@venturekit/data 0.0.0-dev.20260505173052 → 0.0.0-dev.20260505181911
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/internal/rds-global-ca.d.ts +31 -0
- package/dist/internal/rds-global-ca.d.ts.map +1 -0
- package/dist/internal/rds-global-ca.js +2768 -0
- package/dist/internal/rds-global-ca.js.map +1 -0
- package/dist/query/pool.d.ts +31 -1
- package/dist/query/pool.d.ts.map +1 -1
- package/dist/query/pool.js +62 -9
- package/dist/query/pool.js.map +1 -1
- package/package.json +2 -2
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"rds-global-ca.js","sourceRoot":"","sources":["../../src/internal/rds-global-ca.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAirFhC,CAAC"}
|
package/dist/query/pool.d.ts
CHANGED
|
@@ -22,7 +22,7 @@
|
|
|
22
22
|
* surfaces as a clean `pg` error long before the Lambda is killed
|
|
23
23
|
* with no logs.
|
|
24
24
|
*/
|
|
25
|
-
import { Pool } from 'pg';
|
|
25
|
+
import { Pool, type PoolConfig } from 'pg';
|
|
26
26
|
/**
|
|
27
27
|
* Default `pg.Pool#connectionTimeoutMillis`. 5 s strikes the same
|
|
28
28
|
* balance as `DEFAULT_SECRETS_FETCH_TIMEOUT_MS` — fast enough that the
|
|
@@ -41,5 +41,35 @@ export declare const DEFAULT_CONNECT_TIMEOUT_MS = 5000;
|
|
|
41
41
|
* without wiring their own bridge.
|
|
42
42
|
*/
|
|
43
43
|
export declare function applyDatabaseUrlToEnv(): void;
|
|
44
|
+
/**
|
|
45
|
+
* Detect whether a host points at an AWS RDS / Aurora endpoint.
|
|
46
|
+
*
|
|
47
|
+
* Endpoint shapes by partition:
|
|
48
|
+
* - **Commercial + GovCloud:** `<id>.<random>.<region>.rds.amazonaws.com`
|
|
49
|
+
* — both are covered by the suffix match. The vendored
|
|
50
|
+
* `RDS_GLOBAL_CA_PEM` is the right CA for both.
|
|
51
|
+
* - **China (`cn-north-1`, `cn-northwest-1`):**
|
|
52
|
+
* `<id>.<random>.<region>.rds.amazonaws.com.cn` — *not* matched.
|
|
53
|
+
* AWS publishes a separate China bundle that we don't vendor;
|
|
54
|
+
* China-region deployments must set `DB_SSL_CA` themselves.
|
|
55
|
+
*
|
|
56
|
+
* Exported for the unit tests so we can pin the heuristic without
|
|
57
|
+
* indirectly depending on the full `resolveSsl()` shape.
|
|
58
|
+
*/
|
|
59
|
+
export declare function isRdsHost(host: string | undefined): boolean;
|
|
60
|
+
/**
|
|
61
|
+
* Result of `resolveSsl()`. The `ssl` field is what `pg.Pool` consumes;
|
|
62
|
+
* `mode` is a stable, low-cardinality label included in the cold-start
|
|
63
|
+
* pool-creation log so operators can confirm at a glance which CA path
|
|
64
|
+
* is in effect (the bug class this typing prevents — silent fallback
|
|
65
|
+
* to system trust on an RDS host — is exactly what produced the
|
|
66
|
+
* `SELF_SIGNED_CERT_IN_CHAIN` outage).
|
|
67
|
+
*/
|
|
68
|
+
export type SslDecision = {
|
|
69
|
+
ssl: PoolConfig['ssl'];
|
|
70
|
+
mode: 'off' | 'insecure' | 'verified-custom-ca' | 'verified-rds-bundle' | 'verified-system-ca';
|
|
71
|
+
};
|
|
72
|
+
/** Build the `ssl` field for PoolConfig based on env vars. */
|
|
73
|
+
export declare function resolveSsl(): SslDecision;
|
|
44
74
|
export declare function getPool(): Pool;
|
|
45
75
|
//# sourceMappingURL=pool.d.ts.map
|
package/dist/query/pool.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"pool.d.ts","sourceRoot":"","sources":["../../src/query/pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,IAAI,
|
|
1
|
+
{"version":3,"file":"pool.d.ts","sourceRoot":"","sources":["../../src/query/pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,IAAI,EAAE,KAAK,UAAU,EAAE,MAAM,IAAI,CAAC;AAM3C;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,OAAQ,CAAC;AAShD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,IAAI,IAAI,CAoC5C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAG3D;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IACvB,IAAI,EAAE,KAAK,GAAG,UAAU,GAAG,oBAAoB,GAAG,qBAAqB,GAAG,oBAAoB,CAAC;CAChG,CAAC;AAEF,8DAA8D;AAC9D,wBAAgB,UAAU,IAAI,WAAW,CA8CxC;AAED,wBAAgB,OAAO,IAAI,IAAI,CAsD9B"}
|
package/dist/query/pool.js
CHANGED
|
@@ -24,6 +24,7 @@
|
|
|
24
24
|
*/
|
|
25
25
|
import { Pool } from 'pg';
|
|
26
26
|
import { dbLog } from '../internal/logger.js';
|
|
27
|
+
import { RDS_GLOBAL_CA_PEM } from '../internal/rds-global-ca.js';
|
|
27
28
|
let pool = null;
|
|
28
29
|
/**
|
|
29
30
|
* Default `pg.Pool#connectionTimeoutMillis`. 5 s strikes the same
|
|
@@ -86,10 +87,30 @@ export function applyDatabaseUrlToEnv() {
|
|
|
86
87
|
process.env.DB_SSL = 'true';
|
|
87
88
|
}
|
|
88
89
|
}
|
|
90
|
+
/**
|
|
91
|
+
* Detect whether a host points at an AWS RDS / Aurora endpoint.
|
|
92
|
+
*
|
|
93
|
+
* Endpoint shapes by partition:
|
|
94
|
+
* - **Commercial + GovCloud:** `<id>.<random>.<region>.rds.amazonaws.com`
|
|
95
|
+
* — both are covered by the suffix match. The vendored
|
|
96
|
+
* `RDS_GLOBAL_CA_PEM` is the right CA for both.
|
|
97
|
+
* - **China (`cn-north-1`, `cn-northwest-1`):**
|
|
98
|
+
* `<id>.<random>.<region>.rds.amazonaws.com.cn` — *not* matched.
|
|
99
|
+
* AWS publishes a separate China bundle that we don't vendor;
|
|
100
|
+
* China-region deployments must set `DB_SSL_CA` themselves.
|
|
101
|
+
*
|
|
102
|
+
* Exported for the unit tests so we can pin the heuristic without
|
|
103
|
+
* indirectly depending on the full `resolveSsl()` shape.
|
|
104
|
+
*/
|
|
105
|
+
export function isRdsHost(host) {
|
|
106
|
+
if (!host)
|
|
107
|
+
return false;
|
|
108
|
+
return host.endsWith('.rds.amazonaws.com');
|
|
109
|
+
}
|
|
89
110
|
/** Build the `ssl` field for PoolConfig based on env vars. */
|
|
90
|
-
function resolveSsl() {
|
|
111
|
+
export function resolveSsl() {
|
|
91
112
|
if (process.env.DB_SSL !== 'true')
|
|
92
|
-
return undefined;
|
|
113
|
+
return { ssl: undefined, mode: 'off' };
|
|
93
114
|
// Insecure opt-out: log a loud warning so this never sneaks into prod unnoticed.
|
|
94
115
|
if (process.env.DB_SSL_INSECURE === 'true') {
|
|
95
116
|
// eslint-disable-next-line no-console
|
|
@@ -97,17 +118,44 @@ function resolveSsl() {
|
|
|
97
118
|
'verification is DISABLED. This is vulnerable to MITM and should only ' +
|
|
98
119
|
'be used for local testing. Remove DB_SSL_INSECURE and set DB_SSL_CA ' +
|
|
99
120
|
'to the RDS CA bundle in production.');
|
|
100
|
-
return { rejectUnauthorized: false };
|
|
121
|
+
return { ssl: { rejectUnauthorized: false }, mode: 'insecure' };
|
|
122
|
+
}
|
|
123
|
+
// Verified TLS — three layered defaults, in priority order:
|
|
124
|
+
//
|
|
125
|
+
// 1. **Explicit `DB_SSL_CA` env var** wins. Ops teams running
|
|
126
|
+
// against a non-RDS Postgres (self-hosted, Crunchy, Supabase,
|
|
127
|
+
// etc.) already set this; we don't second-guess them.
|
|
128
|
+
//
|
|
129
|
+
// 2. **RDS endpoint detected** → use the vendored AWS RDS global
|
|
130
|
+
// CA bundle. This is the path that fixes
|
|
131
|
+
// `SELF_SIGNED_CERT_IN_CHAIN`: Node's default trust store
|
|
132
|
+
// doesn't include the AWS-private CAs that sign RDS certs, so
|
|
133
|
+
// verified TLS fails out of the box even though the chain is
|
|
134
|
+
// perfectly valid. Vendoring sidesteps the bootstrap problem
|
|
135
|
+
// (a Lambda in a private subnet can't reach
|
|
136
|
+
// `truststore.pki.rds.amazonaws.com` to download it at runtime).
|
|
137
|
+
//
|
|
138
|
+
// 3. **Anything else** (custom hostname, no CA configured) →
|
|
139
|
+
// Node's system trust store. This works for managed Postgres
|
|
140
|
+
// providers that use a public CA (Let's Encrypt, DigiCert).
|
|
141
|
+
if (process.env.DB_SSL_CA) {
|
|
142
|
+
return {
|
|
143
|
+
ssl: { rejectUnauthorized: true, ca: process.env.DB_SSL_CA },
|
|
144
|
+
mode: 'verified-custom-ca',
|
|
145
|
+
};
|
|
146
|
+
}
|
|
147
|
+
if (isRdsHost(process.env.DB_HOST)) {
|
|
148
|
+
return {
|
|
149
|
+
ssl: { rejectUnauthorized: true, ca: RDS_GLOBAL_CA_PEM },
|
|
150
|
+
mode: 'verified-rds-bundle',
|
|
151
|
+
};
|
|
101
152
|
}
|
|
102
|
-
|
|
103
|
-
return process.env.DB_SSL_CA
|
|
104
|
-
? { rejectUnauthorized: true, ca: process.env.DB_SSL_CA }
|
|
105
|
-
: { rejectUnauthorized: true };
|
|
153
|
+
return { ssl: { rejectUnauthorized: true }, mode: 'verified-system-ca' };
|
|
106
154
|
}
|
|
107
155
|
export function getPool() {
|
|
108
156
|
if (!pool) {
|
|
109
157
|
applyDatabaseUrlToEnv();
|
|
110
|
-
const ssl = resolveSsl();
|
|
158
|
+
const { ssl, mode: sslMode } = resolveSsl();
|
|
111
159
|
const max = Number(process.env.DB_POOL_MAX ?? 10);
|
|
112
160
|
const connectionTimeoutMillis = resolveConnectionTimeoutMs();
|
|
113
161
|
const host = process.env.DB_HOST;
|
|
@@ -118,6 +166,11 @@ export function getPool() {
|
|
|
118
166
|
// to confirm DB_HOST / DB_PORT / DB_NAME landed in the expected
|
|
119
167
|
// slots; without it, the only signal that env vars exist at all
|
|
120
168
|
// is a successful query — which is exactly what they don't have.
|
|
169
|
+
//
|
|
170
|
+
// `sslMode` is the *interesting* SSL signal — `verified-rds-bundle`
|
|
171
|
+
// confirms the vendored CA path is in use, `verified-system-ca`
|
|
172
|
+
// means we'd fail on a self-signed RDS cert, etc. Far more useful
|
|
173
|
+
// than a plain `ssl: true/false` flag when triaging TLS errors.
|
|
121
174
|
dbLog.info('Creating Postgres pool', {
|
|
122
175
|
host,
|
|
123
176
|
port,
|
|
@@ -125,7 +178,7 @@ export function getPool() {
|
|
|
125
178
|
// Only report whether credentials are present, never their values.
|
|
126
179
|
userPresent: Boolean(process.env.DB_USER),
|
|
127
180
|
passwordPresent: Boolean(process.env.DB_PASSWORD),
|
|
128
|
-
|
|
181
|
+
sslMode,
|
|
129
182
|
max,
|
|
130
183
|
connectionTimeoutMillis,
|
|
131
184
|
});
|
package/dist/query/pool.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"pool.js","sourceRoot":"","sources":["../../src/query/pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,IAAI,EAAmB,MAAM,IAAI,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;
|
|
1
|
+
{"version":3,"file":"pool.js","sourceRoot":"","sources":["../../src/query/pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,IAAI,EAAmB,MAAM,IAAI,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEjE,IAAI,IAAI,GAAgB,IAAI,CAAC;AAE7B;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC;AAEhD,SAAS,0BAA0B;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,0BAA0B,CAAC;IAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC;AACvE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACrC,IAAI,CAAC,GAAG;QAAE,OAAO;IAEjB,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC;IAChE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC;IACtE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;IACvC,CAAC;IAED,8DAA8D;IAC9D,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/C,IACE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM;QACnB,CAAC,OAAO,KAAK,SAAS;YACpB,OAAO,KAAK,WAAW;YACvB,OAAO,KAAK,aAAa;YACzB,OAAO,KAAK,MAAM,CAAC,EACrB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;IAC9B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,SAAS,CAAC,IAAwB;IAChD,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;AAC7C,CAAC;AAeD,8DAA8D;AAC9D,MAAM,UAAU,UAAU;IACxB,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAE1E,iFAAiF;IACjF,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,MAAM,EAAE,CAAC;QAC3C,sCAAsC;QACtC,OAAO,CAAC,IAAI,CACV,uEAAuE;YACrE,uEAAuE;YACvE,sEAAsE;YACtE,qCAAqC,CACxC,CAAC;QACF,OAAO,EAAE,GAAG,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAClE,CAAC;IAED,4DAA4D;IAC5D,EAAE;IACF,gEAAgE;IAChE,mEAAmE;IACnE,2DAA2D;IAC3D,EAAE;IACF,mEAAmE;IACnE,8CAA8C;IAC9C,+DAA+D;IAC/D,mEAAmE;IACnE,kEAAkE;IAClE,kEAAkE;IAClE,iDAAiD;IACjD,sEAAsE;IACtE,EAAE;IACF,+DAA+D;IAC/D,kEAAkE;IAClE,iEAAiE;IACjE,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO;YACL,GAAG,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE;YAC5D,IAAI,EAAE,oBAAoB;SAC3B,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,GAAG,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,EAAE,iBAAiB,EAAE;YACxD,IAAI,EAAE,qBAAqB;SAC5B,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,OAAO;IACrB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,qBAAqB,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,UAAU,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,uBAAuB,GAAG,0BAA0B,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAErC,gEAAgE;QAChE,iEAAiE;QACjE,gEAAgE;QAChE,gEAAgE;QAChE,iEAAiE;QACjE,EAAE;QACF,oEAAoE;QACpE,gEAAgE;QAChE,kEAAkE;QAClE,gEAAgE;QAChE,KAAK,CAAC,IAAI,CAAC,wBAAwB,EAAE;YACnC,IAAI;YACJ,IAAI;YACJ,QAAQ;YACR,mEAAmE;YACnE,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YACzC,eAAe,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;YACjD,OAAO;YACP,GAAG;YACH,uBAAuB;SACxB,CAAC,CAAC;QAEH,IAAI,GAAG,IAAI,IAAI,CAAC;YACd,IAAI;YACJ,IAAI;YACJ,QAAQ;YACR,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO;YACzB,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW;YACjC,GAAG;YACH,GAAG;YACH,uBAAuB;SACxB,CAAC,CAAC;QAEH,oEAAoE;QACpE,oEAAoE;QACpE,0DAA0D;QAC1D,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAC9B,KAAK,CAAC,KAAK,CAAC,mCAAmC,EAAE;gBAC/C,SAAS,EAAE,GAAG,CAAC,IAAI;gBACnB,YAAY,EAAE,GAAG,CAAC,OAAO;aAC1B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@venturekit/data",
|
|
3
|
-
"version": "0.0.0-dev.
|
|
3
|
+
"version": "0.0.0-dev.20260505181911",
|
|
4
4
|
"description": "Database and data layer for VentureKit",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "./dist/index.js",
|
|
@@ -26,7 +26,7 @@
|
|
|
26
26
|
},
|
|
27
27
|
"dependencies": {
|
|
28
28
|
"@aws-sdk/client-secrets-manager": "^3.500.0",
|
|
29
|
-
"@venturekit/core": "0.0.0-dev.
|
|
29
|
+
"@venturekit/core": "0.0.0-dev.20260505181911",
|
|
30
30
|
"pg": "^8.12.0"
|
|
31
31
|
},
|
|
32
32
|
"devDependencies": {
|