pipework 0.1.0

package/dist/temporal/get-current.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-current.d.ts","sourceRoot":"","sources":["../../src/temporal/get-current.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAGnE,wBAAsB,UAAU,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAsB3F"}

package/dist/temporal/get-current.js

@@ -0,0 +1,18 @@
+import { sql } from '../db/sql.js';
+import { getTableName } from '../db/generated/drizzle-orm/introspection.js';
+import { TemporalIntegrityError } from './errors.js';
+export async function getCurrent(options) {
+    const { tx, where } = options;
+    const table = typeof options.table === 'string' ? options.table : getTableName(options.table);
+    const rows = await tx.execute(sql `SELECT id::text, version FROM ${sql.identifier(table)} WHERE ${where} AND effective_to IS NULL`);
+    if (rows.length === 0) {
+        return null;
+    }
+    if (rows.length > 1) {
+        throw new TemporalIntegrityError(`Multiple open versions detected in "${table}" — data integrity violation. ` +
+            `Expected at most one row with effective_to IS NULL, found ${rows.length}.`, { table, count: rows.length });
+    }
+    const row = rows[0];
+    return { id: row['id'], version: row['version'] };
+}
+//# sourceMappingURL=get-current.js.map

package/dist/temporal/get-current.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-current.js","sourceRoot":"","sources":["../../src/temporal/get-current.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,8CAA8C,CAAA;AAE3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAEpD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAwB;IACvD,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;IAC7B,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAE7F,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAC3B,GAAG,CAAA,iCAAiC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,KAAK,2BAA2B,CACpG,CAAA;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,sBAAsB,CAC9B,uCAAuC,KAAK,gCAAgC;YAC5E,6DAA6D,IAAI,CAAC,MAAM,GAAG,EAC3E,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAC9B,CAAA;IACH,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAA;IACpB,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAW,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,CAAW,EAAE,CAAA;AACvE,CAAC"}

package/dist/temporal/index.d.ts

@@ -0,0 +1,8 @@
+export { temporalColumns } from './columns.js';
+export { atTime, current, between } from './query.js';
+export { revise } from './revise.js';
+export { close } from './close.js';
+export { getCurrent } from './get-current.js';
+export { TemporalIntegrityError } from './errors.js';
+export type { TemporalOptions, ReviseOptions, ReviseResult, GetCurrentResult } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/temporal/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/temporal/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA"}

package/dist/temporal/index.js

@@ -0,0 +1,7 @@
+export { temporalColumns } from './columns.js';
+export { atTime, current, between } from './query.js';
+export { revise } from './revise.js';
+export { close } from './close.js';
+export { getCurrent } from './get-current.js';
+export { TemporalIntegrityError } from './errors.js';
+//# sourceMappingURL=index.js.map

package/dist/temporal/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/temporal/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA"}

package/dist/temporal/namespace.d.ts

@@ -0,0 +1,16 @@
+import { temporalColumns } from './columns.js';
+import { revise } from './revise.js';
+import { close } from './close.js';
+import { getCurrent } from './get-current.js';
+import { atTime, between } from './query.js';
+import { TemporalIntegrityError } from './errors.js';
+export declare const temporal: {
+    columns: typeof temporalColumns;
+    revise: typeof revise;
+    close: typeof close;
+    current: typeof getCurrent;
+    atTime: typeof atTime;
+    between: typeof between;
+    TemporalIntegrityError: typeof TemporalIntegrityError;
+};
+//# sourceMappingURL=namespace.d.ts.map

package/dist/temporal/namespace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.d.ts","sourceRoot":"","sources":["../../src/temporal/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAEpD,eAAO,MAAM,QAAQ;;;;;;;;CAQpB,CAAA"}

package/dist/temporal/namespace.js

@@ -0,0 +1,16 @@
+import { temporalColumns } from './columns.js';
+import { revise } from './revise.js';
+import { close } from './close.js';
+import { getCurrent } from './get-current.js';
+import { atTime, between } from './query.js';
+import { TemporalIntegrityError } from './errors.js';
+export const temporal = {
+    columns: temporalColumns,
+    revise,
+    close,
+    current: getCurrent,
+    atTime,
+    between,
+    TemporalIntegrityError,
+};
+//# sourceMappingURL=namespace.js.map

package/dist/temporal/namespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.js","sourceRoot":"","sources":["../../src/temporal/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAEpD,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,OAAO,EAAE,eAAe;IACxB,MAAM;IACN,KAAK;IACL,OAAO,EAAE,UAAU;IACnB,MAAM;IACN,OAAO;IACP,sBAAsB;CACvB,CAAA"}

package/dist/temporal/query.d.ts

@@ -0,0 +1,10 @@
+import type { SQL, Column } from '../db/types.js';
+interface HasTemporalColumns {
+    effectiveFrom: Column;
+    effectiveTo: Column;
+}
+export declare function atTime<T extends HasTemporalColumns>(table: T, asOf: Date): SQL;
+export declare function current<T extends HasTemporalColumns>(table: T): SQL;
+export declare function between<T extends HasTemporalColumns>(table: T, from: Date, to: Date): SQL;
+export {};
+//# sourceMappingURL=query.d.ts.map

package/dist/temporal/query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../src/temporal/query.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAEjD,UAAU,kBAAkB;IAC1B,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,wBAAgB,MAAM,CAAC,CAAC,SAAS,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,GAAG,CAK9E;AAED,wBAAgB,OAAO,CAAC,CAAC,SAAS,kBAAkB,EAAE,KAAK,EAAE,CAAC,GAAG,GAAG,CAEnE;AAED,wBAAgB,OAAO,CAAC,CAAC,SAAS,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,GAAG,GAAG,CAKzF"}

package/dist/temporal/query.js

@@ -0,0 +1,11 @@
+import { and, lte, gt, isNull, or } from '../db/generated/drizzle-orm/operator.js';
+export function atTime(table, asOf) {
+    return and(lte(table.effectiveFrom, asOf), or(isNull(table.effectiveTo), gt(table.effectiveTo, asOf)));
+}
+export function current(table) {
+    return isNull(table.effectiveTo);
+}
+export function between(table, from, to) {
+    return and(lte(table.effectiveFrom, to), or(isNull(table.effectiveTo), gt(table.effectiveTo, from)));
+}
+//# sourceMappingURL=query.js.map

package/dist/temporal/query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.js","sourceRoot":"","sources":["../../src/temporal/query.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,yCAAyC,CAAA;AAQlF,MAAM,UAAU,MAAM,CAA+B,KAAQ,EAAE,IAAU;IACvE,OAAO,GAAG,CACR,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,EAC9B,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAC1D,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,OAAO,CAA+B,KAAQ;IAC5D,OAAO,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;AAClC,CAAC;AAED,MAAM,UAAU,OAAO,CAA+B,KAAQ,EAAE,IAAU,EAAE,EAAQ;IAClF,OAAO,GAAG,CACR,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC,EAC5B,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAC1D,CAAA;AACJ,CAAC"}

package/dist/temporal/revise.d.ts

@@ -0,0 +1,3 @@
+import type { ReviseOptions, ReviseResult } from './types.js';
+export declare function revise(options: ReviseOptions): Promise<ReviseResult>;
+//# sourceMappingURL=revise.d.ts.map

package/dist/temporal/revise.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revise.d.ts","sourceRoot":"","sources":["../../src/temporal/revise.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAI7D,wBAAsB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAoE1E"}

package/dist/temporal/revise.js

@@ -0,0 +1,52 @@
+import { sql } from '../db/sql.js';
+import { getTableName } from '../db/generated/drizzle-orm/introspection.js';
+import { TemporalIntegrityError } from './errors.js';
+import { assertValidIdentifier, quoteIdentifier } from '../db/identifiers.js';
+export async function revise(options) {
+    const { tx, where, data, userId } = options;
+    const table = typeof options.table === 'string' ? options.table : getTableName(options.table);
+    const current = await tx.execute(sql `SELECT id, version FROM ${sql.identifier(table)} WHERE ${where} AND effective_to IS NULL FOR UPDATE`);
+    if (current.length === 0) {
+        throw new TemporalIntegrityError(`No current version found. Cannot revise a record in "${table}" — ` +
+            `ensure the entity exists and has an open version (effective_to IS NULL).`, { table });
+    }
+    if (current.length > 1) {
+        throw new TemporalIntegrityError(`Multiple open versions detected in "${table}" — data integrity violation. ` +
+            `Expected exactly one row with effective_to IS NULL, found ${current.length}.`, { table, count: current.length });
+    }
+    const currentRow = current[0];
+    const currentId = currentRow['id'];
+    const currentVersion = currentRow['version'];
+    await tx.execute(sql `UPDATE ${sql.identifier(table)} SET effective_to = now() WHERE id = ${currentId}::uuid`);
+    const columns = Object.keys(data);
+    const values = Object.values(data);
+    for (const col of columns) {
+        assertValidIdentifier(col, 'column');
+    }
+    const allColumns = [...columns, 'effective_from', 'effective_to', 'version', 'created_by'];
+    const colListRaw = allColumns.map((c) => quoteIdentifier(c, 'column')).join(', ');
+    const serializedValues = values.map((v) => {
+        if (v === null || v === undefined)
+            return null;
+        if (typeof v === 'object')
+            return JSON.stringify(v);
+        return v;
+    });
+    const valueParts = [
+        ...serializedValues.map((v) => sql `${v ?? null}`),
+        sql `now()`,
+        sql `NULL`,
+        sql `${currentVersion + 1}`,
+        sql `${userId ?? null}`,
+    ];
+    const valuesList = valueParts.reduce((acc, part, i) => {
+        if (i === 0)
+            return part;
+        return sql `${acc}, ${part}`;
+    });
+    assertValidIdentifier(table, 'table');
+    const result = await tx.execute(sql `INSERT INTO ${sql.raw(quoteIdentifier(table, 'table'))} (${sql.raw(colListRaw)}) VALUES (${valuesList}) RETURNING id::text, version`);
+    const row = result[0];
+    return { id: row['id'], version: row['version'] };
+}
+//# sourceMappingURL=revise.js.map

package/dist/temporal/revise.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revise.js","sourceRoot":"","sources":["../../src/temporal/revise.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,8CAA8C,CAAA;AAE3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAE7E,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,OAAsB;IACjD,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAC3C,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAE7F,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAC9B,GAAG,CAAA,2BAA2B,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,KAAK,sCAAsC,CACzG,CAAA;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,sBAAsB,CAC9B,wDAAwD,KAAK,MAAM;YACnE,0EAA0E,EAC1E,EAAE,KAAK,EAAE,CACV,CAAA;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,sBAAsB,CAC9B,uCAAuC,KAAK,gCAAgC;YAC5E,6DAA6D,OAAO,CAAC,MAAM,GAAG,EAC9E,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CACjC,CAAA;IACH,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAE,CAAA;IAC9B,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAW,CAAA;IAC5C,MAAM,cAAc,GAAG,UAAU,CAAC,SAAS,CAAW,CAAA;IAEtD,MAAM,EAAE,CAAC,OAAO,CACd,GAAG,CAAA,UAAU,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,wCAAwC,SAAS,QAAQ,CAC5F,CAAA;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAElC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,qBAAqB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IACtC,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;IAC1F,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEjF,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACxC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA;QAC9C,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;QACnD,OAAO,CAAC,CAAA;IACV,CAAC,CAAC,CAAA;IAEF,MAAM,UAAU,GAAG;QACjB,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAA,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACjD,GAAG,CAAA,OAAO;QACV,GAAG,CAAA,MAAM;QACT,GAAG,CAAA,GAAG,cAAc,GAAG,CAAC,EAAE;QAC1B,GAAG,CAAA,GAAG,MAAM,IAAI,IAAI,EAAE;KACvB,CAAA;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE;QACpD,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QACxB,OAAO,GAAG,CAAA,GAAG,GAAG,KAAK,IAAI,EAAE,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IACrC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAC7B,GAAG,CAAA,eAAe,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,UAAU,+BAA+B,CACzI,CAAA;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAE,CAAA;IACtB,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAW,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,CAAW,EAAE,CAAA;AACvE,CAAC"}

package/dist/temporal/types.d.ts

@@ -0,0 +1,19 @@
+import type { DB, SQL, Table } from '../db/types.js';
+export interface TemporalOptions {
+    readonly tx: DB;
+    readonly table: string | Table;
+    readonly where: SQL;
+}
+export interface ReviseOptions extends TemporalOptions {
+    readonly data: Record<string, unknown>;
+    readonly userId?: string;
+}
+export interface ReviseResult {
+    readonly id: string;
+    readonly version: number;
+}
+export interface GetCurrentResult {
+    readonly id: string;
+    readonly version: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/temporal/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/temporal/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAA;AAEpD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAA;IACf,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,CAAA;IAC9B,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAA;CACpB;AAED,MAAM,WAAW,aAAc,SAAQ,eAAe;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB"}

package/dist/temporal/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/temporal/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/temporal/types.ts"],"names":[],"mappings":""}

package/dist/tenant/extract.d.ts

@@ -0,0 +1,6 @@
+import type { TenantConfig } from './types.js';
+export interface TenantExtractionResult {
+    readonly tenant: string | null;
+}
+export declare function extractTenant(auth: unknown, config: TenantConfig): TenantExtractionResult;
+//# sourceMappingURL=extract.d.ts.map

package/dist/tenant/extract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.d.ts","sourceRoot":"","sources":["../../src/tenant/extract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAI9C,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B;AAED,wBAAgB,aAAa,CAC3B,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,YAAY,GACnB,sBAAsB,CAqBxB"}

package/dist/tenant/extract.js

@@ -0,0 +1,18 @@
+import { validateTenantId } from './validate.js';
+import { UnauthorizedError } from '../errors/index.js';
+export function extractTenant(auth, config) {
+    const raw = config.extract(auth);
+    if (raw === null || raw === '') {
+        if (config.required !== false) {
+            throw new UnauthorizedError('Tenant context required but not present. Ensure auth strategy returns a tenantId.');
+        }
+        return { tenant: null };
+    }
+    const validator = config.validate ?? validateTenantId;
+    if (!validator(raw)) {
+        throw new UnauthorizedError(`Invalid tenant identifier: "${raw.slice(0, 40)}${raw.length > 40 ? '...' : ''}". ` +
+            `Tenant IDs must be valid UUIDs (or pass your custom validate function).`);
+    }
+    return { tenant: raw };
+}
+//# sourceMappingURL=extract.js.map

package/dist/tenant/extract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.js","sourceRoot":"","sources":["../../src/tenant/extract.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAMtD,MAAM,UAAU,aAAa,CAC3B,IAAa,EACb,MAAoB;IAEpB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QAC/B,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC9B,MAAM,IAAI,iBAAiB,CACzB,mFAAmF,CACpF,CAAA;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IACzB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,IAAI,gBAAgB,CAAA;IACrD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,iBAAiB,CACzB,+BAA+B,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK;YACnF,yEAAyE,CAC1E,CAAA;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;AACxB,CAAC"}

package/dist/tenant/index.d.ts

@@ -0,0 +1,6 @@
+export type { TenantConfig, TenantContext } from './types.js';
+export { validateTenantId, validateSessionVarName, validateSessionVarValue } from './validate.js';
+export { propagateTenantLocals } from './propagate.js';
+export { extractTenant, type TenantExtractionResult } from './extract.js';
+export { tenantIsolationPolicy, enableTenantRls, verifyTenantContext } from './rls.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/tenant/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tenant/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AACjG,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AACtD,OAAO,EAAE,aAAa,EAAE,KAAK,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACzE,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA"}

package/dist/tenant/index.js

@@ -0,0 +1,5 @@
+export { validateTenantId, validateSessionVarName, validateSessionVarValue } from './validate.js';
+export { propagateTenantLocals } from './propagate.js';
+export { extractTenant } from './extract.js';
+export { tenantIsolationPolicy, enableTenantRls, verifyTenantContext } from './rls.js';
+//# sourceMappingURL=index.js.map

package/dist/tenant/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tenant/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AACjG,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AACtD,OAAO,EAAE,aAAa,EAA+B,MAAM,cAAc,CAAA;AACzE,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA"}

package/dist/tenant/namespace.d.ts

@@ -0,0 +1,13 @@
+import { validateTenantId } from './validate.js';
+import { enableTenantRls, tenantIsolationPolicy, verifyTenantContext } from './rls.js';
+import { propagateTenantLocals } from './propagate.js';
+import { extractTenant } from './extract.js';
+export declare const tenant: {
+    validate: typeof validateTenantId;
+    rls: typeof enableTenantRls;
+    policy: typeof tenantIsolationPolicy;
+    verify: typeof verifyTenantContext;
+    propagate: typeof propagateTenantLocals;
+    extract: typeof extractTenant;
+};
+//# sourceMappingURL=namespace.d.ts.map

package/dist/tenant/namespace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.d.ts","sourceRoot":"","sources":["../../src/tenant/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AACtF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAE5C,eAAO,MAAM,MAAM;;;;;;;CAOlB,CAAA"}

package/dist/tenant/namespace.js

@@ -0,0 +1,13 @@
+import { validateTenantId } from './validate.js';
+import { enableTenantRls, tenantIsolationPolicy, verifyTenantContext } from './rls.js';
+import { propagateTenantLocals } from './propagate.js';
+import { extractTenant } from './extract.js';
+export const tenant = {
+    validate: validateTenantId,
+    rls: enableTenantRls,
+    policy: tenantIsolationPolicy,
+    verify: verifyTenantContext,
+    propagate: propagateTenantLocals,
+    extract: extractTenant,
+};
+//# sourceMappingURL=namespace.js.map

package/dist/tenant/namespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.js","sourceRoot":"","sources":["../../src/tenant/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AACtF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAE5C,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,QAAQ,EAAE,gBAAgB;IAC1B,GAAG,EAAE,eAAe;IACpB,MAAM,EAAE,qBAAqB;IAC7B,MAAM,EAAE,mBAAmB;IAC3B,SAAS,EAAE,qBAAqB;IAChC,OAAO,EAAE,aAAa;CACvB,CAAA"}

package/dist/tenant/propagate.d.ts

@@ -0,0 +1,4 @@
+import type { DB } from '../db/index.js';
+import type { TenantConfig, TenantContext } from './types.js';
+export declare function propagateTenantLocals(tx: DB, config: TenantConfig, ctx: TenantContext): Promise<void>;
+//# sourceMappingURL=propagate.d.ts.map

package/dist/tenant/propagate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"propagate.d.ts","sourceRoot":"","sources":["../../src/tenant/propagate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAA;AACxC,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAG7D,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,EAAE,EACN,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,IAAI,CAAC,CAUf"}

package/dist/tenant/propagate.js

@@ -0,0 +1,15 @@
+import { sql } from '../db/sql.js';
+import { validateSessionVarValue } from './validate.js';
+export async function propagateTenantLocals(tx, config, ctx) {
+    const vars = config.sessionVars;
+    if (!vars)
+        return;
+    for (const [name, resolver] of Object.entries(vars)) {
+        const value = resolver(ctx);
+        if (value === '')
+            continue;
+        validateSessionVarValue(value);
+        await tx.execute(sql `SELECT set_config(${name}, ${value}, true)`);
+    }
+}
+//# sourceMappingURL=propagate.js.map

package/dist/tenant/propagate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"propagate.js","sourceRoot":"","sources":["../../src/tenant/propagate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAGlC,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAEvD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,EAAM,EACN,MAAoB,EACpB,GAAkB;IAElB,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAA;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAM;IAEjB,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,KAAK,KAAK,EAAE;YAAE,SAAQ;QAC1B,uBAAuB,CAAC,KAAK,CAAC,CAAA;QAC9B,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,qBAAqB,IAAI,KAAK,KAAK,SAAS,CAAC,CAAA;IACnE,CAAC;AACH,CAAC"}

package/dist/tenant/rls.d.ts

@@ -0,0 +1,5 @@
+import type { DB } from '../db/index.js';
+export declare function tenantIsolationPolicy(table: string, column?: string): string;
+export declare function enableTenantRls(db: DB, table: string, column?: string): Promise<void>;
+export declare function verifyTenantContext(db: DB, expectedTenant: string | null): Promise<void>;
+//# sourceMappingURL=rls.d.ts.map

package/dist/tenant/rls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rls.d.ts","sourceRoot":"","sources":["../../src/tenant/rls.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAA;AAGxC,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,GAAE,MAAoB,GAAG,MAAM,CAUzF;AAED,wBAAsB,eAAe,CACnC,EAAE,EAAE,EAAE,EACN,KAAK,EAAE,MAAM,EACb,MAAM,GAAE,MAAoB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAaf;AAED,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,EAAE,EACN,cAAc,EAAE,MAAM,GAAG,IAAI,GAC5B,OAAO,CAAC,IAAI,CAAC,CAcf"}

package/dist/tenant/rls.js

@@ -0,0 +1,33 @@
+import { sql } from '../db/sql.js';
+import { quoteIdentifier } from '../db/identifiers.js';
+export function tenantIsolationPolicy(table, column = 'tenant_id') {
+    const t = quoteIdentifier(table, 'table');
+    const c = quoteIdentifier(column, 'column');
+    const policyName = `pipework_tenant_isolation_${table.replace(/[^a-zA-Z0-9_]/g, '_')}`;
+    return [
+        `ALTER TABLE ${t} ENABLE ROW LEVEL SECURITY`,
+        `ALTER TABLE ${t} FORCE ROW LEVEL SECURITY`,
+        `CREATE POLICY ${quoteIdentifier(policyName, 'policy')} ON ${t} USING (${c} = current_setting('pipework.tenant_id', true))`,
+    ].join(';\n');
+}
+export async function enableTenantRls(db, table, column = 'tenant_id') {
+    const t = quoteIdentifier(table, 'table');
+    const c = quoteIdentifier(column, 'column');
+    const policyName = quoteIdentifier(`pipework_tenant_isolation_${table.replace(/[^a-zA-Z0-9_]/g, '_')}`, 'policy');
+    await db.execute(sql.raw(`ALTER TABLE ${t} ENABLE ROW LEVEL SECURITY`));
+    await db.execute(sql.raw(`ALTER TABLE ${t} FORCE ROW LEVEL SECURITY`));
+    await db.execute(sql.raw(`CREATE POLICY ${policyName} ON ${t} USING (${c} = current_setting('pipework.tenant_id', true))`));
+}
+export async function verifyTenantContext(db, expectedTenant) {
+    const result = await db.execute(sql `SELECT current_setting('pipework.tenant_id', true) AS tenant_id`);
+    const raw = result[0]?.tenant_id ?? null;
+    const pgTenant = raw === '' ? null : raw;
+    if (pgTenant !== expectedTenant) {
+        throw new Error(`[pipework] Tenant context mismatch between application and database.\n\n` +
+            `  Application context tenant: ${expectedTenant ?? '(null)'}\n` +
+            `  PostgreSQL session tenant:  ${pgTenant ?? '(null)'}\n\n` +
+            `  This indicates an AsyncLocalStorage context integrity failure.\n` +
+            `  The request has been aborted to prevent cross-tenant data access.\n`);
+    }
+}
+//# sourceMappingURL=rls.js.map

package/dist/tenant/rls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rls.js","sourceRoot":"","sources":["../../src/tenant/rls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAElC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAEtD,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,SAAiB,WAAW;IAC/E,MAAM,CAAC,GAAG,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IACzC,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IAC3C,MAAM,UAAU,GAAG,6BAA6B,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,EAAE,CAAA;IAEtF,OAAO;QACL,eAAe,CAAC,4BAA4B;QAC5C,eAAe,CAAC,2BAA2B;QAC3C,iBAAiB,eAAe,CAAC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,iDAAiD;KAC5H,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAM,EACN,KAAa,EACb,SAAiB,WAAW;IAE5B,MAAM,CAAC,GAAG,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IACzC,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IAC3C,MAAM,UAAU,GAAG,eAAe,CAChC,6BAA6B,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,EAAE,EACnE,QAAQ,CACT,CAAA;IAED,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,4BAA4B,CAAC,CAAC,CAAA;IACvE,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,2BAA2B,CAAC,CAAC,CAAA;IACtE,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CACtB,iBAAiB,UAAU,OAAO,CAAC,WAAW,CAAC,iDAAiD,CACjG,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,EAAM,EACN,cAA6B;IAE7B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,iEAAiE,CAAC,CAAA;IACrG,MAAM,GAAG,GAAI,MAAyD,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,IAAI,CAAA;IAC5F,MAAM,QAAQ,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAA;IAExC,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,0EAA0E;YAC1E,iCAAiC,cAAc,IAAI,QAAQ,IAAI;YAC/D,iCAAiC,QAAQ,IAAI,QAAQ,MAAM;YAC3D,oEAAoE;YACpE,uEAAuE,CACxE,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/tenant/types.d.ts

@@ -0,0 +1,12 @@
+export interface TenantConfig {
+    readonly extract: (auth: unknown) => string | null;
+    readonly sessionVars?: Record<string, (ctx: TenantContext) => string>;
+    readonly validate?: (tenantId: string) => boolean;
+    readonly required?: boolean;
+}
+export interface TenantContext {
+    readonly tenant: string;
+    readonly requestId: string;
+    readonly userId: string | null;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/tenant/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/tenant/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,CAAA;IAClD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,MAAM,CAAC,CAAA;IACrE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAA;IACjD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B"}

package/dist/tenant/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/tenant/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/tenant/types.ts"],"names":[],"mappings":""}

package/dist/tenant/validate.d.ts

@@ -0,0 +1,4 @@
+export declare function validateTenantId(value: string): boolean;
+export declare function validateSessionVarName(name: string): void;
+export declare function validateSessionVarValue(value: string): void;
+//# sourceMappingURL=validate.d.ts.map

package/dist/tenant/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/tenant/validate.ts"],"names":[],"mappings":"AAIA,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAQzD;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAQ3D"}

package/dist/tenant/validate.js

@@ -0,0 +1,20 @@
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const SAFE_VAR_NAME = /^[a-z][a-z0-9_.]*$/;
+export function validateTenantId(value) {
+    return UUID_PATTERN.test(value);
+}
+export function validateSessionVarName(name) {
+    if (!SAFE_VAR_NAME.test(name)) {
+        throw new Error(`[pipework] Invalid session variable name: "${name}". ` +
+            `Variable names must match /^[a-z][a-z0-9_.]*$/. ` +
+            `This prevents SQL injection in SET LOCAL statements.`);
+    }
+}
+export function validateSessionVarValue(value) {
+    if (/[;'"\n\r]/.test(value)) {
+        throw new Error(`[pipework] Unsafe session variable value rejected. ` +
+            `Values must not contain semicolons, quotes, or newlines. ` +
+            `Received: "${value.slice(0, 40)}${value.length > 40 ? '...' : ''}"`);
+    }
+}
+//# sourceMappingURL=validate.js.map

package/dist/tenant/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/tenant/validate.ts"],"names":[],"mappings":"AAAA,MAAM,YAAY,GAAG,iEAAiE,CAAA;AAEtF,MAAM,aAAa,GAAG,oBAAoB,CAAA;AAE1C,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,8CAA8C,IAAI,KAAK;YACvD,kDAAkD;YAClD,sDAAsD,CACvD,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,qDAAqD;YACrD,2DAA2D;YAC3D,cAAc,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CACrE,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/test/auth.d.ts

@@ -0,0 +1,7 @@
+import type { BaseAuth } from '../auth/types.js';
+export declare function mockAuth<TAuth extends BaseAuth>(overrides?: Partial<TAuth> & {
+    userId?: string;
+    tenantId?: string;
+}): TAuth;
+export declare function asTenant<TAuth extends BaseAuth>(tenantId: string, overrides?: Partial<TAuth>): TAuth;
+//# sourceMappingURL=auth.d.ts.map

package/dist/test/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/test/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAEhD,wBAAgB,QAAQ,CAAC,KAAK,SAAS,QAAQ,EAAE,SAAS,GAAE,OAAO,CAAC,KAAK,CAAC,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,KAAK,CAM/H;AAED,wBAAgB,QAAQ,CAAC,KAAK,SAAS,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,GAAE,OAAO,CAAC,KAAK,CAAM,GAAG,KAAK,CAExG"}

package/dist/test/auth.js

@@ -0,0 +1,11 @@
+export function mockAuth(overrides = {}) {
+    return {
+        userId: 'test-user',
+        tenantId: 'test-tenant',
+        ...overrides,
+    };
+}
+export function asTenant(tenantId, overrides = {}) {
+    return mockAuth({ tenantId, ...overrides });
+}
+//# sourceMappingURL=auth.js.map

package/dist/test/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/test/auth.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,QAAQ,CAAyB,YAAqE,EAAE;IACtH,OAAO;QACL,MAAM,EAAE,WAAW;QACnB,QAAQ,EAAE,aAAa;QACvB,GAAG,SAAS;KACJ,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAyB,QAAgB,EAAE,YAA4B,EAAE;IAC/F,OAAO,QAAQ,CAAQ,EAAE,QAAQ,EAAE,GAAG,SAAS,EAA6D,CAAC,CAAA;AAC/G,CAAC"}

package/dist/test/context.d.ts

@@ -0,0 +1,10 @@
+import type { Manifold } from '../pipework.js';
+export interface WithContextOptions {
+    instance: Manifold;
+    auth?: unknown;
+    tenant?: string | null;
+    requestId?: string;
+}
+export declare function withContext<T>(options: WithContextOptions, fn: () => T): T;
+export declare function withJobContext<T>(options: WithContextOptions, fn: () => T): T;
+//# sourceMappingURL=context.d.ts.map

package/dist/test/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/test/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAI9C,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,QAAQ,CAAA;IAClB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAe1E;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAQ7E"}

package/dist/test/context.js

@@ -0,0 +1,26 @@
+import { runInContext } from '../context/store.js';
+import { createRequestContext, createJobContext } from '../context/index.js';
+export function withContext(options, fn) {
+    const ctx = createRequestContext({
+        instance: options.instance,
+        auth: options.auth ?? null,
+        tenant: options.tenant ?? null,
+        metadata: {
+            method: 'TEST',
+            path: '/test',
+            startedAt: Date.now(),
+            traceId: options.requestId ?? 'test-trace',
+            sessionId: null,
+        },
+    });
+    return runInContext(ctx, fn);
+}
+export function withJobContext(options, fn) {
+    const ctx = createJobContext({
+        instance: options.instance,
+        auth: options.auth ?? null,
+        tenant: options.tenant ?? null,
+    });
+    return runInContext(ctx, fn);
+}
+//# sourceMappingURL=context.js.map

package/dist/test/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/test/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAS5E,MAAM,UAAU,WAAW,CAAI,OAA2B,EAAE,EAAW;IACrE,MAAM,GAAG,GAAG,oBAAoB,CAAC;QAC/B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;QAC9B,QAAQ,EAAE;YACR,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,OAAO,EAAE,OAAO,CAAC,SAAS,IAAI,YAAY;YAC1C,SAAS,EAAE,IAAI;SAChB;KACF,CAAC,CAAA;IAEF,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AAC9B,CAAC;AAED,MAAM,UAAU,cAAc,CAAI,OAA2B,EAAE,EAAW;IACxE,MAAM,GAAG,GAAG,gBAAgB,CAAC;QAC3B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;KAC/B,CAAC,CAAA;IAEF,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AAC9B,CAAC"}

package/dist/test/index.d.ts

@@ -0,0 +1,6 @@
+export { setupTestDatabases, teardownTestDatabases, getTestDatabase, getTestDatabases, type TestDatabase } from './setup.js';
+export { beginTestIsolation, endTestIsolation, type TestContext, type TestDatabaseConnections } from './plugin.js';
+export { setupPipeworkTests, useTestDb, useTestInstance, withFlow } from './vitest.js';
+export { mockAuth, asTenant } from './auth.js';
+export { withContext, withJobContext, type WithContextOptions } from './context.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/test/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/test/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,eAAe,EAAE,gBAAgB,EAAE,KAAK,YAAY,EAAE,MAAM,YAAY,CAAA;AAC5H,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,KAAK,WAAW,EAAE,KAAK,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAClH,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtF,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAA"}

package/dist/test/index.js

@@ -0,0 +1,6 @@
+export { setupTestDatabases, teardownTestDatabases, getTestDatabase, getTestDatabases } from './setup.js';
+export { beginTestIsolation, endTestIsolation } from './plugin.js';
+export { setupPipeworkTests, useTestDb, useTestInstance, withFlow } from './vitest.js';
+export { mockAuth, asTenant } from './auth.js';
+export { withContext, withJobContext } from './context.js';
+//# sourceMappingURL=index.js.map

package/dist/test/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/test/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,eAAe,EAAE,gBAAgB,EAAqB,MAAM,YAAY,CAAA;AAC5H,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAkD,MAAM,aAAa,CAAA;AAClH,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtF,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,cAAc,EAA2B,MAAM,cAAc,CAAA"}

package/dist/test/plugin.d.ts

@@ -0,0 +1,16 @@
+import { type PostgresJsDatabase } from 'drizzle-orm/postgres-js';
+import type { Manifold } from '../pipework.js';
+import { runInContext } from '../context/store.js';
+import type { Flow } from '../context/types.js';
+export interface TestDatabaseConnections {
+    [name: string]: PostgresJsDatabase;
+}
+export interface TestContext {
+    id: string;
+    db: TestDatabaseConnections;
+}
+export declare function beginTestIsolation(instance: Manifold): Promise<TestContext>;
+export declare function endTestIsolation(instance: Manifold, ctx: TestContext): Promise<void>;
+export declare function createTestContext(instance: Manifold, testConnections: TestContext): Flow;
+export { runInContext };
+//# sourceMappingURL=plugin.d.ts.map

package/dist/test/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/test/plugin.ts"],"names":[],"mappings":"AACA,OAAO,EAAW,KAAK,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAE1E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAG9C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAA;AAG/C,MAAM,WAAW,uBAAuB;IACtC,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAAA;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,EAAE,EAAE,uBAAuB,CAAA;CAC5B;AASD,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,CAkBjF;AAED,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAsB1F;AAgBD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,WAAW,GAAG,IAAI,CAMxF;AAED,OAAO,EAAE,YAAY,EAAE,CAAA"}