@schema-weaver/pg-connector 0.0.0-stage → 2.0.1

package/dist/esm/execution/query-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-runner.js","sourceRoot":"","sources":["../../../src/execution/query-runner.ts"],"names":[],"mappings":"AACA,OAAO,EAAe,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAC;AAU9E,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAG5D,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,UAAkB,qBAAqB;QACjD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAmFD;;;;;GAKG;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,EAAsB,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,sFAAsF;AACtF,MAAM,aAAa,GAAgC,IAAI,GAAG,EAAE,CAAC;AAE7D,IAAI,eAAe,GAAG,CAAC,CAAC;AAExB,SAAS,aAAa,CAAC,OAAgB;IACrC,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB;IACxB,IAAI,YAAY,CAAC,IAAI,IAAI,gBAAgB;QAAE,OAAO;IAClD,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACzF,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,EAAE,CAAC;QACpC,IAAI,YAAY,CAAC,IAAI,IAAI,gBAAgB;YAAE,MAAM;QACjD,IAAI,OAAO,CAAC,IAAI;YAAE,SAAS;QAC3B,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,MAAkB,EAClB,GAAW,EACX,OAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B,kBAAkB,CAAC,6CAA6C,CAAC,CAClE,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAE,CAAe,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAE,CAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7F,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;QACrB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,sEAAsE;QACtE,oEAAoE;QACpE,2EAA2E;QAC3E,kDAAkD;QAClD,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO;YAAE,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO,aAAa,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,aAAa,CAC1B,MAAkB,EAClB,OAAgB;IAEhB,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,QAAQ,GAAG,EAAE,eAAe,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,eAAe,EAAE,CAAC;QAC/E,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC;IAEtB,iEAAiE;IACjE,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC;IAErC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YAC3D,KAAK,CAAC,IAAI,GAAG,SAAS,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC;IAC/B,iBAAiB,EAAE,CAAC;IACpB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,KAAkC;IAClE,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,WAAW,GAAG,GAAG,CAAC;AAC7C,CAAC;AAID,8EAA8E;AAC9E,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B;;;GAGG;AACH,SAAS,iBAAiB,CACxB,MAA+D,EAC/D,KAAkC;IAElC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChC,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,UAAU;QACtB,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC;KAC5C,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,eAAe,CAAC,GAAc;IACrC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,IAAI,CAAC,CAAC;aAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;aACtE,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,IAAI,IAAI,CAAC,CAAC;aACxC,IAAI,OAAO,IAAI,KAAK,SAAS;YAAE,IAAI,IAAI,CAAC,CAAC;aACzC,IAAI,IAAI,YAAY,IAAI;YAAE,IAAI,IAAI,EAAE,CAAC;aACrC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC;;YAC/C,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iEAAiE;AACjE,SAAS,QAAQ,CAAC,IAAa;IAC7B,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC;IAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAa;IAC1C,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC7C,MAAM,IAAI,kBAAkB,CAC1B,sCAAsC,QAAQ,CAAC,cAAc,SAAS,CACvE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,oBAAoB,CAAC,GAAc,EAAE,KAAgC;IAC5E,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACtB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAErD,IAAI,aAAa,GAAkB,IAAI,CAAC;QACxC,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC/C,IAAI,YAAY,GAAG,QAAQ,CAAC,cAAc;gBAAE,aAAa,GAAG,IAAI,CAAC;QACnE,CAAC;aAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,YAAY,GAAG,QAAQ,CAAC,cAAc;gBAAE,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtF,CAAC;aAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACrC,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClD,IAAI,YAAY,GAAG,QAAQ,CAAC,cAAc;gBAAE,aAAa,GAAG,OAAO,CAAC;QACtE,CAAC;QAED,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;YAC1B,OAAO;gBACL,WAAW,EAAE,IAAI;gBACjB,aAAa,EAAE,YAAY;gBAC3B,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;aACzC,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,cAAc,GAAG,CAAC,CAAC;AAEvB;;;;GAIG;AACH,SAAS,aAAa,CAAC,SAAiB;IACtC,cAAc,GAAG,CAAC,cAAc,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC;IAClD,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClE,OAAO,aAAa,cAAc,IAAI,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B;;;;;GAKG;AACH,MAAM,aAAa,GAAG,KAAK,CAAC;AAE5B,iEAAiE;AACjE,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAEpC,MAAM,mBAAmB,GAAG,kCAAkC,CAAC;AAW/D,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AAC1C,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAW;IACzC,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACvC,OAAO,IAAI,KAAK,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,iBAAiB,CAAC,OAA2B;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC;IAE5C,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,OAAO,iBAAiB,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACjF,MAAM,iBAAiB,CAAC,oCAAoC,CAAC,CAAC;QAChE,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC,GAAG,CACjB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,EAC1C,aAAa,EACb,QAAQ,CAAC,eAAe,CACzB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,CAAC,MAAM,KAAK,CAAC;QACnB,MAAM,CAAC,MAAM,GAAG,wBAAwB,EACxC,CAAC;QACD,MAAM,iBAAiB,CACrB,kDAAkD,wBAAwB,cAAc,CACzF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,MAAM,iBAAiB,CAAC,6CAA6C,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,iBAAiB,CAAC,oCAAoC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACtE,MAAM,iBAAiB,CAAC,+CAA+C,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,iBAAiB,CAAC,uDAAuD,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,iBAAiB,GAAG,QAAQ,IAAI,iBAAiB,CAAC;IACxD,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACxD,MAAM,KAAK,GAAG,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IACxD,0EAA0E;IAC1E,2DAA2D;IAC3D,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAEtD,OAAO;QACL,GAAG,EACD,kBAAkB,KAAK,eAAe;YACtC,iBAAiB,MAAM,IAAI,UAAU,KAAK,WAAW,GAAG;YACxD,oBAAoB,MAAM,IAAI,KAAK,GAAG;YACtC,SAAS,iBAAiB,GAAG,CAAC,EAAE;QAClC,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;QACtD,SAAS,EAAE,iBAAiB;QAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE;KAC7D,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CACpB,MAAoB,EACpB,OAAmB,EACnB,OAAyB;IAEzB,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAChC,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,iBAAiB;IAKF;IACR;IALH,aAAa,GAAG,KAAK,CAAC;IACtB,QAAQ,GAAG,KAAK,CAAC;IAEzB,YACmB,MAAkB,EAC1B,IAAY;QADJ,WAAM,GAAN,MAAM,CAAY;QAC1B,SAAI,GAAJ,IAAI,CAAQ;IACpB,CAAC;IAEJ;;;;OAIG;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,MAAkB,EAClB,GAAW,EACX,MAAsC,EACtC,IAAY;QAEZ,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnD,oEAAoE;QACpE,2DAA2D;QAC3D,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3C,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;YAC5B,MAAM,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,WAAW,IAAI,yBAAyB,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,KAAK,CAAC,SAAiB;QAI3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,SAAS,SAAS,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAChG,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAmB;YAC7B,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAgD;SAC1E,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,UAAiC;QACpD,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO;QAChC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,4CAA4C;QAC9C,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;YACjE,uCAAuC;QACzC,CAAC;IACH,CAAC;CACF;AAED,wEAAwE;AAExE,MAAM,OAAO,WAAW;IACL,WAAW,CAAc;IAE1C,YAAY,IAAwB;QAClC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACtC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,UAAU,CAAC,OAAqB,EAAE,GAAoB;QAC1D,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7E,wEAAwE;QACxE,kEAAkE;QAClE,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAE3D,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAoB;YACnC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ;YAC9B,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;YACtB,KAAK,EAAE,eAAe;YACtB,YAAY,EAAE,KAAK;SACpB,CAAC;QACF,IAAI,GAAG,CAAC,gBAAgB;YAAE,GAAG,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAE5D,0EAA0E;QAC1E,2EAA2E;QAC3E,sDAAsD;QACtD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC9C,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACpB,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO;gBAAE,OAAO,EAAE,CAAC;;gBAClC,GAAG,CAAC,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1D,CAAC;QAED,wEAAwE;QACxE,4EAA4E;QAC5E,qEAAqE;QACrE,uBAAuB;QACvB,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC;QAC1F,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE9B,IAAI,CAAC;YACH,yEAAyE;YACzE,uEAAuE;YACvE,sEAAsE;YACtE,aAAa;YACb,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,mBAAmB,EAAE,CAAC;YAEpE,gEAAgE;YAChE,uEAAuE;YACvE,wEAAwE;YACxE,iDAAiD;YACjD,MAAM,SAAS,GAAG,qBAAqB,CACrC,OAAO,CAAC,UAAU,EAClB,IAAI,CAAC,WAAW,CAAC,qBAAqB,CACvC,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,2BAA2B,SAAS,EAAE,CAAC,CAAC,CAAC;YAE1E,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;gBAChF,MAAM,IAAI,GAAG,GAAG,CAAC,IAAmB,CAAC;gBACrC,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;oBAC1C,MAAM,IAAI,kBAAkB,CAC1B,mDAAmD,QAAQ,CAAC,cAAc,GAAG,CAC9E,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC;oBACjD,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;oBACvE,aAAa,EAAE,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;oBACjC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU;oBAC3B,SAAS,EAAE,KAAK;iBACjB,CAAC;YACJ,CAAC;YAED,qEAAqE;YACrE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,CACzC,MAAM,EACN,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,MAAM,EACd,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAC9B,CAAC;YAEF,MAAM,OAAO,GAAe,EAAE,CAAC;YAC/B,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,MAAM,IAAI,GAAgB,EAAE,CAAC;YAC7B,MAAM,eAAe,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;YAChD,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,IAAI,MAAM,GAAG,KAAK,CAAC;YAEnB,IAAI,CAAC;gBACH,SAAS,CAAC;oBACR,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO;wBAAE,MAAM,IAAI,mBAAmB,EAAE,CAAC;oBAEpE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;oBAEpD,IAAI,CAAC,eAAe,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAChD,OAAO,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;wBAC5D,eAAe,GAAG,IAAI,CAAC;oBACzB,CAAC;oBAED,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;wBAAE,MAAM;oBAEnC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;wBAC7B,IAAI,KAAK,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;4BACrC,MAAM,GAAG,IAAI,CAAC;4BACd,MAAM;wBACR,CAAC;wBACD,KAAK,EAAE,CAAC;wBACR,mEAAmE;wBACnE,kEAAkE;wBAClE,8DAA8D;wBAC9D,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC;oBACxD,CAAC;oBAED,oEAAoE;oBACpE,qDAAqD;oBACrD,IAAI,MAAM;wBAAE,MAAM;gBACpB,CAAC;gBAED,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;oBACrB,MAAM,IAAI,kBAAkB,CAC1B,uCAAuC,QAAQ,CAAC,cAAc,SAAS;wBACrE,yCAAyC,CAC5C,CAAC;gBACJ,CAAC;gBAED,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACrB,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,OAAO;gBACL,OAAO;gBACP,IAAI;gBACJ,aAAa,EAAE,KAAK;gBACpB,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU;gBAC3B,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,GAAG,CAAC,WAAW;gBAAE,GAAG,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3E,IAAI,GAAG,CAAC,kBAAkB;gBAAE,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACnE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,YAAY,CAAC,OAA2B,EAAE,GAAoB;QAClE,2EAA2E;QAC3E,yCAAyC;QACzC,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAExC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7E,2EAA2E;QAC3E,sDAAsD;QACtD,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAE3D,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAoB;YACnC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ;YAC9B,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;YACtB,KAAK,EAAE,eAAe;YACtB,YAAY,EAAE,IAAI;SACnB,CAAC;QACF,IAAI,GAAG,CAAC,gBAAgB;YAAE,GAAG,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAE5D,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC9C,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACpB,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO;gBAAE,OAAO,EAAE,CAAC;;gBAClC,GAAG,CAAC,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,MAAM,aAAa,GAAG,iBAAiB,CACrC,0BAA0B,EAC1B,QAAQ,CAAC,eAAe,EACxB,CAAC,CACF,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,qBAAqB,CACrC,OAAO,CAAC,UAAU,EAClB,IAAI,CAAC,WAAW,CAAC,qBAAqB,CACvC,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,2BAA2B,SAAS,EAAE,CAAC,CAAC,CAAC;YAE1E,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,CACzC,MAAM,EACN,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,MAAM,EACX,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAC9B,CAAC;YAEF,IAAI,eAAe,GAAgB,EAAE,CAAC;YACtC,IAAI,gBAAgB,GAAG,CAAC,CAAC;YACzB,IAAI,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,IAAI,WAAW,GAAG,KAAK,CAAC;YACxB,IAAI,OAAO,GAAe,EAAE,CAAC;YAE7B,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;gBACtC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO;gBACzD,MAAM,YAAY,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;gBAC7C,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;gBACpF,MAAM,YAAY,GAAuB;oBACvC,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;oBACrC,IAAI,EAAE,SAAS;oBACf,WAAW,EAAE,UAAU,EAAE;oBACzB,mBAAmB,EAAE,YAAY,CAAC,YAAY;iBAC/C,CAAC;gBACF,WAAW,GAAG,IAAI,CAAC;gBACnB,mEAAmE;gBACnE,kEAAkE;gBAClE,MAAM,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBAChC,uEAAuE;gBACvE,sEAAsE;gBACtE,uDAAuD;gBACvD,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,IAAI,mBAAmB,EAAE,CAAC;gBACpE,eAAe,GAAG,EAAE,CAAC;gBACrB,gBAAgB,GAAG,CAAC,CAAC;gBACrB,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,CAAC,CAAC;YAEF,IAAI,cAAc,GAAG,KAAK,CAAC;YAC3B,IAAI,OAAO,GAAqB,IAAI,CAAC;YAErC,IAAI,CAAC;gBACH,SAAS,CAAC;oBACR,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO;wBAAE,MAAM,IAAI,mBAAmB,EAAE,CAAC;oBAEpE,iEAAiE;oBACjE,IAAI,GAAG,CAAC,YAAY;wBAAE,MAAM,GAAG,CAAC,YAAY,EAAE,CAAC;oBAE/C,gDAAgD;oBAChD,MAAM,SAAS,GACb,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,SAAS,GAAG,CAAC,CAAC;oBAC/E,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;wBACnB,cAAc,GAAG,IAAI,CAAC;wBACtB,MAAM;oBACR,CAAC;oBAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC,CAAC;oBAE5E,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACvE,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;oBAC1D,CAAC;oBAED,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;wBAAE,MAAM;oBAEtC,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;wBAChC,+DAA+D;wBAC/D,8DAA8D;wBAC9D,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,SAAS,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;4BAC3D,cAAc,GAAG,IAAI,CAAC;4BACtB,MAAM;wBACR,CAAC;wBACD,KAAK,MAAM,IAAI,IAAI,GAAG;4BAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC;wBACpD,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;wBAC1B,gBAAgB,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;wBACzC,SAAS,EAAE,CAAC;wBACZ,OAAO,GAAG,GAAG,CAAC;wBAEd,IAAI,SAAS,GAAG,aAAa,EAAE,CAAC;4BAC9B,MAAM,KAAK,EAAE,CAAC;4BACd,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;4BACrB,MAAM,IAAI,mBAAmB,CAAC,iCAAiC,aAAa,IAAI,CAAC,CAAC;wBACpF,CAAC;wBAED,IACE,eAAe,CAAC,MAAM,IAAI,QAAQ,CAAC,iBAAiB;4BACpD,gBAAgB,IAAI,QAAQ,CAAC,kBAAkB;4BAC/C,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,IAAI,QAAQ,CAAC,eAAe,EACtD,CAAC;4BACD,MAAM,KAAK,EAAE,CAAC;wBAChB,CAAC;oBACH,CAAC;oBAED,IAAI,cAAc;wBAAE,MAAM;gBAC5B,CAAC;gBAED,MAAM,KAAK,EAAE,CAAC;gBACd,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACrB,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBACd,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC1F,MAAM,GAAG,CAAC,KAAK,CAAC;oBACd,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,UAAU,EAAE,SAAS;oBACrB,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBAC1B,WAAW,EAAE,UAAU;oBACvB,qEAAqE;oBACrE,8DAA8D;oBAC9D,SAAS,EAAE,cAAc,IAAI,UAAU,KAAK,SAAS;oBACrD,GAAG,CAAC,cAAc,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,GAAG,CAAC,WAAW;gBAAE,GAAG,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3E,IAAI,GAAG,CAAC,kBAAkB;gBAAE,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACnE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,IAAY,EAAE,QAAgB,EAAE,GAAW;IACpE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC9D,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACvC,CAAC"}

package/dist/esm/execution/rate-limiter.d.ts

@@ -0,0 +1,120 @@
+/**
+ * Operations that consume budget. Every inbound message type maps onto exactly
+ * one of these; `other` is the fail-safe bucket for a type this module does
+ * not recognise, so a new message type is rate limited by default rather than
+ * exempt by omission.
+ */
+export type RateLimitedAction = 'ping' | 'introspect' | 'query' | 'stream_query' | 'migration_run' | 'cancel' | 'event' | 'other';
+/** Token-bucket shape: a burst allowance plus a sustained refill rate. */
+export interface RateLimitPolicy {
+    /** Bucket capacity. One request per token. */
+    burst: number;
+    /** Tokens added per second while the bucket is below capacity. */
+    per_second: number;
+}
+/** Who is spending budget. All three components are attacker-controlled. */
+export interface RateLimitIdentity {
+    agent_id: string;
+    user_id: string;
+    db_alias: string;
+}
+/** Which limit refused the request. */
+export type RateLimitScope = 'global' | 'identity' | 'concurrency_global' | 'concurrency_db';
+/** Result of an admission check. */
+export interface RateLimitVerdict {
+    allowed: boolean;
+    scope?: RateLimitScope;
+    /** Curated, data-free text safe to forward to the browser. */
+    reason?: string;
+    retry_after_ms: number;
+}
+/** An admitted request. `release` must be called exactly once when it finishes. */
+export interface RateLimitPermit extends RateLimitVerdict {
+    release: () => void;
+}
+/**
+ * Default budget per action.
+ *
+ * `introspect` is deliberately the tightest: one call runs eleven catalogue
+ * queries and returns the entire schema, so it is the cheapest request to make
+ * and the most valuable one to an attacker exfiltrating a schema.
+ */
+export declare const DEFAULT_RATE_LIMIT_POLICIES: Record<RateLimitedAction, RateLimitPolicy>;
+/** Ceiling for everything the connector does, whatever the caller's identity. */
+export declare const DEFAULT_GLOBAL_POLICY: RateLimitPolicy;
+export declare const DEFAULT_MAX_INFLIGHT = 128;
+export declare const DEFAULT_MAX_INFLIGHT_PER_DB = 64;
+export interface RateLimiterOptions {
+    /** Per-action budget overrides, merged over {@link DEFAULT_RATE_LIMIT_POLICIES}. */
+    policies?: Partial<Record<RateLimitedAction, RateLimitPolicy>>;
+    /** Global budget override. */
+    global?: Partial<RateLimitPolicy>;
+    /** Concurrent admitted requests across every identity. */
+    max_inflight?: number;
+    /** Concurrent admitted requests for a single `db_alias`. */
+    max_inflight_per_db?: number;
+    /** Hard cap on tracked buckets, so the key space cannot grow without bound. */
+    max_tracked_keys?: number;
+    /** A bucket untouched for this long is evicted. */
+    idle_ttl_ms?: number;
+    /** Serialized introspection snapshot ceiling, in bytes. */
+    max_introspect_bytes?: number;
+    /** Clock injection point; tests supply a deterministic clock. */
+    now?: () => number;
+}
+export declare class RateLimiter {
+    private readonly policies;
+    private readonly globalPolicy;
+    private readonly maxInflight;
+    private readonly maxInflightPerDb;
+    private readonly maxTrackedKeys;
+    private readonly idleTtlMs;
+    private readonly sweepIntervalMs;
+    private readonly maxIntrospectBytes;
+    private readonly now;
+    /**
+     * Buckets keyed by `identity\u0000action`, plus the global bucket. Insertion
+     * order is maintained on touch, which makes the oldest entry the least
+     * recently used one and the entry evicted when the cap is reached.
+     */
+    private readonly buckets;
+    private readonly globalBucket;
+    private readonly inflightByDb;
+    private inflight;
+    private lastSweepAt;
+    constructor(opts?: RateLimiterOptions);
+    /** Number of tracked buckets. Exposed so boundedness is assertable. */
+    trackedKeys(): number;
+    /** Requests admitted and not yet released. */
+    inflightCount(): number;
+    limits(): {
+        global: RateLimitPolicy;
+        max_inflight: number;
+        max_inflight_per_db: number;
+        max_tracked_keys: number;
+    };
+    /**
+     * Admit one request, spending budget from the global bucket, the caller's
+     * per-identity bucket and the concurrency counters.
+     *
+     * The returned permit must be released exactly when the request finishes,
+     * including on every error path: an unreleased permit permanently consumes
+     * concurrency capacity.
+     */
+    tryAcquire(action: RateLimitedAction, identity: RateLimitIdentity): RateLimitPermit;
+    /**
+     * Size budget for one introspection response. A snapshot above the ceiling
+     * still cost eleven catalogue queries on the server, but it is not shipped,
+     * which is what bounds schema exfiltration.
+     */
+    checkIntrospectSize(bytes: number): RateLimitVerdict;
+    private deny;
+    /** Take one token, refilling for elapsed time first. */
+    private spend;
+    private bucketFor;
+    private releaseSlot;
+    /** Drop buckets that have been idle past the TTL, then enforce the cap. */
+    private sweep;
+    private evictOne;
+}
+//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/esm/execution/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../../src/execution/rate-limiter.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GACzB,MAAM,GACN,YAAY,GACZ,OAAO,GACP,cAAc,GACd,eAAe,GACf,QAAQ,GACR,OAAO,GACP,OAAO,CAAC;AAEZ,0EAA0E;AAC1E,MAAM,WAAW,eAAe;IAC9B,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,4EAA4E;AAC5E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,uCAAuC;AACvC,MAAM,MAAM,cAAc,GACtB,QAAQ,GACR,UAAU,GACV,oBAAoB,GACpB,gBAAgB,CAAC;AAErB,oCAAoC;AACpC,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,mFAAmF;AACnF,MAAM,WAAW,eAAgB,SAAQ,gBAAgB;IACvD,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAiBD;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,iBAAiB,EAAE,eAAe,CASlF,CAAC;AAEF,iFAAiF;AACjF,eAAO,MAAM,qBAAqB,EAAE,eAAkD,CAAC;AAEvF,eAAO,MAAM,oBAAoB,MAAM,CAAC;AACxC,eAAO,MAAM,2BAA2B,KAAK,CAAC;AA0B9C,MAAM,WAAW,kBAAkB;IACjC,oFAAoF;IACpF,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC,CAAC;IAC/D,8BAA8B;IAC9B,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAClC,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mDAAmD;IACnD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,iEAAiE;IACjE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAkCD,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6C;IACtE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAkB;IAC/C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAEnC;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,WAAW,CAAK;gBAEZ,IAAI,GAAE,kBAAuB;IAmDzC,uEAAuE;IACvE,WAAW,IAAI,MAAM;IAIrB,8CAA8C;IAC9C,aAAa,IAAI,MAAM;IAIvB,MAAM,IAAI;QACR,MAAM,EAAE,eAAe,CAAC;QACxB,YAAY,EAAE,MAAM,CAAC;QACrB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,gBAAgB,EAAE,MAAM,CAAC;KAC1B;IASD;;;;;;;OAOG;IACH,UAAU,CAAC,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,iBAAiB,GAAG,eAAe;IA0CnF;;;;OAIG;IACH,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB;IAWpD,OAAO,CAAC,IAAI;IAUZ,wDAAwD;IACxD,OAAO,CAAC,KAAK;IAqBb,OAAO,CAAC,SAAS;IAcjB,OAAO,CAAC,WAAW;IAOnB,2EAA2E;IAC3E,OAAO,CAAC,KAAK;IASb,OAAO,CAAC,QAAQ;CAIjB"}

package/dist/esm/execution/rate-limiter.js

@@ -0,0 +1,269 @@
+import { LIMITS } from '../protocol/constants';
+/**
+ * Absolute ceilings. A limit is configurable but never unbounded: a
+ * misconfigured or hostile environment variable is clamped into this range
+ * rather than allowed to remove the control.
+ */
+const MAX_BURST = 10_000;
+const MAX_RATE_PER_SECOND = 5_000;
+const MAX_INFLIGHT = 4_096;
+const MAX_INFLIGHT_PER_DB = 1_024;
+const MAX_TRACKED_KEYS = 200_000;
+const MIN_TRACKED_KEYS = 64;
+const MAX_IDLE_TTL_MS = 3_600_000;
+const MIN_IDLE_TTL_MS = 1_000;
+const MAX_INTROSPECT_BYTES = 268_435_456;
+/**
+ * Default budget per action.
+ *
+ * `introspect` is deliberately the tightest: one call runs eleven catalogue
+ * queries and returns the entire schema, so it is the cheapest request to make
+ * and the most valuable one to an attacker exfiltrating a schema.
+ */
+export const DEFAULT_RATE_LIMIT_POLICIES = {
+    ping: { burst: 240, per_second: 60 },
+    query: { burst: 300, per_second: 100 },
+    stream_query: { burst: 60, per_second: 20 },
+    migration_run: { burst: 20, per_second: 1 },
+    cancel: { burst: 60, per_second: 20 },
+    introspect: { burst: 30, per_second: 5 },
+    event: { burst: 120, per_second: 30 },
+    other: { burst: 120, per_second: 30 },
+};
+/** Ceiling for everything the connector does, whatever the caller's identity. */
+export const DEFAULT_GLOBAL_POLICY = { burst: 1000, per_second: 200 };
+export const DEFAULT_MAX_INFLIGHT = 128;
+export const DEFAULT_MAX_INFLIGHT_PER_DB = 64;
+/**
+ * `cancel` is exempt from the concurrency cap and `ping` from both counters.
+ *
+ * A concurrency cap that could refuse a cancel would turn load into an
+ * un-cancellable workload, which is the opposite of what the control is for.
+ * Both actions still spend tokens, and `ping` still costs nothing but a frame.
+ */
+const CONCURRENCY_EXEMPT = new Set([
+    'cancel',
+    'ping',
+]);
+/** Reported when a bucket has a zero refill rate and will never recover. */
+const NO_RETRY_MS = 60_000;
+/** Reported when a request is refused a concurrency slot. */
+const CONCURRENCY_RETRY_MS = 1_000;
+const NOOP = () => { };
+function clampInt(value, min, max) {
+    if (!Number.isFinite(value))
+        return min;
+    return Math.min(Math.max(Math.floor(value), min), max);
+}
+function clampPolicy(policy) {
+    return {
+        burst: clampInt(policy.burst, 1, MAX_BURST),
+        per_second: Math.min(Math.max(Number.isFinite(policy.per_second) ? policy.per_second : 0, 0), MAX_RATE_PER_SECOND),
+    };
+}
+function envInt(name) {
+    const raw = process.env[name];
+    if (raw === undefined || raw === '')
+        return undefined;
+    const parsed = Number.parseInt(raw, 10);
+    return Number.isFinite(parsed) ? parsed : undefined;
+}
+/**
+ * Identity components are truncated before they are used as a key so that a
+ * caller cannot inflate the map with megabyte-long `db_alias` values.
+ */
+function keyPart(value) {
+    return (value ?? '').slice(0, LIMITS.ID_MAX_LENGTH);
+}
+export class RateLimiter {
+    policies;
+    globalPolicy;
+    maxInflight;
+    maxInflightPerDb;
+    maxTrackedKeys;
+    idleTtlMs;
+    sweepIntervalMs;
+    maxIntrospectBytes;
+    now;
+    /**
+     * Buckets keyed by `identity\u0000action`, plus the global bucket. Insertion
+     * order is maintained on touch, which makes the oldest entry the least
+     * recently used one and the entry evicted when the cap is reached.
+     */
+    buckets = new Map();
+    globalBucket;
+    inflightByDb = new Map();
+    inflight = 0;
+    lastSweepAt = 0;
+    constructor(opts = {}) {
+        const base = {
+            ...DEFAULT_RATE_LIMIT_POLICIES,
+        };
+        for (const action of Object.keys(base)) {
+            const override = opts.policies?.[action];
+            if (override)
+                base[action] = clampPolicy({ ...base[action], ...override });
+        }
+        this.policies = base;
+        this.globalPolicy = clampPolicy({
+            burst: opts.global?.burst ?? envInt('SW_RATE_LIMIT_GLOBAL_BURST') ?? DEFAULT_GLOBAL_POLICY.burst,
+            per_second: opts.global?.per_second ??
+                envInt('SW_RATE_LIMIT_GLOBAL_RPS') ??
+                DEFAULT_GLOBAL_POLICY.per_second,
+        });
+        this.maxInflight = clampInt(opts.max_inflight ?? envInt('SW_RATE_LIMIT_MAX_INFLIGHT') ?? DEFAULT_MAX_INFLIGHT, 1, MAX_INFLIGHT);
+        this.maxInflightPerDb = Math.min(clampInt(opts.max_inflight_per_db ??
+            envInt('SW_RATE_LIMIT_MAX_INFLIGHT_PER_DB') ??
+            DEFAULT_MAX_INFLIGHT_PER_DB, 1, MAX_INFLIGHT_PER_DB), this.maxInflight);
+        this.maxTrackedKeys = clampInt(opts.max_tracked_keys ?? envInt('SW_RATE_LIMIT_MAX_KEYS') ?? 10_000, MIN_TRACKED_KEYS, MAX_TRACKED_KEYS);
+        this.idleTtlMs = clampInt(opts.idle_ttl_ms ?? 300_000, MIN_IDLE_TTL_MS, MAX_IDLE_TTL_MS);
+        this.sweepIntervalMs = Math.max(MIN_IDLE_TTL_MS, Math.min(30_000, Math.floor(this.idleTtlMs / 10)));
+        this.maxIntrospectBytes = clampInt(opts.max_introspect_bytes ?? envInt('SW_RATE_LIMIT_MAX_INTROSPECT_BYTES') ?? 32_777_216, 1_024, MAX_INTROSPECT_BYTES);
+        this.now = opts.now ?? (() => Date.now());
+        const now = this.now();
+        this.globalBucket = { tokens: this.globalPolicy.burst, updated_at: now, last_seen: now };
+    }
+    /** Number of tracked buckets. Exposed so boundedness is assertable. */
+    trackedKeys() {
+        return this.buckets.size;
+    }
+    /** Requests admitted and not yet released. */
+    inflightCount() {
+        return this.inflight;
+    }
+    limits() {
+        return {
+            global: this.globalPolicy,
+            max_inflight: this.maxInflight,
+            max_inflight_per_db: this.maxInflightPerDb,
+            max_tracked_keys: this.maxTrackedKeys,
+        };
+    }
+    /**
+     * Admit one request, spending budget from the global bucket, the caller's
+     * per-identity bucket and the concurrency counters.
+     *
+     * The returned permit must be released exactly when the request finishes,
+     * including on every error path: an unreleased permit permanently consumes
+     * concurrency capacity.
+     */
+    tryAcquire(action, identity) {
+        const now = this.now();
+        this.sweep(now);
+        const dbAlias = keyPart(identity.db_alias);
+        const exempt = CONCURRENCY_EXEMPT.has(action);
+        const dbInflight = this.inflightByDb.get(dbAlias) ?? 0;
+        if (!exempt) {
+            if (this.inflight >= this.maxInflight) {
+                return this.deny('concurrency_global', 'too_many_concurrent_requests', CONCURRENCY_RETRY_MS);
+            }
+            if (dbInflight >= this.maxInflightPerDb) {
+                return this.deny('concurrency_db', 'too_many_concurrent_requests_for_database', CONCURRENCY_RETRY_MS);
+            }
+        }
+        const globalSpend = this.spend(this.globalBucket, this.globalPolicy, now);
+        if (!globalSpend.ok)
+            return this.deny('global', 'rate_limit_exceeded', globalSpend.retry_after_ms);
+        const key = `${keyPart(identity.agent_id)}\u0000${keyPart(identity.user_id)}\u0000${dbAlias}\u0000${action}`;
+        const policy = this.policies[action] ?? this.policies.other;
+        const identitySpend = this.spend(this.bucketFor(key, policy, now), policy, now);
+        if (!identitySpend.ok)
+            return this.deny('identity', 'rate_limit_exceeded', identitySpend.retry_after_ms);
+        if (!exempt) {
+            this.inflight++;
+            this.inflightByDb.set(dbAlias, dbInflight + 1);
+        }
+        let released = false;
+        return {
+            allowed: true,
+            retry_after_ms: 0,
+            release: () => {
+                if (released || exempt)
+                    return;
+                released = true;
+                this.releaseSlot(dbAlias);
+            },
+        };
+    }
+    /**
+     * Size budget for one introspection response. A snapshot above the ceiling
+     * still cost eleven catalogue queries on the server, but it is not shipped,
+     * which is what bounds schema exfiltration.
+     */
+    checkIntrospectSize(bytes) {
+        if (Number.isFinite(bytes) && bytes >= 0 && bytes <= this.maxIntrospectBytes) {
+            return { allowed: true, retry_after_ms: 0 };
+        }
+        return {
+            allowed: false,
+            reason: 'introspection_snapshot_exceeds_budget',
+            retry_after_ms: 0,
+        };
+    }
+    deny(scope, reason, retry_after_ms) {
+        return {
+            allowed: false,
+            scope,
+            reason,
+            retry_after_ms,
+            release: NOOP,
+        };
+    }
+    /** Take one token, refilling for elapsed time first. */
+    spend(bucket, policy, now) {
+        const elapsed = Math.max(0, now - bucket.updated_at);
+        bucket.tokens = Math.min(policy.burst, bucket.tokens + (elapsed / 1_000) * policy.per_second);
+        bucket.updated_at = now;
+        bucket.last_seen = now;
+        if (bucket.tokens >= 1) {
+            bucket.tokens -= 1;
+            return { ok: true, retry_after_ms: 0 };
+        }
+        const deficit = 1 - bucket.tokens;
+        return {
+            ok: false,
+            retry_after_ms: policy.per_second > 0 ? Math.max(1, Math.ceil((deficit / policy.per_second) * 1_000)) : NO_RETRY_MS,
+        };
+    }
+    bucketFor(key, policy, now) {
+        const existing = this.buckets.get(key);
+        if (existing) {
+            // Re-insert so the map iterates least-recently-used first.
+            this.buckets.delete(key);
+            this.buckets.set(key, existing);
+            return existing;
+        }
+        if (this.buckets.size >= this.maxTrackedKeys)
+            this.evictOne();
+        const bucket = { tokens: policy.burst, updated_at: now, last_seen: now };
+        this.buckets.set(key, bucket);
+        return bucket;
+    }
+    releaseSlot(dbAlias) {
+        if (this.inflight > 0)
+            this.inflight--;
+        const next = (this.inflightByDb.get(dbAlias) ?? 1) - 1;
+        if (next <= 0)
+            this.inflightByDb.delete(dbAlias);
+        else
+            this.inflightByDb.set(dbAlias, next);
+    }
+    /** Drop buckets that have been idle past the TTL, then enforce the cap. */
+    sweep(now) {
+        if (now - this.lastSweepAt < this.sweepIntervalMs)
+            return;
+        this.lastSweepAt = now;
+        for (const [key, bucket] of this.buckets) {
+            if (now - bucket.last_seen > this.idleTtlMs)
+                this.buckets.delete(key);
+        }
+        while (this.buckets.size > this.maxTrackedKeys)
+            this.evictOne();
+    }
+    evictOne() {
+        const oldest = this.buckets.keys().next();
+        if (!oldest.done)
+            this.buckets.delete(oldest.value);
+    }
+}
+//# sourceMappingURL=rate-limiter.js.map

package/dist/esm/execution/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../../src/execution/rate-limiter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAsD/C;;;;GAIG;AACH,MAAM,SAAS,GAAG,MAAM,CAAC;AACzB,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC,MAAM,YAAY,GAAG,KAAK,CAAC;AAC3B,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACjC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,eAAe,GAAG,SAAS,CAAC;AAClC,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,oBAAoB,GAAG,WAAW,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAA+C;IACrF,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE;IACpC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE;IACtC,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;IAC3C,aAAa,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE;IAC3C,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;IACrC,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE;IACxC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE;IACrC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE;CACtC,CAAC;AAEF,iFAAiF;AACjF,MAAM,CAAC,MAAM,qBAAqB,GAAoB,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAEvF,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACxC,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAmC,IAAI,GAAG,CAAoB;IACpF,QAAQ;IACR,MAAM;CACP,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,WAAW,GAAG,MAAM,CAAC;AAE3B,6DAA6D;AAC7D,MAAM,oBAAoB,GAAG,KAAK,CAAC;AA2BnC,MAAM,IAAI,GAAG,GAAS,EAAE,GAAE,CAAC,CAAC;AAE5B,SAAS,QAAQ,CAAC,KAAa,EAAE,GAAW,EAAE,GAAW;IACvD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,MAAuB;IAC1C,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,SAAS,CAAC;QAC3C,UAAU,EAAE,IAAI,CAAC,GAAG,CAClB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EACvE,mBAAmB,CACpB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,SAAS,OAAO,CAAC,KAAyB;IACxC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,OAAO,WAAW;IACL,QAAQ,CAA6C;IACrD,YAAY,CAAkB;IAC9B,WAAW,CAAS;IACpB,gBAAgB,CAAS;IACzB,cAAc,CAAS;IACvB,SAAS,CAAS;IAClB,eAAe,CAAS;IACxB,kBAAkB,CAAS;IAC3B,GAAG,CAAe;IAEnC;;;;OAIG;IACc,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,YAAY,CAAS;IACrB,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,QAAQ,GAAG,CAAC,CAAC;IACb,WAAW,GAAG,CAAC,CAAC;IAExB,YAAY,OAA2B,EAAE;QACvC,MAAM,IAAI,GAA+C;YACvD,GAAG,2BAA2B;SAC/B,CAAC;QACF,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAwB,EAAE,CAAC;YAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,QAAQ;gBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;YAC9B,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,MAAM,CAAC,4BAA4B,CAAC,IAAI,qBAAqB,CAAC,KAAK;YAChG,UAAU,EACR,IAAI,CAAC,MAAM,EAAE,UAAU;gBACvB,MAAM,CAAC,0BAA0B,CAAC;gBAClC,qBAAqB,CAAC,UAAU;SACnC,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,GAAG,QAAQ,CACzB,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,4BAA4B,CAAC,IAAI,oBAAoB,EACjF,CAAC,EACD,YAAY,CACb,CAAC;QACF,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAC9B,QAAQ,CACN,IAAI,CAAC,mBAAmB;YACtB,MAAM,CAAC,mCAAmC,CAAC;YAC3C,2BAA2B,EAC7B,CAAC,EACD,mBAAmB,CACpB,EACD,IAAI,CAAC,WAAW,CACjB,CAAC;QACF,IAAI,CAAC,cAAc,GAAG,QAAQ,CAC5B,IAAI,CAAC,gBAAgB,IAAI,MAAM,CAAC,wBAAwB,CAAC,IAAI,MAAM,EACnE,gBAAgB,EAChB,gBAAgB,CACjB,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;QACzF,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACpG,IAAI,CAAC,kBAAkB,GAAG,QAAQ,CAChC,IAAI,CAAC,oBAAoB,IAAI,MAAM,CAAC,oCAAoC,CAAC,IAAI,UAAU,EACvF,KAAK,EACL,oBAAoB,CACrB,CAAC;QACF,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAE1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,YAAY,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC3F,CAAC;IAED,uEAAuE;IACvE,WAAW;QACT,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,8CAA8C;IAC9C,aAAa;QACX,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,MAAM;QAMJ,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,YAAY;YACzB,YAAY,EAAE,IAAI,CAAC,WAAW;YAC9B,mBAAmB,EAAE,IAAI,CAAC,gBAAgB;YAC1C,gBAAgB,EAAE,IAAI,CAAC,cAAc;SACtC,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,MAAyB,EAAE,QAA2B;QAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEhB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACtC,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,8BAA8B,EAAE,oBAAoB,CAAC,CAAC;YAC/F,CAAC;YACD,IAAI,UAAU,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACxC,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,2CAA2C,EAAE,oBAAoB,CAAC,CAAC;YACxG,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,qBAAqB,EAAE,WAAW,CAAC,cAAc,CAAC,CAAC;QAEnG,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,OAAO,SAAS,MAAM,EAAE,CAAC;QAC7G,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC5D,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAChF,IAAI,CAAC,aAAa,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,qBAAqB,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;QAEzG,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,cAAc,EAAE,CAAC;YACjB,OAAO,EAAE,GAAG,EAAE;gBACZ,IAAI,QAAQ,IAAI,MAAM;oBAAE,OAAO;gBAC/B,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC;SACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,mBAAmB,CAAC,KAAa;QAC/B,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;QAC9C,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,uCAAuC;YAC/C,cAAc,EAAE,CAAC;SAClB,CAAC;IACJ,CAAC;IAEO,IAAI,CAAC,KAAqB,EAAE,MAAc,EAAE,cAAsB;QACxE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK;YACL,MAAM;YACN,cAAc;YACd,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,wDAAwD;IAChD,KAAK,CACX,MAAc,EACd,MAAuB,EACvB,GAAW;QAEX,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9F,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;QACxB,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC;QACvB,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;YACnB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;QACzC,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QAClC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,cAAc,EACZ,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW;SACtG,CAAC;IACJ,CAAC;IAEO,SAAS,CAAC,GAAW,EAAE,MAAuB,EAAE,GAAW;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,QAAQ,EAAE,CAAC;YACb,2DAA2D;YAC3D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAChC,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,cAAc;YAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAW,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACjF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,WAAW,CAAC,OAAe;QACjC,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC;YAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,IAAI,IAAI,CAAC;YAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;;YAC5C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,2EAA2E;IACnE,KAAK,CAAC,GAAW;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,eAAe;YAAE,OAAO;QAC1D,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACzC,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,cAAc;YAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClE,CAAC;IAEO,QAAQ;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;CACF"}

package/dist/esm/execution/search-path.d.ts

@@ -0,0 +1,161 @@
+/**
+ * `search_path` composition and verification.
+ *
+ * WHY THIS IS A SEPARATE MODULE
+ * -----------------------------
+ * This was a *seam* defect. `resolveSearchPath()` produced a correct
+ * intermediate string (`'analytics, public'`), `quoteSearchPath()` re-split that
+ * string on `,` **without trimming**, and the two halves disagreed about what a
+ * component was:
+ *
+ *     config   "analytics, public"
+ *       -> resolveSearchPath  ->  "analytics, public"      (looks right)
+ *       -> quoteSearchPath    ->  SET search_path = "analytics", " public"
+ *
+ * The second component is a schema literally named `" public"` — a name that
+ * does not exist — so the real `public` schema silently left the resolution
+ * path and every unqualified name resolved to whichever schema came first. The
+ * post-condition guard at `pool.ts` then passed, because it asked
+ * `actualPath.toLowerCase().includes('public')` and `" public"` contains
+ * `public`. The control written to catch this was defeated by the same defect
+ * it was checking for.
+ *
+ * The fix is structural rather than a patch: there is now **no string
+ * round-trip at all**. A list of schema names is resolved once, rendered once,
+ * and the post-condition compares that same list against what PostgreSQL reports
+ * — component by component, in order. A component can never acquire or lose a
+ * space, a quote or a comma between "what we intended" and "what the server
+ * was told", because it is a string element the whole way through and the only
+ * place a separator appears is where the renderer and the verifier each derive
+ * it independently from the same array.
+ *
+ * Everything here is pure: no database, no pool, no I/O. That is deliberate —
+ * the unit suite asserts the *composed statement* here rather than the
+ * intermediate value, which is precisely the seam the previous test missed.
+ */
+import type { DbEntry } from '../config/db-config';
+/**
+ * `search_path` a pooled session is pinned to when a database entry does not
+ * name one, and the component that is always kept last so unqualified names keep
+ * resolving. `pg_temp` is deliberately excluded: a temporary object of the same
+ * name would otherwise shadow a permanent table for the whole session.
+ */
+export declare const DEFAULT_SEARCH_PATH = "public";
+/**
+ * The schema PostgreSQL implicitly searches first whenever it is not named
+ * explicitly in `search_path`. See {@link resolveSearchPath} for why it is
+ * hoisted rather than appended unconditionally.
+ */
+export declare const PG_CATALOG_SCHEMA = "pg_catalog";
+/**
+ * The implicit schema for session-local temporary objects. Never pinned: a temp
+ * object of the same name would shadow a permanent table for the whole session,
+ * which is a session-poisoning primitive any principal with `CREATE TEMP
+ * TABLE` can reach.
+ */
+export declare const PG_TEMP_SCHEMA = "pg_temp";
+/**
+ * Whether a string may be used as one `search_path` component at all.
+ *
+ * Used both as the gate in {@link resolveSearchPathComponents} (discard a
+ * component the operator got wrong) and as the gate in
+ * {@link quoteSchemaIdentifier} (refuse to emit one we did not validate). The
+ * same predicate in both places is the point: there is no second, laxer path
+ * into the emitted statement.
+ */
+export declare function isBareSchemaIdentifier(name: string): boolean;
+/**
+ * The ordered, de-duplicated list of schemas a session for this entry searches.
+ *
+ * Rules, in order:
+ *
+ * 1. No configured value, or no component that survives validation, yields the
+ *    single component `['public']`.
+ * 2. A component is trimmed and then kept only if {@link isBareSchemaIdentifier}
+ *    accepts it, so `'a," public"'` contributes `['a']` and never a schema named
+ *    `" public"`. Nothing is escaped into existence, and whitespace *inside* a
+ *    component is a rejection rather than a rename — the two rules together are
+ *    what make it impossible to emit a component with a leading space.
+ * 3. `pg_temp` is dropped (temp objects must not shadow permanent ones), matched
+ *    case-insensitively.
+ * 4. `pg_catalog` is hoisted to the front if it appears anywhere.
+ *    PostgreSQL already searches `pg_catalog` first *unless* it is named
+ *    explicitly, in which case it is searched at the named position — so a
+ *    configured `'app, pg_catalog, public'` would let a customer schema shadow
+ *    built-ins such as `pg_class`. Hoisting restores the implicit-first behaviour
+ *    the operator was already relying on, without adding a component they did
+ *    not ask for.
+ * 5. `public` is always last, unconditionally — it is appended even when the
+ *    config never named it — so unqualified names keep resolving against the
+ *    schema the entry promises. That unconditional append is the property
+ *    destroyed and the reason a post-condition guard existed at all.
+ *    First-occurrence order is otherwise kept, and ordinary duplicates are
+ *    removed.
+ *
+ * The returned array is the single source of truth for both the emitted
+ * `SET search_path` and the post-condition comparison; it is never joined into
+ * a string and re-split.
+ */
+export declare function resolveSearchPathComponents(entry: DbEntry): string[];
+/**
+ * Render the `SET search_path` statement for a resolved component list.
+ *
+ * The output is the *statement*, not a fragment: the defect this function
+ * exists to make impossible was a caller composing a value from one string and
+ * a separator from another. Producing the whole statement means the tests can
+ * assert exactly what goes over the wire.
+ *
+ * @throws when a component is not a validated bare identifier, or the list is
+ * empty — both are unrecoverable and must fail closed.
+ */
+export declare function renderSearchPathSet(components: readonly string[]): string;
+/**
+ * Split the value PostgreSQL reports for `SHOW search_path` into components.
+ *
+ * Two things make a naive `value.split(',')` wrong here, and both were observed
+ * against a live PostgreSQL 16.2:
+ *
+ * - **Quoting.** `SET search_path = "Weird Schema", "public"` comes back as
+ *   `"Weird Schema", public`. Comparing that text to the expected list fails
+ *   even though the path is correct, so quoted components are unquoted
+ *   (including `""` -> `"`).
+ * - **Commas inside a quoted identifier.** `"a,b"` is one component, not two,
+ *   so the split is quote-aware.
+ *
+ * The load-bearing detail is that **whitespace inside a quoted identifier is
+ * significant and whitespace outside it is not**. `analytics, " public"`
+ * unquotes to a component named `" public"` — with the leading space — which is
+ * NOT `public`. Trimming after unquoting would turn the  payload back into
+ * a passing match, which is precisely the mistake the old substring guard made:
+ * the corruption was invisible because the comparison ignored the space. So
+ * each character is trimmed only while it is outside quotes.
+ *
+ * Components are lower-cased because unquoted identifiers are folded by
+ * PostgreSQL, so `PUBLIC` and `public` are the same schema and the comparison
+ * must not fail on case alone. Empty components are **kept** as `''` rather than
+ * filtered: a path with a hole in it is not the list we set.
+ */
+export declare function parseSearchPathSetting(value: string): string[];
+/**
+ * The  post-condition: does `SHOW search_path` report exactly the list we
+ * pinned, component for component and in order?
+ *
+ * The previous check was `actual.toLowerCase().includes('public')`, which
+ * passes for `analytics, " public"` — the very corruption it was supposed to
+ * catch. Order matters too: `evil, public, analytics` is not the path we set,
+ * and a path that merely *contains* the expected components in a different
+ * order resolves unqualified names differently, so it is a failure.
+ *
+ * Length equality is part of the comparison, so a missing or an extra component
+ * fails. That also covers a server which chose to fold duplicates: the list we
+ * render is already de-duplicated, so any difference from it is a difference we
+ * did not ask for.
+ */
+export declare function searchPathMatches(actual: string, expected: readonly string[]): boolean;
+/**
+ * A human-readable, secret-free description of a `SHOW search_path` result for
+ * an error message. Schema names are operator-controlled, not credentials, but
+ * the value is still bounded because it reaches the browser.
+ */
+export declare function describeSearchPathSetting(value: string): string;
+//# sourceMappingURL=search-path.d.ts.map

package/dist/esm/execution/search-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-path.d.ts","sourceRoot":"","sources":["../../../src/execution/search-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,WAAW,CAAC;AAE5C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,eAAe,CAAC;AAE9C;;;;;GAKG;AACH,eAAO,MAAM,cAAc,YAAY,CAAC;AAaxC;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE5D;AAiDD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CA8BpE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAMzE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAiD9D;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAKtF;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/D"}