@hasna/domains 0.0.39 → 0.0.43

package/dist/generated/storage-kit/tls.d.ts

@@ -2,6 +2,9 @@
 export type PgSslConfig = boolean | {
     rejectUnauthorized: boolean;
     ca?: string;
+    cert?: string;
+    key?: string;
+    passphrase?: string;
 };
 export interface TlsResolveOptions {
     /** Inline CA bundle (PEM). Wins over every other CA source. */
@@ -12,15 +15,39 @@ export interface TlsResolveOptions {
     env?: Record<string, string | undefined>;
 }
 export type SslMode = "disable" | "prefer" | "require" | "verify-ca" | "verify-full";
+/**
+ * Remove the TLS query parameters once this module has resolved them into an
+ * explicit `ssl` option. pg re-parses `connectionString` AFTER merging pool
+ * options and lets the parse win, so leaving `sslmode` (or `ssl`, `sslcert`,
+ * `sslkey`, `sslrootcert`, `sslnegotiation`) in the URL replaces the resolved
+ * SSL object with pg's own — discarding the CA bundle with it.
+ *
+ * Non-TLS parameters and any fragment are preserved exactly.
+ */
+export declare function connectionStringWithoutTlsParameters(connectionString: string): string;
+/**
+ * Preserve pg's transport negotiation choice outside the stripped URL, so
+ * `sslnegotiation=direct` survives as an explicit pool option instead of being
+ * silently dropped.
+ */
+export declare function sslNegotiationFromConnectionString(connectionString: string): "postgres" | "direct" | undefined;
 /**
  * Extract the effective `sslmode` from a Postgres connection string. Honors the
- * `sslmode` query param and the legacy `ssl=true` boolean. Returns `disable`
- * when TLS is not requested.
+ * `sslmode` query param, the legacy `ssl=true` boolean, and pg's rule that
+ * `sslnegotiation=direct` implies TLS when no explicit SSL setting is present.
+ * Returns `disable` when TLS is not requested.
  */
 export declare function sslModeFromConnectionString(connectionString: string): SslMode;
 /**
  * Resolve the `pg` ssl config for a connection string. See the module header
- * for the full mode table. Returns `undefined` when TLS should be off.
+ * for the full mode table.
+ *
+ * Returns `false` when TLS was explicitly switched off, and `undefined` when the
+ * DSN expressed no TLS policy at all — those are different answers, and pg
+ * treats them differently: only `undefined` lets `PGSSLMODE` decide.
+ *
+ * The caller MUST hand pg `connectionStringWithoutTlsParameters(connectionString)`
+ * rather than the original DSN, or pg discards everything resolved here.
  */
 export declare function resolveTlsConfig(connectionString: string, options?: TlsResolveOptions): PgSslConfig | undefined;
 //# sourceMappingURL=tls.d.ts.map

package/dist/generated/storage-kit/tls.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tls.d.ts","sourceRoot":"","sources":["../../../src/generated/storage-kit/tls.ts"],"names":[],"mappings":"AAkCA,iEAAiE;AACjE,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG;IAAE,kBAAkB,EAAE,OAAO,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjF,MAAM,WAAW,iBAAiB;IAChC,+DAA+D;IAC/D,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAC1C;AAED,MAAM,MAAM,OAAO,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,aAAa,CAAC;AAErF;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAwB7E;AAUD;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,gBAAgB,EAAE,MAAM,EACxB,OAAO,GAAE,iBAAsB,GAC9B,WAAW,GAAG,SAAS,CA2BzB"}
+{"version":3,"file":"tls.d.ts","sourceRoot":"","sources":["../../../src/generated/storage-kit/tls.ts"],"names":[],"mappings":"AAwNA,iEAAiE;AACjE,MAAM,MAAM,WAAW,GACnB,OAAO,GACP;IACE,kBAAkB,EAAE,OAAO,CAAC;IAC5B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEN,MAAM,WAAW,iBAAiB;IAChC,+DAA+D;IAC/D,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAC1C;AAED,MAAM,MAAM,OAAO,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,aAAa,CAAC;AA+BrF;;;;;;;;GAQG;AACH,wBAAgB,oCAAoC,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAOrF;AAgBD;;;;GAIG;AACH,wBAAgB,kCAAkC,CAChD,gBAAgB,EAAE,MAAM,GACvB,UAAU,GAAG,QAAQ,GAAG,SAAS,CAKnC;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAmD7E;AA6CD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAC9B,gBAAgB,EAAE,MAAM,EACxB,OAAO,GAAE,iBAAsB,GAC9B,WAAW,GAAG,SAAS,CAgEzB"}