@mandujs/core 0.54.31 → 0.55.0-beta.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (414) hide show
  1. package/README.md +654 -654
  2. package/package.json +106 -210
  3. package/scripts/postinstall-lock.ts +153 -153
  4. package/src/a11y/__tests__/run-audit.test.ts +333 -333
  5. package/src/a11y/fix-hints.ts +76 -76
  6. package/src/a11y/index.ts +18 -18
  7. package/src/a11y/run-audit.ts +15 -15
  8. package/src/a11y/types.ts +125 -125
  9. package/src/agent/__tests__/apply.test.ts +224 -0
  10. package/src/agent/__tests__/context.test.ts +97 -98
  11. package/src/agent/apply.ts +1031 -0
  12. package/src/agent/context.ts +552 -552
  13. package/src/agent/index.ts +4 -3
  14. package/src/agent/plan.ts +161 -243
  15. package/src/agent/repair.ts +239 -162
  16. package/src/agent/sync.ts +197 -198
  17. package/src/agent/types.ts +242 -94
  18. package/src/agent/verify.ts +55 -55
  19. package/src/auth/__tests__/login.test.ts +1 -1
  20. package/src/auth/__tests__/password.test.ts +15 -5
  21. package/src/auth/__tests__/reset.test.ts +2 -2
  22. package/src/auth/__tests__/tokens.test.ts +274 -274
  23. package/src/auth/__tests__/verification.test.ts +274 -274
  24. package/src/auth/index.ts +76 -76
  25. package/src/auth/login.ts +225 -225
  26. package/src/auth/password.ts +14 -2
  27. package/src/auth/reset.ts +243 -243
  28. package/src/auth/tokens.ts +612 -612
  29. package/src/auth/verification.ts +253 -253
  30. package/src/brain/__tests__/redactor.test.ts +94 -94
  31. package/src/brain/adapters/__tests__/_helpers.ts +83 -83
  32. package/src/brain/adapters/__tests__/anthropic-oauth.test.ts +196 -196
  33. package/src/brain/adapters/__tests__/chatgpt-auth.test.ts +193 -193
  34. package/src/brain/adapters/__tests__/openai-oauth.test.ts +209 -209
  35. package/src/brain/adapters/__tests__/resolver.test.ts +143 -143
  36. package/src/brain/adapters/anthropic-oauth.ts +1 -1
  37. package/src/brain/adapters/chatgpt-auth.ts +300 -300
  38. package/src/brain/adapters/index.ts +319 -319
  39. package/src/brain/adapters/oauth-flow.ts +439 -439
  40. package/src/brain/consent.ts +240 -240
  41. package/src/brain/credentials.ts +396 -396
  42. package/src/brain/doctor/analyzer.ts +7 -7
  43. package/src/bundler/__snapshots__/build.test.ts.snap +5 -5
  44. package/src/bundler/__tests__/build-runner.ts +166 -166
  45. package/src/bundler/__tests__/client-boundary-transform.test.ts +524 -524
  46. package/src/bundler/__tests__/cold-start.test.ts +60 -60
  47. package/src/bundler/__tests__/css.test.ts +49 -20
  48. package/src/bundler/__tests__/dev-reliability.test.ts +619 -619
  49. package/src/bundler/__tests__/extended-watch.test.ts +711 -711
  50. package/src/bundler/__tests__/fast-refresh.test.ts +24 -24
  51. package/src/bundler/__tests__/generation.test.ts +447 -0
  52. package/src/bundler/__tests__/hdr.test.ts +24 -18
  53. package/src/bundler/__tests__/hmr-client.test.ts +62 -24
  54. package/src/bundler/__tests__/jsx-runtime-shim.test.ts +179 -140
  55. package/src/bundler/__tests__/manifest-schema.test.ts +305 -266
  56. package/src/bundler/__tests__/prod-smoke.test.ts +138 -138
  57. package/src/bundler/__tests__/reverse-import-graph.test.ts +42 -42
  58. package/src/bundler/__tests__/slot-dispatch.test.ts +573 -573
  59. package/src/bundler/__tests__/url-cap-and-slot-regex.test.ts +286 -286
  60. package/src/bundler/__tests__/vendor-cache.test.ts +455 -455
  61. package/src/bundler/analyzer.ts +15 -15
  62. package/src/bundler/budget.ts +404 -404
  63. package/src/bundler/build.test.ts +898 -915
  64. package/src/bundler/build.ts +113 -24
  65. package/src/bundler/client-boundary-transform.ts +977 -977
  66. package/src/bundler/css.ts +65 -44
  67. package/src/bundler/dev.ts +105 -73
  68. package/src/bundler/fast-refresh-preamble.ts +47 -47
  69. package/src/bundler/generation.ts +602 -0
  70. package/src/bundler/index.ts +3 -3
  71. package/src/bundler/manifest-schema.ts +55 -40
  72. package/src/bundler/plugins/__tests__/block-generated-imports.test.ts +13 -13
  73. package/src/bundler/plugins/__tests__/react-compiler-config.test.ts +83 -83
  74. package/src/bundler/plugins/__tests__/react-compiler-lint.test.ts +110 -110
  75. package/src/bundler/plugins/block-generated-imports.ts +16 -15
  76. package/src/bundler/plugins/index.ts +83 -83
  77. package/src/bundler/plugins/react-compiler-config.ts +108 -108
  78. package/src/bundler/plugins/react-compiler-lint.ts +253 -253
  79. package/src/bundler/plugins/react-compiler.ts +162 -162
  80. package/src/bundler/prerender.ts +29 -9
  81. package/src/bundler/reverse-import-graph.ts +339 -339
  82. package/src/bundler/safe-build.test.ts +1 -1
  83. package/src/bundler/safe-build.ts +103 -103
  84. package/src/bundler/scenario-matrix.ts +229 -229
  85. package/src/bundler/types.ts +58 -56
  86. package/src/bundler/vendor-cache-types.ts +130 -130
  87. package/src/bundler/vendor-cache.ts +526 -526
  88. package/src/change/snapshot.ts +18 -18
  89. package/src/client/Form.tsx +105 -105
  90. package/src/client/Link.tsx +9 -9
  91. package/src/client/__tests__/props-serialization.test.ts +37 -37
  92. package/src/client/__tests__/use-sse.test.ts +153 -153
  93. package/src/client/globals.ts +1 -1
  94. package/src/client/hooks.ts +362 -362
  95. package/src/client/hydrate.ts +2 -2
  96. package/src/client/index.ts +1 -1
  97. package/src/client/island.ts +79 -79
  98. package/src/client/prefetch-helper.ts +55 -55
  99. package/src/client/props-serialization.ts +233 -233
  100. package/src/client/runtime-entry.ts +598 -598
  101. package/src/client/runtime.ts +1 -1
  102. package/src/client/serialize.ts +50 -50
  103. package/src/client/use-fetch.ts +6 -6
  104. package/src/client/use-head.ts +197 -197
  105. package/src/client/use-sse.ts +378 -378
  106. package/src/client/window-state.ts +101 -101
  107. package/src/components/Image-compat.ts +3 -0
  108. package/src/components/Image.tsx +162 -162
  109. package/src/config/validate.ts +1 -1
  110. package/src/config/watcher.ts +311 -311
  111. package/src/constants.ts +40 -40
  112. package/src/content/collection.ts +9 -9
  113. package/src/content/content-layer.ts +7 -7
  114. package/src/content/data-store.ts +245 -245
  115. package/src/content/frontmatter.ts +189 -189
  116. package/src/content/generate-types.ts +1 -1
  117. package/src/content/index.ts +2 -2
  118. package/src/content/loader-context.ts +171 -171
  119. package/src/content/loaders/api.ts +216 -216
  120. package/src/content/loaders/file.ts +172 -172
  121. package/src/content/loaders/glob.ts +253 -253
  122. package/src/content/loaders/index.ts +34 -34
  123. package/src/content/loaders/types.ts +137 -137
  124. package/src/content/meta-store.ts +209 -209
  125. package/src/content/prebuild.test.ts +571 -571
  126. package/src/content/prebuild.ts +636 -636
  127. package/src/content/schema.ts +20 -20
  128. package/src/content/sidebar.ts +630 -630
  129. package/src/content/slug.ts +110 -110
  130. package/src/content/types.ts +282 -282
  131. package/src/content/watcher.ts +135 -135
  132. package/src/contract/client-safe.test.ts +42 -42
  133. package/src/contract/client-safe.ts +114 -114
  134. package/src/contract/define.ts +11 -11
  135. package/src/contract/index.ts +1 -1
  136. package/src/contract/normalize.test.ts +276 -276
  137. package/src/contract/normalize.ts +410 -410
  138. package/src/contract/registry.test.ts +206 -206
  139. package/src/contract/route-helpers.ts +1 -1
  140. package/src/contract/rpc.ts +443 -443
  141. package/src/contract/types.ts +58 -58
  142. package/src/db/__tests__/db.test.ts +9 -9
  143. package/src/db/index.ts +2 -2
  144. package/src/db/migrations/history-table.ts +345 -345
  145. package/src/db/migrations/index.ts +3 -3
  146. package/src/db/migrations/lock.ts +324 -324
  147. package/src/db/migrations/runner.ts +650 -650
  148. package/src/deploy/cache.ts +140 -140
  149. package/src/deploy/compile/vercel.ts +344 -344
  150. package/src/deploy/index.ts +87 -87
  151. package/src/deploy/inference/brain.ts +268 -268
  152. package/src/deploy/inference/context.ts +82 -82
  153. package/src/deploy/inference/filling-extract.ts +245 -245
  154. package/src/deploy/inference/heuristic.ts +182 -182
  155. package/src/deploy/intent.ts +173 -173
  156. package/src/deploy/plan.ts +178 -178
  157. package/src/design/__tests__/agents-link.test.ts +109 -109
  158. package/src/design/__tests__/extract-patch-diff.test.ts +265 -265
  159. package/src/design/__tests__/lint.test.ts +110 -110
  160. package/src/design/__tests__/parser.test.ts +195 -195
  161. package/src/design/__tests__/tailwind-theme.test.ts +229 -229
  162. package/src/design/agents-link.ts +165 -165
  163. package/src/design/diff.ts +138 -138
  164. package/src/design/extract.ts +285 -285
  165. package/src/design/index.ts +102 -102
  166. package/src/design/lint.ts +209 -209
  167. package/src/design/parser.ts +555 -555
  168. package/src/design/patch.ts +241 -241
  169. package/src/design/scaffold.ts +147 -147
  170. package/src/design/tailwind-theme.ts +441 -441
  171. package/src/design/types.ts +210 -210
  172. package/src/desktop/__tests__/smoke.test.ts +2 -2
  173. package/src/desktop/__tests__/webview-fallback.test.ts +12 -32
  174. package/src/desktop/__tests__/window.test.ts +20 -99
  175. package/src/desktop/__tests__/worker.test.ts +266 -266
  176. package/src/desktop/index.ts +43 -43
  177. package/src/desktop/types.ts +158 -158
  178. package/src/desktop/webview-fallback.ts +17 -4
  179. package/src/desktop/window.ts +17 -8
  180. package/src/desktop/worker.ts +180 -180
  181. package/src/dev-error-overlay/__tests__/overlay-injector.test.ts +241 -241
  182. package/src/dev-error-overlay/index.ts +30 -30
  183. package/src/dev-error-overlay/overlay-injector.ts +243 -243
  184. package/src/dev-error-overlay/overlay-styles.ts +52 -52
  185. package/src/dev-error-overlay/types.ts +66 -66
  186. package/src/devtools/ai/context-builder.ts +375 -375
  187. package/src/devtools/ai/index.ts +25 -25
  188. package/src/devtools/ai/mcp-connector.ts +25 -25
  189. package/src/devtools/client/catchers/error-catcher.ts +344 -344
  190. package/src/devtools/client/catchers/index.ts +18 -18
  191. package/src/devtools/client/components/index.ts +39 -39
  192. package/src/devtools/client/components/mandu-character.tsx +331 -331
  193. package/src/devtools/client/components/panel/errors-panel.tsx +259 -259
  194. package/src/devtools/client/components/panel/guard-panel.tsx +30 -30
  195. package/src/devtools/client/components/panel/islands-panel.tsx +16 -16
  196. package/src/devtools/client/components/panel/network-panel.tsx +291 -291
  197. package/src/devtools/client/components/panel/panel-container.tsx +1 -1
  198. package/src/devtools/client/components/panel/preview-panel.tsx +46 -46
  199. package/src/devtools/client/filters/context-filters.ts +282 -282
  200. package/src/devtools/client/filters/index.ts +16 -16
  201. package/src/devtools/client/index.ts +63 -63
  202. package/src/devtools/hook/create-hook.ts +207 -207
  203. package/src/devtools/hook/index.ts +13 -13
  204. package/src/devtools/index.ts +439 -439
  205. package/src/devtools/init.ts +265 -265
  206. package/src/devtools/protocol.ts +237 -237
  207. package/src/devtools/server/index.ts +17 -17
  208. package/src/devtools/types.ts +35 -35
  209. package/src/devtools/worker/index.ts +25 -25
  210. package/src/devtools/worker/redaction-worker.ts +233 -233
  211. package/src/diagnose/__tests__/checks.test.ts +136 -136
  212. package/src/diagnose/checks.ts +185 -185
  213. package/src/diagnose/index.ts +17 -17
  214. package/src/diagnose/run.ts +10 -10
  215. package/src/diagnose/types.ts +53 -53
  216. package/src/email/__tests__/email.test.ts +355 -355
  217. package/src/email/index.ts +282 -282
  218. package/src/email/smtp.ts +64 -64
  219. package/src/error/domains.ts +265 -265
  220. package/src/error/types.ts +6 -6
  221. package/src/errors/extractor.ts +409 -409
  222. package/src/errors/index.ts +19 -19
  223. package/src/filling/__tests__/session-sqlite.test.ts +5 -1
  224. package/src/filling/auth.ts +308 -308
  225. package/src/filling/body-parse.test.ts +60 -60
  226. package/src/filling/cookie-codec.ts +5 -3
  227. package/src/filling/deps.ts +265 -265
  228. package/src/filling/head-method.test.ts +154 -154
  229. package/src/filling/session-sqlite.ts +617 -617
  230. package/src/filling/sse.ts +5 -5
  231. package/src/filling/ws.ts +78 -78
  232. package/src/generator/generate.ts +30 -30
  233. package/src/generator/index.ts +3 -3
  234. package/src/generator/templates.test.ts +48 -48
  235. package/src/generator/templates.ts +219 -219
  236. package/src/guard/__tests__/design-inline-class.test.ts +219 -219
  237. package/src/guard/__tests__/tsgolint-bridge.test.ts +347 -347
  238. package/src/guard/analyzer.ts +360 -360
  239. package/src/guard/auto-correct.ts +1 -1
  240. package/src/guard/check.ts +39 -24
  241. package/src/guard/config-guard.ts +13 -13
  242. package/src/guard/contract-guard.ts +9 -9
  243. package/src/guard/define-rule.ts +243 -243
  244. package/src/guard/design-inline-class.ts +393 -393
  245. package/src/guard/file-type.test.ts +24 -24
  246. package/src/guard/fs-routes-policy.ts +51 -51
  247. package/src/guard/graph.ts +1 -1
  248. package/src/guard/healing.ts +36 -36
  249. package/src/guard/index.ts +11 -11
  250. package/src/guard/presets/atomic.ts +70 -70
  251. package/src/guard/presets/clean.ts +77 -77
  252. package/src/guard/presets/fsd.ts +79 -79
  253. package/src/guard/presets/hexagonal.ts +68 -68
  254. package/src/guard/reporter.ts +442 -442
  255. package/src/guard/rule-presets.ts +379 -379
  256. package/src/guard/semantic-slots.ts +1 -1
  257. package/src/guard/suggestions.ts +358 -358
  258. package/src/guard/tsgolint-bridge.ts +512 -512
  259. package/src/guard/types.ts +348 -348
  260. package/src/guard/watcher.ts +405 -405
  261. package/src/i18n/define.ts +126 -126
  262. package/src/i18n/index.ts +52 -52
  263. package/src/i18n/message-registry.ts +173 -173
  264. package/src/i18n/types.ts +112 -112
  265. package/src/id/__tests__/id.test.ts +3 -3
  266. package/src/id/index.ts +105 -105
  267. package/src/index.ts +9 -48
  268. package/src/internal/client-boundary.ts +266 -266
  269. package/src/internal/index.ts +2 -2
  270. package/src/kitchen/api/agent-devtools-api.ts +779 -779
  271. package/src/kitchen/api/bundle-inspector.ts +179 -0
  272. package/src/kitchen/api/errors-grouping.ts +126 -126
  273. package/src/kitchen/api/file-api.ts +11 -11
  274. package/src/kitchen/kitchen-handler.ts +36 -0
  275. package/src/kitchen/kitchen-ui.ts +456 -0
  276. package/src/logging/index.ts +22 -22
  277. package/src/logging/transports.ts +365 -365
  278. package/src/middleware/bridge.ts +147 -147
  279. package/src/middleware/compose.ts +134 -134
  280. package/src/middleware/compress.ts +62 -62
  281. package/src/middleware/cors.ts +47 -47
  282. package/src/middleware/csrf.ts +328 -328
  283. package/src/middleware/define.ts +132 -132
  284. package/src/middleware/jwt.ts +134 -134
  285. package/src/middleware/logger.ts +58 -58
  286. package/src/middleware/oauth/__tests__/oauth.test.ts +1 -1
  287. package/src/middleware/oauth/index.ts +505 -505
  288. package/src/middleware/oauth/providers.ts +115 -115
  289. package/src/middleware/rate-limit/index.ts +522 -522
  290. package/src/middleware/rate-limit/sqlite-store.ts +382 -382
  291. package/src/middleware/scheduler-cron.ts +96 -96
  292. package/src/middleware/secure/__tests__/secure.test.ts +360 -360
  293. package/src/middleware/secure/csp.ts +193 -193
  294. package/src/middleware/session.ts +174 -174
  295. package/src/middleware/timeout.ts +55 -55
  296. package/src/observability/logger-adapter.ts +36 -36
  297. package/src/observability/sqlite-store.ts +254 -254
  298. package/src/openapi/generator.ts +1 -1
  299. package/src/openapi/openapi.test.ts +43 -43
  300. package/src/perf/__tests__/user-marks.test.ts +354 -354
  301. package/src/perf/index.ts +133 -133
  302. package/src/perf/user-marks.ts +1 -1
  303. package/src/plugins/__tests__/lifecycle-integration.test.ts +272 -272
  304. package/src/plugins/__tests__/runner.test.ts +409 -409
  305. package/src/plugins/define.ts +124 -124
  306. package/src/plugins/examples/dep-check-plugin.ts +80 -80
  307. package/src/plugins/examples/prerender-cache-plugin.ts +111 -111
  308. package/src/plugins/examples/sitemap-plugin.ts +65 -65
  309. package/src/plugins/runner.ts +361 -361
  310. package/src/plugins/types.ts +368 -368
  311. package/src/report/index.ts +1 -1
  312. package/src/resource/__tests__/generator.test.ts +7 -7
  313. package/src/resource/__tests__/schema.test.ts +14 -14
  314. package/src/resource/ddl/__tests__/diff.test.ts +639 -639
  315. package/src/resource/ddl/__tests__/emit.test.ts +165 -165
  316. package/src/resource/ddl/__tests__/snapshot.test.ts +499 -499
  317. package/src/resource/ddl/emit.ts +146 -146
  318. package/src/resource/ddl/persistence-types.ts +218 -218
  319. package/src/resource/ddl/type-map.ts +223 -223
  320. package/src/resource/ddl/types.ts +232 -232
  321. package/src/resource/generator-repo.ts +630 -630
  322. package/src/resource/generator-schema.ts +11 -11
  323. package/src/resource/generators/slot.ts +72 -72
  324. package/src/resource/schema.ts +21 -21
  325. package/src/router/client-entry.test.ts +227 -227
  326. package/src/router/client-entry.ts +218 -218
  327. package/src/router/fs-patterns.test.ts +96 -96
  328. package/src/router/fs-routes.test.ts +532 -532
  329. package/src/router/fs-routes.ts +53 -53
  330. package/src/router/fs-scanner.ts +216 -216
  331. package/src/router/fs-types.ts +19 -19
  332. package/src/router/route-source-analyzer.ts +521 -521
  333. package/src/routes/index.ts +74 -74
  334. package/src/routes/metadata-routes.ts +427 -427
  335. package/src/routes/types.ts +341 -341
  336. package/src/runtime/__tests__/devtools-adapter.test.ts +68 -68
  337. package/src/runtime/__tests__/error-boundary-redaction.test.ts +141 -141
  338. package/src/runtime/__tests__/hdr-client.test.ts +223 -223
  339. package/src/runtime/__tests__/http-errors.test.ts +117 -117
  340. package/src/runtime/__tests__/inline-client-hydration.test.ts +237 -237
  341. package/src/runtime/__tests__/not-found.test.ts +152 -152
  342. package/src/runtime/__tests__/observability-lifecycle.test.ts +103 -103
  343. package/src/runtime/__tests__/page-render-response.test.ts +517 -517
  344. package/src/runtime/__tests__/request-middleware.test.ts +70 -70
  345. package/src/runtime/__tests__/searchparams-page-props.test.ts +81 -81
  346. package/src/runtime/adapter.ts +47 -47
  347. package/src/runtime/boundary.tsx +252 -252
  348. package/src/runtime/cache.ts +494 -494
  349. package/src/runtime/compose.ts +222 -222
  350. package/src/runtime/devtools-adapter.ts +68 -68
  351. package/src/runtime/escape.ts +34 -34
  352. package/src/runtime/fast-refresh-runtime.ts +322 -322
  353. package/src/runtime/fast-refresh-types.ts +1 -1
  354. package/src/runtime/handler.ts +65 -65
  355. package/src/runtime/handlers.ts +30 -11
  356. package/src/runtime/http-errors.ts +113 -113
  357. package/src/runtime/image-handler.ts +1 -1
  358. package/src/runtime/lifecycle.ts +381 -381
  359. package/src/runtime/logger.test.ts +345 -345
  360. package/src/runtime/middleware.ts +264 -264
  361. package/src/runtime/not-found.ts +93 -93
  362. package/src/runtime/observability-lifecycle.ts +290 -290
  363. package/src/runtime/openapi-endpoint.ts +236 -236
  364. package/src/runtime/page-render-response.ts +287 -274
  365. package/src/runtime/ppr.ts +74 -74
  366. package/src/runtime/rate-limit.ts +1 -1
  367. package/src/runtime/redirect.ts +1 -1
  368. package/src/runtime/registry.ts +171 -171
  369. package/src/runtime/request-middleware.ts +31 -31
  370. package/src/runtime/router.test.ts +4 -4
  371. package/src/runtime/router.ts +10 -10
  372. package/src/runtime/server.ts +39 -20
  373. package/src/runtime/shims.ts +48 -48
  374. package/src/runtime/ssr.ts +43 -17
  375. package/src/runtime/static-files.ts +369 -289
  376. package/src/runtime/streaming-ssr.ts +219 -180
  377. package/src/runtime/trace.ts +144 -144
  378. package/src/scheduler/__tests__/scheduler.test.ts +12 -11
  379. package/src/scheduler/index.ts +11 -5
  380. package/src/scheduler/validate.ts +169 -169
  381. package/src/seo/index.ts +219 -219
  382. package/src/seo/integration/ssr.ts +306 -306
  383. package/src/seo/render/basic.ts +435 -435
  384. package/src/seo/render/index.ts +143 -143
  385. package/src/seo/render/jsonld.ts +539 -539
  386. package/src/seo/render/opengraph.ts +197 -197
  387. package/src/seo/render/robots.ts +116 -116
  388. package/src/seo/render/sitemap.ts +137 -137
  389. package/src/seo/render/twitter.ts +127 -127
  390. package/src/seo/resolve/opengraph.ts +143 -143
  391. package/src/seo/resolve/robots.ts +73 -73
  392. package/src/seo/resolve/title.ts +94 -94
  393. package/src/seo/resolve/twitter.ts +73 -73
  394. package/src/seo/resolve/url.ts +104 -104
  395. package/src/seo/routes/index.ts +290 -290
  396. package/src/seo/types.ts +588 -588
  397. package/src/slot/validator.ts +39 -39
  398. package/src/spec/schema.ts +35 -35
  399. package/src/storage/s3/__tests__/s3.test.ts +479 -479
  400. package/src/storage/s3/index.ts +412 -412
  401. package/src/testing/__tests__/assertions.test.ts +632 -632
  402. package/src/testing/__tests__/reporter.test.ts +454 -454
  403. package/src/testing/assertions.ts +986 -986
  404. package/src/testing/db.ts +157 -157
  405. package/src/testing/index.ts +9 -3
  406. package/src/testing/lcov.ts +192 -0
  407. package/src/testing/mocks.ts +203 -203
  408. package/src/testing/session.ts +190 -190
  409. package/src/types/branded.ts +56 -56
  410. package/src/types/index.ts +1 -1
  411. package/src/utils/safe-io.ts +188 -188
  412. package/src/utils/string-safe.ts +298 -298
  413. package/src/watcher/__tests__/watcher.test.ts +59 -59
  414. package/src/watcher/watcher.ts +61 -61
@@ -1,3 +1,3 @@
1
- export * from "./history-table";
2
- export * from "./lock";
3
- export * from "./runner";
1
+ export * from "./history-table";
2
+ export * from "./lock";
3
+ export * from "./runner";
@@ -1,324 +1,324 @@
1
- /**
2
- * @mandujs/core/db/migrations/lock
3
- *
4
- * Per-dialect serialization for the migration apply loop. Prevents two
5
- * concurrent `MigrationRunner.apply()` calls — in the same process or
6
- * (for PG/MySQL) across processes — from stepping on each other.
7
- *
8
- * ## Strategy matrix
9
- *
10
- * | Provider | Strategy | Mechanism |
11
- * |-----------|-----------------------|------------------------------------------------------------------|
12
- * | postgres | `pg_advisory_lock` | `pg_advisory_lock($1)` — lockId = `hashtext('mandu:migrations')` |
13
- * | mysql | `mysql_get_lock` | `GET_LOCK('mandu:migrations', 60)` — blocks up to 60 s |
14
- * | sqlite | `sqlite_immediate` | `BEGIN IMMEDIATE` on a dedicated connection |
15
- * | (any) | `none` | No-op (tests / non-concurrent scenarios) |
16
- *
17
- * All strategies wrap the same conceptual lock — the lockId string
18
- * (`"mandu:migrations"` by default) is stable across runs, so two
19
- * processes agreeing on the same string will serialise. If callers pass
20
- * a custom `lockId`, every participant MUST use the same value.
21
- *
22
- * ## Release semantics
23
- *
24
- * `acquireMigrationLock(...)` returns a `MigrationLock` whose
25
- * `release()` is idempotent. Callers should invoke it in a `finally`
26
- * block — the `MigrationRunner.apply()` implementation does exactly
27
- * this. SQLite's `sqlite_immediate` releases by committing the wrapper
28
- * transaction; the other strategies issue an explicit unlock statement.
29
- *
30
- * @module db/migrations/lock
31
- */
32
-
33
- import type { LockStrategy } from "../../resource/ddl/types";
34
- import type { Db } from "../index";
35
-
36
- // ─── Public API ─────────────────────────────────────────────────────────────
37
-
38
- /** A held migration lock. Calling `release()` twice is a no-op. */
39
- export interface MigrationLock {
40
- release(): Promise<void>;
41
- }
42
-
43
- /**
44
- * Default lockId — a stable string shared by every participant. For
45
- * `pg_advisory_lock` we hash this to a bigint via `hashtext()`; the
46
- * other dialects use the raw string.
47
- */
48
- export const DEFAULT_LOCK_ID = "mandu:migrations";
49
-
50
- /** MySQL `GET_LOCK` default timeout in seconds. */
51
- const MYSQL_LOCK_TIMEOUT_SECONDS = 60;
52
-
53
- /**
54
- * Acquire the migration lock for the configured dialect.
55
- *
56
- * - `pg_advisory_lock` blocks the connection until the lock is granted.
57
- * - `mysql_get_lock` blocks up to {@link MYSQL_LOCK_TIMEOUT_SECONDS}; on
58
- * timeout we throw a descriptive error.
59
- * - `sqlite_immediate` enters a BEGIN IMMEDIATE transaction on a
60
- * dedicated connection; if another writer holds the database lock,
61
- * Bun.SQL surfaces `SQLITE_BUSY` which we rethrow.
62
- * - `none` is a no-op — useful for tests and single-shot CLI runs.
63
- *
64
- * @throws on MySQL lock timeout (`GET_LOCK` returns `0`), on explicit
65
- * `GET_LOCK` error (returns `null`), or on provider/strategy mismatch
66
- * (e.g. requesting `pg_advisory_lock` while `db.provider === "sqlite"`).
67
- */
68
- export async function acquireMigrationLock(
69
- db: Db,
70
- strategy: LockStrategy,
71
- lockId: string = DEFAULT_LOCK_ID,
72
- ): Promise<MigrationLock> {
73
- switch (strategy) {
74
- case "pg_advisory_lock":
75
- assertProvider(db, "postgres", strategy);
76
- return await acquirePgAdvisoryLock(db, lockId);
77
- case "mysql_get_lock":
78
- assertProvider(db, "mysql", strategy);
79
- return await acquireMysqlLock(db, lockId);
80
- case "sqlite_immediate":
81
- assertProvider(db, "sqlite", strategy);
82
- return await acquireSqliteImmediate(db, lockId);
83
- case "none":
84
- return makeNoopLock();
85
- }
86
- }
87
-
88
- // ─── Strategy impls ─────────────────────────────────────────────────────────
89
-
90
- async function acquirePgAdvisoryLock(
91
- db: Db,
92
- lockId: string,
93
- ): Promise<MigrationLock> {
94
- // Postgres advisory locks take a bigint. We derive it from the lockId
95
- // string via `hashtext()::bigint` so the value is deterministic for
96
- // the same input across instances. `hashtext` returns int4; cast to
97
- // bigint for compatibility with `pg_advisory_lock(bigint)`.
98
- //
99
- // `SELECT pg_advisory_lock(hashtext($1)::bigint)` is safer than
100
- // computing the hash client-side because it keeps every participant
101
- // in the same database agreeing on the value without language-specific
102
- // hash-function reproduction.
103
- await db`SELECT pg_advisory_lock(hashtext(${lockId})::bigint)`;
104
-
105
- let _released = false;
106
- return {
107
- async release(): Promise<void> {
108
- if (_released) return;
109
- _released = true;
110
- try {
111
- await db`SELECT pg_advisory_unlock(hashtext(${lockId})::bigint)`;
112
- } catch (err) {
113
- // Best-effort release — if the connection has already died or
114
- // the lock is no longer held, we don't want to mask the caller's
115
- // unwind path. Surface the error name for diagnostics.
116
- const msg = err instanceof Error ? err.message : String(err);
117
- console.warn(
118
- `[@mandujs/core/db/migrations] pg_advisory_unlock failed: ${msg}`,
119
- );
120
- }
121
- },
122
- };
123
- }
124
-
125
- async function acquireMysqlLock(
126
- db: Db,
127
- lockId: string,
128
- ): Promise<MigrationLock> {
129
- const processLock = await acquireMysqlProcessMutex(lockId);
130
- // `GET_LOCK` returns:
131
- // 1 — lock granted
132
- // 0 — timeout (still blocked after the timeout)
133
- // NULL — error (aborted, killed, etc.)
134
- //
135
- // Bun.SQL returns the single row as `[{ acquired: 1 }]`; we destructure
136
- // defensively to handle any driver-side aliasing.
137
- try {
138
- const timeoutSec = MYSQL_LOCK_TIMEOUT_SECONDS;
139
- const rows = await db<{ acquired: number | bigint | null }>`
140
- SELECT GET_LOCK(${lockId}, ${timeoutSec}) AS acquired
141
- `;
142
- const first = rows[0];
143
- const value = first ? Number(first.acquired) : NaN;
144
- if (value !== 1) {
145
- throw new Error(
146
- `[@mandujs/core/db/migrations] GET_LOCK(${JSON.stringify(lockId)}, ${timeoutSec}) ` +
147
- `returned ${value === 0 ? "0 (timeout)" : "NULL (error)"}; ` +
148
- `another migration runner may be holding the lock.`,
149
- );
150
- }
151
- } catch (err) {
152
- await processLock.release();
153
- throw err;
154
- }
155
-
156
- let _released = false;
157
- return {
158
- async release(): Promise<void> {
159
- if (_released) return;
160
- _released = true;
161
- try {
162
- await db`SELECT RELEASE_LOCK(${lockId})`;
163
- } catch (err) {
164
- const msg = err instanceof Error ? err.message : String(err);
165
- console.warn(
166
- `[@mandujs/core/db/migrations] RELEASE_LOCK failed: ${msg}`,
167
- );
168
- } finally {
169
- await processLock.release();
170
- }
171
- },
172
- };
173
- }
174
-
175
- /**
176
- * Same-process MySQL runners are serialised before hitting GET_LOCK.
177
- * Cross-process safety still comes from MySQL's named lock; this mutex only
178
- * avoids concurrent GET_LOCK calls from separate Bun.SQL pools in one runtime.
179
- */
180
- const MYSQL_LOCK_REGISTRY_SYMBOL = Symbol.for(
181
- "@mandujs/core/db/migrations/mysql-locks",
182
- );
183
- interface MysqlLockRegistry {
184
- chains: Map<string, Promise<void>>;
185
- }
186
- function getMysqlLockRegistry(): MysqlLockRegistry {
187
- const g = globalThis as unknown as Record<symbol, unknown>;
188
- let reg = g[MYSQL_LOCK_REGISTRY_SYMBOL] as MysqlLockRegistry | undefined;
189
- if (!reg) {
190
- reg = { chains: new Map() };
191
- g[MYSQL_LOCK_REGISTRY_SYMBOL] = reg;
192
- }
193
- return reg;
194
- }
195
-
196
- async function acquireMysqlProcessMutex(lockId: string): Promise<MigrationLock> {
197
- const registry = getMysqlLockRegistry();
198
- const previous = registry.chains.get(lockId) ?? Promise.resolve();
199
-
200
- let release!: () => void;
201
- const nextPromise = new Promise<void>((resolve) => {
202
- release = resolve;
203
- });
204
- const tail = previous.then(() => nextPromise);
205
- registry.chains.set(lockId, tail);
206
-
207
- await previous;
208
-
209
- let _released = false;
210
- return {
211
- async release(): Promise<void> {
212
- if (_released) return;
213
- _released = true;
214
- release();
215
- if (registry.chains.get(lockId) === tail) {
216
- registry.chains.delete(lockId);
217
- }
218
- },
219
- };
220
- }
221
-
222
- /**
223
- * Per-process mutex queues keyed by lockId. SQLite is single-writer at
224
- * the engine level, so cross-process writes already serialise — the
225
- * remaining failure mode is two `apply()` calls in the SAME process
226
- * interleaving their `db.transaction(...)` calls. A process-local
227
- * promise chain is the simplest correct coordinator.
228
- *
229
- * This is stored on `globalThis` rather than module scope so that
230
- * multiple copies of the module (e.g. reloads under watch mode) still
231
- * agree on the same queue.
232
- */
233
- const SQLITE_LOCK_REGISTRY_SYMBOL = Symbol.for(
234
- "@mandujs/core/db/migrations/sqlite-locks",
235
- );
236
- interface SqliteLockRegistry {
237
- /** Most-recent promise in each lockId's queue. */
238
- chains: Map<string, Promise<void>>;
239
- }
240
- function getSqliteLockRegistry(): SqliteLockRegistry {
241
- const g = globalThis as unknown as Record<symbol, unknown>;
242
- let reg = g[SQLITE_LOCK_REGISTRY_SYMBOL] as SqliteLockRegistry | undefined;
243
- if (!reg) {
244
- reg = { chains: new Map() };
245
- g[SQLITE_LOCK_REGISTRY_SYMBOL] = reg;
246
- }
247
- return reg;
248
- }
249
-
250
- async function acquireSqliteImmediate(
251
- db: Db,
252
- lockId: string,
253
- ): Promise<MigrationLock> {
254
- // Why an in-process mutex instead of `BEGIN IMMEDIATE`:
255
- //
256
- // - `BEGIN IMMEDIATE` at the handle level conflicts with the
257
- // `db.transaction()` calls we issue per-migration — SQLite
258
- // errors with "cannot start a transaction within a transaction".
259
- // - SQLite is already single-writer at the engine level, so
260
- // cross-process writes queue via the OS file lock; the only
261
- // race we need to close is two concurrent `apply()` calls in
262
- // the SAME process interleaving their statements.
263
- // - A promise-chain mutex is the minimal correct mechanism for
264
- // in-process serialisation. Every apply() awaits the previous
265
- // holder's release before entering the critical section.
266
- //
267
- // Cross-process migration coordination is v2 per RFC 0001 §8.
268
- //
269
- // Sanity probe: executing a trivial statement on the handle at
270
- // acquire time catches "pool closed" / handle validity issues
271
- // before the caller commits resources to the apply loop.
272
- await db`SELECT 1`;
273
-
274
- const registry = getSqliteLockRegistry();
275
- const previous = registry.chains.get(lockId) ?? Promise.resolve();
276
-
277
- let release!: () => void;
278
- const nextPromise = new Promise<void>((resolve) => {
279
- release = resolve;
280
- });
281
- const tail = previous.then(() => nextPromise);
282
- registry.chains.set(lockId, tail);
283
-
284
- // Wait for the previous holder to release.
285
- await previous;
286
-
287
- let _released = false;
288
- return {
289
- async release(): Promise<void> {
290
- if (_released) return;
291
- _released = true;
292
- release();
293
- // If no one queued behind us, drop the entry so the registry
294
- // doesn't grow unbounded across many apply() cycles.
295
- if (registry.chains.get(lockId) === tail) {
296
- registry.chains.delete(lockId);
297
- }
298
- },
299
- };
300
- }
301
-
302
- function makeNoopLock(): MigrationLock {
303
- let _released = false;
304
- return {
305
- async release(): Promise<void> {
306
- _released = true;
307
- },
308
- };
309
- }
310
-
311
- // ─── Helpers ────────────────────────────────────────────────────────────────
312
-
313
- function assertProvider(
314
- db: Db,
315
- expected: Db["provider"],
316
- strategy: LockStrategy,
317
- ): void {
318
- if (db.provider !== expected) {
319
- throw new Error(
320
- `[@mandujs/core/db/migrations] Lock strategy ${JSON.stringify(strategy)} requires ` +
321
- `provider ${JSON.stringify(expected)}, but db.provider is ${JSON.stringify(db.provider)}.`,
322
- );
323
- }
324
- }
1
+ /**
2
+ * @mandujs/core/db/migrations/lock
3
+ *
4
+ * Per-dialect serialization for the migration apply loop. Prevents two
5
+ * concurrent `MigrationRunner.apply()` calls — in the same process or
6
+ * (for PG/MySQL) across processes — from stepping on each other.
7
+ *
8
+ * ## Strategy matrix
9
+ *
10
+ * | Provider | Strategy | Mechanism |
11
+ * |-----------|-----------------------|------------------------------------------------------------------|
12
+ * | postgres | `pg_advisory_lock` | `pg_advisory_lock($1)` — lockId = `hashtext('mandu:migrations')` |
13
+ * | mysql | `mysql_get_lock` | `GET_LOCK('mandu:migrations', 60)` — blocks up to 60 s |
14
+ * | sqlite | `sqlite_immediate` | `BEGIN IMMEDIATE` on a dedicated connection |
15
+ * | (any) | `none` | No-op (tests / non-concurrent scenarios) |
16
+ *
17
+ * All strategies wrap the same conceptual lock — the lockId string
18
+ * (`"mandu:migrations"` by default) is stable across runs, so two
19
+ * processes agreeing on the same string will serialise. If callers pass
20
+ * a custom `lockId`, every participant MUST use the same value.
21
+ *
22
+ * ## Release semantics
23
+ *
24
+ * `acquireMigrationLock(...)` returns a `MigrationLock` whose
25
+ * `release()` is idempotent. Callers should invoke it in a `finally`
26
+ * block — the `MigrationRunner.apply()` implementation does exactly
27
+ * this. SQLite's `sqlite_immediate` releases by committing the wrapper
28
+ * transaction; the other strategies issue an explicit unlock statement.
29
+ *
30
+ * @module db/migrations/lock
31
+ */
32
+
33
+ import type { LockStrategy } from "../../resource/ddl/types";
34
+ import type { Db } from "../index";
35
+
36
+ // ─── Public API ─────────────────────────────────────────────────────────────
37
+
38
+ /** A held migration lock. Calling `release()` twice is a no-op. */
39
+ export interface MigrationLock {
40
+ release(): Promise<void>;
41
+ }
42
+
43
+ /**
44
+ * Default lockId — a stable string shared by every participant. For
45
+ * `pg_advisory_lock` we hash this to a bigint via `hashtext()`; the
46
+ * other dialects use the raw string.
47
+ */
48
+ export const DEFAULT_LOCK_ID = "mandu:migrations";
49
+
50
+ /** MySQL `GET_LOCK` default timeout in seconds. */
51
+ const MYSQL_LOCK_TIMEOUT_SECONDS = 60;
52
+
53
+ /**
54
+ * Acquire the migration lock for the configured dialect.
55
+ *
56
+ * - `pg_advisory_lock` blocks the connection until the lock is granted.
57
+ * - `mysql_get_lock` blocks up to {@link MYSQL_LOCK_TIMEOUT_SECONDS}; on
58
+ * timeout we throw a descriptive error.
59
+ * - `sqlite_immediate` enters a BEGIN IMMEDIATE transaction on a
60
+ * dedicated connection; if another writer holds the database lock,
61
+ * Bun.SQL surfaces `SQLITE_BUSY` which we rethrow.
62
+ * - `none` is a no-op — useful for tests and single-shot CLI runs.
63
+ *
64
+ * @throws on MySQL lock timeout (`GET_LOCK` returns `0`), on explicit
65
+ * `GET_LOCK` error (returns `null`), or on provider/strategy mismatch
66
+ * (e.g. requesting `pg_advisory_lock` while `db.provider === "sqlite"`).
67
+ */
68
+ export async function acquireMigrationLock(
69
+ db: Db,
70
+ strategy: LockStrategy,
71
+ lockId: string = DEFAULT_LOCK_ID,
72
+ ): Promise<MigrationLock> {
73
+ switch (strategy) {
74
+ case "pg_advisory_lock":
75
+ assertProvider(db, "postgres", strategy);
76
+ return await acquirePgAdvisoryLock(db, lockId);
77
+ case "mysql_get_lock":
78
+ assertProvider(db, "mysql", strategy);
79
+ return await acquireMysqlLock(db, lockId);
80
+ case "sqlite_immediate":
81
+ assertProvider(db, "sqlite", strategy);
82
+ return await acquireSqliteImmediate(db, lockId);
83
+ case "none":
84
+ return makeNoopLock();
85
+ }
86
+ }
87
+
88
+ // ─── Strategy impls ─────────────────────────────────────────────────────────
89
+
90
+ async function acquirePgAdvisoryLock(
91
+ db: Db,
92
+ lockId: string,
93
+ ): Promise<MigrationLock> {
94
+ // Postgres advisory locks take a bigint. We derive it from the lockId
95
+ // string via `hashtext()::bigint` so the value is deterministic for
96
+ // the same input across instances. `hashtext` returns int4; cast to
97
+ // bigint for compatibility with `pg_advisory_lock(bigint)`.
98
+ //
99
+ // `SELECT pg_advisory_lock(hashtext($1)::bigint)` is safer than
100
+ // computing the hash client-side because it keeps every participant
101
+ // in the same database agreeing on the value without language-specific
102
+ // hash-function reproduction.
103
+ await db`SELECT pg_advisory_lock(hashtext(${lockId})::bigint)`;
104
+
105
+ let _released = false;
106
+ return {
107
+ async release(): Promise<void> {
108
+ if (_released) return;
109
+ _released = true;
110
+ try {
111
+ await db`SELECT pg_advisory_unlock(hashtext(${lockId})::bigint)`;
112
+ } catch (err) {
113
+ // Best-effort release — if the connection has already died or
114
+ // the lock is no longer held, we don't want to mask the caller's
115
+ // unwind path. Surface the error name for diagnostics.
116
+ const msg = err instanceof Error ? err.message : String(err);
117
+ console.warn(
118
+ `[@mandujs/core/db/migrations] pg_advisory_unlock failed: ${msg}`,
119
+ );
120
+ }
121
+ },
122
+ };
123
+ }
124
+
125
+ async function acquireMysqlLock(
126
+ db: Db,
127
+ lockId: string,
128
+ ): Promise<MigrationLock> {
129
+ const processLock = await acquireMysqlProcessMutex(lockId);
130
+ // `GET_LOCK` returns:
131
+ // 1 — lock granted
132
+ // 0 — timeout (still blocked after the timeout)
133
+ // NULL — error (aborted, killed, etc.)
134
+ //
135
+ // Bun.SQL returns the single row as `[{ acquired: 1 }]`; we destructure
136
+ // defensively to handle any driver-side aliasing.
137
+ try {
138
+ const timeoutSec = MYSQL_LOCK_TIMEOUT_SECONDS;
139
+ const rows = await db<{ acquired: number | bigint | null }>`
140
+ SELECT GET_LOCK(${lockId}, ${timeoutSec}) AS acquired
141
+ `;
142
+ const first = rows[0];
143
+ const value = first ? Number(first.acquired) : NaN;
144
+ if (value !== 1) {
145
+ throw new Error(
146
+ `[@mandujs/core/db/migrations] GET_LOCK(${JSON.stringify(lockId)}, ${timeoutSec}) ` +
147
+ `returned ${value === 0 ? "0 (timeout)" : "NULL (error)"}; ` +
148
+ `another migration runner may be holding the lock.`,
149
+ );
150
+ }
151
+ } catch (err) {
152
+ await processLock.release();
153
+ throw err;
154
+ }
155
+
156
+ let _released = false;
157
+ return {
158
+ async release(): Promise<void> {
159
+ if (_released) return;
160
+ _released = true;
161
+ try {
162
+ await db`SELECT RELEASE_LOCK(${lockId})`;
163
+ } catch (err) {
164
+ const msg = err instanceof Error ? err.message : String(err);
165
+ console.warn(
166
+ `[@mandujs/core/db/migrations] RELEASE_LOCK failed: ${msg}`,
167
+ );
168
+ } finally {
169
+ await processLock.release();
170
+ }
171
+ },
172
+ };
173
+ }
174
+
175
+ /**
176
+ * Same-process MySQL runners are serialised before hitting GET_LOCK.
177
+ * Cross-process safety still comes from MySQL's named lock; this mutex only
178
+ * avoids concurrent GET_LOCK calls from separate Bun.SQL pools in one runtime.
179
+ */
180
+ const MYSQL_LOCK_REGISTRY_SYMBOL = Symbol.for(
181
+ "@mandujs/core/compat/db/migrations/mysql-locks",
182
+ );
183
+ interface MysqlLockRegistry {
184
+ chains: Map<string, Promise<void>>;
185
+ }
186
+ function getMysqlLockRegistry(): MysqlLockRegistry {
187
+ const g = globalThis as unknown as Record<symbol, unknown>;
188
+ let reg = g[MYSQL_LOCK_REGISTRY_SYMBOL] as MysqlLockRegistry | undefined;
189
+ if (!reg) {
190
+ reg = { chains: new Map() };
191
+ g[MYSQL_LOCK_REGISTRY_SYMBOL] = reg;
192
+ }
193
+ return reg;
194
+ }
195
+
196
+ async function acquireMysqlProcessMutex(lockId: string): Promise<MigrationLock> {
197
+ const registry = getMysqlLockRegistry();
198
+ const previous = registry.chains.get(lockId) ?? Promise.resolve();
199
+
200
+ let release!: () => void;
201
+ const nextPromise = new Promise<void>((resolve) => {
202
+ release = resolve;
203
+ });
204
+ const tail = previous.then(() => nextPromise);
205
+ registry.chains.set(lockId, tail);
206
+
207
+ await previous;
208
+
209
+ let _released = false;
210
+ return {
211
+ async release(): Promise<void> {
212
+ if (_released) return;
213
+ _released = true;
214
+ release();
215
+ if (registry.chains.get(lockId) === tail) {
216
+ registry.chains.delete(lockId);
217
+ }
218
+ },
219
+ };
220
+ }
221
+
222
+ /**
223
+ * Per-process mutex queues keyed by lockId. SQLite is single-writer at
224
+ * the engine level, so cross-process writes already serialise — the
225
+ * remaining failure mode is two `apply()` calls in the SAME process
226
+ * interleaving their `db.transaction(...)` calls. A process-local
227
+ * promise chain is the simplest correct coordinator.
228
+ *
229
+ * This is stored on `globalThis` rather than module scope so that
230
+ * multiple copies of the module (e.g. reloads under watch mode) still
231
+ * agree on the same queue.
232
+ */
233
+ const SQLITE_LOCK_REGISTRY_SYMBOL = Symbol.for(
234
+ "@mandujs/core/compat/db/migrations/sqlite-locks",
235
+ );
236
+ interface SqliteLockRegistry {
237
+ /** Most-recent promise in each lockId's queue. */
238
+ chains: Map<string, Promise<void>>;
239
+ }
240
+ function getSqliteLockRegistry(): SqliteLockRegistry {
241
+ const g = globalThis as unknown as Record<symbol, unknown>;
242
+ let reg = g[SQLITE_LOCK_REGISTRY_SYMBOL] as SqliteLockRegistry | undefined;
243
+ if (!reg) {
244
+ reg = { chains: new Map() };
245
+ g[SQLITE_LOCK_REGISTRY_SYMBOL] = reg;
246
+ }
247
+ return reg;
248
+ }
249
+
250
+ async function acquireSqliteImmediate(
251
+ db: Db,
252
+ lockId: string,
253
+ ): Promise<MigrationLock> {
254
+ // Why an in-process mutex instead of `BEGIN IMMEDIATE`:
255
+ //
256
+ // - `BEGIN IMMEDIATE` at the handle level conflicts with the
257
+ // `db.transaction()` calls we issue per-migration — SQLite
258
+ // errors with "cannot start a transaction within a transaction".
259
+ // - SQLite is already single-writer at the engine level, so
260
+ // cross-process writes queue via the OS file lock; the only
261
+ // race we need to close is two concurrent `apply()` calls in
262
+ // the SAME process interleaving their statements.
263
+ // - A promise-chain mutex is the minimal correct mechanism for
264
+ // in-process serialisation. Every apply() awaits the previous
265
+ // holder's release before entering the critical section.
266
+ //
267
+ // Cross-process migration coordination is v2 per RFC 0001 §8.
268
+ //
269
+ // Sanity probe: executing a trivial statement on the handle at
270
+ // acquire time catches "pool closed" / handle validity issues
271
+ // before the caller commits resources to the apply loop.
272
+ await db`SELECT 1`;
273
+
274
+ const registry = getSqliteLockRegistry();
275
+ const previous = registry.chains.get(lockId) ?? Promise.resolve();
276
+
277
+ let release!: () => void;
278
+ const nextPromise = new Promise<void>((resolve) => {
279
+ release = resolve;
280
+ });
281
+ const tail = previous.then(() => nextPromise);
282
+ registry.chains.set(lockId, tail);
283
+
284
+ // Wait for the previous holder to release.
285
+ await previous;
286
+
287
+ let _released = false;
288
+ return {
289
+ async release(): Promise<void> {
290
+ if (_released) return;
291
+ _released = true;
292
+ release();
293
+ // If no one queued behind us, drop the entry so the registry
294
+ // doesn't grow unbounded across many apply() cycles.
295
+ if (registry.chains.get(lockId) === tail) {
296
+ registry.chains.delete(lockId);
297
+ }
298
+ },
299
+ };
300
+ }
301
+
302
+ function makeNoopLock(): MigrationLock {
303
+ let _released = false;
304
+ return {
305
+ async release(): Promise<void> {
306
+ _released = true;
307
+ },
308
+ };
309
+ }
310
+
311
+ // ─── Helpers ────────────────────────────────────────────────────────────────
312
+
313
+ function assertProvider(
314
+ db: Db,
315
+ expected: Db["provider"],
316
+ strategy: LockStrategy,
317
+ ): void {
318
+ if (db.provider !== expected) {
319
+ throw new Error(
320
+ `[@mandujs/core/db/migrations] Lock strategy ${JSON.stringify(strategy)} requires ` +
321
+ `provider ${JSON.stringify(expected)}, but db.provider is ${JSON.stringify(db.provider)}.`,
322
+ );
323
+ }
324
+ }