@coffre/cli 0.1.9 → 0.1.11

package/dist/{connect-BONR52al.js → connect-CpN0VYGE.js}

@@ -4,6 +4,7 @@ import { A as bigint, G as sql, H as SQL, O as customType, T as integer, ct as e
 import { r as drizzle } from "./node-postgres-_y-EeSHQ.js";
 import { a as trackCommits, i as relationsOf, n as asPostgresDatabase, r as ACTIVE_SUBJECT } from "./portable-CPh2thNN.js";
 import { resolve } from "node:path";
+import { AsyncLocalStorage } from "node:async_hooks";
 import { checkServerIdentity } from "node:tls";
 //#region ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudflare+workers-types@5.20260920.1_@libsql+client@0.18.0_@types+pg@8.20.0_pg@8.16.3/node_modules/drizzle-orm/pg-core/checks.js
 var CheckBuilder = class {
@@ -580,8 +581,59 @@ const { environmentsRelations, secretsRelations, syncsRelations, syncKeysRelatio
 });
 //#endregion
 //#region ../db/dist/index.js
+/**
+* A query made on the database from inside one of its own transactions,
+* rather than through the transaction. With one connection per call, as on
+* Workers, it would wait for the transaction, which waits for it: a call
+* Cloudflare cancels as hung, and nothing says why. So it is refused at
+* once, with this, wherever the database runs.
+*/
+var QueryOutsideTransaction = class extends Error {
+	constructor() {
+		super("query outside its transaction: use tx. A query on the database inside one of its own transactions waits for that transaction, which waits for it");
+		this.name = "QueryOutsideTransaction";
+	}
+};
+/** The transaction a flow of work runs inside, with the pool it holds, while it is open. */
+const inside = new AsyncLocalStorage();
+/**
+* `pool`, refusing a query or a transaction asked from inside a transaction
+* it is already running. Work from any other flow, a concurrent request's,
+* or what the transaction left running after it ended, goes on as before.
+*/
+function guarded(pool) {
+	return new Proxy(pool, { get(target, key) {
+		const value = Reflect.get(target, key, target);
+		if (typeof value !== "function") return value;
+		if (key !== "query" && key !== "connect") return value.bind(target);
+		return (...args) => {
+			const open = inside.getStore();
+			if (open?.open === true && open.pool === target) throw new QueryOutsideTransaction();
+			return value.apply(target, args);
+		};
+	} });
+}
+/** The refusal `error` is, or was caused by. */
+function brokenRule(error) {
+	for (let cause = error; cause instanceof Error; cause = cause.cause) if (cause instanceof QueryOutsideTransaction) return cause;
+}
 function createDatabase(pool) {
-	return trackCommits(drizzle(pool, { schema: schema_exports }));
+	const db = drizzle(guarded(pool), { schema: schema_exports });
+	const run = db.transaction.bind(db);
+	db.transaction = (async (work, config) => {
+		const open = {
+			pool,
+			open: true
+		};
+		try {
+			return await run((tx) => inside.run(open, () => work(tx)), config);
+		} catch (error) {
+			throw brokenRule(error) ?? error;
+		} finally {
+			open.open = false;
+		}
+	});
+	return trackCommits(db);
 }
 //#endregion
 //#region ../../node_modules/.pnpm/pg-connection-string@2.14.0/node_modules/pg-connection-string/esm/index.mjs

package/dist/{connect-BZdPYNbZ.js → connect-fkn_APVy.js}

@@ -1,2 +1,2 @@
-import { n as openDatabase, r as postgresConnection, t as engineOfUrl } from "./connect-BONR52al.js";
+import { n as openDatabase, r as postgresConnection, t as engineOfUrl } from "./connect-CpN0VYGE.js";
 export { engineOfUrl, openDatabase, postgresConnection };

package/dist/main.js

@@ -2639,7 +2639,7 @@ switch (command) {
 		await keys(rest);
 		break;
 	case "setup":
-		await (await import("./setup-D3SXt_P-.js")).setup(rest);
+		await (await import("./setup-ClLcofuy.js")).setup(rest);
 		break;
 	case "login":
 		await login(rest);

package/dist/{setup-D3SXt_P-.js → setup-ClLcofuy.js}

@@ -1,6 +1,6 @@
 import { d as esm_default } from "./esm-Bts-esAl.js";
 import { C as yes, E as isEmpty, S as wrap, T as init, _ as select, b as truncate, c as Cancelled, d as listed, f as openTerminal, g as row, h as release, i as keyValues, l as edit, m as readKeys, n as jsonWarning, o as needsTerminal, p as paragraph, r as keyGuide, s as showSecrets, t as generateKeys, u as hiddenLine, v as style, w as KINDS, x as width, y as textLine } from "./keys-BCKUEb-Y.js";
-import { r as postgresConnection, t as engineOfUrl } from "./connect-BONR52al.js";
+import { r as postgresConnection, t as engineOfUrl } from "./connect-CpN0VYGE.js";
 import { parseArgs } from "node:util";
 import { spawn } from "node:child_process";
 import { existsSync, readFileSync, writeFileSync } from "node:fs";
@@ -95,7 +95,7 @@ async function postgresMigrator(url) {
 	};
 }
 async function sqliteMigrator(url) {
-	const [{ openDatabase }, { migrate }] = await Promise.all([import("./connect-BZdPYNbZ.js"), import("drizzle-orm/libsql/migrator")]);
+	const [{ openDatabase }, { migrate }] = await Promise.all([import("./connect-fkn_APVy.js"), import("drizzle-orm/libsql/migrator")]);
 	const { db, close } = await openDatabase(url);
 	const sqlite = db;
 	return {

package/dist/templates/node/package.json

@@ -13,11 +13,11 @@
     "conformance": "coffre-conformance node"
   },
   "dependencies": {
-    "@coffre/server": "0.1.9",
-    "@coffre/vault": "0.1.9"
+    "@coffre/server": "0.1.11",
+    "@coffre/vault": "0.1.11"
   },
   "devDependencies": {
-    "@coffre/conformance": "0.1.9",
+    "@coffre/conformance": "0.1.11",
     "@types/node": "26.1.1",
     "typescript": "5.9.3"
   }

package/dist/templates/workers/package.json

@@ -14,13 +14,13 @@
     "conformance": "coffre-conformance workers"
   },
   "dependencies": {
-    "@coffre/server": "0.1.9",
-    "@coffre/ui": "0.1.9",
-    "@coffre/vault": "0.1.9"
+    "@coffre/server": "0.1.11",
+    "@coffre/ui": "0.1.11",
+    "@coffre/vault": "0.1.11"
   },
   "devDependencies": {
     "@cloudflare/workers-types": "5.20260920.1",
-    "@coffre/conformance": "0.1.9",
+    "@coffre/conformance": "0.1.11",
     "typescript": "5.9.3",
     "wrangler": "4.118.0"
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coffre/cli",
-  "version": "0.1.9",
+  "version": "0.1.11",
   "description": "The coffre command line: secrets in your shell, and `coffre init` for a new deployment.",
   "license": "MIT",
   "repository": {
@@ -28,9 +28,9 @@
     "pg": "8.16.3",
     "tsdown": "0.23.0",
     "typescript": "5.9.3",
-    "@coffre/client": "0.1.9",
-    "@coffre/core": "0.1.9",
-    "@coffre/db": "0.1.9"
+    "@coffre/client": "0.1.11",
+    "@coffre/core": "0.1.11",
+    "@coffre/db": "0.1.11"
   },
   "scripts": {
     "build": "tsdown && node scripts/copy-templates.ts && node scripts/copy-migrations.ts",