@open-mercato/shared 0.6.7-develop.6870.1.b69802067a → 0.6.8-develop.6874.1.982d6097d8

package/dist/lib/db/mikro.js

@@ -49,6 +49,16 @@ function resolvePoolConfig(env = process.env) {
     lockTimeoutMs: parsePositiveIntEnv(env.DB_LOCK_TIMEOUT_MS)
   };
 }
+function attachPoolErrorHandlers(pool) {
+  pool.on("error", (err) => {
+    logger.warn("Idle pg pool client error (connection reaped/terminated)", { err });
+  });
+  pool.on("connect", (client) => {
+    client.on("error", (err) => {
+      logger.warn("pg client error (connection reaped/terminated)", { err });
+    });
+  });
+}
 async function getOrm() {
   if (ormInstance) {
     return ormInstance;
@@ -113,9 +123,7 @@ async function getOrm() {
       options: connectionOptions,
       ssl: sslConfig,
       onPoolCreated: (pool) => {
-        pool.on("error", (err) => {
-          logger.warn("Idle pg pool client error (connection reaped/terminated)", { err });
-        });
+        attachPoolErrorHandlers(pool);
         if (process.env.OM_DB_POOL_DEBUG === "1" || process.env.OM_INTEGRATION_TEST === "true") {
           logger.info("pg pool created with options", {
             max: pool.options?.max,
@@ -139,6 +147,7 @@ if (process.env.NODE_ENV !== "production") {
   void closeOrmIfLoaded();
 }
 export {
+  attachPoolErrorHandlers,
   getOrm,
   getOrmEntities,
   registerOrmEntities,

package/dist/lib/db/mikro.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/db/mikro.ts"],
-  "sourcesContent": ["import 'dotenv/config'\nimport 'reflect-metadata'\nimport { MikroORM } from '@mikro-orm/core'\nimport { ReflectMetadataProvider } from '@mikro-orm/decorators/legacy'\nimport { PostgreSqlDriver, type EntityManager as PostgreSqlEntityManager } from '@mikro-orm/postgresql'\nimport { getSslConfig } from './ssl'\nimport { createLogger } from '../logger'\n\nconst logger = createLogger('shared').child({ component: 'orm' })\n\nexport type AppMikroORM = MikroORM<PostgreSqlDriver, PostgreSqlEntityManager<PostgreSqlDriver>>\n\nlet ormInstance: AppMikroORM | null = null\n\n// Use globalThis so standalone apps survive duplicated shared package module instances.\nconst GLOBAL_ENTITIES_KEY = '__openMercatoOrmEntities__'\n\nfunction getRegisteredEntities(): any[] | null {\n  return (globalThis as Record<string, unknown>)[GLOBAL_ENTITIES_KEY] as any[] | null ?? null\n}\n\nfunction setRegisteredEntities(entities: any[]): void {\n  (globalThis as Record<string, unknown>)[GLOBAL_ENTITIES_KEY] = entities\n}\n\nexport function registerOrmEntities(entities: any[]) {\n  if (getRegisteredEntities() !== null && process.env.NODE_ENV === 'development') {\n    logger.debug('ORM entities re-registered (this may occur during HMR)')\n  }\n  setRegisteredEntities(entities)\n}\n\nexport function getOrmEntities(): any[] {\n  const entities = getRegisteredEntities()\n  if (!entities) {\n    throw new Error('[Bootstrap] ORM entities not registered. Call registerOrmEntities() at bootstrap.')\n  }\n  return entities\n}\n\nexport type ResolvedPoolConfig = {\n  poolMin: number\n  poolMax: number\n  poolIdleTimeout: number\n  poolAcquireTimeout: number\n  idleSessionTimeoutMs: number | undefined\n  idleInTransactionTimeoutMs: number | undefined\n  statementTimeoutMs: number | undefined\n  lockTimeoutMs: number | undefined\n}\n\n// Parse an optional positive-millisecond env var. Returns undefined when unset,\n// non-numeric, or non-positive so callers treat \"no value\" as \"no timeout\".\nfunction parsePositiveIntEnv(raw: string | undefined): number | undefined {\n  const parsed = parseInt(raw || '')\n  return Number.isFinite(parsed) && parsed > 0 ? parsed : undefined\n}\n\nexport function resolvePoolConfig(env: NodeJS.ProcessEnv = process.env): ResolvedPoolConfig {\n  const idleSessionTimeoutEnv = parseInt(env.DB_IDLE_SESSION_TIMEOUT_MS || '')\n  const idleInTxTimeoutEnv = parseInt(env.DB_IDLE_IN_TRANSACTION_TIMEOUT_MS || '')\n  return {\n    poolMin: parseInt(env.DB_POOL_MIN || '2'),\n    poolMax: parseInt(env.DB_POOL_MAX || '20'),\n    poolIdleTimeout: parseInt(env.DB_POOL_IDLE_TIMEOUT || '3000'),\n    poolAcquireTimeout: parseInt(env.DB_POOL_ACQUIRE_TIMEOUT || '6000'),\n    idleSessionTimeoutMs: Number.isFinite(idleSessionTimeoutEnv)\n      ? idleSessionTimeoutEnv\n      : env.NODE_ENV === 'production'\n        ? undefined\n        : 600_000,\n    // Finite default in every environment (including production) so a leaked or idle\n    // open transaction cannot pin a pool connection indefinitely and exhaust the pool.\n    // Mirrors the long-standing dev value; override (incl. 0 to disable) via env.\n    idleInTransactionTimeoutMs: Number.isFinite(idleInTxTimeoutEnv) ? idleInTxTimeoutEnv : 120_000,\n    // Opt-in guards against runaway statements and lock waits. No timeout when unset.\n    statementTimeoutMs: parsePositiveIntEnv(env.DB_STATEMENT_TIMEOUT_MS),\n    lockTimeoutMs: parsePositiveIntEnv(env.DB_LOCK_TIMEOUT_MS),\n  }\n}\n\nexport async function getOrm() {\n  if (ormInstance) {\n    return ormInstance\n  }\n\n  const entities = getOrmEntities()\n  const clientUrl = process.env.DATABASE_URL\n  if (!clientUrl) {\n    throw new Error('DATABASE_URL is not set')\n  }\n\n  // Parse connection pool settings from environment\n  const {\n    poolMin,\n    poolMax,\n    poolIdleTimeout,\n    poolAcquireTimeout,\n    idleSessionTimeoutMs,\n    idleInTransactionTimeoutMs,\n    statementTimeoutMs,\n    lockTimeoutMs,\n  } = resolvePoolConfig()\n  const connectionOptions =\n    idleSessionTimeoutMs && idleSessionTimeoutMs > 0\n      ? `-c idle_session_timeout=${idleSessionTimeoutMs}`\n      : undefined\n\n  const sslConfig = getSslConfig()\n\n  if (process.env.OM_DB_POOL_DEBUG === '1' || process.env.OM_INTEGRATION_TEST === 'true') {\n    logger.info('Pool config', {\n      poolMin,\n      poolMax,\n      poolIdleTimeout,\n      poolAcquireTimeout,\n      idleSessionTimeoutMs,\n      idleInTransactionTimeoutMs,\n      statementTimeoutMs,\n      lockTimeoutMs,\n      nodeEnv: process.env.NODE_ENV,\n    })\n  }\n\n  ormInstance = await MikroORM.init<PostgreSqlDriver, PostgreSqlEntityManager<PostgreSqlDriver>>({\n    driver: PostgreSqlDriver,\n    clientUrl,\n    entities,\n    debug: false,\n    // v7 no longer defaults to ReflectMetadataProvider. Entities in this repo use\n    // `@mikro-orm/decorators/legacy`, which relies on TypeScript `emitDecoratorMetadata`\n    // + reflect-metadata for type inference (nullability, column types). Without this,\n    // inferred types are silently wrong at runtime.\n    metadataProvider: ReflectMetadataProvider,\n    // MikroORM v7 pool shape (min/max/idleTimeoutMillis). Knex-era `acquireTimeoutMillis` /\n    // `destroyTimeoutMillis` were removed; acquire wait maps to pg `connectionTimeoutMillis`\n    // below under `driverOptions`. Mirror `connectionTimeoutMillis` here too \u2014 older Mikro\n    // versions read it from `pool`; v7 reads from `driverOptions` but accepting both\n    // costs nothing and protects us from upstream config-merge regressions.\n    pool: {\n      min: poolMin,\n      max: poolMax,\n      idleTimeoutMillis: poolIdleTimeout,\n      acquireTimeoutMillis: poolAcquireTimeout,\n    } as any,\n    // Driver options are merged into pg.PoolConfig (ClientConfig + pg-pool).\n    driverOptions: {\n      connectionTimeoutMillis: poolAcquireTimeout,\n      idle_in_transaction_session_timeout: idleInTransactionTimeoutMs,\n      statement_timeout: statementTimeoutMs,\n      lock_timeout: lockTimeoutMs,\n      options: connectionOptions,\n      ssl: sslConfig,\n      onPoolCreated: (pool: any) => {\n        // node-postgres re-emits errors from IDLE pooled clients on the pool's\n        // 'error' event. Postgres terminates idle sessions on its own (admin\n        // termination, network drop, and \u2014 most relevantly for long-running\n        // daemons like the scheduler \u2014 `idle_in_transaction_session_timeout`,\n        // which defaults to 120s above). Without a listener here, such a\n        // termination surfaces as an unhandled 'error' event and crashes the\n        // whole process (e.g. \"Scheduler polling engine exited unexpectedly\n        // with exit code 1\"). Swallow it: the pool discards the dead client and\n        // opens a fresh connection on the next acquire.\n        pool.on('error', (err: unknown) => {\n          logger.warn('Idle pg pool client error (connection reaped/terminated)', { err })\n        })\n        if (process.env.OM_DB_POOL_DEBUG === '1' || process.env.OM_INTEGRATION_TEST === 'true') {\n          logger.info('pg pool created with options', {\n            max: pool.options?.max,\n            min: pool.options?.min,\n            idleTimeoutMillis: pool.options?.idleTimeoutMillis,\n            connectionTimeoutMillis: pool.options?.connectionTimeoutMillis,\n          })\n        }\n      },\n    },\n  })\n\n  return ormInstance\n}\n\n\nasync function closeOrmIfLoaded(): Promise<void> {\n  if (ormInstance) {\n    await ormInstance.close(true)\n    ormInstance = null\n  }\n}\n\n// In dev mode, handle reloads cleanly without leaving dangling connections.\nif (process.env.NODE_ENV !== 'production') {\n  void closeOrmIfLoaded()\n}\n"],
-  "mappings": "AAAA,OAAO;AACP,OAAO;AACP,SAAS,gBAAgB;AACzB,SAAS,+BAA+B;AACxC,SAAS,wBAAuE;AAChF,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,QAAQ,EAAE,MAAM,EAAE,WAAW,MAAM,CAAC;AAIhE,IAAI,cAAkC;AAGtC,MAAM,sBAAsB;AAE5B,SAAS,wBAAsC;AAC7C,SAAQ,WAAuC,mBAAmB,KAAqB;AACzF;AAEA,SAAS,sBAAsB,UAAuB;AACpD,EAAC,WAAuC,mBAAmB,IAAI;AACjE;AAEO,SAAS,oBAAoB,UAAiB;AACnD,MAAI,sBAAsB,MAAM,QAAQ,QAAQ,IAAI,aAAa,eAAe;AAC9E,WAAO,MAAM,wDAAwD;AAAA,EACvE;AACA,wBAAsB,QAAQ;AAChC;AAEO,SAAS,iBAAwB;AACtC,QAAM,WAAW,sBAAsB;AACvC,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,mFAAmF;AAAA,EACrG;AACA,SAAO;AACT;AAeA,SAAS,oBAAoB,KAA6C;AACxE,QAAM,SAAS,SAAS,OAAO,EAAE;AACjC,SAAO,OAAO,SAAS,MAAM,KAAK,SAAS,IAAI,SAAS;AAC1D;AAEO,SAAS,kBAAkB,MAAyB,QAAQ,KAAyB;AAC1F,QAAM,wBAAwB,SAAS,IAAI,8BAA8B,EAAE;AAC3E,QAAM,qBAAqB,SAAS,IAAI,qCAAqC,EAAE;AAC/E,SAAO;AAAA,IACL,SAAS,SAAS,IAAI,eAAe,GAAG;AAAA,IACxC,SAAS,SAAS,IAAI,eAAe,IAAI;AAAA,IACzC,iBAAiB,SAAS,IAAI,wBAAwB,MAAM;AAAA,IAC5D,oBAAoB,SAAS,IAAI,2BAA2B,MAAM;AAAA,IAClE,sBAAsB,OAAO,SAAS,qBAAqB,IACvD,wBACA,IAAI,aAAa,eACf,SACA;AAAA;AAAA;AAAA;AAAA,IAIN,4BAA4B,OAAO,SAAS,kBAAkB,IAAI,qBAAqB;AAAA;AAAA,IAEvF,oBAAoB,oBAAoB,IAAI,uBAAuB;AAAA,IACnE,eAAe,oBAAoB,IAAI,kBAAkB;AAAA,EAC3D;AACF;AAEA,eAAsB,SAAS;AAC7B,MAAI,aAAa;AACf,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,eAAe;AAChC,QAAM,YAAY,QAAQ,IAAI;AAC9B,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AAGA,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI,kBAAkB;AACtB,QAAM,oBACJ,wBAAwB,uBAAuB,IAC3C,2BAA2B,oBAAoB,KAC/C;AAEN,QAAM,YAAY,aAAa;AAE/B,MAAI,QAAQ,IAAI,qBAAqB,OAAO,QAAQ,IAAI,wBAAwB,QAAQ;AACtF,WAAO,KAAK,eAAe;AAAA,MACzB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,QAAQ,IAAI;AAAA,IACvB,CAAC;AAAA,EACH;AAEA,gBAAc,MAAM,SAAS,KAAkE;AAAA,IAC7F,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,IAKP,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMlB,MAAM;AAAA,MACJ,KAAK;AAAA,MACL,KAAK;AAAA,MACL,mBAAmB;AAAA,MACnB,sBAAsB;AAAA,IACxB;AAAA;AAAA,IAEA,eAAe;AAAA,MACb,yBAAyB;AAAA,MACzB,qCAAqC;AAAA,MACrC,mBAAmB;AAAA,MACnB,cAAc;AAAA,MACd,SAAS;AAAA,MACT,KAAK;AAAA,MACL,eAAe,CAAC,SAAc;AAU5B,aAAK,GAAG,SAAS,CAAC,QAAiB;AACjC,iBAAO,KAAK,4DAA4D,EAAE,IAAI,CAAC;AAAA,QACjF,CAAC;AACD,YAAI,QAAQ,IAAI,qBAAqB,OAAO,QAAQ,IAAI,wBAAwB,QAAQ;AACtF,iBAAO,KAAK,gCAAgC;AAAA,YAC1C,KAAK,KAAK,SAAS;AAAA,YACnB,KAAK,KAAK,SAAS;AAAA,YACnB,mBAAmB,KAAK,SAAS;AAAA,YACjC,yBAAyB,KAAK,SAAS;AAAA,UACzC,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO;AACT;AAGA,eAAe,mBAAkC;AAC/C,MAAI,aAAa;AACf,UAAM,YAAY,MAAM,IAAI;AAC5B,kBAAc;AAAA,EAChB;AACF;AAGA,IAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,OAAK,iBAAiB;AACxB;",
+  "sourcesContent": ["import 'dotenv/config'\nimport 'reflect-metadata'\nimport { MikroORM } from '@mikro-orm/core'\nimport { ReflectMetadataProvider } from '@mikro-orm/decorators/legacy'\nimport { PostgreSqlDriver, type EntityManager as PostgreSqlEntityManager } from '@mikro-orm/postgresql'\nimport { getSslConfig } from './ssl'\nimport { createLogger } from '../logger'\n\nconst logger = createLogger('shared').child({ component: 'orm' })\n\nexport type AppMikroORM = MikroORM<PostgreSqlDriver, PostgreSqlEntityManager<PostgreSqlDriver>>\n\nlet ormInstance: AppMikroORM | null = null\n\n// Use globalThis so standalone apps survive duplicated shared package module instances.\nconst GLOBAL_ENTITIES_KEY = '__openMercatoOrmEntities__'\n\nfunction getRegisteredEntities(): any[] | null {\n  return (globalThis as Record<string, unknown>)[GLOBAL_ENTITIES_KEY] as any[] | null ?? null\n}\n\nfunction setRegisteredEntities(entities: any[]): void {\n  (globalThis as Record<string, unknown>)[GLOBAL_ENTITIES_KEY] = entities\n}\n\nexport function registerOrmEntities(entities: any[]) {\n  if (getRegisteredEntities() !== null && process.env.NODE_ENV === 'development') {\n    logger.debug('ORM entities re-registered (this may occur during HMR)')\n  }\n  setRegisteredEntities(entities)\n}\n\nexport function getOrmEntities(): any[] {\n  const entities = getRegisteredEntities()\n  if (!entities) {\n    throw new Error('[Bootstrap] ORM entities not registered. Call registerOrmEntities() at bootstrap.')\n  }\n  return entities\n}\n\nexport type ResolvedPoolConfig = {\n  poolMin: number\n  poolMax: number\n  poolIdleTimeout: number\n  poolAcquireTimeout: number\n  idleSessionTimeoutMs: number | undefined\n  idleInTransactionTimeoutMs: number | undefined\n  statementTimeoutMs: number | undefined\n  lockTimeoutMs: number | undefined\n}\n\n// Parse an optional positive-millisecond env var. Returns undefined when unset,\n// non-numeric, or non-positive so callers treat \"no value\" as \"no timeout\".\nfunction parsePositiveIntEnv(raw: string | undefined): number | undefined {\n  const parsed = parseInt(raw || '')\n  return Number.isFinite(parsed) && parsed > 0 ? parsed : undefined\n}\n\nexport function resolvePoolConfig(env: NodeJS.ProcessEnv = process.env): ResolvedPoolConfig {\n  const idleSessionTimeoutEnv = parseInt(env.DB_IDLE_SESSION_TIMEOUT_MS || '')\n  const idleInTxTimeoutEnv = parseInt(env.DB_IDLE_IN_TRANSACTION_TIMEOUT_MS || '')\n  return {\n    poolMin: parseInt(env.DB_POOL_MIN || '2'),\n    poolMax: parseInt(env.DB_POOL_MAX || '20'),\n    poolIdleTimeout: parseInt(env.DB_POOL_IDLE_TIMEOUT || '3000'),\n    poolAcquireTimeout: parseInt(env.DB_POOL_ACQUIRE_TIMEOUT || '6000'),\n    idleSessionTimeoutMs: Number.isFinite(idleSessionTimeoutEnv)\n      ? idleSessionTimeoutEnv\n      : env.NODE_ENV === 'production'\n        ? undefined\n        : 600_000,\n    // Finite default in every environment (including production) so a leaked or idle\n    // open transaction cannot pin a pool connection indefinitely and exhaust the pool.\n    // Mirrors the long-standing dev value; override (incl. 0 to disable) via env.\n    idleInTransactionTimeoutMs: Number.isFinite(idleInTxTimeoutEnv) ? idleInTxTimeoutEnv : 120_000,\n    // Opt-in guards against runaway statements and lock waits. No timeout when unset.\n    statementTimeoutMs: parsePositiveIntEnv(env.DB_STATEMENT_TIMEOUT_MS),\n    lockTimeoutMs: parsePositiveIntEnv(env.DB_LOCK_TIMEOUT_MS),\n  }\n}\n\ntype PoolLike = {\n  on(event: 'error', listener: (err: unknown) => void): unknown\n  on(event: 'connect', listener: (client: { on(event: 'error', listener: (err: unknown) => void): unknown }) => void): unknown\n  options?: Record<string, unknown>\n}\n\n// Postgres can terminate a connection at any moment (admin termination, network\n// drop, and \u2014 most relevantly for long-running daemons \u2014 the\n// `idle_in_transaction_session_timeout` configured above, FATAL 25P03). Where\n// node-postgres surfaces that depends on the client's state:\n// - IDLE (checked into the pool): pg-pool re-emits on the pool's 'error' event.\n// - CHECKED OUT (e.g. a connection pinned by an open transaction while the app\n//   awaits non-DB work): pg-pool removes its idle listener, so the FATAL emits\n//   on the Client itself.\n// Either way an unlistened 'error' event crashes the whole process (\"Scheduler\n// polling engine exited unexpectedly with exit code 1\"). Swallow both: the pool\n// discards the dead client, and any in-flight transaction still fails normally\n// on its next query/commit against the dead connection.\n// The per-client listener is deliberately attached once on 'connect' and never\n// removed: it is a last-resort sink whose only job is to guarantee the 'error'\n// event always has a listener, in every client state. It is not error handling\n// and must not be \"cleaned up\" \u2014 removing it reintroduces the process crash.\n// A reaped IDLE client therefore logs twice (once here, once via the pool-level\n// handler that pg-pool's own idle listener re-emits); the pool-level line is the\n// one that identifies the client as idle.\nexport function attachPoolErrorHandlers(pool: PoolLike): void {\n  pool.on('error', (err: unknown) => {\n    logger.warn('Idle pg pool client error (connection reaped/terminated)', { err })\n  })\n  pool.on('connect', (client) => {\n    client.on('error', (err: unknown) => {\n      logger.warn('pg client error (connection reaped/terminated)', { err })\n    })\n  })\n}\n\nexport async function getOrm() {\n  if (ormInstance) {\n    return ormInstance\n  }\n\n  const entities = getOrmEntities()\n  const clientUrl = process.env.DATABASE_URL\n  if (!clientUrl) {\n    throw new Error('DATABASE_URL is not set')\n  }\n\n  // Parse connection pool settings from environment\n  const {\n    poolMin,\n    poolMax,\n    poolIdleTimeout,\n    poolAcquireTimeout,\n    idleSessionTimeoutMs,\n    idleInTransactionTimeoutMs,\n    statementTimeoutMs,\n    lockTimeoutMs,\n  } = resolvePoolConfig()\n  const connectionOptions =\n    idleSessionTimeoutMs && idleSessionTimeoutMs > 0\n      ? `-c idle_session_timeout=${idleSessionTimeoutMs}`\n      : undefined\n\n  const sslConfig = getSslConfig()\n\n  if (process.env.OM_DB_POOL_DEBUG === '1' || process.env.OM_INTEGRATION_TEST === 'true') {\n    logger.info('Pool config', {\n      poolMin,\n      poolMax,\n      poolIdleTimeout,\n      poolAcquireTimeout,\n      idleSessionTimeoutMs,\n      idleInTransactionTimeoutMs,\n      statementTimeoutMs,\n      lockTimeoutMs,\n      nodeEnv: process.env.NODE_ENV,\n    })\n  }\n\n  ormInstance = await MikroORM.init<PostgreSqlDriver, PostgreSqlEntityManager<PostgreSqlDriver>>({\n    driver: PostgreSqlDriver,\n    clientUrl,\n    entities,\n    debug: false,\n    // v7 no longer defaults to ReflectMetadataProvider. Entities in this repo use\n    // `@mikro-orm/decorators/legacy`, which relies on TypeScript `emitDecoratorMetadata`\n    // + reflect-metadata for type inference (nullability, column types). Without this,\n    // inferred types are silently wrong at runtime.\n    metadataProvider: ReflectMetadataProvider,\n    // MikroORM v7 pool shape (min/max/idleTimeoutMillis). Knex-era `acquireTimeoutMillis` /\n    // `destroyTimeoutMillis` were removed; acquire wait maps to pg `connectionTimeoutMillis`\n    // below under `driverOptions`. Mirror `connectionTimeoutMillis` here too \u2014 older Mikro\n    // versions read it from `pool`; v7 reads from `driverOptions` but accepting both\n    // costs nothing and protects us from upstream config-merge regressions.\n    pool: {\n      min: poolMin,\n      max: poolMax,\n      idleTimeoutMillis: poolIdleTimeout,\n      acquireTimeoutMillis: poolAcquireTimeout,\n    } as any,\n    // Driver options are merged into pg.PoolConfig (ClientConfig + pg-pool).\n    driverOptions: {\n      connectionTimeoutMillis: poolAcquireTimeout,\n      idle_in_transaction_session_timeout: idleInTransactionTimeoutMs,\n      statement_timeout: statementTimeoutMs,\n      lock_timeout: lockTimeoutMs,\n      options: connectionOptions,\n      ssl: sslConfig,\n      onPoolCreated: (pool: PoolLike) => {\n        attachPoolErrorHandlers(pool)\n        if (process.env.OM_DB_POOL_DEBUG === '1' || process.env.OM_INTEGRATION_TEST === 'true') {\n          logger.info('pg pool created with options', {\n            max: pool.options?.max,\n            min: pool.options?.min,\n            idleTimeoutMillis: pool.options?.idleTimeoutMillis,\n            connectionTimeoutMillis: pool.options?.connectionTimeoutMillis,\n          })\n        }\n      },\n    },\n  })\n\n  return ormInstance\n}\n\n\nasync function closeOrmIfLoaded(): Promise<void> {\n  if (ormInstance) {\n    await ormInstance.close(true)\n    ormInstance = null\n  }\n}\n\n// In dev mode, handle reloads cleanly without leaving dangling connections.\nif (process.env.NODE_ENV !== 'production') {\n  void closeOrmIfLoaded()\n}\n"],
+  "mappings": "AAAA,OAAO;AACP,OAAO;AACP,SAAS,gBAAgB;AACzB,SAAS,+BAA+B;AACxC,SAAS,wBAAuE;AAChF,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,QAAQ,EAAE,MAAM,EAAE,WAAW,MAAM,CAAC;AAIhE,IAAI,cAAkC;AAGtC,MAAM,sBAAsB;AAE5B,SAAS,wBAAsC;AAC7C,SAAQ,WAAuC,mBAAmB,KAAqB;AACzF;AAEA,SAAS,sBAAsB,UAAuB;AACpD,EAAC,WAAuC,mBAAmB,IAAI;AACjE;AAEO,SAAS,oBAAoB,UAAiB;AACnD,MAAI,sBAAsB,MAAM,QAAQ,QAAQ,IAAI,aAAa,eAAe;AAC9E,WAAO,MAAM,wDAAwD;AAAA,EACvE;AACA,wBAAsB,QAAQ;AAChC;AAEO,SAAS,iBAAwB;AACtC,QAAM,WAAW,sBAAsB;AACvC,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,mFAAmF;AAAA,EACrG;AACA,SAAO;AACT;AAeA,SAAS,oBAAoB,KAA6C;AACxE,QAAM,SAAS,SAAS,OAAO,EAAE;AACjC,SAAO,OAAO,SAAS,MAAM,KAAK,SAAS,IAAI,SAAS;AAC1D;AAEO,SAAS,kBAAkB,MAAyB,QAAQ,KAAyB;AAC1F,QAAM,wBAAwB,SAAS,IAAI,8BAA8B,EAAE;AAC3E,QAAM,qBAAqB,SAAS,IAAI,qCAAqC,EAAE;AAC/E,SAAO;AAAA,IACL,SAAS,SAAS,IAAI,eAAe,GAAG;AAAA,IACxC,SAAS,SAAS,IAAI,eAAe,IAAI;AAAA,IACzC,iBAAiB,SAAS,IAAI,wBAAwB,MAAM;AAAA,IAC5D,oBAAoB,SAAS,IAAI,2BAA2B,MAAM;AAAA,IAClE,sBAAsB,OAAO,SAAS,qBAAqB,IACvD,wBACA,IAAI,aAAa,eACf,SACA;AAAA;AAAA;AAAA;AAAA,IAIN,4BAA4B,OAAO,SAAS,kBAAkB,IAAI,qBAAqB;AAAA;AAAA,IAEvF,oBAAoB,oBAAoB,IAAI,uBAAuB;AAAA,IACnE,eAAe,oBAAoB,IAAI,kBAAkB;AAAA,EAC3D;AACF;AA2BO,SAAS,wBAAwB,MAAsB;AAC5D,OAAK,GAAG,SAAS,CAAC,QAAiB;AACjC,WAAO,KAAK,4DAA4D,EAAE,IAAI,CAAC;AAAA,EACjF,CAAC;AACD,OAAK,GAAG,WAAW,CAAC,WAAW;AAC7B,WAAO,GAAG,SAAS,CAAC,QAAiB;AACnC,aAAO,KAAK,kDAAkD,EAAE,IAAI,CAAC;AAAA,IACvE,CAAC;AAAA,EACH,CAAC;AACH;AAEA,eAAsB,SAAS;AAC7B,MAAI,aAAa;AACf,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,eAAe;AAChC,QAAM,YAAY,QAAQ,IAAI;AAC9B,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AAGA,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI,kBAAkB;AACtB,QAAM,oBACJ,wBAAwB,uBAAuB,IAC3C,2BAA2B,oBAAoB,KAC/C;AAEN,QAAM,YAAY,aAAa;AAE/B,MAAI,QAAQ,IAAI,qBAAqB,OAAO,QAAQ,IAAI,wBAAwB,QAAQ;AACtF,WAAO,KAAK,eAAe;AAAA,MACzB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,QAAQ,IAAI;AAAA,IACvB,CAAC;AAAA,EACH;AAEA,gBAAc,MAAM,SAAS,KAAkE;AAAA,IAC7F,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,IAKP,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMlB,MAAM;AAAA,MACJ,KAAK;AAAA,MACL,KAAK;AAAA,MACL,mBAAmB;AAAA,MACnB,sBAAsB;AAAA,IACxB;AAAA;AAAA,IAEA,eAAe;AAAA,MACb,yBAAyB;AAAA,MACzB,qCAAqC;AAAA,MACrC,mBAAmB;AAAA,MACnB,cAAc;AAAA,MACd,SAAS;AAAA,MACT,KAAK;AAAA,MACL,eAAe,CAAC,SAAmB;AACjC,gCAAwB,IAAI;AAC5B,YAAI,QAAQ,IAAI,qBAAqB,OAAO,QAAQ,IAAI,wBAAwB,QAAQ;AACtF,iBAAO,KAAK,gCAAgC;AAAA,YAC1C,KAAK,KAAK,SAAS;AAAA,YACnB,KAAK,KAAK,SAAS;AAAA,YACnB,mBAAmB,KAAK,SAAS;AAAA,YACjC,yBAAyB,KAAK,SAAS;AAAA,UACzC,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO;AACT;AAGA,eAAe,mBAAkC;AAC/C,MAAI,aAAa;AACf,UAAM,YAAY,MAAM,IAAI;AAC5B,kBAAc;AAAA,EAChB;AACF;AAGA,IAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,OAAK,iBAAiB;AACxB;",
   "names": []
 }

package/dist/lib/version.js

@@ -1,4 +1,4 @@
-const APP_VERSION = "0.6.7-develop.6870.1.b69802067a";
+const APP_VERSION = "0.6.8-develop.6874.1.982d6097d8";
 const appVersion = APP_VERSION;
 export {
   APP_VERSION,

package/dist/lib/version.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/lib/version.ts"],
-  "sourcesContent": ["// Build-time generated version\nexport const APP_VERSION = '0.6.7-develop.6870.1.b69802067a';\nexport const appVersion = APP_VERSION;\n"],
+  "sourcesContent": ["// Build-time generated version\nexport const APP_VERSION = '0.6.8-develop.6874.1.982d6097d8';\nexport const appVersion = APP_VERSION;\n"],
   "mappings": "AACO,MAAM,cAAc;AACpB,MAAM,aAAa;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/shared",
-  "version": "0.6.7-develop.6870.1.b69802067a",
+  "version": "0.6.8-develop.6874.1.982d6097d8",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -105,7 +105,7 @@
     "@mikro-orm/core": "^7.1.8",
     "@mikro-orm/decorators": "^7.1.8",
     "@mikro-orm/postgresql": "^7.1.8",
-    "@open-mercato/cache": "0.6.7-develop.6870.1.b69802067a",
+    "@open-mercato/cache": "0.6.8-develop.6874.1.982d6097d8",
     "@types/sanitize-html": "^2.16.1",
     "dotenv": "^17.4.2",
     "pino": "^10.3.1",
@@ -130,5 +130,5 @@
     "url": "https://github.com/open-mercato/open-mercato",
     "directory": "packages/shared"
   },
-  "stableVersion": "0.6.6"
+  "stableVersion": "0.6.7"
 }

package/src/lib/db/__tests__/mikro.test.ts

@@ -24,6 +24,31 @@ describe('ORM entity registry', () => {
   })
 })
 
+describe('attachPoolErrorHandlers', () => {
+  it('swallows errors from idle pooled clients (pool-level emit)', async () => {
+    const { EventEmitter } = await import('node:events')
+    const { attachPoolErrorHandlers } = await import('../mikro')
+    const pool = new EventEmitter()
+
+    attachPoolErrorHandlers(pool as any)
+
+    expect(() => pool.emit('error', new Error('terminating connection due to idle-in-transaction timeout'))).not.toThrow()
+  })
+
+  it('swallows errors from checked-out clients (client-level emit)', async () => {
+    const { EventEmitter } = await import('node:events')
+    const { attachPoolErrorHandlers } = await import('../mikro')
+    const pool = new EventEmitter()
+    const client = new EventEmitter()
+
+    attachPoolErrorHandlers(pool as any)
+    pool.emit('connect', client)
+
+    expect(client.listenerCount('error')).toBe(1)
+    expect(() => client.emit('error', new Error('terminating connection due to idle-in-transaction timeout'))).not.toThrow()
+  })
+})
+
 describe('resolvePoolConfig', () => {
   const baseEnv = (extra: Record<string, string | undefined> = {}): NodeJS.ProcessEnv =>
     ({ ...extra }) as NodeJS.ProcessEnv

package/src/lib/db/mikro.ts

@@ -79,6 +79,42 @@ export function resolvePoolConfig(env: NodeJS.ProcessEnv = process.env): Resolve
   }
 }
 
+type PoolLike = {
+  on(event: 'error', listener: (err: unknown) => void): unknown
+  on(event: 'connect', listener: (client: { on(event: 'error', listener: (err: unknown) => void): unknown }) => void): unknown
+  options?: Record<string, unknown>
+}
+
+// Postgres can terminate a connection at any moment (admin termination, network
+// drop, and — most relevantly for long-running daemons — the
+// `idle_in_transaction_session_timeout` configured above, FATAL 25P03). Where
+// node-postgres surfaces that depends on the client's state:
+// - IDLE (checked into the pool): pg-pool re-emits on the pool's 'error' event.
+// - CHECKED OUT (e.g. a connection pinned by an open transaction while the app
+//   awaits non-DB work): pg-pool removes its idle listener, so the FATAL emits
+//   on the Client itself.
+// Either way an unlistened 'error' event crashes the whole process ("Scheduler
+// polling engine exited unexpectedly with exit code 1"). Swallow both: the pool
+// discards the dead client, and any in-flight transaction still fails normally
+// on its next query/commit against the dead connection.
+// The per-client listener is deliberately attached once on 'connect' and never
+// removed: it is a last-resort sink whose only job is to guarantee the 'error'
+// event always has a listener, in every client state. It is not error handling
+// and must not be "cleaned up" — removing it reintroduces the process crash.
+// A reaped IDLE client therefore logs twice (once here, once via the pool-level
+// handler that pg-pool's own idle listener re-emits); the pool-level line is the
+// one that identifies the client as idle.
+export function attachPoolErrorHandlers(pool: PoolLike): void {
+  pool.on('error', (err: unknown) => {
+    logger.warn('Idle pg pool client error (connection reaped/terminated)', { err })
+  })
+  pool.on('connect', (client) => {
+    client.on('error', (err: unknown) => {
+      logger.warn('pg client error (connection reaped/terminated)', { err })
+    })
+  })
+}
+
 export async function getOrm() {
   if (ormInstance) {
     return ormInstance
@@ -151,19 +187,8 @@ export async function getOrm() {
       lock_timeout: lockTimeoutMs,
       options: connectionOptions,
       ssl: sslConfig,
-      onPoolCreated: (pool: any) => {
-        // node-postgres re-emits errors from IDLE pooled clients on the pool's
-        // 'error' event. Postgres terminates idle sessions on its own (admin
-        // termination, network drop, and — most relevantly for long-running
-        // daemons like the scheduler — `idle_in_transaction_session_timeout`,
-        // which defaults to 120s above). Without a listener here, such a
-        // termination surfaces as an unhandled 'error' event and crashes the
-        // whole process (e.g. "Scheduler polling engine exited unexpectedly
-        // with exit code 1"). Swallow it: the pool discards the dead client and
-        // opens a fresh connection on the next acquire.
-        pool.on('error', (err: unknown) => {
-          logger.warn('Idle pg pool client error (connection reaped/terminated)', { err })
-        })
+      onPoolCreated: (pool: PoolLike) => {
+        attachPoolErrorHandlers(pool)
         if (process.env.OM_DB_POOL_DEBUG === '1' || process.env.OM_INTEGRATION_TEST === 'true') {
           logger.info('pg pool created with options', {
             max: pool.options?.max,