@cedarjs/pg 0.1.0-alpha.0 → 0.2.0-alpha.0

package/README.md

@@ -1,14 +1,14 @@
 # cedar-pg
 
-Worktree-isolated local Postgres for **Vite+**, **Nx**, and **CedarJS** — powered by [autopg](https://github.com/automagik-dev/autopg).
+Worktree-isolated local Postgres for **Vite+**, **Nx**, and **CedarJS**, powered by [autopg](https://github.com/automagik-dev/autopg).
 
 Published on npm as **`@cedarjs/pg`**.
 
-> **Alpha** (`0.1.0-alpha.0`): APIs may change. Install with the `alpha` dist-tag.
+> **Alpha** (`0.2.0-alpha.0`): APIs may change. Install with the `alpha` dist-tag.
 
 ## What you get (via autopg)
 
-Under the hood you get an **embedded PostgreSQL server with true concurrent connections** — native PostgreSQL 18 (not WASM), real process forking, no connection locks. It just works: **no credentials needed**, **zero config**, and **auto-provisioned databases** on first use. Any client works (`psql`, `node-postgres`, Prisma, Drizzle, TypeORM).
+autopg runs embedded PostgreSQL 18 (not WASM) with real concurrent connections. No credentials, zero config, and databases are provisioned on first use. Any client works (`psql`, `node-postgres`, Prisma, Drizzle, TypeORM).
 
 ### Development & testing
 
@@ -21,7 +21,7 @@ Under the hood you get an **embedded PostgreSQL server with true concurrent conn
 
 ## What cedar-pg adds
 
-**cedar-pg** sits on that autopg host and gives each **git worktree** its own database + role, with readable names, leases, and teardown — so parallel checkouts don’t fight over one shared DB:
+**cedar-pg** gives each **git worktree** its own database and role on that autopg host (readable names, leases, teardown) so parallel checkouts do not share one DB:
 
 - **1 database per git worktree** (visible in `\l` as `cpg_…`)
 - **dev** DBs persist across restarts; **test** DBs drop on dispose
@@ -30,7 +30,7 @@ Under the hood you get an **embedded PostgreSQL server with true concurrent conn
 
 | Layer        | Responsibility                                                      |
 | ------------ | ------------------------------------------------------------------- |
-| **autopg**   | Embedded Postgres host — concurrent, zero-config, auto-provision    |
+| **autopg**   | Embedded Postgres host (concurrent, zero-config, auto-provision)    |
 | **cedar-pg** | Per-worktree `CREATE DATABASE` / role, `DATABASE_URL`, dispose + GC |
 
 ## Install
@@ -57,14 +57,16 @@ Examples:
 ## Prerequisites
 
 A running [autopg](https://github.com/automagik-dev/autopg) host (installed automatically by `postinstall`, or manually).
-Both the install script and binary are pinned to a release tag (currently `v3.0.7`); bump the pin in `scripts/postinstall.js` to upgrade:
+The release pin lives in **`scripts/autopg-version`** (single source of truth for postinstall, CI binary install, and docs). Bump that file to upgrade:
 
 ```bash
-curl -fsSL https://raw.githubusercontent.com/automagik-dev/autopg/v3.0.7/install.sh \
-  | AUTOPG_VERSION=v3.0.7 bash
+# local / non-CI (upstream install.sh; may use pm2)
+VER=$(tr -d '[:space:]' < scripts/autopg-version)
+curl -fsSL "https://raw.githubusercontent.com/automagik-dev/autopg/${VER}/install.sh" \
+  | AUTOPG_VERSION="$VER" bash
 ```
 
-Typical flow: `autopg daemon` (or your usual host install) once per machine → `cedarpg ensure` per worktree → connect with the printed `DATABASE_URL`.
+Typical flow: `autopg daemon` (or your usual host install) once per machine → `cedarpg acquire` per worktree → connect with the printed `DATABASE_URL`.
 
 ## Develop this package (Vite+)
 
@@ -72,8 +74,9 @@ Typical flow: `autopg daemon` (or your usual host install) once per machine →
 vp install
 vp check
 vp test
-vp pack          # → dist/ (dts + esm + cjs)
-vp run smoke     # build → npm-pack tarball → install + resolve exports
+vp pack            # → dist/ (dts + esm + cjs)
+vp run smoke       # build → npm-pack tarball → install + resolve exports
+vp run smoke:pg    # pack → Vitest + Jest adapters against real ephemeral Postgres
 ```
 
 ## Local consume (without npm)
@@ -84,19 +87,76 @@ vp pack
 
 # in your app / Cedar
 yarn add @cedarjs/pg@file:../cedar-pg
-# or: pnpm pack && yarn add ./cedarjs-pg-0.1.0-alpha.0.tgz
+# or: pnpm pack && yarn add ./cedarjs-pg-0.2.0-alpha.0.tgz
 ```
 
 ## CLI
 
 ```bash
-cedarpg ensure --mode=dev
-cedarpg ensure --mode=test --print-env
+cedarpg acquire --mode=dev
+cedarpg acquire --mode=test --print-env
+cedarpg run --mode=dev -- yarn tsx scripts/apiServer/dev.ts
+cedarpg run --mode=test -- vitest run
 cedarpg dispose --mode=test
 cedarpg print-url --mode=dev
 cedarpg gc   # drop DBs whose worktree root is gone (uses ~/.cedarpg/registry)
 ```
 
+`cedarpg run` acquires (or attaches the lease), force-sets `DATABASE_URL` (and
+`TEST_DATABASE_URL` in test mode) in the **child** process, then execs the command.
+Use it for Nx / e2e / API wrappers — local `.env` URLs do not win inside the child.
+
+## Nx consumer adapter
+
+Nx `dependsOn` alone does not forward env from an acquire task into dependents
+(Vite+ `env: [...]` does). **Canonical fix:** wrap the child with `cedarpg run`.
+Secondary: point Nx `envFile` at `.cedarpg/<mode>.env` after acquire.
+
+```ts
+import { cedarPgNxTargets, cedarPgRunCommand, relativeEnvFile } from "@cedarjs/pg/nx";
+
+cedarPgNxTargets();
+// { "db:acquire": { command: "cedarpg acquire --mode=dev", cache: false }, … }
+
+cedarPgRunCommand("dev", "yarn tsx scripts/apiServer/dev.ts");
+// "cedarpg run --mode=dev -- yarn tsx scripts/apiServer/dev.ts"
+
+relativeEnvFile("dev"); // ".cedarpg/dev.env"
+```
+
+```json
+{
+  "targets": {
+    "dev": {
+      "command": "cedarpg run --mode=dev -- yarn tsx scripts/apiServer/dev.ts"
+    },
+    "db:acquire": { "command": "cedarpg acquire --mode=dev" },
+    "serve": {
+      "dependsOn": ["db:acquire"],
+      "command": "node dist/server.js",
+      "options": { "envFile": ".cedarpg/dev.env" }
+    }
+  }
+}
+```
+
+For a db:ready-style migrate hook (same compose shape as Jest `createGlobalSetup`):
+
+```ts
+// tools/db-ready.ts
+import { createAcquireTask } from "@cedarjs/pg";
+
+await createAcquireTask({
+  mode: "dev",
+  afterAcquire: async ({ databaseUrl }) => {
+    // prisma migrate deploy / drizzle push / …
+  },
+})();
+```
+
+Fallbacks when you cannot wrap with `run`: `loadDevEnv({ overwrite: true })` or
+`import "@cedarjs/pg/dev-env"`. Absolute path helper: `envFilePath(root, mode)`.
+
 ## Vite+ consumer adapter
 
 ```ts
@@ -110,12 +170,12 @@ export default defineConfig({
       ...cedarPgTasks(),
       test: {
         command: "vp test",
-        dependsOn: ["db:ensure-test"],
+        dependsOn: ["db:acquire-test"],
         env: ["DATABASE_URL", "TEST_DATABASE_URL"],
       },
       dev: {
         command: "vp dev",
-        dependsOn: ["db:ensure"],
+        dependsOn: ["db:acquire"],
         env: ["DATABASE_URL"],
       },
     },
@@ -123,31 +183,222 @@ export default defineConfig({
 });
 ```
 
+## Vitest / Jest adapters
+
+```ts
+// vitest.config.ts
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  test: {
+    globalSetup: ["@cedarjs/pg/vitest"],
+  },
+});
+```
+
+```js
+// jest.config.cjs — standalone apps
+module.exports = {
+  globalSetup: require.resolve("@cedarjs/pg/jest"),
+  globalTeardown: require.resolve("@cedarjs/pg/jest-teardown"),
+  // Jest globalSetup is a separate process — workers load DATABASE_URL from .cedarpg/test.env
+  setupFiles: [require.resolve("@cedarjs/pg/test-env")],
+};
+```
+
+### Framework hosts (CedarJS, custom globalSetup)
+
+If your runner already owns `globalSetup` (e.g. Prisma push/migrate after acquire), **do not** replace it with `@cedarjs/pg/jest`. Compose instead:
+
+1. In your `globalSetup`: call `acquireIfNeeded` when opted in, then run migrations.
+2. Add `setupFiles: [require.resolve('@cedarjs/pg/test-env')]` so Jest **workers** see `DATABASE_URL`.
+3. In your `globalTeardown`: call `dispose({ mode: 'test', root })`.
+
+```ts
+// framework globalSetup (sketch)
+import { acquireIfNeeded } from "@cedarjs/pg";
+
+if (process.env.CEDAR_PG === "1" || process.env.CEDAR_PG === "true") {
+  await acquireIfNeeded({
+    root: projectRoot, // e.g. getPaths().base
+    mode: "test",
+    setEnv: true, // this process (prisma) — workers use @cedarjs/pg/test-env
+    url: process.env.TEST_DATABASE_URL,
+    force: process.env.CEDAR_PG_FORCE === "1",
+    disabled: false, // framework opt-in; adapters alone use CEDAR_PG=0 opt-out
+  });
+}
+// … prisma db push / migrate …
+```
+
+```js
+// jest-preset
+setupFiles: [require.resolve("@cedarjs/pg/test-env")],
+```
+
+Use exported `STATE_DIRNAME` (`.cedarpg`) / `loadTestEnv` / `loadDevEnv` /
+`envFilePath(root, mode)` instead of hardcoding the lease dir.
+
+`loadTestEnv` / `loadDevEnv` only fill **undefined** keys by default. Pass
+`{ overwrite: true }` (or import `@cedarjs/pg/dev-env`) when a local `.env`
+`DATABASE_URL` / `TEST_DATABASE_URL` should lose to cedar-pg. That is not the
+same as `CEDAR_PG_FORCE` / acquire `{ force }` (external-URL escape hatch).
+
 ## Programmatic API
 
 ```ts
-import { ensure, dispose } from "@cedarjs/pg";
+import { acquire, dispose, loadTestEnv, loadDevEnv, envFilePath, STATE_DIRNAME } from "@cedarjs/pg";
 
-const { databaseUrl, databaseName, dispose: drop } = await ensure({ mode: "test" });
+const { databaseUrl, adminUrl, databaseName, dispose: drop } = await acquire({ mode: "test" });
 // … tests …
 await drop();
+
+loadDevEnv({ overwrite: true }); // override .env DATABASE_URL from .cedarpg/dev.env
 ```
 
+### Host startup (CI ephemeral)
+
+By default cedar-pg **attaches** to a live autopg host (`autopg status`). If none is live it runs bare `autopg install` (pm2) — fine for local machines, hostile to GitHub Actions (no pm2) and slower than RAM-backed CI.
+
+In CI, cedar-pg starts an **opinionated ephemeral host** automatically when `CI=true` (or when forced). Callers just use `acquire` — no host options bag:
+
+```ts
+import { acquire } from "@cedarjs/pg";
+
+// CI=true → install --no-pm2 --no-ui + detached postmaster (--ram on Linux /dev/shm)
+const { databaseUrl } = await acquire({ mode: "test" });
+```
+
+| Signal                      | Effect                                                              |
+| --------------------------- | ------------------------------------------------------------------- |
+| `CEDAR_PG_EPHEMERAL_HOST=1` | Prefer ephemeral start when **no** host is live (attach still wins) |
+| `CEDAR_PG_EPHEMERAL_HOST=0` | Force local attach / pm2 install (even if `CI=true`)                |
+| unset + `CI=true`           | Prefer ephemeral when no host is live                               |
+| otherwise                   | Local: attach if live, else bare `autopg install`                   |
+
+Ephemeral recipe (not configurable via cedar-pg):
+
+- `autopg install --no-pm2 --no-ui --port 55432 --data DIR`
+- detached `autopg postmaster --port 55432 --socket-dir DIR --data DIR`
+- Linux when `/dev/shm` exists → also `--ram` and `DIR=/dev/shm/cedar-pg-<uid>`
+- otherwise → disk `DIR` under the OS temp dir (still owned, no pm2)
+- Ready when TCP accepts on the recipe port (not merely `autopg status` after install)
+
+If a host is already live, cedar-pg attaches and does not start another. The **CI job owns** ephemeral postmaster lifetime (runner teardown / `/dev/shm`); there is no cedar-pg host dispose API.
+
+### CI setup (GitHub Actions)
+
+Prefer the composite action (cache + attested binary install, no pm2). Version defaults to this repo’s `scripts/autopg-version`:
+
+```yaml
+- uses: actions/checkout@v6
+# In cedar-pg:
+- uses: ./.github/actions/setup-autopg
+# From another repo (pin to a tag when publishing the action):
+# - uses: cedarjs/cedar-pg/.github/actions/setup-autopg@main
+```
+
+See [`.github/actions/setup-autopg`](.github/actions/setup-autopg/README.md) for inputs (`version`, `cache`, `token`) and outputs.
+
+The action runs `scripts/ci-install-autopg.sh` under the hood. For published-package consumers under `CI=true` without the Action, set `CEDAR_PG_INSTALL_AUTOPG=1` so `postinstall` runs that same script (not upstream `install.sh`) — that flag alone is not enough when the package manager disables lifecycle scripts (`--ignore-scripts`, `YARN_ENABLE_SCRIPTS=false`, etc.). Prefer this Action, or bake the binary into the image.
+
+### Migrate-once + TEMPLATE clones (Jest / Vitest)
+
+Stock `@cedarjs/pg/jest` and `@cedarjs/pg/vitest` only run `acquireIfNeeded` + `dispose` (one shared test DB). They are **not** a full replacement for Redwood-style globalSetup that migrates once and clones per worker. For that, use template mode.
+
+Migrate stays app-owned via `createGlobalSetup({ migrate })`, then the adapter marks TEMPLATE and clones per worker. Point `globalSetup` at a **local** module that calls `createGlobalSetup` — string-resolving the package entry without a migrate hook throws.
+
+**Jest (template mode):**
+
+```js
+// jest.cedar-global.cjs
+const { createGlobalSetup } = require("@cedarjs/pg/jest/template");
+module.exports = createGlobalSetup({
+  migrate: async ({ databaseUrl }) => {
+    // prisma migrate reset / drizzle push / etc.
+  },
+});
+
+// jest.config.cjs
+module.exports = {
+  globalSetup: "<rootDir>/jest.cedar-global.cjs",
+  globalTeardown: require.resolve("@cedarjs/pg/jest-teardown"),
+  setupFilesAfterEnv: ["<rootDir>/jest.cedar-worker.cjs"],
+};
+
+// jest.cedar-worker.cjs — once per worker process
+const { cloneWorkerDatabase } = require("@cedarjs/pg/jest/template");
+beforeAll(() => cloneWorkerDatabase());
+```
+
+**Vitest (template mode):**
+
+```ts
+// vitest.cedar-global.ts
+import { createGlobalSetup } from "@cedarjs/pg/vitest/template";
+export default createGlobalSetup({
+  migrate: async ({ databaseUrl }) => {
+    // migrate once
+  },
+});
+
+// vitest.config.ts
+export default defineConfig({
+  test: {
+    globalSetup: ["./vitest.cedar-global.ts"],
+    setupFiles: ["./vitest.cedar-worker.ts"],
+  },
+});
+
+// vitest.cedar-worker.ts — once per worker process (ESM top-level await)
+import { cloneWorkerDatabase } from "@cedarjs/pg/vitest/template";
+await cloneWorkerDatabase();
+```
+
+**Programmatic** (core API — no runner adapters):
+
+```ts
+import { acquire, markTemplate, cloneFromTemplate, dispose } from "@cedarjs/pg";
+
+const acquired = await acquire({ mode: "test" });
+await migrate({ databaseUrl: acquired.databaseUrl, adminUrl: acquired.adminUrl });
+await markTemplate({ root: acquired.root, mode: "test", adminUrl: acquired.adminUrl });
+const worker = await cloneFromTemplate({
+  root: acquired.root,
+  mode: "test",
+  name: "1",
+  setEnv: true,
+});
+// … tests …
+await worker.dropClone(); // optional: drop one clone only
+await dispose({ root: acquired.root, mode: "test" }); // role-scoped: TEMPLATE + all clones + role
+```
+
+`acquire` returns `adminUrl` for migrate hooks / privileged DDL; `markTemplate` / `cloneFromTemplate` accept it or rediscover the host when omitted.
+`cloneFromTemplate` uses the admin connection internally (`CREATE DATABASE … TEMPLATE`); test roles stay `LOGIN`-only. `setEnv` defaults to false on `cloneFromTemplate`; `cloneFromTemplateIfNeeded` defaults true (same as `acquireIfNeeded`).
+Worker adapters call `cloneFromTemplateIfNeeded` (shared skip policy via `runIfNeeded`) via `cloneWorkerDatabase`.
+`dispose` is role-scoped suite teardown (not `dropClone`): unsets `IS_TEMPLATE` and drops every database owned by the lease role.
+
 ## Env
 
-| Var                           | Meaning                                                             |
-| ----------------------------- | ------------------------------------------------------------------- |
-| `AUTOPG_BIN`                  | Path to autopg                                                      |
-| `CEDAR_PG=0`                  | Disable auto-ensure in adapters                                     |
-| `TEST_DATABASE_URL`           | Escape hatch — skip ensure for external DBs (not `cpg_*` / `file:`) |
-| `CEDAR_PG_FORCE=1`            | Ignore external-URL escape hatch                                    |
-| `CEDAR_PG_REGISTRY_DIR`       | Override global lease registry (for `gc`)                           |
-| `CEDAR_PG_SKIP_POSTINSTALL=1` | Skip autopg install hook                                            |
-| `CEDAR_PG_INSTALL_AUTOPG=1`   | Force autopg install in CI                                          |
+| Var                            | Meaning                                                                                                        |
+| ------------------------------ | -------------------------------------------------------------------------------------------------------------- |
+| `AUTOPG_BIN`                   | Path to autopg                                                                                                 |
+| `AUTOPG_PG_USER` / `_PASSWORD` | Autopg superuser for admin URL (default `postgres` / `postgres`)                                               |
+| `CEDAR_PG=0`                   | Disable auto-acquire in adapters                                                                               |
+| `TEST_DATABASE_URL`            | Escape hatch: skip acquire for real external DBs (not `cpg_*` / `file:` / `{…}` / `<…>` template placeholders) |
+| `CEDAR_PG_FORCE=1`             | Ignore external-URL escape hatch (adapters + `cedarpg acquire --force` / `run --force`)                        |
+| `CEDAR_PG_EPHEMERAL_HOST`      | `1` force / `0` disable ephemeral host (auto when `CI=true`)                                                   |
+| `CEDAR_PG_REGISTRY_DIR`        | Override global lease registry (for `gc`)                                                                      |
+| `CEDAR_PG_SKIP_POSTINSTALL=1`  | Skip autopg install hook                                                                                       |
+| `CEDAR_PG_INSTALL_AUTOPG=1`    | Under `CI=true`, run binary-only `ci-install-autopg.sh` from postinstall                                       |
 
 ## Alpha caveats
 
 - Public API may change before `0.1.0`.
-- End-to-end Postgres flows assume a working local `autopg` host; CI unit tests do not start Postgres.
-- State lives in product-owned `.cedarpg` (worktree + `~/.cedarpg/registry`) — not under autopg's `~/.autopg/`, not a generic `.pg`.
-- Password salt (`cedar-pg\\0`, scheme v1) is an opaque crypto constant; bump the scheme id to change it.
+- End-to-end Postgres flows assume a working local `autopg` host; unit tests do not start Postgres.
+  CI runs `vp run smoke:pg` for Vitest/Jest adapters against real Postgres
+  (ephemeral cold-start when the runner has no live host; attach-wins otherwise).
+- State lives in product-owned `.cedarpg` (worktree + `~/.cedarpg/registry`), not under autopg's `~/.autopg/` or a generic `.pg`.
+- Role passwords are derived from `roleName` (`cedar-pg\\0` + roleName, scheme v2) so TEMPLATE clones that reuse a role keep working; bump the scheme id to change the derivation.
+- Test TEMPLATE flow: `acquire` → app migrate → `markTemplate` → `cloneFromTemplate` → role-scoped `dispose`. Optional `@cedarjs/pg/jest/template` + `@cedarjs/pg/vitest/template` adapters orchestrate that pipeline via `createGlobalSetup({ migrate })`; migrate stays app-owned.

package/dist/cli.cjs

@@ -1,24 +1,32 @@
 #!/usr/bin/env node
-const require_lifecycle = require("./lifecycle-D10usEjM.cjs");
-const require_constants = require("./constants-B7sCf4fg.cjs");
+const require_lifecycle = require("./lifecycle-DEJ4GgWV.cjs");
+const require_constants = require("./constants-Ct8myrEn.cjs");
+const require_lease = require("./lease-Bq9wKwQa.cjs");
+let node_child_process = require("node:child_process");
 //#region src/cli.ts
 function printHelp() {
-	process.stdout.write(`${require_constants.CLI_NAME} — worktree-isolated local Postgres (via autopg)
+	process.stdout.write(`${require_constants.CLI_NAME}: worktree-isolated local Postgres (via autopg)
 
 Usage:
-  ${require_constants.CLI_NAME} ensure --mode=dev|test [--root <path>] [--json] [--print-env]
+  ${require_constants.CLI_NAME} acquire --mode=dev|test [--root <path>] [--force] [--json] [--print-env]
+  ${require_constants.CLI_NAME} run --mode=dev|test [--root <path>] [--force] -- <cmd…>
   ${require_constants.CLI_NAME} dispose [--mode=dev|test] [--root <path>]
   ${require_constants.CLI_NAME} gc [--json]
   ${require_constants.CLI_NAME} print-url [--mode=dev|test] [--root <path>]
   ${require_constants.CLI_NAME} --help
 
 Modes:
-  dev   Keep DB across restarts (default for ensure if omitted: dev)
+  dev   Keep DB across restarts (default when --mode omitted)
   test  Drop DB on dispose / test teardown
 
+run:
+  Acquire, set DATABASE_URL (+ TEST_DATABASE_URL in test) on the child, exec <cmd…>.
+  --force sets CEDAR_PG_FORCE (escape hatch); child env overwrite is always on.
+
 Env:
-  AUTOPG_BIN     Path to autopg binary
-  CEDAR_PG=0     Disable adapters that auto-ensure
+  AUTOPG_BIN       Path to autopg binary
+  CEDAR_PG=0       Disable adapters that auto-acquire
+  CEDAR_PG_FORCE=1 Ignore external-URL escape hatch (same as --force)
 `);
 }
 function parseMode(value) {
@@ -29,19 +37,40 @@ function parseArgs(argv) {
 	const out = {};
 	const rest = [...argv];
 	out.cmd = rest.shift();
-	for (let i = 0; i < rest.length; i++) {
-		const a = rest[i];
+	const dash = rest.indexOf("--");
+	let flagArgs = rest;
+	if (dash >= 0) {
+		flagArgs = rest.slice(0, dash);
+		out.child = rest.slice(dash + 1);
+	}
+	for (let i = 0; i < flagArgs.length; i++) {
+		const a = flagArgs[i];
 		if (a === "--help" || a === "-h") out.help = true;
 		else if (a === "--json") out.json = true;
 		else if (a === "--print-env") out.printEnv = true;
+		else if (a === "--force") out.force = true;
 		else if (a.startsWith("--mode=")) out.mode = parseMode(a.slice(7));
-		else if (a === "--mode") out.mode = parseMode(rest[++i]);
+		else if (a === "--mode") out.mode = parseMode(flagArgs[++i]);
 		else if (a.startsWith("--root=")) out.root = a.slice(7);
-		else if (a === "--root") out.root = rest[++i];
+		else if (a === "--root") out.root = flagArgs[++i];
 		else throw new Error(`unknown argument: ${a}`);
 	}
 	return out;
 }
+function runChild(command, env) {
+	const [file, ...args] = command;
+	if (!file) throw new Error(`run requires a command after -- (e.g. ${require_constants.CLI_NAME} run --mode=dev -- yarn dev)`);
+	return new Promise((resolve, reject) => {
+		const child = (0, node_child_process.spawn)(file, args, {
+			stdio: "inherit",
+			env
+		});
+		child.on("error", reject);
+		child.on("exit", (code, signal) => {
+			resolve(signal ? 1 : code ?? 1);
+		});
+	});
+}
 async function main() {
 	const argv = process.argv.slice(2);
 	if (argv.length === 0 || argv[0] === "help" || argv[0] === "--help" || argv[0] === "-h") {
@@ -54,9 +83,10 @@ async function main() {
 		return 0;
 	}
 	try {
-		if (args.cmd === "ensure") {
+		if (args.cmd === "acquire") {
+			if (args.force) process.env.CEDAR_PG_FORCE = "1";
 			const mode = args.mode ?? "dev";
-			const result = await require_lifecycle.ensure({
+			const result = await require_lifecycle.acquire({
 				root: args.root,
 				mode,
 				setEnv: true
@@ -67,6 +97,7 @@ async function main() {
 			}
 			if (args.json) process.stdout.write(`${JSON.stringify({
 				databaseUrl: result.databaseUrl,
+				adminUrl: result.adminUrl,
 				databaseName: result.databaseName,
 				roleName: result.roleName,
 				repoSlug: result.repoSlug,
@@ -82,6 +113,21 @@ async function main() {
 			}
 			return 0;
 		}
+		if (args.cmd === "run") {
+			if (args.force) process.env.CEDAR_PG_FORCE = "1";
+			const mode = args.mode ?? "dev";
+			const result = await require_lifecycle.acquire({
+				root: args.root,
+				mode,
+				setEnv: true
+			});
+			const childEnv = {
+				...process.env,
+				DATABASE_URL: result.databaseUrl
+			};
+			if (mode === "test") childEnv.TEST_DATABASE_URL = result.databaseUrl;
+			return await runChild(args.child ?? [], childEnv);
+		}
 		if (args.cmd === "dispose") {
 			const mode = args.mode ?? "test";
 			const result = await require_lifecycle.dispose({
@@ -96,7 +142,7 @@ async function main() {
 				process.stdout.write(`${require_constants.CLI_NAME}: nothing to dispose for ${mode} (no lease)\n`);
 				return 0;
 			}
-			process.stderr.write(`${require_constants.CLI_NAME}: could not dispose ${mode} — autopg host unavailable (lease kept for retry)\n`);
+			process.stderr.write(`${require_constants.CLI_NAME}: could not dispose ${mode}: autopg host unavailable (lease kept for retry)\n`);
 			return 1;
 		}
 		if (args.cmd === "gc") {
@@ -110,9 +156,9 @@ async function main() {
 		}
 		if (args.cmd === "print-url") {
 			const mode = args.mode ?? "dev";
-			const lease = require_lifecycle.readLease(require_lifecycle.resolveWorktreeIdentity(args.root).root, mode);
+			const lease = require_lease.readLease(require_lease.resolveWorktreeIdentity(args.root).root, mode);
 			if (!lease) {
-				process.stderr.write(`${require_constants.CLI_NAME}: no ${mode} lease — run \`${require_constants.CLI_NAME} ensure --mode=${mode}\` first\n`);
+				process.stderr.write(`${require_constants.CLI_NAME}: no ${mode} lease; run \`${require_constants.CLI_NAME} acquire --mode=${mode}\` first\n`);
 				return 2;
 			}
 			process.stdout.write(`${require_lifecycle.urlFromLease(lease)}\n`);

package/dist/cli.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"cli.cjs","names":["CLI_NAME","ensure","dispose","gc","readLease","resolveWorktreeIdentity","urlFromLease"],"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { CLI_NAME } from \"./core/constants.ts\";\nimport { ensure, dispose, gc, urlFromLease } from \"./core/lifecycle.ts\";\nimport { resolveWorktreeIdentity } from \"./core/worktree.ts\";\nimport { readLease } from \"./core/lease.ts\";\nimport type { DbMode } from \"./core/naming.ts\";\n\nfunction printHelp(): void {\n  process.stdout.write(`${CLI_NAME} — worktree-isolated local Postgres (via autopg)\n\nUsage:\n  ${CLI_NAME} ensure --mode=dev|test [--root <path>] [--json] [--print-env]\n  ${CLI_NAME} dispose [--mode=dev|test] [--root <path>]\n  ${CLI_NAME} gc [--json]\n  ${CLI_NAME} print-url [--mode=dev|test] [--root <path>]\n  ${CLI_NAME} --help\n\nModes:\n  dev   Keep DB across restarts (default for ensure if omitted: dev)\n  test  Drop DB on dispose / test teardown\n\nEnv:\n  AUTOPG_BIN     Path to autopg binary\n  CEDAR_PG=0     Disable adapters that auto-ensure\n`);\n}\n\nfunction parseMode(value: string | undefined): DbMode {\n  if (value === \"dev\" || value === \"test\") return value;\n  throw new Error(\"--mode must be dev or test\");\n}\n\nfunction parseArgs(argv: string[]) {\n  const out: {\n    cmd?: string;\n    mode?: DbMode;\n    root?: string;\n    json?: boolean;\n    printEnv?: boolean;\n    help?: boolean;\n  } = {};\n  const rest = [...argv];\n  out.cmd = rest.shift();\n  for (let i = 0; i < rest.length; i++) {\n    const a = rest[i]!;\n    if (a === \"--help\" || a === \"-h\") out.help = true;\n    else if (a === \"--json\") out.json = true;\n    else if (a === \"--print-env\") out.printEnv = true;\n    else if (a.startsWith(\"--mode=\")) out.mode = parseMode(a.slice(7));\n    else if (a === \"--mode\") out.mode = parseMode(rest[++i]);\n    else if (a.startsWith(\"--root=\")) out.root = a.slice(7);\n    else if (a === \"--root\") out.root = rest[++i];\n    else throw new Error(`unknown argument: ${a}`);\n  }\n  return out;\n}\n\nasync function main(): Promise<number> {\n  const argv = process.argv.slice(2);\n  if (argv.length === 0 || argv[0] === \"help\" || argv[0] === \"--help\" || argv[0] === \"-h\") {\n    printHelp();\n    return 0;\n  }\n  const args = parseArgs(argv);\n  if (args.help) {\n    printHelp();\n    return 0;\n  }\n\n  try {\n    if (args.cmd === \"ensure\") {\n      const mode = args.mode ?? \"dev\";\n      const result = await ensure({\n        root: args.root,\n        mode,\n        setEnv: true,\n      });\n      if (args.printEnv) {\n        process.stdout.write(`DATABASE_URL=${result.databaseUrl}\\n`);\n        if (mode === \"test\") {\n          process.stdout.write(`TEST_DATABASE_URL=${result.databaseUrl}\\n`);\n        }\n      }\n      if (args.json) {\n        process.stdout.write(\n          `${JSON.stringify(\n            {\n              databaseUrl: result.databaseUrl,\n              databaseName: result.databaseName,\n              roleName: result.roleName,\n              repoSlug: result.repoSlug,\n              worktreeSlug: result.worktreeSlug,\n              pathHash: result.pathHash,\n              mode: result.mode,\n              port: result.port,\n              root: result.root,\n            },\n            null,\n            2,\n          )}\\n`,\n        );\n      } else if (!args.printEnv) {\n        process.stdout.write(\n          `${CLI_NAME}: ${result.databaseName} (${result.repoSlug}/${result.worktreeSlug} ${result.mode})\\n`,\n        );\n        process.stdout.write(`${result.databaseUrl}\\n`);\n      }\n      return 0;\n    }\n\n    if (args.cmd === \"dispose\") {\n      const mode = args.mode ?? \"test\";\n      const result = await dispose({ root: args.root, mode });\n      if (result.dropped) {\n        process.stdout.write(`${CLI_NAME}: disposed ${mode} (${result.databaseName})\\n`);\n        return 0;\n      }\n      if (result.reason === \"no-lease\") {\n        process.stdout.write(`${CLI_NAME}: nothing to dispose for ${mode} (no lease)\\n`);\n        return 0;\n      }\n      process.stderr.write(\n        `${CLI_NAME}: could not dispose ${mode} — autopg host unavailable (lease kept for retry)\\n`,\n      );\n      return 1;\n    }\n\n    if (args.cmd === \"gc\") {\n      const result = await gc();\n      if (args.json) {\n        process.stdout.write(`${JSON.stringify(result)}\\n`);\n      } else {\n        process.stdout.write(`${CLI_NAME} gc: dropped ${result.dropped.length} database(s)\\n`);\n        for (const name of result.dropped) process.stdout.write(`  ${name}\\n`);\n      }\n      return 0;\n    }\n\n    if (args.cmd === \"print-url\") {\n      const mode = args.mode ?? \"dev\";\n      const identity = resolveWorktreeIdentity(args.root);\n      const lease = readLease(identity.root, mode);\n      if (!lease) {\n        process.stderr.write(\n          `${CLI_NAME}: no ${mode} lease — run \\`${CLI_NAME} ensure --mode=${mode}\\` first\\n`,\n        );\n        return 2;\n      }\n      process.stdout.write(`${urlFromLease(lease)}\\n`);\n      return 0;\n    }\n\n    process.stderr.write(`${CLI_NAME}: unknown command ${args.cmd}\\n`);\n    printHelp();\n    return 64;\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    process.stderr.write(`${CLI_NAME}: ${message}\\n`);\n    return 1;\n  }\n}\n\nmain()\n  .then((code) => {\n    process.exit(code);\n  })\n  .catch((err: unknown) => {\n    const message = err instanceof Error ? err.message : String(err);\n    process.stderr.write(`${CLI_NAME}: ${message}\\n`);\n    process.exit(1);\n  });\n"],"mappings":";;;;AAOA,SAAS,YAAkB;CACzB,QAAQ,OAAO,MAAM,GAAGA,kBAAAA,SAAS;;;IAG/BA,kBAAAA,SAAS;IACTA,kBAAAA,SAAS;IACTA,kBAAAA,SAAS;IACTA,kBAAAA,SAAS;IACTA,kBAAAA,SAAS;;;;;;;;;CASZ;AACD;AAEA,SAAS,UAAU,OAAmC;CACpD,IAAI,UAAU,SAAS,UAAU,QAAQ,OAAO;CAChD,MAAM,IAAI,MAAM,4BAA4B;AAC9C;AAEA,SAAS,UAAU,MAAgB;CACjC,MAAM,MAOF,CAAC;CACL,MAAM,OAAO,CAAC,GAAG,IAAI;CACrB,IAAI,MAAM,KAAK,MAAM;CACrB,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,IAAI,KAAK;EACf,IAAI,MAAM,YAAY,MAAM,MAAM,IAAI,OAAO;OACxC,IAAI,MAAM,UAAU,IAAI,OAAO;OAC/B,IAAI,MAAM,eAAe,IAAI,WAAW;OACxC,IAAI,EAAE,WAAW,SAAS,GAAG,IAAI,OAAO,UAAU,EAAE,MAAM,CAAC,CAAC;OAC5D,IAAI,MAAM,UAAU,IAAI,OAAO,UAAU,KAAK,EAAE,EAAE;OAClD,IAAI,EAAE,WAAW,SAAS,GAAG,IAAI,OAAO,EAAE,MAAM,CAAC;OACjD,IAAI,MAAM,UAAU,IAAI,OAAO,KAAK,EAAE;OACtC,MAAM,IAAI,MAAM,qBAAqB,GAAG;CAC/C;CACA,OAAO;AACT;AAEA,eAAe,OAAwB;CACrC,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,OAAO,UAAU,KAAK,OAAO,YAAY,KAAK,OAAO,MAAM;EACvF,UAAU;EACV,OAAO;CACT;CACA,MAAM,OAAO,UAAU,IAAI;CAC3B,IAAI,KAAK,MAAM;EACb,UAAU;EACV,OAAO;CACT;CAEA,IAAI;EACF,IAAI,KAAK,QAAQ,UAAU;GACzB,MAAM,OAAO,KAAK,QAAQ;GAC1B,MAAM,SAAS,MAAMC,kBAAAA,OAAO;IAC1B,MAAM,KAAK;IACX;IACA,QAAQ;GACV,CAAC;GACD,IAAI,KAAK,UAAU;IACjB,QAAQ,OAAO,MAAM,gBAAgB,OAAO,YAAY,GAAG;IAC3D,IAAI,SAAS,QACX,QAAQ,OAAO,MAAM,qBAAqB,OAAO,YAAY,GAAG;GAEpE;GACA,IAAI,KAAK,MACP,QAAQ,OAAO,MACb,GAAG,KAAK,UACN;IACE,aAAa,OAAO;IACpB,cAAc,OAAO;IACrB,UAAU,OAAO;IACjB,UAAU,OAAO;IACjB,cAAc,OAAO;IACrB,UAAU,OAAO;IACjB,MAAM,OAAO;IACb,MAAM,OAAO;IACb,MAAM,OAAO;GACf,GACA,MACA,CACF,EAAE,GACJ;QACK,IAAI,CAAC,KAAK,UAAU;IACzB,QAAQ,OAAO,MACb,GAAGD,kBAAAA,SAAS,IAAI,OAAO,aAAa,IAAI,OAAO,SAAS,GAAG,OAAO,aAAa,GAAG,OAAO,KAAK,IAChG;IACA,QAAQ,OAAO,MAAM,GAAG,OAAO,YAAY,GAAG;GAChD;GACA,OAAO;EACT;EAEA,IAAI,KAAK,QAAQ,WAAW;GAC1B,MAAM,OAAO,KAAK,QAAQ;GAC1B,MAAM,SAAS,MAAME,kBAAAA,QAAQ;IAAE,MAAM,KAAK;IAAM;GAAK,CAAC;GACtD,IAAI,OAAO,SAAS;IAClB,QAAQ,OAAO,MAAM,GAAGF,kBAAAA,SAAS,aAAa,KAAK,IAAI,OAAO,aAAa,IAAI;IAC/E,OAAO;GACT;GACA,IAAI,OAAO,WAAW,YAAY;IAChC,QAAQ,OAAO,MAAM,GAAGA,kBAAAA,SAAS,2BAA2B,KAAK,cAAc;IAC/E,OAAO;GACT;GACA,QAAQ,OAAO,MACb,GAAGA,kBAAAA,SAAS,sBAAsB,KAAK,oDACzC;GACA,OAAO;EACT;EAEA,IAAI,KAAK,QAAQ,MAAM;GACrB,MAAM,SAAS,MAAMG,kBAAAA,GAAG;GACxB,IAAI,KAAK,MACP,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,MAAM,EAAE,GAAG;QAC7C;IACL,QAAQ,OAAO,MAAM,GAAGH,kBAAAA,SAAS,eAAe,OAAO,QAAQ,OAAO,eAAe;IACrF,KAAK,MAAM,QAAQ,OAAO,SAAS,QAAQ,OAAO,MAAM,KAAK,KAAK,GAAG;GACvE;GACA,OAAO;EACT;EAEA,IAAI,KAAK,QAAQ,aAAa;GAC5B,MAAM,OAAO,KAAK,QAAQ;GAE1B,MAAM,QAAQI,kBAAAA,UADGC,kBAAAA,wBAAwB,KAAK,IACf,CAAC,CAAC,MAAM,IAAI;GAC3C,IAAI,CAAC,OAAO;IACV,QAAQ,OAAO,MACb,GAAGL,kBAAAA,SAAS,OAAO,KAAK,iBAAiBA,kBAAAA,SAAS,iBAAiB,KAAK,WAC1E;IACA,OAAO;GACT;GACA,QAAQ,OAAO,MAAM,GAAGM,kBAAAA,aAAa,KAAK,EAAE,GAAG;GAC/C,OAAO;EACT;EAEA,QAAQ,OAAO,MAAM,GAAGN,kBAAAA,SAAS,oBAAoB,KAAK,IAAI,GAAG;EACjE,UAAU;EACV,OAAO;CACT,SAAS,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;EAC/D,QAAQ,OAAO,MAAM,GAAGA,kBAAAA,SAAS,IAAI,QAAQ,GAAG;EAChD,OAAO;CACT;AACF;AAEA,KAAK,CAAC,CACH,MAAM,SAAS;CACd,QAAQ,KAAK,IAAI;AACnB,CAAC,CAAC,CACD,OAAO,QAAiB;CACvB,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;CAC/D,QAAQ,OAAO,MAAM,GAAGA,kBAAAA,SAAS,IAAI,QAAQ,GAAG;CAChD,QAAQ,KAAK,CAAC;AAChB,CAAC"}
+{"version":3,"file":"cli.cjs","names":["CLI_NAME","acquire","dispose","gc","readLease","resolveWorktreeIdentity","urlFromLease"],"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { spawn } from \"node:child_process\";\nimport { CLI_NAME } from \"./core/constants.ts\";\nimport { acquire, dispose, gc, urlFromLease } from \"./core/lifecycle.ts\";\nimport { resolveWorktreeIdentity } from \"./core/worktree.ts\";\nimport { readLease } from \"./core/lease.ts\";\nimport type { DbMode } from \"./core/naming.ts\";\n\nfunction printHelp(): void {\n  process.stdout.write(`${CLI_NAME}: worktree-isolated local Postgres (via autopg)\n\nUsage:\n  ${CLI_NAME} acquire --mode=dev|test [--root <path>] [--force] [--json] [--print-env]\n  ${CLI_NAME} run --mode=dev|test [--root <path>] [--force] -- <cmd…>\n  ${CLI_NAME} dispose [--mode=dev|test] [--root <path>]\n  ${CLI_NAME} gc [--json]\n  ${CLI_NAME} print-url [--mode=dev|test] [--root <path>]\n  ${CLI_NAME} --help\n\nModes:\n  dev   Keep DB across restarts (default when --mode omitted)\n  test  Drop DB on dispose / test teardown\n\nrun:\n  Acquire, set DATABASE_URL (+ TEST_DATABASE_URL in test) on the child, exec <cmd…>.\n  --force sets CEDAR_PG_FORCE (escape hatch); child env overwrite is always on.\n\nEnv:\n  AUTOPG_BIN       Path to autopg binary\n  CEDAR_PG=0       Disable adapters that auto-acquire\n  CEDAR_PG_FORCE=1 Ignore external-URL escape hatch (same as --force)\n`);\n}\n\nfunction parseMode(value: string | undefined): DbMode {\n  if (value === \"dev\" || value === \"test\") return value;\n  throw new Error(\"--mode must be dev or test\");\n}\n\ntype ParsedArgs = {\n  cmd?: string;\n  mode?: DbMode;\n  root?: string;\n  json?: boolean;\n  printEnv?: boolean;\n  force?: boolean;\n  help?: boolean;\n  child?: string[];\n};\n\nfunction parseArgs(argv: string[]): ParsedArgs {\n  const out: ParsedArgs = {};\n  const rest = [...argv];\n  out.cmd = rest.shift();\n\n  const dash = rest.indexOf(\"--\");\n  let flagArgs = rest;\n  if (dash >= 0) {\n    flagArgs = rest.slice(0, dash);\n    out.child = rest.slice(dash + 1);\n  }\n\n  for (let i = 0; i < flagArgs.length; i++) {\n    const a = flagArgs[i]!;\n    if (a === \"--help\" || a === \"-h\") out.help = true;\n    else if (a === \"--json\") out.json = true;\n    else if (a === \"--print-env\") out.printEnv = true;\n    else if (a === \"--force\") out.force = true;\n    else if (a.startsWith(\"--mode=\")) out.mode = parseMode(a.slice(7));\n    else if (a === \"--mode\") out.mode = parseMode(flagArgs[++i]);\n    else if (a.startsWith(\"--root=\")) out.root = a.slice(7);\n    else if (a === \"--root\") out.root = flagArgs[++i];\n    else throw new Error(`unknown argument: ${a}`);\n  }\n  return out;\n}\n\nfunction runChild(command: string[], env: NodeJS.ProcessEnv): Promise<number> {\n  const [file, ...args] = command;\n  if (!file) {\n    throw new Error(\n      `run requires a command after -- (e.g. ${CLI_NAME} run --mode=dev -- yarn dev)`,\n    );\n  }\n  return new Promise((resolve, reject) => {\n    const child = spawn(file, args, { stdio: \"inherit\", env });\n    child.on(\"error\", reject);\n    child.on(\"exit\", (code, signal) => {\n      resolve(signal ? 1 : (code ?? 1));\n    });\n  });\n}\n\nasync function main(): Promise<number> {\n  const argv = process.argv.slice(2);\n  if (argv.length === 0 || argv[0] === \"help\" || argv[0] === \"--help\" || argv[0] === \"-h\") {\n    printHelp();\n    return 0;\n  }\n  const args = parseArgs(argv);\n  if (args.help) {\n    printHelp();\n    return 0;\n  }\n\n  try {\n    if (args.cmd === \"acquire\") {\n      if (args.force) process.env.CEDAR_PG_FORCE = \"1\";\n      const mode = args.mode ?? \"dev\";\n      const result = await acquire({\n        root: args.root,\n        mode,\n        setEnv: true,\n      });\n      if (args.printEnv) {\n        process.stdout.write(`DATABASE_URL=${result.databaseUrl}\\n`);\n        if (mode === \"test\") {\n          process.stdout.write(`TEST_DATABASE_URL=${result.databaseUrl}\\n`);\n        }\n      }\n      if (args.json) {\n        process.stdout.write(\n          `${JSON.stringify(\n            {\n              databaseUrl: result.databaseUrl,\n              adminUrl: result.adminUrl,\n              databaseName: result.databaseName,\n              roleName: result.roleName,\n              repoSlug: result.repoSlug,\n              worktreeSlug: result.worktreeSlug,\n              pathHash: result.pathHash,\n              mode: result.mode,\n              port: result.port,\n              root: result.root,\n            },\n            null,\n            2,\n          )}\\n`,\n        );\n      } else if (!args.printEnv) {\n        process.stdout.write(\n          `${CLI_NAME}: ${result.databaseName} (${result.repoSlug}/${result.worktreeSlug} ${result.mode})\\n`,\n        );\n        process.stdout.write(`${result.databaseUrl}\\n`);\n      }\n      return 0;\n    }\n\n    if (args.cmd === \"run\") {\n      if (args.force) process.env.CEDAR_PG_FORCE = \"1\";\n      const mode = args.mode ?? \"dev\";\n      const result = await acquire({\n        root: args.root,\n        mode,\n        setEnv: true,\n      });\n      const childEnv: NodeJS.ProcessEnv = {\n        ...process.env,\n        DATABASE_URL: result.databaseUrl,\n      };\n      if (mode === \"test\") childEnv.TEST_DATABASE_URL = result.databaseUrl;\n      return await runChild(args.child ?? [], childEnv);\n    }\n\n    if (args.cmd === \"dispose\") {\n      const mode = args.mode ?? \"test\";\n      const result = await dispose({ root: args.root, mode });\n      if (result.dropped) {\n        process.stdout.write(`${CLI_NAME}: disposed ${mode} (${result.databaseName})\\n`);\n        return 0;\n      }\n      if (result.reason === \"no-lease\") {\n        process.stdout.write(`${CLI_NAME}: nothing to dispose for ${mode} (no lease)\\n`);\n        return 0;\n      }\n      process.stderr.write(\n        `${CLI_NAME}: could not dispose ${mode}: autopg host unavailable (lease kept for retry)\\n`,\n      );\n      return 1;\n    }\n\n    if (args.cmd === \"gc\") {\n      const result = await gc();\n      if (args.json) {\n        process.stdout.write(`${JSON.stringify(result)}\\n`);\n      } else {\n        process.stdout.write(`${CLI_NAME} gc: dropped ${result.dropped.length} database(s)\\n`);\n        for (const name of result.dropped) process.stdout.write(`  ${name}\\n`);\n      }\n      return 0;\n    }\n\n    if (args.cmd === \"print-url\") {\n      const mode = args.mode ?? \"dev\";\n      const identity = resolveWorktreeIdentity(args.root);\n      const lease = readLease(identity.root, mode);\n      if (!lease) {\n        process.stderr.write(\n          `${CLI_NAME}: no ${mode} lease; run \\`${CLI_NAME} acquire --mode=${mode}\\` first\\n`,\n        );\n        return 2;\n      }\n      process.stdout.write(`${urlFromLease(lease)}\\n`);\n      return 0;\n    }\n\n    process.stderr.write(`${CLI_NAME}: unknown command ${args.cmd}\\n`);\n    printHelp();\n    return 64;\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    process.stderr.write(`${CLI_NAME}: ${message}\\n`);\n    return 1;\n  }\n}\n\nmain()\n  .then((code) => {\n    process.exit(code);\n  })\n  .catch((err: unknown) => {\n    const message = err instanceof Error ? err.message : String(err);\n    process.stderr.write(`${CLI_NAME}: ${message}\\n`);\n    process.exit(1);\n  });\n"],"mappings":";;;;;;AAQA,SAAS,YAAkB;CACzB,QAAQ,OAAO,MAAM,GAAGA,kBAAAA,SAAS;;;IAG/BA,kBAAAA,SAAS;IACTA,kBAAAA,SAAS;IACTA,kBAAAA,SAAS;IACTA,kBAAAA,SAAS;IACTA,kBAAAA,SAAS;IACTA,kBAAAA,SAAS;;;;;;;;;;;;;;CAcZ;AACD;AAEA,SAAS,UAAU,OAAmC;CACpD,IAAI,UAAU,SAAS,UAAU,QAAQ,OAAO;CAChD,MAAM,IAAI,MAAM,4BAA4B;AAC9C;AAaA,SAAS,UAAU,MAA4B;CAC7C,MAAM,MAAkB,CAAC;CACzB,MAAM,OAAO,CAAC,GAAG,IAAI;CACrB,IAAI,MAAM,KAAK,MAAM;CAErB,MAAM,OAAO,KAAK,QAAQ,IAAI;CAC9B,IAAI,WAAW;CACf,IAAI,QAAQ,GAAG;EACb,WAAW,KAAK,MAAM,GAAG,IAAI;EAC7B,IAAI,QAAQ,KAAK,MAAM,OAAO,CAAC;CACjC;CAEA,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;EACxC,MAAM,IAAI,SAAS;EACnB,IAAI,MAAM,YAAY,MAAM,MAAM,IAAI,OAAO;OACxC,IAAI,MAAM,UAAU,IAAI,OAAO;OAC/B,IAAI,MAAM,eAAe,IAAI,WAAW;OACxC,IAAI,MAAM,WAAW,IAAI,QAAQ;OACjC,IAAI,EAAE,WAAW,SAAS,GAAG,IAAI,OAAO,UAAU,EAAE,MAAM,CAAC,CAAC;OAC5D,IAAI,MAAM,UAAU,IAAI,OAAO,UAAU,SAAS,EAAE,EAAE;OACtD,IAAI,EAAE,WAAW,SAAS,GAAG,IAAI,OAAO,EAAE,MAAM,CAAC;OACjD,IAAI,MAAM,UAAU,IAAI,OAAO,SAAS,EAAE;OAC1C,MAAM,IAAI,MAAM,qBAAqB,GAAG;CAC/C;CACA,OAAO;AACT;AAEA,SAAS,SAAS,SAAmB,KAAyC;CAC5E,MAAM,CAAC,MAAM,GAAG,QAAQ;CACxB,IAAI,CAAC,MACH,MAAM,IAAI,MACR,yCAAyCA,kBAAAA,SAAS,6BACpD;CAEF,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,MAAM,SAAA,GAAA,mBAAA,MAAA,CAAc,MAAM,MAAM;GAAE,OAAO;GAAW;EAAI,CAAC;EACzD,MAAM,GAAG,SAAS,MAAM;EACxB,MAAM,GAAG,SAAS,MAAM,WAAW;GACjC,QAAQ,SAAS,IAAK,QAAQ,CAAE;EAClC,CAAC;CACH,CAAC;AACH;AAEA,eAAe,OAAwB;CACrC,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,OAAO,UAAU,KAAK,OAAO,YAAY,KAAK,OAAO,MAAM;EACvF,UAAU;EACV,OAAO;CACT;CACA,MAAM,OAAO,UAAU,IAAI;CAC3B,IAAI,KAAK,MAAM;EACb,UAAU;EACV,OAAO;CACT;CAEA,IAAI;EACF,IAAI,KAAK,QAAQ,WAAW;GAC1B,IAAI,KAAK,OAAO,QAAQ,IAAI,iBAAiB;GAC7C,MAAM,OAAO,KAAK,QAAQ;GAC1B,MAAM,SAAS,MAAMC,kBAAAA,QAAQ;IAC3B,MAAM,KAAK;IACX;IACA,QAAQ;GACV,CAAC;GACD,IAAI,KAAK,UAAU;IACjB,QAAQ,OAAO,MAAM,gBAAgB,OAAO,YAAY,GAAG;IAC3D,IAAI,SAAS,QACX,QAAQ,OAAO,MAAM,qBAAqB,OAAO,YAAY,GAAG;GAEpE;GACA,IAAI,KAAK,MACP,QAAQ,OAAO,MACb,GAAG,KAAK,UACN;IACE,aAAa,OAAO;IACpB,UAAU,OAAO;IACjB,cAAc,OAAO;IACrB,UAAU,OAAO;IACjB,UAAU,OAAO;IACjB,cAAc,OAAO;IACrB,UAAU,OAAO;IACjB,MAAM,OAAO;IACb,MAAM,OAAO;IACb,MAAM,OAAO;GACf,GACA,MACA,CACF,EAAE,GACJ;QACK,IAAI,CAAC,KAAK,UAAU;IACzB,QAAQ,OAAO,MACb,GAAGD,kBAAAA,SAAS,IAAI,OAAO,aAAa,IAAI,OAAO,SAAS,GAAG,OAAO,aAAa,GAAG,OAAO,KAAK,IAChG;IACA,QAAQ,OAAO,MAAM,GAAG,OAAO,YAAY,GAAG;GAChD;GACA,OAAO;EACT;EAEA,IAAI,KAAK,QAAQ,OAAO;GACtB,IAAI,KAAK,OAAO,QAAQ,IAAI,iBAAiB;GAC7C,MAAM,OAAO,KAAK,QAAQ;GAC1B,MAAM,SAAS,MAAMC,kBAAAA,QAAQ;IAC3B,MAAM,KAAK;IACX;IACA,QAAQ;GACV,CAAC;GACD,MAAM,WAA8B;IAClC,GAAG,QAAQ;IACX,cAAc,OAAO;GACvB;GACA,IAAI,SAAS,QAAQ,SAAS,oBAAoB,OAAO;GACzD,OAAO,MAAM,SAAS,KAAK,SAAS,CAAC,GAAG,QAAQ;EAClD;EAEA,IAAI,KAAK,QAAQ,WAAW;GAC1B,MAAM,OAAO,KAAK,QAAQ;GAC1B,MAAM,SAAS,MAAMC,kBAAAA,QAAQ;IAAE,MAAM,KAAK;IAAM;GAAK,CAAC;GACtD,IAAI,OAAO,SAAS;IAClB,QAAQ,OAAO,MAAM,GAAGF,kBAAAA,SAAS,aAAa,KAAK,IAAI,OAAO,aAAa,IAAI;IAC/E,OAAO;GACT;GACA,IAAI,OAAO,WAAW,YAAY;IAChC,QAAQ,OAAO,MAAM,GAAGA,kBAAAA,SAAS,2BAA2B,KAAK,cAAc;IAC/E,OAAO;GACT;GACA,QAAQ,OAAO,MACb,GAAGA,kBAAAA,SAAS,sBAAsB,KAAK,mDACzC;GACA,OAAO;EACT;EAEA,IAAI,KAAK,QAAQ,MAAM;GACrB,MAAM,SAAS,MAAMG,kBAAAA,GAAG;GACxB,IAAI,KAAK,MACP,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,MAAM,EAAE,GAAG;QAC7C;IACL,QAAQ,OAAO,MAAM,GAAGH,kBAAAA,SAAS,eAAe,OAAO,QAAQ,OAAO,eAAe;IACrF,KAAK,MAAM,QAAQ,OAAO,SAAS,QAAQ,OAAO,MAAM,KAAK,KAAK,GAAG;GACvE;GACA,OAAO;EACT;EAEA,IAAI,KAAK,QAAQ,aAAa;GAC5B,MAAM,OAAO,KAAK,QAAQ;GAE1B,MAAM,QAAQI,cAAAA,UADGC,cAAAA,wBAAwB,KAAK,IACf,CAAC,CAAC,MAAM,IAAI;GAC3C,IAAI,CAAC,OAAO;IACV,QAAQ,OAAO,MACb,GAAGL,kBAAAA,SAAS,OAAO,KAAK,gBAAgBA,kBAAAA,SAAS,kBAAkB,KAAK,WAC1E;IACA,OAAO;GACT;GACA,QAAQ,OAAO,MAAM,GAAGM,kBAAAA,aAAa,KAAK,EAAE,GAAG;GAC/C,OAAO;EACT;EAEA,QAAQ,OAAO,MAAM,GAAGN,kBAAAA,SAAS,oBAAoB,KAAK,IAAI,GAAG;EACjE,UAAU;EACV,OAAO;CACT,SAAS,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;EAC/D,QAAQ,OAAO,MAAM,GAAGA,kBAAAA,SAAS,IAAI,QAAQ,GAAG;EAChD,OAAO;CACT;AACF;AAEA,KAAK,CAAC,CACH,MAAM,SAAS;CACd,QAAQ,KAAK,IAAI;AACnB,CAAC,CAAC,CACD,OAAO,QAAiB;CACvB,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;CAC/D,QAAQ,OAAO,MAAM,GAAGA,kBAAAA,SAAS,IAAI,QAAQ,GAAG;CAChD,QAAQ,KAAK,CAAC;AAChB,CAAC"}