@rebasepro/server-postgres 0.18.0 → 0.19.0

package/dist/ensure-collection-tables-D4wJzM4y.js

@@ -0,0 +1,820 @@
+import { createRequire as __createRequire } from "module";
+__createRequire(import.meta.url);
+import { r as __exportAll } from "./__vite-browser-external-BnuHet1e.js";
+import { C as searchIndexStatements, S as searchHelperFunctions, _ as assertSearchIsPostgresOnly, b as searchColumnStamps, c as isIdProperty, d as planRelationalColumns, f as quoteSqlLiteral, g as SEARCH_UNACCENT_FN, h as SEARCH_TEXT_FN, p as resolveColumnName, s as getSqlColumnType, u as planJunctionTables, v as buildSearchColumnSpec, x as searchExtensionStatements } from "./generate-postgres-ddl-logic-CtnpIBVv.js";
+import { l as extractCauseMessage, u as extractPgError } from "./cli-errors-DxN4yzdH.js";
+import { i as isAuthCollection, n as authUsersColumnDefinition, r as authUsersColumnSql, t as AUTH_USERS_COLUMNS } from "./auth-users-columns-D2LBFrMH.js";
+import { c as vectorExtensionStatement, l as vectorIndexStatement, n as buildVectorColumnSpecs, o as vectorExtensionDeclared, r as buildVectorIndexPlan, s as vectorExtensionHint } from "./vector-index-DkWxm2de.js";
+import { r as collectionIndexStatement, t as buildCollectionIndexPlan } from "./collection-index-BHgT_TKd.js";
+import { isConcurrentDdlRace, isDuplicateObjectRace, logger } from "@rebasepro/server";
+import { declaredDatabaseExtensions, isPostgresCollectionConfig } from "@rebasepro/types";
+import { getTableName, relationalCollections } from "@rebasepro/common";
+//#region src/schema/column-type-drift.ts
+/**
+* Types that mean the same thing to everything above the driver.
+*
+* Keyed by every spelling either side can produce: `information_schema` reports
+* `udt_name` (`int4`, `_numeric`, `bpchar`), while the generators emit SQL
+* (`INTEGER`, `NUMERIC[]`, `CHAR(3)`). Both are normalised through here.
+*/
+var FAMILIES = {
+	int2: "number",
+	smallint: "number",
+	int4: "number",
+	int: "number",
+	integer: "number",
+	int8: "number",
+	bigint: "number",
+	numeric: "number",
+	decimal: "number",
+	float4: "number",
+	real: "number",
+	float8: "number",
+	"double precision": "number",
+	money: "number",
+	text: "text",
+	varchar: "text",
+	"character varying": "text",
+	bpchar: "text",
+	char: "text",
+	character: "text",
+	citext: "text",
+	bool: "boolean",
+	boolean: "boolean",
+	json: "json",
+	jsonb: "jsonb",
+	uuid: "uuid",
+	bytea: "bytea",
+	date: "date",
+	time: "time",
+	"time without time zone": "time",
+	timetz: "time",
+	"time with time zone": "time",
+	timestamp: "timestamp",
+	"timestamp without time zone": "timestamp",
+	timestamptz: "timestamptz",
+	"timestamp with time zone": "timestamptz",
+	interval: "interval",
+	tsvector: "tsvector",
+	vector: "vector",
+	halfvec: "halfvec",
+	sparsevec: "sparsevec"
+};
+/**
+* One SQL or `udt_name` spelling reduced to its family, or `null` when this
+* module has no opinion about it.
+*
+* `null` is not a failure. It is the answer for an enum type, a domain, a
+* PostGIS column, a quoted qualified name — everything whose identity is a
+* *name* rather than a shape, where two spellings being different says nothing
+* about whether the values are compatible.
+*/
+function typeFamily(raw) {
+	if (!raw) return null;
+	let type = raw.trim().toLowerCase();
+	if (!type) return null;
+	if (type.startsWith("\"")) return null;
+	const generated = type.indexOf(" generated ");
+	if (generated > 0) type = type.slice(0, generated).trim();
+	if (type.endsWith("[]")) {
+		const element = typeFamily(type.slice(0, -2));
+		return element && `array:${element}`;
+	}
+	if (type.startsWith("_")) {
+		const element = typeFamily(type.slice(1));
+		return element && `array:${element}`;
+	}
+	const paren = type.indexOf("(");
+	if (paren > 0) type = type.slice(0, paren).trim();
+	return FAMILIES[type] ?? null;
+}
+/**
+* Do these two spellings describe columns that hold the same kind of value?
+*
+* `true` whenever the answer is not confidently "no" — an unrecognised type on
+* either side agrees with everything, because a report needs evidence and an
+* unknown type is the absence of it.
+*/
+function typesAgree(declared, actual) {
+	const a = typeFamily(declared);
+	const b = typeFamily(actual);
+	if (a === null || b === null) return true;
+	return a === b;
+}
+/**
+* The sentence a boot log says about one drifted column.
+*
+* Written to be actionable in the place it is read, which is a runtime log with
+* no way to run a migration from it: it names both types, says which surface
+* will break first, and gives the statement that resolves it.
+*/
+function columnTypeDriftMessage(drift) {
+	const [schema, table] = drift.table.split(".");
+	return `Column "${drift.table}"."${drift.column}" is ${drift.actual} in the database, but this collection declares ${drift.declared}. Boot does not change an existing column's type, so the database keeps what it has and writes that match the declaration will be rejected by Postgres. Change it deliberately, when you can watch it:
+    ALTER TABLE "${schema}"."${table}" ALTER COLUMN "${drift.column}" TYPE ${drift.declared} USING "${drift.column}"::${drift.declared};`;
+}
+//#endregion
+//#region src/schema/ensure-collection-tables.ts
+/**
+* Bringing a database up to date with a bundle's collections, additively.
+*
+* ## Why this exists
+*
+* A managed runtime boots someone else's compiled project against a database it
+* has never seen. Auth tables are ensured at boot already, but collection tables
+* were not created by anything: the platform ran the app and every `/api/data/*`
+* request answered 500 on a missing relation. `rebase db push` cannot help — it
+* is an Atlas-driven CLI command, and the runtime image ships no CLI.
+*
+* ## Why additive-only, forever
+*
+* This runs unattended, against a database with customers' data in it, with no
+* human reading a diff. So it may only ever do things that cannot lose data:
+* create a missing table, add a missing column, create a missing enum type.
+*
+* It will **never** drop a table or a column, narrow a type, or alter a
+* constraint. A removed field leaves its column behind; a renamed field looks
+* like an addition and the old column stays. That is the correct trade for an
+* automated path — the alternative is an unattended process that can silently
+* destroy a column, which is precisely the failure `db push` was hardened
+* against. Destructive changes stay a deliberate, human-reviewed migration.
+*
+* Because of that, this is safe to run on every boot, and re-running it is a
+* no-op.
+*/
+var ensure_collection_tables_exports = /* @__PURE__ */ __exportAll({
+	describeDriverError: () => describeDriverError,
+	ensureCollectionTables: () => ensureCollectionTables,
+	planCollectionSchemaEnsure: () => planCollectionSchemaEnsure,
+	readExistingSchema: () => readExistingSchema,
+	readSchemaFactsFor: () => readSchemaFactsFor
+});
+/** Postgres identifiers this module is willing to interpolate. */
+var SAFE_IDENTIFIER = /^[A-Za-z_][A-Za-z0-9_$]*$/;
+function assertSafeIdentifier(value, what) {
+	if (!SAFE_IDENTIFIER.test(value)) throw new Error(`Refusing to build SQL with an unsafe ${what}: ${JSON.stringify(value)}`);
+	return value;
+}
+/**
+* The schema a collection lives in — validated, because it is about to be
+* interpolated into DDL.
+*
+* Validation used to run only on the names read back OUT of the catalogue,
+* which is the direction that cannot hurt anyone: those came from Postgres. The
+* names going IN — the schema and table a collection declares — were quoted and
+* concatenated on trust, and quoting is not escaping. A table named
+* `x" (id int); DROP TABLE users; --` closes the quote and the statement, and
+* the whole thing runs on the owner connection, which is the one connection in
+* the system that is exempt from every RLS policy.
+*
+* That is only a config file on a self-hosted project, where the person writing
+* it could run the SQL directly anyway. It is not only a config file where a
+* collection can be defined over the wire — the live-schema and source editors
+* both do that — and there the caller is an admin on the app, not an operator
+* of the database.
+*/
+function schemaOf(collection) {
+	return assertSafeIdentifier(isPostgresCollectionConfig(collection) && collection.schema ? collection.schema : "public", "schema name");
+}
+/** A collection's table name, validated for the same reason as {@link schemaOf}. */
+function tableOf(collection) {
+	return assertSafeIdentifier(getTableName(collection), "table name");
+}
+function qualified(collection) {
+	return `${schemaOf(collection)}.${tableOf(collection)}`;
+}
+/**
+* Enum types a collection's properties require, as `schema.typename`.
+*
+* Named exactly as the DDL generator names them (`<table>_<column>`), because
+* a column added here has to reference the same type the generator would have
+* created — a second, differently-named type for the same field would be a
+* silent schema fork.
+*/
+function requiredEnums(collection) {
+	const table = tableOf(collection);
+	const schema = schemaOf(collection);
+	const out = [];
+	for (const [propName, prop] of Object.entries(collection.properties ?? {})) {
+		const p = prop;
+		if (!("enum" in p) || !p.enum) continue;
+		if (p.type !== "string" && p.type !== "number") continue;
+		const values = p.enum.map((entry) => entry && typeof entry === "object" && "id" in entry ? String(entry.id) : String(entry)).filter((v) => v.length > 0);
+		if (values.length === 0) continue;
+		out.push({
+			name: `${schema}.${table}_${resolveColumnName(propName, p)}`,
+			values
+		});
+	}
+	return out;
+}
+/**
+* Decide what to add. Pure — the caller supplies what exists and runs the result.
+*
+* Ordering matters and is deliberate: enum types before the tables and columns
+* that reference them, tables before the columns added to other tables (a new
+* table may be the target of a relation), and nothing is emitted twice.
+*/
+function planCollectionSchemaEnsure(allCollections, existing, options = {}) {
+	const constraintPolicy = options.constraints ?? "additive";
+	const withheldConstraints = [];
+	const columnTypeDrift = [];
+	assertSearchIsPostgresOnly(allCollections);
+	const collections = relationalCollections(allCollections);
+	const actions = [];
+	const plannedEnums = /* @__PURE__ */ new Set();
+	for (const collection of collections) for (const { name, values } of requiredEnums(collection)) {
+		if (existing.enums.has(name) || plannedEnums.has(name)) {
+			const current = existing.enumValues?.get(name);
+			if (!current || plannedEnums.has(name)) continue;
+			const [schema, typeName] = name.split(".");
+			for (const value of values) {
+				if (current.includes(value)) continue;
+				actions.push({
+					kind: "add-enum-value",
+					target: `${name}.${value}`,
+					sql: `ALTER TYPE "${schema}"."${typeName}" ADD VALUE IF NOT EXISTS ${quoteSqlLiteral(value)};`
+				});
+			}
+			continue;
+		}
+		plannedEnums.add(name);
+		const [schema, typeName] = name.split(".");
+		actions.push({
+			kind: "create-enum",
+			target: name,
+			sql: `CREATE TYPE "${schema}"."${typeName}" AS ENUM (${values.map(quoteSqlLiteral).join(", ")});`
+		});
+	}
+	const searchSpecs = collections.map((c) => buildSearchColumnSpec(c)).filter((spec) => spec !== void 0);
+	const plannedExtensions = /* @__PURE__ */ new Set();
+	const planExtension = (statement) => {
+		if (plannedExtensions.has(statement)) return;
+		plannedExtensions.add(statement);
+		actions.push({
+			kind: "create-extension",
+			target: statement.replace(/^CREATE EXTENSION IF NOT EXISTS |;$/g, ""),
+			sql: statement
+		});
+	};
+	for (const spec of searchSpecs) for (const statement of searchExtensionStatements(spec)) planExtension(statement);
+	if (vectorExtensionDeclared(options.databaseExtensions) && collections.some((c) => buildVectorColumnSpecs(c, resolveColumnName).length > 0)) planExtension(vectorExtensionStatement());
+	const plannedFunctions = /* @__PURE__ */ new Set();
+	for (const spec of searchSpecs) for (const statement of searchHelperFunctions(spec)) {
+		if (plannedFunctions.has(statement)) continue;
+		plannedFunctions.add(statement);
+		actions.push({
+			kind: "create-function",
+			target: statement.includes("unaccent") ? SEARCH_UNACCENT_FN : SEARCH_TEXT_FN,
+			sql: statement
+		});
+	}
+	const created = /* @__PURE__ */ new Set();
+	for (const collection of collections) {
+		const key = qualified(collection);
+		if (existing.tables.has(key) || created.has(key)) continue;
+		created.add(key);
+		const schema = schemaOf(collection);
+		const table = tableOf(collection);
+		const idEntry = Object.entries(collection.properties ?? {}).find(([n, p]) => isIdProperty(n, p, collection));
+		const idName = idEntry ? resolveColumnName(idEntry[0], idEntry[1]) : "id";
+		const idProp = idEntry?.[1];
+		const idType = idProp ? getSqlColumnType(idEntry[0], idProp, collection, collections) : "TEXT";
+		let idDef = `"${assertSafeIdentifier(idName, "column name")}" ${idType} PRIMARY KEY`;
+		if (idProp?.type === "string" && idProp.isId === "uuid") idDef += " DEFAULT gen_random_uuid()";
+		actions.push({
+			kind: "create-table",
+			target: key,
+			sql: `CREATE TABLE IF NOT EXISTS "${schema}"."${table}" (${idDef});`
+		});
+	}
+	const junctions = planJunctionTables(collections);
+	for (const junction of junctions) {
+		const key = `${junction.schema}.${junction.table}`;
+		if (existing.tables.has(key) || created.has(key)) continue;
+		created.add(key);
+		actions.push({
+			kind: "create-table",
+			target: key,
+			sql: junction.createTable
+		});
+	}
+	const legacyForeignKeys = [];
+	/**
+	* Move a relation column that is only missing because it was renamed.
+	*
+	* Returns true when it handled the column, so the caller skips the ordinary
+	* ADD. Adding here would be the wrong move and a quiet one: the data is in
+	* the old column, `ADD COLUMN` creates the new one empty beside it, every
+	* statement succeeds, and the relation reads the empty one. A rename is
+	* metadata-only in Postgres, keeps the values, and carries the column's
+	* indexes and constraints with it.
+	*
+	* Only ever reached when the new name is absent and the old name is
+	* present, so there is nothing to overwrite and nothing to choose between.
+	*/
+	const renameLegacyColumn = (key, schema, table, column, legacyName) => {
+		const present = existing.tables.get(key);
+		if (!legacyName || !present) return false;
+		if (present.has(column) || !present.has(legacyName)) return false;
+		legacyForeignKeys.push({
+			table: key,
+			expected: column,
+			legacy: legacyName
+		});
+		actions.push({
+			kind: "rename-column",
+			target: `${key}.${column}`,
+			sql: `ALTER TABLE "${schema}"."${table}" RENAME COLUMN "${legacyName}" TO "${column}";`
+		});
+		return true;
+	};
+	const addColumn = (key, schema, table, column, definition) => {
+		if (existing.tables.get(key)?.has(column)) return;
+		assertSafeIdentifier(column, "column name");
+		actions.push({
+			kind: "add-column",
+			target: `${key}.${column}`,
+			sql: `ALTER TABLE "${schema}"."${table}" ADD COLUMN IF NOT EXISTS "${column}" ${definition};`
+		});
+	};
+	for (const collection of collections) {
+		const key = qualified(collection);
+		const schema = schemaOf(collection);
+		const table = tableOf(collection);
+		const fresh = created.has(key);
+		const auth = isAuthCollection(collection);
+		for (const [propName, prop] of Object.entries(collection.properties ?? {})) {
+			const p = prop;
+			if (isIdProperty(propName, p, collection)) continue;
+			if (p.type === "reference" || p.type === "relation") continue;
+			const column = resolveColumnName(propName, p);
+			const authDefinition = auth ? authUsersColumnDefinition(column) : void 0;
+			if (authDefinition) {
+				addColumn(key, schema, table, column, authDefinition);
+				continue;
+			}
+			const declaredType = getSqlColumnType(propName, p, collection, collections);
+			let definition = declaredType;
+			if (fresh && p.validation?.unique) definition += " UNIQUE";
+			const autoValue = p.autoValue;
+			const hasDefault = p.type === "date" && (autoValue === "on_create" || autoValue === "on_update");
+			if (hasDefault) definition += " DEFAULT now()";
+			const required = p.validation?.required === true;
+			const columnKey = `${key}.${column}`;
+			const columnExists = existing.tables.get(key)?.has(column) === true;
+			const actualType = existing.columnTypes?.get(columnKey);
+			if (columnExists && actualType && !typesAgree(declaredType, actualType)) columnTypeDrift.push({
+				table: key,
+				column,
+				declared: declaredType,
+				actual: actualType
+			});
+			const tableIsEmpty = existing.populatedTables !== void 0 && existing.tables.has(key) && !existing.populatedTables.has(key);
+			const notNullIsSafe = fresh || tableIsEmpty || hasDefault;
+			if (required && !columnExists) if (notNullIsSafe) definition += " NOT NULL";
+			else withheldConstraints.push({
+				target: columnKey,
+				kind: "not-null",
+				reason: `"${column}" is required, but "${key}" already holds rows and the column has no default to backfill them with, so NOT NULL would be checked against data that does not have a value yet.`,
+				remedy: "Backfill the column, then add the constraint — or give the property a default so every existing row gets one."
+			});
+			addColumn(key, schema, table, column, definition);
+			if (columnExists && constraintPolicy === "converge") {
+				const isNotNull = existing.notNullColumns?.has(columnKey) === true;
+				if (required && !isNotNull) if (tableIsEmpty) actions.push({
+					kind: "set-not-null",
+					target: columnKey,
+					sql: `ALTER TABLE "${schema}"."${table}" ALTER COLUMN "${column}" SET NOT NULL;`
+				});
+				else withheldConstraints.push({
+					target: columnKey,
+					kind: "not-null",
+					reason: `"${column}" became required, but "${key}" holds rows and any of them with no value would make SET NOT NULL fail.`,
+					remedy: "Backfill the column first — `UPDATE … SET \"" + column + "\" = … WHERE \"" + column + "\" IS NULL` — then apply this again."
+				});
+				if (!required && isNotNull) actions.push({
+					kind: "drop-not-null",
+					target: columnKey,
+					sql: `ALTER TABLE "${schema}"."${table}" ALTER COLUMN "${column}" DROP NOT NULL;`
+				});
+			}
+		}
+		if (auth) {
+			const declared = new Set(Object.entries(collection.properties ?? {}).map(([name, prop]) => resolveColumnName(name, prop)));
+			for (const spec of AUTH_USERS_COLUMNS) {
+				if (declared.has(spec.column)) continue;
+				addColumn(key, schema, table, spec.column, authUsersColumnSql(spec));
+			}
+		}
+	}
+	const searchDrift = [];
+	const searchAdopted = [];
+	for (const spec of searchSpecs) {
+		const key = `${spec.schema}.${spec.table}`;
+		const definitions = { [spec.column]: `tsvector GENERATED ALWAYS AS (${spec.expression}) STORED` };
+		if (spec.fuzzy) definitions[spec.fuzzy.column] = `text GENERATED ALWAYS AS (${spec.fuzzy.expression}) STORED`;
+		for (const stamp of searchColumnStamps(spec)) {
+			const definition = definitions[stamp.column];
+			const exists = existing.tables.get(key)?.has(stamp.column) === true;
+			const recorded = existing.columnComments?.get(`${key}.${stamp.column}`);
+			if (exists && recorded?.startsWith("rebase:search:v1:") && recorded !== stamp.fingerprint) {
+				searchDrift.push({
+					table: key,
+					column: stamp.column,
+					found: recorded,
+					expected: stamp.fingerprint,
+					rebuild: [
+						`ALTER TABLE "${spec.schema}"."${spec.table}" DROP COLUMN "${stamp.column}";`,
+						`ALTER TABLE "${spec.schema}"."${spec.table}" ADD COLUMN "${stamp.column}" ${definition};`,
+						stamp.sql
+					]
+				});
+				continue;
+			}
+			addColumn(key, spec.schema, spec.table, stamp.column, definition);
+			if (exists && recorded === void 0) searchAdopted.push({
+				table: key,
+				column: stamp.column
+			});
+			if (recorded !== stamp.fingerprint) actions.push({
+				kind: "comment-column",
+				target: `${key}.${stamp.column}`,
+				sql: stamp.sql
+			});
+		}
+	}
+	for (const junction of junctions) {
+		const key = `${junction.schema}.${junction.table}`;
+		if (created.has(key)) continue;
+		for (const column of junction.columns) {
+			if (renameLegacyColumn(key, junction.schema, junction.table, column.name, column.legacyName)) continue;
+			addColumn(key, junction.schema, junction.table, column.name, column.type);
+		}
+	}
+	const plannedRelationColumns = /* @__PURE__ */ new Map();
+	for (const relational of planRelationalColumns(collections)) {
+		const relKey = `${relational.schema}.${relational.table}`;
+		if (!plannedRelationColumns.has(relKey)) plannedRelationColumns.set(relKey, /* @__PURE__ */ new Set());
+		plannedRelationColumns.get(relKey).add(relational.column);
+		if (relational.legacyColumn) plannedRelationColumns.get(relKey).add(relational.legacyColumn);
+		if (renameLegacyColumn(relKey, relational.schema, relational.table, relational.column, relational.legacyColumn)) continue;
+		addColumn(relKey, relational.schema, relational.table, relational.column, relational.type);
+	}
+	const knownConstraints = existing.constraints ?? /* @__PURE__ */ new Set();
+	const plannedConstraints = /* @__PURE__ */ new Set();
+	const foreignKeys = [...planRelationalColumns(collections).map((r) => r.foreignKey), ...junctions.flatMap((j) => j.foreignKeys)];
+	for (const fk of foreignKeys) {
+		if (!fk) continue;
+		const name = `${fk.schema}.${fk.table}.${fk.constraintName}`;
+		if (knownConstraints.has(name) || plannedConstraints.has(name)) continue;
+		plannedConstraints.add(name);
+		actions.push({
+			kind: "add-constraint",
+			target: `${fk.schema}.${fk.table}.${fk.constraintName}`,
+			sql: fk.sql
+		});
+	}
+	const concurrentIndexing = (schema, table) => !created.has(`${schema}.${table}`);
+	for (const spec of searchSpecs) for (const statement of searchIndexStatements(spec)) actions.push({
+		kind: "create-index",
+		target: `${spec.schema}.${spec.table}`,
+		sql: concurrentIndexing(spec.schema, spec.table) ? statement.replace("CREATE INDEX IF NOT EXISTS", "CREATE INDEX CONCURRENTLY IF NOT EXISTS") : statement
+	});
+	const vectorIndexSkipped = [];
+	for (const collection of collections) {
+		const plan = buildVectorIndexPlan(collection, resolveColumnName);
+		for (const spec of plan.specs) actions.push({
+			kind: "create-index",
+			target: `${spec.schema}.${spec.table}`,
+			sql: concurrentIndexing(spec.schema, spec.table) ? vectorIndexStatement(spec).replace("CREATE INDEX IF NOT EXISTS", "CREATE INDEX CONCURRENTLY IF NOT EXISTS") : vectorIndexStatement(spec)
+		});
+		vectorIndexSkipped.push(...plan.skipped);
+	}
+	for (const spec of buildCollectionIndexPlan(collections, resolveColumnName)) actions.push({
+		kind: "create-index",
+		target: `${spec.schema}.${spec.table}`,
+		sql: collectionIndexStatement(spec, {
+			concurrently: concurrentIndexing(spec.schema, spec.table),
+			ifNotExists: true
+		})
+	});
+	const orphanedRequiredColumns = [];
+	if (existing.notNullColumns && existing.columnDefaults) for (const collection of collections) {
+		const key = qualified(collection);
+		const live = existing.tables.get(key);
+		if (!live || created.has(key)) continue;
+		const declared = /* @__PURE__ */ new Set();
+		for (const [propName, prop] of Object.entries(collection.properties ?? {})) declared.add(resolveColumnName(propName, prop));
+		for (const column of plannedRelationColumns.get(key) ?? []) declared.add(column);
+		for (const column of live) {
+			const columnKey = `${key}.${column}`;
+			if (declared.has(column)) continue;
+			if (!existing.notNullColumns.has(columnKey)) continue;
+			if (existing.columnDefaults.has(columnKey)) continue;
+			orphanedRequiredColumns.push({
+				table: key,
+				column,
+				slug: collection.slug
+			});
+		}
+	}
+	return {
+		actions,
+		statements: actions.map((a) => a.sql),
+		legacyForeignKeys,
+		searchDrift,
+		searchAdopted,
+		vectorIndexSkipped,
+		withheldConstraints,
+		columnTypeDrift,
+		orphanedRequiredColumns
+	};
+}
+/** Read what the database has, for the schemas the collections live in. */
+async function readExistingSchema(client, schemas) {
+	const tables = /* @__PURE__ */ new Map();
+	const enums = /* @__PURE__ */ new Set();
+	if (schemas.length === 0) return {
+		tables,
+		enums
+	};
+	const inList = schemas.map((schema) => `'${assertSafeIdentifier(schema, "schema name")}'`).join(", ");
+	const notNullColumns = /* @__PURE__ */ new Set();
+	const columnTypes = /* @__PURE__ */ new Map();
+	const columnDefaults = /* @__PURE__ */ new Set();
+	const { rows: columns } = await client.query(`SELECT table_schema, table_name, column_name, is_nullable, udt_name, column_default
+         FROM information_schema.columns
+         WHERE table_schema IN (${inList})`);
+	for (const row of columns) {
+		const key = `${row.table_schema}.${row.table_name}`;
+		if (!tables.has(key)) tables.set(key, /* @__PURE__ */ new Set());
+		tables.get(key).add(row.column_name);
+		if (row.is_nullable === "NO") notNullColumns.add(`${key}.${row.column_name}`);
+		if (row.udt_name) columnTypes.set(`${key}.${row.column_name}`, row.udt_name);
+		if (row.column_default !== null) columnDefaults.add(`${key}.${row.column_name}`);
+	}
+	const populatedTables = /* @__PURE__ */ new Set();
+	const { rows: realTables } = await client.query(`SELECT n.nspname AS schema, c.relname AS name
+         FROM pg_class c
+         JOIN pg_namespace n ON c.relnamespace = n.oid
+         WHERE c.relkind IN ('r', 'p') AND n.nspname IN (${inList})`);
+	if (realTables.length > 0) {
+		const probes = realTables.map((row) => {
+			const schema = assertSafeIdentifier(row.schema, "schema name");
+			const table = assertSafeIdentifier(row.name, "table name");
+			return `SELECT ${quoteSqlLiteral(`${schema}.${table}`)} AS key, EXISTS(SELECT 1 FROM "${schema}"."${table}" LIMIT 1) AS populated`;
+		});
+		const { rows: populationRows } = await client.query(probes.join(" UNION ALL "));
+		for (const row of populationRows) if (row.populated) populatedTables.add(row.key);
+	}
+	const enumValues = /* @__PURE__ */ new Map();
+	const { rows: enumValueRows } = await client.query(`SELECT n.nspname AS schema, t.typname AS name, e.enumlabel AS value
+         FROM pg_enum e
+         JOIN pg_type t ON e.enumtypid = t.oid
+         JOIN pg_namespace n ON t.typnamespace = n.oid
+         WHERE n.nspname IN (${inList})
+         ORDER BY t.typname, e.enumsortorder`);
+	for (const row of enumValueRows) {
+		const key = `${row.schema}.${row.name}`;
+		if (!enumValues.has(key)) enumValues.set(key, []);
+		enumValues.get(key).push(row.value);
+	}
+	const { rows: enumRows } = await client.query(`SELECT n.nspname AS schema, t.typname AS name
+         FROM pg_type t
+         JOIN pg_namespace n ON t.typnamespace = n.oid
+         WHERE t.typtype = 'e' AND n.nspname IN (${inList})`);
+	for (const row of enumRows) enums.add(`${row.schema}.${row.name}`);
+	const constraints = /* @__PURE__ */ new Set();
+	const { rows: constraintRows } = await client.query(`SELECT n.nspname AS schema, c.relname AS table, con.conname AS name
+         FROM pg_constraint con
+         JOIN pg_class c ON con.conrelid = c.oid
+         JOIN pg_namespace n ON c.relnamespace = n.oid
+         WHERE n.nspname IN (${inList})`);
+	for (const row of constraintRows) constraints.add(`${row.schema}.${row.table}.${row.name}`);
+	const columnComments = /* @__PURE__ */ new Map();
+	const { rows: commentRows } = await client.query(`SELECT n.nspname AS schema, c.relname AS table, a.attname AS column, d.description AS comment
+         FROM pg_description d
+         JOIN pg_class c ON d.objoid = c.oid
+         JOIN pg_namespace n ON c.relnamespace = n.oid
+         JOIN pg_attribute a ON a.attrelid = c.oid AND a.attnum = d.objsubid
+         WHERE d.objsubid > 0 AND n.nspname IN (${inList})`);
+	for (const row of commentRows) {
+		if (row.comment == null) continue;
+		columnComments.set(`${row.schema}.${row.table}.${row.column}`, row.comment);
+	}
+	return {
+		tables,
+		enums,
+		constraints,
+		columnComments,
+		enumValues,
+		notNullColumns,
+		populatedTables,
+		columnTypes,
+		columnDefaults
+	};
+}
+/**
+* What to tell an operator whose `search` block no longer matches its column.
+*
+* Every line here is doing work: naming the collection is not enough, because
+* the symptom (a search that finds nothing) points at the data, not the schema;
+* and the remediation has to be exact, because it is a table rewrite the
+* operator is being asked to schedule rather than discover.
+*/
+function searchDriftMessage(drift) {
+	return "The `search` block changed after its generated column was created, and Postgres cannot alter a generated expression in place.\nRebase will not rebuild it for you: dropping and re-adding a STORED generated column rewrites the whole table under an ACCESS EXCLUSIVE lock and rebuilds its GIN index, which is an outage this unattended path may not schedule on your behalf.\nUntil it is rebuilt the column keeps indexing the previous fields, weights and language — searches for anything added since return nothing, which reads from outside as \"no such row\".\nRun these (or revert the block to what the column was built from), then boot again:\n" + drift.map((d) => `  "${d.table}"."${d.column}" was generated from a different \`search\` block (recorded ${d.found}, current ${d.expected}).\n` + d.rebuild.map((s) => `      ${s}`).join("\n")).join("\n") + "\n  The GIN index is dropped with the column and recreated concurrently on the next boot.";
+}
+/**
+* Read what the database looks like, for the schemas a set of collections
+* lives in.
+*
+* The same read `ensureCollectionTables` does at boot, exposed on its own for
+* the callers that want to *plan* against a real database without changing it —
+* the live schema editor, which has to tell somebody what a change would do
+* before they agree to it.
+*/
+async function readSchemaFactsFor(client, collections) {
+	const relational = relationalCollections(collections);
+	return readExistingSchema(client, Array.from(/* @__PURE__ */ new Set([...relational.map(schemaOf), ...planJunctionTables(relational).map((junction) => junction.schema)])));
+}
+/**
+* Bring the database up to date. Returns what it did.
+*
+* Each statement runs on its own rather than in one transaction: they are all
+* independently safe and idempotent, and a single failure (an enum label that
+* cannot be added, say) should not roll back the tables that were created fine.
+* The error is surfaced with the statement that caused it.
+*/
+async function ensureCollectionTables(client, collections, log, options = {}) {
+	const schemas = Array.from(/* @__PURE__ */ new Set([...collections.map(schemaOf), ...planJunctionTables(collections).map((j) => j.schema)]));
+	for (const schema of schemas) {
+		assertSafeIdentifier(schema, "schema name");
+		if (schema !== "public") await client.query(`CREATE SCHEMA IF NOT EXISTS "${schema}";`);
+	}
+	const plan = planCollectionSchemaEnsure(collections, await readExistingSchema(client, schemas), {
+		...options,
+		databaseExtensions: options.databaseExtensions ?? declaredDatabaseExtensions()
+	});
+	const failures = [];
+	for (const legacy of plan.legacyForeignKeys) {
+		const message = `Renaming "${legacy.table}"."${legacy.legacy}" to "${legacy.expected}". The old name is the one Rebase derived for this relation before it singularized properly; the column keeps its data, indexes and constraints. To keep the old name instead, set \`localKey: "${legacy.legacy}"\` on the relation and this will stop.`;
+		logger.info(`[schema] ${message}`);
+		log?.(message);
+	}
+	if (plan.searchDrift.length > 0) throw new Error(searchDriftMessage(plan.searchDrift));
+	for (const adopted of plan.searchAdopted) {
+		const message = `Adopting the existing generated column "${adopted.table}"."${adopted.column}" and recording what the current \`search\` block would generate. Any later change to that block will be detected and refused; a change made *before* this version was deployed cannot be, so if search has been missing content, rebuild the column once: ALTER TABLE "${adopted.table.split(".").join("\".\"")}" DROP COLUMN "${adopted.column}"; and boot again.`;
+		logger.info(`[schema] ${message}`);
+		log?.(message);
+	}
+	for (const skip of plan.vectorIndexSkipped) {
+		const message = `No ANN index on "${skip.table}"."${skip.column}": ${skip.reason}`;
+		logger.warn(`[schema] ${message}`);
+		log?.(message);
+	}
+	for (const withheld of plan.withheldConstraints) {
+		const message = `No NOT NULL on "${withheld.target}": ${withheld.reason} ${withheld.remedy}`;
+		logger.warn(`[schema] ${message}`);
+		log?.(message);
+	}
+	for (const drift of plan.columnTypeDrift) {
+		const message = columnTypeDriftMessage(drift);
+		logger.warn(`[schema] ${message}`);
+		log?.(message);
+	}
+	for (const orphan of plan.orphanedRequiredColumns) {
+		const [schema, table] = orphan.table.split(".");
+		const message = `"${orphan.table}"."${orphan.column}" is NOT NULL with no default, and the "${orphan.slug}" collection no longer declares it. Every insert will be rejected for a field you cannot set (PG_23502, naming "${orphan.column}"). This is what a renamed property looks like: the new column was added, and the old one cannot be dropped unattended. Fix it with ONE of:
+      ALTER TABLE "${schema}"."${table}" DROP COLUMN "${orphan.column}";               -- the rename is complete\n      ALTER TABLE "${schema}"."${table}" ALTER COLUMN "${orphan.column}" DROP NOT NULL; -- keep the data, stop requiring it\n      ...or declare the property again, if the column is still wanted.`;
+		logger.warn(`[schema] ${message}`);
+		log?.(message);
+	}
+	if (plan.actions.length === 0) {
+		log?.("Schema is up to date; nothing to create.");
+		return {
+			...plan,
+			failures
+		};
+	}
+	for (const action of plan.actions) try {
+		if (await applyAction(client, action)) log?.(`${action.kind}: ${action.target}`);
+		else log?.(`${action.kind}: ${action.target} (already created by a peer)`);
+	} catch (err) {
+		const message = describeDriverError(err);
+		if (action.kind === "add-constraint" || action.kind === "comment-column" || action.kind === "create-index" && !/CREATE\s+UNIQUE\s+INDEX/i.test(action.sql)) {
+			failures.push({
+				kind: action.kind,
+				target: action.target,
+				error: message
+			});
+			continue;
+		}
+		throw new Error(`Failed to ${action.kind} ${action.target}: ${message}${vectorExtensionHint(message)}\n  ${action.sql}`);
+	}
+	return {
+		...plan,
+		failures
+	};
+}
+/**
+* What actually went wrong, rather than what the ORM said about it.
+*
+* Drizzle wraps every driver error, and its `message` is literally
+* ``Failed query: ${sql}\nparams: ${params}`` — the statement we already know,
+* and not one word of Postgres's answer. Reporting `err.message` therefore
+* produced a failure that named the statement twice and the *reason* zero
+* times, so four unrelated boot failures — a missing extension, a wrong
+* privilege, a bad index method, a constraint the rows violate — all read
+* identically to whoever had to fix them.
+*
+* Two consequences, both observed in the field before this existed:
+*
+*  1. On a managed deployment the reason never reaches anybody. Boot dies, the
+*     pod never goes ready, and the deploy reports a readiness timeout — so the
+*     one line that says why is the one line that was thrown away here.
+*  2. {@link vectorExtensionHint} matches on the error text. Against the
+*     wrapper it matched nothing, so the hint written specifically to explain a
+*     missing pgvector never fired on the path that raises it.
+*
+* `detail` and `hint` come along because they are the fields Postgres uses to
+* say which object it meant and what to do about it — `CREATE EXTENSION` names
+* the missing library there, and a rejected constraint names the row. This
+* writes into the tenant's own boot log, about the tenant's own database.
+*/
+function describeDriverError(err) {
+	const pg = extractPgError(err);
+	if (pg) {
+		const parts = [pg.code ? `${pg.message} [${pg.code}]` : pg.message];
+		if (pg.detail) parts.push(`  detail: ${pg.detail}`);
+		if (pg.hint) parts.push(`  hint: ${pg.hint}`);
+		return parts.join("\n");
+	}
+	const cause = extractCauseMessage(err);
+	if (cause) return cause;
+	return err instanceof Error ? err.message : String(err);
+}
+/** ` CONCURRENTLY ` as it appears in a rendered `CREATE [UNIQUE] INDEX`. */
+var CONCURRENTLY_RE = /\sCONCURRENTLY\s/i;
+/**
+* `25001 active_sql_transaction` — "cannot run inside a transaction block".
+*
+* Only ever raised here by `CREATE INDEX CONCURRENTLY`, and only when the
+* connection we were handed is inside a transaction. Deliberately narrow: it
+* decides to retry a *different* statement, so it must not fire on anything it
+* has not been reasoned about.
+*/
+function isTransactionBlockRefusal(err) {
+	return extractPgError(err)?.code === "25001";
+}
+/** Attempts per action, including the first. Matches the server's bootstraps. */
+var DDL_ATTEMPTS = 4;
+/**
+* Run one planned statement, surviving a simultaneous boot.
+*
+* Every statement in a plan is written to be idempotent, and that is not the
+* same as being safe to run concurrently: `CREATE … IF NOT EXISTS` reads the
+* catalog and then writes to it as two steps, so peers starting together both
+* see "absent" and the loser gets a duplicate key on a *catalog* index. Measured
+* against Postgres 18: five instances, 8 of 10 calls lost. `CREATE TYPE` is
+* worse, because Postgres has no `IF NOT EXISTS` for it at all.
+*
+* What made that fatal here rather than merely noisy is the loop this sits in.
+* A losing statement threw, and the throw abandoned **every remaining action in
+* the plan** — so a replica that lost one race came up missing tables it never
+* attempted, and the boot log blamed the one statement that failed.
+*
+* @returns `true` if this process applied the statement, `false` if a peer had
+*   already created the object. The distinction is only for the log; both mean
+*   the object is now there.
+* @throws the original error for anything that is not a race — a syntax error, a
+*   permission failure, a unique constraint the customer's own rows violate.
+*/
+async function applyAction(client, action) {
+	let sqlText = action.sql;
+	for (let attempt = 1;; attempt++) try {
+		await client.query(sqlText);
+		return true;
+	} catch (err) {
+		if (isTransactionBlockRefusal(err) && CONCURRENTLY_RE.test(sqlText)) {
+			sqlText = sqlText.replace(CONCURRENTLY_RE, " ");
+			logger.warn(`[schema] ${action.kind} ${action.target}: this connection is inside a transaction, so the index is being built with a write lock rather than concurrently. Writes to this table block until it finishes.`);
+			continue;
+		}
+		if (isDuplicateObjectRace(err)) {
+			logger.debug(`[schema] ${action.kind} ${action.target}: already created by another instance`);
+			return false;
+		}
+		if (isConcurrentDdlRace(err) && attempt < DDL_ATTEMPTS) {
+			logger.debug(`[schema] ${action.kind} ${action.target}: lost a race with another instance (attempt ${attempt}/${DDL_ATTEMPTS}) — retrying`);
+			await new Promise((resolve) => setTimeout(resolve, 40 * attempt * (1 + Math.random())));
+			continue;
+		}
+		throw err;
+	}
+}
+//#endregion
+export { readSchemaFactsFor as a, readExistingSchema as i, ensure_collection_tables_exports as n, planCollectionSchemaEnsure as r, describeDriverError as t };
+
+//# sourceMappingURL=ensure-collection-tables-D4wJzM4y.js.map