pipework 0.8.7 → 0.8.8

package/dist/context/guard.d.ts

@@ -0,0 +1,5 @@
+import type { Flow, BoundTransaction } from './types.js';
+import type { DB } from '../db/index.js';
+export declare function verifyTransactionBinding(ctx: Flow, bound: BoundTransaction, dbName: string): void;
+export declare function bindTransaction(ctx: Flow, dbName: string, drizzle: DB): BoundTransaction;
+//# sourceMappingURL=guard.d.ts.map

package/dist/context/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/context/guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AACxD,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAA;AAGxC,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,IAAI,EACT,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE,MAAM,GACb,IAAI,CAgCN;AAED,wBAAgB,eAAe,CAC7B,GAAG,EAAE,IAAI,EACT,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,EAAE,GACV,gBAAgB,CAElB"}

package/dist/context/guard.js

@@ -0,0 +1,35 @@
+import { InvariantViolation } from '../invariants/assert.js';
+export function verifyTransactionBinding(ctx, bound, dbName) {
+    if (bound.nonce !== ctx._nonce) {
+        throw new InvariantViolation('context-nonce-mismatch', {
+            message: `The transaction for database "${dbName}" was created in a different AsyncLocalStorage ` +
+                'context than the one currently active. This usually means Node.js swapped async contexts ' +
+                'between concurrent requests — a known ALS bug that can cause cross-tenant data leaks.',
+            transactionNonce: bound.nonce,
+            contextNonce: ctx._nonce,
+            database: dbName,
+            contextTenant: ctx.tenant,
+            requestId: ctx.requestId,
+        });
+    }
+    if (bound.tenant !== ctx.tenant) {
+        throw new InvariantViolation('tenant-context-mismatch', {
+            message: `The transaction for database "${dbName}" was created for tenant "${bound.tenant}" ` +
+                `but the current context has tenant "${ctx.tenant}". This indicates an AsyncLocalStorage ` +
+                'context swap that would cause writes to go to the wrong tenant.\n\n' +
+                '  In tests, use withFlow({ tenant }, fn) to run tenant-scoped code:\n\n' +
+                "    import { withFlow, asTenant } from 'pipework/test'\n\n" +
+                "    withFlow({ auth: asTenant('tenant-1'), tenant: 'tenant-1' }, async () => {\n" +
+                '      // pipe() and useTestDb() work correctly here\n' +
+                '    })',
+            transactionTenant: bound.tenant,
+            contextTenant: ctx.tenant,
+            database: dbName,
+            requestId: ctx.requestId,
+        });
+    }
+}
+export function bindTransaction(ctx, dbName, drizzle) {
+    return { drizzle, nonce: ctx._nonce, tenant: ctx.tenant };
+}
+//# sourceMappingURL=guard.js.map

package/dist/context/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/context/guard.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAE5D,MAAM,UAAU,wBAAwB,CACtC,GAAS,EACT,KAAuB,EACvB,MAAc;IAEd,IAAI,KAAK,CAAC,KAAK,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,kBAAkB,CAAC,wBAAwB,EAAE;YACrD,OAAO,EACL,iCAAiC,MAAM,iDAAiD;gBACxF,2FAA2F;gBAC3F,uFAAuF;YACzF,gBAAgB,EAAE,KAAK,CAAC,KAAK;YAC7B,YAAY,EAAE,GAAG,CAAC,MAAM;YACxB,QAAQ,EAAE,MAAM;YAChB,aAAa,EAAE,GAAG,CAAC,MAAM;YACzB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,EAAE;YACtD,OAAO,EACL,iCAAiC,MAAM,6BAA6B,KAAK,CAAC,MAAM,IAAI;gBACpF,uCAAuC,GAAG,CAAC,MAAM,yCAAyC;gBAC1F,qEAAqE;gBACrE,yEAAyE;gBACzE,4DAA4D;gBAC5D,kFAAkF;gBAClF,uDAAuD;gBACvD,QAAQ;YACV,iBAAiB,EAAE,KAAK,CAAC,MAAM;YAC/B,aAAa,EAAE,GAAG,CAAC,MAAM;YACzB,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,GAAS,EACT,MAAc,EACd,OAAW;IAEX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAA;AAC3D,CAAC"}

package/dist/context/index.d.ts

@@ -0,0 +1,5 @@
+export type { Flow, RequestMetadata, BoundTransaction } from './types.js';
+export { flowStorage, getContext, requireContext, runInContext } from './store.js';
+export { createRequestContext, createJobContext, createTestContext, type CreateRequestContextOptions, type CreateJobContextOptions } from './create.js';
+export { verifyTransactionBinding, bindTransaction } from './guard.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/context/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/context/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AACzE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAClF,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,KAAK,2BAA2B,EAAE,KAAK,uBAAuB,EAAE,MAAM,aAAa,CAAA;AACvJ,OAAO,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA"}

package/dist/context/index.js

@@ -0,0 +1,4 @@
+export { flowStorage, getContext, requireContext, runInContext } from './store.js';
+export { createRequestContext, createJobContext, createTestContext } from './create.js';
+export { verifyTransactionBinding, bindTransaction } from './guard.js';
+//# sourceMappingURL=index.js.map

package/dist/context/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/context/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAClF,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,iBAAiB,EAAkE,MAAM,aAAa,CAAA;AACvJ,OAAO,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA"}

package/dist/context/store.d.ts

@@ -0,0 +1,7 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+import type { Flow } from './types.js';
+export declare const flowStorage: AsyncLocalStorage<Flow<unknown>>;
+export declare function getContext<TAuth = unknown>(): Flow<TAuth> | undefined;
+export declare function requireContext<TAuth = unknown>(): Flow<TAuth>;
+export declare function runInContext<T>(ctx: Flow, fn: () => T): T;
+//# sourceMappingURL=store.d.ts.map

package/dist/context/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/context/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAEtC,eAAO,MAAM,WAAW,kCAAgC,CAAA;AAExD,wBAAgB,UAAU,CAAC,KAAK,GAAG,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,SAAS,CAErE;AAED,wBAAgB,cAAc,CAAC,KAAK,GAAG,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,CAU7D;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAEzD"}

package/dist/context/store.js

@@ -0,0 +1,18 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+export const flowStorage = new AsyncLocalStorage();
+export function getContext() {
+    return flowStorage.getStore();
+}
+export function requireContext() {
+    const ctx = flowStorage.getStore();
+    if (!ctx) {
+        throw new Error('[pipework] No active context. db() must be called within a request handler, job, or test.\n\n' +
+            '  Hint: If you need a connection outside of a managed context (migrations, seeds),\n' +
+            '  use instance.pool.getOrCreate(config.database("name")).drizzle instead.\n');
+    }
+    return ctx;
+}
+export function runInContext(ctx, fn) {
+    return flowStorage.run(ctx, fn);
+}
+//# sourceMappingURL=store.js.map

package/dist/context/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/context/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAGpD,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,iBAAiB,EAAQ,CAAA;AAExD,MAAM,UAAU,UAAU;IACxB,OAAO,WAAW,CAAC,QAAQ,EAA6B,CAAA;AAC1D,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,EAA6B,CAAA;IAC7D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,+FAA+F;YAC/F,sFAAsF;YACtF,6EAA6E,CAC9E,CAAA;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,YAAY,CAAI,GAAS,EAAE,EAAW;IACpD,OAAO,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACjC,CAAC"}

package/dist/context/types.d.ts

@@ -0,0 +1,28 @@
+import type { DB } from '../db/index.js';
+import type { Manifold } from '../pipework.js';
+/** A transaction bound to a specific context nonce and tenant — defense-in-depth against ALS context swaps. */
+export interface BoundTransaction {
+    readonly drizzle: DB;
+    readonly nonce: string;
+    readonly tenant: string | null;
+}
+/** The AsyncLocalStorage context — carries requestId, auth, tenant, active transactions, and a nonce for integrity checks. */
+export interface Flow<TAuth = unknown> {
+    readonly instance: Manifold;
+    readonly requestId: string;
+    readonly _nonce: string;
+    readonly auth: TAuth | null;
+    readonly tenant: string | null;
+    readonly metadata: RequestMetadata | null;
+    readonly jobType: string | null;
+    readonly transactions: Map<string, BoundTransaction>;
+}
+/** HTTP request metadata stored in a Flow — method, path, trace ID, session ID. */
+export interface RequestMetadata {
+    readonly method: string;
+    readonly path: string;
+    readonly startedAt: number;
+    readonly traceId: string;
+    readonly sessionId: string | null;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/context/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/context/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAA;AACxC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAE9C,+GAA+G;AAC/G,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAA;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B;AAED,8HAA8H;AAC9H,MAAM,WAAW,IAAI,CAAC,KAAK,GAAG,OAAO;IACnC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAA;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;CACrD;AAED,mFAAmF;AACnF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAClC"}

package/dist/context/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/context/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/context/types.ts"],"names":[],"mappings":""}

package/dist/core/errors/types.d.ts

@@ -0,0 +1,29 @@
+import { PipeworkError } from './base.js';
+export declare class NotFoundError extends PipeworkError {
+    readonly code: "NOT_FOUND";
+    readonly httpStatus: 404;
+    constructor(resource: string, details?: Record<string, unknown>);
+}
+export declare class UnauthorizedError extends PipeworkError {
+    readonly code: "UNAUTHORIZED";
+    readonly httpStatus: 401;
+    constructor(message?: string, details?: Record<string, unknown>);
+}
+export declare class ForbiddenError extends PipeworkError {
+    readonly code: "FORBIDDEN";
+    readonly httpStatus: 403;
+    constructor(message?: string, details?: Record<string, unknown>);
+}
+export declare class ValidationError extends PipeworkError {
+    readonly code: "VALIDATION_ERROR";
+    readonly httpStatus: 422;
+    readonly fieldErrors: Readonly<Record<string, readonly string[]>>;
+    constructor(message: string);
+    constructor(fieldErrors: Record<string, string[]>, message?: string);
+}
+export declare class ConflictError extends PipeworkError {
+    readonly code: "CONFLICT";
+    readonly httpStatus: 409;
+    constructor(message: string, details?: Record<string, unknown>);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/errors/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/errors/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAEzC,qBAAa,aAAc,SAAQ,aAAa;IAC9C,QAAQ,CAAC,IAAI,EAAG,WAAW,CAAS;IACpC,QAAQ,CAAC,UAAU,EAAG,GAAG,CAAS;gBAEtB,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAGpE;AAED,qBAAa,iBAAkB,SAAQ,aAAa;IAClD,QAAQ,CAAC,IAAI,EAAG,cAAc,CAAS;IACvC,QAAQ,CAAC,UAAU,EAAG,GAAG,CAAS;gBAEtB,OAAO,GAAE,MAAkC,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAG/F;AAED,qBAAa,cAAe,SAAQ,aAAa;IAC/C,QAAQ,CAAC,IAAI,EAAG,WAAW,CAAS;IACpC,QAAQ,CAAC,UAAU,EAAG,GAAG,CAAS;gBAEtB,OAAO,GAAE,MAAmC,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAGhG;AAED,qBAAa,eAAgB,SAAQ,aAAa;IAChD,QAAQ,CAAC,IAAI,EAAG,kBAAkB,CAAS;IAC3C,QAAQ,CAAC,UAAU,EAAG,GAAG,CAAS;IAClC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAA;gBAErD,OAAO,EAAE,MAAM;gBACf,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,MAAM;CAWpE;AAED,qBAAa,aAAc,SAAQ,aAAa;IAC9C,QAAQ,CAAC,IAAI,EAAG,UAAU,CAAS;IACnC,QAAQ,CAAC,UAAU,EAAG,GAAG,CAAS;gBAEtB,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAGnE"}

package/dist/core/errors/types.js

@@ -0,0 +1,46 @@
+import { PipeworkError } from './base.js';
+export class NotFoundError extends PipeworkError {
+    code = 'NOT_FOUND';
+    httpStatus = 404;
+    constructor(resource, details = {}) {
+        super(`${resource} not found`, details);
+    }
+}
+export class UnauthorizedError extends PipeworkError {
+    code = 'UNAUTHORIZED';
+    httpStatus = 401;
+    constructor(message = 'Authentication required', details = {}) {
+        super(message, details);
+    }
+}
+export class ForbiddenError extends PipeworkError {
+    code = 'FORBIDDEN';
+    httpStatus = 403;
+    constructor(message = 'Insufficient permissions', details = {}) {
+        super(message, details);
+    }
+}
+export class ValidationError extends PipeworkError {
+    code = 'VALIDATION_ERROR';
+    httpStatus = 422;
+    fieldErrors;
+    constructor(fieldErrorsOrMessage, message) {
+        if (typeof fieldErrorsOrMessage === 'string') {
+            super(fieldErrorsOrMessage, { fieldErrors: {} });
+            this.fieldErrors = {};
+        }
+        else {
+            const msg = message ?? 'Invalid input';
+            super(msg, { fieldErrors: fieldErrorsOrMessage });
+            this.fieldErrors = fieldErrorsOrMessage;
+        }
+    }
+}
+export class ConflictError extends PipeworkError {
+    code = 'CONFLICT';
+    httpStatus = 409;
+    constructor(message, details = {}) {
+        super(message, details);
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/core/errors/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/errors/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAEzC,MAAM,OAAO,aAAc,SAAQ,aAAa;IACrC,IAAI,GAAG,WAAoB,CAAA;IAC3B,UAAU,GAAG,GAAY,CAAA;IAElC,YAAY,QAAgB,EAAE,UAAmC,EAAE;QACjE,KAAK,CAAC,GAAG,QAAQ,YAAY,EAAE,OAAO,CAAC,CAAA;IACzC,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,aAAa;IACzC,IAAI,GAAG,cAAuB,CAAA;IAC9B,UAAU,GAAG,GAAY,CAAA;IAElC,YAAY,UAAkB,yBAAyB,EAAE,UAAmC,EAAE;QAC5F,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACzB,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,aAAa;IACtC,IAAI,GAAG,WAAoB,CAAA;IAC3B,UAAU,GAAG,GAAY,CAAA;IAElC,YAAY,UAAkB,0BAA0B,EAAE,UAAmC,EAAE;QAC7F,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACzB,CAAC;CACF;AAED,MAAM,OAAO,eAAgB,SAAQ,aAAa;IACvC,IAAI,GAAG,kBAA2B,CAAA;IAClC,UAAU,GAAG,GAAY,CAAA;IACzB,WAAW,CAA6C;IAIjE,YAAY,oBAAuD,EAAE,OAAgB;QACnF,IAAI,OAAO,oBAAoB,KAAK,QAAQ,EAAE,CAAC;YAC7C,KAAK,CAAC,oBAAoB,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAA;YAChD,IAAI,CAAC,WAAW,GAAG,EAAE,CAAA;QACvB,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,OAAO,IAAI,eAAe,CAAA;YACtC,KAAK,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,CAAA;YACjD,IAAI,CAAC,WAAW,GAAG,oBAAoB,CAAA;QACzC,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,aAAa;IACrC,IAAI,GAAG,UAAmB,CAAA;IAC1B,UAAU,GAAG,GAAY,CAAA;IAElC,YAAY,OAAe,EAAE,UAAmC,EAAE;QAChE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACzB,CAAC;CACF"}

package/dist/core/log/namespace.d.ts

@@ -0,0 +1,15 @@
+import { createPipeworkLogger, getLogger, getBaseLogger, setLoggingConfig } from '../logging/logger.js';
+/** Structured logger (Pino) — auto-binds requestId, tenantId, userId, sessionId from ALS context on every log call. */
+export declare const log: import("../logging/types.js").LogNamespace & {
+    /** Creates a new PipeworkLogger instance with custom config (level, redaction, transport). */
+    create: typeof createPipeworkLogger;
+    /** Returns the context-aware logger proxy (same as the log export itself). */
+    get: typeof getLogger;
+    /** Returns the raw Pino logger without ALS context binding. */
+    getBase: typeof getBaseLogger;
+    /** Sets global logging config (level, redaction paths, custom context fields). */
+    configure: typeof setLoggingConfig;
+    /** Default redaction paths — password, secret, token, authorization, cookie, etc. */
+    REDACT_PATHS: readonly string[];
+};
+//# sourceMappingURL=namespace.d.ts.map

package/dist/core/log/namespace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.d.ts","sourceRoot":"","sources":["../../../src/core/log/namespace.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,aAAa,EAAE,gBAAgB,EAAwB,MAAM,sBAAsB,CAAA;AAE7H,uHAAuH;AACvH,eAAO,MAAM,GAAG;IACd,8FAA8F;;IAE9F,8EAA8E;;IAE9E,+DAA+D;;IAE/D,kFAAkF;;IAElF,qFAAqF;;CAErF,CAAA"}

package/dist/core/log/namespace.js

@@ -0,0 +1,16 @@
+import { log as logProxy } from '../logging/proxy.js';
+import { createPipeworkLogger, getLogger, getBaseLogger, setLoggingConfig, DEFAULT_REDACT_PATHS } from '../logging/logger.js';
+/** Structured logger (Pino) — auto-binds requestId, tenantId, userId, sessionId from ALS context on every log call. */
+export const log = Object.assign(logProxy, {
+    /** Creates a new PipeworkLogger instance with custom config (level, redaction, transport). */
+    create: createPipeworkLogger,
+    /** Returns the context-aware logger proxy (same as the log export itself). */
+    get: getLogger,
+    /** Returns the raw Pino logger without ALS context binding. */
+    getBase: getBaseLogger,
+    /** Sets global logging config (level, redaction paths, custom context fields). */
+    configure: setLoggingConfig,
+    /** Default redaction paths — password, secret, token, authorization, cookie, etc. */
+    REDACT_PATHS: DEFAULT_REDACT_PATHS,
+});
+//# sourceMappingURL=namespace.js.map

package/dist/core/log/namespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.js","sourceRoot":"","sources":["../../../src/core/log/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,IAAI,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,aAAa,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAE7H,uHAAuH;AACvH,MAAM,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE;IACzC,8FAA8F;IAC9F,MAAM,EAAE,oBAAoB;IAC5B,8EAA8E;IAC9E,GAAG,EAAE,SAAS;IACd,+DAA+D;IAC/D,OAAO,EAAE,aAAa;IACtB,kFAAkF;IAClF,SAAS,EAAE,gBAAgB;IAC3B,qFAAqF;IACrF,YAAY,EAAE,oBAAoB;CACnC,CAAC,CAAA"}

package/dist/core/validation/doctrine.d.ts

@@ -0,0 +1,13 @@
+export interface DoctrineViolation {
+    readonly rule: string;
+    readonly file: string;
+    readonly line: number;
+    readonly message: string;
+}
+export interface DoctrineResult {
+    readonly violations: readonly DoctrineViolation[];
+    readonly scanned: number;
+}
+export declare function validateDoctrine(cwd: string, sourceFiles: readonly string[]): DoctrineResult;
+export declare function findSourceFiles(cwd: string, modulePaths: readonly string[]): string[];
+//# sourceMappingURL=doctrine.d.ts.map

package/dist/core/validation/doctrine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctrine.d.ts","sourceRoot":"","sources":["../../../src/core/validation/doctrine.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAA;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,cAAc,CAmB5F;AAiGD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAUrF"}

package/dist/core/validation/doctrine.js

@@ -0,0 +1,115 @@
+import { readFileSync, existsSync, readdirSync } from 'node:fs';
+import { join, relative } from 'node:path';
+export function validateDoctrine(cwd, sourceFiles) {
+    const violations = [];
+    let scanned = 0;
+    for (const file of sourceFiles) {
+        const abs = join(cwd, file);
+        if (!existsSync(abs))
+            continue;
+        const content = readFileSync(abs, 'utf-8');
+        const lines = content.split('\n');
+        scanned++;
+        checkSchemaTableUsage(file, lines, violations);
+        checkRawPgTableImport(file, lines, violations);
+        checkUnbrandedPrimaryKeys(file, lines, violations);
+        checkHandWrittenTraitFields(file, lines, violations);
+    }
+    return { violations, scanned };
+}
+const SCHEMA_TABLE_PATTERN = /\bschema\.table\s*\(/;
+const PIPE_DEFINE_FILE_PATTERN = /\bpipe\.define\s*\(/;
+function checkSchemaTableUsage(file, lines, violations) {
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        if (SCHEMA_TABLE_PATTERN.test(line)) {
+            violations.push({
+                rule: 'define/prefer-pipe-define',
+                file,
+                line: i + 1,
+                message: 'Use pipe.define() instead of schema.table(). pipe.define() provides branded types, shape validators, test factories, and tenant isolation.',
+            });
+        }
+    }
+}
+const RAW_PG_TABLE_IMPORT_LINE = /import\s+.*\bpgTable\b.*from\s+/;
+function checkRawPgTableImport(file, lines, violations) {
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        if (RAW_PG_TABLE_IMPORT_LINE.test(line)) {
+            violations.push({
+                rule: 'define/no-raw-pgTable',
+                file,
+                line: i + 1,
+                message: 'Raw pgTable() import — use pipe.define() instead. pipe.define() returns a DefinedTable that IS a PgTable, with branded types that flow through select().from() and eq().',
+            });
+        }
+    }
+}
+const PRIMARY_KEY_PATTERN = /\.primaryKey\(\)/;
+const BRAND_PATTERN = /\.brand\(/;
+const PIPE_FIELD_UUID_PATTERN = /pipe\.field\.(uuid|serial)\(\)/;
+function checkUnbrandedPrimaryKeys(file, lines, violations) {
+    if (!lines.some(l => PIPE_DEFINE_FILE_PATTERN.test(l)))
+        return;
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        if (PIPE_FIELD_UUID_PATTERN.test(line) && PRIMARY_KEY_PATTERN.test(line) && !BRAND_PATTERN.test(line)) {
+            violations.push({
+                rule: 'define/brand-primary-key',
+                file,
+                line: i + 1,
+                message: 'Primary key field missing .brand(). Add .brand(\'EntityNameId\') for nominal type safety.',
+            });
+        }
+    }
+}
+const TRAIT_FIELD_PATTERNS = [
+    { pattern: /\bcreatedAt\s*:\s*pipe\.field\.timestamp\(\)/, trait: '.audited()', field: 'createdAt' },
+    { pattern: /\bupdatedAt\s*:\s*pipe\.field\.timestamp\(\)/, trait: '.audited()', field: 'updatedAt' },
+    { pattern: /\beffectiveFrom\s*:\s*pipe\.field\.timestamp\(\)/, trait: '.effectiveDated()', field: 'effectiveFrom' },
+    { pattern: /\beffectiveTo\s*:\s*pipe\.field\.timestamp\(\)/, trait: '.effectiveDated()', field: 'effectiveTo' },
+    { pattern: /\bdeletedAt\s*:\s*pipe\.field\.timestamp\(\)/, trait: '.softDeleted()', field: 'deletedAt' },
+];
+function checkHandWrittenTraitFields(file, lines, violations) {
+    if (!lines.some(l => PIPE_DEFINE_FILE_PATTERN.test(l)))
+        return;
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const { pattern, trait, field } of TRAIT_FIELD_PATTERNS) {
+            if (pattern.test(line)) {
+                violations.push({
+                    rule: 'define/use-traits',
+                    file,
+                    line: i + 1,
+                    message: `Hand-written '${field}' field — use ${trait} trait instead. Traits are auto-managed and excluded from insert/update shapes.`,
+                });
+            }
+        }
+    }
+}
+export function findSourceFiles(cwd, modulePaths) {
+    const files = [];
+    for (const modPath of modulePaths) {
+        const srcDir = join(cwd, modPath, 'src');
+        if (!existsSync(srcDir))
+            continue;
+        collectTsFiles(srcDir, cwd, files);
+    }
+    return files.sort();
+}
+function collectTsFiles(dir, cwd, out) {
+    const entries = readdirSync(dir, { withFileTypes: true });
+    for (const entry of entries) {
+        const full = join(dir, entry.name);
+        if (entry.isDirectory()) {
+            if (entry.name === 'node_modules' || entry.name === 'dist' || entry.name === '__tests__')
+                continue;
+            collectTsFiles(full, cwd, out);
+        }
+        else if (entry.name.endsWith('.ts') && !entry.name.endsWith('.test.ts') && !entry.name.endsWith('.d.ts')) {
+            out.push(relative(cwd, full));
+        }
+    }
+}
+//# sourceMappingURL=doctrine.js.map

package/dist/core/validation/doctrine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctrine.js","sourceRoot":"","sources":["../../../src/core/validation/doctrine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAC/D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAc1C,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,WAA8B;IAC1E,MAAM,UAAU,GAAwB,EAAE,CAAA;IAC1C,IAAI,OAAO,GAAG,CAAC,CAAA;IAEf,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC3B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAE9B,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACjC,OAAO,EAAE,CAAA;QAET,qBAAqB,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;QAC9C,qBAAqB,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;QAC9C,yBAAyB,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;QAClD,2BAA2B,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;IACtD,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;AAChC,CAAC;AAED,MAAM,oBAAoB,GAAG,sBAAsB,CAAA;AACnD,MAAM,wBAAwB,GAAG,qBAAqB,CAAA;AAEtD,SAAS,qBAAqB,CAC5B,IAAY,EACZ,KAAwB,EACxB,UAA+B;IAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;QACtB,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,2BAA2B;gBACjC,IAAI;gBACJ,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,OAAO,EAAE,4IAA4I;aACtJ,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,wBAAwB,GAAG,iCAAiC,CAAA;AAElE,SAAS,qBAAqB,CAC5B,IAAY,EACZ,KAAwB,EACxB,UAA+B;IAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;QACtB,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,uBAAuB;gBAC7B,IAAI;gBACJ,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,OAAO,EAAE,0KAA0K;aACpL,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,mBAAmB,GAAG,kBAAkB,CAAA;AAC9C,MAAM,aAAa,GAAG,WAAW,CAAA;AACjC,MAAM,uBAAuB,GAAG,gCAAgC,CAAA;AAEhE,SAAS,yBAAyB,CAChC,IAAY,EACZ,KAAwB,EACxB,UAA+B;IAE/B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAM;IAE9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;QACtB,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtG,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,0BAA0B;gBAChC,IAAI;gBACJ,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,OAAO,EAAE,2FAA2F;aACrG,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,oBAAoB,GAAqE;IAC7F,EAAE,OAAO,EAAE,8CAA8C,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE;IACpG,EAAE,OAAO,EAAE,8CAA8C,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE;IACpG,EAAE,OAAO,EAAE,kDAAkD,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,eAAe,EAAE;IACnH,EAAE,OAAO,EAAE,gDAAgD,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,aAAa,EAAE;IAC/G,EAAE,OAAO,EAAE,8CAA8C,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,EAAE;CACzG,CAAA;AAED,SAAS,2BAA2B,CAClC,IAAY,EACZ,KAAwB,EACxB,UAA+B;IAE/B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAM;IAE9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;QACtB,KAAK,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,oBAAoB,EAAE,CAAC;YAC7D,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,mBAAmB;oBACzB,IAAI;oBACJ,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,OAAO,EAAE,iBAAiB,KAAK,iBAAiB,KAAK,iFAAiF;iBACvI,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,WAA8B;IACzE,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;QACxC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,SAAQ;QACjC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;IACpC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,EAAE,CAAA;AACrB,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,GAAW,EAAE,GAAa;IAC7D,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;IAEzD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAClC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,SAAQ;YAClG,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;QAChC,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3G,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAA;QAC/B,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/data/db/context.d.ts

@@ -0,0 +1,4 @@
+export type { Flow } from '../../request/context/types.js';
+export { flowStorage as flowContext, getContext, requireContext, runInContext } from '../../request/context/store.js';
+export { createTestContext as createContext } from '../../request/context/create.js';
+//# sourceMappingURL=context.d.ts.map

package/dist/data/db/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../src/data/db/context.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,IAAI,EAAE,MAAM,gCAAgC,CAAA;AAC1D,OAAO,EAAE,WAAW,IAAI,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AACrH,OAAO,EAAE,iBAAiB,IAAI,aAAa,EAAE,MAAM,iCAAiC,CAAA"}

package/dist/data/db/context.js

@@ -0,0 +1,3 @@
+export { flowStorage as flowContext, getContext, requireContext, runInContext } from '../../request/context/store.js';
+export { createTestContext as createContext } from '../../request/context/create.js';
+//# sourceMappingURL=context.js.map

package/dist/data/db/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../src/data/db/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,IAAI,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AACrH,OAAO,EAAE,iBAAiB,IAAI,aAAa,EAAE,MAAM,iCAAiC,CAAA"}

package/dist/data/domain/project-factory.d.ts

@@ -0,0 +1,4 @@
+import type { DefinedTable, FactoryBuilder } from './types.js';
+export declare function projectFactory(definition: DefinedTable<any>): FactoryBuilder;
+export declare function resetFactoryCounter(): void;
+//# sourceMappingURL=project-factory.d.ts.map

package/dist/data/domain/project-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-factory.d.ts","sourceRoot":"","sources":["../../../src/data/domain/project-factory.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAA6B,MAAM,YAAY,CAAA;AAIzF,wBAAgB,cAAc,CAAC,UAAU,EAAE,YAAY,CAAC,GAAG,CAAC,GAAG,cAAc,CAyB5E;AA0ED,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C"}

package/dist/data/domain/project-factory.js

@@ -0,0 +1,138 @@
+import { randomUUID } from 'node:crypto';
+import { getContext } from '../../request/context/store.js';
+// eslint-disable-next-line @typescript-eslint/no-explicit-any -- accepts any DefinedTable regardless of field generics
+export function projectFactory(definition) {
+    return {
+        async create(overrides, options) {
+            const values = await buildValues(definition, overrides ?? {}, options);
+            if (definition.$options.virtual === true) {
+                return values;
+            }
+            const db = resolveDb(definition, options);
+            const table = definition.table();
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any -- Drizzle insert requires runtime table type
+            const [row] = await db.insert(table).values(values).returning();
+            return row;
+        },
+        async createMany(count, overrides, options) {
+            const rows = [];
+            for (let i = 0; i < count; i++) {
+                const ov = typeof overrides === 'function' ? overrides(i) : (overrides ?? {});
+                rows.push(await this.create(ov, options));
+            }
+            return rows;
+        },
+    };
+}
+function resolveDb(definition, options) {
+    if (options?.db !== undefined) {
+        return options.db;
+    }
+    const ctx = getContext();
+    if (ctx === undefined) {
+        throw new Error(`[pipework] .factory().create() requires an active context or explicit { db } option.\n\n` +
+            '  In a test body: ensure you have test isolation set up (pipework wraps each test in a flow context).\n' +
+            '  In beforeAll: pass { db: useSetupDb() } as the options argument.\n');
+    }
+    const dbName = definition.$options.database ?? ctx.instance.config.defaultDatabaseName();
+    const dbConfig = ctx.instance.config.database(dbName);
+    const bound = ctx.transactions.get(dbName);
+    if (bound !== undefined) {
+        return bound.drizzle;
+    }
+    return ctx.instance.pool.getOrCreate(dbConfig).drizzle;
+}
+async function buildValues(definition, overrides, options) {
+    const values = {};
+    for (const [key, descriptor] of Object.entries(definition.$fields)) {
+        const meta = descriptor._meta;
+        if (key in overrides) {
+            values[key] = overrides[key];
+            continue;
+        }
+        if (meta.primaryKey && meta.defaultRandom)
+            continue;
+        if (meta.hasDefault)
+            continue;
+        if (meta.nullable)
+            continue;
+        if (meta.tenant) {
+            values[key] = resolveTenantId(options);
+            continue;
+        }
+        if (meta.reference !== undefined) {
+            const parent = await meta.reference.definition.factory().create(undefined, options);
+            values[key] = parent[meta.reference.field];
+            continue;
+        }
+        values[key] = generateDefault(key, meta);
+    }
+    return values;
+}
+function resolveTenantId(options) {
+    if (options?.tenantId !== undefined)
+        return options.tenantId;
+    const ctx = getContext();
+    if (ctx?.tenant !== undefined && ctx.tenant !== null)
+        return ctx.tenant;
+    return randomUUID();
+}
+let _counter = 0;
+export function resetFactoryCounter() {
+    _counter = 0;
+}
+function generateDefault(key, meta) {
+    switch (meta.kind) {
+        case 'uuid':
+            return randomUUID();
+        case 'text': {
+            const suffix = String(++_counter);
+            if (meta.email)
+                return `${key}_${suffix}@test.example`;
+            if (meta.url)
+                return `https://test.example/${key}/${suffix}`;
+            let text = `${key}_${suffix}`;
+            if (meta.min !== undefined && text.length < meta.min) {
+                text = text.padEnd(meta.min, 'x');
+            }
+            if (meta.max !== undefined && text.length > meta.max) {
+                text = text.substring(0, meta.max);
+            }
+            return text;
+        }
+        case 'integer':
+        case 'serial': {
+            if (meta.min !== undefined)
+                return meta.min;
+            if (meta.max !== undefined)
+                return Math.min(0, meta.max);
+            return 0;
+        }
+        case 'bigint': {
+            if (meta.serializedAs === 'string')
+                return String(meta.min ?? 0);
+            return BigInt(meta.min ?? 0);
+        }
+        case 'boolean':
+            return false;
+        case 'timestamp':
+            return new Date().toISOString();
+        case 'enum': {
+            if (meta.enumValues === undefined || meta.enumValues.length === 0) {
+                throw new Error(`[pipework] Cannot generate default for enum field "${key}" — no values defined`);
+            }
+            return meta.enumValues[0];
+        }
+        case 'jsonb':
+            return {};
+        case 'decimal':
+            return '0';
+        case 'custom':
+            throw new Error(`[pipework] Cannot generate default for custom field "${key}".\n\n` +
+                '  Custom fields require an explicit override or .default() value.\n' +
+                `  Pass { ${key}: <value> } to .factory().create().\n`);
+        default:
+            throw new Error(`[pipework] Unknown field kind: ${meta.kind}`);
+    }
+}
+//# sourceMappingURL=project-factory.js.map

package/dist/data/domain/project-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-factory.js","sourceRoot":"","sources":["../../../src/data/domain/project-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAGxC,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAE3D,uHAAuH;AACvH,MAAM,UAAU,cAAc,CAAC,UAA6B;IAC1D,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO;YAC7B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,SAAS,IAAI,EAAE,EAAE,OAAO,CAAC,CAAA;YAEtE,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBACzC,OAAO,MAAM,CAAA;YACf,CAAC;YAED,MAAM,EAAE,GAAG,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;YACzC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,CAAA;YAChC,4GAA4G;YAC5G,MAAM,CAAC,GAAG,CAAC,GAAG,MAAO,EAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAA;YACxE,OAAO,GAA8B,CAAA;QACvC,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO;YACxC,MAAM,IAAI,GAA8B,EAAE,CAAA;YAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC/B,MAAM,EAAE,GAAG,OAAO,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;gBAC7E,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAA;YAC3C,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAA;AACH,CAAC;AAED,SAAS,SAAS,CAAC,UAAwB,EAAE,OAAwB;IACnE,IAAI,OAAO,EAAE,EAAE,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC,EAAQ,CAAA;IACzB,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,EAAE,CAAA;IACxB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,0FAA0F;YAC1F,yGAAyG;YACzG,sEAAsE,CACvE,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAA;IACxF,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAErD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC1C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC,OAAO,CAAA;IACtB,CAAC;IAED,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAA;AACxD,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,UAAwB,EACxB,SAA2C,EAC3C,OAAwB;IAExB,MAAM,MAAM,GAA4B,EAAE,CAAA;IAE1C,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAA;QAE7B,IAAI,GAAG,IAAI,SAAS,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;YAC5B,SAAQ;QACV,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,aAAa;YAAE,SAAQ;QACnD,IAAI,IAAI,CAAC,UAAU;YAAE,SAAQ;QAC7B,IAAI,IAAI,CAAC,QAAQ;YAAE,SAAQ;QAE3B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;YACtC,SAAQ;QACV,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;YACnF,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YAC1C,SAAQ;QACV,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAC1C,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,eAAe,CAAC,OAAwB;IAC/C,IAAI,OAAO,EAAE,QAAQ,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAA;IAE5D,MAAM,GAAG,GAAG,UAAU,EAAE,CAAA;IACxB,IAAI,GAAG,EAAE,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC,MAAM,CAAA;IAEvE,OAAO,UAAU,EAAE,CAAA;AACrB,CAAC;AAED,IAAI,QAAQ,GAAG,CAAC,CAAA;AAEhB,MAAM,UAAU,mBAAmB;IACjC,QAAQ,GAAG,CAAC,CAAA;AACd,CAAC;AAED,SAAS,eAAe,CAAC,GAAW,EAAE,IAAe;IACnD,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,MAAM;YACT,OAAO,UAAU,EAAE,CAAA;QAErB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAA;YACjC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,GAAG,GAAG,IAAI,MAAM,eAAe,CAAA;YACtD,IAAI,IAAI,CAAC,GAAG;gBAAE,OAAO,wBAAwB,GAAG,IAAI,MAAM,EAAE,CAAA;YAC5D,IAAI,IAAI,GAAG,GAAG,GAAG,IAAI,MAAM,EAAE,CAAA;YAC7B,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACrD,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YACnC,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACrD,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;YACpC,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAA;YAC3C,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;YACxD,OAAO,CAAC,CAAA;QACV,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,IAAI,CAAC,YAAY,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;YAChE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;QAC9B,CAAC;QAED,KAAK,SAAS;YACZ,OAAO,KAAK,CAAA;QAEd,KAAK,WAAW;YACd,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAEjC,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClE,MAAM,IAAI,KAAK,CAAC,sDAAsD,GAAG,uBAAuB,CAAC,CAAA;YACnG,CAAC;YACD,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QAC3B,CAAC;QAED,KAAK,OAAO;YACV,OAAO,EAAE,CAAA;QAEX,KAAK,SAAS;YACZ,OAAO,GAAG,CAAA;QAEZ,KAAK,QAAQ;YACX,MAAM,IAAI,KAAK,CACb,wDAAwD,GAAG,QAAQ;gBACnE,qEAAqE;gBACrE,YAAY,GAAG,uCAAuC,CACvD,CAAA;QAEH;YACE,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,IAAc,EAAE,CAAC,CAAA;IAC5E,CAAC;AACH,CAAC"}

package/dist/data/domain/project-schema.d.ts

@@ -0,0 +1,6 @@
+import { z } from 'zod/v4';
+import type { FieldDescriptor } from './types.js';
+export declare function projectInsertShape(fields: Record<string, FieldDescriptor>): z.ZodType;
+export declare function projectSelectShape(fields: Record<string, FieldDescriptor>): z.ZodType;
+export declare function projectUpdateShape(fields: Record<string, FieldDescriptor>): z.ZodType;
+//# sourceMappingURL=project-schema.d.ts.map

package/dist/data/domain/project-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-schema.d.ts","sourceRoot":"","sources":["../../../src/data/domain/project-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAA;AAC1B,OAAO,KAAK,EAAE,eAAe,EAAa,MAAM,YAAY,CAAA;AAE5D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,CAmBrF;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,CAerF;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,CAoBrF"}