@caelo-cms/provisioning 0.10.67 → 0.10.68

package/dist/agent-db.js

@@ -14,6 +14,132 @@ var __export = (target, all) => {
     });
 };
 
+// ../../node_modules/colorjs.io/src/util.js
+var exports_util2 = {};
+__export(exports_util2, {
+  bisectLeft: () => bisectLeft,
+  clamp: () => clamp,
+  copySign: () => copySign,
+  diag: () => diag,
+  interpolate: () => interpolate,
+  interpolateInv: () => interpolateInv,
+  inv: () => inv,
+  isInstance: () => isInstance,
+  isNone: () => isNone,
+  isString: () => isString,
+  lu: () => lu,
+  mapRange: () => mapRange,
+  multiplyMatrices: () => multiplyMatrices,
+  multiply_v3_m3x3: () => multiply_v3_m3x3,
+  serializeNumber: () => serializeNumber,
+  skipNone: () => skipNone,
+  solve: () => solve,
+  spow: () => spow,
+  toPrecision: () => toPrecision,
+  type: () => type,
+  zdiv: () => zdiv
+});
+
+// ../../node_modules/colorjs.io/src/contrast/index.js
+var exports_contrast = {};
+__export(exports_contrast, {
+  contrastAPCA: () => contrastAPCA,
+  contrastDeltaPhi: () => contrastDeltaPhi,
+  contrastLstar: () => contrastLstar,
+  contrastMichelson: () => contrastMichelson,
+  contrastWCAG21: () => contrastWCAG21,
+  contrastWeber: () => contrastWeber
+});
+
+// ../../node_modules/colorjs.io/src/luminance.js
+var exports_luminance = {};
+__export(exports_luminance, {
+  getLuminance: () => getLuminance,
+  register: () => register,
+  setLuminance: () => setLuminance
+});
+
+// ../../node_modules/colorjs.io/src/chromaticity.js
+var exports_chromaticity = {};
+__export(exports_chromaticity, {
+  register: () => register2,
+  uv: () => uv,
+  xy: () => xy
+});
+
+// ../../node_modules/colorjs.io/src/variations.js
+var exports_variations = {};
+__export(exports_variations, {
+  darken: () => darken,
+  lighten: () => lighten
+});
+
+// ../../node_modules/colorjs.io/src/interpolation.js
+var exports_interpolation = {};
+__export(exports_interpolation, {
+  isRange: () => isRange,
+  mix: () => mix,
+  range: () => range,
+  register: () => register3,
+  steps: () => steps
+});
+
+// ../../node_modules/colorjs.io/src/spaces/index-fn.js
+var exports_index_fn = {};
+__export(exports_index_fn, {
+  A98RGB: () => a98rgb_default,
+  A98RGB_Linear: () => a98rgb_linear_default,
+  ACEScc: () => acescc_default,
+  ACEScg: () => acescg_default,
+  CAM16_JMh: () => cam16_default,
+  HCT: () => hct_default,
+  HPLuv: () => hpluv_default,
+  HSL: () => hsl_default,
+  HSL_P3: () => hsl_p3_default,
+  HSL_REC2020: () => hsl_rec2020_default,
+  HSLuv: () => hsluv_default,
+  HSV: () => hsv_default,
+  HWB: () => hwb_default,
+  HelmGen: () => helmgen_default,
+  HelmGenLCh: () => helmgenlch_default,
+  Helmlab: () => helmlab_default,
+  ICTCP: () => ictcp_default,
+  JzCzHz: () => jzczhz_default,
+  Jzazbz: () => jzazbz_default,
+  LCH: () => lch_default,
+  LCH_P3: () => lch_p3_default,
+  LCH_REC_2020: () => lch_rec2020_default,
+  LCH_sRGB: () => lch_srgb_default,
+  LCHuv: () => lchuv_default,
+  Lab: () => lab_default,
+  Lab_D65: () => lab_d65_default,
+  Luv: () => luv_default,
+  OKLCH: () => oklch_default,
+  OKLCH_P3: () => oklch_p3_default,
+  OKLCH_REC_2020: () => oklch_rec2020_default,
+  OKLCH_sRGB: () => oklch_srgb_default,
+  OKLab: () => oklab_default,
+  OKLrCH: () => oklrch_default,
+  OKLrab: () => oklrab_default,
+  Okhsl: () => okhsl_default,
+  Okhsv: () => okhsv_default,
+  P3: () => p3_default,
+  P3_Linear: () => p3_linear_default,
+  ProPhoto: () => prophoto_default,
+  ProPhoto_Linear: () => prophoto_linear_default,
+  REC_2020: () => rec2020_default,
+  REC_2020_Linear: () => rec2020_linear_default,
+  REC_2020_Scene_Referred: () => rec2020_oetf_default,
+  REC_2100_HLG: () => rec2100_hlg_default,
+  REC_2100_Linear: () => rec2100_linear_default,
+  REC_2100_PQ: () => rec2100_pq_default,
+  XYZ_ABS_D65: () => xyz_abs_d65_default,
+  XYZ_D50: () => xyz_d50_default,
+  XYZ_D65: () => xyz_d65_default,
+  sRGB: () => srgb_default,
+  sRGB_Linear: () => srgb_linear_default
+});
+
 // ../../node_modules/zod/v4/core/util.js
 function getEnumValues(entries) {
   const numericValues = Object.values(entries).filter((v) => typeof v === "number");
@@ -6546,6 +6672,17 @@ function pathOfEmbeddedUrl(url) {
   }
 }
 
+// ../shared/src/strip-cdata.ts
+var CDATA_ENVELOPE = /^\s*<!\[CDATA\[([\s\S]*)\]\]>\s*$/;
+function unwrapCdataEnvelope(value) {
+  if (typeof value !== "string")
+    return value;
+  const m = CDATA_ENVELOPE.exec(value);
+  if (!m || m[1] === undefined || m[1].includes("]]>"))
+    return value;
+  return m[1];
+}
+
 // ../shared/src/ai-tools.ts
 function stripSurroundingQuotes(v) {
   if (typeof v !== "string")
@@ -6553,6 +6690,9 @@ function stripSurroundingQuotes(v) {
   const m = v.match(/^(["'])([\s\S]+)\1$/);
   return m ? m[2] : v;
 }
+function sourceTextArg(schema) {
+  return preprocess(unwrapCdataEnvelope, schema);
+}
 var positionInputSchema = preprocess(stripSurroundingQuotes, union([
   _enum(["top", "bottom"]),
   preprocess((v) => typeof v === "string" && /^\d+$/.test(v) ? Number.parseInt(v, 10) : v, number2().int().min(0).max(1000))
@@ -6563,9 +6703,9 @@ var editModuleToolInput = object({
   description: string2().max(1000).optional(),
   kind: _enum(["chrome", "hero", "content", "cta", "utility"]).optional(),
   type: slugSchema.optional(),
-  html: string2().max(MODULE_HTML_MAX).optional(),
-  css: string2().max(MODULE_CSS_MAX).optional(),
-  js: string2().max(MODULE_JS_MAX).optional(),
+  html: sourceTextArg(string2().max(MODULE_HTML_MAX)).optional(),
+  css: sourceTextArg(string2().max(MODULE_CSS_MAX)).optional(),
+  js: sourceTextArg(string2().max(MODULE_JS_MAX)).optional(),
   fields: array(moduleFieldSchema).max(64).optional(),
   bindThemeLiterals: boolean2().optional()
 }).strict();
@@ -6580,8 +6720,9 @@ var siteMemoryProposeToolInput = object({
   body: string2().min(1).max(4000),
   rationale: string2().min(1).max(1000)
 }).strict();
+var LOAD_SKILL_MAX_SLUGS = 20;
 var loadSkillToolInput = object({
-  slugs: array(string2().min(1).max(120).regex(/^[a-z0-9-]+$/, "lowercase letters/digits/hyphens")).min(1).max(5)
+  slugs: array(string2().min(1).max(120).regex(/^[a-z0-9-]+$/, "lowercase letters/digits/hyphens")).min(1).max(LOAD_SKILL_MAX_SLUGS)
 }).strict();
 var addModuleToolInput = object({
   target: _enum(["page", "layout", "template"]),
@@ -6593,9 +6734,9 @@ var addModuleToolInput = object({
   description: string2().max(1000).optional(),
   kind: _enum(["chrome", "hero", "content", "cta", "utility"]).optional(),
   type: slugSchema.optional(),
-  html: string2().min(1).max(50000).optional(),
-  css: string2().max(50000).optional(),
-  js: string2().max(50000).optional(),
+  html: sourceTextArg(string2().min(1).max(50000)).optional(),
+  css: sourceTextArg(string2().max(50000)).optional(),
+  js: sourceTextArg(string2().max(50000)).optional(),
   fields: array(moduleFieldSchema).max(64).optional(),
   bindThemeLiterals: boolean2().optional(),
   values: record(string2(), unknown()).optional()
@@ -6741,8 +6882,8 @@ var slugInputSchema = string2().min(1).max(120).regex(/^[a-z0-9][a-z0-9-]*$/, "l
 var createTemplateToolInput = object({
   slug: slugInputSchema,
   displayName: string2().min(1).max(256),
-  html: string2().min(1).max(2000000),
-  css: string2().max(2000000).default(""),
+  html: sourceTextArg(string2().min(1).max(2000000)),
+  css: sourceTextArg(string2().max(2000000)).default(""),
   layoutId: string2().uuid().optional(),
   blocks: array(object({
     name: string2().min(1).max(80),
@@ -6768,8 +6909,8 @@ var setTemplateLayoutToolInput = object({
 var createLayoutToolInput = object({
   slug: slugInputSchema,
   displayName: string2().min(1).max(200),
-  html: string2().min(1).max(50000),
-  css: string2().max(50000).optional(),
+  html: sourceTextArg(string2().min(1).max(50000)),
+  css: sourceTextArg(string2().max(50000)).optional(),
   blocks: array(object({
     name: string2().min(1).max(80),
     displayName: string2().min(1).max(200),
@@ -7131,9 +7272,9 @@ var buildPageModuleSchema = object({
   description: string2().max(1000).optional(),
   kind: moduleKindSchema.optional(),
   type: slugSchema.optional(),
-  html: string2().min(1).max(MODULE_HTML_MAX).optional(),
-  css: string2().max(MODULE_CSS_MAX).optional(),
-  js: string2().max(MODULE_JS_MAX).optional(),
+  html: sourceTextArg(string2().min(1).max(MODULE_HTML_MAX)).optional(),
+  css: sourceTextArg(string2().max(MODULE_CSS_MAX)).optional(),
+  js: sourceTextArg(string2().max(MODULE_JS_MAX)).optional(),
   fields: array(moduleFieldSchema).max(64).optional(),
   bindThemeLiterals: boolean2().optional(),
   content: buildPageContentSchema.optional()
@@ -7172,12 +7313,6 @@ var buildPageTargetSchema = object({
 }).strict().superRefine((page, ctx) => {
   const createKeys = ["slug", "title", "name", "templateId", "status", "parentPageId"].filter((k) => page[k] !== undefined);
   if (page.pageId !== undefined) {
-    if (page.metaDescription !== undefined) {
-      ctx.addIssue({
-        code: ZodIssueCode.custom,
-        message: "page.metaDescription is written only for a page this call CREATES \u2014 drop it with pageId; an existing page without a description gets one via autofill_page_seo."
-      });
-    }
     if (createKeys.length > 0) {
       ctx.addIssue({
         code: ZodIssueCode.custom,
@@ -7212,6 +7347,7 @@ var buildPageInputSchema = object({
   }
 });
 var buildPagePlacementResultSchema = object({
+  index: number2().int().nonnegative(),
   blockName: string2(),
   position: number2().int().nonnegative(),
   moduleId: string2(),
@@ -7918,7 +8054,7 @@ var UNSAFE_KEYS = new Set(["__proto__", "constructor", "prototype"]);
 var aliasRegex = /^\{[a-zA-Z0-9_.-]+\}$/;
 var aliasString = string2().regex(aliasRegex, "DTCG alias must look like '{group.token}'");
 var colorValueString = string2().min(1).max(200).regex(/^(#[0-9a-fA-F]{3,8}|(oklch|rgb|rgba|hsl|hsla|lab|lch|color|hwb)\(.+\)|transparent|currentColor|[a-zA-Z]+)$/, "color value must be #hex, oklch(...), rgb(...), or a CSS named color");
-var dimensionValueString = string2().min(1).max(80).regex(/^-?\d+(\.\d+)?(rem|em|px|%|vh|vw|vmin|vmax|pt|pc|ch|ex|fr|deg|rad|turn|s|ms)?$|^auto$|^0$/, "dimension must be a CSS length / number / percentage");
+var dimensionValueString = string2().min(1).max(120).regex(/^-?\d+(\.\d+)?(rem|em|px|%|vh|vw|vmin|vmax|pt|pc|ch|ex|fr|deg|rad|turn|s|ms)?$|^auto$|^0$|^(calc|clamp|min|max)\([0-9a-zA-Z.%+\-*/,\s()]+\)$/, "dimension must be a CSS length / number / percentage, or clamp()/calc()/min()/max() over them");
 var fontWeightValue = union([
   number2().int().min(1).max(1000),
   _enum(["normal", "bold", "lighter", "bolder"])
@@ -8085,6 +8221,15 @@ var CATEGORY_EXPECTATIONS = {
   ease: 'a cubic-bezier(...) string, an easing keyword (linear|ease|ease-in|ease-out|ease-in-out|step-start|step-end), a DTCG [x1,y1,x2,y2] tuple, or an alias like "{motion.ease}"',
   duration: 'a duration string ending in ms or s (e.g. "200ms", "0.5s") or an alias'
 };
+function valueAtPath(root, path) {
+  let node = root;
+  for (const key of path) {
+    if (node === null || typeof node !== "object")
+      return node;
+    node = node[key];
+  }
+  return node;
+}
 function describeValue(value) {
   if (typeof value === "string")
     return JSON.stringify(value);
@@ -8126,7 +8271,7 @@ function refineKnownCategoryLeaves(category, schema, node, path, ctx) {
           ctx.addIssue({
             code: "custom",
             path: [...path, ...issue.path],
-            message: `${category} token "${String(name)}" invalid: ${issue.message} (got ${describeValue(obj.$value)})`
+            message: `${category} token "${String(name)}" invalid: ${issue.message} (got ${describeValue(valueAtPath(obj, issue.path))})`
           });
         }
       }
@@ -8340,6 +8485,11 @@ var pageLogEntrySchema = object({
   detail: pageLogDetailSchema.nullable(),
   createdAt: string2().datetime()
 }).strict();
+// ../shared/src/phase-timer.ts
+var phaseTimingSchema = object({
+  phase: string2().min(1),
+  ms: number2().int().nonnegative()
+});
 // ../shared/src/proposal-status.ts
 var PROPOSAL_STATUSES = ["pending", "applied", "rejected", "superseded"];
 var proposalStatus = _enum(PROPOSAL_STATUSES);
@@ -8515,32 +8665,6 @@ var rebuildReturnShape = object({
   }).strict()).max(100).default([]),
   summary: string2().max(4000).default("")
 }).strict();
-// ../../node_modules/colorjs.io/src/util.js
-var exports_util2 = {};
-__export(exports_util2, {
-  bisectLeft: () => bisectLeft,
-  clamp: () => clamp,
-  copySign: () => copySign,
-  diag: () => diag,
-  interpolate: () => interpolate,
-  interpolateInv: () => interpolateInv,
-  inv: () => inv,
-  isInstance: () => isInstance,
-  isNone: () => isNone,
-  isString: () => isString,
-  lu: () => lu,
-  mapRange: () => mapRange,
-  multiplyMatrices: () => multiplyMatrices,
-  multiply_v3_m3x3: () => multiply_v3_m3x3,
-  serializeNumber: () => serializeNumber,
-  skipNone: () => skipNone,
-  solve: () => solve,
-  spow: () => spow,
-  toPrecision: () => toPrecision,
-  type: () => type,
-  zdiv: () => zdiv
-});
-
 // ../../node_modules/colorjs.io/src/multiply-matrices.js
 function multiplyMatrices(A, B) {
   let m = A.length;
@@ -11999,24 +12123,7 @@ function equals(color1, color2) {
   color2 = getColor(color2);
   return color1.space === color2.space && color1.alpha === color2.alpha && color1.coords.every((c, i) => c === color2.coords[i]);
 }
-// ../../node_modules/colorjs.io/src/contrast/index.js
-var exports_contrast = {};
-__export(exports_contrast, {
-  contrastAPCA: () => contrastAPCA,
-  contrastDeltaPhi: () => contrastDeltaPhi,
-  contrastLstar: () => contrastLstar,
-  contrastMichelson: () => contrastMichelson,
-  contrastWCAG21: () => contrastWCAG21,
-  contrastWeber: () => contrastWeber
-});
-
 // ../../node_modules/colorjs.io/src/luminance.js
-var exports_luminance = {};
-__export(exports_luminance, {
-  getLuminance: () => getLuminance,
-  register: () => register,
-  setLuminance: () => setLuminance
-});
 function getLuminance(color) {
   return get(color, [xyz_d65_default, "y"]);
 }
@@ -12226,12 +12333,6 @@ function contrast(background, foreground, o) {
 }
 
 // ../../node_modules/colorjs.io/src/chromaticity.js
-var exports_chromaticity = {};
-__export(exports_chromaticity, {
-  register: () => register2,
-  uv: () => uv,
-  xy: () => xy
-});
 function uv(color) {
   let [X, Y, Z] = getAll(color, xyz_d65_default);
   let denom = X + 15 * Y + 3 * Z;
@@ -12268,11 +12369,6 @@ function deltaE(c1, c2, o = {}) {
   throw new TypeError(`Unknown deltaE method: ${method}`);
 }
 // ../../node_modules/colorjs.io/src/variations.js
-var exports_variations = {};
-__export(exports_variations, {
-  darken: () => darken,
-  lighten: () => lighten
-});
 function lighten(color, amount = 0.25) {
   let space = ColorSpace.get("oklch", "lch");
   let lightness = [space, "l"];
@@ -12286,14 +12382,6 @@ function darken(color, amount = 0.25) {
 lighten.returns = "color";
 darken.returns = "color";
 // ../../node_modules/colorjs.io/src/interpolation.js
-var exports_interpolation = {};
-__export(exports_interpolation, {
-  isRange: () => isRange,
-  mix: () => mix,
-  range: () => range,
-  register: () => register3,
-  steps: () => steps
-});
 function mix(c1, c2, p, o = {}) {
   [c1, c2] = [getColor(c1), getColor(c2)];
   if (type(p) === "object") {
@@ -12436,63 +12524,6 @@ function register3(Color) {
   Color.defineFunction("range", range, { returns: "function<color>" });
   Color.defineFunction("steps", steps, { returns: "array<color>" });
 }
-
-// ../../node_modules/colorjs.io/src/spaces/index-fn.js
-var exports_index_fn = {};
-__export(exports_index_fn, {
-  A98RGB: () => a98rgb_default,
-  A98RGB_Linear: () => a98rgb_linear_default,
-  ACEScc: () => acescc_default,
-  ACEScg: () => acescg_default,
-  CAM16_JMh: () => cam16_default,
-  HCT: () => hct_default,
-  HPLuv: () => hpluv_default,
-  HSL: () => hsl_default,
-  HSL_P3: () => hsl_p3_default,
-  HSL_REC2020: () => hsl_rec2020_default,
-  HSLuv: () => hsluv_default,
-  HSV: () => hsv_default,
-  HWB: () => hwb_default,
-  HelmGen: () => helmgen_default,
-  HelmGenLCh: () => helmgenlch_default,
-  Helmlab: () => helmlab_default,
-  ICTCP: () => ictcp_default,
-  JzCzHz: () => jzczhz_default,
-  Jzazbz: () => jzazbz_default,
-  LCH: () => lch_default,
-  LCH_P3: () => lch_p3_default,
-  LCH_REC_2020: () => lch_rec2020_default,
-  LCH_sRGB: () => lch_srgb_default,
-  LCHuv: () => lchuv_default,
-  Lab: () => lab_default,
-  Lab_D65: () => lab_d65_default,
-  Luv: () => luv_default,
-  OKLCH: () => oklch_default,
-  OKLCH_P3: () => oklch_p3_default,
-  OKLCH_REC_2020: () => oklch_rec2020_default,
-  OKLCH_sRGB: () => oklch_srgb_default,
-  OKLab: () => oklab_default,
-  OKLrCH: () => oklrch_default,
-  OKLrab: () => oklrab_default,
-  Okhsl: () => okhsl_default,
-  Okhsv: () => okhsv_default,
-  P3: () => p3_default,
-  P3_Linear: () => p3_linear_default,
-  ProPhoto: () => prophoto_default,
-  ProPhoto_Linear: () => prophoto_linear_default,
-  REC_2020: () => rec2020_default,
-  REC_2020_Linear: () => rec2020_linear_default,
-  REC_2020_Scene_Referred: () => rec2020_oetf_default,
-  REC_2100_HLG: () => rec2100_hlg_default,
-  REC_2100_Linear: () => rec2100_linear_default,
-  REC_2100_PQ: () => rec2100_pq_default,
-  XYZ_ABS_D65: () => xyz_abs_d65_default,
-  XYZ_D50: () => xyz_d50_default,
-  XYZ_D65: () => xyz_d65_default,
-  sRGB: () => srgb_default,
-  sRGB_Linear: () => srgb_linear_default
-});
-
 // ../../node_modules/colorjs.io/src/spaces/hsl.js
 var hsl_default = new ColorSpace({
   id: "hsl",
@@ -18120,6 +18151,30 @@ async function runPostCommitEffects(effects) {
 // ../query-api/src/adapter.ts
 var SQL3 = globalThis.Bun?.SQL;
 var DEFAULT_ROLES = { admin: "admin_role", public: ["admin_role", "public_role"] };
+var POOL_IDLE_TIMEOUT_SECONDS = 300;
+var COMMIT_ROLLED_BACK = "ERR_POSTGRES_COMMIT_ROLLED_BACK";
+var MIN_BUN_VERSION = "1.4.4";
+function assertPoolSafeBun(version) {
+  const parts = (v) => v.split("-")[0]?.split(".").map(Number) ?? [];
+  const have = parts(version);
+  const need = parts(MIN_BUN_VERSION);
+  for (let i = 0;i < need.length; i++) {
+    const h = have[i] ?? 0;
+    const n = need[i] ?? 0;
+    if (h > n)
+      return;
+    if (h < n) {
+      throw new Error(`DatabaseAdapter needs Bun >= ${MIN_BUN_VERSION} (running ${version}): older Bun closes pooled connections mid-transaction after the idle timeout. Upgrade Bun.`);
+    }
+  }
+}
+
+class DatabaseUnresponsiveError extends Error {
+  name = "DatabaseUnresponsiveError";
+  constructor(pool, deadlineMs) {
+    super(`the ${pool} database pool did not answer within ${deadlineMs} ms; its connections hang or the database is overloaded`);
+  }
+}
 
 class AdminDatabaseUnavailableError extends Error {
   name = "AdminDatabaseUnavailableError";
@@ -18141,6 +18196,21 @@ function validatePoolMax(value, source) {
   }
   return value;
 }
+function withDeadline(work, signal, onMissed) {
+  if (signal.aborted)
+    return Promise.reject(onMissed());
+  return new Promise((resolve, reject) => {
+    const abort = () => reject(onMissed());
+    signal.addEventListener("abort", abort, { once: true });
+    Promise.resolve(work).then((v) => {
+      signal.removeEventListener("abort", abort);
+      resolve(v);
+    }, (e) => {
+      signal.removeEventListener("abort", abort);
+      reject(e);
+    });
+  });
+}
 function postCommitFailureMessage(failures) {
   const list = failures.map((f) => `${f.effect.label} (${f.message})`).join("; ");
   return `The change is saved, but its follow-up in the running server failed: ${list}. Do not repeat the change. Restart the admin server so the running state is rebuilt from the saved data; the failure is in the audit log.`;
@@ -18160,8 +18230,10 @@ class DatabaseAdapter {
     if (config.adminDatabaseUrl === null !== (this.#roles.admin === null)) {
       throw new Error("DatabaseAdapter: a public-only adapter (adminDatabaseUrl: null) must expect no admin role, and an adapter with an admin URL must expect one");
     }
+    assertPoolSafeBun(globalThis.Bun?.version ?? "0");
     const poolMax = resolvePoolMax(config.poolMax);
-    const open = (url) => poolMax === undefined ? new SQL3(url) : new SQL3(url, { max: poolMax });
+    const idleTimeout = config.poolIdleTimeoutSeconds ?? POOL_IDLE_TIMEOUT_SECONDS;
+    const open = (url) => new SQL3(url, poolMax === undefined ? { idleTimeout } : { max: poolMax, idleTimeout });
     this.#adminRaw = config.adminDatabaseUrl === null ? null : open(config.adminDatabaseUrl);
     this.#publicRaw = open(config.publicDatabaseUrl);
     this.#admin = this.#adminRaw === null ? null : drizzle(this.#adminRaw);
@@ -18200,20 +18272,52 @@ class DatabaseAdapter {
     return this.#verifyPromise;
   }
   async#verifyRolesOnce() {
-    if (this.#adminRaw !== null) {
-      const admin = await this.#identity(this.#adminRaw);
-      if (admin.user !== this.#roles.admin || admin.database !== "cms_admin") {
-        throw new Error(`DatabaseAdapter admin pool expected (${this.#roles.admin}, cms_admin) but connected as (${admin.user}, ${admin.database}). Check ADMIN_DATABASE_URL.`);
+    if (this.#adminRaw !== null)
+      this.#assertIdentity("admin", await this.#identity(this.#adminRaw));
+    this.#assertIdentity("public", await this.#identity(this.#publicRaw));
+  }
+  #assertIdentity(pool, id) {
+    if (pool === "admin") {
+      if (id.user !== this.#roles.admin || id.database !== "cms_admin") {
+        throw new Error(`DatabaseAdapter admin pool expected (${this.#roles.admin}, cms_admin) but connected as (${id.user}, ${id.database}). Check ADMIN_DATABASE_URL.`);
       }
+      return;
     }
-    const pub = await this.#identity(this.#publicRaw);
-    if (pub.database !== "cms_public") {
-      throw new Error(`DatabaseAdapter public pool expected database cms_public but connected to ${pub.database}. Check PUBLIC_DATABASE_URL / PUBLIC_ADMIN_DATABASE_URL.`);
+    if (id.database !== "cms_public") {
+      throw new Error(`DatabaseAdapter public pool expected database cms_public but connected to ${id.database}. Check PUBLIC_DATABASE_URL / PUBLIC_ADMIN_DATABASE_URL.`);
     }
-    if (!this.#roles.public.includes(pub.user)) {
-      throw new Error(`DatabaseAdapter public pool expected user ${this.#roles.public.join(" or ")}, got ${pub.user}.`);
+    if (!this.#roles.public.includes(id.user)) {
+      throw new Error(`DatabaseAdapter public pool expected user ${this.#roles.public.join(" or ")}, got ${id.user}.`);
     }
   }
+  async ping(deadlineMs) {
+    const deadline = AbortSignal.timeout(deadlineMs);
+    const pools = [["public", this.#publicRaw]];
+    if (this.#adminRaw !== null)
+      pools.unshift(["admin", this.#adminRaw]);
+    await Promise.all(pools.map(async ([name, pool]) => {
+      const unresponsive = () => new DatabaseUnresponsiveError(name, deadlineMs);
+      let reserved;
+      try {
+        reserved = await pool.reserve({ signal: deadline });
+      } catch (e) {
+        if (deadline.aborted)
+          throw unresponsive();
+        throw e;
+      }
+      let identity;
+      try {
+        identity = await withDeadline(this.#identity(reserved), deadline, unresponsive);
+      } catch (e) {
+        await reserved.close().catch(() => {
+          return;
+        });
+        throw e;
+      }
+      reserved.release();
+      this.#assertIdentity(name, identity);
+    }));
+  }
   async#identity(pool) {
     const rows = await pool`SELECT current_user::text AS user, current_database()::text AS database`;
     const row = rows[0];
@@ -18228,6 +18332,7 @@ class DatabaseAdapter {
     let publishAfterCommit = false;
     let postCommit = [];
     let result;
+    let handlerError = null;
     try {
       result = await db.transaction(async (tx) => {
         postCommit = collectPostCommitEffects(tx);
@@ -18238,6 +18343,8 @@ class DatabaseAdapter {
             return err(branchNotFound(op.name, denied));
         }
         const out = await op.handler(ctx, validatedInput, tx);
+        if (!out.ok)
+          handlerError = out;
         if (out.ok && op.database === "cms_admin") {
           publishAfterCommit = await this.#projectionDirty(tx);
         }
@@ -18255,6 +18362,9 @@ class DatabaseAdapter {
         });
       }
       const pgDetail = extractPgFields(thrown);
+      if (pgDetail?.code === COMMIT_ROLLED_BACK && handlerError !== null) {
+        return handlerError;
+      }
       return err({
         kind: "HandlerError",
         operation: op.name,

package/dist/compose.js

@@ -222,7 +222,7 @@ function serviceRuntime(images, service, devCommand, mounts = []) {
         return [
             "    # DEV MODE (cms-provision init --dev): runs the Caelo checkout this",
             "    # .caelo/ dir lives in. Contributors only — never an end-user install.",
-            "    image: oven/bun:1.4.2",
+            "    image: oven/bun:1.4.4",
             "    working_dir: /app",
             `    command: ${devCommand}`,
             ...volumes(["../..:/app", ...mounts]),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@caelo-cms/provisioning",
-  "version": "0.10.67",
+  "version": "0.10.68",
   "private": false,
   "license": "MPL-2.0",
   "description": "Pulumi-driven provisioning for Caelo CMS — `bunx @caelo-cms/provisioning --provider <self-hosted|gcp|aws|azure>` brings up a TLS-served install with Postgres + storage + secrets manager + the admin + the API gateway.",
@@ -40,7 +40,7 @@
     "prepublishOnly": "tsc -b --force && bun build ../platform-updater/src/agent-db.ts --target=bun --outfile=dist/agent-db.js && tsc --project stacks/gcp/tsconfig.json && tsc --project stacks/gcp-firebase/tsconfig.json"
   },
   "dependencies": {
-    "@caelo-cms/shared": "^0.10.67",
+    "@caelo-cms/shared": "^0.10.68",
     "@clack/prompts": "1.8.1",
     "@pulumi/command": "^1",
     "@pulumi/gcp": "^10",

package/src/compose.ts

@@ -343,7 +343,7 @@ function serviceRuntime(
     return [
       "    # DEV MODE (cms-provision init --dev): runs the Caelo checkout this",
       "    # .caelo/ dir lives in. Contributors only — never an end-user install.",
-      "    image: oven/bun:1.4.2",
+      "    image: oven/bun:1.4.4",
       "    working_dir: /app",
       `    command: ${devCommand}`,
       ...volumes(["../..:/app", ...mounts]),