@agentic-kit/pi 0.17.0 → 0.18.0

package/provision-database/env-file.js

@@ -1,91 +0,0 @@
-"use strict";
-// Pure .env merge — used by provision_database to persist provisioning
-// credentials without clobbering existing keys: replace a key in place if
-// present, else append.
-// Kept side-effect-free so it is unit-testable (the tool does the fs write).
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ARCHIVED_BINDING_KEYS = exports.PROVISION_ENV_KEYS = void 0;
-exports.mergeEnv = mergeEnv;
-exports.provisionEnvVars = provisionEnvVars;
-exports.archiveBindingKeys = archiveBindingKeys;
-/**
- * Upsert `vars` into the existing `.env` `content`. Existing keys are replaced
- * in place (preserving surrounding lines/comments); new keys are appended.
- * Returns the new file body, trailing-newline-terminated.
- */
-function mergeEnv(content, vars) {
-    let out = content;
-    for (const [key, val] of Object.entries(vars)) {
-        // Escape the key for the regex, and use a replacement function so `$`
-        // sequences in the value are never treated as replacement specials.
-        const escapedKey = key.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-        const regex = new RegExp(`^${escapedKey}=.*`, 'm');
-        if (regex.test(out))
-            out = out.replace(regex, () => `${key}=${val}`);
-        else
-            out += `\n${key}=${val}`;
-    }
-    return out.trim() + '\n';
-}
-/** The credential keys provision_database owns in a project's .env. */
-exports.PROVISION_ENV_KEYS = [
-    'DATABASE_ID',
-    'DATABASE_NAME',
-    'OWNER_ID',
-    'ACCESS_TOKEN',
-    'PGDATABASE',
-    'API_ENDPOINT',
-    'MODULES_ENDPOINT',
-];
-/**
- * Keys archived as comments on reprovision — the binding identity: which
- * database, under whom, on which backend. ACCESS_TOKEN is the account login
- * token, identical across bindings, so it is overwritten in place rather than
- * archived.
- */
-exports.ARCHIVED_BINDING_KEYS = [
-    'DATABASE_ID',
-    'DATABASE_NAME',
-    'OWNER_ID',
-    'PGDATABASE',
-    'API_ENDPOINT',
-    'MODULES_ENDPOINT',
-];
-/**
- * Build the provisioning credential block written to a project's .env. The
- * endpoint pins record which backend owns this binding — outside-app consumers
- * (verify-feature.sh, skill scripts, dev-server shells) resolve them instead of
- * falling back to localhost defaults when the app targets a hosted backend.
- */
-function provisionEnvVars(args) {
-    return {
-        DATABASE_ID: args.databaseId,
-        DATABASE_NAME: args.databaseName,
-        OWNER_ID: args.ownerId,
-        ACCESS_TOKEN: args.accessToken,
-        PGDATABASE: args.databaseName,
-        API_ENDPOINT: args.apiEndpoint,
-        MODULES_ENDPOINT: args.modulesEndpoint,
-    };
-}
-/**
- * Comment out the given keys in place (`# archived <date>: KEY=value`) so a
- * reprovision keeps the previous binding readable in the file instead of
- * silently overwriting it. Every other line — including existing comments and
- * already-archived entries — passes through untouched.
- */
-function archiveBindingKeys(content, keys, archivedOn) {
-    const keySet = new Set(keys);
-    return content
-        .split('\n')
-        .map((line) => {
-        if (line.trimStart().startsWith('#'))
-            return line;
-        const eq = line.indexOf('=');
-        if (eq === -1)
-            return line;
-        const key = line.slice(0, eq).trim();
-        return keySet.has(key) ? `# archived ${archivedOn}: ${line.trim()}` : line;
-    })
-        .join('\n');
-}

package/provision-database/manifest.d.ts

@@ -1,10 +0,0 @@
-import type { ProvisionOverlay } from './resolve';
-export declare const PROVISION_MANIFEST_FILE = "provision.json";
-export type ProvisionManifest = ProvisionOverlay;
-/** Validate an untrusted value as a provision manifest, throwing on bad shape. */
-export declare function parseProvisionManifest(value: unknown): ProvisionManifest;
-/**
- * Load `<dir>/provision.json` as an overlay, or `null` when absent. A malformed
- * file throws so a broken overlay is surfaced rather than silently ignored.
- */
-export declare function loadProvisionManifest(dir: string): Promise<ProvisionManifest | null>;

package/provision-database/manifest.js

@@ -1,56 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PROVISION_MANIFEST_FILE = void 0;
-exports.parseProvisionManifest = parseProvisionManifest;
-exports.loadProvisionManifest = loadProvisionManifest;
-// `provision.json` overlay manifest.
-//
-// A pure-data overlay, distributed the same way skills are: written into a
-// config/app directory (locally, or materialized there from appstash / a pinned
-// git ref) and read at provision time. It NEVER installs or executes a package
-// — the base preset is a pinned build-time dependency; this file only selects a
-// preset and layers add/remove on top.
-const promises_1 = require("node:fs/promises");
-const node_path_1 = __importDefault(require("node:path"));
-const zod_1 = require("zod");
-exports.PROVISION_MANIFEST_FILE = 'provision.json';
-const ModuleSchema = zod_1.z.union([
-    zod_1.z.string(),
-    zod_1.z.tuple([zod_1.z.string(), zod_1.z.record(zod_1.z.string(), zod_1.z.unknown())]),
-]);
-const ProvisionManifestSchema = zod_1.z
-    .object({
-    preset: zod_1.z.string().optional(),
-    add: zod_1.z.array(ModuleSchema).optional(),
-    remove: zod_1.z.array(zod_1.z.string()).optional(),
-})
-    .strict();
-/** Validate an untrusted value as a provision manifest, throwing on bad shape. */
-function parseProvisionManifest(value) {
-    return ProvisionManifestSchema.parse(value);
-}
-/**
- * Load `<dir>/provision.json` as an overlay, or `null` when absent. A malformed
- * file throws so a broken overlay is surfaced rather than silently ignored.
- */
-async function loadProvisionManifest(dir) {
-    const file = node_path_1.default.join(dir, exports.PROVISION_MANIFEST_FILE);
-    let raw;
-    try {
-        raw = await (0, promises_1.readFile)(file, 'utf8');
-    }
-    catch {
-        return null;
-    }
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch (err) {
-        throw new Error(`Invalid ${exports.PROVISION_MANIFEST_FILE} at ${file}: ${err instanceof Error ? err.message : String(err)}`);
-    }
-    return parseProvisionManifest(parsed);
-}

package/provision-database/pg-fixups.d.ts

@@ -1,16 +0,0 @@
-export type FixupResult = {
-    applied: boolean;
-    note: string;
-};
-export type PgEnv = {
-    host?: string;
-    port?: string;
-    user?: string;
-    password?: string;
-};
-export declare function parsePgpmEnv(stdout: string): PgEnv;
-export declare function resolvePgEnv(): Promise<PgEnv | null>;
-export declare function applySqlFixups(args: {
-    databaseName: string;
-    physicalDb: string;
-}): Promise<FixupResult>;

package/provision-database/pg-fixups.js

@@ -1,170 +0,0 @@
-"use strict";
-// Post-provision SQL fixups for a freshly provisioned database.
-//
-// Two things must happen at the Postgres level that the provisioning GraphQL API
-// does not do for us:
-//
-//  1. Naming settings — `constructive.simple_schema_names` and
-//     `schema_use_underscores` make later `provision_blueprint` calls create an
-//     `app_public` schema (which resolveSchemaId looks for) instead of a
-//     hyphenated `<db>-<hex>-app-public` one. These ALTER DATABASE settings
-//     PERSIST, so we set them once here, before any blueprint construction.
-//
-//  2. Membership defaults — new sign-ups otherwise land with
-//     is_approved=false/is_verified=false, the AuthzEntityMembership policy then
-//     denies every insert/select, and CRUD rows silently never persist
-//     (BLUEPRINT-PENDING-001). We flip the defaults (future sign-ups) AND any
-//     memberships already created during provisioning.
-//
-// All SQL targets the PHYSICAL control-plane database (`constructive`), NOT the
-// app's database name — that name is only a schema prefix (MEMBERSHIP-DB-001).
-//
-// Connection creds come from the ambient PG* env vars, falling back to sourcing
-// `pgpm env` (the same mechanism the old `eval "$(pgpm env)"` shell step used).
-// If neither yields a connection, provisioning still succeeded — we return a
-// note so the tool can warn the user that sign-in/CRUD may need a manual fixup.
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.parsePgpmEnv = parsePgpmEnv;
-exports.resolvePgEnv = resolvePgEnv;
-exports.applySqlFixups = applySqlFixups;
-const node_child_process_1 = require("node:child_process");
-const node_util_1 = require("node:util");
-const execFileAsync = (0, node_util_1.promisify)(node_child_process_1.execFile);
-// Parse `pgpm env` output. It prints shell assignments (optionally `export`-
-// prefixed), one per line: `export PGHOST=localhost`. Quotes are stripped.
-function parsePgpmEnv(stdout) {
-    const env = {};
-    for (const rawLine of stdout.split('\n')) {
-        const line = rawLine.trim().replace(/^export\s+/, '');
-        const eq = line.indexOf('=');
-        if (eq === -1)
-            continue;
-        const key = line.slice(0, eq).trim();
-        let value = line.slice(eq + 1).trim();
-        if ((value.startsWith('"') && value.endsWith('"')) ||
-            (value.startsWith("'") && value.endsWith("'"))) {
-            value = value.slice(1, -1);
-        }
-        env[key] = value;
-    }
-    return {
-        host: env.PGHOST,
-        port: env.PGPORT,
-        user: env.PGUSER,
-        password: env.PGPASSWORD,
-    };
-}
-async function resolvePgEnv() {
-    if (process.env.PGHOST) {
-        return {
-            host: process.env.PGHOST,
-            port: process.env.PGPORT,
-            user: process.env.PGUSER,
-            password: process.env.PGPASSWORD,
-        };
-    }
-    try {
-        const { stdout } = await execFileAsync('pgpm', ['env'], { timeout: 15_000 });
-        const parsed = parsePgpmEnv(stdout);
-        return parsed.host ? parsed : null;
-    }
-    catch {
-        return null;
-    }
-}
-// Find the memberships schema for this app. Schema names use hyphens locally
-// (`<db>-<hex>-memberships-public`) but may use underscores when the naming
-// settings are active — match both, scoped to this app's name prefix.
-const MEMBERSHIPS_SCHEMA_QUERY = `
-  SELECT schema_name FROM information_schema.schemata
-   WHERE (schema_name LIKE '%memberships-public' OR schema_name LIKE '%memberships_public')
-         AND (schema_name LIKE $1 OR schema_name LIKE $2)
-   ORDER BY schema_name DESC LIMIT 1`;
-async function applySqlFixups(args) {
-    const pgEnv = await resolvePgEnv();
-    if (!pgEnv) {
-        return {
-            applied: false,
-            note: 'Could not reach Postgres (no PGHOST and `pgpm env` unavailable). Database provisioned, but membership defaults were not enabled — sign-in/CRUD may fail until the constructive DB is fixed up manually.',
-        };
-    }
-    // pg is dynamically imported so the main bundle never loads it unless a
-    // provision actually runs with Postgres access. The import lives inside the
-    // try: fixups are best-effort, so even a broken pg module must degrade to a
-    // note instead of failing the tool after the database is already provisioned.
-    let pool;
-    try {
-        const { Pool } = await Promise.resolve().then(() => __importStar(require('pg')));
-        pool = new Pool({
-            host: pgEnv.host,
-            port: pgEnv.port ? Number(pgEnv.port) : undefined,
-            user: pgEnv.user,
-            password: pgEnv.password,
-            database: args.physicalDb,
-        });
-        const db = args.physicalDb;
-        // Persistent naming settings — so future provision_blueprint calls land an
-        // `app_public` schema resolveSchemaId can find.
-        await pool.query(`ALTER DATABASE "${db}" SET constructive.simple_schema_names = 'true'`);
-        await pool.query(`ALTER DATABASE "${db}" SET constructive.schema_use_underscores = 'true'`);
-        const schemaResult = await pool.query(MEMBERSHIPS_SCHEMA_QUERY, [
-            `${args.databaseName}-%`,
-            `${args.databaseName}\\_%`,
-        ]);
-        if (schemaResult.rows.length === 0) {
-            return {
-                applied: true,
-                note: `Naming settings applied, but no memberships schema was found for "${args.databaseName}" — sign-in may need a manual membership fixup.`,
-            };
-        }
-        const membershipsSchema = schemaResult.rows[0].schema_name;
-        await pool.query(`UPDATE "${membershipsSchema}".app_membership_defaults SET is_approved = TRUE, is_verified = TRUE`);
-        await pool.query(`UPDATE "${membershipsSchema}".app_memberships
-         SET is_approved = TRUE, is_verified = TRUE
-       WHERE is_approved = FALSE OR is_verified = FALSE`);
-        return { applied: true, note: `Membership defaults enabled (schema: ${membershipsSchema}).` };
-    }
-    catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return {
-            applied: false,
-            note: `Database provisioned, but SQL fixups failed (${message}). Sign-in/CRUD may fail until membership defaults are enabled manually.`,
-        };
-    }
-    finally {
-        await pool?.end().catch(() => { });
-    }
-}

package/provision-database/preset-match.d.ts

@@ -1,13 +0,0 @@
-import { type ProvisionModule } from './presets';
-import type { ProvisionRequest } from './request-database';
-/**
- * The slug of the registry preset whose module set equals `resolved` under
- * the backend's hash semantics, or undefined when no preset matches.
- */
-export declare function matchPresetSlug(resolved: ProvisionModule[]): string | undefined;
-/**
- * Build the requestDatabase input branch: presetSlug when the resolved set
- * equals a registry preset (warm-pool eligible), else the explicit modules
- * array — never both.
- */
-export declare function selectProvisionRequest(resolved: ProvisionModule[]): ProvisionRequest;

package/provision-database/preset-match.js

@@ -1,70 +0,0 @@
-"use strict";
-// Client-side mirror of the backend's modules_hash normalization
-// (constructive-db: metaschema_private.modules_hash), used to decide whether a
-// resolved module set can be requested by preset slug — the warm-pool-eligible
-// path — or must be sent as an explicit modules array:
-//   1. A bare module name normalizes to [name, {}]; a missing/null options
-//      slot normalizes to {}.
-//   2. Options are compared verbatim after canonicalization (object keys
-//      sorted at every level) — no default-value normalization.
-//   3. Entries are sorted so the caller's ordering never affects the match.
-//   4. Duplicate normalized entries never match (the backend rejects them).
-// Only equality within this process matters, so string sort order does not
-// need to replicate PostgreSQL collation.
-//
-// The registry presets are the canonical definitions; the backend's
-// db_presets catalog is synced from them. A slug match assumes that sync —
-// preset drift would provision the backend's version of the set.
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.matchPresetSlug = matchPresetSlug;
-exports.selectProvisionRequest = selectProvisionRequest;
-const presets_1 = require("./presets");
-function canonicalize(value) {
-    if (Array.isArray(value))
-        return value.map(canonicalize);
-    if (value && typeof value === 'object') {
-        const sorted = {};
-        for (const key of Object.keys(value).sort()) {
-            sorted[key] = canonicalize(value[key]);
-        }
-        return sorted;
-    }
-    return value;
-}
-function normalizedEntries(list) {
-    const entries = list.map((m) => {
-        const name = Array.isArray(m) ? m[0] : m;
-        const options = Array.isArray(m) ? (m[1] ?? {}) : {};
-        return JSON.stringify([name, canonicalize(options)]);
-    });
-    entries.sort();
-    for (let i = 1; i < entries.length; i++) {
-        if (entries[i] === entries[i - 1])
-            return null;
-    }
-    return entries;
-}
-/**
- * The slug of the registry preset whose module set equals `resolved` under
- * the backend's hash semantics, or undefined when no preset matches.
- */
-function matchPresetSlug(resolved) {
-    const target = normalizedEntries(resolved)?.join('\n');
-    if (!target)
-        return undefined;
-    for (const preset of presets_1.allModulePresets) {
-        if (normalizedEntries(preset.modules)?.join('\n') === target) {
-            return preset.name;
-        }
-    }
-    return undefined;
-}
-/**
- * Build the requestDatabase input branch: presetSlug when the resolved set
- * equals a registry preset (warm-pool eligible), else the explicit modules
- * array — never both.
- */
-function selectProvisionRequest(resolved) {
-    const presetSlug = matchPresetSlug(resolved);
-    return presetSlug ? { presetSlug } : { modules: resolved };
-}

package/provision-database/presets.d.ts

@@ -1,4 +0,0 @@
-import { allModulePresets, getModulePreset, type ModulePreset } from 'node-type-registry';
-export type ProvisionModule = string | [string, Record<string, unknown>];
-export declare const DEFAULT_PROVISION_PRESET: string;
-export { allModulePresets, getModulePreset, type ModulePreset };

package/provision-database/presets.js

@@ -1,17 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getModulePreset = exports.allModulePresets = exports.DEFAULT_PROVISION_PRESET = void 0;
-// Provision module presets — the canonical source of truth.
-//
-// The module list is NEVER hand-copied here. It is imported from the pinned
-// `node-type-registry` package (the same presets the backend and dashboard use),
-// so bumping that dependency is how the base module set moves. Hosts customize
-// on top with an ordered overlay (see `resolve.ts`) rather than editing a list.
-const node_type_registry_1 = require("node-type-registry");
-Object.defineProperty(exports, "allModulePresets", { enumerable: true, get: function () { return node_type_registry_1.allModulePresets; } });
-Object.defineProperty(exports, "getModulePreset", { enumerable: true, get: function () { return node_type_registry_1.getModulePreset; } });
-// Default base preset. `b2b:storage` = the full multi-tenant B2B shape plus file
-// storage, matching Constructive's app shape. It carries the app-scoped secret,
-// identity-provider, and storage modules the backend's provisioning requires —
-// the drift the old hand-copied list caused (a dropped, then bare/unscoped, set).
-exports.DEFAULT_PROVISION_PRESET = node_type_registry_1.PresetB2bStorage.name;

package/provision-database/request-database.d.ts

@@ -1,61 +0,0 @@
-import type { ProvisionModule } from './presets';
-/**
- * Exactly one of presetSlug or modules — requestDatabase rejects both/neither
- * (REQUEST_DATABASE_INVALID_INPUT). `selectProvisionRequest` (preset-match.ts)
- * builds this from the resolved module set.
- */
-export type ProvisionRequest = {
-    presetSlug: string;
-} | {
-    modules: ProvisionModule[];
-};
-export type ProvisionTicket = {
-    id?: string | null;
-    status?: string | null;
-    bootstrapStatus?: string | null;
-    databaseId?: string | null;
-    errorMessage?: string | null;
-    bootstrapError?: string | null;
-};
-/**
- * Request + poll seam, injectable for tests (pattern: db-probe's
- * ProbeExecutor). The default executor drives the SDK clients.
- */
-export type ProvisionRequestExecutor = {
-    request(input: {
-        databaseName: string;
-        subdomain: string;
-        domain: string;
-        request: ProvisionRequest;
-    }): Promise<ProvisionTicket>;
-    poll(ticketId: string): Promise<ProvisionTicket | null>;
-};
-export declare const POLL_INTERVAL_MS = 2000;
-/** Stays under airpage's 5-minute per-tool timeout. */
-export declare const POLL_DEADLINE_MS = 240000;
-/**
- * Consecutive unreadable polls tolerated before giving up. Provisioning keeps
- * running server-side, so a dropped request or a momentary 502 must not abort
- * a creation that is about to succeed.
- */
-export declare const MAX_CONSECUTIVE_POLL_FAILURES = 3;
-/**
- * Request a database and resolve only when it is fully usable: ticket
- * `status` AND `bootstrapStatus` both 'completed'. The ticket the mutation
- * returns is checked before the first sleep, so a warm claim with bootstrap
- * already done never waits. `status: 'failed'` surfaces `errorMessage`;
- * `bootstrapStatus: 'failed'` surfaces `bootstrapError`.
- */
-export declare function requestDatabaseProvision(args: {
-    apiEndpoint: string;
-    modulesEndpoint: string;
-    bearer: string;
-    databaseName: string;
-    domain: string;
-    request: ProvisionRequest;
-    executor?: ProvisionRequestExecutor;
-    pollIntervalMs?: number;
-    pollDeadlineMs?: number;
-}): Promise<{
-    databaseId: string;
-}>;

package/provision-database/request-database.js

@@ -1,134 +0,0 @@
-"use strict";
-// Provision a database through the api endpoint's requestDatabase mutation —
-// the pool-aware entry point. The mutation returns a ticket (a
-// database_provision_module row) immediately: a warm-pool claim arrives
-// 'completed' with the deferred owner bootstrap still pending; a cold request
-// arrives 'pending' and is fulfilled asynchronously by the backend's jobs
-// worker. The ticket is polled on the MODULES endpoint (the api endpoint has
-// no ticket query) until BOTH status and bootstrapStatus are 'completed': pi
-// hands credentials to the agent as soon as this resolves, and until owner
-// bootstrap completes the new database has zero users, so its per-DB API
-// would reject the owner token under RLS. requestDatabase owns the database
-// to the JWT user — there is no owner input. The generated ORM's default
-// adapter is plain fetch, so the SDK's FetchAdapter is injected to keep
-// *.localhost DNS/Host routing working in Node.
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MAX_CONSECUTIVE_POLL_FAILURES = exports.POLL_DEADLINE_MS = exports.POLL_INTERVAL_MS = void 0;
-exports.requestDatabaseProvision = requestDatabaseProvision;
-const sdk_1 = require("@constructive-io/sdk");
-exports.POLL_INTERVAL_MS = 2_000;
-/** Stays under airpage's 5-minute per-tool timeout. */
-exports.POLL_DEADLINE_MS = 240_000;
-/**
- * Consecutive unreadable polls tolerated before giving up. Provisioning keeps
- * running server-side, so a dropped request or a momentary 502 must not abort
- * a creation that is about to succeed.
- */
-exports.MAX_CONSECUTIVE_POLL_FAILURES = 3;
-const TICKET_SELECT = {
-    id: true,
-    status: true,
-    bootstrapStatus: true,
-    databaseId: true,
-    errorMessage: true,
-    bootstrapError: true,
-};
-function createSdkExecutor(args) {
-    const headers = { Authorization: `Bearer ${args.bearer}` };
-    const apiClient = sdk_1.api.createClient({ adapter: new sdk_1.api.FetchAdapter(args.apiEndpoint, headers) });
-    const modulesClient = sdk_1.modules.createClient({
-        adapter: new sdk_1.api.FetchAdapter(args.modulesEndpoint, headers),
-    });
-    return {
-        async request(input) {
-            const requestInput = {
-                databaseName: input.databaseName,
-                subdomain: input.subdomain,
-                domain: input.domain,
-                ...('presetSlug' in input.request
-                    ? { presetSlug: input.request.presetSlug }
-                    : { modules: input.request.modules }),
-            };
-            const result = await apiClient.mutation
-                .requestDatabase({ input: requestInput }, { select: { result: { select: TICKET_SELECT } } })
-                .unwrap();
-            const ticket = result.requestDatabase?.result;
-            if (!ticket)
-                throw new Error('requestDatabase returned no provision ticket.');
-            return ticket;
-        },
-        async poll(ticketId) {
-            const result = await modulesClient.databaseProvisionModule
-                .findOne({ id: ticketId, select: TICKET_SELECT })
-                .unwrap();
-            return result.databaseProvisionModule ?? null;
-        },
-    };
-}
-function sleep(ms) {
-    return new Promise((resolve) => setTimeout(resolve, ms));
-}
-/**
- * Request a database and resolve only when it is fully usable: ticket
- * `status` AND `bootstrapStatus` both 'completed'. The ticket the mutation
- * returns is checked before the first sleep, so a warm claim with bootstrap
- * already done never waits. `status: 'failed'` surfaces `errorMessage`;
- * `bootstrapStatus: 'failed'` surfaces `bootstrapError`.
- */
-async function requestDatabaseProvision(args) {
-    const executor = args.executor ??
-        createSdkExecutor({
-            apiEndpoint: args.apiEndpoint,
-            modulesEndpoint: args.modulesEndpoint,
-            bearer: args.bearer,
-        });
-    const intervalMs = args.pollIntervalMs ?? exports.POLL_INTERVAL_MS;
-    const deadlineMs = args.pollDeadlineMs ?? exports.POLL_DEADLINE_MS;
-    let ticket = await executor.request({
-        databaseName: args.databaseName,
-        subdomain: args.databaseName,
-        domain: args.domain,
-        request: args.request,
-    });
-    const ticketId = ticket.id;
-    if (!ticketId)
-        throw new Error('requestDatabase returned a provision ticket without an id.');
-    const deadline = Date.now() + deadlineMs;
-    let failures = 0;
-    for (;;) {
-        if (ticket.status === 'failed') {
-            throw new Error(ticket.errorMessage ?? 'provisioning failed');
-        }
-        if (ticket.bootstrapStatus === 'failed') {
-            throw new Error(ticket.bootstrapError ?? 'owner bootstrap failed');
-        }
-        if (ticket.status === 'completed' && ticket.bootstrapStatus === 'completed') {
-            if (!ticket.databaseId)
-                throw new Error('provisioning completed but returned no databaseId.');
-            return { databaseId: ticket.databaseId };
-        }
-        if (Date.now() >= deadline) {
-            throw new Error(`provisioning timed out after ${Math.round(deadlineMs / 1000)}s (status: ${ticket.status ?? 'unknown'}, bootstrapStatus: ${ticket.bootstrapStatus ?? 'unknown'})`);
-        }
-        await sleep(intervalMs);
-        // A poll that throws (network blip, 502) or comes back empty is retried a
-        // few times rather than failing a provision that is still running.
-        let polled;
-        try {
-            polled = await executor.poll(ticketId);
-        }
-        catch (err) {
-            if (++failures > exports.MAX_CONSECUTIVE_POLL_FAILURES)
-                throw err;
-            continue;
-        }
-        if (!polled) {
-            if (++failures > exports.MAX_CONSECUTIVE_POLL_FAILURES) {
-                throw new Error(`provision ticket ${ticketId} could not be read back.`);
-            }
-            continue;
-        }
-        failures = 0;
-        ticket = polled;
-    }
-}