@tokenfactory/acc-runner 0.44.7 → 0.44.9

package/dist/production-migrations/executor.js

@@ -0,0 +1,161 @@
+import { createHash, createHmac, timingSafeEqual } from "node:crypto";
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+import { isCommitSha, isSha256Digest } from "../commit-sha.js";
+export const PRODUCTION_PROJECT_REF = "ctknjrtevjrzwpuojghx";
+export function productionLedgerSnapshot(items) {
+    const value = items
+        .map((item) => `${item.ordinal}:${item.seq}:${item.slug}:${item.sha}:${item.staging_status}`)
+        .join("|");
+    return createHash("sha256").update(value).digest("hex");
+}
+export function signReceipt(promotionId, action, receiptId, key, keyId) {
+    if (key.length < 32 || !keyId)
+        throw new Error("production_receipt_signing_key_required");
+    const digest = createHash("sha256").update(`${promotionId}:${action}:${receiptId}`).digest("hex");
+    return {
+        receiptId,
+        digest,
+        signature: createHmac("sha256", key).update(digest).digest("hex"),
+        keyId,
+    };
+}
+export function verifySignedReceipt(receipt, key) {
+    const actual = Buffer.from(receipt.signature, "hex");
+    const expected = Buffer.from(createHmac("sha256", key).update(receipt.digest).digest("hex"), "hex");
+    return actual.length === expected.length && timingSafeEqual(actual, expected);
+}
+function assertPromotion(promotion) {
+    if (promotion.production_project_ref !== PRODUCTION_PROJECT_REF)
+        throw new Error("production_project_pin_invalid");
+    if (promotion.analyzer_classification !== "safe")
+        throw new Error("production_analyzer_not_safe");
+    if (!isCommitSha(promotion.commit_sha))
+        throw new Error("production_commit_invalid");
+    if (!isSha256Digest(promotion.plan_hash))
+        throw new Error("production_plan_hash_invalid");
+    if (promotion.items.length === 0)
+        throw new Error("production_plan_empty");
+    if (productionLedgerSnapshot(promotion.items) !== promotion.staging_ledger_snapshot_sha)
+        throw new Error("production_staging_snapshot_mismatch");
+    let previous = null;
+    for (const [index, item] of promotion.items.entries()) {
+        if (item.ordinal !== index ||
+            item.path !== `supabase/migrations/${item.seq}_${item.slug}.sql` ||
+            !/^[0-9]{4}$/.test(item.seq) ||
+            !isSha256Digest(item.sha))
+            throw new Error("production_plan_item_invalid");
+        if (previous !== null && Number(item.seq) !== previous + 1)
+            throw new Error("production_plan_not_contiguous");
+        previous = Number(item.seq);
+    }
+}
+function insideRepo(repoRoot, migrationPath) {
+    const root = path.resolve(repoRoot);
+    const resolved = path.resolve(root, migrationPath);
+    if (!resolved.startsWith(`${root}${path.sep}`))
+        throw new Error("production_migration_path_escape");
+    return resolved;
+}
+function failureCode(error) {
+    const raw = error instanceof Error ? error.message : "production_migration_failed";
+    return raw
+        .replace(/postgres(?:ql)?:\/\/[^\s]+/gi, "[REDACTED_DB_URL]")
+        .replace(/(password|token|secret)=?[^\s]*/gi, "$1=[REDACTED]")
+        .replace(/[^a-zA-Z0-9_.:[\] -]/g, "_")
+        .slice(0, 200);
+}
+async function signed(promotion, action, result, receipts, options) {
+    if (!/^[0-9a-f-]{36}$/i.test(result.receipt_id))
+        throw new Error("production_receipt_invalid");
+    await receipts.signed(signReceipt(promotion.id, action, result.receipt_id, options.receiptKey, options.receiptKeyId));
+}
+/** Exact-file, fail-closed production executor. Applied ledger rows make crash recovery idempotent. */
+export async function executeProductionPromotion(promotion, repoRoot, target, receipts, options) {
+    const lockKey = `acc:production-migrations:${PRODUCTION_PROJECT_REF}`;
+    const timeoutMs = Math.max(5_000, Math.min(options.timeoutMs ?? 300_000, 900_000));
+    let locked = false;
+    try {
+        assertPromotion(promotion);
+        if ((await target.projectRef()) !== PRODUCTION_PROJECT_REF)
+            throw new Error("production_project_pin_mismatch");
+        if (!(await target.tryAdvisoryLock(lockKey)))
+            throw new Error("production_migration_lock_busy");
+        locked = true;
+        const head = await target.ledgerHead();
+        const acceptable = new Set([
+            String(Number(promotion.items[0].seq) - 1).padStart(4, "0"),
+            ...promotion.items.map((item) => item.seq),
+        ]);
+        if (!head || !acceptable.has(head))
+            throw new Error("production_ledger_head_mismatch");
+        for (const item of promotion.items) {
+            if (await options.cancelled?.())
+                throw new Error("production_migration_cancelled");
+            if (item.status === "applied" || item.status === "skipped")
+                continue;
+            const existing = await target.ledger(item.seq);
+            if (existing) {
+                if (existing.slug !== item.slug || existing.sha !== item.sha)
+                    throw new Error(`production_ledger_drift_${item.seq}`);
+                const result = await receipts.item(item.ordinal, "skipped");
+                await signed(promotion, `item:${item.ordinal}:skipped`, result, receipts, options);
+                continue;
+            }
+            const file = insideRepo(repoRoot, item.path);
+            const sql = await readFile(file);
+            if (createHash("sha256").update(sql).digest("hex") !== item.sha)
+                throw new Error(`production_file_hash_mismatch_${item.seq}`);
+            const controller = new AbortController();
+            let cancelled = false;
+            const timer = setTimeout(() => controller.abort(), timeoutMs);
+            const cancelPoll = options.cancelled
+                ? setInterval(() => {
+                    void options.cancelled?.().then((value) => {
+                        if (value) {
+                            cancelled = true;
+                            controller.abort();
+                        }
+                    });
+                }, 250)
+                : null;
+            cancelPoll?.unref?.();
+            try {
+                await target.applyFile(file, controller.signal);
+                const recorded = await target.ledger(item.seq);
+                if (!recorded || recorded.slug !== item.slug || recorded.sha !== item.sha)
+                    throw new Error(`production_ledger_receipt_missing_${item.seq}`);
+                const result = await receipts.item(item.ordinal, "applied");
+                await signed(promotion, `item:${item.ordinal}:applied`, result, receipts, options);
+            }
+            catch (error) {
+                const code = cancelled
+                    ? "production_migration_cancelled"
+                    : controller.signal.aborted
+                        ? "production_migration_timeout"
+                        : failureCode(error);
+                const result = await receipts.item(item.ordinal, "failed", code);
+                await signed(promotion, `item:${item.ordinal}:failed`, result, receipts, options);
+                throw new Error(code);
+            }
+            finally {
+                clearTimeout(timer);
+                if (cancelPoll)
+                    clearInterval(cancelPoll);
+            }
+        }
+        const result = await receipts.complete(true);
+        await signed(promotion, "complete:succeeded", result, receipts, options);
+    }
+    catch (error) {
+        const result = await receipts.complete(false, failureCode(error)).catch(() => null);
+        if (result)
+            await signed(promotion, "complete:failed", result, receipts, options).catch(() => undefined);
+        throw error;
+    }
+    finally {
+        if (locked)
+            await target.unlockAdvisory(lockKey).catch(() => undefined);
+    }
+}
+//# sourceMappingURL=executor.js.map

package/dist/production-migrations/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/production-migrations/executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAE/D,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAyD7D,MAAM,UAAU,wBAAwB,CAAC,KAAgC;IACvE,MAAM,KAAK,GAAG,KAAK;SAChB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;SAC5F,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,WAAmB,EACnB,MAAc,EACd,SAAiB,EACjB,GAAW,EACX,KAAa;IAEb,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,WAAW,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClG,OAAO;QACL,SAAS;QACT,MAAM;QACN,SAAS,EAAE,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QACjE,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAsB,EAAE,GAAW;IACrE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAC1B,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAC9D,KAAK,CACN,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,eAAe,CAAC,SAAuC;IAC9D,IAAI,SAAS,CAAC,sBAAsB,KAAK,sBAAsB;QAC7D,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,IAAI,SAAS,CAAC,uBAAuB,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACrF,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC1F,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3E,IAAI,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,2BAA2B;QACrF,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACtD,IACE,IAAI,CAAC,OAAO,KAAK,KAAK;YACtB,IAAI,CAAC,IAAI,KAAK,uBAAuB,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,MAAM;YAChE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YAC5B,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;YAEzB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ,GAAG,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB,EAAE,aAAqB;IACzD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC;IACnF,OAAO,GAAG;SACP,OAAO,CAAC,8BAA8B,EAAE,mBAAmB,CAAC;SAC5D,OAAO,CAAC,mCAAmC,EAAE,eAAe,CAAC;SAC7D,OAAO,CAAC,uBAAuB,EAAE,GAAG,CAAC;SACrC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,SAAuC,EACvC,MAAc,EACd,MAA8B,EAC9B,QAA+B,EAC/B,OAAmC;IAEnC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC/F,MAAM,QAAQ,CAAC,MAAM,CACnB,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAC/F,CAAC;AACJ,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,SAAuC,EACvC,QAAgB,EAChB,MAAwB,EACxB,QAA+B,EAC/B,OAAmC;IAEnC,MAAM,OAAO,GAAG,6BAA6B,sBAAsB,EAAE,CAAC;IACtE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACnF,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC;QACH,eAAe,CAAC,SAAS,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,sBAAsB;YACxD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAChG,MAAM,GAAG,IAAI,CAAC;QACd,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;YACzB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;YAC3D,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;SAC3C,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAEvF,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACnC,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACnF,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAS;YACrE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;oBAC1D,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACzD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBAC5D,MAAM,MAAM,CAAC,SAAS,EAAE,QAAQ,IAAI,CAAC,OAAO,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACnF,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG;gBAC7D,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;YAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS;gBAClC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE;oBACf,KAAK,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;wBACxC,IAAI,KAAK,EAAE,CAAC;4BACV,SAAS,GAAG,IAAI,CAAC;4BACjB,UAAU,CAAC,KAAK,EAAE,CAAC;wBACrB,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC,EAAE,GAAG,CAAC;gBACT,CAAC,CAAC,IAAI,CAAC;YACT,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;gBAChD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC/C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;oBACvE,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACnE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBAC5D,MAAM,MAAM,CAAC,SAAS,EAAE,QAAQ,IAAI,CAAC,OAAO,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YACrF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,GAAG,SAAS;oBACpB,CAAC,CAAC,gCAAgC;oBAClC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;wBACzB,CAAC,CAAC,8BAA8B;wBAChC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBACzB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;gBACjE,MAAM,MAAM,CAAC,SAAS,EAAE,QAAQ,IAAI,CAAC,OAAO,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAClF,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;YACxB,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,UAAU;oBAAE,aAAa,CAAC,UAAU,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,MAAM,CAAC,SAAS,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACpF,IAAI,MAAM;YACR,MAAM,MAAM,CAAC,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/F,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,MAAM;YAAE,MAAM,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC"}

package/dist/production-migrations/pg-target.d.ts

@@ -0,0 +1,22 @@
+import { type ProductionTarget } from "./executor.js";
+export declare function productionCredentialEnvName(profile: string): string;
+export declare function projectRefFromProductionUrl(value: string): string;
+export declare class PgProductionTarget implements ProductionTarget {
+    private readonly env;
+    private readonly client;
+    private readonly connectionString;
+    private readonly pinnedRef;
+    constructor(profile: string, env?: NodeJS.ProcessEnv);
+    connect(): Promise<void>;
+    close(): Promise<void>;
+    projectRef(): Promise<string>;
+    tryAdvisoryLock(key: string): Promise<boolean>;
+    unlockAdvisory(key: string): Promise<void>;
+    ledger(seq: string): Promise<{
+        slug: string;
+        sha: string;
+    } | null>;
+    ledgerHead(): Promise<string | null>;
+    applyFile(file: string, signal: AbortSignal): Promise<void>;
+}
+//# sourceMappingURL=pg-target.d.ts.map

package/dist/production-migrations/pg-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-target.d.ts","sourceRoot":"","sources":["../../src/production-migrations/pg-target.ts"],"names":[],"mappings":"AAGA,OAAO,EAA0B,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAI9E,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAInE;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUjE;AAED,qBAAa,kBAAmB,YAAW,gBAAgB;IAOvD,OAAO,CAAC,QAAQ,CAAC,GAAG;IANtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAGjC,OAAO,EAAE,MAAM,EACE,GAAG,GAAE,MAAM,CAAC,UAAwB;IAcjD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAGxB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAGtB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAG7B,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAO9C,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAG1C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAOlE,UAAU,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAMpC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAmBlE"}

package/dist/production-migrations/pg-target.js

@@ -0,0 +1,87 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { Client } from "pg";
+import { PRODUCTION_PROJECT_REF } from "./executor.js";
+const execFileAsync = promisify(execFile);
+export function productionCredentialEnvName(profile) {
+    if (!/^[A-Za-z0-9_.-]{1,80}$/.test(profile))
+        throw new Error("production_credential_profile_invalid");
+    return `ACC_DB_PROFILE_${profile.toUpperCase().replace(/[^A-Z0-9]/g, "_")}_URL`;
+}
+export function projectRefFromProductionUrl(value) {
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        throw new Error("production_credential_url_invalid");
+    }
+    const ref = `${parsed.hostname}${parsed.pathname}`.match(/\b([a-z0-9]{20})\b/)?.[1];
+    if (!ref)
+        throw new Error("production_credential_project_ref_missing");
+    return ref;
+}
+export class PgProductionTarget {
+    env;
+    client;
+    connectionString;
+    pinnedRef;
+    constructor(profile, env = process.env) {
+        this.env = env;
+        const value = env[productionCredentialEnvName(profile)];
+        if (!value)
+            throw new Error("production_credential_profile_not_configured");
+        this.pinnedRef = projectRefFromProductionUrl(value);
+        if (this.pinnedRef !== PRODUCTION_PROJECT_REF)
+            throw new Error("non_production_target_forbidden");
+        this.connectionString = value;
+        this.client = new Client({
+            connectionString: value,
+            application_name: "acc-production-migration-executor",
+        });
+    }
+    async connect() {
+        await this.client.connect();
+    }
+    async close() {
+        await this.client.end();
+    }
+    async projectRef() {
+        return this.pinnedRef;
+    }
+    async tryAdvisoryLock(key) {
+        const result = await this.client.query("select pg_try_advisory_lock(hashtextextended($1, 0)) as locked", [key]);
+        return result.rows[0]?.locked === true;
+    }
+    async unlockAdvisory(key) {
+        await this.client.query("select pg_advisory_unlock(hashtextextended($1, 0))", [key]);
+    }
+    async ledger(seq) {
+        const result = await this.client.query("select slug, sha from acc.applied_migrations where seq = $1", [seq]);
+        return result.rows[0] ?? null;
+    }
+    async ledgerHead() {
+        const result = await this.client.query("select seq from acc.applied_migrations order by seq::integer desc limit 1");
+        return result.rows[0]?.seq ?? null;
+    }
+    async applyFile(file, signal) {
+        // Do not leak the runner/token/signing environment into psql. The opaque
+        // profile resolves locally and only the minimum process environment crosses
+        // the child boundary; the connection string is never placed in argv.
+        const childEnv = {
+            PATH: this.env.PATH,
+            HOME: this.env.HOME,
+            LANG: this.env.LANG,
+            LC_ALL: this.env.LC_ALL,
+            SSL_CERT_FILE: this.env.SSL_CERT_FILE,
+            PGCONNECT_TIMEOUT: this.env.PGCONNECT_TIMEOUT ?? "10",
+            PGDATABASE: this.connectionString,
+        };
+        await execFileAsync("psql", ["-X", "--set", "ON_ERROR_STOP=1", "--file", file], {
+            env: childEnv,
+            signal,
+            maxBuffer: 256 * 1024,
+        });
+    }
+}
+//# sourceMappingURL=pg-target.js.map

package/dist/production-migrations/pg-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-target.js","sourceRoot":"","sources":["../../src/production-migrations/pg-target.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAyB,MAAM,eAAe,CAAC;AAE9E,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,UAAU,2BAA2B,CAAC,OAAe;IACzD,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,OAAO,kBAAkB,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAa;IACvD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACvE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,kBAAkB;IAOV;IANF,MAAM,CAAS;IACf,gBAAgB,CAAS;IACzB,SAAS,CAAS;IAEnC,YACE,OAAe,EACE,MAAyB,OAAO,CAAC,GAAG;QAApC,QAAG,GAAH,GAAG,CAAiC;QAErD,MAAM,KAAK,GAAG,GAAG,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC5E,IAAI,CAAC,SAAS,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,SAAS,KAAK,sBAAsB;YAC3C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC;YACvB,gBAAgB,EAAE,KAAK;YACvB,gBAAgB,EAAE,mCAAmC;SACtD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IAC1B,CAAC;IACD,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,GAAW;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CACpC,gEAAgE,EAChE,CAAC,GAAG,CAAC,CACN,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,GAAW;QAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CACpC,6DAA6D,EAC7D,CAAC,GAAG,CAAC,CACN,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAChC,CAAC;IACD,KAAK,CAAC,UAAU;QACd,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CACpC,2EAA2E,CAC5E,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC;IACrC,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,MAAmB;QAC/C,yEAAyE;QACzE,4EAA4E;QAC5E,qEAAqE;QACrE,MAAM,QAAQ,GAAsB;YAClC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;YACnB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;YACnB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;YACnB,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;YACvB,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa;YACrC,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI;YACrD,UAAU,EAAE,IAAI,CAAC,gBAAgB;SAClC,CAAC;QACF,MAAM,aAAa,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE;YAC9E,GAAG,EAAE,QAAQ;YACb,MAAM;YACN,SAAS,EAAE,GAAG,GAAG,IAAI;SACtB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/production-migrations/profiles.d.ts

@@ -0,0 +1,5 @@
+export declare function configuredProductionMigrationProfiles(env?: NodeJS.ProcessEnv): string[];
+export declare function configuredProductionPromotionIds(env?: NodeJS.ProcessEnv): string[];
+export declare function productionMigrationServiceEnabled(env?: NodeJS.ProcessEnv): boolean;
+export declare function productionMigrationCaps(env?: NodeJS.ProcessEnv): Record<string, unknown>;
+//# sourceMappingURL=profiles.d.ts.map

package/dist/production-migrations/profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/production-migrations/profiles.ts"],"names":[],"mappings":"AAGA,wBAAgB,qCAAqC,CACnD,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,EAAE,CAaV;AAED,wBAAgB,gCAAgC,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,EAAE,CAS/F;AAED,wBAAgB,iCAAiC,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAQ/F;AAED,wBAAgB,uBAAuB,CACrC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAIzB"}

package/dist/production-migrations/profiles.js

@@ -0,0 +1,39 @@
+import { PRODUCTION_PROJECT_REF } from "./executor.js";
+import { projectRefFromProductionUrl } from "./pg-target.js";
+export function configuredProductionMigrationProfiles(env = process.env) {
+    const profiles = [];
+    for (const [name, value] of Object.entries(env)) {
+        const match = /^ACC_DB_PROFILE_([A-Z0-9_]+)_URL$/.exec(name);
+        if (!match || !value)
+            continue;
+        try {
+            if (projectRefFromProductionUrl(value) === PRODUCTION_PROJECT_REF)
+                profiles.push(match[1].toLowerCase());
+        }
+        catch {
+            /* malformed and non-production credentials are never advertised */
+        }
+    }
+    return profiles.sort();
+}
+export function configuredProductionPromotionIds(env = process.env) {
+    return [
+        ...new Set((env.ACC_PRODUCTION_MIGRATION_PROMOTION_IDS ?? "")
+            .split(",")
+            .map((value) => value.trim())
+            .filter((value) => /^[0-9a-f-]{36}$/i.test(value))),
+    ];
+}
+export function productionMigrationServiceEnabled(env = process.env) {
+    return (env.ACC_PRODUCTION_MIGRATION_SERVICE === "1" &&
+        configuredProductionMigrationProfiles(env).length > 0 &&
+        configuredProductionPromotionIds(env).length > 0 &&
+        (env.ACC_PRODUCTION_MIGRATION_RECEIPT_KEY?.length ?? 0) >= 32 &&
+        Boolean(env.ACC_PRODUCTION_MIGRATION_RECEIPT_KEY_ID));
+}
+export function productionMigrationCaps(env = process.env) {
+    return configuredProductionMigrationProfiles(env).length > 0
+        ? { production_migrations: true, production_project_ref: PRODUCTION_PROJECT_REF }
+        : {};
+}
+//# sourceMappingURL=profiles.js.map

package/dist/production-migrations/profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../src/production-migrations/profiles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAE7D,MAAM,UAAU,qCAAqC,CACnD,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK;YAAE,SAAS;QAC/B,IAAI,CAAC;YACH,IAAI,2BAA2B,CAAC,KAAK,CAAC,KAAK,sBAAsB;gBAC/D,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;QACrE,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnF,OAAO;QACL,GAAG,IAAI,GAAG,CACR,CAAC,GAAG,CAAC,sCAAsC,IAAI,EAAE,CAAC;aAC/C,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CACrD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpF,OAAO,CACL,GAAG,CAAC,gCAAgC,KAAK,GAAG;QAC5C,qCAAqC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QACrD,gCAAgC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QAChD,CAAC,GAAG,CAAC,oCAAoC,EAAE,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE;QAC7D,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CACrD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAAyB,OAAO,CAAC,GAAG;IAEpC,OAAO,qCAAqC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QAC1D,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,sBAAsB,EAAE,sBAAsB,EAAE;QACjF,CAAC,CAAC,EAAE,CAAC;AACT,CAAC"}

package/dist/production-migrations/service.d.ts

@@ -0,0 +1,39 @@
+import type { RunnerConfig } from "../config.js";
+import type { RunnerSupabaseClient } from "../supabase.js";
+import { type ProductionTarget } from "./executor.js";
+export interface ProductionMigrationLogger {
+    info(message: string): void;
+    error(message: string): void;
+}
+export interface ProductionMigrationServiceOptions {
+    env?: NodeJS.ProcessEnv;
+    pollMs?: number;
+    logger?: ProductionMigrationLogger;
+    resolveRepo?: (repo: string) => string;
+    verifyCommit?: (root: string, sha: string) => Promise<void>;
+    targetFactory?: (profile: string) => ProductionTarget & {
+        connect(): Promise<void>;
+        close(): Promise<void>;
+    };
+}
+export declare function productionSafeCode(error: unknown): string;
+export declare function verifyProductionCheckout(root: string, sha: string): Promise<void>;
+export declare class ProductionMigrationService {
+    private readonly sb;
+    private readonly cfg;
+    private readonly runnerId;
+    private readonly options;
+    private timer;
+    private active;
+    private stopping;
+    private readonly env;
+    private readonly logger;
+    private readonly pollMs;
+    constructor(sb: RunnerSupabaseClient, cfg: RunnerConfig, runnerId: string, options?: ProductionMigrationServiceOptions);
+    start(): void;
+    stop(): Promise<void>;
+    pollOnce(): Promise<void>;
+    claimAndRun(promotionId: string): Promise<"skipped" | "succeeded" | "failed">;
+}
+export { productionMigrationCaps, productionMigrationServiceEnabled } from "./profiles.js";
+//# sourceMappingURL=service.d.ts.map

package/dist/production-migrations/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/production-migrations/service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAIL,KAAK,gBAAgB,EAEtB,MAAM,eAAe,CAAC;AAOvB,MAAM,WAAW,yBAAyB;IACxC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,iCAAiC;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACvC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,gBAAgB,GAAG;QACtD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QACzB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;KACxB,CAAC;CACH;AASD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAOzD;AAED,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKvF;AAED,qBAAa,0BAA0B;IASnC,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAX1B,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAoB;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IACnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAGb,EAAE,EAAE,oBAAoB,EACxB,GAAG,EAAE,YAAY,EACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,iCAAsC;IAOlE,KAAK,IAAI,IAAI;IAQP,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAUrB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAezB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;CAuFpF;AAED,OAAO,EAAE,uBAAuB,EAAE,iCAAiC,EAAE,MAAM,eAAe,CAAC"}

package/dist/production-migrations/service.js

@@ -0,0 +1,166 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { resolveMachineRepoPath } from "../machine-console/index.js";
+import { executeProductionPromotion, } from "./executor.js";
+import { PgProductionTarget } from "./pg-target.js";
+import { configuredProductionPromotionIds } from "./profiles.js";
+import { isCommitSha } from "../commit-sha.js";
+const execFileAsync = promisify(execFile);
+export function productionSafeCode(error) {
+    const raw = error instanceof Error ? error.message : "unknown_error";
+    return raw
+        .replace(/postgres(?:ql)?:\/\/[^\s]+/gi, "[REDACTED_DB_URL]")
+        .replace(/(password|token|secret)=?[^\s]*/gi, "$1=[REDACTED]")
+        .replace(/[^a-zA-Z0-9_.:[\] -]/g, "_")
+        .slice(0, 240);
+}
+export async function verifyProductionCheckout(root, sha) {
+    if (!isCommitSha(sha))
+        throw new Error("production_commit_invalid");
+    const { stdout } = await execFileAsync("git", ["rev-parse", "HEAD"], { cwd: root });
+    if (stdout.trim().toLowerCase() !== sha.toLowerCase())
+        throw new Error("production_commit_mismatch");
+}
+export class ProductionMigrationService {
+    sb;
+    cfg;
+    runnerId;
+    options;
+    timer = null;
+    active = false;
+    stopping = false;
+    env;
+    logger;
+    pollMs;
+    constructor(sb, cfg, runnerId, options = {}) {
+        this.sb = sb;
+        this.cfg = cfg;
+        this.runnerId = runnerId;
+        this.options = options;
+        this.env = options.env ?? process.env;
+        this.logger = options.logger ?? console;
+        this.pollMs = Math.max(5_000, Math.min(options.pollMs ?? 30_000, 300_000));
+    }
+    start() {
+        if (this.timer)
+            return;
+        this.stopping = false;
+        void this.pollOnce();
+        this.timer = setInterval(() => void this.pollOnce(), this.pollMs);
+        this.timer.unref?.();
+    }
+    async stop() {
+        this.stopping = true;
+        if (this.timer)
+            clearInterval(this.timer);
+        this.timer = null;
+        const deadline = Date.now() + 30_000;
+        while (this.active && Date.now() < deadline)
+            await new Promise((resolve) => setTimeout(resolve, 25));
+        if (this.active)
+            this.logger.error("[acc-runner] production migration shutdown_wait_exceeded");
+    }
+    async pollOnce() {
+        if (this.active || this.stopping)
+            return;
+        this.active = true;
+        try {
+            for (const promotionId of configuredProductionPromotionIds(this.env)) {
+                if (this.stopping)
+                    break;
+                await this.claimAndRun(promotionId);
+            }
+        }
+        catch (error) {
+            this.logger.error(`[acc-runner] production migration service: ${productionSafeCode(error)}`);
+        }
+        finally {
+            this.active = false;
+        }
+    }
+    async claimAndRun(promotionId) {
+        const claimed = await this.sb.rpc("claim_production_migration_promotion", {
+            p_promotion_id: promotionId,
+        });
+        if (claimed.error) {
+            this.logger.info(`[acc-runner] production migration claim skipped: ${productionSafeCode(claimed.error)}`);
+            return "skipped";
+        }
+        const payload = claimed.data;
+        if (!payload.promotion ||
+            !payload.production_credential_profile_ref ||
+            !Array.isArray(payload.items) ||
+            !payload.receipt_id)
+            throw new Error("invalid_production_claim_receipt");
+        const promotion = {
+            ...payload.promotion,
+            production_credential_profile_ref: payload.production_credential_profile_ref,
+            items: payload.items,
+        };
+        const signed = async (receipt) => {
+            const event = await this.sb.rpc("log_activity", {
+                p_verb: "production_migration.runner_receipt",
+                p_target_id: promotion.id,
+                p_target_type: "production_migration_promotion",
+                p_payload: { ...receipt, runner_id: this.runnerId },
+            });
+            if (event.error)
+                throw new Error(`production_signed_receipt_failed:${event.error.message}`);
+        };
+        const receipts = {
+            item: async (ordinal, status, errorCode) => {
+                const result = await this.sb.rpc("record_production_migration_item", {
+                    p_promotion_id: promotion.id,
+                    p_ordinal: ordinal,
+                    p_status: status,
+                    p_error_code: errorCode ? productionSafeCode(errorCode) : null,
+                });
+                if (result.error)
+                    throw new Error(`production_item_receipt_failed:${result.error.message}`);
+                return result.data;
+            },
+            complete: async (succeeded, failureCode) => {
+                const result = await this.sb.rpc("complete_production_migration_promotion", {
+                    p_promotion_id: promotion.id,
+                    p_succeeded: succeeded,
+                    p_failure_code: failureCode ? productionSafeCode(failureCode) : null,
+                });
+                if (result.error)
+                    throw new Error(`production_completion_receipt_failed:${result.error.message}`);
+                return result.data;
+            },
+            signed,
+        };
+        let target = null;
+        let started = false;
+        try {
+            const root = this.options.resolveRepo?.(promotion.repo) ??
+                resolveMachineRepoPath(this.cfg, promotion.repo);
+            await (this.options.verifyCommit ?? verifyProductionCheckout)(root, promotion.commit_sha);
+            target =
+                this.options.targetFactory?.(promotion.production_credential_profile_ref) ??
+                    new PgProductionTarget(promotion.production_credential_profile_ref, this.env);
+            await target.connect();
+            started = true;
+            await executeProductionPromotion(promotion, root, target, receipts, {
+                cancelled: async () => this.stopping,
+                timeoutMs: Number(this.env.ACC_PRODUCTION_MIGRATION_TIMEOUT_MS ?? 300_000),
+                receiptKey: this.env.ACC_PRODUCTION_MIGRATION_RECEIPT_KEY ?? "",
+                receiptKeyId: this.env.ACC_PRODUCTION_MIGRATION_RECEIPT_KEY_ID ?? "",
+            });
+            this.logger.info(`[acc-runner] production migration promotion ${promotion.id} succeeded`);
+            return "succeeded";
+        }
+        catch (error) {
+            if (!started)
+                await receipts.complete(false, productionSafeCode(error)).catch(() => undefined);
+            this.logger.error(`[acc-runner] production migration promotion ${promotion.id}: ${productionSafeCode(error)}`);
+            return "failed";
+        }
+        finally {
+            await target?.close().catch(() => undefined);
+        }
+    }
+}
+export { productionMigrationCaps, productionMigrationServiceEnabled } from "./profiles.js";
+//# sourceMappingURL=service.js.map

package/dist/production-migrations/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/production-migrations/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,OAAO,EACL,0BAA0B,GAK3B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,gCAAgC,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AA0B1C,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;IACrE,OAAO,GAAG;SACP,OAAO,CAAC,8BAA8B,EAAE,mBAAmB,CAAC;SAC5D,OAAO,CAAC,mCAAmC,EAAE,eAAe,CAAC;SAC7D,OAAO,CAAC,uBAAuB,EAAE,GAAG,CAAC;SACrC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAAY,EAAE,GAAW;IACtE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACpE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACpF,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,WAAW,EAAE;QACnD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,OAAO,0BAA0B;IASlB;IACA;IACA;IACA;IAXX,KAAK,GAA0B,IAAI,CAAC;IACpC,MAAM,GAAG,KAAK,CAAC;IACf,QAAQ,GAAG,KAAK,CAAC;IACR,GAAG,CAAoB;IACvB,MAAM,CAA4B;IAClC,MAAM,CAAS;IAEhC,YACmB,EAAwB,EACxB,GAAiB,EACjB,QAAgB,EAChB,UAA6C,EAAE;QAH/C,OAAE,GAAF,EAAE,CAAsB;QACxB,QAAG,GAAH,GAAG,CAAc;QACjB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,YAAO,GAAP,OAAO,CAAwC;QAEhE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;QACrC,OAAO,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;YACzC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1D,IAAI,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACjG,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QACzC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,MAAM,WAAW,IAAI,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrE,IAAI,IAAI,CAAC,QAAQ;oBAAE,MAAM;gBACzB,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/F,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB;QACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,sCAAsC,EAAE;YACxE,cAAc,EAAE,WAAW;SAC5B,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,oDAAoD,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CACxF,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAoB,CAAC;QAC7C,IACE,CAAC,OAAO,CAAC,SAAS;YAClB,CAAC,OAAO,CAAC,iCAAiC;YAC1C,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;YAC7B,CAAC,OAAO,CAAC,UAAU;YAEnB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG;YAChB,GAAG,OAAO,CAAC,SAAS;YACpB,iCAAiC,EAAE,OAAO,CAAC,iCAAiC;YAC5E,KAAK,EAAE,OAAO,CAAC,KAAK;SACsB,CAAC;QAC7C,MAAM,MAAM,GAAG,KAAK,EAAE,OAAsB,EAAiB,EAAE;YAC7D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,EAAE;gBAC9C,MAAM,EAAE,qCAAqC;gBAC7C,WAAW,EAAE,SAAS,CAAC,EAAE;gBACzB,aAAa,EAAE,gCAAgC;gBAC/C,SAAS,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE;aACpD,CAAC,CAAC;YACH,IAAI,KAAK,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9F,CAAC,CAAC;QACF,MAAM,QAAQ,GAA0B;YACtC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;gBACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,kCAAkC,EAAE;oBACnE,cAAc,EAAE,SAAS,CAAC,EAAE;oBAC5B,SAAS,EAAE,OAAO;oBAClB,QAAQ,EAAE,MAAM;oBAChB,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;iBAC/D,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC5F,OAAO,MAAM,CAAC,IAA8B,CAAC;YAC/C,CAAC;YACD,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE;gBACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,yCAAyC,EAAE;oBAC1E,cAAc,EAAE,SAAS,CAAC,EAAE;oBAC5B,WAAW,EAAE,SAAS;oBACtB,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;iBACrE,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,KAAK;oBACd,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBAClF,OAAO,MAAM,CAAC,IAA8B,CAAC;YAC/C,CAAC;YACD,MAAM;SACP,CAAC;QACF,IAAI,MAAM,GACR,IAAI,CAAC;QACP,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,GACR,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1C,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,wBAAwB,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;YAC1F,MAAM;gBACJ,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,SAAS,CAAC,iCAAiC,CAAC;oBACzE,IAAI,kBAAkB,CAAC,SAAS,CAAC,iCAAiC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAChF,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,0BAA0B,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE;gBAClE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ;gBACpC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,mCAAmC,IAAI,OAAO,CAAC;gBAC1E,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,oCAAoC,IAAI,EAAE;gBAC/D,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,uCAAuC,IAAI,EAAE;aACrE,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,SAAS,CAAC,EAAE,YAAY,CAAC,CAAC;YAC1F,OAAO,WAAW,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO;gBACV,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACnF,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,+CAA+C,SAAS,CAAC,EAAE,KAAK,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAC5F,CAAC;YACF,OAAO,QAAQ,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;CACF;AAED,OAAO,EAAE,uBAAuB,EAAE,iCAAiC,EAAE,MAAM,eAAe,CAAC"}

package/dist/program.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../src/program.ts"],"names":[],"mappings":"AAmCA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiCpC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAmC7C,MAAM,WAAW,mBAAmB;IAClC,kFAAkF;IAClF,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAmYvE;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAQvD;AAED,mEAAmE;AACnE,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAKjD"}
+{"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../src/program.ts"],"names":[],"mappings":"AAmCA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiCpC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAqC7C,MAAM,WAAW,mBAAmB;IAClC,kFAAkF;IAClF,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAqZvE;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAQvD;AAED,mEAAmE;AACnE,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAKjD"}

package/dist/program.js

@@ -57,6 +57,8 @@ import { PROTOCOL_VERSION } from "./types.js";
 import { PACKAGE_VERSION } from "./pkg-version.js";
 import { LOADED_BUILD_FINGERPRINT, runningBuildStatus } from "./build-fingerprint.js";
 import { readRunningBuild } from "./runtime/running-build.js";
+import { applyApprovedStagingMigrationCommand } from "./staging-migrations/command.js";
+import { applyApprovedProductionMigrationCommand } from "./production-migrations/command.js";
 /** RUNNER-NAMED-INSTANCES-1: shared by the four machine-lane commands. */
 const INSTANCE_FLAG_HELP = `Named runner instance on this host (env: ${INSTANCE_ENV}). ` +
     "Lowercase letters, digits and dashes. Omit for the default instance.";
@@ -255,6 +257,21 @@ export function buildProgram(options = {}) {
         const code = await doctorCommand({ strict: opts.strict === true });
         process.exitCode = code;
     });
+    const migrationsCmd = program
+        .command("migrations")
+        .description("Execute an exact, approved staging migration plan on this runner.");
+    migrationsCmd
+        .command("apply-approved")
+        .description("Apply repository migration files from an approved ACC plan (staging only).")
+        .argument("<plan-id>", "Approved staging migration plan UUID.")
+        .option("--instance <name>", INSTANCE_FLAG_HELP)
+        .action((planId) => guard(() => applyApprovedStagingMigrationCommand(planId))());
+    migrationsCmd
+        .command("apply-production")
+        .description("Apply an independently approved, production-pinned migration promotion.")
+        .argument("<promotion-id>", "Approved production migration promotion UUID.")
+        .option("--instance <name>", INSTANCE_FLAG_HELP)
+        .action((promotionId) => guard(() => applyApprovedProductionMigrationCommand(promotionId))());
     // NEEDS-INFO-HALT: a spawned agent that needs clarification / approval /
     // missing information raises a needs_clarification halt for its task and hands
     // the question off to JOJO, instead of guessing or dead-lettering. The operator