@creatornader/agent-bridge 0.3.1 → 0.5.0

package/dist/postgres-production-preflight.js

@@ -0,0 +1,249 @@
+#!/usr/bin/env node
+import {
+  loadMigrationPlan,
+  migrationRecordMatches
+} from "./chunk-QNXHDOJ5.js";
+
+// src/postgres-production-preflight.ts
+import { fileURLToPath } from "url";
+import { TLSSocket } from "tls";
+import pg from "pg";
+var SUPPORTED_MAJORS = /* @__PURE__ */ new Set([15, 16, 17, 18]);
+var LEGACY_COLUMNS = /* @__PURE__ */ new Map([
+  ["id", "int8"],
+  ["source", "text"],
+  ["category", "text"],
+  ["content", "text"],
+  ["priority", "text"],
+  ["project", "text"],
+  ["metadata", "jsonb"],
+  ["created_at", "timestamptz"],
+  ["acked_by", "_text"]
+]);
+function check(name, ok, detail) {
+  return { name, ok, detail };
+}
+function migrationPrefix(applied, expected) {
+  return applied.length <= expected.length && applied.every(
+    (entry, index) => expected[index] !== void 0 && migrationRecordMatches(entry, expected[index])
+  );
+}
+async function legacyChecks(db, checks) {
+  const owner = await db.query(`
+    SELECT relation.relowner=current_user::regrole::oid AS "ownedByCaller"
+    FROM pg_catalog.pg_class relation
+    WHERE relation.oid='public.shared_context'::regclass`);
+  checks.push(check(
+    "legacy.owner",
+    owner.rows[0]?.ownedByCaller === true,
+    "the migration authority owns public.shared_context"
+  ));
+  const columns = await db.query(`
+    SELECT column_name AS "columnName",udt_name AS "typeName"
+    FROM information_schema.columns
+    WHERE table_schema='public' AND table_name='shared_context'`);
+  const actual = new Map(columns.rows.map((row) => [row.columnName, row.typeName]));
+  const compatible = [...LEGACY_COLUMNS].every(([name, type]) => actual.get(name) === type);
+  checks.push(check(
+    "legacy.columns",
+    compatible,
+    "public.shared_context has the columns required by migration 006"
+  ));
+  if (!compatible) return void 0;
+  const legacy = await db.query(`
+    WITH mapped AS (
+      SELECT CASE
+        WHEN metadata #>> '{message_envelope,message_id}' ~* '^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$'
+          THEN lower(metadata #>> '{message_envelope,message_id}')
+        ELSE 'legacy:' || id::text
+      END AS message_id
+      FROM public.shared_context
+    )
+    SELECT
+      (SELECT count(*)::text FROM mapped) AS "rowCount",
+      (SELECT count(*)::text FROM (
+        SELECT message_id FROM mapped GROUP BY message_id HAVING count(*)>1
+      ) duplicates) AS "duplicateMessageIds"`);
+  const result = legacy.rows[0];
+  const duplicates = result?.duplicateMessageIds ?? "unknown";
+  checks.push(check(
+    "legacy.message_ids",
+    duplicates === "0",
+    "legacy rows map to unique immutable message IDs"
+  ));
+  return result?.rowCount;
+}
+async function runPostgresProductionPreflight(db, migrationsDirectory, options = {}) {
+  const expected = await loadMigrationPlan(migrationsDirectory);
+  await db.query("BEGIN TRANSACTION READ ONLY");
+  try {
+    await db.query("SET LOCAL statement_timeout='15s'");
+    await db.query("SET LOCAL lock_timeout='2s'");
+    const authority = await db.query(`
+      SELECT
+        current_setting('server_version_num') AS "serverVersionNum",
+        pg_is_in_recovery() AS "inRecovery",
+        role.rolcanlogin AS "canLogin",
+        role.rolinherit AS inherits,
+        role.rolsuper AS "isSuperuser",
+        role.rolcreaterole AS "canCreateRole",
+        role.rolbypassrls AS "bypassesRls",
+        has_database_privilege(current_user,current_database(),'CREATE') AS "canCreateDatabaseObject",
+        to_regnamespace('agent_bridge')::text AS "bridgeSchema",
+        to_regclass('agent_bridge.schema_migrations')::text AS "migrationTable",
+        to_regclass('public.shared_context')::text AS "legacyTable",
+        coalesce((SELECT ssl FROM pg_catalog.pg_stat_ssl WHERE pid=pg_backend_pid()),false) AS ssl,
+        pg_database_size(current_database())::text AS "databaseBytes"
+      FROM pg_catalog.pg_roles role
+      WHERE role.rolname=current_user`);
+    const row = authority.rows[0];
+    if (!row) throw new Error("current PostgreSQL role could not be inspected");
+    const serverMajor = Math.floor(Number(row.serverVersionNum) / 1e4);
+    const ssl = row.ssl || options.clientTransportSsl === true;
+    const checks = [
+      check("postgres.version", SUPPORTED_MAJORS.has(serverMajor), "PostgreSQL major is supported"),
+      check("postgres.primary", !row.inRecovery, "connection targets a writable primary"),
+      check("authority.login", row.canLogin && row.inherits, "migration role can log in and inherits grants"),
+      check("authority.database_create", row.canCreateDatabaseObject, "migration role can create database objects"),
+      check("authority.roles", row.isSuperuser || row.canCreateRole, "migration role can administer restricted roles"),
+      check(
+        "authority.native_dr",
+        row.isSuperuser || row.bypassesRls,
+        "native DR source role can bypass row-level security"
+      ),
+      ...options.requireSsl ? [check(
+        "connection.ssl",
+        ssl,
+        row.ssl ? "PostgreSQL backend reports TLS" : options.clientTransportSsl ? "client transport uses TLS" : "connection does not use TLS"
+      )] : []
+    ];
+    let applied = [];
+    if (row.migrationTable) {
+      const result = await db.query(
+        "SELECT version,name,checksum FROM agent_bridge.schema_migrations ORDER BY version"
+      );
+      applied = result.rows.map((entry) => ({
+        version: Number(entry.version),
+        name: entry.name,
+        checksum: entry.checksum
+      }));
+    }
+    const prefix = migrationPrefix(applied, expected);
+    const unmanagedSchema = Boolean(row.bridgeSchema) && (!row.migrationTable || applied.length === 0);
+    const migrationState = unmanagedSchema || !prefix || !row.bridgeSchema && Boolean(row.migrationTable) ? "invalid" : applied.length === expected.length ? "current" : applied.length === 0 ? "uninitialized" : "upgradeable";
+    checks.push(check(
+      "schema.migrations",
+      migrationState !== "invalid",
+      migrationState === "invalid" ? "agent_bridge namespace or migration ledger conflicts with the release plan" : `migration state is ${migrationState}`
+    ));
+    if (!row.bridgeSchema) {
+      const collisions = await db.query(`
+        WITH names(role_name) AS (VALUES
+          ('agent_bridge_runtime_' || substr(md5(current_database()),1,16)),
+          ('agent_bridge_data_owner_' || substr(md5(current_database()),1,16)),
+          ('agent_bridge_context_reader_' || substr(md5(current_database()),1,16)),
+          ('agent_bridge_event_writer_' || substr(md5(current_database()),1,16)),
+          ('agent_bridge_control_owner_' || substr(md5(current_database()),1,16)),
+          ('agent_bridge_control_operator_' || substr(md5(current_database()),1,16)),
+          ('agent_bridge_control_auditor_' || substr(md5(current_database()),1,16)),
+          ('agent_bridge_archive_operator_' || substr(md5(current_database()),1,16)),
+          ('agent_bridge_backup_reader_' || substr(md5(current_database()),1,16))
+        )
+        SELECT count(*)::text AS count FROM names JOIN pg_catalog.pg_roles role
+          ON role.rolname=names.role_name`);
+      checks.push(check(
+        "schema.role_collisions",
+        collisions.rows[0]?.count === "0",
+        "no derived Agent Bridge roles predate the schema"
+      ));
+    }
+    let legacyRows;
+    if (row.legacyTable && applied.length < 6) {
+      legacyRows = await legacyChecks(db, checks);
+    }
+    await db.query("COMMIT");
+    return {
+      schema: "agent-bridge-postgres-production-preflight-v1",
+      ok: checks.every((entry) => entry.ok),
+      checks,
+      observations: {
+        serverMajor,
+        databaseBytes: row.databaseBytes,
+        migrationState,
+        appliedMigrationCount: applied.length,
+        requiredMigrationCount: expected.length,
+        legacyTable: Boolean(row.legacyTable),
+        ...legacyRows === void 0 ? {} : { legacyRows },
+        ssl
+      }
+    };
+  } catch (error) {
+    await db.query("ROLLBACK").catch(() => void 0);
+    throw error;
+  }
+}
+function parseArguments(args) {
+  const options = { json: false, help: false, requireSsl: false };
+  for (const argument of args) {
+    if (argument === "--json") options.json = true;
+    else if (argument === "--require-ssl") options.requireSsl = true;
+    else if (argument === "--help" || argument === "-h") options.help = true;
+    else throw new Error(`unknown argument: ${argument}`);
+  }
+  return options;
+}
+function safeError(error, secret) {
+  const message = error instanceof Error ? error.message : String(error);
+  return message.split(secret).join("[redacted]").replace(/postgres(?:ql)?:\/\/\S+/giu, "[redacted]");
+}
+async function main() {
+  const options = parseArguments(process.argv.slice(2));
+  if (options.help) {
+    process.stdout.write("Usage: npm run preflight:postgres:production -- [--json] [--require-ssl]\n");
+    return;
+  }
+  const databaseUrl = process.env.AGENT_BRIDGE_DATABASE_URL;
+  if (!databaseUrl) throw new Error("AGENT_BRIDGE_DATABASE_URL is required");
+  const client = new pg.Client({
+    connectionString: databaseUrl,
+    connectionTimeoutMillis: 1e4,
+    application_name: "agent-bridge-production-preflight"
+  });
+  try {
+    await client.connect();
+    const clientTransportSsl = client.connection.stream instanceof TLSSocket && client.connection.stream.encrypted;
+    const migrationsDirectory = fileURLToPath(new URL("../sql/migrations", import.meta.url));
+    const report = await runPostgresProductionPreflight({
+      query: (sql) => client.query(sql)
+    }, migrationsDirectory, {
+      requireSsl: options.requireSsl,
+      clientTransportSsl
+    });
+    if (options.json) process.stdout.write(`${JSON.stringify(report)}
+`);
+    else {
+      for (const entry of report.checks) {
+        process.stdout.write(`${entry.ok ? "OK" : "ERROR"} ${entry.name}: ${entry.detail}
+`);
+      }
+      process.stdout.write(`${report.ok ? "PostgreSQL production preflight passed" : "PostgreSQL production preflight failed"}
+`);
+    }
+    if (!report.ok) process.exitCode = 1;
+  } catch (error) {
+    throw new Error(safeError(error, databaseUrl));
+  } finally {
+    await client.end().catch(() => void 0);
+  }
+}
+if (process.argv[1] && fileURLToPath(import.meta.url) === process.argv[1]) {
+  void main().catch((error) => {
+    process.stderr.write(`${error instanceof Error ? error.message : String(error)}
+`);
+    process.exitCode = 1;
+  });
+}
+export {
+  runPostgresProductionPreflight
+};
+//# sourceMappingURL=postgres-production-preflight.js.map

package/dist/postgres-production-preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/postgres-production-preflight.ts"],"sourcesContent":["import { fileURLToPath } from \"node:url\";\nimport { TLSSocket } from \"node:tls\";\nimport pg from \"pg\";\nimport { loadMigrationPlan, migrationRecordMatches, type AppliedMigration } from \"./migrations.js\";\n\nconst SUPPORTED_MAJORS = new Set([15, 16, 17, 18]);\nconst LEGACY_COLUMNS = new Map([\n  [\"id\", \"int8\"],\n  [\"source\", \"text\"],\n  [\"category\", \"text\"],\n  [\"content\", \"text\"],\n  [\"priority\", \"text\"],\n  [\"project\", \"text\"],\n  [\"metadata\", \"jsonb\"],\n  [\"created_at\", \"timestamptz\"],\n  [\"acked_by\", \"_text\"],\n]);\n\ninterface Check {\n  name: string;\n  ok: boolean;\n  detail: string;\n}\n\ninterface ProductionPreflightDatabase {\n  query<T extends Record<string, unknown> = Record<string, unknown>>(\n    sql: string,\n  ): Promise<{ rows: T[]; rowCount: number | null }>;\n}\n\ninterface AuthorityRow extends Record<string, unknown> {\n  serverVersionNum: string;\n  inRecovery: boolean;\n  canLogin: boolean;\n  inherits: boolean;\n  isSuperuser: boolean;\n  canCreateRole: boolean;\n  bypassesRls: boolean;\n  canCreateDatabaseObject: boolean;\n  bridgeSchema: string | null;\n  migrationTable: string | null;\n  legacyTable: string | null;\n  ssl: boolean;\n  databaseBytes: string;\n}\n\ninterface LegacyColumnRow extends Record<string, unknown> {\n  columnName: string;\n  typeName: string;\n}\n\nexport interface PostgresProductionPreflightReport {\n  schema: \"agent-bridge-postgres-production-preflight-v1\";\n  ok: boolean;\n  checks: Check[];\n  observations: {\n    serverMajor: number;\n    databaseBytes: string;\n    migrationState: \"uninitialized\" | \"upgradeable\" | \"current\" | \"invalid\";\n    appliedMigrationCount: number;\n    requiredMigrationCount: number;\n    legacyTable: boolean;\n    legacyRows?: string;\n    ssl: boolean;\n  };\n}\n\nfunction check(name: string, ok: boolean, detail: string): Check {\n  return { name, ok, detail };\n}\n\nfunction migrationPrefix(\n  applied: AppliedMigration[],\n  expected: ReadonlyArray<AppliedMigration>,\n): boolean {\n  return applied.length <= expected.length && applied.every((entry, index) =>\n    expected[index] !== undefined && migrationRecordMatches(entry, expected[index])\n  );\n}\n\nasync function legacyChecks(\n  db: ProductionPreflightDatabase,\n  checks: Check[],\n): Promise<string | undefined> {\n  const owner = await db.query<{ ownedByCaller: boolean }>(`\n    SELECT relation.relowner=current_user::regrole::oid AS \"ownedByCaller\"\n    FROM pg_catalog.pg_class relation\n    WHERE relation.oid='public.shared_context'::regclass`);\n  checks.push(check(\n    \"legacy.owner\",\n    owner.rows[0]?.ownedByCaller === true,\n    \"the migration authority owns public.shared_context\",\n  ));\n\n  const columns = await db.query<LegacyColumnRow>(`\n    SELECT column_name AS \"columnName\",udt_name AS \"typeName\"\n    FROM information_schema.columns\n    WHERE table_schema='public' AND table_name='shared_context'`);\n  const actual = new Map(columns.rows.map((row) => [row.columnName, row.typeName]));\n  const compatible = [...LEGACY_COLUMNS].every(([name, type]) => actual.get(name) === type);\n  checks.push(check(\n    \"legacy.columns\",\n    compatible,\n    \"public.shared_context has the columns required by migration 006\",\n  ));\n\n  if (!compatible) return undefined;\n  const legacy = await db.query<{ rowCount: string; duplicateMessageIds: string }>(`\n    WITH mapped AS (\n      SELECT CASE\n        WHEN metadata #>> '{message_envelope,message_id}' ~* '^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$'\n          THEN lower(metadata #>> '{message_envelope,message_id}')\n        ELSE 'legacy:' || id::text\n      END AS message_id\n      FROM public.shared_context\n    )\n    SELECT\n      (SELECT count(*)::text FROM mapped) AS \"rowCount\",\n      (SELECT count(*)::text FROM (\n        SELECT message_id FROM mapped GROUP BY message_id HAVING count(*)>1\n      ) duplicates) AS \"duplicateMessageIds\"`);\n  const result = legacy.rows[0];\n  const duplicates = result?.duplicateMessageIds ?? \"unknown\";\n  checks.push(check(\n    \"legacy.message_ids\",\n    duplicates === \"0\",\n    \"legacy rows map to unique immutable message IDs\",\n  ));\n  return result?.rowCount;\n}\n\nexport async function runPostgresProductionPreflight(\n  db: ProductionPreflightDatabase,\n  migrationsDirectory: string,\n  options: { requireSsl?: boolean; clientTransportSsl?: boolean } = {},\n): Promise<PostgresProductionPreflightReport> {\n  const expected = await loadMigrationPlan(migrationsDirectory);\n  await db.query(\"BEGIN TRANSACTION READ ONLY\");\n  try {\n    await db.query(\"SET LOCAL statement_timeout='15s'\");\n    await db.query(\"SET LOCAL lock_timeout='2s'\");\n    const authority = await db.query<AuthorityRow>(`\n      SELECT\n        current_setting('server_version_num') AS \"serverVersionNum\",\n        pg_is_in_recovery() AS \"inRecovery\",\n        role.rolcanlogin AS \"canLogin\",\n        role.rolinherit AS inherits,\n        role.rolsuper AS \"isSuperuser\",\n        role.rolcreaterole AS \"canCreateRole\",\n        role.rolbypassrls AS \"bypassesRls\",\n        has_database_privilege(current_user,current_database(),'CREATE') AS \"canCreateDatabaseObject\",\n        to_regnamespace('agent_bridge')::text AS \"bridgeSchema\",\n        to_regclass('agent_bridge.schema_migrations')::text AS \"migrationTable\",\n        to_regclass('public.shared_context')::text AS \"legacyTable\",\n        coalesce((SELECT ssl FROM pg_catalog.pg_stat_ssl WHERE pid=pg_backend_pid()),false) AS ssl,\n        pg_database_size(current_database())::text AS \"databaseBytes\"\n      FROM pg_catalog.pg_roles role\n      WHERE role.rolname=current_user`);\n    const row = authority.rows[0];\n    if (!row) throw new Error(\"current PostgreSQL role could not be inspected\");\n\n    const serverMajor = Math.floor(Number(row.serverVersionNum) / 10_000);\n    const ssl = row.ssl || options.clientTransportSsl === true;\n    const checks: Check[] = [\n      check(\"postgres.version\", SUPPORTED_MAJORS.has(serverMajor), \"PostgreSQL major is supported\"),\n      check(\"postgres.primary\", !row.inRecovery, \"connection targets a writable primary\"),\n      check(\"authority.login\", row.canLogin && row.inherits, \"migration role can log in and inherits grants\"),\n      check(\"authority.database_create\", row.canCreateDatabaseObject, \"migration role can create database objects\"),\n      check(\"authority.roles\", row.isSuperuser || row.canCreateRole, \"migration role can administer restricted roles\"),\n      check(\n        \"authority.native_dr\",\n        row.isSuperuser || row.bypassesRls,\n        \"native DR source role can bypass row-level security\",\n      ),\n      ...(options.requireSsl\n        ? [check(\n          \"connection.ssl\",\n          ssl,\n          row.ssl\n            ? \"PostgreSQL backend reports TLS\"\n            : options.clientTransportSsl\n              ? \"client transport uses TLS\"\n              : \"connection does not use TLS\",\n        )]\n        : []),\n    ];\n\n    let applied: AppliedMigration[] = [];\n    if (row.migrationTable) {\n      const result = await db.query<{ version: number; name: string; checksum: string }>(\n        \"SELECT version,name,checksum FROM agent_bridge.schema_migrations ORDER BY version\",\n      );\n      applied = result.rows.map((entry) => ({\n        version: Number(entry.version),\n        name: entry.name,\n        checksum: entry.checksum,\n      }));\n    }\n    const prefix = migrationPrefix(applied, expected);\n    const unmanagedSchema = Boolean(row.bridgeSchema) && (\n      !row.migrationTable || applied.length === 0\n    );\n    const migrationState = unmanagedSchema || !prefix || (!row.bridgeSchema && Boolean(row.migrationTable))\n      ? \"invalid\"\n      : applied.length === expected.length\n        ? \"current\"\n        : applied.length === 0\n          ? \"uninitialized\"\n          : \"upgradeable\";\n    checks.push(check(\n      \"schema.migrations\",\n      migrationState !== \"invalid\",\n      migrationState === \"invalid\"\n        ? \"agent_bridge namespace or migration ledger conflicts with the release plan\"\n        : `migration state is ${migrationState}`,\n    ));\n\n    if (!row.bridgeSchema) {\n      const collisions = await db.query<{ count: string }>(`\n        WITH names(role_name) AS (VALUES\n          ('agent_bridge_runtime_' || substr(md5(current_database()),1,16)),\n          ('agent_bridge_data_owner_' || substr(md5(current_database()),1,16)),\n          ('agent_bridge_context_reader_' || substr(md5(current_database()),1,16)),\n          ('agent_bridge_event_writer_' || substr(md5(current_database()),1,16)),\n          ('agent_bridge_control_owner_' || substr(md5(current_database()),1,16)),\n          ('agent_bridge_control_operator_' || substr(md5(current_database()),1,16)),\n          ('agent_bridge_control_auditor_' || substr(md5(current_database()),1,16)),\n          ('agent_bridge_archive_operator_' || substr(md5(current_database()),1,16)),\n          ('agent_bridge_backup_reader_' || substr(md5(current_database()),1,16))\n        )\n        SELECT count(*)::text AS count FROM names JOIN pg_catalog.pg_roles role\n          ON role.rolname=names.role_name`);\n      checks.push(check(\n        \"schema.role_collisions\",\n        collisions.rows[0]?.count === \"0\",\n        \"no derived Agent Bridge roles predate the schema\",\n      ));\n    }\n\n    let legacyRows: string | undefined;\n    if (row.legacyTable && applied.length < 6) {\n      legacyRows = await legacyChecks(db, checks);\n    }\n\n    await db.query(\"COMMIT\");\n    return {\n      schema: \"agent-bridge-postgres-production-preflight-v1\",\n      ok: checks.every((entry) => entry.ok),\n      checks,\n      observations: {\n        serverMajor,\n        databaseBytes: row.databaseBytes,\n        migrationState,\n        appliedMigrationCount: applied.length,\n        requiredMigrationCount: expected.length,\n        legacyTable: Boolean(row.legacyTable),\n        ...(legacyRows === undefined ? {} : { legacyRows }),\n        ssl,\n      },\n    };\n  } catch (error) {\n    await db.query(\"ROLLBACK\").catch(() => undefined);\n    throw error;\n  }\n}\n\nfunction parseArguments(args: string[]): { json: boolean; help: boolean; requireSsl: boolean } {\n  const options = { json: false, help: false, requireSsl: false };\n  for (const argument of args) {\n    if (argument === \"--json\") options.json = true;\n    else if (argument === \"--require-ssl\") options.requireSsl = true;\n    else if (argument === \"--help\" || argument === \"-h\") options.help = true;\n    else throw new Error(`unknown argument: ${argument}`);\n  }\n  return options;\n}\n\nfunction safeError(error: unknown, secret: string): string {\n  const message = error instanceof Error ? error.message : String(error);\n  return message.split(secret).join(\"[redacted]\").replace(/postgres(?:ql)?:\\/\\/\\S+/giu, \"[redacted]\");\n}\n\nasync function main(): Promise<void> {\n  const options = parseArguments(process.argv.slice(2));\n  if (options.help) {\n    process.stdout.write(\"Usage: npm run preflight:postgres:production -- [--json] [--require-ssl]\\n\");\n    return;\n  }\n  const databaseUrl = process.env.AGENT_BRIDGE_DATABASE_URL;\n  if (!databaseUrl) throw new Error(\"AGENT_BRIDGE_DATABASE_URL is required\");\n  const client = new pg.Client({\n    connectionString: databaseUrl,\n    connectionTimeoutMillis: 10_000,\n    application_name: \"agent-bridge-production-preflight\",\n  });\n  try {\n    await client.connect();\n    const clientTransportSsl = client.connection.stream instanceof TLSSocket &&\n      client.connection.stream.encrypted;\n    const migrationsDirectory = fileURLToPath(new URL(\"../sql/migrations\", import.meta.url));\n    const report = await runPostgresProductionPreflight({\n      query: (sql) => client.query(sql),\n    }, migrationsDirectory, {\n      requireSsl: options.requireSsl,\n      clientTransportSsl,\n    });\n    if (options.json) process.stdout.write(`${JSON.stringify(report)}\\n`);\n    else {\n      for (const entry of report.checks) {\n        process.stdout.write(`${entry.ok ? \"OK\" : \"ERROR\"} ${entry.name}: ${entry.detail}\\n`);\n      }\n      process.stdout.write(`${report.ok ? \"PostgreSQL production preflight passed\" : \"PostgreSQL production preflight failed\"}\\n`);\n    }\n    if (!report.ok) process.exitCode = 1;\n  } catch (error) {\n    throw new Error(safeError(error, databaseUrl));\n  } finally {\n    await client.end().catch(() => undefined);\n  }\n}\n\nif (process.argv[1] && fileURLToPath(import.meta.url) === process.argv[1]) {\n  void main().catch((error) => {\n    process.stderr.write(`${error instanceof Error ? error.message : String(error)}\\n`);\n    process.exitCode = 1;\n  });\n}\n"],"mappings":";;;;;;;AAAA,SAAS,qBAAqB;AAC9B,SAAS,iBAAiB;AAC1B,OAAO,QAAQ;AAGf,IAAM,mBAAmB,oBAAI,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;AACjD,IAAM,iBAAiB,oBAAI,IAAI;AAAA,EAC7B,CAAC,MAAM,MAAM;AAAA,EACb,CAAC,UAAU,MAAM;AAAA,EACjB,CAAC,YAAY,MAAM;AAAA,EACnB,CAAC,WAAW,MAAM;AAAA,EAClB,CAAC,YAAY,MAAM;AAAA,EACnB,CAAC,WAAW,MAAM;AAAA,EAClB,CAAC,YAAY,OAAO;AAAA,EACpB,CAAC,cAAc,aAAa;AAAA,EAC5B,CAAC,YAAY,OAAO;AACtB,CAAC;AAmDD,SAAS,MAAM,MAAc,IAAa,QAAuB;AAC/D,SAAO,EAAE,MAAM,IAAI,OAAO;AAC5B;AAEA,SAAS,gBACP,SACA,UACS;AACT,SAAO,QAAQ,UAAU,SAAS,UAAU,QAAQ;AAAA,IAAM,CAAC,OAAO,UAChE,SAAS,KAAK,MAAM,UAAa,uBAAuB,OAAO,SAAS,KAAK,CAAC;AAAA,EAChF;AACF;AAEA,eAAe,aACb,IACA,QAC6B;AAC7B,QAAM,QAAQ,MAAM,GAAG,MAAkC;AAAA;AAAA;AAAA,yDAGF;AACvD,SAAO,KAAK;AAAA,IACV;AAAA,IACA,MAAM,KAAK,CAAC,GAAG,kBAAkB;AAAA,IACjC;AAAA,EACF,CAAC;AAED,QAAM,UAAU,MAAM,GAAG,MAAuB;AAAA;AAAA;AAAA,gEAGc;AAC9D,QAAM,SAAS,IAAI,IAAI,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,YAAY,IAAI,QAAQ,CAAC,CAAC;AAChF,QAAM,aAAa,CAAC,GAAG,cAAc,EAAE,MAAM,CAAC,CAAC,MAAM,IAAI,MAAM,OAAO,IAAI,IAAI,MAAM,IAAI;AACxF,SAAO,KAAK;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,MAAI,CAAC,WAAY,QAAO;AACxB,QAAM,SAAS,MAAM,GAAG,MAAyD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,6CAatC;AAC3C,QAAM,SAAS,OAAO,KAAK,CAAC;AAC5B,QAAM,aAAa,QAAQ,uBAAuB;AAClD,SAAO,KAAK;AAAA,IACV;AAAA,IACA,eAAe;AAAA,IACf;AAAA,EACF,CAAC;AACD,SAAO,QAAQ;AACjB;AAEA,eAAsB,+BACpB,IACA,qBACA,UAAkE,CAAC,GACvB;AAC5C,QAAM,WAAW,MAAM,kBAAkB,mBAAmB;AAC5D,QAAM,GAAG,MAAM,6BAA6B;AAC5C,MAAI;AACF,UAAM,GAAG,MAAM,mCAAmC;AAClD,UAAM,GAAG,MAAM,6BAA6B;AAC5C,UAAM,YAAY,MAAM,GAAG,MAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,sCAgBb;AAClC,UAAM,MAAM,UAAU,KAAK,CAAC;AAC5B,QAAI,CAAC,IAAK,OAAM,IAAI,MAAM,gDAAgD;AAE1E,UAAM,cAAc,KAAK,MAAM,OAAO,IAAI,gBAAgB,IAAI,GAAM;AACpE,UAAM,MAAM,IAAI,OAAO,QAAQ,uBAAuB;AACtD,UAAM,SAAkB;AAAA,MACtB,MAAM,oBAAoB,iBAAiB,IAAI,WAAW,GAAG,+BAA+B;AAAA,MAC5F,MAAM,oBAAoB,CAAC,IAAI,YAAY,uCAAuC;AAAA,MAClF,MAAM,mBAAmB,IAAI,YAAY,IAAI,UAAU,+CAA+C;AAAA,MACtG,MAAM,6BAA6B,IAAI,yBAAyB,4CAA4C;AAAA,MAC5G,MAAM,mBAAmB,IAAI,eAAe,IAAI,eAAe,gDAAgD;AAAA,MAC/G;AAAA,QACE;AAAA,QACA,IAAI,eAAe,IAAI;AAAA,QACvB;AAAA,MACF;AAAA,MACA,GAAI,QAAQ,aACR,CAAC;AAAA,QACD;AAAA,QACA;AAAA,QACA,IAAI,MACA,mCACA,QAAQ,qBACN,8BACA;AAAA,MACR,CAAC,IACC,CAAC;AAAA,IACP;AAEA,QAAI,UAA8B,CAAC;AACnC,QAAI,IAAI,gBAAgB;AACtB,YAAM,SAAS,MAAM,GAAG;AAAA,QACtB;AAAA,MACF;AACA,gBAAU,OAAO,KAAK,IAAI,CAAC,WAAW;AAAA,QACpC,SAAS,OAAO,MAAM,OAAO;AAAA,QAC7B,MAAM,MAAM;AAAA,QACZ,UAAU,MAAM;AAAA,MAClB,EAAE;AAAA,IACJ;AACA,UAAM,SAAS,gBAAgB,SAAS,QAAQ;AAChD,UAAM,kBAAkB,QAAQ,IAAI,YAAY,MAC9C,CAAC,IAAI,kBAAkB,QAAQ,WAAW;AAE5C,UAAM,iBAAiB,mBAAmB,CAAC,UAAW,CAAC,IAAI,gBAAgB,QAAQ,IAAI,cAAc,IACjG,YACA,QAAQ,WAAW,SAAS,SAC1B,YACA,QAAQ,WAAW,IACjB,kBACA;AACR,WAAO,KAAK;AAAA,MACV;AAAA,MACA,mBAAmB;AAAA,MACnB,mBAAmB,YACf,+EACA,sBAAsB,cAAc;AAAA,IAC1C,CAAC;AAED,QAAI,CAAC,IAAI,cAAc;AACrB,YAAM,aAAa,MAAM,GAAG,MAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,0CAajB;AACpC,aAAO,KAAK;AAAA,QACV;AAAA,QACA,WAAW,KAAK,CAAC,GAAG,UAAU;AAAA,QAC9B;AAAA,MACF,CAAC;AAAA,IACH;AAEA,QAAI;AACJ,QAAI,IAAI,eAAe,QAAQ,SAAS,GAAG;AACzC,mBAAa,MAAM,aAAa,IAAI,MAAM;AAAA,IAC5C;AAEA,UAAM,GAAG,MAAM,QAAQ;AACvB,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,IAAI,OAAO,MAAM,CAAC,UAAU,MAAM,EAAE;AAAA,MACpC;AAAA,MACA,cAAc;AAAA,QACZ;AAAA,QACA,eAAe,IAAI;AAAA,QACnB;AAAA,QACA,uBAAuB,QAAQ;AAAA,QAC/B,wBAAwB,SAAS;AAAA,QACjC,aAAa,QAAQ,IAAI,WAAW;AAAA,QACpC,GAAI,eAAe,SAAY,CAAC,IAAI,EAAE,WAAW;AAAA,QACjD;AAAA,MACF;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,GAAG,MAAM,UAAU,EAAE,MAAM,MAAM,MAAS;AAChD,UAAM;AAAA,EACR;AACF;AAEA,SAAS,eAAe,MAAuE;AAC7F,QAAM,UAAU,EAAE,MAAM,OAAO,MAAM,OAAO,YAAY,MAAM;AAC9D,aAAW,YAAY,MAAM;AAC3B,QAAI,aAAa,SAAU,SAAQ,OAAO;AAAA,aACjC,aAAa,gBAAiB,SAAQ,aAAa;AAAA,aACnD,aAAa,YAAY,aAAa,KAAM,SAAQ,OAAO;AAAA,QAC/D,OAAM,IAAI,MAAM,qBAAqB,QAAQ,EAAE;AAAA,EACtD;AACA,SAAO;AACT;AAEA,SAAS,UAAU,OAAgB,QAAwB;AACzD,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,SAAO,QAAQ,MAAM,MAAM,EAAE,KAAK,YAAY,EAAE,QAAQ,8BAA8B,YAAY;AACpG;AAEA,eAAe,OAAsB;AACnC,QAAM,UAAU,eAAe,QAAQ,KAAK,MAAM,CAAC,CAAC;AACpD,MAAI,QAAQ,MAAM;AAChB,YAAQ,OAAO,MAAM,4EAA4E;AACjG;AAAA,EACF;AACA,QAAM,cAAc,QAAQ,IAAI;AAChC,MAAI,CAAC,YAAa,OAAM,IAAI,MAAM,uCAAuC;AACzE,QAAM,SAAS,IAAI,GAAG,OAAO;AAAA,IAC3B,kBAAkB;AAAA,IAClB,yBAAyB;AAAA,IACzB,kBAAkB;AAAA,EACpB,CAAC;AACD,MAAI;AACF,UAAM,OAAO,QAAQ;AACrB,UAAM,qBAAqB,OAAO,WAAW,kBAAkB,aAC7D,OAAO,WAAW,OAAO;AAC3B,UAAM,sBAAsB,cAAc,IAAI,IAAI,qBAAqB,YAAY,GAAG,CAAC;AACvF,UAAM,SAAS,MAAM,+BAA+B;AAAA,MAClD,OAAO,CAAC,QAAQ,OAAO,MAAM,GAAG;AAAA,IAClC,GAAG,qBAAqB;AAAA,MACtB,YAAY,QAAQ;AAAA,MACpB;AAAA,IACF,CAAC;AACD,QAAI,QAAQ,KAAM,SAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,MAAM,CAAC;AAAA,CAAI;AAAA,SAC/D;AACH,iBAAW,SAAS,OAAO,QAAQ;AACjC,gBAAQ,OAAO,MAAM,GAAG,MAAM,KAAK,OAAO,OAAO,IAAI,MAAM,IAAI,KAAK,MAAM,MAAM;AAAA,CAAI;AAAA,MACtF;AACA,cAAQ,OAAO,MAAM,GAAG,OAAO,KAAK,2CAA2C,wCAAwC;AAAA,CAAI;AAAA,IAC7H;AACA,QAAI,CAAC,OAAO,GAAI,SAAQ,WAAW;AAAA,EACrC,SAAS,OAAO;AACd,UAAM,IAAI,MAAM,UAAU,OAAO,WAAW,CAAC;AAAA,EAC/C,UAAE;AACA,UAAM,OAAO,IAAI,EAAE,MAAM,MAAM,MAAS;AAAA,EAC1C;AACF;AAEA,IAAI,QAAQ,KAAK,CAAC,KAAK,cAAc,YAAY,GAAG,MAAM,QAAQ,KAAK,CAAC,GAAG;AACzE,OAAK,KAAK,EAAE,MAAM,CAAC,UAAU;AAC3B,YAAQ,OAAO,MAAM,GAAG,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,CAAI;AAClF,YAAQ,WAAW;AAAA,EACrB,CAAC;AACH;","names":[]}

package/dist/server.js

@@ -4,16 +4,16 @@ import {
   configFromEnv,
   createAgentBridgeServer,
   startServer
-} from "./chunk-SPSMZOCJ.js";
+} from "./chunk-HUHG7XTB.js";
 import "./chunk-2EVLG3YA.js";
-import "./chunk-UAHMP6GC.js";
-import "./chunk-CEXBMOI5.js";
-import "./chunk-Q6PPMXJC.js";
-import "./chunk-5GMB3A77.js";
-import "./chunk-NCO7RLBM.js";
+import "./chunk-QPC6JHA3.js";
+import "./chunk-Z6JP6MYD.js";
+import "./chunk-SN7PIVDF.js";
+import "./chunk-IVG4XWWS.js";
+import "./chunk-GTK4KOED.js";
 import "./chunk-VOQIDTCJ.js";
-import "./chunk-4VB44KJU.js";
-import "./chunk-GADH244D.js";
+import "./chunk-AWE3DFZV.js";
+import "./chunk-E4OWHGUE.js";
 import "./chunk-BZLMF5O5.js";
 export {
   MCP_IMPLEMENTATION_VERSION,

package/dist/sqlite-edge-store-CdMIOrho.d.ts

@@ -0,0 +1,148 @@
+import { b as BridgeMessage, c as BridgePrincipal } from './bridge-domain-CBX3IVqC.js';
+import { d as MessageQuery, M as MessagePage } from './bridge-store-ByJ6CaJk.js';
+
+type PendingMessage = Omit<BridgeMessage, "sequence" | "createdAt">;
+interface EdgeScope {
+    endpoint: string;
+    principal: BridgePrincipal;
+}
+/** A side-effect-free inspection used by migration dry-runs and preflight gates. */
+interface EdgeReadOnlyInspection {
+    exists: boolean;
+    gate: EdgeMigrationGate;
+    pending: number;
+    due: number;
+    scheduled: number;
+    leased: number;
+    blocked: number;
+    cached: number;
+}
+/**
+ * Inspect an edge without creating a database, a schema object, or a WAL sidecar.
+ * An absent path has the same empty active state that initialization would create.
+ */
+declare function inspectEdgeScopeReadOnly(path: string, scope: EdgeScope, now?: Date): EdgeReadOnlyInspection;
+interface EdgeOutboxRecord {
+    position: number;
+    draft: PendingMessage;
+    payloadHash: string;
+    attempts: number;
+    leaseToken: string;
+    createdAt: string;
+}
+interface EdgeEnqueueResult {
+    draft: PendingMessage;
+    created: boolean;
+}
+interface EdgeStats {
+    pending: number;
+    due: number;
+    scheduled: number;
+    leased: number;
+    blocked: number;
+    cached: number;
+    pullCursor?: string;
+    lastSyncAt?: string;
+    lastError?: string;
+    oldestDueAt?: string;
+    queueLagMs: number;
+    oldestBlockedAt?: string;
+    blockedAgeMs: number | null;
+    blockedMaxAttempts: number;
+    blockedLastError?: string;
+    nextRetryAt?: string;
+    lastOutboundSyncAt?: string;
+    lastInboundSyncAt?: string;
+    lastAttemptAt?: string;
+    migrationState: EdgeMigrationGateState;
+    migrationOperationId?: string;
+    migrationLeaseExpiresAt?: string;
+}
+type EdgeMigrationGateState = "active" | "draining" | "retired";
+interface EdgeMigrationGate {
+    scopeKey: string;
+    state: EdgeMigrationGateState;
+    operationId?: string;
+    leaseExpiresAt?: string;
+    updatedAt: string;
+}
+interface EdgeDrainLease {
+    scopeKey: string;
+    operationId: string;
+    leaseToken: string;
+    leaseExpiresAt: string;
+}
+declare class EdgeConflictError extends Error {
+    readonly code = "edge_idempotency_conflict";
+}
+declare class EdgeMigrationDrainingError extends Error {
+    readonly gate: EdgeMigrationGate;
+    readonly code = "client_migration_draining";
+    constructor(gate: EdgeMigrationGate);
+}
+declare class EdgeMigrationRetiredError extends Error {
+    readonly gate: EdgeMigrationGate;
+    readonly code = "client_migration_retired";
+    constructor(gate: EdgeMigrationGate);
+}
+declare class EdgeMigrationLeaseError extends Error {
+    readonly code = "client_migration_lease_lost";
+    constructor();
+}
+declare function edgeMessageFingerprint(message: PendingMessage | BridgeMessage): string;
+declare function stableIdempotency(message: PendingMessage): PendingMessage;
+declare function edgeScopeKey(scope: EdgeScope): string;
+declare class SQLiteEdgeStore {
+    private readonly path;
+    private readonly scope;
+    private readonly busyTimeoutMs;
+    private readonly db;
+    private readonly databasePath;
+    private readonly preexistingFiles;
+    private readonly key;
+    private initialized;
+    private initialization?;
+    constructor(path: string, scope: EdgeScope, busyTimeoutMs?: number);
+    private restrictFiles;
+    get scopeKey(): string;
+    private gateFromRow;
+    private gateInTransaction;
+    private assertScopeActiveInTransaction;
+    private assertDrainLeaseInTransaction;
+    private assertClaimAuthorityInTransaction;
+    initialize(): Promise<void>;
+    private initializeOnce;
+    private ready;
+    migrationGate(): Promise<EdgeMigrationGate>;
+    /** Refuse new normal-client writes before any remote attempt begins. */
+    assertScopeActive(): Promise<void>;
+    /** Refuse remote publication unless this worker still owns the durable drain lease. */
+    assertDrainLease(lease: EdgeDrainLease, now?: Date): Promise<void>;
+    private claimDrainLease;
+    /** Start a new durable drain only from an active edge scope. */
+    beginDrain(operationId: string, now?: Date, leaseMs?: number): Promise<EdgeDrainLease>;
+    /** Resume the same persisted drain only after the prior worker lease expires. */
+    resumeDrain(operationId: string, now?: Date, leaseMs?: number): Promise<EdgeDrainLease>;
+    /** Backward-compatible dispatcher for callers that have already inspected the gate. */
+    acquireDrainLease(operationId: string, now?: Date, leaseMs?: number): Promise<EdgeDrainLease>;
+    /** Verify the held lease and require an exact zero-work outbox before a cutover continues. */
+    assertDrainComplete(lease: EdgeDrainLease, now?: Date): Promise<void>;
+    renewDrainLease(lease: EdgeDrainLease, now?: Date, leaseMs?: number): Promise<EdgeDrainLease>;
+    retireScope(lease: EdgeDrainLease, now?: Date): Promise<void>;
+    enqueue(input: PendingMessage, now?: Date): Promise<EdgeEnqueueResult>;
+    claimNext(now?: Date, leaseMs?: number, migrationLease?: EdgeDrainLease): Promise<EdgeOutboxRecord | undefined>;
+    retry(record: EdgeOutboxRecord, error: string, availableAt: Date): Promise<void>;
+    block(record: EdgeOutboxRecord, error: string, now?: Date): Promise<void>;
+    commit(record: EdgeOutboxRecord, message: BridgeMessage, now?: Date): Promise<void>;
+    private cacheOne;
+    cachePage(messages: BridgeMessage[], cursor: string | undefined, now?: Date): Promise<void>;
+    cacheLatest(messages: BridgeMessage[], now?: Date): Promise<void>;
+    list(query?: MessageQuery): Promise<MessagePage>;
+    pullCursor(): Promise<string | undefined>;
+    noteError(error: string): Promise<void>;
+    noteAttempt(now?: Date): Promise<void>;
+    stats(now?: Date): Promise<EdgeStats>;
+    close(): Promise<void>;
+}
+
+export { EdgeConflictError as E, type PendingMessage as P, SQLiteEdgeStore as S, type EdgeDrainLease as a, type EdgeEnqueueResult as b, EdgeMigrationDrainingError as c, type EdgeMigrationGate as d, type EdgeMigrationGateState as e, EdgeMigrationLeaseError as f, EdgeMigrationRetiredError as g, type EdgeOutboxRecord as h, type EdgeReadOnlyInspection as i, type EdgeScope as j, type EdgeStats as k, edgeMessageFingerprint as l, edgeScopeKey as m, inspectEdgeScopeReadOnly as n, stableIdempotency as s };

package/dist/sqlite.d.ts

@@ -1,81 +1,7 @@
-import { b as BridgeMessage, c as BridgePrincipal, B as BridgeDelivery, g as DeliveryState, R as RetryPolicy, A as AgentPresence, a as BridgeDeliveryEvent } from './bridge-domain-CBX3IVqC.js';
-import { d as MessageQuery, M as MessagePage, B as BridgeDiagnostics, I as InsertMessageResult, a as BridgeStore, C as ClaimOptions, c as DeliveryQuery, b as DeliveryPage, D as DeliveryEventPage } from './bridge-store-DPVSCwfs.js';
-
-type PendingMessage = Omit<BridgeMessage, "sequence" | "createdAt">;
-interface EdgeScope {
-    endpoint: string;
-    principal: BridgePrincipal;
-}
-interface EdgeOutboxRecord {
-    position: number;
-    draft: PendingMessage;
-    payloadHash: string;
-    attempts: number;
-    leaseToken: string;
-    createdAt: string;
-}
-interface EdgeEnqueueResult {
-    draft: PendingMessage;
-    created: boolean;
-}
-interface EdgeStats {
-    pending: number;
-    due: number;
-    scheduled: number;
-    leased: number;
-    blocked: number;
-    cached: number;
-    pullCursor?: string;
-    lastSyncAt?: string;
-    lastError?: string;
-    oldestDueAt?: string;
-    queueLagMs: number;
-    oldestBlockedAt?: string;
-    blockedAgeMs: number | null;
-    blockedMaxAttempts: number;
-    blockedLastError?: string;
-    nextRetryAt?: string;
-    lastOutboundSyncAt?: string;
-    lastInboundSyncAt?: string;
-    lastAttemptAt?: string;
-}
-declare class EdgeConflictError extends Error {
-    readonly code = "edge_idempotency_conflict";
-}
-declare function edgeMessageFingerprint(message: PendingMessage | BridgeMessage): string;
-declare function stableIdempotency(message: PendingMessage): PendingMessage;
-declare function edgeScopeKey(scope: EdgeScope): string;
-declare class SQLiteEdgeStore {
-    private readonly path;
-    private readonly scope;
-    private readonly busyTimeoutMs;
-    private readonly db;
-    private readonly databasePath;
-    private readonly preexistingFiles;
-    private readonly key;
-    private initialized;
-    private initialization?;
-    constructor(path: string, scope: EdgeScope, busyTimeoutMs?: number);
-    private restrictFiles;
-    get scopeKey(): string;
-    initialize(): Promise<void>;
-    private initializeOnce;
-    private ready;
-    enqueue(input: PendingMessage, now?: Date): Promise<EdgeEnqueueResult>;
-    claimNext(now?: Date, leaseMs?: number): Promise<EdgeOutboxRecord | undefined>;
-    retry(record: EdgeOutboxRecord, error: string, availableAt: Date): Promise<void>;
-    block(record: EdgeOutboxRecord, error: string, now?: Date): Promise<void>;
-    commit(record: EdgeOutboxRecord, message: BridgeMessage, now?: Date): Promise<void>;
-    private cacheOne;
-    cachePage(messages: BridgeMessage[], cursor: string | undefined, now?: Date): Promise<void>;
-    cacheLatest(messages: BridgeMessage[], now?: Date): Promise<void>;
-    list(query?: MessageQuery): Promise<MessagePage>;
-    pullCursor(): Promise<string | undefined>;
-    noteError(error: string): Promise<void>;
-    noteAttempt(now?: Date): Promise<void>;
-    stats(now?: Date): Promise<EdgeStats>;
-    close(): Promise<void>;
-}
+import { c as BridgePrincipal, B as BridgeDelivery, g as DeliveryState, R as RetryPolicy, A as AgentPresence, b as BridgeMessage, a as BridgeDeliveryEvent } from './bridge-domain-CBX3IVqC.js';
+import { M as MessagePage, B as BridgeDiagnostics, I as InsertMessageResult, a as BridgeStore, d as MessageQuery, C as ClaimOptions, c as DeliveryQuery, b as DeliveryPage, D as DeliveryEventPage } from './bridge-store-ByJ6CaJk.js';
+import { e as EdgeMigrationGateState, S as SQLiteEdgeStore, a as EdgeDrainLease, P as PendingMessage } from './sqlite-edge-store-CdMIOrho.js';
+export { E as EdgeConflictError, b as EdgeEnqueueResult, c as EdgeMigrationDrainingError, d as EdgeMigrationGate, f as EdgeMigrationLeaseError, g as EdgeMigrationRetiredError, h as EdgeOutboxRecord, i as EdgeReadOnlyInspection, j as EdgeScope, k as EdgeStats, l as edgeMessageFingerprint, m as edgeScopeKey, n as inspectEdgeScopeReadOnly, s as stableIdempotency } from './sqlite-edge-store-CdMIOrho.js';
 
 interface SyncInsertResult extends InsertMessageResult {
     disposition: "committed" | "queued";
@@ -100,6 +26,9 @@ interface SyncReport {
     lastSyncedAt?: string;
     lastError?: string;
     failureRetryable?: boolean;
+    migrationState?: EdgeMigrationGateState;
+    migrationOperationId?: string;
+    migrationLeaseExpiresAt?: string;
 }
 interface SyncDiagnostics extends BridgeDiagnostics {
     remoteReachable: boolean | null;
@@ -121,9 +50,12 @@ interface SyncDiagnostics extends BridgeDiagnostics {
     lastOutboundSyncAt?: string;
     lastInboundSyncAt?: string;
     lastSyncAttemptAt?: string;
-    syncLoopState: "disabled" | "idle" | "running" | "backoff" | "stopped" | "failed";
+    syncLoopState: "disabled" | "idle" | "running" | "backoff" | "paused" | "stopped" | "failed";
     syncLoopError?: string;
     remoteError?: string;
+    migrationState: EdgeMigrationGateState;
+    migrationOperationId?: string;
+    migrationLeaseExpiresAt?: string;
 }
 interface SyncingBridgeStoreOptions {
     now?: () => Date;
@@ -133,6 +65,9 @@ interface SyncingBridgeStoreOptions {
     leaseMs?: number;
     autoSync?: boolean;
     idleDelayMs?: number;
+    edgeDrainLease?: EdgeDrainLease;
+    /** A maintenance caller may retain the edge while closing the sync wrapper. */
+    closeEdge?: boolean;
 }
 declare function isRetryableSyncError(error: unknown): boolean;
 declare class SyncingBridgeStore implements BridgeStore {
@@ -146,6 +81,8 @@ declare class SyncingBridgeStore implements BridgeStore {
     private readonly leaseMs;
     private readonly autoSync;
     private readonly idleDelayMs;
+    private edgeDrainLease?;
+    private readonly closeEdge;
     private remoteReady;
     private stopped;
     private wakeTimer;
@@ -158,6 +95,8 @@ declare class SyncingBridgeStore implements BridgeStore {
     private loopState;
     constructor(edge: SQLiteEdgeStore, remote: BridgeStore, principal: BridgePrincipal, options?: SyncingBridgeStoreOptions);
     initialize(): Promise<void>;
+    /** Replace a renewed maintenance lease without creating another edge wrapper. */
+    setDrainLease(lease: EdgeDrainLease | undefined): void;
     private startTransportLoop;
     private wait;
     private wakeTransport;
@@ -235,4 +174,4 @@ declare class SQLiteBridgeStore implements BridgeStore {
     close(): Promise<void>;
 }
 
-export { type CachedMessagePage, EdgeConflictError, type EdgeEnqueueResult, type EdgeOutboxRecord, type EdgeScope, type EdgeStats, type PendingMessage, SQLiteBridgeStore, SQLiteEdgeStore, type SyncDiagnostics, type SyncInsertResult, type SyncReport, SyncingBridgeStore, type SyncingBridgeStoreOptions, edgeMessageFingerprint, edgeScopeKey, isRetryableSyncError, stableIdempotency };
+export { type CachedMessagePage, EdgeDrainLease, EdgeMigrationGateState, PendingMessage, SQLiteBridgeStore, SQLiteEdgeStore, type SyncDiagnostics, type SyncInsertResult, type SyncReport, SyncingBridgeStore, type SyncingBridgeStoreOptions, isRetryableSyncError };

package/dist/sqlite.js

@@ -1,26 +1,34 @@
 #!/usr/bin/env node
 import {
   EdgeConflictError,
+  EdgeMigrationDrainingError,
+  EdgeMigrationLeaseError,
+  EdgeMigrationRetiredError,
   SQLiteEdgeStore,
   SyncingBridgeStore,
   edgeMessageFingerprint,
   edgeScopeKey,
+  inspectEdgeScopeReadOnly,
   isRetryableSyncError,
   stableIdempotency
-} from "./chunk-Q6PPMXJC.js";
+} from "./chunk-SN7PIVDF.js";
 import {
   SQLiteBridgeStore
-} from "./chunk-5GMB3A77.js";
-import "./chunk-NCO7RLBM.js";
+} from "./chunk-IVG4XWWS.js";
+import "./chunk-GTK4KOED.js";
 import "./chunk-VOQIDTCJ.js";
 import "./chunk-BZLMF5O5.js";
 export {
   EdgeConflictError,
+  EdgeMigrationDrainingError,
+  EdgeMigrationLeaseError,
+  EdgeMigrationRetiredError,
   SQLiteBridgeStore,
   SQLiteEdgeStore,
   SyncingBridgeStore,
   edgeMessageFingerprint,
   edgeScopeKey,
+  inspectEdgeScopeReadOnly,
   isRetryableSyncError,
   stableIdempotency
 };