@byline/cli 0.1.1

package/dist/context.d.ts

@@ -0,0 +1,38 @@
+import type { Prompter } from './prompts.js';
+import type { StateStore } from './state.js';
+import type { PackageManager } from './types.js';
+import type { Logger } from './ui/logger.js';
+export interface ContextOptions {
+    cwd: string;
+    apply: boolean;
+    dryRun: boolean;
+    yes: boolean;
+    reset: boolean;
+    resetConfirmed: boolean;
+    pm?: PackageManager;
+    cliFlags: Record<string, string | boolean | undefined>;
+    logger: Logger;
+    prompter: Prompter;
+    state: StateStore;
+}
+export interface Secrets {
+    dbPassword?: string;
+}
+export declare class Context {
+    readonly cwd: string;
+    readonly apply: boolean;
+    readonly dryRun: boolean;
+    readonly yes: boolean;
+    readonly reset: boolean;
+    readonly resetConfirmed: boolean;
+    pm: PackageManager;
+    readonly cliFlags: Record<string, string | boolean | undefined>;
+    readonly logger: Logger;
+    readonly prompter: Prompter;
+    readonly state: StateStore;
+    readonly secrets: Secrets;
+    constructor(opts: ContextOptions);
+    resolve(...parts: string[]): string;
+    templatesDir(): string;
+}
+//# sourceMappingURL=context.d.ts.map

package/dist/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAE5C,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,OAAO,CAAA;IACf,GAAG,EAAE,OAAO,CAAA;IACZ,KAAK,EAAE,OAAO,CAAA;IACd,cAAc,EAAE,OAAO,CAAA;IACvB,EAAE,CAAC,EAAE,cAAc,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAA;IACtD,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,QAAQ,CAAA;IAClB,KAAK,EAAE,UAAU,CAAA;CAClB;AAED,MAAM,WAAW,OAAO;IACtB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,qBAAa,OAAO;IAClB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAA;IAChC,EAAE,EAAE,cAAc,CAAA;IAClB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAA;IAC/D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAK;gBAElB,IAAI,EAAE,cAAc;IAchC,OAAO,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM;IAInC,YAAY,IAAI,MAAM;CAIvB"}

package/dist/context.js

@@ -0,0 +1,37 @@
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+export class Context {
+    cwd;
+    apply;
+    dryRun;
+    yes;
+    reset;
+    resetConfirmed;
+    pm;
+    cliFlags;
+    logger;
+    prompter;
+    state;
+    secrets = {};
+    constructor(opts) {
+        this.cwd = opts.cwd;
+        this.apply = opts.apply;
+        this.dryRun = opts.dryRun;
+        this.yes = opts.yes;
+        this.reset = opts.reset;
+        this.resetConfirmed = opts.resetConfirmed;
+        this.pm = opts.pm ?? 'pnpm';
+        this.cliFlags = opts.cliFlags;
+        this.logger = opts.logger;
+        this.prompter = opts.prompter;
+        this.state = opts.state;
+    }
+    resolve(...parts) {
+        return resolve(this.cwd, ...parts);
+    }
+    templatesDir() {
+        const here = dirname(fileURLToPath(import.meta.url));
+        return resolve(here, './templates');
+    }
+}
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAyBxC,MAAM,OAAO,OAAO;IACT,GAAG,CAAQ;IACX,KAAK,CAAS;IACd,MAAM,CAAS;IACf,GAAG,CAAS;IACZ,KAAK,CAAS;IACd,cAAc,CAAS;IAChC,EAAE,CAAgB;IACT,QAAQ,CAA8C;IACtD,MAAM,CAAQ;IACd,QAAQ,CAAU;IAClB,KAAK,CAAY;IACjB,OAAO,GAAY,EAAE,CAAA;IAE9B,YAAY,IAAoB;QAC9B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAA;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QACzB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAA;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;QACvB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAA;QACzC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,MAAM,CAAA;QAC3B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;QAC7B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;QAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;IACzB,CAAC;IAED,OAAO,CAAC,GAAG,KAAe;QACxB,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAA;IACpC,CAAC;IAED,YAAY;QACV,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QACpD,OAAO,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;IACrC,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { runDoctor } from './commands/doctor.js';
+export { runInit } from './commands/init.js';
+export { PHASE_IDS, PHASES } from './phases/index.js';
+export type { Phase, PhaseId, PhaseState, Plan } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AACrD,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA"}

package/dist/index.js

@@ -0,0 +1,4 @@
+export { runDoctor } from './commands/doctor.js';
+export { runInit } from './commands/init.js';
+export { PHASE_IDS, PHASES } from './phases/index.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/lib/pg-url.d.ts

@@ -0,0 +1,11 @@
+export interface PgConn {
+    host: string;
+    port: number;
+    user: string;
+    password: string;
+    database: string;
+}
+export declare function buildPgUrl(c: PgConn): string;
+export declare function parsePgUrl(raw: string): PgConn;
+export declare function withDatabase(c: PgConn, database: string): PgConn;
+//# sourceMappingURL=pg-url.d.ts.map

package/dist/lib/pg-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-url.d.ts","sourceRoot":"","sources":["../../src/lib/pg-url.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAI5C;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAY9C;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEhE"}

package/dist/lib/pg-url.js

@@ -0,0 +1,22 @@
+export function buildPgUrl(c) {
+    const u = encodeURIComponent(c.user);
+    const p = encodeURIComponent(c.password);
+    return `postgresql://${u}:${p}@${c.host}:${c.port}/${encodeURIComponent(c.database)}`;
+}
+export function parsePgUrl(raw) {
+    const url = new URL(raw);
+    if (url.protocol !== 'postgresql:' && url.protocol !== 'postgres:') {
+        throw new Error(`expected postgresql:// URL, got ${url.protocol}`);
+    }
+    return {
+        host: url.hostname,
+        port: url.port ? Number(url.port) : 5432,
+        user: decodeURIComponent(url.username),
+        password: decodeURIComponent(url.password),
+        database: url.pathname.replace(/^\//, '') || 'postgres',
+    };
+}
+export function withDatabase(c, database) {
+    return { ...c, database };
+}
+//# sourceMappingURL=pg-url.js.map

package/dist/lib/pg-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-url.js","sourceRoot":"","sources":["../../src/lib/pg-url.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,MAAM,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IACpC,MAAM,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;IACxC,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAA;AACvF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACxB,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,mCAAmC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;IACpE,CAAC;IACD,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,QAAQ;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QACxC,IAAI,EAAE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC;QACtC,QAAQ,EAAE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC1C,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,UAAU;KACxD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAS,EAAE,QAAgB;IACtD,OAAO,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAA;AAC3B,CAAC"}

package/dist/manifest/deps.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Single source of truth for the npm packages a Byline-on-TanStack-Start
+ * install needs in the host application's `package.json`. Consumed by the
+ * `deps` phase (to install missing entries) and by `doctor` (to report
+ * what's missing without re-running the install).
+ *
+ * Versioning policy: `@byline/*` packages are released in lockstep, so
+ * they share `BYLINE_VERSION`. `@byline/host-tanstack-start` rides its
+ * own `1.x` line because its API surface (route stubs, integrations) is
+ * stable across Byline minor bumps and consumers pin against it
+ * separately.
+ *
+ * Scope: this list is intentionally minimal — only packages that are
+ * directly imported by files we drop into the user's tree (`byline/`,
+ * `src/routes/(byline)/`, `src/ui/byline/`). Transitive deps reach the
+ * user via the `@byline/*` package boundary and don't need declaring.
+ */
+export type DepGroup = 'byline' | 'runtime' | 'dev';
+export interface DepSpec {
+    name: string;
+    version: string;
+    group: DepGroup;
+    /** Short human-readable reason this is on the list. */
+    note: string;
+}
+export declare const BYLINE_VERSION = "^0.10.0";
+export declare const HOST_TANSTACK_VERSION = "^1.0.0";
+export declare const DEP_SPECS: readonly DepSpec[];
+//# sourceMappingURL=deps.d.ts.map

package/dist/manifest/deps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps.d.ts","sourceRoot":"","sources":["../../src/manifest/deps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,CAAA;AAEnD,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,QAAQ,CAAA;IACf,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAA;CACb;AAED,eAAO,MAAM,cAAc,YAAY,CAAA;AACvC,eAAO,MAAM,qBAAqB,WAAW,CAAA;AAE7C,eAAO,MAAM,SAAS,EAAE,SAAS,OAAO,EA8E9B,CAAA"}

package/dist/manifest/deps.js

@@ -0,0 +1,97 @@
+/**
+ * Single source of truth for the npm packages a Byline-on-TanStack-Start
+ * install needs in the host application's `package.json`. Consumed by the
+ * `deps` phase (to install missing entries) and by `doctor` (to report
+ * what's missing without re-running the install).
+ *
+ * Versioning policy: `@byline/*` packages are released in lockstep, so
+ * they share `BYLINE_VERSION`. `@byline/host-tanstack-start` rides its
+ * own `1.x` line because its API surface (route stubs, integrations) is
+ * stable across Byline minor bumps and consumers pin against it
+ * separately.
+ *
+ * Scope: this list is intentionally minimal — only packages that are
+ * directly imported by files we drop into the user's tree (`byline/`,
+ * `src/routes/(byline)/`, `src/ui/byline/`). Transitive deps reach the
+ * user via the `@byline/*` package boundary and don't need declaring.
+ */
+export const BYLINE_VERSION = '^0.10.0';
+export const HOST_TANSTACK_VERSION = '^1.0.0';
+export const DEP_SPECS = [
+    // ---- @byline/* — released in lockstep at BYLINE_VERSION -----------------
+    {
+        name: '@byline/admin',
+        version: BYLINE_VERSION,
+        group: 'byline',
+        note: 'admin user / role / permission modules + JwtSessionProvider',
+    },
+    {
+        name: '@byline/auth',
+        version: BYLINE_VERSION,
+        group: 'byline',
+        note: 'actor primitives, RequestContext, AbilityRegistry',
+    },
+    {
+        name: '@byline/client',
+        version: BYLINE_VERSION,
+        group: 'byline',
+        note: 'in-process SDK over storage primitives + document lifecycle',
+    },
+    {
+        name: '@byline/core',
+        version: BYLINE_VERSION,
+        group: 'byline',
+        note: 'types, config, patches, workflow, Zod schema builder',
+    },
+    {
+        name: '@byline/db-postgres',
+        version: BYLINE_VERSION,
+        group: 'byline',
+        note: 'Postgres adapter (Drizzle ORM)',
+    },
+    {
+        name: '@byline/host-tanstack-start',
+        version: HOST_TANSTACK_VERSION,
+        group: 'byline',
+        note: 'TanStack Start integrations + route stubs',
+    },
+    {
+        name: '@byline/richtext-lexical',
+        version: BYLINE_VERSION,
+        group: 'byline',
+        note: 'Lexical-backed richtext field + server populate',
+    },
+    {
+        name: '@byline/storage-local',
+        version: BYLINE_VERSION,
+        group: 'byline',
+        note: 'local-filesystem storage provider (default)',
+    },
+    {
+        name: '@byline/ui',
+        version: BYLINE_VERSION,
+        group: 'byline',
+        note: 'shared UI components used by admin route group',
+    },
+    // ---- Runtime third-party ------------------------------------------------
+    {
+        name: 'lodash-es',
+        version: '^4.17.21',
+        group: 'runtime',
+        note: 'used by byline/ config helpers',
+    },
+    // ---- Dev ---------------------------------------------------------------
+    {
+        name: '@types/lodash-es',
+        version: '^4.17.12',
+        group: 'dev',
+        note: 'types for lodash-es',
+    },
+    {
+        name: 'tsx',
+        version: '^4.21.0',
+        group: 'dev',
+        note: 'runs byline/seed.ts and byline/scripts/* without a build step',
+    },
+];
+//# sourceMappingURL=deps.js.map

package/dist/manifest/deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps.js","sourceRoot":"","sources":["../../src/manifest/deps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAYH,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAA;AACvC,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAAA;AAE7C,MAAM,CAAC,MAAM,SAAS,GAAuB;IAC3C,4EAA4E;IAC5E;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,6DAA6D;KACpE;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,mDAAmD;KAC1D;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,6DAA6D;KACpE;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,sDAAsD;KAC7D;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,gCAAgC;KACvC;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,qBAAqB;QAC9B,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,2CAA2C;KAClD;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,iDAAiD;KACxD;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,6CAA6C;KACpD;IACD;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,gDAAgD;KACvD;IAED,4EAA4E;IAC5E;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,gCAAgC;KACvC;IAED,2EAA2E;IAC3E;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,qBAAqB;KAC5B;IACD;QACE,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,+DAA+D;KACtE;CACO,CAAA"}

package/dist/manifest/env.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Single source of truth for the environment variables Byline expects in the
+ * host application's `.env`. Consumed by the `env` phase (to render `.env`)
+ * and by `doctor` (to report which keys are missing).
+ *
+ * Each entry describes what the key is for. How its value is obtained
+ * (default, prompt, generated, computed from db answers) is the env phase's
+ * concern — keep that logic in `phases/env.ts`, not here.
+ */
+export type EnvKey = 'VITE_SERVER_URL' | 'DB_CONNECTION_STRING' | 'BYLINE_JWT_SECRET' | 'BYLINE_SUPERADMIN_EMAIL' | 'BYLINE_SUPERADMIN_PASSWORD';
+export interface EnvSpec {
+    key: EnvKey;
+    description: string;
+    group: 'app' | 'database' | 'auth';
+}
+export declare const ENV_SPECS: readonly EnvSpec[];
+export declare const ENV_KEYS: readonly EnvKey[];
+//# sourceMappingURL=env.d.ts.map

package/dist/manifest/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/manifest/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,MAAM,MAAM,GACd,iBAAiB,GACjB,sBAAsB,GACtB,mBAAmB,GACnB,yBAAyB,GACzB,4BAA4B,CAAA;AAEhC,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,KAAK,GAAG,UAAU,GAAG,MAAM,CAAA;CACnC;AAED,eAAO,MAAM,SAAS,EAAE,SAAS,OAAO,EA0B9B,CAAA;AAEV,eAAO,MAAM,QAAQ,EAAE,SAAS,MAAM,EAAgC,CAAA"}

package/dist/manifest/env.js

@@ -0,0 +1,38 @@
+/**
+ * Single source of truth for the environment variables Byline expects in the
+ * host application's `.env`. Consumed by the `env` phase (to render `.env`)
+ * and by `doctor` (to report which keys are missing).
+ *
+ * Each entry describes what the key is for. How its value is obtained
+ * (default, prompt, generated, computed from db answers) is the env phase's
+ * concern — keep that logic in `phases/env.ts`, not here.
+ */
+export const ENV_SPECS = [
+    {
+        key: 'VITE_SERVER_URL',
+        description: 'Public origin used by SSR and the admin UI',
+        group: 'app',
+    },
+    {
+        key: 'DB_CONNECTION_STRING',
+        description: 'Postgres connection string consumed by @byline/db-postgres',
+        group: 'database',
+    },
+    {
+        key: 'BYLINE_JWT_SECRET',
+        description: 'Signing secret for the built-in JwtSessionProvider (>= 32 bytes of entropy)',
+        group: 'auth',
+    },
+    {
+        key: 'BYLINE_SUPERADMIN_EMAIL',
+        description: 'Bootstrap super-admin email seeded by byline/seed.ts',
+        group: 'auth',
+    },
+    {
+        key: 'BYLINE_SUPERADMIN_PASSWORD',
+        description: 'Bootstrap super-admin password seeded by byline/seed.ts',
+        group: 'auth',
+    },
+];
+export const ENV_KEYS = ENV_SPECS.map((s) => s.key);
+//# sourceMappingURL=env.js.map

package/dist/manifest/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/manifest/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAeH,MAAM,CAAC,MAAM,SAAS,GAAuB;IAC3C;QACE,GAAG,EAAE,iBAAiB;QACtB,WAAW,EAAE,4CAA4C;QACzD,KAAK,EAAE,KAAK;KACb;IACD;QACE,GAAG,EAAE,sBAAsB;QAC3B,WAAW,EAAE,4DAA4D;QACzE,KAAK,EAAE,UAAU;KAClB;IACD;QACE,GAAG,EAAE,mBAAmB;QACxB,WAAW,EAAE,6EAA6E;QAC1F,KAAK,EAAE,MAAM;KACd;IACD;QACE,GAAG,EAAE,yBAAyB;QAC9B,WAAW,EAAE,sDAAsD;QACnE,KAAK,EAAE,MAAM;KACd;IACD;QACE,GAAG,EAAE,4BAA4B;QACjC,WAAW,EAAE,yDAAyD;QACtE,KAAK,EAAE,MAAM;KACd;CACO,CAAA;AAEV,MAAM,CAAC,MAAM,QAAQ,GAAsB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA"}

package/dist/phases/db-init.d.ts

@@ -0,0 +1,3 @@
+import type { Phase } from '../types.js';
+export declare const dbInitPhase: Phase;
+//# sourceMappingURL=db-init.d.ts.map

package/dist/phases/db-init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-init.d.ts","sourceRoot":"","sources":["../../src/phases/db-init.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AAIxC,eAAO,MAAM,WAAW,EAAE,KA2EzB,CAAA"}

package/dist/phases/db-init.js

@@ -0,0 +1,163 @@
+import { resolve } from 'node:path';
+import { drizzle } from 'drizzle-orm/node-postgres';
+import { migrate } from 'drizzle-orm/node-postgres/migrator';
+import { Client } from 'pg';
+import { buildPgUrl, parsePgUrl, withDatabase } from '../lib/pg-url.js';
+import { isValidIdentifier } from './db.js';
+const REQUIRED_EXTENSIONS = ['pgcrypto'];
+export const dbInitPhase = {
+    id: 'db-init',
+    title: 'Database initialization — provision role + database, install extensions, run migrations',
+    defaultMode: 'confirm',
+    async detect(ctx) {
+        if (ctx.state.isComplete('db-init'))
+            return 'done';
+        const a = ctx.state.get().answers;
+        if (!a.superuserUrl || !a.dbName || !a.dbUser)
+            return 'blocked';
+        return 'pending';
+    },
+    async plan(ctx) {
+        const a = ctx.state.get().answers;
+        const notes = [];
+        if (a.dbName)
+            notes.push(`provision database "${a.dbName}"`);
+        if (a.dbUser)
+            notes.push(`provision role "${a.dbUser}" (CREATE IF NOT EXISTS)`);
+        if (ctx.reset) {
+            notes.push('--reset: existing database will be DROPPED if present');
+        }
+        else {
+            notes.push('non-destructive: existing database/role will be reused');
+        }
+        notes.push(`install extensions: ${REQUIRED_EXTENSIONS.join(', ')}`);
+        notes.push('run drizzle migrations from bundled @byline/cli templates');
+        return { writes: [], commands: [], notes };
+    },
+    async apply(_plan, ctx) {
+        const a = ctx.state.get().answers;
+        if (!a.superuserUrl || !a.dbName || !a.dbUser) {
+            ctx.logger.error('db-init prerequisites missing — run the db phase first');
+            return { state: 'blocked' };
+        }
+        if (!isValidIdentifier(a.dbName) || !isValidIdentifier(a.dbUser)) {
+            ctx.logger.error('invalid identifier — internal state is corrupt; clear .byline-install.json');
+            return { state: 'blocked' };
+        }
+        const password = await resolveAppPassword(ctx);
+        if (!password)
+            return { state: 'blocked' };
+        ctx.secrets.dbPassword = password;
+        const sup = parsePgUrl(a.superuserUrl);
+        if (ctx.reset && !ctx.resetConfirmed) {
+            const ok = await ctx.prompter.confirm({
+                message: `RESET will DROP database "${a.dbName}" if it exists. Continue?`,
+                defaultValue: false,
+            });
+            if (!ok) {
+                ctx.logger.info('reset cancelled');
+                return { state: 'blocked' };
+            }
+        }
+        await provisionRoleAndDatabase(ctx, {
+            sup,
+            dbName: a.dbName,
+            dbUser: a.dbUser,
+            password,
+            reset: ctx.reset,
+        });
+        await installExtensions(ctx, withDatabase(sup, a.dbName));
+        await runMigrations(ctx, {
+            host: sup.host,
+            port: sup.port,
+            user: a.dbUser,
+            password,
+            database: a.dbName,
+        });
+        return { state: 'done' };
+    },
+};
+async function resolveAppPassword(ctx) {
+    const fromEnv = process.env.BYLINE_DB_PASSWORD;
+    if (fromEnv) {
+        ctx.logger.info('using app role password from BYLINE_DB_PASSWORD');
+        return fromEnv;
+    }
+    const pw = await ctx.prompter.password({
+        message: 'Choose a password for the application database role',
+    });
+    if (!pw || pw.length < 8) {
+        ctx.logger.error('password must be at least 8 characters');
+        return null;
+    }
+    return pw;
+}
+async function provisionRoleAndDatabase(ctx, args) {
+    const { sup, dbName, dbUser, password, reset } = args;
+    const client = new Client({ connectionString: buildPgUrl(sup) });
+    await client.connect();
+    try {
+        const dbUserIdent = client.escapeIdentifier(dbUser);
+        const dbNameIdent = client.escapeIdentifier(dbName);
+        const roleExists = await client.query('SELECT 1 FROM pg_roles WHERE rolname = $1', [dbUser]);
+        if ((roleExists.rowCount ?? 0) === 0) {
+            ctx.logger.step(`creating role ${dbUser}`);
+            await client.query(`CREATE ROLE ${dbUserIdent} WITH LOGIN`);
+        }
+        else {
+            ctx.logger.step(`role ${dbUser} already exists`);
+        }
+        await client.query(`ALTER ROLE ${dbUserIdent} WITH PASSWORD ${client.escapeLiteral(password)}`);
+        if (reset) {
+            ctx.logger.step(`terminating connections to ${dbName}`);
+            await client.query(`SELECT pg_terminate_backend(pid)
+           FROM pg_stat_activity
+          WHERE datname = $1 AND pid <> pg_backend_pid()`, [dbName]);
+            ctx.logger.step(`dropping database ${dbName}`);
+            await client.query(`DROP DATABASE IF EXISTS ${dbNameIdent}`);
+        }
+        const dbExists = await client.query('SELECT 1 FROM pg_database WHERE datname = $1', [dbName]);
+        if ((dbExists.rowCount ?? 0) === 0) {
+            ctx.logger.step(`creating database ${dbName}`);
+            await client.query(`CREATE DATABASE ${dbNameIdent} WITH OWNER ${dbUserIdent}`);
+        }
+        else {
+            ctx.logger.step(`database ${dbName} already exists — reusing`);
+        }
+    }
+    finally {
+        await client.end().catch(() => { });
+    }
+}
+async function installExtensions(ctx, conn) {
+    const client = new Client({ connectionString: buildPgUrl(conn) });
+    await client.connect();
+    try {
+        for (const ext of REQUIRED_EXTENSIONS) {
+            const ident = client.escapeIdentifier(ext);
+            ctx.logger.step(`CREATE EXTENSION IF NOT EXISTS ${ext}`);
+            await client.query(`CREATE EXTENSION IF NOT EXISTS ${ident}`);
+        }
+    }
+    finally {
+        await client.end().catch(() => { });
+    }
+}
+async function runMigrations(ctx, args) {
+    const migrationsFolder = resolve(ctx.templatesDir(), 'migrations');
+    ctx.logger.step(`running migrations from ${migrationsFolder}`);
+    const client = new Client({ connectionString: buildPgUrl(args) });
+    await client.connect();
+    try {
+        const db = drizzle(client);
+        await migrate(db, { migrationsFolder });
+        const r = await client.query(`SELECT count(*)::text AS count
+         FROM information_schema.tables
+        WHERE table_schema = 'public'`);
+        ctx.logger.success(`migrations applied — ${r.rows[0]?.count} tables in public schema`);
+    }
+    finally {
+        await client.end().catch(() => { });
+    }
+}
+//# sourceMappingURL=db-init.js.map

package/dist/phases/db-init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-init.js","sourceRoot":"","sources":["../../src/phases/db-init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,oCAAoC,CAAA;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAA;AAE3B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAI3C,MAAM,mBAAmB,GAAG,CAAC,UAAU,CAAC,CAAA;AAExC,MAAM,CAAC,MAAM,WAAW,GAAU;IAChC,EAAE,EAAE,SAAS;IACb,KAAK,EAAE,yFAAyF;IAChG,WAAW,EAAE,SAAS;IAEtB,KAAK,CAAC,MAAM,CAAC,GAAG;QACd,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,MAAM,CAAA;QAClD,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAA;QACjC,IAAI,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,OAAO,SAAS,CAAA;QAC/D,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAG;QACZ,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAA;QACjC,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,IAAI,CAAC,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;QAC5D,IAAI,CAAC,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,MAAM,0BAA0B,CAAC,CAAA;QAC/E,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAA;QACrE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAA;QACtE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,uBAAuB,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACnE,KAAK,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAA;QACvE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;IAC5C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG;QACpB,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAA;QACjC,IAAI,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YAC9C,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAA;YAC1E,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;QAC7B,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,4EAA4E,CAAC,CAAA;YAC9F,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;QAC7B,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAA;QAC9C,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;QAC1C,GAAG,CAAC,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAA;QAEjC,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;QAEtC,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACpC,OAAO,EAAE,6BAA6B,CAAC,CAAC,MAAM,2BAA2B;gBACzE,YAAY,EAAE,KAAK;aACpB,CAAC,CAAA;YACF,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;gBAClC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;YAC7B,CAAC;QACH,CAAC;QAED,MAAM,wBAAwB,CAAC,GAAG,EAAE;YAClC,GAAG;YACH,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ;YACR,KAAK,EAAE,GAAG,CAAC,KAAK;SACjB,CAAC,CAAA;QAEF,MAAM,iBAAiB,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;QAEzD,MAAM,aAAa,CAAC,GAAG,EAAE;YACvB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,CAAC,CAAC,MAAM;YACd,QAAQ;YACR,QAAQ,EAAE,CAAC,CAAC,MAAM;SACnB,CAAC,CAAA;QAEF,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;IAC1B,CAAC;CACF,CAAA;AAED,KAAK,UAAU,kBAAkB,CAAC,GAAY;IAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAA;IAC9C,IAAI,OAAO,EAAE,CAAC;QACZ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAA;QAClE,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACrC,OAAO,EAAE,qDAAqD;KAC/D,CAAC,CAAA;IACF,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAA;QAC1D,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAUD,KAAK,UAAU,wBAAwB,CAAC,GAAY,EAAE,IAAmB;IACvE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;IACrD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,gBAAgB,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAChE,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;IACtB,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QACnD,MAAM,WAAW,GAAG,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAEnD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5F,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,MAAM,EAAE,CAAC,CAAA;YAC1C,MAAM,MAAM,CAAC,KAAK,CAAC,eAAe,WAAW,aAAa,CAAC,CAAA;QAC7D,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,MAAM,iBAAiB,CAAC,CAAA;QAClD,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,CAAC,cAAc,WAAW,kBAAkB,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAE/F,IAAI,KAAK,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,MAAM,EAAE,CAAC,CAAA;YACvD,MAAM,MAAM,CAAC,KAAK,CAChB;;yDAEiD,EACjD,CAAC,MAAM,CAAC,CACT,CAAA;YACD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,MAAM,EAAE,CAAC,CAAA;YAC9C,MAAM,MAAM,CAAC,KAAK,CAAC,2BAA2B,WAAW,EAAE,CAAC,CAAA;QAC9D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;QAC7F,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,MAAM,EAAE,CAAC,CAAA;YAC9C,MAAM,MAAM,CAAC,KAAK,CAAC,mBAAmB,WAAW,eAAe,WAAW,EAAE,CAAC,CAAA;QAChF,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,MAAM,2BAA2B,CAAC,CAAA;QAChE,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACpC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,GAAY,EAAE,IAAmC;IAChF,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,gBAAgB,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACjE,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;IACtB,IAAI,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;YAC1C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAA;YACxD,MAAM,MAAM,CAAC,KAAK,CAAC,kCAAkC,KAAK,EAAE,CAAC,CAAA;QAC/D,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACpC,CAAC;AACH,CAAC;AAUD,KAAK,UAAU,aAAa,CAAC,GAAY,EAAE,IAAiB;IAC1D,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,YAAY,CAAC,CAAA;IAClE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,gBAAgB,EAAE,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,gBAAgB,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACjE,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;IACtB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,OAAO,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAA;QACvC,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,KAAK,CAC1B;;sCAEgC,CACjC,CAAA;QACD,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,0BAA0B,CAAC,CAAA;IACxF,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACpC,CAAC;AACH,CAAC"}

package/dist/phases/db.d.ts

@@ -0,0 +1,11 @@
+import type { Phase } from '../types.js';
+export declare const dbPhase: Phase;
+export declare function isValidIdentifier(s: string): boolean;
+export declare function buildAppConnUrl(opts: {
+    host: string;
+    port: number;
+    user: string;
+    password: string;
+    database: string;
+}): string;
+//# sourceMappingURL=db.d.ts.map

package/dist/phases/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/phases/db.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AAExC,eAAO,MAAM,OAAO,EAAE,KAsFrB,CAAA;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;CACjB,GAAG,MAAM,CAET"}

package/dist/phases/db.js

@@ -0,0 +1,93 @@
+import { Client } from 'pg';
+import { buildPgUrl, parsePgUrl } from '../lib/pg-url.js';
+export const dbPhase = {
+    id: 'db',
+    title: 'Database — choose strategy and verify connection',
+    defaultMode: 'confirm',
+    async detect(ctx) {
+        return ctx.state.isComplete('db') ? 'done' : 'pending';
+    },
+    async plan(ctx) {
+        const a = ctx.state.get().answers;
+        const notes = [];
+        if (a.dbStrategy)
+            notes.push(`strategy: ${a.dbStrategy}`);
+        if (a.dbHost)
+            notes.push(`host: ${a.dbHost}:${a.dbPort}`);
+        if (a.dbName)
+            notes.push(`database: ${a.dbName}`);
+        if (a.dbUser)
+            notes.push(`role: ${a.dbUser}`);
+        if (notes.length === 0)
+            notes.push('will prompt for database connection details');
+        return { writes: [], commands: [], notes };
+    },
+    async apply(_plan, ctx) {
+        const strategy = await ctx.prompter.select({
+            message: 'How will Byline connect to Postgres?',
+            options: [
+                { value: 'existing', label: 'I have a running Postgres I will provide credentials for' },
+                { value: 'docker', label: 'Use the bundled docker-compose to spin one up' },
+            ],
+        });
+        if (strategy === 'docker') {
+            ctx.logger.warn('docker strategy is stubbed for v1 — please use --strategy existing for now');
+            return { state: 'blocked' };
+        }
+        const superuserUrl = await ctx.prompter.text({
+            message: 'Postgres superuser connection URL (used for role/database creation)',
+            placeholder: 'postgresql://postgres:postgres@127.0.0.1:5432/postgres',
+            defaultValue: 'postgresql://postgres:postgres@127.0.0.1:5432/postgres',
+        });
+        const dbName = await ctx.prompter.text({
+            message: 'Database name to create',
+            defaultValue: 'byline',
+        });
+        if (!isValidIdentifier(dbName)) {
+            ctx.logger.error(`invalid db name "${dbName}" — must match /^[a-z_][a-z0-9_]{0,62}$/`);
+            return { state: 'blocked' };
+        }
+        const dbUser = await ctx.prompter.text({
+            message: 'Application role (database user)',
+            defaultValue: 'byline',
+        });
+        if (!isValidIdentifier(dbUser)) {
+            ctx.logger.error(`invalid role "${dbUser}" — must match /^[a-z_][a-z0-9_]{0,62}$/`);
+            return { state: 'blocked' };
+        }
+        const sup = parsePgUrl(superuserUrl);
+        const spinner = ctx.prompter.spinner();
+        spinner.start(`testing superuser connection to ${sup.host}:${sup.port}`);
+        const client = new Client({ connectionString: superuserUrl });
+        try {
+            await client.connect();
+            const r = await client.query('SELECT version()');
+            spinner.stop(`connected — ${r.rows[0]?.version.split(' ').slice(0, 2).join(' ')}`);
+        }
+        catch (e) {
+            spinner.stop('connection failed');
+            ctx.logger.error(e.message);
+            return { state: 'blocked' };
+        }
+        finally {
+            await client.end().catch(() => { });
+        }
+        ctx.state.patchAnswers({
+            dbStrategy: strategy,
+            dbHost: sup.host,
+            dbPort: sup.port,
+            dbName,
+            dbUser,
+            superuserUrl,
+        });
+        ctx.logger.info(`will provision database "${dbName}" owned by role "${dbUser}"`);
+        return { state: 'done' };
+    },
+};
+export function isValidIdentifier(s) {
+    return /^[a-z_][a-z0-9_]{0,62}$/.test(s);
+}
+export function buildAppConnUrl(opts) {
+    return buildPgUrl(opts);
+}
+//# sourceMappingURL=db.js.map