC,gBAAgD,EAChD,sBAAiE;IAEjE,MAAM,OAAO,GAAG,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,eAAe,CAAC;IAC/D,MAAM,aAAa,GAAG,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC;IACpD,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,IAAI,8CAAiB,CAAC;IAC7D,MAAM,YAAY,GAAG,aAAa,CAAC,YAAY,IAAI,EAAE,CAAC;IAEtD,IACM,kBAAkB,GADxB,MACM,kBACJ,SAAS,gBAA6D;QAGrD,iBAAiB,GAAG,IAAI,eAAM,CAAC,aAAa,CAAC,CAAC;QAE/D;YACE,KAAK,CAAC,EAAE,OAAO,EAAE,IAAA,yCAA+B,GAAE,EAAE,CAAC,CAAC;YAItD,MAAM,IAAI,GAAG,IAAA,kDAA0B,EAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAC5D,MAAM,GAAG,GAAG,IAAI,CAAC;YACjB,MAAM,YAAY,GAA0B,IAAI,eAAM,CACpD,GAAG,aAAa,mBAAmB,CACpC,CAAC;YAEF,MAAM,cAAc,GAAG,GAAsC,EAAE;gBAC7D,MAAM,SAAS,GAAI,GAAwB,CAAC,QAAQ,CAAC;gBACrD,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;oBACpC,MAAM,IAAI,KAAK,CACb,gEAAgE;wBAC9D,4EAA4E,CAC/E,CAAC;gBACJ,CAAC;gBACD,OAAO,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC,CAAC;YAKF,IAAI,iBAAkD,CAAC;YACvD,MAAM,eAAe,GAAG,GAAwB,EAAE;gBAChD,iBAAiB,KAAK,IAAA,mDAAsB,EAC1C,GAAG,EACH,QAAQ,EACR,YAAY,CACb,CAAC;gBACF,OAAO,iBAAiB,CAAC;YAC3B,CAAC,CAAC;YAEF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAW,EAAE;gBACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;oBAC9C,MAAM,IAAI,KAAK,CACb,8DAA8D;wBAC5D,kDAAkD,CACrD,CAAC;gBACJ,CAAC;gBAED,MAAM,eAAe,GAAG,eAAe,EAAE,CAAC;gBAC1C,OAAO,cAAc,EAAE,CACrB,IAAA,2DAA8B,EAAC;oBAC7B,eAAe;oBACf,QAAQ;oBACR,IAAI,EAAE,2CAAmB,CAAC,OAAO;oBACjC,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK;oBACxB,MAAM,EAAE,YAAY;iBACrB,CAAC,CACQ,CAAC;YACf,CAAC,CAAC;YAEF,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;YAC9C,MAAM,QAAQ,GAAG,GAAY,EAAE;gBAE7B,MAAM,QAAQ,GAAG,IAAI,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;gBAC3D,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACjE,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;oBAClC,YAAY,CAAC,KAAK,CAChB,sDAAsD,QAAQ,EAAE,CACjE,CAAC;gBACJ,CAAC;gBACD,OAAO,GAAyB,CAAC;YACnC,CAAC,CAAC;YAEF,IAAI,IAAI,KAAK,2CAAmB,CAAC,GAAG,EAAE,CAAC;gBAGrC,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE;oBACpB,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS;wBACzB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;4BACtB,OAAO,MAAM,CAAC;wBAChB,CAAC;wBACD,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;4BACxB,OAAO,QAAQ,CAAC;wBAClB,CAAC;wBACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;wBAChD,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;oBAClE,CAAC;iBACF,CAAuB,CAAC;YAC3B,CAAC;YAED,MAAM,aAAa,GAAG,cAAc,EAAE,CACpC,IAAA,2DAA8B,EAAC;gBAC7B,eAAe,EAAE,eAAe,EAAE;gBAClC,QAAQ;gBACR,IAAI;gBACJ,WAAW,EAAE,iCAAe;gBAC5B,MAAM,EAAE,YAAY;aACrB,CAAC,CACwB,CAAC;YAK7B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,CAAC,cAAc,CAAC,CAAC,CAAC;YACtD,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,EAAE,CAAC;gBAC1C,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;YACzC,CAAC;YAED,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE;gBACpB,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS;oBACzB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACtB,OAAO,MAAM,CAAC;oBAChB,CAAC;oBACD,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;wBACxB,OAAO,QAAQ,CAAC;oBAClB,CAAC;oBACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;wBACtD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;wBAClC,OAAO,OAAO,KAAK,KAAK,UAAU;4BAChC,CAAC,CAAE,KAAyC,CAAC,IAAI,CAAC,aAAa,CAAC;4BAChE,CAAC,CAAC,KAAK,CAAC;oBACZ,CAAC;oBACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;oBAChD,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBAClE,CAAC;aACF,CAAuB,CAAC;QAC3B,CAAC;QAED,KAAK,CAAC,YAAY;YAChB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACtB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;gBACrE,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,KAAK,CAAC,eAAe;YACnB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;gBACzB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAC1B,mCAAmC,EACnC,KAAK,CACN,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAA;IAtJK,kBAAkB;QADvB,IAAA,mBAAU,GAAE;;OACP,kBAAkB,CAsJvB;IAED,OAAO,kBAEN,CAAC;AACJ,CAAC"}

package/dist/lib/tenant-isolation/org-scope.d.ts

@@ -0,0 +1,33 @@
+import { type TenantIsolationViolation } from './tenant-isolation-error';
+export declare enum PrismaModelOperation {
+    FindUnique = "findUnique",
+    FindUniqueOrThrow = "findUniqueOrThrow",
+    FindFirst = "findFirst",
+    FindFirstOrThrow = "findFirstOrThrow",
+    FindMany = "findMany",
+    Create = "create",
+    CreateMany = "createMany",
+    CreateManyAndReturn = "createManyAndReturn",
+    Update = "update",
+    UpdateMany = "updateMany",
+    UpdateManyAndReturn = "updateManyAndReturn",
+    Upsert = "upsert",
+    Delete = "delete",
+    DeleteMany = "deleteMany",
+    Aggregate = "aggregate",
+    Count = "count",
+    GroupBy = "groupBy"
+}
+export interface OrgScopeRequest {
+    readonly model: string;
+    readonly operation: string;
+    readonly args: Readonly<Record<string, unknown>> | undefined;
+    readonly orgId: string;
+    readonly orgField: string;
+}
+export interface OrgScopeOutcome {
+    readonly args: Record<string, unknown>;
+    readonly violations: readonly TenantIsolationViolation[];
+}
+export declare function scopeArgsToOrg(req: OrgScopeRequest): OrgScopeOutcome;
+//# sourceMappingURL=org-scope.d.ts.map

package/dist/lib/tenant-isolation/org-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-scope.d.ts","sourceRoot":"","sources":["../../../src/lib/tenant-isolation/org-scope.ts"],"names":[],"mappings":"AAOA,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,0BAA0B,CAAC;AAQlC,oBAAY,oBAAoB;IAC9B,UAAU,eAAe;IACzB,iBAAiB,sBAAsB;IACvC,SAAS,cAAc;IACvB,gBAAgB,qBAAqB;IACrC,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,UAAU,eAAe;IACzB,mBAAmB,wBAAwB;IAC3C,MAAM,WAAW;IACjB,UAAU,eAAe;IACzB,mBAAmB,wBAAwB;IAC3C,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,UAAU,eAAe;IACzB,SAAS,cAAc;IACvB,KAAK,UAAU;IACf,OAAO,YAAY;CACpB;AAyED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAM9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,QAAQ,CAAC,UAAU,EAAE,SAAS,wBAAwB,EAAE,CAAC;CAC1D;AAsID,wBAAgB,cAAc,CAAC,GAAG,EAAE,eAAe,GAAG,eAAe,CA6CpE"}

package/dist/lib/tenant-isolation/org-scope.js

@@ -0,0 +1,172 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PrismaModelOperation = void 0;
+exports.scopeArgsToOrg = scopeArgsToOrg;
+const tenant_isolation_error_1 = require("./tenant-isolation-error");
+var PrismaModelOperation;
+(function (PrismaModelOperation) {
+    PrismaModelOperation["FindUnique"] = "findUnique";
+    PrismaModelOperation["FindUniqueOrThrow"] = "findUniqueOrThrow";
+    PrismaModelOperation["FindFirst"] = "findFirst";
+    PrismaModelOperation["FindFirstOrThrow"] = "findFirstOrThrow";
+    PrismaModelOperation["FindMany"] = "findMany";
+    PrismaModelOperation["Create"] = "create";
+    PrismaModelOperation["CreateMany"] = "createMany";
+    PrismaModelOperation["CreateManyAndReturn"] = "createManyAndReturn";
+    PrismaModelOperation["Update"] = "update";
+    PrismaModelOperation["UpdateMany"] = "updateMany";
+    PrismaModelOperation["UpdateManyAndReturn"] = "updateManyAndReturn";
+    PrismaModelOperation["Upsert"] = "upsert";
+    PrismaModelOperation["Delete"] = "delete";
+    PrismaModelOperation["DeleteMany"] = "deleteMany";
+    PrismaModelOperation["Aggregate"] = "aggregate";
+    PrismaModelOperation["Count"] = "count";
+    PrismaModelOperation["GroupBy"] = "groupBy";
+})(PrismaModelOperation || (exports.PrismaModelOperation = PrismaModelOperation = {}));
+var WhereShape;
+(function (WhereShape) {
+    WhereShape["None"] = "none";
+    WhereShape["Filter"] = "filter";
+    WhereShape["Unique"] = "unique";
+})(WhereShape || (WhereShape = {}));
+const OPERATION_SCOPE_SPECS = {
+    [PrismaModelOperation.FindUnique]: { where: WhereShape.Unique },
+    [PrismaModelOperation.FindUniqueOrThrow]: { where: WhereShape.Unique },
+    [PrismaModelOperation.FindFirst]: { where: WhereShape.Filter },
+    [PrismaModelOperation.FindFirstOrThrow]: { where: WhereShape.Filter },
+    [PrismaModelOperation.FindMany]: { where: WhereShape.Filter },
+    [PrismaModelOperation.Create]: {
+        where: WhereShape.None,
+        createDataKey: 'data',
+    },
+    [PrismaModelOperation.CreateMany]: {
+        where: WhereShape.None,
+        createDataKey: 'data',
+    },
+    [PrismaModelOperation.CreateManyAndReturn]: {
+        where: WhereShape.None,
+        createDataKey: 'data',
+    },
+    [PrismaModelOperation.Update]: {
+        where: WhereShape.Unique,
+        updateDataKey: 'data',
+    },
+    [PrismaModelOperation.UpdateMany]: {
+        where: WhereShape.Filter,
+        updateDataKey: 'data',
+    },
+    [PrismaModelOperation.UpdateManyAndReturn]: {
+        where: WhereShape.Filter,
+        updateDataKey: 'data',
+    },
+    [PrismaModelOperation.Upsert]: {
+        where: WhereShape.Unique,
+        createDataKey: 'create',
+        updateDataKey: 'update',
+    },
+    [PrismaModelOperation.Delete]: { where: WhereShape.Unique },
+    [PrismaModelOperation.DeleteMany]: { where: WhereShape.Filter },
+    [PrismaModelOperation.Aggregate]: { where: WhereShape.Filter },
+    [PrismaModelOperation.Count]: { where: WhereShape.Filter },
+    [PrismaModelOperation.GroupBy]: { where: WhereShape.Filter },
+};
+function isPlainObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function appendAndClause(existing, clause) {
+    if (existing === undefined) {
+        return [clause];
+    }
+    if (Array.isArray(existing)) {
+        return [...existing, clause];
+    }
+    return [existing, clause];
+}
+function andOrgIntoWhere(where, orgField, orgId) {
+    const orgClause = { [orgField]: orgId };
+    if (where === undefined || where === null) {
+        return orgClause;
+    }
+    if (!isPlainObject(where)) {
+        return where;
+    }
+    return { ...where, AND: appendAndClause(where['AND'], orgClause) };
+}
+function extractScalarWriteValue(value) {
+    if (isPlainObject(value) && 'set' in value) {
+        return value['set'];
+    }
+    return value;
+}
+function orgMismatchViolation(req, actual, path) {
+    return {
+        kind: tenant_isolation_error_1.TenantIsolationViolationKind.OrgMismatch,
+        model: req.model,
+        operation: req.operation,
+        orgField: req.orgField,
+        expectedOrgId: req.orgId,
+        actualOrgId: String(actual),
+        path,
+    };
+}
+function stampCreateRow(row, req, path, violations) {
+    if (!isPlainObject(row)) {
+        return row;
+    }
+    const current = row[req.orgField];
+    if (current === undefined) {
+        return { ...row, [req.orgField]: req.orgId };
+    }
+    if (extractScalarWriteValue(current) !== req.orgId) {
+        violations.push(orgMismatchViolation(req, extractScalarWriteValue(current), path));
+    }
+    return row;
+}
+function stampCreatePayload(payload, req, path, violations) {
+    if (Array.isArray(payload)) {
+        return payload.map((row) => stampCreateRow(row, req, path, violations));
+    }
+    return stampCreateRow(payload, req, path, violations);
+}
+function checkUpdatePayload(payload, req, path, violations) {
+    if (!isPlainObject(payload)) {
+        return;
+    }
+    const current = payload[req.orgField];
+    if (current === undefined) {
+        return;
+    }
+    if (extractScalarWriteValue(current) !== req.orgId) {
+        violations.push(orgMismatchViolation(req, extractScalarWriteValue(current), path));
+    }
+}
+function scopeArgsToOrg(req) {
+    const spec = OPERATION_SCOPE_SPECS[req.operation];
+    if (spec === undefined) {
+        return {
+            args: { ...(req.args ?? {}) },
+            violations: [
+                {
+                    kind: tenant_isolation_error_1.TenantIsolationViolationKind.UnsupportedOperation,
+                    model: req.model,
+                    operation: req.operation,
+                    orgField: req.orgField,
+                    expectedOrgId: req.orgId,
+                },
+            ],
+        };
+    }
+    const violations = [];
+    const args = { ...(req.args ?? {}) };
+    if (spec.where !== WhereShape.None) {
+        args['where'] = andOrgIntoWhere(args['where'], req.orgField, req.orgId);
+    }
+    if (spec.createDataKey !== undefined) {
+        args[spec.createDataKey] = stampCreatePayload(args[spec.createDataKey], req, spec.createDataKey, violations);
+    }
+    if (spec.updateDataKey !== undefined) {
+        checkUpdatePayload(args[spec.updateDataKey], req, spec.updateDataKey, violations);
+    }
+    return { args, violations };
+}
+//# sourceMappingURL=org-scope.js.map

package/dist/lib/tenant-isolation/org-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-scope.js","sourceRoot":"","sources":["../../../src/lib/tenant-isolation/org-scope.ts"],"names":[],"mappings":";;;AAmQA,wCA6CC;AAzSD,qEAGkC;AAQlC,IAAY,oBAkBX;AAlBD,WAAY,oBAAoB;IAC9B,iDAAyB,CAAA;IACzB,+DAAuC,CAAA;IACvC,+CAAuB,CAAA;IACvB,6DAAqC,CAAA;IACrC,6CAAqB,CAAA;IACrB,yCAAiB,CAAA;IACjB,iDAAyB,CAAA;IACzB,mEAA2C,CAAA;IAC3C,yCAAiB,CAAA;IACjB,iDAAyB,CAAA;IACzB,mEAA2C,CAAA;IAC3C,yCAAiB,CAAA;IACjB,yCAAiB,CAAA;IACjB,iDAAyB,CAAA;IACzB,+CAAuB,CAAA;IACvB,uCAAe,CAAA;IACf,2CAAmB,CAAA;AACrB,CAAC,EAlBW,oBAAoB,oCAApB,oBAAoB,QAkB/B;AAGD,IAAK,UAaJ;AAbD,WAAK,UAAU;IAEb,2BAAa,CAAA;IAEb,+BAAiB,CAAA;IAQjB,+BAAiB,CAAA;AACnB,CAAC,EAbI,UAAU,KAAV,UAAU,QAad;AAUD,MAAM,qBAAqB,GAEvB;IACF,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE;IAC/D,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE;IACtE,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE;IAC9D,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE;IACrE,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE;IAC7D,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE;QAC7B,KAAK,EAAE,UAAU,CAAC,IAAI;QACtB,aAAa,EAAE,MAAM;KACtB;IACD,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE;QACjC,KAAK,EAAE,UAAU,CAAC,IAAI;QACtB,aAAa,EAAE,MAAM;KACtB;IACD,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,EAAE;QAC1C,KAAK,EAAE,UAAU,CAAC,IAAI;QACtB,aAAa,EAAE,MAAM;KACtB;IACD,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE;QAC7B,KAAK,EAAE,UAAU,CAAC,MAAM;QACxB,aAAa,EAAE,MAAM;KACtB;IACD,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE;QACjC,KAAK,EAAE,UAAU,CAAC,MAAM;QACxB,aAAa,EAAE,MAAM;KACtB;IACD,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,EAAE;QAC1C,KAAK,EAAE,UAAU,CAAC,MAAM;QACxB,aAAa,EAAE,MAAM;KACtB;IACD,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE;QAC7B,KAAK,EAAE,UAAU,CAAC,MAAM;QACxB,aAAa,EAAE,QAAQ;QACvB,aAAa,EAAE,QAAQ;KACxB;IACD,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE;IAC3D,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE;IAC/D,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE;IAC9D,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE;IAC1D,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE;CAC7D,CAAC;AAuBF,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAGD,SAAS,eAAe,CACtB,QAAiB,EACjB,MAA+B;IAE/B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC5B,CAAC;AAQD,SAAS,eAAe,CACtB,KAAc,EACd,QAAgB,EAChB,KAAa;IAEb,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC;IACxC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAG1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC;AACrE,CAAC;AAGD,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAAoB,EACpB,MAAe,EACf,IAAY;IAEZ,OAAO;QACL,IAAI,EAAE,qDAA4B,CAAC,WAAW;QAC9C,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,aAAa,EAAE,GAAG,CAAC,KAAK;QACxB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;QAC3B,IAAI;KACL,CAAC;AACJ,CAAC;AAMD,SAAS,cAAc,CACrB,GAAY,EACZ,GAAoB,EACpB,IAAY,EACZ,UAAsC;IAEtC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QAExB,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,uBAAuB,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC;QACnD,UAAU,CAAC,IAAI,CACb,oBAAoB,CAAC,GAAG,EAAE,uBAAuB,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAClE,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CACzB,OAAgB,EAChB,GAAoB,EACpB,IAAY,EACZ,UAAsC;IAEtC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AACxD,CAAC;AAMD,SAAS,kBAAkB,CACzB,OAAgB,EAChB,GAAoB,EACpB,IAAY,EACZ,UAAsC;IAEtC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IACD,IAAI,uBAAuB,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC;QACnD,UAAU,CAAC,IAAI,CACb,oBAAoB,CAAC,GAAG,EAAE,uBAAuB,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAClE,CAAC;IACJ,CAAC;AACH,CAAC;AAOD,SAAgB,cAAc,CAAC,GAAoB;IACjD,MAAM,IAAI,GACR,qBAGD,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACjB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,IAAI,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE;YAC7B,UAAU,EAAE;gBACV;oBACE,IAAI,EAAE,qDAA4B,CAAC,oBAAoB;oBACvD,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,aAAa,EAAE,GAAG,CAAC,KAAK;iBACzB;aACF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAA+B,EAAE,CAAC;IAClD,MAAM,IAAI,GAA4B,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;IAE9D,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,kBAAkB,CAC3C,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,EACxB,GAAG,EACH,IAAI,CAAC,aAAa,EAClB,UAAU,CACX,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACrC,kBAAkB,CAChB,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,EACxB,GAAG,EACH,IAAI,CAAC,aAAa,EAClB,UAAU,CACX,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC"}

package/dist/lib/tenant-isolation/tenant-isolation-error.d.ts

@@ -0,0 +1,20 @@
+export declare enum TenantIsolationViolationKind {
+    OrgMismatch = "org_mismatch",
+    MissingOrgContext = "missing_org_context",
+    UnsupportedOperation = "unsupported_operation"
+}
+export interface TenantIsolationViolation {
+    readonly kind: TenantIsolationViolationKind;
+    readonly model: string;
+    readonly operation: string;
+    readonly orgField: string;
+    readonly expectedOrgId?: string;
+    readonly actualOrgId?: string;
+    readonly path?: string;
+}
+export declare function formatTenantIsolationViolation(violation: TenantIsolationViolation): string;
+export declare class TenantIsolationError extends Error {
+    readonly violation: TenantIsolationViolation;
+    constructor(violation: TenantIsolationViolation);
+}
+//# sourceMappingURL=tenant-isolation-error.d.ts.map

package/dist/lib/tenant-isolation/tenant-isolation-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-isolation-error.d.ts","sourceRoot":"","sources":["../../../src/lib/tenant-isolation/tenant-isolation-error.ts"],"names":[],"mappings":"AAaA,oBAAY,4BAA4B;IACtC,WAAW,iBAAiB;IAC5B,iBAAiB,wBAAwB;IACzC,oBAAoB,0BAA0B;CAC/C;AAGD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;IAE5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAGD,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,wBAAwB,GAClC,MAAM,CAwBR;AAOD,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC;gBAEjC,SAAS,EAAE,wBAAwB;CAKhD"}

package/dist/lib/tenant-isolation/tenant-isolation-error.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TenantIsolationError = exports.TenantIsolationViolationKind = void 0;
+exports.formatTenantIsolationViolation = formatTenantIsolationViolation;
+var TenantIsolationViolationKind;
+(function (TenantIsolationViolationKind) {
+    TenantIsolationViolationKind["OrgMismatch"] = "org_mismatch";
+    TenantIsolationViolationKind["MissingOrgContext"] = "missing_org_context";
+    TenantIsolationViolationKind["UnsupportedOperation"] = "unsupported_operation";
+})(TenantIsolationViolationKind || (exports.TenantIsolationViolationKind = TenantIsolationViolationKind = {}));
+function formatTenantIsolationViolation(violation) {
+    const site = `${violation.model}.${violation.operation}`;
+    switch (violation.kind) {
+        case TenantIsolationViolationKind.OrgMismatch:
+            return (`[tenant-isolation] org mismatch on ${site}: args` +
+                `${violation.path !== undefined ? ` "${violation.path}"` : ''} set ` +
+                `${violation.orgField}="${violation.actualOrgId}" but the client is ` +
+                `scoped to "${violation.expectedOrgId}".`);
+        case TenantIsolationViolationKind.MissingOrgContext:
+            return (`[tenant-isolation] ${site} executed with no org context. Outside a ` +
+                `request (boot, migrations, seeding, workers, Temporal activities) ` +
+                `there is no ambient org — use client.forOrg(orgId) for explicit ` +
+                `scoping, or client.asSystem() for a legitimate cross-org system path.`);
+        case TenantIsolationViolationKind.UnsupportedOperation:
+            return (`[tenant-isolation] unrecognized Prisma operation "${violation.operation}" ` +
+                `on org-scoped model ${violation.model} — tenant isolation cannot prove ` +
+                `it is org-scoped. Add it to PrismaModelOperation or exempt the model.`);
+    }
+}
+class TenantIsolationError extends Error {
+    violation;
+    constructor(violation) {
+        super(formatTenantIsolationViolation(violation));
+        this.name = 'TenantIsolationError';
+        this.violation = violation;
+    }
+}
+exports.TenantIsolationError = TenantIsolationError;
+//# sourceMappingURL=tenant-isolation-error.js.map

package/dist/lib/tenant-isolation/tenant-isolation-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-isolation-error.js","sourceRoot":"","sources":["../../../src/lib/tenant-isolation/tenant-isolation-error.ts"],"names":[],"mappings":";;;AAqCA,wEA0BC;AAlDD,IAAY,4BAIX;AAJD,WAAY,4BAA4B;IACtC,4DAA4B,CAAA;IAC5B,yEAAyC,CAAA;IACzC,8EAA8C,CAAA;AAChD,CAAC,EAJW,4BAA4B,4CAA5B,4BAA4B,QAIvC;AAoBD,SAAgB,8BAA8B,CAC5C,SAAmC;IAEnC,MAAM,IAAI,GAAG,GAAG,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;IACzD,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,4BAA4B,CAAC,WAAW;YAC3C,OAAO,CACL,sCAAsC,IAAI,QAAQ;gBAClD,GAAG,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO;gBACpE,GAAG,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC,WAAW,sBAAsB;gBACrE,cAAc,SAAS,CAAC,aAAa,IAAI,CAC1C,CAAC;QACJ,KAAK,4BAA4B,CAAC,iBAAiB;YACjD,OAAO,CACL,sBAAsB,IAAI,2CAA2C;gBACrE,oEAAoE;gBACpE,kEAAkE;gBAClE,uEAAuE,CACxE,CAAC;QACJ,KAAK,4BAA4B,CAAC,oBAAoB;YACpD,OAAO,CACL,qDAAqD,SAAS,CAAC,SAAS,IAAI;gBAC5E,uBAAuB,SAAS,CAAC,KAAK,mCAAmC;gBACzE,uEAAuE,CACxE,CAAC;IACN,CAAC;AACH,CAAC;AAOD,MAAa,oBAAqB,SAAQ,KAAK;IACpC,SAAS,CAA2B;IAE7C,YAAY,SAAmC;QAC7C,KAAK,CAAC,8BAA8B,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AARD,oDAQC"}

package/dist/lib/tenant-isolation/tenant-isolation-mode.d.ts

@@ -0,0 +1,8 @@
+export declare enum TenantIsolationMode {
+    Enforce = "enforce",
+    Observe = "observe",
+    Off = "off"
+}
+export declare const TENANT_ISOLATION_MODE_ENV_VAR = "XEMA_TENANT_ISOLATION_MODE";
+export declare function resolveTenantIsolationMode(explicit?: TenantIsolationMode, env?: NodeJS.ProcessEnv): TenantIsolationMode;
+//# sourceMappingURL=tenant-isolation-mode.d.ts.map

package/dist/lib/tenant-isolation/tenant-isolation-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-isolation-mode.d.ts","sourceRoot":"","sources":["../../../src/lib/tenant-isolation/tenant-isolation-mode.ts"],"names":[],"mappings":"AAcA,oBAAY,mBAAmB;IAC7B,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,GAAG,QAAQ;CACZ;AAGD,eAAO,MAAM,6BAA6B,+BAA+B,CAAC;AAe1E,wBAAgB,0BAA0B,CACxC,QAAQ,CAAC,EAAE,mBAAmB,EAC9B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,mBAAmB,CAerB"}

package/dist/lib/tenant-isolation/tenant-isolation-mode.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TENANT_ISOLATION_MODE_ENV_VAR = exports.TenantIsolationMode = void 0;
+exports.resolveTenantIsolationMode = resolveTenantIsolationMode;
+var TenantIsolationMode;
+(function (TenantIsolationMode) {
+    TenantIsolationMode["Enforce"] = "enforce";
+    TenantIsolationMode["Observe"] = "observe";
+    TenantIsolationMode["Off"] = "off";
+})(TenantIsolationMode || (exports.TenantIsolationMode = TenantIsolationMode = {}));
+exports.TENANT_ISOLATION_MODE_ENV_VAR = 'XEMA_TENANT_ISOLATION_MODE';
+const MODE_VALUES = Object.values(TenantIsolationMode);
+function isTenantIsolationMode(value) {
+    return MODE_VALUES.includes(value);
+}
+function resolveTenantIsolationMode(explicit, env = process.env) {
+    if (explicit !== undefined) {
+        return explicit;
+    }
+    const raw = env[exports.TENANT_ISOLATION_MODE_ENV_VAR];
+    if (raw === undefined || raw === '') {
+        return TenantIsolationMode.Observe;
+    }
+    if (!isTenantIsolationMode(raw)) {
+        throw new Error(`[tenant-isolation] invalid ${exports.TENANT_ISOLATION_MODE_ENV_VAR}="${raw}" — ` +
+            `expected one of: ${MODE_VALUES.join(', ')}.`);
+    }
+    return raw;
+}
+//# sourceMappingURL=tenant-isolation-mode.js.map

package/dist/lib/tenant-isolation/tenant-isolation-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-isolation-mode.js","sourceRoot":"","sources":["../../../src/lib/tenant-isolation/tenant-isolation-mode.ts"],"names":[],"mappings":";;;AAoCA,gEAkBC;AAxCD,IAAY,mBAIX;AAJD,WAAY,mBAAmB;IAC7B,0CAAmB,CAAA;IACnB,0CAAmB,CAAA;IACnB,kCAAW,CAAA;AACb,CAAC,EAJW,mBAAmB,mCAAnB,mBAAmB,QAI9B;AAGY,QAAA,6BAA6B,GAAG,4BAA4B,CAAC;AAE1E,MAAM,WAAW,GAAsB,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAE1E,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACrC,CAAC;AASD,SAAgB,0BAA0B,CACxC,QAA8B,EAC9B,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,qCAA6B,CAAC,CAAC;IAC/C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACpC,OAAO,mBAAmB,CAAC,OAAO,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,8BAA8B,qCAA6B,KAAK,GAAG,MAAM;YACvE,oBAAoB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChD,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/lib/tenant-isolation/tenant-isolation.extension.d.ts

@@ -0,0 +1,30 @@
+import { TenantIsolationMode } from './tenant-isolation-mode';
+export declare const DEFAULT_ORG_FIELD = "orgId";
+export interface TenantIsolationLogger {
+    warn(message: string): void;
+    debug(message: string): void;
+}
+export declare function collectOrgScopedModels(client: unknown, orgField: string, exemptModels: readonly string[]): ReadonlySet<string>;
+export interface TenantIsolationQueryContext {
+    readonly model?: string;
+    readonly operation: string;
+    readonly args?: Record<string, unknown>;
+    readonly query: (args: unknown) => Promise<unknown>;
+}
+export interface CreateTenantIsolationExtensionOptions {
+    readonly orgScopedModels: ReadonlySet<string>;
+    readonly orgField: string;
+    readonly mode: TenantIsolationMode;
+    readonly orgIdSource: () => string | undefined;
+    readonly logger: TenantIsolationLogger;
+}
+export interface TenantIsolationExtensionDefinition {
+    readonly name: string;
+    readonly query: {
+        readonly $allModels: {
+            $allOperations(ctx: TenantIsolationQueryContext): Promise<unknown>;
+        };
+    };
+}
+export declare function createTenantIsolationExtension(options: CreateTenantIsolationExtensionOptions): TenantIsolationExtensionDefinition;
+//# sourceMappingURL=tenant-isolation.extension.d.ts.map

package/dist/lib/tenant-isolation/tenant-isolation.extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-isolation.extension.d.ts","sourceRoot":"","sources":["../../../src/lib/tenant-isolation/tenant-isolation.extension.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAG9D,eAAO,MAAM,iBAAiB,UAAU,CAAC;AAGzC,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAsCD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,SAAS,MAAM,EAAE,GAC9B,WAAW,CAAC,MAAM,CAAC,CAoBrB;AAGD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,qCAAqC;IAEpD,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IAMnC,QAAQ,CAAC,WAAW,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;CACxC;AAGD,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,UAAU,EAAE;YACnB,cAAc,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;SACpE,CAAC;KACH,CAAC;CACH;AAYD,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,qCAAqC,GAC7C,kCAAkC,CAkEpC"}

package/dist/lib/tenant-isolation/tenant-isolation.extension.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_ORG_FIELD = void 0;
+exports.collectOrgScopedModels = collectOrgScopedModels;
+exports.createTenantIsolationExtension = createTenantIsolationExtension;
+const org_scope_1 = require("./org-scope");
+const tenant_isolation_error_1 = require("./tenant-isolation-error");
+const tenant_isolation_mode_1 = require("./tenant-isolation-mode");
+exports.DEFAULT_ORG_FIELD = 'orgId';
+function readRuntimeModels(client) {
+    const models = client._runtimeDataModel?.models;
+    if (models === undefined) {
+        throw new Error('[tenant-isolation] the Prisma client exposes no _runtimeDataModel.models — ' +
+            'cannot detect org-scoped models. Tenant isolation requires a generated ' +
+            '@prisma/client >= 5 (this SDK peers on ^7).');
+    }
+    return models;
+}
+function collectOrgScopedModels(client, orgField, exemptModels) {
+    const models = readRuntimeModels(client);
+    for (const exempt of exemptModels) {
+        if (!(exempt in models)) {
+            throw new Error(`[tenant-isolation] exemptModels names unknown model "${exempt}" — ` +
+                `known models: ${Object.keys(models).join(', ')}.`);
+        }
+    }
+    const scoped = new Set();
+    for (const [name, model] of Object.entries(models)) {
+        if (exemptModels.includes(name)) {
+            continue;
+        }
+        if (model.fields.some((field) => field.name === orgField)) {
+            scoped.add(name);
+        }
+    }
+    return scoped;
+}
+function createTenantIsolationExtension(options) {
+    const { orgScopedModels, orgField, mode, orgIdSource, logger } = options;
+    const handleViolations = (violations) => {
+        const [first] = violations;
+        if (first === undefined) {
+            return;
+        }
+        if (mode === tenant_isolation_mode_1.TenantIsolationMode.Enforce) {
+            throw new tenant_isolation_error_1.TenantIsolationError(first);
+        }
+        for (const violation of violations) {
+            logger.warn((0, tenant_isolation_error_1.formatTenantIsolationViolation)(violation));
+        }
+    };
+    return {
+        name: 'xema-tenant-isolation',
+        query: {
+            $allModels: {
+                $allOperations(ctx) {
+                    const { model, operation, args, query } = ctx;
+                    if (mode === tenant_isolation_mode_1.TenantIsolationMode.Off ||
+                        model === undefined ||
+                        !orgScopedModels.has(model)) {
+                        return query(args);
+                    }
+                    const orgId = orgIdSource();
+                    if (orgId === undefined || orgId === '') {
+                        handleViolations([
+                            {
+                                kind: tenant_isolation_error_1.TenantIsolationViolationKind.MissingOrgContext,
+                                model,
+                                operation,
+                                orgField,
+                            },
+                        ]);
+                        return query(args);
+                    }
+                    const outcome = (0, org_scope_1.scopeArgsToOrg)({
+                        model,
+                        operation,
+                        args,
+                        orgId,
+                        orgField,
+                    });
+                    if (outcome.violations.length > 0) {
+                        handleViolations(outcome.violations);
+                        return query(args);
+                    }
+                    return mode === tenant_isolation_mode_1.TenantIsolationMode.Enforce
+                        ? query(outcome.args)
+                        : query(args);
+                },
+            },
+        },
+    };
+}
+//# sourceMappingURL=tenant-isolation.extension.js.map

package/dist/lib/tenant-isolation/tenant-isolation.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-isolation.extension.js","sourceRoot":"","sources":["../../../src/lib/tenant-isolation/tenant-isolation.extension.ts"],"names":[],"mappings":";;;AA6DA,wDAwBC;AA4CD,wEAoEC;AA9LD,2CAA6C;AAC7C,qEAKkC;AAClC,mEAA8D;AAGjD,QAAA,iBAAiB,GAAG,OAAO,CAAC;AAsBzC,SAAS,iBAAiB,CACxB,MAAe;IAEf,MAAM,MAAM,GAAI,MAAkC,CAAC,iBAAiB,EAAE,MAAM,CAAC;IAC7E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,6EAA6E;YAC3E,yEAAyE;YACzE,6CAA6C,CAChD,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAUD,SAAgB,sBAAsB,CACpC,MAAe,EACf,QAAgB,EAChB,YAA+B;IAE/B,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,wDAAwD,MAAM,MAAM;gBAClE,iBAAiB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACrD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC1D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AA4CD,SAAgB,8BAA8B,CAC5C,OAA8C;IAE9C,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAEzE,MAAM,gBAAgB,GAAG,CACvB,UAA+C,EACzC,EAAE;QACR,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC;QAC3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,2CAAmB,CAAC,OAAO,EAAE,CAAC;YACzC,MAAM,IAAI,6CAAoB,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,IAAA,uDAA8B,EAAC,SAAS,CAAC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE;YACL,UAAU,EAAE;gBACV,cAAc,CAAC,GAAgC;oBAC7C,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;oBAC9C,IACE,IAAI,KAAK,2CAAmB,CAAC,GAAG;wBAChC,KAAK,KAAK,SAAS;wBACnB,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAC3B,CAAC;wBACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;oBACrB,CAAC;oBAED,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;oBAC5B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;wBACxC,gBAAgB,CAAC;4BACf;gCACE,IAAI,EAAE,qDAA4B,CAAC,iBAAiB;gCACpD,KAAK;gCACL,SAAS;gCACT,QAAQ;6BACT;yBACF,CAAC,CAAC;wBAEH,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;oBACrB,CAAC;oBAED,MAAM,OAAO,GAAG,IAAA,0BAAc,EAAC;wBAC7B,KAAK;wBACL,SAAS;wBACT,IAAI;wBACJ,KAAK;wBACL,QAAQ;qBACT,CAAC,CAAC;oBACH,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAClC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;wBAGrC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;oBACrB,CAAC;oBACD,OAAO,IAAI,KAAK,2CAAmB,CAAC,OAAO;wBACzC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;wBACrB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAClB,CAAC;aACF;SACF;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,7 +1,16 @@
 {
   "name": "@xemahq/biome-database-nest",
-  "version": "0.4.0",
+  "version": "0.5.1",
   "description": "Layer 1 SDK that centralizes ALL database concerns for Xema biome services. Provides the single correct construction of a schema-qualified Prisma driver-adapter (the second-arg `{ schema }` that makes `@prisma/adapter-pg` qualify `biome_<id>.<table>` instead of `public.<table>`), the per-biome schema-naming convention, env/control-plane config resolution, and a boot-time bootstrap that creates the schema and runs migrations. Biomes carry zero DB boilerplate.",
+  "license": "Apache-2.0",
+  "author": "Neuralchowder Inc. <developer@xema.dev> (https://xema.dev)",
+  "homepage": "https://xema.dev",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/xema-dev/xema-kernel-sdk.git",
+    "directory": "packages/sdks/biome-database-nest"
+  },
+  "bugs": "https://github.com/xema-dev/xema-kernel-sdk/issues",
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
     "access": "public"
@@ -18,17 +27,21 @@
     "@types/node": "25.2.3",
     "@types/pg": "^8.16.0",
     "@xemahq/identity-client": "^0.3.5",
+    "@xemahq/kernel-contracts": "^0.22.3",
     "jest": "^30.3.0",
     "prettier": "3.6.2",
     "ts-jest": "^29.4.9",
-    "typescript": "5.9.3"
+    "typescript": "5.9.3",
+    "@xemahq/service-registry-nest": "0.3.1"
   },
   "peerDependencies": {
     "@nestjs/common": "^10 || ^11",
     "@nestjs/core": "^10 || ^11",
     "@prisma/adapter-pg": "^7",
     "@prisma/client": "^7",
-    "@xemahq/identity-client": "^0.3.0"
+    "@xemahq/identity-client": "^0.3.0",
+    "@xemahq/kernel-contracts": ">=0.13.0",
+    "@xemahq/service-registry-nest": ">=0.2.0"
   },
   "dependencies": {
     "@xemahq/migration-runner-prisma": "^0.1.2",