@rebasepro/server-postgres 0.25.0 → 0.26.0

package/dist/{cli-errors-DwQnNATs.js → cli-errors-DsYyNYzd.js}

@@ -1,6 +1,7 @@
 import { createRequire as __createRequire } from "module";
 __createRequire(import.meta.url);
-import { a as outWarn, i as outError, m as isRebaseIndexName, o as atlasExcludePattern, r as out, s as excludePatternParts, t as chalk } from "./source-Bv5KPeIx.js";
+import { a as outWarn, i as outError, m as isRebaseIndexName, o as atlasExcludePattern, r as out, s as excludePatternParts, t as chalk } from "./source-fZb92pN8.js";
+import { warnDeprecated } from "@rebasepro/common";
 import path from "path";
 import fs from "fs";
 import { fileURLToPath, pathToFileURL } from "url";
@@ -184,6 +185,37 @@ function redactConnectionPasswords(text) {
 //#endregion
 //#region src/schema/destructive-sql.ts
 /**
+* Pure helpers that classify an Atlas declarative-apply plan as destructive
+* or not, and decide what `rebase db push` should do about it.
+*
+* `db push` runs `atlas schema apply` to make the live database match the
+* generated `schema.sql`. Removing a collection field compiles to
+* `DROP COLUMN`; renaming compiles to drop-then-add — either destroys data.
+* We first run the apply with `--dry-run` to obtain the planned SQL, scan it
+* here, and refuse to auto-approve anything destructive without an explicit
+* opt-in.
+*
+* A type change is a destructive plan that names no DROP. `ALTER COLUMN
+* "price" TYPE integer` rounds every 19.99 to 20, and `TYPE date` throws away
+* every timestamp's time of day, in a statement that reads like a routine
+* alter. So a type change is gated too, unless it is a widening every value
+* survives unchanged — which needs the column's current type, read from the
+* catalogue by the caller.
+*
+* A primary key change names no DROP of data either: `DROP CONSTRAINT
+* "<table>_pkey", ADD PRIMARY KEY ("id", "locale")` keeps every value and
+* gives every row a new address. It is gated like a drop.
+*
+* So is the drop of a CHECK or EXCLUDE constraint. It keeps every row and
+* stops refusing the ones the rule was there to refuse. `db push` keeps Atlas
+* away from those constraints (`schema/undeclarable-constraints.ts`), so a plan
+* that still drops one is a pattern that missed, and the gate is the second
+* line. Which constraints those are is read from the catalogue by the caller.
+*
+* Everything in this file is side-effect free so it can be unit-tested
+* without Atlas or a database.
+*/
+/**
 * SQL fragments that destroy data or data-bearing objects. Matched
 * case-insensitively against each statement of the plan. `IF EXISTS` /
 * whitespace variations are tolerated by the regexes below.
@@ -643,6 +675,25 @@ function destructiveOptInFlag(args) {
 	if (args["--yes"] === true) return "--yes";
 }
 /**
+* What a destructive push approved by `--yes` says, once per process.
+*
+* `--yes` is an alias of `--allow-destructive` on `db push`, and nothing else
+* spells it that way: on `rebase init` it means "take the defaults", and an
+* agent passes it by reflex to get past prompts — so one habitual flag
+* dropped a column ("Proceeding because --yes was passed" → DROP COLUMN). It
+* keeps working for one release, as the deprecate-before-removing rule asks,
+* and says what changes next.
+*/
+var YES_APPROVES_DESTRUCTIVE_DEPRECATION = "`rebase db push --yes` approved a change that destroys data. Next release, --yes will only approve non-destructive pushes; pass --allow-destructive to apply destructive changes.";
+/**
+* Warn — once per process, through `warnDeprecated` — when it was `--yes`, not
+* `--allow-destructive`, that let destructive statements through.
+*/
+function warnIfYesApprovedDestructive(optIn, destructiveCount) {
+	if (optIn !== "--yes" || destructiveCount === 0) return;
+	warnDeprecated("db push --yes approves destructive changes", YES_APPROVES_DESTRUCTIVE_DEPRECATION);
+}
+/**
 * Decide how `db push` should proceed given the plan's destructiveness and
 * the invocation context.
 *
@@ -1292,7 +1343,7 @@ async function applySearchDdl(databaseUrl, sqlDir = generatedSqlDir()) {
 * `search` block, which is every project that has not opted in.
 */
 async function getSearchExcludes(collectionsPath) {
-	const { searchExcludePatterns } = await import("./generate-postgres-ddl-logic-4eUP4t8w.js").then((n) => n.o);
+	const { searchExcludePatterns } = await import("./generate-postgres-ddl-logic-DPl1oH_z.js").then((n) => n.o);
 	return searchExcludePatterns(await loadCollectionsForCli(collectionsPath));
 }
 /**
@@ -1379,7 +1430,7 @@ function readVectorDdl(sqlDir = generatedSqlDir()) {
 async function applyVectorDdl(databaseUrl, sqlDir = generatedSqlDir()) {
 	const sql = readVectorDdl(sqlDir);
 	if (!sql) return;
-	const { vectorExtensionHint } = await import("./vector-index-BFhyEaiz.js").then((n) => n.f);
+	const { vectorExtensionHint } = await import("./vector-index-DsQ3V2d2.js").then((n) => n.f);
 	try {
 		await withAppClient(databaseUrl, (client) => client.query(sql));
 	} catch (err) {
@@ -1397,7 +1448,7 @@ async function applyVectorDdl(databaseUrl, sqlDir = generatedSqlDir()) {
 * `vector` property, which is every project that has not opted in.
 */
 async function getVectorExcludes(collectionsPath) {
-	const { vectorExcludePatterns } = await import("./generate-postgres-ddl-logic-4eUP4t8w.js").then((n) => n.o);
+	const { vectorExcludePatterns } = await import("./generate-postgres-ddl-logic-DPl1oH_z.js").then((n) => n.o);
 	return vectorExcludePatterns(await loadCollectionsForCli(collectionsPath));
 }
 /**
@@ -1434,7 +1485,7 @@ async function applyTriggersDdl(databaseUrl, sqlDir = generatedSqlDir()) {
 }
 /** @see getSearchExcludes */
 async function getTriggerExcludes(collectionsPath) {
-	const { triggerExcludePatterns } = await import("./generate-postgres-ddl-logic-4eUP4t8w.js").then((n) => n.o);
+	const { triggerExcludePatterns } = await import("./generate-postgres-ddl-logic-DPl1oH_z.js").then((n) => n.o);
 	return triggerExcludePatterns(await loadCollectionsForCli(collectionsPath));
 }
 /**
@@ -1511,9 +1562,9 @@ async function getForeignIndexExcludes(databaseUrl, collectionsPath, deps = {})
 */
 async function managedIndexNames(collectionsPath) {
 	const collections = await loadCollectionsForCli(collectionsPath);
-	const { searchExcludePatterns, vectorExcludePatterns } = await import("./generate-postgres-ddl-logic-4eUP4t8w.js").then((n) => n.o);
-	const { resolveColumnName } = await import("./column-plan-helpers-D_V4oaZh.js").then((n) => n.t);
-	const { buildCollectionIndexPlan } = await import("./source-Bv5KPeIx.js").then((n) => n.d);
+	const { searchExcludePatterns, vectorExcludePatterns } = await import("./generate-postgres-ddl-logic-DPl1oH_z.js").then((n) => n.o);
+	const { resolveColumnName } = await import("./column-plan-helpers-IG6uFb1s.js").then((n) => n.t);
+	const { buildCollectionIndexPlan } = await import("./source-fZb92pN8.js").then((n) => n.d);
 	const names = new Set(buildCollectionIndexPlan(collections, resolveColumnName).map((spec) => spec.indexName));
 	for (const pattern of [...searchExcludePatterns(collections), ...vectorExcludePatterns(collections)]) {
 		const object = excludePatternParts(pattern)?.[2];
@@ -2051,6 +2102,34 @@ function projectRebaseCommand(manager) {
 		default: return "rebase";
 	}
 }
+/** A PostgreSQL identifier, double-quoted, with any `"` in it doubled. */
+function sqlIdentifier(name) {
+	return `"${name.replace(/"/g, "\"\"")}"`;
+}
+/**
+* `text` as one double-quoted `sh` word: `\`, `"`, `$` and a backtick are the
+* characters a double-quoted string does not take literally.
+*/
+function shDoubleQuoted(text) {
+	return `"${text.replace(/[\\"$`]/g, "\\$&")}"`;
+}
+/**
+* The backfill for a column that refused NOT NULL, as one line a POSIX shell
+* runs once the value is typed between its single quotes.
+*
+* The SQL is the shell's double-quoted word, so the value's own quotes are
+* SQL's: `'tbd'`, or `'O''Brien'` for a value with a quote in it, as SQL
+* writes one. It was the SQL in shell single quotes, and the first quote a
+* value was typed with ended the shell's: `= 'tbd'` reached psql as `= tbd`,
+* `column "tbd" does not exist`.
+*
+* `rebase db url`, not `$DATABASE_URL`: on the managed development database
+* `.env` leaves DATABASE_URL unset, and the shell has none.
+*/
+function backfillCommand(table, column, manager) {
+	const sql = `UPDATE ${sqlIdentifier(table)} SET ${sqlIdentifier(column)} = '…' WHERE ${sqlIdentifier(column)} IS NULL;`;
+	return `psql "$(${projectRebaseCommand(manager)} db url)" -c ${shDoubleQuoted(sql)}`;
+}
 /**
 * The ways out, and only the ones that work for this column.
 *
@@ -2067,7 +2146,7 @@ function projectRebaseCommand(manager) {
 function formatNotNullViolationBanner(violation, rowCount, isNew = null, manager = detectProjectPackageManager()) {
 	const { table, column } = violation;
 	const rows = rowCount === null ? `  "${table}" already holds rows, and none of them has a value for "${column}".\n` : `  "${table}" already holds ${rowCount} row${rowCount === 1 ? "" : "s"}, and they have no value for "${column}".\n`;
-	const backfill = `Backfill by hand first, then push again:\n         ${chalk.gray(`psql "$(${projectRebaseCommand(manager)} db url)" -c 'UPDATE "${table}" SET "${column}" = … WHERE "${column}" IS NULL;'`)}\n`;
+	const backfill = `Backfill by hand first, then push again, with the value between the single quotes:\n         ${chalk.gray(backfillCommand(table, column, manager))}\n`;
 	const leaveOptional = `Leave it optional — take \`validation.required\` off the property.\n`;
 	const defaultLine = (caveat) => `Give the property a default, so the push can backfill${caveat}:\n         ${chalk.gray(`{ type: "string", defaultValue: "…", validation: { required: true } }`)}\n`;
 	const remedies = isNew === false ? [backfill, leaveOptional] : isNew === true ? [
@@ -2356,6 +2435,6 @@ async function diagnoseAtlasFailure(context) {
 	return null;
 }
 //#endregion
-export { forLibpq as $, getUndeclaredConstraintExcludes as A, withAppClient as B, dropDevDatabase as C, getSearchExcludes as D, getForeignIndexExcludes as E, queryUndeclarableConstraints as F, prepareGeneratedSqlDir as G, DESIRED_STATE_URL as H, readSearchDdl as I, detectDestructiveStatements as J, decidePushSafety as K, readTriggersDdl as L, loadCollectionsForCli as M, queryColumnTypes as N, getTableExcludes as O, queryGeneratedColumnDependencies as P, forAtlas as Q, readVectorDdl as R, diagnoseMissingBin as S, ensureDevDatabaseExists as T, GENERATED_SQL_DIR as U, workspaceMemberDir as V, generatedSqlDir as W, fromAlterTable as X, extractPlanStatements as Y, isSyncedPlan as Z, closeAppClients as _, diagnoseDbError as a, describeReinstallCommand as b, isEconnrefused as c, reportCommandFailure as d, redactConnectionPasswords as et, ExcludeIntrospectionError as f, atlasDevDatabaseUrl as g, applyVectorDdl as h, diagnoseAtlasFailure as i, getVectorExcludes as j, getTriggerExcludes as k, isSslNotEnabled as l, applyTriggersDdl as m, closedDatabaseName as n, extractCauseMessage as nt, formatForeignGeneratedColumnBanner as o, applySearchDdl as p, destructiveOptInFlag as q, deepestErrorMessage as r, isAuthFailure as s, checkDatabaseConnectivity as t, splitPassword as tt, parseHostInfo as u, describeBuildScriptRemedy as v, dropGeneratedColumns as w, detectProjectPackageManager as x, describeDevAddCommand as y, resolveLocalBin as z };
+export { forAtlas as $, getUndeclaredConstraintExcludes as A, withAppClient as B, dropDevDatabase as C, getSearchExcludes as D, getForeignIndexExcludes as E, queryUndeclarableConstraints as F, prepareGeneratedSqlDir as G, DESIRED_STATE_URL as H, readSearchDdl as I, detectDestructiveStatements as J, decidePushSafety as K, readTriggersDdl as L, loadCollectionsForCli as M, queryColumnTypes as N, getTableExcludes as O, queryGeneratedColumnDependencies as P, warnIfYesApprovedDestructive as Q, readVectorDdl as R, diagnoseMissingBin as S, ensureDevDatabaseExists as T, GENERATED_SQL_DIR as U, workspaceMemberDir as V, generatedSqlDir as W, fromAlterTable as X, extractPlanStatements as Y, isSyncedPlan as Z, closeAppClients as _, diagnoseDbError as a, describeReinstallCommand as b, isEconnrefused as c, reportCommandFailure as d, forLibpq as et, ExcludeIntrospectionError as f, atlasDevDatabaseUrl as g, applyVectorDdl as h, diagnoseAtlasFailure as i, getVectorExcludes as j, getTriggerExcludes as k, isSslNotEnabled as l, applyTriggersDdl as m, closedDatabaseName as n, splitPassword as nt, formatForeignGeneratedColumnBanner as o, applySearchDdl as p, destructiveOptInFlag as q, deepestErrorMessage as r, extractCauseMessage as rt, isAuthFailure as s, checkDatabaseConnectivity as t, redactConnectionPasswords as tt, parseHostInfo as u, describeBuildScriptRemedy as v, dropGeneratedColumns as w, detectProjectPackageManager as x, describeDevAddCommand as y, resolveLocalBin as z };
 
-//# sourceMappingURL=cli-errors-DwQnNATs.js.map
+//# sourceMappingURL=cli-errors-DsYyNYzd.js.map