@superblocksteam/shared 0.9618.2 → 0.9619.0

package/dist-esm/database-lifecycle/index.js

@@ -1,510 +0,0 @@
-import { sha256Base64 } from '../signing/hashing.js';
-import { ApiTriggerType } from '../types/api/index.js';
-import { APP_DATABASE_IMPORT_OPERATIONS } from './appDatabaseImport.js';
-import { DATA_IMPORT_KINDS, DATA_IMPORT_TARGET_TYPES } from './dataImport.js';
-export const LIFECYCLE_TERMINAL_STATES = ['ready', 'failed', 'cancelled'];
-export const LIFECYCLE_NON_TERMINAL_STATES = ['pending', 'provisioning', 'migrating', 'retiring'];
-export const LIFECYCLE_STATES = [...LIFECYCLE_NON_TERMINAL_STATES, ...LIFECYCLE_TERMINAL_STATES];
-export const LIFECYCLE_MIGRATION_STATES = ['pending', 'migrated', 'failed'];
-// A single `ensure_database` covers what used to be split into
-// ensure_dev_database / ensure_prod_database. `migrate_schema` and
-// `retire_database` were always environment-agnostic.
-// `ensure_physical_database_instance` and `retire_physical_database_instance`
-// are claimable pool-level work (wizard / eager provisioning, admin
-// decommission). Neither is bound to a database_binding row; the claim payload
-// carries provisioningId or the instance id instead of binding identity.
-// Persisted database lifecycle operations come first in Postgres enum order.
-// Import operations are appended. Generic upload operations stay out of the
-// default agent set; prefix operations are stored by the data-import migration
-// but are not part of that default set either.
-export const LIFECYCLE_OPERATIONS = [
-    'ensure_database',
-    'migrate_schema',
-    'retire_database',
-    'ensure_physical_database_instance',
-    'retire_physical_database_instance',
-    'verify_database_infra_absence',
-    'prepare_import_upload',
-    'complete_import_upload',
-    'prepare_import_prefix_upload',
-    'inspect_import_prefix',
-    'capture_integration_pg_dump',
-    'restore_integration_pg_dump',
-    'restore_import_data',
-    // Retained in Postgres from v0.9615.0. Schema reads no longer enqueue this
-    // job, but the TypeORM enum must keep matching the stored value through the
-    // rollout. DATABASE_LIFECYCLE_OPERATIONS excludes it so agents do not claim it.
-    'describe_schema',
-    // 179100 appends this after describe_schema. Postgres cannot reorder an enum,
-    // so this list has to keep the same order.
-    'import_table_data'
-];
-export const GENERIC_IMPORT_OPERATIONS = ['prepare_import_upload', 'complete_import_upload', 'import_table_data'];
-// The pool-scoped operations, which carry an organization directly and have no
-// binding, desired spec, or desired spec hash. `CK_lifecycle_request_shape`
-// enforces exactly this split at the database level.
-export const POOL_SCOPED_LIFECYCLE_OPERATIONS = ['ensure_physical_database_instance', 'retire_physical_database_instance'];
-export const DATABASE_LIFECYCLE_MANAGED_BY = 'database_lifecycle';
-export const NATIVE_DB_AUTH_DESCRIPTOR_VERSION = 3;
-// Cloud-prem connector roles are named superblocks-app-db-connector-<agent>
-// (terraform-aws-superblocks modules/app-db-prereqs). User-supplied integrations
-// may not use that prefix.
-export const APP_DB_CONNECTOR_ROLE_NAME_PREFIX = 'superblocks-app-db-connector';
-export const NATIVE_DB_IAM_AUTH_MODE = 'aws_iam_role';
-export const NATIVE_DB_IDENTIFIER_HASH_DOMAIN = 'superblocks-native-db:v1';
-export const DATABASE_LIFECYCLE_CAPABILITY_MANAGED_IAM_V1 = 'managed-IAM-v1';
-export function isLifecycleManagedIntegrationAllowedForApiTrigger(triggerType, managedBy) {
-    if (managedBy !== DATABASE_LIFECYCLE_MANAGED_BY) {
-        return true;
-    }
-    return triggerType === ApiTriggerType.UI;
-}
-// Agent capability tag keys. A lifecycle worker publishes these in the
-// `tags` map of its agent registration (merged into — never replacing — the
-// tag map the agent already publishes). The existing `profile` tag carries
-// datatag coverage, same meaning it has for execution routing, and is the
-// sole lifecycle routing key. The server matches pending lifecycle requests
-// against these at poll/claim time and gates task creation on "some active
-// org agent supports this".
-export const DATABASE_LIFECYCLE_TAG_OPERATIONS = 'databaseLifecycle:operations';
-export const DATABASE_LIFECYCLE_TAG_ENGINES = 'databaseLifecycle:engines';
-export const DATABASE_LIFECYCLE_TAG_CAPABILITIES = 'databaseLifecycle:capabilities';
-export const DATABASE_LIFECYCLE_TAG_PHYSICAL_CONFIG_FINGERPRINT = 'databaseLifecycle:physicalConfigFingerprint';
-export { APP_DATABASE_IMPORT_ERROR_CODES, APP_DATABASE_IMPORT_OPERATIONS, APP_DATABASE_IMPORT_STATES, isAppDatabaseImportCallbackResult, isAppDatabaseImportDispatchPayload, isAppDatabaseImportLifecycleOperation, isAppDatabaseImportSource, parseAppDatabaseImportValidationMetadata } from './appDatabaseImport.js';
-export { DATA_IMPORT_ACTIVE_STATES, DATA_IMPORT_KINDS, DATA_IMPORT_STATES, DATA_IMPORT_TARGET_TYPES, csvImportPlanFromWizard, csvTableImportPlan, isReservedCsvImportTable, mintDataImportConcurrencyKey, parseCsvTableImportPlanFields, parseDataImportMetadata, parseDataImportOutcome, parseDataImportTarget, sqlStringList } from './dataImport.js';
-export { CapacityPolicyValidationError, DATABASE_ENGINES, DATABASE_LIFECYCLE_TAG_CAPACITY_POLICIES, PHYSICAL_DATABASE_CAPACITY_THRESHOLD_TYPES, computePhysicalDatabasePoolKey, encodeCapacityPolicyTag, parseCapacityPolicyTag, parseCapacityPolicyTags, validateCapacityPolicyCompatibility } from './capacityPolicy.js';
-// The stable, customer-managed name of the deployment a worker belongs to. It
-// says which physical pool that worker owns, which is what keeps one
-// deployment from being handed work meant for another. The claim path also
-// treats it as the binding-ownership authority, so a client-supplied query
-// value cannot bypass it.
-export { DATABASE_LIFECYCLE_TAG_AGENT_NAME, PhysicalPoolIdentityError, parsePhysicalPoolAgentNameTag } from './physicalPoolIdentity.js';
-export { parsePhysicalDatabaseInstanceResourceKey } from './physicalInstanceResourceKey.js';
-// Operations an existing agent must publish to count as covering App Database.
-// Import operations are stored by the data-import migration, but they are not
-// part of that default set.
-export const DATABASE_LIFECYCLE_OPERATIONS = LIFECYCLE_OPERATIONS.filter((operation) => operation !== 'describe_schema' &&
-    !GENERIC_IMPORT_OPERATIONS.includes(operation) &&
-    !APP_DATABASE_IMPORT_OPERATIONS.includes(operation));
-export function isGenericImportLifecycleOperation(operation) {
-    return GENERIC_IMPORT_OPERATIONS.includes(operation);
-}
-export function isPoolScopedLifecycleOperation(operation) {
-    return POOL_SCOPED_LIFECYCLE_OPERATIONS.includes(operation);
-}
-export const LIFECYCLE_ERROR_CODES = [
-    'unsupported_provider_capability',
-    'backend_locked',
-    'policy_blocked',
-    'credential_resolution_failed',
-    'terraform_failed',
-    'migration_failed',
-    'callback_failed',
-    'configuration_conflict',
-    'upload_incomplete',
-    'checksum_mismatch',
-    'size_exceeded',
-    'table_not_found',
-    'column_not_found',
-    'invalid_value',
-    'permission_denied',
-    // Server-side classification for a terminal callback that arrived for a
-    // request whose desiredSpecHash no longer matches the binding (binding has
-    // moved to a newer spec). The callback's metadata/state is discarded and
-    // the request is cancelled rather than applied to the current binding.
-    'stale_dispatch'
-];
-export const LIFECYCLE_IMPORT_KINDS = DATA_IMPORT_KINDS;
-export const LIFECYCLE_IMPORT_TARGET_TYPES = DATA_IMPORT_TARGET_TYPES;
-export const LIFECYCLE_PROVIDER_DIAGNOSTIC_PHASES = ['apply', 'destroy', 'init', 'plan', 'unknown'];
-export const MAX_LIFECYCLE_PROVIDER_DIAGNOSTICS = 3;
-export const LIFECYCLE_PROVIDER_DIAGNOSTIC_AWS_SERVICE_PATTERN = /^[a-z][a-z0-9-]{0,31}$/;
-export const LIFECYCLE_PROVIDER_DIAGNOSTIC_AWS_OPERATION_PATTERN = /^[A-Za-z][A-Za-z0-9]{0,63}$/;
-export const LIFECYCLE_PROVIDER_DIAGNOSTIC_AWS_ERROR_CODE_PATTERN = /^[A-Za-z][A-Za-z0-9.]{0,63}$/;
-export const LIFECYCLE_PROVIDER_DIAGNOSTIC_AWS_REQUEST_ID_PATTERN = /^[0-9A-Fa-f]{8}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{12}$/;
-export const LIFECYCLE_PROVIDER_DIAGNOSTIC_AWS_S3_REQUEST_ID_PATTERN = /^[0-9A-Za-z]{16}$/;
-export const LIFECYCLE_PROVIDER_DIAGNOSTIC_AWS_DYNAMODB_REQUEST_ID_PATTERN = /^[0-9A-Za-z]{52}$/;
-export const LIFECYCLE_PROVIDER_DIAGNOSTIC_POSTGRESQL_SQL_STATE_PATTERN = /^[0-9A-Za-z]{5}$/;
-export function isLifecycleProviderDiagnosticAwsRequestId(service, requestId) {
-    if (typeof requestId !== 'string') {
-        return false;
-    }
-    if (LIFECYCLE_PROVIDER_DIAGNOSTIC_AWS_REQUEST_ID_PATTERN.test(requestId)) {
-        return true;
-    }
-    if (service === 's3') {
-        return LIFECYCLE_PROVIDER_DIAGNOSTIC_AWS_S3_REQUEST_ID_PATTERN.test(requestId);
-    }
-    if (service === 'dynamodb') {
-        return LIFECYCLE_PROVIDER_DIAGNOSTIC_AWS_DYNAMODB_REQUEST_ID_PATTERN.test(requestId);
-    }
-    return false;
-}
-const lifecycleProviderDiagnosticPhases = new Set(LIFECYCLE_PROVIDER_DIAGNOSTIC_PHASES);
-function lifecycleProviderDiagnosticCandidateProvider(value) {
-    if (!value || typeof value !== 'object' || Array.isArray(value)) {
-        return 'unknown';
-    }
-    const provider = value.provider;
-    return provider === 'aws' || provider === 'postgresql' ? provider : 'unknown';
-}
-function lifecycleProviderDiagnosticPhase(value) {
-    return typeof value === 'string' && lifecycleProviderDiagnosticPhases.has(value)
-        ? value
-        : 'unknown';
-}
-function invalidDiagnosticString(value, pattern) {
-    return typeof value !== 'string' || !pattern.test(value);
-}
-/**
- * Canonical validation boundary for one provider diagnostic. The output is
- * rebuilt from allowlisted facts, provider-authored text and unknown fields are
- * discarded, and decorative fields such as nextAction are derived locally.
- */
-export function inspectLifecycleProviderDiagnosticCandidate(value) {
-    const provider = lifecycleProviderDiagnosticCandidateProvider(value);
-    if (!value || typeof value !== 'object' || Array.isArray(value)) {
-        return { provider, rejectedFields: ['(root)'] };
-    }
-    const candidate = value;
-    if (provider === 'unknown') {
-        return { provider, rejectedFields: ['provider'] };
-    }
-    if (provider === 'aws') {
-        const rejectedFields = [];
-        if (invalidDiagnosticString(candidate.errorCode, LIFECYCLE_PROVIDER_DIAGNOSTIC_AWS_ERROR_CODE_PATTERN)) {
-            rejectedFields.push('errorCode');
-        }
-        if (invalidDiagnosticString(candidate.operation, LIFECYCLE_PROVIDER_DIAGNOSTIC_AWS_OPERATION_PATTERN)) {
-            rejectedFields.push('operation');
-        }
-        if (typeof candidate.retryable !== 'boolean') {
-            rejectedFields.push('retryable');
-        }
-        if (invalidDiagnosticString(candidate.service, LIFECYCLE_PROVIDER_DIAGNOSTIC_AWS_SERVICE_PATTERN)) {
-            rejectedFields.push('service');
-        }
-        if (rejectedFields.length > 0) {
-            return { provider, rejectedFields };
-        }
-        const requestId = candidate.requestId;
-        const hasSafeRequestId = isLifecycleProviderDiagnosticAwsRequestId(candidate.service, requestId);
-        return {
-            diagnostic: {
-                errorCode: candidate.errorCode,
-                nextAction: 'review_aws_operation',
-                operation: candidate.operation,
-                phase: lifecycleProviderDiagnosticPhase(candidate.phase),
-                provider,
-                ...(hasSafeRequestId ? { requestId } : {}),
-                retryable: candidate.retryable,
-                service: candidate.service
-            },
-            provider,
-            ...(requestId !== undefined && !hasSafeRequestId ? { sanitizedFields: ['requestId'] } : {})
-        };
-    }
-    const rejectedFields = [];
-    if (typeof candidate.retryable !== 'boolean') {
-        rejectedFields.push('retryable');
-    }
-    if (invalidDiagnosticString(candidate.sqlState, LIFECYCLE_PROVIDER_DIAGNOSTIC_POSTGRESQL_SQL_STATE_PATTERN)) {
-        rejectedFields.push('sqlState');
-    }
-    if (rejectedFields.length > 0) {
-        return { provider, rejectedFields };
-    }
-    return {
-        diagnostic: {
-            nextAction: 'review_database_operation',
-            phase: lifecycleProviderDiagnosticPhase(candidate.phase),
-            provider,
-            retryable: candidate.retryable,
-            sqlState: candidate.sqlState
-        },
-        provider
-    };
-}
-export function sanitizeLifecycleProviderDiagnostics(value) {
-    if (!Array.isArray(value)) {
-        return undefined;
-    }
-    const diagnostics = value
-        .flatMap((candidate) => {
-        const diagnostic = inspectLifecycleProviderDiagnosticCandidate(candidate).diagnostic;
-        return diagnostic ? [diagnostic] : [];
-    })
-        .slice(0, MAX_LIFECYCLE_PROVIDER_DIAGNOSTICS);
-    return diagnostics.length > 0 ? diagnostics : undefined;
-}
-export function isReadyDatabaseBinding(binding) {
-    return binding.lifecycleState === 'ready';
-}
-export const INFRA_ABSENCE_PROOF_KINDS = ['postgres_catalog_database_absent', 'aws_rds_resource_not_found'];
-// Physical database instances back the M2 shared-RDS allocation pattern: dev-DB
-// provisioning issues `CREATE DATABASE`/`CREATE ROLE` against a pre-existing
-// physical database instance instead of spinning up a fresh RDS per binding.
-// The control plane is the dumb org-scoped state store (registry + atomic
-// capacity counter); ALL selection and provisioning logic lives in the worker.
-export const PHYSICAL_DATABASE_INSTANCE_STATUSES = ['active', 'draining', 'retired'];
-export { analyzeDestructiveMigrations, analyzeDestructiveMigrationsRequiringAck, DESTRUCTIVE_MIGRATION_ACK_REQUIRED, DESTRUCTIVE_MIGRATION_ACK_REQUIRED_MESSAGE, DESTRUCTIVE_MIGRATION_SCAN_UNAVAILABLE } from './destructiveMigrations.js';
-// Wizard-facing view of a physical pool provisioning run. Narrower than
-// `LIFECYCLE_STATES` on purpose: the UI only distinguishes "nothing has run"
-// from in-progress, done, and failed. `not_started` is the absence of a row;
-// queued and running both read as `provisioning`.
-export const PHYSICAL_POOL_PROVISIONING_STATUSES = ['not_started', 'provisioning', 'active', 'failed'];
-const PHYSICAL_POOL_PROVISIONING_RESOURCE_KEY_PREFIX = 'physical-pool-provisioning';
-export function physicalPoolProvisioningResourceKey(provisioningId) {
-    return `${PHYSICAL_POOL_PROVISIONING_RESOURCE_KEY_PREFIX}:${provisioningId}`;
-}
-// Eager pool provision records this key on the instance and as the Terraform
-// backend resource_key. Retirement has to read the provisioning id back out so
-// it can recover the profile the original run stored on dispatch -- the
-// instance row does not keep a profile, and guessing one would point destroy
-// at a different state file.
-export function parsePhysicalPoolProvisioningResourceKey(resourceKey) {
-    const segments = resourceKey.split(':');
-    if (segments.length !== 2 || segments[0] !== PHYSICAL_POOL_PROVISIONING_RESOURCE_KEY_PREFIX) {
-        return undefined;
-    }
-    return segments[1] || undefined;
-}
-export function computeRequirementKey(requirement) {
-    return `${slugify(requirement.logicalName)}~${encodeURIComponent(requirement.logicalName)}:${requirement.engine}`;
-}
-// binding_key is the product identity of a database in the control plane, and
-// is deliberately scoped to (organization, application, profile) only — NOT the
-// logical name. This is what makes "one database per profile" enforceable by the
-// plain UNIQUE (binding_key) constraint: asking for another database under a
-// different logical name resolves to the same binding_key instead of minting a
-// new one. The logical name still lives on the binding row and in resource_key
-// (physical identity); it just doesn't grant a second slot.
-export function computeBindingKey(input) {
-    return [input.organizationId, ...bindingKeySegments(input)].join(':');
-}
-export function computeLegacyBindingKeyWithoutOrganization(input) {
-    return bindingKeySegments(input).join(':');
-}
-function bindingKeySegments(input) {
-    return [input.applicationId, `${slugify(input.profile)}~${encodeURIComponent(input.profile)}`];
-}
-// Hashes only the infrastructure spec. migrationDirectory is deliberately
-// excluded: it says where the SQL files live, not what database to provision,
-// so changing it must not make a ready binding look drifted and re-dispatch
-// ensure_database. Callers that persist the requirement must still rewrite
-// desiredSpec when migrationDirectory changes (same hash is not "no-op").
-// Specs without a migrationDirectory keep their existing hash.
-export async function computeDesiredSpecHash(requirement) {
-    const infrastructureSpec = { ...requirement };
-    delete infrastructureSpec.migrationDirectory;
-    return await sha256Base64(JSON.stringify(canonicalize(infrastructureSpec)));
-}
-export function nativeDbIamSessionPolicy(descriptor) {
-    return JSON.stringify({
-        Version: '2012-10-17',
-        Statement: [
-            {
-                Sid: 'ConnectToThisNativeDatabaseUser',
-                Effect: 'Allow',
-                Action: 'rds-db:connect',
-                Resource: `arn:aws:rds-db:${descriptor.region}:${descriptor.aws_account_id}:dbuser:${descriptor.cluster_resource_id}/${descriptor.username}`
-            }
-        ]
-    });
-}
-export function parseNativeDbIamDescriptor(value) {
-    if (!isUnknownRecord(value)) {
-        return undefined;
-    }
-    const databaseIdentifier = typeof value.database === 'string' ? /^sbndb_([0-9a-f]{16})_([0-9a-f]{24})$/.exec(value.database) : null;
-    const usernameIdentifier = typeof value.username === 'string' ? /^sbndb_([0-9a-f]{16})_([0-9a-f]{24})_runtime$/.exec(value.username) : null;
-    const connectorRoleArn = typeof value.connector_role_arn === 'string'
-        ? /^arn:aws:iam::(\d{12}):role\/(?:[\w+=,.@-]+\/)*[\w+=,.@-]+$/.exec(value.connector_role_arn)
-        : null;
-    if (!isNonEmptyString(value.application_id) ||
-        !isNativeDbAuthDescriptorVersion(value.auth_descriptor_version) ||
-        value.auth_mode !== NATIVE_DB_IAM_AUTH_MODE ||
-        !isNonEmptyString(value.aws_account_id) ||
-        !/^\d{12}$/.test(value.aws_account_id) ||
-        !isNonEmptyString(value.binding_id) ||
-        !isNonEmptyString(value.cluster_resource_id) ||
-        !/^(cluster|db)-[A-Za-z0-9-]+$/.test(value.cluster_resource_id) ||
-        !connectorRoleArn ||
-        connectorRoleArn[1] !== value.aws_account_id ||
-        !databaseIdentifier ||
-        !usernameIdentifier ||
-        databaseIdentifier[1] !== usernameIdentifier[1] ||
-        usernameIdentifier[0] !== databaseIdentifier[0] + '_runtime' ||
-        !isValidNativeDbRdsHostname(value.host, value.region) ||
-        typeof value.port !== 'number' ||
-        !Number.isInteger(value.port) ||
-        value.port < 1 ||
-        value.port > 65535 ||
-        !isCommercialAwsRegion(value.region)) {
-        return undefined;
-    }
-    return {
-        application_id: value.application_id,
-        auth_descriptor_version: value.auth_descriptor_version,
-        auth_mode: NATIVE_DB_IAM_AUTH_MODE,
-        aws_account_id: value.aws_account_id,
-        binding_id: value.binding_id,
-        cluster_resource_id: value.cluster_resource_id,
-        connector_role_arn: connectorRoleArn[0],
-        database: databaseIdentifier[0],
-        host: value.host,
-        port: value.port,
-        region: value.region,
-        username: usernameIdentifier[0]
-    };
-}
-export async function computeNativeDbApplicationToken(trustedApplicationId) {
-    return (await computeNativeDbIdentifierToken('application', trustedApplicationId)).slice(0, 24);
-}
-export async function computeNativeDbProfileToken(profile) {
-    const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(profile.toLowerCase()));
-    return Array.from(new Uint8Array(digest))
-        .slice(0, 8)
-        .map((byte) => byte.toString(16).padStart(2, '0'))
-        .join('');
-}
-async function computeNativeDbIdentifierToken(kind, trustedId) {
-    if (!isNonEmptyString(trustedId)) {
-        throw new Error(`Trusted native database ${kind} ID must be a non-empty string`);
-    }
-    const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(`${NATIVE_DB_IDENTIFIER_HASH_DOMAIN}:${kind}:${trustedId}`));
-    return Array.from(new Uint8Array(digest))
-        .map((byte) => byte.toString(16).padStart(2, '0'))
-        .join('');
-}
-// resource_key identifies the physical resource a binding maps to in
-// customer infrastructure, and is the unit of locking inside the lifecycle
-// worker. Distinct from binding_key (product identity in the control plane)
-// because the worker derives infrastructure identity from it — shape
-// mirrors planning doc §15.
-export function computeResourceKey(input) {
-    return [
-        input.organizationId,
-        input.applicationId,
-        input.requirementKey,
-        `${slugify(input.profile)}~${encodeURIComponent(input.profile)}`,
-        input.actorScope ?? 'default'
-    ].join('/');
-}
-export function isTerminalLifecycleState(state) {
-    return LIFECYCLE_TERMINAL_STATES.includes(state);
-}
-export function redactLifecycleSecrets(value) {
-    return redact(value);
-}
-function slugify(value) {
-    return value
-        .trim()
-        .toLowerCase()
-        .replace(/[^a-z0-9]+/g, '-')
-        .replace(/^-|-$/g, '');
-}
-function canonicalize(value) {
-    if (Array.isArray(value)) {
-        return value.map(canonicalize).sort((left, right) => codepointCompare(JSON.stringify(left), JSON.stringify(right)));
-    }
-    if (value && typeof value === 'object') {
-        return Object.fromEntries(Object.entries(value)
-            .filter(([, entryValue]) => entryValue !== undefined)
-            .sort(([left], [right]) => codepointCompare(left, right))
-            .map(([key, entryValue]) => [key, canonicalize(entryValue)]));
-    }
-    return value;
-}
-function codepointCompare(left, right) {
-    if (left < right) {
-        return -1;
-    }
-    if (left > right) {
-        return 1;
-    }
-    return 0;
-}
-function isCommercialAwsRegion(value) {
-    return typeof value === 'string' && /^[a-z]{2}-[a-z]+-[0-9]+$/.test(value) && !value.startsWith('cn-') && !value.startsWith('us-gov-');
-}
-function isNativeDbAuthDescriptorVersion(value) {
-    return value === NATIVE_DB_AUTH_DESCRIPTOR_VERSION;
-}
-function isNonEmptyString(value) {
-    return typeof value === 'string' && value.trim().length > 0;
-}
-function isUnknownRecord(value) {
-    return value !== null && typeof value === 'object' && !Array.isArray(value);
-}
-function isValidNativeDbRdsHostname(host, region) {
-    if (typeof host !== 'string' || typeof region !== 'string') {
-        return false;
-    }
-    const suffix = `.${region}.rds.amazonaws.com`;
-    const prefix = host.endsWith(suffix) ? host.slice(0, -suffix.length) : '';
-    const validLabel = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
-    return host.length <= 253 && host === host.toLowerCase() && prefix !== '' && host.split('.').every((label) => validLabel.test(label));
-}
-function redact(value, preservePhysicalMasterCredentialRef = false) {
-    if (Array.isArray(value)) {
-        return value.map((entry) => redact(entry, preservePhysicalMasterCredentialRef));
-    }
-    if (value && typeof value === 'object') {
-        return Object.fromEntries(Object.entries(value).map(([key, entryValue]) => {
-            if (isPhysicalMasterCredentialRefKey(key)) {
-                return [key, redact(entryValue, true)];
-            }
-            if (!preservePhysicalMasterCredentialRef && SECRET_KEY_PATTERN.test(key)) {
-                return [key, '[REDACTED]'];
-            }
-            return [key, redact(entryValue, preservePhysicalMasterCredentialRef)];
-        }));
-    }
-    return value;
-}
-// Shared secret-key tripwire: keys whose name strongly suggests a raw secret
-// value. Used by `redactLifecycleSecrets` to scrub logs/error reporting and by
-// the server-side `assertNoRawCredentialMaterial` guard to refuse callbacks.
-// NOT a security boundary -- callers must still send primitive
-// `connectionMetadata`; this catches obvious misuse only.
-export const SECRET_KEY_PATTERN = /password|secret|token|private[_-]?key|dsn/i;
-// Schemes whose URI form embeds credentials before `@`. Used as a value-side
-// tripwire alongside `SECRET_KEY_PATTERN` -- callers should never send
-// connection strings; the typed `connectionMetadata` shape is the contract.
-export const CREDENTIAL_BEARING_DSN_SCHEMES = [
-    'postgres',
-    'postgresql',
-    'mysql',
-    'mariadb',
-    'mongodb',
-    'mongodb+srv',
-    'redis',
-    'rediss',
-    'amqp',
-    'amqps',
-    'kafka'
-];
-export function isSecretKey(key) {
-    return SECRET_KEY_PATTERN.test(key);
-}
-export function containsCredentialMaterial(value) {
-    if (DSN_WITH_INLINE_AUTH.test(value)) {
-        return true;
-    }
-    if (CREDENTIAL_KV_PATTERN.test(value)) {
-        return true;
-    }
-    if (JSON_ENCODED_SECRET_PATTERN.test(value)) {
-        return true;
-    }
-    return false;
-}
-const DSN_SCHEME_GROUP = CREDENTIAL_BEARING_DSN_SCHEMES.join('|').replace(/\+/g, '\\+');
-const DSN_WITH_INLINE_AUTH = new RegExp(`(?:${DSN_SCHEME_GROUP}):\\/\\/[^/@\\s:]+:[^/@\\s]+@`, 'i');
-const CREDENTIAL_KV_PATTERN = /(?:password|pwd|token|secret|private[_-]?key|api[_-]?key)\s*=\s*[^;&\s"]+/i;
-const JSON_ENCODED_SECRET_PATTERN = /["']\s*(?:password|secret|token|private[_-]?key|dsn)\s*["']\s*:/i;
-function isPhysicalMasterCredentialRefKey(key) {
-    return /^master[_-]?credential[_-]?ref$/i.test(key);
-}
-//# sourceMappingURL=index.js.map

package/dist-esm/database-lifecycle/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/database-lifecycle/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EACL,8BAA8B,EAO/B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EAIzB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAU,CAAC;AACnF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,CAAU,CAAC;AAC3G,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAG,6BAA6B,EAAE,GAAG,yBAAyB,CAAU,CAAC;AAC1G,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAU,CAAC;AACrF,+DAA+D;AAC/D,mEAAmE;AACnE,sDAAsD;AACtD,8EAA8E;AAC9E,oEAAoE;AACpE,+EAA+E;AAC/E,yEAAyE;AACzE,6EAA6E;AAC7E,4EAA4E;AAC5E,+EAA+E;AAC/E,+CAA+C;AAC/C,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,iBAAiB;IACjB,gBAAgB;IAChB,iBAAiB;IACjB,mCAAmC;IACnC,mCAAmC;IACnC,+BAA+B;IAC/B,uBAAuB;IACvB,wBAAwB;IACxB,8BAA8B;IAC9B,uBAAuB;IACvB,6BAA6B;IAC7B,6BAA6B;IAC7B,qBAAqB;IACrB,2EAA2E;IAC3E,4EAA4E;IAC5E,gFAAgF;IAChF,iBAAiB;IACjB,8EAA8E;IAC9E,2CAA2C;IAC3C,mBAAmB;CACX,CAAC;AACX,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,uBAAuB,EAAE,wBAAwB,EAAE,mBAAmB,CAAU,CAAC;AAC3H,+EAA+E;AAC/E,4EAA4E;AAC5E,qDAAqD;AACrD,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,mCAAmC,EAAE,mCAAmC,CAAU,CAAC;AACpI,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAC;AAClE,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAU,CAAC;AAC5D,4EAA4E;AAC5E,iFAAiF;AACjF,2BAA2B;AAC3B,MAAM,CAAC,MAAM,iCAAiC,GAAG,8BAA8B,CAAC;AAChF,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAuB,CAAC;AAC/D,MAAM,CAAC,MAAM,gCAAgC,GAAG,0BAA0B,CAAC;AAC3E,MAAM,CAAC,MAAM,4CAA4C,GAAG,gBAAgB,CAAC;AAE7E,MAAM,UAAU,iDAAiD,CAC/D,WAA2B,EAC3B,SAAoC;IAEpC,IAAI,SAAS,KAAK,6BAA6B,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,WAAW,KAAK,cAAc,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,uEAAuE;AACvE,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,4EAA4E;AAC5E,2EAA2E;AAC3E,4BAA4B;AAC5B,MAAM,CAAC,MAAM,iCAAiC,GAAG,8BAA8B,CAAC;AAChF,MAAM,CAAC,MAAM,8BAA8B,GAAG,2BAA2B,CAAC;AAC1E,MAAM,CAAC,MAAM,mCAAmC,GAAG,gCAAgC,CAAC;AACpF,MAAM,CAAC,MAAM,kDAAkD,GAAG,6CAA6C,CAAC;AAChH,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,0BAA0B,EAC1B,iCAAiC,EACjC,kCAAkC,EAClC,qCAAqC,EACrC,yBAAyB,EACzB,wCAAwC,EAkBzC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,wBAAwB,EACxB,4BAA4B,EAC5B,6BAA6B,EAC7B,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,aAAa,EAgBd,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,6BAA6B,EAC7B,gBAAgB,EAChB,wCAAwC,EACxC,0CAA0C,EAC1C,8BAA8B,EAC9B,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,mCAAmC,EAKpC,MAAM,qBAAqB,CAAC;AAC7B,8EAA8E;AAC9E,qEAAqE;AACrE,2EAA2E;AAC3E,2EAA2E;AAC3E,0BAA0B;AAC1B,OAAO,EAAE,iCAAiC,EAAE,yBAAyB,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AACxI,OAAO,EAAE,wCAAwC,EAA4C,MAAM,kCAAkC,CAAC;AAOtI,+EAA+E;AAC/E,8EAA8E;AAC9E,4BAA4B;AAC5B,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAC,MAAM,CACtE,CAAC,SAAS,EAA2C,EAAE,CACrD,SAAS,KAAK,iBAAiB;IAC/B,CAAE,yBAA+C,CAAC,QAAQ,CAAC,SAAS,CAAC;IACrE,CAAE,8BAAoD,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC7E,CAAC;AAEF,MAAM,UAAU,iCAAiC,CAAC,SAAiB;IACjE,OAAQ,yBAA+C,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,SAA6B;IAC1E,OAAQ,gCAAsD,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACrF,CAAC;AAOD,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,iCAAiC;IACjC,gBAAgB;IAChB,gBAAgB;IAChB,8BAA8B;IAC9B,kBAAkB;IAClB,kBAAkB;IAClB,iBAAiB;IACjB,wBAAwB;IACxB,mBAAmB;IACnB,mBAAmB;IACnB,eAAe;IACf,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,mBAAmB;IACnB,wEAAwE;IACxE,2EAA2E;IAC3E,yEAAyE;IACzE,uEAAuE;IACvE,gBAAgB;CACR,CAAC;AAIX,MAAM,CAAC,MAAM,sBAAsB,GAAG,iBAAiB,CAAC;AACxD,MAAM,CAAC,MAAM,6BAA6B,GAAG,wBAAwB,CAAC;AA4EtE,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;AAC7G,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC;AACpD,MAAM,CAAC,MAAM,iDAAiD,GAAG,wBAAwB,CAAC;AAC1F,MAAM,CAAC,MAAM,mDAAmD,GAAG,6BAA6B,CAAC;AACjG,MAAM,CAAC,MAAM,oDAAoD,GAAG,8BAA8B,CAAC;AACnG,MAAM,CAAC,MAAM,oDAAoD,GAC/D,+EAA+E,CAAC;AAClF,MAAM,CAAC,MAAM,uDAAuD,GAAG,mBAAmB,CAAC;AAC3F,MAAM,CAAC,MAAM,6DAA6D,GAAG,mBAAmB,CAAC;AACjG,MAAM,CAAC,MAAM,0DAA0D,GAAG,kBAAkB,CAAC;AAE7F,MAAM,UAAU,yCAAyC,CAAC,OAAe,EAAE,SAAkB;IAC3F,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,oDAAoD,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,uDAAuD,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,OAAO,6DAA6D,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAuCD,MAAM,iCAAiC,GAAG,IAAI,GAAG,CAAS,oCAAoC,CAAC,CAAC;AAEhG,SAAS,4CAA4C,CAAC,KAAc;IAClE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAI,KAAiC,CAAC,QAAQ,CAAC;IAC7D,OAAO,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AAChF,CAAC;AAED,SAAS,gCAAgC,CAAC,KAAc;IACtD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,iCAAiC,CAAC,GAAG,CAAC,KAAK,CAAC;QAC9E,CAAC,CAAE,KAA0C;QAC7C,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAE,OAAe;IAC9D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2CAA2C,CAAC,KAAc;IACxE,MAAM,QAAQ,GAAG,4CAA4C,CAAC,KAAK,CAAC,CAAC;IACrE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;IAClD,CAAC;IACD,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;IACpD,CAAC;IAED,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,IAAI,uBAAuB,CAAC,SAAS,CAAC,SAAS,EAAE,oDAAoD,CAAC,EAAE,CAAC;YACvG,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,uBAAuB,CAAC,SAAS,CAAC,SAAS,EAAE,mDAAmD,CAAC,EAAE,CAAC;YACtG,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,OAAO,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC7C,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,uBAAuB,CAAC,SAAS,CAAC,OAAO,EAAE,iDAAiD,CAAC,EAAE,CAAC;YAClG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;QACtC,MAAM,gBAAgB,GAAG,yCAAyC,CAAC,SAAS,CAAC,OAAiB,EAAE,SAAS,CAAC,CAAC;QAC3G,OAAO;YACL,UAAU,EAAE;gBACV,SAAS,EAAE,SAAS,CAAC,SAAmB;gBACxC,UAAU,EAAE,sBAAsB;gBAClC,SAAS,EAAE,SAAS,CAAC,SAAmB;gBACxC,KAAK,EAAE,gCAAgC,CAAC,SAAS,CAAC,KAAK,CAAC;gBACxD,QAAQ;gBACR,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,SAAS,EAAE,SAAS,CAAC,SAAoB;gBACzC,OAAO,EAAE,SAAS,CAAC,OAAiB;aACrC;YACD,QAAQ;YACR,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5F,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,OAAO,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC7C,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,uBAAuB,CAAC,SAAS,CAAC,QAAQ,EAAE,0DAA0D,CAAC,EAAE,CAAC;QAC5G,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;IACtC,CAAC;IACD,OAAO;QACL,UAAU,EAAE;YACV,UAAU,EAAE,2BAA2B;YACvC,KAAK,EAAE,gCAAgC,CAAC,SAAS,CAAC,KAAK,CAAC;YACxD,QAAQ;YACR,SAAS,EAAE,SAAS,CAAC,SAAoB;YACzC,QAAQ,EAAE,SAAS,CAAC,QAAkB;SACvC;QACD,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,KAAc;IACjE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,WAAW,GAAG,KAAK;SACtB,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;QACrB,MAAM,UAAU,GAAG,2CAA2C,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC;QACrF,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxC,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,EAAE,kCAAkC,CAAC,CAAC;IAChD,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AA6FD,MAAM,UAAU,sBAAsB,CAAC,OAAwB;IAC7D,OAAO,OAAO,CAAC,cAAc,KAAK,OAAO,CAAC;AAC5C,CAAC;AAWD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,kCAAkC,EAAE,4BAA4B,CAAU,CAAC;AAkBrH,gFAAgF;AAChF,6EAA6E;AAC7E,6EAA6E;AAC7E,0EAA0E;AAC1E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAU,CAAC;AAqC9F,OAAO,EACL,4BAA4B,EAC5B,wCAAwC,EACxC,kCAAkC,EAClC,0CAA0C,EAC1C,sCAAsC,EACvC,MAAM,4BAA4B,CAAC;AAqBpC,wEAAwE;AACxE,6EAA6E;AAC7E,6EAA6E;AAC7E,kDAAkD;AAClD,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,aAAa,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAuGhH,MAAM,8CAA8C,GAAG,4BAA4B,CAAC;AAEpF,MAAM,UAAU,mCAAmC,CAAC,cAAsB;IACxE,OAAO,GAAG,8CAA8C,IAAI,cAAc,EAAE,CAAC;AAC/E,CAAC;AAED,6EAA6E;AAC7E,+EAA+E;AAC/E,wEAAwE;AACxE,6EAA6E;AAC7E,6BAA6B;AAC7B,MAAM,UAAU,wCAAwC,CAAC,WAAmB;IAC1E,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,8CAA8C,EAAE,CAAC;QAC5F,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,WAAgE;IACpG,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,kBAAkB,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;AACpH,CAAC;AAED,8EAA8E;AAC9E,gFAAgF;AAChF,iFAAiF;AACjF,6EAA6E;AAC7E,+EAA+E;AAC/E,+EAA+E;AAC/E,4DAA4D;AAC5D,MAAM,UAAU,iBAAiB,CAAC,KAAyE;IACzG,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,0CAA0C,CAAC,KAAiD;IAC1G,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAiD;IAC3E,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACjG,CAAC;AAED,0EAA0E;AAC1E,8EAA8E;AAC9E,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,WAAgC;IAC3E,MAAM,kBAAkB,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;IAC9C,OAAO,kBAAkB,CAAC,kBAAkB,CAAC;IAC7C,OAAO,MAAM,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,UAAiC;IACxE,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,EAAE,YAAY;QACrB,SAAS,EAAE;YACT;gBACE,GAAG,EAAE,iCAAiC;gBACtC,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,gBAAgB;gBACxB,QAAQ,EAAE,kBAAkB,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,cAAc,WAAW,UAAU,CAAC,mBAAmB,IAAI,UAAU,CAAC,QAAQ,EAAE;aAC7I;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,kBAAkB,GAAG,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,uCAAuC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpI,MAAM,kBAAkB,GACtB,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnH,MAAM,gBAAgB,GACpB,OAAO,KAAK,CAAC,kBAAkB,KAAK,QAAQ;QAC1C,CAAC,CAAC,6DAA6D,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC;QAC9F,CAAC,CAAC,IAAI,CAAC;IACX,IACE,CAAC,gBAAgB,CAAC,KAAK,CAAC,cAAc,CAAC;QACvC,CAAC,+BAA+B,CAAC,KAAK,CAAC,uBAAuB,CAAC;QAC/D,KAAK,CAAC,SAAS,KAAK,uBAAuB;QAC3C,CAAC,gBAAgB,CAAC,KAAK,CAAC,cAAc,CAAC;QACvC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;QACtC,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC;QACnC,CAAC,gBAAgB,CAAC,KAAK,CAAC,mBAAmB,CAAC;QAC5C,CAAC,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;QAC/D,CAAC,gBAAgB;QACjB,gBAAgB,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,cAAc;QAC5C,CAAC,kBAAkB;QACnB,CAAC,kBAAkB;QACnB,kBAAkB,CAAC,CAAC,CAAC,KAAK,kBAAkB,CAAC,CAAC,CAAC;QAC/C,kBAAkB,CAAC,CAAC,CAAC,KAAK,kBAAkB,CAAC,CAAC,CAAC,GAAG,UAAU;QAC5D,CAAC,0BAA0B,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;QACrD,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;QAC7B,KAAK,CAAC,IAAI,GAAG,CAAC;QACd,KAAK,CAAC,IAAI,GAAG,KAAK;QAClB,CAAC,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,EACpC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,SAAS,EAAE,uBAAuB;QAClC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACvC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAC/B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,oBAA4B;IAChF,OAAO,CAAC,MAAM,8BAA8B,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAAe;IAC/D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACtG,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;SACtC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACjD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,KAAK,UAAU,8BAA8B,CAAC,IAAmB,EAAE,SAAiB;IAClF,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,gCAAgC,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACvC,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,gCAAgC,IAAI,IAAI,IAAI,SAAS,EAAE,CAAC,CACrF,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;SACtC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACjD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,qEAAqE;AACrE,2EAA2E;AAC3E,4EAA4E;AAC5E,qEAAqE;AACrE,4BAA4B;AAC5B,MAAM,UAAU,kBAAkB,CAAC,KAMlC;IACC,OAAO;QACL,KAAK,CAAC,cAAc;QACpB,KAAK,CAAC,aAAa;QACnB,KAAK,CAAC,cAAc;QACpB,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;QAChE,KAAK,CAAC,UAAU,IAAI,SAAS;KAC9B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAqB;IAC5D,OAAQ,yBAA+C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAI,KAAQ;IAChD,OAAO,MAAM,CAAC,KAAK,CAAM,CAAC;AAC5B,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,KAAK;SACT,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtH,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aAClB,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC;aACpD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;aACxD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAC/D,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACnD,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,CAAC,CAAC;IACZ,CAAC;IACD,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AACzI,CAAC;AAED,SAAS,+BAA+B,CAAC,KAAc;IACrD,OAAO,KAAK,KAAK,iCAAiC,CAAC;AACrD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAa,EAAE,MAAe;IAChE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,MAAM,oBAAoB,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,MAAM,UAAU,GAAG,wCAAwC,CAAC;IAC5D,OAAO,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,WAAW,EAAE,IAAI,MAAM,KAAK,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACxI,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,mCAAmC,GAAG,KAAK;IACzE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,mCAAmC,CAAC,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE;YAC9C,IAAI,gCAAgC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1C,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;YACzC,CAAC;YACD,IAAI,CAAC,mCAAmC,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzE,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAC7B,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,mCAAmC,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,+DAA+D;AAC/D,0DAA0D;AAC1D,MAAM,CAAC,MAAM,kBAAkB,GAAG,4CAA4C,CAAC;AAE/E,6EAA6E;AAC7E,uEAAuE;AACvE,4EAA4E;AAC5E,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,UAAU;IACV,YAAY;IACZ,OAAO;IACP,SAAS;IACT,SAAS;IACT,aAAa;IACb,OAAO;IACP,QAAQ;IACR,MAAM;IACN,OAAO;IACP,OAAO;CACC,CAAC;AAEX,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAa;IACtD,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,gBAAgB,GAAG,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACxF,MAAM,oBAAoB,GAAG,IAAI,MAAM,CAAC,MAAM,gBAAgB,+BAA+B,EAAE,GAAG,CAAC,CAAC;AACpG,MAAM,qBAAqB,GAAG,4EAA4E,CAAC;AAC3G,MAAM,2BAA2B,GAAG,kEAAkE,CAAC;AAEvG,SAAS,gCAAgC,CAAC,GAAW;IACnD,OAAO,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtD,CAAC"}

package/dist-esm/database-lifecycle/index.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=index.test.d.ts.map

package/dist-esm/database-lifecycle/index.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.test.d.ts","sourceRoot":"","sources":["../../src/database-lifecycle/index.test.ts"],"names":[],"mappings":""}