@tokenfactory/acc-runner 0.44.8 → 0.44.9

package/dist/staging-migrations/command.js

@@ -0,0 +1,58 @@
+import { loadConfig } from "../config.js";
+import { getTokenProvider } from "../token-provider.js";
+import { createRunnerClient } from "../supabase.js";
+import { resolveMachineRepoPath } from "../machine-console/index.js";
+import { executeApprovedStagingPlan } from "./executor.js";
+import { PgStagingTarget } from "./pg-target.js";
+function rpcError(error, fallback) {
+    throw new Error(error?.message ?? fallback);
+}
+export async function applyApprovedStagingMigrationCommand(planId) {
+    const cfg = loadConfig();
+    const session = await getTokenProvider().load();
+    if (!session?.runner_id)
+        throw new Error("runner login required");
+    const sb = createRunnerClient(cfg, session.access_token, session.realtime_config);
+    const claimed = await sb.rpc("claim_staging_migration_plan", { p_plan_id: planId });
+    if (claimed.error)
+        rpcError(claimed.error, "could not claim staging migration plan");
+    const payload = claimed.data;
+    if (!payload.plan || !payload.credential_profile_ref || !Array.isArray(payload.items))
+        throw new Error("invalid migration claim receipt");
+    const plan = {
+        ...payload.plan,
+        credential_profile_ref: payload.credential_profile_ref,
+        items: payload.items,
+    };
+    const repoRoot = resolveMachineRepoPath(cfg, plan.repo);
+    const target = new PgStagingTarget(plan.credential_profile_ref);
+    const receipts = {
+        item: async (ordinal, status, errorCode) => {
+            const result = await sb.rpc("record_staging_migration_item", {
+                p_plan_id: plan.id,
+                p_ordinal: ordinal,
+                p_status: status,
+                p_error_code: errorCode ?? null,
+            });
+            if (result.error)
+                rpcError(result.error, "could not record migration item receipt");
+        },
+        complete: async (succeeded, failureCode) => {
+            const result = await sb.rpc("complete_staging_migration_plan", {
+                p_plan_id: plan.id,
+                p_succeeded: succeeded,
+                p_failure_code: failureCode ?? null,
+            });
+            if (result.error)
+                rpcError(result.error, "could not record migration completion receipt");
+        },
+    };
+    await target.connect();
+    try {
+        await executeApprovedStagingPlan(plan, repoRoot, target, receipts);
+    }
+    finally {
+        await target.close();
+    }
+}
+//# sourceMappingURL=command.js.map

package/dist/staging-migrations/command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../../src/staging-migrations/command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAA8B,MAAM,eAAe,CAAC;AACvF,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,SAAS,QAAQ,CAAC,KAAkC,EAAE,QAAgB;IACpE,MAAM,IAAI,KAAK,CAAC,KAAK,EAAE,OAAO,IAAI,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CAAC,MAAc;IACvE,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,8BAA8B,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACpF,IAAI,OAAO,CAAC,KAAK;QAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,wCAAwC,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,OAAO,CAAC,IAIvB,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,sBAAsB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG;QACX,GAAG,OAAO,CAAC,IAAI;QACf,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;QACtD,KAAK,EAAE,OAAO,CAAC,KAAK;KACe,CAAC;IACtC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG;QACf,IAAI,EAAE,KAAK,EAAE,OAAe,EAAE,MAAwC,EAAE,SAAkB,EAAE,EAAE;YAC5F,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,+BAA+B,EAAE;gBAC3D,SAAS,EAAE,IAAI,CAAC,EAAE;gBAClB,SAAS,EAAE,OAAO;gBAClB,QAAQ,EAAE,MAAM;gBAChB,YAAY,EAAE,SAAS,IAAI,IAAI;aAChC,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,KAAK;gBAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,yCAAyC,CAAC,CAAC;QACtF,CAAC;QACD,QAAQ,EAAE,KAAK,EAAE,SAAkB,EAAE,WAAoB,EAAE,EAAE;YAC3D,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,iCAAiC,EAAE;gBAC7D,SAAS,EAAE,IAAI,CAAC,EAAE;gBAClB,WAAW,EAAE,SAAS;gBACtB,cAAc,EAAE,WAAW,IAAI,IAAI;aACpC,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,KAAK;gBAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,+CAA+C,CAAC,CAAC;QAC5F,CAAC;KACF,CAAC;IACF,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,0BAA0B,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACrE,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/staging-migrations/executor.d.ts

@@ -0,0 +1,49 @@
+export interface ApprovedMigrationItem {
+    ordinal: number;
+    seq: string;
+    slug: string;
+    path: string;
+    sha: string;
+    status: "pending" | "skipped" | "applied" | "failed";
+}
+export interface ApprovedMigrationPlan {
+    id: string;
+    repo: string;
+    commit_sha: string;
+    staging_project_ref: string;
+    credential_profile_ref: string;
+    ledger_head_seq: string | null;
+    plan_hash: string;
+    items: ApprovedMigrationItem[];
+}
+export interface StagingTarget {
+    projectRef(): Promise<string>;
+    tryAdvisoryLock(key: string): Promise<boolean>;
+    unlockAdvisory(key: string): Promise<void>;
+    ledgerHead(): Promise<string | null>;
+    ledger(seq: string): Promise<{
+        slug: string;
+        sha: string;
+    } | null>;
+    apply(sql: string): Promise<void>;
+}
+export interface MigrationExecutionHooks {
+    /** Observed between files; a migration already handed to Postgres is never interrupted. */
+    cancelled?: () => Promise<boolean>;
+    heartbeat?: (event: "lock_acquired" | "item_started" | "item_finished") => Promise<void>;
+}
+export declare class StagingMigrationCancelledError extends Error {
+    constructor();
+}
+export interface MigrationReceiptSink {
+    item(ordinal: number, status: "skipped" | "applied" | "failed", errorCode?: string): Promise<void>;
+    complete(succeeded: boolean, failureCode?: string): Promise<void>;
+}
+export declare function canonicalPlanHash(plan: Pick<ApprovedMigrationPlan, "repo" | "commit_sha" | "staging_project_ref" | "ledger_head_seq" | "items">): string;
+/**
+ * Applies only the exact files named by an approved plan. Each migration file
+ * owns its transaction; execution stops at the first failure and can be safely
+ * resumed because already-ledgered items are hash checked then skipped.
+ */
+export declare function executeApprovedStagingPlan(plan: ApprovedMigrationPlan, repoRoot: string, target: StagingTarget, receipts: MigrationReceiptSink, hooks?: MigrationExecutionHooks): Promise<void>;
+//# sourceMappingURL=executor.d.ts.map

package/dist/staging-migrations/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../src/staging-migrations/executor.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;CACtD;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,qBAAqB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,UAAU,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACrC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACnE,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,2FAA2F;IAC3F,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,GAAG,cAAc,GAAG,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1F;AAED,qBAAa,8BAA+B,SAAQ,KAAK;;CAIxD;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,CACF,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,EACxC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnE;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,IAAI,CACR,qBAAqB,EACrB,MAAM,GAAG,YAAY,GAAG,qBAAqB,GAAG,iBAAiB,GAAG,OAAO,CAC5E,GACA,MAAM,CAeR;AA4BD;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,qBAAqB,EAC3B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,oBAAoB,EAC9B,KAAK,GAAE,uBAA4B,GAClC,OAAO,CAAC,IAAI,CAAC,CA2Df"}

package/dist/staging-migrations/executor.js

@@ -0,0 +1,125 @@
+import { createHash } from "node:crypto";
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+import { isSha256Digest } from "../commit-sha.js";
+export class StagingMigrationCancelledError extends Error {
+    constructor() {
+        super("staging_migration_cancelled");
+    }
+}
+export function canonicalPlanHash(plan) {
+    const value = JSON.stringify({
+        repo: plan.repo.toLowerCase(),
+        commitSha: plan.commit_sha.toLowerCase(),
+        stagingProjectRef: plan.staging_project_ref,
+        ledgerHeadSeq: plan.ledger_head_seq,
+        items: plan.items.map(({ ordinal, seq, slug, path: migrationPath, sha }) => ({
+            ordinal,
+            seq,
+            slug,
+            path: migrationPath,
+            sha,
+        })),
+    });
+    return createHash("sha256").update(value).digest("hex");
+}
+function assertPlan(plan) {
+    if (plan.staging_project_ref === "ctknjrtevjrzwpuojghx")
+        throw new Error("production_target_forbidden");
+    if (!/^[a-z0-9]{20}$/.test(plan.staging_project_ref))
+        throw new Error("staging_project_pin_invalid");
+    if (plan.items.length === 0 || canonicalPlanHash(plan) !== plan.plan_hash)
+        throw new Error("plan_hash_mismatch");
+    let previous = plan.ledger_head_seq ? Number(plan.ledger_head_seq) : null;
+    for (const [index, item] of plan.items.entries()) {
+        const expectedPath = `supabase/migrations/${item.seq}_${item.slug}.sql`;
+        if (item.ordinal !== index || item.path !== expectedPath || !isSha256Digest(item.sha)) {
+            throw new Error("plan_item_invalid");
+        }
+        if (previous !== null && Number(item.seq) !== previous + 1)
+            throw new Error("plan_not_contiguous");
+        previous = Number(item.seq);
+    }
+}
+function fileInsideRepo(repoRoot, migrationPath) {
+    const root = path.resolve(repoRoot);
+    const resolved = path.resolve(root, migrationPath);
+    if (!resolved.startsWith(`${root}${path.sep}`))
+        throw new Error("migration_path_escape");
+    return resolved;
+}
+/**
+ * Applies only the exact files named by an approved plan. Each migration file
+ * owns its transaction; execution stops at the first failure and can be safely
+ * resumed because already-ledgered items are hash checked then skipped.
+ */
+export async function executeApprovedStagingPlan(plan, repoRoot, target, receipts, hooks = {}) {
+    const lockKey = `acc:staging-migrations:${plan.staging_project_ref}`;
+    let locked = false;
+    try {
+        assertPlan(plan);
+        if ((await target.projectRef()) !== plan.staging_project_ref)
+            throw new Error("staging_project_pin_mismatch");
+        if (!(await target.tryAdvisoryLock(lockKey)))
+            throw new Error("staging_migration_lock_busy");
+        locked = true;
+        const head = await target.ledgerHead();
+        const resumableHeads = new Set([plan.ledger_head_seq, ...plan.items.map((item) => item.seq)]);
+        if (!resumableHeads.has(head))
+            throw new Error("ledger_head_mismatch");
+        await hooks.heartbeat?.("lock_acquired");
+    }
+    catch (error) {
+        if (locked)
+            await target.unlockAdvisory(lockKey).catch(() => undefined);
+        await receipts.complete(false, error.message);
+        throw error;
+    }
+    try {
+        for (const item of plan.items) {
+            if (await hooks.cancelled?.())
+                throw new StagingMigrationCancelledError();
+            if (item.status === "applied" || item.status === "skipped")
+                continue;
+            await hooks.heartbeat?.("item_started");
+            const existing = await target.ledger(item.seq);
+            if (existing) {
+                if (existing.slug !== item.slug || existing.sha !== item.sha)
+                    throw new Error(`ledger_drift_${item.seq}`);
+                await receipts.item(item.ordinal, "skipped");
+                await hooks.heartbeat?.("item_finished");
+                continue;
+            }
+            const sql = await readFile(fileInsideRepo(repoRoot, item.path), "utf8");
+            const sha = createHash("sha256").update(sql).digest("hex");
+            if (sha !== item.sha)
+                throw new Error(`file_hash_mismatch_${item.seq}`);
+            try {
+                await target.apply(sql);
+                const recorded = await target.ledger(item.seq);
+                if (!recorded || recorded.slug !== item.slug || recorded.sha !== item.sha) {
+                    throw new Error(`ledger_receipt_missing_${item.seq}`);
+                }
+                await receipts.item(item.ordinal, "applied");
+                await hooks.heartbeat?.("item_finished");
+            }
+            catch (error) {
+                await receipts.item(item.ordinal, "failed", error.message);
+                throw error;
+            }
+        }
+        await receipts.complete(true);
+    }
+    catch (error) {
+        // A control-plane cancellation owns the terminal state. Its completion RPC
+        // intentionally rejects, so do not overwrite it with a second transition.
+        if (!(error instanceof StagingMigrationCancelledError)) {
+            await receipts.complete(false, error.message);
+        }
+        throw error;
+    }
+    finally {
+        await target.unlockAdvisory(lockKey);
+    }
+}
+//# sourceMappingURL=executor.js.map

package/dist/staging-migrations/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/staging-migrations/executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAqClD,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IACvD;QACE,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACvC,CAAC;CACF;AAWD,MAAM,UAAU,iBAAiB,CAC/B,IAGC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAC7B,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;QACxC,iBAAiB,EAAE,IAAI,CAAC,mBAAmB;QAC3C,aAAa,EAAE,IAAI,CAAC,eAAe;QACnC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;YAC3E,OAAO;YACP,GAAG;YACH,IAAI;YACJ,IAAI,EAAE,aAAa;YACnB,GAAG;SACJ,CAAC,CAAC;KACJ,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,UAAU,CAAC,IAA2B;IAC7C,IAAI,IAAI,CAAC,mBAAmB,KAAK,sBAAsB;QACrD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS;QACvE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,IAAI,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,MAAM,YAAY,GAAG,uBAAuB,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,MAAM,CAAC;QACxE,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ,GAAG,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,aAAqB;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACzF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,IAA2B,EAC3B,QAAgB,EAChB,MAAqB,EACrB,QAA8B,EAC9B,QAAiC,EAAE;IAEnC,MAAM,OAAO,GAAG,0BAA0B,IAAI,CAAC,mBAAmB,EAAE,CAAC;IACrE,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,IAAI,CAAC,mBAAmB;YAC1D,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC7F,MAAM,GAAG,IAAI,CAAC;QACd,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9F,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACvE,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,eAAe,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM;YAAE,MAAM,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxE,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE;gBAAE,MAAM,IAAI,8BAA8B,EAAE,CAAC;YAC1E,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAS;YACrE,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,cAAc,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;oBAC1D,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC9C,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBAC7C,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,eAAe,CAAC,CAAC;gBACzC,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;YACxE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3D,IAAI,GAAG,KAAK,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACxB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC/C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;oBAC1E,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxD,CAAC;gBACD,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBAC7C,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,eAAe,CAAC,CAAC;YAC3C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;gBACtE,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2EAA2E;QAC3E,0EAA0E;QAC1E,IAAI,CAAC,CAAC,KAAK,YAAY,8BAA8B,CAAC,EAAE,CAAC;YACvD,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;AACH,CAAC"}

package/dist/staging-migrations/pg-target.d.ts

@@ -0,0 +1,20 @@
+import type { StagingTarget } from "./executor.js";
+export declare function credentialEnvName(profileRef: string): string;
+export declare function projectRefFromUrl(value: string): string;
+export declare class PgStagingTarget implements StagingTarget {
+    private readonly client;
+    private readonly pinnedRef;
+    constructor(profileRef: string, env?: NodeJS.ProcessEnv);
+    connect(): Promise<void>;
+    close(): Promise<void>;
+    projectRef(): Promise<string>;
+    tryAdvisoryLock(key: string): Promise<boolean>;
+    unlockAdvisory(key: string): Promise<void>;
+    ledger(seq: string): Promise<{
+        slug: string;
+        sha: string;
+    } | null>;
+    ledgerHead(): Promise<string | null>;
+    apply(sql: string): Promise<void>;
+}
+//# sourceMappingURL=pg-target.d.ts.map

package/dist/staging-migrations/pg-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-target.d.ts","sourceRoot":"","sources":["../../src/staging-migrations/pg-target.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAG5D;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUvD;AAED,qBAAa,eAAgB,YAAW,aAAa;IACnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,UAAU,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB;IAW9D,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAGxB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAGtB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAG7B,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAO9C,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAG1C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAOlE,UAAU,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAMpC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGxC"}

package/dist/staging-migrations/pg-target.js

@@ -0,0 +1,63 @@
+import { Client } from "pg";
+export function credentialEnvName(profileRef) {
+    if (!/^[A-Za-z0-9_.-]{1,80}$/.test(profileRef))
+        throw new Error("credential_profile_ref_invalid");
+    return `ACC_DB_PROFILE_${profileRef.toUpperCase().replace(/[^A-Z0-9]/g, "_")}_URL`;
+}
+export function projectRefFromUrl(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new Error("credential_profile_url_invalid");
+    }
+    const match = `${url.hostname}${url.pathname}`.match(/\b([a-z0-9]{20})\b/);
+    if (!match)
+        throw new Error("credential_profile_project_ref_missing");
+    return match[1];
+}
+export class PgStagingTarget {
+    client;
+    pinnedRef;
+    constructor(profileRef, env = process.env) {
+        const value = env[credentialEnvName(profileRef)];
+        if (!value)
+            throw new Error("credential_profile_not_configured");
+        this.pinnedRef = projectRefFromUrl(value);
+        if (this.pinnedRef === "ctknjrtevjrzwpuojghx")
+            throw new Error("production_target_forbidden");
+        this.client = new Client({
+            connectionString: value,
+            application_name: "acc-staging-migration-executor",
+        });
+    }
+    async connect() {
+        await this.client.connect();
+    }
+    async close() {
+        await this.client.end();
+    }
+    async projectRef() {
+        return this.pinnedRef;
+    }
+    async tryAdvisoryLock(key) {
+        const result = await this.client.query("select pg_try_advisory_lock(hashtextextended($1, 0)) as locked", [key]);
+        return result.rows[0]?.locked === true;
+    }
+    async unlockAdvisory(key) {
+        await this.client.query("select pg_advisory_unlock(hashtextextended($1, 0))", [key]);
+    }
+    async ledger(seq) {
+        const result = await this.client.query("select slug, sha from acc.applied_migrations where seq = $1", [seq]);
+        return result.rows[0] ?? null;
+    }
+    async ledgerHead() {
+        const result = await this.client.query("select seq from acc.applied_migrations order by seq::integer desc limit 1");
+        return result.rows[0]?.seq ?? null;
+    }
+    async apply(sql) {
+        await this.client.query(sql);
+    }
+}
+//# sourceMappingURL=pg-target.js.map

package/dist/staging-migrations/pg-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-target.js","sourceRoot":"","sources":["../../src/staging-migrations/pg-target.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAG5B,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAClG,OAAO,kBAAkB,UAAU,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC3E,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,OAAO,eAAe;IACT,MAAM,CAAS;IACf,SAAS,CAAS;IAEnC,YAAY,UAAkB,EAAE,MAAyB,OAAO,CAAC,GAAG;QAClE,MAAM,KAAK,GAAG,GAAG,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,SAAS,KAAK,sBAAsB;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC9F,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC;YACvB,gBAAgB,EAAE,KAAK;YACvB,gBAAgB,EAAE,gCAAgC;SACnD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IAC1B,CAAC;IACD,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,GAAW;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CACpC,gEAAgE,EAChE,CAAC,GAAG,CAAC,CACN,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,GAAW;QAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CACpC,6DAA6D,EAC7D,CAAC,GAAG,CAAC,CACN,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAChC,CAAC;IACD,KAAK,CAAC,UAAU;QACd,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CACpC,2EAA2E,CAC5E,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC;IACrC,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/dist/staging-migrations/profiles.d.ts

@@ -0,0 +1,5 @@
+export declare function configuredStagingMigrationProfiles(env?: NodeJS.ProcessEnv): string[];
+export declare function stagingMigrationCaps(env?: NodeJS.ProcessEnv): Record<string, unknown>;
+/** Explicit opt-in: credentials alone never make a runner claim migrations. */
+export declare function stagingMigrationServiceEnabled(env?: NodeJS.ProcessEnv): boolean;
+//# sourceMappingURL=profiles.d.ts.map

package/dist/staging-migrations/profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/staging-migrations/profiles.ts"],"names":[],"mappings":"AASA,wBAAgB,kCAAkC,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,EAAE,CAUjG;AAED,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGlG;AAED,+EAA+E;AAC/E,wBAAgB,8BAA8B,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAE5F"}

package/dist/staging-migrations/profiles.js

@@ -0,0 +1,31 @@
+const PRODUCTION_REF = "ctknjrtevjrzwpuojghx";
+function projectRef(value) {
+    const url = new URL(value);
+    const match = `${url.hostname}${url.pathname}`.match(/\b([a-z0-9]{20})\b/);
+    if (!match)
+        throw new Error("credential_profile_project_ref_missing");
+    return match[1];
+}
+export function configuredStagingMigrationProfiles(env = process.env) {
+    const profiles = [];
+    for (const [name, value] of Object.entries(env)) {
+        const match = /^ACC_DB_PROFILE_([A-Z0-9_]+)_URL$/.exec(name);
+        if (!match || !value)
+            continue;
+        try {
+            if (projectRef(value) !== PRODUCTION_REF)
+                profiles.push(match[1].toLowerCase());
+        }
+        catch { /* malformed credentials are never advertised */ }
+    }
+    return profiles.sort();
+}
+export function stagingMigrationCaps(env = process.env) {
+    const profiles = configuredStagingMigrationProfiles(env);
+    return profiles.length === 0 ? {} : { staging_migrations: true, staging_migration_profiles: profiles };
+}
+/** Explicit opt-in: credentials alone never make a runner claim migrations. */
+export function stagingMigrationServiceEnabled(env = process.env) {
+    return env.ACC_STAGING_MIGRATION_SERVICE === "1" && configuredStagingMigrationProfiles(env).length > 0;
+}
+//# sourceMappingURL=profiles.js.map

package/dist/staging-migrations/profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../src/staging-migrations/profiles.ts"],"names":[],"mappings":"AAAA,MAAM,cAAc,GAAG,sBAAsB,CAAC;AAE9C,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC3E,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,MAAyB,OAAO,CAAC,GAAG;IACrF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK;YAAE,SAAS;QAC/B,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,cAAc;gBAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC,CAAC,gDAAgD,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACvE,MAAM,QAAQ,GAAG,kCAAkC,CAAC,GAAG,CAAC,CAAC;IACzD,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,0BAA0B,EAAE,QAAQ,EAAE,CAAC;AACzG,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,8BAA8B,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjF,OAAO,GAAG,CAAC,6BAA6B,KAAK,GAAG,IAAI,kCAAkC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACzG,CAAC"}

package/dist/staging-migrations/service.d.ts

@@ -0,0 +1,40 @@
+import type { RunnerConfig } from "../config.js";
+import type { RunnerSupabaseClient } from "../supabase.js";
+import { type StagingTarget } from "./executor.js";
+export { configuredStagingMigrationProfiles, stagingMigrationCaps, stagingMigrationServiceEnabled, } from "./profiles.js";
+export interface MigrationServiceLogger {
+    info(message: string): void;
+    error(message: string): void;
+}
+export interface StagingMigrationServiceOptions {
+    pollMs?: number;
+    batchLimit?: number;
+    env?: NodeJS.ProcessEnv;
+    logger?: MigrationServiceLogger;
+    resolveRepo?: (repo: string) => string;
+    targetFactory?: (profile: string) => StagingTarget & {
+        connect(): Promise<void>;
+        close(): Promise<void>;
+    };
+    verifyCommit?: (root: string, sha: string) => Promise<void>;
+}
+export declare function verifyExactCheckout(root: string, expected: string): Promise<void>;
+export declare class StagingMigrationService {
+    private readonly sb;
+    private readonly cfg;
+    private readonly runnerId;
+    private readonly options;
+    private timer;
+    private active;
+    private stopping;
+    private readonly pollMs;
+    private readonly batchLimit;
+    private readonly logger;
+    private readonly env;
+    constructor(sb: RunnerSupabaseClient, cfg: RunnerConfig, runnerId: string, options?: StagingMigrationServiceOptions);
+    start(): void;
+    stop(): Promise<void>;
+    pollOnce(): Promise<void>;
+    private claimAndRun;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/staging-migrations/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/staging-migrations/service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,kCAAkC,EAClC,oBAAoB,EACpB,8BAA8B,GAC/B,MAAM,eAAe,CAAC;AAIvB,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,8BAA8B;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACvC,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,aAAa,GAAG;QAAE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC;IAC1G,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D;AAWD,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIvF;AAED,qBAAa,uBAAuB;IAUhC,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAZ1B,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAoB;gBAGrB,EAAE,EAAE,oBAAoB,EACxB,GAAG,EAAE,YAAY,EACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,8BAAmC;IAQ/D,KAAK,IAAI,IAAI;IAQP,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAarB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;YAkBjB,WAAW;CAgE1B"}

package/dist/staging-migrations/service.js

@@ -0,0 +1,157 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { resolveMachineRepoPath } from "../machine-console/index.js";
+import { executeApprovedStagingPlan, } from "./executor.js";
+import { PgStagingTarget } from "./pg-target.js";
+import { isCommitSha } from "../commit-sha.js";
+export { configuredStagingMigrationProfiles, stagingMigrationCaps, stagingMigrationServiceEnabled, } from "./profiles.js";
+const execFileAsync = promisify(execFile);
+function safeCode(error) {
+    const raw = error instanceof Error ? error.message : "unknown_error";
+    return raw.replace(/postgres(?:ql)?:\/\/[^\s]+/gi, "[REDACTED_DB_URL]")
+        .replace(/(password|token|secret)=?[^\s]*/gi, "$1=[REDACTED]")
+        .replace(/[^a-zA-Z0-9_.:[\] -]/g, "_").slice(0, 240);
+}
+export async function verifyExactCheckout(root, expected) {
+    if (!isCommitSha(expected))
+        throw new Error("migration_commit_invalid");
+    const { stdout } = await execFileAsync("git", ["rev-parse", "HEAD"], { cwd: root });
+    if (stdout.trim().toLowerCase() !== expected.toLowerCase())
+        throw new Error("migration_commit_mismatch");
+}
+export class StagingMigrationService {
+    sb;
+    cfg;
+    runnerId;
+    options;
+    timer = null;
+    active = false;
+    stopping = false;
+    pollMs;
+    batchLimit;
+    logger;
+    env;
+    constructor(sb, cfg, runnerId, options = {}) {
+        this.sb = sb;
+        this.cfg = cfg;
+        this.runnerId = runnerId;
+        this.options = options;
+        this.pollMs = Math.max(2_000, Math.min(options.pollMs ?? 15_000, 300_000));
+        this.batchLimit = Math.max(1, Math.min(options.batchLimit ?? 3, 10));
+        this.env = options.env ?? process.env;
+        this.logger = options.logger ?? console;
+    }
+    start() {
+        if (this.timer)
+            return;
+        this.stopping = false;
+        void this.pollOnce();
+        this.timer = setInterval(() => void this.pollOnce(), this.pollMs);
+        this.timer.unref?.();
+    }
+    async stop() {
+        this.stopping = true;
+        if (this.timer)
+            clearInterval(this.timer);
+        this.timer = null;
+        const deadline = Date.now() + 30_000;
+        while (this.active && Date.now() < deadline) {
+            await new Promise((resolve) => setTimeout(resolve, 25));
+        }
+        if (this.active) {
+            this.logger.error("[acc-runner] staging migration shutdown_wait_exceeded; server recovery retains the claim");
+        }
+    }
+    async pollOnce() {
+        if (this.active || this.stopping)
+            return;
+        this.active = true;
+        try {
+            const query = await this.sb.from("staging_migration_plans").select("id")
+                .eq("status", "approved").order("created_at", { ascending: true }).limit(this.batchLimit);
+            if (query.error)
+                throw new Error(`migration_poll_failed:${query.error.message}`);
+            for (const row of (query.data ?? [])) {
+                if (this.stopping)
+                    break;
+                await this.claimAndRun(row.id);
+            }
+        }
+        catch (error) {
+            this.logger.error(`[acc-runner] staging migration service: ${safeCode(error)}`);
+        }
+        finally {
+            this.active = false;
+        }
+    }
+    async claimAndRun(planId) {
+        const claimed = await this.sb.rpc("claim_staging_migration_plan", { p_plan_id: planId });
+        if (claimed.error) {
+            // Another runner winning a claim is routine, not a service failure.
+            this.logger.info(`[acc-runner] staging migration claim skipped: ${safeCode(claimed.error)}`);
+            return;
+        }
+        const payload = claimed.data;
+        if (!payload.plan || !payload.credential_profile_ref || !Array.isArray(payload.items))
+            throw new Error("invalid_migration_claim_receipt");
+        const plan = { ...payload.plan, credential_profile_ref: payload.credential_profile_ref, items: payload.items };
+        const receipts = {
+            item: async (ordinal, status, errorCode) => {
+                const result = await this.sb.rpc("record_staging_migration_item", {
+                    p_plan_id: plan.id, p_ordinal: ordinal, p_status: status,
+                    p_error_code: errorCode ? safeCode(errorCode) : null,
+                });
+                if (result.error)
+                    throw new Error(`migration_item_receipt_failed:${result.error.message}`);
+            },
+            complete: async (succeeded, failureCode) => {
+                const result = await this.sb.rpc("complete_staging_migration_plan", {
+                    p_plan_id: plan.id, p_succeeded: succeeded,
+                    p_failure_code: failureCode ? safeCode(failureCode) : null,
+                });
+                if (result.error)
+                    throw new Error(`migration_completion_receipt_failed:${result.error.message}`);
+            },
+        };
+        const status = async () => {
+            const result = await this.sb.from("staging_migration_plans").select("status")
+                .eq("id", plan.id).eq("claimed_by_runner", this.runnerId).maybeSingle();
+            if (result.error)
+                throw new Error(`migration_status_failed:${result.error.message}`);
+            return result.data?.status ?? null;
+        };
+        let target = null;
+        let executorStarted = false;
+        try {
+            const repoRoot = this.options.resolveRepo?.(plan.repo) ?? resolveMachineRepoPath(this.cfg, plan.repo);
+            const verify = this.options.verifyCommit ?? verifyExactCheckout;
+            await verify(repoRoot, plan.commit_sha);
+            target = this.options.targetFactory?.(plan.credential_profile_ref) ?? new PgStagingTarget(plan.credential_profile_ref, this.env);
+            await target.connect();
+            executorStarted = true;
+            await executeApprovedStagingPlan(plan, repoRoot, target, receipts, {
+                cancelled: async () => this.stopping || (await status()) === "cancelled",
+                heartbeat: async (event) => {
+                    await this.sb.rpc("log_activity", {
+                        p_verb: "staging_migration.heartbeat", p_target_id: plan.id,
+                        p_target_type: "staging_migration_plan", p_payload: { event, runner_id: this.runnerId },
+                    });
+                },
+            });
+            this.logger.info(`[acc-runner] staging migration plan ${plan.id} succeeded`);
+        }
+        catch (error) {
+            // The executor owns all terminal receipts after it starts. Failures while
+            // resolving a checkout/profile or opening Postgres would otherwise leave
+            // a claimed plan stuck in running forever.
+            if (!executorStarted) {
+                await receipts.complete(false, safeCode(error)).catch(() => undefined);
+            }
+            this.logger.error(`[acc-runner] staging migration plan ${plan.id}: ${safeCode(error)}`);
+        }
+        finally {
+            await target?.close().catch(() => undefined);
+        }
+    }
+}
+//# sourceMappingURL=service.js.map

package/dist/staging-migrations/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/staging-migrations/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,OAAO,EACL,0BAA0B,GAI3B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,kCAAkC,EAClC,oBAAoB,EACpB,8BAA8B,GAC/B,MAAM,eAAe,CAAC;AAEvB,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAmB1C,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;IACrE,OAAO,GAAG,CAAC,OAAO,CAAC,8BAA8B,EAAE,mBAAmB,CAAC;SACpE,OAAO,CAAC,mCAAmC,EAAE,eAAe,CAAC;SAC7D,OAAO,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,QAAgB;IACtE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACxE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACpF,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;AAC3G,CAAC;AAED,MAAM,OAAO,uBAAuB;IAUf;IACA;IACA;IACA;IAZX,KAAK,GAA0B,IAAI,CAAC;IACpC,MAAM,GAAG,KAAK,CAAC;IACf,QAAQ,GAAG,KAAK,CAAC;IACR,MAAM,CAAS;IACf,UAAU,CAAS;IACnB,MAAM,CAAyB;IAC/B,GAAG,CAAoB;IAExC,YACmB,EAAwB,EACxB,GAAiB,EACjB,QAAgB,EAChB,UAA0C,EAAE;QAH5C,OAAE,GAAF,EAAE,CAAsB;QACxB,QAAG,GAAH,GAAG,CAAc;QACjB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,YAAO,GAAP,OAAO,CAAqC;QAE7D,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC;IAC1C,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;QACrC,OAAO,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0FAA0F,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QACzC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;iBACrE,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5F,IAAI,KAAK,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACjF,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAA0B,EAAE,CAAC;gBAC9D,IAAI,IAAI,CAAC,QAAQ;oBAAE,MAAM;gBACzB,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,MAAc;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,8BAA8B,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACzF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,oEAAoE;YACpE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iDAAiD,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC7F,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAoB,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,sBAAsB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;YACnF,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAsC,CAAC;QACnJ,MAAM,QAAQ,GAAyB;YACrC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;gBACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,+BAA+B,EAAE;oBAChE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM;oBACxD,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;iBACrD,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE;gBACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,iCAAiC,EAAE;oBAClE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS;oBAC1C,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;iBAC3D,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACnG,CAAC;SACF,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,IAA4B,EAAE;YAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;iBAC1E,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YAC1E,IAAI,MAAM,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACrF,OAAQ,MAAM,CAAC,IAAmC,EAAE,MAAM,IAAI,IAAI,CAAC;QACrE,CAAC,CAAC;QACF,IAAI,MAAM,GAAkF,IAAI,CAAC;QACjG,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACtG,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,mBAAmB,CAAC;YAChE,MAAM,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YACxC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,sBAAsB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YACjI,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,eAAe,GAAG,IAAI,CAAC;YACvB,MAAM,0BAA0B,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;gBACjE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,MAAM,EAAE,CAAC,KAAK,WAAW;gBACxE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;oBACzB,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,EAAE;wBAChC,MAAM,EAAE,6BAA6B,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE;wBAC3D,aAAa,EAAE,wBAAwB,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE;qBACxF,CAAC,CAAC;gBACL,CAAC;aACF,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,0EAA0E;YAC1E,yEAAyE;YACzE,2CAA2C;YAC3C,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;CACF"}

package/dist/supervisor.d.ts

@@ -0,0 +1,15 @@
+/** Unit basename for the unnamed instance. FROZEN — pre-existing installs use it. */
+export declare const SYSTEMD_UNIT_BASE: "acc-runner";
+/** Directory holding systemd --user units for the invoking operator. */
+export declare function systemdUserUnitDir(home: string): string;
+/**
+ * Unit name for an instance: `acc-runner.service` unnamed, else
+ * `acc-runner-<name>.service`. The name is already constrained to
+ * `[a-z0-9][a-z0-9-]{0,31}` by instance.ts, so it is safe in a unit name.
+ */
+export declare function systemdUnitName(instance: string | null): string;
+/** Absolute path of the unit file the installer writes. */
+export declare function systemdUnitPath(home: string, instance: string | null): string;
+/** Unit name for the instance THIS process resolves (`--instance` / env). */
+export declare function activeSystemdUnitName(env?: NodeJS.ProcessEnv): string;
+//# sourceMappingURL=supervisor.d.ts.map

package/dist/supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../src/supervisor.ts"],"names":[],"mappings":"AAgCA,qFAAqF;AACrF,eAAO,MAAM,iBAAiB,EAAG,YAAqB,CAAC;AAEvD,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAE/D;AAED,2DAA2D;AAC3D,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAE7E;AAED,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAElF"}