@cedarjs/pg 0.1.0-alpha.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Simon Crypta
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,153 @@
+# cedar-pg
+
+Worktree-isolated local Postgres for **Vite+**, **Nx**, and **CedarJS** — powered by [autopg](https://github.com/automagik-dev/autopg).
+
+Published on npm as **`@cedarjs/pg`**.
+
+> **Alpha** (`0.1.0-alpha.0`): APIs may change. Install with the `alpha` dist-tag.
+
+## What you get (via autopg)
+
+Under the hood you get an **embedded PostgreSQL server with true concurrent connections** — native PostgreSQL 18 (not WASM), real process forking, no connection locks. It just works: **no credentials needed**, **zero config**, and **auto-provisioned databases** on first use. Any client works (`psql`, `node-postgres`, Prisma, Drizzle, TypeORM).
+
+### Development & testing
+
+| Use case                | What you get                               |
+| ----------------------- | ------------------------------------------ |
+| **Local development**   | PostgreSQL without Docker                  |
+| **Integration testing** | Real PostgreSQL, not mocks                 |
+| **CI/CD pipelines**     | Fresh databases per test run               |
+| **E2E testing**         | Isolated database for Playwright / Cypress |
+
+## What cedar-pg adds
+
+**cedar-pg** sits on that autopg host and gives each **git worktree** its own database + role, with readable names, leases, and teardown — so parallel checkouts don’t fight over one shared DB:
+
+- **1 database per git worktree** (visible in `\l` as `cpg_…`)
+- **dev** DBs persist across restarts; **test** DBs drop on dispose
+- First-class **Vite+ Task** + **Nx** / Vitest / Jest adapters
+- `postinstall` ensures the pinned `autopg` binary when missing
+
+| Layer        | Responsibility                                                      |
+| ------------ | ------------------------------------------------------------------- |
+| **autopg**   | Embedded Postgres host — concurrent, zero-config, auto-provision    |
+| **cedar-pg** | Per-worktree `CREATE DATABASE` / role, `DATABASE_URL`, dispose + GC |
+
+## Install
+
+```bash
+npm install -D @cedarjs/pg@alpha
+# or: pnpm add -D @cedarjs/pg@alpha
+# or: yarn add -D @cedarjs/pg@alpha
+```
+
+## Database names (observability)
+
+```text
+cpg_<repo>_<worktree>_<mode>_<pathHash8>
+```
+
+Examples:
+
+| Name                                | Meaning                    |
+| ----------------------------------- | -------------------------- |
+| `cpg_cedar_cedar_dev_a1b2c3d4`      | main `cedar` checkout, dev |
+| `cpg_cedar_feat_auth_test_e5f67890` | worktree `feat-auth`, test |
+
+## Prerequisites
+
+A running [autopg](https://github.com/automagik-dev/autopg) host (installed automatically by `postinstall`, or manually).
+Both the install script and binary are pinned to a release tag (currently `v3.0.7`); bump the pin in `scripts/postinstall.js` to upgrade:
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/automagik-dev/autopg/v3.0.7/install.sh \
+  | AUTOPG_VERSION=v3.0.7 bash
+```
+
+Typical flow: `autopg daemon` (or your usual host install) once per machine → `cedarpg ensure` per worktree → connect with the printed `DATABASE_URL`.
+
+## Develop this package (Vite+)
+
+```bash
+vp install
+vp check
+vp test
+vp pack          # → dist/ (dts + esm + cjs)
+vp run smoke     # build → npm-pack tarball → install + resolve exports
+```
+
+## Local consume (without npm)
+
+```bash
+# in this repo
+vp pack
+
+# in your app / Cedar
+yarn add @cedarjs/pg@file:../cedar-pg
+# or: pnpm pack && yarn add ./cedarjs-pg-0.1.0-alpha.0.tgz
+```
+
+## CLI
+
+```bash
+cedarpg ensure --mode=dev
+cedarpg ensure --mode=test --print-env
+cedarpg dispose --mode=test
+cedarpg print-url --mode=dev
+cedarpg gc   # drop DBs whose worktree root is gone (uses ~/.cedarpg/registry)
+```
+
+## Vite+ consumer adapter
+
+```ts
+// vite.config.ts
+import { defineConfig } from "vite-plus";
+import { cedarPgTasks } from "@cedarjs/pg/vite-plus";
+
+export default defineConfig({
+  run: {
+    tasks: {
+      ...cedarPgTasks(),
+      test: {
+        command: "vp test",
+        dependsOn: ["db:ensure-test"],
+        env: ["DATABASE_URL", "TEST_DATABASE_URL"],
+      },
+      dev: {
+        command: "vp dev",
+        dependsOn: ["db:ensure"],
+        env: ["DATABASE_URL"],
+      },
+    },
+  },
+});
+```
+
+## Programmatic API
+
+```ts
+import { ensure, dispose } from "@cedarjs/pg";
+
+const { databaseUrl, databaseName, dispose: drop } = await ensure({ mode: "test" });
+// … tests …
+await drop();
+```
+
+## Env
+
+| Var                           | Meaning                                                             |
+| ----------------------------- | ------------------------------------------------------------------- |
+| `AUTOPG_BIN`                  | Path to autopg                                                      |
+| `CEDAR_PG=0`                  | Disable auto-ensure in adapters                                     |
+| `TEST_DATABASE_URL`           | Escape hatch — skip ensure for external DBs (not `cpg_*` / `file:`) |
+| `CEDAR_PG_FORCE=1`            | Ignore external-URL escape hatch                                    |
+| `CEDAR_PG_REGISTRY_DIR`       | Override global lease registry (for `gc`)                           |
+| `CEDAR_PG_SKIP_POSTINSTALL=1` | Skip autopg install hook                                            |
+| `CEDAR_PG_INSTALL_AUTOPG=1`   | Force autopg install in CI                                          |
+
+## Alpha caveats
+
+- Public API may change before `0.1.0`.
+- End-to-end Postgres flows assume a working local `autopg` host; CI unit tests do not start Postgres.
+- State lives in product-owned `.cedarpg` (worktree + `~/.cedarpg/registry`) — not under autopg's `~/.autopg/`, not a generic `.pg`.
+- Password salt (`cedar-pg\\0`, scheme v1) is an opaque crypto constant; bump the scheme id to change it.

package/dist/cli.cjs

@@ -0,0 +1,139 @@
+#!/usr/bin/env node
+const require_lifecycle = require("./lifecycle-D10usEjM.cjs");
+const require_constants = require("./constants-B7sCf4fg.cjs");
+//#region src/cli.ts
+function printHelp() {
+	process.stdout.write(`${require_constants.CLI_NAME} — worktree-isolated local Postgres (via autopg)
+
+Usage:
+  ${require_constants.CLI_NAME} ensure --mode=dev|test [--root <path>] [--json] [--print-env]
+  ${require_constants.CLI_NAME} dispose [--mode=dev|test] [--root <path>]
+  ${require_constants.CLI_NAME} gc [--json]
+  ${require_constants.CLI_NAME} print-url [--mode=dev|test] [--root <path>]
+  ${require_constants.CLI_NAME} --help
+
+Modes:
+  dev   Keep DB across restarts (default for ensure if omitted: dev)
+  test  Drop DB on dispose / test teardown
+
+Env:
+  AUTOPG_BIN     Path to autopg binary
+  CEDAR_PG=0     Disable adapters that auto-ensure
+`);
+}
+function parseMode(value) {
+	if (value === "dev" || value === "test") return value;
+	throw new Error("--mode must be dev or test");
+}
+function parseArgs(argv) {
+	const out = {};
+	const rest = [...argv];
+	out.cmd = rest.shift();
+	for (let i = 0; i < rest.length; i++) {
+		const a = rest[i];
+		if (a === "--help" || a === "-h") out.help = true;
+		else if (a === "--json") out.json = true;
+		else if (a === "--print-env") out.printEnv = true;
+		else if (a.startsWith("--mode=")) out.mode = parseMode(a.slice(7));
+		else if (a === "--mode") out.mode = parseMode(rest[++i]);
+		else if (a.startsWith("--root=")) out.root = a.slice(7);
+		else if (a === "--root") out.root = rest[++i];
+		else throw new Error(`unknown argument: ${a}`);
+	}
+	return out;
+}
+async function main() {
+	const argv = process.argv.slice(2);
+	if (argv.length === 0 || argv[0] === "help" || argv[0] === "--help" || argv[0] === "-h") {
+		printHelp();
+		return 0;
+	}
+	const args = parseArgs(argv);
+	if (args.help) {
+		printHelp();
+		return 0;
+	}
+	try {
+		if (args.cmd === "ensure") {
+			const mode = args.mode ?? "dev";
+			const result = await require_lifecycle.ensure({
+				root: args.root,
+				mode,
+				setEnv: true
+			});
+			if (args.printEnv) {
+				process.stdout.write(`DATABASE_URL=${result.databaseUrl}\n`);
+				if (mode === "test") process.stdout.write(`TEST_DATABASE_URL=${result.databaseUrl}\n`);
+			}
+			if (args.json) process.stdout.write(`${JSON.stringify({
+				databaseUrl: result.databaseUrl,
+				databaseName: result.databaseName,
+				roleName: result.roleName,
+				repoSlug: result.repoSlug,
+				worktreeSlug: result.worktreeSlug,
+				pathHash: result.pathHash,
+				mode: result.mode,
+				port: result.port,
+				root: result.root
+			}, null, 2)}\n`);
+			else if (!args.printEnv) {
+				process.stdout.write(`${require_constants.CLI_NAME}: ${result.databaseName} (${result.repoSlug}/${result.worktreeSlug} ${result.mode})\n`);
+				process.stdout.write(`${result.databaseUrl}\n`);
+			}
+			return 0;
+		}
+		if (args.cmd === "dispose") {
+			const mode = args.mode ?? "test";
+			const result = await require_lifecycle.dispose({
+				root: args.root,
+				mode
+			});
+			if (result.dropped) {
+				process.stdout.write(`${require_constants.CLI_NAME}: disposed ${mode} (${result.databaseName})\n`);
+				return 0;
+			}
+			if (result.reason === "no-lease") {
+				process.stdout.write(`${require_constants.CLI_NAME}: nothing to dispose for ${mode} (no lease)\n`);
+				return 0;
+			}
+			process.stderr.write(`${require_constants.CLI_NAME}: could not dispose ${mode} — autopg host unavailable (lease kept for retry)\n`);
+			return 1;
+		}
+		if (args.cmd === "gc") {
+			const result = await require_lifecycle.gc();
+			if (args.json) process.stdout.write(`${JSON.stringify(result)}\n`);
+			else {
+				process.stdout.write(`${require_constants.CLI_NAME} gc: dropped ${result.dropped.length} database(s)\n`);
+				for (const name of result.dropped) process.stdout.write(`  ${name}\n`);
+			}
+			return 0;
+		}
+		if (args.cmd === "print-url") {
+			const mode = args.mode ?? "dev";
+			const lease = require_lifecycle.readLease(require_lifecycle.resolveWorktreeIdentity(args.root).root, mode);
+			if (!lease) {
+				process.stderr.write(`${require_constants.CLI_NAME}: no ${mode} lease — run \`${require_constants.CLI_NAME} ensure --mode=${mode}\` first\n`);
+				return 2;
+			}
+			process.stdout.write(`${require_lifecycle.urlFromLease(lease)}\n`);
+			return 0;
+		}
+		process.stderr.write(`${require_constants.CLI_NAME}: unknown command ${args.cmd}\n`);
+		printHelp();
+		return 64;
+	} catch (err) {
+		const message = err instanceof Error ? err.message : String(err);
+		process.stderr.write(`${require_constants.CLI_NAME}: ${message}\n`);
+		return 1;
+	}
+}
+main().then((code) => {
+	process.exit(code);
+}).catch((err) => {
+	const message = err instanceof Error ? err.message : String(err);
+	process.stderr.write(`${require_constants.CLI_NAME}: ${message}\n`);
+	process.exit(1);
+});
+//#endregion
+
+//# sourceMappingURL=cli.cjs.map

package/dist/cli.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.cjs","names":["CLI_NAME","ensure","dispose","gc","readLease","resolveWorktreeIdentity","urlFromLease"],"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { CLI_NAME } from \"./core/constants.ts\";\nimport { ensure, dispose, gc, urlFromLease } from \"./core/lifecycle.ts\";\nimport { resolveWorktreeIdentity } from \"./core/worktree.ts\";\nimport { readLease } from \"./core/lease.ts\";\nimport type { DbMode } from \"./core/naming.ts\";\n\nfunction printHelp(): void {\n  process.stdout.write(`${CLI_NAME} — worktree-isolated local Postgres (via autopg)\n\nUsage:\n  ${CLI_NAME} ensure --mode=dev|test [--root <path>] [--json] [--print-env]\n  ${CLI_NAME} dispose [--mode=dev|test] [--root <path>]\n  ${CLI_NAME} gc [--json]\n  ${CLI_NAME} print-url [--mode=dev|test] [--root <path>]\n  ${CLI_NAME} --help\n\nModes:\n  dev   Keep DB across restarts (default for ensure if omitted: dev)\n  test  Drop DB on dispose / test teardown\n\nEnv:\n  AUTOPG_BIN     Path to autopg binary\n  CEDAR_PG=0     Disable adapters that auto-ensure\n`);\n}\n\nfunction parseMode(value: string | undefined): DbMode {\n  if (value === \"dev\" || value === \"test\") return value;\n  throw new Error(\"--mode must be dev or test\");\n}\n\nfunction parseArgs(argv: string[]) {\n  const out: {\n    cmd?: string;\n    mode?: DbMode;\n    root?: string;\n    json?: boolean;\n    printEnv?: boolean;\n    help?: boolean;\n  } = {};\n  const rest = [...argv];\n  out.cmd = rest.shift();\n  for (let i = 0; i < rest.length; i++) {\n    const a = rest[i]!;\n    if (a === \"--help\" || a === \"-h\") out.help = true;\n    else if (a === \"--json\") out.json = true;\n    else if (a === \"--print-env\") out.printEnv = true;\n    else if (a.startsWith(\"--mode=\")) out.mode = parseMode(a.slice(7));\n    else if (a === \"--mode\") out.mode = parseMode(rest[++i]);\n    else if (a.startsWith(\"--root=\")) out.root = a.slice(7);\n    else if (a === \"--root\") out.root = rest[++i];\n    else throw new Error(`unknown argument: ${a}`);\n  }\n  return out;\n}\n\nasync function main(): Promise<number> {\n  const argv = process.argv.slice(2);\n  if (argv.length === 0 || argv[0] === \"help\" || argv[0] === \"--help\" || argv[0] === \"-h\") {\n    printHelp();\n    return 0;\n  }\n  const args = parseArgs(argv);\n  if (args.help) {\n    printHelp();\n    return 0;\n  }\n\n  try {\n    if (args.cmd === \"ensure\") {\n      const mode = args.mode ?? \"dev\";\n      const result = await ensure({\n        root: args.root,\n        mode,\n        setEnv: true,\n      });\n      if (args.printEnv) {\n        process.stdout.write(`DATABASE_URL=${result.databaseUrl}\\n`);\n        if (mode === \"test\") {\n          process.stdout.write(`TEST_DATABASE_URL=${result.databaseUrl}\\n`);\n        }\n      }\n      if (args.json) {\n        process.stdout.write(\n          `${JSON.stringify(\n            {\n              databaseUrl: result.databaseUrl,\n              databaseName: result.databaseName,\n              roleName: result.roleName,\n              repoSlug: result.repoSlug,\n              worktreeSlug: result.worktreeSlug,\n              pathHash: result.pathHash,\n              mode: result.mode,\n              port: result.port,\n              root: result.root,\n            },\n            null,\n            2,\n          )}\\n`,\n        );\n      } else if (!args.printEnv) {\n        process.stdout.write(\n          `${CLI_NAME}: ${result.databaseName} (${result.repoSlug}/${result.worktreeSlug} ${result.mode})\\n`,\n        );\n        process.stdout.write(`${result.databaseUrl}\\n`);\n      }\n      return 0;\n    }\n\n    if (args.cmd === \"dispose\") {\n      const mode = args.mode ?? \"test\";\n      const result = await dispose({ root: args.root, mode });\n      if (result.dropped) {\n        process.stdout.write(`${CLI_NAME}: disposed ${mode} (${result.databaseName})\\n`);\n        return 0;\n      }\n      if (result.reason === \"no-lease\") {\n        process.stdout.write(`${CLI_NAME}: nothing to dispose for ${mode} (no lease)\\n`);\n        return 0;\n      }\n      process.stderr.write(\n        `${CLI_NAME}: could not dispose ${mode} — autopg host unavailable (lease kept for retry)\\n`,\n      );\n      return 1;\n    }\n\n    if (args.cmd === \"gc\") {\n      const result = await gc();\n      if (args.json) {\n        process.stdout.write(`${JSON.stringify(result)}\\n`);\n      } else {\n        process.stdout.write(`${CLI_NAME} gc: dropped ${result.dropped.length} database(s)\\n`);\n        for (const name of result.dropped) process.stdout.write(`  ${name}\\n`);\n      }\n      return 0;\n    }\n\n    if (args.cmd === \"print-url\") {\n      const mode = args.mode ?? \"dev\";\n      const identity = resolveWorktreeIdentity(args.root);\n      const lease = readLease(identity.root, mode);\n      if (!lease) {\n        process.stderr.write(\n          `${CLI_NAME}: no ${mode} lease — run \\`${CLI_NAME} ensure --mode=${mode}\\` first\\n`,\n        );\n        return 2;\n      }\n      process.stdout.write(`${urlFromLease(lease)}\\n`);\n      return 0;\n    }\n\n    process.stderr.write(`${CLI_NAME}: unknown command ${args.cmd}\\n`);\n    printHelp();\n    return 64;\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    process.stderr.write(`${CLI_NAME}: ${message}\\n`);\n    return 1;\n  }\n}\n\nmain()\n  .then((code) => {\n    process.exit(code);\n  })\n  .catch((err: unknown) => {\n    const message = err instanceof Error ? err.message : String(err);\n    process.stderr.write(`${CLI_NAME}: ${message}\\n`);\n    process.exit(1);\n  });\n"],"mappings":";;;;AAOA,SAAS,YAAkB;CACzB,QAAQ,OAAO,MAAM,GAAGA,kBAAAA,SAAS;;;IAG/BA,kBAAAA,SAAS;IACTA,kBAAAA,SAAS;IACTA,kBAAAA,SAAS;IACTA,kBAAAA,SAAS;IACTA,kBAAAA,SAAS;;;;;;;;;CASZ;AACD;AAEA,SAAS,UAAU,OAAmC;CACpD,IAAI,UAAU,SAAS,UAAU,QAAQ,OAAO;CAChD,MAAM,IAAI,MAAM,4BAA4B;AAC9C;AAEA,SAAS,UAAU,MAAgB;CACjC,MAAM,MAOF,CAAC;CACL,MAAM,OAAO,CAAC,GAAG,IAAI;CACrB,IAAI,MAAM,KAAK,MAAM;CACrB,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,IAAI,KAAK;EACf,IAAI,MAAM,YAAY,MAAM,MAAM,IAAI,OAAO;OACxC,IAAI,MAAM,UAAU,IAAI,OAAO;OAC/B,IAAI,MAAM,eAAe,IAAI,WAAW;OACxC,IAAI,EAAE,WAAW,SAAS,GAAG,IAAI,OAAO,UAAU,EAAE,MAAM,CAAC,CAAC;OAC5D,IAAI,MAAM,UAAU,IAAI,OAAO,UAAU,KAAK,EAAE,EAAE;OAClD,IAAI,EAAE,WAAW,SAAS,GAAG,IAAI,OAAO,EAAE,MAAM,CAAC;OACjD,IAAI,MAAM,UAAU,IAAI,OAAO,KAAK,EAAE;OACtC,MAAM,IAAI,MAAM,qBAAqB,GAAG;CAC/C;CACA,OAAO;AACT;AAEA,eAAe,OAAwB;CACrC,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,OAAO,UAAU,KAAK,OAAO,YAAY,KAAK,OAAO,MAAM;EACvF,UAAU;EACV,OAAO;CACT;CACA,MAAM,OAAO,UAAU,IAAI;CAC3B,IAAI,KAAK,MAAM;EACb,UAAU;EACV,OAAO;CACT;CAEA,IAAI;EACF,IAAI,KAAK,QAAQ,UAAU;GACzB,MAAM,OAAO,KAAK,QAAQ;GAC1B,MAAM,SAAS,MAAMC,kBAAAA,OAAO;IAC1B,MAAM,KAAK;IACX;IACA,QAAQ;GACV,CAAC;GACD,IAAI,KAAK,UAAU;IACjB,QAAQ,OAAO,MAAM,gBAAgB,OAAO,YAAY,GAAG;IAC3D,IAAI,SAAS,QACX,QAAQ,OAAO,MAAM,qBAAqB,OAAO,YAAY,GAAG;GAEpE;GACA,IAAI,KAAK,MACP,QAAQ,OAAO,MACb,GAAG,KAAK,UACN;IACE,aAAa,OAAO;IACpB,cAAc,OAAO;IACrB,UAAU,OAAO;IACjB,UAAU,OAAO;IACjB,cAAc,OAAO;IACrB,UAAU,OAAO;IACjB,MAAM,OAAO;IACb,MAAM,OAAO;IACb,MAAM,OAAO;GACf,GACA,MACA,CACF,EAAE,GACJ;QACK,IAAI,CAAC,KAAK,UAAU;IACzB,QAAQ,OAAO,MACb,GAAGD,kBAAAA,SAAS,IAAI,OAAO,aAAa,IAAI,OAAO,SAAS,GAAG,OAAO,aAAa,GAAG,OAAO,KAAK,IAChG;IACA,QAAQ,OAAO,MAAM,GAAG,OAAO,YAAY,GAAG;GAChD;GACA,OAAO;EACT;EAEA,IAAI,KAAK,QAAQ,WAAW;GAC1B,MAAM,OAAO,KAAK,QAAQ;GAC1B,MAAM,SAAS,MAAME,kBAAAA,QAAQ;IAAE,MAAM,KAAK;IAAM;GAAK,CAAC;GACtD,IAAI,OAAO,SAAS;IAClB,QAAQ,OAAO,MAAM,GAAGF,kBAAAA,SAAS,aAAa,KAAK,IAAI,OAAO,aAAa,IAAI;IAC/E,OAAO;GACT;GACA,IAAI,OAAO,WAAW,YAAY;IAChC,QAAQ,OAAO,MAAM,GAAGA,kBAAAA,SAAS,2BAA2B,KAAK,cAAc;IAC/E,OAAO;GACT;GACA,QAAQ,OAAO,MACb,GAAGA,kBAAAA,SAAS,sBAAsB,KAAK,oDACzC;GACA,OAAO;EACT;EAEA,IAAI,KAAK,QAAQ,MAAM;GACrB,MAAM,SAAS,MAAMG,kBAAAA,GAAG;GACxB,IAAI,KAAK,MACP,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,MAAM,EAAE,GAAG;QAC7C;IACL,QAAQ,OAAO,MAAM,GAAGH,kBAAAA,SAAS,eAAe,OAAO,QAAQ,OAAO,eAAe;IACrF,KAAK,MAAM,QAAQ,OAAO,SAAS,QAAQ,OAAO,MAAM,KAAK,KAAK,GAAG;GACvE;GACA,OAAO;EACT;EAEA,IAAI,KAAK,QAAQ,aAAa;GAC5B,MAAM,OAAO,KAAK,QAAQ;GAE1B,MAAM,QAAQI,kBAAAA,UADGC,kBAAAA,wBAAwB,KAAK,IACf,CAAC,CAAC,MAAM,IAAI;GAC3C,IAAI,CAAC,OAAO;IACV,QAAQ,OAAO,MACb,GAAGL,kBAAAA,SAAS,OAAO,KAAK,iBAAiBA,kBAAAA,SAAS,iBAAiB,KAAK,WAC1E;IACA,OAAO;GACT;GACA,QAAQ,OAAO,MAAM,GAAGM,kBAAAA,aAAa,KAAK,EAAE,GAAG;GAC/C,OAAO;EACT;EAEA,QAAQ,OAAO,MAAM,GAAGN,kBAAAA,SAAS,oBAAoB,KAAK,IAAI,GAAG;EACjE,UAAU;EACV,OAAO;CACT,SAAS,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;EAC/D,QAAQ,OAAO,MAAM,GAAGA,kBAAAA,SAAS,IAAI,QAAQ,GAAG;EAChD,OAAO;CACT;AACF;AAEA,KAAK,CAAC,CACH,MAAM,SAAS;CACd,QAAQ,KAAK,IAAI;AACnB,CAAC,CAAC,CACD,OAAO,QAAiB;CACvB,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;CAC/D,QAAQ,OAAO,MAAM,GAAGA,kBAAAA,SAAS,IAAI,QAAQ,GAAG;CAChD,QAAQ,KAAK,CAAC;AAChB,CAAC"}

package/dist/cli.d.cts

@@ -0,0 +1 @@
+export {}

package/dist/cli.d.mts

@@ -0,0 +1 @@
+export {}

package/dist/cli.mjs

@@ -0,0 +1,140 @@
+#!/usr/bin/env node
+import { S as readLease, a as urlFromLease, g as resolveWorktreeIdentity, i as gc, n as ensure, t as dispose } from "./lifecycle-PbTXNC2Z.mjs";
+import { t as CLI_NAME } from "./constants-YnHDwShD.mjs";
+//#region src/cli.ts
+function printHelp() {
+	process.stdout.write(`${CLI_NAME} — worktree-isolated local Postgres (via autopg)
+
+Usage:
+  ${CLI_NAME} ensure --mode=dev|test [--root <path>] [--json] [--print-env]
+  ${CLI_NAME} dispose [--mode=dev|test] [--root <path>]
+  ${CLI_NAME} gc [--json]
+  ${CLI_NAME} print-url [--mode=dev|test] [--root <path>]
+  ${CLI_NAME} --help
+
+Modes:
+  dev   Keep DB across restarts (default for ensure if omitted: dev)
+  test  Drop DB on dispose / test teardown
+
+Env:
+  AUTOPG_BIN     Path to autopg binary
+  CEDAR_PG=0     Disable adapters that auto-ensure
+`);
+}
+function parseMode(value) {
+	if (value === "dev" || value === "test") return value;
+	throw new Error("--mode must be dev or test");
+}
+function parseArgs(argv) {
+	const out = {};
+	const rest = [...argv];
+	out.cmd = rest.shift();
+	for (let i = 0; i < rest.length; i++) {
+		const a = rest[i];
+		if (a === "--help" || a === "-h") out.help = true;
+		else if (a === "--json") out.json = true;
+		else if (a === "--print-env") out.printEnv = true;
+		else if (a.startsWith("--mode=")) out.mode = parseMode(a.slice(7));
+		else if (a === "--mode") out.mode = parseMode(rest[++i]);
+		else if (a.startsWith("--root=")) out.root = a.slice(7);
+		else if (a === "--root") out.root = rest[++i];
+		else throw new Error(`unknown argument: ${a}`);
+	}
+	return out;
+}
+async function main() {
+	const argv = process.argv.slice(2);
+	if (argv.length === 0 || argv[0] === "help" || argv[0] === "--help" || argv[0] === "-h") {
+		printHelp();
+		return 0;
+	}
+	const args = parseArgs(argv);
+	if (args.help) {
+		printHelp();
+		return 0;
+	}
+	try {
+		if (args.cmd === "ensure") {
+			const mode = args.mode ?? "dev";
+			const result = await ensure({
+				root: args.root,
+				mode,
+				setEnv: true
+			});
+			if (args.printEnv) {
+				process.stdout.write(`DATABASE_URL=${result.databaseUrl}\n`);
+				if (mode === "test") process.stdout.write(`TEST_DATABASE_URL=${result.databaseUrl}\n`);
+			}
+			if (args.json) process.stdout.write(`${JSON.stringify({
+				databaseUrl: result.databaseUrl,
+				databaseName: result.databaseName,
+				roleName: result.roleName,
+				repoSlug: result.repoSlug,
+				worktreeSlug: result.worktreeSlug,
+				pathHash: result.pathHash,
+				mode: result.mode,
+				port: result.port,
+				root: result.root
+			}, null, 2)}\n`);
+			else if (!args.printEnv) {
+				process.stdout.write(`${CLI_NAME}: ${result.databaseName} (${result.repoSlug}/${result.worktreeSlug} ${result.mode})\n`);
+				process.stdout.write(`${result.databaseUrl}\n`);
+			}
+			return 0;
+		}
+		if (args.cmd === "dispose") {
+			const mode = args.mode ?? "test";
+			const result = await dispose({
+				root: args.root,
+				mode
+			});
+			if (result.dropped) {
+				process.stdout.write(`${CLI_NAME}: disposed ${mode} (${result.databaseName})\n`);
+				return 0;
+			}
+			if (result.reason === "no-lease") {
+				process.stdout.write(`${CLI_NAME}: nothing to dispose for ${mode} (no lease)\n`);
+				return 0;
+			}
+			process.stderr.write(`${CLI_NAME}: could not dispose ${mode} — autopg host unavailable (lease kept for retry)\n`);
+			return 1;
+		}
+		if (args.cmd === "gc") {
+			const result = await gc();
+			if (args.json) process.stdout.write(`${JSON.stringify(result)}\n`);
+			else {
+				process.stdout.write(`${CLI_NAME} gc: dropped ${result.dropped.length} database(s)\n`);
+				for (const name of result.dropped) process.stdout.write(`  ${name}\n`);
+			}
+			return 0;
+		}
+		if (args.cmd === "print-url") {
+			const mode = args.mode ?? "dev";
+			const lease = readLease(resolveWorktreeIdentity(args.root).root, mode);
+			if (!lease) {
+				process.stderr.write(`${CLI_NAME}: no ${mode} lease — run \`${CLI_NAME} ensure --mode=${mode}\` first\n`);
+				return 2;
+			}
+			process.stdout.write(`${urlFromLease(lease)}\n`);
+			return 0;
+		}
+		process.stderr.write(`${CLI_NAME}: unknown command ${args.cmd}\n`);
+		printHelp();
+		return 64;
+	} catch (err) {
+		const message = err instanceof Error ? err.message : String(err);
+		process.stderr.write(`${CLI_NAME}: ${message}\n`);
+		return 1;
+	}
+}
+main().then((code) => {
+	process.exit(code);
+}).catch((err) => {
+	const message = err instanceof Error ? err.message : String(err);
+	process.stderr.write(`${CLI_NAME}: ${message}\n`);
+	process.exit(1);
+});
+//#endregion
+export {};
+
+//# sourceMappingURL=cli.mjs.map

package/dist/cli.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.mjs","names":[],"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { CLI_NAME } from \"./core/constants.ts\";\nimport { ensure, dispose, gc, urlFromLease } from \"./core/lifecycle.ts\";\nimport { resolveWorktreeIdentity } from \"./core/worktree.ts\";\nimport { readLease } from \"./core/lease.ts\";\nimport type { DbMode } from \"./core/naming.ts\";\n\nfunction printHelp(): void {\n  process.stdout.write(`${CLI_NAME} — worktree-isolated local Postgres (via autopg)\n\nUsage:\n  ${CLI_NAME} ensure --mode=dev|test [--root <path>] [--json] [--print-env]\n  ${CLI_NAME} dispose [--mode=dev|test] [--root <path>]\n  ${CLI_NAME} gc [--json]\n  ${CLI_NAME} print-url [--mode=dev|test] [--root <path>]\n  ${CLI_NAME} --help\n\nModes:\n  dev   Keep DB across restarts (default for ensure if omitted: dev)\n  test  Drop DB on dispose / test teardown\n\nEnv:\n  AUTOPG_BIN     Path to autopg binary\n  CEDAR_PG=0     Disable adapters that auto-ensure\n`);\n}\n\nfunction parseMode(value: string | undefined): DbMode {\n  if (value === \"dev\" || value === \"test\") return value;\n  throw new Error(\"--mode must be dev or test\");\n}\n\nfunction parseArgs(argv: string[]) {\n  const out: {\n    cmd?: string;\n    mode?: DbMode;\n    root?: string;\n    json?: boolean;\n    printEnv?: boolean;\n    help?: boolean;\n  } = {};\n  const rest = [...argv];\n  out.cmd = rest.shift();\n  for (let i = 0; i < rest.length; i++) {\n    const a = rest[i]!;\n    if (a === \"--help\" || a === \"-h\") out.help = true;\n    else if (a === \"--json\") out.json = true;\n    else if (a === \"--print-env\") out.printEnv = true;\n    else if (a.startsWith(\"--mode=\")) out.mode = parseMode(a.slice(7));\n    else if (a === \"--mode\") out.mode = parseMode(rest[++i]);\n    else if (a.startsWith(\"--root=\")) out.root = a.slice(7);\n    else if (a === \"--root\") out.root = rest[++i];\n    else throw new Error(`unknown argument: ${a}`);\n  }\n  return out;\n}\n\nasync function main(): Promise<number> {\n  const argv = process.argv.slice(2);\n  if (argv.length === 0 || argv[0] === \"help\" || argv[0] === \"--help\" || argv[0] === \"-h\") {\n    printHelp();\n    return 0;\n  }\n  const args = parseArgs(argv);\n  if (args.help) {\n    printHelp();\n    return 0;\n  }\n\n  try {\n    if (args.cmd === \"ensure\") {\n      const mode = args.mode ?? \"dev\";\n      const result = await ensure({\n        root: args.root,\n        mode,\n        setEnv: true,\n      });\n      if (args.printEnv) {\n        process.stdout.write(`DATABASE_URL=${result.databaseUrl}\\n`);\n        if (mode === \"test\") {\n          process.stdout.write(`TEST_DATABASE_URL=${result.databaseUrl}\\n`);\n        }\n      }\n      if (args.json) {\n        process.stdout.write(\n          `${JSON.stringify(\n            {\n              databaseUrl: result.databaseUrl,\n              databaseName: result.databaseName,\n              roleName: result.roleName,\n              repoSlug: result.repoSlug,\n              worktreeSlug: result.worktreeSlug,\n              pathHash: result.pathHash,\n              mode: result.mode,\n              port: result.port,\n              root: result.root,\n            },\n            null,\n            2,\n          )}\\n`,\n        );\n      } else if (!args.printEnv) {\n        process.stdout.write(\n          `${CLI_NAME}: ${result.databaseName} (${result.repoSlug}/${result.worktreeSlug} ${result.mode})\\n`,\n        );\n        process.stdout.write(`${result.databaseUrl}\\n`);\n      }\n      return 0;\n    }\n\n    if (args.cmd === \"dispose\") {\n      const mode = args.mode ?? \"test\";\n      const result = await dispose({ root: args.root, mode });\n      if (result.dropped) {\n        process.stdout.write(`${CLI_NAME}: disposed ${mode} (${result.databaseName})\\n`);\n        return 0;\n      }\n      if (result.reason === \"no-lease\") {\n        process.stdout.write(`${CLI_NAME}: nothing to dispose for ${mode} (no lease)\\n`);\n        return 0;\n      }\n      process.stderr.write(\n        `${CLI_NAME}: could not dispose ${mode} — autopg host unavailable (lease kept for retry)\\n`,\n      );\n      return 1;\n    }\n\n    if (args.cmd === \"gc\") {\n      const result = await gc();\n      if (args.json) {\n        process.stdout.write(`${JSON.stringify(result)}\\n`);\n      } else {\n        process.stdout.write(`${CLI_NAME} gc: dropped ${result.dropped.length} database(s)\\n`);\n        for (const name of result.dropped) process.stdout.write(`  ${name}\\n`);\n      }\n      return 0;\n    }\n\n    if (args.cmd === \"print-url\") {\n      const mode = args.mode ?? \"dev\";\n      const identity = resolveWorktreeIdentity(args.root);\n      const lease = readLease(identity.root, mode);\n      if (!lease) {\n        process.stderr.write(\n          `${CLI_NAME}: no ${mode} lease — run \\`${CLI_NAME} ensure --mode=${mode}\\` first\\n`,\n        );\n        return 2;\n      }\n      process.stdout.write(`${urlFromLease(lease)}\\n`);\n      return 0;\n    }\n\n    process.stderr.write(`${CLI_NAME}: unknown command ${args.cmd}\\n`);\n    printHelp();\n    return 64;\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    process.stderr.write(`${CLI_NAME}: ${message}\\n`);\n    return 1;\n  }\n}\n\nmain()\n  .then((code) => {\n    process.exit(code);\n  })\n  .catch((err: unknown) => {\n    const message = err instanceof Error ? err.message : String(err);\n    process.stderr.write(`${CLI_NAME}: ${message}\\n`);\n    process.exit(1);\n  });\n"],"mappings":";;;;AAOA,SAAS,YAAkB;CACzB,QAAQ,OAAO,MAAM,GAAG,SAAS;;;IAG/B,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;;;;;;;;;CASZ;AACD;AAEA,SAAS,UAAU,OAAmC;CACpD,IAAI,UAAU,SAAS,UAAU,QAAQ,OAAO;CAChD,MAAM,IAAI,MAAM,4BAA4B;AAC9C;AAEA,SAAS,UAAU,MAAgB;CACjC,MAAM,MAOF,CAAC;CACL,MAAM,OAAO,CAAC,GAAG,IAAI;CACrB,IAAI,MAAM,KAAK,MAAM;CACrB,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,IAAI,KAAK;EACf,IAAI,MAAM,YAAY,MAAM,MAAM,IAAI,OAAO;OACxC,IAAI,MAAM,UAAU,IAAI,OAAO;OAC/B,IAAI,MAAM,eAAe,IAAI,WAAW;OACxC,IAAI,EAAE,WAAW,SAAS,GAAG,IAAI,OAAO,UAAU,EAAE,MAAM,CAAC,CAAC;OAC5D,IAAI,MAAM,UAAU,IAAI,OAAO,UAAU,KAAK,EAAE,EAAE;OAClD,IAAI,EAAE,WAAW,SAAS,GAAG,IAAI,OAAO,EAAE,MAAM,CAAC;OACjD,IAAI,MAAM,UAAU,IAAI,OAAO,KAAK,EAAE;OACtC,MAAM,IAAI,MAAM,qBAAqB,GAAG;CAC/C;CACA,OAAO;AACT;AAEA,eAAe,OAAwB;CACrC,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,OAAO,UAAU,KAAK,OAAO,YAAY,KAAK,OAAO,MAAM;EACvF,UAAU;EACV,OAAO;CACT;CACA,MAAM,OAAO,UAAU,IAAI;CAC3B,IAAI,KAAK,MAAM;EACb,UAAU;EACV,OAAO;CACT;CAEA,IAAI;EACF,IAAI,KAAK,QAAQ,UAAU;GACzB,MAAM,OAAO,KAAK,QAAQ;GAC1B,MAAM,SAAS,MAAM,OAAO;IAC1B,MAAM,KAAK;IACX;IACA,QAAQ;GACV,CAAC;GACD,IAAI,KAAK,UAAU;IACjB,QAAQ,OAAO,MAAM,gBAAgB,OAAO,YAAY,GAAG;IAC3D,IAAI,SAAS,QACX,QAAQ,OAAO,MAAM,qBAAqB,OAAO,YAAY,GAAG;GAEpE;GACA,IAAI,KAAK,MACP,QAAQ,OAAO,MACb,GAAG,KAAK,UACN;IACE,aAAa,OAAO;IACpB,cAAc,OAAO;IACrB,UAAU,OAAO;IACjB,UAAU,OAAO;IACjB,cAAc,OAAO;IACrB,UAAU,OAAO;IACjB,MAAM,OAAO;IACb,MAAM,OAAO;IACb,MAAM,OAAO;GACf,GACA,MACA,CACF,EAAE,GACJ;QACK,IAAI,CAAC,KAAK,UAAU;IACzB,QAAQ,OAAO,MACb,GAAG,SAAS,IAAI,OAAO,aAAa,IAAI,OAAO,SAAS,GAAG,OAAO,aAAa,GAAG,OAAO,KAAK,IAChG;IACA,QAAQ,OAAO,MAAM,GAAG,OAAO,YAAY,GAAG;GAChD;GACA,OAAO;EACT;EAEA,IAAI,KAAK,QAAQ,WAAW;GAC1B,MAAM,OAAO,KAAK,QAAQ;GAC1B,MAAM,SAAS,MAAM,QAAQ;IAAE,MAAM,KAAK;IAAM;GAAK,CAAC;GACtD,IAAI,OAAO,SAAS;IAClB,QAAQ,OAAO,MAAM,GAAG,SAAS,aAAa,KAAK,IAAI,OAAO,aAAa,IAAI;IAC/E,OAAO;GACT;GACA,IAAI,OAAO,WAAW,YAAY;IAChC,QAAQ,OAAO,MAAM,GAAG,SAAS,2BAA2B,KAAK,cAAc;IAC/E,OAAO;GACT;GACA,QAAQ,OAAO,MACb,GAAG,SAAS,sBAAsB,KAAK,oDACzC;GACA,OAAO;EACT;EAEA,IAAI,KAAK,QAAQ,MAAM;GACrB,MAAM,SAAS,MAAM,GAAG;GACxB,IAAI,KAAK,MACP,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,MAAM,EAAE,GAAG;QAC7C;IACL,QAAQ,OAAO,MAAM,GAAG,SAAS,eAAe,OAAO,QAAQ,OAAO,eAAe;IACrF,KAAK,MAAM,QAAQ,OAAO,SAAS,QAAQ,OAAO,MAAM,KAAK,KAAK,GAAG;GACvE;GACA,OAAO;EACT;EAEA,IAAI,KAAK,QAAQ,aAAa;GAC5B,MAAM,OAAO,KAAK,QAAQ;GAE1B,MAAM,QAAQ,UADG,wBAAwB,KAAK,IACf,CAAC,CAAC,MAAM,IAAI;GAC3C,IAAI,CAAC,OAAO;IACV,QAAQ,OAAO,MACb,GAAG,SAAS,OAAO,KAAK,iBAAiB,SAAS,iBAAiB,KAAK,WAC1E;IACA,OAAO;GACT;GACA,QAAQ,OAAO,MAAM,GAAG,aAAa,KAAK,EAAE,GAAG;GAC/C,OAAO;EACT;EAEA,QAAQ,OAAO,MAAM,GAAG,SAAS,oBAAoB,KAAK,IAAI,GAAG;EACjE,UAAU;EACV,OAAO;CACT,SAAS,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;EAC/D,QAAQ,OAAO,MAAM,GAAG,SAAS,IAAI,QAAQ,GAAG;EAChD,OAAO;CACT;AACF;AAEA,KAAK,CAAC,CACH,MAAM,SAAS;CACd,QAAQ,KAAK,IAAI;AACnB,CAAC,CAAC,CACD,OAAO,QAAiB;CACvB,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;CAC/D,QAAQ,OAAO,MAAM,GAAG,SAAS,IAAI,QAAQ,GAAG;CAChD,QAAQ,KAAK,CAAC;AAChB,CAAC"}

package/dist/constants-B7sCf4fg.cjs

@@ -0,0 +1,41 @@
+//#region src/core/constants.ts
+/**
+* Product identity vs frozen crypto.
+*
+* State dirs follow the CLI name (`.cedarpg`) — product-owned, not nested under
+* autopg's `~/.autopg/` (host owns that) and not a generic `.pg` (collision-prone).
+* Password salt is an opaque crypto constant; bump ROLE_PASSWORD_SCHEME to change it.
+*/
+/** User-facing CLI binary (`package.json` bin) and log prefix */
+const CLI_NAME = "cedarpg";
+/**
+* Worktree-local state dir and home-registry parent (`~/.cedarpg/registry`).
+* Frozen for lease/gc discovery after first alpha consumers appear.
+*/
+const STATE_DIRNAME = ".cedarpg";
+/**
+* Password scheme v1 salt prefix: sha256(`${PASSWORD_SALT_PREFIX}\0` + databaseName).
+* Opaque — independent of STATE_DIRNAME / CLI_NAME. Bump ROLE_PASSWORD_SCHEME to change.
+*/
+const PASSWORD_SALT_PREFIX = "cedar-pg";
+//#endregion
+Object.defineProperty(exports, "CLI_NAME", {
+	enumerable: true,
+	get: function() {
+		return CLI_NAME;
+	}
+});
+Object.defineProperty(exports, "PASSWORD_SALT_PREFIX", {
+	enumerable: true,
+	get: function() {
+		return PASSWORD_SALT_PREFIX;
+	}
+});
+Object.defineProperty(exports, "STATE_DIRNAME", {
+	enumerable: true,
+	get: function() {
+		return STATE_DIRNAME;
+	}
+});
+
+//# sourceMappingURL=constants-B7sCf4fg.cjs.map

package/dist/constants-B7sCf4fg.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants-B7sCf4fg.cjs","names":[],"sources":["../src/core/constants.ts"],"sourcesContent":["/**\n * Product identity vs frozen crypto.\n *\n * State dirs follow the CLI name (`.cedarpg`) — product-owned, not nested under\n * autopg's `~/.autopg/` (host owns that) and not a generic `.pg` (collision-prone).\n * Password salt is an opaque crypto constant; bump ROLE_PASSWORD_SCHEME to change it.\n */\n\n/** User-facing CLI binary (`package.json` bin) and log prefix */\nexport const CLI_NAME = \"cedarpg\";\n\n/**\n * Worktree-local state dir and home-registry parent (`~/.cedarpg/registry`).\n * Frozen for lease/gc discovery after first alpha consumers appear.\n */\nexport const STATE_DIRNAME = \".cedarpg\";\n\n/**\n * Password scheme v1 salt prefix: sha256(`${PASSWORD_SALT_PREFIX}\\0` + databaseName).\n * Opaque — independent of STATE_DIRNAME / CLI_NAME. Bump ROLE_PASSWORD_SCHEME to change.\n */\nexport const PASSWORD_SALT_PREFIX = \"cedar-pg\";\n"],"mappings":";;;;;;;;;AASA,MAAa,WAAW;;;;;AAMxB,MAAa,gBAAgB;;;;;AAM7B,MAAa,uBAAuB"}

package/dist/constants-YnHDwShD.mjs

@@ -0,0 +1,24 @@
+//#region src/core/constants.ts
+/**
+* Product identity vs frozen crypto.
+*
+* State dirs follow the CLI name (`.cedarpg`) — product-owned, not nested under
+* autopg's `~/.autopg/` (host owns that) and not a generic `.pg` (collision-prone).
+* Password salt is an opaque crypto constant; bump ROLE_PASSWORD_SCHEME to change it.
+*/
+/** User-facing CLI binary (`package.json` bin) and log prefix */
+const CLI_NAME = "cedarpg";
+/**
+* Worktree-local state dir and home-registry parent (`~/.cedarpg/registry`).
+* Frozen for lease/gc discovery after first alpha consumers appear.
+*/
+const STATE_DIRNAME = ".cedarpg";
+/**
+* Password scheme v1 salt prefix: sha256(`${PASSWORD_SALT_PREFIX}\0` + databaseName).
+* Opaque — independent of STATE_DIRNAME / CLI_NAME. Bump ROLE_PASSWORD_SCHEME to change.
+*/
+const PASSWORD_SALT_PREFIX = "cedar-pg";
+//#endregion
+export { PASSWORD_SALT_PREFIX as n, STATE_DIRNAME as r, CLI_NAME as t };
+
+//# sourceMappingURL=constants-YnHDwShD.mjs.map

package/dist/constants-YnHDwShD.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants-YnHDwShD.mjs","names":[],"sources":["../src/core/constants.ts"],"sourcesContent":["/**\n * Product identity vs frozen crypto.\n *\n * State dirs follow the CLI name (`.cedarpg`) — product-owned, not nested under\n * autopg's `~/.autopg/` (host owns that) and not a generic `.pg` (collision-prone).\n * Password salt is an opaque crypto constant; bump ROLE_PASSWORD_SCHEME to change it.\n */\n\n/** User-facing CLI binary (`package.json` bin) and log prefix */\nexport const CLI_NAME = \"cedarpg\";\n\n/**\n * Worktree-local state dir and home-registry parent (`~/.cedarpg/registry`).\n * Frozen for lease/gc discovery after first alpha consumers appear.\n */\nexport const STATE_DIRNAME = \".cedarpg\";\n\n/**\n * Password scheme v1 salt prefix: sha256(`${PASSWORD_SALT_PREFIX}\\0` + databaseName).\n * Opaque — independent of STATE_DIRNAME / CLI_NAME. Bump ROLE_PASSWORD_SCHEME to change.\n */\nexport const PASSWORD_SALT_PREFIX = \"cedar-pg\";\n"],"mappings":";;;;;;;;;AASA,MAAa,WAAW;;;;;AAMxB,MAAa,gBAAgB;;;;;AAM7B,MAAa,uBAAuB"}

package/dist/index.cjs

@@ -0,0 +1,26 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_lifecycle = require("./lifecycle-D10usEjM.cjs");
+exports.INSTALL_HINT = require_lifecycle.INSTALL_HINT;
+exports.ROLE_PASSWORD_SCHEME = require_lifecycle.ROLE_PASSWORD_SCHEME;
+exports.buildDatabaseName = require_lifecycle.buildDatabaseName;
+exports.buildDatabaseUrl = require_lifecycle.buildDatabaseUrl;
+exports.buildRoleName = require_lifecycle.buildRoleName;
+exports.discoverHost = require_lifecycle.discoverHost;
+exports.dispose = require_lifecycle.dispose;
+exports.ensure = require_lifecycle.ensure;
+exports.ensureHostRunning = require_lifecycle.ensureHostRunning;
+exports.ensureIfNeeded = require_lifecycle.ensureIfNeeded;
+exports.gc = require_lifecycle.gc;
+exports.isCedarPgManagedUrl = require_lifecycle.isCedarPgManagedUrl;
+exports.isExternalDatabaseEscapeHatch = require_lifecycle.isExternalDatabaseEscapeHatch;
+exports.isOrphanLease = require_lifecycle.isOrphanLease;
+exports.parseHostStatus = require_lifecycle.parseHostStatus;
+exports.parseLease = require_lifecycle.parseLease;
+exports.readLease = require_lifecycle.readLease;
+exports.requireAutopgBin = require_lifecycle.requireAutopgBin;
+exports.resolveAutopgBin = require_lifecycle.resolveAutopgBin;
+exports.resolveEnsureSkip = require_lifecycle.resolveEnsureSkip;
+exports.resolveRoot = require_lifecycle.resolveRoot;
+exports.resolveWorktreeIdentity = require_lifecycle.resolveWorktreeIdentity;
+exports.rolePasswordFor = require_lifecycle.rolePasswordFor;
+exports.urlFromLease = require_lifecycle.urlFromLease;