@treeseed/sdk 0.13.0-rc.102 → 0.13.0-rc.104

package/dist/.treeseed-build-complete.json

@@ -1 +1 @@
-{"completedAt":"2026-09-09T05:56:47.945Z"}
+{"completedAt":"2026-09-09T07:10:39.587Z"}

package/dist/deployment/index.d.ts

@@ -1,5 +1,6 @@
 export * from './schemas.js';
 export * from './postgres/contracts.js';
+export * from './postgres/requirements.js';
 export * from './canonical.js';
 export * from './catalog.js';
 export * from './topology.js';

package/dist/deployment/index.js

@@ -1,5 +1,6 @@
 export * from "./schemas.js";
 export * from "./postgres/contracts.js";
+export * from "./postgres/requirements.js";
 export * from "./canonical.js";
 export * from "./catalog.js";
 export * from "./topology.js";

package/dist/deployment/postgres/contracts.js

@@ -48,7 +48,7 @@ const postgresTopologySchema = z.object({
   if (!unique(value.servers.map((server) => server.id)) || !unique(value.requirements.map((requirement) => requirement.id)) || !unique(value.allocations.map((allocation) => allocation.requirementId))) fail("Server, requirement and allocation identities must be unique.");
   if (value.servers.filter((server) => server.mode === "shared").length > 1) fail("An environment has at most one default shared server.");
   if (value.servers.some((server) => server.installationId !== value.installationId || server.environment !== value.environment)) fail("Servers must belong to this installation and environment.");
-  const databases = /* @__PURE__ */ new Set(), roles = /* @__PURE__ */ new Set();
+  const databases = /* @__PURE__ */ new Set(), roles = /* @__PURE__ */ new Set(), credentials = /* @__PURE__ */ new Set();
   for (const allocation of value.allocations) {
     const server = value.servers.find((entry) => entry.id === allocation.serverId);
     const requirement = value.requirements.find((entry) => entry.id === allocation.requirementId);
@@ -60,6 +60,10 @@ const postgresTopologySchema = z.object({
     const databaseKey = `${server.id}:${allocation.database}`;
     if (databases.has(databaseKey)) fail("Applications must not share an allocated database.");
     databases.add(databaseKey);
+    for (const reference of [allocation.migrationCredentialReference, allocation.runtimeCredentialReference]) {
+      if (credentials.has(reference)) fail("Applications must not share database credential references.");
+      credentials.add(reference);
+    }
     for (const role of [allocation.ownerRole, allocation.migrationRole, allocation.runtimeRole]) {
       const key = `${server.id}:${role}`;
       if (roles.has(key)) fail("Applications must not share database roles.");

package/dist/deployment/postgres/requirements.d.ts

@@ -0,0 +1,14 @@
+/** Call after artifact authenticity verification, with the complete selected
+ * component inventory. Host configuration cannot weaken a package requirement.
+ */
+export declare function verifyHostPostgresRequirements(hostInput: unknown, releaseInputs: unknown[]): {
+    verified: true;
+    requirements: {
+        id: string;
+        componentId: string;
+        enabled: boolean;
+        supportedMajors: [number, ...number[]];
+        extensions: string[];
+        runtimeConnectionLimit: number;
+    }[];
+};

package/dist/deployment/postgres/requirements.js

@@ -0,0 +1,30 @@
+import { componentReleaseSchema, hostConfigurationSchema } from "../schemas.js";
+import { canonicalDeploymentJson, deploymentDigest } from "../canonical.js";
+function verifyHostPostgresRequirements(hostInput, releaseInputs) {
+  const host = hostConfigurationSchema.parse(hostInput);
+  const releases = releaseInputs.map((input) => componentReleaseSchema.parse(input));
+  if (new Set(releases.map((item) => item.componentId)).size !== releases.length) throw new Error("Duplicate component release inventory");
+  if (Object.entries(host.components).some(([id, selection]) => selection.enabled && !releases.some((release) => release.componentId === id))) throw new Error("Selected component release inventory is incomplete");
+  const requirements = [];
+  for (const release of releases) {
+    const selection = host.components[release.componentId];
+    if (!selection) continue;
+    if (deploymentDigest(release.runtime) !== release.runtimeDigest) throw new Error("Component runtime digest mismatch");
+    for (const requirement of release.runtime.postgresRequirements ?? []) requirements.push({
+      ...requirement,
+      componentId: release.componentId,
+      enabled: selection.enabled
+    });
+  }
+  if (new Set(requirements.map((item) => item.id)).size !== requirements.length) throw new Error("Component database requirement identities collide");
+  const normalize = (items) => items.map((item) => ({
+    ...item,
+    supportedMajors: [...item.supportedMajors].sort((a, b) => a - b),
+    extensions: [...item.extensions].sort()
+  })).sort((a, b) => a.id.localeCompare(b.id));
+  if (canonicalDeploymentJson(normalize(requirements)) !== canonicalDeploymentJson(normalize(host.postgres?.requirements ?? []))) throw new Error("Host database requirements differ from selected immutable components");
+  return { verified: true, requirements };
+}
+export {
+  verifyHostPostgresRequirements
+};