@owlmeans/postgres 0.1.15

package/build/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAS3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAIjD,KAAK,MAAM,GAAG,YAAY,CAAA;AAC1B,UAAU,OAAO,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,CAAE,SAAQ,aAAa,CAAC,CAAC,CAAC;CAAI;AAEzE,eAAO,MAAM,qBAAqB,GAAI,QAAO,MAAsB,KAAG,eA2PrE,CAAA;AAED,eAAO,MAAM,cAAc,GAAI,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EAChF,SAAS,CAAC,EAAE,QAAO,MAAsB,KACxC,CAOF,CAAA"}

package/build/service.js

@@ -0,0 +1,221 @@
+import { makeKeyPairModel } from '@owlmeans/basic-keys';
+import { assertContext, Layer } from '@owlmeans/context';
+import { makeTx, pgErrorToResourceError, pgIdentifier, refOf, resolvePlaceholders } from '@owlmeans/postgres-resource';
+import { createDbService } from '@owlmeans/resource';
+import { drizzle } from 'drizzle-orm/node-postgres';
+import { Pool } from 'pg';
+import { DEFAULT_ALIAS } from './consts.js';
+import { bootstrapDb } from './bootstrap.js';
+import { drainMiddleware } from './middleware.js';
+import { poolDatabase, prepareConfig } from './utils/config.js';
+import { ensureSchema, probe } from './utils/connection.js';
+export const makePostgresDbService = (alias = DEFAULT_ALIAS) => {
+    const location = `postgres:${alias}`;
+    /**
+     * Handles are cached per config alias rather than rebuilt per call: `db()` runs on every
+     * single resource operation, and both the Drizzle binding and the schema name are fixed
+     * for the lifetime of a service instance — a layer switch produces a *new* instance.
+     */
+    const handles = new Map();
+    const deferred = new Map();
+    const service = createDbService(alias, {
+        db: async (configAlias) => {
+            const pool = await service.client(configAlias);
+            configAlias = service.ensureConfigAlias(configAlias);
+            let handle = handles.get(configAlias);
+            if (handle == null) {
+                handle = {
+                    drizzle: drizzle(pool),
+                    pool,
+                    /**
+                     * `name()` is the layer aware namespace — the Postgres SCHEMA here, where Mongo
+                     * reads the same value as a database name. It can outgrow 63 bytes once a layer
+                     * suffix is appended, which Postgres would truncate silently.
+                     */
+                    schema: pgIdentifier(service.name(configAlias)),
+                    database: poolDatabase(pool)
+                };
+                handles.set(configAlias, handle);
+            }
+            return handle;
+        },
+        initialize: async (configAlias) => {
+            configAlias = service.ensureConfigAlias(configAlias);
+            const config = service.config(configAlias);
+            if (service.clients[configAlias] != null) {
+                return;
+            }
+            if (service.layers == null) {
+                service.layers = [Layer.Global];
+            }
+            /**
+             * Sensitivity *adds* a layer the service is willing to serve. The Mongo copy of this
+             * block tests `includes` where it means `!includes`, so it only ever appends a layer
+             * that is already there — a latent no-op, corrected here.
+             */
+            if (config.serviceSensitive === true && !service.layers.includes(Layer.Service)) {
+                service.layers.push(Layer.Service);
+            }
+            if (config.entitySensitive === true && !service.layers.includes(Layer.Entity)) {
+                service.layers.push(Layer.Entity);
+            }
+            const meta = (config.meta ?? {});
+            const pool = new Pool(prepareConfig(config));
+            /**
+             * Not optional: node-postgres emits `error` on *idle* clients when the server closes
+             * a connection — a routine event behind a load balancer — and an unhandled `error`
+             * on an EventEmitter terminates the process.
+             */
+            pool.on('error', error => {
+                console.error(`${location}: idle client error — ${error.message}`);
+            });
+            try {
+                await probe(pool, meta, location);
+            }
+            catch (error) {
+                await pool.end().catch(() => undefined);
+                throw error;
+            }
+            process.on('SIGTERM', () => { void pool.end().catch(() => undefined); });
+            if (service.clients[configAlias] != null) {
+                await pool.end().catch(() => undefined);
+                throw new SyntaxError(`Cannot replace existing postgres client: ${configAlias} - ${service.alias}`);
+            }
+            service.clients[configAlias] = pool;
+            /**
+             * Only when the config names one. Resources create their own schema anyway, and the
+             * admin connection points at the maintenance database — where inventing a namespace
+             * from the service alias would leave an empty `postgres` schema behind on every boot.
+             */
+            if (config.schema != null) {
+                await ensureSchema(pool, pgIdentifier(service.name(configAlias)));
+            }
+        },
+        /**
+         * `configAlias` is part of the contract for symmetry only — a resource's qualified
+         * name comes from the table spec it compiled at init, which already resolved against
+         * whichever config that resource was bound to.
+         */
+        qualify: resourceAlias => {
+            const context = assertContext(service.ctx, location);
+            return refOf(context, null, resourceAlias);
+        },
+        query: async (text, params, configAlias) => {
+            const db = await service.db(configAlias);
+            const context = assertContext(service.ctx, location);
+            try {
+                const result = await db.pool.query(resolvePlaceholders(text, context, null), params);
+                return result.rows;
+            }
+            catch (error) {
+                throw pgErrorToResourceError(error);
+            }
+        },
+        transaction: async (fn, configAlias) => {
+            const db = await service.db(configAlias);
+            const context = assertContext(service.ctx, location);
+            const client = await db.pool.connect();
+            try {
+                await client.query('BEGIN');
+                const result = await fn(makeTx(client, text => resolvePlaceholders(text, context, null), resourceAlias => refOf(context, null, resourceAlias)));
+                await client.query('COMMIT');
+                return result;
+            }
+            catch (error) {
+                await client.query('ROLLBACK').catch(() => undefined);
+                throw pgErrorToResourceError(error);
+            }
+            finally {
+                client.release();
+            }
+        },
+        defer: (configAlias, task) => {
+            configAlias = service.ensureConfigAlias(configAlias);
+            const tasks = deferred.get(configAlias);
+            if (tasks == null) {
+                deferred.set(configAlias, [task]);
+                return;
+            }
+            tasks.push(task);
+        },
+        drain: async (configAlias) => {
+            const aliases = configAlias != null
+                ? [service.ensureConfigAlias(configAlias)]
+                : [...deferred.keys()];
+            for (const key of aliases) {
+                const tasks = deferred.get(key);
+                if (tasks == null) {
+                    continue;
+                }
+                /**
+                 * Cleared before running, not after: a task that throws has still had its side
+                 * effects, and a later drain replaying it would apply them twice.
+                 */
+                deferred.delete(key);
+                for (const task of tasks) {
+                    await task();
+                }
+            }
+        },
+        bootstrap: async (configAlias, opts) => bootstrapDb(service, configAlias, opts),
+        lock: async (configAlias, record, fields) => {
+            configAlias = service.ensureConfigAlias(configAlias);
+            const config = service.config(configAlias);
+            if (config.encryptionKey == null) {
+                throw new SyntaxError(`No encryption key for locking: ${configAlias}`);
+            }
+            if ((fields.length ?? 0) < 1) {
+                throw new SyntaxError(`No fields to lock: ${JSON.stringify(record)}`);
+            }
+            const key = makeKeyPairModel(config.encryptionKey);
+            return Object.fromEntries(await Promise.all(Object.entries(record).map(async ([field, value]) => [
+                field,
+                fields.includes(field) ? await key.encrypt(value) : value
+            ])));
+        },
+        unlock: async (configAlias, record, fields) => {
+            configAlias = service.ensureConfigAlias(configAlias);
+            const config = service.config(configAlias);
+            if (config.encryptionKey == null) {
+                throw new SyntaxError(`No encryption key for unlocking: ${configAlias}`);
+            }
+            if ((fields.length ?? 0) < 1) {
+                throw new SyntaxError(`No fields to unlock: ${JSON.stringify(record)}`);
+            }
+            const key = makeKeyPairModel(config.encryptionKey);
+            return Object.fromEntries(await Promise.all(Object.entries(record).map(async ([field, value]) => [
+                field,
+                /** A value that was never locked decrypts to itself rather than failing. */
+                fields.includes(field) ? await key.decrypt(value).catch(() => value) : value
+            ])));
+        },
+        reinitializeContext: (context) => {
+            const _service = makePostgresDbService(alias);
+            _service.ctx = context;
+            _service.layers = service.layers;
+            /**
+             * Pools carry over instead of being reopened. A layer switch changes the Postgres
+             * *schema*, not the server, and `max_connections` is a cluster wide budget — a pool
+             * per tenant exhausts it long before the tenants run out. The handle cache is
+             * deliberately *not* carried: its schema name is what the switch just changed.
+             */
+            Object.assign(_service.clients, service.clients);
+            return _service;
+        }
+    }, service => async () => {
+        const context = assertContext(service.ctx, location);
+        await context.cfg.dbs?.filter(dbConfig => dbConfig.service === alias).reduce(async (prev, dbConfig) => {
+            await prev;
+            service.config(dbConfig.alias);
+        }, Promise.resolve());
+        service.initialized = true;
+    });
+    return service;
+};
+export const appendPostgres = (context, alias = DEFAULT_ALIAS) => {
+    const service = makePostgresDbService(alias);
+    context.registerService(service);
+    context.registerMiddleware(drainMiddleware(alias));
+    return context;
+};
+//# sourceMappingURL=service.js.map

package/build/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAExD,OAAO,EACL,MAAM,EAAE,sBAAsB,EAAE,YAAY,EAAE,KAAK,EAAE,mBAAmB,EACzE,MAAM,6BAA6B,CAAA;AAEpC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAEpD,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAA;AAEnD,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAA;AAGzB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAEjD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAC/D,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAA;AAK3D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,QAAgB,aAAa,EAAmB,EAAE;IACtF,MAAM,QAAQ,GAAG,YAAY,KAAK,EAAE,CAAA;IAEpC;;;;OAIG;IACH,MAAM,OAAO,GAA4B,IAAI,GAAG,EAAE,CAAA;IAClD,MAAM,QAAQ,GAA4C,IAAI,GAAG,EAAE,CAAA;IAEnE,MAAM,OAAO,GAAoB,eAAe,CAAoC,KAAK,EAAE;QACzF,EAAE,EAAE,KAAK,EAAC,WAAW,EAAC,EAAE;YACtB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;YAC9C,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;YAEpD,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YACrC,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;gBACnB,MAAM,GAAG;oBACP,OAAO,EAAE,OAAO,CAAC,IAAI,CAA0C;oBAC/D,IAAI;oBACJ;;;;uBAIG;oBACH,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;oBAC/C,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC;iBAC7B,CAAA;gBACD,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;YAClC,CAAC;YAED,OAAO,MAAM,CAAA;QACf,CAAC;QAED,UAAU,EAAE,KAAK,EAAC,WAAW,EAAC,EAAE;YAC9B,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;YACpD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;YAE1C,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC;gBACzC,OAAM;YACR,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;gBAC3B,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YACjC,CAAC;YACD;;;;eAIG;YACH,IAAI,MAAM,CAAC,gBAAgB,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChF,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACpC,CAAC;YACD,IAAI,MAAM,CAAC,eAAe,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9E,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YACnC,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAiB,CAAA;YAChD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;YAE5C;;;;eAIG;YACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;gBACvB,OAAO,CAAC,KAAK,CAAC,GAAG,QAAQ,yBAA0B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;YAC/E,CAAC,CAAC,CAAA;YAEF,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;gBACvC,MAAM,KAAK,CAAA;YACb,CAAC;YAED,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;YAEvE,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC;gBACzC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;gBACvC,MAAM,IAAI,WAAW,CAAC,4CAA4C,WAAW,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;YACrG,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAA;YAEnC;;;;eAIG;YACH,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;gBAC1B,MAAM,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;YACnE,CAAC;QACH,CAAC;QAED;;;;WAIG;QACH,OAAO,EAAE,aAAa,CAAC,EAAE;YACvB,MAAM,OAAO,GAAG,aAAa,CAAkB,OAAO,CAAC,GAAc,EAAE,QAAQ,CAAC,CAAA;YAEhF,OAAO,KAAK,CAAC,OAAuC,EAAE,IAAI,EAAE,aAAa,CAAC,CAAA;QAC5E,CAAC;QAED,KAAK,EAAE,KAAK,EACV,IAAY,EAAE,MAAkB,EAAE,WAAoB,EACtD,EAAE;YACF,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,CAAA;YACxC,MAAM,OAAO,GAAG,aAAa,CAAkB,OAAO,CAAC,GAAc,EAAE,QAAQ,CAAC,CAAA;YAChF,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAChC,mBAAmB,CAAC,IAAI,EAAE,OAAuC,EAAE,IAAI,CAAC,EAAE,MAAiB,CAC5F,CAAA;gBAED,OAAO,MAAM,CAAC,IAAI,CAAA;YACpB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,sBAAsB,CAAC,KAAK,CAAC,CAAA;YACrC,CAAC;QACH,CAAC;QAED,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE;YACrC,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,CAAA;YACxC,MAAM,OAAO,GAAG,aAAa,CAAkB,OAAO,CAAC,GAAc,EAAE,QAAQ,CAAC,CAAA;YAChF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAA;YACtC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;gBAC3B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAC5B,MAAM,EACN,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,OAAuC,EAAE,IAAI,CAAC,EAChF,aAAa,CAAC,EAAE,CAAC,KAAK,CAAC,OAAuC,EAAE,IAAI,EAAE,aAAa,CAAC,CACrF,CAAC,CAAA;gBACF,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;gBAE5B,OAAO,MAAM,CAAA;YACf,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;gBACrD,MAAM,sBAAsB,CAAC,KAAK,CAAC,CAAA;YACrC,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,OAAO,EAAE,CAAA;YAClB,CAAC;QACH,CAAC;QAED,KAAK,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE;YAC3B,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;YACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YACvC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAClB,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;gBAEjC,OAAM;YACR,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClB,CAAC;QAED,KAAK,EAAE,KAAK,EAAC,WAAW,EAAC,EAAE;YACzB,MAAM,OAAO,GAAG,WAAW,IAAI,IAAI;gBACjC,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;gBAC1C,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;YAExB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBAC/B,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;oBAClB,SAAQ;gBACV,CAAC;gBACD;;;mBAGG;gBACH,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,MAAM,IAAI,EAAE,CAAA;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QAED,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC;QAE/E,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YAC1C,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;YACpD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;YAC1C,IAAI,MAAM,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;gBACjC,MAAM,IAAI,WAAW,CAAC,kCAAkC,WAAW,EAAE,CAAC,CAAA;YACxE,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,WAAW,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACvE,CAAC;YAED,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;YAElD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAC1C,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;gBACxB,KAAK;gBACL,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK;aAC1D,CACF,CAAC,CACH,CAAA;QACH,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YAC5C,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;YACpD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;YAC1C,IAAI,MAAM,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;gBACjC,MAAM,IAAI,WAAW,CAAC,oCAAoC,WAAW,EAAE,CAAC,CAAA;YAC1E,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,WAAW,CAAC,wBAAwB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACzE,CAAC;YAED,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;YAElD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAC1C,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;gBACxB,KAAK;gBACL,4EAA4E;gBAC5E,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK;aAC7E,CACF,CAAC,CACH,CAAA;QACH,CAAC;QAED,mBAAmB,EAAE,CAAI,OAAmC,EAAE,EAAE;YAC9D,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;YAE7C,QAAQ,CAAC,GAAG,GAAG,OAAO,CAAA;YACtB,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;YAEhC;;;;;eAKG;YACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;YAEhD,OAAO,QAAa,CAAA;QACtB,CAAC;KACF,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;QACvB,MAAM,OAAO,GAAG,aAAa,CAAkB,OAAO,CAAC,GAAc,EAAE,QAAQ,CAAC,CAAA;QAEhF,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YACpG,MAAM,IAAI,CAAA;YACV,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAChC,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;QAErB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,OAAU,EAAE,QAAgB,aAAa,EACtC,EAAE;IACL,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;IAE5C,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;IAChC,OAAO,CAAC,kBAAkB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAA;IAElD,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}

package/build/types.d.ts

@@ -0,0 +1,40 @@
+import type { PostgresDbService } from '@owlmeans/postgres-resource';
+export interface PostgresService extends PostgresDbService {
+    /**
+     * Provision a least privileged role, its database and its schema, using a superuser
+     * connection held under a *separate* config alias.
+     *
+     * Idempotent by design — every OwlMeans deployment calls it on each start and each
+     * rebuild, so it probes before it creates and never fails on "already exists".
+     *
+     * @throws {PostgresBootstrapError}
+     */
+    bootstrap: (configAlias: string, opts: BootstrapOptions) => Promise<BootstrapReport>;
+}
+export interface BootstrapOptions {
+    /** Login role to create, or whose password to rotate. */
+    role: string;
+    password: string;
+    /** Database to create, owned by `role`. Defaults to the role name. */
+    database?: string;
+    /** Schema to create inside it, owned by `role` and set as its `search_path`. */
+    schema?: string;
+    /**
+     * Revoke `PUBLIC`'s rights on the database and on `public`, granting them to `role`
+     * alone. Defaults to `true` — the point of the admin path is least privilege.
+     */
+    leastPrivilege?: boolean;
+    /**
+     * Reset the password of a role that already exists. Defaults to `true`, because the
+     * caller generated the password it just passed in and the role has to accept it.
+     */
+    rotatePassword?: boolean;
+}
+export interface BootstrapReport {
+    roleCreated: boolean;
+    passwordRotated: boolean;
+    databaseCreated: boolean;
+    schemaCreated: boolean;
+    grantsApplied: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/build/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAEpE,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACxD;;;;;;;;OAQG;IACH,SAAS,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;CACrF;AAED,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,OAAO,CAAA;IACpB,eAAe,EAAE,OAAO,CAAA;IACxB,eAAe,EAAE,OAAO,CAAA;IACxB,aAAa,EAAE,OAAO,CAAA;IACtB,aAAa,EAAE,OAAO,CAAA;CACvB"}

package/build/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/build/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/build/utils/config.d.ts

@@ -0,0 +1,27 @@
+import type { DbConfig } from '@owlmeans/resource';
+import type { PoolConfig } from 'pg';
+/**
+ * Split a `postgres://` URL into pool fields.
+ *
+ * node-postgres accepts a `connectionString` directly, but the parsed values *override*
+ * every sibling field — so `{ connectionString, database }` silently ignores the
+ * database. Parsing here instead keeps overriding possible, which the admin path needs
+ * to reach both the maintenance database and the target one over the same credentials.
+ *
+ * @throws {PostgresConnectionError}
+ */
+export declare const parseUrl: (url: string) => PoolConfig;
+/**
+ * Turn a {@link DbConfig} into a `pg` pool configuration.
+ *
+ * Values that start with `/` have already been read from disk by the `fileConfigReader`
+ * middleware, so a file mounted secret and a literal one are indistinguishable here —
+ * which is what lets a deployment move from env vars to mounted files without a code
+ * change.
+ */
+export declare const prepareConfig: (config: DbConfig, overrides?: PoolConfig) => PoolConfig;
+/** Effective database of an open pool, as `pg` resolved it. */
+export declare const poolDatabase: (pool: {
+    options?: PoolConfig;
+}) => string;
+//# sourceMappingURL=config.d.ts.map

package/build/utils/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/utils/config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,IAAI,CAAA;AAIpC;;;;;;;;;GASG;AACH,eAAO,MAAM,QAAQ,GAAI,KAAK,MAAM,KAAG,UAsCtC,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,GAAI,QAAQ,QAAQ,EAAE,YAAY,UAAU,KAAG,UAuCxE,CAAA;AAED,+DAA+D;AAC/D,eAAO,MAAM,YAAY,GAAI,MAAM;IAAE,OAAO,CAAC,EAAE,UAAU,CAAA;CAAE,KAAG,MACV,CAAA"}

package/build/utils/config.js

@@ -0,0 +1,96 @@
+import { PostgresConnectionError } from '@owlmeans/postgres-resource';
+import { DEF_POOL_SIZE, DEF_PORT } from '../consts.js';
+/**
+ * Split a `postgres://` URL into pool fields.
+ *
+ * node-postgres accepts a `connectionString` directly, but the parsed values *override*
+ * every sibling field — so `{ connectionString, database }` silently ignores the
+ * database. Parsing here instead keeps overriding possible, which the admin path needs
+ * to reach both the maintenance database and the target one over the same credentials.
+ *
+ * @throws {PostgresConnectionError}
+ */
+export const parseUrl = (url) => {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        throw new PostgresConnectionError('malformed-url');
+    }
+    if (!/^postgres(ql)?:$/.test(parsed.protocol)) {
+        throw new PostgresConnectionError(`unexpected-protocol:${parsed.protocol.replace(':', '')}`);
+    }
+    const database = decodeURIComponent(parsed.pathname.replace(/^\//, ''));
+    /** IPv6 literals arrive bracketed from `URL`; `pg` wants the bare address. */
+    const host = decodeURIComponent(parsed.hostname).replace(/^\[|\]$/g, '');
+    const mode = parsed.searchParams.get('sslmode');
+    const config = {
+        host,
+        port: parsed.port !== '' ? parseInt(parsed.port, 10) : DEF_PORT
+    };
+    if (parsed.username !== '') {
+        config.user = decodeURIComponent(parsed.username);
+    }
+    if (parsed.password !== '') {
+        config.password = decodeURIComponent(parsed.password);
+    }
+    if (database !== '') {
+        config.database = database;
+    }
+    if (mode != null && mode !== 'disable') {
+        /**
+         * `no-verify` is what a self signed in-cluster certificate needs, and is the only
+         * mode that may skip verification — anything else keeps the chain checked.
+         */
+        config.ssl = mode === 'no-verify' ? { rejectUnauthorized: false } : true;
+    }
+    return config;
+};
+/**
+ * Turn a {@link DbConfig} into a `pg` pool configuration.
+ *
+ * Values that start with `/` have already been read from disk by the `fileConfigReader`
+ * middleware, so a file mounted secret and a literal one are indistinguishable here —
+ * which is what lets a deployment move from env vars to mounted files without a code
+ * change.
+ */
+export const prepareConfig = (config, overrides) => {
+    const meta = (config.meta ?? {});
+    /**
+     * `DbConfig.host` is an array for Mongo's replica sets. Postgres has no client side
+     * equivalent — multi-host failover is the pooler's job — so only the first is used.
+     */
+    const host = Array.isArray(config.host) ? config.host[0] : config.host;
+    const base = meta.url != null
+        ? parseUrl(meta.url)
+        : {
+            host,
+            port: config.port ?? DEF_PORT,
+            ...(config.user != null ? { user: config.user } : {}),
+            ...(config.secret != null ? { password: config.secret } : {}),
+            /** Absent, libpq falls back to the connection user's name. */
+            ...(meta.database != null ? { database: meta.database } : {})
+        };
+    const prepared = {
+        ...base,
+        max: meta.max ?? DEF_POOL_SIZE,
+        ...(meta.ssl != null ? { ssl: meta.ssl } : {}),
+        ...(meta.idleTimeoutMillis != null ? { idleTimeoutMillis: meta.idleTimeoutMillis } : {}),
+        ...(meta.connectionTimeoutMillis != null
+            ? { connectionTimeoutMillis: meta.connectionTimeoutMillis }
+            : {}),
+        /**
+         * A server side cap, so a query that outlives its caller stops holding a connection
+         * and its locks — the failure mode that turns one slow statement into a stuck pool.
+         */
+        ...(meta.statementTimeoutMillis != null
+            ? { statement_timeout: meta.statementTimeoutMillis }
+            : {}),
+        ...overrides
+    };
+    return prepared;
+};
+/** Effective database of an open pool, as `pg` resolved it. */
+export const poolDatabase = (pool) => pool.options?.database ?? pool.options?.user ?? '';
+//# sourceMappingURL=config.js.map

package/build/utils/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/utils/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAA;AAKrE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAEtD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAc,EAAE;IAClD,IAAI,MAAW,CAAA;IACf,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,uBAAuB,CAAC,eAAe,CAAC,CAAA;IACpD,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,uBAAuB,CAAC,uBAAuB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;IAC9F,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAA;IACvE,8EAA8E;IAC9E,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;IACxE,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAE/C,MAAM,MAAM,GAAe;QACzB,IAAI;QACJ,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ;KAChE,CAAA;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACnD,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACvD,CAAC;IACD,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAA;IAC5B,CAAC;IACD,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvC;;;WAGG;QACH,MAAM,CAAC,GAAG,GAAG,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1E,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAgB,EAAE,SAAsB,EAAc,EAAE;IACpF,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAiB,CAAA;IAEhD;;;OAGG;IACH,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAA;IAEtE,MAAM,IAAI,GAAe,IAAI,CAAC,GAAG,IAAI,IAAI;QACvC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QACpB,CAAC,CAAC;YACA,IAAI;YACJ,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,QAAQ;YAC7B,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,8DAA8D;YAC9D,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAA;IAEH,MAAM,QAAQ,GAAe;QAC3B,GAAG,IAAI;QACP,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,aAAa;QAC9B,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,GAAG,CAAC,IAAI,CAAC,uBAAuB,IAAI,IAAI;YACtC,CAAC,CAAC,EAAE,uBAAuB,EAAE,IAAI,CAAC,uBAAuB,EAAE;YAC3D,CAAC,CAAC,EAAE,CAAC;QACP;;;WAGG;QACH,GAAG,CAAC,IAAI,CAAC,sBAAsB,IAAI,IAAI;YACrC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,sBAAsB,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,SAAS;KACb,CAAA;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC,CAAA;AAED,+DAA+D;AAC/D,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAA8B,EAAU,EAAE,CACrE,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAA"}

package/build/utils/connection.d.ts

@@ -0,0 +1,15 @@
+import type { PostgresMeta } from '@owlmeans/postgres-resource';
+import type { Pool } from 'pg';
+/**
+ * Wait for the server to answer a query, not merely to accept a socket.
+ *
+ * Postgres binds its port before it finishes recovery, so a sidecar or an operator managed
+ * instance routinely accepts a connection and then refuses to run anything. Every OwlMeans
+ * deployment grew its own copy of this loop; this is the one.
+ *
+ * @throws {PostgresConnectionError}
+ */
+export declare const probe: (pool: Pool, meta: PostgresMeta, location: string) => Promise<void>;
+/** `CREATE SCHEMA IF NOT EXISTS` on a pooled connection. */
+export declare const ensureSchema: (pool: Pool, schema: string) => Promise<void>;
+//# sourceMappingURL=connection.d.ts.map

package/build/utils/connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../../src/utils/connection.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAC/D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAA;AAkB9B;;;;;;;;GAQG;AACH,eAAO,MAAM,KAAK,GAAU,MAAM,IAAI,EAAE,MAAM,YAAY,EAAE,UAAU,MAAM,KAAG,OAAO,CAAC,IAAI,CAyB1F,CAAA;AAED,4DAA4D;AAC5D,eAAO,MAAM,YAAY,GAAU,MAAM,IAAI,EAAE,QAAQ,MAAM,KAAG,OAAO,CAAC,IAAI,CAM3E,CAAA"}

package/build/utils/connection.js

@@ -0,0 +1,56 @@
+import { pgErrorToResourceError, PostgresConnectionError, quoteIdent } from '@owlmeans/postgres-resource';
+import { DEF_RETRIES, DEF_RETRY_DELAY, TERMINAL_CONNECT_CODES } from '../consts.js';
+/**
+ * Retryable means "the server isn't up yet". A driver level failure carries no `code` at
+ * all (`ECONNREFUSED`, DNS) and is exactly the case worth waiting on; a Postgres error
+ * code that names a credential or catalog problem will say the same thing in a minute.
+ */
+const isTransient = (error) => {
+    const code = error?.code;
+    if (code == null) {
+        return true;
+    }
+    return !TERMINAL_CONNECT_CODES.includes(code);
+};
+/**
+ * Wait for the server to answer a query, not merely to accept a socket.
+ *
+ * Postgres binds its port before it finishes recovery, so a sidecar or an operator managed
+ * instance routinely accepts a connection and then refuses to run anything. Every OwlMeans
+ * deployment grew its own copy of this loop; this is the one.
+ *
+ * @throws {PostgresConnectionError}
+ */
+export const probe = async (pool, meta, location) => {
+    const retries = Math.max(1, meta.retries ?? DEF_RETRIES);
+    const delay = meta.retryDelayMillis ?? DEF_RETRY_DELAY;
+    let last;
+    for (let attempt = 1; attempt <= retries; ++attempt) {
+        try {
+            await pool.query('SELECT 1');
+            return;
+        }
+        catch (error) {
+            last = error;
+            if (attempt === retries || !isTransient(error)) {
+                break;
+            }
+            console.log(`${location}: not ready (${attempt}/${retries}), retrying in ${delay}ms…`);
+            await new Promise(resolve => setTimeout(resolve, delay));
+        }
+    }
+    const translated = pgErrorToResourceError(last);
+    const failure = new PostgresConnectionError(`unreachable:${location}:${translated.message}`);
+    failure.cause = last;
+    throw failure;
+};
+/** `CREATE SCHEMA IF NOT EXISTS` on a pooled connection. */
+export const ensureSchema = async (pool, schema) => {
+    try {
+        await pool.query(`CREATE SCHEMA IF NOT EXISTS ${quoteIdent(schema)}`);
+    }
+    catch (error) {
+        throw pgErrorToResourceError(error);
+    }
+};
+//# sourceMappingURL=connection.js.map

package/build/utils/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../src/utils/connection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAIzG,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AAEnF;;;;GAIG;AACH,MAAM,WAAW,GAAG,CAAC,KAAc,EAAW,EAAE;IAC9C,MAAM,IAAI,GAAI,KAAkC,EAAE,IAAI,CAAA;IACtD,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QACjB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,CAAC,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AAC/C,CAAC,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,KAAK,EAAE,IAAU,EAAE,IAAkB,EAAE,QAAgB,EAAiB,EAAE;IAC7F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC,CAAA;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,IAAI,eAAe,CAAA;IACtD,IAAI,IAAa,CAAA;IAEjB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;YAE5B,OAAM;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,GAAG,KAAK,CAAA;YACZ,IAAI,OAAO,KAAK,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/C,MAAK;YACP,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,GAAG,QAAQ,gBAAgB,OAAO,IAAI,OAAO,kBAAkB,KAAK,KAAK,CAAC,CAAA;YACtF,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;QAC1D,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAA;IAC/C,MAAM,OAAO,GAAG,IAAI,uBAAuB,CAAC,eAAe,QAAQ,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC,CAAA;IAC5F,OAAO,CAAC,KAAK,GAAG,IAAI,CAAA;IAEpB,MAAM,OAAO,CAAA;AACf,CAAC,CAAA;AAED,4DAA4D;AAC5D,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,IAAU,EAAE,MAAc,EAAiB,EAAE;IAC9E,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,+BAA+B,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,sBAAsB,CAAC,KAAK,CAAC,CAAA;IACrC,CAAC;AACH,CAAC,CAAA"}

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "@owlmeans/postgres",
+  "version": "0.1.15",
+  "license": "MIT",
+  "type": "module",
+  "scripts": {
+    "build": "tsc -b",
+    "dev": "sleep 210 && nodemon -e ts,tsx,json --watch src --exec \"tsc -p ./tsconfig.json\"",
+    "watch": "tsc -b -w --preserveWatchOutput --pretty",
+    "test": "bun test ./tests"
+  },
+  "main": "build/index.js",
+  "module": "build/index.js",
+  "types": "build/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./build/index.js",
+      "require": "./build/index.js",
+      "default": "./build/index.js",
+      "module": "./build/index.js",
+      "types": "./build/index.d.ts"
+    }
+  },
+  "dependencies": {
+    "@owlmeans/basic-keys": "^0.1.15",
+    "@owlmeans/context": "^0.1.15",
+    "@owlmeans/postgres-resource": "^0.1.15",
+    "@owlmeans/resource": "^0.1.15",
+    "@owlmeans/server-context": "^0.1.15",
+    "drizzle-orm": "~0.45.2",
+    "pg": "^8.22.0"
+  },
+  "devDependencies": {
+    "@owlmeans/dep-config": "workspace:*",
+    "@owlmeans/test-integration": "^0.1.15",
+    "@types/bun": "^1.3.14",
+    "@types/node": "^26.1.0",
+    "@types/pg": "^8.20.4",
+    "nodemon": "^3.1.14",
+    "typescript": "^6.0.3"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}