@agent-native/core 0.47.1 → 0.48.2

package/dist/db/migrations.js

@@ -1,4 +1,44 @@
 import { getDbExec, createDbExec, isPostgres, getDialect, getMigrationDatabaseUrl, retrySqliteBusy, } from "./client.js";
+// ---------------------------------------------------------------------------
+// Shared direct-endpoint exec across concurrent migration runners per boot.
+//
+// On each serverless cold start THREE plugins call runMigrations (core,
+// org, context-xray). Without coordination each would open an independent
+// direct-endpoint Neon connection AND leave it idle for ~10 s after
+// migrations finish. We avoid that by sharing a single direct exec for
+// the duration of the migration window: the first caller opens it,
+// subsequent callers reuse the same promise, and the last caller closes it
+// via reference-counting. The exec is nulled out after the window so a
+// second cold start (e.g. after a Lambda thaw) gets a fresh connection.
+// ---------------------------------------------------------------------------
+let _migrationExecPromise = null;
+let _migrationExecRefCount = 0;
+async function acquireMigrationExec() {
+    if (!_migrationExecPromise) {
+        _migrationExecPromise = createDbExec({ url: getMigrationDatabaseUrl() });
+    }
+    _migrationExecRefCount++;
+    return _migrationExecPromise;
+}
+async function releaseMigrationExec() {
+    _migrationExecRefCount--;
+    if (_migrationExecRefCount > 0)
+        return;
+    // Last caller — close and reset so next boot gets a fresh connection.
+    const execPromise = _migrationExecPromise;
+    _migrationExecPromise = null;
+    _migrationExecRefCount = 0;
+    if (!execPromise)
+        return;
+    try {
+        const exec = await execPromise;
+        await exec.close?.();
+    }
+    catch {
+        // Swallow close errors — the migrations themselves already succeeded or
+        // failed; a cleanup error should not surface as a boot crash.
+    }
+}
 /**
  * Rewrite SQLite-specific SQL to Postgres-compatible equivalents.
  * Handles: datetime('now') → CURRENT_TIMESTAMP, AUTOINCREMENT → GENERATED, etc.
@@ -190,81 +230,133 @@ export function runMigrations(migrations, options) {
             }
             // Generic path — works for libsql and Postgres
             const pg = isPostgres();
-            // For Postgres migrations, use a dedicated exec pointed at the DIRECT
-            // (non-pooler) endpoint. Neon's PgBouncer pooler runs in transaction mode and
-            // can deny DDL (`ALTER TABLE … ADD COLUMN`) even for the table-owner role.
-            // createDbExec() creates a fresh, non-singleton connection for this purpose.
-            // For non-Neon and already-direct URLs, getMigrationDatabaseUrl() is a no-op.
-            const exec = pg
-                ? await createDbExec({ url: getMigrationDatabaseUrl() })
-                : getDbExec();
-            // Retry initial table creation — SQLITE_BUSY_RECOVERY can occur on HMR
-            // restarts when WAL files from the previous process haven't been released yet.
-            await retrySqliteBusy(() => exec.execute(`CREATE TABLE IF NOT EXISTS ${table} (version INTEGER PRIMARY KEY)`), { maxAttempts: 6, baseDelayMs: 1000, rethrow: true });
-            const { rows } = await exec.execute(`SELECT MAX(version) as v FROM ${table}`);
-            const current = rows[0]?.v ?? 0;
-            const insertSql = pg
-                ? `INSERT INTO ${table} VALUES (?) ON CONFLICT DO NOTHING`
-                : `INSERT OR IGNORE INTO ${table} VALUES (?)`;
-            const pending = migrations.filter((m) => m.version > current);
-            if (pending.length > 0) {
-                console.log(`[db] Applying ${pending.length} migration(s) on ${pg ? "Postgres" : "SQLite/libsql"}…`);
+            // ---------------------------------------------------------------------------
+            // Fast-path: read migration state through the regular pooled singleton before
+            // opening the direct-endpoint connection.
+            //
+            // On Postgres every cold start previously opened a fresh direct-endpoint Neon
+            // connection (bypassing PgBouncer, which is needed only for DDL), ran
+            // CREATE TABLE IF NOT EXISTS + SELECT MAX(version) even with zero pending
+            // migrations, and never closed the pool — it idled for ~10 s. Three runners
+            // (core, org, context-xray) did this independently per boot.
+            //
+            // Now: use the pooled singleton (getDbExec) for the bookkeeping SELECT. If
+            // the migrations table does not yet exist we treat it as "all migrations
+            // pending" (current = -1). Only when there are pending migrations do we open
+            // the direct-endpoint exec (DDL is the only thing Neon's PgBouncer blocks —
+            // documented at getMigrationDatabaseUrl). The direct exec is shared across
+            // concurrent runners via acquireMigrationExec() and closed after the last
+            // caller via releaseMigrationExec().
+            // ---------------------------------------------------------------------------
+            let current = -1; // sentinel: "table missing" → treat all as pending
+            if (pg) {
+                try {
+                    const { rows } = await getDbExec().execute(`SELECT MAX(version) as v FROM ${table}`);
+                    current = rows[0]?.v ?? 0;
+                }
+                catch {
+                    // Table doesn't exist yet — leave current = -1 so all migrations apply.
+                }
+            }
+            // For SQLite we still use getDbExec() as exec throughout (no pooler concern).
+            // For Postgres we only open the direct exec when there are pending migrations.
+            const pendingFast = pg
+                ? migrations.filter((m) => m.version > current)
+                : null; // SQLite: compute after table creation below
+            // Short-circuit: Postgres with nothing to do — skip the direct connection entirely.
+            if (pg && pendingFast !== null && pendingFast.length === 0) {
+                return;
             }
-            for (const m of pending) {
-                const raw = resolveMigrationSql(m.sql, pg);
-                if (raw == null) {
-                    // Dialect-gated migration with no SQL for this dialect; still mark
-                    // as applied so we don't retry forever.
-                    await exec.execute({ sql: insertSql, args: [m.version] });
-                    continue;
+            // Acquire the exec appropriate for the dialect.
+            // For Postgres: the shared direct-endpoint exec (DDL-safe, closed on release).
+            // For SQLite/libsql: the singleton pooled exec (no pooler concern).
+            const exec = pg ? await acquireMigrationExec() : getDbExec();
+            try {
+                // Retry initial table creation — SQLITE_BUSY_RECOVERY can occur on HMR
+                // restarts when WAL files from the previous process haven't been released yet.
+                await retrySqliteBusy(() => exec.execute(`CREATE TABLE IF NOT EXISTS ${table} (version INTEGER PRIMARY KEY)`), { maxAttempts: 6, baseDelayMs: 1000, rethrow: true });
+                // For Postgres, current was already set by the fast-path SELECT above.
+                // For SQLite we run the SELECT now (via the same exec, which is the singleton).
+                if (!pg) {
+                    const { rows } = await exec.execute(`SELECT MAX(version) as v FROM ${table}`);
+                    current = rows[0]?.v ?? 0;
                 }
-                // Split BEFORE adapting so we can remember which original statements
-                // carried `ADD COLUMN IF NOT EXISTS` — SQLite drops the clause, so we
-                // emulate the idempotent semantic by swallowing duplicate-column
-                // errors only for those statements.
-                const originalStatements = splitSqlStatements(raw);
-                const statements = originalStatements.map((orig) => ({
-                    sql: pg ? adaptSqlForPostgres(orig) : adaptSqlForSqlite(orig),
-                    hadIfNotExists: IF_NOT_EXISTS_ADD_COLUMN_RE.test(orig),
-                }));
-                let currentStmt = "";
-                try {
-                    for (const { sql: stmt, hadIfNotExists } of statements) {
-                        currentStmt = stmt;
-                        try {
-                            await exec.execute(stmt);
-                        }
-                        catch (err) {
-                            if (!pg && hadIfNotExists && isDuplicateColumnError(err)) {
-                                // IF NOT EXISTS semantic: column already present, skip.
-                                continue;
+                else if (current === -1) {
+                    // Fast-path read failed (table was absent on the pooler): re-read via the
+                    // direct exec now that CREATE TABLE IF NOT EXISTS has ensured it exists.
+                    const { rows } = await exec.execute(`SELECT MAX(version) as v FROM ${table}`);
+                    current = rows[0]?.v ?? 0;
+                }
+                const insertSql = pg
+                    ? `INSERT INTO ${table} VALUES (?) ON CONFLICT DO NOTHING`
+                    : `INSERT OR IGNORE INTO ${table} VALUES (?)`;
+                const pending = migrations.filter((m) => m.version > current);
+                if (pending.length > 0) {
+                    console.log(`[db] Applying ${pending.length} migration(s) on ${pg ? "Postgres" : "SQLite/libsql"}…`);
+                }
+                for (const m of pending) {
+                    const raw = resolveMigrationSql(m.sql, pg);
+                    if (raw == null) {
+                        // Dialect-gated migration with no SQL for this dialect; still mark
+                        // as applied so we don't retry forever.
+                        await exec.execute({ sql: insertSql, args: [m.version] });
+                        continue;
+                    }
+                    // Split BEFORE adapting so we can remember which original statements
+                    // carried `ADD COLUMN IF NOT EXISTS` — SQLite drops the clause, so we
+                    // emulate the idempotent semantic by swallowing duplicate-column
+                    // errors only for those statements.
+                    const originalStatements = splitSqlStatements(raw);
+                    const statements = originalStatements.map((orig) => ({
+                        sql: pg ? adaptSqlForPostgres(orig) : adaptSqlForSqlite(orig),
+                        hadIfNotExists: IF_NOT_EXISTS_ADD_COLUMN_RE.test(orig),
+                    }));
+                    let currentStmt = "";
+                    try {
+                        for (const { sql: stmt, hadIfNotExists } of statements) {
+                            currentStmt = stmt;
+                            try {
+                                await exec.execute(stmt);
+                            }
+                            catch (err) {
+                                if (!pg && hadIfNotExists && isDuplicateColumnError(err)) {
+                                    // IF NOT EXISTS semantic: column already present, skip.
+                                    continue;
+                                }
+                                throw err;
                             }
-                            throw err;
                         }
+                        await exec.execute({ sql: insertSql, args: [m.version] });
+                        console.log(`[db] Applied migration v${m.version} (${statements.length} statement${statements.length === 1 ? "" : "s"})`);
                     }
-                    await exec.execute({ sql: insertSql, args: [m.version] });
-                    console.log(`[db] Applied migration v${m.version} (${statements.length} statement${statements.length === 1 ? "" : "s"})`);
-                }
-                catch (err) {
-                    if (pg && isPermissionError(err)) {
-                        // The connected role lacks privilege for this migration (e.g. a
-                        // permission-limited dev/replica role that doesn't own the table).
-                        // Don't crash-loop the whole server over it — warn and STOP here.
-                        // We must NOT continue to later migrations: pending work is computed
-                        // as `version > MAX(recorded version)`, so applying a later migration
-                        // would advance MAX past this unrecorded one and orphan it forever.
-                        // Stopping leaves MAX at the last recorded version, so a properly-
-                        // privileged role resumes from this exact migration, in order.
-                        console.warn(`[db] Migration v${m.version} skipped — insufficient privilege: ${err.message}. ` +
-                            `Apply it with a DB role that owns the table. ` +
-                            `Halting further migrations so this one isn't orphaned. ` +
-                            `Set <APP_NAME>_DATABASE_URL (e.g. PLAN_DATABASE_URL) to a database this app owns — a file: URL uses local SQLite.`, "\nStatement:", currentStmt);
-                        break;
+                    catch (err) {
+                        if (pg && isPermissionError(err)) {
+                            // The connected role lacks privilege for this migration (e.g. a
+                            // permission-limited dev/replica role that doesn't own the table).
+                            // Don't crash-loop the whole server over it — warn and STOP here.
+                            // We must NOT continue to later migrations: pending work is computed
+                            // as `version > MAX(recorded version)`, so applying a later migration
+                            // would advance MAX past this unrecorded one and orphan it forever.
+                            // Stopping leaves MAX at the last recorded version, so a properly-
+                            // privileged role resumes from this exact migration, in order.
+                            console.warn(`[db] Migration v${m.version} skipped — insufficient privilege: ${err.message}. ` +
+                                `Apply it with a DB role that owns the table. ` +
+                                `Halting further migrations so this one isn't orphaned. ` +
+                                `Set <APP_NAME>_DATABASE_URL (e.g. PLAN_DATABASE_URL) to a database this app owns — a file: URL uses local SQLite.`, "\nStatement:", currentStmt);
+                            break;
+                        }
+                        console.error(`[db] Migration v${m.version} FAILED:`, err.message, "\nStatement:", currentStmt);
+                        throw err;
                     }
-                    console.error(`[db] Migration v${m.version} FAILED:`, err.message, "\nStatement:", currentStmt);
-                    throw err;
                 }
             }
+            finally {
+                // Release the direct-endpoint exec (Postgres only). For SQLite getDbExec()
+                // returns the process-lifetime singleton, so releaseMigrationExec is a no-op
+                // (refCount never incremented for SQLite path, guard in releaseMigrationExec).
+                if (pg)
+                    await releaseMigrationExec();
+            }
         }
         catch (err) {
             console.error("[db] Migration failed:", err.message);

package/dist/db/migrations.js.map

@@ -1 +1 @@
-{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../src/db/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,UAAU,EACV,uBAAuB,EACvB,eAAe,GAChB,MAAM,aAAa,CAAC;AAIrB;;;GAGG;AACH,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,GAAG;SACP,OAAO,CAAC,8BAA8B,EAAE,mBAAmB,CAAC;SAC5D,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC;SAClC,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,2BAA2B,GAAG,mCAAmC,CAAC;AAExE;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,OAAO,CAAC,oCAAoC,EAAE,YAAY,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAY;IACjD,MAAM,GAAG,GAAI,GAAyB,EAAE,OAAO,IAAI,EAAE,CAAC;IACtD,OAAO,CACL,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,MAAM,CAAC,GAAG,GAAsD,CAAC;IACjE,IAAI,CAAC,EAAE,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;IAC7B,OAAO,CACL,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7B,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9B,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,CACpC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,QAAQ,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC5C,sBAAsB;YACtB,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,GAAG,IAAI,EAAE,CAAC;YACV,IAAI,QAAQ,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC7B,GAAG,IAAI,IAAI,CAAC;gBACZ,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,QAAQ,GAAG,CAAC,QAAQ,CAAC;YACrB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,OAAO;gBAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/B,GAAG,GAAG,EAAE,CAAC;YACT,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,GAAG,IAAI,EAAE,CAAC;QACV,CAAC,EAAE,CAAC;IACN,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC;AACb,CAAC;AAoCD,SAAS,mBAAmB,CAAC,GAAiB,EAAE,EAAW;IACzD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IAC3C,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,UAAiC,EACjC,OAA6B;IAE7B,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;IAC7B,IACE,CAAC,KAAK;QACN,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EACvC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,+EAA+E;YAC7E,kFAAkF;YAClF,6DAA6D,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,IAAI,EAAE;QAChB,IAAI,CAAC;YACH,iEAAiE;YACjE,MAAM,EAAE,GAAG,UAAU,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAClE,IAAI,EAAE,EAAE,CAAC;gBACP,MAAM,EAAE;qBACL,OAAO,CACN,8BAA8B,KAAK,gCAAgC,CACpE;qBACA,GAAG,EAAE,CAAC;gBACT,MAAM,QAAQ,GAAG,MAAM,EAAE;qBACtB,OAAO,CAAC,iCAAiC,KAAK,EAAE,CAAC;qBACjD,KAAK,EAAkB,CAAC;gBAC3B,MAAM,OAAO,GAAI,QAAQ,EAAE,CAAY,IAAI,CAAC,CAAC;gBAE7C,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC;oBAC9D,IAAI,CAAC;wBACH,0BAA0B;wBAC1B,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;wBAC9C,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;4BAChB,MAAM,EAAE;iCACL,OAAO,CAAC,yBAAyB,KAAK,aAAa,CAAC;iCACpD,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;iCACf,GAAG,EAAE,CAAC;4BACT,SAAS;wBACX,CAAC;wBACD,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;wBACnD,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;4BACnD,GAAG,EAAE,iBAAiB,CAAC,IAAI,CAAC;4BAC5B,cAAc,EAAE,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;yBACvD,CAAC,CAAC,CAAC;wBACJ,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;wBAChE,IAAI,cAAc,EAAE,CAAC;4BACnB,4DAA4D;4BAC5D,gDAAgD;4BAChD,6DAA6D;4BAC7D,0DAA0D;4BAC1D,oDAAoD;4BACpD,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,UAAU,EAAE,CAAC;gCACvD,IAAI,CAAC;oCACH,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;gCAC/B,CAAC;gCAAC,OAAO,GAAG,EAAE,CAAC;oCACb,IAAI,cAAc,IAAI,sBAAsB,CAAC,GAAG,CAAC;wCAAE,SAAS;oCAC5D,MAAM,GAAG,CAAC;gCACZ,CAAC;4BACH,CAAC;4BACD,MAAM,EAAE;iCACL,OAAO,CAAC,yBAAyB,KAAK,aAAa,CAAC;iCACpD,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;iCACf,GAAG,EAAE,CAAC;wBACX,CAAC;6BAAM,CAAC;4BACN,4DAA4D;4BAC5D,4DAA4D;4BAC5D,6DAA6D;4BAC7D,MAAM,EAAE,CAAC,KAAK,CAAC;gCACb,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gCAC3C,EAAE;qCACC,OAAO,CAAC,yBAAyB,KAAK,aAAa,CAAC;qCACpD,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;6BACnB,CAAC,CAAC;wBACL,CAAC;wBACD,OAAO,CAAC,GAAG,CACT,2BAA2B,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAC7G,CAAC;oBACJ,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,OAAO,CAAC,KAAK,CACX,mBAAmB,CAAC,CAAC,OAAO,UAAU,EACrC,GAAa,CAAC,OAAO,EACtB,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CACtB,CAAC;wBACF,MAAM,GAAG,CAAC;oBACZ,CAAC;gBACH,CAAC;gBACD,OAAO;YACT,CAAC;YAED,+CAA+C;YAC/C,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;YACxB,sEAAsE;YACtE,8EAA8E;YAC9E,2EAA2E;YAC3E,6EAA6E;YAC7E,8EAA8E;YAC9E,MAAM,IAAI,GAAG,EAAE;gBACb,CAAC,CAAC,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,uBAAuB,EAAE,EAAE,CAAC;gBACxD,CAAC,CAAC,SAAS,EAAE,CAAC;YAEhB,uEAAuE;YACvE,+EAA+E;YAC/E,MAAM,eAAe,CACnB,GAAG,EAAE,CACH,IAAI,CAAC,OAAO,CACV,8BAA8B,KAAK,gCAAgC,CACpE,EACH,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CACrD,CAAC;YAEF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,iCAAiC,KAAK,EAAE,CACzC,CAAC;YACF,MAAM,OAAO,GAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAY,IAAI,CAAC,CAAC;YAE5C,MAAM,SAAS,GAAG,EAAE;gBAClB,CAAC,CAAC,eAAe,KAAK,oCAAoC;gBAC1D,CAAC,CAAC,yBAAyB,KAAK,aAAa,CAAC;YAEhD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC;YAC9D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CACT,iBAAiB,OAAO,CAAC,MAAM,oBAAoB,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,GAAG,CACxF,CAAC;YACJ,CAAC;YAED,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC3C,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;oBAChB,mEAAmE;oBACnE,wCAAwC;oBACxC,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC1D,SAAS;gBACX,CAAC;gBACD,qEAAqE;gBACrE,sEAAsE;gBACtE,iEAAiE;gBACjE,oCAAoC;gBACpC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;gBACnD,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBACnD,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC;oBAC7D,cAAc,EAAE,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;iBACvD,CAAC,CAAC,CAAC;gBACJ,IAAI,WAAW,GAAG,EAAE,CAAC;gBACrB,IAAI,CAAC;oBACH,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,UAAU,EAAE,CAAC;wBACvD,WAAW,GAAG,IAAI,CAAC;wBACnB,IAAI,CAAC;4BACH,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;wBAC3B,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,IAAI,CAAC,EAAE,IAAI,cAAc,IAAI,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;gCACzD,wDAAwD;gCACxD,SAAS;4BACX,CAAC;4BACD,MAAM,GAAG,CAAC;wBACZ,CAAC;oBACH,CAAC;oBACD,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC1D,OAAO,CAAC,GAAG,CACT,2BAA2B,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAC7G,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;wBACjC,gEAAgE;wBAChE,mEAAmE;wBACnE,kEAAkE;wBAClE,qEAAqE;wBACrE,sEAAsE;wBACtE,oEAAoE;wBACpE,mEAAmE;wBACnE,+DAA+D;wBAC/D,OAAO,CAAC,IAAI,CACV,mBAAmB,CAAC,CAAC,OAAO,sCAAuC,GAAa,CAAC,OAAO,IAAI;4BAC1F,+CAA+C;4BAC/C,yDAAyD;4BACzD,mHAAmH,EACrH,cAAc,EACd,WAAW,CACZ,CAAC;wBACF,MAAM;oBACR,CAAC;oBACD,OAAO,CAAC,KAAK,CACX,mBAAmB,CAAC,CAAC,OAAO,UAAU,EACrC,GAAa,CAAC,OAAO,EACtB,cAAc,EACd,WAAW,CACZ,CAAC;oBACF,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YAChE,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,sEAAsE;YACtE,kEAAkE;YAClE,qDAAqD;YACrD,MAAM,YAAY,GAChB,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO;gBAClC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,wBAAwB;gBACnD,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM;gBACjC,UAAU,IAAI,UAAU,CAAC;YAC3B,IAAI,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,KAAK,UAAU,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import {\n  getDbExec,\n  createDbExec,\n  isPostgres,\n  getDialect,\n  getMigrationDatabaseUrl,\n  retrySqliteBusy,\n} from \"./client.js\";\n\ntype NitroPluginDef = (nitroApp: any) => void | Promise<void>;\n\n/**\n * Rewrite SQLite-specific SQL to Postgres-compatible equivalents.\n * Handles: datetime('now') → CURRENT_TIMESTAMP, AUTOINCREMENT → GENERATED, etc.\n */\nfunction adaptSqlForPostgres(sql: string): string {\n  return sql\n    .replace(/datetime\\s*\\(\\s*'now'\\s*\\)/gi, \"CURRENT_TIMESTAMP\")\n    .replace(/\\bAUTOINCREMENT\\b/gi, \"\")\n    .replace(/\\bINTEGER\\b/gi, \"BIGINT\");\n}\n\nconst IF_NOT_EXISTS_ADD_COLUMN_RE = /ADD\\s+COLUMN\\s+IF\\s+NOT\\s+EXISTS/i;\n\n/**\n * Strip Postgres-only syntax that SQLite doesn't support.\n * Handles: ALTER TABLE ... ADD COLUMN IF NOT EXISTS → ADD COLUMN\n *\n * Note: SQLite does not have a native equivalent, so the idempotent\n * semantic is emulated at the executor level by swallowing the\n * \"duplicate column name\" error for statements that originally carried\n * the clause. See `hadIfNotExists` tracking in the run loop.\n */\nfunction adaptSqlForSqlite(sql: string): string {\n  return sql.replace(/ADD\\s+COLUMN\\s+IF\\s+NOT\\s+EXISTS/gi, \"ADD COLUMN\");\n}\n\n/**\n * True when an error from `ALTER TABLE ... ADD COLUMN` indicates the\n * column already existed. Recognizes both SQLite (\"duplicate column\n * name\") and Postgres (\"column ... already exists\" — exact text varies\n * by error code 42701, but the substring is stable). Exported so other\n * idempotent column-upgrade loops in the codebase don't reinvent this\n * regex with subtly different shapes.\n */\nexport function isDuplicateColumnError(err: unknown): boolean {\n  const msg = (err as Error | undefined)?.message ?? \"\";\n  return (\n    /duplicate column name/i.test(msg) || /column .* already exists/i.test(msg)\n  );\n}\n\n/**\n * True when a migration statement failed because the connected DB ROLE lacks\n * privilege — e.g. a permission-limited dev/replica role that doesn't own the\n * table. Postgres raises SQLSTATE 42501 (\"insufficient_privilege\", routine\n * aclcheck_error, message \"must be owner of table …\"). We treat these as\n * NON-FATAL so a perms-limited database can't crash-loop the whole server: the\n * migration is skipped (left unrecorded) and a properly-privileged role applies\n * it later. Production, where the role owns its tables, never hits this path.\n */\nexport function isPermissionError(err: unknown): boolean {\n  const e = err as { code?: string; message?: string } | undefined;\n  if (e?.code === \"42501\") return true;\n  const msg = e?.message ?? \"\";\n  return (\n    /must be owner of/i.test(msg) ||\n    /permission denied/i.test(msg) ||\n    /insufficient privilege/i.test(msg)\n  );\n}\n\n/**\n * Split a multi-statement SQL blob into individual statements.\n *\n * libsql's `execute(sql)` only runs the first statement in a multi-statement\n * string. This splitter is intentionally simple: it respects single-quoted\n * string literals (with `''` escaping) and `--` line comments, and splits on\n * top-level `;`. It does NOT attempt to parse `$$`-quoted Postgres function\n * bodies — migrations that define functions/triggers with `;` inside bodies\n * should pass a single-statement migration per entry instead.\n */\nfunction splitSqlStatements(sql: string): string[] {\n  const out: string[] = [];\n  let buf = \"\";\n  let i = 0;\n  let inSingle = false;\n  while (i < sql.length) {\n    const ch = sql[i];\n    const next = sql[i + 1];\n    if (!inSingle && ch === \"-\" && next === \"-\") {\n      // Skip to end of line\n      while (i < sql.length && sql[i] !== \"\\n\") i++;\n      continue;\n    }\n    if (ch === \"'\") {\n      buf += ch;\n      if (inSingle && next === \"'\") {\n        buf += next;\n        i += 2;\n        continue;\n      }\n      inSingle = !inSingle;\n      i++;\n      continue;\n    }\n    if (ch === \";\" && !inSingle) {\n      const trimmed = buf.trim();\n      if (trimmed) out.push(trimmed);\n      buf = \"\";\n      i++;\n      continue;\n    }\n    buf += ch;\n    i++;\n  }\n  const tail = buf.trim();\n  if (tail) out.push(tail);\n  return out;\n}\n\nexport interface RunMigrationsOptions {\n  /**\n   * Name of the migrations bookkeeping table. REQUIRED — there is intentionally\n   * no default. Two templates that share a database (e.g. via the same Neon URL)\n   * each have their own version space starting at v1, and a single shared\n   * `_migrations` table will silently skip the second template's migrations if\n   * the first has already advanced past those version numbers. This caused the\n   * design template's migrations to be skipped entirely on a Neon DB that\n   * slides had already populated up to v15 (PR #320 era).\n   *\n   * Use one bookkeeping table per template, e.g. `slides_migrations`. Core\n   * feature plugins (e.g. the org module) follow the same convention with\n   * their own prefix, e.g. `_org_migrations`.\n   */\n  table: string;\n}\n\n/**\n * A single migration entry.\n *\n * `sql` can be a string (runs on every dialect) or an object with dialect\n * keys for dialect-gated SQL. Useful when Postgres needs an ALTER that\n * SQLite can't parse.\n *\n *   { version: 14, sql: { postgres: \"ALTER TABLE …\" } }  // no-op on sqlite\n *   { version: 15, sql: { sqlite: \"…\", postgres: \"…\" } } // both dialects\n */\nexport type MigrationSql = string | { postgres?: string; sqlite?: string };\n\nexport interface MigrationEntry {\n  version: number;\n  sql: MigrationSql;\n}\n\nfunction resolveMigrationSql(sql: MigrationSql, pg: boolean): string | null {\n  if (typeof sql === \"string\") return sql;\n  const raw = pg ? sql.postgres : sql.sqlite;\n  return raw ?? null;\n}\n\nexport function runMigrations(\n  migrations: Array<MigrationEntry>,\n  options: RunMigrationsOptions,\n): NitroPluginDef {\n  const table = options?.table;\n  if (\n    !table ||\n    typeof table !== \"string\" ||\n    !/^[A-Za-z_][A-Za-z0-9_]*$/.test(table)\n  ) {\n    throw new Error(\n      \"runMigrations: `table` option is required and must be a valid SQL identifier \" +\n        '(e.g. `{ table: \"slides_migrations\" }`). See packages/core/src/db/migrations.ts ' +\n        \"for why this is required (shared-DB version-collision bug).\",\n    );\n  }\n  return async () => {\n    try {\n      // Check for Cloudflare D1 binding (only if DATABASE_URL not set)\n      const d1 = getDialect() === \"d1\" ? globalThis.__cf_env?.DB : null;\n      if (d1) {\n        await d1\n          .prepare(\n            `CREATE TABLE IF NOT EXISTS ${table} (version INTEGER PRIMARY KEY)`,\n          )\n          .run();\n        const firstRow = await d1\n          .prepare(`SELECT MAX(version) as v FROM ${table}`)\n          .first<{ v?: number }>();\n        const current = (firstRow?.v as number) ?? 0;\n\n        for (const m of migrations.filter((m) => m.version > current)) {\n          try {\n            // D1 is SQLite-compatible\n            const raw = resolveMigrationSql(m.sql, false);\n            if (raw == null) {\n              await d1\n                .prepare(`INSERT OR IGNORE INTO ${table} VALUES (?)`)\n                .bind(m.version)\n                .run();\n              continue;\n            }\n            const originalStatements = splitSqlStatements(raw);\n            const statements = originalStatements.map((orig) => ({\n              sql: adaptSqlForSqlite(orig),\n              hadIfNotExists: IF_NOT_EXISTS_ADD_COLUMN_RE.test(orig),\n            }));\n            const hasIfNotExists = statements.some((s) => s.hadIfNotExists);\n            if (hasIfNotExists) {\n              // Per-statement path: we need to swallow \"duplicate column\"\n              // errors for statements that originally carried\n              // `ADD COLUMN IF NOT EXISTS`, which a batch() can't express.\n              // Loses atomicity, but the idempotent-ADD-COLUMN semantic\n              // means a partial re-run resolves cleanly on retry.\n              for (const { sql: stmt, hadIfNotExists } of statements) {\n                try {\n                  await d1.prepare(stmt).run();\n                } catch (err) {\n                  if (hadIfNotExists && isDuplicateColumnError(err)) continue;\n                  throw err;\n                }\n              }\n              await d1\n                .prepare(`INSERT OR IGNORE INTO ${table} VALUES (?)`)\n                .bind(m.version)\n                .run();\n            } else {\n              // Atomic batch: all statements + version-row insert land in\n              // the same transaction. A failing statement rolls the whole\n              // migration back, so we never record a half-applied version.\n              await d1.batch([\n                ...statements.map((s) => d1.prepare(s.sql)),\n                d1\n                  .prepare(`INSERT OR IGNORE INTO ${table} VALUES (?)`)\n                  .bind(m.version),\n              ]);\n            }\n            console.log(\n              `[db] Applied migration v${m.version} (${statements.length} statement${statements.length === 1 ? \"\" : \"s\"})`,\n            );\n          } catch (err) {\n            console.error(\n              `[db] Migration v${m.version} FAILED:`,\n              (err as Error).message,\n              \"\\nSQL:\",\n              JSON.stringify(m.sql),\n            );\n            throw err;\n          }\n        }\n        return;\n      }\n\n      // Generic path — works for libsql and Postgres\n      const pg = isPostgres();\n      // For Postgres migrations, use a dedicated exec pointed at the DIRECT\n      // (non-pooler) endpoint. Neon's PgBouncer pooler runs in transaction mode and\n      // can deny DDL (`ALTER TABLE … ADD COLUMN`) even for the table-owner role.\n      // createDbExec() creates a fresh, non-singleton connection for this purpose.\n      // For non-Neon and already-direct URLs, getMigrationDatabaseUrl() is a no-op.\n      const exec = pg\n        ? await createDbExec({ url: getMigrationDatabaseUrl() })\n        : getDbExec();\n\n      // Retry initial table creation — SQLITE_BUSY_RECOVERY can occur on HMR\n      // restarts when WAL files from the previous process haven't been released yet.\n      await retrySqliteBusy(\n        () =>\n          exec.execute(\n            `CREATE TABLE IF NOT EXISTS ${table} (version INTEGER PRIMARY KEY)`,\n          ),\n        { maxAttempts: 6, baseDelayMs: 1000, rethrow: true },\n      );\n\n      const { rows } = await exec.execute(\n        `SELECT MAX(version) as v FROM ${table}`,\n      );\n      const current = (rows[0]?.v as number) ?? 0;\n\n      const insertSql = pg\n        ? `INSERT INTO ${table} VALUES (?) ON CONFLICT DO NOTHING`\n        : `INSERT OR IGNORE INTO ${table} VALUES (?)`;\n\n      const pending = migrations.filter((m) => m.version > current);\n      if (pending.length > 0) {\n        console.log(\n          `[db] Applying ${pending.length} migration(s) on ${pg ? \"Postgres\" : \"SQLite/libsql\"}…`,\n        );\n      }\n\n      for (const m of pending) {\n        const raw = resolveMigrationSql(m.sql, pg);\n        if (raw == null) {\n          // Dialect-gated migration with no SQL for this dialect; still mark\n          // as applied so we don't retry forever.\n          await exec.execute({ sql: insertSql, args: [m.version] });\n          continue;\n        }\n        // Split BEFORE adapting so we can remember which original statements\n        // carried `ADD COLUMN IF NOT EXISTS` — SQLite drops the clause, so we\n        // emulate the idempotent semantic by swallowing duplicate-column\n        // errors only for those statements.\n        const originalStatements = splitSqlStatements(raw);\n        const statements = originalStatements.map((orig) => ({\n          sql: pg ? adaptSqlForPostgres(orig) : adaptSqlForSqlite(orig),\n          hadIfNotExists: IF_NOT_EXISTS_ADD_COLUMN_RE.test(orig),\n        }));\n        let currentStmt = \"\";\n        try {\n          for (const { sql: stmt, hadIfNotExists } of statements) {\n            currentStmt = stmt;\n            try {\n              await exec.execute(stmt);\n            } catch (err) {\n              if (!pg && hadIfNotExists && isDuplicateColumnError(err)) {\n                // IF NOT EXISTS semantic: column already present, skip.\n                continue;\n              }\n              throw err;\n            }\n          }\n          await exec.execute({ sql: insertSql, args: [m.version] });\n          console.log(\n            `[db] Applied migration v${m.version} (${statements.length} statement${statements.length === 1 ? \"\" : \"s\"})`,\n          );\n        } catch (err) {\n          if (pg && isPermissionError(err)) {\n            // The connected role lacks privilege for this migration (e.g. a\n            // permission-limited dev/replica role that doesn't own the table).\n            // Don't crash-loop the whole server over it — warn and STOP here.\n            // We must NOT continue to later migrations: pending work is computed\n            // as `version > MAX(recorded version)`, so applying a later migration\n            // would advance MAX past this unrecorded one and orphan it forever.\n            // Stopping leaves MAX at the last recorded version, so a properly-\n            // privileged role resumes from this exact migration, in order.\n            console.warn(\n              `[db] Migration v${m.version} skipped — insufficient privilege: ${(err as Error).message}. ` +\n                `Apply it with a DB role that owns the table. ` +\n                `Halting further migrations so this one isn't orphaned. ` +\n                `Set <APP_NAME>_DATABASE_URL (e.g. PLAN_DATABASE_URL) to a database this app owns — a file: URL uses local SQLite.`,\n              \"\\nStatement:\",\n              currentStmt,\n            );\n            break;\n          }\n          console.error(\n            `[db] Migration v${m.version} FAILED:`,\n            (err as Error).message,\n            \"\\nStatement:\",\n            currentStmt,\n          );\n          throw err;\n        }\n      }\n    } catch (err) {\n      console.error(\"[db] Migration failed:\", (err as Error).message);\n      // In local dev, hard-fail so the developer catches errors immediately.\n      // On serverless runtimes (Netlify Functions, Vercel, CF Workers) we\n      // keep the process alive — the app will return 500s for routes that\n      // depend on the missing tables, but at least other routes still work.\n      // Note: Node.js 21+ defines globalThis.navigator, so we check for\n      // serverless env vars instead of navigator presence.\n      const isServerless =\n        !!globalThis.process?.env?.NETLIFY ||\n        !!globalThis.process?.env?.AWS_LAMBDA_FUNCTION_NAME ||\n        !!globalThis.process?.env?.VERCEL ||\n        \"__cf_env\" in globalThis;\n      if (typeof globalThis.process?.exit === \"function\" && !isServerless) {\n        process.exit(1);\n      }\n    }\n  };\n}\n"]}
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../src/db/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,UAAU,EACV,uBAAuB,EACvB,eAAe,GAEhB,MAAM,aAAa,CAAC;AAErB,8EAA8E;AAC9E,4EAA4E;AAC5E,EAAE;AACF,wEAAwE;AACxE,0EAA0E;AAC1E,oEAAoE;AACpE,uEAAuE;AACvE,mEAAmE;AACnE,2EAA2E;AAC3E,uEAAuE;AACvE,wEAAwE;AACxE,8EAA8E;AAE9E,IAAI,qBAAqB,GAA2B,IAAI,CAAC;AACzD,IAAI,sBAAsB,GAAG,CAAC,CAAC;AAE/B,KAAK,UAAU,oBAAoB;IACjC,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC3B,qBAAqB,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,sBAAsB,EAAE,CAAC;IACzB,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,oBAAoB;IACjC,sBAAsB,EAAE,CAAC;IACzB,IAAI,sBAAsB,GAAG,CAAC;QAAE,OAAO;IACvC,sEAAsE;IACtE,MAAM,WAAW,GAAG,qBAAqB,CAAC;IAC1C,qBAAqB,GAAG,IAAI,CAAC;IAC7B,sBAAsB,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,WAAW;QAAE,OAAO;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC;QAC/B,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,8DAA8D;IAChE,CAAC;AACH,CAAC;AAID;;;GAGG;AACH,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,GAAG;SACP,OAAO,CAAC,8BAA8B,EAAE,mBAAmB,CAAC;SAC5D,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC;SAClC,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,2BAA2B,GAAG,mCAAmC,CAAC;AAExE;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,OAAO,CAAC,oCAAoC,EAAE,YAAY,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAY;IACjD,MAAM,GAAG,GAAI,GAAyB,EAAE,OAAO,IAAI,EAAE,CAAC;IACtD,OAAO,CACL,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,MAAM,CAAC,GAAG,GAAsD,CAAC;IACjE,IAAI,CAAC,EAAE,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;IAC7B,OAAO,CACL,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7B,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9B,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,CACpC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,QAAQ,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC5C,sBAAsB;YACtB,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,GAAG,IAAI,EAAE,CAAC;YACV,IAAI,QAAQ,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC7B,GAAG,IAAI,IAAI,CAAC;gBACZ,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,QAAQ,GAAG,CAAC,QAAQ,CAAC;YACrB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,OAAO;gBAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/B,GAAG,GAAG,EAAE,CAAC;YACT,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,GAAG,IAAI,EAAE,CAAC;QACV,CAAC,EAAE,CAAC;IACN,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC;AACb,CAAC;AAoCD,SAAS,mBAAmB,CAAC,GAAiB,EAAE,EAAW;IACzD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IAC3C,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,UAAiC,EACjC,OAA6B;IAE7B,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;IAC7B,IACE,CAAC,KAAK;QACN,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EACvC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,+EAA+E;YAC7E,kFAAkF;YAClF,6DAA6D,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,IAAI,EAAE;QAChB,IAAI,CAAC;YACH,iEAAiE;YACjE,MAAM,EAAE,GAAG,UAAU,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAClE,IAAI,EAAE,EAAE,CAAC;gBACP,MAAM,EAAE;qBACL,OAAO,CACN,8BAA8B,KAAK,gCAAgC,CACpE;qBACA,GAAG,EAAE,CAAC;gBACT,MAAM,QAAQ,GAAG,MAAM,EAAE;qBACtB,OAAO,CAAC,iCAAiC,KAAK,EAAE,CAAC;qBACjD,KAAK,EAAkB,CAAC;gBAC3B,MAAM,OAAO,GAAI,QAAQ,EAAE,CAAY,IAAI,CAAC,CAAC;gBAE7C,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC;oBAC9D,IAAI,CAAC;wBACH,0BAA0B;wBAC1B,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;wBAC9C,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;4BAChB,MAAM,EAAE;iCACL,OAAO,CAAC,yBAAyB,KAAK,aAAa,CAAC;iCACpD,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;iCACf,GAAG,EAAE,CAAC;4BACT,SAAS;wBACX,CAAC;wBACD,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;wBACnD,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;4BACnD,GAAG,EAAE,iBAAiB,CAAC,IAAI,CAAC;4BAC5B,cAAc,EAAE,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;yBACvD,CAAC,CAAC,CAAC;wBACJ,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;wBAChE,IAAI,cAAc,EAAE,CAAC;4BACnB,4DAA4D;4BAC5D,gDAAgD;4BAChD,6DAA6D;4BAC7D,0DAA0D;4BAC1D,oDAAoD;4BACpD,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,UAAU,EAAE,CAAC;gCACvD,IAAI,CAAC;oCACH,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;gCAC/B,CAAC;gCAAC,OAAO,GAAG,EAAE,CAAC;oCACb,IAAI,cAAc,IAAI,sBAAsB,CAAC,GAAG,CAAC;wCAAE,SAAS;oCAC5D,MAAM,GAAG,CAAC;gCACZ,CAAC;4BACH,CAAC;4BACD,MAAM,EAAE;iCACL,OAAO,CAAC,yBAAyB,KAAK,aAAa,CAAC;iCACpD,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;iCACf,GAAG,EAAE,CAAC;wBACX,CAAC;6BAAM,CAAC;4BACN,4DAA4D;4BAC5D,4DAA4D;4BAC5D,6DAA6D;4BAC7D,MAAM,EAAE,CAAC,KAAK,CAAC;gCACb,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gCAC3C,EAAE;qCACC,OAAO,CAAC,yBAAyB,KAAK,aAAa,CAAC;qCACpD,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;6BACnB,CAAC,CAAC;wBACL,CAAC;wBACD,OAAO,CAAC,GAAG,CACT,2BAA2B,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAC7G,CAAC;oBACJ,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,OAAO,CAAC,KAAK,CACX,mBAAmB,CAAC,CAAC,OAAO,UAAU,EACrC,GAAa,CAAC,OAAO,EACtB,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CACtB,CAAC;wBACF,MAAM,GAAG,CAAC;oBACZ,CAAC;gBACH,CAAC;gBACD,OAAO;YACT,CAAC;YAED,+CAA+C;YAC/C,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;YAExB,8EAA8E;YAC9E,8EAA8E;YAC9E,0CAA0C;YAC1C,EAAE;YACF,8EAA8E;YAC9E,sEAAsE;YACtE,0EAA0E;YAC1E,4EAA4E;YAC5E,6DAA6D;YAC7D,EAAE;YACF,2EAA2E;YAC3E,yEAAyE;YACzE,6EAA6E;YAC7E,4EAA4E;YAC5E,2EAA2E;YAC3E,0EAA0E;YAC1E,qCAAqC;YACrC,8EAA8E;YAE9E,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,mDAAmD;YAErE,IAAI,EAAE,EAAE,CAAC;gBACP,IAAI,CAAC;oBACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CACxC,iCAAiC,KAAK,EAAE,CACzC,CAAC;oBACF,OAAO,GAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAY,IAAI,CAAC,CAAC;gBACxC,CAAC;gBAAC,MAAM,CAAC;oBACP,wEAAwE;gBAC1E,CAAC;YACH,CAAC;YAED,8EAA8E;YAC9E,+EAA+E;YAC/E,MAAM,WAAW,GAAG,EAAE;gBACpB,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC;gBAC/C,CAAC,CAAC,IAAI,CAAC,CAAC,6CAA6C;YAEvD,oFAAoF;YACpF,IAAI,EAAE,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3D,OAAO;YACT,CAAC;YAED,gDAAgD;YAChD,+EAA+E;YAC/E,oEAAoE;YACpE,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,oBAAoB,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YAE7D,IAAI,CAAC;gBACH,uEAAuE;gBACvE,+EAA+E;gBAC/E,MAAM,eAAe,CACnB,GAAG,EAAE,CACH,IAAI,CAAC,OAAO,CACV,8BAA8B,KAAK,gCAAgC,CACpE,EACH,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CACrD,CAAC;gBAEF,uEAAuE;gBACvE,gFAAgF;gBAChF,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,iCAAiC,KAAK,EAAE,CACzC,CAAC;oBACF,OAAO,GAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAY,IAAI,CAAC,CAAC;gBACxC,CAAC;qBAAM,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;oBAC1B,0EAA0E;oBAC1E,yEAAyE;oBACzE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,iCAAiC,KAAK,EAAE,CACzC,CAAC;oBACF,OAAO,GAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAY,IAAI,CAAC,CAAC;gBACxC,CAAC;gBAED,MAAM,SAAS,GAAG,EAAE;oBAClB,CAAC,CAAC,eAAe,KAAK,oCAAoC;oBAC1D,CAAC,CAAC,yBAAyB,KAAK,aAAa,CAAC;gBAEhD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC;gBAC9D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CACT,iBAAiB,OAAO,CAAC,MAAM,oBAAoB,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,GAAG,CACxF,CAAC;gBACJ,CAAC;gBAED,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;oBACxB,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBAC3C,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;wBAChB,mEAAmE;wBACnE,wCAAwC;wBACxC,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;wBAC1D,SAAS;oBACX,CAAC;oBACD,qEAAqE;oBACrE,sEAAsE;oBACtE,iEAAiE;oBACjE,oCAAoC;oBACpC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;oBACnD,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;wBACnD,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC;wBAC7D,cAAc,EAAE,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;qBACvD,CAAC,CAAC,CAAC;oBACJ,IAAI,WAAW,GAAG,EAAE,CAAC;oBACrB,IAAI,CAAC;wBACH,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,UAAU,EAAE,CAAC;4BACvD,WAAW,GAAG,IAAI,CAAC;4BACnB,IAAI,CAAC;gCACH,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;4BAC3B,CAAC;4BAAC,OAAO,GAAG,EAAE,CAAC;gCACb,IAAI,CAAC,EAAE,IAAI,cAAc,IAAI,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;oCACzD,wDAAwD;oCACxD,SAAS;gCACX,CAAC;gCACD,MAAM,GAAG,CAAC;4BACZ,CAAC;wBACH,CAAC;wBACD,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;wBAC1D,OAAO,CAAC,GAAG,CACT,2BAA2B,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAC7G,CAAC;oBACJ,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAI,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;4BACjC,gEAAgE;4BAChE,mEAAmE;4BACnE,kEAAkE;4BAClE,qEAAqE;4BACrE,sEAAsE;4BACtE,oEAAoE;4BACpE,mEAAmE;4BACnE,+DAA+D;4BAC/D,OAAO,CAAC,IAAI,CACV,mBAAmB,CAAC,CAAC,OAAO,sCAAuC,GAAa,CAAC,OAAO,IAAI;gCAC1F,+CAA+C;gCAC/C,yDAAyD;gCACzD,mHAAmH,EACrH,cAAc,EACd,WAAW,CACZ,CAAC;4BACF,MAAM;wBACR,CAAC;wBACD,OAAO,CAAC,KAAK,CACX,mBAAmB,CAAC,CAAC,OAAO,UAAU,EACrC,GAAa,CAAC,OAAO,EACtB,cAAc,EACd,WAAW,CACZ,CAAC;wBACF,MAAM,GAAG,CAAC;oBACZ,CAAC;gBACH,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,2EAA2E;gBAC3E,6EAA6E;gBAC7E,+EAA+E;gBAC/E,IAAI,EAAE;oBAAE,MAAM,oBAAoB,EAAE,CAAC;YACvC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YAChE,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,sEAAsE;YACtE,kEAAkE;YAClE,qDAAqD;YACrD,MAAM,YAAY,GAChB,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO;gBAClC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,wBAAwB;gBACnD,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM;gBACjC,UAAU,IAAI,UAAU,CAAC;YAC3B,IAAI,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,KAAK,UAAU,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import {\n  getDbExec,\n  createDbExec,\n  isPostgres,\n  getDialect,\n  getMigrationDatabaseUrl,\n  retrySqliteBusy,\n  type DbExec,\n} from \"./client.js\";\n\n// ---------------------------------------------------------------------------\n// Shared direct-endpoint exec across concurrent migration runners per boot.\n//\n// On each serverless cold start THREE plugins call runMigrations (core,\n// org, context-xray). Without coordination each would open an independent\n// direct-endpoint Neon connection AND leave it idle for ~10 s after\n// migrations finish. We avoid that by sharing a single direct exec for\n// the duration of the migration window: the first caller opens it,\n// subsequent callers reuse the same promise, and the last caller closes it\n// via reference-counting. The exec is nulled out after the window so a\n// second cold start (e.g. after a Lambda thaw) gets a fresh connection.\n// ---------------------------------------------------------------------------\n\nlet _migrationExecPromise: Promise<DbExec> | null = null;\nlet _migrationExecRefCount = 0;\n\nasync function acquireMigrationExec(): Promise<DbExec> {\n  if (!_migrationExecPromise) {\n    _migrationExecPromise = createDbExec({ url: getMigrationDatabaseUrl() });\n  }\n  _migrationExecRefCount++;\n  return _migrationExecPromise;\n}\n\nasync function releaseMigrationExec(): Promise<void> {\n  _migrationExecRefCount--;\n  if (_migrationExecRefCount > 0) return;\n  // Last caller — close and reset so next boot gets a fresh connection.\n  const execPromise = _migrationExecPromise;\n  _migrationExecPromise = null;\n  _migrationExecRefCount = 0;\n  if (!execPromise) return;\n  try {\n    const exec = await execPromise;\n    await exec.close?.();\n  } catch {\n    // Swallow close errors — the migrations themselves already succeeded or\n    // failed; a cleanup error should not surface as a boot crash.\n  }\n}\n\ntype NitroPluginDef = (nitroApp: any) => void | Promise<void>;\n\n/**\n * Rewrite SQLite-specific SQL to Postgres-compatible equivalents.\n * Handles: datetime('now') → CURRENT_TIMESTAMP, AUTOINCREMENT → GENERATED, etc.\n */\nfunction adaptSqlForPostgres(sql: string): string {\n  return sql\n    .replace(/datetime\\s*\\(\\s*'now'\\s*\\)/gi, \"CURRENT_TIMESTAMP\")\n    .replace(/\\bAUTOINCREMENT\\b/gi, \"\")\n    .replace(/\\bINTEGER\\b/gi, \"BIGINT\");\n}\n\nconst IF_NOT_EXISTS_ADD_COLUMN_RE = /ADD\\s+COLUMN\\s+IF\\s+NOT\\s+EXISTS/i;\n\n/**\n * Strip Postgres-only syntax that SQLite doesn't support.\n * Handles: ALTER TABLE ... ADD COLUMN IF NOT EXISTS → ADD COLUMN\n *\n * Note: SQLite does not have a native equivalent, so the idempotent\n * semantic is emulated at the executor level by swallowing the\n * \"duplicate column name\" error for statements that originally carried\n * the clause. See `hadIfNotExists` tracking in the run loop.\n */\nfunction adaptSqlForSqlite(sql: string): string {\n  return sql.replace(/ADD\\s+COLUMN\\s+IF\\s+NOT\\s+EXISTS/gi, \"ADD COLUMN\");\n}\n\n/**\n * True when an error from `ALTER TABLE ... ADD COLUMN` indicates the\n * column already existed. Recognizes both SQLite (\"duplicate column\n * name\") and Postgres (\"column ... already exists\" — exact text varies\n * by error code 42701, but the substring is stable). Exported so other\n * idempotent column-upgrade loops in the codebase don't reinvent this\n * regex with subtly different shapes.\n */\nexport function isDuplicateColumnError(err: unknown): boolean {\n  const msg = (err as Error | undefined)?.message ?? \"\";\n  return (\n    /duplicate column name/i.test(msg) || /column .* already exists/i.test(msg)\n  );\n}\n\n/**\n * True when a migration statement failed because the connected DB ROLE lacks\n * privilege — e.g. a permission-limited dev/replica role that doesn't own the\n * table. Postgres raises SQLSTATE 42501 (\"insufficient_privilege\", routine\n * aclcheck_error, message \"must be owner of table …\"). We treat these as\n * NON-FATAL so a perms-limited database can't crash-loop the whole server: the\n * migration is skipped (left unrecorded) and a properly-privileged role applies\n * it later. Production, where the role owns its tables, never hits this path.\n */\nexport function isPermissionError(err: unknown): boolean {\n  const e = err as { code?: string; message?: string } | undefined;\n  if (e?.code === \"42501\") return true;\n  const msg = e?.message ?? \"\";\n  return (\n    /must be owner of/i.test(msg) ||\n    /permission denied/i.test(msg) ||\n    /insufficient privilege/i.test(msg)\n  );\n}\n\n/**\n * Split a multi-statement SQL blob into individual statements.\n *\n * libsql's `execute(sql)` only runs the first statement in a multi-statement\n * string. This splitter is intentionally simple: it respects single-quoted\n * string literals (with `''` escaping) and `--` line comments, and splits on\n * top-level `;`. It does NOT attempt to parse `$$`-quoted Postgres function\n * bodies — migrations that define functions/triggers with `;` inside bodies\n * should pass a single-statement migration per entry instead.\n */\nfunction splitSqlStatements(sql: string): string[] {\n  const out: string[] = [];\n  let buf = \"\";\n  let i = 0;\n  let inSingle = false;\n  while (i < sql.length) {\n    const ch = sql[i];\n    const next = sql[i + 1];\n    if (!inSingle && ch === \"-\" && next === \"-\") {\n      // Skip to end of line\n      while (i < sql.length && sql[i] !== \"\\n\") i++;\n      continue;\n    }\n    if (ch === \"'\") {\n      buf += ch;\n      if (inSingle && next === \"'\") {\n        buf += next;\n        i += 2;\n        continue;\n      }\n      inSingle = !inSingle;\n      i++;\n      continue;\n    }\n    if (ch === \";\" && !inSingle) {\n      const trimmed = buf.trim();\n      if (trimmed) out.push(trimmed);\n      buf = \"\";\n      i++;\n      continue;\n    }\n    buf += ch;\n    i++;\n  }\n  const tail = buf.trim();\n  if (tail) out.push(tail);\n  return out;\n}\n\nexport interface RunMigrationsOptions {\n  /**\n   * Name of the migrations bookkeeping table. REQUIRED — there is intentionally\n   * no default. Two templates that share a database (e.g. via the same Neon URL)\n   * each have their own version space starting at v1, and a single shared\n   * `_migrations` table will silently skip the second template's migrations if\n   * the first has already advanced past those version numbers. This caused the\n   * design template's migrations to be skipped entirely on a Neon DB that\n   * slides had already populated up to v15 (PR #320 era).\n   *\n   * Use one bookkeeping table per template, e.g. `slides_migrations`. Core\n   * feature plugins (e.g. the org module) follow the same convention with\n   * their own prefix, e.g. `_org_migrations`.\n   */\n  table: string;\n}\n\n/**\n * A single migration entry.\n *\n * `sql` can be a string (runs on every dialect) or an object with dialect\n * keys for dialect-gated SQL. Useful when Postgres needs an ALTER that\n * SQLite can't parse.\n *\n *   { version: 14, sql: { postgres: \"ALTER TABLE …\" } }  // no-op on sqlite\n *   { version: 15, sql: { sqlite: \"…\", postgres: \"…\" } } // both dialects\n */\nexport type MigrationSql = string | { postgres?: string; sqlite?: string };\n\nexport interface MigrationEntry {\n  version: number;\n  sql: MigrationSql;\n}\n\nfunction resolveMigrationSql(sql: MigrationSql, pg: boolean): string | null {\n  if (typeof sql === \"string\") return sql;\n  const raw = pg ? sql.postgres : sql.sqlite;\n  return raw ?? null;\n}\n\nexport function runMigrations(\n  migrations: Array<MigrationEntry>,\n  options: RunMigrationsOptions,\n): NitroPluginDef {\n  const table = options?.table;\n  if (\n    !table ||\n    typeof table !== \"string\" ||\n    !/^[A-Za-z_][A-Za-z0-9_]*$/.test(table)\n  ) {\n    throw new Error(\n      \"runMigrations: `table` option is required and must be a valid SQL identifier \" +\n        '(e.g. `{ table: \"slides_migrations\" }`). See packages/core/src/db/migrations.ts ' +\n        \"for why this is required (shared-DB version-collision bug).\",\n    );\n  }\n  return async () => {\n    try {\n      // Check for Cloudflare D1 binding (only if DATABASE_URL not set)\n      const d1 = getDialect() === \"d1\" ? globalThis.__cf_env?.DB : null;\n      if (d1) {\n        await d1\n          .prepare(\n            `CREATE TABLE IF NOT EXISTS ${table} (version INTEGER PRIMARY KEY)`,\n          )\n          .run();\n        const firstRow = await d1\n          .prepare(`SELECT MAX(version) as v FROM ${table}`)\n          .first<{ v?: number }>();\n        const current = (firstRow?.v as number) ?? 0;\n\n        for (const m of migrations.filter((m) => m.version > current)) {\n          try {\n            // D1 is SQLite-compatible\n            const raw = resolveMigrationSql(m.sql, false);\n            if (raw == null) {\n              await d1\n                .prepare(`INSERT OR IGNORE INTO ${table} VALUES (?)`)\n                .bind(m.version)\n                .run();\n              continue;\n            }\n            const originalStatements = splitSqlStatements(raw);\n            const statements = originalStatements.map((orig) => ({\n              sql: adaptSqlForSqlite(orig),\n              hadIfNotExists: IF_NOT_EXISTS_ADD_COLUMN_RE.test(orig),\n            }));\n            const hasIfNotExists = statements.some((s) => s.hadIfNotExists);\n            if (hasIfNotExists) {\n              // Per-statement path: we need to swallow \"duplicate column\"\n              // errors for statements that originally carried\n              // `ADD COLUMN IF NOT EXISTS`, which a batch() can't express.\n              // Loses atomicity, but the idempotent-ADD-COLUMN semantic\n              // means a partial re-run resolves cleanly on retry.\n              for (const { sql: stmt, hadIfNotExists } of statements) {\n                try {\n                  await d1.prepare(stmt).run();\n                } catch (err) {\n                  if (hadIfNotExists && isDuplicateColumnError(err)) continue;\n                  throw err;\n                }\n              }\n              await d1\n                .prepare(`INSERT OR IGNORE INTO ${table} VALUES (?)`)\n                .bind(m.version)\n                .run();\n            } else {\n              // Atomic batch: all statements + version-row insert land in\n              // the same transaction. A failing statement rolls the whole\n              // migration back, so we never record a half-applied version.\n              await d1.batch([\n                ...statements.map((s) => d1.prepare(s.sql)),\n                d1\n                  .prepare(`INSERT OR IGNORE INTO ${table} VALUES (?)`)\n                  .bind(m.version),\n              ]);\n            }\n            console.log(\n              `[db] Applied migration v${m.version} (${statements.length} statement${statements.length === 1 ? \"\" : \"s\"})`,\n            );\n          } catch (err) {\n            console.error(\n              `[db] Migration v${m.version} FAILED:`,\n              (err as Error).message,\n              \"\\nSQL:\",\n              JSON.stringify(m.sql),\n            );\n            throw err;\n          }\n        }\n        return;\n      }\n\n      // Generic path — works for libsql and Postgres\n      const pg = isPostgres();\n\n      // ---------------------------------------------------------------------------\n      // Fast-path: read migration state through the regular pooled singleton before\n      // opening the direct-endpoint connection.\n      //\n      // On Postgres every cold start previously opened a fresh direct-endpoint Neon\n      // connection (bypassing PgBouncer, which is needed only for DDL), ran\n      // CREATE TABLE IF NOT EXISTS + SELECT MAX(version) even with zero pending\n      // migrations, and never closed the pool — it idled for ~10 s. Three runners\n      // (core, org, context-xray) did this independently per boot.\n      //\n      // Now: use the pooled singleton (getDbExec) for the bookkeeping SELECT. If\n      // the migrations table does not yet exist we treat it as \"all migrations\n      // pending\" (current = -1). Only when there are pending migrations do we open\n      // the direct-endpoint exec (DDL is the only thing Neon's PgBouncer blocks —\n      // documented at getMigrationDatabaseUrl). The direct exec is shared across\n      // concurrent runners via acquireMigrationExec() and closed after the last\n      // caller via releaseMigrationExec().\n      // ---------------------------------------------------------------------------\n\n      let current = -1; // sentinel: \"table missing\" → treat all as pending\n\n      if (pg) {\n        try {\n          const { rows } = await getDbExec().execute(\n            `SELECT MAX(version) as v FROM ${table}`,\n          );\n          current = (rows[0]?.v as number) ?? 0;\n        } catch {\n          // Table doesn't exist yet — leave current = -1 so all migrations apply.\n        }\n      }\n\n      // For SQLite we still use getDbExec() as exec throughout (no pooler concern).\n      // For Postgres we only open the direct exec when there are pending migrations.\n      const pendingFast = pg\n        ? migrations.filter((m) => m.version > current)\n        : null; // SQLite: compute after table creation below\n\n      // Short-circuit: Postgres with nothing to do — skip the direct connection entirely.\n      if (pg && pendingFast !== null && pendingFast.length === 0) {\n        return;\n      }\n\n      // Acquire the exec appropriate for the dialect.\n      // For Postgres: the shared direct-endpoint exec (DDL-safe, closed on release).\n      // For SQLite/libsql: the singleton pooled exec (no pooler concern).\n      const exec = pg ? await acquireMigrationExec() : getDbExec();\n\n      try {\n        // Retry initial table creation — SQLITE_BUSY_RECOVERY can occur on HMR\n        // restarts when WAL files from the previous process haven't been released yet.\n        await retrySqliteBusy(\n          () =>\n            exec.execute(\n              `CREATE TABLE IF NOT EXISTS ${table} (version INTEGER PRIMARY KEY)`,\n            ),\n          { maxAttempts: 6, baseDelayMs: 1000, rethrow: true },\n        );\n\n        // For Postgres, current was already set by the fast-path SELECT above.\n        // For SQLite we run the SELECT now (via the same exec, which is the singleton).\n        if (!pg) {\n          const { rows } = await exec.execute(\n            `SELECT MAX(version) as v FROM ${table}`,\n          );\n          current = (rows[0]?.v as number) ?? 0;\n        } else if (current === -1) {\n          // Fast-path read failed (table was absent on the pooler): re-read via the\n          // direct exec now that CREATE TABLE IF NOT EXISTS has ensured it exists.\n          const { rows } = await exec.execute(\n            `SELECT MAX(version) as v FROM ${table}`,\n          );\n          current = (rows[0]?.v as number) ?? 0;\n        }\n\n        const insertSql = pg\n          ? `INSERT INTO ${table} VALUES (?) ON CONFLICT DO NOTHING`\n          : `INSERT OR IGNORE INTO ${table} VALUES (?)`;\n\n        const pending = migrations.filter((m) => m.version > current);\n        if (pending.length > 0) {\n          console.log(\n            `[db] Applying ${pending.length} migration(s) on ${pg ? \"Postgres\" : \"SQLite/libsql\"}…`,\n          );\n        }\n\n        for (const m of pending) {\n          const raw = resolveMigrationSql(m.sql, pg);\n          if (raw == null) {\n            // Dialect-gated migration with no SQL for this dialect; still mark\n            // as applied so we don't retry forever.\n            await exec.execute({ sql: insertSql, args: [m.version] });\n            continue;\n          }\n          // Split BEFORE adapting so we can remember which original statements\n          // carried `ADD COLUMN IF NOT EXISTS` — SQLite drops the clause, so we\n          // emulate the idempotent semantic by swallowing duplicate-column\n          // errors only for those statements.\n          const originalStatements = splitSqlStatements(raw);\n          const statements = originalStatements.map((orig) => ({\n            sql: pg ? adaptSqlForPostgres(orig) : adaptSqlForSqlite(orig),\n            hadIfNotExists: IF_NOT_EXISTS_ADD_COLUMN_RE.test(orig),\n          }));\n          let currentStmt = \"\";\n          try {\n            for (const { sql: stmt, hadIfNotExists } of statements) {\n              currentStmt = stmt;\n              try {\n                await exec.execute(stmt);\n              } catch (err) {\n                if (!pg && hadIfNotExists && isDuplicateColumnError(err)) {\n                  // IF NOT EXISTS semantic: column already present, skip.\n                  continue;\n                }\n                throw err;\n              }\n            }\n            await exec.execute({ sql: insertSql, args: [m.version] });\n            console.log(\n              `[db] Applied migration v${m.version} (${statements.length} statement${statements.length === 1 ? \"\" : \"s\"})`,\n            );\n          } catch (err) {\n            if (pg && isPermissionError(err)) {\n              // The connected role lacks privilege for this migration (e.g. a\n              // permission-limited dev/replica role that doesn't own the table).\n              // Don't crash-loop the whole server over it — warn and STOP here.\n              // We must NOT continue to later migrations: pending work is computed\n              // as `version > MAX(recorded version)`, so applying a later migration\n              // would advance MAX past this unrecorded one and orphan it forever.\n              // Stopping leaves MAX at the last recorded version, so a properly-\n              // privileged role resumes from this exact migration, in order.\n              console.warn(\n                `[db] Migration v${m.version} skipped — insufficient privilege: ${(err as Error).message}. ` +\n                  `Apply it with a DB role that owns the table. ` +\n                  `Halting further migrations so this one isn't orphaned. ` +\n                  `Set <APP_NAME>_DATABASE_URL (e.g. PLAN_DATABASE_URL) to a database this app owns — a file: URL uses local SQLite.`,\n                \"\\nStatement:\",\n                currentStmt,\n              );\n              break;\n            }\n            console.error(\n              `[db] Migration v${m.version} FAILED:`,\n              (err as Error).message,\n              \"\\nStatement:\",\n              currentStmt,\n            );\n            throw err;\n          }\n        }\n      } finally {\n        // Release the direct-endpoint exec (Postgres only). For SQLite getDbExec()\n        // returns the process-lifetime singleton, so releaseMigrationExec is a no-op\n        // (refCount never incremented for SQLite path, guard in releaseMigrationExec).\n        if (pg) await releaseMigrationExec();\n      }\n    } catch (err) {\n      console.error(\"[db] Migration failed:\", (err as Error).message);\n      // In local dev, hard-fail so the developer catches errors immediately.\n      // On serverless runtimes (Netlify Functions, Vercel, CF Workers) we\n      // keep the process alive — the app will return 500s for routes that\n      // depend on the missing tables, but at least other routes still work.\n      // Note: Node.js 21+ defines globalThis.navigator, so we check for\n      // serverless env vars instead of navigator presence.\n      const isServerless =\n        !!globalThis.process?.env?.NETLIFY ||\n        !!globalThis.process?.env?.AWS_LAMBDA_FUNCTION_NAME ||\n        !!globalThis.process?.env?.VERCEL ||\n        \"__cf_env\" in globalThis;\n      if (typeof globalThis.process?.exit === \"function\" && !isServerless) {\n        process.exit(1);\n      }\n    }\n  };\n}\n"]}

package/dist/demo/actions/toggle-demo-mode.d.ts

@@ -1,3 +1,8 @@
-declare const _default: any;
+declare const _default: import("../../action.js").ActionDefinition<{
+    enabled: boolean;
+}, {
+    enabled: boolean;
+    message: string;
+}>;
 export default _default;
 //# sourceMappingURL=toggle-demo-mode.d.ts.map

package/dist/demo/actions/toggle-demo-mode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"toggle-demo-mode.d.ts","sourceRoot":"","sources":["../../../src/demo/actions/toggle-demo-mode.ts"],"names":[],"mappings":";AAIA,wBAiBG"}
+{"version":3,"file":"toggle-demo-mode.d.ts","sourceRoot":"","sources":["../../../src/demo/actions/toggle-demo-mode.ts"],"names":[],"mappings":";;;;;;AAIA,wBAiBG"}

package/dist/deploy/build.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/deploy/build.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;GAYG;AAOH,OAAO,EAML,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,qBAAqB,CAAC;AAyB7B,eAAO,MAAM,6BAA6B,UAiBzC,CAAC;AA0BF,wBAAgB,wCAAwC,CACtD,WAAW,EAAE,MAAM,EAAE,GACpB,MAAM,CAaR;AAgBD,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC,CAAC;AAgBvE,wBAAgB,yCAAyC,CACvD,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,MAAM,EACjB,WAAW,SAAK,GACf,IAAI,CAQN;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,eAAe,EAAE,EACzB,WAAW,EAAE,MAAM,EAAE,EACrB,kBAAkB,GAAE,MAAM,EAAO,EACjC,OAAO,GAAE,gBAAgB,EAAO,EAChC,aAAa,GAAE,oBAAoB,GAAG,IAAW,EACjD,mBAAmB,GAAE,MAAM,EAAO,EAClC,gBAAgB,SAAmC,GAClD,MAAM,CAqkBR;AAoWD,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAE9C;AAkHD,wBAAgB,OAAO,CACrB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,iBAAiB,cAAoB,QAoCtC;AAuBD,KAAK,0BAA0B,GAAG,OAAO,GAAG,KAAK,CAAC;AAQlD,wBAAgB,qCAAqC,CACnD,YAAY,GAAE,MAAM,CAAC,QAA2B,EAChD,QAAQ,GAAE,MAAM,CAAC,YAA2B,EAC5C,UAAU,GAAE,0BAA0B,GAAG,IAAgD,GACxF,OAAO,CAOT;AAqED,wBAAgB,gCAAgC,CAC9C,gBAAgB,EAAE,MAAM,EAAE,GACzB,MAAM,GAAG,IAAI,CA8Bf;AAED,wBAAgB,0BAA0B,CACxC,gBAAgB,EAAE,MAAM,EAAE,GACzB,KAAK,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAqCpD;AAkND;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,gBAAgB,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,UAAU,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,GAAG,CAAC;IACX,KAAK,EAAE,eAAe,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,IAAI,CAAC,CA+Bf"}
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/deploy/build.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;GAYG;AAOH,OAAO,EAML,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,qBAAqB,CAAC;AA0B7B,eAAO,MAAM,6BAA6B,UAiBzC,CAAC;AAuBF,wBAAgB,wCAAwC,CACtD,WAAW,EAAE,MAAM,EAAE,GACpB,MAAM,CAaR;AAgBD,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC,CAAC;AAgBvE,wBAAgB,yCAAyC,CACvD,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,MAAM,EACjB,WAAW,SAAK,GACf,IAAI,CAQN;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,eAAe,EAAE,EACzB,WAAW,EAAE,MAAM,EAAE,EACrB,kBAAkB,GAAE,MAAM,EAAO,EACjC,OAAO,GAAE,gBAAgB,EAAO,EAChC,aAAa,GAAE,oBAAoB,GAAG,IAAW,EACjD,mBAAmB,GAAE,MAAM,EAAO,EAClC,gBAAgB,SAAmC,GAClD,MAAM,CAonBR;AAoWD,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAE9C;AAkHD,wBAAgB,OAAO,CACrB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,iBAAiB,cAAoB,QAoCtC;AAuBD,KAAK,0BAA0B,GAAG,OAAO,GAAG,KAAK,CAAC;AAQlD,wBAAgB,qCAAqC,CACnD,YAAY,GAAE,MAAM,CAAC,QAA2B,EAChD,QAAQ,GAAE,MAAM,CAAC,YAA2B,EAC5C,UAAU,GAAE,0BAA0B,GAAG,IAAgD,GACxF,OAAO,CAOT;AAqED,wBAAgB,gCAAgC,CAC9C,gBAAgB,EAAE,MAAM,EAAE,GACzB,MAAM,GAAG,IAAI,CA8Bf;AAED,wBAAgB,0BAA0B,CACxC,gBAAgB,EAAE,MAAM,EAAE,GACzB,KAAK,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAqCpD;AAkND;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,gBAAgB,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,UAAU,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,GAAG,CAAC;IACX,KAAK,EAAE,eAAe,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,IAAI,CAAC,CA+Bf"}

package/dist/deploy/build.js

@@ -24,6 +24,7 @@ import { mcpEmbedStaticAssetRouteRules } from "../shared/mcp-embed-headers.js";
 import { AGENT_NATIVE_SOCIAL_IMAGE_ALT, AGENT_NATIVE_SOCIAL_IMAGE_HEIGHT, AGENT_NATIVE_SOCIAL_IMAGE_PATH, AGENT_NATIVE_SOCIAL_IMAGE_TYPE, AGENT_NATIVE_SOCIAL_IMAGE_WIDTH, } from "../shared/social-meta.js";
 import { DEFAULT_SSR_CDN_CACHE_CONTROL, DEFAULT_SSR_NETLIFY_CDN_CACHE_CONTROL, DEFAULT_SPECULATION_RULES_PATH, DEFAULT_SSR_CACHE_CONTROL, } from "../shared/cache-control.js";
 import { collectImmutableAssetPaths, IMMUTABLE_ASSET_CACHE_CONTROL, IMMUTABLE_ASSET_CACHE_HEADERS, prefixAssetPath, } from "./immutable-assets.js";
+import { normalizeAppBasePath } from "../server/app-base-path.js";
 const cwd = process.cwd();
 const preset = process.env.NITRO_PRESET || "node";
 export const NITRO_RUNTIME_IGNORE_PATTERNS = [
@@ -45,14 +46,7 @@ export const NITRO_RUNTIME_IGNORE_PATTERNS = [
     "**/*.test.cjs",
 ];
 function normalizeConfiguredAppBasePath() {
-    const raw = process.env.VITE_APP_BASE_PATH || process.env.APP_BASE_PATH;
-    if (!raw || raw === "/")
-        return "";
-    const trimmed = String(raw).trim();
-    if (!trimmed || trimmed === "/")
-        return "";
-    const normalized = trimmed.replace(/^\/+/, "").replace(/\/+$/, "");
-    return normalized ? `/${normalized}` : "";
+    return normalizeAppBasePath(process.env.VITE_APP_BASE_PATH || process.env.APP_BASE_PATH);
 }
 /** Plugins that require Node.js runtime and cannot run on edge/serverless */
 const NODE_ONLY_PLUGINS = new Set([
@@ -408,43 +402,88 @@ function injectDefaultSocialImageMeta(html, imageUrl) {
   return html.slice(0, headCloseIdx) + tags.join("") + html.slice(headCloseIdx);
 }
 
-function shouldUseDefaultSsrCacheHeader(headers, status, pathname) {
-  if (status < 200 || status >= 400) return false;
+const PRIVATE_NO_STORE = "private, no-store";
+const ANONYMOUS_SESSION_COOKIE_NAMES = new Set(["an_docs_session"]);
+const BETTER_AUTH_SESSION_COOKIE_RE = /\\.session_(?:token|data)$/;
+const EMBED_SESSION_COOKIE = "an_embed_session";
+const AN_COOKIE_NAME = "an_session";
+const BETTER_AUTH_COOKIE_PREFIX = "an";
 
-  const contentType = (headers.get("content-type") || "").toLowerCase();
-  if (contentType.includes("text/html")) {
-    // SSR HTML is public app shell in this framework; any per-user state is
-    // fetched after hydration. Always enforce the framework SWR default here;
-    // route-level no-cache/private headers on SSR HTML recreate the same
-    // origin stampede this cache policy is meant to prevent.
-    return true;
-  }
+function isAuthenticatedCookieName(name) {
+  if (ANONYMOUS_SESSION_COOKIE_NAMES.has(name)) return false;
+  const bareName = name.replace(/^__(?:Secure|Host)-/, "");
+  return (
+    bareName === AN_COOKIE_NAME ||
+    bareName === EMBED_SESSION_COOKIE ||
+    bareName === "an_session_workspace" ||
+    bareName.startsWith("an_session_") ||
+    bareName === BETTER_AUTH_COOKIE_PREFIX + ".session_token" ||
+    bareName === BETTER_AUTH_COOKIE_PREFIX + ".session_data" ||
+    BETTER_AUTH_SESSION_COOKIE_RE.test(bareName)
+  );
+}
 
-  if (!pathname.endsWith(".data")) return false;
-  if (!contentType.includes("text/x-script")) return false;
+function requestHasAuthSignal(request) {
+  const headers = request.headers;
+  if (headers.get("authorization")) return true;
+  const cookieHeader = headers.get("cookie");
+  if (cookieHeader) {
+    const hasAuth = cookieHeader
+      .split(";")
+      .map((c) => c.trim().split("=", 1)[0]?.trim())
+      .filter(Boolean)
+      .some(isAuthenticatedCookieName);
+    if (hasAuth) return true;
+  }
+  const url = new URL(request.url);
+  if (url.searchParams.has("__an_embed_token")) return true;
+  if (url.searchParams.has("_session")) return true;
+  return false;
+}
 
-  // React Router marks loader .data responses no-cache by default. Agent-Native
-  // SSR is public app shell, even for browsers carrying auth-looking cookies;
-  // user/org-specific data is loaded client-side through actions/API routes
-  // after hydration. Keep .data on the same SWR policy as HTML so normal route
-  // data fetches fill CDN cache instead of bypassing it and slamming origin.
-  // Do not re-add a blanket auth-signal bypass here; logged-in browsers still
-  // need CDN-cached public route data. Worker SSR does not populate
-  // getRequestUserEmail()/accessFilter() context for private loaders.
-  // Also do not preserve route-level private/no-store for React Router .data:
-  // if a route needs per-user data, it belongs behind a client-side action/API
-  // call rather than in the shared SSR payload.
-  return true;
+function isSsrHtmlOrDataResponse(headers, status, pathname) {
+  if (status < 200 || status >= 400) return false;
+  const contentType = (headers.get("content-type") || "").toLowerCase();
+  if (contentType.includes("text/html")) return true;
+  return pathname.endsWith(".data") && contentType.includes("text/x-script");
 }
 
-function applyDefaultSsrCacheHeader(headers, status, pathname) {
-  if (!shouldUseDefaultSsrCacheHeader(headers, status, pathname)) return;
+/**
+ * Apply the correct SSR cache policy to the response headers.
+ *
+ * Anonymous requests get the public stale-while-revalidate default so the
+ * CDN can serve shared app-shell HTML and React Router loader data without
+ * hammering origin.
+ *
+ * Authenticated requests must never be publicly CDN-cached: the loader may
+ * have embedded session-personalized data. A route-provided Cache-Control is
+ * respected; otherwise the fallback is private/no-store.
+ */
+function applyDefaultSsrCacheHeader(headers, status, pathname, hasAuthSignal) {
+  if (!isSsrHtmlOrDataResponse(headers, status, pathname)) return;
+
+  if (hasAuthSignal) {
+    // A route that explicitly opts into public caching (e.g. a share page that
+    // accepts an optional auth cookie) can signal intent via a "public" directive.
+    // Any other route-level or framework-default value (no-cache, private, unset)
+    // is overridden with private/no-store so no shared CDN cache stores a
+    // potentially personalized response.
+    const existingCc = headers.get("cache-control") || "";
+    if (!existingCc.includes("public")) {
+      headers.set("cache-control", PRIVATE_NO_STORE);
+    }
+    // Never propagate CDN-specific cache headers on authenticated responses.
+    headers.delete("cdn-cache-control");
+    headers.delete("netlify-cdn-cache-control");
+    return;
+  }
+
   headers.set("cache-control", DEFAULT_SSR_CACHE_CONTROL);
   headers.set("cdn-cache-control", DEFAULT_SSR_CDN_CACHE_CONTROL);
   // Netlify function responses are dynamic by default and can otherwise show
   // Cache-Status fwd=bypass even with Cache-Control: public. Keep this
   // Netlify-specific header so SSR HTML/.data are served from the shared
-  // durable CDN cache instead of stampeding origin under logged-in browsers.
+  // durable CDN cache instead of stampeding origin under anonymous visitors.
   headers.set("netlify-cdn-cache-control", DEFAULT_SSR_NETLIFY_CDN_CACHE_CONTROL);
 }
 
@@ -482,10 +521,10 @@ function applyImmutableAssetCacheHeaders(response, request) {
   });
 }
 
-async function rewriteMountedResponse(response, basePath, pathname, request) {
+async function rewriteMountedResponse(response, basePath, pathname, request, hasAuthSignal) {
   const sentryClientConfigScript = getSentryClientConfigScript();
   const headers = new Headers(response.headers);
-  applyDefaultSsrCacheHeader(headers, response.status, pathname);
+  applyDefaultSsrCacheHeader(headers, response.status, pathname, hasAuthSignal);
   applyDefaultSpeculationRulesHeader(headers, response.status, basePath);
 
   const location = headers.get("location");
@@ -606,6 +645,7 @@ ${actionRegistrations.join("\n")}
       return new Response(null, { status: 404 });
     }
     const request = requestWithPathname(event.req, p);
+    const hasAuthSignal = requestHasAuthSignal(event.req);
     if (event.req.method === "HEAD") {
       const getRequest = requestWithMethod(request, "GET");
       const response = await rrHandler(getRequest);
@@ -617,10 +657,11 @@ ${actionRegistrations.join("\n")}
         }),
         basePath,
         p,
-        getRequest
+        getRequest,
+        hasAuthSignal
       );
     }
-    return rewriteMountedResponse(await rrHandler(request), basePath, p, request);
+    return rewriteMountedResponse(await rrHandler(request), basePath, p, request, hasAuthSignal);
   }));
 
   _handler = app.fetch.bind(app);