@supatype/cli 0.2.1 → 0.3.0

package/dist/model-versioning.js

@@ -0,0 +1,140 @@
+/**
+ * Which models keep drafts and version history, read from the extracted schema.
+ *
+ * The answer shapes things decided before any database exists: whether `PGRST_DB_SCHEMA` names the
+ * generated `draft` schema, and whether the push refuses a model that also masks a column. So it is
+ * read from the AST rather than asked of Postgres, the same way
+ * [`field-masking-tier`](./field-masking-tier.ts) decides the masking tier offline.
+ *
+ * Shaped loosely on purpose: the CLI's AST carries `options` as an opaque record, and nothing here
+ * needs more than "is `versions` present, and what did it ask for".
+ */
+import { existsSync } from "node:fs";
+import { loadSchemaAst } from "./config.js";
+import { draftVisibilityRoles, previewLimits, schemaPathFromProject } from "./project-config.js";
+/** Versions kept per record when the model states no retention. */
+export const DEFAULT_VERSIONS_KEPT = 20;
+/**
+ * Normalise a `versions` value from the AST.
+ *
+ * `true` is shorthand for `{ drafts: true }` with the default retention, and a non-positive or
+ * unparseable `keep` falls back to the default rather than to "keep nothing": pruning to zero would
+ * delete the draft the author is editing.
+ */
+export function resolveVersionsOptions(raw) {
+    if (raw === true)
+        return { drafts: true, keep: DEFAULT_VERSIONS_KEPT };
+    if (typeof raw !== "object" || raw === null)
+        return undefined;
+    const record = raw;
+    const keep = typeof record.keep === "number" && Number.isFinite(record.keep) && record.keep >= 1
+        ? Math.floor(record.keep)
+        : DEFAULT_VERSIONS_KEPT;
+    return { drafts: record.drafts !== false, keep };
+}
+/** Every model in the schema that declares `versions`, in declaration order. */
+export function versionedModels(ast) {
+    const models = ast?.models;
+    if (!Array.isArray(models))
+        return [];
+    const out = [];
+    for (const entry of models) {
+        const model = entry;
+        if (model === null || typeof model !== "object")
+            continue;
+        const options = resolveVersionsOptions(model.options?.["versions"]);
+        if (options === undefined)
+            continue;
+        const name = typeof model.name === "string" ? model.name : "";
+        const tableName = model.annotations?.db?.tableName;
+        out.push({
+            name,
+            tableName: typeof tableName === "string" ? tableName : name,
+            options,
+        });
+    }
+    return out;
+}
+/** Whether anything in the schema is versioned, which is what exposes the `draft` schema. */
+export function schemaHasVersionedModels(ast) {
+    return versionedModels(ast).length > 0;
+}
+/**
+ * Models declaring both `versions` and per-column rules, which cannot both be enforced.
+ *
+ * A version snapshot is opaque `jsonb`. `supatype_mask` is driven by security labels on a specific
+ * table's column and rewrites references to *that* column, and the view tier puts the masking
+ * expression in a view over the real columns: neither can see inside a snapshot. So a masked value
+ * sits in plain sight in the versions table for anyone able to read it, and the push refuses rather
+ * than applying a schema whose restrictions have a hole in them.
+ *
+ * Per model, and that matters: under the view tier the managed schema comes off the exposed list but
+ * the API roles keep their privileges on the base tables, so a `security_invoker` view in an exposed
+ * schema — which is exactly what `draft.<table>` is — reaches past the `api` layer. A project may
+ * hold a masked model and a versioned model at once; one model may not be both.
+ */
+export function modelsWithVersionsAndFieldRules(ast) {
+    const models = ast?.models;
+    if (!Array.isArray(models))
+        return [];
+    const out = [];
+    for (const entry of models) {
+        const model = entry;
+        if (model === null || typeof model !== "object")
+            continue;
+        if (resolveVersionsOptions(model.options?.["versions"]) === undefined)
+            continue;
+        const fields = model.annotations?.platform?.access?.["fields"];
+        if (typeof fields !== "object" || fields === null || Object.keys(fields).length === 0)
+            continue;
+        out.push(typeof model.name === "string" ? model.name : "(unnamed model)");
+    }
+    return out;
+}
+/**
+ * Whether this project on disk has any versioned model.
+ *
+ * A schema that fails to load reads as "no versioned models", the narrower answer: deciding the
+ * exposed-schema list is the wrong moment to report a syntax error, and `push` and `dev` do it
+ * properly moments later with the file and line. Narrower rather than wider on purpose, since the
+ * failure mode of guessing wrong here is exposing a schema of drafts.
+ */
+export function projectHasVersionedModels(cwd, config) {
+    try {
+        const schemaPath = schemaPathFromProject(config, cwd);
+        if (!existsSync(schemaPath))
+            return false;
+        return schemaHasVersionedModels(loadSchemaAst(schemaPath, cwd));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The AST with this project's publishing settings attached, when anything is versioned.
+ *
+ * The engine compiles draft visibility into the generated policies, and it **refuses** a push whose
+ * schema has versioned models and carries no settings rather than applying a default. That refusal
+ * is the reason this is safe to add at a handful of call sites instead of somewhere unmissable: a
+ * path that forgets fails loudly at push time, naming what is missing, rather than quietly
+ * narrowing or widening who can read unpublished content.
+ *
+ * Returns the AST untouched for a project with no versioned model, so nothing else grows a key it
+ * has no use for.
+ */
+export function withPublishing(ast, config) {
+    if (!schemaHasVersionedModels(ast))
+        return ast;
+    const limits = previewLimits(config);
+    return {
+        ...ast,
+        publishing: {
+            draftVisibility: draftVisibilityRoles(config),
+            previewDefaultTtl: limits.defaultTtl,
+            previewMaxRecordTtl: limits.maxRecordTtl,
+            previewMaxProjectTtl: limits.maxProjectTtl,
+            previewAllowProjectScope: limits.allowProjectScope,
+        },
+    };
+}
+//# sourceMappingURL=model-versioning.js.map

package/dist/model-versioning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-versioning.js","sourceRoot":"","sources":["../src/model-versioning.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAG3C,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAEhG,mEAAmE;AACnE,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAA;AAyBvC;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAY;IACjD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAA;IACtE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IAC7D,MAAM,MAAM,GAAG,GAA2C,CAAA;IAC1D,MAAM,IAAI,GACR,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC;QACjF,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;QACzB,CAAC,CAAC,qBAAqB,CAAA;IAC3B,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,IAAI,EAAE,CAAA;AAClD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,MAAM,MAAM,GAAI,GAAqC,EAAE,MAAM,CAAA;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAA;IAErC,MAAM,GAAG,GAAqB,EAAE,CAAA;IAChC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,KAA0B,CAAA;QACxC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAQ;QACzD,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;QACnE,IAAI,OAAO,KAAK,SAAS;YAAE,SAAQ;QACnC,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;QAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,EAAE,EAAE,EAAE,SAAS,CAAA;QAClD,GAAG,CAAC,IAAI,CAAC;YACP,IAAI;YACJ,SAAS,EAAE,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;YAC3D,OAAO;SACR,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;AACxC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,+BAA+B,CAAC,GAAY;IAC1D,MAAM,MAAM,GAAI,GAAqC,EAAE,MAAM,CAAA;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAA;IAErC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,KAA0B,CAAA;QACxC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAQ;QACzD,IAAI,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC,KAAK,SAAS;YAAE,SAAQ;QAC/E,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAA;QAC9D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QAC/F,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAW,EAAE,MAA6B;IAClF,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACrD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAA;QACzC,OAAO,wBAAwB,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAA;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAyB,EACzB,MAA6B;IAE7B,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAA;IAE9C,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IACpC,OAAO;QACL,GAAG,GAAG;QACN,UAAU,EAAE;YACV,eAAe,EAAE,oBAAoB,CAAC,MAAM,CAAC;YAC7C,iBAAiB,EAAE,MAAM,CAAC,UAAU;YACpC,mBAAmB,EAAE,MAAM,CAAC,YAAY;YACxC,oBAAoB,EAAE,MAAM,CAAC,aAAa;YAC1C,wBAAwB,EAAE,MAAM,CAAC,iBAAiB;SACnD;KACF,CAAA;AACH,CAAC"}

package/dist/postgres-ctl.d.ts

@@ -11,6 +11,15 @@ export interface PgOptions {
     port: number;
     /** Path to write the postgres log file. */
     logPath?: string;
+    /**
+     * Port for the RESP keyspace, when the native install carries pg_keyspace.
+     *
+     * Absent means do not serve RESP at all: `supatype dev` then starts the
+     * Valkey sidecar instead, as it always has.
+     */
+    keyspacePort?: number;
+    /** Database durable keys are written to. Ignored while everything is ephemeral. */
+    keyspaceDatabase?: string;
 }
 /**
  * Native Postgres bundles are built with prefix /usr/local/supatype-pg; dyld/ld
@@ -37,6 +46,52 @@ export declare function initdb(opts: PgOptions): void;
  * `lib/postgresql/`.
  */
 export declare function nativeMaskLibraryPresent(pgBinDir: string | null | undefined): boolean;
+/**
+ * Whether a native Postgres install carries the RESP keyspace.
+ *
+ * Asked of the filesystem for the same reason as the mask: an archive
+ * downloaded before pg_keyspace was bundled has a Postgres without it, and the
+ * Windows archive has none at all — pgrx has no Windows target. Naming it in
+ * `shared_preload_libraries` anyway would stop the server starting with "could
+ * not access file", which would turn a missing cache into no database.
+ */
+export declare function nativeKeyspaceLibraryPresent(pgBinDir: string | null | undefined): boolean;
+/**
+ * Where the native RESP keyspace looks for a free port, and how far it looks.
+ *
+ * 6379 first, because that is what a developer's tooling and the Valkey
+ * sidecar before it both used, so the familiar port stays the usual answer.
+ */
+export declare const KEYSPACE_PORT_BASE = 6379;
+export declare const KEYSPACE_PORT_SPAN = 10;
+/**
+ * The first free port in [base, base + span), or null when they are all taken.
+ *
+ * Binding a port something else already holds would leave Postgres up and the
+ * keyspace silently dead — the failure lands in the postmaster log and nowhere
+ * a developer is looking — so the port is chosen before the server starts
+ * rather than fixed and hoped for.
+ */
+export declare function firstFreePort(base: number, span: number): Promise<number | null>;
+/**
+ * The `-o` options pg_ctl passes to the server.
+ *
+ * Separated from the spawn so the decision is testable. What goes in here is
+ * decided by which libraries the archive happens to carry, which is exactly
+ * the kind of thing that is wrong in one combination nobody runs locally.
+ *
+ * Order in `shared_preload_libraries` is load-bearing: pg_keyspace first, then
+ * supatype_mask, so the mask stays outermost. pg_keyspace checks this itself
+ * and refuses to serve when the order is wrong — deliberately, since RESP
+ * would otherwise hand back rows the mask never rewrote.
+ *
+ * The sizing is the measured dev profile: ~60 MiB of shared memory, against
+ * the extension's own defaults of ~689 MiB before rings and row cache. It is
+ * reserved at postmaster start whether or not anything caches, so a local
+ * Postgres should not ask for a production keyspace. Durability is ephemeral
+ * throughout: nothing in a dev keyspace is the only copy of anything.
+ */
+export declare function pgServerOptions(opts: PgOptions): string;
 export declare function start(opts: PgOptions): void;
 /**
  * Stop Postgres using pg_ctl (fast mode).

package/dist/postgres-ctl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postgres-ctl.d.ts","sourceRoot":"","sources":["../src/postgres-ctl.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,MAAM,WAAW,SAAS;IACxB,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,CAAA;IAChB,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAA;IACf,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAA;IACZ,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;GAGG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,MAAM,EAChB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,CAAC,UAAU,CAWnB;AAMD;;;GAGG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,CAgB5C;AAMD;;;GAGG;AACH;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAOrF;AAED,wBAAgB,KAAK,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,CA4B3C;AAED;;GAEG;AACH,wBAAgB,IAAI,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,CAS1C;AAMD;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBlF;AAoDD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAGhE"}
+{"version":3,"file":"postgres-ctl.d.ts","sourceRoot":"","sources":["../src/postgres-ctl.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,MAAM,WAAW,SAAS;IACxB,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,CAAA;IAChB,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAA;IACf,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAA;IACZ,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,mFAAmF;IACnF,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED;;;GAGG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,MAAM,EAChB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,CAAC,UAAU,CAWnB;AAMD;;;GAGG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,CAgB5C;AAMD;;;GAGG;AACH;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAErF;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAEzF;AAeD;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,OAAO,CAAA;AACtC,eAAO,MAAM,kBAAkB,KAAK,CAAA;AAEpC;;;;;;;GAOG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAKtF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAoBvD;AAED,wBAAgB,KAAK,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,CA4B3C;AAED;;GAEG;AACH,wBAAgB,IAAI,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,CAS1C;AAMD;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBlF;AAoDD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAGhE"}

package/dist/postgres-ctl.js

@@ -62,26 +62,102 @@ export function initdb(opts) {
  * `lib/postgresql/`.
  */
 export function nativeMaskLibraryPresent(pgBinDir) {
+    return nativeLibraryPresent(pgBinDir, "supatype_mask");
+}
+/**
+ * Whether a native Postgres install carries the RESP keyspace.
+ *
+ * Asked of the filesystem for the same reason as the mask: an archive
+ * downloaded before pg_keyspace was bundled has a Postgres without it, and the
+ * Windows archive has none at all — pgrx has no Windows target. Naming it in
+ * `shared_preload_libraries` anyway would stop the server starting with "could
+ * not access file", which would turn a missing cache into no database.
+ */
+export function nativeKeyspaceLibraryPresent(pgBinDir) {
+    return nativeLibraryPresent(pgBinDir, "pg_keyspace");
+}
+/**
+ * Two layouts: Linux and macOS put extension libraries in `lib/`, the Windows
+ * archive in `lib/postgresql/`.
+ */
+function nativeLibraryPresent(pgBinDir, stem) {
     if (!pgBinDir)
         return false;
     const prefix = resolvePath(pgBinDir, "..");
-    return ["supatype_mask.so", "supatype_mask.dylib", "supatype_mask.dll"].some((lib) => existsSync(join(prefix, "lib", lib)) || existsSync(join(prefix, "lib", "postgresql", lib)));
+    return [`${stem}.so`, `${stem}.dylib`, `${stem}.dll`].some((lib) => existsSync(join(prefix, "lib", lib)) || existsSync(join(prefix, "lib", "postgresql", lib)));
+}
+/**
+ * Where the native RESP keyspace looks for a free port, and how far it looks.
+ *
+ * 6379 first, because that is what a developer's tooling and the Valkey
+ * sidecar before it both used, so the familiar port stays the usual answer.
+ */
+export const KEYSPACE_PORT_BASE = 6379;
+export const KEYSPACE_PORT_SPAN = 10;
+/**
+ * The first free port in [base, base + span), or null when they are all taken.
+ *
+ * Binding a port something else already holds would leave Postgres up and the
+ * keyspace silently dead — the failure lands in the postmaster log and nowhere
+ * a developer is looking — so the port is chosen before the server starts
+ * rather than fixed and hoped for.
+ */
+export async function firstFreePort(base, span) {
+    for (let port = base; port < base + span; port++) {
+        if (!(await isPortInUse(port)))
+            return port;
+    }
+    return null;
+}
+/**
+ * The `-o` options pg_ctl passes to the server.
+ *
+ * Separated from the spawn so the decision is testable. What goes in here is
+ * decided by which libraries the archive happens to carry, which is exactly
+ * the kind of thing that is wrong in one combination nobody runs locally.
+ *
+ * Order in `shared_preload_libraries` is load-bearing: pg_keyspace first, then
+ * supatype_mask, so the mask stays outermost. pg_keyspace checks this itself
+ * and refuses to serve when the order is wrong — deliberately, since RESP
+ * would otherwise hand back rows the mask never rewrote.
+ *
+ * The sizing is the measured dev profile: ~60 MiB of shared memory, against
+ * the extension's own defaults of ~689 MiB before rings and row cache. It is
+ * reserved at postmaster start whether or not anything caches, so a local
+ * Postgres should not ask for a production keyspace. Durability is ephemeral
+ * throughout: nothing in a dev keyspace is the only copy of anything.
+ */
+export function pgServerOptions(opts) {
+    const mask = nativeMaskLibraryPresent(opts.pgBinDir);
+    const keyspace = opts.keyspacePort !== undefined && nativeKeyspaceLibraryPresent(opts.pgBinDir);
+    const libs = [...(keyspace ? ["pg_keyspace"] : []), ...(mask ? ["supatype_mask"] : [])];
+    const parts = [`-p ${opts.port}`];
+    if (libs.length > 0)
+        parts.push(`-c shared_preload_libraries=${libs.join(",")}`);
+    if (keyspace) {
+        parts.push(`-c pg_keyspace.port=${opts.keyspacePort}`, "-c pg_keyspace.durability=ephemeral", "-c pg_keyspace.keys=50000", "-c pg_keyspace.ring_mb=8", "-c pg_keyspace.rowcache_mb=1");
+        if (opts.keyspaceDatabase) {
+            parts.push(`-c pg_keyspace.database=${opts.keyspaceDatabase}`);
+        }
+    }
+    return parts.join(" ");
 }
 export function start(opts) {
     const bin = pgBin(opts.pgBinDir, "pg_ctl");
     const logPath = opts.logPath ?? join(opts.dataDir, "postgres.log");
-    // `supatype_mask` is a planner hook, so it has to be preloaded, `CREATE EXTENSION` alone does
-    // nothing without it. Only when the archive actually carries the library: an install downloaded
-    // before it was bundled would fail to start with "could not access file".
+    // `supatype_mask` is a planner hook and pg_keyspace registers background
+    // workers and shared memory, so both have to be preloaded — `CREATE
+    // EXTENSION` alone does nothing for either. Only when the archive actually
+    // carries them; see pgServerOptions.
     //
-    // Native Postgres was started with no preloaded libraries at all until now, which is why field
-    // rules could not be enforced on the default `supatype dev`.
-    const preload = nativeMaskLibraryPresent(opts.pgBinDir) ? " -c shared_preload_libraries=supatype_mask" : "";
+    // Native Postgres was started with no preloaded libraries at all until the
+    // mask, which is why field rules could not be enforced on the default
+    // `supatype dev`.
     const args = [
         "start",
         "-D", opts.dataDir,
         "-l", logPath,
-        "-o", `-p ${opts.port}${preload}`,
+        "-o", pgServerOptions(opts),
         "--wait",
     ];
     const result = spawnSync(bin, args, {

package/dist/postgres-ctl.js.map

@@ -1 +1 @@
-{"version":3,"file":"postgres-ctl.js","sourceRoot":"","sources":["../src/postgres-ctl.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAA;AAajE;;;GAGG;AACH,MAAM,UAAU,UAAU,CACxB,QAAgB,EAChB,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAuB,CAAA;IACnD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAA;QACxC,GAAG,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;IAC7D,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,GAAG,CAAC,eAAe,IAAI,EAAE,CAAA;QACtC,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;IAC3D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,MAAM,CAAC,IAAe;IACpC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;IACtD,IAAI,UAAU,CAAC,aAAa,CAAC;QAAE,OAAM,CAAC,uBAAuB;IAE7D,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE5C,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE;QAC/F,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;KAC/B,CAAC,CAAA;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;IAC1D,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E;;;GAGG;AACH;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAmC;IAC1E,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3B,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC1C,OAAO,CAAC,kBAAkB,EAAE,qBAAqB,EAAE,mBAAmB,CAAC,CAAC,IAAI,CAC1E,CAAC,GAAG,EAAE,EAAE,CACN,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,CAC7F,CAAA;AACH,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,IAAe;IACnC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;IAElE,8FAA8F;IAC9F,gGAAgG;IAChG,0EAA0E;IAC1E,EAAE;IACF,+FAA+F;IAC/F,6DAA6D;IAC7D,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,4CAA4C,CAAC,CAAC,CAAC,EAAE,CAAA;IAE3G,MAAM,IAAI,GAAG;QACX,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,OAAO;QAClB,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,MAAM,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE;QACjC,QAAQ;KACT,CAAA;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE;QAClC,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;KAC/B,CAAC,CAAA;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;IAChE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,IAAI,CAAC,IAAe;IAClC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE;QAClF,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;KAC/B,CAAC,CAAA;IACF,qDAAqD;IACrD,KAAK,MAAM,CAAA;AACb,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAe,EAAE,SAAS,GAAG,MAAM;IACjE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;IAEvC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE;YAC7D,QAAQ,EAAE,MAAM;YAChB,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;SAC/B,CAAC,CAAA;QACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAE/B,MAAM,KAAK,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;IAED,MAAM,IAAI,KAAK,CACb,wCAAwC,SAAS,cAAc,IAAI,CAAC,IAAI,EAAE,CAC3E,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;GAMG;AACH,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,IAAY;IACjD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAA;IACjD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAA;QAC7B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAClD,oFAAoF;YACpF,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAA;QAC7D,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;YAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;QACpC,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,SAAS,GAAG,GAAG;IAC1D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAA;IAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;QACnD,MAAM,IAAI,GAAG,CAAC,MAAe,EAAQ,EAAE;YACrC,MAAM,CAAC,OAAO,EAAE,CAAA;YAChB,OAAO,CAAC,MAAM,CAAC,CAAA;QACjB,CAAC,CAAA;QACD,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QAC5B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QACzC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY;IAC5C,IAAI,MAAM,eAAe,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5C,OAAO,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAA;AACnF,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;AAC1D,CAAC;AAED,6EAA6E;AAC7E,SAAS,KAAK,CAAC,MAAc,EAAE,IAAY;IACzC,OAAO,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;AAC1E,CAAC"}
+{"version":3,"file":"postgres-ctl.js","sourceRoot":"","sources":["../src/postgres-ctl.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAA;AAsBjE;;;GAGG;AACH,MAAM,UAAU,UAAU,CACxB,QAAgB,EAChB,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAuB,CAAA;IACnD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAA;QACxC,GAAG,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;IAC7D,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,GAAG,CAAC,eAAe,IAAI,EAAE,CAAA;QACtC,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;IAC3D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,MAAM,CAAC,IAAe;IACpC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;IACtD,IAAI,UAAU,CAAC,aAAa,CAAC;QAAE,OAAM,CAAC,uBAAuB;IAE7D,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE5C,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE;QAC/F,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;KAC/B,CAAC,CAAA;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;IAC1D,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E;;;GAGG;AACH;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAmC;IAC1E,OAAO,oBAAoB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA;AACxD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAAC,QAAmC;IAC9E,OAAO,oBAAoB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;AACtD,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,QAAmC,EAAE,IAAY;IAC7E,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3B,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC1C,OAAO,CAAC,GAAG,IAAI,KAAK,EAAE,GAAG,IAAI,QAAQ,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,IAAI,CACxD,CAAC,GAAG,EAAE,EAAE,CACN,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,CAC7F,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAA;AACtC,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAA;AAEpC;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,IAAY;IAC5D,KAAK,IAAI,IAAI,GAAG,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;IAC7C,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,eAAe,CAAC,IAAe;IAC7C,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAE/F,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACvF,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IACjC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,+BAA+B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAChF,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,CAAC,IAAI,CACR,uBAAuB,IAAI,CAAC,YAAY,EAAE,EAC1C,qCAAqC,EACrC,2BAA2B,EAC3B,0BAA0B,EAC1B,8BAA8B,CAC/B,CAAA;QACD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,2BAA2B,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAA;QAChE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,IAAe;IACnC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;IAElE,yEAAyE;IACzE,oEAAoE;IACpE,2EAA2E;IAC3E,qCAAqC;IACrC,EAAE;IACF,2EAA2E;IAC3E,sEAAsE;IACtE,kBAAkB;IAClB,MAAM,IAAI,GAAG;QACX,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,OAAO;QAClB,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC;QAC3B,QAAQ;KACT,CAAA;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE;QAClC,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;KAC/B,CAAC,CAAA;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;IAChE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,IAAI,CAAC,IAAe;IAClC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE;QAClF,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;KAC/B,CAAC,CAAA;IACF,qDAAqD;IACrD,KAAK,MAAM,CAAA;AACb,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAe,EAAE,SAAS,GAAG,MAAM;IACjE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;IAEvC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE;YAC7D,QAAQ,EAAE,MAAM;YAChB,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;SAC/B,CAAC,CAAA;QACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAE/B,MAAM,KAAK,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;IAED,MAAM,IAAI,KAAK,CACb,wCAAwC,SAAS,cAAc,IAAI,CAAC,IAAI,EAAE,CAC3E,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;GAMG;AACH,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,IAAY;IACjD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAA;IACjD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAA;QAC7B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAClD,oFAAoF;YACpF,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAA;QAC7D,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;YAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;QACpC,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,SAAS,GAAG,GAAG;IAC1D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAA;IAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;QACnD,MAAM,IAAI,GAAG,CAAC,MAAe,EAAQ,EAAE;YACrC,MAAM,CAAC,OAAO,EAAE,CAAA;YAChB,OAAO,CAAC,MAAM,CAAC,CAAA;QACjB,CAAC,CAAA;QACD,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QAC5B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QACzC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY;IAC5C,IAAI,MAAM,eAAe,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5C,OAAO,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAA;AACnF,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;AAC1D,CAAC;AAED,6EAA6E;AAC7E,SAAS,KAAK,CAAC,MAAc,EAAE,IAAY;IACzC,OAAO,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;AAC1E,CAAC"}

package/dist/preview-config-check.d.ts

@@ -0,0 +1,21 @@
+import type { SupatypeProjectConfig } from "./project-config.js";
+/**
+ * Preview addresses that can never resolve, named before a push writes them.
+ *
+ * A preview address may be a path when this deployment serves the project's app: `app.mode` of
+ * `static` or `proxy` puts the app at `/` on the same origin as the API, and Studio resolves the
+ * path against the origin it is loaded from. That is the point of allowing a path at all, because
+ * the origin is a deployment fact and repeating it in config only lets it go stale.
+ *
+ * With `app.mode: "none"` nothing is served at `/`. A path then resolves against an origin that
+ * answers 404, so the share control hands somebody a link that looks right and opens nothing. The
+ * failure surfaces to whoever was sent the link rather than to whoever configured it, which is the
+ * worst place for it to land, so it is refused here instead.
+ *
+ * Returns the models at fault, so a caller can name all of them in one message rather than making
+ * an operator fix them one push at a time.
+ */
+export declare function modelsWithUnresolvablePreview(config: SupatypeProjectConfig): string[];
+/** The refusal headline. The two ways out are hints, in the caller, as every other refusal does. */
+export declare function unresolvablePreviewMessage(models: string[]): string;
+//# sourceMappingURL=preview-config-check.d.ts.map

package/dist/preview-config-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-config-check.d.ts","sourceRoot":"","sources":["../src/preview-config-check.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAEhE;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,qBAAqB,GAAG,MAAM,EAAE,CAiBrF;AAQD,oGAAoG;AACpG,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAOnE"}

package/dist/preview-config-check.js

@@ -0,0 +1,47 @@
+/**
+ * Preview addresses that can never resolve, named before a push writes them.
+ *
+ * A preview address may be a path when this deployment serves the project's app: `app.mode` of
+ * `static` or `proxy` puts the app at `/` on the same origin as the API, and Studio resolves the
+ * path against the origin it is loaded from. That is the point of allowing a path at all, because
+ * the origin is a deployment fact and repeating it in config only lets it go stale.
+ *
+ * With `app.mode: "none"` nothing is served at `/`. A path then resolves against an origin that
+ * answers 404, so the share control hands somebody a link that looks right and opens nothing. The
+ * failure surfaces to whoever was sent the link rather than to whoever configured it, which is the
+ * worst place for it to land, so it is refused here instead.
+ *
+ * Returns the models at fault, so a caller can name all of them in one message rather than making
+ * an operator fix them one push at a time.
+ */
+export function modelsWithUnresolvablePreview(config) {
+    if (config.app.mode !== "none")
+        return [];
+    const livePreview = config.admin?.livePreview;
+    if (livePreview === undefined)
+        return [];
+    return Object.entries(livePreview)
+        .filter(([, entry]) => {
+        const address = entry.urlPattern !== undefined && entry.urlPattern !== "" ? entry.urlPattern : entry.url;
+        // Nothing stated at all is not this check's business: Studio asks for the setting, and a
+        // project that has not configured previews for a model is not misconfigured.
+        if (address === undefined || address === "")
+            return false;
+        return !namesAnOrigin(address);
+    })
+        .map(([model]) => model)
+        .sort();
+}
+/** True when the address carries its own origin and needs nothing added to it. */
+function namesAnOrigin(address) {
+    // Protocol-relative counts: `//example.com/x` already names a host.
+    return /^[a-z][a-z0-9+.-]*:\/\//i.test(address) || address.startsWith("//");
+}
+/** The refusal headline. The two ways out are hints, in the caller, as every other refusal does. */
+export function unresolvablePreviewMessage(models) {
+    const plural = models.length > 1;
+    return (`admin.livePreview gives a path for ${models.join(", ")}, but app.mode is "none", ` +
+        `so this deployment serves nothing at / for ${plural ? "those paths" : "that path"} ` +
+        `to resolve against.`);
+}
+//# sourceMappingURL=preview-config-check.js.map

package/dist/preview-config-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-config-check.js","sourceRoot":"","sources":["../src/preview-config-check.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,6BAA6B,CAAC,MAA6B;IACzE,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,CAAA;IAEzC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,EAAE,WAAW,CAAA;IAC7C,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IAExC,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;SAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE;QACpB,MAAM,OAAO,GACX,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAA;QAC1F,yFAAyF;QACzF,6EAA6E;QAC7E,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE;YAAE,OAAO,KAAK,CAAA;QACzD,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IAChC,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC;SACvB,IAAI,EAAE,CAAA;AACX,CAAC;AAED,kFAAkF;AAClF,SAAS,aAAa,CAAC,OAAe;IACpC,oEAAoE;IACpE,OAAO,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;AAC7E,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,0BAA0B,CAAC,MAAgB;IACzD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;IAChC,OAAO,CACL,sCAAsC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B;QACnF,8CAA8C,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,GAAG;QACrF,qBAAqB,CACtB,CAAA;AACH,CAAC"}