cursedbelt 2.7.0 → 3.0.0

package/dist/server/drivers/jobResults.js

@@ -1,328 +0,0 @@
-import { createSqliteExecutor } from 'cwip/storage';
-import { AppError } from '../errors';
-/**
- * Tenant recorded when a terminal outcome is written by a path that cannot know
- * the job's tenant — a `cancel(id)` from a process that did not enqueue it. It
- * is a sentinel, not a real tenant: a scoped reader must treat it as "not mine",
- * which is why it is a named constant rather than an empty string that could be
- * mistaken for a missing column.
- */
-export const UNSCOPED_TENANT = 'unknown';
-/** Default page size for {@link JobResultStore.list}. */
-export const JOB_RESULT_PAGE = 50;
-export const JOB_RESULTS_TABLE = 'cc_job_results';
-/**
- * `ok` is stored as INTEGER because SQLite has no boolean; `output` is JSON
- * because a job's return value is arbitrary. `tenant_id` is NOT NULL under the
- * same law as every other table (01 §2) — a result row is data, and untenanted
- * data is the thing that leaks.
- */
-export const JOB_RESULTS_DDL = `CREATE TABLE IF NOT EXISTS ${JOB_RESULTS_TABLE} (
-  job_id      TEXT PRIMARY KEY NOT NULL,
-  tenant_id   TEXT NOT NULL,
-  instance_id TEXT,
-  ok          INTEGER NOT NULL,
-  output      TEXT,
-  error       TEXT,
-  at          TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ','now'))
-)`;
-export const JOB_RESULTS_INDEX = `CREATE INDEX IF NOT EXISTS cc_job_results_at ON ${JOB_RESULTS_TABLE}(at)`;
-const toRecorded = (row) => ({
-    jobId: row.job_id,
-    tenantId: row.tenant_id,
-    instanceId: row.instance_id ?? undefined,
-    // `Number(...)`, not `=== 1`: a pg `bigint` arrives as the string '1', and a
-    // string compared against a number is silently `false` — every outcome would
-    // read as a failure, on the dialect with no local test to catch it.
-    ok: Number(row.ok) === 1,
-    output: row.output === null ? undefined : JSON.parse(row.output),
-    error: row.error ?? undefined,
-    at: row.at,
-});
-/**
- * The four statements, authored ONCE.
- *
- * A second copy of this table's SQL for the shared-substrate store is exactly
- * the drift the statement-spec layer exists to prevent (`cwip/sql/statements`):
- * the two would agree on the day they were written and disagree the first time
- * a column moved. Only the insert's SHAPE differs between the dialects, which
- * is what the `pg` field is for; the placeholder numbering and the timestamp
- * spelling are rendering, not authorship.
- */
-const STATEMENTS = {
-    // `OR IGNORE` / `DO NOTHING`, never a replace: a cancelled job whose handler
-    // later returns normally must not overwrite the recorded cancellation. That
-    // is the settle race (§2.3) in its durable form, and it is the ONE property
-    // this table's correctness rests on.
-    insert: (result) => ({
-        sql: `INSERT OR IGNORE INTO ${JOB_RESULTS_TABLE} (job_id, tenant_id, instance_id, ok, output, error, at)
-          VALUES (?, ?, ?, ?, ?, ?, ?)`,
-        pg: `INSERT INTO ${JOB_RESULTS_TABLE} (job_id, tenant_id, instance_id, ok, output, error, at)
-         VALUES (?, ?, ?, ?, ?, ?, ?) ON CONFLICT (job_id) DO NOTHING`,
-        params: [
-            result.jobId,
-            result.tenantId,
-            result.instanceId ?? null,
-            result.ok ? 1 : 0,
-            result.output === undefined ? null : JSON.stringify(result.output),
-            result.error ?? null,
-            result.at ?? new Date().toISOString(),
-        ],
-    }),
-    read: (id) => ({
-        sql: `SELECT * FROM ${JOB_RESULTS_TABLE} WHERE job_id = ?`,
-        params: [id],
-    }),
-    // The tenant predicate is REQUIRED, not a convenience — this is the only read
-    // that returns rows rather than a known id, so it is exactly where a missing
-    // scope becomes a cross-tenant leak. `at DESC, job_id DESC` because two jobs
-    // recorded inside the same millisecond would otherwise page in an order
-    // either engine is free to change between runs.
-    list: (tenantId, limit) => ({
-        sql: `SELECT * FROM ${JOB_RESULTS_TABLE} WHERE tenant_id = ? ORDER BY at DESC, job_id DESC LIMIT ?`,
-        params: [tenantId, limit],
-    }),
-    prune: (cutoffIso) => ({
-        sql: `DELETE FROM ${JOB_RESULTS_TABLE} WHERE at < ?`,
-        params: [cutoffIso],
-    }),
-};
-/**
- * The store over any {@link StatementExecutor} — the ONE implementation.
- *
- * Both the per-node SQLite store and the shared Postgres store are this
- * function with a different executor, which is what makes "the contract is the
- * same, which is the point" (the docstring at the top of this file) a fact
- * about the code rather than an aspiration about two hand-written copies.
- *
- * It does NOT create the table: DDL ownership differs per substrate (the app's
- * own file versus a migration a deployment runs once against a shared
- * database), and a library that quietly issued DDL against a shared Postgres
- * would be a second schema owner.
- */
-export const createStatementJobResultStore = (executor) => ({
-    async record(result) {
-        await executor.write(STATEMENTS.insert(result));
-    },
-    async read(id) {
-        const row = await executor.get(STATEMENTS.read(id));
-        return row === null ? null : toRecorded(row);
-    },
-    async list({ tenantId, limit }) {
-        const rows = await executor.all(STATEMENTS.list(tenantId, limit ?? JOB_RESULT_PAGE));
-        return rows.map(toRecorded);
-    },
-    async prune(maxAgeMs) {
-        const result = await executor.write(STATEMENTS.prune(new Date(Date.now() - maxAgeMs).toISOString()));
-        return result.changes;
-    },
-});
-/**
- * SQLite-backed store. Shares the app's DB handle, so a result is committed in
- * the same file the queue journal lives in — a crash between "job done" and
- * "result recorded" is the only remaining gap, and re-leasing re-runs the job.
- *
- * PER-NODE by construction, which is why it is not the saas answer: two API
- * nodes have two files, so a completion recorded by one is invisible to the
- * other. Use the pooled store for that (`createPgJobResultStore`).
- */
-export const createSqliteJobResultStore = (db) => {
-    db.run(JOB_RESULTS_DDL);
-    db.run(JOB_RESULTS_INDEX);
-    return createStatementJobResultStore(createSqliteExecutor(db));
-};
-/** In-memory store — tests and single-process hosts with no DB handle. */
-export const createMemoryJobResultStore = () => {
-    const rows = new Map();
-    return {
-        async record(result) {
-            if (rows.has(result.jobId))
-                return;
-            rows.set(result.jobId, { ...result, at: result.at ?? new Date().toISOString() });
-        },
-        async read(id) {
-            return rows.get(id) ?? null;
-        },
-        async list({ tenantId, limit }) {
-            return [...rows.values()]
-                .filter((row) => row.tenantId === tenantId)
-                .sort((a, b) => (a.at ?? '') < (b.at ?? '') ? 1 : (a.at ?? '') > (b.at ?? '') ? -1 : b.jobId.localeCompare(a.jobId))
-                .slice(0, limit ?? JOB_RESULT_PAGE);
-        },
-        async prune(maxAgeMs) {
-            const cutoff = Date.now() - maxAgeMs;
-            let removed = 0;
-            for (const [id, row] of rows) {
-                if (Date.parse(row.at ?? '') < cutoff) {
-                    rows.delete(id);
-                    removed += 1;
-                }
-            }
-            return removed;
-        },
-    };
-};
-/**
- * Record a stateless worker's terminal outcome in the shared store.
- *
- * A SaaS worker owns no waiter registry and no callback map — it runs in a
- * different process from every enqueuer and subscriber. Writing the row IS its
- * only completion notification: API nodes read it through {@link
- * awaitRecordedCompletion}, and the backend's own `completed` event (fired when
- * the worker acks the lease AFTER this write) is what wakes them from a poll to
- * an immediate re-read. Hence the ordering law the worker must honor — record
- * here, THEN ack the lease — so a waiter woken by the completed event always
- * finds the row already durable.
- *
- * `record` is first-writer-wins (the store's law), which is exactly what makes
- * this safe to call after a `cancel(id)` already wrote a `cancelled` row: a
- * handler that finishes normally moments after being cancelled does not
- * resurrect the job. The helper exists as a named seam so that law has one
- * documented call site rather than a bare `store.record` scattered through the
- * worker loop.
- */
-export const recordWorkerResult = async (store, result) => {
-    await store.record(result);
-};
-/**
- * Wait for a terminal outcome by READING the shared store.
- *
- * Polling is the floor, not the mechanism: a broker with a completion bus wakes
- * the wait immediately and the poll is only the safety net for a missed
- * notification. Getting that ordering right is what makes the contract
- * identical in-process and across a Redis-backed fleet — the caller cannot tell
- * which one delivered.
- */
-export const awaitRecordedCompletion = async (store, id, options = {}) => {
-    const timeoutMs = options.timeoutMs ?? 300_000;
-    const pollMs = options.pollMs ?? 250;
-    const deadline = Date.now() + timeoutMs;
-    // The pre-read is what makes an already-finished job replay instead of hang.
-    // It is tolerated rather than propagated for the same reason the polled reads
-    // are: a shared store answers over a network, and a blip on the FIRST read is
-    // not evidence that the job did not finish. The error is remembered so it can
-    // ride the timeout if nothing ever answers.
-    let firstReadError = null;
-    try {
-        const immediate = await store.read(id);
-        if (immediate)
-            return immediate;
-    }
-    catch (error) {
-        firstReadError = error;
-    }
-    return await new Promise((resolve, reject) => {
-        let settled = false;
-        let timer = null;
-        let unsubscribe = null;
-        /**
-         * The most recent store failure, if any. A shared store lives across a
-         * network now, so a read CAN fail transiently; giving up on the first blip
-         * would make a 24h wait a coin flip. But swallowing it entirely would turn
-         * a permanently broken store into an unexplainable `JOB_WAIT_TIMEOUT` — the
-         * exact "a timeout is an unsettled promise" trap — so the last error rides
-         * the timeout when we finally give up.
-         */
-        let lastReadError = firstReadError;
-        const finish = (fn) => {
-            if (settled)
-                return;
-            settled = true;
-            if (timer !== null)
-                clearTimeout(timer);
-            unsubscribe?.();
-            options.signal?.removeEventListener('abort', onAbort);
-            fn();
-        };
-        function onAbort() {
-            finish(() => reject(new AppError(`Wait for job '${id}' was aborted.`, {
-                code: 'JOB_WAIT_ABORTED',
-                status: 499,
-                context: { jobId: id },
-            })));
-        }
-        const check = async () => {
-            if (settled)
-                return;
-            let recorded = null;
-            try {
-                recorded = await store.read(id);
-            }
-            catch (error) {
-                lastReadError = error;
-            }
-            // The read is a suspension point now: an abort or a competing wake may
-            // have settled us while it was in flight, and re-arming a timer after
-            // that would leak one per poll for the life of the process.
-            if (settled)
-                return;
-            if (recorded) {
-                const found = recorded;
-                finish(() => resolve(found));
-                return;
-            }
-            if (Date.now() >= deadline) {
-                finish(() => reject(new AppError(`Job '${id}' did not complete within ${timeoutMs}ms.`, {
-                    code: 'JOB_WAIT_TIMEOUT',
-                    status: 504,
-                    context: {
-                        jobId: id,
-                        timeoutMs,
-                        ...(lastReadError === null ? {} : { lastReadError: String(lastReadError) }),
-                    },
-                    cause: lastReadError ?? undefined,
-                })));
-                return;
-            }
-            timer = setTimeout(poll, pollMs);
-        };
-        /**
-         * The ONE entry point to `check` — the timer and the push subscription both
-         * come through here, and only one check may be in flight.
-         *
-         * Serializing matters more than it looks. `check` now suspends on the store
-         * read, so a push wake arriving mid-read would start a second chain, and
-         * each chain arms its own `setTimeout` while only one handle survives in
-         * `timer` — an orphaned timer per wake, forever, on a wait that may legitimately
-         * run for 24 hours. A wake during a read is instead remembered and re-polled
-         * the moment that read lands, which is also strictly more responsive than
-         * racing two reads.
-         */
-        let running = false;
-        let wakeRequested = false;
-        const poll = () => {
-            if (settled)
-                return;
-            if (running) {
-                wakeRequested = true;
-                return;
-            }
-            if (timer !== null) {
-                clearTimeout(timer);
-                timer = null;
-            }
-            running = true;
-            void check()
-                .catch((error) => {
-                finish(() => reject(error));
-            })
-                .finally(() => {
-                running = false;
-                if (wakeRequested && !settled) {
-                    wakeRequested = false;
-                    poll();
-                }
-            });
-        };
-        if (options.signal) {
-            if (options.signal.aborted) {
-                onAbort();
-                return;
-            }
-            options.signal.addEventListener('abort', onAbort, { once: true });
-        }
-        unsubscribe = options.subscribe?.(poll) ?? null;
-        timer = setTimeout(poll, pollMs);
-    });
-};
-//# sourceMappingURL=jobResults.js.map

package/dist/server/drivers/jobResults.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"jobResults.js","sourceRoot":"","sources":["../../../src/server/drivers/jobResults.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,oBAAoB,EAA0C,MAAM,cAAc,CAAC;AAC5F,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAGrC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC;AAuDzC,yDAAyD;AACzD,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAElC,MAAM,CAAC,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAElD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,8BAA8B,iBAAiB;;;;;;;;EAQ5E,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,mDAAmD,iBAAiB,MAAM,CAAC;AAa5G,MAAM,UAAU,GAAG,CAAC,GAAiB,EAAqB,EAAE,CAAC,CAAC;IAC5D,KAAK,EAAE,GAAG,CAAC,MAAM;IACjB,QAAQ,EAAE,GAAG,CAAC,SAAS;IACvB,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;IACxC,6EAA6E;IAC7E,6EAA6E;IAC7E,oEAAoE;IACpE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC;IACxB,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAa;IAC7E,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,SAAS;IAC7B,EAAE,EAAE,GAAG,CAAC,EAAE;CACX,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,UAAU,GAAG;IACjB,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,qCAAqC;IACrC,MAAM,EAAE,CAAC,MAAyB,EAAa,EAAE,CAAC,CAAC;QACjD,GAAG,EAAE,yBAAyB,iBAAiB;uCACZ;QACnC,EAAE,EAAE,eAAe,iBAAiB;sEAC8B;QAClE,MAAM,EAAE;YACN,MAAM,CAAC,KAAK;YACZ,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,UAAU,IAAI,IAAI;YACzB,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjB,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;YAClE,MAAM,CAAC,KAAK,IAAI,IAAI;YACpB,MAAM,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC;KACF,CAAC;IACF,IAAI,EAAE,CAAC,EAAS,EAAa,EAAE,CAAC,CAAC;QAC/B,GAAG,EAAE,iBAAiB,iBAAiB,mBAAmB;QAC1D,MAAM,EAAE,CAAC,EAAE,CAAC;KACb,CAAC;IACF,8EAA8E;IAC9E,6EAA6E;IAC7E,6EAA6E;IAC7E,wEAAwE;IACxE,gDAAgD;IAChD,IAAI,EAAE,CAAC,QAAgB,EAAE,KAAa,EAAa,EAAE,CAAC,CAAC;QACrD,GAAG,EAAE,iBAAiB,iBAAiB,4DAA4D;QACnG,MAAM,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC;KAC1B,CAAC;IACF,KAAK,EAAE,CAAC,SAAiB,EAAa,EAAE,CAAC,CAAC;QACxC,GAAG,EAAE,eAAe,iBAAiB,eAAe;QACpD,MAAM,EAAE,CAAC,SAAS,CAAC;KACpB,CAAC;CACM,CAAC;AAEX;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,QAA2B,EAAkB,EAAE,CAAC,CAAC;IAC7F,KAAK,CAAC,MAAM,CAAC,MAAM;QACjB,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE;QACX,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAe,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAClE,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;QAC5B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAe,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,IAAI,eAAe,CAAC,CAAC,CAAC;QACnG,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,QAAQ;QAClB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACrG,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;CACF,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,EAAY,EAAkB,EAAE;IACzE,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACxB,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC1B,OAAO,6BAA6B,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAmB,EAAE;IAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,EAA4B,CAAC;IACjD,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,MAAM;YACjB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,OAAO;YACnC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE;YACX,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;QAC9B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC5B,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;iBACtB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;iBAC1C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;iBACnH,KAAK,CAAC,CAAC,EAAE,KAAK,IAAI,eAAe,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,QAAQ;YAClB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;YACrC,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;gBAC7B,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC;oBACtC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBAChB,OAAO,IAAI,CAAC,CAAC;gBACf,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EAAE,KAAqB,EAAE,MAAyB,EAAiB,EAAE;IAC1G,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC,CAAC;AAaF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,EAC1C,KAAqB,EACrB,EAAS,EACT,UAAmF,EAAE,EACzD,EAAE;IAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAExC,6EAA6E;IAC7E,8EAA8E;IAC9E,8EAA8E;IAC9E,8EAA8E;IAC9E,4CAA4C;IAC5C,IAAI,cAAc,GAAY,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,OAAO,MAAM,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC9D,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,KAAK,GAAyC,IAAI,CAAC;QACvD,IAAI,WAAW,GAAwB,IAAI,CAAC;QAC5C;;;;;;;WAOG;QACH,IAAI,aAAa,GAAY,cAAc,CAAC;QAE5C,MAAM,MAAM,GAAG,CAAC,EAAc,EAAQ,EAAE;YACtC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK,KAAK,IAAI;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YACxC,WAAW,EAAE,EAAE,CAAC;YAChB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtD,EAAE,EAAE,CAAC;QACP,CAAC,CAAC;QAEF,SAAS,OAAO;YACd,MAAM,CAAC,GAAG,EAAE,CACV,MAAM,CACJ,IAAI,QAAQ,CAAC,iBAAiB,EAAE,gBAAgB,EAAE;gBAChD,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;aACvB,CAAC,CACH,CACF,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;YACtC,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,QAAQ,GAA6B,IAAI,CAAC;YAC9C,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,aAAa,GAAG,KAAK,CAAC;YACxB,CAAC;YACD,uEAAuE;YACvE,sEAAsE;YACtE,4DAA4D;YAC5D,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,KAAK,GAAG,QAAQ,CAAC;gBACvB,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC7B,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,CAAC,GAAG,EAAE,CACV,MAAM,CACJ,IAAI,QAAQ,CAAC,QAAQ,EAAE,6BAA6B,SAAS,KAAK,EAAE;oBAClE,IAAI,EAAE,kBAAkB;oBACxB,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE;wBACP,KAAK,EAAE,EAAE;wBACT,SAAS;wBACT,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;qBAC5E;oBACD,KAAK,EAAE,aAAa,IAAI,SAAS;iBAClC,CAAC,CACH,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC;QAEF;;;;;;;;;;;WAWG;QACH,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,MAAM,IAAI,GAAG,GAAS,EAAE;YACtB,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,OAAO,EAAE,CAAC;gBACZ,aAAa,GAAG,IAAI,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,KAAK,EAAE;iBACT,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACf,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9B,CAAC,CAAC;iBACD,OAAO,CAAC,GAAG,EAAE;gBACZ,OAAO,GAAG,KAAK,CAAC;gBAChB,IAAI,aAAa,IAAI,CAAC,OAAO,EAAE,CAAC;oBAC9B,aAAa,GAAG,KAAK,CAAC;oBACtB,IAAI,EAAE,CAAC;gBACT,CAAC;YACH,CAAC,CAAC,CAAC;QACP,CAAC,CAAC;QAEF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC3B,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;QAChD,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/server/drivers/pooledControlStores.d.ts

@@ -1,94 +0,0 @@
-/**
- * The SHARED control-plane stores — the half of the saas profile that could not
- * exist until owner decision E17 (04 §1).
- *
- * A saas deployment is many API nodes and many workers. Two pieces of state
- * must be the SAME for all of them, and both had only per-node implementations:
- *
- *   • **the job-outcome log.** `SaasJobBroker`'s docstring promises that "a
- *     waiter on API node A sees a completion produced by worker B". The only
- *     stores were `bun:sqlite` (a file per node) and a heap map, so the promise
- *     was false in every real topology — a job completed by B left A's
- *     `awaitCompletion` polling a table that would never fill.
- *   • **the revoked-jti denylist.** `SessionSigner` already takes a
- *     `AsyncRevocationStore` seam, and the only implementation was a `Map` whose own
- *     docstring says "two OS processes do not share this". So a session revoked
- *     on node A stayed valid on node B until it expired — a promoted user's old
- *     token kept its old permissions wherever the revoke did not land, which is
- *     the exact failure `revokeUser` was written to prevent.
- *
- * Both are now the same thing: one table in the deployment's Postgres, reached
- * through the ONE pool the saas provider registers. Nothing here opens a socket
- * — the pool is injected (law #8), so a library never learns a connection
- * string.
- *
- * **Scoping lives in the query, and that is deliberate.** These are
- * control-plane tables, not domain tables: their maintenance verbs sweep every
- * tenant by design, and a revoked jti must be visible to a node that has not
- * resolved a tenant yet (that is what a denylist IS). So they carry no RLS
- * policy and are reached through `createPostgresControlExecutor`, which says so
- * at the call site rather than smuggling a placeholder tenant past the guard.
- * The tenant-predicated `WHERE` on the one read that returns rows is therefore
- * REQUIRED — the same law every `audit_log` read follows.
- */
-import { type SaasPool, type StatementExecutor } from 'cwip/storage';
-import type { AsyncRevocationStore } from '../guard/revocationStore';
-import { type JobResultStore } from './jobResults';
-/**
- * A {@link StatementExecutor} whose EVERY statement checks a connection out of
- * the pool and returns it.
- *
- * The shape matters, and the obvious alternative is a use-after-release bug:
- * `pool.withConnection(c => createPostgresControlExecutor(c))` hands back an
- * executor bound to a connection that has ALREADY gone back to the pool, so the
- * first statement it runs races whatever checked that socket out next. So the
- * checkout is per statement, exactly as `createPgJobResultStore` does it — the
- * store holds no connection of its own, because a long-lived one would be a
- * socket the pool is sized against but does not control.
- *
- * CONTROL-plane, so scoping lives in the query: these tables' maintenance verbs
- * (a retention sweep over every tenant's audit rows) are cross-tenant by design,
- * and a policy that hid the other tenants would make the sweep silently
- * incomplete. The tenant predicate on every read is therefore REQUIRED, which
- * `createStatementAuditTrailStore` enforces in its own `read`.
- */
-export declare const createPooledControlExecutor: (pool: SaasPool) => StatementExecutor;
-/**
- * The durable outcome log over the deployment's pool.
- *
- * Every call checks a connection out and returns it: the store holds no
- * connection of its own, because a long-lived one would be a socket the pool is
- * sized against but does not control.
- */
-export declare const createPgJobResultStore: (pool: SaasPool) => JobResultStore;
-export declare const REVOCATIONS_TABLE = "cc_revocations";
-/**
- * `exp` is the token's own expiry in epoch SECONDS — the unit `SessionSigner`
- * already works in. Storing the expiry rather than the revocation time is what
- * makes `prune` a single comparison against `now` and keeps a denylist entry
- * exactly as long as the token it denies could still be presented.
- */
-export declare const REVOCATIONS_DDL = "CREATE TABLE IF NOT EXISTS cc_revocations (\n  jti TEXT PRIMARY KEY NOT NULL,\n  exp INTEGER NOT NULL\n)";
-export declare const REVOCATIONS_INDEX = "CREATE INDEX IF NOT EXISTS cc_revocations_exp ON cc_revocations(exp)";
-export declare const createPgRevocationStore: (pool: SaasPool) => AsyncRevocationStore;
-/**
- * The control-plane chain, in the deployment's dialect.
- *
- * COMPILED from the SQLite source by `toPostgresDdl`, never hand-written: the
- * repo's standing law is that a Postgres chain is derived from the one an
- * author wrote and reviewed, so the two cannot drift a column apart. The
- * compiler refuses anything outside its closed grammar rather than guessing.
- */
-export declare const SAAS_CONTROL_PLANE_DDL: readonly string[];
-/**
- * Create the control-plane tables if they are absent.
- *
- * Deliberately a NAMED, explicit call rather than something the stores do on
- * construction. A shared database has one schema owner, and a library that
- * issued DDL on every process start would be N of them racing — and would make
- * a read-only credential (the correct one for an API node that only reads the
- * denylist) fail at boot. A deployment calls this once, from a migration step
- * or a host that knows it holds the privilege.
- */
-export declare const ensureSaasControlPlaneSchema: (pool: SaasPool) => Promise<void>;
-//# sourceMappingURL=pooledControlStores.d.ts.map

package/dist/server/drivers/pooledControlStores.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pooledControlStores.d.ts","sourceRoot":"","sources":["../../../src/server/drivers/pooledControlStores.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAGL,KAAK,QAAQ,EACb,KAAK,iBAAiB,EACvB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAMtB;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,2BAA2B,GAAI,MAAM,QAAQ,KAAG,iBAS5D,CAAC;AAIF;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,GAAI,MAAM,QAAQ,KAAG,cAUvD,CAAC;AAIF,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AAElD;;;;;GAKG;AACH,eAAO,MAAM,eAAe,6GAG1B,CAAC;AAEH,eAAO,MAAM,iBAAiB,yEAA+E,CAAC;AAE9G,eAAO,MAAM,uBAAuB,GAAI,MAAM,QAAQ,KAAG,oBAsCvD,CAAC;AAIH;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAYhC,CAAC;AAErB;;;;;;;;;GASG;AACH,eAAO,MAAM,4BAA4B,GAAU,MAAM,QAAQ,KAAG,OAAO,CAAC,IAAI,CAI/E,CAAC"}

package/dist/server/drivers/pooledControlStores.js

@@ -1,171 +0,0 @@
-/**
- * The SHARED control-plane stores — the half of the saas profile that could not
- * exist until owner decision E17 (04 §1).
- *
- * A saas deployment is many API nodes and many workers. Two pieces of state
- * must be the SAME for all of them, and both had only per-node implementations:
- *
- *   • **the job-outcome log.** `SaasJobBroker`'s docstring promises that "a
- *     waiter on API node A sees a completion produced by worker B". The only
- *     stores were `bun:sqlite` (a file per node) and a heap map, so the promise
- *     was false in every real topology — a job completed by B left A's
- *     `awaitCompletion` polling a table that would never fill.
- *   • **the revoked-jti denylist.** `SessionSigner` already takes a
- *     `AsyncRevocationStore` seam, and the only implementation was a `Map` whose own
- *     docstring says "two OS processes do not share this". So a session revoked
- *     on node A stayed valid on node B until it expired — a promoted user's old
- *     token kept its old permissions wherever the revoke did not land, which is
- *     the exact failure `revokeUser` was written to prevent.
- *
- * Both are now the same thing: one table in the deployment's Postgres, reached
- * through the ONE pool the saas provider registers. Nothing here opens a socket
- * — the pool is injected (law #8), so a library never learns a connection
- * string.
- *
- * **Scoping lives in the query, and that is deliberate.** These are
- * control-plane tables, not domain tables: their maintenance verbs sweep every
- * tenant by design, and a revoked jti must be visible to a node that has not
- * resolved a tenant yet (that is what a denylist IS). So they carry no RLS
- * policy and are reached through `createPostgresControlExecutor`, which says so
- * at the call site rather than smuggling a placeholder tenant past the guard.
- * The tenant-predicated `WHERE` on the one read that returns rows is therefore
- * REQUIRED — the same law every `audit_log` read follows.
- */
-import { createPostgresControlExecutor, toPostgresDdl, } from 'cwip/storage';
-import { createStatementJobResultStore, JOB_RESULTS_DDL, JOB_RESULTS_INDEX, } from './jobResults';
-import { RETENTION_POLICY_DDL } from './retentionPolicy';
-import { SITE_COPY_DDL } from './siteCopy';
-/* ---------------------------------------------------------- pooled executor */
-/**
- * A {@link StatementExecutor} whose EVERY statement checks a connection out of
- * the pool and returns it.
- *
- * The shape matters, and the obvious alternative is a use-after-release bug:
- * `pool.withConnection(c => createPostgresControlExecutor(c))` hands back an
- * executor bound to a connection that has ALREADY gone back to the pool, so the
- * first statement it runs races whatever checked that socket out next. So the
- * checkout is per statement, exactly as `createPgJobResultStore` does it — the
- * store holds no connection of its own, because a long-lived one would be a
- * socket the pool is sized against but does not control.
- *
- * CONTROL-plane, so scoping lives in the query: these tables' maintenance verbs
- * (a retention sweep over every tenant's audit rows) are cross-tenant by design,
- * and a policy that hid the other tenants would make the sweep silently
- * incomplete. The tenant predicate on every read is therefore REQUIRED, which
- * `createStatementAuditTrailStore` enforces in its own `read`.
- */
-export const createPooledControlExecutor = (pool) => {
-    const over = (fn) => pool.withConnection(async (connection) => await fn(createPostgresControlExecutor(connection)));
-    return {
-        dialect: 'postgres',
-        all: (statement) => over((executor) => executor.all(statement)),
-        get: (statement) => over((executor) => executor.get(statement)),
-        write: (statement) => over((executor) => executor.write(statement)),
-    };
-};
-/* ------------------------------------------------------------- job results */
-/**
- * The durable outcome log over the deployment's pool.
- *
- * Every call checks a connection out and returns it: the store holds no
- * connection of its own, because a long-lived one would be a socket the pool is
- * sized against but does not control.
- */
-export const createPgJobResultStore = (pool) => {
-    const over = (fn) => pool.withConnection(async (connection) => await fn(createStatementJobResultStore(createPostgresControlExecutor(connection))));
-    return {
-        record: (result) => over((store) => store.record(result)),
-        read: (id) => over((store) => store.read(id)),
-        list: (query) => over((store) => store.list(query)),
-        prune: (maxAgeMs) => over((store) => store.prune(maxAgeMs)),
-    };
-};
-/* -------------------------------------------------------------- revocation */
-export const REVOCATIONS_TABLE = 'cc_revocations';
-/**
- * `exp` is the token's own expiry in epoch SECONDS — the unit `SessionSigner`
- * already works in. Storing the expiry rather than the revocation time is what
- * makes `prune` a single comparison against `now` and keeps a denylist entry
- * exactly as long as the token it denies could still be presented.
- */
-export const REVOCATIONS_DDL = `CREATE TABLE IF NOT EXISTS ${REVOCATIONS_TABLE} (
-  jti TEXT PRIMARY KEY NOT NULL,
-  exp INTEGER NOT NULL
-)`;
-export const REVOCATIONS_INDEX = `CREATE INDEX IF NOT EXISTS cc_revocations_exp ON ${REVOCATIONS_TABLE}(exp)`;
-export const createPgRevocationStore = (pool) => ({
-    async set(jti, expEpochSeconds) {
-        await pool.withConnection(async (connection) => {
-            // Keep the LATER exp. Two nodes revoking the same jti with slightly
-            // different clocks must not SHORTEN the denial window — the memory store
-            // has the same rule, and a store that disagreed with it would make
-            // "revoked" mean something different per profile.
-            await createPostgresControlExecutor(connection).write({
-                sql: `INSERT INTO ${REVOCATIONS_TABLE} (jti, exp) VALUES (?, ?)
-              ON CONFLICT (jti) DO UPDATE SET exp = max(${REVOCATIONS_TABLE}.exp, excluded.exp)`,
-                pg: `INSERT INTO ${REVOCATIONS_TABLE} (jti, exp) VALUES (?, ?)
-             ON CONFLICT (jti) DO UPDATE SET exp = GREATEST(${REVOCATIONS_TABLE}.exp, excluded.exp)`,
-                params: [jti, expEpochSeconds],
-            });
-        });
-    },
-    async get(jti) {
-        return await pool.withConnection(async (connection) => {
-            const row = await createPostgresControlExecutor(connection).get({
-                sql: `SELECT exp FROM ${REVOCATIONS_TABLE} WHERE jti = ?`,
-                params: [jti],
-            });
-            // A pg `bigint` arrives as a string; `null` means "not revoked" and must
-            // never be confused with an exp of 0.
-            return row === null ? null : Number(row.exp);
-        });
-    },
-    async prune(nowEpochSeconds) {
-        return await pool.withConnection(async (connection) => {
-            const result = await createPostgresControlExecutor(connection).write({
-                sql: `DELETE FROM ${REVOCATIONS_TABLE} WHERE exp <= ?`,
-                params: [nowEpochSeconds],
-            });
-            return result.changes;
-        });
-    },
-});
-/* ------------------------------------------------------------------ schema */
-/**
- * The control-plane chain, in the deployment's dialect.
- *
- * COMPILED from the SQLite source by `toPostgresDdl`, never hand-written: the
- * repo's standing law is that a Postgres chain is derived from the one an
- * author wrote and reviewed, so the two cannot drift a column apart. The
- * compiler refuses anything outside its closed grammar rather than guessing.
- */
-export const SAAS_CONTROL_PLANE_DDL = [
-    JOB_RESULTS_DDL,
-    JOB_RESULTS_INDEX,
-    REVOCATIONS_DDL,
-    REVOCATIONS_INDEX,
-    // D30's retention windows. It belongs in THIS chain rather than in the
-    // retention job's own startup for the reason the next docstring gives: a
-    // shared database has one schema owner, and the maintenance cron is not it.
-    RETENTION_POLICY_DDL,
-    // D36's marketing-copy overrides (+ the platform-admin-tenant row). Same
-    // owner: the documented migration step, not whichever node first serves it.
-    SITE_COPY_DDL,
-].map(toPostgresDdl);
-/**
- * Create the control-plane tables if they are absent.
- *
- * Deliberately a NAMED, explicit call rather than something the stores do on
- * construction. A shared database has one schema owner, and a library that
- * issued DDL on every process start would be N of them racing — and would make
- * a read-only credential (the correct one for an API node that only reads the
- * denylist) fail at boot. A deployment calls this once, from a migration step
- * or a host that knows it holds the privilege.
- */
-export const ensureSaasControlPlaneSchema = async (pool) => {
-    await pool.withConnection(async (connection) => {
-        for (const statement of SAAS_CONTROL_PLANE_DDL)
-            await connection.execute(statement, []);
-    });
-};
-//# sourceMappingURL=pooledControlStores.js.map

package/dist/server/drivers/pooledControlStores.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pooledControlStores.js","sourceRoot":"","sources":["../../../src/server/drivers/pooledControlStores.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EACL,6BAA6B,EAC7B,aAAa,GAGd,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,6BAA6B,EAC7B,eAAe,EACf,iBAAiB,GAElB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,IAAc,EAAqB,EAAE;IAC/E,MAAM,IAAI,GAAG,CAAI,EAA+C,EAAc,EAAE,CAC9E,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,6BAA6B,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACjG,OAAO;QACL,OAAO,EAAE,UAAU;QACnB,GAAG,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/D,GAAG,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/D,KAAK,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;KACpE,CAAC;AACJ,CAAC,CAAC;AAEF,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,IAAc,EAAkB,EAAE;IACvE,MAAM,IAAI,GAAG,CAAI,EAAyC,EAAc,EAAE,CACxE,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,6BAA6B,CAAC,6BAA6B,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhI,OAAO;QACL,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;KAC5D,CAAC;AACJ,CAAC,CAAC;AAEF,+EAA+E;AAE/E,MAAM,CAAC,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAElD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,8BAA8B,iBAAiB;;;EAG5E,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,oDAAoD,iBAAiB,OAAO,CAAC;AAE9G,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,IAAc,EAAwB,EAAE,CAAC,CAAC;IAChF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe;QAC5B,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;YAC7C,oEAAoE;YACpE,yEAAyE;YACzE,mEAAmE;YACnE,kDAAkD;YAClD,MAAM,6BAA6B,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC;gBACpD,GAAG,EAAE,eAAe,iBAAiB;0DACa,iBAAiB,qBAAqB;gBACxF,EAAE,EAAE,eAAe,iBAAiB;8DACkB,iBAAiB,qBAAqB;gBAC5F,MAAM,EAAE,CAAC,GAAG,EAAE,eAAe,CAAC;aAC/B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;YACpD,MAAM,GAAG,GAAG,MAAM,6BAA6B,CAAC,UAAU,CAAC,CAAC,GAAG,CAA2B;gBACxF,GAAG,EAAE,mBAAmB,iBAAiB,gBAAgB;gBACzD,MAAM,EAAE,CAAC,GAAG,CAAC;aACd,CAAC,CAAC;YACH,yEAAyE;YACzE,sCAAsC;YACtC,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,eAAe;QACzB,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;YACpD,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC;gBACnE,GAAG,EAAE,eAAe,iBAAiB,iBAAiB;gBACtD,MAAM,EAAE,CAAC,eAAe,CAAC;aAC1B,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,OAAO,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AAEH,+EAA+E;AAE/E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsB;IACvD,eAAe;IACf,iBAAiB;IACjB,eAAe;IACf,iBAAiB;IACjB,uEAAuE;IACvE,yEAAyE;IACzE,4EAA4E;IAC5E,oBAAoB;IACpB,yEAAyE;IACzE,4EAA4E;IAC5E,aAAa;CACd,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AAErB;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,EAAE,IAAc,EAAiB,EAAE;IAClF,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;QAC7C,KAAK,MAAM,SAAS,IAAI,sBAAsB;YAAE,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/server/drivers/pooledControlStores.pg.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=pooledControlStores.pg.test.d.ts.map

package/dist/server/drivers/pooledControlStores.pg.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pooledControlStores.pg.test.d.ts","sourceRoot":"","sources":["../../../src/server/drivers/pooledControlStores.pg.test.ts"],"names":[],"mappings":""}