@databricks/appkit 0.36.0 → 0.38.0

package/CLAUDE.md

@@ -52,6 +52,7 @@ npx @databricks/appkit docs <query>
 - [Genie plugin](./docs/plugins/genie.md): Integrates Databricks AI/BI Genie spaces into your AppKit application, enabling natural language data queries via a conversational interface.
 - [Jobs plugin](./docs/plugins/jobs.md): Trigger and monitor Databricks Lakeflow Jobs from your AppKit application.
 - [Lakebase plugin](./docs/plugins/lakebase.md): Provides a PostgreSQL connection pool for Databricks Lakebase Autoscaling with automatic OAuth token refresh.
+- [Plugin manifest](./docs/plugins/manifest.md): Every plugin ships a manifest.json next to its source code. The manifest declares plugin metadata, the Databricks resources the plugin needs, and any structured rules a scaffolding agent must honor when running databricks apps init. It is consumed at three stages:
 - [Model Serving plugin](./docs/plugins/model-serving.md): Provides an authenticated proxy to Databricks Model Serving endpoints, with invoke and streaming support.
 - [Plugin management](./docs/plugins/plugin-management.md): AppKit includes a CLI for managing plugins. All commands are available under npx @databricks/appkit plugin.
 - [Server plugin](./docs/plugins/server.md): Provides HTTP server capabilities with development and production modes.
@@ -76,7 +77,7 @@ npx @databricks/appkit docs <query>
 - [Class: TunnelError](./docs/api/appkit/Class.TunnelError.md): Error thrown when remote tunnel operations fail.
 - [Class: ValidationError](./docs/api/appkit/Class.ValidationError.md): Error thrown when input validation fails.
 - [Enumeration: RequestedClaimsPermissionSet](./docs/api/appkit/Enumeration.RequestedClaimsPermissionSet.md): Permission set for Unity Catalog table access
-- [Enumeration: ResourceType](./docs/api/appkit/Enumeration.ResourceType.md): Resource types from schema $defs.resourceType.enum
+- [Enumeration: ResourceType](./docs/api/appkit/Enumeration.ResourceType.md): Resource types from resourceTypeSchema.options
 - [Function: agentIdFromMarkdownPath()](./docs/api/appkit/Function.agentIdFromMarkdownPath.md): Derives the logical agent id from a markdown path. When the file is named
 - [Function: appKitServingTypesPlugin()](./docs/api/appkit/Function.appKitServingTypesPlugin.md): Vite plugin to generate TypeScript types for AppKit serving endpoints.
 - [Function: appKitTypesPlugin()](./docs/api/appkit/Function.appKitTypesPlugin.md): Vite plugin to generate types for AppKit queries.
@@ -141,7 +142,6 @@ npx @databricks/appkit docs <query>
 - [Interface: RequestedClaims](./docs/api/appkit/Interface.RequestedClaims.md): Optional claims for fine-grained Unity Catalog table permissions
 - [Interface: RequestedResource](./docs/api/appkit/Interface.RequestedResource.md): Resource to request permissions for in Unity Catalog
 - [Interface: ResourceEntry](./docs/api/appkit/Interface.ResourceEntry.md): Internal representation of a resource in the registry.
-- [Interface: ResourceFieldEntry](./docs/api/appkit/Interface.ResourceFieldEntry.md): Defines a single field for a resource. Each field has its own environment variable and optional description. Single-value types use one key (e.g. id); multi-value types (database, secret) use multiple (e.g. instancename, databasename or scope, key).
 - [Interface: ResourceRequirement](./docs/api/appkit/Interface.ResourceRequirement.md): Declares a resource requirement for a plugin.
 - [Interface: RunAgentInput](./docs/api/appkit/Interface.RunAgentInput.md): Properties
 - [Interface: RunAgentResult](./docs/api/appkit/Interface.RunAgentResult.md): Properties
@@ -174,6 +174,7 @@ npx @databricks/appkit docs <query>
 - [Type Alias: PluginData<T, U, N>](./docs/api/appkit/TypeAlias.PluginData.md): Tuple of plugin class, config, and name. Created by toPlugin() and passed to createApp().
 - [Type Alias: Plugins](./docs/api/appkit/TypeAlias.Plugins.md): Plugin map passed to the function form of AgentDefinition.tools.
 - [Type Alias: ResolvedToolEntry](./docs/api/appkit/TypeAlias.ResolvedToolEntry.md): Internal tool-index entry after a tool record has been resolved to a dispatchable form.
+- [Type Alias: ResourceFieldEntry](./docs/api/appkit/TypeAlias.ResourceFieldEntry.md)
 - [Type Alias: ResourcePermission](./docs/api/appkit/TypeAlias.ResourcePermission.md): Union of all possible permission levels across all resource types.
 - [Type Alias: ServingFactory](./docs/api/appkit/TypeAlias.ServingFactory.md): Factory function returned by AppKit.serving.
 - [Type Alias: ToolRegistry](./docs/api/appkit/TypeAlias.ToolRegistry.md)

package/NOTICE.md

@@ -68,6 +68,7 @@ This Software contains code from the following open source projects:
 | [input-otp](https://www.npmjs.com/package/input-otp) | 1.4.2 | MIT | https://input-otp.rodz.dev/ |
 | [js-yaml](https://www.npmjs.com/package/js-yaml) | 3.14.2, 4.1.1 | MIT | https://github.com/nodeca/js-yaml#readme |
 | [lucide-react](https://www.npmjs.com/package/lucide-react) | 0.554.0 | ISC | https://lucide.dev |
+| [magic-string](https://www.npmjs.com/package/magic-string) | 0.30.21 | MIT | https://github.com/Rich-Harris/magic-string#readme |
 | [marked](https://www.npmjs.com/package/marked) | 16.4.2, 17.0.3 | MIT | https://marked.js.org |
 | [next-themes](https://www.npmjs.com/package/next-themes) | 0.4.6 | MIT | https://github.com/pacocoursey/next-themes#readme |
 | [obug](https://www.npmjs.com/package/obug) | 2.1.1 | MIT | https://github.com/sxzz/obug#readme |

package/dist/appkit/package.js

@@ -1,6 +1,6 @@
 //#region package.json
 var name = "@databricks/appkit";
-var version = "0.36.0";
+var version = "0.38.0";
 
 //#endregion
 export { name, version };

package/dist/cache/index.js

@@ -2,7 +2,7 @@ import { createLogger } from "../logging/logger.js";
 import { AppKitError } from "../errors/base.js";
 import { ExecutionError } from "../errors/execution.js";
 import { InitializationError } from "../errors/initialization.js";
-import { init_errors } from "../errors/index.js";
+import "../errors/index.js";
 import { createLakebasePool } from "../connectors/lakebase/index.js";
 import { TelemetryManager } from "../telemetry/telemetry-manager.js";
 import { SpanStatusCode } from "../telemetry/index.js";
@@ -15,7 +15,6 @@ import { createHash } from "node:crypto";
 import { ApiError, WorkspaceClient } from "@databricks/sdk-experimental";
 
 //#region src/cache/index.ts
-init_errors();
 const logger = createLogger("cache");
 /**
 * Cache manager class to handle cache operations.

package/dist/cache/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../src/cache/index.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { ApiError, WorkspaceClient } from \"@databricks/sdk-experimental\";\nimport type { CacheConfig, CacheEntry, CacheStorage } from \"shared\";\nimport { createLakebasePool } from \"../connectors/lakebase\";\nimport { AppKitError, ExecutionError, InitializationError } from \"../errors\";\nimport { createLogger } from \"../logging/logger\";\nimport type { Counter, TelemetryProvider } from \"../telemetry\";\nimport { SpanStatusCode, TelemetryManager } from \"../telemetry\";\nimport { deepMerge } from \"../utils\";\nimport { cacheDefaults } from \"./defaults\";\nimport { InMemoryStorage, PersistentStorage } from \"./storage\";\n\nconst logger = createLogger(\"cache\");\n\n/**\n * Cache manager class to handle cache operations.\n * Can be used with in-memory storage or persistent storage (Lakebase).\n *\n * The cache is automatically initialized by AppKit. Use `getInstanceSync()` to access\n * the singleton instance after initialization.\n *\n * @internal\n * @example\n * ```typescript\n * const cache = CacheManager.getInstanceSync();\n * const result = await cache.getOrExecute([\"users\", userId], () => fetchUser(userId), userKey);\n * ```\n */\nexport class CacheManager {\n  private static readonly MIN_CLEANUP_INTERVAL_MS = 60_000;\n  private readonly name: string = \"cache-manager\";\n  private static instance: CacheManager | null = null;\n  private static initPromise: Promise<CacheManager> | null = null;\n\n  private storage: CacheStorage;\n  private config: CacheConfig;\n  private inFlightRequests: Map<string, Promise<unknown>>;\n  private cleanupInProgress: boolean;\n  private lastCleanupAttempt: number;\n\n  private telemetry: TelemetryProvider;\n  private telemetryMetrics: {\n    cacheHitCount: Counter;\n    cacheMissCount: Counter;\n  };\n\n  private constructor(storage: CacheStorage, config: CacheConfig) {\n    this.storage = storage;\n    this.config = config;\n    this.inFlightRequests = new Map();\n    this.cleanupInProgress = false;\n    this.lastCleanupAttempt = 0;\n\n    this.telemetry = TelemetryManager.getProvider(\n      this.name,\n      this.config.telemetry,\n    );\n    this.telemetryMetrics = {\n      cacheHitCount: this.telemetry.getMeter().createCounter(\"cache.hit\", {\n        description: \"Total number of cache hits\",\n        unit: \"1\",\n      }),\n      cacheMissCount: this.telemetry.getMeter().createCounter(\"cache.miss\", {\n        description: \"Total number of cache misses\",\n        unit: \"1\",\n      }),\n    };\n  }\n\n  /**\n   * Get the singleton instance of the cache manager (sync version).\n   *\n   * Throws if not initialized - ensure AppKit.create() has completed first.\n   * @returns CacheManager instance\n   */\n  static getInstanceSync(): CacheManager {\n    if (!CacheManager.instance) {\n      throw InitializationError.notInitialized(\n        \"CacheManager\",\n        \"Ensure AppKit.create() has completed before accessing the cache\",\n      );\n    }\n\n    return CacheManager.instance;\n  }\n\n  /**\n   * Initialize and get the singleton instance of the cache manager.\n   * Called internally by AppKit - prefer `getInstanceSync()` for plugin access.\n   * @param userConfig - User configuration for the cache manager\n   * @returns CacheManager instance\n   * @internal\n   */\n  static async getInstance(\n    userConfig?: Partial<CacheConfig>,\n  ): Promise<CacheManager> {\n    if (CacheManager.instance) {\n      return CacheManager.instance;\n    }\n\n    if (!CacheManager.initPromise) {\n      CacheManager.initPromise = CacheManager.create(userConfig).then(\n        (instance) => {\n          CacheManager.instance = instance;\n          return instance;\n        },\n      );\n    }\n\n    return CacheManager.initPromise;\n  }\n\n  /**\n   * Create a new cache manager instance\n   *\n   * Storage selection logic:\n   * 1. If `storage` provided and healthy → use provided storage\n   * 2. If `storage` provided but unhealthy → fallback to InMemory (or disable if strictPersistence)\n   * 3. If no `storage` provided and Lakebase available → use Lakebase\n   * 4. If no `storage` provided and Lakebase unavailable → fallback to InMemory (or disable if strictPersistence)\n   *\n   * @param userConfig - User configuration for the cache manager\n   * @returns CacheManager instance\n   */\n  private static async create(\n    userConfig?: Partial<CacheConfig>,\n  ): Promise<CacheManager> {\n    const config = deepMerge(cacheDefaults, userConfig);\n\n    if (config.storage) {\n      const isHealthy = await config.storage.healthCheck();\n      if (isHealthy) {\n        return new CacheManager(config.storage, config);\n      }\n\n      if (config.strictPersistence) {\n        const disabledConfig = { ...config, enabled: false };\n        return new CacheManager(\n          new InMemoryStorage(disabledConfig),\n          disabledConfig,\n        );\n      }\n\n      return new CacheManager(new InMemoryStorage(config), config);\n    }\n\n    // try to use lakebase storage\n    try {\n      const workspaceClient = new WorkspaceClient({});\n      const pool = createLakebasePool({ workspaceClient });\n      const persistentStorage = new PersistentStorage(config, pool);\n\n      const isHealthy = await persistentStorage.healthCheck();\n      if (isHealthy) {\n        await persistentStorage.initialize();\n        return new CacheManager(persistentStorage, config);\n      }\n\n      // Health check failed, close the pool and fallback\n      await pool.end();\n    } catch {\n      // lakebase unavailable, continue with in-memory storage\n    }\n\n    if (config.strictPersistence) {\n      const disabledConfig = { ...config, enabled: false };\n      return new CacheManager(\n        new InMemoryStorage(disabledConfig),\n        disabledConfig,\n      );\n    }\n\n    return new CacheManager(new InMemoryStorage(config), config);\n  }\n\n  /**\n   * Get or execute a function and cache the result\n   * @param key - Cache key\n   * @param fn - Function to execute\n   * @param userKey - User key\n   * @param options - Options for the cache\n   * @returns Promise of the result\n   */\n  async getOrExecute<T>(\n    key: (string | number | object)[],\n    fn: () => Promise<T>,\n    userKey: string,\n    options?: { ttl?: number },\n  ): Promise<T> {\n    if (!this.config.enabled) return fn();\n\n    const cacheKey = this.generateKey(key, userKey);\n\n    return this.telemetry.startActiveSpan(\n      \"cache.getOrExecute\",\n      {\n        attributes: {\n          \"cache.key\": cacheKey,\n          \"cache.enabled\": this.config.enabled,\n          \"cache.persistent\": this.storage.isPersistent(),\n        },\n      },\n      async (span) => {\n        try {\n          const cached = await this.getValid<T>(cacheKey);\n          if (cached !== null) {\n            span.setAttribute(\"cache.hit\", true);\n            span.setStatus({ code: SpanStatusCode.OK });\n            this.telemetryMetrics.cacheHitCount.add(1, {\n              \"cache.key\": cacheKey,\n            });\n\n            logger.event()?.setExecution({\n              cache_hit: true,\n              cache_key: cacheKey,\n            });\n\n            return cached.value;\n          }\n\n          // check if the value is being processed by another request\n          const inFlight = this.inFlightRequests.get(cacheKey);\n          if (inFlight) {\n            span.setAttribute(\"cache.hit\", true);\n            span.setAttribute(\"cache.deduplication\", true);\n            span.addEvent(\"cache.deduplication_used\", {\n              \"cache.key\": cacheKey,\n            });\n            span.setStatus({ code: SpanStatusCode.OK });\n            this.telemetryMetrics.cacheHitCount.add(1, {\n              \"cache.key\": cacheKey,\n              \"cache.deduplication\": \"true\",\n            });\n\n            logger.event()?.setExecution({\n              cache_hit: true,\n              cache_key: cacheKey,\n              cache_deduplication: true,\n            });\n\n            span.end();\n            return inFlight as Promise<T>;\n          }\n\n          // cache miss - execute function\n          span.setAttribute(\"cache.hit\", false);\n          span.addEvent(\"cache.miss\", { \"cache.key\": cacheKey });\n          this.telemetryMetrics.cacheMissCount.add(1, {\n            \"cache.key\": cacheKey,\n          });\n\n          logger.event()?.setExecution({\n            cache_hit: false,\n            cache_key: cacheKey,\n          });\n\n          const promise = fn()\n            .then(async (result) => {\n              await this.set(cacheKey, result, options);\n              span.addEvent(\"cache.value_stored\", {\n                \"cache.key\": cacheKey,\n                \"cache.ttl\": options?.ttl ?? this.config.ttl ?? 3600,\n              });\n              return result;\n            })\n            .catch((error) => {\n              span.recordException(error);\n              span.setStatus({ code: SpanStatusCode.ERROR });\n              // Preserve AppKit errors and Databricks API errors (with status codes)\n              // so route handlers can map them to proper HTTP responses.\n              if (error instanceof AppKitError || error instanceof ApiError) {\n                throw error;\n              }\n              throw ExecutionError.statementFailed(\n                error instanceof Error ? error.message : String(error),\n              );\n            })\n            .finally(() => {\n              this.inFlightRequests.delete(cacheKey);\n            });\n\n          this.inFlightRequests.set(cacheKey, promise);\n\n          const result = await promise;\n          span.setStatus({ code: SpanStatusCode.OK });\n          return result;\n        } catch (error) {\n          span.recordException(error as Error);\n          span.setStatus({ code: SpanStatusCode.ERROR });\n          throw error;\n        } finally {\n          span.end();\n        }\n      },\n      { name: this.name, includePrefix: true },\n    );\n  }\n\n  /**\n   * Get a cached value\n   * @param key - Cache key\n   * @returns Promise of the value or null if not found or expired\n   */\n  async get<T>(key: string): Promise<T | null> {\n    if (!this.config.enabled) return null;\n\n    // probabilistic cleanup trigger\n    this.maybeCleanup();\n\n    const entry = await this.getValid<T>(key);\n    return entry?.value ?? null;\n  }\n\n  /**\n   * Get a cached entry only if it has not expired.\n   * Returns null on miss or expired (and deletes the expired entry).\n   *\n   * Storage implementations return entries unconditionally — expiry handling\n   * lives at the CacheManager layer.\n   */\n  private async getValid<T>(key: string): Promise<CacheEntry<T> | null> {\n    const entry = await this.storage.get<T>(key);\n    if (!entry) return null;\n\n    if (Date.now() > entry.expiry) {\n      await this.storage.delete(key);\n      return null;\n    }\n    return entry;\n  }\n\n  /** Probabilistically trigger cleanup of expired entries (fire-and-forget) */\n  private maybeCleanup(): void {\n    if (this.cleanupInProgress) return;\n    if (!this.storage.isPersistent()) return;\n    const now = Date.now();\n    if (now - this.lastCleanupAttempt < CacheManager.MIN_CLEANUP_INTERVAL_MS)\n      return;\n\n    const probability = this.config.cleanupProbability ?? 0.01;\n\n    if (Math.random() > probability) return;\n\n    this.lastCleanupAttempt = now;\n\n    this.cleanupInProgress = true;\n    (this.storage as PersistentStorage)\n      .cleanupExpired()\n      .catch((error) => {\n        logger.debug(\"Error cleaning up expired entries: %O\", error);\n      })\n      .finally(() => {\n        this.cleanupInProgress = false;\n      });\n  }\n\n  /**\n   * Set a value in the cache\n   * @param key - Cache key\n   * @param value - Value to set\n   * @param options - Options for the cache\n   * @returns Promise of the result\n   */\n  async set<T>(\n    key: string,\n    value: T,\n    options?: { ttl?: number },\n  ): Promise<void> {\n    if (!this.config.enabled) return;\n\n    const ttl = options?.ttl ?? this.config.ttl ?? 3600;\n    const expiryTime = Date.now() + ttl * 1000;\n    await this.storage.set(key, { value, expiry: expiryTime });\n  }\n\n  /**\n   * Delete a value from the cache\n   * @param key - Cache key\n   * @returns Promise of the result\n   */\n  async delete(key: string): Promise<void> {\n    if (!this.config.enabled) return;\n    await this.storage.delete(key);\n  }\n\n  /** Clear the cache */\n  async clear(): Promise<void> {\n    await this.storage.clear();\n    this.inFlightRequests.clear();\n  }\n\n  /**\n   * Check if a value exists in the cache\n   * @param key - Cache key\n   * @returns Promise of true if the value exists, false otherwise\n   */\n  async has(key: string): Promise<boolean> {\n    if (!this.config.enabled) return false;\n\n    const entry = await this.getValid(key);\n    return entry !== null;\n  }\n\n  /**\n   * Generate a cache key\n   * @param parts - Parts of the key\n   * @param userKey - User key\n   * @returns Cache key\n   */\n  generateKey(parts: (string | number | object)[], userKey: string): string {\n    const allParts = [userKey, ...parts];\n    const serialized = JSON.stringify(allParts);\n    return createHash(\"sha256\").update(serialized).digest(\"hex\");\n  }\n\n  /** Close the cache */\n  async close(): Promise<void> {\n    await this.storage.close();\n  }\n\n  /**\n   * Check if the storage is healthy\n   * @returns Promise of true if the storage is healthy, false otherwise\n   */\n  async isStorageHealthy(): Promise<boolean> {\n    return this.storage.healthCheck();\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;aAI6E;AAQ7E,MAAM,SAAS,aAAa,QAAQ;;;;;;;;;;;;;;;AAgBpC,IAAa,eAAb,MAAa,aAAa;CACxB,OAAwB,0BAA0B;CAClD,AAAiB,OAAe;CAChC,OAAe,WAAgC;CAC/C,OAAe,cAA4C;CAE3D,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CAER,AAAQ;CACR,AAAQ;CAKR,AAAQ,YAAY,SAAuB,QAAqB;AAC9D,OAAK,UAAU;AACf,OAAK,SAAS;AACd,OAAK,mCAAmB,IAAI,KAAK;AACjC,OAAK,oBAAoB;AACzB,OAAK,qBAAqB;AAE1B,OAAK,YAAY,iBAAiB,YAChC,KAAK,MACL,KAAK,OAAO,UACb;AACD,OAAK,mBAAmB;GACtB,eAAe,KAAK,UAAU,UAAU,CAAC,cAAc,aAAa;IAClE,aAAa;IACb,MAAM;IACP,CAAC;GACF,gBAAgB,KAAK,UAAU,UAAU,CAAC,cAAc,cAAc;IACpE,aAAa;IACb,MAAM;IACP,CAAC;GACH;;;;;;;;CASH,OAAO,kBAAgC;AACrC,MAAI,CAAC,aAAa,SAChB,OAAM,oBAAoB,eACxB,gBACA,kEACD;AAGH,SAAO,aAAa;;;;;;;;;CAUtB,aAAa,YACX,YACuB;AACvB,MAAI,aAAa,SACf,QAAO,aAAa;AAGtB,MAAI,CAAC,aAAa,YAChB,cAAa,cAAc,aAAa,OAAO,WAAW,CAAC,MACxD,aAAa;AACZ,gBAAa,WAAW;AACxB,UAAO;IAEV;AAGH,SAAO,aAAa;;;;;;;;;;;;;;CAetB,aAAqB,OACnB,YACuB;EACvB,MAAM,SAAS,UAAU,eAAe,WAAW;AAEnD,MAAI,OAAO,SAAS;AAElB,OADkB,MAAM,OAAO,QAAQ,aAAa,CAElD,QAAO,IAAI,aAAa,OAAO,SAAS,OAAO;AAGjD,OAAI,OAAO,mBAAmB;IAC5B,MAAM,iBAAiB;KAAE,GAAG;KAAQ,SAAS;KAAO;AACpD,WAAO,IAAI,aACT,IAAI,gBAAgB,eAAe,EACnC,eACD;;AAGH,UAAO,IAAI,aAAa,IAAI,gBAAgB,OAAO,EAAE,OAAO;;AAI9D,MAAI;GAEF,MAAM,OAAO,mBAAmB,EAAE,iBADV,IAAI,gBAAgB,EAAE,CAAC,EACI,CAAC;GACpD,MAAM,oBAAoB,IAAI,kBAAkB,QAAQ,KAAK;AAG7D,OADkB,MAAM,kBAAkB,aAAa,EACxC;AACb,UAAM,kBAAkB,YAAY;AACpC,WAAO,IAAI,aAAa,mBAAmB,OAAO;;AAIpD,SAAM,KAAK,KAAK;UACV;AAIR,MAAI,OAAO,mBAAmB;GAC5B,MAAM,iBAAiB;IAAE,GAAG;IAAQ,SAAS;IAAO;AACpD,UAAO,IAAI,aACT,IAAI,gBAAgB,eAAe,EACnC,eACD;;AAGH,SAAO,IAAI,aAAa,IAAI,gBAAgB,OAAO,EAAE,OAAO;;;;;;;;;;CAW9D,MAAM,aACJ,KACA,IACA,SACA,SACY;AACZ,MAAI,CAAC,KAAK,OAAO,QAAS,QAAO,IAAI;EAErC,MAAM,WAAW,KAAK,YAAY,KAAK,QAAQ;AAE/C,SAAO,KAAK,UAAU,gBACpB,sBACA,EACE,YAAY;GACV,aAAa;GACb,iBAAiB,KAAK,OAAO;GAC7B,oBAAoB,KAAK,QAAQ,cAAc;GAChD,EACF,EACD,OAAO,SAAS;AACd,OAAI;IACF,MAAM,SAAS,MAAM,KAAK,SAAY,SAAS;AAC/C,QAAI,WAAW,MAAM;AACnB,UAAK,aAAa,aAAa,KAAK;AACpC,UAAK,UAAU,EAAE,MAAM,eAAe,IAAI,CAAC;AAC3C,UAAK,iBAAiB,cAAc,IAAI,GAAG,EACzC,aAAa,UACd,CAAC;AAEF,YAAO,OAAO,EAAE,aAAa;MAC3B,WAAW;MACX,WAAW;MACZ,CAAC;AAEF,YAAO,OAAO;;IAIhB,MAAM,WAAW,KAAK,iBAAiB,IAAI,SAAS;AACpD,QAAI,UAAU;AACZ,UAAK,aAAa,aAAa,KAAK;AACpC,UAAK,aAAa,uBAAuB,KAAK;AAC9C,UAAK,SAAS,4BAA4B,EACxC,aAAa,UACd,CAAC;AACF,UAAK,UAAU,EAAE,MAAM,eAAe,IAAI,CAAC;AAC3C,UAAK,iBAAiB,cAAc,IAAI,GAAG;MACzC,aAAa;MACb,uBAAuB;MACxB,CAAC;AAEF,YAAO,OAAO,EAAE,aAAa;MAC3B,WAAW;MACX,WAAW;MACX,qBAAqB;MACtB,CAAC;AAEF,UAAK,KAAK;AACV,YAAO;;AAIT,SAAK,aAAa,aAAa,MAAM;AACrC,SAAK,SAAS,cAAc,EAAE,aAAa,UAAU,CAAC;AACtD,SAAK,iBAAiB,eAAe,IAAI,GAAG,EAC1C,aAAa,UACd,CAAC;AAEF,WAAO,OAAO,EAAE,aAAa;KAC3B,WAAW;KACX,WAAW;KACZ,CAAC;IAEF,MAAM,UAAU,IAAI,CACjB,KAAK,OAAO,WAAW;AACtB,WAAM,KAAK,IAAI,UAAU,QAAQ,QAAQ;AACzC,UAAK,SAAS,sBAAsB;MAClC,aAAa;MACb,aAAa,SAAS,OAAO,KAAK,OAAO,OAAO;MACjD,CAAC;AACF,YAAO;MACP,CACD,OAAO,UAAU;AAChB,UAAK,gBAAgB,MAAM;AAC3B,UAAK,UAAU,EAAE,MAAM,eAAe,OAAO,CAAC;AAG9C,SAAI,iBAAiB,eAAe,iBAAiB,SACnD,OAAM;AAER,WAAM,eAAe,gBACnB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CACvD;MACD,CACD,cAAc;AACb,UAAK,iBAAiB,OAAO,SAAS;MACtC;AAEJ,SAAK,iBAAiB,IAAI,UAAU,QAAQ;IAE5C,MAAM,SAAS,MAAM;AACrB,SAAK,UAAU,EAAE,MAAM,eAAe,IAAI,CAAC;AAC3C,WAAO;YACA,OAAO;AACd,SAAK,gBAAgB,MAAe;AACpC,SAAK,UAAU,EAAE,MAAM,eAAe,OAAO,CAAC;AAC9C,UAAM;aACE;AACR,SAAK,KAAK;;KAGd;GAAE,MAAM,KAAK;GAAM,eAAe;GAAM,CACzC;;;;;;;CAQH,MAAM,IAAO,KAAgC;AAC3C,MAAI,CAAC,KAAK,OAAO,QAAS,QAAO;AAGjC,OAAK,cAAc;AAGnB,UADc,MAAM,KAAK,SAAY,IAAI,GAC3B,SAAS;;;;;;;;;CAUzB,MAAc,SAAY,KAA4C;EACpE,MAAM,QAAQ,MAAM,KAAK,QAAQ,IAAO,IAAI;AAC5C,MAAI,CAAC,MAAO,QAAO;AAEnB,MAAI,KAAK,KAAK,GAAG,MAAM,QAAQ;AAC7B,SAAM,KAAK,QAAQ,OAAO,IAAI;AAC9B,UAAO;;AAET,SAAO;;;CAIT,AAAQ,eAAqB;AAC3B,MAAI,KAAK,kBAAmB;AAC5B,MAAI,CAAC,KAAK,QAAQ,cAAc,CAAE;EAClC,MAAM,MAAM,KAAK,KAAK;AACtB,MAAI,MAAM,KAAK,qBAAqB,aAAa,wBAC/C;EAEF,MAAM,cAAc,KAAK,OAAO,sBAAsB;AAEtD,MAAI,KAAK,QAAQ,GAAG,YAAa;AAEjC,OAAK,qBAAqB;AAE1B,OAAK,oBAAoB;AACzB,EAAC,KAAK,QACH,gBAAgB,CAChB,OAAO,UAAU;AAChB,UAAO,MAAM,yCAAyC,MAAM;IAC5D,CACD,cAAc;AACb,QAAK,oBAAoB;IACzB;;;;;;;;;CAUN,MAAM,IACJ,KACA,OACA,SACe;AACf,MAAI,CAAC,KAAK,OAAO,QAAS;EAE1B,MAAM,MAAM,SAAS,OAAO,KAAK,OAAO,OAAO;EAC/C,MAAM,aAAa,KAAK,KAAK,GAAG,MAAM;AACtC,QAAM,KAAK,QAAQ,IAAI,KAAK;GAAE;GAAO,QAAQ;GAAY,CAAC;;;;;;;CAQ5D,MAAM,OAAO,KAA4B;AACvC,MAAI,CAAC,KAAK,OAAO,QAAS;AAC1B,QAAM,KAAK,QAAQ,OAAO,IAAI;;;CAIhC,MAAM,QAAuB;AAC3B,QAAM,KAAK,QAAQ,OAAO;AAC1B,OAAK,iBAAiB,OAAO;;;;;;;CAQ/B,MAAM,IAAI,KAA+B;AACvC,MAAI,CAAC,KAAK,OAAO,QAAS,QAAO;AAGjC,SADc,MAAM,KAAK,SAAS,IAAI,KACrB;;;;;;;;CASnB,YAAY,OAAqC,SAAyB;EACxE,MAAM,WAAW,CAAC,SAAS,GAAG,MAAM;EACpC,MAAM,aAAa,KAAK,UAAU,SAAS;AAC3C,SAAO,WAAW,SAAS,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM;;;CAI9D,MAAM,QAAuB;AAC3B,QAAM,KAAK,QAAQ,OAAO;;;;;;CAO5B,MAAM,mBAAqC;AACzC,SAAO,KAAK,QAAQ,aAAa"}
+{"version":3,"file":"index.js","names":[],"sources":["../../src/cache/index.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { ApiError, WorkspaceClient } from \"@databricks/sdk-experimental\";\nimport type { CacheConfig, CacheEntry, CacheStorage } from \"shared\";\nimport { createLakebasePool } from \"../connectors/lakebase\";\nimport { AppKitError, ExecutionError, InitializationError } from \"../errors\";\nimport { createLogger } from \"../logging/logger\";\nimport type { Counter, TelemetryProvider } from \"../telemetry\";\nimport { SpanStatusCode, TelemetryManager } from \"../telemetry\";\nimport { deepMerge } from \"../utils\";\nimport { cacheDefaults } from \"./defaults\";\nimport { InMemoryStorage, PersistentStorage } from \"./storage\";\n\nconst logger = createLogger(\"cache\");\n\n/**\n * Cache manager class to handle cache operations.\n * Can be used with in-memory storage or persistent storage (Lakebase).\n *\n * The cache is automatically initialized by AppKit. Use `getInstanceSync()` to access\n * the singleton instance after initialization.\n *\n * @internal\n * @example\n * ```typescript\n * const cache = CacheManager.getInstanceSync();\n * const result = await cache.getOrExecute([\"users\", userId], () => fetchUser(userId), userKey);\n * ```\n */\nexport class CacheManager {\n  private static readonly MIN_CLEANUP_INTERVAL_MS = 60_000;\n  private readonly name: string = \"cache-manager\";\n  private static instance: CacheManager | null = null;\n  private static initPromise: Promise<CacheManager> | null = null;\n\n  private storage: CacheStorage;\n  private config: CacheConfig;\n  private inFlightRequests: Map<string, Promise<unknown>>;\n  private cleanupInProgress: boolean;\n  private lastCleanupAttempt: number;\n\n  private telemetry: TelemetryProvider;\n  private telemetryMetrics: {\n    cacheHitCount: Counter;\n    cacheMissCount: Counter;\n  };\n\n  private constructor(storage: CacheStorage, config: CacheConfig) {\n    this.storage = storage;\n    this.config = config;\n    this.inFlightRequests = new Map();\n    this.cleanupInProgress = false;\n    this.lastCleanupAttempt = 0;\n\n    this.telemetry = TelemetryManager.getProvider(\n      this.name,\n      this.config.telemetry,\n    );\n    this.telemetryMetrics = {\n      cacheHitCount: this.telemetry.getMeter().createCounter(\"cache.hit\", {\n        description: \"Total number of cache hits\",\n        unit: \"1\",\n      }),\n      cacheMissCount: this.telemetry.getMeter().createCounter(\"cache.miss\", {\n        description: \"Total number of cache misses\",\n        unit: \"1\",\n      }),\n    };\n  }\n\n  /**\n   * Get the singleton instance of the cache manager (sync version).\n   *\n   * Throws if not initialized - ensure AppKit.create() has completed first.\n   * @returns CacheManager instance\n   */\n  static getInstanceSync(): CacheManager {\n    if (!CacheManager.instance) {\n      throw InitializationError.notInitialized(\n        \"CacheManager\",\n        \"Ensure AppKit.create() has completed before accessing the cache\",\n      );\n    }\n\n    return CacheManager.instance;\n  }\n\n  /**\n   * Initialize and get the singleton instance of the cache manager.\n   * Called internally by AppKit - prefer `getInstanceSync()` for plugin access.\n   * @param userConfig - User configuration for the cache manager\n   * @returns CacheManager instance\n   * @internal\n   */\n  static async getInstance(\n    userConfig?: Partial<CacheConfig>,\n  ): Promise<CacheManager> {\n    if (CacheManager.instance) {\n      return CacheManager.instance;\n    }\n\n    if (!CacheManager.initPromise) {\n      CacheManager.initPromise = CacheManager.create(userConfig).then(\n        (instance) => {\n          CacheManager.instance = instance;\n          return instance;\n        },\n      );\n    }\n\n    return CacheManager.initPromise;\n  }\n\n  /**\n   * Create a new cache manager instance\n   *\n   * Storage selection logic:\n   * 1. If `storage` provided and healthy → use provided storage\n   * 2. If `storage` provided but unhealthy → fallback to InMemory (or disable if strictPersistence)\n   * 3. If no `storage` provided and Lakebase available → use Lakebase\n   * 4. If no `storage` provided and Lakebase unavailable → fallback to InMemory (or disable if strictPersistence)\n   *\n   * @param userConfig - User configuration for the cache manager\n   * @returns CacheManager instance\n   */\n  private static async create(\n    userConfig?: Partial<CacheConfig>,\n  ): Promise<CacheManager> {\n    const config = deepMerge(cacheDefaults, userConfig);\n\n    if (config.storage) {\n      const isHealthy = await config.storage.healthCheck();\n      if (isHealthy) {\n        return new CacheManager(config.storage, config);\n      }\n\n      if (config.strictPersistence) {\n        const disabledConfig = { ...config, enabled: false };\n        return new CacheManager(\n          new InMemoryStorage(disabledConfig),\n          disabledConfig,\n        );\n      }\n\n      return new CacheManager(new InMemoryStorage(config), config);\n    }\n\n    // try to use lakebase storage\n    try {\n      const workspaceClient = new WorkspaceClient({});\n      const pool = createLakebasePool({ workspaceClient });\n      const persistentStorage = new PersistentStorage(config, pool);\n\n      const isHealthy = await persistentStorage.healthCheck();\n      if (isHealthy) {\n        await persistentStorage.initialize();\n        return new CacheManager(persistentStorage, config);\n      }\n\n      // Health check failed, close the pool and fallback\n      await pool.end();\n    } catch {\n      // lakebase unavailable, continue with in-memory storage\n    }\n\n    if (config.strictPersistence) {\n      const disabledConfig = { ...config, enabled: false };\n      return new CacheManager(\n        new InMemoryStorage(disabledConfig),\n        disabledConfig,\n      );\n    }\n\n    return new CacheManager(new InMemoryStorage(config), config);\n  }\n\n  /**\n   * Get or execute a function and cache the result\n   * @param key - Cache key\n   * @param fn - Function to execute\n   * @param userKey - User key\n   * @param options - Options for the cache\n   * @returns Promise of the result\n   */\n  async getOrExecute<T>(\n    key: (string | number | object)[],\n    fn: () => Promise<T>,\n    userKey: string,\n    options?: { ttl?: number },\n  ): Promise<T> {\n    if (!this.config.enabled) return fn();\n\n    const cacheKey = this.generateKey(key, userKey);\n\n    return this.telemetry.startActiveSpan(\n      \"cache.getOrExecute\",\n      {\n        attributes: {\n          \"cache.key\": cacheKey,\n          \"cache.enabled\": this.config.enabled,\n          \"cache.persistent\": this.storage.isPersistent(),\n        },\n      },\n      async (span) => {\n        try {\n          const cached = await this.getValid<T>(cacheKey);\n          if (cached !== null) {\n            span.setAttribute(\"cache.hit\", true);\n            span.setStatus({ code: SpanStatusCode.OK });\n            this.telemetryMetrics.cacheHitCount.add(1, {\n              \"cache.key\": cacheKey,\n            });\n\n            logger.event()?.setExecution({\n              cache_hit: true,\n              cache_key: cacheKey,\n            });\n\n            return cached.value;\n          }\n\n          // check if the value is being processed by another request\n          const inFlight = this.inFlightRequests.get(cacheKey);\n          if (inFlight) {\n            span.setAttribute(\"cache.hit\", true);\n            span.setAttribute(\"cache.deduplication\", true);\n            span.addEvent(\"cache.deduplication_used\", {\n              \"cache.key\": cacheKey,\n            });\n            span.setStatus({ code: SpanStatusCode.OK });\n            this.telemetryMetrics.cacheHitCount.add(1, {\n              \"cache.key\": cacheKey,\n              \"cache.deduplication\": \"true\",\n            });\n\n            logger.event()?.setExecution({\n              cache_hit: true,\n              cache_key: cacheKey,\n              cache_deduplication: true,\n            });\n\n            span.end();\n            return inFlight as Promise<T>;\n          }\n\n          // cache miss - execute function\n          span.setAttribute(\"cache.hit\", false);\n          span.addEvent(\"cache.miss\", { \"cache.key\": cacheKey });\n          this.telemetryMetrics.cacheMissCount.add(1, {\n            \"cache.key\": cacheKey,\n          });\n\n          logger.event()?.setExecution({\n            cache_hit: false,\n            cache_key: cacheKey,\n          });\n\n          const promise = fn()\n            .then(async (result) => {\n              await this.set(cacheKey, result, options);\n              span.addEvent(\"cache.value_stored\", {\n                \"cache.key\": cacheKey,\n                \"cache.ttl\": options?.ttl ?? this.config.ttl ?? 3600,\n              });\n              return result;\n            })\n            .catch((error) => {\n              span.recordException(error);\n              span.setStatus({ code: SpanStatusCode.ERROR });\n              // Preserve AppKit errors and Databricks API errors (with status codes)\n              // so route handlers can map them to proper HTTP responses.\n              if (error instanceof AppKitError || error instanceof ApiError) {\n                throw error;\n              }\n              throw ExecutionError.statementFailed(\n                error instanceof Error ? error.message : String(error),\n              );\n            })\n            .finally(() => {\n              this.inFlightRequests.delete(cacheKey);\n            });\n\n          this.inFlightRequests.set(cacheKey, promise);\n\n          const result = await promise;\n          span.setStatus({ code: SpanStatusCode.OK });\n          return result;\n        } catch (error) {\n          span.recordException(error as Error);\n          span.setStatus({ code: SpanStatusCode.ERROR });\n          throw error;\n        } finally {\n          span.end();\n        }\n      },\n      { name: this.name, includePrefix: true },\n    );\n  }\n\n  /**\n   * Get a cached value\n   * @param key - Cache key\n   * @returns Promise of the value or null if not found or expired\n   */\n  async get<T>(key: string): Promise<T | null> {\n    if (!this.config.enabled) return null;\n\n    // probabilistic cleanup trigger\n    this.maybeCleanup();\n\n    const entry = await this.getValid<T>(key);\n    return entry?.value ?? null;\n  }\n\n  /**\n   * Get a cached entry only if it has not expired.\n   * Returns null on miss or expired (and deletes the expired entry).\n   *\n   * Storage implementations return entries unconditionally — expiry handling\n   * lives at the CacheManager layer.\n   */\n  private async getValid<T>(key: string): Promise<CacheEntry<T> | null> {\n    const entry = await this.storage.get<T>(key);\n    if (!entry) return null;\n\n    if (Date.now() > entry.expiry) {\n      await this.storage.delete(key);\n      return null;\n    }\n    return entry;\n  }\n\n  /** Probabilistically trigger cleanup of expired entries (fire-and-forget) */\n  private maybeCleanup(): void {\n    if (this.cleanupInProgress) return;\n    if (!this.storage.isPersistent()) return;\n    const now = Date.now();\n    if (now - this.lastCleanupAttempt < CacheManager.MIN_CLEANUP_INTERVAL_MS)\n      return;\n\n    const probability = this.config.cleanupProbability ?? 0.01;\n\n    if (Math.random() > probability) return;\n\n    this.lastCleanupAttempt = now;\n\n    this.cleanupInProgress = true;\n    (this.storage as PersistentStorage)\n      .cleanupExpired()\n      .catch((error) => {\n        logger.debug(\"Error cleaning up expired entries: %O\", error);\n      })\n      .finally(() => {\n        this.cleanupInProgress = false;\n      });\n  }\n\n  /**\n   * Set a value in the cache\n   * @param key - Cache key\n   * @param value - Value to set\n   * @param options - Options for the cache\n   * @returns Promise of the result\n   */\n  async set<T>(\n    key: string,\n    value: T,\n    options?: { ttl?: number },\n  ): Promise<void> {\n    if (!this.config.enabled) return;\n\n    const ttl = options?.ttl ?? this.config.ttl ?? 3600;\n    const expiryTime = Date.now() + ttl * 1000;\n    await this.storage.set(key, { value, expiry: expiryTime });\n  }\n\n  /**\n   * Delete a value from the cache\n   * @param key - Cache key\n   * @returns Promise of the result\n   */\n  async delete(key: string): Promise<void> {\n    if (!this.config.enabled) return;\n    await this.storage.delete(key);\n  }\n\n  /** Clear the cache */\n  async clear(): Promise<void> {\n    await this.storage.clear();\n    this.inFlightRequests.clear();\n  }\n\n  /**\n   * Check if a value exists in the cache\n   * @param key - Cache key\n   * @returns Promise of true if the value exists, false otherwise\n   */\n  async has(key: string): Promise<boolean> {\n    if (!this.config.enabled) return false;\n\n    const entry = await this.getValid(key);\n    return entry !== null;\n  }\n\n  /**\n   * Generate a cache key\n   * @param parts - Parts of the key\n   * @param userKey - User key\n   * @returns Cache key\n   */\n  generateKey(parts: (string | number | object)[], userKey: string): string {\n    const allParts = [userKey, ...parts];\n    const serialized = JSON.stringify(allParts);\n    return createHash(\"sha256\").update(serialized).digest(\"hex\");\n  }\n\n  /** Close the cache */\n  async close(): Promise<void> {\n    await this.storage.close();\n  }\n\n  /**\n   * Check if the storage is healthy\n   * @returns Promise of true if the storage is healthy, false otherwise\n   */\n  async isStorageHealthy(): Promise<boolean> {\n    return this.storage.healthCheck();\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAYA,MAAM,SAAS,aAAa,QAAQ;;;;;;;;;;;;;;;AAgBpC,IAAa,eAAb,MAAa,aAAa;CACxB,OAAwB,0BAA0B;CAClD,AAAiB,OAAe;CAChC,OAAe,WAAgC;CAC/C,OAAe,cAA4C;CAE3D,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CAER,AAAQ;CACR,AAAQ;CAKR,AAAQ,YAAY,SAAuB,QAAqB;AAC9D,OAAK,UAAU;AACf,OAAK,SAAS;AACd,OAAK,mCAAmB,IAAI,KAAK;AACjC,OAAK,oBAAoB;AACzB,OAAK,qBAAqB;AAE1B,OAAK,YAAY,iBAAiB,YAChC,KAAK,MACL,KAAK,OAAO,UACb;AACD,OAAK,mBAAmB;GACtB,eAAe,KAAK,UAAU,UAAU,CAAC,cAAc,aAAa;IAClE,aAAa;IACb,MAAM;IACP,CAAC;GACF,gBAAgB,KAAK,UAAU,UAAU,CAAC,cAAc,cAAc;IACpE,aAAa;IACb,MAAM;IACP,CAAC;GACH;;;;;;;;CASH,OAAO,kBAAgC;AACrC,MAAI,CAAC,aAAa,SAChB,OAAM,oBAAoB,eACxB,gBACA,kEACD;AAGH,SAAO,aAAa;;;;;;;;;CAUtB,aAAa,YACX,YACuB;AACvB,MAAI,aAAa,SACf,QAAO,aAAa;AAGtB,MAAI,CAAC,aAAa,YAChB,cAAa,cAAc,aAAa,OAAO,WAAW,CAAC,MACxD,aAAa;AACZ,gBAAa,WAAW;AACxB,UAAO;IAEV;AAGH,SAAO,aAAa;;;;;;;;;;;;;;CAetB,aAAqB,OACnB,YACuB;EACvB,MAAM,SAAS,UAAU,eAAe,WAAW;AAEnD,MAAI,OAAO,SAAS;AAElB,OADkB,MAAM,OAAO,QAAQ,aAAa,CAElD,QAAO,IAAI,aAAa,OAAO,SAAS,OAAO;AAGjD,OAAI,OAAO,mBAAmB;IAC5B,MAAM,iBAAiB;KAAE,GAAG;KAAQ,SAAS;KAAO;AACpD,WAAO,IAAI,aACT,IAAI,gBAAgB,eAAe,EACnC,eACD;;AAGH,UAAO,IAAI,aAAa,IAAI,gBAAgB,OAAO,EAAE,OAAO;;AAI9D,MAAI;GAEF,MAAM,OAAO,mBAAmB,EAAE,iBADV,IAAI,gBAAgB,EAAE,CAAC,EACI,CAAC;GACpD,MAAM,oBAAoB,IAAI,kBAAkB,QAAQ,KAAK;AAG7D,OADkB,MAAM,kBAAkB,aAAa,EACxC;AACb,UAAM,kBAAkB,YAAY;AACpC,WAAO,IAAI,aAAa,mBAAmB,OAAO;;AAIpD,SAAM,KAAK,KAAK;UACV;AAIR,MAAI,OAAO,mBAAmB;GAC5B,MAAM,iBAAiB;IAAE,GAAG;IAAQ,SAAS;IAAO;AACpD,UAAO,IAAI,aACT,IAAI,gBAAgB,eAAe,EACnC,eACD;;AAGH,SAAO,IAAI,aAAa,IAAI,gBAAgB,OAAO,EAAE,OAAO;;;;;;;;;;CAW9D,MAAM,aACJ,KACA,IACA,SACA,SACY;AACZ,MAAI,CAAC,KAAK,OAAO,QAAS,QAAO,IAAI;EAErC,MAAM,WAAW,KAAK,YAAY,KAAK,QAAQ;AAE/C,SAAO,KAAK,UAAU,gBACpB,sBACA,EACE,YAAY;GACV,aAAa;GACb,iBAAiB,KAAK,OAAO;GAC7B,oBAAoB,KAAK,QAAQ,cAAc;GAChD,EACF,EACD,OAAO,SAAS;AACd,OAAI;IACF,MAAM,SAAS,MAAM,KAAK,SAAY,SAAS;AAC/C,QAAI,WAAW,MAAM;AACnB,UAAK,aAAa,aAAa,KAAK;AACpC,UAAK,UAAU,EAAE,MAAM,eAAe,IAAI,CAAC;AAC3C,UAAK,iBAAiB,cAAc,IAAI,GAAG,EACzC,aAAa,UACd,CAAC;AAEF,YAAO,OAAO,EAAE,aAAa;MAC3B,WAAW;MACX,WAAW;MACZ,CAAC;AAEF,YAAO,OAAO;;IAIhB,MAAM,WAAW,KAAK,iBAAiB,IAAI,SAAS;AACpD,QAAI,UAAU;AACZ,UAAK,aAAa,aAAa,KAAK;AACpC,UAAK,aAAa,uBAAuB,KAAK;AAC9C,UAAK,SAAS,4BAA4B,EACxC,aAAa,UACd,CAAC;AACF,UAAK,UAAU,EAAE,MAAM,eAAe,IAAI,CAAC;AAC3C,UAAK,iBAAiB,cAAc,IAAI,GAAG;MACzC,aAAa;MACb,uBAAuB;MACxB,CAAC;AAEF,YAAO,OAAO,EAAE,aAAa;MAC3B,WAAW;MACX,WAAW;MACX,qBAAqB;MACtB,CAAC;AAEF,UAAK,KAAK;AACV,YAAO;;AAIT,SAAK,aAAa,aAAa,MAAM;AACrC,SAAK,SAAS,cAAc,EAAE,aAAa,UAAU,CAAC;AACtD,SAAK,iBAAiB,eAAe,IAAI,GAAG,EAC1C,aAAa,UACd,CAAC;AAEF,WAAO,OAAO,EAAE,aAAa;KAC3B,WAAW;KACX,WAAW;KACZ,CAAC;IAEF,MAAM,UAAU,IAAI,CACjB,KAAK,OAAO,WAAW;AACtB,WAAM,KAAK,IAAI,UAAU,QAAQ,QAAQ;AACzC,UAAK,SAAS,sBAAsB;MAClC,aAAa;MACb,aAAa,SAAS,OAAO,KAAK,OAAO,OAAO;MACjD,CAAC;AACF,YAAO;MACP,CACD,OAAO,UAAU;AAChB,UAAK,gBAAgB,MAAM;AAC3B,UAAK,UAAU,EAAE,MAAM,eAAe,OAAO,CAAC;AAG9C,SAAI,iBAAiB,eAAe,iBAAiB,SACnD,OAAM;AAER,WAAM,eAAe,gBACnB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CACvD;MACD,CACD,cAAc;AACb,UAAK,iBAAiB,OAAO,SAAS;MACtC;AAEJ,SAAK,iBAAiB,IAAI,UAAU,QAAQ;IAE5C,MAAM,SAAS,MAAM;AACrB,SAAK,UAAU,EAAE,MAAM,eAAe,IAAI,CAAC;AAC3C,WAAO;YACA,OAAO;AACd,SAAK,gBAAgB,MAAe;AACpC,SAAK,UAAU,EAAE,MAAM,eAAe,OAAO,CAAC;AAC9C,UAAM;aACE;AACR,SAAK,KAAK;;KAGd;GAAE,MAAM,KAAK;GAAM,eAAe;GAAM,CACzC;;;;;;;CAQH,MAAM,IAAO,KAAgC;AAC3C,MAAI,CAAC,KAAK,OAAO,QAAS,QAAO;AAGjC,OAAK,cAAc;AAGnB,UADc,MAAM,KAAK,SAAY,IAAI,GAC3B,SAAS;;;;;;;;;CAUzB,MAAc,SAAY,KAA4C;EACpE,MAAM,QAAQ,MAAM,KAAK,QAAQ,IAAO,IAAI;AAC5C,MAAI,CAAC,MAAO,QAAO;AAEnB,MAAI,KAAK,KAAK,GAAG,MAAM,QAAQ;AAC7B,SAAM,KAAK,QAAQ,OAAO,IAAI;AAC9B,UAAO;;AAET,SAAO;;;CAIT,AAAQ,eAAqB;AAC3B,MAAI,KAAK,kBAAmB;AAC5B,MAAI,CAAC,KAAK,QAAQ,cAAc,CAAE;EAClC,MAAM,MAAM,KAAK,KAAK;AACtB,MAAI,MAAM,KAAK,qBAAqB,aAAa,wBAC/C;EAEF,MAAM,cAAc,KAAK,OAAO,sBAAsB;AAEtD,MAAI,KAAK,QAAQ,GAAG,YAAa;AAEjC,OAAK,qBAAqB;AAE1B,OAAK,oBAAoB;AACzB,EAAC,KAAK,QACH,gBAAgB,CAChB,OAAO,UAAU;AAChB,UAAO,MAAM,yCAAyC,MAAM;IAC5D,CACD,cAAc;AACb,QAAK,oBAAoB;IACzB;;;;;;;;;CAUN,MAAM,IACJ,KACA,OACA,SACe;AACf,MAAI,CAAC,KAAK,OAAO,QAAS;EAE1B,MAAM,MAAM,SAAS,OAAO,KAAK,OAAO,OAAO;EAC/C,MAAM,aAAa,KAAK,KAAK,GAAG,MAAM;AACtC,QAAM,KAAK,QAAQ,IAAI,KAAK;GAAE;GAAO,QAAQ;GAAY,CAAC;;;;;;;CAQ5D,MAAM,OAAO,KAA4B;AACvC,MAAI,CAAC,KAAK,OAAO,QAAS;AAC1B,QAAM,KAAK,QAAQ,OAAO,IAAI;;;CAIhC,MAAM,QAAuB;AAC3B,QAAM,KAAK,QAAQ,OAAO;AAC1B,OAAK,iBAAiB,OAAO;;;;;;;CAQ/B,MAAM,IAAI,KAA+B;AACvC,MAAI,CAAC,KAAK,OAAO,QAAS,QAAO;AAGjC,SADc,MAAM,KAAK,SAAS,IAAI,KACrB;;;;;;;;CASnB,YAAY,OAAqC,SAAyB;EACxE,MAAM,WAAW,CAAC,SAAS,GAAG,MAAM;EACpC,MAAM,aAAa,KAAK,UAAU,SAAS;AAC3C,SAAO,WAAW,SAAS,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM;;;CAI9D,MAAM,QAAuB;AAC3B,QAAM,KAAK,QAAQ,OAAO;;;;;;CAO5B,MAAM,mBAAqC;AACzC,SAAO,KAAK,QAAQ,aAAa"}

package/dist/cache/storage/persistent.js

@@ -1,12 +1,11 @@
 import { createLogger } from "../../logging/logger.js";
 import { InitializationError } from "../../errors/initialization.js";
 import { ValidationError } from "../../errors/validation.js";
-import { init_errors } from "../../errors/index.js";
+import "../../errors/index.js";
 import { lakebaseStorageDefaults } from "./defaults.js";
 import { createHash } from "node:crypto";
 
 //#region src/cache/storage/persistent.ts
-init_errors();
 const logger = createLogger("cache:persistent");
 /**
 * Persistent cache storage implementation. Uses a least recently used (LRU) eviction policy

package/dist/cache/storage/persistent.js.map

@@ -1 +1 @@
-{"version":3,"file":"persistent.js","names":[],"sources":["../../../src/cache/storage/persistent.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport type pg from \"pg\";\nimport type { CacheConfig, CacheEntry, CacheStorage } from \"shared\";\nimport { InitializationError, ValidationError } from \"../../errors\";\nimport { createLogger } from \"../../logging/logger\";\nimport { lakebaseStorageDefaults } from \"./defaults\";\n\nconst logger = createLogger(\"cache:persistent\");\n\n/**\n * Persistent cache storage implementation. Uses a least recently used (LRU) eviction policy\n * to manage memory usage and ensure efficient cache operations.\n *\n * @example\n * const pool = createLakebasePool({ workspaceClient });\n * const persistentStorage = new PersistentStorage(config, pool);\n * await persistentStorage.initialize();\n * await persistentStorage.get(\"my-key\");\n * await persistentStorage.set(\"my-key\", \"my-value\");\n * await persistentStorage.delete(\"my-key\");\n * await persistentStorage.clear();\n * await persistentStorage.has(\"my-key\");\n *\n */\nexport class PersistentStorage implements CacheStorage {\n  private readonly pool: pg.Pool;\n  private readonly schemaName: string;\n  private readonly tableName: string;\n  private readonly qualifiedTableName: string;\n  private readonly maxBytes: number;\n  private readonly maxEntryBytes: number;\n  private readonly evictionBatchSize: number;\n  private readonly evictionCheckProbability: number;\n  private initialized: boolean;\n\n  constructor(config: CacheConfig, pool: pg.Pool) {\n    this.pool = pool;\n    this.maxBytes = config.maxBytes ?? lakebaseStorageDefaults.maxBytes;\n    this.maxEntryBytes =\n      config.maxEntryBytes ?? lakebaseStorageDefaults.maxEntryBytes;\n    this.evictionBatchSize = lakebaseStorageDefaults.evictionBatchSize;\n    this.evictionCheckProbability =\n      config.evictionCheckProbability ??\n      lakebaseStorageDefaults.evictionCheckProbability;\n    this.schemaName = lakebaseStorageDefaults.schemaName;\n    this.tableName = lakebaseStorageDefaults.tableName;\n    this.qualifiedTableName = `${this.schemaName}.${this.tableName}`;\n    this.initialized = false;\n  }\n\n  /** Initialize the persistent storage and run migrations if necessary */\n  async initialize(): Promise<void> {\n    if (this.initialized) return;\n\n    try {\n      await this.runMigrations();\n      this.initialized = true;\n    } catch (error) {\n      logger.error(\"Error in persistent storage initialization: %O\", error);\n      throw error;\n    }\n  }\n\n  /**\n   * Get a cached value from the persistent storage\n   * @param key - Cache key\n   * @returns Promise of the cached value or null if not found\n   */\n  async get<T>(key: string): Promise<CacheEntry<T> | null> {\n    await this.ensureInitialized();\n\n    const keyHash = this.hashKey(key);\n\n    const result = await this.pool.query<{\n      value: Buffer;\n      expiry: string;\n    }>(\n      `SELECT value, expiry FROM ${this.qualifiedTableName} WHERE key_hash = $1`,\n      [keyHash],\n    );\n\n    if (result.rows.length === 0) return null;\n\n    const entry = result.rows[0];\n\n    // fire-and-forget update\n    this.pool\n      .query(\n        `UPDATE ${this.qualifiedTableName} SET last_accessed = NOW() WHERE key_hash = $1`,\n        [keyHash],\n      )\n      .catch(() => {\n        logger.debug(\"Error updating last_accessed time for key: %s\", key);\n      });\n\n    return {\n      value: this.deserializeValue<T>(entry.value),\n      expiry: Number(entry.expiry),\n    };\n  }\n\n  /**\n   * Set a value in the persistent storage\n   * @param key - Cache key\n   * @param entry - Cache entry\n   * @returns Promise of the result\n   */\n  async set<T>(key: string, entry: CacheEntry<T>): Promise<void> {\n    await this.ensureInitialized();\n\n    const keyHash = this.hashKey(key);\n    const keyBytes = Buffer.from(key, \"utf-8\");\n    const valueBytes = this.serializeValue(entry.value);\n    const byteSize = keyBytes.length + valueBytes.length;\n\n    if (byteSize > this.maxEntryBytes) {\n      throw ValidationError.invalidValue(\n        \"cache entry size\",\n        byteSize,\n        `maximum ${this.maxEntryBytes} bytes`,\n      );\n    }\n\n    // probabilistic eviction check\n    if (Math.random() < this.evictionCheckProbability) {\n      const totalBytes = await this.totalBytes();\n      if (totalBytes + byteSize > this.maxBytes) {\n        await this.evictBySize(byteSize);\n      }\n    }\n\n    await this.pool.query(\n      `INSERT INTO ${this.qualifiedTableName} (key_hash, key, value, byte_size, expiry, created_at, last_accessed)\n      VALUES ($1, $2, $3, $4, $5, NOW(), NOW())\n      ON CONFLICT (key_hash)\n      DO UPDATE SET value = $3, byte_size = $4, expiry = $5, last_accessed = NOW()\n      `,\n      [keyHash, keyBytes, valueBytes, byteSize, entry.expiry],\n    );\n  }\n\n  /**\n   * Delete a value from the persistent storage\n   * @param key - Cache key\n   * @returns Promise of the result\n   */\n  async delete(key: string): Promise<void> {\n    await this.ensureInitialized();\n    const keyHash = this.hashKey(key);\n    await this.pool.query(\n      `DELETE FROM ${this.qualifiedTableName} WHERE key_hash = $1`,\n      [keyHash],\n    );\n  }\n\n  /** Clear the persistent storage */\n  async clear(): Promise<void> {\n    await this.ensureInitialized();\n    await this.pool.query(`TRUNCATE TABLE ${this.qualifiedTableName}`);\n  }\n\n  /**\n   * Check if a value exists in the persistent storage\n   * @param key - Cache key\n   * @returns Promise of true if the value exists, false otherwise\n   */\n  async has(key: string): Promise<boolean> {\n    await this.ensureInitialized();\n    const keyHash = this.hashKey(key);\n\n    const result = await this.pool.query<{ exists: boolean }>(\n      `SELECT EXISTS(SELECT 1 FROM ${this.qualifiedTableName} WHERE key_hash = $1) as exists`,\n      [keyHash],\n    );\n\n    return result.rows[0]?.exists ?? false;\n  }\n\n  /**\n   * Get the size of the persistent storage\n   * @returns Promise of the size of the storage\n   */\n  async size(): Promise<number> {\n    await this.ensureInitialized();\n\n    const result = await this.pool.query<{ count: string }>(\n      `SELECT COUNT(*) as count FROM ${this.qualifiedTableName}`,\n    );\n    return parseInt(result.rows[0]?.count ?? \"0\", 10);\n  }\n\n  /** Get the total number of bytes in the persistent storage */\n  async totalBytes(): Promise<number> {\n    await this.ensureInitialized();\n\n    const result = await this.pool.query<{ total: string }>(\n      `SELECT COALESCE(SUM(byte_size), 0) as total FROM ${this.qualifiedTableName}`,\n    );\n    return parseInt(result.rows[0]?.total ?? \"0\", 10);\n  }\n\n  /**\n   * Check if the persistent storage is persistent\n   * @returns true if the storage is persistent, false otherwise\n   */\n  isPersistent(): boolean {\n    return true;\n  }\n\n  /**\n   * Check if the persistent storage is healthy\n   * @returns Promise of true if the storage is healthy, false otherwise\n   */\n  async healthCheck(): Promise<boolean> {\n    try {\n      await this.pool.query(\"SELECT 1\");\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  /** Close the persistent storage */\n  async close(): Promise<void> {\n    await this.pool.end();\n  }\n\n  /**\n   * Cleanup expired entries from the persistent storage\n   * @returns Promise of the number of expired entries\n   */\n  async cleanupExpired(): Promise<number> {\n    await this.ensureInitialized();\n    const result = await this.pool.query<{ count: string }>(\n      `WITH deleted as (DELETE FROM ${this.qualifiedTableName} WHERE expiry < $1 RETURNING *) SELECT COUNT(*) as count FROM deleted`,\n      [Date.now()],\n    );\n    return parseInt(result.rows[0]?.count ?? \"0\", 10);\n  }\n\n  /** Evict entries from the persistent storage by size */\n  private async evictBySize(requiredBytes: number): Promise<void> {\n    const freedByExpiry = await this.cleanupExpired();\n    if (freedByExpiry > 0) {\n      const currentBytes = await this.totalBytes();\n      if (currentBytes + requiredBytes <= this.maxBytes) {\n        return;\n      }\n    }\n\n    await this.pool.query(\n      `DELETE FROM ${this.qualifiedTableName} WHERE key_hash IN\n      (SELECT key_hash FROM ${this.qualifiedTableName} ORDER BY last_accessed ASC LIMIT $1)`,\n      [this.evictionBatchSize],\n    );\n  }\n\n  /** Ensure the persistent storage is initialized */\n  private async ensureInitialized(): Promise<void> {\n    if (!this.initialized) {\n      await this.initialize();\n    }\n  }\n\n  /** Generate a 64-bit hash for the cache key using SHA256 */\n  private hashKey(key: string): bigint {\n    if (!key) throw ValidationError.missingField(\"key\");\n    const hash = createHash(\"sha256\").update(key).digest();\n    return hash.readBigInt64BE(0);\n  }\n\n  /** Serialize a value to a buffer */\n  private serializeValue<T>(value: T): Buffer {\n    return Buffer.from(JSON.stringify(value), \"utf-8\");\n  }\n\n  /** Deserialize a value from a buffer */\n  private deserializeValue<T>(buffer: Buffer): T {\n    return JSON.parse(buffer.toString(\"utf-8\")) as T;\n  }\n\n  /** Run migrations for the persistent storage */\n  private async runMigrations(): Promise<void> {\n    const steps = [\n      {\n        name: \"create schema\",\n        query: `CREATE SCHEMA IF NOT EXISTS ${this.schemaName}`,\n      },\n      {\n        name: \"create table\",\n        query: `CREATE TABLE IF NOT EXISTS ${this.qualifiedTableName} (\n                id BIGSERIAL PRIMARY KEY,\n                key_hash BIGINT NOT NULL,\n                key BYTEA NOT NULL,\n                value BYTEA NOT NULL,\n                byte_size INTEGER NOT NULL,\n                expiry BIGINT NOT NULL,\n                created_at TIMESTAMP NOT NULL DEFAULT NOW(),\n                last_accessed TIMESTAMP NOT NULL DEFAULT NOW()\n            )`,\n      },\n      {\n        name: \"create index (key_hash)\",\n        query: `CREATE UNIQUE INDEX IF NOT EXISTS idx_${this.tableName}_key_hash ON ${this.qualifiedTableName} (key_hash)`,\n      },\n      {\n        name: \"create index (expiry)\",\n        query: `CREATE INDEX IF NOT EXISTS idx_${this.tableName}_expiry ON ${this.qualifiedTableName} (expiry)`,\n      },\n      {\n        name: \"create index (last_accessed)\",\n        query: `CREATE INDEX IF NOT EXISTS idx_${this.tableName}_last_accessed ON ${this.qualifiedTableName} (last_accessed)`,\n      },\n      {\n        name: \"create index (byte_size)\",\n        query: `CREATE INDEX IF NOT EXISTS idx_${this.tableName}_byte_size ON ${this.qualifiedTableName} (byte_size)`,\n      },\n    ];\n\n    for (const step of steps) {\n      try {\n        await this.pool.query(step.query);\n      } catch (error) {\n        logger.error(\"Migration step '%s' failed: %O\", step.name, error);\n        throw InitializationError.migrationFailed(error as Error);\n      }\n    }\n  }\n}\n"],"mappings":";;;;;;;;aAGoE;AAIpE,MAAM,SAAS,aAAa,mBAAmB;;;;;;;;;;;;;;;;AAiB/C,IAAa,oBAAb,MAAuD;CACrD,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAQ;CAER,YAAY,QAAqB,MAAe;AAC9C,OAAK,OAAO;AACZ,OAAK,WAAW,OAAO,YAAY,wBAAwB;AAC3D,OAAK,gBACH,OAAO,iBAAiB,wBAAwB;AAClD,OAAK,oBAAoB,wBAAwB;AACjD,OAAK,2BACH,OAAO,4BACP,wBAAwB;AAC1B,OAAK,aAAa,wBAAwB;AAC1C,OAAK,YAAY,wBAAwB;AACzC,OAAK,qBAAqB,GAAG,KAAK,WAAW,GAAG,KAAK;AACrD,OAAK,cAAc;;;CAIrB,MAAM,aAA4B;AAChC,MAAI,KAAK,YAAa;AAEtB,MAAI;AACF,SAAM,KAAK,eAAe;AAC1B,QAAK,cAAc;WACZ,OAAO;AACd,UAAO,MAAM,kDAAkD,MAAM;AACrE,SAAM;;;;;;;;CASV,MAAM,IAAO,KAA4C;AACvD,QAAM,KAAK,mBAAmB;EAE9B,MAAM,UAAU,KAAK,QAAQ,IAAI;EAEjC,MAAM,SAAS,MAAM,KAAK,KAAK,MAI7B,6BAA6B,KAAK,mBAAmB,uBACrD,CAAC,QAAQ,CACV;AAED,MAAI,OAAO,KAAK,WAAW,EAAG,QAAO;EAErC,MAAM,QAAQ,OAAO,KAAK;AAG1B,OAAK,KACF,MACC,UAAU,KAAK,mBAAmB,iDAClC,CAAC,QAAQ,CACV,CACA,YAAY;AACX,UAAO,MAAM,iDAAiD,IAAI;IAClE;AAEJ,SAAO;GACL,OAAO,KAAK,iBAAoB,MAAM,MAAM;GAC5C,QAAQ,OAAO,MAAM,OAAO;GAC7B;;;;;;;;CASH,MAAM,IAAO,KAAa,OAAqC;AAC7D,QAAM,KAAK,mBAAmB;EAE9B,MAAM,UAAU,KAAK,QAAQ,IAAI;EACjC,MAAM,WAAW,OAAO,KAAK,KAAK,QAAQ;EAC1C,MAAM,aAAa,KAAK,eAAe,MAAM,MAAM;EACnD,MAAM,WAAW,SAAS,SAAS,WAAW;AAE9C,MAAI,WAAW,KAAK,cAClB,OAAM,gBAAgB,aACpB,oBACA,UACA,WAAW,KAAK,cAAc,QAC/B;AAIH,MAAI,KAAK,QAAQ,GAAG,KAAK,0BAEvB;OADmB,MAAM,KAAK,YAAY,GACzB,WAAW,KAAK,SAC/B,OAAM,KAAK,YAAY,SAAS;;AAIpC,QAAM,KAAK,KAAK,MACd,eAAe,KAAK,mBAAmB;;;;SAKvC;GAAC;GAAS;GAAU;GAAY;GAAU,MAAM;GAAO,CACxD;;;;;;;CAQH,MAAM,OAAO,KAA4B;AACvC,QAAM,KAAK,mBAAmB;EAC9B,MAAM,UAAU,KAAK,QAAQ,IAAI;AACjC,QAAM,KAAK,KAAK,MACd,eAAe,KAAK,mBAAmB,uBACvC,CAAC,QAAQ,CACV;;;CAIH,MAAM,QAAuB;AAC3B,QAAM,KAAK,mBAAmB;AAC9B,QAAM,KAAK,KAAK,MAAM,kBAAkB,KAAK,qBAAqB;;;;;;;CAQpE,MAAM,IAAI,KAA+B;AACvC,QAAM,KAAK,mBAAmB;EAC9B,MAAM,UAAU,KAAK,QAAQ,IAAI;AAOjC,UALe,MAAM,KAAK,KAAK,MAC7B,+BAA+B,KAAK,mBAAmB,kCACvD,CAAC,QAAQ,CACV,EAEa,KAAK,IAAI,UAAU;;;;;;CAOnC,MAAM,OAAwB;AAC5B,QAAM,KAAK,mBAAmB;EAE9B,MAAM,SAAS,MAAM,KAAK,KAAK,MAC7B,iCAAiC,KAAK,qBACvC;AACD,SAAO,SAAS,OAAO,KAAK,IAAI,SAAS,KAAK,GAAG;;;CAInD,MAAM,aAA8B;AAClC,QAAM,KAAK,mBAAmB;EAE9B,MAAM,SAAS,MAAM,KAAK,KAAK,MAC7B,oDAAoD,KAAK,qBAC1D;AACD,SAAO,SAAS,OAAO,KAAK,IAAI,SAAS,KAAK,GAAG;;;;;;CAOnD,eAAwB;AACtB,SAAO;;;;;;CAOT,MAAM,cAAgC;AACpC,MAAI;AACF,SAAM,KAAK,KAAK,MAAM,WAAW;AACjC,UAAO;UACD;AACN,UAAO;;;;CAKX,MAAM,QAAuB;AAC3B,QAAM,KAAK,KAAK,KAAK;;;;;;CAOvB,MAAM,iBAAkC;AACtC,QAAM,KAAK,mBAAmB;EAC9B,MAAM,SAAS,MAAM,KAAK,KAAK,MAC7B,gCAAgC,KAAK,mBAAmB,wEACxD,CAAC,KAAK,KAAK,CAAC,CACb;AACD,SAAO,SAAS,OAAO,KAAK,IAAI,SAAS,KAAK,GAAG;;;CAInD,MAAc,YAAY,eAAsC;AAE9D,MADsB,MAAM,KAAK,gBAAgB,GAC7B,GAElB;OADqB,MAAM,KAAK,YAAY,GACzB,iBAAiB,KAAK,SACvC;;AAIJ,QAAM,KAAK,KAAK,MACd,eAAe,KAAK,mBAAmB;8BACf,KAAK,mBAAmB,wCAChD,CAAC,KAAK,kBAAkB,CACzB;;;CAIH,MAAc,oBAAmC;AAC/C,MAAI,CAAC,KAAK,YACR,OAAM,KAAK,YAAY;;;CAK3B,AAAQ,QAAQ,KAAqB;AACnC,MAAI,CAAC,IAAK,OAAM,gBAAgB,aAAa,MAAM;AAEnD,SADa,WAAW,SAAS,CAAC,OAAO,IAAI,CAAC,QAAQ,CAC1C,eAAe,EAAE;;;CAI/B,AAAQ,eAAkB,OAAkB;AAC1C,SAAO,OAAO,KAAK,KAAK,UAAU,MAAM,EAAE,QAAQ;;;CAIpD,AAAQ,iBAAoB,QAAmB;AAC7C,SAAO,KAAK,MAAM,OAAO,SAAS,QAAQ,CAAC;;;CAI7C,MAAc,gBAA+B;EAC3C,MAAM,QAAQ;GACZ;IACE,MAAM;IACN,OAAO,+BAA+B,KAAK;IAC5C;GACD;IACE,MAAM;IACN,OAAO,8BAA8B,KAAK,mBAAmB;;;;;;;;;;IAU9D;GACD;IACE,MAAM;IACN,OAAO,yCAAyC,KAAK,UAAU,eAAe,KAAK,mBAAmB;IACvG;GACD;IACE,MAAM;IACN,OAAO,kCAAkC,KAAK,UAAU,aAAa,KAAK,mBAAmB;IAC9F;GACD;IACE,MAAM;IACN,OAAO,kCAAkC,KAAK,UAAU,oBAAoB,KAAK,mBAAmB;IACrG;GACD;IACE,MAAM;IACN,OAAO,kCAAkC,KAAK,UAAU,gBAAgB,KAAK,mBAAmB;IACjG;GACF;AAED,OAAK,MAAM,QAAQ,MACjB,KAAI;AACF,SAAM,KAAK,KAAK,MAAM,KAAK,MAAM;WAC1B,OAAO;AACd,UAAO,MAAM,kCAAkC,KAAK,MAAM,MAAM;AAChE,SAAM,oBAAoB,gBAAgB,MAAe"}
+{"version":3,"file":"persistent.js","names":[],"sources":["../../../src/cache/storage/persistent.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport type pg from \"pg\";\nimport type { CacheConfig, CacheEntry, CacheStorage } from \"shared\";\nimport { InitializationError, ValidationError } from \"../../errors\";\nimport { createLogger } from \"../../logging/logger\";\nimport { lakebaseStorageDefaults } from \"./defaults\";\n\nconst logger = createLogger(\"cache:persistent\");\n\n/**\n * Persistent cache storage implementation. Uses a least recently used (LRU) eviction policy\n * to manage memory usage and ensure efficient cache operations.\n *\n * @example\n * const pool = createLakebasePool({ workspaceClient });\n * const persistentStorage = new PersistentStorage(config, pool);\n * await persistentStorage.initialize();\n * await persistentStorage.get(\"my-key\");\n * await persistentStorage.set(\"my-key\", \"my-value\");\n * await persistentStorage.delete(\"my-key\");\n * await persistentStorage.clear();\n * await persistentStorage.has(\"my-key\");\n *\n */\nexport class PersistentStorage implements CacheStorage {\n  private readonly pool: pg.Pool;\n  private readonly schemaName: string;\n  private readonly tableName: string;\n  private readonly qualifiedTableName: string;\n  private readonly maxBytes: number;\n  private readonly maxEntryBytes: number;\n  private readonly evictionBatchSize: number;\n  private readonly evictionCheckProbability: number;\n  private initialized: boolean;\n\n  constructor(config: CacheConfig, pool: pg.Pool) {\n    this.pool = pool;\n    this.maxBytes = config.maxBytes ?? lakebaseStorageDefaults.maxBytes;\n    this.maxEntryBytes =\n      config.maxEntryBytes ?? lakebaseStorageDefaults.maxEntryBytes;\n    this.evictionBatchSize = lakebaseStorageDefaults.evictionBatchSize;\n    this.evictionCheckProbability =\n      config.evictionCheckProbability ??\n      lakebaseStorageDefaults.evictionCheckProbability;\n    this.schemaName = lakebaseStorageDefaults.schemaName;\n    this.tableName = lakebaseStorageDefaults.tableName;\n    this.qualifiedTableName = `${this.schemaName}.${this.tableName}`;\n    this.initialized = false;\n  }\n\n  /** Initialize the persistent storage and run migrations if necessary */\n  async initialize(): Promise<void> {\n    if (this.initialized) return;\n\n    try {\n      await this.runMigrations();\n      this.initialized = true;\n    } catch (error) {\n      logger.error(\"Error in persistent storage initialization: %O\", error);\n      throw error;\n    }\n  }\n\n  /**\n   * Get a cached value from the persistent storage\n   * @param key - Cache key\n   * @returns Promise of the cached value or null if not found\n   */\n  async get<T>(key: string): Promise<CacheEntry<T> | null> {\n    await this.ensureInitialized();\n\n    const keyHash = this.hashKey(key);\n\n    const result = await this.pool.query<{\n      value: Buffer;\n      expiry: string;\n    }>(\n      `SELECT value, expiry FROM ${this.qualifiedTableName} WHERE key_hash = $1`,\n      [keyHash],\n    );\n\n    if (result.rows.length === 0) return null;\n\n    const entry = result.rows[0];\n\n    // fire-and-forget update\n    this.pool\n      .query(\n        `UPDATE ${this.qualifiedTableName} SET last_accessed = NOW() WHERE key_hash = $1`,\n        [keyHash],\n      )\n      .catch(() => {\n        logger.debug(\"Error updating last_accessed time for key: %s\", key);\n      });\n\n    return {\n      value: this.deserializeValue<T>(entry.value),\n      expiry: Number(entry.expiry),\n    };\n  }\n\n  /**\n   * Set a value in the persistent storage\n   * @param key - Cache key\n   * @param entry - Cache entry\n   * @returns Promise of the result\n   */\n  async set<T>(key: string, entry: CacheEntry<T>): Promise<void> {\n    await this.ensureInitialized();\n\n    const keyHash = this.hashKey(key);\n    const keyBytes = Buffer.from(key, \"utf-8\");\n    const valueBytes = this.serializeValue(entry.value);\n    const byteSize = keyBytes.length + valueBytes.length;\n\n    if (byteSize > this.maxEntryBytes) {\n      throw ValidationError.invalidValue(\n        \"cache entry size\",\n        byteSize,\n        `maximum ${this.maxEntryBytes} bytes`,\n      );\n    }\n\n    // probabilistic eviction check\n    if (Math.random() < this.evictionCheckProbability) {\n      const totalBytes = await this.totalBytes();\n      if (totalBytes + byteSize > this.maxBytes) {\n        await this.evictBySize(byteSize);\n      }\n    }\n\n    await this.pool.query(\n      `INSERT INTO ${this.qualifiedTableName} (key_hash, key, value, byte_size, expiry, created_at, last_accessed)\n      VALUES ($1, $2, $3, $4, $5, NOW(), NOW())\n      ON CONFLICT (key_hash)\n      DO UPDATE SET value = $3, byte_size = $4, expiry = $5, last_accessed = NOW()\n      `,\n      [keyHash, keyBytes, valueBytes, byteSize, entry.expiry],\n    );\n  }\n\n  /**\n   * Delete a value from the persistent storage\n   * @param key - Cache key\n   * @returns Promise of the result\n   */\n  async delete(key: string): Promise<void> {\n    await this.ensureInitialized();\n    const keyHash = this.hashKey(key);\n    await this.pool.query(\n      `DELETE FROM ${this.qualifiedTableName} WHERE key_hash = $1`,\n      [keyHash],\n    );\n  }\n\n  /** Clear the persistent storage */\n  async clear(): Promise<void> {\n    await this.ensureInitialized();\n    await this.pool.query(`TRUNCATE TABLE ${this.qualifiedTableName}`);\n  }\n\n  /**\n   * Check if a value exists in the persistent storage\n   * @param key - Cache key\n   * @returns Promise of true if the value exists, false otherwise\n   */\n  async has(key: string): Promise<boolean> {\n    await this.ensureInitialized();\n    const keyHash = this.hashKey(key);\n\n    const result = await this.pool.query<{ exists: boolean }>(\n      `SELECT EXISTS(SELECT 1 FROM ${this.qualifiedTableName} WHERE key_hash = $1) as exists`,\n      [keyHash],\n    );\n\n    return result.rows[0]?.exists ?? false;\n  }\n\n  /**\n   * Get the size of the persistent storage\n   * @returns Promise of the size of the storage\n   */\n  async size(): Promise<number> {\n    await this.ensureInitialized();\n\n    const result = await this.pool.query<{ count: string }>(\n      `SELECT COUNT(*) as count FROM ${this.qualifiedTableName}`,\n    );\n    return parseInt(result.rows[0]?.count ?? \"0\", 10);\n  }\n\n  /** Get the total number of bytes in the persistent storage */\n  async totalBytes(): Promise<number> {\n    await this.ensureInitialized();\n\n    const result = await this.pool.query<{ total: string }>(\n      `SELECT COALESCE(SUM(byte_size), 0) as total FROM ${this.qualifiedTableName}`,\n    );\n    return parseInt(result.rows[0]?.total ?? \"0\", 10);\n  }\n\n  /**\n   * Check if the persistent storage is persistent\n   * @returns true if the storage is persistent, false otherwise\n   */\n  isPersistent(): boolean {\n    return true;\n  }\n\n  /**\n   * Check if the persistent storage is healthy\n   * @returns Promise of true if the storage is healthy, false otherwise\n   */\n  async healthCheck(): Promise<boolean> {\n    try {\n      await this.pool.query(\"SELECT 1\");\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  /** Close the persistent storage */\n  async close(): Promise<void> {\n    await this.pool.end();\n  }\n\n  /**\n   * Cleanup expired entries from the persistent storage\n   * @returns Promise of the number of expired entries\n   */\n  async cleanupExpired(): Promise<number> {\n    await this.ensureInitialized();\n    const result = await this.pool.query<{ count: string }>(\n      `WITH deleted as (DELETE FROM ${this.qualifiedTableName} WHERE expiry < $1 RETURNING *) SELECT COUNT(*) as count FROM deleted`,\n      [Date.now()],\n    );\n    return parseInt(result.rows[0]?.count ?? \"0\", 10);\n  }\n\n  /** Evict entries from the persistent storage by size */\n  private async evictBySize(requiredBytes: number): Promise<void> {\n    const freedByExpiry = await this.cleanupExpired();\n    if (freedByExpiry > 0) {\n      const currentBytes = await this.totalBytes();\n      if (currentBytes + requiredBytes <= this.maxBytes) {\n        return;\n      }\n    }\n\n    await this.pool.query(\n      `DELETE FROM ${this.qualifiedTableName} WHERE key_hash IN\n      (SELECT key_hash FROM ${this.qualifiedTableName} ORDER BY last_accessed ASC LIMIT $1)`,\n      [this.evictionBatchSize],\n    );\n  }\n\n  /** Ensure the persistent storage is initialized */\n  private async ensureInitialized(): Promise<void> {\n    if (!this.initialized) {\n      await this.initialize();\n    }\n  }\n\n  /** Generate a 64-bit hash for the cache key using SHA256 */\n  private hashKey(key: string): bigint {\n    if (!key) throw ValidationError.missingField(\"key\");\n    const hash = createHash(\"sha256\").update(key).digest();\n    return hash.readBigInt64BE(0);\n  }\n\n  /** Serialize a value to a buffer */\n  private serializeValue<T>(value: T): Buffer {\n    return Buffer.from(JSON.stringify(value), \"utf-8\");\n  }\n\n  /** Deserialize a value from a buffer */\n  private deserializeValue<T>(buffer: Buffer): T {\n    return JSON.parse(buffer.toString(\"utf-8\")) as T;\n  }\n\n  /** Run migrations for the persistent storage */\n  private async runMigrations(): Promise<void> {\n    const steps = [\n      {\n        name: \"create schema\",\n        query: `CREATE SCHEMA IF NOT EXISTS ${this.schemaName}`,\n      },\n      {\n        name: \"create table\",\n        query: `CREATE TABLE IF NOT EXISTS ${this.qualifiedTableName} (\n                id BIGSERIAL PRIMARY KEY,\n                key_hash BIGINT NOT NULL,\n                key BYTEA NOT NULL,\n                value BYTEA NOT NULL,\n                byte_size INTEGER NOT NULL,\n                expiry BIGINT NOT NULL,\n                created_at TIMESTAMP NOT NULL DEFAULT NOW(),\n                last_accessed TIMESTAMP NOT NULL DEFAULT NOW()\n            )`,\n      },\n      {\n        name: \"create index (key_hash)\",\n        query: `CREATE UNIQUE INDEX IF NOT EXISTS idx_${this.tableName}_key_hash ON ${this.qualifiedTableName} (key_hash)`,\n      },\n      {\n        name: \"create index (expiry)\",\n        query: `CREATE INDEX IF NOT EXISTS idx_${this.tableName}_expiry ON ${this.qualifiedTableName} (expiry)`,\n      },\n      {\n        name: \"create index (last_accessed)\",\n        query: `CREATE INDEX IF NOT EXISTS idx_${this.tableName}_last_accessed ON ${this.qualifiedTableName} (last_accessed)`,\n      },\n      {\n        name: \"create index (byte_size)\",\n        query: `CREATE INDEX IF NOT EXISTS idx_${this.tableName}_byte_size ON ${this.qualifiedTableName} (byte_size)`,\n      },\n    ];\n\n    for (const step of steps) {\n      try {\n        await this.pool.query(step.query);\n      } catch (error) {\n        logger.error(\"Migration step '%s' failed: %O\", step.name, error);\n        throw InitializationError.migrationFailed(error as Error);\n      }\n    }\n  }\n}\n"],"mappings":";;;;;;;;AAOA,MAAM,SAAS,aAAa,mBAAmB;;;;;;;;;;;;;;;;AAiB/C,IAAa,oBAAb,MAAuD;CACrD,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAQ;CAER,YAAY,QAAqB,MAAe;AAC9C,OAAK,OAAO;AACZ,OAAK,WAAW,OAAO,YAAY,wBAAwB;AAC3D,OAAK,gBACH,OAAO,iBAAiB,wBAAwB;AAClD,OAAK,oBAAoB,wBAAwB;AACjD,OAAK,2BACH,OAAO,4BACP,wBAAwB;AAC1B,OAAK,aAAa,wBAAwB;AAC1C,OAAK,YAAY,wBAAwB;AACzC,OAAK,qBAAqB,GAAG,KAAK,WAAW,GAAG,KAAK;AACrD,OAAK,cAAc;;;CAIrB,MAAM,aAA4B;AAChC,MAAI,KAAK,YAAa;AAEtB,MAAI;AACF,SAAM,KAAK,eAAe;AAC1B,QAAK,cAAc;WACZ,OAAO;AACd,UAAO,MAAM,kDAAkD,MAAM;AACrE,SAAM;;;;;;;;CASV,MAAM,IAAO,KAA4C;AACvD,QAAM,KAAK,mBAAmB;EAE9B,MAAM,UAAU,KAAK,QAAQ,IAAI;EAEjC,MAAM,SAAS,MAAM,KAAK,KAAK,MAI7B,6BAA6B,KAAK,mBAAmB,uBACrD,CAAC,QAAQ,CACV;AAED,MAAI,OAAO,KAAK,WAAW,EAAG,QAAO;EAErC,MAAM,QAAQ,OAAO,KAAK;AAG1B,OAAK,KACF,MACC,UAAU,KAAK,mBAAmB,iDAClC,CAAC,QAAQ,CACV,CACA,YAAY;AACX,UAAO,MAAM,iDAAiD,IAAI;IAClE;AAEJ,SAAO;GACL,OAAO,KAAK,iBAAoB,MAAM,MAAM;GAC5C,QAAQ,OAAO,MAAM,OAAO;GAC7B;;;;;;;;CASH,MAAM,IAAO,KAAa,OAAqC;AAC7D,QAAM,KAAK,mBAAmB;EAE9B,MAAM,UAAU,KAAK,QAAQ,IAAI;EACjC,MAAM,WAAW,OAAO,KAAK,KAAK,QAAQ;EAC1C,MAAM,aAAa,KAAK,eAAe,MAAM,MAAM;EACnD,MAAM,WAAW,SAAS,SAAS,WAAW;AAE9C,MAAI,WAAW,KAAK,cAClB,OAAM,gBAAgB,aACpB,oBACA,UACA,WAAW,KAAK,cAAc,QAC/B;AAIH,MAAI,KAAK,QAAQ,GAAG,KAAK,0BAEvB;OADmB,MAAM,KAAK,YAAY,GACzB,WAAW,KAAK,SAC/B,OAAM,KAAK,YAAY,SAAS;;AAIpC,QAAM,KAAK,KAAK,MACd,eAAe,KAAK,mBAAmB;;;;SAKvC;GAAC;GAAS;GAAU;GAAY;GAAU,MAAM;GAAO,CACxD;;;;;;;CAQH,MAAM,OAAO,KAA4B;AACvC,QAAM,KAAK,mBAAmB;EAC9B,MAAM,UAAU,KAAK,QAAQ,IAAI;AACjC,QAAM,KAAK,KAAK,MACd,eAAe,KAAK,mBAAmB,uBACvC,CAAC,QAAQ,CACV;;;CAIH,MAAM,QAAuB;AAC3B,QAAM,KAAK,mBAAmB;AAC9B,QAAM,KAAK,KAAK,MAAM,kBAAkB,KAAK,qBAAqB;;;;;;;CAQpE,MAAM,IAAI,KAA+B;AACvC,QAAM,KAAK,mBAAmB;EAC9B,MAAM,UAAU,KAAK,QAAQ,IAAI;AAOjC,UALe,MAAM,KAAK,KAAK,MAC7B,+BAA+B,KAAK,mBAAmB,kCACvD,CAAC,QAAQ,CACV,EAEa,KAAK,IAAI,UAAU;;;;;;CAOnC,MAAM,OAAwB;AAC5B,QAAM,KAAK,mBAAmB;EAE9B,MAAM,SAAS,MAAM,KAAK,KAAK,MAC7B,iCAAiC,KAAK,qBACvC;AACD,SAAO,SAAS,OAAO,KAAK,IAAI,SAAS,KAAK,GAAG;;;CAInD,MAAM,aAA8B;AAClC,QAAM,KAAK,mBAAmB;EAE9B,MAAM,SAAS,MAAM,KAAK,KAAK,MAC7B,oDAAoD,KAAK,qBAC1D;AACD,SAAO,SAAS,OAAO,KAAK,IAAI,SAAS,KAAK,GAAG;;;;;;CAOnD,eAAwB;AACtB,SAAO;;;;;;CAOT,MAAM,cAAgC;AACpC,MAAI;AACF,SAAM,KAAK,KAAK,MAAM,WAAW;AACjC,UAAO;UACD;AACN,UAAO;;;;CAKX,MAAM,QAAuB;AAC3B,QAAM,KAAK,KAAK,KAAK;;;;;;CAOvB,MAAM,iBAAkC;AACtC,QAAM,KAAK,mBAAmB;EAC9B,MAAM,SAAS,MAAM,KAAK,KAAK,MAC7B,gCAAgC,KAAK,mBAAmB,wEACxD,CAAC,KAAK,KAAK,CAAC,CACb;AACD,SAAO,SAAS,OAAO,KAAK,IAAI,SAAS,KAAK,GAAG;;;CAInD,MAAc,YAAY,eAAsC;AAE9D,MADsB,MAAM,KAAK,gBAAgB,GAC7B,GAElB;OADqB,MAAM,KAAK,YAAY,GACzB,iBAAiB,KAAK,SACvC;;AAIJ,QAAM,KAAK,KAAK,MACd,eAAe,KAAK,mBAAmB;8BACf,KAAK,mBAAmB,wCAChD,CAAC,KAAK,kBAAkB,CACzB;;;CAIH,MAAc,oBAAmC;AAC/C,MAAI,CAAC,KAAK,YACR,OAAM,KAAK,YAAY;;;CAK3B,AAAQ,QAAQ,KAAqB;AACnC,MAAI,CAAC,IAAK,OAAM,gBAAgB,aAAa,MAAM;AAEnD,SADa,WAAW,SAAS,CAAC,OAAO,IAAI,CAAC,QAAQ,CAC1C,eAAe,EAAE;;;CAI/B,AAAQ,eAAkB,OAAkB;AAC1C,SAAO,OAAO,KAAK,KAAK,UAAU,MAAM,EAAE,QAAQ;;;CAIpD,AAAQ,iBAAoB,QAAmB;AAC7C,SAAO,KAAK,MAAM,OAAO,SAAS,QAAQ,CAAC;;;CAI7C,MAAc,gBAA+B;EAC3C,MAAM,QAAQ;GACZ;IACE,MAAM;IACN,OAAO,+BAA+B,KAAK;IAC5C;GACD;IACE,MAAM;IACN,OAAO,8BAA8B,KAAK,mBAAmB;;;;;;;;;;IAU9D;GACD;IACE,MAAM;IACN,OAAO,yCAAyC,KAAK,UAAU,eAAe,KAAK,mBAAmB;IACvG;GACD;IACE,MAAM;IACN,OAAO,kCAAkC,KAAK,UAAU,aAAa,KAAK,mBAAmB;IAC9F;GACD;IACE,MAAM;IACN,OAAO,kCAAkC,KAAK,UAAU,oBAAoB,KAAK,mBAAmB;IACrG;GACD;IACE,MAAM;IACN,OAAO,kCAAkC,KAAK,UAAU,gBAAgB,KAAK,mBAAmB;IACjG;GACF;AAED,OAAK,MAAM,QAAQ,MACjB,KAAI;AACF,SAAM,KAAK,KAAK,MAAM,KAAK,MAAM;WAC1B,OAAO;AACd,UAAO,MAAM,kCAAkC,KAAK,MAAM,MAAM;AAChE,SAAM,oBAAoB,gBAAgB,MAAe"}

package/dist/cli/commands/plugin/add-resource/add-resource.js.map

@@ -1 +1 @@
-{"version":3,"file":"add-resource.js","names":[],"sources":["../../../../../src/cli/commands/plugin/add-resource/add-resource.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport path from \"node:path\";\nimport process from \"node:process\";\nimport { cancel, intro, outro } from \"@clack/prompts\";\nimport { Command } from \"commander\";\nimport { promptOneResource } from \"../create/prompt-resource\";\nimport {\n  DEFAULT_PERMISSION_BY_TYPE,\n  getDefaultFieldsForType,\n  getValidResourceTypes,\n  humanizeResourceType,\n  resourceKeyFromType,\n} from \"../create/resource-defaults\";\nimport { resolveManifestInDir } from \"../manifest-resolve\";\nimport type { PluginManifest, ResourceRequirement } from \"../manifest-types\";\nimport { validateManifest } from \"../validate/validate-manifest\";\n\n/** Extended manifest type that preserves extra JSON fields (e.g. $schema, author, version) for round-trip writes. */\ninterface ManifestWithExtras extends PluginManifest {\n  [key: string]: unknown;\n}\n\ninterface AddResourceOptions {\n  path?: string;\n  type?: string;\n  required?: boolean;\n  resourceKey?: string;\n  description?: string;\n  permission?: string;\n  fieldsJson?: string;\n  dryRun?: boolean;\n}\n\nfunction loadManifest(\n  pluginDir: string,\n): { manifest: ManifestWithExtras; manifestPath: string } | null {\n  const resolved = resolveManifestInDir(pluginDir, { allowJsManifest: true });\n\n  if (!resolved) {\n    console.error(\n      `No manifest found in ${pluginDir}. This command requires manifest.json (manifest.js cannot be edited in place).`,\n    );\n    console.error(\n      \"  appkit plugin add-resource --path <dir-with-manifest.json>\",\n    );\n    process.exit(1);\n  }\n\n  if (resolved.type !== \"json\") {\n    console.error(\n      `Editable manifest not found. add-resource only supports plugin directories that contain manifest.json (found ${path.basename(resolved.path)}).`,\n    );\n    process.exit(1);\n  }\n\n  const manifestPath = resolved.path;\n\n  try {\n    const raw = fs.readFileSync(manifestPath, \"utf-8\");\n    const parsed = JSON.parse(raw) as unknown;\n    const result = validateManifest(parsed);\n    if (!result.valid || !result.manifest) {\n      console.error(\n        \"Invalid manifest. Run `appkit plugin validate` for details.\",\n      );\n      process.exit(1);\n    }\n    return { manifest: parsed as ManifestWithExtras, manifestPath };\n  } catch (err) {\n    console.error(\n      \"Failed to read or parse manifest.json:\",\n      err instanceof Error ? err.message : err,\n    );\n    process.exit(1);\n  }\n}\n\nfunction buildEntry(\n  type: string,\n  opts: AddResourceOptions,\n): { entry: ResourceRequirement; isRequired: boolean } {\n  const alias = humanizeResourceType(type);\n  const isRequired = opts.required !== false;\n\n  let fields = getDefaultFieldsForType(type);\n  if (opts.fieldsJson) {\n    try {\n      const parsed = JSON.parse(opts.fieldsJson) as Record<\n        string,\n        { env: string; description?: string }\n      >;\n      fields = { ...fields, ...parsed };\n    } catch {\n      console.error(\"Error: --fields-json must be valid JSON.\");\n      console.error(\n        '  Example: --fields-json \\'{\"id\":{\"env\":\"MY_WAREHOUSE_ID\"}}\\'',\n      );\n      process.exit(1);\n    }\n  }\n\n  const entry: ResourceRequirement = {\n    type: type as ResourceRequirement[\"type\"],\n    alias,\n    resourceKey: opts.resourceKey ?? resourceKeyFromType(type),\n    description:\n      opts.description ||\n      `${isRequired ? \"Required\" : \"Optional\"} for ${alias} functionality.`,\n    permission:\n      opts.permission ?? DEFAULT_PERMISSION_BY_TYPE[type] ?? \"CAN_VIEW\",\n    fields,\n  };\n\n  return { entry, isRequired };\n}\n\nfunction runNonInteractive(opts: AddResourceOptions): void {\n  const cwd = process.cwd();\n  const pluginDir = path.resolve(cwd, opts.path ?? \".\");\n  const loaded = loadManifest(pluginDir);\n  if (!loaded) return;\n  const { manifest, manifestPath } = loaded;\n\n  const type = opts.type as string;\n  const validTypes = getValidResourceTypes();\n  if (!validTypes.includes(type)) {\n    console.error(`Error: Unknown resource type \"${type}\".`);\n    console.error(`  Valid types: ${validTypes.join(\", \")}`);\n    process.exit(1);\n  }\n  const { entry, isRequired } = buildEntry(type, opts);\n\n  if (isRequired) {\n    manifest.resources.required.push(entry);\n  } else {\n    manifest.resources.optional.push(entry);\n  }\n\n  if (opts.dryRun) {\n    console.log(JSON.stringify(manifest, null, 2));\n    return;\n  }\n\n  fs.writeFileSync(manifestPath, `${JSON.stringify(manifest, null, 2)}\\n`);\n  console.log(\n    `Added ${entry.alias} as ${isRequired ? \"required\" : \"optional\"} to ${path.relative(cwd, manifestPath)}`,\n  );\n}\n\nasync function runInteractive(opts: AddResourceOptions): Promise<void> {\n  intro(\"Add resource to plugin manifest\");\n\n  const cwd = process.cwd();\n  const pluginDir = path.resolve(cwd, opts.path ?? \".\");\n  const loaded = loadManifest(pluginDir);\n  if (!loaded) return;\n  const { manifest, manifestPath } = loaded;\n\n  const spec = await promptOneResource();\n  if (!spec) {\n    cancel(\"Cancelled.\");\n    process.exit(0);\n  }\n\n  const alias = humanizeResourceType(spec.type);\n  const entry: ResourceRequirement = {\n    type: spec.type as ResourceRequirement[\"type\"],\n    alias,\n    resourceKey: spec.resourceKey,\n    description: spec.description || `Required for ${alias} functionality.`,\n    permission: spec.permission,\n    fields: spec.fields,\n  };\n\n  if (spec.required) {\n    manifest.resources.required.push(entry);\n  } else {\n    manifest.resources.optional.push(entry);\n  }\n\n  fs.writeFileSync(manifestPath, `${JSON.stringify(manifest, null, 2)}\\n`);\n\n  outro(\"Resource added.\");\n  console.log(\n    `\\nAdded ${alias} as ${spec.required ? \"required\" : \"optional\"} to ${path.relative(cwd, manifestPath)}`,\n  );\n}\n\nasync function runPluginAddResource(opts: AddResourceOptions): Promise<void> {\n  if (opts.type) {\n    runNonInteractive(opts);\n  } else {\n    await runInteractive(opts);\n  }\n}\n\nexport const pluginAddResourceCommand = new Command(\"add-resource\")\n  .description(\n    \"Add a resource requirement to an existing plugin manifest. Overwrites manifest.json in place.\",\n  )\n  .option(\n    \"-p, --path <dir>\",\n    \"Plugin directory containing manifest.json (default: .)\",\n  )\n  .option(\n    \"-t, --type <resource_type>\",\n    \"Resource type (e.g. sql_warehouse, volume). Enables non-interactive mode.\",\n  )\n  .option(\"--required\", \"Mark resource as required (default: true)\", true)\n  .option(\"--no-required\", \"Mark resource as optional\")\n  .option(\"--resource-key <key>\", \"Resource key (default: derived from type)\")\n  .option(\"--description <text>\", \"Description of the resource requirement\")\n  .option(\"--permission <perm>\", \"Permission level (default: from schema)\")\n  .option(\n    \"--fields-json <json>\",\n    'JSON object overriding field env vars (e.g. \\'{\"id\":{\"env\":\"MY_WAREHOUSE_ID\"}}\\')',\n  )\n  .option(\"--dry-run\", \"Preview the updated manifest without writing\")\n  .addHelpText(\n    \"after\",\n    `\nExamples:\n  $ appkit plugin add-resource\n  $ appkit plugin add-resource --path plugins/my-plugin --type sql_warehouse\n  $ appkit plugin add-resource --path plugins/my-plugin --type volume --no-required --dry-run\n  $ appkit plugin add-resource --type sql_warehouse --fields-json '{\"id\":{\"env\":\"MY_WAREHOUSE_ID\"}}'`,\n  )\n  .action((opts) =>\n    runPluginAddResource(opts).catch((err) => {\n      console.error(err);\n      process.exit(1);\n    }),\n  );\n"],"mappings":";;;;;;;;;;;AAiCA,SAAS,aACP,WAC+D;CAC/D,MAAM,WAAW,qBAAqB,WAAW,EAAE,iBAAiB,MAAM,CAAC;AAE3E,KAAI,CAAC,UAAU;AACb,UAAQ,MACN,wBAAwB,UAAU,gFACnC;AACD,UAAQ,MACN,+DACD;AACD,UAAQ,KAAK,EAAE;;AAGjB,KAAI,SAAS,SAAS,QAAQ;AAC5B,UAAQ,MACN,gHAAgH,KAAK,SAAS,SAAS,KAAK,CAAC,IAC9I;AACD,UAAQ,KAAK,EAAE;;CAGjB,MAAM,eAAe,SAAS;AAE9B,KAAI;EACF,MAAM,MAAM,GAAG,aAAa,cAAc,QAAQ;EAClD,MAAM,SAAS,KAAK,MAAM,IAAI;EAC9B,MAAM,SAAS,iBAAiB,OAAO;AACvC,MAAI,CAAC,OAAO,SAAS,CAAC,OAAO,UAAU;AACrC,WAAQ,MACN,8DACD;AACD,WAAQ,KAAK,EAAE;;AAEjB,SAAO;GAAE,UAAU;GAA8B;GAAc;UACxD,KAAK;AACZ,UAAQ,MACN,0CACA,eAAe,QAAQ,IAAI,UAAU,IACtC;AACD,UAAQ,KAAK,EAAE;;;AAInB,SAAS,WACP,MACA,MACqD;CACrD,MAAM,QAAQ,qBAAqB,KAAK;CACxC,MAAM,aAAa,KAAK,aAAa;CAErC,IAAI,SAAS,wBAAwB,KAAK;AAC1C,KAAI,KAAK,WACP,KAAI;EACF,MAAM,SAAS,KAAK,MAAM,KAAK,WAAW;AAI1C,WAAS;GAAE,GAAG;GAAQ,GAAG;GAAQ;SAC3B;AACN,UAAQ,MAAM,2CAA2C;AACzD,UAAQ,MACN,oEACD;AACD,UAAQ,KAAK,EAAE;;AAgBnB,QAAO;EAAE,OAZ0B;GAC3B;GACN;GACA,aAAa,KAAK,eAAe,oBAAoB,KAAK;GAC1D,aACE,KAAK,eACL,GAAG,aAAa,aAAa,WAAW,OAAO,MAAM;GACvD,YACE,KAAK,cAAc,2BAA2B,SAAS;GACzD;GACD;EAEe;EAAY;;AAG9B,SAAS,kBAAkB,MAAgC;CACzD,MAAM,MAAM,QAAQ,KAAK;CAEzB,MAAM,SAAS,aADG,KAAK,QAAQ,KAAK,KAAK,QAAQ,IAAI,CACf;AACtC,KAAI,CAAC,OAAQ;CACb,MAAM,EAAE,UAAU,iBAAiB;CAEnC,MAAM,OAAO,KAAK;CAClB,MAAM,aAAa,uBAAuB;AAC1C,KAAI,CAAC,WAAW,SAAS,KAAK,EAAE;AAC9B,UAAQ,MAAM,iCAAiC,KAAK,IAAI;AACxD,UAAQ,MAAM,kBAAkB,WAAW,KAAK,KAAK,GAAG;AACxD,UAAQ,KAAK,EAAE;;CAEjB,MAAM,EAAE,OAAO,eAAe,WAAW,MAAM,KAAK;AAEpD,KAAI,WACF,UAAS,UAAU,SAAS,KAAK,MAAM;KAEvC,UAAS,UAAU,SAAS,KAAK,MAAM;AAGzC,KAAI,KAAK,QAAQ;AACf,UAAQ,IAAI,KAAK,UAAU,UAAU,MAAM,EAAE,CAAC;AAC9C;;AAGF,IAAG,cAAc,cAAc,GAAG,KAAK,UAAU,UAAU,MAAM,EAAE,CAAC,IAAI;AACxE,SAAQ,IACN,SAAS,MAAM,MAAM,MAAM,aAAa,aAAa,WAAW,MAAM,KAAK,SAAS,KAAK,aAAa,GACvG;;AAGH,eAAe,eAAe,MAAyC;AACrE,OAAM,kCAAkC;CAExC,MAAM,MAAM,QAAQ,KAAK;CAEzB,MAAM,SAAS,aADG,KAAK,QAAQ,KAAK,KAAK,QAAQ,IAAI,CACf;AACtC,KAAI,CAAC,OAAQ;CACb,MAAM,EAAE,UAAU,iBAAiB;CAEnC,MAAM,OAAO,MAAM,mBAAmB;AACtC,KAAI,CAAC,MAAM;AACT,SAAO,aAAa;AACpB,UAAQ,KAAK,EAAE;;CAGjB,MAAM,QAAQ,qBAAqB,KAAK,KAAK;CAC7C,MAAM,QAA6B;EACjC,MAAM,KAAK;EACX;EACA,aAAa,KAAK;EAClB,aAAa,KAAK,eAAe,gBAAgB,MAAM;EACvD,YAAY,KAAK;EACjB,QAAQ,KAAK;EACd;AAED,KAAI,KAAK,SACP,UAAS,UAAU,SAAS,KAAK,MAAM;KAEvC,UAAS,UAAU,SAAS,KAAK,MAAM;AAGzC,IAAG,cAAc,cAAc,GAAG,KAAK,UAAU,UAAU,MAAM,EAAE,CAAC,IAAI;AAExE,OAAM,kBAAkB;AACxB,SAAQ,IACN,WAAW,MAAM,MAAM,KAAK,WAAW,aAAa,WAAW,MAAM,KAAK,SAAS,KAAK,aAAa,GACtG;;AAGH,eAAe,qBAAqB,MAAyC;AAC3E,KAAI,KAAK,KACP,mBAAkB,KAAK;KAEvB,OAAM,eAAe,KAAK;;AAI9B,MAAa,2BAA2B,IAAI,QAAQ,eAAe,CAChE,YACC,gGACD,CACA,OACC,oBACA,yDACD,CACA,OACC,8BACA,4EACD,CACA,OAAO,cAAc,6CAA6C,KAAK,CACvE,OAAO,iBAAiB,4BAA4B,CACpD,OAAO,wBAAwB,4CAA4C,CAC3E,OAAO,wBAAwB,0CAA0C,CACzE,OAAO,uBAAuB,0CAA0C,CACxE,OACC,wBACA,wFACD,CACA,OAAO,aAAa,+CAA+C,CACnE,YACC,SACA;;;;;sGAMD,CACA,QAAQ,SACP,qBAAqB,KAAK,CAAC,OAAO,QAAQ;AACxC,SAAQ,MAAM,IAAI;AAClB,SAAQ,KAAK,EAAE;EACf,CACH"}
+{"version":3,"file":"add-resource.js","names":[],"sources":["../../../../../src/cli/commands/plugin/add-resource/add-resource.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport path from \"node:path\";\nimport process from \"node:process\";\nimport { cancel, intro, outro } from \"@clack/prompts\";\nimport { Command } from \"commander\";\nimport { promptOneResource } from \"../create/prompt-resource\";\nimport {\n  DEFAULT_PERMISSION_BY_TYPE,\n  getDefaultFieldsForType,\n  getValidResourceTypes,\n  humanizeResourceType,\n  resourceKeyFromType,\n} from \"../create/resource-defaults\";\nimport { resolveManifestInDir } from \"../manifest-resolve\";\nimport type { PluginManifest, ResourceRequirement } from \"../manifest-types\";\nimport { validateManifest } from \"../validate/validate-manifest\";\n\n/** Extended manifest type that preserves extra JSON fields (e.g. $schema, author, version) for round-trip writes. */\ninterface ManifestWithExtras extends PluginManifest {\n  [key: string]: unknown;\n}\n\ninterface AddResourceOptions {\n  path?: string;\n  type?: string;\n  required?: boolean;\n  resourceKey?: string;\n  description?: string;\n  permission?: string;\n  fieldsJson?: string;\n  dryRun?: boolean;\n}\n\nfunction loadManifest(\n  pluginDir: string,\n): { manifest: ManifestWithExtras; manifestPath: string } | null {\n  const resolved = resolveManifestInDir(pluginDir, { allowJsManifest: true });\n\n  if (!resolved) {\n    console.error(\n      `No manifest found in ${pluginDir}. This command requires manifest.json (manifest.js cannot be edited in place).`,\n    );\n    console.error(\n      \"  appkit plugin add-resource --path <dir-with-manifest.json>\",\n    );\n    process.exit(1);\n  }\n\n  if (resolved.type !== \"json\") {\n    console.error(\n      `Editable manifest not found. add-resource only supports plugin directories that contain manifest.json (found ${path.basename(resolved.path)}).`,\n    );\n    process.exit(1);\n  }\n\n  const manifestPath = resolved.path;\n\n  try {\n    const raw = fs.readFileSync(manifestPath, \"utf-8\");\n    const parsed = JSON.parse(raw) as unknown;\n    const result = validateManifest(parsed);\n    if (!result.valid || !result.manifest) {\n      console.error(\n        \"Invalid manifest. Run `appkit plugin validate` for details.\",\n      );\n      process.exit(1);\n    }\n    return { manifest: parsed as ManifestWithExtras, manifestPath };\n  } catch (err) {\n    console.error(\n      \"Failed to read or parse manifest.json:\",\n      err instanceof Error ? err.message : err,\n    );\n    process.exit(1);\n  }\n}\n\nfunction buildEntry(\n  type: string,\n  opts: AddResourceOptions,\n): { entry: ResourceRequirement; isRequired: boolean } {\n  const alias = humanizeResourceType(type);\n  const isRequired = opts.required !== false;\n\n  let fields = getDefaultFieldsForType(type);\n  if (opts.fieldsJson) {\n    try {\n      const parsed = JSON.parse(opts.fieldsJson) as Record<\n        string,\n        { env: string; description?: string }\n      >;\n      fields = { ...fields, ...parsed };\n    } catch {\n      console.error(\"Error: --fields-json must be valid JSON.\");\n      console.error(\n        '  Example: --fields-json \\'{\"id\":{\"env\":\"MY_WAREHOUSE_ID\"}}\\'',\n      );\n      process.exit(1);\n    }\n  }\n\n  // Constructed dynamically from a string `type` and string `permission`;\n  // the per-type permission tightness from the discriminated union is\n  // recovered at runtime by `validateManifest` before the entry is written.\n  const entry = {\n    type,\n    alias,\n    resourceKey: opts.resourceKey ?? resourceKeyFromType(type),\n    description:\n      opts.description ||\n      `${isRequired ? \"Required\" : \"Optional\"} for ${alias} functionality.`,\n    permission:\n      opts.permission ?? DEFAULT_PERMISSION_BY_TYPE[type] ?? \"CAN_VIEW\",\n    fields,\n  } as ResourceRequirement;\n\n  return { entry, isRequired };\n}\n\nfunction runNonInteractive(opts: AddResourceOptions): void {\n  const cwd = process.cwd();\n  const pluginDir = path.resolve(cwd, opts.path ?? \".\");\n  const loaded = loadManifest(pluginDir);\n  if (!loaded) return;\n  const { manifest, manifestPath } = loaded;\n\n  const type = opts.type as string;\n  const validTypes = getValidResourceTypes();\n  if (!validTypes.includes(type)) {\n    console.error(`Error: Unknown resource type \"${type}\".`);\n    console.error(`  Valid types: ${validTypes.join(\", \")}`);\n    process.exit(1);\n  }\n  const { entry, isRequired } = buildEntry(type, opts);\n\n  if (isRequired) {\n    manifest.resources.required.push(entry);\n  } else {\n    manifest.resources.optional.push(entry);\n  }\n\n  if (opts.dryRun) {\n    console.log(JSON.stringify(manifest, null, 2));\n    return;\n  }\n\n  fs.writeFileSync(manifestPath, `${JSON.stringify(manifest, null, 2)}\\n`);\n  console.log(\n    `Added ${entry.alias} as ${isRequired ? \"required\" : \"optional\"} to ${path.relative(cwd, manifestPath)}`,\n  );\n}\n\nasync function runInteractive(opts: AddResourceOptions): Promise<void> {\n  intro(\"Add resource to plugin manifest\");\n\n  const cwd = process.cwd();\n  const pluginDir = path.resolve(cwd, opts.path ?? \".\");\n  const loaded = loadManifest(pluginDir);\n  if (!loaded) return;\n  const { manifest, manifestPath } = loaded;\n\n  const spec = await promptOneResource();\n  if (!spec) {\n    cancel(\"Cancelled.\");\n    process.exit(0);\n  }\n\n  const alias = humanizeResourceType(spec.type);\n  // See note on the non-interactive variant in `buildEntry` — the entry is\n  // assembled from prompt strings and validated by Zod at write time.\n  const entry = {\n    type: spec.type,\n    alias,\n    resourceKey: spec.resourceKey,\n    description: spec.description || `Required for ${alias} functionality.`,\n    permission: spec.permission,\n    fields: spec.fields,\n  } as ResourceRequirement;\n\n  if (spec.required) {\n    manifest.resources.required.push(entry);\n  } else {\n    manifest.resources.optional.push(entry);\n  }\n\n  fs.writeFileSync(manifestPath, `${JSON.stringify(manifest, null, 2)}\\n`);\n\n  outro(\"Resource added.\");\n  console.log(\n    `\\nAdded ${alias} as ${spec.required ? \"required\" : \"optional\"} to ${path.relative(cwd, manifestPath)}`,\n  );\n}\n\nasync function runPluginAddResource(opts: AddResourceOptions): Promise<void> {\n  if (opts.type) {\n    runNonInteractive(opts);\n  } else {\n    await runInteractive(opts);\n  }\n}\n\nexport const pluginAddResourceCommand = new Command(\"add-resource\")\n  .description(\n    \"Add a resource requirement to an existing plugin manifest. Overwrites manifest.json in place.\",\n  )\n  .option(\n    \"-p, --path <dir>\",\n    \"Plugin directory containing manifest.json (default: .)\",\n  )\n  .option(\n    \"-t, --type <resource_type>\",\n    \"Resource type (e.g. sql_warehouse, volume). Enables non-interactive mode.\",\n  )\n  .option(\"--required\", \"Mark resource as required (default: true)\", true)\n  .option(\"--no-required\", \"Mark resource as optional\")\n  .option(\"--resource-key <key>\", \"Resource key (default: derived from type)\")\n  .option(\"--description <text>\", \"Description of the resource requirement\")\n  .option(\"--permission <perm>\", \"Permission level (default: from schema)\")\n  .option(\n    \"--fields-json <json>\",\n    'JSON object overriding field env vars (e.g. \\'{\"id\":{\"env\":\"MY_WAREHOUSE_ID\"}}\\')',\n  )\n  .option(\"--dry-run\", \"Preview the updated manifest without writing\")\n  .addHelpText(\n    \"after\",\n    `\nExamples:\n  $ appkit plugin add-resource\n  $ appkit plugin add-resource --path plugins/my-plugin --type sql_warehouse\n  $ appkit plugin add-resource --path plugins/my-plugin --type volume --no-required --dry-run\n  $ appkit plugin add-resource --type sql_warehouse --fields-json '{\"id\":{\"env\":\"MY_WAREHOUSE_ID\"}}'`,\n  )\n  .action((opts) =>\n    runPluginAddResource(opts).catch((err) => {\n      console.error(err);\n      process.exit(1);\n    }),\n  );\n"],"mappings":";;;;;;;;;;;AAiCA,SAAS,aACP,WAC+D;CAC/D,MAAM,WAAW,qBAAqB,WAAW,EAAE,iBAAiB,MAAM,CAAC;AAE3E,KAAI,CAAC,UAAU;AACb,UAAQ,MACN,wBAAwB,UAAU,gFACnC;AACD,UAAQ,MACN,+DACD;AACD,UAAQ,KAAK,EAAE;;AAGjB,KAAI,SAAS,SAAS,QAAQ;AAC5B,UAAQ,MACN,gHAAgH,KAAK,SAAS,SAAS,KAAK,CAAC,IAC9I;AACD,UAAQ,KAAK,EAAE;;CAGjB,MAAM,eAAe,SAAS;AAE9B,KAAI;EACF,MAAM,MAAM,GAAG,aAAa,cAAc,QAAQ;EAClD,MAAM,SAAS,KAAK,MAAM,IAAI;EAC9B,MAAM,SAAS,iBAAiB,OAAO;AACvC,MAAI,CAAC,OAAO,SAAS,CAAC,OAAO,UAAU;AACrC,WAAQ,MACN,8DACD;AACD,WAAQ,KAAK,EAAE;;AAEjB,SAAO;GAAE,UAAU;GAA8B;GAAc;UACxD,KAAK;AACZ,UAAQ,MACN,0CACA,eAAe,QAAQ,IAAI,UAAU,IACtC;AACD,UAAQ,KAAK,EAAE;;;AAInB,SAAS,WACP,MACA,MACqD;CACrD,MAAM,QAAQ,qBAAqB,KAAK;CACxC,MAAM,aAAa,KAAK,aAAa;CAErC,IAAI,SAAS,wBAAwB,KAAK;AAC1C,KAAI,KAAK,WACP,KAAI;EACF,MAAM,SAAS,KAAK,MAAM,KAAK,WAAW;AAI1C,WAAS;GAAE,GAAG;GAAQ,GAAG;GAAQ;SAC3B;AACN,UAAQ,MAAM,2CAA2C;AACzD,UAAQ,MACN,oEACD;AACD,UAAQ,KAAK,EAAE;;AAmBnB,QAAO;EAAE,OAZK;GACZ;GACA;GACA,aAAa,KAAK,eAAe,oBAAoB,KAAK;GAC1D,aACE,KAAK,eACL,GAAG,aAAa,aAAa,WAAW,OAAO,MAAM;GACvD,YACE,KAAK,cAAc,2BAA2B,SAAS;GACzD;GACD;EAEe;EAAY;;AAG9B,SAAS,kBAAkB,MAAgC;CACzD,MAAM,MAAM,QAAQ,KAAK;CAEzB,MAAM,SAAS,aADG,KAAK,QAAQ,KAAK,KAAK,QAAQ,IAAI,CACf;AACtC,KAAI,CAAC,OAAQ;CACb,MAAM,EAAE,UAAU,iBAAiB;CAEnC,MAAM,OAAO,KAAK;CAClB,MAAM,aAAa,uBAAuB;AAC1C,KAAI,CAAC,WAAW,SAAS,KAAK,EAAE;AAC9B,UAAQ,MAAM,iCAAiC,KAAK,IAAI;AACxD,UAAQ,MAAM,kBAAkB,WAAW,KAAK,KAAK,GAAG;AACxD,UAAQ,KAAK,EAAE;;CAEjB,MAAM,EAAE,OAAO,eAAe,WAAW,MAAM,KAAK;AAEpD,KAAI,WACF,UAAS,UAAU,SAAS,KAAK,MAAM;KAEvC,UAAS,UAAU,SAAS,KAAK,MAAM;AAGzC,KAAI,KAAK,QAAQ;AACf,UAAQ,IAAI,KAAK,UAAU,UAAU,MAAM,EAAE,CAAC;AAC9C;;AAGF,IAAG,cAAc,cAAc,GAAG,KAAK,UAAU,UAAU,MAAM,EAAE,CAAC,IAAI;AACxE,SAAQ,IACN,SAAS,MAAM,MAAM,MAAM,aAAa,aAAa,WAAW,MAAM,KAAK,SAAS,KAAK,aAAa,GACvG;;AAGH,eAAe,eAAe,MAAyC;AACrE,OAAM,kCAAkC;CAExC,MAAM,MAAM,QAAQ,KAAK;CAEzB,MAAM,SAAS,aADG,KAAK,QAAQ,KAAK,KAAK,QAAQ,IAAI,CACf;AACtC,KAAI,CAAC,OAAQ;CACb,MAAM,EAAE,UAAU,iBAAiB;CAEnC,MAAM,OAAO,MAAM,mBAAmB;AACtC,KAAI,CAAC,MAAM;AACT,SAAO,aAAa;AACpB,UAAQ,KAAK,EAAE;;CAGjB,MAAM,QAAQ,qBAAqB,KAAK,KAAK;CAG7C,MAAM,QAAQ;EACZ,MAAM,KAAK;EACX;EACA,aAAa,KAAK;EAClB,aAAa,KAAK,eAAe,gBAAgB,MAAM;EACvD,YAAY,KAAK;EACjB,QAAQ,KAAK;EACd;AAED,KAAI,KAAK,SACP,UAAS,UAAU,SAAS,KAAK,MAAM;KAEvC,UAAS,UAAU,SAAS,KAAK,MAAM;AAGzC,IAAG,cAAc,cAAc,GAAG,KAAK,UAAU,UAAU,MAAM,EAAE,CAAC,IAAI;AAExE,OAAM,kBAAkB;AACxB,SAAQ,IACN,WAAW,MAAM,MAAM,KAAK,WAAW,aAAa,WAAW,MAAM,KAAK,SAAS,KAAK,aAAa,GACtG;;AAGH,eAAe,qBAAqB,MAAyC;AAC3E,KAAI,KAAK,KACP,mBAAkB,KAAK;KAEvB,OAAM,eAAe,KAAK;;AAI9B,MAAa,2BAA2B,IAAI,QAAQ,eAAe,CAChE,YACC,gGACD,CACA,OACC,oBACA,yDACD,CACA,OACC,8BACA,4EACD,CACA,OAAO,cAAc,6CAA6C,KAAK,CACvE,OAAO,iBAAiB,4BAA4B,CACpD,OAAO,wBAAwB,4CAA4C,CAC3E,OAAO,wBAAwB,0CAA0C,CACzE,OAAO,uBAAuB,0CAA0C,CACxE,OACC,wBACA,wFACD,CACA,OAAO,aAAa,+CAA+C,CACnE,YACC,SACA;;;;;sGAMD,CACA,QAAQ,SACP,qBAAqB,KAAK,CAAC,OAAO,QAAQ;AACxC,SAAQ,MAAM,IAAI;AAClB,SAAQ,KAAK,EAAE;EACf,CACH"}

package/dist/cli/commands/plugin/create/resource-defaults.js

@@ -3,7 +3,8 @@ import { getResourceTypeOptions, getResourceTypePermissions } from "../schema-re
 //#region src/cli/commands/plugin/create/resource-defaults.ts
 /**
 * Resource type and permission defaults for plugin scaffolding.
-* Values are derived from plugin-manifest.schema.json via schema-resources.
+* Values are sourced from the canonical Zod schemas in `schemas/manifest`,
+* surfaced through the `schema-resources` module.
 */
 const MANIFEST_SCHEMA_ID = "https://databricks.github.io/appkit/schemas/plugin-manifest.schema.json";
 /** Resource types from schema resourceType enum (value, human label). */

package/dist/cli/commands/plugin/create/resource-defaults.js.map

@@ -1 +1 @@
-{"version":3,"file":"resource-defaults.js","names":[],"sources":["../../../../../src/cli/commands/plugin/create/resource-defaults.ts"],"sourcesContent":["/**\n * Resource type and permission defaults for plugin scaffolding.\n * Values are derived from plugin-manifest.schema.json via schema-resources.\n */\n\nimport {\n  getResourceTypeOptions,\n  getResourceTypePermissions,\n  type ResourceTypeOption,\n} from \"../schema-resources\";\n\nexport const MANIFEST_SCHEMA_ID =\n  \"https://databricks.github.io/appkit/schemas/plugin-manifest.schema.json\";\n\nexport type { ResourceTypeOption };\n\n/** Resource types from schema resourceType enum (value, human label). */\nexport const RESOURCE_TYPE_OPTIONS: ResourceTypeOption[] =\n  getResourceTypeOptions();\n\n/** All valid permissions per resource type, from schema allOf/if-then rules. */\nexport const PERMISSIONS_BY_TYPE: Record<string, string[]> =\n  getResourceTypePermissions();\n\n/** Default (first) permission per resource type for scaffolding. */\nexport const DEFAULT_PERMISSION_BY_TYPE: Record<string, string> =\n  Object.fromEntries(\n    Object.entries(PERMISSIONS_BY_TYPE).map(([type, perms]) => [\n      type,\n      perms[0],\n    ]),\n  );\n\n/** Default fields per resource type: field key -> { env, description }. */\nexport const DEFAULT_FIELDS_BY_TYPE: Record<\n  string,\n  Record<string, { env: string; description?: string }>\n> = {\n  sql_warehouse: {\n    id: { env: \"DATABRICKS_WAREHOUSE_ID\", description: \"SQL Warehouse ID\" },\n  },\n  secret: {\n    scope: { env: \"SECRET_SCOPE\", description: \"Secret scope name\" },\n    key: { env: \"SECRET_KEY\", description: \"Secret key\" },\n  },\n  job: {\n    id: { env: \"DATABRICKS_JOB_ID\", description: \"Job ID\" },\n  },\n  serving_endpoint: {\n    id: {\n      env: \"DATABRICKS_SERVING_ENDPOINT_ID\",\n      description: \"Serving endpoint ID\",\n    },\n  },\n  volume: {\n    name: { env: \"VOLUME_NAME\", description: \"Volume name\" },\n  },\n  vector_search_index: {\n    endpoint_name: {\n      env: \"VECTOR_SEARCH_ENDPOINT_NAME\",\n      description: \"Vector search endpoint name\",\n    },\n    index_name: {\n      env: \"VECTOR_SEARCH_INDEX_NAME\",\n      description: \"Vector search index name\",\n    },\n  },\n  uc_function: {\n    name: {\n      env: \"UC_FUNCTION_NAME\",\n      description: \"Unity Catalog function name\",\n    },\n  },\n  uc_connection: {\n    name: {\n      env: \"UC_CONNECTION_NAME\",\n      description: \"Unity Catalog connection name\",\n    },\n  },\n  database: {\n    instance_name: {\n      env: \"DATABRICKS_INSTANCE_NAME\",\n      description: \"Databricks instance name\",\n    },\n    database_name: {\n      env: \"DATABASE_NAME\",\n      description: \"Database name\",\n    },\n  },\n  genie_space: {\n    id: { env: \"GENIE_SPACE_ID\", description: \"Genie Space ID\" },\n  },\n  experiment: {\n    id: { env: \"MLFLOW_EXPERIMENT_ID\", description: \"MLflow experiment ID\" },\n  },\n  app: {\n    id: { env: \"DATABRICKS_APP_ID\", description: \"Databricks App ID\" },\n  },\n};\n\n/** Valid resource type values from the schema. */\nexport function getValidResourceTypes(): string[] {\n  return RESOURCE_TYPE_OPTIONS.map((o) => o.value);\n}\n\n/** Humanized alias from resource type (e.g. sql_warehouse -> \"SQL Warehouse\"). */\nexport function humanizeResourceType(type: string): string {\n  const option = RESOURCE_TYPE_OPTIONS.find((o) => o.value === type);\n  return option ? option.label : type.replace(/_/g, \" \");\n}\n\n/** Kebab-case resource key from type (e.g. sql_warehouse -> \"sql-warehouse\"). */\nexport function resourceKeyFromType(type: string): string {\n  return type.replace(/_/g, \"-\");\n}\n\n/** Get default fields for a resource type; fallback to single id field. */\nexport function getDefaultFieldsForType(\n  type: string,\n): Record<string, { env: string; description?: string }> {\n  const known = DEFAULT_FIELDS_BY_TYPE[type];\n  if (known) return known;\n  const key = resourceKeyFromType(type);\n  const envName = `DATABRICKS_${key.toUpperCase().replace(/-/g, \"_\")}_ID`;\n  return {\n    id: { env: envName, description: `${humanizeResourceType(type)} ID` },\n  };\n}\n"],"mappings":";;;;;;;AAWA,MAAa,qBACX;;AAKF,MAAa,wBACX,wBAAwB;;AAG1B,MAAa,sBACX,4BAA4B;;AAG9B,MAAa,6BACX,OAAO,YACL,OAAO,QAAQ,oBAAoB,CAAC,KAAK,CAAC,MAAM,WAAW,CACzD,MACA,MAAM,GACP,CAAC,CACH;;AAGH,MAAa,yBAGT;CACF,eAAe,EACb,IAAI;EAAE,KAAK;EAA2B,aAAa;EAAoB,EACxE;CACD,QAAQ;EACN,OAAO;GAAE,KAAK;GAAgB,aAAa;GAAqB;EAChE,KAAK;GAAE,KAAK;GAAc,aAAa;GAAc;EACtD;CACD,KAAK,EACH,IAAI;EAAE,KAAK;EAAqB,aAAa;EAAU,EACxD;CACD,kBAAkB,EAChB,IAAI;EACF,KAAK;EACL,aAAa;EACd,EACF;CACD,QAAQ,EACN,MAAM;EAAE,KAAK;EAAe,aAAa;EAAe,EACzD;CACD,qBAAqB;EACnB,eAAe;GACb,KAAK;GACL,aAAa;GACd;EACD,YAAY;GACV,KAAK;GACL,aAAa;GACd;EACF;CACD,aAAa,EACX,MAAM;EACJ,KAAK;EACL,aAAa;EACd,EACF;CACD,eAAe,EACb,MAAM;EACJ,KAAK;EACL,aAAa;EACd,EACF;CACD,UAAU;EACR,eAAe;GACb,KAAK;GACL,aAAa;GACd;EACD,eAAe;GACb,KAAK;GACL,aAAa;GACd;EACF;CACD,aAAa,EACX,IAAI;EAAE,KAAK;EAAkB,aAAa;EAAkB,EAC7D;CACD,YAAY,EACV,IAAI;EAAE,KAAK;EAAwB,aAAa;EAAwB,EACzE;CACD,KAAK,EACH,IAAI;EAAE,KAAK;EAAqB,aAAa;EAAqB,EACnE;CACF;;AAGD,SAAgB,wBAAkC;AAChD,QAAO,sBAAsB,KAAK,MAAM,EAAE,MAAM;;;AAIlD,SAAgB,qBAAqB,MAAsB;CACzD,MAAM,SAAS,sBAAsB,MAAM,MAAM,EAAE,UAAU,KAAK;AAClE,QAAO,SAAS,OAAO,QAAQ,KAAK,QAAQ,MAAM,IAAI;;;AAIxD,SAAgB,oBAAoB,MAAsB;AACxD,QAAO,KAAK,QAAQ,MAAM,IAAI;;;AAIhC,SAAgB,wBACd,MACuD;CACvD,MAAM,QAAQ,uBAAuB;AACrC,KAAI,MAAO,QAAO;AAGlB,QAAO,EACL,IAAI;EAAE,KAFQ,cADJ,oBAAoB,KAAK,CACH,aAAa,CAAC,QAAQ,MAAM,IAAI,CAAC;EAE7C,aAAa,GAAG,qBAAqB,KAAK,CAAC;EAAM,EACtE"}
+{"version":3,"file":"resource-defaults.js","names":[],"sources":["../../../../../src/cli/commands/plugin/create/resource-defaults.ts"],"sourcesContent":["/**\n * Resource type and permission defaults for plugin scaffolding.\n * Values are sourced from the canonical Zod schemas in `schemas/manifest`,\n * surfaced through the `schema-resources` module.\n */\n\nimport {\n  getResourceTypeOptions,\n  getResourceTypePermissions,\n  type ResourceTypeOption,\n} from \"../schema-resources\";\n\nexport const MANIFEST_SCHEMA_ID =\n  \"https://databricks.github.io/appkit/schemas/plugin-manifest.schema.json\";\n\nexport type { ResourceTypeOption };\n\n/** Resource types from schema resourceType enum (value, human label). */\nexport const RESOURCE_TYPE_OPTIONS: ResourceTypeOption[] =\n  getResourceTypeOptions();\n\n/** All valid permissions per resource type, from schema allOf/if-then rules. */\nexport const PERMISSIONS_BY_TYPE: Record<string, string[]> =\n  getResourceTypePermissions();\n\n/** Default (first) permission per resource type for scaffolding. */\nexport const DEFAULT_PERMISSION_BY_TYPE: Record<string, string> =\n  Object.fromEntries(\n    Object.entries(PERMISSIONS_BY_TYPE).map(([type, perms]) => [\n      type,\n      perms[0],\n    ]),\n  );\n\n/** Default fields per resource type: field key -> { env, description }. */\nexport const DEFAULT_FIELDS_BY_TYPE: Record<\n  string,\n  Record<string, { env: string; description?: string }>\n> = {\n  sql_warehouse: {\n    id: { env: \"DATABRICKS_WAREHOUSE_ID\", description: \"SQL Warehouse ID\" },\n  },\n  secret: {\n    scope: { env: \"SECRET_SCOPE\", description: \"Secret scope name\" },\n    key: { env: \"SECRET_KEY\", description: \"Secret key\" },\n  },\n  job: {\n    id: { env: \"DATABRICKS_JOB_ID\", description: \"Job ID\" },\n  },\n  serving_endpoint: {\n    id: {\n      env: \"DATABRICKS_SERVING_ENDPOINT_ID\",\n      description: \"Serving endpoint ID\",\n    },\n  },\n  volume: {\n    name: { env: \"VOLUME_NAME\", description: \"Volume name\" },\n  },\n  vector_search_index: {\n    endpoint_name: {\n      env: \"VECTOR_SEARCH_ENDPOINT_NAME\",\n      description: \"Vector search endpoint name\",\n    },\n    index_name: {\n      env: \"VECTOR_SEARCH_INDEX_NAME\",\n      description: \"Vector search index name\",\n    },\n  },\n  uc_function: {\n    name: {\n      env: \"UC_FUNCTION_NAME\",\n      description: \"Unity Catalog function name\",\n    },\n  },\n  uc_connection: {\n    name: {\n      env: \"UC_CONNECTION_NAME\",\n      description: \"Unity Catalog connection name\",\n    },\n  },\n  database: {\n    instance_name: {\n      env: \"DATABRICKS_INSTANCE_NAME\",\n      description: \"Databricks instance name\",\n    },\n    database_name: {\n      env: \"DATABASE_NAME\",\n      description: \"Database name\",\n    },\n  },\n  genie_space: {\n    id: { env: \"GENIE_SPACE_ID\", description: \"Genie Space ID\" },\n  },\n  experiment: {\n    id: { env: \"MLFLOW_EXPERIMENT_ID\", description: \"MLflow experiment ID\" },\n  },\n  app: {\n    id: { env: \"DATABRICKS_APP_ID\", description: \"Databricks App ID\" },\n  },\n};\n\n/** Valid resource type values from the schema. */\nexport function getValidResourceTypes(): string[] {\n  return RESOURCE_TYPE_OPTIONS.map((o) => o.value);\n}\n\n/** Humanized alias from resource type (e.g. sql_warehouse -> \"SQL Warehouse\"). */\nexport function humanizeResourceType(type: string): string {\n  const option = RESOURCE_TYPE_OPTIONS.find((o) => o.value === type);\n  return option ? option.label : type.replace(/_/g, \" \");\n}\n\n/** Kebab-case resource key from type (e.g. sql_warehouse -> \"sql-warehouse\"). */\nexport function resourceKeyFromType(type: string): string {\n  return type.replace(/_/g, \"-\");\n}\n\n/** Get default fields for a resource type; fallback to single id field. */\nexport function getDefaultFieldsForType(\n  type: string,\n): Record<string, { env: string; description?: string }> {\n  const known = DEFAULT_FIELDS_BY_TYPE[type];\n  if (known) return known;\n  const key = resourceKeyFromType(type);\n  const envName = `DATABRICKS_${key.toUpperCase().replace(/-/g, \"_\")}_ID`;\n  return {\n    id: { env: envName, description: `${humanizeResourceType(type)} ID` },\n  };\n}\n"],"mappings":";;;;;;;;AAYA,MAAa,qBACX;;AAKF,MAAa,wBACX,wBAAwB;;AAG1B,MAAa,sBACX,4BAA4B;;AAG9B,MAAa,6BACX,OAAO,YACL,OAAO,QAAQ,oBAAoB,CAAC,KAAK,CAAC,MAAM,WAAW,CACzD,MACA,MAAM,GACP,CAAC,CACH;;AAGH,MAAa,yBAGT;CACF,eAAe,EACb,IAAI;EAAE,KAAK;EAA2B,aAAa;EAAoB,EACxE;CACD,QAAQ;EACN,OAAO;GAAE,KAAK;GAAgB,aAAa;GAAqB;EAChE,KAAK;GAAE,KAAK;GAAc,aAAa;GAAc;EACtD;CACD,KAAK,EACH,IAAI;EAAE,KAAK;EAAqB,aAAa;EAAU,EACxD;CACD,kBAAkB,EAChB,IAAI;EACF,KAAK;EACL,aAAa;EACd,EACF;CACD,QAAQ,EACN,MAAM;EAAE,KAAK;EAAe,aAAa;EAAe,EACzD;CACD,qBAAqB;EACnB,eAAe;GACb,KAAK;GACL,aAAa;GACd;EACD,YAAY;GACV,KAAK;GACL,aAAa;GACd;EACF;CACD,aAAa,EACX,MAAM;EACJ,KAAK;EACL,aAAa;EACd,EACF;CACD,eAAe,EACb,MAAM;EACJ,KAAK;EACL,aAAa;EACd,EACF;CACD,UAAU;EACR,eAAe;GACb,KAAK;GACL,aAAa;GACd;EACD,eAAe;GACb,KAAK;GACL,aAAa;GACd;EACF;CACD,aAAa,EACX,IAAI;EAAE,KAAK;EAAkB,aAAa;EAAkB,EAC7D;CACD,YAAY,EACV,IAAI;EAAE,KAAK;EAAwB,aAAa;EAAwB,EACzE;CACD,KAAK,EACH,IAAI;EAAE,KAAK;EAAqB,aAAa;EAAqB,EACnE;CACF;;AAGD,SAAgB,wBAAkC;AAChD,QAAO,sBAAsB,KAAK,MAAM,EAAE,MAAM;;;AAIlD,SAAgB,qBAAqB,MAAsB;CACzD,MAAM,SAAS,sBAAsB,MAAM,MAAM,EAAE,UAAU,KAAK;AAClE,QAAO,SAAS,OAAO,QAAQ,KAAK,QAAQ,MAAM,IAAI;;;AAIxD,SAAgB,oBAAoB,MAAsB;AACxD,QAAO,KAAK,QAAQ,MAAM,IAAI;;;AAIhC,SAAgB,wBACd,MACuD;CACvD,MAAM,QAAQ,uBAAuB;AACrC,KAAI,MAAO,QAAO;AAGlB,QAAO,EACL,IAAI;EAAE,KAFQ,cADJ,oBAAoB,KAAK,CACH,aAAa,CAAC,QAAQ,MAAM,IAAI,CAAC;EAE7C,aAAa,GAAG,qBAAqB,KAAK,CAAC;EAAM,EACtE"}

package/dist/cli/commands/plugin/schema-resources.js

@@ -1,21 +1,14 @@
-import fs from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
+import { appPermissionSchema, databasePermissionSchema, experimentPermissionSchema, genieSpacePermissionSchema, jobPermissionSchema, postgresPermissionSchema, resourceTypeSchema, secretPermissionSchema, servingEndpointPermissionSchema, sqlWarehousePermissionSchema, ucConnectionPermissionSchema, ucFunctionPermissionSchema, vectorSearchIndexPermissionSchema, volumePermissionSchema } from "../../../schemas/manifest.js";
 
 //#region src/cli/commands/plugin/schema-resources.ts
 /**
-* Resource types and permissions derived from plugin-manifest.schema.json.
-* Single source of truth so create, add-resource, and validate stay in sync with the schema.
+* Resource types and permissions sourced from the canonical Zod schemas in
+* `schemas/manifest.ts`. Single source of truth so create, add-resource, and
+* validate stay in sync with the schema.
+*
+* Values are constant at module load (direct Zod imports, no runtime JSON-schema
+* read), so no caching is needed.
 */
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-const SCHEMA_NAME = "plugin-manifest.schema.json";
-const SCHEMA_PATHS = [path.join(__dirname, "..", "..", "..", "schemas", SCHEMA_NAME), path.join(__dirname, "..", "..", "schemas", SCHEMA_NAME)];
-function loadSchema() {
-	for (const schemaPath of SCHEMA_PATHS) try {
-		if (fs.existsSync(schemaPath)) return JSON.parse(fs.readFileSync(schemaPath, "utf-8"));
-	} catch {}
-	return null;
-}
 /** Optional display overrides for acronyms (e.g. SQL, UC). Omitted entries use title-case of value. */
 const LABEL_OVERRIDES = {
 	sql_warehouse: "SQL Warehouse",
@@ -26,54 +19,44 @@ function humanize(value) {
 	if (LABEL_OVERRIDES[value]) return LABEL_OVERRIDES[value];
 	return value.replace(/_/g, " ").replace(/\b\w/g, (c) => c.toUpperCase());
 }
-let cachedOptions = null;
-let cachedPermissions = null;
 /**
-* Resource type options (value + label) from schema $defs.resourceType.enum.
+* Map from resource type literal to its permission enum schema. Mirrors the
+* `allOf + if/then` block in the previous hand-written JSON Schema, but driven
+* directly from the Zod source. Add an entry here when extending
+* `resourceTypeSchema`.
+*/
+const PERMISSION_SCHEMAS_BY_TYPE = {
+	secret: secretPermissionSchema,
+	job: jobPermissionSchema,
+	sql_warehouse: sqlWarehousePermissionSchema,
+	serving_endpoint: servingEndpointPermissionSchema,
+	volume: volumePermissionSchema,
+	vector_search_index: vectorSearchIndexPermissionSchema,
+	uc_function: ucFunctionPermissionSchema,
+	uc_connection: ucConnectionPermissionSchema,
+	database: databasePermissionSchema,
+	postgres: postgresPermissionSchema,
+	genie_space: genieSpacePermissionSchema,
+	experiment: experimentPermissionSchema,
+	app: appPermissionSchema
+};
+/**
+* Resource type options (value + label) from `resourceTypeSchema.options`.
 */
 function getResourceTypeOptions() {
-	if (cachedOptions) return cachedOptions;
-	const enumArr = ((loadSchema()?.$defs)?.resourceType)?.enum;
-	if (!Array.isArray(enumArr)) {
-		cachedOptions = [];
-		return cachedOptions;
-	}
-	cachedOptions = enumArr.map((value) => ({
+	return resourceTypeSchema.options.map((value) => ({
 		value,
 		label: humanize(value)
 	}));
-	return cachedOptions;
 }
 /**
-* Permissions per resource type from schema resourceRequirement.allOf (if/then).
+* Permissions per resource type, derived from each type's per-type permission
+* schema's `.options` array. Order is weakest-to-strongest (matches Zod enum
+* declaration order, which the original JSON Schema also preserved).
 */
 function getResourceTypePermissions() {
-	if (cachedPermissions) return cachedPermissions;
-	const schema = loadSchema();
 	const out = {};
-	if (!schema?.$defs || typeof schema.$defs !== "object") {
-		cachedPermissions = out;
-		return out;
-	}
-	const allOf = schema.$defs.resourceRequirement?.allOf;
-	if (!Array.isArray(allOf)) {
-		cachedPermissions = out;
-		return out;
-	}
-	for (const branch of allOf) {
-		const typeConst = branch?.if?.properties?.type?.const;
-		const ref = branch?.then?.properties?.permission?.$ref;
-		if (typeof typeConst !== "string" || typeof ref !== "string") continue;
-		const refSegments = ref.replace(/^#\//, "").split("/");
-		let def = schema;
-		for (const seg of refSegments) {
-			if (def == null || typeof def !== "object") break;
-			def = def[seg];
-		}
-		const enumArr = Array.isArray(def?.enum) ? def.enum : void 0;
-		if (enumArr?.length) out[typeConst] = enumArr;
-	}
-	cachedPermissions = out;
+	for (const [type, schema] of Object.entries(PERMISSION_SCHEMAS_BY_TYPE)) out[type] = [...schema.options];
 	return out;
 }
 

package/dist/cli/commands/plugin/schema-resources.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema-resources.js","names":[],"sources":["../../../../src/cli/commands/plugin/schema-resources.ts"],"sourcesContent":["/**\n * Resource types and permissions derived from plugin-manifest.schema.json.\n * Single source of truth so create, add-resource, and validate stay in sync with the schema.\n */\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\nconst SCHEMA_NAME = \"plugin-manifest.schema.json\";\n// Try dist/schemas first (shared build + appkit pack), then dist/cli/schemas\nconst SCHEMA_PATHS = [\n  path.join(__dirname, \"..\", \"..\", \"..\", \"schemas\", SCHEMA_NAME),\n  path.join(__dirname, \"..\", \"..\", \"schemas\", SCHEMA_NAME),\n];\n\nexport interface ResourceTypeOption {\n  value: string;\n  label: string;\n}\n\nfunction loadSchema(): Record<string, unknown> | null {\n  for (const schemaPath of SCHEMA_PATHS) {\n    try {\n      if (fs.existsSync(schemaPath)) {\n        return JSON.parse(fs.readFileSync(schemaPath, \"utf-8\")) as Record<\n          string,\n          unknown\n        >;\n      }\n    } catch {\n      // try next path\n    }\n  }\n  return null;\n}\n\n/** Optional display overrides for acronyms (e.g. SQL, UC). Omitted entries use title-case of value. */\nconst LABEL_OVERRIDES: Record<string, string> = {\n  sql_warehouse: \"SQL Warehouse\",\n  uc_function: \"UC Function\",\n  uc_connection: \"UC Connection\",\n};\n\nfunction humanize(value: string): string {\n  if (LABEL_OVERRIDES[value]) return LABEL_OVERRIDES[value];\n  return value.replace(/_/g, \" \").replace(/\\b\\w/g, (c) => c.toUpperCase());\n}\n\nlet cachedOptions: ResourceTypeOption[] | null = null;\nlet cachedPermissions: Record<string, string[]> | null = null;\n\n/**\n * Resource type options (value + label) from schema $defs.resourceType.enum.\n */\nexport function getResourceTypeOptions(): ResourceTypeOption[] {\n  if (cachedOptions) return cachedOptions;\n  const schema = loadSchema();\n  const defs = schema?.$defs as Record<string, unknown> | undefined;\n  const resourceType = defs?.resourceType as { enum?: string[] } | undefined;\n  const enumArr = resourceType?.enum;\n  if (!Array.isArray(enumArr)) {\n    cachedOptions = [];\n    return cachedOptions;\n  }\n  cachedOptions = enumArr.map((value) => ({\n    value,\n    label: humanize(value),\n  }));\n  return cachedOptions;\n}\n\n/**\n * Permissions per resource type from schema resourceRequirement.allOf (if/then).\n */\nexport function getResourceTypePermissions(): Record<string, string[]> {\n  if (cachedPermissions) return cachedPermissions;\n  const schema = loadSchema();\n  const out: Record<string, string[]> = {};\n  if (!schema?.$defs || typeof schema.$defs !== \"object\") {\n    cachedPermissions = out;\n    return out;\n  }\n  const defs = schema.$defs as Record<string, unknown>;\n  const resourceReq = defs.resourceRequirement as\n    | Record<string, unknown>\n    | undefined;\n  const allOf = resourceReq?.allOf as\n    | Array<{\n        if?: { properties?: { type?: { const?: string } } };\n        then?: { properties?: { permission?: { $ref?: string } } };\n      }>\n    | undefined;\n  if (!Array.isArray(allOf)) {\n    cachedPermissions = out;\n    return out;\n  }\n  for (const branch of allOf) {\n    const typeConst = branch?.if?.properties?.type?.const;\n    const ref = branch?.then?.properties?.permission?.$ref;\n    if (typeof typeConst !== \"string\" || typeof ref !== \"string\") continue;\n    const refSegments = ref.replace(/^#\\//, \"\").split(\"/\");\n    let def: unknown = schema;\n    for (const seg of refSegments) {\n      if (def == null || typeof def !== \"object\") break;\n      def = (def as Record<string, unknown>)[seg];\n    }\n    const enumArr = Array.isArray((def as { enum?: string[] })?.enum)\n      ? (def as { enum: string[] }).enum\n      : undefined;\n    if (enumArr?.length) out[typeConst] = enumArr;\n  }\n  cachedPermissions = out;\n  return out;\n}\n"],"mappings":";;;;;;;;;AAQA,MAAM,YAAY,KAAK,QAAQ,cAAc,OAAO,KAAK,IAAI,CAAC;AAC9D,MAAM,cAAc;AAEpB,MAAM,eAAe,CACnB,KAAK,KAAK,WAAW,MAAM,MAAM,MAAM,WAAW,YAAY,EAC9D,KAAK,KAAK,WAAW,MAAM,MAAM,WAAW,YAAY,CACzD;AAOD,SAAS,aAA6C;AACpD,MAAK,MAAM,cAAc,aACvB,KAAI;AACF,MAAI,GAAG,WAAW,WAAW,CAC3B,QAAO,KAAK,MAAM,GAAG,aAAa,YAAY,QAAQ,CAAC;SAKnD;AAIV,QAAO;;;AAIT,MAAM,kBAA0C;CAC9C,eAAe;CACf,aAAa;CACb,eAAe;CAChB;AAED,SAAS,SAAS,OAAuB;AACvC,KAAI,gBAAgB,OAAQ,QAAO,gBAAgB;AACnD,QAAO,MAAM,QAAQ,MAAM,IAAI,CAAC,QAAQ,UAAU,MAAM,EAAE,aAAa,CAAC;;AAG1E,IAAI,gBAA6C;AACjD,IAAI,oBAAqD;;;;AAKzD,SAAgB,yBAA+C;AAC7D,KAAI,cAAe,QAAO;CAI1B,MAAM,YAHS,YAAY,EACN,QACM,eACG;AAC9B,KAAI,CAAC,MAAM,QAAQ,QAAQ,EAAE;AAC3B,kBAAgB,EAAE;AAClB,SAAO;;AAET,iBAAgB,QAAQ,KAAK,WAAW;EACtC;EACA,OAAO,SAAS,MAAM;EACvB,EAAE;AACH,QAAO;;;;;AAMT,SAAgB,6BAAuD;AACrE,KAAI,kBAAmB,QAAO;CAC9B,MAAM,SAAS,YAAY;CAC3B,MAAM,MAAgC,EAAE;AACxC,KAAI,CAAC,QAAQ,SAAS,OAAO,OAAO,UAAU,UAAU;AACtD,sBAAoB;AACpB,SAAO;;CAMT,MAAM,QAJO,OAAO,MACK,qBAGE;AAM3B,KAAI,CAAC,MAAM,QAAQ,MAAM,EAAE;AACzB,sBAAoB;AACpB,SAAO;;AAET,MAAK,MAAM,UAAU,OAAO;EAC1B,MAAM,YAAY,QAAQ,IAAI,YAAY,MAAM;EAChD,MAAM,MAAM,QAAQ,MAAM,YAAY,YAAY;AAClD,MAAI,OAAO,cAAc,YAAY,OAAO,QAAQ,SAAU;EAC9D,MAAM,cAAc,IAAI,QAAQ,QAAQ,GAAG,CAAC,MAAM,IAAI;EACtD,IAAI,MAAe;AACnB,OAAK,MAAM,OAAO,aAAa;AAC7B,OAAI,OAAO,QAAQ,OAAO,QAAQ,SAAU;AAC5C,SAAO,IAAgC;;EAEzC,MAAM,UAAU,MAAM,QAAS,KAA6B,KAAK,GAC5D,IAA2B,OAC5B;AACJ,MAAI,SAAS,OAAQ,KAAI,aAAa;;AAExC,qBAAoB;AACpB,QAAO"}
+{"version":3,"file":"schema-resources.js","names":[],"sources":["../../../../src/cli/commands/plugin/schema-resources.ts"],"sourcesContent":["/**\n * Resource types and permissions sourced from the canonical Zod schemas in\n * `schemas/manifest.ts`. Single source of truth so create, add-resource, and\n * validate stay in sync with the schema.\n *\n * Values are constant at module load (direct Zod imports, no runtime JSON-schema\n * read), so no caching is needed.\n */\nimport {\n  appPermissionSchema,\n  databasePermissionSchema,\n  experimentPermissionSchema,\n  genieSpacePermissionSchema,\n  jobPermissionSchema,\n  postgresPermissionSchema,\n  resourceTypeSchema,\n  secretPermissionSchema,\n  servingEndpointPermissionSchema,\n  sqlWarehousePermissionSchema,\n  ucConnectionPermissionSchema,\n  ucFunctionPermissionSchema,\n  vectorSearchIndexPermissionSchema,\n  volumePermissionSchema,\n} from \"../../../schemas/manifest\";\n\nexport interface ResourceTypeOption {\n  value: string;\n  label: string;\n}\n\n/** Optional display overrides for acronyms (e.g. SQL, UC). Omitted entries use title-case of value. */\nconst LABEL_OVERRIDES: Record<string, string> = {\n  sql_warehouse: \"SQL Warehouse\",\n  uc_function: \"UC Function\",\n  uc_connection: \"UC Connection\",\n};\n\nfunction humanize(value: string): string {\n  if (LABEL_OVERRIDES[value]) return LABEL_OVERRIDES[value];\n  return value.replace(/_/g, \" \").replace(/\\b\\w/g, (c) => c.toUpperCase());\n}\n\n/**\n * Map from resource type literal to its permission enum schema. Mirrors the\n * `allOf + if/then` block in the previous hand-written JSON Schema, but driven\n * directly from the Zod source. Add an entry here when extending\n * `resourceTypeSchema`.\n */\nconst PERMISSION_SCHEMAS_BY_TYPE = {\n  secret: secretPermissionSchema,\n  job: jobPermissionSchema,\n  sql_warehouse: sqlWarehousePermissionSchema,\n  serving_endpoint: servingEndpointPermissionSchema,\n  volume: volumePermissionSchema,\n  vector_search_index: vectorSearchIndexPermissionSchema,\n  uc_function: ucFunctionPermissionSchema,\n  uc_connection: ucConnectionPermissionSchema,\n  database: databasePermissionSchema,\n  postgres: postgresPermissionSchema,\n  genie_space: genieSpacePermissionSchema,\n  experiment: experimentPermissionSchema,\n  app: appPermissionSchema,\n} as const;\n\n/**\n * Resource type options (value + label) from `resourceTypeSchema.options`.\n */\nexport function getResourceTypeOptions(): ResourceTypeOption[] {\n  return resourceTypeSchema.options.map((value) => ({\n    value,\n    label: humanize(value),\n  }));\n}\n\n/**\n * Permissions per resource type, derived from each type's per-type permission\n * schema's `.options` array. Order is weakest-to-strongest (matches Zod enum\n * declaration order, which the original JSON Schema also preserved).\n */\nexport function getResourceTypePermissions(): Record<string, string[]> {\n  const out: Record<string, string[]> = {};\n  for (const [type, schema] of Object.entries(PERMISSION_SCHEMAS_BY_TYPE)) {\n    out[type] = [...schema.options];\n  }\n  return out;\n}\n"],"mappings":";;;;;;;;;;;;AA+BA,MAAM,kBAA0C;CAC9C,eAAe;CACf,aAAa;CACb,eAAe;CAChB;AAED,SAAS,SAAS,OAAuB;AACvC,KAAI,gBAAgB,OAAQ,QAAO,gBAAgB;AACnD,QAAO,MAAM,QAAQ,MAAM,IAAI,CAAC,QAAQ,UAAU,MAAM,EAAE,aAAa,CAAC;;;;;;;;AAS1E,MAAM,6BAA6B;CACjC,QAAQ;CACR,KAAK;CACL,eAAe;CACf,kBAAkB;CAClB,QAAQ;CACR,qBAAqB;CACrB,aAAa;CACb,eAAe;CACf,UAAU;CACV,UAAU;CACV,aAAa;CACb,YAAY;CACZ,KAAK;CACN;;;;AAKD,SAAgB,yBAA+C;AAC7D,QAAO,mBAAmB,QAAQ,KAAK,WAAW;EAChD;EACA,OAAO,SAAS,MAAM;EACvB,EAAE;;;;;;;AAQL,SAAgB,6BAAuD;CACrE,MAAM,MAAgC,EAAE;AACxC,MAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,2BAA2B,CACrE,KAAI,QAAQ,CAAC,GAAG,OAAO,QAAQ;AAEjC,QAAO"}

package/dist/cli/commands/plugin/sync/sync.js

@@ -1,3 +1,4 @@
+import { TEMPLATE_SCAFFOLDING, templateFieldEntrySchema } from "../../../../schemas/manifest.js";
 import { loadManifestFromFile, resolveManifestInDir } from "../manifest-resolve.js";
 import { formatValidationErrors, validateManifest } from "../validate/validate-manifest.js";
 import { shouldAllowJsManifestForPackage } from "../trusted-js-manifest.js";
@@ -21,13 +22,13 @@ function isWithinDirectory(filePath, boundary) {
 	return resolvedPath === resolvedBoundary || resolvedPath.startsWith(`${resolvedBoundary}${path.sep}`);
 }
 /**
-* Validates a parsed JSON object against the plugin-manifest JSON schema.
+* Validates a parsed JSON object against the plugin-manifest schema.
 * Returns the manifest if valid, or null and logs schema errors.
 */
 function validateManifestWithSchema(obj, sourcePath) {
 	const result = validateManifest(obj);
 	if (result.valid && result.manifest) return result.manifest;
-	if (result.errors?.length) console.warn(`Warning: Manifest at ${sourcePath} failed schema validation:\n${formatValidationErrors(result.errors, obj)}`);
+	if (result.errors?.length) console.warn(`Warning: Manifest at ${sourcePath} failed schema validation:\n${formatValidationErrors(result.errors)}`);
 	return null;
 }
 /** Safety limit for recursive directory scanning to prevent runaway traversal. */
@@ -47,7 +48,8 @@ async function loadPluginEntry(resolved, pkg, allowJsManifest) {
 		package: pkg,
 		resources: manifest.resources,
 		...manifest.onSetupMessage && { onSetupMessage: manifest.onSetupMessage },
-		...manifest.stability && manifest.stability !== "ga" && { stability: manifest.stability }
+		...manifest.stability && manifest.stability !== "ga" && { stability: manifest.stability },
+		...manifest.scaffolding && { scaffolding: manifest.scaffolding }
 	}];
 }
 /**
@@ -256,7 +258,8 @@ async function scanForPlugins(cwd, packages, allowJsManifest) {
 				package: packageName,
 				resources: manifest.resources,
 				...manifest.onSetupMessage && { onSetupMessage: manifest.onSetupMessage },
-				...manifest.stability && manifest.stability !== "ga" && { stability: manifest.stability }
+				...manifest.stability && manifest.stability !== "ga" && { stability: manifest.stability },
+				...manifest.scaffolding && { scaffolding: manifest.scaffolding }
 			};
 		}
 	}
@@ -321,12 +324,23 @@ async function scanPluginsDir(dir, packageName, allowJsManifest, cwd) {
 }
 /**
 * Write (or preview) the template plugins manifest to disk.
+*
+* Each resource field is parsed through `templateFieldEntrySchema` so the
+* `origin` transform fires and produces canonical `origin` values, even
+* when the input carries a stale `origin`. Parsing per-field (rather than
+* the whole manifest) keeps the surrounding plugin/resource key order
+* stable so the synced JSON's diff stays minimal.
 */
 function writeManifest(outputPath, { plugins }, options) {
+	for (const plugin of Object.values(plugins)) for (const group of [plugin.resources.required, plugin.resources.optional]) for (const resource of group) {
+		if (!resource.fields) continue;
+		for (const fieldName of Object.keys(resource.fields)) resource.fields[fieldName] = templateFieldEntrySchema.parse(resource.fields[fieldName]);
+	}
 	const templateManifest = {
 		$schema: "https://databricks.github.io/appkit/schemas/template-plugins.schema.json",
-		version: "1.1",
-		plugins
+		version: "2.0",
+		plugins,
+		scaffolding: TEMPLATE_SCAFFOLDING
 	};
 	const serialized = JSON.stringify(templateManifest, null, 2);
 	if (options.json) console.log(serialized);