@superblocksteam/shared 0.9603.2 → 0.9604.0

package/dist/database-lifecycle/index.test.js

@@ -1,8 +1,22 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const vitest_1 = require("vitest");
-const index_js_1 = require("./index.js");
+const index_js_1 = require("../types/api/index.js");
+const index_js_2 = require("./index.js");
 (0, vitest_1.describe)('database lifecycle contracts', () => {
+    // Postgres `ALTER TYPE ... ADD VALUE` appends. TypeORM's entity-vs-schema
+    // check treats enum label order as part of the contract, so this array must
+    // match the live `lifecycle_operation_enum` order rather than alphabetical
+    // or semantic grouping.
+    (0, vitest_1.test)('lists lifecycle operations in Postgres enum order', () => {
+        (0, vitest_1.expect)(index_js_2.LIFECYCLE_OPERATIONS).toEqual(['ensure_database', 'migrate_schema', 'retire_database', 'ensure_physical_database_instance']);
+    });
+    (0, vitest_1.test)('allows lifecycle-managed integrations only in application APIs', () => {
+        (0, vitest_1.expect)((0, index_js_2.isLifecycleManagedIntegrationAllowedForApiTrigger)(index_js_1.ApiTriggerType.UI, index_js_2.DATABASE_LIFECYCLE_MANAGED_BY)).toBe(true);
+        (0, vitest_1.expect)((0, index_js_2.isLifecycleManagedIntegrationAllowedForApiTrigger)(index_js_1.ApiTriggerType.WORKFLOW, index_js_2.DATABASE_LIFECYCLE_MANAGED_BY)).toBe(false);
+        (0, vitest_1.expect)((0, index_js_2.isLifecycleManagedIntegrationAllowedForApiTrigger)(index_js_1.ApiTriggerType.SCHEDULE, index_js_2.DATABASE_LIFECYCLE_MANAGED_BY)).toBe(false);
+        (0, vitest_1.expect)((0, index_js_2.isLifecycleManagedIntegrationAllowedForApiTrigger)(index_js_1.ApiTriggerType.WORKFLOW, null)).toBe(true);
+    });
     (0, vitest_1.test)('computes stable requirement, binding, and desired spec identifiers', async () => {
         const requirement = {
             logicalName: 'Orders DB',
@@ -14,26 +28,27 @@ const index_js_1 = require("./index.js");
             },
             extensions: ['pgcrypto', 'uuid-ossp']
         };
-        (0, vitest_1.expect)((0, index_js_1.computeRequirementKey)(requirement)).toBe('orders-db~Orders%20DB:postgres');
-        (0, vitest_1.expect)((0, index_js_1.computeRequirementKey)({ logicalName: 'orders/db', engine: 'postgres' })).toBe('orders-db~orders%2Fdb:postgres');
-        (0, vitest_1.expect)((0, index_js_1.computeRequirementKey)({ logicalName: 'orders-db', engine: 'postgres' })).toBe('orders-db~orders-db:postgres');
+        (0, vitest_1.expect)((0, index_js_2.computeRequirementKey)(requirement)).toBe('orders-db~Orders%20DB:postgres');
+        (0, vitest_1.expect)((0, index_js_2.computeRequirementKey)({ logicalName: 'orders/db', engine: 'postgres' })).toBe('orders-db~orders%2Fdb:postgres');
+        (0, vitest_1.expect)((0, index_js_2.computeRequirementKey)({ logicalName: 'orders-db', engine: 'postgres' })).toBe('orders-db~orders-db:postgres');
         // binding_key excludes the logical name on purpose: one database per
-        // (organization, application, environment, profile). Two different logical
-        // names under the same profile resolve to the same binding_key.
-        (0, vitest_1.expect)((0, index_js_1.computeBindingKey)({
+        // (organization, application, profile). Two different logical names under
+        // the same profile resolve to the same binding_key.
+        (0, vitest_1.expect)((0, index_js_2.computeBindingKey)({
             organizationId: 'org-1',
             applicationId: 'app-1',
-            environment: 'edit',
             profile: 'Staging EU'
-        })).toBe('org-1:app-1:edit:staging-eu~Staging%20EU');
-        (0, vitest_1.expect)((0, index_js_1.computeBindingKey)({
+        })).toBe('org-1:app-1:staging-eu~Staging%20EU');
+        (0, vitest_1.expect)((0, index_js_2.computeBindingKey)({
             organizationId: 'org-1',
             applicationId: 'app-1',
-            environment: 'edit',
             profile: 'staging'
-        })).toBe('org-1:app-1:edit:staging~staging');
-        await (0, vitest_1.expect)((0, index_js_1.computeDesiredSpecHash)(requirement)).resolves.toBe(await (0, index_js_1.computeDesiredSpecHash)({ ...requirement, extensions: ['uuid-ossp', 'pgcrypto'] }));
-        await (0, vitest_1.expect)((0, index_js_1.computeDesiredSpecHash)(requirement)).resolves.toBe('QsCl6RVzJVEwf4Nuk0D27rRtycYe2vQZMxcXLt9WUkQ=');
+        })).toBe('org-1:app-1:staging~staging');
+        await (0, vitest_1.expect)((0, index_js_2.computeDesiredSpecHash)(requirement)).resolves.toBe(await (0, index_js_2.computeDesiredSpecHash)({
+            ...requirement,
+            extensions: ['uuid-ossp', 'pgcrypto']
+        }));
+        await (0, vitest_1.expect)((0, index_js_2.computeDesiredSpecHash)(requirement)).resolves.toBe('QsCl6RVzJVEwf4Nuk0D27rRtycYe2vQZMxcXLt9WUkQ=');
     });
     (0, vitest_1.test)('ignores migrationDirectory when hashing the desired spec', async () => {
         const infrastructureSpec = {
@@ -43,29 +58,35 @@ const index_js_1 = require("./index.js");
             sizing: { storageGb: 20, tier: 'shared' },
             extensions: ['pgcrypto', 'uuid-ossp']
         };
-        const withoutDirectory = await (0, index_js_1.computeDesiredSpecHash)(infrastructureSpec);
-        const withDirectory = await (0, index_js_1.computeDesiredSpecHash)({ ...infrastructureSpec, migrationDirectory: 'db/migrations' });
-        const withOtherDirectory = await (0, index_js_1.computeDesiredSpecHash)({ ...infrastructureSpec, migrationDirectory: 'db/other-migrations' });
+        const withoutDirectory = await (0, index_js_2.computeDesiredSpecHash)(infrastructureSpec);
+        const withDirectory = await (0, index_js_2.computeDesiredSpecHash)({
+            ...infrastructureSpec,
+            migrationDirectory: 'db/migrations'
+        });
+        const withOtherDirectory = await (0, index_js_2.computeDesiredSpecHash)({
+            ...infrastructureSpec,
+            migrationDirectory: 'db/other-migrations'
+        });
         // migrationDirectory only says where the SQL files live, not what
         // infrastructure to provision, so changing it must not look like drift.
         (0, vitest_1.expect)(withDirectory).toBe(withoutDirectory);
         (0, vitest_1.expect)(withOtherDirectory).toBe(withoutDirectory);
     });
     (0, vitest_1.test)('hashes desired specs with locale-invariant ordering', async () => {
-        const first = await (0, index_js_1.computeDesiredSpecHash)({
+        const first = await (0, index_js_2.computeDesiredSpecHash)({
             logicalName: 'Éclair DB',
             engine: 'postgres',
             extensions: ['ä', 'z', 'a']
         });
-        const second = await (0, index_js_1.computeDesiredSpecHash)({
+        const second = await (0, index_js_2.computeDesiredSpecHash)({
             logicalName: 'Éclair DB',
             engine: 'postgres',
             extensions: ['z', 'a', 'ä']
         });
         (0, vitest_1.expect)(first).toBe(second);
     });
-    (0, vitest_1.test)('redacts raw credential material while preserving credential refs', () => {
-        const redacted = (0, index_js_1.redactLifecycleSecrets)({
+    (0, vitest_1.test)('redacts raw credential material and generic credential refs while preserving physical masterCredentialRef', () => {
+        const redacted = (0, index_js_2.redactLifecycleSecrets)({
             host: 'db.internal',
             password: 'raw-password',
             nested: {
@@ -81,6 +102,11 @@ const index_js_1 = require("./index.js");
                     ref: 'database/orders',
                     field: 'password'
                 }
+            },
+            masterCredentialRef: {
+                resolver: 'aws_secrets_manager',
+                ref: 'physical-instance/master',
+                field: 'password'
             }
         });
         (0, vitest_1.expect)(redacted).toEqual({
@@ -94,149 +120,166 @@ const index_js_1 = require("./index.js");
                 }
             },
             credential_refs: {
-                password: {
-                    resolver: 'vault',
-                    ref: 'database/orders',
-                    field: 'password'
-                }
+                password: '[REDACTED]'
+            },
+            masterCredentialRef: {
+                resolver: 'aws_secrets_manager',
+                ref: 'physical-instance/master',
+                field: 'password'
             }
         });
     });
     (0, vitest_1.test)('recognizes terminal lifecycle states', () => {
-        (0, vitest_1.expect)((0, index_js_1.isTerminalLifecycleState)('ready')).toBe(true);
-        (0, vitest_1.expect)((0, index_js_1.isTerminalLifecycleState)('failed')).toBe(true);
-        (0, vitest_1.expect)((0, index_js_1.isTerminalLifecycleState)('provisioning')).toBe(false);
+        (0, vitest_1.expect)((0, index_js_2.isTerminalLifecycleState)('ready')).toBe(true);
+        (0, vitest_1.expect)((0, index_js_2.isTerminalLifecycleState)('failed')).toBe(true);
+        (0, vitest_1.expect)((0, index_js_2.isTerminalLifecycleState)('provisioning')).toBe(false);
     });
     (0, vitest_1.test)('flags secret-shaped keys', () => {
         for (const key of ['password', 'PASSWORD', 'api_token', 'private_key', 'private-key', 'dsn']) {
-            (0, vitest_1.expect)((0, index_js_1.isSecretKey)(key)).toBe(true);
+            (0, vitest_1.expect)((0, index_js_2.isSecretKey)(key)).toBe(true);
         }
         for (const key of ['host', 'port', 'database', 'username']) {
-            (0, vitest_1.expect)((0, index_js_1.isSecretKey)(key)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_2.isSecretKey)(key)).toBe(false);
         }
     });
     (0, vitest_1.test)('flags secret-shaped value content', () => {
-        (0, vitest_1.expect)((0, index_js_1.containsCredentialMaterial)('postgres://user:pass@db.internal:5432/orders')).toBe(true);
-        (0, vitest_1.expect)((0, index_js_1.containsCredentialMaterial)('mongodb+srv://app:secret@cluster0.example.net/db')).toBe(true);
-        (0, vitest_1.expect)((0, index_js_1.containsCredentialMaterial)('password=hunter2;host=db.internal')).toBe(true);
-        (0, vitest_1.expect)((0, index_js_1.containsCredentialMaterial)('{"password":"hunter2"}')).toBe(true);
-        (0, vitest_1.expect)((0, index_js_1.containsCredentialMaterial)('host=db.internal port=5432')).toBe(false);
-        (0, vitest_1.expect)((0, index_js_1.containsCredentialMaterial)('arn:aws:secretsmanager:us-east-1:123:secret:orders')).toBe(false);
+        (0, vitest_1.expect)((0, index_js_2.containsCredentialMaterial)('postgres://user:pass@db.internal:5432/orders')).toBe(true);
+        (0, vitest_1.expect)((0, index_js_2.containsCredentialMaterial)('mongodb+srv://app:secret@cluster0.example.net/db')).toBe(true);
+        (0, vitest_1.expect)((0, index_js_2.containsCredentialMaterial)('password=hunter2;host=db.internal')).toBe(true);
+        (0, vitest_1.expect)((0, index_js_2.containsCredentialMaterial)('{"password":"hunter2"}')).toBe(true);
+        (0, vitest_1.expect)((0, index_js_2.containsCredentialMaterial)('host=db.internal port=5432')).toBe(false);
+        (0, vitest_1.expect)((0, index_js_2.containsCredentialMaterial)('arn:aws:secretsmanager:us-east-1:123:secret:orders')).toBe(false);
     });
     (0, vitest_1.test)('builds a canonical session policy from a valid managed Postgres IAM descriptor', () => {
-        const descriptor = (0, index_js_1.parseNativeDbIamDescriptor)({
+        const descriptor = (0, index_js_2.parseNativeDbIamDescriptor)({
             application_id: 'application-id',
-            auth_descriptor_version: 1,
+            auth_descriptor_version: 3,
             auth_mode: 'aws_iam_role',
             aws_account_id: '123456789012',
             binding_id: 'binding-id',
             cluster_resource_id: 'cluster-ABC123DEF456EXAMPLE',
             connector_role_arn: 'arn:aws:iam::123456789012:role/superblocks-native-db-connector-prod',
-            database: 'sbndb_abcdef123456_0123456789abcdef01234567',
+            database: 'sbndb_abcdef1234567890_0123456789abcdef01234567',
             host: 'native-db.cluster-example.us-west-2.rds.amazonaws.com',
             port: 5432,
             region: 'us-west-2',
-            username: 'sbndb_abcdef123456_7bfeae1170db923274f1943f_runtime'
+            username: 'sbndb_abcdef1234567890_0123456789abcdef01234567_runtime'
         });
         (0, vitest_1.expect)(descriptor).toBeDefined();
         if (!descriptor) {
             throw new Error('Expected a valid IAM descriptor');
         }
-        (0, vitest_1.expect)((0, index_js_1.nativeDbIamSessionPolicy)(descriptor)).toBe('{"Version":"2012-10-17","Statement":[{"Sid":"ConnectToThisNativeDatabaseUser","Effect":"Allow","Action":"rds-db:connect","Resource":"arn:aws:rds-db:us-west-2:123456789012:dbuser:cluster-ABC123DEF456EXAMPLE/sbndb_abcdef123456_7bfeae1170db923274f1943f_runtime"}]}');
+        (0, vitest_1.expect)((0, index_js_2.nativeDbIamSessionPolicy)(descriptor)).toBe('{"Version":"2012-10-17","Statement":[{"Sid":"ConnectToThisNativeDatabaseUser","Effect":"Allow","Action":"rds-db:connect","Resource":"arn:aws:rds-db:us-west-2:123456789012:dbuser:cluster-ABC123DEF456EXAMPLE/sbndb_abcdef1234567890_0123456789abcdef01234567_runtime"}]}');
     });
-    (0, vitest_1.test)('reads binding-scoped v2 managed Postgres IAM descriptors', () => {
-        (0, vitest_1.expect)((0, index_js_1.parseNativeDbIamDescriptor)({
+    (0, vitest_1.test)('reads managed Postgres IAM descriptors with auth_descriptor_version 3', () => {
+        (0, vitest_1.expect)((0, index_js_2.parseNativeDbIamDescriptor)({
             application_id: 'application-id',
-            auth_descriptor_version: 2,
+            auth_descriptor_version: 3,
             auth_mode: 'aws_iam_role',
             aws_account_id: '123456789012',
             binding_id: 'binding-id',
             cluster_resource_id: 'cluster-ABC123DEF456EXAMPLE',
             connector_role_arn: 'arn:aws:iam::123456789012:role/superblocks-native-db-connector-prod',
-            database: 'sbndb_abcdef123456_0123456789abcdef01234567',
+            database: 'sbndb_abcdef1234567890_0123456789abcdef01234567',
             host: 'native-db.cluster-example.us-west-2.rds.amazonaws.com',
             port: 5432,
             region: 'us-west-2',
-            username: 'sbndb_abcdef123456_0123456789abcdef01234567_runtime'
+            username: 'sbndb_abcdef1234567890_0123456789abcdef01234567_runtime'
         })).toEqual({
             application_id: 'application-id',
-            auth_descriptor_version: 2,
+            auth_descriptor_version: 3,
             auth_mode: 'aws_iam_role',
             aws_account_id: '123456789012',
             binding_id: 'binding-id',
             cluster_resource_id: 'cluster-ABC123DEF456EXAMPLE',
             connector_role_arn: 'arn:aws:iam::123456789012:role/superblocks-native-db-connector-prod',
-            database: 'sbndb_abcdef123456_0123456789abcdef01234567',
+            database: 'sbndb_abcdef1234567890_0123456789abcdef01234567',
             host: 'native-db.cluster-example.us-west-2.rds.amazonaws.com',
             port: 5432,
             region: 'us-west-2',
-            username: 'sbndb_abcdef123456_0123456789abcdef01234567_runtime'
+            username: 'sbndb_abcdef1234567890_0123456789abcdef01234567_runtime'
         });
     });
-    (0, vitest_1.test)('rejects v2 descriptors when database and runtime username use different binding tokens', () => {
-        (0, vitest_1.expect)((0, index_js_1.parseNativeDbIamDescriptor)({
+    (0, vitest_1.test)('rejects descriptors when database and runtime username do not match', () => {
+        (0, vitest_1.expect)((0, index_js_2.parseNativeDbIamDescriptor)({
             application_id: 'application-id',
-            auth_descriptor_version: 2,
+            auth_descriptor_version: 3,
             auth_mode: 'aws_iam_role',
             aws_account_id: '123456789012',
             binding_id: 'binding-id',
             cluster_resource_id: 'cluster-ABC123DEF456EXAMPLE',
             connector_role_arn: 'arn:aws:iam::123456789012:role/superblocks-native-db-connector-prod',
-            database: 'sbndb_abcdef123456_0123456789abcdef01234567',
+            database: 'sbndb_abcdef1234567890_0123456789abcdef01234567',
             host: 'native-db.cluster-example.us-west-2.rds.amazonaws.com',
             port: 5432,
             region: 'us-west-2',
-            username: 'sbndb_abcdef123456_fedcba9876543210fedcba98_runtime'
+            username: 'sbndb_abcdef1234567890_fedcba9876543210fedcba98_runtime'
         })).toBeUndefined();
     });
     (0, vitest_1.test)('rejects malformed or non-commercial managed Postgres IAM descriptors', () => {
         const descriptor = {
             application_id: 'application-id',
-            auth_descriptor_version: 1,
+            auth_descriptor_version: 3,
             auth_mode: 'aws_iam_role',
             aws_account_id: '123456789012',
             binding_id: 'binding-id',
             cluster_resource_id: 'cluster-ABC123DEF456EXAMPLE',
             connector_role_arn: 'arn:aws:iam::123456789012:role/superblocks-native-db-connector-prod',
-            database: 'sbndb_abcdef123456_0123456789abcdef01234567',
+            database: 'sbndb_abcdef1234567890_0123456789abcdef01234567',
             host: 'native-db.cluster-example.us-west-2.rds.amazonaws.com',
             port: 5432,
             region: 'us-west-2',
-            username: 'sbndb_abcdef123456_7bfeae1170db923274f1943f_runtime'
+            username: 'sbndb_abcdef1234567890_0123456789abcdef01234567_runtime'
         };
-        (0, vitest_1.expect)((0, index_js_1.parseNativeDbIamDescriptor)({ ...descriptor, auth_descriptor_version: 3 })).toBeUndefined();
-        (0, vitest_1.expect)((0, index_js_1.parseNativeDbIamDescriptor)({ ...descriptor, cluster_resource_id: 'not-an-rds-resource' })).toBeUndefined();
-        (0, vitest_1.expect)((0, index_js_1.parseNativeDbIamDescriptor)({ ...descriptor, connector_role_arn: 'arn:aws:iam::210987654321:role/other' })).toBeUndefined();
-        (0, vitest_1.expect)((0, index_js_1.parseNativeDbIamDescriptor)({ ...descriptor, database: 'orders' })).toBeUndefined();
-        (0, vitest_1.expect)((0, index_js_1.parseNativeDbIamDescriptor)({ ...descriptor, host: descriptor.host.toUpperCase() })).toBeUndefined();
-        (0, vitest_1.expect)((0, index_js_1.parseNativeDbIamDescriptor)({ ...descriptor, host: 'native-db.cluster-example.us-east-1.rds.amazonaws.com' })).toBeUndefined();
-        (0, vitest_1.expect)((0, index_js_1.parseNativeDbIamDescriptor)({ ...descriptor, port: 0 })).toBeUndefined();
-        (0, vitest_1.expect)((0, index_js_1.parseNativeDbIamDescriptor)({ ...descriptor, region: 'cn-north-1' })).toBeUndefined();
-        (0, vitest_1.expect)((0, index_js_1.parseNativeDbIamDescriptor)({ ...descriptor, region: 'us-gov-west-1' })).toBeUndefined();
-        (0, vitest_1.expect)((0, index_js_1.parseNativeDbIamDescriptor)({ ...descriptor, username: 'sbndb_000000000000_7bfeae1170db923274f1943f_runtime' })).toBeUndefined();
+        (0, vitest_1.expect)((0, index_js_2.parseNativeDbIamDescriptor)({ ...descriptor, auth_descriptor_version: 1 })).toBeUndefined();
+        (0, vitest_1.expect)((0, index_js_2.parseNativeDbIamDescriptor)({ ...descriptor, auth_descriptor_version: 2 })).toBeUndefined();
+        (0, vitest_1.expect)((0, index_js_2.parseNativeDbIamDescriptor)({
+            ...descriptor,
+            cluster_resource_id: 'not-an-rds-resource'
+        })).toBeUndefined();
+        (0, vitest_1.expect)((0, index_js_2.parseNativeDbIamDescriptor)({
+            ...descriptor,
+            connector_role_arn: 'arn:aws:iam::210987654321:role/other'
+        })).toBeUndefined();
+        (0, vitest_1.expect)((0, index_js_2.parseNativeDbIamDescriptor)({ ...descriptor, database: 'orders' })).toBeUndefined();
+        (0, vitest_1.expect)((0, index_js_2.parseNativeDbIamDescriptor)({
+            ...descriptor,
+            host: descriptor.host.toUpperCase()
+        })).toBeUndefined();
+        (0, vitest_1.expect)((0, index_js_2.parseNativeDbIamDescriptor)({
+            ...descriptor,
+            host: 'native-db.cluster-example.us-east-1.rds.amazonaws.com'
+        })).toBeUndefined();
+        (0, vitest_1.expect)((0, index_js_2.parseNativeDbIamDescriptor)({ ...descriptor, port: 0 })).toBeUndefined();
+        (0, vitest_1.expect)((0, index_js_2.parseNativeDbIamDescriptor)({ ...descriptor, region: 'cn-north-1' })).toBeUndefined();
+        (0, vitest_1.expect)((0, index_js_2.parseNativeDbIamDescriptor)({ ...descriptor, region: 'us-gov-west-1' })).toBeUndefined();
+        (0, vitest_1.expect)((0, index_js_2.parseNativeDbIamDescriptor)({
+            ...descriptor,
+            username: 'sbndb_0000000000000000_7bfeae1170db923274f1943f_runtime'
+        })).toBeUndefined();
     });
     (0, vitest_1.test)('accepts standalone RDS IAM resource IDs', () => {
-        (0, vitest_1.expect)((0, index_js_1.parseNativeDbIamDescriptor)({
+        (0, vitest_1.expect)((0, index_js_2.parseNativeDbIamDescriptor)({
             application_id: 'application-id',
-            auth_descriptor_version: 1,
+            auth_descriptor_version: 3,
             auth_mode: 'aws_iam_role',
             aws_account_id: '123456789012',
             binding_id: 'binding-id',
             cluster_resource_id: 'db-ABCDEF0123456789-1',
             connector_role_arn: 'arn:aws:iam::123456789012:role/superblocks-native-db-connector-prod',
-            database: 'sbndb_abcdef123456_0123456789abcdef01234567',
+            database: 'sbndb_abcdef1234567890_0123456789abcdef01234567',
             host: 'native-db.example.us-west-2.rds.amazonaws.com',
             port: 5432,
             region: 'us-west-2',
-            username: 'sbndb_abcdef123456_7bfeae1170db923274f1943f_runtime'
+            username: 'sbndb_abcdef1234567890_0123456789abcdef01234567_runtime'
         })).toBeDefined();
     });
-    (0, vitest_1.test)('derives canonical IAM database and runtime-user identity tokens', async () => {
-        await (0, vitest_1.expect)((0, index_js_1.computeNativeDbApplicationToken)('application-id')).resolves.toBe('7bfeae1170db923274f1943f');
-        await (0, vitest_1.expect)((0, index_js_1.computeNativeDbDatabaseName)('abcdef123456', 'database-id')).resolves.toBe('sbndb_abcdef123456_dad72612f7a80580b028178f');
+    (0, vitest_1.test)('derives canonical IAM application token', async () => {
+        await (0, vitest_1.expect)((0, index_js_2.computeNativeDbApplicationToken)('application-id')).resolves.toBe('7bfeae1170db923274f1943f');
     });
-    (0, vitest_1.test)('derives a stable binding identity token for v2 database and runtime-user names', async () => {
-        await (0, vitest_1.expect)((0, index_js_1.computeNativeDbBindingToken)('binding-id')).resolves.toBe('927968fc37b7b41be7e14cf9');
+    (0, vitest_1.test)('derives canonical IAM profile token', async () => {
+        await (0, vitest_1.expect)((0, index_js_2.computeNativeDbProfileToken)('production')).resolves.toHaveLength(16);
+        await (0, vitest_1.expect)((0, index_js_2.computeNativeDbProfileToken)('Production')).resolves.toBe(await (0, index_js_2.computeNativeDbProfileToken)('production'));
     });
 });
 //# sourceMappingURL=index.test.js.map

package/dist/database-lifecycle/index.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.test.js","sourceRoot":"","sources":["../../src/database-lifecycle/index.test.ts"],"names":[],"mappings":";;AAAA,mCAAgD;AAEhD,yCAaoB;AAEpB,IAAA,iBAAQ,EAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,IAAA,aAAI,EAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,WAAW,GAAG;YAClB,WAAW,EAAE,WAAW;YACxB,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE;gBACN,SAAS,EAAE,EAAE;gBACb,IAAI,EAAE,QAAQ;aACf;YACD,UAAU,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;SAC7B,CAAC;QAEX,IAAA,eAAM,EAAC,IAAA,gCAAqB,EAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAClF,IAAA,eAAM,EAAC,IAAA,gCAAqB,EAAC,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACvH,IAAA,eAAM,EAAC,IAAA,gCAAqB,EAAC,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACrH,qEAAqE;QACrE,2EAA2E;QAC3E,gEAAgE;QAChE,IAAA,eAAM,EACJ,IAAA,4BAAiB,EAAC;YAChB,cAAc,EAAE,OAAO;YACvB,aAAa,EAAE,OAAO;YACtB,WAAW,EAAE,MAAM;YACnB,OAAO,EAAE,YAAY;SACtB,CAAC,CACH,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACnD,IAAA,eAAM,EACJ,IAAA,4BAAiB,EAAC;YAChB,cAAc,EAAE,OAAO;YACvB,aAAa,EAAE,OAAO;YACtB,WAAW,EAAE,MAAM;YACnB,OAAO,EAAE,SAAS;SACnB,CAAC,CACH,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAE3C,MAAM,IAAA,eAAM,EAAC,IAAA,iCAAsB,EAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAC7D,MAAM,IAAA,iCAAsB,EAAC,EAAE,GAAG,WAAW,EAAE,UAAU,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC,CACxF,CAAC;QACF,MAAM,IAAA,eAAM,EAAC,IAAA,iCAAsB,EAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAClH,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,kBAAkB,GAAG;YACzB,WAAW,EAAE,WAAW;YACxB,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzC,UAAU,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;SAC7B,CAAC;QAEX,MAAM,gBAAgB,GAAG,MAAM,IAAA,iCAAsB,EAAC,kBAAkB,CAAC,CAAC;QAC1E,MAAM,aAAa,GAAG,MAAM,IAAA,iCAAsB,EAAC,EAAE,GAAG,kBAAkB,EAAE,kBAAkB,EAAE,eAAe,EAAE,CAAC,CAAC;QACnH,MAAM,kBAAkB,GAAG,MAAM,IAAA,iCAAsB,EAAC,EAAE,GAAG,kBAAkB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAE9H,kEAAkE;QAClE,wEAAwE;QACxE,IAAA,eAAM,EAAC,aAAa,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7C,IAAA,eAAM,EAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,KAAK,GAAG,MAAM,IAAA,iCAAsB,EAAC;YACzC,WAAW,EAAE,WAAW;YACxB,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;SAC5B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,iCAAsB,EAAC;YAC1C,WAAW,EAAE,WAAW;YACxB,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;SAC5B,CAAC,CAAC;QAEH,IAAA,eAAM,EAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,kEAAkE,EAAE,GAAG,EAAE;QAC5E,MAAM,QAAQ,GAAG,IAAA,iCAAsB,EAAC;YACtC,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,cAAc;YACxB,MAAM,EAAE;gBACN,KAAK,EAAE,WAAW;gBAClB,aAAa,EAAE;oBACb,QAAQ,EAAE,qBAAqB;oBAC/B,GAAG,EAAE,oDAAoD;iBAC1D;aACF;YACD,eAAe,EAAE;gBACf,QAAQ,EAAE;oBACR,QAAQ,EAAE,OAAO;oBACjB,GAAG,EAAE,iBAAiB;oBACtB,KAAK,EAAE,UAAU;iBAClB;aACF;SACF,CAAC,CAAC;QAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YACvB,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,YAAY;YACtB,MAAM,EAAE;gBACN,KAAK,EAAE,YAAY;gBACnB,aAAa,EAAE;oBACb,QAAQ,EAAE,qBAAqB;oBAC/B,GAAG,EAAE,oDAAoD;iBAC1D;aACF;YACD,eAAe,EAAE;gBACf,QAAQ,EAAE;oBACR,QAAQ,EAAE,OAAO;oBACjB,GAAG,EAAE,iBAAiB;oBACtB,KAAK,EAAE,UAAU;iBAClB;aACF;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,sCAAsC,EAAE,GAAG,EAAE;QAChD,IAAA,eAAM,EAAC,IAAA,mCAAwB,EAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,IAAA,eAAM,EAAC,IAAA,mCAAwB,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,IAAA,eAAM,EAAC,IAAA,mCAAwB,EAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,0BAA0B,EAAE,GAAG,EAAE;QACpC,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC;YAC7F,IAAA,eAAM,EAAC,IAAA,sBAAW,EAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC;YAC3D,IAAA,eAAM,EAAC,IAAA,sBAAW,EAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,mCAAmC,EAAE,GAAG,EAAE;QAC7C,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,8CAA8C,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9F,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,kDAAkD,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClG,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,mCAAmC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnF,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,4BAA4B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7E,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,oDAAoD,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,gFAAgF,EAAE,GAAG,EAAE;QAC1F,MAAM,UAAU,GAAG,IAAA,qCAA0B,EAAC;YAC5C,cAAc,EAAE,gBAAgB;YAChC,uBAAuB,EAAE,CAAC;YAC1B,SAAS,EAAE,cAAc;YACzB,cAAc,EAAE,cAAc;YAC9B,UAAU,EAAE,YAAY;YACxB,mBAAmB,EAAE,6BAA6B;YAClD,kBAAkB,EAAE,qEAAqE;YACzF,QAAQ,EAAE,6CAA6C;YACvD,IAAI,EAAE,uDAAuD;YAC7D,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,qDAAqD;SAChE,CAAC,CAAC;QAEH,IAAA,eAAM,EAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,IAAA,eAAM,EAAC,IAAA,mCAAwB,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAC/C,uQAAuQ,CACxQ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,0DAA0D,EAAE,GAAG,EAAE;QACpE,IAAA,eAAM,EACJ,IAAA,qCAA0B,EAAC;YACzB,cAAc,EAAE,gBAAgB;YAChC,uBAAuB,EAAE,CAAC;YAC1B,SAAS,EAAE,cAAc;YACzB,cAAc,EAAE,cAAc;YAC9B,UAAU,EAAE,YAAY;YACxB,mBAAmB,EAAE,6BAA6B;YAClD,kBAAkB,EAAE,qEAAqE;YACzF,QAAQ,EAAE,6CAA6C;YACvD,IAAI,EAAE,uDAAuD;YAC7D,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,qDAAqD;SAChE,CAAC,CACH,CAAC,OAAO,CAAC;YACR,cAAc,EAAE,gBAAgB;YAChC,uBAAuB,EAAE,CAAC;YAC1B,SAAS,EAAE,cAAc;YACzB,cAAc,EAAE,cAAc;YAC9B,UAAU,EAAE,YAAY;YACxB,mBAAmB,EAAE,6BAA6B;YAClD,kBAAkB,EAAE,qEAAqE;YACzF,QAAQ,EAAE,6CAA6C;YACvD,IAAI,EAAE,uDAAuD;YAC7D,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,qDAAqD;SAChE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,wFAAwF,EAAE,GAAG,EAAE;QAClG,IAAA,eAAM,EACJ,IAAA,qCAA0B,EAAC;YACzB,cAAc,EAAE,gBAAgB;YAChC,uBAAuB,EAAE,CAAC;YAC1B,SAAS,EAAE,cAAc;YACzB,cAAc,EAAE,cAAc;YAC9B,UAAU,EAAE,YAAY;YACxB,mBAAmB,EAAE,6BAA6B;YAClD,kBAAkB,EAAE,qEAAqE;YACzF,QAAQ,EAAE,6CAA6C;YACvD,IAAI,EAAE,uDAAuD;YAC7D,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,qDAAqD;SAChE,CAAC,CACH,CAAC,aAAa,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,sEAAsE,EAAE,GAAG,EAAE;QAChF,MAAM,UAAU,GAAG;YACjB,cAAc,EAAE,gBAAgB;YAChC,uBAAuB,EAAE,CAAC;YAC1B,SAAS,EAAE,cAAc;YACzB,cAAc,EAAE,cAAc;YAC9B,UAAU,EAAE,YAAY;YACxB,mBAAmB,EAAE,6BAA6B;YAClD,kBAAkB,EAAE,qEAAqE;YACzF,QAAQ,EAAE,6CAA6C;YACvD,IAAI,EAAE,uDAAuD;YAC7D,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,qDAAqD;SAChE,CAAC;QAEF,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,EAAE,GAAG,UAAU,EAAE,uBAAuB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAClG,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,EAAE,GAAG,UAAU,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAClH,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,EAAE,GAAG,UAAU,EAAE,kBAAkB,EAAE,sCAAsC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAClI,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,EAAE,GAAG,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC1F,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC3G,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,uDAAuD,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACrI,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC/E,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC5F,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC/F,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,EAAE,GAAG,UAAU,EAAE,QAAQ,EAAE,qDAAqD,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACzI,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,yCAAyC,EAAE,GAAG,EAAE;QACnD,IAAA,eAAM,EACJ,IAAA,qCAA0B,EAAC;YACzB,cAAc,EAAE,gBAAgB;YAChC,uBAAuB,EAAE,CAAC;YAC1B,SAAS,EAAE,cAAc;YACzB,cAAc,EAAE,cAAc;YAC9B,UAAU,EAAE,YAAY;YACxB,mBAAmB,EAAE,uBAAuB;YAC5C,kBAAkB,EAAE,qEAAqE;YACzF,QAAQ,EAAE,6CAA6C;YACvD,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,qDAAqD;SAChE,CAAC,CACH,CAAC,WAAW,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,IAAA,eAAM,EAAC,IAAA,0CAA+B,EAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC1G,MAAM,IAAA,eAAM,EAAC,IAAA,sCAA2B,EAAC,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IACxI,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,IAAA,eAAM,EAAC,IAAA,sCAA2B,EAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.test.js","sourceRoot":"","sources":["../../src/database-lifecycle/index.test.ts"],"names":[],"mappings":";;AAAA,mCAAgD;AAEhD,oDAAuD;AACvD,yCAeoB;AAEpB,IAAA,iBAAQ,EAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,0EAA0E;IAC1E,4EAA4E;IAC5E,2EAA2E;IAC3E,wBAAwB;IACxB,IAAA,aAAI,EAAC,mDAAmD,EAAE,GAAG,EAAE;QAC7D,IAAA,eAAM,EAAC,+BAAoB,CAAC,CAAC,OAAO,CAAC,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,mCAAmC,CAAC,CAAC,CAAC;IACtI,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,gEAAgE,EAAE,GAAG,EAAE;QAC1E,IAAA,eAAM,EAAC,IAAA,4DAAiD,EAAC,yBAAc,CAAC,EAAE,EAAE,wCAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvH,IAAA,eAAM,EAAC,IAAA,4DAAiD,EAAC,yBAAc,CAAC,QAAQ,EAAE,wCAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9H,IAAA,eAAM,EAAC,IAAA,4DAAiD,EAAC,yBAAc,CAAC,QAAQ,EAAE,wCAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9H,IAAA,eAAM,EAAC,IAAA,4DAAiD,EAAC,yBAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,WAAW,GAAG;YAClB,WAAW,EAAE,WAAW;YACxB,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE;gBACN,SAAS,EAAE,EAAE;gBACb,IAAI,EAAE,QAAQ;aACf;YACD,UAAU,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;SAC7B,CAAC;QAEX,IAAA,eAAM,EAAC,IAAA,gCAAqB,EAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAClF,IAAA,eAAM,EAAC,IAAA,gCAAqB,EAAC,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACvH,IAAA,eAAM,EAAC,IAAA,gCAAqB,EAAC,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACrH,qEAAqE;QACrE,0EAA0E;QAC1E,oDAAoD;QACpD,IAAA,eAAM,EACJ,IAAA,4BAAiB,EAAC;YAChB,cAAc,EAAE,OAAO;YACvB,aAAa,EAAE,OAAO;YACtB,OAAO,EAAE,YAAY;SACtB,CAAC,CACH,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QAC9C,IAAA,eAAM,EACJ,IAAA,4BAAiB,EAAC;YAChB,cAAc,EAAE,OAAO;YACvB,aAAa,EAAE,OAAO;YACtB,OAAO,EAAE,SAAS;SACnB,CAAC,CACH,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAEtC,MAAM,IAAA,eAAM,EAAC,IAAA,iCAAsB,EAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAC7D,MAAM,IAAA,iCAAsB,EAAC;YAC3B,GAAG,WAAW;YACd,UAAU,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;SACtC,CAAC,CACH,CAAC;QACF,MAAM,IAAA,eAAM,EAAC,IAAA,iCAAsB,EAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAClH,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,kBAAkB,GAAG;YACzB,WAAW,EAAE,WAAW;YACxB,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzC,UAAU,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;SAC7B,CAAC;QAEX,MAAM,gBAAgB,GAAG,MAAM,IAAA,iCAAsB,EAAC,kBAAkB,CAAC,CAAC;QAC1E,MAAM,aAAa,GAAG,MAAM,IAAA,iCAAsB,EAAC;YACjD,GAAG,kBAAkB;YACrB,kBAAkB,EAAE,eAAe;SACpC,CAAC,CAAC;QACH,MAAM,kBAAkB,GAAG,MAAM,IAAA,iCAAsB,EAAC;YACtD,GAAG,kBAAkB;YACrB,kBAAkB,EAAE,qBAAqB;SAC1C,CAAC,CAAC;QAEH,kEAAkE;QAClE,wEAAwE;QACxE,IAAA,eAAM,EAAC,aAAa,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7C,IAAA,eAAM,EAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,KAAK,GAAG,MAAM,IAAA,iCAAsB,EAAC;YACzC,WAAW,EAAE,WAAW;YACxB,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;SAC5B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,iCAAsB,EAAC;YAC1C,WAAW,EAAE,WAAW;YACxB,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;SAC5B,CAAC,CAAC;QAEH,IAAA,eAAM,EAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,2GAA2G,EAAE,GAAG,EAAE;QACrH,MAAM,QAAQ,GAAG,IAAA,iCAAsB,EAAC;YACtC,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,cAAc;YACxB,MAAM,EAAE;gBACN,KAAK,EAAE,WAAW;gBAClB,aAAa,EAAE;oBACb,QAAQ,EAAE,qBAAqB;oBAC/B,GAAG,EAAE,oDAAoD;iBAC1D;aACF;YACD,eAAe,EAAE;gBACf,QAAQ,EAAE;oBACR,QAAQ,EAAE,OAAO;oBACjB,GAAG,EAAE,iBAAiB;oBACtB,KAAK,EAAE,UAAU;iBAClB;aACF;YACD,mBAAmB,EAAE;gBACnB,QAAQ,EAAE,qBAAqB;gBAC/B,GAAG,EAAE,0BAA0B;gBAC/B,KAAK,EAAE,UAAU;aAClB;SACF,CAAC,CAAC;QAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YACvB,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,YAAY;YACtB,MAAM,EAAE;gBACN,KAAK,EAAE,YAAY;gBACnB,aAAa,EAAE;oBACb,QAAQ,EAAE,qBAAqB;oBAC/B,GAAG,EAAE,oDAAoD;iBAC1D;aACF;YACD,eAAe,EAAE;gBACf,QAAQ,EAAE,YAAY;aACvB;YACD,mBAAmB,EAAE;gBACnB,QAAQ,EAAE,qBAAqB;gBAC/B,GAAG,EAAE,0BAA0B;gBAC/B,KAAK,EAAE,UAAU;aAClB;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,sCAAsC,EAAE,GAAG,EAAE;QAChD,IAAA,eAAM,EAAC,IAAA,mCAAwB,EAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,IAAA,eAAM,EAAC,IAAA,mCAAwB,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,IAAA,eAAM,EAAC,IAAA,mCAAwB,EAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,0BAA0B,EAAE,GAAG,EAAE;QACpC,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC;YAC7F,IAAA,eAAM,EAAC,IAAA,sBAAW,EAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC;YAC3D,IAAA,eAAM,EAAC,IAAA,sBAAW,EAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,mCAAmC,EAAE,GAAG,EAAE;QAC7C,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,8CAA8C,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9F,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,kDAAkD,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClG,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,mCAAmC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnF,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,4BAA4B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7E,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,oDAAoD,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,gFAAgF,EAAE,GAAG,EAAE;QAC1F,MAAM,UAAU,GAAG,IAAA,qCAA0B,EAAC;YAC5C,cAAc,EAAE,gBAAgB;YAChC,uBAAuB,EAAE,CAAC;YAC1B,SAAS,EAAE,cAAc;YACzB,cAAc,EAAE,cAAc;YAC9B,UAAU,EAAE,YAAY;YACxB,mBAAmB,EAAE,6BAA6B;YAClD,kBAAkB,EAAE,qEAAqE;YACzF,QAAQ,EAAE,iDAAiD;YAC3D,IAAI,EAAE,uDAAuD;YAC7D,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,yDAAyD;SACpE,CAAC,CAAC;QAEH,IAAA,eAAM,EAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,IAAA,eAAM,EAAC,IAAA,mCAAwB,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAC/C,2QAA2Q,CAC5Q,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,uEAAuE,EAAE,GAAG,EAAE;QACjF,IAAA,eAAM,EACJ,IAAA,qCAA0B,EAAC;YACzB,cAAc,EAAE,gBAAgB;YAChC,uBAAuB,EAAE,CAAC;YAC1B,SAAS,EAAE,cAAc;YACzB,cAAc,EAAE,cAAc;YAC9B,UAAU,EAAE,YAAY;YACxB,mBAAmB,EAAE,6BAA6B;YAClD,kBAAkB,EAAE,qEAAqE;YACzF,QAAQ,EAAE,iDAAiD;YAC3D,IAAI,EAAE,uDAAuD;YAC7D,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,yDAAyD;SACpE,CAAC,CACH,CAAC,OAAO,CAAC;YACR,cAAc,EAAE,gBAAgB;YAChC,uBAAuB,EAAE,CAAC;YAC1B,SAAS,EAAE,cAAc;YACzB,cAAc,EAAE,cAAc;YAC9B,UAAU,EAAE,YAAY;YACxB,mBAAmB,EAAE,6BAA6B;YAClD,kBAAkB,EAAE,qEAAqE;YACzF,QAAQ,EAAE,iDAAiD;YAC3D,IAAI,EAAE,uDAAuD;YAC7D,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,yDAAyD;SACpE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,qEAAqE,EAAE,GAAG,EAAE;QAC/E,IAAA,eAAM,EACJ,IAAA,qCAA0B,EAAC;YACzB,cAAc,EAAE,gBAAgB;YAChC,uBAAuB,EAAE,CAAC;YAC1B,SAAS,EAAE,cAAc;YACzB,cAAc,EAAE,cAAc;YAC9B,UAAU,EAAE,YAAY;YACxB,mBAAmB,EAAE,6BAA6B;YAClD,kBAAkB,EAAE,qEAAqE;YACzF,QAAQ,EAAE,iDAAiD;YAC3D,IAAI,EAAE,uDAAuD;YAC7D,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,yDAAyD;SACpE,CAAC,CACH,CAAC,aAAa,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,sEAAsE,EAAE,GAAG,EAAE;QAChF,MAAM,UAAU,GAAG;YACjB,cAAc,EAAE,gBAAgB;YAChC,uBAAuB,EAAE,CAAC;YAC1B,SAAS,EAAE,cAAc;YACzB,cAAc,EAAE,cAAc;YAC9B,UAAU,EAAE,YAAY;YACxB,mBAAmB,EAAE,6BAA6B;YAClD,kBAAkB,EAAE,qEAAqE;YACzF,QAAQ,EAAE,iDAAiD;YAC3D,IAAI,EAAE,uDAAuD;YAC7D,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,yDAAyD;SACpE,CAAC;QAEF,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,EAAE,GAAG,UAAU,EAAE,uBAAuB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAClG,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,EAAE,GAAG,UAAU,EAAE,uBAAuB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAClG,IAAA,eAAM,EACJ,IAAA,qCAA0B,EAAC;YACzB,GAAG,UAAU;YACb,mBAAmB,EAAE,qBAAqB;SAC3C,CAAC,CACH,CAAC,aAAa,EAAE,CAAC;QAClB,IAAA,eAAM,EACJ,IAAA,qCAA0B,EAAC;YACzB,GAAG,UAAU;YACb,kBAAkB,EAAE,sCAAsC;SAC3D,CAAC,CACH,CAAC,aAAa,EAAE,CAAC;QAClB,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,EAAE,GAAG,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC1F,IAAA,eAAM,EACJ,IAAA,qCAA0B,EAAC;YACzB,GAAG,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE;SACpC,CAAC,CACH,CAAC,aAAa,EAAE,CAAC;QAClB,IAAA,eAAM,EACJ,IAAA,qCAA0B,EAAC;YACzB,GAAG,UAAU;YACb,IAAI,EAAE,uDAAuD;SAC9D,CAAC,CACH,CAAC,aAAa,EAAE,CAAC;QAClB,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC/E,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC5F,IAAA,eAAM,EAAC,IAAA,qCAA0B,EAAC,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC/F,IAAA,eAAM,EACJ,IAAA,qCAA0B,EAAC;YACzB,GAAG,UAAU;YACb,QAAQ,EAAE,yDAAyD;SACpE,CAAC,CACH,CAAC,aAAa,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,yCAAyC,EAAE,GAAG,EAAE;QACnD,IAAA,eAAM,EACJ,IAAA,qCAA0B,EAAC;YACzB,cAAc,EAAE,gBAAgB;YAChC,uBAAuB,EAAE,CAAC;YAC1B,SAAS,EAAE,cAAc;YACzB,cAAc,EAAE,cAAc;YAC9B,UAAU,EAAE,YAAY;YACxB,mBAAmB,EAAE,uBAAuB;YAC5C,kBAAkB,EAAE,qEAAqE;YACzF,QAAQ,EAAE,iDAAiD;YAC3D,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,yDAAyD;SACpE,CAAC,CACH,CAAC,WAAW,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,IAAA,eAAM,EAAC,IAAA,0CAA+B,EAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC5G,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,IAAA,eAAM,EAAC,IAAA,sCAA2B,EAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAClF,MAAM,IAAA,eAAM,EAAC,IAAA,sCAA2B,EAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAA,sCAA2B,EAAC,YAAY,CAAC,CAAC,CAAC;IACzH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/database-lifecycle/physicalPoolIdentity.d.ts

@@ -0,0 +1,29 @@
+import type { PhysicalDatabaseCapacityPolicy } from './capacityPolicy.js';
+/**
+ * Agent tag key for the customer-managed deployment name that identifies a
+ * worker's physical database pool, `(organizationId, agentName, engine)`.
+ *
+ * Published on its own rather than read out of
+ * `databaseLifecycle:capacityPolicies`, so a customer who wants no proactive
+ * scaling still gets a resolvable pool. One value, e.g. `customer-opa`.
+ */
+export declare const DATABASE_LIFECYCLE_TAG_AGENT_NAME = "databaseLifecycle:agentName";
+export declare class PhysicalPoolIdentityError extends Error {
+    readonly code = "physical_pool_identity_invalid";
+    constructor(message: string);
+}
+/**
+ * The single physical pool a worker's registration names, or undefined when it
+ * published none.
+ *
+ * Throws {@link PhysicalPoolIdentityError} when the registration names more
+ * than one pool. Guessing between them would provision infrastructure under
+ * one deployment's Terraform state and hand it to another, so callers must
+ * either refuse the registration or withhold the identity.
+ *
+ * Falls back to the capacity policy's name when the tag is absent, for a
+ * worker predating {@link DATABASE_LIFECYCLE_TAG_AGENT_NAME} that is still
+ * rolling: the policy names the same pool, so identity stays unambiguous.
+ */
+export declare function parsePhysicalPoolAgentNameTag(published: string[] | undefined, capacityPolicies?: readonly PhysicalDatabaseCapacityPolicy[]): string | undefined;
+//# sourceMappingURL=physicalPoolIdentity.d.ts.map

package/dist/database-lifecycle/physicalPoolIdentity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"physicalPoolIdentity.d.ts","sourceRoot":"","sources":["../../src/database-lifecycle/physicalPoolIdentity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AAE1E;;;;;;;GAOG;AACH,eAAO,MAAM,iCAAiC,gCAAgC,CAAC;AAE/E,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,IAAI,oCAAoC;gBAErC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EAAE,GAAG,SAAS,EAC/B,gBAAgB,GAAE,SAAS,8BAA8B,EAAO,GAC/D,MAAM,GAAG,SAAS,CAqCpB"}

package/dist/database-lifecycle/physicalPoolIdentity.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PhysicalPoolIdentityError = exports.DATABASE_LIFECYCLE_TAG_AGENT_NAME = void 0;
+exports.parsePhysicalPoolAgentNameTag = parsePhysicalPoolAgentNameTag;
+/**
+ * Agent tag key for the customer-managed deployment name that identifies a
+ * worker's physical database pool, `(organizationId, agentName, engine)`.
+ *
+ * Published on its own rather than read out of
+ * `databaseLifecycle:capacityPolicies`, so a customer who wants no proactive
+ * scaling still gets a resolvable pool. One value, e.g. `customer-opa`.
+ */
+exports.DATABASE_LIFECYCLE_TAG_AGENT_NAME = 'databaseLifecycle:agentName';
+class PhysicalPoolIdentityError extends Error {
+    code = 'physical_pool_identity_invalid';
+    constructor(message) {
+        super(message);
+        this.name = 'PhysicalPoolIdentityError';
+    }
+}
+exports.PhysicalPoolIdentityError = PhysicalPoolIdentityError;
+/**
+ * The single physical pool a worker's registration names, or undefined when it
+ * published none.
+ *
+ * Throws {@link PhysicalPoolIdentityError} when the registration names more
+ * than one pool. Guessing between them would provision infrastructure under
+ * one deployment's Terraform state and hand it to another, so callers must
+ * either refuse the registration or withhold the identity.
+ *
+ * Falls back to the capacity policy's name when the tag is absent, for a
+ * worker predating {@link DATABASE_LIFECYCLE_TAG_AGENT_NAME} that is still
+ * rolling: the policy names the same pool, so identity stays unambiguous.
+ */
+function parsePhysicalPoolAgentNameTag(published, capacityPolicies = []) {
+    if (published !== undefined && !Array.isArray(published)) {
+        throw new PhysicalPoolIdentityError(`${exports.DATABASE_LIFECYCLE_TAG_AGENT_NAME} must be an array holding one deployment name.`);
+    }
+    const values = published ?? [];
+    if (values.some((value) => typeof value !== 'string' || value.trim() === '')) {
+        throw new PhysicalPoolIdentityError(`${exports.DATABASE_LIFECYCLE_TAG_AGENT_NAME} must be a non-empty string when provided.`);
+    }
+    const declared = new Set(values.map((value) => value.trim()));
+    if (declared.size > 1) {
+        throw new PhysicalPoolIdentityError(`${exports.DATABASE_LIFECYCLE_TAG_AGENT_NAME} names ${declared.size} pools (${[...declared].sort().join(', ')}); it must name exactly one.`);
+    }
+    const policyNames = new Set(capacityPolicies.map((policy) => policy.agentName));
+    const [declaredName] = declared;
+    if (declaredName !== undefined) {
+        // Every policy has to be for the pool this deployment owns. A policy for
+        // another pool would have proactive evaluation scaling something the
+        // deployment cannot provision into.
+        if ([...policyNames].some((policyName) => policyName !== declaredName)) {
+            throw new PhysicalPoolIdentityError(`${exports.DATABASE_LIFECYCLE_TAG_AGENT_NAME} is ${declaredName} but databaseLifecycle:capacityPolicies names ${[...policyNames].sort().join(', ')}; they must name the same pool.`);
+        }
+        return declaredName;
+    }
+    if (policyNames.size > 1) {
+        throw new PhysicalPoolIdentityError(`databaseLifecycle:capacityPolicies names ${policyNames.size} pools; publish ${exports.DATABASE_LIFECYCLE_TAG_AGENT_NAME} to say which one this deployment owns.`);
+    }
+    const [policyName] = policyNames;
+    return policyName;
+}
+//# sourceMappingURL=physicalPoolIdentity.js.map

package/dist/database-lifecycle/physicalPoolIdentity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"physicalPoolIdentity.js","sourceRoot":"","sources":["../../src/database-lifecycle/physicalPoolIdentity.ts"],"names":[],"mappings":";;;AAkCA,sEAwCC;AAxED;;;;;;;GAOG;AACU,QAAA,iCAAiC,GAAG,6BAA6B,CAAC;AAE/E,MAAa,yBAA0B,SAAQ,KAAK;IACzC,IAAI,GAAG,gCAAgC,CAAC;IAEjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAPD,8DAOC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,6BAA6B,CAC3C,SAA+B,EAC/B,mBAA8D,EAAE;IAEhE,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,yBAAyB,CAAC,GAAG,yCAAiC,gDAAgD,CAAC,CAAC;IAC5H,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,IAAI,EAAE,CAAC;IAC/B,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,yBAAyB,CAAC,GAAG,yCAAiC,4CAA4C,CAAC,CAAC;IACxH,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,yBAAyB,CACjC,GAAG,yCAAiC,UAAU,QAAQ,CAAC,IAAI,WAAW,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,CACpI,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAChF,MAAM,CAAC,YAAY,CAAC,GAAG,QAAQ,CAAC;IAChC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,yEAAyE;QACzE,qEAAqE;QACrE,oCAAoC;QACpC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,YAAY,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,yBAAyB,CACjC,GAAG,yCAAiC,OAAO,YAAY,iDAAiD,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,iCAAiC,CAC5K,CAAC;QACJ,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,IAAI,WAAW,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,yBAAyB,CACjC,4CAA4C,WAAW,CAAC,IAAI,mBAAmB,yCAAiC,yCAAyC,CAC1J,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC;IACjC,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/database-lifecycle/physicalPoolIdentity.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=physicalPoolIdentity.test.d.ts.map

package/dist/database-lifecycle/physicalPoolIdentity.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"physicalPoolIdentity.test.d.ts","sourceRoot":"","sources":["../../src/database-lifecycle/physicalPoolIdentity.test.ts"],"names":[],"mappings":""}

package/dist/database-lifecycle/physicalPoolIdentity.test.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const physicalPoolIdentity_js_1 = require("./physicalPoolIdentity.js");
+const policy = (agentName) => ({
+    agentName,
+    engine: 'postgres',
+    thresholdType: 'minAvailableCapacityPercent',
+    thresholdValue: 20
+});
+(0, vitest_1.describe)('parsePhysicalPoolAgentNameTag', () => {
+    (0, vitest_1.test)('reads the pool a deployment named', () => {
+        (0, vitest_1.expect)((0, physicalPoolIdentity_js_1.parsePhysicalPoolAgentNameTag)(['customer-opa'])).toBe('customer-opa');
+        (0, vitest_1.expect)((0, physicalPoolIdentity_js_1.parsePhysicalPoolAgentNameTag)([' customer-opa '])).toBe('customer-opa');
+    });
+    (0, vitest_1.test)('reports no identity for a deployment that named no pool', () => {
+        (0, vitest_1.expect)((0, physicalPoolIdentity_js_1.parsePhysicalPoolAgentNameTag)(undefined)).toBeUndefined();
+        (0, vitest_1.expect)((0, physicalPoolIdentity_js_1.parsePhysicalPoolAgentNameTag)([])).toBeUndefined();
+    });
+    (0, vitest_1.test)('rejects a tag that is not one non-empty name', () => {
+        (0, vitest_1.expect)(() => (0, physicalPoolIdentity_js_1.parsePhysicalPoolAgentNameTag)([''])).toThrow(physicalPoolIdentity_js_1.PhysicalPoolIdentityError);
+        (0, vitest_1.expect)(() => (0, physicalPoolIdentity_js_1.parsePhysicalPoolAgentNameTag)(['   '])).toThrow(physicalPoolIdentity_js_1.PhysicalPoolIdentityError);
+        (0, vitest_1.expect)(() => (0, physicalPoolIdentity_js_1.parsePhysicalPoolAgentNameTag)(['customer-opa', 'other-opa'])).toThrow(/must name exactly one/);
+    });
+    // Replicas of one deployment publish the same registration.
+    (0, vitest_1.test)('accepts a name repeated across replicas', () => {
+        (0, vitest_1.expect)((0, physicalPoolIdentity_js_1.parsePhysicalPoolAgentNameTag)(['customer-opa', 'customer-opa'])).toBe('customer-opa');
+    });
+    (0, vitest_1.describe)('agreement with capacity policies', () => {
+        (0, vitest_1.test)('accepts a policy for the pool the deployment named', () => {
+            (0, vitest_1.expect)((0, physicalPoolIdentity_js_1.parsePhysicalPoolAgentNameTag)(['customer-opa'], [policy('customer-opa')])).toBe('customer-opa');
+        });
+        (0, vitest_1.test)('rejects a policy for a pool the deployment does not own', () => {
+            (0, vitest_1.expect)(() => (0, physicalPoolIdentity_js_1.parsePhysicalPoolAgentNameTag)(['customer-opa'], [policy('other-opa')])).toThrow(/must name the same pool/);
+        });
+        // A deployment scales the pool it owns and nothing else. Accepting a
+        // foreign policy alongside a matching one would let proactive evaluation
+        // key off a pool the wizard would never resolve to.
+        (0, vitest_1.test)('rejects a foreign policy published alongside the deployments own', () => {
+            (0, vitest_1.expect)(() => (0, physicalPoolIdentity_js_1.parsePhysicalPoolAgentNameTag)(['customer-opa'], [policy('customer-opa'), policy('other-opa')])).toThrow(/must name the same pool/);
+        });
+        // Older workers publish identity only inside the policy.
+        (0, vitest_1.test)('falls back to the policy name when the deployment published no tag', () => {
+            (0, vitest_1.expect)((0, physicalPoolIdentity_js_1.parsePhysicalPoolAgentNameTag)(undefined, [policy('customer-opa')])).toBe('customer-opa');
+        });
+        (0, vitest_1.test)('refuses to guess when policies alone name two pools', () => {
+            (0, vitest_1.expect)(() => (0, physicalPoolIdentity_js_1.parsePhysicalPoolAgentNameTag)(undefined, [policy('customer-opa'), policy('other-opa')])).toThrow(/publish databaseLifecycle:agentName/);
+        });
+    });
+});
+//# sourceMappingURL=physicalPoolIdentity.test.js.map

package/dist/database-lifecycle/physicalPoolIdentity.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"physicalPoolIdentity.test.js","sourceRoot":"","sources":["../../src/database-lifecycle/physicalPoolIdentity.test.ts"],"names":[],"mappings":";;AAAA,mCAAgD;AAGhD,uEAAqG;AAErG,MAAM,MAAM,GAAG,CAAC,SAAiB,EAAkC,EAAE,CAAC,CAAC;IACrE,SAAS;IACT,MAAM,EAAE,UAAU;IAClB,aAAa,EAAE,6BAA6B;IAC5C,cAAc,EAAE,EAAE;CACnB,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,IAAA,aAAI,EAAC,mCAAmC,EAAE,GAAG,EAAE;QAC7C,IAAA,eAAM,EAAC,IAAA,uDAA6B,EAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7E,IAAA,eAAM,EAAC,IAAA,uDAA6B,EAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,yDAAyD,EAAE,GAAG,EAAE;QACnE,IAAA,eAAM,EAAC,IAAA,uDAA6B,EAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACjE,IAAA,eAAM,EAAC,IAAA,uDAA6B,EAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,8CAA8C,EAAE,GAAG,EAAE;QACxD,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAA,uDAA6B,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,mDAAyB,CAAC,CAAC;QACrF,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAA,uDAA6B,EAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,mDAAyB,CAAC,CAAC;QACxF,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAA,uDAA6B,EAAC,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC9G,CAAC,CAAC,CAAC;IAEH,4DAA4D;IAC5D,IAAA,aAAI,EAAC,yCAAyC,EAAE,GAAG,EAAE;QACnD,IAAA,eAAM,EAAC,IAAA,uDAA6B,EAAC,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,IAAA,iBAAQ,EAAC,kCAAkC,EAAE,GAAG,EAAE;QAChD,IAAA,aAAI,EAAC,oDAAoD,EAAE,GAAG,EAAE;YAC9D,IAAA,eAAM,EAAC,IAAA,uDAA6B,EAAC,CAAC,cAAc,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACzG,CAAC,CAAC,CAAC;QAEH,IAAA,aAAI,EAAC,yDAAyD,EAAE,GAAG,EAAE;YACnE,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAA,uDAA6B,EAAC,CAAC,cAAc,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;QAC1H,CAAC,CAAC,CAAC;QAEH,qEAAqE;QACrE,yEAAyE;QACzE,oDAAoD;QACpD,IAAA,aAAI,EAAC,kEAAkE,EAAE,GAAG,EAAE;YAC5E,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAA,uDAA6B,EAAC,CAAC,cAAc,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAClH,yBAAyB,CAC1B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,yDAAyD;QACzD,IAAA,aAAI,EAAC,oEAAoE,EAAE,GAAG,EAAE;YAC9E,IAAA,eAAM,EAAC,IAAA,uDAA6B,EAAC,SAAS,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAClG,CAAC,CAAC,CAAC;QAEH,IAAA,aAAI,EAAC,qDAAqD,EAAE,GAAG,EAAE;YAC/D,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAA,uDAA6B,EAAC,SAAS,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAC3G,qCAAqC,CACtC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -27,4 +27,5 @@ export * from './tracing/errorSanitizer.js';
 export * from './jwt/index.js';
 export * from './org-features/index.js';
 export * from './database-lifecycle/index.js';
+export * from './database-lifecycle/edit-lifecycle-capability.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kCAAkC,CAAC;AACjD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,+BAA+B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kCAAkC,CAAC;AACjD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,mDAAmD,CAAC"}

package/dist/index.js

@@ -43,4 +43,5 @@ __exportStar(require("./tracing/errorSanitizer.js"), exports);
 __exportStar(require("./jwt/index.js"), exports);
 __exportStar(require("./org-features/index.js"), exports);
 __exportStar(require("./database-lifecycle/index.js"), exports);
+__exportStar(require("./database-lifecycle/edit-lifecycle-capability.js"), exports);
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,mDAAiC;AACjC,mDAAiC;AACjC,mDAAiC;AACjC,qDAAmC;AACnC,iDAA+B;AAC/B,2DAAyC;AACzC,iDAA+B;AAC/B,4DAA0C;AAC1C,oDAAkC;AAClC,mEAAiD;AACjD,gEAA8C;AAC9C,6DAA2C;AAC3C,6DAA2C;AAC3C,mDAAiC;AACjC,kDAAgC;AAChC,0DAAwC;AACxC,oDAAkC;AAClC,qDAAmC;AACnC,sDAAoC;AACpC,yDAAuC;AACvC,kDAAgC;AAChC,gEAA8C;AAC9C,yDAAuC;AACvC,6DAA2C;AAC3C,8DAA4C;AAC5C,iDAA+B;AAC/B,0DAAwC;AACxC,gEAA8C"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,mDAAiC;AACjC,mDAAiC;AACjC,mDAAiC;AACjC,qDAAmC;AACnC,iDAA+B;AAC/B,2DAAyC;AACzC,iDAA+B;AAC/B,4DAA0C;AAC1C,oDAAkC;AAClC,mEAAiD;AACjD,gEAA8C;AAC9C,6DAA2C;AAC3C,6DAA2C;AAC3C,mDAAiC;AACjC,kDAAgC;AAChC,0DAAwC;AACxC,oDAAkC;AAClC,qDAAmC;AACnC,sDAAoC;AACpC,yDAAuC;AACvC,kDAAgC;AAChC,gEAA8C;AAC9C,yDAAuC;AACvC,6DAA2C;AAC3C,8DAA4C;AAC5C,iDAA+B;AAC/B,0DAAwC;AACxC,gEAA8C;AAC9C,oFAAkE"}