@zincapp/znvault-migrate 1.0.0

package/dist/adapters/mysql/mysql-conn.d.ts

@@ -0,0 +1,22 @@
+import type { Conn } from '../engine-adapter.js';
+/**
+ * The MySQL adapter's concrete connection handle. Extends the engine-agnostic `Conn`
+ * (query rows-directly + end) with the two MySQL-only members the ported leaf modules
+ * need: the prepared-statement `execute` path (used by the schema_migrations repo to read
+ * affectedRows) and the captured `connectionId` (used by the lock's IS_USED_LOCK ownership
+ * check). `openConnection()` (Task 5's connection.ts) returns a MysqlConn as a `Conn`; the
+ * MySQL adapter methods downcast their own `Conn` back to `MysqlConn` internally since they
+ * know they created it. This keeps the public `Conn` engine-agnostic (a future PG adapter
+ * needs neither `execute` nor MySQL's connectionId) while porting the repo/lock faithfully.
+ */
+export interface MysqlConn extends Conn {
+    /**
+     * Parameterized execute (prepared statement). Returns the raw mysql2 result tuple
+     * [OkPacket|RowDataPacket[], FieldPacket[]] so callers can access affectedRows for
+     * DML statements as well as rows for SELECT statements.
+     */
+    execute(sql: string, params?: unknown[]): Promise<[unknown, unknown]>;
+    /** The MySQL CONNECTION_ID() captured immediately after connecting. */
+    connectionId: number;
+}
+//# sourceMappingURL=mysql-conn.d.ts.map

package/dist/adapters/mysql/mysql-conn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mysql-conn.d.ts","sourceRoot":"","sources":["../../../src/adapters/mysql/mysql-conn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAEjD;;;;;;;;;GASG;AACH,MAAM,WAAW,SAAU,SAAQ,IAAI;IACrC;;;;OAIG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACtE,uEAAuE;IACvE,YAAY,EAAE,MAAM,CAAC;CACtB"}

package/dist/adapters/mysql/mysql-conn.js

@@ -0,0 +1 @@
+export {};

package/dist/adapters/mysql/mysql-conn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mysql-conn.js","sourceRoot":"","sources":["../../../src/adapters/mysql/mysql-conn.ts"],"names":[],"mappings":""}

package/dist/adapters/mysql/scaffolding.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Read and split the scaffolding SQL file (migration-helper procedures/functions).
+ * `filename` may be a bare name resolved against <migrationsDir>, OR an absolute
+ * path (used as-is, ignoring migrationsDir — lets one shared file serve both the
+ * pre and post phases, which have different migrationsDirs). Validation of the
+ * bare-vs-absolute distinction happens config-side (deploy-config-validate.ts).
+ * Returns the resolved absolute path and the executable statements.
+ */
+export declare function readScaffoldingSql(migrationsDir: string, filename: string): {
+    path: string;
+    statements: string[];
+};
+/**
+ * Structurally compatible with the real `Db` from './db.js' (query returns the
+ * result ROWS DIRECTLY, not the raw mysql2 [rows, fields] tuple — see db.ts's
+ * `query` implementation, which already unwraps the tuple before returning).
+ * Kept as its own narrow interface (rather than importing `Db`) so tests don't
+ * need to fake `execute`/`end`/`connectionId`, but the shape MUST match `Db.query`
+ * exactly or this cleanup silently drops nothing against production (see the
+ * 2026-07 ER-4006 incident: a `[rows] = await db.query(...)` tuple-destructure
+ * against this interface bound `rows` to the wrong thing and never dropped
+ * anything).
+ */
+export interface DefinerCleanupDb {
+    query(sql: string, params?: unknown[]): Promise<unknown[]>;
+}
+/**
+ * Drop EVERY definer-carrying object (procedure, function, trigger, event) whose
+ * DEFINER is `<leaseUser>@%`, across all schemas, using DROP ... IF EXISTS.
+ *
+ * This is the ER-4006 structural guarantee: run before DROP USER (or at phase end),
+ * unconditionally. Once the user is the definer of nothing, DROP USER cannot fail
+ * with MySQL 8.4 ER 4006, regardless of what the migration created. Scoped to the
+ * lease user's OWN objects only (host-inclusive definer match), so it never touches
+ * the persistent routines account's helpers or customer objects. Returns the count.
+ *
+ * CALLER INVARIANT (for the migration runner): this function is NOT transactional
+ * across objects — DDL like DROP PROCEDURE/TRIGGER/EVENT cannot be wrapped in a
+ * MySQL transaction anyway. If a DROP throws partway through the sweep (e.g. a
+ * permissions error or a lock timeout on one object), the function aborts
+ * immediately and some definer-owned objects may be LEFT UNDROPPED. The caller
+ * MUST NOT proceed to DROP USER after a failed/partial sweep — doing so risks
+ * the exact ER 4006 failure this cleanup exists to prevent. On a thrown error,
+ * the caller should either retry the sweep (it is idempotent — DROP ... IF EXISTS)
+ * or abort the whole revoke and surface the error, but never skip straight to
+ * DROP USER.
+ */
+export declare function dropDefinerObjects(db: DefinerCleanupDb, leaseUser: string): Promise<number>;
+//# sourceMappingURL=scaffolding.d.ts.map

package/dist/adapters/mysql/scaffolding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scaffolding.d.ts","sourceRoot":"","sources":["../../../src/adapters/mysql/scaffolding.ts"],"names":[],"mappings":"AAIA;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,CAOxC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;CAC5D;AAOD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAsCjG"}

package/dist/adapters/mysql/scaffolding.js

@@ -0,0 +1,70 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { isAbsolute, join } from 'node:path';
+import { splitStatements } from './sql-splitter.js';
+/**
+ * Read and split the scaffolding SQL file (migration-helper procedures/functions).
+ * `filename` may be a bare name resolved against <migrationsDir>, OR an absolute
+ * path (used as-is, ignoring migrationsDir — lets one shared file serve both the
+ * pre and post phases, which have different migrationsDirs). Validation of the
+ * bare-vs-absolute distinction happens config-side (deploy-config-validate.ts).
+ * Returns the resolved absolute path and the executable statements.
+ */
+export function readScaffoldingSql(migrationsDir, filename) {
+    const path = isAbsolute(filename) ? filename : join(migrationsDir, filename);
+    if (!existsSync(path)) {
+        throw new Error(`scaffolding file not found: ${path}`);
+    }
+    const sql = readFileSync(path, 'utf8');
+    return { path, statements: splitStatements(sql) };
+}
+/** Backtick-quote a MySQL identifier (doubling embedded backticks). */
+function q(ident) {
+    return '`' + ident.replace(/`/g, '``') + '`';
+}
+/**
+ * Drop EVERY definer-carrying object (procedure, function, trigger, event) whose
+ * DEFINER is `<leaseUser>@%`, across all schemas, using DROP ... IF EXISTS.
+ *
+ * This is the ER-4006 structural guarantee: run before DROP USER (or at phase end),
+ * unconditionally. Once the user is the definer of nothing, DROP USER cannot fail
+ * with MySQL 8.4 ER 4006, regardless of what the migration created. Scoped to the
+ * lease user's OWN objects only (host-inclusive definer match), so it never touches
+ * the persistent routines account's helpers or customer objects. Returns the count.
+ *
+ * CALLER INVARIANT (for the migration runner): this function is NOT transactional
+ * across objects — DDL like DROP PROCEDURE/TRIGGER/EVENT cannot be wrapped in a
+ * MySQL transaction anyway. If a DROP throws partway through the sweep (e.g. a
+ * permissions error or a lock timeout on one object), the function aborts
+ * immediately and some definer-owned objects may be LEFT UNDROPPED. The caller
+ * MUST NOT proceed to DROP USER after a failed/partial sweep — doing so risks
+ * the exact ER 4006 failure this cleanup exists to prevent. On a thrown error,
+ * the caller should either retry the sweep (it is idempotent — DROP ... IF EXISTS)
+ * or abort the whole revoke and surface the error, but never skip straight to
+ * DROP USER.
+ */
+export async function dropDefinerObjects(db, leaseUser) {
+    const definer = `${leaseUser}@%`;
+    let dropped = 0;
+    // Routines: procedures AND functions (ROUTINE_TYPE distinguishes; DROP keyword differs).
+    // NOTE: db.query() returns the rows array DIRECTLY (see DefinerCleanupDb doc comment
+    // above) — do NOT destructure as a [rows, fields] tuple.
+    const routineRows = (await db.query('SELECT ROUTINE_SCHEMA, ROUTINE_NAME, ROUTINE_TYPE FROM information_schema.ROUTINES WHERE DEFINER = ?', [definer]));
+    for (const r of routineRows) {
+        const kw = r.ROUTINE_TYPE === 'FUNCTION' ? 'FUNCTION' : 'PROCEDURE';
+        await db.query(`DROP ${kw} IF EXISTS ${q(r.ROUTINE_SCHEMA)}.${q(r.ROUTINE_NAME)}`);
+        dropped++;
+    }
+    // Triggers.
+    const triggerRows = (await db.query('SELECT TRIGGER_SCHEMA, TRIGGER_NAME FROM information_schema.TRIGGERS WHERE DEFINER = ?', [definer]));
+    for (const t of triggerRows) {
+        await db.query(`DROP TRIGGER IF EXISTS ${q(t.TRIGGER_SCHEMA)}.${q(t.TRIGGER_NAME)}`);
+        dropped++;
+    }
+    // Events.
+    const eventRows = (await db.query('SELECT EVENT_SCHEMA, EVENT_NAME FROM information_schema.EVENTS WHERE DEFINER = ?', [definer]));
+    for (const e of eventRows) {
+        await db.query(`DROP EVENT IF EXISTS ${q(e.EVENT_SCHEMA)}.${q(e.EVENT_NAME)}`);
+        dropped++;
+    }
+    return dropped;
+}

package/dist/adapters/mysql/scaffolding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scaffolding.js","sourceRoot":"","sources":["../../../src/adapters/mysql/scaffolding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,aAAqB,EACrB,QAAgB;IAEhB,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC7E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;AACpD,CAAC;AAiBD,uEAAuE;AACvE,SAAS,CAAC,CAAC,KAAa;IACtB,OAAO,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAoB,EAAE,SAAiB;IAC9E,MAAM,OAAO,GAAG,GAAG,SAAS,IAAI,CAAC;IACjC,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,yFAAyF;IACzF,qFAAqF;IACrF,yDAAyD;IACzD,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CACjC,sGAAsG,EACtG,CAAC,OAAO,CAAC,CACV,CAA6E,CAAC;IAC/E,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;QACpE,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACnF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,YAAY;IACZ,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CACjC,wFAAwF,EACxF,CAAC,OAAO,CAAC,CACV,CAAuD,CAAC;IACzD,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,EAAE,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACrF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,UAAU;IACV,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAC/B,kFAAkF,EAClF,CAAC,OAAO,CAAC,CACV,CAAmD,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/E,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/adapters/mysql/schema-migrations-repo.d.ts

@@ -0,0 +1,42 @@
+import type { MysqlConn } from './mysql-conn.js';
+import type { MigrationRow } from '../../core/types.js';
+export type { MigrationRow };
+/**
+ * Data-access layer for the schema_migrations table.
+ *
+ * Mirrors SchemaMigrationsRepo.kt exactly:
+ *  - Same CREATE TABLE DDL (version PK, checksum CHAR(64), checksum_algo VARCHAR(16),
+ *    applied_at DATETIME(3), applied_by VARCHAR(128), execution_ms INT, success TINYINT(1),
+ *    baselined TINYINT(1), ENGINE=InnoDB, CHARSET=utf8mb4).
+ *  - success and baselined are normalized via Number() so the comparison is robust
+ *    regardless of whether mysql2 returns TINYINT(1) as a JS boolean or number.
+ */
+export declare class SchemaMigrationsRepo {
+    private readonly db;
+    constructor(db: MysqlConn);
+    /**
+     * Create the schema_migrations table if it does not already exist.
+     * Uses the text protocol (db.query) so the DDL executes in a single statement.
+     */
+    ensureTable(): Promise<void>;
+    /**
+     * Return all migration rows ordered by version ascending.
+     */
+    all(): Promise<MigrationRow[]>;
+    /**
+     * Insert a claim row with success=0. Called before executing a migration so
+     * that a crash mid-migration leaves a recoverable false-success marker.
+     */
+    claim(version: string, checksum: string, appliedBy: string): Promise<void>;
+    /**
+     * Flip success=1 and record execution_ms after a migration completes successfully.
+     * Throws if no row exists for the given version (defensive — claim() should always precede this).
+     */
+    markSuccess(version: string, executionMs: number): Promise<void>;
+    /**
+     * Insert a pre-applied (baselined) row with success=1, baselined=1.
+     * Used when seeding the baseline marker for a fresh database.
+     */
+    seedBaseline(version: string, checksum: string, appliedBy: string): Promise<void>;
+}
+//# sourceMappingURL=schema-migrations-repo.d.ts.map

package/dist/adapters/mysql/schema-migrations-repo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-migrations-repo.d.ts","sourceRoot":"","sources":["../../../src/adapters/mysql/schema-migrations-repo.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,YAAY,EAAE,YAAY,EAAE,CAAC;AAE7B;;;;;;;;;GASG;AACH,qBAAa,oBAAoB;IACnB,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,SAAS;IAE1C;;;OAGG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAgBlC;;OAEG;IACG,GAAG,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IAepC;;;OAGG;IACG,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOhF;;;OAGG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYtE;;;OAGG;IACG,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAMxF"}

package/dist/adapters/mysql/schema-migrations-repo.js

@@ -0,0 +1,77 @@
+import { CHECKSUM_ALGO } from '../../core/checksum.js';
+/**
+ * Data-access layer for the schema_migrations table.
+ *
+ * Mirrors SchemaMigrationsRepo.kt exactly:
+ *  - Same CREATE TABLE DDL (version PK, checksum CHAR(64), checksum_algo VARCHAR(16),
+ *    applied_at DATETIME(3), applied_by VARCHAR(128), execution_ms INT, success TINYINT(1),
+ *    baselined TINYINT(1), ENGINE=InnoDB, CHARSET=utf8mb4).
+ *  - success and baselined are normalized via Number() so the comparison is robust
+ *    regardless of whether mysql2 returns TINYINT(1) as a JS boolean or number.
+ */
+export class SchemaMigrationsRepo {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    /**
+     * Create the schema_migrations table if it does not already exist.
+     * Uses the text protocol (db.query) so the DDL executes in a single statement.
+     */
+    async ensureTable() {
+        await this.db.query(`
+      CREATE TABLE IF NOT EXISTS schema_migrations (
+          version       VARCHAR(255) NOT NULL,
+          checksum      CHAR(64)     NOT NULL,
+          checksum_algo VARCHAR(16)  NOT NULL,
+          applied_at    DATETIME(3)  NOT NULL,
+          applied_by    VARCHAR(128) NOT NULL,
+          execution_ms  INT          NOT NULL DEFAULT 0,
+          success       TINYINT(1)   NOT NULL DEFAULT 0,
+          baselined     TINYINT(1)   NOT NULL DEFAULT 0,
+          PRIMARY KEY (version)
+      ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4
+    `);
+    }
+    /**
+     * Return all migration rows ordered by version ascending.
+     */
+    async all() {
+        const rows = await this.db.query('SELECT version, checksum, checksum_algo, success, baselined FROM schema_migrations ORDER BY version');
+        return rows.map((r) => ({
+            version: r.version,
+            checksum: r.checksum,
+            checksumAlgo: r.checksum_algo,
+            // mysql2 may return TINYINT(1) as boolean true/false or as 0/1 depending
+            // on driver configuration and MySQL version — Number() normalizes both.
+            success: Number(r.success) === 1,
+            baselined: Number(r.baselined) === 1,
+        }));
+    }
+    /**
+     * Insert a claim row with success=0. Called before executing a migration so
+     * that a crash mid-migration leaves a recoverable false-success marker.
+     */
+    async claim(version, checksum, appliedBy) {
+        await this.db.execute('INSERT INTO schema_migrations (version, checksum, checksum_algo, applied_at, applied_by, execution_ms, success, baselined) VALUES (?, ?, ?, NOW(3), ?, 0, 0, 0)', [version, checksum, CHECKSUM_ALGO, appliedBy]);
+    }
+    /**
+     * Flip success=1 and record execution_ms after a migration completes successfully.
+     * Throws if no row exists for the given version (defensive — claim() should always precede this).
+     */
+    async markSuccess(version, executionMs) {
+        const [okPacket] = await this.db.execute('UPDATE schema_migrations SET success = 1, execution_ms = ? WHERE version = ?', [executionMs, version]);
+        // mysql2 returns OkPacket with affectedRows for UPDATE statements
+        const affected = okPacket?.affectedRows ?? 0;
+        if (affected === 0) {
+            throw new Error(`no schema_migrations row for version ${version}`);
+        }
+    }
+    /**
+     * Insert a pre-applied (baselined) row with success=1, baselined=1.
+     * Used when seeding the baseline marker for a fresh database.
+     */
+    async seedBaseline(version, checksum, appliedBy) {
+        await this.db.execute('INSERT INTO schema_migrations (version, checksum, checksum_algo, applied_at, applied_by, execution_ms, success, baselined) VALUES (?, ?, ?, NOW(3), ?, 0, 1, 1)', [version, checksum, CHECKSUM_ALGO, appliedBy]);
+    }
+}

package/dist/adapters/mysql/schema-migrations-repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-migrations-repo.js","sourceRoot":"","sources":["../../../src/adapters/mysql/schema-migrations-repo.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAKvD;;;;;;;;;GASG;AACH,MAAM,OAAO,oBAAoB;IACF;IAA7B,YAA6B,EAAa;QAAb,OAAE,GAAF,EAAE,CAAW;IAAG,CAAC;IAE9C;;;OAGG;IACH,KAAK,CAAC,WAAW;QACf,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC;;;;;;;;;;;;KAYnB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG;QACP,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAC9B,qGAAqG,CACtG,CAAC;QACF,OAAQ,IAAkC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrD,OAAO,EAAE,CAAC,CAAC,OAAiB;YAC5B,QAAQ,EAAE,CAAC,CAAC,QAAkB;YAC9B,YAAY,EAAE,CAAC,CAAC,aAAuB;YACvC,yEAAyE;YACzE,wEAAwE;YACxE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;YAChC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC;SACrC,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,OAAe,EAAE,QAAgB,EAAE,SAAiB;QAC9D,MAAM,IAAI,CAAC,EAAE,CAAC,OAAO,CACnB,iKAAiK,EACjK,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC,CAC9C,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,WAAmB;QACpD,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,OAAO,CACtC,8EAA8E,EAC9E,CAAC,WAAW,EAAE,OAAO,CAAC,CACvB,CAAC;QACF,kEAAkE;QAClE,MAAM,QAAQ,GAAI,QAAsC,EAAE,YAAY,IAAI,CAAC,CAAC;QAC5E,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,wCAAwC,OAAO,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,QAAgB,EAAE,SAAiB;QACrE,MAAM,IAAI,CAAC,EAAE,CAAC,OAAO,CACnB,iKAAiK,EACjK,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC,CAC9C,CAAC;IACJ,CAAC;CACF"}

package/dist/adapters/mysql/sql-splitter.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Split a SQL string into individual statements, respecting:
+ * - DELIMITER directives (case-insensitive, only at line start, only when no code seen yet)
+ * - Line comments (-- and #): copied verbatim, do NOT set sawCode
+ * - Block comments (/* ... * /): copied verbatim; executable comments (/*! ... * /) set sawCode
+ * - Quoted strings/identifiers: backslash-escape inside ' and "; doubled quote is close+reopen
+ * - Delimiter match → flush buffer
+ * - Non-whitespace outside comments → sawCode = true
+ * - flush() emits only when trimmed non-empty AND sawCode (suppresses comment-only buffers)
+ *
+ * NOTE: operates on the RAW file string — does NOT normalize CRLF→LF.
+ * A bare \r is NOT treated as a newline (so \rDELIMITER $$ is NOT recognized as a directive).
+ */
+export declare function splitStatements(sql: string): string[];
+//# sourceMappingURL=sql-splitter.d.ts.map

package/dist/adapters/mysql/sql-splitter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-splitter.d.ts","sourceRoot":"","sources":["../../../src/adapters/mysql/sql-splitter.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAoJrD"}

package/dist/adapters/mysql/sql-splitter.js

@@ -0,0 +1,160 @@
+// Faithful port of utilities/.../SqlStatementSplitter.kt. Same single-pass cursor + flags.
+/**
+ * Split a SQL string into individual statements, respecting:
+ * - DELIMITER directives (case-insensitive, only at line start, only when no code seen yet)
+ * - Line comments (-- and #): copied verbatim, do NOT set sawCode
+ * - Block comments (/* ... * /): copied verbatim; executable comments (/*! ... * /) set sawCode
+ * - Quoted strings/identifiers: backslash-escape inside ' and "; doubled quote is close+reopen
+ * - Delimiter match → flush buffer
+ * - Non-whitespace outside comments → sawCode = true
+ * - flush() emits only when trimmed non-empty AND sawCode (suppresses comment-only buffers)
+ *
+ * NOTE: operates on the RAW file string — does NOT normalize CRLF→LF.
+ * A bare \r is NOT treated as a newline (so \rDELIMITER $$ is NOT recognized as a directive).
+ */
+export function splitStatements(sql) {
+    const statements = [];
+    let current = '';
+    let delimiter = ';';
+    let i = 0;
+    const n = sql.length;
+    let sawCode = false;
+    const isWs = (c) => c === ' ' || c === '\t' || c === '\n' || c === '\r';
+    /**
+     * Returns true if position idx is at a line start.
+     * Scans backwards over space/tab/\r — a bare \r is NOT a line boundary.
+     * Only \n (or beginning-of-file) counts as a line start.
+     */
+    const atLineStart = (idx) => {
+        let j = idx - 1;
+        while (j >= 0 && (sql[j] === ' ' || sql[j] === '\t' || sql[j] === '\r'))
+            j--;
+        return j < 0 || sql[j] === '\n';
+    };
+    const flush = () => {
+        const s = current.trim();
+        if (s.length > 0 && sawCode)
+            statements.push(s);
+        current = '';
+        sawCode = false;
+    };
+    const regionMatches = (idx, word, ci) => {
+        if (idx + word.length > n)
+            return false;
+        const seg = sql.substring(idx, idx + word.length);
+        return ci ? seg.toUpperCase() === word.toUpperCase() : seg === word;
+    };
+    while (i < n) {
+        const c = sql[i];
+        // DELIMITER directive — only at line start, only when no code seen yet
+        if ((c === 'D' || c === 'd') &&
+            atLineStart(i) &&
+            !sawCode &&
+            regionMatches(i, 'DELIMITER', true) &&
+            (i + 9 >= n || isWs(sql[i + 9] ?? '\n'))) {
+            // Skip past "DELIMITER" keyword
+            let j = i + 9;
+            // Skip horizontal whitespace before the token
+            while (j < n && (sql[j] === ' ' || sql[j] === '\t'))
+                j++;
+            const start = j;
+            // Collect the new delimiter token — stop at whitespace or trailing comment
+            while (j < n) {
+                const ch = sql[j];
+                if (ch === ' ' || ch === '\t' || ch === '\n' || ch === '\r')
+                    break;
+                if (ch === '-' && j + 1 < n && sql[j + 1] === '-')
+                    break;
+                if (ch === '#')
+                    break;
+                if (ch === '/' && j + 1 < n && sql[j + 1] === '*')
+                    break;
+                j++;
+            }
+            const newDelim = sql.substring(start, j);
+            if (newDelim.length > 0)
+                delimiter = newDelim;
+            // Consume the rest of the line (up to but not including the \n)
+            while (j < n && sql[j] !== '\n')
+                j++;
+            i = j + 1;
+            continue;
+        }
+        // Line comment: -- (copied verbatim, does NOT set sawCode)
+        if (c === '-' && i + 1 < n && sql[i + 1] === '-') {
+            while (i < n && sql[i] !== '\n') {
+                current += sql[i];
+                i++;
+            }
+            continue;
+        }
+        // Line comment: # (copied verbatim, does NOT set sawCode)
+        if (c === '#') {
+            while (i < n && sql[i] !== '\n') {
+                current += sql[i];
+                i++;
+            }
+            continue;
+        }
+        // Block comment: /* ... */ (executable /*! ... */ sets sawCode)
+        if (c === '/' && i + 1 < n && sql[i + 1] === '*') {
+            const isExec = i + 2 < n && sql[i + 2] === '!';
+            current += c;
+            current += sql[i + 1];
+            i += 2;
+            while (i < n && !(sql[i] === '*' && i + 1 < n && sql[i + 1] === '/')) {
+                current += sql[i];
+                i++;
+            }
+            if (i + 1 < n) {
+                current += '*/';
+                i += 2;
+            }
+            if (isExec)
+                sawCode = true;
+            continue;
+        }
+        // Quoted strings and identifiers: ', ", `
+        if (c === "'" || c === '"' || c === '`') {
+            sawCode = true;
+            const quote = c;
+            current += c;
+            i++;
+            while (i < n) {
+                const q = sql[i];
+                current += q;
+                // Backslash escape inside ' and " (not backtick)
+                if (q === '\\' && (quote === "'" || quote === '"') && i + 1 < n) {
+                    current += sql[i + 1];
+                    i += 2;
+                    continue;
+                }
+                // Doubled quote = close-then-reopen (same quote-toggle path)
+                if (q === quote) {
+                    if (i + 1 < n && sql[i + 1] === quote) {
+                        current += quote;
+                        i += 2;
+                        continue;
+                    }
+                    i++;
+                    break;
+                }
+                i++;
+            }
+            continue;
+        }
+        // Delimiter match → flush the buffer
+        if (regionMatches(i, delimiter, false)) {
+            flush();
+            i += delimiter.length;
+            continue;
+        }
+        // Any non-whitespace char outside a comment → sawCode = true
+        if (!/\s/.test(c))
+            sawCode = true;
+        current += c;
+        i++;
+    }
+    flush();
+    return statements;
+}

package/dist/adapters/mysql/sql-splitter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-splitter.js","sourceRoot":"","sources":["../../../src/adapters/mysql/sql-splitter.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAE3F;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,SAAS,GAAG,GAAG,CAAC;IACpB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC;IAEhF;;;;OAIG;IACH,MAAM,WAAW,GAAG,CAAC,GAAW,EAAW,EAAE;QAC3C,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;YAAE,CAAC,EAAE,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;IAClC,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO;YAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChD,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,CAAC,GAAW,EAAE,IAAY,EAAE,EAAW,EAAW,EAAE;QACxE,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC;IACtE,CAAC,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAW,CAAC;QAE3B,uEAAuE;QACvE,IACE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;YACxB,WAAW,CAAC,CAAC,CAAC;YACd,CAAC,OAAO;YACR,aAAa,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC;YACnC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EACxC,CAAC;YACD,gCAAgC;YAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,8CAA8C;YAC9C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;gBAAE,CAAC,EAAE,CAAC;YACzD,MAAM,KAAK,GAAG,CAAC,CAAC;YAChB,2EAA2E;YAC3E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACb,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;gBAClB,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI;oBAAE,MAAM;gBACnE,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;oBAAE,MAAM;gBACzD,IAAI,EAAE,KAAK,GAAG;oBAAE,MAAM;gBACtB,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;oBAAE,MAAM;gBACzD,CAAC,EAAE,CAAC;YACN,CAAC;YACD,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACzC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS,GAAG,QAAQ,CAAC;YAC9C,gEAAgE;YAChE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;YACrC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACV,SAAS;QACX,CAAC;QAED,2DAA2D;QAC3D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAChC,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC,EAAE,CAAC;YACN,CAAC;YACD,SAAS;QACX,CAAC;QAED,0DAA0D;QAC1D,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAChC,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC,EAAE,CAAC;YACN,CAAC;YACD,SAAS;QACX,CAAC;QAED,gEAAgE;QAChE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACjD,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;YAC/C,OAAO,IAAI,CAAC,CAAC;YACb,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtB,CAAC,IAAI,CAAC,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;gBACrE,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC,EAAE,CAAC;YACN,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACd,OAAO,IAAI,IAAI,CAAC;gBAChB,CAAC,IAAI,CAAC,CAAC;YACT,CAAC;YACD,IAAI,MAAM;gBAAE,OAAO,GAAG,IAAI,CAAC;YAC3B,SAAS;QACX,CAAC;QAED,0CAA0C;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACxC,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,KAAK,GAAG,CAAC,CAAC;YAChB,OAAO,IAAI,CAAC,CAAC;YACb,CAAC,EAAE,CAAC;YACJ,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;gBACjB,OAAO,IAAI,CAAC,CAAC;gBACb,iDAAiD;gBACjD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChE,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;oBACtB,CAAC,IAAI,CAAC,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,6DAA6D;gBAC7D,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;oBAChB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;wBACtC,OAAO,IAAI,KAAK,CAAC;wBACjB,CAAC,IAAI,CAAC,CAAC;wBACP,SAAS;oBACX,CAAC;oBACD,CAAC,EAAE,CAAC;oBACJ,MAAM;gBACR,CAAC;gBACD,CAAC,EAAE,CAAC;YACN,CAAC;YACD,SAAS;QACX,CAAC;QAED,qCAAqC;QACrC,IAAI,aAAa,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;YACvC,KAAK,EAAE,CAAC;YACR,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC;YACtB,SAAS;QACX,CAAC;QAED,6DAA6D;QAC7D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,GAAG,IAAI,CAAC;QAClC,OAAO,IAAI,CAAC,CAAC;QACb,CAAC,EAAE,CAAC;IACN,CAAC;IAED,KAAK,EAAE,CAAC;IACR,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Configuration for a single migration phase (pre or post deploy).
+ *
+ * Mirrors the plugin's `MigrationConfig` shape (`znvault-plugin-payara/src/cli/types.ts`)
+ * plus the `engine` discriminator, which is new to this package (§5 of the
+ * znvault-migrate shared-library design).
+ */
+export interface MigrationConfig {
+    /**
+     * REQUIRED discriminator. Only 'mysql' is supported by this project; 'postgres' is
+     * accepted by the type for forward-compat but rejected at validation until a
+     * PostgreSQL adapter ships (see the znvault-migrate PostgreSQL design, §11).
+     */
+    engine: 'mysql' | 'postgres';
+    /** dynamic-secrets role (lease-only; NO raw creds). */
+    roleId: string;
+    /** Override if the lease doesn't pin one. */
+    database?: string;
+    /** Absolute path to the directory of migration files. */
+    migrationsDir: string;
+    /** Bare filename (relative to migrationsDir) OR an absolute path; MySQL-only. */
+    scaffoldingFile?: string;
+}
+/**
+ * Validate a {@link MigrationConfig}. Pure, synchronous, no I/O.
+ *
+ * Ports the plugin's `validateMigrationBlock`
+ * (`znvault-plugin-payara/src/cli/deploy-config-validate.ts:16-42`) for the
+ * `roleId`/`migrationsDir`/`scaffoldingFile` rules, and adds the `engine`
+ * discriminator rules that are new to this package (spec §5).
+ */
+export declare function validateMigrationConfig(cfg: MigrationConfig): {
+    errors: string[];
+};
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,MAAM,EAAE,OAAO,GAAG,UAAU,CAAC;IAC7B,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,aAAa,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,eAAe,GAAG;IAAE,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAkClF"}

package/dist/config.js

@@ -0,0 +1,36 @@
+// Path: znvault-migrate/src/config.ts
+import { isAbsolute } from 'node:path';
+/**
+ * Validate a {@link MigrationConfig}. Pure, synchronous, no I/O.
+ *
+ * Ports the plugin's `validateMigrationBlock`
+ * (`znvault-plugin-payara/src/cli/deploy-config-validate.ts:16-42`) for the
+ * `roleId`/`migrationsDir`/`scaffoldingFile` rules, and adds the `engine`
+ * discriminator rules that are new to this package (spec §5).
+ */
+export function validateMigrationConfig(cfg) {
+    const errors = [];
+    const engine = cfg.engine;
+    if (engine !== 'mysql' && engine !== 'postgres') {
+        errors.push("engine is required and must be 'mysql' or 'postgres'.");
+    }
+    else if (engine === 'postgres') {
+        errors.push('postgres migrations are not yet supported (the PostgreSQL adapter is a deferred project — see the znvault-migrate PostgreSQL design)');
+    }
+    if (!cfg.roleId || cfg.roleId.trim() === '') {
+        errors.push('roleId is required (the dynamic-secrets write role).');
+    }
+    if (!cfg.migrationsDir || cfg.migrationsDir.trim() === '') {
+        errors.push('migrationsDir is required.');
+    }
+    if (cfg.scaffoldingFile !== undefined) {
+        if (typeof cfg.scaffoldingFile !== 'string' || cfg.scaffoldingFile.length === 0) {
+            errors.push('scaffoldingFile must be a non-empty filename or absolute path.');
+        }
+        else if (!isAbsolute(cfg.scaffoldingFile) &&
+            (cfg.scaffoldingFile.includes('/') || cfg.scaffoldingFile.includes('\\'))) {
+            errors.push('scaffoldingFile must be a bare filename (relative to migrationsDir) or an absolute path — a relative path with separators is not allowed.');
+        }
+    }
+    return { errors };
+}

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AA0BvC;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAoB;IAC1D,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,MAAM,MAAM,GAAI,GAA4B,CAAC,MAAM,CAAC;IACpD,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IACvE,CAAC;SAAM,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CACT,sIAAsI,CACvI,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChF,MAAM,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QAChF,CAAC;aAAM,IACL,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC;YAChC,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EACzE,CAAC;YACD,MAAM,CAAC,IAAI,CACT,2IAA2I,CAC5I,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC"}

package/dist/core/baseline-marker.d.ts

@@ -0,0 +1,2 @@
+export declare function readBaselineMarker(path: string): string | null;
+//# sourceMappingURL=baseline-marker.d.ts.map

package/dist/core/baseline-marker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline-marker.d.ts","sourceRoot":"","sources":["../../src/core/baseline-marker.ts"],"names":[],"mappings":"AAEA,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE9D"}

package/dist/core/baseline-marker.js

@@ -0,0 +1,10 @@
+import { readFileSync } from 'node:fs';
+const RE = /^--\s*BASELINE_MARKER:\s*(\S+)\s*$/m;
+export function readBaselineMarker(path) {
+    try {
+        return RE.exec(readFileSync(path, 'utf8'))?.[1] ?? null;
+    }
+    catch {
+        return null;
+    }
+}

package/dist/core/baseline-marker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline-marker.js","sourceRoot":"","sources":["../../src/core/baseline-marker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,MAAM,EAAE,GAAG,qCAAqC,CAAC;AACjD,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC;QAAC,OAAO,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACzF,CAAC"}

package/dist/core/checksum.d.ts

@@ -0,0 +1,18 @@
+export declare const CHECKSUM_ALGO = "sha256-lf-v1";
+/**
+ * Compute the canonical sha256-lf-v1 checksum of a migration file buffer.
+ *
+ * Algorithm (byte-level — never decode to string):
+ *   1. Strip UTF-8 BOM (EF BB BF) at offset 0, if present.
+ *   2. Remove ALL 0x0D bytes (bare CR and CR in CRLF pairs).
+ *   3. SHA-256 the resulting bytes.
+ *   4. Return lowercase hex.
+ *
+ * This matches the Kotlin MigrationChecksummer implementation exactly.
+ */
+export declare function canonicalChecksum(buf: Buffer): string;
+/**
+ * Read a migration file from disk and return its canonical sha256-lf-v1 checksum.
+ */
+export declare function canonicalChecksumFile(path: string): string;
+//# sourceMappingURL=checksum.d.ts.map

package/dist/core/checksum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checksum.d.ts","sourceRoot":"","sources":["../../src/core/checksum.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,aAAa,iBAAiB,CAAC;AAE5C;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CASrD;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE1D"}