glasswork 1.0.1 → 1.1.0

package/dist/rls/context.d.ts

@@ -0,0 +1,37 @@
+import { type TenantContext } from './types.js';
+/**
+ * Run an asynchronous function within a specific tenant context.
+ *
+ * @param context - The TenantContext to bind.
+ * @param fn - The asynchronous callback function.
+ * @returns The resolved return value of `fn`.
+ *
+ * @example
+ * ```typescript
+ * const result = await runWithTenant({ tenantId: 'tenant_123' }, async () => {
+ *   return await prisma.poll.findMany();
+ * });
+ * ```
+ */
+export declare function runWithTenant<T>(context: TenantContext | undefined, fn: () => T | PromiseLike<T>): Promise<T>;
+/**
+ * Run trusted system code with an explicit bypass.
+ *
+ * Only tables with a matching bypass policy allow access across tenants.
+ */
+export declare function runWithBypass<T>(fn: () => T | PromiseLike<T>): Promise<T>;
+/**
+ * Get the current active TenantContext, or undefined if outside a tenant execution boundary.
+ */
+export declare function getTenantContext(): Readonly<TenantContext> | undefined;
+/**
+ * Get the current active tenant ID, or undefined if outside a tenant boundary.
+ */
+export declare function getTenantId(): string | undefined;
+/**
+ * Get the current active tenant ID, throwing `MissingTenantContextException` if not present.
+ *
+ * @param modelName - Optional model name for descriptive error reporting.
+ */
+export declare function requireTenantId(modelName?: string): string;
+//# sourceMappingURL=context.d.ts.map

package/dist/rls/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/rls/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAiC,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAO/E;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAC7B,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,EAAE,EAAE,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,GAC3B,OAAO,CAAC,CAAC,CAAC,CAEZ;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEzE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,QAAQ,CAAC,aAAa,CAAC,GAAG,SAAS,CAEtE;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,MAAM,GAAG,SAAS,CAEhD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAM1D"}

package/dist/rls/context.js

@@ -0,0 +1,56 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { MissingTenantContextException } from './types.js';
+/**
+ * AsyncLocalStorage instance holding the active TenantContext for the current execution chain.
+ */
+const tenantContextStorage = new AsyncLocalStorage();
+/**
+ * Run an asynchronous function within a specific tenant context.
+ *
+ * @param context - The TenantContext to bind.
+ * @param fn - The asynchronous callback function.
+ * @returns The resolved return value of `fn`.
+ *
+ * @example
+ * ```typescript
+ * const result = await runWithTenant({ tenantId: 'tenant_123' }, async () => {
+ *   return await prisma.poll.findMany();
+ * });
+ * ```
+ */
+export function runWithTenant(context, fn) {
+    return tenantContextStorage.run(context && Object.freeze({ ...context }), async () => await fn());
+}
+/**
+ * Run trusted system code with an explicit bypass.
+ *
+ * Only tables with a matching bypass policy allow access across tenants.
+ */
+export function runWithBypass(fn) {
+    return runWithTenant({ bypass: true }, fn);
+}
+/**
+ * Get the current active TenantContext, or undefined if outside a tenant execution boundary.
+ */
+export function getTenantContext() {
+    return tenantContextStorage.getStore();
+}
+/**
+ * Get the current active tenant ID, or undefined if outside a tenant boundary.
+ */
+export function getTenantId() {
+    return tenantContextStorage.getStore()?.tenantId;
+}
+/**
+ * Get the current active tenant ID, throwing `MissingTenantContextException` if not present.
+ *
+ * @param modelName - Optional model name for descriptive error reporting.
+ */
+export function requireTenantId(modelName) {
+    const context = getTenantContext();
+    if (!context?.tenantId) {
+        throw new MissingTenantContextException(modelName);
+    }
+    return context.tenantId;
+}
+//# sourceMappingURL=context.js.map

package/dist/rls/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/rls/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,6BAA6B,EAAsB,MAAM,YAAY,CAAC;AAE/E;;GAEG;AACH,MAAM,oBAAoB,GAAG,IAAI,iBAAiB,EAAuC,CAAC;AAE1F;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAkC,EAClC,EAA4B;IAE5B,OAAO,oBAAoB,CAAC,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACpG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAI,EAA4B;IAC3D,OAAO,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,oBAAoB,CAAC,QAAQ,EAAE,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,oBAAoB,CAAC,QAAQ,EAAE,EAAE,QAAQ,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,SAAkB;IAChD,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;QACvB,MAAM,IAAI,6BAA6B,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,CAAC;AAC1B,CAAC"}

package/dist/rls/extension.d.ts

@@ -0,0 +1,7 @@
+import { type RLSExtensionOptions, type RLSTransactionClient, type RLSTransactionOptions, type TenantContext } from './types.js';
+/** Prisma extension for transaction-scoped PostgreSQL RLS. Apply this extension last. */
+export declare function createRLSExtension(options?: RLSExtensionOptions): (client: any) => import("@prisma/client/extension").PrismaClientExtends<import("@prisma/client/runtime/client").InternalArgs<{}, {}, {}, {
+    $transaction<TClient, TResult>(this: TClient, fn: (tx: RLSTransactionClient<TClient>) => Promise<TResult>, transactionOptions?: RLSTransactionOptions): Promise<TResult>;
+    $withTenant<TClient, TResult>(this: TClient, context: TenantContext, fn: (tx: RLSTransactionClient<TClient>) => Promise<TResult>, transactionOptions?: RLSTransactionOptions): Promise<TResult>;
+}> & import("@prisma/client/runtime/client").DefaultArgs>;
+//# sourceMappingURL=extension.d.ts.map

package/dist/rls/extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension.d.ts","sourceRoot":"","sources":["../../src/rls/extension.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EACnB,MAAM,YAAY,CAAC;AAQpB,yFAAyF;AACzF,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,mBAAwB;iBA6E/C,OAAO,EAAE,OAAO,QACrB,OAAO,MACT,CAAC,EAAE,EAAE,oBAAoB,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,uBACtC,qBAAqB;gBAIhC,OAAO,EAAE,OAAO,QACpB,OAAO,WACJ,aAAa,MAClB,CAAC,EAAE,EAAE,oBAAoB,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,uBACtC,qBAAqB;0DAqBnD"}

package/dist/rls/extension.js

@@ -0,0 +1,91 @@
+import { Prisma } from '@prisma/client/extension';
+import { validateSessionVariables } from './configuration.js';
+import { getTenantContext, runWithTenant } from './context.js';
+import { MissingTenantContextException, RLSConfigurationException, } from './types.js';
+/** Prisma extension for transaction-scoped PostgreSQL RLS. Apply this extension last. */
+export function createRLSExtension(options = {}) {
+    const { sessionVariable = 'app.current_tenant_id', bypassVariable, models, missingContextBehavior = 'throw', } = options;
+    validateSessionVariables(sessionVariable, bypassVariable);
+    function resolveContext(model) {
+        const context = getTenantContext();
+        if (context?.bypass && !bypassVariable) {
+            throw new RLSConfigurationException('This RLS extension does not allow bypass.');
+        }
+        if (context?.tenantId || context?.bypass)
+            return context;
+        if (missingContextBehavior === 'throw' &&
+            (!models || (model !== undefined && models.includes(model)))) {
+            throw new MissingTenantContextException(model);
+        }
+        return undefined;
+    }
+    return Prisma.defineExtension((base) => {
+        function sessionConfig(context) {
+            const tenantId = context.tenantId ?? '';
+            // Set or clear both settings each time; values remain parameterized.
+            return bypassVariable
+                ? [
+                    'SELECT set_config($1, $2, true), set_config($3, $4, true)',
+                    sessionVariable,
+                    tenantId,
+                    bypassVariable,
+                    context.bypass ? 'true' : '',
+                ]
+                : ['SELECT set_config($1, $2, true)', sessionVariable, tenantId];
+        }
+        async function transact(fn, transactionOptions) {
+            if (typeof fn !== 'function') {
+                throw new RLSConfigurationException('Use the callback form of $transaction for RLS.');
+            }
+            const context = resolveContext();
+            if (!context)
+                throw new MissingTenantContextException();
+            // A separate extension keeps Prisma's query callback on the transaction client.
+            // No private Prisma transaction fields or global client redirection are needed.
+            const transactional = base.$extends({
+                name: 'glasswork-rls-transaction',
+                query: {
+                    async $allOperations({ model, args, query }) {
+                        const active = resolveContext(model);
+                        if (active?.tenantId !== context.tenantId || active?.bypass !== context.bypass) {
+                            throw new RLSConfigurationException('The RLS context cannot change within a transaction.');
+                        }
+                        return query(args);
+                    },
+                },
+            });
+            return transactional.$transaction(async (tx) => {
+                await tx.$executeRawUnsafe(...sessionConfig(context));
+                // Prisma preserves the model delegates and previously applied extensions.
+                return fn(tx);
+            }, transactionOptions);
+        }
+        return base.$extends({
+            name: 'glasswork-rls',
+            client: {
+                $transaction(fn, transactionOptions) {
+                    return transact(fn, transactionOptions);
+                },
+                $withTenant(context, fn, transactionOptions) {
+                    return runWithTenant(context, () => transact(fn, transactionOptions));
+                },
+            },
+            query: {
+                async $allOperations({ model, args, query }) {
+                    const context = resolveContext(model);
+                    if (!context)
+                        return query(args);
+                    // A batch binds the original PrismaPromise to the same connection.
+                    // Global models can also load tenant relations: scope every query.
+                    const operation = query(args);
+                    const [, result] = await base.$transaction([
+                        base.$executeRawUnsafe(...sessionConfig(context)),
+                        operation,
+                    ]);
+                    return result;
+                },
+            },
+        });
+    });
+}
+//# sourceMappingURL=extension.js.map

package/dist/rls/extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension.js","sourceRoot":"","sources":["../../src/rls/extension.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,GAK1B,MAAM,YAAY,CAAC;AAQpB,yFAAyF;AACzF,MAAM,UAAU,kBAAkB,CAAC,OAAO,GAAwB,EAAE;IAClE,MAAM,EACJ,eAAe,GAAG,uBAAuB,EACzC,cAAc,EACd,MAAM,EACN,sBAAsB,GAAG,OAAO,GACjC,GAAG,OAAO,CAAC;IAEZ,wBAAwB,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;IAE1D,SAAS,cAAc,CAAC,KAAc;QACpC,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;QACnC,IAAI,OAAO,EAAE,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YACvC,MAAM,IAAI,yBAAyB,CAAC,2CAA2C,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,OAAO,EAAE,QAAQ,IAAI,OAAO,EAAE,MAAM;YAAE,OAAO,OAAO,CAAC;QACzD,IACE,sBAAsB,KAAK,OAAO;YAClC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAC5D,CAAC;YACD,MAAM,IAAI,6BAA6B,CAAC,KAAK,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,EAAE;QACrC,SAAS,aAAa,CAAC,OAAgC;YACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;YACxC,qEAAqE;YACrE,OAAO,cAAc;gBACnB,CAAC,CAAC;oBACE,2DAA2D;oBAC3D,eAAe;oBACf,QAAQ;oBACR,cAAc;oBACd,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;iBAC7B;gBACH,CAAC,CAAC,CAAC,iCAAiC,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;QACrE,CAAC;QAED,KAAK,UAAU,QAAQ,CACrB,EAA2D,EAC3D,kBAA0C;YAE1C,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;gBAC7B,MAAM,IAAI,yBAAyB,CAAC,gDAAgD,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,6BAA6B,EAAE,CAAC;YAExD,gFAAgF;YAChF,gFAAgF;YAChF,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC;gBAClC,IAAI,EAAE,2BAA2B;gBACjC,KAAK,EAAE;oBACL,KAAK,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;wBACzC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;wBACrC,IAAI,MAAM,EAAE,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;4BAC/E,MAAM,IAAI,yBAAyB,CACjC,qDAAqD,CACtD,CAAC;wBACJ,CAAC;wBACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;oBACrB,CAAC;iBACF;aACF,CAAC,CAAC;YAEH,OAAO,aAAa,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBAC7C,MAAO,EAA8B,CAAC,iBAAiB,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;gBACnF,0EAA0E;gBAC1E,OAAO,EAAE,CAAC,EAA8C,CAAC,CAAC;YAC5D,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACzB,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC;YACnB,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE;gBACN,YAAY,CAEV,EAA2D,EAC3D,kBAA0C;oBAE1C,OAAO,QAAQ,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;gBAC1C,CAAC;gBACD,WAAW,CAET,OAAsB,EACtB,EAA2D,EAC3D,kBAA0C;oBAE1C,OAAO,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;gBACxE,CAAC;aACF;YACD,KAAK,EAAE;gBACL,KAAK,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;oBACzC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;oBACtC,IAAI,CAAC,OAAO;wBAAE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;oBACjC,mEAAmE;oBACnE,mEAAmE;oBACnE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAkC,CAAC;oBAC/D,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC;wBACxC,IAAkC,CAAC,iBAAiB,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;wBAChF,SAAS;qBACV,CAAC,CAAC;oBACH,OAAO,MAAM,CAAC;gBAChB,CAAC;aACF;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/rls/generator.d.ts

@@ -0,0 +1,17 @@
+import type { GenerateRLSPoliciesOptions } from './types.js';
+/**
+ * Generate PostgreSQL Row Level Security DDL statements for a list of tables.
+ *
+ * @param options - Configuration options for policy generation.
+ * @returns Formatted SQL migration string containing DDL statements.
+ *
+ * @example
+ * ```typescript
+ * const sql = generateRLSPolicies({
+ *   models: ['Poll', 'MemberProfile'],
+ *   tenantField: 'tenantId',
+ * });
+ * ```
+ */
+export declare function generateRLSPolicies(options: GenerateRLSPoliciesOptions): string;
+//# sourceMappingURL=generator.d.ts.map

package/dist/rls/generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generator.d.ts","sourceRoot":"","sources":["../../src/rls/generator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAY7D;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,MAAM,CA0C/E"}

package/dist/rls/generator.js

@@ -0,0 +1,47 @@
+import { validateSessionVariables } from './configuration.js';
+/**
+ * Escape a PostgreSQL identifier (table name or column name) by wrapping in double quotes.
+ */
+function quoteIdentifier(identifier) {
+    if (!identifier.trim()) {
+        throw new Error('Identifier cannot be empty');
+    }
+    return `"${identifier.replaceAll('"', '""')}"`;
+}
+/**
+ * Generate PostgreSQL Row Level Security DDL statements for a list of tables.
+ *
+ * @param options - Configuration options for policy generation.
+ * @returns Formatted SQL migration string containing DDL statements.
+ *
+ * @example
+ * ```typescript
+ * const sql = generateRLSPolicies({
+ *   models: ['Poll', 'MemberProfile'],
+ *   tenantField: 'tenantId',
+ * });
+ * ```
+ */
+export function generateRLSPolicies(options) {
+    const { models, tenantField = 'tenantId', sessionVariable = 'app.current_tenant_id', bypassVariable, forceRLS = true, } = options;
+    if (!models || models.length === 0) {
+        return '';
+    }
+    const quotedTenantField = quoteIdentifier(tenantField);
+    validateSessionVariables(sessionVariable, bypassVariable);
+    const policyStatements = models.map((model) => {
+        const quotedTable = quoteIdentifier(model);
+        const policyName = quoteIdentifier(`tenant_isolation_${model}`);
+        const condition = bypassVariable
+            ? `current_setting('${bypassVariable}', true) = 'true' OR ${quotedTenantField} = NULLIF(current_setting('${sessionVariable}', true), '')`
+            : `${quotedTenantField} = NULLIF(current_setting('${sessionVariable}', true), '')`;
+        const lines = [`ALTER TABLE ${quotedTable} ENABLE ROW LEVEL SECURITY;`];
+        if (forceRLS) {
+            lines.push(`ALTER TABLE ${quotedTable} FORCE ROW LEVEL SECURITY;`);
+        }
+        lines.push(`DROP POLICY IF EXISTS ${policyName} ON ${quotedTable};`, `CREATE POLICY ${policyName} ON ${quotedTable}`, '  FOR ALL', `  USING (${condition})`, `  WITH CHECK (${condition});`);
+        return lines.join('\n');
+    });
+    return policyStatements.join('\n\n');
+}
+//# sourceMappingURL=generator.js.map

package/dist/rls/generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generator.js","sourceRoot":"","sources":["../../src/rls/generator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAG9D;;GAEG;AACH,SAAS,eAAe,CAAC,UAAkB;IACzC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;AACjD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAmC;IACrE,MAAM,EACJ,MAAM,EACN,WAAW,GAAG,UAAU,EACxB,eAAe,GAAG,uBAAuB,EACzC,cAAc,EACd,QAAQ,GAAG,IAAI,GAChB,GAAG,OAAO,CAAC;IAEZ,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,iBAAiB,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IACvD,wBAAwB,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;IAE1D,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5C,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,eAAe,CAAC,oBAAoB,KAAK,EAAE,CAAC,CAAC;QAEhE,MAAM,SAAS,GAAG,cAAc;YAC9B,CAAC,CAAC,oBAAoB,cAAc,wBAAwB,iBAAiB,8BAA8B,eAAe,eAAe;YACzI,CAAC,CAAC,GAAG,iBAAiB,8BAA8B,eAAe,eAAe,CAAC;QAErF,MAAM,KAAK,GAAa,CAAC,eAAe,WAAW,6BAA6B,CAAC,CAAC;QAElF,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC,eAAe,WAAW,4BAA4B,CAAC,CAAC;QACrE,CAAC;QAED,KAAK,CAAC,IAAI,CACR,yBAAyB,UAAU,OAAO,WAAW,GAAG,EACxD,iBAAiB,UAAU,OAAO,WAAW,EAAE,EAC/C,WAAW,EACX,YAAY,SAAS,GAAG,EACxB,iBAAiB,SAAS,IAAI,CAC/B,CAAC;QAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,OAAO,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC"}

package/dist/rls/index.d.ts

@@ -0,0 +1,7 @@
+export { getTenantContext, getTenantId, requireTenantId, runWithBypass, runWithTenant, } from './context.js';
+export { createRLSExtension } from './extension.js';
+export { generateRLSPolicies } from './generator.js';
+export { createRLSMiddleware } from './middleware.js';
+export { withBypass, withTenant } from './testing.js';
+export { type GenerateRLSPoliciesOptions, MissingTenantContextException, RLSConfigurationException, type RLSExtensionOptions, type RLSMiddlewareOptions, type RLSTransactionClient, type RLSTransactionOptions, type TenantContext, type TenantContextExtractor, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/rls/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rls/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,aAAa,EACb,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EACL,KAAK,0BAA0B,EAC/B,6BAA6B,EAC7B,yBAAyB,EACzB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAClB,KAAK,sBAAsB,GAC5B,MAAM,YAAY,CAAC"}

package/dist/rls/index.js

@@ -0,0 +1,7 @@
+export { getTenantContext, getTenantId, requireTenantId, runWithBypass, runWithTenant, } from './context.js';
+export { createRLSExtension } from './extension.js';
+export { generateRLSPolicies } from './generator.js';
+export { createRLSMiddleware } from './middleware.js';
+export { withBypass, withTenant } from './testing.js';
+export { MissingTenantContextException, RLSConfigurationException, } from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/rls/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rls/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,aAAa,EACb,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAEL,6BAA6B,EAC7B,yBAAyB,GAO1B,MAAM,YAAY,CAAC"}

package/dist/rls/middleware.d.ts

@@ -0,0 +1,17 @@
+import type { MiddlewareHandler } from 'hono';
+import { type RLSMiddlewareOptions } from './types.js';
+/**
+ * Create Hono middleware that resolves the active TenantContext and binds it to AsyncLocalStorage.
+ *
+ * @param options - Configuration options for tenant extraction and unauthenticated behavior.
+ * @returns Hono middleware handler.
+ *
+ * @example
+ * ```typescript
+ * app.use('*', createRLSMiddleware({
+ *   allowUnauthenticated: true,
+ * }));
+ * ```
+ */
+export declare function createRLSMiddleware(options?: RLSMiddlewareOptions): MiddlewareHandler;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/rls/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/rls/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAEvD,OAAO,EAEL,KAAK,oBAAoB,EAE1B,MAAM,YAAY,CAAC;AA2BpB;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,oBAAyB,GAAG,iBAAiB,CAezF"}

package/dist/rls/middleware.js

@@ -0,0 +1,51 @@
+import { runWithTenant } from './context.js';
+import { MissingTenantContextException, } from './types.js';
+/**
+ * Default tenant extractor that checks for `tenantId` in `c.get('user')` or `c.get('auth')`.
+ */
+function defaultTenantExtractor(c) {
+    const user = c.get('user');
+    if (user && typeof user.tenantId === 'string' && user.tenantId.length > 0) {
+        return {
+            tenantId: user.tenantId,
+            userId: typeof user.id === 'string' ? user.id : undefined,
+            role: typeof user.role === 'string' ? user.role : undefined,
+        };
+    }
+    const auth = c.get('auth');
+    if (auth && typeof auth.tenantId === 'string' && auth.tenantId.length > 0) {
+        return {
+            tenantId: auth.tenantId,
+            userId: typeof auth.userId === 'string' ? auth.userId : undefined,
+            role: typeof auth.role === 'string' ? auth.role : undefined,
+        };
+    }
+    return undefined;
+}
+/**
+ * Create Hono middleware that resolves the active TenantContext and binds it to AsyncLocalStorage.
+ *
+ * @param options - Configuration options for tenant extraction and unauthenticated behavior.
+ * @returns Hono middleware handler.
+ *
+ * @example
+ * ```typescript
+ * app.use('*', createRLSMiddleware({
+ *   allowUnauthenticated: true,
+ * }));
+ * ```
+ */
+export function createRLSMiddleware(options = {}) {
+    const { extractTenant = defaultTenantExtractor, allowUnauthenticated = true } = options;
+    return async (c, next) => {
+        const context = await Promise.resolve(extractTenant(c));
+        if (!context?.tenantId) {
+            if (allowUnauthenticated) {
+                return runWithTenant(undefined, () => next());
+            }
+            throw new MissingTenantContextException();
+        }
+        return runWithTenant(context, () => next());
+    };
+}
+//# sourceMappingURL=middleware.js.map

package/dist/rls/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/rls/middleware.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EACL,6BAA6B,GAG9B,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,SAAS,sBAAsB,CAAC,CAAU;IACxC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAwC,CAAC;IAClE,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1E,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;YACzD,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SAC5D,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAwC,CAAC;IAClE,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1E,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACjE,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SAC5D,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAO,GAAyB,EAAE;IACpE,MAAM,EAAE,aAAa,GAAG,sBAAsB,EAAE,oBAAoB,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAExF,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QAExD,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;YACvB,IAAI,oBAAoB,EAAE,CAAC;gBACzB,OAAO,aAAa,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC;YACD,MAAM,IAAI,6BAA6B,EAAE,CAAC;QAC5C,CAAC;QAED,OAAO,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC;AACJ,CAAC"}

package/dist/rls/testing.d.ts

@@ -0,0 +1,24 @@
+import type { TenantContext } from './types.js';
+/**
+ * Run a test or seed function within a specific tenant context.
+ *
+ * @param tenantId - The tenant identifier.
+ * @param fn - The test function.
+ * @returns The resolved return value of `fn`.
+ *
+ * @example
+ * ```typescript
+ * await withTenant('tenant_cwz', async () => {
+ *   const polls = await pollService.list();
+ *   expect(polls).toHaveLength(1);
+ * });
+ * ```
+ */
+export declare function withTenant<T>(tenantId: string, fn: () => T | PromiseLike<T>, options?: Omit<TenantContext, 'tenantId'>): Promise<T>;
+/**
+ * Run a test with explicit bypass context.
+ *
+ * @param fn - The test function.
+ */
+export declare function withBypass<T>(fn: () => T | PromiseLike<T>): Promise<T>;
+//# sourceMappingURL=testing.d.ts.map

package/dist/rls/testing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../../src/rls/testing.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAC1B,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,EAC5B,OAAO,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,GACxC,OAAO,CAAC,CAAC,CAAC,CAQZ;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEtE"}

package/dist/rls/testing.js

@@ -0,0 +1,31 @@
+import { runWithBypass, runWithTenant } from './context.js';
+/**
+ * Run a test or seed function within a specific tenant context.
+ *
+ * @param tenantId - The tenant identifier.
+ * @param fn - The test function.
+ * @returns The resolved return value of `fn`.
+ *
+ * @example
+ * ```typescript
+ * await withTenant('tenant_cwz', async () => {
+ *   const polls = await pollService.list();
+ *   expect(polls).toHaveLength(1);
+ * });
+ * ```
+ */
+export function withTenant(tenantId, fn, options) {
+    return runWithTenant({
+        tenantId,
+        ...options,
+    }, fn);
+}
+/**
+ * Run a test with explicit bypass context.
+ *
+ * @param fn - The test function.
+ */
+export function withBypass(fn) {
+    return runWithBypass(fn);
+}
+//# sourceMappingURL=testing.js.map

package/dist/rls/testing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../../src/rls/testing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG5D;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,UAAU,CACxB,QAAgB,EAChB,EAA4B,EAC5B,OAAyC;IAEzC,OAAO,aAAa,CAClB;QACE,QAAQ;QACR,GAAG,OAAO;KACX,EACD,EAAE,CACH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAI,EAA4B;IACxD,OAAO,aAAa,CAAC,EAAE,CAAC,CAAC;AAC3B,CAAC"}

package/dist/rls/types.d.ts

@@ -0,0 +1,51 @@
+import type { Context } from 'hono';
+import { type DomainExceptionOptions, ForbiddenException } from '../http/errors.js';
+/** Trusted server context; bypass is an explicit permission, not a secret. */
+export interface TenantContext {
+    tenantId?: string;
+    userId?: string;
+    role?: string;
+    bypass?: boolean;
+    metadata?: Record<string, unknown>;
+}
+export interface RLSExtensionOptions {
+    /** PostgreSQL tenant setting. Default: app.current_tenant_id. */
+    sessionVariable?: string;
+    /** Optional bypass setting. Only the value 'true' activates matching policies. */
+    bypassVariable?: string;
+    /** Prisma model names that require context. Default: all models. */
+    models?: readonly string[];
+    /** Defaults to 'throw'. With 'ignore', PostgreSQL remains responsible for denying access. */
+    missingContextBehavior?: 'throw' | 'ignore';
+}
+/** Public Prisma transaction options. */
+export interface RLSTransactionOptions {
+    maxWait?: number;
+    timeout?: number;
+    isolationLevel?: 'ReadUncommitted' | 'ReadCommitted' | 'RepeatableRead' | 'Serializable';
+}
+export type RLSTransactionClient<TClient> = Omit<TClient, '$connect' | '$disconnect' | '$on' | '$transaction' | '$extends' | '$withTenant'>;
+export type TenantContextExtractor = (context: Context) => TenantContext | undefined | Promise<TenantContext | undefined>;
+export interface RLSMiddlewareOptions {
+    extractTenant?: TenantContextExtractor;
+    /** Allow public requests without a tenant. Default: true. */
+    allowUnauthenticated?: boolean;
+}
+export interface GenerateRLSPoliciesOptions {
+    /** SQL table names, respecting Prisma @@map. */
+    models: readonly string[];
+    /** SQL column name, respecting Prisma @map. Default: tenantId. */
+    tenantField?: string;
+    sessionVariable?: string;
+    /** Only specify for tables that explicitly allow bypass. */
+    bypassVariable?: string;
+    /** Enforce RLS for the table owner as well. Default: true. */
+    forceRLS?: boolean;
+}
+export declare class MissingTenantContextException extends ForbiddenException {
+    constructor(modelName?: string, options?: DomainExceptionOptions);
+}
+export declare class RLSConfigurationException extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/rls/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/rls/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,KAAK,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEpF,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kFAAkF;IAClF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,6FAA6F;IAC7F,sBAAsB,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;CAC7C;AAED,yCAAyC;AACzC,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,iBAAiB,GAAG,eAAe,GAAG,gBAAgB,GAAG,cAAc,CAAC;CAC1F;AAED,MAAM,MAAM,oBAAoB,CAAC,OAAO,IAAI,IAAI,CAC9C,OAAO,EACP,UAAU,GAAG,aAAa,GAAG,KAAK,GAAG,cAAc,GAAG,UAAU,GAAG,aAAa,CACjF,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,CACnC,OAAO,EAAE,OAAO,KACb,aAAa,GAAG,SAAS,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;AAEpE,MAAM,WAAW,oBAAoB;IACnC,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC,6DAA6D;IAC7D,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,0BAA0B;IACzC,gDAAgD;IAChD,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,4DAA4D;IAC5D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,qBAAa,6BAA8B,SAAQ,kBAAkB;IACnE,YAAY,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB,EAQ/D;CACF;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF"}

package/dist/rls/types.js

@@ -0,0 +1,16 @@
+import { ForbiddenException } from '../http/errors.js';
+export class MissingTenantContextException extends ForbiddenException {
+    constructor(modelName, options) {
+        super(modelName
+            ? `Missing tenant context for tenant-scoped model "${modelName}". Operation rejected by RLS guard.`
+            : 'Missing tenant context. Operation rejected by RLS guard.', options);
+        this.name = 'MissingTenantContextException';
+    }
+}
+export class RLSConfigurationException extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'RLSConfigurationException';
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/rls/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/rls/types.ts"],"names":[],"mappings":"AACA,OAAO,EAA+B,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAwDpF,MAAM,OAAO,6BAA8B,SAAQ,kBAAkB;IACnE,YAAY,SAAkB,EAAE,OAAgC;QAC9D,KAAK,CACH,SAAS;YACP,CAAC,CAAC,mDAAmD,SAAS,qCAAqC;YACnG,CAAC,CAAC,0DAA0D,EAC9D,OAAO,CACR,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF"}

package/dist/uploads/uploads.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uploads.service.d.ts","sourceRoot":"","sources":["../../src/uploads/uploads.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAe5C,MAAM,WAAW,gBAAgB;IAC/B,2EAA2E;IAC3E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,2CAA2C;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iFAAiF;IACjF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACxC,6CAA6C;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,gDAAgD;IAChD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,2CAA2C;IAC3C,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,4BAA4B;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,gCAAgC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,oBAAoB;IACnC,qCAAqC;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qBAAqB;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAaD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAW;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAE3B,MAAM,EAAE,oBAAoB;IAMxC;;;OAGG;IACG,kBAAkB,CAAC,UAAU,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAgBlF;;;;;;OAMG;IACG,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAsB7D;;;;;;OAMG;IACG,oBAAoB,CACxB,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,yBAAyB,CAAC;IAgBrC;;OAEG;IACG,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASjD;;OAEG;IACH,OAAO,CAAC,YAAY;CAGrB"}
+{"version":3,"file":"uploads.service.d.ts","sourceRoot":"","sources":["../../src/uploads/uploads.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAe5C,MAAM,WAAW,gBAAgB;IAC/B,2EAA2E;IAC3E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,2CAA2C;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iFAAiF;IACjF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACxC,6CAA6C;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,gDAAgD;IAChD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,2CAA2C;IAC3C,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,4BAA4B;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,gCAAgC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,oBAAoB;IACnC,qCAAqC;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qBAAqB;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAaD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAW;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAEvC,YAAY,MAAM,EAAE,oBAAoB,EAIvC;IAED;;;OAGG;IACG,kBAAkB,CAAC,UAAU,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAcjF;IAED;;;;;;OAMG;IACG,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAoB5D;IAED;;;;;;OAMG;IACG,oBAAoB,CACxB,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,yBAAyB,CAAC,CAcpC;IAED;;OAEG;IACG,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOhD;IAED;;OAEG;IACH,OAAO,CAAC,YAAY;CAGrB"}

package/dist/uploads/validators.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../../src/uploads/validators.ts"],"names":[],"mappings":"AAmBA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,iBAAiB,GAAI,mBAAmB,SAAS,MAAM,EAAE,EAAE,eAAe,MAAM,6LAwC1F,CAAC;AAEJ;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,qBAAqB,GAChC,mBAAmB,SAAS,MAAM,EAAE,EACpC,eAAe,MAAM,0IAoBpB,CAAC"}
+{"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../../src/uploads/validators.ts"],"names":[],"mappings":"AAmBA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,iBAAiB,sBAAuB,SAAS,MAAM,EAAE,iBAAiB,MAAM,6LAwC1F,CAAC;AAEJ;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,qBAAqB,sBACb,SAAS,MAAM,EAAE,iBACrB,MAAM,0IAoBpB,CAAC"}

package/dist/utils/serialize-prisma-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"serialize-prisma-types.js","sourceRoot":"","sources":["../../src/utils/serialize-prisma-types.ts"],"names":[],"mappings":"AA+CA;;;GAGG;AACH,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC;;;;;;;;;GASG;AACH,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,4BAA4B;IAC5B,IAAI,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,OAAQ,KAAgC,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC/F,OAAO,KAAK,CAAC;IACf,CAAC;IAED,oEAAoE;IACpE,MAAM,mBAAmB,GACvB,GAAG,IAAI,KAAK;QACZ,GAAG,IAAI,KAAK;QACZ,GAAG,IAAI,KAAK;QACZ,OAAQ,KAAyB,CAAC,CAAC,KAAK,QAAQ;QAChD,OAAQ,KAAyB,CAAC,CAAC,KAAK,QAAQ;QAChD,KAAK,CAAC,OAAO,CAAE,KAAyB,CAAC,CAAC,CAAC,CAAC;IAE9C,qCAAqC;IACrC,MAAM,qBAAqB,GACzB,aAAa,IAAI,KAAK;QACtB,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,KAAK,CAAC,WAAW,KAAK,IAAI;QAC1B,MAAM,IAAI,KAAK,CAAC,WAAW;QAC1B,KAAK,CAAC,WAAkC,CAAC,IAAI,KAAK,SAAS,CAAC;IAE/D,iEAAiE;IACjE,OAAO,mBAAmB,IAAI,qBAAqB,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,kBAAkB,GAAoB,CAAC,KAAc,EAAE,EAAE;IAC7D,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC,CAAC,kCAAkC;AACtD,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAwB;IAChD,YAAY,EAAE,CAAC,kBAAkB,CAAC;CACnC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAO,EACP,SAA8B,aAAa,EAC3C,MAAM,GAAG,CAAC,EACV,aAAa,IAAI,OAAO,EAAU;IAElC,2DAA2D;IAC3D,IAAI,MAAM,GAAG,uBAAuB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,gCAAgC,uBAAuB,cAAc;YACnE,qEAAqE,CACxE,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,IAA0B,CAAC;IACpC,CAAC;IAED,0EAA0E;IAC1E,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,oDAAoD;YAClD,gEAAgE,CACnE,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,WAAiC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,kDAAkD;QAClD,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/B,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,EAAE,UAAU,CAAC,CACrC,CAAC;QACxB,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,kCAAkC;QAC3D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iBAAiB;IACjB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,CAAC,GAAG,CAAC,GAAG,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;QAC5E,CAAC;QACD,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,kCAAkC;QAC3D,OAAO,MAA4B,CAAC;IACtC,CAAC;IAED,0BAA0B;IAC1B,OAAO,IAA0B,CAAC;AACpC,CAAC"}
+{"version":3,"file":"serialize-prisma-types.js","sourceRoot":"","sources":["../../src/utils/serialize-prisma-types.ts"],"names":[],"mappings":"AA+CA;;;GAGG;AACH,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC;;;;;;;;;GASG;AACH,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,4BAA4B;IAC5B,IAAI,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,OAAQ,KAAgC,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC/F,OAAO,KAAK,CAAC;IACf,CAAC;IAED,oEAAoE;IACpE,MAAM,mBAAmB,GACvB,GAAG,IAAI,KAAK;QACZ,GAAG,IAAI,KAAK;QACZ,GAAG,IAAI,KAAK;QACZ,OAAQ,KAAyB,CAAC,CAAC,KAAK,QAAQ;QAChD,OAAQ,KAAyB,CAAC,CAAC,KAAK,QAAQ;QAChD,KAAK,CAAC,OAAO,CAAE,KAAyB,CAAC,CAAC,CAAC,CAAC;IAE9C,qCAAqC;IACrC,MAAM,qBAAqB,GACzB,aAAa,IAAI,KAAK;QACtB,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,KAAK,CAAC,WAAW,KAAK,IAAI;QAC1B,MAAM,IAAI,KAAK,CAAC,WAAW;QAC1B,KAAK,CAAC,WAAkC,CAAC,IAAI,KAAK,SAAS,CAAC;IAE/D,iEAAiE;IACjE,OAAO,mBAAmB,IAAI,qBAAqB,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,kBAAkB,GAAoB,CAAC,KAAc,EAAE,EAAE;IAC7D,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC,CAAC,kCAAkC;AACtD,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAwB;IAChD,YAAY,EAAE,CAAC,kBAAkB,CAAC;CACnC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAO,EACP,MAAM,GAAwB,aAAa,EAC3C,MAAM,GAAG,CAAC,EACV,UAAU,GAAG,IAAI,OAAO,EAAU;IAElC,2DAA2D;IAC3D,IAAI,MAAM,GAAG,uBAAuB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,gCAAgC,uBAAuB,cAAc;YACnE,qEAAqE,CACxE,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,IAA0B,CAAC;IACpC,CAAC;IAED,0EAA0E;IAC1E,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,oDAAoD;YAClD,gEAAgE,CACnE,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,WAAiC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,kDAAkD;QAClD,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/B,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,EAAE,UAAU,CAAC,CACrC,CAAC;QACxB,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,kCAAkC;QAC3D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iBAAiB;IACjB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,CAAC,GAAG,CAAC,GAAG,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;QAC5E,CAAC;QACD,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,kCAAkC;QAC3D,OAAO,MAA4B,CAAC;IACtC,CAAC;IAED,0BAA0B;IAC1B,OAAO,IAA0B,CAAC;AACpC,CAAC"}