@pikku/deploy-standalone 0.12.13 → 0.12.17

package/src/adapter.ts

@@ -49,7 +49,263 @@ const sidecarHandshakeLines = (): string[] => [
   `  console.log(\`${SERVER_READY_MARKER} on http://\${hostname}:\${server.port}\`)`,
 ]
 
-const SIDECAR_RUNTIME_IMPORT = `import { watchParentProcess } from '@pikku/deploy-standalone/runtime'`
+/**
+ * The runtime helpers the entry imports. The database ones are left out of a
+ * build with no database, so the bundle carries no migrator it can never run.
+ */
+const runtimeImport = (ctx: EntryGenerationContext): string => {
+  const names = ['watchParentProcess', 'parseStandaloneCommand']
+  if (ctx.db) names.push('runStandaloneCommand', 'resolveMigrationsDir')
+  return `import { ${names.join(', ')} } from '@pikku/deploy-standalone/runtime'`
+}
+
+/**
+ * Environment variable naming the directory the SQLite file lives in.
+ *
+ * The database has to outlive a release. A deploy that swaps the artifact
+ * directory would take the database with it if the file sat beside the bundle,
+ * so the path comes from the environment and points somewhere the operator
+ * keeps stable across releases, rather than being derived from the bundle's own
+ * location the way the frontend directory is.
+ */
+const DATA_DIR_VAR = 'PIKKU_DATA_DIR'
+
+/**
+ * Full override for the database file, for when it must match a path something
+ * else already decided — notably `pikku db migrate`, which has to open the same
+ * file this opens or the app runs against an unmigrated database.
+ */
+const DATABASE_FILE_VAR = 'PIKKU_DATABASE_FILE'
+
+const DEFAULT_DATABASE_FILENAME = 'pikku.db'
+
+/**
+ * The dialect factory each runtime opens SQLite with. bun cannot use the node
+ * one — `bun:sqlite` is a different driver, and the node build reaches for
+ * `node:sqlite`, which a compiled bun binary does not carry.
+ */
+const SQLITE_FACTORY = {
+  node: {
+    specifier: '@pikku/kysely-node-sqlite',
+    fn: 'createNodeSqliteKysely',
+  },
+  bun: { specifier: '@pikku/kysely-bun-sqlite', fn: 'createBunSqliteKysely' },
+} as const
+
+/**
+ * The environment variable a Postgres build reads its connection string from.
+ *
+ * The same name every other pikku host uses, so an artifact dropped onto a
+ * machine that already runs a pikku app needs no new variable.
+ */
+const DATABASE_URL_VAR = 'DATABASE_URL'
+
+/** Imports the coercion plugin, for an app that generated a map. */
+const coercionImportLines = (coercionImportPath: string): string[] => [
+  `import { createCoercionPlugin } from '@pikku/kysely'`,
+  `import { coercionMap as __pikkuCoercionMap } from '${coercionImportPath}'`,
+]
+
+/** Imports a database-backed entry needs on top of the common set. */
+const dbImportLines = (
+  runtime: 'node' | 'bun',
+  db: NonNullable<EntryGenerationContext['db']>
+): string[] => [
+  ...(db.engine === 'sqlite'
+    ? [
+        `import { ${SQLITE_FACTORY[runtime].fn} } from '${SQLITE_FACTORY[runtime].specifier}'`,
+        `import { mkdirSync as __pikkuMkdirSync } from 'node:fs'`,
+      ]
+    : [`import { PikkuKysely } from '@pikku/kysely-postgres'`]),
+  ...(db.coercionImportPath ? coercionImportLines(db.coercionImportPath) : []),
+]
+
+/**
+ * Opens the database before services are built, so `createSingletonServices`
+ * receives `kysely` exactly as a hosted runtime would hand it over.
+ *
+ * Creating the directory rather than requiring it is deliberate: the artifact
+ * is expected to start on a machine where nothing has run yet, and a missing
+ * parent directory is the difference between a first boot that works and one
+ * that needs a documented mkdir nobody reads.
+ */
+const dbSetupLines = (
+  runtime: 'node' | 'bun',
+  db: NonNullable<EntryGenerationContext['db']>
+): string[] => {
+  const plugins = db.coercionImportPath
+    ? `[createCoercionPlugin({ map: __pikkuCoercionMap })]`
+    : `[]`
+
+  if (db.engine === 'sqlite') {
+    return [
+      `  const __pikkuDbFile = process.env.${DATABASE_FILE_VAR}`,
+      `    ? process.env.${DATABASE_FILE_VAR}`,
+      `    : __pikkuJoin(__pikkuRequireDataDir(), '${DEFAULT_DATABASE_FILENAME}')`,
+      `  __pikkuMkdirSync(__pikkuDirname(__pikkuDbFile), { recursive: true })`,
+      `  const kysely = ${SQLITE_FACTORY[runtime].fn}({`,
+      `    filename: __pikkuDbFile,`,
+      `    plugins: ${plugins},`,
+      `  })`,
+    ]
+  }
+
+  return [
+    `  const __pikkuDbUrl = process.env.${DATABASE_URL_VAR}`,
+    `  if (!__pikkuDbUrl) {`,
+    `    throw new Error(`,
+    `      'This build connects to Postgres, so it needs ${DATABASE_URL_VAR} set to the database it should open.'`,
+    `    )`,
+    `  }`,
+    `  const __pikkuPg = new PikkuKysely(logger, __pikkuDbUrl)`,
+    `  await __pikkuPg.init()`,
+    ...(db.coercionImportPath
+      ? [
+          `  const kysely = __pikkuPg.kysely.withPlugin(`,
+          `    createCoercionPlugin({ map: __pikkuCoercionMap })`,
+          `  )`,
+        ]
+      : [`  const kysely = __pikkuPg.kysely`]),
+  ]
+}
+
+/**
+ * Where the migrations sit relative to the running artifact.
+ *
+ * A node bundle reads them from its own directory. A compiled bun binary has no
+ * directory — `import.meta.url` points inside the embedded filesystem — so it
+ * resolves them beside the executable, which is where an operator unpacking an
+ * artifact puts them.
+ */
+const bundleDirExpression = (runtime: 'node' | 'bun'): string =>
+  runtime === 'node'
+    ? `__pikkuDirname(__pikkuFileURLToPath(import.meta.url))`
+    : `__pikkuDirname(process.execPath)`
+
+/**
+ * The command line, parsed before anything is opened.
+ *
+ * `version` and `help` have to answer without a database, a config factory or a
+ * port, because the machine asking may be one where none of the three work yet
+ * — which is exactly when someone runs them.
+ */
+const commandParseLines = (ctx: EntryGenerationContext): string[] => [
+  `const __pikkuCommand = parseStandaloneCommand(process.argv.slice(2), {`,
+  `  version: '${(ctx.version ?? 'unknown').replace(/'/g, "\\'")}',`,
+  `  hasDb: ${Boolean(ctx.db)},`,
+  ...(ctx.db ? [`  engine: '${ctx.db.engine}',`] : []),
+  `})`,
+  `if (__pikkuCommand.kind === 'exit') process.exit(__pikkuCommand.code)`,
+]
+
+/**
+ * Runs a non-serve command against the database the app itself just opened, and
+ * stops before a port is bound.
+ *
+ * Reusing the app's own connection is the point: a command that resolved its
+ * own would be free to migrate a different database than the next `serve`
+ * reads, and the two would only disagree once in production.
+ */
+const commandDispatchLines = (
+  runtime: 'node' | 'bun',
+  ctx: EntryGenerationContext
+): string[] => {
+  if (!ctx.db) {
+    return [`  if (__pikkuCommand.kind !== 'serve') process.exit(0)`, ``]
+  }
+
+  const dir = `__pikkuJoin(${bundleDirExpression(runtime)}, 'db', '${ctx.db.engine}')`
+  const handle =
+    ctx.db.engine === 'sqlite'
+      ? `databaseFile: __pikkuDbFile,`
+      : `sql: __pikkuPg.sql,`
+
+  return [
+    `  const __pikkuDbCommandTarget = {`,
+    `    engine: '${ctx.db.engine}',`,
+    `    migrationsDir: resolveMigrationsDir(${dir}),`,
+    `    ${handle}`,
+    `  }`,
+    `  if ((await runStandaloneCommand(__pikkuCommand, __pikkuDbCommandTarget)) === 'done') {`,
+    ...(ctx.db.engine === 'postgres' ? [`    await __pikkuPg.close()`] : []),
+    `    return`,
+    `  }`,
+    ``,
+  ]
+}
+
+/** Imports the app's own lifecycle module, when it declares one. */
+const lifecycleImportLines = (
+  lifecycle: NonNullable<EntryGenerationContext['lifecycle']>
+): string[] => [
+  `import { ${lifecycle.variable} as __pikkuLifecycle } from '${lifecycle.importPath}'`,
+]
+
+/**
+ * Runs the app's start hooks around the port opening, the same order and the
+ * same services `pikku dev` gives them.
+ *
+ * `beforeStart` runs after `init` so a hook can rely on everything the server
+ * resolved, and before `start` so work that must finish before the first
+ * request — a seeded admin account, a schema probe — is finished when one
+ * arrives.
+ */
+const lifecycleStartLines = (): string[] => [
+  `  await __pikkuLifecycle?.beforeStart?.(singletonServices)`,
+]
+
+const lifecycleAfterStartLines = (): string[] => [
+  `  await __pikkuLifecycle?.afterStart?.(singletonServices)`,
+]
+
+/**
+ * Hands the stop hooks to the signal handler that owns the shutdown.
+ *
+ * The connection pool is closed in `afterStop`, once the app's own hook and the
+ * server have both finished with it — a pool closed any earlier takes the
+ * queries they are still allowed to make down with it. SQLite needs no
+ * counterpart: the process exiting releases the file.
+ */
+const shutdownHooksArg = (ctx: EntryGenerationContext): string => {
+  const before: string[] = []
+  const after: string[] = []
+
+  if (ctx.lifecycle) {
+    before.push(`await __pikkuLifecycle?.beforeStop?.(singletonServices)`)
+    after.push(`await __pikkuLifecycle?.afterStop?.(singletonServices)`)
+  }
+  if (ctx.db?.engine === 'postgres') {
+    after.push(`await __pikkuPg.close()`)
+  }
+
+  if (before.length === 0 && after.length === 0) return ''
+
+  const hooks: string[] = []
+  if (before.length > 0) {
+    hooks.push(`beforeStop: async () => { ${before.join('; ')} }`)
+  }
+  if (after.length > 0) {
+    hooks.push(`afterStop: async () => { ${after.join('; ')} }`)
+  }
+  return `{ ${hooks.join(', ')} }`
+}
+
+/**
+ * Fails with the variable's name rather than whatever SQLite says about a path
+ * of `undefined/pikku.db`, which is the error an operator would otherwise have
+ * to work backwards from.
+ */
+const dataDirHelperLines = (): string[] => [
+  `function __pikkuRequireDataDir() {`,
+  `  const dir = process.env.${DATA_DIR_VAR}`,
+  `  if (!dir) {`,
+  `    throw new Error(`,
+  `      'This build bundles a SQLite database, so it needs somewhere to keep it. Set ${DATA_DIR_VAR} to a writable directory that survives a release swap, or set ${DATABASE_FILE_VAR} to the database file itself.'`,
+  `    )`,
+  `  }`,
+  `  return dir`,
+  `}`,
+]
 
 /**
  * `rustc -vV`, or nothing when no toolchain is installed. The triple then falls
@@ -122,13 +378,15 @@ export class StandaloneProviderAdapter implements ProviderAdapter {
       `import { PikkuNodeHTTPServer } from '@pikku/node-http-server'`,
       `import { DEFAULT_WS_MAX_PAYLOAD, pikkuWebsocketHandler } from '@pikku/ws'`,
       `import { WebSocketServer } from 'ws'`,
-      SIDECAR_RUNTIME_IMPORT,
-      ...(ctx.frontend
+      runtimeImport(ctx),
+      ...(ctx.frontend || ctx.db
         ? [
             `import { dirname as __pikkuDirname, join as __pikkuJoin } from 'node:path'`,
             `import { fileURLToPath as __pikkuFileURLToPath } from 'node:url'`,
           ]
         : []),
+      ...(ctx.db ? dbImportLines('node', ctx.db) : []),
+      ...(ctx.lifecycle ? lifecycleImportLines(ctx.lifecycle) : []),
       ``,
       ctx.configImport,
       ctx.servicesImport,
@@ -140,6 +398,8 @@ export class StandaloneProviderAdapter implements ProviderAdapter {
       `const port = parseInt(process.env.PORT || '3000', 10)`,
       `const hostname = process.env.HOST || '0.0.0.0'`,
       ``,
+      ...commandParseLines(ctx),
+      ``,
       `async function main() {`,
       `  const config = await ${ctx.configVar}()`,
       `  const schedulerService = new InMemorySchedulerService()`,
@@ -149,8 +409,11 @@ export class StandaloneProviderAdapter implements ProviderAdapter {
       `  const eventHub = new LocalEventHubService()`,
       `  workflowService.wireQueueWorkers()`,
       `  wireAgentScorerQueueWorkers()`,
+      ...(ctx.db ? dbSetupLines('node', ctx.db) : []),
+      ...commandDispatchLines('node', ctx),
       `  const singletonServices = await ${ctx.servicesVar}(config, {`,
       `    logger,`,
+      ...(ctx.db ? [`    kysely,`] : []),
       `    schedulerService,`,
       `    queueService,`,
       `    workflowService,`,
@@ -185,8 +448,10 @@ export class StandaloneProviderAdapter implements ProviderAdapter {
       `  await server.init()`,
       `  await schedulerService.start()`,
       `  await triggerService.start()`,
-      `  server.enableExitOnSignals()`,
+      ...(ctx.lifecycle ? lifecycleStartLines() : []),
+      `  server.enableExitOnSignals(${shutdownHooksArg(ctx)})`,
       `  await server.start()`,
+      ...(ctx.lifecycle ? lifecycleAfterStartLines() : []),
       ...sidecarHandshakeLines(),
       `}`,
       ``,
@@ -195,6 +460,7 @@ export class StandaloneProviderAdapter implements ProviderAdapter {
       `  process.exit(1)`,
       `})`,
       ``,
+      ...(ctx.db?.engine === 'sqlite' ? [...dataDirHelperLines(), ``] : []),
     ].join('\n')
   }
 
@@ -202,7 +468,7 @@ export class StandaloneProviderAdapter implements ProviderAdapter {
     return [
       `// Generated standalone entry (bun runtime) — all functions in one process`,
       `import { ConsoleLogger, InMemoryQueueService, InMemoryTriggerService, InMemoryWorkflowService } from '@pikku/core/services'`,
-      SIDECAR_RUNTIME_IMPORT,
+      runtimeImport(ctx),
       `import { pikkuState } from '@pikku/core/state'`,
       `import { wireAgentScorerQueueWorkers } from '@pikku/core/agent-scorer'`,
       `import { InMemorySchedulerService } from '@pikku/schedule'`,
@@ -210,6 +476,13 @@ export class StandaloneProviderAdapter implements ProviderAdapter {
       ...(ctx.frontend
         ? [`import { frontendAssets } from '${STANDALONE_FRONTEND_MANIFEST}'`]
         : []),
+      ...(ctx.db
+        ? [
+            `import { dirname as __pikkuDirname, join as __pikkuJoin } from 'node:path'`,
+          ]
+        : []),
+      ...(ctx.db ? dbImportLines('bun', ctx.db) : []),
+      ...(ctx.lifecycle ? lifecycleImportLines(ctx.lifecycle) : []),
       ``,
       ctx.configImport,
       ctx.servicesImport,
@@ -221,6 +494,8 @@ export class StandaloneProviderAdapter implements ProviderAdapter {
       `const port = parseInt(process.env.PORT || '3000', 10)`,
       `const hostname = process.env.HOST || '0.0.0.0'`,
       ``,
+      ...commandParseLines(ctx),
+      ``,
       `async function main() {`,
       `  const config = await ${ctx.configVar}()`,
       `  const schedulerService = new InMemorySchedulerService()`,
@@ -230,8 +505,11 @@ export class StandaloneProviderAdapter implements ProviderAdapter {
       `  const eventHub = new BunEventHubService()`,
       `  workflowService.wireQueueWorkers()`,
       `  wireAgentScorerQueueWorkers()`,
+      ...(ctx.db ? dbSetupLines('bun', ctx.db) : []),
+      ...commandDispatchLines('bun', ctx),
       `  const singletonServices = await ${ctx.servicesVar}(config, {`,
       `    logger,`,
+      ...(ctx.db ? [`    kysely,`] : []),
       `    schedulerService,`,
       `    queueService,`,
       `    workflowService,`,
@@ -258,8 +536,10 @@ export class StandaloneProviderAdapter implements ProviderAdapter {
       `  await server.init()`,
       `  await schedulerService.start()`,
       `  await triggerService.start()`,
-      `  server.enableExitOnSignals()`,
+      ...(ctx.lifecycle ? lifecycleStartLines() : []),
+      `  server.enableExitOnSignals(${shutdownHooksArg(ctx)})`,
       `  await server.start()`,
+      ...(ctx.lifecycle ? lifecycleAfterStartLines() : []),
       ...sidecarHandshakeLines(),
       `}`,
       ``,
@@ -268,6 +548,7 @@ export class StandaloneProviderAdapter implements ProviderAdapter {
       `  process.exit(1)`,
       `})`,
       ``,
+      ...(ctx.db?.engine === 'sqlite' ? [...dataDirHelperLines(), ``] : []),
     ].join('\n')
   }
 
@@ -294,6 +575,21 @@ export class StandaloneProviderAdapter implements ProviderAdapter {
     return externals
   }
 
+  /**
+   * The SQLite driver this runtime cannot load.
+   *
+   * `loadSqliteRuntime` picks its driver by looking for `globalThis.Bun`, so a
+   * node process never runs the bun branch — but esbuild still follows the
+   * import, and `bun:sqlite` sits at the top of that module as a static import
+   * it cannot resolve. Left in, the bundle fails to build; marked external, it
+   * becomes a top-level import node fails to load. Stubbing removes the branch
+   * that was already dead.
+   */
+  getStubModules(): string[] {
+    if (this.runtime === 'bun') return []
+    return ['sqlite-runtime-bun']
+  }
+
   getPlatform(): 'node' {
     return 'node'
   }

package/src/runtime/cli.test.ts

@@ -0,0 +1,222 @@
+import { describe, it } from 'node:test'
+import assert from 'node:assert'
+import { mkdtempSync, writeFileSync, mkdirSync, existsSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+
+import {
+  parseStandaloneCommand,
+  resolveMigrationsDir,
+  runDbCommand,
+  runBackupCommand,
+  runStandaloneCommand,
+  MIGRATIONS_DIR_ENV,
+  type StandaloneSqliteDb,
+} from './cli.js'
+
+const collector = () => {
+  const lines: string[] = []
+  return { lines, out: { write: (line: string) => lines.push(line) } }
+}
+
+const parse = (argv: string[], overrides: Record<string, unknown> = {}) => {
+  const { lines, out } = collector()
+  const command = parseStandaloneCommand(argv, {
+    version: '1.2.3',
+    hasDb: true,
+    engine: 'sqlite',
+    write: out.write,
+    ...overrides,
+  } as never)
+  return { command, lines }
+}
+
+describe('parseStandaloneCommand', () => {
+  it('no arguments means serve, so `node bundle.js` keeps its meaning', () => {
+    assert.deepEqual(parse([]).command, { kind: 'serve' })
+    assert.deepEqual(parse(['serve']).command, { kind: 'serve' })
+  })
+
+  it('version prints and stops before anything is opened', () => {
+    const { command, lines } = parse(['version'])
+    assert.deepEqual(command, { kind: 'exit', code: 0 })
+    assert.deepEqual(lines, ['1.2.3'])
+  })
+
+  it('help lists the db commands only when there is a database', () => {
+    assert.match(parse(['help']).lines.join('\n'), /db migrate/)
+    assert.doesNotMatch(
+      parse(['help'], { hasDb: false, engine: undefined }).lines.join('\n'),
+      /db migrate/
+    )
+  })
+
+  it('backup is offered on sqlite and refused on postgres', () => {
+    assert.deepEqual(parse(['backup', '/tmp/x.db']).command, {
+      kind: 'backup',
+      destination: '/tmp/x.db',
+    })
+
+    const pg = parse(['backup', '/tmp/x.db'], { engine: 'postgres' })
+    assert.deepEqual(pg.command, { kind: 'exit', code: 1 })
+    assert.match(pg.lines.join('\n'), /pg_dump/)
+  })
+
+  it('a db command on a build with no database fails by saying so', () => {
+    const { command, lines } = parse(['db', 'migrate'], {
+      hasDb: false,
+      engine: undefined,
+    })
+    assert.deepEqual(command, { kind: 'exit', code: 1 })
+    assert.match(lines.join('\n'), /opens no database/)
+  })
+
+  it('an unknown db action names the ones that exist', () => {
+    const { command, lines } = parse(['db', 'rollback'])
+    assert.deepEqual(command, { kind: 'exit', code: 1 })
+    assert.match(lines.join('\n'), /Expected migrate or status/)
+  })
+
+  it('an unknown command exits non-zero with the usage', () => {
+    const { command, lines } = parse(['start'])
+    assert.deepEqual(command, { kind: 'exit', code: 1 })
+    assert.match(lines.join('\n'), /Unknown command: start/)
+    assert.match(lines.join('\n'), /Usage:/)
+  })
+})
+
+describe('resolveMigrationsDir', () => {
+  it('defaults to the directory beside the bundle', () => {
+    assert.equal(resolveMigrationsDir('/app/db/sqlite', {}), '/app/db/sqlite')
+  })
+
+  it('an operator who moved them wins', () => {
+    assert.equal(
+      resolveMigrationsDir('/app/db/sqlite', {
+        [MIGRATIONS_DIR_ENV]: '/srv/migrations',
+      }),
+      '/srv/migrations'
+    )
+  })
+})
+
+const sqliteFixture = (
+  migrations: Record<string, string>
+): StandaloneSqliteDb => {
+  const root = mkdtempSync(join(tmpdir(), 'pikku-cli-'))
+  const migrationsDir = join(root, 'db', 'sqlite')
+  mkdirSync(migrationsDir, { recursive: true })
+  for (const [name, sql] of Object.entries(migrations)) {
+    writeFileSync(join(migrationsDir, name), sql)
+  }
+  return {
+    engine: 'sqlite',
+    migrationsDir,
+    databaseFile: join(root, 'pikku.db'),
+  }
+}
+
+describe('the sqlite db commands', () => {
+  const migrations = {
+    '0001_widgets.sql': 'CREATE TABLE widget (id TEXT PRIMARY KEY);',
+    '0002_labels.sql': 'ALTER TABLE widget ADD COLUMN label TEXT;',
+  }
+
+  it('migrate applies every file, and a second run applies none', async () => {
+    const db = sqliteFixture(migrations)
+
+    const first = collector()
+    await runDbCommand('migrate', db, first.out)
+    assert.deepEqual(first.lines, [
+      'applied  0001_widgets.sql',
+      'applied  0002_labels.sql',
+      'Applied 2 migration(s).',
+    ])
+
+    const second = collector()
+    await runDbCommand('migrate', db, second.out)
+    assert.deepEqual(second.lines, ['Already up to date (2 applied previously).'])
+  })
+
+  it('status separates what is applied from what is waiting', async () => {
+    const db = sqliteFixture({ '0001_widgets.sql': migrations['0001_widgets.sql']! })
+
+    await runDbCommand('migrate', db)
+    writeFileSync(
+      join(db.migrationsDir, '0002_labels.sql'),
+      migrations['0002_labels.sql']!
+    )
+
+    const { lines, out } = collector()
+    await runDbCommand('status', db, out)
+    assert.match(lines[0]!, /^applied {2}0001_widgets\.sql {2}\S/)
+    assert.equal(lines[1], 'pending  0002_labels.sql')
+    assert.equal(lines[2], '1 applied, 1 pending.')
+  })
+
+  it('an edited migration is refused rather than silently re-run', async () => {
+    const db = sqliteFixture(migrations)
+    await runDbCommand('migrate', db)
+
+    writeFileSync(
+      join(db.migrationsDir, '0001_widgets.sql'),
+      'CREATE TABLE widget (id TEXT PRIMARY KEY, tampered TEXT);'
+    )
+
+    await assert.rejects(
+      () => runDbCommand('migrate', db),
+      /PKU-DB-DRIFT/
+    )
+  })
+
+  it('backup writes a database a fresh process can open', async () => {
+    const db = sqliteFixture(migrations)
+    await runDbCommand('migrate', db)
+
+    const destination = join(db.migrationsDir, '..', '..', 'copy.db')
+    const { lines, out } = collector()
+    await runBackupCommand(destination, db, out)
+
+    assert.ok(existsSync(destination))
+    assert.match(lines.join('\n'), /Copied /)
+
+    const copy = collector()
+    await runDbCommand('status', { ...db, databaseFile: destination }, copy.out)
+    assert.equal(copy.lines.at(-1), '2 applied, 0 pending.')
+  })
+})
+
+describe('runStandaloneCommand', () => {
+  it('hands serve back to the caller rather than doing anything', async () => {
+    assert.equal(
+      await runStandaloneCommand({ kind: 'serve' }, undefined),
+      'serve'
+    )
+  })
+
+  it('a completed command stops the caller from opening a port', async () => {
+    const db = sqliteFixture({
+      '0001_widgets.sql': 'CREATE TABLE widget (id TEXT PRIMARY KEY);',
+    })
+    const { out } = collector()
+    assert.equal(
+      await runStandaloneCommand({ kind: 'db', action: 'migrate' }, db, out),
+      'done'
+    )
+  })
+
+  it('backup on a postgres build is refused, not attempted', async () => {
+    await assert.rejects(
+      () =>
+        runStandaloneCommand(
+          { kind: 'backup', destination: '/tmp/x' },
+          {
+            engine: 'postgres',
+            migrationsDir: '/tmp',
+            sql: {} as never,
+          }
+        ),
+      /only available on a SQLite build/
+    )
+  })
+})