@proteinjs/db-driver-spanner 1.16.3 → 1.17.0

package/CHANGELOG.md

@@ -3,6 +3,23 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [1.17.0](https://github.com/proteinjs/db/compare/@proteinjs/db-driver-spanner@1.16.3...@proteinjs/db-driver-spanner@1.17.0) (2026-08-14)
+
+
+### Bug Fixes
+
+* **test:** abort-aware DDL-rejection control in the provisioner re-ensure suite ([8418cb2](https://github.com/proteinjs/db/commit/8418cb20609d279b35e654948540d690a79b6923))
+* **test:** provisioner control detects emulator DDL-rejection semantics ([3da031a](https://github.com/proteinjs/db/commit/3da031a4a74f172b1dc7df73d273be028c900508))
+
+
+### Features
+
+* ensureMigrationRun — system-context boot API for deploy-coupled migrations ([d771c7b](https://github.com/proteinjs/db/commit/d771c7bc8958ebd38e15b1fd86fde19267ec3d9f))
+
+
+
+
+
 ## [1.16.3](https://github.com/proteinjs/db/compare/@proteinjs/db-driver-spanner@1.16.2...@proteinjs/db-driver-spanner@1.16.3) (2026-08-14)
 
 

package/dist/test/MigrationRunner.test.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MigrationRunner.test.d.ts","sourceRoot":"","sources":["../../test/MigrationRunner.test.ts"],"names":[],"mappings":"AAKA,OAAO,yBAAyB,CAAC"}
+{"version":3,"file":"MigrationRunner.test.d.ts","sourceRoot":"","sources":["../../test/MigrationRunner.test.ts"],"names":[],"mappings":"AAaA,OAAO,yBAAyB,CAAC"}

package/dist/test/MigrationRunner.test.js

@@ -77,6 +77,46 @@ describe('MigrationRunner (spanner)', function () {
             return [2 /*return*/, 'migration output'];
         }); }); },
     };
+    // ensureMigrationRun fixtures carry run counters: re-running any of them is VISIBLE as a
+    // counter increment, so idempotence and retry are asserted on the migration's own effect,
+    // not on bookkeeping interactions.
+    var ensureBootRunCount = 0;
+    var ensureBootMigration = {
+        id: 'migration-runner-test-ensure-boot',
+        description: 'runs at boot with no user session',
+        run: function () { return __awaiter(void 0, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                ensureBootRunCount++;
+                return [2 /*return*/, 'boot output'];
+            });
+        }); },
+    };
+    var ensureIdempotentRunCount = 0;
+    var ensureIdempotentMigration = {
+        // Ids stay <= 36 chars — the migration table's id column is uuid-width.
+        id: 'migration-runner-test-ensure-skip',
+        description: 'must not re-run once successful',
+        run: function () { return __awaiter(void 0, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                ensureIdempotentRunCount++;
+                return [2 /*return*/, 'idempotent output'];
+            });
+        }); },
+    };
+    var ensureRetryAttempts = 0;
+    var ensureRetriedMigration = {
+        id: 'migration-runner-test-ensure-retried',
+        description: 'fails first, fixed on retry',
+        run: function () { return __awaiter(void 0, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                ensureRetryAttempts++;
+                if (ensureRetryAttempts === 1) {
+                    throw new Error('ensure migration blew up mid-run');
+                }
+                return [2 /*return*/, 'fixed on retry'];
+            });
+        }); },
+    };
     beforeAll(function () { return __awaiter(void 0, void 0, void 0, function () {
         var _i, _a, migration;
         return __generator(this, function (_b) {
@@ -99,7 +139,13 @@ describe('MigrationRunner (spanner)', function () {
                     return [4 /*yield*/, spannerDriver.getTableManager().loadTable(migrationTable)];
                 case 3:
                     _b.sent();
-                    _i = 0, _a = [failingMigration, succeedingMigration];
+                    _i = 0, _a = [
+                        failingMigration,
+                        succeedingMigration,
+                        ensureBootMigration,
+                        ensureIdempotentMigration,
+                        ensureRetriedMigration,
+                    ];
                     _b.label = 4;
                 case 4:
                     if (!(_i < _a.length)) return [3 /*break*/, 7];
@@ -168,5 +214,85 @@ describe('MigrationRunner (spanner)', function () {
             }
         });
     }); });
+    describe('ensureMigrationRun (boot path)', function () {
+        // Boot context: NO user session exists — UserAuth is fail-closed, so any getDb() bookkeeping
+        // would deny. These tests run with the suite's test identity CLEARED to pin that
+        // ensureMigrationRun records through the system db. Assertions read as system for the same
+        // reason; the identity is restored for the rest of the suite (afterAll drops the table via
+        // getDb-adjacent paths).
+        beforeEach(function () { return (0, test_1.clearTestUser)(); });
+        afterEach(function () { return (0, test_1.registerTestUser)(); });
+        test('runs a pending migration with no user session and records success', function () { return __awaiter(void 0, void 0, void 0, function () {
+            var runner, row;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        runner = new db_1.MigrationRunner();
+                        return [4 /*yield*/, runner.ensureMigrationRun(ensureBootMigration.id)];
+                    case 1:
+                        _a.sent();
+                        expect(ensureBootRunCount).toBe(1);
+                        return [4 /*yield*/, (0, db_1.getDbAsSystem)().get(migrationTable, { id: ensureBootMigration.id })];
+                    case 2:
+                        row = _a.sent();
+                        expect(row.status).toBe('success');
+                        expect(row.output).toBe('boot output');
+                        expect(row.duration).toBeTruthy();
+                        return [2 /*return*/];
+                }
+            });
+        }); });
+        test('a second call skips an already-successful migration', function () { return __awaiter(void 0, void 0, void 0, function () {
+            var runner, row;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        runner = new db_1.MigrationRunner();
+                        return [4 /*yield*/, runner.ensureMigrationRun(ensureIdempotentMigration.id)];
+                    case 1:
+                        _a.sent();
+                        expect(ensureIdempotentRunCount).toBe(1);
+                        return [4 /*yield*/, runner.ensureMigrationRun(ensureIdempotentMigration.id)];
+                    case 2:
+                        _a.sent();
+                        // The migration's effect did not repeat — 'ensure' skipped the successful row.
+                        expect(ensureIdempotentRunCount).toBe(1);
+                        return [4 /*yield*/, (0, db_1.getDbAsSystem)().get(migrationTable, { id: ensureIdempotentMigration.id })];
+                    case 3:
+                        row = _a.sent();
+                        expect(row.status).toBe('success');
+                        return [2 /*return*/];
+                }
+            });
+        }); });
+        test('a throwing migration records failure and is retried by the next call', function () { return __awaiter(void 0, void 0, void 0, function () {
+            var runner, failedRow, retriedRow;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        runner = new db_1.MigrationRunner();
+                        return [4 /*yield*/, runner.ensureMigrationRun(ensureRetriedMigration.id)];
+                    case 1:
+                        _a.sent();
+                        expect(ensureRetryAttempts).toBe(1);
+                        return [4 /*yield*/, (0, db_1.getDbAsSystem)().get(migrationTable, { id: ensureRetriedMigration.id })];
+                    case 2:
+                        failedRow = _a.sent();
+                        expect(failedRow.status).toBe('failure');
+                        expect(failedRow.failureMessage).toBe('ensure migration blew up mid-run');
+                        return [4 /*yield*/, runner.ensureMigrationRun(ensureRetriedMigration.id)];
+                    case 3:
+                        _a.sent();
+                        expect(ensureRetryAttempts).toBe(2);
+                        return [4 /*yield*/, (0, db_1.getDbAsSystem)().get(migrationTable, { id: ensureRetriedMigration.id })];
+                    case 4:
+                        retriedRow = _a.sent();
+                        expect(retriedRow.status).toBe('success');
+                        expect(retriedRow.output).toBe('fixed on retry');
+                        return [2 /*return*/];
+                }
+            });
+        }); });
+    });
 });
 //# sourceMappingURL=MigrationRunner.test.js.map

package/dist/test/MigrationRunner.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"MigrationRunner.test.js","sourceRoot":"","sources":["../../test/MigrationRunner.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kEAA6D;AAC7D,oCAA2G;AAC3G,2CAAqE;AACrE,4DAA2D;AAC3D,gFAA+E;AAC/E,mCAAiC;AAEjC;;;;;;;;;GASG;AAEH,IAAM,aAAa,GAAG,IAAI,iCAAa,CAAC;IACtC,SAAS,EAAE,gBAAgB;IAC3B,YAAY,EAAE,gBAAgB;IAC9B,YAAY,EAAE,MAAM;CACrB,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE;IACpC,IAAM,cAAc,GAAG,IAAI,mBAAc,EAAsB,CAAC;IAChE,IAAM,SAAS,GAAG,IAAA,mCAAgB,EAAC,aAAa,CAAC,CAAC;IAClD,IAAM,gBAAgB,GAAG,IAAI,qBAAgB,EAAE,CAAC;IAEhD,IAAM,gBAAgB,GAAG;QACvB,EAAE,EAAE,+BAA+B;QACnC,WAAW,EAAE,eAAe;QAC5B,GAAG,EAAE;;gBACH,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;;aAC9C;KACsB,CAAC;IAE1B,IAAM,mBAAmB,GAAG;QAC1B,EAAE,EAAE,kCAAkC;QACtC,WAAW,EAAE,UAAU;QACvB,GAAG,EAAE;YAAY,sBAAA,kBAAkB,EAAA;iBAAA;KACZ,CAAC;IAE1B,SAAS,CAAC;;;;;oBACR,0FAA0F;oBAC1F,uFAAuF;oBACvF,uCAAuC;oBACvC,IAAA,uBAAgB,GAAE,CAAC;oBACnB,qBAAM,uDAA0B,CAAC,iBAAiB,CAAC;4BACjD,SAAS,EAAE,gBAAgB;4BAC3B,YAAY,EAAE,gBAAgB;4BAC9B,YAAY,EAAE,MAAM;yBACrB,CAAC,EAAA;;oBAJF,SAIE,CAAC;oBACH,qBAAM,SAAS,CAAC,cAAc,CAAC,EAAA;;oBAA/B,SAA+B,CAAC;oBAChC,qBAAM,aAAa,CAAC,eAAe,EAAE,CAAC,SAAS,CAAC,cAAc,CAAC,EAAA;;oBAA/D,SAA+D,CAAC;0BACD,EAAvC,MAAC,gBAAgB,EAAE,mBAAmB,CAAC;;;yBAAvC,CAAA,cAAuC,CAAA;oBAApD,SAAS;oBAClB,gBAAgB,CAAC,gBAAgB,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;oBAClE,qBAAM,IAAA,UAAK,GAAE,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC,EAAA;;oBAA/C,SAA+C,CAAC;;;oBAF1B,IAAuC,CAAA;;;;;SAIhE,EAAE,KAAK,CAAC,CAAC;IAEV,QAAQ,CAAC;;;;oBACP,IAAA,oBAAa,GAAE,CAAC;oBAChB,qBAAM,SAAS,CAAC,cAAc,CAAC,EAAA;;oBAA/B,SAA+B,CAAC;oBAChC,uDAA0B,CAAC,OAAO,EAAE,CAAC;;;;SACtC,EAAE,KAAK,CAAC,CAAC;IAEV,IAAI,CAAC,0EAA0E,EAAE;;;;;oBACzE,MAAM,GAAG,IAAI,oBAAe,EAAE,CAAC;oBACrC,qBAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAA;;oBAA/E,SAA+E,CAAC;oBAEpE,qBAAM,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,EAAA;;oBAApE,GAAG,GAAG,SAA8D;oBAC1E,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACnC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;oBAC7D,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;oBAChE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;;;;SACnC,CAAC,CAAC;IAEH,IAAI,CAAC,uDAAuD,EAAE;;;;;oBACtD,MAAM,GAAG,IAAI,oBAAe,EAAE,CAAC;oBACrC,qBAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAA;;oBAAlF,SAAkF,CAAC;oBAEvE,qBAAM,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC,EAAA;;oBAAvE,GAAG,GAAG,SAAiE;oBAC7E,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACnC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;oBAC5C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;;;;SACnC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"MigrationRunner.test.js","sourceRoot":"","sources":["../../test/MigrationRunner.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kEAA6D;AAC7D,oCAQuB;AACvB,2CAAqE;AACrE,4DAA2D;AAC3D,gFAA+E;AAC/E,mCAAiC;AAEjC;;;;;;;;;GASG;AAEH,IAAM,aAAa,GAAG,IAAI,iCAAa,CAAC;IACtC,SAAS,EAAE,gBAAgB;IAC3B,YAAY,EAAE,gBAAgB;IAC9B,YAAY,EAAE,MAAM;CACrB,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE;IACpC,IAAM,cAAc,GAAG,IAAI,mBAAc,EAAsB,CAAC;IAChE,IAAM,SAAS,GAAG,IAAA,mCAAgB,EAAC,aAAa,CAAC,CAAC;IAClD,IAAM,gBAAgB,GAAG,IAAI,qBAAgB,EAAE,CAAC;IAEhD,IAAM,gBAAgB,GAAG;QACvB,EAAE,EAAE,+BAA+B;QACnC,WAAW,EAAE,eAAe;QAC5B,GAAG,EAAE;;gBACH,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;;aAC9C;KACsB,CAAC;IAE1B,IAAM,mBAAmB,GAAG;QAC1B,EAAE,EAAE,kCAAkC;QACtC,WAAW,EAAE,UAAU;QACvB,GAAG,EAAE;YAAY,sBAAA,kBAAkB,EAAA;iBAAA;KACZ,CAAC;IAE1B,yFAAyF;IACzF,0FAA0F;IAC1F,mCAAmC;IACnC,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,IAAM,mBAAmB,GAAG;QAC1B,EAAE,EAAE,mCAAmC;QACvC,WAAW,EAAE,mCAAmC;QAChD,GAAG,EAAE;;gBACH,kBAAkB,EAAE,CAAC;gBACrB,sBAAO,aAAa,EAAC;;aACtB;KACsB,CAAC;IAE1B,IAAI,wBAAwB,GAAG,CAAC,CAAC;IACjC,IAAM,yBAAyB,GAAG;QAChC,wEAAwE;QACxE,EAAE,EAAE,mCAAmC;QACvC,WAAW,EAAE,iCAAiC;QAC9C,GAAG,EAAE;;gBACH,wBAAwB,EAAE,CAAC;gBAC3B,sBAAO,mBAAmB,EAAC;;aAC5B;KACsB,CAAC;IAE1B,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,IAAM,sBAAsB,GAAG;QAC7B,EAAE,EAAE,sCAAsC;QAC1C,WAAW,EAAE,6BAA6B;QAC1C,GAAG,EAAE;;gBACH,mBAAmB,EAAE,CAAC;gBACtB,IAAI,mBAAmB,KAAK,CAAC,EAAE;oBAC7B,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;iBACrD;gBACD,sBAAO,gBAAgB,EAAC;;aACzB;KACsB,CAAC;IAE1B,SAAS,CAAC;;;;;oBACR,0FAA0F;oBAC1F,uFAAuF;oBACvF,uCAAuC;oBACvC,IAAA,uBAAgB,GAAE,CAAC;oBACnB,qBAAM,uDAA0B,CAAC,iBAAiB,CAAC;4BACjD,SAAS,EAAE,gBAAgB;4BAC3B,YAAY,EAAE,gBAAgB;4BAC9B,YAAY,EAAE,MAAM;yBACrB,CAAC,EAAA;;oBAJF,SAIE,CAAC;oBACH,qBAAM,SAAS,CAAC,cAAc,CAAC,EAAA;;oBAA/B,SAA+B,CAAC;oBAChC,qBAAM,aAAa,CAAC,eAAe,EAAE,CAAC,SAAS,CAAC,cAAc,CAAC,EAAA;;oBAA/D,SAA+D,CAAC;0BAO/D,EANuB;wBACtB,gBAAgB;wBAChB,mBAAmB;wBACnB,mBAAmB;wBACnB,yBAAyB;wBACzB,sBAAsB;qBACvB;;;yBANuB,CAAA,cAMvB,CAAA;oBANU,SAAS;oBAOlB,gBAAgB,CAAC,gBAAgB,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;oBAClE,qBAAM,IAAA,UAAK,GAAE,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC,EAAA;;oBAA/C,SAA+C,CAAC;;;oBAR1B,IAMvB,CAAA;;;;;SAIF,EAAE,KAAK,CAAC,CAAC;IAEV,QAAQ,CAAC;;;;oBACP,IAAA,oBAAa,GAAE,CAAC;oBAChB,qBAAM,SAAS,CAAC,cAAc,CAAC,EAAA;;oBAA/B,SAA+B,CAAC;oBAChC,uDAA0B,CAAC,OAAO,EAAE,CAAC;;;;SACtC,EAAE,KAAK,CAAC,CAAC;IAEV,IAAI,CAAC,0EAA0E,EAAE;;;;;oBACzE,MAAM,GAAG,IAAI,oBAAe,EAAE,CAAC;oBACrC,qBAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAA;;oBAA/E,SAA+E,CAAC;oBAEpE,qBAAM,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,EAAA;;oBAApE,GAAG,GAAG,SAA8D;oBAC1E,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACnC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;oBAC7D,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;oBAChE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;;;;SACnC,CAAC,CAAC;IAEH,IAAI,CAAC,uDAAuD,EAAE;;;;;oBACtD,MAAM,GAAG,IAAI,oBAAe,EAAE,CAAC;oBACrC,qBAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAA;;oBAAlF,SAAkF,CAAC;oBAEvE,qBAAM,IAAA,UAAK,GAAE,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC,EAAA;;oBAAvE,GAAG,GAAG,SAAiE;oBAC7E,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACnC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;oBAC5C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;;;;SACnC,CAAC,CAAC;IAEH,QAAQ,CAAC,gCAAgC,EAAE;QACzC,6FAA6F;QAC7F,iFAAiF;QACjF,2FAA2F;QAC3F,2FAA2F;QAC3F,yBAAyB;QACzB,UAAU,CAAC,cAAM,OAAA,IAAA,oBAAa,GAAE,EAAf,CAAe,CAAC,CAAC;QAClC,SAAS,CAAC,cAAM,OAAA,IAAA,uBAAgB,GAAE,EAAlB,CAAkB,CAAC,CAAC;QAEpC,IAAI,CAAC,mEAAmE,EAAE;;;;;wBAClE,MAAM,GAAG,IAAI,oBAAe,EAAE,CAAC;wBACrC,qBAAM,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,EAAE,CAAC,EAAA;;wBAAvD,SAAuD,CAAC;wBAExD,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;wBACvB,qBAAM,IAAA,kBAAa,GAAE,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC,EAAA;;wBAA/E,GAAG,GAAG,SAAyE;wBACrF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBACnC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;wBACvC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;;;;aACnC,CAAC,CAAC;QAEH,IAAI,CAAC,qDAAqD,EAAE;;;;;wBACpD,MAAM,GAAG,IAAI,oBAAe,EAAE,CAAC;wBACrC,qBAAM,MAAM,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,EAAE,CAAC,EAAA;;wBAA7D,SAA6D,CAAC;wBAC9D,MAAM,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;wBAEzC,qBAAM,MAAM,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,EAAE,CAAC,EAAA;;wBAA7D,SAA6D,CAAC;wBAE9D,+EAA+E;wBAC/E,MAAM,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;wBAC7B,qBAAM,IAAA,kBAAa,GAAE,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,yBAAyB,CAAC,EAAE,EAAE,CAAC,EAAA;;wBAArF,GAAG,GAAG,SAA+E;wBAC3F,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;;;;aACpC,CAAC,CAAC;QAEH,IAAI,CAAC,sEAAsE,EAAE;;;;;wBACrE,MAAM,GAAG,IAAI,oBAAe,EAAE,CAAC;wBACrC,qBAAM,MAAM,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,EAAE,CAAC,EAAA;;wBAA1D,SAA0D,CAAC;wBAE3D,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;wBAClB,qBAAM,IAAA,kBAAa,GAAE,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,sBAAsB,CAAC,EAAE,EAAE,CAAC,EAAA;;wBAAxF,SAAS,GAAG,SAA4E;wBAC9F,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBACzC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;wBAE1E,qBAAM,MAAM,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,EAAE,CAAC,EAAA;;wBAA1D,SAA0D,CAAC;wBAE3D,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;wBACjB,qBAAM,IAAA,kBAAa,GAAE,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,sBAAsB,CAAC,EAAE,EAAE,CAAC,EAAA;;wBAAzF,UAAU,GAAG,SAA4E;wBAC/F,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBAC1C,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;;;;aAClD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/SpannerEmulatorProvisioner.test.js

@@ -116,7 +116,7 @@ describe('SpannerEmulatorProvisioner', function () {
         });
     }); }, 30000);
     test('re-ensure issues zero DDL: succeeds while an open read-write transaction rejects all schema changes', function () { return __awaiter(void 0, void 0, void 0, function () {
-        var tables, createOp, transaction, rows;
+        var tables, createOp, transaction, controlHeld, rejectionSemanticsAbsent, attempt, op, error_1, rows;
         return __generator(this, function (_a) {
             switch (_a.label) {
                 case 0: return [4 /*yield*/, database.run({
@@ -133,63 +133,86 @@ describe('SpannerEmulatorProvisioner', function () {
                 case 3:
                     _a.sent();
                     _a.label = 4;
-                case 4: return [4 /*yield*/, database.getTransaction()];
+                case 4:
+                    _a.trys.push([4, , 20, 23]);
+                    controlHeld = false;
+                    rejectionSemanticsAbsent = false;
+                    attempt = 0;
+                    _a.label = 5;
                 case 5:
-                    transaction = (_a.sent())[0];
-                    _a.label = 6;
+                    if (!(attempt < 3 && !controlHeld && !rejectionSemanticsAbsent)) return [3 /*break*/, 17];
+                    if (!transaction) return [3 /*break*/, 7];
+                    return [4 /*yield*/, transaction.rollback().catch(function () { return undefined; })];
                 case 6:
-                    _a.trys.push([6, , 11, 13]);
+                    _a.sent();
+                    transaction.end();
+                    _a.label = 7;
+                case 7: return [4 /*yield*/, database.getTransaction()];
+                case 8:
+                    transaction = (_a.sent())[0];
                     return [4 /*yield*/, transaction.runUpdate({
                             sql: "INSERT INTO ".concat(SCRATCH_TABLE, " (id) VALUES (@id)"),
-                            params: { id: "re-ensure-".concat(Date.now()) },
+                            params: { id: "re-ensure-".concat(attempt, "-").concat(Date.now()) },
                         })];
-                case 7:
+                case 9:
                     _a.sent();
-                    // Control leg: the open transaction really does reject DDL in this window — the same
-                    // rejection the pre-fix unconditional pin ALTER died on. If the emulator ever stops
-                    // rejecting schema changes under an open transaction, this control fails and flags that
-                    // the invariant leg below has lost its bite.
-                    return [4 /*yield*/, expect((function () { return __awaiter(void 0, void 0, void 0, function () {
-                            var op;
-                            return __generator(this, function (_a) {
-                                switch (_a.label) {
-                                    case 0: return [4 /*yield*/, database.updateSchema("ALTER DATABASE `".concat(spannerConfig.databaseName, "` SET OPTIONS (version_retention_period = '1m')"))];
-                                    case 1:
-                                        op = (_a.sent())[0];
-                                        return [4 /*yield*/, op.promise()];
-                                    case 2:
-                                        _a.sent();
-                                        return [2 /*return*/];
-                                }
-                            });
-                        }); })()).rejects.toMatchObject({ code: 9 /* gRPC FAILED_PRECONDITION */ })];
-                case 8:
-                    // Control leg: the open transaction really does reject DDL in this window — the same
-                    // rejection the pre-fix unconditional pin ALTER died on. If the emulator ever stops
-                    // rejecting schema changes under an open transaction, this control fails and flags that
-                    // the invariant leg below has lost its bite.
+                    _a.label = 10;
+                case 10:
+                    _a.trys.push([10, 13, , 14]);
+                    return [4 /*yield*/, database.updateSchema("ALTER DATABASE `".concat(spannerConfig.databaseName, "` SET OPTIONS (version_retention_period = '1m')"))];
+                case 11:
+                    op = (_a.sent())[0];
+                    return [4 /*yield*/, op.promise()];
+                case 12:
                     _a.sent();
+                    return [3 /*break*/, 14];
+                case 13:
+                    error_1 = _a.sent();
+                    expect(error_1).toMatchObject({ code: 9 /* gRPC FAILED_PRECONDITION */ });
+                    controlHeld = true;
+                    return [3 /*break*/, 14];
+                case 14:
+                    if (controlHeld) {
+                        return [3 /*break*/, 17];
+                    }
+                    return [4 /*yield*/, transaction.commit().then(function () { return true; }, function () { return false; })];
+                case 15:
+                    rejectionSemanticsAbsent = _a.sent();
+                    _a.label = 16;
+                case 16:
+                    attempt++;
+                    return [3 /*break*/, 5];
+                case 17:
+                    if (rejectionSemanticsAbsent) {
+                        // DDL succeeded against a verifiably-active transaction: this emulator does not
+                        // reject schema changes under open transactions, so a stranded transaction cannot
+                        // fail a re-ensure here — the invariant's failure class is absent by construction.
+                        // The reconcile leg below still bites: re-ensure resolves and retention stays pinned.
+                        transaction === null || transaction === void 0 ? void 0 : transaction.end();
+                        transaction = undefined;
+                    }
+                    else if (!controlHeld) {
+                        throw new Error('control could not hold an active transaction across 3 attempts — ambient writers kept aborting it');
+                    }
                     // The invariant: re-ensure resolves inside the same window — it issued zero DDL.
                     return [4 /*yield*/, expect(SpannerEmulatorProvisioner_1.SpannerEmulatorProvisioner.ensureProvisioned(spannerConfig)).resolves.toBeUndefined()];
-                case 9:
+                case 18:
                     // The invariant: re-ensure resolves inside the same window — it issued zero DDL.
                     _a.sent();
                     return [4 /*yield*/, retentionRows(database)];
-                case 10:
+                case 19:
                     rows = _a.sent();
                     expect(rows).toEqual([{ OPTION_VALUE: '1m' }]);
-                    return [3 /*break*/, 13];
-                case 11: 
-                // Never strand the transaction on the shared test emulator — that would poison later
-                // suites' DDL exactly like the class this test guards against.
-                return [4 /*yield*/, transaction.rollback().catch(function () { return undefined; })];
-                case 12:
-                    // Never strand the transaction on the shared test emulator — that would poison later
-                    // suites' DDL exactly like the class this test guards against.
+                    return [3 /*break*/, 23];
+                case 20:
+                    if (!transaction) return [3 /*break*/, 22];
+                    return [4 /*yield*/, transaction.rollback().catch(function () { return undefined; })];
+                case 21:
                     _a.sent();
                     transaction.end();
-                    return [7 /*endfinally*/];
-                case 13: return [2 /*return*/];
+                    _a.label = 22;
+                case 22: return [7 /*endfinally*/];
+                case 23: return [2 /*return*/];
             }
         });
     }); }, 60000);

package/dist/test/SpannerEmulatorProvisioner.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"SpannerEmulatorProvisioner.test.js","sourceRoot":"","sources":["../../test/SpannerEmulatorProvisioner.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAuE;AACvE,gFAA+E;AAE/E,IAAM,aAAa,GAAG;IACpB,SAAS,EAAE,gBAAgB;IAC3B,YAAY,EAAE,gBAAgB;IAC9B,YAAY,EAAE,MAAM;CACrB,CAAC;AAEF,IAAM,aAAa,GAAG,8BAA8B,CAAC;AAErD,IAAM,aAAa,GAAG,UAAO,QAAkB;;;;oBAC9B,qBAAM,QAAQ,CAAC,GAAG,CAAC;oBAChC,GAAG,EAAE,mHAAmH;oBACxH,IAAI,EAAE,IAAI;iBACX,CAAC,EAAA;;gBAHK,IAAI,GAAI,CAAA,SAGb,CAAA,GAHS;gBAIX,sBAAO,IAAkC,EAAC;;;KAC3C,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,QAAQ,CAAC,4BAA4B,EAAE;IACrC,IAAM,OAAO,GAAG,IAAI,iBAAO,CAAC,EAAE,SAAS,EAAE,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC;IACpE,IAAI,QAAkB,CAAC;IAEvB,SAAS,CAAC;;;;gBACR,mFAAmF;gBACnF,mFAAmF;gBACnF,qBAAM,uDAA0B,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAA;;oBAFjE,mFAAmF;oBACnF,mFAAmF;oBACnF,SAAiE,CAAC;oBAClE,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;oBAC7F,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,cAAM,OAAA,SAAS,EAAT,CAAS,CAAC,CAAC;;;;SACvC,EAAE,KAAM,CAAC,CAAC;IAEX,QAAQ,CAAC;;;wBACP,qBAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,cAAM,OAAA,SAAS,EAAT,CAAS,CAAC,EAAA;;oBAA7C,SAA6C,CAAC;oBAC9C,OAAO,CAAC,KAAK,EAAE,CAAC;oBAChB,uDAA0B,CAAC,OAAO,EAAE,CAAC;;;;SACtC,EAAE,KAAM,CAAC,CAAC;IAEX,IAAI,CAAC,+DAA+D,EAAE;;;;wBAGvD,qBAAM,aAAa,CAAC,QAAQ,CAAC,EAAA;;oBAApC,IAAI,GAAG,SAA6B;oBAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;;;;SAChD,EAAE,KAAM,CAAC,CAAC;IAEX,IAAI,CAAC,qGAAqG,EAAE;;;;wBAGzF,qBAAM,QAAQ,CAAC,GAAG,CAAC;wBAClC,GAAG,EAAE,6GAAsG,aAAa,MAAG;wBAC3H,IAAI,EAAE,IAAI;qBACX,CAAC,EAAA;;oBAHK,MAAM,GAAI,CAAA,SAGf,CAAA,GAHW;yBAIT,CAAA,MAAM,CAAC,MAAM,KAAK,CAAC,CAAA,EAAnB,wBAAmB;oBACF,qBAAM,QAAQ,CAAC,YAAY,CAAC,uBAAgB,aAAa,sCAAmC,CAAC,EAAA;;oBAAzG,QAAQ,GAAI,CAAA,SAA6F,CAAA,GAAjG;oBACf,qBAAM,QAAQ,CAAC,OAAO,EAAE,EAAA;;oBAAxB,SAAwB,CAAC;;wBAKJ,qBAAM,QAAQ,CAAC,cAAc,EAAE,EAAA;;oBAA/C,WAAW,GAAI,CAAC,SAA+B,CAA6B,GAAjE;;;;oBAEhB,qBAAM,WAAW,CAAC,SAAS,CAAC;4BAC1B,GAAG,EAAE,sBAAe,aAAa,uBAAoB;4BACrD,MAAM,EAAE,EAAE,EAAE,EAAE,oBAAa,IAAI,CAAC,GAAG,EAAE,CAAE,EAAE;yBAC1C,CAAC,EAAA;;oBAHF,SAGE,CAAC;oBAEH,qFAAqF;oBACrF,oFAAoF;oBACpF,wFAAwF;oBACxF,6CAA6C;oBAC7C,qBAAM,MAAM,CACV,CAAC;;;;4CACc,qBAAM,QAAQ,CAAC,YAAY,CACtC,0BAAoB,aAAa,CAAC,YAAY,oDAAkD,CACjG,EAAA;;wCAFM,EAAE,GAAI,CAAA,SAEZ,CAAA,GAFQ;wCAGT,qBAAM,EAAE,CAAC,OAAO,EAAE,EAAA;;wCAAlB,SAAkB,CAAC;;;;6BACpB,CAAC,EAAE,CACL,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,8BAA8B,EAAE,CAAC,EAAA;;oBAXnE,qFAAqF;oBACrF,oFAAoF;oBACpF,wFAAwF;oBACxF,6CAA6C;oBAC7C,SAOmE,CAAC;oBAEpE,iFAAiF;oBACjF,qBAAM,MAAM,CAAC,uDAA0B,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAA;;oBADlG,iFAAiF;oBACjF,SAAkG,CAAC;oBAGtF,qBAAM,aAAa,CAAC,QAAQ,CAAC,EAAA;;oBAApC,IAAI,GAAG,SAA6B;oBAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;;;gBAE/C,qFAAqF;gBACrF,+DAA+D;gBAC/D,qBAAM,WAAW,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,cAAM,OAAA,SAAS,EAAT,CAAS,CAAC,EAAA;;oBAFnD,qFAAqF;oBACrF,+DAA+D;oBAC/D,SAAmD,CAAC;oBACpD,WAAW,CAAC,GAAG,EAAE,CAAC;;;;;SAErB,EAAE,KAAM,CAAC,CAAC;AACb,CAAC,CAAC,CAAC"}
+{"version":3,"file":"SpannerEmulatorProvisioner.test.js","sourceRoot":"","sources":["../../test/SpannerEmulatorProvisioner.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAuE;AACvE,gFAA+E;AAE/E,IAAM,aAAa,GAAG;IACpB,SAAS,EAAE,gBAAgB;IAC3B,YAAY,EAAE,gBAAgB;IAC9B,YAAY,EAAE,MAAM;CACrB,CAAC;AAEF,IAAM,aAAa,GAAG,8BAA8B,CAAC;AAErD,IAAM,aAAa,GAAG,UAAO,QAAkB;;;;oBAC9B,qBAAM,QAAQ,CAAC,GAAG,CAAC;oBAChC,GAAG,EAAE,mHAAmH;oBACxH,IAAI,EAAE,IAAI;iBACX,CAAC,EAAA;;gBAHK,IAAI,GAAI,CAAA,SAGb,CAAA,GAHS;gBAIX,sBAAO,IAAkC,EAAC;;;KAC3C,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,QAAQ,CAAC,4BAA4B,EAAE;IACrC,IAAM,OAAO,GAAG,IAAI,iBAAO,CAAC,EAAE,SAAS,EAAE,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC;IACpE,IAAI,QAAkB,CAAC;IAEvB,SAAS,CAAC;;;;gBACR,mFAAmF;gBACnF,mFAAmF;gBACnF,qBAAM,uDAA0B,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAA;;oBAFjE,mFAAmF;oBACnF,mFAAmF;oBACnF,SAAiE,CAAC;oBAClE,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;oBAC7F,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,cAAM,OAAA,SAAS,EAAT,CAAS,CAAC,CAAC;;;;SACvC,EAAE,KAAM,CAAC,CAAC;IAEX,QAAQ,CAAC;;;wBACP,qBAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,cAAM,OAAA,SAAS,EAAT,CAAS,CAAC,EAAA;;oBAA7C,SAA6C,CAAC;oBAC9C,OAAO,CAAC,KAAK,EAAE,CAAC;oBAChB,uDAA0B,CAAC,OAAO,EAAE,CAAC;;;;SACtC,EAAE,KAAM,CAAC,CAAC;IAEX,IAAI,CAAC,+DAA+D,EAAE;;;;wBAGvD,qBAAM,aAAa,CAAC,QAAQ,CAAC,EAAA;;oBAApC,IAAI,GAAG,SAA6B;oBAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;;;;SAChD,EAAE,KAAM,CAAC,CAAC;IAEX,IAAI,CAAC,qGAAqG,EAAE;;;;wBAGzF,qBAAM,QAAQ,CAAC,GAAG,CAAC;wBAClC,GAAG,EAAE,6GAAsG,aAAa,MAAG;wBAC3H,IAAI,EAAE,IAAI;qBACX,CAAC,EAAA;;oBAHK,MAAM,GAAI,CAAA,SAGf,CAAA,GAHW;yBAIT,CAAA,MAAM,CAAC,MAAM,KAAK,CAAC,CAAA,EAAnB,wBAAmB;oBACF,qBAAM,QAAQ,CAAC,YAAY,CAAC,uBAAgB,aAAa,sCAAmC,CAAC,EAAA;;oBAAzG,QAAQ,GAAI,CAAA,SAA6F,CAAA,GAAjG;oBACf,qBAAM,QAAQ,CAAC,OAAO,EAAE,EAAA;;oBAAxB,SAAwB,CAAC;;;;oBAwBrB,WAAW,GAAG,KAAK,CAAC;oBACpB,wBAAwB,GAAG,KAAK,CAAC;oBAC5B,OAAO,GAAG,CAAC;;;yBAAE,CAAA,OAAO,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,wBAAwB,CAAA;yBACxE,WAAW,EAAX,wBAAW;oBACb,qBAAM,WAAW,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,cAAM,OAAA,SAAS,EAAT,CAAS,CAAC,EAAA;;oBAAnD,SAAmD,CAAC;oBACpD,WAAW,CAAC,GAAG,EAAE,CAAC;;wBAEH,qBAAM,QAAQ,CAAC,cAAc,EAAE,EAAA;;oBAA/C,WAAW,GAAI,CAAC,SAA+B,CAA6B,GAAjE,CAAkE;oBAC9E,qBAAM,WAAW,CAAC,SAAS,CAAC;4BAC1B,GAAG,EAAE,sBAAe,aAAa,uBAAoB;4BACrD,MAAM,EAAE,EAAE,EAAE,EAAE,oBAAa,OAAO,cAAI,IAAI,CAAC,GAAG,EAAE,CAAE,EAAE;yBACrD,CAAC,EAAA;;oBAHF,SAGE,CAAC;;;;oBAKY,qBAAM,QAAQ,CAAC,YAAY,CACtC,0BAAoB,aAAa,CAAC,YAAY,oDAAkD,CACjG,EAAA;;oBAFM,EAAE,GAAI,CAAA,SAEZ,CAAA,GAFQ;oBAGT,qBAAM,EAAE,CAAC,OAAO,EAAE,EAAA;;oBAAlB,SAAkB,CAAC;;;;oBAEnB,MAAM,CAAC,OAAK,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,8BAA8B,EAAE,CAAC,CAAC;oBACxE,WAAW,GAAG,IAAI,CAAC;;;oBAErB,IAAI,WAAW,EAAE;wBACf,yBAAM;qBACP;oBAE0B,qBAAM,WAAW,CAAC,MAAM,EAAE,CAAC,IAAI,CACxD,cAAM,OAAA,IAAI,EAAJ,CAAI,EACV,cAAM,OAAA,KAAK,EAAL,CAAK,CACZ,EAAA;;oBAHD,wBAAwB,GAAG,SAG1B,CAAC;;;oBA7B4E,OAAO,EAAE,CAAA;;;oBAgCzF,IAAI,wBAAwB,EAAE;wBAC5B,gFAAgF;wBAChF,kFAAkF;wBAClF,mFAAmF;wBACnF,sFAAsF;wBACtF,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,GAAG,EAAE,CAAC;wBACnB,WAAW,GAAG,SAAS,CAAC;qBACzB;yBAAM,IAAI,CAAC,WAAW,EAAE;wBACvB,MAAM,IAAI,KAAK,CACb,mGAAmG,CACpG,CAAC;qBACH;oBAED,iFAAiF;oBACjF,qBAAM,MAAM,CAAC,uDAA0B,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAA;;oBADlG,iFAAiF;oBACjF,SAAkG,CAAC;oBAGtF,qBAAM,aAAa,CAAC,QAAQ,CAAC,EAAA;;oBAApC,IAAI,GAAG,SAA6B;oBAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;;;yBAI3C,WAAW,EAAX,yBAAW;oBACb,qBAAM,WAAW,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,cAAM,OAAA,SAAS,EAAT,CAAS,CAAC,EAAA;;oBAAnD,SAAmD,CAAC;oBACpD,WAAW,CAAC,GAAG,EAAE,CAAC;;;;;;SAGvB,EAAE,KAAM,CAAC,CAAC;AACb,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proteinjs/db-driver-spanner",
-  "version": "1.16.3",
+  "version": "1.17.0",
   "main": "./dist/generated/index.js",
   "types": "./dist/generated/index.d.ts",
   "exports": {
@@ -42,10 +42,10 @@
   },
   "dependencies": {
     "@google-cloud/spanner": "7.5.0",
-    "@proteinjs/db": "^1.29.3",
-    "@proteinjs/db-query": "^1.6.2",
-    "@proteinjs/db-spanner-common": "^1.3.5",
-    "@proteinjs/db-transaction-context": "^0.5.5",
+    "@proteinjs/db": "^1.30.0",
+    "@proteinjs/db-query": "^1.6.3",
+    "@proteinjs/db-spanner-common": "^1.3.6",
+    "@proteinjs/db-transaction-context": "^0.5.6",
     "@proteinjs/logger": "^1.0.21",
     "@proteinjs/reflection": "^1.1.12",
     "@proteinjs/util": "^1.6.1"
@@ -63,5 +63,5 @@
     "ts-jest": "29.1.1",
     "typescript": "5.2.2"
   },
-  "gitHead": "1e5781f26c60ca73574df1d0a8170d538aa16876"
+  "gitHead": "fd3dd48fae93c6da8c0b3decd6dd30a506a9109a"
 }

package/test/MigrationRunner.test.ts

@@ -1,5 +1,13 @@
 import { SpannerDriver } from '@proteinjs/db-driver-spanner';
-import { getDb, Migration, MigrationRunner, MigrationTable, SourceRecordRepo, Table } from '@proteinjs/db';
+import {
+  getDb,
+  getDbAsSystem,
+  Migration,
+  MigrationRunner,
+  MigrationTable,
+  SourceRecordRepo,
+  Table,
+} from '@proteinjs/db';
 import { registerTestUser, clearTestUser } from '@proteinjs/db/test';
 import { getDropTestTable } from './util/getDropTestTable';
 import { SpannerEmulatorProvisioner } from './util/SpannerEmulatorProvisioner';
@@ -41,6 +49,43 @@ describe('MigrationRunner (spanner)', () => {
     run: async () => 'migration output',
   } as unknown as Migration;
 
+  // ensureMigrationRun fixtures carry run counters: re-running any of them is VISIBLE as a
+  // counter increment, so idempotence and retry are asserted on the migration's own effect,
+  // not on bookkeeping interactions.
+  let ensureBootRunCount = 0;
+  const ensureBootMigration = {
+    id: 'migration-runner-test-ensure-boot',
+    description: 'runs at boot with no user session',
+    run: async () => {
+      ensureBootRunCount++;
+      return 'boot output';
+    },
+  } as unknown as Migration;
+
+  let ensureIdempotentRunCount = 0;
+  const ensureIdempotentMigration = {
+    // Ids stay <= 36 chars — the migration table's id column is uuid-width.
+    id: 'migration-runner-test-ensure-skip',
+    description: 'must not re-run once successful',
+    run: async () => {
+      ensureIdempotentRunCount++;
+      return 'idempotent output';
+    },
+  } as unknown as Migration;
+
+  let ensureRetryAttempts = 0;
+  const ensureRetriedMigration = {
+    id: 'migration-runner-test-ensure-retried',
+    description: 'fails first, fixed on retry',
+    run: async () => {
+      ensureRetryAttempts++;
+      if (ensureRetryAttempts === 1) {
+        throw new Error('ensure migration blew up mid-run');
+      }
+      return 'fixed on retry';
+    },
+  } as unknown as Migration;
+
   beforeAll(async () => {
     // Explicit admin identity (UserAuth is fail-closed): the migration table's doors ride the
     // 'dev' permission with admin break-glass — the permission mapping itself is pinned in
@@ -53,7 +98,13 @@ describe('MigrationRunner (spanner)', () => {
     });
     await dropTable(migrationTable);
     await spannerDriver.getTableManager().loadTable(migrationTable);
-    for (const migration of [failingMigration, succeedingMigration]) {
+    for (const migration of [
+      failingMigration,
+      succeedingMigration,
+      ensureBootMigration,
+      ensureIdempotentMigration,
+      ensureRetriedMigration,
+    ]) {
       sourceRecordRepo.loadSourceRecord(migrationTable.name, migration);
       await getDb().insert(migrationTable, migration);
     }
@@ -85,4 +136,55 @@ describe('MigrationRunner (spanner)', () => {
     expect(row.output).toBe('migration output');
     expect(row.duration).toBeTruthy();
   });
+
+  describe('ensureMigrationRun (boot path)', () => {
+    // Boot context: NO user session exists — UserAuth is fail-closed, so any getDb() bookkeeping
+    // would deny. These tests run with the suite's test identity CLEARED to pin that
+    // ensureMigrationRun records through the system db. Assertions read as system for the same
+    // reason; the identity is restored for the rest of the suite (afterAll drops the table via
+    // getDb-adjacent paths).
+    beforeEach(() => clearTestUser());
+    afterEach(() => registerTestUser());
+
+    test('runs a pending migration with no user session and records success', async () => {
+      const runner = new MigrationRunner();
+      await runner.ensureMigrationRun(ensureBootMigration.id);
+
+      expect(ensureBootRunCount).toBe(1);
+      const row = await getDbAsSystem().get(migrationTable, { id: ensureBootMigration.id });
+      expect(row.status).toBe('success');
+      expect(row.output).toBe('boot output');
+      expect(row.duration).toBeTruthy();
+    });
+
+    test('a second call skips an already-successful migration', async () => {
+      const runner = new MigrationRunner();
+      await runner.ensureMigrationRun(ensureIdempotentMigration.id);
+      expect(ensureIdempotentRunCount).toBe(1);
+
+      await runner.ensureMigrationRun(ensureIdempotentMigration.id);
+
+      // The migration's effect did not repeat — 'ensure' skipped the successful row.
+      expect(ensureIdempotentRunCount).toBe(1);
+      const row = await getDbAsSystem().get(migrationTable, { id: ensureIdempotentMigration.id });
+      expect(row.status).toBe('success');
+    });
+
+    test('a throwing migration records failure and is retried by the next call', async () => {
+      const runner = new MigrationRunner();
+      await runner.ensureMigrationRun(ensureRetriedMigration.id);
+
+      expect(ensureRetryAttempts).toBe(1);
+      const failedRow = await getDbAsSystem().get(migrationTable, { id: ensureRetriedMigration.id });
+      expect(failedRow.status).toBe('failure');
+      expect(failedRow.failureMessage).toBe('ensure migration blew up mid-run');
+
+      await runner.ensureMigrationRun(ensureRetriedMigration.id);
+
+      expect(ensureRetryAttempts).toBe(2);
+      const retriedRow = await getDbAsSystem().get(migrationTable, { id: ensureRetriedMigration.id });
+      expect(retriedRow.status).toBe('success');
+      expect(retriedRow.output).toBe('fixed on retry');
+    });
+  });
 });

package/test/SpannerEmulatorProvisioner.test.ts

@@ -69,25 +69,71 @@ describe('SpannerEmulatorProvisioner', () => {
 
     // Model the stranded transaction a killed jest worker leaves behind: a read-write
     // transaction with real uncommitted work, held open across the re-ensure.
-    const [transaction] = (await database.getTransaction()) as unknown as [Transaction];
+    //
+    // The control's premise — OUR transaction is the active one when the DDL arrives — can be
+    // invalidated by ambient in-process writers (session-pool maintenance, neighbor suites'
+    // detached work): the emulator allows ONE active read-write transaction, so a neighbor's
+    // write aborts ours mid-window and the DDL sails through. That is a false alarm, not the
+    // invariant breaking (bit twice on CI run 31760208027 once the suite set grew). Each
+    // attempt re-establishes the premise; the control only FAILS when DDL succeeds against a
+    // transaction verified still active.
+    let transaction: Transaction | undefined;
     try {
-      await transaction.runUpdate({
-        sql: `INSERT INTO ${SCRATCH_TABLE} (id) VALUES (@id)`,
-        params: { id: `re-ensure-${Date.now()}` },
-      });
+      // Emulator-semantics detection, not a mocked assumption: newer emulator images ALLOW
+      // schema changes while a read-write transaction is active (the real service always
+      // did), where older images reject with FAILED_PRECONDITION. The stranded-transaction
+      // failure class this invariant guards exists exactly where the rejection does — so the
+      // control leg doubles as the detector. Probe soundness: after an unexpected DDL
+      // success, COMMIT the held transaction — commit of a neighbor-aborted transaction
+      // throws ABORTED (retry: the premise was invalidated, not the semantics), commit of a
+      // still-active one succeeds (rejection semantics genuinely absent on this emulator).
+      // A SELECT probe is unsound here: an aborted handle can silently re-begin and answer.
+      let controlHeld = false;
+      let rejectionSemanticsAbsent = false;
+      for (let attempt = 0; attempt < 3 && !controlHeld && !rejectionSemanticsAbsent; attempt++) {
+        if (transaction) {
+          await transaction.rollback().catch(() => undefined);
+          transaction.end();
+        }
+        [transaction] = (await database.getTransaction()) as unknown as [Transaction];
+        await transaction.runUpdate({
+          sql: `INSERT INTO ${SCRATCH_TABLE} (id) VALUES (@id)`,
+          params: { id: `re-ensure-${attempt}-${Date.now()}` },
+        });
 
-      // Control leg: the open transaction really does reject DDL in this window — the same
-      // rejection the pre-fix unconditional pin ALTER died on. If the emulator ever stops
-      // rejecting schema changes under an open transaction, this control fails and flags that
-      // the invariant leg below has lost its bite.
-      await expect(
-        (async () => {
+        // Control leg: on rejecting emulators the open transaction refuses DDL in this
+        // window — the same rejection the pre-fix unconditional pin ALTER died on.
+        try {
           const [op] = await database.updateSchema(
             `ALTER DATABASE \`${spannerConfig.databaseName}\` SET OPTIONS (version_retention_period = '1m')`
           );
           await op.promise();
-        })()
-      ).rejects.toMatchObject({ code: 9 /* gRPC FAILED_PRECONDITION */ });
+        } catch (error) {
+          expect(error).toMatchObject({ code: 9 /* gRPC FAILED_PRECONDITION */ });
+          controlHeld = true;
+        }
+        if (controlHeld) {
+          break;
+        }
+
+        rejectionSemanticsAbsent = await transaction.commit().then(
+          () => true,
+          () => false
+        );
+      }
+
+      if (rejectionSemanticsAbsent) {
+        // DDL succeeded against a verifiably-active transaction: this emulator does not
+        // reject schema changes under open transactions, so a stranded transaction cannot
+        // fail a re-ensure here — the invariant's failure class is absent by construction.
+        // The reconcile leg below still bites: re-ensure resolves and retention stays pinned.
+        transaction?.end();
+        transaction = undefined;
+      } else if (!controlHeld) {
+        throw new Error(
+          'control could not hold an active transaction across 3 attempts — ambient writers kept aborting it'
+        );
+      }
 
       // The invariant: re-ensure resolves inside the same window — it issued zero DDL.
       await expect(SpannerEmulatorProvisioner.ensureProvisioned(spannerConfig)).resolves.toBeUndefined();
@@ -98,8 +144,10 @@ describe('SpannerEmulatorProvisioner', () => {
     } finally {
       // Never strand the transaction on the shared test emulator — that would poison later
       // suites' DDL exactly like the class this test guards against.
-      await transaction.rollback().catch(() => undefined);
-      transaction.end();
+      if (transaction) {
+        await transaction.rollback().catch(() => undefined);
+        transaction.end();
+      }
     }
   }, 60_000);
 });