@happyvertical/smrt-cli 0.55.1 → 0.55.3

package/AGENTS.md

@@ -11,7 +11,7 @@ smrt doctor --db             # Add the live-schema parity section (see below)
 smrt db:status               # Pending schema changes + failed migration classification (+ tenant natural-key findings: a missing tenant-led unique exits 1, a surviving legacy global unique warns until `db:migrate --drop-legacy-natural-key`: src/commands/tenant-natural-keys.ts)
 smrt db:status --parity      # Same, plus live-schema parity (see below)
 smrt db:orphans              # agents/db-orphans.md
-smrt db:migrate              # agents/type-drift.md
+smrt db:migrate              # agents/type-drift.md, agents/db-migrate-concurrency.md
 smrt db:migrate --postgres-safe # PostgreSQL concurrent-index mode (see below)
 smrt db:migrate --force-migration <exact-id> [--force-migration <exact-id>...] # Force exact generated migrations in one atomic batch
 smrt db:migrate --apply-unblocked / --null-orphans # agents/db-migrate-partial-apply.md

package/agents/db-migrate-concurrency.md

@@ -0,0 +1,55 @@
+# `db:migrate` concurrency (#3634)
+
+Two processes migrating one PostgreSQL database at once — two workloads that
+gate startup on `db:migrate`, a rolling restart, a break-glass Job beside running
+pods — used to both compare the live schema, plan the same batch, and the
+second failed part way with `42701`/`42P07` "already exists" or a `40P01`
+deadlock. The tracker's per-migration `running` rows cannot prevent that: they
+are written after the diff, when both runs have already planned.
+
+## Contract
+
+- A non-dry-run `db:migrate` on PostgreSQL calls core `acquireMigrationLock()`
+  right after connecting, before the system-timestamp step, tracker bootstrap,
+  and schema comparison, and releases it in the handler's `finally`.
+- The lock is `pg_try_advisory_lock(hashtext('smrt'), hashtext('db:migrate'))`
+  (`MIGRATION_ADVISORY_LOCK_KEYS`) on its own `acquireSession()` connection,
+  polled once a second. Polling, not a blocking `pg_advisory_lock`, so the
+  connection's `lock_timeout` never cuts the wait short and the wait can be
+  logged. Never change the keys: runs of an old and a new release must still
+  exclude each other.
+- A waiting run logs `Another db:migrate run holds the migration lock…`, then,
+  once it holds the lock, compares a current schema and applies nothing.
+- The wait is bounded by `migrations.postgres.migrationLockTimeout` (default
+  `15min`; `ms`/`s`/`min`/`h` forms; `0` waits indefinitely). On expiry the run
+  fails with `MigrationLockTimeoutError` before reading any schema.
+- The lock dies with its connection: a crashed or killed migrator never strands
+  it. `SessionHandle.release()` runs `pg_advisory_unlock_all()` and destroys the
+  connection.
+- The flip side: if the lock's own connection dies mid-run (failover, an
+  idle-connection reaper, a terminated backend) PostgreSQL frees the lock while
+  the run's pool connections carry on. The handler calls `lock.assertHeld()`
+  (a `pg_locks` probe on the pinned session) before applying and again before
+  the post-apply contract check; a lost lock fails the run with
+  `MigrationLockLostError` and exit 1, and the next run converges. The lock
+  session sets `idle_session_timeout = 0` (PostgreSQL 14+), because it idles for
+  the whole run and a role- or database-level setting would reap it first.
+- Session advisory locks need a real session: a transaction-pooling proxy
+  (PgBouncer `pool_mode=transaction`) between `db:migrate` and PostgreSQL
+  defeats them. Migrate through a direct or session-pooled connection.
+- `--dry-run` only reads and never waits. SQLite/DuckDB need no lock (no-op).
+  A PostgreSQL adapter without `acquireSession()` is refused
+  (`MigrationLockUnsupportedError`) rather than run unserialized.
+- The maintenance-window `db:migrate-*` subcommands do not take this lock; run
+  them with application migrators stopped.
+
+## Tests
+
+- `packages/core/src/migrations/__tests__/migration-lock.test.ts` — contract.
+- `…/migration-lock-postgres.optional.test.ts` — real waits, timeout, release
+  on a terminated holder backend (and the holder's `assertHeld()` failing),
+  survival under a 1s server `idle_session_timeout`.
+- `packages/cli/src/commands/__tests__/db-migrate-concurrent-postgres.test.ts`
+  — two concurrent CLI runs apply one batch; a held lock blocks a run before it
+  touches schema. Each run gets its own pool (`getDatabase` caches one pool per
+  identity in-process, which two real processes would not share).

package/dist/{AuditLogCollection-WDHL-_AF-G2UOSM3H.js → AuditLogCollection-WDHL-_AF-Bgyxf5sF.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as tenantId, r as TenantScoped } from "./dist-wrk3GKo3.js";
+import { i as tenantId, r as TenantScoped } from "./dist-DRSQUACn.js";
 import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
 import { SmrtCollection, SmrtObject, field, foreignKey, smrt } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/AuditLogCollection-WDHL-_AF.js

package/dist/{OidcIdentity-BjRu3n1g-CzvSN6Wz.js → OidcIdentity-BUblgQLs-B4mzosmT.js}

@@ -1,5 +1,5 @@
 import { SmrtObject, field, foreignKey, smrt } from "@happyvertical/smrt-core";
-//#region ../profiles/dist/chunks/OidcIdentity-BjRu3n1g.js
+//#region ../profiles/dist/chunks/OidcIdentity-BUblgQLs.js
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, {
@@ -42,7 +42,7 @@ var OidcIdentity = class extends SmrtObject {
 	* Find identity by issuer and subject
 	*/
 	static async findBySubject(issuer, subject, options = {}) {
-		const { OidcIdentityCollection } = await import("./OidcIdentityCollection-B4jYh36_-6UWtXCwi.js").then((n) => n.r).then((n) => n.r);
+		const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-DqB9Ex4b.js").then((n) => n.r).then((n) => n.r);
 		return await (await OidcIdentityCollection.create(options)).findBySubject(issuer, subject);
 	}
 	/** Build the collision-free natural key for one OIDC issuer subject. */
@@ -65,7 +65,7 @@ var OidcIdentity = class extends SmrtObject {
 	static async findOrCreate(profile, oidcData, options = {}) {
 		const profileId = profile.id;
 		if (typeof profileId !== "string" || !profileId) throw new Error("OidcIdentity.findOrCreate() requires a saved Profile.");
-		const { reuseExistingOidcIdentityForProfile } = await import("./resolveIdentity-CvGDegU6-BePPF1Iv.js").then((n) => n.i).then((n) => n.i);
+		const { reuseExistingOidcIdentityForProfile } = await import("./resolveIdentity-CkyqvctR-DFVUhcM1.js").then((n) => n.i).then((n) => n.i);
 		const profileOptions = profile.options ?? {};
 		return (await reuseExistingOidcIdentityForProfile(profileId, {
 			email: oidcData.email,

package/dist/{OidcIdentityCollection-B4jYh36_-6UWtXCwi.js → OidcIdentityCollection-ClOyaHeF-DqB9Ex4b.js}

@@ -1,9 +1,9 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
-import { t as OidcIdentity } from "./OidcIdentity-BjRu3n1g-CzvSN6Wz.js";
+import { t as OidcIdentity } from "./OidcIdentity-BUblgQLs-B4mzosmT.js";
 import { SmrtCollection } from "@happyvertical/smrt-core";
-//#region ../profiles/dist/chunks/OidcIdentityCollection-B4jYh36_.js
-var OidcIdentityCollection_B4jYh36__exports = /* @__PURE__ */ __exportAll({
+//#region ../profiles/dist/chunks/OidcIdentityCollection-ClOyaHeF.js
+var OidcIdentityCollection_ClOyaHeF_exports = /* @__PURE__ */ __exportAll({
 	n: () => OidcIdentityCollection,
 	r: () => OidcIdentityCollection_exports,
 	t: () => AmbiguousOidcIdentityError
@@ -83,4 +83,4 @@ var OidcIdentityCollection = class extends SmrtCollection {
 	}
 };
 //#endregion
-export { OidcIdentityCollection as n, OidcIdentityCollection_B4jYh36__exports as r, AmbiguousOidcIdentityError as t };
+export { OidcIdentityCollection as n, OidcIdentityCollection_ClOyaHeF_exports as r, AmbiguousOidcIdentityError as t };

package/dist/{ProfileAssetCollection-HeMtjBc0-Cz4MOeSB.js → ProfileAssetCollection-CRMcjLJ--CIoZ9Fd2.js}

@@ -1,10 +1,10 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as tenantId, r as TenantScoped } from "./dist-wrk3GKo3.js";
+import { i as tenantId, r as TenantScoped } from "./dist-DRSQUACn.js";
 import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
-import { a as getOwnedAssetsFromCollection, o as removeOwnedAssetFromCollection, t as addOwnedAssetFromCollection } from "./dist-N7UoPf_4.js";
+import { a as getOwnedAssetsFromCollection, o as removeOwnedAssetFromCollection, t as addOwnedAssetFromCollection } from "./dist-DQg_1csT.js";
 import { SmrtJunction, SmrtObject, crossPackageRef, field, foreignKey, smrt } from "@happyvertical/smrt-core";
-//#region ../profiles/dist/chunks/ProfileAssetCollection-HeMtjBc0.js
-var ProfileAssetCollection_HeMtjBc0_exports = /* @__PURE__ */ __exportAll({
+//#region ../profiles/dist/chunks/ProfileAssetCollection-CRMcjLJ-.js
+var ProfileAssetCollection_CRMcjLJ__exports = /* @__PURE__ */ __exportAll({
 	n: () => ProfileAssetCollection_exports,
 	r: () => ProfileAsset,
 	t: () => ProfileAssetCollection
@@ -84,7 +84,7 @@ var ProfileAssetCollection = class extends SmrtJunction {
 	profileCollectionPromise = null;
 	async getProfileCollection() {
 		if (!this.profileCollectionPromise) {
-			const { ProfileCollection } = await import("./ProfileCollection-Bt6IJK49-CFyOiVFz.js").then((n) => n.o).then((n) => n.r);
+			const { ProfileCollection } = await import("./ProfileCollection-C4INKh7Y-DU6dPYSG.js").then((n) => n.o).then((n) => n.r);
 			this.profileCollectionPromise = ProfileCollection.create({ db: this.db });
 		}
 		return this.profileCollectionPromise;
@@ -107,4 +107,4 @@ ProfileAssetCollection = __decorateClass([smrt({
 	cli: false
 })], ProfileAssetCollection);
 //#endregion
-export { ProfileAssetCollection as n, ProfileAssetCollection_HeMtjBc0_exports as r, ProfileAsset as t };
+export { ProfileAssetCollection as n, ProfileAssetCollection_CRMcjLJ__exports as r, ProfileAsset as t };

package/dist/{ProfileCollection-Bt6IJK49-CFyOiVFz.js → ProfileCollection-C4INKh7Y-DU6dPYSG.js}

@@ -1,11 +1,11 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { a as queryGlobal, i as tenantId, l as withSystemContext, n as resolvePrompt, o as queryWithGlobals, r as TenantScoped, s as getTenantId, t as definePrompt } from "./dist-wrk3GKo3.js";
+import { a as queryGlobal, c as getTenantId, i as tenantId, n as resolvePrompt, o as queryWithGlobals, r as TenantScoped, t as definePrompt, u as withSystemContext } from "./dist-DRSQUACn.js";
 import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
-import { a as getOwnedAssetsFromCollection, i as assertValidOwnedAssetSortOrder, n as assertAssetLinkable, o as removeOwnedAssetFromCollection, r as assertValidOwnedAssetRelationship, s as resolveOwnedAssetsById, t as addOwnedAssetFromCollection } from "./dist-N7UoPf_4.js";
+import { a as getOwnedAssetsFromCollection, i as assertValidOwnedAssetSortOrder, n as assertAssetLinkable, o as removeOwnedAssetFromCollection, r as assertValidOwnedAssetRelationship, s as resolveOwnedAssetsById, t as addOwnedAssetFromCollection } from "./dist-DQg_1csT.js";
 import { RuntimeError, SmrtCollection, SmrtObject, ValidationError, field, foreignKey, isAbortedTransactionError, oneToMany, smrt } from "@happyvertical/smrt-core";
 import { BackfillTableUnavailableError, BackfillTracker } from "@happyvertical/smrt-core/migrations";
-//#region ../profiles/dist/chunks/ProfileCollection-Bt6IJK49.js
-var ProfileCollection_Bt6IJK49_exports = /* @__PURE__ */ __exportAll({
+//#region ../profiles/dist/chunks/ProfileCollection-C4INKh7Y.js
+var ProfileCollection_C4INKh7Y_exports = /* @__PURE__ */ __exportAll({
 	_: () => smrtProfilesGenerateBioPrompt,
 	a: () => Profile,
 	d: () => isOidcProvisioningRaceConflict,
@@ -433,6 +433,11 @@ var Profile = class extends SmrtObject {
 	* @returns The slug of the profile type
 	*/
 	async getTypeSlug() {
+		const tenantId2 = this.tenantId || getTenantId();
+		if (this.typeId && tenantId2) {
+			const { ProfileTypeCollection } = await import("./ProfileTypeCollection-B7kwi1mU-6KYMumQp.js").then((n) => n.n).then((n) => n.n);
+			return (await (await ProfileTypeCollection.create(this.options)).getAvailableById(this.typeId, tenantId2))?.slug ?? "";
+		}
 		return (await this.loadRelated("typeId"))?.slug || "";
 	}
 	/**
@@ -453,8 +458,8 @@ var Profile = class extends SmrtObject {
 	* @param value - The value to set
 	*/
 	async addMetadata(metafieldSlug, value) {
-		const { ProfileMetafieldCollection } = await import("./ProfileMetafieldCollection-Buz7gzag-BNRo6e4x.js").then((n) => n.r).then((n) => n.n);
-		const { ProfileMetadataCollection } = await import("./ProfileMetadataCollection-BIYKy4Y3-CqcaAHAJ.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileMetafieldCollection } = await import("./ProfileMetafieldCollection-Buz7gzag-DyUWqbh9.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileMetadataCollection } = await import("./ProfileMetadataCollection-BIYKy4Y3-BS9BY4vO.js").then((n) => n.r).then((n) => n.n);
 		const metafield = await this.resolveMetafield(await ProfileMetafieldCollection.create(this.options), metafieldSlug);
 		if (!metafield) throw new Error(`Metafield '${metafieldSlug}' not found`);
 		await metafield.validateValue(value);
@@ -487,7 +492,7 @@ var Profile = class extends SmrtObject {
 	* @returns Object with metafield slugs as keys
 	*/
 	async getMetadata() {
-		const { ProfileMetadataCollection } = await import("./ProfileMetadataCollection-BIYKy4Y3-CqcaAHAJ.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileMetadataCollection } = await import("./ProfileMetadataCollection-BIYKy4Y3-BS9BY4vO.js").then((n) => n.r).then((n) => n.n);
 		return await (await ProfileMetadataCollection.create(this.options)).getMetadataObject(this.id);
 	}
 	/**
@@ -504,8 +509,8 @@ var Profile = class extends SmrtObject {
 	* @param metafieldSlug - The slug of the metafield to remove
 	*/
 	async removeMetadata(metafieldSlug) {
-		const { ProfileMetafieldCollection } = await import("./ProfileMetafieldCollection-Buz7gzag-BNRo6e4x.js").then((n) => n.r).then((n) => n.n);
-		const { ProfileMetadataCollection } = await import("./ProfileMetadataCollection-BIYKy4Y3-CqcaAHAJ.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileMetafieldCollection } = await import("./ProfileMetafieldCollection-Buz7gzag-DyUWqbh9.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileMetadataCollection } = await import("./ProfileMetadataCollection-BIYKy4Y3-BS9BY4vO.js").then((n) => n.r).then((n) => n.n);
 		const metafield = await this.resolveMetafield(await ProfileMetafieldCollection.create(this.options), metafieldSlug);
 		if (!metafield) throw new Error(`Metafield '${metafieldSlug}' not found`);
 		const existing = await (await ProfileMetadataCollection.create(this.options)).list({
@@ -530,7 +535,7 @@ var Profile = class extends SmrtObject {
 		return candidates.find((candidate) => ownerTenantId && candidate.tenantId === ownerTenantId) ?? candidates.find((candidate) => !candidate.tenantId) ?? null;
 	}
 	async getProfileLinkCollection() {
-		const { ProfileLinkCollection } = await import("./ProfileLinkCollection-u1hhzKTm-CAfIjZ4f.js").then((n) => n.i).then((n) => n.r);
+		const { ProfileLinkCollection } = await import("./ProfileLinkCollection-DFfZRsgv-qtgfWKFC.js").then((n) => n.i).then((n) => n.r);
 		return ProfileLinkCollection.create({ db: this.db });
 	}
 	/** This profile's web links in display order. */
@@ -547,7 +552,7 @@ var Profile = class extends SmrtObject {
 		return (await this.getProfileLinkCollection()).replaceForProfile(this.id, links);
 	}
 	async getProfileAssetCollection() {
-		const { ProfileAssetCollection } = await import("./ProfileAssetCollection-HeMtjBc0-Cz4MOeSB.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileAssetCollection } = await import("./ProfileAssetCollection-CRMcjLJ--CIoZ9Fd2.js").then((n) => n.r).then((n) => n.n);
 		return ProfileAssetCollection.create({ db: this.db });
 	}
 	async getAssets(relationship) {
@@ -579,7 +584,7 @@ var Profile = class extends SmrtObject {
 	*/
 	async addRelationship(toProfile, relationshipSlug, contextProfile) {
 		const { ProfileRelationshipTypeCollection } = await import("./ProfileRelationshipTypeCollection-_n22WqTb-DiZUWvev.js").then((n) => n.n).then((n) => n.n);
-		const { ProfileRelationshipCollection } = await import("./ProfileRelationshipCollection-C4g_QLI4-DeJzJ_hF.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileRelationshipCollection } = await import("./ProfileRelationshipCollection-C4g_QLI4-Ci7IHfeW.js").then((n) => n.r).then((n) => n.n);
 		const { ProfileRelationshipType } = await import("./ProfileRelationshipType-U7IwF6Wf-DNavf24e.js").then((n) => n.n).then((n) => n.n);
 		const relationshipType = await (await ProfileRelationshipTypeCollection.create(this.options)).getBySlug(relationshipSlug);
 		if (!relationshipType) throw new Error(`Relationship type '${relationshipSlug}' not found`);
@@ -604,7 +609,7 @@ var Profile = class extends SmrtObject {
 	* @returns Array of ProfileRelationship instances
 	*/
 	async getRelationships(options) {
-		const { ProfileRelationshipCollection } = await import("./ProfileRelationshipCollection-C4g_QLI4-DeJzJ_hF.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileRelationshipCollection } = await import("./ProfileRelationshipCollection-C4g_QLI4-Ci7IHfeW.js").then((n) => n.r).then((n) => n.n);
 		const { ProfileRelationshipTypeCollection } = await import("./ProfileRelationshipTypeCollection-_n22WqTb-DiZUWvev.js").then((n) => n.n).then((n) => n.n);
 		const relationshipCollection = await ProfileRelationshipCollection.create(this.options);
 		const direction = options?.direction || "all";
@@ -649,7 +654,7 @@ var Profile = class extends SmrtObject {
 	*/
 	async removeRelationship(toProfile, relationshipSlug) {
 		const { ProfileRelationshipTypeCollection } = await import("./ProfileRelationshipTypeCollection-_n22WqTb-DiZUWvev.js").then((n) => n.n).then((n) => n.n);
-		const { ProfileRelationshipCollection } = await import("./ProfileRelationshipCollection-C4g_QLI4-DeJzJ_hF.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileRelationshipCollection } = await import("./ProfileRelationshipCollection-C4g_QLI4-Ci7IHfeW.js").then((n) => n.r).then((n) => n.n);
 		const relationshipType = await (await ProfileRelationshipTypeCollection.create(this.options)).getBySlug(relationshipSlug);
 		if (!relationshipType) throw new Error(`Relationship type '${relationshipSlug}' not found`);
 		const relationshipCollection = await ProfileRelationshipCollection.create(this.options);
@@ -773,7 +778,7 @@ var Profile = class extends SmrtObject {
 	* @returns Array of OIDC identity records
 	*/
 	async getOidcIdentities() {
-		const { OidcIdentityCollection } = await import("./OidcIdentityCollection-B4jYh36_-6UWtXCwi.js").then((n) => n.r).then((n) => n.r);
+		const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-DqB9Ex4b.js").then((n) => n.r).then((n) => n.r);
 		return await (await OidcIdentityCollection.create(this.options)).findByProfile(this.id);
 	}
 	/**
@@ -786,7 +791,7 @@ var Profile = class extends SmrtObject {
 	* type, but refuses to create or rebind authority.
 	*/
 	async linkOidcIdentity(oidcData) {
-		const { OidcIdentityCollection } = await import("./OidcIdentityCollection-B4jYh36_-6UWtXCwi.js").then((n) => n.r).then((n) => n.r);
+		const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-DqB9Ex4b.js").then((n) => n.r).then((n) => n.r);
 		return await (await OidcIdentityCollection.create(this.options)).linkToProfile(this, oidcData);
 	}
 	/**
@@ -815,7 +820,7 @@ var Profile = class extends SmrtObject {
 	* @returns Array of audit log entries
 	*/
 	async getAuditLogs(limit = 50) {
-		const { AuditLogCollection } = await import("./AuditLogCollection-WDHL-_AF-G2UOSM3H.js").then((n) => n.r).then((n) => n.n);
+		const { AuditLogCollection } = await import("./AuditLogCollection-WDHL-_AF-Bgyxf5sF.js").then((n) => n.r).then((n) => n.n);
 		return await (await AuditLogCollection.create(this.options)).getRecentActivity(this.id, limit);
 	}
 	/**
@@ -825,7 +830,7 @@ var Profile = class extends SmrtObject {
 	* @returns The created audit log entry
 	*/
 	async recordAction(options) {
-		const { AuditLogCollection } = await import("./AuditLogCollection-WDHL-_AF-G2UOSM3H.js").then((n) => n.r).then((n) => n.n);
+		const { AuditLogCollection } = await import("./AuditLogCollection-WDHL-_AF-Bgyxf5sF.js").then((n) => n.r).then((n) => n.n);
 		return await (await AuditLogCollection.create(this.options)).record({
 			profile: this,
 			...options
@@ -1189,4 +1194,4 @@ function readRequiredString(row, key) {
 	return value;
 }
 //#endregion
-export { ProfileCollection as a, coordinateOidcProvisioning as c, promptMessageOptions as d, saveOidcRaceArbiter as f, Profile as i, isOidcProvisioningRaceConflict as l, OidcProfileEmailReservation as n, ProfileCollection_Bt6IJK49_exports as o, smrtProfilesGenerateBioPrompt as p, OidcProfileEmailReservationCollection as r, ProfileType as s, CanonicalPersonProfileError as t, normalizeIdentityEmail as u };
+export { ProfileCollection as a, coordinateOidcProvisioning as c, promptMessageOptions as d, saveOidcRaceArbiter as f, Profile as i, isOidcProvisioningRaceConflict as l, OidcProfileEmailReservation as n, ProfileCollection_C4INKh7Y_exports as o, smrtProfilesGenerateBioPrompt as p, OidcProfileEmailReservationCollection as r, ProfileType as s, CanonicalPersonProfileError as t, normalizeIdentityEmail as u };

package/dist/{ProfileLinkCollection-u1hhzKTm-CAfIjZ4f.js → ProfileLinkCollection-DFfZRsgv-qtgfWKFC.js}

@@ -1,9 +1,9 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as tenantId, r as TenantScoped } from "./dist-wrk3GKo3.js";
+import { i as tenantId, r as TenantScoped } from "./dist-DRSQUACn.js";
 import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
 import { SmrtCollection, SmrtObject, field, foreignKey, isEmbeddedDatabase, smrt, withEmbeddedWriteTransaction } from "@happyvertical/smrt-core";
-//#region ../profiles/dist/chunks/ProfileLinkCollection-u1hhzKTm.js
-var ProfileLinkCollection_u1hhzKTm_exports = /* @__PURE__ */ __exportAll({
+//#region ../profiles/dist/chunks/ProfileLinkCollection-DFfZRsgv.js
+var ProfileLinkCollection_DFfZRsgv_exports = /* @__PURE__ */ __exportAll({
 	a: () => PROFILE_LINK_MAX_URL_LENGTH,
 	c: () => isProfileLinkPlatform,
 	i: () => 200,
@@ -203,7 +203,7 @@ var ProfileLinkCollection = class ProfileLinkCollection extends SmrtCollection {
 	/** The profile's tenant; throws when the profile is not visible here. */
 	async requireProfileTenant(profileId) {
 		if (!profileId) throw new Error("A profile link needs a profile");
-		const { ProfileCollection } = await import("./ProfileCollection-Bt6IJK49-CFyOiVFz.js").then((n) => n.o).then((n) => n.r);
+		const { ProfileCollection } = await import("./ProfileCollection-C4INKh7Y-DU6dPYSG.js").then((n) => n.o).then((n) => n.r);
 		const profile = await (await ProfileCollection.create({ db: this.db })).get({ id: profileId });
 		if (!profile) throw new Error(`Profile '${profileId}' not found`);
 		return profile.tenantId ?? null;
@@ -238,4 +238,4 @@ function normalizeInputs(links) {
 	return out;
 }
 //#endregion
-export { isProfileLinkPlatform as a, ProfileLinkCollection_u1hhzKTm_exports as i, ProfileLink as n, normalizeProfileLinkUrl as o, ProfileLinkCollection as r, PROFILE_LINK_PLATFORMS as t };
+export { isProfileLinkPlatform as a, ProfileLinkCollection_DFfZRsgv_exports as i, ProfileLink as n, normalizeProfileLinkUrl as o, ProfileLinkCollection as r, PROFILE_LINK_PLATFORMS as t };

package/dist/{ProfileMetadataCollection-BIYKy4Y3-CqcaAHAJ.js → ProfileMetadataCollection-BIYKy4Y3-BS9BY4vO.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as tenantId, r as TenantScoped } from "./dist-wrk3GKo3.js";
+import { i as tenantId, r as TenantScoped } from "./dist-DRSQUACn.js";
 import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
 import { SmrtCollection, SmrtObject, field, foreignKey, smrt } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/ProfileMetadataCollection-BIYKy4Y3.js

package/dist/{ProfileMetafieldCollection-Buz7gzag-BNRo6e4x.js → ProfileMetafieldCollection-Buz7gzag-DyUWqbh9.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as tenantId, r as TenantScoped } from "./dist-wrk3GKo3.js";
+import { i as tenantId, r as TenantScoped } from "./dist-DRSQUACn.js";
 import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
 import { SmrtCollection, SmrtObject, field, smrt } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/ProfileMetafieldCollection-Buz7gzag.js

package/dist/{ProfileRelationshipCollection-C4g_QLI4-DeJzJ_hF.js → ProfileRelationshipCollection-C4g_QLI4-Ci7IHfeW.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as tenantId, r as TenantScoped } from "./dist-wrk3GKo3.js";
+import { i as tenantId, r as TenantScoped } from "./dist-DRSQUACn.js";
 import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
 import { SmrtCollection, SmrtObject, foreignKey, oneToMany, smrt } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/ProfileRelationshipCollection-C4g_QLI4.js

package/dist/ProfileTypeCollection-B7kwi1mU-6KYMumQp.js

@@ -0,0 +1,103 @@
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { l as isSystemContext, s as withTenantGlobalRead } from "./dist-DRSQUACn.js";
+import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
+import { s as ProfileType } from "./ProfileCollection-C4INKh7Y-DU6dPYSG.js";
+import { SmrtCollection } from "@happyvertical/smrt-core";
+//#region ../profiles/dist/chunks/ProfileTypeCollection-B7kwi1mU.js
+var ProfileTypeCollection_B7kwi1mU_exports = /* @__PURE__ */ __exportAll({
+	n: () => ProfileTypeCollection_exports,
+	t: () => ProfileTypeCollection
+});
+var ProfileTypeCollection_exports = /* @__PURE__ */ __exportAll$1({ ProfileTypeCollection: () => ProfileTypeCollection });
+function isPostgresUrl(url) {
+	return /^postgres(?:ql)?:/iu.test(url ?? "");
+}
+var ProfileTypeCollection = class extends SmrtCollection {
+	static _itemClass = ProfileType;
+	/**
+	* Get profile type by slug
+	*
+	* @param slug - The slug to search for
+	* @returns ProfileType instance or null
+	*/
+	async getBySlug(slug) {
+		return await this.get({ slug });
+	}
+	/**
+	* Resolve one profile type available to a tenant.
+	*
+	* Profile types may be tenant-owned or global lookup rows. A normal point
+	* read under an active tenant context intentionally cannot see a global
+	* row, so this uses the bounded tenant-plus-globals list capability. The
+	* capability preserves the active actor and fails closed when the requested
+	* tenant differs from the active tenant context.
+	*/
+	async getAvailableById(id, tenantId) {
+		return (await withTenantGlobalRead(tenantId, () => this.list({
+			where: { id },
+			limit: 1
+		})))[0] ?? null;
+	}
+	/**
+	* Get or create a profile type by slug
+	*
+	* @param slug - The slug to search for
+	* @param defaults - Default values if creating
+	* @returns ProfileType instance
+	*/
+	async getOrCreateBySlug(slug, defaults) {
+		const existing = await this.getBySlug(slug);
+		if (existing) return existing;
+		const profileType = await this.create({
+			slug,
+			...defaults
+		});
+		await profileType.save();
+		return profileType;
+	}
+	/**
+	* Atomically create or load a global ProfileType from trusted system code.
+	*
+	* This intentionally bypasses tenant auto-population and therefore refuses
+	* to run outside an explicit `withSystemContext()` boundary.
+	*/
+	async getOrCreateGlobalBySlug(slug, defaults) {
+		if (!isSystemContext()) throw new Error("Global ProfileType creation requires an explicit system context.");
+		const existing = await this.loadGlobalBySlug(slug);
+		if (existing) return existing;
+		const insertIfAbsent = async (db) => {
+			if (isPostgresUrl(db.url)) await db.query("SELECT pg_advisory_xact_lock(hashtext(?), hashtext(?))", "@happyvertical/smrt-profiles:profile_types:global", slug);
+			await db.query(`INSERT INTO profile_types
+          (id, slug, context, _meta_type, tenant_id, name, description)
+         SELECT ?, ?, '', '@happyvertical/smrt-profiles:ProfileType', NULL, ?, ?
+         WHERE NOT EXISTS (
+           SELECT 1 FROM profile_types
+           WHERE slug = ?
+             AND context = ''
+             AND _meta_type = '@happyvertical/smrt-profiles:ProfileType'
+             AND tenant_id IS NULL
+         )`, crypto.randomUUID(), slug, defaults.name, defaults.description ?? null, slug);
+		};
+		const isTransactionBound = typeof this.db.commit === "function";
+		if (isPostgresUrl(this.db.url) && !isTransactionBound && typeof this.db.transaction === "function") await this.db.transaction((tx) => insertIfAbsent(tx));
+		else await insertIfAbsent(this.db);
+		const profileType = await this.loadGlobalBySlug(slug);
+		if (!profileType) throw new Error(`Global ProfileType '${slug}' could not be created or loaded.`);
+		return profileType;
+	}
+	async loadGlobalBySlug(slug) {
+		const id = (await this.db.query(`SELECT CAST(id AS VARCHAR) AS id
+       FROM profile_types
+       WHERE slug = ?
+         AND context = ''
+         AND _meta_type = '@happyvertical/smrt-profiles:ProfileType'
+         AND tenant_id IS NULL
+       LIMIT 1`, slug)).rows[0]?.id;
+		if (typeof id !== "string") return null;
+		const profileType = await this.get({ id });
+		if (profileType) profileType.id = id;
+		return profileType;
+	}
+};
+//#endregion
+export { ProfileTypeCollection_B7kwi1mU_exports as n, ProfileTypeCollection as t };

package/dist/commands/utilities.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utilities.d.ts","sourceRoot":"","sources":["../../src/commands/utilities.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAwBH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAiJtD,wBAAgB,uBAAuB,CAAC,OAAO,SAAgB,GAAG,MAAM,CAIvE;AA4LD,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,OAAO,CAAC;IACf,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;;;GAIG;AACH,OAAO,EAAE,iCAAiC,EAAE,MAAM,mCAAmC,CAAC;AAEtF;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,GAAG,SAAS,EAC1B,KAAK,EAAE,OAAO,GACb,uBAAuB,CA2DzB;AAED,wBAAgB,gCAAgC,CAC9C,eAAe,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAC9C,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,GACtC,IAAI,CAcN;AAED;;;GAGG;AACH,UAAU,iBAAiB;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,yDAAyD;AACzD,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;CACjB;AAmBD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,iBAAiB,GAC7B,MAAM,GAAG,IAAI,CAUf;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,GAAG,0BAA0B,CA+C7B;AA2BD,yDAAyD;AACzD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,YAAY,GAAG,aAAa,GAAG,UAAU,CAAC;IAChD,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,8DAA8D;IAC9D,SAAS,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1D;;;;;;;;;;;;;;;;;OAiBG;IACH,kBAAkB,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpE;AA4CD;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAsDzC;AAgBD,mEAAmE;AACnE,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,kBAAkB,GAAG,SAAS,GACrC,MAAM,EAAE,CAoCV;AAED;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CA09FtD,CAAC"}
+{"version":3,"file":"utilities.d.ts","sourceRoot":"","sources":["../../src/commands/utilities.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAwBH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAiJtD,wBAAgB,uBAAuB,CAAC,OAAO,SAAgB,GAAG,MAAM,CAIvE;AA4LD,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,OAAO,CAAC;IACf,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;;;GAIG;AACH,OAAO,EAAE,iCAAiC,EAAE,MAAM,mCAAmC,CAAC;AAEtF;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,GAAG,SAAS,EAC1B,KAAK,EAAE,OAAO,GACb,uBAAuB,CA2DzB;AAED,wBAAgB,gCAAgC,CAC9C,eAAe,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAC9C,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,GACtC,IAAI,CAcN;AAED;;;GAGG;AACH,UAAU,iBAAiB;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,yDAAyD;AACzD,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;CACjB;AAmBD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,iBAAiB,GAC7B,MAAM,GAAG,IAAI,CAUf;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,GAAG,0BAA0B,CA+C7B;AA2BD,yDAAyD;AACzD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,YAAY,GAAG,aAAa,GAAG,UAAU,CAAC;IAChD,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,8DAA8D;IAC9D,SAAS,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1D;;;;;;;;;;;;;;;;;OAiBG;IACH,kBAAkB,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpE;AA4CD;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAsDzC;AAgBD,mEAAmE;AACnE,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,kBAAkB,GAAG,SAAS,GACrC,MAAM,EAAE,CAoCV;AAED;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CA2gGtD,CAAC"}