pipework 0.8.6 → 0.8.8

package/dist/tenant/scoped-db.js

@@ -0,0 +1,234 @@
+import { eq, and } from '../db/generated/drizzle-orm/operator.js';
+import { getTableColumns, getTableName } from '../db/generated/drizzle-orm/introspection.js';
+import { getScopeConfig } from './scope.js';
+function buildTenantCondition(table, columnKey, tenantId) {
+    const columns = getTableColumns(table);
+    const col = columns[columnKey];
+    return eq(col, tenantId);
+}
+function bindMethod(obj, prop) {
+    const val = Reflect.get(obj, prop, obj);
+    return typeof val === 'function' ? val.bind(obj) : val;
+}
+function wrapFinalBuilder(builder, condition) {
+    let whereApplied = false;
+    const wrap = (target) => new Proxy(target, {
+        get(t, prop) {
+            if (prop === 'where') {
+                return (userCondition) => {
+                    whereApplied = true;
+                    const combined = userCondition != null ? and(userCondition, condition) : condition;
+                    const result = t['where'].call(t, combined);
+                    return passthrough(result);
+                };
+            }
+            if (prop === 'then') {
+                if (!whereApplied) {
+                    const scoped = t['where'].call(t, condition);
+                    return bindMethod(scoped, 'then');
+                }
+                return bindMethod(t, 'then');
+            }
+            if (prop === 'catch' || prop === 'finally') {
+                if (!whereApplied) {
+                    const scoped = t['where'].call(t, condition);
+                    return bindMethod(scoped, prop);
+                }
+                return bindMethod(t, prop);
+            }
+            const value = Reflect.get(t, prop, t);
+            if (typeof value !== 'function')
+                return value;
+            return (...args) => {
+                const result = value.apply(t, args);
+                if (result != null && typeof result === 'object' && 'where' in result) {
+                    return wrap(result);
+                }
+                if (result != null && typeof result === 'object' && 'then' in result) {
+                    return passthrough(result);
+                }
+                return result;
+            };
+        },
+    });
+    const passthrough = (target) => new Proxy(target, {
+        get(t, prop) {
+            if (prop === 'then' || prop === 'catch' || prop === 'finally') {
+                return bindMethod(t, prop);
+            }
+            const value = Reflect.get(t, prop, t);
+            if (typeof value !== 'function')
+                return value;
+            return (...args) => {
+                const result = value.apply(t, args);
+                if (result != null && typeof result === 'object' && 'then' in result) {
+                    return passthrough(result);
+                }
+                return result;
+            };
+        },
+    });
+    return wrap(builder);
+}
+function wrapUpdateBuilder(builder, condition) {
+    return new Proxy(builder, {
+        get(t, prop) {
+            if (prop === 'set') {
+                return (...args) => {
+                    const result = t['set'].apply(t, args);
+                    return wrapFinalBuilder(result, condition);
+                };
+            }
+            const value = Reflect.get(t, prop, t);
+            return typeof value === 'function' ? value.bind(t) : value;
+        },
+    });
+}
+function wrapInsertBuilder(builder, columnKey, tenantId) {
+    return new Proxy(builder, {
+        get(t, prop) {
+            if (prop === 'values') {
+                return (values) => {
+                    const inject = (row) => {
+                        const existing = row[columnKey];
+                        if (existing !== undefined && existing !== tenantId) {
+                            throw new Error(`[pipework] Tenant-scoped insert: value has ${columnKey} "${String(existing)}" ` +
+                                `but the current context tenant is "${tenantId}".\n\n` +
+                                `  Remove the explicit ${columnKey} from your insert values — it's set automatically.\n` +
+                                '  If you need cross-tenant writes, file an issue on the pipework repo.\n');
+                        }
+                        return { ...row, [columnKey]: tenantId };
+                    };
+                    const scoped = Array.isArray(values)
+                        ? values.map(inject)
+                        : inject(values);
+                    return t['values'].call(t, scoped);
+                };
+            }
+            const value = Reflect.get(t, prop, t);
+            return typeof value === 'function' ? value.bind(t) : value;
+        },
+    });
+}
+function wrapSelectBuilder(builder, tenantId) {
+    return new Proxy(builder, {
+        get(t, prop) {
+            if (prop === 'from') {
+                return (table, ...rest) => {
+                    const result = t['from'].call(t, table, ...rest);
+                    const config = getScopeConfig(table);
+                    if (!config)
+                        return result;
+                    const cond = buildTenantCondition(table, config.columnKey, tenantId);
+                    return wrapFinalBuilder(result, cond);
+                };
+            }
+            const value = Reflect.get(t, prop, t);
+            return typeof value === 'function' ? value.bind(t) : value;
+        },
+    });
+}
+function throwTenantRequired(tableName, operation) {
+    throw new Error(`[pipework] Cannot ${operation} tenant-scoped table "${tableName}" without a tenant in context.\n\n` +
+        '  This table has a .tenant() field, which means all operations require\n' +
+        '  an active tenant in the request/job context.\n\n' +
+        '  If this is a system-level operation that legitimately needs to operate\n' +
+        '  without a tenant (admin tooling, analytics), file an issue on the\n' +
+        '  pipework repo describing your use case.\n');
+}
+export function createTenantGuardDb(db) {
+    return new Proxy(db, {
+        get(target, prop, receiver) {
+            if (prop === 'insert' || prop === 'update' || prop === 'delete') {
+                return (table) => {
+                    if (getScopeConfig(table)) {
+                        throwTenantRequired(getTableName(table), prop);
+                    }
+                    return target[prop].call(target, table);
+                };
+            }
+            if (prop === 'select' || prop === 'selectDistinct' || prop === 'selectDistinctOn') {
+                return (...args) => {
+                    const selectBuilder = target[prop](...args);
+                    return wrapGuardSelectBuilder(selectBuilder);
+                };
+            }
+            return Reflect.get(target, prop, receiver);
+        },
+    });
+}
+function wrapGuardSelectBuilder(builder) {
+    return new Proxy(builder, {
+        get(t, prop) {
+            if (prop === 'from') {
+                return (table, ...rest) => {
+                    if (getScopeConfig(table)) {
+                        throwTenantRequired(getTableName(table), 'select from');
+                    }
+                    return t['from'].call(t, table, ...rest);
+                };
+            }
+            const value = Reflect.get(t, prop, t);
+            return typeof value === 'function' ? value.bind(t) : value;
+        },
+    });
+}
+export function createScopedDb(db, tenantId) {
+    return new Proxy(db, {
+        get(target, prop, receiver) {
+            if (prop === 'insert') {
+                return (table) => {
+                    const builder = target.insert(table);
+                    const config = getScopeConfig(table);
+                    if (!config)
+                        return builder;
+                    return wrapInsertBuilder(builder, config.columnKey, tenantId);
+                };
+            }
+            if (prop === 'update') {
+                return (table) => {
+                    const builder = target.update(table);
+                    const config = getScopeConfig(table);
+                    if (!config)
+                        return builder;
+                    const cond = buildTenantCondition(table, config.columnKey, tenantId);
+                    return wrapUpdateBuilder(builder, cond);
+                };
+            }
+            if (prop === 'delete') {
+                return (table) => {
+                    const builder = target.delete(table);
+                    const config = getScopeConfig(table);
+                    if (!config)
+                        return builder;
+                    const cond = buildTenantCondition(table, config.columnKey, tenantId);
+                    return wrapFinalBuilder(builder, cond);
+                };
+            }
+            if (prop === 'select' || prop === 'selectDistinct' || prop === 'selectDistinctOn') {
+                return (...args) => {
+                    const selectBuilder = target[prop](...args);
+                    return wrapSelectBuilder(selectBuilder, tenantId);
+                };
+            }
+            if (prop === 'execute') {
+                return () => {
+                    throw new Error('[pipework] execute() is not available on a tenant-scoped database connection.\n\n' +
+                        '  Tenant-scoped connections only support select, insert, update, and delete\n' +
+                        '  operations, which are automatically filtered by tenant.\n\n' +
+                        '  If you need to run a query that the builder cannot express, file an issue\n' +
+                        '  on the pipework repo describing your use case.\n');
+                };
+            }
+            if (prop === '$with') {
+                return () => {
+                    throw new Error('[pipework] $with() (common table expressions) is not available on a tenant-scoped database connection.\n\n' +
+                        '  CTEs bypass tenant scoping. If you need CTE support, file an issue\n' +
+                        '  on the pipework repo describing your use case.\n');
+                };
+            }
+            return Reflect.get(target, prop, receiver);
+        },
+    });
+}
+//# sourceMappingURL=scoped-db.js.map

package/dist/tenant/scoped-db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoped-db.js","sourceRoot":"","sources":["../../src/tenant/scoped-db.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,yCAAyC,CAAA;AACjE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,8CAA8C,CAAA;AAC5F,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAI3C,SAAS,oBAAoB,CAAC,KAAc,EAAE,SAAiB,EAAE,QAAgB;IAC/E,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAE,CAAA;IAC/B,OAAO,EAAE,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;AAC1B,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,IAAqB;IACpD,MAAM,GAAG,GAAY,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;IAChD,OAAO,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAE,GAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;AACnE,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe,EAAE,SAAc;IACvD,IAAI,YAAY,GAAG,KAAK,CAAA;IAExB,MAAM,IAAI,GAAG,CAAC,MAAc,EAAU,EAAE,CACtC,IAAI,KAAK,CAAC,MAAM,EAAE;QAChB,GAAG,CAAC,CAAC,EAAE,IAAI;YACT,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,OAAO,CAAC,aAA8B,EAAE,EAAE;oBACxC,YAAY,GAAG,IAAI,CAAA;oBACnB,MAAM,QAAQ,GAAG,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;oBAClF,MAAM,MAAM,GAAI,CAA2B,CAAC,OAAO,CAAE,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAW,CAAA;oBACjF,OAAO,WAAW,CAAC,MAAM,CAAC,CAAA;gBAC5B,CAAC,CAAA;YACH,CAAC;YAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,MAAM,MAAM,GAAI,CAA2B,CAAC,OAAO,CAAE,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,CAAW,CAAA;oBAClF,OAAO,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;gBACnC,CAAC;gBACD,OAAO,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;YAC9B,CAAC;YAED,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,MAAM,MAAM,GAAI,CAA2B,CAAC,OAAO,CAAE,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,CAAW,CAAA;oBAClF,OAAO,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;gBACjC,CAAC;gBACD,OAAO,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;YAC5B,CAAC;YAED,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YAC9C,IAAI,OAAO,KAAK,KAAK,UAAU;gBAAE,OAAO,KAAK,CAAA;YAE7C,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE;gBAC5B,MAAM,MAAM,GAAI,KAAe,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;gBAC9C,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAK,MAAiB,EAAE,CAAC;oBAClF,OAAO,IAAI,CAAC,MAAgB,CAAC,CAAA;gBAC/B,CAAC;gBACD,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAK,MAAiB,EAAE,CAAC;oBACjF,OAAO,WAAW,CAAC,MAAgB,CAAC,CAAA;gBACtC,CAAC;gBACD,OAAO,MAAM,CAAA;YACf,CAAC,CAAA;QACH,CAAC;KACF,CAAC,CAAA;IAEJ,MAAM,WAAW,GAAG,CAAC,MAAc,EAAU,EAAE,CAC7C,IAAI,KAAK,CAAC,MAAM,EAAE;QAChB,GAAG,CAAC,CAAC,EAAE,IAAI;YACT,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC9D,OAAO,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;YAC5B,CAAC;YACD,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YAC9C,IAAI,OAAO,KAAK,KAAK,UAAU;gBAAE,OAAO,KAAK,CAAA;YAC7C,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE;gBAC5B,MAAM,MAAM,GAAI,KAAe,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;gBAC9C,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAK,MAAiB,EAAE,CAAC;oBACjF,OAAO,WAAW,CAAC,MAAgB,CAAC,CAAA;gBACtC,CAAC;gBACD,OAAO,MAAM,CAAA;YACf,CAAC,CAAA;QACH,CAAC;KACF,CAAC,CAAA;IAEJ,OAAO,IAAI,CAAC,OAAO,CAAC,CAAA;AACtB,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,SAAc;IACxD,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE;QACxB,GAAG,CAAC,CAAC,EAAE,IAAI;YACT,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE;oBAC5B,MAAM,MAAM,GAAI,CAA2B,CAAC,KAAK,CAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAW,CAAA;oBAC5E,OAAO,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;gBAC5C,CAAC,CAAA;YACH,CAAC;YACD,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YAC9C,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAE,KAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QACvE,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,SAAiB,EAAE,QAAgB;IAC7E,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE;QACxB,GAAG,CAAC,CAAC,EAAE,IAAI;YACT,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,OAAO,CAAC,MAAe,EAAE,EAAE;oBACzB,MAAM,MAAM,GAAG,CAAC,GAA4B,EAA2B,EAAE;wBACvE,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,CAAA;wBAC/B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;4BACpD,MAAM,IAAI,KAAK,CACb,8CAA8C,SAAS,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI;gCAChF,sCAAsC,QAAQ,QAAQ;gCACtD,yBAAyB,SAAS,sDAAsD;gCACxF,0EAA0E,CAC3E,CAAA;wBACH,CAAC;wBACD,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAA;oBAC1C,CAAC,CAAA;oBACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;wBAClC,CAAC,CAAE,MAAoC,CAAC,GAAG,CAAC,MAAM,CAAC;wBACnD,CAAC,CAAC,MAAM,CAAC,MAAiC,CAAC,CAAA;oBAC7C,OAAQ,CAA2B,CAAC,QAAQ,CAAE,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;gBAChE,CAAC,CAAA;YACH,CAAC;YACD,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YAC9C,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAE,KAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QACvE,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,QAAgB;IAC1D,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE;QACxB,GAAG,CAAC,CAAC,EAAE,IAAI;YACT,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAc,EAAE,GAAG,IAAe,EAAE,EAAE;oBAC5C,MAAM,MAAM,GAAI,CAA2B,CAAC,MAAM,CAAE,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,IAAI,CAAW,CAAA;oBACtF,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;oBACpC,IAAI,CAAC,MAAM;wBAAE,OAAO,MAAM,CAAA;oBAC1B,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;oBACpE,OAAO,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;gBACvC,CAAC,CAAA;YACH,CAAC;YACD,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YAC9C,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAE,KAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QACvE,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAiB,EAAE,SAAiB;IAC/D,MAAM,IAAI,KAAK,CACb,qBAAqB,SAAS,yBAAyB,SAAS,oCAAoC;QACpG,0EAA0E;QAC1E,oDAAoD;QACpD,4EAA4E;QAC5E,uEAAuE;QACvE,6CAA6C,CAC9C,CAAA;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,EAAM;IACxC,OAAO,IAAI,KAAK,CAAC,EAAE,EAAE;QACnB,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ;YACxB,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAChE,OAAO,CAAC,KAAc,EAAE,EAAE;oBACxB,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC1B,mBAAmB,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,IAAc,CAAC,CAAA;oBAC1D,CAAC;oBACD,OAAQ,MAA2C,CAAC,IAAc,CAAE,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;gBAC1F,CAAC,CAAA;YACH,CAAC;YAED,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,gBAAgB,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBAClF,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE;oBAC5B,MAAM,aAAa,GAAI,MAA2C,CAAC,IAAc,CAAE,CAAC,GAAG,IAAI,CAAC,CAAA;oBAC5F,OAAO,sBAAsB,CAAC,aAAuB,CAAC,CAAA;gBACxD,CAAC,CAAA;YACH,CAAC;YAED,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC5C,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe;IAC7C,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE;QACxB,GAAG,CAAC,CAAC,EAAE,IAAI;YACT,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAc,EAAE,GAAG,IAAe,EAAE,EAAE;oBAC5C,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC1B,mBAAmB,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,CAAA;oBACzD,CAAC;oBACD,OAAQ,CAA2B,CAAC,MAAM,CAAE,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,CAAA;gBACtE,CAAC,CAAA;YACH,CAAC;YACD,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YAC9C,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAE,KAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QACvE,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAM,EAAE,QAAgB;IACrD,OAAO,IAAI,KAAK,CAAC,EAAE,EAAE;QACnB,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ;YACxB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,OAAO,CAAC,KAAc,EAAE,EAAE;oBACxB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;oBACpC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;oBACpC,IAAI,CAAC,MAAM;wBAAE,OAAO,OAAO,CAAA;oBAC3B,OAAO,iBAAiB,CAAC,OAA4B,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;gBACpF,CAAC,CAAA;YACH,CAAC;YAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,OAAO,CAAC,KAAc,EAAE,EAAE;oBACxB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;oBACpC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;oBACpC,IAAI,CAAC,MAAM;wBAAE,OAAO,OAAO,CAAA;oBAC3B,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;oBACpE,OAAO,iBAAiB,CAAC,OAA4B,EAAE,IAAI,CAAC,CAAA;gBAC9D,CAAC,CAAA;YACH,CAAC;YAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,OAAO,CAAC,KAAc,EAAE,EAAE;oBACxB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;oBACpC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;oBACpC,IAAI,CAAC,MAAM;wBAAE,OAAO,OAAO,CAAA;oBAC3B,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;oBACpE,OAAO,gBAAgB,CAAC,OAA4B,EAAE,IAAI,CAAC,CAAA;gBAC7D,CAAC,CAAA;YACH,CAAC;YAED,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,gBAAgB,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBAClF,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE;oBAC5B,MAAM,aAAa,GAAI,MAA2C,CAAC,IAAc,CAAE,CAAC,GAAG,IAAI,CAAC,CAAA;oBAC5F,OAAO,iBAAiB,CAAC,aAAuB,EAAE,QAAQ,CAAC,CAAA;gBAC7D,CAAC,CAAA;YACH,CAAC;YAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,GAAG,EAAE;oBACV,MAAM,IAAI,KAAK,CACb,mFAAmF;wBACnF,+EAA+E;wBAC/E,+DAA+D;wBAC/D,+EAA+E;wBAC/E,oDAAoD,CACrD,CAAA;gBACH,CAAC,CAAA;YACH,CAAC;YAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,OAAO,GAAG,EAAE;oBACV,MAAM,IAAI,KAAK,CACb,4GAA4G;wBAC5G,wEAAwE;wBACxE,oDAAoD,CACrD,CAAA;gBACH,CAAC,CAAA;YACH,CAAC;YAED,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC5C,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/tenant/types.d.ts

@@ -0,0 +1,14 @@
+/** Configuration for tenant extraction and isolation strategy. */
+export interface TenantConfig {
+    readonly extract: (auth: unknown) => string | null;
+    readonly sessionVars?: Record<string, (ctx: TenantContext) => string>;
+    readonly validate?: (tenantId: string) => boolean;
+    readonly required?: boolean;
+}
+/** Resolved tenant context — tenant ID, request ID, and user ID. */
+export interface TenantContext {
+    readonly tenant: string;
+    readonly requestId: string;
+    readonly userId: string | null;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/tenant/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/tenant/types.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,CAAA;IAClD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,MAAM,CAAC,CAAA;IACrE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAA;IACjD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED,oEAAoE;AACpE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B"}

package/dist/tenant/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/tenant/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/tenant/types.ts"],"names":[],"mappings":""}

package/dist/tenant/validate.d.ts

@@ -0,0 +1,4 @@
+export declare function validateTenantId(value: string): boolean;
+export declare function validateSessionVarName(name: string): void;
+export declare function validateSessionVarValue(value: string): void;
+//# sourceMappingURL=validate.d.ts.map

package/dist/tenant/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/tenant/validate.ts"],"names":[],"mappings":"AAIA,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAQzD;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAQ3D"}

package/dist/tenant/validate.js

@@ -0,0 +1,20 @@
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const SAFE_VAR_NAME = /^[a-z][a-z0-9_.]*$/;
+export function validateTenantId(value) {
+    return UUID_PATTERN.test(value);
+}
+export function validateSessionVarName(name) {
+    if (!SAFE_VAR_NAME.test(name)) {
+        throw new Error(`[pipework] Invalid session variable name: "${name}". ` +
+            `Variable names must match /^[a-z][a-z0-9_.]*$/. ` +
+            `This prevents SQL injection in SET LOCAL statements.`);
+    }
+}
+export function validateSessionVarValue(value) {
+    if (/[;'"\n\r]/.test(value)) {
+        throw new Error(`[pipework] Unsafe session variable value rejected. ` +
+            `Values must not contain semicolons, quotes, or newlines. ` +
+            `Received: "${value.slice(0, 40)}${value.length > 40 ? '...' : ''}"`);
+    }
+}
+//# sourceMappingURL=validate.js.map

package/dist/tenant/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/tenant/validate.ts"],"names":[],"mappings":"AAAA,MAAM,YAAY,GAAG,iEAAiE,CAAA;AAEtF,MAAM,aAAa,GAAG,oBAAoB,CAAA;AAE1C,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,8CAA8C,IAAI,KAAK;YACvD,kDAAkD;YAClD,sDAAsD,CACvD,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,qDAAqD;YACrD,2DAA2D;YAC3D,cAAc,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CACrE,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/test/vitest-config.d.ts

@@ -0,0 +1,21 @@
+import { type ViteUserConfig } from 'vitest/config';
+import { type PipeworkVitestOptions } from './vitest-plugin.js';
+export { resolveVitestWorkspace, resolveVitestModules } from './vitest-workspace.js';
+export type { PipeworkVitestOptions };
+export interface TestConfigOptions {
+    /** Set to `false` to skip DB auto-setup — use for pure unit test configs that never call `pipe()` or `withFlow()`. Shorthand for `pipework: { database: false }`. */
+    database?: boolean;
+    pipework?: PipeworkVitestOptions;
+    test?: {
+        setupFiles?: string | string[];
+        testTimeout?: number;
+        hookTimeout?: number;
+        pool?: string;
+        include?: string[];
+        exclude?: string[];
+        [key: string]: unknown;
+    };
+    [key: string]: unknown;
+}
+export declare function defineTestConfig(overrides?: TestConfigOptions): ViteUserConfig;
+//# sourceMappingURL=vitest-config.d.ts.map

package/dist/test/vitest-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vitest-config.d.ts","sourceRoot":"","sources":["../../src/test/vitest-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,eAAe,CAAA;AACjE,OAAO,EAAY,KAAK,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAEzE,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AACpF,YAAY,EAAE,qBAAqB,EAAE,CAAA;AAErC,MAAM,WAAW,iBAAiB;IAChC,qKAAqK;IACrK,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,QAAQ,CAAC,EAAE,qBAAqB,CAAA;IAChC,IAAI,CAAC,EAAE;QACL,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;QAC9B,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;QAClB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;QAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,CAAA;IACD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED,wBAAgB,gBAAgB,CAAC,SAAS,CAAC,EAAE,iBAAiB,GAAG,cAAc,CAuC9E"}

package/dist/test/vitest-config.js

@@ -0,0 +1,47 @@
+import { defineConfig } from 'vitest/config';
+import { pipework } from './vitest-plugin.js';
+export { resolveVitestWorkspace, resolveVitestModules } from './vitest-workspace.js';
+export function defineTestConfig(overrides) {
+    const pipeworkOptions = { ...overrides?.pipework };
+    if (overrides?.database === false) {
+        pipeworkOptions.database = false;
+    }
+    const useDatabase = pipeworkOptions.database !== false;
+    const { setupFiles: userSetupFiles, ...restTestOverrides } = overrides?.test ?? {};
+    const setupFiles = useDatabase
+        ? ['pipework/test/setup', ...normalizeStringArray(userSetupFiles)]
+        : normalizeStringArray(userSetupFiles);
+    const otherOverrides = {};
+    if (overrides) {
+        for (const key of Object.keys(overrides)) {
+            if (key !== 'pipework' && key !== 'test' && key !== 'database') {
+                otherOverrides[key] = overrides[key];
+            }
+        }
+    }
+    return defineConfig({
+        plugins: [pipework(pipeworkOptions)],
+        test: {
+            testTimeout: 30_000,
+            hookTimeout: 60_000,
+            pool: 'forks',
+            isolate: false,
+            server: {
+                deps: {
+                    inline: ['pipework'],
+                },
+            },
+            ...restTestOverrides,
+            ...(setupFiles.length > 0 ? { setupFiles } : {}),
+        },
+        ...otherOverrides,
+    });
+}
+function normalizeStringArray(value) {
+    if (Array.isArray(value))
+        return value;
+    if (typeof value === 'string')
+        return [value];
+    return [];
+}
+//# sourceMappingURL=vitest-config.js.map

package/dist/test/vitest-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vitest-config.js","sourceRoot":"","sources":["../../src/test/vitest-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAuB,MAAM,eAAe,CAAA;AACjE,OAAO,EAAE,QAAQ,EAA8B,MAAM,oBAAoB,CAAA;AAEzE,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAmBpF,MAAM,UAAU,gBAAgB,CAAC,SAA6B;IAC5D,MAAM,eAAe,GAA0B,EAAE,GAAG,SAAS,EAAE,QAAQ,EAAE,CAAA;IACzE,IAAI,SAAS,EAAE,QAAQ,KAAK,KAAK,EAAE,CAAC;QAClC,eAAe,CAAC,QAAQ,GAAG,KAAK,CAAA;IAClC,CAAC;IACD,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,KAAK,KAAK,CAAA;IAEtD,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,iBAAiB,EAAE,GAAG,SAAS,EAAE,IAAI,IAAI,EAAE,CAAA;IAClF,MAAM,UAAU,GAAG,WAAW;QAC5B,CAAC,CAAC,CAAC,qBAAqB,EAAE,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAClE,CAAC,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAA;IAExC,MAAM,cAAc,GAA4B,EAAE,CAAA;IAElD,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;gBAC/D,cAAc,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC;QAClB,OAAO,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QACpC,IAAI,EAAE;YACJ,WAAW,EAAE,MAAM;YACnB,WAAW,EAAE,MAAM;YACnB,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,KAAK;YACd,MAAM,EAAE;gBACN,IAAI,EAAE;oBACJ,MAAM,EAAE,CAAC,UAAU,CAAC;iBACrB;aACF;YACD,GAAG,iBAAiB;YACpB,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjD;QACD,GAAG,cAAc;KACA,CAAmB,CAAA;AACxC,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAiB,CAAA;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IAC7C,OAAO,EAAE,CAAA;AACX,CAAC"}

package/dist/trace/entry/close-trace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"close-trace.d.ts","sourceRoot":"","sources":["../../../src/trace/entry/close-trace.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AAOtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEtD,8DAA8D;AAC9D,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,OAAO,CAAA;AAE7C,8GAA8G;AAC9G,wBAAgB,UAAU,CACxB,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,YAAY,GAAG,IAAI,EACxB,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC,CAiCf"}
+{"version":3,"file":"close-trace.d.ts","sourceRoot":"","sources":["../../../src/trace/entry/close-trace.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AAOtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEtD,8DAA8D;AAC9D,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,OAAO,CAAA;AAE7C,8GAA8G;AAC9G,wBAAgB,UAAU,CACxB,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,YAAY,GAAG,IAAI,EACxB,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC,CAmCf"}

package/dist/trace/entry/close-trace.js

@@ -4,15 +4,25 @@
 // waits on `persisted`, so neither the closing `UPDATE` nor the step `INSERT`s
 // can outrun the opening `INSERT` and miss the row.
 //
+// **Ordering: step inserts settle before the status UPDATE.** Without this,
+// an outside observer polling the trace row sees `status='error'/'closed'`
+// the moment the UPDATE commits, but the step rows for that trace can still
+// be in flight — a race that flakes any test of the shape "wait for status,
+// then assert on step rows." Sequencing here makes the published status the
+// settled-trace signal it visually appears to be. The hot path is unaffected
+// because the caller ignores the returned promise; step-write failures are
+// already swallowed inside `flushSteps`, so the UPDATE still runs.
+//
 // A truncated trace (Q7) keeps its `truncated` status here: `truncateTrace`
 // already settled the cap-blowing path, and `closeTrace` running last must not
 // downgrade a casualty to `closed` / `error`. The buffer drain is still safe —
 // `truncateTrace` already drained it, and `__flowStep` records nothing after
 // truncation, so `drain()` returns the empty array.
 //
-// The returned promise settles once the `UPDATE` and the step `INSERT` have —
-// callers on the hot path ignore it (the close must not block the entry's
-// response), but it gives a test a handle to await before asserting on rows.
+// The returned promise settles once the step `INSERT`s and then the `UPDATE`
+// have — callers on the hot path ignore it (the close must not block the
+// entry's response), but it gives a test a handle to await before asserting
+// on rows.
 import { getBaseLogger } from '../../core/logging/index.js';
 import { eq, and, getTableColumns } from '../../data/query/index.js';
 import { trace } from '../schema/trace.js';
@@ -26,17 +36,19 @@ export function closeTrace(instance, ctx, outcome) {
     return ctx.persisted
         .then(async () => {
         const status = ctx.buffer.truncated ? 'truncated' : outcome;
-        const stepFlush = flushSteps(instance, ctx.buffer.drain());
+        // Step inserts MUST settle before the status UPDATE — see file header
+        // for the race this prevents. `flushSteps` swallows its own errors, so
+        // a failed batch still lets the UPDATE proceed.
+        await flushSteps(instance, ctx.buffer.drain());
         const db = instance.pool.getOrCreate(instance.config.database()).drizzle;
         const table = trace.table();
         // The composite primary key is `[id, openedDay]` — both are matched so the
         // UPDATE targets exactly one partition's one row.
         const cols = getTableColumns(table);
         // eslint-disable-next-line @typescript-eslint/no-explicit-any -- Drizzle's update needs the concrete runtime table type
-        const traceUpdate = db.update(table)
+        await db.update(table)
             .set({ status, closedAt })
             .where(and(eq(cols.id, ctx.id), eq(cols.openedDay, ctx.openedDay)));
-        await Promise.all([stepFlush, traceUpdate]);
         // Copy errored / truncated traces to the cold set before their hot
         // partition retires (Q4). For a truncated trace, `truncationDone` is the
         // settle handle from `truncateTrace`; awaiting it ensures the cold row

package/dist/trace/entry/close-trace.js.map

@@ -1 +1 @@
-{"version":3,"file":"close-trace.js","sourceRoot":"","sources":["../../../src/trace/entry/close-trace.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,oDAAoD;AACpD,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,+EAA+E;AAC/E,6EAA6E;AAC7E,oDAAoD;AACpD,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,6EAA6E;AAG7E,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAC3D,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAEpE,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAM7D,8GAA8G;AAC9G,MAAM,UAAU,UAAU,CACxB,QAAkB,EAClB,GAAwB,EACxB,OAAqB;IAErB,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;IAC1C,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAA;IAC3B,OAAO,GAAG,CAAC,SAAS;SACjB,IAAI,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,MAAM,GAAqC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAA;QAC7F,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;QAC1D,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAA;QACxE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;QAC3B,2EAA2E;QAC3E,kDAAkD;QAClD,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAuC,CAAA;QACzE,wHAAwH;QACxH,MAAM,WAAW,GAAI,EAAU,CAAC,MAAM,CAAC,KAAK,CAAC;aAC1C,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;aACzB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;QACrE,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAA;QAC3C,mEAAmE;QACnE,yEAAyE;QACzE,uEAAuE;QACvE,sEAAsE;QACtE,0DAA0D;QAC1D,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,GAAG,CAAC,MAAM,CAAC,cAAc,CAAA;YAC/B,MAAM,gBAAgB,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QACpC,CAAC;IACH,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACtB,aAAa,EAAE,CAAC,KAAK,CACnB,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,EACxB,6DAA6D,CAC9D,CAAA;IACH,CAAC,CAAC,CAAA;AACN,CAAC"}
+{"version":3,"file":"close-trace.js","sourceRoot":"","sources":["../../../src/trace/entry/close-trace.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,oDAAoD;AACpD,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,4EAA4E;AAC5E,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,2EAA2E;AAC3E,mEAAmE;AACnE,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,+EAA+E;AAC/E,6EAA6E;AAC7E,oDAAoD;AACpD,EAAE;AACF,6EAA6E;AAC7E,yEAAyE;AACzE,4EAA4E;AAC5E,WAAW;AAGX,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAC3D,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAEpE,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAM7D,8GAA8G;AAC9G,MAAM,UAAU,UAAU,CACxB,QAAkB,EAClB,GAAwB,EACxB,OAAqB;IAErB,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;IAC1C,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAA;IAC3B,OAAO,GAAG,CAAC,SAAS;SACjB,IAAI,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,MAAM,GAAqC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAA;QAC7F,sEAAsE;QACtE,uEAAuE;QACvE,gDAAgD;QAChD,MAAM,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;QAC9C,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAA;QACxE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;QAC3B,2EAA2E;QAC3E,kDAAkD;QAClD,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAuC,CAAA;QACzE,wHAAwH;QACxH,MAAO,EAAU,CAAC,MAAM,CAAC,KAAK,CAAC;aAC5B,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;aACzB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;QACrE,mEAAmE;QACnE,yEAAyE;QACzE,uEAAuE;QACvE,sEAAsE;QACtE,0DAA0D;QAC1D,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,GAAG,CAAC,MAAM,CAAC,cAAc,CAAA;YAC/B,MAAM,gBAAgB,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QACpC,CAAC;IACH,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACtB,aAAa,EAAE,CAAC,KAAK,CACnB,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,EACxB,6DAA6D,CAC9D,CAAA;IACH,CAAC,CAAC,CAAA;AACN,CAAC"}

package/dist/trace/schema/trace-fields.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"trace-fields.d.ts","sourceRoot":"","sources":["../../../src/trace/schema/trace-fields.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;CAwBvB,CAAA"}
+{"version":3,"file":"trace-fields.d.ts","sourceRoot":"","sources":["../../../src/trace/schema/trace-fields.ts"],"names":[],"mappings":"AAyBA,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;CAuBvB,CAAA"}

package/dist/trace/schema/trace-fields.js

@@ -5,17 +5,29 @@
 // Field descriptors are immutable, so the same record is handed to both
 // `define()` calls — the hot and retained tables are structurally identical
 // and differ only in retention policy.
-import { field } from '../../data/domain/index.js';
+//
+// Self-reference (`rootId`, `parentId` → `trace.id`) and forward-reference
+// (`parentStepId` → `trace_step.id`) resolve their targets lazily via the
+// global registry. Importing `trace` / `traceStep` directly would create a
+// load-order trap: `trace-retained.ts` imports this module before `trace.ts`
+// has run, so a direct cycle leaves `trace` in TDZ when `define()` reads
+// `traceFields`. Resolving by name dodges the cycle entirely; the validator
+// catches a bad name. `enforced: false` keeps the brand inheritance — and
+// therefore the validator's recognition that the reuse is intentional —
+// without emitting a physical FK; retention is free to drop ancestor
+// partitions out from under these columns.
+import { field, definitions } from '../../data/domain/index.js';
+const lazyTrace = () => definitions().get('trace');
+const lazyTraceStep = () => definitions().get('trace_step');
 export const traceFields = {
     id: field.uuid().brand('TraceId').defaultRandom(),
     // Partition key — the calendar day the trace opened. Retention drops whole
     // day-partitions, so every row carries the day it belongs to.
     openedDay: field.date(),
-    // The root of the trace tree. Equals `id` for a root trace. No DB foreign
-    // key: retention must be free to drop ancestor partitions out from under it.
-    rootId: field.uuid().brand('TraceId'),
-    parentId: field.uuid().brand('TraceId').nullable(),
-    parentStepId: field.uuid().brand('TraceStepId').nullable(),
+    // The root of the trace tree. Equals `id` for a root trace.
+    rootId: field.uuid().brand('TraceId').references(lazyTrace, 'id', { enforced: false }),
+    parentId: field.uuid().brand('TraceId').references(lazyTrace, 'id', { enforced: false }).nullable(),
+    parentStepId: field.uuid().brand('TraceStepId').references(lazyTraceStep, 'id', { enforced: false }).nullable(),
     entryKind: field.enum(['http', 'job', 'cron', 'test']),
     status: field.enum(['open', 'closed', 'error', 'truncated', 'expired']),
     tenantId: field.uuid().tenant().nullable(),

package/dist/trace/schema/trace-fields.js.map

@@ -1 +1 @@
-{"version":3,"file":"trace-fields.js","sourceRoot":"","sources":["../../../src/trace/schema/trace-fields.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,4EAA4E;AAC5E,wEAAwE;AACxE,EAAE;AACF,wEAAwE;AACxE,4EAA4E;AAC5E,uCAAuC;AAEvC,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAElD,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE;IACjD,2EAA2E;IAC3E,8DAA8D;IAC9D,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE;IACvB,0EAA0E;IAC1E,6EAA6E;IAC7E,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACrC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;IAClD,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;IAC1D,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IACvE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE;IAC3B,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE;IACtC,8EAA8E;IAC9E,gCAAgC;IAChC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;IAC5B,6EAA6E;IAC7E,mBAAmB;IACnB,cAAc,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAA"}
+{"version":3,"file":"trace-fields.js","sourceRoot":"","sources":["../../../src/trace/schema/trace-fields.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,4EAA4E;AAC5E,wEAAwE;AACxE,EAAE;AACF,wEAAwE;AACxE,4EAA4E;AAC5E,uCAAuC;AACvC,EAAE;AACF,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,yEAAyE;AACzE,4EAA4E;AAC5E,0EAA0E;AAC1E,wEAAwE;AACxE,qEAAqE;AACrE,2CAA2C;AAE3C,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAA;AAG/D,MAAM,SAAS,GAAG,GAAiB,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,OAAO,CAAiB,CAAA;AAChF,MAAM,aAAa,GAAG,GAAiB,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,YAAY,CAAiB,CAAA;AAEzF,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE;IACjD,2EAA2E;IAC3E,8DAA8D;IAC9D,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE;IACvB,4DAA4D;IAC5D,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACtF,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnG,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/G,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IACvE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE;IAC3B,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE;IACtC,8EAA8E;IAC9E,gCAAgC;IAChC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;IAC5B,6EAA6E;IAC7E,mBAAmB;IACnB,cAAc,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAA"}

package/dist/trace/schema/trace-step-fields.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"trace-step-fields.d.ts","sourceRoot":"","sources":["../../../src/trace/schema/trace-step-fields.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,eAAe;;;;;;;;;;;;;CAqB3B,CAAA"}
+{"version":3,"file":"trace-step-fields.d.ts","sourceRoot":"","sources":["../../../src/trace/schema/trace-step-fields.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,eAAe;;;;;;;;;;;;;CAqB3B,CAAA"}

package/dist/trace/schema/trace-step-fields.js

@@ -4,8 +4,16 @@
 //
 // Field descriptors are immutable, so the same record is handed to both
 // `define()` calls.
-import { field } from '../../data/domain/index.js';
+//
+// `traceId` and `parentStepId` declare logical references resolved lazily via
+// the registry — see the same pattern in `trace-fields.ts`. The actual
+// `trace` FK lives in the composite (`traceId`, `traceDay`) on the table; the
+// field-level reference exists only to inherit the brand and surface a
+// `references` annotation to the validator.
+import { field, definitions } from '../../data/domain/index.js';
 import { schema } from '../../data/schema/namespace.js';
+const lazyTrace = () => definitions().get('trace');
+const lazyTraceStep = () => definitions().get('trace_step');
 export const traceStepFields = {
     id: field.uuid().brand('TraceStepId').defaultRandom(),
     // Partition key — the parent trace's `openedDay`, NOT the step's own
@@ -13,11 +21,11 @@ export const traceStepFields = {
     // step and its trace always sit in the same day-partition, so the two
     // tables' partitions retire together.
     traceDay: field.date(),
-    traceId: field.uuid().brand('TraceId'),
+    traceId: field.uuid().brand('TraceId').references(lazyTrace, 'id', { enforced: false }),
     // Spawn order within the trace. Branch vs step is an edge property, not a
     // node property — `seq` only records sequencing.
     seq: field.integer(),
-    parentStepId: field.uuid().brand('TraceStepId').nullable(),
+    parentStepId: field.uuid().brand('TraceStepId').references(lazyTraceStep, 'id', { enforced: false }).nullable(),
     // The `path:symbol` identity of the flow step, matching the annotation's
     // upstream/downstream targets.
     flowStepRef: field.text(),

package/dist/trace/schema/trace-step-fields.js.map

@@ -1 +1 @@
-{"version":3,"file":"trace-step-fields.js","sourceRoot":"","sources":["../../../src/trace/schema/trace-step-fields.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,4EAA4E;AAC5E,eAAe;AACf,EAAE;AACF,wEAAwE;AACxE,oBAAoB;AAEpB,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAA;AAEvD,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,aAAa,EAAE;IACrD,qEAAqE;IACrE,wEAAwE;IACxE,sEAAsE;IACtE,sCAAsC;IACtC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE;IACtB,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACtC,0EAA0E;IAC1E,iDAAiD;IACjD,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE;IACpB,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;IAC1D,yEAAyE;IACzE,+BAA+B;IAC/B,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE;IACzB,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;IAC5B,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE;IACzC,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3D,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAA"}
+{"version":3,"file":"trace-step-fields.js","sourceRoot":"","sources":["../../../src/trace/schema/trace-step-fields.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,4EAA4E;AAC5E,eAAe;AACf,EAAE;AACF,wEAAwE;AACxE,oBAAoB;AACpB,EAAE;AACF,8EAA8E;AAC9E,uEAAuE;AACvE,8EAA8E;AAC9E,uEAAuE;AACvE,4CAA4C;AAE5C,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAA;AAGvD,MAAM,SAAS,GAAG,GAAiB,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,OAAO,CAAiB,CAAA;AAChF,MAAM,aAAa,GAAG,GAAiB,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,YAAY,CAAiB,CAAA;AAEzF,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,aAAa,EAAE;IACrD,qEAAqE;IACrE,wEAAwE;IACxE,sEAAsE;IACtE,sCAAsC;IACtC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE;IACtB,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACvF,0EAA0E;IAC1E,iDAAiD;IACjD,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE;IACpB,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/G,yEAAyE;IACzE,+BAA+B;IAC/B,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE;IACzB,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;IAC5B,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE;IACzC,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3D,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAA"}

package/dist/trunk.d.ts

@@ -0,0 +1,35 @@
+import type { ResolvedConfig } from './config/load.js';
+import type { ResolvedDatabase } from './config/load.js';
+import type { TrunkConfig } from './config/schema.js';
+import type { ManagedConnection } from './db/pool.js';
+export interface TrunkInstance {
+    readonly config: ResolvedConfig;
+    readonly pool: PoolState;
+    readonly isolation: IsolationState;
+    readonly connections: ConnectionTracker;
+}
+export interface PoolState {
+    getOrCreate(config: ResolvedDatabase): ManagedConnection;
+    get(name: string): ManagedConnection | undefined;
+    closeAll(): Promise<void>;
+    count(): number;
+}
+export interface IsolationState {
+    markBegin(): void;
+    markEnd(): void;
+    assertClean(): void;
+    stats(): {
+        active: number;
+        totalBegins: number;
+        totalEnds: number;
+    };
+    reset(): void;
+}
+export interface ConnectionTracker {
+    track(id: string, name: string, context: string): void;
+    release(id: string): void;
+    activeCount(): number;
+    assertNoLeaks(maxExpected: number): void;
+}
+export declare function createTrunk(raw: TrunkConfig): TrunkInstance;
+//# sourceMappingURL=trunk.d.ts.map

package/dist/trunk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trunk.d.ts","sourceRoot":"","sources":["../src/trunk.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAExD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAIrD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAA;IAClC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAA;CACxC;AAED,MAAM,WAAW,SAAS;IACxB,WAAW,CAAC,MAAM,EAAE,gBAAgB,GAAG,iBAAiB,CAAA;IACxD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAAA;IAChD,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACzB,KAAK,IAAI,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,IAAI,IAAI,CAAA;IACjB,OAAO,IAAI,IAAI,CAAA;IACf,WAAW,IAAI,IAAI,CAAA;IACnB,KAAK,IAAI;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IACnE,KAAK,IAAI,IAAI,CAAA;CACd;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtD,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,WAAW,IAAI,MAAM,CAAA;IACrB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CACzC;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,WAAW,GAAG,aAAa,CAO3D"}