@cedarjs/pg 0.2.0-alpha.0 → 0.2.0-beta.0

package/dist/{lifecycle-BOo6xBjD.mjs → lifecycle-BvIx0xqq.mjs}

@@ -1,6 +1,5 @@
-import { n as PASSWORD_SALT_PREFIX } from "./constants-NLR0U4NR.mjs";
-import { a as leaseDir, f as resolveWorktreeIdentity, i as isOrphanLease, l as readLease, n as envPath, r as forgetLease, s as listRegistryLeases, u as writeLease } from "./lease-BSBBpaR4.mjs";
-import { existsSync, mkdirSync, writeFileSync } from "node:fs";
+import { a as leaseDir, f as resolveWorktreeIdentity, i as isOrphanLease, l as readLease, m as PASSWORD_SALT_PREFIX, n as envPath, r as forgetLease, s as listRegistryLeases, u as writeLease } from "./lease-DS1SX8U_.mjs";
+import { existsSync, mkdirSync, readdirSync, rmSync, statfsSync, writeFileSync } from "node:fs";
 import { homedir, tmpdir } from "node:os";
 import { join } from "node:path";
 import { createHash } from "node:crypto";
@@ -172,7 +171,13 @@ function requireAutopgBin() {
 	return bin;
 }
 /**
-* Parse `autopg status --json` output. Requires a numeric port and running !== false.
+* Parse `autopg status --json` → the **registered** port. Throws only when the
+* output is not autopg status JSON.
+*
+* Registration is not liveness: autopg reports a port for a stopped host too,
+* and its `status` string is supervisor-specific (pm2 `online`, systemd-user /
+* launchd differ). Liveness is a TCP accept on the port, proven by the caller —
+* `acquire` does that before it connects.
 */
 function parseHostStatus(json) {
 	let parsed;
@@ -182,7 +187,6 @@ function parseHostStatus(json) {
 		throw new Error(`autopg status --json returned invalid JSON.\n${INSTALL_HINT}`);
 	}
 	if (typeof parsed.port !== "number") throw new Error(`autopg status --json missing numeric port.\n${INSTALL_HINT}`);
-	if (parsed.running === false) throw new Error(`autopg host is not running.\n${INSTALL_HINT}`);
 	return { port: parsed.port };
 }
 /**
@@ -199,7 +203,9 @@ function adminUrlFor(port, env = process.env) {
 	return `postgresql://${encodeURIComponent(env.AUTOPG_PG_USER || env.PGSERVE_PG_USER || "postgres")}:${encodeURIComponent(env.AUTOPG_PG_PASSWORD || env.PGSERVE_PG_PASSWORD || "postgres")}@127.0.0.1:${port}/postgres`;
 }
 /**
-* Discover a live autopg host via `autopg status --json`. Throws if the host is not proven live.
+* Discover the registered autopg host (port + admin URL) via `autopg status --json`.
+* Throws when autopg cannot be queried; does **not** prove a listener — probe TCP
+* (or use `acquire`, which does) before connecting.
 */
 function discoverHost(bin = requireAutopgBin()) {
 	let status;
@@ -335,29 +341,50 @@ function buildDatabaseUrl(opts) {
 }
 //#endregion
 //#region src/providers/host.ts
-/** Fixed CI TCP port so install registration and postmaster listen on the same port. */
 const EPHEMERAL_PORT = 55432;
-const OWNED_POSTMASTER_READY_MS = 3e4;
-const OWNED_POSTMASTER_POLL_MS = 200;
+const HOST_READY_MS = 3e4;
+const HOST_POLL_MS = 200;
+/**
+* autopg verbs that can bring the *registered* local host up, cheapest fix first.
+*
+* `restart` exit 0 is not evidence of a listener: when pm2 is missing or does not
+* list `autopg-server`, autopg still prints "respawned daemon" and returns 0.
+* That is why every verb is followed by a TCP wait, not trusted on exit status.
+*
+* `install` covers a never-registered machine (postinstall ships the binary only)
+* and a reboot whose pm2 list is empty (`pm2 start`). On an already-registered
+* host it is a no-op for the server process but may `pm2 start` the autopg UI —
+* so it runs only after `restart` failed to produce a listener.
+*/
+const LOCAL_START = [{
+	argv: ["restart"],
+	readyMs: 1e4
+}, {
+	argv: ["install"],
+	readyMs: HOST_READY_MS
+}];
+/** Soft minimum free bytes on /dev/shm before RAM-backed ephemeral start (warns only). */
+const EPHEMERAL_SHM_MIN_FREE_BYTES = 512 * 1024 * 1024;
+/**
+* Hint when ephemeral `--ram` initdb fails for space / leftover dirs under `/dev/shm`.
+* Cloud VMs often ship with a tiny default tmpfs (e.g. 64MB).
+*/
+const EPHEMERAL_SHM_HINT = "Ephemeral autopg uses /dev/shm with --ram. If initdb fails with Disk quota / No space (Postgres 53100):\n  1. Enlarge tmpfs (cloud VMs often default to ~64MB): sudo mount -o remount,size=6G /dev/shm\n  2. Clear leftovers from OOM-killed runs (your test data only):\n     rm -rf /dev/shm/cedar-pg-* /dev/shm/pgserve-* /dev/shm/PostgreSQL.*";
 /**
-* Resolve whether to start an owned ephemeral postmaster or use local pm2 install.
+* Resolve how to start a host when none is listening.
 *
-* - `CEDAR_PG_EPHEMERAL_HOST=1` → ephemeral
-* - `CEDAR_PG_EPHEMERAL_HOST=0` → local (even when `CI=true`)
+* - `CEDAR_PG_EPHEMERAL_HOST=1` → ephemeral owned postmaster
+* - `CEDAR_PG_EPHEMERAL_HOST=0` → never own a postmaster, local autopg only (even in CI)
 * - unset + `CI=true` → ephemeral
 * - otherwise → local
 */
-function resolveEphemeralHostPolicy(env = process.env) {
+function resolveHostStartPolicy(env = process.env) {
 	const force = env.CEDAR_PG_EPHEMERAL_HOST;
 	if (force === "1") return "ephemeral";
 	if (force === "0") return "local";
 	if (env.CI === "true") return "ephemeral";
 	return "local";
 }
-/**
-* Fixed CI recipe: shared `--port` on install + postmaster, `--no-pm2 --no-ui`,
-* and `--ram` + `/dev/shm/cedar-pg-<uid>` on Linux when shm exists.
-*/
 function ephemeralHostRecipe(ctx = {}) {
 	const platform = ctx.platform ?? process.platform;
 	const shmAvailable = ctx.shmAvailable ?? (platform === "linux" && existsSync("/dev/shm"));
@@ -368,15 +395,6 @@ function ephemeralHostRecipe(ctx = {}) {
 	return {
 		dataDir,
 		port,
-		installArgs: [
-			"install",
-			"--no-pm2",
-			"--no-ui",
-			"--port",
-			String(port),
-			"--data",
-			dataDir
-		],
 		postmasterArgs: [
 			"postmaster",
 			...useRam ? ["--ram"] : [],
@@ -389,7 +407,6 @@ function ephemeralHostRecipe(ctx = {}) {
 		]
 	};
 }
-/** Discovery from the recipe port — TCP readiness is the authority, not `autopg status`. */
 function discoveryFromRecipe(bin, recipe) {
 	return {
 		port: recipe.port,
@@ -400,8 +417,57 @@ function discoveryFromRecipe(bin, recipe) {
 function sleep(ms) {
 	return new Promise((resolve) => setTimeout(resolve, ms));
 }
-function runInstall(bin, args) {
-	const install = spawnSync(bin, args, {
+/** True when stderr/stdout looks like a /dev/shm quota or ENOSPC failure. */
+function looksLikeShmSpaceError(text) {
+	return /Disk quota exceeded|No space left on device|ENOSPC|\b53100\b/i.test(text);
+}
+function formatHostStartError(detail, useRamShm = false) {
+	return `Failed to start autopg host.\n${detail}\n${INSTALL_HINT}${useRamShm && looksLikeShmSpaceError(detail) ? `\n${EPHEMERAL_SHM_HINT}` : ""}`;
+}
+/**
+* Remove leftover ephemeral data dirs under `/dev/shm` (and the recipe dataDir).
+* Safe for OOM-killed CI/cloud runs that leave `cedar-pg-*` / `pgserve-*` /
+* `PostgreSQL.*` filling tmpfs.
+*
+* Only called on ephemeral cold start, i.e. when the recipe port has no listener —
+* never while a host owns those dirs.
+*/
+function pruneStaleEphemeralDataDirs(opts) {
+	const removed = [];
+	const tryRm = (path) => {
+		if (!existsSync(path)) return;
+		try {
+			rmSync(path, {
+				recursive: true,
+				force: true
+			});
+			removed.push(path);
+		} catch {}
+	};
+	tryRm(opts.dataDir);
+	const shmRoot = opts.shmRoot ?? (existsSync("/dev/shm") ? "/dev/shm" : void 0);
+	if (!shmRoot) return removed;
+	let entries = [];
+	try {
+		entries = readdirSync(shmRoot);
+	} catch {
+		return removed;
+	}
+	for (const name of entries) if (name.startsWith("cedar-pg-") || name.startsWith("pgserve-") || name.startsWith("PostgreSQL.")) tryRm(join(shmRoot, name));
+	return removed;
+}
+/** Free bytes on `path`, or `null` if unavailable. */
+function freeBytesOn(path) {
+	try {
+		const s = statfsSync(path);
+		return Number(s.bavail) * Number(s.bsize);
+	} catch {
+		return null;
+	}
+}
+/** Run a one-shot autopg verb. Returns failure detail, or `null` on exit 0. */
+function runAutopg(bin, argv) {
+	const result = spawnSync(bin, argv, {
 		encoding: "utf8",
 		stdio: [
 			"ignore",
@@ -409,7 +475,9 @@ function runInstall(bin, args) {
 			"pipe"
 		]
 	});
-	if (install.status !== 0) throw new Error(`Failed to start autopg host (exit ${install.status}).\n${install.stderr || install.stdout || ""}\n${INSTALL_HINT}`);
+	if (result.error) return result.error.message;
+	if (result.status === 0) return null;
+	return `exit ${result.status}\n${(result.stderr || result.stdout || "").trim()}`.trim();
 }
 /** True when something accepts TCP on 127.0.0.1:port (postmaster live, not just admin.json). */
 function canConnect(port) {
@@ -426,7 +494,6 @@ function canConnect(port) {
 		});
 	});
 }
-/** Kill a detached owned postmaster (process group when possible) and drop our handle. */
 function killOwnedChild(child) {
 	const pid = child.pid;
 	if (pid != null) try {
@@ -439,66 +506,101 @@ function killOwnedChild(child) {
 	child.unref();
 }
 /**
-* Poll until TCP accepts on port, or throw on timeout / {@link WaitForOwnedPostmasterOptions.failure}.
-* Exported for tests — the readiness seam for owned ephemeral start.
+* The single liveness primitive: TCP accept on 127.0.0.1:port.
+*
+* Resolves `true` as soon as something is listening, `false` when the grace
+* period expires, and throws only what {@link WaitForListenerOptions.failure}
+* returns. Used for attach (one probe), local restart, and ephemeral start.
 */
-async function waitForOwnedPostmaster(opts) {
+async function waitForListener(opts) {
 	const probe = opts.canConnect ?? canConnect;
 	const now = opts.now ?? Date.now;
 	const pause = opts.sleep ?? sleep;
-	const readyMs = opts.readyMs ?? OWNED_POSTMASTER_READY_MS;
-	const pollMs = opts.pollMs ?? OWNED_POSTMASTER_POLL_MS;
-	const deadline = now() + readyMs;
-	let lastDetail = "TCP not accepting";
-	while (now() < deadline) {
+	const pollMs = opts.pollMs ?? HOST_POLL_MS;
+	const deadline = now() + (opts.readyMs ?? 0);
+	for (;;) {
 		const fail = opts.failure?.();
 		if (fail) throw fail;
-		if (await probe(opts.port)) return;
-		lastDetail = `127.0.0.1:${opts.port} not accepting connections`;
+		if (await probe(opts.port)) return true;
+		if (now() >= deadline) return false;
 		await pause(pollMs);
 	}
-	throw new Error(`Timed out waiting for autopg host after ${readyMs}ms.\n${lastDetail}\n${INSTALL_HINT}`);
 }
 /**
-* Install + detached postmaster with fully ignored stdio so the CI job owns lifetime
-* (caller exit must not close pipes under the daemon).
+* Attach to the registered autopg host once TCP accepts on its port.
+*
+* Registration is not liveness: a stopped pm2 host still reports a port, and
+* attaching to it is the `ECONNREFUSED 127.0.0.1:25432` bug. `readyMs` > 0 is
+* the grace period after asking autopg to start.
+*/
+async function attachLiveHost(bin, readyMs = 0) {
+	let discovered;
+	try {
+		discovered = discoverHost(bin);
+	} catch {
+		return null;
+	}
+	return await waitForListener({
+		port: discovered.port,
+		readyMs
+	}) ? discovered : null;
+}
+/**
+* Bring the user's registered autopg host up and attach to it — same port, same
+* `~/.autopg/data`, still there after this process exits. cedar-pg never runs a
+* second local Postgres.
+*/
+async function startLocalHost(bin, registeredPort) {
+	const failures = [];
+	for (const { argv, readyMs } of LOCAL_START) {
+		const label = `autopg ${argv.join(" ")}`;
+		const failure = runAutopg(bin, [...argv]);
+		if (failure) {
+			failures.push(`${label}: ${failure}`);
+			continue;
+		}
+		const attached = await attachLiveHost(bin, readyMs);
+		if (attached) return attached;
+		failures.push(`${label}: no listener within ${readyMs}ms`);
+	}
+	const where = registeredPort != null ? `autopg host is registered on 127.0.0.1:${registeredPort} but nothing is listening.\n` : "";
+	throw new Error(formatHostStartError(`${where}${failures.join("\n")}`));
+}
+/**
+* Ephemeral host owned by this process/job: detached `autopg postmaster` with
+* fully ignored stdio (caller exit must not close pipes under the daemon).
 *
-* Readiness is TCP accept on the recipe port — not `autopg status`, which succeeds
-* after `install --no-pm2` before postmaster is listening. On success, discovery is
-* recipe-derived (same port). On failure, the spawned child is killed.
+* Never runs `autopg install` — that rewrites `~/.autopg/admin.json` and fails
+* with `supervisor mismatch` next to a local pm2 install. Reuses a listener
+* already on the recipe port, and prunes stale RAM dirs before a cold start.
 */
 async function startEphemeralHost(bin) {
 	const recipe = ephemeralHostRecipe();
+	if (await canConnect(recipe.port)) return discoveryFromRecipe(bin, recipe);
+	const useRamShm = recipe.postmasterArgs.includes("--ram");
+	pruneStaleEphemeralDataDirs({ dataDir: recipe.dataDir });
+	if (useRamShm) {
+		const free = freeBytesOn("/dev/shm");
+		if (free != null && free < 536870912) process.stderr.write(`[cedar-pg] warning: /dev/shm has ~${Math.round(free / (1024 * 1024))}MB free (recommend ≥${Math.round(EPHEMERAL_SHM_MIN_FREE_BYTES / (1024 * 1024))}MB for --ram).\n${EPHEMERAL_SHM_HINT}\n`);
+	}
 	mkdirSync(recipe.dataDir, { recursive: true });
-	runInstall(bin, recipe.installArgs);
-	const state = {
-		exit: null,
-		spawnError: null
-	};
 	const child = spawn(bin, recipe.postmasterArgs, {
 		detached: true,
 		stdio: "ignore"
 	});
+	let died = null;
 	child.on("error", (err) => {
-		state.spawnError = err;
+		died = new Error(formatHostStartError(`Failed to spawn autopg postmaster.\n${err.message}`, useRamShm));
 	});
 	child.on("exit", (code, signal) => {
-		state.exit = {
-			code,
-			signal
-		};
+		died ??= new Error(formatHostStartError(`autopg postmaster exited before ready (code=${code}, signal=${signal}).`, useRamShm));
 	});
 	try {
-		await waitForOwnedPostmaster({
+		if (!await waitForListener({
 			port: recipe.port,
-			failure: () => {
-				if (state.spawnError) return /* @__PURE__ */ new Error(`Failed to spawn autopg postmaster.\n${state.spawnError.message}\n${INSTALL_HINT}`);
-				if (state.exit) return /* @__PURE__ */ new Error(`autopg postmaster exited before ready (code=${state.exit.code}, signal=${state.exit.signal}).\nautopg is required. Install with:
-  curl -fsSL https://raw.githubusercontent.com/automagik-dev/autopg/main/install.sh | bash
-Then ensure ~/.local/bin is on PATH, or set AUTOPG_BIN.`);
-				return null;
-			}
-		});
+			readyMs: HOST_READY_MS,
+			failure: () => died
+		})) throw new Error(formatHostStartError(`autopg postmaster did not accept 127.0.0.1:${recipe.port} within ${HOST_READY_MS}ms.`, useRamShm));
 	} catch (err) {
 		killOwnedChild(child);
 		throw err;
@@ -507,21 +609,16 @@ Then ensure ~/.local/bin is on PATH, or set AUTOPG_BIN.`);
 	return discoveryFromRecipe(bin, recipe);
 }
 /**
-* Ensure the host postmaster is up.
-*
-* - Attaches when `autopg status --json` shows a live host.
-* - Otherwise starts from {@link resolveEphemeralHostPolicy}: local pm2 `install`,
-*   or opinionated ephemeral (`--no-pm2 --no-ui` + detached postmaster).
-* - CI job owns ephemeral postmaster lifetime on success (no cedar-pg host dispose).
-* - Failed ephemeral start kills the spawned child so ensure is atomic for the caller.
+* Attach to a listening autopg host, else start one per
+* {@link resolveHostStartPolicy}. Internal: callers use `acquire` / `adminUrl`.
 */
 async function ensureHostRunning(bin = requireAutopgBin()) {
+	let registered = null;
 	try {
-		return discoverHost(bin);
+		registered = discoverHost(bin);
 	} catch {}
-	if (resolveEphemeralHostPolicy() === "ephemeral") return startEphemeralHost(bin);
-	runInstall(bin, ["install"]);
-	return discoverHost(bin);
+	if (registered && await waitForListener({ port: registered.port })) return registered;
+	return resolveHostStartPolicy() === "ephemeral" ? startEphemeralHost(bin) : startLocalHost(bin, registered?.port);
 }
 //#endregion
 //#region src/core/lifecycle.ts
@@ -681,4 +778,4 @@ async function gc() {
 //#endregion
 export { buildCloneDatabaseName as C, runIfNeeded as S, buildRoleName as T, setDatabaseIsTemplate as _, urlFromLease as a, isExternalDatabaseEscapeHatch as b, ROLE_PASSWORD_SCHEME as c, discoverHost as d, dropDatabase as f, rolePasswordFor as g, resolveAutopgBin as h, gc as i, buildDatabaseUrl as l, requireAutopgBin as m, acquireIfNeeded as n, ensureHostRunning as o, parseHostStatus as p, dispose as r, INSTALL_HINT as s, acquire as t, cloneDatabaseFromTemplate as u, applyDatabaseUrlEnv as v, buildDatabaseName as w, resolveAcquireSkip as x, isCedarPgManagedUrl as y };
 
-//# sourceMappingURL=lifecycle-BOo6xBjD.mjs.map
+//# sourceMappingURL=lifecycle-BvIx0xqq.mjs.map

package/dist/lifecycle-BvIx0xqq.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle-BvIx0xqq.mjs","names":[],"sources":["../src/core/naming.ts","../src/core/policy.ts","../src/providers/autopg.ts","../src/providers/host.ts","../src/core/lifecycle.ts"],"sourcesContent":["import type { WorktreeIdentity } from \"./worktree.ts\";\n\nexport type DbMode = \"dev\" | \"test\";\n\nconst PG_MAX = 63;\nconst PREFIX = \"cpg_\";\n\n/**\n * Build an observable Postgres database name:\n *   cpg_<repoSlug>_<worktreeSlug>_<mode>_<pathHash8>\n *\n * Never drops `mode` or `pathHash`. Truncates slugs to fit ≤63 chars.\n */\nexport function buildDatabaseName(identity: WorktreeIdentity, mode: DbMode): string {\n  const modePart = mode;\n  const hashPart = identity.pathHash;\n  // PREFIX + slug + '_' + slug + '_' + mode + '_' + hash\n  // fixed: PREFIX(4) + 2 underscores around mode/hash segments + mode + hash\n  // layout: cpg_<repo>_<wt>_<mode>_<hash>\n  const fixed =\n    PREFIX.length +\n    1 + // after repo\n    1 + // after worktree\n    modePart.length +\n    1 +\n    hashPart.length;\n\n  let budget = PG_MAX - fixed;\n  if (budget < 2) {\n    // Extreme truncation: keep mode+hash, minimal slugs\n    return `${PREFIX}${modePart}_${hashPart}`.slice(0, PG_MAX);\n  }\n\n  let repo = identity.repoSlug;\n  let wt = identity.worktreeSlug;\n  // Split budget roughly evenly, preferring to keep both readable\n  while (repo.length + wt.length > budget) {\n    if (repo.length >= wt.length && repo.length > 1) {\n      repo = repo.slice(0, -1);\n    } else if (wt.length > 1) {\n      wt = wt.slice(0, -1);\n    } else {\n      break;\n    }\n  }\n\n  const name = `${PREFIX}${repo}_${wt}_${modePart}_${hashPart}`;\n  if (name.length > PG_MAX) {\n    return name.slice(0, PG_MAX);\n  }\n  return name;\n}\n\nexport function buildRoleName(databaseName: string): string {\n  const suffix = \"_role\";\n  const maxBase = PG_MAX - suffix.length;\n  const base = databaseName.slice(0, maxBase);\n  return `${base}${suffix}`;\n}\n\n/**\n * Build a worker clone datname from a TEMPLATE database name.\n * Layout: `<template>_c_<suffix>` truncated to ≤63 chars (keeps suffix).\n */\nexport function buildCloneDatabaseName(templateName: string, suffix: string): string {\n  const safe = suffix\n    .toLowerCase()\n    .replace(/[^a-z0-9_]+/g, \"_\")\n    .replace(/^_+|_+$/g, \"\")\n    .slice(0, 24);\n  const tag = safe.length > 0 ? safe : \"w\";\n  const sep = \"_c_\";\n  const maxTemplate = PG_MAX - sep.length - tag.length;\n  const base = templateName.slice(0, Math.max(1, maxTemplate));\n  return `${base}${sep}${tag}`.slice(0, PG_MAX);\n}\n","/**\n * Shared acquire skip policy for test-runner adapters and Cedar CLI bridges.\n */\n\nexport type AcquireSkip =\n  | { skip: false }\n  | { skip: true; reason: \"disabled\" }\n  | { skip: true; reason: \"external-url\"; databaseUrl: string };\n\nexport type ResolveAcquireSkipInput = {\n  /** Candidate URL (TEST_DATABASE_URL for tests, DATABASE_URL for dev). */\n  url?: string;\n  /** When true, never skip (CEDAR_PG_FORCE=1). */\n  force?: boolean;\n  /**\n   * When true, skip acquire entirely.\n   * Defaults from CEDAR_PG=0|false (opt-out adapters). Pass `false` for Cedar opt-in flows.\n   */\n  disabled?: boolean;\n};\n\n/**\n * Inject DATABASE_URL (and TEST_DATABASE_URL for test mode) from a resolved URL.\n * Single env path for acquire, clone, and external-url skip.\n */\nexport function applyDatabaseUrlEnv(\n  databaseUrl: string,\n  options: { mode?: \"dev\" | \"test\" } = {},\n): void {\n  process.env.DATABASE_URL = databaseUrl;\n  if ((options.mode ?? \"test\") === \"test\") {\n    process.env.TEST_DATABASE_URL = databaseUrl;\n  }\n}\n\nexport type RunIfNeededOptions = ResolveAcquireSkipInput & {\n  mode: \"dev\" | \"test\";\n  /** Default true (same as acquire / clone host wrappers). */\n  setEnv?: boolean;\n};\n\nexport type RunIfNeededSkipped =\n  | { status: \"skipped\"; reason: \"disabled\" }\n  | { status: \"skipped\"; reason: \"external-url\"; databaseUrl: string };\n\nexport type RunIfNeededResult<T> = RunIfNeededSkipped | { status: \"ran\"; value: T };\n\n/**\n * Shared host skip+env gate for `acquireIfNeeded` / `cloneFromTemplateIfNeeded`.\n * On external-url skip, applies env when `setEnv` is not false.\n */\nexport async function runIfNeeded<T>(\n  options: RunIfNeededOptions,\n  run: () => Promise<T>,\n): Promise<RunIfNeededResult<T>> {\n  const skip = resolveAcquireSkip({\n    url: options.url,\n    force: options.force,\n    disabled: options.disabled,\n  });\n  if (skip.skip) {\n    if (skip.reason === \"external-url\") {\n      if (options.setEnv !== false) {\n        applyDatabaseUrlEnv(skip.databaseUrl, { mode: options.mode });\n      }\n      return { status: \"skipped\", reason: \"external-url\", databaseUrl: skip.databaseUrl };\n    }\n    return { status: \"skipped\", reason: \"disabled\" };\n  }\n  return { status: \"ran\", value: await run() };\n}\n\n/**\n * True when the URL looks like a cedarpg provisioned database (`cpg_*` name/role).\n * These must never be treated as an external escape hatch; always re-acquire so\n * disposed/stale shell env cannot skip provisioning.\n */\nexport function isCedarPgManagedUrl(url: string | undefined): boolean {\n  if (!url || url.startsWith(\"file:\")) return false;\n  try {\n    const parsed = new URL(url);\n    const databaseName = decodeURIComponent(\n      (parsed.pathname.replace(/^\\//, \"\").split(\"?\")[0] ?? \"\").trim(),\n    );\n    const user = decodeURIComponent(parsed.username);\n    return databaseName.startsWith(\"cpg_\") || user.startsWith(\"cpg_\");\n  } catch {\n    return false;\n  }\n}\n\n/**\n * True when `url` still looks like an unset dotenv/template value\n * (e.g. `postgresql://{yourMachine}@localhost:5432/app_test` or\n * `postgresql://<user>@localhost/db`), not a real external database.\n */\nfunction isUnsetTemplateUrl(url: string): boolean {\n  // `{yourMachine}`, `{user}`, etc.\n  if (/\\{[^}]+\\}/.test(url)) return true;\n  // `<user>`, `<password>` style templates\n  if (/<[^>]+>/.test(url)) return true;\n  return false;\n}\n\n/**\n * True when `url` is a real external database and acquire should be skipped.\n * Sqlite `file:` URLs, cedarpg `cpg_*` URLs, and unset template placeholders\n * are not external.\n */\nexport function isExternalDatabaseEscapeHatch(url: string | undefined): boolean {\n  if (!url) return false;\n  if (url.startsWith(\"file:\")) return false;\n  if (isCedarPgManagedUrl(url)) return false;\n  if (isUnsetTemplateUrl(url)) return false;\n  return true;\n}\n\n/**\n * Decide whether acquire should run.\n * Adapters may call with no args (env defaults). Cedar opt-in should pass `disabled: false`\n * and the relevant `url` (`DATABASE_URL` or `TEST_DATABASE_URL`).\n */\nexport function resolveAcquireSkip(input: ResolveAcquireSkipInput = {}): AcquireSkip {\n  const disabled =\n    input.disabled ?? (process.env.CEDAR_PG === \"0\" || process.env.CEDAR_PG === \"false\");\n  if (disabled) {\n    return { skip: true, reason: \"disabled\" };\n  }\n\n  const force = input.force ?? process.env.CEDAR_PG_FORCE === \"1\";\n  if (force) {\n    return { skip: false };\n  }\n\n  const url = input.url !== undefined ? input.url : process.env.TEST_DATABASE_URL;\n  if (url && isExternalDatabaseEscapeHatch(url)) {\n    return { skip: true, reason: \"external-url\", databaseUrl: url };\n  }\n  return { skip: false };\n}\n","import { createHash } from \"node:crypto\";\nimport { execFileSync, spawnSync } from \"node:child_process\";\nimport { existsSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport pg from \"pg\";\nimport { PASSWORD_SALT_PREFIX } from \"../core/constants.ts\";\n\nexport type AutopgDiscovery = {\n  port: number;\n  adminUrl: string;\n  bin: string;\n};\n\nexport const INSTALL_HINT =\n  \"autopg is required. Install with:\\n\" +\n  \"  curl -fsSL https://raw.githubusercontent.com/automagik-dev/autopg/main/install.sh | bash\\n\" +\n  \"Then ensure ~/.local/bin is on PATH, or set AUTOPG_BIN.\";\n\n/** Password scheme v2: sha256(PASSWORD_SALT_PREFIX + \"\\\\0\" + roleName) hex[:32]. Frozen for URL rebuild. */\nexport const ROLE_PASSWORD_SCHEME = \"v2\" as const;\n\nfunction candidateBins(): string[] {\n  const out: string[] = [];\n  if (process.env.AUTOPG_BIN) out.push(process.env.AUTOPG_BIN);\n  out.push(\"autopg\");\n  out.push(join(homedir(), \".local\", \"bin\", \"autopg\"));\n  return out;\n}\n\nexport function resolveAutopgBin(): string | null {\n  for (const bin of candidateBins()) {\n    if (bin === \"autopg\") {\n      const which = spawnSync(\"which\", [\"autopg\"], { encoding: \"utf8\" });\n      if (which.status === 0 && which.stdout.trim()) return which.stdout.trim();\n      continue;\n    }\n    if (existsSync(bin)) return bin;\n  }\n  return null;\n}\n\nexport function requireAutopgBin(): string {\n  const bin = resolveAutopgBin();\n  if (!bin) {\n    throw new Error(INSTALL_HINT);\n  }\n  return bin;\n}\n\n/**\n * Parse `autopg status --json` → the **registered** port. Throws only when the\n * output is not autopg status JSON.\n *\n * Registration is not liveness: autopg reports a port for a stopped host too,\n * and its `status` string is supervisor-specific (pm2 `online`, systemd-user /\n * launchd differ). Liveness is a TCP accept on the port, proven by the caller —\n * `acquire` does that before it connects.\n */\nexport function parseHostStatus(json: string): { port: number } {\n  let parsed: { port?: unknown };\n  try {\n    parsed = JSON.parse(json) as typeof parsed;\n  } catch {\n    throw new Error(`autopg status --json returned invalid JSON.\\n${INSTALL_HINT}`);\n  }\n  if (typeof parsed.port !== \"number\") {\n    throw new Error(`autopg status --json missing numeric port.\\n${INSTALL_HINT}`);\n  }\n  return { port: parsed.port };\n}\n\n/**\n * Admin URL for an autopg host on `port`.\n *\n * Credentials follow autopg's own defaults / env chain (not \"any local Postgres\"):\n * - user: `AUTOPG_PG_USER` / `PGSERVE_PG_USER` / `postgres`\n * - password: `AUTOPG_PG_PASSWORD` / `PGSERVE_PG_PASSWORD` / `postgres`\n *\n * Port is never scanned: callers pass the port from `autopg status` (attach) or the\n * ephemeral recipe (`55432`). That keeps us off unrelated local servers (e.g. brew on 5432).\n */\nexport function adminUrlFor(port: number, env: NodeJS.ProcessEnv = process.env): string {\n  const user = encodeURIComponent(env.AUTOPG_PG_USER || env.PGSERVE_PG_USER || \"postgres\");\n  const password = encodeURIComponent(\n    env.AUTOPG_PG_PASSWORD || env.PGSERVE_PG_PASSWORD || \"postgres\",\n  );\n  return `postgresql://${user}:${password}@127.0.0.1:${port}/postgres`;\n}\n\n/**\n * Discover the registered autopg host (port + admin URL) via `autopg status --json`.\n * Throws when autopg cannot be queried; does **not** prove a listener — probe TCP\n * (or use `acquire`, which does) before connecting.\n */\nexport function discoverHost(bin = requireAutopgBin()): AutopgDiscovery {\n  let status: string;\n  try {\n    status = execFileSync(bin, [\"status\", \"--json\"], {\n      encoding: \"utf8\",\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    });\n  } catch (err) {\n    const detail = err instanceof Error ? err.message : String(err);\n    throw new Error(`Failed to query autopg status.\\n${detail}\\n${INSTALL_HINT}`);\n  }\n  const { port } = parseHostStatus(status);\n  return { port, adminUrl: adminUrlFor(port), bin };\n}\n\nfunction quoteIdent(name: string): string {\n  return `\"${name.replace(/\"/g, '\"\"')}\"`;\n}\n\nfunction quoteLiteral(value: string): string {\n  return `'${value.replace(/'/g, \"''\")}'`;\n}\n\nasync function withAdminClient<T>(\n  adminUrl: string,\n  fn: (client: pg.Client) => Promise<T>,\n): Promise<T> {\n  const client = new pg.Client({ connectionString: adminUrl });\n  await client.connect();\n  try {\n    return await fn(client);\n  } finally {\n    await client.end();\n  }\n}\n\n/**\n * Deterministic local-only password for an app role (Prisma/TCP need it;\n * autopg hba uses `password` for 127.0.0.1).\n *\n * Keyed by `roleName` (not databaseName) so TEMPLATE clones that reuse the\n * same role keep working when `buildDatabaseUrl` is called with a new database.\n */\nexport function rolePasswordFor(roleName: string): string {\n  return createHash(\"sha256\")\n    .update(`${PASSWORD_SALT_PREFIX}\\0${roleName}`)\n    .digest(\"hex\")\n    .slice(0, 32);\n}\n\n/**\n * Idempotently CREATE ROLE + CREATE DATABASE with cedar-pg owned names.\n */\nexport async function ensureDatabase(opts: {\n  adminUrl: string;\n  databaseName: string;\n  roleName: string;\n  password?: string;\n}): Promise<void> {\n  const password = opts.password ?? rolePasswordFor(opts.roleName);\n  await withAdminClient(opts.adminUrl, async (client) => {\n    const roleExists = await client.query(\"SELECT 1 FROM pg_roles WHERE rolname = $1\", [\n      opts.roleName,\n    ]);\n    if (roleExists.rowCount === 0) {\n      await client.query(\n        `CREATE ROLE ${quoteIdent(opts.roleName)} WITH LOGIN PASSWORD ${quoteLiteral(password)}`,\n      );\n    } else {\n      await client.query(\n        `ALTER ROLE ${quoteIdent(opts.roleName)} WITH LOGIN PASSWORD ${quoteLiteral(password)}`,\n      );\n    }\n\n    const dbExists = await client.query(\"SELECT 1 FROM pg_database WHERE datname = $1\", [\n      opts.databaseName,\n    ]);\n    if (dbExists.rowCount === 0) {\n      await client.query(\n        `CREATE DATABASE ${quoteIdent(opts.databaseName)} OWNER ${quoteIdent(opts.roleName)}`,\n      );\n    } else {\n      await client.query(\n        `ALTER DATABASE ${quoteIdent(opts.databaseName)} OWNER TO ${quoteIdent(opts.roleName)}`,\n      );\n    }\n  });\n}\n\n/**\n * Mark (or unmark) a database as a PostgreSQL template (`IS_TEMPLATE`).\n * Template DBs cannot be dropped until unset.\n */\nexport async function setDatabaseIsTemplate(opts: {\n  adminUrl: string;\n  databaseName: string;\n  isTemplate: boolean;\n}): Promise<void> {\n  const flag = opts.isTemplate ? \"true\" : \"false\";\n  await withAdminClient(opts.adminUrl, async (client) => {\n    await client.query(`ALTER DATABASE ${quoteIdent(opts.databaseName)} WITH IS_TEMPLATE ${flag}`);\n  });\n}\n\n/**\n * CREATE DATABASE … TEMPLATE … OWNER via admin connection.\n * Test roles are LOGIN-only; workers cannot CREATE DATABASE themselves.\n */\nexport async function cloneDatabaseFromTemplate(opts: {\n  adminUrl: string;\n  templateName: string;\n  databaseName: string;\n  roleName: string;\n}): Promise<void> {\n  await withAdminClient(opts.adminUrl, async (client) => {\n    const tmpl = await client.query<{ datistemplate: boolean }>(\n      `SELECT datistemplate FROM pg_database WHERE datname = $1`,\n      [opts.templateName],\n    );\n    if (!tmpl.rowCount) {\n      throw new Error(`template database not found: ${opts.templateName}`);\n    }\n    if (!tmpl.rows[0]?.datistemplate) {\n      throw new Error(`database is not a TEMPLATE; run markTemplate first: ${opts.templateName}`);\n    }\n\n    const exists = await client.query(\"SELECT 1 FROM pg_database WHERE datname = $1\", [\n      opts.databaseName,\n    ]);\n    if (exists.rowCount && exists.rowCount > 0) {\n      throw new Error(`database already exists: ${opts.databaseName}`);\n    }\n    await client.query(\n      `CREATE DATABASE ${quoteIdent(opts.databaseName)} WITH TEMPLATE ${quoteIdent(opts.templateName)} OWNER ${quoteIdent(opts.roleName)}`,\n    );\n  });\n}\n\nasync function listOwnedDatnames(client: pg.Client, roleName: string): Promise<string[]> {\n  const result = await client.query<{ datname: string }>(\n    `SELECT datname FROM pg_database\n     WHERE datdba = (SELECT oid FROM pg_roles WHERE rolname = $1)\n     ORDER BY datname`,\n    [roleName],\n  );\n  return result.rows.map((r) => r.datname);\n}\n\n/** Unset IS_TEMPLATE if needed, terminate backends, DROP DATABASE (no-op if missing). */\nasync function dropOneDatabase(client: pg.Client, databaseName: string): Promise<void> {\n  const db = await client.query<{ datistemplate: boolean }>(\n    `SELECT datistemplate FROM pg_database WHERE datname = $1`,\n    [databaseName],\n  );\n  if (!db.rowCount || db.rowCount === 0) return;\n  if (db.rows[0]?.datistemplate) {\n    await client.query(`ALTER DATABASE ${quoteIdent(databaseName)} WITH IS_TEMPLATE false`);\n  }\n  await client.query(\n    `\n    SELECT pg_terminate_backend(pid)\n    FROM pg_stat_activity\n    WHERE datname = $1 AND pid <> pg_backend_pid()\n    `,\n    [databaseName],\n  );\n  await client.query(`DROP DATABASE IF EXISTS ${quoteIdent(databaseName)}`);\n}\n\n/**\n * DROP every database owned by `roleName` on one admin connection, then DROP ROLE.\n * When `preferLast` is owned, it is dropped after the other owned datnames (TEMPLATE after clones).\n * Never invents a DROP target beyond role ownership.\n */\nexport async function dropDatabasesOwnedByRole(opts: {\n  adminUrl: string;\n  roleName: string;\n  preferLast?: string;\n}): Promise<string[]> {\n  return withAdminClient(opts.adminUrl, async (client) => {\n    const owned = await listOwnedDatnames(client, opts.roleName);\n    const ordered = [\n      ...owned.filter((name) => name !== opts.preferLast),\n      ...owned.filter((name) => name === opts.preferLast),\n    ];\n    const dropped: string[] = [];\n    for (const databaseName of ordered) {\n      await dropOneDatabase(client, databaseName);\n      dropped.push(databaseName);\n    }\n    await client.query(`DROP ROLE IF EXISTS ${quoteIdent(opts.roleName)}`);\n    return dropped;\n  });\n}\n\n/**\n * DROP DATABASE (unset IS_TEMPLATE, force terminate backends) + DROP ROLE\n * when the role owns no remaining databases.\n */\nexport async function dropDatabase(opts: {\n  adminUrl: string;\n  databaseName: string;\n  roleName: string;\n}): Promise<void> {\n  await withAdminClient(opts.adminUrl, async (client) => {\n    await dropOneDatabase(client, opts.databaseName);\n    const owns = await client.query(\n      `SELECT 1 FROM pg_database WHERE datdba = (SELECT oid FROM pg_roles WHERE rolname = $1) LIMIT 1`,\n      [opts.roleName],\n    );\n    if (owns.rowCount === 0) {\n      await client.query(`DROP ROLE IF EXISTS ${quoteIdent(opts.roleName)}`);\n    }\n  });\n}\n\nexport function buildDatabaseUrl(opts: {\n  port: number;\n  databaseName: string;\n  roleName: string;\n  password?: string;\n}): string {\n  const password = opts.password ?? rolePasswordFor(opts.roleName);\n  const user = encodeURIComponent(opts.roleName);\n  const pass = encodeURIComponent(password);\n  return `postgresql://${user}:${pass}@127.0.0.1:${opts.port}/${opts.databaseName}`;\n}\n","import { spawn, spawnSync, type ChildProcess } from \"node:child_process\";\nimport { existsSync, mkdirSync, readdirSync, rmSync, statfsSync } from \"node:fs\";\nimport { createConnection } from \"node:net\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport {\n  adminUrlFor,\n  discoverHost,\n  INSTALL_HINT,\n  requireAutopgBin,\n  type AutopgDiscovery,\n} from \"./autopg.ts\";\n\n/** How cedar-pg brings up an autopg host when nothing is listening. */\nexport type HostStartPolicy = \"local\" | \"ephemeral\";\n\nexport type EphemeralHostRecipe = {\n  dataDir: string;\n  port: number;\n  postmasterArgs: string[];\n};\n\n/** Inputs for {@link ephemeralHostRecipe} (production uses process defaults). */\nexport type EphemeralRecipeContext = {\n  platform?: NodeJS.Platform;\n  shmAvailable?: boolean;\n  tmpDir?: string;\n  uid?: number;\n  port?: number;\n};\n\nconst EPHEMERAL_PORT = 55432;\n\nconst HOST_READY_MS = 30_000;\nconst HOST_POLL_MS = 200;\n/** `pm2 restart` of an existing process is quick; 30s is only for first `install` / initdb. */\nconst LOCAL_RESTART_READY_MS = 10_000;\n\n/**\n * autopg verbs that can bring the *registered* local host up, cheapest fix first.\n *\n * `restart` exit 0 is not evidence of a listener: when pm2 is missing or does not\n * list `autopg-server`, autopg still prints \"respawned daemon\" and returns 0.\n * That is why every verb is followed by a TCP wait, not trusted on exit status.\n *\n * `install` covers a never-registered machine (postinstall ships the binary only)\n * and a reboot whose pm2 list is empty (`pm2 start`). On an already-registered\n * host it is a no-op for the server process but may `pm2 start` the autopg UI —\n * so it runs only after `restart` failed to produce a listener.\n */\nconst LOCAL_START = [\n  { argv: [\"restart\"], readyMs: LOCAL_RESTART_READY_MS },\n  { argv: [\"install\"], readyMs: HOST_READY_MS },\n] as const;\n\n/** Soft minimum free bytes on /dev/shm before RAM-backed ephemeral start (warns only). */\nexport const EPHEMERAL_SHM_MIN_FREE_BYTES = 512 * 1024 * 1024;\n\n/**\n * Hint when ephemeral `--ram` initdb fails for space / leftover dirs under `/dev/shm`.\n * Cloud VMs often ship with a tiny default tmpfs (e.g. 64MB).\n */\nexport const EPHEMERAL_SHM_HINT =\n  \"Ephemeral autopg uses /dev/shm with --ram. If initdb fails with Disk quota / No space (Postgres 53100):\\n\" +\n  \"  1. Enlarge tmpfs (cloud VMs often default to ~64MB): sudo mount -o remount,size=6G /dev/shm\\n\" +\n  \"  2. Clear leftovers from OOM-killed runs (your test data only):\\n\" +\n  \"     rm -rf /dev/shm/cedar-pg-* /dev/shm/pgserve-* /dev/shm/PostgreSQL.*\";\n\n/**\n * Resolve how to start a host when none is listening.\n *\n * - `CEDAR_PG_EPHEMERAL_HOST=1` → ephemeral owned postmaster\n * - `CEDAR_PG_EPHEMERAL_HOST=0` → never own a postmaster, local autopg only (even in CI)\n * - unset + `CI=true` → ephemeral\n * - otherwise → local\n */\nexport function resolveHostStartPolicy(env: NodeJS.ProcessEnv = process.env): HostStartPolicy {\n  const force = env.CEDAR_PG_EPHEMERAL_HOST;\n  if (force === \"1\") return \"ephemeral\";\n  if (force === \"0\") return \"local\";\n  if (env.CI === \"true\") return \"ephemeral\";\n  return \"local\";\n}\n\nexport function ephemeralHostRecipe(ctx: EphemeralRecipeContext = {}): EphemeralHostRecipe {\n  const platform = ctx.platform ?? process.platform;\n  const shmAvailable = ctx.shmAvailable ?? (platform === \"linux\" && existsSync(\"/dev/shm\"));\n  const uid = ctx.uid ?? process.getuid?.() ?? 0;\n  const port = ctx.port ?? EPHEMERAL_PORT;\n  const useRam = platform === \"linux\" && shmAvailable;\n  const dataDir = useRam\n    ? `/dev/shm/cedar-pg-${uid}`\n    : join(ctx.tmpDir ?? tmpdir(), \"cedar-pg-host\");\n\n  const postmasterArgs = [\n    \"postmaster\",\n    ...(useRam ? [\"--ram\"] : []),\n    \"--port\",\n    String(port),\n    \"--socket-dir\",\n    dataDir,\n    \"--data\",\n    dataDir,\n  ];\n\n  return { dataDir, port, postmasterArgs };\n}\n\nexport function discoveryFromRecipe(bin: string, recipe: EphemeralHostRecipe): AutopgDiscovery {\n  return { port: recipe.port, adminUrl: adminUrlFor(recipe.port), bin };\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/** True when stderr/stdout looks like a /dev/shm quota or ENOSPC failure. */\nexport function looksLikeShmSpaceError(text: string): boolean {\n  return /Disk quota exceeded|No space left on device|ENOSPC|\\b53100\\b/i.test(text);\n}\n\nexport function formatHostStartError(detail: string, useRamShm = false): string {\n  const hint = useRamShm && looksLikeShmSpaceError(detail) ? `\\n${EPHEMERAL_SHM_HINT}` : \"\";\n  return `Failed to start autopg host.\\n${detail}\\n${INSTALL_HINT}${hint}`;\n}\n\n/**\n * Remove leftover ephemeral data dirs under `/dev/shm` (and the recipe dataDir).\n * Safe for OOM-killed CI/cloud runs that leave `cedar-pg-*` / `pgserve-*` /\n * `PostgreSQL.*` filling tmpfs.\n *\n * Only called on ephemeral cold start, i.e. when the recipe port has no listener —\n * never while a host owns those dirs.\n */\nexport function pruneStaleEphemeralDataDirs(opts: {\n  dataDir: string;\n  /** Parent of RAM dirs; default `/dev/shm` when it exists. */\n  shmRoot?: string;\n}): string[] {\n  const removed: string[] = [];\n  const tryRm = (path: string) => {\n    if (!existsSync(path)) return;\n    try {\n      rmSync(path, { recursive: true, force: true });\n      removed.push(path);\n    } catch {\n      // best-effort: next initdb will surface a clearer error\n    }\n  };\n\n  tryRm(opts.dataDir);\n\n  const shmRoot = opts.shmRoot ?? (existsSync(\"/dev/shm\") ? \"/dev/shm\" : undefined);\n  if (!shmRoot) return removed;\n\n  let entries: string[] = [];\n  try {\n    entries = readdirSync(shmRoot);\n  } catch {\n    return removed;\n  }\n\n  for (const name of entries) {\n    if (\n      name.startsWith(\"cedar-pg-\") ||\n      name.startsWith(\"pgserve-\") ||\n      name.startsWith(\"PostgreSQL.\")\n    ) {\n      tryRm(join(shmRoot, name));\n    }\n  }\n  return removed;\n}\n\n/** Free bytes on `path`, or `null` if unavailable. */\nfunction freeBytesOn(path: string): number | null {\n  try {\n    const s = statfsSync(path);\n    return Number(s.bavail) * Number(s.bsize);\n  } catch {\n    return null;\n  }\n}\n\n/** Run a one-shot autopg verb. Returns failure detail, or `null` on exit 0. */\nfunction runAutopg(bin: string, argv: string[]): string | null {\n  const result = spawnSync(bin, argv, {\n    encoding: \"utf8\",\n    stdio: [\"ignore\", \"pipe\", \"pipe\"],\n  });\n  if (result.error) return result.error.message;\n  if (result.status === 0) return null;\n  return `exit ${result.status}\\n${(result.stderr || result.stdout || \"\").trim()}`.trim();\n}\n\n/** True when something accepts TCP on 127.0.0.1:port (postmaster live, not just admin.json). */\nfunction canConnect(port: number): Promise<boolean> {\n  return new Promise((resolve) => {\n    const socket = createConnection({ host: \"127.0.0.1\", port }, () => {\n      socket.end();\n      resolve(true);\n    });\n    socket.on(\"error\", () => {\n      resolve(false);\n    });\n  });\n}\n\nfunction killOwnedChild(child: ChildProcess): void {\n  const pid = child.pid;\n  if (pid != null) {\n    try {\n      process.kill(-pid, \"SIGTERM\");\n    } catch {\n      try {\n        child.kill(\"SIGTERM\");\n      } catch {\n        // already exited\n      }\n    }\n  }\n  child.unref();\n}\n\nexport type WaitForListenerOptions = {\n  port: number;\n  /** Total grace period; `0` (default) probes exactly once. */\n  readyMs?: number;\n  pollMs?: number;\n  canConnect?: (port: number) => Promise<boolean>;\n  now?: () => number;\n  sleep?: (ms: number) => Promise<void>;\n  /** Return an Error to abort early (spawn error / child exit). */\n  failure?: () => Error | null;\n};\n\n/**\n * The single liveness primitive: TCP accept on 127.0.0.1:port.\n *\n * Resolves `true` as soon as something is listening, `false` when the grace\n * period expires, and throws only what {@link WaitForListenerOptions.failure}\n * returns. Used for attach (one probe), local restart, and ephemeral start.\n */\nexport async function waitForListener(opts: WaitForListenerOptions): Promise<boolean> {\n  const probe = opts.canConnect ?? canConnect;\n  const now = opts.now ?? Date.now;\n  const pause = opts.sleep ?? sleep;\n  const pollMs = opts.pollMs ?? HOST_POLL_MS;\n  const deadline = now() + (opts.readyMs ?? 0);\n\n  for (;;) {\n    const fail = opts.failure?.();\n    if (fail) throw fail;\n    if (await probe(opts.port)) return true;\n    if (now() >= deadline) return false;\n    await pause(pollMs);\n  }\n}\n\n/**\n * Attach to the registered autopg host once TCP accepts on its port.\n *\n * Registration is not liveness: a stopped pm2 host still reports a port, and\n * attaching to it is the `ECONNREFUSED 127.0.0.1:25432` bug. `readyMs` > 0 is\n * the grace period after asking autopg to start.\n */\nasync function attachLiveHost(bin: string, readyMs = 0): Promise<AutopgDiscovery | null> {\n  let discovered: AutopgDiscovery;\n  try {\n    discovered = discoverHost(bin);\n  } catch {\n    return null;\n  }\n  return (await waitForListener({ port: discovered.port, readyMs })) ? discovered : null;\n}\n\n/**\n * Bring the user's registered autopg host up and attach to it — same port, same\n * `~/.autopg/data`, still there after this process exits. cedar-pg never runs a\n * second local Postgres.\n */\nasync function startLocalHost(bin: string, registeredPort?: number): Promise<AutopgDiscovery> {\n  const failures: string[] = [];\n\n  for (const { argv, readyMs } of LOCAL_START) {\n    const label = `autopg ${argv.join(\" \")}`;\n    const failure = runAutopg(bin, [...argv]);\n    if (failure) {\n      failures.push(`${label}: ${failure}`);\n      continue;\n    }\n    const attached = await attachLiveHost(bin, readyMs);\n    if (attached) return attached;\n    failures.push(`${label}: no listener within ${readyMs}ms`);\n  }\n\n  const where =\n    registeredPort != null\n      ? `autopg host is registered on 127.0.0.1:${registeredPort} but nothing is listening.\\n`\n      : \"\";\n  throw new Error(formatHostStartError(`${where}${failures.join(\"\\n\")}`));\n}\n\n/**\n * Ephemeral host owned by this process/job: detached `autopg postmaster` with\n * fully ignored stdio (caller exit must not close pipes under the daemon).\n *\n * Never runs `autopg install` — that rewrites `~/.autopg/admin.json` and fails\n * with `supervisor mismatch` next to a local pm2 install. Reuses a listener\n * already on the recipe port, and prunes stale RAM dirs before a cold start.\n */\nasync function startEphemeralHost(bin: string): Promise<AutopgDiscovery> {\n  const recipe = ephemeralHostRecipe();\n  if (await canConnect(recipe.port)) return discoveryFromRecipe(bin, recipe);\n\n  const useRamShm = recipe.postmasterArgs.includes(\"--ram\");\n  pruneStaleEphemeralDataDirs({ dataDir: recipe.dataDir });\n\n  if (useRamShm) {\n    const free = freeBytesOn(\"/dev/shm\");\n    if (free != null && free < EPHEMERAL_SHM_MIN_FREE_BYTES) {\n      process.stderr.write(\n        `[cedar-pg] warning: /dev/shm has ~${Math.round(free / (1024 * 1024))}MB free ` +\n          `(recommend ≥${Math.round(EPHEMERAL_SHM_MIN_FREE_BYTES / (1024 * 1024))}MB for --ram).\\n` +\n          `${EPHEMERAL_SHM_HINT}\\n`,\n      );\n    }\n  }\n\n  mkdirSync(recipe.dataDir, { recursive: true });\n\n  const child = spawn(bin, recipe.postmasterArgs, { detached: true, stdio: \"ignore\" });\n  let died: Error | null = null;\n  child.on(\"error\", (err) => {\n    died = new Error(\n      formatHostStartError(`Failed to spawn autopg postmaster.\\n${err.message}`, useRamShm),\n    );\n  });\n  child.on(\"exit\", (code, signal) => {\n    died ??= new Error(\n      formatHostStartError(\n        `autopg postmaster exited before ready (code=${code}, signal=${signal}).`,\n        useRamShm,\n      ),\n    );\n  });\n\n  try {\n    const listening = await waitForListener({\n      port: recipe.port,\n      readyMs: HOST_READY_MS,\n      failure: () => died,\n    });\n    if (!listening) {\n      throw new Error(\n        formatHostStartError(\n          `autopg postmaster did not accept 127.0.0.1:${recipe.port} within ${HOST_READY_MS}ms.`,\n          useRamShm,\n        ),\n      );\n    }\n  } catch (err) {\n    killOwnedChild(child);\n    throw err;\n  }\n\n  // Success: the process/job owns lifetime — drop our handle without killing.\n  child.unref();\n  return discoveryFromRecipe(bin, recipe);\n}\n\n/**\n * Attach to a listening autopg host, else start one per\n * {@link resolveHostStartPolicy}. Internal: callers use `acquire` / `adminUrl`.\n */\nexport async function ensureHostRunning(bin = requireAutopgBin()): Promise<AutopgDiscovery> {\n  let registered: AutopgDiscovery | null = null;\n  try {\n    registered = discoverHost(bin);\n  } catch {\n    // no registration — local recovery may `install`\n  }\n  if (registered && (await waitForListener({ port: registered.port }))) return registered;\n\n  return resolveHostStartPolicy() === \"ephemeral\"\n    ? startEphemeralHost(bin)\n    : startLocalHost(bin, registered?.port);\n}\n","import { mkdirSync, writeFileSync } from \"node:fs\";\nimport { buildDatabaseName, buildRoleName, type DbMode } from \"./naming.ts\";\nimport {\n  envPath,\n  forgetLease,\n  isOrphanLease,\n  leaseDir,\n  listRegistryLeases,\n  readLease,\n  writeLease,\n  type Lease,\n} from \"./lease.ts\";\nimport { applyDatabaseUrlEnv, runIfNeeded, type ResolveAcquireSkipInput } from \"./policy.ts\";\nimport { resolveWorktreeIdentity } from \"./worktree.ts\";\nimport { buildDatabaseUrl, dropDatabasesOwnedByRole, ensureDatabase } from \"../providers/autopg.ts\";\nimport { ensureHostRunning } from \"../providers/host.ts\";\n\nfunction writeEnvFile(root: string, mode: DbMode, databaseUrl: string): void {\n  mkdirSync(leaseDir(root), { recursive: true, mode: 0o700 });\n  let body = `DATABASE_URL=${databaseUrl}\\n`;\n  if (mode === \"test\") body += `TEST_DATABASE_URL=${databaseUrl}\\n`;\n  writeFileSync(envPath(root, mode), body, { mode: 0o600 });\n}\n\nexport function urlFromLease(lease: Lease): string {\n  return buildDatabaseUrl({\n    port: lease.port,\n    databaseName: lease.databaseName,\n    roleName: lease.roleName,\n  });\n}\n\n/**\n * DROP every DB owned by the lease role (TEMPLATE + clones), then forget lease.\n * Provider owns ordering (clones before leased datname) on one admin connection.\n */\nasync function dropThenForget(lease: Lease, adminUrl: string): Promise<string[]> {\n  const dropped = await dropDatabasesOwnedByRole({\n    adminUrl,\n    roleName: lease.roleName,\n    preferLast: lease.databaseName,\n  });\n  forgetLease(lease);\n  return dropped;\n}\n\nexport type AcquireOptions = {\n  root?: string;\n  mode: DbMode;\n  /** Inject DATABASE_URL / TEST_DATABASE_URL into process.env (default true). */\n  setEnv?: boolean;\n};\n\nexport type AcquireResult = {\n  databaseUrl: string;\n  /** Superuser URL for privileged DDL (mark template, CREATE DATABASE … TEMPLATE). */\n  adminUrl: string;\n  databaseName: string;\n  roleName: string;\n  repoSlug: string;\n  worktreeSlug: string;\n  pathHash: string;\n  root: string;\n  mode: DbMode;\n  port: number;\n  dispose: () => Promise<void>;\n};\n\n/**\n * Acquire a worktree-scoped database and return connection info.\n *\n * - `dev`: keep DB across restarts.\n * - `test`: DROP when `dispose()` is awaited (callers / test runners own teardown).\n */\nexport async function acquire(options: AcquireOptions): Promise<AcquireResult> {\n  const identity = resolveWorktreeIdentity(options.root);\n  const mode = options.mode;\n  const databaseName = buildDatabaseName(identity, mode);\n  const roleName = buildRoleName(databaseName);\n\n  const host = await ensureHostRunning();\n  await ensureDatabase({\n    adminUrl: host.adminUrl,\n    databaseName,\n    roleName,\n  });\n\n  const databaseUrl = buildDatabaseUrl({\n    port: host.port,\n    databaseName,\n    roleName,\n  });\n\n  const lease: Lease = {\n    schemaVersion: 1,\n    mode,\n    root: identity.root,\n    repoSlug: identity.repoSlug,\n    worktreeSlug: identity.worktreeSlug,\n    pathHash: identity.pathHash,\n    databaseName,\n    roleName,\n    port: host.port,\n    pid: process.pid,\n    createdAt: new Date().toISOString(),\n  };\n  writeLease(lease);\n  writeEnvFile(identity.root, mode, databaseUrl);\n\n  if (options.setEnv !== false) {\n    applyDatabaseUrlEnv(databaseUrl, { mode });\n  }\n\n  const disposeFn = async () => {\n    await dispose({ root: identity.root, mode });\n  };\n\n  return {\n    databaseUrl,\n    adminUrl: host.adminUrl,\n    databaseName,\n    roleName,\n    repoSlug: identity.repoSlug,\n    worktreeSlug: identity.worktreeSlug,\n    pathHash: identity.pathHash,\n    root: identity.root,\n    mode,\n    port: host.port,\n    dispose: disposeFn,\n  };\n}\n\nexport type AcquireIfNeededOptions = AcquireOptions & ResolveAcquireSkipInput;\n\nexport type AcquireIfNeededResult =\n  | { status: \"skipped\"; reason: \"disabled\" }\n  | { status: \"skipped\"; reason: \"external-url\"; databaseUrl: string }\n  | ({ status: \"acquired\" } & AcquireResult);\n\n/**\n * Resolve skip policy then acquire. Single entry for hosts (Cedar CLI, Jest, Vitest).\n * On external-url skip, applies DATABASE_URL / TEST_DATABASE_URL when `setEnv` is not false.\n */\nexport async function acquireIfNeeded(\n  options: AcquireIfNeededOptions,\n): Promise<AcquireIfNeededResult> {\n  const outcome = await runIfNeeded(options, () =>\n    acquire({\n      root: options.root,\n      mode: options.mode,\n      setEnv: options.setEnv,\n    }),\n  );\n  if (outcome.status === \"skipped\") return outcome;\n  return { status: \"acquired\", ...outcome.value };\n}\n\nexport type DisposeOptions = {\n  root?: string;\n  mode?: DbMode;\n};\n\nexport type DisposeResult =\n  | { dropped: true; databaseName: string; droppedDatabases: string[] }\n  | { dropped: false; reason: \"no-lease\" | \"host-unavailable\" };\n\n/**\n * Role-scoped suite teardown: DROP every database owned by the lease role\n * (TEMPLATE + clones), then DROP ROLE and forget the lease. Unsets `IS_TEMPLATE`\n * as needed. This is not per-clone cleanup — use `CloneResult.dropClone` for that.\n * No-ops without a valid lease; never invents a DROP target beyond role ownership.\n * If the host is unavailable, leaves the lease so dispose/gc can retry.\n */\nexport async function dispose(options: DisposeOptions = {}): Promise<DisposeResult> {\n  const identity = resolveWorktreeIdentity(options.root);\n  const mode = options.mode ?? \"test\";\n  const lease = readLease(identity.root, mode);\n  if (!lease) return { dropped: false, reason: \"no-lease\" };\n\n  let host;\n  try {\n    host = await ensureHostRunning();\n  } catch {\n    // Keep lease + registry so a later dispose/gc can still find the DB.\n    return { dropped: false, reason: \"host-unavailable\" };\n  }\n\n  const droppedDatabases = await dropThenForget(lease, host.adminUrl);\n  return {\n    dropped: true,\n    databaseName: lease.databaseName,\n    droppedDatabases,\n  };\n}\n\n/**\n * Drop databases whose registered worktree root no longer exists on disk.\n * Registry entries are removed only after a successful DROP (owned DBs + lease DB).\n */\nexport async function gc(): Promise<{\n  dropped: string[];\n}> {\n  const dropped: string[] = [];\n  const orphans = listRegistryLeases().filter(isOrphanLease);\n  if (orphans.length === 0) return { dropped };\n\n  let host;\n  try {\n    host = await ensureHostRunning();\n  } catch {\n    return { dropped };\n  }\n\n  for (const lease of orphans) {\n    try {\n      const names = await dropThenForget(lease, host.adminUrl);\n      dropped.push(...names);\n    } catch {\n      // Keep registry entry for retry\n    }\n  }\n  return { dropped };\n}\n"],"mappings":";;;;;;;;;AAIA,MAAM,SAAS;AACf,MAAM,SAAS;;;;;;;AAQf,SAAgB,kBAAkB,UAA4B,MAAsB;CAClF,MAAM,WAAW;CACjB,MAAM,WAAW,SAAS;CAI1B,MAAM,QACJ,IAGA,SAAS,SACT,IACA,SAAS;CAEX,IAAI,SAAS,SAAS;CACtB,IAAI,SAAS,GAEX,OAAO,GAAG,SAAS,SAAS,GAAG,WAAW,MAAM,GAAG,MAAM;CAG3D,IAAI,OAAO,SAAS;CACpB,IAAI,KAAK,SAAS;CAElB,OAAO,KAAK,SAAS,GAAG,SAAS,QAC/B,IAAI,KAAK,UAAU,GAAG,UAAU,KAAK,SAAS,GAC5C,OAAO,KAAK,MAAM,GAAG,EAAE;MAClB,IAAI,GAAG,SAAS,GACrB,KAAK,GAAG,MAAM,GAAG,EAAE;MAEnB;CAIJ,MAAM,OAAO,GAAG,SAAS,KAAK,GAAG,GAAG,GAAG,SAAS,GAAG;CACnD,IAAI,KAAK,SAAS,QAChB,OAAO,KAAK,MAAM,GAAG,MAAM;CAE7B,OAAO;AACT;AAEA,SAAgB,cAAc,cAA8B;CAC1D,MAAM,SAAS;CACf,MAAM,UAAU,SAAS;CAEzB,OAAO,GADM,aAAa,MAAM,GAAG,OACtB,IAAI;AACnB;;;;;AAMA,SAAgB,uBAAuB,cAAsB,QAAwB;CACnF,MAAM,OAAO,OACV,YAAY,CAAC,CACb,QAAQ,gBAAgB,GAAG,CAAC,CAC5B,QAAQ,YAAY,EAAE,CAAC,CACvB,MAAM,GAAG,EAAE;CACd,MAAM,MAAM,KAAK,SAAS,IAAI,OAAO;CACrC,MAAM,MAAM;CACZ,MAAM,cAAc,SAAS,IAAa,IAAI;CAE9C,OAAO,GADM,aAAa,MAAM,GAAG,KAAK,IAAI,GAAG,WAAW,CAC7C,IAAI,MAAM,MAAM,MAAM,GAAG,MAAM;AAC9C;;;;;;;AClDA,SAAgB,oBACd,aACA,UAAqC,CAAC,GAChC;CACN,QAAQ,IAAI,eAAe;CAC3B,KAAK,QAAQ,QAAQ,YAAY,QAC/B,QAAQ,IAAI,oBAAoB;AAEpC;;;;;AAkBA,eAAsB,YACpB,SACA,KAC+B;CAC/B,MAAM,OAAO,mBAAmB;EAC9B,KAAK,QAAQ;EACb,OAAO,QAAQ;EACf,UAAU,QAAQ;CACpB,CAAC;CACD,IAAI,KAAK,MAAM;EACb,IAAI,KAAK,WAAW,gBAAgB;GAClC,IAAI,QAAQ,WAAW,OACrB,oBAAoB,KAAK,aAAa,EAAE,MAAM,QAAQ,KAAK,CAAC;GAE9D,OAAO;IAAE,QAAQ;IAAW,QAAQ;IAAgB,aAAa,KAAK;GAAY;EACpF;EACA,OAAO;GAAE,QAAQ;GAAW,QAAQ;EAAW;CACjD;CACA,OAAO;EAAE,QAAQ;EAAO,OAAO,MAAM,IAAI;CAAE;AAC7C;;;;;;AAOA,SAAgB,oBAAoB,KAAkC;CACpE,IAAI,CAAC,OAAO,IAAI,WAAW,OAAO,GAAG,OAAO;CAC5C,IAAI;EACF,MAAM,SAAS,IAAI,IAAI,GAAG;EAC1B,MAAM,eAAe,oBAClB,OAAO,SAAS,QAAQ,OAAO,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAA,CAAI,KAAK,CAChE;EACA,MAAM,OAAO,mBAAmB,OAAO,QAAQ;EAC/C,OAAO,aAAa,WAAW,MAAM,KAAK,KAAK,WAAW,MAAM;CAClE,QAAQ;EACN,OAAO;CACT;AACF;;;;;;AAOA,SAAS,mBAAmB,KAAsB;CAEhD,IAAI,YAAY,KAAK,GAAG,GAAG,OAAO;CAElC,IAAI,UAAU,KAAK,GAAG,GAAG,OAAO;CAChC,OAAO;AACT;;;;;;AAOA,SAAgB,8BAA8B,KAAkC;CAC9E,IAAI,CAAC,KAAK,OAAO;CACjB,IAAI,IAAI,WAAW,OAAO,GAAG,OAAO;CACpC,IAAI,oBAAoB,GAAG,GAAG,OAAO;CACrC,IAAI,mBAAmB,GAAG,GAAG,OAAO;CACpC,OAAO;AACT;;;;;;AAOA,SAAgB,mBAAmB,QAAiC,CAAC,GAAgB;CAGnF,IADE,MAAM,aAAa,QAAQ,IAAI,aAAa,OAAO,QAAQ,IAAI,aAAa,UAE5E,OAAO;EAAE,MAAM;EAAM,QAAQ;CAAW;CAI1C,IADc,MAAM,SAAS,QAAQ,IAAI,mBAAmB,KAE1D,OAAO,EAAE,MAAM,MAAM;CAGvB,MAAM,MAAM,MAAM,QAAQ,KAAA,IAAY,MAAM,MAAM,QAAQ,IAAI;CAC9D,IAAI,OAAO,8BAA8B,GAAG,GAC1C,OAAO;EAAE,MAAM;EAAM,QAAQ;EAAgB,aAAa;CAAI;CAEhE,OAAO,EAAE,MAAM,MAAM;AACvB;;;AC7HA,MAAa,eACX;;AAKF,MAAa,uBAAuB;AAEpC,SAAS,gBAA0B;CACjC,MAAM,MAAgB,CAAC;CACvB,IAAI,QAAQ,IAAI,YAAY,IAAI,KAAK,QAAQ,IAAI,UAAU;CAC3D,IAAI,KAAK,QAAQ;CACjB,IAAI,KAAK,KAAK,QAAQ,GAAG,UAAU,OAAO,QAAQ,CAAC;CACnD,OAAO;AACT;AAEA,SAAgB,mBAAkC;CAChD,KAAK,MAAM,OAAO,cAAc,GAAG;EACjC,IAAI,QAAQ,UAAU;GACpB,MAAM,QAAQ,UAAU,SAAS,CAAC,QAAQ,GAAG,EAAE,UAAU,OAAO,CAAC;GACjE,IAAI,MAAM,WAAW,KAAK,MAAM,OAAO,KAAK,GAAG,OAAO,MAAM,OAAO,KAAK;GACxE;EACF;EACA,IAAI,WAAW,GAAG,GAAG,OAAO;CAC9B;CACA,OAAO;AACT;AAEA,SAAgB,mBAA2B;CACzC,MAAM,MAAM,iBAAiB;CAC7B,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,YAAY;CAE9B,OAAO;AACT;;;;;;;;;;AAWA,SAAgB,gBAAgB,MAAgC;CAC9D,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,IAAI;CAC1B,QAAQ;EACN,MAAM,IAAI,MAAM,gDAAgD,cAAc;CAChF;CACA,IAAI,OAAO,OAAO,SAAS,UACzB,MAAM,IAAI,MAAM,+CAA+C,cAAc;CAE/E,OAAO,EAAE,MAAM,OAAO,KAAK;AAC7B;;;;;;;;;;;AAYA,SAAgB,YAAY,MAAc,MAAyB,QAAQ,KAAa;CAKtF,OAAO,gBAJM,mBAAmB,IAAI,kBAAkB,IAAI,mBAAmB,UAInD,EAAE,GAHX,mBACf,IAAI,sBAAsB,IAAI,uBAAuB,UAEjB,EAAE,aAAa,KAAK;AAC5D;;;;;;AAOA,SAAgB,aAAa,MAAM,iBAAiB,GAAoB;CACtE,IAAI;CACJ,IAAI;EACF,SAAS,aAAa,KAAK,CAAC,UAAU,QAAQ,GAAG;GAC/C,UAAU;GACV,OAAO;IAAC;IAAU;IAAQ;GAAM;EAClC,CAAC;CACH,SAAS,KAAK;EACZ,MAAM,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;EAC9D,MAAM,IAAI,MAAM,mCAAmC,OAAO,IAAI,cAAc;CAC9E;CACA,MAAM,EAAE,SAAS,gBAAgB,MAAM;CACvC,OAAO;EAAE;EAAM,UAAU,YAAY,IAAI;EAAG;CAAI;AAClD;AAEA,SAAS,WAAW,MAAsB;CACxC,OAAO,IAAI,KAAK,QAAQ,MAAM,MAAI,EAAE;AACtC;AAEA,SAAS,aAAa,OAAuB;CAC3C,OAAO,IAAI,MAAM,QAAQ,MAAM,IAAI,EAAE;AACvC;AAEA,eAAe,gBACb,UACA,IACY;CACZ,MAAM,SAAS,IAAI,GAAG,OAAO,EAAE,kBAAkB,SAAS,CAAC;CAC3D,MAAM,OAAO,QAAQ;CACrB,IAAI;EACF,OAAO,MAAM,GAAG,MAAM;CACxB,UAAU;EACR,MAAM,OAAO,IAAI;CACnB;AACF;;;;;;;;AASA,SAAgB,gBAAgB,UAA0B;CACxD,OAAO,WAAW,QAAQ,CAAC,CACxB,OAAO,GAAG,qBAAqB,IAAI,UAAU,CAAC,CAC9C,OAAO,KAAK,CAAC,CACb,MAAM,GAAG,EAAE;AAChB;;;;AAKA,eAAsB,eAAe,MAKnB;CAChB,MAAM,WAAW,KAAK,YAAY,gBAAgB,KAAK,QAAQ;CAC/D,MAAM,gBAAgB,KAAK,UAAU,OAAO,WAAW;EAIrD,KAAI,MAHqB,OAAO,MAAM,6CAA6C,CACjF,KAAK,QACP,CAAC,EAAA,CACc,aAAa,GAC1B,MAAM,OAAO,MACX,eAAe,WAAW,KAAK,QAAQ,EAAE,uBAAuB,aAAa,QAAQ,GACvF;OAEA,MAAM,OAAO,MACX,cAAc,WAAW,KAAK,QAAQ,EAAE,uBAAuB,aAAa,QAAQ,GACtF;EAMF,KAAI,MAHmB,OAAO,MAAM,gDAAgD,CAClF,KAAK,YACP,CAAC,EAAA,CACY,aAAa,GACxB,MAAM,OAAO,MACX,mBAAmB,WAAW,KAAK,YAAY,EAAE,SAAS,WAAW,KAAK,QAAQ,GACpF;OAEA,MAAM,OAAO,MACX,kBAAkB,WAAW,KAAK,YAAY,EAAE,YAAY,WAAW,KAAK,QAAQ,GACtF;CAEJ,CAAC;AACH;;;;;AAMA,eAAsB,sBAAsB,MAI1B;CAChB,MAAM,OAAO,KAAK,aAAa,SAAS;CACxC,MAAM,gBAAgB,KAAK,UAAU,OAAO,WAAW;EACrD,MAAM,OAAO,MAAM,kBAAkB,WAAW,KAAK,YAAY,EAAE,oBAAoB,MAAM;CAC/F,CAAC;AACH;;;;;AAMA,eAAsB,0BAA0B,MAK9B;CAChB,MAAM,gBAAgB,KAAK,UAAU,OAAO,WAAW;EACrD,MAAM,OAAO,MAAM,OAAO,MACxB,4DACA,CAAC,KAAK,YAAY,CACpB;EACA,IAAI,CAAC,KAAK,UACR,MAAM,IAAI,MAAM,gCAAgC,KAAK,cAAc;EAErE,IAAI,CAAC,KAAK,KAAK,EAAE,EAAE,eACjB,MAAM,IAAI,MAAM,uDAAuD,KAAK,cAAc;EAG5F,MAAM,SAAS,MAAM,OAAO,MAAM,gDAAgD,CAChF,KAAK,YACP,CAAC;EACD,IAAI,OAAO,YAAY,OAAO,WAAW,GACvC,MAAM,IAAI,MAAM,4BAA4B,KAAK,cAAc;EAEjE,MAAM,OAAO,MACX,mBAAmB,WAAW,KAAK,YAAY,EAAE,iBAAiB,WAAW,KAAK,YAAY,EAAE,SAAS,WAAW,KAAK,QAAQ,GACnI;CACF,CAAC;AACH;AAEA,eAAe,kBAAkB,QAAmB,UAAqC;CAOvF,QAAO,MANc,OAAO,MAC1B;;wBAGA,CAAC,QAAQ,CACX,EAAA,CACc,KAAK,KAAK,MAAM,EAAE,OAAO;AACzC;;AAGA,eAAe,gBAAgB,QAAmB,cAAqC;CACrF,MAAM,KAAK,MAAM,OAAO,MACtB,4DACA,CAAC,YAAY,CACf;CACA,IAAI,CAAC,GAAG,YAAY,GAAG,aAAa,GAAG;CACvC,IAAI,GAAG,KAAK,EAAE,EAAE,eACd,MAAM,OAAO,MAAM,kBAAkB,WAAW,YAAY,EAAE,wBAAwB;CAExF,MAAM,OAAO,MACX;;;;OAKA,CAAC,YAAY,CACf;CACA,MAAM,OAAO,MAAM,2BAA2B,WAAW,YAAY,GAAG;AAC1E;;;;;;AAOA,eAAsB,yBAAyB,MAIzB;CACpB,OAAO,gBAAgB,KAAK,UAAU,OAAO,WAAW;EACtD,MAAM,QAAQ,MAAM,kBAAkB,QAAQ,KAAK,QAAQ;EAC3D,MAAM,UAAU,CACd,GAAG,MAAM,QAAQ,SAAS,SAAS,KAAK,UAAU,GAClD,GAAG,MAAM,QAAQ,SAAS,SAAS,KAAK,UAAU,CACpD;EACA,MAAM,UAAoB,CAAC;EAC3B,KAAK,MAAM,gBAAgB,SAAS;GAClC,MAAM,gBAAgB,QAAQ,YAAY;GAC1C,QAAQ,KAAK,YAAY;EAC3B;EACA,MAAM,OAAO,MAAM,uBAAuB,WAAW,KAAK,QAAQ,GAAG;EACrE,OAAO;CACT,CAAC;AACH;;;;;AAMA,eAAsB,aAAa,MAIjB;CAChB,MAAM,gBAAgB,KAAK,UAAU,OAAO,WAAW;EACrD,MAAM,gBAAgB,QAAQ,KAAK,YAAY;EAK/C,KAAI,MAJe,OAAO,MACxB,kGACA,CAAC,KAAK,QAAQ,CAChB,EAAA,CACS,aAAa,GACpB,MAAM,OAAO,MAAM,uBAAuB,WAAW,KAAK,QAAQ,GAAG;CAEzE,CAAC;AACH;AAEA,SAAgB,iBAAiB,MAKtB;CACT,MAAM,WAAW,KAAK,YAAY,gBAAgB,KAAK,QAAQ;CAG/D,OAAO,gBAFM,mBAAmB,KAAK,QAEX,EAAE,GADf,mBAAmB,QACE,EAAE,aAAa,KAAK,KAAK,GAAG,KAAK;AACrE;;;AClSA,MAAM,iBAAiB;AAEvB,MAAM,gBAAgB;AACtB,MAAM,eAAe;;;;;;;;;;;;;AAgBrB,MAAM,cAAc,CAClB;CAAE,MAAM,CAAC,SAAS;CAAG,SAAS;AAAuB,GACrD;CAAE,MAAM,CAAC,SAAS;CAAG,SAAS;AAAc,CAC9C;;AAGA,MAAa,+BAA+B,MAAM,OAAO;;;;;AAMzD,MAAa,qBACX;;;;;;;;;AAaF,SAAgB,uBAAuB,MAAyB,QAAQ,KAAsB;CAC5F,MAAM,QAAQ,IAAI;CAClB,IAAI,UAAU,KAAK,OAAO;CAC1B,IAAI,UAAU,KAAK,OAAO;CAC1B,IAAI,IAAI,OAAO,QAAQ,OAAO;CAC9B,OAAO;AACT;AAEA,SAAgB,oBAAoB,MAA8B,CAAC,GAAwB;CACzF,MAAM,WAAW,IAAI,YAAY,QAAQ;CACzC,MAAM,eAAe,IAAI,iBAAiB,aAAa,WAAW,WAAW,UAAU;CACvF,MAAM,MAAM,IAAI,OAAO,QAAQ,SAAS,KAAK;CAC7C,MAAM,OAAO,IAAI,QAAQ;CACzB,MAAM,SAAS,aAAa,WAAW;CACvC,MAAM,UAAU,SACZ,qBAAqB,QACrB,KAAK,IAAI,UAAU,OAAO,GAAG,eAAe;CAahD,OAAO;EAAE;EAAS;EAAM,gBAAA;GAVtB;GACA,GAAI,SAAS,CAAC,OAAO,IAAI,CAAC;GAC1B;GACA,OAAO,IAAI;GACX;GACA;GACA;GACA;EAGmC;CAAE;AACzC;AAEA,SAAgB,oBAAoB,KAAa,QAA8C;CAC7F,OAAO;EAAE,MAAM,OAAO;EAAM,UAAU,YAAY,OAAO,IAAI;EAAG;CAAI;AACtE;AAEA,SAAS,MAAM,IAA2B;CACxC,OAAO,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;AACzD;;AAGA,SAAgB,uBAAuB,MAAuB;CAC5D,OAAO,gEAAgE,KAAK,IAAI;AAClF;AAEA,SAAgB,qBAAqB,QAAgB,YAAY,OAAe;CAE9E,OAAO,iCAAiC,OAAO,IAAI,eADtC,aAAa,uBAAuB,MAAM,IAAI,KAAK,uBAAuB;AAEzF;;;;;;;;;AAUA,SAAgB,4BAA4B,MAI/B;CACX,MAAM,UAAoB,CAAC;CAC3B,MAAM,SAAS,SAAiB;EAC9B,IAAI,CAAC,WAAW,IAAI,GAAG;EACvB,IAAI;GACF,OAAO,MAAM;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC;GAC7C,QAAQ,KAAK,IAAI;EACnB,QAAQ,CAER;CACF;CAEA,MAAM,KAAK,OAAO;CAElB,MAAM,UAAU,KAAK,YAAY,WAAW,UAAU,IAAI,aAAa,KAAA;CACvE,IAAI,CAAC,SAAS,OAAO;CAErB,IAAI,UAAoB,CAAC;CACzB,IAAI;EACF,UAAU,YAAY,OAAO;CAC/B,QAAQ;EACN,OAAO;CACT;CAEA,KAAK,MAAM,QAAQ,SACjB,IACE,KAAK,WAAW,WAAW,KAC3B,KAAK,WAAW,UAAU,KAC1B,KAAK,WAAW,aAAa,GAE7B,MAAM,KAAK,SAAS,IAAI,CAAC;CAG7B,OAAO;AACT;;AAGA,SAAS,YAAY,MAA6B;CAChD,IAAI;EACF,MAAM,IAAI,WAAW,IAAI;EACzB,OAAO,OAAO,EAAE,MAAM,IAAI,OAAO,EAAE,KAAK;CAC1C,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAS,UAAU,KAAa,MAA+B;CAC7D,MAAM,SAAS,UAAU,KAAK,MAAM;EAClC,UAAU;EACV,OAAO;GAAC;GAAU;GAAQ;EAAM;CAClC,CAAC;CACD,IAAI,OAAO,OAAO,OAAO,OAAO,MAAM;CACtC,IAAI,OAAO,WAAW,GAAG,OAAO;CAChC,OAAO,QAAQ,OAAO,OAAO,KAAK,OAAO,UAAU,OAAO,UAAU,GAAA,CAAI,KAAK,IAAI,KAAK;AACxF;;AAGA,SAAS,WAAW,MAAgC;CAClD,OAAO,IAAI,SAAS,YAAY;EAC9B,MAAM,SAAS,iBAAiB;GAAE,MAAM;GAAa;EAAK,SAAS;GACjE,OAAO,IAAI;GACX,QAAQ,IAAI;EACd,CAAC;EACD,OAAO,GAAG,eAAe;GACvB,QAAQ,KAAK;EACf,CAAC;CACH,CAAC;AACH;AAEA,SAAS,eAAe,OAA2B;CACjD,MAAM,MAAM,MAAM;CAClB,IAAI,OAAO,MACT,IAAI;EACF,QAAQ,KAAK,CAAC,KAAK,SAAS;CAC9B,QAAQ;EACN,IAAI;GACF,MAAM,KAAK,SAAS;EACtB,QAAQ,CAER;CACF;CAEF,MAAM,MAAM;AACd;;;;;;;;AAqBA,eAAsB,gBAAgB,MAAgD;CACpF,MAAM,QAAQ,KAAK,cAAc;CACjC,MAAM,MAAM,KAAK,OAAO,KAAK;CAC7B,MAAM,QAAQ,KAAK,SAAS;CAC5B,MAAM,SAAS,KAAK,UAAU;CAC9B,MAAM,WAAW,IAAI,KAAK,KAAK,WAAW;CAE1C,SAAS;EACP,MAAM,OAAO,KAAK,UAAU;EAC5B,IAAI,MAAM,MAAM;EAChB,IAAI,MAAM,MAAM,KAAK,IAAI,GAAG,OAAO;EACnC,IAAI,IAAI,KAAK,UAAU,OAAO;EAC9B,MAAM,MAAM,MAAM;CACpB;AACF;;;;;;;;AASA,eAAe,eAAe,KAAa,UAAU,GAAoC;CACvF,IAAI;CACJ,IAAI;EACF,aAAa,aAAa,GAAG;CAC/B,QAAQ;EACN,OAAO;CACT;CACA,OAAQ,MAAM,gBAAgB;EAAE,MAAM,WAAW;EAAM;CAAQ,CAAC,IAAK,aAAa;AACpF;;;;;;AAOA,eAAe,eAAe,KAAa,gBAAmD;CAC5F,MAAM,WAAqB,CAAC;CAE5B,KAAK,MAAM,EAAE,MAAM,aAAa,aAAa;EAC3C,MAAM,QAAQ,UAAU,KAAK,KAAK,GAAG;EACrC,MAAM,UAAU,UAAU,KAAK,CAAC,GAAG,IAAI,CAAC;EACxC,IAAI,SAAS;GACX,SAAS,KAAK,GAAG,MAAM,IAAI,SAAS;GACpC;EACF;EACA,MAAM,WAAW,MAAM,eAAe,KAAK,OAAO;EAClD,IAAI,UAAU,OAAO;EACrB,SAAS,KAAK,GAAG,MAAM,uBAAuB,QAAQ,GAAG;CAC3D;CAEA,MAAM,QACJ,kBAAkB,OACd,0CAA0C,eAAe,gCACzD;CACN,MAAM,IAAI,MAAM,qBAAqB,GAAG,QAAQ,SAAS,KAAK,IAAI,GAAG,CAAC;AACxE;;;;;;;;;AAUA,eAAe,mBAAmB,KAAuC;CACvE,MAAM,SAAS,oBAAoB;CACnC,IAAI,MAAM,WAAW,OAAO,IAAI,GAAG,OAAO,oBAAoB,KAAK,MAAM;CAEzE,MAAM,YAAY,OAAO,eAAe,SAAS,OAAO;CACxD,4BAA4B,EAAE,SAAS,OAAO,QAAQ,CAAC;CAEvD,IAAI,WAAW;EACb,MAAM,OAAO,YAAY,UAAU;EACnC,IAAI,QAAQ,QAAQ,OAAA,WAClB,QAAQ,OAAO,MACb,qCAAqC,KAAK,MAAM,QAAQ,OAAO,KAAK,EAAE,sBACrD,KAAK,MAAM,gCAAgC,OAAO,KAAK,EAAE,kBACrE,mBAAmB,GAC1B;CAEJ;CAEA,UAAU,OAAO,SAAS,EAAE,WAAW,KAAK,CAAC;CAE7C,MAAM,QAAQ,MAAM,KAAK,OAAO,gBAAgB;EAAE,UAAU;EAAM,OAAO;CAAS,CAAC;CACnF,IAAI,OAAqB;CACzB,MAAM,GAAG,UAAU,QAAQ;EACzB,OAAO,IAAI,MACT,qBAAqB,uCAAuC,IAAI,WAAW,SAAS,CACtF;CACF,CAAC;CACD,MAAM,GAAG,SAAS,MAAM,WAAW;EACjC,SAAS,IAAI,MACX,qBACE,+CAA+C,KAAK,WAAW,OAAO,KACtE,SACF,CACF;CACF,CAAC;CAED,IAAI;EAMF,IAAI,CAAC,MALmB,gBAAgB;GACtC,MAAM,OAAO;GACb,SAAS;GACT,eAAe;EACjB,CAAC,GAEC,MAAM,IAAI,MACR,qBACE,8CAA8C,OAAO,KAAK,UAAU,cAAc,MAClF,SACF,CACF;CAEJ,SAAS,KAAK;EACZ,eAAe,KAAK;EACpB,MAAM;CACR;CAGA,MAAM,MAAM;CACZ,OAAO,oBAAoB,KAAK,MAAM;AACxC;;;;;AAMA,eAAsB,kBAAkB,MAAM,iBAAiB,GAA6B;CAC1F,IAAI,aAAqC;CACzC,IAAI;EACF,aAAa,aAAa,GAAG;CAC/B,QAAQ,CAER;CACA,IAAI,cAAe,MAAM,gBAAgB,EAAE,MAAM,WAAW,KAAK,CAAC,GAAI,OAAO;CAE7E,OAAO,uBAAuB,MAAM,cAChC,mBAAmB,GAAG,IACtB,eAAe,KAAK,YAAY,IAAI;AAC1C;;;AClXA,SAAS,aAAa,MAAc,MAAc,aAA2B;CAC3E,UAAU,SAAS,IAAI,GAAG;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CAC1D,IAAI,OAAO,gBAAgB,YAAY;CACvC,IAAI,SAAS,QAAQ,QAAQ,qBAAqB,YAAY;CAC9D,cAAc,QAAQ,MAAM,IAAI,GAAG,MAAM,EAAE,MAAM,IAAM,CAAC;AAC1D;AAEA,SAAgB,aAAa,OAAsB;CACjD,OAAO,iBAAiB;EACtB,MAAM,MAAM;EACZ,cAAc,MAAM;EACpB,UAAU,MAAM;CAClB,CAAC;AACH;;;;;AAMA,eAAe,eAAe,OAAc,UAAqC;CAC/E,MAAM,UAAU,MAAM,yBAAyB;EAC7C;EACA,UAAU,MAAM;EAChB,YAAY,MAAM;CACpB,CAAC;CACD,YAAY,KAAK;CACjB,OAAO;AACT;;;;;;;AA8BA,eAAsB,QAAQ,SAAiD;CAC7E,MAAM,WAAW,wBAAwB,QAAQ,IAAI;CACrD,MAAM,OAAO,QAAQ;CACrB,MAAM,eAAe,kBAAkB,UAAU,IAAI;CACrD,MAAM,WAAW,cAAc,YAAY;CAE3C,MAAM,OAAO,MAAM,kBAAkB;CACrC,MAAM,eAAe;EACnB,UAAU,KAAK;EACf;EACA;CACF,CAAC;CAED,MAAM,cAAc,iBAAiB;EACnC,MAAM,KAAK;EACX;EACA;CACF,CAAC;CAeD,WAAW;EAZT,eAAe;EACf;EACA,MAAM,SAAS;EACf,UAAU,SAAS;EACnB,cAAc,SAAS;EACvB,UAAU,SAAS;EACnB;EACA;EACA,MAAM,KAAK;EACX,KAAK,QAAQ;EACb,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;CAErB,CAAC;CAChB,aAAa,SAAS,MAAM,MAAM,WAAW;CAE7C,IAAI,QAAQ,WAAW,OACrB,oBAAoB,aAAa,EAAE,KAAK,CAAC;CAG3C,MAAM,YAAY,YAAY;EAC5B,MAAM,QAAQ;GAAE,MAAM,SAAS;GAAM;EAAK,CAAC;CAC7C;CAEA,OAAO;EACL;EACA,UAAU,KAAK;EACf;EACA;EACA,UAAU,SAAS;EACnB,cAAc,SAAS;EACvB,UAAU,SAAS;EACnB,MAAM,SAAS;EACf;EACA,MAAM,KAAK;EACX,SAAS;CACX;AACF;;;;;AAaA,eAAsB,gBACpB,SACgC;CAChC,MAAM,UAAU,MAAM,YAAY,eAChC,QAAQ;EACN,MAAM,QAAQ;EACd,MAAM,QAAQ;EACd,QAAQ,QAAQ;CAClB,CAAC,CACH;CACA,IAAI,QAAQ,WAAW,WAAW,OAAO;CACzC,OAAO;EAAE,QAAQ;EAAY,GAAG,QAAQ;CAAM;AAChD;;;;;;;;AAkBA,eAAsB,QAAQ,UAA0B,CAAC,GAA2B;CAClF,MAAM,WAAW,wBAAwB,QAAQ,IAAI;CACrD,MAAM,OAAO,QAAQ,QAAQ;CAC7B,MAAM,QAAQ,UAAU,SAAS,MAAM,IAAI;CAC3C,IAAI,CAAC,OAAO,OAAO;EAAE,SAAS;EAAO,QAAQ;CAAW;CAExD,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,kBAAkB;CACjC,QAAQ;EAEN,OAAO;GAAE,SAAS;GAAO,QAAQ;EAAmB;CACtD;CAEA,MAAM,mBAAmB,MAAM,eAAe,OAAO,KAAK,QAAQ;CAClE,OAAO;EACL,SAAS;EACT,cAAc,MAAM;EACpB;CACF;AACF;;;;;AAMA,eAAsB,KAEnB;CACD,MAAM,UAAoB,CAAC;CAC3B,MAAM,UAAU,mBAAmB,CAAC,CAAC,OAAO,aAAa;CACzD,IAAI,QAAQ,WAAW,GAAG,OAAO,EAAE,QAAQ;CAE3C,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,kBAAkB;CACjC,QAAQ;EACN,OAAO,EAAE,QAAQ;CACnB;CAEA,KAAK,MAAM,SAAS,SAClB,IAAI;EACF,MAAM,QAAQ,MAAM,eAAe,OAAO,KAAK,QAAQ;EACvD,QAAQ,KAAK,GAAG,KAAK;CACvB,QAAQ,CAER;CAEF,OAAO,EAAE,QAAQ;AACnB"}

package/dist/{load-dev-env-7UjMHhw7.mjs → load-dev-env-BULkXyen.mjs}

@@ -1,4 +1,4 @@
-import { n as normalizeLoadOptions, t as loadModeEnv } from "./load-mode-env-C8gy4v9V.mjs";
+import { n as normalizeLoadOptions, t as loadModeEnv } from "./load-mode-env-Ce9ujisN.mjs";
 //#region src/adapters/load-dev-env.ts
 /** Load `.cedarpg/dev.env` into `process.env`. Use `{ overwrite: true }` to beat `.env`. */
 function loadDevEnv(rootOrOptions) {
@@ -7,4 +7,4 @@ function loadDevEnv(rootOrOptions) {
 //#endregion
 export { loadDevEnv as t };
 
-//# sourceMappingURL=load-dev-env-7UjMHhw7.mjs.map
+//# sourceMappingURL=load-dev-env-BULkXyen.mjs.map

package/dist/{load-dev-env-7UjMHhw7.mjs.map → load-dev-env-BULkXyen.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"load-dev-env-7UjMHhw7.mjs","names":[],"sources":["../src/adapters/load-dev-env.ts"],"sourcesContent":["import { loadModeEnv, normalizeLoadOptions, type LoadModeEnvOptions } from \"./load-mode-env.ts\";\n\nexport type LoadDevEnvOptions = LoadModeEnvOptions;\n\n/** Load `.cedarpg/dev.env` into `process.env`. Use `{ overwrite: true }` to beat `.env`. */\nexport function loadDevEnv(rootOrOptions?: string | LoadDevEnvOptions): void {\n  loadModeEnv(\"dev\", normalizeLoadOptions(rootOrOptions));\n}\n"],"mappings":";;;AAKA,SAAgB,WAAW,eAAkD;CAC3E,YAAY,OAAO,qBAAqB,aAAa,CAAC;AACxD"}
+{"version":3,"file":"load-dev-env-BULkXyen.mjs","names":[],"sources":["../src/adapters/load-dev-env.ts"],"sourcesContent":["import { loadModeEnv, normalizeLoadOptions, type LoadModeEnvOptions } from \"./load-mode-env.ts\";\n\nexport type LoadDevEnvOptions = LoadModeEnvOptions;\n\n/** Load `.cedarpg/dev.env` into `process.env`. Use `{ overwrite: true }` to beat `.env`. */\nexport function loadDevEnv(rootOrOptions?: string | LoadDevEnvOptions): void {\n  loadModeEnv(\"dev\", normalizeLoadOptions(rootOrOptions));\n}\n"],"mappings":";;;AAKA,SAAgB,WAAW,eAAkD;CAC3E,YAAY,OAAO,qBAAqB,aAAa,CAAC;AACxD"}

package/dist/{load-dev-env-cII6N4ZP.cjs → load-dev-env-Bl6Ddv1U.cjs}

@@ -1,4 +1,4 @@
-const require_load_mode_env = require("./load-mode-env-B0qO9DZx.cjs");
+const require_load_mode_env = require("./load-mode-env-CX9vd56X.cjs");
 //#region src/adapters/load-dev-env.ts
 /** Load `.cedarpg/dev.env` into `process.env`. Use `{ overwrite: true }` to beat `.env`. */
 function loadDevEnv(rootOrOptions) {
@@ -12,4 +12,4 @@ Object.defineProperty(exports, "loadDevEnv", {
 	}
 });
 
-//# sourceMappingURL=load-dev-env-cII6N4ZP.cjs.map
+//# sourceMappingURL=load-dev-env-Bl6Ddv1U.cjs.map

package/dist/{load-dev-env-cII6N4ZP.cjs.map → load-dev-env-Bl6Ddv1U.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"load-dev-env-cII6N4ZP.cjs","names":["normalizeLoadOptions"],"sources":["../src/adapters/load-dev-env.ts"],"sourcesContent":["import { loadModeEnv, normalizeLoadOptions, type LoadModeEnvOptions } from \"./load-mode-env.ts\";\n\nexport type LoadDevEnvOptions = LoadModeEnvOptions;\n\n/** Load `.cedarpg/dev.env` into `process.env`. Use `{ overwrite: true }` to beat `.env`. */\nexport function loadDevEnv(rootOrOptions?: string | LoadDevEnvOptions): void {\n  loadModeEnv(\"dev\", normalizeLoadOptions(rootOrOptions));\n}\n"],"mappings":";;;AAKA,SAAgB,WAAW,eAAkD;CAC3E,sBAAA,YAAY,OAAOA,sBAAAA,qBAAqB,aAAa,CAAC;AACxD"}
+{"version":3,"file":"load-dev-env-Bl6Ddv1U.cjs","names":["normalizeLoadOptions"],"sources":["../src/adapters/load-dev-env.ts"],"sourcesContent":["import { loadModeEnv, normalizeLoadOptions, type LoadModeEnvOptions } from \"./load-mode-env.ts\";\n\nexport type LoadDevEnvOptions = LoadModeEnvOptions;\n\n/** Load `.cedarpg/dev.env` into `process.env`. Use `{ overwrite: true }` to beat `.env`. */\nexport function loadDevEnv(rootOrOptions?: string | LoadDevEnvOptions): void {\n  loadModeEnv(\"dev\", normalizeLoadOptions(rootOrOptions));\n}\n"],"mappings":";;;AAKA,SAAgB,WAAW,eAAkD;CAC3E,sBAAA,YAAY,OAAOA,sBAAAA,qBAAqB,aAAa,CAAC;AACxD"}

package/dist/{load-mode-env-B0qO9DZx.cjs → load-mode-env-CX9vd56X.cjs}

@@ -1,4 +1,4 @@
-const require_lease = require("./lease-Bq9wKwQa.cjs");
+const require_lease = require("./lease-WlmOnNDi.cjs");
 let node_fs = require("node:fs");
 //#region src/adapters/load-mode-env.ts
 function normalizeLoadOptions(rootOrOptions) {
@@ -36,4 +36,4 @@ Object.defineProperty(exports, "normalizeLoadOptions", {
 	}
 });
 
-//# sourceMappingURL=load-mode-env-B0qO9DZx.cjs.map
+//# sourceMappingURL=load-mode-env-CX9vd56X.cjs.map

package/dist/{load-mode-env-B0qO9DZx.cjs.map → load-mode-env-CX9vd56X.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"load-mode-env-B0qO9DZx.cjs","names":["resolveRoot","leasePath","envPath"],"sources":["../src/adapters/load-mode-env.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { envPath, leasePath } from \"../core/lease.ts\";\nimport type { DbMode } from \"../core/naming.ts\";\nimport { resolveRoot } from \"../core/worktree.ts\";\n\nexport type LoadModeEnvOptions = {\n  root?: string;\n  /** Overwrite existing `process.env` keys (default: only fill undefined). */\n  overwrite?: boolean;\n};\n\nexport function normalizeLoadOptions(\n  rootOrOptions?: string | LoadModeEnvOptions,\n): LoadModeEnvOptions {\n  if (typeof rootOrOptions === \"string\" || rootOrOptions === undefined) {\n    return { root: rootOrOptions };\n  }\n  return rootOrOptions;\n}\n\n/** Load `.cedarpg/<mode>.env` when a matching lease exists; no-op if stale/missing. */\nexport function loadModeEnv(mode: DbMode, options: LoadModeEnvOptions = {}): void {\n  const resolved = resolveRoot(options.root);\n  if (!existsSync(leasePath(resolved, mode))) return;\n\n  const file = envPath(resolved, mode);\n  if (!existsSync(file)) return;\n\n  const overwrite = options.overwrite === true;\n  for (const line of readFileSync(file, \"utf8\").split(\"\\n\")) {\n    const trimmed = line.trim();\n    if (!trimmed || trimmed.startsWith(\"#\")) continue;\n    const eq = trimmed.indexOf(\"=\");\n    if (eq <= 0) continue;\n    const key = trimmed.slice(0, eq);\n    const value = trimmed.slice(eq + 1);\n    if (overwrite || process.env[key] === undefined) {\n      process.env[key] = value;\n    }\n  }\n}\n"],"mappings":";;;AAWA,SAAgB,qBACd,eACoB;CACpB,IAAI,OAAO,kBAAkB,YAAY,kBAAkB,KAAA,GACzD,OAAO,EAAE,MAAM,cAAc;CAE/B,OAAO;AACT;;AAGA,SAAgB,YAAY,MAAc,UAA8B,CAAC,GAAS;CAChF,MAAM,WAAWA,cAAAA,YAAY,QAAQ,IAAI;CACzC,IAAI,EAAA,GAAA,QAAA,WAAA,CAAYC,cAAAA,UAAU,UAAU,IAAI,CAAC,GAAG;CAE5C,MAAM,OAAOC,cAAAA,QAAQ,UAAU,IAAI;CACnC,IAAI,EAAA,GAAA,QAAA,WAAA,CAAY,IAAI,GAAG;CAEvB,MAAM,YAAY,QAAQ,cAAc;CACxC,KAAK,MAAM,SAAA,GAAA,QAAA,aAAA,CAAqB,MAAM,MAAM,CAAC,CAAC,MAAM,IAAI,GAAG;EACzD,MAAM,UAAU,KAAK,KAAK;EAC1B,IAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,GAAG;EACzC,MAAM,KAAK,QAAQ,QAAQ,GAAG;EAC9B,IAAI,MAAM,GAAG;EACb,MAAM,MAAM,QAAQ,MAAM,GAAG,EAAE;EAC/B,MAAM,QAAQ,QAAQ,MAAM,KAAK,CAAC;EAClC,IAAI,aAAa,QAAQ,IAAI,SAAS,KAAA,GACpC,QAAQ,IAAI,OAAO;CAEvB;AACF"}
+{"version":3,"file":"load-mode-env-CX9vd56X.cjs","names":["resolveRoot","leasePath","envPath"],"sources":["../src/adapters/load-mode-env.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { envPath, leasePath } from \"../core/lease.ts\";\nimport type { DbMode } from \"../core/naming.ts\";\nimport { resolveRoot } from \"../core/worktree.ts\";\n\nexport type LoadModeEnvOptions = {\n  root?: string;\n  /** Overwrite existing `process.env` keys (default: only fill undefined). */\n  overwrite?: boolean;\n};\n\nexport function normalizeLoadOptions(\n  rootOrOptions?: string | LoadModeEnvOptions,\n): LoadModeEnvOptions {\n  if (typeof rootOrOptions === \"string\" || rootOrOptions === undefined) {\n    return { root: rootOrOptions };\n  }\n  return rootOrOptions;\n}\n\n/** Load `.cedarpg/<mode>.env` when a matching lease exists; no-op if stale/missing. */\nexport function loadModeEnv(mode: DbMode, options: LoadModeEnvOptions = {}): void {\n  const resolved = resolveRoot(options.root);\n  if (!existsSync(leasePath(resolved, mode))) return;\n\n  const file = envPath(resolved, mode);\n  if (!existsSync(file)) return;\n\n  const overwrite = options.overwrite === true;\n  for (const line of readFileSync(file, \"utf8\").split(\"\\n\")) {\n    const trimmed = line.trim();\n    if (!trimmed || trimmed.startsWith(\"#\")) continue;\n    const eq = trimmed.indexOf(\"=\");\n    if (eq <= 0) continue;\n    const key = trimmed.slice(0, eq);\n    const value = trimmed.slice(eq + 1);\n    if (overwrite || process.env[key] === undefined) {\n      process.env[key] = value;\n    }\n  }\n}\n"],"mappings":";;;AAWA,SAAgB,qBACd,eACoB;CACpB,IAAI,OAAO,kBAAkB,YAAY,kBAAkB,KAAA,GACzD,OAAO,EAAE,MAAM,cAAc;CAE/B,OAAO;AACT;;AAGA,SAAgB,YAAY,MAAc,UAA8B,CAAC,GAAS;CAChF,MAAM,WAAWA,cAAAA,YAAY,QAAQ,IAAI;CACzC,IAAI,EAAA,GAAA,QAAA,WAAA,CAAYC,cAAAA,UAAU,UAAU,IAAI,CAAC,GAAG;CAE5C,MAAM,OAAOC,cAAAA,QAAQ,UAAU,IAAI;CACnC,IAAI,EAAA,GAAA,QAAA,WAAA,CAAY,IAAI,GAAG;CAEvB,MAAM,YAAY,QAAQ,cAAc;CACxC,KAAK,MAAM,SAAA,GAAA,QAAA,aAAA,CAAqB,MAAM,MAAM,CAAC,CAAC,MAAM,IAAI,GAAG;EACzD,MAAM,UAAU,KAAK,KAAK;EAC1B,IAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,GAAG;EACzC,MAAM,KAAK,QAAQ,QAAQ,GAAG;EAC9B,IAAI,MAAM,GAAG;EACb,MAAM,MAAM,QAAQ,MAAM,GAAG,EAAE;EAC/B,MAAM,QAAQ,QAAQ,MAAM,KAAK,CAAC;EAClC,IAAI,aAAa,QAAQ,IAAI,SAAS,KAAA,GACpC,QAAQ,IAAI,OAAO;CAEvB;AACF"}

package/dist/{load-mode-env-C8gy4v9V.mjs → load-mode-env-Ce9ujisN.mjs}

@@ -1,4 +1,4 @@
-import { d as resolveRoot, n as envPath, o as leasePath } from "./lease-BSBBpaR4.mjs";
+import { d as resolveRoot, n as envPath, o as leasePath } from "./lease-DS1SX8U_.mjs";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/adapters/load-mode-env.ts
 function normalizeLoadOptions(rootOrOptions) {
@@ -25,4 +25,4 @@ function loadModeEnv(mode, options = {}) {
 //#endregion
 export { normalizeLoadOptions as n, loadModeEnv as t };
 
-//# sourceMappingURL=load-mode-env-C8gy4v9V.mjs.map
+//# sourceMappingURL=load-mode-env-Ce9ujisN.mjs.map

package/dist/{load-mode-env-C8gy4v9V.mjs.map → load-mode-env-Ce9ujisN.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"load-mode-env-C8gy4v9V.mjs","names":[],"sources":["../src/adapters/load-mode-env.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { envPath, leasePath } from \"../core/lease.ts\";\nimport type { DbMode } from \"../core/naming.ts\";\nimport { resolveRoot } from \"../core/worktree.ts\";\n\nexport type LoadModeEnvOptions = {\n  root?: string;\n  /** Overwrite existing `process.env` keys (default: only fill undefined). */\n  overwrite?: boolean;\n};\n\nexport function normalizeLoadOptions(\n  rootOrOptions?: string | LoadModeEnvOptions,\n): LoadModeEnvOptions {\n  if (typeof rootOrOptions === \"string\" || rootOrOptions === undefined) {\n    return { root: rootOrOptions };\n  }\n  return rootOrOptions;\n}\n\n/** Load `.cedarpg/<mode>.env` when a matching lease exists; no-op if stale/missing. */\nexport function loadModeEnv(mode: DbMode, options: LoadModeEnvOptions = {}): void {\n  const resolved = resolveRoot(options.root);\n  if (!existsSync(leasePath(resolved, mode))) return;\n\n  const file = envPath(resolved, mode);\n  if (!existsSync(file)) return;\n\n  const overwrite = options.overwrite === true;\n  for (const line of readFileSync(file, \"utf8\").split(\"\\n\")) {\n    const trimmed = line.trim();\n    if (!trimmed || trimmed.startsWith(\"#\")) continue;\n    const eq = trimmed.indexOf(\"=\");\n    if (eq <= 0) continue;\n    const key = trimmed.slice(0, eq);\n    const value = trimmed.slice(eq + 1);\n    if (overwrite || process.env[key] === undefined) {\n      process.env[key] = value;\n    }\n  }\n}\n"],"mappings":";;;AAWA,SAAgB,qBACd,eACoB;CACpB,IAAI,OAAO,kBAAkB,YAAY,kBAAkB,KAAA,GACzD,OAAO,EAAE,MAAM,cAAc;CAE/B,OAAO;AACT;;AAGA,SAAgB,YAAY,MAAc,UAA8B,CAAC,GAAS;CAChF,MAAM,WAAW,YAAY,QAAQ,IAAI;CACzC,IAAI,CAAC,WAAW,UAAU,UAAU,IAAI,CAAC,GAAG;CAE5C,MAAM,OAAO,QAAQ,UAAU,IAAI;CACnC,IAAI,CAAC,WAAW,IAAI,GAAG;CAEvB,MAAM,YAAY,QAAQ,cAAc;CACxC,KAAK,MAAM,QAAQ,aAAa,MAAM,MAAM,CAAC,CAAC,MAAM,IAAI,GAAG;EACzD,MAAM,UAAU,KAAK,KAAK;EAC1B,IAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,GAAG;EACzC,MAAM,KAAK,QAAQ,QAAQ,GAAG;EAC9B,IAAI,MAAM,GAAG;EACb,MAAM,MAAM,QAAQ,MAAM,GAAG,EAAE;EAC/B,MAAM,QAAQ,QAAQ,MAAM,KAAK,CAAC;EAClC,IAAI,aAAa,QAAQ,IAAI,SAAS,KAAA,GACpC,QAAQ,IAAI,OAAO;CAEvB;AACF"}
+{"version":3,"file":"load-mode-env-Ce9ujisN.mjs","names":[],"sources":["../src/adapters/load-mode-env.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { envPath, leasePath } from \"../core/lease.ts\";\nimport type { DbMode } from \"../core/naming.ts\";\nimport { resolveRoot } from \"../core/worktree.ts\";\n\nexport type LoadModeEnvOptions = {\n  root?: string;\n  /** Overwrite existing `process.env` keys (default: only fill undefined). */\n  overwrite?: boolean;\n};\n\nexport function normalizeLoadOptions(\n  rootOrOptions?: string | LoadModeEnvOptions,\n): LoadModeEnvOptions {\n  if (typeof rootOrOptions === \"string\" || rootOrOptions === undefined) {\n    return { root: rootOrOptions };\n  }\n  return rootOrOptions;\n}\n\n/** Load `.cedarpg/<mode>.env` when a matching lease exists; no-op if stale/missing. */\nexport function loadModeEnv(mode: DbMode, options: LoadModeEnvOptions = {}): void {\n  const resolved = resolveRoot(options.root);\n  if (!existsSync(leasePath(resolved, mode))) return;\n\n  const file = envPath(resolved, mode);\n  if (!existsSync(file)) return;\n\n  const overwrite = options.overwrite === true;\n  for (const line of readFileSync(file, \"utf8\").split(\"\\n\")) {\n    const trimmed = line.trim();\n    if (!trimmed || trimmed.startsWith(\"#\")) continue;\n    const eq = trimmed.indexOf(\"=\");\n    if (eq <= 0) continue;\n    const key = trimmed.slice(0, eq);\n    const value = trimmed.slice(eq + 1);\n    if (overwrite || process.env[key] === undefined) {\n      process.env[key] = value;\n    }\n  }\n}\n"],"mappings":";;;AAWA,SAAgB,qBACd,eACoB;CACpB,IAAI,OAAO,kBAAkB,YAAY,kBAAkB,KAAA,GACzD,OAAO,EAAE,MAAM,cAAc;CAE/B,OAAO;AACT;;AAGA,SAAgB,YAAY,MAAc,UAA8B,CAAC,GAAS;CAChF,MAAM,WAAW,YAAY,QAAQ,IAAI;CACzC,IAAI,CAAC,WAAW,UAAU,UAAU,IAAI,CAAC,GAAG;CAE5C,MAAM,OAAO,QAAQ,UAAU,IAAI;CACnC,IAAI,CAAC,WAAW,IAAI,GAAG;CAEvB,MAAM,YAAY,QAAQ,cAAc;CACxC,KAAK,MAAM,QAAQ,aAAa,MAAM,MAAM,CAAC,CAAC,MAAM,IAAI,GAAG;EACzD,MAAM,UAAU,KAAK,KAAK;EAC1B,IAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,GAAG;EACzC,MAAM,KAAK,QAAQ,QAAQ,GAAG;EAC9B,IAAI,MAAM,GAAG;EACb,MAAM,MAAM,QAAQ,MAAM,GAAG,EAAE;EAC/B,MAAM,QAAQ,QAAQ,MAAM,KAAK,CAAC;EAClC,IAAI,aAAa,QAAQ,IAAI,SAAS,KAAA,GACpC,QAAQ,IAAI,OAAO;CAEvB;AACF"}

package/dist/{load-test-env-C34wpkIX.mjs → load-test-env-BqtA6V-d.mjs}

@@ -1,4 +1,4 @@
-import { n as normalizeLoadOptions, t as loadModeEnv } from "./load-mode-env-C8gy4v9V.mjs";
+import { n as normalizeLoadOptions, t as loadModeEnv } from "./load-mode-env-Ce9ujisN.mjs";
 //#region src/adapters/load-test-env.ts
 /**
 * Load `.cedarpg/test.env` into `process.env` (worker-side).
@@ -15,4 +15,4 @@ function loadTestEnv(rootOrOptions) {
 //#endregion
 export { loadTestEnv as t };
 
-//# sourceMappingURL=load-test-env-C34wpkIX.mjs.map
+//# sourceMappingURL=load-test-env-BqtA6V-d.mjs.map

package/dist/{load-test-env-C34wpkIX.mjs.map → load-test-env-BqtA6V-d.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"load-test-env-C34wpkIX.mjs","names":[],"sources":["../src/adapters/load-test-env.ts"],"sourcesContent":["import { loadModeEnv, normalizeLoadOptions, type LoadModeEnvOptions } from \"./load-mode-env.ts\";\n\nexport type LoadTestEnvOptions = LoadModeEnvOptions;\n\n/**\n * Load `.cedarpg/test.env` into `process.env` (worker-side).\n *\n * Jest (and optional Vitest `setupFiles`) run tests in a different process than\n * `globalSetup`, so `setEnv` in acquire does not reach workers — the env file does.\n *\n * No-ops unless a matching `test.json` lease exists, so a leftover env after dispose\n * cannot inject a dropped DATABASE_URL.\n */\nexport function loadTestEnv(rootOrOptions?: string | LoadTestEnvOptions): void {\n  loadModeEnv(\"test\", normalizeLoadOptions(rootOrOptions));\n}\n"],"mappings":";;;;;;;;;;;AAaA,SAAgB,YAAY,eAAmD;CAC7E,YAAY,QAAQ,qBAAqB,aAAa,CAAC;AACzD"}
+{"version":3,"file":"load-test-env-BqtA6V-d.mjs","names":[],"sources":["../src/adapters/load-test-env.ts"],"sourcesContent":["import { loadModeEnv, normalizeLoadOptions, type LoadModeEnvOptions } from \"./load-mode-env.ts\";\n\nexport type LoadTestEnvOptions = LoadModeEnvOptions;\n\n/**\n * Load `.cedarpg/test.env` into `process.env` (worker-side).\n *\n * Jest (and optional Vitest `setupFiles`) run tests in a different process than\n * `globalSetup`, so `setEnv` in acquire does not reach workers — the env file does.\n *\n * No-ops unless a matching `test.json` lease exists, so a leftover env after dispose\n * cannot inject a dropped DATABASE_URL.\n */\nexport function loadTestEnv(rootOrOptions?: string | LoadTestEnvOptions): void {\n  loadModeEnv(\"test\", normalizeLoadOptions(rootOrOptions));\n}\n"],"mappings":";;;;;;;;;;;AAaA,SAAgB,YAAY,eAAmD;CAC7E,YAAY,QAAQ,qBAAqB,aAAa,CAAC;AACzD"}

package/dist/{load-test-env-CkdUjTpV.cjs → load-test-env-Dcgh6YHV.cjs}

@@ -1,4 +1,4 @@
-const require_load_mode_env = require("./load-mode-env-B0qO9DZx.cjs");
+const require_load_mode_env = require("./load-mode-env-CX9vd56X.cjs");
 //#region src/adapters/load-test-env.ts
 /**
 * Load `.cedarpg/test.env` into `process.env` (worker-side).
@@ -20,4 +20,4 @@ Object.defineProperty(exports, "loadTestEnv", {
 	}
 });
 
-//# sourceMappingURL=load-test-env-CkdUjTpV.cjs.map
+//# sourceMappingURL=load-test-env-Dcgh6YHV.cjs.map