@tokenfactory/acc-runner 0.44.8 → 0.44.10

package/dist/preview-environments/service.js

@@ -0,0 +1,149 @@
+import { SupabasePreviewControlPlane } from "./control-plane.js";
+import { providerForProfile } from "./profiles.js";
+import { desiredAction, deterministicUuid, receiptSha, safePreviewCode, validateLease, } from "./safety.js";
+export class PreviewEnvironmentService {
+    runnerId;
+    options;
+    timer = null;
+    active = false;
+    stopping = false;
+    env;
+    logger;
+    pollMs;
+    timeoutMs;
+    staleAfterMs;
+    batchSize;
+    controlPlane;
+    constructor(cfg, runnerId, options = {}) {
+        this.runnerId = runnerId;
+        this.options = options;
+        this.env = options.env ?? process.env;
+        this.logger = options.logger ?? console;
+        this.pollMs = bounded(options.pollMs ?? Number(this.env.ACC_PREVIEW_POLL_MS ?? 30_000), 5_000, 300_000);
+        this.timeoutMs = bounded(options.timeoutMs ?? Number(this.env.ACC_PREVIEW_ACTION_TIMEOUT_MS ?? 120_000), 5_000, 600_000);
+        this.staleAfterMs = Math.max(this.timeoutMs * 2, 180_000);
+        this.batchSize = bounded(options.batchSize ?? Number(this.env.ACC_PREVIEW_BATCH_SIZE ?? 10), 1, 50);
+        this.controlPlane = options.controlPlane ?? new SupabasePreviewControlPlane(cfg.supabaseUrl, this.env.ACC_PREVIEW_CONTROL_PLANE_SERVICE_ROLE_KEY ?? "");
+    }
+    start() {
+        if (this.timer)
+            return;
+        this.stopping = false;
+        void this.pollOnce();
+        this.timer = setInterval(() => void this.pollOnce(), this.pollMs);
+        this.timer.unref?.();
+    }
+    async stop() {
+        this.stopping = true;
+        if (this.timer)
+            clearInterval(this.timer);
+        this.timer = null;
+        const deadline = Date.now() + this.timeoutMs;
+        while (this.active && Date.now() < deadline)
+            await new Promise((resolve) => setTimeout(resolve, 25));
+    }
+    async pollOnce() {
+        if (this.active || this.stopping)
+            return;
+        this.active = true;
+        try {
+            const rows = await this.controlPlane.listCandidates(this.batchSize);
+            for (const row of rows) {
+                if (this.stopping)
+                    break;
+                await this.process(row);
+            }
+        }
+        catch (error) {
+            this.logger.error(`[acc-runner] preview environment service: ${safePreviewCode(error)}`);
+        }
+        finally {
+            this.active = false;
+        }
+    }
+    async process(row) {
+        const action = desiredAction(row, Date.now(), this.staleAfterMs);
+        if (!action)
+            return "skipped";
+        try {
+            validateLease(row);
+            if (action !== "stop" && action !== "archive" && Date.parse(row.lease_expires_at) <= Date.now())
+                throw new Error("preview_lease_expired");
+            const providerDeploymentId = row.provider_deployment_id ?? row.deployment_identity_sha;
+            const recovering = row.observed_state === "provisioning";
+            const claimReceipt = { action, runner_id: this.runnerId, generation: row.generation, recovering };
+            const claim = await this.controlPlane.recordObservation({
+                environmentId: row.id,
+                generation: row.generation,
+                observedState: "provisioning",
+                providerDeploymentId,
+                providerReceiptSha: receiptSha(claimReceipt),
+                idempotencyKey: deterministicUuid(row.id, row.generation, action, recovering ? `recover:${row.updated_at}` : "claim"),
+            });
+            if (claim.idempotent_replay)
+                return "skipped";
+            const controller = new AbortController();
+            const timeout = setTimeout(() => controller.abort(new Error("preview_provider_timeout")), this.timeoutMs);
+            try {
+                const adapter = this.options.providerFactory?.(row.provider, row.provider_credential_profile_ref) ??
+                    providerForProfile(row.provider, row.provider_credential_profile_ref, this.env);
+                const result = await adapter.execute({
+                    action,
+                    environmentId: row.id,
+                    orgId: row.org_id,
+                    projectId: row.project_id,
+                    repo: row.repo,
+                    pullRequestNumber: row.pull_request_number,
+                    headSha: row.head_sha,
+                    generation: row.generation,
+                    deploymentIdentity: row.deployment_identity_sha,
+                    providerDeploymentId,
+                    leaseExpiresAt: row.lease_expires_at,
+                    signal: controller.signal,
+                });
+                const providerReceiptSha = receiptSha(result.receipt);
+                await this.controlPlane.recordObservation({
+                    environmentId: row.id,
+                    generation: row.generation,
+                    observedState: result.observedState,
+                    providerDeploymentId: result.providerDeploymentId,
+                    previewUrl: result.previewUrl,
+                    providerReceiptSha,
+                    idempotencyKey: deterministicUuid(row.id, row.generation, action, "complete"),
+                });
+                await this.controlPlane.audit("preview.environment_runner_completed", row.id, {
+                    runner_id: this.runnerId,
+                    action,
+                    generation: row.generation,
+                    provider_receipt_sha: providerReceiptSha,
+                }).catch((error) => {
+                    this.logger.error(`[acc-runner] preview audit: ${safePreviewCode(error)}`);
+                });
+                return "succeeded";
+            }
+            finally {
+                clearTimeout(timeout);
+            }
+        }
+        catch (error) {
+            const failureCode = safePreviewCode(error);
+            const providerDeploymentId = row.provider_deployment_id ?? row.deployment_identity_sha;
+            await this.controlPlane.recordObservation({
+                environmentId: row.id,
+                generation: row.generation,
+                observedState: "failed",
+                providerDeploymentId,
+                providerReceiptSha: receiptSha({ failureCode }),
+                failureCode,
+                idempotencyKey: deterministicUuid(row.id, row.generation, action, "failed"),
+            }).catch(() => undefined);
+            this.logger.error(`[acc-runner] preview environment ${row.id}: ${failureCode}`);
+            return "failed";
+        }
+    }
+}
+function bounded(value, min, max) {
+    return Number.isFinite(value) ? Math.max(min, Math.min(max, Math.floor(value))) : min;
+}
+export { previewEnvironmentCaps, previewEnvironmentServiceEnabled } from "./profiles.js";
+//# sourceMappingURL=service.js.map

package/dist/preview-environments/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/preview-environments/service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,UAAU,EACV,eAAe,EACf,aAAa,GACd,MAAM,aAAa,CAAC;AAsBrB,MAAM,OAAO,yBAAyB;IAcjB;IACA;IAdX,KAAK,GAA0B,IAAI,CAAC;IACpC,MAAM,GAAG,KAAK,CAAC;IACf,QAAQ,GAAG,KAAK,CAAC;IACR,GAAG,CAAoB;IACvB,MAAM,CAA2B;IACjC,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,YAAY,CAAS;IACrB,SAAS,CAAS;IAClB,YAAY,CAAsB;IAEnD,YACE,GAAiB,EACA,QAAgB,EAChB,UAA4C,EAAE;QAD9C,aAAQ,GAAR,QAAQ,CAAQ;QAChB,YAAO,GAAP,OAAO,CAAuC;QAE/D,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACxG,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,6BAA6B,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACzH,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACpG,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,2BAA2B,CACzE,GAAG,CAAC,WAAW,EACf,IAAI,CAAC,GAAG,CAAC,0CAA0C,IAAI,EAAE,CAC1D,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7C,OAAO,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;YACzC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QACzC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,IAAI,CAAC,QAAQ;oBAAE,MAAM;gBACzB,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAA4B;QACxC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,IAAI,CAAC;YACH,aAAa,CAAC,GAAG,CAAC,CAAC;YACnB,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE;gBAC7F,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,MAAM,oBAAoB,GAAG,GAAG,CAAC,sBAAsB,IAAI,GAAG,CAAC,uBAAuB,CAAC;YACvF,MAAM,UAAU,GAAG,GAAG,CAAC,cAAc,KAAK,cAAc,CAAC;YACzD,MAAM,YAAY,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC;YAClG,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC;gBACtD,aAAa,EAAE,GAAG,CAAC,EAAE;gBACrB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,aAAa,EAAE,cAAc;gBAC7B,oBAAoB;gBACpB,kBAAkB,EAAE,UAAU,CAAC,YAAY,CAAC;gBAC5C,cAAc,EAAE,iBAAiB,CAC/B,GAAG,CAAC,EAAE,EACN,GAAG,CAAC,UAAU,EACd,MAAM,EACN,UAAU,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CACnD;aACF,CAAC,CAAC;YACH,IAAI,KAAK,CAAC,iBAAiB;gBAAE,OAAO,SAAS,CAAC;YAE9C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1G,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,+BAA+B,CAAC;oBAC/F,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,+BAA+B,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBAClF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC;oBACnC,MAAM;oBACN,aAAa,EAAE,GAAG,CAAC,EAAE;oBACrB,KAAK,EAAE,GAAG,CAAC,MAAM;oBACjB,SAAS,EAAE,GAAG,CAAC,UAAU;oBACzB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,iBAAiB,EAAE,GAAG,CAAC,mBAAmB;oBAC1C,OAAO,EAAE,GAAG,CAAC,QAAQ;oBACrB,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,kBAAkB,EAAE,GAAG,CAAC,uBAAuB;oBAC/C,oBAAoB;oBACpB,cAAc,EAAE,GAAG,CAAC,gBAAgB;oBACpC,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBACH,MAAM,kBAAkB,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACtD,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC;oBACxC,aAAa,EAAE,GAAG,CAAC,EAAE;oBACrB,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;oBACjD,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,kBAAkB;oBAClB,cAAc,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC;iBAC9E,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,EAAE,EAAE;oBAC5E,SAAS,EAAE,IAAI,CAAC,QAAQ;oBACxB,MAAM;oBACN,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,oBAAoB,EAAE,kBAAkB;iBACzC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC7E,CAAC,CAAC,CAAC;gBACH,OAAO,WAAW,CAAC;YACrB,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,oBAAoB,GAAG,GAAG,CAAC,sBAAsB,IAAI,GAAG,CAAC,uBAAuB,CAAC;YACvF,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC;gBACxC,aAAa,EAAE,GAAG,CAAC,EAAE;gBACrB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,aAAa,EAAE,QAAQ;gBACvB,oBAAoB;gBACpB,kBAAkB,EAAE,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC;gBAC/C,WAAW;gBACX,cAAc,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC;aAC5E,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,GAAG,CAAC,EAAE,KAAK,WAAW,EAAE,CAAC,CAAC;YAChF,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;CACF;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,GAAW,EAAE,GAAW;IACtD,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACxF,CAAC;AAED,OAAO,EAAE,sBAAsB,EAAE,gCAAgC,EAAE,MAAM,eAAe,CAAC"}

package/dist/preview-environments/types.d.ts

@@ -0,0 +1,60 @@
+export type PreviewDesiredState = "active" | "promoted" | "stopped" | "archived";
+export type PreviewObservedState = "pending" | "provisioning" | "ready" | "failed" | "stopped" | "archived";
+export type PreviewAction = "create" | "refresh" | "promote" | "stop" | "archive";
+export interface PreviewEnvironmentLease {
+    id: string;
+    org_id: string;
+    project_id: string;
+    repo: string;
+    pull_request_number: number;
+    head_sha: string;
+    provider: string;
+    provider_credential_profile_ref: string;
+    deployment_identity_sha: string;
+    provider_deployment_id: string | null;
+    desired_state: PreviewDesiredState;
+    observed_state: PreviewObservedState;
+    generation: number;
+    lease_expires_at: string;
+    updated_at: string;
+}
+export interface PreviewProviderRequest {
+    action: PreviewAction;
+    environmentId: string;
+    orgId: string;
+    projectId: string;
+    repo: string;
+    pullRequestNumber: number;
+    headSha: string;
+    generation: number;
+    deploymentIdentity: string;
+    providerDeploymentId: string;
+    leaseExpiresAt: string;
+    signal: AbortSignal;
+}
+export interface PreviewProviderResult {
+    providerDeploymentId: string;
+    observedState: Exclude<PreviewObservedState, "pending" | "provisioning">;
+    previewUrl?: string | null;
+    receipt: Record<string, unknown>;
+}
+export interface PreviewProviderAdapter {
+    execute(request: PreviewProviderRequest): Promise<PreviewProviderResult>;
+}
+export interface PreviewControlPlane {
+    listCandidates(limit: number): Promise<PreviewEnvironmentLease[]>;
+    recordObservation(input: {
+        environmentId: string;
+        generation: number;
+        observedState: Exclude<PreviewObservedState, "pending">;
+        providerDeploymentId: string;
+        previewUrl?: string | null;
+        providerReceiptSha: string;
+        failureCode?: string | null;
+        idempotencyKey: string;
+    }): Promise<{
+        idempotent_replay?: boolean;
+    }>;
+    audit(verb: string, environmentId: string, payload: Record<string, unknown>): Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/preview-environments/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/preview-environments/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,CAAC;AACjF,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,cAAc,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;AAC5G,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;AAElF,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B,EAAE,MAAM,CAAC;IACxC,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,aAAa,EAAE,mBAAmB,CAAC;IACnC,cAAc,EAAE,oBAAoB,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,aAAa,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE,OAAO,CAAC,oBAAoB,EAAE,SAAS,GAAG,cAAc,CAAC,CAAC;IACzE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CAC1E;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAC;IAClE,iBAAiB,CAAC,KAAK,EAAE;QACvB,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,OAAO,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;QACxD,oBAAoB,EAAE,MAAM,CAAC;QAC7B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,kBAAkB,EAAE,MAAM,CAAC;QAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,cAAc,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC;QAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7F"}

package/dist/preview-environments/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/preview-environments/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/preview-environments/types.ts"],"names":[],"mappings":""}

package/dist/production-migrations/command.d.ts

@@ -0,0 +1,3 @@
+/** Explicit single-promotion entrypoint; the claim RPC is always the authority. */
+export declare function applyApprovedProductionMigrationCommand(promotionId: string): Promise<void>;
+//# sourceMappingURL=command.d.ts.map

package/dist/production-migrations/command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../src/production-migrations/command.ts"],"names":[],"mappings":"AAKA,mFAAmF;AACnF,wBAAsB,uCAAuC,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAWhG"}

package/dist/production-migrations/command.js

@@ -0,0 +1,21 @@
+import { loadConfig } from "../config.js";
+import { getTokenProvider } from "../token-provider.js";
+import { createRunnerClient } from "../supabase.js";
+import { ProductionMigrationService } from "./service.js";
+/** Explicit single-promotion entrypoint; the claim RPC is always the authority. */
+export async function applyApprovedProductionMigrationCommand(promotionId) {
+    if (!/^[0-9a-f-]{36}$/i.test(promotionId))
+        throw new Error("invalid production promotion id");
+    const cfg = loadConfig();
+    const session = await getTokenProvider().load();
+    if (!session?.runner_id)
+        throw new Error("runner login required");
+    const sb = createRunnerClient(cfg, session.access_token, session.realtime_config);
+    const service = new ProductionMigrationService(sb, cfg, session.runner_id, {
+        env: { ...process.env, ACC_PRODUCTION_MIGRATION_PROMOTION_IDS: promotionId },
+    });
+    const outcome = await service.claimAndRun(promotionId);
+    if (outcome !== "succeeded")
+        throw new Error(`production migration ${outcome}`);
+}
+//# sourceMappingURL=command.js.map

package/dist/production-migrations/command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../../src/production-migrations/command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAE1D,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAAC,WAAmB;IAC/E,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC9F,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,IAAI,0BAA0B,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE;QACzE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,sCAAsC,EAAE,WAAW,EAAE;KAC7E,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IACvD,IAAI,OAAO,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC;AAClF,CAAC"}

package/dist/production-migrations/executor.d.ts

@@ -0,0 +1,59 @@
+export declare const PRODUCTION_PROJECT_REF = "ctknjrtevjrzwpuojghx";
+export interface ProductionMigrationItem {
+    ordinal: number;
+    seq: string;
+    slug: string;
+    path: string;
+    sha: string;
+    staging_status: "applied" | "skipped";
+    status: "pending" | "skipped" | "applied" | "failed";
+}
+export interface ProductionMigrationPromotion {
+    id: string;
+    repo: string;
+    commit_sha: string;
+    plan_hash: string;
+    production_project_ref: string;
+    production_credential_profile_ref: string;
+    staging_ledger_snapshot_sha: string;
+    analyzer_classification: "safe" | "review_required" | "blocked";
+    items: ProductionMigrationItem[];
+}
+export interface ProductionTarget {
+    projectRef(): Promise<string>;
+    tryAdvisoryLock(key: string): Promise<boolean>;
+    unlockAdvisory(key: string): Promise<void>;
+    ledgerHead(): Promise<string | null>;
+    ledger(seq: string): Promise<{
+        slug: string;
+        sha: string;
+    } | null>;
+    applyFile(file: string, signal: AbortSignal): Promise<void>;
+}
+export interface SignedReceipt {
+    receiptId: string;
+    digest: string;
+    signature: string;
+    keyId: string;
+}
+export interface ProductionReceiptSink {
+    item(ordinal: number, status: "skipped" | "applied" | "failed", errorCode?: string): Promise<{
+        receipt_id: string;
+    }>;
+    complete(succeeded: boolean, failureCode?: string): Promise<{
+        receipt_id: string;
+    }>;
+    signed(receipt: SignedReceipt): Promise<void>;
+}
+export interface ProductionExecutionOptions {
+    timeoutMs?: number;
+    cancelled?: () => Promise<boolean>;
+    receiptKey: string;
+    receiptKeyId: string;
+}
+export declare function productionLedgerSnapshot(items: ProductionMigrationItem[]): string;
+export declare function signReceipt(promotionId: string, action: string, receiptId: string, key: string, keyId: string): SignedReceipt;
+export declare function verifySignedReceipt(receipt: SignedReceipt, key: string): boolean;
+/** Exact-file, fail-closed production executor. Applied ledger rows make crash recovery idempotent. */
+export declare function executeProductionPromotion(promotion: ProductionMigrationPromotion, repoRoot: string, target: ProductionTarget, receipts: ProductionReceiptSink, options: ProductionExecutionOptions): Promise<void>;
+//# sourceMappingURL=executor.d.ts.map

package/dist/production-migrations/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../src/production-migrations/executor.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAE7D,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,SAAS,GAAG,SAAS,CAAC;IACtC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;CACtD;AAED,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,iCAAiC,EAAE,MAAM,CAAC;IAC1C,2BAA2B,EAAE,MAAM,CAAC;IACpC,uBAAuB,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAAC;IAChE,KAAK,EAAE,uBAAuB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,UAAU,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACrC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACnE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,CACF,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,EACxC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpF,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,uBAAuB,EAAE,GAAG,MAAM,CAKjF;AAED,wBAAgB,WAAW,CACzB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,GACZ,aAAa,CASf;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAOhF;AAwDD,uGAAuG;AACvG,wBAAsB,0BAA0B,CAC9C,SAAS,EAAE,4BAA4B,EACvC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,gBAAgB,EACxB,QAAQ,EAAE,qBAAqB,EAC/B,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,IAAI,CAAC,CA6Ef"}

package/dist/production-migrations/executor.js

@@ -0,0 +1,161 @@
+import { createHash, createHmac, timingSafeEqual } from "node:crypto";
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+import { isCommitSha, isSha256Digest } from "../commit-sha.js";
+export const PRODUCTION_PROJECT_REF = "ctknjrtevjrzwpuojghx";
+export function productionLedgerSnapshot(items) {
+    const value = items
+        .map((item) => `${item.ordinal}:${item.seq}:${item.slug}:${item.sha}:${item.staging_status}`)
+        .join("|");
+    return createHash("sha256").update(value).digest("hex");
+}
+export function signReceipt(promotionId, action, receiptId, key, keyId) {
+    if (key.length < 32 || !keyId)
+        throw new Error("production_receipt_signing_key_required");
+    const digest = createHash("sha256").update(`${promotionId}:${action}:${receiptId}`).digest("hex");
+    return {
+        receiptId,
+        digest,
+        signature: createHmac("sha256", key).update(digest).digest("hex"),
+        keyId,
+    };
+}
+export function verifySignedReceipt(receipt, key) {
+    const actual = Buffer.from(receipt.signature, "hex");
+    const expected = Buffer.from(createHmac("sha256", key).update(receipt.digest).digest("hex"), "hex");
+    return actual.length === expected.length && timingSafeEqual(actual, expected);
+}
+function assertPromotion(promotion) {
+    if (promotion.production_project_ref !== PRODUCTION_PROJECT_REF)
+        throw new Error("production_project_pin_invalid");
+    if (promotion.analyzer_classification !== "safe")
+        throw new Error("production_analyzer_not_safe");
+    if (!isCommitSha(promotion.commit_sha))
+        throw new Error("production_commit_invalid");
+    if (!isSha256Digest(promotion.plan_hash))
+        throw new Error("production_plan_hash_invalid");
+    if (promotion.items.length === 0)
+        throw new Error("production_plan_empty");
+    if (productionLedgerSnapshot(promotion.items) !== promotion.staging_ledger_snapshot_sha)
+        throw new Error("production_staging_snapshot_mismatch");
+    let previous = null;
+    for (const [index, item] of promotion.items.entries()) {
+        if (item.ordinal !== index ||
+            item.path !== `supabase/migrations/${item.seq}_${item.slug}.sql` ||
+            !/^[0-9]{4}$/.test(item.seq) ||
+            !isSha256Digest(item.sha))
+            throw new Error("production_plan_item_invalid");
+        if (previous !== null && Number(item.seq) !== previous + 1)
+            throw new Error("production_plan_not_contiguous");
+        previous = Number(item.seq);
+    }
+}
+function insideRepo(repoRoot, migrationPath) {
+    const root = path.resolve(repoRoot);
+    const resolved = path.resolve(root, migrationPath);
+    if (!resolved.startsWith(`${root}${path.sep}`))
+        throw new Error("production_migration_path_escape");
+    return resolved;
+}
+function failureCode(error) {
+    const raw = error instanceof Error ? error.message : "production_migration_failed";
+    return raw
+        .replace(/postgres(?:ql)?:\/\/[^\s]+/gi, "[REDACTED_DB_URL]")
+        .replace(/(password|token|secret)=?[^\s]*/gi, "$1=[REDACTED]")
+        .replace(/[^a-zA-Z0-9_.:[\] -]/g, "_")
+        .slice(0, 200);
+}
+async function signed(promotion, action, result, receipts, options) {
+    if (!/^[0-9a-f-]{36}$/i.test(result.receipt_id))
+        throw new Error("production_receipt_invalid");
+    await receipts.signed(signReceipt(promotion.id, action, result.receipt_id, options.receiptKey, options.receiptKeyId));
+}
+/** Exact-file, fail-closed production executor. Applied ledger rows make crash recovery idempotent. */
+export async function executeProductionPromotion(promotion, repoRoot, target, receipts, options) {
+    const lockKey = `acc:production-migrations:${PRODUCTION_PROJECT_REF}`;
+    const timeoutMs = Math.max(5_000, Math.min(options.timeoutMs ?? 300_000, 900_000));
+    let locked = false;
+    try {
+        assertPromotion(promotion);
+        if ((await target.projectRef()) !== PRODUCTION_PROJECT_REF)
+            throw new Error("production_project_pin_mismatch");
+        if (!(await target.tryAdvisoryLock(lockKey)))
+            throw new Error("production_migration_lock_busy");
+        locked = true;
+        const head = await target.ledgerHead();
+        const acceptable = new Set([
+            String(Number(promotion.items[0].seq) - 1).padStart(4, "0"),
+            ...promotion.items.map((item) => item.seq),
+        ]);
+        if (!head || !acceptable.has(head))
+            throw new Error("production_ledger_head_mismatch");
+        for (const item of promotion.items) {
+            if (await options.cancelled?.())
+                throw new Error("production_migration_cancelled");
+            if (item.status === "applied" || item.status === "skipped")
+                continue;
+            const existing = await target.ledger(item.seq);
+            if (existing) {
+                if (existing.slug !== item.slug || existing.sha !== item.sha)
+                    throw new Error(`production_ledger_drift_${item.seq}`);
+                const result = await receipts.item(item.ordinal, "skipped");
+                await signed(promotion, `item:${item.ordinal}:skipped`, result, receipts, options);
+                continue;
+            }
+            const file = insideRepo(repoRoot, item.path);
+            const sql = await readFile(file);
+            if (createHash("sha256").update(sql).digest("hex") !== item.sha)
+                throw new Error(`production_file_hash_mismatch_${item.seq}`);
+            const controller = new AbortController();
+            let cancelled = false;
+            const timer = setTimeout(() => controller.abort(), timeoutMs);
+            const cancelPoll = options.cancelled
+                ? setInterval(() => {
+                    void options.cancelled?.().then((value) => {
+                        if (value) {
+                            cancelled = true;
+                            controller.abort();
+                        }
+                    });
+                }, 250)
+                : null;
+            cancelPoll?.unref?.();
+            try {
+                await target.applyFile(file, controller.signal);
+                const recorded = await target.ledger(item.seq);
+                if (!recorded || recorded.slug !== item.slug || recorded.sha !== item.sha)
+                    throw new Error(`production_ledger_receipt_missing_${item.seq}`);
+                const result = await receipts.item(item.ordinal, "applied");
+                await signed(promotion, `item:${item.ordinal}:applied`, result, receipts, options);
+            }
+            catch (error) {
+                const code = cancelled
+                    ? "production_migration_cancelled"
+                    : controller.signal.aborted
+                        ? "production_migration_timeout"
+                        : failureCode(error);
+                const result = await receipts.item(item.ordinal, "failed", code);
+                await signed(promotion, `item:${item.ordinal}:failed`, result, receipts, options);
+                throw new Error(code);
+            }
+            finally {
+                clearTimeout(timer);
+                if (cancelPoll)
+                    clearInterval(cancelPoll);
+            }
+        }
+        const result = await receipts.complete(true);
+        await signed(promotion, "complete:succeeded", result, receipts, options);
+    }
+    catch (error) {
+        const result = await receipts.complete(false, failureCode(error)).catch(() => null);
+        if (result)
+            await signed(promotion, "complete:failed", result, receipts, options).catch(() => undefined);
+        throw error;
+    }
+    finally {
+        if (locked)
+            await target.unlockAdvisory(lockKey).catch(() => undefined);
+    }
+}
+//# sourceMappingURL=executor.js.map

package/dist/production-migrations/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/production-migrations/executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAE/D,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAyD7D,MAAM,UAAU,wBAAwB,CAAC,KAAgC;IACvE,MAAM,KAAK,GAAG,KAAK;SAChB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;SAC5F,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,WAAmB,EACnB,MAAc,EACd,SAAiB,EACjB,GAAW,EACX,KAAa;IAEb,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,WAAW,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClG,OAAO;QACL,SAAS;QACT,MAAM;QACN,SAAS,EAAE,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QACjE,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAsB,EAAE,GAAW;IACrE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAC1B,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAC9D,KAAK,CACN,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,eAAe,CAAC,SAAuC;IAC9D,IAAI,SAAS,CAAC,sBAAsB,KAAK,sBAAsB;QAC7D,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,IAAI,SAAS,CAAC,uBAAuB,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACrF,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC1F,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3E,IAAI,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,2BAA2B;QACrF,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACtD,IACE,IAAI,CAAC,OAAO,KAAK,KAAK;YACtB,IAAI,CAAC,IAAI,KAAK,uBAAuB,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,MAAM;YAChE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YAC5B,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;YAEzB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ,GAAG,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB,EAAE,aAAqB;IACzD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC;IACnF,OAAO,GAAG;SACP,OAAO,CAAC,8BAA8B,EAAE,mBAAmB,CAAC;SAC5D,OAAO,CAAC,mCAAmC,EAAE,eAAe,CAAC;SAC7D,OAAO,CAAC,uBAAuB,EAAE,GAAG,CAAC;SACrC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,SAAuC,EACvC,MAAc,EACd,MAA8B,EAC9B,QAA+B,EAC/B,OAAmC;IAEnC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC/F,MAAM,QAAQ,CAAC,MAAM,CACnB,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAC/F,CAAC;AACJ,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,SAAuC,EACvC,QAAgB,EAChB,MAAwB,EACxB,QAA+B,EAC/B,OAAmC;IAEnC,MAAM,OAAO,GAAG,6BAA6B,sBAAsB,EAAE,CAAC;IACtE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACnF,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC;QACH,eAAe,CAAC,SAAS,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,sBAAsB;YACxD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAChG,MAAM,GAAG,IAAI,CAAC;QACd,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;YACzB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;YAC3D,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;SAC3C,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAEvF,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACnC,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACnF,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAS;YACrE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;oBAC1D,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACzD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBAC5D,MAAM,MAAM,CAAC,SAAS,EAAE,QAAQ,IAAI,CAAC,OAAO,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACnF,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG;gBAC7D,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;YAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS;gBAClC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE;oBACf,KAAK,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;wBACxC,IAAI,KAAK,EAAE,CAAC;4BACV,SAAS,GAAG,IAAI,CAAC;4BACjB,UAAU,CAAC,KAAK,EAAE,CAAC;wBACrB,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC,EAAE,GAAG,CAAC;gBACT,CAAC,CAAC,IAAI,CAAC;YACT,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;gBAChD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC/C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;oBACvE,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACnE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBAC5D,MAAM,MAAM,CAAC,SAAS,EAAE,QAAQ,IAAI,CAAC,OAAO,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YACrF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,GAAG,SAAS;oBACpB,CAAC,CAAC,gCAAgC;oBAClC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;wBACzB,CAAC,CAAC,8BAA8B;wBAChC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBACzB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;gBACjE,MAAM,MAAM,CAAC,SAAS,EAAE,QAAQ,IAAI,CAAC,OAAO,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAClF,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;YACxB,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,UAAU;oBAAE,aAAa,CAAC,UAAU,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,MAAM,CAAC,SAAS,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACpF,IAAI,MAAM;YACR,MAAM,MAAM,CAAC,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/F,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,MAAM;YAAE,MAAM,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC"}

package/dist/production-migrations/pg-target.d.ts

@@ -0,0 +1,22 @@
+import { type ProductionTarget } from "./executor.js";
+export declare function productionCredentialEnvName(profile: string): string;
+export declare function projectRefFromProductionUrl(value: string): string;
+export declare class PgProductionTarget implements ProductionTarget {
+    private readonly env;
+    private readonly client;
+    private readonly connectionString;
+    private readonly pinnedRef;
+    constructor(profile: string, env?: NodeJS.ProcessEnv);
+    connect(): Promise<void>;
+    close(): Promise<void>;
+    projectRef(): Promise<string>;
+    tryAdvisoryLock(key: string): Promise<boolean>;
+    unlockAdvisory(key: string): Promise<void>;
+    ledger(seq: string): Promise<{
+        slug: string;
+        sha: string;
+    } | null>;
+    ledgerHead(): Promise<string | null>;
+    applyFile(file: string, signal: AbortSignal): Promise<void>;
+}
+//# sourceMappingURL=pg-target.d.ts.map

package/dist/production-migrations/pg-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-target.d.ts","sourceRoot":"","sources":["../../src/production-migrations/pg-target.ts"],"names":[],"mappings":"AAGA,OAAO,EAA0B,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAI9E,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAInE;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUjE;AAED,qBAAa,kBAAmB,YAAW,gBAAgB;IAOvD,OAAO,CAAC,QAAQ,CAAC,GAAG;IANtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAGjC,OAAO,EAAE,MAAM,EACE,GAAG,GAAE,MAAM,CAAC,UAAwB;IAcjD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAGxB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAGtB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAG7B,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAO9C,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAG1C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAOlE,UAAU,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAMpC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAmBlE"}

package/dist/production-migrations/pg-target.js

@@ -0,0 +1,87 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { Client } from "pg";
+import { PRODUCTION_PROJECT_REF } from "./executor.js";
+const execFileAsync = promisify(execFile);
+export function productionCredentialEnvName(profile) {
+    if (!/^[A-Za-z0-9_.-]{1,80}$/.test(profile))
+        throw new Error("production_credential_profile_invalid");
+    return `ACC_DB_PROFILE_${profile.toUpperCase().replace(/[^A-Z0-9]/g, "_")}_URL`;
+}
+export function projectRefFromProductionUrl(value) {
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        throw new Error("production_credential_url_invalid");
+    }
+    const ref = `${parsed.hostname}${parsed.pathname}`.match(/\b([a-z0-9]{20})\b/)?.[1];
+    if (!ref)
+        throw new Error("production_credential_project_ref_missing");
+    return ref;
+}
+export class PgProductionTarget {
+    env;
+    client;
+    connectionString;
+    pinnedRef;
+    constructor(profile, env = process.env) {
+        this.env = env;
+        const value = env[productionCredentialEnvName(profile)];
+        if (!value)
+            throw new Error("production_credential_profile_not_configured");
+        this.pinnedRef = projectRefFromProductionUrl(value);
+        if (this.pinnedRef !== PRODUCTION_PROJECT_REF)
+            throw new Error("non_production_target_forbidden");
+        this.connectionString = value;
+        this.client = new Client({
+            connectionString: value,
+            application_name: "acc-production-migration-executor",
+        });
+    }
+    async connect() {
+        await this.client.connect();
+    }
+    async close() {
+        await this.client.end();
+    }
+    async projectRef() {
+        return this.pinnedRef;
+    }
+    async tryAdvisoryLock(key) {
+        const result = await this.client.query("select pg_try_advisory_lock(hashtextextended($1, 0)) as locked", [key]);
+        return result.rows[0]?.locked === true;
+    }
+    async unlockAdvisory(key) {
+        await this.client.query("select pg_advisory_unlock(hashtextextended($1, 0))", [key]);
+    }
+    async ledger(seq) {
+        const result = await this.client.query("select slug, sha from acc.applied_migrations where seq = $1", [seq]);
+        return result.rows[0] ?? null;
+    }
+    async ledgerHead() {
+        const result = await this.client.query("select seq from acc.applied_migrations order by seq::integer desc limit 1");
+        return result.rows[0]?.seq ?? null;
+    }
+    async applyFile(file, signal) {
+        // Do not leak the runner/token/signing environment into psql. The opaque
+        // profile resolves locally and only the minimum process environment crosses
+        // the child boundary; the connection string is never placed in argv.
+        const childEnv = {
+            PATH: this.env.PATH,
+            HOME: this.env.HOME,
+            LANG: this.env.LANG,
+            LC_ALL: this.env.LC_ALL,
+            SSL_CERT_FILE: this.env.SSL_CERT_FILE,
+            PGCONNECT_TIMEOUT: this.env.PGCONNECT_TIMEOUT ?? "10",
+            PGDATABASE: this.connectionString,
+        };
+        await execFileAsync("psql", ["-X", "--set", "ON_ERROR_STOP=1", "--file", file], {
+            env: childEnv,
+            signal,
+            maxBuffer: 256 * 1024,
+        });
+    }
+}
+//# sourceMappingURL=pg-target.js.map

package/dist/production-migrations/pg-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-target.js","sourceRoot":"","sources":["../../src/production-migrations/pg-target.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAyB,MAAM,eAAe,CAAC;AAE9E,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,UAAU,2BAA2B,CAAC,OAAe;IACzD,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,OAAO,kBAAkB,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAa;IACvD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACvE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,kBAAkB;IAOV;IANF,MAAM,CAAS;IACf,gBAAgB,CAAS;IACzB,SAAS,CAAS;IAEnC,YACE,OAAe,EACE,MAAyB,OAAO,CAAC,GAAG;QAApC,QAAG,GAAH,GAAG,CAAiC;QAErD,MAAM,KAAK,GAAG,GAAG,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC5E,IAAI,CAAC,SAAS,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,SAAS,KAAK,sBAAsB;YAC3C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC;YACvB,gBAAgB,EAAE,KAAK;YACvB,gBAAgB,EAAE,mCAAmC;SACtD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IAC1B,CAAC;IACD,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,GAAW;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CACpC,gEAAgE,EAChE,CAAC,GAAG,CAAC,CACN,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,GAAW;QAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CACpC,6DAA6D,EAC7D,CAAC,GAAG,CAAC,CACN,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAChC,CAAC;IACD,KAAK,CAAC,UAAU;QACd,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CACpC,2EAA2E,CAC5E,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC;IACrC,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,MAAmB;QAC/C,yEAAyE;QACzE,4EAA4E;QAC5E,qEAAqE;QACrE,MAAM,QAAQ,GAAsB;YAClC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;YACnB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;YACnB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;YACnB,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;YACvB,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa;YACrC,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI;YACrD,UAAU,EAAE,IAAI,CAAC,gBAAgB;SAClC,CAAC;QACF,MAAM,aAAa,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE;YAC9E,GAAG,EAAE,QAAQ;YACb,MAAM;YACN,SAAS,EAAE,GAAG,GAAG,IAAI;SACtB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/production-migrations/profiles.d.ts

@@ -0,0 +1,5 @@
+export declare function configuredProductionMigrationProfiles(env?: NodeJS.ProcessEnv): string[];
+export declare function configuredProductionPromotionIds(env?: NodeJS.ProcessEnv): string[];
+export declare function productionMigrationServiceEnabled(env?: NodeJS.ProcessEnv): boolean;
+export declare function productionMigrationCaps(env?: NodeJS.ProcessEnv): Record<string, unknown>;
+//# sourceMappingURL=profiles.d.ts.map