@openora/core 0.4.1-canary.13 → 0.4.1-canary.131

package/dist/server/auth/permissions.d.ts

@@ -1,5 +1,5 @@
 export declare const statement: {
-    readonly player: readonly ["view", "update", "ban", "adjust-balance"];
+    readonly player: readonly ["view", "update", "ban"];
     readonly transaction: readonly ["view", "refund"];
     readonly game: readonly ["view", "enable", "disable"];
     readonly content: readonly ["create", "update", "delete", "publish"];
@@ -16,10 +16,19 @@ export declare const statement: {
     readonly sessions: readonly ["view", "revoke"];
     readonly 'player-note': readonly ["view", "create"];
     readonly 'tag-rule': readonly ["view", "update"];
+    readonly tag: readonly ["view", "create", "delete"];
+    readonly 'chat-room': readonly ["view", "create", "update", "delete"];
+    readonly 'auto-withdrawal-config': readonly ["view", "update"];
+    readonly 'bonus-rollover-config': readonly ["view", "update"];
+    readonly 'wallet-asset': readonly ["view", "create", "update", "delete"];
+    readonly 'wallet-custody': readonly ["view", "run"];
+    readonly 'wallet-reconciliation': readonly ["view", "resolve", "run"];
+    readonly 'chat-command': readonly ["view", "update"];
+    readonly 'chat-moderation': readonly ["view", "moderate"];
 };
 export declare const ac: {
     newRole<const TRoleStatements extends import("better-auth/plugins/access").Statements>(statements: import("better-auth/plugins/access").RoleInput<{
-        readonly player: readonly ["view", "update", "ban", "adjust-balance"];
+        readonly player: readonly ["view", "update", "ban"];
         readonly transaction: readonly ["view", "refund"];
         readonly game: readonly ["view", "enable", "disable"];
         readonly content: readonly ["create", "update", "delete", "publish"];
@@ -36,8 +45,17 @@ export declare const ac: {
         readonly sessions: readonly ["view", "revoke"];
         readonly 'player-note': readonly ["view", "create"];
         readonly 'tag-rule': readonly ["view", "update"];
+        readonly tag: readonly ["view", "create", "delete"];
+        readonly 'chat-room': readonly ["view", "create", "update", "delete"];
+        readonly 'auto-withdrawal-config': readonly ["view", "update"];
+        readonly 'bonus-rollover-config': readonly ["view", "update"];
+        readonly 'wallet-asset': readonly ["view", "create", "update", "delete"];
+        readonly 'wallet-custody': readonly ["view", "run"];
+        readonly 'wallet-reconciliation': readonly ["view", "resolve", "run"];
+        readonly 'chat-command': readonly ["view", "update"];
+        readonly 'chat-moderation': readonly ["view", "moderate"];
     }, TRoleStatements>): import("better-auth/plugins/access").Role<import("better-auth/plugins/access").ExactRoleStatements<TRoleStatements>, {
-        readonly player: readonly ["view", "update", "ban", "adjust-balance"];
+        readonly player: readonly ["view", "update", "ban"];
         readonly transaction: readonly ["view", "refund"];
         readonly game: readonly ["view", "enable", "disable"];
         readonly content: readonly ["create", "update", "delete", "publish"];
@@ -54,9 +72,18 @@ export declare const ac: {
         readonly sessions: readonly ["view", "revoke"];
         readonly 'player-note': readonly ["view", "create"];
         readonly 'tag-rule': readonly ["view", "update"];
+        readonly tag: readonly ["view", "create", "delete"];
+        readonly 'chat-room': readonly ["view", "create", "update", "delete"];
+        readonly 'auto-withdrawal-config': readonly ["view", "update"];
+        readonly 'bonus-rollover-config': readonly ["view", "update"];
+        readonly 'wallet-asset': readonly ["view", "create", "update", "delete"];
+        readonly 'wallet-custody': readonly ["view", "run"];
+        readonly 'wallet-reconciliation': readonly ["view", "resolve", "run"];
+        readonly 'chat-command': readonly ["view", "update"];
+        readonly 'chat-moderation': readonly ["view", "moderate"];
     }>;
     statements: {
-        readonly player: readonly ["view", "update", "ban", "adjust-balance"];
+        readonly player: readonly ["view", "update", "ban"];
         readonly transaction: readonly ["view", "refund"];
         readonly game: readonly ["view", "enable", "disable"];
         readonly content: readonly ["create", "update", "delete", "publish"];
@@ -73,10 +100,19 @@ export declare const ac: {
         readonly sessions: readonly ["view", "revoke"];
         readonly 'player-note': readonly ["view", "create"];
         readonly 'tag-rule': readonly ["view", "update"];
+        readonly tag: readonly ["view", "create", "delete"];
+        readonly 'chat-room': readonly ["view", "create", "update", "delete"];
+        readonly 'auto-withdrawal-config': readonly ["view", "update"];
+        readonly 'bonus-rollover-config': readonly ["view", "update"];
+        readonly 'wallet-asset': readonly ["view", "create", "update", "delete"];
+        readonly 'wallet-custody': readonly ["view", "run"];
+        readonly 'wallet-reconciliation': readonly ["view", "resolve", "run"];
+        readonly 'chat-command': readonly ["view", "update"];
+        readonly 'chat-moderation': readonly ["view", "moderate"];
     };
 };
 export declare const adminRole: import("better-auth/plugins/access").Role<import("better-auth/plugins/access").ExactRoleStatements<{
-    readonly player: ["view", "update", "ban", "adjust-balance"];
+    readonly player: ["view", "update", "ban"];
     readonly transaction: ["view", "refund"];
     readonly game: ["view", "enable", "disable"];
     readonly content: ["create", "update", "delete", "publish"];
@@ -93,8 +129,17 @@ export declare const adminRole: import("better-auth/plugins/access").Role<import
     readonly sessions: ["view", "revoke"];
     readonly 'player-note': ["view", "create"];
     readonly 'tag-rule': ["view", "update"];
+    readonly tag: ["view", "create", "delete"];
+    readonly 'chat-room': ["view", "create", "update", "delete"];
+    readonly 'auto-withdrawal-config': ["view", "update"];
+    readonly 'bonus-rollover-config': ["view", "update"];
+    readonly 'wallet-asset': ["view", "create", "update", "delete"];
+    readonly 'wallet-custody': ["view", "run"];
+    readonly 'wallet-reconciliation': ["view", "resolve", "run"];
+    readonly 'chat-command': ["view", "update"];
+    readonly 'chat-moderation': ["view", "moderate"];
 }>, {
-    readonly player: readonly ["view", "update", "ban", "adjust-balance"];
+    readonly player: readonly ["view", "update", "ban"];
     readonly transaction: readonly ["view", "refund"];
     readonly game: readonly ["view", "enable", "disable"];
     readonly content: readonly ["create", "update", "delete", "publish"];
@@ -111,6 +156,15 @@ export declare const adminRole: import("better-auth/plugins/access").Role<import
     readonly sessions: readonly ["view", "revoke"];
     readonly 'player-note': readonly ["view", "create"];
     readonly 'tag-rule': readonly ["view", "update"];
+    readonly tag: readonly ["view", "create", "delete"];
+    readonly 'chat-room': readonly ["view", "create", "update", "delete"];
+    readonly 'auto-withdrawal-config': readonly ["view", "update"];
+    readonly 'bonus-rollover-config': readonly ["view", "update"];
+    readonly 'wallet-asset': readonly ["view", "create", "update", "delete"];
+    readonly 'wallet-custody': readonly ["view", "run"];
+    readonly 'wallet-reconciliation': readonly ["view", "resolve", "run"];
+    readonly 'chat-command': readonly ["view", "update"];
+    readonly 'chat-moderation': readonly ["view", "moderate"];
 }>;
 export declare const supportRole: import("better-auth/plugins/access").Role<import("better-auth/plugins/access").ExactRoleStatements<{
     readonly player: ["view", "update"];
@@ -119,7 +173,7 @@ export declare const supportRole: import("better-auth/plugins/access").Role<impo
     readonly report: ["view"];
     readonly analytics: ["view"];
 }>, {
-    readonly player: readonly ["view", "update", "ban", "adjust-balance"];
+    readonly player: readonly ["view", "update", "ban"];
     readonly transaction: readonly ["view", "refund"];
     readonly game: readonly ["view", "enable", "disable"];
     readonly content: readonly ["create", "update", "delete", "publish"];
@@ -136,12 +190,21 @@ export declare const supportRole: import("better-auth/plugins/access").Role<impo
     readonly sessions: readonly ["view", "revoke"];
     readonly 'player-note': readonly ["view", "create"];
     readonly 'tag-rule': readonly ["view", "update"];
+    readonly tag: readonly ["view", "create", "delete"];
+    readonly 'chat-room': readonly ["view", "create", "update", "delete"];
+    readonly 'auto-withdrawal-config': readonly ["view", "update"];
+    readonly 'bonus-rollover-config': readonly ["view", "update"];
+    readonly 'wallet-asset': readonly ["view", "create", "update", "delete"];
+    readonly 'wallet-custody': readonly ["view", "run"];
+    readonly 'wallet-reconciliation': readonly ["view", "resolve", "run"];
+    readonly 'chat-command': readonly ["view", "update"];
+    readonly 'chat-moderation': readonly ["view", "moderate"];
 }>;
 export declare const contentManagerRole: import("better-auth/plugins/access").Role<import("better-auth/plugins/access").ExactRoleStatements<{
     readonly content: ["create", "update", "delete", "publish"];
     readonly game: ["view", "enable", "disable"];
 }>, {
-    readonly player: readonly ["view", "update", "ban", "adjust-balance"];
+    readonly player: readonly ["view", "update", "ban"];
     readonly transaction: readonly ["view", "refund"];
     readonly game: readonly ["view", "enable", "disable"];
     readonly content: readonly ["create", "update", "delete", "publish"];
@@ -158,10 +221,19 @@ export declare const contentManagerRole: import("better-auth/plugins/access").Ro
     readonly sessions: readonly ["view", "revoke"];
     readonly 'player-note': readonly ["view", "create"];
     readonly 'tag-rule': readonly ["view", "update"];
+    readonly tag: readonly ["view", "create", "delete"];
+    readonly 'chat-room': readonly ["view", "create", "update", "delete"];
+    readonly 'auto-withdrawal-config': readonly ["view", "update"];
+    readonly 'bonus-rollover-config': readonly ["view", "update"];
+    readonly 'wallet-asset': readonly ["view", "create", "update", "delete"];
+    readonly 'wallet-custody': readonly ["view", "run"];
+    readonly 'wallet-reconciliation': readonly ["view", "resolve", "run"];
+    readonly 'chat-command': readonly ["view", "update"];
+    readonly 'chat-moderation': readonly ["view", "moderate"];
 }>;
 export declare const roles: {
     readonly admin: import("better-auth/plugins/access").Role<import("better-auth/plugins/access").ExactRoleStatements<{
-        readonly player: ["view", "update", "ban", "adjust-balance"];
+        readonly player: ["view", "update", "ban"];
         readonly transaction: ["view", "refund"];
         readonly game: ["view", "enable", "disable"];
         readonly content: ["create", "update", "delete", "publish"];
@@ -178,8 +250,17 @@ export declare const roles: {
         readonly sessions: ["view", "revoke"];
         readonly 'player-note': ["view", "create"];
         readonly 'tag-rule': ["view", "update"];
+        readonly tag: ["view", "create", "delete"];
+        readonly 'chat-room': ["view", "create", "update", "delete"];
+        readonly 'auto-withdrawal-config': ["view", "update"];
+        readonly 'bonus-rollover-config': ["view", "update"];
+        readonly 'wallet-asset': ["view", "create", "update", "delete"];
+        readonly 'wallet-custody': ["view", "run"];
+        readonly 'wallet-reconciliation': ["view", "resolve", "run"];
+        readonly 'chat-command': ["view", "update"];
+        readonly 'chat-moderation': ["view", "moderate"];
     }>, {
-        readonly player: readonly ["view", "update", "ban", "adjust-balance"];
+        readonly player: readonly ["view", "update", "ban"];
         readonly transaction: readonly ["view", "refund"];
         readonly game: readonly ["view", "enable", "disable"];
         readonly content: readonly ["create", "update", "delete", "publish"];
@@ -196,6 +277,15 @@ export declare const roles: {
         readonly sessions: readonly ["view", "revoke"];
         readonly 'player-note': readonly ["view", "create"];
         readonly 'tag-rule': readonly ["view", "update"];
+        readonly tag: readonly ["view", "create", "delete"];
+        readonly 'chat-room': readonly ["view", "create", "update", "delete"];
+        readonly 'auto-withdrawal-config': readonly ["view", "update"];
+        readonly 'bonus-rollover-config': readonly ["view", "update"];
+        readonly 'wallet-asset': readonly ["view", "create", "update", "delete"];
+        readonly 'wallet-custody': readonly ["view", "run"];
+        readonly 'wallet-reconciliation': readonly ["view", "resolve", "run"];
+        readonly 'chat-command': readonly ["view", "update"];
+        readonly 'chat-moderation': readonly ["view", "moderate"];
     }>;
     readonly support: import("better-auth/plugins/access").Role<import("better-auth/plugins/access").ExactRoleStatements<{
         readonly player: ["view", "update"];
@@ -204,7 +294,7 @@ export declare const roles: {
         readonly report: ["view"];
         readonly analytics: ["view"];
     }>, {
-        readonly player: readonly ["view", "update", "ban", "adjust-balance"];
+        readonly player: readonly ["view", "update", "ban"];
         readonly transaction: readonly ["view", "refund"];
         readonly game: readonly ["view", "enable", "disable"];
         readonly content: readonly ["create", "update", "delete", "publish"];
@@ -221,12 +311,21 @@ export declare const roles: {
         readonly sessions: readonly ["view", "revoke"];
         readonly 'player-note': readonly ["view", "create"];
         readonly 'tag-rule': readonly ["view", "update"];
+        readonly tag: readonly ["view", "create", "delete"];
+        readonly 'chat-room': readonly ["view", "create", "update", "delete"];
+        readonly 'auto-withdrawal-config': readonly ["view", "update"];
+        readonly 'bonus-rollover-config': readonly ["view", "update"];
+        readonly 'wallet-asset': readonly ["view", "create", "update", "delete"];
+        readonly 'wallet-custody': readonly ["view", "run"];
+        readonly 'wallet-reconciliation': readonly ["view", "resolve", "run"];
+        readonly 'chat-command': readonly ["view", "update"];
+        readonly 'chat-moderation': readonly ["view", "moderate"];
     }>;
     readonly 'content-manager': import("better-auth/plugins/access").Role<import("better-auth/plugins/access").ExactRoleStatements<{
         readonly content: ["create", "update", "delete", "publish"];
         readonly game: ["view", "enable", "disable"];
     }>, {
-        readonly player: readonly ["view", "update", "ban", "adjust-balance"];
+        readonly player: readonly ["view", "update", "ban"];
         readonly transaction: readonly ["view", "refund"];
         readonly game: readonly ["view", "enable", "disable"];
         readonly content: readonly ["create", "update", "delete", "publish"];
@@ -243,9 +342,17 @@ export declare const roles: {
         readonly sessions: readonly ["view", "revoke"];
         readonly 'player-note': readonly ["view", "create"];
         readonly 'tag-rule': readonly ["view", "update"];
+        readonly tag: readonly ["view", "create", "delete"];
+        readonly 'chat-room': readonly ["view", "create", "update", "delete"];
+        readonly 'auto-withdrawal-config': readonly ["view", "update"];
+        readonly 'bonus-rollover-config': readonly ["view", "update"];
+        readonly 'wallet-asset': readonly ["view", "create", "update", "delete"];
+        readonly 'wallet-custody': readonly ["view", "run"];
+        readonly 'wallet-reconciliation': readonly ["view", "resolve", "run"];
+        readonly 'chat-command': readonly ["view", "update"];
+        readonly 'chat-moderation': readonly ["view", "moderate"];
     }>;
 };
 export type RoleName = keyof typeof roles;
-export type ResourceName = keyof typeof statement;
-export type ActionOf<R extends ResourceName> = (typeof statement)[R][number];
+export type { AdminResource as ResourceName, AdminActionOf as ActionOf, } from '@openora/core/contracts';
 //# sourceMappingURL=permissions.d.ts.map

package/dist/server/auth/permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../src/server/auth/permissions.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;CAkBZ,CAAC;AAEX,eAAO,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAiC,CAAC;AAEjD,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkBpB,CAAC;AAEH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;EAMtB,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;EAG7B,CAAC;AAEH,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAIR,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,MAAM,OAAO,KAAK,CAAC;AAC1C,MAAM,MAAM,YAAY,GAAG,MAAM,OAAO,SAAS,CAAC;AAClD,MAAM,MAAM,QAAQ,CAAC,CAAC,SAAS,YAAY,IAAI,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC"}
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../src/server/auth/permissions.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAiB,CAAC;AAExC,eAAO,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAiC,CAAC;AAEjD,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2BpB,CAAC;AAEH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAMtB,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAG7B,CAAC;AAEH,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAIR,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,MAAM,OAAO,KAAK,CAAC;AAG1C,YAAY,EACV,aAAa,IAAI,YAAY,EAC7B,aAAa,IAAI,QAAQ,GAC1B,MAAM,yBAAyB,CAAC"}

package/dist/server/auth/permissions.js

@@ -1,26 +1,11 @@
 import { createAccessControl } from 'better-auth/plugins/access';
-export const statement = {
-    player: ['view', 'update', 'ban', 'adjust-balance'],
-    transaction: ['view', 'refund'],
-    game: ['view', 'enable', 'disable'],
-    content: ['create', 'update', 'delete', 'publish'],
-    compliance: ['view', 'override-limit', 'manage-rg'],
-    report: ['view'],
-    withdrawal: ['view', 'approve', 'reject', 'hold', 'auto-rule'],
-    bonus: ['view', 'create', 'update', 'pause', 'cancel'],
-    audit: ['view', 'export'],
-    admin: ['view', 'create', 'update', 'disable', 'delete'],
-    'game-config': ['view', 'update', 'schedule'],
-    analytics: ['view'],
-    sportsbook: ['view', 'configure', 'suspend'],
-    affiliate: ['view', 'manage'],
-    sessions: ['view', 'revoke'],
-    'player-note': ['view', 'create'],
-    'tag-rule': ['view', 'update'],
-};
+import { adminStatement } from '@openora/core/contracts';
+// The catalog itself lives in contracts so the browser can import it too; this
+// name stays because better-auth calls it a statement.
+export const statement = adminStatement;
 export const ac = createAccessControl(statement);
 export const adminRole = ac.newRole({
-    player: ['view', 'update', 'ban', 'adjust-balance'],
+    player: ['view', 'update', 'ban'],
     transaction: ['view', 'refund'],
     game: ['view', 'enable', 'disable'],
     content: ['create', 'update', 'delete', 'publish'],
@@ -37,6 +22,15 @@ export const adminRole = ac.newRole({
     sessions: ['view', 'revoke'],
     'player-note': ['view', 'create'],
     'tag-rule': ['view', 'update'],
+    tag: ['view', 'create', 'delete'],
+    'chat-room': ['view', 'create', 'update', 'delete'],
+    'auto-withdrawal-config': ['view', 'update'],
+    'bonus-rollover-config': ['view', 'update'],
+    'wallet-asset': ['view', 'create', 'update', 'delete'],
+    'wallet-custody': ['view', 'run'],
+    'wallet-reconciliation': ['view', 'resolve', 'run'],
+    'chat-command': ['view', 'update'],
+    'chat-moderation': ['view', 'moderate'],
 });
 export const supportRole = ac.newRole({
     player: ['view', 'update'],

package/dist/server/auth/permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../../src/server/auth/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,CAAU;IAC5D,WAAW,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAU;IACxC,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAU;IAC5C,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAU;IAC3D,UAAU,EAAE,CAAC,MAAM,EAAE,gBAAgB,EAAE,WAAW,CAAU;IAC5D,MAAM,EAAE,CAAC,MAAM,CAAU;IACzB,UAAU,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAU;IACvE,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAU;IAC/D,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAU;IAClC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAU;IACjE,aAAa,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAU;IACtD,SAAS,EAAE,CAAC,MAAM,CAAU;IAC5B,UAAU,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,CAAU;IACrD,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAU;IACtC,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAU;IACrC,aAAa,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAU;IAC1C,UAAU,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAU;CAC/B,CAAC;AAEX,MAAM,CAAC,MAAM,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;AAEjD,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC;IAClC,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,CAAC;IACnD,WAAW,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC/B,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;IACnC,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC;IAClD,UAAU,EAAE,CAAC,MAAM,EAAE,gBAAgB,EAAE,WAAW,CAAC;IACnD,MAAM,EAAE,CAAC,MAAM,CAAC;IAChB,UAAU,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC;IAC9D,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;IACtD,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IACzB,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;IACxD,aAAa,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC;IAC7C,SAAS,EAAE,CAAC,MAAM,CAAC;IACnB,UAAU,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC;IAC5C,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC7B,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC5B,aAAa,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IACjC,UAAU,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;CAC/B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC,OAAO,CAAC;IACpC,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,WAAW,EAAE,CAAC,MAAM,CAAC;IACrB,UAAU,EAAE,CAAC,MAAM,CAAC;IACpB,MAAM,EAAE,CAAC,MAAM,CAAC;IAChB,SAAS,EAAE,CAAC,MAAM,CAAC;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC,OAAO,CAAC;IAC3C,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC;IAClD,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;CACpC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE,WAAW;IACpB,iBAAiB,EAAE,kBAAkB;CAC7B,CAAC"}
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../../src/server/auth/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,+EAA+E;AAC/E,uDAAuD;AACvD,MAAM,CAAC,MAAM,SAAS,GAAG,cAAc,CAAC;AAExC,MAAM,CAAC,MAAM,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;AAEjD,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC;IAClC,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC;IACjC,WAAW,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC/B,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;IACnC,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC;IAClD,UAAU,EAAE,CAAC,MAAM,EAAE,gBAAgB,EAAE,WAAW,CAAC;IACnD,MAAM,EAAE,CAAC,MAAM,CAAC;IAChB,UAAU,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC;IAC9D,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;IACtD,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IACzB,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;IACxD,aAAa,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC;IAC7C,SAAS,EAAE,CAAC,MAAM,CAAC;IACnB,UAAU,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC;IAC5C,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC7B,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC5B,aAAa,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IACjC,UAAU,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC9B,GAAG,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;IACjC,WAAW,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;IACnD,wBAAwB,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC5C,uBAAuB,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC3C,cAAc,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;IACtD,gBAAgB,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC;IACjC,uBAAuB,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC;IACnD,cAAc,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAClC,iBAAiB,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC;CACxC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC,OAAO,CAAC;IACpC,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,WAAW,EAAE,CAAC,MAAM,CAAC;IACrB,UAAU,EAAE,CAAC,MAAM,CAAC;IACpB,MAAM,EAAE,CAAC,MAAM,CAAC;IAChB,SAAS,EAAE,CAAC,MAAM,CAAC;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC,OAAO,CAAC;IAC3C,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC;IAClD,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;CACpC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE,WAAW;IACpB,iBAAiB,EAAE,kBAAkB;CAC7B,CAAC"}

package/dist/server/auth/session-resolver.d.ts

@@ -6,5 +6,9 @@ export declare class SessionResolver {
     readonly auth: Auth;
     constructor(drizzle: DrizzleService, schema?: Record<string, unknown>);
     resolveUserId(headers: Headers): Promise<string | undefined>;
+    resolveSession(headers: Headers): Promise<{
+        userId: string;
+        sessionId?: string | undefined;
+    } | undefined>;
 }
 //# sourceMappingURL=session-resolver.d.ts.map

package/dist/server/auth/session-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-resolver.d.ts","sourceRoot":"","sources":["../../../src/server/auth/session-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAc,KAAK,IAAI,EAAE,MAAM,WAAW,CAAC;AAQlD,eAAO,MAAM,YAAY,EAAE,KAAK,CAAC,eAAe,CAA+B,CAAC;AAEhF,qBAAa,eAAe;IAC1B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;gBAKR,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAI/D,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAInE"}
+{"version":3,"file":"session-resolver.d.ts","sourceRoot":"","sources":["../../../src/server/auth/session-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAc,KAAK,IAAI,EAAE,MAAM,WAAW,CAAC;AAQlD,eAAO,MAAM,YAAY,EAAE,KAAK,CAAC,eAAe,CAA+B,CAAC;AAEhF,qBAAa,eAAe;IAC1B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;gBAKR,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAI/D,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAO5D,cAAc,CAClB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAC;CAK3E"}

package/dist/server/auth/session-resolver.js

@@ -16,8 +16,15 @@ export class SessionResolver {
         this.auth = createAuth({ db: drizzle.db, ...(schema ? { schema } : {}) });
     }
     async resolveUserId(headers) {
-        const session = await this.auth.api.getSession({ headers });
-        return session?.user?.id;
+        return (await this.resolveSession(headers))?.userId;
+    }
+    // sessionId identifies the session row itself, so a handler can tell the caller's
+    // own device apart from their others. Optional because a stubbed/partial getSession
+    // response still carries a usable userId.
+    async resolveSession(headers) {
+        const resolved = await this.auth.api.getSession({ headers });
+        const userId = resolved?.user?.id;
+        return userId ? { userId, sessionId: resolved?.session?.id } : undefined;
     }
 }
 //# sourceMappingURL=session-resolver.js.map

package/dist/server/auth/session-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-resolver.js","sourceRoot":"","sources":["../../../src/server/auth/session-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,yBAAyB,CAAC;AAElE,OAAO,EAAE,UAAU,EAAa,MAAM,WAAW,CAAC;AAElD,iFAAiF;AACjF,8EAA8E;AAC9E,sFAAsF;AACtF,kFAAkF;AAClF,iFAAiF;AACjF,mEAAmE;AACnE,MAAM,CAAC,MAAM,YAAY,GAA2B,WAAW,CAAC,cAAc,CAAC,CAAC;AAEhF,MAAM,OAAO,eAAe;IACjB,IAAI,CAAO;IAEpB,qFAAqF;IACrF,qFAAqF;IACrF,8DAA8D;IAC9D,YAAY,OAAuB,EAAE,MAAgC;QACnE,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAgB;QAClC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5D,OAAO,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;IAC3B,CAAC;CACF"}
+{"version":3,"file":"session-resolver.js","sourceRoot":"","sources":["../../../src/server/auth/session-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,yBAAyB,CAAC;AAElE,OAAO,EAAE,UAAU,EAAa,MAAM,WAAW,CAAC;AAElD,iFAAiF;AACjF,8EAA8E;AAC9E,sFAAsF;AACtF,kFAAkF;AAClF,iFAAiF;AACjF,mEAAmE;AACnE,MAAM,CAAC,MAAM,YAAY,GAA2B,WAAW,CAAC,cAAc,CAAC,CAAC;AAEhF,MAAM,OAAO,eAAe;IACjB,IAAI,CAAO;IAEpB,qFAAqF;IACrF,qFAAqF;IACrF,8DAA8D;IAC9D,YAAY,OAAuB,EAAE,MAAgC;QACnE,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAgB;QAClC,OAAO,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC;IACtD,CAAC;IAED,kFAAkF;IAClF,oFAAoF;IACpF,0CAA0C;IAC1C,KAAK,CAAC,cAAc,CAClB,OAAgB;QAEhB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,CAAC;CACF"}

package/dist/server/auth/sign-session-cookie.d.ts

@@ -0,0 +1,18 @@
+export type SessionCookieConfig = {
+    name: string;
+    attributes: {
+        domain?: string;
+        httpOnly?: boolean;
+        maxAge?: number;
+        path?: string;
+        secure?: boolean;
+        sameSite?: 'strict' | 'lax' | 'none' | 'Strict' | 'Lax' | 'None';
+    };
+};
+export declare function signSessionCookie({ token, sessionCookie, secret, maxAgeSeconds, }: {
+    token: string;
+    sessionCookie: SessionCookieConfig;
+    secret: string;
+    maxAgeSeconds?: number;
+}): string;
+//# sourceMappingURL=sign-session-cookie.d.ts.map

package/dist/server/auth/sign-session-cookie.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-session-cookie.d.ts","sourceRoot":"","sources":["../../../src/server/auth/sign-session-cookie.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE;QACV,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;KAClE,CAAC;CACH,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,EAChC,KAAK,EACL,aAAa,EACb,MAAM,EACN,aAAa,GACd,EAAE;IACD,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,mBAAmB,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,MAAM,CAUT"}

package/dist/server/auth/sign-session-cookie.js

@@ -0,0 +1,15 @@
+import { createHmac } from 'node:crypto';
+import { serialize } from 'hono/utils/cookie';
+export function signSessionCookie({ token, sessionCookie, secret, maxAgeSeconds, }) {
+    const signature = createHmac('sha256', secret).update(token).digest('base64');
+    const signedValue = `${token}.${signature}`;
+    const attributes = { ...sessionCookie.attributes };
+    if (maxAgeSeconds === undefined) {
+        delete attributes.maxAge;
+    }
+    else {
+        attributes.maxAge = maxAgeSeconds;
+    }
+    return serialize(sessionCookie.name, signedValue, attributes);
+}
+//# sourceMappingURL=sign-session-cookie.js.map

package/dist/server/auth/sign-session-cookie.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-session-cookie.js","sourceRoot":"","sources":["../../../src/server/auth/sign-session-cookie.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAc9C,MAAM,UAAU,iBAAiB,CAAC,EAChC,KAAK,EACL,aAAa,EACb,MAAM,EACN,aAAa,GAMd;IACC,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9E,MAAM,WAAW,GAAG,GAAG,KAAK,IAAI,SAAS,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,EAAE,GAAG,aAAa,CAAC,UAAU,EAAE,CAAC;IACnD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,UAAU,CAAC,MAAM,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,UAAU,CAAC,MAAM,GAAG,aAAa,CAAC;IACpC,CAAC;IACD,OAAO,SAAS,CAAC,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AAChE,CAAC"}

package/dist/server/db/__tests__/migrate.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=migrate.test.d.ts.map

package/dist/server/db/__tests__/migrate.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.test.d.ts","sourceRoot":"","sources":["../../../../src/server/db/__tests__/migrate.test.ts"],"names":[],"mappings":""}

package/dist/server/db/__tests__/migrate.test.js

@@ -0,0 +1,148 @@
+import { describe, expect, it, vi, beforeEach } from 'vitest';
+const { appliedHashes, calls, poolInstances, failOnSql, FakePool, readMigrationFilesMock } = vi.hoisted(() => {
+    const calls = [];
+    const poolInstances = [];
+    const failOnSql = { value: null };
+    const appliedHashes = { value: [] };
+    class FakeClient {
+        query = vi.fn(async (sql) => {
+            if (failOnSql.value !== null && sql === failOnSql.value) {
+                throw new Error(`boom: ${sql}`);
+            }
+            calls.push(sql);
+            return {
+                rows: sql.startsWith('SELECT hash FROM')
+                    ? appliedHashes.value.map((hash) => ({ hash }))
+                    : [],
+            };
+        });
+        release = vi.fn();
+    }
+    class FakePool {
+        opts;
+        query = vi.fn(async (sql) => {
+            if (failOnSql.value !== null && sql === failOnSql.value) {
+                throw new Error(`boom: ${sql}`);
+            }
+            calls.push(sql);
+            return { rows: [] };
+        });
+        connect = vi.fn(async () => new FakeClient());
+        end = vi.fn(async () => {
+            calls.push('end');
+        });
+        constructor(opts) {
+            this.opts = opts;
+            poolInstances.push(this);
+        }
+    }
+    const readMigrationFilesMock = vi.fn(() => []);
+    return { appliedHashes, calls, poolInstances, failOnSql, FakePool, readMigrationFilesMock };
+});
+vi.mock('pg', () => ({ Pool: FakePool }));
+vi.mock('drizzle-orm/migrator', () => ({ readMigrationFiles: readMigrationFilesMock }));
+const { runMigrations, applyMigrationsIndividually, withMigrationAdvisoryLock } = await import('../migrate.js');
+describe('runMigrations', () => {
+    beforeEach(() => {
+        calls.length = 0;
+        poolInstances.length = 0;
+        failOnSql.value = null;
+        appliedHashes.value = [];
+        readMigrationFilesMock.mockReset();
+        readMigrationFilesMock.mockReturnValue([]);
+    });
+    it('runs extensions, then preSql, before reading pending migrations', async () => {
+        await runMigrations({
+            migrationsFolder: '/tmp/migrations',
+            databaseUrl: 'postgres://test',
+            extensions: ['pg_trgm'],
+            preSql: ['UPDATE foo SET bar = 1', 'UPDATE baz SET qux = 2'],
+        });
+        const presqlIndex = calls.indexOf('UPDATE foo SET bar = 1');
+        const readIndex = calls.indexOf('SELECT hash FROM "drizzle"."__drizzle_migrations"');
+        expect(calls).toContain('CREATE EXTENSION IF NOT EXISTS pg_trgm');
+        expect(calls).toEqual(expect.arrayContaining(['UPDATE foo SET bar = 1', 'UPDATE baz SET qux = 2']));
+        expect(presqlIndex).toBeLessThan(readIndex);
+        expect(calls).toContain('end');
+    });
+    it('is a no-op (beyond bookkeeping) when preSql is omitted', async () => {
+        await runMigrations({
+            migrationsFolder: '/tmp/migrations',
+            databaseUrl: 'postgres://test',
+        });
+        expect(calls).not.toContain(undefined);
+        expect(calls).toContain('end');
+    });
+    it('closes the pool even when a preSql statement throws, and never reads pending migrations', async () => {
+        failOnSql.value = 'THIS WILL FAIL';
+        await expect(runMigrations({
+            migrationsFolder: '/tmp/migrations',
+            databaseUrl: 'postgres://test',
+            preSql: ['THIS WILL FAIL'],
+        })).rejects.toThrow('boom: THIS WILL FAIL');
+        expect(readMigrationFilesMock).not.toHaveBeenCalled();
+        expect(calls).toContain('end');
+    });
+    it('treats current migration hashes aliased from an applied legacy hash as applied', async () => {
+        appliedHashes.value = ['legacy-baseline'];
+        readMigrationFilesMock.mockReturnValue(migrations);
+        await runMigrations({
+            migrationsFolder: '/tmp/migrations',
+            databaseUrl: 'postgres://test',
+            migrationHashAliases: {
+                'legacy-baseline': ['one', 'two'],
+            },
+        });
+        expect(calls).not.toContain('BEGIN');
+        expect(calls).not.toContain(migrations[0]?.sql[0]);
+        expect(calls).not.toContain(migrations[1]?.sql[0]);
+    });
+});
+const migrations = [
+    {
+        sql: ["ALTER TYPE room_category ADD VALUE 'private-chats';"],
+        folderMillis: 1,
+        hash: 'one',
+        bps: true,
+    },
+    {
+        sql: ["UPDATE chat_room SET category = 'private-chats';"],
+        folderMillis: 2,
+        hash: 'two',
+        bps: true,
+    },
+];
+describe('applyMigrationsIndividually', () => {
+    it('commits each migration file before applying the next one', async () => {
+        const apply = vi.fn(async () => undefined);
+        await applyMigrationsIndividually({ migrations, apply });
+        expect(apply).toHaveBeenCalledTimes(2);
+        expect(apply).toHaveBeenNthCalledWith(1, migrations[0]);
+        expect(apply).toHaveBeenNthCalledWith(2, migrations[1]);
+    });
+});
+describe('withMigrationAdvisoryLock', () => {
+    it('holds the journal lock until the migration work completes', async () => {
+        const query = vi.fn(async () => undefined);
+        const action = vi.fn(async () => undefined);
+        await withMigrationAdvisoryLock({ query }, 'drizzle.__drizzle_migrations_chat', action);
+        expect(query).toHaveBeenNthCalledWith(1, 'SELECT pg_advisory_lock(hashtext($1))', [
+            'drizzle.__drizzle_migrations_chat',
+        ]);
+        expect(action).toHaveBeenCalledOnce();
+        expect(query).toHaveBeenNthCalledWith(2, 'SELECT pg_advisory_unlock(hashtext($1))', [
+            'drizzle.__drizzle_migrations_chat',
+        ]);
+    });
+    it('releases the lock when migration work fails', async () => {
+        const query = vi.fn(async () => undefined);
+        const failure = new Error('migration failed');
+        await expect(withMigrationAdvisoryLock({ query }, 'drizzle.__drizzle_migrations_chat', async () => {
+            throw failure;
+        })).rejects.toThrow(failure);
+        expect(query).toHaveBeenNthCalledWith(2, 'SELECT pg_advisory_unlock(hashtext($1))', [
+            'drizzle.__drizzle_migrations_chat',
+        ]);
+    });
+});
+//# sourceMappingURL=migrate.test.js.map

package/dist/server/db/__tests__/migrate.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.test.js","sourceRoot":"","sources":["../../../../src/server/db/__tests__/migrate.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAG9D,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,sBAAsB,EAAE,GACxF,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;IACd,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,aAAa,GAAc,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,EAAE,KAAK,EAAE,IAAqB,EAAE,CAAC;IACnD,MAAM,aAAa,GAAG,EAAE,KAAK,EAAE,EAAc,EAAE,CAAC;IAEhD,MAAM,UAAU;QACL,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;YAC3C,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC;YAClC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO;gBACL,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC;oBACtC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC/C,CAAC,CAAC,EAAE;aACP,CAAC;QACJ,CAAC,CAAC,CAAC;QACM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;KAC5B;IAED,MAAM,QAAQ;QAYS;QAXZ,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;YAC3C,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC;YAClC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QACM,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC;QAC9C,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;YAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QACH,YAAqB,IAAkC;YAAlC,SAAI,GAAJ,IAAI,CAA8B;YACrD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;KACF;IAED,MAAM,sBAAsB,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAqB,CAAC,CAAC;IAElE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC;AAC9F,CAAC,CAAC,CAAC;AAEL,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;AAC1C,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC;AAExF,MAAM,EAAE,aAAa,EAAE,2BAA2B,EAAE,yBAAyB,EAAE,GAC7E,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;AAEhC,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,UAAU,CAAC,GAAG,EAAE;QACd,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACjB,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;QACzB,SAAS,CAAC,KAAK,GAAG,IAAI,CAAC;QACvB,aAAa,CAAC,KAAK,GAAG,EAAE,CAAC;QACzB,sBAAsB,CAAC,SAAS,EAAE,CAAC;QACnC,sBAAsB,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,aAAa,CAAC;YAClB,gBAAgB,EAAE,iBAAiB;YACnC,WAAW,EAAE,iBAAiB;YAC9B,UAAU,EAAE,CAAC,SAAS,CAAC;YACvB,MAAM,EAAE,CAAC,wBAAwB,EAAE,wBAAwB,CAAC;SAC7D,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC;QACrF,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,wCAAwC,CAAC,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CACnB,MAAM,CAAC,eAAe,CAAC,CAAC,wBAAwB,EAAE,wBAAwB,CAAC,CAAC,CAC7E,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,aAAa,CAAC;YAClB,gBAAgB,EAAE,iBAAiB;YACnC,WAAW,EAAE,iBAAiB;SAC/B,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,SAAS,CAAC,KAAK,GAAG,gBAAgB,CAAC;QAEnC,MAAM,MAAM,CACV,aAAa,CAAC;YACZ,gBAAgB,EAAE,iBAAiB;YACnC,WAAW,EAAE,iBAAiB;YAC9B,MAAM,EAAE,CAAC,gBAAgB,CAAC;SAC3B,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAE1C,MAAM,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,aAAa,CAAC,KAAK,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC1C,sBAAsB,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAEnD,MAAM,aAAa,CAAC;YAClB,gBAAgB,EAAE,iBAAiB;YACnC,WAAW,EAAE,iBAAiB;YAC9B,oBAAoB,EAAE;gBACpB,iBAAiB,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;aAClC;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,GAAoB;IAClC;QACE,GAAG,EAAE,CAAC,qDAAqD,CAAC;QAC5D,YAAY,EAAE,CAAC;QACf,IAAI,EAAE,KAAK;QACX,GAAG,EAAE,IAAI;KACV;IACD;QACE,GAAG,EAAE,CAAC,kDAAkD,CAAC;QACzD,YAAY,EAAE,CAAC;QACf,IAAI,EAAE,KAAK;QACX,GAAG,EAAE,IAAI;KACV;CACF,CAAC;AAEF,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QAE3C,MAAM,2BAA2B,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAEzD,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,uBAAuB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,CAAC,uBAAuB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QAE5C,MAAM,yBAAyB,CAAC,EAAE,KAAK,EAAE,EAAE,mCAAmC,EAAE,MAAM,CAAC,CAAC;QAExF,MAAM,CAAC,KAAK,CAAC,CAAC,uBAAuB,CAAC,CAAC,EAAE,uCAAuC,EAAE;YAChF,mCAAmC;SACpC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,CAAC,uBAAuB,CAAC,CAAC,EAAE,yCAAyC,EAAE;YAClF,mCAAmC;SACpC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAE9C,MAAM,MAAM,CACV,yBAAyB,CAAC,EAAE,KAAK,EAAE,EAAE,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACnF,MAAM,OAAO,CAAC;QAChB,CAAC,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAE3B,MAAM,CAAC,KAAK,CAAC,CAAC,uBAAuB,CAAC,CAAC,EAAE,yCAAyC,EAAE;YAClF,mCAAmC;SACpC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}